on_dma_buf_release+0x40/0x40 [ 1105.407375] ? __might_fault+0x177/0x1b0 [ 1105.407386] ion_ioctl+0xea/0x1f0 [ 1105.407395] ? ion_query_heaps+0x360/0x360 [ 1105.407406] ? ion_query_heaps+0x360/0x360 [ 1105.407415] do_vfs_ioctl+0x75a/0xff0 [ 1105.407426] ? ioctl_preallocate+0x1a0/0x1a0 [ 1105.407434] ? lock_downgrade+0x740/0x740 [ 1105.407448] ? __fget+0x225/0x360 [ 1105.407456] ? do_vfs_ioctl+0xff0/0xff0 [ 1105.407468] ? security_file_ioctl+0x83/0xb0 [ 1105.407478] SyS_ioctl+0x7f/0xb0 [ 1105.407487] ? do_vfs_ioctl+0xff0/0xff0 [ 1105.426599] Node 1 active_anon:1084kB inactive_anon:49132kB active_file:8kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:1204kB dirty:0kB writeback:0kB shmem:49468kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1105.427506] do_syscall_64+0x1d5/0x640 [ 1105.431631] Node 0 [ 1105.435074] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1105.435083] RIP: 0033:0x466459 [ 1105.435088] RSP: 002b:00007feb59368188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1105.435098] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1105.435103] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000004 [ 1105.435107] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1105.435112] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1105.435118] R13: 00007ffe56f14bcf R14: 00007feb59368300 R15: 0000000000022000 [ 1105.439740] CPU: 0 PID: 25399 Comm: syz-executor.3 Not tainted 4.14.230-syzkaller #0 [ 1105.471879] 2717 [ 1105.481846] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1105.481851] Call Trace: [ 1105.481873] dump_stack+0x1b2/0x281 [ 1105.481887] warn_alloc.cold+0x96/0x1cc [ 1105.481899] ? zone_watermark_ok_safe+0x220/0x220 [ 1105.481910] ? usleep_range+0x130/0x130 [ 1105.481919] ? try_to_free_pages+0x23f/0x6e0 [ 1105.481930] ? _find_next_bit+0xdb/0x100 [ 1105.481941] ? run_timer_softirq+0x5a0/0x5a0 [ 1105.481958] __alloc_pages_nodemask+0x2127/0x2720 [ 1105.481974] ? lock_acquire+0x170/0x3f0 [ 1105.509169] DMA free:10960kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1105.518159] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1105.518171] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1105.518188] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1105.518201] ? retint_kernel+0x2d/0x2d [ 1105.518215] alloc_pages_current+0x155/0x260 [ 1105.518231] ion_page_pool_alloc+0x118/0x1b0 [ 1105.550827] 2718 [ 1105.554985] ion_system_heap_allocate+0x133/0x8c0 [ 1105.554997] ? ion_alloc+0x187/0x810 [ 1105.555009] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1105.555018] ? ion_system_contig_heap_create+0x130/0x130 [ 1105.555029] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1105.555040] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1105.555051] ion_alloc+0x204/0x810 [ 1105.555065] ? ion_dma_buf_release+0x40/0x40 [ 1105.555078] ? __might_fault+0x177/0x1b0 [ 1105.555090] ion_ioctl+0xea/0x1f0 [ 1105.587168] 2718 [ 1105.603552] ? ion_query_heaps+0x360/0x360 [ 1105.603565] ? ion_query_heaps+0x360/0x360 [ 1105.603576] do_vfs_ioctl+0x75a/0xff0 [ 1105.603587] ? ioctl_preallocate+0x1a0/0x1a0 [ 1105.603596] ? lock_downgrade+0x740/0x740 [ 1105.603610] ? __fget+0x225/0x360 [ 1105.603619] ? do_vfs_ioctl+0xff0/0xff0 [ 1105.603631] ? security_file_ioctl+0x83/0xb0 [ 1105.603641] SyS_ioctl+0x7f/0xb0 [ 1105.603649] ? do_vfs_ioctl+0xff0/0xff0 [ 1105.603660] do_syscall_64+0x1d5/0x640 [ 1105.603675] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1105.641265] lowmem_reserve[]: [ 1105.643457] RIP: 0033:0x466459 [ 1105.643463] RSP: 002b:00007f8a667e8188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1105.643472] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1105.643477] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000005 [ 1105.643482] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1105.643486] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1105.643492] R13: 00007ffd25ba1ddf R14: 00007f8a667e8300 R15: 0000000000022000 [ 1105.988782] syz-executor.1: [ 1106.051284] 2718 [ 1106.160858] page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1106.189409] Node 0 DMA32 free:59024kB min:36200kB low:45248kB high:54296kB active_anon:51376kB inactive_anon:124084kB active_file:40kB inactive_file:1424kB unevictable:0kB writepending:0kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:7776kB pagetables:3212kB bounce:0kB free_pcp:164kB local_pcp:60kB free_cma:0kB [ 1106.191601] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 1106.273085] CPU: 0 PID: 25386 Comm: syz-executor.1 Not tainted 4.14.230-syzkaller #0 [ 1106.279878] lowmem_reserve[]: [ 1106.280961] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1106.280965] Call Trace: [ 1106.280987] dump_stack+0x1b2/0x281 [ 1106.281001] warn_alloc.cold+0x96/0x1cc [ 1106.288601] 0 [ 1106.293576] ? zone_watermark_ok_safe+0x220/0x220 [ 1106.293600] __alloc_pages_nodemask+0x2127/0x2720 [ 1106.293617] ? lock_acquire+0x170/0x3f0 [ 1106.293632] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1106.293651] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1106.293663] ? __mutex_unlock_slowpath+0x75/0x770 [ 1106.293671] ? retint_kernel+0x2d/0x2d [ 1106.293685] alloc_pages_current+0x155/0x260 [ 1106.293698] ion_page_pool_alloc+0x118/0x1b0 [ 1106.305594] 0 [ 1106.305647] ion_system_heap_allocate+0x133/0x8c0 [ 1106.319310] 0 [ 1106.319352] ? _raw_spin_unlock+0x29/0x40 [ 1106.324385] 0 [ 1106.329795] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1106.329806] ? ion_system_contig_heap_create+0x130/0x130 [ 1106.329820] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1106.338528] 0 [ 1106.342926] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1106.342938] ion_alloc+0x27a/0x810 [ 1106.342952] ? ion_dma_buf_release+0x40/0x40 [ 1106.342965] ? __might_fault+0x177/0x1b0 [ 1106.349148] ion_ioctl+0xea/0x1f0 [ 1106.349162] ? ion_query_heaps+0x360/0x360 [ 1106.357835] Node 0 [ 1106.359902] ? ion_query_heaps+0x360/0x360 [ 1106.359916] do_vfs_ioctl+0x75a/0xff0 [ 1106.361734] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1106.366616] ? ioctl_preallocate+0x1a0/0x1a0 [ 1106.366627] ? lock_downgrade+0x740/0x740 [ 1106.366641] ? __fget+0x225/0x360 [ 1106.366649] ? do_vfs_ioctl+0xff0/0xff0 [ 1106.366661] ? security_file_ioctl+0x83/0xb0 [ 1106.366671] SyS_ioctl+0x7f/0xb0 [ 1106.366678] ? do_vfs_ioctl+0xff0/0xff0 [ 1106.366688] do_syscall_64+0x1d5/0x640 [ 1106.366700] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1106.366707] RIP: 0033:0x466459 [ 1106.366711] RSP: 002b:00007feb59368188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1106.366721] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1106.366726] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000004 [ 1106.366730] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1106.366734] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1106.366740] R13: 00007ffe56f14bcf R14: 00007feb59368300 R15: 0000000000022000 [ 1106.370346] warn_alloc_show_mem: 3 callbacks suppressed [ 1106.370350] Mem-Info: [ 1106.372478] lowmem_reserve[]: [ 1106.381867] active_anon:13115 inactive_anon:43304 isolated_anon:12 [ 1106.381867] active_file:21 inactive_file:0 isolated_file:10 [ 1106.381867] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1106.381867] slab_reclaimable:12423 slab_unreclaimable:115992 [ 1106.381867] mapped:52629 shmem:43796 pagetables:814 bounce:0 [ 1106.381867] free:13934 free_pcp:244 free_cma:0 [ 1106.385112] 0 [ 1106.390659] Node 0 active_anon:51376kB inactive_anon:124084kB active_file:60kB inactive_file:0kB unevictable:0kB isolated(anon):48kB isolated(file):40kB mapped:209312kB dirty:0kB writeback:0kB shmem:125716kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1106.404242] 0 [ 1106.409746] Node 1 active_anon:1084kB inactive_anon:49132kB active_file:24kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:1204kB dirty:0kB writeback:0kB shmem:49468kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1106.410874] 0 0 [ 1106.414708] Node 0 DMA free:10960kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1106.414728] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1106.414745] Node 0 DMA32 free:17876kB min:36200kB low:45248kB high:54296kB active_anon:51376kB inactive_anon:124084kB active_file:40kB inactive_file:392kB unevictable:0kB writepending:0kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:7776kB pagetables:3212kB bounce:0kB free_pcp:20kB local_pcp:0kB free_cma:0kB [ 1106.414770] lowmem_reserve[]: [ 1106.450750] 0 [ 1106.456783] 0 [ 1106.467345] 0 [ 1106.467970] Node 1 [ 1106.471841] 0 [ 1106.477079] Normal free:26788kB min:53696kB low:67120kB high:80544kB active_anon:1084kB inactive_anon:49132kB active_file:8kB inactive_file:464kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:96kB pagetables:44kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1106.480989] 0 [ 1106.488006] lowmem_reserve[]: 0 0 0 0 0 [ 1106.488028] Node 0 DMA: 2*4kB (E) 0*8kB 13*16kB (UE) 13*32kB (UE) 1*64kB (E) 2*128kB (ME) 3*256kB (UME) 2*512kB (ME) 2*1024kB (ME) 3*2048kB (UM) [ 1106.500034] 0 [ 1106.502664] 0*4096kB [ 1106.517334] = 10936kB [ 1106.531682] Node 0 [ 1106.548770] 0 [ 1106.574505] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1106.599125] 2717 [ 1106.604734] Node 0 [ 1106.628065] 2718 2718 2718 [ 1106.628079] Node 0 DMA32 free:17876kB min:36200kB low:45248kB high:54296kB active_anon:51376kB inactive_anon:124084kB active_file:40kB inactive_file:392kB unevictable:0kB writepending:0kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:7776kB pagetables:3212kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1106.628106] lowmem_reserve[]: [ 1106.631095] lowmem_reserve[]: [ 1106.678637] 0 [ 1106.692227] DMA32: [ 1106.716792] 0 [ 1106.732582] 850*4kB [ 1106.737577] 0 [ 1106.751752] (ME) [ 1106.757876] 0 [ 1106.759263] 142*8kB [ 1106.760503] 0 [ 1106.785473] (UME) 121*16kB (ME) 366*32kB (UME) 1*64kB (U) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18248kB [ 1106.785521] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB [ 1106.802733] 0 [ 1106.841263] 0*512kB [ 1106.841942] 0 [ 1106.849631] 0*1024kB [ 1106.856730] 0 [ 1106.872195] 0 0 [ 1106.876034] Node 1 Normal free:26788kB min:53696kB low:67120kB high:80544kB active_anon:1084kB inactive_anon:49132kB active_file:8kB inactive_file:4kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:96kB pagetables:44kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1106.882724] 0*2048kB [ 1106.904174] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1106.904194] lowmem_reserve[]: 0 0 0 0 0 [ 1106.904214] Node 1 Normal free:26788kB min:53696kB low:67120kB high:80544kB active_anon:1084kB inactive_anon:49132kB active_file:8kB inactive_file:4kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:96kB pagetables:44kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1106.904237] lowmem_reserve[]: [ 1106.916094] 0*4096kB [ 1106.935300] lowmem_reserve[]: [ 1106.954347] = 0kB [ 1106.964335] 0 0 0 0 0 [ 1106.964356] Node 0 DMA: 2*4kB (E) 0*8kB 13*16kB (UE) 13*32kB (UE) 1*64kB (E) 2*128kB (ME) 3*256kB (UME) 2*512kB (ME) 2*1024kB (ME) 3*2048kB (UM) 0*4096kB = 10936kB [ 1106.979462] Node 1 [ 1106.992440] 0 0 0 0 0 [ 1106.992460] Node 0 DMA: 2*4kB (E) 0*8kB 13*16kB (UE) 13*32kB (UE) 1*64kB (E) 2*128kB (ME) 3*256kB (UME) 2*512kB (ME) 2*1024kB (ME) 3*2048kB (UM) 0*4096kB = 10936kB [ 1107.013045] Node 0 DMA32: 850*4kB (ME) 142*8kB (UME) 121*16kB (ME) 366*32kB (UME) 1*64kB (U) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18248kB [ 1107.023246] Normal: 75*4kB (M) 344*8kB (UME) 470*16kB (UM) 352*32kB (UM) 24*64kB (M) 11*128kB (UM) 2*256kB (M) 3*512kB (M) 0*1024kB 0*2048kB 0*4096kB [ 1107.027093] Node 0 Normal: [ 1107.040796] Node 0 DMA32: 850*4kB (ME) 142*8kB (UME) 121*16kB (ME) 366*32kB (UME) 1*64kB (U) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18248kB [ 1107.046016] = 26828kB [ 1107.060744] 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1107.070280] Node 1 Normal: 75*4kB (M) 344*8kB (UME) [ 1107.070311] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1107.070319] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1107.075434] 470*16kB (UM) 352*32kB (UM) 24*64kB (M) 11*128kB (UM) 2*256kB (M) 3*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 26828kB [ 1107.075493] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1107.075502] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1107.084588] warn_alloc: 2 callbacks suppressed [ 1107.084591] syz-executor.3: [ 1107.092987] Node 0 [ 1107.116914] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1107.121944] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1107.133280] page allocation failure: order:0 [ 1107.140628] Normal: [ 1107.153879] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1107.163979] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1107.164884] 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1107.183809] 43820 total pagecache pages [ 1107.187333] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1107.187810] 0 pages in swap cache [ 1107.199083] syz-executor.5: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1107.203567] 43820 total pagecache pages [ 1107.210961] Node 1 Normal: 75*4kB (M) 344*8kB (UME) 470*16kB (UM) 352*32kB (UM) 24*64kB (M) 11*128kB (UM) 2*256kB (M) 3*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 26828kB [ 1107.227158] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 1107.230027] Swap cache stats: add 0, delete 0, find 0/0 [ 1107.240497] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 1107.247933] CPU: 1 PID: 25397 Comm: syz-executor.5 Not tainted 4.14.230-syzkaller #0 [ 1107.252500] 0 pages in swap cache [ 1107.255815] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1107.255820] Call Trace: [ 1107.255839] dump_stack+0x1b2/0x281 [ 1107.255853] warn_alloc.cold+0x96/0x1cc [ 1107.255866] ? zone_watermark_ok_safe+0x220/0x220 [ 1107.255879] ? usleep_range+0x130/0x130 [ 1107.259332] Swap cache stats: add 0, delete 0, find 0/0 [ 1107.268684] ? _find_next_bit+0xdb/0x100 [ 1107.268695] ? run_timer_softirq+0x5a0/0x5a0 [ 1107.268712] __alloc_pages_nodemask+0x2127/0x2720 [ 1107.268729] ? lock_acquire+0x170/0x3f0 [ 1107.292742] Free swap = 0kB [ 1107.293015] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1107.297048] Total swap = 0kB [ 1107.301452] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1107.322721] 2097051 pages RAM [ 1107.325539] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1107.328612] 0 pages HighMem/MovableOnly [ 1107.334048] ? retint_kernel+0x2d/0x2d [ 1107.334064] alloc_pages_current+0x155/0x260 [ 1107.334081] ion_page_pool_alloc+0x118/0x1b0 [ 1107.350690] ion_system_heap_allocate+0x133/0x8c0 [ 1107.352713] 363848 pages reserved [ 1107.355527] ? _raw_spin_unlock+0x29/0x40 [ 1107.358973] 0 pages cma reserved [ 1107.363118] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1107.363127] ? ion_system_contig_heap_create+0x130/0x130 [ 1107.363138] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1107.363152] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1107.382720] Out of memory (oom_kill_allocating_task): Kill process 7640 (cron) score 0 or sacrifice child [ 1107.386708] ion_alloc+0x27a/0x810 [ 1107.399943] ? ion_dma_buf_release+0x40/0x40 [ 1107.402739] Killed process 7640 (cron) total-vm:27996kB, anon-rss:248kB, file-rss:0kB, shmem-rss:0kB [ 1107.404345] ? __might_fault+0x177/0x1b0 [ 1107.417675] ion_ioctl+0xea/0x1f0 [ 1107.421124] ? ion_query_heaps+0x360/0x360 [ 1107.423421] oom_reaper: reaped process 7640 (cron), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1107.425352] ? ion_query_heaps+0x360/0x360 [ 1107.438597] do_vfs_ioctl+0x75a/0xff0 [ 1107.442391] ? ioctl_preallocate+0x1a0/0x1a0 [ 1107.446790] ? lock_downgrade+0x740/0x740 [ 1107.450935] ? __fget+0x225/0x360 [ 1107.454377] ? do_vfs_ioctl+0xff0/0xff0 [ 1107.458342] ? security_file_ioctl+0x83/0xb0 [ 1107.462738] SyS_ioctl+0x7f/0xb0 [ 1107.466109] ? do_vfs_ioctl+0xff0/0xff0 [ 1107.470074] do_syscall_64+0x1d5/0x640 [ 1107.473957] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1107.479155] RIP: 0033:0x466459 [ 1107.482332] RSP: 002b:00007f2be0a5d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1107.490029] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1107.497388] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000004 [ 1107.504645] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1107.511905] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1107.519181] R13: 00007ffff2073daf R14: 00007f2be0a5d300 R15: 0000000000022000 [ 1107.526475] CPU: 0 PID: 25399 Comm: syz-executor.3 Not tainted 4.14.230-syzkaller #0 [ 1107.529226] syz-fuzzer invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask= [ 1107.534359] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1107.534364] Call Trace: [ 1107.534382] dump_stack+0x1b2/0x281 [ 1107.534400] warn_alloc.cold+0x96/0x1cc [ 1107.544286] Free swap = 0kB [ 1107.553463] ? zone_watermark_ok_safe+0x220/0x220 [ 1107.553474] ? usleep_range+0x130/0x130 [ 1107.553498] ? queue_work_on+0x10d/0x1d0 [ 1107.553512] ? _find_next_bit+0xdb/0x100 [ 1107.556092] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1107.559689] ? run_timer_softirq+0x5a0/0x5a0 [ 1107.563734] (null) [ 1107.566652] __alloc_pages_nodemask+0x2127/0x2720 [ 1107.571476] , order=0, oom_score_adj=0 [ 1107.575444] ? lock_acquire+0x170/0x3f0 [ 1107.575460] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1107.575470] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1107.575489] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1107.579535] Total swap = 0kB [ 1107.583598] alloc_pages_current+0x155/0x260 [ 1107.583611] ion_page_pool_alloc+0x118/0x1b0 [ 1107.583621] ion_system_heap_allocate+0x133/0x8c0 [ 1107.583632] ? _raw_spin_unlock+0x29/0x40 [ 1107.583643] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1107.592486] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1107.596868] ? ion_system_contig_heap_create+0x130/0x130 [ 1107.596879] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1107.596889] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1107.596903] ion_alloc+0x27a/0x810 [ 1107.599062] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1107.603892] ? ion_dma_buf_release+0x40/0x40 [ 1107.603905] ? __might_fault+0x177/0x1b0 [ 1107.603916] ion_ioctl+0xea/0x1f0 [ 1107.603925] ? ion_query_heaps+0x360/0x360 [ 1107.603937] ? ion_query_heaps+0x360/0x360 [ 1107.607904] 2097051 pages RAM [ 1107.611868] do_vfs_ioctl+0x75a/0xff0 [ 1107.616739] syz-fuzzer cpuset= [ 1107.621169] ? ioctl_preallocate+0x1a0/0x1a0 [ 1107.626646] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1107.629606] ? lock_downgrade+0x740/0x740 [ 1107.634022] 0 pages HighMem/MovableOnly [ 1107.638424] ? __fget+0x225/0x360 [ 1107.643657] 43820 total pagecache pages [ 1107.647372] ? do_vfs_ioctl+0xff0/0xff0 [ 1107.652296] 0 pages in swap cache [ 1107.660854] ? security_file_ioctl+0x83/0xb0 [ 1107.660864] SyS_ioctl+0x7f/0xb0 [ 1107.660872] ? do_vfs_ioctl+0xff0/0xff0 [ 1107.660883] do_syscall_64+0x1d5/0x640 [ 1107.660897] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1107.660904] RIP: 0033:0x466459 [ 1107.660909] RSP: 002b:00007f8a667e8188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1107.660918] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1107.660924] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000005 [ 1107.660932] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1107.666415] / [ 1107.671366] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1107.676237] 363848 pages reserved [ 1107.679709] R13: 00007ffd25ba1ddf R14: 00007f8a667e8300 R15: 0000000000022000 [ 1107.688604] mems_allowed=0-1 [ 1107.704949] cron: [ 1107.708940] 0 pages cma reserved [ 1107.712021] page allocation failure: order:0, mode:0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask= [ 1107.715860] Swap cache stats: add 0, delete 0, find 0/0 [ 1107.730457] (null) [ 1107.740386] Free swap = 0kB [ 1107.783015] cron cpuset= [ 1107.788412] CPU: 1 PID: 7975 Comm: syz-fuzzer Not tainted 4.14.230-syzkaller #0 [ 1107.867800] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1107.877140] Call Trace: [ 1107.879726] dump_stack+0x1b2/0x281 [ 1107.883356] dump_header+0x178/0x82f [ 1107.887062] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1107.892153] ? ___ratelimit+0x2cd/0x530 [ 1107.896119] oom_kill_process.cold+0x10/0xa40 [ 1107.900612] out_of_memory+0xe3e/0x1190 [ 1107.904608] ? oom_killer_disable+0x1c0/0x1c0 [ 1107.909108] ? mutex_trylock+0x152/0x1a0 [ 1107.913175] __alloc_pages_nodemask+0x23e1/0x2720 [ 1107.918018] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1107.922864] alloc_pages_current+0x155/0x260 [ 1107.927260] filemap_fault+0x11a1/0x1ad0 [ 1107.931320] ext4_filemap_fault+0x84/0xb0 [ 1107.935456] __do_fault+0xfa/0x380 [ 1107.938985] __handle_mm_fault+0x2497/0x4620 [ 1107.943383] ? vm_insert_page+0x7c0/0x7c0 [ 1107.947518] ? lock_downgrade+0x740/0x740 [ 1107.951662] ? mark_held_locks+0xa6/0xf0 [ 1107.955712] handle_mm_fault+0x455/0x9c0 [ 1107.959766] __do_page_fault+0x549/0xad0 [ 1107.963837] ? spurious_fault+0x640/0x640 [ 1107.967990] ? do_page_fault+0x60/0x500 [ 1107.971955] ? page_fault+0x2f/0x50 [ 1107.975570] page_fault+0x45/0x50 [ 1107.979022] RIP: 0000:0x940aec [ 1107.982197] RSP: 2e000:000000c00003dec8 EFLAGS: 0043b6a0 [ 1107.986517] Total swap = 0kB [ 1107.999162] 2097051 pages RAM [ 1107.999173] / [ 1108.002261] 0 pages HighMem/MovableOnly [ 1108.005586] mems_allowed=0-1 [ 1108.020369] CPU: 0 PID: 7640 Comm: cron Not tainted 4.14.230-syzkaller #0 [ 1108.024672] 363848 pages reserved [ 1108.027323] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1108.030764] 0 pages cma reserved [ 1108.040112] Call Trace: [ 1108.040134] dump_stack+0x1b2/0x281 [ 1108.040147] warn_alloc.cold+0x96/0x1cc [ 1108.040157] ? zone_watermark_ok_safe+0x220/0x220 [ 1108.040166] ? usleep_range+0x130/0x130 [ 1108.040177] ? try_to_free_pages+0x23f/0x6e0 [ 1108.045103] Mem-Info: [ 1108.046112] ? _find_next_bit+0xdb/0x100 [ 1108.049730] active_anon:13066 inactive_anon:43304 isolated_anon:0 [ 1108.049730] active_file:156 inactive_file:187 isolated_file:24 [ 1108.049730] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1108.049730] slab_reclaimable:12423 slab_unreclaimable:115970 [ 1108.049730] mapped:52814 shmem:43796 pagetables:814 bounce:0 [ 1108.049730] free:13893 free_pcp:43 free_cma:0 [ 1108.053693] ? run_timer_softirq+0x5a0/0x5a0 [ 1108.053708] __alloc_pages_nodemask+0x2127/0x2720 [ 1108.053730] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1108.053754] alloc_pages_current+0x155/0x260 [ 1108.053767] filemap_fault+0x11a1/0x1ad0 [ 1108.058599] Node 0 active_anon:51180kB inactive_anon:124084kB active_file:40kB inactive_file:40kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:209212kB dirty:0kB writeback:0kB shmem:125716kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1108.062557] ext4_filemap_fault+0x84/0xb0 [ 1108.066988] Node 1 active_anon:1084kB inactive_anon:49132kB active_file:584kB inactive_file:708kB unevictable:0kB isolated(anon):0kB isolated(file):96kB mapped:2044kB dirty:0kB writeback:0kB shmem:49468kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1108.069327] __do_fault+0xfa/0x380 [ 1108.073422] Node 0 [ 1108.106767] __handle_mm_fault+0x2497/0x4620 [ 1108.106777] ? vm_insert_page+0x7c0/0x7c0 [ 1108.106785] ? free_object+0xe4/0x240 [ 1108.106801] ? mark_held_locks+0xa6/0xf0 [ 1108.106812] handle_mm_fault+0x455/0x9c0 [ 1108.106824] __do_page_fault+0x549/0xad0 [ 1108.106835] ? spurious_fault+0x640/0x640 [ 1108.106842] ? do_page_fault+0x60/0x500 [ 1108.106850] ? page_fault+0x2f/0x50 [ 1108.106856] page_fault+0x45/0x50 [ 1108.106862] RIP: bac79fb0: (null) [ 1108.106866] RSP: fffffeb0:0000000000000002 EFLAGS: 00000000 [ 1108.114010] Mem-Info: [ 1108.116147] DMA free:10936kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1108.120935] active_anon:13054 inactive_anon:43304 isolated_anon:0 [ 1108.120935] active_file:160 inactive_file:187 isolated_file:24 [ 1108.120935] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1108.120935] slab_reclaimable:12423 slab_unreclaimable:115970 [ 1108.120935] mapped:52854 shmem:43796 pagetables:814 bounce:0 [ 1108.120935] free:13936 free_pcp:51 free_cma:0 [ 1108.125404] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1108.125427] Node 0 DMA32 free:18060kB min:36200kB low:45248kB high:54296kB active_anon:51132kB inactive_anon:124084kB active_file:40kB inactive_file:40kB unevictable:0kB writepending:0kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:7776kB pagetables:3212kB bounce:0kB free_pcp:40kB local_pcp:8kB free_cma:0kB [ 1108.125445] lowmem_reserve[]: 0 0 0 0 0 [ 1108.125466] Node 0 [ 1108.133292] Node 0 active_anon:51132kB inactive_anon:124084kB active_file:40kB inactive_file:40kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:209212kB dirty:0kB writeback:0kB shmem:125716kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1108.157939] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1108.165224] Node 1 active_anon:1084kB inactive_anon:49132kB active_file:600kB inactive_file:708kB unevictable:0kB isolated(anon):0kB isolated(file):96kB mapped:2204kB dirty:0kB writeback:0kB shmem:49468kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1108.190117] lowmem_reserve[]: [ 1108.245353] Node 0 [ 1108.247249] 0 [ 1108.346588] DMA free:11000kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1108.365499] 0 [ 1108.466748] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1108.486793] Node 0 DMA32 free:165384kB min:36200kB low:45248kB high:54296kB active_anon:51132kB inactive_anon:124084kB active_file:40kB inactive_file:40kB unevictable:0kB writepending:0kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:7776kB pagetables:3212kB bounce:0kB free_pcp:1388kB local_pcp:720kB free_cma:0kB [ 1108.546747] lowmem_reserve[]: 0 0 0 0 0 [ 1108.550796] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1108.616697] lowmem_reserve[]: 0 0 0 0 0 [ 1108.620731] Node 1 Normal free:752800kB min:53696kB low:67120kB high:80544kB active_anon:1084kB inactive_anon:49132kB active_file:600kB inactive_file:708kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:96kB pagetables:44kB bounce:0kB free_pcp:40kB local_pcp:40kB free_cma:0kB [ 1108.652742] 0 0 0 [ 1108.654923] Node 1 Normal free:752800kB min:53696kB low:67120kB high:80544kB active_anon:1084kB inactive_anon:49132kB active_file:600kB inactive_file:708kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:96kB pagetables:44kB bounce:0kB free_pcp:40kB local_pcp:0kB free_cma:0kB [ 1108.696676] lowmem_reserve[]: 0 0 0 0 0 [ 1108.700709] Node 0 DMA: 2*4kB (E) 0*8kB 13*16kB (UE) 13*32kB (UE) 3*64kB (UE) 2*128kB (ME) 3*256kB (UME) 2*512kB (ME) 2*1024kB (ME) 3*2048kB (UM) 0*4096kB = 11064kB [ 1108.712738] lowmem_reserve[]: 0 0 0 0 0 [ 1108.719638] Node 0 DMA: 2*4kB (E) 0*8kB 13*16kB (UE) 13*32kB (UE) 3*64kB (UE) 2*128kB (ME) 3*256kB (UME) 2*512kB (ME) 2*1024kB (ME) 3*2048kB (UM) 0*4096kB = 11064kB [ 1108.732742] Node 0 DMA32: 719*4kB (UME) 149*8kB (UME) 123*16kB (UME) 8*32kB (ME) 1*64kB (U) 203*128kB (U) 50*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 45140kB [ 1108.782749] Node 0 DMA32: 719*4kB (UME) 149*8kB (UME) 123*16kB (UME) 8*32kB (ME) 1*64kB (U) 203*128kB (U) 50*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 45140kB [ 1108.786563] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1108.822780] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1108.847191] Node 1 Normal: 19*4kB (UM) 12*8kB (UME) 16*16kB (M) 2*32kB (M) 1157*64kB (UM) 1006*128kB (UM) 204*256kB (UM) 6*512kB (UM) 83*1024kB (U) 27*2048kB (U) 0*4096kB = 398892kB [ 1108.872738] Node 1 Normal: 19*4kB (UM) 12*8kB (UME) 16*16kB (M) 3*32kB (UM) 607*64kB (UM) 1006*128kB (UM) 204*256kB (UM) 6*512kB (UM) 83*1024kB (U) 27*2048kB (U) 0*4096kB = 363724kB [ 1108.905343] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1108.925859] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1108.935926] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1108.946982] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1108.957229] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1108.968502] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1108.978761] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1108.990609] 44268 total pagecache pages [ 1108.995919] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1109.006809] 0 pages in swap cache [ 1109.010278] Swap cache stats: add 0, delete 0, find 0/0 [ 1109.017018] 44276 total pagecache pages [ 1109.020998] 0 pages in swap cache [ 1109.027046] Free swap = 0kB [ 1109.030065] Total swap = 0kB [ 1109.034250] Swap cache stats: add 0, delete 0, find 0/0 [ 1109.039631] Free swap = 0kB [ 1109.042650] Total swap = 0kB [ 1109.061689] 2097051 pages RAM [ 1109.066873] 0 pages HighMem/MovableOnly [ 1109.070847] 363848 pages reserved [ 1109.092961] 2097051 pages RAM [ 1109.096092] 0 pages HighMem/MovableOnly [ 1109.100055] 363848 pages reserved [ 1109.105216] 0 pages cma reserved [ 1109.129436] 0 pages cma reserved [ 1109.132871] Out of memory (oom_kill_allocating_task): Kill process 7975 (syz-fuzzer) score 0 or sacrifice child [ 1109.136435] syz-executor.0: [ 1109.143186] syz-executor.1: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1109.147435] Killed process 23606 (syz-executor.0) total-vm:84924kB, anon-rss:64kB, file-rss:0kB, shmem-rss:0kB [ 1109.166180] page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1109.185125] in:imklog invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1109.203778] in:imklog cpuset=/ mems_allowed=0-1 [ 1109.207051] syz-executor.1 cpuset= [ 1109.208477] CPU: 0 PID: 24729 Comm: in:imklog Not tainted 4.14.230-syzkaller #0 [ 1109.208479] / mems_allowed=0-1 [ 1109.212002] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1109.212008] Call Trace: [ 1109.229822] syz-executor.0 cpuset= [ 1109.231974] dump_stack+0x1b2/0x281 [ 1109.237187] / [ 1109.238065] dump_header+0x178/0x82f [ 1109.241669] mems_allowed=0-1 [ 1109.243368] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1109.243378] ? ___ratelimit+0x2cd/0x530 [ 1109.243389] oom_kill_process.cold+0x10/0xa40 [ 1109.243407] out_of_memory+0xe3e/0x1190 [ 1109.243421] ? oom_killer_disable+0x1c0/0x1c0 [ 1109.243429] ? mutex_trylock+0x152/0x1a0 [ 1109.243440] __alloc_pages_nodemask+0x23e1/0x2720 [ 1109.243462] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1109.285944] alloc_pages_current+0x155/0x260 [ 1109.290375] filemap_fault+0x11a1/0x1ad0 [ 1109.294465] ext4_filemap_fault+0x84/0xb0 [ 1109.298614] __do_fault+0xfa/0x380 [ 1109.302167] __handle_mm_fault+0x2497/0x4620 [ 1109.306591] ? vm_insert_page+0x7c0/0x7c0 [ 1109.310734] ? lock_downgrade+0x740/0x740 [ 1109.314882] ? mark_held_locks+0xa6/0xf0 [ 1109.318938] handle_mm_fault+0x455/0x9c0 [ 1109.322998] __do_page_fault+0x549/0xad0 [ 1109.327061] ? spurious_fault+0x640/0x640 [ 1109.331204] ? do_page_fault+0x60/0x500 [ 1109.335173] ? page_fault+0x2f/0x50 [ 1109.338793] page_fault+0x45/0x50 [ 1109.342232] RIP: bbf55da3:0x1f9f [ 1109.345584] RSP: bbf554b8:0000000000000004 EFLAGS: 7fe2bbf55da0 [ 1109.350779] CPU: 1 PID: 25386 Comm: syz-executor.1 Not tainted 4.14.230-syzkaller #0 [ 1109.353233] Mem-Info: [ 1109.356851] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1109.364778] active_anon:13054 inactive_anon:43304 isolated_anon:0 [ 1109.364778] active_file:22 inactive_file:16 isolated_file:0 [ 1109.364778] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1109.364778] slab_reclaimable:12420 slab_unreclaimable:115939 [ 1109.364778] mapped:52604 shmem:43796 pagetables:814 bounce:0 [ 1109.364778] free:13759 free_pcp:116 free_cma:0 [ 1109.367131] Call Trace: [ 1109.376535] Node 0 active_anon:51132kB inactive_anon:124084kB active_file:40kB inactive_file:40kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:209212kB dirty:0kB writeback:0kB shmem:125716kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1109.409757] dump_stack+0x1b2/0x281 [ 1109.409772] warn_alloc.cold+0x96/0x1cc [ 1109.409784] ? zone_watermark_ok_safe+0x220/0x220 [ 1109.409794] ? usleep_range+0x130/0x130 [ 1109.409806] ? try_to_free_pages+0x23f/0x6e0 [ 1109.412403] Node 1 active_anon:1084kB inactive_anon:49132kB active_file:48kB inactive_file:24kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:1204kB dirty:0kB writeback:0kB shmem:49468kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1109.440241] ? _find_next_bit+0xdb/0x100 [ 1109.440253] ? run_timer_softirq+0x5a0/0x5a0 [ 1109.440269] __alloc_pages_nodemask+0x2127/0x2720 [ 1109.440291] ? lock_acquire+0x170/0x3f0 [ 1109.443941] Node 0 [ 1109.447878] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1109.452740] DMA free:10972kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1109.456658] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1109.461038] lowmem_reserve[]: [ 1109.488107] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1109.488127] alloc_pages_current+0x155/0x260 [ 1109.488145] ion_page_pool_alloc+0x118/0x1b0 [ 1109.492194] 0 [ 1109.496581] ion_system_heap_allocate+0x133/0x8c0 [ 1109.496593] ? _raw_spin_unlock+0x29/0x40 [ 1109.496601] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1109.496610] ? ion_system_contig_heap_create+0x130/0x130 [ 1109.496624] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1109.501553] 2717 [ 1109.505526] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1109.505537] ion_alloc+0x27a/0x810 [ 1109.505553] ? ion_dma_buf_release+0x40/0x40 [ 1109.507770] 2718 [ 1109.512598] ? __might_fault+0x177/0x1b0 [ 1109.538127] 2718 [ 1109.542576] ion_ioctl+0xea/0x1f0 [ 1109.545683] 2718 [ 1109.551083] ? ion_query_heaps+0x360/0x360 [ 1109.559858] ? ion_query_heaps+0x360/0x360 [ 1109.561658] Node 0 [ 1109.566489] do_vfs_ioctl+0x75a/0xff0 [ 1109.566502] ? ioctl_preallocate+0x1a0/0x1a0 [ 1109.566512] ? lock_downgrade+0x740/0x740 [ 1109.566525] ? __fget+0x225/0x360 [ 1109.570666] DMA32 free:17588kB min:36200kB low:45248kB high:54296kB active_anon:51132kB inactive_anon:124084kB active_file:40kB inactive_file:40kB unevictable:0kB writepending:0kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:7776kB pagetables:3212kB bounce:0kB free_pcp:380kB local_pcp:128kB free_cma:0kB [ 1109.575580] ? do_vfs_ioctl+0xff0/0xff0 [ 1109.575592] ? security_file_ioctl+0x83/0xb0 [ 1109.575602] SyS_ioctl+0x7f/0xb0 [ 1109.575611] ? do_vfs_ioctl+0xff0/0xff0 [ 1109.581040] lowmem_reserve[]: [ 1109.586041] do_syscall_64+0x1d5/0x640 [ 1109.586057] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1109.586066] RIP: 0033:0x466459 [ 1109.588126] 0 [ 1109.592946] RSP: 002b:00007feb59368188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1109.592956] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1109.592961] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000004 [ 1109.592966] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1109.592971] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1109.592978] R13: 00007ffe56f14bcf R14: 00007feb59368300 R15: 0000000000022000 [ 1109.596500] 0 [ 1109.604295] CPU: 1 PID: 25413 Comm: syz-executor.0 Not tainted 4.14.230-syzkaller #0 [ 1109.623389] 0 [ 1109.625403] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1109.629184] 0 [ 1109.633569] Call Trace: [ 1109.633590] dump_stack+0x1b2/0x281 [ 1109.633606] warn_alloc.cold+0x96/0x1cc [ 1109.637733] 0 [ 1109.641172] ? zone_watermark_ok_safe+0x220/0x220 [ 1109.673524] __alloc_pages_nodemask+0x2127/0x2720 [ 1109.673536] ? ___preempt_schedule+0x16/0x18 [ 1109.677943] Node 0 [ 1109.681293] ? lock_acquire+0x170/0x3f0 [ 1109.685272] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1109.688330] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1109.692188] lowmem_reserve[]: [ 1109.697755] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1109.697768] ? __mutex_unlock_slowpath+0x75/0x770 [ 1109.697783] alloc_pages_current+0x155/0x260 [ 1109.700953] 0 [ 1109.702743] ion_page_pool_alloc+0x118/0x1b0 [ 1109.702754] ion_system_heap_allocate+0x133/0x8c0 [ 1109.702766] ? _raw_spin_unlock+0x29/0x40 [ 1109.710450] 0 [ 1109.717710] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1109.717720] ? ion_system_contig_heap_create+0x130/0x130 [ 1109.717731] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1109.717744] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1109.725013] 0 [ 1109.732264] ion_alloc+0x27a/0x810 [ 1109.739566] 0 [ 1109.746798] ? ion_dma_buf_release+0x40/0x40 [ 1109.746812] ? __might_fault+0x177/0x1b0 [ 1109.748592] 0 [ 1109.756476] ion_ioctl+0xea/0x1f0 [ 1109.756485] ? ion_query_heaps+0x360/0x360 [ 1109.756498] ? ion_query_heaps+0x360/0x360 [ 1109.767620] do_vfs_ioctl+0x75a/0xff0 [ 1109.767632] ? ioctl_preallocate+0x1a0/0x1a0 [ 1109.767644] ? lock_downgrade+0x740/0x740 [ 1109.769541] Node 1 [ 1109.772113] ? __fget+0x225/0x360 [ 1109.775765] Normal free:26476kB min:53696kB low:67120kB high:80544kB active_anon:1084kB inactive_anon:49132kB active_file:96kB inactive_file:0kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:96kB pagetables:44kB bounce:0kB free_pcp:84kB local_pcp:0kB free_cma:0kB [ 1109.779686] ? do_vfs_ioctl+0xff0/0xff0 [ 1109.781488] lowmem_reserve[]: [ 1109.786319] ? security_file_ioctl+0x83/0xb0 [ 1109.786330] SyS_ioctl+0x7f/0xb0 [ 1109.786340] ? do_vfs_ioctl+0xff0/0xff0 [ 1109.791161] 0 [ 1109.795554] do_syscall_64+0x1d5/0x640 [ 1109.795570] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1109.795579] RIP: 0033:0x466459 [ 1109.797797] 0 [ 1109.801748] RSP: 002b:00007f7d258b5188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1109.826687] 0 [ 1109.831480] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1109.834588] 0 [ 1109.839990] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000004 [ 1109.839997] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1109.844841] 0 [ 1109.849210] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1109.855398] R13: 00007ffc8c298a0f R14: 00007f7d258b5300 R15: 0000000000022000 [ 1109.858359] warn_alloc_show_mem: 2 callbacks suppressed [ 1109.858362] Mem-Info: [ 1109.860254] Node 0 [ 1109.875026] active_anon:13054 inactive_anon:43304 isolated_anon:0 [ 1109.875026] active_file:22 inactive_file:16 isolated_file:0 [ 1109.875026] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1109.875026] slab_reclaimable:12420 slab_unreclaimable:115939 [ 1109.875026] mapped:52604 shmem:43796 pagetables:814 bounce:0 [ 1109.875026] free:13759 free_pcp:118 free_cma:0 [ 1109.894334] DMA: [ 1109.928776] Node 0 active_anon:51132kB inactive_anon:124084kB active_file:40kB inactive_file:40kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:209212kB dirty:0kB writeback:0kB shmem:125716kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1109.963776] 3*4kB [ 1110.033410] Node 1 active_anon:1084kB inactive_anon:49132kB active_file:48kB inactive_file:1024kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:1904kB dirty:0kB writeback:0kB shmem:49468kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1110.056132] (UE) [ 1110.096956] Node 0 [ 1110.123214] 0*8kB 11*16kB (UE) 13*32kB (UE) 2*64kB (UE) 2*128kB (ME) 3*256kB (UME) 2*512kB (ME) 2*1024kB (ME) 3*2048kB (UM) 0*4096kB = 10972kB [ 1110.158708] DMA free:10972kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1110.171192] Node 0 DMA32: 537*4kB (UE) 366*8kB (UME) 124*16kB (UME) 22*32kB (UE) 1767*64kB (UM) 245*128kB (U) 71*256kB (UM) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 170388kB [ 1110.213166] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1110.224646] Node 1 Normal: 1*4kB (M) 2*8kB (ME) 0*16kB 18*32kB (UM) 3439*64kB (UM) 155*128kB (UM) 49*256kB (UM) 39*512kB (UM) 2*1024kB (U) 9*2048kB (U) 0*4096kB = 293524kB [ 1110.240856] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1110.250243] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1110.256622] lowmem_reserve[]: [ 1110.259451] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1110.263130] 0 [ 1110.272017] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1110.283101] 45711 total pagecache pages [ 1110.287080] 0 pages in swap cache [ 1110.290529] Swap cache stats: add 0, delete 0, find 0/0 [ 1110.292006] 2717 [ 1110.297329] Free swap = 0kB [ 1110.300089] 2718 2718 2718 [ 1110.303324] Total swap = 0kB [ 1110.305690] Node 0 DMA32 free:189428kB min:36200kB low:45248kB high:54296kB active_anon:51132kB inactive_anon:124084kB active_file:140kB inactive_file:6588kB unevictable:0kB writepending:48kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:7712kB pagetables:3004kB bounce:0kB free_pcp:672kB local_pcp:344kB free_cma:0kB [ 1110.309479] 2097051 pages RAM [ 1110.342124] 0 pages HighMem/MovableOnly [ 1110.347097] 363848 pages reserved [ 1110.350948] 0 pages cma reserved [ 1110.354741] Out of memory (oom_kill_allocating_task): Kill process 24729 (in:imklog) score 0 or sacrifice child [ 1110.365644] Killed process 24725 (rsyslogd) total-vm:254332kB, anon-rss:928kB, file-rss:0kB, shmem-rss:0kB [ 1110.395637] oom_reaper: reaped process 23606 (syz-executor.0), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1110.406837] lowmem_reserve[]: 0 0 0 0 0 [ 1110.410871] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1110.503999] lowmem_reserve[]: 0 0 0 0 0 [ 1110.508085] Node 1 Normal free:434620kB min:53696kB low:67120kB high:80544kB active_anon:1084kB inactive_anon:49132kB active_file:24kB inactive_file:1124kB unevictable:0kB writepending:20kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:96kB pagetables:44kB bounce:0kB free_pcp:736kB local_pcp:8kB free_cma:0kB [ 1110.537148] lowmem_reserve[]: 0 0 0 0 0 [ 1110.542067] Node 0 DMA: 10*4kB (UE) 1*8kB (U) 12*16kB (UE) 13*32kB (UE) 2*64kB (UE) 2*128kB (ME) 3*256kB (UME) 2*512kB (ME) 2*1024kB (ME) 3*2048kB (UM) 0*4096kB = 11024kB [ 1110.558780] Node 0 DMA32: 737*4kB (UE) 259*8kB (UE) 369*16kB (UME) 1840*32kB (UE) 2335*64kB (UM) 393*128kB (UM) 91*256kB (UM) 0*512kB 1*1024kB (U) 0*2048kB 0*4096kB = 293868kB [ 1110.576779] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB 13:36:06 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x1, 0x4, 0x101}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x20044050) 13:36:06 executing program 3: ioctl$SIOCPNDELRESOURCE(0xffffffffffffffff, 0x89ef, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f00000012c0)={0x0, @nl=@unspec, @tipc=@id={0x1e, 0x3, 0x2, {0x4e21, 0x4}}, @ethernet={0x307, @random="68d88c73bc2f"}, 0x0, 0x0, 0x0, 0x0, 0x20, &(0x7f0000001280)='bridge_slave_0\x00', 0x401, 0x0, 0xfd51}) semctl$SETVAL(0x0, 0x0, 0x10, 0x0) semctl$GETVAL(0x0, 0x0, 0xc, &(0x7f0000000180)=""/194) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$x25(0x9, 0x5, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x500, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x80000000, 0xa, 0x1}) 13:36:06 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, 0x1, 0x4, 0x0, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x1000}, @NFULA_CFG_MODE={0xa, 0x2, {0x3}}, @NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x20044050) 13:36:06 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) waitid(0x2, 0xffffffffffffffff, &(0x7f0000000140), 0x2, &(0x7f00000001c0)) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000001040)='NLBL_CIPSOv4\x00', r1) sendmsg$NLBL_CIPSOV4_C_LISTALL(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, 0x0, 0x8, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_CIPSOV4_A_MLSCATLST={0x10, 0xc, 0x0, 0x1, [{0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6baf}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x101}, 0x48090) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100)='/dev/bsg\x00', 0x204402, 0x0) write$eventfd(r2, 0x0, 0x0) ioctl$sock_bt_bnep_BNEPCONNADD(r2, 0x400442c8, &(0x7f0000000280)={0xffffffffffffffff, 0xc2, 0x401, "9cd89d5788a4713a5c1591e27d25ecbf5ca53fe88ab7083022a05603f58f06f70b38850bf5ea4eeafecddc1bfb509f646538d5b7cd201363c28754ba06ffc45fa8623d433e2aa1b6c5492de71c1410e9013fa453df46527a43035eb999"}) syz_genetlink_get_family_id$nl802154(&(0x7f0000000000)='nl802154\x00', r0) semctl$SETVAL(0x0, 0x0, 0x10, 0x0) [ 1110.592349] Node 1 Normal: 36*4kB (UM) 31*8kB (UME) 55*16kB (UM) 215*32kB (UM) 5115*64kB (UM) 601*128kB (UM) 94*256kB (UM) 48*512kB (UM) 5*1024kB (U) 9*2048kB (U) 0*4096kB = 484632kB [ 1110.615790] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1110.635392] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB 13:36:07 executing program 5: r0 = semget$private(0x0, 0x0, 0xb0) semctl$IPC_RMID(r0, 0x0, 0x0) semctl$IPC_STAT(r0, 0x0, 0x2, &(0x7f0000000080)=""/104) semctl$IPC_STAT(r0, 0x0, 0x2, &(0x7f0000000540)=""/206) r1 = semget$private(0x0, 0x0, 0x30) semctl$IPC_RMID(r1, 0x0, 0x0) semctl$IPC_STAT(r1, 0x0, 0x2, &(0x7f0000000080)=""/104) semctl$IPC_STAT(r1, 0x0, 0x2, &(0x7f0000000540)=""/206) r2 = semget$private(0x0, 0x0, 0xb0) semctl$IPC_RMID(r2, 0x0, 0x0) semctl$IPC_STAT(r2, 0x0, 0x2, &(0x7f0000000080)=""/104) semctl$IPC_STAT(r2, 0x0, 0x2, &(0x7f0000000540)=""/206) r3 = semget$private(0x0, 0x3, 0x42) semctl$SETVAL(r3, 0x2, 0x10, 0x0) 13:36:07 executing program 1: ioctl$SIOCPNDELRESOURCE(0xffffffffffffffff, 0x89ef, &(0x7f0000000040)=0xffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f00000012c0)={0x0, @nl=@unspec, @tipc=@id={0x1e, 0x3, 0x2, {0x4e21, 0x4}}, @ethernet={0x307, @random="68d88c73bc2f"}, 0x0, 0x0, 0x0, 0x0, 0x20, &(0x7f0000001280)='bridge_slave_0\x00', 0x401, 0x0, 0xfd51}) semctl$SETVAL(0x0, 0x0, 0x10, 0x0) semctl$GETVAL(0x0, 0x0, 0xc, &(0x7f0000000180)=""/194) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SCAUSEDIAG(r2, 0x89ec, &(0x7f0000000600)) bind$x25(r2, &(0x7f0000001480)={0x9, @remote={[], 0x3}}, 0x12) syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, &(0x7f00000014c0)) r3 = semget$private(0x0, 0x1, 0x484) semctl$IPC_STAT(r3, 0x0, 0x2, &(0x7f00000000c0)=""/89) semctl$SEM_INFO(r3, 0x4, 0x13, &(0x7f0000000280)=""/4096) sendmsg$RDMA_NLDEV_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000001440)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001400)={&(0x7f0000001500)=ANY=[@ANYBLOB="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"/270], 0x60}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000000)='SEG6\x00', r1) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x500, 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000080)={0x80000000, 0xa, 0x1}) [ 1110.654389] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1110.679275] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1110.701372] 47080 total pagecache pages 13:36:07 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x1, 0x4, 0x101, 0x0, 0x0, {}, [@NFULA_CFG_CMD={0x5}]}, 0x1c}}, 0x20044050) 13:36:07 executing program 5: r0 = semget$private(0x0, 0x0, 0xb0) semctl$IPC_RMID(r0, 0x0, 0x0) semctl$IPC_STAT(r0, 0x0, 0x2, &(0x7f0000000080)=""/104) semctl$IPC_STAT(r0, 0x0, 0x2, &(0x7f0000000540)=""/206) r1 = semget$private(0x0, 0x0, 0x30) semctl$IPC_RMID(r1, 0x0, 0x0) semctl$IPC_STAT(r1, 0x0, 0x2, &(0x7f0000000080)=""/104) semctl$IPC_STAT(r1, 0x0, 0x2, &(0x7f0000000540)=""/206) r2 = semget$private(0x0, 0x0, 0xb0) semctl$IPC_RMID(r2, 0x0, 0x0) semctl$IPC_STAT(r2, 0x0, 0x2, &(0x7f0000000080)=""/104) semctl$IPC_STAT(r2, 0x0, 0x2, &(0x7f0000000540)=""/206) r3 = semget$private(0x0, 0x3, 0x42) semctl$SETVAL(r3, 0x2, 0x10, 0x0) [ 1110.725170] 0 pages in swap cache [ 1110.733468] Swap cache stats: add 0, delete 0, find 0/0 [ 1110.762359] Free swap = 0kB 13:36:07 executing program 5: r0 = semget$private(0x0, 0x0, 0xb0) semctl$IPC_RMID(r0, 0x0, 0x0) semctl$IPC_STAT(r0, 0x0, 0x2, &(0x7f0000000080)=""/104) semctl$IPC_STAT(r0, 0x0, 0x2, &(0x7f0000000540)=""/206) r1 = semget$private(0x0, 0x0, 0x30) semctl$IPC_RMID(r1, 0x0, 0x0) semctl$IPC_STAT(r1, 0x0, 0x2, &(0x7f0000000080)=""/104) semctl$IPC_STAT(r1, 0x0, 0x2, &(0x7f0000000540)=""/206) r2 = semget$private(0x0, 0x0, 0xb0) semctl$IPC_RMID(r2, 0x0, 0x0) semctl$IPC_STAT(r2, 0x0, 0x2, &(0x7f0000000080)=""/104) semctl$IPC_STAT(r2, 0x0, 0x2, &(0x7f0000000540)=""/206) r3 = semget$private(0x0, 0x3, 0x42) semctl$SETVAL(r3, 0x2, 0x10, 0x0) [ 1110.781296] Total swap = 0kB [ 1110.797488] 2097051 pages RAM [ 1110.811629] 0 pages HighMem/MovableOnly [ 1110.826814] 363848 pages reserved [ 1110.842068] 0 pages cma reserved [ 1111.342876] syz-executor.1: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1111.368233] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 1111.385069] oom_reaper: reaped process 25415 (syz-executor.2), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1111.390500] CPU: 1 PID: 25432 Comm: syz-executor.1 Not tainted 4.14.230-syzkaller #0 [ 1111.402949] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1111.412300] Call Trace: [ 1111.414892] dump_stack+0x1b2/0x281 [ 1111.418513] warn_alloc.cold+0x96/0x1cc [ 1111.422493] ? zone_watermark_ok_safe+0x220/0x220 [ 1111.427385] __alloc_pages_nodemask+0x2127/0x2720 [ 1111.432251] ? __schedule+0x893/0x1de0 [ 1111.436152] ? lock_acquire+0x170/0x3f0 [ 1111.440128] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1111.444972] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1111.450426] ? __mutex_unlock_slowpath+0x75/0x770 [ 1111.455271] alloc_pages_current+0x155/0x260 [ 1111.459681] ion_page_pool_alloc+0x118/0x1b0 [ 1111.464079] ion_system_heap_allocate+0x133/0x8c0 [ 1111.468922] ? ion_alloc+0x187/0x810 [ 1111.472665] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1111.478144] ? ion_system_contig_heap_create+0x130/0x130 [ 1111.483647] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1111.488689] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1111.493528] ion_alloc+0x204/0x810 [ 1111.497063] ? ion_dma_buf_release+0x40/0x40 [ 1111.501471] ? __might_fault+0x177/0x1b0 [ 1111.505568] ion_ioctl+0xea/0x1f0 [ 1111.509014] ? ion_query_heaps+0x360/0x360 [ 1111.513263] ? ion_query_heaps+0x360/0x360 [ 1111.517494] do_vfs_ioctl+0x75a/0xff0 [ 1111.521296] ? ioctl_preallocate+0x1a0/0x1a0 [ 1111.525697] ? lock_downgrade+0x740/0x740 [ 1111.529871] ? __fget+0x225/0x360 [ 1111.533330] ? do_vfs_ioctl+0xff0/0xff0 [ 1111.537300] ? security_file_ioctl+0x83/0xb0 [ 1111.541810] SyS_ioctl+0x7f/0xb0 [ 1111.545173] ? do_vfs_ioctl+0xff0/0xff0 [ 1111.549180] do_syscall_64+0x1d5/0x640 [ 1111.553086] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1111.558263] RIP: 0033:0x466459 [ 1111.561446] RSP: 002b:00007feb59368188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1111.569169] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1111.576457] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000007 [ 1111.583719] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1111.590992] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1111.598257] R13: 00007ffe56f14bcf R14: 00007feb59368300 R15: 0000000000022000 [ 1111.617451] syz-executor.3: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1111.632839] systemd-journal invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=0 [ 1111.665973] systemd-journal cpuset=/ mems_allowed=0-1 [ 1111.668033] syz-executor.3 cpuset= [ 1111.671208] CPU: 1 PID: 25321 Comm: systemd-journal Not tainted 4.14.230-syzkaller #0 [ 1111.671209] / mems_allowed=0-1 [ 1111.674751] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1111.674755] Call Trace: [ 1111.674807] dump_stack+0x1b2/0x281 [ 1111.674821] dump_header+0x178/0x82f [ 1111.705197] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1111.710295] ? ___ratelimit+0x2cd/0x530 [ 1111.714262] oom_kill_process.cold+0x10/0xa40 [ 1111.718850] out_of_memory+0xe3e/0x1190 [ 1111.722820] ? oom_killer_disable+0x1c0/0x1c0 [ 1111.727304] ? mutex_trylock+0x152/0x1a0 [ 1111.731379] __alloc_pages_nodemask+0x23e1/0x2720 [ 1111.736224] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1111.741059] ? entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1111.746436] ? cache_grow_begin+0x3f/0x700 [ 1111.750730] cache_grow_begin+0x91/0x700 [ 1111.754798] fallback_alloc+0x207/0x2c0 [ 1111.758769] kmem_cache_alloc+0x1e5/0x3c0 [ 1111.762922] getname_flags+0xc8/0x550 [ 1111.766715] user_path_at_empty+0x2a/0x50 [ 1111.770857] SyS_faccessat+0x21b/0x680 [ 1111.774751] ? SyS_fallocate+0x80/0x80 [ 1111.778637] ? do_syscall_64+0x4c/0x640 [ 1111.782596] ? SyS_faccessat+0x680/0x680 [ 1111.786666] do_syscall_64+0x1d5/0x640 [ 1111.790549] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1111.795729] RIP: 0033:0x7f43d3bf79c7 [ 1111.799424] RSP: 002b:00007ffd0a39e858 EFLAGS: 00000246 ORIG_RAX: 0000000000000015 [ 1111.807137] RAX: ffffffffffffffda RBX: 00007ffd0a3a1770 RCX: 00007f43d3bf79c7 [ 1111.814403] RDX: 00007f43d4668a00 RSI: 0000000000000000 RDI: 0000558a61e7c9a3 [ 1111.821665] RBP: 00007ffd0a39e890 R08: 0000000000000000 R09: 0000000000000000 [ 1111.828949] R10: 0000000000000069 R11: 0000000000000246 R12: 0000000000000000 [ 1111.836207] R13: 0000000000000000 R14: 00007ffd0a3a1770 R15: 00007ffd0a39ed80 [ 1111.843484] CPU: 0 PID: 25423 Comm: syz-executor.3 Not tainted 4.14.230-syzkaller #0 [ 1111.846129] Mem-Info: [ 1111.851369] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1111.853850] active_anon:12902 inactive_anon:43304 isolated_anon:0 [ 1111.853850] active_file:52 inactive_file:0 isolated_file:28 [ 1111.853850] unevictable:0 dirty:9 writeback:25 unstable:0 [ 1111.853850] slab_reclaimable:12520 slab_unreclaimable:116596 [ 1111.853850] mapped:44001 shmem:43796 pagetables:719 bounce:0 [ 1111.853850] free:13961 free_pcp:0 free_cma:0 [ 1111.863107] Call Trace: [ 1111.863128] dump_stack+0x1b2/0x281 [ 1111.863142] warn_alloc.cold+0x96/0x1cc [ 1111.863155] ? zone_watermark_ok_safe+0x220/0x220 [ 1111.863178] __alloc_pages_nodemask+0x2127/0x2720 [ 1111.863204] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1111.896453] warn_alloc_show_mem: 1 callbacks suppressed [ 1111.896457] Mem-Info: [ 1111.898920] ? migrate_swap_stop+0x880/0x880 [ 1111.902535] active_anon:12902 inactive_anon:43304 isolated_anon:0 [ 1111.902535] active_file:52 inactive_file:0 isolated_file:28 [ 1111.902535] unevictable:0 dirty:9 writeback:25 unstable:0 [ 1111.902535] slab_reclaimable:12520 slab_unreclaimable:116596 [ 1111.902535] mapped:44001 shmem:43796 pagetables:719 bounce:0 [ 1111.902535] free:13961 free_pcp:0 free_cma:0 [ 1111.906477] ? lock_acquire+0x170/0x3f0 [ 1111.906490] ? wake_up_q+0x82/0xd0 [ 1111.906504] ? __mutex_unlock_slowpath+0x261/0x770 [ 1111.906516] ? alloc_pages_current+0x16/0x260 [ 1111.906529] alloc_pages_current+0x155/0x260 [ 1111.911379] Node 0 active_anon:50532kB inactive_anon:124084kB active_file:16kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:174500kB dirty:12kB writeback:100kB shmem:125716kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1111.916194] ion_page_pool_alloc+0x118/0x1b0 [ 1111.916205] ion_system_heap_allocate+0x133/0x8c0 [ 1111.916214] ? ion_alloc+0x187/0x810 [ 1111.916225] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1111.916233] ? ion_system_contig_heap_create+0x130/0x130 [ 1111.916243] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1111.916254] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1111.921085] Node 1 active_anon:1076kB inactive_anon:49132kB active_file:192kB inactive_file:16kB unevictable:0kB isolated(anon):0kB isolated(file):112kB mapped:1504kB dirty:24kB writeback:0kB shmem:49468kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1111.926427] ion_alloc+0x204/0x810 [ 1111.926445] ? ion_dma_buf_release+0x40/0x40 [ 1111.926458] ? __might_fault+0x177/0x1b0 [ 1111.926469] ion_ioctl+0xea/0x1f0 [ 1111.928903] Node 0 active_anon:50532kB inactive_anon:124084kB active_file:16kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:174500kB dirty:12kB writeback:100kB shmem:125716kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1111.933260] ? ion_query_heaps+0x360/0x360 [ 1111.933278] ? ion_query_heaps+0x360/0x360 [ 1111.933288] do_vfs_ioctl+0x75a/0xff0 [ 1111.933300] ? ioctl_preallocate+0x1a0/0x1a0 [ 1111.933309] ? lock_downgrade+0x740/0x740 [ 1111.933339] ? __fget+0x225/0x360 [ 1111.969295] Node 0 [ 1111.970457] ? do_vfs_ioctl+0xff0/0xff0 [ 1111.974032] DMA free:10968kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1111.978895] ? security_file_ioctl+0x83/0xb0 [ 1111.983477] lowmem_reserve[]: [ 1111.987823] SyS_ioctl+0x7f/0xb0 [ 1112.015984] Node 1 active_anon:1076kB inactive_anon:49132kB active_file:192kB inactive_file:16kB unevictable:0kB isolated(anon):0kB isolated(file):112kB mapped:1504kB dirty:24kB writeback:0kB shmem:49468kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1112.020343] ? do_vfs_ioctl+0xff0/0xff0 [ 1112.025192] Node 0 [ 1112.028861] do_syscall_64+0x1d5/0x640 [ 1112.034365] DMA free:10968kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1112.039725] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1112.051811] 0 [ 1112.076875] RIP: 0033:0x466459 [ 1112.076881] RSP: 002b:00007f8a667e8188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1112.076890] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1112.076895] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000005 [ 1112.076899] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1112.076903] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1112.076908] R13: 00007ffd25ba1ddf R14: 00007f8a667e8300 R15: 0000000000022000 [ 1112.170832] lowmem_reserve[]: [ 1112.177181] 2717 2718 2718 2718 [ 1112.177198] Node 0 DMA32 free:18092kB min:36200kB low:45248kB high:54296kB active_anon:50528kB inactive_anon:124080kB active_file:28kB inactive_file:32kB unevictable:0kB writepending:0kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:7648kB pagetables:2804kB bounce:0kB free_pcp:120kB local_pcp:0kB free_cma:0kB [ 1112.177217] lowmem_reserve[]: 0 0 0 0 0 [ 1112.177234] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1112.184842] 0 [ 1112.188538] lowmem_reserve[]: [ 1112.242729] 2717 [ 1112.251955] 0 [ 1112.257011] 2718 [ 1112.263149] 0 [ 1112.282757] 2718 [ 1112.291946] 0 [ 1112.304691] 2718 [ 1112.310246] 0 [ 1112.345839] 0 [ 1112.362731] Node 0 [ 1112.378787] DMA32 free:18080kB min:36200kB low:45248kB high:54296kB active_anon:50528kB inactive_anon:124080kB active_file:28kB inactive_file:32kB unevictable:0kB writepending:0kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:7648kB pagetables:2804kB bounce:0kB free_pcp:120kB local_pcp:120kB free_cma:0kB [ 1112.380324] Node 1 [ 1112.382392] lowmem_reserve[]: 0 [ 1112.384909] Normal free:26464kB min:53696kB low:67120kB high:80544kB active_anon:1192kB inactive_anon:49136kB active_file:28kB inactive_file:32kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:160kB pagetables:84kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1112.394185] 0 [ 1112.399123] lowmem_reserve[]: [ 1112.433086] 0 [ 1112.461551] 0 [ 1112.462610] 0 [ 1112.464423] 0 0 0 0 [ 1112.464438] Node 0 DMA: 2*4kB (E) 0*8kB 11*16kB (UE) 13*32kB (UE) 2*64kB (UE) 2*128kB (ME) 3*256kB (UME) 2*512kB (ME) 2*1024kB (ME) 3*2048kB (UM) 0*4096kB = 10968kB [ 1112.484206] 0 [ 1112.487011] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1112.489071] Node 0 DMA32: 855*4kB (UME) 193*8kB (UME) 161*16kB (ME) 171*32kB (UME) 57*64kB (UM) 11*128kB (UM) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18068kB [ 1112.531675] lowmem_reserve[]: 0 0 0 0 0 [ 1112.531811] Node 0 [ 1112.535822] Node 1 Normal free:26464kB min:53696kB low:67120kB high:80544kB active_anon:1192kB inactive_anon:49136kB active_file:28kB inactive_file:32kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:160kB pagetables:84kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1112.535849] lowmem_reserve[]: [ 1112.541810] Normal: [ 1112.567055] 0 0 0 0 0 [ 1112.572727] 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB [ 1112.574492] Node 0 DMA: [ 1112.581841] 0*2048kB [ 1112.581848] 2*4kB [ 1112.587764] 0*4096kB = 0kB [ 1112.592816] Node 1 Normal: 90*4kB (UM) 56*8kB (ME) 37*16kB (M) 9*32kB (M) 25*64kB (UM) 10*128kB (M) 2*256kB (M) 32*512kB (UM) 5*1024kB (U) 0*2048kB 0*4096kB = 26584kB [ 1112.602741] (E) 0*8kB 11*16kB (UE) 13*32kB (UE) 2*64kB (UE) 2*128kB (ME) 3*256kB (UME) 2*512kB (ME) 2*1024kB (ME) 3*2048kB (UM) 0*4096kB = 10968kB [ 1112.611771] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1112.623469] Node 0 DMA32: 854*4kB (ME) 193*8kB (UME) 161*16kB (ME) 171*32kB (UME) 57*64kB (UM) 11*128kB (UM) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18064kB [ 1112.634038] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1112.658282] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1112.662464] Node 0 [ 1112.667151] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1112.667158] Normal: [ 1112.669379] 43830 total pagecache pages [ 1112.677992] 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB [ 1112.684193] 0 pages in swap cache [ 1112.685154] 0*2048kB [ 1112.691653] Swap cache stats: add 0, delete 0, find 0/0 [ 1112.695129] 0*4096kB = 0kB [ 1112.695138] Node 1 Normal: 90*4kB [ 1112.701322] Free swap = 0kB [ 1112.703397] (UM) [ 1112.707646] Total swap = 0kB [ 1112.709299] 56*8kB (ME) [ 1112.712304] 2097051 pages RAM [ 1112.722736] 37*16kB (M) 9*32kB (M) 25*64kB (UM) 10*128kB (M) 2*256kB (M) 32*512kB (UM) 5*1024kB (U) 0*2048kB 0*4096kB = 26584kB [ 1112.727252] 0 pages HighMem/MovableOnly [ 1112.738824] 363848 pages reserved [ 1112.742264] 0 pages cma reserved [ 1112.742582] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1112.749456] Out of memory (oom_kill_allocating_task): Kill process 25321 (systemd-journal) score 0 or sacrifice child [ 1112.754515] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1112.771101] Killed process 25321 (systemd-journal) total-vm:46096kB, anon-rss:468kB, file-rss:0kB, shmem-rss:1520kB [ 1112.790480] oom_reaper: reaped process 25321 (systemd-journal), now anon-rss:0kB, file-rss:0kB, shmem-rss:1520kB [ 1112.801023] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1112.810353] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1112.819035] 43830 total pagecache pages [ 1112.826535] 0 pages in swap cache [ 1112.829991] Swap cache stats: add 0, delete 0, find 0/0 [ 1112.837540] Free swap = 0kB [ 1112.840563] Total swap = 0kB [ 1112.843652] 2097051 pages RAM [ 1112.846763] 0 pages HighMem/MovableOnly [ 1112.850722] 363848 pages reserved [ 1112.854575] 0 pages cma reserved [ 1112.893044] syz-executor.3 invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=1000 [ 1112.906976] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 1112.912125] CPU: 0 PID: 25421 Comm: syz-executor.3 Not tainted 4.14.230-syzkaller #0 [ 1112.919997] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1112.929375] Call Trace: [ 1112.932000] dump_stack+0x1b2/0x281 [ 1112.935645] dump_header+0x178/0x82f [ 1112.939353] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1112.944455] ? ___ratelimit+0x2cd/0x530 [ 1112.948419] oom_kill_process.cold+0x10/0xa40 [ 1112.952912] out_of_memory+0xe3e/0x1190 [ 1112.956880] ? oom_killer_disable+0x1c0/0x1c0 [ 1112.961362] ? mutex_trylock+0x152/0x1a0 [ 1112.965414] __alloc_pages_nodemask+0x23e1/0x2720 [ 1112.970254] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1112.975101] alloc_pages_current+0x155/0x260 [ 1112.979501] filemap_fault+0x11a1/0x1ad0 [ 1112.983562] ext4_filemap_fault+0x84/0xb0 [ 1112.987728] __do_fault+0xfa/0x380 [ 1112.991273] __handle_mm_fault+0x2497/0x4620 [ 1112.995671] ? vm_insert_page+0x7c0/0x7c0 [ 1112.999805] ? hrtimer_nanosleep+0x1ff/0x4b0 [ 1113.004201] ? nanosleep_copyout+0x100/0x100 [ 1113.008609] ? mark_held_locks+0xa6/0xf0 [ 1113.012657] handle_mm_fault+0x455/0x9c0 [ 1113.016712] __do_page_fault+0x549/0xad0 [ 1113.020765] ? spurious_fault+0x640/0x640 [ 1113.024914] ? do_page_fault+0x60/0x500 [ 1113.028877] ? page_fault+0x2f/0x50 [ 1113.032495] page_fault+0x45/0x50 [ 1113.035934] RIP: 56c9e0:0x56bf60 [ 1113.039287] RSP: 10f5bd:0000000000000001 EFLAGS: 0056bf60 [ 1113.045997] Mem-Info: [ 1113.057194] active_anon:12830 inactive_anon:43304 isolated_anon:0 [ 1113.057194] active_file:26 inactive_file:4 isolated_file:4 [ 1113.057194] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1113.057194] slab_reclaimable:12525 slab_unreclaimable:116568 [ 1113.057194] mapped:43938 shmem:43796 pagetables:722 bounce:0 [ 1113.057194] free:13859 free_pcp:30 free_cma:0 [ 1113.090569] Node 0 active_anon:50416kB inactive_anon:124080kB active_file:36kB inactive_file:24kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:174396kB dirty:0kB writeback:0kB shmem:125712kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1113.118542] Node 1 active_anon:836kB inactive_anon:49136kB active_file:4kB inactive_file:72kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:1356kB dirty:0kB writeback:0kB shmem:49472kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1113.145529] Node 0 DMA free:10968kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1113.175714] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1113.180788] Node 0 DMA32 free:18004kB min:36200kB low:45248kB high:54296kB active_anon:50416kB inactive_anon:124080kB active_file:32kB inactive_file:28kB unevictable:0kB writepending:0kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:7648kB pagetables:2804kB bounce:0kB free_pcp:124kB local_pcp:0kB free_cma:0kB [ 1113.215139] syz-executor.2: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1113.220534] lowmem_reserve[]: 0 0 0 0 0 [ 1113.236671] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 1113.241832] CPU: 1 PID: 25415 Comm: syz-executor.2 Not tainted 4.14.230-syzkaller #0 [ 1113.241841] Node 0 [ 1113.249708] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1113.249713] Call Trace: [ 1113.249736] dump_stack+0x1b2/0x281 [ 1113.249749] warn_alloc.cold+0x96/0x1cc [ 1113.249761] ? zone_watermark_ok_safe+0x220/0x220 [ 1113.249771] ? usleep_range+0x130/0x130 [ 1113.249780] ? try_to_free_pages+0x23f/0x6e0 [ 1113.249797] ? _find_next_bit+0xdb/0x100 [ 1113.249808] ? run_timer_softirq+0x5a0/0x5a0 [ 1113.249824] __alloc_pages_nodemask+0x2127/0x2720 [ 1113.249842] ? lock_acquire+0x170/0x3f0 [ 1113.262771] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1113.264018] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1113.267614] lowmem_reserve[]: [ 1113.271582] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1113.287058] 0 [ 1113.288796] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1113.299503] 0 [ 1113.301989] ? alloc_pages_current+0x21c/0x260 [ 1113.338266] 0 [ 1113.339326] alloc_pages_current+0x155/0x260 [ 1113.341099] 0 [ 1113.346547] ion_page_pool_alloc+0x118/0x1b0 [ 1113.346558] ion_system_heap_allocate+0x133/0x8c0 [ 1113.346568] ? ion_alloc+0x187/0x810 [ 1113.346579] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1113.346588] ? ion_system_contig_heap_create+0x130/0x130 [ 1113.346598] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1113.346609] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1113.346620] ion_alloc+0x204/0x810 [ 1113.346633] ? ion_dma_buf_release+0x40/0x40 [ 1113.359533] 0 [ 1113.360991] ? __might_fault+0x177/0x1b0 [ 1113.370216] ion_ioctl+0xea/0x1f0 [ 1113.382303] Node 1 [ 1113.384822] ? ion_query_heaps+0x360/0x360 [ 1113.384836] ? ion_query_heaps+0x360/0x360 [ 1113.384847] do_vfs_ioctl+0x75a/0xff0 [ 1113.384858] ? ioctl_preallocate+0x1a0/0x1a0 [ 1113.384868] ? lock_downgrade+0x740/0x740 [ 1113.384883] ? __fget+0x225/0x360 [ 1113.391251] Normal free:26320kB min:53696kB low:67120kB high:80544kB active_anon:836kB inactive_anon:49136kB active_file:36kB inactive_file:40kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:160kB pagetables:84kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1113.394712] ? do_vfs_ioctl+0xff0/0xff0 [ 1113.394724] ? security_file_ioctl+0x83/0xb0 [ 1113.394735] SyS_ioctl+0x7f/0xb0 [ 1113.394744] ? do_vfs_ioctl+0xff0/0xff0 [ 1113.394756] do_syscall_64+0x1d5/0x640 [ 1113.394772] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1113.394781] RIP: 0033:0x466459 [ 1113.394785] RSP: 002b:00007ff3a473c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1113.394795] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1113.394801] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000004 [ 1113.394809] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1113.408499] lowmem_reserve[]: [ 1113.408578] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1113.412017] 0 [ 1113.414238] R13: 00007fff6314c1ef R14: 00007ff3a473c300 R15: 0000000000022000 [ 1113.421229] syz-executor.0: [ 1113.433422] 0 [ 1113.441841] systemd-journal: [ 1113.477434] 0 [ 1113.499242] page allocation failure: order:0 [ 1113.512624] 0 [ 1113.526852] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1113.537773] 0 [ 1113.553931] page allocation failure: order:1 [ 1113.575373] Node 0 DMA: 2*4kB (E) 0*8kB 11*16kB (UE) 13*32kB (UE) 2*64kB (UE) 2*128kB (ME) 3*256kB (UME) 2*512kB (ME) 2*1024kB (ME) 3*2048kB (UM) 0*4096kB = 10968kB [ 1113.579606] (null) [ 1113.601556] Node 0 DMA32: 857*4kB (ME) 200*8kB (ME) 163*16kB (UME) 166*32kB (UME) 57*64kB (UM) 11*128kB (UM) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18004kB [ 1113.602729] , mode:0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask= [ 1113.627385] syz-executor.0 cpuset= [ 1113.627991] Node 0 [ 1113.635655] / mems_allowed=0-1 [ 1113.642449] CPU: 1 PID: 25413 Comm: syz-executor.0 Not tainted 4.14.230-syzkaller #0 [ 1113.649694] (null) [ 1113.650323] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1113.652460] systemd-journal cpuset= [ 1113.661794] Call Trace: [ 1113.661817] dump_stack+0x1b2/0x281 [ 1113.661831] warn_alloc.cold+0x96/0x1cc [ 1113.661843] ? zone_watermark_ok_safe+0x220/0x220 [ 1113.661853] ? usleep_range+0x130/0x130 [ 1113.661862] ? try_to_free_pages+0x23f/0x6e0 [ 1113.661872] ? _find_next_bit+0xdb/0x100 [ 1113.661883] ? run_timer_softirq+0x5a0/0x5a0 [ 1113.661900] __alloc_pages_nodemask+0x2127/0x2720 [ 1113.677980] Normal: [ 1113.680499] ? lock_acquire+0x170/0x3f0 [ 1113.689723] 0*4kB [ 1113.692890] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1113.692901] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1113.692919] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1113.692940] alloc_pages_current+0x155/0x260 [ 1113.692951] ion_page_pool_alloc+0x118/0x1b0 [ 1113.692961] ion_system_heap_allocate+0x133/0x8c0 [ 1113.692973] ? _raw_spin_unlock+0x29/0x40 [ 1113.709498] 0*8kB [ 1113.710589] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1113.718200] 0*16kB [ 1113.719915] ? ion_system_contig_heap_create+0x130/0x130 [ 1113.738059] / [ 1113.738975] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1113.749333] mems_allowed=0-1 [ 1113.750170] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1113.759588] 0*32kB [ 1113.764512] ion_alloc+0x27a/0x810 [ 1113.764528] ? ion_dma_buf_release+0x40/0x40 [ 1113.764541] ? __might_fault+0x177/0x1b0 [ 1113.764553] ion_ioctl+0xea/0x1f0 [ 1113.764562] ? ion_query_heaps+0x360/0x360 [ 1113.764575] ? ion_query_heaps+0x360/0x360 [ 1113.764586] do_vfs_ioctl+0x75a/0xff0 [ 1113.801074] 0*64kB 0*128kB 0*256kB [ 1113.802454] ? ioctl_preallocate+0x1a0/0x1a0 [ 1113.802466] ? lock_downgrade+0x740/0x740 [ 1113.814629] ? __fget+0x225/0x360 [ 1113.818083] ? do_vfs_ioctl+0xff0/0xff0 [ 1113.821085] 0*512kB [ 1113.822056] ? security_file_ioctl+0x83/0xb0 [ 1113.822058] 0*1024kB 0*2048kB [ 1113.824388] SyS_ioctl+0x7f/0xb0 [ 1113.824397] ? do_vfs_ioctl+0xff0/0xff0 [ 1113.824409] do_syscall_64+0x1d5/0x640 [ 1113.824439] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1113.824448] RIP: 0033:0x466459 [ 1113.824453] RSP: 002b:00007f7d258b5188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1113.824463] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1113.824468] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000004 [ 1113.824473] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1113.824478] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1113.824486] R13: 00007ffc8c298a0f R14: 00007f7d258b5300 R15: 0000000000022000 [ 1113.845488] 0*4096kB [ 1113.859632] warn_alloc_show_mem: 1 callbacks suppressed [ 1113.859636] Mem-Info: [ 1113.878973] CPU: 0 PID: 25321 Comm: systemd-journal Not tainted 4.14.230-syzkaller #0 [ 1113.889735] active_anon:12813 inactive_anon:43304 isolated_anon:0 [ 1113.889735] active_file:67 inactive_file:0 isolated_file:0 [ 1113.889735] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1113.889735] slab_reclaimable:12524 slab_unreclaimable:116219 [ 1113.889735] mapped:43938 shmem:43796 pagetables:722 bounce:0 [ 1113.889735] free:13823 free_pcp:29 free_cma:0 [ 1113.896214] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1113.896219] Call Trace: [ 1113.896239] dump_stack+0x1b2/0x281 [ 1113.896253] warn_alloc.cold+0x96/0x1cc [ 1113.898659] Node 0 active_anon:50416kB inactive_anon:124080kB active_file:132kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:174396kB dirty:0kB writeback:0kB shmem:125712kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1113.903994] ? zone_watermark_ok_safe+0x220/0x220 [ 1113.904003] ? usleep_range+0x130/0x130 [ 1113.904014] ? _find_next_bit+0xdb/0x100 [ 1113.904024] ? run_timer_softirq+0x5a0/0x5a0 [ 1113.906442] Node 1 active_anon:836kB inactive_anon:49136kB active_file:136kB inactive_file:28kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:1356kB dirty:0kB writeback:0kB shmem:49472kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1113.914377] __alloc_pages_nodemask+0x2127/0x2720 [ 1113.914413] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1113.947505] Node 0 [ 1113.956813] ? entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1113.956835] ? cache_grow_begin+0x3f/0x700 [ 1113.959409] DMA free:10968kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1113.963002] cache_grow_begin+0x91/0x700 [ 1113.963017] fallback_alloc+0x207/0x2c0 [ 1113.963029] kmem_cache_alloc+0x1e5/0x3c0 [ 1113.966981] lowmem_reserve[]: [ 1113.994827] getname_flags+0xc8/0x550 [ 1113.994839] user_path_at_empty+0x2a/0x50 [ 1113.994849] SyS_faccessat+0x21b/0x680 [ 1113.994862] ? SyS_fallocate+0x80/0x80 [ 1114.032732] 0 [ 1114.039169] ? do_syscall_64+0x4c/0x640 [ 1114.052720] 2717 [ 1114.056517] ? SyS_faccessat+0x680/0x680 [ 1114.060737] 2718 [ 1114.086249] do_syscall_64+0x1d5/0x640 [ 1114.086264] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1114.086272] RIP: 0033:0x7f43d3bf79c7 [ 1114.086280] RSP: 002b:00007ffd0a39e858 EFLAGS: 00000246 [ 1114.098807] 2718 [ 1114.101512] ORIG_RAX: 0000000000000015 [ 1114.105339] 2718 [ 1114.109460] RAX: ffffffffffffffda RBX: 00007ffd0a3a1770 RCX: 00007f43d3bf79c7 [ 1114.117191] RDX: 00007f43d4668a00 RSI: 0000000000000000 RDI: 0000558a61e7c9a3 [ 1114.117199] RBP: 00007ffd0a39e890 R08: 0000000000000000 R09: 0000000000000000 [ 1114.118997] Node 0 [ 1114.122964] R10: 0000000000000069 R11: 0000000000000246 R12: 0000000000000000 [ 1114.122969] R13: 0000000000000000 R14: 00007ffd0a3a1770 R15: 00007ffd0a39ed80 [ 1114.162788] = 0kB [ 1114.240873] Node 1 Normal: 2*4kB (UM) 3*8kB (UME) 2*16kB (UM) 0*32kB 3418*64kB (UM) 327*128kB (UM) 107*256kB (UM) 42*512kB (UM) 5*1024kB (U) 0*2048kB 0*4096kB = 314688kB [ 1114.269936] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1114.312788] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1114.321402] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1114.372754] DMA32 free:137880kB min:36200kB low:45248kB high:54296kB active_anon:50416kB inactive_anon:124080kB active_file:28kB inactive_file:532kB unevictable:0kB writepending:0kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:7616kB pagetables:2804kB bounce:0kB free_pcp:116kB local_pcp:60kB free_cma:0kB [ 1114.372787] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1114.482746] 44898 total pagecache pages [ 1114.486761] 0 pages in swap cache [ 1114.490203] Swap cache stats: add 0, delete 0, find 0/0 [ 1114.512739] lowmem_reserve[]: 0 0 0 0 0 [ 1114.516772] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1114.522736] Free swap = 0kB [ 1114.582788] Total swap = 0kB [ 1114.585833] 2097051 pages RAM [ 1114.588954] 0 pages HighMem/MovableOnly [ 1114.622753] 363848 pages reserved [ 1114.626230] 0 pages cma reserved [ 1114.629590] Out of memory (oom_kill_allocating_task): Kill process 25421 (syz-executor.3) score 0 or sacrifice child [ 1114.666505] lowmem_reserve[]: 0 0 0 0 0 [ 1114.670540] Node 1 Normal free:1096948kB min:53696kB low:67120kB high:80544kB active_anon:836kB inactive_anon:49136kB active_file:140kB inactive_file:3356kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:160kB pagetables:84kB bounce:0kB free_pcp:460kB local_pcp:292kB free_cma:0kB [ 1114.673339] Killed process 25421 (syz-executor.3) total-vm:93252kB, anon-rss:104kB, file-rss:33732kB, shmem-rss:0kB [ 1114.797073] oom_reaper: reaped process 25421 (syz-executor.3), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1114.802731] lowmem_reserve[]: 0 0 0 0 0 [ 1114.836498] Node 0 DMA: 2*4kB (E) 0*8kB 11*16kB (UE) 13*32kB (UE) 8*64kB (UE) 4*128kB (UME) 4*256kB (UME) 2*512kB (ME) 2*1024kB (ME) 3*2048kB (UM) 0*4096kB = 11864kB [ 1114.858072] systemd[1]: systemd-journald.service: Failed with result 'signal'. [ 1114.882754] Node 0 DMA32: 481*4kB (ME) 172*8kB (ME) 162*16kB (ME) 59*32kB (UME) 140*64kB (UM) 1020*128kB (UM) 92*256kB (UM) 4*512kB (U) 1*1024kB (U) 0*2048kB 0*4096kB = 173924kB [ 1114.899300] systemd[1]: systemd-journald.service: Service has no hold-off time, scheduling restart. [ 1114.899689] systemd[1]: Stopped Journal Service. [ 1114.952750] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1114.954843] systemd[1]: Starting Journal Service... [ 1114.981020] Node 1 Normal: 1*4kB (M) 2*8kB (ME) 2*16kB (UM) 1*32kB (U) 8395*64kB (UM) 3143*128kB (UM) 923*256kB (UM) 174*512kB (UM) 116*1024kB (U) 2*2048kB (U) 0*4096kB = 1387924kB [ 1115.005084] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1115.024924] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1115.066563] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1115.086735] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1115.102751] 45660 total pagecache pages [ 1115.106742] 0 pages in swap cache [ 1115.110187] Swap cache stats: add 0, delete 0, find 0/0 [ 1115.119414] Free swap = 0kB [ 1115.122434] Total swap = 0kB [ 1115.125541] 2097051 pages RAM [ 1115.128692] 0 pages HighMem/MovableOnly [ 1115.132677] 363848 pages reserved [ 1115.139981] 0 pages cma reserved [ 1115.341966] systemd-journald[25446]: File /run/log/journal/04d8c135ee6b410280ba31a58c89679d/system.journal corrupted or uncleanly shut down, renaming and replacing. [ 1115.716842] systemd[1]: Starting Load/Save RF Kill Switch Status... [ 1115.823229] systemd[1]: Started Load/Save RF Kill Switch Status. 13:36:12 executing program 0: ioctl$SIOCPNDELRESOURCE(0xffffffffffffffff, 0x89ef, &(0x7f0000000040)=0xffffffff) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000012c0)={0x0, @nl=@unspec, @tipc=@id={0x1e, 0x3, 0x2, {0x4e21, 0x4}}, @ethernet={0x307, @random="68d88c73bc2f"}, 0x0, 0x0, 0x0, 0x0, 0x20, &(0x7f0000001280)='bridge_slave_0\x00', 0x401, 0x0, 0xfd51}) semctl$SETVAL(0x0, 0x0, 0x10, 0x0) semctl$GETVAL(0x0, 0x0, 0xc, &(0x7f0000000180)=""/194) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$x25(0x9, 0x5, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x500, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x80000000, 0xa, 0x1}) [ 1116.415456] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1116.422224] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1116.477382] syz-executor.2: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1116.505537] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 1116.510701] CPU: 1 PID: 25415 Comm: syz-executor.2 Not tainted 4.14.230-syzkaller #0 [ 1116.512450] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1116.518577] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1116.518581] Call Trace: [ 1116.518602] dump_stack+0x1b2/0x281 [ 1116.518616] warn_alloc.cold+0x96/0x1cc [ 1116.518628] ? zone_watermark_ok_safe+0x220/0x220 [ 1116.518651] __alloc_pages_nodemask+0x2127/0x2720 [ 1116.518663] ? io_schedule_timeout+0x140/0x140 [ 1116.552923] oom_reaper: reaped process 25432 (syz-executor.1), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1116.554481] ? lock_acquire+0x170/0x3f0 [ 1116.573003] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1116.577852] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1116.583313] ? __mutex_unlock_slowpath+0x75/0x770 [ 1116.588169] alloc_pages_current+0x155/0x260 [ 1116.592583] ion_page_pool_alloc+0x118/0x1b0 [ 1116.596994] ion_system_heap_allocate+0x133/0x8c0 [ 1116.601839] ? _raw_spin_unlock+0x29/0x40 [ 1116.605993] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1116.610949] ? ion_system_contig_heap_create+0x130/0x130 [ 1116.612847] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1116.616491] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1116.627910] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1116.632861] ion_alloc+0x27a/0x810 [ 1116.636407] ? ion_dma_buf_release+0x40/0x40 [ 1116.640826] ? __might_fault+0x177/0x1b0 [ 1116.641078] systemd-journal invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask= [ 1116.644889] ion_ioctl+0xea/0x1f0 [ 1116.644899] ? ion_query_heaps+0x360/0x360 [ 1116.644911] ? ion_query_heaps+0x360/0x360 [ 1116.644921] do_vfs_ioctl+0x75a/0xff0 [ 1116.644933] ? ioctl_preallocate+0x1a0/0x1a0 [ 1116.644943] ? lock_downgrade+0x740/0x740 [ 1116.644957] ? __fget+0x225/0x360 [ 1116.644967] ? do_vfs_ioctl+0xff0/0xff0 [ 1116.644979] ? security_file_ioctl+0x83/0xb0 [ 1116.644988] SyS_ioctl+0x7f/0xb0 [ 1116.644995] ? do_vfs_ioctl+0xff0/0xff0 [ 1116.645011] do_syscall_64+0x1d5/0x640 [ 1116.695909] (null) [ 1116.698450] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1116.702335] , order=1, oom_score_adj=0 [ 1116.704496] RIP: 0033:0x466459 [ 1116.704501] RSP: 002b:00007ff3a473c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1116.704511] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1116.704516] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000004 [ 1116.704521] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1116.704526] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1116.704531] R13: 00007fff6314c1ef R14: 00007ff3a473c300 R15: 0000000000022000 [ 1116.739979] warn_alloc_show_mem: 2 callbacks suppressed [ 1116.739983] Mem-Info: [ 1116.757851] device bridge_slave_1 left promiscuous mode [ 1116.768467] active_anon:12823 inactive_anon:45333 isolated_anon:0 [ 1116.768467] active_file:275 inactive_file:225 isolated_file:29 [ 1116.768467] unevictable:0 dirty:18 writeback:0 unstable:0 [ 1116.768467] slab_reclaimable:12526 slab_unreclaimable:118401 [ 1116.768467] mapped:44364 shmem:45839 pagetables:719 bounce:0 [ 1116.768467] free:13747 free_pcp:127 free_cma:0 [ 1116.784051] bridge0: port 2(bridge_slave_1) entered disabled state [ 1116.813846] Node 0 active_anon:49424kB inactive_anon:124516kB active_file:164kB inactive_file:60kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:174632kB dirty:12kB writeback:0kB shmem:126204kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1116.849302] Node 1 active_anon:1868kB inactive_anon:56816kB active_file:92kB inactive_file:64kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:1124kB dirty:60kB writeback:0kB shmem:57152kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1116.868275] systemd-journal cpuset= [ 1116.880592] Node 0 DMA free:10960kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1116.914381] / mems_allowed=0-1 [ 1116.946098] device bridge_slave_0 left promiscuous mode [ 1116.951665] bridge0: port 1(bridge_slave_0) entered disabled state [ 1116.960769] CPU: 0 PID: 25446 Comm: systemd-journal Not tainted 4.14.230-syzkaller #0 [ 1116.968739] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1116.978090] Call Trace: [ 1116.980681] dump_stack+0x1b2/0x281 [ 1116.984308] dump_header+0x178/0x82f [ 1116.988018] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1116.988248] lowmem_reserve[]: [ 1116.993111] ? ___ratelimit+0x2cd/0x530 [ 1116.993122] oom_kill_process.cold+0x10/0xa40 [ 1116.993143] out_of_memory+0xe3e/0x1190 [ 1117.008635] ? oom_killer_disable+0x1c0/0x1c0 [ 1117.011729] 0 [ 1117.013123] ? mutex_trylock+0x152/0x1a0 [ 1117.013135] __alloc_pages_nodemask+0x23e1/0x2720 [ 1117.013155] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1117.014955] 2717 [ 1117.019028] ? entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1117.023872] 2718 [ 1117.028682] ? cache_grow_begin+0x3f/0x700 [ 1117.030711] 2718 [ 1117.036073] cache_grow_begin+0x91/0x700 [ 1117.036087] fallback_alloc+0x207/0x2c0 [ 1117.036100] kmem_cache_alloc+0x1e5/0x3c0 [ 1117.038141] 2718 [ 1117.042359] getname_flags+0xc8/0x550 [ 1117.048483] user_path_at_empty+0x2a/0x50 [ 1117.052447] Node 0 [ 1117.056596] SyS_faccessat+0x21b/0x680 [ 1117.056607] ? SyS_fallocate+0x80/0x80 [ 1117.056619] ? do_syscall_64+0x4c/0x640 [ 1117.058679] DMA32 free:18044kB min:36200kB low:45248kB high:54296kB active_anon:49524kB inactive_anon:124516kB active_file:316kB inactive_file:400kB unevictable:0kB writepending:12kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:7584kB pagetables:2672kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1117.062444] ? SyS_faccessat+0x680/0x680 [ 1117.066591] lowmem_reserve[]: [ 1117.068788] do_syscall_64+0x1d5/0x640 [ 1117.072719] 0 [ 1117.076574] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1117.080518] 0 [ 1117.108796] RIP: 0033:0x7f6ab7c0e9c7 [ 1117.108802] RSP: 002b:00007ffc7c13a148 EFLAGS: 00000246 ORIG_RAX: 0000000000000015 [ 1117.108809] RAX: ffffffffffffffda RBX: 00007ffc7c13d060 RCX: 00007f6ab7c0e9c7 [ 1117.108813] RDX: 00007f6ab867fa00 RSI: 0000000000000000 RDI: 0000555f9baa49a3 [ 1117.108817] RBP: 00007ffc7c13a180 R08: 0000000000000000 R09: 0000000000000000 [ 1117.108821] R10: 0000000000000069 R11: 0000000000000246 R12: 0000000000000000 [ 1117.108824] R13: 0000000000000000 R14: 00007ffc7c13d060 R15: 00007ffc7c13a670 [ 1117.115176] Mem-Info: [ 1117.123137] syz-executor.1: [ 1117.129498] active_anon:12797 inactive_anon:45333 isolated_anon:0 [ 1117.129498] active_file:28 inactive_file:10 isolated_file:0 [ 1117.129498] unevictable:0 dirty:0 writeback:14 unstable:0 [ 1117.129498] slab_reclaimable:12522 slab_unreclaimable:118230 [ 1117.129498] mapped:43916 shmem:45839 pagetables:719 bounce:0 [ 1117.129498] free:14068 free_pcp:0 free_cma:0 [ 1117.132510] page allocation failure: order:0 [ 1117.142488] Node 0 active_anon:49408kB inactive_anon:124516kB active_file:88kB inactive_file:24kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:174616kB dirty:0kB writeback:8kB shmem:126204kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1117.147734] syz-executor.3: page allocation failure: order:0 [ 1117.159302] Node 1 active_anon:1780kB inactive_anon:56816kB active_file:24kB inactive_file:16kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:1048kB dirty:0kB writeback:48kB shmem:57152kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1117.168483] 0 [ 1117.169894] Node 0 [ 1117.186895] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1117.219964] DMA free:10960kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1117.220316] 0 [ 1117.262234] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1117.282242] (null) [ 1117.293969] lowmem_reserve[]: [ 1117.318918] device veth1_macvtap left promiscuous mode [ 1117.334044] (null) [ 1117.338426] device veth0_macvtap left promiscuous mode [ 1117.340320] syz-executor.1 cpuset= [ 1117.345711] device veth1_vlan left promiscuous mode [ 1117.354361] device veth0_vlan left promiscuous mode [ 1117.358321] 0 2717 2718 2718 2718 [ 1117.359548] 0 [ 1117.365112] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1117.369637] Node 0 [ 1117.390759] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 1117.390795] CPU: 1 PID: 25423 Comm: syz-executor.3 Not tainted 4.14.230-syzkaller #0 [ 1117.390801] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1117.390805] Call Trace: [ 1117.390831] dump_stack+0x1b2/0x281 [ 1117.390851] warn_alloc.cold+0x96/0x1cc [ 1117.403919] / [ 1117.406058] ? zone_watermark_ok_safe+0x220/0x220 [ 1117.425958] mems_allowed=0-1 [ 1117.427265] ? usleep_range+0x130/0x130 [ 1117.439138] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1117.444241] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1117.449429] ? run_timer_softirq+0x5a0/0x5a0 [ 1117.453841] __alloc_pages_nodemask+0x2127/0x2720 [ 1117.458691] ? lock_acquire+0x170/0x3f0 [ 1117.459515] DMA32 free:18508kB min:36200kB low:45248kB high:54296kB active_anon:49408kB inactive_anon:124516kB active_file:36kB inactive_file:32kB unevictable:0kB writepending:0kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:7584kB pagetables:2672kB bounce:0kB free_pcp:4kB local_pcp:0kB free_cma:0kB [ 1117.462663] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1117.495517] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1117.500020] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1117.505478] alloc_pages_current+0x155/0x260 [ 1117.509903] ion_page_pool_alloc+0x118/0x1b0 [ 1117.514307] ion_system_heap_allocate+0x133/0x8c0 [ 1117.519157] ? ion_alloc+0x187/0x810 [ 1117.522868] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1117.528319] ? ion_system_contig_heap_create+0x130/0x130 [ 1117.533765] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1117.538782] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1117.543709] ion_alloc+0x204/0x810 [ 1117.547523] ? ion_dma_buf_release+0x40/0x40 [ 1117.551925] ? __might_fault+0x177/0x1b0 [ 1117.556007] ion_ioctl+0xea/0x1f0 [ 1117.559473] ? ion_query_heaps+0x360/0x360 [ 1117.560800] lowmem_reserve[]: [ 1117.563718] ? ion_query_heaps+0x360/0x360 [ 1117.563729] do_vfs_ioctl+0x75a/0xff0 [ 1117.563741] ? ioctl_preallocate+0x1a0/0x1a0 [ 1117.563751] ? lock_downgrade+0x740/0x740 [ 1117.563764] ? __fget+0x225/0x360 [ 1117.563774] ? do_vfs_ioctl+0xff0/0xff0 [ 1117.563789] ? security_file_ioctl+0x83/0xb0 [ 1117.569139] 0 [ 1117.571147] SyS_ioctl+0x7f/0xb0 [ 1117.598655] 0 0 [ 1117.600409] ? do_vfs_ioctl+0xff0/0xff0 [ 1117.600432] do_syscall_64+0x1d5/0x640 [ 1117.602380] 0 [ 1117.606351] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1117.606360] RIP: 0033:0x466459 [ 1117.606364] RSP: 002b:00007f8a667e8188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1117.606374] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1117.606379] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000005 [ 1117.606384] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1117.606389] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1117.606394] R13: 00007ffd25ba1ddf R14: 00007f8a667e8300 R15: 0000000000022000 [ 1117.612896] lowmem_reserve[]: [ 1117.627878] CPU: 0 PID: 25432 Comm: syz-executor.1 Not tainted 4.14.230-syzkaller #0 [ 1117.645812] 0 [ 1117.649953] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1117.670844] 0 [ 1117.675430] Call Trace: [ 1117.675451] dump_stack+0x1b2/0x281 [ 1117.675466] warn_alloc.cold+0x96/0x1cc [ 1117.675479] ? zone_watermark_ok_safe+0x220/0x220 [ 1117.679263] 0 [ 1117.686634] ? usleep_range+0x130/0x130 [ 1117.686644] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1117.686657] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1117.686669] ? run_timer_softirq+0x5a0/0x5a0 [ 1117.686686] __alloc_pages_nodemask+0x2127/0x2720 [ 1117.688477] 0 [ 1117.691075] ? lock_acquire+0x170/0x3f0 [ 1117.691092] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1117.694727] 0 [ 1117.698657] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1117.705297] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1117.709243] Node 1 [ 1117.714341] alloc_pages_current+0x155/0x260 [ 1117.714367] ion_page_pool_alloc+0x118/0x1b0 [ 1117.719382] Normal free:27044kB min:53696kB low:67120kB high:80544kB active_anon:1780kB inactive_anon:56816kB active_file:36kB inactive_file:32kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:128kB pagetables:204kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1117.723763] ion_system_heap_allocate+0x133/0x8c0 [ 1117.723773] ? ion_alloc+0x187/0x810 [ 1117.723785] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1117.723794] ? ion_system_contig_heap_create+0x130/0x130 [ 1117.723807] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1117.728644] lowmem_reserve[]: [ 1117.730456] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1117.734429] 0 [ 1117.739232] ion_alloc+0x204/0x810 [ 1117.739246] ? ion_dma_buf_release+0x40/0x40 [ 1117.741039] 0 [ 1117.745521] ? __might_fault+0x177/0x1b0 [ 1117.745533] ion_ioctl+0xea/0x1f0 [ 1117.745542] ? ion_query_heaps+0x360/0x360 [ 1117.745556] ? ion_query_heaps+0x360/0x360 [ 1117.751005] 0 [ 1117.753210] do_vfs_ioctl+0x75a/0xff0 [ 1117.753222] ? ioctl_preallocate+0x1a0/0x1a0 [ 1117.753232] ? lock_downgrade+0x740/0x740 [ 1117.753246] ? __fget+0x225/0x360 [ 1117.757638] 0 [ 1117.762034] ? do_vfs_ioctl+0xff0/0xff0 [ 1117.789845] 0 [ 1117.794621] ? security_file_ioctl+0x83/0xb0 [ 1117.794635] SyS_ioctl+0x7f/0xb0 [ 1117.803773] ? do_vfs_ioctl+0xff0/0xff0 [ 1117.803787] do_syscall_64+0x1d5/0x640 [ 1117.803803] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1117.803811] RIP: 0033:0x466459 [ 1117.803816] RSP: 002b:00007feb59368188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1117.803829] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1117.809274] Node 0 [ 1117.814268] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000007 [ 1117.814278] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1117.814283] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1117.814288] R13: 00007ffe56f14bcf R14: 00007feb59368300 R15: 0000000000022000 [ 1117.821912] 0 [ 1117.837084] DMA: [ 1117.848459] 2*4kB [ 1117.857110] Node 0 [ 1117.860000] Mem-Info: [ 1117.869983] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1117.880530] (E) [ 1117.891277] lowmem_reserve[]: [ 1117.893026] 1*8kB [ 1117.897422] 0 [ 1117.900542] (U) [ 1117.914733] 0 [ 1117.923371] active_anon:12797 inactive_anon:45333 isolated_anon:0 [ 1117.923371] active_file:18 inactive_file:16 isolated_file:0 [ 1117.923371] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1117.923371] slab_reclaimable:12522 slab_unreclaimable:117935 [ 1117.923371] mapped:43902 shmem:45839 pagetables:719 bounce:0 [ 1117.923371] free:14414 free_pcp:3 free_cma:0 [ 1117.929637] 0 [ 1117.932388] Node 0 active_anon:49408kB inactive_anon:124516kB active_file:36kB inactive_file:32kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:174600kB dirty:0kB writeback:0kB shmem:126204kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1117.941833] 0 [ 1117.955566] 2*16kB (UE) [ 1117.964819] 0 [ 1117.991749] Node 1 active_anon:1780kB inactive_anon:56816kB active_file:36kB inactive_file:32kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:1008kB dirty:0kB writeback:0kB shmem:57152kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1118.041102] 1*32kB [ 1118.061678] Node 1 [ 1118.076306] Node 0 [ 1118.113811] (E) 2*64kB (UE) 4*128kB (UME) 4*256kB (UME) 2*512kB (ME) 2*1024kB (ME) 3*2048kB (UM) 0*4096kB = 10960kB [ 1118.128482] Normal free:27044kB min:53696kB low:67120kB high:80544kB active_anon:1780kB inactive_anon:56816kB active_file:28kB inactive_file:40kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:128kB pagetables:204kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1118.142739] Node 0 [ 1118.156366] DMA free:10960kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1118.192474] lowmem_reserve[]: 0 0 0 0 0 [ 1118.195685] DMA32: 1147*4kB (UE) 350*8kB (UME) 201*16kB (UME) 62*32kB (UME) 1240*64kB (UM) 108*128kB (UM) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 105772kB [ 1118.211421] Node 0 DMA: 2*4kB (E) 1*8kB (U) 2*16kB (UE) 1*32kB (E) 2*64kB (UE) 4*128kB (UME) 4*256kB (UME) 2*512kB (ME) 2*1024kB (ME) 3*2048kB (UM) 0*4096kB = 10960kB [ 1118.226563] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1118.226588] Node 0 DMA32 free:119352kB min:36200kB low:45248kB high:54296kB active_anon:49408kB inactive_anon:124516kB active_file:128kB inactive_file:1740kB unevictable:0kB writepending:0kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:7584kB pagetables:2672kB bounce:0kB free_pcp:204kB local_pcp:128kB free_cma:0kB [ 1118.226611] lowmem_reserve[]: 0 0 0 0 0 [ 1118.226648] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1118.226674] lowmem_reserve[]: 0 0 0 0 0 [ 1118.226692] Node 1 Normal free:58660kB min:53696kB low:67120kB high:80544kB active_anon:1780kB inactive_anon:56816kB active_file:28kB inactive_file:40kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:128kB pagetables:204kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1118.226717] lowmem_reserve[]: 0 0 0 0 0 [ 1118.226736] Node 0 DMA: 2*4kB (E) 1*8kB (U) 2*16kB (UE) 1*32kB (E) 2*64kB (UE) 4*128kB (UME) 4*256kB (UME) 2*512kB (ME) 2*1024kB [ 1118.242769] Node 0 [ 1118.312030] (ME) [ 1118.328061] Node 0 DMA32: 1147*4kB (UE) 257*8kB (UE) 170*16kB (UME) 62*32kB (UME) 1305*64kB (UM) 147*128kB (UM) 19*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 118548kB [ 1118.375723] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1118.389453] Node 1 Normal: 109*4kB (UM) 104*8kB (UME) 111*16kB (UM) 129*32kB (UM) 2784*64kB (UM) 333*128kB (UM) 16*256kB (UM) 37*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 251012kB [ 1118.392737] 3*2048kB [ 1118.410174] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1118.422102] (UM) 0*4096kB = 10960kB [ 1118.425789] Node 0 DMA32: 1147*4kB (UE) 258*8kB (UME) 162*16kB (UE) 40*32kB (UE) 1298*64kB (UM) 147*128kB (UM) 19*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 117276kB [ 1118.431922] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1118.454811] Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1118.465511] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1118.481317] Node 1 Normal: 233*4kB (UM) 218*8kB (UME) 228*16kB (UM) 241*32kB (UM) 3265*64kB (UM) 345*128kB (UM) 16*256kB (UM) 37*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 290196kB [ 1118.498073] Node 1 Normal: 233*4kB (UM) 218*8kB (UME) 228*16kB (UM) 241*32kB (UM) 3265*64kB (UM) 345*128kB (UM) 16*256kB (UM) 37*512kB (UM) 0*1024kB 0*2048kB 0*4096kB [ 1118.501574] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1118.521309] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1118.542764] = 290196kB [ 1118.545302] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1118.546491] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1118.562733] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1118.582798] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1118.586496] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1118.591641] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1118.600259] 47168 total pagecache pages [ 1118.614564] 47168 total pagecache pages [ 1118.618544] 0 pages in swap cache [ 1118.632743] Swap cache stats: add 0, delete 0, find 0/0 [ 1118.636527] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1118.638107] Free swap = 0kB [ 1118.647530] 0 pages in swap cache [ 1118.650023] Total swap = 0kB [ 1118.656512] 2097051 pages RAM [ 1118.662800] 0 pages HighMem/MovableOnly [ 1118.663099] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1118.666770] 363848 pages reserved [ 1118.675414] Swap cache stats: add 0, delete 0, find 0/0 [ 1118.682569] 0 pages cma reserved [ 1118.684200] Free swap = 0kB [ 1118.684206] Total swap = 0kB [ 1118.693613] 47168 total pagecache pages [ 1118.697594] 0 pages in swap cache [ 1118.701035] Swap cache stats: add 0, delete 0, find 0/0 [ 1118.706450] 2097051 pages RAM [ 1118.709569] 0 pages HighMem/MovableOnly [ 1118.713595] Free swap = 0kB [ 1118.716605] Total swap = 0kB [ 1118.719618] 2097051 pages RAM [ 1118.722752] 363848 pages reserved [ 1118.726201] 0 pages cma reserved [ 1118.729567] Out of memory (oom_kill_allocating_task): Kill process 25446 (systemd-journal) score 0 or sacrifice child [ 1118.740432] 0 pages HighMem/MovableOnly [ 1118.744482] 363848 pages reserved [ 1118.747928] 0 pages cma reserved [ 1118.752772] Killed process 25446 (systemd-journal) total-vm:46096kB, anon-rss:464kB, file-rss:4kB, shmem-rss:1300kB [ 1118.774234] oom_reaper: reaped process 25446 (systemd-journal), now anon-rss:0kB, file-rss:0kB, shmem-rss:1300kB [ 1118.909703] systemd[1]: systemd-journald.service: Main process exited, code=killed, status=9/KILL [ 1118.948992] systemd[1]: Failed to start Journal Service. [ 1118.984893] systemd[1]: systemd-journald.service: Unit entered failed state. [ 1119.015991] systemd[1]: systemd-journald.service: Failed with result 'signal'. [ 1119.282907] systemd-journald[25459]: File /run/log/journal/04d8c135ee6b410280ba31a58c89679d/system.journal corrupted or uncleanly shut down, renaming and replacing. 13:36:16 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x1, 0x4, 0x101, 0x0, 0x0, {}, [@NFULA_CFG_CMD={0x5}]}, 0x1c}}, 0x0) 13:36:16 executing program 2: openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100)='/dev/bsg\x00', 0x204402, 0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100)='/dev/bsg\x00', 0x204402, 0x0) write$eventfd(r1, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x14, 0x101, 0xb92, 0xffff, 0x490, r0, 0x2, [], 0x0, r0, 0x0, 0x4, 0x4}, 0x40) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100)='/dev/bsg\x00', 0x204402, 0x0) write$eventfd(r2, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x200, 0x0) 13:36:16 executing program 5: r0 = semget$private(0x0, 0x0, 0xb0) semctl$IPC_RMID(r0, 0x0, 0x0) semctl$IPC_STAT(r0, 0x0, 0x2, &(0x7f0000000080)=""/104) semctl$IPC_STAT(r0, 0x0, 0x2, &(0x7f0000000540)=""/206) r1 = semget$private(0x0, 0x0, 0x30) semctl$IPC_RMID(r1, 0x0, 0x0) semctl$IPC_STAT(r1, 0x0, 0x2, &(0x7f0000000080)=""/104) semctl$IPC_STAT(r1, 0x0, 0x2, &(0x7f0000000540)=""/206) r2 = semget$private(0x0, 0x0, 0xb0) semctl$IPC_RMID(r2, 0x0, 0x0) semctl$IPC_STAT(r2, 0x0, 0x2, &(0x7f0000000080)=""/104) semctl$IPC_STAT(r2, 0x0, 0x2, &(0x7f0000000540)=""/206) semctl$SETVAL(0x0, 0x2, 0x10, 0x0) 13:36:16 executing program 2: timer_create(0x7, &(0x7f0000000080)={0x0, 0x2a, 0x1, @thr={&(0x7f0000000000)="cedfad775dd967d003dbe52d40534e44b24e419a438ccb478ff3986437dfb2fca4ea25e257ce70593b4b4f61cdbbf5a2983c0c90c1e3d51f07a4095f", &(0x7f0000000040)="8bd19b303ba21500f7c2d3f7cc2fd29ae3c6db45e63c59054646e1b44d3003f74d33b6c48e8208376d6b0111434cdac6450a"}}, &(0x7f00000000c0)=0x0) timer_gettime(r0, &(0x7f0000000100)) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100)='/dev/bsg\x00', 0x204402, 0x0) write$eventfd(r1, 0x0, 0x0) bind$can_raw(r1, &(0x7f0000000140), 0x10) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_HYPERV_EVENTFD(r2, 0x4018aebd, &(0x7f0000000180)={0x0, r1}) semctl$SETVAL(0x0, 0x0, 0x10, 0x0) 13:36:16 executing program 5: r0 = semget$private(0x0, 0x0, 0xb0) semctl$IPC_RMID(r0, 0x0, 0x0) semctl$IPC_STAT(r0, 0x0, 0x2, &(0x7f0000000080)=""/104) semctl$IPC_STAT(r0, 0x0, 0x2, &(0x7f0000000540)=""/206) r1 = semget$private(0x0, 0x0, 0x30) semctl$IPC_RMID(r1, 0x0, 0x0) semctl$IPC_STAT(r1, 0x0, 0x2, &(0x7f0000000080)=""/104) semctl$IPC_STAT(r1, 0x0, 0x2, &(0x7f0000000540)=""/206) r2 = semget$private(0x0, 0x0, 0xb0) semctl$IPC_RMID(r2, 0x0, 0x0) semctl$IPC_STAT(r2, 0x0, 0x2, &(0x7f0000000080)=""/104) semctl$IPC_STAT(r2, 0x0, 0x2, &(0x7f0000000540)=""/206) semctl$SETVAL(0x0, 0x2, 0x10, 0x0) [ 1120.333633] syz-executor.1: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1120.336815] syz-executor.3: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1120.386718] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 1120.391960] CPU: 1 PID: 25432 Comm: syz-executor.1 Not tainted 4.14.230-syzkaller #0 [ 1120.399850] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1120.409203] Call Trace: [ 1120.411799] dump_stack+0x1b2/0x281 [ 1120.415436] warn_alloc.cold+0x96/0x1cc [ 1120.419422] ? zone_watermark_ok_safe+0x220/0x220 [ 1120.424296] __alloc_pages_nodemask+0x2127/0x2720 [ 1120.429152] ? lock_acquire+0x170/0x3f0 [ 1120.433166] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1120.438021] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1120.443481] ? __mutex_unlock_slowpath+0x75/0x770 [ 1120.448338] alloc_pages_current+0x155/0x260 [ 1120.452753] ion_page_pool_alloc+0x118/0x1b0 [ 1120.457163] ion_system_heap_allocate+0x133/0x8c0 [ 1120.462009] ? _raw_spin_unlock+0x29/0x40 [ 1120.466159] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1120.471087] ? ion_system_contig_heap_create+0x130/0x130 [ 1120.476540] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1120.481556] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1120.486399] ion_alloc+0x27a/0x810 [ 1120.489946] ? ion_dma_buf_release+0x40/0x40 [ 1120.492801] syz-executor.3 cpuset=/ [ 1120.494357] ? __might_fault+0x177/0x1b0 [ 1120.494369] ion_ioctl+0xea/0x1f0 [ 1120.498012] mems_allowed=0-1 [ 1120.502071] ? ion_query_heaps+0x360/0x360 [ 1120.512855] ? ion_query_heaps+0x360/0x360 [ 1120.517089] do_vfs_ioctl+0x75a/0xff0 [ 1120.520888] ? ioctl_preallocate+0x1a0/0x1a0 [ 1120.525292] ? lock_downgrade+0x740/0x740 [ 1120.529445] ? __fget+0x225/0x360 [ 1120.532926] ? do_vfs_ioctl+0xff0/0xff0 [ 1120.536893] ? security_file_ioctl+0x83/0xb0 [ 1120.541290] SyS_ioctl+0x7f/0xb0 [ 1120.544662] ? do_vfs_ioctl+0xff0/0xff0 [ 1120.548635] do_syscall_64+0x1d5/0x640 [ 1120.552526] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1120.557713] RIP: 0033:0x466459 [ 1120.560950] RSP: 002b:00007feb59368188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1120.568674] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1120.575934] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000007 [ 1120.583198] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1120.590463] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1120.597764] R13: 00007ffe56f14bcf R14: 00007feb59368300 R15: 0000000000022000 [ 1120.606362] warn_alloc_show_mem: 1 callbacks suppressed [ 1120.606366] Mem-Info: [ 1120.614602] active_anon:12951 inactive_anon:47365 isolated_anon:12 [ 1120.614602] active_file:1495 inactive_file:2499 isolated_file:0 [ 1120.614602] unevictable:0 dirty:20 writeback:0 unstable:0 [ 1120.614602] slab_reclaimable:12512 slab_unreclaimable:118788 [ 1120.614602] mapped:55346 shmem:47887 pagetables:737 bounce:0 [ 1120.614602] free:165196 free_pcp:124 free_cma:0 [ 1120.649686] Node 0 active_anon:50472kB inactive_anon:132708kB active_file:5756kB inactive_file:9648kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:221052kB dirty:52kB writeback:0kB shmem:134396kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1120.657435] CPU: 0 PID: 25423 Comm: syz-executor.3 Not tainted 4.14.230-syzkaller #0 [ 1120.678346] Node 1 active_anon:1332kB inactive_anon:56752kB active_file:324kB inactive_file:348kB unevictable:0kB isolated(anon):48kB isolated(file):0kB mapped:432kB dirty:28kB writeback:0kB shmem:57152kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1120.685762] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1120.685767] Call Trace: [ 1120.685786] dump_stack+0x1b2/0x281 [ 1120.685800] warn_alloc.cold+0x96/0x1cc [ 1120.713148] Node 0 [ 1120.722489] ? zone_watermark_ok_safe+0x220/0x220 [ 1120.725078] DMA free:11000kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1120.728667] __alloc_pages_nodemask+0x2127/0x2720 [ 1120.732602] lowmem_reserve[]: [ 1120.734833] ? lock_acquire+0x170/0x3f0 [ 1120.734850] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1120.734869] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1120.739680] 0 [ 1120.765355] ? __mutex_unlock_slowpath+0x75/0x770 [ 1120.765362] ? retint_kernel+0x2d/0x2d [ 1120.765376] alloc_pages_current+0x155/0x260 [ 1120.765389] ion_page_pool_alloc+0x118/0x1b0 [ 1120.765398] ion_system_heap_allocate+0x133/0x8c0 [ 1120.765414] ? _raw_spin_unlock+0x29/0x40 [ 1120.770359] 2717 [ 1120.773324] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1120.773339] ? ion_system_contig_heap_create+0x130/0x130 [ 1120.773351] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1120.773363] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1120.777355] 2718 [ 1120.782162] ion_alloc+0x27a/0x810 [ 1120.782179] ? ion_dma_buf_release+0x40/0x40 [ 1120.787673] 2718 [ 1120.789417] ? __might_fault+0x177/0x1b0 [ 1120.789431] ion_ioctl+0xea/0x1f0 [ 1120.794296] 2718 [ 1120.798125] ? ion_query_heaps+0x360/0x360 [ 1120.798138] ? ion_query_heaps+0x360/0x360 [ 1120.798149] do_vfs_ioctl+0x75a/0xff0 [ 1120.806928] ? ioctl_preallocate+0x1a0/0x1a0 [ 1120.806938] ? lock_downgrade+0x740/0x740 [ 1120.806952] ? __fget+0x225/0x360 [ 1120.806962] ? do_vfs_ioctl+0xff0/0xff0 [ 1120.812070] Node 0 [ 1120.816178] ? security_file_ioctl+0x83/0xb0 [ 1120.816189] SyS_ioctl+0x7f/0xb0 [ 1120.816197] ? do_vfs_ioctl+0xff0/0xff0 [ 1120.816210] do_syscall_64+0x1d5/0x640 [ 1120.818292] DMA32 free:278492kB min:36200kB low:45248kB high:54296kB active_anon:50172kB inactive_anon:132708kB active_file:5472kB inactive_file:10012kB unevictable:0kB writepending:52kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:7744kB pagetables:2816kB bounce:0kB free_pcp:480kB local_pcp:188kB free_cma:0kB [ 1120.823172] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1120.823181] RIP: 0033:0x466459 [ 1120.823186] RSP: 002b:00007f8a667e8188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1120.823199] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1120.828654] lowmem_reserve[]: [ 1120.833728] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000005 [ 1120.833734] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1120.833739] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1120.833745] R13: 00007ffd25ba1ddf R14: 00007f8a667e8300 R15: 0000000000022000 [ 1120.846816] systemd[1]: Started Journal Service. [ 1120.849246] 0 [ 1120.942481] device hsr_slave_1 left promiscuous mode [ 1120.956544] device hsr_slave_0 left promiscuous mode [ 1120.965008] 0 0 0 0 [ 1121.017093] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1121.042784] lowmem_reserve[]: 0 0 0 0 0 [ 1121.046789] Node 1 Normal free:642072kB min:53696kB low:67120kB high:80544kB active_anon:1260kB inactive_anon:56752kB active_file:272kB inactive_file:320kB unevictable:0kB writepending:16kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:128kB pagetables:132kB bounce:0kB free_pcp:52kB local_pcp:0kB free_cma:0kB [ 1121.076130] team0 (unregistering): Port device team_slave_1 removed [ 1121.087895] lowmem_reserve[]: 0 0 0 0 0 [ 1121.092010] Node 0 DMA: 32*4kB (UE) 1*8kB (U) 5*16kB (UE) 1*32kB (E) 2*64kB (UE) 3*128kB (UME) 4*256kB (UME) 2*512kB (ME) 2*1024kB (ME) 3*2048kB (UM) 0*4096kB = 11000kB [ 1121.107867] team0 (unregistering): Port device team_slave_0 removed [ 1121.122786] Node 0 DMA32: 20092*4kB (UE) 4378*8kB (UME) 3791*16kB (UME) 3250*32kB (UME) 13*64kB (UM) 2*128kB (U) 62*256kB (U) 4*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 299056kB [ 1121.138824] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 1121.147680] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 1121.163230] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1121.174765] Node 1 Normal: 17221*4kB (UM) 1797*8kB (UME) 1810*16kB (UM) 1355*32kB (UM) 200*64kB (U) 2263*128kB (U) 803*256kB (U) 76*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 702524kB [ 1121.191856] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1121.201289] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1121.210344] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1121.219669] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1121.228773] 52133 total pagecache pages [ 1121.233275] 0 pages in swap cache [ 1121.236778] Swap cache stats: add 0, delete 0, find 0/0 [ 1121.242132] Free swap = 0kB [ 1121.246399] Total swap = 0kB [ 1121.249038] bond0 (unregistering): Released all slaves [ 1121.249421] 2097051 pages RAM [ 1121.259134] 0 pages HighMem/MovableOnly [ 1121.263603] 363848 pages reserved [ 1121.267053] 0 pages cma reserved [ 1122.875057] IPVS: ftp: loaded support on port[0] = 21 [ 1123.004199] Bluetooth: hci0 command 0x0409 tx timeout [ 1123.265026] chnl_net:caif_netlink_parms(): no params data found [ 1123.677547] bridge0: port 1(bridge_slave_0) entered blocking state [ 1123.688702] bridge0: port 1(bridge_slave_0) entered disabled state [ 1123.713947] device bridge_slave_0 entered promiscuous mode [ 1123.741313] bridge0: port 2(bridge_slave_1) entered blocking state [ 1123.751723] bridge0: port 2(bridge_slave_1) entered disabled state [ 1123.773902] device bridge_slave_1 entered promiscuous mode [ 1123.851027] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 1123.865475] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1123.936799] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 1123.957939] team0: Port device team_slave_0 added [ 1123.964980] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 1123.972271] team0: Port device team_slave_1 added [ 1124.006887] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1124.015856] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1124.072792] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1124.108747] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1124.127921] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1124.182753] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1124.208782] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 1124.224005] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 1124.271497] device hsr_slave_0 entered promiscuous mode [ 1124.293297] device hsr_slave_1 entered promiscuous mode [ 1124.299800] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 1124.322845] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready 13:36:21 executing program 2: timer_create(0x7, &(0x7f0000000080)={0x0, 0x2a, 0x1, @thr={&(0x7f0000000000)="cedfad775dd967d003dbe52d40534e44b24e419a438ccb478ff3986437dfb2fca4ea25e257ce70593b4b4f61cdbbf5a2983c0c90c1e3d51f07a4095f", &(0x7f0000000040)="8bd19b303ba21500f7c2d3f7cc2fd29ae3c6db45e63c59054646e1b44d3003f74d33b6c48e8208376d6b0111434cdac6450a"}}, &(0x7f00000000c0)=0x0) timer_gettime(r0, &(0x7f0000000100)) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100)='/dev/bsg\x00', 0x204402, 0x0) write$eventfd(r1, 0x0, 0x0) bind$can_raw(r1, &(0x7f0000000140), 0x10) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_HYPERV_EVENTFD(r2, 0x4018aebd, &(0x7f0000000180)={0x0, r1}) semctl$SETVAL(0x0, 0x0, 0x10, 0x0) 13:36:21 executing program 3: ioctl$SIOCPNDELRESOURCE(0xffffffffffffffff, 0x89ef, &(0x7f0000000040)) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f00000012c0)={0x0, @nl=@unspec, @tipc=@id={0x1e, 0x3, 0x2, {0x4e21, 0x4}}, @ethernet={0x307, @random="68d88c73bc2f"}, 0x0, 0x0, 0x0, 0x0, 0x20, &(0x7f0000001280)='bridge_slave_0\x00', 0x401, 0x0, 0xfd51}) semctl$SETVAL(0x0, 0x0, 0x10, 0x0) semctl$GETVAL(0x0, 0x0, 0xc, &(0x7f0000000180)=""/194) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$x25(0x9, 0x5, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x500, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x80000000, 0xa, 0x1}) 13:36:21 executing program 1: ioctl$SIOCPNDELRESOURCE(0xffffffffffffffff, 0x89ef, &(0x7f0000000040)=0xffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f00000012c0)={0x0, @nl=@unspec, @tipc=@id={0x1e, 0x3, 0x2, {0x4e21, 0x4}}, @ethernet={0x307, @random="68d88c73bc2f"}, 0x0, 0x0, 0x0, 0x0, 0x20, &(0x7f0000001280)='bridge_slave_0\x00', 0x401, 0x0, 0xfd51}) semctl$SETVAL(0x0, 0x0, 0x10, 0x0) semctl$GETVAL(0x0, 0x0, 0xc, &(0x7f0000000180)=""/194) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SCAUSEDIAG(r2, 0x89ec, &(0x7f0000000600)) bind$x25(r2, &(0x7f0000001480)={0x9, @remote={[], 0x3}}, 0x12) syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, &(0x7f00000014c0)) r3 = semget$private(0x0, 0x1, 0x484) semctl$IPC_STAT(r3, 0x0, 0x2, &(0x7f00000000c0)=""/89) semctl$SEM_INFO(r3, 0x4, 0x13, &(0x7f0000000280)=""/4096) sendmsg$RDMA_NLDEV_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000001440)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001400)={&(0x7f0000001500)=ANY=[@ANYBLOB="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"/270], 0x60}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000000)='SEG6\x00', r1) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x500, 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000080)={0x80000000, 0xa, 0x1}) 13:36:21 executing program 5: r0 = semget$private(0x0, 0x0, 0xb0) semctl$IPC_RMID(r0, 0x0, 0x0) semctl$IPC_STAT(r0, 0x0, 0x2, &(0x7f0000000080)=""/104) semctl$IPC_STAT(r0, 0x0, 0x2, &(0x7f0000000540)=""/206) r1 = semget$private(0x0, 0x0, 0x30) semctl$IPC_RMID(r1, 0x0, 0x0) semctl$IPC_STAT(r1, 0x0, 0x2, &(0x7f0000000080)=""/104) semctl$IPC_STAT(r1, 0x0, 0x2, &(0x7f0000000540)=""/206) r2 = semget$private(0x0, 0x0, 0xb0) semctl$IPC_RMID(r2, 0x0, 0x0) semctl$IPC_STAT(r2, 0x0, 0x2, &(0x7f0000000080)=""/104) semctl$IPC_STAT(r2, 0x0, 0x2, &(0x7f0000000540)=""/206) semctl$SETVAL(0x0, 0x2, 0x10, 0x0) [ 1124.577439] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready 13:36:21 executing program 4: semctl$SETVAL(0x0, 0x0, 0x10, 0x0) semctl$SEM_INFO(0xffffffffffffffff, 0x1, 0x13, &(0x7f0000000240)=""/41) getitimer(0x2, &(0x7f0000000540)) semctl$SEM_STAT(0x0, 0x3, 0x12, &(0x7f0000000280)=""/230) semctl$GETNCNT(0x0, 0x4, 0xe, &(0x7f0000000400)=""/226) r0 = semget$private(0x0, 0x1, 0x10c) semctl$GETNCNT(r0, 0x2, 0xe, &(0x7f0000000500)=""/25) semctl$SETVAL(0x0, 0x2, 0x10, &(0x7f0000000180)=0xebfe) add_key$user(&(0x7f0000000080)='user\x00', &(0x7f00000000c0)={'syz', 0x3}, &(0x7f0000000100)="fc2edf2fc5a4a8243b61253cdcdd11d17affe577e3b5f9761971adf1e905d389a24ecb495161f7f9c3f371da22d7279bafcd95e23176dbaadf5577225b0f835c97ef76f369891989d6a6a80e905fb58a280a3cacbfbf2abfdc2810111f2b8cce652a89f47930d1209ce1", 0x6a, 0xffffffffffffffff) semctl$GETNCNT(0xffffffffffffffff, 0x4, 0xe, &(0x7f0000000380)=""/88) r1 = semget$private(0x0, 0x1, 0x160) semctl$IPC_INFO(r1, 0x2, 0x3, &(0x7f00000001c0)=""/80) semctl$SEM_INFO(0x0, 0x1, 0x13, &(0x7f0000000000)=""/68) 13:36:21 executing program 2: timer_create(0x7, &(0x7f0000000080)={0x0, 0x2a, 0x1, @thr={&(0x7f0000000000)="cedfad775dd967d003dbe52d40534e44b24e419a438ccb478ff3986437dfb2fca4ea25e257ce70593b4b4f61cdbbf5a2983c0c90c1e3d51f07a4095f", &(0x7f0000000040)="8bd19b303ba21500f7c2d3f7cc2fd29ae3c6db45e63c59054646e1b44d3003f74d33b6c48e8208376d6b0111434cdac6450a"}}, &(0x7f00000000c0)=0x0) timer_gettime(r0, &(0x7f0000000100)) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100)='/dev/bsg\x00', 0x204402, 0x0) write$eventfd(r1, 0x0, 0x0) bind$can_raw(r1, &(0x7f0000000140), 0x10) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_HYPERV_EVENTFD(r2, 0x4018aebd, &(0x7f0000000180)={0x0, r1}) semctl$SETVAL(0x0, 0x0, 0x10, 0x0) [ 1124.738444] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1124.784084] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 1124.820725] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 1124.848544] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1124.861951] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1124.893720] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 1124.899836] 8021q: adding VLAN 0 to HW filter on device team0 [ 1124.926514] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 1124.943579] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1124.951613] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1124.973464] bridge0: port 1(bridge_slave_0) entered blocking state [ 1124.979891] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1125.015755] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 1125.026931] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1125.035600] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1125.054022] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1125.087994] bridge0: port 2(bridge_slave_1) entered blocking state [ 1125.094434] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1125.129194] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 1125.136163] Bluetooth: hci0 command 0x041b tx timeout [ 1125.141964] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1125.157823] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 1125.175410] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1125.189426] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 1125.216271] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1125.229672] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1125.255625] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1125.279256] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 1125.311299] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1125.324328] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1125.338965] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 1125.376805] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1125.393367] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1125.402259] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 1125.413941] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1125.428243] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1125.447830] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 1125.465789] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1125.484788] syz-executor.1: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1125.512762] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 1125.517914] CPU: 0 PID: 25673 Comm: syz-executor.1 Not tainted 4.14.230-syzkaller #0 [ 1125.520893] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 1125.525789] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1125.525794] Call Trace: [ 1125.525813] dump_stack+0x1b2/0x281 [ 1125.525827] warn_alloc.cold+0x96/0x1cc [ 1125.525844] ? zone_watermark_ok_safe+0x220/0x220 [ 1125.540907] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 1125.541340] __alloc_pages_nodemask+0x2127/0x2720 [ 1125.548444] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1125.551483] ? lock_acquire+0x170/0x3f0 [ 1125.551503] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1125.561595] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1125.562516] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1125.562530] ? __mutex_unlock_slowpath+0x75/0x770 [ 1125.562540] ? retint_kernel+0x2d/0x2d [ 1125.581652] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1125.582886] alloc_pages_current+0x155/0x260 [ 1125.582901] ion_page_pool_alloc+0x118/0x1b0 [ 1125.582911] ion_system_heap_allocate+0x133/0x8c0 [ 1125.582922] ? ion_alloc+0x187/0x810 [ 1125.627033] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1125.632833] ? ion_system_contig_heap_create+0x130/0x130 [ 1125.638304] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1125.643318] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1125.648160] ion_alloc+0x204/0x810 [ 1125.651702] ? ion_dma_buf_release+0x40/0x40 [ 1125.656113] ? __might_fault+0x177/0x1b0 [ 1125.660195] ion_ioctl+0xea/0x1f0 [ 1125.663648] ? ion_query_heaps+0x360/0x360 [ 1125.667881] ? ion_query_heaps+0x360/0x360 [ 1125.672114] do_vfs_ioctl+0x75a/0xff0 [ 1125.675930] ? ioctl_preallocate+0x1a0/0x1a0 [ 1125.680333] ? lock_downgrade+0x740/0x740 [ 1125.684481] ? __fget+0x225/0x360 [ 1125.687931] ? do_vfs_ioctl+0xff0/0xff0 [ 1125.691909] ? security_file_ioctl+0x83/0xb0 [ 1125.696335] SyS_ioctl+0x7f/0xb0 [ 1125.699716] ? do_vfs_ioctl+0xff0/0xff0 [ 1125.703687] do_syscall_64+0x1d5/0x640 [ 1125.707581] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1125.712768] RIP: 0033:0x466459 [ 1125.715960] RSP: 002b:00007feb59368188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1125.723705] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1125.730977] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000007 [ 1125.738261] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1125.745544] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1125.752820] R13: 00007ffe56f14bcf R14: 00007feb59368300 R15: 0000000000022000 [ 1125.785017] warn_alloc_show_mem: 1 callbacks suppressed [ 1125.785026] Mem-Info: [ 1125.795085] active_anon:12973 inactive_anon:47358 isolated_anon:24 [ 1125.795085] active_file:934 inactive_file:2407 isolated_file:0 [ 1125.795085] unevictable:0 dirty:58 writeback:0 unstable:0 [ 1125.795085] slab_reclaimable:12490 slab_unreclaimable:116966 [ 1125.795085] mapped:54828 shmem:47892 pagetables:737 bounce:0 [ 1125.795085] free:204047 free_pcp:521 free_cma:0 [ 1125.831886] Node 0 active_anon:50648kB inactive_anon:132724kB active_file:456kB inactive_file:4604kB unevictable:0kB isolated(anon):48kB isolated(file):0kB mapped:213268kB dirty:120kB writeback:0kB shmem:134416kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1125.866295] Node 1 active_anon:1244kB inactive_anon:56708kB active_file:3280kB inactive_file:5024kB unevictable:0kB isolated(anon):48kB isolated(file):0kB mapped:6344kB dirty:112kB writeback:0kB shmem:57152kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1125.896112] Node 0 DMA free:11260kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1125.931151] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1125.936392] Node 0 DMA32 free:596264kB min:36200kB low:45248kB high:54296kB active_anon:50748kB inactive_anon:132724kB active_file:456kB inactive_file:5204kB unevictable:0kB writepending:120kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:7616kB pagetables:2816kB bounce:0kB free_pcp:1340kB local_pcp:656kB free_cma:0kB [ 1125.969396] lowmem_reserve[]: 0 0 0 0 0 [ 1125.974324] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1126.001651] lowmem_reserve[]: 0 0 0 0 0 [ 1126.009184] Node 1 Normal free:388372kB min:53696kB low:67120kB high:80544kB active_anon:844kB inactive_anon:56708kB active_file:3380kB inactive_file:4924kB unevictable:0kB writepending:112kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:160kB pagetables:132kB bounce:0kB free_pcp:1392kB local_pcp:656kB free_cma:0kB [ 1126.060545] lowmem_reserve[]: 0 0 0 0 0 [ 1126.065934] Node 0 DMA: 63*4kB (UE) 40*8kB (U) 7*16kB (UE) 1*32kB (E) 1*64kB (E) 2*128kB (ME) 4*256kB (UME) 2*512kB (ME) 2*1024kB (ME) 3*2048kB (UM) 0*4096kB = 11276kB [ 1126.095815] Node 0 DMA32: 18935*4kB (UEH) 11224*8kB (UMEH) 9837*16kB (UEH) 7080*32kB (UMEH) 2151*64kB (UH) 115*128kB (UM) 1*256kB (M) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 702124kB [ 1126.116930] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1126.130666] Node 1 Normal: 2696*4kB (UM) 1835*8kB (UME) 1452*16kB (UM) 1082*32kB (UM) 2339*64kB (U) 1283*128kB (U) 39*256kB (U) 14*512kB (U) 4*1024kB (U) 0*2048kB 0*4096kB = 418488kB [ 1126.150035] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1126.164564] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1126.165429] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 1126.179095] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1126.189291] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1126.197989] 51787 total pagecache pages [ 1126.201977] 0 pages in swap cache [ 1126.212194] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 1126.219230] Swap cache stats: add 0, delete 0, find 0/0 [ 1126.225122] Free swap = 0kB [ 1126.228139] Total swap = 0kB [ 1126.231152] 2097051 pages RAM [ 1126.234684] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1126.242640] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1126.251407] 0 pages HighMem/MovableOnly [ 1126.255607] 363848 pages reserved [ 1126.259065] 0 pages cma reserved [ 1126.414038] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 1126.421480] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 1126.448082] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 1126.474427] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 1126.493040] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1126.507651] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1126.525984] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1126.541020] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1126.559476] device veth0_vlan entered promiscuous mode [ 1126.582220] device veth1_vlan entered promiscuous mode [ 1126.604059] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 1126.635038] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 1126.648087] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 1126.673568] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 1126.680454] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1126.693945] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1126.701126] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1126.723748] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1126.733642] device veth0_macvtap entered promiscuous mode [ 1126.739943] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 1126.767095] device veth1_macvtap entered promiscuous mode [ 1126.773610] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 1126.796594] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 1126.816128] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 1126.835059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1126.852881] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1126.862009] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1126.892751] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1126.901896] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1126.912544] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1126.922168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1126.932418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1126.942401] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1126.952606] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1126.963881] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 1126.970933] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1126.983633] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1126.991720] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1127.004321] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1127.021971] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1127.045726] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1127.063518] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1127.083683] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1127.117133] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1127.137262] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1127.157300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1127.172814] Bluetooth: hci0 command 0x040f tx timeout [ 1127.182823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1127.192637] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1127.221890] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1127.241680] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1127.268624] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 1127.284202] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1127.303093] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1127.325683] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1128.121170] syz-executor.3: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1128.137937] syz-executor.0: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1128.149037] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 1128.160627] CPU: 1 PID: 25671 Comm: syz-executor.3 Not tainted 4.14.230-syzkaller #0 [ 1128.168517] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1128.177890] Call Trace: [ 1128.180474] dump_stack+0x1b2/0x281 [ 1128.184112] warn_alloc.cold+0x96/0x1cc [ 1128.188078] ? zone_watermark_ok_safe+0x220/0x220 [ 1128.192927] __alloc_pages_nodemask+0x2127/0x2720 [ 1128.197779] ? _raw_spin_unlock_irq+0x24/0x80 [ 1128.202269] ? lock_acquire+0x170/0x3f0 [ 1128.206241] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1128.211081] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1128.216544] ? __mutex_unlock_slowpath+0x75/0x770 [ 1128.221410] alloc_pages_current+0x155/0x260 [ 1128.225813] ion_page_pool_alloc+0x118/0x1b0 [ 1128.230211] ion_system_heap_allocate+0x133/0x8c0 [ 1128.235059] ? ion_alloc+0x187/0x810 [ 1128.238762] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1128.244832] ? ion_system_contig_heap_create+0x130/0x130 [ 1128.250274] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1128.255301] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1128.260144] ion_alloc+0x204/0x810 [ 1128.263698] ? ion_dma_buf_release+0x40/0x40 [ 1128.268099] ? __might_fault+0x177/0x1b0 [ 1128.272277] ion_ioctl+0xea/0x1f0 [ 1128.275734] ? ion_query_heaps+0x360/0x360 [ 1128.279963] ? ion_query_heaps+0x360/0x360 [ 1128.284191] do_vfs_ioctl+0x75a/0xff0 [ 1128.288019] ? ioctl_preallocate+0x1a0/0x1a0 [ 1128.292419] ? lock_downgrade+0x740/0x740 [ 1128.296575] ? __fget+0x225/0x360 [ 1128.300156] ? do_vfs_ioctl+0xff0/0xff0 [ 1128.304128] ? security_file_ioctl+0x83/0xb0 [ 1128.308550] SyS_ioctl+0x7f/0xb0 [ 1128.311907] ? do_vfs_ioctl+0xff0/0xff0 [ 1128.315875] do_syscall_64+0x1d5/0x640 [ 1128.319763] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1128.324945] RIP: 0033:0x466459 [ 1128.328122] RSP: 002b:00007f8a667e8188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1128.335842] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1128.343122] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000005 [ 1128.350383] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1128.357670] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1128.364947] R13: 00007ffd25ba1ddf R14: 00007f8a667e8300 R15: 0000000000022000 [ 1128.382359] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 1128.393313] CPU: 1 PID: 25726 Comm: syz-executor.0 Not tainted 4.14.230-syzkaller #0 [ 1128.401309] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1128.410657] Call Trace: [ 1128.413247] dump_stack+0x1b2/0x281 [ 1128.416899] warn_alloc.cold+0x96/0x1cc [ 1128.420881] ? zone_watermark_ok_safe+0x220/0x220 [ 1128.425730] __alloc_pages_nodemask+0x2127/0x2720 [ 1128.430582] ? __schedule+0x893/0x1de0 [ 1128.434465] ? lock_acquire+0x170/0x3f0 [ 1128.438454] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1128.443318] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1128.448764] ? __mutex_unlock_slowpath+0x75/0x770 [ 1128.453603] alloc_pages_current+0x155/0x260 [ 1128.458022] ion_page_pool_alloc+0x118/0x1b0 [ 1128.462426] ion_system_heap_allocate+0x133/0x8c0 [ 1128.467263] ? ion_alloc+0x187/0x810 [ 1128.470967] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1128.476425] ? ion_system_contig_heap_create+0x130/0x130 [ 1128.481891] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1128.486907] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1128.491750] ion_alloc+0x204/0x810 [ 1128.495286] ? ion_dma_buf_release+0x40/0x40 [ 1128.499689] ? __might_fault+0x177/0x1b0 [ 1128.503743] ion_ioctl+0xea/0x1f0 [ 1128.507187] ? ion_query_heaps+0x360/0x360 [ 1128.511432] ? ion_query_heaps+0x360/0x360 [ 1128.515681] do_vfs_ioctl+0x75a/0xff0 [ 1128.519487] ? ioctl_preallocate+0x1a0/0x1a0 [ 1128.523900] ? lock_downgrade+0x740/0x740 [ 1128.528047] ? __fget+0x225/0x360 [ 1128.531512] ? do_vfs_ioctl+0xff0/0xff0 [ 1128.535484] ? security_file_ioctl+0x83/0xb0 [ 1128.539886] SyS_ioctl+0x7f/0xb0 [ 1128.543246] ? do_vfs_ioctl+0xff0/0xff0 [ 1128.547214] do_syscall_64+0x1d5/0x640 [ 1128.551101] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1128.556289] RIP: 0033:0x466459 [ 1128.559470] RSP: 002b:00007f1cd3181188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1128.567170] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1128.574451] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000004 [ 1128.581727] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1128.588986] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1128.596247] R13: 00007ffceb2c0dcf R14: 00007f1cd3181300 R15: 0000000000022000 [ 1128.627333] Mem-Info: [ 1128.630384] active_anon:12894 inactive_anon:47368 isolated_anon:0 [ 1128.630384] active_file:19 inactive_file:32 isolated_file:11 [ 1128.630384] unevictable:0 dirty:12 writeback:19 unstable:0 [ 1128.630384] slab_reclaimable:12490 slab_unreclaimable:117739 [ 1128.630384] mapped:52639 shmem:47891 pagetables:742 bounce:0 [ 1128.630384] free:25138 free_pcp:396 free_cma:0 [ 1128.667095] Node 0 active_anon:50536kB inactive_anon:132716kB active_file:24kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:210548kB dirty:28kB writeback:32kB shmem:134408kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1128.698962] Node 1 active_anon:1040kB inactive_anon:56756kB active_file:152kB inactive_file:156kB unevictable:0kB isolated(anon):0kB isolated(file):44kB mapped:208kB dirty:20kB writeback:44kB shmem:57156kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1128.728845] Node 0 DMA free:11056kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1128.755406] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1128.760459] Node 0 DMA32 free:35620kB min:36200kB low:45248kB high:54296kB active_anon:50536kB inactive_anon:132716kB active_file:40kB inactive_file:116kB unevictable:0kB writepending:60kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:7552kB pagetables:2816kB bounce:0kB free_pcp:668kB local_pcp:636kB free_cma:0kB [ 1128.791260] lowmem_reserve[]: 0 0 0 0 0 [ 1128.795415] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1128.821816] lowmem_reserve[]: 0 0 0 0 0 [ 1128.825894] Node 1 Normal free:53140kB min:53696kB low:67120kB high:80544kB active_anon:1040kB inactive_anon:56756kB active_file:712kB inactive_file:212kB unevictable:0kB writepending:64kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:224kB pagetables:152kB bounce:0kB free_pcp:892kB local_pcp:228kB free_cma:0kB [ 1128.859731] lowmem_reserve[]: 0 0 0 0 0 [ 1128.863849] Node 0 DMA: 2*4kB (E) 1*8kB (U) 18*16kB (UE) 10*32kB (UE) 1*64kB (E) 3*128kB (UME) 3*256kB (UME) 2*512kB (ME) 2*1024kB (ME) 3*2048kB (UM) 0*4096kB = 11056kB [ 1128.879302] Node 0 DMA32: 636*4kB (UMEH) 297*8kB (UMEH) 178*16kB (MEH) 34*32kB (MEH) 15*64kB (UMH) 160*128kB (UM) 23*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36184kB [ 1128.895053] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1128.906211] Node 1 Normal: 53*4kB (M) 18*8kB (ME) 5*16kB (UM) 40*32kB (UM) 12*64kB (UM) 0*128kB 109*256kB (U) 45*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 53428kB [ 1128.920878] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1128.929931] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1128.939141] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1128.948074] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1128.956721] 47916 total pagecache pages [ 1128.960699] 0 pages in swap cache [ 1128.964532] Swap cache stats: add 0, delete 0, find 0/0 [ 1128.969897] Free swap = 0kB [ 1128.974631] Total swap = 0kB [ 1128.977657] 2097051 pages RAM [ 1128.980751] 0 pages HighMem/MovableOnly [ 1128.984755] 363848 pages reserved [ 1128.988199] 0 pages cma reserved [ 1129.033666] syz-executor.0 invoked oom-killer: gfp_mask=0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null), order=0, oom_score_adj=1000 [ 1129.051124] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 1129.056329] CPU: 0 PID: 25726 Comm: syz-executor.0 Not tainted 4.14.230-syzkaller #0 [ 1129.064299] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1129.073642] Call Trace: [ 1129.076227] dump_stack+0x1b2/0x281 [ 1129.079847] dump_header+0x178/0x82f [ 1129.083552] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1129.088650] ? ___ratelimit+0x2cd/0x530 [ 1129.092616] oom_kill_process.cold+0x10/0xa40 [ 1129.097131] out_of_memory+0xe3e/0x1190 [ 1129.101110] ? oom_killer_disable+0x1c0/0x1c0 [ 1129.105614] ? mutex_trylock+0x152/0x1a0 [ 1129.109669] __alloc_pages_nodemask+0x23e1/0x2720 [ 1129.114511] ? lock_acquire+0x170/0x3f0 [ 1129.118479] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1129.123312] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1129.127814] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1129.133261] ? __sanitizer_cov_trace_pc+0x9/0x50 [ 1129.138026] alloc_pages_current+0x155/0x260 [ 1129.142444] ion_page_pool_alloc+0x118/0x1b0 [ 1129.146844] ion_system_heap_allocate+0x133/0x8c0 [ 1129.151677] ? ion_alloc+0x187/0x810 [ 1129.155382] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1129.160823] ? ion_system_contig_heap_create+0x130/0x130 [ 1129.166266] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1129.171288] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1129.176125] ion_alloc+0x204/0x810 [ 1129.179662] ? ion_dma_buf_release+0x40/0x40 [ 1129.184082] ? __might_fault+0x177/0x1b0 [ 1129.188135] ion_ioctl+0xea/0x1f0 [ 1129.191592] ? ion_query_heaps+0x360/0x360 [ 1129.195824] ? ion_query_heaps+0x360/0x360 [ 1129.200074] do_vfs_ioctl+0x75a/0xff0 [ 1129.203891] ? ioctl_preallocate+0x1a0/0x1a0 [ 1129.208290] ? lock_downgrade+0x740/0x740 [ 1129.212432] ? __fget+0x225/0x360 [ 1129.215889] ? do_vfs_ioctl+0xff0/0xff0 [ 1129.219855] ? security_file_ioctl+0x83/0xb0 [ 1129.224261] SyS_ioctl+0x7f/0xb0 [ 1129.227615] ? do_vfs_ioctl+0xff0/0xff0 [ 1129.231606] do_syscall_64+0x1d5/0x640 [ 1129.235489] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1129.240685] RIP: 0033:0x466459 [ 1129.243860] RSP: 002b:00007f1cd3181188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1129.251557] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1129.258817] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000004 [ 1129.266078] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1129.274133] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1129.281394] R13: 00007ffceb2c0dcf R14: 00007f1cd3181300 R15: 0000000000022000 [ 1129.294260] Bluetooth: hci0 command 0x0419 tx timeout [ 1129.295256] Mem-Info: [ 1129.301899] active_anon:12894 inactive_anon:47368 isolated_anon:0 [ 1129.301899] active_file:16 inactive_file:16 isolated_file:0 [ 1129.301899] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1129.301899] slab_reclaimable:12482 slab_unreclaimable:117516 [ 1129.301899] mapped:52650 shmem:47891 pagetables:742 bounce:0 [ 1129.301899] free:25196 free_pcp:30 free_cma:0 [ 1129.337946] Node 0 active_anon:50536kB inactive_anon:132716kB active_file:20kB inactive_file:20kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:210600kB dirty:0kB writeback:0kB shmem:134408kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1129.368206] Node 1 active_anon:1040kB inactive_anon:56756kB active_file:44kB inactive_file:44kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:57156kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1129.397453] Node 0 DMA free:11056kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1129.452438] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1129.479131] Node 0 DMA32 free:36176kB min:36200kB low:45248kB high:54296kB active_anon:50536kB inactive_anon:132716kB active_file:20kB inactive_file:20kB unevictable:0kB writepending:0kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:7552kB pagetables:2816kB bounce:0kB free_pcp:120kB local_pcp:0kB free_cma:0kB [ 1129.517825] lowmem_reserve[]: 0 0 0 0 0 [ 1129.522231] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1129.555430] lowmem_reserve[]: 0 0 0 0 0 [ 1129.559442] Node 1 Normal free:53548kB min:53696kB low:67120kB high:80544kB active_anon:1040kB inactive_anon:56756kB active_file:44kB inactive_file:44kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:224kB pagetables:152kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1129.592154] lowmem_reserve[]: 0 0 0 0 0 [ 1129.596240] Node 0 DMA: 2*4kB (E) 1*8kB (U) 18*16kB (UE) 10*32kB (UE) 1*64kB (E) 3*128kB (UME) 3*256kB (UME) 2*512kB (ME) 2*1024kB (ME) 3*2048kB (UM) 0*4096kB = 11056kB [ 1129.615855] Node 0 DMA32: 519*4kB (UMEH) 323*8kB (UMEH) 182*16kB (UMEH) 36*32kB (UMEH) 15*64kB (UMH) 160*128kB (UM) 23*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36052kB [ 1129.632614] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1129.656594] Node 1 Normal: 51*4kB (M) 18*8kB (UME) 8*16kB (M) 44*32kB (UM) 12*64kB (UM) 0*128kB 109*256kB (U) 45*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 53596kB [ 1129.679598] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1129.690513] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1129.709664] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1129.721325] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1129.740874] 47941 total pagecache pages [ 1129.746287] 0 pages in swap cache [ 1129.749744] Swap cache stats: add 0, delete 0, find 0/0 [ 1129.764142] Free swap = 0kB [ 1129.767170] Total swap = 0kB [ 1129.770182] 2097051 pages RAM [ 1129.777704] 0 pages HighMem/MovableOnly [ 1129.781698] 363848 pages reserved [ 1129.787477] 0 pages cma reserved [ 1129.790850] Out of memory (oom_kill_allocating_task): Kill process 25726 (syz-executor.0) score 0 or sacrifice child [ 1129.808358] Killed process 25723 (syz-executor.0) total-vm:93252kB, anon-rss:100kB, file-rss:33516kB, shmem-rss:0kB [ 1129.873352] oom_reaper: reaped process 25723 (syz-executor.0), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1129.943089] syz-fuzzer invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1129.961601] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 1129.987268] CPU: 0 PID: 7975 Comm: syz-fuzzer Not tainted 4.14.230-syzkaller #0 [ 1129.994739] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1130.004096] Call Trace: [ 1130.006697] dump_stack+0x1b2/0x281 [ 1130.010334] dump_header+0x178/0x82f [ 1130.014059] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1130.019159] ? ___ratelimit+0x2cd/0x530 [ 1130.023135] oom_kill_process.cold+0x10/0xa40 [ 1130.027662] out_of_memory+0xe3e/0x1190 [ 1130.031656] ? oom_killer_disable+0x1c0/0x1c0 [ 1130.036163] ? mutex_trylock+0x152/0x1a0 [ 1130.040212] __alloc_pages_nodemask+0x23e1/0x2720 [ 1130.045055] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1130.049898] alloc_pages_current+0x155/0x260 [ 1130.054295] filemap_fault+0x11a1/0x1ad0 [ 1130.058354] ext4_filemap_fault+0x84/0xb0 [ 1130.062492] __do_fault+0xfa/0x380 [ 1130.066023] __handle_mm_fault+0x2497/0x4620 [ 1130.070419] ? vm_insert_page+0x7c0/0x7c0 [ 1130.074575] ? free_object+0xe4/0x240 [ 1130.078438] ? mark_held_locks+0xa6/0xf0 [ 1130.082492] handle_mm_fault+0x455/0x9c0 [ 1130.086548] __do_page_fault+0x549/0xad0 [ 1130.090614] ? spurious_fault+0x640/0x640 [ 1130.094752] ? do_page_fault+0x60/0x500 [ 1130.098715] ? page_fault+0x2f/0x50 [ 1130.102330] page_fault+0x45/0x50 [ 1130.105791] RIP: 0000:0x940aec [ 1130.108966] RSP: 1400:000000c00003df28 EFLAGS: 0043b6a0 [ 1130.127047] Mem-Info: [ 1130.161067] active_anon:12894 inactive_anon:47368 isolated_anon:0 [ 1130.161067] active_file:31 inactive_file:27 isolated_file:0 [ 1130.161067] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1130.161067] slab_reclaimable:12482 slab_unreclaimable:117364 [ 1130.161067] mapped:52656 shmem:47891 pagetables:742 bounce:0 [ 1130.161067] free:13967 free_pcp:63 free_cma:0 [ 1130.192813] syz-executor.0: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1130.206765] Node 0 active_anon:50536kB inactive_anon:132716kB active_file:52kB inactive_file:92kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:210624kB dirty:0kB writeback:0kB shmem:134408kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1130.213519] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 1130.245195] CPU: 0 PID: 25726 Comm: syz-executor.0 Not tainted 4.14.230-syzkaller #0 [ 1130.247919] Node 1 active_anon:1040kB inactive_anon:56756kB active_file:72kB inactive_file:16kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:57156kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1130.253080] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1130.253085] Call Trace: [ 1130.253105] dump_stack+0x1b2/0x281 [ 1130.253120] warn_alloc.cold+0x96/0x1cc [ 1130.253134] ? zone_watermark_ok_safe+0x220/0x220 [ 1130.279989] Node 0 [ 1130.289308] ? usleep_range+0x130/0x130 [ 1130.289319] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1130.289332] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1130.289343] ? run_timer_softirq+0x5a0/0x5a0 [ 1130.291944] DMA free:10972kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1130.295578] __alloc_pages_nodemask+0x2127/0x2720 [ 1130.295596] ? lock_acquire+0x170/0x3f0 [ 1130.295612] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1130.295625] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1130.299584] lowmem_reserve[]: [ 1130.304443] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1130.304456] ? __sanitizer_cov_trace_pc+0x9/0x50 [ 1130.304472] alloc_pages_current+0x155/0x260 [ 1130.306686] 0 [ 1130.310665] ion_page_pool_alloc+0x118/0x1b0 [ 1130.315885] 2717 [ 1130.320864] ion_system_heap_allocate+0x133/0x8c0 [ 1130.325298] 2718 [ 1130.350775] ? ion_alloc+0x187/0x810 [ 1130.350788] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1130.350797] ? ion_system_contig_heap_create+0x130/0x130 [ 1130.350815] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1130.355658] 2718 [ 1130.359619] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1130.364459] 2718 [ 1130.368917] ion_alloc+0x204/0x810 [ 1130.371995] Node 0 [ 1130.377434] ? ion_dma_buf_release+0x40/0x40 [ 1130.377447] ? __might_fault+0x177/0x1b0 [ 1130.377459] ion_ioctl+0xea/0x1f0 [ 1130.382206] DMA32 free:18084kB min:36200kB low:45248kB high:54296kB active_anon:50536kB inactive_anon:132716kB active_file:8kB inactive_file:4kB unevictable:0kB writepending:0kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:7552kB pagetables:2816kB bounce:0kB free_pcp:132kB local_pcp:4kB free_cma:0kB [ 1130.386585] ? ion_query_heaps+0x360/0x360 [ 1130.386597] ? ion_query_heaps+0x360/0x360 [ 1130.386608] do_vfs_ioctl+0x75a/0xff0 [ 1130.386620] ? ioctl_preallocate+0x1a0/0x1a0 [ 1130.388399] lowmem_reserve[]: [ 1130.392792] ? lock_downgrade+0x740/0x740 [ 1130.392812] ? __fget+0x225/0x360 [ 1130.392821] ? do_vfs_ioctl+0xff0/0xff0 [ 1130.394864] 0 [ 1130.399712] ? security_file_ioctl+0x83/0xb0 [ 1130.401745] 0 [ 1130.405458] SyS_ioctl+0x7f/0xb0 [ 1130.405467] ? do_vfs_ioctl+0xff0/0xff0 [ 1130.405479] do_syscall_64+0x1d5/0x640 [ 1130.405494] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1130.410914] 0 [ 1130.416391] RIP: 0033:0x466459 [ 1130.416398] RSP: 002b:00007f1cd3181188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1130.416408] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1130.416412] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000004 [ 1130.416417] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1130.416422] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1130.416427] R13: 00007ffceb2c0dcf R14: 00007f1cd3181300 R15: 0000000000022000 [ 1130.421523] warn_alloc_show_mem: 1 callbacks suppressed [ 1130.421527] Mem-Info: [ 1130.436974] 0 [ 1130.444869] active_anon:12894 inactive_anon:47368 isolated_anon:0 [ 1130.444869] active_file:31 inactive_file:27 isolated_file:0 [ 1130.444869] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1130.444869] slab_reclaimable:12482 slab_unreclaimable:117364 [ 1130.444869] mapped:52656 shmem:47891 pagetables:742 bounce:0 [ 1130.444869] free:13967 free_pcp:63 free_cma:0 [ 1130.444898] Node 0 active_anon:50536kB inactive_anon:132716kB active_file:52kB inactive_file:92kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:210624kB dirty:0kB writeback:0kB shmem:134408kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1130.444914] Node 1 active_anon:1040kB inactive_anon:56756kB active_file:72kB inactive_file:16kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:57156kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1130.444918] Node 0 DMA free:10972kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1130.444938] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1130.444959] Node 0 DMA32 free:18084kB min:36200kB low:45248kB high:54296kB active_anon:50536kB inactive_anon:132716kB active_file:8kB inactive_file:4kB unevictable:0kB writepending:0kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:7552kB pagetables:2816kB bounce:0kB free_pcp:132kB local_pcp:128kB free_cma:0kB [ 1130.444980] lowmem_reserve[]: 0 0 0 0 0 [ 1130.445000] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1130.445022] lowmem_reserve[]: [ 1130.456610] 0 [ 1130.480729] 0 [ 1130.497452] 0 [ 1130.500518] Node 0 [ 1130.503999] 0 0 0 [ 1130.504012] Node 1 Normal free:26812kB min:53696kB low:67120kB high:80544kB active_anon:1040kB inactive_anon:56756kB active_file:72kB inactive_file:16kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:192kB pagetables:152kB bounce:0kB free_pcp:120kB local_pcp:120kB free_cma:0kB [ 1130.504033] lowmem_reserve[]: 0 0 0 0 0 [ 1130.504054] Node 0 DMA: 3*4kB (UE) 0*8kB 13*16kB (UE) 10*32kB (UE) 1*64kB (E) 3*128kB (UME) 3*256kB (UME) 2*512kB [ 1130.518825] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1130.523072] (ME) [ 1130.533045] lowmem_reserve[]: [ 1130.535368] 2*1024kB [ 1130.537603] 0 [ 1130.551734] (ME) [ 1130.559050] 0 [ 1130.562123] 3*2048kB [ 1130.576078] 0 [ 1130.589784] (UM) [ 1130.597697] 0 [ 1130.635151] 0*4096kB [ 1130.657739] 0 [ 1130.697524] = 10972kB [ 1130.752431] Node 0 [ 1130.777889] Node 1 [ 1130.787511] DMA32: [ 1130.820311] Normal free:26812kB min:53696kB low:67120kB high:80544kB active_anon:1040kB inactive_anon:56756kB active_file:72kB inactive_file:16kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:192kB pagetables:152kB bounce:0kB free_pcp:120kB local_pcp:0kB free_cma:0kB [ 1130.835620] 637*4kB [ 1130.860004] lowmem_reserve[]: [ 1130.868817] (UME) [ 1130.871243] 0 [ 1130.871412] 296*8kB [ 1130.879329] 0 [ 1130.879801] (UME) [ 1130.882037] 0 [ 1130.891327] 178*16kB [ 1130.922871] 0 [ 1130.932210] (UME) 34*32kB (UME) 15*64kB (UM) 19*128kB (UM) 23*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18132kB [ 1130.943188] 0 [ 1130.948662] Node 0 DMA: 3*4kB (UE) 0*8kB 13*16kB (UE) 10*32kB (UE) 1*64kB (E) 3*128kB (UME) 3*256kB (UME) 2*512kB (ME) 2*1024kB (ME) 3*2048kB (UM) 0*4096kB = 10972kB [ 1130.955236] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1130.972182] Node 0 DMA32: 637*4kB (UME) 296*8kB (UME) 178*16kB (UME) 34*32kB (UME) 15*64kB (UM) 19*128kB (UM) 23*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18132kB [ 1130.988138] Node 1 Normal: 51*4kB (M) 16*8kB (ME) 9*16kB (M) 3*32kB (UM) 2*64kB (UM) 0*128kB 12*256kB (U) 45*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 26812kB [ 1131.003310] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1131.020142] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1131.031217] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1131.035288] Node 1 Normal: 51*4kB (M) 16*8kB (ME) 9*16kB (M) 3*32kB (UM) 2*64kB (UM) 0*128kB 12*256kB (U) 45*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 26812kB [ 1131.048289] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1131.062281] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1131.071216] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1131.071818] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1131.080476] 47926 total pagecache pages [ 1131.080488] 0 pages in swap cache [ 1131.080493] Swap cache stats: add 0, delete 0, find 0/0 [ 1131.080497] Free swap = 0kB [ 1131.080500] Total swap = 0kB [ 1131.080508] 2097051 pages RAM [ 1131.080511] 0 pages HighMem/MovableOnly [ 1131.080515] 363848 pages reserved [ 1131.080518] 0 pages cma reserved [ 1131.160637] syz-executor.0: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1131.169125] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1131.176950] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 1131.186678] CPU: 0 PID: 25726 Comm: syz-executor.0 Not tainted 4.14.230-syzkaller #0 [ 1131.188714] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1131.194579] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1131.194584] Call Trace: [ 1131.194604] dump_stack+0x1b2/0x281 [ 1131.194618] warn_alloc.cold+0x96/0x1cc [ 1131.194631] ? zone_watermark_ok_safe+0x220/0x220 [ 1131.203432] 47946 total pagecache pages [ 1131.212596] __alloc_pages_nodemask+0x2127/0x2720 [ 1131.215223] 0 pages in swap cache [ 1131.218815] ? check_preemption_disabled+0x35/0x240 [ 1131.222833] Swap cache stats: add 0, delete 0, find 0/0 [ 1131.227634] ? lock_acquire+0x170/0x3f0 [ 1131.231589] Free swap = 0kB [ 1131.236431] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1131.236453] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1131.236465] ? __mutex_unlock_slowpath+0x75/0x770 [ 1131.236480] alloc_pages_current+0x155/0x260 [ 1131.239914] Total swap = 0kB [ 1131.244930] ion_page_pool_alloc+0x118/0x1b0 [ 1131.244940] ion_system_heap_allocate+0x133/0x8c0 [ 1131.244953] ? _raw_spin_unlock+0x29/0x40 [ 1131.244964] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1131.250316] 2097051 pages RAM [ 1131.254290] ? ion_system_contig_heap_create+0x130/0x130 [ 1131.254301] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1131.254313] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1131.254324] ion_alloc+0x27a/0x810 [ 1131.254337] ? ion_dma_buf_release+0x40/0x40 [ 1131.257337] 0 pages HighMem/MovableOnly [ 1131.262178] ? __might_fault+0x177/0x1b0 [ 1131.267672] 363848 pages reserved [ 1131.272470] ion_ioctl+0xea/0x1f0 [ 1131.276893] 0 pages cma reserved [ 1131.279863] ? ion_query_heaps+0x360/0x360 [ 1131.284307] Out of memory (oom_kill_allocating_task): Kill process 7975 (syz-fuzzer) score 0 or sacrifice child [ 1131.289117] ? ion_query_heaps+0x360/0x360 [ 1131.293367] Killed process 23867 (syz-executor.2) total-vm:84924kB, anon-rss:60kB, file-rss:0kB, shmem-rss:0kB [ 1131.298157] do_vfs_ioctl+0x75a/0xff0 [ 1131.303851] syz-fuzzer invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask= [ 1131.306678] ? ioctl_preallocate+0x1a0/0x1a0 [ 1131.311665] (null) [ 1131.316506] ? lock_downgrade+0x740/0x740 [ 1131.316520] ? __fget+0x225/0x360 [ 1131.316529] ? do_vfs_ioctl+0xff0/0xff0 [ 1131.316542] ? security_file_ioctl+0x83/0xb0 [ 1131.316552] SyS_ioctl+0x7f/0xb0 [ 1131.320097] , order=0, oom_score_adj=0 [ 1131.324489] ? do_vfs_ioctl+0xff0/0xff0 [ 1131.324501] do_syscall_64+0x1d5/0x640 [ 1131.324517] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1131.324526] RIP: 0033:0x466459 [ 1131.328486] syz-fuzzer cpuset= [ 1131.332528] RSP: 002b:00007f1cd3181188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1131.336046] / [ 1131.339447] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1131.342828] mems_allowed=0-1 [ 1131.347007] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000004 [ 1131.347015] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1131.468419] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1131.475683] R13: 00007ffceb2c0dcf R14: 00007f1cd3181300 R15: 0000000000022000 [ 1131.482985] CPU: 1 PID: 7975 Comm: syz-fuzzer Not tainted 4.14.230-syzkaller #0 [ 1131.490454] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1131.499810] Call Trace: [ 1131.502403] dump_stack+0x1b2/0x281 [ 1131.506030] dump_header+0x178/0x82f [ 1131.509744] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1131.512794] Mem-Info: [ 1131.514856] ? ___ratelimit+0x2cd/0x530 [ 1131.517274] active_anon:12869 inactive_anon:47368 isolated_anon:0 [ 1131.517274] active_file:29 inactive_file:34 isolated_file:0 [ 1131.517274] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1131.517274] slab_reclaimable:12482 slab_unreclaimable:117343 [ 1131.517274] mapped:52675 shmem:47891 pagetables:742 bounce:0 [ 1131.517274] free:13949 free_pcp:0 free_cma:0 [ 1131.521237] oom_kill_process.cold+0x10/0xa40 [ 1131.558785] out_of_memory+0xe3e/0x1190 [ 1131.560786] Node 0 active_anon:50516kB inactive_anon:132716kB active_file:20kB inactive_file:20kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:210600kB dirty:0kB writeback:0kB shmem:134408kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1131.562759] ? oom_killer_disable+0x1c0/0x1c0 [ 1131.562769] ? mutex_trylock+0x152/0x1a0 [ 1131.562780] __alloc_pages_nodemask+0x23e1/0x2720 [ 1131.562799] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1131.562820] alloc_pages_current+0x155/0x260 [ 1131.562830] filemap_fault+0x11a1/0x1ad0 [ 1131.562849] ext4_filemap_fault+0x84/0xb0 [ 1131.562859] __do_fault+0xfa/0x380 [ 1131.562868] __handle_mm_fault+0x2497/0x4620 [ 1131.562879] ? vm_insert_page+0x7c0/0x7c0 [ 1131.562887] ? free_object+0xe4/0x240 [ 1131.562903] ? mark_held_locks+0xa6/0xf0 [ 1131.562914] handle_mm_fault+0x455/0x9c0 [ 1131.562926] __do_page_fault+0x549/0xad0 [ 1131.562936] ? spurious_fault+0x640/0x640 [ 1131.562944] ? do_page_fault+0x60/0x500 [ 1131.562951] ? page_fault+0x2f/0x50 [ 1131.562958] page_fault+0x45/0x50 [ 1131.562964] RIP: 0000:0x940aec [ 1131.562968] RSP: 1400:000000c00003df28 EFLAGS: 0043b6a0 [ 1131.576290] Mem-Info: [ 1131.597556] Node 1 active_anon:960kB inactive_anon:56756kB active_file:96kB inactive_file:116kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:100kB dirty:0kB writeback:0kB shmem:57156kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1131.606067] active_anon:12869 inactive_anon:47368 isolated_anon:0 [ 1131.606067] active_file:29 inactive_file:34 isolated_file:0 [ 1131.606067] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1131.606067] slab_reclaimable:12482 slab_unreclaimable:117343 [ 1131.606067] mapped:52675 shmem:47891 pagetables:742 bounce:0 [ 1131.606067] free:13949 free_pcp:0 free_cma:0 [ 1131.609562] Node 0 [ 1131.617191] Node 0 active_anon:50516kB inactive_anon:132716kB active_file:20kB inactive_file:20kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:210600kB dirty:0kB writeback:0kB shmem:134408kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1131.624659] DMA free:10972kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1131.628690] Node 1 active_anon:960kB inactive_anon:56756kB active_file:96kB inactive_file:116kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:100kB dirty:0kB writeback:0kB shmem:57156kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1131.630186] lowmem_reserve[]: [ 1131.637572] Node 0 [ 1131.640962] 0 [ 1131.642330] DMA free:10972kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1131.650683] 2717 [ 1131.660673] lowmem_reserve[]: [ 1131.666997] 2718 [ 1131.668928] 0 [ 1131.676119] 2718 [ 1131.682862] 2717 [ 1131.710255] 2718 [ 1131.750028] 2718 [ 1131.801470] 2718 [ 1131.826475] Node 0 [ 1131.835968] 2718 [ 1131.859519] DMA32 free:18132kB min:36200kB low:45248kB high:54296kB active_anon:50516kB inactive_anon:132716kB active_file:20kB inactive_file:20kB unevictable:0kB writepending:0kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:7552kB pagetables:2816kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1131.868297] lowmem_reserve[]: [ 1131.870350] Node 0 [ 1131.872392] 0 0 [ 1131.877606] DMA32 free:18132kB min:36200kB low:45248kB high:54296kB active_anon:50516kB inactive_anon:132716kB active_file:20kB inactive_file:20kB unevictable:0kB writepending:0kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:7552kB pagetables:2816kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1131.912337] 0 [ 1131.918935] lowmem_reserve[]: [ 1131.947483] 0 0 [ 1131.950987] 0 [ 1131.952569] Node 0 [ 1131.952571] 0 0 [ 1131.954489] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1131.956648] 0 [ 1131.958623] lowmem_reserve[]: 0 0 0 0 0 [ 1131.997450] Node 1 Normal free:26692kB min:53696kB low:67120kB high:80544kB active_anon:960kB inactive_anon:56756kB active_file:48kB inactive_file:32kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:192kB pagetables:152kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1132.002805] 0 [ 1132.025923] lowmem_reserve[]: 0 0 0 0 0 [ 1132.031732] Node 0 DMA: 3*4kB (UE) 0*8kB 13*16kB (UE) 10*32kB (UE) 1*64kB (E) 3*128kB (UME) 3*256kB (UME) 2*512kB (ME) 2*1024kB (ME) 3*2048kB (UM) 0*4096kB = 10972kB [ 1132.049232] Node 0 DMA32: 638*4kB (UME) 313*8kB (UME) 180*16kB (UME) 37*32kB (UME) 16*64kB (UM) 21*128kB (UM) 23*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18720kB [ 1132.064803] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1132.075668] Node 1 Normal: 2*4kB (UM) 1*8kB (E) 1*16kB (M) 2*32kB (UM) 2*64kB (UM) 0*128kB 0*256kB 38*512kB (U) 56*1024kB (U) 0*2048kB 0*4096kB = 77024kB [ 1132.075743] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1132.075749] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1132.075756] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1132.075762] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1132.075766] 48148 total pagecache pages [ 1132.075776] 0 pages in swap cache [ 1132.075782] Swap cache stats: add 0, delete 0, find 0/0 [ 1132.075785] Free swap = 0kB [ 1132.075788] Total swap = 0kB [ 1132.075794] 2097051 pages RAM [ 1132.075802] 0 pages HighMem/MovableOnly [ 1132.138290] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1132.229246] lowmem_reserve[]: 0 0 0 0 0 [ 1132.232786] 363848 pages reserved [ 1132.236724] 0 pages cma reserved [ 1132.247397] Node 1 Normal free:419608kB min:53696kB low:67120kB high:80544kB active_anon:960kB inactive_anon:56756kB active_file:80kB inactive_file:2604kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:192kB pagetables:152kB bounce:0kB free_pcp:16kB local_pcp:16kB free_cma:0kB [ 1132.386712] lowmem_reserve[]: 0 0 0 0 0 [ 1132.390747] Node 0 DMA: 3*4kB (UE) 1*8kB (U) 1*16kB (E) 2*32kB (UE) 2*64kB (UE) 7*128kB (UME) 3*256kB (UME) 2*512kB (ME) 2*1024kB (ME) 3*2048kB (UM) 0*4096kB = 11108kB [ 1132.452769] Node 0 DMA32: 620*4kB (ME) 275*8kB (ME) 155*16kB (UME) 27*32kB (ME) 847*64kB (UM) 120*128kB (UM) 25*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 83992kB [ 1132.512814] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1132.552770] Node 1 Normal: 1*4kB (M) 1*8kB (E) 0*16kB 0*32kB 3086*64kB (UM) 830*128kB (U) 248*256kB (UM) 22*512kB (U) 169*1024kB (UM) 17*2048kB (U) 0*4096kB = 586380kB [ 1132.627193] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1132.652763] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1132.661446] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1132.692777] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1132.701434] 48937 total pagecache pages [ 1132.705478] 0 pages in swap cache [ 1132.708923] Swap cache stats: add 0, delete 0, find 0/0 [ 1132.723111] Free swap = 0kB [ 1132.726145] Total swap = 0kB [ 1132.729155] 2097051 pages RAM [ 1132.732251] 0 pages HighMem/MovableOnly [ 1132.752801] 363848 pages reserved [ 1132.756306] 0 pages cma reserved [ 1132.759667] Out of memory (oom_kill_allocating_task): Kill process 7975 (syz-fuzzer) score 0 or sacrifice child [ 1132.787223] Killed process 25456 (syz-executor.0) total-vm:84924kB, anon-rss:60kB, file-rss:0kB, shmem-rss:0kB [ 1132.821326] oom_reaper: reaped process 23867 (syz-executor.2), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1133.418569] oom_reaper: reaped process 25673 (syz-executor.1), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1133.629318] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1133.663099] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1133.707357] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1133.725763] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1133.747874] device bridge_slave_1 left promiscuous mode [ 1133.760104] bridge0: port 2(bridge_slave_1) entered disabled state [ 1133.778927] device bridge_slave_0 left promiscuous mode [ 1133.792980] bridge0: port 1(bridge_slave_0) entered disabled state [ 1133.818399] device veth1_macvtap left promiscuous mode [ 1133.843007] device veth0_macvtap left promiscuous mode [ 1133.852031] device veth1_vlan left promiscuous mode [ 1133.873040] device veth0_vlan left promiscuous mode [ 1134.104801] device hsr_slave_1 left promiscuous mode [ 1134.117548] device hsr_slave_0 left promiscuous mode [ 1134.145915] team0 (unregistering): Port device team_slave_1 removed [ 1134.160819] team0 (unregistering): Port device team_slave_0 removed [ 1134.171327] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 1134.187363] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 1134.258074] bond0 (unregistering): Released all slaves 13:36:32 executing program 5: r0 = semget$private(0x0, 0x0, 0xb0) semctl$IPC_RMID(r0, 0x0, 0x0) semctl$IPC_STAT(r0, 0x0, 0x2, &(0x7f0000000080)=""/104) semctl$IPC_STAT(r0, 0x0, 0x2, &(0x7f0000000540)=""/206) r1 = semget$private(0x0, 0x0, 0x30) semctl$IPC_RMID(r1, 0x0, 0x0) semctl$IPC_STAT(r1, 0x0, 0x2, &(0x7f0000000080)=""/104) semctl$IPC_STAT(r1, 0x0, 0x2, &(0x7f0000000540)=""/206) r2 = semget$private(0x0, 0x0, 0xb0) semctl$IPC_RMID(r2, 0x0, 0x0) semctl$IPC_STAT(r2, 0x0, 0x2, &(0x7f0000000080)=""/104) r3 = semget$private(0x0, 0x3, 0x42) semctl$SETVAL(r3, 0x2, 0x10, 0x0) 13:36:32 executing program 0: ioctl$SIOCPNDELRESOURCE(0xffffffffffffffff, 0x89ef, &(0x7f0000000040)=0xffffffff) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000012c0)={0x0, @nl=@unspec, @tipc=@id={0x1e, 0x3, 0x2, {0x4e21, 0x4}}, @ethernet={0x307, @random="68d88c73bc2f"}, 0x0, 0x0, 0x0, 0x0, 0x20, &(0x7f0000001280)='bridge_slave_0\x00', 0x401, 0x0, 0xfd51}) semctl$SETVAL(0x0, 0x0, 0x10, 0x0) semctl$GETVAL(0x0, 0x0, 0xc, &(0x7f0000000180)=""/194) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$x25(0x9, 0x5, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x500, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x80000000, 0xa, 0x1}) 13:36:32 executing program 3: ioctl$SIOCPNDELRESOURCE(0xffffffffffffffff, 0x89ef, &(0x7f0000000040)) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f00000012c0)={0x0, @nl=@unspec, @tipc=@id={0x1e, 0x3, 0x2, {0x4e21, 0x4}}, @ethernet={0x307, @random="68d88c73bc2f"}, 0x0, 0x0, 0x0, 0x0, 0x20, &(0x7f0000001280)='bridge_slave_0\x00', 0x401, 0x0, 0xfd51}) semctl$SETVAL(0x0, 0x0, 0x10, 0x0) semctl$GETVAL(0x0, 0x0, 0xc, &(0x7f0000000180)=""/194) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$x25(0x9, 0x5, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x500, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x80000000, 0xa, 0x1}) 13:36:32 executing program 2: timer_create(0x7, &(0x7f0000000080)={0x0, 0x2a, 0x1, @thr={&(0x7f0000000000)="cedfad775dd967d003dbe52d40534e44b24e419a438ccb478ff3986437dfb2fca4ea25e257ce70593b4b4f61cdbbf5a2983c0c90c1e3d51f07a4095f", &(0x7f0000000040)="8bd19b303ba21500f7c2d3f7cc2fd29ae3c6db45e63c59054646e1b44d3003f74d33b6c48e8208376d6b0111434cdac6450a"}}, &(0x7f00000000c0)=0x0) timer_gettime(r0, &(0x7f0000000100)) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100)='/dev/bsg\x00', 0x204402, 0x0) write$eventfd(r1, 0x0, 0x0) bind$can_raw(r1, &(0x7f0000000140), 0x10) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_HYPERV_EVENTFD(r2, 0x4018aebd, &(0x7f0000000180)={0x0, r1}) 13:36:32 executing program 4: semctl$SETVAL(0x0, 0x0, 0x10, 0x0) semctl$SEM_INFO(0xffffffffffffffff, 0x1, 0x13, &(0x7f0000000240)=""/41) getitimer(0x2, &(0x7f0000000540)) semctl$SEM_STAT(0x0, 0x3, 0x12, &(0x7f0000000280)=""/230) semctl$GETNCNT(0x0, 0x4, 0xe, &(0x7f0000000400)=""/226) r0 = semget$private(0x0, 0x1, 0x10c) semctl$GETNCNT(r0, 0x2, 0xe, &(0x7f0000000500)=""/25) semctl$SETVAL(0x0, 0x2, 0x10, &(0x7f0000000180)=0xebfe) add_key$user(&(0x7f0000000080)='user\x00', &(0x7f00000000c0)={'syz', 0x3}, &(0x7f0000000100)="fc2edf2fc5a4a8243b61253cdcdd11d17affe577e3b5f9761971adf1e905d389a24ecb495161f7f9c3f371da22d7279bafcd95e23176dbaadf5577225b0f835c97ef76f369891989d6a6a80e905fb58a280a3cacbfbf2abfdc2810111f2b8cce652a89f47930d1209ce1", 0x6a, 0xffffffffffffffff) semctl$GETNCNT(0xffffffffffffffff, 0x4, 0xe, &(0x7f0000000380)=""/88) r1 = semget$private(0x0, 0x1, 0x160) semctl$IPC_INFO(r1, 0x2, 0x3, &(0x7f00000001c0)=""/80) semctl$SEM_INFO(0x0, 0x1, 0x13, &(0x7f0000000000)=""/68) 13:36:32 executing program 1: ioctl$SIOCPNDELRESOURCE(0xffffffffffffffff, 0x89ef, &(0x7f0000000040)=0xffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f00000012c0)={0x0, @nl=@unspec, @tipc=@id={0x1e, 0x3, 0x2, {0x4e21, 0x4}}, @ethernet={0x307, @random="68d88c73bc2f"}, 0x0, 0x0, 0x0, 0x0, 0x20, &(0x7f0000001280)='bridge_slave_0\x00', 0x401, 0x0, 0xfd51}) semctl$SETVAL(0x0, 0x0, 0x10, 0x0) semctl$GETVAL(0x0, 0x0, 0xc, &(0x7f0000000180)=""/194) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SCAUSEDIAG(r2, 0x89ec, &(0x7f0000000600)) bind$x25(r2, &(0x7f0000001480)={0x9, @remote={[], 0x3}}, 0x12) syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, &(0x7f00000014c0)) r3 = semget$private(0x0, 0x1, 0x484) semctl$IPC_STAT(r3, 0x0, 0x2, &(0x7f00000000c0)=""/89) semctl$SEM_INFO(r3, 0x4, 0x13, &(0x7f0000000280)=""/4096) sendmsg$RDMA_NLDEV_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000001440)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001400)={&(0x7f0000001500)=ANY=[@ANYBLOB="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"/270], 0x60}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000000)='SEG6\x00', r1) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x500, 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000080)={0x80000000, 0xa, 0x1}) 13:36:32 executing program 5: r0 = semget$private(0x0, 0x0, 0xb0) semctl$IPC_RMID(r0, 0x0, 0x0) semctl$IPC_STAT(r0, 0x0, 0x2, &(0x7f0000000080)=""/104) semctl$IPC_STAT(r0, 0x0, 0x2, &(0x7f0000000540)=""/206) r1 = semget$private(0x0, 0x0, 0x30) semctl$IPC_RMID(r1, 0x0, 0x0) semctl$IPC_STAT(r1, 0x0, 0x2, &(0x7f0000000080)=""/104) semctl$IPC_STAT(r1, 0x0, 0x2, &(0x7f0000000540)=""/206) r2 = semget$private(0x0, 0x0, 0xb0) semctl$IPC_RMID(r2, 0x0, 0x0) r3 = semget$private(0x0, 0x3, 0x42) semctl$SETVAL(r3, 0x2, 0x10, 0x0) 13:36:32 executing program 4: semctl$SETVAL(0x0, 0x0, 0x10, 0x0) semctl$SEM_INFO(0xffffffffffffffff, 0x1, 0x13, &(0x7f0000000240)=""/41) getitimer(0x2, &(0x7f0000000540)) semctl$SEM_STAT(0x0, 0x3, 0x12, &(0x7f0000000280)=""/230) semctl$GETNCNT(0x0, 0x4, 0xe, &(0x7f0000000400)=""/226) r0 = semget$private(0x0, 0x1, 0x10c) semctl$GETNCNT(r0, 0x2, 0xe, &(0x7f0000000500)=""/25) semctl$SETVAL(0x0, 0x2, 0x10, &(0x7f0000000180)=0xebfe) add_key$user(&(0x7f0000000080)='user\x00', &(0x7f00000000c0)={'syz', 0x3}, &(0x7f0000000100)="fc2edf2fc5a4a8243b61253cdcdd11d17affe577e3b5f9761971adf1e905d389a24ecb495161f7f9c3f371da22d7279bafcd95e23176dbaadf5577225b0f835c97ef76f369891989d6a6a80e905fb58a280a3cacbfbf2abfdc2810111f2b8cce652a89f47930d1209ce1", 0x6a, 0xffffffffffffffff) semctl$GETNCNT(0xffffffffffffffff, 0x4, 0xe, &(0x7f0000000380)=""/88) r1 = semget$private(0x0, 0x1, 0x160) semctl$IPC_INFO(r1, 0x2, 0x3, &(0x7f00000001c0)=""/80) semctl$SEM_INFO(0x0, 0x1, 0x13, &(0x7f0000000000)=""/68) 13:36:33 executing program 5: r0 = semget$private(0x0, 0x0, 0xb0) semctl$IPC_RMID(r0, 0x0, 0x0) semctl$IPC_STAT(r0, 0x0, 0x2, &(0x7f0000000080)=""/104) semctl$IPC_STAT(r0, 0x0, 0x2, &(0x7f0000000540)=""/206) r1 = semget$private(0x0, 0x0, 0x30) semctl$IPC_RMID(r1, 0x0, 0x0) semctl$IPC_STAT(r1, 0x0, 0x2, &(0x7f0000000080)=""/104) semctl$IPC_STAT(r1, 0x0, 0x2, &(0x7f0000000540)=""/206) semget$private(0x0, 0x0, 0xb0) r2 = semget$private(0x0, 0x3, 0x42) semctl$SETVAL(r2, 0x2, 0x10, 0x0) 13:36:33 executing program 4: semctl$SETVAL(0x0, 0x0, 0x10, 0x0) semctl$SEM_INFO(0xffffffffffffffff, 0x1, 0x13, &(0x7f0000000240)=""/41) getitimer(0x2, &(0x7f0000000540)) semctl$SEM_STAT(0x0, 0x3, 0x12, &(0x7f0000000280)=""/230) semctl$GETNCNT(0x0, 0x4, 0xe, &(0x7f0000000400)=""/226) r0 = semget$private(0x0, 0x1, 0x10c) semctl$GETNCNT(r0, 0x2, 0xe, &(0x7f0000000500)=""/25) semctl$SETVAL(0x0, 0x2, 0x10, &(0x7f0000000180)=0xebfe) add_key$user(&(0x7f0000000080)='user\x00', &(0x7f00000000c0)={'syz', 0x3}, &(0x7f0000000100)="fc2edf2fc5a4a8243b61253cdcdd11d17affe577e3b5f9761971adf1e905d389a24ecb495161f7f9c3f371da22d7279bafcd95e23176dbaadf5577225b0f835c97ef76f369891989d6a6a80e905fb58a280a3cacbfbf2abfdc2810111f2b8cce652a89f47930d1209ce1", 0x6a, 0xffffffffffffffff) semctl$GETNCNT(0xffffffffffffffff, 0x4, 0xe, &(0x7f0000000380)=""/88) r1 = semget$private(0x0, 0x1, 0x160) semctl$IPC_INFO(r1, 0x2, 0x3, &(0x7f00000001c0)=""/80) 13:36:33 executing program 5: r0 = semget$private(0x0, 0x0, 0xb0) semctl$IPC_RMID(r0, 0x0, 0x0) semctl$IPC_STAT(r0, 0x0, 0x2, &(0x7f0000000080)=""/104) semctl$IPC_STAT(r0, 0x0, 0x2, &(0x7f0000000540)=""/206) r1 = semget$private(0x0, 0x0, 0x30) semctl$IPC_RMID(r1, 0x0, 0x0) semctl$IPC_STAT(r1, 0x0, 0x2, &(0x7f0000000080)=""/104) semctl$IPC_STAT(r1, 0x0, 0x2, &(0x7f0000000540)=""/206) r2 = semget$private(0x0, 0x3, 0x42) semctl$SETVAL(r2, 0x2, 0x10, 0x0) 13:36:33 executing program 5: r0 = semget$private(0x0, 0x0, 0xb0) semctl$IPC_RMID(r0, 0x0, 0x0) semctl$IPC_STAT(r0, 0x0, 0x2, &(0x7f0000000080)=""/104) semctl$IPC_STAT(r0, 0x0, 0x2, &(0x7f0000000540)=""/206) r1 = semget$private(0x0, 0x0, 0x30) semctl$IPC_RMID(r1, 0x0, 0x0) semctl$IPC_STAT(r1, 0x0, 0x2, &(0x7f0000000080)=""/104) r2 = semget$private(0x0, 0x3, 0x42) semctl$SETVAL(r2, 0x2, 0x10, 0x0) [ 1136.765433] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1136.772153] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1136.815870] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1136.830353] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1136.847654] device bridge_slave_1 left promiscuous mode [ 1136.860005] bridge0: port 2(bridge_slave_1) entered disabled state [ 1136.876552] device bridge_slave_0 left promiscuous mode [ 1136.887885] bridge0: port 1(bridge_slave_0) entered disabled state [ 1136.912251] device veth1_macvtap left promiscuous mode [ 1136.928218] device veth0_macvtap left promiscuous mode [ 1136.943508] device veth1_vlan left promiscuous mode [ 1136.958227] device veth0_vlan left promiscuous mode [ 1137.179033] device hsr_slave_1 left promiscuous mode [ 1137.212125] device hsr_slave_0 left promiscuous mode [ 1137.289102] team0 (unregistering): Port device team_slave_1 removed [ 1137.327467] team0 (unregistering): Port device team_slave_0 removed [ 1137.360713] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 1137.405070] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 1137.499747] bond0 (unregistering): Released all slaves [ 1137.692516] syz-executor.1: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1137.693659] syz-executor.3: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1137.732975] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 1137.749900] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 1137.753960] CPU: 0 PID: 25754 Comm: syz-executor.1 Not tainted 4.14.230-syzkaller #0 [ 1137.762930] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1137.772413] Call Trace: [ 1137.775020] dump_stack+0x1b2/0x281 [ 1137.778645] warn_alloc.cold+0x96/0x1cc [ 1137.782616] ? zone_watermark_ok_safe+0x220/0x220 [ 1137.787470] __alloc_pages_nodemask+0x2127/0x2720 [ 1137.792315] ? lock_acquire+0x170/0x3f0 [ 1137.796315] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1137.801166] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1137.806613] ? __mutex_unlock_slowpath+0x75/0x770 [ 1137.811460] alloc_pages_current+0x155/0x260 [ 1137.815865] ion_page_pool_alloc+0x118/0x1b0 [ 1137.820287] ion_system_heap_allocate+0x133/0x8c0 [ 1137.825148] ? ion_alloc+0x187/0x810 [ 1137.828857] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1137.834301] ? ion_system_contig_heap_create+0x130/0x130 [ 1137.839762] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1137.844868] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1137.849730] ion_alloc+0x204/0x810 [ 1137.853387] ? ion_dma_buf_release+0x40/0x40 [ 1137.857809] ? __might_fault+0x177/0x1b0 [ 1137.861885] ion_ioctl+0xea/0x1f0 [ 1137.865330] ? ion_query_heaps+0x360/0x360 [ 1137.869566] ? ion_query_heaps+0x360/0x360 [ 1137.873798] do_vfs_ioctl+0x75a/0xff0 [ 1137.877630] ? ioctl_preallocate+0x1a0/0x1a0 [ 1137.882031] ? lock_downgrade+0x740/0x740 [ 1137.886178] ? __fget+0x225/0x360 [ 1137.889624] ? do_vfs_ioctl+0xff0/0xff0 [ 1137.893609] ? security_file_ioctl+0x83/0xb0 [ 1137.898027] SyS_ioctl+0x7f/0xb0 [ 1137.901384] ? do_vfs_ioctl+0xff0/0xff0 [ 1137.905360] do_syscall_64+0x1d5/0x640 [ 1137.909247] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1137.914448] RIP: 0033:0x466459 [ 1137.917652] RSP: 002b:00007feb59368188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1137.925441] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1137.932704] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000007 [ 1137.939966] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1137.947227] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1137.954494] R13: 00007ffe56f14bcf R14: 00007feb59368300 R15: 0000000000022000 [ 1137.961777] CPU: 1 PID: 25747 Comm: syz-executor.3 Not tainted 4.14.230-syzkaller #0 [ 1137.969683] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1137.979037] Call Trace: [ 1137.981626] dump_stack+0x1b2/0x281 [ 1137.985259] warn_alloc.cold+0x96/0x1cc [ 1137.989236] ? zone_watermark_ok_safe+0x220/0x220 [ 1137.994093] __alloc_pages_nodemask+0x2127/0x2720 [ 1137.998937] ? io_schedule_timeout+0x140/0x140 [ 1138.003529] ? lock_acquire+0x170/0x3f0 [ 1138.007533] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1138.012380] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1138.017828] ? __mutex_unlock_slowpath+0x75/0x770 [ 1138.022678] alloc_pages_current+0x155/0x260 [ 1138.027085] ion_page_pool_alloc+0x118/0x1b0 [ 1138.031487] ion_system_heap_allocate+0x133/0x8c0 [ 1138.036325] ? ion_alloc+0x187/0x810 [ 1138.040032] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1138.045478] ? ion_system_contig_heap_create+0x130/0x130 [ 1138.050927] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1138.055944] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1138.060783] ion_alloc+0x204/0x810 [ 1138.064324] ? ion_dma_buf_release+0x40/0x40 [ 1138.068728] ? __might_fault+0x177/0x1b0 [ 1138.072783] ion_ioctl+0xea/0x1f0 [ 1138.076230] ? ion_query_heaps+0x360/0x360 [ 1138.080460] ? ion_query_heaps+0x360/0x360 [ 1138.084687] do_vfs_ioctl+0x75a/0xff0 [ 1138.088484] ? ioctl_preallocate+0x1a0/0x1a0 [ 1138.092885] ? lock_downgrade+0x740/0x740 [ 1138.097034] ? __fget+0x225/0x360 [ 1138.100480] ? do_vfs_ioctl+0xff0/0xff0 [ 1138.104456] ? security_file_ioctl+0x83/0xb0 [ 1138.108864] SyS_ioctl+0x7f/0xb0 [ 1138.112223] ? do_vfs_ioctl+0xff0/0xff0 [ 1138.116211] do_syscall_64+0x1d5/0x640 [ 1138.120099] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1138.125281] RIP: 0033:0x466459 [ 1138.128463] RSP: 002b:00007f8a667e8188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1138.136166] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1138.143430] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000005 [ 1138.150692] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1138.157958] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1138.165225] R13: 00007ffd25ba1ddf R14: 00007f8a667e8300 R15: 0000000000022000 [ 1138.252400] Mem-Info: [ 1138.259376] active_anon:12855 inactive_anon:47363 isolated_anon:0 [ 1138.259376] active_file:566 inactive_file:1386 isolated_file:0 [ 1138.259376] unevictable:0 dirty:16 writeback:0 unstable:0 [ 1138.259376] slab_reclaimable:12576 slab_unreclaimable:116671 [ 1138.259376] mapped:44942 shmem:47884 pagetables:655 bounce:0 [ 1138.259376] free:90557 free_pcp:568 free_cma:0 [ 1138.358560] Node 0 active_anon:50264kB inactive_anon:132688kB active_file:1004kB inactive_file:4280kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:214228kB dirty:36kB writeback:0kB shmem:134372kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1138.415569] Node 1 active_anon:1156kB inactive_anon:56764kB active_file:1260kB inactive_file:1264kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:2440kB dirty:28kB writeback:0kB shmem:57164kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1138.477755] Node 0 DMA free:11204kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1138.536505] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1138.547248] Node 0 DMA32 free:176776kB min:36200kB low:45248kB high:54296kB active_anon:50264kB inactive_anon:132688kB active_file:1004kB inactive_file:4280kB unevictable:0kB writepending:36kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:7520kB pagetables:2840kB bounce:0kB free_pcp:720kB local_pcp:620kB free_cma:0kB [ 1138.616747] lowmem_reserve[]: 0 0 0 0 0 [ 1138.625289] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1138.684272] lowmem_reserve[]: 0 0 0 0 0 [ 1138.694160] Node 1 Normal free:249012kB min:53696kB low:67120kB high:80544kB active_anon:1156kB inactive_anon:56764kB active_file:1260kB inactive_file:1264kB unevictable:0kB writepending:28kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:160kB pagetables:76kB bounce:0kB free_pcp:1416kB local_pcp:728kB free_cma:0kB [ 1138.760249] lowmem_reserve[]: 0 0 0 0 0 [ 1138.770604] Node 0 DMA: 3*4kB (UE) 21*8kB (U) 21*16kB (U) 12*32kB (UE) 3*64kB (UE) 3*128kB (UME) 2*256kB (ME) 2*512kB (ME) 2*1024kB (ME) 3*2048kB (UM) 0*4096kB = 11204kB [ 1138.807577] Node 0 DMA32: 101*4kB (UME) 113*8kB (E) 6606*16kB (UE) 1144*32kB (UE) 1000*64kB (UM) 171*128kB (UM) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 229500kB [ 1138.841070] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1138.866854] Node 1 Normal: 969*4kB (UME) 899*8kB (UM) 857*16kB (UM) 846*32kB (UM) 2457*64kB (UM) 112*128kB (UM) 13*256kB (UM) 8*512kB (UM) 16*1024kB (U) 1*2048kB (U) 0*4096kB = 249292kB [ 1138.906462] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1138.925387] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1138.945755] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1138.966397] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1138.987922] 49846 total pagecache pages [ 1138.998712] 0 pages in swap cache [ 1139.009562] Swap cache stats: add 0, delete 0, find 0/0 [ 1139.022800] Free swap = 0kB [ 1139.029239] Total swap = 0kB [ 1139.039095] 2097051 pages RAM [ 1139.045598] 0 pages HighMem/MovableOnly [ 1139.057787] 363848 pages reserved [ 1139.064649] 0 pages cma reserved [ 1140.345281] oom_reaper: reaped process 25747 (syz-executor.3), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1140.367135] systemd-journal invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1140.382580] systemd-journal cpuset=/ mems_allowed=0-1 [ 1140.387879] CPU: 0 PID: 25459 Comm: systemd-journal Not tainted 4.14.230-syzkaller #0 [ 1140.395847] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1140.405190] Call Trace: [ 1140.407780] dump_stack+0x1b2/0x281 [ 1140.411408] dump_header+0x178/0x82f [ 1140.415136] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1140.420244] ? ___ratelimit+0x2cd/0x530 [ 1140.424240] oom_kill_process.cold+0x10/0xa40 [ 1140.428749] out_of_memory+0xe3e/0x1190 [ 1140.432730] ? oom_killer_disable+0x1c0/0x1c0 [ 1140.437218] ? mutex_trylock+0x152/0x1a0 [ 1140.441372] __alloc_pages_nodemask+0x23e1/0x2720 [ 1140.446215] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1140.451060] alloc_pages_current+0x155/0x260 [ 1140.455458] filemap_fault+0x11a1/0x1ad0 [ 1140.459535] ext4_filemap_fault+0x84/0xb0 [ 1140.463672] __do_fault+0xfa/0x380 [ 1140.467200] __handle_mm_fault+0x2497/0x4620 [ 1140.471595] ? vm_insert_page+0x7c0/0x7c0 [ 1140.475740] ? mark_held_locks+0xa6/0xf0 [ 1140.479791] handle_mm_fault+0x455/0x9c0 [ 1140.483898] __do_page_fault+0x549/0xad0 [ 1140.487965] ? spurious_fault+0x640/0x640 [ 1140.492100] ? do_page_fault+0x60/0x500 [ 1140.496064] ? page_fault+0x2f/0x50 [ 1140.499675] page_fault+0x45/0x50 [ 1140.503128] RIP: 0001:0xffffffffffffffff [ 1140.507181] RSP: 2b0a61e0:00007ffddcdd31a0 EFLAGS: 7ffddcdd2fb0 [ 1140.510285] Mem-Info: [ 1140.512875] syz-executor.3: [ 1140.516423] active_anon:12874 inactive_anon:47363 isolated_anon:0 [ 1140.516423] active_file:10 inactive_file:20 isolated_file:0 [ 1140.516423] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1140.516423] slab_reclaimable:12571 slab_unreclaimable:116408 [ 1140.516423] mapped:52732 shmem:47884 pagetables:735 bounce:0 [ 1140.516423] free:13865 free_pcp:92 free_cma:0 [ 1140.518775] page allocation failure: order:0 [ 1140.521805] Node 0 active_anon:50280kB inactive_anon:132688kB active_file:24kB inactive_file:48kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:210928kB dirty:0kB writeback:0kB shmem:134372kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1140.562785] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1140.589631] Node 1 active_anon:1216kB inactive_anon:56764kB active_file:16kB inactive_file:32kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:57164kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1140.590074] (null) [ 1140.596788] Node 0 [ 1140.626196] syz-executor.3 cpuset= [ 1140.628100] DMA free:10960kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1140.628434] / [ 1140.631979] lowmem_reserve[]: [ 1140.660413] mems_allowed=0-1 [ 1140.664683] 0 2717 2718 2718 2718 [ 1140.666670] CPU: 1 PID: 25747 Comm: syz-executor.3 Not tainted 4.14.230-syzkaller #0 [ 1140.670200] Node 0 [ 1140.678061] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1140.678066] Call Trace: [ 1140.678086] dump_stack+0x1b2/0x281 [ 1140.678100] warn_alloc.cold+0x96/0x1cc [ 1140.678112] ? zone_watermark_ok_safe+0x220/0x220 [ 1140.678122] ? usleep_range+0x130/0x130 [ 1140.678134] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1140.682629] DMA32 free:17896kB min:36200kB low:45248kB high:54296kB active_anon:50380kB inactive_anon:132688kB active_file:24kB inactive_file:48kB unevictable:0kB writepending:0kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:7520kB pagetables:2864kB bounce:0kB free_pcp:128kB local_pcp:8kB free_cma:0kB [ 1140.689721] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1140.689732] ? run_timer_softirq+0x5a0/0x5a0 [ 1140.689749] __alloc_pages_nodemask+0x2127/0x2720 [ 1140.689765] ? lock_acquire+0x170/0x3f0 [ 1140.689780] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1140.689792] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1140.696988] lowmem_reserve[]: [ 1140.699937] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1140.704808] 0 [ 1140.708744] alloc_pages_current+0x155/0x260 [ 1140.718490] 0 [ 1140.742100] ion_page_pool_alloc+0x118/0x1b0 [ 1140.742111] ion_system_heap_allocate+0x133/0x8c0 [ 1140.742121] ? ion_alloc+0x187/0x810 [ 1140.742131] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1140.742140] ? ion_system_contig_heap_create+0x130/0x130 [ 1140.742149] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1140.742160] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1140.742170] ion_alloc+0x204/0x810 [ 1140.742183] ? ion_dma_buf_release+0x40/0x40 [ 1140.742196] ? __might_fault+0x177/0x1b0 [ 1140.742206] ion_ioctl+0xea/0x1f0 [ 1140.742215] ? ion_query_heaps+0x360/0x360 [ 1140.742226] ? ion_query_heaps+0x360/0x360 [ 1140.742235] do_vfs_ioctl+0x75a/0xff0 [ 1140.742247] ? ioctl_preallocate+0x1a0/0x1a0 [ 1140.751963] 0 [ 1140.756475] ? lock_downgrade+0x740/0x740 [ 1140.756491] ? __fget+0x225/0x360 [ 1140.756501] ? do_vfs_ioctl+0xff0/0xff0 [ 1140.756513] ? security_file_ioctl+0x83/0xb0 [ 1140.756523] SyS_ioctl+0x7f/0xb0 [ 1140.760502] 0 [ 1140.765332] ? do_vfs_ioctl+0xff0/0xff0 [ 1140.765344] do_syscall_64+0x1d5/0x640 [ 1140.765360] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1140.765368] RIP: 0033:0x466459 [ 1140.765373] RSP: 002b:00007f8a667e8188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1140.765383] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1140.765389] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000005 [ 1140.765395] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1140.765400] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1140.765405] R13: 00007ffd25ba1ddf R14: 00007f8a667e8300 R15: 0000000000022000 [ 1140.775547] warn_alloc_show_mem: 1 callbacks suppressed [ 1140.775550] Mem-Info: [ 1140.781185] 0 [ 1140.786753] active_anon:12874 inactive_anon:47363 isolated_anon:0 [ 1140.786753] active_file:10 inactive_file:20 isolated_file:0 [ 1140.786753] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1140.786753] slab_reclaimable:12571 slab_unreclaimable:116408 [ 1140.786753] mapped:52732 shmem:47884 pagetables:735 bounce:0 [ 1140.786753] free:13865 free_pcp:92 free_cma:0 [ 1140.799881] Node 0 active_anon:50280kB inactive_anon:132688kB active_file:24kB inactive_file:48kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:210928kB dirty:0kB writeback:0kB shmem:134372kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1140.807572] Node 0 [ 1140.811870] Node 1 active_anon:1216kB inactive_anon:56764kB active_file:16kB inactive_file:32kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:57164kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1140.815557] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1140.815561] lowmem_reserve[]: 0 0 0 0 0 [ 1140.815580] Node 1 Normal free:26604kB min:53696kB low:67120kB high:80544kB active_anon:1216kB inactive_anon:56764kB active_file:16kB inactive_file:32kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:160kB pagetables:76kB bounce:0kB free_pcp:240kB local_pcp:120kB free_cma:0kB [ 1140.825517] Node 0 [ 1140.830976] lowmem_reserve[]: [ 1140.832536] DMA free:10960kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1140.836005] 0 0 0 0 0 [ 1140.836022] Node 0 DMA: 2*4kB [ 1140.842221] lowmem_reserve[]: [ 1140.847114] (UE) [ 1140.852935] 0 2717 2718 2718 2718 [ 1140.852957] Node 0 [ 1140.854761] 1*8kB [ 1140.858907] DMA32 free:17896kB min:36200kB low:45248kB high:54296kB active_anon:50380kB inactive_anon:132688kB active_file:24kB inactive_file:48kB unevictable:0kB writepending:0kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:7520kB pagetables:2864kB bounce:0kB free_pcp:128kB local_pcp:120kB free_cma:0kB [ 1140.862323] (U) [ 1140.868423] lowmem_reserve[]: [ 1140.874775] 0*16kB [ 1140.877956] 0 [ 1140.879937] 2*32kB [ 1140.885940] 0 [ 1140.891513] (UE) [ 1140.892224] 0 [ 1140.902170] 8*64kB [ 1140.911329] 0 [ 1140.919708] (UE) [ 1140.921873] 0 [ 1140.929222] 5*128kB [ 1140.947849] (UME) [ 1140.984463] Node 0 [ 1141.028102] 2*256kB [ 1141.046255] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1141.070288] (ME) [ 1141.098738] lowmem_reserve[]: [ 1141.119532] 2*512kB [ 1141.133057] 0 [ 1141.146786] (ME) [ 1141.176865] 0 [ 1141.192071] 2*1024kB [ 1141.192106] 0 [ 1141.197078] (ME) [ 1141.202138] 0 [ 1141.202293] 3*2048kB [ 1141.204567] 0 [ 1141.204575] Node 1 Normal free:26604kB min:53696kB low:67120kB high:80544kB active_anon:1212kB inactive_anon:56764kB active_file:24kB inactive_file:24kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:160kB pagetables:76kB bounce:0kB free_pcp:240kB local_pcp:120kB free_cma:0kB [ 1141.204599] lowmem_reserve[]: 0 0 0 0 0 [ 1141.204619] Node 0 DMA: 2*4kB (UE) 1*8kB (U) 0*16kB 2*32kB (UE) [ 1141.221329] (UM) [ 1141.236393] 8*64kB [ 1141.251731] 0*4096kB [ 1141.259126] (UE) [ 1141.296518] = 10960kB [ 1141.309269] 5*128kB (UME) 2*256kB (ME) 2*512kB (ME) 2*1024kB (ME) 3*2048kB (UM) 0*4096kB = 10960kB [ 1141.317196] Node 0 DMA32: 383*4kB (UME) 186*8kB (UME) 134*16kB (UME) 19*32kB (UME) 1*64kB (M) 72*128kB (UM) 13*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18380kB [ 1141.322566] Node 0 [ 1141.343271] Node 0 [ 1141.345058] DMA32: [ 1141.345513] Normal: [ 1141.347742] 383*4kB [ 1141.349959] 0*4kB [ 1141.352277] (UME) [ 1141.358815] 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1141.367274] 186*8kB (UME) 134*16kB (UME) 19*32kB (UME) 1*64kB (M) 72*128kB (UM) 13*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18380kB [ 1141.371852] Node 1 Normal: 109*4kB (UME) 61*8kB (UM) 51*16kB (UM) 37*32kB (M) 26*64kB (UM) 16*128kB (M) 6*256kB (UM) 4*512kB (UM) 14*1024kB (U) 1*2048kB (U) 0*4096kB = 26604kB [ 1141.397161] Node 0 [ 1141.411106] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1141.422229] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1141.423281] Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1141.437100] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1141.449831] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1141.457659] Node 1 Normal: 109*4kB (UME) 61*8kB (UM) 51*16kB (UM) 37*32kB (M) 26*64kB (UM) 16*128kB (M) 6*256kB (UM) 4*512kB (UM) 14*1024kB (U) 1*2048kB (U) 0*4096kB = 26604kB [ 1141.465062] 47910 total pagecache pages [ 1141.482555] 0 pages in swap cache [ 1141.488133] Swap cache stats: add 0, delete 0, find 0/0 [ 1141.492038] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1141.497521] Free swap = 0kB [ 1141.507139] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1141.510208] Total swap = 0kB [ 1141.527620] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1141.529471] 2097051 pages RAM [ 1141.541377] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1141.542021] 0 pages HighMem/MovableOnly [ 1141.557016] 47910 total pagecache pages [ 1141.561003] 0 pages in swap cache [ 1141.565395] 363848 pages reserved [ 1141.568844] 0 pages cma reserved [ 1141.570837] Swap cache stats: add 0, delete 0, find 0/0 [ 1141.572205] Out of memory (oom_kill_allocating_task): Kill process 25459 (systemd-journal) score 0 or sacrifice child [ 1141.582051] Free swap = 0kB [ 1141.600114] Killed process 25459 (systemd-journal) total-vm:46096kB, anon-rss:472kB, file-rss:0kB, shmem-rss:1976kB [ 1141.603547] Total swap = 0kB [ 1141.622952] oom_reaper: reaped process 25459 (systemd-journal), now anon-rss:0kB, file-rss:0kB, shmem-rss:1976kB [ 1141.625379] 2097051 pages RAM [ 1141.648203] systemd-udevd invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=-1000 [ 1141.670882] 0 pages HighMem/MovableOnly [ 1141.674980] 363848 pages reserved [ 1141.678427] 0 pages cma reserved [ 1141.681051] systemd-udevd cpuset=/ mems_allowed=0-1 [ 1141.715825] CPU: 0 PID: 4628 Comm: systemd-udevd Not tainted 4.14.230-syzkaller #0 [ 1141.723551] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1141.732907] Call Trace: [ 1141.735514] dump_stack+0x1b2/0x281 [ 1141.739142] dump_header+0x178/0x82f [ 1141.742850] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1141.747980] ? ___ratelimit+0x2cd/0x530 [ 1141.751947] oom_kill_process.cold+0x10/0xa40 [ 1141.756440] ? lock_downgrade+0x740/0x740 [ 1141.760592] out_of_memory+0x2dc/0x1190 [ 1141.764564] ? oom_killer_disable+0x1c0/0x1c0 [ 1141.769072] ? mutex_trylock+0x152/0x1a0 [ 1141.773137] __alloc_pages_nodemask+0x23e1/0x2720 [ 1141.777990] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1141.782841] alloc_pages_current+0x155/0x260 [ 1141.787252] filemap_fault+0x11a1/0x1ad0 [ 1141.791324] ext4_filemap_fault+0x84/0xb0 [ 1141.795469] __do_fault+0xfa/0x380 [ 1141.799003] __handle_mm_fault+0x2497/0x4620 [ 1141.803407] ? vm_insert_page+0x7c0/0x7c0 [ 1141.807558] ? mark_held_locks+0xa6/0xf0 [ 1141.811617] handle_mm_fault+0x455/0x9c0 [ 1141.815676] __do_page_fault+0x549/0xad0 [ 1141.819760] ? spurious_fault+0x640/0x640 [ 1141.823904] ? do_page_fault+0x60/0x500 [ 1141.828008] ? page_fault+0x2f/0x50 [ 1141.831626] page_fault+0x45/0x50 [ 1141.835073] RIP: 0001:0xffffffffffffffff [ 1141.839119] RSP: f472c600:00007fff8d362a40 EFLAGS: 7fff8d3628d0 [ 1142.122962] systemd[1]: systemd-journald.service: Failed with result 'signal'. [ 1142.156538] systemd[1]: systemd-journald.service: Service has no hold-off time, scheduling restart. [ 1142.184530] systemd[1]: Stopped Journal Service. [ 1142.199089] Mem-Info: [ 1142.201629] active_anon:12801 inactive_anon:47362 isolated_anon:0 [ 1142.201629] active_file:111 inactive_file:1697 isolated_file:0 [ 1142.201629] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1142.201629] slab_reclaimable:12575 slab_unreclaimable:116257 [ 1142.201629] mapped:53387 shmem:47884 pagetables:719 bounce:0 [ 1142.201629] free:261444 free_pcp:423 free_cma:0 [ 1142.267784] systemd[1]: Starting Journal Service... [ 1142.335527] Node 0 active_anon:49920kB inactive_anon:132684kB active_file:528kB inactive_file:5916kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:211752kB dirty:0kB writeback:0kB shmem:134372kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1142.428090] Node 1 active_anon:1284kB inactive_anon:56764kB active_file:1716kB inactive_file:3272kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:3996kB dirty:0kB writeback:0kB shmem:57164kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1142.514099] Node 0 DMA free:11192kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1142.551548] systemd-journald[25784]: File /run/log/journal/04d8c135ee6b410280ba31a58c89679d/system.journal corrupted or uncleanly shut down, renaming and replacing. [ 1142.592896] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1142.597969] Node 0 DMA32 free:81540kB min:36200kB low:45248kB high:54296kB active_anon:50320kB inactive_anon:133384kB active_file:1028kB inactive_file:5816kB unevictable:0kB writepending:0kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:7488kB pagetables:2780kB bounce:0kB free_pcp:1336kB local_pcp:704kB free_cma:0kB [ 1142.672951] lowmem_reserve[]: 0 0 0 0 0 [ 1142.676964] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1142.732831] lowmem_reserve[]: 0 0 0 0 0 [ 1142.736860] Node 1 Normal free:1364228kB min:53696kB low:67120kB high:80544kB active_anon:1284kB inactive_anon:56764kB active_file:2116kB inactive_file:2840kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:160kB pagetables:96kB bounce:0kB free_pcp:1420kB local_pcp:692kB free_cma:0kB [ 1142.802802] lowmem_reserve[]: 0 0 0 0 0 [ 1142.806846] Node 0 DMA: 13*4kB (UE) 0*8kB 0*16kB 1*32kB (E) 1*64kB (E) 8*128kB (UME) 3*256kB (UME) 2*512kB (ME) 2*1024kB (ME) 3*2048kB (UM) 0*4096kB = 11156kB [ 1142.843225] Node 0 DMA32: 476*4kB (UM) 511*8kB (UM) 1053*16kB (UE) 1662*32kB (UE) 113*64kB (U) 3*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 83640kB [ 1142.872839] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1142.893447] Node 1 Normal: 3075*4kB (UME) 2141*8kB (UME) 1459*16kB (UME) 1455*32kB (UE) 3364*64kB (UME) 3532*128kB (UM) 1532*256kB (UM) 250*512kB (UM) 27*1024kB (U) 9*2048kB (U) 0*4096kB = 1332996kB [ 1142.932805] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1142.941711] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1142.962809] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1142.971758] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1143.002812] 52828 total pagecache pages [ 1143.006820] 0 pages in swap cache [ 1143.010265] Swap cache stats: add 0, delete 0, find 0/0 [ 1143.023426] Free swap = 0kB [ 1143.026467] Total swap = 0kB [ 1143.029480] 2097051 pages RAM [ 1143.032574] 0 pages HighMem/MovableOnly [ 1143.052776] 363848 pages reserved [ 1143.056300] 0 pages cma reserved [ 1143.059670] Out of memory: Kill process 25750 (syz-executor.1) score 1004 or sacrifice child [ 1143.304250] systemd[1]: Started Journal Service. [ 1143.882824] Bluetooth: hci0 command 0x0409 tx timeout [ 1143.882849] Bluetooth: hci1 command 0x0409 tx timeout [ 1144.488382] IPVS: ftp: loaded support on port[0] = 21 [ 1144.530918] IPVS: ftp: loaded support on port[0] = 21 [ 1144.630476] chnl_net:caif_netlink_parms(): no params data found [ 1144.748680] chnl_net:caif_netlink_parms(): no params data found [ 1144.804302] bridge0: port 1(bridge_slave_0) entered blocking state [ 1144.810948] bridge0: port 1(bridge_slave_0) entered disabled state [ 1144.819249] device bridge_slave_0 entered promiscuous mode [ 1144.826455] bridge0: port 2(bridge_slave_1) entered blocking state [ 1144.833391] bridge0: port 2(bridge_slave_1) entered disabled state [ 1144.840354] device bridge_slave_1 entered promiscuous mode [ 1144.867182] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 1144.882570] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1144.915100] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 1144.924015] team0: Port device team_slave_0 added [ 1144.929091] bridge0: port 1(bridge_slave_0) entered blocking state [ 1144.937723] bridge0: port 1(bridge_slave_0) entered disabled state [ 1144.945674] device bridge_slave_0 entered promiscuous mode [ 1144.952257] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 1144.960497] team0: Port device team_slave_1 added [ 1144.966047] bridge0: port 2(bridge_slave_1) entered blocking state [ 1144.972430] bridge0: port 2(bridge_slave_1) entered disabled state [ 1144.980014] device bridge_slave_1 entered promiscuous mode [ 1145.010203] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1145.016531] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1145.041815] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1145.060438] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1145.066743] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1145.093408] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1145.105960] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 1145.116342] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 1145.125102] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1145.133486] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 1145.175330] device hsr_slave_0 entered promiscuous mode [ 1145.181034] device hsr_slave_1 entered promiscuous mode [ 1145.187628] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 1145.194983] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 1145.202099] team0: Port device team_slave_0 added [ 1145.208250] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 1145.215644] team0: Port device team_slave_1 added [ 1145.220914] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 1145.263335] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1145.269585] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1145.295249] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1145.307305] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1145.314081] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1145.339427] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1145.354719] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 1145.368504] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 1145.407932] device hsr_slave_0 entered promiscuous mode [ 1145.414222] device hsr_slave_1 entered promiscuous mode [ 1145.425851] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 1145.439694] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 1145.510637] bridge0: port 2(bridge_slave_1) entered blocking state [ 1145.517059] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1145.523749] bridge0: port 1(bridge_slave_0) entered blocking state [ 1145.530104] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1145.590429] bridge0: port 2(bridge_slave_1) entered blocking state [ 1145.596833] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1145.603535] bridge0: port 1(bridge_slave_0) entered blocking state [ 1145.609908] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1145.642551] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 1145.648933] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1145.657266] bridge0: port 1(bridge_slave_0) entered disabled state [ 1145.664733] bridge0: port 2(bridge_slave_1) entered disabled state [ 1145.671844] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 1145.679442] bridge0: port 1(bridge_slave_0) entered disabled state [ 1145.686374] bridge0: port 2(bridge_slave_1) entered disabled state [ 1145.702832] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 1145.714497] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 1145.721142] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1145.728257] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1145.739574] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 1145.746221] 8021q: adding VLAN 0 to HW filter on device team0 [ 1145.756080] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1145.765670] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 1145.774049] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 1145.780187] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1145.790502] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1145.798202] bridge0: port 1(bridge_slave_0) entered blocking state [ 1145.804597] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1145.814431] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 1145.823666] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 1145.830630] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1145.838799] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1145.846724] bridge0: port 2(bridge_slave_1) entered blocking state [ 1145.853121] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1145.860451] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1145.870305] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 1145.878652] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1145.886322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1145.894367] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 1145.904616] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 1145.914210] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 1145.922488] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 1145.931849] 8021q: adding VLAN 0 to HW filter on device team0 [ 1145.938311] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1145.947189] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1145.955132] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1145.962634] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1145.962878] Bluetooth: hci1 command 0x041b tx timeout [ 1145.970482] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1145.980459] Bluetooth: hci0 command 0x041b tx timeout [ 1145.983334] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1145.999050] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 1146.006499] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1146.014157] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1146.024919] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 1146.032627] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1146.044555] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 1146.050601] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1146.059014] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 1146.067405] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1146.075398] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1146.082858] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1146.090606] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1146.098690] bridge0: port 1(bridge_slave_0) entered blocking state [ 1146.105083] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1146.118107] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 1146.127989] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 1146.135266] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1146.143230] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1146.150880] bridge0: port 2(bridge_slave_1) entered blocking state [ 1146.157296] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1146.165492] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 1146.173301] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1146.180001] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1146.189595] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 1146.199915] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1146.209891] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1146.218863] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 1146.226830] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1146.238098] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 1146.249652] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 1146.256839] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1146.266436] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1146.274980] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1146.282530] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1146.290380] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1146.307184] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 1146.314475] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1146.322058] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1146.338204] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 1146.345919] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1146.354774] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1146.364627] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 1146.370644] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1146.390788] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 1146.401183] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 1146.408844] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1146.416693] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1146.426790] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 1146.437812] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 1146.446034] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1146.457566] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1146.468294] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1146.504935] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 1146.512021] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 1146.519358] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 1146.529936] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 1146.537973] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1146.546233] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1146.555218] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1146.562724] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1146.570866] device veth0_vlan entered promiscuous mode [ 1146.582391] device veth1_vlan entered promiscuous mode [ 1146.589256] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 1146.599524] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 1146.616974] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 1146.625472] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 1146.635982] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 1146.644128] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1146.651350] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1146.659061] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1146.666677] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1146.676420] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 1146.685364] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1146.697324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1146.706126] device veth0_macvtap entered promiscuous mode [ 1146.716543] device veth1_macvtap entered promiscuous mode [ 1146.726425] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 1146.737812] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 1146.750575] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 1146.758433] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 1146.765798] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 1146.772213] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1146.784088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1146.793284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1146.803943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1146.813633] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1146.824145] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1146.833309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1146.843114] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1146.853481] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 1146.860405] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1146.869650] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1146.879417] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1146.888565] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1146.901298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1146.910455] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1146.920203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1146.929627] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1146.939402] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1146.949525] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 1146.956841] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1146.963788] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1146.971586] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1146.979905] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1146.987890] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1147.001184] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 1147.014938] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1147.022330] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1147.033557] device veth0_vlan entered promiscuous mode [ 1147.047324] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1147.055095] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1147.064566] device veth1_vlan entered promiscuous mode [ 1147.070566] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 1147.081128] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 1147.097157] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 1147.107359] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 1147.114587] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1147.121833] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1147.129411] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1147.137472] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1147.147903] device veth0_macvtap entered promiscuous mode [ 1147.154678] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 1147.165119] device veth1_macvtap entered promiscuous mode [ 1147.171406] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 1147.184096] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 1147.194698] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 1147.204352] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1147.214138] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1147.223383] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1147.233489] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1147.242656] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1147.252643] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1147.261864] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1147.271662] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1147.280907] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1147.290696] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1147.300931] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 1147.308119] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1147.315581] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1147.323815] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1147.331013] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1147.338879] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1147.348680] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1147.359086] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1147.368350] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1147.378093] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1147.387416] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1147.397182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1147.406497] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1147.416264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1147.425776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1147.435742] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1147.445945] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 1147.453009] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1147.461564] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1147.469768] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 13:36:44 executing program 4: semctl$SETVAL(0x0, 0x0, 0x10, 0x0) semctl$SEM_INFO(0xffffffffffffffff, 0x1, 0x13, &(0x7f0000000240)=""/41) getitimer(0x2, &(0x7f0000000540)) semctl$SEM_STAT(0x0, 0x3, 0x12, &(0x7f0000000280)=""/230) semctl$GETNCNT(0x0, 0x4, 0xe, &(0x7f0000000400)=""/226) r0 = semget$private(0x0, 0x1, 0x10c) semctl$GETNCNT(r0, 0x2, 0xe, &(0x7f0000000500)=""/25) semctl$SETVAL(0x0, 0x2, 0x10, &(0x7f0000000180)=0xebfe) add_key$user(&(0x7f0000000080)='user\x00', &(0x7f00000000c0)={'syz', 0x3}, &(0x7f0000000100)="fc2edf2fc5a4a8243b61253cdcdd11d17affe577e3b5f9761971adf1e905d389a24ecb495161f7f9c3f371da22d7279bafcd95e23176dbaadf5577225b0f835c97ef76f369891989d6a6a80e905fb58a280a3cacbfbf2abfdc2810111f2b8cce652a89f47930d1209ce1", 0x6a, 0xffffffffffffffff) semctl$GETNCNT(0xffffffffffffffff, 0x4, 0xe, &(0x7f0000000380)=""/88) semget$private(0x0, 0x1, 0x160) 13:36:44 executing program 1: ioctl$SIOCPNDELRESOURCE(0xffffffffffffffff, 0x89ef, &(0x7f0000000040)=0xffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f00000012c0)={0x0, @nl=@unspec, @tipc=@id={0x1e, 0x3, 0x2, {0x4e21, 0x4}}, @ethernet={0x307, @random="68d88c73bc2f"}, 0x0, 0x0, 0x0, 0x0, 0x20, &(0x7f0000001280)='bridge_slave_0\x00', 0x401, 0x0, 0xfd51}) semctl$SETVAL(0x0, 0x0, 0x10, 0x0) semctl$GETVAL(0x0, 0x0, 0xc, &(0x7f0000000180)=""/194) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SCAUSEDIAG(r2, 0x89ec, &(0x7f0000000600)) bind$x25(r2, &(0x7f0000001480)={0x9, @remote={[], 0x3}}, 0x12) syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, &(0x7f00000014c0)) r3 = semget$private(0x0, 0x1, 0x484) semctl$IPC_STAT(r3, 0x0, 0x2, &(0x7f00000000c0)=""/89) semctl$SEM_INFO(r3, 0x4, 0x13, &(0x7f0000000280)=""/4096) sendmsg$RDMA_NLDEV_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000001440)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001400)={&(0x7f0000001500)=ANY=[@ANYBLOB="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"/270], 0x60}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000000)='SEG6\x00', r1) openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x500, 0x0) 13:36:44 executing program 2: timer_create(0x7, &(0x7f0000000080)={0x0, 0x2a, 0x1, @thr={&(0x7f0000000000)="cedfad775dd967d003dbe52d40534e44b24e419a438ccb478ff3986437dfb2fca4ea25e257ce70593b4b4f61cdbbf5a2983c0c90c1e3d51f07a4095f", &(0x7f0000000040)="8bd19b303ba21500f7c2d3f7cc2fd29ae3c6db45e63c59054646e1b44d3003f74d33b6c48e8208376d6b0111434cdac6450a"}}, &(0x7f00000000c0)=0x0) timer_gettime(r0, &(0x7f0000000100)) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100)='/dev/bsg\x00', 0x204402, 0x0) write$eventfd(r1, 0x0, 0x0) bind$can_raw(r1, &(0x7f0000000140), 0x10) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) 13:36:44 executing program 5: r0 = semget$private(0x0, 0x0, 0xb0) semctl$IPC_RMID(r0, 0x0, 0x0) semctl$IPC_STAT(r0, 0x0, 0x2, &(0x7f0000000080)=""/104) semctl$IPC_STAT(r0, 0x0, 0x2, &(0x7f0000000540)=""/206) r1 = semget$private(0x0, 0x0, 0x30) semctl$IPC_RMID(r1, 0x0, 0x0) r2 = semget$private(0x0, 0x3, 0x42) semctl$SETVAL(r2, 0x2, 0x10, 0x0) 13:36:44 executing program 3: ioctl$SIOCPNDELRESOURCE(0xffffffffffffffff, 0x89ef, &(0x7f0000000040)) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f00000012c0)={0x0, @nl=@unspec, @tipc=@id={0x1e, 0x3, 0x2, {0x4e21, 0x4}}, @ethernet={0x307, @random="68d88c73bc2f"}, 0x0, 0x0, 0x0, 0x0, 0x20, &(0x7f0000001280)='bridge_slave_0\x00', 0x401, 0x0, 0xfd51}) semctl$SETVAL(0x0, 0x0, 0x10, 0x0) semctl$GETVAL(0x0, 0x0, 0xc, &(0x7f0000000180)=""/194) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$x25(0x9, 0x5, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x500, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x80000000, 0xa, 0x1}) 13:36:44 executing program 0: ioctl$SIOCPNDELRESOURCE(0xffffffffffffffff, 0x89ef, &(0x7f0000000040)) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f00000012c0)={0x0, @nl=@unspec, @tipc=@id={0x1e, 0x3, 0x2, {0x4e21, 0x4}}, @ethernet={0x307, @random="68d88c73bc2f"}, 0x0, 0x0, 0x0, 0x0, 0x20, &(0x7f0000001280)='bridge_slave_0\x00', 0x401, 0x0, 0xfd51}) semctl$SETVAL(0x0, 0x0, 0x10, 0x0) semctl$GETVAL(0x0, 0x0, 0xc, &(0x7f0000000180)=""/194) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$x25(0x9, 0x5, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x500, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x80000000, 0xa, 0x1}) 13:36:44 executing program 2: timer_create(0x7, &(0x7f0000000080)={0x0, 0x2a, 0x1, @thr={&(0x7f0000000000)="cedfad775dd967d003dbe52d40534e44b24e419a438ccb478ff3986437dfb2fca4ea25e257ce70593b4b4f61cdbbf5a2983c0c90c1e3d51f07a4095f", &(0x7f0000000040)="8bd19b303ba21500f7c2d3f7cc2fd29ae3c6db45e63c59054646e1b44d3003f74d33b6c48e8208376d6b0111434cdac6450a"}}, &(0x7f00000000c0)=0x0) timer_gettime(r0, &(0x7f0000000100)) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100)='/dev/bsg\x00', 0x204402, 0x0) write$eventfd(r1, 0x0, 0x0) bind$can_raw(r1, &(0x7f0000000140), 0x10) [ 1148.043577] Bluetooth: hci0 command 0x040f tx timeout [ 1148.054049] Bluetooth: hci1 command 0x040f tx timeout 13:36:44 executing program 2: timer_create(0x7, &(0x7f0000000080)={0x0, 0x2a, 0x1, @thr={&(0x7f0000000000)="cedfad775dd967d003dbe52d40534e44b24e419a438ccb478ff3986437dfb2fca4ea25e257ce70593b4b4f61cdbbf5a2983c0c90c1e3d51f07a4095f", &(0x7f0000000040)="8bd19b303ba21500f7c2d3f7cc2fd29ae3c6db45e63c59054646e1b44d3003f74d33b6c48e8208376d6b0111434cdac6450a"}}, &(0x7f00000000c0)=0x0) timer_gettime(r0, &(0x7f0000000100)) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100)='/dev/bsg\x00', 0x204402, 0x0) write$eventfd(r1, 0x0, 0x0) 13:36:44 executing program 5: r0 = semget$private(0x0, 0x0, 0xb0) semctl$IPC_RMID(r0, 0x0, 0x0) semctl$IPC_STAT(r0, 0x0, 0x2, &(0x7f0000000080)=""/104) semctl$IPC_STAT(r0, 0x0, 0x2, &(0x7f0000000540)=""/206) semget$private(0x0, 0x0, 0x30) r1 = semget$private(0x0, 0x3, 0x42) semctl$SETVAL(r1, 0x2, 0x10, 0x0) 13:36:44 executing program 1: ioctl$SIOCPNDELRESOURCE(0xffffffffffffffff, 0x89ef, &(0x7f0000000040)=0xffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f00000012c0)={0x0, @nl=@unspec, @tipc=@id={0x1e, 0x3, 0x2, {0x4e21, 0x4}}, @ethernet={0x307, @random="68d88c73bc2f"}, 0x0, 0x0, 0x0, 0x0, 0x20, &(0x7f0000001280)='bridge_slave_0\x00', 0x401, 0x0, 0xfd51}) semctl$SETVAL(0x0, 0x0, 0x10, 0x0) semctl$GETVAL(0x0, 0x0, 0xc, &(0x7f0000000180)=""/194) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SCAUSEDIAG(r2, 0x89ec, &(0x7f0000000600)) bind$x25(r2, &(0x7f0000001480)={0x9, @remote={[], 0x3}}, 0x12) syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, &(0x7f00000014c0)) r3 = semget$private(0x0, 0x1, 0x484) semctl$IPC_STAT(r3, 0x0, 0x2, &(0x7f00000000c0)=""/89) semctl$SEM_INFO(r3, 0x4, 0x13, &(0x7f0000000280)=""/4096) sendmsg$RDMA_NLDEV_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000001440)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001400)={&(0x7f0000001500)=ANY=[@ANYBLOB="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"/270], 0x60}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000000)='SEG6\x00', r1) 13:36:44 executing program 4: semctl$SETVAL(0x0, 0x0, 0x10, 0x0) semctl$SEM_INFO(0xffffffffffffffff, 0x1, 0x13, &(0x7f0000000240)=""/41) getitimer(0x2, &(0x7f0000000540)) semctl$SEM_STAT(0x0, 0x3, 0x12, &(0x7f0000000280)=""/230) semctl$GETNCNT(0x0, 0x4, 0xe, &(0x7f0000000400)=""/226) r0 = semget$private(0x0, 0x1, 0x10c) semctl$GETNCNT(r0, 0x2, 0xe, &(0x7f0000000500)=""/25) semctl$SETVAL(0x0, 0x2, 0x10, &(0x7f0000000180)=0xebfe) add_key$user(&(0x7f0000000080)='user\x00', &(0x7f00000000c0)={'syz', 0x3}, &(0x7f0000000100)="fc2edf2fc5a4a8243b61253cdcdd11d17affe577e3b5f9761971adf1e905d389a24ecb495161f7f9c3f371da22d7279bafcd95e23176dbaadf5577225b0f835c97ef76f369891989d6a6a80e905fb58a280a3cacbfbf2abfdc2810111f2b8cce652a89f47930d1209ce1", 0x6a, 0xffffffffffffffff) semctl$GETNCNT(0xffffffffffffffff, 0x4, 0xe, &(0x7f0000000380)=""/88) 13:36:44 executing program 2: timer_create(0x7, &(0x7f0000000080)={0x0, 0x2a, 0x1, @thr={&(0x7f0000000000)="cedfad775dd967d003dbe52d40534e44b24e419a438ccb478ff3986437dfb2fca4ea25e257ce70593b4b4f61cdbbf5a2983c0c90c1e3d51f07a4095f", &(0x7f0000000040)="8bd19b303ba21500f7c2d3f7cc2fd29ae3c6db45e63c59054646e1b44d3003f74d33b6c48e8208376d6b0111434cdac6450a"}}, &(0x7f00000000c0)=0x0) timer_gettime(r0, &(0x7f0000000100)) openat$bsg(0xffffffffffffff9c, &(0x7f0000000100)='/dev/bsg\x00', 0x204402, 0x0) 13:36:44 executing program 1: ioctl$SIOCPNDELRESOURCE(0xffffffffffffffff, 0x89ef, &(0x7f0000000040)=0xffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f00000012c0)={0x0, @nl=@unspec, @tipc=@id={0x1e, 0x3, 0x2, {0x4e21, 0x4}}, @ethernet={0x307, @random="68d88c73bc2f"}, 0x0, 0x0, 0x0, 0x0, 0x20, &(0x7f0000001280)='bridge_slave_0\x00', 0x401, 0x0, 0xfd51}) semctl$SETVAL(0x0, 0x0, 0x10, 0x0) semctl$GETVAL(0x0, 0x0, 0xc, &(0x7f0000000180)=""/194) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SCAUSEDIAG(r2, 0x89ec, &(0x7f0000000600)) bind$x25(r2, &(0x7f0000001480)={0x9, @remote={[], 0x3}}, 0x12) syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, &(0x7f00000014c0)) r3 = semget$private(0x0, 0x1, 0x484) semctl$IPC_STAT(r3, 0x0, 0x2, &(0x7f00000000c0)=""/89) semctl$SEM_INFO(r3, 0x4, 0x13, &(0x7f0000000280)=""/4096) sendmsg$RDMA_NLDEV_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000001440)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001400)={&(0x7f0000001500)=ANY=[@ANYBLOB="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"/270], 0x60}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) [ 1149.098079] syz-executor.0: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1149.111874] syz-executor.3: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1149.132830] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 1149.135060] syz-executor.3 cpuset= [ 1149.137981] CPU: 1 PID: 26259 Comm: syz-executor.0 Not tainted 4.14.230-syzkaller #0 [ 1149.137994] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1149.138002] Call Trace: [ 1149.141589] / [ 1149.149429] dump_stack+0x1b2/0x281 [ 1149.161418] mems_allowed=0-1 [ 1149.163072] warn_alloc.cold+0x96/0x1cc [ 1149.163087] ? zone_watermark_ok_safe+0x220/0x220 [ 1149.163111] __alloc_pages_nodemask+0x2127/0x2720 [ 1149.183439] ? lock_acquire+0x170/0x3f0 [ 1149.187410] ? lock_acquire+0x170/0x3f0 [ 1149.191399] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1149.196245] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1149.201693] ? __mutex_unlock_slowpath+0x75/0x770 [ 1149.206533] ? alloc_pages_current+0x16/0x260 [ 1149.211023] alloc_pages_current+0x155/0x260 [ 1149.215447] ion_page_pool_alloc+0x118/0x1b0 [ 1149.219859] ion_system_heap_allocate+0x133/0x8c0 [ 1149.224699] ? ion_alloc+0x187/0x810 [ 1149.228413] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1149.233858] ? ion_system_contig_heap_create+0x130/0x130 [ 1149.239303] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1149.244319] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1149.249181] ion_alloc+0x204/0x810 [ 1149.252721] ? ion_dma_buf_release+0x40/0x40 [ 1149.257125] ? __might_fault+0x177/0x1b0 [ 1149.261182] ion_ioctl+0xea/0x1f0 [ 1149.264638] ? ion_query_heaps+0x360/0x360 [ 1149.268876] ? ion_query_heaps+0x360/0x360 [ 1149.273115] do_vfs_ioctl+0x75a/0xff0 [ 1149.276923] ? ioctl_preallocate+0x1a0/0x1a0 [ 1149.281335] ? lock_downgrade+0x740/0x740 [ 1149.285507] ? __fget+0x225/0x360 [ 1149.288955] ? do_vfs_ioctl+0xff0/0xff0 [ 1149.292926] ? security_file_ioctl+0x83/0xb0 [ 1149.297344] SyS_ioctl+0x7f/0xb0 [ 1149.300714] ? do_vfs_ioctl+0xff0/0xff0 [ 1149.304683] do_syscall_64+0x1d5/0x640 [ 1149.308571] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1149.313762] RIP: 0033:0x466459 [ 1149.317049] RSP: 002b:00007efdfe4bc188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1149.324749] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1149.332006] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000005 [ 1149.339263] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1149.346529] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1149.353791] R13: 00007fff2a52985f R14: 00007efdfe4bc300 R15: 0000000000022000 [ 1149.361069] CPU: 0 PID: 26266 Comm: syz-executor.3 Not tainted 4.14.230-syzkaller #0 [ 1149.368962] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1149.378333] Call Trace: [ 1149.381095] dump_stack+0x1b2/0x281 [ 1149.384718] warn_alloc.cold+0x96/0x1cc [ 1149.388707] ? zone_watermark_ok_safe+0x220/0x220 [ 1149.393561] __alloc_pages_nodemask+0x2127/0x2720 [ 1149.398412] ? retint_kernel+0x2d/0x2d [ 1149.402298] ? lock_acquire+0x170/0x3f0 [ 1149.406271] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1149.411130] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1149.416578] ? __mutex_unlock_slowpath+0x75/0x770 [ 1149.421433] alloc_pages_current+0x155/0x260 [ 1149.425871] ion_page_pool_alloc+0x118/0x1b0 [ 1149.430291] ion_system_heap_allocate+0x133/0x8c0 [ 1149.435137] ? ion_alloc+0x187/0x810 [ 1149.438847] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1149.444292] ? ion_system_contig_heap_create+0x130/0x130 [ 1149.449735] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1149.454745] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1149.459580] ion_alloc+0x204/0x810 [ 1149.463115] ? ion_dma_buf_release+0x40/0x40 [ 1149.467519] ? __might_fault+0x177/0x1b0 [ 1149.471573] ion_ioctl+0xea/0x1f0 [ 1149.475017] ? ion_query_heaps+0x360/0x360 [ 1149.479245] ? ion_query_heaps+0x360/0x360 [ 1149.483499] do_vfs_ioctl+0x75a/0xff0 [ 1149.487294] ? ioctl_preallocate+0x1a0/0x1a0 [ 1149.491709] ? lock_downgrade+0x740/0x740 [ 1149.495866] ? __fget+0x225/0x360 [ 1149.499309] ? do_vfs_ioctl+0xff0/0xff0 [ 1149.503296] ? security_file_ioctl+0x83/0xb0 [ 1149.507696] SyS_ioctl+0x7f/0xb0 [ 1149.511052] ? do_vfs_ioctl+0xff0/0xff0 [ 1149.515024] do_syscall_64+0x1d5/0x640 [ 1149.518908] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1149.524111] RIP: 0033:0x466459 [ 1149.527290] RSP: 002b:00007f8a667e8188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1149.535007] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1149.542280] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000005 [ 1149.549579] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1149.556867] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1149.564139] R13: 00007ffd25ba1ddf R14: 00007f8a667e8300 R15: 0000000000022000 [ 1149.588339] Mem-Info: [ 1149.590799] active_anon:13480 inactive_anon:49397 isolated_anon:0 [ 1149.590799] active_file:1062 inactive_file:2187 isolated_file:0 [ 1149.590799] unevictable:0 dirty:40 writeback:25 unstable:0 [ 1149.590799] slab_reclaimable:12353 slab_unreclaimable:115983 [ 1149.590799] mapped:54539 shmem:49940 pagetables:736 bounce:0 [ 1149.590799] free:215824 free_pcp:268 free_cma:0 [ 1149.627272] Node 0 active_anon:52912kB inactive_anon:140836kB active_file:4088kB inactive_file:8876kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:217880kB dirty:128kB writeback:100kB shmem:142604kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1149.657796] Node 1 active_anon:1008kB inactive_anon:56752kB active_file:160kB inactive_file:172kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:376kB dirty:32kB writeback:0kB shmem:57156kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1149.685922] Node 0 DMA free:11128kB min:204kB low:252kB high:300kB active_anon:2048kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1149.716943] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1149.722081] Node 0 DMA32 free:716156kB min:36200kB low:45248kB high:54296kB active_anon:50864kB inactive_anon:140836kB active_file:4088kB inactive_file:9400kB unevictable:0kB writepending:80kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:7584kB pagetables:2868kB bounce:0kB free_pcp:272kB local_pcp:252kB free_cma:0kB [ 1149.764048] lowmem_reserve[]: 0 0 0 0 0 [ 1149.769455] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1149.800981] lowmem_reserve[]: 0 0 0 0 0 [ 1149.807571] Node 1 Normal free:57592kB min:53696kB low:67120kB high:80544kB active_anon:1008kB inactive_anon:56752kB active_file:252kB inactive_file:312kB unevictable:0kB writepending:32kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:160kB pagetables:76kB bounce:0kB free_pcp:1288kB local_pcp:704kB free_cma:0kB [ 1149.858266] lowmem_reserve[]: 0 0 0 0 0 [ 1149.862392] Node 0 DMA: 16*4kB (UE) 51*8kB (U) 38*16kB (U) 22*32kB (UE) 14*64kB (UE) 12*128kB (UME) 3*256kB (UME) 2*512kB (ME) 3*1024kB (UME) 1*2048kB (U) 0*4096kB = 11128kB [ 1149.888273] Node 0 DMA32: 139*4kB (UE) 1881*8kB (UE) 17713*16kB (UME) 10339*32kB (UME) 25*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 631460kB [ 1149.915558] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1149.936205] Node 1 Normal: 739*4kB (UM) 1174*8kB (UM) 962*16kB (UM) 646*32kB (UM) 40*64kB (UM) 24*128kB (U) 6*256kB (U) 4*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 57628kB [ 1149.951595] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1149.965679] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1149.976228] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1149.987079] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1149.997711] 54185 total pagecache pages [ 1150.001699] 0 pages in swap cache [ 1150.007363] Swap cache stats: add 0, delete 0, find 0/0 [ 1150.012737] Free swap = 0kB [ 1150.016884] Total swap = 0kB [ 1150.019904] 2097051 pages RAM [ 1150.024980] 0 pages HighMem/MovableOnly [ 1150.028961] 363848 pages reserved [ 1150.032404] 0 pages cma reserved [ 1150.132875] Bluetooth: hci1 command 0x0419 tx timeout [ 1150.138242] Bluetooth: hci0 command 0x0419 tx timeout [ 1150.661565] oom_reaper: reaped process 26259 (syz-executor.0), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1150.697035] syz-executor.3 invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1150.714683] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 1150.719814] CPU: 0 PID: 24195 Comm: syz-executor.3 Not tainted 4.14.230-syzkaller #0 [ 1150.727776] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1150.737123] Call Trace: [ 1150.739714] dump_stack+0x1b2/0x281 [ 1150.743364] dump_header+0x178/0x82f [ 1150.747080] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1150.752268] ? ___ratelimit+0x2cd/0x530 [ 1150.756244] oom_kill_process.cold+0x10/0xa40 [ 1150.760747] out_of_memory+0xe3e/0x1190 [ 1150.764725] ? oom_killer_disable+0x1c0/0x1c0 [ 1150.769245] ? mutex_trylock+0x152/0x1a0 [ 1150.773304] __alloc_pages_nodemask+0x23e1/0x2720 [ 1150.778173] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1150.783033] alloc_pages_current+0x155/0x260 [ 1150.787441] filemap_fault+0x11a1/0x1ad0 [ 1150.791517] ext4_filemap_fault+0x84/0xb0 [ 1150.795664] __do_fault+0xfa/0x380 [ 1150.799199] __handle_mm_fault+0x2497/0x4620 [ 1150.803609] ? vm_insert_page+0x7c0/0x7c0 [ 1150.807756] ? hrtimer_nanosleep+0x1ff/0x4b0 [ 1150.812171] ? nanosleep_copyout+0x100/0x100 [ 1150.812857] syz-executor.0: page allocation failure: order:0 [ 1150.816581] ? mark_held_locks+0xa6/0xf0 [ 1150.816593] handle_mm_fault+0x455/0x9c0 [ 1150.822383] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1150.826429] __do_page_fault+0x549/0xad0 [ 1150.826441] ? spurious_fault+0x640/0x640 [ 1150.826457] ? do_page_fault+0x60/0x500 [ 1150.826467] ? page_fault+0x2f/0x50 [ 1150.826473] page_fault+0x45/0x50 [ 1150.826481] RIP: 118828:0xa [ 1150.826485] RSP: 0019:00007ffd25ba209c EFLAGS: 00000032 [ 1150.831584] syz-executor.3: [ 1150.842810] (null) [ 1150.858111] Mem-Info: [ 1150.861260] syz-executor.0 cpuset= [ 1150.871673] active_anon:12839 inactive_anon:49398 isolated_anon:0 [ 1150.871673] active_file:11 inactive_file:9 isolated_file:0 [ 1150.871673] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1150.871673] slab_reclaimable:12352 slab_unreclaimable:115435 [ 1150.871673] mapped:52643 shmem:49939 pagetables:713 bounce:0 [ 1150.871673] free:13861 free_pcp:82 free_cma:0 [ 1150.873944] / [ 1150.880857] page allocation failure: order:0 [ 1150.911916] mems_allowed=0-1 [ 1150.918861] Node 0 active_anon:50596kB inactive_anon:140840kB active_file:28kB inactive_file:20kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:210572kB dirty:0kB writeback:0kB shmem:142604kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1150.921253] CPU: 1 PID: 26259 Comm: syz-executor.0 Not tainted 4.14.230-syzkaller #0 [ 1150.947548] Node 1 active_anon:760kB inactive_anon:56752kB active_file:16kB inactive_file:16kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:57152kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1150.955310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1150.955315] Call Trace: [ 1150.955339] dump_stack+0x1b2/0x281 [ 1150.955352] warn_alloc.cold+0x96/0x1cc [ 1150.955363] ? zone_watermark_ok_safe+0x220/0x220 [ 1150.955373] ? usleep_range+0x130/0x130 [ 1150.955382] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1150.955395] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1150.955405] ? run_timer_softirq+0x5a0/0x5a0 [ 1150.955422] __alloc_pages_nodemask+0x2127/0x2720 [ 1150.955439] ? lock_acquire+0x170/0x3f0 [ 1150.982173] Node 0 [ 1150.991502] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1150.991514] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1150.991531] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1150.994118] DMA free:10972kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1150.997707] ? alloc_pages_current+0x135/0x260 [ 1151.001649] lowmem_reserve[]: [ 1151.006499] alloc_pages_current+0x155/0x260 [ 1151.006513] ion_page_pool_alloc+0x118/0x1b0 [ 1151.006523] ion_system_heap_allocate+0x133/0x8c0 [ 1151.010476] 0 [ 1151.015654] ? ion_alloc+0x187/0x810 [ 1151.015665] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1151.015675] ? ion_system_contig_heap_create+0x130/0x130 [ 1151.015687] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1151.020677] 2717 [ 1151.025072] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1151.025083] ion_alloc+0x204/0x810 [ 1151.025097] ? ion_dma_buf_release+0x40/0x40 [ 1151.029920] 2718 [ 1151.034317] ? __might_fault+0x177/0x1b0 [ 1151.034330] ion_ioctl+0xea/0x1f0 [ 1151.034339] ? ion_query_heaps+0x360/0x360 [ 1151.036557] 2718 [ 1151.041407] ? ion_query_heaps+0x360/0x360 [ 1151.050671] 2718 [ 1151.056093] do_vfs_ioctl+0x75a/0xff0 [ 1151.056106] ? ioctl_preallocate+0x1a0/0x1a0 [ 1151.056118] ? lock_downgrade+0x740/0x740 [ 1151.086403] ? __fget+0x225/0x360 [ 1151.086417] ? do_vfs_ioctl+0xff0/0xff0 [ 1151.089505] Node 0 [ 1151.093898] ? security_file_ioctl+0x83/0xb0 [ 1151.093909] SyS_ioctl+0x7f/0xb0 [ 1151.093919] ? do_vfs_ioctl+0xff0/0xff0 [ 1151.098315] DMA32 free:17636kB min:36200kB low:45248kB high:54296kB active_anon:50672kB inactive_anon:140840kB active_file:44kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:7584kB pagetables:2808kB bounce:0kB free_pcp:208kB local_pcp:88kB free_cma:0kB [ 1151.103131] do_syscall_64+0x1d5/0x640 [ 1151.103148] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1151.103156] RIP: 0033:0x466459 [ 1151.104938] lowmem_reserve[]: [ 1151.108630] RSP: 002b:00007efdfe4bc188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1151.114871] 0 [ 1151.120292] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1151.120300] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000005 [ 1151.125333] 0 [ 1151.127351] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1151.127358] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1151.132189] 0 [ 1151.135710] R13: 00007fff2a52985f R14: 00007efdfe4bc300 R15: 0000000000022000 [ 1151.140200] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1151.145698] 0 [ 1151.146342] (null) [ 1151.149755] 0 [ 1151.160122] syz-executor.3 cpuset= [ 1151.172017] / [ 1151.177100] Node 0 [ 1151.185842] mems_allowed=0-1 [ 1151.191824] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1151.195880] CPU: 1 PID: 26266 Comm: syz-executor.3 Not tainted 4.14.230-syzkaller #0 [ 1151.197643] lowmem_reserve[]: [ 1151.226227] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1151.226233] Call Trace: [ 1151.226254] dump_stack+0x1b2/0x281 [ 1151.226268] warn_alloc.cold+0x96/0x1cc [ 1151.226280] ? zone_watermark_ok_safe+0x220/0x220 [ 1151.226293] ? usleep_range+0x130/0x130 [ 1151.230166] 0 [ 1151.235334] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1151.235347] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1151.235357] ? run_timer_softirq+0x5a0/0x5a0 [ 1151.235374] __alloc_pages_nodemask+0x2127/0x2720 [ 1151.238550] 0 [ 1151.241642] ? lock_acquire+0x170/0x3f0 [ 1151.249355] 0 [ 1151.251129] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1151.258416] 0 [ 1151.265643] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1151.265666] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1151.267450] 0 [ 1151.274717] alloc_pages_current+0x155/0x260 [ 1151.274734] ion_page_pool_alloc+0x118/0x1b0 [ 1151.283778] ion_system_heap_allocate+0x133/0x8c0 [ 1151.283789] ? ion_alloc+0x187/0x810 [ 1151.283801] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1151.283811] ? ion_system_contig_heap_create+0x130/0x130 [ 1151.291068] Node 1 [ 1151.298149] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1151.298163] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1151.298173] ion_alloc+0x204/0x810 [ 1151.298187] ? ion_dma_buf_release+0x40/0x40 [ 1151.299985] Normal free:26912kB min:53696kB low:67120kB high:80544kB active_anon:760kB inactive_anon:56752kB active_file:16kB inactive_file:16kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:128kB pagetables:44kB bounce:0kB free_pcp:120kB local_pcp:0kB free_cma:0kB [ 1151.302106] ? __might_fault+0x177/0x1b0 [ 1151.303904] lowmem_reserve[]: [ 1151.307406] ion_ioctl+0xea/0x1f0 [ 1151.309093] 0 [ 1151.311313] ? ion_query_heaps+0x360/0x360 [ 1151.314412] 0 [ 1151.339277] ? ion_query_heaps+0x360/0x360 [ 1151.339289] do_vfs_ioctl+0x75a/0xff0 [ 1151.339302] ? ioctl_preallocate+0x1a0/0x1a0 [ 1151.347200] 0 [ 1151.350291] ? lock_downgrade+0x740/0x740 [ 1151.359675] warn_alloc_show_mem: 1 callbacks suppressed [ 1151.359678] Mem-Info: [ 1151.362202] ? __fget+0x225/0x360 [ 1151.365841] 0 [ 1151.369788] ? do_vfs_ioctl+0xff0/0xff0 [ 1151.374675] active_anon:12836 inactive_anon:49398 isolated_anon:0 [ 1151.374675] active_file:13 inactive_file:14 isolated_file:0 [ 1151.374675] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1151.374675] slab_reclaimable:12352 slab_unreclaimable:115437 [ 1151.374675] mapped:52612 shmem:49939 pagetables:712 bounce:0 [ 1151.374675] free:13986 free_pcp:82 free_cma:0 [ 1151.378588] ? security_file_ioctl+0x83/0xb0 [ 1151.380373] Node 0 active_anon:50584kB inactive_anon:140840kB active_file:36kB inactive_file:40kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:210448kB dirty:0kB writeback:0kB shmem:142604kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1151.385454] SyS_ioctl+0x7f/0xb0 [ 1151.385465] ? do_vfs_ioctl+0xff0/0xff0 [ 1151.385478] do_syscall_64+0x1d5/0x640 [ 1151.385494] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1151.390940] 0 [ 1151.395743] RIP: 0033:0x466459 [ 1151.395748] RSP: 002b:00007f8a667e8188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1151.395759] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1151.395770] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000005 [ 1151.395779] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1151.402391] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1151.406394] Node 1 active_anon:760kB inactive_anon:56752kB active_file:16kB inactive_file:16kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:57152kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1151.408130] R13: 00007ffd25ba1ddf R14: 00007f8a667e8300 R15: 0000000000022000 [ 1151.412991] Node 0 [ 1151.492806] Node 0 [ 1151.622786] DMA: 2*4kB (UE) 1*8kB (M) 1*16kB (U) 2*32kB (UE) 10*64kB (UE) 11*128kB (UE) 3*256kB (UME) 2*512kB (ME) 3*1024kB (UME) 2*2048kB (UM) 0*4096kB = 11104kB [ 1151.853501] Node 0 DMA32: 12883*4kB (UME) 113*8kB (ME) 160*16kB (UME) 240*32kB (UME) 175*64kB (UM) 25*128kB (UM) 26*256kB (U) 11*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 89364kB [ 1151.869627] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1151.876690] DMA free:11108kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:120kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1151.880412] Node 1 Normal: 1*4kB (U) 2*8kB (UM) 2*16kB (UM) 427*32kB (UM) 12185*64kB (UM) 981*128kB (UM) 156*256kB (UM) 4*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 961108kB [ 1151.952872] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1151.961787] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1151.992815] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1151.997885] Node 0 DMA32 free:169492kB min:36200kB low:45248kB high:54296kB active_anon:50584kB inactive_anon:140840kB active_file:36kB inactive_file:40kB unevictable:0kB writepending:0kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:7584kB pagetables:2804kB bounce:0kB free_pcp:1320kB local_pcp:636kB free_cma:0kB [ 1152.053008] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1152.061903] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1152.102841] 50372 total pagecache pages [ 1152.106859] 0 pages in swap cache [ 1152.110310] Swap cache stats: add 0, delete 0, find 0/0 [ 1152.112821] lowmem_reserve[]: 0 0 0 0 0 [ 1152.116359] Free swap = 0kB [ 1152.119700] Node 0 [ 1152.122719] Total swap = 0kB [ 1152.122746] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1152.152896] lowmem_reserve[]: 0 0 0 0 0 [ 1152.156902] Node 1 Normal free:666964kB min:53696kB low:67120kB high:80544kB active_anon:760kB inactive_anon:56752kB active_file:16kB inactive_file:1464kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:128kB pagetables:44kB bounce:0kB free_pcp:232kB local_pcp:120kB free_cma:0kB [ 1152.222871] 2097051 pages RAM [ 1152.226004] 0 pages HighMem/MovableOnly [ 1152.229976] 363848 pages reserved [ 1152.233228] lowmem_reserve[]: 0 0 0 0 0 [ 1152.233577] 0 pages cma reserved [ 1152.237420] Node 0 [ 1152.240788] Out of memory (oom_kill_allocating_task): Kill process 24195 (syz-executor.3) score 0 or sacrifice child [ 1152.240794] DMA: [ 1152.243699] Killed process 26266 (syz-executor.3) total-vm:93252kB, anon-rss:156kB, file-rss:34820kB, shmem-rss:0kB [ 1152.300109] oom_reaper: reaped process 26266 (syz-executor.3), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1152.316913] 2*4kB (UE) 1*8kB (M) 1*16kB (U) 2*32kB (UE) 10*64kB (UE) 11*128kB (UE) 3*256kB (UME) 2*512kB (ME) 3*1024kB (UME) 2*2048kB (UM) 0*4096kB = 11104kB [ 1152.363497] Node 0 DMA32: 18757*4kB (UME) 14875*8kB (UME) 13164*16kB (UME) 3934*32kB (UME) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 530540kB [ 1152.402835] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1152.421876] Node 1 Normal: 496*4kB (UM) 90*8kB (UM) 7*16kB (U) 453*32kB (UM) 2649*64kB (UM) 981*128kB (UM) 156*256kB (UM) 4*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 354400kB [ 1152.472819] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1152.481771] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1152.504781] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1152.518190] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1152.528708] 50839 total pagecache pages [ 1152.532789] 0 pages in swap cache [ 1152.536350] Swap cache stats: add 0, delete 0, find 0/0 [ 1152.541792] Free swap = 0kB [ 1152.549146] Total swap = 0kB [ 1152.552599] 2097051 pages RAM [ 1152.556358] 0 pages HighMem/MovableOnly [ 1152.586036] 363848 pages reserved [ 1152.600681] 0 pages cma reserved [ 1152.600775] syz-executor.3: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1152.619206] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 1152.624818] CPU: 1 PID: 26266 Comm: syz-executor.3 Not tainted 4.14.230-syzkaller #0 [ 1152.632707] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1152.642053] Call Trace: [ 1152.644642] dump_stack+0x1b2/0x281 [ 1152.648284] warn_alloc.cold+0x96/0x1cc [ 1152.652288] ? zone_watermark_ok_safe+0x220/0x220 [ 1152.657148] __alloc_pages_nodemask+0x2127/0x2720 [ 1152.661989] ? lock_acquire+0x170/0x3f0 [ 1152.665963] ? lock_acquire+0x170/0x3f0 [ 1152.669938] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1152.674783] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1152.680233] ? __mutex_unlock_slowpath+0x75/0x770 [ 1152.685081] alloc_pages_current+0x155/0x260 [ 1152.689508] ion_page_pool_alloc+0x118/0x1b0 [ 1152.693912] ion_system_heap_allocate+0x133/0x8c0 [ 1152.698754] ? _raw_spin_unlock+0x29/0x40 [ 1152.702896] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1152.707823] ? ion_system_contig_heap_create+0x130/0x130 [ 1152.713269] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1152.718639] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1152.723480] ion_alloc+0x27a/0x810 [ 1152.727193] ? ion_dma_buf_release+0x40/0x40 [ 1152.731598] ? __might_fault+0x177/0x1b0 [ 1152.735653] ion_ioctl+0xea/0x1f0 [ 1152.739101] ? ion_query_heaps+0x360/0x360 [ 1152.743336] ? ion_query_heaps+0x360/0x360 [ 1152.747569] do_vfs_ioctl+0x75a/0xff0 [ 1152.751368] ? ioctl_preallocate+0x1a0/0x1a0 [ 1152.755774] ? lock_downgrade+0x740/0x740 [ 1152.759924] ? __fget+0x225/0x360 [ 1152.763373] ? do_vfs_ioctl+0xff0/0xff0 [ 1152.767343] ? security_file_ioctl+0x83/0xb0 [ 1152.771742] SyS_ioctl+0x7f/0xb0 [ 1152.775101] ? do_vfs_ioctl+0xff0/0xff0 [ 1152.779071] do_syscall_64+0x1d5/0x640 [ 1152.782958] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1152.788140] RIP: 0033:0x466459 [ 1152.791331] RSP: 002b:00007f8a667e8188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1152.799039] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1152.806313] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000005 [ 1152.813585] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1152.820848] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1152.828243] R13: 00007ffd25ba1ddf R14: 00007f8a667e8300 R15: 0000000000022000 [ 1152.839093] warn_alloc_show_mem: 1 callbacks suppressed [ 1152.839097] Mem-Info: [ 1152.847354] active_anon:12811 inactive_anon:49398 isolated_anon:12 [ 1152.847354] active_file:281 inactive_file:423 isolated_file:0 [ 1152.847354] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1152.847354] slab_reclaimable:12352 slab_unreclaimable:115452 [ 1152.847354] mapped:53124 shmem:49939 pagetables:712 bounce:0 [ 1152.847354] free:219382 free_pcp:332 free_cma:0 [ 1152.881801] Node 0 active_anon:50484kB inactive_anon:140840kB active_file:1080kB inactive_file:1576kB unevictable:0kB isolated(anon):48kB isolated(file):0kB mapped:212516kB dirty:0kB writeback:0kB shmem:142604kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1152.910281] Node 1 active_anon:760kB inactive_anon:56752kB active_file:44kB inactive_file:116kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:80kB dirty:0kB writeback:0kB shmem:57152kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1152.937979] Node 0 DMA free:11136kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:16kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1152.964588] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1152.969752] Node 0 DMA32 free:647672kB min:36200kB low:45248kB high:54296kB active_anon:50484kB inactive_anon:140840kB active_file:1444kB inactive_file:2024kB unevictable:0kB writepending:0kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:7584kB pagetables:2804kB bounce:0kB free_pcp:1288kB local_pcp:624kB free_cma:0kB [ 1152.999651] lowmem_reserve[]: 0 0 0 0 0 [ 1153.003812] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1153.029580] lowmem_reserve[]: 0 0 0 0 0 [ 1153.033681] Node 1 Normal free:75272kB min:53696kB low:67120kB high:80544kB active_anon:760kB inactive_anon:56752kB active_file:416kB inactive_file:48kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:128kB pagetables:44kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 1153.078633] lowmem_reserve[]: 0 0 0 0 0 [ 1153.087095] Node 0 DMA: 14*4kB (UME) 5*8kB (UM) 2*16kB (UM) 2*32kB (UE) 7*64kB (UME) 11*128kB (UE) 3*256kB (UME) 2*512kB (ME) 3*1024kB (UME) 2*2048kB (UM) 0*4096kB = 11008kB [ 1153.132811] Node 0 DMA32: 17209*4kB (UE) 13719*8kB (UME) 17999*16kB (UME) 8962*32kB (UME) 10*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 753996kB [ 1153.163375] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1153.182794] Node 1 Normal: 632*4kB (UM) 1095*8kB (UM) 80*16kB (UM) 496*32kB (UM) 25*64kB (UM) 9*128kB (UM) 12*256kB (UM) 4*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 36312kB [ 1153.211324] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1153.232806] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1153.241403] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1153.252485] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1153.261491] 50684 total pagecache pages [ 1153.265549] 0 pages in swap cache [ 1153.268997] Swap cache stats: add 0, delete 0, find 0/0 [ 1153.269775] syz-executor.0: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1153.292831] Free swap = 0kB [ 1153.299192] Total swap = 0kB [ 1153.300039] syz-executor.0 cpuset= [ 1153.302197] 2097051 pages RAM [ 1153.302199] / mems_allowed=0-1 [ 1153.312089] CPU: 0 PID: 26259 Comm: syz-executor.0 Not tainted 4.14.230-syzkaller #0 [ 1153.312837] 0 pages HighMem/MovableOnly [ 1153.319986] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1153.332820] 363848 pages reserved [ 1153.333297] Call Trace: [ 1153.336734] 0 pages cma reserved [ 1153.339309] dump_stack+0x1b2/0x281 [ 1153.346272] warn_alloc.cold+0x96/0x1cc [ 1153.350250] ? zone_watermark_ok_safe+0x220/0x220 [ 1153.355108] __alloc_pages_nodemask+0x2127/0x2720 [ 1153.359956] ? _raw_spin_unlock_irq+0x24/0x80 [ 1153.364456] ? lock_acquire+0x170/0x3f0 [ 1153.368456] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1153.373308] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1153.378766] ? __mutex_unlock_slowpath+0x75/0x770 [ 1153.383616] alloc_pages_current+0x155/0x260 [ 1153.388028] ion_page_pool_alloc+0x118/0x1b0 [ 1153.392439] ion_system_heap_allocate+0x133/0x8c0 [ 1153.397284] ? _raw_spin_unlock+0x29/0x40 [ 1153.401431] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1153.406364] ? ion_system_contig_heap_create+0x130/0x130 [ 1153.411817] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1153.416845] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1153.421697] ion_alloc+0x27a/0x810 [ 1153.425247] ? ion_dma_buf_release+0x40/0x40 [ 1153.429667] ? __might_fault+0x177/0x1b0 [ 1153.433855] ion_ioctl+0xea/0x1f0 [ 1153.437312] ? ion_query_heaps+0x360/0x360 [ 1153.441550] ? ion_query_heaps+0x360/0x360 [ 1153.445789] do_vfs_ioctl+0x75a/0xff0 [ 1153.449595] ? ioctl_preallocate+0x1a0/0x1a0 [ 1153.454005] ? lock_downgrade+0x740/0x740 [ 1153.458245] ? __fget+0x225/0x360 [ 1153.461699] ? do_vfs_ioctl+0xff0/0xff0 [ 1153.465677] ? security_file_ioctl+0x83/0xb0 [ 1153.470085] SyS_ioctl+0x7f/0xb0 [ 1153.473459] ? do_vfs_ioctl+0xff0/0xff0 [ 1153.477437] do_syscall_64+0x1d5/0x640 [ 1153.481454] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1153.486643] RIP: 0033:0x466459 [ 1153.489830] RSP: 002b:00007efdfe4bc188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1153.497537] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1153.504811] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000005 [ 1153.512095] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1153.519360] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1153.526630] R13: 00007fff2a52985f R14: 00007efdfe4bc300 R15: 0000000000022000 [ 1153.995511] systemd-journal invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1154.017998] systemd-journal cpuset=/ mems_allowed=0-1 [ 1154.023254] CPU: 0 PID: 25784 Comm: systemd-journal Not tainted 4.14.230-syzkaller #0 [ 1154.031237] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1154.040592] Call Trace: [ 1154.043199] dump_stack+0x1b2/0x281 [ 1154.046820] dump_header+0x178/0x82f [ 1154.050525] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1154.055619] ? ___ratelimit+0x2cd/0x530 [ 1154.059584] oom_kill_process.cold+0x10/0xa40 [ 1154.064077] out_of_memory+0xe3e/0x1190 [ 1154.068062] ? oom_killer_disable+0x1c0/0x1c0 [ 1154.072549] ? mutex_trylock+0x152/0x1a0 [ 1154.076606] __alloc_pages_nodemask+0x23e1/0x2720 [ 1154.081462] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1154.086312] alloc_pages_current+0x155/0x260 [ 1154.090713] filemap_fault+0x11a1/0x1ad0 [ 1154.094776] ext4_filemap_fault+0x84/0xb0 [ 1154.098911] __do_fault+0xfa/0x380 [ 1154.102444] __handle_mm_fault+0x2497/0x4620 [ 1154.106845] ? vm_insert_page+0x7c0/0x7c0 [ 1154.110994] ? mark_held_locks+0xa6/0xf0 [ 1154.115047] handle_mm_fault+0x455/0x9c0 [ 1154.119102] __do_page_fault+0x549/0xad0 [ 1154.123157] ? spurious_fault+0x640/0x640 [ 1154.127291] ? do_page_fault+0x60/0x500 [ 1154.131252] ? page_fault+0x2f/0x50 [ 1154.134865] page_fault+0x45/0x50 [ 1154.138306] RIP: 0001:0xffffffffffffffff [ 1154.142351] RSP: 128b61e0:00007fff1e333290 EFLAGS: 7fff1e3330b0 [ 1154.142412] syz-executor.3: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1154.155807] syz-executor.0: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1154.161114] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 1154.178050] CPU: 1 PID: 26266 Comm: syz-executor.3 Not tainted 4.14.230-syzkaller #0 [ 1154.182450] syz-executor.0 cpuset= [ 1154.186362] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1154.186367] Call Trace: [ 1154.186392] dump_stack+0x1b2/0x281 [ 1154.186408] warn_alloc.cold+0x96/0x1cc [ 1154.189938] / [ 1154.199288] ? zone_watermark_ok_safe+0x220/0x220 [ 1154.202078] mems_allowed=0-1 [ 1154.205480] ? usleep_range+0x130/0x130 [ 1154.205490] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1154.205504] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1154.233181] ? run_timer_softirq+0x5a0/0x5a0 [ 1154.237608] __alloc_pages_nodemask+0x2127/0x2720 [ 1154.242461] ? lock_acquire+0x170/0x3f0 [ 1154.246438] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1154.251272] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1154.255764] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1154.261349] ? __sanitizer_cov_trace_pc+0x41/0x50 [ 1154.262811] Mem-Info: [ 1154.266189] alloc_pages_current+0x155/0x260 [ 1154.268595] active_anon:12811 inactive_anon:49398 isolated_anon:0 [ 1154.268595] active_file:16 inactive_file:15 isolated_file:0 [ 1154.268595] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1154.268595] slab_reclaimable:12330 slab_unreclaimable:116194 [ 1154.268595] mapped:52644 shmem:49939 pagetables:712 bounce:0 [ 1154.268595] free:13998 free_pcp:71 free_cma:0 [ 1154.272976] ion_page_pool_alloc+0x118/0x1b0 [ 1154.272986] ion_system_heap_allocate+0x133/0x8c0 [ 1154.273000] ? _raw_spin_unlock+0x29/0x40 [ 1154.273023] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1154.324576] ? ion_system_contig_heap_create+0x130/0x130 [ 1154.330017] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1154.335027] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1154.339895] ion_alloc+0x27a/0x810 [ 1154.343430] ? ion_dma_buf_release+0x40/0x40 [ 1154.347945] ? __might_fault+0x177/0x1b0 [ 1154.351996] ion_ioctl+0xea/0x1f0 [ 1154.352799] Node 0 active_anon:50484kB inactive_anon:140840kB active_file:56kB inactive_file:52kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:210576kB dirty:0kB writeback:0kB shmem:142604kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1154.355438] ? ion_query_heaps+0x360/0x360 [ 1154.387557] ? ion_query_heaps+0x360/0x360 [ 1154.391874] do_vfs_ioctl+0x75a/0xff0 [ 1154.395666] ? ioctl_preallocate+0x1a0/0x1a0 [ 1154.400065] ? lock_downgrade+0x740/0x740 [ 1154.404204] ? __fget+0x225/0x360 [ 1154.407655] ? do_vfs_ioctl+0xff0/0xff0 [ 1154.411618] ? security_file_ioctl+0x83/0xb0 [ 1154.412798] Node 1 active_anon:760kB inactive_anon:56752kB active_file:8kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:57152kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1154.416042] SyS_ioctl+0x7f/0xb0 [ 1154.445990] ? do_vfs_ioctl+0xff0/0xff0 [ 1154.449963] do_syscall_64+0x1d5/0x640 [ 1154.453847] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1154.459026] RIP: 0033:0x466459 [ 1154.462203] RSP: 002b:00007f8a667e8188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1154.469900] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1154.472777] Node 0 [ 1154.477154] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000005 [ 1154.477162] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1154.479394] DMA free:10956kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1154.486631] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1154.486637] R13: 00007ffd25ba1ddf R14: 00007f8a667e8300 R15: 0000000000022000 [ 1154.487032] warn_alloc_show_mem: 1 callbacks suppressed [ 1154.487036] Mem-Info: [ 1154.504657] lowmem_reserve[]: [ 1154.519532] CPU: 1 PID: 26259 Comm: syz-executor.0 Not tainted 4.14.230-syzkaller #0 [ 1154.519539] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1154.519543] Call Trace: [ 1154.519562] dump_stack+0x1b2/0x281 [ 1154.519577] warn_alloc.cold+0x96/0x1cc [ 1154.534737] 0 [ 1154.540055] ? zone_watermark_ok_safe+0x220/0x220 [ 1154.542465] 2717 [ 1154.545559] ? usleep_range+0x130/0x130 [ 1154.545569] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1154.545582] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1154.545592] ? run_timer_softirq+0x5a0/0x5a0 [ 1154.553494] 2718 [ 1154.562913] __alloc_pages_nodemask+0x2127/0x2720 [ 1154.562930] ? lock_acquire+0x170/0x3f0 [ 1154.565494] 2718 [ 1154.569109] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1154.573090] 2718 [ 1154.574859] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1154.581746] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1154.585710] Node 0 [ 1154.590781] alloc_pages_current+0x155/0x260 [ 1154.595799] DMA32 free:18164kB min:36200kB low:45248kB high:54296kB active_anon:50484kB inactive_anon:140840kB active_file:56kB inactive_file:52kB unevictable:0kB writepending:0kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:7584kB pagetables:2804kB bounce:0kB free_pcp:164kB local_pcp:152kB free_cma:0kB [ 1154.600161] ion_page_pool_alloc+0x118/0x1b0 [ 1154.602193] lowmem_reserve[]: [ 1154.607021] ion_system_heap_allocate+0x133/0x8c0 [ 1154.607033] ? _raw_spin_unlock+0x29/0x40 [ 1154.607042] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1154.607052] ? ion_system_contig_heap_create+0x130/0x130 [ 1154.611005] 0 [ 1154.613052] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1154.613065] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1154.613075] ion_alloc+0x27a/0x810 [ 1154.617894] 0 [ 1154.619944] ? ion_dma_buf_release+0x40/0x40 [ 1154.624450] 0 [ 1154.629879] ? __might_fault+0x177/0x1b0 [ 1154.632103] 0 [ 1154.636496] ion_ioctl+0xea/0x1f0 [ 1154.636506] ? ion_query_heaps+0x360/0x360 [ 1154.636519] ? ion_query_heaps+0x360/0x360 [ 1154.664913] 0 [ 1154.669300] do_vfs_ioctl+0x75a/0xff0 [ 1154.677218] ? ioctl_preallocate+0x1a0/0x1a0 [ 1154.677228] ? lock_downgrade+0x740/0x740 [ 1154.677244] ? __fget+0x225/0x360 [ 1154.681374] Node 0 [ 1154.686281] ? do_vfs_ioctl+0xff0/0xff0 [ 1154.686294] ? security_file_ioctl+0x83/0xb0 [ 1154.686304] SyS_ioctl+0x7f/0xb0 [ 1154.691747] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1154.693529] ? do_vfs_ioctl+0xff0/0xff0 [ 1154.693542] do_syscall_64+0x1d5/0x640 [ 1154.693558] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1154.698551] lowmem_reserve[]: [ 1154.703374] RIP: 0033:0x466459 [ 1154.703379] RSP: 002b:00007efdfe4bc188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1154.703389] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1154.703396] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000005 [ 1154.706946] 0 [ 1154.708734] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1154.713149] 0 [ 1154.714907] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1154.718944] 0 [ 1154.720725] R13: 00007fff2a52985f R14: 00007efdfe4bc300 R15: 0000000000022000 [ 1154.720924] active_anon:12811 inactive_anon:49398 isolated_anon:0 [ 1154.720924] active_file:16 inactive_file:15 isolated_file:0 [ 1154.720924] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1154.720924] slab_reclaimable:12330 slab_unreclaimable:116194 [ 1154.720924] mapped:52644 shmem:49939 pagetables:712 bounce:0 [ 1154.720924] free:13998 free_pcp:71 free_cma:0 [ 1154.733609] 0 [ 1154.734578] Node 0 active_anon:50484kB inactive_anon:140840kB active_file:56kB inactive_file:52kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:210576kB dirty:0kB writeback:0kB shmem:142604kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1154.738264] 0 [ 1154.742679] Node 1 active_anon:760kB inactive_anon:56752kB active_file:8kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:57152kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1154.756514] Node 0 [ 1154.760870] Node 1 [ 1154.764254] DMA free:10956kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1154.764258] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1154.764279] Node 0 DMA32 free:18164kB min:36200kB low:45248kB high:54296kB active_anon:50484kB inactive_anon:140840kB active_file:56kB inactive_file:52kB unevictable:0kB writepending:0kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:7584kB pagetables:2804kB bounce:0kB free_pcp:164kB local_pcp:12kB free_cma:0kB [ 1154.764302] lowmem_reserve[]: 0 0 0 0 0 [ 1154.764325] Node 0 [ 1154.797395] Normal free:26872kB min:53696kB low:67120kB high:80544kB active_anon:760kB inactive_anon:56752kB active_file:8kB inactive_file:8kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:128kB pagetables:44kB bounce:0kB free_pcp:120kB local_pcp:120kB free_cma:0kB [ 1154.802332] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1154.807590] lowmem_reserve[]: [ 1154.808653] lowmem_reserve[]: [ 1154.822210] 0 [ 1154.823685] 0 0 0 0 0 [ 1154.831010] 0 [ 1154.832782] Node 1 Normal free:26872kB min:53696kB low:67120kB high:80544kB active_anon:760kB inactive_anon:56752kB active_file:8kB inactive_file:8kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:128kB pagetables:44kB bounce:0kB free_pcp:120kB local_pcp:0kB free_cma:0kB [ 1154.832805] lowmem_reserve[]: 0 0 0 0 0 [ 1154.832826] Node 0 DMA: [ 1154.845203] 0 [ 1154.849559] 1*4kB [ 1154.850916] 0 [ 1154.867649] (E) [ 1154.895745] 0 [ 1154.938235] 47*8kB [ 1154.984299] (U) [ 1155.012790] Node 0 [ 1155.092820] 39*16kB [ 1155.176877] DMA: 1*4kB (E) 47*8kB (U) 39*16kB (U) 23*32kB (UE) 2*64kB (UE) 3*128kB (UME) 2*256kB (ME) 2*512kB (ME) 3*1024kB (UME) 2*2048kB (UM) 0*4096kB = 10956kB [ 1155.198027] Node 0 DMA32: 471*4kB (UME) 61*8kB (UME) 123*16kB (ME) 401*32kB (UME) 14*64kB (U) 1*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18196kB [ 1155.212884] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1155.222816] (U) 23*32kB (UE) 2*64kB (UE) 3*128kB (UME) 2*256kB (ME) 2*512kB (ME) 3*1024kB (UME) 2*2048kB (UM) 0*4096kB = 10956kB [ 1155.243024] Node 0 DMA32: 471*4kB (UME) 61*8kB (UME) 123*16kB (ME) 401*32kB (UME) 14*64kB (U) 1*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18196kB [ 1155.247554] Node 1 [ 1155.272816] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1155.282811] Normal: 6*4kB (UM) 5*8kB (UM) 403*16kB (UM) 625*32kB (UM) 10586*64kB (U) 453*128kB (U) 289*256kB (U) 6*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 839056kB [ 1155.302817] Node 1 Normal: 6*4kB (UM) 5*8kB (UM) 403*16kB (UM) 625*32kB (UM) 11352*64kB (UM) 481*128kB (U) 306*256kB (U) 8*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 897040kB [ 1155.312800] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1155.332810] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1155.341691] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1155.342798] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1155.372831] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1155.381695] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1155.382799] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1155.402803] 49970 total pagecache pages [ 1155.406792] 0 pages in swap cache [ 1155.410257] Swap cache stats: add 0, delete 0, find 0/0 [ 1155.426799] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1155.432825] Free swap = 0kB [ 1155.438415] Total swap = 0kB [ 1155.441428] 2097051 pages RAM [ 1155.442787] 49970 total pagecache pages [ 1155.448514] 0 pages in swap cache [ 1155.452023] Swap cache stats: add 0, delete 0, find 0/0 [ 1155.452810] 0 pages HighMem/MovableOnly [ 1155.461353] 363848 pages reserved [ 1155.472797] 0 pages cma reserved [ 1155.497300] Free swap = 0kB [ 1155.500434] Total swap = 0kB [ 1155.504168] 2097051 pages RAM [ 1155.507276] 0 pages HighMem/MovableOnly [ 1155.511249] 363848 pages reserved [ 1155.537595] 0 pages cma reserved [ 1155.541059] Out of memory (oom_kill_allocating_task): Kill process 25784 (systemd-journal) score 0 or sacrifice child [ 1155.564576] Killed process 25784 (systemd-journal) total-vm:46096kB, anon-rss:472kB, file-rss:4kB, shmem-rss:1632kB [ 1155.600188] oom_reaper: reaped process 25784 (systemd-journal), now anon-rss:0kB, file-rss:0kB, shmem-rss:1632kB [ 1155.761045] systemd[1]: systemd-journald.service: Failed with result 'signal'. [ 1155.771308] systemd[1]: systemd-journald.service: Service has no hold-off time, scheduling restart. [ 1155.795977] systemd[1]: Stopped Journal Service. [ 1155.848579] systemd[1]: Starting Journal Service... [ 1156.049675] systemd-journald[26287]: File /run/log/journal/04d8c135ee6b410280ba31a58c89679d/system.journal corrupted or uncleanly shut down, renaming and replacing. [ 1156.615351] systemd[1]: Started Journal Service. 13:36:53 executing program 0: semctl$SETVAL(0x0, 0x0, 0x10, 0x0) semctl$SEM_INFO(0xffffffffffffffff, 0x1, 0x13, &(0x7f0000000240)=""/41) getitimer(0x2, &(0x7f0000000540)) semctl$SEM_STAT(0x0, 0x3, 0x12, &(0x7f0000000280)=""/230) semctl$GETNCNT(0x0, 0x4, 0xe, &(0x7f0000000400)=""/226) r0 = semget$private(0x0, 0x1, 0x10c) semctl$GETNCNT(r0, 0x2, 0xe, &(0x7f0000000500)=""/25) semctl$SETVAL(0x0, 0x2, 0x10, &(0x7f0000000180)=0xebfe) add_key$user(&(0x7f0000000080)='user\x00', &(0x7f00000000c0)={'syz', 0x3}, &(0x7f0000000100)="fc2edf2fc5a4a8243b61253cdcdd11d17affe577e3b5f9761971adf1e905d389a24ecb495161f7f9c3f371da22d7279bafcd95e23176dbaadf5577225b0f835c97ef76f369891989d6a6a80e905fb58a280a3cacbfbf2abfdc2810111f2b8cce652a89f47930d1209ce1", 0x6a, 0xffffffffffffffff) semctl$GETNCNT(0xffffffffffffffff, 0x4, 0xe, &(0x7f0000000380)=""/88) 13:36:53 executing program 3: ioctl$SIOCPNDELRESOURCE(0xffffffffffffffff, 0x89ef, &(0x7f0000000040)=0xffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f00000012c0)={0x0, @nl=@unspec, @tipc=@id={0x1e, 0x3, 0x2, {0x4e21, 0x4}}, @ethernet={0x307, @random="68d88c73bc2f"}, 0x0, 0x0, 0x0, 0x0, 0x20, &(0x7f0000001280)='bridge_slave_0\x00', 0x401, 0x0, 0xfd51}) semctl$SETVAL(0x0, 0x0, 0x10, 0x0) semctl$GETVAL(0x0, 0x0, 0xc, &(0x7f0000000180)=""/194) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$x25(0x9, 0x5, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x500, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x80000000, 0xa, 0x1}) 13:36:53 executing program 4: semctl$SETVAL(0x0, 0x0, 0x10, 0x0) semctl$SEM_INFO(0xffffffffffffffff, 0x1, 0x13, &(0x7f0000000240)=""/41) getitimer(0x2, &(0x7f0000000540)) semctl$SEM_STAT(0x0, 0x3, 0x12, &(0x7f0000000280)=""/230) semctl$GETNCNT(0x0, 0x4, 0xe, &(0x7f0000000400)=""/226) r0 = semget$private(0x0, 0x1, 0x10c) semctl$GETNCNT(r0, 0x2, 0xe, &(0x7f0000000500)=""/25) semctl$SETVAL(0x0, 0x2, 0x10, &(0x7f0000000180)=0xebfe) add_key$user(&(0x7f0000000080)='user\x00', &(0x7f00000000c0)={'syz', 0x3}, &(0x7f0000000100)="fc2edf2fc5a4a8243b61253cdcdd11d17affe577e3b5f9761971adf1e905d389a24ecb495161f7f9c3f371da22d7279bafcd95e23176dbaadf5577225b0f835c97ef76f369891989d6a6a80e905fb58a280a3cacbfbf2abfdc2810111f2b8cce652a89f47930d1209ce1", 0x6a, 0xffffffffffffffff) 13:36:53 executing program 1: ioctl$SIOCPNDELRESOURCE(0xffffffffffffffff, 0x89ef, &(0x7f0000000040)=0xffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f00000012c0)={0x0, @nl=@unspec, @tipc=@id={0x1e, 0x3, 0x2, {0x4e21, 0x4}}, @ethernet={0x307, @random="68d88c73bc2f"}, 0x0, 0x0, 0x0, 0x0, 0x20, &(0x7f0000001280)='bridge_slave_0\x00', 0x401, 0x0, 0xfd51}) semctl$SETVAL(0x0, 0x0, 0x10, 0x0) semctl$GETVAL(0x0, 0x0, 0xc, &(0x7f0000000180)=""/194) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SCAUSEDIAG(r1, 0x89ec, &(0x7f0000000600)) bind$x25(r1, &(0x7f0000001480)={0x9, @remote={[], 0x3}}, 0x12) syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, &(0x7f00000014c0)) r2 = semget$private(0x0, 0x1, 0x484) semctl$IPC_STAT(r2, 0x0, 0x2, &(0x7f00000000c0)=""/89) semctl$SEM_INFO(r2, 0x4, 0x13, &(0x7f0000000280)=""/4096) sendmsg$RDMA_NLDEV_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000001440)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001400)={&(0x7f0000001500)=ANY=[@ANYBLOB="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"/270], 0x60}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) 13:36:53 executing program 5: r0 = semget$private(0x0, 0x0, 0xb0) semctl$IPC_RMID(r0, 0x0, 0x0) semctl$IPC_STAT(r0, 0x0, 0x2, &(0x7f0000000080)=""/104) semctl$IPC_STAT(r0, 0x0, 0x2, &(0x7f0000000540)=""/206) r1 = semget$private(0x0, 0x3, 0x42) semctl$SETVAL(r1, 0x2, 0x10, 0x0) 13:36:53 executing program 2: timer_create(0x7, &(0x7f0000000080)={0x0, 0x2a, 0x1, @thr={&(0x7f0000000000)="cedfad775dd967d003dbe52d40534e44b24e419a438ccb478ff3986437dfb2fca4ea25e257ce70593b4b4f61cdbbf5a2983c0c90c1e3d51f07a4095f", &(0x7f0000000040)="8bd19b303ba21500f7c2d3f7cc2fd29ae3c6db45e63c59054646e1b44d3003f74d33b6c48e8208376d6b0111434cdac6450a"}}, &(0x7f00000000c0)=0x0) timer_gettime(r0, &(0x7f0000000100)) 13:36:53 executing program 5: r0 = semget$private(0x0, 0x0, 0xb0) semctl$IPC_RMID(r0, 0x0, 0x0) semctl$IPC_STAT(r0, 0x0, 0x2, &(0x7f0000000080)=""/104) r1 = semget$private(0x0, 0x3, 0x42) semctl$SETVAL(r1, 0x2, 0x10, 0x0) 13:36:53 executing program 0: ioctl$SIOCPNDELRESOURCE(0xffffffffffffffff, 0x89ef, &(0x7f0000000040)) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f00000012c0)={0x0, @nl=@unspec, @tipc=@id={0x1e, 0x3, 0x2, {0x4e21, 0x4}}, @ethernet={0x307, @random="68d88c73bc2f"}, 0x0, 0x0, 0x0, 0x0, 0x20, &(0x7f0000001280)='bridge_slave_0\x00', 0x401, 0x0, 0xfd51}) semctl$SETVAL(0x0, 0x0, 0x10, 0x0) semctl$GETVAL(0x0, 0x0, 0xc, &(0x7f0000000180)=""/194) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$x25(0x9, 0x5, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x500, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x80000000, 0xa, 0x1}) 13:36:53 executing program 1: ioctl$SIOCPNDELRESOURCE(0xffffffffffffffff, 0x89ef, &(0x7f0000000040)=0xffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f00000012c0)={0x0, @nl=@unspec, @tipc=@id={0x1e, 0x3, 0x2, {0x4e21, 0x4}}, @ethernet={0x307, @random="68d88c73bc2f"}, 0x0, 0x0, 0x0, 0x0, 0x20, &(0x7f0000001280)='bridge_slave_0\x00', 0x401, 0x0, 0xfd51}) semctl$SETVAL(0x0, 0x0, 0x10, 0x0) semctl$GETVAL(0x0, 0x0, 0xc, &(0x7f0000000180)=""/194) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SCAUSEDIAG(r1, 0x89ec, &(0x7f0000000600)) bind$x25(r1, &(0x7f0000001480)={0x9, @remote={[], 0x3}}, 0x12) syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, &(0x7f00000014c0)) r2 = semget$private(0x0, 0x1, 0x484) semctl$IPC_STAT(r2, 0x0, 0x2, &(0x7f00000000c0)=""/89) semctl$SEM_INFO(r2, 0x4, 0x13, &(0x7f0000000280)=""/4096) 13:36:53 executing program 4: semctl$SETVAL(0x0, 0x0, 0x10, 0x0) semctl$SEM_INFO(0xffffffffffffffff, 0x1, 0x13, &(0x7f0000000240)=""/41) getitimer(0x2, &(0x7f0000000540)) semctl$SEM_STAT(0x0, 0x3, 0x12, &(0x7f0000000280)=""/230) semctl$GETNCNT(0x0, 0x4, 0xe, &(0x7f0000000400)=""/226) r0 = semget$private(0x0, 0x1, 0x10c) semctl$GETNCNT(r0, 0x2, 0xe, &(0x7f0000000500)=""/25) semctl$SETVAL(0x0, 0x2, 0x10, &(0x7f0000000180)=0xebfe) 13:36:53 executing program 2: timer_create(0x7, &(0x7f0000000080)={0x0, 0x2a, 0x1, @thr={&(0x7f0000000000)="cedfad775dd967d003dbe52d40534e44b24e419a438ccb478ff3986437dfb2fca4ea25e257ce70593b4b4f61cdbbf5a2983c0c90c1e3d51f07a4095f", &(0x7f0000000040)="8bd19b303ba21500f7c2d3f7cc2fd29ae3c6db45e63c59054646e1b44d3003f74d33b6c48e8208376d6b0111434cdac6450a"}}, &(0x7f00000000c0)) 13:36:53 executing program 5: r0 = semget$private(0x0, 0x0, 0xb0) semctl$IPC_RMID(r0, 0x0, 0x0) r1 = semget$private(0x0, 0x3, 0x42) semctl$SETVAL(r1, 0x2, 0x10, 0x0) 13:36:53 executing program 4: semctl$SETVAL(0x0, 0x0, 0x10, 0x0) semctl$SEM_INFO(0xffffffffffffffff, 0x1, 0x13, &(0x7f0000000240)=""/41) getitimer(0x2, &(0x7f0000000540)) semctl$SEM_STAT(0x0, 0x3, 0x12, &(0x7f0000000280)=""/230) semctl$GETNCNT(0x0, 0x4, 0xe, &(0x7f0000000400)=""/226) r0 = semget$private(0x0, 0x1, 0x10c) semctl$GETNCNT(r0, 0x2, 0xe, &(0x7f0000000500)=""/25) [ 1157.531978] syz-executor.3: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1157.548377] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 1157.553736] CPU: 1 PID: 26290 Comm: syz-executor.3 Not tainted 4.14.230-syzkaller #0 [ 1157.558082] syz-executor.0: [ 1157.561646] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1157.561651] Call Trace: [ 1157.561670] dump_stack+0x1b2/0x281 [ 1157.561684] warn_alloc.cold+0x96/0x1cc [ 1157.564775] page allocation failure: order:4 [ 1157.574039] ? zone_watermark_ok_safe+0x220/0x220 [ 1157.574064] __alloc_pages_nodemask+0x2127/0x2720 [ 1157.574081] ? lock_acquire+0x170/0x3f0 [ 1157.574096] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1157.581484] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1157.584246] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1157.584260] ? __mutex_unlock_slowpath+0x75/0x770 [ 1157.584275] alloc_pages_current+0x155/0x260 [ 1157.584295] ion_page_pool_alloc+0x118/0x1b0 [ 1157.602819] (null) [ 1157.607131] ion_system_heap_allocate+0x133/0x8c0 [ 1157.607145] ? ion_alloc+0x187/0x810 [ 1157.614846] syz-executor.0 cpuset= [ 1157.619689] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1157.619700] ? ion_system_contig_heap_create+0x130/0x130 [ 1157.619712] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1157.627266] / [ 1157.628935] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1157.634139] mems_allowed=0-1 [ 1157.635457] ion_alloc+0x204/0x810 [ 1157.635476] ? ion_dma_buf_release+0x40/0x40 [ 1157.680960] ? __might_fault+0x177/0x1b0 [ 1157.685018] ion_ioctl+0xea/0x1f0 [ 1157.688463] ? ion_query_heaps+0x360/0x360 [ 1157.692696] ? ion_query_heaps+0x360/0x360 [ 1157.696940] do_vfs_ioctl+0x75a/0xff0 [ 1157.700735] ? ioctl_preallocate+0x1a0/0x1a0 [ 1157.705136] ? lock_downgrade+0x740/0x740 [ 1157.709277] ? __fget+0x225/0x360 [ 1157.712719] ? do_vfs_ioctl+0xff0/0xff0 [ 1157.716687] ? security_file_ioctl+0x83/0xb0 [ 1157.721173] SyS_ioctl+0x7f/0xb0 [ 1157.724528] ? do_vfs_ioctl+0xff0/0xff0 [ 1157.728507] do_syscall_64+0x1d5/0x640 [ 1157.732390] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1157.737568] RIP: 0033:0x466459 [ 1157.740746] RSP: 002b:00007f8a667e8188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1157.748446] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1157.755702] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000005 [ 1157.763132] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1157.770389] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1157.777648] R13: 00007ffd25ba1ddf R14: 00007f8a667e8300 R15: 0000000000022000 [ 1157.784924] CPU: 0 PID: 26303 Comm: syz-executor.0 Not tainted 4.14.230-syzkaller #0 [ 1157.790278] warn_alloc_show_mem: 1 callbacks suppressed [ 1157.790281] Mem-Info: [ 1157.792808] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1157.792812] Call Trace: [ 1157.792831] dump_stack+0x1b2/0x281 [ 1157.792846] warn_alloc.cold+0x96/0x1cc [ 1157.792858] ? zone_watermark_ok_safe+0x220/0x220 [ 1157.792882] __alloc_pages_nodemask+0x2127/0x2720 [ 1157.792899] ? lock_acquire+0x170/0x3f0 [ 1157.792914] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1157.798583] active_anon:13392 inactive_anon:51430 isolated_anon:24 [ 1157.798583] active_file:1795 inactive_file:2375 isolated_file:0 [ 1157.798583] unevictable:0 dirty:57 writeback:0 unstable:0 [ 1157.798583] slab_reclaimable:12319 slab_unreclaimable:115449 [ 1157.798583] mapped:55344 shmem:51987 pagetables:714 bounce:0 [ 1157.798583] free:212572 free_pcp:0 free_cma:0 [ 1157.800667] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1157.800681] ? __mutex_unlock_slowpath+0x75/0x770 [ 1157.813980] Node 0 active_anon:52816kB inactive_anon:148968kB active_file:7164kB inactive_file:9500kB unevictable:0kB isolated(anon):96kB isolated(file):0kB mapped:221376kB dirty:212kB writeback:0kB shmem:150796kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1157.816218] ? __alloc_pages_nodemask+0x277/0x2720 [ 1157.816235] alloc_pages_current+0x155/0x260 [ 1157.820251] Node 1 active_anon:752kB inactive_anon:56752kB active_file:16kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:16kB writeback:0kB shmem:57152kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1157.825148] ion_page_pool_alloc+0x118/0x1b0 [ 1157.825159] ion_system_heap_allocate+0x133/0x8c0 [ 1157.825169] ? ion_alloc+0x187/0x810 [ 1157.825179] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1157.825188] ? ion_system_contig_heap_create+0x130/0x130 [ 1157.825199] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1157.825210] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1157.825223] ion_alloc+0x204/0x810 [ 1157.832692] Node 0 [ 1157.834126] ? ion_dma_buf_release+0x40/0x40 [ 1157.834140] ? __might_fault+0x177/0x1b0 [ 1157.834152] ion_ioctl+0xea/0x1f0 [ 1157.834160] ? ion_query_heaps+0x360/0x360 [ 1157.834172] ? ion_query_heaps+0x360/0x360 [ 1157.834182] do_vfs_ioctl+0x75a/0xff0 [ 1157.834195] ? ioctl_preallocate+0x1a0/0x1a0 [ 1157.834205] ? lock_downgrade+0x740/0x740 [ 1157.834217] ? __fget+0x225/0x360 [ 1157.840381] DMA free:11124kB min:204kB low:252kB high:300kB active_anon:2048kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1157.872747] ? do_vfs_ioctl+0xff0/0xff0 [ 1157.872760] ? security_file_ioctl+0x83/0xb0 [ 1157.872769] SyS_ioctl+0x7f/0xb0 [ 1157.872777] ? do_vfs_ioctl+0xff0/0xff0 [ 1157.872788] do_syscall_64+0x1d5/0x640 [ 1157.872803] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1157.872811] RIP: 0033:0x466459 [ 1157.872815] RSP: 002b:00007efdfe4bc188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1157.872825] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1157.872830] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000005 [ 1157.872835] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1157.872840] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1157.872845] R13: 00007fff2a52985f R14: 00007efdfe4bc300 R15: 0000000000022000 [ 1158.123221] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1158.128331] Node 0 DMA32 free:602204kB min:36200kB low:45248kB high:54296kB active_anon:50768kB inactive_anon:148968kB active_file:7200kB inactive_file:9436kB unevictable:0kB writepending:212kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:7584kB pagetables:2812kB bounce:0kB free_pcp:120kB local_pcp:0kB free_cma:0kB [ 1158.157925] lowmem_reserve[]: 0 0 0 0 0 [ 1158.162006] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1158.187688] lowmem_reserve[]: 0 0 0 0 0 [ 1158.191745] Node 1 Normal free:53704kB min:53696kB low:67120kB high:80544kB active_anon:752kB inactive_anon:56752kB active_file:16kB inactive_file:0kB unevictable:0kB writepending:16kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:128kB pagetables:44kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1158.221368] lowmem_reserve[]: 0 0 0 0 0 [ 1158.225470] Node 0 DMA: 17*4kB (UE) 52*8kB (U) 39*16kB (U) 23*32kB (UE) 13*64kB (UE) 12*128kB (UME) 3*256kB (UME) 2*512kB (ME) 3*1024kB (UME) 1*2048kB (U) 0*4096kB = 11124kB [ 1158.241364] Node 0 DMA32: 344*4kB (UME) 28*8kB (UME) 11651*16kB (UME) 10090*32kB (UME) 13*64kB (U) 1*128kB (U) 8*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 513904kB [ 1158.256910] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1158.267757] Node 1 Normal: 624*4kB (UM) 1093*8kB (UM) 910*16kB (UM) 622*32kB (UM) 11*64kB (M) 5*128kB (M) 2*256kB (UM) 12*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 53704kB [ 1158.283801] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1158.292700] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1158.301421] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1158.310464] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1158.319179] 56150 total pagecache pages [ 1158.323268] 0 pages in swap cache [ 1158.326771] Swap cache stats: add 0, delete 0, find 0/0 [ 1158.332202] Free swap = 0kB [ 1158.335316] Total swap = 0kB [ 1158.338388] 2097051 pages RAM [ 1158.341544] 0 pages HighMem/MovableOnly [ 1158.345616] 363848 pages reserved [ 1158.349121] 0 pages cma reserved [ 1158.853221] oom_reaper: reaped process 26303 (syz-executor.0), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1158.875157] syz-executor.3 invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1158.897880] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 1158.905926] CPU: 1 PID: 24195 Comm: syz-executor.3 Not tainted 4.14.230-syzkaller #0 [ 1158.913818] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1158.923264] Call Trace: [ 1158.925855] dump_stack+0x1b2/0x281 [ 1158.929484] dump_header+0x178/0x82f [ 1158.933200] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1158.938301] ? ___ratelimit+0x2cd/0x530 [ 1158.942288] oom_kill_process.cold+0x10/0xa40 [ 1158.946826] out_of_memory+0xe3e/0x1190 [ 1158.950805] ? oom_killer_disable+0x1c0/0x1c0 [ 1158.955290] ? mutex_trylock+0x152/0x1a0 [ 1158.959351] __alloc_pages_nodemask+0x23e1/0x2720 [ 1158.964193] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1158.969039] alloc_pages_current+0x155/0x260 [ 1158.973453] filemap_fault+0x11a1/0x1ad0 [ 1158.977512] ext4_filemap_fault+0x84/0xb0 [ 1158.981760] __do_fault+0xfa/0x380 [ 1158.985290] __handle_mm_fault+0x2497/0x4620 [ 1158.989689] ? vm_insert_page+0x7c0/0x7c0 [ 1158.993839] ? hrtimer_nanosleep+0x1ff/0x4b0 [ 1158.998234] ? nanosleep_copyout+0x100/0x100 [ 1159.002634] ? mark_held_locks+0xa6/0xf0 [ 1159.006698] handle_mm_fault+0x455/0x9c0 [ 1159.010754] __do_page_fault+0x549/0xad0 [ 1159.014808] ? spurious_fault+0x640/0x640 [ 1159.018945] ? do_page_fault+0x60/0x500 [ 1159.022905] ? page_fault+0x2f/0x50 [ 1159.026524] page_fault+0x45/0x50 [ 1159.029963] RIP: 11a9a7:0xa [ 1159.032901] RSP: 001b:00007ffd25ba209c EFLAGS: 00000032 [ 1159.041553] Mem-Info: [ 1159.045022] syz-executor.0: [ 1159.048371] active_anon:13367 inactive_anon:51430 isolated_anon:0 [ 1159.048371] active_file:20 inactive_file:1 isolated_file:0 [ 1159.048371] unevictable:0 dirty:21 writeback:12 unstable:0 [ 1159.048371] slab_reclaimable:12319 slab_unreclaimable:115433 [ 1159.048371] mapped:52597 shmem:51987 pagetables:714 bounce:0 [ 1159.048371] free:13771 free_pcp:88 free_cma:0 [ 1159.049356] page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1159.052390] Node 0 active_anon:52716kB inactive_anon:148968kB active_file:68kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:210388kB dirty:84kB writeback:36kB shmem:150796kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1159.088992] (null) [ 1159.111999] Node 1 active_anon:752kB inactive_anon:56752kB active_file:8kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:57152kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1159.142799] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 1159.159207] Node 0 DMA free:10940kB min:204kB low:252kB high:300kB active_anon:2048kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1159.159990] CPU: 0 PID: 26303 Comm: syz-executor.0 Not tainted 4.14.230-syzkaller #0 [ 1159.159997] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1159.190872] lowmem_reserve[]: [ 1159.194233] Call Trace: [ 1159.194257] dump_stack+0x1b2/0x281 [ 1159.194271] warn_alloc.cold+0x96/0x1cc [ 1159.194283] ? zone_watermark_ok_safe+0x220/0x220 [ 1159.194293] ? usleep_range+0x130/0x130 [ 1159.194305] ? try_to_free_pages+0x23f/0x6e0 [ 1159.208090] 0 [ 1159.209337] ? _find_next_bit+0xdb/0x100 [ 1159.212999] 2717 [ 1159.216916] ? run_timer_softirq+0x5a0/0x5a0 [ 1159.221729] 2718 [ 1159.225711] __alloc_pages_nodemask+0x2127/0x2720 [ 1159.225731] ? lock_acquire+0x170/0x3f0 [ 1159.225745] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1159.225756] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1159.225773] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1159.225792] alloc_pages_current+0x155/0x260 [ 1159.225803] ion_page_pool_alloc+0x118/0x1b0 [ 1159.234217] 2718 [ 1159.236046] ion_system_heap_allocate+0x133/0x8c0 [ 1159.238089] 2718 [ 1159.242492] ? ion_alloc+0x187/0x810 [ 1159.249361] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1159.255475] Node 0 [ 1159.258141] ? ion_system_contig_heap_create+0x130/0x130 [ 1159.262620] DMA32 free:17312kB min:36200kB low:45248kB high:54296kB active_anon:50668kB inactive_anon:148968kB active_file:40kB inactive_file:40kB unevictable:0kB writepending:0kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:7584kB pagetables:2812kB bounce:0kB free_pcp:232kB local_pcp:112kB free_cma:0kB [ 1159.268043] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1159.268056] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1159.268067] ion_alloc+0x204/0x810 [ 1159.268081] ? ion_dma_buf_release+0x40/0x40 [ 1159.268093] ? __might_fault+0x177/0x1b0 [ 1159.268104] ion_ioctl+0xea/0x1f0 [ 1159.268113] ? ion_query_heaps+0x360/0x360 [ 1159.268125] ? ion_query_heaps+0x360/0x360 [ 1159.276426] lowmem_reserve[]: [ 1159.276913] do_vfs_ioctl+0x75a/0xff0 [ 1159.278952] 0 [ 1159.283781] ? ioctl_preallocate+0x1a0/0x1a0 [ 1159.283791] ? lock_downgrade+0x740/0x740 [ 1159.283805] ? __fget+0x225/0x360 [ 1159.283814] ? do_vfs_ioctl+0xff0/0xff0 [ 1159.283826] ? security_file_ioctl+0x83/0xb0 [ 1159.283836] SyS_ioctl+0x7f/0xb0 [ 1159.286356] 0 [ 1159.289625] ? do_vfs_ioctl+0xff0/0xff0 [ 1159.297874] 0 [ 1159.303279] do_syscall_64+0x1d5/0x640 [ 1159.303296] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1159.303305] RIP: 0033:0x466459 [ 1159.303310] RSP: 002b:00007efdfe4bc188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1159.303320] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1159.303325] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000005 [ 1159.303330] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1159.303335] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1159.303345] R13: 00007fff2a52985f R14: 00007efdfe4bc300 R15: 0000000000022000 [ 1159.336252] 0 [ 1159.345956] warn_alloc_show_mem: 1 callbacks suppressed [ 1159.345959] Mem-Info: [ 1159.349544] 0 [ 1159.359438] active_anon:13367 inactive_anon:51430 isolated_anon:0 [ 1159.359438] active_file:12 inactive_file:12 isolated_file:0 [ 1159.359438] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1159.359438] slab_reclaimable:12319 slab_unreclaimable:115427 [ 1159.359438] mapped:52577 shmem:51987 pagetables:714 bounce:0 [ 1159.359438] free:13771 free_pcp:88 free_cma:0 [ 1159.365567] Node 0 active_anon:52716kB inactive_anon:148968kB active_file:40kB inactive_file:40kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:210308kB dirty:0kB writeback:0kB shmem:150796kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1159.368613] Node 0 [ 1159.372405] Node 1 active_anon:752kB inactive_anon:56752kB active_file:8kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:57152kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1159.375110] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1159.384492] Node 0 [ 1159.388454] lowmem_reserve[]: [ 1159.390314] DMA free:10940kB min:204kB low:252kB high:300kB active_anon:2048kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1159.396848] 0 [ 1159.401833] lowmem_reserve[]: [ 1159.406141] 0 [ 1159.410877] 0 [ 1159.417069] 0 [ 1159.422643] 2717 [ 1159.427876] 0 [ 1159.438919] 2718 [ 1159.441731] 0 [ 1159.447690] 2718 2718 [ 1159.447706] Node 0 [ 1159.464890] DMA32 free:17312kB min:36200kB low:45248kB high:54296kB active_anon:50668kB inactive_anon:148968kB active_file:40kB inactive_file:40kB unevictable:0kB writepending:0kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:7584kB pagetables:2812kB bounce:0kB free_pcp:232kB local_pcp:120kB free_cma:0kB [ 1159.469529] Node 1 [ 1159.471927] lowmem_reserve[]: [ 1159.477964] Normal free:26832kB min:53696kB low:67120kB high:80544kB active_anon:752kB inactive_anon:56752kB active_file:8kB inactive_file:8kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:128kB pagetables:44kB bounce:0kB free_pcp:120kB local_pcp:0kB free_cma:0kB [ 1159.513801] 0 [ 1159.542106] lowmem_reserve[]: [ 1159.572285] 0 [ 1159.595384] 0 [ 1159.602448] 0 [ 1159.624856] 0 [ 1159.635528] 0 [ 1159.636681] 0 [ 1159.638730] 0 [ 1159.640511] 0 [ 1159.675727] 0 [ 1159.683968] Node 0 [ 1159.716550] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1159.719607] Node 0 [ 1159.720743] lowmem_reserve[]: [ 1159.722529] DMA: 1*4kB [ 1159.725015] 0 [ 1159.729142] (E) [ 1159.730182] 0 [ 1159.769769] 37*8kB [ 1159.771086] 0 [ 1159.771579] (U) [ 1159.774511] 0 0 [ 1159.777870] 39*16kB [ 1159.779675] Node 1 [ 1159.779677] (U) 23*32kB [ 1159.782001] Normal free:26832kB min:53696kB low:67120kB high:80544kB active_anon:752kB inactive_anon:56752kB active_file:8kB inactive_file:8kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:128kB pagetables:44kB bounce:0kB free_pcp:120kB local_pcp:120kB free_cma:0kB [ 1159.792366] (UE) [ 1159.819206] lowmem_reserve[]: 0 0 0 0 0 [ 1159.825469] 13*64kB (UE) 12*128kB (UME) 3*256kB (UME) 2*512kB (ME) 3*1024kB (UME) 1*2048kB (U) 0*4096kB = 10940kB [ 1159.825743] Node 0 DMA: 1*4kB (E) 37*8kB (U) 39*16kB (U) 23*32kB (UE) 13*64kB (UE) 12*128kB (UME) 3*256kB (UME) 2*512kB (ME) 3*1024kB (UME) 1*2048kB (U) 0*4096kB = 10940kB [ 1159.842546] Node 0 [ 1159.860497] Node 0 DMA32: 700*4kB (ME) 124*8kB (UME) 183*16kB (UME) 79*32kB (UME) 50*64kB (UM) 6*128kB (UM) 12*256kB (UM) 2*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 17312kB [ 1159.866445] DMA32: [ 1159.882413] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1159.888883] 700*4kB [ 1159.902643] Node 1 Normal: 48*4kB (M) 16*8kB (UM) 11*16kB (UM) 553*32kB (UM) 21*64kB (UM) 5*128kB (M) 2*256kB (UM) 12*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 26832kB [ 1159.908972] (ME) [ 1159.924781] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1159.931034] 124*8kB (UME) 183*16kB (UME) 79*32kB (UME) 50*64kB (UM) 6*128kB (UM) 12*256kB (UM) 2*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 17312kB [ 1159.937589] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1159.959216] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1159.961404] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1159.972020] Node 1 [ 1159.983213] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1159.989284] Normal: 48*4kB (M) 16*8kB (UM) 11*16kB (UM) 553*32kB (UM) 21*64kB (UM) 5*128kB (M) 2*256kB (UM) 12*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 26832kB [ 1159.997443] 52011 total pagecache pages [ 1160.018750] 0 pages in swap cache [ 1160.021137] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1160.022206] Swap cache stats: add 0, delete 0, find 0/0 [ 1160.037430] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1160.045304] Free swap = 0kB [ 1160.046697] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1160.049029] Total swap = 0kB [ 1160.064371] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1160.069857] 2097051 pages RAM [ 1160.076077] 0 pages HighMem/MovableOnly [ 1160.077051] 52011 total pagecache pages [ 1160.080042] 363848 pages reserved [ 1160.086113] 0 pages in swap cache [ 1160.090978] Swap cache stats: add 0, delete 0, find 0/0 [ 1160.095592] 0 pages cma reserved [ 1160.105539] Free swap = 0kB [ 1160.108572] Total swap = 0kB [ 1160.132588] 2097051 pages RAM [ 1160.153226] 0 pages HighMem/MovableOnly [ 1160.157826] 363848 pages reserved [ 1160.161384] 0 pages cma reserved [ 1160.182812] Out of memory (oom_kill_allocating_task): Kill process 24195 (syz-executor.3) score 0 or sacrifice child [ 1160.212852] Killed process 26290 (syz-executor.3) total-vm:93252kB, anon-rss:2192kB, file-rss:34816kB, shmem-rss:0kB [ 1160.265304] oom_reaper: reaped process 26290 (syz-executor.3), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1161.237272] syz-executor.0: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1161.262811] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 1161.268101] CPU: 1 PID: 26303 Comm: syz-executor.0 Not tainted 4.14.230-syzkaller #0 [ 1161.276337] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1161.285688] Call Trace: [ 1161.288442] dump_stack+0x1b2/0x281 [ 1161.292073] warn_alloc.cold+0x96/0x1cc [ 1161.296052] ? zone_watermark_ok_safe+0x220/0x220 [ 1161.300925] __alloc_pages_nodemask+0x2127/0x2720 [ 1161.305779] ? lock_acquire+0x170/0x3f0 [ 1161.309753] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1161.314603] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1161.320059] ? __mutex_unlock_slowpath+0x75/0x770 [ 1161.324898] ? retint_kernel+0x2d/0x2d [ 1161.328790] alloc_pages_current+0x155/0x260 [ 1161.333203] ion_page_pool_alloc+0x118/0x1b0 [ 1161.337609] ion_system_heap_allocate+0x133/0x8c0 [ 1161.342456] ? _raw_spin_unlock+0x29/0x40 [ 1161.346687] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1161.351613] ? ion_system_contig_heap_create+0x130/0x130 [ 1161.357064] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1161.362089] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1161.366932] ion_alloc+0x27a/0x810 [ 1161.370476] ? ion_dma_buf_release+0x40/0x40 [ 1161.374979] ? __might_fault+0x177/0x1b0 [ 1161.379039] ion_ioctl+0xea/0x1f0 [ 1161.382493] ? ion_query_heaps+0x360/0x360 [ 1161.386726] ? ion_query_heaps+0x360/0x360 [ 1161.390981] do_vfs_ioctl+0x75a/0xff0 [ 1161.394781] ? ioctl_preallocate+0x1a0/0x1a0 [ 1161.399207] ? lock_downgrade+0x740/0x740 [ 1161.403365] ? __fget+0x225/0x360 [ 1161.406814] ? do_vfs_ioctl+0xff0/0xff0 [ 1161.410912] ? security_file_ioctl+0x83/0xb0 [ 1161.415325] SyS_ioctl+0x7f/0xb0 [ 1161.418702] ? do_vfs_ioctl+0xff0/0xff0 [ 1161.422715] do_syscall_64+0x1d5/0x640 [ 1161.426627] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1161.431877] RIP: 0033:0x466459 [ 1161.435150] RSP: 002b:00007efdfe4bc188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1161.442853] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1161.450120] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000005 [ 1161.457384] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1161.465692] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1161.472962] R13: 00007fff2a52985f R14: 00007efdfe4bc300 R15: 0000000000022000 [ 1161.481944] Mem-Info: [ 1161.484578] active_anon:12833 inactive_anon:51430 isolated_anon:24 [ 1161.484578] active_file:378 inactive_file:519 isolated_file:0 [ 1161.484578] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1161.484578] slab_reclaimable:12319 slab_unreclaimable:116073 [ 1161.484578] mapped:53351 shmem:51987 pagetables:713 bounce:0 [ 1161.484578] free:35302 free_pcp:31 free_cma:0 [ 1161.518100] Node 0 active_anon:50580kB inactive_anon:148968kB active_file:1448kB inactive_file:1988kB unevictable:0kB isolated(anon):96kB isolated(file):0kB mapped:213392kB dirty:0kB writeback:0kB shmem:150796kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1161.546445] Node 1 active_anon:752kB inactive_anon:56752kB active_file:64kB inactive_file:88kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:12kB dirty:0kB writeback:0kB shmem:57152kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1161.587144] systemd-journal invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=0 [ 1161.602826] Node 0 DMA free:11016kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1161.612829] systemd-journal cpuset=/ mems_allowed=0-1 [ 1161.661692] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1161.666172] CPU: 0 PID: 26287 Comm: systemd-journal Not tainted 4.14.230-syzkaller #0 [ 1161.668043] Node 0 [ 1161.676015] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1161.676019] Call Trace: [ 1161.676038] dump_stack+0x1b2/0x281 [ 1161.676050] dump_header+0x178/0x82f [ 1161.676061] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1161.676070] ? ___ratelimit+0x2cd/0x530 [ 1161.676079] oom_kill_process.cold+0x10/0xa40 [ 1161.676097] out_of_memory+0xe3e/0x1190 [ 1161.676110] ? oom_killer_disable+0x1c0/0x1c0 [ 1161.678352] DMA32 free:28796kB min:36200kB low:45248kB high:54296kB active_anon:50580kB inactive_anon:148968kB active_file:520kB inactive_file:104kB unevictable:0kB writepending:0kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:7584kB pagetables:2808kB bounce:0kB free_pcp:928kB local_pcp:728kB free_cma:0kB [ 1161.687690] ? mutex_trylock+0x152/0x1a0 [ 1161.687702] __alloc_pages_nodemask+0x23e1/0x2720 [ 1161.687722] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1161.687743] ? cache_grow_begin+0x3f/0x700 [ 1161.687753] cache_grow_begin+0x91/0x700 [ 1161.687765] fallback_alloc+0x207/0x2c0 [ 1161.690330] lowmem_reserve[]: [ 1161.693941] kmem_cache_alloc+0x1e5/0x3c0 [ 1161.693953] getname_flags+0xc8/0x550 [ 1161.693965] do_sys_open+0x1ce/0x410 [ 1161.693974] ? filp_open+0x60/0x60 [ 1161.697668] 0 [ 1161.702775] ? do_syscall_64+0x4c/0x640 [ 1161.702783] ? do_sys_open+0x410/0x410 [ 1161.702791] do_syscall_64+0x1d5/0x640 [ 1161.702803] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1161.702812] RIP: 0033:0x7fdc88143840 [ 1161.702819] RSP: 002b:00007ffe1c471ad8 EFLAGS: 00000246 [ 1161.706796] 0 [ 1161.711264] ORIG_RAX: 0000000000000002 [ 1161.711271] RAX: ffffffffffffffda RBX: 00007ffe1c471de0 RCX: 00007fdc88143840 [ 1161.715286] 0 [ 1161.719816] RDX: 00000000000001a0 RSI: 0000000000080042 RDI: 000056117f0fed70 [ 1161.719825] RBP: 000000000000000d R08: 000000000000c0c1 R09: 00000000ffffffff [ 1161.753100] 0 [ 1161.757334] R10: 0000000000000069 R11: 0000000000000246 R12: 00000000ffffffff [ 1161.762155] 0 [ 1161.766368] R13: 000056117f0fa040 R14: 00007ffe1c471da0 R15: 000056117f0fead0 [ 1161.775579] Mem-Info: [ 1161.781927] active_anon:12833 inactive_anon:51430 isolated_anon:24 [ 1161.781927] active_file:46 inactive_file:24 isolated_file:0 [ 1161.781927] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1161.781927] slab_reclaimable:12319 slab_unreclaimable:116151 [ 1161.781927] mapped:52626 shmem:51987 pagetables:713 bounce:0 [ 1161.781927] free:21112 free_pcp:232 free_cma:0 [ 1161.785719] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1161.785741] lowmem_reserve[]: 0 0 0 0 0 [ 1161.785760] Node 1 Normal free:44636kB min:53696kB low:67120kB high:80544kB active_anon:752kB inactive_anon:56752kB active_file:12kB inactive_file:4kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:128kB pagetables:44kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1161.785784] lowmem_reserve[]: [ 1161.794838] Node 0 active_anon:50580kB inactive_anon:148968kB active_file:120kB inactive_file:8kB unevictable:0kB isolated(anon):96kB isolated(file):0kB mapped:210492kB dirty:0kB writeback:0kB shmem:150796kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1161.797129] 0 [ 1161.798866] Node 1 active_anon:752kB inactive_anon:56752kB active_file:64kB inactive_file:88kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:12kB dirty:0kB writeback:0kB shmem:57152kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1161.802724] 0 [ 1161.811669] Node 0 [ 1161.811834] 0 [ 1161.817757] DMA free:11016kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1161.822304] 0 [ 1161.822728] lowmem_reserve[]: [ 1161.826734] 0 [ 1161.826741] Node 0 DMA: 8*4kB (UE) 51*8kB (U) 39*16kB (U) 23*32kB (UE) 12*64kB (UE) 12*128kB (UME) 3*256kB [ 1161.840223] 0 [ 1161.844312] (UME) [ 1161.850690] 2717 [ 1161.852476] 2*512kB [ 1161.865792] 2718 [ 1161.871037] (ME) [ 1161.871266] 2718 [ 1161.907252] 3*1024kB [ 1161.937014] 2718 [ 1161.965056] (UME) [ 1161.996208] 1*2048kB [ 1162.029513] Node 0 [ 1162.060432] (M) [ 1162.063159] DMA32 free:29108kB min:36200kB low:45248kB high:54296kB active_anon:50580kB inactive_anon:148968kB active_file:60kB inactive_file:60kB unevictable:0kB writepending:0kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:7584kB pagetables:2812kB bounce:0kB free_pcp:928kB local_pcp:200kB free_cma:0kB [ 1162.071144] 0*4096kB [ 1162.076966] lowmem_reserve[]: [ 1162.081314] = 11016kB [ 1162.081460] 0 [ 1162.083544] Node 0 [ 1162.085588] 0 [ 1162.087976] DMA32: [ 1162.090019] 0 [ 1162.092170] 593*4kB [ 1162.098421] 0 [ 1162.101375] (UME) [ 1162.131108] 0 [ 1162.137355] 86*8kB [ 1162.141629] (UME) [ 1162.147733] Node 0 [ 1162.148035] 145*16kB [ 1162.149831] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1162.151967] (UME) [ 1162.153792] lowmem_reserve[]: 0 0 0 0 0 [ 1162.153815] Node 1 [ 1162.160560] 738*32kB [ 1162.166683] Normal free:45220kB min:53696kB low:67120kB high:80544kB active_anon:752kB inactive_anon:56752kB active_file:8kB inactive_file:8kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:128kB pagetables:44kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1162.190162] (UME) [ 1162.200134] lowmem_reserve[]: [ 1162.228519] 0*64kB 1*128kB (M) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 29124kB [ 1162.228551] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1162.228601] Node 1 Normal: 579*4kB (UM) 1087*8kB (UM) [ 1162.242277] 0 [ 1162.252517] 904*16kB (UM) 616*32kB (UM) 1*64kB (U) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 45252kB [ 1162.259901] 0 0 0 0 [ 1162.272421] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1162.272481] Node 0 [ 1162.286032] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1162.289828] DMA: [ 1162.296894] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1162.296902] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1162.296910] 52021 total pagecache pages [ 1162.299608] 8*4kB [ 1162.312273] 0 pages in swap cache [ 1162.320257] (UE) [ 1162.320463] Swap cache stats: add 0, delete 0, find 0/0 [ 1162.322624] 51*8kB [ 1162.330431] Free swap = 0kB [ 1162.337332] (U) [ 1162.338769] Total swap = 0kB [ 1162.338777] 39*16kB [ 1162.340735] 2097051 pages RAM [ 1162.343778] (U) 23*32kB (UE) 12*64kB (UE) 12*128kB (UME) 3*256kB (UME) 2*512kB (ME) 3*1024kB (UME) 1*2048kB (M) 0*4096kB = 11016kB [ 1162.350577] 0 pages HighMem/MovableOnly [ 1162.365633] Node 0 DMA32: 593*4kB (UME) 86*8kB (UME) 145*16kB (UME) 738*32kB (UME) 0*64kB 1*128kB (M) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 29124kB [ 1162.369530] 363848 pages reserved [ 1162.383591] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1162.387531] 0 pages cma reserved [ 1162.397537] Node 1 Normal: 579*4kB (UM) 1087*8kB (UM) 904*16kB (UM) 616*32kB (UM) 1*64kB (U) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 45252kB [ 1162.412375] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1162.425538] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1162.434979] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1162.447280] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1162.456675] 52021 total pagecache pages [ 1162.460673] 0 pages in swap cache [ 1162.467855] Swap cache stats: add 0, delete 0, find 0/0 [ 1162.473962] Free swap = 0kB [ 1162.476976] Total swap = 0kB [ 1162.479986] 2097051 pages RAM [ 1162.486494] 0 pages HighMem/MovableOnly [ 1162.490468] 363848 pages reserved [ 1162.495232] 0 pages cma reserved [ 1162.498616] Out of memory (oom_kill_allocating_task): Kill process 26287 (systemd-journal) score 0 or sacrifice child [ 1162.513575] Killed process 26287 (systemd-journal) total-vm:46096kB, anon-rss:464kB, file-rss:0kB, shmem-rss:1412kB [ 1162.532564] oom_reaper: reaped process 26287 (systemd-journal), now anon-rss:0kB, file-rss:0kB, shmem-rss:1412kB [ 1162.542854] syz-executor.0: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1162.557058] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 1162.567898] CPU: 1 PID: 26303 Comm: syz-executor.0 Not tainted 4.14.230-syzkaller #0 [ 1162.575790] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1162.585164] Call Trace: [ 1162.587757] dump_stack+0x1b2/0x281 [ 1162.591399] warn_alloc.cold+0x96/0x1cc [ 1162.595389] ? zone_watermark_ok_safe+0x220/0x220 [ 1162.600233] ? usleep_range+0x130/0x130 [ 1162.604212] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1162.609320] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1162.614341] ? run_timer_softirq+0x5a0/0x5a0 [ 1162.618768] __alloc_pages_nodemask+0x2127/0x2720 [ 1162.623659] ? lock_acquire+0x170/0x3f0 [ 1162.627643] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1162.632494] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1162.637002] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1162.642485] ? retint_kernel+0x2d/0x2d [ 1162.646381] alloc_pages_current+0x155/0x260 [ 1162.650797] ion_page_pool_alloc+0x118/0x1b0 [ 1162.655244] ion_system_heap_allocate+0x133/0x8c0 [ 1162.660088] ? _raw_spin_unlock+0x29/0x40 [ 1162.664264] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1162.669330] ? ion_system_contig_heap_create+0x130/0x130 [ 1162.674789] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1162.679814] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1162.684662] ion_alloc+0x27a/0x810 [ 1162.688222] ? ion_dma_buf_release+0x40/0x40 [ 1162.692641] ? __might_fault+0x177/0x1b0 [ 1162.696706] ion_ioctl+0xea/0x1f0 [ 1162.700169] ? ion_query_heaps+0x360/0x360 [ 1162.704406] ? ion_query_heaps+0x360/0x360 [ 1162.708651] do_vfs_ioctl+0x75a/0xff0 [ 1162.712497] ? ioctl_preallocate+0x1a0/0x1a0 [ 1162.716906] ? lock_downgrade+0x740/0x740 [ 1162.721060] ? __fget+0x225/0x360 [ 1162.724524] ? do_vfs_ioctl+0xff0/0xff0 [ 1162.728499] ? security_file_ioctl+0x83/0xb0 [ 1162.732908] SyS_ioctl+0x7f/0xb0 [ 1162.736270] ? do_vfs_ioctl+0xff0/0xff0 [ 1162.740247] do_syscall_64+0x1d5/0x640 [ 1162.744140] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1162.749339] RIP: 0033:0x466459 [ 1162.752536] RSP: 002b:00007efdfe4bc188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1162.760257] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1162.767523] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000005 [ 1162.774797] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1162.782073] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1162.789344] R13: 00007fff2a52985f R14: 00007efdfe4bc300 R15: 0000000000022000 [ 1162.803318] Mem-Info: [ 1162.806291] active_anon:12733 inactive_anon:51430 isolated_anon:0 [ 1162.806291] active_file:42 inactive_file:467 isolated_file:0 [ 1162.806291] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1162.806291] slab_reclaimable:12319 slab_unreclaimable:115339 [ 1162.806291] mapped:52505 shmem:51987 pagetables:677 bounce:0 [ 1162.806291] free:280366 free_pcp:365 free_cma:0 [ 1162.840830] Node 0 active_anon:50180kB inactive_anon:148968kB active_file:60kB inactive_file:1060kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:209320kB dirty:0kB writeback:0kB shmem:150796kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1162.869942] Node 1 active_anon:752kB inactive_anon:56752kB active_file:108kB inactive_file:1108kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:800kB dirty:0kB writeback:0kB shmem:57152kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1162.899178] Node 0 DMA free:10976kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1162.926402] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1162.932386] Node 0 DMA32 free:175216kB min:36200kB low:45248kB high:54296kB active_anon:50180kB inactive_anon:148968kB active_file:60kB inactive_file:1960kB unevictable:0kB writepending:0kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:7520kB pagetables:2664kB bounce:0kB free_pcp:864kB local_pcp:184kB free_cma:0kB [ 1162.964436] lowmem_reserve[]: 0 0 0 0 0 [ 1162.969646] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1162.996015] lowmem_reserve[]: 0 0 0 0 0 [ 1163.000687] Node 1 Normal free:1275308kB min:53696kB low:67120kB high:80544kB active_anon:752kB inactive_anon:56752kB active_file:108kB inactive_file:1108kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:160kB pagetables:44kB bounce:0kB free_pcp:356kB local_pcp:208kB free_cma:0kB [ 1163.030599] lowmem_reserve[]: 0 0 0 0 0 [ 1163.035094] Node 0 DMA: 2*4kB (UE) 49*8kB (U) 39*16kB (U) 23*32kB (UE) 12*64kB (UE) 12*128kB (UME) 3*256kB (UME) 2*512kB (ME) 3*1024kB (UME) 1*2048kB (M) 0*4096kB = 10976kB [ 1163.051865] Node 0 DMA32: 1601*4kB (UE) 1657*8kB (UME) 4367*16kB (UME) 4325*32kB (UME) 1178*64kB (UM) 94*128kB (U) 20*256kB (UM) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 320476kB [ 1163.068380] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1163.079406] systemd[1]: systemd-journald.service: Failed with result 'signal'. [ 1163.079845] Node 1 Normal: 1*4kB (M) 1*8kB (U) 406*16kB (U) 614*32kB (U) 14897*64kB (UM) 563*128kB (UM) 174*256kB (UM) 44*512kB (UM) 149*1024kB (U) 2*2048kB (U) 0*4096kB = 1275372kB [ 1163.104462] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1163.104593] systemd[1]: systemd-journald.service: Service has no hold-off time, scheduling restart. [ 1163.114106] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1163.132165] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1163.132284] systemd[1]: Stopped Journal Service. [ 1163.141066] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1163.141072] 53365 total pagecache pages [ 1163.141081] 0 pages in swap cache [ 1163.141086] Swap cache stats: add 0, delete 0, find 0/0 [ 1163.141090] Free swap = 0kB [ 1163.141093] Total swap = 0kB [ 1163.141100] 2097051 pages RAM [ 1163.141104] 0 pages HighMem/MovableOnly [ 1163.141107] 363848 pages reserved [ 1163.141110] 0 pages cma reserved [ 1163.262732] systemd[1]: Starting Journal Service... [ 1163.374184] systemd-journald[26322]: File /run/log/journal/04d8c135ee6b410280ba31a58c89679d/system.journal corrupted or uncleanly shut down, renaming and replacing. [ 1163.755487] systemd[1]: Started Journal Service. 13:37:00 executing program 2: timer_create(0x0, &(0x7f0000000080)={0x0, 0x2a, 0x1, @thr={&(0x7f0000000000)="cedfad775dd967d003dbe52d40534e44b24e419a438ccb478ff3986437dfb2fca4ea25e257ce70593b4b4f61cdbbf5a2983c0c90c1e3d51f07a4095f", &(0x7f0000000040)="8bd19b303ba21500f7c2d3f7cc2fd29ae3c6db45e63c59054646e1b44d3003f74d33b6c48e8208376d6b0111434cdac6450a"}}, &(0x7f00000000c0)) 13:37:00 executing program 3: ioctl$SIOCPNDELRESOURCE(0xffffffffffffffff, 0x89ef, &(0x7f0000000040)=0xffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f00000012c0)={0x0, @nl=@unspec, @tipc=@id={0x1e, 0x3, 0x2, {0x4e21, 0x4}}, @ethernet={0x307, @random="68d88c73bc2f"}, 0x0, 0x0, 0x0, 0x0, 0x20, &(0x7f0000001280)='bridge_slave_0\x00', 0x401, 0x0, 0xfd51}) semctl$SETVAL(0x0, 0x0, 0x10, 0x0) semctl$GETVAL(0x0, 0x0, 0xc, &(0x7f0000000180)=""/194) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$x25(0x9, 0x5, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x500, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x80000000, 0xa, 0x1}) 13:37:00 executing program 1: ioctl$SIOCPNDELRESOURCE(0xffffffffffffffff, 0x89ef, &(0x7f0000000040)=0xffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f00000012c0)={0x0, @nl=@unspec, @tipc=@id={0x1e, 0x3, 0x2, {0x4e21, 0x4}}, @ethernet={0x307, @random="68d88c73bc2f"}, 0x0, 0x0, 0x0, 0x0, 0x20, &(0x7f0000001280)='bridge_slave_0\x00', 0x401, 0x0, 0xfd51}) semctl$SETVAL(0x0, 0x0, 0x10, 0x0) semctl$GETVAL(0x0, 0x0, 0xc, &(0x7f0000000180)=""/194) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SCAUSEDIAG(r1, 0x89ec, &(0x7f0000000600)) bind$x25(r1, &(0x7f0000001480)={0x9, @remote={[], 0x3}}, 0x12) syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, &(0x7f00000014c0)) r2 = semget$private(0x0, 0x1, 0x484) semctl$IPC_STAT(r2, 0x0, 0x2, &(0x7f00000000c0)=""/89) 13:37:00 executing program 0: timer_create(0x7, &(0x7f0000000080)={0x0, 0x2a, 0x1, @thr={&(0x7f0000000000)="cedfad775dd967d003dbe52d40534e44b24e419a438ccb478ff3986437dfb2fca4ea25e257ce70593b4b4f61cdbbf5a2983c0c90c1e3d51f07a4095f", &(0x7f0000000040)="8bd19b303ba21500f7c2d3f7cc2fd29ae3c6db45e63c59054646e1b44d3003f74d33b6c48e8208376d6b0111434cdac6450a"}}, &(0x7f00000000c0)=0x0) timer_gettime(r0, &(0x7f0000000100)) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100)='/dev/bsg\x00', 0x204402, 0x0) write$eventfd(r1, 0x0, 0x0) 13:37:00 executing program 5: semget$private(0x0, 0x0, 0xb0) r0 = semget$private(0x0, 0x3, 0x42) semctl$SETVAL(r0, 0x2, 0x10, 0x0) 13:37:00 executing program 4: semctl$SETVAL(0x0, 0x0, 0x10, 0x0) semctl$SEM_INFO(0xffffffffffffffff, 0x1, 0x13, &(0x7f0000000240)=""/41) getitimer(0x2, &(0x7f0000000540)) semctl$SEM_STAT(0x0, 0x3, 0x12, &(0x7f0000000280)=""/230) semctl$GETNCNT(0x0, 0x4, 0xe, &(0x7f0000000400)=""/226) semget$private(0x0, 0x1, 0x10c) 13:37:00 executing program 2: timer_create(0x0, 0x0, &(0x7f00000000c0)) 13:37:00 executing program 1: ioctl$SIOCPNDELRESOURCE(0xffffffffffffffff, 0x89ef, &(0x7f0000000040)=0xffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f00000012c0)={0x0, @nl=@unspec, @tipc=@id={0x1e, 0x3, 0x2, {0x4e21, 0x4}}, @ethernet={0x307, @random="68d88c73bc2f"}, 0x0, 0x0, 0x0, 0x0, 0x20, &(0x7f0000001280)='bridge_slave_0\x00', 0x401, 0x0, 0xfd51}) semctl$SETVAL(0x0, 0x0, 0x10, 0x0) semctl$GETVAL(0x0, 0x0, 0xc, &(0x7f0000000180)=""/194) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SCAUSEDIAG(r1, 0x89ec, &(0x7f0000000600)) bind$x25(r1, &(0x7f0000001480)={0x9, @remote={[], 0x3}}, 0x12) syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, &(0x7f00000014c0)) semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f00000000c0)=""/89) 13:37:00 executing program 4: semctl$SETVAL(0x0, 0x0, 0x10, 0x0) semctl$SEM_INFO(0xffffffffffffffff, 0x1, 0x13, &(0x7f0000000240)=""/41) getitimer(0x2, &(0x7f0000000540)) semctl$SEM_STAT(0x0, 0x3, 0x12, &(0x7f0000000280)=""/230) semctl$GETNCNT(0x0, 0x4, 0xe, &(0x7f0000000400)=""/226) 13:37:00 executing program 2: timer_create(0x0, 0x0, &(0x7f00000000c0)) 13:37:00 executing program 0: timer_create(0x7, &(0x7f0000000080)={0x0, 0x2a, 0x1, @thr={&(0x7f0000000000)="cedfad775dd967d003dbe52d40534e44b24e419a438ccb478ff3986437dfb2fca4ea25e257ce70593b4b4f61cdbbf5a2983c0c90c1e3d51f07a4095f", &(0x7f0000000040)="8bd19b303ba21500f7c2d3f7cc2fd29ae3c6db45e63c59054646e1b44d3003f74d33b6c48e8208376d6b0111434cdac6450a"}}, &(0x7f00000000c0)=0x0) timer_gettime(r0, &(0x7f0000000100)) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100)='/dev/bsg\x00', 0x204402, 0x0) write$eventfd(r1, 0x0, 0x0) 13:37:00 executing program 2: timer_create(0x0, 0x0, &(0x7f00000000c0)) 13:37:01 executing program 3: ioctl$SIOCPNDELRESOURCE(0xffffffffffffffff, 0x89ef, &(0x7f0000000040)=0xffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f00000012c0)={0x0, @nl=@unspec, @tipc=@id={0x1e, 0x3, 0x2, {0x4e21, 0x4}}, @ethernet={0x307, @random="68d88c73bc2f"}, 0x0, 0x0, 0x0, 0x0, 0x20, &(0x7f0000001280)='bridge_slave_0\x00', 0x401, 0x0, 0xfd51}) semctl$SETVAL(0x0, 0x0, 0x10, 0x0) semctl$GETVAL(0x0, 0x0, 0xc, &(0x7f0000000180)=""/194) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$x25(0x9, 0x5, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x500, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x80000000, 0xa, 0x1}) 13:37:01 executing program 1: ioctl$SIOCPNDELRESOURCE(0xffffffffffffffff, 0x89ef, &(0x7f0000000040)=0xffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f00000012c0)={0x0, @nl=@unspec, @tipc=@id={0x1e, 0x3, 0x2, {0x4e21, 0x4}}, @ethernet={0x307, @random="68d88c73bc2f"}, 0x0, 0x0, 0x0, 0x0, 0x20, &(0x7f0000001280)='bridge_slave_0\x00', 0x401, 0x0, 0xfd51}) semctl$SETVAL(0x0, 0x0, 0x10, 0x0) semctl$GETVAL(0x0, 0x0, 0xc, &(0x7f0000000180)=""/194) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SCAUSEDIAG(r1, 0x89ec, &(0x7f0000000600)) bind$x25(r1, &(0x7f0000001480)={0x9, @remote={[], 0x3}}, 0x12) syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, &(0x7f00000014c0)) semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f00000000c0)=""/89) 13:37:01 executing program 0: timer_create(0x7, &(0x7f0000000080)={0x0, 0x2a, 0x1, @thr={&(0x7f0000000000)="cedfad775dd967d003dbe52d40534e44b24e419a438ccb478ff3986437dfb2fca4ea25e257ce70593b4b4f61cdbbf5a2983c0c90c1e3d51f07a4095f", &(0x7f0000000040)="8bd19b303ba21500f7c2d3f7cc2fd29ae3c6db45e63c59054646e1b44d3003f74d33b6c48e8208376d6b0111434cdac6450a"}}, &(0x7f00000000c0)=0x0) timer_gettime(r0, &(0x7f0000000100)) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100)='/dev/bsg\x00', 0x204402, 0x0) write$eventfd(r1, 0x0, 0x0) 13:37:01 executing program 5: r0 = semget$private(0x0, 0x3, 0x42) semctl$SETVAL(r0, 0x2, 0x10, 0x0) 13:37:01 executing program 4: semctl$SETVAL(0x0, 0x0, 0x10, 0x0) semctl$SEM_INFO(0xffffffffffffffff, 0x1, 0x13, &(0x7f0000000240)=""/41) getitimer(0x2, &(0x7f0000000540)) semctl$SEM_STAT(0x0, 0x3, 0x12, &(0x7f0000000280)=""/230) 13:37:01 executing program 2: timer_create(0x0, &(0x7f0000000080)={0x0, 0x0, 0x1, @thr={&(0x7f0000000000)="cedfad775dd967d003dbe52d40534e44b24e419a438ccb478ff3986437dfb2fca4ea25e257ce70593b4b4f61cdbbf5a2983c0c90c1e3d51f07a4095f", &(0x7f0000000040)="8bd19b303ba21500f7c2d3f7cc2fd29ae3c6db45e63c59054646e1b44d3003f74d33b6c48e8208376d6b0111434cdac6450a"}}, &(0x7f00000000c0)) 13:37:01 executing program 4: semctl$SETVAL(0x0, 0x0, 0x10, 0x0) semctl$SEM_INFO(0xffffffffffffffff, 0x1, 0x13, &(0x7f0000000240)=""/41) getitimer(0x2, &(0x7f0000000540)) 13:37:01 executing program 0: timer_create(0x7, &(0x7f0000000080)={0x0, 0x2a, 0x1, @thr={&(0x7f0000000000)="cedfad775dd967d003dbe52d40534e44b24e419a438ccb478ff3986437dfb2fca4ea25e257ce70593b4b4f61cdbbf5a2983c0c90c1e3d51f07a4095f", &(0x7f0000000040)="8bd19b303ba21500f7c2d3f7cc2fd29ae3c6db45e63c59054646e1b44d3003f74d33b6c48e8208376d6b0111434cdac6450a"}}, &(0x7f00000000c0)=0x0) timer_gettime(r0, &(0x7f0000000100)) openat$bsg(0xffffffffffffff9c, &(0x7f0000000100)='/dev/bsg\x00', 0x204402, 0x0) 13:37:01 executing program 5: r0 = semget$private(0x0, 0x0, 0x42) semctl$SETVAL(r0, 0x2, 0x10, 0x0) 13:37:01 executing program 2: timer_create(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, @thr={&(0x7f0000000000)="cedfad775dd967d003dbe52d40534e44b24e419a438ccb478ff3986437dfb2fca4ea25e257ce70593b4b4f61cdbbf5a2983c0c90c1e3d51f07a4095f", &(0x7f0000000040)="8bd19b303ba21500f7c2d3f7cc2fd29ae3c6db45e63c59054646e1b44d3003f74d33b6c48e8208376d6b0111434cdac6450a"}}, &(0x7f00000000c0)) 13:37:01 executing program 1: ioctl$SIOCPNDELRESOURCE(0xffffffffffffffff, 0x89ef, &(0x7f0000000040)=0xffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f00000012c0)={0x0, @nl=@unspec, @tipc=@id={0x1e, 0x3, 0x2, {0x4e21, 0x4}}, @ethernet={0x307, @random="68d88c73bc2f"}, 0x0, 0x0, 0x0, 0x0, 0x20, &(0x7f0000001280)='bridge_slave_0\x00', 0x401, 0x0, 0xfd51}) semctl$SETVAL(0x0, 0x0, 0x10, 0x0) semctl$GETVAL(0x0, 0x0, 0xc, &(0x7f0000000180)=""/194) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SCAUSEDIAG(r1, 0x89ec, &(0x7f0000000600)) bind$x25(r1, &(0x7f0000001480)={0x9, @remote={[], 0x3}}, 0x12) syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, &(0x7f00000014c0)) semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f00000000c0)=""/89) 13:37:01 executing program 4: semctl$SETVAL(0x0, 0x0, 0x10, 0x0) getitimer(0x2, &(0x7f0000000540)) 13:37:01 executing program 3: ioctl$SIOCPNDELRESOURCE(0xffffffffffffffff, 0x89ef, &(0x7f0000000040)=0xffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, 0x0, 0x0) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f00000012c0)={0x0, @nl=@unspec, @tipc=@id={0x1e, 0x3, 0x2, {0x4e21, 0x4}}, @ethernet={0x307, @random="68d88c73bc2f"}, 0x0, 0x0, 0x0, 0x0, 0x20, &(0x7f0000001280)='bridge_slave_0\x00', 0x401, 0x0, 0xfd51}) semctl$SETVAL(0x0, 0x0, 0x10, 0x0) semctl$GETVAL(0x0, 0x0, 0xc, &(0x7f0000000180)=""/194) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$x25(0x9, 0x5, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x500, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x80000000, 0xa, 0x1}) 13:37:01 executing program 2: timer_create(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, @thr={&(0x7f0000000000)="cedfad775dd967d003dbe52d40534e44b24e419a438ccb478ff3986437dfb2fca4ea25e257ce70593b4b4f61cdbbf5a2983c0c90c1e3d51f07a4095f", &(0x7f0000000040)="8bd19b303ba21500f7c2d3f7cc2fd29ae3c6db45e63c59054646e1b44d3003f74d33b6c48e8208376d6b0111434cdac6450a"}}, &(0x7f00000000c0)) 13:37:01 executing program 0: timer_create(0x7, &(0x7f0000000080)={0x0, 0x2a, 0x1, @thr={&(0x7f0000000000)="cedfad775dd967d003dbe52d40534e44b24e419a438ccb478ff3986437dfb2fca4ea25e257ce70593b4b4f61cdbbf5a2983c0c90c1e3d51f07a4095f", &(0x7f0000000040)="8bd19b303ba21500f7c2d3f7cc2fd29ae3c6db45e63c59054646e1b44d3003f74d33b6c48e8208376d6b0111434cdac6450a"}}, &(0x7f00000000c0)=0x0) timer_gettime(r0, &(0x7f0000000100)) 13:37:01 executing program 4: getitimer(0x2, &(0x7f0000000540)) 13:37:01 executing program 1: ioctl$SIOCPNDELRESOURCE(0xffffffffffffffff, 0x89ef, &(0x7f0000000040)=0xffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f00000012c0)={0x0, @nl=@unspec, @tipc=@id={0x1e, 0x3, 0x2, {0x4e21, 0x4}}, @ethernet={0x307, @random="68d88c73bc2f"}, 0x0, 0x0, 0x0, 0x0, 0x20, &(0x7f0000001280)='bridge_slave_0\x00', 0x401, 0x0, 0xfd51}) semctl$SETVAL(0x0, 0x0, 0x10, 0x0) semctl$GETVAL(0x0, 0x0, 0xc, &(0x7f0000000180)=""/194) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SCAUSEDIAG(r1, 0x89ec, &(0x7f0000000600)) bind$x25(r1, &(0x7f0000001480)={0x9, @remote={[], 0x3}}, 0x12) syz_open_dev$tty1(0xc, 0x4, 0x4) r2 = semget$private(0x0, 0x1, 0x484) semctl$IPC_STAT(r2, 0x0, 0x2, &(0x7f00000000c0)=""/89) 13:37:01 executing program 5: r0 = semget$private(0x0, 0x0, 0x42) semctl$SETVAL(r0, 0x2, 0x10, 0x0) 13:37:01 executing program 5: r0 = semget$private(0x0, 0x0, 0x42) semctl$SETVAL(r0, 0x2, 0x10, 0x0) 13:37:01 executing program 0: timer_create(0x7, &(0x7f0000000080)={0x0, 0x2a, 0x1, @thr={&(0x7f0000000000)="cedfad775dd967d003dbe52d40534e44b24e419a438ccb478ff3986437dfb2fca4ea25e257ce70593b4b4f61cdbbf5a2983c0c90c1e3d51f07a4095f", &(0x7f0000000040)="8bd19b303ba21500f7c2d3f7cc2fd29ae3c6db45e63c59054646e1b44d3003f74d33b6c48e8208376d6b0111434cdac6450a"}}, &(0x7f00000000c0)) 13:37:01 executing program 2: timer_create(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, @thr={&(0x7f0000000000)="cedfad775dd967d003dbe52d40534e44b24e419a438ccb478ff3986437dfb2fca4ea25e257ce70593b4b4f61cdbbf5a2983c0c90c1e3d51f07a4095f", &(0x7f0000000040)="8bd19b303ba21500f7c2d3f7cc2fd29ae3c6db45e63c59054646e1b44d3003f74d33b6c48e8208376d6b0111434cdac6450a"}}, &(0x7f00000000c0)) 13:37:01 executing program 4: getitimer(0x0, &(0x7f0000000540)) 13:37:01 executing program 1: ioctl$SIOCPNDELRESOURCE(0xffffffffffffffff, 0x89ef, &(0x7f0000000040)=0xffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f00000012c0)={0x0, @nl=@unspec, @tipc=@id={0x1e, 0x3, 0x2, {0x4e21, 0x4}}, @ethernet={0x307, @random="68d88c73bc2f"}, 0x0, 0x0, 0x0, 0x0, 0x20, &(0x7f0000001280)='bridge_slave_0\x00', 0x401, 0x0, 0xfd51}) semctl$SETVAL(0x0, 0x0, 0x10, 0x0) semctl$GETVAL(0x0, 0x0, 0xc, &(0x7f0000000180)=""/194) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SCAUSEDIAG(r1, 0x89ec, &(0x7f0000000600)) bind$x25(r1, &(0x7f0000001480)={0x9, @remote={[], 0x3}}, 0x12) r2 = semget$private(0x0, 0x1, 0x484) semctl$IPC_STAT(r2, 0x0, 0x2, &(0x7f00000000c0)=""/89) 13:37:01 executing program 0: timer_create(0x0, &(0x7f0000000080)={0x0, 0x2a, 0x1, @thr={&(0x7f0000000000)="cedfad775dd967d003dbe52d40534e44b24e419a438ccb478ff3986437dfb2fca4ea25e257ce70593b4b4f61cdbbf5a2983c0c90c1e3d51f07a4095f", &(0x7f0000000040)="8bd19b303ba21500f7c2d3f7cc2fd29ae3c6db45e63c59054646e1b44d3003f74d33b6c48e8208376d6b0111434cdac6450a"}}, &(0x7f00000000c0)) 13:37:02 executing program 3: ioctl$SIOCPNDELRESOURCE(0xffffffffffffffff, 0x89ef, &(0x7f0000000040)=0xffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, 0x0, 0x0) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f00000012c0)={0x0, @nl=@unspec, @tipc=@id={0x1e, 0x3, 0x2, {0x4e21, 0x4}}, @ethernet={0x307, @random="68d88c73bc2f"}, 0x0, 0x0, 0x0, 0x0, 0x20, &(0x7f0000001280)='bridge_slave_0\x00', 0x401, 0x0, 0xfd51}) semctl$SETVAL(0x0, 0x0, 0x10, 0x0) semctl$GETVAL(0x0, 0x0, 0xc, &(0x7f0000000180)=""/194) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$x25(0x9, 0x5, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x500, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x80000000, 0xa, 0x1}) 13:37:02 executing program 5: r0 = semget$private(0x0, 0x3, 0x0) semctl$SETVAL(r0, 0x2, 0x10, 0x0) 13:37:02 executing program 4: getitimer(0x0, &(0x7f0000000540)) 13:37:02 executing program 2: timer_create(0x0, &(0x7f0000000080)={0x0, 0x0, 0x1, @thr={0x0, &(0x7f0000000040)="8bd19b303ba21500f7c2d3f7cc2fd29ae3c6db45e63c59054646e1b44d3003f74d33b6c48e8208376d6b0111434cdac6450a"}}, &(0x7f00000000c0)) 13:37:02 executing program 1: ioctl$SIOCPNDELRESOURCE(0xffffffffffffffff, 0x89ef, &(0x7f0000000040)=0xffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f00000012c0)={0x0, @nl=@unspec, @tipc=@id={0x1e, 0x3, 0x2, {0x4e21, 0x4}}, @ethernet={0x307, @random="68d88c73bc2f"}, 0x0, 0x0, 0x0, 0x0, 0x20, &(0x7f0000001280)='bridge_slave_0\x00', 0x401, 0x0, 0xfd51}) semctl$SETVAL(0x0, 0x0, 0x10, 0x0) semctl$GETVAL(0x0, 0x0, 0xc, &(0x7f0000000180)=""/194) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SCAUSEDIAG(r1, 0x89ec, &(0x7f0000000600)) r2 = semget$private(0x0, 0x1, 0x484) semctl$IPC_STAT(r2, 0x0, 0x2, &(0x7f00000000c0)=""/89) 13:37:02 executing program 0: timer_create(0x0, 0x0, &(0x7f00000000c0)) 13:37:02 executing program 5: semget$private(0x0, 0x3, 0x0) semctl$SETVAL(0x0, 0x2, 0x10, 0x0) 13:37:02 executing program 0: timer_create(0x0, 0x0, &(0x7f00000000c0)) 13:37:02 executing program 4: getitimer(0x0, &(0x7f0000000540)) 13:37:02 executing program 1: ioctl$SIOCPNDELRESOURCE(0xffffffffffffffff, 0x89ef, &(0x7f0000000040)=0xffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f00000012c0)={0x0, @nl=@unspec, @tipc=@id={0x1e, 0x3, 0x2, {0x4e21, 0x4}}, @ethernet={0x307, @random="68d88c73bc2f"}, 0x0, 0x0, 0x0, 0x0, 0x20, &(0x7f0000001280)='bridge_slave_0\x00', 0x401, 0x0, 0xfd51}) semctl$SETVAL(0x0, 0x0, 0x10, 0x0) semctl$GETVAL(0x0, 0x0, 0xc, &(0x7f0000000180)=""/194) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$x25(0x9, 0x5, 0x0) r1 = semget$private(0x0, 0x1, 0x484) semctl$IPC_STAT(r1, 0x0, 0x2, &(0x7f00000000c0)=""/89) 13:37:02 executing program 2: timer_create(0x0, &(0x7f0000000080)={0x0, 0x0, 0x1, @thr={0x0, 0x0}}, &(0x7f00000000c0)) 13:37:02 executing program 5: semget$private(0x0, 0x3, 0x0) semctl$SETVAL(0x0, 0x2, 0x10, 0x0) 13:37:03 executing program 3: ioctl$SIOCPNDELRESOURCE(0xffffffffffffffff, 0x89ef, &(0x7f0000000040)=0xffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, 0x0, 0x0) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f00000012c0)={0x0, @nl=@unspec, @tipc=@id={0x1e, 0x3, 0x2, {0x4e21, 0x4}}, @ethernet={0x307, @random="68d88c73bc2f"}, 0x0, 0x0, 0x0, 0x0, 0x20, &(0x7f0000001280)='bridge_slave_0\x00', 0x401, 0x0, 0xfd51}) semctl$SETVAL(0x0, 0x0, 0x10, 0x0) semctl$GETVAL(0x0, 0x0, 0xc, &(0x7f0000000180)=""/194) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$x25(0x9, 0x5, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x500, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x80000000, 0xa, 0x1}) 13:37:03 executing program 2: timer_create(0x0, &(0x7f0000000080)={0x0, 0x0, 0x1, @thr={0x0, 0x0}}, 0x0) 13:37:03 executing program 4: getitimer(0x2, 0x0) 13:37:03 executing program 5: semget$private(0x0, 0x3, 0x0) semctl$SETVAL(0x0, 0x2, 0x10, 0x0) 13:37:03 executing program 1: ioctl$SIOCPNDELRESOURCE(0xffffffffffffffff, 0x89ef, &(0x7f0000000040)=0xffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f00000012c0)={0x0, @nl=@unspec, @tipc=@id={0x1e, 0x3, 0x2, {0x4e21, 0x4}}, @ethernet={0x307, @random="68d88c73bc2f"}, 0x0, 0x0, 0x0, 0x0, 0x20, &(0x7f0000001280)='bridge_slave_0\x00', 0x401, 0x0, 0xfd51}) semctl$SETVAL(0x0, 0x0, 0x10, 0x0) semctl$GETVAL(0x0, 0x0, 0xc, &(0x7f0000000180)=""/194) socket$nl_generic(0x10, 0x3, 0x10) r1 = semget$private(0x0, 0x1, 0x484) semctl$IPC_STAT(r1, 0x0, 0x2, &(0x7f00000000c0)=""/89) 13:37:03 executing program 0: timer_create(0x0, 0x0, &(0x7f00000000c0)) 13:37:03 executing program 5: r0 = semget$private(0x0, 0x3, 0x0) semctl$SETVAL(r0, 0x0, 0x10, 0x0) 13:37:03 executing program 2: timer_create(0x0, &(0x7f0000000080)={0x0, 0x0, 0x1, @thr={0x0, 0x0}}, 0x0) 13:37:03 executing program 0: timer_create(0x0, &(0x7f0000000080)={0x0, 0x0, 0x1, @thr={&(0x7f0000000000)="cedfad775dd967d003dbe52d40534e44b24e419a438ccb478ff3986437dfb2fca4ea25e257ce70593b4b4f61cdbbf5a2983c0c90c1e3d51f07a4095f", &(0x7f0000000040)="8bd19b303ba21500f7c2d3f7cc2fd29ae3c6db45e63c59054646e1b44d3003f74d33b6c48e8208376d6b0111434cdac6450a"}}, &(0x7f00000000c0)) 13:37:03 executing program 1: ioctl$SIOCPNDELRESOURCE(0xffffffffffffffff, 0x89ef, &(0x7f0000000040)=0xffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f00000012c0)={0x0, @nl=@unspec, @tipc=@id={0x1e, 0x3, 0x2, {0x4e21, 0x4}}, @ethernet={0x307, @random="68d88c73bc2f"}, 0x0, 0x0, 0x0, 0x0, 0x20, &(0x7f0000001280)='bridge_slave_0\x00', 0x401, 0x0, 0xfd51}) semctl$SETVAL(0x0, 0x0, 0x10, 0x0) semctl$GETVAL(0x0, 0x0, 0xc, &(0x7f0000000180)=""/194) r1 = semget$private(0x0, 0x1, 0x484) semctl$IPC_STAT(r1, 0x0, 0x2, &(0x7f00000000c0)=""/89) 13:37:03 executing program 4: getitimer(0x2, 0x0) 13:37:03 executing program 2: timer_create(0x0, &(0x7f0000000080)={0x0, 0x0, 0x1, @thr={0x0, 0x0}}, 0x0) 13:37:04 executing program 3: ioctl$SIOCPNDELRESOURCE(0xffffffffffffffff, 0x89ef, &(0x7f0000000040)=0xffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000004f80)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f00000012c0)={0x0, @nl=@unspec, @tipc=@id={0x1e, 0x3, 0x2, {0x4e21, 0x4}}, @ethernet={0x307, @random="68d88c73bc2f"}, 0x0, 0x0, 0x0, 0x0, 0x20, &(0x7f0000001280)='bridge_slave_0\x00', 0x401, 0x0, 0xfd51}) semctl$SETVAL(0x0, 0x0, 0x10, 0x0) semctl$GETVAL(0x0, 0x0, 0xc, &(0x7f0000000180)=""/194) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$x25(0x9, 0x5, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x500, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x80000000, 0xa, 0x1}) 13:37:04 executing program 0: timer_create(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, @thr={&(0x7f0000000000)="cedfad775dd967d003dbe52d40534e44b24e419a438ccb478ff3986437dfb2fca4ea25e257ce70593b4b4f61cdbbf5a2983c0c90c1e3d51f07a4095f", &(0x7f0000000040)="8bd19b303ba21500f7c2d3f7cc2fd29ae3c6db45e63c59054646e1b44d3003f74d33b6c48e8208376d6b0111434cdac6450a"}}, &(0x7f00000000c0)) 13:37:04 executing program 4: getitimer(0x2, 0x0) 13:37:04 executing program 1: ioctl$SIOCPNDELRESOURCE(0xffffffffffffffff, 0x89ef, &(0x7f0000000040)=0xffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f00000012c0)={0x0, @nl=@unspec, @tipc=@id={0x1e, 0x3, 0x2, {0x4e21, 0x4}}, @ethernet={0x307, @random="68d88c73bc2f"}, 0x0, 0x0, 0x0, 0x0, 0x20, &(0x7f0000001280)='bridge_slave_0\x00', 0x401, 0x0, 0xfd51}) semctl$SETVAL(0x0, 0x0, 0x10, 0x0) r1 = semget$private(0x0, 0x1, 0x484) semctl$IPC_STAT(r1, 0x0, 0x2, &(0x7f00000000c0)=""/89) 13:37:04 executing program 5: ioctl$SIOCPNDELRESOURCE(0xffffffffffffffff, 0x89ef, &(0x7f0000000040)=0xffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f00000012c0)={0x0, @nl=@unspec, @tipc=@id={0x1e, 0x3, 0x2, {0x4e21, 0x4}}, @ethernet={0x307, @random="68d88c73bc2f"}, 0x0, 0x0, 0x0, 0x0, 0x20, &(0x7f0000001280)='bridge_slave_0\x00', 0x401, 0x0, 0xfd51}) semctl$SETVAL(0x0, 0x0, 0x10, 0x0) semctl$GETVAL(0x0, 0x0, 0xc, &(0x7f0000000180)=""/194) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SCAUSEDIAG(r1, 0x89ec, &(0x7f0000000600)) r2 = semget$private(0x0, 0x1, 0x484) semctl$IPC_STAT(r2, 0x0, 0x2, &(0x7f00000000c0)=""/89) 13:37:04 executing program 2: ioctl$SIOCPNDELRESOURCE(0xffffffffffffffff, 0x89ef, &(0x7f0000000040)=0xffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f00000012c0)={0x0, @nl=@unspec, @tipc=@id={0x1e, 0x3, 0x2, {0x4e21, 0x4}}, @ethernet={0x307, @random="68d88c73bc2f"}, 0x0, 0x0, 0x0, 0x0, 0x20, &(0x7f0000001280)='bridge_slave_0\x00', 0x401, 0x0, 0xfd51}) semctl$SETVAL(0x0, 0x0, 0x10, 0x0) semctl$GETVAL(0x0, 0x0, 0xc, &(0x7f0000000180)=""/194) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$x25(0x9, 0x5, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x500, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x80000000, 0xa, 0x1}) 13:37:04 executing program 4: ioctl$SIOCPNDELRESOURCE(0xffffffffffffffff, 0x89ef, &(0x7f0000000040)=0xffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, 0x0, 0x0) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f00000012c0)={0x0, @nl=@unspec, @tipc=@id={0x1e, 0x3, 0x2, {0x4e21, 0x4}}, @ethernet={0x307, @random="68d88c73bc2f"}, 0x0, 0x0, 0x0, 0x0, 0x20, &(0x7f0000001280)='bridge_slave_0\x00', 0x401, 0x0, 0xfd51}) semctl$SETVAL(0x0, 0x0, 0x10, 0x0) semctl$GETVAL(0x0, 0x0, 0xc, &(0x7f0000000180)=""/194) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$x25(0x9, 0x5, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x500, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x80000000, 0xa, 0x1}) 13:37:04 executing program 5: ioctl$SIOCPNDELRESOURCE(0xffffffffffffffff, 0x89ef, &(0x7f0000000040)=0xffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, 0x0, 0x0) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f00000012c0)={0x0, @nl=@unspec, @tipc=@id={0x1e, 0x3, 0x2, {0x4e21, 0x4}}, @ethernet={0x307, @random="68d88c73bc2f"}, 0x0, 0x0, 0x0, 0x0, 0x20, &(0x7f0000001280)='bridge_slave_0\x00', 0x401, 0x0, 0xfd51}) semctl$SETVAL(0x0, 0x0, 0x10, 0x0) semctl$GETVAL(0x0, 0x0, 0xc, &(0x7f0000000180)=""/194) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$x25(0x9, 0x5, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x500, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x80000000, 0xa, 0x1}) 13:37:04 executing program 0: timer_create(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, @thr={&(0x7f0000000000)="cedfad775dd967d003dbe52d40534e44b24e419a438ccb478ff3986437dfb2fca4ea25e257ce70593b4b4f61cdbbf5a2983c0c90c1e3d51f07a4095f", &(0x7f0000000040)="8bd19b303ba21500f7c2d3f7cc2fd29ae3c6db45e63c59054646e1b44d3003f74d33b6c48e8208376d6b0111434cdac6450a"}}, &(0x7f00000000c0)) 13:37:04 executing program 1: ioctl$SIOCPNDELRESOURCE(0xffffffffffffffff, 0x89ef, &(0x7f0000000040)=0xffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f00000012c0)={0x0, @nl=@unspec, @tipc=@id={0x1e, 0x3, 0x2, {0x4e21, 0x4}}, @ethernet={0x307, @random="68d88c73bc2f"}, 0x0, 0x0, 0x0, 0x0, 0x20, &(0x7f0000001280)='bridge_slave_0\x00', 0x401, 0x0, 0xfd51}) r1 = semget$private(0x0, 0x1, 0x484) semctl$IPC_STAT(r1, 0x0, 0x2, &(0x7f00000000c0)=""/89) 13:37:04 executing program 0: timer_create(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, @thr={&(0x7f0000000000)="cedfad775dd967d003dbe52d40534e44b24e419a438ccb478ff3986437dfb2fca4ea25e257ce70593b4b4f61cdbbf5a2983c0c90c1e3d51f07a4095f", &(0x7f0000000040)="8bd19b303ba21500f7c2d3f7cc2fd29ae3c6db45e63c59054646e1b44d3003f74d33b6c48e8208376d6b0111434cdac6450a"}}, &(0x7f00000000c0)) 13:37:04 executing program 1: ioctl$SIOCPNDELRESOURCE(0xffffffffffffffff, 0x89ef, &(0x7f0000000040)=0xffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) r1 = semget$private(0x0, 0x1, 0x484) semctl$IPC_STAT(r1, 0x0, 0x2, &(0x7f00000000c0)=""/89) [ 1168.962544] syz-executor.3: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1168.982648] syz-executor.2: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1168.983092] syz-executor.4: [ 1169.000977] syz-executor.5: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1169.022030] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 1169.025510] syz-executor.2 cpuset= [ 1169.027866] page allocation failure: order:4 [ 1169.029450] / [ 1169.032079] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1169.038207] CPU: 0 PID: 26484 Comm: syz-executor.3 Not tainted 4.14.230-syzkaller #0 [ 1169.045122] mems_allowed=0-1 [ 1169.045334] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1169.045340] Call Trace: [ 1169.045360] dump_stack+0x1b2/0x281 [ 1169.045375] warn_alloc.cold+0x96/0x1cc [ 1169.075829] ? zone_watermark_ok_safe+0x220/0x220 [ 1169.080685] __alloc_pages_nodemask+0x2127/0x2720 [ 1169.085529] ? lock_acquire+0x170/0x3f0 [ 1169.089503] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1169.094372] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1169.099825] ? __mutex_unlock_slowpath+0x75/0x770 [ 1169.104673] alloc_pages_current+0x155/0x260 [ 1169.109084] ion_page_pool_alloc+0x118/0x1b0 [ 1169.113491] ion_system_heap_allocate+0x133/0x8c0 [ 1169.118396] ? ion_alloc+0x187/0x810 [ 1169.122108] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1169.127553] ? ion_system_contig_heap_create+0x130/0x130 [ 1169.133006] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1169.138053] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1169.142920] ion_alloc+0x204/0x810 [ 1169.146465] ? ion_dma_buf_release+0x40/0x40 [ 1169.150872] ? __might_fault+0x177/0x1b0 [ 1169.154937] ion_ioctl+0xea/0x1f0 [ 1169.158389] ? ion_query_heaps+0x360/0x360 [ 1169.159393] syz-executor.5 cpuset= [ 1169.162621] ? ion_query_heaps+0x360/0x360 [ 1169.162634] do_vfs_ioctl+0x75a/0xff0 [ 1169.162647] ? ioctl_preallocate+0x1a0/0x1a0 [ 1169.162657] ? lock_downgrade+0x740/0x740 [ 1169.162673] ? __fget+0x225/0x360 [ 1169.186186] ? do_vfs_ioctl+0xff0/0xff0 [ 1169.190184] ? security_file_ioctl+0x83/0xb0 [ 1169.191695] / [ 1169.194598] SyS_ioctl+0x7f/0xb0 [ 1169.199684] ? do_vfs_ioctl+0xff0/0xff0 [ 1169.201558] mems_allowed=0-1 [ 1169.203675] do_syscall_64+0x1d5/0x640 [ 1169.203693] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1169.203702] RIP: 0033:0x466459 [ 1169.203707] RSP: 002b:00007f8a667e8188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1169.203717] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1169.203723] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000005 [ 1169.203728] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1169.203733] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1169.203739] R13: 00007ffd25ba1ddf R14: 00007f8a667e8300 R15: 0000000000022000 [ 1169.214319] (null) [ 1169.217215] CPU: 1 PID: 26481 Comm: syz-executor.2 Not tainted 4.14.230-syzkaller #0 [ 1169.221416] syz-executor.4 cpuset= [ 1169.226833] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1169.226838] Call Trace: [ 1169.226857] dump_stack+0x1b2/0x281 [ 1169.226871] warn_alloc.cold+0x96/0x1cc [ 1169.226883] ? zone_watermark_ok_safe+0x220/0x220 [ 1169.226906] __alloc_pages_nodemask+0x2127/0x2720 [ 1169.251902] / [ 1169.255957] ? lock_acquire+0x170/0x3f0 [ 1169.263343] mems_allowed=0-1 [ 1169.265348] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1169.265368] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1169.265381] ? __mutex_unlock_slowpath+0x75/0x770 [ 1169.329790] ? alloc_pages_current+0x16/0x260 [ 1169.334278] alloc_pages_current+0x155/0x260 [ 1169.338697] ion_page_pool_alloc+0x118/0x1b0 [ 1169.343285] ion_system_heap_allocate+0x133/0x8c0 [ 1169.348119] ? ion_alloc+0x187/0x810 [ 1169.351826] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1169.357266] ? ion_system_contig_heap_create+0x130/0x130 [ 1169.362724] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1169.367731] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1169.373004] ion_alloc+0x204/0x810 [ 1169.376557] ? ion_dma_buf_release+0x40/0x40 [ 1169.380973] ? __might_fault+0x177/0x1b0 [ 1169.385039] ion_ioctl+0xea/0x1f0 [ 1169.388565] ? ion_query_heaps+0x360/0x360 [ 1169.392795] ? ion_query_heaps+0x360/0x360 [ 1169.397034] do_vfs_ioctl+0x75a/0xff0 [ 1169.400843] ? ioctl_preallocate+0x1a0/0x1a0 [ 1169.405249] ? lock_downgrade+0x740/0x740 [ 1169.409833] ? __fget+0x225/0x360 [ 1169.410469] Mem-Info: [ 1169.413287] ? do_vfs_ioctl+0xff0/0xff0 [ 1169.413301] ? security_file_ioctl+0x83/0xb0 [ 1169.413311] SyS_ioctl+0x7f/0xb0 [ 1169.413321] ? do_vfs_ioctl+0xff0/0xff0 [ 1169.413333] do_syscall_64+0x1d5/0x640 [ 1169.413348] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1169.419147] active_anon:12998 inactive_anon:53462 isolated_anon:0 [ 1169.419147] active_file:1414 inactive_file:2897 isolated_file:0 [ 1169.419147] unevictable:0 dirty:3 writeback:25 unstable:0 [ 1169.419147] slab_reclaimable:12515 slab_unreclaimable:117139 [ 1169.419147] mapped:55371 shmem:54035 pagetables:767 bounce:0 [ 1169.419147] free:274837 free_pcp:39 free_cma:0 [ 1169.419810] RIP: 0033:0x466459 [ 1169.440829] Node 0 active_anon:51240kB inactive_anon:157096kB active_file:5648kB inactive_file:11576kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:221480kB dirty:0kB writeback:96kB shmem:158988kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1169.474665] RSP: 002b:00007f0eae9d3188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1169.474677] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1169.474682] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000005 [ 1169.474687] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1169.474692] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1169.474697] R13: 00007ffd6e9adf1f R14: 00007f0eae9d3300 R15: 0000000000022000 [ 1169.518109] CPU: 1 PID: 26491 Comm: syz-executor.5 Not tainted 4.14.230-syzkaller #0 [ 1169.559006] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1169.568357] Call Trace: [ 1169.570950] dump_stack+0x1b2/0x281 [ 1169.574751] warn_alloc.cold+0x96/0x1cc [ 1169.578719] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1169.583742] ? zone_watermark_ok_safe+0x220/0x220 [ 1169.588590] __alloc_pages_nodemask+0x2127/0x2720 [ 1169.593433] ? lock_acquire+0x170/0x3f0 [ 1169.597499] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1169.602342] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1169.607799] ? __mutex_unlock_slowpath+0x75/0x770 [ 1169.612163] Node 1 active_anon:752kB inactive_anon:56752kB active_file:8kB inactive_file:12kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:4kB dirty:12kB writeback:4kB shmem:57152kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1169.612632] alloc_pages_current+0x155/0x260 [ 1169.643755] ion_page_pool_alloc+0x118/0x1b0 [ 1169.648164] ion_system_heap_allocate+0x133/0x8c0 [ 1169.652999] ? ion_alloc+0x187/0x810 [ 1169.656705] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1169.662146] ? ion_system_contig_heap_create+0x130/0x130 [ 1169.667596] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1169.672606] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1169.673422] Node 0 [ 1169.677438] ion_alloc+0x204/0x810 [ 1169.677454] ? ion_dma_buf_release+0x40/0x40 [ 1169.677469] ? __might_fault+0x177/0x1b0 [ 1169.688804] DMA free:11148kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1169.691668] ion_ioctl+0xea/0x1f0 [ 1169.691678] ? ion_query_heaps+0x360/0x360 [ 1169.691691] ? ion_query_heaps+0x360/0x360 [ 1169.691703] do_vfs_ioctl+0x75a/0xff0 [ 1169.733026] ? ioctl_preallocate+0x1a0/0x1a0 [ 1169.737426] ? lock_downgrade+0x740/0x740 [ 1169.741831] ? __fget+0x225/0x360 [ 1169.745274] ? do_vfs_ioctl+0xff0/0xff0 [ 1169.749241] ? security_file_ioctl+0x83/0xb0 [ 1169.750058] lowmem_reserve[]: [ 1169.753640] SyS_ioctl+0x7f/0xb0 [ 1169.753649] ? do_vfs_ioctl+0xff0/0xff0 [ 1169.753662] do_syscall_64+0x1d5/0x640 [ 1169.753677] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1169.753687] RIP: 0033:0x466459 [ 1169.760144] 0 [ 1169.760225] RSP: 002b:00007f2be0a5d188 EFLAGS: 00000246 [ 1169.773088] 2717 [ 1169.773218] ORIG_RAX: 0000000000000010 [ 1169.779775] 2718 [ 1169.783515] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1169.783521] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000005 [ 1169.783527] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1169.783533] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1169.783539] R13: 00007ffff2073daf R14: 00007f2be0a5d300 R15: 0000000000022000 [ 1169.843937] CPU: 0 PID: 26489 Comm: syz-executor.4 Not tainted 4.14.230-syzkaller #0 [ 1169.851914] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1169.861261] Call Trace: [ 1169.863851] dump_stack+0x1b2/0x281 [ 1169.867477] warn_alloc.cold+0x96/0x1cc [ 1169.871451] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1169.876477] ? zone_watermark_ok_safe+0x220/0x220 [ 1169.881358] __alloc_pages_nodemask+0x2127/0x2720 [ 1169.886199] ? _raw_spin_unlock_irq+0x24/0x80 [ 1169.890699] ? lock_acquire+0x170/0x3f0 [ 1169.894694] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1169.899544] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1169.904992] ? __mutex_unlock_slowpath+0x75/0x770 [ 1169.909864] alloc_pages_current+0x155/0x260 [ 1169.914301] ion_page_pool_alloc+0x118/0x1b0 [ 1169.919054] ion_system_heap_allocate+0x133/0x8c0 [ 1169.923894] ? ion_alloc+0x187/0x810 [ 1169.927603] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1169.933050] ? ion_system_contig_heap_create+0x130/0x130 [ 1169.938585] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1169.943601] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1169.948445] ion_alloc+0x204/0x810 [ 1169.951991] ? ion_dma_buf_release+0x40/0x40 [ 1169.956406] ? __might_fault+0x177/0x1b0 [ 1169.961084] ion_ioctl+0xea/0x1f0 [ 1169.964534] ? ion_query_heaps+0x360/0x360 [ 1169.969724] ? ion_query_heaps+0x360/0x360 [ 1169.973959] do_vfs_ioctl+0x75a/0xff0 [ 1169.977760] ? ioctl_preallocate+0x1a0/0x1a0 [ 1169.982169] ? lock_downgrade+0x740/0x740 [ 1169.986322] ? __fget+0x225/0x360 [ 1169.989786] ? do_vfs_ioctl+0xff0/0xff0 [ 1169.993760] ? security_file_ioctl+0x83/0xb0 [ 1169.998165] SyS_ioctl+0x7f/0xb0 [ 1170.001527] ? do_vfs_ioctl+0xff0/0xff0 [ 1170.005499] do_syscall_64+0x1d5/0x640 [ 1170.009389] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1170.014574] RIP: 0033:0x466459 [ 1170.017759] RSP: 002b:00007fee1a099188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1170.025993] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1170.033268] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000005 [ 1170.040537] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1170.047804] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1170.055078] R13: 00007ffe6e91304f R14: 00007fee1a099300 R15: 0000000000022000 [ 1170.091468] 2718 2718 [ 1170.098058] Node 0 DMA32 free:1425208kB min:36200kB low:45248kB high:54296kB active_anon:51240kB inactive_anon:157096kB active_file:5660kB inactive_file:11592kB unevictable:0kB writepending:32kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:7648kB pagetables:3024kB bounce:0kB free_pcp:380kB local_pcp:352kB free_cma:0kB [ 1170.133640] lowmem_reserve[]: 0 0 0 0 0 [ 1170.137753] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1170.168356] lowmem_reserve[]: 0 0 0 0 0 [ 1170.172451] Node 1 Normal free:776936kB min:53696kB low:67120kB high:80544kB active_anon:752kB inactive_anon:56752kB active_file:8kB inactive_file:8kB unevictable:0kB writepending:4kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:128kB pagetables:44kB bounce:0kB free_pcp:24kB local_pcp:0kB free_cma:0kB [ 1170.206465] lowmem_reserve[]: 0 0 0 0 0 [ 1170.210748] Node 0 DMA: 17*4kB (UE) 51*8kB (U) 41*16kB (U) 23*32kB (UE) 14*64kB (UE) 10*128kB (UE) 2*256kB (UE) 1*512kB (E) 3*1024kB (UE) 2*2048kB (M) 0*4096kB = 12236kB [ 1170.231219] Node 0 DMA32: 4*4kB (M) 30*8kB (ME) 15451*16kB (UME) 9889*32kB (UME) 7282*64kB (UM) 2079*128kB (UM) 21*256kB (U) 0*512kB 1*1024kB (U) 0*2048kB 0*4096kB = 1302480kB [ 1170.251979] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1170.267657] Node 1 Normal: 626*4kB (UM) 1024*8kB (UM) 834*16kB (UM) 544*32kB (UM) 514*64kB (UM) 759*128kB (UM) 803*256kB (UM) 553*512kB (UM) 92*1024kB (UM) 11*2048kB (U) 0*4096kB = 776936kB [ 1170.289838] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1170.299449] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1170.312653] warn_alloc_show_mem: 2 callbacks suppressed [ 1170.312657] Mem-Info: [ 1170.321545] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1170.335376] active_anon:12998 inactive_anon:53462 isolated_anon:0 [ 1170.335376] active_file:1417 inactive_file:2900 isolated_file:0 [ 1170.335376] unevictable:0 dirty:9 writeback:0 unstable:0 [ 1170.335376] slab_reclaimable:12515 slab_unreclaimable:117612 [ 1170.335376] mapped:55399 shmem:54035 pagetables:767 bounce:0 [ 1170.335376] free:499205 free_pcp:120 free_cma:0 [ 1170.375993] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1170.387769] 58356 total pagecache pages [ 1170.391898] 0 pages in swap cache [ 1170.398760] Swap cache stats: add 0, delete 0, find 0/0 [ 1170.407966] Free swap = 0kB [ 1170.411128] Total swap = 0kB [ 1170.416806] Node 0 active_anon:51240kB inactive_anon:157096kB active_file:5660kB inactive_file:11592kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:221596kB dirty:32kB writeback:0kB shmem:158988kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1170.451112] 2097051 pages RAM [ 1170.455201] 0 pages HighMem/MovableOnly [ 1170.459303] 363848 pages reserved [ 1170.470020] 0 pages cma reserved [ 1170.479853] Node 1 active_anon:752kB inactive_anon:56752kB active_file:8kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:57152kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1170.532898] Node 0 DMA free:12236kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1170.592702] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1170.604578] Node 0 DMA32 free:938584kB min:36200kB low:45248kB high:54296kB active_anon:51240kB inactive_anon:157096kB active_file:5660kB inactive_file:11592kB unevictable:0kB writepending:32kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:7648kB pagetables:3024kB bounce:0kB free_pcp:192kB local_pcp:144kB free_cma:0kB [ 1170.670434] lowmem_reserve[]: 0 0 0 0 0 [ 1170.679218] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1170.732869] lowmem_reserve[]: 0 0 0 0 0 [ 1170.737021] Node 1 Normal free:776936kB min:53696kB low:67120kB high:80544kB active_anon:752kB inactive_anon:56752kB active_file:8kB inactive_file:8kB unevictable:0kB writepending:4kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:128kB pagetables:44kB bounce:0kB free_pcp:24kB local_pcp:0kB free_cma:0kB [ 1170.798273] lowmem_reserve[]: 0 0 0 0 0 [ 1170.806896] Node 0 DMA: 17*4kB (UE) 51*8kB (U) 41*16kB (U) 23*32kB (UE) 14*64kB (UE) 10*128kB (UE) 2*256kB (UE) 1*512kB (E) 3*1024kB (UE) 2*2048kB (M) 0*4096kB = 12236kB [ 1170.840488] Node 0 DMA32: 5*4kB (UM) 31*8kB (UME) 133*16kB (ME) 21*32kB (UME) 6760*64kB (UM) 2081*128kB (UM) 21*256kB (U) 0*512kB 1*1024kB (U) 0*2048kB 0*4096kB = 708476kB [ 1170.874692] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1170.898060] Node 1 Normal: 626*4kB (UM) 1024*8kB (UM) 834*16kB (UM) 544*32kB (UM) 514*64kB (UM) 759*128kB (UM) 803*256kB (UM) 553*512kB (UM) 92*1024kB (UM) 11*2048kB (U) 0*4096kB = 776936kB [ 1170.939297] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1170.957919] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1170.976857] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1171.000235] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1171.019124] 58356 total pagecache pages [ 1171.027810] 0 pages in swap cache [ 1171.036220] Swap cache stats: add 0, delete 0, find 0/0 [ 1171.048514] Free swap = 0kB [ 1171.056126] Total swap = 0kB [ 1171.062625] 2097051 pages RAM [ 1171.070196] 0 pages HighMem/MovableOnly [ 1171.078849] 363848 pages reserved [ 1171.086900] 0 pages cma reserved [ 1172.140599] oom_reaper: reaped process 26489 (syz-executor.4), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1172.243277] syz-fuzzer invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1172.258795] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 1172.263632] CPU: 1 PID: 7981 Comm: syz-fuzzer Not tainted 4.14.230-syzkaller #0 [ 1172.271075] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1172.280509] Call Trace: [ 1172.283190] dump_stack+0x1b2/0x281 [ 1172.286818] dump_header+0x178/0x82f [ 1172.290529] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1172.295633] ? ___ratelimit+0x2cd/0x530 [ 1172.299612] oom_kill_process.cold+0x10/0xa40 [ 1172.304226] out_of_memory+0xe3e/0x1190 [ 1172.308206] ? oom_killer_disable+0x1c0/0x1c0 [ 1172.312698] ? mutex_trylock+0x152/0x1a0 [ 1172.316759] __alloc_pages_nodemask+0x23e1/0x2720 [ 1172.321613] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1172.326498] alloc_pages_current+0x155/0x260 [ 1172.330908] filemap_fault+0x11a1/0x1ad0 [ 1172.335002] ext4_filemap_fault+0x84/0xb0 [ 1172.339159] __do_fault+0xfa/0x380 [ 1172.342723] __handle_mm_fault+0x2497/0x4620 [ 1172.347155] ? vm_insert_page+0x7c0/0x7c0 [ 1172.352354] ? mark_held_locks+0xa6/0xf0 [ 1172.356430] handle_mm_fault+0x455/0x9c0 [ 1172.360482] __do_page_fault+0x549/0xad0 [ 1172.364557] ? spurious_fault+0x640/0x640 [ 1172.368691] ? do_page_fault+0x60/0x500 [ 1172.372650] ? page_fault+0x2f/0x50 [ 1172.376367] page_fault+0x45/0x50 [ 1172.379807] RIP: 2a8c00:0x11bae9effe3 [ 1172.383606] RSP: 0180:000000c0003dde40 EFLAGS: 00000003 [ 1172.391276] Mem-Info: [ 1172.393011] syz-executor.4: [ 1172.396761] active_anon:12977 inactive_anon:53462 isolated_anon:0 [ 1172.396761] active_file:37 inactive_file:9 isolated_file:0 [ 1172.396761] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1172.396761] slab_reclaimable:12513 slab_unreclaimable:117434 [ 1172.396761] mapped:52593 shmem:54035 pagetables:767 bounce:0 [ 1172.396761] free:13894 free_pcp:60 free_cma:0 [ 1172.399066] page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1172.402111] Node 0 active_anon:51140kB inactive_anon:157096kB active_file:140kB inactive_file:28kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:210372kB dirty:0kB writeback:0kB shmem:158988kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1172.444394] (null) [ 1172.451838] Node 1 active_anon:768kB inactive_anon:56752kB active_file:8kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:57152kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1172.491107] syz-executor.4 cpuset= [ 1172.508935] Node 0 [ 1172.510629] / [ 1172.512491] DMA free:10976kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1172.514759] mems_allowed=0-1 [ 1172.514772] CPU: 0 PID: 26489 Comm: syz-executor.4 Not tainted 4.14.230-syzkaller #0 [ 1172.516474] lowmem_reserve[]: [ 1172.542302] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1172.542307] Call Trace: [ 1172.542328] dump_stack+0x1b2/0x281 [ 1172.542343] warn_alloc.cold+0x96/0x1cc [ 1172.542356] ? zone_watermark_ok_safe+0x220/0x220 [ 1172.542366] ? usleep_range+0x130/0x130 [ 1172.542375] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1172.542388] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1172.542399] ? run_timer_softirq+0x5a0/0x5a0 [ 1172.552152] 0 [ 1172.553373] __alloc_pages_nodemask+0x2127/0x2720 [ 1172.553389] ? lock_acquire+0x170/0x3f0 [ 1172.553405] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1172.556494] 2717 [ 1172.565836] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1172.565852] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1172.565873] alloc_pages_current+0x155/0x260 [ 1172.565886] ion_page_pool_alloc+0x118/0x1b0 [ 1172.565897] ion_system_heap_allocate+0x133/0x8c0 [ 1172.575222] 2718 [ 1172.576135] ? ion_alloc+0x187/0x810 [ 1172.581124] 2718 [ 1172.585082] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1172.585092] ? ion_system_contig_heap_create+0x130/0x130 [ 1172.585102] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1172.585113] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1172.585124] ion_alloc+0x204/0x810 [ 1172.585137] ? ion_dma_buf_release+0x40/0x40 [ 1172.591660] 2718 [ 1172.595222] ? __might_fault+0x177/0x1b0 [ 1172.595235] ion_ioctl+0xea/0x1f0 [ 1172.595244] ? ion_query_heaps+0x360/0x360 [ 1172.595256] ? ion_query_heaps+0x360/0x360 [ 1172.595267] do_vfs_ioctl+0x75a/0xff0 [ 1172.595282] ? ioctl_preallocate+0x1a0/0x1a0 [ 1172.606398] ? lock_downgrade+0x740/0x740 [ 1172.610347] Node 0 [ 1172.615178] ? __fget+0x225/0x360 [ 1172.615188] ? do_vfs_ioctl+0xff0/0xff0 [ 1172.615200] ? security_file_ioctl+0x83/0xb0 [ 1172.615212] SyS_ioctl+0x7f/0xb0 [ 1172.617267] DMA32 free:17804kB min:36200kB low:45248kB high:54296kB active_anon:51240kB inactive_anon:157096kB active_file:48kB inactive_file:32kB unevictable:0kB writepending:0kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:7648kB pagetables:3024kB bounce:0kB free_pcp:120kB local_pcp:0kB free_cma:0kB [ 1172.621731] ? do_vfs_ioctl+0xff0/0xff0 [ 1172.633894] lowmem_reserve[]: [ 1172.635941] do_syscall_64+0x1d5/0x640 [ 1172.640767] 0 [ 1172.642823] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1172.642832] RIP: 0033:0x466459 [ 1172.642837] RSP: 002b:00007fee1a099188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1172.642847] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1172.642852] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000005 [ 1172.642858] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1172.642863] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1172.642868] R13: 00007ffe6e91304f R14: 00007fee1a099300 R15: 0000000000022000 [ 1172.656427] Mem-Info: [ 1172.666333] 0 [ 1172.674635] active_anon:12977 inactive_anon:53462 isolated_anon:0 [ 1172.674635] active_file:11 inactive_file:9 isolated_file:0 [ 1172.674635] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1172.674635] slab_reclaimable:12513 slab_unreclaimable:117434 [ 1172.674635] mapped:52593 shmem:54035 pagetables:767 bounce:0 [ 1172.674635] free:13894 free_pcp:60 free_cma:0 [ 1172.677468] 0 [ 1172.679535] Node 0 active_anon:51140kB inactive_anon:157096kB active_file:36kB inactive_file:28kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:210372kB dirty:0kB writeback:0kB shmem:158988kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1172.690591] 0 [ 1172.696928] Node 1 active_anon:768kB inactive_anon:56752kB active_file:8kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:57152kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1172.699811] 0 [ 1172.710278] Node 0 [ 1172.720302] DMA free:10976kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1172.722460] Node 0 [ 1172.731740] lowmem_reserve[]: [ 1172.759493] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1172.768432] 0 [ 1172.772047] lowmem_reserve[]: [ 1172.778135] 2717 [ 1172.789615] 0 [ 1172.795157] 2718 [ 1172.797647] 0 [ 1172.813673] 2718 [ 1172.826379] 0 [ 1172.865411] 2718 [ 1172.893638] 0 [ 1172.954367] 0 [ 1172.985807] Node 0 [ 1172.999931] DMA32 free:17804kB min:36200kB low:45248kB high:54296kB active_anon:51240kB inactive_anon:157096kB active_file:48kB inactive_file:32kB unevictable:0kB writepending:0kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:7648kB pagetables:3024kB bounce:0kB free_pcp:116kB local_pcp:116kB free_cma:0kB [ 1173.000822] Node 1 Normal free:26816kB min:53696kB low:67120kB high:80544kB active_anon:768kB inactive_anon:56752kB active_file:8kB inactive_file:8kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:128kB pagetables:44kB bounce:0kB free_pcp:120kB local_pcp:0kB free_cma:0kB [ 1173.038812] lowmem_reserve[]: [ 1173.073889] lowmem_reserve[]: [ 1173.076325] 0 [ 1173.077001] 0 [ 1173.080087] 0 [ 1173.081867] 0 [ 1173.087680] 0 0 0 [ 1173.090143] 0 [ 1173.091626] Node 0 [ 1173.091628] 0 0 [ 1173.097947] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1173.099880] Node 0 DMA: 2*4kB (UE) 1*8kB (U) 1*16kB (U) 18*32kB (UE) 14*64kB (UE) 10*128kB (UE) 2*256kB (UE) 1*512kB (E) 3*1024kB (UE) 2*2048kB (M) 0*4096kB = 10976kB [ 1173.133893] lowmem_reserve[]: [ 1173.154103] Node 0 [ 1173.155714] 0 [ 1173.158278] DMA32: [ 1173.160505] 0 [ 1173.162285] 475*4kB [ 1173.170633] 0 [ 1173.170863] (ME) [ 1173.176311] 0 [ 1173.177225] 126*8kB [ 1173.178374] 0 [ 1173.180186] (UME) [ 1173.182491] Node 1 [ 1173.188771] 186*16kB (UME) 48*32kB (ME) 44*64kB (M) 14*128kB (M) 20*256kB (U) 0*512kB 1*1024kB (U) 0*2048kB 0*4096kB = 18172kB [ 1173.191565] Normal free:26816kB min:53696kB low:67120kB high:80544kB active_anon:768kB inactive_anon:56752kB active_file:8kB inactive_file:8kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:128kB pagetables:44kB bounce:0kB free_pcp:120kB local_pcp:120kB free_cma:0kB [ 1173.209936] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1173.240324] lowmem_reserve[]: [ 1173.248863] Node 1 Normal: 48*4kB (M) 18*8kB (UM) 11*16kB (UM) 2*32kB (M) 12*64kB (M) 9*128kB (UM) 5*256kB (UM) 3*512kB (M) 1*1024kB (M) 10*2048kB (U) 0*4096kB = 26816kB [ 1173.254283] 0 0 0 0 0 [ 1173.275012] Node 0 DMA: 2*4kB (UE) 1*8kB (U) 1*16kB (U) 18*32kB (UE) 14*64kB (UE) 10*128kB (UE) 2*256kB (UE) 1*512kB (E) 3*1024kB (UE) 2*2048kB (M) 0*4096kB = 10976kB [ 1173.278239] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1173.295883] Node 0 DMA32: 475*4kB (ME) 126*8kB (UME) 186*16kB (UME) 48*32kB (ME) 44*64kB (M) 14*128kB (M) 20*256kB (U) 0*512kB 1*1024kB (U) 0*2048kB 0*4096kB = 18172kB [ 1173.310390] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1173.319699] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1173.334223] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1173.339131] Node 1 Normal: 48*4kB (M) 18*8kB (UM) 11*16kB (UM) 2*32kB (M) 12*64kB (M) 9*128kB (UM) 5*256kB (UM) 3*512kB (M) 1*1024kB (M) 10*2048kB (U) 0*4096kB = 26816kB [ 1173.351978] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1173.363445] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1173.378211] 54059 total pagecache pages [ 1173.381541] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1173.382193] 0 pages in swap cache [ 1173.390817] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1173.390825] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1173.390829] 54059 total pagecache pages [ 1173.390838] 0 pages in swap cache [ 1173.390843] Swap cache stats: add 0, delete 0, find 0/0 [ 1173.390846] Free swap = 0kB [ 1173.390852] Total swap = 0kB [ 1173.404802] Swap cache stats: add 0, delete 0, find 0/0 [ 1173.416369] 2097051 pages RAM [ 1173.429371] Free swap = 0kB [ 1173.432283] 0 pages HighMem/MovableOnly [ 1173.440653] Total swap = 0kB [ 1173.446346] 363848 pages reserved [ 1173.453672] 0 pages cma reserved [ 1173.486860] 2097051 pages RAM [ 1173.489982] 0 pages HighMem/MovableOnly [ 1173.526737] 363848 pages reserved [ 1173.530225] 0 pages cma reserved [ 1173.546980] Out of memory (oom_kill_allocating_task): Kill process 7981 (syz-fuzzer) score 0 or sacrifice child [ 1173.583277] Killed process 25770 (syz-executor.0) total-vm:84924kB, anon-rss:64kB, file-rss:0kB, shmem-rss:0kB [ 1173.841590] systemd-journal invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1173.859737] systemd-journal cpuset=/ mems_allowed=0-1 [ 1173.862852] syz-executor.4: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1173.865522] CPU: 1 PID: 26322 Comm: systemd-journal Not tainted 4.14.230-syzkaller #0 [ 1173.877292] syz-executor.4 cpuset= [ 1173.885907] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1173.885911] Call Trace: [ 1173.885931] dump_stack+0x1b2/0x281 [ 1173.885945] dump_header+0x178/0x82f [ 1173.889460] / [ 1173.898808] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1173.901405] mems_allowed=0-1 [ 1173.904988] ? ___ratelimit+0x2cd/0x530 [ 1173.905000] oom_kill_process.cold+0x10/0xa40 [ 1173.905019] out_of_memory+0xe3e/0x1190 [ 1173.930947] ? oom_killer_disable+0x1c0/0x1c0 [ 1173.935450] ? mutex_trylock+0x152/0x1a0 [ 1173.939662] __alloc_pages_nodemask+0x23e1/0x2720 [ 1173.944527] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1173.949373] alloc_pages_current+0x155/0x260 [ 1173.953773] filemap_fault+0x11a1/0x1ad0 [ 1173.957850] ext4_filemap_fault+0x84/0xb0 [ 1173.961987] __do_fault+0xfa/0x380 [ 1173.965532] __handle_mm_fault+0x2497/0x4620 [ 1173.969946] ? vm_insert_page+0x7c0/0x7c0 [ 1173.974086] ? __fsnotify_inode_delete+0x20/0x20 [ 1173.978831] ? __fsnotify_update_child_dentry_flags.part.0+0x2e0/0x2e0 [ 1173.985493] ? mark_held_locks+0xa6/0xf0 [ 1173.989543] handle_mm_fault+0x455/0x9c0 [ 1173.993598] __do_page_fault+0x549/0xad0 [ 1173.997649] ? spurious_fault+0x640/0x640 [ 1174.001785] ? do_page_fault+0x60/0x500 [ 1174.005746] ? page_fault+0x2f/0x50 [ 1174.009358] page_fault+0x45/0x50 [ 1174.012798] RIP: 0076:0x555f8c57a958 [ 1174.016499] RSP: 3b231870:0000000000000000 EFLAGS: 7ffc3b22f670 [ 1174.016524] CPU: 0 PID: 26489 Comm: syz-executor.4 Not tainted 4.14.230-syzkaller #0 [ 1174.030474] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1174.039824] Call Trace: [ 1174.042416] dump_stack+0x1b2/0x281 [ 1174.042579] Mem-Info: [ 1174.046045] warn_alloc.cold+0x96/0x1cc [ 1174.046058] ? zone_watermark_ok_safe+0x220/0x220 [ 1174.046080] __alloc_pages_nodemask+0x2127/0x2720 [ 1174.046093] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1174.046106] ? lock_acquire+0x170/0x3f0 [ 1174.046120] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1174.046138] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1174.046152] ? __mutex_unlock_slowpath+0x75/0x770 [ 1174.049837] active_anon:12939 inactive_anon:53462 isolated_anon:0 [ 1174.049837] active_file:25 inactive_file:22 isolated_file:0 [ 1174.049837] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1174.049837] slab_reclaimable:12505 slab_unreclaimable:117413 [ 1174.049837] mapped:43911 shmem:54035 pagetables:724 bounce:0 [ 1174.049837] free:14458 free_pcp:30 free_cma:0 [ 1174.052519] alloc_pages_current+0x155/0x260 [ 1174.063457] Node 0 active_anon:50996kB inactive_anon:157096kB active_file:40kB inactive_file:40kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:175556kB dirty:0kB writeback:0kB shmem:158988kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1174.067184] ion_page_pool_alloc+0x118/0x1b0 [ 1174.071145] Node 1 active_anon:760kB inactive_anon:56752kB active_file:60kB inactive_file:48kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:88kB dirty:0kB writeback:0kB shmem:57152kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1174.075971] ion_system_heap_allocate+0x133/0x8c0 [ 1174.075985] ? _raw_spin_unlock+0x29/0x40 [ 1174.075994] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1174.076003] ? ion_system_contig_heap_create+0x130/0x130 [ 1174.076014] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1174.076025] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1174.076036] ion_alloc+0x27a/0x810 [ 1174.076049] ? ion_dma_buf_release+0x40/0x40 [ 1174.076062] ? __might_fault+0x177/0x1b0 [ 1174.076073] ion_ioctl+0xea/0x1f0 [ 1174.087924] Node 0 [ 1174.119720] ? ion_query_heaps+0x360/0x360 [ 1174.119733] ? ion_query_heaps+0x360/0x360 [ 1174.119743] do_vfs_ioctl+0x75a/0xff0 [ 1174.119754] ? ioctl_preallocate+0x1a0/0x1a0 [ 1174.119763] ? lock_downgrade+0x740/0x740 [ 1174.119776] ? __fget+0x225/0x360 [ 1174.119784] ? do_vfs_ioctl+0xff0/0xff0 [ 1174.119795] ? security_file_ioctl+0x83/0xb0 [ 1174.119805] SyS_ioctl+0x7f/0xb0 [ 1174.119813] ? do_vfs_ioctl+0xff0/0xff0 [ 1174.119824] do_syscall_64+0x1d5/0x640 [ 1174.119839] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1174.119847] RIP: 0033:0x466459 [ 1174.119852] RSP: 002b:00007fee1a099188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1174.130433] DMA free:10976kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1174.152095] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1174.152101] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000005 [ 1174.152106] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1174.152111] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1174.152116] R13: 00007ffe6e91304f R14: 00007fee1a099300 R15: 0000000000022000 [ 1174.154355] Mem-Info: [ 1174.168547] lowmem_reserve[]: [ 1174.183592] active_anon:12939 inactive_anon:53462 isolated_anon:0 [ 1174.183592] active_file:12 inactive_file:12 isolated_file:0 [ 1174.183592] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1174.183592] slab_reclaimable:12505 slab_unreclaimable:117413 [ 1174.183592] mapped:43889 shmem:54035 pagetables:724 bounce:0 [ 1174.183592] free:14540 free_pcp:8 free_cma:0 [ 1174.183611] Node 0 active_anon:50996kB inactive_anon:157096kB active_file:40kB inactive_file:40kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:175556kB dirty:0kB writeback:0kB shmem:158988kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1174.226884] 0 [ 1174.234581] Node 1 active_anon:760kB inactive_anon:56752kB active_file:8kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:57152kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1174.248869] 2717 [ 1174.254868] Node 0 [ 1174.262566] 2718 [ 1174.279307] DMA free:10976kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1174.285344] 2718 [ 1174.307987] lowmem_reserve[]: [ 1174.321910] 2718 [ 1174.345849] 0 [ 1174.369062] 2717 [ 1174.401195] Node 0 [ 1174.438621] 2718 [ 1174.458362] DMA32 free:20288kB min:36200kB low:45248kB high:54296kB active_anon:50996kB inactive_anon:157096kB active_file:40kB inactive_file:40kB unevictable:0kB writepending:0kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:7616kB pagetables:2852kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1174.488157] 2718 [ 1174.500243] lowmem_reserve[]: 0 0 0 0 0 [ 1174.542483] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1174.544230] 2718 [ 1174.582047] Node 0 DMA32 free:20288kB min:36200kB low:45248kB high:54296kB active_anon:50996kB inactive_anon:157096kB active_file:40kB inactive_file:40kB unevictable:0kB writepending:0kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:7616kB pagetables:2852kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1174.589619] lowmem_reserve[]: [ 1174.622038] lowmem_reserve[]: 0 0 0 0 0 [ 1174.629145] 0 [ 1174.629269] Node 0 [ 1174.629271] 0 0 [ 1174.631072] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1174.662755] 0 0 [ 1174.667072] lowmem_reserve[]: 0 0 0 0 0 [ 1174.675338] Node 1 Normal free:26896kB min:53696kB low:67120kB high:80544kB active_anon:760kB inactive_anon:56752kB active_file:8kB inactive_file:8kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:128kB pagetables:44kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1174.712287] Node 1 Normal free:26896kB min:53696kB low:67120kB high:80544kB active_anon:760kB inactive_anon:56752kB active_file:8kB inactive_file:8kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:128kB pagetables:44kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1174.716336] lowmem_reserve[]: [ 1174.755810] lowmem_reserve[]: 0 0 0 0 0 [ 1174.759449] 0 0 0 0 0 [ 1174.772195] Node 0 DMA: 2*4kB (UE) 1*8kB (U) 1*16kB (U) 18*32kB (UE) 14*64kB (UE) 10*128kB (UE) 2*256kB (UE) 1*512kB (E) 3*1024kB (UE) 2*2048kB (M) 0*4096kB = 10976kB [ 1174.779176] Node 0 DMA: 2*4kB (UE) 1*8kB (U) 1*16kB (U) 18*32kB (UE) 14*64kB (UE) 10*128kB (UE) 2*256kB (UE) 1*512kB (E) 3*1024kB (UE) 2*2048kB (M) 0*4096kB = 10976kB [ 1174.806425] Node 0 DMA32: 3484*4kB (UME) 222*8kB (UME) 190*16kB (UME) 52*32kB (UME) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 20416kB [ 1174.818825] Node 0 DMA32: 3484*4kB (UME) 222*8kB (UME) 190*16kB (UME) 52*32kB (UME) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 20416kB [ 1174.835119] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1174.861521] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1174.862403] Node 1 Normal: 50*4kB (UM) 19*8kB (UM) 11*16kB (UM) 4*32kB (UM) 12*64kB (M) 7*128kB (M) 80*256kB (UM) 8*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 26896kB [ 1174.889688] Node 1 [ 1174.918517] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1174.920416] Normal: [ 1174.920776] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1174.948674] 50*4kB (UM) 19*8kB (UM) 11*16kB (UM) 4*32kB (UM) 12*64kB (M) 7*128kB (M) 80*256kB (UM) 8*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 26896kB [ 1174.955821] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1174.979113] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1174.986375] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1175.009950] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1175.012643] 54059 total pagecache pages [ 1175.031713] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1175.041767] 0 pages in swap cache [ 1175.053780] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1175.062358] 54059 total pagecache pages [ 1175.064634] Swap cache stats: add 0, delete 0, find 0/0 [ 1175.071723] Free swap = 0kB [ 1175.079171] 0 pages in swap cache [ 1175.082630] Swap cache stats: add 0, delete 0, find 0/0 [ 1175.101500] Free swap = 0kB [ 1175.106858] Total swap = 0kB [ 1175.108919] Total swap = 0kB [ 1175.109887] 2097051 pages RAM [ 1175.121544] 2097051 pages RAM [ 1175.129188] 0 pages HighMem/MovableOnly [ 1175.131267] 0 pages HighMem/MovableOnly [ 1175.141756] 363848 pages reserved [ 1175.146525] 363848 pages reserved [ 1175.149577] 0 pages cma reserved [ 1175.150002] 0 pages cma reserved [ 1175.161982] Out of memory (oom_kill_allocating_task): Kill process 26322 (systemd-journal) score 0 or sacrifice child [ 1175.188325] Killed process 26322 (systemd-journal) total-vm:46096kB, anon-rss:460kB, file-rss:0kB, shmem-rss:1476kB [ 1175.217865] oom_reaper: reaped process 26322 (systemd-journal), now anon-rss:0kB, file-rss:0kB, shmem-rss:1476kB [ 1175.305278] syz-fuzzer invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1175.360307] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 1175.398127] CPU: 0 PID: 7975 Comm: syz-fuzzer Not tainted 4.14.230-syzkaller #0 [ 1175.405617] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1175.414965] Call Trace: [ 1175.417569] dump_stack+0x1b2/0x281 [ 1175.421195] dump_header+0x178/0x82f [ 1175.424910] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1175.430026] ? ___ratelimit+0x2cd/0x530 [ 1175.434010] oom_kill_process.cold+0x10/0xa40 [ 1175.438515] out_of_memory+0xe3e/0x1190 [ 1175.442490] ? oom_killer_disable+0x1c0/0x1c0 [ 1175.447009] ? mutex_trylock+0x152/0x1a0 [ 1175.451068] __alloc_pages_nodemask+0x23e1/0x2720 [ 1175.455930] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1175.460795] alloc_pages_current+0x155/0x260 [ 1175.465207] filemap_fault+0x11a1/0x1ad0 [ 1175.468979] systemd-journal: page allocation failure: order:0, mode:0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask= [ 1175.469300] ext4_filemap_fault+0x84/0xb0 [ 1175.469311] __do_fault+0xfa/0x380 [ 1175.488087] __handle_mm_fault+0x2497/0x4620 [ 1175.492496] ? vm_insert_page+0x7c0/0x7c0 [ 1175.496644] ? lock_downgrade+0x740/0x740 [ 1175.500795] ? mark_held_locks+0xa6/0xf0 [ 1175.502134] (null) [ 1175.504871] handle_mm_fault+0x455/0x9c0 [ 1175.504884] __do_page_fault+0x549/0xad0 [ 1175.504897] ? spurious_fault+0x640/0x640 [ 1175.504905] ? do_page_fault+0x60/0x500 [ 1175.504914] ? page_fault+0x2f/0x50 [ 1175.504921] page_fault+0x45/0x50 [ 1175.504929] RIP: 0000:0x940aec [ 1175.504933] RSP: 2e000:000000c00003dec8 EFLAGS: 0043b6a0 [ 1175.522481] Mem-Info: [ 1175.525472] systemd-journal cpuset= [ 1175.538471] syz-executor.3: [ 1175.539249] / [ 1175.541646] page allocation failure: order:0 [ 1175.547361] mems_allowed=0-1 [ 1175.556682] syz-executor.4: page allocation failure: order:0 [ 1175.557652] CPU: 1 PID: 26322 Comm: systemd-journal Not tainted 4.14.230-syzkaller #0 [ 1175.557660] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1175.563502] syz-executor.2: [ 1175.571386] Call Trace: [ 1175.586318] dump_stack+0x1b2/0x281 [ 1175.589943] warn_alloc.cold+0x96/0x1cc [ 1175.593587] active_anon:12839 inactive_anon:53462 isolated_anon:0 [ 1175.593587] active_file:20 inactive_file:16 isolated_file:0 [ 1175.593587] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1175.593587] slab_reclaimable:12503 slab_unreclaimable:117383 [ 1175.593587] mapped:43889 shmem:54035 pagetables:724 bounce:0 [ 1175.593587] free:13921 free_pcp:205 free_cma:0 [ 1175.593924] ? zone_watermark_ok_safe+0x220/0x220 [ 1175.627209] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1175.631977] ? usleep_range+0x130/0x130 [ 1175.631979] (null) [ 1175.631985] syz-executor.4 cpuset= [ 1175.639066] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1175.639077] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1175.639085] ? run_timer_softirq+0x5a0/0x5a0 [ 1175.639100] __alloc_pages_nodemask+0x2127/0x2720 [ 1175.639121] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1175.643465] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1175.645220] alloc_pages_current+0x155/0x260 [ 1175.648722] (null) [ 1175.653815] filemap_fault+0x11a1/0x1ad0 [ 1175.653834] ext4_filemap_fault+0x84/0xb0 [ 1175.653844] __do_fault+0xfa/0x380 [ 1175.653854] __handle_mm_fault+0x2497/0x4620 [ 1175.659716] page allocation failure: order:0 [ 1175.663290] ? vm_insert_page+0x7c0/0x7c0 [ 1175.663301] ? __fsnotify_inode_delete+0x20/0x20 [ 1175.663310] ? __fsnotify_update_child_dentry_flags.part.0+0x2e0/0x2e0 [ 1175.663325] ? mark_held_locks+0xa6/0xf0 [ 1175.668178] syz-executor.3 cpuset= [ 1175.673344] handle_mm_fault+0x455/0x9c0 [ 1175.673357] __do_page_fault+0x549/0xad0 [ 1175.673369] ? spurious_fault+0x640/0x640 [ 1175.673385] ? do_page_fault+0x60/0x500 [ 1175.680508] / [ 1175.684907] ? page_fault+0x2f/0x50 [ 1175.687086] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1175.691087] page_fault+0x45/0x50 [ 1175.695244] mems_allowed=0-1 [ 1175.698736] RIP: 0076:0x555f8c57a958 [ 1175.703153] (null) [ 1175.707508] RSP: 3b231870:0000000000000000 EFLAGS: 7ffc3b22f670 [ 1175.710240] Mem-Info: [ 1175.711651] syz-executor.2 cpuset= [ 1175.716464] CPU: 1 PID: 26489 Comm: syz-executor.4 Not tainted 4.14.230-syzkaller #0 [ 1175.716471] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1175.716474] Call Trace: [ 1175.716493] dump_stack+0x1b2/0x281 [ 1175.716507] warn_alloc.cold+0x96/0x1cc [ 1175.716520] ? zone_watermark_ok_safe+0x220/0x220 [ 1175.716530] ? usleep_range+0x130/0x130 [ 1175.716539] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1175.716551] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1175.716562] ? run_timer_softirq+0x5a0/0x5a0 [ 1175.716578] __alloc_pages_nodemask+0x2127/0x2720 [ 1175.716593] ? lock_acquire+0x170/0x3f0 [ 1175.716609] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1175.716619] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1175.716634] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1175.716654] alloc_pages_current+0x155/0x260 [ 1175.716666] ion_page_pool_alloc+0x118/0x1b0 [ 1175.716675] ion_system_heap_allocate+0x133/0x8c0 [ 1175.716686] ? _raw_spin_unlock+0x29/0x40 [ 1175.716694] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1175.716703] ? ion_system_contig_heap_create+0x130/0x130 [ 1175.716713] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1175.716726] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1175.746793] / [ 1175.747118] ion_alloc+0x27a/0x810 [ 1175.748815] mems_allowed=0-1 [ 1175.752441] ? ion_dma_buf_release+0x40/0x40 [ 1175.759576] Node 0 active_anon:50596kB inactive_anon:157096kB active_file:72kB inactive_file:56kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:175556kB dirty:0kB writeback:0kB shmem:158988kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1175.762966] ? __might_fault+0x177/0x1b0 [ 1175.762979] ion_ioctl+0xea/0x1f0 [ 1175.762989] ? ion_query_heaps+0x360/0x360 [ 1175.766082] Node 1 active_anon:760kB inactive_anon:56752kB active_file:8kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:57152kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1175.769771] ? ion_query_heaps+0x360/0x360 [ 1175.771893] Node 0 [ 1175.777938] do_vfs_ioctl+0x75a/0xff0 [ 1175.777950] ? ioctl_preallocate+0x1a0/0x1a0 [ 1175.777961] ? lock_downgrade+0x740/0x740 [ 1175.777974] ? __fget+0x225/0x360 [ 1175.792809] / [ 1175.801099] ? do_vfs_ioctl+0xff0/0xff0 [ 1175.812816] DMA free:10976kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1175.816047] ? security_file_ioctl+0x83/0xb0 [ 1175.819992] lowmem_reserve[]: [ 1175.825080] SyS_ioctl+0x7f/0xb0 [ 1175.825090] ? do_vfs_ioctl+0xff0/0xff0 [ 1175.825102] do_syscall_64+0x1d5/0x640 [ 1175.825118] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1175.830116] mems_allowed=0-1 [ 1175.834519] RIP: 0033:0x466459 [ 1175.834524] RSP: 002b:00007fee1a099188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1175.834534] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1175.834540] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000005 [ 1175.834549] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1175.862806] 0 [ 1175.866841] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1175.871672] 2717 [ 1175.875800] R13: 00007ffe6e91304f R14: 00007fee1a099300 R15: 0000000000022000 [ 1175.881583] active_anon:12839 inactive_anon:53462 isolated_anon:0 [ 1175.881583] active_file:20 inactive_file:16 isolated_file:0 [ 1175.881583] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1175.881583] slab_reclaimable:12503 slab_unreclaimable:117383 [ 1175.881583] mapped:43889 shmem:54035 pagetables:724 bounce:0 [ 1175.881583] free:13921 free_pcp:205 free_cma:0 [ 1175.916619] CPU: 0 PID: 26484 Comm: syz-executor.3 Not tainted 4.14.230-syzkaller #0 [ 1175.939194] Node 0 active_anon:50596kB inactive_anon:157096kB active_file:72kB inactive_file:56kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:175556kB dirty:0kB writeback:0kB shmem:158988kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1175.940829] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1175.944352] Node 1 active_anon:760kB inactive_anon:56752kB active_file:8kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:57152kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1175.948521] Call Trace: [ 1176.014937] Node 0 [ 1176.028424] dump_stack+0x1b2/0x281 [ 1176.028439] warn_alloc.cold+0x96/0x1cc [ 1176.028455] ? zone_watermark_ok_safe+0x220/0x220 [ 1176.054948] DMA free:10976kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1176.056020] ? usleep_range+0x130/0x130 [ 1176.059203] lowmem_reserve[]: [ 1176.066896] ? try_to_free_pages+0x23f/0x6e0 [ 1176.066907] ? _find_next_bit+0xdb/0x100 [ 1176.066918] ? run_timer_softirq+0x5a0/0x5a0 [ 1176.066936] __alloc_pages_nodemask+0x2127/0x2720 [ 1176.102824] 0 [ 1176.107041] ? lock_acquire+0x170/0x3f0 [ 1176.192836] 2717 [ 1176.211930] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1176.211942] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1176.211957] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1176.211975] alloc_pages_current+0x155/0x260 [ 1176.211987] ion_page_pool_alloc+0x118/0x1b0 [ 1176.211996] ion_system_heap_allocate+0x133/0x8c0 [ 1176.212004] ? ion_alloc+0x187/0x810 [ 1176.212015] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1176.212025] ? ion_system_contig_heap_create+0x130/0x130 [ 1176.212038] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1176.272833] 2718 [ 1176.274599] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1176.279427] 2718 [ 1176.281234] ion_alloc+0x204/0x810 [ 1176.310572] 2718 [ 1176.310801] ? ion_dma_buf_release+0x40/0x40 [ 1176.319364] ? __might_fault+0x177/0x1b0 [ 1176.342837] Node 0 [ 1176.344243] ion_ioctl+0xea/0x1f0 [ 1176.347770] DMA32 free:37308kB min:36200kB low:45248kB high:54296kB active_anon:50596kB inactive_anon:157096kB active_file:0kB inactive_file:56kB unevictable:0kB writepending:0kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:7648kB pagetables:2852kB bounce:0kB free_pcp:1308kB local_pcp:728kB free_cma:0kB [ 1176.349828] ? ion_query_heaps+0x360/0x360 [ 1176.362824] lowmem_reserve[]: [ 1176.364024] ? ion_query_heaps+0x360/0x360 [ 1176.404090] do_vfs_ioctl+0x75a/0xff0 [ 1176.407937] ? ioctl_preallocate+0x1a0/0x1a0 [ 1176.412345] ? lock_downgrade+0x740/0x740 [ 1176.416514] ? __fget+0x225/0x360 [ 1176.419968] ? do_vfs_ioctl+0xff0/0xff0 [ 1176.422892] 0 [ 1176.423971] ? security_file_ioctl+0x83/0xb0 [ 1176.423980] 0 [ 1176.425774] SyS_ioctl+0x7f/0xb0 [ 1176.425784] ? do_vfs_ioctl+0xff0/0xff0 [ 1176.425794] do_syscall_64+0x1d5/0x640 [ 1176.425808] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1176.425816] RIP: 0033:0x466459 [ 1176.425820] RSP: 002b:00007f8a667e8188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1176.425830] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1176.425834] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000005 [ 1176.425839] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1176.425843] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1176.425848] R13: 00007ffd25ba1ddf R14: 00007f8a667e8300 R15: 0000000000022000 [ 1176.473013] 2718 [ 1176.477273] CPU: 1 PID: 26481 Comm: syz-executor.2 Not tainted 4.14.230-syzkaller #0 [ 1176.502905] 2718 [ 1176.507003] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1176.507014] 2718 [ 1176.509061] Call Trace: [ 1176.523090] dump_stack+0x1b2/0x281 [ 1176.526722] warn_alloc.cold+0x96/0x1cc [ 1176.530707] ? zone_watermark_ok_safe+0x220/0x220 [ 1176.535555] ? usleep_range+0x130/0x130 [ 1176.539537] ? try_to_free_pages+0x23f/0x6e0 [ 1176.543941] ? _find_next_bit+0xdb/0x100 [ 1176.548030] ? run_timer_softirq+0x5a0/0x5a0 [ 1176.552452] __alloc_pages_nodemask+0x2127/0x2720 [ 1176.557392] Node 0 [ 1176.557404] ? lock_acquire+0x170/0x3f0 [ 1176.557419] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1176.559655] DMA32 free:45132kB min:36200kB low:45248kB high:54296kB active_anon:50536kB inactive_anon:157096kB active_file:40kB inactive_file:840kB unevictable:0kB writepending:0kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:7584kB pagetables:2852kB bounce:0kB free_pcp:848kB local_pcp:120kB free_cma:0kB [ 1176.563602] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1176.563624] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1176.563644] alloc_pages_current+0x155/0x260 [ 1176.602822] lowmem_reserve[]: [ 1176.606879] ion_page_pool_alloc+0x118/0x1b0 [ 1176.611249] 0 [ 1176.614346] ion_system_heap_allocate+0x133/0x8c0 [ 1176.614356] ? ion_alloc+0x187/0x810 [ 1176.614368] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1176.614378] ? ion_system_contig_heap_create+0x130/0x130 [ 1176.640004] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1176.645055] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1176.649894] ion_alloc+0x204/0x810 [ 1176.653434] ? ion_dma_buf_release+0x40/0x40 [ 1176.657851] ? __might_fault+0x177/0x1b0 [ 1176.661907] ion_ioctl+0xea/0x1f0 [ 1176.665378] ? ion_query_heaps+0x360/0x360 [ 1176.669609] ? ion_query_heaps+0x360/0x360 [ 1176.673871] do_vfs_ioctl+0x75a/0xff0 [ 1176.677673] ? ioctl_preallocate+0x1a0/0x1a0 [ 1176.682089] ? lock_downgrade+0x740/0x740 [ 1176.686336] ? __fget+0x225/0x360 [ 1176.689785] ? do_vfs_ioctl+0xff0/0xff0 [ 1176.693751] ? security_file_ioctl+0x83/0xb0 [ 1176.698154] SyS_ioctl+0x7f/0xb0 [ 1176.701518] ? do_vfs_ioctl+0xff0/0xff0 [ 1176.705490] do_syscall_64+0x1d5/0x640 [ 1176.709376] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1176.714559] RIP: 0033:0x466459 [ 1176.717756] RSP: 002b:00007f0eae9d3188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1176.725481] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1176.733004] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000005 [ 1176.740263] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1176.747525] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1176.754788] R13: 00007ffd6e9adf1f R14: 00007f0eae9d3300 R15: 0000000000022000 [ 1176.764947] 0 0 0 [ 1176.767633] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1176.782828] 0 [ 1176.793770] lowmem_reserve[]: 0 0 0 0 0 [ 1176.800834] Node 1 Normal free:154120kB min:53696kB low:67120kB high:80544kB active_anon:760kB inactive_anon:56752kB active_file:8kB inactive_file:908kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:128kB pagetables:44kB bounce:0kB free_pcp:212kB local_pcp:48kB free_cma:0kB [ 1176.807109] 0 [ 1176.830056] lowmem_reserve[]: 0 0 0 0 0 [ 1176.838541] Node 0 DMA: 2*4kB (UE) 1*8kB (U) 1*16kB (U) 18*32kB (UE) 14*64kB (UE) 10*128kB (UE) 2*256kB (UE) 1*512kB (E) 3*1024kB (UE) 2*2048kB (M) 0*4096kB = 10976kB [ 1176.854367] Node 0 DMA32: 2205*4kB (UME) 975*8kB (UME) 438*16kB (UME) 85*32kB (UME) 102*64kB (UM) 51*128kB (UM) 19*256kB (U) 0*512kB 1*1024kB (U) 0*2048kB 0*4096kB = 45292kB [ 1176.855365] 0 [ 1176.871290] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1176.885133] Node 1 Normal: 2*4kB (UM) 1*8kB (M) 1*16kB (M) 2*32kB (UM) 1*64kB (M) 0*128kB 255*256kB (UM) 8*512kB (UM) 25*1024kB (U) 14*2048kB (U) 0*4096kB = 123808kB [ 1176.895385] 0 [ 1176.901446] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1176.911575] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1176.911683] Node 0 [ 1176.920284] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1176.920295] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1176.920299] 55095 total pagecache pages [ 1176.920309] 0 pages in swap cache [ 1176.920314] Swap cache stats: add 0, delete 0, find 0/0 [ 1176.920318] Free swap = 0kB [ 1176.920320] Total swap = 0kB [ 1176.920327] 2097051 pages RAM [ 1176.920330] 0 pages HighMem/MovableOnly [ 1176.920333] 363848 pages reserved [ 1176.920336] 0 pages cma reserved [ 1176.921860] warn_alloc_show_mem: 1 callbacks suppressed [ 1176.921864] Mem-Info: [ 1176.940900] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1176.985158] active_anon:12824 inactive_anon:53462 isolated_anon:0 [ 1176.985158] active_file:12 inactive_file:1237 isolated_file:0 [ 1176.985158] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1176.985158] slab_reclaimable:12503 slab_unreclaimable:117306 [ 1176.985158] mapped:44739 shmem:54035 pagetables:724 bounce:0 [ 1176.985158] free:35245 free_pcp:283 free_cma:0 [ 1177.010845] lowmem_reserve[]: 0 0 0 0 0 [ 1177.055829] Node 1 Normal free:72304kB min:53696kB low:67120kB high:80544kB active_anon:760kB inactive_anon:56752kB active_file:132kB inactive_file:4428kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:128kB pagetables:44kB bounce:0kB free_pcp:292kB local_pcp:160kB free_cma:0kB [ 1177.097912] Node 0 active_anon:50536kB inactive_anon:157096kB active_file:240kB inactive_file:720kB unevictable:0kB isolated(anon):0kB isolated(file):100kB mapped:176372kB dirty:0kB writeback:0kB shmem:158988kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1177.103959] lowmem_reserve[]: 0 0 0 0 0 [ 1177.131228] Node 0 DMA: 2*4kB (UE) 7*8kB (U) 2*16kB (U) 19*32kB (UE) 14*64kB (UE) 10*128kB (UE) 2*256kB (UE) 1*512kB (E) 3*1024kB (UE) 2*2048kB (M) 0*4096kB = 11072kB [ 1177.171390] Node 0 DMA32: 226*4kB (UME) 860*8kB (UME) 440*16kB (UME) 85*32kB (UME) 102*64kB (UM) 51*128kB (UM) 19*256kB (U) 0*512kB 1*1024kB (U) 0*2048kB 0*4096kB = 36488kB [ 1177.173501] Node 1 active_anon:760kB inactive_anon:56752kB active_file:24kB inactive_file:108kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:57152kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1177.196223] Node 0 [ 1177.214794] Node 0 DMA free:11072kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1177.218546] Normal: [ 1177.244575] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1177.248055] 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1177.253061] Node 0 DMA32 free:36148kB min:36200kB low:45248kB high:54296kB active_anon:50536kB inactive_anon:157096kB active_file:140kB inactive_file:404kB unevictable:0kB writepending:0kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:7584kB pagetables:2852kB bounce:0kB free_pcp:628kB local_pcp:120kB free_cma:0kB [ 1177.262387] Node 1 Normal: 25*4kB (UM) 52*8kB (UM) 46*16kB (UM) 30*32kB (UM) 9*64kB (UM) 4*128kB (UM) 2*256kB (M) 1*512kB (M) 22*1024kB (UM) 13*2048kB (U) 0*4096kB = 53476kB [ 1177.322091] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1177.331254] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1177.339511] lowmem_reserve[]: 0 0 0 0 0 [ 1177.343714] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1177.348027] Node 0 [ 1177.352642] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1177.352663] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1177.359152] 54089 total pagecache pages [ 1177.376495] lowmem_reserve[]: [ 1177.397134] 0 pages in swap cache [ 1177.404927] 0 0 0 0 0 [ 1177.407454] Node 1 Normal free:53192kB min:53696kB low:67120kB high:80544kB active_anon:760kB inactive_anon:56752kB active_file:24kB inactive_file:0kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:128kB pagetables:44kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1177.408488] Swap cache stats: add 0, delete 0, find 0/0 [ 1177.443443] Free swap = 0kB [ 1177.446467] Total swap = 0kB [ 1177.449478] 2097051 pages RAM [ 1177.449572] lowmem_reserve[]: [ 1177.452584] 0 pages HighMem/MovableOnly [ 1177.452591] 363848 pages reserved [ 1177.460132] 0 0 0 0 0 [ 1177.474311] 0 pages cma reserved [ 1177.479049] Out of memory (oom_kill_allocating_task): Kill process 7975 (syz-fuzzer) score 0 or sacrifice child [ 1177.482352] Node 0 DMA: 2*4kB (UE) 7*8kB (U) 2*16kB (U) 19*32kB (UE) 14*64kB (UE) 10*128kB (UE) 2*256kB (UE) 1*512kB (E) 3*1024kB (UE) 2*2048kB (M) 0*4096kB = 11072kB [ 1177.512918] Killed process 25771 (syz-executor.2) total-vm:84924kB, anon-rss:64kB, file-rss:0kB, shmem-rss:0kB [ 1177.540678] Node 0 DMA32: 477*4kB (UME) 738*8kB (UME) 440*16kB (UME) 85*32kB (UME) 102*64kB (UM) 51*128kB (UM) 19*256kB (U) 0*512kB 1*1024kB (U) 0*2048kB 0*4096kB = 36516kB [ 1177.579849] oom_reaper: reaped process 26481 (syz-executor.2), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1177.604183] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1177.649092] oom_reaper: reaped process 25771 (syz-executor.2), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1177.661329] Node 1 Normal: 48*4kB (M) 18*8kB (UM) 11*16kB (UM) 3*32kB (UM) 13*64kB (UM) 8*128kB (UM) 3*256kB (M) 2*512kB (M) 20*1024kB (U) 14*2048kB (UM) 0*4096kB = 53408kB [ 1177.727733] oom_reaper: reaped process 26484 (syz-executor.3), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1177.747652] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1177.761575] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1177.782001] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1177.796958] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1177.807214] 54283 total pagecache pages [ 1177.812651] 0 pages in swap cache [ 1177.818201] Swap cache stats: add 0, delete 0, find 0/0 [ 1177.820828] syz-fuzzer invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1177.845748] Free swap = 0kB [ 1177.845753] Total swap = 0kB [ 1177.845761] 2097051 pages RAM [ 1177.845764] 0 pages HighMem/MovableOnly [ 1177.845767] 363848 pages reserved [ 1177.845770] 0 pages cma reserved [ 1177.933213] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 1177.938043] CPU: 1 PID: 7978 Comm: syz-fuzzer Not tainted 4.14.230-syzkaller #0 [ 1177.938618] syz-executor.3: [ 1177.945503] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1177.945508] Call Trace: [ 1177.945558] dump_stack+0x1b2/0x281 [ 1177.945572] dump_header+0x178/0x82f [ 1177.948579] page allocation failure: order:4 [ 1177.957925] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1177.957935] ? ___ratelimit+0x2cd/0x530 [ 1177.957950] oom_kill_process.cold+0x10/0xa40 [ 1177.960563] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1177.964229] out_of_memory+0xe3e/0x1190 [ 1177.964243] ? oom_killer_disable+0x1c0/0x1c0 [ 1177.967931] (null) [ 1177.972353] ? mutex_trylock+0x152/0x1a0 [ 1177.977452] syz-executor.3 cpuset= [ 1177.981669] __alloc_pages_nodemask+0x23e1/0x2720 [ 1177.986169] / [ 1177.993249] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1177.997210] mems_allowed=0-1 [ 1178.001702] alloc_pages_current+0x155/0x260 [ 1178.030231] filemap_fault+0x11a1/0x1ad0 [ 1178.034313] ext4_filemap_fault+0x84/0xb0 [ 1178.038465] __do_fault+0xfa/0x380 [ 1178.041993] __handle_mm_fault+0x2497/0x4620 [ 1178.046409] ? vm_insert_page+0x7c0/0x7c0 [ 1178.050561] ? mark_held_locks+0xa6/0xf0 [ 1178.054626] handle_mm_fault+0x455/0x9c0 [ 1178.058693] __do_page_fault+0x549/0xad0 [ 1178.062749] ? spurious_fault+0x640/0x640 [ 1178.066892] ? do_page_fault+0x60/0x500 [ 1178.070868] ? page_fault+0x2f/0x50 [ 1178.074506] page_fault+0x45/0x50 [ 1178.077961] RIP: 2a8300:0xc00077d620 [ 1178.081677] RSP: 000c:000000c00039b7c0 EFLAGS: 00000003 [ 1178.081702] CPU: 0 PID: 26484 Comm: syz-executor.3 Not tainted 4.14.230-syzkaller #0 [ 1178.094932] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1178.104279] Call Trace: [ 1178.106891] dump_stack+0x1b2/0x281 [ 1178.110536] warn_alloc.cold+0x96/0x1cc [ 1178.114510] ? zone_watermark_ok_safe+0x220/0x220 [ 1178.119366] __alloc_pages_nodemask+0x2127/0x2720 [ 1178.124207] ? io_schedule_timeout+0x140/0x140 [ 1178.128795] ? lock_acquire+0x170/0x3f0 [ 1178.132768] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1178.137613] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1178.143064] ? __mutex_unlock_slowpath+0x75/0x770 [ 1178.147912] alloc_pages_current+0x155/0x260 [ 1178.152325] ion_page_pool_alloc+0x118/0x1b0 [ 1178.156732] ion_system_heap_allocate+0x133/0x8c0 [ 1178.161574] ? _raw_spin_unlock+0x29/0x40 [ 1178.165718] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1178.170649] ? ion_system_contig_heap_create+0x130/0x130 [ 1178.176098] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1178.181111] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1178.185975] ion_alloc+0x27a/0x810 [ 1178.189514] ? ion_dma_buf_release+0x40/0x40 [ 1178.193923] ? __might_fault+0x177/0x1b0 [ 1178.197983] ion_ioctl+0xea/0x1f0 [ 1178.201430] ? ion_query_heaps+0x360/0x360 [ 1178.205665] ? ion_query_heaps+0x360/0x360 [ 1178.209897] do_vfs_ioctl+0x75a/0xff0 [ 1178.213716] ? ioctl_preallocate+0x1a0/0x1a0 [ 1178.218119] ? lock_downgrade+0x740/0x740 [ 1178.222264] ? __fget+0x225/0x360 [ 1178.225713] ? do_vfs_ioctl+0xff0/0xff0 [ 1178.229683] ? security_file_ioctl+0x83/0xb0 [ 1178.233204] Mem-Info: [ 1178.234085] SyS_ioctl+0x7f/0xb0 [ 1178.234095] ? do_vfs_ioctl+0xff0/0xff0 [ 1178.236515] active_anon:12734 inactive_anon:53461 isolated_anon:0 [ 1178.236515] active_file:44 inactive_file:0 isolated_file:0 [ 1178.236515] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1178.236515] slab_reclaimable:12489 slab_unreclaimable:116823 [ 1178.236515] mapped:34836 shmem:54035 pagetables:628 bounce:0 [ 1178.236515] free:14123 free_pcp:6 free_cma:0 [ 1178.239857] do_syscall_64+0x1d5/0x640 [ 1178.253261] Node 0 active_anon:50188kB inactive_anon:157092kB active_file:76kB inactive_file:40kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:139364kB dirty:0kB writeback:0kB shmem:158988kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1178.276792] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1178.276802] RIP: 0033:0x466459 [ 1178.276807] RSP: 002b:00007f8a667e8188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1178.276817] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1178.276822] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000005 [ 1178.276827] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1178.276832] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1178.276837] R13: 00007ffd25ba1ddf R14: 00007f8a667e8300 R15: 0000000000022000 [ 1178.372866] warn_alloc_show_mem: 1 callbacks suppressed [ 1178.372870] Mem-Info: [ 1178.382948] Node 1 active_anon:748kB inactive_anon:56752kB active_file:8kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:57152kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1178.387502] active_anon:12734 inactive_anon:53461 isolated_anon:0 [ 1178.387502] active_file:17 inactive_file:17 isolated_file:0 [ 1178.387502] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1178.387502] slab_reclaimable:12486 slab_unreclaimable:116825 [ 1178.387502] mapped:34817 shmem:54035 pagetables:628 bounce:0 [ 1178.387502] free:14059 free_pcp:6 free_cma:0 [ 1178.410789] Node 0 DMA free:11008kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1178.474027] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1178.482853] Node 0 DMA32 free:18432kB min:36200kB low:45248kB high:54296kB active_anon:50188kB inactive_anon:157092kB active_file:60kB inactive_file:60kB unevictable:0kB writepending:0kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:7520kB pagetables:2468kB bounce:0kB free_pcp:24kB local_pcp:24kB free_cma:0kB [ 1178.482873] lowmem_reserve[]: 0 0 0 0 0 [ 1178.482892] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1178.482909] lowmem_reserve[]: 0 0 0 0 0 [ 1178.482937] Node 1 Normal free:26796kB min:53696kB low:67120kB high:80544kB active_anon:748kB inactive_anon:56752kB active_file:8kB inactive_file:8kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:128kB pagetables:44kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1178.482960] lowmem_reserve[]: [ 1178.553770] Node 0 active_anon:50188kB inactive_anon:157092kB active_file:60kB inactive_file:60kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:139268kB dirty:0kB writeback:0kB shmem:158988kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1178.579010] syz-executor.2: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1178.615657] Node 1 active_anon:748kB inactive_anon:56752kB active_file:8kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:57152kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1178.622218] syz-executor.2 cpuset= [ 1178.645641] Node 0 DMA free:11008kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1178.650440] / [ 1178.677185] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1178.679925] 0 [ 1178.684320] Node 0 DMA32 free:18432kB min:36200kB low:45248kB high:54296kB active_anon:50188kB inactive_anon:157092kB active_file:56kB inactive_file:36kB unevictable:0kB writepending:0kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:7520kB pagetables:2468kB bounce:0kB free_pcp:24kB local_pcp:0kB free_cma:0kB [ 1178.687540] 0 [ 1178.716901] lowmem_reserve[]: 0 0 0 0 0 [ 1178.719615] mems_allowed=0-1 [ 1178.722701] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1178.725863] CPU: 1 PID: 26481 Comm: syz-executor.2 Not tainted 4.14.230-syzkaller #0 [ 1178.725871] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1178.751425] lowmem_reserve[]: [ 1178.759247] Call Trace: [ 1178.759271] dump_stack+0x1b2/0x281 [ 1178.759285] warn_alloc.cold+0x96/0x1cc [ 1178.768637] 0 [ 1178.771715] ? zone_watermark_ok_safe+0x220/0x220 [ 1178.774294] 0 [ 1178.777902] __alloc_pages_nodemask+0x2127/0x2720 [ 1178.781834] 0 0 [ 1178.783629] ? lock_acquire+0x170/0x3f0 [ 1178.783643] ? lock_acquire+0x170/0x3f0 [ 1178.783659] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1178.788473] 0 [ 1178.790270] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1178.797071] ? __mutex_unlock_slowpath+0x75/0x770 [ 1178.801032] Node 1 [ 1178.805014] alloc_pages_current+0x155/0x260 [ 1178.805030] ion_page_pool_alloc+0x118/0x1b0 [ 1178.805040] ion_system_heap_allocate+0x133/0x8c0 [ 1178.809898] Normal free:26796kB min:53696kB low:67120kB high:80544kB active_anon:748kB inactive_anon:56752kB active_file:8kB inactive_file:8kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:128kB pagetables:44kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1178.811673] ? _raw_spin_unlock+0x29/0x40 [ 1178.817144] lowmem_reserve[]: [ 1178.821952] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1178.824185] 0 [ 1178.828559] ? ion_system_contig_heap_create+0x130/0x130 [ 1178.832998] 0 [ 1178.837795] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1178.865264] 0 [ 1178.869367] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1178.872553] 0 [ 1178.877484] ion_alloc+0x27a/0x810 [ 1178.879285] 0 [ 1178.884725] ? ion_dma_buf_release+0x40/0x40 [ 1178.884739] ? __might_fault+0x177/0x1b0 [ 1178.891555] ion_ioctl+0xea/0x1f0 [ 1178.893357] Node 0 [ 1178.898159] ? ion_query_heaps+0x360/0x360 [ 1178.899953] DMA: [ 1178.903478] ? ion_query_heaps+0x360/0x360 [ 1178.903495] do_vfs_ioctl+0x75a/0xff0 [ 1178.903508] ? ioctl_preallocate+0x1a0/0x1a0 [ 1178.905289] 2*4kB [ 1178.909767] ? lock_downgrade+0x740/0x740 [ 1178.913845] (UE) [ 1178.917269] ? __fget+0x225/0x360 [ 1178.919476] 7*8kB [ 1178.923699] ? do_vfs_ioctl+0xff0/0xff0 [ 1178.923712] ? security_file_ioctl+0x83/0xb0 [ 1178.923722] SyS_ioctl+0x7f/0xb0 [ 1178.923731] ? do_vfs_ioctl+0xff0/0xff0 [ 1178.925773] (U) [ 1178.929992] do_syscall_64+0x1d5/0x640 [ 1178.933791] 2*16kB [ 1178.938169] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1178.940285] (U) [ 1178.944435] RIP: 0033:0x466459 [ 1178.944441] RSP: 002b:00007f0eae9d3188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1178.944451] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1178.944459] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000005 [ 1178.946502] 19*32kB [ 1178.949931] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1178.949939] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1178.952067] (UE) [ 1178.956018] R13: 00007ffd6e9adf1f R14: 00007f0eae9d3300 R15: 0000000000022000 [ 1178.961295] 0 [ 1178.966379] 13*64kB [ 1178.968140] 0 [ 1178.969804] (UE) [ 1178.978135] 0 [ 1178.981168] 10*128kB [ 1178.983193] Node 0 DMA: 2*4kB (UE) 7*8kB (U) 2*16kB (U) 19*32kB (UE) 13*64kB (UE) 10*128kB (UE) 2*256kB (UE) 1*512kB (E) [ 1178.988254] (UE) [ 1178.998618] 3*1024kB [ 1179.001445] 2*256kB [ 1179.008801] (UE) 2*2048kB (M) [ 1179.013037] (UE) [ 1179.022938] 0*4096kB [ 1179.027485] 1*512kB [ 1179.027763] = 11008kB [ 1179.035057] (E) 3*1024kB (UE) 2*2048kB (M) 0*4096kB = 11008kB [ 1179.035083] Node 0 DMA32: 616*4kB (UME) 752*8kB (UME) 446*16kB (UME) 88*32kB (UME) [ 1179.040975] Node 0 [ 1179.041026] 0*64kB [ 1179.043403] DMA32: [ 1179.046674] 0*128kB [ 1179.047386] 616*4kB [ 1179.058518] 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18432kB [ 1179.058541] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1179.065083] (UME) [ 1179.067266] Node 1 [ 1179.068635] 752*8kB [ 1179.070784] Normal: [ 1179.075133] (UME) [ 1179.075544] 51*4kB [ 1179.077971] 446*16kB [ 1179.084449] (UM) [ 1179.095140] (UME) [ 1179.096825] 23*8kB [ 1179.098497] 88*32kB [ 1179.100798] (UM) [ 1179.106552] (UME) [ 1179.109285] 11*16kB [ 1179.122317] 0*64kB [ 1179.124382] (UM) 3*32kB (UM) 13*64kB (UM) 8*128kB (UM) [ 1179.130496] 0*128kB [ 1179.131160] 3*256kB (M) [ 1179.135699] 0*256kB [ 1179.135824] 2*512kB [ 1179.137871] 0*512kB [ 1179.140005] (M) [ 1179.142221] 0*1024kB [ 1179.144564] 0*1024kB 11*2048kB (UM) 0*4096kB = 26836kB [ 1179.144588] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1179.144595] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1179.144604] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1179.150389] 0*2048kB [ 1179.151098] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1179.155712] 0*4096kB [ 1179.158747] 54069 total pagecache pages [ 1179.161052] = 18432kB [ 1179.163763] 0 pages in swap cache [ 1179.163769] Swap cache stats: add 0, delete 0, find 0/0 [ 1179.163775] Free swap = 0kB [ 1179.170204] Node 0 [ 1179.170740] Total swap = 0kB [ 1179.172697] Normal: [ 1179.175179] 2097051 pages RAM [ 1179.175183] 0 pages HighMem/MovableOnly [ 1179.175186] 363848 pages reserved [ 1179.175190] 0 pages cma reserved [ 1179.267998] 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1179.279861] Node 1 Normal: 51*4kB (UM) 23*8kB (UM) 11*16kB (UM) 3*32kB (UM) 13*64kB (UM) 8*128kB (UM) 3*256kB (M) 2*512kB (M) 0*1024kB 11*2048kB (UM) 0*4096kB = 26836kB [ 1179.301855] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1179.310747] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1179.331044] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1179.342888] syz-executor.2: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1179.354812] syz-executor.3: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1179.357048] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1179.372682] syz-executor.2 cpuset= [ 1179.375473] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 1179.390502] 54069 total pagecache pages [ 1179.391621] / mems_allowed=0-1 [ 1179.397788] CPU: 0 PID: 26481 Comm: syz-executor.2 Not tainted 4.14.230-syzkaller #0 [ 1179.400873] 0 pages in swap cache [ 1179.405671] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1179.405676] Call Trace: [ 1179.405696] dump_stack+0x1b2/0x281 [ 1179.405711] warn_alloc.cold+0x96/0x1cc [ 1179.405723] ? zone_watermark_ok_safe+0x220/0x220 [ 1179.405733] ? usleep_range+0x130/0x130 [ 1179.405743] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1179.405756] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1179.405766] ? run_timer_softirq+0x5a0/0x5a0 [ 1179.426312] Swap cache stats: add 0, delete 0, find 0/0 [ 1179.428758] __alloc_pages_nodemask+0x2127/0x2720 [ 1179.448276] Free swap = 0kB [ 1179.452064] ? lock_acquire+0x170/0x3f0 [ 1179.469229] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1179.472067] Total swap = 0kB [ 1179.474069] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1179.474087] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1179.474106] alloc_pages_current+0x155/0x260 [ 1179.474119] ion_page_pool_alloc+0x118/0x1b0 [ 1179.474130] ion_system_heap_allocate+0x133/0x8c0 [ 1179.474141] ? _raw_spin_unlock+0x29/0x40 [ 1179.474149] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1179.474157] ? ion_system_contig_heap_create+0x130/0x130 [ 1179.474167] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1179.474178] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1179.474188] ion_alloc+0x27a/0x810 [ 1179.474201] ? ion_dma_buf_release+0x40/0x40 [ 1179.474215] ? __might_fault+0x177/0x1b0 [ 1179.481618] 2097051 pages RAM [ 1179.481708] ion_ioctl+0xea/0x1f0 [ 1179.501791] 0 pages HighMem/MovableOnly [ 1179.504909] ? ion_query_heaps+0x360/0x360 [ 1179.504922] ? ion_query_heaps+0x360/0x360 [ 1179.504940] do_vfs_ioctl+0x75a/0xff0 [ 1179.504951] ? ioctl_preallocate+0x1a0/0x1a0 [ 1179.504961] ? lock_downgrade+0x740/0x740 [ 1179.504974] ? __fget+0x225/0x360 [ 1179.504984] ? do_vfs_ioctl+0xff0/0xff0 [ 1179.526066] 363848 pages reserved [ 1179.528697] ? security_file_ioctl+0x83/0xb0 [ 1179.542679] 0 pages cma reserved [ 1179.543670] SyS_ioctl+0x7f/0xb0 [ 1179.543680] ? do_vfs_ioctl+0xff0/0xff0 [ 1179.543692] do_syscall_64+0x1d5/0x640 [ 1179.543707] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1179.543715] RIP: 0033:0x466459 [ 1179.543720] RSP: 002b:00007f0eae9d3188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1179.543730] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1179.543735] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000005 [ 1179.543743] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1179.551978] Out of memory (oom_kill_allocating_task): Kill process 7978 (syz-fuzzer) score 0 or sacrifice child [ 1179.556165] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1179.556172] R13: 00007ffd6e9adf1f R14: 00007f0eae9d3300 R15: 0000000000022000 [ 1179.563608] CPU: 0 PID: 26484 Comm: syz-executor.3 Not tainted 4.14.230-syzkaller #0 [ 1179.579282] Killed process 9479 (syz-executor.5) total-vm:84924kB, anon-rss:60kB, file-rss:0kB, shmem-rss:0kB [ 1179.579544] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1179.632057] oom_reaper: reaped process 9479 (syz-executor.5), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1179.636295] Call Trace: [ 1179.636319] dump_stack+0x1b2/0x281 [ 1179.636333] warn_alloc.cold+0x96/0x1cc [ 1179.636344] ? zone_watermark_ok_safe+0x220/0x220 [ 1179.636354] ? usleep_range+0x130/0x130 [ 1179.636363] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1179.636375] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1179.636385] ? run_timer_softirq+0x5a0/0x5a0 [ 1179.636401] __alloc_pages_nodemask+0x2127/0x2720 [ 1179.636417] ? lock_acquire+0x170/0x3f0 [ 1179.675334] kworker/u4:5 invoked oom-killer: gfp_mask=0x14142c0(GFP_KERNEL|__GFP_NOWARN|__GFP_COMP|__GFP_NOMEMALLOC), nodemask= [ 1179.679262] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1179.705989] (null) [ 1179.708916] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1179.722027] , order=1, oom_score_adj=0 [ 1179.723140] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1179.723162] alloc_pages_current+0x155/0x260 [ 1179.723176] ion_page_pool_alloc+0x118/0x1b0 [ 1179.723187] ion_system_heap_allocate+0x133/0x8c0 [ 1179.723198] ? _raw_spin_unlock+0x29/0x40 [ 1179.742406] kworker/u4:5 cpuset= [ 1179.752979] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1179.752990] ? ion_system_contig_heap_create+0x130/0x130 [ 1179.753001] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1179.753012] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1179.753024] ion_alloc+0x27a/0x810 [ 1179.753039] ? ion_dma_buf_release+0x40/0x40 [ 1179.753052] ? __might_fault+0x177/0x1b0 [ 1179.753064] ion_ioctl+0xea/0x1f0 [ 1179.753072] ? ion_query_heaps+0x360/0x360 [ 1179.753083] ? ion_query_heaps+0x360/0x360 [ 1179.753093] do_vfs_ioctl+0x75a/0xff0 [ 1179.753104] ? ioctl_preallocate+0x1a0/0x1a0 [ 1179.771809] / [ 1179.773972] ? lock_downgrade+0x740/0x740 [ 1179.773989] ? __fget+0x225/0x360 [ 1179.780612] mems_allowed=0-1 [ 1179.782879] ? do_vfs_ioctl+0xff0/0xff0 [ 1179.782892] ? security_file_ioctl+0x83/0xb0 [ 1179.782902] SyS_ioctl+0x7f/0xb0 [ 1179.782912] ? do_vfs_ioctl+0xff0/0xff0 [ 1179.782931] do_syscall_64+0x1d5/0x640 [ 1179.782947] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1179.782956] RIP: 0033:0x466459 [ 1179.782964] RSP: 002b:00007f8a667e8188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1179.896458] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1179.903748] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000005 [ 1179.911011] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1179.918446] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1179.925711] R13: 00007ffd25ba1ddf R14: 00007f8a667e8300 R15: 0000000000022000 [ 1179.937299] CPU: 1 PID: 8922 Comm: kworker/u4:5 Not tainted 4.14.230-syzkaller #0 [ 1179.944934] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1179.950621] warn_alloc_show_mem: 1 callbacks suppressed [ 1179.950625] Mem-Info: [ 1179.954300] Workqueue: netns cleanup_net [ 1179.954308] Call Trace: [ 1179.954322] dump_stack+0x1b2/0x281 [ 1179.954335] dump_header+0x178/0x82f [ 1179.959707] active_anon:12722 inactive_anon:53461 isolated_anon:0 [ 1179.959707] active_file:14 inactive_file:20 isolated_file:0 [ 1179.959707] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1179.959707] slab_reclaimable:12486 slab_unreclaimable:116811 [ 1179.959707] mapped:34817 shmem:54035 pagetables:628 bounce:0 [ 1179.959707] free:13982 free_pcp:48 free_cma:0 [ 1179.962113] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1179.966187] Node 0 active_anon:50140kB inactive_anon:157092kB active_file:52kB inactive_file:68kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:139268kB dirty:0kB writeback:0kB shmem:158988kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1179.968733] ? ___ratelimit+0x2cd/0x530 [ 1179.972345] Node 1 active_anon:748kB inactive_anon:56752kB active_file:4kB inactive_file:12kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:57152kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1179.976048] oom_kill_process.cold+0x10/0xa40 [ 1179.976062] ? lock_downgrade+0x740/0x740 [ 1179.976091] out_of_memory+0x2dc/0x1190 [ 1180.009646] Node 0 [ 1180.014332] ? oom_killer_disable+0x1c0/0x1c0 [ 1180.014344] ? mutex_trylock+0x152/0x1a0 [ 1180.042230] DMA free:10968kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1180.046154] __alloc_pages_nodemask+0x23e1/0x2720 [ 1180.046177] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1180.072818] lowmem_reserve[]: [ 1180.077280] ? ops_exit_list+0xa5/0x150 [ 1180.081397] 0 [ 1180.085352] ? cleanup_net+0x3b3/0x840 [ 1180.085362] ? process_one_work+0x793/0x14a0 [ 1180.085378] ? mark_held_locks+0xa6/0xf0 [ 1180.087608] 2717 [ 1180.092098] ? cache_grow_begin+0x3f/0x700 [ 1180.096151] 2718 [ 1180.121629] cache_grow_begin+0x91/0x700 [ 1180.121643] fallback_alloc+0x207/0x2c0 [ 1180.121656] kmem_cache_alloc_node_trace+0xed/0x400 [ 1180.126866] 2718 [ 1180.131315] __kmalloc_node_track_caller+0x38/0x70 [ 1180.134415] 2718 [ 1180.138362] __alloc_skb+0x96/0x510 [ 1180.144029] rtmsg_ifinfo_build_skb+0x65/0x130 [ 1180.144039] rtmsg_ifinfo+0x68/0x100 [ 1180.144051] dev_close_many+0x2bf/0x5f0 [ 1180.148441] Node 0 [ 1180.152488] ? ip_tunnel_delete_net+0x74/0x320 [ 1180.154563] DMA32 free:18124kB min:36200kB low:45248kB high:54296kB active_anon:50140kB inactive_anon:157092kB active_file:52kB inactive_file:68kB unevictable:0kB writepending:0kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:7520kB pagetables:2468kB bounce:0kB free_pcp:192kB local_pcp:120kB free_cma:0kB [ 1180.158768] ? __dev_close_many+0x270/0x270 [ 1180.160807] lowmem_reserve[]: [ 1180.164851] ? lock_acquire+0x170/0x3f0 [ 1180.164862] rollback_registered_many+0x399/0xba0 [ 1180.164875] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1180.168826] 0 [ 1180.173839] ? netdev_state_change+0xf0/0xf0 [ 1180.173849] ? debug_check_no_obj_freed+0x2c0/0x680 [ 1180.173862] unregister_netdevice_many.part.0+0x18/0x2e0 [ 1180.175907] 0 [ 1180.180820] unregister_netdevice_many+0x36/0x50 [ 1180.182882] 0 [ 1180.186493] ip_tunnel_delete_net+0x274/0x320 [ 1180.191046] 0 [ 1180.194743] ? lock_downgrade+0x740/0x740 [ 1180.194751] ? ip_tunnel_dellink+0x400/0x400 [ 1180.194763] ? vti_get_size+0x10/0x10 [ 1180.198715] 0 [ 1180.200935] ops_exit_list+0xa5/0x150 [ 1180.200945] cleanup_net+0x3b3/0x840 [ 1180.233865] ? net_drop_ns+0x70/0x70 [ 1180.233875] ? lock_acquire+0x170/0x3f0 [ 1180.233887] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1180.238596] Node 0 [ 1180.241283] process_one_work+0x793/0x14a0 [ 1180.245268] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1180.250062] ? work_busy+0x320/0x320 [ 1180.255504] lowmem_reserve[]: [ 1180.257271] ? worker_thread+0x158/0xff0 [ 1180.261758] 0 [ 1180.266770] ? _raw_spin_unlock_irq+0x24/0x80 [ 1180.266783] worker_thread+0x5cc/0xff0 [ 1180.266811] ? rescuer_thread+0xc80/0xc80 [ 1180.272813] 0 [ 1180.274587] kthread+0x30d/0x420 [ 1180.279337] 0 [ 1180.281130] ? kthread_create_on_node+0xd0/0xd0 [ 1180.285622] 0 [ 1180.287402] ret_from_fork+0x24/0x30 [ 1180.291545] 0 [ 1180.347271] Mem-Info: [ 1180.412852] active_anon:12722 inactive_anon:53461 isolated_anon:0 [ 1180.412852] active_file:17 inactive_file:317 isolated_file:0 [ 1180.412852] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1180.412852] slab_reclaimable:12486 slab_unreclaimable:116786 [ 1180.412852] mapped:34942 shmem:54035 pagetables:628 bounce:0 [ 1180.412852] free:23522 free_pcp:326 free_cma:0 [ 1180.568775] Node 1 Normal free:123336kB min:53696kB low:67120kB high:80544kB active_anon:748kB inactive_anon:56752kB active_file:8kB inactive_file:8kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:128kB pagetables:44kB bounce:0kB free_pcp:1328kB local_pcp:644kB free_cma:0kB [ 1180.570288] Node 0 active_anon:50440kB inactive_anon:157092kB active_file:760kB inactive_file:5204kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:143568kB dirty:0kB writeback:0kB shmem:158988kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1180.626714] systemd[1]: systemd-journald.service: Failed with result 'signal'. [ 1180.635675] lowmem_reserve[]: 0 0 0 0 0 [ 1180.638040] Node 1 active_anon:748kB inactive_anon:56752kB active_file:8kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:57152kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1180.663468] Node 0 [ 1180.666952] systemd[1]: systemd-journald.service: Service has no hold-off time, scheduling restart. [ 1180.670562] Node 0 [ 1180.678519] DMA: 2*4kB (UE) 2*8kB (U) 2*16kB (U) 19*32kB (UE) 13*64kB (UE) 10*128kB (UE) 2*256kB (UE) 1*512kB (E) 3*1024kB (UE) 2*2048kB (M) 0*4096kB = 10968kB [ 1180.692860] DMA free:10968kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1180.695698] systemd[1]: Stopped Journal Service. [ 1180.732606] Node 0 DMA32: 929*4kB (UE) 411*8kB (UME) 1190*16kB (UE) 1873*32kB (UE) 905*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 143900kB [ 1180.750432] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1180.768063] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1180.768302] Node 1 [ 1180.776291] Node 0 [ 1180.778164] systemd[1]: Starting Journal Service... [ 1180.779556] DMA32 free:142544kB min:36200kB low:45248kB high:54296kB active_anon:50740kB inactive_anon:157092kB active_file:1160kB inactive_file:5652kB unevictable:0kB writepending:0kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:7680kB pagetables:2912kB bounce:0kB free_pcp:876kB local_pcp:524kB free_cma:0kB [ 1180.784266] Normal: [ 1180.794118] lowmem_reserve[]: [ 1180.818012] 613*4kB (UM) 577*8kB (UM) 600*16kB (UM) 624*32kB (UM) 872*64kB (UM) 155*128kB (UM) 41*256kB (UM) 25*512kB (UM) 13*1024kB (U) 11*2048kB (UM) 0*4096kB = 171420kB [ 1180.830269] 0 [ 1180.837337] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1180.843714] 0 0 0 0 [ 1180.850419] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1180.850518] Node 0 [ 1180.861431] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1180.868581] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1180.876768] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1180.902248] lowmem_reserve[]: 0 0 0 0 0 [ 1180.907488] 55944 total pagecache pages [ 1180.910719] Node 1 [ 1180.914748] 0 pages in swap cache [ 1180.918867] Normal free:171336kB min:53696kB low:67120kB high:80544kB active_anon:748kB inactive_anon:56752kB active_file:8kB inactive_file:8kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:128kB pagetables:44kB bounce:0kB free_pcp:1424kB local_pcp:712kB free_cma:0kB [ 1180.920472] Swap cache stats: add 0, delete 0, find 0/0 [ 1180.953467] lowmem_reserve[]: 0 0 0 0 0 [ 1180.955026] Free swap = 0kB [ 1180.958841] Node 0 [ 1180.961186] Total swap = 0kB [ 1180.961194] 2097051 pages RAM [ 1180.961198] 0 pages HighMem/MovableOnly [ 1180.961201] 363848 pages reserved [ 1180.961205] 0 pages cma reserved [ 1180.988850] DMA: 2*4kB (UE) 2*8kB (U) 2*16kB (U) 19*32kB (UE) 13*64kB (UE) 10*128kB (UE) 2*256kB (UE) 1*512kB (E) 3*1024kB (UE) 2*2048kB (M) 0*4096kB = 10968kB [ 1181.008466] Node 0 DMA32: 943*4kB (UE) 418*8kB (UME) 1188*16kB (UE) 1869*32kB (UE) 902*64kB (U) 1*128kB (M) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 143788kB [ 1181.036606] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1181.050169] Node 1 Normal: 613*4kB (UM) 577*8kB (UM) 600*16kB (UM) 624*32kB (UM) 872*64kB (UM) 155*128kB (UM) 41*256kB (UM) 25*512kB (UM) 13*1024kB (U) 11*2048kB (UM) 0*4096kB = 171420kB [ 1181.071839] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1181.080835] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1181.133907] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1181.142769] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1181.196803] 56462 total pagecache pages [ 1181.200827] 0 pages in swap cache [ 1181.233504] Swap cache stats: add 0, delete 0, find 0/0 [ 1181.238974] Free swap = 0kB [ 1181.247032] systemd[1]: Started Load/Save RF Kill Switch Status. [ 1181.255774] systemd-journald[26516]: File /run/log/journal/04d8c135ee6b410280ba31a58c89679d/system.journal corrupted or uncleanly shut down, renaming and replacing. [ 1181.273513] Total swap = 0kB [ 1181.276565] 2097051 pages RAM [ 1181.279658] 0 pages HighMem/MovableOnly [ 1181.313704] 363848 pages reserved [ 1181.317192] 0 pages cma reserved [ 1181.320568] Out of memory: Kill process 26487 (syz-executor.5) score 1004 or sacrifice child [ 1181.362933] Killed process 26491 (syz-executor.5) total-vm:93252kB, anon-rss:152kB, file-rss:34820kB, shmem-rss:0kB [ 1181.428752] oom_reaper: reaped process 26491 (syz-executor.5), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1181.645754] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1181.660473] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1181.683706] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1181.709533] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1181.739464] device bridge_slave_1 left promiscuous mode [ 1181.762190] bridge0: port 2(bridge_slave_1) entered disabled state [ 1181.777866] device bridge_slave_0 left promiscuous mode [ 1181.793653] bridge0: port 1(bridge_slave_0) entered disabled state [ 1181.803623] device veth1_macvtap left promiscuous mode [ 1181.809060] device veth0_macvtap left promiscuous mode [ 1181.826880] device veth1_vlan left promiscuous mode [ 1181.832040] device veth0_vlan left promiscuous mode 13:37:18 executing program 0: timer_create(0x0, &(0x7f0000000080)={0x0, 0x0, 0x1, @thr={0x0, &(0x7f0000000040)="8bd19b303ba21500f7c2d3f7cc2fd29ae3c6db45e63c59054646e1b44d3003f74d33b6c48e8208376d6b0111434cdac6450a"}}, &(0x7f00000000c0)) 13:37:18 executing program 1: ioctl$SIOCPNDELRESOURCE(0xffffffffffffffff, 0x89ef, &(0x7f0000000040)=0xffffffff) socket$nl_generic(0x10, 0x3, 0x10) r0 = semget$private(0x0, 0x1, 0x484) semctl$IPC_STAT(r0, 0x0, 0x2, &(0x7f00000000c0)=""/89) 13:37:18 executing program 4: ioctl$SIOCPNDELRESOURCE(0xffffffffffffffff, 0x89ef, &(0x7f0000000040)=0xffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, 0x0, 0x0) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f00000012c0)={0x0, @nl=@unspec, @tipc=@id={0x1e, 0x3, 0x2, {0x4e21, 0x4}}, @ethernet={0x307, @random="68d88c73bc2f"}, 0x0, 0x0, 0x0, 0x0, 0x20, &(0x7f0000001280)='bridge_slave_0\x00', 0x401, 0x0, 0xfd51}) semctl$SETVAL(0x0, 0x0, 0x10, 0x0) semctl$GETVAL(0x0, 0x0, 0xc, &(0x7f0000000180)=""/194) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$x25(0x9, 0x5, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x500, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x80000000, 0xa, 0x1}) 13:37:18 executing program 3: ioctl$SIOCPNDELRESOURCE(0xffffffffffffffff, 0x89ef, &(0x7f0000000040)=0xffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000004f80)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f00000012c0)={0x0, @nl=@unspec, @tipc=@id={0x1e, 0x3, 0x2, {0x4e21, 0x4}}, @ethernet={0x307, @random="68d88c73bc2f"}, 0x0, 0x0, 0x0, 0x0, 0x20, &(0x7f0000001280)='bridge_slave_0\x00', 0x401, 0x0, 0xfd51}) semctl$SETVAL(0x0, 0x0, 0x10, 0x0) semctl$GETVAL(0x0, 0x0, 0xc, &(0x7f0000000180)=""/194) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$x25(0x9, 0x5, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x500, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x80000000, 0xa, 0x1}) 13:37:18 executing program 1: ioctl$SIOCPNDELRESOURCE(0xffffffffffffffff, 0x89ef, &(0x7f0000000040)=0xffffffff) r0 = semget$private(0x0, 0x1, 0x484) semctl$IPC_STAT(r0, 0x0, 0x2, &(0x7f00000000c0)=""/89) [ 1182.169556] device hsr_slave_1 left promiscuous mode [ 1182.189493] device hsr_slave_0 left promiscuous mode [ 1182.227358] team0 (unregistering): Port device team_slave_1 removed [ 1182.251731] team0 (unregistering): Port device team_slave_0 removed [ 1182.277908] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 1182.305088] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 1182.401846] bond0 (unregistering): Released all slaves [ 1182.507427] syz-executor.3: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1182.519342] syz-executor.4: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) 13:37:18 executing program 1: r0 = semget$private(0x0, 0x1, 0x484) semctl$IPC_STAT(r0, 0x0, 0x2, &(0x7f00000000c0)=""/89) 13:37:18 executing program 2: ioctl$SIOCPNDELRESOURCE(0xffffffffffffffff, 0x89ef, &(0x7f0000000040)=0xffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f00000012c0)={0x0, @nl=@unspec, @tipc=@id={0x1e, 0x3, 0x2, {0x4e21, 0x4}}, @ethernet={0x307, @random="68d88c73bc2f"}, 0x0, 0x0, 0x0, 0x0, 0x20, &(0x7f0000001280)='bridge_slave_0\x00', 0x401, 0x0, 0xfd51}) semctl$SETVAL(0x0, 0x0, 0x10, 0x0) semctl$GETVAL(0x0, 0x0, 0xc, &(0x7f0000000180)=""/194) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$x25(0x9, 0x5, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x500, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x80000000, 0xa, 0x1}) 13:37:18 executing program 5: ioctl$SIOCPNDELRESOURCE(0xffffffffffffffff, 0x89ef, &(0x7f0000000040)=0xffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000004f80)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f00000012c0)={0x0, @nl=@unspec, @tipc=@id={0x1e, 0x3, 0x2, {0x4e21, 0x4}}, @ethernet={0x307, @random="68d88c73bc2f"}, 0x0, 0x0, 0x0, 0x0, 0x20, &(0x7f0000001280)='bridge_slave_0\x00', 0x401, 0x0, 0xfd51}) semctl$SETVAL(0x0, 0x0, 0x10, 0x0) semctl$GETVAL(0x0, 0x0, 0xc, &(0x7f0000000180)=""/194) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$x25(0x9, 0x5, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x500, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x80000000, 0xa, 0x1}) [ 1182.569745] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 1182.575924] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 1182.581241] CPU: 1 PID: 26533 Comm: syz-executor.4 Not tainted 4.14.230-syzkaller #0 [ 1182.589130] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1182.598483] Call Trace: [ 1182.601076] dump_stack+0x1b2/0x281 [ 1182.604714] warn_alloc.cold+0x96/0x1cc [ 1182.608689] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1182.613709] ? zone_watermark_ok_safe+0x220/0x220 [ 1182.618580] __alloc_pages_nodemask+0x2127/0x2720 [ 1182.623424] ? io_schedule_timeout+0x140/0x140 [ 1182.628017] ? lock_acquire+0x170/0x3f0 [ 1182.632000] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1182.636854] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1182.642656] ? __mutex_unlock_slowpath+0x75/0x770 [ 1182.647495] ? audit_kill_trees+0x230/0x230 [ 1182.651832] alloc_pages_current+0x155/0x260 [ 1182.656245] ion_page_pool_alloc+0x118/0x1b0 [ 1182.660747] ion_system_heap_allocate+0x133/0x8c0 [ 1182.665588] ? ion_alloc+0x187/0x810 [ 1182.669305] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1182.674766] ? ion_system_contig_heap_create+0x130/0x130 [ 1182.680300] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1182.685413] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1182.690257] ion_alloc+0x204/0x810 [ 1182.693801] ? ion_dma_buf_release+0x40/0x40 [ 1182.698234] ? __might_fault+0x177/0x1b0 [ 1182.702322] ion_ioctl+0xea/0x1f0 [ 1182.705809] ? ion_query_heaps+0x360/0x360 [ 1182.710066] ? ion_query_heaps+0x360/0x360 [ 1182.714333] do_vfs_ioctl+0x75a/0xff0 [ 1182.718136] ? ioctl_preallocate+0x1a0/0x1a0 [ 1182.722545] ? lock_downgrade+0x740/0x740 [ 1182.726700] ? __fget+0x225/0x360 [ 1182.730155] ? do_vfs_ioctl+0xff0/0xff0 [ 1182.734132] ? security_file_ioctl+0x83/0xb0 [ 1182.738552] SyS_ioctl+0x7f/0xb0 [ 1182.741917] ? do_vfs_ioctl+0xff0/0xff0 [ 1182.746252] do_syscall_64+0x1d5/0x640 [ 1182.750151] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1182.755345] RIP: 0033:0x466459 [ 1182.758532] RSP: 002b:00007fee1a099188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1182.766239] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1182.773594] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000005 [ 1182.780865] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1182.788158] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1182.795433] R13: 00007ffe6e91304f R14: 00007fee1a099300 R15: 0000000000022000 [ 1182.805250] systemd[1]: Started Journal Service. [ 1182.812792] CPU: 1 PID: 26534 Comm: syz-executor.3 Not tainted 4.14.230-syzkaller #0 [ 1182.820683] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1182.830036] Call Trace: [ 1182.832625] dump_stack+0x1b2/0x281 [ 1182.836256] warn_alloc.cold+0x96/0x1cc [ 1182.840240] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1182.845259] ? zone_watermark_ok_safe+0x220/0x220 [ 1182.850377] __alloc_pages_nodemask+0x2127/0x2720 [ 1182.855225] ? lock_acquire+0x170/0x3f0 [ 1182.859204] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1182.864057] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1182.869508] ? __mutex_unlock_slowpath+0x75/0x770 [ 1182.874442] alloc_pages_current+0x155/0x260 [ 1182.878881] ion_page_pool_alloc+0x118/0x1b0 [ 1182.883289] ion_system_heap_allocate+0x133/0x8c0 [ 1182.888134] ? ion_alloc+0x187/0x810 [ 1182.891846] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1182.897292] ? ion_system_contig_heap_create+0x130/0x130 [ 1182.902744] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1182.908278] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1182.913563] ion_alloc+0x204/0x810 [ 1182.917128] ? ion_dma_buf_release+0x40/0x40 [ 1182.921534] ? __might_fault+0x177/0x1b0 [ 1182.925628] ion_ioctl+0xea/0x1f0 [ 1182.929076] ? ion_query_heaps+0x360/0x360 [ 1182.933309] ? ion_query_heaps+0x360/0x360 [ 1182.937544] do_vfs_ioctl+0x75a/0xff0 [ 1182.941350] ? ioctl_preallocate+0x1a0/0x1a0 [ 1182.945751] ? lock_downgrade+0x740/0x740 [ 1182.949922] ? __fget+0x225/0x360 [ 1182.953461] ? do_vfs_ioctl+0xff0/0xff0 [ 1182.957520] ? security_file_ioctl+0x83/0xb0 [ 1182.961927] SyS_ioctl+0x7f/0xb0 [ 1182.965287] ? do_vfs_ioctl+0xff0/0xff0 [ 1182.969262] do_syscall_64+0x1d5/0x640 [ 1182.973160] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1182.978343] RIP: 0033:0x466459 [ 1182.981548] RSP: 002b:00007f8a667e8188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1182.989252] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1182.996518] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000005 [ 1183.003801] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1183.011063] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 13:37:19 executing program 1: r0 = semget$private(0x0, 0x1, 0x484) semctl$IPC_STAT(r0, 0x0, 0x2, &(0x7f00000000c0)=""/89) [ 1183.018332] R13: 00007ffd25ba1ddf R14: 00007f8a667e8300 R15: 0000000000022000 [ 1183.031274] warn_alloc_show_mem: 1 callbacks suppressed [ 1183.031279] Mem-Info: [ 1183.054089] active_anon:12806 inactive_anon:55488 isolated_anon:0 13:37:19 executing program 1: r0 = semget$private(0x0, 0x0, 0x484) semctl$IPC_STAT(r0, 0x0, 0x2, &(0x7f00000000c0)=""/89) 13:37:19 executing program 1: r0 = semget$private(0x0, 0x0, 0x484) semctl$IPC_STAT(r0, 0x0, 0x2, &(0x7f00000000c0)=""/89) [ 1183.054089] active_file:1745 inactive_file:5091 isolated_file:0 [ 1183.054089] unevictable:0 dirty:43 writeback:0 unstable:0 [ 1183.054089] slab_reclaimable:12498 slab_unreclaimable:119842 [ 1183.054089] mapped:31166 shmem:56071 pagetables:616 bounce:0 [ 1183.054089] free:107449 free_pcp:338 free_cma:0 13:37:19 executing program 1: r0 = semget$private(0x0, 0x0, 0x484) semctl$IPC_STAT(r0, 0x0, 0x2, &(0x7f00000000c0)=""/89) [ 1183.144643] Node 0 active_anon:50428kB inactive_anon:165208kB active_file:7224kB inactive_file:20660kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:137216kB dirty:188kB writeback:0kB shmem:167148kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no 13:37:19 executing program 1: r0 = semget$private(0x0, 0x1, 0x0) semctl$IPC_STAT(r0, 0x0, 0x2, &(0x7f00000000c0)=""/89) [ 1183.212892] Node 1 active_anon:728kB inactive_anon:56744kB active_file:12kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:16kB writeback:0kB shmem:57136kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1183.268945] Node 0 DMA free:11144kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1183.295681] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1183.300804] Node 0 DMA32 free:261216kB min:36200kB low:45248kB high:54296kB active_anon:50528kB inactive_anon:165208kB active_file:7224kB inactive_file:20660kB unevictable:0kB writepending:188kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:7456kB pagetables:2600kB bounce:0kB free_pcp:400kB local_pcp:312kB free_cma:0kB [ 1183.330720] lowmem_reserve[]: 0 0 0 0 0 [ 1183.343103] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1183.402960] lowmem_reserve[]: 0 0 0 0 0 [ 1183.406995] Node 1 Normal free:66936kB min:53696kB low:67120kB high:80544kB active_anon:728kB inactive_anon:56744kB active_file:12kB inactive_file:4kB unevictable:0kB writepending:16kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:128kB pagetables:44kB bounce:0kB free_pcp:20kB local_pcp:0kB free_cma:0kB [ 1183.472847] lowmem_reserve[]: 0 0 0 0 0 [ 1183.476880] Node 0 DMA: 4*4kB (UE) 13*8kB (U) 3*16kB (U) 19*32kB (UE) 14*64kB (UE) 10*128kB (UE) 2*256kB (UE) 1*512kB (E) 3*1024kB (UE) 2*2048kB (M) 0*4096kB = 11144kB [ 1183.505346] Node 0 DMA32: 362*4kB (UE) 100*8kB (E) 138*16kB (ME) 3786*32kB (UME) 42*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 128296kB [ 1183.542843] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1183.562905] Node 1 Normal: 1320*4kB (UM) 1264*8kB (UM) 1218*16kB (UM) 982*32kB (UM) 2*64kB (U) 4*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 66944kB [ 1183.593045] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1183.612843] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1183.621440] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1183.652849] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1183.661460] 62875 total pagecache pages [ 1183.672874] 0 pages in swap cache [ 1183.676523] Swap cache stats: add 0, delete 0, find 0/0 [ 1183.682049] Free swap = 0kB [ 1183.702870] Total swap = 0kB [ 1183.705914] 2097051 pages RAM [ 1183.709007] 0 pages HighMem/MovableOnly [ 1183.722894] 363848 pages reserved [ 1183.726450] 0 pages cma reserved [ 1185.445673] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1185.452401] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1185.477256] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1185.496728] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1185.518410] device bridge_slave_1 left promiscuous mode [ 1185.536822] bridge0: port 2(bridge_slave_1) entered disabled state [ 1185.544172] device bridge_slave_0 left promiscuous mode [ 1185.549674] bridge0: port 1(bridge_slave_0) entered disabled state [ 1185.586375] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1185.603488] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1185.624964] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1185.631686] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1185.676403] device bridge_slave_1 left promiscuous mode [ 1185.681956] bridge0: port 2(bridge_slave_1) entered disabled state [ 1185.690564] device bridge_slave_0 left promiscuous mode [ 1185.716540] bridge0: port 1(bridge_slave_0) entered disabled state [ 1185.739260] device veth1_macvtap left promiscuous mode [ 1185.756575] device veth0_macvtap left promiscuous mode [ 1185.761917] device veth1_vlan left promiscuous mode [ 1185.783332] device veth0_vlan left promiscuous mode [ 1185.788780] device veth1_macvtap left promiscuous mode [ 1185.816091] device veth0_macvtap left promiscuous mode [ 1185.821634] device veth1_vlan left promiscuous mode [ 1185.837656] device veth0_vlan left promiscuous mode [ 1186.226715] device hsr_slave_1 left promiscuous mode [ 1186.244881] device hsr_slave_0 left promiscuous mode [ 1186.278102] team0 (unregistering): Port device team_slave_1 removed [ 1186.289743] team0 (unregistering): Port device team_slave_0 removed [ 1186.302497] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 1186.336674] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 1186.362914] Bluetooth: hci0 command 0x0409 tx timeout [ 1186.391901] oom_reaper: reaped process 26534 (syz-executor.3), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1186.470290] bond0 (unregistering): Released all slaves [ 1186.494294] syz-executor.3: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1186.511097] oom_reaper: reaped process 26533 (syz-executor.4), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1186.535192] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 1186.540351] CPU: 0 PID: 26534 Comm: syz-executor.3 Not tainted 4.14.230-syzkaller #0 [ 1186.548238] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1186.557607] Call Trace: [ 1186.560196] dump_stack+0x1b2/0x281 [ 1186.563821] warn_alloc.cold+0x96/0x1cc [ 1186.567805] ? zone_watermark_ok_safe+0x220/0x220 [ 1186.572645] ? usleep_range+0x130/0x130 [ 1186.576614] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1186.581715] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1186.586725] ? run_timer_softirq+0x5a0/0x5a0 [ 1186.591131] __alloc_pages_nodemask+0x2127/0x2720 [ 1186.596065] ? lock_acquire+0x170/0x3f0 [ 1186.600043] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1186.604882] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1186.609391] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1186.614862] alloc_pages_current+0x155/0x260 [ 1186.619352] ion_page_pool_alloc+0x118/0x1b0 [ 1186.623751] ion_system_heap_allocate+0x133/0x8c0 [ 1186.628586] ? ion_alloc+0x187/0x810 [ 1186.632291] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1186.637754] ? ion_system_contig_heap_create+0x130/0x130 [ 1186.643208] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1186.648216] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1186.653066] ion_alloc+0x204/0x810 [ 1186.656613] ? ion_dma_buf_release+0x40/0x40 [ 1186.661011] ? __might_fault+0x177/0x1b0 [ 1186.665152] ion_ioctl+0xea/0x1f0 [ 1186.668600] ? ion_query_heaps+0x360/0x360 [ 1186.672824] ? ion_query_heaps+0x360/0x360 [ 1186.677052] do_vfs_ioctl+0x75a/0xff0 [ 1186.680857] ? ioctl_preallocate+0x1a0/0x1a0 [ 1186.685253] ? lock_downgrade+0x740/0x740 [ 1186.689414] ? __fget+0x225/0x360 [ 1186.692856] ? do_vfs_ioctl+0xff0/0xff0 [ 1186.698038] ? security_file_ioctl+0x83/0xb0 [ 1186.702436] SyS_ioctl+0x7f/0xb0 [ 1186.705790] ? do_vfs_ioctl+0xff0/0xff0 [ 1186.709752] do_syscall_64+0x1d5/0x640 [ 1186.713636] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1186.718813] RIP: 0033:0x466459 [ 1186.721998] RSP: 002b:00007f8a667e8188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1186.729695] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1186.737039] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000005 [ 1186.744400] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1186.751657] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1186.758913] R13: 00007ffd25ba1ddf R14: 00007f8a667e8300 R15: 0000000000022000 [ 1186.794967] syz-fuzzer invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1186.812343] device hsr_slave_1 left promiscuous mode [ 1186.836009] device hsr_slave_0 left promiscuous mode [ 1186.842186] warn_alloc_show_mem: 1 callbacks suppressed [ 1186.842190] Mem-Info: [ 1186.847401] syz-fuzzer cpuset= [ 1186.848354] active_anon:12936 inactive_anon:55492 isolated_anon:0 [ 1186.848354] active_file:61 inactive_file:15 isolated_file:0 [ 1186.848354] unevictable:0 dirty:34 writeback:25 unstable:0 [ 1186.848354] slab_reclaimable:12487 slab_unreclaimable:117464 [ 1186.848354] mapped:52708 shmem:56076 pagetables:735 bounce:0 [ 1186.848354] free:62149 free_pcp:210 free_cma:0 [ 1186.850650] / [ 1186.853870] Node 0 active_anon:50956kB inactive_anon:165220kB active_file:108kB inactive_file:52kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:172076kB dirty:116kB writeback:100kB shmem:167164kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1186.898850] mems_allowed=0-1 [ 1186.917933] Node 1 active_anon:788kB inactive_anon:56748kB active_file:136kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:38756kB dirty:20kB writeback:0kB shmem:57140kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1186.927218] team0 (unregistering): Port device team_slave_1 removed [ 1186.954080] Node 0 DMA free:12580kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:220kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:128kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1186.956015] CPU: 1 PID: 7975 Comm: syz-fuzzer Not tainted 4.14.230-syzkaller #0 [ 1186.982201] lowmem_reserve[]: [ 1186.988196] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1186.988201] Call Trace: [ 1186.988219] dump_stack+0x1b2/0x281 [ 1186.988231] dump_header+0x178/0x82f [ 1186.988244] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1186.991351] 0 [ 1187.000779] ? ___ratelimit+0x2cd/0x530 [ 1187.000790] oom_kill_process.cold+0x10/0xa40 [ 1187.000812] out_of_memory+0xe3e/0x1190 [ 1187.003431] 2717 [ 1187.007122] ? oom_killer_disable+0x1c0/0x1c0 [ 1187.010807] 2718 [ 1187.015917] ? mutex_trylock+0x152/0x1a0 [ 1187.015928] __alloc_pages_nodemask+0x23e1/0x2720 [ 1187.015950] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1187.017726] 2718 [ 1187.021698] alloc_pages_current+0x155/0x260 [ 1187.026172] 2718 [ 1187.030110] filemap_fault+0x11a1/0x1ad0 [ 1187.036642] ext4_filemap_fault+0x84/0xb0 [ 1187.036652] __do_fault+0xfa/0x380 [ 1187.036663] __handle_mm_fault+0x2497/0x4620 [ 1187.038702] Node 0 [ 1187.042748] ? vm_insert_page+0x7c0/0x7c0 [ 1187.047601] DMA32 free:19620kB min:36200kB low:45248kB high:54296kB active_anon:51056kB inactive_anon:165220kB active_file:108kB inactive_file:72kB unevictable:0kB writepending:216kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:7200kB pagetables:2748kB bounce:0kB free_pcp:776kB local_pcp:120kB free_cma:0kB [ 1187.052476] ? lock_downgrade+0x740/0x740 [ 1187.054535] lowmem_reserve[]: [ 1187.058908] ? mark_held_locks+0xa6/0xf0 [ 1187.060943] 0 [ 1187.065176] handle_mm_fault+0x455/0x9c0 [ 1187.065190] __do_page_fault+0x549/0xad0 [ 1187.065203] ? spurious_fault+0x640/0x640 [ 1187.069324] 0 [ 1187.072847] ? do_page_fault+0x60/0x500 [ 1187.072856] ? page_fault+0x2f/0x50 [ 1187.072863] page_fault+0x45/0x50 [ 1187.072872] RIP: 0000:0x940aec [ 1187.077286] 0 [ 1187.079500] RSP: 2e000:000000c00003dec8 EFLAGS: 0043b6a0 [ 1187.089403] Mem-Info: [ 1187.122715] 0 [ 1187.127466] active_anon:12927 inactive_anon:55492 isolated_anon:0 [ 1187.127466] active_file:17 inactive_file:397 isolated_file:0 [ 1187.127466] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1187.127466] slab_reclaimable:12487 slab_unreclaimable:117111 [ 1187.127466] mapped:52909 shmem:56076 pagetables:735 bounce:0 [ 1187.127466] free:62109 free_pcp:190 free_cma:0 [ 1187.130685] team0 (unregistering): Port device team_slave_0 removed [ 1187.137922] Node 0 active_anon:50908kB inactive_anon:165220kB active_file:40kB inactive_file:1560kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:173080kB dirty:0kB writeback:0kB shmem:167164kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1187.142727] 0 [ 1187.145516] Node 1 active_anon:800kB inactive_anon:56748kB active_file:28kB inactive_file:28kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:38656kB dirty:0kB writeback:0kB shmem:57140kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1187.149430] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 1187.155185] Node 0 [ 1187.164415] DMA free:11112kB min:204kB low:252kB high:300kB active_anon:24kB inactive_anon:0kB active_file:4kB inactive_file:1804kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1187.166040] Node 0 [ 1187.168279] lowmem_reserve[]: [ 1187.205257] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1187.211991] 0 [ 1187.240004] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 1187.274574] 2717 2718 2718 2718 [ 1187.274593] Node 0 DMA32 free:19808kB min:36200kB low:45248kB high:54296kB active_anon:50884kB inactive_anon:165220kB active_file:36kB inactive_file:36kB unevictable:0kB writepending:0kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:7200kB pagetables:2748kB bounce:0kB free_pcp:800kB local_pcp:628kB free_cma:0kB [ 1187.274612] lowmem_reserve[]: 0 0 0 0 0 [ 1187.305211] lowmem_reserve[]: [ 1187.307003] Node 0 [ 1187.331789] 0 [ 1187.340537] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1187.363295] 0 [ 1187.390050] lowmem_reserve[]: 0 0 0 0 0 [ 1187.416430] Node 1 Normal free:214032kB min:53696kB low:67120kB high:80544kB active_anon:800kB inactive_anon:56748kB active_file:228kB inactive_file:2128kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:256kB pagetables:192kB bounce:0kB free_pcp:292kB local_pcp:68kB free_cma:0kB [ 1187.427896] bond0 (unregistering): Released all slaves [ 1187.449908] lowmem_reserve[]: 0 0 0 0 0 [ 1187.455936] Node 0 DMA: 2*4kB (UE) 1*8kB (U) 1*16kB (U) 13*32kB (UE) 14*64kB (UME) 12*128kB (UME) 2*256kB (UE) 1*512kB (E) 1*1024kB (E) 1*2048kB (U) 1*4096kB (U) = 11072kB [ 1187.461716] 0 [ 1187.478076] Node 0 [ 1187.480441] 0 0 [ 1187.490904] Node 1 Normal free:212224kB min:53696kB low:67120kB high:80544kB active_anon:1000kB inactive_anon:56748kB active_file:428kB inactive_file:3128kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:320kB pagetables:340kB bounce:0kB free_pcp:328kB local_pcp:204kB free_cma:0kB [ 1187.500069] DMA32: [ 1187.535178] lowmem_reserve[]: 0 0 0 0 0 [ 1187.548456] 901*4kB (UME) 986*8kB [ 1187.550824] Node 0 DMA: [ 1187.554416] (UME) 224*16kB (UME) 42*32kB (UME) 26*64kB (UM) 48*128kB (UM) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 24228kB [ 1187.578799] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1187.589782] Node 1 Normal: 1*4kB (M) 0*8kB 1*16kB (U) 1*32kB (M) 1*64kB (M) 0*128kB 1*256kB (U) 1*512kB (U) 192*1024kB (U) 5*2048kB (U) 0*4096kB = 207732kB [ 1187.603940] 2*4kB (UE) 1*8kB (U) 1*16kB (U) 13*32kB (UE) 14*64kB (UME) 12*128kB (UME) 2*256kB (UE) 1*512kB (E) 1*1024kB (E) 1*2048kB (U) 1*4096kB (U) = 11072kB [ 1187.604012] Node 0 DMA32: 951*4kB (UME) 1094*8kB (UME) 229*16kB (UME) 44*32kB (UME) 26*64kB (UM) 48*128kB (UM) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 25436kB [ 1187.627645] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1187.638307] Node 0 [ 1187.646102] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1187.647117] Normal: [ 1187.648503] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1187.660004] 0*4kB [ 1187.669200] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1187.680015] 57528 total pagecache pages [ 1187.680041] 0*8kB [ 1187.684208] 0 pages in swap cache [ 1187.684214] Swap cache stats: add 0, delete 0, find 0/0 [ 1187.684217] Free swap = 0kB [ 1187.684220] Total swap = 0kB [ 1187.684227] 2097051 pages RAM [ 1187.684231] 0 pages HighMem/MovableOnly [ 1187.684234] 363848 pages reserved [ 1187.684237] 0 pages cma reserved [ 1187.684244] Out of memory (oom_kill_allocating_task): Kill process 7975 (syz-fuzzer) score 0 or sacrifice child [ 1187.684312] Killed process 26550 (syz-executor.0) total-vm:84924kB, anon-rss:64kB, file-rss:0kB, shmem-rss:0kB [ 1187.863573] 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1187.872072] Node 1 Normal: 11*4kB (UM) 2*8kB (M) 3*16kB (UM) 2*32kB (M) 5182*64kB (UM) 0*128kB 1*256kB (U) 1*512kB (U) 191*1024kB (U) 5*2048kB (U) 0*4096kB = 538412kB [ 1187.912867] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1187.921733] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1187.952841] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1187.962882] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1187.971553] 57737 total pagecache pages [ 1187.992838] 0 pages in swap cache [ 1187.996305] Swap cache stats: add 0, delete 0, find 0/0 [ 1188.001675] Free swap = 0kB [ 1188.012840] Total swap = 0kB [ 1188.015865] 2097051 pages RAM [ 1188.018959] 0 pages HighMem/MovableOnly [ 1188.042940] 363848 pages reserved [ 1188.046439] 0 pages cma reserved 13:37:24 executing program 1: semget$private(0x0, 0x1, 0x0) semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f00000000c0)=""/89) [ 1188.442893] Bluetooth: hci0 command 0x041b tx timeout [ 1189.162955] Bluetooth: hci4 command 0x0409 tx timeout [ 1189.482889] Bluetooth: hci1 command 0x0409 tx timeout [ 1190.326764] IPVS: ftp: loaded support on port[0] = 21 [ 1190.464614] IPVS: ftp: loaded support on port[0] = 21 [ 1190.593376] chnl_net:caif_netlink_parms(): no params data found [ 1190.689891] chnl_net:caif_netlink_parms(): no params data found [ 1190.976984] bridge0: port 1(bridge_slave_0) entered blocking state [ 1190.983788] bridge0: port 1(bridge_slave_0) entered disabled state [ 1190.990664] device bridge_slave_0 entered promiscuous mode [ 1191.004636] bridge0: port 1(bridge_slave_0) entered blocking state [ 1191.011022] bridge0: port 1(bridge_slave_0) entered disabled state [ 1191.019489] device bridge_slave_0 entered promiscuous mode [ 1191.026880] bridge0: port 2(bridge_slave_1) entered blocking state [ 1191.033928] bridge0: port 2(bridge_slave_1) entered disabled state [ 1191.040878] device bridge_slave_1 entered promiscuous mode [ 1191.054914] bridge0: port 2(bridge_slave_1) entered blocking state [ 1191.061962] bridge0: port 2(bridge_slave_1) entered disabled state [ 1191.070774] device bridge_slave_1 entered promiscuous mode [ 1191.085431] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 1191.100186] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1191.127915] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 1191.135088] team0: Port device team_slave_0 added [ 1191.141405] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 1191.151257] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1191.159389] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 1191.167497] team0: Port device team_slave_1 added [ 1191.198667] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1191.205218] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1191.231022] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1191.242182] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 1191.242886] Bluetooth: hci4 command 0x041b tx timeout [ 1191.257063] team0: Port device team_slave_0 added [ 1191.263034] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1191.269281] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1191.294699] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1191.306073] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 1191.313431] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 1191.320527] team0: Port device team_slave_1 added [ 1191.334370] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 1191.355368] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1191.361623] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1191.387837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1191.412331] device hsr_slave_0 entered promiscuous mode [ 1191.418210] device hsr_slave_1 entered promiscuous mode [ 1191.425087] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1191.431330] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1191.456933] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1191.467666] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 1191.475614] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 1191.483494] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 1191.490472] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 1191.527539] device hsr_slave_0 entered promiscuous mode [ 1191.533680] device hsr_slave_1 entered promiscuous mode [ 1191.549136] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 1191.557030] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 1191.565193] Bluetooth: hci1 command 0x041b tx timeout [ 1191.716416] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 1191.739779] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 1191.780044] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1191.789332] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 1191.800372] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 1191.810315] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 1191.816666] 8021q: adding VLAN 0 to HW filter on device team0 [ 1191.824327] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1191.831477] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1191.842897] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 1191.850464] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1191.859685] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1191.867681] bridge0: port 1(bridge_slave_0) entered blocking state [ 1191.874085] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1191.881696] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1191.890973] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 1191.902707] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1191.909309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1191.917921] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1191.925624] bridge0: port 2(bridge_slave_1) entered blocking state [ 1191.931962] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1191.941103] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 1191.949160] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1191.959482] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 1191.970206] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 1191.977767] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 1191.985737] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1191.992593] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1191.999904] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1192.010697] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 1192.017586] 8021q: adding VLAN 0 to HW filter on device team0 [ 1192.026824] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 1192.035028] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 1192.042368] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1192.050499] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1192.058313] bridge0: port 1(bridge_slave_0) entered blocking state [ 1192.064707] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1192.071679] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1192.079494] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1192.087751] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1192.095028] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1192.105089] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 1192.116257] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 1192.124540] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1192.132437] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1192.142214] bridge0: port 2(bridge_slave_1) entered blocking state [ 1192.148713] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1192.156810] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1192.165716] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 1192.176712] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 1192.184137] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1192.191911] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1192.199624] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1192.207483] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1192.216361] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 1192.226337] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1192.236223] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 1192.244866] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 1192.251718] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1192.260733] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1192.268483] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1192.276283] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1192.286244] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 1192.292280] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1192.301810] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1192.312096] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 1192.321100] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1192.330656] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1192.340933] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 1192.353171] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 1192.361323] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1192.369083] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1192.377364] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1192.384990] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1192.395073] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 1192.402049] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 1192.408311] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1192.421283] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 1192.431160] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1192.438350] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1192.452767] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 1192.461536] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1192.468791] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 1192.475786] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1192.482477] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1192.496565] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1192.559219] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 1192.569933] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 1192.577339] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1192.585919] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1192.597563] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 1192.608873] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 1192.616606] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1192.625386] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1192.649406] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 1192.656888] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 1192.664186] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 1192.678219] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 1192.685665] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1192.694105] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1192.716539] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1192.734063] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1192.748423] device veth0_vlan entered promiscuous mode [ 1192.760421] IPVS: ftp: loaded support on port[0] = 21 [ 1192.760954] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 1192.777678] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 1192.784911] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 1192.797246] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 1192.811634] device veth1_vlan entered promiscuous mode [ 1192.818851] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 1192.825596] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1192.833151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1192.840806] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1192.848941] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1192.856181] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1192.872757] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 1192.886825] device veth0_vlan entered promiscuous mode [ 1192.909434] device veth1_vlan entered promiscuous mode [ 1192.916466] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 1192.922979] Bluetooth: hci2 command 0x0406 tx timeout [ 1192.951801] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 1192.960754] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 1192.987336] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 1192.996186] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 1193.061949] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1193.069616] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1193.077467] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1193.085487] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1193.094160] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1193.103768] device veth0_macvtap entered promiscuous mode [ 1193.110051] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 1193.120625] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 1193.138452] chnl_net:caif_netlink_parms(): no params data found [ 1193.164489] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1193.172066] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1193.182262] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1193.192751] device veth0_macvtap entered promiscuous mode [ 1193.199581] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 1193.209545] device veth1_macvtap entered promiscuous mode [ 1193.218241] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 1193.230731] device veth1_macvtap entered promiscuous mode [ 1193.237316] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 1193.246840] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 1193.267934] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 1193.277135] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 1193.287375] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 1193.296130] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1193.306434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1193.315901] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1193.326043] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1193.333082] Bluetooth: hci4 command 0x040f tx timeout [ 1193.335242] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1193.350151] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1193.360534] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 1193.367829] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1193.377874] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1193.388250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1193.397507] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1193.407971] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1193.417176] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1193.426965] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1193.436214] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1193.445998] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1193.456185] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 1193.463364] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1193.469966] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1193.477634] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1193.485236] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1193.492326] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1193.500211] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1193.508201] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1193.516437] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1193.526847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1193.537392] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1193.546614] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1193.556772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1193.566007] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1193.575837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1193.586076] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 1193.593929] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1193.606209] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1193.617052] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1193.637566] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1193.648099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1193.652933] Bluetooth: hci1 command 0x040f tx timeout [ 1193.657622] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1193.672358] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1193.681720] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1193.691510] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1193.700746] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1193.710575] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1193.720754] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 1193.727786] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1193.750330] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1193.758122] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1193.774696] bridge0: port 1(bridge_slave_0) entered blocking state [ 1193.781137] bridge0: port 1(bridge_slave_0) entered disabled state [ 1193.790528] device bridge_slave_0 entered promiscuous mode [ 1193.800654] bridge0: port 2(bridge_slave_1) entered blocking state [ 1193.807588] bridge0: port 2(bridge_slave_1) entered disabled state [ 1193.820961] device bridge_slave_1 entered promiscuous mode [ 1193.857306] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 1193.867646] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1193.900273] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 1193.912329] team0: Port device team_slave_0 added [ 1193.919449] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 1193.927678] team0: Port device team_slave_1 added [ 1193.956040] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1193.962411] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1193.989130] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1194.000779] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1194.007480] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1194.036912] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1194.052323] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 1194.065899] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 1194.101986] device hsr_slave_0 entered promiscuous mode [ 1194.108155] device hsr_slave_1 entered promiscuous mode [ 1194.114760] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 1194.121903] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 1194.261967] bridge0: port 2(bridge_slave_1) entered blocking state [ 1194.268391] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1194.275688] bridge0: port 1(bridge_slave_0) entered blocking state [ 1194.282068] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1194.351670] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 1194.358858] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1194.372613] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 1194.389277] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 1194.396853] bridge0: port 1(bridge_slave_0) entered disabled state [ 1194.408342] bridge0: port 2(bridge_slave_1) entered disabled state [ 1194.418059] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1194.429111] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1194.440655] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 1194.447818] 8021q: adding VLAN 0 to HW filter on device team0 [ 1194.461947] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1194.470907] bridge0: port 1(bridge_slave_0) entered blocking state [ 1194.477363] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1194.500129] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1194.511918] bridge0: port 2(bridge_slave_1) entered blocking state [ 1194.518399] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1194.552740] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1194.561457] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1194.574279] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1194.587208] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1194.602566] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 1194.610512] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1194.622345] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 1194.631267] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1194.642688] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1194.659907] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 1194.677504] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 1194.687929] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1194.699127] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1194.716805] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1194.764308] Bluetooth: hci0 command 0x0409 tx timeout [ 1194.821928] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 1194.838351] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 1194.849699] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1194.861886] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1194.921531] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 1194.932546] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 1194.947091] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 1194.961764] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 1194.971776] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1194.982115] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1194.997202] device veth0_vlan entered promiscuous mode [ 1195.007398] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1195.016785] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1195.032438] device veth1_vlan entered promiscuous mode [ 1195.041335] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 1195.058025] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 1195.078690] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 1195.098927] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 1195.108671] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1195.119047] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1195.130787] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1195.140918] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1195.155291] device veth0_macvtap entered promiscuous mode [ 1195.161793] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 1195.180112] device veth1_macvtap entered promiscuous mode [ 1195.188565] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 1195.202589] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 1195.218780] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 1195.230111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1195.246580] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1195.257211] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1195.271262] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1195.282693] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1195.296810] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1195.307058] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1195.321971] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1195.332145] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1195.342907] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1195.354587] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 1195.361608] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1195.370249] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1195.378580] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1195.387587] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1195.396417] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1195.407826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1195.413091] Bluetooth: hci4 command 0x0419 tx timeout [ 1195.419517] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1195.433091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1195.442904] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1195.452041] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1195.463281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1195.472408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1195.484599] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1195.494097] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1195.504965] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1195.516125] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 1195.523743] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1195.530556] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1195.539854] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 13:37:32 executing program 0: timer_create(0x0, &(0x7f0000000080)={0x0, 0x0, 0x1, @thr={0x0, 0x0}}, &(0x7f00000000c0)) 13:37:32 executing program 4: r0 = semget$private(0x0, 0x0, 0x484) semctl$IPC_STAT(r0, 0x0, 0x2, &(0x7f00000000c0)=""/89) 13:37:32 executing program 1: semget$private(0x0, 0x1, 0x0) semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f00000000c0)=""/89) 13:37:32 executing program 3: ioctl$SIOCPNDELRESOURCE(0xffffffffffffffff, 0x89ef, &(0x7f0000000040)=0xffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000004f80)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f00000012c0)={0x0, @nl=@unspec, @tipc=@id={0x1e, 0x3, 0x2, {0x4e21, 0x4}}, @ethernet={0x307, @random="68d88c73bc2f"}, 0x0, 0x0, 0x0, 0x0, 0x20, &(0x7f0000001280)='bridge_slave_0\x00', 0x401, 0x0, 0xfd51}) semctl$SETVAL(0x0, 0x0, 0x10, 0x0) semctl$GETVAL(0x0, 0x0, 0xc, &(0x7f0000000180)=""/194) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$x25(0x9, 0x5, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x500, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x80000000, 0xa, 0x1}) 13:37:32 executing program 2: ioctl$SIOCPNDELRESOURCE(0xffffffffffffffff, 0x89ef, &(0x7f0000000040)=0xffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000004f80)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f00000012c0)={0x0, @nl=@unspec, @tipc=@id={0x1e, 0x3, 0x2, {0x4e21, 0x4}}, @ethernet={0x307, @random="68d88c73bc2f"}, 0x0, 0x0, 0x0, 0x0, 0x20, &(0x7f0000001280)='bridge_slave_0\x00', 0x401, 0x0, 0xfd51}) semctl$SETVAL(0x0, 0x0, 0x10, 0x0) semctl$GETVAL(0x0, 0x0, 0xc, &(0x7f0000000180)=""/194) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$x25(0x9, 0x5, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x500, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x80000000, 0xa, 0x1}) [ 1195.723893] Bluetooth: hci1 command 0x0419 tx timeout 13:37:32 executing program 0: timer_create(0x0, &(0x7f0000000080)={0x0, 0x0, 0x1, @thr={0x0, 0x0}}, 0x0) 13:37:32 executing program 5: r0 = semget$private(0x0, 0x0, 0x484) semctl$IPC_STAT(r0, 0x0, 0x2, &(0x7f00000000c0)=""/89) 13:37:32 executing program 1: semget$private(0x0, 0x1, 0x0) semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f00000000c0)=""/89) 13:37:32 executing program 0: timer_create(0x0, &(0x7f0000000080)={0x0, 0x0, 0x1, @thr={0x0, 0x0}}, 0x0) 13:37:32 executing program 5: r0 = semget$private(0x0, 0x0, 0x484) semctl$IPC_STAT(r0, 0x0, 0x2, &(0x7f00000000c0)=""/89) 13:37:32 executing program 1: r0 = semget$private(0x0, 0x1, 0x0) semctl$IPC_STAT(r0, 0x0, 0x2, 0x0) 13:37:32 executing program 4: r0 = semget$private(0x0, 0x0, 0x484) semctl$IPC_STAT(r0, 0x0, 0x2, &(0x7f00000000c0)=""/89) 13:37:32 executing program 0: timer_create(0x0, &(0x7f0000000080)={0x0, 0x0, 0x1, @thr={0x0, 0x0}}, 0x0) 13:37:32 executing program 5: r0 = semget$private(0x0, 0x0, 0x484) semctl$IPC_STAT(r0, 0x0, 0x2, &(0x7f00000000c0)=""/89) [ 1196.556800] syz-executor.3: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1196.556959] syz-executor.2: [ 1196.582221] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 1196.595204] page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1196.608472] CPU: 0 PID: 27308 Comm: syz-executor.3 Not tainted 4.14.230-syzkaller #0 [ 1196.616372] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1196.625726] Call Trace: [ 1196.628314] dump_stack+0x1b2/0x281 [ 1196.631936] warn_alloc.cold+0x96/0x1cc [ 1196.635906] ? zone_watermark_ok_safe+0x220/0x220 [ 1196.640754] __alloc_pages_nodemask+0x2127/0x2720 [ 1196.645589] ? io_schedule_timeout+0x140/0x140 [ 1196.650169] ? lock_acquire+0x170/0x3f0 [ 1196.654142] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1196.659015] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1196.664478] ? __mutex_unlock_slowpath+0x75/0x770 [ 1196.669307] ? retint_kernel+0x2d/0x2d [ 1196.673188] alloc_pages_current+0x155/0x260 [ 1196.677590] ion_page_pool_alloc+0x118/0x1b0 [ 1196.681991] ion_system_heap_allocate+0x133/0x8c0 [ 1196.686845] ? ion_alloc+0x187/0x810 [ 1196.690553] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1196.696021] ? ion_system_contig_heap_create+0x130/0x130 [ 1196.701463] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1196.706476] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1196.711311] ion_alloc+0x204/0x810 [ 1196.714845] ? ion_dma_buf_release+0x40/0x40 [ 1196.719274] ? __might_fault+0x177/0x1b0 [ 1196.723329] ion_ioctl+0xea/0x1f0 [ 1196.726803] ? ion_query_heaps+0x360/0x360 [ 1196.731033] ? ion_query_heaps+0x360/0x360 [ 1196.735258] do_vfs_ioctl+0x75a/0xff0 [ 1196.739056] ? ioctl_preallocate+0x1a0/0x1a0 [ 1196.743454] ? lock_downgrade+0x740/0x740 [ 1196.747596] ? __fget+0x225/0x360 [ 1196.751053] ? do_vfs_ioctl+0xff0/0xff0 [ 1196.755019] ? security_file_ioctl+0x83/0xb0 [ 1196.759419] SyS_ioctl+0x7f/0xb0 [ 1196.762772] ? do_vfs_ioctl+0xff0/0xff0 [ 1196.766740] do_syscall_64+0x1d5/0x640 [ 1196.770623] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1196.775815] RIP: 0033:0x466459 [ 1196.778990] RSP: 002b:00007f8a667e8188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1196.786687] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1196.793946] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000005 [ 1196.801220] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1196.808505] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1196.815781] R13: 00007ffd25ba1ddf R14: 00007f8a667e8300 R15: 0000000000022000 [ 1196.833825] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 1196.839137] CPU: 1 PID: 27302 Comm: syz-executor.2 Not tainted 4.14.230-syzkaller #0 [ 1196.847022] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1196.856468] Call Trace: [ 1196.859097] dump_stack+0x1b2/0x281 [ 1196.862726] warn_alloc.cold+0x96/0x1cc [ 1196.866701] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1196.871736] ? zone_watermark_ok_safe+0x220/0x220 [ 1196.876587] __alloc_pages_nodemask+0x2127/0x2720 [ 1196.881427] ? __phys_addr+0x73/0xe0 [ 1196.885162] ? lock_acquire+0x170/0x3f0 [ 1196.889158] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1196.894006] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1196.899459] ? __mutex_unlock_slowpath+0x75/0x770 [ 1196.904305] alloc_pages_current+0x155/0x260 [ 1196.908737] ion_page_pool_alloc+0x118/0x1b0 [ 1196.913147] ion_system_heap_allocate+0x133/0x8c0 [ 1196.918010] ? ion_alloc+0x187/0x810 [ 1196.921740] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1196.927191] ? ion_system_contig_heap_create+0x130/0x130 [ 1196.932638] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1196.937654] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1196.942495] ion_alloc+0x204/0x810 [ 1196.946036] ? ion_dma_buf_release+0x40/0x40 [ 1196.950468] ? __might_fault+0x177/0x1b0 [ 1196.954529] ion_ioctl+0xea/0x1f0 [ 1196.958020] ? ion_query_heaps+0x360/0x360 [ 1196.962259] ? ion_query_heaps+0x360/0x360 [ 1196.966495] do_vfs_ioctl+0x75a/0xff0 [ 1196.970299] ? ioctl_preallocate+0x1a0/0x1a0 [ 1196.974706] ? lock_downgrade+0x740/0x740 [ 1196.978919] ? __fget+0x225/0x360 [ 1196.982371] ? do_vfs_ioctl+0xff0/0xff0 [ 1196.986346] ? security_file_ioctl+0x83/0xb0 [ 1196.990757] SyS_ioctl+0x7f/0xb0 [ 1196.994119] ? do_vfs_ioctl+0xff0/0xff0 [ 1196.998103] do_syscall_64+0x1d5/0x640 [ 1197.002031] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1197.007222] RIP: 0033:0x466459 [ 1197.010436] RSP: 002b:00007fe6eefd0188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1197.018167] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1197.025458] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000005 [ 1197.032748] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1197.040041] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1197.047317] R13: 00007ffebc240abf R14: 00007fe6eefd0300 R15: 0000000000022000 [ 1197.061388] Mem-Info: [ 1197.064440] Bluetooth: hci0 command 0x041b tx timeout [ 1197.085578] active_anon:13514 inactive_anon:55498 isolated_anon:0 [ 1197.085578] active_file:960 inactive_file:4930 isolated_file:7 [ 1197.085578] unevictable:0 dirty:5 writeback:0 unstable:0 [ 1197.085578] slab_reclaimable:12355 slab_unreclaimable:114430 [ 1197.085578] mapped:56664 shmem:56084 pagetables:738 bounce:0 [ 1197.085578] free:454125 free_pcp:234 free_cma:0 [ 1197.193604] Node 0 active_anon:53260kB inactive_anon:165224kB active_file:3672kB inactive_file:19512kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:187692kB dirty:16kB writeback:0kB shmem:167168kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1197.263286] Node 1 active_anon:796kB inactive_anon:56768kB active_file:168kB inactive_file:208kB unevictable:0kB isolated(anon):0kB isolated(file):28kB mapped:38964kB dirty:4kB writeback:0kB shmem:57168kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1197.321033] Node 0 DMA free:11432kB min:204kB low:252kB high:300kB active_anon:2072kB inactive_anon:0kB active_file:1544kB inactive_file:8kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1197.348751] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1197.355551] Node 0 DMA32 free:657024kB min:36200kB low:45248kB high:54296kB active_anon:51188kB inactive_anon:165224kB active_file:2128kB inactive_file:19504kB unevictable:0kB writepending:16kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:7232kB pagetables:2760kB bounce:0kB free_pcp:828kB local_pcp:716kB free_cma:0kB [ 1197.387706] lowmem_reserve[]: 0 0 0 0 0 [ 1197.391805] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1197.419705] lowmem_reserve[]: 0 0 0 0 0 [ 1197.424351] Node 1 Normal free:1304652kB min:53696kB low:67120kB high:80544kB active_anon:796kB inactive_anon:56768kB active_file:168kB inactive_file:208kB unevictable:0kB writepending:4kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:224kB pagetables:192kB bounce:0kB free_pcp:736kB local_pcp:0kB free_cma:0kB [ 1197.454136] lowmem_reserve[]: 0 0 0 0 0 [ 1197.458247] Node 0 DMA: 32*4kB (UME) 29*8kB (UM) 28*16kB (UM) 16*32kB (UME) 12*64kB (UME) 13*128kB (UME) 6*256kB (UE) 2*512kB (UE) 1*1024kB (E) 2*2048kB (UM) 0*4096kB = 11432kB [ 1197.475591] Node 0 DMA32: 401*4kB (UE) 108*8kB (UME) 8446*16kB (UE) 11228*32kB (UE) 32*64kB (U) 4*128kB (U) 238*256kB (U) 8*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 564484kB [ 1197.493139] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1197.504166] Node 1 Normal: 781*4kB (UM) 1111*8kB (UM) 934*16kB (UM) 650*32kB (UM) 7788*64kB (UM) 3716*128kB (UM) 1087*256kB (U) 5*512kB (U) 2*1024kB (U) 0*2048kB 0*4096kB = 1304716kB [ 1197.521854] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1197.531315] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1197.540502] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1197.549932] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1197.559120] 61937 total pagecache pages [ 1197.564084] 0 pages in swap cache [ 1197.567627] Swap cache stats: add 0, delete 0, find 0/0 [ 1197.573948] Free swap = 0kB [ 1197.577050] Total swap = 0kB [ 1197.580139] 2097051 pages RAM [ 1197.584702] 0 pages HighMem/MovableOnly [ 1197.588755] 363848 pages reserved [ 1197.592277] 0 pages cma reserved [ 1199.083257] Bluetooth: hci0 command 0x040f tx timeout [ 1199.557305] syz-fuzzer invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1199.582913] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 1199.587755] CPU: 0 PID: 7976 Comm: syz-fuzzer Not tainted 4.14.230-syzkaller #0 [ 1199.595230] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1199.604592] Call Trace: [ 1199.607187] dump_stack+0x1b2/0x281 [ 1199.610816] dump_header+0x178/0x82f [ 1199.614530] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1199.619636] ? ___ratelimit+0x2cd/0x530 [ 1199.623623] oom_kill_process.cold+0x10/0xa40 [ 1199.628134] out_of_memory+0xe3e/0x1190 [ 1199.632116] ? oom_killer_disable+0x1c0/0x1c0 [ 1199.636614] ? mutex_trylock+0x152/0x1a0 [ 1199.640686] __alloc_pages_nodemask+0x23e1/0x2720 [ 1199.645551] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1199.650415] alloc_pages_current+0x155/0x260 [ 1199.654835] filemap_fault+0x11a1/0x1ad0 [ 1199.658904] ext4_filemap_fault+0x84/0xb0 [ 1199.663057] __do_fault+0xfa/0x380 [ 1199.666600] __handle_mm_fault+0x2497/0x4620 [ 1199.671011] ? vm_insert_page+0x7c0/0x7c0 [ 1199.675248] ? setup_sigcontext+0x820/0x820 [ 1199.679573] ? mark_held_locks+0xa6/0xf0 [ 1199.683635] handle_mm_fault+0x455/0x9c0 [ 1199.687696] __do_page_fault+0x549/0xad0 [ 1199.691755] ? spurious_fault+0x640/0x640 [ 1199.695948] ? do_page_fault+0x60/0x500 [ 1199.699902] ? page_fault+0x2f/0x50 [ 1199.703505] page_fault+0x45/0x50 [ 1199.706936] RIP: 2b5af8: (null) [ 1199.710972] RSP: 0008:000000c000047940 EFLAGS: 0000a0aa [ 1199.712337] Mem-Info: [ 1199.720150] active_anon:13436 inactive_anon:55497 isolated_anon:0 [ 1199.720150] active_file:32 inactive_file:24 isolated_file:0 [ 1199.720150] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1199.720150] slab_reclaimable:12345 slab_unreclaimable:113597 [ 1199.720150] mapped:52762 shmem:56083 pagetables:716 bounce:0 [ 1199.720150] free:25137 free_pcp:30 free_cma:0 [ 1199.753428] Node 0 active_anon:52952kB inactive_anon:165220kB active_file:16kB inactive_file:96kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:172392kB dirty:0kB writeback:0kB shmem:167164kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1199.781420] Node 1 active_anon:792kB inactive_anon:56768kB active_file:112kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:38656kB dirty:0kB writeback:0kB shmem:57168kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1199.808573] Node 0 DMA free:11052kB min:204kB low:252kB high:300kB active_anon:2072kB inactive_anon:0kB active_file:8kB inactive_file:4kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1199.835419] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1199.840440] Node 0 DMA32 free:35940kB min:36200kB low:45248kB high:54296kB active_anon:50880kB inactive_anon:165220kB active_file:0kB inactive_file:24kB unevictable:0kB writepending:0kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:7200kB pagetables:2672kB bounce:0kB free_pcp:116kB local_pcp:0kB free_cma:0kB [ 1199.869217] lowmem_reserve[]: 0 0 0 0 0 [ 1199.873254] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1199.898922] lowmem_reserve[]: 0 0 0 0 0 [ 1199.902992] Node 1 Normal free:53464kB min:53696kB low:67120kB high:80544kB active_anon:792kB inactive_anon:56768kB active_file:112kB inactive_file:0kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:224kB pagetables:192kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1199.931559] lowmem_reserve[]: 0 0 0 0 0 [ 1199.935623] Node 0 DMA: 10*4kB (UME) 7*8kB (UM) 7*16kB (M) 5*32kB (UME) 7*64kB (UME) 14*128kB (UME) 7*256kB (UME) 3*512kB (UME) 1*1024kB (E) 2*2048kB (UM) 0*4096kB = 11056kB [ 1199.951402] Node 0 DMA32: 965*4kB (ME) 417*8kB (UME) 312*16kB (UME) 105*32kB (UME) 49*64kB (UM) 22*128kB (M) 33*256kB (UM) 12*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 36092kB [ 1199.967521] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1199.978296] Node 1 Normal: 36*4kB (UM) 15*8kB (M) 11*16kB (UM) 13*32kB (UM) 6*64kB (M) 6*128kB (UM) 181*256kB (UM) 6*512kB (UM) 2*1024kB (U) 0*2048kB 0*4096kB = 53464kB [ 1199.993642] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1200.002479] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1200.011159] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1200.020037] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1200.028672] 56118 total pagecache pages [ 1200.032652] 0 pages in swap cache [ 1200.036142] Swap cache stats: add 0, delete 0, find 0/0 [ 1200.041540] Free swap = 0kB [ 1200.044680] Total swap = 0kB [ 1200.047698] 2097051 pages RAM [ 1200.050800] 0 pages HighMem/MovableOnly [ 1200.054831] 363848 pages reserved [ 1200.058272] 0 pages cma reserved [ 1200.061706] Out of memory (oom_kill_allocating_task): Kill process 7976 (syz-fuzzer) score 0 or sacrifice child [ 1200.072064] Killed process 26914 (syz-executor.0) total-vm:84924kB, anon-rss:68kB, file-rss:0kB, shmem-rss:0kB [ 1200.098203] oom_reaper: reaped process 26914 (syz-executor.0), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1200.113105] syz-fuzzer invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1200.137160] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 1200.141974] CPU: 1 PID: 7975 Comm: syz-fuzzer Not tainted 4.14.230-syzkaller #0 [ 1200.149428] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1200.158778] Call Trace: [ 1200.161354] dump_stack+0x1b2/0x281 [ 1200.164974] dump_header+0x178/0x82f [ 1200.168682] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1200.173770] ? ___ratelimit+0x2cd/0x530 [ 1200.177729] oom_kill_process.cold+0x10/0xa40 [ 1200.182211] out_of_memory+0xe3e/0x1190 [ 1200.186194] ? oom_killer_disable+0x1c0/0x1c0 [ 1200.190680] ? mutex_trylock+0x152/0x1a0 [ 1200.194725] __alloc_pages_nodemask+0x23e1/0x2720 [ 1200.199572] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1200.204427] alloc_pages_current+0x155/0x260 [ 1200.208830] filemap_fault+0x11a1/0x1ad0 [ 1200.212894] ext4_filemap_fault+0x84/0xb0 [ 1200.217042] __do_fault+0xfa/0x380 [ 1200.220564] __handle_mm_fault+0x2497/0x4620 [ 1200.224964] ? vm_insert_page+0x7c0/0x7c0 [ 1200.229104] ? queue_work_on+0xf7/0x1d0 [ 1200.233067] ? mark_held_locks+0xa6/0xf0 [ 1200.237128] handle_mm_fault+0x455/0x9c0 [ 1200.241192] __do_page_fault+0x549/0xad0 [ 1200.245255] ? spurious_fault+0x640/0x640 [ 1200.249396] ? do_page_fault+0x60/0x500 [ 1200.253402] ? page_fault+0x2f/0x50 [ 1200.257011] page_fault+0x45/0x50 [ 1200.260452] RIP: 0000:0x940aec [ 1200.263633] RSP: 584f76f8:000000c00003dfa0 EFLAGS: 0043b6a0 [ 1200.299633] Mem-Info: [ 1200.337110] active_anon:13399 inactive_anon:55497 isolated_anon:0 [ 1200.337110] active_file:158 inactive_file:217 isolated_file:0 [ 1200.337110] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1200.337110] slab_reclaimable:12345 slab_unreclaimable:112796 [ 1200.337110] mapped:44332 shmem:56083 pagetables:671 bounce:0 [ 1200.337110] free:25154 free_pcp:58 free_cma:0 [ 1200.441089] Node 0 active_anon:52804kB inactive_anon:165220kB active_file:120kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):40kB mapped:137772kB dirty:0kB writeback:0kB shmem:167164kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1200.469095] Node 1 active_anon:792kB inactive_anon:56768kB active_file:32kB inactive_file:60kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:38656kB dirty:0kB writeback:0kB shmem:57168kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1200.496360] Node 0 DMA free:11056kB min:204kB low:252kB high:300kB active_anon:2072kB inactive_anon:0kB active_file:4kB inactive_file:4kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1200.523391] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1200.528543] Node 0 DMA32 free:36240kB min:36200kB low:45248kB high:54296kB active_anon:50732kB inactive_anon:165220kB active_file:164kB inactive_file:340kB unevictable:0kB writepending:0kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:7200kB pagetables:2492kB bounce:0kB free_pcp:912kB local_pcp:368kB free_cma:0kB [ 1200.603519] lowmem_reserve[]: 0 0 0 0 0 [ 1200.607543] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1200.701857] lowmem_reserve[]: 0 0 0 0 0 [ 1200.738380] Node 1 Normal free:53464kB min:53696kB low:67120kB high:80544kB active_anon:792kB inactive_anon:56768kB active_file:144kB inactive_file:40kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:224kB pagetables:192kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1200.857514] lowmem_reserve[]: 0 0 0 0 0 [ 1200.861577] Node 0 DMA: 9*4kB (UME) 6*8kB (UM) 6*16kB (M) 6*32kB (UME) 7*64kB (UME) 14*128kB (UME) 7*256kB (UME) 3*512kB (UME) 1*1024kB (E) 2*2048kB (UM) 0*4096kB = 11060kB [ 1200.959552] Node 0 DMA32: 966*4kB (UME) 434*8kB (UME) 314*16kB (UME) 107*32kB (UME) 52*64kB (UM) 22*128kB (M) 33*256kB (UM) 12*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 36520kB [ 1201.042370] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1201.097666] Node 1 Normal: 36*4kB (UM) 16*8kB (UM) 11*16kB (UM) 13*32kB (UM) 6*64kB (M) 6*128kB (UM) 181*256kB (UM) 6*512kB (UM) 2*1024kB (U) 0*2048kB 0*4096kB = 53472kB [ 1201.188250] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1201.218190] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1201.245836] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1201.260716] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1201.269378] 56139 total pagecache pages [ 1201.292950] 0 pages in swap cache [ 1201.296437] Swap cache stats: add 0, delete 0, find 0/0 [ 1201.301794] Free swap = 0kB [ 1201.336088] Total swap = 0kB [ 1201.339143] 2097051 pages RAM [ 1201.342237] 0 pages HighMem/MovableOnly [ 1201.371349] 363848 pages reserved [ 1201.381875] 0 pages cma reserved [ 1201.398606] Out of memory (oom_kill_allocating_task): Kill process 7975 (syz-fuzzer) score 0 or sacrifice child [ 1201.424585] Killed process 26558 (syz-executor.5) total-vm:84924kB, anon-rss:64kB, file-rss:0kB, shmem-rss:0kB [ 1201.492666] oom_reaper: reaped process 26558 (syz-executor.5), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1201.633390] syz-fuzzer invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1201.657298] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 1201.662106] CPU: 1 PID: 7975 Comm: syz-fuzzer Not tainted 4.14.230-syzkaller #0 [ 1201.669576] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1201.678932] Call Trace: [ 1201.681534] dump_stack+0x1b2/0x281 [ 1201.685186] dump_header+0x178/0x82f [ 1201.688902] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1201.694005] ? ___ratelimit+0x2cd/0x530 [ 1201.697992] oom_kill_process.cold+0x10/0xa40 [ 1201.702489] out_of_memory+0xe3e/0x1190 [ 1201.706478] ? oom_killer_disable+0x1c0/0x1c0 [ 1201.710961] ? mutex_trylock+0x152/0x1a0 [ 1201.715016] __alloc_pages_nodemask+0x23e1/0x2720 [ 1201.719858] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1201.724706] alloc_pages_current+0x155/0x260 [ 1201.729109] filemap_fault+0x11a1/0x1ad0 [ 1201.733172] ext4_filemap_fault+0x84/0xb0 [ 1201.737312] __do_fault+0xfa/0x380 [ 1201.740857] __handle_mm_fault+0x2497/0x4620 [ 1201.745256] ? vm_insert_page+0x7c0/0x7c0 [ 1201.749390] ? queue_work_on+0xf7/0x1d0 [ 1201.753360] ? mark_held_locks+0xa6/0xf0 [ 1201.757411] handle_mm_fault+0x455/0x9c0 [ 1201.761461] __do_page_fault+0x549/0xad0 [ 1201.765519] ? spurious_fault+0x640/0x640 [ 1201.769655] ? do_page_fault+0x60/0x500 [ 1201.773619] ? page_fault+0x2f/0x50 [ 1201.777240] page_fault+0x45/0x50 [ 1201.780716] RIP: 0000:0x940aec [ 1201.783892] RSP: 584f76f8:000000c00003dfa0 EFLAGS: 0043b6a0 [ 1201.986667] Mem-Info: [ 1202.027636] active_anon:13372 inactive_anon:55497 isolated_anon:0 [ 1202.027636] active_file:29 inactive_file:19 isolated_file:0 [ 1202.027636] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1202.027636] slab_reclaimable:12345 slab_unreclaimable:112759 [ 1202.027636] mapped:35382 shmem:56083 pagetables:671 bounce:0 [ 1202.027636] free:25104 free_pcp:32 free_cma:0 [ 1202.061022] Node 0 active_anon:52692kB inactive_anon:165220kB active_file:12kB inactive_file:16kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:121444kB dirty:0kB writeback:0kB shmem:167164kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1202.088871] Node 1 active_anon:740kB inactive_anon:56768kB active_file:52kB inactive_file:52kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:19968kB dirty:0kB writeback:0kB shmem:57168kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1202.115996] Node 0 DMA free:11072kB min:204kB low:252kB high:300kB active_anon:2060kB inactive_anon:0kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1202.142940] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1202.147994] Node 0 DMA32 free:36256kB min:36200kB low:45248kB high:54296kB active_anon:50632kB inactive_anon:165220kB active_file:8kB inactive_file:16kB unevictable:0kB writepending:0kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:7104kB pagetables:2372kB bounce:0kB free_pcp:248kB local_pcp:124kB free_cma:0kB [ 1202.177060] lowmem_reserve[]: 0 0 0 0 0 [ 1202.181072] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1202.206784] lowmem_reserve[]: 0 0 0 0 0 [ 1202.211845] Node 1 Normal free:53680kB min:53696kB low:67120kB high:80544kB active_anon:740kB inactive_anon:56768kB active_file:52kB inactive_file:52kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:224kB pagetables:132kB bounce:0kB free_pcp:4kB local_pcp:0kB free_cma:0kB [ 1202.241423] lowmem_reserve[]: 0 0 0 0 0 [ 1202.245686] Node 0 DMA: 6*4kB (UME) 3*8kB (UM) 3*16kB (M) 3*32kB (UME) 4*64kB (UME) 11*128kB (UME) 8*256kB (UME) 4*512kB (UME) 1*1024kB (E) 2*2048kB (UM) 0*4096kB = 11072kB [ 1202.261493] Node 0 DMA32: 826*4kB (UME) 557*8kB (UME) 314*16kB (UME) 107*32kB (UME) 52*64kB (UM) 24*128kB (UM) 32*256kB (UM) 12*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 36944kB [ 1202.277764] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1202.293200] Node 1 Normal: 65*4kB (UM) 43*8kB (UM) 34*16kB (UM) 39*32kB (UM) 59*64kB (UM) 6*128kB (UM) 181*256kB (UM) 6*512kB (UM) 2*1024kB (U) 0*2048kB 0*4096kB = 58396kB [ 1202.312513] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1202.322378] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1202.331382] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1202.340514] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1202.349695] 56790 total pagecache pages [ 1202.354215] 0 pages in swap cache [ 1202.358726] Swap cache stats: add 0, delete 0, find 0/0 [ 1202.372864] Free swap = 0kB [ 1202.380099] Total swap = 0kB [ 1202.383213] 2097051 pages RAM [ 1202.386338] 0 pages HighMem/MovableOnly [ 1202.390745] 363848 pages reserved [ 1202.398458] 0 pages cma reserved [ 1202.419430] Out of memory (oom_kill_allocating_task): Kill process 7975 (syz-fuzzer) score 0 or sacrifice child [ 1202.460005] Killed process 26559 (syz-executor.2) total-vm:84924kB, anon-rss:60kB, file-rss:0kB, shmem-rss:0kB [ 1202.511753] oom_reaper: reaped process 26559 (syz-executor.2), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1202.811615] systemd invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1202.832793] systemd cpuset=/ mems_allowed=0-1 [ 1202.837443] CPU: 0 PID: 1 Comm: systemd Not tainted 4.14.230-syzkaller #0 [ 1202.844451] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1202.853805] Call Trace: [ 1202.856407] dump_stack+0x1b2/0x281 [ 1202.860044] dump_header+0x178/0x82f [ 1202.863777] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1202.868875] ? ___ratelimit+0x2cd/0x530 [ 1202.872857] oom_kill_process.cold+0x10/0xa40 [ 1202.877349] ? lock_downgrade+0x740/0x740 [ 1202.881501] out_of_memory+0x2dc/0x1190 [ 1202.885480] ? oom_killer_disable+0x1c0/0x1c0 [ 1202.889993] ? mutex_trylock+0x152/0x1a0 [ 1202.894058] __alloc_pages_nodemask+0x23e1/0x2720 [ 1202.898910] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1202.903764] alloc_pages_current+0x155/0x260 [ 1202.908170] filemap_fault+0x11a1/0x1ad0 [ 1202.912237] ext4_filemap_fault+0x84/0xb0 [ 1202.916407] __do_fault+0xfa/0x380 [ 1202.919942] __handle_mm_fault+0x2497/0x4620 [ 1202.924376] ? vm_insert_page+0x7c0/0x7c0 [ 1202.928538] ? lock_acquire+0x170/0x3f0 [ 1202.932517] ? mark_held_locks+0xa6/0xf0 [ 1202.936575] handle_mm_fault+0x455/0x9c0 [ 1202.940641] __do_page_fault+0x549/0xad0 [ 1202.944708] ? spurious_fault+0x640/0x640 [ 1202.948858] ? do_page_fault+0x60/0x500 [ 1202.952820] ? page_fault+0x2f/0x50 [ 1202.956436] page_fault+0x45/0x50 [ 1202.959878] RIP: 0000:0x7f9de0890e3e [ 1202.963574] RSP: 0000:0000000000000002 EFLAGS: 00000000 [ 1202.983635] Mem-Info: [ 1202.991421] active_anon:13358 inactive_anon:55497 isolated_anon:0 [ 1202.991421] active_file:71 inactive_file:8 isolated_file:0 [ 1202.991421] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1202.991421] slab_reclaimable:12330 slab_unreclaimable:112542 [ 1202.991421] mapped:35353 shmem:56083 pagetables:626 bounce:0 [ 1202.991421] free:25057 free_pcp:29 free_cma:0 [ 1203.139045] Node 0 active_anon:52608kB inactive_anon:165220kB active_file:68kB inactive_file:60kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:121448kB dirty:0kB writeback:0kB shmem:167164kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1203.184095] Node 1 active_anon:732kB inactive_anon:56768kB active_file:0kB inactive_file:96kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:19968kB dirty:0kB writeback:0kB shmem:57168kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1203.232919] Node 0 DMA free:11060kB min:204kB low:252kB high:300kB active_anon:2056kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1203.305599] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1203.310673] Node 0 DMA32 free:36216kB min:36200kB low:45248kB high:54296kB active_anon:50552kB inactive_anon:165220kB active_file:16kB inactive_file:64kB unevictable:0kB writepending:0kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:7104kB pagetables:2280kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1203.339578] lowmem_reserve[]: 0 0 0 0 0 [ 1203.343615] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1203.369211] lowmem_reserve[]: 0 0 0 0 0 [ 1203.373321] Node 1 Normal free:53596kB min:53696kB low:67120kB high:80544kB active_anon:732kB inactive_anon:56768kB active_file:4kB inactive_file:4kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:160kB pagetables:44kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1203.402162] lowmem_reserve[]: 0 0 0 0 0 [ 1203.406309] Node 0 DMA: 3*4kB (ME) 3*8kB (UM) 3*16kB (UM) 3*32kB (ME) 4*64kB (UME) 11*128kB (UME) 8*256kB (UME) 4*512kB (UME) 1*1024kB (E) 2*2048kB (UM) 0*4096kB = 11060kB [ 1203.422080] Node 0 DMA32: 973*4kB (ME) 415*8kB (UME) 319*16kB (UME) 105*32kB (UME) 51*64kB (M) 24*128kB (UM) 31*256kB (UM) 12*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 36092kB [ 1203.438112] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1203.450222] Node 1 Normal: 37*4kB (UM) 15*8kB (M) 11*16kB (UM) 11*32kB (UM) 7*64kB (UM) 5*128kB (UM) 180*256kB (UM) 7*512kB (UM) 2*1024kB (U) 0*2048kB 0*4096kB = 53596kB [ 1203.465654] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1203.474541] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1203.483151] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1203.491981] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1203.500604] 56117 total pagecache pages [ 1203.504634] 0 pages in swap cache [ 1203.508120] Swap cache stats: add 0, delete 0, find 0/0 [ 1203.513512] Free swap = 0kB [ 1203.516514] Total swap = 0kB [ 1203.519526] 2097051 pages RAM [ 1203.522631] 0 pages HighMem/MovableOnly [ 1203.526954] 363848 pages reserved [ 1203.530387] 0 pages cma reserved [ 1203.533781] Out of memory: Kill process 27300 (syz-executor.2) score 1005 or sacrifice child [ 1203.542378] Killed process 27302 (syz-executor.2) total-vm:93252kB, anon-rss:2192kB, file-rss:34820kB, shmem-rss:0kB [ 1203.591531] oom_reaper: reaped process 27302 (syz-executor.2), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1203.611214] systemd-journal invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1203.628392] systemd-journal cpuset=/ mems_allowed=0-1 [ 1203.634548] CPU: 1 PID: 26516 Comm: systemd-journal Not tainted 4.14.230-syzkaller #0 [ 1203.642516] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1203.651867] Call Trace: [ 1203.654465] dump_stack+0x1b2/0x281 [ 1203.658094] dump_header+0x178/0x82f [ 1203.661919] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1203.667042] ? ___ratelimit+0x2cd/0x530 [ 1203.671016] oom_kill_process.cold+0x10/0xa40 [ 1203.675519] out_of_memory+0xe3e/0x1190 [ 1203.679494] ? oom_killer_disable+0x1c0/0x1c0 [ 1203.683987] ? mutex_trylock+0x152/0x1a0 [ 1203.688047] __alloc_pages_nodemask+0x23e1/0x2720 [ 1203.692898] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1203.697754] alloc_pages_current+0x155/0x260 [ 1203.702154] filemap_fault+0x11a1/0x1ad0 [ 1203.702919] syz-executor.2: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1203.706213] ext4_filemap_fault+0x84/0xb0 [ 1203.706225] __do_fault+0xfa/0x380 [ 1203.725250] __handle_mm_fault+0x2497/0x4620 [ 1203.729017] (null) [ 1203.729655] ? vm_insert_page+0x7c0/0x7c0 [ 1203.731788] syz-executor.2 cpuset= [ 1203.735929] ? mark_held_locks+0xa6/0xf0 [ 1203.735941] handle_mm_fault+0x455/0x9c0 [ 1203.735954] __do_page_fault+0x549/0xad0 [ 1203.735966] ? spurious_fault+0x640/0x640 [ 1203.735975] ? do_page_fault+0x60/0x500 [ 1203.735984] ? page_fault+0x2f/0x50 [ 1203.735991] page_fault+0x45/0x50 [ 1203.736001] RIP: 2f755040:0x7fff62b27ce0 [ 1203.749359] / [ 1203.751648] RSP: 62b27d20:000000000000000d EFLAGS: ffffffff [ 1203.757813] mems_allowed=0-1 [ 1203.767409] Mem-Info: [ 1203.780816] CPU: 0 PID: 27302 Comm: syz-executor.2 Not tainted 4.14.230-syzkaller #0 [ 1203.783414] active_anon:12787 inactive_anon:55497 isolated_anon:0 [ 1203.783414] active_file:33 inactive_file:1 isolated_file:0 [ 1203.783414] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1203.783414] slab_reclaimable:12330 slab_unreclaimable:112564 [ 1203.783414] mapped:26650 shmem:56083 pagetables:580 bounce:0 [ 1203.783414] free:13848 free_pcp:112 free_cma:0 [ 1203.783897] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1203.791787] Node 0 active_anon:50416kB inactive_anon:165220kB active_file:128kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:106600kB dirty:0kB writeback:0kB shmem:167164kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1203.824904] Call Trace: [ 1203.824928] dump_stack+0x1b2/0x281 [ 1203.824942] warn_alloc.cold+0x96/0x1cc [ 1203.824961] ? zone_watermark_ok_safe+0x220/0x220 [ 1203.824974] ? usleep_range+0x130/0x130 [ 1203.834362] Node 1 active_anon:732kB inactive_anon:56768kB active_file:4kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:57168kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1203.862264] ? try_to_free_pages+0x23f/0x6e0 [ 1203.862276] ? _find_next_bit+0xdb/0x100 [ 1203.862286] ? run_timer_softirq+0x5a0/0x5a0 [ 1203.862307] __alloc_pages_nodemask+0x2127/0x2720 [ 1203.864894] Node 0 [ 1203.868498] ? lock_acquire+0x170/0x3f0 [ 1203.872456] DMA free:10960kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1203.877272] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1203.877283] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1203.877302] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1203.881251] lowmem_reserve[]: [ 1203.911976] ? alloc_pages_current+0xe3/0x260 [ 1203.911987] alloc_pages_current+0x155/0x260 [ 1203.912001] ion_page_pool_alloc+0x118/0x1b0 [ 1203.912011] ion_system_heap_allocate+0x133/0x8c0 [ 1203.916420] 0 [ 1203.920448] ? ion_alloc+0x187/0x810 [ 1203.924854] 2717 [ 1203.929664] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1203.931871] 2718 [ 1203.935830] ? ion_system_contig_heap_create+0x130/0x130 [ 1203.935840] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1203.935852] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1203.935862] ion_alloc+0x204/0x810 [ 1203.961399] 2718 [ 1203.966207] ? ion_dma_buf_release+0x40/0x40 [ 1203.966225] ? __might_fault+0x177/0x1b0 [ 1203.970699] 2718 [ 1203.976146] ion_ioctl+0xea/0x1f0 [ 1203.976155] ? ion_query_heaps+0x360/0x360 [ 1203.976166] ? ion_query_heaps+0x360/0x360 [ 1203.976177] do_vfs_ioctl+0x75a/0xff0 [ 1203.983780] ? ioctl_preallocate+0x1a0/0x1a0 [ 1203.983790] ? lock_downgrade+0x740/0x740 [ 1203.983804] ? __fget+0x225/0x360 [ 1203.988187] Node 0 [ 1203.992580] ? do_vfs_ioctl+0xff0/0xff0 [ 1203.997432] DMA32 free:17620kB min:36200kB low:45248kB high:54296kB active_anon:50416kB inactive_anon:165220kB active_file:128kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:7104kB pagetables:2276kB bounce:0kB free_pcp:260kB local_pcp:120kB free_cma:0kB [ 1203.999185] ? security_file_ioctl+0x83/0xb0 [ 1204.002896] lowmem_reserve[]: [ 1204.004927] SyS_ioctl+0x7f/0xb0 [ 1204.010350] 0 [ 1204.012414] ? do_vfs_ioctl+0xff0/0xff0 [ 1204.017877] 0 [ 1204.022864] do_syscall_64+0x1d5/0x640 [ 1204.022883] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1204.022896] RIP: 0033:0x466459 [ 1204.027733] 0 [ 1204.031275] RSP: 002b:00007fe6eefd0188 EFLAGS: 00000246 [ 1204.033351] 0 [ 1204.037704] ORIG_RAX: 0000000000000010 [ 1204.037713] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1204.041751] 0 [ 1204.043812] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000005 [ 1204.043818] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1204.043823] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1204.043828] R13: 00007ffebc240abf R14: 00007fe6eefd0300 R15: 0000000000022000 [ 1204.054842] warn_alloc_show_mem: 1 callbacks suppressed [ 1204.054846] Mem-Info: [ 1204.080796] active_anon:12787 inactive_anon:55497 isolated_anon:0 [ 1204.080796] active_file:17 inactive_file:17 isolated_file:0 [ 1204.080796] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1204.080796] slab_reclaimable:12330 slab_unreclaimable:112564 [ 1204.080796] mapped:26650 shmem:56083 pagetables:580 bounce:0 [ 1204.080796] free:13848 free_pcp:110 free_cma:0 [ 1204.112349] Node 0 [ 1204.122650] Node 0 active_anon:50416kB inactive_anon:165220kB active_file:64kB inactive_file:64kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:106600kB dirty:0kB writeback:0kB shmem:167164kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1204.130575] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1204.143912] Node 1 active_anon:732kB inactive_anon:56768kB active_file:4kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:57168kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1204.150202] lowmem_reserve[]: [ 1204.167222] Node 0 [ 1204.179608] 0 [ 1204.190827] DMA free:10960kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1204.200521] 0 [ 1204.239854] lowmem_reserve[]: [ 1204.269861] 0 [ 1204.295695] 0 [ 1204.322442] 0 [ 1204.355581] 2717 2718 2718 2718 [ 1204.360765] Node 0 DMA32 free:17620kB min:36200kB low:45248kB high:54296kB active_anon:50416kB inactive_anon:165220kB active_file:64kB inactive_file:64kB unevictable:0kB writepending:0kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:7104kB pagetables:2276kB bounce:0kB free_pcp:244kB local_pcp:136kB free_cma:0kB [ 1204.363330] 0 [ 1204.396314] lowmem_reserve[]: 0 0 0 0 0 [ 1204.402212] Node 1 Normal free:26812kB min:53696kB low:67120kB high:80544kB active_anon:732kB inactive_anon:56768kB active_file:4kB inactive_file:4kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:160kB pagetables:44kB bounce:0kB free_pcp:188kB local_pcp:68kB free_cma:0kB [ 1204.402244] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1204.441124] lowmem_reserve[]: [ 1204.469274] lowmem_reserve[]: 0 0 0 0 0 [ 1204.476430] Node 1 Normal free:26812kB min:53696kB low:67120kB high:80544kB active_anon:732kB inactive_anon:56768kB active_file:4kB inactive_file:4kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:160kB pagetables:44kB bounce:0kB free_pcp:188kB local_pcp:120kB free_cma:0kB [ 1204.476545] 0 [ 1204.511781] lowmem_reserve[]: 0 0 0 0 0 [ 1204.515306] 0 0 0 0 [ 1204.517676] Node 0 [ 1204.519975] Node 0 [ 1204.519982] DMA: [ 1204.522200] DMA: [ 1204.530595] 2*4kB (UE) 1*8kB (U) 0*16kB 2*32kB (UE) 2*64kB (UE) 2*128kB (UE) 1*256kB (E) 2*512kB (UE) 1*1024kB (E) 2*2048kB (UM) 1*4096kB (M) = 10960kB [ 1204.535663] 2*4kB [ 1204.552702] Node 0 DMA32: 925*4kB (ME) 362*8kB (UME) 267*16kB (UME) 61*32kB (ME) 31*64kB (UM) 16*128kB (UM) 1*256kB (M) 1*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 17620kB [ 1204.556691] (UE) [ 1204.576543] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1204.580592] 1*8kB (U) 0*16kB 2*32kB (UE) 2*64kB (UE) 2*128kB (UE) 1*256kB (E) 2*512kB (UE) 1*1024kB (E) 2*2048kB (UM) [ 1204.591495] Node 1 Normal: 35*4kB (M) 16*8kB (UM) 11*16kB (UM) 10*32kB (M) 7*64kB (UM) 4*128kB (M) 76*256kB (UM) 7*512kB (UM) 2*1024kB (U) 0*2048kB 0*4096kB = 26812kB [ 1204.611551] 1*4096kB (M) = 10960kB [ 1204.634840] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1204.637737] Node 0 [ 1204.654985] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1204.656272] DMA32: [ 1204.657256] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1204.670405] 925*4kB (ME) 362*8kB (UME) 267*16kB (UME) 61*32kB (ME) 31*64kB (UM) 16*128kB (UM) 1*256kB (M) 1*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 17620kB [ 1204.685043] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1204.704542] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1204.713170] 56117 total pagecache pages [ 1204.720040] 0 pages in swap cache [ 1204.723943] Node 1 Normal: 35*4kB (M) 16*8kB (UM) 11*16kB (UM) 10*32kB (M) 7*64kB (UM) 4*128kB (M) 76*256kB (UM) 7*512kB (UM) 2*1024kB (U) 0*2048kB 0*4096kB = 26812kB [ 1204.729347] Swap cache stats: add 0, delete 0, find 0/0 [ 1204.746703] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1204.752449] Free swap = 0kB [ 1204.758578] Total swap = 0kB [ 1204.759337] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1204.761588] 2097051 pages RAM [ 1204.774359] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1204.781650] 0 pages HighMem/MovableOnly [ 1204.787298] 363848 pages reserved [ 1204.789084] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1204.790758] 0 pages cma reserved [ 1204.801520] 56117 total pagecache pages [ 1204.826257] 0 pages in swap cache [ 1204.829742] Swap cache stats: add 0, delete 0, find 0/0 [ 1204.847022] Free swap = 0kB [ 1204.850117] Total swap = 0kB [ 1204.855689] 2097051 pages RAM [ 1204.859198] 0 pages HighMem/MovableOnly [ 1204.886833] 363848 pages reserved [ 1204.890301] 0 pages cma reserved [ 1204.906894] Out of memory (oom_kill_allocating_task): Kill process 26516 (systemd-journal) score 0 or sacrifice child [ 1204.929811] Killed process 26516 (systemd-journal) total-vm:46096kB, anon-rss:472kB, file-rss:0kB, shmem-rss:2148kB [ 1204.967715] oom_reaper: reaped process 26516 (systemd-journal), now anon-rss:0kB, file-rss:0kB, shmem-rss:2152kB [ 1205.245467] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1205.252342] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1205.283911] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1205.290640] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1205.324227] device bridge_slave_1 left promiscuous mode [ 1205.329906] bridge0: port 2(bridge_slave_1) entered disabled state [ 1205.354174] device bridge_slave_0 left promiscuous mode [ 1205.359829] bridge0: port 1(bridge_slave_0) entered disabled state [ 1205.393493] device veth1_macvtap left promiscuous mode [ 1205.398907] device veth0_macvtap left promiscuous mode [ 1205.408994] device veth1_vlan left promiscuous mode [ 1205.414180] device veth0_vlan left promiscuous mode [ 1205.624708] device hsr_slave_1 left promiscuous mode [ 1205.644174] device hsr_slave_0 left promiscuous mode [ 1205.684329] team0 (unregistering): Port device team_slave_1 removed [ 1205.704660] team0 (unregistering): Port device team_slave_0 removed [ 1205.726170] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 1205.748577] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 1205.830050] bond0 (unregistering): Released all slaves [ 1206.324829] syz-executor.2: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1206.356363] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 1206.361625] CPU: 0 PID: 27302 Comm: syz-executor.2 Not tainted 4.14.230-syzkaller #0 [ 1206.362110] systemd[1]: systemd-journald.service: Failed with result 'signal'. [ 1206.369526] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1206.369531] Call Trace: [ 1206.369550] dump_stack+0x1b2/0x281 [ 1206.369563] warn_alloc.cold+0x96/0x1cc [ 1206.369575] ? zone_watermark_ok_safe+0x220/0x220 [ 1206.369596] __alloc_pages_nodemask+0x2127/0x2720 [ 1206.369610] ? _raw_spin_unlock_irq+0x24/0x80 [ 1206.396617] systemd[1]: systemd-journald.service: Service has no hold-off time, scheduling restart. [ 1206.401314] ? lock_acquire+0x170/0x3f0 [ 1206.414135] systemd[1]: Stopped Journal Service. [ 1206.419822] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1206.433382] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1206.438836] ? __mutex_unlock_slowpath+0x75/0x770 [ 1206.443684] alloc_pages_current+0x155/0x260 [ 1206.448126] ion_page_pool_alloc+0x118/0x1b0 [ 1206.452534] ion_system_heap_allocate+0x133/0x8c0 [ 1206.452543] systemd[1]: Starting Journal Service... [ 1206.457376] ? _raw_spin_unlock+0x29/0x40 [ 1206.457385] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1206.457394] ? ion_system_contig_heap_create+0x130/0x130 [ 1206.457404] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1206.457417] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1206.457427] ion_alloc+0x27a/0x810 [ 1206.490333] ? ion_dma_buf_release+0x40/0x40 [ 1206.494742] ? __might_fault+0x177/0x1b0 [ 1206.498803] ion_ioctl+0xea/0x1f0 [ 1206.502253] ? ion_query_heaps+0x360/0x360 [ 1206.506497] ? ion_query_heaps+0x360/0x360 [ 1206.510728] do_vfs_ioctl+0x75a/0xff0 [ 1206.514527] ? ioctl_preallocate+0x1a0/0x1a0 [ 1206.518951] ? lock_downgrade+0x740/0x740 [ 1206.523118] ? __fget+0x225/0x360 [ 1206.526566] ? do_vfs_ioctl+0xff0/0xff0 [ 1206.530534] ? security_file_ioctl+0x83/0xb0 [ 1206.534939] SyS_ioctl+0x7f/0xb0 [ 1206.538298] ? do_vfs_ioctl+0xff0/0xff0 [ 1206.542271] do_syscall_64+0x1d5/0x640 [ 1206.546196] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1206.551383] RIP: 0033:0x466459 [ 1206.554571] RSP: 002b:00007fe6eefd0188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1206.562276] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1206.569551] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000005 [ 1206.576819] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1206.584085] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1206.591372] R13: 00007ffebc240abf R14: 00007fe6eefd0300 R15: 0000000000022000 [ 1206.774175] systemd[1]: Started Load/Save RF Kill Switch Status. [ 1206.862392] systemd-journald[27351]: File /run/log/journal/04d8c135ee6b410280ba31a58c89679d/system.journal corrupted or uncleanly shut down, renaming and replacing. [ 1206.888361] Mem-Info: [ 1206.890925] active_anon:12868 inactive_anon:55490 isolated_anon:12 [ 1206.890925] active_file:1185 inactive_file:1781 isolated_file:0 [ 1206.890925] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1206.890925] slab_reclaimable:12304 slab_unreclaimable:110697 [ 1206.890925] mapped:28062 shmem:56075 pagetables:596 bounce:0 [ 1206.890925] free:155852 free_pcp:109 free_cma:0 [ 1206.924830] Node 0 active_anon:50740kB inactive_anon:171304kB active_file:2632kB inactive_file:3536kB unevictable:0kB isolated(anon):48kB isolated(file):0kB mapped:107752kB dirty:0kB writeback:0kB shmem:173248kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1206.953163] Node 1 active_anon:732kB inactive_anon:56756kB active_file:2108kB inactive_file:3588kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:4496kB dirty:0kB writeback:0kB shmem:57152kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1206.980602] Node 0 DMA free:11000kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1207.007507] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1207.012564] Node 0 DMA32 free:326312kB min:36200kB low:45248kB high:54296kB active_anon:50800kB inactive_anon:173304kB active_file:2720kB inactive_file:3448kB unevictable:0kB writepending:0kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:7104kB pagetables:2356kB bounce:0kB free_pcp:432kB local_pcp:336kB free_cma:0kB [ 1207.052879] lowmem_reserve[]: 0 0 0 0 0 [ 1207.056913] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1207.101745] lowmem_reserve[]: 0 0 0 0 0 [ 1207.108519] Node 1 Normal free:229980kB min:53696kB low:67120kB high:80544kB active_anon:732kB inactive_anon:56756kB active_file:2176kB inactive_file:3540kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:160kB pagetables:44kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1207.172928] lowmem_reserve[]: 0 0 0 0 0 [ 1207.177197] Node 0 DMA: 60*4kB (UE) 31*8kB (U) 17*16kB (U) 10*32kB (UE) 1*64kB (E) 1*128kB (E) 2*256kB (UE) 2*512kB (UE) 2*1024kB (UE) 1*2048kB (M) 1*4096kB (M) = 11000kB [ 1207.212887] Node 0 DMA32: 2*4kB (UM) 0*8kB 7342*16kB (U) 4148*32kB (UE) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 250216kB [ 1207.242970] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1207.263052] Node 1 Normal: 4075*4kB (UM) 4076*8kB (UM) 3909*16kB (UM) 3704*32kB (U) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 229980kB [ 1207.292931] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1207.301846] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1207.322954] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1207.332351] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1207.344608] 61120 total pagecache pages [ 1207.348614] 0 pages in swap cache [ 1207.352066] Swap cache stats: add 0, delete 0, find 0/0 [ 1207.357523] Free swap = 0kB [ 1207.360544] Total swap = 0kB [ 1207.363650] 2097051 pages RAM [ 1207.366754] 0 pages HighMem/MovableOnly [ 1207.370724] 363848 pages reserved [ 1207.377750] 0 pages cma reserved 13:37:43 executing program 1: r0 = semget$private(0x0, 0x1, 0x0) semctl$IPC_STAT(r0, 0x0, 0x2, 0x0) 13:37:43 executing program 3: ioctl$SIOCPNDELRESOURCE(0xffffffffffffffff, 0x89ef, &(0x7f0000000040)=0xffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000012c0)={0x0, @nl=@unspec, @tipc=@id={0x1e, 0x3, 0x2, {0x4e21, 0x4}}, @ethernet={0x307, @random="68d88c73bc2f"}, 0x0, 0x0, 0x0, 0x0, 0x20, &(0x7f0000001280)='bridge_slave_0\x00', 0x401, 0x0, 0xfd51}) semctl$SETVAL(0x0, 0x0, 0x10, 0x0) semctl$GETVAL(0x0, 0x0, 0xc, &(0x7f0000000180)=""/194) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$x25(0x9, 0x5, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x500, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x80000000, 0xa, 0x1}) 13:37:43 executing program 4: r0 = semget$private(0x0, 0x0, 0x484) semctl$IPC_STAT(r0, 0x0, 0x2, &(0x7f00000000c0)=""/89) [ 1207.726950] systemd[1]: Started Journal Service. [ 1207.949024] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1207.959181] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1207.979954] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1207.997112] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1208.017681] device bridge_slave_1 left promiscuous mode [ 1208.032082] bridge0: port 2(bridge_slave_1) entered disabled state [ 1208.052634] device bridge_slave_0 left promiscuous mode [ 1208.067431] bridge0: port 1(bridge_slave_0) entered disabled state [ 1208.091107] device veth1_macvtap left promiscuous mode [ 1208.102020] device veth0_macvtap left promiscuous mode [ 1208.116387] device veth1_vlan left promiscuous mode [ 1208.130448] device veth0_vlan left promiscuous mode [ 1208.198370] syz-executor.3: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1208.238293] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 1208.250000] CPU: 1 PID: 27356 Comm: syz-executor.3 Not tainted 4.14.230-syzkaller #0 [ 1208.257922] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1208.267288] Call Trace: [ 1208.269901] dump_stack+0x1b2/0x281 [ 1208.273538] warn_alloc.cold+0x96/0x1cc [ 1208.277536] ? zone_watermark_ok_safe+0x220/0x220 [ 1208.282394] __alloc_pages_nodemask+0x2127/0x2720 [ 1208.287236] ? io_schedule_timeout+0x140/0x140 [ 1208.291835] ? lock_acquire+0x170/0x3f0 [ 1208.295821] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1208.300679] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1208.306138] ? __mutex_unlock_slowpath+0x75/0x770 [ 1208.310986] alloc_pages_current+0x155/0x260 [ 1208.315485] ion_page_pool_alloc+0x118/0x1b0 [ 1208.319924] ion_system_heap_allocate+0x133/0x8c0 [ 1208.324772] ? ion_alloc+0x187/0x810 [ 1208.328511] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1208.333965] ? ion_system_contig_heap_create+0x130/0x130 [ 1208.339424] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1208.344464] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1208.349317] ion_alloc+0x204/0x810 [ 1208.352865] ? ion_dma_buf_release+0x40/0x40 [ 1208.357282] ? __might_fault+0x177/0x1b0 [ 1208.361350] ion_ioctl+0xea/0x1f0 [ 1208.364849] ? ion_query_heaps+0x360/0x360 [ 1208.369096] ? ion_query_heaps+0x360/0x360 [ 1208.373339] do_vfs_ioctl+0x75a/0xff0 [ 1208.377186] ? ioctl_preallocate+0x1a0/0x1a0 [ 1208.381600] ? lock_downgrade+0x740/0x740 [ 1208.385756] ? __fget+0x225/0x360 [ 1208.389212] ? do_vfs_ioctl+0xff0/0xff0 [ 1208.393191] ? security_file_ioctl+0x83/0xb0 [ 1208.397607] SyS_ioctl+0x7f/0xb0 [ 1208.400976] ? do_vfs_ioctl+0xff0/0xff0 [ 1208.404954] do_syscall_64+0x1d5/0x640 [ 1208.408851] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1208.414045] RIP: 0033:0x466459 [ 1208.417228] RSP: 002b:00007f8a667e8188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1208.424947] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1208.432228] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000005 [ 1208.439504] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1208.446784] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1208.454057] R13: 00007ffd25ba1ddf R14: 00007f8a667e8300 R15: 0000000000022000 [ 1208.470478] Bluetooth: hci3 command 0x0406 tx timeout [ 1208.509195] Mem-Info: [ 1208.519147] active_anon:12886 inactive_anon:57530 isolated_anon:12 [ 1208.519147] active_file:1563 inactive_file:2558 isolated_file:12 [ 1208.519147] unevictable:0 dirty:32 writeback:0 unstable:0 [ 1208.519147] slab_reclaimable:12236 slab_unreclaimable:111678 [ 1208.519147] mapped:29172 shmem:58124 pagetables:602 bounce:0 [ 1208.519147] free:107637 free_pcp:53 free_cma:0 [ 1208.581722] device hsr_slave_1 left promiscuous mode [ 1208.590822] device hsr_slave_0 left promiscuous mode [ 1208.606046] Node 0 active_anon:50820kB inactive_anon:173364kB active_file:4004kB inactive_file:6764kB unevictable:0kB isolated(anon):0kB isolated(file):48kB mapped:111996kB dirty:124kB writeback:0kB shmem:175344kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1208.643860] team0 (unregistering): Port device team_slave_1 removed [ 1208.659715] team0 (unregistering): Port device team_slave_0 removed [ 1208.669734] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 1208.682501] Node 1 active_anon:724kB inactive_anon:56756kB active_file:2248kB inactive_file:3468kB unevictable:0kB isolated(anon):48kB isolated(file):0kB mapped:4692kB dirty:4kB writeback:0kB shmem:57152kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1208.722400] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 1208.741575] Node 0 DMA free:11080kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1208.789274] bond0 (unregistering): Released all slaves [ 1208.806702] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1208.818163] Node 0 DMA32 free:45160kB min:36200kB low:45248kB high:54296kB active_anon:50820kB inactive_anon:173364kB active_file:4004kB inactive_file:6764kB unevictable:0kB writepending:124kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:7136kB pagetables:2364kB bounce:0kB free_pcp:828kB local_pcp:664kB free_cma:0kB [ 1208.859804] lowmem_reserve[]: 0 0 0 0 0 [ 1208.866530] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1208.895948] lowmem_reserve[]: 0 0 0 0 0 [ 1208.899974] Node 1 Normal free:515904kB min:53696kB low:67120kB high:80544kB active_anon:724kB inactive_anon:56756kB active_file:2248kB inactive_file:3468kB unevictable:0kB writepending:4kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:160kB pagetables:44kB bounce:0kB free_pcp:128kB local_pcp:0kB free_cma:0kB [ 1208.952874] lowmem_reserve[]: 0 0 0 0 0 [ 1208.956906] Node 0 DMA: 60*4kB (UE) 28*8kB (U) 16*16kB (U) 10*32kB (UE) 3*64kB (UE) 1*128kB (E) 2*256kB (UE) 2*512kB (UE) 2*1024kB (UE) 1*2048kB (M) 1*4096kB (M) = 11088kB [ 1208.995566] Node 0 DMA32: 119*4kB (UME) 212*8kB (UME) 1*16kB (U) 1182*32kB (UE) 55*64kB (U) 4*128kB (U) 5*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 45324kB [ 1209.035568] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1209.056171] Node 1 Normal: 2*4kB (UM) 1*8kB (U) 0*16kB 4055*32kB (U) 5127*64kB (U) 585*128kB (U) 11*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 535600kB [ 1209.092928] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1209.101982] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1209.134931] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1209.155491] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1209.175499] 62249 total pagecache pages [ 1209.179512] 0 pages in swap cache [ 1209.194998] Swap cache stats: add 0, delete 0, find 0/0 [ 1209.204145] Free swap = 0kB [ 1209.207196] Total swap = 0kB [ 1209.210213] 2097051 pages RAM [ 1209.234936] 0 pages HighMem/MovableOnly [ 1209.238944] 363848 pages reserved [ 1209.242394] 0 pages cma reserved 13:37:46 executing program 5: semget$private(0x0, 0x1, 0x0) semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f00000000c0)=""/89) 13:37:46 executing program 2: ioctl$SIOCPNDELRESOURCE(0xffffffffffffffff, 0x89ef, &(0x7f0000000040)=0xffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000004f80)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f00000012c0)={0x0, @nl=@unspec, @tipc=@id={0x1e, 0x3, 0x2, {0x4e21, 0x4}}, @ethernet={0x307, @random="68d88c73bc2f"}, 0x0, 0x0, 0x0, 0x0, 0x20, &(0x7f0000001280)='bridge_slave_0\x00', 0x401, 0x0, 0xfd51}) semctl$SETVAL(0x0, 0x0, 0x10, 0x0) semctl$GETVAL(0x0, 0x0, 0xc, &(0x7f0000000180)=""/194) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$x25(0x9, 0x5, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x500, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x80000000, 0xa, 0x1}) 13:37:46 executing program 0: timer_create(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, @thr={&(0x7f0000000000)="cedfad775dd967d003dbe52d40534e44b24e419a438ccb478ff3986437dfb2fca4ea25e257ce70593b4b4f61cdbbf5a2983c0c90c1e3d51f07a4095f", &(0x7f0000000040)="8bd19b303ba21500f7c2d3f7cc2fd29ae3c6db45e63c59054646e1b44d3003f74d33b6c48e8208376d6b0111434cdac6450a"}}, &(0x7f00000000c0)) 13:37:46 executing program 4: semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f00000000c0)=""/89) 13:37:46 executing program 1: r0 = semget$private(0x0, 0x1, 0x0) semctl$IPC_STAT(r0, 0x0, 0x2, 0x0) 13:37:46 executing program 1: ioctl$SIOCPNDELRESOURCE(0xffffffffffffffff, 0x89ef, &(0x7f0000000040)=0xffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000004f80)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f00000012c0)={0x0, @nl=@unspec, @tipc=@id={0x1e, 0x3, 0x2, {0x4e21, 0x4}}, @ethernet={0x307, @random="68d88c73bc2f"}, 0x0, 0x0, 0x0, 0x0, 0x20, &(0x7f0000001280)='bridge_slave_0\x00', 0x401, 0x0, 0xfd51}) semctl$SETVAL(0x0, 0x0, 0x10, 0x0) semctl$GETVAL(0x0, 0x0, 0xc, &(0x7f0000000180)=""/194) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$x25(0x9, 0x5, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x500, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x80000000, 0xa, 0x1}) 13:37:46 executing program 4: semctl$IPC_STAT(0x0, 0x0, 0x2, 0x0) 13:37:47 executing program 4: semctl$IPC_STAT(0x0, 0x0, 0x2, 0x0) 13:37:47 executing program 4: semctl$IPC_STAT(0x0, 0x0, 0x2, 0x0) 13:37:47 executing program 4: ioctl$SIOCPNDELRESOURCE(0xffffffffffffffff, 0x89ef, &(0x7f0000000040)=0xffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, 0x0, 0x0) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f00000012c0)={0x0, @nl=@unspec, @tipc=@id={0x1e, 0x3, 0x2, {0x4e21, 0x4}}, @ethernet={0x307, @random="68d88c73bc2f"}, 0x0, 0x0, 0x0, 0x0, 0x20, &(0x7f0000001280)='bridge_slave_0\x00', 0x401, 0x0, 0xfd51}) semctl$SETVAL(0x0, 0x0, 0x10, 0x0) semctl$GETVAL(0x0, 0x0, 0xc, &(0x7f0000000180)=""/194) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$x25(0x9, 0x5, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x500, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x80000000, 0xa, 0x1}) [ 1211.143941] syz-executor.4: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1211.176727] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 1211.187559] CPU: 1 PID: 27384 Comm: syz-executor.4 Not tainted 4.14.230-syzkaller #0 [ 1211.195488] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1211.204876] Call Trace: [ 1211.207477] dump_stack+0x1b2/0x281 [ 1211.211107] warn_alloc.cold+0x96/0x1cc [ 1211.215087] ? zone_watermark_ok_safe+0x220/0x220 [ 1211.220066] __alloc_pages_nodemask+0x2127/0x2720 [ 1211.224922] ? lock_acquire+0x170/0x3f0 [ 1211.228916] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1211.233781] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1211.239243] ? __mutex_unlock_slowpath+0x75/0x770 [ 1211.244111] ? retint_kernel+0x2d/0x2d [ 1211.248007] alloc_pages_current+0x155/0x260 [ 1211.252426] ion_page_pool_alloc+0x118/0x1b0 [ 1211.256841] ion_system_heap_allocate+0x133/0x8c0 [ 1211.261691] ? ion_alloc+0x187/0x810 [ 1211.265407] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1211.270858] ? ion_system_contig_heap_create+0x130/0x130 [ 1211.276332] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1211.281359] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1211.286218] ion_alloc+0x204/0x810 [ 1211.289758] ? ion_dma_buf_release+0x40/0x40 [ 1211.294180] ? __might_fault+0x177/0x1b0 [ 1211.298252] ion_ioctl+0xea/0x1f0 [ 1211.301942] ? ion_query_heaps+0x360/0x360 [ 1211.306203] ? ion_query_heaps+0x360/0x360 [ 1211.310438] do_vfs_ioctl+0x75a/0xff0 [ 1211.314435] ? ioctl_preallocate+0x1a0/0x1a0 [ 1211.318841] ? lock_downgrade+0x740/0x740 [ 1211.322993] ? __fget+0x225/0x360 [ 1211.326450] ? do_vfs_ioctl+0xff0/0xff0 [ 1211.330444] ? security_file_ioctl+0x83/0xb0 [ 1211.334846] SyS_ioctl+0x7f/0xb0 [ 1211.338203] ? do_vfs_ioctl+0xff0/0xff0 [ 1211.342260] do_syscall_64+0x1d5/0x640 [ 1211.346148] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1211.351347] RIP: 0033:0x466459 [ 1211.354524] RSP: 002b:00007fee1a099188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1211.362230] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1211.369502] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000005 [ 1211.376764] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1211.384059] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1211.391331] R13: 00007ffe6e91304f R14: 00007fee1a099300 R15: 0000000000022000 [ 1211.415709] syz-executor.1: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1211.435369] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 1211.446033] CPU: 0 PID: 27373 Comm: syz-executor.1 Not tainted 4.14.230-syzkaller #0 [ 1211.453938] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1211.463326] Call Trace: [ 1211.465924] dump_stack+0x1b2/0x281 [ 1211.469562] warn_alloc.cold+0x96/0x1cc [ 1211.473543] ? zone_watermark_ok_safe+0x220/0x220 [ 1211.478420] __alloc_pages_nodemask+0x2127/0x2720 [ 1211.483274] ? lock_acquire+0x170/0x3f0 [ 1211.487258] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1211.492115] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1211.497577] ? __mutex_unlock_slowpath+0x75/0x770 [ 1211.502423] ? retint_kernel+0x2d/0x2d [ 1211.506324] alloc_pages_current+0x155/0x260 [ 1211.510739] ion_page_pool_alloc+0x118/0x1b0 [ 1211.515327] ion_system_heap_allocate+0x133/0x8c0 [ 1211.520180] ? ion_alloc+0x187/0x810 [ 1211.523928] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1211.529392] ? ion_system_contig_heap_create+0x130/0x130 [ 1211.534872] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1211.539897] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1211.544746] ion_alloc+0x204/0x810 [ 1211.548293] ? ion_dma_buf_release+0x40/0x40 [ 1211.552704] ? __might_fault+0x177/0x1b0 [ 1211.556768] ion_ioctl+0xea/0x1f0 [ 1211.560226] ? ion_query_heaps+0x360/0x360 [ 1211.561246] Mem-Info: [ 1211.564460] ? ion_query_heaps+0x360/0x360 [ 1211.564472] do_vfs_ioctl+0x75a/0xff0 [ 1211.564483] ? ioctl_preallocate+0x1a0/0x1a0 [ 1211.564493] ? lock_downgrade+0x740/0x740 [ 1211.564506] ? __fget+0x225/0x360 [ 1211.567001] active_anon:12826 inactive_anon:57528 isolated_anon:12 [ 1211.567001] active_file:712 inactive_file:3401 isolated_file:44 [ 1211.567001] unevictable:0 dirty:57 writeback:0 unstable:0 [ 1211.567001] slab_reclaimable:12197 slab_unreclaimable:109446 [ 1211.567001] mapped:29350 shmem:58120 pagetables:629 bounce:0 [ 1211.567001] free:25179 free_pcp:215 free_cma:0 [ 1211.571154] ? do_vfs_ioctl+0xff0/0xff0 [ 1211.571166] ? security_file_ioctl+0x83/0xb0 [ 1211.571180] SyS_ioctl+0x7f/0xb0 [ 1211.575078] Node 0 active_anon:50360kB inactive_anon:173364kB active_file:2276kB inactive_file:12844kB unevictable:0kB isolated(anon):48kB isolated(file):48kB mapped:116168kB dirty:220kB writeback:0kB shmem:175340kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1211.579373] ? do_vfs_ioctl+0xff0/0xff0 [ 1211.579387] do_syscall_64+0x1d5/0x640 [ 1211.579403] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1211.583627] Node 1 active_anon:944kB inactive_anon:56748kB active_file:572kB inactive_file:760kB unevictable:0kB isolated(anon):0kB isolated(file):128kB mapped:1232kB dirty:8kB writeback:0kB shmem:57140kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1211.586962] RIP: 0033:0x466459 [ 1211.586968] RSP: 002b:00007feb59368188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1211.586978] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1211.586984] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000005 [ 1211.587007] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1211.620900] Node 0 [ 1211.624715] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1211.624721] R13: 00007ffe56f14bcf R14: 00007feb59368300 R15: 0000000000022000 [ 1211.759466] DMA free:11068kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1211.788491] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1211.802624] Node 0 DMA32 free:224464kB min:36200kB low:45248kB high:54296kB active_anon:50360kB inactive_anon:173364kB active_file:2284kB inactive_file:15084kB unevictable:0kB writepending:220kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:7104kB pagetables:2368kB bounce:0kB free_pcp:856kB local_pcp:204kB free_cma:0kB [ 1211.898754] lowmem_reserve[]: 0 0 0 0 0 [ 1211.902794] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1212.002883] lowmem_reserve[]: 0 0 0 0 0 [ 1212.006927] Node 1 Normal free:87608kB min:53696kB low:67120kB high:80544kB active_anon:944kB inactive_anon:56748kB active_file:444kB inactive_file:356kB unevictable:0kB writepending:8kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:192kB pagetables:148kB bounce:0kB free_pcp:668kB local_pcp:0kB free_cma:0kB [ 1212.125500] lowmem_reserve[]: 0 0 0 0 0 [ 1212.129546] Node 0 DMA: 1*4kB (E) 1*8kB (U) 1*16kB (U) 1*32kB (E) 2*64kB (UE) 5*128kB (UE) 2*256kB (UE) 1*512kB (E) 1*1024kB (E) 2*2048kB (UM) 1*4096kB (M) = 11068kB [ 1212.192882] Node 0 DMA32: 19*4kB (UE) 7*8kB (ME) 0*16kB 1298*32kB (UME) 49*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 44804kB [ 1212.225485] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1212.245443] Node 1 Normal: 75*4kB (UM) 60*8kB (UM) 1852*16kB (UM) 1789*32kB (UM) 1532*64kB (UM) 205*128kB (UM) 5*256kB (UM) 94*512kB (UM) 0*1024kB 1*2048kB (M) 0*4096kB = 263404kB [ 1212.279278] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1212.305476] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1212.326110] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1212.336637] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1212.356397] 63071 total pagecache pages [ 1212.363574] 0 pages in swap cache [ 1212.367066] Swap cache stats: add 0, delete 0, find 0/0 [ 1212.372429] Free swap = 0kB [ 1212.395683] Total swap = 0kB [ 1212.398769] 2097051 pages RAM [ 1212.401868] 0 pages HighMem/MovableOnly [ 1212.421758] 363848 pages reserved [ 1212.425319] 0 pages cma reserved 13:37:49 executing program 3: ioctl$SIOCPNDELRESOURCE(0xffffffffffffffff, 0x89ef, &(0x7f0000000040)=0xffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000012c0)={0x0, @nl=@unspec, @tipc=@id={0x1e, 0x3, 0x2, {0x4e21, 0x4}}, @ethernet={0x307, @random="68d88c73bc2f"}, 0x0, 0x0, 0x0, 0x0, 0x20, &(0x7f0000001280)='bridge_slave_0\x00', 0x401, 0x0, 0xfd51}) semctl$SETVAL(0x0, 0x0, 0x10, 0x0) semctl$GETVAL(0x0, 0x0, 0xc, &(0x7f0000000180)=""/194) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$x25(0x9, 0x5, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x500, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x80000000, 0xa, 0x1}) [ 1213.007307] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1213.032986] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1213.045446] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1213.052201] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1213.095828] device bridge_slave_1 left promiscuous mode [ 1213.101417] bridge0: port 2(bridge_slave_1) entered disabled state [ 1213.129643] device bridge_slave_0 left promiscuous mode [ 1213.154457] bridge0: port 1(bridge_slave_0) entered disabled state [ 1213.166357] device veth1_macvtap left promiscuous mode [ 1213.171716] device veth0_macvtap left promiscuous mode [ 1213.213001] device veth1_vlan left promiscuous mode [ 1213.218085] device veth0_vlan left promiscuous mode [ 1213.378350] syz-executor.3: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1213.416614] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 1213.421779] CPU: 1 PID: 27393 Comm: syz-executor.3 Not tainted 4.14.230-syzkaller #0 [ 1213.429678] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1213.439067] Call Trace: [ 1213.441702] dump_stack+0x1b2/0x281 [ 1213.445355] warn_alloc.cold+0x96/0x1cc [ 1213.449355] ? zone_watermark_ok_safe+0x220/0x220 [ 1213.454228] __alloc_pages_nodemask+0x2127/0x2720 [ 1213.459089] ? lock_acquire+0x170/0x3f0 [ 1213.463081] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1213.467936] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1213.473406] ? __mutex_unlock_slowpath+0x75/0x770 [ 1213.478256] ? alloc_pages_current+0xe3/0x260 [ 1213.482756] alloc_pages_current+0x155/0x260 [ 1213.487171] ion_page_pool_alloc+0x118/0x1b0 [ 1213.491608] ion_system_heap_allocate+0x133/0x8c0 [ 1213.496461] ? ion_alloc+0x187/0x810 [ 1213.500187] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1213.505678] ? ion_system_contig_heap_create+0x130/0x130 [ 1213.511141] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1213.516171] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1213.521024] ion_alloc+0x204/0x810 [ 1213.524575] ? ion_dma_buf_release+0x40/0x40 [ 1213.528988] ? __might_fault+0x177/0x1b0 [ 1213.533055] ion_ioctl+0xea/0x1f0 [ 1213.536522] ? ion_query_heaps+0x360/0x360 [ 1213.540761] ? ion_query_heaps+0x360/0x360 [ 1213.544997] do_vfs_ioctl+0x75a/0xff0 [ 1213.548805] ? ioctl_preallocate+0x1a0/0x1a0 [ 1213.553219] ? lock_downgrade+0x740/0x740 [ 1213.559114] ? __fget+0x225/0x360 [ 1213.562579] ? do_vfs_ioctl+0xff0/0xff0 [ 1213.566562] ? security_file_ioctl+0x83/0xb0 [ 1213.570979] SyS_ioctl+0x7f/0xb0 [ 1213.574350] ? do_vfs_ioctl+0xff0/0xff0 [ 1213.578335] do_syscall_64+0x1d5/0x640 [ 1213.582234] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1213.587422] RIP: 0033:0x466459 [ 1213.590628] RSP: 002b:00007f8a667e8188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1213.598338] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1213.605617] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000005 [ 1213.612887] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1213.620176] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1213.627457] R13: 00007ffd25ba1ddf R14: 00007f8a667e8300 R15: 0000000000022000 [ 1213.640377] Bluetooth: hci5 command 0x0406 tx timeout [ 1213.760252] warn_alloc_show_mem: 1 callbacks suppressed [ 1213.760257] Mem-Info: [ 1213.776753] device hsr_slave_1 left promiscuous mode [ 1213.787518] active_anon:12885 inactive_anon:57528 isolated_anon:0 [ 1213.787518] active_file:1276 inactive_file:2262 isolated_file:0 [ 1213.787518] unevictable:0 dirty:17 writeback:0 unstable:0 [ 1213.787518] slab_reclaimable:12181 slab_unreclaimable:110218 [ 1213.787518] mapped:55845 shmem:58120 pagetables:761 bounce:0 [ 1213.787518] free:29453 free_pcp:167 free_cma:0 [ 1213.828331] device hsr_slave_0 left promiscuous mode [ 1213.903571] team0 (unregistering): Port device team_slave_1 removed [ 1213.921784] Node 0 active_anon:51240kB inactive_anon:173364kB active_file:5092kB inactive_file:8016kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:222652kB dirty:44kB writeback:0kB shmem:175340kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1213.972073] team0 (unregistering): Port device team_slave_0 removed [ 1214.001780] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 1214.030299] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 1214.046041] Node 1 active_anon:940kB inactive_anon:56768kB active_file:680kB inactive_file:1064kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:924kB dirty:8kB writeback:0kB shmem:57172kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1214.131701] Node 0 DMA free:11068kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1214.178449] bond0 (unregistering): Released all slaves [ 1214.222913] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1214.228128] Node 0 DMA32 free:41396kB min:36200kB low:45248kB high:54296kB active_anon:50776kB inactive_anon:173372kB active_file:5744kB inactive_file:6608kB unevictable:0kB writepending:4kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:7232kB pagetables:2880kB bounce:0kB free_pcp:788kB local_pcp:728kB free_cma:0kB [ 1214.270048] lowmem_reserve[]: 0 0 0 0 0 [ 1214.274154] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1214.302095] lowmem_reserve[]: 0 0 0 0 0 [ 1214.306621] Node 1 Normal free:55880kB min:53696kB low:67120kB high:80544kB active_anon:940kB inactive_anon:56768kB active_file:168kB inactive_file:16kB unevictable:0kB writepending:8kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:192kB pagetables:164kB bounce:0kB free_pcp:744kB local_pcp:0kB free_cma:0kB [ 1214.402884] lowmem_reserve[]: 0 0 0 0 0 [ 1214.406926] Node 0 DMA: 1*4kB (E) 15*8kB (U) 8*16kB (U) 6*32kB (UE) 2*64kB (UE) 2*128kB (UE) 2*256kB (UE) 1*512kB (E) 1*1024kB (E) 2*2048kB (UM) 1*4096kB (M) = 11068kB [ 1214.432946] Node 0 DMA32: 92*4kB (UME) 62*8kB (UME) 8*16kB (M) 601*32kB (UME) 215*64kB (UM) 30*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 37824kB [ 1214.448000] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1214.482890] Node 1 Normal: 56*4kB (M) 24*8kB (UM) 23*16kB (UM) 16*32kB (M) 103*64kB (UM) 6*128kB (UM) 2*256kB (M) 90*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 55248kB [ 1214.522904] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1214.531871] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1214.572912] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1214.612898] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1214.621515] 60012 total pagecache pages [ 1214.644814] 0 pages in swap cache [ 1214.648298] Swap cache stats: add 0, delete 0, find 0/0 [ 1214.654641] Free swap = 0kB [ 1214.657662] Total swap = 0kB [ 1214.660695] 2097051 pages RAM [ 1214.685641] 0 pages HighMem/MovableOnly [ 1214.689645] 363848 pages reserved [ 1214.703028] 0 pages cma reserved [ 1215.358805] oom_reaper: reaped process 27393 (syz-executor.3), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1215.433276] syz-executor.3 invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1215.464959] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 1215.481899] CPU: 1 PID: 24195 Comm: syz-executor.3 Not tainted 4.14.230-syzkaller #0 [ 1215.489812] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1215.499164] Call Trace: [ 1215.501757] dump_stack+0x1b2/0x281 [ 1215.505384] dump_header+0x178/0x82f [ 1215.509097] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1215.514294] ? ___ratelimit+0x2cd/0x530 [ 1215.518279] oom_kill_process.cold+0x10/0xa40 [ 1215.522803] out_of_memory+0xe3e/0x1190 [ 1215.526780] ? oom_killer_disable+0x1c0/0x1c0 [ 1215.531272] ? mutex_trylock+0x152/0x1a0 [ 1215.535336] __alloc_pages_nodemask+0x23e1/0x2720 [ 1215.540191] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1215.545055] alloc_pages_current+0x155/0x260 [ 1215.549487] filemap_fault+0x11a1/0x1ad0 [ 1215.553649] ext4_filemap_fault+0x84/0xb0 [ 1215.557801] __do_fault+0xfa/0x380 [ 1215.561343] __handle_mm_fault+0x2497/0x4620 [ 1215.565756] ? vm_insert_page+0x7c0/0x7c0 [ 1215.569921] ? hrtimer_nanosleep+0x1ff/0x4b0 [ 1215.574324] ? nanosleep_copyout+0x100/0x100 [ 1215.578745] ? mark_held_locks+0xa6/0xf0 [ 1215.582810] handle_mm_fault+0x455/0x9c0 [ 1215.586880] __do_page_fault+0x549/0xad0 [ 1215.590970] ? spurious_fault+0x640/0x640 [ 1215.595122] ? do_page_fault+0x60/0x500 [ 1215.599102] ? page_fault+0x2f/0x50 [ 1215.602729] page_fault+0x45/0x50 [ 1215.606179] RIP: 128471:0xa [ 1215.609098] RSP: 002f:00007ffd25ba209c EFLAGS: 00000032 [ 1215.681175] Mem-Info: [ 1215.699833] active_anon:13025 inactive_anon:57535 isolated_anon:0 [ 1215.699833] active_file:35 inactive_file:8 isolated_file:0 [ 1215.699833] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1215.699833] slab_reclaimable:12165 slab_unreclaimable:109399 [ 1215.699833] mapped:52662 shmem:58132 pagetables:761 bounce:0 [ 1215.699833] free:13926 free_pcp:401 free_cma:0 [ 1215.739755] Bluetooth: hci0 command 0x0409 tx timeout [ 1215.751526] Node 0 active_anon:51160kB inactive_anon:173372kB active_file:4kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:210648kB dirty:0kB writeback:0kB shmem:175356kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1215.788098] Node 1 active_anon:940kB inactive_anon:56768kB active_file:136kB inactive_file:32kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:57172kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1215.817940] Bluetooth: hci1 command 0x0409 tx timeout [ 1215.830315] Bluetooth: hci4 command 0x0409 tx timeout [ 1215.837730] Node 0 DMA free:10956kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1215.873211] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1215.878372] Node 0 DMA32 free:17788kB min:36200kB low:45248kB high:54296kB active_anon:51160kB inactive_anon:173372kB active_file:32kB inactive_file:20kB unevictable:0kB writepending:0kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:7200kB pagetables:2880kB bounce:0kB free_pcp:848kB local_pcp:704kB free_cma:0kB [ 1215.882965] syz-executor.3: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1215.941614] lowmem_reserve[]: [ 1215.953321] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 1215.961580] CPU: 0 PID: 27393 Comm: syz-executor.3 Not tainted 4.14.230-syzkaller #0 [ 1215.964192] 0 [ 1215.969464] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1215.969473] 0 [ 1215.971272] Call Trace: [ 1215.980777] 0 [ 1215.982563] dump_stack+0x1b2/0x281 [ 1215.985144] 0 [ 1215.986904] warn_alloc.cold+0x96/0x1cc [ 1215.990503] 0 [ 1215.992305] ? zone_watermark_ok_safe+0x220/0x220 [ 1215.998044] ? usleep_range+0x130/0x130 [ 1216.002928] Node 0 [ 1216.006852] ? try_to_free_pages+0x23f/0x6e0 [ 1216.006868] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1216.006874] lowmem_reserve[]: [ 1216.009283] ? _find_next_bit+0xdb/0x100 [ 1216.013720] 0 [ 1216.038599] ? run_timer_softirq+0x5a0/0x5a0 [ 1216.038618] __alloc_pages_nodemask+0x2127/0x2720 [ 1216.038636] ? lock_acquire+0x170/0x3f0 [ 1216.038650] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1216.041752] 0 [ 1216.045801] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1216.045819] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1216.045839] alloc_pages_current+0x155/0x260 [ 1216.047621] 0 [ 1216.052021] ion_page_pool_alloc+0x118/0x1b0 [ 1216.056891] 0 [ 1216.061348] ion_system_heap_allocate+0x133/0x8c0 [ 1216.066202] 0 [ 1216.067960] ? ion_alloc+0x187/0x810 [ 1216.077862] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1216.077873] ? ion_system_contig_heap_create+0x130/0x130 [ 1216.077883] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1216.077895] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1216.077905] ion_alloc+0x204/0x810 [ 1216.082303] Node 1 [ 1216.084095] ? ion_dma_buf_release+0x40/0x40 [ 1216.084109] ? __might_fault+0x177/0x1b0 [ 1216.084120] ion_ioctl+0xea/0x1f0 [ 1216.088528] Normal free:26728kB min:53696kB low:67120kB high:80544kB active_anon:940kB inactive_anon:56768kB active_file:36kB inactive_file:28kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:192kB pagetables:164kB bounce:0kB free_pcp:780kB local_pcp:660kB free_cma:0kB [ 1216.090309] ? ion_query_heaps+0x360/0x360 [ 1216.095169] lowmem_reserve[]: [ 1216.096921] ? ion_query_heaps+0x360/0x360 [ 1216.100617] 0 0 [ 1216.106097] do_vfs_ioctl+0x75a/0xff0 [ 1216.106110] ? ioctl_preallocate+0x1a0/0x1a0 [ 1216.106119] ? lock_downgrade+0x740/0x740 [ 1216.106132] ? __fget+0x225/0x360 [ 1216.106141] ? do_vfs_ioctl+0xff0/0xff0 [ 1216.111763] 0 [ 1216.116791] ? security_file_ioctl+0x83/0xb0 [ 1216.116803] SyS_ioctl+0x7f/0xb0 [ 1216.116811] ? do_vfs_ioctl+0xff0/0xff0 [ 1216.116825] do_syscall_64+0x1d5/0x640 [ 1216.121649] 0 [ 1216.125180] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1216.125190] RIP: 0033:0x466459 [ 1216.125194] RSP: 002b:00007f8a667e8188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1216.127422] 0 [ 1216.131810] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1216.131818] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000005 [ 1216.139295] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1216.167463] Node 0 [ 1216.171627] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1216.171636] R13: 00007ffd25ba1ddf R14: 00007f8a667e8300 R15: 0000000000022000 [ 1216.174762] DMA: [ 1216.219476] Mem-Info: [ 1216.242357] 1*4kB [ 1216.246095] active_anon:13000 inactive_anon:57535 isolated_anon:0 [ 1216.246095] active_file:15 inactive_file:16 isolated_file:0 [ 1216.246095] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1216.246095] slab_reclaimable:12165 slab_unreclaimable:109123 [ 1216.246095] mapped:52627 shmem:58132 pagetables:761 bounce:0 [ 1216.246095] free:13924 free_pcp:407 free_cma:0 [ 1216.271932] (E) [ 1216.313000] Node 0 active_anon:51092kB inactive_anon:173372kB active_file:24kB inactive_file:28kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:210508kB dirty:0kB writeback:0kB shmem:175356kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1216.336157] 1*8kB [ 1216.365493] Node 1 active_anon:908kB inactive_anon:56768kB active_file:36kB inactive_file:36kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:57172kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1216.372223] (U) [ 1216.397829] Node 0 DMA free:10956kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1216.412265] 0*16kB [ 1216.428819] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1216.436909] Node 0 DMA32 free:17956kB min:36200kB low:45248kB high:54296kB active_anon:51092kB inactive_anon:173372kB active_file:24kB inactive_file:28kB unevictable:0kB writepending:0kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:7200kB pagetables:2880kB bounce:0kB free_pcp:848kB local_pcp:144kB free_cma:0kB [ 1216.442585] 6*32kB [ 1216.479142] lowmem_reserve[]: [ 1216.480435] (UE) [ 1216.481432] 0 [ 1216.486674] 4*64kB (UE) 2*128kB (UE) 2*256kB (UE) 1*512kB (E) 1*1024kB (E) 2*2048kB (UM) 1*4096kB (M) = 10956kB [ 1216.489332] 0 [ 1216.507927] Node 0 DMA32: 545*4kB (UME) 156*8kB (ME) 52*16kB (M) 24*32kB (ME) 8*64kB (M) 93*128kB (U) 2*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 17956kB [ 1216.511668] 0 [ 1216.524256] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1216.524304] Node 1 Normal: 52*4kB (UM) 20*8kB (UM) 17*16kB (M) 13*32kB (M) 10*64kB (M) 2*128kB (UM) 3*256kB (UM) 47*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 26784kB [ 1216.538678] 0 [ 1216.560905] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1216.565290] 0 [ 1216.572324] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1216.580913] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1216.589750] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1216.617686] lowmem_reserve[]: 0 0 0 0 0 [ 1216.621730] Node 1 Normal free:26784kB min:53696kB low:67120kB high:80544kB active_anon:908kB inactive_anon:56768kB active_file:36kB inactive_file:36kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:192kB pagetables:164kB bounce:0kB free_pcp:780kB local_pcp:120kB free_cma:0kB [ 1216.627031] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1216.660764] lowmem_reserve[]: 0 0 0 0 0 [ 1216.665396] 58163 total pagecache pages [ 1216.669385] 0 pages in swap cache [ 1216.669795] Node 0 [ 1216.677256] Swap cache stats: add 0, delete 0, find 0/0 [ 1216.687105] Free swap = 0kB [ 1216.688117] DMA: [ 1216.690122] Total swap = 0kB [ 1216.690130] 1*4kB [ 1216.692174] 2097051 pages RAM [ 1216.706992] 0 pages HighMem/MovableOnly [ 1216.710489] (E) [ 1216.710975] 363848 pages reserved [ 1216.710982] 0 pages cma reserved [ 1216.720400] 1*8kB (U) 0*16kB 6*32kB (UE) 4*64kB (UE) 2*128kB (UE) 2*256kB (UE) 1*512kB (E) 1*1024kB (E) 2*2048kB (UM) 1*4096kB (M) = 10956kB [ 1216.721168] Out of memory (oom_kill_allocating_task): Kill process 24195 (syz-executor.3) score 0 or sacrifice child [ 1216.748421] Node 0 DMA32: 545*4kB (UME) 156*8kB (ME) 52*16kB (M) 24*32kB (ME) 8*64kB (M) 93*128kB (U) 2*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 17956kB [ 1216.749451] Killed process 24195 (syz-executor.3) total-vm:93120kB, anon-rss:104kB, file-rss:34628kB, shmem-rss:0kB [ 1216.780071] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1216.816375] oom_reaper: reaped process 24195 (syz-executor.3), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1216.830560] Node 1 Normal: 52*4kB (UM) 20*8kB (UM) 17*16kB (M) 13*32kB (M) 10*64kB (M) 2*128kB (UM) 3*256kB (UM) 47*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 26784kB [ 1216.860116] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1216.861450] syz-executor.2 invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask= [ 1216.869108] syz-executor.3: [ 1216.881417] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1216.885728] (null) [ 1216.895512] page allocation failure: order:0, mode:0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null) [ 1216.905227] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1216.911978] , order=0, oom_score_adj=0 [ 1216.927189] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 1216.929275] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1216.932331] CPU: 1 PID: 27391 Comm: syz-executor.2 Not tainted 4.14.230-syzkaller #0 [ 1216.948797] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1216.954547] 58163 total pagecache pages [ 1216.958155] Call Trace: [ 1216.962130] 0 pages in swap cache [ 1216.964738] dump_stack+0x1b2/0x281 [ 1216.964751] dump_header+0x178/0x82f [ 1216.964762] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1216.964770] ? ___ratelimit+0x2cd/0x530 [ 1216.964780] oom_kill_process.cold+0x10/0xa40 [ 1216.964797] out_of_memory+0xe3e/0x1190 [ 1216.964810] ? oom_killer_disable+0x1c0/0x1c0 [ 1216.964817] ? mutex_trylock+0x152/0x1a0 [ 1216.964828] __alloc_pages_nodemask+0x23e1/0x2720 [ 1216.964849] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1216.964872] alloc_pages_current+0x155/0x260 [ 1216.964886] filemap_fault+0x11a1/0x1ad0 [ 1216.981007] Swap cache stats: add 0, delete 0, find 0/0 [ 1216.984762] ext4_filemap_fault+0x84/0xb0 [ 1216.984774] __do_fault+0xfa/0x380 [ 1216.984783] __handle_mm_fault+0x2497/0x4620 [ 1216.984793] ? vm_insert_page+0x7c0/0x7c0 [ 1216.984801] ? SyS_unshare+0x4ca/0x7f0 [ 1216.984817] ? mark_held_locks+0xa6/0xf0 [ 1216.984827] handle_mm_fault+0x455/0x9c0 [ 1216.984841] __do_page_fault+0x549/0xad0 [ 1216.992406] Free swap = 0kB [ 1216.993316] ? spurious_fault+0x640/0x640 [ 1216.993325] ? do_page_fault+0x60/0x500 [ 1216.993333] ? page_fault+0x2f/0x50 [ 1216.993340] page_fault+0x45/0x50 [ 1216.993345] RIP: 56ca68: (null) [ 1216.993350] RSP: 6a911e88:00007ffd6a911840 EFLAGS: ffffffff [ 1217.002890] syz-executor.3 cpuset= [ 1217.020673] Total swap = 0kB [ 1217.030564] / [ 1217.046117] 2097051 pages RAM [ 1217.056103] mems_allowed=0-1 [ 1217.070106] 0 pages HighMem/MovableOnly [ 1217.079330] CPU: 1 PID: 24195 Comm: syz-executor.3 Not tainted 4.14.230-syzkaller #0 [ 1217.090630] 363848 pages reserved [ 1217.093086] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1217.093091] Call Trace: [ 1217.093112] dump_stack+0x1b2/0x281 [ 1217.093124] warn_alloc.cold+0x96/0x1cc [ 1217.093135] ? zone_watermark_ok_safe+0x220/0x220 [ 1217.093143] ? usleep_range+0x130/0x130 [ 1217.093150] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1217.093160] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1217.093169] ? run_timer_softirq+0x5a0/0x5a0 [ 1217.093182] __alloc_pages_nodemask+0x2127/0x2720 [ 1217.093206] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1217.097093] 0 pages cma reserved [ 1217.098051] alloc_pages_current+0x155/0x260 [ 1217.176669] filemap_fault+0x11a1/0x1ad0 [ 1217.180745] ext4_filemap_fault+0x84/0xb0 [ 1217.184903] __do_fault+0xfa/0x380 [ 1217.188446] __handle_mm_fault+0x2497/0x4620 [ 1217.192886] ? vm_insert_page+0x7c0/0x7c0 [ 1217.197037] ? hrtimer_nanosleep+0x1ff/0x4b0 [ 1217.201455] ? nanosleep_copyout+0x100/0x100 [ 1217.205869] ? mark_held_locks+0xa6/0xf0 [ 1217.209934] handle_mm_fault+0x455/0x9c0 [ 1217.214002] __do_page_fault+0x549/0xad0 [ 1217.218098] ? spurious_fault+0x640/0x640 [ 1217.222275] ? do_page_fault+0x60/0x500 [ 1217.226253] ? page_fault+0x2f/0x50 [ 1217.229881] page_fault+0x45/0x50 [ 1217.233328] RIP: 128471:0xa [ 1217.236275] RSP: 002f:00007ffd25ba209c EFLAGS: 00000032 [ 1217.237607] Mem-Info: [ 1217.265566] IPVS: ftp: loaded support on port[0] = 21 [ 1217.275099] active_anon:12979 inactive_anon:57535 isolated_anon:0 [ 1217.275099] active_file:14 inactive_file:1092 isolated_file:0 [ 1217.275099] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1217.275099] slab_reclaimable:12140 slab_unreclaimable:108729 [ 1217.275099] mapped:53302 shmem:58132 pagetables:761 bounce:0 [ 1217.275099] free:74614 free_pcp:432 free_cma:0 [ 1217.311870] Node 0 active_anon:51008kB inactive_anon:173372kB active_file:20kB inactive_file:4732kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:213508kB dirty:0kB writeback:0kB shmem:175356kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1217.436346] Node 1 active_anon:908kB inactive_anon:56768kB active_file:36kB inactive_file:36kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:57172kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1217.478666] IPVS: ftp: loaded support on port[0] = 21 [ 1217.527658] Node 0 DMA free:11436kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1217.592935] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1217.604447] Node 0 DMA32 free:115080kB min:36200kB low:45248kB high:54296kB active_anon:51008kB inactive_anon:173372kB active_file:120kB inactive_file:7132kB unevictable:0kB writepending:0kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:7328kB pagetables:2880kB bounce:0kB free_pcp:1180kB local_pcp:476kB free_cma:0kB [ 1217.646520] Mem-Info: [ 1217.648978] active_anon:12979 inactive_anon:57535 isolated_anon:0 [ 1217.648978] active_file:39 inactive_file:1792 isolated_file:0 [ 1217.648978] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1217.648978] slab_reclaimable:12140 slab_unreclaimable:109452 [ 1217.648978] mapped:54002 shmem:58132 pagetables:761 bounce:0 [ 1217.648978] free:69009 free_pcp:624 free_cma:0 [ 1217.683891] lowmem_reserve[]: 0 0 0 0 0 [ 1217.687917] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1217.716825] lowmem_reserve[]: 0 0 0 0 0 [ 1217.720847] Node 1 Normal free:155488kB min:53696kB low:67120kB high:80544kB active_anon:908kB inactive_anon:56768kB active_file:36kB inactive_file:36kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:192kB pagetables:164kB bounce:0kB free_pcp:1356kB local_pcp:660kB free_cma:0kB [ 1217.751466] Node 0 active_anon:51008kB inactive_anon:173372kB active_file:1420kB inactive_file:5280kB unevictable:0kB isolated(anon):0kB isolated(file):128kB mapped:216008kB dirty:0kB writeback:0kB shmem:175356kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1217.787114] lowmem_reserve[]: 0 0 0 0 0 [ 1217.791610] Node 1 active_anon:908kB inactive_anon:56768kB active_file:36kB inactive_file:36kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:57172kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1217.823731] Bluetooth: hci0 command 0x041b tx timeout [ 1217.830445] Node 0 DMA: 148*4kB (UE) 4*8kB (U) 10*16kB (U) 9*32kB (UE) 1*64kB (E) 2*128kB (UE) 2*256kB (UE) 2*512kB (UE) 2*1024kB (UE) 1*2048kB (M) 1*4096kB (M) = 11120kB [ 1217.831455] chnl_net:caif_netlink_parms(): no params data found [ 1217.850537] Node 0 DMA32: 249*4kB (ME) 13*8kB (UME) 2514*16kB (UM) 385*32kB (UE) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 53644kB [ 1217.882930] Bluetooth: hci4 command 0x041b tx timeout [ 1217.890863] Bluetooth: hci1 command 0x041b tx timeout [ 1217.902983] Node 0 DMA free:10992kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1217.940204] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1217.975904] Node 1 Normal: 773*4kB (UM) 1133*8kB (UM) 977*16kB (UM) 738*32kB (UM) 5*64kB (U) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 51724kB [ 1218.007060] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1218.012144] Node 0 DMA32 free:38396kB min:36200kB low:45248kB high:54296kB active_anon:51008kB inactive_anon:173372kB active_file:0kB inactive_file:292kB unevictable:0kB writepending:0kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:7360kB pagetables:2880kB bounce:0kB free_pcp:1232kB local_pcp:564kB free_cma:0kB [ 1218.044916] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1218.056193] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1218.071080] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1218.074112] syz-executor.3: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1218.081719] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1218.105795] 58191 total pagecache pages [ 1218.109825] 0 pages in swap cache [ 1218.115532] lowmem_reserve[]: 0 0 0 0 0 [ 1218.117515] syz-executor.3 cpuset= [ 1218.119567] Node 0 [ 1218.119570] / mems_allowed=0-1 [ 1218.125465] Swap cache stats: add 0, delete 0, find 0/0 [ 1218.130924] CPU: 0 PID: 27393 Comm: syz-executor.3 Not tainted 4.14.230-syzkaller #0 [ 1218.134220] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1218.141977] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1218.166967] Free swap = 0kB [ 1218.176241] Call Trace: [ 1218.176266] dump_stack+0x1b2/0x281 [ 1218.176279] warn_alloc.cold+0x96/0x1cc [ 1218.176291] ? zone_watermark_ok_safe+0x220/0x220 [ 1218.176313] __alloc_pages_nodemask+0x2127/0x2720 [ 1218.179315] Total swap = 0kB [ 1218.181891] ? ___preempt_schedule+0x16/0x18 [ 1218.185548] 2097051 pages RAM [ 1218.189465] ? lock_acquire+0x170/0x3f0 [ 1218.194345] 0 pages HighMem/MovableOnly [ 1218.199136] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1218.199153] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1218.199164] ? __mutex_unlock_slowpath+0x75/0x770 [ 1218.199175] ? __list_del_entry_valid+0xb3/0xf0 [ 1218.199188] alloc_pages_current+0x155/0x260 [ 1218.199202] ion_page_pool_alloc+0x118/0x1b0 [ 1218.202349] lowmem_reserve[]: [ 1218.206649] ion_system_heap_allocate+0x133/0x8c0 [ 1218.206662] ? _raw_spin_unlock+0x29/0x40 [ 1218.206670] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1218.206678] ? ion_system_contig_heap_create+0x130/0x130 [ 1218.206692] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1218.209824] 0 [ 1218.213794] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1218.213804] ion_alloc+0x27a/0x810 [ 1218.213817] ? ion_dma_buf_release+0x40/0x40 [ 1218.213832] ? __might_fault+0x177/0x1b0 [ 1218.217821] 363848 pages reserved [ 1218.222657] ion_ioctl+0xea/0x1f0 [ 1218.228137] 0 pages cma reserved [ 1218.232921] ? ion_query_heaps+0x360/0x360 [ 1218.232932] ? ion_query_heaps+0x360/0x360 [ 1218.232943] do_vfs_ioctl+0x75a/0xff0 [ 1218.232955] ? ioctl_preallocate+0x1a0/0x1a0 [ 1218.237648] 0 [ 1218.242032] ? lock_downgrade+0x740/0x740 [ 1218.242048] ? __fget+0x225/0x360 [ 1218.246506] Out of memory (oom_kill_allocating_task): Kill process 27391 (syz-executor.2) score 0 or sacrifice child [ 1218.249528] ? do_vfs_ioctl+0xff0/0xff0 [ 1218.254438] 0 [ 1218.258517] ? security_file_ioctl+0x83/0xb0 [ 1218.263518] Killed process 27391 (syz-executor.2) total-vm:93120kB, anon-rss:76kB, file-rss:34260kB, shmem-rss:0kB [ 1218.269159] SyS_ioctl+0x7f/0xb0 [ 1218.274228] 0 [ 1218.276243] ? do_vfs_ioctl+0xff0/0xff0 [ 1218.281058] 0 [ 1218.284594] do_syscall_64+0x1d5/0x640 [ 1218.284610] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1218.284618] RIP: 0033:0x466459 [ 1218.284622] RSP: 002b:00007f8a667e8188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1218.284635] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1218.299980] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000005 [ 1218.303453] Node 1 [ 1218.307577] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1218.312513] Normal free:51468kB min:53696kB low:67120kB high:80544kB active_anon:908kB inactive_anon:56768kB active_file:16kB inactive_file:16kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:192kB pagetables:164kB bounce:0kB free_pcp:20kB local_pcp:20kB free_cma:0kB [ 1218.312519] lowmem_reserve[]: [ 1218.316306] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1218.316312] R13: 00007ffd25ba1ddf R14: 00007f8a667e8300 R15: 0000000000022000 [ 1218.349844] oom_reaper: reaped process 27373 (syz-executor.1), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1218.387285] 0 [ 1218.465235] syz-executor.5 invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask= [ 1218.478368] 0 [ 1218.481994] syz-executor.1: [ 1218.487608] 0 [ 1218.489500] syz-executor.3: [ 1218.492474] 0 [ 1218.497619] syz-executor.2: page allocation failure: order:1, mode:0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null) [ 1218.502380] page allocation failure: order:0 [ 1218.511495] page allocation failure: order:0 [ 1218.513522] 0 [ 1218.522138] Node 0 DMA: 141*4kB (UE) 4*8kB (U) 10*16kB (U) 9*32kB (UE) 1*64kB (E) 1*128kB (E) 2*256kB (UE) 2*512kB (UE) 2*1024kB (UE) 1*2048kB (M) 1*4096kB (M) = 10964kB [ 1218.522726] (null) [ 1218.540249] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1218.547188] syz-executor.2 cpuset= [ 1218.550190] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1218.550225] / [ 1218.556154] (null) [ 1218.570174] mems_allowed=0-1 [ 1218.573682] CPU: 1 PID: 27391 Comm: syz-executor.2 Not tainted 4.14.230-syzkaller #0 [ 1218.575231] syz-executor.1 cpuset= [ 1218.581594] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1218.581604] / [ 1218.585127] Call Trace: [ 1218.597492] syz-executor.3 cpuset=/ [ 1218.598797] dump_stack+0x1b2/0x281 [ 1218.598806] mems_allowed=0-1 [ 1218.602427] warn_alloc.cold+0x96/0x1cc [ 1218.606151] , order=1, oom_score_adj=0 [ 1218.609136] ? zone_watermark_ok_safe+0x220/0x220 [ 1218.621918] ? usleep_range+0x130/0x130 [ 1218.622984] syz-executor.5 cpuset= [ 1218.625903] ? _find_next_bit+0xdb/0x100 [ 1218.625913] ? run_timer_softirq+0x5a0/0x5a0 [ 1218.625933] __alloc_pages_nodemask+0x2127/0x2720 [ 1218.625957] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1218.629745] / [ 1218.633751] ? mark_held_locks+0xa6/0xf0 [ 1218.633766] ? cache_grow_begin+0x3f/0x700 [ 1218.633777] cache_grow_begin+0x91/0x700 [ 1218.655280] mems_allowed=0-1 [ 1218.657960] fallback_alloc+0x207/0x2c0 [ 1218.662905] mems_allowed=0-1 [ 1218.665096] kmem_cache_alloc_trace+0x1f1/0x3d0 [ 1218.676826] ? dev_uevent_filter+0xd0/0xd0 [ 1218.681054] kobject_uevent_env+0x20c/0xf40 [ 1218.688334] ? wait_for_completion_io+0x10/0x10 [ 1218.693019] ? is_acpi_device_node+0x5b/0x70 [ 1218.697423] device_del+0x642/0xa80 [ 1218.701043] ? device_find_child+0x107/0x140 [ 1218.705440] ? __device_links_no_driver+0x1b0/0x1b0 [ 1218.710455] hci_conn_del_sysfs+0xca/0x160 [ 1218.714689] hci_conn_cleanup+0x216/0x500 [ 1218.718899] hci_conn_del+0x253/0x6f0 [ 1218.722695] hci_conn_hash_flush+0x19c/0x260 [ 1218.727114] hci_dev_do_close+0x535/0xca0 [ 1218.731257] ? __fsnotify_inode_delete+0x20/0x20 [ 1218.736186] hci_unregister_dev+0x17f/0x8c0 [ 1218.740518] ? fcntl_setlk+0xdb0/0xdb0 [ 1218.744511] ? vhci_close_dev+0x50/0x50 [ 1218.748481] vhci_release+0x70/0xe0 [ 1218.752102] __fput+0x25f/0x7a0 [ 1218.755387] task_work_run+0x11f/0x190 [ 1218.759271] do_exit+0xa44/0x2850 [ 1218.762805] ? file_write_and_wait_range+0x91/0xd0 [ 1218.767734] ? mm_update_next_owner+0x5b0/0x5b0 [ 1218.772396] ? get_signal+0x323/0x1ca0 [ 1218.776278] ? lock_acquire+0x170/0x3f0 [ 1218.780331] ? lock_downgrade+0x740/0x740 [ 1218.784477] do_group_exit+0x100/0x2e0 [ 1218.788364] get_signal+0x38d/0x1ca0 [ 1218.792073] ? up_read+0x17/0x30 [ 1218.795439] do_signal+0x7c/0x1550 [ 1218.798971] ? vm_insert_page+0x7c0/0x7c0 [ 1218.803110] ? SyS_unshare+0x4ca/0x7f0 [ 1218.807090] ? setup_sigcontext+0x820/0x820 [ 1218.811426] ? mark_held_locks+0xa6/0xf0 [ 1218.815484] ? handle_mm_fault+0x52b/0x9c0 [ 1218.819714] ? __do_page_fault+0x159/0xad0 [ 1218.824725] ? exit_to_usermode_loop+0x41/0x200 [ 1218.829394] exit_to_usermode_loop+0x160/0x200 [ 1218.833973] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1218.838813] prepare_exit_to_usermode+0x1af/0x210 [ 1218.843715] ? page_fault+0x2f/0x50 [ 1218.847363] retint_user+0x8/0x18 [ 1218.850804] RIP: 0033:0x467a07 [ 1218.853985] RSP: 002b:00007ffd6a911838 EFLAGS: 00010246 [ 1218.859343] RAX: 0000000000000000 RBX: 00007ffd6a911e88 RCX: 0000000000467a07 [ 1218.866605] RDX: 0000000000000000 RSI: 00000000004d641c RDI: 0000000008000000 [ 1218.873868] RBP: 00007ffd6a911840 R08: 0000000000000000 R09: 0000000000000000 [ 1218.881136] R10: 0000000000044000 R11: 0000000000000246 R12: 00000000ffffffff [ 1218.888399] R13: 000000000056ca68 R14: 0000000000000000 R15: 00000000000000f8 [ 1218.895683] CPU: 0 PID: 27393 Comm: syz-executor.3 Not tainted 4.14.230-syzkaller #0 [ 1218.903574] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1218.911603] Node 0 [ 1218.912928] Call Trace: [ 1218.912949] dump_stack+0x1b2/0x281 [ 1218.912963] warn_alloc.cold+0x96/0x1cc [ 1218.912977] ? zone_watermark_ok_safe+0x220/0x220 [ 1218.915200] DMA32: [ 1218.917780] ? usleep_range+0x130/0x130 [ 1218.921376] 543*4kB [ 1218.926672] ? try_to_free_pages+0x23f/0x6e0 [ 1218.926683] ? _find_next_bit+0xdb/0x100 [ 1218.926692] ? run_timer_softirq+0x5a0/0x5a0 [ 1218.926709] __alloc_pages_nodemask+0x2127/0x2720 [ 1218.926725] ? lock_acquire+0x170/0x3f0 [ 1218.952881] (UMEH) [ 1218.957689] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1218.961634] 141*8kB [ 1218.963876] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1218.963893] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1218.963908] ? __list_del_entry_valid+0xb3/0xf0 [ 1218.963922] alloc_pages_current+0x155/0x260 [ 1218.982877] (UMEH) [ 1218.985614] ion_page_pool_alloc+0x118/0x1b0 [ 1218.990015] 68*16kB (UMH) [ 1218.992261] ion_system_heap_allocate+0x133/0x8c0 [ 1219.004302] ? _raw_spin_unlock+0x29/0x40 [ 1219.008462] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1219.012881] 423*32kB [ 1219.013391] ? ion_system_contig_heap_create+0x130/0x130 [ 1219.013393] (UMEH) 0*64kB [ 1219.015798] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1219.021231] 0*128kB 0*256kB [ 1219.024108] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1219.024120] ion_alloc+0x27a/0x810 [ 1219.024135] ? ion_dma_buf_release+0x40/0x40 [ 1219.024150] ? __might_fault+0x177/0x1b0 [ 1219.042897] 0*512kB [ 1219.045022] ion_ioctl+0xea/0x1f0 [ 1219.049057] 0*1024kB [ 1219.051380] ? ion_query_heaps+0x360/0x360 [ 1219.061515] ? ion_query_heaps+0x360/0x360 [ 1219.065764] do_vfs_ioctl+0x75a/0xff0 [ 1219.069588] ? ioctl_preallocate+0x1a0/0x1a0 [ 1219.072890] 0*2048kB [ 1219.073991] ? lock_downgrade+0x740/0x740 [ 1219.073999] 0*4096kB [ 1219.076400] ? __fget+0x225/0x360 [ 1219.080522] = 17924kB [ 1219.080528] Node 0 [ 1219.082944] ? do_vfs_ioctl+0xff0/0xff0 [ 1219.082957] ? security_file_ioctl+0x83/0xb0 [ 1219.082966] SyS_ioctl+0x7f/0xb0 [ 1219.082979] ? do_vfs_ioctl+0xff0/0xff0 [ 1219.092876] Normal: [ 1219.095087] do_syscall_64+0x1d5/0x640 [ 1219.099466] 0*4kB [ 1219.102827] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1219.120285] RIP: 0033:0x466459 [ 1219.122892] 0*8kB [ 1219.123469] RSP: 002b:00007f8a667e8188 EFLAGS: 00000246 [ 1219.123477] 0*16kB [ 1219.125609] ORIG_RAX: 0000000000000010 [ 1219.130965] 0*32kB [ 1219.133187] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1219.133193] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000005 [ 1219.133198] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1219.133202] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1219.133207] R13: 00007ffd25ba1ddf R14: 00007f8a667e8300 R15: 0000000000022000 [ 1219.142919] CPU: 0 PID: 27389 Comm: syz-executor.5 Not tainted 4.14.230-syzkaller #0 [ 1219.182902] 0*64kB 0*128kB [ 1219.183774] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1219.183780] Call Trace: [ 1219.186705] 0*256kB [ 1219.196068] dump_stack+0x1b2/0x281 [ 1219.196081] dump_header+0x178/0x82f [ 1219.196091] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1219.196100] ? ___ratelimit+0x2cd/0x530 [ 1219.196110] oom_kill_process.cold+0x10/0xa40 [ 1219.212891] 0*512kB [ 1219.213390] out_of_memory+0xe3e/0x1190 [ 1219.217335] 0*1024kB [ 1219.221849] ? oom_killer_disable+0x1c0/0x1c0 [ 1219.235175] ? mutex_trylock+0x152/0x1a0 [ 1219.239266] __alloc_pages_nodemask+0x23e1/0x2720 [ 1219.242898] 0*2048kB 0*4096kB = 0kB [ 1219.244118] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1219.247722] Node 1 Normal: [ 1219.252598] ? mark_held_locks+0xa6/0xf0 [ 1219.252601] 22*4kB (M) [ 1219.255545] ? cache_grow_begin+0x3f/0x700 [ 1219.255554] cache_grow_begin+0x91/0x700 [ 1219.255566] fallback_alloc+0x207/0x2c0 [ 1219.255577] __kmalloc_track_caller+0x20e/0x400 [ 1219.255586] ? __devinet_sysctl_register+0x83/0x250 [ 1219.255597] kmemdup+0x23/0x50 [ 1219.272900] 6*8kB [ 1219.274617] __devinet_sysctl_register+0x83/0x250 [ 1219.279263] (M) [ 1219.284295] ? inet_netconf_notify_devconf+0x190/0x190 [ 1219.284306] ? __local_bh_enable_ip+0xc1/0x170 [ 1219.284316] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1219.284325] devinet_sysctl_register+0x134/0x1f0 [ 1219.302914] 186*16kB [ 1219.306404] inetdev_init+0x202/0x410 [ 1219.311401] (UM) [ 1219.316155] inetdev_event+0x8b4/0x10a0 [ 1219.316167] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1219.316173] ? devinet_init_net+0x450/0x450 [ 1219.316183] ? cfg802154_netdev_notifier_call+0x2ea/0x660 [ 1219.316194] notifier_call_chain+0x108/0x1a0 [ 1219.316207] register_netdevice+0xb98/0xe40 [ 1219.332895] 738*32kB [ 1219.333551] ? netdev_change_features+0xa0/0xa0 [ 1219.337850] (UM) [ 1219.343385] vxcan_newlink+0x27d/0x4c0 [ 1219.343398] ? rcu_lockdep_current_cpu_online+0xd1/0x140 [ 1219.343404] ? vxcan_close+0xb0/0xb0 [ 1219.343412] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1219.343424] ? fs_reclaim_release+0xd0/0x110 [ 1219.362892] 0*64kB [ 1219.365116] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1219.370539] 0*128kB [ 1219.374243] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1219.374253] ? __kmalloc_node+0x38/0x70 [ 1219.374259] ? kmem_cache_alloc_node_trace+0x383/0x400 [ 1219.374268] ? __kmalloc_node+0x4c/0x70 [ 1219.374281] ? alloc_netdev_mqs+0x8c0/0xb70 [ 1219.392885] 0*256kB [ 1219.393621] ? rtnl_create_link+0x129/0x890 [ 1219.398609] 0*512kB [ 1219.402594] rtnl_newlink+0xfab/0x1860 [ 1219.422911] 0*1024kB [ 1219.423024] ? rtnl_newlink+0x43d/0x1860 [ 1219.425323] 0*2048kB [ 1219.429200] ? __lock_acquire+0x5fc/0x3f20 [ 1219.431583] 0*4096kB [ 1219.435638] ? vxcan_close+0xb0/0xb0 [ 1219.435647] ? trace_hardirqs_on+0x10/0x10 [ 1219.435656] ? rtnl_dellink+0x6a0/0x6a0 [ 1219.435662] ? trace_hardirqs_on+0x10/0x10 [ 1219.435672] ? __read_once_size_nocheck.constprop.0+0x10/0x10 [ 1219.435680] ? deref_stack_reg+0x124/0x1a0 [ 1219.462896] = 26728kB [ 1219.466681] ? lock_acquire+0x170/0x3f0 [ 1219.470866] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1219.473260] ? lock_downgrade+0x740/0x740 [ 1219.473272] ? rtnl_dellink+0x6a0/0x6a0 [ 1219.473279] rtnetlink_rcv_msg+0x3be/0xb10 [ 1219.473291] ? rtnl_calcit.isra.0+0x3a0/0x3a0 [ 1219.473301] ? __netlink_lookup+0x345/0x5d0 [ 1219.473315] netlink_rcv_skb+0x125/0x390 [ 1219.482898] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1219.486119] ? rtnl_calcit.isra.0+0x3a0/0x3a0 [ 1219.490239] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1219.494199] ? netlink_ack+0x9a0/0x9a0 [ 1219.494214] netlink_unicast+0x437/0x610 [ 1219.494225] ? netlink_sendskb+0xd0/0xd0 [ 1219.494234] ? __check_object_size+0x179/0x230 [ 1219.494243] netlink_sendmsg+0x62e/0xb80 [ 1219.522897] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1219.524406] ? nlmsg_notify+0x170/0x170 [ 1219.542888] 58165 total pagecache pages [ 1219.545213] ? security_socket_sendmsg+0x83/0xb0 [ 1219.549770] 0 pages in swap cache [ 1219.553817] ? nlmsg_notify+0x170/0x170 [ 1219.553825] sock_sendmsg+0xb5/0x100 [ 1219.553834] SyS_sendto+0x1c7/0x2c0 [ 1219.553842] ? SyS_getpeername+0x220/0x220 [ 1219.553849] ? vm_insert_page+0x7c0/0x7c0 [ 1219.553873] ? up_read+0x17/0x30 [ 1219.582909] Swap cache stats: add 0, delete 0, find 0/0 [ 1219.586160] ? __do_page_fault+0x159/0xad0 [ 1219.589762] Free swap = 0kB [ 1219.594161] ? do_syscall_64+0x4c/0x640 [ 1219.594170] ? SyS_getpeername+0x220/0x220 [ 1219.594177] do_syscall_64+0x1d5/0x640 [ 1219.594191] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1219.594199] RIP: 0033:0x4193ec [ 1219.594207] RSP: 002b:00007ffe290bfc00 EFLAGS: 00000293 [ 1219.598402] warn_alloc_show_mem: 1 callbacks suppressed [ 1219.598405] Mem-Info: [ 1219.601709] ORIG_RAX: 000000000000002c [ 1219.607122] active_anon:12948 inactive_anon:57535 isolated_anon:0 [ 1219.607122] active_file:16 inactive_file:17 isolated_file:0 [ 1219.607122] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1219.607122] slab_reclaimable:12131 slab_unreclaimable:109216 [ 1219.607122] mapped:52659 shmem:58132 pagetables:739 bounce:0 [ 1219.607122] free:13904 free_pcp:136 free_cma:0 [ 1219.611298] RAX: ffffffffffffffda RBX: 00000000014a4320 RCX: 00000000004193ec [ 1219.622879] Total swap = 0kB [ 1219.626344] RDX: 000000000000003c RSI: 00000000014a4370 RDI: 0000000000000003 [ 1219.631522] 2097051 pages RAM [ 1219.634695] RBP: 0000000000000000 R08: 00007ffe290bfc54 R09: 000000000000000c [ 1219.634700] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1219.634703] R13: 00000000014a4370 R14: 0000000000000003 R15: 0000000000000000 [ 1219.651961] Mem-Info: [ 1219.673350] Node 0 active_anon:50904kB inactive_anon:173372kB active_file:48kB inactive_file:52kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:210636kB dirty:0kB writeback:0kB shmem:175356kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1219.704030] CPU: 0 PID: 27373 Comm: syz-executor.1 Not tainted 4.14.230-syzkaller #0 [ 1219.732893] 0 pages HighMem/MovableOnly [ 1219.758436] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1219.758441] Call Trace: [ 1219.758464] dump_stack+0x1b2/0x281 [ 1219.758477] warn_alloc.cold+0x96/0x1cc [ 1219.758491] ? zone_watermark_ok_safe+0x220/0x220 [ 1219.782903] Node 1 active_anon:888kB inactive_anon:56768kB active_file:16kB inactive_file:116kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:57172kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1219.785886] ? usleep_range+0x130/0x130 [ 1219.789854] Node 0 [ 1219.794686] ? try_to_free_pages+0x23f/0x6e0 [ 1219.794696] ? _find_next_bit+0xdb/0x100 [ 1219.794706] ? run_timer_softirq+0x5a0/0x5a0 [ 1219.794723] __alloc_pages_nodemask+0x2127/0x2720 [ 1219.794741] ? lock_acquire+0x170/0x3f0 [ 1219.842892] 363848 pages reserved [ 1219.845437] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1219.849387] 0 pages cma reserved [ 1219.852839] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1219.865534] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1219.871030] alloc_pages_current+0x155/0x260 [ 1219.872907] DMA free:10964kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1219.875458] ion_page_pool_alloc+0x118/0x1b0 [ 1219.905393] ion_system_heap_allocate+0x133/0x8c0 [ 1219.910239] ? ion_alloc+0x187/0x810 [ 1219.914149] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1219.919601] ? ion_system_contig_heap_create+0x130/0x130 [ 1219.922880] lowmem_reserve[]: [ 1219.925069] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1219.925077] 0 [ 1219.928262] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1219.939889] ion_alloc+0x204/0x810 [ 1219.943452] ? ion_dma_buf_release+0x40/0x40 [ 1219.947974] ? __might_fault+0x177/0x1b0 [ 1219.952077] ion_ioctl+0xea/0x1f0 [ 1219.952890] 2717 2718 [ 1219.955538] ? ion_query_heaps+0x360/0x360 [ 1219.955550] ? ion_query_heaps+0x360/0x360 [ 1219.958034] 2718 [ 1219.962266] do_vfs_ioctl+0x75a/0xff0 [ 1219.972355] ? ioctl_preallocate+0x1a0/0x1a0 [ 1219.972876] 2718 [ 1219.976781] ? lock_downgrade+0x740/0x740 [ 1219.976794] ? __fget+0x225/0x360 [ 1219.982980] ? do_vfs_ioctl+0xff0/0xff0 [ 1219.982992] ? security_file_ioctl+0x83/0xb0 [ 1219.983007] SyS_ioctl+0x7f/0xb0 [ 1219.983017] ? do_vfs_ioctl+0xff0/0xff0 [ 1219.983028] do_syscall_64+0x1d5/0x640 [ 1219.983043] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1220.002891] Node 0 [ 1220.006520] RIP: 0033:0x466459 [ 1220.011730] DMA32 free:361992kB min:36200kB low:45248kB high:54296kB active_anon:50904kB inactive_anon:173372kB active_file:48kB inactive_file:52kB unevictable:0kB writepending:0kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:7200kB pagetables:2792kB bounce:0kB free_pcp:396kB local_pcp:244kB free_cma:0kB [ 1220.013936] RSP: 002b:00007feb59368188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1220.013947] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1220.013951] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000005 [ 1220.013956] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1220.013961] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1220.013966] R13: 00007ffe56f14bcf R14: 00007feb59368300 R15: 0000000000022000 [ 1220.043028] active_anon:12948 inactive_anon:57535 isolated_anon:0 [ 1220.043028] active_file:16 inactive_file:185 isolated_file:0 [ 1220.043028] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1220.043028] slab_reclaimable:12131 slab_unreclaimable:109219 [ 1220.043028] mapped:52724 shmem:58132 pagetables:739 bounce:0 [ 1220.043028] free:174238 free_pcp:175 free_cma:0 [ 1220.050875] Bluetooth: hci0 command 0x040f tx timeout [ 1220.072943] Node 0 active_anon:50904kB inactive_anon:173372kB active_file:48kB inactive_file:996kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:211132kB dirty:0kB writeback:0kB shmem:175356kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1220.079418] Bluetooth: hci1 command 0x040f tx timeout [ 1220.092922] Node 1 active_anon:888kB inactive_anon:56768kB active_file:16kB inactive_file:144kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:64kB dirty:0kB writeback:0kB shmem:57172kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1220.127475] lowmem_reserve[]: [ 1220.133760] Node 0 [ 1220.160531] Bluetooth: hci4 command 0x040f tx timeout [ 1220.183233] DMA free:12052kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1220.193624] 0 [ 1220.206724] lowmem_reserve[]: [ 1220.232519] 0 0 0 0 [ 1220.238958] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1220.251353] 0 2717 2718 2718 2718 [ 1220.269389] Node 0 DMA32 free:349604kB min:36200kB low:45248kB high:54296kB active_anon:50904kB inactive_anon:173372kB active_file:752kB inactive_file:2520kB unevictable:0kB writepending:0kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:7200kB pagetables:2792kB bounce:0kB free_pcp:328kB local_pcp:184kB free_cma:0kB [ 1220.300161] lowmem_reserve[]: 0 0 0 0 0 [ 1220.300819] lowmem_reserve[]: [ 1220.304274] Node 0 [ 1220.307192] 0 [ 1220.307392] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1220.332911] 0 0 0 0 [ 1220.336973] lowmem_reserve[]: 0 [ 1220.338718] Node 1 Normal free:364976kB min:53696kB low:67120kB high:80544kB active_anon:888kB inactive_anon:56768kB active_file:16kB inactive_file:144kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:192kB pagetables:164kB bounce:0kB free_pcp:268kB local_pcp:20kB free_cma:0kB [ 1220.341988] 0 0 0 0 [ 1220.373756] Node 1 Normal free:364976kB min:53696kB low:67120kB high:80544kB active_anon:888kB inactive_anon:56768kB active_file:16kB inactive_file:144kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:192kB pagetables:164kB bounce:0kB free_pcp:268kB local_pcp:248kB free_cma:0kB [ 1220.392897] lowmem_reserve[]: 0 0 0 0 0 [ 1220.403422] lowmem_reserve[]: 0 0 0 0 0 [ 1220.410596] Node 0 DMA: 141*4kB (UE) 4*8kB (U) 10*16kB (U) 9*32kB (UE) 4*64kB (UE) 6*128kB (UE) 3*256kB (UE) 2*512kB (UE) 2*1024kB (UE) 1*2048kB (M) 1*4096kB (M) = 12052kB [ 1220.427561] Node 0 DMA32: 241*4kB (UEH) 70*8kB (UEH) 2*16kB (MH) 12*32kB (MEH) 2566*64kB (U) 813*128kB (UM) 71*256kB (UM) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 288404kB [ 1220.435498] Node 0 DMA: 141*4kB (UE) 4*8kB (U) 10*16kB (U) 9*32kB (UE) 4*64kB (UE) 6*128kB (UE) 3*256kB (UE) 2*512kB (UE) 2*1024kB (UE) 1*2048kB [ 1220.442946] Node 0 [ 1220.453237] (M) [ 1220.456834] Normal: [ 1220.458383] 1*4096kB [ 1220.460341] 0*4kB [ 1220.462671] (M) [ 1220.465138] 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1220.478160] Node 1 Normal: 0*4kB 0*8kB 181*16kB (U) 737*32kB (UM) 2970*64kB (U) 394*128kB (U) 181*256kB (U) 97*512kB (U) 0*1024kB 1*2048kB (U) 0*4096kB = 365040kB [ 1220.492886] = 12052kB [ 1220.493469] warn_alloc_show_mem: 1 callbacks suppressed [ 1220.493473] Mem-Info: [ 1220.495382] Node 0 DMA32: 242*4kB (UMEH) 10*8kB (EH) 2*16kB (MH) 13*32kB (UMEH) 2370*64kB (U) 812*128kB (U) [ 1220.501275] active_anon:12948 inactive_anon:57535 isolated_anon:0 [ 1220.501275] active_file:192 inactive_file:941 isolated_file:0 [ 1220.501275] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1220.501275] slab_reclaimable:12131 slab_unreclaimable:109537 [ 1220.501275] mapped:53487 shmem:58132 pagetables:739 bounce:0 [ 1220.501275] free:163062 free_pcp:141 free_cma:0 [ 1220.532907] 71*256kB [ 1220.546963] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1220.559780] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1220.568470] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1220.578002] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1220.583385] (UM) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 275288kB [ 1220.586677] 59415 total pagecache pages [ 1220.592623] Node 0 [ 1220.596711] Node 0 active_anon:50904kB inactive_anon:173372kB active_file:752kB inactive_file:3920kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:214232kB dirty:0kB writeback:0kB shmem:175356kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1220.596728] Node 1 active_anon:888kB inactive_anon:56768kB active_file:16kB inactive_file:144kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:116kB dirty:0kB writeback:0kB shmem:57172kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1220.596734] Node 0 [ 1220.622892] Normal: [ 1220.627614] 0 pages in swap cache [ 1220.662667] DMA free:12076kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1220.682901] 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1220.702903] Swap cache stats: add 0, delete 0, find 0/0 [ 1220.708306] Free swap = 0kB [ 1220.715497] Total swap = 0kB [ 1220.722899] Node 1 Normal: 0*4kB 0*8kB 181*16kB (U) 737*32kB (UM) 2970*64kB (U) 394*128kB (U) 181*256kB (U) 97*512kB (U) 0*1024kB 1*2048kB (U) 0*4096kB = 365040kB [ 1220.733502] 2097051 pages RAM [ 1220.741836] 0 pages HighMem/MovableOnly [ 1220.746659] 363848 pages reserved [ 1220.752895] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1220.757960] Node 0 DMA32 free:179868kB min:36200kB low:45248kB high:54296kB active_anon:50504kB inactive_anon:173372kB active_file:852kB inactive_file:4820kB unevictable:0kB writepending:0kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:7200kB pagetables:2792kB bounce:0kB free_pcp:808kB local_pcp:148kB free_cma:0kB [ 1220.763519] 0 pages cma reserved [ 1220.793696] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1220.802550] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1220.821579] Out of memory (oom_kill_allocating_task): Kill process 27389 (syz-executor.5) score 0 or sacrifice child [ 1220.835653] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1220.852949] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1220.855893] Killed process 27389 (syz-executor.5) total-vm:93120kB, anon-rss:72kB, file-rss:33164kB, shmem-rss:0kB [ 1220.861671] 59896 total pagecache pages [ 1220.876299] lowmem_reserve[]: 0 0 0 0 0 [ 1220.883804] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1220.902903] 0 pages in swap cache [ 1220.923095] Swap cache stats: add 0, delete 0, find 0/0 [ 1220.928616] Free swap = 0kB [ 1220.931636] Total swap = 0kB [ 1220.943005] 2097051 pages RAM [ 1220.965498] 0 pages HighMem/MovableOnly [ 1220.971846] oom_reaper: reaped process 27389 (syz-executor.5), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1220.992472] 363848 pages reserved [ 1221.005821] 0 pages cma reserved [ 1221.015350] lowmem_reserve[]: 0 0 0 0 0 [ 1221.020009] Node 1 Normal free:364976kB min:53696kB low:67120kB high:80544kB active_anon:888kB inactive_anon:56768kB active_file:16kB inactive_file:144kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:160kB pagetables:164kB bounce:0kB free_pcp:312kB local_pcp:292kB free_cma:0kB 13:37:57 executing program 3: ioctl$SIOCPNDELRESOURCE(0xffffffffffffffff, 0x89ef, &(0x7f0000000040)=0xffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000012c0)={0x0, @nl=@unspec, @tipc=@id={0x1e, 0x3, 0x2, {0x4e21, 0x4}}, @ethernet={0x307, @random="68d88c73bc2f"}, 0x0, 0x0, 0x0, 0x0, 0x20, &(0x7f0000001280)='bridge_slave_0\x00', 0x401, 0x0, 0xfd51}) semctl$SETVAL(0x0, 0x0, 0x10, 0x0) semctl$GETVAL(0x0, 0x0, 0xc, &(0x7f0000000180)=""/194) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$x25(0x9, 0x5, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x500, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x80000000, 0xa, 0x1}) [ 1221.250747] lowmem_reserve[]: 0 0 0 0 0 [ 1221.265278] Node 0 DMA: 141*4kB (UE) 5*8kB (U) 9*16kB (U) 10*32kB (UE) 4*64kB (UE) 6*128kB (UE) 3*256kB (UE) 2*512kB (UE) 2*1024kB (UE) 1*2048kB (M) 1*4096kB (M) = 12076kB [ 1221.290859] Node 0 DMA32: 526*4kB (UEH) 893*8kB (UMEH) 790*16kB (UMH) 1514*32kB (UEH) 2*64kB (U) 462*128kB (U) 39*256kB (UM) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 139584kB [ 1221.311539] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1221.324838] Node 1 Normal: 0*4kB 0*8kB 181*16kB (U) 738*32kB (UM) 2970*64kB (U) 394*128kB (U) 181*256kB (U) 97*512kB (U) 0*1024kB 1*2048kB (U) 0*4096kB = 365072kB [ 1221.344725] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1221.352145] chnl_net:caif_netlink_parms(): no params data found [ 1221.365792] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1221.379185] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1221.415596] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1221.431888] 64047 total pagecache pages [ 1221.436963] 0 pages in swap cache [ 1221.441334] Swap cache stats: add 0, delete 0, find 0/0 [ 1221.450431] Free swap = 0kB [ 1221.457832] Total swap = 0kB [ 1221.461003] 2097051 pages RAM [ 1221.468060] 0 pages HighMem/MovableOnly [ 1221.476854] 363848 pages reserved [ 1221.480909] 0 pages cma reserved [ 1221.679777] bridge0: port 1(bridge_slave_0) entered blocking state [ 1221.693528] bridge0: port 1(bridge_slave_0) entered disabled state [ 1221.700968] device bridge_slave_0 entered promiscuous mode [ 1221.718063] bridge0: port 2(bridge_slave_1) entered blocking state [ 1221.732966] bridge0: port 2(bridge_slave_1) entered disabled state [ 1221.740348] device bridge_slave_1 entered promiscuous mode [ 1221.817046] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1221.827572] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1221.850585] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1221.861419] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1221.875455] device bridge_slave_1 left promiscuous mode [ 1221.881010] bridge0: port 2(bridge_slave_1) entered disabled state [ 1221.894855] device bridge_slave_0 left promiscuous mode [ 1221.900493] bridge0: port 1(bridge_slave_0) entered disabled state [ 1221.916088] device veth1_macvtap left promiscuous mode [ 1221.921416] device veth0_macvtap left promiscuous mode [ 1221.930846] device veth1_vlan left promiscuous mode [ 1221.937539] device veth0_vlan left promiscuous mode [ 1222.062762] device hsr_slave_1 left promiscuous mode [ 1222.076996] device hsr_slave_0 left promiscuous mode [ 1222.096472] team0 (unregistering): Port device team_slave_1 removed [ 1222.109539] team0 (unregistering): Port device team_slave_0 removed [ 1222.122399] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 1222.132971] Bluetooth: hci0 command 0x0419 tx timeout [ 1222.140170] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 1222.181436] bond0 (unregistering): Released all slaves [ 1222.201354] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 1222.215949] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1222.257221] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 1222.266966] team0: Port device team_slave_0 added [ 1222.272777] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 1222.287085] team0: Port device team_slave_1 added [ 1222.348020] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1222.367523] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1222.422964] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1222.444758] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1222.451048] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1222.515771] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1222.529740] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 1222.537430] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 1222.573290] device hsr_slave_0 entered promiscuous mode [ 1222.579336] device hsr_slave_1 entered promiscuous mode [ 1222.592616] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 1222.606354] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 1222.892128] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 1222.937587] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1222.949403] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 1222.959207] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 1222.969825] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1222.977476] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1222.990563] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 1222.997528] 8021q: adding VLAN 0 to HW filter on device team0 [ 1223.026159] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 1223.033928] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1223.042141] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1223.065164] bridge0: port 1(bridge_slave_0) entered blocking state [ 1223.071541] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1223.097212] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 1223.114698] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1223.122243] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1223.132523] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1223.142272] bridge0: port 2(bridge_slave_1) entered blocking state [ 1223.148682] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1223.163575] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 1223.179361] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 1223.186609] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1223.198614] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1223.218722] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1223.226651] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1223.239961] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 1223.248432] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1223.259987] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1223.268336] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1223.281773] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 1223.289955] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1223.301030] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1223.311402] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 1223.321178] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1223.343165] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 1223.351268] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 1223.364895] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1223.371606] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1223.387617] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1223.480859] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 1223.497733] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 1223.505883] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1223.518302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1223.621002] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 1223.630391] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 1223.641108] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 1223.666706] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 1223.677213] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1223.686187] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1223.704741] device veth0_vlan entered promiscuous mode [ 1223.713935] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1223.720893] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1223.731859] device veth1_vlan entered promiscuous mode [ 1223.738948] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 1223.750194] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 1223.767260] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 1223.787689] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 1223.797212] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1223.806221] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1223.816962] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1223.825523] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1223.839495] device veth0_macvtap entered promiscuous mode [ 1223.847273] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 1223.878180] device veth1_macvtap entered promiscuous mode [ 1223.887097] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 1223.926296] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 1223.963613] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 1223.988596] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1224.005703] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1224.017843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1224.028664] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1224.039959] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 1224.048158] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1224.057356] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1224.070029] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1224.079782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1224.090125] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1224.101257] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 1224.109286] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1224.116771] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1224.127655] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1224.136198] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1224.144760] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1224.152765] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1224.164765] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1224.542677] bond0 (unregistering): Released all slaves [ 1225.407854] IPVS: ftp: loaded support on port[0] = 21 [ 1225.468614] IPVS: ftp: loaded support on port[0] = 21 [ 1225.624926] chnl_net:caif_netlink_parms(): no params data found [ 1225.767265] chnl_net:caif_netlink_parms(): no params data found [ 1225.837034] bridge0: port 1(bridge_slave_0) entered blocking state [ 1225.849513] bridge0: port 1(bridge_slave_0) entered disabled state [ 1225.860491] device bridge_slave_0 entered promiscuous mode [ 1225.868377] bridge0: port 2(bridge_slave_1) entered blocking state [ 1225.883109] bridge0: port 2(bridge_slave_1) entered disabled state [ 1225.890576] device bridge_slave_1 entered promiscuous mode [ 1225.932042] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 1225.954059] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1225.961737] bridge0: port 1(bridge_slave_0) entered blocking state [ 1225.973169] Bluetooth: hci1 command 0x0409 tx timeout [ 1225.978415] Bluetooth: hci2 command 0x0409 tx timeout [ 1225.986354] bridge0: port 1(bridge_slave_0) entered disabled state [ 1225.994294] device bridge_slave_0 entered promiscuous mode [ 1226.002081] bridge0: port 2(bridge_slave_1) entered blocking state [ 1226.011666] bridge0: port 2(bridge_slave_1) entered disabled state [ 1226.019148] device bridge_slave_1 entered promiscuous mode [ 1226.057506] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 1226.065782] team0: Port device team_slave_0 added [ 1226.072568] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 1226.081124] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 1226.089139] team0: Port device team_slave_1 added [ 1226.096084] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1226.138384] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1226.145068] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1226.170529] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1226.181315] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 1226.189370] team0: Port device team_slave_0 added [ 1226.195260] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1226.202162] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1226.227477] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1226.238271] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 1226.246012] team0: Port device team_slave_1 added [ 1226.251331] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 1226.259146] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 1226.283407] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1226.289676] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1226.314986] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1226.346451] device hsr_slave_0 entered promiscuous mode [ 1226.352675] device hsr_slave_1 entered promiscuous mode [ 1226.359659] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1226.366435] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1226.391991] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1226.403127] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 1226.410431] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 1226.417995] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 1226.425940] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 1226.480797] device hsr_slave_0 entered promiscuous mode [ 1226.487621] device hsr_slave_1 entered promiscuous mode [ 1226.510426] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 1226.527779] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 1226.668906] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 1226.696025] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 1226.735630] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1226.745330] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 1226.755499] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 1226.762219] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1226.770328] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1226.779334] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 1226.785663] 8021q: adding VLAN 0 to HW filter on device team0 [ 1226.797694] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 1226.805258] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1226.813388] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1226.820946] bridge0: port 1(bridge_slave_0) entered blocking state [ 1226.827552] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1226.835278] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1226.847938] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 1226.855513] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1226.864528] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1226.872058] bridge0: port 2(bridge_slave_1) entered blocking state [ 1226.878448] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1226.887555] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 1226.898901] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1226.905268] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1226.918438] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 1226.928003] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 1226.935036] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1226.944583] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 1226.955066] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1226.963767] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1226.971864] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1226.981005] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 1226.988531] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 1226.995967] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1227.005035] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1227.011942] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1227.020120] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1227.033029] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 1227.039105] 8021q: adding VLAN 0 to HW filter on device team0 [ 1227.047555] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 1227.057150] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1227.065214] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1227.073638] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 1227.082021] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 1227.092561] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1227.103690] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 1227.109719] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1227.117610] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1227.126034] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1227.134326] bridge0: port 1(bridge_slave_0) entered blocking state [ 1227.140785] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1227.147875] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1227.155525] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1227.165467] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 1227.176933] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1227.184452] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1227.192147] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1227.199901] bridge0: port 2(bridge_slave_1) entered blocking state [ 1227.206314] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1227.215125] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 1227.226932] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1227.238084] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 1227.247026] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 1227.255501] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1227.266347] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 1227.273641] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1227.280394] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1227.292088] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1227.301149] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 1227.308730] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1227.317066] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1227.325734] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1227.335754] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 1227.343143] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1227.350922] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1227.361827] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 1227.372595] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 1227.380416] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1227.388347] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1227.395985] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1227.403931] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1227.414641] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 1227.420688] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1227.438867] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 1227.446805] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 1227.453442] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1227.460169] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1227.478232] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1227.499791] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 1227.510667] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 1227.519494] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1227.528289] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1227.565755] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 1227.574935] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 1227.581621] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 1227.592218] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 1227.599410] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1227.607490] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1227.615881] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1227.622912] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1227.632049] device veth0_vlan entered promiscuous mode [ 1227.639422] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 1227.650472] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 1227.662140] device veth1_vlan entered promiscuous mode [ 1227.671059] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1227.679720] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1227.700185] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 1227.712208] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 1227.719456] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1227.728167] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1227.739696] device veth0_macvtap entered promiscuous mode [ 1227.746197] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 1227.757442] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 1227.764471] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 1227.771120] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 1227.781972] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 1227.790074] device veth1_macvtap entered promiscuous mode [ 1227.796445] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 1227.802788] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1227.810817] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1227.818511] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1227.826080] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1227.835762] device veth0_vlan entered promiscuous mode [ 1227.844245] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1227.851330] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1227.860655] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 1227.871724] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 1227.881149] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1227.891310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1227.901206] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1227.911169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1227.920440] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1227.930467] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1227.940748] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 1227.948200] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1227.956516] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1227.964938] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1227.974689] device veth1_vlan entered promiscuous mode [ 1227.980780] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 1227.991373] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1228.001352] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1228.010652] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1228.020525] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1228.029692] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1228.039518] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1228.043436] Bluetooth: hci2 command 0x041b tx timeout [ 1228.050758] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 1228.060746] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1228.060941] Bluetooth: hci1 command 0x041b tx timeout [ 1228.070201] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 1228.082503] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1228.089975] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1228.099389] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1228.107383] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1228.129609] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 1228.143620] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 1228.151789] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1228.160807] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1228.170528] device veth0_macvtap entered promiscuous mode [ 1228.179071] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 1228.189287] device veth1_macvtap entered promiscuous mode [ 1228.196607] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 1228.213795] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 1228.224967] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 1228.235282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1228.245416] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1228.255637] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1228.265495] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1228.274916] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1228.284896] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1228.294750] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1228.304527] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1228.314799] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 1228.321718] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1228.329576] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1228.337609] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1228.344977] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1228.352782] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1228.362522] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1228.373384] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1228.382509] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1228.392642] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1228.402380] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1228.412166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1228.421405] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1228.431840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1228.444096] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 1228.450989] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1228.459895] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1228.467946] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 13:38:06 executing program 2: ioctl$SIOCPNDELRESOURCE(0xffffffffffffffff, 0x89ef, &(0x7f0000000040)=0xffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000004f80)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f00000012c0)={0x0, @nl=@unspec, @tipc=@id={0x1e, 0x3, 0x2, {0x4e21, 0x4}}, @ethernet={0x307, @random="68d88c73bc2f"}, 0x0, 0x0, 0x0, 0x0, 0x20, &(0x7f0000001280)='bridge_slave_0\x00', 0x401, 0x0, 0xfd51}) semctl$SETVAL(0x0, 0x0, 0x10, 0x0) semctl$GETVAL(0x0, 0x0, 0xc, &(0x7f0000000180)=""/194) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$x25(0x9, 0x5, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x500, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x80000000, 0xa, 0x1}) 13:38:06 executing program 5: semget$private(0x0, 0x1, 0x0) semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f00000000c0)=""/89) 13:38:06 executing program 0: ioctl$SIOCPNDELRESOURCE(0xffffffffffffffff, 0x89ef, &(0x7f0000000040)=0xffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f00000012c0)={0x0, @nl=@unspec, @tipc=@id={0x1e, 0x3, 0x2, {0x4e21, 0x4}}, @ethernet={0x307, @random="68d88c73bc2f"}, 0x0, 0x0, 0x0, 0x0, 0x20, &(0x7f0000001280)='bridge_slave_0\x00', 0x401, 0x0, 0xfd51}) semctl$SETVAL(0x0, 0x0, 0x10, 0x0) semctl$GETVAL(0x0, 0x0, 0xc, &(0x7f0000000180)=""/194) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SCAUSEDIAG(r1, 0x89ec, &(0x7f0000000600)) bind$x25(r1, &(0x7f0000001480)={0x9, @remote={[], 0x3}}, 0x12) syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, &(0x7f00000014c0)) semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f00000000c0)=""/89) 13:38:06 executing program 4: ioctl$SIOCPNDELRESOURCE(0xffffffffffffffff, 0x89ef, &(0x7f0000000040)=0xffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f00000012c0)={0x0, @nl=@unspec, @tipc=@id={0x1e, 0x3, 0x2, {0x4e21, 0x4}}, @ethernet={0x307, @random="68d88c73bc2f"}, 0x0, 0x0, 0x0, 0x0, 0x20, &(0x7f0000001280)='bridge_slave_0\x00', 0x401, 0x0, 0xfd51}) semctl$SETVAL(0x0, 0x0, 0x10, 0x0) semctl$GETVAL(0x0, 0x0, 0xc, &(0x7f0000000180)=""/194) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SCAUSEDIAG(r1, 0x89ec, &(0x7f0000000600)) bind$x25(r1, &(0x7f0000001480)={0x9, @remote={[], 0x3}}, 0x12) syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, &(0x7f00000014c0)) semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f00000000c0)=""/89) 13:38:06 executing program 1: ioctl$SIOCPNDELRESOURCE(0xffffffffffffffff, 0x89ef, &(0x7f0000000040)=0xffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f00000012c0)={0x0, @nl=@unspec, @tipc=@id={0x1e, 0x3, 0x2, {0x4e21, 0x4}}, @ethernet={0x307, @random="68d88c73bc2f"}, 0x0, 0x0, 0x0, 0x0, 0x20, &(0x7f0000001280)='bridge_slave_0\x00', 0x401, 0x0, 0xfd51}) semctl$SETVAL(0x0, 0x0, 0x10, 0x0) semctl$GETVAL(0x0, 0x0, 0xc, &(0x7f0000000180)=""/194) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$x25(0x9, 0x5, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x500, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x80000000, 0xa, 0x1}) 13:38:06 executing program 3: ioctl$SIOCPNDELRESOURCE(0xffffffffffffffff, 0x89ef, &(0x7f0000000040)=0xffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) ioctl$sock_SIOCADDRT(r0, 0x890b, 0x0) semctl$SETVAL(0x0, 0x0, 0x10, 0x0) semctl$GETVAL(0x0, 0x0, 0xc, &(0x7f0000000180)=""/194) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$x25(0x9, 0x5, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x500, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x80000000, 0xa, 0x1}) 13:38:06 executing program 0: ioctl$SIOCPNDELRESOURCE(0xffffffffffffffff, 0x89ef, &(0x7f0000000040)=0xffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000012c0)={0x0, @nl=@unspec, @tipc=@id={0x1e, 0x3, 0x2, {0x4e21, 0x4}}, @ethernet={0x307, @random="68d88c73bc2f"}, 0x0, 0x0, 0x0, 0x0, 0x20, &(0x7f0000001280)='bridge_slave_0\x00', 0x401, 0x0, 0xfd51}) semctl$SETVAL(0x0, 0x0, 0x10, 0x0) semctl$GETVAL(0x0, 0x0, 0xc, &(0x7f0000000180)=""/194) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$x25(0x9, 0x5, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x500, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x80000000, 0xa, 0x1}) 13:38:06 executing program 4: ioctl$SIOCPNDELRESOURCE(0xffffffffffffffff, 0x89ef, &(0x7f0000000040)=0xffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f00000012c0)={0x0, @nl=@unspec, @tipc=@id={0x1e, 0x3, 0x2, {0x4e21, 0x4}}, @ethernet={0x307, @random="68d88c73bc2f"}, 0x0, 0x0, 0x0, 0x0, 0x20, &(0x7f0000001280)='bridge_slave_0\x00', 0x401, 0x0, 0xfd51}) semctl$SETVAL(0x0, 0x0, 0x10, 0x0) semctl$GETVAL(0x0, 0x0, 0xc, &(0x7f0000000180)=""/194) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SCAUSEDIAG(r1, 0x89ec, &(0x7f0000000600)) bind$x25(r1, &(0x7f0000001480)={0x9, @remote={[], 0x3}}, 0x12) syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, &(0x7f00000014c0)) semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f00000000c0)=""/89) 13:38:06 executing program 4: ioctl$SIOCPNDELRESOURCE(0xffffffffffffffff, 0x89ef, &(0x7f0000000040)=0xffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f00000012c0)={0x0, @nl=@unspec, @tipc=@id={0x1e, 0x3, 0x2, {0x4e21, 0x4}}, @ethernet={0x307, @random="68d88c73bc2f"}, 0x0, 0x0, 0x0, 0x0, 0x20, &(0x7f0000001280)='bridge_slave_0\x00', 0x401, 0x0, 0xfd51}) semctl$SETVAL(0x0, 0x0, 0x10, 0x0) semctl$GETVAL(0x0, 0x0, 0xc, &(0x7f0000000180)=""/194) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SCAUSEDIAG(r2, 0x89ec, &(0x7f0000000600)) bind$x25(r2, &(0x7f0000001480)={0x9, @remote={[], 0x3}}, 0x12) syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, &(0x7f00000014c0)) r3 = semget$private(0x0, 0x1, 0x484) semctl$IPC_STAT(r3, 0x0, 0x2, &(0x7f00000000c0)=""/89) semctl$SEM_INFO(r3, 0x4, 0x13, &(0x7f0000000280)=""/4096) sendmsg$RDMA_NLDEV_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000001440)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001400)={&(0x7f0000001500)=ANY=[@ANYBLOB="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"/270], 0x60}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000000)='SEG6\x00', r1) openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x500, 0x0) [ 1230.123351] Bluetooth: hci1 command 0x040f tx timeout [ 1230.128939] Bluetooth: hci2 command 0x040f tx timeout 13:38:06 executing program 4 (fault-call:0 fault-nth:0): semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f00000000c0)=""/89) [ 1230.340233] FAULT_INJECTION: forcing a failure. [ 1230.340233] name failslab, interval 1, probability 0, space 0, times 0 [ 1230.400413] syz-executor.1: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1230.421414] CPU: 1 PID: 28282 Comm: syz-executor.4 Not tainted 4.14.230-syzkaller #0 [ 1230.429354] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1230.438719] Call Trace: [ 1230.441345] dump_stack+0x1b2/0x281 [ 1230.444985] should_fail.cold+0x10a/0x149 [ 1230.449140] should_failslab+0xd6/0x130 [ 1230.453123] kmem_cache_alloc+0x28e/0x3c0 [ 1230.457395] __anon_vma_prepare+0x5d/0x4f0 [ 1230.461630] ? __lock_acquire+0x5fc/0x3f20 [ 1230.465902] do_huge_pmd_anonymous_page+0xd38/0x1700 [ 1230.471020] ? prep_transhuge_page+0xa0/0xa0 [ 1230.475446] __handle_mm_fault+0x2ac4/0x4620 [ 1230.479877] ? trace_hardirqs_on+0x10/0x10 [ 1230.484113] ? vm_insert_page+0x7c0/0x7c0 [ 1230.488279] ? mark_held_locks+0xa6/0xf0 [ 1230.492352] handle_mm_fault+0x455/0x9c0 [ 1230.496423] __do_page_fault+0x549/0xad0 [ 1230.500497] ? spurious_fault+0x640/0x640 [ 1230.504649] ? do_page_fault+0x60/0x500 [ 1230.508631] page_fault+0x25/0x50 [ 1230.512087] RIP: 0010:copy_user_enhanced_fast_string+0xe/0x20 [ 1230.517971] RSP: 0018:ffff8880388d7dc8 EFLAGS: 00010206 [ 1230.523343] RAX: ffffed100711afd4 RBX: 0000000000000068 RCX: 0000000000000068 [ 1230.530628] RDX: 0000000000000068 RSI: ffff8880388d7e38 RDI: 00000000200000c0 [ 1230.537919] RBP: ffff8880388d7e38 R08: 0000000000000000 R09: ffffed100711afd3 [ 1230.545310] R10: ffff8880388d7e9f R11: ffff888092e4c5c0 R12: 00000000200000c0 [ 1230.547045] syz-executor.1 cpuset= [ 1230.552682] R13: 00007ffffffff000 R14: 0000000020000128 R15: ffff888094576240 [ 1230.563548] _copy_to_user+0xaa/0xd0 [ 1230.567276] SyS_semctl+0x164/0x220 [ 1230.570907] ? SyS_semget+0x170/0x170 [ 1230.574719] ? __do_page_fault+0x159/0xad0 [ 1230.578955] ? do_syscall_64+0x4c/0x640 [ 1230.582931] ? SyS_semget+0x170/0x170 [ 1230.586741] do_syscall_64+0x1d5/0x640 [ 1230.590644] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1230.595837] RIP: 0033:0x466459 [ 1230.599026] RSP: 002b:00007fee1a099188 EFLAGS: 00000246 ORIG_RAX: 0000000000000042 [ 1230.600884] / [ 1230.606732] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1230.615736] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 1230.623021] RBP: 00007fee1a0991d0 R08: 0000000000000000 R09: 0000000000000000 [ 1230.630309] R10: 00000000200000c0 R11: 0000000000000246 R12: 0000000000000001 [ 1230.631057] mems_allowed=0-1 [ 1230.637596] R13: 00007ffe6e91304f R14: 00007fee1a099300 R15: 0000000000022000 [ 1230.708421] CPU: 1 PID: 28271 Comm: syz-executor.1 Not tainted 4.14.230-syzkaller #0 [ 1230.716352] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1230.725719] Call Trace: [ 1230.728341] dump_stack+0x1b2/0x281 [ 1230.731986] warn_alloc.cold+0x96/0x1cc [ 1230.735979] ? zone_watermark_ok_safe+0x220/0x220 [ 1230.740853] __alloc_pages_nodemask+0x2127/0x2720 [ 1230.745711] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1230.750740] ? lock_acquire+0x170/0x3f0 [ 1230.754728] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1230.759594] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1230.765055] ? __mutex_unlock_slowpath+0x75/0x770 [ 1230.769912] alloc_pages_current+0x155/0x260 [ 1230.774339] ion_page_pool_alloc+0x118/0x1b0 [ 1230.778763] ion_system_heap_allocate+0x133/0x8c0 [ 1230.783620] ? ion_alloc+0x187/0x810 [ 1230.787355] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1230.792821] ? ion_system_contig_heap_create+0x130/0x130 [ 1230.798286] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1230.803320] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1230.808184] ion_alloc+0x204/0x810 [ 1230.811749] ? ion_dma_buf_release+0x40/0x40 [ 1230.816187] ? __might_fault+0x177/0x1b0 [ 1230.820273] ion_ioctl+0xea/0x1f0 [ 1230.823745] ? ion_query_heaps+0x360/0x360 [ 1230.827998] ? ion_query_heaps+0x360/0x360 [ 1230.832243] do_vfs_ioctl+0x75a/0xff0 [ 1230.836056] ? ioctl_preallocate+0x1a0/0x1a0 [ 1230.840486] ? lock_downgrade+0x740/0x740 [ 1230.844672] ? __fget+0x225/0x360 [ 1230.848137] ? do_vfs_ioctl+0xff0/0xff0 [ 1230.852117] ? security_file_ioctl+0x83/0xb0 [ 1230.856560] SyS_ioctl+0x7f/0xb0 [ 1230.859932] ? do_vfs_ioctl+0xff0/0xff0 [ 1230.864088] do_syscall_64+0x1d5/0x640 [ 1230.867989] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1230.873193] RIP: 0033:0x466459 [ 1230.876394] RSP: 002b:00007feb59368188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1230.884491] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1230.891771] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000005 [ 1230.899050] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1230.906329] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1230.913623] R13: 00007ffe56f14bcf R14: 00007feb59368300 R15: 0000000000022000 [ 1230.991459] Mem-Info: [ 1231.001265] syz-executor.3: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1231.002438] active_anon:12866 inactive_anon:57508 isolated_anon:24 [ 1231.002438] active_file:2044 inactive_file:5114 isolated_file:23 [ 1231.002438] unevictable:0 dirty:74 writeback:0 unstable:0 [ 1231.002438] slab_reclaimable:12097 slab_unreclaimable:110634 13:38:07 executing program 4 (fault-call:0 fault-nth:1): semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f00000000c0)=""/89) [ 1231.002438] mapped:48508 shmem:58128 pagetables:669 bounce:0 [ 1231.002438] free:247100 free_pcp:167 free_cma:0 [ 1231.018762] syz-executor.0: [ 1231.052597] Node 0 active_anon:50496kB inactive_anon:173356kB active_file:7764kB inactive_file:18380kB unevictable:0kB isolated(anon):0kB isolated(file):60kB mapped:123348kB dirty:220kB writeback:0kB shmem:175328kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1231.099746] FAULT_INJECTION: forcing a failure. [ 1231.099746] name failslab, interval 1, probability 0, space 0, times 0 [ 1231.106359] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 1231.142398] CPU: 1 PID: 28286 Comm: syz-executor.4 Not tainted 4.14.230-syzkaller #0 [ 1231.150409] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1231.159775] Call Trace: [ 1231.162379] dump_stack+0x1b2/0x281 [ 1231.166018] should_fail.cold+0x10a/0x149 [ 1231.170175] should_failslab+0xd6/0x130 [ 1231.170354] page allocation failure: order:4 [ 1231.174149] kmem_cache_alloc+0x28e/0x3c0 [ 1231.174164] __anon_vma_prepare+0x2bc/0x4f0 [ 1231.174174] ? __lock_acquire+0x5fc/0x3f20 [ 1231.174185] do_huge_pmd_anonymous_page+0xd38/0x1700 [ 1231.174198] ? prep_transhuge_page+0xa0/0xa0 [ 1231.174210] __handle_mm_fault+0x2ac4/0x4620 [ 1231.174221] ? trace_hardirqs_on+0x10/0x10 [ 1231.174231] ? vm_insert_page+0x7c0/0x7c0 [ 1231.199712] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1231.200919] ? mark_held_locks+0xa6/0xf0 [ 1231.200935] handle_mm_fault+0x455/0x9c0 [ 1231.228926] __do_page_fault+0x549/0xad0 [ 1231.232040] (null) [ 1231.232991] ? spurious_fault+0x640/0x640 [ 1231.233002] ? do_page_fault+0x60/0x500 [ 1231.233014] page_fault+0x25/0x50 [ 1231.233026] RIP: 0010:copy_user_enhanced_fast_string+0xe/0x20 [ 1231.233034] RSP: 0018:ffff8880251e7dc8 EFLAGS: 00010206 [ 1231.250892] syz-executor.0 cpuset= [ 1231.252596] RAX: ffffed1004a3cfd4 RBX: 0000000000000068 RCX: 0000000000000068 [ 1231.252602] RDX: 0000000000000068 RSI: ffff8880251e7e38 RDI: 00000000200000c0 [ 1231.252608] RBP: ffff8880251e7e38 R08: 0000000000000000 R09: ffffed1004a3cfd3 [ 1231.252614] R10: ffff8880251e7e9f R11: ffff88804f0c85c0 R12: 00000000200000c0 [ 1231.252619] R13: 00007ffffffff000 R14: 0000000020000128 R15: ffff888094576240 [ 1231.252647] _copy_to_user+0xaa/0xd0 [ 1231.290460] / [ 1231.290720] SyS_semctl+0x164/0x220 [ 1231.307017] ? SyS_semget+0x170/0x170 [ 1231.310832] ? __do_page_fault+0x159/0xad0 [ 1231.315072] ? do_syscall_64+0x4c/0x640 [ 1231.319052] ? SyS_semget+0x170/0x170 [ 1231.322883] do_syscall_64+0x1d5/0x640 [ 1231.326780] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1231.331356] mems_allowed=0-1 [ 1231.331969] RIP: 0033:0x466459 [ 1231.338239] RSP: 002b:00007fee1a099188 EFLAGS: 00000246 ORIG_RAX: 0000000000000042 [ 1231.345967] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1231.353233] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 1231.360500] RBP: 00007fee1a0991d0 R08: 0000000000000000 R09: 0000000000000000 [ 1231.367770] R10: 00000000200000c0 R11: 0000000000000246 R12: 0000000000000001 [ 1231.375050] R13: 00007ffe6e91304f R14: 00007fee1a099300 R15: 0000000000022000 [ 1231.390909] Node 1 active_anon:844kB inactive_anon:56772kB active_file:464kB inactive_file:2056kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:70612kB dirty:148kB writeback:0kB shmem:57180kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1231.397550] CPU: 0 PID: 28272 Comm: syz-executor.0 Not tainted 4.14.230-syzkaller #0 [ 1231.426289] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1231.435661] Call Trace: [ 1231.438282] dump_stack+0x1b2/0x281 [ 1231.441950] warn_alloc.cold+0x96/0x1cc [ 1231.445953] ? zone_watermark_ok_safe+0x220/0x220 [ 1231.449655] Node 0 [ 1231.450832] __alloc_pages_nodemask+0x2127/0x2720 [ 1231.450854] ? lock_acquire+0x170/0x3f0 [ 1231.456578] DMA free:11084kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1231.457929] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1231.457950] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1231.457962] ? __mutex_unlock_slowpath+0x75/0x770 [ 1231.463140] lowmem_reserve[]: [ 1231.487434] alloc_pages_current+0x155/0x260 [ 1231.487453] ion_page_pool_alloc+0x118/0x1b0 [ 1231.487464] ion_system_heap_allocate+0x133/0x8c0 [ 1231.487474] ? ion_alloc+0x187/0x810 [ 1231.487484] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1231.487492] ? ion_system_contig_heap_create+0x130/0x130 [ 1231.487501] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1231.487511] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1231.487523] ion_alloc+0x204/0x810 [ 1231.519862] 0 [ 1231.523180] ? ion_dma_buf_release+0x40/0x40 [ 1231.523196] ? __might_fault+0x177/0x1b0 [ 1231.523208] ion_ioctl+0xea/0x1f0 [ 1231.523217] ? ion_query_heaps+0x360/0x360 [ 1231.523227] ? ion_query_heaps+0x360/0x360 [ 1231.523237] do_vfs_ioctl+0x75a/0xff0 [ 1231.523248] ? ioctl_preallocate+0x1a0/0x1a0 [ 1231.523257] ? lock_downgrade+0x740/0x740 [ 1231.523270] ? __fget+0x225/0x360 [ 1231.532186] 2717 [ 1231.534195] ? do_vfs_ioctl+0xff0/0xff0 [ 1231.534208] ? security_file_ioctl+0x83/0xb0 [ 1231.534219] SyS_ioctl+0x7f/0xb0 [ 1231.534228] ? do_vfs_ioctl+0xff0/0xff0 [ 1231.534241] do_syscall_64+0x1d5/0x640 [ 1231.534257] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1231.534269] RIP: 0033:0x466459 [ 1231.542741] 2718 [ 1231.544124] RSP: 002b:00007f141b2c2188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1231.544134] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1231.544138] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000005 [ 1231.544143] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1231.544148] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1231.544153] R13: 00007fff5a5b1ccf R14: 00007f141b2c2300 R15: 0000000000022000 [ 1231.557637] CPU: 0 PID: 28269 Comm: syz-executor.3 Not tainted 4.14.230-syzkaller #0 [ 1231.580667] 2718 [ 1231.582829] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1231.582834] Call Trace: [ 1231.582857] dump_stack+0x1b2/0x281 [ 1231.582871] warn_alloc.cold+0x96/0x1cc [ 1231.582883] ? zone_watermark_ok_safe+0x220/0x220 [ 1231.582911] __alloc_pages_nodemask+0x2127/0x2720 [ 1231.593166] 2718 [ 1231.596840] ? lock_acquire+0x170/0x3f0 [ 1231.596860] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1231.596880] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1231.596892] ? __mutex_unlock_slowpath+0x75/0x770 [ 1231.608127] ? alloc_pages_current+0x123/0x260 [ 1231.608140] alloc_pages_current+0x155/0x260 [ 1231.608155] ion_page_pool_alloc+0x118/0x1b0 [ 1231.608166] ion_system_heap_allocate+0x133/0x8c0 [ 1231.620171] Node 0 [ 1231.626340] ? ion_alloc+0x187/0x810 [ 1231.626353] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1231.626364] ? ion_system_contig_heap_create+0x130/0x130 [ 1231.626374] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1231.626385] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1231.626394] ion_alloc+0x204/0x810 [ 1231.626406] ? ion_dma_buf_release+0x40/0x40 [ 1231.626418] ? __might_fault+0x177/0x1b0 [ 1231.643901] DMA32 free:792944kB min:36200kB low:45248kB high:54296kB active_anon:50468kB inactive_anon:173360kB active_file:7804kB inactive_file:18392kB unevictable:0kB writepending:236kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:7072kB pagetables:2628kB bounce:0kB free_pcp:828kB local_pcp:0kB free_cma:0kB [ 1231.648273] ion_ioctl+0xea/0x1f0 [ 1231.648287] ? ion_query_heaps+0x360/0x360 [ 1231.648299] ? ion_query_heaps+0x360/0x360 [ 1231.648312] do_vfs_ioctl+0x75a/0xff0 [ 1231.655735] lowmem_reserve[]: [ 1231.662858] ? ioctl_preallocate+0x1a0/0x1a0 [ 1231.662870] ? lock_downgrade+0x740/0x740 [ 1231.662884] ? __fget+0x225/0x360 [ 1231.662893] ? do_vfs_ioctl+0xff0/0xff0 [ 1231.662905] ? security_file_ioctl+0x83/0xb0 [ 1231.662914] SyS_ioctl+0x7f/0xb0 [ 1231.662921] ? do_vfs_ioctl+0xff0/0xff0 [ 1231.662934] do_syscall_64+0x1d5/0x640 [ 1231.670959] 0 [ 1231.672883] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1231.672893] RIP: 0033:0x466459 [ 1231.672898] RSP: 002b:00007f68e77c2188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1231.672908] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1231.672914] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000005 [ 1231.672919] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 13:38:08 executing program 4 (fault-call:0 fault-nth:2): semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f00000000c0)=""/89) [ 1231.672923] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1231.672928] R13: 00007ffed7d489bf R14: 00007f68e77c2300 R15: 0000000000022000 [ 1231.916607] 0 0 0 0 [ 1231.919018] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1231.961519] FAULT_INJECTION: forcing a failure. [ 1231.961519] name failslab, interval 1, probability 0, space 0, times 0 [ 1231.973753] CPU: 1 PID: 28291 Comm: syz-executor.4 Not tainted 4.14.230-syzkaller #0 [ 1231.981668] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1231.991037] Call Trace: [ 1231.993646] dump_stack+0x1b2/0x281 [ 1231.997292] should_fail.cold+0x10a/0x149 [ 1232.001465] should_failslab+0xd6/0x130 [ 1232.005465] kmem_cache_alloc+0x28e/0x3c0 [ 1232.009631] __khugepaged_enter+0x32/0x330 [ 1232.013891] do_huge_pmd_anonymous_page+0xd61/0x1700 [ 1232.019016] ? prep_transhuge_page+0xa0/0xa0 [ 1232.023438] __handle_mm_fault+0x2ac4/0x4620 [ 1232.027901] ? trace_hardirqs_on+0x10/0x10 [ 1232.032181] ? vm_insert_page+0x7c0/0x7c0 [ 1232.036367] ? mark_held_locks+0xa6/0xf0 [ 1232.040437] handle_mm_fault+0x455/0x9c0 [ 1232.044510] __do_page_fault+0x549/0xad0 [ 1232.048600] ? spurious_fault+0x640/0x640 [ 1232.052757] ? do_page_fault+0x60/0x500 [ 1232.056744] page_fault+0x25/0x50 [ 1232.060217] RIP: 0010:copy_user_enhanced_fast_string+0xe/0x20 [ 1232.066101] RSP: 0018:ffff88802beafdc8 EFLAGS: 00010206 [ 1232.071467] RAX: ffffed10057d5fd4 RBX: 0000000000000068 RCX: 0000000000000068 [ 1232.078743] RDX: 0000000000000068 RSI: ffff88802beafe38 RDI: 00000000200000c0 [ 1232.086053] RBP: ffff88802beafe38 R08: 0000000000000000 R09: ffffed10057d5fd3 [ 1232.093338] R10: ffff88802beafe9f R11: ffff888096f9c2c0 R12: 00000000200000c0 [ 1232.100613] R13: 00007ffffffff000 R14: 0000000020000128 R15: ffff888094576240 [ 1232.107920] _copy_to_user+0xaa/0xd0 [ 1232.111641] SyS_semctl+0x164/0x220 [ 1232.115267] ? SyS_semget+0x170/0x170 [ 1232.119103] ? __do_page_fault+0x159/0xad0 [ 1232.123338] ? do_syscall_64+0x4c/0x640 [ 1232.127312] ? SyS_semget+0x170/0x170 [ 1232.131117] do_syscall_64+0x1d5/0x640 [ 1232.135016] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1232.140213] RIP: 0033:0x466459 [ 1232.143407] RSP: 002b:00007fee1a099188 EFLAGS: 00000246 ORIG_RAX: 0000000000000042 [ 1232.151121] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1232.158395] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 1232.165709] RBP: 00007fee1a0991d0 R08: 0000000000000000 R09: 0000000000000000 [ 1232.172995] R10: 00000000200000c0 R11: 0000000000000246 R12: 0000000000000001 [ 1232.180279] R13: 00007ffe6e91304f R14: 00007fee1a099300 R15: 0000000000022000 [ 1232.196210] lowmem_reserve[]: 0 0 0 0 0 [ 1232.203188] Bluetooth: hci2 command 0x0419 tx timeout [ 1232.208087] Node 1 Normal free:335752kB min:53696kB low:67120kB high:80544kB active_anon:844kB inactive_anon:56772kB active_file:464kB inactive_file:2056kB unevictable:0kB writepending:148kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:352kB pagetables:380kB bounce:0kB free_pcp:712kB local_pcp:0kB free_cma:0kB [ 1232.210517] Bluetooth: hci1 command 0x0419 tx timeout [ 1232.253704] Mem-Info: [ 1232.256245] active_anon:12875 inactive_anon:57533 isolated_anon:0 [ 1232.256245] active_file:2069 inactive_file:5112 isolated_file:0 [ 1232.256245] unevictable:0 dirty:98 writeback:0 unstable:0 [ 1232.256245] slab_reclaimable:12078 slab_unreclaimable:111611 [ 1232.256245] mapped:57251 shmem:58128 pagetables:816 bounce:0 [ 1232.256245] free:290674 free_pcp:478 free_cma:0 [ 1232.292971] lowmem_reserve[]: 0 0 0 0 0 [ 1232.297082] Node 0 DMA: 73*4kB (UE) 66*8kB (U) 28*16kB (U) 7*32kB (UE) 1*64kB (E) 3*128kB (UE) 2*256kB (UE) 1*512kB (E) 2*1024kB (UE) 1*2048kB (M) 1*4096kB (M) = 11156kB [ 1232.313980] Node 0 DMA32: 10361*4kB (UMEH) 18950*8kB (UMEH) 17995*16kB (UH) 10303*32kB (UEH) 7*64kB (H) 3*128kB (H) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 811492kB [ 1232.329588] Node 0 active_anon:50656kB inactive_anon:173360kB active_file:7812kB inactive_file:18392kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:158392kB dirty:244kB writeback:0kB shmem:175332kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1232.359139] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1232.375095] Node 1 Normal: 818*4kB (UM) 1200*8kB (UM) 1036*16kB (UM) 1158*32kB (U) 1038*64kB (U) 891*128kB (U) 230*256kB (U) 83*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 348360kB [ 1232.392627] Node 1 active_anon:844kB inactive_anon:56772kB active_file:464kB inactive_file:2056kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:70612kB dirty:148kB writeback:0kB shmem:57180kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1232.425024] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1232.434736] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1232.450248] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1232.460557] Node 0 DMA free:11156kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1232.490650] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1232.500076] 65163 total pagecache pages [ 1232.507757] 0 pages in swap cache [ 1232.511305] Swap cache stats: add 0, delete 0, find 0/0 [ 1232.517748] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1232.526781] Free swap = 0kB [ 1232.529895] Node 0 DMA32 free:774584kB min:36200kB low:45248kB high:54296kB active_anon:50656kB inactive_anon:173360kB active_file:7812kB inactive_file:18392kB unevictable:0kB writepending:244kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:7168kB pagetables:2884kB bounce:0kB free_pcp:616kB local_pcp:584kB free_cma:0kB [ 1232.564675] Total swap = 0kB [ 1232.567811] 2097051 pages RAM [ 1232.570994] 0 pages HighMem/MovableOnly [ 1232.578892] 363848 pages reserved [ 1232.582460] 0 pages cma reserved [ 1232.599119] lowmem_reserve[]: 0 0 0 0 0 [ 1232.617589] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1232.675870] lowmem_reserve[]: 0 0 0 0 0 [ 1232.679997] Node 1 Normal free:357256kB min:53696kB low:67120kB high:80544kB active_anon:844kB inactive_anon:56772kB active_file:464kB inactive_file:2056kB unevictable:0kB writepending:148kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:352kB pagetables:380kB bounce:0kB free_pcp:712kB local_pcp:0kB free_cma:0kB [ 1232.774744] lowmem_reserve[]: 0 0 0 0 0 [ 1232.778829] Node 0 DMA: 73*4kB (UE) 66*8kB (U) 28*16kB (U) 7*32kB (UE) 1*64kB (E) 3*128kB (UE) 2*256kB (UE) 1*512kB (E) 2*1024kB (UE) 1*2048kB (M) 1*4096kB (M) = 11156kB [ 1232.799256] Node 0 DMA32: 179*4kB (UMEH) 1239*8kB (UEH) 17993*16kB (UH) 10310*32kB (UEH) 7*64kB (H) 3*128kB (H) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 629268kB [ 1232.837444] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1232.875860] Node 1 Normal: 818*4kB (UM) 1200*8kB (UM) 1036*16kB (UM) 1158*32kB (U) 0*64kB 735*128kB (U) 256*256kB (U) 84*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 269128kB [ 1232.907780] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1232.921142] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1232.955960] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1232.965387] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1232.992929] 65163 total pagecache pages [ 1232.996959] 0 pages in swap cache [ 1233.000449] Swap cache stats: add 0, delete 0, find 0/0 [ 1233.021575] Free swap = 0kB [ 1233.036927] Total swap = 0kB [ 1233.040010] 2097051 pages RAM [ 1233.050112] syz-executor.2: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1233.054473] 0 pages HighMem/MovableOnly [ 1233.080039] 363848 pages reserved [ 1233.090862] 0 pages cma reserved [ 1233.093197] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 1233.111574] CPU: 0 PID: 28266 Comm: syz-executor.2 Not tainted 4.14.230-syzkaller #0 [ 1233.119511] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1233.128896] Call Trace: [ 1233.131511] dump_stack+0x1b2/0x281 [ 1233.135157] warn_alloc.cold+0x96/0x1cc [ 1233.139148] ? zone_watermark_ok_safe+0x220/0x220 [ 1233.144043] __alloc_pages_nodemask+0x2127/0x2720 [ 1233.148902] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1233.153937] ? lock_acquire+0x170/0x3f0 [ 1233.157928] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1233.162788] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1233.168254] ? __mutex_unlock_slowpath+0x75/0x770 [ 1233.173110] alloc_pages_current+0x155/0x260 [ 1233.177534] ion_page_pool_alloc+0x118/0x1b0 [ 1233.182043] ion_system_heap_allocate+0x133/0x8c0 [ 1233.186900] ? ion_alloc+0x187/0x810 [ 1233.190625] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1233.196388] ? ion_system_contig_heap_create+0x130/0x130 [ 1233.201848] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1233.206904] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1233.211757] ion_alloc+0x204/0x810 [ 1233.215309] ? ion_dma_buf_release+0x40/0x40 [ 1233.219727] ? __might_fault+0x177/0x1b0 [ 1233.223796] ion_ioctl+0xea/0x1f0 [ 1233.227272] ? ion_query_heaps+0x360/0x360 [ 1233.231517] ? ion_query_heaps+0x360/0x360 [ 1233.235757] do_vfs_ioctl+0x75a/0xff0 [ 1233.239565] ? ioctl_preallocate+0x1a0/0x1a0 [ 1233.244005] ? lock_downgrade+0x740/0x740 [ 1233.248195] ? __fget+0x225/0x360 [ 1233.251654] ? do_vfs_ioctl+0xff0/0xff0 [ 1233.255638] ? security_file_ioctl+0x83/0xb0 [ 1233.260078] SyS_ioctl+0x7f/0xb0 [ 1233.263451] ? do_vfs_ioctl+0xff0/0xff0 [ 1233.267453] do_syscall_64+0x1d5/0x640 [ 1233.271352] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1233.276564] RIP: 0033:0x466459 [ 1233.279755] RSP: 002b:00007fab483b9188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1233.287472] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1233.294749] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000005 [ 1233.302027] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1233.309304] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1233.316603] R13: 00007ffc9746ac7f R14: 00007fab483b9300 R15: 0000000000022000 [ 1233.402414] warn_alloc_show_mem: 1 callbacks suppressed [ 1233.402418] Mem-Info: [ 1233.419934] active_anon:12855 inactive_anon:57533 isolated_anon:0 [ 1233.419934] active_file:2229 inactive_file:4222 isolated_file:20 [ 1233.419934] unevictable:0 dirty:23 writeback:0 unstable:0 [ 1233.419934] slab_reclaimable:12078 slab_unreclaimable:111793 [ 1233.419934] mapped:56781 shmem:58128 pagetables:770 bounce:0 [ 1233.419934] free:41049 free_pcp:237 free_cma:0 [ 1233.562958] Node 0 active_anon:50552kB inactive_anon:173360kB active_file:6176kB inactive_file:6032kB unevictable:0kB isolated(anon):0kB isolated(file):128kB mapped:151168kB dirty:44kB writeback:0kB shmem:175332kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1233.622991] Node 1 active_anon:868kB inactive_anon:56772kB active_file:8kB inactive_file:88kB unevictable:0kB isolated(anon):0kB isolated(file):80kB mapped:68856kB dirty:48kB writeback:0kB shmem:57180kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1233.679063] Node 0 DMA free:11064kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1233.732365] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1233.738237] Node 0 DMA32 free:36896kB min:36200kB low:45248kB high:54296kB active_anon:50552kB inactive_anon:173360kB active_file:604kB inactive_file:724kB unevictable:0kB writepending:0kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:7104kB pagetables:2700kB bounce:0kB free_pcp:804kB local_pcp:684kB free_cma:0kB [ 1233.791014] lowmem_reserve[]: 0 0 0 0 0 [ 1233.800927] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1233.830995] lowmem_reserve[]: 0 0 0 0 0 [ 1233.835081] Node 1 Normal free:53568kB min:53696kB low:67120kB high:80544kB active_anon:868kB inactive_anon:56772kB active_file:108kB inactive_file:88kB unevictable:0kB writepending:148kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:352kB pagetables:380kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1233.866965] lowmem_reserve[]: 0 0 0 0 0 [ 1233.870972] Node 0 DMA: 66*4kB (UE) 66*8kB (U) 28*16kB (U) 7*32kB (UE) 2*64kB (UE) 2*128kB (UE) 2*256kB (UE) 1*512kB (E) 2*1024kB (UE) 1*2048kB (M) 1*4096kB (M) = 11064kB [ 1233.908007] Node 0 DMA32: 682*4kB (UMEH) 171*8kB (UMEH) 72*16kB (UMH) 867*32kB (UMEH) 37*64kB (UMH) 9*128kB (UH) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36512kB [ 1233.931437] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1233.942299] Node 1 Normal: 39*4kB (UM) 7*8kB (UM) 1026*16kB (UM) 1166*32kB (UM) 1*64kB (U) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 54004kB [ 1233.961539] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1233.970564] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1233.985363] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1233.996067] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1234.009590] 58167 total pagecache pages [ 1234.018124] 0 pages in swap cache [ 1234.021598] Swap cache stats: add 0, delete 0, find 0/0 [ 1234.039456] Free swap = 0kB [ 1234.042528] Total swap = 0kB [ 1234.048860] 2097051 pages RAM [ 1234.051989] 0 pages HighMem/MovableOnly [ 1234.072963] 363848 pages reserved [ 1234.076460] 0 pages cma reserved [ 1234.081668] oom_reaper: reaped process 28272 (syz-executor.0), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1234.140150] oom_reaper: reaped process 28266 (syz-executor.2), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1234.175645] systemd invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1234.211088] systemd cpuset=/ mems_allowed=0-1 [ 1234.237894] CPU: 0 PID: 1 Comm: systemd Not tainted 4.14.230-syzkaller #0 [ 1234.244952] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1234.254580] Call Trace: [ 1234.257206] dump_stack+0x1b2/0x281 [ 1234.260845] dump_header+0x178/0x82f [ 1234.264580] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1234.269702] ? ___ratelimit+0x2cd/0x530 [ 1234.273681] oom_kill_process.cold+0x10/0xa40 [ 1234.278189] ? lock_downgrade+0x740/0x740 [ 1234.282336] out_of_memory+0x2dc/0x1190 [ 1234.286318] ? oom_killer_disable+0x1c0/0x1c0 [ 1234.290927] ? mutex_trylock+0x152/0x1a0 [ 1234.295019] __alloc_pages_nodemask+0x23e1/0x2720 [ 1234.299923] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1234.304808] alloc_pages_current+0x155/0x260 [ 1234.309269] filemap_fault+0x11a1/0x1ad0 [ 1234.313354] ext4_filemap_fault+0x84/0xb0 [ 1234.317530] __do_fault+0xfa/0x380 [ 1234.321073] __handle_mm_fault+0x2497/0x4620 [ 1234.325483] ? vm_insert_page+0x7c0/0x7c0 [ 1234.329641] ? mark_held_locks+0xa6/0xf0 [ 1234.333708] ? sync_mm_rss+0xf2/0x160 [ 1234.337511] handle_mm_fault+0x455/0x9c0 [ 1234.341588] __do_page_fault+0x549/0xad0 [ 1234.345692] ? spurious_fault+0x640/0x640 [ 1234.349860] ? do_page_fault+0x60/0x500 [ 1234.353843] ? page_fault+0x2f/0x50 [ 1234.357502] page_fault+0x45/0x50 [ 1234.361007] RIP: 0001:0xffffffffffffffff [ 1234.365068] RSP: acecf50:00007ffd70260220 EFLAGS: 7ffd7025ff70 [ 1234.376031] Mem-Info: [ 1234.384908] syz-executor.2: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1234.388662] active_anon:12937 inactive_anon:57533 isolated_anon:0 [ 1234.388662] active_file:11 inactive_file:13 isolated_file:0 [ 1234.388662] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1234.388662] slab_reclaimable:12075 slab_unreclaimable:111055 [ 1234.388662] mapped:52799 shmem:58128 pagetables:770 bounce:0 [ 1234.388662] free:14320 free_pcp:0 free_cma:0 [ 1234.396859] syz-executor.0: [ 1234.440558] Node 0 active_anon:50880kB inactive_anon:173360kB active_file:40kB inactive_file:48kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:142368kB dirty:0kB writeback:0kB shmem:175332kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1234.442529] syz-executor.2 cpuset= [ 1234.446167] Node 1 active_anon:868kB inactive_anon:56772kB active_file:4kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:68828kB dirty:0kB writeback:0kB shmem:57180kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1234.488135] page allocation failure: order:0 [ 1234.512172] Node 0 [ 1234.516290] / [ 1234.516675] DMA free:10964kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1234.518832] mems_allowed=0-1 [ 1234.518894] CPU: 1 PID: 28266 Comm: syz-executor.2 Not tainted 4.14.230-syzkaller #0 [ 1234.520539] lowmem_reserve[]: [ 1234.546916] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1234.546922] Call Trace: [ 1234.546945] dump_stack+0x1b2/0x281 [ 1234.546959] warn_alloc.cold+0x96/0x1cc [ 1234.546970] ? zone_watermark_ok_safe+0x220/0x220 [ 1234.546981] ? usleep_range+0x130/0x130 [ 1234.546989] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1234.547000] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1234.547009] ? run_timer_softirq+0x5a0/0x5a0 [ 1234.547025] __alloc_pages_nodemask+0x2127/0x2720 [ 1234.547040] ? lock_acquire+0x170/0x3f0 [ 1234.547055] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1234.547064] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1234.547079] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1234.547098] alloc_pages_current+0x155/0x260 [ 1234.560447] 0 [ 1234.561159] ion_page_pool_alloc+0x118/0x1b0 [ 1234.570613] 2717 [ 1234.573122] ion_system_heap_allocate+0x133/0x8c0 [ 1234.573133] ? ion_alloc+0x187/0x810 [ 1234.573144] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1234.573153] ? ion_system_contig_heap_create+0x130/0x130 [ 1234.573163] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1234.573176] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1234.573186] ion_alloc+0x204/0x810 [ 1234.573199] ? ion_dma_buf_release+0x40/0x40 [ 1234.586365] 2718 [ 1234.589618] ? __might_fault+0x177/0x1b0 [ 1234.597349] 2718 [ 1234.599716] ion_ioctl+0xea/0x1f0 [ 1234.611300] 2718 [ 1234.612919] ? ion_query_heaps+0x360/0x360 [ 1234.612932] ? ion_query_heaps+0x360/0x360 [ 1234.612943] do_vfs_ioctl+0x75a/0xff0 [ 1234.612954] ? ioctl_preallocate+0x1a0/0x1a0 [ 1234.612964] ? lock_downgrade+0x740/0x740 [ 1234.612979] ? __fget+0x225/0x360 [ 1234.622306] ? do_vfs_ioctl+0xff0/0xff0 [ 1234.636768] Node 0 [ 1234.638330] ? security_file_ioctl+0x83/0xb0 [ 1234.640407] DMA32 free:19720kB min:36200kB low:45248kB high:54296kB active_anon:50880kB inactive_anon:173360kB active_file:140kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:7104kB pagetables:2700kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1234.645221] SyS_ioctl+0x7f/0xb0 [ 1234.645231] ? do_vfs_ioctl+0xff0/0xff0 [ 1234.645242] do_syscall_64+0x1d5/0x640 [ 1234.645257] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1234.645265] RIP: 0033:0x466459 [ 1234.645270] RSP: 002b:00007fab483b9188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1234.645279] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1234.645284] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000005 [ 1234.645289] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1234.645294] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1234.645299] R13: 00007ffc9746ac7f R14: 00007fab483b9300 R15: 0000000000022000 [ 1234.660288] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1234.675001] lowmem_reserve[]: [ 1234.691251] (null) [ 1234.699905] 0 [ 1234.705009] syz-executor.0 cpuset= [ 1234.708766] 0 [ 1234.723738] / [ 1234.735892] 0 [ 1234.764495] mems_allowed=0-1 [ 1234.781328] 0 [ 1234.790050] CPU: 1 PID: 28272 Comm: syz-executor.0 Not tainted 4.14.230-syzkaller #0 [ 1234.790057] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1234.790061] Call Trace: [ 1234.790083] dump_stack+0x1b2/0x281 [ 1234.790097] warn_alloc.cold+0x96/0x1cc [ 1234.811669] 0 [ 1234.811896] ? zone_watermark_ok_safe+0x220/0x220 [ 1234.836813] ? usleep_range+0x130/0x130 [ 1234.838591] Node 0 [ 1234.840294] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1234.842083] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1234.845161] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1234.845172] ? run_timer_softirq+0x5a0/0x5a0 [ 1234.845189] __alloc_pages_nodemask+0x2127/0x2720 [ 1234.845206] ? lock_acquire+0x170/0x3f0 [ 1234.845220] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1234.845231] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1234.845247] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1234.845263] ? policy_node+0xb3/0x110 [ 1234.845274] alloc_pages_current+0x155/0x260 [ 1234.861598] lowmem_reserve[]: [ 1234.864298] ion_page_pool_alloc+0x118/0x1b0 [ 1234.864309] ion_system_heap_allocate+0x133/0x8c0 [ 1234.864319] ? ion_alloc+0x187/0x810 [ 1234.864330] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1234.864339] ? ion_system_contig_heap_create+0x130/0x130 [ 1234.864352] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1234.869459] 0 [ 1234.870546] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1234.888969] 0 [ 1234.892383] ion_alloc+0x204/0x810 [ 1234.932226] 0 [ 1234.935581] ? ion_dma_buf_release+0x40/0x40 [ 1234.935595] ? __might_fault+0x177/0x1b0 [ 1234.935606] ion_ioctl+0xea/0x1f0 [ 1234.935614] ? ion_query_heaps+0x360/0x360 [ 1234.935624] ? ion_query_heaps+0x360/0x360 [ 1234.935635] do_vfs_ioctl+0x75a/0xff0 [ 1234.935645] ? ioctl_preallocate+0x1a0/0x1a0 [ 1234.935656] ? lock_downgrade+0x740/0x740 [ 1234.935668] ? __fget+0x225/0x360 [ 1234.935679] ? do_vfs_ioctl+0xff0/0xff0 [ 1234.953742] 0 [ 1234.954249] ? security_file_ioctl+0x83/0xb0 [ 1234.954262] SyS_ioctl+0x7f/0xb0 [ 1234.958753] 0 [ 1234.961861] ? do_vfs_ioctl+0xff0/0xff0 [ 1234.980249] do_syscall_64+0x1d5/0x640 [ 1234.985753] Node 1 [ 1234.990708] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1234.992492] Normal free:26596kB min:53696kB low:67120kB high:80544kB active_anon:868kB inactive_anon:56772kB active_file:4kB inactive_file:4kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:352kB pagetables:380kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1234.997308] RIP: 0033:0x466459 [ 1234.997313] RSP: 002b:00007f141b2c2188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1234.997322] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1234.997327] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000005 [ 1234.997332] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1234.997337] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1234.997341] R13: 00007fff5a5b1ccf R14: 00007f141b2c2300 R15: 0000000000022000 [ 1235.009769] Mem-Info: [ 1235.042707] lowmem_reserve[]: [ 1235.056382] active_anon:12937 inactive_anon:57533 isolated_anon:0 [ 1235.056382] active_file:24 inactive_file:1 isolated_file:0 [ 1235.056382] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1235.056382] slab_reclaimable:12073 slab_unreclaimable:111005 [ 1235.056382] mapped:52799 shmem:58128 pagetables:770 bounce:0 [ 1235.056382] free:14376 free_pcp:28 free_cma:0 [ 1235.072662] 0 [ 1235.080157] Node 0 active_anon:50880kB inactive_anon:173360kB active_file:92kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:142368kB dirty:0kB writeback:0kB shmem:175332kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1235.116116] 0 [ 1235.132516] Node 1 active_anon:848kB inactive_anon:56772kB active_file:4kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:68828kB dirty:0kB writeback:0kB shmem:57180kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1235.143661] 0 [ 1235.162085] Node 0 [ 1235.198225] 0 [ 1235.242928] DMA free:10964kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1235.288677] 0 [ 1235.290613] Node 0 DMA: 41*4kB (UE) 66*8kB (U) 28*16kB (U) 7*32kB (UE) 3*64kB (UE) 2*128kB (UE) 2*256kB (UE) 1*512kB (E) 2*1024kB (UE) 1*2048kB (M) 1*4096kB (M) = 11028kB [ 1235.346759] Node 0 DMA32: 308*4kB (E) 17*8kB (UME) 44*16kB (UM) 109*32kB (UME) 618*64kB (UM) 81*128kB (U) 6*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 57016kB [ 1235.384528] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1235.403466] Node 0 DMA32 free:45144kB min:36200kB low:45248kB high:54296kB active_anon:50796kB inactive_anon:173360kB active_file:152kB inactive_file:3852kB unevictable:0kB writepending:0kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:7104kB pagetables:2700kB bounce:0kB free_pcp:444kB local_pcp:264kB free_cma:0kB [ 1235.412582] Node 0 [ 1235.438434] lowmem_reserve[]: [ 1235.438733] Normal: [ 1235.453030] 0 0 0 0 0 [ 1235.457922] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1235.470405] 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1235.511136] IPVS: ftp: loaded support on port[0] = 21 [ 1235.516311] Node 1 Normal: 1*4kB (U) 0*8kB 0*16kB 1*32kB (U) 1046*64kB (UM) 205*128kB (UM) 111*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 121636kB [ 1235.540924] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1235.583215] lowmem_reserve[]: 0 0 0 0 0 [ 1235.587282] Node 1 Normal free:110660kB min:53696kB low:67120kB high:80544kB active_anon:848kB inactive_anon:56772kB active_file:204kB inactive_file:1524kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:416kB pagetables:380kB bounce:0kB free_pcp:352kB local_pcp:112kB free_cma:0kB [ 1235.602971] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1235.723318] lowmem_reserve[]: 0 0 0 0 0 [ 1235.727362] Node 0 DMA: 41*4kB (UE) 66*8kB (U) 28*16kB (U) 7*32kB (UE) 3*64kB (UE) 2*128kB (UE) 2*256kB (UE) 1*512kB (E) 2*1024kB (UE) 1*2048kB (M) 1*4096kB (M) = 11028kB [ 1235.741453] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1235.810400] Node 0 DMA32: 678*4kB (UME) 147*8kB (UME) 44*16kB (UME) 16*32kB (ME) 49*64kB (UM) 81*128kB (U) 6*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 20144kB [ 1235.820904] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1235.851300] 58195 total pagecache pages [ 1235.852066] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1235.863637] 0 pages in swap cache [ 1235.869613] Node 1 [ 1235.871308] Swap cache stats: add 0, delete 0, find 0/0 [ 1235.871310] Normal: 60*4kB (UM) 21*8kB (UM) 13*16kB (UM) 5*32kB (UM) 2*64kB (U) 1*128kB (M) 103*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 27400kB [ 1235.884625] Free swap = 0kB [ 1235.892821] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1235.899220] Total swap = 0kB [ 1235.904622] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1235.904632] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1235.907641] 2097051 pages RAM [ 1235.916291] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1235.916296] 58195 total pagecache pages [ 1235.916306] 0 pages in swap cache [ 1235.916312] Swap cache stats: add 0, delete 0, find 0/0 [ 1235.916315] Free swap = 0kB [ 1235.916319] Total swap = 0kB [ 1235.916326] 2097051 pages RAM [ 1235.916329] 0 pages HighMem/MovableOnly [ 1235.916332] 363848 pages reserved [ 1235.916335] 0 pages cma reserved [ 1235.972914] 0 pages HighMem/MovableOnly [ 1235.976916] 363848 pages reserved [ 1235.980361] 0 pages cma reserved [ 1236.022922] Out of memory: Kill process 28264 (syz-executor.3) score 1004 or sacrifice child [ 1236.031579] Killed process 28269 (syz-executor.3) total-vm:93252kB, anon-rss:156kB, file-rss:34820kB, shmem-rss:0kB [ 1236.149977] oom_reaper: reaped process 28269 (syz-executor.3), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1236.288333] kworker/u4:7 invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=0 [ 1236.320047] syz-executor.0: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1236.331675] kworker/u4:7 cpuset=/ mems_allowed=0-1 [ 1236.342443] CPU: 0 PID: 10994 Comm: kworker/u4:7 Not tainted 4.14.230-syzkaller #0 [ 1236.346715] syz-executor.2: [ 1236.350168] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1236.350179] page allocation failure: order:4 [ 1236.353185] Workqueue: events_unbound call_usermodehelper_exec_work [ 1236.353192] Call Trace: [ 1236.353210] dump_stack+0x1b2/0x281 [ 1236.353222] dump_header+0x178/0x82f [ 1236.353235] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1236.380448] syz-executor.0 cpuset= [ 1236.383307] ? ___ratelimit+0x2cd/0x530 [ 1236.383320] oom_kill_process.cold+0x10/0xa40 [ 1236.383334] ? lock_downgrade+0x740/0x740 [ 1236.383348] out_of_memory+0x2dc/0x1190 [ 1236.388438] / [ 1236.391978] ? oom_killer_disable+0x1c0/0x1c0 [ 1236.409163] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1236.410233] ? mutex_trylock+0x152/0x1a0 [ 1236.421817] (null) [ 1236.421843] __alloc_pages_nodemask+0x23e1/0x2720 [ 1236.428503] mems_allowed=0-1 [ 1236.432878] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1236.432899] ? mark_held_locks+0xa6/0xf0 [ 1236.432912] ? cache_grow_begin+0x3f/0x700 [ 1236.436623] syz-executor.2 cpuset= [ 1236.440847] cache_grow_begin+0x91/0x700 [ 1236.456689] fallback_alloc+0x207/0x2c0 [ 1236.460665] kmem_cache_alloc_node+0xe3/0x410 [ 1236.462907] / mems_allowed=0-1 [ 1236.465162] copy_process.part.0+0x17d3/0x71c0 [ 1236.465175] ? __lock_acquire+0x5fc/0x3f20 [ 1236.477143] ? cpuacct_charge+0x1ca/0x350 [ 1236.481375] ? static_obj+0x50/0x50 [ 1236.484998] ? lock_downgrade+0x740/0x740 [ 1236.489141] ? call_usermodehelper_exec_work+0x2a0/0x2a0 [ 1236.494586] ? __cleanup_sighand+0x40/0x40 [ 1236.498822] ? call_usermodehelper_exec_work+0x2a0/0x2a0 [ 1236.504269] _do_fork+0x184/0xc80 [ 1236.507721] ? fork_idle+0x270/0x270 [ 1236.511427] ? lock_downgrade+0x740/0x740 [ 1236.515571] ? lock_downgrade+0x740/0x740 [ 1236.519712] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1236.524732] ? process_one_work+0x6c4/0x14a0 [ 1236.529141] ? call_usermodehelper_exec_work+0x2a0/0x2a0 [ 1236.534790] kernel_thread+0x2f/0x40 [ 1236.538510] call_usermodehelper_exec_work+0x1ac/0x2a0 [ 1236.543784] ? call_usermodehelper+0x80/0x80 [ 1236.548188] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1236.553637] process_one_work+0x793/0x14a0 [ 1236.557868] ? work_busy+0x320/0x320 [ 1236.561573] ? worker_thread+0x158/0xff0 [ 1236.565628] ? _raw_spin_unlock_irq+0x24/0x80 [ 1236.570116] worker_thread+0x5cc/0xff0 [ 1236.574003] ? rescuer_thread+0xc80/0xc80 [ 1236.578140] kthread+0x30d/0x420 [ 1236.581501] ? kthread_create_on_node+0xd0/0xd0 [ 1236.586161] ret_from_fork+0x24/0x30 [ 1236.589877] CPU: 1 PID: 28266 Comm: syz-executor.2 Not tainted 4.14.230-syzkaller #0 [ 1236.597877] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1236.607237] Call Trace: [ 1236.609834] dump_stack+0x1b2/0x281 [ 1236.613469] warn_alloc.cold+0x96/0x1cc [ 1236.617451] ? zone_watermark_ok_safe+0x220/0x220 [ 1236.622315] __alloc_pages_nodemask+0x2127/0x2720 [ 1236.627162] ? ___preempt_schedule+0x16/0x18 [ 1236.631585] ? lock_acquire+0x170/0x3f0 [ 1236.635589] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1236.640447] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1236.641936] Mem-Info: [ 1236.645901] ? __mutex_unlock_slowpath+0x75/0x770 [ 1236.645912] ? __list_del_entry_valid+0xb3/0xf0 [ 1236.645925] alloc_pages_current+0x155/0x260 [ 1236.645939] ion_page_pool_alloc+0x118/0x1b0 [ 1236.645948] ion_system_heap_allocate+0x133/0x8c0 [ 1236.645966] ? _raw_spin_unlock+0x29/0x40 [ 1236.645975] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1236.645984] ? ion_system_contig_heap_create+0x130/0x130 [ 1236.645994] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1236.646005] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1236.646016] ion_alloc+0x27a/0x810 [ 1236.681719] active_anon:12940 inactive_anon:57534 isolated_anon:0 [ 1236.681719] active_file:43 inactive_file:0 isolated_file:0 [ 1236.681719] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1236.681719] slab_reclaimable:12061 slab_unreclaimable:111843 [ 1236.681719] mapped:52834 shmem:58130 pagetables:762 bounce:0 [ 1236.681719] free:13922 free_pcp:0 free_cma:0 [ 1236.686049] ? ion_dma_buf_release+0x40/0x40 [ 1236.686063] ? __might_fault+0x177/0x1b0 [ 1236.686074] ion_ioctl+0xea/0x1f0 [ 1236.686082] ? ion_query_heaps+0x360/0x360 [ 1236.686093] ? ion_query_heaps+0x360/0x360 [ 1236.686103] do_vfs_ioctl+0x75a/0xff0 [ 1236.686115] ? ioctl_preallocate+0x1a0/0x1a0 [ 1236.686124] ? lock_downgrade+0x740/0x740 [ 1236.686138] ? __fget+0x225/0x360 [ 1236.686147] ? do_vfs_ioctl+0xff0/0xff0 [ 1236.686159] ? security_file_ioctl+0x83/0xb0 [ 1236.686169] SyS_ioctl+0x7f/0xb0 [ 1236.686176] ? do_vfs_ioctl+0xff0/0xff0 [ 1236.686187] do_syscall_64+0x1d5/0x640 [ 1236.686204] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1236.722029] Node 0 active_anon:50728kB inactive_anon:173360kB active_file:120kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:142408kB dirty:0kB writeback:0kB shmem:175332kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1236.732552] RIP: 0033:0x466459 [ 1236.732558] RSP: 002b:00007fab483b9188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1236.732567] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1236.732572] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000005 [ 1236.732576] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1236.732580] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1236.732585] R13: 00007ffc9746ac7f R14: 00007fab483b9300 R15: 0000000000022000 [ 1236.737266] syz-executor.3: [ 1236.751098] CPU: 0 PID: 28272 Comm: syz-executor.0 Not tainted 4.14.230-syzkaller #0 [ 1236.774191] warn_alloc_show_mem: 1 callbacks suppressed [ 1236.774195] Mem-Info: [ 1236.777412] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1236.780782] active_anon:12940 inactive_anon:57534 isolated_anon:0 [ 1236.780782] active_file:43 inactive_file:0 isolated_file:0 [ 1236.780782] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1236.780782] slab_reclaimable:12061 slab_unreclaimable:111843 [ 1236.780782] mapped:52834 shmem:58130 pagetables:762 bounce:0 [ 1236.780782] free:13922 free_pcp:0 free_cma:0 [ 1236.784721] Call Trace: [ 1236.784743] dump_stack+0x1b2/0x281 [ 1236.784757] warn_alloc.cold+0x96/0x1cc [ 1236.784769] ? zone_watermark_ok_safe+0x220/0x220 [ 1236.784791] __alloc_pages_nodemask+0x2127/0x2720 [ 1236.788668] page allocation failure: order:0 [ 1236.793833] ? io_schedule_timeout+0x140/0x140 [ 1236.793850] ? lock_acquire+0x170/0x3f0 [ 1236.793866] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1236.821857] Node 0 active_anon:50728kB inactive_anon:173360kB active_file:120kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:142408kB dirty:0kB writeback:0kB shmem:175332kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1236.824981] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1236.824996] ? __mutex_unlock_slowpath+0x75/0x770 [ 1236.832693] Node 1 active_anon:1032kB inactive_anon:56776kB active_file:52kB inactive_file:16kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:68928kB dirty:0kB writeback:0kB shmem:57188kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1236.839947] alloc_pages_current+0x155/0x260 [ 1236.839962] ion_page_pool_alloc+0x118/0x1b0 [ 1236.839973] ion_system_heap_allocate+0x133/0x8c0 [ 1236.839986] ? _raw_spin_unlock+0x29/0x40 [ 1236.847261] Node 0 [ 1236.854499] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1236.854509] ? ion_system_contig_heap_create+0x130/0x130 [ 1236.854523] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1236.861791] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1236.869034] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1236.869046] ion_alloc+0x27a/0x810 [ 1236.869060] ? ion_dma_buf_release+0x40/0x40 [ 1236.872057] (null) [ 1236.879926] ? __might_fault+0x177/0x1b0 [ 1236.879938] ion_ioctl+0xea/0x1f0 [ 1236.879948] ? ion_query_heaps+0x360/0x360 [ 1236.885339] DMA free:10968kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1236.887692] ? ion_query_heaps+0x360/0x360 [ 1236.897149] lowmem_reserve[]: [ 1236.930941] do_vfs_ioctl+0x75a/0xff0 [ 1236.930962] ? ioctl_preallocate+0x1a0/0x1a0 [ 1236.930972] ? lock_downgrade+0x740/0x740 [ 1236.930985] ? __fget+0x225/0x360 [ 1236.931005] ? do_vfs_ioctl+0xff0/0xff0 [ 1236.933643] syz-executor.3 cpuset= [ 1236.937223] ? security_file_ioctl+0x83/0xb0 [ 1236.941167] / [ 1236.945994] SyS_ioctl+0x7f/0xb0 [ 1236.950847] mems_allowed=0-1 [ 1236.955198] ? do_vfs_ioctl+0xff0/0xff0 [ 1236.955211] do_syscall_64+0x1d5/0x640 [ 1236.955226] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1236.972894] 0 [ 1236.996388] RIP: 0033:0x466459 [ 1236.996394] RSP: 002b:00007f141b2c2188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1236.996402] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1236.996407] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000005 [ 1236.996412] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1236.996417] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1236.996427] R13: 00007fff5a5b1ccf R14: 00007f141b2c2300 R15: 0000000000022000 [ 1237.032903] 2717 [ 1237.049014] Node 1 active_anon:1032kB inactive_anon:56776kB active_file:52kB inactive_file:16kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:68928kB dirty:0kB writeback:0kB shmem:57188kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1237.049020] Node 0 DMA free:10968kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1237.049038] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1237.049059] Node 0 DMA32 free:18004kB min:36200kB low:45248kB high:54296kB active_anon:50828kB inactive_anon:173360kB active_file:20kB inactive_file:20kB unevictable:0kB writepending:0kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:7104kB pagetables:2704kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1237.049079] lowmem_reserve[]: 0 0 0 0 0 [ 1237.049099] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1237.049117] lowmem_reserve[]: 0 0 0 0 0 [ 1237.049136] Node 1 Normal free:26716kB min:53696kB low:67120kB high:80544kB active_anon:1032kB inactive_anon:56776kB active_file:60kB inactive_file:40kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:352kB pagetables:344kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1237.049154] lowmem_reserve[]: 0 0 0 0 0 [ 1237.049175] Node 0 DMA: 34*4kB (UE) 62*8kB (U) 28*16kB (U) 7*32kB (UE) 1*64kB (E) 3*128kB (UE) 2*256kB (UE) 1*512kB (E) 2*1024kB (UE) 1*2048kB (M) 1*4096kB (M) = 10968kB [ 1237.049255] Node 0 DMA32: 693*4kB (UME) 193*8kB (UME) 60*16kB (UME) 24*32kB (UME) 6*64kB (M) 77*128kB (U) 7*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18076kB [ 1237.049320] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1237.049368] Node 1 Normal: 176*4kB (UM) 60*8kB (UM) 47*16kB (UM) 32*32kB (UM) 2*64kB (UM) 0*128kB 1*256kB (M) 46*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 26896kB [ 1237.049437] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1237.049444] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1237.049450] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1237.049455] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1237.049470] 58215 total pagecache pages [ 1237.049480] 0 pages in swap cache [ 1237.049486] Swap cache stats: add 0, delete 0, find 0/0 [ 1237.049489] Free swap = 0kB [ 1237.049493] Total swap = 0kB [ 1237.049499] 2097051 pages RAM [ 1237.049502] 0 pages HighMem/MovableOnly [ 1237.049505] 363848 pages reserved [ 1237.049509] 0 pages cma reserved [ 1237.049515] Out of memory: Kill process 28265 (syz-executor.1) score 1004 or sacrifice child [ 1237.049539] Killed process 28271 (syz-executor.1) total-vm:93252kB, anon-rss:156kB, file-rss:34820kB, shmem-rss:0kB [ 1237.075048] systemd-journal invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask= [ 1237.121155] CPU: 1 PID: 28269 Comm: syz-executor.3 Not tainted 4.14.230-syzkaller #0 [ 1237.292538] (null) [ 1237.296837] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1237.296842] Call Trace: [ 1237.296865] dump_stack+0x1b2/0x281 [ 1237.296879] warn_alloc.cold+0x96/0x1cc [ 1237.296892] ? __download_offload_pseudocode+0x8d0/0xbe0 [ 1237.296903] ? zone_watermark_ok_safe+0x220/0x220 [ 1237.296913] ? usleep_range+0x130/0x130 [ 1237.296923] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1237.296935] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1237.296948] ? run_timer_softirq+0x5a0/0x5a0 [ 1237.334570] syz-executor.1: [ 1237.355184] __alloc_pages_nodemask+0x2127/0x2720 [ 1237.355209] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1237.355219] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1237.355235] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1237.355253] alloc_pages_current+0x155/0x260 [ 1237.355265] ion_page_pool_alloc+0x118/0x1b0 [ 1237.355274] ion_system_heap_allocate+0x133/0x8c0 [ 1237.355283] ? ion_alloc+0x187/0x810 [ 1237.355294] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1237.355303] ? ion_system_contig_heap_create+0x130/0x130 [ 1237.355318] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1237.359308] syz-executor.0: [ 1237.387659] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1237.387672] ion_alloc+0x204/0x810 [ 1237.387685] ? ion_dma_buf_release+0x40/0x40 [ 1237.387697] ? __might_fault+0x177/0x1b0 [ 1237.387707] ion_ioctl+0xea/0x1f0 [ 1237.387715] ? ion_query_heaps+0x360/0x360 [ 1237.387726] ? ion_query_heaps+0x360/0x360 [ 1237.387736] do_vfs_ioctl+0x75a/0xff0 [ 1237.387746] ? ioctl_preallocate+0x1a0/0x1a0 [ 1237.387756] ? lock_downgrade+0x740/0x740 [ 1237.387768] ? __fget+0x225/0x360 [ 1237.403637] Bluetooth: hci4 command 0x0409 tx timeout [ 1237.407033] ? do_vfs_ioctl+0xff0/0xff0 [ 1237.427498] page allocation failure: order:0 [ 1237.432454] ? security_file_ioctl+0x83/0xb0 [ 1237.457750] , order=0, oom_score_adj=0 [ 1237.464237] SyS_ioctl+0x7f/0xb0 [ 1237.464248] ? do_vfs_ioctl+0xff0/0xff0 [ 1237.464261] do_syscall_64+0x1d5/0x640 [ 1237.464277] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1237.464285] RIP: 0033:0x466459 [ 1237.464289] RSP: 002b:00007f68e77c2188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1237.464299] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1237.464308] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000005 [ 1237.484087] page allocation failure: order:0 [ 1237.485746] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1237.489187] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1237.494527] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1237.494533] R13: 00007ffed7d489bf R14: 00007f68e77c2300 R15: 0000000000022000 [ 1237.517399] 2718 [ 1237.530375] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1237.554237] 2718 [ 1237.560872] systemd-journal cpuset= [ 1237.585500] 2718 [ 1237.585509] Node 0 DMA32 free:18076kB min:36200kB low:45248kB high:54296kB active_anon:50628kB inactive_anon:173360kB active_file:16kB inactive_file:12kB unevictable:0kB writepending:0kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:7168kB pagetables:2700kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1237.595976] (null) [ 1237.619165] lowmem_reserve[]: [ 1237.627486] / [ 1237.646662] 0 [ 1237.655683] (null) [ 1237.679565] 0 [ 1237.686938] syz-executor.1 cpuset= [ 1237.708520] 0 [ 1237.720175] syz-executor.0 cpuset= [ 1237.740786] 0 [ 1237.747180] mems_allowed=0-1 [ 1237.762504] 0 [ 1237.770978] / [ 1237.791531] / [ 1237.791570] Node 0 [ 1237.798916] CPU: 0 PID: 27351 Comm: systemd-journal Not tainted 4.14.230-syzkaller #0 [ 1237.798921] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1237.798925] Call Trace: [ 1237.798947] dump_stack+0x1b2/0x281 [ 1237.798960] dump_header+0x178/0x82f [ 1237.798971] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1237.798979] ? ___ratelimit+0x2cd/0x530 [ 1237.798989] oom_kill_process.cold+0x10/0xa40 [ 1237.799008] out_of_memory+0xe3e/0x1190 [ 1237.826788] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1237.851840] ? oom_killer_disable+0x1c0/0x1c0 [ 1237.851851] ? mutex_trylock+0x152/0x1a0 [ 1237.851862] __alloc_pages_nodemask+0x23e1/0x2720 [ 1237.851881] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1237.854045] lowmem_reserve[]: [ 1237.857134] alloc_pages_current+0x155/0x260 [ 1237.858810] 0 [ 1237.860607] filemap_fault+0x11a1/0x1ad0 [ 1237.862724] 0 [ 1237.864544] ext4_filemap_fault+0x84/0xb0 [ 1237.864560] __do_fault+0xfa/0x380 [ 1237.864569] __handle_mm_fault+0x2497/0x4620 [ 1237.864580] ? vm_insert_page+0x7c0/0x7c0 [ 1237.868111] 0 [ 1237.869910] ? mark_held_locks+0xa6/0xf0 [ 1237.873458] 0 [ 1237.875258] handle_mm_fault+0x455/0x9c0 [ 1237.878333] 0 [ 1237.880125] __do_page_fault+0x549/0xad0 [ 1237.883511] ? spurious_fault+0x640/0x640 [ 1237.883520] ? do_page_fault+0x60/0x500 [ 1237.883528] ? page_fault+0x2f/0x50 [ 1237.883535] page_fault+0x45/0x50 [ 1237.883544] RIP: c9ac4168:0x564d5ce6d958 [ 1237.885767] Node 1 [ 1237.893710] RSP: 5d11f1e0:0000000000006ad7 EFLAGS: ffffffffffffffff [ 1237.900772] mems_allowed=0-1 [ 1237.915389] Normal free:26772kB min:53696kB low:67120kB high:80544kB active_anon:944kB inactive_anon:56780kB active_file:48kB inactive_file:44kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:384kB pagetables:380kB bounce:0kB free_pcp:120kB local_pcp:0kB free_cma:0kB [ 1237.935822] mems_allowed=0-1 [ 1237.967739] lowmem_reserve[]: [ 1237.986983] CPU: 0 PID: 28271 Comm: syz-executor.1 Not tainted 4.14.230-syzkaller #0 [ 1237.999141] 0 [ 1238.001421] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1238.005595] 0 [ 1238.007350] Call Trace: [ 1238.011389] 0 [ 1238.013190] dump_stack+0x1b2/0x281 [ 1238.013207] warn_alloc.cold+0x96/0x1cc [ 1238.017243] 0 [ 1238.019035] ? zone_watermark_ok_safe+0x220/0x220 [ 1238.023104] 0 [ 1238.027238] ? usleep_range+0x130/0x130 [ 1238.034791] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1238.034804] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1238.034814] ? run_timer_softirq+0x5a0/0x5a0 [ 1238.034831] __alloc_pages_nodemask+0x2127/0x2720 [ 1238.038257] Node 0 [ 1238.042303] ? lock_acquire+0x170/0x3f0 [ 1238.044537] DMA: [ 1238.050994] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1238.054104] 34*4kB [ 1238.081936] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1238.081953] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1238.081966] ? __sanitizer_cov_trace_pc+0x23/0x50 [ 1238.081980] alloc_pages_current+0x155/0x260 [ 1238.085120] (UE) [ 1238.088193] ion_page_pool_alloc+0x118/0x1b0 [ 1238.096097] 62*8kB [ 1238.097873] ion_system_heap_allocate+0x133/0x8c0 [ 1238.107267] warn_alloc_show_mem: 1 callbacks suppressed [ 1238.107271] Mem-Info: [ 1238.109031] ? ion_alloc+0x187/0x810 [ 1238.111603] active_anon:12893 inactive_anon:57535 isolated_anon:0 [ 1238.111603] active_file:16 inactive_file:14 isolated_file:0 [ 1238.111603] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1238.111603] slab_reclaimable:12061 slab_unreclaimable:111877 [ 1238.111603] mapped:52814 shmem:58131 pagetables:770 bounce:0 [ 1238.111603] free:13954 free_pcp:30 free_cma:0 [ 1238.113375] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1238.113385] ? ion_system_contig_heap_create+0x130/0x130 [ 1238.113394] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1238.113409] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1238.117022] (U) [ 1238.120975] ion_alloc+0x204/0x810 [ 1238.122775] 28*16kB [ 1238.127620] ? ion_dma_buf_release+0x40/0x40 [ 1238.127633] ? __might_fault+0x177/0x1b0 [ 1238.127644] ion_ioctl+0xea/0x1f0 [ 1238.127656] ? ion_query_heaps+0x360/0x360 [ 1238.129491] Node 0 active_anon:50628kB inactive_anon:173360kB active_file:16kB inactive_file:12kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:142428kB dirty:0kB writeback:0kB shmem:175332kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1238.133504] ? ion_query_heaps+0x360/0x360 [ 1238.138626] Node 1 active_anon:944kB inactive_anon:56780kB active_file:48kB inactive_file:44kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:68828kB dirty:0kB writeback:0kB shmem:57192kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1238.143618] do_vfs_ioctl+0x75a/0xff0 [ 1238.143631] ? ioctl_preallocate+0x1a0/0x1a0 [ 1238.143641] ? lock_downgrade+0x740/0x740 [ 1238.143654] ? __fget+0x225/0x360 [ 1238.148055] (U) [ 1238.152886] ? do_vfs_ioctl+0xff0/0xff0 [ 1238.152898] ? security_file_ioctl+0x83/0xb0 [ 1238.152908] SyS_ioctl+0x7f/0xb0 [ 1238.152918] ? do_vfs_ioctl+0xff0/0xff0 [ 1238.155151] 7*32kB (UE) [ 1238.159127] do_syscall_64+0x1d5/0x640 [ 1238.161164] 1*64kB [ 1238.165996] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1238.166005] RIP: 0033:0x466459 [ 1238.166009] RSP: 002b:00007feb59368188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1238.166019] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1238.166024] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000005 [ 1238.166032] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1238.168279] Node 0 [ 1238.172739] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1238.178221] (E) [ 1238.183006] R13: 00007ffe56f14bcf R14: 00007feb59368300 R15: 0000000000022000 [ 1238.195324] Mem-Info: [ 1238.220151] DMA free:10968kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1238.257932] active_anon:12893 inactive_anon:57535 isolated_anon:0 [ 1238.257932] active_file:14 inactive_file:16 isolated_file:0 [ 1238.257932] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1238.257932] slab_reclaimable:12061 slab_unreclaimable:111877 [ 1238.257932] mapped:52814 shmem:58131 pagetables:770 bounce:0 [ 1238.257932] free:13954 free_pcp:30 free_cma:0 [ 1238.276401] CPU: 1 PID: 28272 Comm: syz-executor.0 Not tainted 4.14.230-syzkaller #0 [ 1238.291189] Node 0 active_anon:50628kB inactive_anon:173360kB active_file:12kB inactive_file:16kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:142428kB dirty:0kB writeback:0kB shmem:175332kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1238.292006] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1238.331424] Node 1 active_anon:944kB inactive_anon:56780kB active_file:44kB inactive_file:48kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:68828kB dirty:0kB writeback:0kB shmem:57192kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1238.351256] Call Trace: [ 1238.351282] dump_stack+0x1b2/0x281 [ 1238.351295] warn_alloc.cold+0x96/0x1cc [ 1238.351308] ? zone_watermark_ok_safe+0x220/0x220 [ 1238.351317] ? usleep_range+0x130/0x130 [ 1238.351325] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1238.351337] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1238.351347] ? run_timer_softirq+0x5a0/0x5a0 [ 1238.351363] __alloc_pages_nodemask+0x2127/0x2720 [ 1238.351379] ? lock_acquire+0x170/0x3f0 [ 1238.351394] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1238.351407] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1238.389839] Node 0 [ 1238.391362] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1238.394233] DMA free:10968kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1238.398776] alloc_pages_current+0x155/0x260 [ 1238.401936] lowmem_reserve[]: [ 1238.409661] ion_page_pool_alloc+0x118/0x1b0 [ 1238.409672] ion_system_heap_allocate+0x133/0x8c0 [ 1238.409685] ? _raw_spin_unlock+0x29/0x40 [ 1238.409698] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1238.409706] ? ion_system_contig_heap_create+0x130/0x130 [ 1238.409717] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1238.409729] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1238.409748] ion_alloc+0x27a/0x810 [ 1238.409761] ? ion_dma_buf_release+0x40/0x40 [ 1238.409777] ? __might_fault+0x177/0x1b0 [ 1238.409789] ion_ioctl+0xea/0x1f0 [ 1238.482909] 0 [ 1238.511314] ? ion_query_heaps+0x360/0x360 [ 1238.511326] ? ion_query_heaps+0x360/0x360 [ 1238.511337] do_vfs_ioctl+0x75a/0xff0 [ 1238.511348] ? ioctl_preallocate+0x1a0/0x1a0 [ 1238.511357] ? lock_downgrade+0x740/0x740 [ 1238.511369] ? __fget+0x225/0x360 [ 1238.511377] ? do_vfs_ioctl+0xff0/0xff0 [ 1238.511389] ? security_file_ioctl+0x83/0xb0 [ 1238.511399] SyS_ioctl+0x7f/0xb0 [ 1238.511406] ? do_vfs_ioctl+0xff0/0xff0 [ 1238.511417] do_syscall_64+0x1d5/0x640 [ 1238.511443] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1238.576149] lowmem_reserve[]: [ 1238.583606] RIP: 0033:0x466459 [ 1238.583611] RSP: 002b:00007f141b2c2188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1238.583621] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1238.583626] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000005 [ 1238.583631] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1238.583636] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1238.583641] R13: 00007fff5a5b1ccf R14: 00007f141b2c2300 R15: 0000000000022000 [ 1238.606668] 3*128kB [ 1238.624778] 2717 [ 1238.646660] (UE) [ 1238.702953] 0 [ 1238.710810] 2*256kB [ 1238.711856] 2717 [ 1238.717326] (UE) [ 1238.742954] 2718 [ 1238.794746] chnl_net:caif_netlink_parms(): no params data found [ 1238.843838] 2718 [ 1238.850413] 1*512kB [ 1238.852486] 2718 [ 1238.855434] (E) 2*1024kB (UE) 1*2048kB (M) 1*4096kB (M) = 10968kB [ 1238.870908] Node 0 DMA32: 737*4kB (UME) 9396*8kB (UE) 2440*16kB (UE) 15*32kB (UME) 669*64kB (UM) 129*128kB (U) 15*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 180804kB [ 1238.882960] 2718 [ 1238.888469] Node 0 DMA32 free:171452kB min:36200kB low:45248kB high:54296kB active_anon:50628kB inactive_anon:173360kB active_file:12kB inactive_file:3816kB unevictable:0kB writepending:0kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:7136kB pagetables:2700kB bounce:0kB free_pcp:868kB local_pcp:620kB free_cma:0kB [ 1238.894337] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1238.972115] 2718 2718 [ 1238.974730] Node 0 DMA32 free:151032kB min:36200kB low:45248kB high:54296kB active_anon:50728kB inactive_anon:173360kB active_file:12kB inactive_file:5016kB unevictable:0kB writepending:0kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:7168kB pagetables:2848kB bounce:0kB free_pcp:740kB local_pcp:620kB free_cma:0kB [ 1238.985726] Node 1 Normal: 145*4kB (UM) 60*8kB (UM) 47*16kB (UM) 32*32kB (UM) 2*64kB (UM) 1*128kB (U) 22*256kB (UM) 50*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 34324kB [ 1239.033046] lowmem_reserve[]: 0 0 0 0 0 [ 1239.037292] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1239.038794] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1239.073639] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1239.082229] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1239.109986] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1239.112948] lowmem_reserve[]: 0 0 0 0 0 [ 1239.119292] 59627 total pagecache pages [ 1239.122720] Node 0 [ 1239.132319] 0 pages in swap cache [ 1239.133573] lowmem_reserve[]: [ 1239.136271] Swap cache stats: add 0, delete 0, find 0/0 [ 1239.138150] 0 [ 1239.142170] Free swap = 0kB [ 1239.152957] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1239.156853] Total swap = 0kB [ 1239.191553] warn_alloc_show_mem: 1 callbacks suppressed [ 1239.191557] Mem-Info: [ 1239.200619] 2097051 pages RAM [ 1239.202942] 0 0 0 0 [ 1239.206243] Node 1 Normal free:26900kB min:53696kB low:67120kB high:80544kB active_anon:944kB inactive_anon:56780kB active_file:52kB inactive_file:40kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:384kB pagetables:380kB bounce:0kB free_pcp:120kB local_pcp:120kB free_cma:0kB [ 1239.209497] 0 pages HighMem/MovableOnly [ 1239.252500] active_anon:12923 inactive_anon:57535 isolated_anon:0 [ 1239.252500] active_file:115 inactive_file:1446 isolated_file:0 [ 1239.252500] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1239.252500] slab_reclaimable:12055 slab_unreclaimable:112665 [ 1239.252500] mapped:53924 shmem:58131 pagetables:765 bounce:0 [ 1239.252500] free:83505 free_pcp:280 free_cma:0 [ 1239.263508] lowmem_reserve[]: [ 1239.289057] lowmem_reserve[]: [ 1239.316400] 363848 pages reserved [ 1239.322318] 0 0 0 0 0 [ 1239.325651] Node 0 DMA: 45*4kB (UE) 61*8kB (U) 30*16kB (U) 9*32kB (UE) 1*64kB (E) 3*128kB (UE) 2*256kB (UE) 1*512kB (E) 2*1024kB (UE) 1*2048kB (M) 1*4096kB (M) = 11100kB [ 1239.332962] 0 pages cma reserved [ 1239.345010] Node 0 active_anon:50748kB inactive_anon:173360kB active_file:2008kB inactive_file:4844kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:146968kB dirty:0kB writeback:0kB shmem:175332kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1239.366212] 0 0 0 0 0 [ 1239.376828] Node 1 Normal free:47100kB min:53696kB low:67120kB high:80544kB active_anon:944kB inactive_anon:56780kB active_file:52kB inactive_file:40kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:384kB pagetables:380kB bounce:0kB free_pcp:1428kB local_pcp:732kB free_cma:0kB [ 1239.427109] Node 0 DMA32: 1463*4kB (UE) 9673*8kB (UE) 10164*16kB (UE) 3208*32kB (UE) 358*64kB (U) 41*128kB (U) 2*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 377188kB [ 1239.430214] Node 1 active_anon:944kB inactive_anon:56780kB active_file:52kB inactive_file:40kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:68828kB dirty:0kB writeback:0kB shmem:57192kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1239.442628] Node 0 [ 1239.475199] lowmem_reserve[]: [ 1239.483285] Node 0 DMA free:11152kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1239.492998] Bluetooth: hci4 command 0x041b tx timeout [ 1239.521469] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1239.522346] 0 [ 1239.543494] Node 0 DMA32 free:395516kB min:36200kB low:45248kB high:54296kB active_anon:50848kB inactive_anon:173360kB active_file:2108kB inactive_file:5244kB unevictable:0kB writepending:0kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:7168kB pagetables:2828kB bounce:0kB free_pcp:1380kB local_pcp:656kB free_cma:0kB [ 1239.569419] 0 [ 1239.579835] bridge0: port 1(bridge_slave_0) entered blocking state [ 1239.601135] 0 0 0 [ 1239.603007] lowmem_reserve[]: 0 0 0 0 0 [ 1239.607293] Node 0 DMA: [ 1239.607319] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1239.609986] 53*4kB [ 1239.652983] Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1239.670075] bridge0: port 1(bridge_slave_0) entered disabled state [ 1239.672098] lowmem_reserve[]: [ 1239.677740] device bridge_slave_0 entered promiscuous mode [ 1239.681260] 0 0 0 0 0 [ 1239.695499] Node 1 Normal free:71544kB min:53696kB low:67120kB high:80544kB active_anon:944kB inactive_anon:56780kB active_file:52kB inactive_file:40kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:352kB pagetables:380kB bounce:0kB free_pcp:1324kB local_pcp:704kB free_cma:0kB [ 1239.698738] Node 1 [ 1239.754746] bridge0: port 2(bridge_slave_1) entered blocking state [ 1239.772111] (UE) 58*8kB (U) 27*16kB (U) 10*32kB (UE) 2*64kB (UE) 3*128kB (UE) 2*256kB (UE) 1*512kB (E) 2*1024kB (UE) 1*2048kB (M) 1*4096kB (M) = 11156kB [ 1239.784860] bridge0: port 2(bridge_slave_1) entered disabled state [ 1239.801349] syz-executor.1: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1239.813725] device bridge_slave_1 entered promiscuous mode [ 1239.819937] Normal: 1277*4kB (UM) 694*8kB (UM) 250*16kB (UM) 252*32kB (UM) 1*64kB (M) 0*128kB 2*256kB (UM) 7*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 26884kB [ 1239.832913] lowmem_reserve[]: 0 0 0 0 0 [ 1239.839684] Node 0 DMA32: 108*4kB (UME) 3241*8kB (UE) 10205*16kB (UE) 3208*32kB (UE) 1*64kB (U) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 292360kB [ 1239.842924] Node 0 [ 1239.858590] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 1239.866291] CPU: 0 PID: 28271 Comm: syz-executor.1 Not tainted 4.14.230-syzkaller #0 [ 1239.869294] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 1239.874175] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1239.874180] Call Trace: [ 1239.874201] dump_stack+0x1b2/0x281 [ 1239.874214] warn_alloc.cold+0x96/0x1cc [ 1239.874227] ? zone_watermark_ok_safe+0x220/0x220 [ 1239.874249] __alloc_pages_nodemask+0x2127/0x2720 [ 1239.881824] DMA: [ 1239.891179] ? lock_acquire+0x170/0x3f0 [ 1239.891192] ? lock_acquire+0x170/0x3f0 [ 1239.891209] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1239.891227] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1239.912917] 52*4kB [ 1239.913197] ? __mutex_unlock_slowpath+0x75/0x770 [ 1239.917162] (UE) [ 1239.921142] alloc_pages_current+0x155/0x260 [ 1239.928023] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1239.931398] ion_page_pool_alloc+0x118/0x1b0 [ 1239.952915] 59*8kB (U) [ 1239.956834] ion_system_heap_allocate+0x133/0x8c0 [ 1239.956849] ? _raw_spin_unlock+0x29/0x40 [ 1239.959419] 27*16kB [ 1239.964255] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1239.964264] ? ion_system_contig_heap_create+0x130/0x130 [ 1239.964275] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1239.964288] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1239.964298] ion_alloc+0x27a/0x810 [ 1239.979281] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 1239.981096] ? ion_dma_buf_release+0x40/0x40 [ 1240.002937] (U) 10*32kB [ 1240.005530] ? __might_fault+0x177/0x1b0 [ 1240.005538] (UE) [ 1240.008198] ion_ioctl+0xea/0x1f0 [ 1240.012247] 2*64kB [ 1240.014298] ? ion_query_heaps+0x360/0x360 [ 1240.014309] ? ion_query_heaps+0x360/0x360 [ 1240.014319] do_vfs_ioctl+0x75a/0xff0 [ 1240.014335] ? ioctl_preallocate+0x1a0/0x1a0 [ 1240.014347] ? lock_downgrade+0x740/0x740 [ 1240.018575] team0: Port device team_slave_0 added [ 1240.020008] ? __fget+0x225/0x360 [ 1240.033878] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 1240.036621] ? do_vfs_ioctl+0xff0/0xff0 [ 1240.041397] team0: Port device team_slave_1 added [ 1240.045592] ? security_file_ioctl+0x83/0xb0 [ 1240.045603] SyS_ioctl+0x7f/0xb0 [ 1240.045611] ? do_vfs_ioctl+0xff0/0xff0 [ 1240.045622] do_syscall_64+0x1d5/0x640 [ 1240.045637] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1240.049111] (UE) [ 1240.055752] RIP: 0033:0x466459 [ 1240.055757] RSP: 002b:00007feb59368188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1240.055765] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1240.055770] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000005 [ 1240.055775] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1240.055780] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1240.055785] R13: 00007ffe56f14bcf R14: 00007feb59368300 R15: 0000000000022000 [ 1240.067163] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1240.102916] 2*128kB [ 1240.112712] Node 0 [ 1240.120901] (UE) [ 1240.128025] Normal: [ 1240.140464] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1240.153748] 0*4kB [ 1240.155609] 2*256kB [ 1240.161237] 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1240.161272] Node 1 Normal: 1277*4kB (UM) 698*8kB (UM) 254*16kB (UM) 274*32kB (UM) 3*64kB (UM) [ 1240.168041] (UE) [ 1240.175299] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1240.183830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1240.183837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1240.190090] 0*128kB [ 1240.197203] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1240.220633] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1240.237017] 1*512kB [ 1240.238439] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1240.247293] (E) [ 1240.253451] 60002 total pagecache pages [ 1240.258228] 2*1024kB [ 1240.260053] 0 pages in swap cache [ 1240.267816] (UE) 1*2048kB (M) 1*4096kB (M) = 11032kB [ 1240.270029] Node 0 DMA32: 79*4kB (ME) 37*8kB (UME) 7556*16kB (UME) 3212*32kB (UME) 1*64kB (M) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 224356kB [ 1240.270093] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB [ 1240.276140] 2*256kB [ 1240.289641] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1240.289647] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1240.290867] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 1240.300962] Swap cache stats: add 0, delete 0, find 0/0 [ 1240.313733] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 1240.331430] (UM) [ 1240.337552] 0*4096kB [ 1240.349028] Free swap = 0kB [ 1240.349872] = 0kB [ 1240.356761] 7*512kB [ 1240.362947] Node 1 Normal: 1277*4kB (UM) 698*8kB (UM) 254*16kB (UM) 277*32kB (UM) 3*64kB (UM) 0*128kB 2*256kB (UM) 7*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 27908kB [ 1240.368727] (U) [ 1240.387794] Total swap = 0kB [ 1240.393640] 2097051 pages RAM [ 1240.397112] 0 pages HighMem/MovableOnly [ 1240.400746] device hsr_slave_0 entered promiscuous mode [ 1240.401650] 363848 pages reserved [ 1240.406996] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1240.414222] 0 pages cma reserved [ 1240.419143] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1240.422252] Out of memory (oom_kill_allocating_task): Kill process 27351 (systemd-journal) score 0 or sacrifice child [ 1240.432219] device hsr_slave_1 entered promiscuous mode [ 1240.448388] 0*1024kB 0*2048kB 0*4096kB = 27812kB [ 1240.448506] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1240.453379] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1240.462319] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1240.475850] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1240.480605] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 1240.489793] Killed process 27351 (systemd-journal) total-vm:46096kB, anon-rss:468kB, file-rss:0kB, shmem-rss:2340kB [ 1240.495000] Mem-Info: [ 1240.508017] 60039 total pagecache pages [ 1240.509522] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1240.512018] 0 pages in swap cache [ 1240.524446] active_anon:12995 inactive_anon:57535 isolated_anon:0 [ 1240.524446] active_file:1105 inactive_file:766 isolated_file:0 [ 1240.524446] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1240.524446] slab_reclaimable:12045 slab_unreclaimable:113182 [ 1240.524446] mapped:54224 shmem:58131 pagetables:792 bounce:0 [ 1240.524446] free:65661 free_pcp:70 free_cma:0 [ 1240.557970] Swap cache stats: add 0, delete 0, find 0/0 [ 1240.563408] Free swap = 0kB [ 1240.563589] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 1240.566418] Total swap = 0kB [ 1240.566426] 2097051 pages RAM [ 1240.576987] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1240.579191] 0 pages HighMem/MovableOnly [ 1240.591849] Node 0 active_anon:51036kB inactive_anon:173360kB active_file:4416kB inactive_file:3060kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:148068kB dirty:0kB writeback:0kB shmem:175332kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1240.599164] 60039 total pagecache pages [ 1240.620877] 363848 pages reserved [ 1240.627723] 0 pages cma reserved [ 1240.635279] oom_reaper: reaped process 28271 (syz-executor.1), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1240.643206] Node 1 active_anon:944kB inactive_anon:56780kB active_file:4kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:68828kB dirty:0kB writeback:0kB shmem:57192kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1240.649522] 0 pages in swap cache [ 1240.672899] Node 0 DMA free:11032kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1240.681523] oom_reaper: reaped process 27351 (systemd-journal), now anon-rss:0kB, file-rss:0kB, shmem-rss:2360kB [ 1240.713087] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1240.717749] Swap cache stats: add 0, delete 0, find 0/0 [ 1240.718355] Node 0 DMA32 free:223672kB min:36200kB low:45248kB high:54296kB active_anon:50536kB inactive_anon:173360kB active_file:4416kB inactive_file:3060kB unevictable:0kB writepending:0kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:7200kB pagetables:2788kB bounce:0kB free_pcp:640kB local_pcp:100kB free_cma:0kB [ 1240.725189] Free swap = 0kB [ 1240.757318] lowmem_reserve[]: 0 0 0 0 0 [ 1240.761330] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1240.799758] lowmem_reserve[]: 0 0 0 0 0 [ 1240.810714] Total swap = 0kB [ 1240.817194] systemd[1]: systemd-journald.service: Failed with result 'signal'. [ 1240.827739] 2097051 pages RAM [ 1240.829352] Node 1 Normal free:27716kB min:53696kB low:67120kB high:80544kB active_anon:944kB inactive_anon:56780kB active_file:4kB inactive_file:4kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:352kB pagetables:380kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1240.836044] 0 pages HighMem/MovableOnly [ 1240.877259] systemd[1]: systemd-journald.service: Service has no hold-off time, scheduling restart. [ 1240.892323] systemd[1]: Stopped Journal Service. 13:38:17 executing program 4 (fault-call:0 fault-nth:3): semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f00000000c0)=""/89) [ 1240.927897] lowmem_reserve[]: 0 0 0 0 0 [ 1240.936010] 363848 pages reserved [ 1240.939203] systemd[1]: Starting Journal Service... [ 1240.941981] 0 pages cma reserved [ 1240.951147] Node 0 DMA: 52*4kB (UE) 59*8kB (U) 27*16kB (U) 10*32kB (UE) 2*64kB (UE) 2*128kB (UE) 2*256kB (UE) 1*512kB (E) 2*1024kB (UE) 1*2048kB (M) 1*4096kB (M) = 11032kB [ 1240.977869] Node 0 DMA32: 0*4kB 40*8kB (U) 6894*16kB (U) 3210*32kB (UE) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 213344kB [ 1240.997585] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1241.016449] FAULT_INJECTION: forcing a failure. [ 1241.016449] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1241.024593] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 1241.029740] Node 1 [ 1241.037820] CPU: 1 PID: 28500 Comm: syz-executor.4 Not tainted 4.14.230-syzkaller #0 [ 1241.047984] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1241.057351] Call Trace: [ 1241.059946] dump_stack+0x1b2/0x281 [ 1241.063577] should_fail.cold+0x10a/0x149 [ 1241.067761] __alloc_pages_nodemask+0x22c/0x2720 [ 1241.072524] ? trace_hardirqs_on+0x10/0x10 [ 1241.076764] ? trace_hardirqs_on+0x10/0x10 [ 1241.081003] ? __lock_acquire+0x5fc/0x3f20 [ 1241.085271] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1241.090119] ? __lock_acquire+0x5fc/0x3f20 [ 1241.094364] ? __khugepaged_enter+0x24c/0x330 [ 1241.098872] ? lock_acquire+0x170/0x3f0 [ 1241.103074] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1241.103213] ? lock_downgrade+0x740/0x740 [ 1241.113262] alloc_pages_vma+0x4b3/0x6d0 [ 1241.113279] do_huge_pmd_anonymous_page+0x2d6/0x1700 [ 1241.113293] ? prep_transhuge_page+0xa0/0xa0 [ 1241.113305] ? reacquire_held_locks+0xb5/0x3f0 [ 1241.113318] __handle_mm_fault+0x2ac4/0x4620 [ 1241.113330] ? trace_hardirqs_on+0x10/0x10 [ 1241.113338] ? vm_insert_page+0x7c0/0x7c0 [ 1241.113357] ? mark_held_locks+0xa6/0xf0 [ 1241.113369] handle_mm_fault+0x455/0x9c0 [ 1241.113384] __do_page_fault+0x549/0xad0 [ 1241.127050] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 1241.131576] ? spurious_fault+0x640/0x640 [ 1241.131589] ? do_page_fault+0x60/0x500 [ 1241.152171] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 1241.152469] page_fault+0x25/0x50 [ 1241.152486] RIP: 0010:copy_user_enhanced_fast_string+0xe/0x20 [ 1241.161144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1241.162576] RSP: 0018:ffff88805703fdc8 EFLAGS: 00010206 [ 1241.162587] RAX: ffffed100ae07fd4 RBX: 0000000000000068 RCX: 0000000000000068 [ 1241.162592] RDX: 0000000000000068 RSI: ffff88805703fe38 RDI: 00000000200000c0 [ 1241.162600] RBP: ffff88805703fe38 R08: 0000000000000000 R09: ffffed100ae07fd3 [ 1241.167706] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1241.170982] R10: ffff88805703fe9f R11: ffff888070d9e200 R12: 00000000200000c0 [ 1241.170988] R13: 00007ffffffff000 R14: 0000000020000128 R15: ffff888094576240 [ 1241.171017] _copy_to_user+0xaa/0xd0 [ 1241.171031] SyS_semctl+0x164/0x220 [ 1241.183774] Normal: [ 1241.186401] ? SyS_semget+0x170/0x170 [ 1241.186421] ? __do_page_fault+0x159/0xad0 [ 1241.202271] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 1241.205534] ? do_syscall_64+0x4c/0x640 [ 1241.205546] ? SyS_semget+0x170/0x170 [ 1241.205555] do_syscall_64+0x1d5/0x640 [ 1241.205571] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1241.205578] RIP: 0033:0x466459 [ 1241.205586] RSP: 002b:00007fee1a099188 EFLAGS: 00000246 [ 1241.217366] 1277*4kB [ 1241.220122] ORIG_RAX: 0000000000000042 [ 1241.220129] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1241.220134] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 1241.220143] RBP: 00007fee1a0991d0 R08: 0000000000000000 R09: 0000000000000000 [ 1241.231377] 8021q: adding VLAN 0 to HW filter on device team0 [ 1241.233890] R10: 00000000200000c0 R11: 0000000000000246 R12: 0000000000000001 [ 1241.233896] R13: 00007ffe6e91304f R14: 00007fee1a099300 R15: 0000000000022000 [ 1241.275611] (UM) 698*8kB (UM) 254*16kB (UM) 277*32kB (UM) 3*64kB (UM) 0*128kB 2*256kB (UM) 7*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 27908kB [ 1241.355837] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1241.366485] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 1241.367256] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1241.386244] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1241.395248] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1241.397108] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1241.405854] 61944 total pagecache pages [ 1241.417351] 0 pages in swap cache [ 1241.420865] Swap cache stats: add 0, delete 0, find 0/0 [ 1241.426362] Free swap = 0kB [ 1241.429445] Total swap = 0kB [ 1241.432534] 2097051 pages RAM [ 1241.435800] 0 pages HighMem/MovableOnly [ 1241.440180] 363848 pages reserved [ 1241.440763] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1241.448418] 0 pages cma reserved [ 1241.463910] bridge0: port 1(bridge_slave_0) entered blocking state [ 1241.470335] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1241.499924] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 1241.510325] systemd-journald[28495]: File /run/log/journal/04d8c135ee6b410280ba31a58c89679d/system.journal corrupted or uncleanly shut down, renaming and replacing. [ 1241.517125] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1241.544383] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1241.560821] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1241.594271] bridge0: port 2(bridge_slave_1) entered blocking state [ 1241.600669] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1241.649747] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 1241.663312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1241.683764] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 1241.690685] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1241.706445] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 1241.722972] Bluetooth: hci4 command 0x040f tx timeout [ 1241.728632] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1241.737199] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1241.760755] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 1241.777063] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1241.785101] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1241.817620] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1241.828377] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 1241.846530] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1241.877995] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1241.888686] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 1241.896035] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1241.904261] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1241.926021] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 1241.932148] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1241.982635] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 1242.005737] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 1242.012102] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1242.045137] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1242.085909] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1242.481172] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 1242.507016] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 1242.537271] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1242.557474] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1242.731395] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 1242.744014] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 1242.750939] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 1242.807376] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 1242.843394] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1242.851462] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1242.886935] device veth0_vlan entered promiscuous mode [ 1242.903218] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1242.910877] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1242.942439] device veth1_vlan entered promiscuous mode [ 1243.036919] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 1243.071169] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 1243.092657] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1243.101754] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1243.122220] device veth0_macvtap entered promiscuous mode [ 1243.140675] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 1243.185936] device veth1_macvtap entered promiscuous mode [ 1243.208787] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 1243.241101] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 1243.264632] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 1243.280247] systemd[1]: Started Journal Service. [ 1243.285438] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1243.285444] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1243.285452] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1243.285455] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1243.285462] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1243.285466] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1243.285473] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1243.285477] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1243.285483] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1243.285486] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1243.287014] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 1243.397064] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1243.404752] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1243.417342] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1243.424986] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1243.437826] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1243.449006] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1243.473508] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1243.482668] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1243.498806] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1243.508093] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1243.519196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1243.532955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1243.542683] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1243.573011] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1243.582771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1243.614522] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 1243.621506] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1243.672364] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1243.681215] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1243.776667] syz-fuzzer invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1243.796168] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 1243.800972] CPU: 0 PID: 7979 Comm: syz-fuzzer Not tainted 4.14.230-syzkaller #0 [ 1243.808423] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1243.817788] Call Trace: [ 1243.820385] dump_stack+0x1b2/0x281 [ 1243.824028] dump_header+0x178/0x82f [ 1243.827862] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1243.832991] ? ___ratelimit+0x2cd/0x530 [ 1243.836978] oom_kill_process.cold+0x10/0xa40 [ 1243.841486] out_of_memory+0xe3e/0x1190 [ 1243.845463] ? oom_killer_disable+0x1c0/0x1c0 [ 1243.849954] ? mutex_trylock+0x152/0x1a0 [ 1243.854013] __alloc_pages_nodemask+0x23e1/0x2720 [ 1243.858863] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1243.863713] alloc_pages_current+0x155/0x260 [ 1243.868116] filemap_fault+0x11a1/0x1ad0 [ 1243.872180] ext4_filemap_fault+0x84/0xb0 [ 1243.876340] __do_fault+0xfa/0x380 [ 1243.879898] __handle_mm_fault+0x2497/0x4620 [ 1243.884307] ? vm_insert_page+0x7c0/0x7c0 [ 1243.888486] ? mark_held_locks+0xa6/0xf0 [ 1243.892542] handle_mm_fault+0x455/0x9c0 [ 1243.896602] __do_page_fault+0x549/0xad0 [ 1243.900660] ? spurious_fault+0x640/0x640 [ 1243.904810] ? do_page_fault+0x60/0x500 [ 1243.908775] ? page_fault+0x2f/0x50 [ 1243.912391] page_fault+0x45/0x50 [ 1243.915855] RIP: 2a8600:0x12c9f4bd366 [ 1243.919643] RSP: 03e7:000000c0002b9e40 EFLAGS: 00000003 [ 1243.920731] Bluetooth: hci4 command 0x0419 tx timeout [ 1243.942341] Mem-Info: [ 1243.945625] active_anon:12998 inactive_anon:59566 isolated_anon:0 [ 1243.945625] active_file:48 inactive_file:34 isolated_file:0 [ 1243.945625] unevictable:0 dirty:0 writeback:2 unstable:0 [ 1243.945625] slab_reclaimable:11998 slab_unreclaimable:114600 [ 1243.945625] mapped:52687 shmem:60179 pagetables:737 bounce:0 [ 1243.945625] free:13846 free_pcp:0 free_cma:0 [ 1243.983023] syz-executor.1: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1243.991886] Node 0 active_anon:51136kB inactive_anon:181488kB active_file:128kB inactive_file:56kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:141784kB dirty:0kB writeback:8kB shmem:183524kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1244.012936] syz-executor.1 cpuset= [ 1244.031583] Node 1 active_anon:856kB inactive_anon:56776kB active_file:64kB inactive_file:80kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:68964kB dirty:0kB writeback:0kB shmem:57192kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1244.032915] / [ 1244.035232] Node 0 DMA free:10980kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1244.101838] mems_allowed=0-1 [ 1244.101918] CPU: 1 PID: 28271 Comm: syz-executor.1 Not tainted 4.14.230-syzkaller #0 [ 1244.101924] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1244.101928] Call Trace: [ 1244.101950] dump_stack+0x1b2/0x281 [ 1244.101963] warn_alloc.cold+0x96/0x1cc [ 1244.101975] ? zone_watermark_ok_safe+0x220/0x220 [ 1244.101989] ? usleep_range+0x130/0x130 [ 1244.116283] lowmem_reserve[]: [ 1244.122350] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1244.137078] 0 [ 1244.137350] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1244.141296] 2717 2718 [ 1244.144407] ? run_timer_softirq+0x5a0/0x5a0 [ 1244.144425] __alloc_pages_nodemask+0x2127/0x2720 [ 1244.144442] ? lock_acquire+0x170/0x3f0 [ 1244.144456] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1244.144465] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1244.144482] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1244.144497] ? alloc_pages_current+0x123/0x260 [ 1244.144508] alloc_pages_current+0x155/0x260 [ 1244.144519] ion_page_pool_alloc+0x118/0x1b0 [ 1244.144531] ion_system_heap_allocate+0x133/0x8c0 [ 1244.180001] 2718 [ 1244.181441] ? _raw_spin_unlock+0x29/0x40 [ 1244.199687] 2718 [ 1244.200272] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1244.218279] ? ion_system_contig_heap_create+0x130/0x130 [ 1244.223735] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1244.228755] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1244.228758] Node 0 DMA32 free:17848kB min:36200kB low:45248kB high:54296kB active_anon:51136kB inactive_anon:181488kB active_file:32kB inactive_file:32kB unevictable:0kB writepending:0kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:7104kB pagetables:2572kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1244.233608] ion_alloc+0x27a/0x810 [ 1244.233624] ? ion_dma_buf_release+0x40/0x40 [ 1244.233635] ? __might_fault+0x177/0x1b0 [ 1244.233645] ion_ioctl+0xea/0x1f0 [ 1244.233653] ? ion_query_heaps+0x360/0x360 [ 1244.233665] ? ion_query_heaps+0x360/0x360 [ 1244.233674] do_vfs_ioctl+0x75a/0xff0 [ 1244.233685] ? ioctl_preallocate+0x1a0/0x1a0 [ 1244.233694] ? lock_downgrade+0x740/0x740 [ 1244.233708] ? __fget+0x225/0x360 [ 1244.233717] ? do_vfs_ioctl+0xff0/0xff0 [ 1244.233728] ? security_file_ioctl+0x83/0xb0 [ 1244.233737] SyS_ioctl+0x7f/0xb0 [ 1244.233743] ? do_vfs_ioctl+0xff0/0xff0 [ 1244.233753] do_syscall_64+0x1d5/0x640 [ 1244.233766] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1244.233774] RIP: 0033:0x466459 [ 1244.233779] RSP: 002b:00007feb59368188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1244.233790] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1244.233795] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000005 [ 1244.233801] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1244.233806] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1244.233811] R13: 00007ffe56f14bcf R14: 00007feb59368300 R15: 0000000000022000 [ 1244.241042] Mem-Info: [ 1244.312976] lowmem_reserve[]: [ 1244.322685] active_anon:13000 inactive_anon:59567 isolated_anon:0 [ 1244.322685] active_file:15 inactive_file:16 isolated_file:0 [ 1244.322685] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1244.322685] slab_reclaimable:11986 slab_unreclaimable:114616 [ 1244.322685] mapped:52641 shmem:60180 pagetables:738 bounce:0 [ 1244.322685] free:13860 free_pcp:0 free_cma:0 [ 1244.345371] 0 [ 1244.353906] Node 0 active_anon:51136kB inactive_anon:181488kB active_file:32kB inactive_file:32kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:141736kB dirty:0kB writeback:0kB shmem:183524kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1244.376239] 0 [ 1244.386353] Node 1 active_anon:864kB inactive_anon:56780kB active_file:28kB inactive_file:32kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:68828kB dirty:0kB writeback:0kB shmem:57196kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1244.425785] 0 [ 1244.462488] Node 0 [ 1244.475778] syz-executor.3: page allocation failure: order:0, mode:0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null) [ 1244.483294] DMA free:10960kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1244.489062] syz-executor.3 cpuset= [ 1244.516630] 0 0 [ 1244.522154] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1244.522417] lowmem_reserve[]: [ 1244.551459] / mems_allowed=0-1 [ 1244.556738] 0 2717 2718 2718 2718 [ 1244.557861] CPU: 0 PID: 28269 Comm: syz-executor.3 Not tainted 4.14.230-syzkaller #0 [ 1244.561425] Node 0 [ 1244.569254] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1244.569259] Call Trace: [ 1244.569281] dump_stack+0x1b2/0x281 [ 1244.569295] warn_alloc.cold+0x96/0x1cc [ 1244.569306] ? zone_watermark_ok_safe+0x220/0x220 [ 1244.569317] ? usleep_range+0x130/0x130 [ 1244.569326] ? try_to_free_pages+0x23f/0x6e0 [ 1244.569338] ? _find_next_bit+0xdb/0x100 [ 1244.571575] DMA32 free:17848kB min:36200kB low:45248kB high:54296kB active_anon:51136kB inactive_anon:181488kB active_file:32kB inactive_file:32kB unevictable:0kB writepending:0kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:7104kB pagetables:2572kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1244.580918] ? run_timer_softirq+0x5a0/0x5a0 [ 1244.580943] __alloc_pages_nodemask+0x2127/0x2720 [ 1244.580967] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1244.583553] lowmem_reserve[]: [ 1244.587180] ? ion_heap_clear_pages+0x4c/0x70 [ 1244.591127] 0 [ 1244.595976] ? mark_held_locks+0xa6/0xf0 [ 1244.595989] ? cache_grow_begin+0x3f/0x700 [ 1244.595999] cache_grow_begin+0x91/0x700 [ 1244.596014] fallback_alloc+0x207/0x2c0 [ 1244.596028] kmem_cache_alloc_node_trace+0xed/0x400 [ 1244.599992] 0 [ 1244.604391] __get_vm_area_node+0xed/0x340 [ 1244.604403] vmap+0xd5/0x290 [ 1244.604413] ? ion_heap_clear_pages+0x23/0x70 [ 1244.604421] ? vunmap+0x50/0x50 [ 1244.604431] ? __vunmap+0x21c/0x300 [ 1244.608480] 0 [ 1244.636508] ion_heap_clear_pages+0x23/0x70 [ 1244.636520] ion_heap_sglist_zero+0x165/0x220 [ 1244.636530] ? ion_heap_clear_pages+0x70/0x70 [ 1244.636559] ? _ion_heap_freelist_drain+0x28b/0x410 [ 1244.640957] 0 [ 1244.645788] ion_system_heap_free+0x1d0/0x240 [ 1244.645801] ion_buffer_destroy+0x132/0x190 [ 1244.645811] _ion_heap_freelist_drain+0x293/0x410 [ 1244.645826] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1244.645836] ion_alloc+0x244/0x810 [ 1244.650665] 0 [ 1244.653762] ? ion_dma_buf_release+0x40/0x40 [ 1244.653774] ? __might_fault+0x177/0x1b0 [ 1244.653786] ion_ioctl+0xea/0x1f0 [ 1244.660074] ? ion_query_heaps+0x360/0x360 [ 1244.664156] Node 0 [ 1244.668340] ? ion_query_heaps+0x360/0x360 [ 1244.672389] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1244.676337] do_vfs_ioctl+0x75a/0xff0 [ 1244.676349] ? ioctl_preallocate+0x1a0/0x1a0 [ 1244.676358] ? lock_downgrade+0x740/0x740 [ 1244.676371] ? __fget+0x225/0x360 [ 1244.676381] ? do_vfs_ioctl+0xff0/0xff0 [ 1244.681417] lowmem_reserve[]: [ 1244.683233] ? security_file_ioctl+0x83/0xb0 [ 1244.683244] SyS_ioctl+0x7f/0xb0 [ 1244.683252] ? do_vfs_ioctl+0xff0/0xff0 [ 1244.683263] do_syscall_64+0x1d5/0x640 [ 1244.687476] 0 [ 1244.690492] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1244.695000] 0 [ 1244.698224] RIP: 0033:0x466459 [ 1244.701869] 0 [ 1244.703651] RSP: 002b:00007f68e77c2188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1244.703660] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1244.703665] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000005 [ 1244.703670] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1244.703675] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1244.703680] R13: 00007ffed7d489bf R14: 00007f68e77c2300 R15: 0000000000022000 [ 1244.707300] lowmem_reserve[]: [ 1244.707996] 0 [ 1244.712473] 0 0 [ 1244.727856] 0 [ 1244.730263] 0 [ 1244.738328] 0 [ 1244.746526] Node 1 [ 1244.748119] 0 [ 1244.752538] Normal free:26632kB min:53696kB low:67120kB high:80544kB active_anon:864kB inactive_anon:56780kB active_file:28kB inactive_file:32kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:352kB pagetables:380kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1244.758872] Node 1 [ 1244.767565] lowmem_reserve[]: [ 1244.775071] Normal free:26632kB min:53696kB low:67120kB high:80544kB active_anon:864kB inactive_anon:56780kB active_file:28kB inactive_file:32kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:352kB pagetables:380kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1244.804356] 0 [ 1244.812295] lowmem_reserve[]: [ 1244.822056] 0 [ 1244.825830] 0 [ 1244.829703] 0 [ 1244.831087] 0 [ 1244.842402] 0 [ 1244.847949] 0 [ 1244.850404] 0 [ 1244.857133] 0 [ 1244.873273] 0 [ 1244.878952] Node 0 [ 1244.901633] DMA: [ 1244.902281] Node 0 [ 1244.904161] 4*4kB [ 1244.923367] DMA: [ 1244.952941] (E) [ 1245.012975] 4*4kB (E) 0*8kB 2*16kB (U) 9*32kB (UE) 10*64kB (UE) 4*128kB (UE) 1*256kB (E) 2*512kB (UE) 2*1024kB (UE) 1*2048kB (M) 1*4096kB (M) = 10960kB [ 1245.062952] Node 0 DMA32: 768*4kB (ME) 158*8kB (UME) 58*16kB (UME) 26*32kB (UME) 824*64kB (UM) 129*128kB (U) 9*256kB (UM) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 77648kB [ 1245.072964] 0*8kB 2*16kB (U) 9*32kB (UE) 10*64kB (UE) 4*128kB (UE) 1*256kB (E) 2*512kB (UE) 2*1024kB (UE) 1*2048kB (M) 1*4096kB (M) = 10960kB [ 1245.104236] Node 0 DMA32: 768*4kB (ME) 160*8kB (UME) 60*16kB (UME) 26*32kB (UME) 836*64kB (UM) 129*128kB (U) 9*256kB (UM) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 78464kB [ 1245.122990] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1245.147177] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1245.152935] Node 1 Normal: 22*4kB (M) 4*8kB (M) 5*16kB (UM) 6*32kB (M) 5569*64kB (UM) 625*128kB (UM) 222*256kB (UM) 35*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 511560kB [ 1245.186858] Node 1 Normal: 22*4kB (M) 4*8kB (M) 5*16kB (UM) 6*32kB (M) 5920*64kB (UM) 892*128kB (UM) 232*256kB (UM) 35*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 570760kB [ 1245.222996] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1245.231903] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1245.235911] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1245.274997] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1245.293009] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1245.297198] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1245.301622] 60655 total pagecache pages [ 1245.315023] 0 pages in swap cache [ 1245.318970] Swap cache stats: add 0, delete 0, find 0/0 [ 1245.325937] Free swap = 0kB [ 1245.333757] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1245.342636] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1245.351892] Total swap = 0kB [ 1245.363109] 2097051 pages RAM [ 1245.366234] 0 pages HighMem/MovableOnly [ 1245.370210] 363848 pages reserved [ 1245.404757] 0 pages cma reserved [ 1245.407899] 61210 total pagecache pages [ 1245.408233] Out of memory (oom_kill_allocating_task): Kill process 7979 (syz-fuzzer) score 0 or sacrifice child [ 1245.425831] Killed process 27700 (syz-executor.2) total-vm:84924kB, anon-rss:64kB, file-rss:0kB, shmem-rss:0kB [ 1245.443045] 0 pages in swap cache [ 1245.446743] Swap cache stats: add 0, delete 0, find 0/0 [ 1245.452110] Free swap = 0kB [ 1245.461673] oom_reaper: reaped process 27700 (syz-executor.2), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1245.473002] Total swap = 0kB [ 1245.476134] 2097051 pages RAM [ 1245.479245] 0 pages HighMem/MovableOnly [ 1245.512964] 363848 pages reserved [ 1245.522962] 0 pages cma reserved [ 1246.203870] syz-executor.3: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1246.242984] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 1246.248146] CPU: 1 PID: 28269 Comm: syz-executor.3 Not tainted 4.14.230-syzkaller #0 [ 1246.256024] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1246.265410] Call Trace: [ 1246.268010] dump_stack+0x1b2/0x281 [ 1246.271645] warn_alloc.cold+0x96/0x1cc [ 1246.275623] ? zone_watermark_ok_safe+0x220/0x220 [ 1246.280506] __alloc_pages_nodemask+0x2127/0x2720 [ 1246.285362] ? lock_acquire+0x170/0x3f0 [ 1246.289347] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1246.294208] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1246.299771] ? __mutex_unlock_slowpath+0x75/0x770 [ 1246.304620] ? __sanitizer_cov_trace_pc+0x23/0x50 [ 1246.309492] alloc_pages_current+0x155/0x260 [ 1246.313999] ion_page_pool_alloc+0x118/0x1b0 [ 1246.318423] ion_system_heap_allocate+0x133/0x8c0 [ 1246.323278] ? _raw_spin_unlock+0x29/0x40 [ 1246.327512] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1246.332477] ? ion_system_contig_heap_create+0x130/0x130 [ 1246.337938] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1246.342788] ion_alloc+0x27a/0x810 [ 1246.346370] ? ion_dma_buf_release+0x40/0x40 [ 1246.350781] ? __might_fault+0x177/0x1b0 [ 1246.354849] ion_ioctl+0xea/0x1f0 [ 1246.358302] ? ion_query_heaps+0x360/0x360 [ 1246.362539] ? ion_query_heaps+0x360/0x360 [ 1246.366780] do_vfs_ioctl+0x75a/0xff0 [ 1246.370593] ? ioctl_preallocate+0x1a0/0x1a0 [ 1246.375031] ? lock_downgrade+0x740/0x740 [ 1246.379186] ? __fget+0x225/0x360 [ 1246.382640] ? do_vfs_ioctl+0xff0/0xff0 [ 1246.386623] ? security_file_ioctl+0x83/0xb0 [ 1246.391034] SyS_ioctl+0x7f/0xb0 [ 1246.394398] ? do_vfs_ioctl+0xff0/0xff0 [ 1246.398373] do_syscall_64+0x1d5/0x640 [ 1246.402268] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1246.407487] RIP: 0033:0x466459 [ 1246.410671] RSP: 002b:00007f68e77c2188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1246.418385] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1246.425668] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000005 [ 1246.432951] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1246.440224] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1246.447496] R13: 00007ffed7d489bf R14: 00007f68e77c2300 R15: 0000000000022000 [ 1246.457115] warn_alloc_show_mem: 1 callbacks suppressed [ 1246.457120] Mem-Info: [ 1246.465490] active_anon:12854 inactive_anon:59567 isolated_anon:0 [ 1246.465490] active_file:579 inactive_file:1463 isolated_file:0 [ 1246.465490] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1246.465490] slab_reclaimable:11982 slab_unreclaimable:114491 [ 1246.465490] mapped:44876 shmem:60180 pagetables:634 bounce:0 [ 1246.465490] free:208218 free_pcp:703 free_cma:0 [ 1246.499786] Node 0 active_anon:50576kB inactive_anon:181488kB active_file:2284kB inactive_file:6024kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:144788kB dirty:0kB writeback:0kB shmem:183524kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1246.563016] Node 1 active_anon:840kB inactive_anon:56780kB active_file:32kB inactive_file:28kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:34816kB dirty:0kB writeback:0kB shmem:57196kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1246.622964] Node 0 DMA free:11124kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1246.672933] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1246.678016] Node 0 DMA32 free:914416kB min:36200kB low:45248kB high:54296kB active_anon:50576kB inactive_anon:181488kB active_file:2384kB inactive_file:7524kB unevictable:0kB writepending:0kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:7040kB pagetables:2320kB bounce:0kB free_pcp:1296kB local_pcp:660kB free_cma:0kB [ 1246.723005] lowmem_reserve[]: 0 0 0 0 0 [ 1246.732957] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1246.763020] lowmem_reserve[]: 0 0 0 0 0 [ 1246.767058] Node 1 Normal free:310476kB min:53696kB low:67120kB high:80544kB active_anon:840kB inactive_anon:56780kB active_file:32kB inactive_file:28kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:320kB pagetables:216kB bounce:0kB free_pcp:1372kB local_pcp:644kB free_cma:0kB [ 1246.832935] lowmem_reserve[]: 0 0 0 0 0 [ 1246.836969] Node 0 DMA: 22*4kB (UE) 35*8kB (U) 16*16kB (U) 17*32kB (UE) 5*64kB (UE) 7*128kB (UE) 1*256kB (E) 2*512kB (UE) 2*1024kB (UE) 1*2048kB (M) 1*4096kB (M) = 11856kB [ 1246.872996] Node 0 DMA32: 13112*4kB (UE) 19949*8kB (UE) 17025*16kB (UME) 10425*32kB (UME) 1547*64kB (U) 73*128kB (U) 5*256kB (UM) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 927672kB [ 1246.902960] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1246.932950] Node 1 Normal: 771*4kB (UM) 1158*8kB (UM) 965*16kB (UM) 691*32kB (U) 3429*64kB (U) 1461*128kB (U) 377*256kB (U) 3*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 554412kB [ 1246.962939] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1246.971811] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1247.002013] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1247.031137] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1247.073622] 62883 total pagecache pages [ 1247.077683] 0 pages in swap cache [ 1247.081230] Swap cache stats: add 0, delete 0, find 0/0 [ 1247.153159] Free swap = 0kB [ 1247.156267] Total swap = 0kB [ 1247.159298] 2097051 pages RAM [ 1247.162410] 0 pages HighMem/MovableOnly [ 1247.200063] 363848 pages reserved [ 1247.207698] 0 pages cma reserved 13:38:23 executing program 5: semget$private(0x0, 0x1, 0x0) semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f00000000c0)=""/89) 13:38:23 executing program 4 (fault-call:0 fault-nth:4): semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f00000000c0)=""/89) 13:38:23 executing program 1: ioctl$SIOCPNDELRESOURCE(0xffffffffffffffff, 0x89ef, &(0x7f0000000040)=0xffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f00000012c0)={0x0, @nl=@unspec, @tipc=@id={0x1e, 0x3, 0x2, {0x4e21, 0x4}}, @ethernet={0x307, @random="68d88c73bc2f"}, 0x0, 0x0, 0x0, 0x0, 0x20, &(0x7f0000001280)='bridge_slave_0\x00', 0x401, 0x0, 0xfd51}) semctl$SETVAL(0x0, 0x0, 0x10, 0x0) semctl$GETVAL(0x0, 0x0, 0xc, &(0x7f0000000180)=""/194) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$x25(0x9, 0x5, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x500, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x80000000, 0xa, 0x1}) 13:38:23 executing program 2 (fault-call:1 fault-nth:0): r0 = semget$private(0x0, 0x1, 0x0) semctl$IPC_STAT(r0, 0x0, 0x2, &(0x7f00000000c0)=""/89) 13:38:23 executing program 0: ioctl$SIOCPNDELRESOURCE(0xffffffffffffffff, 0x89ef, &(0x7f0000000040)=0xffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000012c0)={0x0, @nl=@unspec, @tipc=@id={0x1e, 0x3, 0x2, {0x4e21, 0x4}}, @ethernet={0x307, @random="68d88c73bc2f"}, 0x0, 0x0, 0x0, 0x0, 0x20, &(0x7f0000001280)='bridge_slave_0\x00', 0x401, 0x0, 0xfd51}) semctl$SETVAL(0x0, 0x0, 0x10, 0x0) semctl$GETVAL(0x0, 0x0, 0xc, &(0x7f0000000180)=""/194) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$x25(0x9, 0x5, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x500, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x80000000, 0xa, 0x1}) 13:38:23 executing program 3: ioctl$SIOCPNDELRESOURCE(0xffffffffffffffff, 0x89ef, &(0x7f0000000040)=0xffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) ioctl$sock_SIOCADDRT(r0, 0x890b, 0x0) semctl$SETVAL(0x0, 0x0, 0x10, 0x0) semctl$GETVAL(0x0, 0x0, 0xc, &(0x7f0000000180)=""/194) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$x25(0x9, 0x5, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x500, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x80000000, 0xa, 0x1}) [ 1247.441059] FAULT_INJECTION: forcing a failure. [ 1247.441059] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1247.461564] CPU: 0 PID: 28557 Comm: syz-executor.4 Not tainted 4.14.230-syzkaller #0 [ 1247.469498] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1247.478893] Call Trace: [ 1247.481508] dump_stack+0x1b2/0x281 [ 1247.485141] should_fail.cold+0x10a/0x149 [ 1247.489298] __alloc_pages_nodemask+0x22c/0x2720 [ 1247.494077] ? __lock_acquire+0x5fc/0x3f20 [ 1247.498745] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1247.503602] ? __lock_acquire+0x5fc/0x3f20 [ 1247.507840] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1247.512683] ? __khugepaged_enter+0x24c/0x330 [ 1247.519294] ? alloc_pages_vma+0x11d/0x6d0 [ 1247.523534] alloc_pages_current+0x155/0x260 [ 1247.527974] pte_alloc_one+0x15/0x100 [ 1247.531772] __pte_alloc+0x25/0x2c0 [ 1247.535401] __handle_mm_fault+0x3259/0x4620 [ 1247.539812] ? trace_hardirqs_on+0x10/0x10 [ 1247.544050] ? vm_insert_page+0x7c0/0x7c0 [ 1247.548205] ? mark_held_locks+0xa6/0xf0 [ 1247.552267] handle_mm_fault+0x455/0x9c0 [ 1247.556359] __do_page_fault+0x549/0xad0 [ 1247.560454] ? spurious_fault+0x640/0x640 [ 1247.564629] ? do_page_fault+0x60/0x500 [ 1247.568601] page_fault+0x25/0x50 [ 1247.572052] RIP: 0010:copy_user_enhanced_fast_string+0xe/0x20 [ 1247.577956] RSP: 0018:ffff888022ab7dc8 EFLAGS: 00010206 [ 1247.583320] RAX: ffffed1004556fd4 RBX: 0000000000000068 RCX: 0000000000000068 [ 1247.590768] RDX: 0000000000000068 RSI: ffff888022ab7e38 RDI: 00000000200000c0 [ 1247.598062] RBP: ffff888022ab7e38 R08: 0000000000000000 R09: ffffed1004556fd3 [ 1247.605359] R10: ffff888022ab7e9f R11: ffff8880796884c0 R12: 00000000200000c0 [ 1247.612654] R13: 00007ffffffff000 R14: 0000000020000128 R15: ffff888094576240 [ 1247.619982] _copy_to_user+0xaa/0xd0 [ 1247.623700] SyS_semctl+0x164/0x220 [ 1247.627330] ? SyS_semget+0x170/0x170 [ 1247.631157] ? __do_page_fault+0x159/0xad0 [ 1247.635393] ? do_syscall_64+0x4c/0x640 [ 1247.639374] ? SyS_semget+0x170/0x170 [ 1247.643178] do_syscall_64+0x1d5/0x640 [ 1247.647072] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1247.652277] RIP: 0033:0x466459 [ 1247.655457] RSP: 002b:00007fee1a099188 EFLAGS: 00000246 ORIG_RAX: 0000000000000042 [ 1247.663169] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1247.670439] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 1247.677715] RBP: 00007fee1a0991d0 R08: 0000000000000000 R09: 0000000000000000 [ 1247.684997] R10: 00000000200000c0 R11: 0000000000000246 R12: 0000000000000001 13:38:24 executing program 5: semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f00000000c0)=""/89) [ 1247.692294] R13: 00007ffe6e91304f R14: 00007fee1a099300 R15: 0000000000022000 13:38:24 executing program 4 (fault-call:0 fault-nth:5): semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f00000000c0)=""/89) 13:38:24 executing program 5: semctl$IPC_STAT(0x0, 0x0, 0x2, 0x0) [ 1247.778224] FAULT_INJECTION: forcing a failure. [ 1247.778224] name failslab, interval 1, probability 0, space 0, times 0 13:38:24 executing program 5: semctl$IPC_STAT(0x0, 0x0, 0x2, 0x0) [ 1247.876682] CPU: 0 PID: 28567 Comm: syz-executor.4 Not tainted 4.14.230-syzkaller #0 [ 1247.884612] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1247.894088] Call Trace: [ 1247.896708] dump_stack+0x1b2/0x281 [ 1247.900600] should_fail.cold+0x10a/0x149 [ 1247.904767] should_failslab+0xd6/0x130 [ 1247.908757] kmem_cache_alloc+0x28e/0x3c0 [ 1247.912974] ptlock_alloc+0x1d/0x70 [ 1247.916637] pte_alloc_one+0x57/0x100 [ 1247.920461] __pte_alloc+0x25/0x2c0 [ 1247.924103] __handle_mm_fault+0x3259/0x4620 [ 1247.928640] ? trace_hardirqs_on+0x10/0x10 [ 1247.932920] ? vm_insert_page+0x7c0/0x7c0 [ 1247.937204] ? mark_held_locks+0xa6/0xf0 [ 1247.941301] handle_mm_fault+0x455/0x9c0 [ 1247.945401] __do_page_fault+0x549/0xad0 [ 1247.949490] ? spurious_fault+0x640/0x640 [ 1247.953664] ? do_page_fault+0x60/0x500 [ 1247.957786] page_fault+0x25/0x50 [ 1247.961260] RIP: 0010:copy_user_enhanced_fast_string+0xe/0x20 [ 1247.967155] RSP: 0018:ffff888037c5fdc8 EFLAGS: 00010206 [ 1247.972752] RAX: ffffed1006f8bfd4 RBX: 0000000000000068 RCX: 0000000000000068 [ 1247.980048] RDX: 0000000000000068 RSI: ffff888037c5fe38 RDI: 00000000200000c0 [ 1247.987341] RBP: ffff888037c5fe38 R08: 0000000000000000 R09: ffffed1006f8bfd3 [ 1247.994673] R10: ffff888037c5fe9f R11: ffff88805e4022c0 R12: 00000000200000c0 [ 1248.002070] R13: 00007ffffffff000 R14: 0000000020000128 R15: ffff888094576240 [ 1248.009398] _copy_to_user+0xaa/0xd0 [ 1248.013143] SyS_semctl+0x164/0x220 [ 1248.016809] ? SyS_semget+0x170/0x170 [ 1248.020638] ? __do_page_fault+0x159/0xad0 [ 1248.024899] ? do_syscall_64+0x4c/0x640 [ 1248.028897] ? SyS_semget+0x170/0x170 [ 1248.032711] do_syscall_64+0x1d5/0x640 [ 1248.036622] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1248.041833] RIP: 0033:0x466459 [ 1248.045033] RSP: 002b:00007fee1a099188 EFLAGS: 00000246 ORIG_RAX: 0000000000000042 [ 1248.052762] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1248.060061] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 1248.067382] RBP: 00007fee1a0991d0 R08: 0000000000000000 R09: 0000000000000000 [ 1248.074674] R10: 00000000200000c0 R11: 0000000000000246 R12: 0000000000000001 [ 1248.081959] R13: 00007ffe6e91304f R14: 00007fee1a099300 R15: 0000000000022000 13:38:24 executing program 5: semctl$IPC_STAT(0x0, 0x0, 0x2, 0x0) [ 1248.135952] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1248.161531] syz-executor.3: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1248.175165] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1248.186469] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1248.206042] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 1248.211271] CPU: 0 PID: 28564 Comm: syz-executor.3 Not tainted 4.14.230-syzkaller #0 [ 1248.219243] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1248.228603] Call Trace: [ 1248.231201] dump_stack+0x1b2/0x281 [ 1248.234840] warn_alloc.cold+0x96/0x1cc [ 1248.238822] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1248.243850] ? zone_watermark_ok_safe+0x220/0x220 [ 1248.248710] __alloc_pages_nodemask+0x2127/0x2720 [ 1248.253556] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1248.258581] ? lock_acquire+0x170/0x3f0 [ 1248.262570] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1248.267437] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1248.272933] ? __mutex_unlock_slowpath+0x75/0x770 [ 1248.277883] alloc_pages_current+0x155/0x260 [ 1248.282311] ion_page_pool_alloc+0x118/0x1b0 [ 1248.286817] ion_system_heap_allocate+0x133/0x8c0 [ 1248.291678] ? ion_alloc+0x187/0x810 [ 1248.295407] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1248.300905] ? ion_system_contig_heap_create+0x130/0x130 [ 1248.306367] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1248.311407] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1248.316281] ion_alloc+0x204/0x810 [ 1248.319828] ? ion_dma_buf_release+0x40/0x40 [ 1248.324251] ? __might_fault+0x177/0x1b0 [ 1248.328322] ion_ioctl+0xea/0x1f0 [ 1248.331778] ? ion_query_heaps+0x360/0x360 [ 1248.336023] ? ion_query_heaps+0x360/0x360 [ 1248.340264] do_vfs_ioctl+0x75a/0xff0 [ 1248.344071] ? ioctl_preallocate+0x1a0/0x1a0 [ 1248.348489] ? lock_downgrade+0x740/0x740 [ 1248.352655] ? __fget+0x225/0x360 [ 1248.356114] ? do_vfs_ioctl+0xff0/0xff0 [ 1248.360096] ? security_file_ioctl+0x83/0xb0 [ 1248.364516] SyS_ioctl+0x7f/0xb0 [ 1248.367886] ? do_vfs_ioctl+0xff0/0xff0 [ 1248.371897] do_syscall_64+0x1d5/0x640 [ 1248.375800] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1248.380999] RIP: 0033:0x466459 [ 1248.384192] RSP: 002b:00007f68e77c2188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1248.391906] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1248.399211] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000005 [ 1248.406487] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1248.413771] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1248.421161] R13: 00007ffed7d489bf R14: 00007f68e77c2300 R15: 0000000000022000 13:38:24 executing program 5: ioctl$SIOCPNDELRESOURCE(0xffffffffffffffff, 0x89ef, &(0x7f0000000040)=0xffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) ioctl$sock_SIOCADDRT(r0, 0x890b, 0x0) semctl$SETVAL(0x0, 0x0, 0x10, 0x0) semctl$GETVAL(0x0, 0x0, 0xc, &(0x7f0000000180)=""/194) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$x25(0x9, 0x5, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x500, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x80000000, 0xa, 0x1}) [ 1248.447523] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1248.453859] Mem-Info: [ 1248.457243] active_anon:13011 inactive_anon:59564 isolated_anon:0 [ 1248.457243] active_file:2065 inactive_file:4584 isolated_file:2 [ 1248.457243] unevictable:0 dirty:57 writeback:0 unstable:0 [ 1248.457243] slab_reclaimable:11978 slab_unreclaimable:115164 [ 1248.457243] mapped:48571 shmem:60176 pagetables:767 bounce:0 [ 1248.457243] free:334428 free_pcp:185 free_cma:0 13:38:24 executing program 4 (fault-call:0 fault-nth:6): semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f00000000c0)=""/89) [ 1248.497822] device bridge_slave_1 left promiscuous mode [ 1248.524747] FAULT_INJECTION: forcing a failure. [ 1248.524747] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1248.534614] bridge0: port 2(bridge_slave_1) entered disabled state [ 1248.559888] CPU: 0 PID: 28579 Comm: syz-executor.4 Not tainted 4.14.230-syzkaller #0 [ 1248.567832] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1248.577200] Call Trace: [ 1248.579816] dump_stack+0x1b2/0x281 [ 1248.583458] should_fail.cold+0x10a/0x149 [ 1248.587624] __alloc_pages_nodemask+0x22c/0x2720 [ 1248.592428] ? trace_hardirqs_on+0x10/0x10 [ 1248.596687] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1248.601579] ? trace_hardirqs_on+0x10/0x10 [ 1248.605857] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1248.610740] ? __khugepaged_enter+0x24c/0x330 [ 1248.615250] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1248.620242] ? fs_reclaim_release+0xd0/0x110 [ 1248.624669] ? __pte_alloc+0x199/0x2c0 [ 1248.628581] ? lock_acquire+0x170/0x3f0 [ 1248.632570] ? lock_downgrade+0x740/0x740 [ 1248.636735] alloc_pages_vma+0xd2/0x6d0 [ 1248.640728] __handle_mm_fault+0x25fa/0x4620 [ 1248.645179] ? trace_hardirqs_on+0x10/0x10 [ 1248.649427] ? vm_insert_page+0x7c0/0x7c0 [ 1248.653592] ? mark_held_locks+0xa6/0xf0 [ 1248.657680] handle_mm_fault+0x455/0x9c0 [ 1248.661757] __do_page_fault+0x549/0xad0 [ 1248.665836] ? spurious_fault+0x640/0x640 [ 1248.669996] ? do_page_fault+0x60/0x500 [ 1248.673979] page_fault+0x25/0x50 [ 1248.677701] RIP: 0010:copy_user_enhanced_fast_string+0xe/0x20 [ 1248.683592] RSP: 0018:ffff888072b3fdc8 EFLAGS: 00010206 [ 1248.688966] RAX: ffffed100e567fd4 RBX: 0000000000000068 RCX: 0000000000000068 [ 1248.696271] RDX: 0000000000000068 RSI: ffff888072b3fe38 RDI: 00000000200000c0 [ 1248.703551] RBP: ffff888072b3fe38 R08: 0000000000000000 R09: ffffed100e567fd3 [ 1248.710829] R10: ffff888072b3fe9f R11: ffff88809862e1c0 R12: 00000000200000c0 [ 1248.718107] R13: 00007ffffffff000 R14: 0000000020000128 R15: ffff888094576240 [ 1248.725415] _copy_to_user+0xaa/0xd0 [ 1248.729143] SyS_semctl+0x164/0x220 [ 1248.732815] ? SyS_semget+0x170/0x170 [ 1248.736656] ? __do_page_fault+0x159/0xad0 [ 1248.740900] ? do_syscall_64+0x4c/0x640 [ 1248.745022] ? SyS_semget+0x170/0x170 [ 1248.748830] do_syscall_64+0x1d5/0x640 [ 1248.752729] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1248.757925] RIP: 0033:0x466459 [ 1248.761143] RSP: 002b:00007fee1a099188 EFLAGS: 00000246 ORIG_RAX: 0000000000000042 [ 1248.768860] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1248.776135] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 1248.783436] RBP: 00007fee1a0991d0 R08: 0000000000000000 R09: 0000000000000000 [ 1248.790714] R10: 00000000200000c0 R11: 0000000000000246 R12: 0000000000000001 [ 1248.798015] R13: 00007ffe6e91304f R14: 00007fee1a099300 R15: 0000000000022000 [ 1248.806906] device bridge_slave_0 left promiscuous mode [ 1248.812654] bridge0: port 1(bridge_slave_0) entered disabled state [ 1248.818518] Node 0 active_anon:51344kB inactive_anon:181488kB active_file:8328kB inactive_file:18408kB unevictable:0kB isolated(anon):0kB isolated(file):8kB mapped:159568kB dirty:224kB writeback:0kB shmem:183528kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1248.888361] device veth1_macvtap left promiscuous mode [ 1248.888936] Node 1 active_anon:800kB inactive_anon:56768kB active_file:32kB inactive_file:28kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:34816kB dirty:4kB writeback:0kB shmem:57176kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1248.913169] device veth0_macvtap left promiscuous mode [ 1248.959273] device veth1_vlan left promiscuous mode [ 1248.966636] Node 0 DMA free:12640kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1248.977471] device veth0_vlan left promiscuous mode [ 1248.999150] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1249.021253] Node 0 DMA32 free:881384kB min:36200kB low:45248kB high:54296kB active_anon:51256kB inactive_anon:181492kB active_file:8624kB inactive_file:18200kB unevictable:0kB writepending:236kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:7264kB pagetables:2792kB bounce:0kB free_pcp:1280kB local_pcp:580kB free_cma:0kB [ 1249.087174] lowmem_reserve[]: 0 0 0 0 0 [ 1249.095699] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1249.148915] lowmem_reserve[]: 0 0 0 0 0 [ 1249.157527] Node 1 Normal free:756172kB min:53696kB low:67120kB high:80544kB active_anon:768kB inactive_anon:56768kB active_file:32kB inactive_file:60kB unevictable:0kB writepending:4kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:288kB pagetables:216kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB [ 1249.218982] lowmem_reserve[]: 0 0 0 0 0 [ 1249.227605] Node 0 DMA: 22*4kB (UE) 39*8kB (U) 21*16kB (U) 16*32kB (UE) 1*64kB (E) 3*128kB (UE) 1*256kB (E) 2*512kB (UE) 2*1024kB (UE) 1*2048kB (M) 1*4096kB (M) = 11168kB [ 1249.260646] Node 0 DMA32: 9394*4kB (U) 16157*8kB (UE) 16735*16kB (UE) 10376*32kB (UE) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 766624kB [ 1249.289966] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1249.313423] Node 1 Normal: 701*4kB (UM) 1057*8kB (UM) 849*16kB (UM) 564*32kB (U) 1377*64kB (U) 2337*128kB (U) 286*256kB (U) 81*512kB (U) 1*1024kB (U) 0*2048kB 0*4096kB = 545868kB [ 1249.370970] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1249.380856] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1249.416802] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1249.459724] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1249.500234] 66968 total pagecache pages [ 1249.510908] 0 pages in swap cache [ 1249.525493] Swap cache stats: add 0, delete 0, find 0/0 [ 1249.530898] Free swap = 0kB [ 1249.542989] device hsr_slave_1 left promiscuous mode [ 1249.561209] Total swap = 0kB [ 1249.577682] device hsr_slave_0 left promiscuous mode [ 1249.583075] 2097051 pages RAM [ 1249.586200] 0 pages HighMem/MovableOnly [ 1249.590352] 363848 pages reserved [ 1249.617017] 0 pages cma reserved [ 1249.664407] team0 (unregistering): Port device team_slave_1 removed [ 1249.705679] team0 (unregistering): Port device team_slave_0 removed [ 1249.745508] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 1249.797229] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 1249.843354] syz-executor.0: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1249.860844] syz-executor.5: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1249.865371] syz-executor.1: [ 1249.878983] bond0 (unregistering): Released all slaves [ 1249.886453] page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1249.888597] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 1249.908146] CPU: 0 PID: 28577 Comm: syz-executor.5 Not tainted 4.14.230-syzkaller #0 [ 1249.913840] syz-executor.0 cpuset= [ 1249.916051] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1249.916060] Call Trace: [ 1249.916093] dump_stack+0x1b2/0x281 [ 1249.916111] warn_alloc.cold+0x96/0x1cc [ 1249.926535] / [ 1249.929024] ? zone_watermark_ok_safe+0x220/0x220 [ 1249.939507] mems_allowed=0-1 [ 1249.940944] __alloc_pages_nodemask+0x2127/0x2720 [ 1249.940963] ? lock_acquire+0x170/0x3f0 [ 1249.945953] syz-executor.1 cpuset= [ 1249.948920] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1249.948942] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1249.948954] ? __mutex_unlock_slowpath+0x75/0x770 [ 1249.948969] alloc_pages_current+0x155/0x260 [ 1249.970360] / [ 1249.971761] ion_page_pool_alloc+0x118/0x1b0 [ 1249.987146] ion_system_heap_allocate+0x133/0x8c0 [ 1249.990030] mems_allowed=0-1 [ 1249.991988] ? ion_alloc+0x187/0x810 [ 1249.992001] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1249.992011] ? ion_system_contig_heap_create+0x130/0x130 [ 1249.992021] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1249.992035] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1250.019839] ion_alloc+0x204/0x810 [ 1250.023388] ? ion_dma_buf_release+0x40/0x40 [ 1250.027816] ? __might_fault+0x177/0x1b0 [ 1250.031884] ion_ioctl+0xea/0x1f0 [ 1250.035372] ? ion_query_heaps+0x360/0x360 [ 1250.039620] ? ion_query_heaps+0x360/0x360 [ 1250.043872] do_vfs_ioctl+0x75a/0xff0 [ 1250.047682] ? ioctl_preallocate+0x1a0/0x1a0 [ 1250.052121] ? lock_downgrade+0x740/0x740 [ 1250.056301] ? __fget+0x225/0x360 [ 1250.059762] ? do_vfs_ioctl+0xff0/0xff0 [ 1250.063747] ? security_file_ioctl+0x83/0xb0 [ 1250.068172] SyS_ioctl+0x7f/0xb0 [ 1250.071542] ? do_vfs_ioctl+0xff0/0xff0 [ 1250.075552] do_syscall_64+0x1d5/0x640 [ 1250.079447] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1250.084646] RIP: 0033:0x466459 [ 1250.087833] RSP: 002b:00007f43ab040188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1250.095554] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1250.102830] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000005 [ 1250.110108] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1250.117385] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1250.124692] R13: 00007ffd3e8ef27f R14: 00007f43ab040300 R15: 0000000000022000 [ 1250.131989] CPU: 1 PID: 28562 Comm: syz-executor.0 Not tainted 4.14.230-syzkaller #0 [ 1250.135536] Mem-Info: [ 1250.139891] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1250.139902] Call Trace: [ 1250.142334] active_anon:13029 inactive_anon:59565 isolated_anon:0 [ 1250.142334] active_file:2370 inactive_file:4371 isolated_file:0 [ 1250.142334] unevictable:0 dirty:66 writeback:0 unstable:0 [ 1250.142334] slab_reclaimable:11978 slab_unreclaimable:113928 [ 1250.142334] mapped:57449 shmem:60176 pagetables:799 bounce:0 [ 1250.142334] free:165702 free_pcp:103 free_cma:0 [ 1250.151735] dump_stack+0x1b2/0x281 [ 1250.151749] warn_alloc.cold+0x96/0x1cc [ 1250.151760] ? zone_watermark_ok_safe+0x220/0x220 [ 1250.151782] __alloc_pages_nodemask+0x2127/0x2720 [ 1250.151792] ? _raw_spin_unlock_irq+0x5a/0x80 [ 1250.151801] ? finish_task_switch+0x178/0x610 [ 1250.151808] ? finish_task_switch+0x14d/0x610 [ 1250.151821] ? lock_acquire+0x170/0x3f0 [ 1250.151835] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1250.151850] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1250.151862] ? __mutex_unlock_slowpath+0x75/0x770 [ 1250.151876] ? alloc_pages_current+0x16/0x260 [ 1250.154556] Node 0 active_anon:51348kB inactive_anon:181492kB active_file:9448kB inactive_file:17424kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:194980kB dirty:260kB writeback:0kB shmem:183528kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1250.188253] alloc_pages_current+0x155/0x260 [ 1250.188270] ion_page_pool_alloc+0x118/0x1b0 [ 1250.188279] ion_system_heap_allocate+0x133/0x8c0 [ 1250.188289] ? ion_alloc+0x187/0x810 [ 1250.188298] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1250.188306] ? ion_system_contig_heap_create+0x130/0x130 [ 1250.188314] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1250.188324] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1250.188333] ion_alloc+0x204/0x810 [ 1250.188345] ? ion_dma_buf_release+0x40/0x40 [ 1250.188356] ? __might_fault+0x177/0x1b0 [ 1250.188366] ion_ioctl+0xea/0x1f0 [ 1250.188374] ? ion_query_heaps+0x360/0x360 [ 1250.188392] ? ion_query_heaps+0x360/0x360 [ 1250.188402] do_vfs_ioctl+0x75a/0xff0 [ 1250.188415] ? ioctl_preallocate+0x1a0/0x1a0 [ 1250.192115] Node 1 active_anon:768kB inactive_anon:56768kB active_file:32kB inactive_file:60kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:34816kB dirty:4kB writeback:0kB shmem:57176kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1250.196018] ? lock_downgrade+0x740/0x740 [ 1250.196033] ? __fget+0x225/0x360 [ 1250.196043] ? do_vfs_ioctl+0xff0/0xff0 [ 1250.196055] ? security_file_ioctl+0x83/0xb0 [ 1250.196064] SyS_ioctl+0x7f/0xb0 [ 1250.196072] ? do_vfs_ioctl+0xff0/0xff0 [ 1250.196083] do_syscall_64+0x1d5/0x640 [ 1250.196097] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1250.196104] RIP: 0033:0x466459 [ 1250.196109] RSP: 002b:00007f141b2c2188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1250.196130] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1250.201211] Node 0 [ 1250.205801] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000005 [ 1250.205807] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1250.205811] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1250.205816] R13: 00007fff5a5b1ccf R14: 00007f141b2c2300 R15: 0000000000022000 [ 1250.218935] CPU: 1 PID: 28563 Comm: syz-executor.1 Not tainted 4.14.230-syzkaller #0 [ 1250.223408] DMA free:11104kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1250.223593] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1250.228432] lowmem_reserve[]: [ 1250.233874] Call Trace: [ 1250.233900] dump_stack+0x1b2/0x281 [ 1250.233914] warn_alloc.cold+0x96/0x1cc [ 1250.233925] ? zone_watermark_ok_safe+0x220/0x220 [ 1250.233947] __alloc_pages_nodemask+0x2127/0x2720 [ 1250.233963] ? lock_acquire+0x170/0x3f0 [ 1250.233976] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1250.233993] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1250.234004] ? __mutex_unlock_slowpath+0x75/0x770 [ 1250.234019] alloc_pages_current+0x155/0x260 [ 1250.234031] ion_page_pool_alloc+0x118/0x1b0 [ 1250.234040] ion_system_heap_allocate+0x133/0x8c0 [ 1250.234050] ? ion_alloc+0x187/0x810 [ 1250.234060] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1250.234069] ? ion_system_contig_heap_create+0x130/0x130 [ 1250.234080] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1250.234090] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1250.234100] ion_alloc+0x204/0x810 [ 1250.234113] ? ion_dma_buf_release+0x40/0x40 [ 1250.234124] ? __might_fault+0x177/0x1b0 [ 1250.234136] ion_ioctl+0xea/0x1f0 [ 1250.234144] ? ion_query_heaps+0x360/0x360 [ 1250.234156] ? ion_query_heaps+0x360/0x360 [ 1250.234167] do_vfs_ioctl+0x75a/0xff0 [ 1250.234177] ? ioctl_preallocate+0x1a0/0x1a0 [ 1250.234185] ? lock_downgrade+0x740/0x740 [ 1250.234198] ? __fget+0x225/0x360 [ 1250.234207] ? do_vfs_ioctl+0xff0/0xff0 [ 1250.234219] ? security_file_ioctl+0x83/0xb0 [ 1250.234229] SyS_ioctl+0x7f/0xb0 [ 1250.234237] ? do_vfs_ioctl+0xff0/0xff0 [ 1250.234248] do_syscall_64+0x1d5/0x640 [ 1250.234262] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1250.234270] RIP: 0033:0x466459 [ 1250.234274] RSP: 002b:00007feb59368188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1250.234285] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1250.234290] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000005 [ 1250.234295] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1250.234301] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1250.234306] R13: 00007ffe56f14bcf R14: 00007feb59368300 R15: 0000000000022000 [ 1250.690958] 0 2717 2718 2718 2718 [ 1250.695197] Node 0 DMA32 free:308084kB min:36200kB low:45248kB high:54296kB active_anon:51408kB inactive_anon:181492kB active_file:9524kB inactive_file:17388kB unevictable:0kB writepending:260kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:7232kB pagetables:2944kB bounce:0kB free_pcp:468kB local_pcp:384kB free_cma:0kB [ 1250.733774] lowmem_reserve[]: 0 0 0 0 0 [ 1250.737808] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1250.765515] lowmem_reserve[]: 0 0 0 0 0 [ 1250.769536] Node 1 Normal free:53712kB min:53696kB low:67120kB high:80544kB active_anon:768kB inactive_anon:56768kB active_file:32kB inactive_file:60kB unevictable:0kB writepending:4kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:288kB pagetables:216kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1250.799103] lowmem_reserve[]: 0 0 0 0 0 [ 1250.804343] Node 0 DMA: 22*4kB (UE) 39*8kB (U) 21*16kB (U) 16*32kB (UE) 2*64kB (UE) 2*128kB (UE) 1*256kB (E) 2*512kB (UE) 2*1024kB (UE) 1*2048kB (M) 1*4096kB (M) = 11104kB [ 1250.833004] Node 0 DMA32: 57*4kB (M) 31*8kB (ME) 2*16kB (ME) 6573*32kB (UE) 53*64kB (U) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 214236kB [ 1250.863233] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1250.883572] Node 1 Normal: 700*4kB (UM) 1056*8kB (UM) 848*16kB (UM) 564*32kB (U) 12*64kB (UM) 5*128kB (M) 1*256kB (M) 16*512kB (U) 1*1024kB (U) 0*2048kB 0*4096kB = 53744kB [ 1250.909448] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1250.920373] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1250.936842] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1251.003558] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1251.036590] 66849 total pagecache pages [ 1251.040607] 0 pages in swap cache [ 1251.054334] Swap cache stats: add 0, delete 0, find 0/0 [ 1251.059785] Free swap = 0kB [ 1251.062805] Total swap = 0kB [ 1251.073629] 2097051 pages RAM [ 1251.076759] 0 pages HighMem/MovableOnly [ 1251.080754] 363848 pages reserved [ 1251.097388] 0 pages cma reserved [ 1251.565629] systemd-journal invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1251.619320] systemd-journal cpuset=/ mems_allowed=0-1 [ 1251.635787] CPU: 0 PID: 28495 Comm: systemd-journal Not tainted 4.14.230-syzkaller #0 [ 1251.643814] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1251.653193] Call Trace: [ 1251.655810] dump_stack+0x1b2/0x281 [ 1251.659438] dump_header+0x178/0x82f [ 1251.663157] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1251.668261] ? ___ratelimit+0x2cd/0x530 [ 1251.672240] oom_kill_process.cold+0x10/0xa40 [ 1251.676748] out_of_memory+0xe3e/0x1190 [ 1251.680724] ? oom_killer_disable+0x1c0/0x1c0 [ 1251.685218] ? mutex_trylock+0x152/0x1a0 [ 1251.689308] __alloc_pages_nodemask+0x23e1/0x2720 [ 1251.694168] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1251.699046] alloc_pages_current+0x155/0x260 [ 1251.703459] filemap_fault+0x11a1/0x1ad0 [ 1251.707530] ext4_filemap_fault+0x84/0xb0 [ 1251.711679] __do_fault+0xfa/0x380 [ 1251.715238] __handle_mm_fault+0x2497/0x4620 [ 1251.719664] ? vm_insert_page+0x7c0/0x7c0 [ 1251.723820] ? mark_held_locks+0xa6/0xf0 [ 1251.727881] handle_mm_fault+0x455/0x9c0 [ 1251.731943] __do_page_fault+0x549/0xad0 [ 1251.736021] ? spurious_fault+0x640/0x640 [ 1251.740182] ? do_page_fault+0x60/0x500 [ 1251.744174] ? page_fault+0x2f/0x50 [ 1251.747797] page_fault+0x45/0x50 [ 1251.751246] RIP: 0001:0xffffffffffffffff [ 1251.755299] RSP: e32061e0:00007ffe09b77dd0 EFLAGS: 7ffe09b77be0 [ 1251.771662] Mem-Info: [ 1251.780309] active_anon:13109 inactive_anon:59568 isolated_anon:0 [ 1251.780309] active_file:35 inactive_file:0 isolated_file:0 [ 1251.780309] unevictable:0 dirty:15 writeback:10 unstable:0 [ 1251.780309] slab_reclaimable:11970 slab_unreclaimable:113352 [ 1251.780309] mapped:52709 shmem:60179 pagetables:812 bounce:0 [ 1251.780309] free:25241 free_pcp:0 free_cma:0 [ 1251.836084] Node 0 active_anon:51660kB inactive_anon:181504kB active_file:36kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:176020kB dirty:56kB writeback:40kB shmem:183540kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1251.881874] Node 1 active_anon:776kB inactive_anon:56768kB active_file:4kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:34816kB dirty:4kB writeback:0kB shmem:57176kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1251.934858] Node 0 DMA free:11076kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1252.049579] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1252.054732] Node 0 DMA32 free:35976kB min:36200kB low:45248kB high:54296kB active_anon:51636kB inactive_anon:181504kB active_file:64kB inactive_file:60kB unevictable:0kB writepending:0kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:7232kB pagetables:2944kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1252.093031] lowmem_reserve[]: 0 0 0 0 0 [ 1252.097059] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1252.132257] lowmem_reserve[]: 0 0 0 0 0 [ 1252.136360] Node 1 Normal free:53612kB min:53696kB low:67120kB high:80544kB active_anon:776kB inactive_anon:56768kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:256kB pagetables:216kB bounce:0kB free_pcp:120kB local_pcp:120kB free_cma:0kB [ 1252.175231] lowmem_reserve[]: 0 0 0 0 0 [ 1252.179251] Node 0 DMA: 15*4kB (UE) 39*8kB (U) 21*16kB (U) 16*32kB (UE) 2*64kB (UE) 2*128kB (UE) 1*256kB (E) 2*512kB (UE) 2*1024kB (UE) 1*2048kB (M) 1*4096kB (M) = 11076kB [ 1252.204414] Node 0 DMA32: 874*4kB (UME) 194*8kB (ME) 111*16kB (ME) 731*32kB (UME) 72*64kB (UM) 5*128kB (M) 2*256kB (M) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 35976kB [ 1252.228872] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1252.242222] Node 1 Normal: 643*4kB (UM) 1052*8kB (UM) 848*16kB (UM) 562*32kB (U) 15*64kB (UM) 5*128kB (M) 1*256kB (M) 16*512kB (U) 1*1024kB (U) 0*2048kB 0*4096kB = 53612kB [ 1252.267531] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1252.281214] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1252.300139] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1252.309707] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1252.328258] 60212 total pagecache pages [ 1252.332263] 0 pages in swap cache [ 1252.338241] Swap cache stats: add 0, delete 0, find 0/0 [ 1252.350772] Free swap = 0kB [ 1252.356345] Total swap = 0kB [ 1252.359394] 2097051 pages RAM [ 1252.362522] 0 pages HighMem/MovableOnly [ 1252.376112] 363848 pages reserved [ 1252.379598] 0 pages cma reserved [ 1252.387866] Out of memory (oom_kill_allocating_task): Kill process 28495 (systemd-journal) score 0 or sacrifice child [ 1252.403705] Killed process 28495 (systemd-journal) total-vm:46096kB, anon-rss:472kB, file-rss:4kB, shmem-rss:1900kB [ 1252.417589] oom_reaper: reaped process 28495 (systemd-journal), now anon-rss:0kB, file-rss:0kB, shmem-rss:1900kB [ 1252.441351] syz-fuzzer invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1252.507338] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 1252.512220] CPU: 1 PID: 7981 Comm: syz-fuzzer Not tainted 4.14.230-syzkaller #0 [ 1252.519672] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1252.530855] Call Trace: [ 1252.533454] dump_stack+0x1b2/0x281 [ 1252.537087] dump_header+0x178/0x82f [ 1252.540896] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1252.546002] ? ___ratelimit+0x2cd/0x530 [ 1252.549989] oom_kill_process.cold+0x10/0xa40 [ 1252.554499] out_of_memory+0xe3e/0x1190 [ 1252.558747] ? oom_killer_disable+0x1c0/0x1c0 [ 1252.563250] ? mutex_trylock+0x152/0x1a0 [ 1252.567314] __alloc_pages_nodemask+0x23e1/0x2720 [ 1252.572174] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1252.577036] alloc_pages_current+0x155/0x260 [ 1252.581546] filemap_fault+0x11a1/0x1ad0 [ 1252.585618] ext4_filemap_fault+0x84/0xb0 [ 1252.589767] __do_fault+0xfa/0x380 [ 1252.593351] __handle_mm_fault+0x2497/0x4620 [ 1252.597804] ? vm_insert_page+0x7c0/0x7c0 [ 1252.602107] ? mark_held_locks+0xa6/0xf0 [ 1252.606179] handle_mm_fault+0x455/0x9c0 [ 1252.610365] __do_page_fault+0x549/0xad0 [ 1252.614461] ? spurious_fault+0x640/0x640 [ 1252.618622] ? do_page_fault+0x60/0x500 [ 1252.622633] ? page_fault+0x2f/0x50 [ 1252.626368] page_fault+0x45/0x50 [ 1252.629827] RIP: 2a8c00:0x80c000a8e000 [ 1252.633047] syz-executor.3: [ 1252.633722] RSP: 03e7:000000c0003dde40 EFLAGS: 00000003 [ 1252.636753] page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1252.659953] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 1252.665264] CPU: 0 PID: 28564 Comm: syz-executor.3 Not tainted 4.14.230-syzkaller #0 [ 1252.665997] Mem-Info: [ 1252.673153] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1252.673159] Call Trace: [ 1252.673182] dump_stack+0x1b2/0x281 [ 1252.673196] warn_alloc.cold+0x96/0x1cc [ 1252.673206] ? led_trigger_register+0x60/0x3d0 [ 1252.673217] ? zone_watermark_ok_safe+0x220/0x220 [ 1252.673227] ? usleep_range+0x130/0x130 [ 1252.673240] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1252.692957] active_anon:13003 inactive_anon:59568 isolated_anon:0 [ 1252.692957] active_file:17 inactive_file:11 isolated_file:0 [ 1252.692957] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1252.692957] slab_reclaimable:11969 slab_unreclaimable:113326 [ 1252.692957] mapped:52249 shmem:60180 pagetables:790 bounce:0 [ 1252.692957] free:13947 free_pcp:60 free_cma:0 [ 1252.695245] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1252.699956] Node 0 active_anon:51236kB inactive_anon:181504kB active_file:64kB inactive_file:44kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:174180kB dirty:0kB writeback:0kB shmem:183544kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1252.704792] ? run_timer_softirq+0x5a0/0x5a0 [ 1252.704811] __alloc_pages_nodemask+0x2127/0x2720 [ 1252.704828] ? lock_acquire+0x170/0x3f0 [ 1252.704842] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1252.704855] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1252.717811] Node 1 active_anon:776kB inactive_anon:56768kB active_file:4kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:34816kB dirty:0kB writeback:0kB shmem:57176kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1252.747286] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1252.747299] ? retint_kernel+0x2d/0x2d [ 1252.747313] alloc_pages_current+0x155/0x260 [ 1252.747327] ion_page_pool_alloc+0x118/0x1b0 [ 1252.747335] ion_system_heap_allocate+0x133/0x8c0 [ 1252.747345] ? ion_alloc+0x187/0x810 [ 1252.747356] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1252.747368] ? ion_system_contig_heap_create+0x130/0x130 [ 1252.752435] Node 0 [ 1252.780616] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1252.780630] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1252.780641] ion_alloc+0x204/0x810 [ 1252.780654] ? ion_dma_buf_release+0x40/0x40 [ 1252.780666] ? __might_fault+0x177/0x1b0 [ 1252.780677] ion_ioctl+0xea/0x1f0 [ 1252.785174] DMA free:10964kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1252.789955] ? ion_query_heaps+0x360/0x360 [ 1252.794243] lowmem_reserve[]: [ 1252.799040] ? ion_query_heaps+0x360/0x360 [ 1252.803610] 0 [ 1252.830640] do_vfs_ioctl+0x75a/0xff0 [ 1252.830653] ? ioctl_preallocate+0x1a0/0x1a0 [ 1252.830663] ? lock_downgrade+0x740/0x740 [ 1252.830675] ? __fget+0x225/0x360 [ 1252.830683] ? do_vfs_ioctl+0xff0/0xff0 [ 1252.830698] ? security_file_ioctl+0x83/0xb0 [ 1252.836197] 2717 [ 1252.840040] SyS_ioctl+0x7f/0xb0 [ 1252.844486] 2718 [ 1252.848846] ? do_vfs_ioctl+0xff0/0xff0 [ 1252.853730] 2718 [ 1252.857387] do_syscall_64+0x1d5/0x640 [ 1252.857423] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1252.862951] 2718 [ 1252.868368] RIP: 0033:0x466459 [ 1252.875950] RSP: 002b:00007f68e77c2188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1252.875962] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1252.875966] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000005 [ 1252.875971] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1252.875975] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1252.875980] R13: 00007ffed7d489bf R14: 00007f68e77c2300 R15: 0000000000022000 [ 1252.884006] warn_alloc_show_mem: 2 callbacks suppressed [ 1252.884010] Mem-Info: [ 1252.899193] Node 0 [ 1252.930332] active_anon:13003 inactive_anon:59568 isolated_anon:0 [ 1252.930332] active_file:17 inactive_file:11 isolated_file:0 [ 1252.930332] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1252.930332] slab_reclaimable:11969 slab_unreclaimable:113326 [ 1252.930332] mapped:52249 shmem:60180 pagetables:790 bounce:0 [ 1252.930332] free:13947 free_pcp:60 free_cma:0 [ 1252.943549] DMA32 free:17992kB min:36200kB low:45248kB high:54296kB active_anon:51236kB inactive_anon:181504kB active_file:24kB inactive_file:44kB unevictable:0kB writepending:0kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:7232kB pagetables:2944kB bounce:0kB free_pcp:120kB local_pcp:0kB free_cma:0kB [ 1252.951987] Node 0 active_anon:51236kB inactive_anon:181504kB active_file:64kB inactive_file:44kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:174180kB dirty:0kB writeback:0kB shmem:183544kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1252.965057] lowmem_reserve[]: [ 1252.975011] Node 1 active_anon:776kB inactive_anon:56768kB active_file:4kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:34816kB dirty:0kB writeback:0kB shmem:57176kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1252.986385] 0 [ 1252.992515] Node 0 [ 1253.009412] 0 [ 1253.018652] Bluetooth: hci2 command 0x0409 tx timeout [ 1253.031717] 0 [ 1253.040929] DMA free:10964kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1253.058925] 0 [ 1253.085774] lowmem_reserve[]: [ 1253.132147] 0 [ 1253.147127] 0 [ 1253.193678] 2717 2718 2718 2718 [ 1253.230367] Node 0 [ 1253.232595] Node 0 [ 1253.232616] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1253.234914] DMA32 free:18660kB min:36200kB low:45248kB high:54296kB active_anon:51176kB inactive_anon:181500kB active_file:60kB inactive_file:64kB unevictable:0kB writepending:0kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:7200kB pagetables:2852kB bounce:0kB free_pcp:204kB local_pcp:124kB free_cma:0kB [ 1253.234917] lowmem_reserve[]: 0 0 0 0 0 [ 1253.234941] Node 0 [ 1253.244312] lowmem_reserve[]: [ 1253.271568] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1253.301160] 0 [ 1253.335761] lowmem_reserve[]: [ 1253.337260] 0 [ 1253.337593] 0 [ 1253.340713] 0 [ 1253.342668] 0 0 [ 1253.350566] 0 [ 1253.351318] 0 [ 1253.352563] 0 [ 1253.359766] 0 [ 1253.368777] Node 1 Normal free:26856kB min:53696kB low:67120kB high:80544kB active_anon:768kB inactive_anon:56768kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:256kB pagetables:212kB bounce:0kB free_pcp:120kB local_pcp:120kB free_cma:0kB [ 1253.369787] Node 1 [ 1253.404708] lowmem_reserve[]: 0 0 0 0 0 [ 1253.410679] Normal free:26856kB min:53696kB low:67120kB high:80544kB active_anon:768kB inactive_anon:56768kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:256kB pagetables:212kB bounce:0kB free_pcp:120kB local_pcp:0kB free_cma:0kB [ 1253.412296] Node 0 DMA: 5*4kB (UE) 30*8kB (U) 21*16kB (U) 16*32kB (UE) 2*64kB (UE) 2*128kB (UE) 1*256kB (E) 2*512kB (UE) 2*1024kB (UE) 1*2048kB (M) 1*4096kB (M) = 10964kB [ 1253.475202] Node 0 DMA32: 889*4kB (ME) 200*8kB (UME) 116*16kB (UME) 172*32kB (UME) 75*64kB (UM) 7*128kB (UM) 2*256kB (M) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18724kB [ 1253.498157] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1253.509180] Node 1 Normal: 4*4kB (M) 1*8kB (M) 3*16kB (UM) 489*32kB (U) 16*64kB (UM) 5*128kB (M) 1*256kB (M) 16*512kB (U) 1*1024kB (U) 0*2048kB 0*4096kB = 26856kB [ 1253.531266] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1253.540239] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1253.545322] lowmem_reserve[]: 0 0 0 0 0 [ 1253.552866] Node 0 [ 1253.555874] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1253.566979] DMA: 5*4kB (UE) 30*8kB (U) 21*16kB (U) 16*32kB (UE) 2*64kB (UE) 2*128kB (UE) 1*256kB (E) 2*512kB (UE) 2*1024kB (UE) 1*2048kB (M) 1*4096kB (M) = 10964kB [ 1253.570173] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1253.601571] 60212 total pagecache pages [ 1253.605610] Node 0 DMA32: 889*4kB (ME) 356*8kB (UME) 118*16kB (UME) 174*32kB (UME) 76*64kB (UM) 7*128kB (UM) 2*256kB (M) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 20132kB [ 1253.609575] IPVS: ftp: loaded support on port[0] = 21 [ 1253.634732] 0 pages in swap cache [ 1253.637550] Node 0 [ 1253.638254] Swap cache stats: add 0, delete 0, find 0/0 [ 1253.638264] Normal: [ 1253.640492] Free swap = 0kB [ 1253.658379] Total swap = 0kB [ 1253.658443] 0*4kB 0*8kB [ 1253.661439] 2097051 pages RAM [ 1253.661445] 0 pages HighMem/MovableOnly [ 1253.669570] 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1253.681694] 363848 pages reserved [ 1253.685231] 0 pages cma reserved [ 1253.686857] Node 1 Normal: 4*4kB (M) 1*8kB (M) 3*16kB (UM) 489*32kB (U) 16*64kB (UM) 5*128kB (M) 1*256kB (M) 16*512kB (U) 1*1024kB (U) 0*2048kB 0*4096kB = 26856kB [ 1253.727993] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1253.751298] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1253.787579] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1253.818656] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1253.856896] 62247 total pagecache pages [ 1253.865114] 0 pages in swap cache [ 1253.869070] Swap cache stats: add 0, delete 0, find 0/0 [ 1253.878704] systemd[1]: systemd-journald.service: Failed with result 'signal'. [ 1253.879473] Free swap = 0kB [ 1253.889988] Total swap = 0kB [ 1253.895026] systemd[1]: systemd-journald.service: Service has no hold-off time, scheduling restart. [ 1253.897271] 2097051 pages RAM [ 1253.907887] 0 pages HighMem/MovableOnly [ 1253.912721] 363848 pages reserved [ 1253.916682] systemd[1]: Stopped Journal Service. [ 1253.920450] 0 pages cma reserved [ 1253.925841] Out of memory (oom_kill_allocating_task): Kill process 7981 (syz-fuzzer) score 0 or sacrifice child [ 1253.941557] Killed process 28287 (syz-executor.5) total-vm:84924kB, anon-rss:64kB, file-rss:0kB, shmem-rss:0kB [ 1253.952374] systemd[1]: Starting Journal Service... [ 1253.970374] oom_reaper: reaped process 28564 (syz-executor.3), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1254.246057] systemd-journal invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=0 [ 1254.258327] systemd-journal cpuset=/ mems_allowed=0-1 [ 1254.268135] CPU: 0 PID: 28595 Comm: systemd-journal Not tainted 4.14.230-syzkaller #0 [ 1254.276123] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1254.285482] Call Trace: [ 1254.288084] dump_stack+0x1b2/0x281 [ 1254.291718] dump_header+0x178/0x82f [ 1254.295436] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1254.300548] ? ___ratelimit+0x2cd/0x530 [ 1254.304530] oom_kill_process.cold+0x10/0xa40 [ 1254.309038] out_of_memory+0xe3e/0x1190 [ 1254.313038] ? oom_killer_disable+0x1c0/0x1c0 [ 1254.317537] ? mutex_trylock+0x152/0x1a0 [ 1254.321599] __alloc_pages_nodemask+0x23e1/0x2720 [ 1254.326461] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1254.331860] ? cache_grow_begin+0x3f/0x700 [ 1254.336106] cache_grow_begin+0x91/0x700 [ 1254.340175] fallback_alloc+0x207/0x2c0 [ 1254.344159] kmem_cache_alloc+0x1e5/0x3c0 [ 1254.348347] getname_flags+0xc8/0x550 [ 1254.352264] do_sys_open+0x1ce/0x410 [ 1254.355981] ? filp_open+0x60/0x60 [ 1254.359529] ? do_syscall_64+0x4c/0x640 [ 1254.363672] ? do_sys_open+0x410/0x410 [ 1254.367558] do_syscall_64+0x1d5/0x640 [ 1254.371518] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1254.376693] RIP: 0033:0x7fc1d7cf99b1 [ 1254.380399] RSP: 002b:00007fff38481418 EFLAGS: 00000202 ORIG_RAX: 0000000000000002 [ 1254.388220] RAX: ffffffffffffffda RBX: 00007fff38481520 RCX: 00007fc1d7cf99b1 [ 1254.395474] RDX: 0000000000000001 RSI: 0000000000090800 RDI: 0000557a24e293fe [ 1254.402746] RBP: 000000000000000a R08: 0000557a259c8229 R09: 0000000000000020 [ 1254.410026] R10: 0000000000000000 R11: 0000000000000202 R12: 0000557a259c8200 [ 1254.417296] R13: 000000000000000b R14: 0000557a24e293a0 R15: 0000000000000000 [ 1254.444037] Mem-Info: [ 1254.446483] active_anon:13043 inactive_anon:59567 isolated_anon:0 [ 1254.446483] active_file:28 inactive_file:10 isolated_file:0 [ 1254.446483] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1254.446483] slab_reclaimable:11952 slab_unreclaimable:112714 [ 1254.446483] mapped:52251 shmem:60180 pagetables:744 bounce:0 [ 1254.446483] free:18373 free_pcp:0 free_cma:0 [ 1254.469936] syz-executor.3: [ 1254.482524] Node 0 active_anon:51204kB inactive_anon:181500kB active_file:104kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:174100kB dirty:0kB writeback:0kB shmem:183544kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1254.498902] page allocation failure: order:4 [ 1254.518212] Node 1 active_anon:968kB inactive_anon:56768kB active_file:8kB inactive_file:32kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:34904kB dirty:0kB writeback:0kB shmem:57176kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1254.527320] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1254.557466] Node 0 [ 1254.562024] syz-executor.3 cpuset= [ 1254.562041] DMA free:10988kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:4kB inactive_file:24kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1254.562047] lowmem_reserve[]: [ 1254.566559] / [ 1254.570184] 0 [ 1254.598001] mems_allowed=0-1 [ 1254.603434] CPU: 1 PID: 28564 Comm: syz-executor.3 Not tainted 4.14.230-syzkaller #0 [ 1254.606561] 2717 [ 1254.611315] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1254.611323] Call Trace: [ 1254.616654] 2718 [ 1254.622832] dump_stack+0x1b2/0x281 [ 1254.629929] 2718 2718 [ 1254.631055] warn_alloc.cold+0x96/0x1cc [ 1254.631069] ? zone_watermark_ok_safe+0x220/0x220 [ 1254.636825] Node 0 [ 1254.637529] __alloc_pages_nodemask+0x2127/0x2720 [ 1254.642349] DMA32 free:35308kB min:36200kB low:45248kB high:54296kB active_anon:51204kB inactive_anon:181500kB active_file:424kB inactive_file:260kB unevictable:0kB writepending:0kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:7168kB pagetables:2764kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1254.644573] ? trace_hardirqs_on+0x10/0x10 [ 1254.644586] ? check_preemption_disabled+0x35/0x240 [ 1254.644597] ? lock_acquire+0x170/0x3f0 [ 1254.644612] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1254.644628] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1254.644641] ? __mutex_unlock_slowpath+0x75/0x770 [ 1254.644656] alloc_pages_current+0x155/0x260 [ 1254.656692] lowmem_reserve[]: [ 1254.677693] ion_page_pool_alloc+0x118/0x1b0 [ 1254.677704] ion_system_heap_allocate+0x133/0x8c0 [ 1254.677717] ? _raw_spin_unlock+0x29/0x40 [ 1254.677724] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1254.677733] ? ion_system_contig_heap_create+0x130/0x130 [ 1254.677743] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1254.677754] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1254.677763] ion_alloc+0x27a/0x810 [ 1254.677775] ? ion_dma_buf_release+0x40/0x40 [ 1254.677787] ? __might_fault+0x177/0x1b0 [ 1254.677798] ion_ioctl+0xea/0x1f0 [ 1254.677807] ? ion_query_heaps+0x360/0x360 [ 1254.677818] ? ion_query_heaps+0x360/0x360 [ 1254.677828] do_vfs_ioctl+0x75a/0xff0 [ 1254.677841] ? ioctl_preallocate+0x1a0/0x1a0 [ 1254.688693] 0 [ 1254.691072] ? lock_downgrade+0x740/0x740 [ 1254.695989] 0 [ 1254.701391] ? __fget+0x225/0x360 [ 1254.714095] 0 [ 1254.718141] ? do_vfs_ioctl+0xff0/0xff0 [ 1254.729571] 0 [ 1254.732311] ? security_file_ioctl+0x83/0xb0 [ 1254.739681] 0 [ 1254.743096] SyS_ioctl+0x7f/0xb0 [ 1254.743107] ? do_vfs_ioctl+0xff0/0xff0 [ 1254.743120] do_syscall_64+0x1d5/0x640 [ 1254.743135] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1254.743144] RIP: 0033:0x466459 [ 1254.743149] RSP: 002b:00007f68e77c2188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1254.743159] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1254.743165] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000005 [ 1254.743170] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1254.743178] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1254.759995] R13: 00007ffed7d489bf R14: 00007f68e77c2300 R15: 0000000000022000 [ 1254.768877] Node 0 [ 1254.781509] Mem-Info: [ 1254.791681] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1254.791687] lowmem_reserve[]: [ 1254.800202] active_anon:13043 inactive_anon:59567 isolated_anon:0 [ 1254.800202] active_file:23 inactive_file:10 isolated_file:0 [ 1254.800202] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1254.800202] slab_reclaimable:11952 slab_unreclaimable:112714 [ 1254.800202] mapped:52251 shmem:60180 pagetables:744 bounce:0 [ 1254.800202] free:18229 free_pcp:0 free_cma:0 [ 1254.813500] 0 [ 1254.823850] Node 0 active_anon:51204kB inactive_anon:181500kB active_file:84kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:174100kB dirty:0kB writeback:0kB shmem:183544kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1254.835274] 0 [ 1254.846472] Node 1 active_anon:968kB inactive_anon:56768kB active_file:8kB inactive_file:32kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:34904kB dirty:0kB writeback:0kB shmem:57176kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1254.859811] 0 [ 1254.869103] Node 0 [ 1254.881379] 0 [ 1254.907153] DMA free:10988kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1254.947707] 0 [ 1254.976305] lowmem_reserve[]: [ 1255.034934] 0 2717 2718 2718 2718 [ 1255.038552] Node 0 DMA32 free:34988kB min:36200kB low:45248kB high:54296kB active_anon:51204kB inactive_anon:181500kB active_file:60kB inactive_file:48kB unevictable:0kB writepending:0kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:7168kB pagetables:2764kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB [ 1255.046802] Node 1 [ 1255.071979] lowmem_reserve[]: 0 0 0 0 0 [ 1255.078256] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1255.079276] Normal free:26620kB min:53696kB low:67120kB high:80544kB active_anon:968kB inactive_anon:56768kB active_file:28kB inactive_file:4kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:288kB pagetables:212kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1255.109870] lowmem_reserve[]: 0 0 0 0 0 [ 1255.142227] Node 1 Normal free:26972kB min:53696kB low:67120kB high:80544kB active_anon:968kB inactive_anon:56768kB active_file:8kB inactive_file:8kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:288kB pagetables:212kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1255.147559] lowmem_reserve[]: [ 1255.175453] lowmem_reserve[]: 0 0 0 0 0 [ 1255.182562] Node 0 DMA: 5*4kB (ME) 2*8kB (UM) 2*16kB (UM) 14*32kB (UME) 6*64kB (UME) 7*128kB (UME) 2*256kB (ME) 3*512kB (UME) 3*1024kB (UME) 0*2048kB 1*4096kB (M) = 11012kB [ 1255.182966] Bluetooth: hci2 command 0x041b tx timeout [ 1255.207906] 0 0 0 0 0 [ 1255.209483] Node 0 [ 1255.210424] Node 0 [ 1255.210432] DMA32: [ 1255.212642] DMA: 5*4kB [ 1255.217068] 949*4kB [ 1255.217243] (ME) [ 1255.219703] (UME) [ 1255.222007] 2*8kB (UM) 2*16kB (UM) 14*32kB (UME) 6*64kB (UME) 7*128kB (UME) 2*256kB (ME) 3*512kB (UME) 3*1024kB (UME) 0*2048kB 1*4096kB (M) = 11012kB [ 1255.237665] 208*8kB (UME) 1155*16kB (UME) 351*32kB (UME) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 35172kB [ 1255.239937] Node 0 DMA32: 949*4kB (UME) 208*8kB (UME) 1155*16kB (UME) 351*32kB (UME) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 35172kB [ 1255.266994] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1255.270160] Node 0 [ 1255.277898] Node 1 Normal: 15*4kB (UM) 12*8kB (UM) 72*16kB (UM) 360*32kB (UM) 13*64kB (UM) 38*128kB (UM) 5*256kB (UM) 14*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 26972kB [ 1255.291866] Normal: [ 1255.296096] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1255.296103] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1255.296109] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1255.296115] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1255.296118] 60212 total pagecache pages [ 1255.296127] 0 pages in swap cache [ 1255.296132] Swap cache stats: add 0, delete 0, find 0/0 [ 1255.296135] Free swap = 0kB [ 1255.296138] Total swap = 0kB [ 1255.296149] 2097051 pages RAM [ 1255.314427] 0*4kB [ 1255.315962] 0 pages HighMem/MovableOnly [ 1255.340559] 0*8kB [ 1255.340804] 363848 pages reserved [ 1255.353943] 0*16kB [ 1255.355327] 0 pages cma reserved [ 1255.357417] 0*32kB [ 1255.361399] Out of memory (oom_kill_allocating_task): Kill process 28595 (systemd-journal) score 0 or sacrifice child [ 1255.377287] 0*64kB [ 1255.387883] Killed process 28595 (systemd-journal) total-vm:37896kB, anon-rss:380kB, file-rss:0kB, shmem-rss:0kB [ 1255.396796] 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1255.411830] systemd invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1255.427934] systemd cpuset=/ mems_allowed=0-1 [ 1255.432477] CPU: 0 PID: 1 Comm: systemd Not tainted 4.14.230-syzkaller #0 [ 1255.439395] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1255.443455] Node 1 [ 1255.448740] Call Trace: [ 1255.448747] Normal: [ 1255.450985] dump_stack+0x1b2/0x281 [ 1255.455761] 16*4kB [ 1255.455878] dump_header+0x178/0x82f [ 1255.459595] (UM) [ 1255.461844] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1255.465583] 11*8kB [ 1255.467590] ? ___ratelimit+0x2cd/0x530 [ 1255.472847] (UM) [ 1255.475079] oom_kill_process.cold+0x10/0xa40 [ 1255.475091] ? lock_downgrade+0x740/0x740 [ 1255.475107] out_of_memory+0x2dc/0x1190 [ 1255.479055] 73*16kB [ 1255.481107] ? oom_killer_disable+0x1c0/0x1c0 [ 1255.485594] (UM) [ 1255.489718] ? mutex_trylock+0x152/0x1a0 [ 1255.493683] 361*32kB [ 1255.495974] __alloc_pages_nodemask+0x23e1/0x2720 [ 1255.500441] (UM) [ 1255.502505] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1255.506558] 13*64kB [ 1255.508938] alloc_pages_current+0x155/0x260 [ 1255.513758] (UM) [ 1255.515790] filemap_fault+0x11a1/0x1ad0 [ 1255.520606] 38*128kB [ 1255.522930] ext4_filemap_fault+0x84/0xb0 [ 1255.522944] __do_fault+0xfa/0x380 [ 1255.527326] (UM) [ 1255.529372] __handle_mm_fault+0x2497/0x4620 [ 1255.533423] 5*256kB [ 1255.535797] ? vm_insert_page+0x7c0/0x7c0 [ 1255.539914] (UM) 14*512kB [ 1255.543450] ? mark_held_locks+0xa6/0xf0 [ 1255.543461] handle_mm_fault+0x455/0x9c0 [ 1255.543475] __do_page_fault+0x549/0xad0 [ 1255.545533] (U) [ 1255.550726] ? spurious_fault+0x640/0x640 [ 1255.553042] 0*1024kB [ 1255.557151] ? do_page_fault+0x60/0x500 [ 1255.559986] 0*2048kB [ 1255.564026] ? page_fault+0x2f/0x50 [ 1255.564033] page_fault+0x45/0x50 [ 1255.564042] RIP: 0001:0xffffffffffffffff [ 1255.564050] RSP: acecf50:00007ffd70260220 EFLAGS: 7ffd7025ff40 [ 1255.568090] 0*4096kB [ 1255.582924] Mem-Info: [ 1255.597291] = 27016kB [ 1255.604181] active_anon:12943 inactive_anon:59567 isolated_anon:0 [ 1255.604181] active_file:30 inactive_file:2 isolated_file:0 [ 1255.604181] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1255.604181] slab_reclaimable:11952 slab_unreclaimable:112714 [ 1255.604181] mapped:52225 shmem:60180 pagetables:744 bounce:0 [ 1255.604181] free:18381 free_pcp:59 free_cma:0 [ 1255.610727] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1255.611709] Node 0 active_anon:50804kB inactive_anon:181500kB active_file:112kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:174084kB dirty:0kB writeback:0kB shmem:183544kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1255.658519] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1255.689026] Node 1 active_anon:968kB inactive_anon:56768kB active_file:8kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:34816kB dirty:0kB writeback:0kB shmem:57176kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1255.703407] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1255.729659] Node 0 DMA free:11012kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:12kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1255.735909] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1255.765756] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1255.770823] Node 0 DMA32 free:35540kB min:36200kB low:45248kB high:54296kB active_anon:50804kB inactive_anon:181500kB active_file:20kB inactive_file:88kB unevictable:0kB writepending:0kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:7168kB pagetables:2764kB bounce:0kB free_pcp:236kB local_pcp:236kB free_cma:0kB [ 1255.772962] 60212 total pagecache pages [ 1255.808398] 0 pages in swap cache [ 1255.811874] Swap cache stats: add 0, delete 0, find 0/0 [ 1255.816772] lowmem_reserve[]: 0 0 0 0 0 [ 1255.817262] Free swap = 0kB [ 1255.821215] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1255.832009] Total swap = 0kB [ 1255.866364] 2097051 pages RAM [ 1255.869467] 0 pages HighMem/MovableOnly [ 1255.871040] lowmem_reserve[]: [ 1255.875513] 363848 pages reserved [ 1255.877874] 0 [ 1255.878619] 0 pages cma reserved [ 1255.882056] 0 0 0 0 [ 1255.902798] Node 1 Normal free:26972kB min:53696kB low:67120kB high:80544kB active_anon:968kB inactive_anon:56768kB active_file:8kB inactive_file:8kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:256kB pagetables:212kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1255.939131] lowmem_reserve[]: 0 0 0 0 0 [ 1255.943353] Node 0 DMA: 5*4kB (ME) 1*8kB (M) 2*16kB (UM) 13*32kB (UME) 6*64kB (UME) 7*128kB (UME) 2*256kB (ME) 3*512kB (UME) 3*1024kB (UME) 0*2048kB 1*4096kB (M) = 10972kB [ 1255.963766] Node 0 DMA32: 853*4kB (UME) 132*8kB (UME) 110*16kB (UME) 351*32kB (UME) 2*64kB (U) 3*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 17972kB [ 1255.978325] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1255.982948] syz-executor.3: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1255.991392] Node 1 Normal: 9*4kB (M) 9*8kB (UM) 68*16kB (UM) 361*32kB (UM) 13*64kB (UM) 38*128kB (UM) 5*256kB (UM) 14*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 26892kB [ 1256.018969] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1256.027889] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1256.034826] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 1256.038707] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1256.041615] CPU: 1 PID: 28564 Comm: syz-executor.3 Not tainted 4.14.230-syzkaller #0 [ 1256.050571] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1256.058296] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1256.058301] Call Trace: [ 1256.058323] dump_stack+0x1b2/0x281 [ 1256.058338] warn_alloc.cold+0x96/0x1cc [ 1256.058349] ? led_trigger_register+0x60/0x3d0 [ 1256.058361] ? zone_watermark_ok_safe+0x220/0x220 [ 1256.069239] 60212 total pagecache pages [ 1256.076263] ? usleep_range+0x130/0x130 [ 1256.076273] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1256.076286] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1256.076296] ? run_timer_softirq+0x5a0/0x5a0 [ 1256.076313] __alloc_pages_nodemask+0x2127/0x2720 [ 1256.078881] 0 pages in swap cache [ 1256.082511] ? lock_acquire+0x170/0x3f0 [ 1256.088909] Swap cache stats: add 0, delete 0, find 0/0 [ 1256.093052] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1256.093064] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1256.093080] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1256.093099] alloc_pages_current+0x155/0x260 [ 1256.097920] Free swap = 0kB [ 1256.101903] ion_page_pool_alloc+0x118/0x1b0 [ 1256.108262] Total swap = 0kB [ 1256.110936] ion_system_heap_allocate+0x133/0x8c0 [ 1256.115973] 2097051 pages RAM [ 1256.120329] ? _raw_spin_unlock+0x29/0x40 [ 1256.129259] 0 pages HighMem/MovableOnly [ 1256.132575] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1256.138009] 363848 pages reserved [ 1256.142745] ? ion_system_contig_heap_create+0x130/0x130 [ 1256.149571] 0 pages cma reserved [ 1256.152656] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1256.157152] Out of memory: Kill process 28558 (syz-executor.1) score 1004 or sacrifice child [ 1256.160075] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1256.166909] Killed process 28563 (syz-executor.1) total-vm:93252kB, anon-rss:156kB, file-rss:34820kB, shmem-rss:0kB [ 1256.167475] ion_alloc+0x27a/0x810 [ 1256.197304] syz-executor.0: [ 1256.197537] ? ion_dma_buf_release+0x40/0x40 [ 1256.200867] page allocation failure: order:0 [ 1256.205878] ? __might_fault+0x177/0x1b0 [ 1256.205891] ion_ioctl+0xea/0x1f0 [ 1256.205899] ? ion_query_heaps+0x360/0x360 [ 1256.205911] ? ion_query_heaps+0x360/0x360 [ 1256.205921] do_vfs_ioctl+0x75a/0xff0 [ 1256.205933] ? ioctl_preallocate+0x1a0/0x1a0 [ 1256.205942] ? lock_downgrade+0x740/0x740 [ 1256.205955] ? __fget+0x225/0x360 [ 1256.205964] ? do_vfs_ioctl+0xff0/0xff0 [ 1256.205976] ? security_file_ioctl+0x83/0xb0 [ 1256.205986] SyS_ioctl+0x7f/0xb0 [ 1256.205993] ? do_vfs_ioctl+0xff0/0xff0 [ 1256.206005] do_syscall_64+0x1d5/0x640 [ 1256.206020] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1256.206028] RIP: 0033:0x466459 [ 1256.206033] RSP: 002b:00007f68e77c2188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1256.206042] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1256.206052] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000005 [ 1256.233426] oom_reaper: reaped process 28563 (syz-executor.1), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1256.233535] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1256.247411] oom_reaper: reaped process 28562 (syz-executor.0), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1256.249466] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1256.253523] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1256.257114] R13: 00007ffed7d489bf R14: 00007f68e77c2300 R15: 0000000000022000 [ 1256.273130] Mem-Info: [ 1256.279486] (null) [ 1256.281222] active_anon:12889 inactive_anon:59567 isolated_anon:0 [ 1256.281222] active_file:16 inactive_file:16 isolated_file:0 [ 1256.281222] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1256.281222] slab_reclaimable:11952 slab_unreclaimable:112713 [ 1256.281222] mapped:52225 shmem:60180 pagetables:721 bounce:0 [ 1256.281222] free:13928 free_pcp:200 free_cma:0 [ 1256.287674] syz-executor.0 cpuset= [ 1256.298757] syz-executor.1: [ 1256.307593] / [ 1256.318533] page allocation failure: order:0 [ 1256.320672] mems_allowed=0-1 [ 1256.329989] syz-fuzzer invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask= [ 1256.343188] CPU: 0 PID: 28562 Comm: syz-executor.0 Not tainted 4.14.230-syzkaller #0 [ 1256.355379] Node 0 active_anon:50600kB inactive_anon:181500kB active_file:56kB inactive_file:56kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:174084kB dirty:0kB writeback:0kB shmem:183544kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1256.362315] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1256.362322] Call Trace: [ 1256.369486] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1256.376711] dump_stack+0x1b2/0x281 [ 1256.376727] warn_alloc.cold+0x96/0x1cc [ 1256.376740] ? lock_downgrade+0x740/0x740 [ 1256.379143] (null) [ 1256.381293] ? zone_watermark_ok_safe+0x220/0x220 [ 1256.414751] Node 1 active_anon:956kB inactive_anon:56768kB active_file:8kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:34816kB dirty:0kB writeback:0kB shmem:57176kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1256.418225] ? wake_up_q+0x82/0xd0 [ 1256.421239] Node 0 [ 1256.422971] ? wait_for_completion_io+0x10/0x10 [ 1256.422986] __alloc_pages_nodemask+0x2127/0x2720 [ 1256.423003] ? lock_acquire+0x170/0x3f0 [ 1256.423019] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1256.427427] (null) [ 1256.430590] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1256.440709] DMA free:10972kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1256.448602] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1256.448624] alloc_pages_current+0x155/0x260 [ 1256.476992] syz-executor.1 cpuset= [ 1256.486268] ion_page_pool_alloc+0x118/0x1b0 [ 1256.486279] ion_system_heap_allocate+0x133/0x8c0 [ 1256.486289] ? ion_alloc+0x187/0x810 [ 1256.486300] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1256.486313] ? ion_system_contig_heap_create+0x130/0x130 [ 1256.488898] / [ 1256.495975] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1256.499644] , order=0, oom_score_adj=0 [ 1256.503549] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1256.503562] ion_alloc+0x204/0x810 [ 1256.503576] ? ion_dma_buf_release+0x40/0x40 [ 1256.507737] syz-fuzzer cpuset= [ 1256.509901] ? __might_fault+0x177/0x1b0 [ 1256.514790] mems_allowed=0-1 [ 1256.542427] ion_ioctl+0xea/0x1f0 [ 1256.542439] ? ion_query_heaps+0x360/0x360 [ 1256.542449] ? ion_query_heaps+0x360/0x360 [ 1256.542458] do_vfs_ioctl+0x75a/0xff0 [ 1256.542469] ? ioctl_preallocate+0x1a0/0x1a0 [ 1256.542490] ? lock_downgrade+0x740/0x740 [ 1256.546084] / [ 1256.548266] ? __fget+0x225/0x360 [ 1256.552953] lowmem_reserve[]: [ 1256.557738] ? do_vfs_ioctl+0xff0/0xff0 [ 1256.561713] 0 [ 1256.566626] ? security_file_ioctl+0x83/0xb0 [ 1256.566636] SyS_ioctl+0x7f/0xb0 [ 1256.566644] ? do_vfs_ioctl+0xff0/0xff0 [ 1256.566656] do_syscall_64+0x1d5/0x640 [ 1256.566672] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1256.568812] mems_allowed=0-1 [ 1256.573285] RIP: 0033:0x466459 [ 1256.573290] RSP: 002b:00007f141b2c2188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1256.573300] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1256.573306] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000005 [ 1256.573311] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1256.573320] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1256.598896] 2717 [ 1256.604261] R13: 00007fff5a5b1ccf R14: 00007f141b2c2300 R15: 0000000000022000 [ 1256.656203] CPU: 0 PID: 7981 Comm: syz-fuzzer Not tainted 4.14.230-syzkaller #0 [ 1256.722920] 2718 [ 1256.724235] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1256.729409] 2718 [ 1256.732503] Call Trace: [ 1256.742921] 2718 [ 1256.743378] dump_stack+0x1b2/0x281 [ 1256.750707] Node 0 [ 1256.757981] dump_header+0x178/0x82f [ 1256.757993] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1256.758002] ? ___ratelimit+0x2cd/0x530 [ 1256.758016] oom_kill_process.cold+0x10/0xa40 [ 1256.792941] DMA32 free:43448kB min:36200kB low:45248kB high:54296kB active_anon:50600kB inactive_anon:181500kB active_file:52kB inactive_file:56kB unevictable:0kB writepending:0kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:7200kB pagetables:2672kB bounce:0kB free_pcp:668kB local_pcp:228kB free_cma:0kB [ 1256.800656] out_of_memory+0xe3e/0x1190 [ 1256.802777] lowmem_reserve[]: [ 1256.805349] ? oom_killer_disable+0x1c0/0x1c0 [ 1256.805359] ? mutex_trylock+0x152/0x1a0 [ 1256.805370] __alloc_pages_nodemask+0x23e1/0x2720 [ 1256.805397] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1256.822917] 0 [ 1256.826689] alloc_pages_current+0x155/0x260 [ 1256.831165] 0 [ 1256.859536] filemap_fault+0x11a1/0x1ad0 [ 1256.859554] ext4_filemap_fault+0x84/0xb0 [ 1256.859563] __do_fault+0xfa/0x380 [ 1256.859573] __handle_mm_fault+0x2497/0x4620 [ 1256.859583] ? vm_insert_page+0x7c0/0x7c0 [ 1256.902933] 0 [ 1256.904883] ? mark_held_locks+0xa6/0xf0 [ 1256.909541] 0 [ 1256.913850] handle_mm_fault+0x455/0x9c0 [ 1256.913865] __do_page_fault+0x549/0xad0 [ 1256.913882] ? spurious_fault+0x640/0x640 [ 1256.922918] 0 [ 1256.925580] ? do_page_fault+0x60/0x500 [ 1256.933755] ? page_fault+0x2f/0x50 [ 1256.933761] page_fault+0x45/0x50 [ 1256.933770] RIP: 2a8c00:0x200 [ 1256.933774] RSP: 02c6:000000c0003dde40 EFLAGS: 00000003 [ 1256.973624] CPU: 1 PID: 28563 Comm: syz-executor.1 Not tainted 4.14.230-syzkaller #0 [ 1256.986977] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1256.996424] Call Trace: [ 1256.999024] dump_stack+0x1b2/0x281 [ 1257.002657] warn_alloc.cold+0x96/0x1cc [ 1257.006651] ? zone_watermark_ok_safe+0x220/0x220 [ 1257.011527] ? usleep_range+0x130/0x130 [ 1257.015506] ? try_to_free_pages+0x23f/0x6e0 [ 1257.019916] ? _find_next_bit+0xdb/0x100 [ 1257.023975] ? run_timer_softirq+0x5a0/0x5a0 [ 1257.028403] __alloc_pages_nodemask+0x2127/0x2720 [ 1257.033264] ? lock_acquire+0x170/0x3f0 [ 1257.037245] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1257.042084] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1257.046592] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1257.054501] ? __sanitizer_cov_trace_pc+0x23/0x50 [ 1257.059819] alloc_pages_current+0x155/0x260 [ 1257.064241] ion_page_pool_alloc+0x118/0x1b0 [ 1257.068704] ion_system_heap_allocate+0x133/0x8c0 [ 1257.073925] ? ion_alloc+0x187/0x810 [ 1257.077645] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1257.083109] ? ion_system_contig_heap_create+0x130/0x130 [ 1257.088558] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1257.093582] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1257.098472] ion_alloc+0x204/0x810 [ 1257.102016] ? ion_dma_buf_release+0x40/0x40 [ 1257.106535] ? __might_fault+0x177/0x1b0 [ 1257.110602] ion_ioctl+0xea/0x1f0 [ 1257.114064] ? ion_query_heaps+0x360/0x360 [ 1257.118321] ? ion_query_heaps+0x360/0x360 [ 1257.122563] do_vfs_ioctl+0x75a/0xff0 [ 1257.126368] ? ioctl_preallocate+0x1a0/0x1a0 [ 1257.130783] ? lock_downgrade+0x740/0x740 [ 1257.134940] ? __fget+0x225/0x360 [ 1257.138393] ? do_vfs_ioctl+0xff0/0xff0 [ 1257.142391] ? security_file_ioctl+0x83/0xb0 [ 1257.146815] SyS_ioctl+0x7f/0xb0 [ 1257.150177] ? do_vfs_ioctl+0xff0/0xff0 [ 1257.154162] do_syscall_64+0x1d5/0x640 [ 1257.158052] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1257.163329] RIP: 0033:0x466459 [ 1257.166623] RSP: 002b:00007feb59368188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1257.174513] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1257.181803] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000005 [ 1257.189192] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1257.197019] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1257.204311] R13: 00007ffe56f14bcf R14: 00007feb59368300 R15: 0000000000022000 [ 1257.213843] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1257.250240] Bluetooth: hci2 command 0x040f tx timeout [ 1257.278102] lowmem_reserve[]: 0 0 0 0 0 [ 1257.284107] Node 1 Normal free:372236kB min:53696kB low:67120kB high:80544kB active_anon:960kB inactive_anon:56768kB active_file:312kB inactive_file:2320kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:256kB pagetables:216kB bounce:0kB free_pcp:264kB local_pcp:164kB free_cma:0kB [ 1257.315725] lowmem_reserve[]: 0 0 0 0 0 [ 1257.323871] Node 0 DMA: 4*4kB (E) 0*8kB 1*16kB (U) 12*32kB (UE) 5*64kB (UE) 6*128kB (UE) 1*256kB (E) 2*512kB (UE) 2*1024kB (UE) 1*2048kB (M) 1*4096kB (M) = 10976kB [ 1257.343718] Node 0 DMA32: 1506*4kB (UME) 282*8kB (UME) 978*16kB (UME) 353*32kB (UME) 29*64kB (U) 62*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 45016kB [ 1257.384598] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1257.397146] Node 1 Normal: 0*4kB 1*8kB (M) 0*16kB 2*32kB (UM) [ 1257.398921] systemd[1]: systemd-journald.service: Main process exited, code=killed, status=9/KILL [ 1257.405685] 0*64kB 1277*128kB (UM) 147*256kB (U) 10*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 206280kB [ 1257.405729] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1257.405735] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1257.405742] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1257.405748] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1257.405752] 62007 total pagecache pages [ 1257.405761] 0 pages in swap cache [ 1257.405765] Swap cache stats: add 0, delete 0, find 0/0 [ 1257.405769] Free swap = 0kB [ 1257.405773] Total swap = 0kB [ 1257.405780] 2097051 pages RAM [ 1257.405784] 0 pages HighMem/MovableOnly [ 1257.405787] 363848 pages reserved [ 1257.405791] 0 pages cma reserved [ 1257.410254] warn_alloc_show_mem: 1 callbacks suppressed [ 1257.410258] Mem-Info: [ 1257.519835] systemd[1]: Failed to start Journal Service. [ 1257.533941] systemd[1]: systemd-journald.service: Unit entered failed state. [ 1257.541457] systemd[1]: systemd-journald.service: Failed with result 'signal'. [ 1257.566770] systemd[1]: systemd-journald.service: Service has no hold-off time, scheduling restart. [ 1257.593047] Mem-Info: [ 1257.595501] active_anon:12789 inactive_anon:59567 isolated_anon:0 [ 1257.595501] active_file:513 inactive_file:509 isolated_file:32 [ 1257.595501] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1257.595501] slab_reclaimable:11952 slab_unreclaimable:112591 [ 1257.595501] mapped:53024 shmem:60180 pagetables:722 bounce:0 [ 1257.595501] free:23435 free_pcp:403 free_cma:0 [ 1257.631230] Node 0 active_anon:50196kB inactive_anon:181500kB active_file:476kB inactive_file:448kB unevictable:0kB isolated(anon):0kB isolated(file):128kB mapped:174992kB dirty:0kB writeback:0kB shmem:183544kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1257.660280] Node 1 active_anon:960kB inactive_anon:56768kB active_file:1092kB inactive_file:1136kB unevictable:0kB isolated(anon):0kB isolated(file):128kB mapped:37104kB dirty:0kB writeback:0kB shmem:57176kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1257.687980] Node 0 DMA free:10972kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1257.743208] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1257.751210] syz-executor.0: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1257.753738] Node 0 DMA32 free:19076kB min:36200kB low:45248kB high:54296kB active_anon:50196kB inactive_anon:181500kB active_file:172kB inactive_file:152kB unevictable:0kB writepending:0kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:7200kB pagetables:2672kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1257.781511] syz-executor.0 cpuset= [ 1257.809966] active_anon:12789 inactive_anon:59567 isolated_anon:0 [ 1257.809966] active_file:60 inactive_file:44 isolated_file:0 [ 1257.809966] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1257.809966] slab_reclaimable:11952 slab_unreclaimable:112591 [ 1257.809966] mapped:52274 shmem:60180 pagetables:722 bounce:0 [ 1257.809966] free:14181 free_pcp:3 free_cma:0 [ 1257.813907] lowmem_reserve[]: [ 1257.850705] / mems_allowed=0-1 [ 1257.856362] 0 0 0 0 0 [ 1257.857146] CPU: 1 PID: 28562 Comm: syz-executor.0 Not tainted 4.14.230-syzkaller #0 [ 1257.859661] Node 0 [ 1257.867502] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1257.867508] Call Trace: [ 1257.867530] dump_stack+0x1b2/0x281 [ 1257.867544] warn_alloc.cold+0x96/0x1cc [ 1257.867555] ? zone_watermark_ok_safe+0x220/0x220 [ 1257.867578] __alloc_pages_nodemask+0x2127/0x2720 [ 1257.867593] ? lock_acquire+0x170/0x3f0 [ 1257.867608] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1257.867625] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1257.902516] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1257.903238] ? __mutex_unlock_slowpath+0x75/0x770 [ 1257.903247] ? retint_kernel+0x2d/0x2d [ 1257.903262] alloc_pages_current+0x155/0x260 [ 1257.903276] ion_page_pool_alloc+0x118/0x1b0 [ 1257.903286] ion_system_heap_allocate+0x133/0x8c0 [ 1257.903297] ? _raw_spin_unlock+0x29/0x40 [ 1257.903308] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1257.911545] lowmem_reserve[]: [ 1257.913591] ? ion_system_contig_heap_create+0x130/0x130 [ 1257.913617] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1257.913629] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1257.913640] ion_alloc+0x27a/0x810 [ 1257.913655] ? ion_dma_buf_release+0x40/0x40 [ 1257.913667] ? __might_fault+0x177/0x1b0 [ 1257.913679] ion_ioctl+0xea/0x1f0 [ 1257.913686] ? ion_query_heaps+0x360/0x360 [ 1257.913701] ? ion_query_heaps+0x360/0x360 [ 1257.959610] 0 [ 1257.960999] do_vfs_ioctl+0x75a/0xff0 [ 1257.979725] 0 [ 1257.983679] ? ioctl_preallocate+0x1a0/0x1a0 [ 1257.983690] ? lock_downgrade+0x740/0x740 [ 1257.983703] ? __fget+0x225/0x360 [ 1257.983711] ? do_vfs_ioctl+0xff0/0xff0 [ 1257.983723] ? security_file_ioctl+0x83/0xb0 [ 1257.983733] SyS_ioctl+0x7f/0xb0 [ 1257.983740] ? do_vfs_ioctl+0xff0/0xff0 [ 1257.983751] do_syscall_64+0x1d5/0x640 [ 1257.983766] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1257.983774] RIP: 0033:0x466459 [ 1257.983783] RSP: 002b:00007f141b2c2188 EFLAGS: 00000246 [ 1258.005916] 0 [ 1258.008359] ORIG_RAX: 0000000000000010 [ 1258.012581] 0 [ 1258.014363] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1258.014369] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000005 [ 1258.014374] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1258.014378] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1258.014383] R13: 00007fff5a5b1ccf R14: 00007f141b2c2300 R15: 0000000000022000 [ 1258.021895] Node 0 active_anon:50196kB inactive_anon:181500kB active_file:172kB inactive_file:48kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:174192kB dirty:0kB writeback:0kB shmem:183544kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1258.037537] 0 [ 1258.045334] Node 1 active_anon:960kB inactive_anon:56768kB active_file:68kB inactive_file:128kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:34904kB dirty:0kB writeback:0kB shmem:57176kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1258.070290] Node 0 [ 1258.086387] Node 1 [ 1258.092771] DMA free:10976kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1258.111476] Normal free:27164kB min:53696kB low:67120kB high:80544kB active_anon:956kB inactive_anon:56768kB active_file:40kB inactive_file:40kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:320kB pagetables:212kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1258.142625] lowmem_reserve[]: [ 1258.185941] lowmem_reserve[]: [ 1258.209562] 0 [ 1258.233826] 0 0 0 0 0 [ 1258.238134] Node 0 DMA: 4*4kB (E) 0*8kB 1*16kB (U) 12*32kB (UE) 5*64kB (UE) 6*128kB (UE) 1*256kB (E) 2*512kB (UE) 2*1024kB (UE) 1*2048kB (M) 1*4096kB (M) = 10976kB [ 1258.259874] Node 0 DMA32: 845*4kB (ME) 145*8kB (ME) 135*16kB (UME) 355*32kB (UME) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18060kB [ 1258.274545] 2717 2718 2718 2718 [ 1258.277968] Node 0 DMA32 free:18060kB min:36200kB low:45248kB high:54296kB active_anon:50156kB inactive_anon:181500kB active_file:28kB inactive_file:28kB unevictable:0kB writepending:0kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:7136kB pagetables:2584kB bounce:0kB free_pcp:120kB local_pcp:120kB free_cma:0kB [ 1258.280443] Node 0 [ 1258.329423] lowmem_reserve[]: [ 1258.329621] Normal: [ 1258.331688] 0 0 [ 1258.341485] 0*4kB [ 1258.343591] syz-executor.0: [ 1258.345653] 0 [ 1258.345745] page allocation failure: order:0 [ 1258.349394] 0 [ 1258.351184] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1258.363086] 0 [ 1258.368859] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1258.371598] 0*8kB [ 1258.401333] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 1258.408285] lowmem_reserve[]: [ 1258.408838] CPU: 0 PID: 28562 Comm: syz-executor.0 Not tainted 4.14.230-syzkaller #0 [ 1258.408841] 0 0 [ 1258.411952] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1258.411958] Call Trace: [ 1258.419996] 0 [ 1258.421858] dump_stack+0x1b2/0x281 [ 1258.431235] 0 [ 1258.433787] warn_alloc.cold+0x96/0x1cc [ 1258.433802] ? zone_watermark_ok_safe+0x220/0x220 [ 1258.435579] 0 [ 1258.439196] ? usleep_range+0x130/0x130 [ 1258.444934] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1258.444948] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1258.444958] ? run_timer_softirq+0x5a0/0x5a0 [ 1258.444975] __alloc_pages_nodemask+0x2127/0x2720 [ 1258.449803] Node 1 [ 1258.451610] ? lock_acquire+0x170/0x3f0 [ 1258.455609] Normal free:26792kB min:53696kB low:67120kB high:80544kB active_anon:956kB inactive_anon:56768kB active_file:36kB inactive_file:28kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:320kB pagetables:212kB bounce:0kB free_pcp:120kB local_pcp:120kB free_cma:0kB [ 1258.460685] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1258.465724] lowmem_reserve[]: [ 1258.470083] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1258.474927] 0 [ 1258.477126] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1258.481096] 0 [ 1258.509129] ? retint_kernel+0x2d/0x2d [ 1258.509145] alloc_pages_current+0x155/0x260 [ 1258.509160] ion_page_pool_alloc+0x118/0x1b0 [ 1258.509175] ion_system_heap_allocate+0x133/0x8c0 [ 1258.514024] 0 [ 1258.517132] ? _raw_spin_unlock+0x29/0x40 [ 1258.521595] 0 0 [ 1258.523390] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1258.523399] ? ion_system_contig_heap_create+0x130/0x130 [ 1258.523410] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1258.523430] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1258.530711] ion_alloc+0x27a/0x810 [ 1258.534599] Node 0 [ 1258.538988] ? ion_dma_buf_release+0x40/0x40 [ 1258.543391] DMA: [ 1258.548206] ? __might_fault+0x177/0x1b0 [ 1258.549981] 4*4kB [ 1258.554140] ion_ioctl+0xea/0x1f0 [ 1258.554150] ? ion_query_heaps+0x360/0x360 [ 1258.554161] ? ion_query_heaps+0x360/0x360 [ 1258.554171] do_vfs_ioctl+0x75a/0xff0 [ 1258.554182] ? ioctl_preallocate+0x1a0/0x1a0 [ 1258.556136] (E) [ 1258.561058] ? lock_downgrade+0x740/0x740 [ 1258.566524] 0*8kB [ 1258.571505] ? __fget+0x225/0x360 [ 1258.576348] 1*16kB [ 1258.579864] ? do_vfs_ioctl+0xff0/0xff0 [ 1258.582074] (U) [ 1258.586479] ? security_file_ioctl+0x83/0xb0 [ 1258.586490] SyS_ioctl+0x7f/0xb0 [ 1258.586505] ? do_vfs_ioctl+0xff0/0xff0 [ 1258.586521] do_syscall_64+0x1d5/0x640 [ 1258.588565] 12*32kB [ 1258.592622] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1258.594776] (UE) [ 1258.598177] RIP: 0033:0x466459 [ 1258.602384] 5*64kB [ 1258.606599] RSP: 002b:00007f141b2c2188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1258.606608] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1258.606613] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000005 [ 1258.606617] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1258.606622] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1258.606627] R13: 00007fff5a5b1ccf R14: 00007f141b2c2300 R15: 0000000000022000 [ 1258.614003] 0*16kB [ 1258.628175] (UE) [ 1258.632367] 0*32kB [ 1258.632864] 6*128kB [ 1258.637854] 0*64kB [ 1258.639247] (UE) [ 1258.642593] 0*128kB 0*256kB [ 1258.658286] 1*256kB [ 1258.666755] 0*512kB [ 1258.684900] (E) [ 1258.694611] 0*1024kB [ 1258.708019] 2*512kB [ 1258.716490] 0*2048kB [ 1258.728090] (UE) [ 1258.729884] 0*4096kB [ 1258.730851] 2*1024kB [ 1258.732807] = 0kB [ 1258.732813] Node 1 [ 1258.736035] (UE) [ 1258.747743] Normal: [ 1258.755636] 1*2048kB [ 1258.755668] 8*4kB [ 1258.757965] (M) [ 1258.760361] (M) [ 1258.762490] 1*4096kB (M) = 10976kB [ 1258.775332] 7*8kB (M) 29*16kB (UM) 26*32kB (UM) 15*64kB (UM) 9*128kB (M) 71*256kB (UM) 10*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 26792kB [ 1258.776807] Node 0 DMA32: 845*4kB (ME) 145*8kB (ME) 135*16kB (UME) 355*32kB (UME) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18060kB [ 1258.798873] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1258.811179] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1258.829848] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1258.839812] Node 1 Normal: 8*4kB (M) 7*8kB (M) 29*16kB (UM) 26*32kB (UM) 15*64kB (UM) 9*128kB (M) 71*256kB (UM) 10*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 26792kB [ 1258.857177] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1258.874746] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1258.887065] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1258.892307] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1258.901947] 60214 total pagecache pages [ 1258.912102] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1258.919022] 0 pages in swap cache [ 1258.920987] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1258.928836] Swap cache stats: add 0, delete 0, find 0/0 [ 1258.940770] 60214 total pagecache pages [ 1258.944798] 0 pages in swap cache [ 1258.948246] Swap cache stats: add 0, delete 0, find 0/0 [ 1258.948967] Free swap = 0kB [ 1258.961134] Total swap = 0kB [ 1258.961265] warn_alloc_show_mem: 1 callbacks suppressed [ 1258.961269] Mem-Info: [ 1258.970590] 2097051 pages RAM [ 1258.972004] active_anon:12778 inactive_anon:59567 isolated_anon:0 [ 1258.972004] active_file:41 inactive_file:0 isolated_file:0 [ 1258.972004] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1258.972004] slab_reclaimable:11960 slab_unreclaimable:112605 [ 1258.972004] mapped:52225 shmem:60180 pagetables:699 bounce:0 [ 1258.972004] free:13957 free_pcp:60 free_cma:0 [ 1258.979372] 0 pages HighMem/MovableOnly [ 1259.011208] Free swap = 0kB [ 1259.015504] Total swap = 0kB [ 1259.018553] 2097051 pages RAM [ 1259.021646] 0 pages HighMem/MovableOnly [ 1259.027936] 363848 pages reserved [ 1259.029036] 363848 pages reserved [ 1259.031420] 0 pages cma reserved [ 1259.074743] 0 pages cma reserved [ 1259.092969] Node 0 active_anon:50156kB inactive_anon:181500kB active_file:28kB inactive_file:932kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:174536kB dirty:0kB writeback:0kB shmem:183544kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1259.113032] Out of memory (oom_kill_allocating_task): Kill process 7981 (syz-fuzzer) score 0 or sacrifice child [ 1259.193010] Node 1 active_anon:956kB inactive_anon:56768kB active_file:40kB inactive_file:40kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:34816kB dirty:0kB writeback:0kB shmem:57176kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1259.196203] Killed process 27701 (syz-executor.3) total-vm:84924kB, anon-rss:64kB, file-rss:0kB, shmem-rss:0kB [ 1259.244961] oom_reaper: reaped process 27701 (syz-executor.3), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1259.267294] systemd[1]: Stopped Journal Service. [ 1259.316951] Node 0 DMA free:10976kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1259.323408] Bluetooth: hci2 command 0x0419 tx timeout [ 1259.345471] systemd[1]: Starting Journal Service... [ 1259.387266] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1259.393431] Node 0 DMA32 free:314296kB min:36200kB low:45248kB high:54296kB active_anon:50256kB inactive_anon:181500kB active_file:28kB inactive_file:6532kB unevictable:0kB writepending:0kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:7136kB pagetables:2584kB bounce:0kB free_pcp:524kB local_pcp:184kB free_cma:0kB [ 1259.490461] lowmem_reserve[]: 0 0 0 0 0 [ 1259.494782] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1259.522077] lowmem_reserve[]: 0 0 0 0 0 [ 1259.528023] Node 1 Normal free:508808kB min:53696kB low:67120kB high:80544kB active_anon:856kB inactive_anon:56768kB active_file:40kB inactive_file:40kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:224kB pagetables:64kB bounce:0kB free_pcp:820kB local_pcp:664kB free_cma:0kB [ 1259.558370] lowmem_reserve[]: 0 0 0 0 0 [ 1259.562500] Node 0 DMA: 13*4kB (UE) 0*8kB 1*16kB (U) 12*32kB (UE) 6*64kB (UE) 6*128kB (UE) 1*256kB (E) 2*512kB (UE) 2*1024kB (UE) 1*2048kB (M) 1*4096kB (M) = 11076kB [ 1259.579207] Node 0 DMA32: 479*4kB (E) 30*8kB (UME) 4*16kB (UME) 521*32kB (UME) 2004*64kB (UM) 689*128kB (U) 5*256kB (UM) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 236620kB [ 1259.596384] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1259.608597] Node 1 Normal: 130*4kB (UM) 25*8kB (UM) 30*16kB (UM) 30*32kB (UM) 4139*64kB (UM) 1309*128kB (UM) 262*256kB (UM) 14*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 508848kB [ 1259.625620] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1259.636659] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1259.646224] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1259.656219] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1259.666475] 62044 total pagecache pages [ 1259.670539] 0 pages in swap cache [ 1259.675522] Swap cache stats: add 0, delete 0, find 0/0 [ 1259.681053] Free swap = 0kB [ 1259.686030] Total swap = 0kB [ 1259.689742] 2097051 pages RAM [ 1259.694146] 0 pages HighMem/MovableOnly [ 1259.699209] 363848 pages reserved [ 1259.703993] 0 pages cma reserved [ 1259.708793] chnl_net:caif_netlink_parms(): no params data found [ 1259.830560] systemd-journald[28619]: File /run/log/journal/04d8c135ee6b410280ba31a58c89679d/system.journal corrupted or uncleanly shut down, renaming and replacing. [ 1259.881612] systemd[1]: Starting Load/Save RF Kill Switch Status... 13:38:36 executing program 0: ioctl$SIOCPNDELRESOURCE(0xffffffffffffffff, 0x89ef, &(0x7f0000000040)=0xffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000012c0)={0x0, @nl=@unspec, @tipc=@id={0x1e, 0x3, 0x2, {0x4e21, 0x4}}, @ethernet={0x307, @random="68d88c73bc2f"}, 0x0, 0x0, 0x0, 0x0, 0x20, &(0x7f0000001280)='bridge_slave_0\x00', 0x401, 0x0, 0xfd51}) semctl$SETVAL(0x0, 0x0, 0x10, 0x0) semctl$GETVAL(0x0, 0x0, 0xc, &(0x7f0000000180)=""/194) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$x25(0x9, 0x5, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x500, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x80000000, 0xa, 0x1}) 13:38:36 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) clock_gettime(0x0, &(0x7f0000003d00)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000003bc0)=[{{&(0x7f0000000040)=@nfc, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000140)=""/45, 0x2d}, {&(0x7f0000000180)=""/187, 0xbb}, {&(0x7f0000000240)=""/2, 0x2}, {&(0x7f0000000280)=""/156, 0x9c}, {&(0x7f0000000340)=""/128, 0x80}], 0x5, &(0x7f0000000440)=""/1, 0x1}, 0x8}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000480)=""/73, 0x49}], 0x1, &(0x7f0000000540)=""/38, 0x26}, 0xf600}, {{0x0, 0x0, &(0x7f0000002680)=[{&(0x7f0000000580)=""/4096, 0x1000}, {&(0x7f0000001580)=""/4096, 0x1000}, {&(0x7f0000002580)=""/25, 0x19}, {&(0x7f00000025c0)}, {&(0x7f0000002600)=""/86, 0x56}], 0x5}, 0x2}, {{&(0x7f0000002700)=@sco={0x1f, @fixed}, 0x80, &(0x7f0000002780), 0x0, &(0x7f00000027c0)=""/224, 0xe0}, 0x81}, {{&(0x7f00000028c0)=@l2, 0x80, &(0x7f0000003b00)=[{&(0x7f0000002940)=""/146, 0x92}, {&(0x7f0000002a00)=""/4096, 0x1000}, {&(0x7f0000003a00)=""/92, 0x5c}, {&(0x7f0000003a80)=""/38, 0x26}, {&(0x7f0000003ac0)=""/30, 0x1e}], 0x5, &(0x7f0000003b80)=""/44, 0x2c}, 0x9}], 0x5, 0x11, &(0x7f0000003d40)={r1, r2+10000000}) getsockopt$CAN_RAW_JOIN_FILTERS(0xffffffffffffffff, 0x65, 0x6, &(0x7f0000003e40), &(0x7f0000003e80)=0x4) semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f00000000c0)=""/89) r3 = semget$private(0x0, 0x4, 0xab7ad825ac5f67d1) semctl$SETVAL(r3, 0x3, 0x10, &(0x7f0000000000)=0x6) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000002780)='l2tp\x00', r0) r5 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100)='/dev/bsg\x00', 0x204402, 0x0) write$eventfd(r5, 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000003e00)={&(0x7f00000025c0)={0x10, 0x0, 0x0, 0x81810}, 0xc, &(0x7f0000003dc0)={&(0x7f0000003d80)={0x2c, r4, 0x4, 0x70bd2b, 0x25dfdbfe, {}, [@L2TP_ATTR_FD={0x8, 0x17, @udp=r5}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x90) [ 1260.048629] systemd[1]: Started Load/Save RF Kill Switch Status. [ 1260.156894] bridge0: port 1(bridge_slave_0) entered blocking state [ 1260.187646] bridge0: port 1(bridge_slave_0) entered disabled state [ 1260.217392] syz-executor.0: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1260.241477] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 1260.253670] CPU: 1 PID: 28722 Comm: syz-executor.0 Not tainted 4.14.230-syzkaller #0 [ 1260.261611] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1260.270977] Call Trace: [ 1260.273574] dump_stack+0x1b2/0x281 [ 1260.277198] warn_alloc.cold+0x96/0x1cc [ 1260.281319] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1260.286357] ? zone_watermark_ok_safe+0x220/0x220 [ 1260.291214] __alloc_pages_nodemask+0x2127/0x2720 [ 1260.296057] ? io_schedule_timeout+0x140/0x140 [ 1260.300645] ? lock_acquire+0x170/0x3f0 [ 1260.304633] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1260.309504] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1260.314960] ? __mutex_unlock_slowpath+0x75/0x770 [ 1260.319834] ? retint_kernel+0x2d/0x2d [ 1260.323727] alloc_pages_current+0x155/0x260 [ 1260.328175] ion_page_pool_alloc+0x118/0x1b0 [ 1260.332603] ion_system_heap_allocate+0x133/0x8c0 [ 1260.337454] ? ion_alloc+0x187/0x810 [ 1260.341172] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1260.346645] ? ion_system_contig_heap_create+0x130/0x130 [ 1260.352105] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1260.357123] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1260.361963] ion_alloc+0x204/0x810 [ 1260.365507] ? ion_dma_buf_release+0x40/0x40 [ 1260.369921] ? __might_fault+0x177/0x1b0 [ 1260.373986] ion_ioctl+0xea/0x1f0 [ 1260.377438] ? ion_query_heaps+0x360/0x360 [ 1260.381769] ? ion_query_heaps+0x360/0x360 [ 1260.386087] do_vfs_ioctl+0x75a/0xff0 [ 1260.390461] ? ioctl_preallocate+0x1a0/0x1a0 [ 1260.394979] ? lock_downgrade+0x740/0x740 [ 1260.400348] ? __fget+0x225/0x360 [ 1260.403804] ? do_vfs_ioctl+0xff0/0xff0 [ 1260.407778] ? security_file_ioctl+0x83/0xb0 [ 1260.412199] SyS_ioctl+0x7f/0xb0 [ 1260.415568] ? do_vfs_ioctl+0xff0/0xff0 [ 1260.419561] do_syscall_64+0x1d5/0x640 [ 1260.423463] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1260.428762] RIP: 0033:0x466459 [ 1260.431956] RSP: 002b:00007f141b2c2188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1260.439663] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1260.446954] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000005 [ 1260.454221] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1260.461508] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1260.468774] R13: 00007fff5a5b1ccf R14: 00007f141b2c2300 R15: 0000000000022000 [ 1260.483352] syz-executor.2 invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=0, oom_score_adj=0 [ 1260.512085] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 1260.528343] CPU: 0 PID: 28585 Comm: syz-executor.2 Not tainted 4.14.230-syzkaller #0 [ 1260.536240] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1260.545612] Call Trace: [ 1260.548202] dump_stack+0x1b2/0x281 [ 1260.551823] dump_header+0x178/0x82f [ 1260.555529] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1260.560725] ? ___ratelimit+0x2cd/0x530 [ 1260.566269] oom_kill_process.cold+0x10/0xa40 [ 1260.570783] out_of_memory+0xe3e/0x1190 [ 1260.574898] ? oom_killer_disable+0x1c0/0x1c0 [ 1260.579419] ? mutex_trylock+0x152/0x1a0 [ 1260.583478] __alloc_pages_nodemask+0x23e1/0x2720 [ 1260.588347] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1260.593203] ? mark_held_locks+0xa6/0xf0 [ 1260.597257] ? cache_grow_begin+0x3f/0x700 [ 1260.601488] cache_grow_begin+0x91/0x700 [ 1260.605647] fallback_alloc+0x207/0x2c0 [ 1260.609629] kmem_cache_alloc+0x1e5/0x3c0 [ 1260.613773] __kernfs_new_node+0x6f/0x470 [ 1260.617916] kernfs_new_node+0x7b/0xe0 [ 1260.621879] __kernfs_create_file+0x3d/0x320 [ 1260.626281] sysfs_add_file_mode_ns+0x1e1/0x450 [ 1260.631122] br_sysfs_addif+0xd8/0x1a0 [ 1260.635016] br_add_if+0x5f3/0x1740 [ 1260.638830] ? br_del_slave+0x20/0x20 [ 1260.642624] do_set_master+0x19e/0x200 [ 1260.646509] do_setlink+0x8b8/0x2bf0 [ 1260.650234] ? rtnl_fdb_add+0x770/0x770 [ 1260.654212] ? __lock_acquire+0x5fc/0x3f20 [ 1260.658443] ? trace_hardirqs_on+0x10/0x10 [ 1260.662669] ? deref_stack_reg+0x124/0x1a0 [ 1260.666894] ? __read_once_size_nocheck.constprop.0+0x10/0x10 [ 1260.672769] ? trace_hardirqs_on+0x10/0x10 [ 1260.676999] ? deref_stack_reg+0x124/0x1a0 [ 1260.681398] ? __read_once_size_nocheck.constprop.0+0x10/0x10 [ 1260.687283] ? __lock_acquire+0x5fc/0x3f20 [ 1260.692299] ? validate_nla+0x192/0x5e0 [ 1260.696265] ? nla_parse+0x157/0x1f0 [ 1260.699966] ? validate_linkmsg+0x3a1/0x460 [ 1260.704274] rtnl_newlink+0x128a/0x1860 [ 1260.708242] ? __lock_acquire+0x5fc/0x3f20 [ 1260.712472] ? trace_hardirqs_on+0x10/0x10 [ 1260.716698] ? rtnl_dellink+0x6a0/0x6a0 [ 1260.720668] ? trace_hardirqs_on+0x10/0x10 [ 1260.724923] ? __read_once_size_nocheck.constprop.0+0x10/0x10 [ 1260.730803] ? trace_hardirqs_on_caller+0x520/0x580 [ 1260.738329] ? deref_stack_reg+0x124/0x1a0 [ 1260.742559] ? __lock_acquire+0x5fc/0x3f20 [ 1260.746818] ? lock_acquire+0x170/0x3f0 [ 1260.750819] ? lock_downgrade+0x740/0x740 [ 1260.754978] ? rtnl_dellink+0x6a0/0x6a0 [ 1260.759034] rtnetlink_rcv_msg+0x3be/0xb10 [ 1260.763278] ? rtnl_calcit.isra.0+0x3a0/0x3a0 [ 1260.767783] ? __netlink_lookup+0x345/0x5d0 [ 1260.772118] netlink_rcv_skb+0x125/0x390 [ 1260.776191] ? rtnl_calcit.isra.0+0x3a0/0x3a0 [ 1260.780853] ? netlink_ack+0x9a0/0x9a0 [ 1260.784753] netlink_unicast+0x437/0x610 [ 1260.788818] ? netlink_sendskb+0xd0/0xd0 [ 1260.793069] ? __check_object_size+0x179/0x230 [ 1260.797753] netlink_sendmsg+0x62e/0xb80 [ 1260.801835] ? nlmsg_notify+0x170/0x170 [ 1260.805828] ? security_socket_sendmsg+0x83/0xb0 [ 1260.810581] ? nlmsg_notify+0x170/0x170 [ 1260.814544] sock_sendmsg+0xb5/0x100 [ 1260.818250] SyS_sendto+0x1c7/0x2c0 [ 1260.821866] ? SyS_getpeername+0x220/0x220 [ 1260.826092] ? task_work_run+0xfd/0x190 [ 1260.830064] ? _raw_spin_unlock_irq+0x24/0x80 [ 1260.834653] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1260.839664] ? _raw_spin_unlock_irq+0x5a/0x80 [ 1260.844148] ? task_work_run+0xfd/0x190 [ 1260.848203] ? do_syscall_64+0x4c/0x640 [ 1260.852178] ? SyS_getpeername+0x220/0x220 [ 1260.856405] do_syscall_64+0x1d5/0x640 [ 1260.860288] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1260.865575] RIP: 0033:0x4193ec [ 1260.868751] RSP: 002b:00007ffdf7a04e30 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 1260.876449] RAX: ffffffffffffffda RBX: 00000000014a4320 RCX: 00000000004193ec [ 1260.883791] RDX: 0000000000000028 RSI: 00000000014a4370 RDI: 0000000000000003 [ 1260.891168] RBP: 0000000000000000 R08: 00007ffdf7a04e84 R09: 000000000000000c [ 1260.898431] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1260.905793] R13: 00000000014a4370 R14: 0000000000000003 R15: 0000000000000000 [ 1260.948638] Mem-Info: [ 1260.951166] active_anon:12989 inactive_anon:61596 isolated_anon:0 [ 1260.951166] active_file:228 inactive_file:283 isolated_file:33 [ 1260.951166] unevictable:0 dirty:27 writeback:0 unstable:0 [ 1260.951166] slab_reclaimable:11995 slab_unreclaimable:113558 [ 1260.951166] mapped:35639 shmem:62223 pagetables:678 bounce:0 [ 1260.951166] free:15193 free_pcp:17 free_cma:0 [ 1260.975611] Mem-Info: [ 1260.987919] active_anon:12989 inactive_anon:61596 isolated_anon:0 [ 1260.987919] active_file:228 inactive_file:283 isolated_file:33 [ 1260.987919] unevictable:0 dirty:27 writeback:0 unstable:0 [ 1260.987919] slab_reclaimable:11995 slab_unreclaimable:113558 [ 1260.987919] mapped:35639 shmem:62223 pagetables:678 bounce:0 [ 1260.987919] free:15445 free_pcp:188 free_cma:0 [ 1261.020284] Node 0 active_anon:50280kB inactive_anon:181432kB active_file:924kB inactive_file:1028kB unevictable:0kB isolated(anon):0kB isolated(file):132kB mapped:141232kB dirty:76kB writeback:0kB shmem:183536kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1261.022164] Node 0 active_anon:50280kB inactive_anon:181428kB active_file:924kB inactive_file:1028kB unevictable:0kB isolated(anon):0kB isolated(file):132kB mapped:141176kB dirty:92kB writeback:0kB shmem:183532kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1261.055201] Node 1 active_anon:1600kB inactive_anon:64956kB active_file:32kB inactive_file:92kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:1264kB dirty:36kB writeback:0kB shmem:65360kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1261.079163] Node 1 active_anon:1600kB inactive_anon:64956kB active_file:32kB inactive_file:92kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:1264kB dirty:36kB writeback:0kB shmem:65360kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1261.134801] Node 0 DMA free:11012kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1261.141297] Node 0 [ 1261.161256] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1261.161280] Node 0 DMA32 free:35308kB min:36200kB low:45248kB high:54296kB active_anon:50276kB inactive_anon:181428kB active_file:928kB inactive_file:1028kB unevictable:0kB writepending:12kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:7136kB pagetables:2348kB bounce:0kB free_pcp:620kB local_pcp:0kB free_cma:0kB [ 1261.161302] lowmem_reserve[]: 0 0 0 0 0 [ 1261.161320] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1261.161340] lowmem_reserve[]: 0 0 0 0 0 [ 1261.161360] Node 1 Normal free:26816kB min:53696kB low:67120kB high:80544kB active_anon:1572kB inactive_anon:64956kB active_file:32kB inactive_file:36kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:288kB pagetables:252kB bounce:0kB free_pcp:64kB local_pcp:0kB free_cma:0kB [ 1261.161382] lowmem_reserve[]: 0 0 0 0 0 [ 1261.161402] Node 0 DMA: 13*4kB (UE) [ 1261.168212] DMA free:11012kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1261.197855] 0*8kB 1*16kB (U) 12*32kB (UE) 5*64kB (UE) 6*128kB (UE) 1*256kB (E) 2*512kB (UE) 2*1024kB (UE) 1*2048kB (M) 1*4096kB (M) = 11012kB [ 1261.197917] Node 0 DMA32: 3216*4kB (UME) 253*8kB (UME) 142*16kB (UME) 129*32kB (UME) 19*64kB (U) 97*128kB (UM) 2*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 35432kB [ 1261.197986] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1261.198034] Node 1 Normal: 374*4kB (UM) 109*8kB (UM) 82*16kB (UM) [ 1261.214364] lowmem_reserve[]: [ 1261.238610] 79*32kB [ 1261.276269] 0 [ 1261.365673] syz-executor.1: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1261.389160] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 1261.397519] CPU: 0 PID: 28563 Comm: syz-executor.1 Not tainted 4.14.230-syzkaller #0 [ 1261.403244] (UM) [ 1261.405408] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1261.405425] 10*64kB [ 1261.407477] Call Trace: [ 1261.416898] (M) [ 1261.419183] dump_stack+0x1b2/0x281 [ 1261.421730] 6*128kB [ 1261.423708] warn_alloc.cold+0x96/0x1cc [ 1261.423721] ? zone_watermark_ok_safe+0x220/0x220 [ 1261.423747] __alloc_pages_nodemask+0x2127/0x2720 [ 1261.427387] (M) [ 1261.429738] ? lock_acquire+0x170/0x3f0 [ 1261.433721] 75*256kB [ 1261.438518] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1261.443367] (UM) [ 1261.445314] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1261.449273] 0*512kB [ 1261.451688] ? __mutex_unlock_slowpath+0x75/0x770 [ 1261.456546] 0*1024kB [ 1261.458571] alloc_pages_current+0x155/0x260 [ 1261.464033] 0*2048kB [ 1261.466324] ion_page_pool_alloc+0x118/0x1b0 [ 1261.471143] 0*4096kB [ 1261.473551] ion_system_heap_allocate+0x133/0x8c0 [ 1261.473565] ? _raw_spin_unlock+0x29/0x40 [ 1261.473574] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1261.473583] ? ion_system_contig_heap_create+0x130/0x130 [ 1261.473597] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1261.478016] = 26816kB [ 1261.480416] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1261.484837] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1261.487196] ion_alloc+0x27a/0x810 [ 1261.492013] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1261.496152] ? ion_dma_buf_release+0x40/0x40 [ 1261.496164] ? __might_fault+0x177/0x1b0 [ 1261.496176] ion_ioctl+0xea/0x1f0 [ 1261.496184] ? ion_query_heaps+0x360/0x360 [ 1261.496195] ? ion_query_heaps+0x360/0x360 [ 1261.501120] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1261.506558] do_vfs_ioctl+0x75a/0xff0 [ 1261.506570] ? ioctl_preallocate+0x1a0/0x1a0 [ 1261.506580] ? lock_downgrade+0x740/0x740 [ 1261.506597] ? __fget+0x225/0x360 [ 1261.511608] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1261.514018] ? do_vfs_ioctl+0xff0/0xff0 [ 1261.514031] ? security_file_ioctl+0x83/0xb0 [ 1261.514040] SyS_ioctl+0x7f/0xb0 [ 1261.514051] ? do_vfs_ioctl+0xff0/0xff0 [ 1261.518872] 62279 total pagecache pages [ 1261.527699] do_syscall_64+0x1d5/0x640 [ 1261.527714] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1261.527723] RIP: 0033:0x466459 [ 1261.527731] RSP: 002b:00007feb59368188 EFLAGS: 00000246 [ 1261.531258] 0 pages in swap cache [ 1261.539807] ORIG_RAX: 0000000000000010 [ 1261.539813] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1261.539818] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000005 [ 1261.539823] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1261.539827] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1261.539833] R13: 00007ffe56f14bcf R14: 00007feb59368300 R15: 0000000000022000 [ 1261.546960] 2717 [ 1261.569654] Swap cache stats: add 0, delete 0, find 0/0 [ 1261.569660] Free swap = 0kB [ 1261.569663] Total swap = 0kB [ 1261.569670] 2097051 pages RAM [ 1261.569673] 0 pages HighMem/MovableOnly [ 1261.569676] 363848 pages reserved [ 1261.569679] 0 pages cma reserved [ 1261.715127] 2718 2718 2718 [ 1261.718082] Node 0 DMA32 free:18064kB min:36200kB low:45248kB high:54296kB active_anon:50276kB inactive_anon:181428kB active_file:92kB inactive_file:0kB unevictable:0kB writepending:12kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:7136kB pagetables:2348kB bounce:0kB free_pcp:120kB local_pcp:0kB free_cma:0kB [ 1261.756703] lowmem_reserve[]: 0 0 0 0 0 [ 1261.760701] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1261.790886] lowmem_reserve[]: 0 0 0 0 0 [ 1261.795093] syz-executor.1: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1261.820051] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 1261.820741] Node 1 Normal free:26880kB min:53696kB low:67120kB high:80544kB active_anon:1572kB inactive_anon:64956kB active_file:0kB inactive_file:132kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:288kB pagetables:252kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1261.850785] CPU: 0 PID: 28563 Comm: syz-executor.1 Not tainted 4.14.230-syzkaller #0 [ 1261.869639] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1261.873712] lowmem_reserve[]: [ 1261.878982] Call Trace: [ 1261.878991] 0 [ 1261.882096] dump_stack+0x1b2/0x281 [ 1261.884678] 0 [ 1261.886450] warn_alloc.cold+0x96/0x1cc [ 1261.890044] 0 [ 1261.891857] ? zone_watermark_ok_safe+0x220/0x220 [ 1261.895846] 0 [ 1261.897626] ? usleep_range+0x130/0x130 [ 1261.902451] 0 [ 1261.904252] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1261.904265] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1261.904275] ? run_timer_softirq+0x5a0/0x5a0 [ 1261.904293] __alloc_pages_nodemask+0x2127/0x2720 [ 1261.910044] ? lock_acquire+0x170/0x3f0 [ 1261.915173] Node 0 [ 1261.920143] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1261.924546] DMA: [ 1261.929346] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1261.933322] 5*4kB [ 1261.935977] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1261.940786] (UE) [ 1261.942853] alloc_pages_current+0x155/0x260 [ 1261.947348] 1*8kB [ 1261.949476] ion_page_pool_alloc+0x118/0x1b0 [ 1261.954927] (U) [ 1261.956955] ion_system_heap_allocate+0x133/0x8c0 [ 1261.961350] 0*16kB [ 1261.963491] ? _raw_spin_unlock+0x29/0x40 [ 1261.963500] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1261.963509] ? ion_system_contig_heap_create+0x130/0x130 [ 1261.963520] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1261.963533] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1261.967918] 12*32kB [ 1261.969903] ion_alloc+0x27a/0x810 [ 1261.974769] (UE) [ 1261.976972] ? ion_dma_buf_release+0x40/0x40 [ 1261.981087] 5*64kB [ 1261.986012] ? __might_fault+0x177/0x1b0 [ 1261.986023] ion_ioctl+0xea/0x1f0 [ 1261.986032] ? ion_query_heaps+0x360/0x360 [ 1261.986044] ? ion_query_heaps+0x360/0x360 [ 1261.991468] (UE) [ 1261.996481] do_vfs_ioctl+0x75a/0xff0 [ 1261.996492] ? ioctl_preallocate+0x1a0/0x1a0 [ 1261.996508] ? lock_downgrade+0x740/0x740 [ 1261.996522] ? __fget+0x225/0x360 [ 1262.001336] 6*128kB [ 1262.003670] ? do_vfs_ioctl+0xff0/0xff0 [ 1262.003682] ? security_file_ioctl+0x83/0xb0 [ 1262.003693] SyS_ioctl+0x7f/0xb0 [ 1262.007219] (UE) [ 1262.009267] ? do_vfs_ioctl+0xff0/0xff0 [ 1262.013668] 1*256kB [ 1262.015872] do_syscall_64+0x1d5/0x640 [ 1262.019906] (E) [ 1262.023349] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1262.023359] RIP: 0033:0x466459 [ 1262.023367] RSP: 002b:00007feb59368188 EFLAGS: 00000246 [ 1262.027584] 2*512kB [ 1262.032321] ORIG_RAX: 0000000000000010 [ 1262.032329] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1262.034399] (UE) [ 1262.038582] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000005 [ 1262.038590] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1262.043002] 2*1024kB [ 1262.047112] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1262.047119] R13: 00007ffe56f14bcf R14: 00007feb59368300 R15: 0000000000022000 [ 1262.050559] (UE) [ 1262.067748] warn_alloc_show_mem: 1 callbacks suppressed [ 1262.067752] Mem-Info: [ 1262.093057] 1*2048kB [ 1262.099874] active_anon:12962 inactive_anon:61596 isolated_anon:0 [ 1262.099874] active_file:13 inactive_file:14 isolated_file:3 [ 1262.099874] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1262.099874] slab_reclaimable:11999 slab_unreclaimable:113563 [ 1262.099874] mapped:35123 shmem:62223 pagetables:650 bounce:0 [ 1262.099874] free:13964 free_pcp:30 free_cma:0 [ 1262.102226] (M) [ 1262.109563] Node 0 active_anon:50276kB inactive_anon:181428kB active_file:20kB inactive_file:20kB unevictable:0kB isolated(anon):0kB isolated(file):12kB mapped:139272kB dirty:0kB writeback:0kB shmem:183532kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1262.109579] Node 1 active_anon:1572kB inactive_anon:64956kB active_file:32kB inactive_file:36kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:1220kB dirty:0kB writeback:0kB shmem:65360kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1262.109583] Node 0 DMA free:10972kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1262.109604] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1262.109624] Node 0 DMA32 free:18004kB min:36200kB low:45248kB high:54296kB active_anon:50276kB inactive_anon:181428kB active_file:20kB inactive_file:20kB unevictable:0kB writepending:0kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:7136kB pagetables:2348kB bounce:0kB free_pcp:120kB local_pcp:0kB free_cma:0kB [ 1262.109646] lowmem_reserve[]: 0 [ 1262.122357] 1*4096kB [ 1262.126983] 0 0 0 0 [ 1262.127000] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1262.127024] lowmem_reserve[]: [ 1262.131949] (M) [ 1262.136740] 0 0 0 0 0 [ 1262.136758] Node 1 Normal free:26880kB min:53696kB low:67120kB high:80544kB active_anon:1572kB inactive_anon:64956kB active_file:32kB inactive_file:36kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:288kB pagetables:252kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1262.136782] lowmem_reserve[]: [ 1262.147939] = 10972kB [ 1262.151532] 0 [ 1262.153956] Node 0 DMA32: 2363*4kB (UME) 245*8kB (UME) 134*16kB (UME) 137*32kB (UME) [ 1262.156395] 0 [ 1262.190086] 1*64kB [ 1262.196458] 0 [ 1262.222373] (U) [ 1262.253435] 0 [ 1262.278010] 0*128kB [ 1262.282966] 0 [ 1262.309561] 0*256kB [ 1262.317571] 0*512kB [ 1262.347528] Node 0 [ 1262.349073] 0*1024kB [ 1262.350756] DMA: [ 1262.379277] 0*2048kB 0*4096kB = 18004kB [ 1262.379299] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1262.379345] Node 1 Normal: 372*4kB (UM) 106*8kB (UM) 80*16kB (UM) 81*32kB (UM) 11*64kB (UM) 6*128kB [ 1262.387116] 5*4kB [ 1262.395964] (M) [ 1262.396768] (UE) [ 1262.399009] 75*256kB [ 1262.400807] 1*8kB [ 1262.402782] (UM) [ 1262.408417] (U) [ 1262.408755] 0*512kB [ 1262.411061] 0*16kB [ 1262.413415] 0*1024kB [ 1262.415652] 12*32kB [ 1262.418050] 0*2048kB [ 1262.420099] (UE) [ 1262.424113] 0*4096kB = 26880kB [ 1262.424124] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1262.424129] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1262.424135] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1262.424140] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1262.424143] 62253 total pagecache pages [ 1262.424152] 0 pages in swap cache [ 1262.424157] Swap cache stats: add 0, delete 0, find 0/0 [ 1262.424160] Free swap = 0kB [ 1262.424163] Total swap = 0kB [ 1262.424172] 2097051 pages RAM [ 1262.438701] 5*64kB [ 1262.444179] 0 pages HighMem/MovableOnly [ 1262.446312] (UE) [ 1262.448266] 363848 pages reserved [ 1262.450307] 6*128kB [ 1262.452789] 0 pages cma reserved [ 1262.458828] (UE) [ 1262.458988] Out of memory (oom_kill_allocating_task): Kill process 28585 (syz-executor.2) score 0 or sacrifice child [ 1262.461304] 1*256kB [ 1262.464453] Killed process 28585 (syz-executor.2) total-vm:93120kB, anon-rss:76kB, file-rss:33368kB, shmem-rss:0kB [ 1262.465952] (E) 2*512kB [ 1262.477560] oom_reaper: reaped process 28585 (syz-executor.2), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1262.489944] (UE) [ 1262.497052] device bridge_slave_0 entered promiscuous mode [ 1262.510141] 2*1024kB [ 1262.523559] syz-executor.0 invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask= [ 1262.524613] (UE) [ 1262.527507] (null) [ 1262.530510] 1*2048kB [ 1262.541197] , order=0, oom_score_adj=0 [ 1262.541932] (M) [ 1262.545644] syz-executor.0 cpuset= [ 1262.547790] 1*4096kB [ 1262.554189] / [ 1262.564499] (M) [ 1262.577768] mems_allowed=0-1 [ 1262.583786] = 10972kB [ 1262.602402] CPU: 1 PID: 27390 Comm: syz-executor.0 Not tainted 4.14.230-syzkaller #0 [ 1262.614892] Node 0 [ 1262.617080] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1262.621060] DMA32: [ 1262.623018] Call Trace: [ 1262.623039] dump_stack+0x1b2/0x281 [ 1262.623052] dump_header+0x178/0x82f [ 1262.623063] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1262.623078] ? ___ratelimit+0x2cd/0x530 [ 1262.623088] oom_kill_process.cold+0x10/0xa40 [ 1262.623107] out_of_memory+0xe3e/0x1190 [ 1262.623119] ? oom_killer_disable+0x1c0/0x1c0 [ 1262.623127] ? mutex_trylock+0x152/0x1a0 [ 1262.623138] __alloc_pages_nodemask+0x23e1/0x2720 [ 1262.623158] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1262.631029] 2363*4kB [ 1262.632756] alloc_pages_current+0x155/0x260 [ 1262.637804] (UME) [ 1262.638217] filemap_fault+0x11a1/0x1ad0 [ 1262.660109] 293*8kB [ 1262.662510] ext4_filemap_fault+0x84/0xb0 [ 1262.672198] (UME) [ 1262.674884] __do_fault+0xfa/0x380 [ 1262.674895] __handle_mm_fault+0x2497/0x4620 [ 1262.674905] ? vm_insert_page+0x7c0/0x7c0 [ 1262.674913] ? hrtimer_nanosleep+0x1ff/0x4b0 [ 1262.674921] ? nanosleep_copyout+0x100/0x100 [ 1262.674936] ? mark_held_locks+0xa6/0xf0 [ 1262.674947] handle_mm_fault+0x455/0x9c0 [ 1262.674961] __do_page_fault+0x549/0xad0 [ 1262.674972] ? spurious_fault+0x640/0x640 [ 1262.674981] ? do_page_fault+0x60/0x500 [ 1262.674992] ? page_fault+0x2f/0x50 [ 1262.692789] 138*16kB [ 1262.696057] page_fault+0x45/0x50 [ 1262.696066] RIP: 1339d6:0x9 [ 1262.696070] RSP: 000b:00007fff5a5b1f8c EFLAGS: 00000032 [ 1262.716006] Mem-Info: [ 1262.732060] (UME) [ 1262.758314] active_anon:12948 inactive_anon:61596 isolated_anon:0 [ 1262.758314] active_file:14 inactive_file:16 isolated_file:0 [ 1262.758314] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1262.758314] slab_reclaimable:11999 slab_unreclaimable:113453 [ 1262.758314] mapped:35123 shmem:62223 pagetables:628 bounce:0 [ 1262.758314] free:14045 free_pcp:101 free_cma:0 [ 1262.775649] 137*32kB [ 1262.797576] Node 0 active_anon:50220kB inactive_anon:181428kB active_file:20kB inactive_file:32kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:139272kB dirty:0kB writeback:0kB shmem:183532kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1262.859588] (UME) 1*64kB (U) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18452kB [ 1262.881151] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1262.889167] Node 1 active_anon:1572kB inactive_anon:64956kB active_file:36kB inactive_file:32kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:1220kB dirty:0kB writeback:0kB shmem:65360kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1262.904750] Node 1 [ 1262.940609] Node 0 DMA free:10972kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1262.951204] Normal: [ 1262.992545] lowmem_reserve[]: [ 1262.996830] 341*4kB (UM) 106*8kB (UM) 80*16kB (UM) 81*32kB (UM) 11*64kB (UM) 6*128kB (M) 75*256kB (UM) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 26756kB [ 1263.003948] 0 [ 1263.028812] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1263.033774] 2717 2718 2718 2718 [ 1263.042878] Node 0 [ 1263.059238] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1263.088224] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1263.101416] DMA32 free:18500kB min:36200kB low:45248kB high:54296kB active_anon:50220kB inactive_anon:181428kB active_file:52kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:7136kB pagetables:2260kB bounce:0kB free_pcp:292kB local_pcp:0kB free_cma:0kB [ 1263.111694] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1263.167366] 62253 total pagecache pages [ 1263.171384] 0 pages in swap cache [ 1263.176423] lowmem_reserve[]: 0 0 0 0 0 [ 1263.180446] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1263.189760] Swap cache stats: add 0, delete 0, find 0/0 [ 1263.225779] Free swap = 0kB [ 1263.228819] Total swap = 0kB [ 1263.231833] 2097051 pages RAM [ 1263.231958] lowmem_reserve[]: [ 1263.248895] 0 pages HighMem/MovableOnly [ 1263.254602] 0 0 0 0 0 [ 1263.258563] Node 1 Normal free:26856kB min:53696kB low:67120kB high:80544kB active_anon:1572kB inactive_anon:64956kB active_file:84kB inactive_file:0kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:288kB pagetables:252kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1263.262283] 363848 pages reserved [ 1263.310829] lowmem_reserve[]: 0 0 0 0 0 [ 1263.311267] 0 pages cma reserved [ 1263.349284] Node 0 DMA: 5*4kB (UE) 1*8kB (U) 0*16kB 12*32kB (UE) 5*64kB (UE) 6*128kB (UE) 1*256kB (E) 2*512kB (UE) 2*1024kB (UE) 1*2048kB (M) 1*4096kB (M) = 10972kB [ 1263.386842] Node 0 DMA32: 2416*4kB (UME) 306*8kB (UME) 142*16kB (UME) 137*32kB (UME) 107*64kB (U) 10*128kB (U) 1*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 27152kB [ 1263.432977] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1263.443903] Node 1 Normal: 2*4kB (UE) 0*8kB 1*16kB (M) 1*32kB (M) 695*64kB (UME) 755*128kB (U) 119*256kB (UE) 10*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 176760kB [ 1263.498075] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1263.554698] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1263.592979] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1263.601900] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1263.652943] 63659 total pagecache pages [ 1263.656957] 0 pages in swap cache [ 1263.660399] Swap cache stats: add 0, delete 0, find 0/0 [ 1263.692933] Free swap = 0kB [ 1263.695978] Total swap = 0kB [ 1263.698990] 2097051 pages RAM [ 1263.702087] 0 pages HighMem/MovableOnly [ 1263.732942] 363848 pages reserved [ 1263.736424] 0 pages cma reserved [ 1263.739786] Out of memory (oom_kill_allocating_task): Kill process 27390 (syz-executor.0) score 0 or sacrifice child [ 1263.772963] Killed process 28715 (syz-executor.0) total-vm:93252kB, anon-rss:156kB, file-rss:34816kB, shmem-rss:0kB [ 1263.820226] oom_reaper: reaped process 28715 (syz-executor.0), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB 13:38:40 executing program 1: ioctl$SIOCPNDELRESOURCE(0xffffffffffffffff, 0x89ef, &(0x7f0000000040)=0xffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f00000012c0)={0x0, @nl=@unspec, @tipc=@id={0x1e, 0x3, 0x2, {0x4e21, 0x4}}, @ethernet={0x307, @random="68d88c73bc2f"}, 0x0, 0x0, 0x0, 0x0, 0x20, &(0x7f0000001280)='bridge_slave_0\x00', 0x401, 0x0, 0xfd51}) semctl$SETVAL(0x0, 0x0, 0x10, 0x0) semctl$GETVAL(0x0, 0x0, 0xc, &(0x7f0000000180)=""/194) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$x25(0x9, 0x5, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x500, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x80000000, 0xa, 0x1}) [ 1264.469730] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1264.479939] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1264.500012] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1264.519003] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1264.538837] device bridge_slave_1 left promiscuous mode [ 1264.554846] bridge0: port 2(bridge_slave_1) entered disabled state [ 1264.569551] device bridge_slave_0 left promiscuous mode [ 1264.585648] bridge0: port 1(bridge_slave_0) entered disabled state [ 1264.608551] device veth1_macvtap left promiscuous mode [ 1264.623250] device veth0_macvtap left promiscuous mode [ 1264.659777] device veth1_vlan left promiscuous mode [ 1264.680543] device veth0_vlan left promiscuous mode 13:38:41 executing program 3: ioctl$SIOCPNDELRESOURCE(0xffffffffffffffff, 0x89ef, &(0x7f0000000040)=0xffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={0x0}}, 0x0) ioctl$sock_SIOCADDRT(r0, 0x890b, 0x0) semctl$SETVAL(0x0, 0x0, 0x10, 0x0) semctl$GETVAL(0x0, 0x0, 0xc, &(0x7f0000000180)=""/194) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$x25(0x9, 0x5, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x500, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x80000000, 0xa, 0x1}) 13:38:41 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) clock_gettime(0x0, &(0x7f0000003d00)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000003bc0)=[{{&(0x7f0000000040)=@nfc, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000140)=""/45, 0x2d}, {&(0x7f0000000180)=""/187, 0xbb}, {&(0x7f0000000240)=""/2, 0x2}, {&(0x7f0000000280)=""/156, 0x9c}, {&(0x7f0000000340)=""/128, 0x80}], 0x5, &(0x7f0000000440)=""/1, 0x1}, 0x8}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000480)=""/73, 0x49}], 0x1, &(0x7f0000000540)=""/38, 0x26}, 0xf600}, {{0x0, 0x0, &(0x7f0000002680)=[{&(0x7f0000000580)=""/4096, 0x1000}, {&(0x7f0000001580)=""/4096, 0x1000}, {&(0x7f0000002580)=""/25, 0x19}, {&(0x7f00000025c0)}, {&(0x7f0000002600)=""/86, 0x56}], 0x5}, 0x2}, {{&(0x7f0000002700)=@sco={0x1f, @fixed}, 0x80, &(0x7f0000002780), 0x0, &(0x7f00000027c0)=""/224, 0xe0}, 0x81}, {{&(0x7f00000028c0)=@l2, 0x80, &(0x7f0000003b00)=[{&(0x7f0000002940)=""/146, 0x92}, {&(0x7f0000002a00)=""/4096, 0x1000}, {&(0x7f0000003a00)=""/92, 0x5c}, {&(0x7f0000003a80)=""/38, 0x26}, {&(0x7f0000003ac0)=""/30, 0x1e}], 0x5, &(0x7f0000003b80)=""/44, 0x2c}, 0x9}], 0x5, 0x11, &(0x7f0000003d40)={r1, r2+10000000}) getsockopt$CAN_RAW_JOIN_FILTERS(0xffffffffffffffff, 0x65, 0x6, &(0x7f0000003e40), &(0x7f0000003e80)=0x4) semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f00000000c0)=""/89) r3 = semget$private(0x0, 0x4, 0xab7ad825ac5f67d1) semctl$SETVAL(r3, 0x3, 0x10, &(0x7f0000000000)=0x6) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000002780)='l2tp\x00', r0) r5 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100)='/dev/bsg\x00', 0x204402, 0x0) write$eventfd(r5, 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000003e00)={&(0x7f00000025c0)={0x10, 0x0, 0x0, 0x81810}, 0xc, &(0x7f0000003dc0)={&(0x7f0000003d80)={0x2c, r4, 0x4, 0x70bd2b, 0x25dfdbfe, {}, [@L2TP_ATTR_FD={0x8, 0x17, @udp=r5}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x90) 13:38:41 executing program 4: semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f00000000c0)=""/89) semctl$SEM_STAT_ANY(0x0, 0xbed38f6a21872963, 0x14, &(0x7f0000000000)=""/156) semctl$GETPID(0xffffffffffffffff, 0x4, 0xb, &(0x7f0000000140)=""/4096) semget$private(0x0, 0x2, 0x416) 13:38:41 executing program 2: r0 = semget$private(0x0, 0x1, 0x0) semctl$IPC_STAT(r0, 0x0, 0x2, &(0x7f00000000c0)=""/89) r1 = semget$private(0x0, 0x0, 0xb0) semctl$IPC_RMID(r1, 0x0, 0x0) semctl$IPC_STAT(r1, 0x0, 0x2, &(0x7f0000000080)=""/104) semctl$IPC_STAT(r1, 0x0, 0x2, &(0x7f0000000540)=""/206) semctl$SEM_STAT(r1, 0x0, 0x12, &(0x7f0000000000)=""/112) 13:38:41 executing program 4: semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f00000000c0)=""/89) 13:38:41 executing program 4: r0 = semget$private(0x0, 0x0, 0x100) semctl$IPC_STAT(r0, 0x0, 0x2, &(0x7f0000000000)=""/60) semctl$IPC_STAT(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000080)=""/72) pkey_free(0xffffffffffffffff) [ 1265.238646] device hsr_slave_1 left promiscuous mode [ 1265.291259] device hsr_slave_0 left promiscuous mode 13:38:41 executing program 4: r0 = semget$private(0x0, 0x0, 0xb0) semctl$IPC_RMID(r0, 0x0, 0x0) semctl$IPC_STAT(r0, 0x0, 0x2, &(0x7f0000000080)=""/104) semctl$IPC_STAT(r0, 0x0, 0x2, &(0x7f0000000540)=""/206) r1 = semget$private(0x0, 0x3, 0x200) semctl$IPC_STAT(r1, 0x0, 0x2, &(0x7f00000000c0)=""/75) 13:38:41 executing program 4: semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f00000000c0)=""/89) recvmmsg(0xffffffffffffffff, &(0x7f0000001d00)=[{{&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000140)=""/131, 0x83}, {&(0x7f0000000200)=""/176, 0xb0}, {&(0x7f00000002c0)=""/155, 0x9b}], 0x3, &(0x7f0000000380)=""/49, 0x31}, 0x9}, {{&(0x7f00000003c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, 0x80, &(0x7f0000001580)=[{&(0x7f0000000440)=""/115, 0x73}, {&(0x7f00000004c0)=""/20, 0x14}, {&(0x7f0000000500)=""/4096, 0x1000}, {&(0x7f0000001500)=""/50, 0x32}, {&(0x7f0000001540)=""/35, 0x23}], 0x5}, 0x80000000}, {{&(0x7f0000001600)=@ax25={{0x3, @default}, [@null, @remote, @remote, @remote, @remote, @netrom, @remote, @null]}, 0x80, &(0x7f0000001880)=[{&(0x7f0000001680)=""/57, 0x39}, {&(0x7f00000016c0)=""/225, 0xe1}, {&(0x7f00000017c0)=""/104, 0x68}, {&(0x7f0000001840)=""/22, 0x16}], 0x4, &(0x7f00000018c0)=""/67, 0x43}, 0x20}, {{&(0x7f0000001940)=@nfc, 0x80, &(0x7f0000001bc0)=[{&(0x7f00000019c0)=""/207, 0xcf}, {&(0x7f0000001ac0)=""/122, 0x7a}, {&(0x7f0000001b40)=""/115, 0x73}], 0x3, &(0x7f0000001c00)=""/198, 0xc6}, 0x1}], 0x4, 0x100, 0x0) setsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, &(0x7f0000001e00)=0x1, 0x4) [ 1265.384183] team0 (unregistering): Port device team_slave_1 removed [ 1265.410475] team0 (unregistering): Port device team_slave_0 removed 13:38:41 executing program 4: semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f00000000c0)=""/89) r0 = semget$private(0x0, 0x0, 0xb0) semctl$IPC_RMID(r0, 0x0, 0x0) semctl$IPC_STAT(r0, 0x0, 0x2, &(0x7f0000000080)=""/104) semctl$IPC_STAT(r0, 0x0, 0x2, &(0x7f0000000540)=""/206) semctl$SEM_INFO(r0, 0x1, 0x13, &(0x7f0000000140)=""/229) [ 1265.455614] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 1265.518340] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 1265.676277] bond0 (unregistering): Released all slaves [ 1265.705892] systemd[1]: Started Journal Service. [ 1265.943935] syz-executor.1: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1265.968009] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 1265.978774] CPU: 1 PID: 28756 Comm: syz-executor.1 Not tainted 4.14.230-syzkaller #0 [ 1265.986671] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1265.996026] Call Trace: [ 1265.998637] dump_stack+0x1b2/0x281 [ 1266.002353] warn_alloc.cold+0x96/0x1cc [ 1266.006333] ? zone_watermark_ok_safe+0x220/0x220 [ 1266.011193] __alloc_pages_nodemask+0x2127/0x2720 [ 1266.016044] ? _raw_spin_unlock_irq+0x24/0x80 [ 1266.020565] ? lock_acquire+0x170/0x3f0 [ 1266.024568] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1266.029421] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1266.034900] ? __mutex_unlock_slowpath+0x75/0x770 [ 1266.039751] alloc_pages_current+0x155/0x260 [ 1266.044252] ion_page_pool_alloc+0x118/0x1b0 [ 1266.049054] ion_system_heap_allocate+0x133/0x8c0 [ 1266.057108] ? ion_alloc+0x187/0x810 [ 1266.060860] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1266.066326] ? ion_system_contig_heap_create+0x130/0x130 [ 1266.071772] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1266.076799] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1266.081742] ion_alloc+0x204/0x810 [ 1266.085458] ? ion_dma_buf_release+0x40/0x40 [ 1266.089875] ? __might_fault+0x177/0x1b0 [ 1266.093945] ion_ioctl+0xea/0x1f0 [ 1266.097406] ? ion_query_heaps+0x360/0x360 [ 1266.101736] ? ion_query_heaps+0x360/0x360 [ 1266.106077] do_vfs_ioctl+0x75a/0xff0 [ 1266.109886] ? ioctl_preallocate+0x1a0/0x1a0 [ 1266.114300] ? lock_downgrade+0x740/0x740 [ 1266.118452] ? __fget+0x225/0x360 [ 1266.121903] ? do_vfs_ioctl+0xff0/0xff0 [ 1266.125876] ? security_file_ioctl+0x83/0xb0 [ 1266.130366] SyS_ioctl+0x7f/0xb0 [ 1266.133725] ? do_vfs_ioctl+0xff0/0xff0 [ 1266.137716] do_syscall_64+0x1d5/0x640 [ 1266.141625] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1266.146835] RIP: 0033:0x466459 [ 1266.150033] RSP: 002b:00007feb59368188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1266.157742] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1266.165038] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000005 [ 1266.172302] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1266.179564] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1266.186919] R13: 00007ffe56f14bcf R14: 00007feb59368300 R15: 0000000000022000 [ 1266.454124] Mem-Info: [ 1266.458839] active_anon:12832 inactive_anon:61592 isolated_anon:0 [ 1266.458839] active_file:1563 inactive_file:4288 isolated_file:0 [ 1266.458839] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1266.458839] slab_reclaimable:12065 slab_unreclaimable:120018 [ 1266.458839] mapped:30627 shmem:62216 pagetables:606 bounce:0 [ 1266.458839] free:62229 free_pcp:449 free_cma:0 [ 1266.555811] Node 0 active_anon:50236kB inactive_anon:181416kB active_file:324kB inactive_file:912kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:114860kB dirty:0kB writeback:0kB shmem:183516kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1266.666634] Node 1 active_anon:1492kB inactive_anon:64952kB active_file:6028kB inactive_file:16440kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:18048kB dirty:0kB writeback:0kB shmem:65348kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1266.737892] Node 0 DMA free:11116kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1266.792545] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1266.803643] Node 0 DMA32 free:45204kB min:36200kB low:45248kB high:54296kB active_anon:50236kB inactive_anon:181416kB active_file:424kB inactive_file:912kB unevictable:0kB writepending:0kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:7168kB pagetables:2468kB bounce:0kB free_pcp:848kB local_pcp:176kB free_cma:0kB [ 1266.863766] lowmem_reserve[]: 0 0 0 0 0 [ 1266.872317] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1266.925156] lowmem_reserve[]: 0 0 0 0 0 [ 1266.934752] Node 1 Normal free:131164kB min:53696kB low:67120kB high:80544kB active_anon:1492kB inactive_anon:64952kB active_file:6028kB inactive_file:16440kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:224kB pagetables:252kB bounce:0kB free_pcp:764kB local_pcp:52kB free_cma:0kB [ 1266.994303] lowmem_reserve[]: 0 0 0 0 0 [ 1267.002801] Node 0 DMA: 4*4kB (UE) 2*8kB (U) 3*16kB (UE) 1*32kB (U) 2*64kB (UE) 7*128kB (UE) 3*256kB (UE) 2*512kB (UE) 2*1024kB (UE) 1*2048kB (M) 1*4096kB (M) = 11120kB [ 1267.036748] Node 0 DMA32: 411*4kB (UME) 128*8kB (ME) 497*16kB (UME) 2569*32kB (UME) 133*64kB (U) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 101340kB [ 1267.066865] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1267.090177] Node 1 Normal: 2*4kB (UM) 9*8kB (UE) 7*16kB (UME) 5*32kB (UME) 226*64kB (UME) 500*128kB (UME) 64*256kB (U) 70*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 131040kB [ 1267.122309] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1267.152983] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1267.161600] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1267.183017] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1267.191626] 68192 total pagecache pages [ 1267.212985] 0 pages in swap cache [ 1267.216468] Swap cache stats: add 0, delete 0, find 0/0 [ 1267.221846] Free swap = 0kB [ 1267.232981] Total swap = 0kB [ 1267.236017] 2097051 pages RAM [ 1267.239113] 0 pages HighMem/MovableOnly [ 1267.253003] 363848 pages reserved [ 1267.256489] 0 pages cma reserved [ 1267.659436] oom_reaper: reaped process 28756 (syz-executor.1), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1268.087910] syz-executor.0 invoked oom-killer: gfp_mask=0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null), order=0, oom_score_adj=1000 [ 1268.107415] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 1268.112560] CPU: 1 PID: 28722 Comm: syz-executor.0 Not tainted 4.14.230-syzkaller #0 [ 1268.120442] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1268.129797] Call Trace: [ 1268.132390] dump_stack+0x1b2/0x281 [ 1268.136049] dump_header+0x178/0x82f [ 1268.139764] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1268.144901] ? ___ratelimit+0x2cd/0x530 [ 1268.148886] oom_kill_process.cold+0x10/0xa40 [ 1268.153396] out_of_memory+0xe3e/0x1190 [ 1268.157401] ? oom_killer_disable+0x1c0/0x1c0 [ 1268.161901] ? mutex_trylock+0x152/0x1a0 [ 1268.165998] __alloc_pages_nodemask+0x23e1/0x2720 [ 1268.170881] ? lock_acquire+0x170/0x3f0 [ 1268.172984] syz-executor.1: page allocation failure: order:0 [ 1268.174876] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1268.174887] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1268.180668] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1268.197072] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1268.202525] alloc_pages_current+0x155/0x260 [ 1268.206932] ion_page_pool_alloc+0x118/0x1b0 [ 1268.211352] ion_system_heap_allocate+0x133/0x8c0 [ 1268.216213] ? ion_alloc+0x187/0x810 [ 1268.220010] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1268.225560] ? ion_system_contig_heap_create+0x130/0x130 [ 1268.231007] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1268.236032] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1268.240894] ion_alloc+0x204/0x810 [ 1268.244443] ? ion_dma_buf_release+0x40/0x40 [ 1268.248869] ? __might_fault+0x177/0x1b0 [ 1268.252929] ion_ioctl+0xea/0x1f0 [ 1268.256401] ? ion_query_heaps+0x360/0x360 [ 1268.260645] ? ion_query_heaps+0x360/0x360 [ 1268.264909] do_vfs_ioctl+0x75a/0xff0 [ 1268.268705] ? ioctl_preallocate+0x1a0/0x1a0 [ 1268.273132] ? lock_downgrade+0x740/0x740 [ 1268.277277] ? __fget+0x225/0x360 [ 1268.280719] ? do_vfs_ioctl+0xff0/0xff0 [ 1268.284709] ? security_file_ioctl+0x83/0xb0 [ 1268.289112] SyS_ioctl+0x7f/0xb0 [ 1268.292471] ? do_vfs_ioctl+0xff0/0xff0 [ 1268.296560] do_syscall_64+0x1d5/0x640 [ 1268.300449] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1268.305628] RIP: 0033:0x466459 [ 1268.308806] RSP: 002b:00007f141b2c2188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1268.316518] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1268.323783] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000005 [ 1268.331064] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1268.338325] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1268.345588] R13: 00007fff5a5b1ccf R14: 00007f141b2c2300 R15: 0000000000022000 [ 1268.357858] (null) [ 1268.359249] Mem-Info: [ 1268.360023] syz-executor.1 cpuset= [ 1268.362442] active_anon:12985 inactive_anon:61592 isolated_anon:0 [ 1268.362442] active_file:12 inactive_file:11 isolated_file:0 [ 1268.362442] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1268.362442] slab_reclaimable:12061 slab_unreclaimable:119789 [ 1268.362442] mapped:52712 shmem:62216 pagetables:738 bounce:0 [ 1268.362442] free:13907 free_pcp:7 free_cma:0 [ 1268.362444] / mems_allowed=0-1 [ 1268.368569] Node 0 active_anon:50440kB inactive_anon:181416kB active_file:36kB inactive_file:36kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:187168kB dirty:0kB writeback:0kB shmem:183516kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1268.409392] CPU: 1 PID: 28756 Comm: syz-executor.1 Not tainted 4.14.230-syzkaller #0 [ 1268.433965] Node 1 active_anon:1500kB inactive_anon:64952kB active_file:12kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:23680kB dirty:0kB writeback:0kB shmem:65348kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1268.438420] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1268.474853] Call Trace: [ 1268.477456] dump_stack+0x1b2/0x281 [ 1268.479469] Node 0 DMA free:10976kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1268.481120] warn_alloc.cold+0x96/0x1cc [ 1268.481134] ? zone_watermark_ok_safe+0x220/0x220 [ 1268.513920] lowmem_reserve[]: 0 [ 1268.516064] ? usleep_range+0x130/0x130 [ 1268.516077] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1268.519339] 2717 [ 1268.523301] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1268.523311] ? run_timer_softirq+0x5a0/0x5a0 [ 1268.523329] __alloc_pages_nodemask+0x2127/0x2720 [ 1268.523345] ? lock_acquire+0x170/0x3f0 [ 1268.523360] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1268.523369] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1268.523384] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1268.523399] ? alloc_pages_current+0x37/0x260 [ 1268.531802] 2718 [ 1268.535535] alloc_pages_current+0x155/0x260 [ 1268.535549] ion_page_pool_alloc+0x118/0x1b0 [ 1268.535559] ion_system_heap_allocate+0x133/0x8c0 [ 1268.535569] ? ion_alloc+0x187/0x810 [ 1268.535579] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1268.535590] ? ion_system_contig_heap_create+0x130/0x130 [ 1268.544926] 2718 [ 1268.548786] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1268.570265] 2718 [ 1268.574484] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1268.574498] ion_alloc+0x204/0x810 [ 1268.574512] ? ion_dma_buf_release+0x40/0x40 [ 1268.574523] ? __might_fault+0x177/0x1b0 [ 1268.574534] ion_ioctl+0xea/0x1f0 [ 1268.574542] ? ion_query_heaps+0x360/0x360 [ 1268.574554] ? ion_query_heaps+0x360/0x360 [ 1268.574565] do_vfs_ioctl+0x75a/0xff0 [ 1268.574576] ? ioctl_preallocate+0x1a0/0x1a0 [ 1268.592934] ? lock_downgrade+0x740/0x740 [ 1268.592950] ? __fget+0x225/0x360 [ 1268.592960] ? do_vfs_ioctl+0xff0/0xff0 [ 1268.592972] ? security_file_ioctl+0x83/0xb0 [ 1268.592982] SyS_ioctl+0x7f/0xb0 [ 1268.592992] ? do_vfs_ioctl+0xff0/0xff0 [ 1268.599953] Node 0 [ 1268.600493] do_syscall_64+0x1d5/0x640 [ 1268.618231] DMA32 free:18100kB min:36200kB low:45248kB high:54296kB active_anon:50440kB inactive_anon:181416kB active_file:36kB inactive_file:36kB unevictable:0kB writepending:0kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:7168kB pagetables:2468kB bounce:0kB free_pcp:28kB local_pcp:0kB free_cma:0kB [ 1268.620310] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1268.641623] lowmem_reserve[]: [ 1268.644462] RIP: 0033:0x466459 [ 1268.644467] RSP: 002b:00007feb59368188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1268.644477] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1268.644482] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000005 [ 1268.644487] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1268.644492] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1268.644497] R13: 00007ffe56f14bcf R14: 00007feb59368300 R15: 0000000000022000 [ 1268.691080] Mem-Info: [ 1268.715613] 0 [ 1268.740897] active_anon:12985 inactive_anon:61592 isolated_anon:0 [ 1268.740897] active_file:12 inactive_file:11 isolated_file:0 [ 1268.740897] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1268.740897] slab_reclaimable:12061 slab_unreclaimable:119789 [ 1268.740897] mapped:52712 shmem:62216 pagetables:738 bounce:0 [ 1268.740897] free:13907 free_pcp:0 free_cma:0 [ 1268.753589] 0 [ 1268.777061] Node 0 active_anon:50440kB inactive_anon:181416kB active_file:36kB inactive_file:36kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:187168kB dirty:0kB writeback:0kB shmem:183516kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1268.807347] 0 0 0 [ 1268.841461] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1268.843603] Node 1 active_anon:1500kB inactive_anon:64952kB active_file:12kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:23680kB dirty:0kB writeback:0kB shmem:65348kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1268.878495] lowmem_reserve[]: 0 0 0 0 0 [ 1268.910742] Node 1 Normal free:26552kB min:53696kB low:67120kB high:80544kB active_anon:1500kB inactive_anon:64952kB active_file:12kB inactive_file:8kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:320kB pagetables:484kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1268.910860] Node 0 [ 1268.951460] lowmem_reserve[]: [ 1268.954325] DMA free:10976kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1268.958493] 0 [ 1268.997648] lowmem_reserve[]: [ 1268.999339] 0 [ 1268.999502] 0 [ 1269.002648] 0 [ 1269.019731] 2717 [ 1269.020279] 0 [ 1269.021560] 2718 [ 1269.028563] 0 [ 1269.031646] 2718 [ 1269.032423] Node 0 [ 1269.032425] 2718 [ 1269.052670] DMA: 2*4kB (UE) 1*8kB (U) 1*16kB (E) 0*32kB 1*64kB (E) 7*128kB (UE) 3*256kB (UE) 2*512kB (UE) 2*1024kB (UE) 1*2048kB (M) 1*4096kB (M) = 10976kB [ 1269.053028] Node 0 [ 1269.081253] Node 0 [ 1269.081590] DMA32 free:18176kB min:36200kB low:45248kB high:54296kB active_anon:50440kB inactive_anon:181416kB active_file:0kB inactive_file:84kB unevictable:0kB writepending:0kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:7168kB pagetables:2468kB bounce:0kB free_pcp:16kB local_pcp:16kB free_cma:0kB [ 1269.091669] DMA32: 714*4kB (UME) 177*8kB (UME) 63*16kB (UME) 25*32kB (ME) 187*64kB (U) 2*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18304kB [ 1269.141525] lowmem_reserve[]: 0 0 0 0 0 [ 1269.161139] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1269.172225] Node 0 [ 1269.197349] lowmem_reserve[]: 0 0 0 0 0 [ 1269.207768] Node 1 Normal free:26672kB min:53696kB low:67120kB high:80544kB active_anon:1500kB inactive_anon:64952kB active_file:36kB inactive_file:0kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:320kB pagetables:484kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1269.212541] Normal: [ 1269.247396] lowmem_reserve[]: 0 0 0 0 0 [ 1269.257639] Node 0 DMA: 2*4kB (UE) 1*8kB (U) 1*16kB (E) 0*32kB 1*64kB (E) 7*128kB (UE) 3*256kB (UE) 2*512kB (UE) 2*1024kB (UE) 1*2048kB (M) 1*4096kB (M) = 10976kB [ 1269.261908] 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1269.289016] Node 0 DMA32: 714*4kB (UME) 177*8kB (UME) 63*16kB (UME) 25*32kB (ME) 187*64kB (U) 2*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18304kB [ 1269.306818] Node 1 Normal: 52*4kB (UM) 33*8kB (UME) 26*16kB (UME) 24*32kB (UME) 15*64kB (ME) 14*128kB (UME) 7*256kB (UM) 40*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 26680kB [ 1269.346090] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1269.359167] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1269.368888] Node 1 Normal: 52*4kB (UM) 41*8kB (UME) 28*16kB (UME) 24*32kB (UME) 15*64kB (ME) 14*128kB (UME) 7*256kB (UM) 40*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 26776kB [ 1269.388343] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1269.396364] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1269.418114] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1269.439276] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1269.439497] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1269.452071] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1269.477953] 62239 total pagecache pages [ 1269.481965] 0 pages in swap cache [ 1269.487496] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1269.496765] Swap cache stats: add 0, delete 0, find 0/0 [ 1269.501019] 62239 total pagecache pages [ 1269.502172] Free swap = 0kB [ 1269.518338] 0 pages in swap cache [ 1269.521822] Swap cache stats: add 0, delete 0, find 0/0 [ 1269.527423] Total swap = 0kB [ 1269.530454] 2097051 pages RAM [ 1269.531817] Free swap = 0kB [ 1269.551651] Total swap = 0kB [ 1269.551654] 0 pages HighMem/MovableOnly [ 1269.551662] 363848 pages reserved [ 1269.556740] 2097051 pages RAM [ 1269.567558] 0 pages cma reserved [ 1269.573654] 0 pages HighMem/MovableOnly [ 1269.609499] 363848 pages reserved [ 1269.627022] 0 pages cma reserved [ 1269.655889] Out of memory (oom_kill_allocating_task): Kill process 28722 (syz-executor.0) score 0 or sacrifice child [ 1269.723846] Killed process 28722 (syz-executor.0) total-vm:93252kB, anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1269.783124] syz-executor.0: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1269.814201] device bridge_slave_0 left promiscuous mode [ 1269.819786] bridge0: port 1(bridge_slave_0) entered disabled state [ 1269.868765] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 1269.874963] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1269.881661] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1269.891529] CPU: 0 PID: 28722 Comm: syz-executor.0 Not tainted 4.14.230-syzkaller #0 [ 1269.899419] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1269.908777] Call Trace: [ 1269.911381] dump_stack+0x1b2/0x281 [ 1269.915722] warn_alloc.cold+0x96/0x1cc [ 1269.919700] ? zone_watermark_ok_safe+0x220/0x220 [ 1269.924553] ? wait_for_completion_io+0x10/0x10 [ 1269.929228] __alloc_pages_nodemask+0x2127/0x2720 [ 1269.934076] ? lock_acquire+0x170/0x3f0 [ 1269.938053] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1269.942892] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1269.947398] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1269.952857] alloc_pages_current+0x155/0x260 [ 1269.957268] ion_page_pool_alloc+0x118/0x1b0 [ 1269.961691] ion_system_heap_allocate+0x133/0x8c0 [ 1269.966535] ? ion_alloc+0x187/0x810 [ 1269.970246] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1269.975694] ? ion_system_contig_heap_create+0x130/0x130 [ 1269.981141] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1269.986159] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1269.991018] ion_alloc+0x204/0x810 [ 1269.994563] ? ion_dma_buf_release+0x40/0x40 [ 1270.000383] ? __might_fault+0x177/0x1b0 [ 1270.004501] ion_ioctl+0xea/0x1f0 [ 1270.008347] ? ion_query_heaps+0x360/0x360 [ 1270.012611] ? ion_query_heaps+0x360/0x360 [ 1270.016861] do_vfs_ioctl+0x75a/0xff0 [ 1270.020669] ? ioctl_preallocate+0x1a0/0x1a0 [ 1270.025078] ? lock_downgrade+0x740/0x740 [ 1270.029258] ? __fget+0x225/0x360 [ 1270.036715] ? do_vfs_ioctl+0xff0/0xff0 [ 1270.040713] ? security_file_ioctl+0x83/0xb0 [ 1270.045120] SyS_ioctl+0x7f/0xb0 [ 1270.048480] ? do_vfs_ioctl+0xff0/0xff0 [ 1270.052453] do_syscall_64+0x1d5/0x640 [ 1270.056430] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1270.061635] RIP: 0033:0x466459 [ 1270.064817] RSP: 002b:00007f141b2c2188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1270.072524] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1270.079805] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000005 [ 1270.087080] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1270.094369] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1270.101651] R13: 00007fff5a5b1ccf R14: 00007f141b2c2300 R15: 0000000000022000 [ 1270.117658] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1270.132441] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1270.151807] device bridge_slave_1 left promiscuous mode [ 1270.157541] bridge0: port 2(bridge_slave_1) entered disabled state [ 1270.165168] device bridge_slave_0 left promiscuous mode [ 1270.171204] bridge0: port 1(bridge_slave_0) entered disabled state [ 1270.181743] Mem-Info: [ 1270.184306] device veth1_macvtap left promiscuous mode [ 1270.192731] device veth0_macvtap left promiscuous mode [ 1270.198224] active_anon:12997 inactive_anon:61592 isolated_anon:0 [ 1270.198224] active_file:373 inactive_file:1073 isolated_file:0 [ 1270.198224] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1270.198224] slab_reclaimable:12061 slab_unreclaimable:119153 [ 1270.198224] mapped:53832 shmem:62216 pagetables:738 bounce:0 [ 1270.198224] free:369314 free_pcp:285 free_cma:0 [ 1270.233100] device veth1_vlan left promiscuous mode [ 1270.238175] device veth0_vlan left promiscuous mode [ 1270.264603] Node 0 active_anon:50488kB inactive_anon:181416kB active_file:1584kB inactive_file:4384kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:191748kB dirty:0kB writeback:0kB shmem:183516kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1270.358506] Node 1 active_anon:1500kB inactive_anon:64952kB active_file:8kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:23680kB dirty:0kB writeback:0kB shmem:65348kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1270.434737] Node 0 DMA free:11676kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1270.476000] bond0 (unregistering): Released all slaves [ 1270.494541] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1270.499620] Node 0 DMA32 free:126732kB min:36200kB low:45248kB high:54296kB active_anon:50688kB inactive_anon:181416kB active_file:3084kB inactive_file:5184kB unevictable:0kB writepending:0kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:7232kB pagetables:2468kB bounce:0kB free_pcp:1256kB local_pcp:628kB free_cma:0kB [ 1270.557561] device hsr_slave_1 left promiscuous mode [ 1270.570705] lowmem_reserve[]: 0 0 0 0 0 [ 1270.574823] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1270.600754] device hsr_slave_0 left promiscuous mode [ 1270.617585] team0 (unregistering): Port device team_slave_1 removed [ 1270.636096] lowmem_reserve[]: 0 0 0 0 0 [ 1270.640657] Node 1 Normal free:945428kB min:53696kB low:67120kB high:80544kB active_anon:1100kB inactive_anon:64952kB active_file:8kB inactive_file:8kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:288kB pagetables:484kB bounce:0kB free_pcp:788kB local_pcp:56kB free_cma:0kB [ 1270.671087] team0 (unregistering): Port device team_slave_0 removed [ 1270.684351] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 1270.696738] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 1270.716781] lowmem_reserve[]: 0 0 0 0 0 [ 1270.720917] Node 0 DMA: 95*4kB (UE) 2*8kB (U) 1*16kB (E) 0*32kB 4*64kB (UE) 12*128kB (UE) 3*256kB (UE) 2*512kB (UE) 1*1024kB (E) 1*2048kB (M) 1*4096kB (M) = 11164kB [ 1270.754697] bond0 (unregistering): Released all slaves [ 1270.763043] Node 0 DMA32: 1201*4kB (UME) 740*8kB (UE) 571*16kB (UE) 2062*32kB (UE) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 85844kB [ 1270.785586] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1270.797816] Node 1 Normal: 784*4kB (UM) 470*8kB (UME) 346*16kB (UME) 316*32kB (UME) 671*64kB (UME) 2621*128kB (UME) 808*256kB (UM) 63*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 640080kB [ 1270.816575] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1270.825664] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1270.837997] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1270.846953] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1270.855711] 64717 total pagecache pages [ 1270.859707] 0 pages in swap cache [ 1270.871296] Swap cache stats: add 0, delete 0, find 0/0 [ 1270.877445] Free swap = 0kB [ 1270.880481] Total swap = 0kB [ 1270.884514] 2097051 pages RAM [ 1270.887631] 0 pages HighMem/MovableOnly [ 1270.891715] 363848 pages reserved [ 1270.896493] 0 pages cma reserved [ 1271.722991] Bluetooth: hci4 command 0x0409 tx timeout [ 1271.728426] Bluetooth: hci2 command 0x0409 tx timeout [ 1271.740514] Bluetooth: hci1 command 0x0409 tx timeout [ 1272.427376] syz-executor.1: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1272.439674] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 1272.444478] syz-executor.0: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1272.451256] CPU: 0 PID: 28756 Comm: syz-executor.1 Not tainted 4.14.230-syzkaller #0 [ 1272.464482] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1272.472935] syz-executor.0 cpuset= [ 1272.473869] Call Trace: [ 1272.473871] / mems_allowed=0-1 [ 1272.477423] dump_stack+0x1b2/0x281 [ 1272.486873] warn_alloc.cold+0x96/0x1cc [ 1272.490842] ? zone_watermark_ok_safe+0x220/0x220 [ 1272.495881] __alloc_pages_nodemask+0x2127/0x2720 [ 1272.500718] ? io_schedule_timeout+0x140/0x140 [ 1272.505298] ? lock_acquire+0x170/0x3f0 [ 1272.509286] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1272.514132] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1272.519595] ? check_preemption_disabled+0x35/0x240 [ 1272.524607] ? __mutex_unlock_slowpath+0x75/0x770 [ 1272.529448] alloc_pages_current+0x155/0x260 [ 1272.533880] ion_page_pool_alloc+0x118/0x1b0 [ 1272.538281] ion_system_heap_allocate+0x133/0x8c0 [ 1272.543120] ? _raw_spin_unlock+0x29/0x40 [ 1272.548387] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1272.553316] ? ion_system_contig_heap_create+0x130/0x130 [ 1272.558785] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1272.563798] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1272.568635] ion_alloc+0x27a/0x810 [ 1272.572262] ? ion_dma_buf_release+0x40/0x40 [ 1272.576665] ? __might_fault+0x177/0x1b0 [ 1272.580718] ion_ioctl+0xea/0x1f0 [ 1272.584160] ? ion_query_heaps+0x360/0x360 [ 1272.588390] ? ion_query_heaps+0x360/0x360 [ 1272.592617] do_vfs_ioctl+0x75a/0xff0 [ 1272.596429] ? ioctl_preallocate+0x1a0/0x1a0 [ 1272.600842] ? lock_downgrade+0x740/0x740 [ 1272.605003] ? __fget+0x225/0x360 [ 1272.608448] ? do_vfs_ioctl+0xff0/0xff0 [ 1272.612412] ? security_file_ioctl+0x83/0xb0 [ 1272.616824] SyS_ioctl+0x7f/0xb0 [ 1272.620192] ? do_vfs_ioctl+0xff0/0xff0 [ 1272.624186] do_syscall_64+0x1d5/0x640 [ 1272.628089] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1272.633268] RIP: 0033:0x466459 [ 1272.636448] RSP: 002b:00007feb59368188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1272.644233] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1272.651513] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000005 [ 1272.658777] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1272.666037] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1272.673302] R13: 00007ffe56f14bcf R14: 00007feb59368300 R15: 0000000000022000 [ 1272.680627] CPU: 1 PID: 28722 Comm: syz-executor.0 Not tainted 4.14.230-syzkaller #0 [ 1272.688519] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1272.697874] Call Trace: [ 1272.700018] Mem-Info: [ 1272.700468] dump_stack+0x1b2/0x281 [ 1272.702874] active_anon:13013 inactive_anon:61601 isolated_anon:0 [ 1272.702874] active_file:1292 inactive_file:1219 isolated_file:0 [ 1272.702874] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1272.702874] slab_reclaimable:12061 slab_unreclaimable:117915 [ 1272.702874] mapped:54446 shmem:62228 pagetables:739 bounce:0 [ 1272.702874] free:209894 free_pcp:39 free_cma:0 [ 1272.706478] warn_alloc.cold+0x96/0x1cc [ 1272.706491] ? zone_watermark_ok_safe+0x220/0x220 [ 1272.706517] __alloc_pages_nodemask+0x2127/0x2720 [ 1272.706534] ? lock_acquire+0x170/0x3f0 [ 1272.706548] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1272.706577] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1272.743923] Node 0 active_anon:51132kB inactive_anon:181456kB active_file:5160kB inactive_file:4868kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:193988kB dirty:0kB writeback:0kB shmem:183568kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1272.744132] ? __mutex_unlock_slowpath+0x75/0x770 [ 1272.744149] alloc_pages_current+0x155/0x260 [ 1272.749013] Node 1 active_anon:920kB inactive_anon:64948kB active_file:8kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:23796kB dirty:0kB writeback:0kB shmem:65344kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1272.753805] ion_page_pool_alloc+0x118/0x1b0 [ 1272.753815] ion_system_heap_allocate+0x133/0x8c0 [ 1272.753829] ? _raw_spin_unlock+0x29/0x40 [ 1272.753837] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1272.753846] ? ion_system_contig_heap_create+0x130/0x130 [ 1272.753858] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1272.753870] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1272.762784] Node 0 [ 1272.768178] ion_alloc+0x27a/0x810 [ 1272.768192] ? ion_dma_buf_release+0x40/0x40 [ 1272.768205] ? __might_fault+0x177/0x1b0 [ 1272.768216] ion_ioctl+0xea/0x1f0 [ 1272.768224] ? ion_query_heaps+0x360/0x360 [ 1272.768241] ? ion_query_heaps+0x360/0x360 [ 1272.799235] DMA free:10980kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1272.801219] do_vfs_ioctl+0x75a/0xff0 [ 1272.806483] lowmem_reserve[]: [ 1272.832688] ? ioctl_preallocate+0x1a0/0x1a0 [ 1272.832698] ? lock_downgrade+0x740/0x740 [ 1272.832711] ? __fget+0x225/0x360 [ 1272.832719] ? do_vfs_ioctl+0xff0/0xff0 [ 1272.832729] ? security_file_ioctl+0x83/0xb0 [ 1272.832738] SyS_ioctl+0x7f/0xb0 [ 1272.832746] ? do_vfs_ioctl+0xff0/0xff0 [ 1272.832757] do_syscall_64+0x1d5/0x640 [ 1272.832770] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1272.832778] RIP: 0033:0x466459 [ 1272.832783] RSP: 002b:00007f141b2c2188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1272.832792] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1272.832797] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000005 [ 1272.832802] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1272.832807] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1272.832812] R13: 00007fff5a5b1ccf R14: 00007f141b2c2300 R15: 0000000000022000 [ 1272.981089] IPVS: ftp: loaded support on port[0] = 21 [ 1272.996179] 0 2717 2718 2718 2718 [ 1273.021018] Node 0 DMA32 free:716672kB min:36200kB low:45248kB high:54296kB active_anon:51144kB inactive_anon:181444kB active_file:5280kB inactive_file:5340kB unevictable:0kB writepending:0kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:7200kB pagetables:2560kB bounce:0kB free_pcp:244kB local_pcp:156kB free_cma:0kB [ 1273.052775] lowmem_reserve[]: 0 0 0 0 0 [ 1273.057001] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1273.084589] lowmem_reserve[]: 0 0 0 0 0 [ 1273.088652] Node 1 Normal free:36064kB min:53696kB low:67120kB high:80544kB active_anon:920kB inactive_anon:64948kB active_file:4kB inactive_file:4kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:288kB pagetables:396kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1273.117962] lowmem_reserve[]: 0 0 0 0 0 [ 1273.121995] Node 0 DMA: 19*4kB (UE) 37*8kB (U) 24*16kB (UE) 8*32kB (U) 2*64kB (UE) 7*128kB (UE) 3*256kB (UE) 2*512kB (UE) 1*1024kB (E) 1*2048kB (M) 1*4096kB (M) = 10996kB [ 1273.139741] Node 0 DMA32: 109*4kB (UME) 8840*8kB (UME) 16519*16kB (UME) 9151*32kB (UME) 19*64kB (U) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 629508kB [ 1273.155416] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1273.167455] Node 1 Normal: 780*4kB (UM) 720*8kB (UM) 805*16kB (UM) 447*32kB (U) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36064kB [ 1273.182300] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1273.192151] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1273.195476] IPVS: ftp: loaded support on port[0] = 21 [ 1273.201894] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1273.216037] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1273.225235] 64748 total pagecache pages [ 1273.229220] 0 pages in swap cache [ 1273.234221] Swap cache stats: add 0, delete 0, find 0/0 [ 1273.239615] Free swap = 0kB [ 1273.244148] Total swap = 0kB [ 1273.247210] 2097051 pages RAM [ 1273.251426] 0 pages HighMem/MovableOnly [ 1273.256051] 363848 pages reserved [ 1273.259513] 0 pages cma reserved [ 1273.433900] IPVS: ftp: loaded support on port[0] = 21 [ 1273.441558] chnl_net:caif_netlink_parms(): no params data found [ 1273.681693] chnl_net:caif_netlink_parms(): no params data found [ 1273.718498] syz-executor.2: page allocation failure: order:5, mode:0x1084020(GFP_ATOMIC|__GFP_COMP), nodemask=(null) [ 1273.729213] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 1273.734525] CPU: 0 PID: 28791 Comm: syz-executor.2 Not tainted 4.14.230-syzkaller #0 [ 1273.742423] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1273.751781] Call Trace: [ 1273.754379] dump_stack+0x1b2/0x281 [ 1273.758009] warn_alloc.cold+0x96/0x1cc [ 1273.761982] ? zone_watermark_ok_safe+0x220/0x220 [ 1273.766829] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1273.772299] ? wake_all_kswapds+0x175/0x360 [ 1273.776629] __alloc_pages_nodemask+0x2127/0x2720 [ 1273.781512] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1273.786543] ? __alloc_pages_nodemask+0x1a6e/0x2720 [ 1273.791581] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1273.796434] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1273.801282] ? entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1273.806662] ? cache_alloc_refill+0x2fa/0x350 [ 1273.811162] ? ____cache_alloc_node+0x156/0x1d0 [ 1273.815836] cache_grow_begin+0x91/0x700 [ 1273.819902] fallback_alloc+0x207/0x2c0 [ 1273.823881] __kmalloc+0x213/0x400 [ 1273.827419] ? batadv_hash_new+0xaa/0x270 [ 1273.831571] batadv_hash_new+0xaa/0x270 [ 1273.835551] ? queue_delayed_work_on+0xfc/0x1d0 [ 1273.840221] batadv_tt_init+0x260/0x390 [ 1273.844196] batadv_mesh_init+0x478/0x630 [ 1273.848347] batadv_softif_init_late+0xa26/0xc90 [ 1273.853142] ? batadv_get_strings+0x40/0x40 [ 1273.857471] ? dev_valid_name+0x1a0/0x1a0 [ 1273.861624] ? batadv_get_strings+0x40/0x40 [ 1273.865946] register_netdevice+0x291/0xe40 [ 1273.870294] ? netdev_change_features+0xa0/0xa0 [ 1273.874982] ? rtnl_create_link+0x129/0x890 [ 1273.879326] rtnl_newlink+0x14ff/0x1860 [ 1273.883322] ? rtnl_newlink+0x43d/0x1860 [ 1273.887394] ? mark_held_locks+0xa6/0xf0 [ 1273.891479] ? rtnl_dellink+0x6a0/0x6a0 [ 1273.895457] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1273.900474] ? _raw_spin_unlock_irq+0x5a/0x80 [ 1273.905007] ? rtnl_dellink+0x6a0/0x6a0 [ 1273.908980] rtnetlink_rcv_msg+0x3be/0xb10 [ 1273.913224] ? rtnl_calcit.isra.0+0x3a0/0x3a0 [ 1273.917723] ? __netlink_lookup+0x345/0x5d0 [ 1273.922088] netlink_rcv_skb+0x125/0x390 [ 1273.926170] ? rtnl_calcit.isra.0+0x3a0/0x3a0 [ 1273.930668] ? netlink_ack+0x9a0/0x9a0 [ 1273.934585] netlink_unicast+0x437/0x610 [ 1273.938651] ? netlink_sendskb+0xd0/0xd0 [ 1273.942715] ? __check_object_size+0x179/0x230 [ 1273.947298] netlink_sendmsg+0x62e/0xb80 [ 1273.951359] ? nlmsg_notify+0x170/0x170 [ 1273.955343] ? security_socket_sendmsg+0x83/0xb0 [ 1273.960097] ? nlmsg_notify+0x170/0x170 [ 1273.964066] sock_sendmsg+0xb5/0x100 [ 1273.967778] SyS_sendto+0x1c7/0x2c0 [ 1273.971397] ? SyS_getpeername+0x220/0x220 [ 1273.975641] ? sock_poll+0x220/0x220 [ 1273.979355] ? SyS_socket+0x12f/0x1b0 [ 1273.983149] ? move_addr_to_kernel+0x60/0x60 [ 1273.987554] ? do_syscall_64+0x4c/0x640 [ 1273.991527] ? SyS_getpeername+0x220/0x220 [ 1273.995757] do_syscall_64+0x1d5/0x640 [ 1273.999654] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1274.004850] RIP: 0033:0x4193ec [ 1274.008036] RSP: 002b:00007ffe33a76310 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 1274.015829] RAX: ffffffffffffffda RBX: 00000000014a4320 RCX: 00000000004193ec [ 1274.023100] RDX: 000000000000003c RSI: 00000000014a4370 RDI: 0000000000000003 [ 1274.030367] RBP: 0000000000000000 R08: 00007ffe33a76364 R09: 000000000000000c [ 1274.037723] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1274.045002] R13: 00000000014a4370 R14: 0000000000000003 R15: 0000000000000000 [ 1274.052546] warn_alloc_show_mem: 1 callbacks suppressed [ 1274.052550] Mem-Info: [ 1274.060351] active_anon:13041 inactive_anon:61598 isolated_anon:0 [ 1274.060351] active_file:1474 inactive_file:1746 isolated_file:0 [ 1274.060351] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1274.060351] slab_reclaimable:12061 slab_unreclaimable:117956 [ 1274.060351] mapped:54893 shmem:62228 pagetables:702 bounce:0 [ 1274.060351] free:127983 free_pcp:198 free_cma:0 [ 1274.097338] Node 0 active_anon:51244kB inactive_anon:181444kB active_file:5892kB inactive_file:6980kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:195732kB dirty:0kB writeback:0kB shmem:183568kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1274.125746] Node 1 active_anon:920kB inactive_anon:64948kB active_file:4kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:23840kB dirty:0kB writeback:0kB shmem:65344kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1274.153179] Node 0 DMA free:12640kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1274.179310] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1274.184346] Node 0 DMA32 free:464976kB min:36200kB low:45248kB high:54296kB active_anon:51244kB inactive_anon:181444kB active_file:5892kB inactive_file:6980kB unevictable:0kB writepending:0kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:7296kB pagetables:2412kB bounce:0kB free_pcp:672kB local_pcp:468kB free_cma:0kB [ 1274.213769] lowmem_reserve[]: 0 0 0 0 0 [ 1274.217760] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1274.243732] lowmem_reserve[]: 0 0 0 0 0 [ 1274.247724] Node 1 Normal free:776204kB min:53696kB low:67120kB high:80544kB active_anon:920kB inactive_anon:64948kB active_file:4kB inactive_file:4kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:288kB pagetables:396kB bounce:0kB free_pcp:120kB local_pcp:0kB free_cma:0kB [ 1274.276732] lowmem_reserve[]: 0 0 0 0 0 [ 1274.280726] Node 0 DMA: 14*4kB (UE) 37*8kB (U) 24*16kB (UE) 8*32kB (U) 10*64kB (UE) 8*128kB (UE) 3*256kB (UE) 2*512kB (UE) 2*1024kB (UE) 1*2048kB (M) 1*4096kB (M) = 12640kB [ 1274.297031] Node 0 DMA32: 52*4kB (ME) 36*8kB (UE) 3*16kB (UME) 427*32kB (UME) 4568*64kB (UM) 1066*128kB (U) 86*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 465024kB [ 1274.312113] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1274.322922] Node 1 Normal: 5*4kB (UM) 1*8kB (M) 777*16kB (UM) 447*32kB (U) 9385*64kB (U) 3002*128kB (U) 236*256kB (U) 5*512kB (U) 1*1024kB (U) 0*2048kB 0*4096kB = 1075660kB [ 1274.338541] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1274.347400] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1274.356187] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1274.368236] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1274.376903] 65451 total pagecache pages [ 1274.380874] 0 pages in swap cache [ 1274.384321] Swap cache stats: add 0, delete 0, find 0/0 [ 1274.389674] Free swap = 0kB [ 1274.392734] Total swap = 0kB [ 1274.395837] 2097051 pages RAM [ 1274.398955] 0 pages HighMem/MovableOnly [ 1274.402912] 363848 pages reserved [ 1274.406360] 0 pages cma reserved [ 1274.423093] Bluetooth: hci1 command 0x041b tx timeout [ 1274.428552] Bluetooth: hci2 command 0x041b tx timeout [ 1274.435125] Bluetooth: hci4 command 0x041b tx timeout [ 1274.469312] ODEBUG: assert_init not available (active state 0) object type: timer_list hint: (null) [ 1274.480088] ------------[ cut here ]------------ [ 1274.484859] WARNING: CPU: 0 PID: 28791 at lib/debugobjects.c:287 debug_print_object.cold+0xa7/0xdb [ 1274.493946] Kernel panic - not syncing: panic_on_warn set ... [ 1274.493946] [ 1274.501302] CPU: 0 PID: 28791 Comm: syz-executor.2 Not tainted 4.14.230-syzkaller #0 [ 1274.509173] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1274.518522] Call Trace: [ 1274.521144] dump_stack+0x1b2/0x281 [ 1274.524789] panic+0x1f9/0x42d [ 1274.527975] ? add_taint.cold+0x16/0x16 [ 1274.531948] ? debug_print_object.cold+0xa7/0xdb [ 1274.536698] ? debug_print_object.cold+0xa7/0xdb [ 1274.541471] __warn.cold+0x20/0x44 [ 1274.545011] ? ist_end_non_atomic+0x10/0x10 [ 1274.549338] ? debug_print_object.cold+0xa7/0xdb [ 1274.554175] report_bug+0x208/0x250 [ 1274.558332] do_error_trap+0x195/0x2d0 [ 1274.562231] ? math_error+0x2d0/0x2d0 [ 1274.566039] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1274.570881] invalid_op+0x1b/0x40 [ 1274.574330] RIP: 0010:debug_print_object.cold+0xa7/0xdb [ 1274.580116] RSP: 0018:ffff888214ebf248 EFLAGS: 00010086 [ 1274.585476] RAX: 0000000000000061 RBX: 0000000000000005 RCX: 0000000000000000 [ 1274.592839] RDX: 0000000000000000 RSI: ffffffff878bbbc0 RDI: ffffed10429d7e3f [ 1274.600105] RBP: ffffffff878b6e80 R08: 0000000000000061 R09: 0000000000000001 [ 1274.607371] R10: 0000000000000000 R11: ffff8880a8ae2140 R12: 0000000000000000 [ 1274.614639] R13: 0000000000000000 R14: ffff888052f46b30 R15: 1ffff110429d7e52 [ 1274.622031] ? debug_print_object.cold+0xa7/0xdb [ 1274.626792] debug_object_assert_init+0x1d3/0x2d0 [ 1274.631653] ? debug_object_active_state+0x330/0x330 [ 1274.636753] ? rtnl_newlink+0x14ff/0x1860 [ 1274.640896] ? rtnetlink_rcv_msg+0x3be/0xb10 [ 1274.645300] ? netlink_rcv_skb+0x125/0x390 [ 1274.649619] ? entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1274.654997] del_timer+0x5d/0xe0 [ 1274.658366] ? process_timeout+0x20/0x20 [ 1274.662425] try_to_grab_pending+0x243/0x610 [ 1274.666836] __cancel_work_timer+0x90/0x460 [ 1274.671174] ? work_on_cpu_safe+0x70/0x70 [ 1274.675322] ? batadv_tvlv_handler_get+0x1db/0x2b0 [ 1274.680256] batadv_nc_mesh_free+0x41/0x120 [ 1274.684574] batadv_mesh_free+0x70/0x150 [ 1274.688643] batadv_mesh_init+0x561/0x630 [ 1274.692790] batadv_softif_init_late+0xa26/0xc90 [ 1274.697542] ? batadv_get_strings+0x40/0x40 [ 1274.701858] ? dev_valid_name+0x1a0/0x1a0 [ 1274.706012] ? batadv_get_strings+0x40/0x40 [ 1274.710420] register_netdevice+0x291/0xe40 [ 1274.714745] ? netdev_change_features+0xa0/0xa0 [ 1274.719410] ? rtnl_create_link+0x129/0x890 [ 1274.723730] rtnl_newlink+0x14ff/0x1860 [ 1274.727702] ? rtnl_newlink+0x43d/0x1860 [ 1274.731778] ? mark_held_locks+0xa6/0xf0 [ 1274.736023] ? rtnl_dellink+0x6a0/0x6a0 [ 1274.739993] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1274.745034] ? _raw_spin_unlock_irq+0x5a/0x80 [ 1274.749559] ? rtnl_dellink+0x6a0/0x6a0 [ 1274.754311] rtnetlink_rcv_msg+0x3be/0xb10 [ 1274.758546] ? rtnl_calcit.isra.0+0x3a0/0x3a0 [ 1274.763040] ? __netlink_lookup+0x345/0x5d0 [ 1274.767383] netlink_rcv_skb+0x125/0x390 [ 1274.771616] ? rtnl_calcit.isra.0+0x3a0/0x3a0 [ 1274.776107] ? netlink_ack+0x9a0/0x9a0 [ 1274.780100] netlink_unicast+0x437/0x610 [ 1274.784161] ? netlink_sendskb+0xd0/0xd0 [ 1274.788221] ? __check_object_size+0x179/0x230 [ 1274.792823] netlink_sendmsg+0x62e/0xb80 [ 1274.796887] ? nlmsg_notify+0x170/0x170 [ 1274.800864] ? security_socket_sendmsg+0x83/0xb0 [ 1274.805875] ? nlmsg_notify+0x170/0x170 [ 1274.809845] sock_sendmsg+0xb5/0x100 [ 1274.813565] SyS_sendto+0x1c7/0x2c0 [ 1274.817195] ? SyS_getpeername+0x220/0x220 [ 1274.821434] ? sock_poll+0x220/0x220 [ 1274.825181] ? SyS_socket+0x12f/0x1b0 [ 1274.828977] ? move_addr_to_kernel+0x60/0x60 [ 1274.833387] ? do_syscall_64+0x4c/0x640 [ 1274.837357] ? SyS_getpeername+0x220/0x220 [ 1274.841594] do_syscall_64+0x1d5/0x640 [ 1274.845484] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1274.850671] RIP: 0033:0x4193ec [ 1274.853940] RSP: 002b:00007ffe33a76310 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 1274.861643] RAX: ffffffffffffffda RBX: 00000000014a4320 RCX: 00000000004193ec [ 1274.869528] RDX: 000000000000003c RSI: 00000000014a4370 RDI: 0000000000000003 [ 1274.877423] RBP: 0000000000000000 R08: 00007ffe33a76364 R09: 000000000000000c [ 1274.884687] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1274.891950] R13: 00000000014a4370 R14: 0000000000000003 R15: 0000000000000000 [ 1274.900255] Kernel Offset: disabled [ 1274.903882] Rebooting in 86400 seconds..