500dc78188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3301.398452] 2717 [ 3301.401288] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 3301.406270] 2718 [ 3301.410091] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 3301.419752] 2718 [ 3301.419997] RBP: 00000000004bfa8f R08: 0000000000000000 R09: 0000000000000000 [ 3301.422218] 2718 [ 3301.426690] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 3301.426695] R13: 00007fff5bd55b1f R14: 00007f500dc78300 R15: 0000000000022000 [ 3301.532397] warn_alloc_show_mem: 2 callbacks suppressed [ 3301.532400] Mem-Info: [ 3301.594444] active_anon:16528 inactive_anon:90043 isolated_anon:0 [ 3301.594444] active_file:11 inactive_file:2 isolated_file:0 [ 3301.594444] unevictable:0 dirty:26 writeback:0 unstable:0 [ 3301.594444] slab_reclaimable:11983 slab_unreclaimable:112617 [ 3301.594444] mapped:52938 shmem:90898 pagetables:801 bounce:0 [ 3301.594444] free:14423 free_pcp:99 free_cma:0 [ 3301.607573] Node 0 [ 3301.622369] Node 0 active_anon:64832kB inactive_anon:297344kB active_file:24kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:177940kB dirty:104kB writeback:0kB shmem:300384kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3301.633724] DMA32 free:19832kB min:36200kB low:45248kB high:54296kB active_anon:64432kB inactive_anon:296364kB active_file:76kB inactive_file:28kB unevictable:0kB writepending:104kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7424kB pagetables:2964kB bounce:0kB free_pcp:256kB local_pcp:120kB free_cma:0kB [ 3301.728796] lowmem_reserve[]: 0 0 0 0 0 [ 3301.742227] Node 1 active_anon:1280kB inactive_anon:62828kB active_file:12kB inactive_file:12kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:33812kB dirty:0kB writeback:0kB shmem:63208kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3301.745185] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3301.827948] Node 0 DMA free:10972kB min:204kB low:252kB high:300kB active_anon:100kB inactive_anon:980kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:4kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3301.840129] lowmem_reserve[]: 0 0 0 0 0 [ 3301.902330] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 3301.907404] Node 0 DMA32 free:19856kB min:36200kB low:45248kB high:54296kB active_anon:64684kB inactive_anon:296364kB active_file:128kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7360kB pagetables:2964kB bounce:0kB free_pcp:252kB local_pcp:136kB free_cma:0kB [ 3301.907860] Node 1 Normal free:27024kB min:53696kB low:67120kB high:80544kB active_anon:1280kB inactive_anon:62828kB active_file:12kB inactive_file:12kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:288kB pagetables:236kB bounce:0kB free_pcp:140kB local_pcp:0kB free_cma:0kB [ 3301.987469] lowmem_reserve[]: 0 0 0 0 0 [ 3301.987492] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3301.987510] lowmem_reserve[]: 0 0 0 0 0 [ 3301.987528] Node 1 Normal free:27024kB min:53696kB low:67120kB high:80544kB active_anon:1280kB inactive_anon:62828kB active_file:12kB inactive_file:12kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:288kB pagetables:236kB bounce:0kB free_pcp:140kB local_pcp:140kB free_cma:0kB [ 3301.987548] lowmem_reserve[]: 0 0 0 0 0 [ 3301.987563] Node 0 DMA: 9*4kB (UME) 23*8kB (UME) 26*16kB (UME) 23*32kB (UME) 2*64kB (U) 10*128kB (UME) 6*256kB (UME) 1*512kB (E) 4*1024kB (UME) 1*2048kB (M) 0*4096kB = 10972kB [ 3301.987639] Node 0 DMA32: 1470*4kB (ME) 1009*8kB (UME) 197*16kB (UME) 56*32kB (UME) 15*64kB (M) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 19856kB [ 3301.987696] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 3301.987738] Node 1 Normal: 34*4kB (M) 57*8kB (UM) 14*16kB (UM) 799*32kB (UM) 10*64kB (U) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 27024kB [ 3301.987797] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3301.987803] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3301.987810] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3301.987816] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3301.987820] 90919 total pagecache pages [ 3301.987831] 0 pages in swap cache [ 3301.987837] Swap cache stats: add 0, delete 0, find 0/0 [ 3301.987840] Free swap = 0kB [ 3301.987844] Total swap = 0kB [ 3301.987849] 2097051 pages RAM [ 3301.987853] 0 pages HighMem/MovableOnly [ 3301.987856] 363840 pages reserved [ 3301.987860] 0 pages cma reserved [ 3302.191062] lowmem_reserve[]: 0 0 0 0 0 [ 3302.196567] Node 0 DMA: 9*4kB (UME) 23*8kB (UME) 26*16kB (UME) 23*32kB (UME) 3*64kB (U) 10*128kB (UME) 6*256kB (UME) 1*512kB (E) 4*1024kB (UME) 1*2048kB (M) 0*4096kB = 11036kB [ 3302.221352] Node 0 DMA32: 2227*4kB (UME) 1063*8kB (UME) 916*16kB (UME) 154*32kB (UME) 39*64kB (UM) 2*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 39748kB [ 3302.261518] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 3302.325751] Node 1 Normal: 2*4kB (UM) 1*8kB (U) 2*16kB (UM) 196*32kB (UM) 1*64kB (M) 23*128kB (UM) 54*256kB (U) 133*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 91248kB [ 3302.392352] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3302.401233] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3302.428248] syz-executor.3: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 3302.465015] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3302.478297] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 3302.486373] CPU: 1 PID: 15953 Comm: syz-executor.3 Not tainted 4.14.225-syzkaller #0 [ 3302.494270] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3302.503626] Call Trace: [ 3302.506218] dump_stack+0x1b2/0x281 [ 3302.509974] warn_alloc.cold+0x96/0x1cc [ 3302.513950] ? zone_watermark_ok_safe+0x220/0x220 [ 3302.518939] __alloc_pages_nodemask+0x2127/0x2720 [ 3302.525445] ? lock_acquire+0x170/0x3f0 [ 3302.529641] ? lock_acquire+0x170/0x3f0 [ 3302.533634] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3302.538482] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 3302.544018] ? __mutex_unlock_slowpath+0x75/0x770 [ 3302.548874] alloc_pages_current+0x155/0x260 [ 3302.553382] ion_page_pool_alloc+0x118/0x1b0 [ 3302.557882] ion_system_heap_allocate+0x133/0x8c0 [ 3302.562820] ? _raw_spin_unlock+0x29/0x40 [ 3302.567035] ? _ion_heap_freelist_drain+0x6e/0x410 [ 3302.571971] ? ion_system_contig_heap_create+0x130/0x130 [ 3302.577411] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 3302.582408] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 3302.587358] ion_alloc+0x27a/0x810 [ 3302.590884] ? ion_dma_buf_release+0x40/0x40 [ 3302.595453] ? __might_fault+0x177/0x1b0 [ 3302.599499] ion_ioctl+0xea/0x1f0 [ 3302.602951] ? ion_query_heaps+0x360/0x360 [ 3302.607169] ? __fget+0x1fe/0x360 [ 3302.610606] ? ion_query_heaps+0x360/0x360 [ 3302.614823] do_vfs_ioctl+0x75a/0xff0 [ 3302.618636] ? ioctl_preallocate+0x1a0/0x1a0 [ 3302.623024] ? lock_downgrade+0x740/0x740 [ 3302.627157] ? __fget+0x225/0x360 [ 3302.630590] ? do_vfs_ioctl+0xff0/0xff0 [ 3302.634547] ? security_file_ioctl+0x83/0xb0 [ 3302.638936] SyS_ioctl+0x7f/0xb0 [ 3302.642282] ? do_vfs_ioctl+0xff0/0xff0 [ 3302.646340] do_syscall_64+0x1d5/0x640 [ 3302.650230] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3302.655416] RIP: 0033:0x465f69 [ 3302.658585] RSP: 002b:00007f500dc78188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3302.667060] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 3302.674310] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 3302.681646] RBP: 00000000004bfa8f R08: 0000000000000000 R09: 0000000000000000 [ 3302.689001] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 3302.696338] R13: 00007fff5bd55b1f R14: 00007f500dc78300 R15: 0000000000022000 [ 3302.713060] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3302.721651] 90919 total pagecache pages [ 3302.725827] 0 pages in swap cache [ 3302.729279] Swap cache stats: add 0, delete 0, find 0/0 [ 3302.734709] Free swap = 0kB [ 3302.737720] Total swap = 0kB [ 3302.740728] 2097051 pages RAM [ 3302.744278] 0 pages HighMem/MovableOnly [ 3302.748335] 363840 pages reserved [ 3302.751779] 0 pages cma reserved [ 3302.755253] Out of memory (oom_kill_allocating_task): Kill process 14284 (systemd-journal) score 0 or sacrifice child [ 3302.766480] Killed process 14284 (systemd-journal) total-vm:46096kB, anon-rss:484kB, file-rss:4kB, shmem-rss:2576kB [ 3302.787273] Mem-Info: [ 3302.790074] active_anon:16419 inactive_anon:90043 isolated_anon:0 [ 3302.790074] active_file:11 inactive_file:10 isolated_file:0 [ 3302.790074] unevictable:0 dirty:0 writeback:0 unstable:0 [ 3302.790074] slab_reclaimable:11964 slab_unreclaimable:112188 [ 3302.790074] mapped:52247 shmem:90898 pagetables:801 bounce:0 [ 3302.790074] free:18381 free_pcp:78 free_cma:0 [ 3302.827398] Node 0 active_anon:64384kB inactive_anon:297344kB active_file:32kB inactive_file:28kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:177876kB dirty:0kB writeback:0kB shmem:300384kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 3302.849357] oom_reaper: reaped process 15930 (syz-executor.5), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 3302.859996] Node 1 active_anon:1292kB inactive_anon:62828kB active_file:12kB inactive_file:12kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:31112kB dirty:0kB writeback:0kB shmem:63208kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3302.897841] Node 0 DMA free:10956kB min:204kB low:252kB high:300kB active_anon:100kB inactive_anon:980kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:4kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3302.928500] kworker/u4:4 invoked oom-killer: gfp_mask=0x15080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null), order=3, oom_score_adj=0 [ 3302.943791] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 3302.948830] Node 0 DMA32 free:17732kB min:36200kB low:45248kB high:54296kB active_anon:64684kB inactive_anon:296364kB active_file:32kB inactive_file:28kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7360kB pagetables:2964kB bounce:0kB free_pcp:372kB local_pcp:248kB free_cma:0kB [ 3302.992060] kworker/u4:4 cpuset=/ mems_allowed=0-1 [ 3302.997301] CPU: 1 PID: 31893 Comm: kworker/u4:4 Not tainted 4.14.225-syzkaller #0 [ 3303.005104] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3303.014557] Workqueue: events_unbound call_usermodehelper_exec_work [ 3303.020955] Call Trace: [ 3303.023526] dump_stack+0x1b2/0x281 [ 3303.027140] dump_header+0x178/0x82f [ 3303.030924] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 3303.036008] ? ___ratelimit+0x2cd/0x530 [ 3303.039961] oom_kill_process.cold+0x10/0xb18 [ 3303.044439] ? lock_downgrade+0x740/0x740 [ 3303.048571] out_of_memory+0x2dc/0x1190 [ 3303.052544] ? oom_killer_disable+0x1c0/0x1c0 [ 3303.057036] ? mutex_trylock+0x152/0x1a0 [ 3303.061085] __alloc_pages_nodemask+0x23e1/0x2720 [ 3303.066006] ? deref_stack_reg+0x124/0x1a0 [ 3303.070247] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3303.075183] ? fs_reclaim_release+0xd0/0x110 [ 3303.079588] ? kmem_cache_alloc_node+0x38b/0x410 [ 3303.084323] copy_process.part.0+0x265/0x71c0 [ 3303.088840] ? __lock_acquire+0x5fc/0x3f20 [ 3303.093079] ? debug_object_activate+0x292/0x490 [ 3303.097830] ? trace_hardirqs_on+0x10/0x10 [ 3303.102046] ? static_obj+0x50/0x50 [ 3303.105654] ? call_usermodehelper_exec_work+0x2a0/0x2a0 [ 3303.111093] ? __cleanup_sighand+0x40/0x40 [ 3303.115309] ? call_usermodehelper_exec_work+0x2a0/0x2a0 [ 3303.120764] _do_fork+0x184/0xc80 [ 3303.124199] ? fork_idle+0x270/0x270 [ 3303.127900] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 3303.132983] ? process_one_work+0x6c4/0x14a0 [ 3303.137465] ? call_usermodehelper_exec_work+0x2a0/0x2a0 [ 3303.142898] kernel_thread+0x2f/0x40 [ 3303.146766] call_usermodehelper_exec_work+0x1ac/0x2a0 [ 3303.152039] ? call_usermodehelper+0x80/0x80 [ 3303.156457] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 3303.161914] process_one_work+0x793/0x14a0 [ 3303.166159] ? work_busy+0x320/0x320 [ 3303.169864] ? worker_thread+0x158/0xff0 [ 3303.174105] ? _raw_spin_unlock_irq+0x24/0x80 [ 3303.178590] worker_thread+0x5cc/0xff0 [ 3303.182467] ? rescuer_thread+0xc80/0xc80 [ 3303.186593] kthread+0x30d/0x420 [ 3303.189938] ? kthread_create_on_node+0xd0/0xd0 [ 3303.194601] ret_from_fork+0x24/0x30 [ 3303.223891] lowmem_reserve[]: 0 0 0 0 0 [ 3303.227921] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3303.256951] syz-executor.5: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 3303.268876] lowmem_reserve[]: 0 0 0 0 0 [ 3303.274972] Node 1 Normal free:26744kB min:53696kB low:67120kB high:80544kB active_anon:1292kB inactive_anon:62828kB active_file:12kB inactive_file:12kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:288kB pagetables:236kB bounce:0kB free_pcp:128kB local_pcp:8kB free_cma:0kB [ 3303.305688] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 3303.311045] CPU: 1 PID: 15930 Comm: syz-executor.5 Not tainted 4.14.225-syzkaller #0 [ 3303.318937] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3303.328301] Call Trace: [ 3303.330896] dump_stack+0x1b2/0x281 [ 3303.334585] warn_alloc.cold+0x96/0x1cc [ 3303.338565] ? zone_watermark_ok_safe+0x220/0x220 [ 3303.343411] ? usleep_range+0x130/0x130 [ 3303.347498] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 3303.352606] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 3303.357632] ? run_timer_softirq+0x5a0/0x5a0 [ 3303.362318] __alloc_pages_nodemask+0x2127/0x2720 [ 3303.368536] ? lock_acquire+0x170/0x3f0 [ 3303.372532] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3303.377356] ? ion_page_pool_alloc+0x9e/0x1b0 [ 3303.381838] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 3303.387363] alloc_pages_current+0x155/0x260 [ 3303.393142] ion_page_pool_alloc+0x118/0x1b0 [ 3303.397532] ion_system_heap_allocate+0x133/0x8c0 [ 3303.402445] ? ion_alloc+0x187/0x810 [ 3303.406598] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 3303.412754] ? ion_system_contig_heap_create+0x130/0x130 [ 3303.418189] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 3303.423204] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 3303.428145] ion_alloc+0x204/0x810 [ 3303.431773] ? ion_dma_buf_release+0x40/0x40 [ 3303.436170] ? __might_fault+0x177/0x1b0 [ 3303.440218] ion_ioctl+0xea/0x1f0 [ 3303.443655] ? ion_query_heaps+0x360/0x360 [ 3303.447955] ? __fget+0x1fe/0x360 [ 3303.451401] ? ion_query_heaps+0x360/0x360 [ 3303.455613] do_vfs_ioctl+0x75a/0xff0 [ 3303.459418] ? ioctl_preallocate+0x1a0/0x1a0 [ 3303.463805] ? lock_downgrade+0x740/0x740 [ 3303.468029] ? __fget+0x225/0x360 [ 3303.471460] ? do_vfs_ioctl+0xff0/0xff0 [ 3303.475415] ? security_file_ioctl+0x83/0xb0 [ 3303.480268] SyS_ioctl+0x7f/0xb0 [ 3303.484045] ? do_vfs_ioctl+0xff0/0xff0 [ 3303.488011] do_syscall_64+0x1d5/0x640 [ 3303.491886] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3303.497057] RIP: 0033:0x465f69 [ 3303.500343] RSP: 002b:00007f08137cb188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3303.508117] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 3303.515367] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 3303.522631] RBP: 00000000004bfa8f R08: 0000000000000000 R09: 0000000000000000 [ 3303.530152] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 3303.538302] R13: 00007ffeb8b6e44f R14: 00007f08137cb300 R15: 0000000000022000 [ 3303.548438] lowmem_reserve[]: 0 0 0 0 0 [ 3303.552725] Node 0 DMA: 10*4kB (UME) 13*8kB (UME) 26*16kB (UME) 23*32kB (UME) 3*64kB (U) 10*128kB (UME) 6*256kB (UME) 1*512kB (E) 4*1024kB (UME) 1*2048kB (M) 0*4096kB = 10960kB [ 3303.570902] Node 0 DMA32: 1286*4kB (ME) 696*8kB (UME) 125*16kB (UME) 169*32kB (UME) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18120kB [ 3303.587707] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 3303.598772] Node 1 Normal: 39*4kB (M) 49*8kB (UM) 25*16kB (UM) 6*32kB (UM) 10*64kB (UM) 5*128kB (UM) 2*256kB (UM) 47*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 26996kB [ 3303.616480] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3303.625419] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3303.636240] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3303.645199] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3303.656252] 90920 total pagecache pages [ 3303.660241] 0 pages in swap cache [ 3303.663736] Swap cache stats: add 0, delete 0, find 0/0 [ 3303.669131] Free swap = 0kB [ 3303.677618] Total swap = 0kB [ 3303.680777] 2097051 pages RAM [ 3303.684201] Mem-Info: [ 3303.686617] active_anon:16375 inactive_anon:90042 isolated_anon:0 [ 3303.686617] active_file:8 inactive_file:13 isolated_file:0 [ 3303.686617] unevictable:0 dirty:0 writeback:0 unstable:0 [ 3303.686617] slab_reclaimable:11958 slab_unreclaimable:112171 [ 3303.686617] mapped:52225 shmem:90898 pagetables:775 bounce:0 [ 3303.686617] free:14019 free_pcp:124 free_cma:0 [ 3303.731976] 0 pages HighMem/MovableOnly [ 3303.735982] 363840 pages reserved [ 3303.739442] 0 pages cma reserved [ 3303.780426] Node 0 active_anon:64228kB inactive_anon:297344kB active_file:20kB inactive_file:40kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:177872kB dirty:0kB writeback:0kB shmem:300384kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3303.837905] Node 1 active_anon:1272kB inactive_anon:62824kB active_file:12kB inactive_file:12kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:31028kB dirty:0kB writeback:0kB shmem:63208kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3303.867343] syz-executor.3: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 3303.887106] Node 0 DMA free:10960kB min:204kB low:252kB high:300kB active_anon:100kB inactive_anon:980kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:4kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3303.914242] Mem-Info: [ 3303.914266] active_anon:16375 inactive_anon:90042 isolated_anon:0 [ 3303.914266] active_file:8 inactive_file:13 isolated_file:0 [ 3303.914266] unevictable:0 dirty:0 writeback:0 unstable:0 [ 3303.914266] slab_reclaimable:11958 slab_unreclaimable:112094 [ 3303.914266] mapped:52225 shmem:90898 pagetables:775 bounce:0 [ 3303.914266] free:13947 free_pcp:130 free_cma:0 [ 3303.914282] Node 0 active_anon:64228kB inactive_anon:297344kB active_file:20kB inactive_file:40kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:177872kB dirty:0kB writeback:0kB shmem:300384kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3303.914296] Node 1 active_anon:1272kB inactive_anon:62824kB active_file:12kB inactive_file:12kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:31028kB dirty:0kB writeback:0kB shmem:63208kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3303.914299] Node 0 DMA free:10960kB min:204kB low:252kB high:300kB active_anon:100kB inactive_anon:980kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:4kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3303.914318] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 3303.914336] Node 0 DMA32 free:18080kB min:36200kB low:45248kB high:54296kB active_anon:64128kB inactive_anon:296364kB active_file:20kB inactive_file:40kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7328kB pagetables:2868kB bounce:0kB free_pcp:244kB local_pcp:124kB free_cma:0kB [ 3303.914353] lowmem_reserve[]: 0 0 0 0 0 [ 3303.922003] syz-executor.3 cpuset= [ 3304.001840] Node 0 [ 3304.013883] lowmem_reserve[]: [ 3304.067088] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3304.067092] lowmem_reserve[]: 0 0 0 0 0 [ 3304.067113] Node 1 Normal free:26748kB min:53696kB low:67120kB high:80544kB active_anon:1272kB inactive_anon:62824kB active_file:12kB inactive_file:12kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:288kB pagetables:228kB bounce:0kB free_pcp:276kB local_pcp:156kB free_cma:0kB [ 3304.067134] lowmem_reserve[]: [ 3304.074543] 0 [ 3304.101812] 0 [ 3304.109372] / [ 3304.109607] 0 0 0 [ 3304.141854] 2717 2718 2718 2718 [ 3304.155549] mems_allowed=0-1 [ 3304.158708] CPU: 1 PID: 15953 Comm: syz-executor.3 Not tainted 4.14.225-syzkaller #0 [ 3304.166587] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3304.175942] Call Trace: [ 3304.178539] dump_stack+0x1b2/0x281 [ 3304.182189] warn_alloc.cold+0x96/0x1cc [ 3304.186292] ? zone_watermark_ok_safe+0x220/0x220 [ 3304.191185] ? usleep_range+0x130/0x130 [ 3304.195149] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 3304.200235] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 3304.205232] ? run_timer_softirq+0x5a0/0x5a0 [ 3304.209626] __alloc_pages_nodemask+0x2127/0x2720 [ 3304.214467] ? lock_acquire+0x170/0x3f0 [ 3304.218444] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3304.223275] ? ion_page_pool_alloc+0x9e/0x1b0 [ 3304.227757] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 3304.233193] alloc_pages_current+0x155/0x260 [ 3304.237582] ion_page_pool_alloc+0x118/0x1b0 [ 3304.241973] ion_system_heap_allocate+0x133/0x8c0 [ 3304.247605] ? _raw_spin_unlock+0x29/0x40 [ 3304.251752] ? _ion_heap_freelist_drain+0x6e/0x410 [ 3304.256662] ? ion_system_contig_heap_create+0x130/0x130 [ 3304.262090] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 3304.267091] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 3304.271914] ion_alloc+0x27a/0x810 [ 3304.275444] ? ion_dma_buf_release+0x40/0x40 [ 3304.279835] ? __might_fault+0x177/0x1b0 [ 3304.283881] ion_ioctl+0xea/0x1f0 [ 3304.287314] ? ion_query_heaps+0x360/0x360 [ 3304.291530] ? __fget+0x1fe/0x360 [ 3304.294961] ? ion_query_heaps+0x360/0x360 [ 3304.299747] do_vfs_ioctl+0x75a/0xff0 [ 3304.303526] ? ioctl_preallocate+0x1a0/0x1a0 [ 3304.307924] ? lock_downgrade+0x740/0x740 [ 3304.312277] ? __fget+0x225/0x360 [ 3304.315719] ? do_vfs_ioctl+0xff0/0xff0 [ 3304.319675] ? security_file_ioctl+0x83/0xb0 [ 3304.324063] SyS_ioctl+0x7f/0xb0 [ 3304.327429] ? do_vfs_ioctl+0xff0/0xff0 [ 3304.331382] do_syscall_64+0x1d5/0x640 [ 3304.335255] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3304.340424] RIP: 0033:0x465f69 [ 3304.343593] RSP: 002b:00007f500dc78188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3304.351279] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 3304.358526] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 3304.365777] RBP: 00000000004bfa8f R08: 0000000000000000 R09: 0000000000000000 [ 3304.373025] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 3304.380272] R13: 00007fff5bd55b1f R14: 00007f500dc78300 R15: 0000000000022000 [ 3304.387556] 0 [ 3304.389364] Node 0 DMA: 10*4kB (UME) 13*8kB (UME) 26*16kB (UME) 23*32kB (UME) 3*64kB (U) 10*128kB (UME) 6*256kB (UME) 1*512kB (E) 4*1024kB (UME) 1*2048kB (M) 0*4096kB = 10960kB [ 3304.393285] Node 0 DMA32 free:18080kB min:36200kB low:45248kB high:54296kB active_anon:64128kB inactive_anon:296364kB active_file:20kB inactive_file:40kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7328kB pagetables:2868kB bounce:0kB free_pcp:244kB local_pcp:120kB free_cma:0kB [ 3304.421189] Node 0 [ 3304.439027] lowmem_reserve[]: 0 0 0 0 0 [ 3304.445484] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3304.452672] DMA32: [ 3304.471260] lowmem_reserve[]: [ 3304.471321] 1286*4kB [ 3304.473537] 0 0 0 0 0 [ 3304.473555] Node 1 Normal free:26748kB min:53696kB low:67120kB high:80544kB active_anon:1272kB inactive_anon:62824kB active_file:12kB inactive_file:12kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:288kB pagetables:228kB bounce:0kB free_pcp:276kB local_pcp:120kB free_cma:0kB [ 3304.473573] lowmem_reserve[]: 0 0 0 0 0 [ 3304.473592] Node 0 DMA: 10*4kB (UME) 13*8kB (UME) 26*16kB (UME) 23*32kB (UME) 3*64kB (U) 10*128kB (UME) [ 3304.490291] (ME) [ 3304.510464] 6*256kB [ 3304.526393] 700*8kB [ 3304.528015] (UME) [ 3304.528710] (UME) [ 3304.531062] 1*512kB (E) 4*1024kB (UME) 1*2048kB (M) 0*4096kB = 10960kB [ 3304.543251] 125*16kB (UME) 169*32kB (UME) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18152kB [ 3304.544072] Node 0 DMA32: 1286*4kB (ME) 700*8kB (UME) 125*16kB (UME) 169*32kB (UME) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18152kB [ 3304.563569] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 3304.569335] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 3304.591862] Node 1 Normal: 39*4kB (M) 41*8kB (UM) 19*16kB (UM) 6*32kB (UM) 10*64kB (UM) 5*128kB (UM) 2*256kB (UM) 47*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 26836kB [ 3304.607497] Node 1 Normal: 39*4kB (M) 41*8kB (UM) 19*16kB (UM) 6*32kB (UM) 10*64kB (UM) 5*128kB (UM) 2*256kB (UM) 47*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 26836kB [ 3304.624789] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3304.633710] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3304.644605] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3304.653611] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3304.664400] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3304.673306] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3304.684367] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3304.693016] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3304.701588] 90919 total pagecache pages [ 3304.707631] 90919 total pagecache pages [ 3304.711677] 0 pages in swap cache [ 3304.718999] Swap cache stats: add 0, delete 0, find 0/0 [ 3304.731749] 0 pages in swap cache [ 3304.735320] Swap cache stats: add 0, delete 0, find 0/0 [ 3304.740686] Free swap = 0kB [ 3304.754242] Free swap = 0kB [ 3304.757432] Total swap = 0kB [ 3304.760567] 2097051 pages RAM [ 3304.769882] Total swap = 0kB [ 3304.785452] 0 pages HighMem/MovableOnly [ 3304.789542] 363840 pages reserved [ 3304.797384] 2097051 pages RAM [ 3304.800511] 0 pages HighMem/MovableOnly [ 3304.820080] 0 pages cma reserved [ 3304.827676] 363840 pages reserved [ 3304.831226] 0 pages cma reserved [ 3304.835296] Out of memory: Kill process 15923 (syz-executor.0) score 1004 or sacrifice child [ 3304.906418] systemd[1]: systemd-journald.service: Failed with result 'signal'. [ 3304.931931] systemd[1]: systemd-journald.service: Service has no hold-off time, scheduling restart. [ 3304.983119] systemd[1]: Stopped Journal Service. [ 3305.017911] systemd[1]: Starting Journal Service... [ 3305.436110] systemd-journald[15964]: File /run/log/journal/64dd78f1a75445a997c532444ad0f085/system.journal corrupted or uncleanly shut down, renaming and replacing. [ 3305.987652] systemd[1]: Started Journal Service. 05:20:38 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) write$dsp(0xffffffffffffffff, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x80000001, 0x32}) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(0xffffffffffffffff, 0x7a5, &(0x7f0000000000)={{}, 0x1, 0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(0xffffffffffffffff, 0x7a4, &(0x7f00000000c0)={{@hyper}, 0x0, 0x0, 0x13, 0x8}) 05:20:38 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x40000, 0x0) openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x22000, 0x0) write$dsp(0xffffffffffffffff, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x2080000001, 0x32}) r1 = add_key(&(0x7f0000000040)='rxrpc\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) keyctl$set_timeout(0xf, 0x0, 0xfff) keyctl$reject(0x13, 0x0, 0x3, 0xffff, r1) r2 = request_key(&(0x7f0000001740)='rxrpc\x00', &(0x7f00000018c0)={'syz', 0x0}, &(0x7f00000017c0)='@:@#(:+\x00', r1) r3 = add_key$fscrypt_v1(&(0x7f0000000000)='logon\x00', &(0x7f0000000080)={'fscrypt:', @desc3='e8dab99234bb312e'}, &(0x7f00000000c0)={0x0, "01b312956356957445a7fdef5b815e85c96fffefd2c7a05f287d2b1de558d2eb84a32160aaf272d5cdad41dc7e36c7000000002c7533ba99425d6dc4b4786c59"}, 0x48, 0xfffffffffffffffe) keyctl$set_timeout(0xf, r3, 0x1f) keyctl$KEYCTL_MOVE(0x1e, r2, r3, r1, 0x0) 05:20:38 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x40000, 0x0) openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x22000, 0x0) write$dsp(0xffffffffffffffff, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x2080000001, 0x32}) r1 = add_key(&(0x7f0000000040)='rxrpc\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) keyctl$set_timeout(0xf, 0x0, 0xfff) keyctl$reject(0x13, 0x0, 0x3, 0xffff, r1) r2 = request_key(&(0x7f0000001740)='rxrpc\x00', &(0x7f00000018c0)={'syz', 0x0}, &(0x7f00000017c0)='@:@#(:+\x00', r1) r3 = add_key$fscrypt_v1(&(0x7f0000000000)='logon\x00', &(0x7f0000000080)={'fscrypt:', @desc3='e8dab99234bb312e'}, &(0x7f00000000c0)={0x0, "01b312956356957445a7fdef5b815e85c96fffefd2c7a05f287d2b1de558d2eb84a32160aaf272d5cdad41dc7e36c7000000002c7533ba99425d6dc4b4786c59"}, 0x48, 0xfffffffffffffffe) keyctl$set_timeout(0xf, r3, 0x1f) keyctl$KEYCTL_MOVE(0x1e, r2, r3, r1, 0x0) 05:20:38 executing program 2: socketpair(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) recvfrom$llc(r0, &(0x7f00000000c0)=""/131, 0x83, 0x1000, &(0x7f0000000000)={0x1a, 0x78e341917cb35c9f, 0x20, 0xc2, 0x7, 0x5, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x10) [ 3307.654634] syz-executor.5: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 3307.667657] syz-executor.2 invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 3307.695053] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 3307.700217] CPU: 1 PID: 15972 Comm: syz-executor.5 Not tainted 4.14.225-syzkaller #0 [ 3307.708107] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3307.717471] Call Trace: [ 3307.720086] dump_stack+0x1b2/0x281 [ 3307.723716] warn_alloc.cold+0x96/0x1cc [ 3307.727706] ? zone_watermark_ok_safe+0x220/0x220 [ 3307.732562] __alloc_pages_nodemask+0x2127/0x2720 [ 3307.737396] ? lock_acquire+0x170/0x3f0 [ 3307.741657] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3307.746500] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 3307.752060] ? __mutex_unlock_slowpath+0x75/0x770 [ 3307.758281] ? retint_kernel+0x2d/0x2d [ 3307.762149] alloc_pages_current+0x155/0x260 [ 3307.766822] ion_page_pool_alloc+0x118/0x1b0 [ 3307.771262] ion_system_heap_allocate+0x133/0x8c0 [ 3307.776084] ? ion_alloc+0x187/0x810 [ 3307.779774] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 3307.785232] ? ion_system_contig_heap_create+0x130/0x130 [ 3307.790660] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 3307.795742] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 3307.800567] ion_alloc+0x204/0x810 [ 3307.804090] ? ion_dma_buf_release+0x40/0x40 [ 3307.808476] ? __might_fault+0x177/0x1b0 [ 3307.812518] ion_ioctl+0xea/0x1f0 [ 3307.815954] ? ion_query_heaps+0x360/0x360 [ 3307.820165] ? __fget+0x1fe/0x360 [ 3307.823596] ? ion_query_heaps+0x360/0x360 [ 3307.827895] do_vfs_ioctl+0x75a/0xff0 [ 3307.831997] ? ioctl_preallocate+0x1a0/0x1a0 [ 3307.836423] ? lock_downgrade+0x740/0x740 [ 3307.840559] ? __fget+0x225/0x360 [ 3307.844005] ? do_vfs_ioctl+0xff0/0xff0 [ 3307.847958] ? security_file_ioctl+0x83/0xb0 [ 3307.852398] SyS_ioctl+0x7f/0xb0 [ 3307.855744] ? do_vfs_ioctl+0xff0/0xff0 [ 3307.859709] do_syscall_64+0x1d5/0x640 [ 3307.863602] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3307.868781] RIP: 0033:0x465f69 [ 3307.871948] RSP: 002b:00007f08137cb188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3307.879632] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 3307.886968] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 3307.894430] RBP: 00000000004bfa8f R08: 0000000000000000 R09: 0000000000000000 [ 3307.901680] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 3307.909015] R13: 00007ffeb8b6e44f R14: 00007f08137cb300 R15: 0000000000022000 [ 3307.922743] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 3307.927877] CPU: 1 PID: 12746 Comm: syz-executor.2 Not tainted 4.14.225-syzkaller #0 [ 3307.935762] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3307.940997] warn_alloc_show_mem: 1 callbacks suppressed [ 3307.941000] Mem-Info: [ 3307.945823] Call Trace: [ 3307.945846] dump_stack+0x1b2/0x281 [ 3307.951256] active_anon:16497 inactive_anon:90043 isolated_anon:0 [ 3307.951256] active_file:13 inactive_file:12 isolated_file:0 [ 3307.951256] unevictable:0 dirty:0 writeback:0 unstable:0 [ 3307.951256] slab_reclaimable:11908 slab_unreclaimable:113184 [ 3307.951256] mapped:52591 shmem:90898 pagetables:747 bounce:0 [ 3307.951256] free:25037 free_pcp:30 free_cma:0 [ 3307.953591] dump_header+0x178/0x82f [ 3307.956155] Node 0 active_anon:64792kB inactive_anon:305536kB active_file:44kB inactive_file:40kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:179336kB dirty:0kB writeback:0kB shmem:308576kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3307.959763] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 3307.992947] Node 1 active_anon:1196kB inactive_anon:54636kB active_file:8kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:31028kB dirty:0kB writeback:0kB shmem:55016kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3307.996586] ? ___ratelimit+0x2cd/0x530 [ 3308.024826] Node 0 [ 3308.029875] oom_kill_process.cold+0x10/0xb18 [ 3308.057036] DMA free:11068kB min:204kB low:252kB high:300kB active_anon:100kB inactive_anon:980kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:4kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3308.061048] out_of_memory+0xe3e/0x1190 [ 3308.061062] ? oom_killer_disable+0x1c0/0x1c0 [ 3308.063273] lowmem_reserve[]: [ 3308.067793] ? mutex_trylock+0x152/0x1a0 [ 3308.094026] 0 [ 3308.098044] __alloc_pages_nodemask+0x23e1/0x2720 [ 3308.102625] 2717 [ 3308.105720] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3308.109892] 2718 [ 3308.111708] alloc_pages_current+0x155/0x260 [ 3308.111722] filemap_fault+0xea3/0x1980 [ 3308.111741] ext4_filemap_fault+0x84/0xb0 [ 3308.116565] 2718 [ 3308.118605] __do_fault+0xfa/0x380 [ 3308.124043] 2718 [ 3308.126049] __handle_mm_fault+0x2497/0x4620 [ 3308.134377] ? vm_insert_page+0x7c0/0x7c0 [ 3308.134387] ? lock_downgrade+0x740/0x740 [ 3308.134405] handle_mm_fault+0x391/0x860 [ 3308.138615] Node 0 [ 3308.140659] __do_page_fault+0x549/0xad0 [ 3308.144204] DMA32 free:35596kB min:36200kB low:45248kB high:54296kB active_anon:64692kB inactive_anon:304556kB active_file:44kB inactive_file:44kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7296kB pagetables:2756kB bounce:0kB free_pcp:120kB local_pcp:120kB free_cma:0kB [ 3308.146217] ? spurious_fault+0x640/0x640 [ 3308.150596] lowmem_reserve[]: [ 3308.154722] ? do_page_fault+0x60/0x500 [ 3308.154730] ? page_fault+0x2f/0x50 [ 3308.154737] page_fault+0x45/0x50 [ 3308.154745] RIP: 4beba1:0x7ffe86b9ea20 [ 3308.158884] 0 [ 3308.163121] RSP: 0000:00007ffe86b9e880 EFLAGS: 7ffe86b9e8a0 [ 3308.168673] Mem-Info: [ 3308.170160] 0 [ 3308.206736] active_anon:16497 inactive_anon:90043 isolated_anon:0 [ 3308.206736] active_file:13 inactive_file:12 isolated_file:0 [ 3308.206736] unevictable:0 dirty:0 writeback:0 unstable:0 [ 3308.206736] slab_reclaimable:11908 slab_unreclaimable:113184 [ 3308.206736] mapped:52591 shmem:90898 pagetables:747 bounce:0 [ 3308.206736] free:25078 free_pcp:60 free_cma:0 [ 3308.237215] 0 [ 3308.274482] Node 0 active_anon:64792kB inactive_anon:305536kB active_file:44kB inactive_file:40kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:179336kB dirty:0kB writeback:0kB shmem:308576kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3308.279523] 0 [ 3308.311184] Node 1 active_anon:1196kB inactive_anon:54636kB active_file:8kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:31028kB dirty:0kB writeback:0kB shmem:55016kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3308.316134] 0 [ 3308.346686] Node 0 DMA free:11068kB min:204kB low:252kB high:300kB active_anon:100kB inactive_anon:980kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:4kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3308.375359] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3308.380618] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 3308.412166] Node 0 DMA32 free:35760kB min:36200kB low:45248kB high:54296kB active_anon:64692kB inactive_anon:304556kB active_file:144kB inactive_file:44kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7296kB pagetables:2756kB bounce:0kB free_pcp:236kB local_pcp:120kB free_cma:0kB [ 3308.412300] lowmem_reserve[]: [ 3308.447459] lowmem_reserve[]: 0 0 0 0 0 [ 3308.452810] 0 0 0 0 0 [ 3308.454920] Node 0 [ 3308.457366] Node 1 [ 3308.457375] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3308.457380] lowmem_reserve[]: [ 3308.459607] Normal free:53484kB min:53696kB low:67120kB high:80544kB active_anon:1196kB inactive_anon:54636kB active_file:8kB inactive_file:8kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:288kB pagetables:228kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3308.467031] 0 [ 3308.500487] lowmem_reserve[]: [ 3308.527234] 0 0 0 0 [ 3308.532745] Node 1 Normal free:53484kB min:53696kB low:67120kB high:80544kB active_anon:1196kB inactive_anon:54636kB active_file:8kB inactive_file:8kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:288kB pagetables:228kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3308.534180] 0 [ 3308.568574] lowmem_reserve[]: 0 0 0 0 0 [ 3308.573794] 0 0 0 0 [ 3308.574471] Node 0 [ 3308.576699] Node 0 [ 3308.576706] DMA: [ 3308.578912] DMA: 9*4kB [ 3308.587206] 9*4kB (ME) 11*8kB (UME) 26*16kB (UME) 23*32kB (UME) 5*64kB (U) 10*128kB (UME) 6*256kB (UME) 1*512kB (E) 4*1024kB (UME) 1*2048kB (M) 0*4096kB = 11068kB [ 3308.594299] (ME) 11*8kB (UME) 26*16kB (UME) 23*32kB (UME) 5*64kB (U) 10*128kB (UME) 6*256kB (UME) 1*512kB (E) 4*1024kB (UME) 1*2048kB (M) 0*4096kB = 11068kB [ 3308.610560] Node 0 DMA32: 786*4kB (ME) 680*8kB (UME) 137*16kB (UME) 27*32kB (ME) 15*64kB (M) 6*128kB (UM) 87*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 35640kB [ 3308.632255] Node 0 DMA32: 786*4kB (ME) 680*8kB (UME) 137*16kB (UME) 27*32kB (ME) 15*64kB (M) 6*128kB (UM) 87*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 35640kB [ 3308.641545] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 3308.663089] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 3308.668567] Node 1 Normal: 143*4kB (M) 82*8kB (M) 42*16kB (M) 20*32kB (UM) 18*64kB (M) 13*128kB (M) 4*256kB (UM) 92*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 53484kB [ 3308.690205] Node 1 [ 3308.705656] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3308.710642] Normal: [ 3308.716964] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3308.716970] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3308.716975] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3308.716978] 90924 total pagecache pages [ 3308.716988] 0 pages in swap cache [ 3308.720830] 143*4kB [ 3308.734685] Swap cache stats: add 0, delete 0, find 0/0 [ 3308.750002] (M) [ 3308.757441] Free swap = 0kB [ 3308.766257] 82*8kB [ 3308.768265] Total swap = 0kB [ 3308.768273] 2097051 pages RAM [ 3308.770491] (M) [ 3308.779241] 0 pages HighMem/MovableOnly [ 3308.785097] 42*16kB [ 3308.785243] 363840 pages reserved [ 3308.785250] (M) [ 3308.787561] 0 pages cma reserved [ 3308.798977] 20*32kB (UM) 18*64kB (M) 13*128kB (M) 4*256kB (UM) 92*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 53484kB [ 3308.802558] Out of memory (oom_kill_allocating_task): Kill process 12746 (syz-executor.2) score 0 or sacrifice child [ 3308.813838] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3308.826982] Killed process 12746 (syz-executor.2) total-vm:93120kB, anon-rss:108kB, file-rss:34216kB, shmem-rss:0kB [ 3308.839532] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3308.858989] syz-fuzzer invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 3308.876146] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 3308.881082] CPU: 0 PID: 7988 Comm: syz-fuzzer Not tainted 4.14.225-syzkaller #0 [ 3308.889043] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3308.890644] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3308.898473] Call Trace: [ 3308.898492] dump_stack+0x1b2/0x281 [ 3308.898503] dump_header+0x178/0x82f [ 3308.898512] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 3308.898520] ? ___ratelimit+0x2cd/0x530 [ 3308.898529] oom_kill_process.cold+0x10/0xb18 [ 3308.898546] out_of_memory+0xe3e/0x1190 [ 3308.898557] ? oom_killer_disable+0x1c0/0x1c0 [ 3308.898563] ? mutex_trylock+0x152/0x1a0 [ 3308.898573] __alloc_pages_nodemask+0x23e1/0x2720 [ 3308.898591] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3308.898613] alloc_pages_current+0x155/0x260 [ 3308.898623] filemap_fault+0xea3/0x1980 [ 3308.898639] ext4_filemap_fault+0x84/0xb0 [ 3308.898648] __do_fault+0xfa/0x380 [ 3308.898658] __handle_mm_fault+0x2497/0x4620 [ 3308.918373] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3308.923385] ? vm_insert_page+0x7c0/0x7c0 [ 3308.923395] ? free_object+0xe4/0x240 [ 3308.923413] handle_mm_fault+0x391/0x860 [ 3308.923425] __do_page_fault+0x549/0xad0 [ 3308.923441] ? spurious_fault+0x640/0x640 [ 3308.923449] ? do_page_fault+0x60/0x500 [ 3308.923458] ? page_fault+0x2f/0x50 [ 3308.923467] page_fault+0x45/0x50 [ 3308.929341] 90924 total pagecache pages [ 3308.932199] RIP: ad080:0x4 [ 3308.932203] RSP: 0002:000000c001bdd7a8 EFLAGS: 00000003 [ 3308.936196] Mem-Info: [ 3308.948851] 0 pages in swap cache [ 3308.953326] active_anon:16497 inactive_anon:90043 isolated_anon:0 [ 3308.953326] active_file:21 inactive_file:5 isolated_file:0 [ 3308.953326] unevictable:0 dirty:0 writeback:0 unstable:0 [ 3308.953326] slab_reclaimable:11908 slab_unreclaimable:113187 [ 3308.953326] mapped:52591 shmem:90898 pagetables:747 bounce:0 [ 3308.953326] free:25086 free_pcp:30 free_cma:0 [ 3308.958359] Swap cache stats: add 0, delete 0, find 0/0 [ 3308.960680] Node 0 active_anon:64792kB inactive_anon:305536kB active_file:76kB inactive_file:12kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:179336kB dirty:0kB writeback:0kB shmem:308576kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3308.976749] Free swap = 0kB [ 3308.976753] Total swap = 0kB [ 3308.976759] 2097051 pages RAM [ 3308.976765] 0 pages HighMem/MovableOnly [ 3308.995758] Node 1 active_anon:1196kB inactive_anon:54636kB active_file:8kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:31028kB dirty:0kB writeback:0kB shmem:55016kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3309.016700] 363840 pages reserved [ 3309.027955] Node 0 [ 3309.045133] 0 pages cma reserved [ 3309.083103] DMA free:11068kB min:204kB low:252kB high:300kB active_anon:100kB inactive_anon:980kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:4kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3309.188774] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 3309.193992] Node 0 DMA32 free:35792kB min:36200kB low:45248kB high:54296kB active_anon:64692kB inactive_anon:304556kB active_file:76kB inactive_file:12kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7296kB pagetables:2756kB bounce:0kB free_pcp:120kB local_pcp:0kB free_cma:0kB [ 3309.238687] lowmem_reserve[]: 0 0 0 0 0 [ 3309.280139] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3309.331489] lowmem_reserve[]: 0 0 0 0 0 [ 3309.335963] Node 1 Normal free:53484kB min:53696kB low:67120kB high:80544kB active_anon:1196kB inactive_anon:54636kB active_file:8kB inactive_file:8kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:288kB pagetables:228kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3309.372194] lowmem_reserve[]: 0 0 0 0 0 [ 3309.376264] Node 0 DMA: 9*4kB (ME) 11*8kB (UME) 26*16kB (UME) 23*32kB (UME) 5*64kB (U) 10*128kB (UME) 6*256kB (UME) 1*512kB (E) 4*1024kB (UME) 1*2048kB (M) 0*4096kB = 11068kB [ 3309.398383] Node 0 DMA32: 800*4kB (UME) 683*8kB (UME) 142*16kB (UME) 30*32kB (UME) 17*64kB (UM) 6*128kB (UM) 87*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36024kB [ 3309.420237] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 3309.449717] Node 1 Normal: 143*4kB (M) 82*8kB (M) 42*16kB (M) 20*32kB (UM) 18*64kB (M) 13*128kB (M) 4*256kB (UM) 92*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 53484kB [ 3309.478575] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3309.503823] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3309.520409] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3309.534574] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3309.551333] 90924 total pagecache pages [ 3309.555352] 0 pages in swap cache [ 3309.558889] Swap cache stats: add 0, delete 0, find 0/0 [ 3309.574271] Free swap = 0kB [ 3309.577303] Total swap = 0kB [ 3309.580314] 2097051 pages RAM [ 3309.591471] 0 pages HighMem/MovableOnly [ 3309.595454] 363840 pages reserved [ 3309.598901] 0 pages cma reserved [ 3309.612277] Out of memory (oom_kill_allocating_task): Kill process 7988 (syz-fuzzer) score 0 or sacrifice child [ 3309.634917] Killed process 12739 (syz-executor.2) total-vm:84924kB, anon-rss:68kB, file-rss:0kB, shmem-rss:0kB [ 3309.658339] oom_reaper: reaped process 12739 (syz-executor.2), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 3309.712832] kworker/u4:0 invoked oom-killer: gfp_mask=0x15080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null), order=3, oom_score_adj=0 [ 3309.730453] kworker/u4:0 cpuset=/ mems_allowed=0-1 [ 3309.811088] CPU: 1 PID: 24058 Comm: kworker/u4:0 Not tainted 4.14.225-syzkaller #0 [ 3309.818847] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3309.828827] Workqueue: events_unbound call_usermodehelper_exec_work [ 3309.835634] Call Trace: [ 3309.838244] dump_stack+0x1b2/0x281 [ 3309.842056] dump_header+0x178/0x82f [ 3309.846060] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 3309.853048] ? ___ratelimit+0x2cd/0x530 [ 3309.857118] oom_kill_process.cold+0x10/0xb18 [ 3309.861717] ? lock_downgrade+0x740/0x740 [ 3309.865927] out_of_memory+0x2dc/0x1190 [ 3309.870090] ? oom_killer_disable+0x1c0/0x1c0 [ 3309.874768] ? mutex_trylock+0x152/0x1a0 [ 3309.878834] __alloc_pages_nodemask+0x23e1/0x2720 [ 3309.883689] ? finish_task_switch+0x178/0x610 [ 3309.888199] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3309.893070] ? fs_reclaim_release+0xd0/0x110 [ 3309.898366] ? kmem_cache_alloc_node+0x38b/0x410 [ 3309.903130] copy_process.part.0+0x265/0x71c0 [ 3309.907723] ? __lock_acquire+0x5fc/0x3f20 [ 3309.911973] ? cpuacct_charge+0x1ca/0x350 [ 3309.916123] ? static_obj+0x50/0x50 [ 3309.919757] ? lock_downgrade+0x740/0x740 [ 3309.923917] ? call_usermodehelper_exec_work+0x2a0/0x2a0 [ 3309.929376] ? __cleanup_sighand+0x40/0x40 [ 3309.933634] ? update_curr+0x28d/0x670 [ 3309.937530] ? call_usermodehelper_exec_work+0x2a0/0x2a0 [ 3309.942989] _do_fork+0x184/0xc80 [ 3309.946548] ? fork_idle+0x270/0x270 [ 3309.950366] ? lock_downgrade+0x740/0x740 [ 3309.954519] ? lock_downgrade+0x740/0x740 [ 3309.958700] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 3309.963968] ? process_one_work+0x6c4/0x14a0 [ 3309.968386] ? call_usermodehelper_exec_work+0x2a0/0x2a0 [ 3309.973846] kernel_thread+0x2f/0x40 [ 3309.977571] call_usermodehelper_exec_work+0x1ac/0x2a0 [ 3309.982857] ? call_usermodehelper+0x80/0x80 [ 3309.987634] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 3309.993191] process_one_work+0x793/0x14a0 [ 3309.997426] ? work_busy+0x320/0x320 [ 3310.001331] ? worker_thread+0x158/0xff0 [ 3310.005407] ? _raw_spin_unlock_irq+0x24/0x80 [ 3310.009912] worker_thread+0x5cc/0xff0 [ 3310.013809] ? rescuer_thread+0xc80/0xc80 [ 3310.018040] kthread+0x30d/0x420 [ 3310.021423] ? kthread_create_on_node+0xd0/0xd0 [ 3310.026091] ret_from_fork+0x24/0x30 [ 3310.060329] Mem-Info: [ 3310.063230] active_anon:16502 inactive_anon:90043 isolated_anon:0 [ 3310.063230] active_file:77 inactive_file:72 isolated_file:32 [ 3310.063230] unevictable:0 dirty:0 writeback:0 unstable:0 [ 3310.063230] slab_reclaimable:11907 slab_unreclaimable:113867 [ 3310.063230] mapped:43991 shmem:90898 pagetables:724 bounce:0 [ 3310.063230] free:25312 free_pcp:37 free_cma:0 [ 3310.104328] Node 0 active_anon:64812kB inactive_anon:305536kB active_file:316kB inactive_file:200kB unevictable:0kB isolated(anon):0kB isolated(file):128kB mapped:145036kB dirty:0kB writeback:0kB shmem:308576kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 3310.148674] Node 1 active_anon:1196kB inactive_anon:54636kB active_file:24kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:31028kB dirty:0kB writeback:0kB shmem:55016kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3310.179230] Node 0 DMA free:11068kB min:204kB low:252kB high:300kB active_anon:100kB inactive_anon:980kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:4kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3310.209204] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 3310.215410] Node 0 DMA32 free:36016kB min:36200kB low:45248kB high:54296kB active_anon:64612kB inactive_anon:304556kB active_file:352kB inactive_file:56kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7264kB pagetables:2664kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3310.251424] lowmem_reserve[]: 0 0 0 0 0 [ 3310.264037] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3310.300834] lowmem_reserve[]: 0 0 0 0 0 [ 3310.320155] Node 1 Normal free:53484kB min:53696kB low:67120kB high:80544kB active_anon:1196kB inactive_anon:54636kB active_file:24kB inactive_file:0kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:288kB pagetables:228kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3310.351918] lowmem_reserve[]: 0 0 0 0 0 [ 3310.356006] Node 0 DMA: 9*4kB (ME) 11*8kB (UME) 26*16kB (UME) 23*32kB (UME) 5*64kB (U) 10*128kB (UME) 6*256kB (UME) 1*512kB (E) 4*1024kB (UME) 1*2048kB (M) 0*4096kB = 11068kB [ 3310.405015] Node 0 DMA32: 1020*4kB (UME) 854*8kB (UME) 136*16kB (UME) 28*32kB (UME) 15*64kB (UM) 3*128kB (UM) 82*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36320kB [ 3310.457133] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 3310.518940] Node 1 Normal: 146*4kB (UM) 81*8kB (M) 43*16kB (M) 20*32kB (UM) 18*64kB (M) 13*128kB (M) 4*256kB (UM) 92*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 53504kB [ 3310.540836] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3310.549871] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3310.567374] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3310.577764] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3310.589033] 90987 total pagecache pages [ 3310.594417] 0 pages in swap cache [ 3310.597969] Swap cache stats: add 0, delete 0, find 0/0 [ 3310.612723] Free swap = 0kB [ 3310.615772] Total swap = 0kB [ 3310.618790] 2097051 pages RAM [ 3310.624640] 0 pages HighMem/MovableOnly [ 3310.628880] 363840 pages reserved [ 3310.634142] 0 pages cma reserved [ 3310.637519] Out of memory: Kill process 15927 (syz-executor.4) score 1004 or sacrifice child [ 3310.648968] Killed process 15931 (syz-executor.4) total-vm:93384kB, anon-rss:152kB, file-rss:34820kB, shmem-rss:0kB [ 3310.672732] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 3310.679792] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3310.703695] oom_reaper: reaped process 15931 (syz-executor.4), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 3310.724160] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 3310.769389] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3310.777910] oom_reaper: reaped process 15972 (syz-executor.5), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 3310.810085] device bridge_slave_1 left promiscuous mode [ 3310.825119] bridge0: port 2(bridge_slave_1) entered disabled state [ 3310.837184] device bridge_slave_0 left promiscuous mode [ 3310.842898] bridge0: port 1(bridge_slave_0) entered disabled state [ 3310.844775] syz-executor.4 invoked oom-killer: gfp_mask=0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null), order=0, oom_score_adj=1000 [ 3310.863979] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 3310.869781] CPU: 0 PID: 15931 Comm: syz-executor.4 Not tainted 4.14.225-syzkaller #0 [ 3310.878030] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3310.887488] Call Trace: [ 3310.890093] dump_stack+0x1b2/0x281 [ 3310.893734] dump_header+0x178/0x82f [ 3310.897721] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 3310.902839] ? ___ratelimit+0x2cd/0x530 [ 3310.906834] oom_kill_process.cold+0x10/0xb18 [ 3310.911363] out_of_memory+0xe3e/0x1190 [ 3310.915376] ? oom_killer_disable+0x1c0/0x1c0 [ 3310.919889] ? mutex_trylock+0x152/0x1a0 [ 3310.924076] __alloc_pages_nodemask+0x23e1/0x2720 [ 3310.929172] ? lock_acquire+0x170/0x3f0 [ 3310.933165] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3310.938113] ? ion_page_pool_alloc+0x9e/0x1b0 [ 3310.942634] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 3310.948280] alloc_pages_current+0x155/0x260 [ 3310.953941] ion_page_pool_alloc+0x118/0x1b0 [ 3310.958450] ion_system_heap_allocate+0x133/0x8c0 [ 3310.963475] ? ion_alloc+0x187/0x810 [ 3310.967202] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 3310.972847] ? ion_system_contig_heap_create+0x130/0x130 [ 3310.978318] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 3310.983344] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 3310.989671] ion_alloc+0x204/0x810 [ 3310.993223] ? ion_dma_buf_release+0x40/0x40 [ 3310.997824] ? __might_fault+0x177/0x1b0 [ 3311.002011] ion_ioctl+0xea/0x1f0 [ 3311.005466] ? ion_query_heaps+0x360/0x360 [ 3311.011427] ? __fget+0x1fe/0x360 [ 3311.014895] ? ion_query_heaps+0x360/0x360 [ 3311.019137] do_vfs_ioctl+0x75a/0xff0 [ 3311.022962] ? ioctl_preallocate+0x1a0/0x1a0 [ 3311.027522] ? lock_downgrade+0x740/0x740 [ 3311.031673] ? __fget+0x225/0x360 [ 3311.035128] ? do_vfs_ioctl+0xff0/0xff0 [ 3311.039215] ? security_file_ioctl+0x83/0xb0 [ 3311.043632] SyS_ioctl+0x7f/0xb0 [ 3311.047290] ? do_vfs_ioctl+0xff0/0xff0 [ 3311.051261] do_syscall_64+0x1d5/0x640 [ 3311.055192] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3311.060475] RIP: 0033:0x465f69 [ 3311.063662] RSP: 002b:00007fbb52cf0188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3311.071369] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 3311.078655] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 3311.085926] RBP: 00000000004bfa8f R08: 0000000000000000 R09: 0000000000000000 [ 3311.093660] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 3311.101285] R13: 00007ffc0aef8def R14: 00007fbb52cf0300 R15: 0000000000022000 [ 3311.113945] Mem-Info: [ 3311.116615] active_anon:16456 inactive_anon:90043 isolated_anon:0 [ 3311.116615] active_file:54 inactive_file:8 isolated_file:0 [ 3311.116615] unevictable:0 dirty:20 writeback:0 unstable:0 [ 3311.116615] slab_reclaimable:11908 slab_unreclaimable:113514 [ 3311.116615] mapped:43912 shmem:90898 pagetables:736 bounce:0 [ 3311.116615] free:13953 free_pcp:60 free_cma:0 [ 3311.159078] Node 0 active_anon:64628kB inactive_anon:305536kB active_file:216kB inactive_file:48kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:144620kB dirty:80kB writeback:0kB shmem:308576kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3311.166067] device veth1_macvtap left promiscuous mode [ 3311.196051] Node 1 active_anon:1196kB inactive_anon:54636kB active_file:4kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:31028kB dirty:0kB writeback:0kB shmem:55016kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3311.218447] device veth0_macvtap left promiscuous mode [ 3311.232029] Node 0 DMA free:10956kB min:204kB low:252kB high:300kB active_anon:100kB inactive_anon:980kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:4kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3311.263558] device veth1_vlan left promiscuous mode [ 3311.263860] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 3311.268764] device veth0_vlan left promiscuous mode [ 3311.273958] Node 0 DMA32 free:17964kB min:36200kB low:45248kB high:54296kB active_anon:64628kB inactive_anon:304556kB active_file:128kB inactive_file:40kB unevictable:0kB writepending:80kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7296kB pagetables:2712kB bounce:0kB free_pcp:120kB local_pcp:0kB free_cma:0kB [ 3311.309937] lowmem_reserve[]: 0 0 0 0 0 [ 3311.314856] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3311.344378] lowmem_reserve[]: 0 0 0 0 0 [ 3311.348769] Node 1 Normal free:26784kB min:53696kB low:67120kB high:80544kB active_anon:1196kB inactive_anon:54636kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:288kB pagetables:228kB bounce:0kB free_pcp:120kB local_pcp:0kB free_cma:0kB [ 3311.378092] lowmem_reserve[]: 0 0 0 0 0 [ 3311.382703] Node 0 DMA: 9*4kB (ME) 11*8kB (UME) 19*16kB (UME) 23*32kB (UME) 5*64kB (U) 10*128kB (UME) 6*256kB (UME) 1*512kB (E) 4*1024kB (UME) 1*2048kB (M) 0*4096kB = 10956kB [ 3311.398655] Node 0 DMA32: 783*4kB (ME) 682*8kB (UME) 119*16kB (UME) 26*32kB (UME) 16*64kB (M) 4*128kB (UM) 20*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 17980kB [ 3311.416335] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 3311.441459] Node 1 Normal: 142*4kB (M) 81*8kB (M) 43*16kB (M) 20*32kB (UM) 19*64kB (UM) 14*128kB (UM) 3*256kB (M) 40*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 26800kB [ 3311.462559] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3311.473948] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3311.485067] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3311.494055] syz-executor.5: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 3311.494078] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 3311.494101] CPU: 0 PID: 15972 Comm: syz-executor.5 Not tainted 4.14.225-syzkaller #0 [ 3311.494106] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3311.494112] Call Trace: [ 3311.515185] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3311.519571] dump_stack+0x1b2/0x281 [ 3311.541997] 90953 total pagecache pages [ 3311.543904] warn_alloc.cold+0x96/0x1cc [ 3311.547861] 0 pages in swap cache [ 3311.551924] ? zone_watermark_ok_safe+0x220/0x220 [ 3311.551933] ? usleep_range+0x130/0x130 [ 3311.551941] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 3311.551952] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 3311.551961] ? run_timer_softirq+0x5a0/0x5a0 [ 3311.551976] __alloc_pages_nodemask+0x2127/0x2720 [ 3311.551991] ? lock_acquire+0x170/0x3f0 [ 3311.552005] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3311.552022] ? ion_page_pool_alloc+0x9e/0x1b0 [ 3311.552037] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 3311.552050] ? alloc_pages_current+0x84/0x260 [ 3311.552060] alloc_pages_current+0x155/0x260 [ 3311.552073] ion_page_pool_alloc+0x118/0x1b0 [ 3311.568022] Swap cache stats: add 0, delete 0, find 0/0 [ 3311.569454] ion_system_heap_allocate+0x133/0x8c0 [ 3311.578366] Free swap = 0kB [ 3311.579185] ? ion_alloc+0x187/0x810 [ 3311.597604] Total swap = 0kB [ 3311.603039] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 3311.603051] ? ion_system_contig_heap_create+0x130/0x130 [ 3311.603062] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 3311.603073] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 3311.603083] ion_alloc+0x204/0x810 [ 3311.603097] ? ion_dma_buf_release+0x40/0x40 [ 3311.603109] ? __might_fault+0x177/0x1b0 [ 3311.603121] ion_ioctl+0xea/0x1f0 [ 3311.603130] ? ion_query_heaps+0x360/0x360 [ 3311.603140] ? __fget+0x1fe/0x360 [ 3311.603149] ? ion_query_heaps+0x360/0x360 [ 3311.603159] do_vfs_ioctl+0x75a/0xff0 [ 3311.621372] 2097051 pages RAM [ 3311.622373] ? ioctl_preallocate+0x1a0/0x1a0 [ 3311.627359] 0 pages HighMem/MovableOnly [ 3311.630355] ? lock_downgrade+0x740/0x740 [ 3311.630368] ? __fget+0x225/0x360 [ 3311.630377] ? do_vfs_ioctl+0xff0/0xff0 [ 3311.630387] ? security_file_ioctl+0x83/0xb0 [ 3311.630396] SyS_ioctl+0x7f/0xb0 [ 3311.630404] ? do_vfs_ioctl+0xff0/0xff0 [ 3311.630415] do_syscall_64+0x1d5/0x640 [ 3311.630431] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3311.630440] RIP: 0033:0x465f69 [ 3311.630445] RSP: 002b:00007f08137cb188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3311.630454] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 3311.630459] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 3311.630464] RBP: 00000000004bfa8f R08: 0000000000000000 R09: 0000000000000000 [ 3311.630468] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 3311.630473] R13: 00007ffeb8b6e44f R14: 00007f08137cb300 R15: 0000000000022000 [ 3311.640603] Mem-Info: [ 3311.655388] 363840 pages reserved [ 3311.668977] active_anon:16455 inactive_anon:90043 isolated_anon:0 [ 3311.668977] active_file:20 inactive_file:26 isolated_file:0 [ 3311.668977] unevictable:0 dirty:20 writeback:0 unstable:0 [ 3311.668977] slab_reclaimable:11908 slab_unreclaimable:113509 [ 3311.668977] mapped:43912 shmem:90898 pagetables:736 bounce:0 [ 3311.668977] free:13933 free_pcp:60 free_cma:0 [ 3311.683113] 0 pages cma reserved [ 3311.695435] Node 0 active_anon:64624kB inactive_anon:305536kB active_file:80kB inactive_file:64kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:144620kB dirty:80kB writeback:0kB shmem:308576kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3311.703715] Out of memory (oom_kill_allocating_task): Kill process 15931 (syz-executor.4) score 0 or sacrifice child [ 3311.717804] Node 1 active_anon:1196kB inactive_anon:54636kB active_file:0kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:31028kB dirty:0kB writeback:0kB shmem:55016kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3311.728139] Killed process 15931 (syz-executor.4) total-vm:93384kB, anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 3311.746908] Node 0 [ 3311.756484] syz-executor.4: [ 3311.758953] kworker/u4:0 invoked oom-killer: gfp_mask=0x15080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask= [ 3311.764871] page allocation failure: order:0 [ 3311.786697] DMA free:10956kB min:204kB low:252kB high:300kB active_anon:100kB inactive_anon:980kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:4kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3311.796268] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 3311.841961] (null) [ 3311.867628] (null) [ 3311.886174] , order=3, oom_score_adj=0 [ 3311.907052] syz-executor.4 cpuset= [ 3311.912616] lowmem_reserve[]: [ 3311.937824] / [ 3311.960339] kworker/u4:0 cpuset=/ mems_allowed=0-1 [ 3311.988923] mems_allowed=0-1 [ 3311.990693] CPU: 0 PID: 24058 Comm: kworker/u4:0 Not tainted 4.14.225-syzkaller #0 [ 3311.990699] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3311.990715] Workqueue: events_unbound call_usermodehelper_exec_work [ 3311.990721] Call Trace: [ 3311.990739] dump_stack+0x1b2/0x281 [ 3311.990751] dump_header+0x178/0x82f [ 3311.990761] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 3311.990770] ? ___ratelimit+0x2cd/0x530 [ 3311.990779] oom_kill_process.cold+0x10/0xb18 [ 3311.990791] ? lock_downgrade+0x740/0x740 [ 3312.047991] out_of_memory+0x2dc/0x1190 [ 3312.052047] ? oom_killer_disable+0x1c0/0x1c0 [ 3312.056668] ? mutex_trylock+0x152/0x1a0 [ 3312.060827] __alloc_pages_nodemask+0x23e1/0x2720 [ 3312.065679] ? finish_task_switch+0x178/0x610 [ 3312.070185] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3312.075027] ? fs_reclaim_release+0xd0/0x110 [ 3312.079666] ? kmem_cache_alloc_node+0x38b/0x410 [ 3312.084479] copy_process.part.0+0x265/0x71c0 [ 3312.088980] ? __lock_acquire+0x5fc/0x3f20 [ 3312.093290] ? cpuacct_charge+0x1ca/0x350 [ 3312.097437] ? static_obj+0x50/0x50 [ 3312.101068] ? lock_downgrade+0x740/0x740 [ 3312.105303] ? call_usermodehelper_exec_work+0x2a0/0x2a0 [ 3312.111098] ? __cleanup_sighand+0x40/0x40 [ 3312.115326] ? update_curr+0x28d/0x670 [ 3312.119810] ? call_usermodehelper_exec_work+0x2a0/0x2a0 [ 3312.125687] _do_fork+0x184/0xc80 [ 3312.129498] ? fork_idle+0x270/0x270 [ 3312.133218] ? lock_downgrade+0x740/0x740 [ 3312.137453] ? lock_downgrade+0x740/0x740 [ 3312.141798] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 3312.147254] ? process_one_work+0x6c4/0x14a0 [ 3312.152038] ? call_usermodehelper_exec_work+0x2a0/0x2a0 [ 3312.157484] kernel_thread+0x2f/0x40 [ 3312.161206] call_usermodehelper_exec_work+0x1ac/0x2a0 [ 3312.166752] ? call_usermodehelper+0x80/0x80 [ 3312.171170] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 3312.176822] process_one_work+0x793/0x14a0 [ 3312.181068] ? work_busy+0x320/0x320 [ 3312.184781] ? worker_thread+0x158/0xff0 [ 3312.188841] ? _raw_spin_unlock_irq+0x24/0x80 [ 3312.193342] worker_thread+0x5cc/0xff0 [ 3312.197231] ? rescuer_thread+0xc80/0xc80 [ 3312.201372] kthread+0x30d/0x420 [ 3312.204823] ? kthread_create_on_node+0xd0/0xd0 [ 3312.209489] ret_from_fork+0x24/0x30 [ 3312.217875] CPU: 1 PID: 15931 Comm: syz-executor.4 Not tainted 4.14.225-syzkaller #0 [ 3312.219238] 0 [ 3312.225790] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3312.225794] Call Trace: [ 3312.225816] dump_stack+0x1b2/0x281 [ 3312.225828] warn_alloc.cold+0x96/0x1cc [ 3312.225840] ? zone_watermark_ok_safe+0x220/0x220 [ 3312.225856] ? wait_for_completion_io+0x10/0x10 [ 3312.225868] __alloc_pages_nodemask+0x2127/0x2720 [ 3312.225884] ? lock_acquire+0x170/0x3f0 [ 3312.227676] 2717 [ 3312.237121] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3312.237133] ? ion_page_pool_alloc+0x9e/0x1b0 [ 3312.237147] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 3312.237166] alloc_pages_current+0x155/0x260 [ 3312.239721] 2718 [ 3312.243330] ion_page_pool_alloc+0x118/0x1b0 [ 3312.243341] ion_system_heap_allocate+0x133/0x8c0 [ 3312.243355] ? ion_alloc+0x187/0x810 [ 3312.247387] 2718 [ 3312.252478] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 3312.252489] ? ion_system_contig_heap_create+0x130/0x130 [ 3312.252498] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 3312.252510] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 3312.257764] 2718 [ 3312.263757] ion_alloc+0x204/0x810 [ 3312.263771] ? ion_dma_buf_release+0x40/0x40 [ 3312.263784] ? __might_fault+0x177/0x1b0 [ 3312.269897] ion_ioctl+0xea/0x1f0 [ 3312.275021] Node 0 [ 3312.279440] ? ion_query_heaps+0x360/0x360 [ 3312.284915] DMA32 free:17976kB min:36200kB low:45248kB high:54296kB active_anon:64524kB inactive_anon:304556kB active_file:272kB inactive_file:56kB unevictable:0kB writepending:80kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7296kB pagetables:2712kB bounce:0kB free_pcp:120kB local_pcp:0kB free_cma:0kB [ 3312.290310] ? __fget+0x1fe/0x360 [ 3312.290321] ? ion_query_heaps+0x360/0x360 [ 3312.290331] do_vfs_ioctl+0x75a/0xff0 [ 3312.292366] lowmem_reserve[]: [ 3312.296855] ? ioctl_preallocate+0x1a0/0x1a0 [ 3312.304041] 0 [ 3312.307706] ? lock_downgrade+0x740/0x740 [ 3312.309749] 0 [ 3312.315179] ? __fget+0x225/0x360 [ 3312.315189] ? do_vfs_ioctl+0xff0/0xff0 [ 3312.315200] ? security_file_ioctl+0x83/0xb0 [ 3312.320643] 0 [ 3312.326080] SyS_ioctl+0x7f/0xb0 [ 3312.330916] 0 [ 3312.332960] ? do_vfs_ioctl+0xff0/0xff0 [ 3312.336507] 0 [ 3312.341085] do_syscall_64+0x1d5/0x640 [ 3312.341102] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3312.341111] RIP: 0033:0x465f69 [ 3312.348933] RSP: 002b:00007fbb52cf0188 EFLAGS: 00000246 [ 3312.351179] Node 0 [ 3312.355453] ORIG_RAX: 0000000000000010 [ 3312.384204] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3312.388542] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 3312.388549] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 3312.392783] lowmem_reserve[]: [ 3312.396550] RBP: 00000000004bfa8f R08: 0000000000000000 R09: 0000000000000000 [ 3312.400169] 0 [ 3312.404535] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 3312.406395] 0 [ 3312.410776] R13: 00007ffc0aef8def R14: 00007fbb52cf0300 R15: 0000000000022000 [ 3312.588370] Mem-Info: [ 3312.605337] active_anon:16514 inactive_anon:90041 isolated_anon:0 [ 3312.605337] active_file:569 inactive_file:1233 isolated_file:0 [ 3312.605337] unevictable:0 dirty:26 writeback:0 unstable:0 [ 3312.605337] slab_reclaimable:11908 slab_unreclaimable:113861 [ 3312.605337] mapped:45168 shmem:90895 pagetables:713 bounce:0 [ 3312.605337] free:42585 free_pcp:251 free_cma:0 [ 3312.698134] Node 0 active_anon:64288kB inactive_anon:305524kB active_file:8kB inactive_file:84kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:144640kB dirty:0kB writeback:0kB shmem:308560kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3312.745943] Node 1 active_anon:1692kB inactive_anon:54636kB active_file:2116kB inactive_file:6432kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:36644kB dirty:0kB writeback:0kB shmem:55016kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3312.794145] 0 0 0 [ 3312.796344] Node 1 Normal free:229120kB min:53696kB low:67120kB high:80544kB active_anon:1792kB inactive_anon:54636kB active_file:2116kB inactive_file:6432kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:288kB pagetables:284kB bounce:0kB free_pcp:664kB local_pcp:360kB free_cma:0kB [ 3312.830711] device hsr_slave_1 left promiscuous mode [ 3312.833251] Node 0 DMA free:10956kB min:204kB low:252kB high:300kB active_anon:100kB inactive_anon:980kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:4kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3312.866922] lowmem_reserve[]: 0 0 0 0 0 [ 3312.871439] Node 0 DMA: 10*4kB (UME) 11*8kB (UME) 19*16kB (UME) 23*32kB (UME) 5*64kB (U) 10*128kB (UME) 6*256kB (UME) 1*512kB (E) 4*1024kB (UME) 1*2048kB (M) 0*4096kB = 10960kB [ 3312.871721] device hsr_slave_0 left promiscuous mode [ 3312.889324] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 3312.904063] Node 0 DMA32 free:53212kB min:36200kB low:45248kB high:54296kB active_anon:64188kB inactive_anon:304544kB active_file:108kB inactive_file:284kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7296kB pagetables:2576kB bounce:0kB free_pcp:1232kB local_pcp:356kB free_cma:0kB [ 3312.938208] Node 0 DMA32: 1051*4kB (UME) 1062*8kB (UME) 314*16kB (UME) 1396*32kB (UME) 42*64kB (UM) 7*128kB (UM) 20*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 71100kB [ 3312.958332] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 3312.970341] Node 1 Normal: 1*4kB (M) 1*8kB (U) 1*16kB (M) 1*32kB (M) 794*64kB (U) 83*128kB (UM) 248*256kB (UM) 203*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 228924kB [ 3312.986059] team0 (unregistering): Port device team_slave_1 removed [ 3312.988956] lowmem_reserve[]: 0 0 0 0 0 [ 3312.998270] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3313.028016] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3313.031013] team0 (unregistering): Port device team_slave_0 removed [ 3313.038884] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3313.058699] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3313.067996] lowmem_reserve[]: 0 0 0 0 0 [ 3313.076558] Node 1 Normal free:235132kB min:53696kB low:67120kB high:80544kB active_anon:1792kB inactive_anon:54636kB active_file:2116kB inactive_file:6532kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:288kB pagetables:284kB bounce:0kB free_pcp:1064kB local_pcp:356kB free_cma:0kB [ 3313.106286] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 3313.114715] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 3313.120030] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3313.137309] 93283 total pagecache pages [ 3313.142403] 0 pages in swap cache [ 3313.146123] Swap cache stats: add 0, delete 0, find 0/0 [ 3313.158783] Free swap = 0kB [ 3313.162603] Total swap = 0kB [ 3313.165641] 2097051 pages RAM [ 3313.169097] 0 pages HighMem/MovableOnly [ 3313.178181] lowmem_reserve[]: 0 0 0 0 0 [ 3313.183079] 363840 pages reserved [ 3313.186552] 0 pages cma reserved [ 3313.194760] Node 0 DMA: 10*4kB (UME) 11*8kB (UME) 19*16kB (UME) 23*32kB (UME) 5*64kB (U) 10*128kB (UME) 6*256kB (UME) 1*512kB (E) 4*1024kB (UME) 1*2048kB (M) 0*4096kB = 10960kB [ 3313.206500] bond0 (unregistering): Released all slaves [ 3313.233752] Node 0 DMA32: 1866*4kB (UME) 1817*8kB (UME) 3461*16kB (UME) 2804*32kB (UME) 453*64kB (UM) 8*128kB (UM) 20*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 202240kB [ 3313.259905] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 3313.303764] Node 1 Normal: 488*4kB (UM) 698*8kB (UM) 197*16kB (UM) 5*32kB (UM) 1258*64kB (U) 82*128kB (UM) 249*256kB (UM) 203*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 269536kB [ 3313.331615] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3313.346141] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3313.355910] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3313.368818] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3313.378259] 93283 total pagecache pages [ 3313.386931] 0 pages in swap cache [ 3313.391355] Swap cache stats: add 0, delete 0, find 0/0 [ 3313.397292] Free swap = 0kB [ 3313.404915] Total swap = 0kB [ 3313.407946] 2097051 pages RAM [ 3313.422428] 0 pages HighMem/MovableOnly [ 3313.426448] 363840 pages reserved [ 3313.430938] 0 pages cma reserved [ 3313.434315] Out of memory: Kill process 7976 (syz-fuzzer) score 7 or sacrifice child [ 3313.500013] Killed process 14631 (syz-executor.1) total-vm:84924kB, anon-rss:68kB, file-rss:0kB, shmem-rss:0kB [ 3313.556734] oom_reaper: reaped process 14631 (syz-executor.1), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 3314.894048] syz-executor.4: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 3314.910103] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 3314.915757] CPU: 1 PID: 15931 Comm: syz-executor.4 Not tainted 4.14.225-syzkaller #0 [ 3314.923912] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3314.933302] Call Trace: [ 3314.935901] dump_stack+0x1b2/0x281 [ 3314.939537] warn_alloc.cold+0x96/0x1cc [ 3314.943519] ? zone_watermark_ok_safe+0x220/0x220 [ 3314.948393] __alloc_pages_nodemask+0x2127/0x2720 [ 3314.954244] ? check_preemption_disabled+0x35/0x240 [ 3314.959374] ? lock_acquire+0x170/0x3f0 [ 3314.963605] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3314.968475] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 3314.974294] ? __mutex_unlock_slowpath+0x75/0x770 [ 3314.979519] ? retint_kernel+0x2d/0x2d [ 3314.983521] alloc_pages_current+0x155/0x260 [ 3314.987973] ion_page_pool_alloc+0x118/0x1b0 [ 3314.992581] ion_system_heap_allocate+0x133/0x8c0 [ 3314.997416] ? _raw_spin_unlock+0x29/0x40 [ 3315.001549] ? _ion_heap_freelist_drain+0x6e/0x410 [ 3315.006589] ? ion_system_contig_heap_create+0x130/0x130 [ 3315.012041] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 3315.017048] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 3315.021879] ion_alloc+0x27a/0x810 [ 3315.025404] ? ion_dma_buf_release+0x40/0x40 [ 3315.029796] ? __might_fault+0x177/0x1b0 [ 3315.033840] ion_ioctl+0xea/0x1f0 [ 3315.037275] ? ion_query_heaps+0x360/0x360 [ 3315.041513] ? __fget+0x1fe/0x360 [ 3315.044951] ? ion_query_heaps+0x360/0x360 [ 3315.049167] do_vfs_ioctl+0x75a/0xff0 [ 3315.052980] ? ioctl_preallocate+0x1a0/0x1a0 [ 3315.057396] ? lock_downgrade+0x740/0x740 [ 3315.061533] ? __fget+0x225/0x360 [ 3315.064969] ? do_vfs_ioctl+0xff0/0xff0 [ 3315.068954] ? security_file_ioctl+0x83/0xb0 [ 3315.073360] SyS_ioctl+0x7f/0xb0 [ 3315.076909] ? do_vfs_ioctl+0xff0/0xff0 [ 3315.080867] do_syscall_64+0x1d5/0x640 [ 3315.084753] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3315.089943] RIP: 0033:0x465f69 [ 3315.093117] RSP: 002b:00007fbb52cf0188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3315.100809] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 3315.108061] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 3315.115360] RBP: 00000000004bfa8f R08: 0000000000000000 R09: 0000000000000000 [ 3315.128027] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 3315.135576] R13: 00007ffc0aef8def R14: 00007fbb52cf0300 R15: 0000000000022000 [ 3315.143971] warn_alloc_show_mem: 1 callbacks suppressed [ 3315.143974] Mem-Info: [ 3315.152796] active_anon:16473 inactive_anon:90038 isolated_anon:0 [ 3315.152796] active_file:237 inactive_file:1059 isolated_file:0 [ 3315.152796] unevictable:0 dirty:16 writeback:9 unstable:0 [ 3315.152796] slab_reclaimable:11918 slab_unreclaimable:113593 [ 3315.152796] mapped:35899 shmem:90891 pagetables:680 bounce:0 [ 3315.152796] free:266982 free_pcp:49 free_cma:0 [ 3315.187625] Node 0 active_anon:64268kB inactive_anon:305512kB active_file:924kB inactive_file:4388kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:143936kB dirty:20kB writeback:20kB shmem:308544kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 3315.216990] Node 1 active_anon:1624kB inactive_anon:54640kB active_file:24kB inactive_file:48kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:60kB dirty:44kB writeback:16kB shmem:55020kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3315.244967] Node 0 DMA free:11000kB min:204kB low:252kB high:300kB active_anon:100kB inactive_anon:980kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:4kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3315.272087] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 3315.277974] Node 0 DMA32 free:810740kB min:36200kB low:45248kB high:54296kB active_anon:64168kB inactive_anon:304532kB active_file:924kB inactive_file:4600kB unevictable:0kB writepending:40kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7264kB pagetables:2564kB bounce:0kB free_pcp:64kB local_pcp:8kB free_cma:0kB [ 3315.308408] lowmem_reserve[]: 0 0 0 0 0 [ 3315.312965] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3315.339610] lowmem_reserve[]: 0 0 0 0 0 [ 3315.344556] Node 1 Normal free:878208kB min:53696kB low:67120kB high:80544kB active_anon:1624kB inactive_anon:54640kB active_file:500kB inactive_file:252kB unevictable:0kB writepending:60kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:224kB pagetables:152kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3315.374324] lowmem_reserve[]: 0 0 0 0 0 [ 3315.378799] Node 0 DMA: 26*4kB (UME) 30*8kB (UME) 24*16kB (UME) 23*32kB (UME) 1*64kB (U) 10*128kB (UME) 6*256kB (UME) 1*512kB (E) 4*1024kB (UME) 1*2048kB (M) 0*4096kB = 11000kB [ 3315.409424] Node 0 DMA32: 9634*4kB (UE) 10472*8kB (UME) 20329*16kB (UME) 11247*32kB (UME) 2*64kB (U) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 807608kB [ 3315.427935] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 3315.439124] Node 1 Normal: 624*4kB (UM) 972*8kB (UM) 774*16kB (UM) 548*32kB (UM) 2773*64kB (U) 4773*128kB (U) 1162*256kB (U) 26*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 1139392kB [ 3315.456039] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3315.465857] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3315.475113] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3315.485073] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3315.494297] 92833 total pagecache pages [ 3315.498343] 0 pages in swap cache [ 3315.502658] Swap cache stats: add 0, delete 0, find 0/0 [ 3315.508501] Free swap = 0kB [ 3315.512006] Total swap = 0kB [ 3315.515028] 2097051 pages RAM [ 3315.518129] 0 pages HighMem/MovableOnly [ 3315.523413] 363840 pages reserved [ 3315.526886] 0 pages cma reserved [ 3315.784767] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 3315.791976] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3315.801241] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 3315.807981] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3315.821025] device bridge_slave_1 left promiscuous mode [ 3315.826674] bridge0: port 2(bridge_slave_1) entered disabled state [ 3315.838637] device bridge_slave_0 left promiscuous mode [ 3315.845667] bridge0: port 1(bridge_slave_0) entered disabled state [ 3315.862369] device veth1_macvtap left promiscuous mode [ 3315.868094] device veth0_macvtap left promiscuous mode [ 3315.879545] device veth1_vlan left promiscuous mode [ 3315.884825] device veth0_vlan left promiscuous mode [ 3316.016259] device hsr_slave_1 left promiscuous mode [ 3316.031231] device hsr_slave_0 left promiscuous mode [ 3316.054024] team0 (unregistering): Port device team_slave_1 removed [ 3316.072355] team0 (unregistering): Port device team_slave_0 removed [ 3316.087754] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 3316.104008] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 3316.147869] bond0 (unregistering): Released all slaves 05:20:48 executing program 1: socketpair(0x0, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bind$llc(r0, 0x0, 0x0) 05:20:49 executing program 2: socketpair(0x0, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) recvfrom$llc(r0, &(0x7f00000000c0)=""/131, 0x83, 0x1000, &(0x7f0000000000)={0x1a, 0x78e341917cb35c9f, 0x20, 0xc2, 0x7, 0x5, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x10) 05:20:49 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) write$dsp(0xffffffffffffffff, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x80000001, 0x32}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(0xffffffffffffffff, 0x7a5, &(0x7f0000000000)={{@any, 0x7}, 0x1, 0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(0xffffffffffffffff, 0x7a4, &(0x7f00000000c0)={{@hyper}, 0x0, 0x3f, 0x13, 0x8}) 05:20:49 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x40000, 0x0) openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x22000, 0x0) write$dsp(0xffffffffffffffff, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x2080000001, 0x32}) r1 = add_key(&(0x7f0000000040)='rxrpc\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) keyctl$set_timeout(0xf, 0x0, 0xfff) keyctl$reject(0x13, 0x0, 0x3, 0xffff, r1) r2 = request_key(&(0x7f0000001740)='rxrpc\x00', &(0x7f00000018c0)={'syz', 0x0}, &(0x7f00000017c0)='@:@#(:+\x00', r1) r3 = add_key$fscrypt_v1(&(0x7f0000000000)='logon\x00', &(0x7f0000000080)={'fscrypt:', @desc3='e8dab99234bb312e'}, &(0x7f00000000c0)={0x0, "01b312956356957445a7fdef5b815e85c96fffefd2c7a05f287d2b1de558d2eb84a32160aaf272d5cdad41dc7e36c7000000002c7533ba99425d6dc4b4786c59"}, 0x48, 0xfffffffffffffffe) keyctl$set_timeout(0xf, r3, 0x1f) keyctl$KEYCTL_MOVE(0x1e, r2, r3, r1, 0x0) 05:20:49 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) write$dsp(0xffffffffffffffff, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x80000001, 0x32}) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(0xffffffffffffffff, 0x7a5, &(0x7f0000000000)={{}, 0x1, 0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(0xffffffffffffffff, 0x7a4, &(0x7f00000000c0)={{@hyper}, 0x0, 0x0, 0x13, 0x8}) 05:20:49 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x40000, 0x0) openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x22000, 0x0) write$dsp(0xffffffffffffffff, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x2080000001, 0x32}) r1 = add_key(&(0x7f0000000040)='rxrpc\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) keyctl$set_timeout(0xf, 0x0, 0xfff) keyctl$reject(0x13, 0x0, 0x3, 0xffff, r1) request_key(&(0x7f0000001740)='rxrpc\x00', &(0x7f00000018c0)={'syz', 0x0}, &(0x7f00000017c0)='@:@#(:+\x00', r1) r2 = add_key$fscrypt_v1(&(0x7f0000000000)='logon\x00', &(0x7f0000000080)={'fscrypt:', @desc3='e8dab99234bb312e'}, &(0x7f00000000c0)={0x0, "01b312956356957445a7fdef5b815e85c96fffefd2c7a05f287d2b1de558d2eb84a32160aaf272d5cdad41dc7e36c7000000002c7533ba99425d6dc4b4786c59"}, 0x48, 0xfffffffffffffffe) keyctl$set_timeout(0xf, r2, 0x1f) 05:20:49 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x40000, 0x0) openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x22000, 0x0) write$dsp(0xffffffffffffffff, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x2080000001, 0x32}) r1 = add_key(&(0x7f0000000040)='rxrpc\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) keyctl$set_timeout(0xf, 0x0, 0xfff) keyctl$reject(0x13, 0x0, 0x3, 0xffff, r1) r2 = request_key(&(0x7f0000001740)='rxrpc\x00', &(0x7f00000018c0)={'syz', 0x0}, &(0x7f00000017c0)='@:@#(:+\x00', r1) r3 = add_key$fscrypt_v1(&(0x7f0000000000)='logon\x00', &(0x7f0000000080)={'fscrypt:', @desc3='e8dab99234bb312e'}, &(0x7f00000000c0)={0x0, "01b312956356957445a7fdef5b815e85c96fffefd2c7a05f287d2b1de558d2eb84a32160aaf272d5cdad41dc7e36c7000000002c7533ba99425d6dc4b4786c59"}, 0x48, 0xfffffffffffffffe) keyctl$set_timeout(0xf, r3, 0x1f) keyctl$KEYCTL_MOVE(0x1e, r2, r3, r1, 0x0) 05:20:49 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x40000, 0x0) openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x22000, 0x0) write$dsp(0xffffffffffffffff, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x2080000001, 0x32}) r1 = add_key(&(0x7f0000000040)='rxrpc\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) keyctl$set_timeout(0xf, 0x0, 0xfff) keyctl$reject(0x13, 0x0, 0x3, 0xffff, r1) request_key(&(0x7f0000001740)='rxrpc\x00', &(0x7f00000018c0)={'syz', 0x0}, &(0x7f00000017c0)='@:@#(:+\x00', r1) add_key$fscrypt_v1(&(0x7f0000000000)='logon\x00', &(0x7f0000000080)={'fscrypt:', @desc3='e8dab99234bb312e'}, &(0x7f00000000c0)={0x0, "01b312956356957445a7fdef5b815e85c96fffefd2c7a05f287d2b1de558d2eb84a32160aaf272d5cdad41dc7e36c7000000002c7533ba99425d6dc4b4786c59"}, 0x48, 0xfffffffffffffffe) 05:20:49 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x40000, 0x0) openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x22000, 0x0) write$dsp(0xffffffffffffffff, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x2080000001, 0x32}) r1 = add_key(&(0x7f0000000040)='rxrpc\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) keyctl$set_timeout(0xf, 0x0, 0xfff) keyctl$reject(0x13, 0x0, 0x3, 0xffff, r1) request_key(&(0x7f0000001740)='rxrpc\x00', &(0x7f00000018c0)={'syz', 0x0}, &(0x7f00000017c0)='@:@#(:+\x00', r1) r2 = add_key$fscrypt_v1(&(0x7f0000000000)='logon\x00', &(0x7f0000000080)={'fscrypt:', @desc3='e8dab99234bb312e'}, &(0x7f00000000c0)={0x0, "01b312956356957445a7fdef5b815e85c96fffefd2c7a05f287d2b1de558d2eb84a32160aaf272d5cdad41dc7e36c7000000002c7533ba99425d6dc4b4786c59"}, 0x48, 0xfffffffffffffffe) keyctl$set_timeout(0xf, r2, 0x1f) 05:20:49 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x40000, 0x0) openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x22000, 0x0) write$dsp(0xffffffffffffffff, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x2080000001, 0x32}) r1 = add_key(&(0x7f0000000040)='rxrpc\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) keyctl$set_timeout(0xf, 0x0, 0xfff) keyctl$reject(0x13, 0x0, 0x3, 0xffff, r1) request_key(&(0x7f0000001740)='rxrpc\x00', &(0x7f00000018c0)={'syz', 0x0}, &(0x7f00000017c0)='@:@#(:+\x00', r1) 05:20:49 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x40000, 0x0) openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x22000, 0x0) write$dsp(0xffffffffffffffff, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x2080000001, 0x32}) r1 = add_key(&(0x7f0000000040)='rxrpc\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) keyctl$set_timeout(0xf, 0x0, 0xfff) keyctl$reject(0x13, 0x0, 0x3, 0xffff, r1) request_key(&(0x7f0000001740)='rxrpc\x00', &(0x7f00000018c0)={'syz', 0x0}, &(0x7f00000017c0)='@:@#(:+\x00', r1) add_key$fscrypt_v1(&(0x7f0000000000)='logon\x00', &(0x7f0000000080)={'fscrypt:', @desc3='e8dab99234bb312e'}, &(0x7f00000000c0)={0x0, "01b312956356957445a7fdef5b815e85c96fffefd2c7a05f287d2b1de558d2eb84a32160aaf272d5cdad41dc7e36c7000000002c7533ba99425d6dc4b4786c59"}, 0x48, 0xfffffffffffffffe) 05:20:49 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x40000, 0x0) openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x22000, 0x0) write$dsp(0xffffffffffffffff, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x2080000001, 0x32}) r1 = add_key(&(0x7f0000000040)='rxrpc\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) keyctl$set_timeout(0xf, 0x0, 0xfff) keyctl$reject(0x13, 0x0, 0x3, 0xffff, r1) request_key(&(0x7f0000001740)='rxrpc\x00', &(0x7f00000018c0)={'syz', 0x0}, &(0x7f00000017c0)='@:@#(:+\x00', r1) 05:20:49 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x40000, 0x0) openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x22000, 0x0) write$dsp(0xffffffffffffffff, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x2080000001, 0x32}) r1 = add_key(&(0x7f0000000040)='rxrpc\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) keyctl$set_timeout(0xf, 0x0, 0xfff) keyctl$reject(0x13, 0x0, 0x3, 0xffff, r1) [ 3317.836902] syz-executor.4: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 3317.855246] syz-executor.4 invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 3317.880582] syz-executor.5: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 3317.901098] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 3317.906320] CPU: 1 PID: 16008 Comm: syz-executor.5 Not tainted 4.14.225-syzkaller #0 [ 3317.914308] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3317.921127] syz-executor.4 cpuset= [ 3317.923742] Call Trace: [ 3317.923749] / [ 3317.927279] dump_stack+0x1b2/0x281 [ 3317.935256] warn_alloc.cold+0x96/0x1cc [ 3317.939231] ? zone_watermark_ok_safe+0x220/0x220 [ 3317.944200] __alloc_pages_nodemask+0x2127/0x2720 [ 3317.948915] mems_allowed=0-1 [ 3317.949225] ? lock_acquire+0x170/0x3f0 [ 3317.956569] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3317.961409] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 3317.966858] ? __mutex_unlock_slowpath+0x75/0x770 [ 3317.971690] alloc_pages_current+0x155/0x260 [ 3317.976175] ion_page_pool_alloc+0x118/0x1b0 [ 3317.980589] ion_system_heap_allocate+0x133/0x8c0 [ 3317.985617] ? ion_alloc+0x187/0x810 [ 3317.989331] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 3317.994766] ? ion_system_contig_heap_create+0x130/0x130 [ 3318.000217] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 3318.005221] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 3318.010084] ion_alloc+0x204/0x810 [ 3318.013698] ? ion_dma_buf_release+0x40/0x40 [ 3318.018089] ? __might_fault+0x177/0x1b0 [ 3318.022133] ion_ioctl+0xea/0x1f0 [ 3318.025596] ? ion_query_heaps+0x360/0x360 [ 3318.029828] ? __fget+0x1fe/0x360 [ 3318.033274] ? ion_query_heaps+0x360/0x360 [ 3318.037513] do_vfs_ioctl+0x75a/0xff0 [ 3318.041302] ? ioctl_preallocate+0x1a0/0x1a0 [ 3318.045695] ? lock_downgrade+0x740/0x740 [ 3318.049935] ? __fget+0x225/0x360 [ 3318.053370] ? do_vfs_ioctl+0xff0/0xff0 [ 3318.057327] ? security_file_ioctl+0x83/0xb0 [ 3318.061717] SyS_ioctl+0x7f/0xb0 [ 3318.065155] ? do_vfs_ioctl+0xff0/0xff0 [ 3318.069113] do_syscall_64+0x1d5/0x640 [ 3318.072989] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3318.078267] RIP: 0033:0x465f69 [ 3318.081440] RSP: 002b:00007f08137cb188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3318.089127] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 3318.096378] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 3318.103651] RBP: 00000000004bfa8f R08: 0000000000000000 R09: 0000000000000000 [ 3318.110932] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 3318.118207] R13: 00007ffeb8b6e44f R14: 00007f08137cb300 R15: 0000000000022000 [ 3318.125478] CPU: 0 PID: 16007 Comm: syz-executor.4 Not tainted 4.14.225-syzkaller #0 [ 3318.125751] syz-executor.4 cpuset= [ 3318.133359] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3318.133363] Call Trace: [ 3318.133383] dump_stack+0x1b2/0x281 [ 3318.133400] warn_alloc.cold+0x96/0x1cc [ 3318.148558] / [ 3318.149212] ? zone_watermark_ok_safe+0x220/0x220 [ 3318.155485] mems_allowed=0-1 [ 3318.157077] __alloc_pages_nodemask+0x2127/0x2720 [ 3318.171535] ? __schedule+0x893/0x1de0 [ 3318.175548] ? lock_acquire+0x170/0x3f0 [ 3318.179532] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3318.184394] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 3318.189846] ? __mutex_unlock_slowpath+0x75/0x770 [ 3318.194692] alloc_pages_current+0x155/0x260 [ 3318.199104] ion_page_pool_alloc+0x118/0x1b0 [ 3318.203508] ion_system_heap_allocate+0x133/0x8c0 [ 3318.208354] ? ion_alloc+0x187/0x810 [ 3318.212078] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 3318.217518] ? ion_system_contig_heap_create+0x130/0x130 [ 3318.222954] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 3318.227957] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 3318.232801] ion_alloc+0x204/0x810 [ 3318.236339] ? ion_dma_buf_release+0x40/0x40 [ 3318.240749] ? __might_fault+0x177/0x1b0 [ 3318.245178] ion_ioctl+0xea/0x1f0 [ 3318.248635] ? ion_query_heaps+0x360/0x360 [ 3318.252866] ? __fget+0x1fe/0x360 [ 3318.256305] ? ion_query_heaps+0x360/0x360 [ 3318.260532] do_vfs_ioctl+0x75a/0xff0 [ 3318.264336] ? ioctl_preallocate+0x1a0/0x1a0 [ 3318.268754] ? lock_downgrade+0x740/0x740 [ 3318.272903] ? __fget+0x225/0x360 [ 3318.276362] ? do_vfs_ioctl+0xff0/0xff0 [ 3318.280329] ? security_file_ioctl+0x83/0xb0 [ 3318.284727] SyS_ioctl+0x7f/0xb0 [ 3318.288077] ? do_vfs_ioctl+0xff0/0xff0 [ 3318.292038] do_syscall_64+0x1d5/0x640 [ 3318.295915] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3318.301089] RIP: 0033:0x465f69 [ 3318.304314] RSP: 002b:00007fbb52cf0188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3318.313245] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 3318.320507] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 3318.327759] RBP: 00000000004bfa8f R08: 0000000000000000 R09: 0000000000000000 [ 3318.335049] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 3318.342308] R13: 00007ffc0aef8def R14: 00007fbb52cf0300 R15: 0000000000022000 [ 3318.358473] Mem-Info: [ 3318.361084] active_anon:16437 inactive_anon:90038 isolated_anon:0 [ 3318.361084] active_file:38 inactive_file:0 isolated_file:0 [ 3318.361084] unevictable:0 dirty:3 writeback:0 unstable:0 [ 3318.361084] slab_reclaimable:11978 slab_unreclaimable:112497 [ 3318.361084] mapped:35269 shmem:90891 pagetables:680 bounce:0 [ 3318.361084] free:25129 free_pcp:0 free_cma:0 [ 3318.390371] CPU: 0 PID: 14697 Comm: syz-executor.4 Not tainted 4.14.225-syzkaller #0 [ 3318.400570] Node 0 active_anon:63848kB inactive_anon:305504kB active_file:116kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:141076kB dirty:8kB writeback:0kB shmem:308536kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3318.402022] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3318.440258] Call Trace: [ 3318.442863] dump_stack+0x1b2/0x281 [ 3318.446485] dump_header+0x178/0x82f [ 3318.450213] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 3318.455311] ? ___ratelimit+0x2cd/0x530 [ 3318.459894] oom_kill_process.cold+0x10/0xb18 [ 3318.464482] out_of_memory+0xe3e/0x1190 [ 3318.468458] ? oom_killer_disable+0x1c0/0x1c0 [ 3318.472959] ? mutex_trylock+0x152/0x1a0 [ 3318.477019] __alloc_pages_nodemask+0x23e1/0x2720 [ 3318.481871] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3318.486723] alloc_pages_current+0x155/0x260 [ 3318.491131] filemap_fault+0xea3/0x1980 [ 3318.495110] ext4_filemap_fault+0x84/0xb0 [ 3318.499253] __do_fault+0xfa/0x380 [ 3318.502788] __handle_mm_fault+0x2497/0x4620 [ 3318.507199] ? vm_insert_page+0x7c0/0x7c0 [ 3318.507976] Node 1 active_anon:1900kB inactive_anon:54648kB active_file:36kB inactive_file:40kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:55028kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3318.511339] ? nanosleep_copyout+0x100/0x100 [ 3318.511354] handle_mm_fault+0x391/0x860 [ 3318.511366] __do_page_fault+0x549/0xad0 [ 3318.511376] ? spurious_fault+0x640/0x640 [ 3318.511384] ? do_page_fault+0x60/0x500 [ 3318.511394] ? page_fault+0x2f/0x50 [ 3318.511401] page_fault+0x45/0x50 [ 3318.511410] RIP: 32a1cf:0x5 [ 3318.570127] RSP: 0008:00007ffc0aef90ac EFLAGS: 00000032 [ 3318.602010] Mem-Info: [ 3318.602900] Node 0 [ 3318.608619] active_anon:16437 inactive_anon:90038 isolated_anon:0 [ 3318.608619] active_file:13 inactive_file:70 isolated_file:0 [ 3318.608619] unevictable:0 dirty:3 writeback:0 unstable:0 [ 3318.608619] slab_reclaimable:11978 slab_unreclaimable:112358 [ 3318.608619] mapped:35265 shmem:90891 pagetables:680 bounce:0 [ 3318.608619] free:25238 free_pcp:64 free_cma:0 [ 3318.617710] DMA free:11004kB min:204kB low:252kB high:300kB active_anon:100kB inactive_anon:980kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:4kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3318.668468] Node 0 active_anon:63848kB inactive_anon:305504kB active_file:68kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:141060kB dirty:8kB writeback:0kB shmem:308536kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3318.673668] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 3318.742422] Node 0 DMA32 free:35968kB min:36200kB low:45248kB high:54296kB active_anon:63748kB inactive_anon:304524kB active_file:0kB inactive_file:172kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7168kB pagetables:2352kB bounce:0kB free_pcp:60kB local_pcp:60kB free_cma:0kB [ 3318.804761] Node 1 active_anon:1900kB inactive_anon:54648kB active_file:48kB inactive_file:28kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:55028kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3318.889684] lowmem_reserve[]: 0 0 0 0 0 [ 3318.893741] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3318.904301] Node 0 DMA free:11004kB min:204kB low:252kB high:300kB active_anon:100kB inactive_anon:980kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:4kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3318.998886] lowmem_reserve[]: 0 0 0 0 0 [ 3319.002907] Node 1 Normal free:53480kB min:53696kB low:67120kB high:80544kB active_anon:1900kB inactive_anon:54648kB active_file:48kB inactive_file:20kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:288kB pagetables:364kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3319.067203] lowmem_reserve[]: 0 0 0 0 0 [ 3319.094719] Node 0 DMA: 27*4kB (UME) 30*8kB (UME) 24*16kB (UME) 23*32kB (UME) 1*64kB (U) 10*128kB (UME) 6*256kB (UME) 1*512kB (E) 4*1024kB (UME) 1*2048kB (M) 0*4096kB = 11004kB [ 3319.111707] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 3319.116774] Node 0 DMA32 free:35716kB min:36200kB low:45248kB high:54296kB active_anon:63748kB inactive_anon:304524kB active_file:0kB inactive_file:44kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7168kB pagetables:2352kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3319.166929] Node 0 DMA32: 1008*4kB (UME) 1170*8kB (UME) 173*16kB (UME) 32*32kB (UME) 287*64kB (U) 7*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36448kB [ 3319.226803] lowmem_reserve[]: 0 0 0 0 0 [ 3319.230858] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3319.234672] Node 0 [ 3319.256889] lowmem_reserve[]: 0 0 0 0 0 [ 3319.284541] Node 1 Normal free:53480kB min:53696kB low:67120kB high:80544kB active_anon:1900kB inactive_anon:54648kB active_file:48kB inactive_file:16kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:288kB pagetables:364kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3319.365864] Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 3319.395963] lowmem_reserve[]: 0 0 0 0 0 [ 3319.400139] Node 0 DMA: 27*4kB (UME) 30*8kB (UME) 24*16kB (UME) 23*32kB (UME) 1*64kB (U) 10*128kB (UME) 6*256kB (UME) 1*512kB (E) 4*1024kB (UME) 1*2048kB (M) 0*4096kB = 11004kB [ 3319.405803] Node 1 Normal: 122*4kB (UM) 50*8kB (UM) 51*16kB (UM) 28*32kB (UM) 15*64kB (UM) 32*128kB (UM) 13*256kB (M) 83*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 53480kB [ 3319.486566] Node 0 DMA32: 1013*4kB (UME) 1170*8kB (UME) 173*16kB (UME) 32*32kB (UME) 287*64kB (U) 7*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36468kB [ 3319.533198] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 3319.544392] Node 1 Normal: 122*4kB (UM) 50*8kB (UM) 51*16kB (UM) 28*32kB (UM) 15*64kB (UM) 32*128kB (UM) 13*256kB (M) 83*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 53480kB [ 3319.553103] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3319.582272] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3319.601134] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3319.618514] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3319.627374] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3319.634113] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3319.691052] 90926 total pagecache pages [ 3319.695066] 0 pages in swap cache [ 3319.701500] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3319.729241] Swap cache stats: add 0, delete 0, find 0/0 [ 3319.734625] Free swap = 0kB [ 3319.737646] Total swap = 0kB [ 3319.756262] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3319.783392] 2097051 pages RAM [ 3319.786521] 0 pages HighMem/MovableOnly [ 3319.811515] 90926 total pagecache pages [ 3319.811989] 363840 pages reserved [ 3319.815534] 0 pages in swap cache [ 3319.819823] 0 pages cma reserved [ 3319.853242] Swap cache stats: add 0, delete 0, find 0/0 [ 3319.896104] Free swap = 0kB [ 3319.907805] Total swap = 0kB [ 3319.923580] 2097051 pages RAM [ 3319.926699] 0 pages HighMem/MovableOnly [ 3319.962819] 363840 pages reserved [ 3319.966400] 0 pages cma reserved [ 3320.006057] Out of memory (oom_kill_allocating_task): Kill process 14697 (syz-executor.4) score 0 or sacrifice child [ 3320.039042] Killed process 16007 (syz-executor.4) total-vm:93384kB, anon-rss:152kB, file-rss:34816kB, shmem-rss:0kB [ 3320.087615] oom_reaper: reaped process 16007 (syz-executor.4), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 3320.107635] ion_system_heap invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=0, oom_score_adj=0 [ 3320.132795] ion_system_heap cpuset=/ mems_allowed=0-1 [ 3320.138034] CPU: 0 PID: 4245 Comm: ion_system_heap Not tainted 4.14.225-syzkaller #0 [ 3320.146177] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3320.155792] Call Trace: [ 3320.158383] dump_stack+0x1b2/0x281 [ 3320.162035] dump_header+0x178/0x82f [ 3320.165827] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 3320.170924] ? ___ratelimit+0x2cd/0x530 [ 3320.174891] oom_kill_process.cold+0x10/0xb18 [ 3320.178510] syz-executor.4: page allocation failure: order:0 [ 3320.179394] ? lock_downgrade+0x740/0x740 [ 3320.179405] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 3320.185191] out_of_memory+0x2dc/0x1190 [ 3320.194409] (null) [ 3320.196411] ? oom_killer_disable+0x1c0/0x1c0 [ 3320.200412] syz-executor.4 cpuset= [ 3320.202585] ? mutex_trylock+0x152/0x1a0 [ 3320.207049] / [ 3320.210593] __alloc_pages_nodemask+0x23e1/0x2720 [ 3320.219706] mems_allowed=0-1 [ 3320.221214] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3320.229130] ? ion_heap_sglist_zero+0x165/0x220 [ 3320.233790] ? cache_grow_begin+0x41/0x630 [ 3320.238269] cache_grow_begin+0x91/0x630 [ 3320.242315] ? cache_grow_begin+0x91/0x630 [ 3320.246649] fallback_alloc+0x207/0x2c0 [ 3320.250621] kmem_cache_alloc_node_trace+0xed/0x400 [ 3320.255633] __get_vm_area_node+0xed/0x340 [ 3320.259857] vmap+0xd5/0x290 [ 3320.262869] ? ion_heap_clear_pages+0x23/0x70 [ 3320.267369] ? vunmap+0x50/0x50 [ 3320.270643] ? __vunmap+0x21c/0x300 [ 3320.274346] ion_heap_clear_pages+0x23/0x70 [ 3320.278676] ion_heap_sglist_zero+0x165/0x220 [ 3320.283163] ? ion_heap_clear_pages+0x70/0x70 [ 3320.287640] ? debug_check_no_obj_freed+0x2c0/0x680 [ 3320.292652] ? pagerange_is_ram_callback+0x100/0x100 [ 3320.297737] ? ion_heap_deferred_free+0x222/0x470 [ 3320.302586] ion_system_heap_free+0x1d0/0x240 [ 3320.307125] ion_buffer_destroy+0x132/0x190 [ 3320.311445] ion_heap_deferred_free+0x22a/0x470 [ 3320.316104] ? __schedule+0x857/0x1de0 [ 3320.319982] ? ion_heap_shrink_scan+0x1a0/0x1a0 [ 3320.324640] ? wait_woken+0x230/0x230 [ 3320.328428] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 3320.333519] ? ion_heap_shrink_scan+0x1a0/0x1a0 [ 3320.339310] kthread+0x30d/0x420 [ 3320.342666] ? kthread_create_on_node+0xd0/0xd0 [ 3320.347428] ret_from_fork+0x24/0x30 [ 3320.351624] CPU: 1 PID: 16007 Comm: syz-executor.4 Not tainted 4.14.225-syzkaller #0 [ 3320.359520] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3320.362402] Mem-Info: [ 3320.369216] Call Trace: [ 3320.369238] dump_stack+0x1b2/0x281 [ 3320.369252] warn_alloc.cold+0x96/0x1cc [ 3320.371677] active_anon:16437 inactive_anon:90038 isolated_anon:0 [ 3320.371677] active_file:3 inactive_file:2 isolated_file:0 [ 3320.371677] unevictable:0 dirty:0 writeback:0 unstable:0 [ 3320.371677] slab_reclaimable:11977 slab_unreclaimable:112357 [ 3320.371677] mapped:35262 shmem:90891 pagetables:680 bounce:0 [ 3320.371677] free:13966 free_pcp:85 free_cma:0 [ 3320.374240] ? zone_watermark_ok_safe+0x220/0x220 [ 3320.377890] Node 0 active_anon:63848kB inactive_anon:305504kB active_file:0kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:141048kB dirty:0kB writeback:0kB shmem:308536kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3320.381881] ? usleep_range+0x130/0x130 [ 3320.381889] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 3320.381900] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 3320.381920] ? run_timer_softirq+0x5a0/0x5a0 [ 3320.415555] Node 1 active_anon:1900kB inactive_anon:54648kB active_file:28kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:55028kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3320.420357] __alloc_pages_nodemask+0x2127/0x2720 [ 3320.420376] ? lock_acquire+0x170/0x3f0 [ 3320.448046] Node 0 [ 3320.451992] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3320.452003] ? ion_page_pool_alloc+0x9e/0x1b0 [ 3320.452019] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 3320.457149] DMA free:10964kB min:204kB low:252kB high:300kB active_anon:100kB inactive_anon:980kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:4kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3320.462143] ? check_preemption_disabled+0x35/0x240 [ 3320.462165] alloc_pages_current+0x155/0x260 [ 3320.466562] lowmem_reserve[]: 0 [ 3320.494425] ion_page_pool_alloc+0x118/0x1b0 [ 3320.494436] ion_system_heap_allocate+0x133/0x8c0 [ 3320.494446] ? ion_alloc+0x187/0x810 [ 3320.494455] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 3320.494467] ? ion_system_contig_heap_create+0x130/0x130 [ 3320.499327] 2717 [ 3320.503272] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 3320.505593] 2718 2718 [ 3320.510430] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 3320.510442] ion_alloc+0x204/0x810 [ 3320.510456] ? ion_dma_buf_release+0x40/0x40 [ 3320.514939] 2718 [ 3320.520387] ? __might_fault+0x177/0x1b0 [ 3320.520400] ion_ioctl+0xea/0x1f0 [ 3320.520411] ? ion_query_heaps+0x360/0x360 [ 3320.551402] ? __fget+0x1fe/0x360 [ 3320.551416] ? ion_query_heaps+0x360/0x360 [ 3320.551426] do_vfs_ioctl+0x75a/0xff0 [ 3320.551438] ? ioctl_preallocate+0x1a0/0x1a0 [ 3320.556101] Node 0 [ 3320.559539] ? lock_downgrade+0x740/0x740 [ 3320.559551] ? __fget+0x225/0x360 [ 3320.559560] ? do_vfs_ioctl+0xff0/0xff0 [ 3320.559570] ? security_file_ioctl+0x83/0xb0 [ 3320.564226] DMA32 free:18080kB min:36200kB low:45248kB high:54296kB active_anon:63748kB inactive_anon:304524kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7168kB pagetables:2352kB bounce:0kB free_pcp:144kB local_pcp:24kB free_cma:0kB [ 3320.569087] SyS_ioctl+0x7f/0xb0 [ 3320.569096] ? do_vfs_ioctl+0xff0/0xff0 [ 3320.569106] do_syscall_64+0x1d5/0x640 [ 3320.569123] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3320.572804] lowmem_reserve[]: [ 3320.578240] RIP: 0033:0x465f69 [ 3320.583681] 0 [ 3320.585706] RSP: 002b:00007fbb52cf0188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3320.590754] 0 [ 3320.593222] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 3320.598056] 0 [ 3320.601736] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 3320.601740] RBP: 00000000004bfa8f R08: 0000000000000000 R09: 0000000000000000 [ 3320.601745] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 3320.601749] R13: 00007ffc0aef8def R14: 00007fbb52cf0300 R15: 0000000000022000 [ 3320.607989] warn_alloc_show_mem: 1 callbacks suppressed [ 3320.607993] Mem-Info: [ 3320.622866] 0 [ 3320.628968] active_anon:16437 inactive_anon:90038 isolated_anon:0 [ 3320.628968] active_file:3 inactive_file:2 isolated_file:0 [ 3320.628968] unevictable:0 dirty:0 writeback:0 unstable:0 [ 3320.628968] slab_reclaimable:11977 slab_unreclaimable:112357 [ 3320.628968] mapped:35262 shmem:90891 pagetables:680 bounce:0 [ 3320.628968] free:13966 free_pcp:87 free_cma:0 [ 3320.639417] 0 [ 3320.646633] Node 0 active_anon:63848kB inactive_anon:305504kB active_file:0kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:141048kB dirty:0kB writeback:0kB shmem:308536kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3320.685831] Node 1 active_anon:1900kB inactive_anon:54648kB active_file:28kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:55028kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3320.703021] Node 0 [ 3320.705886] Node 0 [ 3320.707407] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3320.709235] DMA free:10964kB min:204kB low:252kB high:300kB active_anon:100kB inactive_anon:980kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:4kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3320.709238] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 3320.709259] Node 0 DMA32 free:18160kB min:36200kB low:45248kB high:54296kB active_anon:63728kB inactive_anon:304524kB active_file:8kB inactive_file:8kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7168kB pagetables:2352kB bounce:0kB free_pcp:160kB local_pcp:132kB free_cma:0kB [ 3320.709278] lowmem_reserve[]: 0 0 0 0 0 [ 3320.709296] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3320.709313] lowmem_reserve[]: 0 0 0 0 0 [ 3320.709333] Node 1 Normal free:26820kB min:53696kB low:67120kB high:80544kB active_anon:1824kB inactive_anon:54648kB active_file:36kB inactive_file:40kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:288kB pagetables:364kB bounce:0kB free_pcp:196kB local_pcp:120kB free_cma:0kB [ 3320.709354] lowmem_reserve[]: [ 3320.728077] lowmem_reserve[]: [ 3320.736948] 0 [ 3320.756399] 0 [ 3320.757735] 0 [ 3320.770889] 0 [ 3320.802553] 0 [ 3320.844128] 0 [ 3320.858842] 0 [ 3320.877411] 0 [ 3320.888372] 0 [ 3320.926628] 0 [ 3320.978049] Node 0 [ 3320.994229] Node 1 [ 3321.013135] DMA: [ 3321.029284] Normal free:26820kB min:53696kB low:67120kB high:80544kB active_anon:1824kB inactive_anon:54648kB active_file:36kB inactive_file:40kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:288kB pagetables:364kB bounce:0kB free_pcp:196kB local_pcp:76kB free_cma:0kB [ 3321.029288] lowmem_reserve[]: 0 0 0 0 0 [ 3321.029305] Node 0 DMA: 17*4kB (UME) 30*8kB (UME) 24*16kB (UME) 23*32kB (UME) 1*64kB (U) 10*128kB (UME) 6*256kB (UME) 1*512kB (E) 4*1024kB (UME) [ 3321.032865] 17*4kB [ 3321.032937] 1*2048kB [ 3321.034745] (UME) [ 3321.036547] (M) [ 3321.038833] 30*8kB (UME) 24*16kB (UME) 23*32kB (UME) 1*64kB (U) 10*128kB (UME) 6*256kB (UME) 1*512kB (E) 4*1024kB (UME) 1*2048kB (M) 0*4096kB = 10964kB [ 3321.038896] Node 0 DMA32: 892*4kB (UME) 797*8kB (UME) 140*16kB (UME) 18*32kB (ME) 71*64kB (U) 7*128kB (U) 0*256kB [ 3321.055538] 0*4096kB [ 3321.073580] 0*512kB [ 3321.089934] = 10964kB [ 3321.093509] 0*1024kB [ 3321.094169] Node 0 [ 3321.096303] 0*2048kB 0*4096kB [ 3321.111332] DMA32: [ 3321.114362] = 18200kB [ 3321.137206] 892*4kB [ 3321.140181] Node 0 [ 3321.144268] (UME) [ 3321.145637] Normal: [ 3321.147873] 797*8kB [ 3321.150081] 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 3321.150123] Node 1 Normal: 111*4kB (M) 47*8kB (UM) 37*16kB (UM) 18*32kB (UM) [ 3321.162954] (UME) [ 3321.165974] 14*64kB (M) 29*128kB (M) 13*256kB (M) 33*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 26820kB [ 3321.185137] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3321.186237] 140*16kB [ 3321.194028] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3321.194036] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3321.194047] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3321.194052] 90914 total pagecache pages [ 3321.194064] 0 pages in swap cache [ 3321.206322] (UME) [ 3321.215626] Swap cache stats: add 0, delete 0, find 0/0 [ 3321.236262] 18*32kB (ME) 71*64kB (U) 7*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18200kB [ 3321.237798] Free swap = 0kB [ 3321.252319] Total swap = 0kB [ 3321.254787] Node 0 Normal: [ 3321.255339] 2097051 pages RAM [ 3321.255344] 0 pages HighMem/MovableOnly [ 3321.265401] 363840 pages reserved [ 3321.266460] 0*4kB [ 3321.270858] 0 pages cma reserved [ 3321.274610] 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 3321.340952] Node 1 Normal: 1*4kB (M) 2*8kB (UM) 1*16kB (U) 1*32kB (U) 0*64kB 20*128kB (M) 13*256kB (M) 33*512kB (UM) 169*1024kB (U) 4*2048kB (U) 0*4096kB = 204100kB [ 3321.895624] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3321.927158] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3321.939085] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3321.949493] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3321.959044] 91278 total pagecache pages [ 3321.963035] 0 pages in swap cache [ 3321.966467] Swap cache stats: add 0, delete 0, find 0/0 [ 3321.971852] Free swap = 0kB [ 3321.974867] Total swap = 0kB [ 3321.977876] 2097051 pages RAM [ 3321.980985] 0 pages HighMem/MovableOnly [ 3321.984950] 363840 pages reserved [ 3321.988448] 0 pages cma reserved [ 3321.992987] Out of memory: Kill process 16004 (syz-executor.5) score 1004 or sacrifice child [ 3322.001614] Killed process 16008 (syz-executor.5) total-vm:93384kB, anon-rss:152kB, file-rss:34816kB, shmem-rss:0kB [ 3322.077718] oom_reaper: reaped process 16008 (syz-executor.5), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 3322.078380] syz-executor.4: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 3322.101489] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 3322.106616] CPU: 1 PID: 16007 Comm: syz-executor.4 Not tainted 4.14.225-syzkaller #0 [ 3322.115045] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3322.125192] Call Trace: [ 3322.127806] dump_stack+0x1b2/0x281 [ 3322.131445] warn_alloc.cold+0x96/0x1cc [ 3322.135430] ? zone_watermark_ok_safe+0x220/0x220 [ 3322.140295] __alloc_pages_nodemask+0x2127/0x2720 [ 3322.145145] ? io_schedule_timeout+0x140/0x140 [ 3322.149762] ? lock_acquire+0x170/0x3f0 [ 3322.153756] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3322.158609] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 3322.164152] ? __mutex_unlock_slowpath+0x75/0x770 [ 3322.168979] ? policy_node+0x8/0x110 [ 3322.172764] alloc_pages_current+0x155/0x260 [ 3322.177156] ion_page_pool_alloc+0x118/0x1b0 [ 3322.181568] ion_system_heap_allocate+0x133/0x8c0 [ 3322.186430] ? _raw_spin_unlock+0x29/0x40 [ 3322.190598] ? _ion_heap_freelist_drain+0x6e/0x410 [ 3322.195551] ? ion_system_contig_heap_create+0x130/0x130 [ 3322.201120] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 3322.206119] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 3322.211131] ion_alloc+0x27a/0x810 [ 3322.214657] ? ion_dma_buf_release+0x40/0x40 [ 3322.219067] ? __might_fault+0x177/0x1b0 [ 3322.223114] ion_ioctl+0xea/0x1f0 [ 3322.226636] ? ion_query_heaps+0x360/0x360 [ 3322.231025] ? __fget+0x1fe/0x360 [ 3322.234465] ? ion_query_heaps+0x360/0x360 [ 3322.238682] do_vfs_ioctl+0x75a/0xff0 [ 3322.242526] ? ioctl_preallocate+0x1a0/0x1a0 [ 3322.246935] ? lock_downgrade+0x740/0x740 [ 3322.251082] ? __fget+0x225/0x360 [ 3322.254519] ? do_vfs_ioctl+0xff0/0xff0 [ 3322.258480] ? security_file_ioctl+0x83/0xb0 [ 3322.262875] SyS_ioctl+0x7f/0xb0 [ 3322.266265] ? do_vfs_ioctl+0xff0/0xff0 [ 3322.270230] do_syscall_64+0x1d5/0x640 [ 3322.274106] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3322.279312] RIP: 0033:0x465f69 [ 3322.282486] RSP: 002b:00007fbb52cf0188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3322.290179] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 3322.297433] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 3322.304773] RBP: 00000000004bfa8f R08: 0000000000000000 R09: 0000000000000000 [ 3322.312023] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 3322.319292] R13: 00007ffc0aef8def R14: 00007fbb52cf0300 R15: 0000000000022000 [ 3322.331221] Mem-Info: [ 3322.333667] active_anon:16534 inactive_anon:90038 isolated_anon:0 [ 3322.333667] active_file:23 inactive_file:26 isolated_file:7 [ 3322.333667] unevictable:0 dirty:6 writeback:0 unstable:0 [ 3322.333667] slab_reclaimable:11980 slab_unreclaimable:114764 [ 3322.333667] mapped:52753 shmem:90891 pagetables:770 bounce:0 [ 3322.333667] free:13869 free_pcp:108 free_cma:0 [ 3322.368141] Node 0 active_anon:64240kB inactive_anon:305504kB active_file:36kB inactive_file:20kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:210940kB dirty:0kB writeback:0kB shmem:308536kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3322.396529] Node 1 active_anon:1796kB inactive_anon:54648kB active_file:20kB inactive_file:36kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:55028kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3322.423485] Node 0 DMA free:10952kB min:204kB low:252kB high:300kB active_anon:112kB inactive_anon:980kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:4kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3322.454877] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 3322.460038] Node 0 DMA32 free:18044kB min:36200kB low:45248kB high:54296kB active_anon:64128kB inactive_anon:304524kB active_file:172kB inactive_file:108kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7296kB pagetables:2712kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3322.461047] systemd-rfkill invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask= [ 3322.489071] lowmem_reserve[]: 0 0 0 0 0 [ 3322.503205] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3322.531710] lowmem_reserve[]: 0 0 0 0 0 [ 3322.535731] Node 1 Normal free:26604kB min:53696kB low:67120kB high:80544kB active_anon:1796kB inactive_anon:54648kB active_file:20kB inactive_file:36kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:288kB pagetables:364kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3322.567768] (null), order=0, oom_score_adj=0 [ 3322.568915] lowmem_reserve[]: 0 0 0 0 0 [ 3322.572330] systemd-rfkill cpuset= [ 3322.576275] Node 0 [ 3322.576278] / mems_allowed=0-1 [ 3322.583352] DMA: 12*4kB (ME) 14*8kB (UME) 12*16kB (ME) 6*32kB (ME) 3*64kB (UM) 6*128kB (ME) 5*256kB (UME) 2*512kB (ME) 3*1024kB (UME) 2*2048kB (UM) 0*4096kB = 10976kB [ 3322.605047] CPU: 0 PID: 15990 Comm: systemd-rfkill Not tainted 4.14.225-syzkaller #0 [ 3322.605764] Node 0 [ 3322.613212] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3322.613216] Call Trace: [ 3322.613236] dump_stack+0x1b2/0x281 [ 3322.613248] dump_header+0x178/0x82f [ 3322.613260] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 3322.615483] DMA32: [ 3322.624907] ? ___ratelimit+0x2cd/0x530 [ 3322.624917] oom_kill_process.cold+0x10/0xb18 [ 3322.624935] out_of_memory+0xe3e/0x1190 [ 3322.627538] 873*4kB [ 3322.631152] ? oom_killer_disable+0x1c0/0x1c0 [ 3322.631160] ? mutex_trylock+0x152/0x1a0 [ 3322.631171] __alloc_pages_nodemask+0x23e1/0x2720 [ 3322.634858] (UME) [ 3322.639967] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3322.639991] alloc_pages_current+0x155/0x260 [ 3322.642194] 787*8kB [ 3322.646151] filemap_fault+0xea3/0x1980 [ 3322.651157] (UME) [ 3322.655974] ext4_filemap_fault+0x84/0xb0 [ 3322.658280] 142*16kB [ 3322.662744] __do_fault+0xfa/0x380 [ 3322.666793] (UME) [ 3322.671617] __handle_mm_fault+0x2497/0x4620 [ 3322.671628] ? vm_insert_page+0x7c0/0x7c0 [ 3322.671638] ? compat_poll_select_copy_remaining+0x2c0/0x2c0 [ 3322.673777] 23*32kB [ 3322.678618] ? ktime_get_ts64+0x261/0x3a0 [ 3322.678636] handle_mm_fault+0x391/0x860 [ 3322.683018] (UME) [ 3322.685329] __do_page_fault+0x549/0xad0 [ 3322.689292] 3*64kB [ 3322.691586] ? spurious_fault+0x640/0x640 [ 3322.695704] (U) [ 3322.698126] ? do_page_fault+0x60/0x500 [ 3322.698135] ? page_fault+0x2f/0x50 [ 3322.698145] page_fault+0x45/0x50 [ 3322.701681] 47*128kB [ 3322.704009] RIP: bdd62c20: (null) [ 3322.708871] (U) [ 3322.712975] RSP: 0000:00007fb8bdd5d8e0 EFLAGS: 7fb8bdd5d8e0 [ 3322.717703] syz-executor.5: [ 3322.722685] 0*256kB [ 3322.725786] page allocation failure: order:0 [ 3322.729521] 0*512kB [ 3322.733774] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 3322.735620] 0*1024kB [ 3322.737915] (null) [ 3322.737921] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 3322.745620] 0*2048kB [ 3322.750610] CPU: 0 PID: 16008 Comm: syz-executor.5 Not tainted 4.14.225-syzkaller #0 [ 3322.751895] 0*4096kB [ 3322.755327] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3322.755332] Call Trace: [ 3322.757722] = 19004kB [ 3322.761947] dump_stack+0x1b2/0x281 [ 3322.761960] warn_alloc.cold+0x96/0x1cc [ 3322.761972] ? zone_watermark_ok_safe+0x220/0x220 [ 3322.763938] Node 0 [ 3322.769630] ? usleep_range+0x130/0x130 [ 3322.769639] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 3322.769654] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 3322.772648] Normal: [ 3322.774974] ? run_timer_softirq+0x5a0/0x5a0 [ 3322.779379] 0*4kB [ 3322.781673] __alloc_pages_nodemask+0x2127/0x2720 [ 3322.788758] 0*8kB [ 3322.791404] ? lock_acquire+0x170/0x3f0 [ 3322.793544] 0*16kB [ 3322.798643] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3322.798653] ? ion_page_pool_alloc+0x9e/0x1b0 [ 3322.798668] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 3322.801411] 0*32kB [ 3322.809020] alloc_pages_current+0x155/0x260 [ 3322.809037] ion_page_pool_alloc+0x118/0x1b0 [ 3322.811438] 0*64kB [ 3322.820790] ion_system_heap_allocate+0x133/0x8c0 [ 3322.820801] ? ion_alloc+0x187/0x810 [ 3322.820811] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 3322.823372] 0*128kB [ 3322.825769] ? ion_system_contig_heap_create+0x130/0x130 [ 3322.829381] 0*256kB [ 3322.833326] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 3322.838196] 0*512kB [ 3322.840404] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 3322.844348] 0*1024kB [ 3322.849436] ion_alloc+0x204/0x810 [ 3322.849450] ? ion_dma_buf_release+0x40/0x40 [ 3322.849462] ? __might_fault+0x177/0x1b0 [ 3322.854454] 0*2048kB [ 3322.856786] ion_ioctl+0xea/0x1f0 [ 3322.861193] 0*4096kB [ 3322.863309] ? ion_query_heaps+0x360/0x360 [ 3322.868234] = 0kB [ 3322.870355] ? __fget+0x1fe/0x360 [ 3322.874301] Node 1 [ 3322.876537] ? ion_query_heaps+0x360/0x360 [ 3322.881369] Normal: [ 3322.885832] do_vfs_ioctl+0x75a/0xff0 [ 3322.891360] 90*4kB [ 3322.893570] ? ioctl_preallocate+0x1a0/0x1a0 [ 3322.897963] (M) [ 3322.902341] ? lock_downgrade+0x740/0x740 [ 3322.902354] ? __fget+0x225/0x360 [ 3322.904566] 40*8kB [ 3322.909405] ? do_vfs_ioctl+0xff0/0xff0 [ 3322.909416] ? security_file_ioctl+0x83/0xb0 [ 3322.909427] SyS_ioctl+0x7f/0xb0 [ 3322.913133] (M) [ 3322.918579] ? do_vfs_ioctl+0xff0/0xff0 [ 3322.918591] do_syscall_64+0x1d5/0x640 [ 3322.918608] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3322.920900] 28*16kB [ 3322.926417] RIP: 0033:0x465f69 [ 3322.928732] (UM) [ 3322.933718] RSP: 002b:00007f08137cb188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3322.936026] 17*32kB [ 3322.940857] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 3322.940863] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 3322.940868] RBP: 00000000004bfa8f R08: 0000000000000000 R09: 0000000000000000 [ 3322.940872] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 3322.940877] R13: 00007ffeb8b6e44f R14: 00007f08137cb300 R15: 0000000000022000 [ 3323.094871] (M) 36*64kB (UM) 27*128kB (UM) 16*256kB (UM) 30*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 26888kB [ 3323.105777] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3323.115599] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3323.125414] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3323.130037] Mem-Info: [ 3323.135687] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3323.146141] active_anon:16509 inactive_anon:90038 isolated_anon:0 [ 3323.146141] active_file:11 inactive_file:962 isolated_file:0 [ 3323.146141] unevictable:0 dirty:0 writeback:0 unstable:0 [ 3323.146141] slab_reclaimable:11980 slab_unreclaimable:114621 [ 3323.146141] mapped:53312 shmem:90891 pagetables:770 bounce:0 [ 3323.146141] free:62400 free_pcp:236 free_cma:0 [ 3323.146513] 91913 total pagecache pages [ 3323.185072] 0 pages in swap cache [ 3323.189586] Swap cache stats: add 0, delete 0, find 0/0 [ 3323.196428] Free swap = 0kB [ 3323.228444] Total swap = 0kB [ 3323.231584] 2097051 pages RAM [ 3323.234690] 0 pages HighMem/MovableOnly [ 3323.248023] 363840 pages reserved [ 3323.251505] 0 pages cma reserved [ 3323.277763] Node 0 active_anon:64240kB inactive_anon:305504kB active_file:16kB inactive_file:20kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:210948kB dirty:0kB writeback:0kB shmem:308536kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3323.370435] Node 1 active_anon:2096kB inactive_anon:54648kB active_file:1068kB inactive_file:1044kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:2100kB dirty:0kB writeback:0kB shmem:55028kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 3323.403703] Node 0 DMA free:10976kB min:204kB low:252kB high:300kB active_anon:112kB inactive_anon:980kB active_file:24kB inactive_file:8kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:4kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3323.434897] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 3323.442612] Node 0 DMA32 free:18084kB min:36200kB low:45248kB high:54296kB active_anon:64128kB inactive_anon:304524kB active_file:16kB inactive_file:20kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7296kB pagetables:2712kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3323.477935] syz-executor.5: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 3323.481412] syz-executor.4: [ 3323.496493] lowmem_reserve[]: [ 3323.497682] page allocation failure: order:0 [ 3323.499640] 0 [ 3323.502648] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 3323.507031] 0 [ 3323.521752] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 3323.527671] (null) [ 3323.530828] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 3323.530907] 0 0 [ 3323.536024] CPU: 1 PID: 16007 Comm: syz-executor.4 Not tainted 4.14.225-syzkaller #0 [ 3323.536031] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3323.555288] Call Trace: [ 3323.557873] dump_stack+0x1b2/0x281 [ 3323.561514] warn_alloc.cold+0x96/0x1cc [ 3323.563663] 0 [ 3323.565499] ? zone_watermark_ok_safe+0x220/0x220 [ 3323.565512] ? usleep_range+0x130/0x130 [ 3323.567329] Node 0 [ 3323.572328] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 3323.572340] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 3323.572349] ? run_timer_softirq+0x5a0/0x5a0 [ 3323.572363] __alloc_pages_nodemask+0x2127/0x2720 [ 3323.572377] ? lock_acquire+0x170/0x3f0 [ 3323.572390] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3323.572401] ? ion_page_pool_alloc+0x9e/0x1b0 [ 3323.572417] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 3323.572435] alloc_pages_current+0x155/0x260 [ 3323.572446] ion_page_pool_alloc+0x118/0x1b0 [ 3323.572456] ion_system_heap_allocate+0x133/0x8c0 [ 3323.572466] ? _raw_spin_unlock+0x29/0x40 [ 3323.572476] ? _ion_heap_freelist_drain+0x6e/0x410 [ 3323.588792] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3323.593142] ? ion_system_contig_heap_create+0x130/0x130 [ 3323.608854] lowmem_reserve[]: [ 3323.611861] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 3323.617285] 0 [ 3323.621696] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 3323.621709] ion_alloc+0x27a/0x810 [ 3323.621723] ? ion_dma_buf_release+0x40/0x40 [ 3323.621734] ? __might_fault+0x177/0x1b0 [ 3323.621746] ion_ioctl+0xea/0x1f0 [ 3323.621756] ? ion_query_heaps+0x360/0x360 [ 3323.621765] ? __fget+0x1fe/0x360 [ 3323.621775] ? ion_query_heaps+0x360/0x360 [ 3323.621783] do_vfs_ioctl+0x75a/0xff0 [ 3323.621794] ? ioctl_preallocate+0x1a0/0x1a0 [ 3323.651596] 0 [ 3323.666450] ? lock_downgrade+0x740/0x740 [ 3323.666465] ? __fget+0x225/0x360 [ 3323.666474] ? do_vfs_ioctl+0xff0/0xff0 [ 3323.666494] ? security_file_ioctl+0x83/0xb0 [ 3323.666504] SyS_ioctl+0x7f/0xb0 [ 3323.666513] ? do_vfs_ioctl+0xff0/0xff0 [ 3323.712757] 0 [ 3323.714523] do_syscall_64+0x1d5/0x640 [ 3323.720655] 0 [ 3323.722709] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3323.724483] 0 [ 3323.732701] RIP: 0033:0x465f69 [ 3323.732705] RSP: 002b:00007fbb52cf0188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3323.732714] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 3323.732718] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 3323.732723] RBP: 00000000004bfa8f R08: 0000000000000000 R09: 0000000000000000 [ 3323.732727] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 3323.732732] R13: 00007ffc0aef8def R14: 00007fbb52cf0300 R15: 0000000000022000 [ 3323.746950] warn_alloc_show_mem: 1 callbacks suppressed [ 3323.746954] Mem-Info: [ 3323.754780] CPU: 0 PID: 16008 Comm: syz-executor.5 Not tainted 4.14.225-syzkaller #0 [ 3323.763765] active_anon:16592 inactive_anon:90038 isolated_anon:0 [ 3323.763765] active_file:17 inactive_file:17 isolated_file:0 [ 3323.763765] unevictable:0 dirty:0 writeback:0 unstable:0 [ 3323.763765] slab_reclaimable:11978 slab_unreclaimable:115323 [ 3323.763765] mapped:52728 shmem:90891 pagetables:811 bounce:0 [ 3323.763765] free:13943 free_pcp:0 free_cma:0 [ 3323.765978] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3323.768028] Node 0 active_anon:64248kB inactive_anon:305504kB active_file:8kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:210912kB dirty:0kB writeback:0kB shmem:308536kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3323.770951] Call Trace: [ 3323.778670] Node 1 active_anon:2120kB inactive_anon:54648kB active_file:60kB inactive_file:60kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:55028kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3323.785900] dump_stack+0x1b2/0x281 [ 3323.793268] Node 0 [ 3323.800509] warn_alloc.cold+0x96/0x1cc [ 3323.800522] ? zone_watermark_ok_safe+0x220/0x220 [ 3323.807795] DMA free:10976kB min:204kB low:252kB high:300kB active_anon:120kB inactive_anon:980kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:4kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3323.815220] __alloc_pages_nodemask+0x2127/0x2720 [ 3323.820567] lowmem_reserve[]: [ 3323.822947] ? _raw_spin_unlock_irq+0x5a/0x80 [ 3323.830830] 0 [ 3323.864819] ? finish_task_switch+0x178/0x610 [ 3323.864827] ? finish_task_switch+0x14d/0x610 [ 3323.864842] ? lock_acquire+0x170/0x3f0 [ 3323.874191] 2717 [ 3323.901853] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3323.901872] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 3323.904431] 2718 [ 3323.931391] ? __mutex_unlock_slowpath+0x75/0x770 [ 3323.931402] ? alloc_pages_current+0x84/0x260 [ 3323.931412] alloc_pages_current+0x155/0x260 [ 3323.935190] 2718 [ 3323.937514] ion_page_pool_alloc+0x118/0x1b0 [ 3323.941514] 2718 [ 3323.946433] ion_system_heap_allocate+0x133/0x8c0 [ 3323.977293] ? _raw_spin_unlock+0x29/0x40 [ 3323.980560] Node 0 [ 3323.985024] ? _ion_heap_freelist_drain+0x6e/0x410 [ 3323.986910] DMA32 free:18172kB min:36200kB low:45248kB high:54296kB active_anon:64128kB inactive_anon:304524kB active_file:8kB inactive_file:8kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7296kB pagetables:2712kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3323.991462] ? ion_system_contig_heap_create+0x130/0x130 [ 3323.991472] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 3323.991486] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 3323.995972] lowmem_reserve[]: [ 3323.999935] ion_alloc+0x27a/0x810 [ 3323.999950] ? ion_dma_buf_release+0x40/0x40 [ 3323.999962] ? __might_fault+0x177/0x1b0 [ 3324.002023] 0 [ 3324.006942] ion_ioctl+0xea/0x1f0 [ 3324.012433] 0 [ 3324.014450] ? ion_query_heaps+0x360/0x360 [ 3324.019286] 0 [ 3324.023752] ? __fget+0x1fe/0x360 [ 3324.028153] 0 [ 3324.030187] ? ion_query_heaps+0x360/0x360 [ 3324.034580] 0 [ 3324.036652] do_vfs_ioctl+0x75a/0xff0 [ 3324.045636] ? ioctl_preallocate+0x1a0/0x1a0 [ 3324.047874] Node 0 [ 3324.052776] ? lock_downgrade+0x740/0x740 [ 3324.080625] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3324.086093] ? __fget+0x225/0x360 [ 3324.091113] lowmem_reserve[]: [ 3324.095948] ? do_vfs_ioctl+0xff0/0xff0 [ 3324.099097] 0 [ 3324.102615] ? security_file_ioctl+0x83/0xb0 [ 3324.107259] 0 [ 3324.111399] SyS_ioctl+0x7f/0xb0 [ 3324.111408] ? do_vfs_ioctl+0xff0/0xff0 [ 3324.111421] do_syscall_64+0x1d5/0x640 [ 3324.113196] 0 [ 3324.116657] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3324.118444] 0 [ 3324.122647] RIP: 0033:0x465f69 [ 3324.124424] 0 [ 3324.127860] RSP: 002b:00007f08137cb188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3324.127869] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 3324.127875] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 3324.127879] RBP: 00000000004bfa8f R08: 0000000000000000 R09: 0000000000000000 [ 3324.127887] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 3324.133894] R13: 00007ffeb8b6e44f R14: 00007f08137cb300 R15: 0000000000022000 [ 3324.163305] Node 1 [ 3324.178297] Node 1 [ 3324.197559] Normal free:26624kB min:53696kB low:67120kB high:80544kB active_anon:2120kB inactive_anon:54648kB active_file:60kB inactive_file:60kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:352kB pagetables:528kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3324.204256] Normal free:26624kB min:53696kB low:67120kB high:80544kB active_anon:2120kB inactive_anon:54648kB active_file:60kB inactive_file:60kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:352kB pagetables:528kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3324.206058] lowmem_reserve[]: [ 3324.207914] lowmem_reserve[]: 0 0 0 0 0 [ 3324.207934] Node 0 DMA: 20*4kB (UME) 22*8kB (UME) 12*16kB (ME) 7*32kB (UME) 3*64kB (UM) 7*128kB (UME) 4*256kB (UME) 2*512kB (ME) 3*1024kB (UME) 2*2048kB (UM) 0*4096kB = 10976kB [ 3324.208006] Node 0 DMA32: 973*4kB (UME) 1265*8kB (UME) 158*16kB (UME) 27*32kB (UME) 0*64kB 6*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18172kB [ 3324.208056] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 3324.208118] Node 1 Normal: 100*4kB (M) 48*8kB (M) 35*16kB (UM) 24*32kB (M) 39*64kB (UM) 20*128kB (UM) 14*256kB (M) 31*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 26624kB [ 3324.208187] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3324.208192] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3324.208198] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3324.208203] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3324.208207] 90925 total pagecache pages [ 3324.208217] 0 pages in swap cache [ 3324.208221] Swap cache stats: add 0, delete 0, find 0/0 [ 3324.208223] Free swap = 0kB [ 3324.208226] Total swap = 0kB [ 3324.208230] 2097051 pages RAM [ 3324.208234] 0 pages HighMem/MovableOnly [ 3324.208237] 363840 pages reserved [ 3324.208240] 0 pages cma reserved [ 3324.208246] Out of memory (oom_kill_allocating_task): Kill process 15990 (systemd-rfkill) score 0 or sacrifice child [ 3324.208269] Killed process 15990 (systemd-rfkill) total-vm:37800kB, anon-rss:408kB, file-rss:0kB, shmem-rss:0kB [ 3324.209080] oom_reaper: reaped process 15990 (systemd-rfkill), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 3324.262850] syz-executor.1 invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask= [ 3324.283307] 0 [ 3324.314944] (null) [ 3324.334485] 0 [ 3324.345212] , order=0, oom_score_adj=0 [ 3324.359246] 0 [ 3324.376229] syz-executor.1 cpuset=/ [ 3324.398604] 0 [ 3324.410454] mems_allowed=0-1 [ 3324.425086] 0 [ 3324.436532] CPU: 0 PID: 16050 Comm: syz-executor.1 Not tainted 4.14.225-syzkaller #0 [ 3324.442268] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3324.445265] Node 0 [ 3324.448350] Call Trace: [ 3324.448370] dump_stack+0x1b2/0x281 [ 3324.448383] dump_header+0x178/0x82f [ 3324.452327] DMA: [ 3324.455764] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 3324.459129] 20*4kB [ 3324.469944] ? ___ratelimit+0x2cd/0x530 [ 3324.469954] oom_kill_process.cold+0x10/0xb18 [ 3324.469971] out_of_memory+0xe3e/0x1190 [ 3324.480184] (UME) [ 3324.490123] ? oom_killer_disable+0x1c0/0x1c0 [ 3324.490131] ? mutex_trylock+0x152/0x1a0 [ 3324.490142] __alloc_pages_nodemask+0x23e1/0x2720 [ 3324.500184] 22*8kB [ 3324.501971] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3324.504108] (UME) [ 3324.505943] alloc_pages_current+0x155/0x260 [ 3324.509888] 12*16kB [ 3324.511667] filemap_fault+0xea3/0x1980 [ 3324.515282] (ME) [ 3324.517087] ext4_filemap_fault+0x84/0xb0 [ 3324.520176] 7*32kB [ 3324.521953] __do_fault+0xfa/0x380 [ 3324.529996] (UME) [ 3324.539329] __handle_mm_fault+0x2497/0x4620 [ 3324.539339] ? vm_insert_page+0x7c0/0x7c0 [ 3324.539348] ? SyS_unshare+0x4ca/0x7f0 [ 3324.541565] 3*64kB [ 3324.544159] handle_mm_fault+0x391/0x860 [ 3324.547771] (UM) [ 3324.551456] __do_page_fault+0x549/0xad0 [ 3324.553492] 7*128kB [ 3324.558604] ? spurious_fault+0x640/0x640 [ 3324.558612] ? do_page_fault+0x60/0x500 [ 3324.558624] ? page_fault+0x2f/0x50 [ 3324.560834] (UME) [ 3324.564806] page_fault+0x45/0x50 [ 3324.569296] 4*256kB [ 3324.573234] RIP: 56ca68: (null) [ 3324.575361] (UME) [ 3324.579834] RSP: 56ca68:00007fff2c56dae0 EFLAGS: ffffffff [ 3324.657505] syz-executor.5: [ 3324.668048] 2*512kB [ 3324.677324] page allocation failure: order:0 [ 3324.692628] (ME) 3*1024kB (UME) 2*2048kB (UM) 0*4096kB = 10976kB [ 3324.710256] Node 0 DMA32: 911*4kB (UME) 1265*8kB (UME) 158*16kB (UME) 28*32kB (UME) 1*64kB (U) 6*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18020kB [ 3324.721062] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 3324.725197] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 3324.752030] Node 1 Normal: 104*4kB (UM) 48*8kB (UM) 40*16kB (UM) 25*32kB (M) 40*64kB (UM) 20*128kB (UM) 14*256kB (M) 31*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 26816kB [ 3324.754106] syz-executor.5 cpuset= [ 3324.772650] Mem-Info: [ 3324.779529] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3324.785222] / [ 3324.792647] active_anon:16490 inactive_anon:90038 isolated_anon:0 [ 3324.792647] active_file:17 inactive_file:12 isolated_file:0 [ 3324.792647] unevictable:0 dirty:0 writeback:0 unstable:0 [ 3324.792647] slab_reclaimable:11978 slab_unreclaimable:115323 [ 3324.792647] mapped:52728 shmem:90891 pagetables:788 bounce:0 [ 3324.792647] free:13937 free_pcp:68 free_cma:0 [ 3324.794927] mems_allowed=0-1 [ 3324.833451] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3324.844529] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3324.851269] CPU: 0 PID: 16008 Comm: syz-executor.5 Not tainted 4.14.225-syzkaller #0 [ 3324.859081] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3324.862916] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3324.871756] Node 0 active_anon:64248kB inactive_anon:305504kB active_file:8kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:210912kB dirty:0kB writeback:0kB shmem:308536kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3324.881221] Call Trace: [ 3324.881246] dump_stack+0x1b2/0x281 [ 3324.881263] warn_alloc.cold+0x96/0x1cc [ 3324.881275] ? zone_watermark_ok_safe+0x220/0x220 [ 3324.881283] ? usleep_range+0x130/0x130 [ 3324.881296] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 3324.909379] 90925 total pagecache pages [ 3324.911920] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 3324.915531] 0 pages in swap cache [ 3324.919569] ? run_timer_softirq+0x5a0/0x5a0 [ 3324.919585] __alloc_pages_nodemask+0x2127/0x2720 [ 3324.919603] ? lock_acquire+0x170/0x3f0 [ 3324.924439] Swap cache stats: add 0, delete 0, find 0/0 [ 3324.928400] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3324.928412] ? ion_page_pool_alloc+0x9e/0x1b0 [ 3324.928428] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 3324.933523] Free swap = 0kB [ 3324.937496] ? alloc_pages_current+0x84/0x260 [ 3324.937507] alloc_pages_current+0x155/0x260 [ 3324.937520] ion_page_pool_alloc+0x118/0x1b0 [ 3324.942734] Total swap = 0kB [ 3324.946471] ion_system_heap_allocate+0x133/0x8c0 [ 3324.950977] Node 1 active_anon:1712kB inactive_anon:54648kB active_file:60kB inactive_file:40kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:55028kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3324.955997] ? _raw_spin_unlock+0x29/0x40 [ 3324.960005] 2097051 pages RAM [ 3324.965403] ? _ion_heap_freelist_drain+0x6e/0x410 [ 3324.970241] Node 0 [ 3324.974701] ? ion_system_contig_heap_create+0x130/0x130 [ 3324.980158] 0 pages HighMem/MovableOnly [ 3324.983128] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 3324.983144] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 3324.987680] DMA free:10976kB min:204kB low:252kB high:300kB active_anon:120kB inactive_anon:980kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:4kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3324.992057] ion_alloc+0x27a/0x810 [ 3324.996436] lowmem_reserve[]: [ 3324.999445] ? ion_dma_buf_release+0x40/0x40 [ 3324.999457] ? __might_fault+0x177/0x1b0 [ 3324.999469] ion_ioctl+0xea/0x1f0 [ 3325.004427] 363840 pages reserved [ 3325.031920] ? ion_query_heaps+0x360/0x360 [ 3325.031930] ? __fget+0x1fe/0x360 [ 3325.031939] ? ion_query_heaps+0x360/0x360 [ 3325.031948] do_vfs_ioctl+0x75a/0xff0 [ 3325.031962] ? ioctl_preallocate+0x1a0/0x1a0 [ 3325.036102] 0 [ 3325.039181] ? lock_downgrade+0x740/0x740 [ 3325.039194] ? __fget+0x225/0x360 [ 3325.039203] ? do_vfs_ioctl+0xff0/0xff0 [ 3325.039214] ? security_file_ioctl+0x83/0xb0 [ 3325.044114] 2717 [ 3325.046384] SyS_ioctl+0x7f/0xb0 [ 3325.051849] 2718 [ 3325.055866] ? do_vfs_ioctl+0xff0/0xff0 [ 3325.060886] 0 pages cma reserved [ 3325.065832] do_syscall_64+0x1d5/0x640 [ 3325.091955] 2718 [ 3325.095476] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3325.098587] 2718 [ 3325.102954] RIP: 0033:0x465f69 [ 3325.110440] RSP: 002b:00007f08137cb188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3325.110452] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 3325.110456] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 3325.110460] RBP: 00000000004bfa8f R08: 0000000000000000 R09: 0000000000000000 [ 3325.110464] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 3325.110469] R13: 00007ffeb8b6e44f R14: 00007f08137cb300 R15: 0000000000022000 [ 3325.120689] warn_alloc_show_mem: 1 callbacks suppressed [ 3325.120693] Mem-Info: [ 3325.132932] Node 0 [ 3325.142779] active_anon:16490 inactive_anon:90038 isolated_anon:0 [ 3325.142779] active_file:17 inactive_file:12 isolated_file:0 [ 3325.142779] unevictable:0 dirty:0 writeback:0 unstable:0 [ 3325.142779] slab_reclaimable:11978 slab_unreclaimable:115323 [ 3325.142779] mapped:52728 shmem:90891 pagetables:788 bounce:0 [ 3325.142779] free:13937 free_pcp:68 free_cma:0 [ 3325.168193] DMA32 free:17956kB min:36200kB low:45248kB high:54296kB active_anon:64128kB inactive_anon:304524kB active_file:8kB inactive_file:8kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7264kB pagetables:2712kB bounce:0kB free_pcp:152kB local_pcp:16kB free_cma:0kB [ 3325.176891] Node 0 active_anon:64248kB inactive_anon:305504kB active_file:8kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:210912kB dirty:0kB writeback:0kB shmem:308536kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3325.195822] lowmem_reserve[]: [ 3325.227148] Node 1 active_anon:1712kB inactive_anon:54648kB active_file:60kB inactive_file:2340kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:1100kB dirty:0kB writeback:0kB shmem:55028kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3325.247533] Bluetooth: hci0 command 0x0409 tx timeout [ 3325.327322] Node 0 [ 3325.348110] 0 0 0 0 0 [ 3325.382562] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3325.383126] IPVS: ftp: loaded support on port[0] = 21 [ 3325.481484] DMA free:10976kB min:204kB low:252kB high:300kB active_anon:120kB inactive_anon:980kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:4kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3325.482448] Bluetooth: hci4 command 0x0409 tx timeout [ 3325.526092] lowmem_reserve[]: 0 0 0 0 0 [ 3325.533967] Node 1 Normal free:488544kB min:53696kB low:67120kB high:80544kB active_anon:1612kB inactive_anon:54648kB active_file:1660kB inactive_file:5540kB unevictable:0kB writepending:148kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:352kB pagetables:288kB bounce:0kB free_pcp:1340kB local_pcp:604kB free_cma:0kB [ 3325.575410] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 3325.601521] Node 0 DMA32 free:117520kB min:36200kB low:45248kB high:54296kB active_anon:64128kB inactive_anon:304524kB active_file:8kB inactive_file:8kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7328kB pagetables:2712kB bounce:0kB free_pcp:564kB local_pcp:184kB free_cma:0kB [ 3325.637613] lowmem_reserve[]: 0 0 0 0 0 [ 3325.641651] Node 0 DMA: 20*4kB (UME) 22*8kB (UME) 12*16kB (ME) 7*32kB (UME) 3*64kB (UM) 7*128kB (UME) 4*256kB (UME) 2*512kB (ME) 3*1024kB (UME) 2*2048kB (UM) 0*4096kB = 10976kB [ 3325.700270] Node 0 DMA32: 849*4kB (UME) 1013*8kB (UME) 200*16kB (UME) 40*32kB (UME) 254*64kB (U) 649*128kB (U) 0*256kB 0*512kB 3*1024kB (U) 0*2048kB 0*4096kB = 118380kB [ 3325.721388] lowmem_reserve[]: 0 0 0 0 0 [ 3325.739489] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3325.747769] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 3325.820334] Node 1 Normal: 40*4kB (UM) 29*8kB (UM) 6*16kB (UM) 8*32kB (UM) 2369*64kB (UM) 2*128kB (UM) 9*256kB (M) 17*512kB (UM) 364*1024kB (U) 47*2048kB (U) 2*4096kB (U) = 640808kB [ 3325.845826] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3325.856360] lowmem_reserve[]: 0 0 0 0 0 [ 3325.856386] Node 1 Normal free:679376kB min:53696kB low:67120kB high:80544kB active_anon:1480kB inactive_anon:54672kB active_file:1712kB inactive_file:5600kB unevictable:0kB writepending:112kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:288kB pagetables:272kB bounce:0kB free_pcp:1324kB local_pcp:688kB free_cma:0kB [ 3325.856406] lowmem_reserve[]: 0 0 0 0 0 [ 3325.856424] Node 0 DMA: 20*4kB (UME) 22*8kB (UME) 12*16kB (ME) 7*32kB (UME) 3*64kB (UM) 7*128kB (UME) 4*256kB (UME) 2*512kB (ME) 3*1024kB (UME) 2*2048kB (UM) 0*4096kB = 10976kB [ 3325.856502] Node 0 DMA32: 787*4kB (UME) 988*8kB (UME) 154*16kB (UME) 39*32kB (UME) 255*64kB (U) 649*128kB (U) 0*256kB 0*512kB 3*1024kB (U) 0*2048kB 0*4096kB = 117228kB [ 3325.856571] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 3325.856618] Node 1 Normal: 40*4kB (UM) 29*8kB (UM) 6*16kB (UM) 8*32kB (UM) 2399*64kB (UM) 289*128kB (UM) 9*256kB (M) 17*512kB (UM) 364*1024kB (U) 47*2048kB (U) 2*4096kB (U) = 679464kB [ 3325.856699] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3325.856705] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3325.856711] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3325.856717] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3325.856723] 92937 total pagecache pages [ 3325.862373] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3325.898893] chnl_net:caif_netlink_parms(): no params data found [ 3325.932537] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3325.987172] 0 pages in swap cache [ 3325.997972] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3326.022142] Swap cache stats: add 0, delete 0, find 0/0 [ 3326.028620] 92974 total pagecache pages [ 3326.048285] Free swap = 0kB [ 3326.048754] 0 pages in swap cache [ 3326.051345] Total swap = 0kB [ 3326.051354] 2097051 pages RAM [ 3326.051357] 0 pages HighMem/MovableOnly [ 3326.051360] 363840 pages reserved [ 3326.051362] 0 pages cma reserved [ 3326.078098] Swap cache stats: add 0, delete 0, find 0/0 [ 3326.084149] Free swap = 0kB [ 3326.088480] Total swap = 0kB [ 3326.092913] 2097051 pages RAM [ 3326.096279] 0 pages HighMem/MovableOnly [ 3326.101595] 363840 pages reserved [ 3326.106270] 0 pages cma reserved [ 3326.111027] Out of memory (oom_kill_allocating_task): Kill process 16050 (syz-executor.1) score 0 or sacrifice child [ 3326.124535] Killed process 16050 (syz-executor.1) total-vm:93120kB, anon-rss:76kB, file-rss:33772kB, shmem-rss:0kB 05:20:58 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) write$dsp(0xffffffffffffffff, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x80000001, 0x32}) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(0xffffffffffffffff, 0x7a5, &(0x7f0000000000)={{}, 0x1, 0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(0xffffffffffffffff, 0x7a4, &(0x7f00000000c0)={{@hyper}, 0x0, 0x3f, 0x0, 0x8}) 05:20:58 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x40000, 0x0) openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x22000, 0x0) write$dsp(0xffffffffffffffff, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x2080000001, 0x32}) add_key(&(0x7f0000000040)='rxrpc\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) keyctl$set_timeout(0xf, 0x0, 0xfff) [ 3326.323344] bridge0: port 1(bridge_slave_0) entered blocking state [ 3326.334232] bridge0: port 1(bridge_slave_0) entered disabled state [ 3326.345626] device bridge_slave_0 entered promiscuous mode [ 3326.360451] bridge0: port 2(bridge_slave_1) entered blocking state [ 3326.370834] bridge0: port 2(bridge_slave_1) entered disabled state [ 3326.380702] device bridge_slave_1 entered promiscuous mode [ 3326.426593] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 3326.439813] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 3326.473745] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 3326.481585] team0: Port device team_slave_0 added [ 3326.491001] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 3326.498571] team0: Port device team_slave_1 added [ 3326.530702] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3326.537622] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3326.564463] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3326.576719] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3326.583577] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3326.611572] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3326.623109] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 3326.631520] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 3326.662143] device hsr_slave_0 entered promiscuous mode [ 3326.668697] device hsr_slave_1 entered promiscuous mode [ 3326.675195] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 3326.683831] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 3326.816384] bridge0: port 2(bridge_slave_1) entered blocking state [ 3326.822833] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3326.829554] bridge0: port 1(bridge_slave_0) entered blocking state [ 3326.836035] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3326.853495] bridge0: port 1(bridge_slave_0) entered disabled state [ 3326.868096] bridge0: port 2(bridge_slave_1) entered disabled state [ 3326.925412] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3326.939042] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 3326.951329] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 3326.958898] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 3326.966606] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 3326.980821] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 3326.990118] 8021q: adding VLAN 0 to HW filter on device team0 [ 3327.002204] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 3327.012105] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 3327.022749] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 3327.033621] bridge0: port 1(bridge_slave_0) entered blocking state [ 3327.040083] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3327.054151] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 3327.061812] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 3327.074779] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 3327.084111] bridge0: port 2(bridge_slave_1) entered blocking state [ 3327.090564] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3327.105244] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 3327.113885] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 3327.129241] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 3327.141299] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 3327.152423] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 3327.163477] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 3327.172358] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 3327.185497] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 3327.202455] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 3327.219917] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 3327.229319] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 3327.247360] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 3327.255311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 3327.277487] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 3327.288195] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 3327.308086] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 3327.315807] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 3327.338597] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 3327.344827] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 3327.374792] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 3327.383160] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 3327.401236] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 3327.417088] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 3327.429436] 8021q: adding VLAN 0 to HW filter on device batadv0 05:20:59 executing program 1: socketpair(0x0, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bind$llc(r0, 0x0, 0x0) [ 3327.610094] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 3327.621425] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 3327.633086] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 3327.641981] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 3327.655158] Bluetooth: hci4 command 0x041b tx timeout [ 3327.688309] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 3327.701289] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 3327.710404] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 3327.725044] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 3327.732048] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 3327.743937] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 3327.753753] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 3327.764995] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 3327.775212] device veth0_vlan entered promiscuous mode [ 3327.793152] device veth1_vlan entered promiscuous mode [ 3327.802416] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 3327.813813] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 3327.832164] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 3327.846444] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 3327.855065] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 3327.865978] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 3327.873751] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 3327.887381] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 3327.897454] device veth0_macvtap entered promiscuous mode [ 3327.898143] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 3327.913357] device veth1_macvtap entered promiscuous mode [ 3327.924468] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 3327.936106] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 3327.946502] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 3327.957364] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3327.966497] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 3327.976339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3327.985629] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 3327.996152] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3328.005414] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 3328.015239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3328.025900] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 3328.033591] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 3328.042114] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 3328.050205] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 3328.058171] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 3328.068268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 3328.078665] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3328.089121] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 3328.101894] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3328.111404] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 3328.124035] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3328.134310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 3328.146789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3328.158052] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 3328.165098] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 3328.172694] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 3328.185920] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 05:21:00 executing program 2: socketpair(0x0, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) recvfrom$llc(r0, &(0x7f00000000c0)=""/131, 0x83, 0x1000, &(0x7f0000000000)={0x1a, 0x78e341917cb35c9f, 0x20, 0xc2, 0x7, 0x5, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x10) 05:21:00 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) write$dsp(0xffffffffffffffff, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x80000001, 0x32}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(0xffffffffffffffff, 0x7a5, &(0x7f0000000000)={{@any, 0x7}, 0x1, 0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(0xffffffffffffffff, 0x7a4, &(0x7f00000000c0)={{@hyper}, 0x0, 0x3f, 0x13, 0x8}) 05:21:00 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x40000, 0x0) openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x22000, 0x0) write$dsp(0xffffffffffffffff, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x2080000001, 0x32}) add_key(&(0x7f0000000040)='rxrpc\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) 05:21:00 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x40000, 0x0) openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x22000, 0x0) write$dsp(0xffffffffffffffff, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x2080000001, 0x32}) r1 = add_key(&(0x7f0000000040)='rxrpc\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) keyctl$set_timeout(0xf, 0x0, 0xfff) keyctl$reject(0x13, 0x0, 0x3, 0xffff, r1) 05:21:00 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) write$dsp(0xffffffffffffffff, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x80000001, 0x32}) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(0xffffffffffffffff, 0x7a5, &(0x7f0000000000)={{}, 0x1, 0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(0xffffffffffffffff, 0x7a4, &(0x7f00000000c0)={{@hyper}, 0x0, 0x3f}) 05:21:00 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x40000, 0x0) openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x22000, 0x0) write$dsp(0xffffffffffffffff, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x2080000001, 0x32}) 05:21:00 executing program 2: socketpair(0x0, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) recvfrom$llc(r0, &(0x7f00000000c0)=""/131, 0x83, 0x1000, &(0x7f0000000000)={0x1a, 0x78e341917cb35c9f, 0x20, 0xc2, 0x7, 0x5, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x10) 05:21:00 executing program 2: socketpair(0x1, 0x0, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) recvfrom$llc(r0, &(0x7f00000000c0)=""/131, 0x83, 0x1000, &(0x7f0000000000)={0x1a, 0x78e341917cb35c9f, 0x20, 0xc2, 0x7, 0x5, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x10) 05:21:00 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x40000, 0x0) openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x22000, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x2080000001, 0x32}) 05:21:00 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x40000, 0x0) openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x22000, 0x0) write$dsp(0xffffffffffffffff, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x2080000001, 0x32}) add_key(&(0x7f0000000040)='rxrpc\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) keyctl$set_timeout(0xf, 0x0, 0xfff) 05:21:00 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x40000, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x2080000001, 0x32}) [ 3329.439466] syz-executor.5: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 3329.451694] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 3329.461667] CPU: 0 PID: 16323 Comm: syz-executor.5 Not tainted 4.14.225-syzkaller #0 [ 3329.470443] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3329.480172] Call Trace: [ 3329.482753] dump_stack+0x1b2/0x281 [ 3329.486370] warn_alloc.cold+0x96/0x1cc [ 3329.490338] ? zone_watermark_ok_safe+0x220/0x220 [ 3329.495170] __alloc_pages_nodemask+0x2127/0x2720 [ 3329.500019] ? lock_acquire+0x170/0x3f0 [ 3329.503982] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3329.508838] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 3329.514272] ? __mutex_unlock_slowpath+0x75/0x770 [ 3329.519097] ? __alloc_pages_nodemask+0x277/0x2720 [ 3329.524013] alloc_pages_current+0x155/0x260 [ 3329.528415] ion_page_pool_alloc+0x118/0x1b0 [ 3329.532809] ion_system_heap_allocate+0x133/0x8c0 [ 3329.537636] ? ion_alloc+0x187/0x810 [ 3329.541349] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 3329.547215] ? ion_system_contig_heap_create+0x130/0x130 [ 3329.552919] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 3329.557921] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 3329.562837] ion_alloc+0x204/0x810 [ 3329.566377] ? ion_dma_buf_release+0x40/0x40 [ 3329.570858] ? __might_fault+0x177/0x1b0 [ 3329.574907] ion_ioctl+0xea/0x1f0 [ 3329.578342] ? ion_query_heaps+0x360/0x360 [ 3329.582558] ? __fget+0x1fe/0x360 [ 3329.586019] ? ion_query_heaps+0x360/0x360 [ 3329.590236] do_vfs_ioctl+0x75a/0xff0 [ 3329.594042] ? ioctl_preallocate+0x1a0/0x1a0 [ 3329.598431] ? lock_downgrade+0x740/0x740 [ 3329.602566] ? __fget+0x225/0x360 [ 3329.606003] ? do_vfs_ioctl+0xff0/0xff0 [ 3329.610142] ? security_file_ioctl+0x83/0xb0 [ 3329.614553] SyS_ioctl+0x7f/0xb0 [ 3329.617930] ? do_vfs_ioctl+0xff0/0xff0 [ 3329.621899] do_syscall_64+0x1d5/0x640 [ 3329.625781] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3329.630955] RIP: 0033:0x465f69 [ 3329.634504] RSP: 002b:00007f08137cb188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3329.642230] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 3329.649524] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 3329.656861] RBP: 00000000004bfa8f R08: 0000000000000000 R09: 0000000000000000 [ 3329.664144] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 3329.671397] R13: 00007ffeb8b6e44f R14: 00007f08137cb300 R15: 0000000000022000 [ 3329.689266] Mem-Info: [ 3329.694009] active_anon:17056 inactive_anon:90040 isolated_anon:0 [ 3329.694009] active_file:1984 inactive_file:2816 isolated_file:64 [ 3329.694009] unevictable:0 dirty:9 writeback:0 unstable:0 [ 3329.694009] slab_reclaimable:12048 slab_unreclaimable:118074 [ 3329.694009] mapped:57107 shmem:90895 pagetables:770 bounce:0 [ 3329.694009] free:25856 free_pcp:379 free_cma:0 [ 3329.740323] Bluetooth: hci4 command 0x040f tx timeout [ 3329.765884] Node 0 active_anon:67140kB inactive_anon:305516kB active_file:1188kB inactive_file:1104kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:178552kB dirty:28kB writeback:0kB shmem:308548kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 3329.830581] Node 1 active_anon:1184kB inactive_anon:54644kB active_file:1592kB inactive_file:1440kB unevictable:0kB isolated(anon):0kB isolated(file):128kB mapped:37776kB dirty:8kB writeback:0kB shmem:55032kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 3329.872395] Node 0 DMA free:11052kB min:204kB low:252kB high:300kB active_anon:2160kB inactive_anon:980kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:4kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3329.872434] syz-executor.4: [ 3329.901804] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 3329.912168] Node 0 DMA32 free:35848kB min:36200kB low:45248kB high:54296kB active_anon:64880kB inactive_anon:304536kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:28kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7360kB pagetables:2840kB bounce:0kB free_pcp:16kB local_pcp:0kB free_cma:0kB [ 3329.944142] page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 3329.956427] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 3329.961571] CPU: 0 PID: 16326 Comm: syz-executor.4 Not tainted 4.14.225-syzkaller #0 [ 3329.969564] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3329.978926] Call Trace: [ 3329.981508] dump_stack+0x1b2/0x281 [ 3329.985142] warn_alloc.cold+0x96/0x1cc [ 3329.989100] ? zone_watermark_ok_safe+0x220/0x220 [ 3329.993973] __alloc_pages_nodemask+0x2127/0x2720 [ 3329.999073] ? lock_acquire+0x170/0x3f0 [ 3330.003049] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3330.007882] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 3330.013525] ? __mutex_unlock_slowpath+0x75/0x770 [ 3330.018375] ? retint_kernel+0x2d/0x2d [ 3330.022256] alloc_pages_current+0x155/0x260 [ 3330.026655] ion_page_pool_alloc+0x118/0x1b0 [ 3330.031072] ion_system_heap_allocate+0x133/0x8c0 [ 3330.035910] ? ion_alloc+0x187/0x810 [ 3330.039607] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 3330.045042] ? ion_system_contig_heap_create+0x130/0x130 [ 3330.050473] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 3330.055746] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 3330.060693] ion_alloc+0x204/0x810 [ 3330.064423] ? ion_dma_buf_release+0x40/0x40 [ 3330.068839] ? __might_fault+0x177/0x1b0 [ 3330.072901] ion_ioctl+0xea/0x1f0 [ 3330.076337] ? ion_query_heaps+0x360/0x360 [ 3330.080554] ? __fget+0x1fe/0x360 [ 3330.084074] ? ion_query_heaps+0x360/0x360 [ 3330.088471] do_vfs_ioctl+0x75a/0xff0 [ 3330.092270] ? ioctl_preallocate+0x1a0/0x1a0 [ 3330.096658] ? lock_downgrade+0x740/0x740 [ 3330.100791] ? __fget+0x225/0x360 [ 3330.104225] ? do_vfs_ioctl+0xff0/0xff0 [ 3330.108179] ? security_file_ioctl+0x83/0xb0 [ 3330.112595] SyS_ioctl+0x7f/0xb0 [ 3330.115969] ? do_vfs_ioctl+0xff0/0xff0 [ 3330.119938] do_syscall_64+0x1d5/0x640 [ 3330.123847] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3330.129382] RIP: 0033:0x465f69 [ 3330.132569] RSP: 002b:00007fbb52cf0188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3330.140320] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 3330.147575] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 3330.154916] RBP: 00000000004bfa8f R08: 0000000000000000 R09: 0000000000000000 [ 3330.162168] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 3330.169422] R13: 00007ffc0aef8def R14: 00007fbb52cf0300 R15: 0000000000022000 [ 3330.204829] lowmem_reserve[]: 0 0 0 0 0 [ 3330.211567] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3330.241583] lowmem_reserve[]: 0 0 0 0 0 [ 3330.253460] Node 1 Normal free:53280kB min:53696kB low:67120kB high:80544kB active_anon:1184kB inactive_anon:54644kB active_file:160kB inactive_file:188kB unevictable:0kB writepending:8kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:288kB pagetables:236kB bounce:0kB free_pcp:448kB local_pcp:0kB free_cma:0kB [ 3330.285178] lowmem_reserve[]: 0 0 0 0 0 [ 3330.290229] Node 0 DMA: 25*4kB (UME) 17*8kB (UME) 22*16kB (UME) 19*32kB (UME) 8*64kB (UM) 13*128kB (UME) 6*256kB (UME) 2*512kB (ME) 3*1024kB (UME) 1*2048kB (U) 0*4096kB = 11052kB [ 3330.309236] Node 0 DMA32: 1568*4kB (UME) 1008*8kB (UME) 244*16kB (UME) 127*32kB (UME) 14*64kB (UM) 13*128kB (UM) 36*256kB (UM) 0*512kB 2*1024kB (M) 0*2048kB 0*4096kB = 36128kB [ 3330.358918] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 3330.389760] Node 1 Normal: 5*4kB (UM) 23*8kB (UM) 14*16kB (UM) 36*32kB (UM) 48*64kB (UM) 24*128kB (M) 14*256kB (M) 83*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 53804kB [ 3330.407062] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3330.417056] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3330.427434] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3330.437136] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3330.447804] 91093 total pagecache pages [ 3330.451893] 0 pages in swap cache [ 3330.455460] Swap cache stats: add 0, delete 0, find 0/0 [ 3330.461608] Free swap = 0kB [ 3330.465957] Total swap = 0kB [ 3330.469957] 2097051 pages RAM [ 3330.475039] 0 pages HighMem/MovableOnly [ 3330.479529] 363840 pages reserved [ 3330.486013] 0 pages cma reserved [ 3330.804040] systemd-rfkill invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 3330.918252] systemd-rfkill cpuset=/ mems_allowed=0-1 [ 3330.923406] CPU: 0 PID: 16092 Comm: systemd-rfkill Not tainted 4.14.225-syzkaller #0 [ 3330.931280] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3330.940655] Call Trace: [ 3330.943255] dump_stack+0x1b2/0x281 [ 3330.946887] dump_header+0x178/0x82f [ 3330.950604] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 3330.955704] ? ___ratelimit+0x2cd/0x530 [ 3330.959676] oom_kill_process.cold+0x10/0xb18 [ 3330.964176] out_of_memory+0xe3e/0x1190 [ 3330.968154] ? oom_killer_disable+0x1c0/0x1c0 [ 3330.972644] ? mutex_trylock+0x152/0x1a0 [ 3330.976708] __alloc_pages_nodemask+0x23e1/0x2720 [ 3330.981609] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3330.986505] alloc_pages_current+0x155/0x260 [ 3330.990960] filemap_fault+0xea3/0x1980 [ 3330.995294] ext4_filemap_fault+0x84/0xb0 [ 3330.999979] __do_fault+0xfa/0x380 [ 3331.003516] __handle_mm_fault+0x2497/0x4620 [ 3331.007922] ? vm_insert_page+0x7c0/0x7c0 [ 3331.012065] ? __fsnotify_inode_delete+0x20/0x20 [ 3331.016819] ? __fsnotify_update_child_dentry_flags.part.0+0x2e0/0x2e0 [ 3331.024012] handle_mm_fault+0x391/0x860 [ 3331.028075] __do_page_fault+0x549/0xad0 [ 3331.032138] ? spurious_fault+0x640/0x640 [ 3331.036286] ? do_page_fault+0x60/0x500 [ 3331.040259] ? page_fault+0x2f/0x50 [ 3331.044069] page_fault+0x45/0x50 [ 3331.047511] RIP: 42726e20: (null) [ 3331.051771] RSP: 6b25157f:00007fff42726e88 EFLAGS: 55bc490af9ed [ 3331.080740] Mem-Info: [ 3331.106083] active_anon:17088 inactive_anon:90040 isolated_anon:0 [ 3331.106083] active_file:18 inactive_file:11 isolated_file:0 [ 3331.106083] unevictable:0 dirty:0 writeback:0 unstable:0 [ 3331.106083] slab_reclaimable:12045 slab_unreclaimable:117944 [ 3331.106083] mapped:52853 shmem:90895 pagetables:770 bounce:0 [ 3331.106083] free:25080 free_pcp:0 free_cma:0 [ 3331.262170] Node 0 active_anon:67168kB inactive_anon:305516kB active_file:36kB inactive_file:64kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:176448kB dirty:0kB writeback:0kB shmem:308548kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3331.424268] Node 1 active_anon:1184kB inactive_anon:54644kB active_file:32kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:34964kB dirty:0kB writeback:0kB shmem:55032kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3331.577063] Node 0 DMA free:11052kB min:204kB low:252kB high:300kB active_anon:2160kB inactive_anon:980kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:4kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3331.640017] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 3331.645224] Node 0 DMA32 free:36072kB min:36200kB low:45248kB high:54296kB active_anon:65008kB inactive_anon:304536kB active_file:28kB inactive_file:24kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7360kB pagetables:2840kB bounce:0kB free_pcp:120kB local_pcp:0kB free_cma:0kB [ 3331.692221] lowmem_reserve[]: 0 0 0 0 0 [ 3331.696289] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3331.722808] lowmem_reserve[]: 0 0 0 0 0 [ 3331.726867] Node 1 Normal free:53100kB min:53696kB low:67120kB high:80544kB active_anon:1184kB inactive_anon:54644kB active_file:28kB inactive_file:0kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:288kB pagetables:236kB bounce:0kB free_pcp:4kB local_pcp:0kB free_cma:0kB [ 3331.756457] lowmem_reserve[]: 0 0 0 0 0 [ 3331.760817] Node 0 DMA: 25*4kB (UME) 17*8kB (UME) 22*16kB (UME) 19*32kB (UME) 8*64kB (UM) 13*128kB (UME) 6*256kB (UME) 2*512kB (ME) 3*1024kB (UME) 1*2048kB (U) 0*4096kB = 11052kB [ 3331.777265] Node 0 DMA32: 1478*4kB (UME) 1009*8kB (UME) 246*16kB (UME) 127*32kB (UME) 16*64kB (UM) 15*128kB (UM) 36*256kB (UM) 0*512kB 2*1024kB (M) 0*2048kB 0*4096kB = 36192kB [ 3331.793278] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 3331.804148] Node 1 Normal: 110*4kB (UM) 48*8kB (UM) 37*16kB (UM) 30*32kB (UM) 44*64kB (UM) 26*128kB (UM) 15*256kB (UM) 80*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 53320kB [ 3331.809979] Bluetooth: hci4 command 0x0419 tx timeout [ 3331.845910] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3331.854861] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3331.925898] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3331.989861] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3332.054459] 90935 total pagecache pages [ 3332.079778] 0 pages in swap cache [ 3332.083262] Swap cache stats: add 0, delete 0, find 0/0 [ 3332.120563] Free swap = 0kB [ 3332.123987] Total swap = 0kB [ 3332.127081] 2097051 pages RAM [ 3332.130162] 0 pages HighMem/MovableOnly [ 3332.134109] 363840 pages reserved [ 3332.141794] 0 pages cma reserved [ 3332.145190] Out of memory (oom_kill_allocating_task): Kill process 16092 (systemd-rfkill) score 0 or sacrifice child [ 3332.168762] Killed process 16092 (systemd-rfkill) total-vm:37800kB, anon-rss:440kB, file-rss:0kB, shmem-rss:0kB [ 3332.186034] oom_reaper: reaped process 16092 (systemd-rfkill), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 3332.420428] systemd-journal invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 3332.502190] systemd-journal cpuset=/ mems_allowed=0-1 [ 3332.536008] CPU: 1 PID: 15964 Comm: systemd-journal Not tainted 4.14.225-syzkaller #0 [ 3332.544004] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3332.553350] Call Trace: [ 3332.555942] dump_stack+0x1b2/0x281 [ 3332.559566] dump_header+0x178/0x82f [ 3332.563281] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 3332.568759] ? ___ratelimit+0x2cd/0x530 [ 3332.572727] oom_kill_process.cold+0x10/0xb18 [ 3332.577225] out_of_memory+0xe3e/0x1190 [ 3332.581209] ? oom_killer_disable+0x1c0/0x1c0 [ 3332.585704] ? mutex_trylock+0x152/0x1a0 [ 3332.589784] __alloc_pages_nodemask+0x23e1/0x2720 [ 3332.594638] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3332.599504] alloc_pages_current+0x155/0x260 [ 3332.603912] filemap_fault+0xea3/0x1980 [ 3332.607895] ext4_filemap_fault+0x84/0xb0 [ 3332.612037] __do_fault+0xfa/0x380 [ 3332.615588] __handle_mm_fault+0x2497/0x4620 [ 3332.620263] ? ____cache_alloc_node+0xf4/0x1d0 [ 3332.624893] ? vm_insert_page+0x7c0/0x7c0 [ 3332.629037] ? check_stack_object+0x86/0xa0 [ 3332.633365] handle_mm_fault+0x391/0x860 [ 3332.638128] __do_page_fault+0x549/0xad0 [ 3332.642187] ? spurious_fault+0x640/0x640 [ 3332.646679] ? do_page_fault+0x60/0x500 [ 3332.651378] ? page_fault+0x2f/0x50 [ 3332.655000] page_fault+0x45/0x50 [ 3332.658447] RIP: e4e4c040:0x7ffc9a493e80 [ 3332.662522] RSP: 9a493ec0:0000000000000042 EFLAGS: ffffffff [ 3332.913850] Mem-Info: [ 3332.968326] active_anon:16979 inactive_anon:90040 isolated_anon:0 [ 3332.968326] active_file:18 inactive_file:22 isolated_file:0 [ 3332.968326] unevictable:0 dirty:0 writeback:0 unstable:0 [ 3332.968326] slab_reclaimable:12045 slab_unreclaimable:117961 [ 3332.968326] mapped:52795 shmem:90895 pagetables:748 bounce:0 [ 3332.968326] free:25114 free_pcp:0 free_cma:0 [ 3333.150255] Node 0 active_anon:66728kB inactive_anon:305516kB active_file:48kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:176364kB dirty:0kB writeback:0kB shmem:308548kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3333.231503] Node 1 active_anon:1188kB inactive_anon:54644kB active_file:24kB inactive_file:24kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:34816kB dirty:0kB writeback:0kB shmem:55032kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3333.410805] Node 0 DMA free:11052kB min:204kB low:252kB high:300kB active_anon:2160kB inactive_anon:980kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:4kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3333.633634] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 3333.678118] Node 0 DMA32 free:36184kB min:36200kB low:45248kB high:54296kB active_anon:64568kB inactive_anon:304536kB active_file:28kB inactive_file:20kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7360kB pagetables:2752kB bounce:0kB free_pcp:4kB local_pcp:0kB free_cma:0kB [ 3333.879755] lowmem_reserve[]: 0 0 0 0 0 [ 3333.883799] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3333.943459] lowmem_reserve[]: 0 0 0 0 0 [ 3333.947548] Node 1 Normal free:53324kB min:53696kB low:67120kB high:80544kB active_anon:1188kB inactive_anon:54644kB active_file:28kB inactive_file:24kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:288kB pagetables:236kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3333.995450] lowmem_reserve[]: 0 0 0 0 0 [ 3333.999478] Node 0 DMA: 25*4kB (UME) 17*8kB (UME) 22*16kB (UME) 19*32kB (UME) 8*64kB (UM) 13*128kB (UME) 6*256kB (UME) 2*512kB (ME) 3*1024kB (UME) 1*2048kB (U) 0*4096kB = 11052kB [ 3334.108878] Node 0 DMA32: 1467*4kB (UME) 1037*8kB (UME) 263*16kB (UME) 128*32kB (UME) 16*64kB (UM) 15*128kB (UM) 36*256kB (UM) 0*512kB 2*1024kB (M) 0*2048kB 0*4096kB = 36676kB [ 3334.219950] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 3334.318959] Node 1 Normal: 111*4kB (UM) 48*8kB (UM) 37*16kB (UM) 30*32kB (UM) 44*64kB (UM) 26*128kB (UM) 15*256kB (UM) 80*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 53324kB [ 3334.426380] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3334.435250] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3334.563372] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3334.651896] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3334.725760] 90928 total pagecache pages [ 3334.729759] 0 pages in swap cache [ 3334.733206] Swap cache stats: add 0, delete 0, find 0/0 [ 3334.833204] Free swap = 0kB [ 3334.859039] Total swap = 0kB [ 3334.862097] 2097051 pages RAM [ 3334.892279] 0 pages HighMem/MovableOnly [ 3334.922573] 363840 pages reserved [ 3334.947784] 0 pages cma reserved [ 3334.951183] Out of memory (oom_kill_allocating_task): Kill process 15964 (systemd-journal) score 0 or sacrifice child [ 3335.054497] Killed process 15964 (systemd-journal) total-vm:46096kB, anon-rss:472kB, file-rss:0kB, shmem-rss:2172kB [ 3335.116729] oom_reaper: reaped process 15964 (systemd-journal), now anon-rss:0kB, file-rss:0kB, shmem-rss:2172kB [ 3335.170738] kworker/u4:0 invoked oom-killer: gfp_mask=0x15080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null), order=3, oom_score_adj=0 [ 3335.215344] kworker/u4:0 cpuset=/ mems_allowed=0-1 [ 3335.220306] CPU: 1 PID: 24058 Comm: kworker/u4:0 Not tainted 4.14.225-syzkaller #0 [ 3335.228004] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3335.237641] Workqueue: events_unbound call_usermodehelper_exec_work [ 3335.244053] Call Trace: [ 3335.246656] dump_stack+0x1b2/0x281 [ 3335.250288] dump_header+0x178/0x82f [ 3335.253994] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 3335.259231] ? ___ratelimit+0x2cd/0x530 [ 3335.263945] oom_kill_process.cold+0x10/0xb18 [ 3335.268450] ? lock_downgrade+0x740/0x740 [ 3335.272607] out_of_memory+0x2dc/0x1190 [ 3335.276601] ? oom_killer_disable+0x1c0/0x1c0 [ 3335.281103] ? mutex_trylock+0x152/0x1a0 [ 3335.285156] __alloc_pages_nodemask+0x23e1/0x2720 [ 3335.289995] ? deref_stack_reg+0x124/0x1a0 [ 3335.294240] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3335.299073] ? fs_reclaim_release+0xd0/0x110 [ 3335.303494] ? kmem_cache_alloc_node+0x38b/0x410 [ 3335.308248] copy_process.part.0+0x265/0x71c0 [ 3335.312838] ? __lock_acquire+0x5fc/0x3f20 [ 3335.317080] ? trace_hardirqs_on+0x10/0x10 [ 3335.321319] ? debug_object_activate+0x292/0x490 [ 3335.326162] ? trace_hardirqs_on+0x10/0x10 [ 3335.330391] ? static_obj+0x50/0x50 [ 3335.334021] ? call_usermodehelper_exec_work+0x2a0/0x2a0 [ 3335.339463] ? __cleanup_sighand+0x40/0x40 [ 3335.343724] ? call_usermodehelper_exec_work+0x2a0/0x2a0 [ 3335.349168] _do_fork+0x184/0xc80 [ 3335.352617] ? fork_idle+0x270/0x270 [ 3335.356350] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 3335.361620] ? process_one_work+0x6c4/0x14a0 [ 3335.366022] ? call_usermodehelper_exec_work+0x2a0/0x2a0 [ 3335.371473] kernel_thread+0x2f/0x40 [ 3335.375181] call_usermodehelper_exec_work+0x1ac/0x2a0 [ 3335.380561] ? call_usermodehelper+0x80/0x80 [ 3335.384968] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 3335.390415] process_one_work+0x793/0x14a0 [ 3335.394649] ? work_busy+0x320/0x320 [ 3335.398353] ? worker_thread+0x158/0xff0 [ 3335.402419] ? _raw_spin_unlock_irq+0x24/0x80 [ 3335.406913] worker_thread+0x5cc/0xff0 [ 3335.410812] ? rescuer_thread+0xc80/0xc80 [ 3335.414952] kthread+0x30d/0x420 [ 3335.418311] ? kthread_create_on_node+0xd0/0xd0 [ 3335.422980] ret_from_fork+0x24/0x30 [ 3335.428856] Mem-Info: [ 3335.431434] active_anon:16879 inactive_anon:90040 isolated_anon:0 [ 3335.431434] active_file:16 inactive_file:111 isolated_file:3 [ 3335.431434] unevictable:0 dirty:0 writeback:0 unstable:0 [ 3335.431434] slab_reclaimable:12043 slab_unreclaimable:117790 [ 3335.431434] mapped:52252 shmem:90895 pagetables:748 bounce:0 [ 3335.431434] free:25265 free_pcp:30 free_cma:0 [ 3335.466170] Node 0 active_anon:66328kB inactive_anon:305516kB active_file:96kB inactive_file:552kB unevictable:0kB isolated(anon):0kB isolated(file):112kB mapped:174192kB dirty:0kB writeback:0kB shmem:308548kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 3335.494991] Node 1 active_anon:1188kB inactive_anon:54644kB active_file:32kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:34816kB dirty:4kB writeback:0kB shmem:55032kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3335.524154] Node 0 DMA free:11068kB min:204kB low:252kB high:300kB active_anon:2160kB inactive_anon:980kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:4kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3335.551985] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 3335.564383] Node 0 DMA32 free:36292kB min:36200kB low:45248kB high:54296kB active_anon:64104kB inactive_anon:304532kB active_file:244kB inactive_file:892kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7328kB pagetables:2652kB bounce:0kB free_pcp:516kB local_pcp:84kB free_cma:0kB [ 3335.609139] lowmem_reserve[]: 0 0 0 0 0 [ 3335.613420] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3335.646089] lowmem_reserve[]: 0 0 0 0 0 [ 3335.650100] Node 1 Normal free:53344kB min:53696kB low:67120kB high:80544kB active_anon:1184kB inactive_anon:54644kB active_file:20kB inactive_file:16kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:288kB pagetables:236kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3335.682574] lowmem_reserve[]: 0 0 0 0 0 [ 3335.689082] Node 0 DMA: 11*4kB (ME) 14*8kB (UME) 20*16kB (UME) 19*32kB (UME) 8*64kB (UM) 12*128kB (UME) 5*256kB (UME) 3*512kB (UME) 3*1024kB (UME) 1*2048kB (U) 0*4096kB = 11068kB [ 3335.709324] Node 0 DMA32: 810*4kB (ME) 1216*8kB (UME) 284*16kB (UME) 136*32kB (UME) 19*64kB (UM) 16*128kB (UM) 36*256kB (UM) 0*512kB 2*1024kB (M) 0*2048kB 0*4096kB = 36392kB [ 3335.728421] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 3335.739200] Node 1 Normal: 112*4kB (UM) 48*8kB (UM) 36*16kB (UM) 29*32kB (UM) 43*64kB (UM) 27*128kB (UM) 15*256kB (UM) 80*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 53344kB [ 3335.754765] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3335.865199] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3335.874484] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3335.963696] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3336.030324] 90930 total pagecache pages [ 3336.034685] 0 pages in swap cache [ 3336.054889] Swap cache stats: add 0, delete 0, find 0/0 [ 3336.149206] Free swap = 0kB [ 3336.152249] Total swap = 0kB [ 3336.182712] 2097051 pages RAM [ 3336.200773] 0 pages HighMem/MovableOnly [ 3336.204784] 363840 pages reserved [ 3336.261816] 0 pages cma reserved [ 3336.284943] Out of memory: Kill process 16319 (syz-executor.4) score 1005 or sacrifice child [ 3336.294208] Killed process 16326 (syz-executor.4) total-vm:93384kB, anon-rss:2196kB, file-rss:34820kB, shmem-rss:0kB [ 3336.339163] syz-fuzzer invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 3336.369044] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 3336.373933] CPU: 0 PID: 7977 Comm: syz-fuzzer Not tainted 4.14.225-syzkaller #0 [ 3336.381543] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3336.390895] Call Trace: [ 3336.393614] dump_stack+0x1b2/0x281 [ 3336.397259] dump_header+0x178/0x82f [ 3336.401253] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 3336.406370] ? ___ratelimit+0x2cd/0x530 [ 3336.410345] oom_kill_process.cold+0x10/0xb18 [ 3336.414849] out_of_memory+0xe3e/0x1190 [ 3336.418878] ? oom_killer_disable+0x1c0/0x1c0 [ 3336.423378] ? mutex_trylock+0x152/0x1a0 [ 3336.427439] __alloc_pages_nodemask+0x23e1/0x2720 [ 3336.432290] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3336.437154] alloc_pages_current+0x155/0x260 [ 3336.441576] filemap_fault+0xea3/0x1980 [ 3336.445555] ext4_filemap_fault+0x84/0xb0 [ 3336.449700] __do_fault+0xfa/0x380 [ 3336.453382] __handle_mm_fault+0x2497/0x4620 [ 3336.457789] ? vm_insert_page+0x7c0/0x7c0 [ 3336.461929] ? lock_downgrade+0x740/0x740 [ 3336.466780] handle_mm_fault+0x391/0x860 [ 3336.470840] __do_page_fault+0x549/0xad0 [ 3336.477506] ? spurious_fault+0x640/0x640 [ 3336.481648] ? do_page_fault+0x60/0x500 [ 3336.485623] ? page_fault+0x2f/0x50 [ 3336.489340] page_fault+0x45/0x50 [ 3336.492790] RIP: 0000:0x93f280 [ 3336.495971] RSP: 2e000:000000c00003df00 EFLAGS: 0043b6a0 [ 3336.508732] Mem-Info: [ 3336.534190] active_anon:16862 inactive_anon:90039 isolated_anon:0 [ 3336.534190] active_file:30 inactive_file:18 isolated_file:0 [ 3336.534190] unevictable:0 dirty:1 writeback:0 unstable:0 [ 3336.534190] slab_reclaimable:12041 slab_unreclaimable:117305 [ 3336.534190] mapped:52225 shmem:90895 pagetables:723 bounce:0 [ 3336.534190] free:13954 free_pcp:75 free_cma:0 [ 3336.583092] Node 0 active_anon:66264kB inactive_anon:305512kB active_file:88kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:174084kB dirty:0kB writeback:0kB shmem:308548kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3336.597307] syz-executor.4: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 3336.629626] Node 1 active_anon:1184kB inactive_anon:54644kB active_file:64kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:34816kB dirty:4kB writeback:0kB shmem:55032kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3336.649502] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 3336.680737] Node 0 DMA free:10968kB min:204kB low:252kB high:300kB active_anon:2160kB inactive_anon:980kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:4kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3336.683940] CPU: 1 PID: 16326 Comm: syz-executor.4 Not tainted 4.14.225-syzkaller #0 [ 3336.710486] lowmem_reserve[]: [ 3336.718314] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3336.718318] Call Trace: [ 3336.718340] dump_stack+0x1b2/0x281 [ 3336.721422] 0 [ 3336.730767] warn_alloc.cold+0x96/0x1cc [ 3336.730778] ? zone_watermark_ok_safe+0x220/0x220 [ 3336.730786] ? usleep_range+0x130/0x130 [ 3336.730794] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 3336.730805] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 3336.730814] ? run_timer_softirq+0x5a0/0x5a0 [ 3336.730828] __alloc_pages_nodemask+0x2127/0x2720 [ 3336.730844] ? lock_acquire+0x170/0x3f0 [ 3336.733498] 2717 [ 3336.737019] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3336.737029] ? ion_page_pool_alloc+0x9e/0x1b0 [ 3336.737044] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 3336.738821] 2718 [ 3336.743214] ? retint_kernel+0x2d/0x2d [ 3336.748394] 2718 [ 3336.752329] alloc_pages_current+0x155/0x260 [ 3336.757500] 2718 [ 3336.762499] ion_page_pool_alloc+0x118/0x1b0 [ 3336.771723] ion_system_heap_allocate+0x133/0x8c0 [ 3336.775687] Node 0 [ 3336.777720] ? ion_alloc+0x187/0x810 [ 3336.782543] DMA32 free:18080kB min:36200kB low:45248kB high:54296kB active_anon:64104kB inactive_anon:304532kB active_file:48kB inactive_file:48kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7328kB pagetables:2652kB bounce:0kB free_pcp:144kB local_pcp:136kB free_cma:0kB [ 3336.787010] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 3336.787021] ? ion_system_contig_heap_create+0x130/0x130 [ 3336.787033] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 3336.792467] lowmem_reserve[]: [ 3336.794516] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 3336.798394] 0 [ 3336.800531] ion_alloc+0x204/0x810 [ 3336.804925] 0 [ 3336.806961] ? ion_dma_buf_release+0x40/0x40 [ 3336.811340] 0 0 [ 3336.816274] ? __might_fault+0x177/0x1b0 [ 3336.816287] ion_ioctl+0xea/0x1f0 [ 3336.816297] ? ion_query_heaps+0x360/0x360 [ 3336.818607] 0 [ 3336.822308] ? __fget+0x1fe/0x360 [ 3336.856084] ? ion_query_heaps+0x360/0x360 [ 3336.856098] do_vfs_ioctl+0x75a/0xff0 [ 3336.861519] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3336.866526] ? ioctl_preallocate+0x1a0/0x1a0 [ 3336.866535] ? lock_downgrade+0x740/0x740 [ 3336.866548] ? __fget+0x225/0x360 [ 3336.869623] lowmem_reserve[]: [ 3336.874449] ? do_vfs_ioctl+0xff0/0xff0 [ 3336.876241] 0 [ 3336.879756] ? security_file_ioctl+0x83/0xb0 [ 3336.881530] 0 [ 3336.885930] SyS_ioctl+0x7f/0xb0 [ 3336.885938] ? do_vfs_ioctl+0xff0/0xff0 [ 3336.885951] do_syscall_64+0x1d5/0x640 [ 3336.887898] 0 [ 3336.891948] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3336.895383] 0 [ 3336.899582] RIP: 0033:0x465f69 [ 3336.901359] 0 [ 3336.904788] RSP: 002b:00007fbb52cf0188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3336.904798] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 3336.904804] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 3336.904811] RBP: 00000000004bfa8f R08: 0000000000000000 R09: 0000000000000000 [ 3336.912795] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 3336.912803] R13: 00007ffc0aef8def R14: 00007fbb52cf0300 R15: 0000000000022000 [ 3336.938483] Node 1 [ 3336.948550] warn_alloc_show_mem: 1 callbacks suppressed [ 3336.948553] Mem-Info: [ 3336.969458] Normal free:26808kB min:53696kB low:67120kB high:80544kB active_anon:1184kB inactive_anon:54644kB active_file:20kB inactive_file:16kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:288kB pagetables:236kB bounce:0kB free_pcp:180kB local_pcp:60kB free_cma:0kB [ 3336.978205] active_anon:16862 inactive_anon:90039 isolated_anon:0 [ 3336.978205] active_file:17 inactive_file:16 isolated_file:0 [ 3336.978205] unevictable:0 dirty:0 writeback:0 unstable:0 [ 3336.978205] slab_reclaimable:12041 slab_unreclaimable:117293 [ 3336.978205] mapped:52225 shmem:90895 pagetables:723 bounce:0 [ 3336.978205] free:13964 free_pcp:81 free_cma:0 [ 3336.992941] lowmem_reserve[]: [ 3337.003628] Node 0 active_anon:66264kB inactive_anon:305512kB active_file:48kB inactive_file:48kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:174084kB dirty:0kB writeback:0kB shmem:308548kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3337.023248] 0 [ 3337.034653] Node 1 active_anon:1184kB inactive_anon:54644kB active_file:20kB inactive_file:16kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:34816kB dirty:0kB writeback:0kB shmem:55032kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3337.053334] 0 [ 3337.080893] Node 0 [ 3337.128307] 0 [ 3337.147357] DMA free:10968kB min:204kB low:252kB high:300kB active_anon:2160kB inactive_anon:980kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:4kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3337.188665] 0 0 [ 3337.209089] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 3337.214230] Node 0 DMA32 free:18080kB min:36200kB low:45248kB high:54296kB active_anon:64104kB inactive_anon:304532kB active_file:48kB inactive_file:48kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7328kB pagetables:2652kB bounce:0kB free_pcp:144kB local_pcp:8kB free_cma:0kB [ 3337.222484] Node 0 DMA: 12*4kB (UME) 13*8kB (ME) 14*16kB (UME) 19*32kB (UME) 8*64kB (UM) 12*128kB (UME) 5*256kB (UME) 3*512kB (UME) 3*1024kB (UME) 1*2048kB (U) 0*4096kB = 10968kB [ 3337.248513] lowmem_reserve[]: 0 0 0 0 0 [ 3337.263621] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3337.276600] Node 0 DMA32: 810*4kB (ME) 799*8kB (UME) 161*16kB (ME) 29*32kB (UME) 14*64kB (M) 10*128kB (M) 3*256kB (M) 0*512kB 2*1024kB (M) 0*2048kB 0*4096kB = 18128kB [ 3337.294723] lowmem_reserve[]: 0 0 0 0 0 [ 3337.315855] Node 1 Normal free:26808kB min:53696kB low:67120kB high:80544kB active_anon:1184kB inactive_anon:54644kB active_file:20kB inactive_file:16kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:288kB pagetables:236kB bounce:0kB free_pcp:180kB local_pcp:120kB free_cma:0kB [ 3337.323192] Node 0 [ 3337.355422] lowmem_reserve[]: 0 0 0 0 0 [ 3337.359773] Normal: [ 3337.361749] Node 0 [ 3337.361752] 0*4kB 0*8kB [ 3337.364056] DMA: 12*4kB (UME) 13*8kB (ME) 14*16kB (UME) 19*32kB (UME) 8*64kB (UM) 12*128kB (UME) 5*256kB (UME) 3*512kB (UME) 3*1024kB (UME) 1*2048kB (U) 0*4096kB = 10968kB [ 3337.381254] 0*16kB [ 3337.405800] Node 0 DMA32: 810*4kB (ME) 799*8kB (UME) 161*16kB (ME) 29*32kB (UME) 14*64kB (M) 10*128kB (M) 3*256kB (M) 0*512kB 2*1024kB (M) 0*2048kB 0*4096kB = 18128kB [ 3337.410430] 0*32kB [ 3337.433869] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 3337.438159] 0*64kB [ 3337.458075] Node 1 Normal: 108*4kB (M) 47*8kB (UM) 35*16kB (M) 27*32kB (UM) 42*64kB (M) 27*128kB (UM) 14*256kB (M) 29*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 26808kB [ 3337.462363] 0*128kB [ 3337.486036] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3337.490319] 0*256kB [ 3337.508123] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3337.512685] 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 3337.524196] Node 1 Normal: 108*4kB (M) 47*8kB (UM) 35*16kB (M) 27*32kB (UM) 42*64kB (M) 27*128kB (UM) 14*256kB (M) 29*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 26808kB [ 3337.524396] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3337.554109] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3337.557887] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3337.574408] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3337.581180] 90928 total pagecache pages [ 3337.589212] 0 pages in swap cache [ 3337.591530] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3337.592693] Swap cache stats: add 0, delete 0, find 0/0 [ 3337.610866] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3337.616309] Free swap = 0kB [ 3337.622477] Total swap = 0kB [ 3337.630211] 90928 total pagecache pages [ 3337.633147] 2097051 pages RAM [ 3337.634281] 0 pages in swap cache [ 3337.640439] 0 pages HighMem/MovableOnly [ 3337.653092] 363840 pages reserved [ 3337.653643] Swap cache stats: add 0, delete 0, find 0/0 [ 3337.658577] 0 pages cma reserved [ 3337.670889] Free swap = 0kB [ 3337.673917] Total swap = 0kB [ 3337.689108] 2097051 pages RAM [ 3337.699336] 0 pages HighMem/MovableOnly [ 3337.729131] 363840 pages reserved [ 3337.751648] 0 pages cma reserved [ 3337.762488] Out of memory (oom_kill_allocating_task): Kill process 7977 (syz-fuzzer) score 0 or sacrifice child [ 3337.815315] Killed process 16355 (syz-executor.1) total-vm:84924kB, anon-rss:64kB, file-rss:0kB, shmem-rss:0kB [ 3337.827237] systemd[1]: systemd-journald.service: Failed with result 'signal'. [ 3337.845614] systemd[1]: systemd-rfkill.service: Main process exited, code=killed, status=9/KILL [ 3337.851875] oom_reaper: reaped process 16326 (syz-executor.4), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 3337.871441] systemd[1]: systemd-rfkill.service: Unit entered failed state. [ 3337.894920] systemd[1]: systemd-rfkill.service: Failed with result 'signal'. [ 3337.902737] systemd[1]: systemd-journald.service: Service has no hold-off time, scheduling restart. [ 3337.965345] systemd[1]: Stopped Journal Service. [ 3338.010799] systemd[1]: Starting Journal Service... [ 3338.431016] systemd-journald[16361]: File /run/log/journal/64dd78f1a75445a997c532444ad0f085/system.journal corrupted or uncleanly shut down, renaming and replacing. [ 3338.513800] oom_reaper: reaped process 16323 (syz-executor.5), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 3338.546354] rs:main Q:Reg invoked oom-killer: gfp_mask=0x1c200ca(GFP_HIGHUSER_MOVABLE|__GFP_WRITE), nodemask=(null), order=0, oom_score_adj=0 [ 3338.584013] rs:main Q:Reg cpuset=/ mems_allowed=0-1 [ 3338.589239] CPU: 0 PID: 11709 Comm: rs:main Q:Reg Not tainted 4.14.225-syzkaller #0 [ 3338.597035] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3338.607299] Call Trace: [ 3338.609894] dump_stack+0x1b2/0x281 [ 3338.613609] dump_header+0x178/0x82f [ 3338.617330] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 3338.622430] ? ___ratelimit+0x2cd/0x530 [ 3338.626403] oom_kill_process.cold+0x10/0xb18 [ 3338.630906] out_of_memory+0xe3e/0x1190 [ 3338.634963] ? oom_killer_disable+0x1c0/0x1c0 [ 3338.639441] ? mutex_trylock+0x152/0x1a0 [ 3338.643481] __alloc_pages_nodemask+0x23e1/0x2720 [ 3338.648326] ? trace_hardirqs_on+0x10/0x10 [ 3338.652627] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3338.657462] ? __radix_tree_lookup+0x1b5/0x2e0 [ 3338.662218] alloc_pages_current+0x155/0x260 [ 3338.666610] pagecache_get_page+0x3f5/0xab0 [ 3338.671272] grab_cache_page_write_begin+0x63/0x90 [ 3338.676182] ext4_da_write_begin+0x249/0xe70 [ 3338.680573] ? __ext4_journal_stop+0xe7/0x1b0 [ 3338.685045] ? ext4_write_begin+0x1260/0x1260 [ 3338.689520] ? balance_dirty_pages_ratelimited+0x8cd/0x1800 [ 3338.695210] generic_perform_write+0x1c9/0x420 [ 3338.699772] ? __mnt_drop_write_file+0x5f/0x90 [ 3338.704329] ? filemap_page_mkwrite+0x2d0/0x2d0 [ 3338.708974] ? current_time+0xb0/0xb0 [ 3338.712778] ? ext4_file_write_iter+0x1cc/0xd20 [ 3338.717424] __generic_file_write_iter+0x227/0x590 [ 3338.722333] ext4_file_write_iter+0x276/0xd20 [ 3338.726810] ? aa_file_perm+0x304/0xab0 [ 3338.730762] ? ext4_file_read_iter+0x330/0x330 [ 3338.735324] ? trace_hardirqs_on+0x10/0x10 [ 3338.739539] ? iov_iter_init+0xa6/0x1c0 [ 3338.743580] __vfs_write+0x44c/0x630 [ 3338.747272] ? kernel_read+0x110/0x110 [ 3338.751153] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 3338.756244] vfs_write+0x17f/0x4d0 [ 3338.760108] SyS_write+0xf2/0x210 [ 3338.763647] ? SyS_read+0x210/0x210 [ 3338.767269] ? __do_page_fault+0x159/0xad0 [ 3338.771483] ? do_syscall_64+0x4c/0x640 [ 3338.775880] ? SyS_read+0x210/0x210 [ 3338.779495] do_syscall_64+0x1d5/0x640 [ 3338.783378] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3338.788574] RIP: 0033:0x7f73928e11cd [ 3338.792273] RSP: 002b:00007f738fe9c590 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 3338.799964] RAX: ffffffffffffffda RBX: 00007f7384027480 RCX: 00007f73928e11cd [ 3338.807213] RDX: 0000000000000092 RSI: 00007f7384027480 RDI: 0000000000000008 [ 3338.814472] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 3338.822239] R10: 0000000000000000 R11: 0000000000000293 R12: 00007f73840271c0 [ 3338.829485] R13: 00007f738fe9c5b0 R14: 00005648ad0d8800 R15: 0000000000000092 [ 3338.871645] Mem-Info: [ 3338.898700] active_anon:16390 inactive_anon:91043 isolated_anon:0 [ 3338.898700] active_file:88 inactive_file:64 isolated_file:1 [ 3338.898700] unevictable:0 dirty:41 writeback:0 unstable:0 [ 3338.898700] slab_reclaimable:12077 slab_unreclaimable:117660 [ 3338.898700] mapped:43654 shmem:91915 pagetables:700 bounce:0 [ 3338.898700] free:13855 free_pcp:353 free_cma:0 [ 3338.932602] syz-executor.4: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 3338.932627] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 3338.932649] CPU: 1 PID: 16326 Comm: syz-executor.4 Not tainted 4.14.225-syzkaller #0 [ 3338.932655] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3338.932658] Call Trace: [ 3338.932674] dump_stack+0x1b2/0x281 [ 3338.932687] warn_alloc.cold+0x96/0x1cc [ 3338.932697] ? zone_watermark_ok_safe+0x220/0x220 [ 3338.932717] __alloc_pages_nodemask+0x2127/0x2720 [ 3338.968336] Node 0 active_anon:64040kB inactive_anon:305448kB active_file:80kB inactive_file:48kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:174104kB dirty:0kB writeback:0kB shmem:308544kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3338.970448] ? lock_acquire+0x170/0x3f0 [ 3338.974050] Node 1 active_anon:1520kB inactive_anon:58724kB active_file:48kB inactive_file:108kB unevictable:0kB isolated(anon):0kB isolated(file):4kB mapped:112kB dirty:164kB writeback:0kB shmem:59116kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 3338.978000] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3338.978015] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 3338.978025] ? __mutex_unlock_slowpath+0x75/0x770 [ 3338.978038] alloc_pages_current+0x155/0x260 [ 3338.978053] ion_page_pool_alloc+0x118/0x1b0 [ 3338.982862] Node 0 [ 3338.987685] ion_system_heap_allocate+0x133/0x8c0 [ 3338.987696] ? _raw_spin_unlock+0x29/0x40 [ 3338.987707] ? _ion_heap_freelist_drain+0x6e/0x410 [ 3339.015600] DMA free:10976kB min:204kB low:252kB high:300kB active_anon:100kB inactive_anon:980kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:4kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3339.019543] ? ion_system_contig_heap_create+0x130/0x130 [ 3339.047066] lowmem_reserve[]: [ 3339.051975] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 3339.057473] 0 [ 3339.062591] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 3339.067012] 2717 [ 3339.071400] ion_alloc+0x27a/0x810 [ 3339.073606] 2718 [ 3339.078448] ? ion_dma_buf_release+0x40/0x40 [ 3339.078465] ? __might_fault+0x177/0x1b0 [ 3339.082595] 2718 [ 3339.087511] ion_ioctl+0xea/0x1f0 [ 3339.087521] ? ion_query_heaps+0x360/0x360 [ 3339.087531] ? __fget+0x1fe/0x360 [ 3339.115779] 2718 [ 3339.121271] ? ion_query_heaps+0x360/0x360 [ 3339.129338] do_vfs_ioctl+0x75a/0xff0 [ 3339.131138] Node 0 [ 3339.136243] ? ioctl_preallocate+0x1a0/0x1a0 [ 3339.136253] ? lock_downgrade+0x740/0x740 [ 3339.136265] ? __fget+0x225/0x360 [ 3339.136273] ? do_vfs_ioctl+0xff0/0xff0 [ 3339.136286] ? security_file_ioctl+0x83/0xb0 [ 3339.138338] DMA32 free:17852kB min:36200kB low:45248kB high:54296kB active_anon:63940kB inactive_anon:304468kB active_file:80kB inactive_file:48kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7328kB pagetables:2668kB bounce:0kB free_pcp:120kB local_pcp:120kB free_cma:0kB [ 3339.141938] SyS_ioctl+0x7f/0xb0 [ 3339.144002] lowmem_reserve[]: [ 3339.148405] ? do_vfs_ioctl+0xff0/0xff0 [ 3339.148415] do_syscall_64+0x1d5/0x640 [ 3339.148430] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3339.148439] RIP: 0033:0x465f69 [ 3339.152473] 0 [ 3339.154512] RSP: 002b:00007fbb52cf0188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3339.154522] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 3339.154527] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 3339.154532] RBP: 00000000004bfa8f R08: 0000000000000000 R09: 0000000000000000 [ 3339.154538] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 3339.157964] 0 [ 3339.162171] R13: 00007ffc0aef8def R14: 00007fbb52cf0300 R15: 0000000000022000 [ 3339.176159] Mem-Info: [ 3339.190738] 0 [ 3339.194233] active_anon:16390 inactive_anon:91043 isolated_anon:0 [ 3339.194233] active_file:32 inactive_file:13 isolated_file:1 [ 3339.194233] unevictable:0 dirty:41 writeback:0 unstable:0 [ 3339.194233] slab_reclaimable:12077 slab_unreclaimable:117660 [ 3339.194233] mapped:43554 shmem:91915 pagetables:700 bounce:0 [ 3339.194233] free:13848 free_pcp:406 free_cma:0 [ 3339.201163] 0 [ 3339.229593] Node 0 active_anon:64040kB inactive_anon:305448kB active_file:80kB inactive_file:48kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:174104kB dirty:0kB writeback:0kB shmem:308544kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3339.239044] 0 [ 3339.242989] Node 1 active_anon:1520kB inactive_anon:58724kB active_file:48kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):4kB mapped:112kB dirty:164kB writeback:0kB shmem:59116kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3339.248241] Node 0 [ 3339.253600] Node 0 [ 3339.263444] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3339.271441] DMA free:10976kB min:204kB low:252kB high:300kB active_anon:100kB inactive_anon:980kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:4kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3339.278627] lowmem_reserve[]: [ 3339.283867] lowmem_reserve[]: [ 3339.291169] 0 0 0 0 0 [ 3339.291187] Node 1 Normal free:26564kB min:53696kB low:67120kB high:80544kB active_anon:1520kB inactive_anon:58724kB active_file:688kB inactive_file:304kB unevictable:0kB writepending:164kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:256kB pagetables:128kB bounce:0kB free_pcp:1504kB local_pcp:772kB free_cma:0kB [ 3339.291205] lowmem_reserve[]: 0 0 0 0 0 [ 3339.291222] Node 0 DMA: 8*4kB (ME) [ 3339.295822] 0 [ 3339.303441] 10*8kB [ 3339.305827] 2717 [ 3339.346258] (ME) [ 3339.389530] 2718 [ 3339.401706] 17*16kB [ 3339.403930] 2718 [ 3339.431830] (UME) [ 3339.458072] 2718 [ 3339.461442] 17*32kB [ 3339.498002] (UME) [ 3339.504087] Node 0 [ 3339.507470] 5*64kB [ 3339.509465] DMA32 free:17952kB min:36200kB low:45248kB high:54296kB active_anon:63940kB inactive_anon:304468kB active_file:80kB inactive_file:48kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7328kB pagetables:2668kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3339.511526] (U) [ 3339.513824] lowmem_reserve[]: [ 3339.515905] 10*128kB (UME) 5*256kB (UME) 2*512kB (UE) 4*1024kB (UME) 1*2048kB [ 3339.520185] 0 [ 3339.522476] (M) [ 3339.524646] 0 0 0 0 [ 3339.524662] Node 0 [ 3339.528955] 0*4096kB [ 3339.529106] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3339.563459] = 10976kB [ 3339.566553] lowmem_reserve[]: [ 3339.570959] Node 0 [ 3339.575597] 0 [ 3339.576926] DMA32: [ 3339.579284] 0 [ 3339.581591] 843*4kB [ 3339.583978] 0 0 0 [ 3339.631033] Node 1 Normal free:26800kB min:53696kB low:67120kB high:80544kB active_anon:1520kB inactive_anon:58724kB active_file:448kB inactive_file:384kB unevictable:0kB writepending:164kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:256kB pagetables:128kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3339.642408] (UME) 785*8kB (UME) 157*16kB (ME) 27*32kB (UME) 18*64kB (UM) 10*128kB (UM) 10*256kB (UM) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18020kB [ 3339.662695] lowmem_reserve[]: 0 0 0 0 0 [ 3339.682997] Node 0 DMA: 8*4kB (ME) 10*8kB (ME) 17*16kB (UME) 17*32kB (UME) 5*64kB (U) 10*128kB (UME) 5*256kB (UME) 2*512kB (UE) 4*1024kB (UME) 1*2048kB (M) 0*4096kB = 10976kB [ 3339.683930] Node 0 [ 3339.703229] Node 0 DMA32: 843*4kB (UME) 785*8kB (UME) 157*16kB (ME) 27*32kB (UME) 18*64kB (UM) 10*128kB (UM) 10*256kB (UM) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18020kB [ 3339.707757] Normal: [ 3339.724322] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 3339.729153] 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 3339.739986] Node 1 Normal: 209*4kB (M) 134*8kB (M) 117*16kB (M) 94*32kB (M) 57*64kB (UM) 15*128kB (M) 7*256kB (UM) 25*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 26948kB [ 3339.768802] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3339.777725] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3339.784490] Node 1 Normal: 209*4kB (M) 134*8kB (M) 117*16kB (M) 94*32kB (M) 57*64kB (UM) 15*128kB (M) 7*256kB (UM) 25*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 26948kB [ 3339.789925] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3339.814472] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3339.823332] 92000 total pagecache pages [ 3339.827426] 0 pages in swap cache [ 3339.830874] Swap cache stats: add 0, delete 0, find 0/0 [ 3339.839507] Free swap = 0kB [ 3339.842523] Total swap = 0kB [ 3339.845589] 2097051 pages RAM [ 3339.848680] 0 pages HighMem/MovableOnly [ 3339.852725] 363840 pages reserved [ 3339.856082] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3339.858966] 0 pages cma reserved [ 3339.878360] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3339.888337] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3339.899690] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3339.904218] syz-executor.5: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 3339.908325] 91985 total pagecache pages [ 3339.926432] 0 pages in swap cache [ 3339.929898] Swap cache stats: add 0, delete 0, find 0/0 [ 3339.934188] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 3339.935303] Free swap = 0kB [ 3339.940366] CPU: 0 PID: 16323 Comm: syz-executor.5 Not tainted 4.14.225-syzkaller #0 [ 3339.943618] Total swap = 0kB [ 3339.951479] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3339.951483] Call Trace: [ 3339.951502] dump_stack+0x1b2/0x281 [ 3339.951515] warn_alloc.cold+0x96/0x1cc [ 3339.951527] ? zone_watermark_ok_safe+0x220/0x220 [ 3339.951536] ? usleep_range+0x130/0x130 [ 3339.951543] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 3339.951554] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 3339.951563] ? run_timer_softirq+0x5a0/0x5a0 [ 3339.951578] __alloc_pages_nodemask+0x2127/0x2720 [ 3339.957071] 2097051 pages RAM [ 3339.965931] ? lock_acquire+0x170/0x3f0 [ 3339.965947] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3339.965958] ? ion_page_pool_alloc+0x9e/0x1b0 [ 3339.965973] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 3339.965998] alloc_pages_current+0x155/0x260 [ 3339.966009] ion_page_pool_alloc+0x118/0x1b0 [ 3339.968587] 0 pages HighMem/MovableOnly [ 3339.972228] ion_system_heap_allocate+0x133/0x8c0 [ 3339.985369] 363840 pages reserved [ 3339.990075] ? ion_alloc+0x187/0x810 [ 3340.029242] 0 pages cma reserved [ 3340.031765] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 3340.046474] Out of memory (oom_kill_allocating_task): Kill process 11709 (rs:main Q:Reg) score 0 or sacrifice child [ 3340.049950] ? ion_system_contig_heap_create+0x130/0x130 [ 3340.054953] Killed process 11693 (rsyslogd) total-vm:254332kB, anon-rss:1240kB, file-rss:0kB, shmem-rss:0kB [ 3340.058568] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 3340.064214] syz-executor.4: [ 3340.065692] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 3340.071112] page allocation failure: order:0 [ 3340.081758] ion_alloc+0x204/0x810 [ 3340.081772] ? ion_dma_buf_release+0x40/0x40 [ 3340.081783] ? __might_fault+0x177/0x1b0 [ 3340.081794] ion_ioctl+0xea/0x1f0 [ 3340.081803] ? ion_query_heaps+0x360/0x360 [ 3340.081813] ? __fget+0x1fe/0x360 [ 3340.128783] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 3340.131823] ? ion_query_heaps+0x360/0x360 [ 3340.151305] (null) [ 3340.152776] do_vfs_ioctl+0x75a/0xff0 [ 3340.154969] syz-executor.4 cpuset=/ [ 3340.158681] ? ioctl_preallocate+0x1a0/0x1a0 [ 3340.158693] ? lock_downgrade+0x740/0x740 [ 3340.162292] mems_allowed=0-1 [ 3340.167120] ? __fget+0x225/0x360 [ 3340.167128] ? do_vfs_ioctl+0xff0/0xff0 [ 3340.167142] ? security_file_ioctl+0x83/0xb0 [ 3340.167151] SyS_ioctl+0x7f/0xb0 [ 3340.167158] ? do_vfs_ioctl+0xff0/0xff0 [ 3340.167170] do_syscall_64+0x1d5/0x640 [ 3340.167186] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3340.174123] in:imklog: [ 3340.174400] RIP: 0033:0x465f69 [ 3340.177826] page allocation failure: order:0 [ 3340.181792] RSP: 002b:00007f08137cb188 EFLAGS: 00000246 [ 3340.191248] rs:main Q:Reg: [ 3340.193496] ORIG_RAX: 0000000000000010 [ 3340.198569] , mode:0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask= [ 3340.202540] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 3340.205212] page allocation failure: order:0 [ 3340.208451] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 3340.212835] , mode:0x1c200ca(GFP_HIGHUSER_MOVABLE|__GFP_WRITE), nodemask= [ 3340.218173] RBP: 00000000004bfa8f R08: 0000000000000000 R09: 0000000000000000 [ 3340.218179] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 3340.218183] R13: 00007ffeb8b6e44f R14: 00007f08137cb300 R15: 0000000000022000 [ 3340.281230] (null) [ 3340.283384] in:imklog cpuset=/ mems_allowed=0-1 [ 3340.288398] CPU: 1 PID: 16326 Comm: syz-executor.4 Not tainted 4.14.225-syzkaller #0 [ 3340.296360] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3340.305709] Call Trace: [ 3340.308310] dump_stack+0x1b2/0x281 [ 3340.309060] oom_reaper: reaped process 11693 (rsyslogd), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 3340.311961] warn_alloc.cold+0x96/0x1cc [ 3340.322129] Mem-Info: [ 3340.325515] ? zone_watermark_ok_safe+0x220/0x220 [ 3340.325525] ? usleep_range+0x130/0x130 [ 3340.325532] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 3340.325544] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 3340.327945] active_anon:16090 inactive_anon:91043 isolated_anon:0 [ 3340.327945] active_file:66 inactive_file:26 isolated_file:0 [ 3340.327945] unevictable:0 dirty:36 writeback:0 unstable:0 [ 3340.327945] slab_reclaimable:12069 slab_unreclaimable:117652 [ 3340.327945] mapped:43522 shmem:91915 pagetables:700 bounce:0 [ 3340.327945] free:14029 free_pcp:286 free_cma:0 [ 3340.332763] ? run_timer_softirq+0x5a0/0x5a0 [ 3340.336744] Node 0 active_anon:63040kB inactive_anon:305448kB active_file:44kB inactive_file:56kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:174084kB dirty:0kB writeback:0kB shmem:308544kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3340.341796] __alloc_pages_nodemask+0x2127/0x2720 [ 3340.346814] Node 1 active_anon:1320kB inactive_anon:58724kB active_file:220kB inactive_file:48kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:4kB dirty:144kB writeback:0kB shmem:59116kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3340.381746] ? lock_acquire+0x170/0x3f0 [ 3340.381760] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3340.381772] ? ion_page_pool_alloc+0x9e/0x1b0 [ 3340.386266] Node 0 [ 3340.414082] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 3340.414102] alloc_pages_current+0x155/0x260 [ 3340.419366] DMA free:10996kB min:204kB low:252kB high:300kB active_anon:80kB inactive_anon:980kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:4kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3340.446405] ion_page_pool_alloc+0x118/0x1b0 [ 3340.446416] ion_system_heap_allocate+0x133/0x8c0 [ 3340.446429] ? _raw_spin_unlock+0x29/0x40 [ 3340.450676] lowmem_reserve[]: [ 3340.455213] ? _ion_heap_freelist_drain+0x6e/0x410 [ 3340.455224] ? ion_system_contig_heap_create+0x130/0x130 [ 3340.455234] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 3340.455245] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 3340.459726] 0 [ 3340.461945] ion_alloc+0x27a/0x810 [ 3340.468358] 2717 [ 3340.472742] ? ion_dma_buf_release+0x40/0x40 [ 3340.502747] 2718 [ 3340.507119] ? __might_fault+0x177/0x1b0 [ 3340.507135] ion_ioctl+0xea/0x1f0 [ 3340.511947] 2718 [ 3340.516074] ? ion_query_heaps+0x360/0x360 [ 3340.516084] ? __fget+0x1fe/0x360 [ 3340.516095] ? ion_query_heaps+0x360/0x360 [ 3340.519173] 2718 [ 3340.524094] do_vfs_ioctl+0x75a/0xff0 [ 3340.524106] ? ioctl_preallocate+0x1a0/0x1a0 [ 3340.524117] ? lock_downgrade+0x740/0x740 [ 3340.534810] ? __fget+0x225/0x360 [ 3340.534819] ? do_vfs_ioctl+0xff0/0xff0 [ 3340.534831] ? security_file_ioctl+0x83/0xb0 [ 3340.539906] Node 0 [ 3340.541691] SyS_ioctl+0x7f/0xb0 [ 3340.545281] DMA32 free:18296kB min:36200kB low:45248kB high:54296kB active_anon:62940kB inactive_anon:304468kB active_file:44kB inactive_file:56kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7264kB pagetables:2668kB bounce:0kB free_pcp:756kB local_pcp:636kB free_cma:0kB [ 3340.547273] ? do_vfs_ioctl+0xff0/0xff0 [ 3340.551747] lowmem_reserve[]: [ 3340.553866] do_syscall_64+0x1d5/0x640 [ 3340.557945] 0 [ 3340.561348] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3340.563385] 0 [ 3340.567611] RIP: 0033:0x465f69 [ 3340.567616] RSP: 002b:00007fbb52cf0188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3340.567626] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 3340.567630] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 3340.567637] RBP: 00000000004bfa8f R08: 0000000000000000 R09: 0000000000000000 [ 3340.571070] 0 [ 3340.575274] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 3340.575280] R13: 00007ffc0aef8def R14: 00007fbb52cf0300 R15: 0000000000022000 [ 3340.575768] CPU: 1 PID: 11708 Comm: in:imklog Not tainted 4.14.225-syzkaller #0 [ 3340.577898] 0 [ 3340.581138] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3340.588162] syz-fuzzer invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask= [ 3340.589914] Call Trace: [ 3340.593362] (null) [ 3340.597323] dump_stack+0x1b2/0x281 [ 3340.597334] warn_alloc.cold+0x96/0x1cc [ 3340.597344] ? zone_watermark_ok_safe+0x220/0x220 [ 3340.597358] ? unreserve_highatomic_pageblock+0x336/0x460 [ 3340.620178] 0 [ 3340.635966] ? wait_for_completion_io+0x10/0x10 [ 3340.635980] __alloc_pages_nodemask+0x2127/0x2720 [ 3340.636000] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3340.639962] , order=0, oom_score_adj=0 [ 3340.643050] alloc_pages_current+0x155/0x260 [ 3340.647015] syz-fuzzer cpuset= [ 3340.648768] filemap_fault+0xea3/0x1980 [ 3340.653930] / [ 3340.655721] ext4_filemap_fault+0x84/0xb0 [ 3340.666563] __do_fault+0xfa/0x380 [ 3340.666573] __handle_mm_fault+0x2497/0x4620 [ 3340.666583] ? vm_insert_page+0x7c0/0x7c0 [ 3340.673841] mems_allowed=0-1 [ 3340.681258] ? lock_downgrade+0x740/0x740 [ 3340.681276] handle_mm_fault+0x391/0x860 [ 3340.681288] __do_page_fault+0x549/0xad0 [ 3340.688978] Node 0 [ 3340.690417] ? spurious_fault+0x640/0x640 [ 3340.703994] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3340.704925] ? do_page_fault+0x60/0x500 [ 3340.712354] lowmem_reserve[]: [ 3340.714436] ? page_fault+0x2f/0x50 [ 3340.714443] page_fault+0x45/0x50 [ 3340.714451] RIP: 1fa0:0x1f9f [ 3340.714455] RSP: 0000:00005648ad0db9d0 EFLAGS: 7f739027dda0 [ 3340.715064] (null) [ 3340.723891] CPU: 0 PID: 7977 Comm: syz-fuzzer Not tainted 4.14.225-syzkaller #0 [ 3340.723897] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3340.733764] rs:main Q:Reg cpuset= [ 3340.736151] Call Trace: [ 3340.736172] dump_stack+0x1b2/0x281 [ 3340.736183] dump_header+0x178/0x82f [ 3340.736194] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 3340.736202] ? ___ratelimit+0x2cd/0x530 [ 3340.736211] oom_kill_process.cold+0x10/0xb18 [ 3340.736228] out_of_memory+0xe3e/0x1190 [ 3340.738353] / [ 3340.741993] ? oom_killer_disable+0x1c0/0x1c0 [ 3340.742001] ? mutex_trylock+0x152/0x1a0 [ 3340.746145] mems_allowed=0-1 [ 3340.750911] __alloc_pages_nodemask+0x23e1/0x2720 [ 3340.943512] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3340.948388] alloc_pages_current+0x155/0x260 [ 3340.953159] filemap_fault+0xea3/0x1980 [ 3340.957331] ext4_filemap_fault+0x84/0xb0 [ 3340.961467] __do_fault+0xfa/0x380 [ 3340.965027] __handle_mm_fault+0x2497/0x4620 [ 3340.969429] ? vm_insert_page+0x7c0/0x7c0 [ 3340.973585] ? __fget+0x225/0x360 [ 3340.977027] handle_mm_fault+0x391/0x860 [ 3340.981076] __do_page_fault+0x549/0xad0 [ 3340.983978] 0 0 [ 3340.985124] ? spurious_fault+0x640/0x640 [ 3340.985129] 0 [ 3340.987104] ? do_page_fault+0x60/0x500 [ 3340.991237] 0 [ 3340.993023] ? page_fault+0x2f/0x50 [ 3341.002389] page_fault+0x45/0x50 [ 3341.005827] RIP: 0000:0x93f280 [ 3341.009152] RSP: 0c00:000000c00003dee0 EFLAGS: 0043b6a0 [ 3341.009175] CPU: 1 PID: 11709 Comm: rs:main Q:Reg Not tainted 4.14.225-syzkaller #0 [ 3341.022417] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3341.031963] Call Trace: [ 3341.034572] dump_stack+0x1b2/0x281 [ 3341.038209] warn_alloc.cold+0x96/0x1cc [ 3341.042189] ? zone_watermark_ok_safe+0x220/0x220 [ 3341.047075] ? unreserve_highatomic_pageblock+0x336/0x460 [ 3341.052622] ? wait_for_completion_io+0x10/0x10 [ 3341.057572] __alloc_pages_nodemask+0x2127/0x2720 [ 3341.062515] ? trace_hardirqs_on+0x10/0x10 [ 3341.066795] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3341.071662] ? __radix_tree_lookup+0x1b5/0x2e0 [ 3341.076282] alloc_pages_current+0x155/0x260 [ 3341.080720] pagecache_get_page+0x3f5/0xab0 [ 3341.085062] grab_cache_page_write_begin+0x63/0x90 [ 3341.090009] ext4_da_write_begin+0x249/0xe70 [ 3341.094450] ? __ext4_journal_stop+0xe7/0x1b0 [ 3341.098964] ? ext4_write_begin+0x1260/0x1260 [ 3341.103490] ? balance_dirty_pages_ratelimited+0x8cd/0x1800 [ 3341.109221] generic_perform_write+0x1c9/0x420 [ 3341.113826] ? __mnt_drop_write_file+0x5f/0x90 [ 3341.118421] ? filemap_page_mkwrite+0x2d0/0x2d0 [ 3341.123109] ? current_time+0xb0/0xb0 [ 3341.126921] ? ext4_file_write_iter+0x1cc/0xd20 [ 3341.131619] __generic_file_write_iter+0x227/0x590 [ 3341.136572] ext4_file_write_iter+0x276/0xd20 [ 3341.141259] ? aa_file_perm+0x304/0xab0 [ 3341.145249] ? ext4_file_read_iter+0x330/0x330 [ 3341.149848] ? trace_hardirqs_on+0x10/0x10 [ 3341.154094] ? iov_iter_init+0xa6/0x1c0 [ 3341.158300] __vfs_write+0x44c/0x630 [ 3341.162051] ? kernel_read+0x110/0x110 [ 3341.165964] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 3341.171016] vfs_write+0x17f/0x4d0 [ 3341.174569] SyS_write+0xf2/0x210 [ 3341.178041] ? SyS_read+0x210/0x210 [ 3341.181673] ? __do_page_fault+0x159/0xad0 [ 3341.185915] ? do_syscall_64+0x4c/0x640 [ 3341.190087] ? SyS_read+0x210/0x210 [ 3341.193749] do_syscall_64+0x1d5/0x640 [ 3341.197654] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3341.202853] RIP: 0033:0x7f73928e11cd [ 3341.206565] RSP: 002b:00007f738fe9c590 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 3341.214281] RAX: ffffffffffffffda RBX: 00007f7384027480 RCX: 00007f73928e11cd [ 3341.221559] RDX: 0000000000000092 RSI: 00007f7384027480 RDI: 0000000000000008 [ 3341.228836] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 3341.236112] R10: 0000000000000000 R11: 0000000000000293 R12: 00007f73840271c0 [ 3341.243606] R13: 00007f738fe9c5b0 R14: 00005648ad0d8800 R15: 0000000000000092 [ 3341.252074] 0 [ 3341.254044] Node 1 Normal free:857140kB min:53696kB low:67120kB high:80544kB active_anon:1252kB inactive_anon:54652kB active_file:64kB inactive_file:224kB unevictable:0kB writepending:144kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:288kB pagetables:128kB bounce:0kB free_pcp:720kB local_pcp:120kB free_cma:0kB [ 3341.284687] lowmem_reserve[]: 0 0 0 0 0 [ 3341.289102] Node 0 DMA: 6*4kB (UME) 4*8kB (UE) 3*16kB (UME) 14*32kB (UE) 6*64kB (UM) 8*128kB (UME) 5*256kB (UME) 3*512kB (UME) 3*1024kB (UME) 2*2048kB (UM) 0*4096kB = 11944kB [ 3341.305399] Node 0 DMA32: 842*4kB (UME) 924*8kB (UME) 172*16kB (UME) 34*32kB (UME) 624*64kB (UM) 167*128kB (UM) 16*256kB (UM) 0*512kB 2*1024kB (U) 0*2048kB 0*4096kB = 82056kB [ 3341.321701] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 3341.332987] Node 1 Normal: 163*4kB (UM) 137*8kB (UM) 108*16kB (M) 75*32kB (UM) 7999*64kB (UM) 297*128kB (UM) 194*256kB (UM) 40*512kB (UM) 257*1024kB (U) 15*2048kB (U) 0*4096kB = 919860kB [ 3341.350508] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3341.352855] Mem-Info: [ 3341.359897] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3341.371107] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3341.380520] active_anon:16062 inactive_anon:90025 isolated_anon:0 [ 3341.380520] active_file:79 inactive_file:947 isolated_file:0 [ 3341.380520] unevictable:0 dirty:11 writeback:0 unstable:0 [ 3341.380520] slab_reclaimable:12069 slab_unreclaimable:117300 [ 3341.380520] mapped:44147 shmem:90897 pagetables:700 bounce:0 [ 3341.380520] free:290964 free_pcp:446 free_cma:0 [ 3341.380988] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3341.424681] 92130 total pagecache pages [ 3341.425420] systemd-journald[16361]: Failed to open runtime journal: No space left on device [ 3341.429624] 0 pages in swap cache [ 3341.441180] Swap cache stats: add 0, delete 0, find 0/0 [ 3341.446829] Free swap = 0kB [ 3341.449871] Total swap = 0kB [ 3341.453040] 2097051 pages RAM [ 3341.456502] 0 pages HighMem/MovableOnly [ 3341.460565] 363840 pages reserved [ 3341.464355] 0 pages cma reserved [ 3341.474742] Node 0 active_anon:62996kB inactive_anon:305448kB active_file:252kB inactive_file:5064kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:177684kB dirty:0kB writeback:0kB shmem:308544kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3341.529023] warn_alloc_show_mem: 2 callbacks suppressed [ 3341.529028] Mem-Info: [ 3341.539396] systemd[1]: Starting Load/Save RF Kill Switch Status... [ 3341.547724] Node 1 active_anon:1252kB inactive_anon:54652kB active_file:64kB inactive_file:224kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:104kB dirty:44kB writeback:0kB shmem:55044kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3341.554069] active_anon:16087 inactive_anon:90025 isolated_anon:0 [ 3341.554069] active_file:179 inactive_file:1847 isolated_file:0 [ 3341.554069] unevictable:0 dirty:11 writeback:0 unstable:0 [ 3341.554069] slab_reclaimable:12069 slab_unreclaimable:117401 [ 3341.554069] mapped:44897 shmem:90897 pagetables:737 bounce:0 [ 3341.554069] free:339499 free_pcp:374 free_cma:0 [ 3341.610449] Node 0 DMA free:12108kB min:204kB low:252kB high:300kB active_anon:68kB inactive_anon:980kB active_file:220kB inactive_file:1084kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:4kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3341.674326] Node 0 active_anon:63132kB inactive_anon:305448kB active_file:872kB inactive_file:8624kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:180588kB dirty:36kB writeback:0kB shmem:308544kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3341.693810] lowmem_reserve[]: [ 3341.710921] systemd[1]: systemd-journald.service: Main process exited, code=exited, status=1/FAILURE [ 3341.717374] 0 2717 2718 2718 2718 [ 3341.740413] Node 0 DMA32 free:229156kB min:36200kB low:45248kB high:54296kB active_anon:63064kB inactive_anon:304468kB active_file:1404kB inactive_file:7260kB unevictable:0kB writepending:36kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7296kB pagetables:2652kB bounce:0kB free_pcp:780kB local_pcp:520kB free_cma:0kB [ 3341.742775] systemd[1]: Failed to start Journal Service. [ 3341.804410] Node 1 active_anon:852kB inactive_anon:54652kB active_file:36kB inactive_file:252kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:108kB dirty:52kB writeback:0kB shmem:55044kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3341.882966] Node 0 DMA free:12112kB min:204kB low:252kB high:300kB active_anon:68kB inactive_anon:980kB active_file:688kB inactive_file:644kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:4kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3341.903756] lowmem_reserve[]: 0 0 0 0 0 [ 3341.943778] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3341.973779] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 3341.978849] Node 0 DMA32 free:190776kB min:36200kB low:45248kB high:54296kB active_anon:63864kB inactive_anon:304468kB active_file:4004kB inactive_file:7160kB unevictable:0kB writepending:36kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7328kB pagetables:2948kB bounce:0kB free_pcp:808kB local_pcp:304kB free_cma:0kB [ 3342.003737] lowmem_reserve[]: 0 0 0 0 0 [ 3342.024063] Node 1 Normal free:1052340kB min:53696kB low:67120kB high:80544kB active_anon:852kB inactive_anon:54652kB active_file:36kB inactive_file:252kB unevictable:0kB writepending:40kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:224kB pagetables:128kB bounce:0kB free_pcp:1212kB local_pcp:604kB free_cma:0kB [ 3342.043781] lowmem_reserve[]: 0 0 0 0 0 [ 3342.060074] systemd-journald[16368]: File /run/log/journal/64dd78f1a75445a997c532444ad0f085/system.journal corrupted or uncleanly shut down, renaming and replacing. [ 3342.093762] lowmem_reserve[]: 0 0 0 0 0 [ 3342.093897] Node 0 [ 3342.097795] Node 0 [ 3342.097806] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3342.097810] lowmem_reserve[]: [ 3342.100021] DMA: [ 3342.102242] 0 0 0 0 0 [ 3342.145991] Node 1 Normal free:1052740kB min:53696kB low:67120kB high:80544kB active_anon:852kB inactive_anon:54652kB active_file:36kB inactive_file:252kB unevictable:0kB writepending:40kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:224kB pagetables:128kB bounce:0kB free_pcp:1344kB local_pcp:608kB free_cma:0kB [ 3342.176944] lowmem_reserve[]: 0 0 0 0 0 [ 3342.180951] Node 0 DMA: 21*4kB (UME) 5*8kB (UME) 3*16kB (UME) 15*32kB (UME) 13*64kB (U) 8*128kB (UME) 4*256kB (UE) 3*512kB (UME) 2*1024kB (ME) 2*2048kB (UM) 0*4096kB = 11212kB [ 3342.197724] Node 0 DMA32: 762*4kB (UME) 881*8kB (UME) 206*16kB (UME) 138*32kB (UE) 1981*64kB (UM) 261*128kB (UM) 6*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 179536kB [ 3342.206505] 21*4kB (UME) 5*8kB (UME) 3*16kB (UME) 15*32kB (UME) 13*64kB (U) 8*128kB (UME) 4*256kB (UE) 3*512kB (UME) 2*1024kB (ME) [ 3342.213215] Node 0 [ 3342.213219] 2*2048kB (UM) [ 3342.228065] Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 3342.253695] Node 1 Normal: 364*4kB (UM) 203*8kB (UM) 149*16kB (UM) 161*32kB (UM) 14472*64kB (UM) 720*128kB (UM) 228*256kB (UM) 71*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 1123704kB [ 3342.254188] 0*4096kB = 11212kB [ 3342.287273] Node 0 DMA32: 762*4kB (UME) 812*8kB (UME) 206*16kB (UME) 138*32kB (UE) 1981*64kB (UM) 261*128kB (UM) 6*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 178984kB [ 3342.293828] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3342.323683] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 3342.335533] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3342.343675] Node 1 Normal: 365*4kB (UM) 203*8kB (UM) 149*16kB (UM) 162*32kB (UM) 15289*64kB (UM) 721*128kB (UM) 228*256kB (UM) 71*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 1176156kB [ 3342.366461] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3342.373663] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3342.384889] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3342.393466] 94102 total pagecache pages [ 3342.393626] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3342.407896] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3342.415514] 0 pages in swap cache [ 3342.418983] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3342.425022] Swap cache stats: add 0, delete 0, find 0/0 [ 3342.431366] 94139 total pagecache pages [ 3342.440849] 0 pages in swap cache [ 3342.444787] Swap cache stats: add 0, delete 0, find 0/0 [ 3342.451421] Free swap = 0kB [ 3342.455426] Free swap = 0kB [ 3342.457453] Total swap = 0kB [ 3342.459148] Total swap = 0kB [ 3342.462371] 2097051 pages RAM [ 3342.471340] 0 pages HighMem/MovableOnly [ 3342.475355] 2097051 pages RAM [ 3342.475359] 0 pages HighMem/MovableOnly [ 3342.475361] 363840 pages reserved [ 3342.475364] 0 pages cma reserved [ 3342.495493] 363840 pages reserved [ 3342.498972] 0 pages cma reserved [ 3342.502340] Out of memory (oom_kill_allocating_task): Kill process 7977 (syz-fuzzer) score 0 or sacrifice child [ 3342.512758] Killed process 16366 (syz-executor.1) total-vm:84924kB, anon-rss:60kB, file-rss:900kB, shmem-rss:0kB [ 3342.537516] oom_reaper: reaped process 16366 (syz-executor.1), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 3342.860655] systemd[1]: Started Journal Service. [ 3345.509248] IPVS: ftp: loaded support on port[0] = 21 [ 3345.625536] chnl_net:caif_netlink_parms(): no params data found [ 3345.728004] bridge0: port 1(bridge_slave_0) entered blocking state [ 3345.735523] bridge0: port 1(bridge_slave_0) entered disabled state [ 3345.742634] device bridge_slave_0 entered promiscuous mode [ 3345.750534] bridge0: port 2(bridge_slave_1) entered blocking state [ 3345.757220] bridge0: port 2(bridge_slave_1) entered disabled state [ 3345.765064] device bridge_slave_1 entered promiscuous mode [ 3345.786119] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 3345.796378] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 3345.816719] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 3345.823975] team0: Port device team_slave_0 added [ 3345.829399] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 3345.837987] team0: Port device team_slave_1 added [ 3345.856239] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3345.862491] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3345.888064] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3345.899170] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3345.905528] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3345.931315] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3345.942356] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 3345.950072] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 3345.972613] device hsr_slave_0 entered promiscuous mode [ 3345.978397] device hsr_slave_1 entered promiscuous mode [ 3345.984882] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 3345.992058] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 3346.069828] bridge0: port 2(bridge_slave_1) entered blocking state [ 3346.076449] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3346.083155] bridge0: port 1(bridge_slave_0) entered blocking state [ 3346.089516] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3346.123843] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 3346.130034] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3346.139427] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 3346.149056] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 3346.156583] bridge0: port 1(bridge_slave_0) entered disabled state [ 3346.165467] bridge0: port 2(bridge_slave_1) entered disabled state [ 3346.176424] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 3346.182725] 8021q: adding VLAN 0 to HW filter on device team0 [ 3346.192224] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 3346.200676] bridge0: port 1(bridge_slave_0) entered blocking state [ 3346.207253] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3346.223908] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 3346.231574] bridge0: port 2(bridge_slave_1) entered blocking state [ 3346.238031] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3346.253446] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 3346.261330] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 3346.269287] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 3346.280085] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 3346.288272] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 3346.298593] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 3346.305613] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 3346.319149] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 3346.327697] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 3346.334951] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 3346.347304] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3346.405504] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 3346.416319] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 3346.453801] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 3346.461255] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 3346.470145] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 3346.482351] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 3346.490582] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 3346.500491] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 3346.511418] device veth0_vlan entered promiscuous mode [ 3346.523639] device veth1_vlan entered promiscuous mode [ 3346.529678] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 3346.539495] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 3346.551880] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 3346.562195] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 3346.570114] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 3346.578471] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 3346.589124] device veth0_macvtap entered promiscuous mode [ 3346.596127] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 3346.605421] device veth1_macvtap entered promiscuous mode [ 3346.613223] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 3346.620530] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 3346.634173] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 3346.645528] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 3346.655275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 3346.665639] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3346.676003] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 3346.686428] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3346.695806] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 3346.705922] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3346.715730] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 3346.725883] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3346.735188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 3346.745146] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3346.756094] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 3346.763225] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 3346.770710] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 3346.779021] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 3346.788721] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 3346.798991] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3346.809537] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 3346.819911] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3346.829121] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 3346.839478] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3346.848673] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 3346.858622] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3346.867796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 3346.877947] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3346.888232] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 3346.895617] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 3346.902999] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 3346.910833] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 05:21:19 executing program 1: socketpair(0x1, 0x0, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bind$llc(r0, 0x0, 0x0) 05:21:19 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) write$dsp(0xffffffffffffffff, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x80000001, 0x32}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(0xffffffffffffffff, 0x7a5, &(0x7f0000000000)={{@any, 0x7}, 0x1, 0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(0xffffffffffffffff, 0x7a4, &(0x7f00000000c0)={{@hyper}, 0x9, 0x0, 0x13, 0x8}) 05:21:19 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) write$dsp(0xffffffffffffffff, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x80000001, 0x32}) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(0xffffffffffffffff, 0x7a5, &(0x7f0000000000)={{}, 0x1, 0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(0xffffffffffffffff, 0x7a4, &(0x7f00000000c0)={{@hyper}, 0x0, 0x3f}) 05:21:19 executing program 1: socketpair(0x1, 0x0, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bind$llc(r0, 0x0, 0x0) 05:21:19 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x40000, 0x0) openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x22000, 0x0) write$dsp(0xffffffffffffffff, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x2080000001, 0x32}) add_key(&(0x7f0000000040)='rxrpc\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) 05:21:19 executing program 1: socketpair(0x1, 0x0, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bind$llc(r0, 0x0, 0x0) 05:21:19 executing program 2: socketpair(0x1, 0x0, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) recvfrom$llc(r0, &(0x7f00000000c0)=""/131, 0x83, 0x1000, &(0x7f0000000000)={0x1a, 0x78e341917cb35c9f, 0x20, 0xc2, 0x7, 0x5, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x10) 05:21:19 executing program 0: ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x2080000001, 0x32}) 05:21:19 executing program 1: socketpair(0x1, 0x2, 0x0, 0x0) bind$llc(0xffffffffffffffff, 0x0, 0x0) 05:21:19 executing program 2: socketpair(0x1, 0x0, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) recvfrom$llc(r0, &(0x7f00000000c0)=""/131, 0x83, 0x1000, &(0x7f0000000000)={0x1a, 0x78e341917cb35c9f, 0x20, 0xc2, 0x7, 0x5, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x10) 05:21:19 executing program 1: socketpair(0x1, 0x2, 0x0, 0x0) bind$llc(0xffffffffffffffff, 0x0, 0x0) 05:21:19 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x40000, 0x0) openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x22000, 0x0) write$dsp(0xffffffffffffffff, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x2080000001, 0x32}) 05:21:19 executing program 2: socketpair(0x1, 0x2, 0x0, 0x0) recvfrom$llc(0xffffffffffffffff, &(0x7f00000000c0)=""/131, 0x83, 0x1000, &(0x7f0000000000)={0x1a, 0x78e341917cb35c9f, 0x20, 0xc2, 0x7, 0x5, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x10) 05:21:19 executing program 0: ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x2080000001, 0x32}) 05:21:19 executing program 1: socketpair(0x1, 0x2, 0x0, 0x0) bind$llc(0xffffffffffffffff, 0x0, 0x0) 05:21:19 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x40000, 0x0) openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x22000, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x2080000001, 0x32}) [ 3347.553016] Bluetooth: hci0 command 0x0409 tx timeout 05:21:20 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) write$dsp(0xffffffffffffffff, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x80000001, 0x32}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(0xffffffffffffffff, 0x7a5, &(0x7f0000000000)={{@any, 0x7}, 0x1, 0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(0xffffffffffffffff, 0x7a4, &(0x7f00000000c0)={{@hyper}, 0x9, 0x0, 0x13, 0x8}) 05:21:20 executing program 2: socketpair(0x1, 0x2, 0x0, 0x0) recvfrom$llc(0xffffffffffffffff, &(0x7f00000000c0)=""/131, 0x83, 0x1000, &(0x7f0000000000)={0x1a, 0x78e341917cb35c9f, 0x20, 0xc2, 0x7, 0x5, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x10) 05:21:20 executing program 1: socketpair(0x1, 0x2, 0x0, &(0x7f0000000080)) bind$llc(0xffffffffffffffff, 0x0, 0x0) 05:21:20 executing program 0: ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x2080000001, 0x32}) 05:21:20 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x40000, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x2080000001, 0x32}) 05:21:20 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) write$dsp(0xffffffffffffffff, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x80000001, 0x32}) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(0xffffffffffffffff, 0x7a5, &(0x7f0000000000)={{}, 0x1, 0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(0xffffffffffffffff, 0x7a4, &(0x7f00000000c0)={{@hyper}, 0x0, 0x3f}) 05:21:20 executing program 2: socketpair(0x1, 0x2, 0x0, 0x0) recvfrom$llc(0xffffffffffffffff, &(0x7f00000000c0)=""/131, 0x83, 0x1000, &(0x7f0000000000)={0x1a, 0x78e341917cb35c9f, 0x20, 0xc2, 0x7, 0x5, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x10) 05:21:20 executing program 1: socketpair(0x1, 0x2, 0x0, &(0x7f0000000080)) bind$llc(0xffffffffffffffff, 0x0, 0x0) 05:21:20 executing program 2: socketpair(0x1, 0x2, 0x0, &(0x7f0000000080)) recvfrom$llc(0xffffffffffffffff, &(0x7f00000000c0)=""/131, 0x83, 0x1000, &(0x7f0000000000)={0x1a, 0x78e341917cb35c9f, 0x20, 0xc2, 0x7, 0x5, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x10) 05:21:20 executing program 0: r0 = openat$ion(0xffffffffffffff9c, 0x0, 0x40000, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x2080000001, 0x32}) 05:21:20 executing program 2: socketpair(0x1, 0x2, 0x0, &(0x7f0000000080)) recvfrom$llc(0xffffffffffffffff, &(0x7f00000000c0)=""/131, 0x83, 0x1000, &(0x7f0000000000)={0x1a, 0x78e341917cb35c9f, 0x20, 0xc2, 0x7, 0x5, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x10) 05:21:20 executing program 0: r0 = openat$ion(0xffffffffffffff9c, 0x0, 0x40000, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x2080000001, 0x32}) [ 3349.193586] syz-executor.4: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 3349.207830] syz-executor.5: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 3349.220666] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 3349.227365] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 3349.233417] CPU: 1 PID: 16679 Comm: syz-executor.5 Not tainted 4.14.225-syzkaller #0 [ 3349.241429] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3349.251062] Call Trace: [ 3349.253648] dump_stack+0x1b2/0x281 [ 3349.257262] warn_alloc.cold+0x96/0x1cc [ 3349.261235] ? zone_watermark_ok_safe+0x220/0x220 [ 3349.266168] __alloc_pages_nodemask+0x2127/0x2720 [ 3349.270992] ? _raw_spin_unlock_irq+0x24/0x80 [ 3349.275560] ? lock_acquire+0x170/0x3f0 [ 3349.279615] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3349.284443] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 3349.289877] ? __mutex_unlock_slowpath+0x75/0x770 [ 3349.294707] alloc_pages_current+0x155/0x260 [ 3349.299103] ion_page_pool_alloc+0x118/0x1b0 [ 3349.303496] ion_system_heap_allocate+0x133/0x8c0 [ 3349.308322] ? ion_alloc+0x187/0x810 [ 3349.312016] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 3349.317482] ? ion_system_contig_heap_create+0x130/0x130 [ 3349.322917] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 3349.327917] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 3349.332750] ion_alloc+0x204/0x810 [ 3349.336364] ? ion_dma_buf_release+0x40/0x40 [ 3349.340765] ? __might_fault+0x177/0x1b0 [ 3349.344814] ion_ioctl+0xea/0x1f0 [ 3349.348251] ? ion_query_heaps+0x360/0x360 [ 3349.352487] ? __fget+0x1fe/0x360 [ 3349.355923] ? ion_query_heaps+0x360/0x360 [ 3349.360140] do_vfs_ioctl+0x75a/0xff0 [ 3349.363925] ? ioctl_preallocate+0x1a0/0x1a0 [ 3349.368400] ? lock_downgrade+0x740/0x740 [ 3349.372549] ? __fget+0x225/0x360 [ 3349.376078] ? do_vfs_ioctl+0xff0/0xff0 [ 3349.380055] ? security_file_ioctl+0x83/0xb0 [ 3349.384449] SyS_ioctl+0x7f/0xb0 [ 3349.387866] ? do_vfs_ioctl+0xff0/0xff0 [ 3349.391843] do_syscall_64+0x1d5/0x640 [ 3349.395719] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3349.400892] RIP: 0033:0x465f69 [ 3349.404063] RSP: 002b:00007f08137cb188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3349.411754] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 3349.419038] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 3349.427513] RBP: 00000000004bfa8f R08: 0000000000000000 R09: 0000000000000000 [ 3349.434764] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 3349.442016] R13: 00007ffeb8b6e44f R14: 00007f08137cb300 R15: 0000000000022000 [ 3349.462156] CPU: 1 PID: 16676 Comm: syz-executor.4 Not tainted 4.14.225-syzkaller #0 [ 3349.470334] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3349.479710] Call Trace: [ 3349.482314] dump_stack+0x1b2/0x281 [ 3349.486738] warn_alloc.cold+0x96/0x1cc [ 3349.490745] ? zone_watermark_ok_safe+0x220/0x220 [ 3349.495612] __alloc_pages_nodemask+0x2127/0x2720 [ 3349.500463] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 3349.505529] ? lock_acquire+0x170/0x3f0 [ 3349.509638] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3349.514502] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 3349.519974] ? __mutex_unlock_slowpath+0x75/0x770 [ 3349.524925] alloc_pages_current+0x155/0x260 [ 3349.529410] ion_page_pool_alloc+0x118/0x1b0 [ 3349.533804] ion_system_heap_allocate+0x133/0x8c0 [ 3349.538668] ? ion_alloc+0x187/0x810 [ 3349.542652] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 3349.549266] ? ion_system_contig_heap_create+0x130/0x130 [ 3349.555493] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 3349.560823] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 3349.565860] ion_alloc+0x204/0x810 [ 3349.569387] ? ion_dma_buf_release+0x40/0x40 [ 3349.573779] ? __might_fault+0x177/0x1b0 [ 3349.578033] ion_ioctl+0xea/0x1f0 [ 3349.581851] ? ion_query_heaps+0x360/0x360 [ 3349.586069] ? __fget+0x1fe/0x360 [ 3349.589848] ? ion_query_heaps+0x360/0x360 [ 3349.594238] do_vfs_ioctl+0x75a/0xff0 [ 3349.598371] ? ioctl_preallocate+0x1a0/0x1a0 [ 3349.603107] ? lock_downgrade+0x740/0x740 [ 3349.607248] ? __fget+0x225/0x360 [ 3349.611099] ? do_vfs_ioctl+0xff0/0xff0 [ 3349.615067] ? security_file_ioctl+0x83/0xb0 [ 3349.619462] SyS_ioctl+0x7f/0xb0 [ 3349.622829] ? do_vfs_ioctl+0xff0/0xff0 [ 3349.626811] do_syscall_64+0x1d5/0x640 [ 3349.630707] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3349.636343] RIP: 0033:0x465f69 [ 3349.639948] RSP: 002b:00007fbb52cf0188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3349.647741] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 3349.654989] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 3349.662501] RBP: 00000000004bfa8f R08: 0000000000000000 R09: 0000000000000000 [ 3349.669762] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 3349.677489] R13: 00007ffc0aef8def R14: 00007fbb52cf0300 R15: 0000000000022000 [ 3349.686434] Bluetooth: hci0 command 0x041b tx timeout [ 3349.708770] Mem-Info: [ 3349.711225] active_anon:16478 inactive_anon:90043 isolated_anon:0 [ 3349.711225] active_file:2513 inactive_file:4772 isolated_file:0 [ 3349.711225] unevictable:0 dirty:113 writeback:0 unstable:0 [ 3349.711225] slab_reclaimable:12143 slab_unreclaimable:121591 [ 3349.711225] mapped:57618 shmem:90899 pagetables:798 bounce:0 [ 3349.711225] free:219081 free_pcp:46 free_cma:0 [ 3349.781071] Node 0 active_anon:64688kB inactive_anon:313652kB active_file:10044kB inactive_file:19088kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:230472kB dirty:444kB writeback:0kB shmem:316752kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 3349.842133] Node 1 active_anon:1224kB inactive_anon:46520kB active_file:8kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:8kB writeback:0kB shmem:46844kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3349.892219] Node 0 DMA free:11088kB min:204kB low:252kB high:300kB active_anon:68kB inactive_anon:980kB active_file:1092kB inactive_file:144kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3349.952295] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 3349.957391] Node 0 DMA32 free:701804kB min:36200kB low:45248kB high:54296kB active_anon:64620kB inactive_anon:312672kB active_file:8952kB inactive_file:18944kB unevictable:0kB writepending:444kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7392kB pagetables:2876kB bounce:0kB free_pcp:204kB local_pcp:180kB free_cma:0kB [ 3350.022069] lowmem_reserve[]: 0 0 0 0 0 [ 3350.026137] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3350.091654] lowmem_reserve[]: 0 0 0 0 0 [ 3350.100449] Node 1 Normal free:54004kB min:53696kB low:67120kB high:80544kB active_anon:1224kB inactive_anon:46520kB active_file:8kB inactive_file:0kB unevictable:0kB writepending:8kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:320kB pagetables:316kB bounce:0kB free_pcp:40kB local_pcp:40kB free_cma:0kB [ 3350.181987] lowmem_reserve[]: 0 0 0 0 0 [ 3350.186148] Node 0 DMA: 30*4kB (UME) 7*8kB (ME) 8*16kB (UME) 15*32kB (UME) 9*64kB (U) 8*128kB (UME) 4*256kB (UE) 3*512kB (UME) 2*1024kB (ME) 2*2048kB (UM) 0*4096kB = 11088kB [ 3350.216270] Node 0 DMA32: 110*4kB (UME) 344*8kB (ME) 11036*16kB (UME) 11242*32kB (UME) 22*64kB (U) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 540920kB [ 3350.251991] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 3350.262837] Node 1 Normal: 665*4kB (UM) 1060*8kB (UM) 867*16kB (UM) 660*32kB (UM) 51*64kB (UM) 14*128kB (UM) 7*256kB (UM) 2*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 54004kB [ 3350.278686] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3350.288022] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3350.298073] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3350.309318] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3350.319193] 98139 total pagecache pages [ 3350.323554] 0 pages in swap cache [ 3350.327138] Swap cache stats: add 0, delete 0, find 0/0 [ 3350.332959] Free swap = 0kB [ 3350.336156] Total swap = 0kB [ 3350.339173] 2097051 pages RAM [ 3350.343306] 0 pages HighMem/MovableOnly [ 3350.347513] 363840 pages reserved [ 3350.351168] 0 pages cma reserved [ 3351.349475] oom_reaper: reaped process 16676 (syz-executor.4), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 3351.406850] systemd-journal invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 3351.435907] systemd-journal cpuset=/ mems_allowed=0-1 [ 3351.441180] CPU: 1 PID: 16368 Comm: systemd-journal Not tainted 4.14.225-syzkaller #0 [ 3351.449152] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3351.459053] Call Trace: [ 3351.462086] dump_stack+0x1b2/0x281 [ 3351.465713] dump_header+0x178/0x82f [ 3351.469430] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 3351.474982] ? ___ratelimit+0x2cd/0x530 [ 3351.479054] oom_kill_process.cold+0x10/0xb18 [ 3351.483999] out_of_memory+0xe3e/0x1190 [ 3351.488663] ? oom_killer_disable+0x1c0/0x1c0 [ 3351.494783] ? mutex_trylock+0x152/0x1a0 [ 3351.498876] __alloc_pages_nodemask+0x23e1/0x2720 [ 3351.504089] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3351.509384] alloc_pages_current+0x155/0x260 [ 3351.513799] filemap_fault+0xea3/0x1980 [ 3351.517786] ext4_filemap_fault+0x84/0xb0 [ 3351.521996] __do_fault+0xfa/0x380 [ 3351.525535] __handle_mm_fault+0x2497/0x4620 [ 3351.530202] ? ep_poll+0x1ab/0xa50 [ 3351.533740] ? vm_insert_page+0x7c0/0x7c0 [ 3351.537897] handle_mm_fault+0x391/0x860 [ 3351.542049] __do_page_fault+0x549/0xad0 [ 3351.546447] ? spurious_fault+0x640/0x640 [ 3351.550575] ? do_page_fault+0x60/0x500 [ 3351.554554] ? page_fault+0x2f/0x50 [ 3351.558162] page_fault+0x45/0x50 [ 3351.561627] RIP: 0001:0xffffffffffffffff [ 3351.565684] RSP: 634cd1e0:00007ffe9b5a8d90 EFLAGS: 7ffe9b5a8ba0 [ 3351.576810] syz-executor.4: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 3351.606482] Mem-Info: [ 3351.608983] active_anon:16391 inactive_anon:90042 isolated_anon:0 [ 3351.608983] active_file:31 inactive_file:3 isolated_file:0 [ 3351.608983] unevictable:0 dirty:16 writeback:0 unstable:0 [ 3351.608983] slab_reclaimable:12142 slab_unreclaimable:119781 [ 3351.608983] mapped:52672 shmem:90898 pagetables:776 bounce:0 [ 3351.608983] free:13883 free_pcp:60 free_cma:0 [ 3351.644573] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 3351.649979] CPU: 0 PID: 16676 Comm: syz-executor.4 Not tainted 4.14.225-syzkaller #0 [ 3351.650012] Node 0 active_anon:64356kB inactive_anon:313648kB active_file:56kB inactive_file:56kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:210708kB dirty:0kB writeback:0kB shmem:316748kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3351.657853] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3351.657857] Call Trace: [ 3351.657876] dump_stack+0x1b2/0x281 [ 3351.657889] warn_alloc.cold+0x96/0x1cc [ 3351.657900] ? zone_watermark_ok_safe+0x220/0x220 [ 3351.657912] ? usleep_range+0x130/0x130 [ 3351.686369] Node 1 active_anon:1148kB inactive_anon:46520kB active_file:4kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:46844kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3351.695394] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 3351.695408] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 3351.695421] ? run_timer_softirq+0x5a0/0x5a0 [ 3351.697983] Node 0 [ 3351.701597] __alloc_pages_nodemask+0x2127/0x2720 [ 3351.705570] DMA free:10976kB min:204kB low:252kB high:300kB active_anon:68kB inactive_anon:980kB active_file:28kB inactive_file:20kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3351.710375] ? lock_acquire+0x170/0x3f0 [ 3351.714331] lowmem_reserve[]: [ 3351.741641] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3351.741653] ? ion_page_pool_alloc+0x9e/0x1b0 [ 3351.741667] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 3351.741684] alloc_pages_current+0x155/0x260 [ 3351.741695] ion_page_pool_alloc+0x118/0x1b0 [ 3351.741705] ion_system_heap_allocate+0x133/0x8c0 [ 3351.741714] ? ion_alloc+0x187/0x810 [ 3351.741724] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 3351.741735] ? ion_system_contig_heap_create+0x130/0x130 [ 3351.746911] 0 [ 3351.751811] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 3351.751823] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 3351.751834] ion_alloc+0x204/0x810 [ 3351.751848] ? ion_dma_buf_release+0x40/0x40 [ 3351.756223] 2717 [ 3351.758446] ? __might_fault+0x177/0x1b0 [ 3351.763284] 2718 [ 3351.792104] ion_ioctl+0xea/0x1f0 [ 3351.792115] ? ion_query_heaps+0x360/0x360 [ 3351.792127] ? __fget+0x1fe/0x360 [ 3351.796165] 2718 [ 3351.800134] ? ion_query_heaps+0x360/0x360 [ 3351.804996] 2718 [ 3351.809780] do_vfs_ioctl+0x75a/0xff0 [ 3351.819990] ? ioctl_preallocate+0x1a0/0x1a0 [ 3351.825344] Node 0 [ 3351.830268] ? lock_downgrade+0x740/0x740 [ 3351.834563] DMA32 free:17968kB min:36200kB low:45248kB high:54296kB active_anon:64288kB inactive_anon:312668kB active_file:48kB inactive_file:28kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7360kB pagetables:2788kB bounce:0kB free_pcp:148kB local_pcp:0kB free_cma:0kB [ 3351.840082] ? __fget+0x225/0x360 [ 3351.845650] lowmem_reserve[]: [ 3351.848099] ? do_vfs_ioctl+0xff0/0xff0 [ 3351.853153] 0 [ 3351.857951] ? security_file_ioctl+0x83/0xb0 [ 3351.861462] 0 [ 3351.866034] SyS_ioctl+0x7f/0xb0 [ 3351.866044] ? do_vfs_ioctl+0xff0/0xff0 [ 3351.866057] do_syscall_64+0x1d5/0x640 [ 3351.868092] 0 [ 3351.872252] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3351.872261] RIP: 0033:0x465f69 [ 3351.872268] RSP: 002b:00007fbb52cf0188 EFLAGS: 00000246 [ 3351.874325] 0 [ 3351.878099] ORIG_RAX: 0000000000000010 [ 3351.882952] 0 [ 3351.886782] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 3351.893565] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 3351.893570] RBP: 00000000004bfa8f R08: 0000000000000000 R09: 0000000000000000 [ 3351.893574] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 3351.893579] R13: 00007ffc0aef8def R14: 00007fbb52cf0300 R15: 0000000000022000 [ 3351.916080] warn_alloc_show_mem: 1 callbacks suppressed [ 3351.916084] Mem-Info: [ 3351.947690] Bluetooth: hci0 command 0x040f tx timeout [ 3351.954702] active_anon:16376 inactive_anon:90042 isolated_anon:0 [ 3351.954702] active_file:15 inactive_file:15 isolated_file:0 [ 3351.954702] unevictable:0 dirty:0 writeback:0 unstable:0 [ 3351.954702] slab_reclaimable:12142 slab_unreclaimable:119781 [ 3351.954702] mapped:52677 shmem:90898 pagetables:776 bounce:0 [ 3351.954702] free:13938 free_pcp:67 free_cma:0 [ 3351.977115] Node 0 [ 3351.979377] Node 0 active_anon:64356kB inactive_anon:313648kB active_file:56kB inactive_file:56kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:210708kB dirty:0kB writeback:0kB shmem:316748kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3351.981373] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3351.988348] Node 1 active_anon:1148kB inactive_anon:46520kB active_file:4kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:46844kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3351.994325] lowmem_reserve[]: [ 3351.995449] Node 0 [ 3352.012802] 0 [ 3352.020059] DMA free:10976kB min:204kB low:252kB high:300kB active_anon:68kB inactive_anon:980kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3352.036374] 0 [ 3352.040996] lowmem_reserve[]: [ 3352.041082] 0 [ 3352.046559] 0 2717 2718 2718 2718 [ 3352.046576] Node 0 DMA32 free:19736kB min:36200kB low:45248kB high:54296kB active_anon:64288kB inactive_anon:312668kB active_file:48kB inactive_file:28kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7360kB pagetables:2788kB bounce:0kB free_pcp:148kB local_pcp:148kB free_cma:0kB [ 3352.046594] lowmem_reserve[]: 0 0 0 0 0 [ 3352.046615] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3352.046631] lowmem_reserve[]: 0 0 0 0 0 [ 3352.046650] Node 1 Normal free:26808kB min:53696kB low:67120kB high:80544kB active_anon:1148kB inactive_anon:46520kB active_file:4kB inactive_file:4kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:320kB pagetables:316kB bounce:0kB free_pcp:120kB local_pcp:120kB free_cma:0kB [ 3352.046669] lowmem_reserve[]: 0 0 0 0 0 [ 3352.046690] Node 0 DMA: 10*4kB (UME) 9*8kB (UME) 13*16kB (ME) 9*32kB (UME) 2*64kB (M) 8*128kB (UME) 4*256kB (UE) 2*512kB (UE) 3*1024kB (ME) 2*2048kB (UM) 0*4096kB = 10976kB [ 3352.046761] Node 0 DMA32: 942*4kB (UME) 961*8kB (UME) 225*16kB (UME) 64*32kB (UME) 21*64kB (UM) 11*128kB (UM) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 19856kB [ 3352.046826] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 3352.046870] Node 1 Normal: 162*4kB (M) 102*8kB (UM) 64*16kB (UM) 510*32kB (UM) 49*64kB (UM) 12*128kB (UM) 7*256kB (UM) 3*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 26808kB [ 3352.046938] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3352.046943] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3352.046949] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3352.046965] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3352.088984] 0 [ 3352.117932] 90928 total pagecache pages [ 3352.150946] 0 [ 3352.174390] 0 pages in swap cache [ 3352.210489] Swap cache stats: add 0, delete 0, find 0/0 [ 3352.216826] Node 1 [ 3352.250189] Free swap = 0kB [ 3352.276546] Normal free:26808kB min:53696kB low:67120kB high:80544kB active_anon:1148kB inactive_anon:46520kB active_file:4kB inactive_file:4kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:320kB pagetables:316kB bounce:0kB free_pcp:120kB local_pcp:0kB free_cma:0kB [ 3352.293162] Total swap = 0kB [ 3352.310614] lowmem_reserve[]: 0 0 0 0 0 [ 3352.310637] Node 0 DMA: 10*4kB [ 3352.327057] 2097051 pages RAM [ 3352.331697] (UME) [ 3352.359734] 0 pages HighMem/MovableOnly [ 3352.378957] 9*8kB [ 3352.389398] 363840 pages reserved [ 3352.391168] (UME) [ 3352.401334] 0 pages cma reserved [ 3352.492614] 13*16kB (ME) 9*32kB (UME) 2*64kB (M) 8*128kB (UME) 4*256kB (UE) 2*512kB (UE) 3*1024kB (ME) 2*2048kB (UM) 0*4096kB = 10976kB [ 3352.505332] Node 0 DMA32: 942*4kB (UME) 961*8kB (UME) 225*16kB (UME) 64*32kB (UME) 22*64kB (UM) 16*128kB (UM) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 20560kB [ 3352.521042] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 3352.532378] Node 1 Normal: 0*4kB 28*8kB (UM) 64*16kB (UM) 510*32kB (UM) 441*64kB (UM) 48*128kB (UM) 37*256kB (UM) 147*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 136672kB [ 3352.550688] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3352.560260] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3352.572254] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3352.582642] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3352.596335] 91376 total pagecache pages [ 3352.600905] 0 pages in swap cache [ 3352.604907] Swap cache stats: add 0, delete 0, find 0/0 [ 3352.610447] Free swap = 0kB [ 3352.628730] Total swap = 0kB [ 3352.632222] 2097051 pages RAM [ 3352.635717] 0 pages HighMem/MovableOnly [ 3352.641766] 363840 pages reserved [ 3352.645234] 0 pages cma reserved [ 3352.648596] Out of memory (oom_kill_allocating_task): Kill process 16368 (systemd-journal) score 0 or sacrifice child [ 3352.714770] Killed process 16368 (systemd-journal) total-vm:46096kB, anon-rss:472kB, file-rss:4kB, shmem-rss:1800kB [ 3352.752395] oom_reaper: reaped process 16368 (systemd-journal), now anon-rss:0kB, file-rss:0kB, shmem-rss:1800kB [ 3353.012339] systemd[1]: systemd-journald.service: Failed with result 'signal'. [ 3353.042994] systemd[1]: systemd-journald.service: Service has no hold-off time, scheduling restart. [ 3353.074974] systemd[1]: Stopped Journal Service. [ 3353.100730] systemd[1]: Starting Journal Service... 05:21:25 executing program 0: r0 = openat$ion(0xffffffffffffff9c, 0x0, 0x40000, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x2080000001, 0x32}) 05:21:25 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) write$dsp(0xffffffffffffffff, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x80000001, 0x32}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(0xffffffffffffffff, 0x7a5, &(0x7f0000000000)={{@any, 0x7}, 0x1, 0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(0xffffffffffffffff, 0x7a4, &(0x7f00000000c0)={{@hyper}, 0x9, 0x0, 0x13, 0x8}) 05:21:25 executing program 2: socketpair(0x1, 0x2, 0x0, &(0x7f0000000080)) recvfrom$llc(0xffffffffffffffff, &(0x7f00000000c0)=""/131, 0x83, 0x1000, &(0x7f0000000000)={0x1a, 0x78e341917cb35c9f, 0x20, 0xc2, 0x7, 0x5, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x10) 05:21:25 executing program 1: socketpair(0x1, 0x2, 0x0, &(0x7f0000000080)) bind$llc(0xffffffffffffffff, 0x0, 0x0) 05:21:25 executing program 3: ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x2080000001, 0x32}) [ 3353.692623] systemd-journald[16704]: File /run/log/journal/64dd78f1a75445a997c532444ad0f085/system.journal corrupted or uncleanly shut down, renaming and replacing. [ 3354.038312] Bluetooth: hci0 command 0x0419 tx timeout [ 3354.217350] systemd[1]: Started Journal Service. [ 3354.839324] syz-executor.4: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 3354.900995] oom_reaper: reaped process 16679 (syz-executor.5), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 3354.927077] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 3354.942755] CPU: 0 PID: 16707 Comm: syz-executor.4 Not tainted 4.14.225-syzkaller #0 [ 3354.950869] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3354.960234] Call Trace: [ 3354.962869] dump_stack+0x1b2/0x281 [ 3354.966940] warn_alloc.cold+0x96/0x1cc [ 3354.970923] ? zone_watermark_ok_safe+0x220/0x220 [ 3354.975777] __alloc_pages_nodemask+0x2127/0x2720 [ 3354.980617] ? retint_kernel+0x2d/0x2d [ 3354.984695] ? lock_acquire+0x170/0x3f0 [ 3354.989028] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3354.993884] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 3354.999375] ? __mutex_unlock_slowpath+0x75/0x770 [ 3355.004219] ? retint_kernel+0x2d/0x2d [ 3355.008110] alloc_pages_current+0x155/0x260 [ 3355.012532] ion_page_pool_alloc+0x118/0x1b0 [ 3355.016946] ion_system_heap_allocate+0x133/0x8c0 [ 3355.021807] ? ion_alloc+0x187/0x810 [ 3355.025520] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 3355.030969] ? ion_system_contig_heap_create+0x130/0x130 [ 3355.036417] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 3355.041431] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 3355.046271] ion_alloc+0x204/0x810 [ 3355.049812] ? ion_dma_buf_release+0x40/0x40 [ 3355.054254] ? __might_fault+0x177/0x1b0 [ 3355.058345] ion_ioctl+0xea/0x1f0 [ 3355.061897] ? ion_query_heaps+0x360/0x360 [ 3355.066352] ? __fget+0x1fe/0x360 [ 3355.069894] ? ion_query_heaps+0x360/0x360 [ 3355.074205] do_vfs_ioctl+0x75a/0xff0 [ 3355.077994] ? ioctl_preallocate+0x1a0/0x1a0 [ 3355.082388] ? lock_downgrade+0x740/0x740 [ 3355.086520] ? __fget+0x225/0x360 [ 3355.089973] ? do_vfs_ioctl+0xff0/0xff0 [ 3355.093929] ? security_file_ioctl+0x83/0xb0 [ 3355.098319] SyS_ioctl+0x7f/0xb0 [ 3355.101673] ? do_vfs_ioctl+0xff0/0xff0 [ 3355.105758] do_syscall_64+0x1d5/0x640 [ 3355.109833] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3355.115794] RIP: 0033:0x465f69 [ 3355.119008] RSP: 002b:00007fbb52cf0188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3355.127218] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 3355.134472] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 3355.141740] RBP: 00000000004bfa8f R08: 0000000000000000 R09: 0000000000000000 [ 3355.148991] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 3355.156259] R13: 00007ffc0aef8def R14: 00007fbb52cf0300 R15: 0000000000022000 [ 3355.166730] systemd-journal invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 3355.171334] syz-executor.5: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 3355.180521] systemd-journal cpuset=/ mems_allowed=0-1 [ 3355.199128] CPU: 0 PID: 16704 Comm: systemd-journal Not tainted 4.14.225-syzkaller #0 [ 3355.206583] syz-executor.5 cpuset= [ 3355.207085] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3355.207093] / [ 3355.210614] Call Trace: [ 3355.220092] mems_allowed=0-1 [ 3355.221771] dump_stack+0x1b2/0x281 [ 3355.221784] dump_header+0x178/0x82f [ 3355.234857] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 3355.239995] ? ___ratelimit+0x2cd/0x530 [ 3355.243984] oom_kill_process.cold+0x10/0xb18 [ 3355.248474] out_of_memory+0xe3e/0x1190 [ 3355.252465] ? oom_killer_disable+0x1c0/0x1c0 [ 3355.256976] ? mutex_trylock+0x152/0x1a0 [ 3355.261021] __alloc_pages_nodemask+0x23e1/0x2720 [ 3355.265852] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3355.270691] alloc_pages_current+0x155/0x260 [ 3355.275080] filemap_fault+0xea3/0x1980 [ 3355.279050] ext4_filemap_fault+0x84/0xb0 [ 3355.283180] __do_fault+0xfa/0x380 [ 3355.286884] __handle_mm_fault+0x2497/0x4620 [ 3355.291274] ? ep_poll+0x1ab/0xa50 [ 3355.294793] ? vm_insert_page+0x7c0/0x7c0 [ 3355.298954] handle_mm_fault+0x391/0x860 [ 3355.303124] __do_page_fault+0x549/0xad0 [ 3355.307169] ? spurious_fault+0x640/0x640 [ 3355.311297] ? do_page_fault+0x60/0x500 [ 3355.315252] ? page_fault+0x2f/0x50 [ 3355.318859] page_fault+0x45/0x50 [ 3355.322309] RIP: 0001:0xffffffffffffffff [ 3355.326364] RSP: ed5f71e0:00007ffedb1ca270 EFLAGS: 7ffedb1ca080 [ 3355.329102] Mem-Info: [ 3355.337639] active_anon:16384 inactive_anon:90042 isolated_anon:0 [ 3355.337639] active_file:52 inactive_file:0 isolated_file:0 [ 3355.337639] unevictable:0 dirty:0 writeback:0 unstable:0 [ 3355.337639] slab_reclaimable:12148 slab_unreclaimable:119807 [ 3355.337639] mapped:52609 shmem:90898 pagetables:751 bounce:0 [ 3355.337639] free:13827 free_pcp:85 free_cma:0 [ 3355.340429] CPU: 1 PID: 16679 Comm: syz-executor.5 Not tainted 4.14.225-syzkaller #0 [ 3355.373100] Node 0 active_anon:64012kB inactive_anon:313640kB active_file:52kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:210332kB dirty:0kB writeback:0kB shmem:316740kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3355.379040] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3355.411253] Node 1 active_anon:1524kB inactive_anon:46528kB active_file:156kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:104kB dirty:0kB writeback:0kB shmem:46852kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3355.418580] Call Trace: [ 3355.447646] Node 0 DMA free:10960kB min:204kB low:252kB high:300kB active_anon:68kB inactive_anon:980kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3355.448309] dump_stack+0x1b2/0x281 [ 3355.448322] warn_alloc.cold+0x96/0x1cc [ 3355.477713] lowmem_reserve[]: [ 3355.478926] ? zone_watermark_ok_safe+0x220/0x220 [ 3355.482934] 0 [ 3355.485973] ? usleep_range+0x130/0x130 [ 3355.490799] 2717 [ 3355.496546] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 3355.496552] 2718 [ 3355.498629] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 3355.503855] Mem-Info: [ 3355.505881] ? run_timer_softirq+0x5a0/0x5a0 [ 3355.512751] 2718 [ 3355.513526] __alloc_pages_nodemask+0x2127/0x2720 [ 3355.517902] 2718 [ 3355.520000] ? lock_acquire+0x170/0x3f0 [ 3355.524890] active_anon:16384 inactive_anon:90042 isolated_anon:0 [ 3355.524890] active_file:52 inactive_file:0 isolated_file:0 [ 3355.524890] unevictable:0 dirty:0 writeback:0 unstable:0 [ 3355.524890] slab_reclaimable:12148 slab_unreclaimable:119807 [ 3355.524890] mapped:52609 shmem:90898 pagetables:751 bounce:0 [ 3355.524890] free:13827 free_pcp:85 free_cma:0 [ 3355.526863] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3355.532723] Node 0 active_anon:64012kB inactive_anon:313640kB active_file:52kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:210332kB dirty:0kB writeback:0kB shmem:316740kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3355.564349] ? ion_page_pool_alloc+0x9e/0x1b0 [ 3355.564365] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 3355.564382] alloc_pages_current+0x155/0x260 [ 3355.564394] ion_page_pool_alloc+0x118/0x1b0 [ 3355.564404] ion_system_heap_allocate+0x133/0x8c0 [ 3355.564413] ? ion_alloc+0x187/0x810 [ 3355.564423] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 3355.564431] ? ion_system_contig_heap_create+0x130/0x130 [ 3355.564440] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 3355.564448] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 3355.564457] ion_alloc+0x204/0x810 [ 3355.564469] ? ion_dma_buf_release+0x40/0x40 [ 3355.564480] ? __might_fault+0x177/0x1b0 [ 3355.564492] ion_ioctl+0xea/0x1f0 [ 3355.564502] ? ion_query_heaps+0x360/0x360 [ 3355.564512] ? __fget+0x1fe/0x360 [ 3355.564521] ? ion_query_heaps+0x360/0x360 [ 3355.564530] do_vfs_ioctl+0x75a/0xff0 [ 3355.564545] ? ioctl_preallocate+0x1a0/0x1a0 [ 3355.564554] ? lock_downgrade+0x740/0x740 [ 3355.564565] ? __fget+0x225/0x360 [ 3355.564572] ? do_vfs_ioctl+0xff0/0xff0 [ 3355.564580] ? security_file_ioctl+0x83/0xb0 [ 3355.564589] SyS_ioctl+0x7f/0xb0 [ 3355.564596] ? do_vfs_ioctl+0xff0/0xff0 [ 3355.564607] do_syscall_64+0x1d5/0x640 [ 3355.564620] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3355.564627] RIP: 0033:0x465f69 [ 3355.564631] RSP: 002b:00007f08137cb188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3355.564639] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 3355.564644] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 3355.564648] RBP: 00000000004bfa8f R08: 0000000000000000 R09: 0000000000000000 [ 3355.564652] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 3355.564656] R13: 00007ffeb8b6e44f R14: 00007f08137cb300 R15: 0000000000022000 [ 3355.703700] Node 1 active_anon:1448kB inactive_anon:46528kB active_file:48kB inactive_file:1324kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:688kB dirty:0kB writeback:0kB shmem:46852kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3355.708746] Node 0 [ 3355.709818] Node 0 [ 3355.734564] DMA32 free:68032kB min:36200kB low:45248kB high:54296kB active_anon:63920kB inactive_anon:312660kB active_file:12kB inactive_file:112kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7328kB pagetables:2724kB bounce:0kB free_pcp:276kB local_pcp:240kB free_cma:0kB [ 3355.737590] DMA free:10960kB min:204kB low:252kB high:300kB active_anon:68kB inactive_anon:980kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3355.768387] lowmem_reserve[]: [ 3355.807488] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 3355.866488] Node 0 DMA32 free:79936kB min:36200kB low:45248kB high:54296kB active_anon:63920kB inactive_anon:312660kB active_file:12kB inactive_file:1012kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7328kB pagetables:2724kB bounce:0kB free_pcp:980kB local_pcp:740kB free_cma:0kB [ 3355.895691] 0 [ 3355.901915] lowmem_reserve[]: [ 3355.905096] 0 [ 3355.914035] 0 0 0 0 0 [ 3355.923565] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3355.924227] 0 [ 3355.949696] lowmem_reserve[]: 0 0 0 0 0 [ 3355.956070] Node 1 Normal free:198168kB min:53696kB low:67120kB high:80544kB active_anon:1448kB inactive_anon:46528kB active_file:48kB inactive_file:1324kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:320kB pagetables:280kB bounce:0kB free_pcp:240kB local_pcp:76kB free_cma:0kB [ 3355.975665] 0 [ 3355.993197] lowmem_reserve[]: 0 0 0 0 0 [ 3355.995900] 0 [ 3356.010766] Node 0 DMA: 8*4kB (UME) 6*8kB (ME) 12*16kB (UME) 8*32kB (ME) 1*64kB (M) 5*128kB (ME) 2*256kB (UE) 2*512kB (UE) 4*1024kB (UME) 2*2048kB (UM) 0*4096kB = 10960kB [ 3356.029296] Node 0 DMA32: 565*4kB (UME) 650*8kB (UME) 2448*16kB (UME) 11*32kB (UME) 811*64kB (UM) 134*128kB (UM) 1*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 116292kB [ 3356.036899] Node 0 [ 3356.055443] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 3356.068455] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3356.090768] Node 1 Normal: 2*4kB (UM) 78*8kB (UM) 94*16kB (UM) 56*32kB (M) 1143*64kB (UM) 64*128kB (UM) 49*256kB (UM) 170*512kB (UM) 1*1024kB (U) 6*2048kB (U) 0*4096kB = 198168kB [ 3356.112184] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3356.129866] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3356.132033] lowmem_reserve[]: 0 [ 3356.141224] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3356.141232] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3356.141236] 91671 total pagecache pages [ 3356.141247] 0 pages in swap cache [ 3356.141252] Swap cache stats: add 0, delete 0, find 0/0 [ 3356.141255] Free swap = 0kB [ 3356.141258] Total swap = 0kB [ 3356.141267] 2097051 pages RAM [ 3356.156685] 0 [ 3356.189129] 0 pages HighMem/MovableOnly [ 3356.196987] 363840 pages reserved [ 3356.200439] 0 pages cma reserved [ 3356.209258] 0 0 0 [ 3356.215522] Node 1 Normal free:198168kB min:53696kB low:67120kB high:80544kB active_anon:1448kB inactive_anon:46528kB active_file:48kB inactive_file:1324kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:320kB pagetables:280kB bounce:0kB free_pcp:240kB local_pcp:164kB free_cma:0kB [ 3356.256271] lowmem_reserve[]: 0 0 0 0 0 [ 3356.260341] Node 0 DMA: 8*4kB (UME) 6*8kB (ME) 12*16kB (UME) 8*32kB (ME) 1*64kB (M) 5*128kB (ME) 2*256kB (UE) 2*512kB (UE) 4*1024kB (UME) 2*2048kB (UM) 0*4096kB = 10960kB [ 3356.310972] Node 0 DMA32: 5466*4kB (UME) 1544*8kB (UME) 4237*16kB (UME) 2353*32kB (UME) 811*64kB (UM) 134*128kB (UM) 1*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 246616kB [ 3356.346819] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 3356.360517] Node 1 Normal: 2*4kB (UM) 78*8kB (UM) 94*16kB (UM) 56*32kB (M) 1143*64kB (UM) 64*128kB (UM) 49*256kB (UM) 170*512kB (UM) 1*1024kB (U) 6*2048kB (U) 0*4096kB = 198168kB [ 3356.390781] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3356.418905] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3356.427825] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3356.450956] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3356.467189] 91671 total pagecache pages [ 3356.471975] 0 pages in swap cache [ 3356.475495] Swap cache stats: add 0, delete 0, find 0/0 [ 3356.494685] Free swap = 0kB [ 3356.497822] Total swap = 0kB [ 3356.504253] 2097051 pages RAM [ 3356.515574] 0 pages HighMem/MovableOnly [ 3356.523019] 363840 pages reserved [ 3356.534454] 0 pages cma reserved [ 3356.541182] Out of memory (oom_kill_allocating_task): Kill process 16704 (systemd-journal) score 0 or sacrifice child [ 3356.567868] Killed process 16704 (systemd-journal) total-vm:46096kB, anon-rss:464kB, file-rss:0kB, shmem-rss:1296kB [ 3356.596572] oom_reaper: reaped process 16704 (systemd-journal), now anon-rss:0kB, file-rss:0kB, shmem-rss:1328kB [ 3356.695946] systemd[1]: systemd-journald.service: Failed with result 'signal'. [ 3356.712218] systemd[1]: systemd-journald.service: Service has no hold-off time, scheduling restart. [ 3356.745072] systemd[1]: Stopped Journal Service. [ 3356.788832] systemd[1]: Starting Journal Service... [ 3356.913285] systemd-journald[16726]: File /run/log/journal/64dd78f1a75445a997c532444ad0f085/system.journal corrupted or uncleanly shut down, renaming and replacing. [ 3357.197683] systemd[1]: Started Journal Service. 05:21:30 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x2080000001, 0x32}) 05:21:30 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) write$dsp(0xffffffffffffffff, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x80000001, 0x32}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(0xffffffffffffffff, 0x7a5, &(0x7f0000000000)={{@any, 0x7}, 0x1, 0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(0xffffffffffffffff, 0x7a4, &(0x7f00000000c0)={{@hyper}, 0x9, 0x3f, 0x0, 0x8}) 05:21:30 executing program 2: socketpair(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) recvfrom$llc(r0, 0x0, 0x0, 0x1000, &(0x7f0000000000)={0x1a, 0x78e341917cb35c9f, 0x20, 0xc2, 0x7, 0x5, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x10) 05:21:30 executing program 3: ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x2080000001, 0x32}) 05:21:30 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) write$dsp(0xffffffffffffffff, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x80000001, 0x32}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(0xffffffffffffffff, 0x7a5, &(0x7f0000000000)={{@any, 0x7}, 0x1, 0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(0xffffffffffffffff, 0x7a4, &(0x7f00000000c0)={{@hyper}, 0x9, 0x0, 0x13, 0x8}) 05:21:30 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) write$dsp(0xffffffffffffffff, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x80000001, 0x32}) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(0xffffffffffffffff, 0x7a5, &(0x7f0000000000)={{}, 0x1, 0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(0xffffffffffffffff, 0x7a4, &(0x7f00000000c0)={{@hyper}, 0x0, 0x3f}) 05:21:30 executing program 0: openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x2080000001, 0x32}) 05:21:30 executing program 3: ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x2080000001, 0x32}) 05:21:30 executing program 0: openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x2080000001, 0x32}) 05:21:30 executing program 3: r0 = openat$ion(0xffffffffffffff9c, 0x0, 0x40000, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x2080000001, 0x32}) 05:21:30 executing program 0: openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x2080000001, 0x32}) 05:21:30 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0) 05:21:30 executing program 3: r0 = openat$ion(0xffffffffffffff9c, 0x0, 0x40000, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x2080000001, 0x32}) [ 3358.854133] syz-executor.5: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 3358.866645] syz-executor.1: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 3358.878751] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 3358.884134] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 3358.889371] CPU: 0 PID: 16742 Comm: syz-executor.1 Not tainted 4.14.225-syzkaller #0 [ 3358.897263] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3358.906618] Call Trace: [ 3358.909228] dump_stack+0x1b2/0x281 [ 3358.912873] warn_alloc.cold+0x96/0x1cc [ 3358.917029] ? zone_watermark_ok_safe+0x220/0x220 [ 3358.921910] __alloc_pages_nodemask+0x2127/0x2720 [ 3358.926762] ? __phys_addr+0x73/0xe0 [ 3358.930509] ? lock_acquire+0x170/0x3f0 [ 3358.934500] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3358.939393] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 3358.944862] ? __mutex_unlock_slowpath+0x75/0x770 [ 3358.950263] alloc_pages_current+0x155/0x260 [ 3358.954799] ion_page_pool_alloc+0x118/0x1b0 [ 3358.959334] ion_system_heap_allocate+0x133/0x8c0 [ 3358.964202] ? ion_alloc+0x187/0x810 [ 3358.968105] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 3358.974451] ? ion_system_contig_heap_create+0x130/0x130 [ 3358.980009] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 3358.985039] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 3358.990028] ion_alloc+0x204/0x810 [ 3358.993596] ? ion_dma_buf_release+0x40/0x40 [ 3358.998373] ? __might_fault+0x177/0x1b0 [ 3359.002472] ion_ioctl+0xea/0x1f0 [ 3359.005962] ? ion_query_heaps+0x360/0x360 [ 3359.010234] ? __fget+0x1fe/0x360 [ 3359.013710] ? ion_query_heaps+0x360/0x360 [ 3359.017967] do_vfs_ioctl+0x75a/0xff0 [ 3359.021789] ? ioctl_preallocate+0x1a0/0x1a0 [ 3359.026201] ? lock_downgrade+0x740/0x740 [ 3359.030387] ? __fget+0x225/0x360 [ 3359.033852] ? do_vfs_ioctl+0xff0/0xff0 [ 3359.037838] ? security_file_ioctl+0x83/0xb0 [ 3359.042262] SyS_ioctl+0x7f/0xb0 [ 3359.045639] ? do_vfs_ioctl+0xff0/0xff0 [ 3359.049619] do_syscall_64+0x1d5/0x640 [ 3359.053608] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3359.059165] RIP: 0033:0x465f69 [ 3359.062493] RSP: 002b:00007fd6269d0188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3359.070237] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 3359.077518] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 3359.084790] RBP: 00000000004bfa8f R08: 0000000000000000 R09: 0000000000000000 [ 3359.092066] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 3359.099355] R13: 00007ffec72e1d4f R14: 00007fd6269d0300 R15: 0000000000022000 [ 3359.107709] CPU: 0 PID: 16741 Comm: syz-executor.5 Not tainted 4.14.225-syzkaller #0 [ 3359.115606] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3359.124965] Call Trace: [ 3359.127580] dump_stack+0x1b2/0x281 [ 3359.131253] warn_alloc.cold+0x96/0x1cc [ 3359.135246] ? zone_watermark_ok_safe+0x220/0x220 [ 3359.140116] __alloc_pages_nodemask+0x2127/0x2720 [ 3359.144966] ? io_schedule_timeout+0x140/0x140 [ 3359.149561] ? lock_acquire+0x170/0x3f0 [ 3359.153654] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3359.158683] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 3359.164239] ? __mutex_unlock_slowpath+0x75/0x770 [ 3359.169097] alloc_pages_current+0x155/0x260 [ 3359.173514] ion_page_pool_alloc+0x118/0x1b0 [ 3359.177935] ion_system_heap_allocate+0x133/0x8c0 [ 3359.182794] ? ion_alloc+0x187/0x810 [ 3359.186520] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 3359.191987] ? ion_system_contig_heap_create+0x130/0x130 [ 3359.197454] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 3359.202919] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 3359.208301] ion_alloc+0x204/0x810 [ 3359.212005] ? ion_dma_buf_release+0x40/0x40 [ 3359.216440] ? __might_fault+0x177/0x1b0 [ 3359.220528] ion_ioctl+0xea/0x1f0 [ 3359.224007] ? ion_query_heaps+0x360/0x360 [ 3359.228246] ? __fget+0x1fe/0x360 [ 3359.231712] ? ion_query_heaps+0x360/0x360 [ 3359.235966] do_vfs_ioctl+0x75a/0xff0 [ 3359.239814] ? ioctl_preallocate+0x1a0/0x1a0 [ 3359.244333] ? lock_downgrade+0x740/0x740 [ 3359.248599] ? __fget+0x225/0x360 [ 3359.252067] ? do_vfs_ioctl+0xff0/0xff0 [ 3359.256047] ? security_file_ioctl+0x83/0xb0 [ 3359.260466] SyS_ioctl+0x7f/0xb0 [ 3359.263860] ? do_vfs_ioctl+0xff0/0xff0 [ 3359.267859] do_syscall_64+0x1d5/0x640 [ 3359.271767] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3359.276967] RIP: 0033:0x465f69 [ 3359.280197] RSP: 002b:00007f08137cb188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3359.287916] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 3359.295204] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 3359.302500] RBP: 00000000004bfa8f R08: 0000000000000000 R09: 0000000000000000 [ 3359.309794] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 3359.317078] R13: 00007ffeb8b6e44f R14: 00007f08137cb300 R15: 0000000000022000 [ 3359.325770] warn_alloc_show_mem: 1 callbacks suppressed [ 3359.325775] Mem-Info: [ 3359.340085] active_anon:16412 inactive_anon:90023 isolated_anon:16 [ 3359.340085] active_file:1453 inactive_file:2846 isolated_file:0 [ 3359.340085] unevictable:0 dirty:65 writeback:0 unstable:0 [ 3359.340085] slab_reclaimable:12214 slab_unreclaimable:121807 [ 3359.340085] mapped:55258 shmem:90898 pagetables:765 bounce:0 [ 3359.340085] free:212469 free_pcp:44 free_cma:0 [ 3359.412106] Node 0 active_anon:64824kB inactive_anon:316408kB active_file:5392kB inactive_file:10388kB unevictable:0kB isolated(anon):64kB isolated(file):0kB mapped:219900kB dirty:236kB writeback:0kB shmem:319580kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3359.470747] Node 1 active_anon:824kB inactive_anon:43684kB active_file:420kB inactive_file:996kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:1132kB dirty:24kB writeback:0kB shmem:44012kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3359.528638] Node 0 DMA free:11088kB min:204kB low:252kB high:300kB active_anon:68kB inactive_anon:980kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:4kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3359.569798] syz-executor.4: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 3359.584248] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 3359.589366] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 3359.594852] Node 0 DMA32 free:664276kB min:36200kB low:45248kB high:54296kB active_anon:64756kB inactive_anon:315428kB active_file:5888kB inactive_file:9852kB unevictable:0kB writepending:232kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7456kB pagetables:3060kB bounce:0kB free_pcp:520kB local_pcp:44kB free_cma:0kB [ 3359.596759] CPU: 1 PID: 16728 Comm: syz-executor.4 Not tainted 4.14.225-syzkaller #0 [ 3359.632778] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3359.642134] Call Trace: [ 3359.644740] dump_stack+0x1b2/0x281 [ 3359.648374] warn_alloc.cold+0x96/0x1cc [ 3359.652449] ? zone_watermark_ok_safe+0x220/0x220 [ 3359.656590] lowmem_reserve[]: 0 0 0 0 [ 3359.657302] __alloc_pages_nodemask+0x2127/0x2720 [ 3359.657317] ? lock_acquire+0x170/0x3f0 [ 3359.666641] 0 [ 3359.669937] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3359.669952] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 3359.669963] ? __mutex_unlock_slowpath+0x75/0x770 [ 3359.669975] alloc_pages_current+0x155/0x260 [ 3359.669989] ion_page_pool_alloc+0x118/0x1b0 [ 3359.676677] ion_system_heap_allocate+0x133/0x8c0 [ 3359.676691] ? ion_alloc+0x187/0x810 [ 3359.690961] Node 0 [ 3359.691381] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 3359.700381] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3359.700812] ? ion_system_contig_heap_create+0x130/0x130 [ 3359.710527] lowmem_reserve[]: [ 3359.712531] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 3359.712546] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 3359.712564] ion_alloc+0x204/0x810 [ 3359.760290] ? ion_dma_buf_release+0x40/0x40 [ 3359.764706] ? __might_fault+0x177/0x1b0 [ 3359.766654] 0 [ 3359.768768] ion_ioctl+0xea/0x1f0 [ 3359.768785] ? ion_query_heaps+0x360/0x360 [ 3359.775011] 0 [ 3359.778235] ? __fget+0x1fe/0x360 [ 3359.778248] ? ion_query_heaps+0x360/0x360 [ 3359.778258] do_vfs_ioctl+0x75a/0xff0 [ 3359.785567] 0 [ 3359.788028] ? ioctl_preallocate+0x1a0/0x1a0 [ 3359.788040] ? lock_downgrade+0x740/0x740 [ 3359.798765] 0 [ 3359.802456] ? __fget+0x225/0x360 [ 3359.802466] ? do_vfs_ioctl+0xff0/0xff0 [ 3359.802475] ? security_file_ioctl+0x83/0xb0 [ 3359.802483] SyS_ioctl+0x7f/0xb0 [ 3359.802491] ? do_vfs_ioctl+0xff0/0xff0 [ 3359.802502] do_syscall_64+0x1d5/0x640 [ 3359.802517] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3359.807624] 0 [ 3359.807765] RIP: 0033:0x465f69 [ 3359.819539] RSP: 002b:00007fbb52cf0188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3359.819551] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 3359.819556] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 3359.819564] RBP: 00000000004bfa8f R08: 0000000000000000 R09: 0000000000000000 [ 3359.831270] Node 1 [ 3359.832602] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 3359.832608] R13: 00007ffc0aef8def R14: 00007fbb52cf0300 R15: 0000000000022000 [ 3359.898510] Normal free:53656kB min:53696kB low:67120kB high:80544kB active_anon:808kB inactive_anon:43684kB active_file:428kB inactive_file:952kB unevictable:0kB writepending:24kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:224kB pagetables:0kB bounce:0kB free_pcp:36kB local_pcp:36kB free_cma:0kB [ 3359.979890] lowmem_reserve[]: 0 0 0 0 0 [ 3359.987297] Node 0 DMA: 20*4kB (UME) 8*8kB (UME) 18*16kB (UME) 21*32kB (UME) 2*64kB (UM) 5*128kB (ME) 2*256kB (UE) 1*512kB (E) 4*1024kB (UME) 2*2048kB (UM) 0*4096kB = 11088kB [ 3360.019662] Node 0 DMA32: 23*4kB (UM) 225*8kB (UME) 53*16kB (UME) 10834*32kB (UE) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 349428kB [ 3360.053218] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 3360.084003] Node 1 Normal: 494*4kB (UM) 978*8kB (UM) 835*16kB (UM) 634*32kB (UM) 56*64kB (UM) 16*128kB (M) 8*256kB (UM) 1*512kB (M) 2*1024kB (U) 0*2048kB 0*4096kB = 53688kB [ 3360.124547] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3360.138176] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3360.165463] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3360.177993] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3360.188042] 95168 total pagecache pages [ 3360.196509] 0 pages in swap cache [ 3360.200766] Swap cache stats: add 0, delete 0, find 0/0 [ 3360.206198] Free swap = 0kB [ 3360.209260] Total swap = 0kB [ 3360.217354] 2097051 pages RAM [ 3360.221281] 0 pages HighMem/MovableOnly [ 3360.225316] 363840 pages reserved [ 3360.228815] 0 pages cma reserved [ 3360.598789] syz-executor.5 invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 3360.682445] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 3360.687580] CPU: 1 PID: 14696 Comm: syz-executor.5 Not tainted 4.14.225-syzkaller #0 [ 3360.695659] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3360.705012] Call Trace: [ 3360.707603] dump_stack+0x1b2/0x281 [ 3360.711231] dump_header+0x178/0x82f [ 3360.714936] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 3360.720028] ? ___ratelimit+0x2cd/0x530 [ 3360.724088] oom_kill_process.cold+0x10/0xb18 [ 3360.728599] out_of_memory+0xe3e/0x1190 [ 3360.732747] ? oom_killer_disable+0x1c0/0x1c0 [ 3360.737238] ? mutex_trylock+0x152/0x1a0 [ 3360.741299] __alloc_pages_nodemask+0x23e1/0x2720 [ 3360.746154] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3360.751011] alloc_pages_current+0x155/0x260 [ 3360.755424] filemap_fault+0xea3/0x1980 [ 3360.759408] ext4_filemap_fault+0x84/0xb0 [ 3360.763569] __do_fault+0xfa/0x380 [ 3360.767103] __handle_mm_fault+0x2497/0x4620 [ 3360.771513] ? vm_insert_page+0x7c0/0x7c0 [ 3360.775653] ? nanosleep_copyout+0x100/0x100 [ 3360.780064] handle_mm_fault+0x391/0x860 [ 3360.784131] __do_page_fault+0x549/0xad0 [ 3360.788192] ? spurious_fault+0x640/0x640 [ 3360.792507] ? do_page_fault+0x60/0x500 [ 3360.796475] ? page_fault+0x2f/0x50 [ 3360.800095] page_fault+0x45/0x50 [ 3360.803540] RIP: 334217:0x6 [ 3360.806458] RSP: 001b:00007ffeb8b6e70c EFLAGS: 00000032 [ 3361.108723] Mem-Info: [ 3361.145807] active_anon:16414 inactive_anon:90042 isolated_anon:0 [ 3361.145807] active_file:33 inactive_file:10 isolated_file:0 [ 3361.145807] unevictable:0 dirty:11 writeback:4 unstable:0 [ 3361.145807] slab_reclaimable:12221 slab_unreclaimable:122004 [ 3361.145807] mapped:52603 shmem:90898 pagetables:775 bounce:0 [ 3361.145807] free:25166 free_pcp:0 free_cma:0 [ 3361.329424] Node 0 active_anon:64848kB inactive_anon:316484kB active_file:84kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:210396kB dirty:28kB writeback:20kB shmem:319580kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3361.493192] Node 1 active_anon:808kB inactive_anon:43684kB active_file:48kB inactive_file:40kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:16kB dirty:16kB writeback:0kB shmem:44012kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3361.665116] Node 0 DMA free:11060kB min:204kB low:252kB high:300kB active_anon:68kB inactive_anon:980kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3361.802009] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 3361.807078] Node 0 DMA32 free:35736kB min:36200kB low:45248kB high:54296kB active_anon:64784kB inactive_anon:315504kB active_file:44kB inactive_file:52kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7456kB pagetables:3100kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3361.969080] lowmem_reserve[]: 0 0 0 0 0 [ 3362.003792] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3362.148804] lowmem_reserve[]: 0 0 0 0 0 [ 3362.177728] Node 1 Normal free:53688kB min:53696kB low:67120kB high:80544kB active_anon:808kB inactive_anon:43684kB active_file:8kB inactive_file:0kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:224kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3362.358059] lowmem_reserve[]: 0 0 0 0 0 [ 3362.385051] Node 0 DMA: 13*4kB (UME) 8*8kB (UME) 18*16kB (UME) 21*32kB (UME) 2*64kB (UM) 5*128kB (ME) 2*256kB (UE) 1*512kB (E) 4*1024kB (UME) 2*2048kB (UM) 0*4096kB = 11060kB [ 3362.474109] Node 0 DMA32: 983*4kB (UME) 611*8kB (UME) 130*16kB (UME) 719*32kB (UME) 21*64kB (UM) 4*128kB (UM) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 35764kB [ 3362.571831] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 3362.597122] Node 1 Normal: 260*4kB (UM) 957*8kB (UM) 804*16kB (UM) 614*32kB (UM) 59*64kB (UM) 16*128kB (M) 10*256kB (UM) 0*512kB 2*1024kB (U) 1*2048kB (M) 0*4096kB = 53688kB [ 3362.616243] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3362.625153] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3362.637693] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3362.646623] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3362.658733] 90946 total pagecache pages [ 3362.662798] 0 pages in swap cache [ 3362.666246] Swap cache stats: add 0, delete 0, find 0/0 [ 3362.675284] Free swap = 0kB [ 3362.678316] Total swap = 0kB [ 3362.681394] 2097051 pages RAM [ 3362.684487] 0 pages HighMem/MovableOnly [ 3362.688461] 363840 pages reserved [ 3362.695570] 0 pages cma reserved [ 3362.698945] Out of memory (oom_kill_allocating_task): Kill process 14696 (syz-executor.5) score 0 or sacrifice child [ 3362.713640] Killed process 16741 (syz-executor.5) total-vm:93384kB, anon-rss:152kB, file-rss:34820kB, shmem-rss:0kB [ 3362.749922] oom_reaper: reaped process 16741 (syz-executor.5), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 3362.846858] oom_reaper: reaped process 16742 (syz-executor.1), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 3362.880440] oom_reaper: reaped process 16728 (syz-executor.4), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 3362.901381] syz-executor.5 invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 3362.947605] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 3362.973162] CPU: 1 PID: 14696 Comm: syz-executor.5 Not tainted 4.14.225-syzkaller #0 [ 3362.981065] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3362.990416] Call Trace: [ 3362.993003] dump_stack+0x1b2/0x281 [ 3362.996622] dump_header+0x178/0x82f [ 3363.000344] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 3363.005448] ? ___ratelimit+0x2cd/0x530 [ 3363.009439] oom_kill_process.cold+0x10/0xb18 [ 3363.013945] out_of_memory+0xe3e/0x1190 [ 3363.017926] ? oom_killer_disable+0x1c0/0x1c0 [ 3363.022416] ? mutex_trylock+0x152/0x1a0 [ 3363.026733] __alloc_pages_nodemask+0x23e1/0x2720 [ 3363.031584] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3363.036435] alloc_pages_current+0x155/0x260 [ 3363.040838] filemap_fault+0xea3/0x1980 [ 3363.044814] ext4_filemap_fault+0x84/0xb0 [ 3363.048953] __do_fault+0xfa/0x380 [ 3363.052487] __handle_mm_fault+0x2497/0x4620 [ 3363.057610] ? vm_insert_page+0x7c0/0x7c0 [ 3363.059263] syz-executor.5: page allocation failure: order:0 [ 3363.061749] ? nanosleep_copyout+0x100/0x100 [ 3363.061766] handle_mm_fault+0x391/0x860 [ 3363.067542] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 3363.071932] __do_page_fault+0x549/0xad0 [ 3363.071943] ? spurious_fault+0x640/0x640 [ 3363.071950] ? do_page_fault+0x60/0x500 [ 3363.071959] ? page_fault+0x2f/0x50 [ 3363.071966] page_fault+0x45/0x50 [ 3363.071972] RIP: 334217:0x6 [ 3363.071976] RSP: 001b:00007ffeb8b6e70c EFLAGS: 00000032 [ 3363.072268] syz-executor.4: [ 3363.084352] (null) [ 3363.102836] page allocation failure: order:0 [ 3363.107230] syz-executor.1: [ 3363.118782] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 3363.125744] page allocation failure: order:0 [ 3363.132380] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 3363.140108] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 3363.147021] CPU: 1 PID: 16728 Comm: syz-executor.4 Not tainted 4.14.225-syzkaller #0 [ 3363.147115] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 3363.154885] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3363.154889] Call Trace: [ 3363.154914] dump_stack+0x1b2/0x281 [ 3363.154927] warn_alloc.cold+0x96/0x1cc [ 3363.154937] ? zone_watermark_ok_safe+0x220/0x220 [ 3363.154948] ? usleep_range+0x130/0x130 [ 3363.184463] (null) [ 3363.186416] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 3363.190412] syz-executor.1 cpuset= [ 3363.192495] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 3363.197589] / [ 3363.201110] ? run_timer_softirq+0x5a0/0x5a0 [ 3363.212224] __alloc_pages_nodemask+0x2127/0x2720 [ 3363.217065] ? lock_acquire+0x1ec/0x3f0 [ 3363.221048] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3363.225900] ? ion_page_pool_alloc+0x9e/0x1b0 [ 3363.230416] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 3363.235867] alloc_pages_current+0x155/0x260 [ 3363.240287] ion_page_pool_alloc+0x118/0x1b0 [ 3363.240996] mems_allowed=0-1 [ 3363.244717] ion_system_heap_allocate+0x133/0x8c0 [ 3363.252642] ? ion_alloc+0x187/0x810 [ 3363.256349] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 3363.261800] ? ion_system_contig_heap_create+0x130/0x130 [ 3363.267231] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 3363.272322] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 3363.277503] ion_alloc+0x204/0x810 [ 3363.281032] ? ion_dma_buf_release+0x40/0x40 [ 3363.285426] ? __might_fault+0x177/0x1b0 [ 3363.289562] ion_ioctl+0xea/0x1f0 [ 3363.293000] ? ion_query_heaps+0x360/0x360 [ 3363.297214] ? __fget+0x1fe/0x360 [ 3363.300655] ? ion_query_heaps+0x360/0x360 [ 3363.304875] do_vfs_ioctl+0x75a/0xff0 [ 3363.308659] ? ioctl_preallocate+0x1a0/0x1a0 [ 3363.313045] ? lock_downgrade+0x740/0x740 [ 3363.317175] ? __fget+0x225/0x360 [ 3363.320612] ? do_vfs_ioctl+0xff0/0xff0 [ 3363.324571] ? security_file_ioctl+0x83/0xb0 [ 3363.328957] SyS_ioctl+0x7f/0xb0 [ 3363.332307] ? do_vfs_ioctl+0xff0/0xff0 [ 3363.336270] do_syscall_64+0x1d5/0x640 [ 3363.340152] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3363.345329] RIP: 0033:0x465f69 [ 3363.348499] RSP: 002b:00007fbb52cf0188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3363.356189] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 3363.363453] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 3363.370709] RBP: 00000000004bfa8f R08: 0000000000000000 R09: 0000000000000000 [ 3363.377964] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 3363.385216] R13: 00007ffc0aef8def R14: 00007fbb52cf0300 R15: 0000000000022000 [ 3363.393071] CPU: 0 PID: 16741 Comm: syz-executor.5 Not tainted 4.14.225-syzkaller #0 [ 3363.400959] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3363.402786] Mem-Info: [ 3363.410309] Call Trace: [ 3363.410328] dump_stack+0x1b2/0x281 [ 3363.410341] warn_alloc.cold+0x96/0x1cc [ 3363.410353] ? zone_watermark_ok_safe+0x220/0x220 [ 3363.412759] active_anon:16366 inactive_anon:90042 isolated_anon:0 [ 3363.412759] active_file:13 inactive_file:9 isolated_file:0 [ 3363.412759] unevictable:0 dirty:0 writeback:0 unstable:0 [ 3363.412759] slab_reclaimable:12220 slab_unreclaimable:121544 [ 3363.412759] mapped:52583 shmem:90898 pagetables:775 bounce:0 [ 3363.412759] free:13954 free_pcp:0 free_cma:0 [ 3363.415312] ? usleep_range+0x130/0x130 [ 3363.418915] Node 0 active_anon:64672kB inactive_anon:316484kB active_file:48kB inactive_file:52kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:210332kB dirty:0kB writeback:0kB shmem:319580kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3363.422857] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 3363.422869] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 3363.422878] ? run_timer_softirq+0x5a0/0x5a0 [ 3363.422894] __alloc_pages_nodemask+0x2127/0x2720 [ 3363.427718] Node 1 active_anon:792kB inactive_anon:43684kB active_file:4kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:44012kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3363.460835] ? lock_acquire+0x170/0x3f0 [ 3363.460850] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3363.460863] ? ion_page_pool_alloc+0x9e/0x1b0 [ 3363.464811] Node 0 [ 3363.492726] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 3363.492743] alloc_pages_current+0x155/0x260 [ 3363.492756] ion_page_pool_alloc+0x118/0x1b0 [ 3363.497843] DMA free:10960kB min:204kB low:252kB high:300kB active_anon:68kB inactive_anon:980kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3363.502829] ion_system_heap_allocate+0x133/0x8c0 [ 3363.502840] ? ion_alloc+0x187/0x810 [ 3363.502849] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 3363.502859] ? ion_system_contig_heap_create+0x130/0x130 [ 3363.507238] lowmem_reserve[]: [ 3363.512057] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 3363.512067] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 3363.512080] ion_alloc+0x204/0x810 [ 3363.538623] 0 [ 3363.542567] ? ion_dma_buf_release+0x40/0x40 [ 3363.542580] ? __might_fault+0x177/0x1b0 [ 3363.547413] 2717 [ 3363.551889] ion_ioctl+0xea/0x1f0 [ 3363.551899] ? ion_query_heaps+0x360/0x360 [ 3363.551908] ? __fget+0x1fe/0x360 [ 3363.554116] 2718 [ 3363.559548] ? ion_query_heaps+0x360/0x360 [ 3363.559557] do_vfs_ioctl+0x75a/0xff0 [ 3363.559569] ? ioctl_preallocate+0x1a0/0x1a0 [ 3363.563949] 2718 2718 [ 3363.568340] ? lock_downgrade+0x740/0x740 [ 3363.594116] warn_alloc_show_mem: 2 callbacks suppressed [ 3363.594119] Mem-Info: [ 3363.598924] ? __fget+0x225/0x360 [ 3363.608035] ? do_vfs_ioctl+0xff0/0xff0 [ 3363.613495] active_anon:16366 inactive_anon:90042 isolated_anon:0 [ 3363.613495] active_file:13 inactive_file:9 isolated_file:0 [ 3363.613495] unevictable:0 dirty:0 writeback:0 unstable:0 [ 3363.613495] slab_reclaimable:12220 slab_unreclaimable:121544 [ 3363.613495] mapped:52583 shmem:90898 pagetables:775 bounce:0 [ 3363.613495] free:13954 free_pcp:0 free_cma:0 [ 3363.616561] ? security_file_ioctl+0x83/0xb0 [ 3363.621566] Node 0 [ 3363.626370] SyS_ioctl+0x7f/0xb0 [ 3363.629918] Node 0 active_anon:64672kB inactive_anon:316484kB active_file:48kB inactive_file:52kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:210332kB dirty:0kB writeback:0kB shmem:319580kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3363.631667] ? do_vfs_ioctl+0xff0/0xff0 [ 3363.636053] Node 1 active_anon:792kB inactive_anon:43684kB active_file:4kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:44012kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3363.640108] do_syscall_64+0x1d5/0x640 [ 3363.640125] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3363.640133] RIP: 0033:0x465f69 [ 3363.642185] DMA32 free:18092kB min:36200kB low:45248kB high:54296kB active_anon:64604kB inactive_anon:315504kB active_file:44kB inactive_file:52kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7456kB pagetables:3100kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3363.645607] RSP: 002b:00007f08137cb188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3363.649865] Node 0 [ 3363.653288] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 3363.655332] DMA free:10960kB min:204kB low:252kB high:300kB active_anon:68kB inactive_anon:980kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3363.659529] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 3363.659534] RBP: 00000000004bfa8f R08: 0000000000000000 R09: 0000000000000000 [ 3363.659539] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 3363.659545] R13: 00007ffeb8b6e44f R14: 00007f08137cb300 R15: 0000000000022000 [ 3363.665992] CPU: 0 PID: 16742 Comm: syz-executor.1 Not tainted 4.14.225-syzkaller #0 [ 3363.667988] lowmem_reserve[]: [ 3363.670458] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3363.670461] Call Trace: [ 3363.670478] dump_stack+0x1b2/0x281 [ 3363.670492] warn_alloc.cold+0x96/0x1cc [ 3363.670503] ? zone_watermark_ok_safe+0x220/0x220 [ 3363.670511] ? usleep_range+0x130/0x130 [ 3363.670519] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 3363.670531] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 3363.670540] ? run_timer_softirq+0x5a0/0x5a0 [ 3363.670556] __alloc_pages_nodemask+0x2127/0x2720 [ 3363.670570] ? lock_acquire+0x170/0x3f0 [ 3363.670585] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3363.670595] ? ion_page_pool_alloc+0x9e/0x1b0 [ 3363.670608] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 3363.670625] alloc_pages_current+0x155/0x260 [ 3363.670637] ion_page_pool_alloc+0x118/0x1b0 [ 3363.670647] ion_system_heap_allocate+0x133/0x8c0 [ 3363.670657] ? ion_alloc+0x187/0x810 [ 3363.670666] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 3363.670676] ? ion_system_contig_heap_create+0x130/0x130 [ 3363.670685] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 3363.670693] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 3363.670703] ion_alloc+0x204/0x810 [ 3363.670716] ? ion_dma_buf_release+0x40/0x40 [ 3363.670728] ? __might_fault+0x177/0x1b0 [ 3363.670740] ion_ioctl+0xea/0x1f0 [ 3363.670749] ? ion_query_heaps+0x360/0x360 [ 3363.670758] ? __fget+0x1fe/0x360 [ 3363.670767] ? ion_query_heaps+0x360/0x360 [ 3363.670775] do_vfs_ioctl+0x75a/0xff0 [ 3363.670787] ? ioctl_preallocate+0x1a0/0x1a0 [ 3363.670794] ? lock_downgrade+0x740/0x740 [ 3363.670806] ? __fget+0x225/0x360 [ 3363.670815] ? do_vfs_ioctl+0xff0/0xff0 [ 3363.670825] ? security_file_ioctl+0x83/0xb0 [ 3363.670834] SyS_ioctl+0x7f/0xb0 [ 3363.670841] ? do_vfs_ioctl+0xff0/0xff0 [ 3363.670852] do_syscall_64+0x1d5/0x640 [ 3363.670866] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3363.670873] RIP: 0033:0x465f69 [ 3363.670879] RSP: 002b:00007fd6269d0188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3363.670889] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 3363.670894] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 3363.670899] RBP: 00000000004bfa8f R08: 0000000000000000 R09: 0000000000000000 [ 3363.670904] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 3363.670909] R13: 00007ffec72e1d4f R14: 00007fd6269d0300 R15: 0000000000022000 [ 3363.852981] lowmem_reserve[]: [ 3363.883797] 0 [ 3364.123767] 0 [ 3364.126286] 0 [ 3364.154138] 2717 2718 2718 2718 [ 3364.164620] 0 0 0 [ 3364.169013] Node 0 DMA32 free:158068kB min:36200kB low:45248kB high:54296kB active_anon:64548kB inactive_anon:315504kB active_file:48kB inactive_file:2760kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7456kB pagetables:3100kB bounce:0kB free_pcp:1280kB local_pcp:620kB free_cma:0kB [ 3364.173535] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3364.256404] lowmem_reserve[]: 0 0 0 0 0 [ 3364.265004] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3364.314129] lowmem_reserve[]: 0 0 0 0 0 [ 3364.319029] Node 1 Normal free:174968kB min:53696kB low:67120kB high:80544kB active_anon:756kB inactive_anon:43684kB active_file:8kB inactive_file:104kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:224kB pagetables:0kB bounce:0kB free_pcp:712kB local_pcp:0kB free_cma:0kB [ 3364.361155] lowmem_reserve[]: 0 0 0 0 0 [ 3364.369676] Node 1 Normal free:34168kB min:53696kB low:67120kB high:80544kB active_anon:756kB inactive_anon:43684kB active_file:8kB inactive_file:104kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:224kB pagetables:0kB bounce:0kB free_pcp:712kB local_pcp:0kB free_cma:0kB [ 3364.409652] warn_alloc_show_mem: 1 callbacks suppressed [ 3364.415100] Mem-Info: [ 3364.415116] lowmem_reserve[]: [ 3364.428979] active_anon:16343 inactive_anon:90042 isolated_anon:0 [ 3364.428979] active_file:14 inactive_file:942 isolated_file:0 [ 3364.428979] unevictable:0 dirty:0 writeback:0 unstable:0 [ 3364.428979] slab_reclaimable:12220 slab_unreclaimable:121544 [ 3364.428979] mapped:53308 shmem:90898 pagetables:775 bounce:0 [ 3364.428979] free:106641 free_pcp:514 free_cma:0 [ 3364.434470] 0 [ 3364.492662] lowmem_reserve[]: 0 0 0 0 0 [ 3364.498478] Node 0 DMA: 8*4kB (UME) 6*8kB (ME) 14*16kB (UME) 21*32kB (UME) 3*64kB (UM) 5*128kB (ME) 2*256kB (UE) 1*512kB (E) 4*1024kB (UME) 2*2048kB (UM) 0*4096kB = 11024kB [ 3364.509694] Node 0 active_anon:64616kB inactive_anon:316484kB active_file:48kB inactive_file:3864kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:213232kB dirty:0kB writeback:0kB shmem:319580kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3364.545084] Node 0 DMA32: 8860*4kB (UME) 11551*8kB (UME) 14417*16kB (UME) 4785*32kB (UME) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 511640kB [ 3364.567550] 0 0 0 0 [ 3364.567983] syz-executor.1: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 3364.571929] Node 0 [ 3364.582324] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 3364.597368] DMA: 8*4kB (UME) 6*8kB (ME) 14*16kB (UME) 21*32kB (UME) 3*64kB (UM) 5*128kB (ME) 2*256kB (UE) 1*512kB (E) 4*1024kB (UME) 2*2048kB (UM) 0*4096kB = 11024kB [ 3364.601946] syz-executor.1 cpuset= [ 3364.613029] Node 1 [ 3364.616370] Node 1 active_anon:756kB inactive_anon:43684kB active_file:8kB inactive_file:104kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:44012kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 3364.616926] Normal: [ 3364.618818] Node 0 DMA free:11024kB min:204kB low:252kB high:300kB active_anon:68kB inactive_anon:980kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3364.618837] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 3364.645807] / mems_allowed=0-1 [ 3364.645827] CPU: 1 PID: 16742 Comm: syz-executor.1 Not tainted 4.14.225-syzkaller #0 [ 3364.645832] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3364.645836] Call Trace: [ 3364.645852] dump_stack+0x1b2/0x281 [ 3364.645864] warn_alloc.cold+0x96/0x1cc [ 3364.645875] ? zone_watermark_ok_safe+0x220/0x220 [ 3364.645898] __alloc_pages_nodemask+0x2127/0x2720 [ 3364.645907] ? ___preempt_schedule+0x16/0x18 [ 3364.645921] ? lock_acquire+0x170/0x3f0 [ 3364.645934] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3364.645951] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 3364.645962] ? __mutex_unlock_slowpath+0x75/0x770 [ 3364.645975] alloc_pages_current+0x155/0x260 [ 3364.645988] ion_page_pool_alloc+0x118/0x1b0 [ 3364.645997] ion_system_heap_allocate+0x133/0x8c0 [ 3364.646008] ? _raw_spin_unlock+0x29/0x40 [ 3364.652380] Node 0 [ 3364.675368] ? _ion_heap_freelist_drain+0x6e/0x410 [ 3364.675378] ? ion_system_contig_heap_create+0x130/0x130 [ 3364.675388] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 3364.675398] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 3364.675408] ion_alloc+0x27a/0x810 [ 3364.675420] ? ion_dma_buf_release+0x40/0x40 [ 3364.675436] ? __might_fault+0x177/0x1b0 [ 3364.675447] ion_ioctl+0xea/0x1f0 [ 3364.675456] ? ion_query_heaps+0x360/0x360 [ 3364.675465] ? __fget+0x1fe/0x360 [ 3364.675474] ? ion_query_heaps+0x360/0x360 [ 3364.675483] do_vfs_ioctl+0x75a/0xff0 [ 3364.675495] ? ioctl_preallocate+0x1a0/0x1a0 [ 3364.675503] ? lock_downgrade+0x740/0x740 [ 3364.675516] ? __fget+0x225/0x360 [ 3364.675523] ? do_vfs_ioctl+0xff0/0xff0 [ 3364.675534] ? security_file_ioctl+0x83/0xb0 [ 3364.675545] SyS_ioctl+0x7f/0xb0 [ 3364.684249] DMA32 free:526132kB min:36200kB low:45248kB high:54296kB active_anon:64548kB inactive_anon:315504kB active_file:1028kB inactive_file:3408kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7456kB pagetables:3100kB bounce:0kB free_pcp:248kB local_pcp:120kB free_cma:0kB [ 3364.691577] ? do_vfs_ioctl+0xff0/0xff0 [ 3364.691589] do_syscall_64+0x1d5/0x640 [ 3364.691605] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3364.691613] RIP: 0033:0x465f69 [ 3364.691620] RSP: 002b:00007fd6269d0188 EFLAGS: 00000246 [ 3364.704441] lowmem_reserve[]: [ 3364.707213] ORIG_RAX: 0000000000000010 [ 3364.711195] 0 [ 3364.715986] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 3364.724810] 0 [ 3364.725200] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 3364.729175] 0 [ 3364.734053] RBP: 00000000004bfa8f R08: 0000000000000000 R09: 0000000000000000 [ 3364.742907] 0 [ 3364.744299] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 3364.748773] 0 [ 3364.753174] R13: 00007ffec72e1d4f R14: 00007fd6269d0300 R15: 0000000000022000 [ 3364.753676] Node 0 [ 3364.762263] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3364.762281] lowmem_reserve[]: 0 0 0 0 0 [ 3364.762298] Node 1 Normal free:26888kB min:53696kB low:67120kB high:80544kB active_anon:756kB inactive_anon:43684kB active_file:8kB inactive_file:92kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:224kB pagetables:0kB bounce:0kB free_pcp:44kB local_pcp:40kB free_cma:0kB [ 3364.762315] lowmem_reserve[]: 0 0 0 0 0 [ 3364.762332] Node 0 DMA: 8*4kB (UME) 6*8kB (ME) 14*16kB (UME) 21*32kB (UME) 3*64kB (UM) 5*128kB (ME) 2*256kB (UE) 1*512kB (E) 4*1024kB (UME) 2*2048kB (UM) 0*4096kB = 11024kB [ 3364.764695] DMA32: 9107*4kB (UME) 11595*8kB (UME) 14513*16kB (UME) 5125*32kB (UME) 2*64kB (U) 2*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 525780kB [ 3364.764755] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 3364.770441] Node 0 [ 3364.775356] Node 1 [ 3364.784929] 275*4kB [ 3364.785178] Normal: [ 3364.789503] (UM) [ 3364.793149] 275*4kB [ 3364.797348] DMA32: [ 3364.800511] (UM) 116*8kB (UM) 82*16kB (M) 350*32kB (UM) 47*64kB (M) 15*128kB (UM) 11*256kB (M) 9*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 26892kB [ 3364.800572] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3364.800577] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3364.800581] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3364.800586] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3364.800589] 92428 total pagecache pages [ 3364.800599] 0 pages in swap cache [ 3364.800604] Swap cache stats: add 0, delete 0, find 0/0 [ 3364.800607] Free swap = 0kB [ 3364.800609] Total swap = 0kB [ 3364.800616] 2097051 pages RAM [ 3364.800619] 0 pages HighMem/MovableOnly [ 3364.800622] 363840 pages reserved [ 3364.800625] 0 pages cma reserved [ 3364.800634] Out of memory (oom_kill_allocating_task): Kill process 14696 (syz-executor.5) score 0 or sacrifice child [ 3364.808512] 116*8kB [ 3364.812698] Killed process 14696 (syz-executor.5) total-vm:93120kB, anon-rss:104kB, file-rss:34752kB, shmem-rss:0kB [ 3364.816744] 9106*4kB [ 3364.889519] (UM) [ 3364.901097] (UE) [ 3364.930224] 82*16kB [ 3364.940594] 11535*8kB [ 3364.988843] (M) [ 3365.081690] (UE) 14489*16kB (UME) 5125*32kB (UME) 2*64kB (U) 2*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 524912kB [ 3365.197506] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 3365.208451] Node 1 Normal: 275*4kB (UM) 126*8kB (UM) 95*16kB (UM) 350*32kB (UM) 47*64kB (M) 15*128kB (UM) 11*256kB (M) 9*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 27180kB [ 3365.218788] 350*32kB (UM) 47*64kB (M) 15*128kB (UM) 11*256kB (M) 9*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 26892kB [ 3365.237819] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3365.247307] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3365.256234] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3365.256739] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3365.274417] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3365.274968] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3365.292808] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3365.302415] 92613 total pagecache pages [ 3365.306404] 0 pages in swap cache [ 3365.311613] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3365.320862] Swap cache stats: add 0, delete 0, find 0/0 [ 3365.326235] Free swap = 0kB [ 3365.330139] 92613 total pagecache pages [ 3365.334124] 0 pages in swap cache [ 3365.337563] Swap cache stats: add 0, delete 0, find 0/0 [ 3365.344097] Total swap = 0kB [ 3365.347124] 2097051 pages RAM [ 3365.351074] 0 pages HighMem/MovableOnly [ 3365.355050] 363840 pages reserved [ 3365.358492] 0 pages cma reserved [ 3365.363140] Free swap = 0kB [ 3365.366164] Total swap = 0kB [ 3365.370026] 2097051 pages RAM [ 3365.373131] 0 pages HighMem/MovableOnly [ 3365.377093] 363840 pages reserved [ 3365.382870] 0 pages cma reserved [ 3365.531631] syz-executor.4: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 3365.545796] syz-executor.5: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 3365.564080] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 3365.572584] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 3365.577726] CPU: 1 PID: 16741 Comm: syz-executor.5 Not tainted 4.14.225-syzkaller #0 [ 3365.585603] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3365.594953] Call Trace: [ 3365.597553] dump_stack+0x1b2/0x281 [ 3365.601615] warn_alloc.cold+0x96/0x1cc [ 3365.605611] ? zone_watermark_ok_safe+0x220/0x220 [ 3365.610462] __alloc_pages_nodemask+0x2127/0x2720 [ 3365.615315] ? lock_acquire+0x170/0x3f0 [ 3365.619286] ? lock_acquire+0x170/0x3f0 [ 3365.623263] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3365.628116] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 3365.633572] ? __mutex_unlock_slowpath+0x75/0x770 [ 3365.638398] alloc_pages_current+0x155/0x260 [ 3365.642802] ion_page_pool_alloc+0x118/0x1b0 [ 3365.647210] ion_system_heap_allocate+0x133/0x8c0 [ 3365.652060] ? _raw_spin_unlock+0x29/0x40 [ 3365.656274] ? _ion_heap_freelist_drain+0x6e/0x410 [ 3365.661194] ? ion_system_contig_heap_create+0x130/0x130 [ 3365.666647] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 3365.671666] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 3365.676511] ion_alloc+0x27a/0x810 [ 3365.680041] ? ion_dma_buf_release+0x40/0x40 [ 3365.684445] ? __might_fault+0x177/0x1b0 [ 3365.688513] ion_ioctl+0xea/0x1f0 [ 3365.691975] ? ion_query_heaps+0x360/0x360 [ 3365.696187] ? __fget+0x1fe/0x360 [ 3365.699625] ? ion_query_heaps+0x360/0x360 [ 3365.703852] do_vfs_ioctl+0x75a/0xff0 [ 3365.707650] ? ioctl_preallocate+0x1a0/0x1a0 [ 3365.712111] ? lock_downgrade+0x740/0x740 [ 3365.716241] ? __fget+0x225/0x360 [ 3365.719684] ? do_vfs_ioctl+0xff0/0xff0 [ 3365.723661] ? security_file_ioctl+0x83/0xb0 [ 3365.728062] SyS_ioctl+0x7f/0xb0 [ 3365.731416] ? do_vfs_ioctl+0xff0/0xff0 [ 3365.735390] do_syscall_64+0x1d5/0x640 [ 3365.739277] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3365.744463] RIP: 0033:0x465f69 [ 3365.747740] RSP: 002b:00007f08137cb188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3365.755436] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 3365.762693] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 3365.769954] RBP: 00000000004bfa8f R08: 0000000000000000 R09: 0000000000000000 [ 3365.777203] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 3365.784558] R13: 00007ffeb8b6e44f R14: 00007f08137cb300 R15: 0000000000022000 [ 3365.791846] CPU: 0 PID: 16728 Comm: syz-executor.4 Not tainted 4.14.225-syzkaller #0 [ 3365.799732] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3365.809083] Call Trace: [ 3365.811682] dump_stack+0x1b2/0x281 [ 3365.815309] warn_alloc.cold+0x96/0x1cc [ 3365.819307] ? zone_watermark_ok_safe+0x220/0x220 [ 3365.824278] __alloc_pages_nodemask+0x2127/0x2720 [ 3365.829121] ? lock_acquire+0x170/0x3f0 [ 3365.833099] ? lock_acquire+0x170/0x3f0 [ 3365.837101] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3365.841951] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 3365.847399] ? __mutex_unlock_slowpath+0x75/0x770 [ 3365.852245] alloc_pages_current+0x155/0x260 [ 3365.853624] warn_alloc_show_mem: 1 callbacks suppressed [ 3365.853628] Mem-Info: [ 3365.856671] ion_page_pool_alloc+0x118/0x1b0 [ 3365.868840] ion_system_heap_allocate+0x133/0x8c0 [ 3365.873686] ? _raw_spin_unlock+0x29/0x40 [ 3365.877836] ? _ion_heap_freelist_drain+0x6e/0x410 [ 3365.882765] ? ion_system_contig_heap_create+0x130/0x130 [ 3365.888245] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 3365.888657] active_anon:16327 inactive_anon:90042 isolated_anon:0 [ 3365.888657] active_file:248 inactive_file:256 isolated_file:32 [ 3365.888657] unevictable:0 dirty:37 writeback:0 unstable:0 [ 3365.888657] slab_reclaimable:12205 slab_unreclaimable:121604 [ 3365.888657] mapped:53106 shmem:90898 pagetables:752 bounce:0 [ 3365.888657] free:16756 free_pcp:62 free_cma:0 [ 3365.893268] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 3365.931572] ion_alloc+0x27a/0x810 [ 3365.935112] ? ion_dma_buf_release+0x40/0x40 [ 3365.939520] ? __might_fault+0x177/0x1b0 [ 3365.941712] systemd-journal invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=0 [ 3365.943670] ion_ioctl+0xea/0x1f0 [ 3365.943680] ? ion_query_heaps+0x360/0x360 [ 3365.963817] ? __fget+0x1fe/0x360 [ 3365.967304] ? ion_query_heaps+0x360/0x360 [ 3365.968620] systemd-journal cpuset= [ 3365.971614] do_vfs_ioctl+0x75a/0xff0 [ 3365.971616] / mems_allowed=0-1 [ 3365.975238] ? ioctl_preallocate+0x1a0/0x1a0 [ 3365.986582] ? lock_downgrade+0x740/0x740 [ 3365.990727] ? __fget+0x225/0x360 [ 3365.994202] ? do_vfs_ioctl+0xff0/0xff0 [ 3365.998179] ? security_file_ioctl+0x83/0xb0 [ 3366.002595] SyS_ioctl+0x7f/0xb0 [ 3366.005424] Node 0 active_anon:64552kB inactive_anon:316484kB active_file:188kB inactive_file:104kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:210624kB dirty:44kB writeback:100kB shmem:319580kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 3366.005956] ? do_vfs_ioctl+0xff0/0xff0 [ 3366.038873] do_syscall_64+0x1d5/0x640 [ 3366.042747] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3366.047952] RIP: 0033:0x465f69 [ 3366.051120] RSP: 002b:00007fbb52cf0188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3366.058897] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 3366.066318] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 3366.068585] Node 1 active_anon:756kB inactive_anon:43684kB active_file:12kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:44012kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3366.076428] RBP: 00000000004bfa8f R08: 0000000000000000 R09: 0000000000000000 [ 3366.076436] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 3366.118413] R13: 00007ffc0aef8def R14: 00007fbb52cf0300 R15: 0000000000022000 [ 3366.125676] CPU: 1 PID: 16726 Comm: systemd-journal Not tainted 4.14.225-syzkaller #0 [ 3366.133637] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3366.142980] Call Trace: [ 3366.146082] dump_stack+0x1b2/0x281 [ 3366.149690] dump_header+0x178/0x82f [ 3366.153387] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 3366.158468] ? ___ratelimit+0x2cd/0x530 [ 3366.162421] oom_kill_process.cold+0x10/0xb18 [ 3366.167693] out_of_memory+0xe3e/0x1190 [ 3366.171651] ? oom_killer_disable+0x1c0/0x1c0 [ 3366.176122] ? mutex_trylock+0x152/0x1a0 [ 3366.180164] __alloc_pages_nodemask+0x23e1/0x2720 [ 3366.184994] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3366.189822] ? cache_grow_begin+0x41/0x630 [ 3366.194046] cache_grow_begin+0x91/0x630 [ 3366.198084] ? cache_grow_begin+0x91/0x630 [ 3366.202308] fallback_alloc+0x207/0x2c0 [ 3366.206262] kmem_cache_alloc+0x1e5/0x3c0 [ 3366.210410] getname_flags+0xc8/0x550 [ 3366.214189] do_sys_open+0x1ce/0x410 [ 3366.217995] ? filp_open+0x60/0x60 [ 3366.221515] ? do_syscall_64+0x4c/0x640 [ 3366.225464] ? do_sys_open+0x410/0x410 [ 3366.229332] do_syscall_64+0x1d5/0x640 [ 3366.233287] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3366.238990] RIP: 0033:0x7f75d8ed3840 [ 3366.242682] RSP: 002b:00007ffeed46d1b8 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 3366.250803] RAX: ffffffffffffffda RBX: 00007ffeed46d4c0 RCX: 00007f75d8ed3840 [ 3366.258051] RDX: 00000000000001a0 RSI: 0000000000080042 RDI: 000055e9109c9d70 [ 3366.265382] RBP: 000000000000000d R08: 000000000000ffc0 R09: 00000000ffffffff [ 3366.272631] R10: 0000000000000069 R11: 0000000000000246 R12: 00000000ffffffff [ 3366.279966] R13: 000055e9109c5040 R14: 00007ffeed46d480 R15: 000055e9109c98a0 [ 3366.300794] syz-executor.1: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 3366.308581] syz-executor.4: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 3366.313024] Node 0 [ 3366.324465] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 3366.334634] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 3366.334844] CPU: 1 PID: 16742 Comm: syz-executor.1 Not tainted 4.14.225-syzkaller #0 [ 3366.347610] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3366.356944] Call Trace: [ 3366.359525] dump_stack+0x1b2/0x281 [ 3366.363144] warn_alloc.cold+0x96/0x1cc [ 3366.367096] ? zone_watermark_ok_safe+0x220/0x220 [ 3366.371918] ? usleep_range+0x130/0x130 [ 3366.375870] ? try_to_free_pages+0x23f/0x6e0 [ 3366.380265] ? _find_next_bit+0xdb/0x100 [ 3366.384328] ? run_timer_softirq+0x5a0/0x5a0 [ 3366.388740] __alloc_pages_nodemask+0x2127/0x2720 [ 3366.393587] ? lock_acquire+0x170/0x3f0 [ 3366.397557] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3366.402382] ? ion_page_pool_alloc+0x9e/0x1b0 [ 3366.406862] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 3366.412305] ? alloc_pages_current+0x123/0x260 [ 3366.416874] alloc_pages_current+0x155/0x260 [ 3366.421267] ion_page_pool_alloc+0x118/0x1b0 [ 3366.425655] ion_system_heap_allocate+0x133/0x8c0 [ 3366.430495] ? _raw_spin_unlock+0x29/0x40 [ 3366.434627] ? _ion_heap_freelist_drain+0x6e/0x410 [ 3366.439541] ? ion_system_contig_heap_create+0x130/0x130 [ 3366.444977] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 3366.449990] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 3366.454994] ion_alloc+0x27a/0x810 [ 3366.458524] ? ion_dma_buf_release+0x40/0x40 [ 3366.462930] ? __might_fault+0x177/0x1b0 [ 3366.467342] ion_ioctl+0xea/0x1f0 [ 3366.470790] ? ion_query_heaps+0x360/0x360 [ 3366.475009] ? __fget+0x1fe/0x360 [ 3366.478444] ? ion_query_heaps+0x360/0x360 [ 3366.482662] do_vfs_ioctl+0x75a/0xff0 [ 3366.486456] ? ioctl_preallocate+0x1a0/0x1a0 [ 3366.490856] ? lock_downgrade+0x740/0x740 [ 3366.494991] ? __fget+0x225/0x360 [ 3366.498423] ? do_vfs_ioctl+0xff0/0xff0 [ 3366.502378] ? security_file_ioctl+0x83/0xb0 [ 3366.506772] SyS_ioctl+0x7f/0xb0 [ 3366.510123] ? do_vfs_ioctl+0xff0/0xff0 [ 3366.514083] do_syscall_64+0x1d5/0x640 [ 3366.517956] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3366.523127] RIP: 0033:0x465f69 [ 3366.526310] RSP: 002b:00007fd6269d0188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3366.533997] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 3366.541251] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 3366.548510] RBP: 00000000004bfa8f R08: 0000000000000000 R09: 0000000000000000 [ 3366.555909] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 3366.563157] R13: 00007ffec72e1d4f R14: 00007fd6269d0300 R15: 0000000000022000 [ 3366.572913] DMA free:10964kB min:204kB low:252kB high:300kB active_anon:68kB inactive_anon:980kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3366.573984] CPU: 0 PID: 16728 Comm: syz-executor.4 Not tainted 4.14.225-syzkaller #0 [ 3366.598711] lowmem_reserve[]: [ 3366.606535] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3366.606542] 0 [ 3366.609618] Call Trace: [ 3366.609638] dump_stack+0x1b2/0x281 [ 3366.609653] warn_alloc.cold+0x96/0x1cc [ 3366.619010] 2717 [ 3366.620777] ? zone_watermark_ok_safe+0x220/0x220 [ 3366.623330] 2718 [ 3366.626938] ? usleep_range+0x130/0x130 [ 3366.630905] 2718 [ 3366.632927] ? try_to_free_pages+0x23f/0x6e0 [ 3366.637733] 2718 [ 3366.639781] ? _find_next_bit+0xdb/0x100 [ 3366.639793] ? run_timer_softirq+0x5a0/0x5a0 [ 3366.639809] __alloc_pages_nodemask+0x2127/0x2720 [ 3366.643751] Node 0 [ 3366.646060] ? lock_acquire+0x170/0x3f0 [ 3366.650469] DMA32 free:17788kB min:36200kB low:45248kB high:54296kB active_anon:64484kB inactive_anon:315504kB active_file:136kB inactive_file:40kB unevictable:0kB writepending:144kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7456kB pagetables:3008kB bounce:0kB free_pcp:916kB local_pcp:708kB free_cma:0kB [ 3366.652571] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3366.656598] lowmem_reserve[]: [ 3366.660983] ? ion_page_pool_alloc+0x9e/0x1b0 [ 3366.660998] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 3366.661020] alloc_pages_current+0x155/0x260 [ 3366.665822] 0 [ 3366.668041] ion_page_pool_alloc+0x118/0x1b0 [ 3366.672057] 0 [ 3366.700651] ion_system_heap_allocate+0x133/0x8c0 [ 3366.700664] ? _raw_spin_unlock+0x29/0x40 [ 3366.700671] ? _ion_heap_freelist_drain+0x6e/0x410 [ 3366.700682] ? ion_system_contig_heap_create+0x130/0x130 [ 3366.706031] 0 [ 3366.709112] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 3366.709122] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 3366.709134] ion_alloc+0x27a/0x810 [ 3366.713686] 0 [ 3366.719129] ? ion_dma_buf_release+0x40/0x40 [ 3366.719140] ? __might_fault+0x177/0x1b0 [ 3366.719152] ion_ioctl+0xea/0x1f0 [ 3366.723533] 0 [ 3366.725316] ? ion_query_heaps+0x360/0x360 [ 3366.731526] ? __fget+0x1fe/0x360 [ 3366.736341] Node 0 [ 3366.740474] ? ion_query_heaps+0x360/0x360 [ 3366.740484] do_vfs_ioctl+0x75a/0xff0 [ 3366.740496] ? ioctl_preallocate+0x1a0/0x1a0 [ 3366.740507] ? lock_downgrade+0x740/0x740 [ 3366.745423] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3366.750845] ? __fget+0x225/0x360 [ 3366.750854] ? do_vfs_ioctl+0xff0/0xff0 [ 3366.750866] ? security_file_ioctl+0x83/0xb0 [ 3366.752725] lowmem_reserve[]: [ 3366.757727] SyS_ioctl+0x7f/0xb0 [ 3366.762562] 0 [ 3366.766107] ? do_vfs_ioctl+0xff0/0xff0 [ 3366.767902] 0 [ 3366.772401] do_syscall_64+0x1d5/0x640 [ 3366.772418] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3366.772426] RIP: 0033:0x465f69 [ 3366.772431] RSP: 002b:00007fbb52cf0188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3366.776499] 0 [ 3366.779933] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 3366.779938] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 3366.779942] RBP: 00000000004bfa8f R08: 0000000000000000 R09: 0000000000000000 [ 3366.779947] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 3366.779952] R13: 00007ffc0aef8def R14: 00007fbb52cf0300 R15: 0000000000022000 [ 3366.788517] Mem-Info: [ 3366.791841] 0 [ 3366.796639] active_anon:16327 inactive_anon:90042 isolated_anon:0 [ 3366.796639] active_file:14 inactive_file:13 isolated_file:0 [ 3366.796639] unevictable:0 dirty:0 writeback:0 unstable:0 [ 3366.796639] slab_reclaimable:12205 slab_unreclaimable:121582 [ 3366.796639] mapped:52629 shmem:90898 pagetables:752 bounce:0 [ 3366.796639] free:13895 free_pcp:264 free_cma:0 [ 3366.800891] 0 [ 3366.800898] Node 1 Normal free:26804kB min:53696kB low:67120kB high:80544kB active_anon:756kB inactive_anon:43684kB active_file:8kB inactive_file:4kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:224kB pagetables:0kB bounce:0kB free_pcp:120kB local_pcp:120kB free_cma:0kB [ 3366.800917] lowmem_reserve[]: 0 0 0 0 0 [ 3366.800936] Node 0 DMA: 7*4kB (ME) 7*8kB (UME) 14*16kB (UME) 21*32kB (UME) 2*64kB (UM) 5*128kB [ 3366.812054] Node 0 active_anon:64552kB inactive_anon:316484kB active_file:48kB inactive_file:48kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:210516kB dirty:0kB writeback:0kB shmem:319580kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3366.836754] warn_alloc_show_mem: 1 callbacks suppressed [ 3366.836758] Mem-Info: [ 3366.845114] Node 1 active_anon:756kB inactive_anon:43684kB active_file:8kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:44012kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3366.846702] active_anon:16327 inactive_anon:90042 isolated_anon:0 [ 3366.846702] active_file:14 inactive_file:13 isolated_file:0 [ 3366.846702] unevictable:0 dirty:0 writeback:0 unstable:0 [ 3366.846702] slab_reclaimable:12205 slab_unreclaimable:121582 [ 3366.846702] mapped:52629 shmem:90898 pagetables:752 bounce:0 [ 3366.846702] free:13895 free_pcp:264 free_cma:0 [ 3366.849823] Node 0 DMA free:10964kB min:204kB low:252kB high:300kB active_anon:68kB inactive_anon:980kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3366.849842] lowmem_reserve[]: [ 3366.855167] Node 0 active_anon:64552kB inactive_anon:316484kB active_file:48kB inactive_file:48kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:210516kB dirty:0kB writeback:0kB shmem:319580kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3366.855227] 0 [ 3366.859216] Node 1 active_anon:756kB inactive_anon:43684kB active_file:8kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:44012kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3366.859220] Node 0 DMA free:10964kB min:204kB low:252kB high:300kB active_anon:68kB inactive_anon:980kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3366.859239] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 3366.859259] Node 0 DMA32 free:17812kB min:36200kB low:45248kB high:54296kB active_anon:64484kB inactive_anon:315504kB active_file:44kB inactive_file:48kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7456kB pagetables:3008kB bounce:0kB free_pcp:936kB local_pcp:728kB free_cma:0kB [ 3366.859278] lowmem_reserve[]: [ 3366.867836] 2717 [ 3366.871909] (ME) [ 3366.873310] 2718 [ 3366.881042] 0 0 0 0 0 [ 3366.881064] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3366.881083] lowmem_reserve[]: 0 0 0 0 0 [ 3366.881103] Node 1 Normal free:26804kB min:53696kB low:67120kB high:80544kB active_anon:756kB inactive_anon:43684kB active_file:8kB inactive_file:4kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:224kB pagetables:0kB bounce:0kB free_pcp:120kB local_pcp:120kB free_cma:0kB [ 3366.889848] 2718 [ 3366.891942] 2*256kB [ 3366.897488] 2718 [ 3366.904822] lowmem_reserve[]: 0 0 0 0 0 [ 3366.904844] Node 0 DMA: [ 3366.919455] Node 0 [ 3366.923826] (UE) [ 3366.964101] DMA32 free:17812kB min:36200kB low:45248kB high:54296kB active_anon:64484kB inactive_anon:315504kB active_file:44kB inactive_file:48kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7456kB pagetables:3008kB bounce:0kB free_pcp:936kB local_pcp:208kB free_cma:0kB [ 3366.990035] 7*4kB [ 3367.005662] lowmem_reserve[]: [ 3367.068764] (ME) [ 3367.105328] 0 [ 3367.188383] 7*8kB [ 3367.193187] 1*512kB [ 3367.248374] (UME) [ 3367.255663] 0 [ 3367.256213] 14*16kB [ 3367.258779] 0 [ 3367.264733] (UME) [ 3367.293467] 0 [ 3367.321116] 21*32kB [ 3367.326220] (E) [ 3367.326384] (UME) [ 3367.328469] 4*1024kB (UME) 2*2048kB (UM) 0*4096kB = 10964kB [ 3367.328488] Node 0 DMA32: 892*4kB (ME) 379*8kB [ 3367.343823] 2*64kB [ 3367.372761] 0 [ 3367.374069] (UM) [ 3367.378033] 5*128kB [ 3367.380421] Node 0 [ 3367.382890] (ME) [ 3367.384757] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3367.386853] 2*256kB [ 3367.389201] lowmem_reserve[]: [ 3367.398623] (UE) [ 3367.399174] (UME) [ 3367.401732] 1*512kB [ 3367.407042] 94*16kB [ 3367.415703] (E) [ 3367.417793] 0 [ 3367.420376] 4*1024kB [ 3367.422265] 0 0 0 0 [ 3367.422280] Node 1 Normal free:545228kB min:53696kB low:67120kB high:80544kB active_anon:756kB inactive_anon:43684kB active_file:8kB inactive_file:268kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:224kB pagetables:0kB bounce:0kB free_pcp:444kB local_pcp:104kB free_cma:0kB [ 3367.422296] lowmem_reserve[]: 0 0 0 0 0 [ 3367.422313] Node 0 DMA: 6*4kB (ME) 4*8kB (UE) 6*16kB (UME) 16*32kB (UME) [ 3367.424789] (UME) [ 3367.450033] (ME) [ 3367.456056] 2*2048kB [ 3367.457465] 298*32kB (UME) 469*64kB (UM) 9*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 48808kB [ 3367.457500] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 3367.457544] Node 1 Normal: 27*4kB (UM) [ 3367.460050] (UM) [ 3367.463984] 106*8kB [ 3367.464811] 0*4096kB [ 3367.466427] (UM) 83*16kB (UM) 335*32kB (UM) 7924*64kB (UM) 144*128kB (UM) 12*256kB (UM) 7*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 545228kB [ 3367.466479] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3367.466485] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3367.466490] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3367.466496] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3367.466500] 91603 total pagecache pages [ 3367.466510] 0 pages in swap cache [ 3367.466514] Swap cache stats: add 0, delete 0, find 0/0 [ 3367.466520] Free swap = 0kB [ 3367.468956] = 10964kB [ 3367.474651] Total swap = 0kB [ 3367.502526] 15*64kB [ 3367.509677] 2097051 pages RAM [ 3367.513475] (U) [ 3367.515087] 0 pages HighMem/MovableOnly [ 3367.517512] 7*128kB [ 3367.521923] 363840 pages reserved [ 3367.530537] (UME) [ 3367.543770] Node 0 [ 3367.544533] 2*256kB [ 3367.546466] DMA32: [ 3367.548816] (UE) 1*512kB (E) 4*1024kB (UME) [ 3367.551335] 520*4kB [ 3367.564045] 2*2048kB [ 3367.576128] 0 pages cma reserved [ 3367.581479] (UM) [ 3367.598314] (ME) [ 3367.599042] 0*4096kB [ 3367.603024] 379*8kB [ 3367.606456] = 11736kB [ 3367.632076] (UME) [ 3367.634793] Node 0 [ 3367.637634] 94*16kB [ 3367.639986] DMA32: [ 3367.651603] (ME) [ 3367.653660] 520*4kB [ 3367.655735] 298*32kB [ 3367.659317] (ME) [ 3367.678268] (UME) [ 3367.679620] 380*8kB [ 3367.681389] 528*64kB [ 3367.683704] (UME) 96*16kB [ 3367.686107] (UM) [ 3367.688150] (UME) 113*32kB (UME) 528*64kB (UM) 9*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 45216kB [ 3367.711574] 9*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 51096kB [ 3367.711811] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 3367.730078] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 3367.741253] Node 1 Normal: 27*4kB (UM) 105*8kB (M) 83*16kB (UM) 46*32kB (M) 7034*64kB (UM) 144*128kB (UM) 12*256kB (UM) 7*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 479012kB [ 3367.751594] Node 1 Normal: 27*4kB (UM) 106*8kB (UM) 83*16kB (UM) 47*32kB (UM) 6921*64kB (UM) 144*128kB (UM) 12*256kB (UM) 7*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 471820kB [ 3367.758029] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3367.782549] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3367.791585] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3367.798250] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3367.800752] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3367.818500] 91705 total pagecache pages [ 3367.822485] 0 pages in swap cache [ 3367.825931] Swap cache stats: add 0, delete 0, find 0/0 [ 3367.831581] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3367.831614] Free swap = 0kB [ 3367.840203] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3367.840209] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3367.840214] 91705 total pagecache pages [ 3367.843809] Total swap = 0kB [ 3367.871683] 0 pages in swap cache [ 3367.875159] Swap cache stats: add 0, delete 0, find 0/0 [ 3367.880957] 2097051 pages RAM [ 3367.884147] 0 pages HighMem/MovableOnly [ 3367.892044] Free swap = 0kB [ 3367.895350] Total swap = 0kB [ 3367.899176] 2097051 pages RAM [ 3367.903006] 0 pages HighMem/MovableOnly [ 3367.907331] 363840 pages reserved [ 3367.914756] 363840 pages reserved [ 3367.918388] 0 pages cma reserved [ 3367.931827] 0 pages cma reserved [ 3367.935214] Out of memory (oom_kill_allocating_task): Kill process 16726 (systemd-journal) score 0 or sacrifice child [ 3367.968252] Killed process 16726 (systemd-journal) total-vm:46096kB, anon-rss:468kB, file-rss:4kB, shmem-rss:1580kB [ 3367.992507] oom_reaper: reaped process 16726 (systemd-journal), now anon-rss:0kB, file-rss:0kB, shmem-rss:1580kB [ 3368.113055] systemd[1]: systemd-journald.service: Failed with result 'signal'. [ 3368.134133] systemd[1]: systemd-journald.service: Service has no hold-off time, scheduling restart. [ 3368.154801] systemd[1]: Stopped Journal Service. [ 3368.187449] systemd[1]: Starting Journal Service... 05:21:40 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0) 05:21:40 executing program 2: socketpair(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) recvfrom$llc(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x1a, 0x78e341917cb35c9f, 0x20, 0xc2, 0x7, 0x5, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x10) 05:21:40 executing program 3: r0 = openat$ion(0xffffffffffffff9c, 0x0, 0x40000, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x2080000001, 0x32}) [ 3368.227540] systemd[1]: Starting Load/Save RF Kill Switch Status... 05:21:40 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) write$dsp(0xffffffffffffffff, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x80000001, 0x32}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(0xffffffffffffffff, 0x7a5, &(0x7f0000000000)={{@any, 0x7}, 0x1, 0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(0xffffffffffffffff, 0x7a4, &(0x7f00000000c0)={{@hyper}, 0x9, 0x3f, 0x0, 0x8}) 05:21:40 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0) 05:21:40 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) write$dsp(0xffffffffffffffff, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x80000001, 0x32}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(0xffffffffffffffff, 0x7a5, &(0x7f0000000000)={{@any, 0x7}, 0x1, 0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(0xffffffffffffffff, 0x7a4, &(0x7f00000000c0)={{@hyper}, 0x9, 0x3f, 0x0, 0x8}) 05:21:40 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) write$dsp(0xffffffffffffffff, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x80000001, 0x32}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(0xffffffffffffffff, 0x7a5, &(0x7f0000000000)={{@any, 0x7}, 0x1, 0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(0xffffffffffffffff, 0x7a4, &(0x7f00000000c0)={{@hyper}, 0x9, 0x0, 0x13, 0x8}) 05:21:40 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x0, 0x32}) 05:21:40 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x2080000001, 0x32}) 05:21:40 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x0, 0x32}) [ 3368.586657] systemd[1]: Started Load/Save RF Kill Switch Status. [ 3368.630867] systemd-journald[16767]: File /run/log/journal/64dd78f1a75445a997c532444ad0f085/system.journal corrupted or uncleanly shut down, renaming and replacing. 05:21:40 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x0, 0x32}) 05:21:41 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x2080000001}) 05:21:41 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x2080000001}) [ 3369.103912] syz-executor.1: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 3369.138422] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 3369.157041] CPU: 1 PID: 16794 Comm: syz-executor.1 Not tainted 4.14.225-syzkaller #0 [ 3369.164955] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3369.168909] syz-executor.4: [ 3369.174410] Call Trace: [ 3369.174432] dump_stack+0x1b2/0x281 [ 3369.174446] warn_alloc.cold+0x96/0x1cc [ 3369.174458] ? zone_watermark_ok_safe+0x220/0x220 [ 3369.174478] __alloc_pages_nodemask+0x2127/0x2720 [ 3369.193027] page allocation failure: order:4 [ 3369.197747] ? lock_acquire+0x170/0x3f0 [ 3369.197765] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3369.197781] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 3369.197793] ? __mutex_unlock_slowpath+0x75/0x770 [ 3369.221863] ? retint_kernel+0x2d/0x2d [ 3369.225748] alloc_pages_current+0x155/0x260 [ 3369.229268] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 3369.230714] ion_page_pool_alloc+0x118/0x1b0 [ 3369.230727] ion_system_heap_allocate+0x133/0x8c0 [ 3369.230738] ? ion_alloc+0x187/0x810 [ 3369.243679] (null) [ 3369.247224] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 3369.247239] ? ion_system_contig_heap_create+0x130/0x130 [ 3369.264214] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 3369.269260] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 3369.272398] syz-executor.4 cpuset= [ 3369.274116] ion_alloc+0x204/0x810 [ 3369.274131] ? ion_dma_buf_release+0x40/0x40 [ 3369.285590] ? __might_fault+0x177/0x1b0 [ 3369.285716] / [ 3369.289648] ion_ioctl+0xea/0x1f0 [ 3369.294797] ? ion_query_heaps+0x360/0x360 [ 3369.297326] mems_allowed=0-1 [ 3369.299025] ? __fget+0x1fe/0x360 [ 3369.299035] ? ion_query_heaps+0x360/0x360 [ 3369.299044] do_vfs_ioctl+0x75a/0xff0 [ 3369.299058] ? ioctl_preallocate+0x1a0/0x1a0 [ 3369.299067] ? lock_downgrade+0x740/0x740 [ 3369.299078] ? __fget+0x225/0x360 [ 3369.299087] ? do_vfs_ioctl+0xff0/0xff0 [ 3369.299097] ? security_file_ioctl+0x83/0xb0 [ 3369.299106] SyS_ioctl+0x7f/0xb0 [ 3369.299113] ? do_vfs_ioctl+0xff0/0xff0 [ 3369.299123] do_syscall_64+0x1d5/0x640 [ 3369.299138] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3369.299147] RIP: 0033:0x465f69 [ 3369.353578] RSP: 002b:00007fd6269d0188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3369.361303] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 3369.368577] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 3369.375847] RBP: 00000000004bfa8f R08: 0000000000000000 R09: 0000000000000000 [ 3369.383207] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 3369.390514] R13: 00007ffec72e1d4f R14: 00007fd6269d0300 R15: 0000000000022000 [ 3369.397797] CPU: 0 PID: 16791 Comm: syz-executor.4 Not tainted 4.14.225-syzkaller #0 [ 3369.405691] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3369.415136] Call Trace: [ 3369.417740] dump_stack+0x1b2/0x281 [ 3369.421376] warn_alloc.cold+0x96/0x1cc [ 3369.425446] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 3369.430657] ? zone_watermark_ok_safe+0x220/0x220 [ 3369.435527] __alloc_pages_nodemask+0x2127/0x2720 [ 3369.440417] ? lock_acquire+0x170/0x3f0 [ 3369.444405] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3369.449488] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 3369.454952] ? __mutex_unlock_slowpath+0x75/0x770 [ 3369.459813] alloc_pages_current+0x155/0x260 [ 3369.464270] ion_page_pool_alloc+0x118/0x1b0 [ 3369.468686] ion_system_heap_allocate+0x133/0x8c0 [ 3369.473675] ? ion_alloc+0x187/0x810 [ 3369.477460] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 3369.483017] ? ion_system_contig_heap_create+0x130/0x130 [ 3369.488483] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 3369.493516] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 3369.498372] ion_alloc+0x204/0x810 [ 3369.501924] ? ion_dma_buf_release+0x40/0x40 [ 3369.506338] ? __might_fault+0x177/0x1b0 [ 3369.510471] ion_ioctl+0xea/0x1f0 [ 3369.513993] ? ion_query_heaps+0x360/0x360 [ 3369.518212] ? __fget+0x1fe/0x360 [ 3369.521649] ? ion_query_heaps+0x360/0x360 [ 3369.525864] do_vfs_ioctl+0x75a/0xff0 [ 3369.529650] ? ioctl_preallocate+0x1a0/0x1a0 [ 3369.534125] ? lock_downgrade+0x740/0x740 [ 3369.538284] ? __fget+0x225/0x360 [ 3369.541720] ? do_vfs_ioctl+0xff0/0xff0 [ 3369.545780] ? security_file_ioctl+0x83/0xb0 [ 3369.550170] SyS_ioctl+0x7f/0xb0 [ 3369.553520] ? do_vfs_ioctl+0xff0/0xff0 [ 3369.557474] do_syscall_64+0x1d5/0x640 [ 3369.561352] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3369.566524] RIP: 0033:0x465f69 [ 3369.569714] RSP: 002b:00007fbb52cf0188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3369.577406] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 3369.585091] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 3369.593167] RBP: 00000000004bfa8f R08: 0000000000000000 R09: 0000000000000000 [ 3369.600686] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 05:21:41 executing program 2: socketpair(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) recvfrom$llc(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 05:21:41 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x2080000001}) [ 3369.607938] R13: 00007ffc0aef8def R14: 00007fbb52cf0300 R15: 0000000000022000 [ 3369.793996] warn_alloc_show_mem: 1 callbacks suppressed [ 3369.794000] Mem-Info: [ 3369.808867] active_anon:16478 inactive_anon:90039 isolated_anon:0 [ 3369.808867] active_file:1690 inactive_file:5495 isolated_file:0 [ 3369.808867] unevictable:0 dirty:82 writeback:0 unstable:0 [ 3369.808867] slab_reclaimable:12318 slab_unreclaimable:121517 [ 3369.808867] mapped:48419 shmem:90894 pagetables:804 bounce:0 [ 3369.808867] free:93190 free_pcp:482 free_cma:0 [ 3369.906184] Node 0 active_anon:65128kB inactive_anon:308476kB active_file:6452kB inactive_file:10988kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:185636kB dirty:304kB writeback:0kB shmem:311568kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 3369.977200] Node 1 active_anon:784kB inactive_anon:51680kB active_file:308kB inactive_file:11392kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:8340kB dirty:24kB writeback:0kB shmem:52008kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 3370.047097] systemd[1]: Started Journal Service. [ 3370.054826] Node 0 DMA free:11148kB min:204kB low:252kB high:300kB active_anon:68kB inactive_anon:980kB active_file:352kB inactive_file:0kB unevictable:0kB writepending:4kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3370.126196] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 3370.137238] Node 0 DMA32 free:443544kB min:36200kB low:45248kB high:54296kB active_anon:65060kB inactive_anon:307496kB active_file:6300kB inactive_file:10988kB unevictable:0kB writepending:300kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7552kB pagetables:3204kB bounce:0kB free_pcp:1324kB local_pcp:648kB free_cma:0kB [ 3370.210256] lowmem_reserve[]: 0 0 0 0 0 [ 3370.220290] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3370.303574] lowmem_reserve[]: 0 0 0 0 0 [ 3370.312568] Node 1 Normal free:69028kB min:53696kB low:67120kB high:80544kB active_anon:784kB inactive_anon:51680kB active_file:308kB inactive_file:424kB unevictable:0kB writepending:24kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:224kB pagetables:12kB bounce:0kB free_pcp:676kB local_pcp:16kB free_cma:0kB [ 3370.342531] lowmem_reserve[]: 0 0 0 0 0 [ 3370.347191] Node 0 DMA: 20*4kB (UME) 8*8kB (UE) 8*16kB (UME) 3*32kB (UME) 11*64kB (UM) 7*128kB (UME) 2*256kB (UE) 1*512kB (E) 4*1024kB (UME) 2*2048kB (UM) 0*4096kB = 11184kB [ 3370.365761] Node 0 DMA32: 4*4kB (ME) 137*8kB (E) 4407*16kB (UE) 8435*32kB (UME) 9*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 342120kB [ 3370.397502] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 3370.424890] Node 1 Normal: 583*4kB (UM) 951*8kB (UM) 807*16kB (UM) 263*32kB (UM) 142*64kB (UM) 198*128kB (UM) 12*256kB (UM) 1*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 69284kB [ 3370.460407] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 3370.467192] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3370.474096] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3370.484961] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 3370.492435] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3370.501880] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3370.509283] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3370.520691] device bridge_slave_1 left promiscuous mode [ 3370.526240] bridge0: port 2(bridge_slave_1) entered disabled state [ 3370.534408] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3370.543869] 95432 total pagecache pages [ 3370.549452] device bridge_slave_0 left promiscuous mode [ 3370.554989] bridge0: port 1(bridge_slave_0) entered disabled state [ 3370.562934] 0 pages in swap cache [ 3370.566414] Swap cache stats: add 0, delete 0, find 0/0 [ 3370.574065] Free swap = 0kB [ 3370.577223] Total swap = 0kB [ 3370.583670] device veth1_macvtap left promiscuous mode [ 3370.591011] 2097051 pages RAM [ 3370.594161] 0 pages HighMem/MovableOnly [ 3370.599949] device veth0_macvtap left promiscuous mode [ 3370.605479] device veth1_vlan left promiscuous mode [ 3370.612149] 363840 pages reserved [ 3370.615628] 0 pages cma reserved [ 3370.620373] device veth0_vlan left promiscuous mode [ 3370.901024] device hsr_slave_1 left promiscuous mode [ 3370.938863] device hsr_slave_0 left promiscuous mode [ 3371.005299] team0 (unregistering): Port device team_slave_1 removed [ 3371.037303] team0 (unregistering): Port device team_slave_0 removed [ 3371.073120] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 3371.084988] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 3371.202687] bond0 (unregistering): Released all slaves [ 3371.665794] oom_reaper: reaped process 16791 (syz-executor.4), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 3371.858243] oom_reaper: reaped process 16794 (syz-executor.1), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 3371.919399] syz-executor.1 invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask= [ 3371.919403] syz-executor.4: page allocation failure: order:0 [ 3371.941294] syz-executor.1: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 3371.961034] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 3371.986651] (null), order=0, oom_score_adj=0 [ 3371.992584] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 3371.997335] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 3372.002820] CPU: 1 PID: 16377 Comm: syz-executor.1 Not tainted 4.14.225-syzkaller #0 [ 3372.010698] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3372.020051] Call Trace: [ 3372.022640] dump_stack+0x1b2/0x281 [ 3372.026250] dump_header+0x178/0x82f [ 3372.029979] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 3372.035074] ? ___ratelimit+0x2cd/0x530 [ 3372.039054] oom_kill_process.cold+0x10/0xb18 [ 3372.043555] out_of_memory+0xe3e/0x1190 [ 3372.047530] ? oom_killer_disable+0x1c0/0x1c0 [ 3372.052015] ? mutex_trylock+0x152/0x1a0 [ 3372.056069] __alloc_pages_nodemask+0x23e1/0x2720 [ 3372.060903] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3372.065737] alloc_pages_current+0x155/0x260 [ 3372.070136] filemap_fault+0xea3/0x1980 [ 3372.074113] ext4_filemap_fault+0x84/0xb0 [ 3372.078252] __do_fault+0xfa/0x380 [ 3372.081813] __handle_mm_fault+0x2497/0x4620 [ 3372.086216] ? vm_insert_page+0x7c0/0x7c0 [ 3372.090375] ? nanosleep_copyout+0x100/0x100 [ 3372.094867] handle_mm_fault+0x391/0x860 [ 3372.098917] __do_page_fault+0x549/0xad0 [ 3372.100676] syz-executor.1 cpuset= [ 3372.102996] ? spurious_fault+0x640/0x640 [ 3372.102997] / mems_allowed=0-1 [ 3372.106537] ? do_page_fault+0x60/0x500 [ 3372.117824] ? page_fault+0x2f/0x50 [ 3372.121440] page_fault+0x45/0x50 [ 3372.124874] RIP: 336b53:0x5 [ 3372.127786] RSP: 001a:00007ffec72e200c EFLAGS: 00000032 [ 3372.141370] CPU: 0 PID: 16791 Comm: syz-executor.4 Not tainted 4.14.225-syzkaller #0 [ 3372.154640] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3372.163975] Call Trace: [ 3372.166552] dump_stack+0x1b2/0x281 [ 3372.170424] warn_alloc.cold+0x96/0x1cc [ 3372.174397] ? zone_watermark_ok_safe+0x220/0x220 [ 3372.179234] ? usleep_range+0x130/0x130 [ 3372.183221] ? try_to_free_pages+0x23f/0x6e0 [ 3372.187630] ? _find_next_bit+0xdb/0x100 [ 3372.191675] ? run_timer_softirq+0x5a0/0x5a0 [ 3372.196084] __alloc_pages_nodemask+0x2127/0x2720 [ 3372.200911] ? lock_acquire+0x170/0x3f0 [ 3372.204889] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3372.209712] ? ion_page_pool_alloc+0x9e/0x1b0 [ 3372.214192] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 3372.219646] alloc_pages_current+0x155/0x260 [ 3372.224063] ion_page_pool_alloc+0x118/0x1b0 [ 3372.228551] ion_system_heap_allocate+0x133/0x8c0 [ 3372.233384] ? ion_alloc+0x187/0x810 [ 3372.237085] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 3372.242547] ? ion_system_contig_heap_create+0x130/0x130 [ 3372.247977] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 3372.252975] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 3372.257798] ion_alloc+0x204/0x810 [ 3372.261323] ? ion_dma_buf_release+0x40/0x40 [ 3372.265713] ? __might_fault+0x177/0x1b0 [ 3372.269759] ion_ioctl+0xea/0x1f0 [ 3372.273216] ? ion_query_heaps+0x360/0x360 [ 3372.277432] ? __fget+0x1fe/0x360 [ 3372.280868] ? ion_query_heaps+0x360/0x360 [ 3372.285185] do_vfs_ioctl+0x75a/0xff0 [ 3372.289142] ? ioctl_preallocate+0x1a0/0x1a0 [ 3372.293532] ? lock_downgrade+0x740/0x740 [ 3372.297688] ? __fget+0x225/0x360 [ 3372.301120] ? do_vfs_ioctl+0xff0/0xff0 [ 3372.305075] ? security_file_ioctl+0x83/0xb0 [ 3372.309483] SyS_ioctl+0x7f/0xb0 [ 3372.312847] ? do_vfs_ioctl+0xff0/0xff0 [ 3372.316803] do_syscall_64+0x1d5/0x640 [ 3372.320676] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3372.325846] RIP: 0033:0x465f69 [ 3372.329020] RSP: 002b:00007fbb52cf0188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3372.336708] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 3372.343957] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 3372.351293] RBP: 00000000004bfa8f R08: 0000000000000000 R09: 0000000000000000 [ 3372.358544] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 3372.365794] R13: 00007ffc0aef8def R14: 00007fbb52cf0300 R15: 0000000000022000 [ 3372.373083] Mem-Info: [ 3372.375511] active_anon:16512 inactive_anon:90040 isolated_anon:0 [ 3372.375511] active_file:37 inactive_file:0 isolated_file:0 [ 3372.375511] unevictable:0 dirty:0 writeback:0 unstable:0 [ 3372.375511] slab_reclaimable:12320 slab_unreclaimable:121056 [ 3372.375511] mapped:52620 shmem:90895 pagetables:798 bounce:0 [ 3372.375511] free:13749 free_pcp:92 free_cma:0 [ 3372.378906] CPU: 0 PID: 16794 Comm: syz-executor.1 Not tainted 4.14.225-syzkaller #0 [ 3372.416826] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3372.423226] Node 0 active_anon:65264kB inactive_anon:308480kB active_file:144kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:209200kB dirty:0kB writeback:0kB shmem:311572kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3372.426450] Call Trace: [ 3372.454356] Node 1 active_anon:784kB inactive_anon:51680kB active_file:4kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:1280kB dirty:0kB writeback:0kB shmem:52008kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3372.456888] dump_stack+0x1b2/0x281 [ 3372.483700] Node 0 [ 3372.487277] warn_alloc.cold+0x96/0x1cc [ 3372.487289] ? zone_watermark_ok_safe+0x220/0x220 [ 3372.487299] ? usleep_range+0x130/0x130 [ 3372.497254] DMA free:10952kB min:204kB low:252kB high:300kB active_anon:68kB inactive_anon:980kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3372.498388] ? try_to_free_pages+0x23f/0x6e0 [ 3372.502339] lowmem_reserve[]: [ 3372.528084] ? _find_next_bit+0xdb/0x100 [ 3372.528093] ? run_timer_softirq+0x5a0/0x5a0 [ 3372.528109] __alloc_pages_nodemask+0x2127/0x2720 [ 3372.528126] ? lock_acquire+0x170/0x3f0 [ 3372.552917] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3372.557770] ? ion_page_pool_alloc+0x9e/0x1b0 [ 3372.562270] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 3372.567227] 0 2717 2718 2718 [ 3372.567769] alloc_pages_current+0x155/0x260 [ 3372.567783] ion_page_pool_alloc+0x118/0x1b0 [ 3372.570874] 2718 [ 3372.575270] ion_system_heap_allocate+0x133/0x8c0 [ 3372.587398] ? ion_alloc+0x187/0x810 [ 3372.591111] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 3372.596558] ? ion_system_contig_heap_create+0x130/0x130 [ 3372.601995] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 3372.606997] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 3372.611827] ion_alloc+0x204/0x810 [ 3372.615355] ? ion_dma_buf_release+0x40/0x40 [ 3372.619747] ? __might_fault+0x177/0x1b0 [ 3372.623792] ion_ioctl+0xea/0x1f0 [ 3372.627273] ? ion_query_heaps+0x360/0x360 [ 3372.631489] ? __fget+0x1fe/0x360 [ 3372.634943] ? ion_query_heaps+0x360/0x360 [ 3372.639188] do_vfs_ioctl+0x75a/0xff0 [ 3372.642983] ? ioctl_preallocate+0x1a0/0x1a0 [ 3372.647398] ? lock_downgrade+0x740/0x740 [ 3372.651535] ? __fget+0x225/0x360 [ 3372.654981] ? do_vfs_ioctl+0xff0/0xff0 [ 3372.658938] ? security_file_ioctl+0x83/0xb0 [ 3372.663354] SyS_ioctl+0x7f/0xb0 [ 3372.666715] ? do_vfs_ioctl+0xff0/0xff0 [ 3372.670683] do_syscall_64+0x1d5/0x640 [ 3372.674562] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3372.679737] RIP: 0033:0x465f69 [ 3372.682911] RSP: 002b:00007fd6269d0188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3372.690598] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 3372.698544] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 3372.705819] RBP: 00000000004bfa8f R08: 0000000000000000 R09: 0000000000000000 [ 3372.713069] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 3372.720321] R13: 00007ffec72e1d4f R14: 00007fd6269d0300 R15: 0000000000022000 [ 3372.727906] Node 0 DMA32 free:17536kB min:36200kB low:45248kB high:54296kB active_anon:65196kB inactive_anon:307500kB active_file:44kB inactive_file:72kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7456kB pagetables:3180kB bounce:0kB free_pcp:212kB local_pcp:0kB free_cma:0kB [ 3372.786544] lowmem_reserve[]: 0 0 0 0 0 [ 3372.812082] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3372.856469] lowmem_reserve[]: 0 0 0 0 0 [ 3372.866919] Node 1 Normal free:26012kB min:53696kB low:67120kB high:80544kB active_anon:776kB inactive_anon:51680kB active_file:4kB inactive_file:4kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:224kB pagetables:12kB bounce:0kB free_pcp:156kB local_pcp:32kB free_cma:0kB [ 3372.912432] lowmem_reserve[]: 0 0 0 0 0 [ 3372.916457] Node 0 DMA: 8*4kB (UME) 7*8kB (UME) 11*16kB (ME) 8*32kB (ME) 5*64kB (UM) 7*128kB (UME) 2*256kB (UE) 1*512kB (E) 4*1024kB (UME) 2*2048kB (UM) 0*4096kB = 10952kB [ 3372.937143] warn_alloc_show_mem: 1 callbacks suppressed [ 3372.937147] Mem-Info: [ 3372.945021] active_anon:16464 inactive_anon:90040 isolated_anon:0 [ 3372.945021] active_file:38 inactive_file:0 isolated_file:0 [ 3372.945021] unevictable:0 dirty:0 writeback:0 unstable:0 [ 3372.945021] slab_reclaimable:12320 slab_unreclaimable:121041 [ 3372.945021] mapped:52595 shmem:90895 pagetables:798 bounce:0 [ 3372.945021] free:13697 free_pcp:127 free_cma:0 [ 3372.945833] Node 0 [ 3373.037148] Node 0 active_anon:65080kB inactive_anon:308480kB active_file:140kB inactive_file:24kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:209100kB dirty:0kB writeback:0kB shmem:311572kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3373.048154] DMA32: [ 3373.097107] Node 1 active_anon:776kB inactive_anon:51680kB active_file:4kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:1280kB dirty:0kB writeback:0kB shmem:52008kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3373.123556] 924*4kB (UME) 414*8kB (ME) 108*16kB (ME) 212*32kB (UME) 26*64kB (UM) 5*128kB (UM) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 17824kB [ 3373.157100] Node 0 DMA free:10952kB min:204kB low:252kB high:300kB active_anon:68kB inactive_anon:980kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3373.168404] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 3373.221177] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 3373.226231] Node 0 DMA32 free:17824kB min:36200kB low:45248kB high:54296kB active_anon:65012kB inactive_anon:307500kB active_file:28kB inactive_file:48kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7456kB pagetables:3180kB bounce:0kB free_pcp:352kB local_pcp:212kB free_cma:0kB [ 3373.234327] Node 1 Normal: 209*4kB (M) 115*8kB (M) 82*16kB (UM) 47*32kB (M) 51*64kB (UM) 114*128kB (UM) 12*256kB (UM) 1*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 26012kB [ 3373.301122] lowmem_reserve[]: 0 0 0 0 0 [ 3373.305158] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3373.308251] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3373.360655] lowmem_reserve[]: 0 0 0 0 0 [ 3373.363713] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3373.364988] Node 1 Normal free:26012kB min:53696kB low:67120kB high:80544kB active_anon:776kB inactive_anon:51680kB active_file:4kB inactive_file:4kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:224kB pagetables:12kB bounce:0kB free_pcp:156kB local_pcp:124kB free_cma:0kB [ 3373.394069] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3373.521334] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3373.528920] lowmem_reserve[]: 0 0 0 0 0 [ 3373.534031] Node 0 DMA: 8*4kB (UME) 7*8kB (UME) 11*16kB (ME) 8*32kB (ME) 5*64kB (UM) 7*128kB (UME) 2*256kB (UE) 1*512kB (E) 4*1024kB (UME) 2*2048kB (UM) 0*4096kB = 10952kB [ 3373.562431] 92513 total pagecache pages [ 3373.589353] 0 pages in swap cache [ 3373.603851] Swap cache stats: add 0, delete 0, find 0/0 [ 3373.624298] Node 0 DMA32: 434*4kB (UME) 459*8kB (UE) 279*16kB (UME) 1844*32kB (UME) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 68880kB [ 3373.627797] Free swap = 0kB [ 3373.687044] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 3373.711374] Total swap = 0kB [ 3373.714421] 2097051 pages RAM [ 3373.717801] 0 pages HighMem/MovableOnly [ 3373.721285] Node 1 Normal: 515*4kB (UM) 605*8kB (UM) 408*16kB (UM) 64*32kB (UM) 49*64kB (M) 142*128kB (UM) 13*256kB (UM) 1*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 40628kB [ 3373.750932] syz-executor.1: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 3373.762363] 363840 pages reserved [ 3373.765288] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3373.766366] 0 pages cma reserved [ 3373.777693] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 3373.784130] CPU: 0 PID: 16794 Comm: syz-executor.1 Not tainted 4.14.225-syzkaller #0 [ 3373.792008] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3373.801370] Call Trace: [ 3373.803973] dump_stack+0x1b2/0x281 [ 3373.807607] warn_alloc.cold+0x96/0x1cc [ 3373.811579] ? zone_watermark_ok_safe+0x220/0x220 [ 3373.816446] __alloc_pages_nodemask+0x2127/0x2720 [ 3373.821307] ? lock_acquire+0x170/0x3f0 [ 3373.825287] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3373.826962] Out of memory (oom_kill_allocating_task): Kill process 16377 (syz-executor.1) score 0 or sacrifice child [ 3373.830144] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 3373.830159] ? __mutex_unlock_slowpath+0x75/0x770 [ 3373.847322] Killed process 16377 (syz-executor.1) total-vm:93120kB, anon-rss:108kB, file-rss:33196kB, shmem-rss:0kB [ 3373.851095] alloc_pages_current+0x155/0x260 [ 3373.851110] ion_page_pool_alloc+0x118/0x1b0 [ 3373.870475] ion_system_heap_allocate+0x133/0x8c0 [ 3373.875320] ? _raw_spin_unlock+0x29/0x40 [ 3373.879463] ? _ion_heap_freelist_drain+0x6e/0x410 [ 3373.884392] ? ion_system_contig_heap_create+0x130/0x130 [ 3373.889824] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 3373.894823] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 3373.899647] ion_alloc+0x27a/0x810 [ 3373.903170] ? ion_dma_buf_release+0x40/0x40 [ 3373.907561] ? __might_fault+0x177/0x1b0 [ 3373.911622] ion_ioctl+0xea/0x1f0 [ 3373.915141] ? ion_query_heaps+0x360/0x360 [ 3373.919354] ? __fget+0x1fe/0x360 [ 3373.922811] ? ion_query_heaps+0x360/0x360 [ 3373.927028] do_vfs_ioctl+0x75a/0xff0 [ 3373.930835] ? ioctl_preallocate+0x1a0/0x1a0 [ 3373.935223] ? lock_downgrade+0x740/0x740 [ 3373.939369] ? __fget+0x225/0x360 [ 3373.942803] ? do_vfs_ioctl+0xff0/0xff0 [ 3373.946758] ? security_file_ioctl+0x83/0xb0 [ 3373.951149] SyS_ioctl+0x7f/0xb0 [ 3373.954495] ? do_vfs_ioctl+0xff0/0xff0 [ 3373.958451] do_syscall_64+0x1d5/0x640 [ 3373.962845] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3373.968031] RIP: 0033:0x465f69 [ 3373.971217] RSP: 002b:00007fd6269d0188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3373.978919] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 3373.986185] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 3373.993443] RBP: 00000000004bfa8f R08: 0000000000000000 R09: 0000000000000000 [ 3374.000695] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 3374.007978] R13: 00007ffec72e1d4f R14: 00007fd6269d0300 R15: 0000000000022000 [ 3374.027569] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3374.036352] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3374.051536] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3374.060713] 92781 total pagecache pages [ 3374.064700] 0 pages in swap cache [ 3374.069279] Swap cache stats: add 0, delete 0, find 0/0 [ 3374.074659] Free swap = 0kB [ 3374.078447] Total swap = 0kB [ 3374.081504] 2097051 pages RAM [ 3374.084600] 0 pages HighMem/MovableOnly [ 3374.090022] 363840 pages reserved [ 3374.093653] 0 pages cma reserved [ 3374.206955] warn_alloc_show_mem: 1 callbacks suppressed [ 3374.206959] Mem-Info: [ 3374.214784] active_anon:16463 inactive_anon:90041 isolated_anon:12 [ 3374.214784] active_file:697 inactive_file:1173 isolated_file:0 [ 3374.214784] unevictable:0 dirty:19 writeback:0 unstable:0 [ 3374.214784] slab_reclaimable:12322 slab_unreclaimable:120537 [ 3374.214784] mapped:54049 shmem:90897 pagetables:776 bounce:0 [ 3374.214784] free:51832 free_pcp:330 free_cma:0 [ 3374.287545] Node 0 active_anon:65076kB inactive_anon:308484kB active_file:2724kB inactive_file:4624kB unevictable:0kB isolated(anon):48kB isolated(file):0kB mapped:214780kB dirty:72kB writeback:0kB shmem:311580kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 3374.346878] Node 1 active_anon:776kB inactive_anon:51680kB active_file:64kB inactive_file:68kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:1416kB dirty:4kB writeback:0kB shmem:52008kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3374.396848] Node 0 DMA free:11020kB min:204kB low:252kB high:300kB active_anon:68kB inactive_anon:980kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3374.456837] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 3374.462678] Node 0 DMA32 free:459820kB min:36200kB low:45248kB high:54296kB active_anon:65008kB inactive_anon:307504kB active_file:2236kB inactive_file:4404kB unevictable:0kB writepending:72kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7456kB pagetables:3092kB bounce:0kB free_pcp:1272kB local_pcp:652kB free_cma:0kB [ 3374.504745] lowmem_reserve[]: 0 0 0 0 0 [ 3374.509275] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3374.509317] syz-executor.4: [ 3374.535746] lowmem_reserve[]: 0 0 0 0 0 [ 3374.543450] Node 1 Normal free:30444kB min:53696kB low:67120kB high:80544kB active_anon:776kB inactive_anon:51680kB active_file:164kB inactive_file:408kB unevictable:0kB writepending:4kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:224kB pagetables:12kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3374.572194] page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 3374.573731] lowmem_reserve[]: 0 0 0 0 0 [ 3374.586213] syz-executor.4 cpuset= [ 3374.587434] Node 0 [ 3374.587909] / [ 3374.590973] DMA: [ 3374.593198] mems_allowed=0-1 [ 3374.594904] 20*4kB (UME) 10*8kB (UME) 15*16kB (UME) 8*32kB (UME) 2*64kB (U) 6*128kB (UME) 3*256kB (UME) 1*512kB (E) 4*1024kB (UME) 2*2048kB (UM) 0*4096kB = 11024kB [ 3374.617169] Node 0 DMA32: 2758*4kB (UM) 3212*8kB (UME) 10046*16kB (UE) 8102*32kB (UE) 4*64kB (U) 2*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 457240kB [ 3374.619655] CPU: 1 PID: 16791 Comm: syz-executor.4 Not tainted 4.14.225-syzkaller #0 [ 3374.631996] Node 0 [ 3374.639803] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3374.639807] Call Trace: [ 3374.639827] dump_stack+0x1b2/0x281 [ 3374.639842] warn_alloc.cold+0x96/0x1cc [ 3374.639853] ? zone_watermark_ok_safe+0x220/0x220 [ 3374.639874] __alloc_pages_nodemask+0x2127/0x2720 [ 3374.639884] ? lock_acquire+0x170/0x3f0 [ 3374.639897] ? lock_acquire+0x170/0x3f0 [ 3374.639912] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3374.639929] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 3374.645744] Normal: [ 3374.651502] ? __mutex_unlock_slowpath+0x75/0x770 [ 3374.651517] alloc_pages_current+0x155/0x260 [ 3374.651531] ion_page_pool_alloc+0x118/0x1b0 [ 3374.651541] ion_system_heap_allocate+0x133/0x8c0 [ 3374.651552] ? _raw_spin_unlock+0x29/0x40 [ 3374.651560] ? _ion_heap_freelist_drain+0x6e/0x410 [ 3374.651569] ? ion_system_contig_heap_create+0x130/0x130 [ 3374.651578] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 3374.651589] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 3374.657925] 0*4kB [ 3374.661752] ion_alloc+0x27a/0x810 [ 3374.666577] 0*8kB [ 3374.671407] ? ion_dma_buf_release+0x40/0x40 [ 3374.671419] ? __might_fault+0x177/0x1b0 [ 3374.671430] ion_ioctl+0xea/0x1f0 [ 3374.671439] ? ion_query_heaps+0x360/0x360 [ 3374.671447] ? __fget+0x1fe/0x360 [ 3374.671457] ? ion_query_heaps+0x360/0x360 [ 3374.671466] do_vfs_ioctl+0x75a/0xff0 [ 3374.671476] ? ioctl_preallocate+0x1a0/0x1a0 [ 3374.671485] ? lock_downgrade+0x740/0x740 [ 3374.671496] ? __fget+0x225/0x360 [ 3374.671507] ? do_vfs_ioctl+0xff0/0xff0 [ 3374.675525] 0*16kB [ 3374.679443] ? security_file_ioctl+0x83/0xb0 [ 3374.679453] SyS_ioctl+0x7f/0xb0 [ 3374.679459] ? do_vfs_ioctl+0xff0/0xff0 [ 3374.679470] do_syscall_64+0x1d5/0x640 [ 3374.679486] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3374.679494] RIP: 0033:0x465f69 [ 3374.679498] RSP: 002b:00007fbb52cf0188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3374.679507] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 3374.679512] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 3374.679519] RBP: 00000000004bfa8f R08: 0000000000000000 R09: 0000000000000000 [ 3374.697285] 0*32kB [ 3374.701350] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 3374.705739] 0*64kB [ 3374.710560] R13: 00007ffc0aef8def R14: 00007fbb52cf0300 R15: 0000000000022000 [ 3374.865298] 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 3374.872020] Node 1 Normal: 619*4kB (UM) 922*8kB (UM) 778*16kB (UM) 257*32kB (UM) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 30524kB [ 3374.886271] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3374.895925] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3374.905044] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3374.914394] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3374.923514] 92700 total pagecache pages [ 3374.927999] 0 pages in swap cache [ 3374.931451] Swap cache stats: add 0, delete 0, find 0/0 [ 3374.937633] Free swap = 0kB [ 3374.940664] Total swap = 0kB [ 3374.943682] 2097051 pages RAM [ 3374.947868] 0 pages HighMem/MovableOnly [ 3374.952146] 363840 pages reserved [ 3374.955597] 0 pages cma reserved [ 3376.706198] ion_system_heap invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=0, oom_score_adj=0 [ 3376.762346] ion_system_heap cpuset=/ mems_allowed=0-1 [ 3376.769732] CPU: 0 PID: 4245 Comm: ion_system_heap Not tainted 4.14.225-syzkaller #0 [ 3376.777623] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3376.786974] Call Trace: [ 3376.789570] dump_stack+0x1b2/0x281 [ 3376.793195] dump_header+0x178/0x82f [ 3376.794483] syz-executor.1: [ 3376.796904] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 3376.796913] ? ___ratelimit+0x2cd/0x530 [ 3376.796923] oom_kill_process.cold+0x10/0xb18 [ 3376.796935] ? lock_downgrade+0x740/0x740 [ 3376.799954] page allocation failure: order:0 [ 3376.805043] out_of_memory+0x2dc/0x1190 [ 3376.809193] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 3376.813648] ? oom_killer_disable+0x1c0/0x1c0 [ 3376.817799] (null) [ 3376.822180] ? mutex_trylock+0x152/0x1a0 [ 3376.826132] syz-executor.1 cpuset= [ 3376.833216] __alloc_pages_nodemask+0x23e1/0x2720 [ 3376.833238] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3376.837720] / [ 3376.839844] ? kmem_cache_alloc_node_trace+0x153/0x400 [ 3376.843910] mems_allowed=0-1 [ 3376.847519] ? cache_grow_begin+0x41/0x630 [ 3376.847530] cache_grow_begin+0x91/0x630 [ 3376.847539] ? cache_grow_begin+0x91/0x630 [ 3376.880022] fallback_alloc+0x207/0x2c0 [ 3376.883980] kmem_cache_alloc_node_trace+0xed/0x400 [ 3376.888993] alloc_vmap_area+0xf0/0x7c0 [ 3376.892976] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 3376.898405] ? purge_vmap_area_lazy+0xb0/0xb0 [ 3376.902885] ? __get_vm_area_node+0xed/0x340 [ 3376.907290] ? kmem_cache_alloc_node_trace+0x383/0x400 [ 3376.912632] __get_vm_area_node+0x126/0x340 [ 3376.916933] vmap+0xd5/0x290 [ 3376.919934] ? ion_heap_clear_pages+0x23/0x70 [ 3376.925015] ? vunmap+0x50/0x50 [ 3376.928273] ? __vunmap+0x21c/0x300 [ 3376.931882] ion_heap_clear_pages+0x23/0x70 [ 3376.936183] ion_heap_sglist_zero+0x165/0x220 [ 3376.940660] ? ion_heap_clear_pages+0x70/0x70 [ 3376.945138] ? finish_task_switch+0x178/0x610 [ 3376.949883] ? pagerange_is_ram_callback+0x100/0x100 [ 3376.954965] ? ion_heap_deferred_free+0x222/0x470 [ 3376.959789] ion_system_heap_free+0x1d0/0x240 [ 3376.964265] ion_buffer_destroy+0x132/0x190 [ 3376.968603] ion_heap_deferred_free+0x22a/0x470 [ 3376.973251] ? __schedule+0x857/0x1de0 [ 3376.977188] ? ion_heap_shrink_scan+0x1a0/0x1a0 [ 3376.981880] ? wait_woken+0x230/0x230 [ 3376.985670] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 3376.991019] ? ion_heap_shrink_scan+0x1a0/0x1a0 [ 3376.995672] kthread+0x30d/0x420 [ 3376.999020] ? kthread_create_on_node+0xd0/0xd0 [ 3377.003930] ret_from_fork+0x24/0x30 [ 3377.007722] CPU: 1 PID: 16794 Comm: syz-executor.1 Not tainted 4.14.225-syzkaller #0 [ 3377.007892] syz-executor.4: [ 3377.015606] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3377.015614] page allocation failure: order:0 [ 3377.018607] Call Trace: [ 3377.018624] dump_stack+0x1b2/0x281 [ 3377.018640] warn_alloc.cold+0x96/0x1cc [ 3377.030367] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 3377.032389] ? zone_watermark_ok_safe+0x220/0x220 [ 3377.034947] (null) [ 3377.038553] ? usleep_range+0x130/0x130 [ 3377.038560] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 3377.038570] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 3377.038579] ? run_timer_softirq+0x5a0/0x5a0 [ 3377.038594] __alloc_pages_nodemask+0x2127/0x2720 [ 3377.038613] ? lock_acquire+0x170/0x3f0 [ 3377.042570] syz-executor.4 cpuset= [ 3377.049674] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3377.049686] ? ion_page_pool_alloc+0x9e/0x1b0 [ 3377.049699] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 3377.049716] alloc_pages_current+0x155/0x260 [ 3377.049733] ion_page_pool_alloc+0x118/0x1b0 [ 3377.055839] Mem-Info: [ 3377.056767] ion_system_heap_allocate+0x133/0x8c0 [ 3377.056778] ? _raw_spin_unlock+0x29/0x40 [ 3377.056787] ? _ion_heap_freelist_drain+0x6e/0x410 [ 3377.056797] ? ion_system_contig_heap_create+0x130/0x130 [ 3377.061510] / [ 3377.065849] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 3377.070874] mems_allowed=0-1 [ 3377.075313] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 3377.149746] ion_alloc+0x27a/0x810 [ 3377.153382] ? ion_dma_buf_release+0x40/0x40 [ 3377.157792] ? __might_fault+0x177/0x1b0 [ 3377.162022] ion_ioctl+0xea/0x1f0 [ 3377.165476] ? ion_query_heaps+0x360/0x360 [ 3377.169702] ? __fget+0x1fe/0x360 [ 3377.173143] ? ion_query_heaps+0x360/0x360 [ 3377.177372] do_vfs_ioctl+0x75a/0xff0 [ 3377.181178] ? ioctl_preallocate+0x1a0/0x1a0 [ 3377.185590] ? lock_downgrade+0x740/0x740 [ 3377.189755] ? __fget+0x225/0x360 [ 3377.193196] ? do_vfs_ioctl+0xff0/0xff0 [ 3377.197160] ? security_file_ioctl+0x83/0xb0 [ 3377.201559] SyS_ioctl+0x7f/0xb0 [ 3377.204908] ? do_vfs_ioctl+0xff0/0xff0 [ 3377.208866] do_syscall_64+0x1d5/0x640 [ 3377.212756] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3377.218228] RIP: 0033:0x465f69 [ 3377.221661] RSP: 002b:00007fd6269d0188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3377.229440] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 3377.236697] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 3377.243972] RBP: 00000000004bfa8f R08: 0000000000000000 R09: 0000000000000000 [ 3377.251225] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 3377.258488] R13: 00007ffec72e1d4f R14: 00007fd6269d0300 R15: 0000000000022000 [ 3377.266307] CPU: 0 PID: 16791 Comm: syz-executor.4 Not tainted 4.14.225-syzkaller #0 [ 3377.274492] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3377.283485] warn_alloc_show_mem: 1 callbacks suppressed [ 3377.283489] Mem-Info: [ 3377.284476] Call Trace: [ 3377.289900] active_anon:16428 inactive_anon:90041 isolated_anon:0 [ 3377.289900] active_file:16 inactive_file:23 isolated_file:0 [ 3377.289900] unevictable:0 dirty:0 writeback:0 unstable:0 [ 3377.289900] slab_reclaimable:12322 slab_unreclaimable:120462 [ 3377.289900] mapped:52636 shmem:90897 pagetables:727 bounce:0 [ 3377.289900] free:13939 free_pcp:95 free_cma:0 [ 3377.292256] dump_stack+0x1b2/0x281 [ 3377.294832] Node 0 active_anon:64924kB inactive_anon:308484kB active_file:48kB inactive_file:44kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:209100kB dirty:0kB writeback:0kB shmem:311580kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3377.328236] warn_alloc.cold+0x96/0x1cc [ 3377.328247] ? zone_watermark_ok_safe+0x220/0x220 [ 3377.328255] ? usleep_range+0x130/0x130 [ 3377.328263] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 3377.328275] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 3377.331894] Node 1 active_anon:788kB inactive_anon:51680kB active_file:16kB inactive_file:48kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:1444kB dirty:0kB writeback:0kB shmem:52008kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3377.359859] ? run_timer_softirq+0x5a0/0x5a0 [ 3377.359876] __alloc_pages_nodemask+0x2127/0x2720 [ 3377.359892] ? lock_acquire+0x170/0x3f0 [ 3377.359909] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3377.364390] Node 0 [ 3377.369219] ? ion_page_pool_alloc+0x9e/0x1b0 [ 3377.369235] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 3377.369253] alloc_pages_current+0x155/0x260 [ 3377.373208] DMA free:10952kB min:204kB low:252kB high:300kB active_anon:68kB inactive_anon:980kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3377.378306] ion_page_pool_alloc+0x118/0x1b0 [ 3377.378317] ion_system_heap_allocate+0x133/0x8c0 [ 3377.378329] ? _raw_spin_unlock+0x29/0x40 [ 3377.383336] lowmem_reserve[]: [ 3377.410402] ? _ion_heap_freelist_drain+0x6e/0x410 [ 3377.410412] ? ion_system_contig_heap_create+0x130/0x130 [ 3377.410421] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 3377.410432] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 3377.414914] 0 [ 3377.419744] ion_alloc+0x27a/0x810 [ 3377.419758] ? ion_dma_buf_release+0x40/0x40 [ 3377.419770] ? __might_fault+0x177/0x1b0 [ 3377.423720] 2717 [ 3377.428566] ion_ioctl+0xea/0x1f0 [ 3377.428575] ? ion_query_heaps+0x360/0x360 [ 3377.428586] ? __fget+0x1fe/0x360 [ 3377.430816] 2718 [ 3377.435296] ? ion_query_heaps+0x360/0x360 [ 3377.440780] 2718 [ 3377.445192] do_vfs_ioctl+0x75a/0xff0 [ 3377.471121] 2718 [ 3377.475500] ? ioctl_preallocate+0x1a0/0x1a0 [ 3377.484464] ? lock_downgrade+0x740/0x740 [ 3377.487572] Node 0 [ 3377.492475] ? __fget+0x225/0x360 [ 3377.497926] DMA32 free:18028kB min:36200kB low:45248kB high:54296kB active_anon:64856kB inactive_anon:307504kB active_file:48kB inactive_file:44kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7424kB pagetables:2896kB bounce:0kB free_pcp:116kB local_pcp:116kB free_cma:0kB [ 3377.502927] ? do_vfs_ioctl+0xff0/0xff0 [ 3377.507803] lowmem_reserve[]: [ 3377.509582] ? security_file_ioctl+0x83/0xb0 [ 3377.513092] 0 [ 3377.517487] SyS_ioctl+0x7f/0xb0 [ 3377.517495] ? do_vfs_ioctl+0xff0/0xff0 [ 3377.517507] do_syscall_64+0x1d5/0x640 [ 3377.521538] 0 [ 3377.523624] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3377.527077] 0 [ 3377.531278] RIP: 0033:0x465f69 [ 3377.534707] 0 [ 3377.536921] RSP: 002b:00007fbb52cf0188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3377.536932] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 3377.536937] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 3377.536944] RBP: 00000000004bfa8f R08: 0000000000000000 R09: 0000000000000000 [ 3377.541157] 0 [ 3377.543217] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 3377.543224] R13: 00007ffc0aef8def R14: 00007fbb52cf0300 R15: 0000000000022000 [ 3377.683423] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3377.713359] lowmem_reserve[]: 0 0 0 0 0 [ 3377.718050] Node 1 Normal free:270468kB min:53696kB low:67120kB high:80544kB active_anon:788kB inactive_anon:51680kB active_file:20kB inactive_file:1024kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:224kB pagetables:12kB bounce:0kB free_pcp:268kB local_pcp:168kB free_cma:0kB [ 3377.751478] lowmem_reserve[]: 0 0 0 0 0 [ 3377.756111] Node 0 DMA: 6*4kB (ME) 6*8kB (UME) 10*16kB (ME) 7*32kB (ME) 1*64kB (U) 4*128kB (ME) 3*256kB (UME) 2*512kB (UE) 4*1024kB (UME) 2*2048kB (UM) 0*4096kB = 11016kB [ 3377.778545] Node 0 DMA32: 543*4kB (UME) 415*8kB (ME) 91*16kB (UME) 10*32kB (ME) 631*64kB (UM) 81*128kB (UM) 1*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 58276kB [ 3377.818006] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 3377.847406] Node 1 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 5233*64kB (UM) 443*128kB (U) 76*256kB (UM) 30*512kB (U) 15*1024kB (UM) 8*2048kB (U) 0*4096kB = 458184kB [ 3377.877928] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3377.888873] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3377.900868] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3377.911293] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3377.923052] 91523 total pagecache pages [ 3377.927134] 0 pages in swap cache [ 3377.930617] Swap cache stats: add 0, delete 0, find 0/0 [ 3377.939708] Free swap = 0kB [ 3377.942757] Total swap = 0kB [ 3377.945770] 2097051 pages RAM [ 3377.948952] 0 pages HighMem/MovableOnly [ 3377.952920] 363840 pages reserved [ 3377.959436] 0 pages cma reserved [ 3378.116122] active_anon:16428 inactive_anon:90041 isolated_anon:0 [ 3378.116122] active_file:16 inactive_file:593 isolated_file:0 [ 3378.116122] unevictable:0 dirty:0 writeback:0 unstable:0 [ 3378.116122] slab_reclaimable:12322 slab_unreclaimable:120463 [ 3378.116122] mapped:53026 shmem:90897 pagetables:727 bounce:0 [ 3378.116122] free:274567 free_pcp:268 free_cma:0 [ 3378.156356] Node 0 active_anon:64924kB inactive_anon:308484kB active_file:44kB inactive_file:1348kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:210000kB dirty:0kB writeback:0kB shmem:311580kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3378.196584] Node 1 active_anon:788kB inactive_anon:51680kB active_file:20kB inactive_file:1024kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:2104kB dirty:0kB writeback:0kB shmem:52008kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3378.276073] Node 0 DMA free:11656kB min:204kB low:252kB high:300kB active_anon:68kB inactive_anon:980kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3378.302829] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 3378.308372] Node 0 DMA32 free:356620kB min:36200kB low:45248kB high:54296kB active_anon:64856kB inactive_anon:307504kB active_file:44kB inactive_file:1348kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7424kB pagetables:2896kB bounce:0kB free_pcp:1320kB local_pcp:632kB free_cma:0kB [ 3378.341460] lowmem_reserve[]: 0 0 0 0 0 [ 3378.345469] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3378.381680] lowmem_reserve[]: 0 0 0 0 0 [ 3378.385709] Node 1 Normal free:880392kB min:53696kB low:67120kB high:80544kB active_anon:788kB inactive_anon:51680kB active_file:20kB inactive_file:1024kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:224kB pagetables:12kB bounce:0kB free_pcp:1356kB local_pcp:724kB free_cma:0kB [ 3378.418462] lowmem_reserve[]: 0 0 0 0 0 [ 3378.422459] Node 0 DMA: 6*4kB (ME) 6*8kB (UME) 10*16kB (ME) 7*32kB (ME) 11*64kB (U) 4*128kB (ME) 3*256kB (UME) 2*512kB (UE) 4*1024kB (UME) 2*2048kB (UM) 0*4096kB = 11656kB [ 3378.441539] Node 0 DMA32: 4286*4kB (UME) 6920*8kB (UME) 14834*16kB (UME) 2771*32kB (UME) 1115*64kB (UM) 159*128kB (UM) 4*256kB (U) 2*512kB (U) 1*1024kB (U) 2*2048kB (U) 0*4096kB = 497400kB [ 3378.463477] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 3378.474662] Node 1 Normal: 8*4kB (UM) 7*8kB (U) 8*16kB (UM) 9*32kB (UM) 11110*64kB (UM) 736*128kB (U) 94*256kB (UM) 37*512kB (U) 15*1024kB (UM) 8*2048kB (U) 0*4096kB = 880504kB [ 3378.495015] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3378.504282] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3378.517024] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3378.529718] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3378.540316] 91708 total pagecache pages [ 3378.544540] 0 pages in swap cache [ 3378.551166] Swap cache stats: add 0, delete 0, find 0/0 [ 3378.557492] Free swap = 0kB [ 3378.560687] Total swap = 0kB [ 3378.563699] 2097051 pages RAM [ 3378.569586] 0 pages HighMem/MovableOnly [ 3378.573562] 363840 pages reserved [ 3378.577912] 0 pages cma reserved [ 3378.581279] Out of memory: Kill process 7976 (syz-fuzzer) score 7 or sacrifice child [ 3378.593067] Killed process 14628 (syz-executor.3) total-vm:84924kB, anon-rss:64kB, file-rss:0kB, shmem-rss:0kB [ 3378.628781] oom_reaper: reaped process 14628 (syz-executor.3), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB 05:21:51 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x40000, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x2080000001, 0x32}) 05:21:51 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) write$dsp(0xffffffffffffffff, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x80000001, 0x32}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(0xffffffffffffffff, 0x7a5, &(0x7f0000000000)={{@any, 0x7}, 0x1, 0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(0xffffffffffffffff, 0x7a4, &(0x7f00000000c0)={{@hyper}, 0x9, 0x3f, 0x0, 0x8}) 05:21:51 executing program 2: socketpair(0x0, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) recvfrom$llc(r0, &(0x7f00000000c0)=""/131, 0x83, 0x1000, &(0x7f0000000000)={0x1a, 0x78e341917cb35c9f, 0x20, 0xc2, 0x7, 0x5, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x10) [ 3380.478075] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 3380.484837] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3380.496522] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 3380.503388] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3380.516486] device bridge_slave_1 left promiscuous mode [ 3380.522032] bridge0: port 2(bridge_slave_1) entered disabled state [ 3380.533220] device bridge_slave_0 left promiscuous mode [ 3380.539161] bridge0: port 1(bridge_slave_0) entered disabled state [ 3380.552164] device veth1_macvtap left promiscuous mode [ 3380.557870] device veth0_macvtap left promiscuous mode [ 3380.563198] device veth1_vlan left promiscuous mode [ 3380.571796] device veth0_vlan left promiscuous mode [ 3380.692528] device hsr_slave_1 left promiscuous mode [ 3380.703188] device hsr_slave_0 left promiscuous mode [ 3380.723585] team0 (unregistering): Port device team_slave_1 removed [ 3380.741503] team0 (unregistering): Port device team_slave_0 removed [ 3380.755991] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 3380.771161] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 3380.815995] bond0 (unregistering): Released all slaves [ 3382.127329] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 3382.134188] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3382.142644] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 3382.149526] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3382.157327] device bridge_slave_1 left promiscuous mode [ 3382.162895] bridge0: port 2(bridge_slave_1) entered disabled state [ 3382.171129] device bridge_slave_0 left promiscuous mode [ 3382.176785] bridge0: port 1(bridge_slave_0) entered disabled state [ 3382.185068] device veth1_macvtap left promiscuous mode [ 3382.190683] device veth0_macvtap left promiscuous mode [ 3382.196123] device veth1_vlan left promiscuous mode [ 3382.201179] device veth0_vlan left promiscuous mode [ 3382.270596] device hsr_slave_1 left promiscuous mode [ 3382.277724] device hsr_slave_0 left promiscuous mode [ 3382.292196] team0 (unregistering): Port device team_slave_1 removed [ 3382.301290] team0 (unregistering): Port device team_slave_0 removed [ 3382.311602] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 3382.322384] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 3382.347639] bond0 (unregistering): Released all slaves [ 3384.207670] IPVS: ftp: loaded support on port[0] = 21 [ 3384.315328] chnl_net:caif_netlink_parms(): no params data found [ 3384.368132] bridge0: port 1(bridge_slave_0) entered blocking state [ 3384.374532] bridge0: port 1(bridge_slave_0) entered disabled state [ 3384.382468] device bridge_slave_0 entered promiscuous mode [ 3384.389290] bridge0: port 2(bridge_slave_1) entered blocking state [ 3384.396240] bridge0: port 2(bridge_slave_1) entered disabled state [ 3384.403164] device bridge_slave_1 entered promiscuous mode [ 3384.422279] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 3384.431207] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 3384.450663] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 3384.457941] team0: Port device team_slave_0 added [ 3384.463311] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 3384.470717] team0: Port device team_slave_1 added [ 3384.487356] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3384.493595] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3384.518980] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3384.530051] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3384.536367] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3384.561667] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3384.572563] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 3384.580083] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 3384.602861] device hsr_slave_0 entered promiscuous mode [ 3384.608575] device hsr_slave_1 entered promiscuous mode [ 3384.614456] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 3384.621723] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 3384.690439] bridge0: port 2(bridge_slave_1) entered blocking state [ 3384.696823] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3384.703511] bridge0: port 1(bridge_slave_0) entered blocking state [ 3384.709903] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3384.739067] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 3384.746284] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3384.754284] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 3384.763674] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 3384.771051] bridge0: port 1(bridge_slave_0) entered disabled state [ 3384.777939] bridge0: port 2(bridge_slave_1) entered disabled state [ 3384.788111] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 3384.794168] 8021q: adding VLAN 0 to HW filter on device team0 [ 3384.803559] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 3384.811373] bridge0: port 1(bridge_slave_0) entered blocking state [ 3384.817775] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3384.828151] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 3384.836140] bridge0: port 2(bridge_slave_1) entered blocking state [ 3384.842481] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3384.861911] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 3384.872356] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 3384.884032] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 3384.891243] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 3384.899079] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 3384.907340] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 3384.914987] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 3384.922831] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 3384.930021] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 3384.943373] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 3384.951724] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 3384.959320] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 3384.970001] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3385.027040] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 3385.038246] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 3385.069825] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 3385.077661] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 3385.085551] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 3385.094448] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 3385.102879] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 3385.109897] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 3385.119628] device veth0_vlan entered promiscuous mode [ 3385.128812] device veth1_vlan entered promiscuous mode [ 3385.134779] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 3385.143541] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 3385.155417] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 3385.165127] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 3385.172430] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 3385.179968] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 3385.189725] device veth0_macvtap entered promiscuous mode [ 3385.196322] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 3385.205016] device veth1_macvtap entered promiscuous mode [ 3385.213529] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 3385.223030] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 3385.231903] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 3385.242040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3385.251408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 3385.261194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3385.271458] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 3385.281298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3385.291751] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 3385.300256] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 3385.307706] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 3385.316858] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 3385.324996] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 3385.334894] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3385.344009] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 3385.353833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3385.363233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 3385.373431] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3385.383525] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 3385.390542] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 3385.397629] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 3385.405752] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 05:21:57 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) write$dsp(0xffffffffffffffff, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x80000001, 0x32}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(0xffffffffffffffff, 0x7a5, &(0x7f0000000000)={{@any, 0x7}, 0x1, 0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(0xffffffffffffffff, 0x7a4, &(0x7f00000000c0)={{@hyper}, 0x9, 0x3f, 0x0, 0x8}) 05:21:57 executing program 3: openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x2080000001, 0x32}) 05:21:57 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) write$dsp(0xffffffffffffffff, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x80000001, 0x32}) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(0xffffffffffffffff, 0x7a5, &(0x7f0000000000)={{}, 0x1, 0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(0xffffffffffffffff, 0x7a4, &(0x7f00000000c0)={{@hyper}, 0x0, 0x3f, 0x0, 0x8}) 05:21:57 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x2080000001, 0x32}) 05:21:57 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x40000, 0x0) openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x22000, 0x0) write$dsp(0xffffffffffffffff, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x2080000001, 0x32}) r1 = add_key(&(0x7f0000000040)='rxrpc\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) keyctl$set_timeout(0xf, 0x0, 0xfff) keyctl$reject(0x13, 0x0, 0x3, 0xffff, r1) request_key(&(0x7f0000001740)='rxrpc\x00', &(0x7f00000018c0)={'syz', 0x0}, &(0x7f00000017c0)='@:@#(:+\x00', r1) 05:21:57 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) write$dsp(0xffffffffffffffff, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x80000001, 0x32}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(0xffffffffffffffff, 0x7a5, &(0x7f0000000000)={{@any, 0x7}, 0x1, 0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(0xffffffffffffffff, 0x7a4, &(0x7f00000000c0)={{@hyper}, 0x9, 0x3f}) 05:21:57 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x40000, 0x0) openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x22000, 0x0) write$dsp(0xffffffffffffffff, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x2080000001, 0x32}) r1 = add_key(&(0x7f0000000040)='rxrpc\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) keyctl$set_timeout(0xf, 0x0, 0xfff) keyctl$reject(0x13, 0x0, 0x3, 0xffff, r1) request_key(&(0x7f0000001740)='rxrpc\x00', &(0x7f00000018c0)={'syz', 0x0}, &(0x7f00000017c0)='@:@#(:+\x00', r1) add_key$fscrypt_v1(&(0x7f0000000000)='logon\x00', &(0x7f0000000080)={'fscrypt:', @desc3='e8dab99234bb312e'}, &(0x7f00000000c0)={0x0, "01b312956356957445a7fdef5b815e85c96fffefd2c7a05f287d2b1de558d2eb84a32160aaf272d5cdad41dc7e36c7000000002c7533ba99425d6dc4b4786c59"}, 0x48, 0xfffffffffffffffe) 05:21:57 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x40000, 0x0) openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x22000, 0x0) write$dsp(0xffffffffffffffff, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x2080000001, 0x32}) r1 = add_key(&(0x7f0000000040)='rxrpc\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) keyctl$set_timeout(0xf, 0x0, 0xfff) keyctl$reject(0x13, 0x0, 0x3, 0xffff, r1) request_key(&(0x7f0000001740)='rxrpc\x00', &(0x7f00000018c0)={'syz', 0x0}, &(0x7f00000017c0)='@:@#(:+\x00', r1) r2 = add_key$fscrypt_v1(&(0x7f0000000000)='logon\x00', &(0x7f0000000080)={'fscrypt:', @desc3='e8dab99234bb312e'}, &(0x7f00000000c0)={0x0, "01b312956356957445a7fdef5b815e85c96fffefd2c7a05f287d2b1de558d2eb84a32160aaf272d5cdad41dc7e36c7000000002c7533ba99425d6dc4b4786c59"}, 0x48, 0xfffffffffffffffe) keyctl$set_timeout(0xf, r2, 0x1f) 05:21:58 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) write$dsp(0xffffffffffffffff, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x80000001, 0x32}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(0xffffffffffffffff, 0x7a5, &(0x7f0000000000)={{@any, 0x7}, 0x1, 0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(0xffffffffffffffff, 0x7a4, &(0x7f00000000c0)={{@hyper}, 0x0, 0x3f, 0x13, 0x8}) [ 3386.265102] Bluetooth: hci0 command 0x0409 tx timeout [ 3386.315420] syz-executor.5: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 3386.326117] syz-executor.2: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 3386.339988] syz-executor.0: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 3386.352233] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 3386.362793] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 3386.368716] CPU: 0 PID: 17130 Comm: syz-executor.2 Not tainted 4.14.225-syzkaller #0 [ 3386.372550] syz-executor.0 cpuset= [ 3386.376604] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3386.376608] Call Trace: [ 3386.376629] dump_stack+0x1b2/0x281 [ 3386.376643] warn_alloc.cold+0x96/0x1cc [ 3386.376655] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 3386.376668] ? zone_watermark_ok_safe+0x220/0x220 [ 3386.376689] __alloc_pages_nodemask+0x2127/0x2720 [ 3386.376704] ? lock_acquire+0x170/0x3f0 [ 3386.376718] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3386.376734] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 3386.376745] ? __mutex_unlock_slowpath+0x75/0x770 [ 3386.376758] alloc_pages_current+0x155/0x260 [ 3386.376770] ion_page_pool_alloc+0x118/0x1b0 [ 3386.376781] ion_system_heap_allocate+0x133/0x8c0 [ 3386.387333] / [ 3386.389650] ? ion_alloc+0x187/0x810 [ 3386.400955] mems_allowed=0-1 [ 3386.404760] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 3386.404773] ? ion_system_contig_heap_create+0x130/0x130 [ 3386.404782] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 3386.404792] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 3386.404805] ion_alloc+0x204/0x810 [ 3386.479876] ? ion_dma_buf_release+0x40/0x40 [ 3386.484284] ? __might_fault+0x177/0x1b0 [ 3386.488351] ion_ioctl+0xea/0x1f0 [ 3386.491809] ? ion_query_heaps+0x360/0x360 [ 3386.496321] ? __fget+0x1fe/0x360 [ 3386.499778] ? ion_query_heaps+0x360/0x360 [ 3386.504022] do_vfs_ioctl+0x75a/0xff0 [ 3386.507832] ? ioctl_preallocate+0x1a0/0x1a0 [ 3386.512235] ? lock_downgrade+0x740/0x740 [ 3386.516370] ? __fget+0x225/0x360 [ 3386.519821] ? do_vfs_ioctl+0xff0/0xff0 [ 3386.523778] ? security_file_ioctl+0x83/0xb0 [ 3386.528193] SyS_ioctl+0x7f/0xb0 [ 3386.531549] ? do_vfs_ioctl+0xff0/0xff0 [ 3386.535505] do_syscall_64+0x1d5/0x640 [ 3386.539388] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3386.544651] RIP: 0033:0x465f69 [ 3386.547825] RSP: 002b:00007fb559d50188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3386.555511] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 3386.562760] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 3386.570023] RBP: 00000000004bfa8f R08: 0000000000000000 R09: 0000000000000000 [ 3386.577282] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 3386.584533] R13: 00007ffd8e3fce9f R14: 00007fb559d50300 R15: 0000000000022000 [ 3386.592504] CPU: 1 PID: 17111 Comm: syz-executor.5 Not tainted 4.14.225-syzkaller #0 [ 3386.600396] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3386.609744] Call Trace: [ 3386.612337] dump_stack+0x1b2/0x281 [ 3386.615975] warn_alloc.cold+0x96/0x1cc [ 3386.619946] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 3386.624960] ? zone_watermark_ok_safe+0x220/0x220 [ 3386.629811] __alloc_pages_nodemask+0x2127/0x2720 [ 3386.634650] ? __schedule+0x893/0x1de0 [ 3386.638537] ? lock_acquire+0x170/0x3f0 [ 3386.642552] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3386.647402] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 3386.652855] ? __mutex_unlock_slowpath+0x75/0x770 [ 3386.659001] alloc_pages_current+0x155/0x260 [ 3386.663414] ion_page_pool_alloc+0x118/0x1b0 [ 3386.667829] ion_system_heap_allocate+0x133/0x8c0 [ 3386.672671] ? ion_alloc+0x187/0x810 [ 3386.676380] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 3386.681825] ? ion_system_contig_heap_create+0x130/0x130 [ 3386.687366] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 3386.693341] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 3386.698188] ion_alloc+0x204/0x810 [ 3386.701774] ? ion_dma_buf_release+0x40/0x40 [ 3386.706184] ? __might_fault+0x177/0x1b0 [ 3386.710883] ion_ioctl+0xea/0x1f0 [ 3386.714336] ? ion_query_heaps+0x360/0x360 [ 3386.718573] ? __fget+0x1fe/0x360 [ 3386.722027] ? ion_query_heaps+0x360/0x360 [ 3386.726294] do_vfs_ioctl+0x75a/0xff0 [ 3386.730097] ? ioctl_preallocate+0x1a0/0x1a0 [ 3386.734507] ? lock_downgrade+0x740/0x740 [ 3386.738667] ? __fget+0x225/0x360 [ 3386.742216] ? do_vfs_ioctl+0xff0/0xff0 [ 3386.746189] ? security_file_ioctl+0x83/0xb0 [ 3386.750606] SyS_ioctl+0x7f/0xb0 [ 3386.754848] ? do_vfs_ioctl+0xff0/0xff0 [ 3386.758822] do_syscall_64+0x1d5/0x640 [ 3386.762719] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3386.767906] RIP: 0033:0x465f69 [ 3386.771095] RSP: 002b:00007f4ecbcc0188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3386.778813] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 3386.786089] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 3386.793391] RBP: 00000000004bfa8f R08: 0000000000000000 R09: 0000000000000000 [ 3386.800661] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 3386.807954] R13: 00007ffead9296af R14: 00007f4ecbcc0300 R15: 0000000000022000 [ 3386.832381] CPU: 1 PID: 17109 Comm: syz-executor.0 Not tainted 4.14.225-syzkaller #0 [ 3386.840591] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3386.849954] Call Trace: [ 3386.852554] dump_stack+0x1b2/0x281 [ 3386.854171] warn_alloc_show_mem: 1 callbacks suppressed [ 3386.854174] Mem-Info: [ 3386.856197] warn_alloc.cold+0x96/0x1cc [ 3386.867928] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 3386.868269] active_anon:16374 inactive_anon:90037 isolated_anon:0 [ 3386.868269] active_file:1776 inactive_file:5442 isolated_file:0 [ 3386.868269] unevictable:0 dirty:0 writeback:18 unstable:0 [ 3386.868269] slab_reclaimable:12305 slab_unreclaimable:114681 [ 3386.868269] mapped:39798 shmem:90891 pagetables:736 bounce:0 [ 3386.868269] free:153014 free_pcp:257 free_cma:0 [ 3386.872941] ? zone_watermark_ok_safe+0x220/0x220 [ 3386.872966] __alloc_pages_nodemask+0x2127/0x2720 [ 3386.916408] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3386.921255] ? migrate_swap_stop+0x880/0x880 [ 3386.925664] ? lock_acquire+0x170/0x3f0 [ 3386.929644] ? wake_up_q+0x82/0xd0 [ 3386.933186] ? __mutex_unlock_slowpath+0x261/0x770 [ 3386.938126] alloc_pages_current+0x155/0x260 [ 3386.942558] ion_page_pool_alloc+0x118/0x1b0 [ 3386.946970] ion_system_heap_allocate+0x133/0x8c0 [ 3386.951811] ? ion_alloc+0x187/0x810 [ 3386.954158] Node 0 active_anon:64740kB inactive_anon:308468kB active_file:7096kB inactive_file:21760kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:157612kB dirty:0kB writeback:68kB shmem:311556kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 3386.955520] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 3386.955530] ? ion_system_contig_heap_create+0x130/0x130 [ 3386.955542] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 3386.999718] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 3387.004613] ion_alloc+0x204/0x810 [ 3387.008170] ? ion_dma_buf_release+0x40/0x40 [ 3387.012586] ? __might_fault+0x177/0x1b0 [ 3387.014145] Node 1 active_anon:756kB inactive_anon:51680kB active_file:8kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:1580kB dirty:0kB writeback:4kB shmem:52008kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 3387.016841] ion_ioctl+0xea/0x1f0 [ 3387.016852] ? ion_query_heaps+0x360/0x360 [ 3387.016863] ? __fget+0x1fe/0x360 [ 3387.054871] ? ion_query_heaps+0x360/0x360 [ 3387.059105] do_vfs_ioctl+0x75a/0xff0 [ 3387.062929] ? ioctl_preallocate+0x1a0/0x1a0 [ 3387.067354] ? lock_downgrade+0x740/0x740 [ 3387.071504] ? __fget+0x225/0x360 [ 3387.074053] Node 0 [ 3387.074951] ? do_vfs_ioctl+0xff0/0xff0 [ 3387.074962] ? security_file_ioctl+0x83/0xb0 [ 3387.074973] SyS_ioctl+0x7f/0xb0 [ 3387.077206] DMA free:11100kB min:204kB low:252kB high:300kB active_anon:68kB inactive_anon:980kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3387.081152] ? do_vfs_ioctl+0xff0/0xff0 [ 3387.094110] lowmem_reserve[]: [ 3387.114635] do_syscall_64+0x1d5/0x640 [ 3387.114653] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3387.114664] RIP: 0033:0x465f69 [ 3387.133974] RSP: 002b:00007efdc016d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3387.138865] 0 [ 3387.141692] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 3387.141698] 2717 [ 3387.143476] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 3387.143482] RBP: 00000000004bfa8f R08: 0000000000000000 R09: 0000000000000000 [ 3387.160941] 2718 [ 3387.167839] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 3387.167844] R13: 00007ffdff6f9c9f R14: 00007efdc016d300 R15: 0000000000022000 [ 3387.254112] 2718 2718 [ 3387.256676] Node 0 DMA32 free:326016kB min:36200kB low:45248kB high:54296kB active_anon:64772kB inactive_anon:307488kB active_file:7096kB inactive_file:21760kB unevictable:0kB writepending:60kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7392kB pagetables:2936kB bounce:0kB free_pcp:236kB local_pcp:60kB free_cma:0kB [ 3387.344134] lowmem_reserve[]: 0 0 0 0 0 [ 3387.348173] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3387.406549] lowmem_reserve[]: 0 0 0 0 0 [ 3387.417268] Node 1 Normal free:53228kB min:53696kB low:67120kB high:80544kB active_anon:756kB inactive_anon:51680kB active_file:8kB inactive_file:8kB unevictable:0kB writepending:4kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:224kB pagetables:8kB bounce:0kB free_pcp:740kB local_pcp:0kB free_cma:0kB [ 3387.466025] lowmem_reserve[]: 0 0 0 0 0 [ 3387.474944] Node 0 DMA: 19*4kB (UME) 12*8kB (UME) 19*16kB (UME) 20*32kB (UME) 2*64kB (U) 13*128kB (UME) 4*256kB (UME) 2*512kB (UE) 4*1024kB (UME) 1*2048kB (M) 0*4096kB = 11100kB [ 3387.515306] Node 0 DMA32: 2*4kB (UM) 2*8kB (UM) 17*16kB (UE) 1375*32kB (UE) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 44296kB [ 3387.533739] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 3387.559025] Node 1 Normal: 498*4kB (UM) 865*8kB (UM) 718*16kB (UM) 483*32kB (UM) 17*64kB (UM) 45*128kB (UM) 3*256kB (UM) 20*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 53712kB [ 3387.645031] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3387.686475] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3387.712903] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3387.730891] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3387.741129] 91239 total pagecache pages [ 3387.746693] 0 pages in swap cache [ 3387.750237] Swap cache stats: add 0, delete 0, find 0/0 [ 3387.757123] Free swap = 0kB [ 3387.760239] Total swap = 0kB [ 3387.763353] 2097051 pages RAM [ 3387.768971] 0 pages HighMem/MovableOnly [ 3387.773042] 363840 pages reserved [ 3387.780411] 0 pages cma reserved [ 3387.926359] in:imklog invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 3388.022810] in:imklog cpuset=/ mems_allowed=0-1 [ 3388.036287] CPU: 0 PID: 16374 Comm: in:imklog Not tainted 4.14.225-syzkaller #0 [ 3388.043760] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3388.053115] Call Trace: [ 3388.055703] dump_stack+0x1b2/0x281 [ 3388.059327] dump_header+0x178/0x82f [ 3388.063077] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 3388.068206] ? ___ratelimit+0x2cd/0x530 [ 3388.072206] oom_kill_process.cold+0x10/0xb18 [ 3388.076688] out_of_memory+0xe3e/0x1190 [ 3388.080641] ? oom_killer_disable+0x1c0/0x1c0 [ 3388.085257] ? mutex_trylock+0x152/0x1a0 [ 3388.089321] __alloc_pages_nodemask+0x23e1/0x2720 [ 3388.094172] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3388.099019] alloc_pages_current+0x155/0x260 [ 3388.103434] filemap_fault+0xea3/0x1980 [ 3388.107404] ext4_filemap_fault+0x84/0xb0 [ 3388.111542] __do_fault+0xfa/0x380 [ 3388.115077] __handle_mm_fault+0x2497/0x4620 [ 3388.119475] ? vm_insert_page+0x7c0/0x7c0 [ 3388.123602] ? lock_downgrade+0x740/0x740 [ 3388.127734] handle_mm_fault+0x391/0x860 [ 3388.131843] __do_page_fault+0x549/0xad0 [ 3388.135921] ? spurious_fault+0x640/0x640 [ 3388.140068] ? do_page_fault+0x60/0x500 [ 3388.144043] ? page_fault+0x2f/0x50 [ 3388.147673] page_fault+0x45/0x50 [ 3388.151210] RIP: ad370da3:0x1f9f [ 3388.154557] RSP: ad3704b8:00007f54ad3704b8 EFLAGS: 7f54ad370da0 [ 3388.164904] Mem-Info: [ 3388.173390] active_anon:16500 inactive_anon:90037 isolated_anon:0 [ 3388.173390] active_file:12 inactive_file:10 isolated_file:18 [ 3388.173390] unevictable:0 dirty:0 writeback:10 unstable:0 [ 3388.173390] slab_reclaimable:12305 slab_unreclaimable:115318 [ 3388.173390] mapped:52694 shmem:90891 pagetables:824 bounce:0 [ 3388.173390] free:25129 free_pcp:0 free_cma:0 [ 3388.207561] Node 0 active_anon:65244kB inactive_anon:308468kB active_file:0kB inactive_file:72kB unevictable:0kB isolated(anon):0kB isolated(file):72kB mapped:209124kB dirty:0kB writeback:28kB shmem:311556kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3388.235738] Node 1 active_anon:756kB inactive_anon:51680kB active_file:12kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:1652kB dirty:0kB writeback:12kB shmem:52008kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3388.263652] Node 0 DMA free:11044kB min:204kB low:252kB high:300kB active_anon:68kB inactive_anon:980kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3388.290968] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 3388.296907] Node 0 DMA32 free:35784kB min:36200kB low:45248kB high:54296kB active_anon:64976kB inactive_anon:307488kB active_file:40kB inactive_file:284kB unevictable:0kB writepending:24kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7456kB pagetables:3288kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3388.325793] lowmem_reserve[]: 0 0 0 0 0 [ 3388.329809] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3388.343980] Bluetooth: hci0 command 0x041b tx timeout [ 3388.355481] lowmem_reserve[]: 0 0 0 0 0 [ 3388.364803] Node 1 Normal free:53700kB min:53696kB low:67120kB high:80544kB active_anon:756kB inactive_anon:51680kB active_file:12kB inactive_file:4kB unevictable:0kB writepending:12kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:224kB pagetables:8kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3388.393124] lowmem_reserve[]: 0 0 0 0 0 [ 3388.397170] Node 0 DMA: 7*4kB (UME) 11*8kB (UME) 19*16kB (UME) 20*32kB (UME) 2*64kB (U) 13*128kB (UME) 4*256kB (UME) 2*512kB (UE) 4*1024kB (UME) 1*2048kB (M) 0*4096kB = 11044kB [ 3388.416648] Node 0 DMA32: 1102*4kB (ME) 570*8kB (UME) 269*16kB (UME) 453*32kB (UME) 61*64kB (UM) 16*128kB (M) 5*256kB (M) 2*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 36024kB [ 3388.433828] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 3388.444769] Node 1 Normal: 499*4kB (UM) 865*8kB (UM) 718*16kB (UM) 483*32kB (UM) 17*64kB (UM) 45*128kB (UM) 3*256kB (UM) 20*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 53716kB [ 3388.460742] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3388.469707] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3388.478301] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3388.487183] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3388.495768] 90914 total pagecache pages [ 3388.499810] 0 pages in swap cache [ 3388.503236] Swap cache stats: add 0, delete 0, find 0/0 [ 3388.508771] Free swap = 0kB [ 3388.511785] Total swap = 0kB [ 3388.514826] 2097051 pages RAM [ 3388.517909] 0 pages HighMem/MovableOnly [ 3388.522094] 363840 pages reserved [ 3388.525595] 0 pages cma reserved [ 3388.528959] Out of memory (oom_kill_allocating_task): Kill process 16374 (in:imklog) score 0 or sacrifice child [ 3388.539704] Killed process 16372 (rsyslogd) total-vm:254332kB, anon-rss:864kB, file-rss:0kB, shmem-rss:0kB [ 3388.551759] oom_reaper: reaped process 16372 (rsyslogd), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 3388.637946] syz-executor.0 invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 3388.734852] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 3388.756024] CPU: 1 PID: 14698 Comm: syz-executor.0 Not tainted 4.14.225-syzkaller #0 [ 3388.763932] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3388.773285] Call Trace: [ 3388.775880] dump_stack+0x1b2/0x281 [ 3388.779502] dump_header+0x178/0x82f [ 3388.783218] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 3388.788319] ? ___ratelimit+0x2cd/0x530 [ 3388.792288] oom_kill_process.cold+0x10/0xb18 [ 3388.796808] out_of_memory+0xe3e/0x1190 [ 3388.800784] ? oom_killer_disable+0x1c0/0x1c0 [ 3388.805274] ? mutex_trylock+0x152/0x1a0 [ 3388.809333] __alloc_pages_nodemask+0x23e1/0x2720 [ 3388.814187] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3388.819037] alloc_pages_current+0x155/0x260 [ 3388.823439] filemap_fault+0xea3/0x1980 [ 3388.827420] ext4_filemap_fault+0x84/0xb0 [ 3388.831565] __do_fault+0xfa/0x380 [ 3388.835125] __handle_mm_fault+0x2497/0x4620 [ 3388.839529] ? vm_insert_page+0x7c0/0x7c0 [ 3388.843672] ? nanosleep_copyout+0x100/0x100 [ 3388.848089] handle_mm_fault+0x391/0x860 [ 3388.852147] __do_page_fault+0x549/0xad0 [ 3388.856205] ? spurious_fault+0x640/0x640 [ 3388.860345] ? do_page_fault+0x60/0x500 [ 3388.864343] ? page_fault+0x2f/0x50 [ 3388.867961] page_fault+0x45/0x50 [ 3388.871402] RIP: 33ae4b:0x6 [ 3388.874321] RSP: 0046:00007ffdff6f9f5c EFLAGS: 00000032 [ 3389.906346] Mem-Info: [ 3389.993535] active_anon:16283 inactive_anon:90037 isolated_anon:0 [ 3389.993535] active_file:38 inactive_file:0 isolated_file:0 [ 3389.993535] unevictable:0 dirty:0 writeback:0 unstable:0 [ 3389.993535] slab_reclaimable:12303 slab_unreclaimable:114952 [ 3389.993535] mapped:52688 shmem:90891 pagetables:793 bounce:0 [ 3389.993535] free:25179 free_pcp:35 free_cma:0 [ 3390.057648] Node 0 active_anon:64376kB inactive_anon:308468kB active_file:20kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):100kB mapped:209100kB dirty:0kB writeback:0kB shmem:311556kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3390.143926] Node 1 active_anon:756kB inactive_anon:51680kB active_file:8kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:1652kB dirty:0kB writeback:0kB shmem:52008kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3390.182691] Node 0 DMA free:11044kB min:204kB low:252kB high:300kB active_anon:68kB inactive_anon:980kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3390.209364] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 3390.214472] Node 0 DMA32 free:36084kB min:36200kB low:45248kB high:54296kB active_anon:64308kB inactive_anon:307488kB active_file:112kB inactive_file:48kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7360kB pagetables:3164kB bounce:0kB free_pcp:120kB local_pcp:0kB free_cma:0kB [ 3390.244872] lowmem_reserve[]: 0 0 0 0 0 [ 3390.248942] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3390.275535] lowmem_reserve[]: 0 0 0 0 0 [ 3390.279536] Node 1 Normal free:53584kB min:53696kB low:67120kB high:80544kB active_anon:756kB inactive_anon:51680kB active_file:32kB inactive_file:0kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:224kB pagetables:8kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3390.316013] lowmem_reserve[]: 0 0 0 0 0 [ 3390.320028] Node 0 DMA: 7*4kB (UME) 11*8kB (UME) 19*16kB (UME) 20*32kB (UME) 2*64kB (U) 13*128kB (UME) 4*256kB (UME) 2*512kB (UE) 4*1024kB (UME) 1*2048kB (M) 0*4096kB = 11044kB [ 3390.336265] Node 0 DMA32: 1098*4kB (UME) 591*8kB (UME) 288*16kB (UME) 433*32kB (UME) 61*64kB (UM) 19*128kB (UM) 5*256kB (M) 2*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 36224kB [ 3390.353052] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 3390.363820] Node 1 Normal: 466*4kB (UM) 865*8kB (UM) 718*16kB (UM) 483*32kB (UM) 17*64kB (UM) 45*128kB (UM) 3*256kB (UM) 20*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 53584kB [ 3390.379807] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3390.388755] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3390.397385] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3390.406558] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3390.415178] 90925 total pagecache pages [ 3390.419157] 0 pages in swap cache [ 3390.422615] Swap cache stats: add 0, delete 0, find 0/0 [ 3390.428590] Free swap = 0kB [ 3390.431722] Total swap = 0kB [ 3390.434533] Bluetooth: hci0 command 0x040f tx timeout [ 3390.435280] 2097051 pages RAM [ 3390.443003] 0 pages HighMem/MovableOnly [ 3390.447035] 363840 pages reserved [ 3390.450480] 0 pages cma reserved [ 3390.456613] Out of memory (oom_kill_allocating_task): Kill process 14698 (syz-executor.0) score 0 or sacrifice child [ 3390.467366] Killed process 17109 (syz-executor.0) total-vm:93384kB, anon-rss:152kB, file-rss:34820kB, shmem-rss:0kB [ 3390.492326] oom_reaper: reaped process 17109 (syz-executor.0), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 3390.534017] systemd invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 3390.548261] systemd cpuset=/ mems_allowed=0-1 [ 3390.552812] CPU: 0 PID: 1 Comm: systemd Not tainted 4.14.225-syzkaller #0 [ 3390.559815] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3390.569167] Call Trace: [ 3390.571758] dump_stack+0x1b2/0x281 [ 3390.575390] dump_header+0x178/0x82f [ 3390.579102] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 3390.584202] ? ___ratelimit+0x2cd/0x530 [ 3390.588177] oom_kill_process.cold+0x10/0xb18 [ 3390.592674] ? lock_downgrade+0x740/0x740 [ 3390.596824] out_of_memory+0x2dc/0x1190 [ 3390.600830] ? oom_killer_disable+0x1c0/0x1c0 [ 3390.605321] ? mutex_trylock+0x152/0x1a0 [ 3390.609373] __alloc_pages_nodemask+0x23e1/0x2720 [ 3390.614222] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3390.619070] alloc_pages_current+0x155/0x260 [ 3390.623474] filemap_fault+0xea3/0x1980 [ 3390.627451] ext4_filemap_fault+0x84/0xb0 [ 3390.631608] __do_fault+0xfa/0x380 [ 3390.635146] __handle_mm_fault+0x2497/0x4620 [ 3390.639547] ? ep_poll+0x1ab/0xa50 [ 3390.643163] ? vm_insert_page+0x7c0/0x7c0 [ 3390.647514] handle_mm_fault+0x391/0x860 [ 3390.651572] __do_page_fault+0x549/0xad0 [ 3390.655641] ? spurious_fault+0x640/0x640 [ 3390.659796] ? do_page_fault+0x60/0x500 [ 3390.663763] ? page_fault+0x2f/0x50 [ 3390.667385] page_fault+0x45/0x50 [ 3390.670824] RIP: 0001:0xffffffffffffffff [ 3390.674873] RSP: 98beaf50:00007ffcbdd42b40 EFLAGS: 7ffcbdd42860 [ 3390.705809] Mem-Info: [ 3390.749622] active_anon:16260 inactive_anon:90037 isolated_anon:0 [ 3390.749622] active_file:15 inactive_file:10 isolated_file:0 [ 3390.749622] unevictable:0 dirty:0 writeback:0 unstable:0 [ 3390.749622] slab_reclaimable:12301 slab_unreclaimable:114949 [ 3390.749622] mapped:52688 shmem:90891 pagetables:793 bounce:0 [ 3390.749622] free:21019 free_pcp:2 free_cma:0 [ 3390.852717] Node 0 active_anon:64284kB inactive_anon:308468kB active_file:152kB inactive_file:32kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:209100kB dirty:0kB writeback:0kB shmem:311556kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3390.897748] syz-executor.0: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 3390.902374] Node 1 active_anon:756kB inactive_anon:51680kB active_file:12kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:1652kB dirty:0kB writeback:0kB shmem:52008kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3390.918700] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 3390.961333] Node 0 [ 3390.972849] CPU: 0 PID: 17109 Comm: syz-executor.0 Not tainted 4.14.225-syzkaller #0 [ 3390.981335] DMA free:10960kB min:204kB low:252kB high:300kB active_anon:68kB inactive_anon:980kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3390.982959] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3391.018042] Call Trace: [ 3391.020628] dump_stack+0x1b2/0x281 [ 3391.024255] warn_alloc.cold+0x96/0x1cc [ 3391.027779] lowmem_reserve[]: 0 [ 3391.028237] ? zone_watermark_ok_safe+0x220/0x220 [ 3391.028249] ? usleep_range+0x130/0x130 [ 3391.031517] 2717 [ 3391.036525] ? try_to_free_pages+0x23f/0x6e0 [ 3391.036534] ? _find_next_bit+0xdb/0x100 [ 3391.036543] ? run_timer_softirq+0x5a0/0x5a0 [ 3391.036557] __alloc_pages_nodemask+0x2127/0x2720 [ 3391.036573] ? lock_acquire+0x170/0x3f0 [ 3391.036588] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3391.036599] ? ion_page_pool_alloc+0x9e/0x1b0 [ 3391.036614] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 3391.036633] alloc_pages_current+0x155/0x260 [ 3391.056004] 2718 [ 3391.060271] ion_page_pool_alloc+0x118/0x1b0 [ 3391.079897] 2718 [ 3391.083594] ion_system_heap_allocate+0x133/0x8c0 [ 3391.083605] ? ion_alloc+0x187/0x810 [ 3391.083615] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 3391.083624] ? ion_system_contig_heap_create+0x130/0x130 [ 3391.083633] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 3391.083643] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 3391.083653] ion_alloc+0x204/0x810 [ 3391.083667] ? ion_dma_buf_release+0x40/0x40 [ 3391.083679] ? __might_fault+0x177/0x1b0 [ 3391.083692] ion_ioctl+0xea/0x1f0 [ 3391.083700] ? ion_query_heaps+0x360/0x360 [ 3391.083709] ? __fget+0x1fe/0x360 [ 3391.083717] ? ion_query_heaps+0x360/0x360 [ 3391.083728] do_vfs_ioctl+0x75a/0xff0 [ 3391.101387] 2718 [ 3391.106196] ? ioctl_preallocate+0x1a0/0x1a0 [ 3391.106205] ? lock_downgrade+0x740/0x740 [ 3391.106218] ? __fget+0x225/0x360 [ 3391.106227] ? do_vfs_ioctl+0xff0/0xff0 [ 3391.106237] ? security_file_ioctl+0x83/0xb0 [ 3391.106246] SyS_ioctl+0x7f/0xb0 [ 3391.106253] ? do_vfs_ioctl+0xff0/0xff0 [ 3391.106263] do_syscall_64+0x1d5/0x640 [ 3391.106279] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3391.106287] RIP: 0033:0x465f69 [ 3391.129463] RSP: 002b:00007efdc016d188 EFLAGS: 00000246 [ 3391.148718] Node 0 [ 3391.148815] ORIG_RAX: 0000000000000010 [ 3391.152616] DMA32 free:17596kB min:36200kB low:45248kB high:54296kB active_anon:64216kB inactive_anon:307488kB active_file:168kB inactive_file:44kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7360kB pagetables:3164kB bounce:0kB free_pcp:120kB local_pcp:0kB free_cma:0kB [ 3391.154664] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 3391.154669] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 3391.154673] RBP: 00000000004bfa8f R08: 0000000000000000 R09: 0000000000000000 [ 3391.154677] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 3391.154682] R13: 00007ffdff6f9c9f R14: 00007efdc016d300 R15: 0000000000022000 [ 3391.176054] warn_alloc_show_mem: 2 callbacks suppressed [ 3391.176058] Mem-Info: [ 3391.196078] lowmem_reserve[]: [ 3391.215299] active_anon:16260 inactive_anon:90037 isolated_anon:0 [ 3391.215299] active_file:37 inactive_file:0 isolated_file:0 [ 3391.215299] unevictable:0 dirty:0 writeback:0 unstable:0 [ 3391.215299] slab_reclaimable:12301 slab_unreclaimable:114949 [ 3391.215299] mapped:52688 shmem:90891 pagetables:793 bounce:0 [ 3391.215299] free:13839 free_pcp:60 free_cma:0 [ 3391.252002] 0 [ 3391.273523] Node 0 active_anon:64284kB inactive_anon:308468kB active_file:136kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:209100kB dirty:0kB writeback:0kB shmem:311556kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3391.289060] 0 [ 3391.332818] Node 1 active_anon:756kB inactive_anon:51680kB active_file:12kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:1652kB dirty:0kB writeback:0kB shmem:52008kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3391.363082] 0 [ 3391.399043] Node 0 [ 3391.399905] 0 [ 3391.400865] DMA free:10960kB min:204kB low:252kB high:300kB active_anon:68kB inactive_anon:980kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3391.403070] 0 [ 3391.412873] lowmem_reserve[]: [ 3391.449964] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3391.453182] 0 [ 3391.490613] lowmem_reserve[]: 0 0 0 0 0 [ 3391.496274] 2717 2718 2718 2718 [ 3391.499772] Node 0 DMA32 free:17596kB min:36200kB low:45248kB high:54296kB active_anon:64216kB inactive_anon:307488kB active_file:112kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7360kB pagetables:3164kB bounce:0kB free_pcp:120kB local_pcp:120kB free_cma:0kB [ 3391.501607] Node 1 [ 3391.545576] lowmem_reserve[]: 0 0 0 0 0 [ 3391.550679] Normal free:26800kB min:53696kB low:67120kB high:80544kB active_anon:756kB inactive_anon:51680kB active_file:12kB inactive_file:4kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:224kB pagetables:8kB bounce:0kB free_pcp:120kB local_pcp:0kB free_cma:0kB [ 3391.551804] Node 0 [ 3391.599931] lowmem_reserve[]: [ 3391.600040] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3391.602182] 0 [ 3391.613755] lowmem_reserve[]: 0 0 0 0 0 [ 3391.649851] 0 0 0 0 [ 3391.652202] Node 0 DMA: 6*4kB (ME) 5*8kB (ME) 17*16kB (UME) 20*32kB (UME) 2*64kB (U) 13*128kB (UME) 4*256kB (UME) 2*512kB (UE) 4*1024kB (UME) 1*2048kB (M) 0*4096kB = 10960kB [ 3391.653575] Node 1 [ 3391.688346] Node 0 DMA32: 1008*4kB (ME) 529*8kB (UME) 217*16kB (UME) 75*32kB (UME) 41*64kB (M) 8*128kB (M) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 17784kB [ 3391.691579] Normal free:26800kB min:53696kB low:67120kB high:80544kB active_anon:756kB inactive_anon:51680kB active_file:8kB inactive_file:8kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:224kB pagetables:8kB bounce:0kB free_pcp:120kB local_pcp:120kB free_cma:0kB [ 3391.718888] Node 0 [ 3391.749070] lowmem_reserve[]: 0 0 0 0 0 [ 3391.752825] Normal: [ 3391.770255] Node 0 DMA: 6*4kB (ME) 5*8kB (ME) 17*16kB (UME) 20*32kB (UME) 2*64kB (U) 13*128kB (UME) 4*256kB (UME) 2*512kB (UE) 4*1024kB (UME) 1*2048kB (M) 0*4096kB = 10960kB [ 3391.780358] 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 3391.812836] Node 0 [ 3391.839712] Node 1 [ 3391.841916] DMA32: [ 3391.842049] Normal: [ 3391.852788] 1008*4kB [ 3391.862598] 156*4kB [ 3391.864805] (ME) 529*8kB (UME) 217*16kB (UME) 75*32kB (UME) 41*64kB (M) 8*128kB (M) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 17784kB [ 3391.868583] (M) 66*8kB (M) 43*16kB (UM) 222*32kB (UM) 17*64kB (UM) 45*128kB (UM) 3*256kB (UM) 20*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 26800kB [ 3391.901097] Node 0 [ 3391.927694] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3391.929941] Normal: 0*4kB [ 3391.959713] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3391.961914] 0*8kB [ 3391.962700] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3391.978784] 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 3391.995914] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3392.001885] Node 1 [ 3392.009892] 90925 total pagecache pages [ 3392.018085] Normal: 156*4kB (M) 66*8kB (M) 43*16kB (UM) 222*32kB (UM) 17*64kB (UM) 45*128kB (UM) 3*256kB (UM) 20*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 26800kB [ 3392.020007] 0 pages in swap cache [ 3392.046936] Swap cache stats: add 0, delete 0, find 0/0 [ 3392.052314] Free swap = 0kB [ 3392.061297] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3392.061480] Total swap = 0kB [ 3392.083779] 2097051 pages RAM [ 3392.086903] 0 pages HighMem/MovableOnly [ 3392.090871] 363840 pages reserved [ 3392.095253] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3392.101434] 0 pages cma reserved [ 3392.109289] Out of memory: Kill process 17110 (syz-executor.5) score 1004 or sacrifice child [ 3392.128190] Killed process 17111 (syz-executor.5) total-vm:93384kB, anon-rss:156kB, file-rss:34820kB, shmem-rss:0kB [ 3392.141516] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3392.154699] syz-executor.5: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 3392.160150] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3392.180052] syz-executor.5 invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 3392.207375] 90925 total pagecache pages [ 3392.211380] 0 pages in swap cache [ 3392.221921] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 3392.224635] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 3392.232164] CPU: 0 PID: 16868 Comm: syz-executor.5 Not tainted 4.14.225-syzkaller #0 [ 3392.240034] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3392.249905] Call Trace: [ 3392.252494] dump_stack+0x1b2/0x281 [ 3392.256114] dump_header+0x178/0x82f [ 3392.259820] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 3392.264914] ? ___ratelimit+0x2cd/0x530 [ 3392.268882] oom_kill_process.cold+0x10/0xb18 [ 3392.273384] out_of_memory+0xe3e/0x1190 [ 3392.277362] ? oom_killer_disable+0x1c0/0x1c0 [ 3392.281954] ? mutex_trylock+0x152/0x1a0 [ 3392.286267] __alloc_pages_nodemask+0x23e1/0x2720 [ 3392.291112] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3392.295961] alloc_pages_current+0x155/0x260 [ 3392.300373] filemap_fault+0xea3/0x1980 [ 3392.304350] ext4_filemap_fault+0x84/0xb0 [ 3392.308491] __do_fault+0xfa/0x380 [ 3392.312019] __handle_mm_fault+0x2497/0x4620 [ 3392.316417] ? vm_insert_page+0x7c0/0x7c0 [ 3392.320558] ? nanosleep_copyout+0x100/0x100 [ 3392.324969] handle_mm_fault+0x391/0x860 [ 3392.329023] __do_page_fault+0x549/0xad0 [ 3392.333165] ? spurious_fault+0x640/0x640 [ 3392.337303] ? do_page_fault+0x60/0x500 [ 3392.341299] ? page_fault+0x2f/0x50 [ 3392.344916] page_fault+0x45/0x50 [ 3392.348357] RIP: 33ae4e:0x5 [ 3392.351271] RSP: 0006:00007ffead92996c EFLAGS: 00000032 [ 3392.351510] CPU: 1 PID: 17111 Comm: syz-executor.5 Not tainted 4.14.225-syzkaller #0 [ 3392.362782] Swap cache stats: add 0, delete 0, find 0/0 [ 3392.364732] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3392.364736] Call Trace: [ 3392.364756] dump_stack+0x1b2/0x281 [ 3392.364768] warn_alloc.cold+0x96/0x1cc [ 3392.370108] Free swap = 0kB [ 3392.379444] ? zone_watermark_ok_safe+0x220/0x220 [ 3392.379453] ? usleep_range+0x130/0x130 [ 3392.379461] ? try_to_free_pages+0x23f/0x6e0 [ 3392.379472] ? _find_next_bit+0xdb/0x100 [ 3392.382030] Total swap = 0kB [ 3392.385642] ? run_timer_softirq+0x5a0/0x5a0 [ 3392.385660] __alloc_pages_nodemask+0x2127/0x2720 [ 3392.389609] 2097051 pages RAM [ 3392.392610] ? lock_acquire+0x170/0x3f0 [ 3392.397437] 0 pages HighMem/MovableOnly [ 3392.401378] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3392.405771] 363840 pages reserved [ 3392.409798] ? ion_page_pool_alloc+0x9e/0x1b0 [ 3392.412797] 0 pages cma reserved [ 3392.417187] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 3392.417206] alloc_pages_current+0x155/0x260 [ 3392.459618] ion_page_pool_alloc+0x118/0x1b0 [ 3392.464039] ion_system_heap_allocate+0x133/0x8c0 [ 3392.468885] ? ion_alloc+0x187/0x810 [ 3392.472600] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 3392.478047] ? ion_system_contig_heap_create+0x130/0x130 [ 3392.482978] Mem-Info: [ 3392.483492] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 3392.485903] active_anon:16260 inactive_anon:90037 isolated_anon:0 [ 3392.485903] active_file:17 inactive_file:8 isolated_file:0 [ 3392.485903] unevictable:0 dirty:0 writeback:0 unstable:0 [ 3392.485903] slab_reclaimable:12297 slab_unreclaimable:114927 [ 3392.485903] mapped:52688 shmem:90891 pagetables:793 bounce:0 [ 3392.485903] free:22832 free_pcp:194 free_cma:0 [ 3392.490899] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 3392.529295] ion_alloc+0x204/0x810 [ 3392.532842] ? ion_dma_buf_release+0x40/0x40 [ 3392.537252] ? __might_fault+0x177/0x1b0 [ 3392.541314] ion_ioctl+0xea/0x1f0 [ 3392.544763] ? ion_query_heaps+0x360/0x360 [ 3392.548994] ? __fget+0x1fe/0x360 [ 3392.552448] ? ion_query_heaps+0x360/0x360 [ 3392.556680] do_vfs_ioctl+0x75a/0xff0 [ 3392.560485] ? ioctl_preallocate+0x1a0/0x1a0 [ 3392.564905] ? lock_downgrade+0x740/0x740 [ 3392.568776] Node 0 active_anon:64284kB inactive_anon:308468kB active_file:56kB inactive_file:28kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:209100kB dirty:0kB writeback:0kB shmem:311556kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3392.569054] ? __fget+0x225/0x360 [ 3392.597734] syz-executor.0: page allocation failure: order:4 [ 3392.600749] ? do_vfs_ioctl+0xff0/0xff0 [ 3392.600761] ? security_file_ioctl+0x83/0xb0 [ 3392.606930] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 3392.610846] SyS_ioctl+0x7f/0xb0 [ 3392.615242] (null) [ 3392.622305] ? do_vfs_ioctl+0xff0/0xff0 [ 3392.625680] Node 1 active_anon:756kB inactive_anon:51680kB active_file:12kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:1652kB dirty:0kB writeback:0kB shmem:52008kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3392.627776] do_syscall_64+0x1d5/0x640 [ 3392.631719] Node 0 [ 3392.658595] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3392.658604] RIP: 0033:0x465f69 [ 3392.658611] RSP: 002b:00007f4ecbcc0188 EFLAGS: 00000246 [ 3392.662483] syz-executor.0 cpuset= [ 3392.664686] ORIG_RAX: 0000000000000010 [ 3392.664692] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 3392.664698] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 3392.664703] RBP: 00000000004bfa8f R08: 0000000000000000 R09: 0000000000000000 [ 3392.664710] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 3392.669869] / [ 3392.673037] R13: 00007ffead9296af R14: 00007f4ecbcc0300 R15: 0000000000022000 [ 3392.678396] mems_allowed=0-1 [ 3392.703413] Bluetooth: hci0 command 0x0419 tx timeout [ 3392.711891] DMA free:10980kB min:204kB low:252kB high:300kB active_anon:68kB inactive_anon:980kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3392.715780] Mem-Info: [ 3392.717181] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 3392.717200] Node 0 DMA32 free:46756kB min:36200kB low:45248kB high:54296kB active_anon:64216kB inactive_anon:307488kB active_file:48kB inactive_file:64kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7360kB pagetables:3164kB bounce:0kB free_pcp:220kB local_pcp:104kB free_cma:0kB [ 3392.717215] lowmem_reserve[]: 0 0 0 0 0 [ 3392.754949] active_anon:16260 inactive_anon:90037 isolated_anon:0 [ 3392.754949] active_file:67 inactive_file:162 isolated_file:0 [ 3392.754949] unevictable:0 dirty:0 writeback:0 unstable:0 [ 3392.754949] slab_reclaimable:12297 slab_unreclaimable:114921 [ 3392.754949] mapped:52708 shmem:90891 pagetables:793 bounce:0 [ 3392.754949] free:20681 free_pcp:172 free_cma:0 [ 3392.794462] CPU: 0 PID: 17109 Comm: syz-executor.0 Not tainted 4.14.225-syzkaller #0 [ 3392.841010] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3392.850795] Call Trace: [ 3392.853385] dump_stack+0x1b2/0x281 [ 3392.857391] warn_alloc.cold+0x96/0x1cc [ 3392.861360] ? zone_watermark_ok_safe+0x220/0x220 [ 3392.866214] __alloc_pages_nodemask+0x2127/0x2720 [ 3392.870517] Node 0 active_anon:64284kB inactive_anon:308468kB active_file:140kB inactive_file:72kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:209180kB dirty:0kB writeback:0kB shmem:311556kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3392.871054] ? lock_acquire+0x170/0x3f0 [ 3392.902934] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3392.907779] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 3392.913250] ? __mutex_unlock_slowpath+0x75/0x770 [ 3392.917458] Node 1 active_anon:756kB inactive_anon:51680kB active_file:8kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:1652kB dirty:0kB writeback:0kB shmem:52008kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3392.918089] alloc_pages_current+0x155/0x260 [ 3392.949317] ion_page_pool_alloc+0x118/0x1b0 [ 3392.953729] ion_system_heap_allocate+0x133/0x8c0 [ 3392.958566] ? _raw_spin_unlock+0x29/0x40 [ 3392.961486] Node 0 [ 3392.962699] ? _ion_heap_freelist_drain+0x6e/0x410 [ 3392.962711] DMA free:10980kB min:204kB low:252kB high:300kB active_anon:68kB inactive_anon:980kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3392.962715] lowmem_reserve[]: [ 3392.964941] ? ion_system_contig_heap_create+0x130/0x130 [ 3392.964949] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 3392.964960] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 3392.964970] ion_alloc+0x27a/0x810 [ 3392.964983] ? ion_dma_buf_release+0x40/0x40 [ 3392.964995] ? __might_fault+0x177/0x1b0 [ 3392.965007] ion_ioctl+0xea/0x1f0 [ 3392.965015] ? ion_query_heaps+0x360/0x360 [ 3392.965025] ? __fget+0x1fe/0x360 [ 3392.965035] ? ion_query_heaps+0x360/0x360 [ 3392.965044] do_vfs_ioctl+0x75a/0xff0 [ 3392.965054] ? ioctl_preallocate+0x1a0/0x1a0 [ 3392.965064] ? lock_downgrade+0x740/0x740 [ 3392.987420] 0 [ 3392.995733] ? __fget+0x225/0x360 [ 3392.995744] ? do_vfs_ioctl+0xff0/0xff0 [ 3392.995755] ? security_file_ioctl+0x83/0xb0 [ 3392.995764] SyS_ioctl+0x7f/0xb0 [ 3392.995778] ? do_vfs_ioctl+0xff0/0xff0 [ 3392.995790] do_syscall_64+0x1d5/0x640 [ 3392.995808] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3392.995816] RIP: 0033:0x465f69 [ 3392.995821] RSP: 002b:00007efdc016d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3392.995831] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 3392.995836] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 3392.995841] RBP: 00000000004bfa8f R08: 0000000000000000 R09: 0000000000000000 [ 3392.995850] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 3393.016730] 2717 [ 3393.017814] R13: 00007ffdff6f9c9f R14: 00007efdc016d300 R15: 0000000000022000 [ 3393.022197] 2718 2718 [ 3393.059685] 2718 [ 3393.077958] Node 0 [ 3393.091596] Node 0 [ 3393.107543] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3393.127331] DMA32 free:35840kB min:36200kB low:45248kB high:54296kB active_anon:64216kB inactive_anon:307488kB active_file:72kB inactive_file:60kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7360kB pagetables:3164kB bounce:0kB free_pcp:1396kB local_pcp:680kB free_cma:0kB [ 3393.146864] lowmem_reserve[]: [ 3393.186966] lowmem_reserve[]: [ 3393.207243] 0 0 0 0 0 [ 3393.219027] Node 1 Normal free:35904kB min:53696kB low:67120kB high:80544kB active_anon:756kB inactive_anon:51680kB active_file:8kB inactive_file:8kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:224kB pagetables:8kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 3393.221363] 0 [ 3393.261618] lowmem_reserve[]: 0 0 0 0 0 [ 3393.271396] 0 0 [ 3393.271509] Node 0 DMA: 7*4kB (UME) 11*8kB (UME) 19*16kB (UME) 20*32kB (UME) 1*64kB (U) 13*128kB (UME) 4*256kB (UME) 2*512kB (UE) 4*1024kB (UME) 1*2048kB (M) 0*4096kB = 10980kB [ 3393.292095] 0 [ 3393.306414] Node 0 DMA32: 473*4kB (UME) 339*8kB (UME) 80*16kB (UME) 941*32kB (UME) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 35996kB [ 3393.321811] 0 [ 3393.349493] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 3393.360565] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3393.372780] Node 1 Normal: 23*4kB (UM) 597*8kB (UM) 718*16kB (UM) 483*32kB (UM) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 31812kB [ 3393.422316] lowmem_reserve[]: 0 0 0 0 0 [ 3393.464801] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3393.500600] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3393.505752] Node 1 Normal free:26728kB min:53696kB low:67120kB high:80544kB active_anon:756kB inactive_anon:51680kB active_file:8kB inactive_file:8kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:224kB pagetables:8kB bounce:0kB free_pcp:128kB local_pcp:0kB free_cma:0kB [ 3393.521719] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3393.562465] lowmem_reserve[]: 0 0 0 0 0 [ 3393.565656] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3393.581126] syz-executor.0: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 3393.590239] Node 0 [ 3393.603249] 90958 total pagecache pages [ 3393.609453] 0 pages in swap cache [ 3393.612272] DMA: 6*4kB (ME) 9*8kB (UME) 19*16kB (UME) 20*32kB (UME) 1*64kB (U) 13*128kB (UME) 4*256kB (UME) 2*512kB (UE) 4*1024kB (UME) 1*2048kB (M) 0*4096kB = 10960kB [ 3393.621575] syz-executor.0 cpuset= [ 3393.646547] Swap cache stats: add 0, delete 0, find 0/0 [ 3393.654705] Node 0 DMA32: 483*4kB (ME) 342*8kB (UME) 80*16kB (UME) 382*32kB (UME) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18172kB [ 3393.657448] Free swap = 0kB [ 3393.672357] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 3393.673154] / [ 3393.683118] Total swap = 0kB [ 3393.686312] Node 1 Normal: [ 3393.687827] 2097051 pages RAM [ 3393.687832] 0 pages HighMem/MovableOnly [ 3393.690741] 22*4kB [ 3393.694218] mems_allowed=0-1 [ 3393.698161] (M) 14*8kB [ 3393.700387] CPU: 0 PID: 17109 Comm: syz-executor.0 Not tainted 4.14.225-syzkaller #0 [ 3393.705772] (UM) [ 3393.706037] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3393.714875] 692*16kB [ 3393.716888] Call Trace: [ 3393.728821] (UM) 483*32kB [ 3393.731186] dump_stack+0x1b2/0x281 [ 3393.731200] warn_alloc.cold+0x96/0x1cc [ 3393.734076] (UM) [ 3393.737621] ? zone_watermark_ok_safe+0x220/0x220 [ 3393.741562] 0*64kB 0*128kB [ 3393.743615] ? usleep_range+0x130/0x130 [ 3393.743623] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 3393.743633] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 3393.743643] ? run_timer_softirq+0x5a0/0x5a0 [ 3393.743657] __alloc_pages_nodemask+0x2127/0x2720 [ 3393.743672] ? lock_acquire+0x170/0x3f0 [ 3393.743686] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3393.743696] ? ion_page_pool_alloc+0x9e/0x1b0 [ 3393.743711] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 3393.750740] 363840 pages reserved [ 3393.751439] ? alloc_pages_current+0x84/0x260 [ 3393.755413] 0 pages cma reserved [ 3393.760467] alloc_pages_current+0x155/0x260 [ 3393.768543] 0*256kB [ 3393.769852] ion_page_pool_alloc+0x118/0x1b0 [ 3393.775213] Out of memory (oom_kill_allocating_task): Kill process 16868 (syz-executor.5) score 0 or sacrifice child [ 3393.778620] ion_system_heap_allocate+0x133/0x8c0 [ 3393.785955] 0*512kB [ 3393.787912] ? _raw_spin_unlock+0x29/0x40 [ 3393.793403] Killed process 17111 (syz-executor.5) total-vm:93384kB, anon-rss:156kB, file-rss:34820kB, shmem-rss:0kB [ 3393.796769] ? _ion_heap_freelist_drain+0x6e/0x410 [ 3393.810337] oom_reaper: reaped process 17111 (syz-executor.5), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 3393.811291] ? ion_system_contig_heap_create+0x130/0x130 [ 3393.825123] 0*1024kB [ 3393.826506] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 3393.831312] 0*2048kB 0*4096kB [ 3393.833623] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 3393.833635] ion_alloc+0x27a/0x810 [ 3393.833649] ? ion_dma_buf_release+0x40/0x40 [ 3393.833659] ? __might_fault+0x177/0x1b0 [ 3393.833670] ion_ioctl+0xea/0x1f0 [ 3393.833681] ? ion_query_heaps+0x360/0x360 [ 3393.846572] = 26728kB [ 3393.848367] ? __fget+0x1fe/0x360 [ 3393.853659] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3393.863568] ? ion_query_heaps+0x360/0x360 [ 3393.863578] do_vfs_ioctl+0x75a/0xff0 [ 3393.863589] ? ioctl_preallocate+0x1a0/0x1a0 [ 3393.863598] ? lock_downgrade+0x740/0x740 [ 3393.863610] ? __fget+0x225/0x360 [ 3393.863617] ? do_vfs_ioctl+0xff0/0xff0 [ 3393.863627] ? security_file_ioctl+0x83/0xb0 [ 3393.863636] SyS_ioctl+0x7f/0xb0 [ 3393.863643] ? do_vfs_ioctl+0xff0/0xff0 [ 3393.863657] do_syscall_64+0x1d5/0x640 [ 3393.871555] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3393.871592] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3393.876695] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3393.879831] RIP: 0033:0x465f69 [ 3393.887753] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3393.888164] RSP: 002b:00007efdc016d188 EFLAGS: 00000246 [ 3393.892554] 90925 total pagecache pages [ 3393.896586] ORIG_RAX: 0000000000000010 [ 3393.896591] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 3393.896596] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 3393.896600] RBP: 00000000004bfa8f R08: 0000000000000000 R09: 0000000000000000 [ 3393.896604] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 3393.896609] R13: 00007ffdff6f9c9f R14: 00007efdc016d300 R15: 0000000000022000 [ 3393.897911] syz-executor.4 invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask= [ 3393.900648] 0 pages in swap cache [ 3393.905342] (null) [ 3393.909556] Swap cache stats: add 0, delete 0, find 0/0 [ 3393.910628] , order=0, oom_score_adj=0 [ 3393.934860] Free swap = 0kB [ 3393.937284] syz-executor.4 cpuset= [ 3393.939651] Total swap = 0kB [ 3393.944037] / [ 3393.948674] 2097051 pages RAM [ 3393.951493] mems_allowed=0-1 [ 3393.957756] 0 pages HighMem/MovableOnly [ 3393.959390] CPU: 0 PID: 14697 Comm: syz-executor.4 Not tainted 4.14.225-syzkaller #0 [ 3393.968253] 363840 pages reserved [ 3393.973223] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3393.973227] Call Trace: [ 3393.973249] dump_stack+0x1b2/0x281 [ 3393.973260] dump_header+0x178/0x82f [ 3393.973270] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 3393.973278] ? ___ratelimit+0x2cd/0x530 [ 3393.973286] oom_kill_process.cold+0x10/0xb18 [ 3393.973302] out_of_memory+0xe3e/0x1190 [ 3393.973314] ? oom_killer_disable+0x1c0/0x1c0 [ 3393.973321] ? mutex_trylock+0x152/0x1a0 [ 3393.973331] __alloc_pages_nodemask+0x23e1/0x2720 [ 3393.973349] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3393.982710] 0 pages cma reserved [ 3393.985377] alloc_pages_current+0x155/0x260 [ 3394.165870] filemap_fault+0xea3/0x1980 [ 3394.169868] ext4_filemap_fault+0x84/0xb0 [ 3394.174021] __do_fault+0xfa/0x380 [ 3394.177564] __handle_mm_fault+0x2497/0x4620 [ 3394.181974] ? vm_insert_page+0x7c0/0x7c0 [ 3394.186127] ? lock_downgrade+0x740/0x740 [ 3394.190284] handle_mm_fault+0x391/0x860 [ 3394.194349] __do_page_fault+0x549/0xad0 [ 3394.198426] ? spurious_fault+0x640/0x640 [ 3394.202577] ? do_page_fault+0x60/0x500 [ 3394.206548] ? page_fault+0x2f/0x50 [ 3394.210174] page_fault+0x45/0x50 [ 3394.213619] RIP: 33ae33:0x5 [ 3394.216534] RSP: 0020:00007ffc0aef90ac EFLAGS: 00000032 [ 3394.232635] warn_alloc_show_mem: 1 callbacks suppressed [ 3394.232639] Mem-Info: [ 3394.245951] active_anon:16260 inactive_anon:90037 isolated_anon:0 [ 3394.245951] active_file:2 inactive_file:16 isolated_file:16 [ 3394.245951] unevictable:0 dirty:0 writeback:0 unstable:0 [ 3394.245951] slab_reclaimable:12297 slab_unreclaimable:114913 [ 3394.245951] mapped:52688 shmem:90891 pagetables:793 bounce:0 [ 3394.245951] free:186332 free_pcp:336 free_cma:0 [ 3394.322602] Node 0 active_anon:64284kB inactive_anon:308468kB active_file:8kB inactive_file:56kB unevictable:0kB isolated(anon):0kB isolated(file):64kB mapped:209100kB dirty:0kB writeback:0kB shmem:311556kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 3394.412601] Node 1 active_anon:756kB inactive_anon:51680kB active_file:0kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:1652kB dirty:0kB writeback:0kB shmem:52008kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3394.474013] Node 0 DMA free:11112kB min:204kB low:252kB high:300kB active_anon:68kB inactive_anon:980kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3394.526935] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 3394.536751] Node 0 DMA32 free:45048kB min:36200kB low:45248kB high:54296kB active_anon:64216kB inactive_anon:307488kB active_file:8kB inactive_file:56kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7328kB pagetables:3164kB bounce:0kB free_pcp:416kB local_pcp:168kB free_cma:0kB [ 3394.599028] lowmem_reserve[]: 0 0 0 0 0 [ 3394.627565] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3394.714688] Mem-Info: [ 3394.729550] active_anon:16227 inactive_anon:90037 isolated_anon:0 [ 3394.729550] active_file:864 inactive_file:852 isolated_file:0 [ 3394.729550] unevictable:0 dirty:0 writeback:0 unstable:0 [ 3394.729550] slab_reclaimable:12297 slab_unreclaimable:114991 [ 3394.729550] mapped:53894 shmem:90891 pagetables:771 bounce:0 [ 3394.729550] free:49580 free_pcp:337 free_cma:0 [ 3394.787078] lowmem_reserve[]: 0 0 0 0 0 [ 3394.800381] Node 1 Normal free:56252kB min:53696kB low:67120kB high:80544kB active_anon:956kB inactive_anon:51680kB active_file:3524kB inactive_file:2988kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:288kB pagetables:156kB bounce:0kB free_pcp:404kB local_pcp:312kB free_cma:0kB [ 3394.893778] Node 0 active_anon:64052kB inactive_anon:308468kB active_file:0kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:209100kB dirty:0kB writeback:0kB shmem:311556kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 3394.931121] Node 1 active_anon:956kB inactive_anon:51680kB active_file:124kB inactive_file:80kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:1776kB dirty:0kB writeback:0kB shmem:52008kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 3394.932893] lowmem_reserve[]: [ 3394.960910] Node 0 DMA free:10992kB min:204kB low:252kB high:300kB active_anon:68kB inactive_anon:980kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3394.965474] 0 [ 3395.002202] syz-executor.5: [ 3395.005945] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 3395.015384] page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 3395.020561] 0 [ 3395.029310] Node 0 DMA32 free:35660kB min:36200kB low:45248kB high:54296kB active_anon:64084kB inactive_anon:307488kB active_file:32kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7328kB pagetables:3076kB bounce:0kB free_pcp:80kB local_pcp:0kB free_cma:0kB [ 3395.035777] 0 [ 3395.069326] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 3395.075754] 0 0 [ 3395.078218] Node 0 DMA: 6*4kB (ME) 5*8kB (ME) 15*16kB (UME) 20*32kB (UME) 3*64kB (U) 13*128kB (UME) 4*256kB (UME) 2*512kB (UE) 4*1024kB (UME) 1*2048kB (M) 0*4096kB = 10992kB [ 3395.078340] CPU: 0 PID: 17111 Comm: syz-executor.5 Not tainted 4.14.225-syzkaller #0 [ 3395.097972] Node 0 [ 3395.102123] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3395.102130] DMA32: [ 3395.104340] Call Trace: [ 3395.104359] dump_stack+0x1b2/0x281 [ 3395.104372] warn_alloc.cold+0x96/0x1cc [ 3395.104382] ? zone_watermark_ok_safe+0x220/0x220 [ 3395.104403] __alloc_pages_nodemask+0x2127/0x2720 [ 3395.117345] 779*4kB [ 3395.118515] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 3395.122112] (UME) [ 3395.126078] ? lock_acquire+0x170/0x3f0 [ 3395.126092] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3395.126107] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 3395.126118] ? __mutex_unlock_slowpath+0x75/0x770 [ 3395.126131] alloc_pages_current+0x155/0x260 [ 3395.126144] ion_page_pool_alloc+0x118/0x1b0 [ 3395.126153] ion_system_heap_allocate+0x133/0x8c0 [ 3395.126164] ? _raw_spin_unlock+0x29/0x40 [ 3395.126174] ? _ion_heap_freelist_drain+0x6e/0x410 [ 3395.131087] 348*8kB [ 3395.135850] ? ion_system_contig_heap_create+0x130/0x130 [ 3395.135860] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 3395.135869] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 3395.135880] ion_alloc+0x27a/0x810 [ 3395.135894] ? ion_dma_buf_release+0x40/0x40 [ 3395.135904] ? __might_fault+0x177/0x1b0 [ 3395.135916] ion_ioctl+0xea/0x1f0 [ 3395.141904] (UME) [ 3395.143251] ? ion_query_heaps+0x360/0x360 [ 3395.143262] ? __fget+0x1fe/0x360 [ 3395.143271] ? ion_query_heaps+0x360/0x360 [ 3395.143280] do_vfs_ioctl+0x75a/0xff0 [ 3395.143290] ? ioctl_preallocate+0x1a0/0x1a0 [ 3395.143298] ? lock_downgrade+0x740/0x740 [ 3395.143309] ? __fget+0x225/0x360 [ 3395.143318] ? do_vfs_ioctl+0xff0/0xff0 [ 3395.143335] ? security_file_ioctl+0x83/0xb0 [ 3395.143344] SyS_ioctl+0x7f/0xb0 [ 3395.143351] ? do_vfs_ioctl+0xff0/0xff0 [ 3395.143361] do_syscall_64+0x1d5/0x640 [ 3395.143377] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3395.145565] 82*16kB [ 3395.149486] RIP: 0033:0x465f69 [ 3395.158066] (UME) [ 3395.159734] RSP: 002b:00007f4ecbcc0188 EFLAGS: 00000246 [ 3395.164620] 896*32kB [ 3395.168962] ORIG_RAX: 0000000000000010 [ 3395.176991] (UME) [ 3395.178190] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 3395.182312] 0*64kB [ 3395.187215] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 3395.187220] RBP: 00000000004bfa8f R08: 0000000000000000 R09: 0000000000000000 [ 3395.187224] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 3395.187229] R13: 00007ffead9296af R14: 00007f4ecbcc0300 R15: 0000000000022000 [ 3395.197190] lowmem_reserve[]: [ 3395.204849] 0*128kB [ 3395.212502] 0 [ 3395.226151] 0*256kB [ 3395.236883] 0 [ 3395.239950] 0*512kB [ 3395.250226] 0 [ 3395.254264] 0*1024kB [ 3395.257711] 0 [ 3395.260358] 0*2048kB [ 3395.269627] 0 [ 3395.271554] 0*4096kB [ 3395.282528] = 35884kB [ 3395.288930] Node 0 [ 3395.290601] Node 0 [ 3395.294757] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3395.298943] Normal: [ 3395.299131] lowmem_reserve[]: [ 3395.308208] 0*4kB [ 3395.316990] 0 [ 3395.325234] 0*8kB [ 3395.338736] 0 [ 3395.341102] Mem-Info: [ 3395.341121] active_anon:16252 inactive_anon:90037 isolated_anon:0 [ 3395.341121] active_file:64 inactive_file:33 isolated_file:0 [ 3395.341121] unevictable:0 dirty:0 writeback:0 unstable:0 [ 3395.341121] slab_reclaimable:12297 slab_unreclaimable:115069 [ 3395.341121] mapped:52719 shmem:90891 pagetables:808 bounce:0 [ 3395.341121] free:18283 free_pcp:23 free_cma:0 [ 3395.352146] 0 [ 3395.355317] 0*16kB [ 3395.355857] 0 [ 3395.357639] 0*32kB [ 3395.360036] 0 [ 3395.361814] 0*64kB [ 3395.398036] Node 0 active_anon:64052kB inactive_anon:308468kB active_file:132kB inactive_file:52kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:209100kB dirty:0kB writeback:0kB shmem:311556kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3395.398387] Node 1 [ 3395.401483] Node 1 active_anon:956kB inactive_anon:51680kB active_file:124kB inactive_file:80kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:1776kB dirty:0kB writeback:0kB shmem:52008kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3395.414914] Normal free:26480kB min:53696kB low:67120kB high:80544kB active_anon:956kB inactive_anon:51680kB active_file:88kB inactive_file:24kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:288kB pagetables:156kB bounce:0kB free_pcp:12kB local_pcp:12kB free_cma:0kB [ 3395.447186] 0*128kB [ 3395.458603] lowmem_reserve[]: [ 3395.487376] 0*256kB [ 3395.497350] 0 [ 3395.516818] Node 0 [ 3395.552005] 0 [ 3395.554169] 0*512kB [ 3395.554554] 0 [ 3395.556340] 0*1024kB [ 3395.558640] 0 [ 3395.560416] 0*2048kB 0*4096kB = 0kB [ 3395.569225] Node 1 Normal: 95*4kB (UM) 81*8kB (UM) 54*16kB (UM) 48*32kB (UM) 5*64kB (U) 0*128kB 73*256kB (U) 8*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 26532kB [ 3395.572066] 0 [ 3395.585906] DMA free:10992kB min:204kB low:252kB high:300kB active_anon:68kB inactive_anon:980kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3395.613796] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3395.615696] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 3395.627768] Node 0 DMA32 free:35888kB min:36200kB low:45248kB high:54296kB active_anon:64084kB inactive_anon:307492kB active_file:92kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7328kB pagetables:3076kB bounce:0kB free_pcp:80kB local_pcp:80kB free_cma:0kB [ 3395.632690] Node 0 [ 3395.659247] lowmem_reserve[]: 0 0 0 0 0 [ 3395.665564] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3395.666569] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3395.698910] lowmem_reserve[]: 0 0 0 0 0 [ 3395.703438] DMA: 6*4kB (ME) 5*8kB (ME) 15*16kB (UME) 20*32kB (UME) 3*64kB (U) 13*128kB (UME) 4*256kB (UME) 2*512kB (UE) 4*1024kB (UME) 1*2048kB (M) 0*4096kB = 10992kB [ 3395.703845] Node 1 Normal free:26532kB min:53696kB low:67120kB high:80544kB active_anon:880kB inactive_anon:51680kB active_file:32kB inactive_file:32kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:224kB pagetables:8kB bounce:0kB free_pcp:12kB local_pcp:0kB free_cma:0kB [ 3395.722790] Node 0 [ 3395.751676] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3395.755760] lowmem_reserve[]: [ 3395.767511] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3395.767558] 0 [ 3395.770621] 90929 total pagecache pages [ 3395.789190] DMA32: 779*4kB (UME) 348*8kB (UME) 82*16kB (UME) 896*32kB (UME) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 35884kB [ 3395.794627] 0 [ 3395.806531] 0 pages in swap cache [ 3395.810388] 0 [ 3395.811875] Swap cache stats: add 0, delete 0, find 0/0 [ 3395.811877] 0 0 [ 3395.813727] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 3395.836008] Free swap = 0kB [ 3395.839028] Total swap = 0kB [ 3395.842034] 2097051 pages RAM [ 3395.842389] Node 0 DMA: 6*4kB (ME) 5*8kB (ME) 15*16kB (UME) 20*32kB [ 3395.845197] 0 pages HighMem/MovableOnly [ 3395.845202] 363840 pages reserved [ 3395.851769] (UME) [ 3395.859355] Node 1 Normal: 95*4kB (UM) 81*8kB (UM) 54*16kB (UM) 48*32kB (UM) 5*64kB (U) 0*128kB 73*256kB (U) 8*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 26532kB [ 3395.870250] 3*64kB (U) 13*128kB (UME) 4*256kB (UME) 2*512kB (UE) 4*1024kB (UME) 1*2048kB (M) 0*4096kB = 10992kB [ 3395.879922] 0 pages cma reserved [ 3395.925594] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3395.932266] Node 0 DMA32: 748*4kB (UME) 348*8kB (UME) 82*16kB (UME) 896*32kB (UME) 6*64kB (U) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36144kB [ 3395.942248] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3395.979001] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3395.989243] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3395.997989] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 3395.998430] 91706 total pagecache pages [ 3396.013274] 0 pages in swap cache [ 3396.017266] Swap cache stats: add 0, delete 0, find 0/0 [ 3396.023649] Free swap = 0kB [ 3396.026988] Total swap = 0kB [ 3396.030310] 2097051 pages RAM [ 3396.042665] 0 pages HighMem/MovableOnly [ 3396.052259] Node 1 Normal: 2*4kB (UM) 0*8kB 1*16kB (U) 1*32kB (M) 2675*64kB (UM) 0*128kB 73*256kB (U) 6*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 193016kB [ 3396.062232] 363840 pages reserved [ 3396.069674] 0 pages cma reserved [ 3396.104980] Out of memory (oom_kill_allocating_task): Kill process 14697 (syz-executor.4) score 0 or sacrifice child [ 3396.112236] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3396.142277] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3396.151006] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3396.152590] Killed process 17115 (syz-executor.4) total-vm:93384kB, anon-rss:152kB, file-rss:34820kB, shmem-rss:0kB [ 3396.202224] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3396.210869] 91817 total pagecache pages [ 3396.214928] 0 pages in swap cache [ 3396.218416] Swap cache stats: add 0, delete 0, find 0/0 [ 3396.239906] oom_reaper: reaped process 17115 (syz-executor.4), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 3396.272194] Free swap = 0kB [ 3396.275234] Total swap = 0kB [ 3396.278256] 2097051 pages RAM [ 3396.281481] 0 pages HighMem/MovableOnly [ 3396.322243] 363840 pages reserved [ 3396.325751] 0 pages cma reserved 05:22:08 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) write$dsp(0xffffffffffffffff, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x80000001, 0x32}) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(0xffffffffffffffff, 0x7a5, &(0x7f0000000000)={{}, 0x1, 0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(0xffffffffffffffff, 0x7a4, &(0x7f00000000c0)={{@hyper}, 0x0, 0x3f, 0x0, 0x8}) [ 3396.829909] syz-executor.0: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 3396.862252] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 3396.896276] CPU: 0 PID: 17146 Comm: syz-executor.0 Not tainted 4.14.225-syzkaller #0 [ 3396.904186] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3396.913608] Call Trace: [ 3396.919550] dump_stack+0x1b2/0x281 [ 3396.923187] warn_alloc.cold+0x96/0x1cc [ 3396.927145] ? zone_watermark_ok_safe+0x220/0x220 [ 3396.933191] __alloc_pages_nodemask+0x2127/0x2720 [ 3396.938012] ? io_schedule_timeout+0x140/0x140 [ 3396.942579] ? lock_acquire+0x170/0x3f0 [ 3396.946535] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3396.951359] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 3396.956790] ? __mutex_unlock_slowpath+0x75/0x770 [ 3396.961613] alloc_pages_current+0x155/0x260 [ 3396.966029] ion_page_pool_alloc+0x118/0x1b0 [ 3396.970434] ion_system_heap_allocate+0x133/0x8c0 [ 3396.975281] ? ion_alloc+0x187/0x810 [ 3396.978985] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 3396.984438] ? ion_system_contig_heap_create+0x130/0x130 [ 3396.989885] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 3396.994883] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 3396.999717] ion_alloc+0x204/0x810 [ 3397.003240] ? ion_dma_buf_release+0x40/0x40 [ 3397.007629] ? __might_fault+0x177/0x1b0 [ 3397.011677] ion_ioctl+0xea/0x1f0 [ 3397.015110] ? ion_query_heaps+0x360/0x360 [ 3397.019324] ? __fget+0x1fe/0x360 [ 3397.022756] ? ion_query_heaps+0x360/0x360 [ 3397.026973] do_vfs_ioctl+0x75a/0xff0 [ 3397.030758] ? ioctl_preallocate+0x1a0/0x1a0 [ 3397.035145] ? lock_downgrade+0x740/0x740 [ 3397.039274] ? __fget+0x225/0x360 [ 3397.042719] ? do_vfs_ioctl+0xff0/0xff0 [ 3397.046945] ? security_file_ioctl+0x83/0xb0 [ 3397.051503] SyS_ioctl+0x7f/0xb0 [ 3397.054849] ? do_vfs_ioctl+0xff0/0xff0 [ 3397.058978] do_syscall_64+0x1d5/0x640 [ 3397.062865] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3397.068172] RIP: 0033:0x465f69 [ 3397.071348] RSP: 002b:00007efdc016d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3397.079044] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 3397.086297] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 3397.093731] RBP: 00000000004bfa8f R08: 0000000000000000 R09: 0000000000000000 [ 3397.101213] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 3397.109349] R13: 00007ffdff6f9c9f R14: 00007efdc016d300 R15: 0000000000022000 [ 3397.153118] oom_reaper: reaped process 17130 (syz-executor.2), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 3397.182369] rsyslogd invoked oom-killer: gfp_mask=0x14200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=0 [ 3397.196975] rsyslogd cpuset=/ mems_allowed=0-1 [ 3397.201655] CPU: 0 PID: 17149 Comm: rsyslogd Not tainted 4.14.225-syzkaller #0 [ 3397.209123] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3397.218658] Call Trace: [ 3397.221228] dump_stack+0x1b2/0x281 [ 3397.224840] dump_header+0x178/0x82f [ 3397.228664] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 3397.233776] ? ___ratelimit+0x2cd/0x530 [ 3397.237737] oom_kill_process.cold+0x10/0xb18 [ 3397.242223] out_of_memory+0xe3e/0x1190 [ 3397.246186] ? oom_killer_disable+0x1c0/0x1c0 [ 3397.250656] ? mutex_trylock+0x152/0x1a0 [ 3397.254697] __alloc_pages_nodemask+0x23e1/0x2720 [ 3397.260738] ? lock_acquire+0x170/0x3f0 [ 3397.264694] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 3397.269687] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3397.274606] ? debug_check_no_obj_freed+0x2c0/0x680 [ 3397.281165] ? __lock_acquire+0x5fc/0x3f20 [ 3397.285426] alloc_pages_vma+0xd2/0x6d0 [ 3397.289398] __handle_mm_fault+0xe4f/0x4620 [ 3397.293789] ? vm_insert_page+0x7c0/0x7c0 [ 3397.297917] ? vm_mmap_pgoff+0x168/0x1a0 [ 3397.301959] ? vm_mmap_pgoff+0xcb/0x1a0 [ 3397.306005] handle_mm_fault+0x391/0x860 [ 3397.310049] __do_page_fault+0x549/0xad0 [ 3397.314095] ? spurious_fault+0x640/0x640 [ 3397.318225] ? do_page_fault+0x60/0x500 [ 3397.322190] ? page_fault+0x2f/0x50 [ 3397.325800] page_fault+0x45/0x50 [ 3397.329235] RIP: 0002:0x801 [ 3397.332155] RSP: 2af5f000:00007ffde033fb20 EFLAGS: 7ffde033fc08 [ 3397.349121] Mem-Info: [ 3397.360342] active_anon:16214 inactive_anon:90038 isolated_anon:0 [ 3397.360342] active_file:15 inactive_file:39 isolated_file:1 [ 3397.360342] unevictable:0 dirty:15 writeback:0 unstable:0 [ 3397.360342] slab_reclaimable:12325 slab_unreclaimable:116734 [ 3397.360342] mapped:52791 shmem:90895 pagetables:768 bounce:0 [ 3397.360342] free:14274 free_pcp:30 free_cma:0 [ 3397.399428] Node 0 active_anon:63648kB inactive_anon:308468kB active_file:60kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:209124kB dirty:20kB writeback:0kB shmem:311568kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 3397.407674] Mem-Info: [ 3397.431666] Node 1 active_anon:1208kB inactive_anon:51684kB active_file:0kB inactive_file:52kB unevictable:0kB isolated(anon):0kB isolated(file):4kB mapped:2040kB dirty:40kB writeback:0kB shmem:52012kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3397.431742] syz-executor.2: [ 3397.476835] Node 0 DMA free:10972kB min:204kB low:252kB high:300kB active_anon:68kB inactive_anon:980kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3397.498321] active_anon:16214 inactive_anon:90038 isolated_anon:0 [ 3397.498321] active_file:15 inactive_file:14 isolated_file:1 [ 3397.498321] unevictable:0 dirty:15 writeback:0 unstable:0 [ 3397.498321] slab_reclaimable:12325 slab_unreclaimable:116734 [ 3397.498321] mapped:52791 shmem:90895 pagetables:768 bounce:0 [ 3397.498321] free:13842 free_pcp:0 free_cma:0 [ 3397.537294] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 3397.545167] syz-executor.5: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 3397.556272] page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 3397.563415] Node 0 DMA32 free:18076kB min:36200kB low:45248kB high:54296kB active_anon:63580kB inactive_anon:307488kB active_file:60kB inactive_file:4kB unevictable:0kB writepending:20kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7328kB pagetables:2980kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3397.570069] syz-executor.2 cpuset= [ 3397.598223] syz-executor.4: [ 3397.601452] syz-executor.5 cpuset= [ 3397.601774] page allocation failure: order:0 [ 3397.605316] / [ 3397.608410] Node 0 active_anon:63648kB inactive_anon:308468kB active_file:60kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:209124kB dirty:20kB writeback:0kB shmem:311568kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3397.616056] mems_allowed=0-1 [ 3397.643601] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 3397.648278] lowmem_reserve[]: 0 0 0 0 [ 3397.653374] / mems_allowed=0-1 [ 3397.657186] 0 [ 3397.660365] CPU: 1 PID: 17130 Comm: syz-executor.2 Not tainted 4.14.225-syzkaller #0 [ 3397.670002] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3397.671845] Node 0 [ 3397.679337] Call Trace: [ 3397.679347] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3397.679352] lowmem_reserve[]: [ 3397.681583] dump_stack+0x1b2/0x281 [ 3397.691834] 0 [ 3397.709371] warn_alloc.cold+0x96/0x1cc [ 3397.709384] ? zone_watermark_ok_safe+0x220/0x220 [ 3397.726801] ? usleep_range+0x130/0x130 [ 3397.730757] ? try_to_free_pages+0x23f/0x6e0 [ 3397.731823] 0 [ 3397.735168] ? _find_next_bit+0xdb/0x100 [ 3397.735184] 0 0 [ 3397.736975] ? run_timer_softirq+0x5a0/0x5a0 [ 3397.741049] 0 [ 3397.743276] __alloc_pages_nodemask+0x2127/0x2720 [ 3397.743292] ? lock_acquire+0x170/0x3f0 [ 3397.743306] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3397.763057] ? ion_page_pool_alloc+0x9e/0x1b0 [ 3397.767542] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 3397.772975] Node 1 [ 3397.772983] ? alloc_pages_current+0x37/0x260 [ 3397.772994] alloc_pages_current+0x155/0x260 [ 3397.775220] Normal free:26788kB min:53696kB low:67120kB high:80544kB active_anon:1192kB inactive_anon:51684kB active_file:20kB inactive_file:72kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:320kB pagetables:60kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3397.780818] ion_page_pool_alloc+0x118/0x1b0 [ 3397.791810] lowmem_reserve[]: [ 3397.812955] ion_system_heap_allocate+0x133/0x8c0 [ 3397.812966] ? ion_alloc+0x187/0x810 [ 3397.812977] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 3397.834403] ? ion_system_contig_heap_create+0x130/0x130 [ 3397.839835] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 3397.841802] 0 [ 3397.844835] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 3397.844837] 0 0 [ 3397.846658] ion_alloc+0x204/0x810 [ 3397.851472] 0 [ 3397.853436] ? ion_dma_buf_release+0x40/0x40 [ 3397.853447] ? __might_fault+0x177/0x1b0 [ 3397.853460] ion_ioctl+0xea/0x1f0 [ 3397.870698] ? ion_query_heaps+0x360/0x360 [ 3397.871798] 0 [ 3397.874918] ? __fget+0x1fe/0x360 [ 3397.874927] ? ion_query_heaps+0x360/0x360 [ 3397.876728] Node 0 [ 3397.880164] do_vfs_ioctl+0x75a/0xff0 [ 3397.890482] ? ioctl_preallocate+0x1a0/0x1a0 [ 3397.894872] ? lock_downgrade+0x740/0x740 [ 3397.899005] ? __fget+0x225/0x360 [ 3397.901790] DMA: [ 3397.902457] ? do_vfs_ioctl+0xff0/0xff0 [ 3397.902459] 6*4kB (ME) [ 3397.904511] ? security_file_ioctl+0x83/0xb0 [ 3397.908480] 5*8kB [ 3397.911080] SyS_ioctl+0x7f/0xb0 [ 3397.921545] ? do_vfs_ioctl+0xff0/0xff0 [ 3397.925505] do_syscall_64+0x1d5/0x640 [ 3397.929380] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3397.931791] (ME) [ 3397.934601] RIP: 0033:0x465f69 [ 3397.934604] 11*16kB (UME) [ 3397.936661] RSP: 002b:00007fb559d50188 EFLAGS: 00000246 [ 3397.939851] 19*32kB [ 3397.942675] ORIG_RAX: 0000000000000010 [ 3397.942680] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 3397.942684] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 3397.942688] RBP: 00000000004bfa8f R08: 0000000000000000 R09: 0000000000000000 [ 3397.942692] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 3397.942696] R13: 00007ffd8e3fce9f R14: 00007fb559d50300 R15: 0000000000022000 [ 3397.951387] syz-executor.4 cpuset= [ 3397.960660] CPU: 0 PID: 17111 Comm: syz-executor.5 Not tainted 4.14.225-syzkaller #0 [ 3397.966942] / [ 3397.969110] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3397.976416] mems_allowed=0-1 [ 3397.983633] Call Trace: [ 3397.983652] dump_stack+0x1b2/0x281 [ 3397.983667] warn_alloc.cold+0x96/0x1cc [ 3397.983679] ? zone_watermark_ok_safe+0x220/0x220 [ 3397.983688] ? usleep_range+0x130/0x130 [ 3397.983696] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 3397.983707] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 3397.983718] ? run_timer_softirq+0x5a0/0x5a0 [ 3397.995134] Node 1 active_anon:1192kB inactive_anon:51684kB active_file:20kB inactive_file:72kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:1992kB dirty:0kB writeback:0kB shmem:52012kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3398.002698] __alloc_pages_nodemask+0x2127/0x2720 [ 3398.002714] ? lock_acquire+0x170/0x3f0 [ 3398.002728] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3398.002739] ? ion_page_pool_alloc+0x9e/0x1b0 [ 3398.002753] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 3398.015164] Node 0 [ 3398.016919] alloc_pages_current+0x155/0x260 [ 3398.019488] DMA free:10960kB min:204kB low:252kB high:300kB active_anon:68kB inactive_anon:980kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3398.023093] ion_page_pool_alloc+0x118/0x1b0 [ 3398.023102] ion_system_heap_allocate+0x133/0x8c0 [ 3398.023113] ? _raw_spin_unlock+0x29/0x40 [ 3398.023121] ? _ion_heap_freelist_drain+0x6e/0x410 [ 3398.023130] ? ion_system_contig_heap_create+0x130/0x130 [ 3398.023141] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 3398.023150] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 3398.023159] ion_alloc+0x27a/0x810 [ 3398.023172] ? ion_dma_buf_release+0x40/0x40 [ 3398.023184] ? __might_fault+0x177/0x1b0 [ 3398.043491] lowmem_reserve[]: [ 3398.046014] ion_ioctl+0xea/0x1f0 [ 3398.075109] 0 [ 3398.081721] ? ion_query_heaps+0x360/0x360 [ 3398.103473] 2717 [ 3398.105218] ? __fget+0x1fe/0x360 [ 3398.107429] 2718 [ 3398.111843] ? ion_query_heaps+0x360/0x360 [ 3398.111852] do_vfs_ioctl+0x75a/0xff0 [ 3398.111865] ? ioctl_preallocate+0x1a0/0x1a0 [ 3398.111875] ? lock_downgrade+0x740/0x740 [ 3398.111887] ? __fget+0x225/0x360 [ 3398.111896] ? do_vfs_ioctl+0xff0/0xff0 [ 3398.195101] 2718 [ 3398.195713] ? security_file_ioctl+0x83/0xb0 [ 3398.197753] 2718 [ 3398.201191] SyS_ioctl+0x7f/0xb0 [ 3398.215632] ? do_vfs_ioctl+0xff0/0xff0 [ 3398.219762] Node 0 [ 3398.223232] do_syscall_64+0x1d5/0x640 [ 3398.223249] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3398.223257] RIP: 0033:0x465f69 [ 3398.223262] RSP: 002b:00007f4ecbcc0188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3398.223271] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 3398.223279] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 3398.243519] DMA32 free:17948kB min:36200kB low:45248kB high:54296kB active_anon:63616kB inactive_anon:307488kB active_file:8kB inactive_file:8kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7328kB pagetables:2980kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 3398.245246] RBP: 00000000004bfa8f R08: 0000000000000000 R09: 0000000000000000 [ 3398.249287] lowmem_reserve[]: [ 3398.254453] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 3398.254458] R13: 00007ffead9296af R14: 00007f4ecbcc0300 R15: 0000000000022000 [ 3398.264629] (UME) [ 3398.267338] CPU: 1 PID: 17115 Comm: syz-executor.4 Not tainted 4.14.225-syzkaller #0 [ 3398.272707] 4*64kB [ 3398.279971] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3398.308087] (U) [ 3398.315310] Call Trace: [ 3398.315329] dump_stack+0x1b2/0x281 [ 3398.315344] warn_alloc.cold+0x96/0x1cc [ 3398.318424] 13*128kB [ 3398.325709] ? zone_watermark_ok_safe+0x220/0x220 [ 3398.325719] ? usleep_range+0x130/0x130 [ 3398.325731] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 3398.333001] (UME) [ 3398.335136] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 3398.343013] 4*256kB [ 3398.345212] ? run_timer_softirq+0x5a0/0x5a0 [ 3398.354559] (UME) [ 3398.356533] __alloc_pages_nodemask+0x2127/0x2720 [ 3398.359083] 2*512kB [ 3398.362699] ? lock_acquire+0x170/0x3f0 [ 3398.362714] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3398.366663] (UE) [ 3398.369058] ? ion_page_pool_alloc+0x9e/0x1b0 [ 3398.373888] 4*1024kB [ 3398.377919] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 3398.383068] (UME) [ 3398.385197] alloc_pages_current+0x155/0x260 [ 3398.390181] 1*2048kB [ 3398.392510] ion_page_pool_alloc+0x118/0x1b0 [ 3398.392520] ion_system_heap_allocate+0x133/0x8c0 [ 3398.392531] ? ion_alloc+0x187/0x810 [ 3398.396914] (M) [ 3398.399050] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 3398.403885] 0*4096kB [ 3398.406171] ? ion_system_contig_heap_create+0x130/0x130 [ 3398.410119] = 10960kB [ 3398.414961] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 3398.414971] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 3398.414983] ion_alloc+0x204/0x810 [ 3398.417027] Node 0 [ 3398.421510] ? ion_dma_buf_release+0x40/0x40 [ 3398.423912] DMA32: [ 3398.429330] ? __might_fault+0x177/0x1b0 [ 3398.431453] 779*4kB [ 3398.435849] ion_ioctl+0xea/0x1f0 [ 3398.435858] ? ion_query_heaps+0x360/0x360 [ 3398.435867] ? __fget+0x1fe/0x360 [ 3398.438253] (UME) [ 3398.442652] ? ion_query_heaps+0x360/0x360 [ 3398.442662] do_vfs_ioctl+0x75a/0xff0 [ 3398.442673] ? ioctl_preallocate+0x1a0/0x1a0 [ 3398.447751] 352*8kB [ 3398.451452] ? lock_downgrade+0x740/0x740 [ 3398.453422] (UME) [ 3398.459013] ? __fget+0x225/0x360 [ 3398.461394] 81*16kB [ 3398.466824] ? do_vfs_ioctl+0xff0/0xff0 [ 3398.466834] ? security_file_ioctl+0x83/0xb0 [ 3398.466844] SyS_ioctl+0x7f/0xb0 [ 3398.469229] (UME) [ 3398.474250] ? do_vfs_ioctl+0xff0/0xff0 [ 3398.474262] do_syscall_64+0x1d5/0x640 [ 3398.474278] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3398.479093] 7*32kB [ 3398.482611] RIP: 0033:0x465f69 [ 3398.482615] RSP: 002b:00007fbb52cf0188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3398.482625] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 3398.482631] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 3398.484846] (UME) [ 3398.489331] RBP: 00000000004bfa8f R08: 0000000000000000 R09: 0000000000000000 [ 3398.489338] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 3398.491581] 70*64kB [ 3398.495637] R13: 00007ffc0aef8def R14: 00007fbb52cf0300 R15: 0000000000022000 [ 3398.498523] 0 [ 3398.510844] (UM) [ 3398.511299] 0 [ 3398.526859] 29*128kB [ 3398.532521] 0 [ 3398.541699] (UM) [ 3398.542528] 0 [ 3398.546891] 5*256kB [ 3398.550232] 0 [ 3398.561933] (UM) [ 3398.567497] Node 0 [ 3398.567929] 2*512kB [ 3398.571115] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3398.587816] (U) [ 3398.596093] lowmem_reserve[]: [ 3398.612675] Mem-Info: [ 3398.614597] 0 [ 3398.620073] active_anon:16219 inactive_anon:90038 isolated_anon:0 [ 3398.620073] active_file:12 inactive_file:15 isolated_file:0 [ 3398.620073] unevictable:0 dirty:0 writeback:0 unstable:0 [ 3398.620073] slab_reclaimable:12328 slab_unreclaimable:116718 [ 3398.620073] mapped:52773 shmem:90895 pagetables:760 bounce:0 [ 3398.620073] free:13924 free_pcp:21 free_cma:0 [ 3398.621910] 0 0 0 0 [ 3398.621926] Node 1 Normal free:26788kB min:53696kB low:67120kB high:80544kB active_anon:1192kB inactive_anon:51684kB active_file:40kB inactive_file:52kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:320kB pagetables:60kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3398.621946] lowmem_reserve[]: 0 0 0 0 0 [ 3398.621964] Node 0 DMA: 6*4kB (ME) 5*8kB (ME) [ 3398.633024] 0*1024kB [ 3398.635697] 11*16kB [ 3398.636324] 0*2048kB [ 3398.638109] (UME) [ 3398.640171] 0*4096kB [ 3398.642427] 19*32kB (UME) 4*64kB (U) 13*128kB (UME) 4*256kB (UME) 2*512kB (UE) 4*1024kB (UME) 1*2048kB (M) 0*4096kB = 10960kB [ 3398.642477] Node 0 DMA32: 779*4kB (UME) 360*8kB (UME) 81*16kB [ 3398.651990] Node 0 active_anon:63684kB inactive_anon:308468kB active_file:8kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:209100kB dirty:0kB writeback:0kB shmem:311568kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3398.671631] (UME) [ 3398.680747] = 17948kB [ 3398.714259] 7*32kB [ 3398.723970] Node 1 active_anon:1192kB inactive_anon:51684kB active_file:48kB inactive_file:44kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:1992kB dirty:0kB writeback:0kB shmem:52012kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3398.771660] (UME) [ 3398.778575] Node 0 [ 3398.781147] 70*64kB [ 3398.813044] Normal: [ 3398.867160] Node 0 DMA free:11088kB min:204kB low:252kB high:300kB active_anon:68kB inactive_anon:980kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3398.914606] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 3398.920190] 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 3398.920587] (UM) [ 3398.929649] Node 0 DMA32 free:60412kB min:36200kB low:45248kB high:54296kB active_anon:63616kB inactive_anon:307488kB active_file:108kB inactive_file:3108kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7296kB pagetables:2980kB bounce:0kB free_pcp:392kB local_pcp:196kB free_cma:0kB [ 3398.929669] lowmem_reserve[]: 0 0 [ 3398.964471] Node 1 [ 3398.967989] 29*128kB [ 3398.968315] Normal: 43*4kB (UM) 27*8kB (M) 14*16kB (M) 17*32kB (UM) 2420*64kB (UM) 8*128kB (M) 1*256kB (M) 45*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 180356kB [ 3398.976879] (UM) [ 3398.988501] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3399.003309] 0 0 0 [ 3399.005991] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3399.021429] 5*256kB [ 3399.044759] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3399.065019] (UM) 2*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 18012kB [ 3399.072025] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3399.114939] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 3399.124065] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3399.144751] lowmem_reserve[]: 0 0 0 0 0 [ 3399.148781] Node 1 Normal free:278820kB min:53696kB low:67120kB high:80544kB active_anon:1092kB inactive_anon:51684kB active_file:48kB inactive_file:44kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:288kB pagetables:60kB bounce:0kB free_pcp:120kB local_pcp:120kB free_cma:0kB [ 3399.183871] Node 1 Normal: 43*4kB (UM) 27*8kB (M) 14*16kB (M) 17*32kB (UM) 4254*64kB (UM) 48*128kB (UM) 3*256kB (UM) 45*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 303364kB [ 3399.199341] 92846 total pagecache pages [ 3399.211612] 0 pages in swap cache [ 3399.215102] Swap cache stats: add 0, delete 0, find 0/0 [ 3399.220462] Free swap = 0kB [ 3399.257431] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3399.267597] Total swap = 0kB [ 3399.276104] 2097051 pages RAM [ 3399.289783] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3399.299982] 0 pages HighMem/MovableOnly [ 3399.308898] lowmem_reserve[]: 0 0 0 0 0 [ 3399.313213] 363840 pages reserved [ 3399.320633] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3399.329643] Node 0 DMA: 6*4kB (ME) 5*8kB (ME) 12*16kB (UME) 19*32kB (UME) 6*64kB (U) 13*128kB (UME) 4*256kB (UME) 2*512kB (UE) 4*1024kB (UME) 1*2048kB (M) 0*4096kB = 11104kB [ 3399.349303] 0 pages cma reserved [ 3399.351097] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3399.361526] Out of memory (oom_kill_allocating_task): Kill process 17149 (rsyslogd) score 0 or sacrifice child [ 3399.361551] Killed process 17149 (rsyslogd) total-vm:15656kB, anon-rss:88kB, file-rss:4kB, shmem-rss:0kB [ 3399.402137] Node 0 DMA32: 7409*4kB (UM) 1415*8kB (UME) 307*16kB (UE) 1857*32kB (UE) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 105292kB [ 3399.463271] 95362 total pagecache pages [ 3399.468552] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 3399.478323] 0 pages in swap cache [ 3399.496175] Swap cache stats: add 0, delete 0, find 0/0 [ 3399.524919] Free swap = 0kB [ 3399.535903] Total swap = 0kB [ 3399.537220] Node 1 Normal: 43*4kB (UM) 40*8kB (UM) 21*16kB (UM) 19*32kB (UM) 2306*64kB (UM) 74*128kB (UM) 15*256kB (UM) 45*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 185372kB [ 3399.546610] 2097051 pages RAM [ 3399.587271] 0 pages HighMem/MovableOnly [ 3399.600298] 363840 pages reserved [ 3399.610619] 0 pages cma reserved [ 3399.628659] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3399.670423] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3399.685746] syz-executor.4: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 3399.688490] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3399.715473] syz-executor.2: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 3399.727214] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 3399.732396] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 3399.738527] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3399.745828] CPU: 1 PID: 17115 Comm: syz-executor.4 Not tainted 4.14.225-syzkaller #0 [ 3399.755183] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3399.761442] 96673 total pagecache pages [ 3399.764551] Call Trace: [ 3399.768518] 0 pages in swap cache [ 3399.771101] dump_stack+0x1b2/0x281 [ 3399.778134] warn_alloc.cold+0x96/0x1cc [ 3399.782097] ? zone_watermark_ok_safe+0x220/0x220 [ 3399.786951] __alloc_pages_nodemask+0x2127/0x2720 [ 3399.791391] Swap cache stats: add 0, delete 0, find 0/0 [ 3399.791785] ? lock_acquire+0x170/0x3f0 [ 3399.797121] Free swap = 0kB [ 3399.801184] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3399.809192] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 3399.811384] Total swap = 0kB [ 3399.814713] ? __mutex_unlock_slowpath+0x75/0x770 [ 3399.817703] 2097051 pages RAM [ 3399.822527] alloc_pages_current+0x155/0x260 [ 3399.822542] ion_page_pool_alloc+0x118/0x1b0 [ 3399.822552] ion_system_heap_allocate+0x133/0x8c0 [ 3399.839395] ? _raw_spin_unlock+0x29/0x40 [ 3399.841380] 0 pages HighMem/MovableOnly [ 3399.843528] ? _ion_heap_freelist_drain+0x6e/0x410 [ 3399.847471] 363840 pages reserved [ 3399.852409] ? ion_system_contig_heap_create+0x130/0x130 [ 3399.852420] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 3399.852432] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 3399.871369] 0 pages cma reserved [ 3399.872232] ion_alloc+0x27a/0x810 [ 3399.879277] ? ion_dma_buf_release+0x40/0x40 [ 3399.883680] ? __might_fault+0x177/0x1b0 [ 3399.887725] ion_ioctl+0xea/0x1f0 [ 3399.891161] ? ion_query_heaps+0x360/0x360 [ 3399.895384] ? __fget+0x1fe/0x360 [ 3399.898834] ? ion_query_heaps+0x360/0x360 [ 3399.903057] do_vfs_ioctl+0x75a/0xff0 [ 3399.907365] ? ioctl_preallocate+0x1a0/0x1a0 [ 3399.911769] ? lock_downgrade+0x740/0x740 [ 3399.915999] ? __fget+0x225/0x360 [ 3399.919463] ? do_vfs_ioctl+0xff0/0xff0 [ 3399.923428] ? security_file_ioctl+0x83/0xb0 [ 3399.927815] SyS_ioctl+0x7f/0xb0 [ 3399.931167] ? do_vfs_ioctl+0xff0/0xff0 [ 3399.935134] do_syscall_64+0x1d5/0x640 [ 3399.939018] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3399.944189] RIP: 0033:0x465f69 [ 3399.947362] RSP: 002b:00007fbb52cf0188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3399.955046] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 3399.962378] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 3399.969644] RBP: 00000000004bfa8f R08: 0000000000000000 R09: 0000000000000000 [ 3399.976902] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 3399.984155] R13: 00007ffc0aef8def R14: 00007fbb52cf0300 R15: 0000000000022000 [ 3399.991428] CPU: 0 PID: 17130 Comm: syz-executor.2 Not tainted 4.14.225-syzkaller #0 [ 3400.000529] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3400.009892] Call Trace: [ 3400.012512] dump_stack+0x1b2/0x281 [ 3400.016139] warn_alloc.cold+0x96/0x1cc [ 3400.020107] ? zone_watermark_ok_safe+0x220/0x220 [ 3400.024968] __alloc_pages_nodemask+0x2127/0x2720 [ 3400.029845] ? lock_acquire+0x170/0x3f0 [ 3400.033845] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3400.038847] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 3400.044309] ? __mutex_unlock_slowpath+0x75/0x770 [ 3400.049191] alloc_pages_current+0x155/0x260 [ 3400.053613] ion_page_pool_alloc+0x118/0x1b0 [ 3400.058134] ion_system_heap_allocate+0x133/0x8c0 [ 3400.062985] ? _raw_spin_unlock+0x29/0x40 [ 3400.067136] ? _ion_heap_freelist_drain+0x6e/0x410 [ 3400.072069] ? ion_system_contig_heap_create+0x130/0x130 [ 3400.077516] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 3400.082531] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 3400.087381] ion_alloc+0x27a/0x810 [ 3400.090933] ? ion_dma_buf_release+0x40/0x40 [ 3400.098820] ? __might_fault+0x177/0x1b0 [ 3400.102893] ion_ioctl+0xea/0x1f0 [ 3400.106357] ? ion_query_heaps+0x360/0x360 [ 3400.110682] ? __fget+0x1fe/0x360 [ 3400.114224] ? ion_query_heaps+0x360/0x360 [ 3400.118471] do_vfs_ioctl+0x75a/0xff0 [ 3400.122275] ? ioctl_preallocate+0x1a0/0x1a0 [ 3400.126688] ? lock_downgrade+0x740/0x740 [ 3400.130853] ? __fget+0x225/0x360 [ 3400.134571] ? do_vfs_ioctl+0xff0/0xff0 [ 3400.138546] ? security_file_ioctl+0x83/0xb0 [ 3400.142971] SyS_ioctl+0x7f/0xb0 [ 3400.146343] ? do_vfs_ioctl+0xff0/0xff0 [ 3400.150328] do_syscall_64+0x1d5/0x640 [ 3400.154228] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3400.159764] RIP: 0033:0x465f69 [ 3400.163032] RSP: 002b:00007fb559d50188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3400.170743] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 3400.178100] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 3400.185370] RBP: 00000000004bfa8f R08: 0000000000000000 R09: 0000000000000000 [ 3400.192640] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 3400.199907] R13: 00007ffd8e3fce9f R14: 00007fb559d50300 R15: 0000000000022000 [ 3400.304961] warn_alloc_show_mem: 2 callbacks suppressed [ 3400.304965] Mem-Info: [ 3400.317231] active_anon:16259 inactive_anon:90037 isolated_anon:0 [ 3400.317231] active_file:1830 inactive_file:4155 isolated_file:0 [ 3400.317231] unevictable:0 dirty:12 writeback:0 unstable:0 [ 3400.317231] slab_reclaimable:12298 slab_unreclaimable:118845 [ 3400.317231] mapped:39497 shmem:90891 pagetables:727 bounce:0 [ 3400.317231] free:179093 free_pcp:421 free_cma:0 [ 3400.357379] Node 0 active_anon:64224kB inactive_anon:308464kB active_file:7256kB inactive_file:16592kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:155840kB dirty:44kB writeback:0kB shmem:311552kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 3400.391716] Node 1 active_anon:812kB inactive_anon:51684kB active_file:64kB inactive_file:28kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:2148kB dirty:4kB writeback:0kB shmem:52012kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3400.423965] Node 0 DMA free:11040kB min:204kB low:252kB high:300kB active_anon:68kB inactive_anon:980kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3400.456735] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 3400.462844] Node 0 DMA32 free:294552kB min:36200kB low:45248kB high:54296kB active_anon:64276kB inactive_anon:307484kB active_file:7268kB inactive_file:16704kB unevictable:0kB writepending:44kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7200kB pagetables:2892kB bounce:0kB free_pcp:356kB local_pcp:260kB free_cma:0kB [ 3400.509889] lowmem_reserve[]: 0 0 0 0 0 [ 3400.516288] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3400.547961] lowmem_reserve[]: 0 0 0 0 0 05:22:12 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) write$dsp(0xffffffffffffffff, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x80000001, 0x32}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(0xffffffffffffffff, 0x7a5, &(0x7f0000000000)={{@any, 0x7}, 0x1, 0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(0xffffffffffffffff, 0x7a4, &(0x7f00000000c0)={{@hyper}, 0x9, 0x3f, 0x0, 0x8}) [ 3400.553032] Node 1 Normal free:500836kB min:53696kB low:67120kB high:80544kB active_anon:812kB inactive_anon:51684kB active_file:64kB inactive_file:28kB unevictable:0kB writepending:4kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:256kB pagetables:16kB bounce:0kB free_pcp:668kB local_pcp:0kB free_cma:0kB [ 3400.597184] lowmem_reserve[]: 0 0 0 0 0 [ 3400.604291] Node 0 DMA: 6*4kB (ME) 5*8kB (ME) 12*16kB (UME) 19*32kB (UME) 5*64kB (U) 13*128kB (UME) 4*256kB (UME) 2*512kB (UE) 4*1024kB (UME) 1*2048kB (M) 0*4096kB = 11040kB [ 3400.624474] Node 0 DMA32: 5*4kB (UME) 128*8kB (UE) 49*16kB (UE) 2394*32kB (UME) 1243*64kB (U) 7*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 158884kB [ 3400.657102] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 3400.673753] Node 1 Normal: 394*4kB (UM) 384*8kB (UM) 498*16kB (UM) 341*32kB (UM) 6258*64kB (UM) 420*128kB (UM) 14*256kB (UM) 36*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 499816kB [ 3400.708195] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3400.718299] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3400.730543] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3400.765293] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3400.774875] 97505 total pagecache pages [ 3400.778866] 0 pages in swap cache [ 3400.786062] Swap cache stats: add 0, delete 0, find 0/0 [ 3400.792257] Free swap = 0kB [ 3400.795294] Total swap = 0kB [ 3400.798308] 2097051 pages RAM [ 3400.804968] 0 pages HighMem/MovableOnly [ 3400.808961] 363840 pages reserved [ 3400.813804] 0 pages cma reserved [ 3401.028626] oom_reaper: reaped process 17146 (syz-executor.0), now anon-rss:0kB, file-rss:4kB, shmem-rss:0kB [ 3401.109434] systemd-journal invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=0 [ 3401.129802] systemd-journal cpuset=/ mems_allowed=0-1 [ 3401.139312] CPU: 0 PID: 16767 Comm: systemd-journal Not tainted 4.14.225-syzkaller #0 [ 3401.147291] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3401.156658] Call Trace: [ 3401.159240] dump_stack+0x1b2/0x281 [ 3401.162941] dump_header+0x178/0x82f [ 3401.166638] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 3401.171718] ? ___ratelimit+0x2cd/0x530 [ 3401.175671] oom_kill_process.cold+0x10/0xb18 [ 3401.180255] out_of_memory+0xe3e/0x1190 [ 3401.184211] ? oom_killer_disable+0x1c0/0x1c0 [ 3401.188686] ? mutex_trylock+0x152/0x1a0 [ 3401.192737] __alloc_pages_nodemask+0x23e1/0x2720 [ 3401.197663] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3401.203189] ? cache_grow_begin+0x41/0x630 [ 3401.207403] cache_grow_begin+0x91/0x630 [ 3401.211444] ? cache_grow_begin+0x91/0x630 [ 3401.215844] fallback_alloc+0x207/0x2c0 [ 3401.221122] kmem_cache_alloc+0x1e5/0x3c0 [ 3401.225262] getname_flags+0xc8/0x550 [ 3401.229045] do_sys_open+0x1ce/0x410 [ 3401.232834] ? filp_open+0x60/0x60 [ 3401.236364] ? do_syscall_64+0x4c/0x640 [ 3401.240430] ? do_sys_open+0x410/0x410 [ 3401.244487] do_syscall_64+0x1d5/0x640 [ 3401.248365] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3401.253536] RIP: 0033:0x7f58bf2fc840 [ 3401.257225] RSP: 002b:00007ffe4f05abd8 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 3401.264923] RAX: ffffffffffffffda RBX: 00007ffe4f05aee0 RCX: 00007f58bf2fc840 [ 3401.273037] RDX: 00000000000001a0 RSI: 0000000000080042 RDI: 000055f93d3cd810 [ 3401.280308] RBP: 000000000000000d R08: 000000000000c0c1 R09: 00000000ffffffff [ 3401.287562] R10: 0000000000000069 R11: 0000000000000246 R12: 00000000ffffffff [ 3401.294813] R13: 000055f93d3c8040 R14: 00007ffe4f05aea0 R15: 000055f93d3cd120 [ 3401.323663] syz-executor.5: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 3401.345749] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 3401.353228] CPU: 1 PID: 17159 Comm: syz-executor.5 Not tainted 4.14.225-syzkaller #0 [ 3401.360870] Mem-Info: [ 3401.361616] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3401.361621] Call Trace: [ 3401.361637] dump_stack+0x1b2/0x281 [ 3401.361652] warn_alloc.cold+0x96/0x1cc [ 3401.364060] active_anon:16354 inactive_anon:90037 isolated_anon:0 [ 3401.364060] active_file:109 inactive_file:61 isolated_file:0 [ 3401.364060] unevictable:0 dirty:117 writeback:0 unstable:0 [ 3401.364060] slab_reclaimable:12298 slab_unreclaimable:118527 [ 3401.364060] mapped:35446 shmem:90891 pagetables:727 bounce:0 [ 3401.364060] free:13906 free_pcp:183 free_cma:0 [ 3401.373400] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 3401.373411] ? zone_watermark_ok_safe+0x220/0x220 [ 3401.373432] __alloc_pages_nodemask+0x2127/0x2720 [ 3401.375997] Node 0 active_anon:64212kB inactive_anon:308464kB active_file:156kB inactive_file:72kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:139564kB dirty:64kB writeback:0kB shmem:311552kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 3401.379601] ? lock_acquire+0x170/0x3f0 [ 3401.383570] Node 1 active_anon:1204kB inactive_anon:51684kB active_file:280kB inactive_file:172kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:2220kB dirty:404kB writeback:0kB shmem:52012kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3401.419896] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3401.419913] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 3401.419924] ? __mutex_unlock_slowpath+0x75/0x770 [ 3401.424927] Node 0 [ 3401.429799] ? retint_kernel+0x2d/0x2d [ 3401.434678] DMA free:10956kB min:204kB low:252kB high:300kB active_anon:68kB inactive_anon:980kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3401.463063] alloc_pages_current+0x155/0x260 [ 3401.463079] ion_page_pool_alloc+0x118/0x1b0 [ 3401.463091] ion_system_heap_allocate+0x133/0x8c0 [ 3401.467038] lowmem_reserve[]: [ 3401.494435] ? ion_alloc+0x187/0x810 [ 3401.494444] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 3401.494454] ? ion_system_contig_heap_create+0x130/0x130 [ 3401.494466] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 3401.499628] 0 [ 3401.505059] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 3401.505070] ion_alloc+0x204/0x810 [ 3401.505084] ? ion_dma_buf_release+0x40/0x40 [ 3401.509893] 2717 [ 3401.512112] ? __might_fault+0x177/0x1b0 [ 3401.512123] ion_ioctl+0xea/0x1f0 [ 3401.512133] ? ion_query_heaps+0x360/0x360 [ 3401.515993] 2718 [ 3401.541736] ? __fget+0x1fe/0x360 [ 3401.541747] ? ion_query_heaps+0x360/0x360 [ 3401.541756] do_vfs_ioctl+0x75a/0xff0 [ 3401.541768] ? ioctl_preallocate+0x1a0/0x1a0 [ 3401.546146] 2718 [ 3401.550534] ? lock_downgrade+0x740/0x740 [ 3401.555379] 2718 [ 3401.558452] ? __fget+0x225/0x360 [ 3401.567682] ? do_vfs_ioctl+0xff0/0xff0 [ 3401.573131] Node 0 [ 3401.578112] ? security_file_ioctl+0x83/0xb0 [ 3401.579896] DMA32 free:17836kB min:36200kB low:45248kB high:54296kB active_anon:64144kB inactive_anon:307484kB active_file:252kB inactive_file:176kB unevictable:0kB writepending:64kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7328kB pagetables:2892kB bounce:0kB free_pcp:732kB local_pcp:0kB free_cma:0kB [ 3401.584707] SyS_ioctl+0x7f/0xb0 [ 3401.584715] ? do_vfs_ioctl+0xff0/0xff0 [ 3401.584724] do_syscall_64+0x1d5/0x640 [ 3401.584741] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3401.588243] lowmem_reserve[]: 0 [ 3401.592649] RIP: 0033:0x465f69 [ 3401.592654] RSP: 002b:00007f4ecbcc0188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3401.592662] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 3401.592668] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 3401.592672] RBP: 00000000004bfa8f R08: 0000000000000000 R09: 0000000000000000 [ 3401.592677] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 3401.592683] R13: 00007ffead9296af R14: 00007f4ecbcc0300 R15: 0000000000022000 [ 3401.658933] warn_alloc_show_mem: 1 callbacks suppressed [ 3401.658936] Mem-Info: [ 3401.683004] syz-executor.0: [ 3401.685345] syz-executor.2: [ 3401.688400] page allocation failure: order:0 [ 3401.695137] page allocation failure: order:0 [ 3401.720302] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 3401.733372] active_anon:16357 inactive_anon:90037 isolated_anon:0 [ 3401.733372] active_file:50 inactive_file:88 isolated_file:10 [ 3401.733372] unevictable:0 dirty:104 writeback:0 unstable:0 [ 3401.733372] slab_reclaimable:12298 slab_unreclaimable:118539 [ 3401.733372] mapped:35424 shmem:90891 pagetables:736 bounce:0 [ 3401.733372] free:14027 free_pcp:30 free_cma:0 [ 3401.739829] (null) [ 3401.748507] Node 0 active_anon:64264kB inactive_anon:308464kB active_file:36kB inactive_file:40kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:139468kB dirty:0kB writeback:0kB shmem:311552kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3401.750305] syz-executor.0 cpuset= [ 3401.755015] Node 1 active_anon:1164kB inactive_anon:51684kB active_file:164kB inactive_file:220kB unevictable:0kB isolated(anon):0kB isolated(file):40kB mapped:2228kB dirty:416kB writeback:0kB shmem:52012kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3401.757999] / [ 3401.759090] Node 0 [ 3401.763499] mems_allowed=0-1 [ 3401.763510] CPU: 0 PID: 17146 Comm: syz-executor.0 Not tainted 4.14.225-syzkaller #0 [ 3401.767925] DMA free:10956kB min:204kB low:252kB high:300kB active_anon:68kB inactive_anon:980kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3401.774991] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3401.774995] Call Trace: [ 3401.775013] dump_stack+0x1b2/0x281 [ 3401.775025] warn_alloc.cold+0x96/0x1cc [ 3401.775036] ? zone_watermark_ok_safe+0x220/0x220 [ 3401.775045] ? usleep_range+0x130/0x130 [ 3401.775054] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 3401.775065] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 3401.775073] ? run_timer_softirq+0x5a0/0x5a0 [ 3401.775101] __alloc_pages_nodemask+0x2127/0x2720 [ 3401.811898] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 3401.839340] ? lock_acquire+0x170/0x3f0 [ 3401.839362] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3401.839373] ? ion_page_pool_alloc+0x9e/0x1b0 [ 3401.839387] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 3401.839403] alloc_pages_current+0x155/0x260 [ 3401.839415] ion_page_pool_alloc+0x118/0x1b0 [ 3401.839424] ion_system_heap_allocate+0x133/0x8c0 [ 3401.839433] ? ion_alloc+0x187/0x810 [ 3401.839442] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 3401.839451] ? ion_system_contig_heap_create+0x130/0x130 [ 3401.839460] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 3401.839472] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 3401.845267] (null) [ 3401.871213] ion_alloc+0x204/0x810 [ 3401.871227] ? ion_dma_buf_release+0x40/0x40 [ 3401.871238] ? __might_fault+0x177/0x1b0 [ 3401.871250] ion_ioctl+0xea/0x1f0 [ 3401.871258] ? ion_query_heaps+0x360/0x360 [ 3401.871267] ? __fget+0x1fe/0x360 [ 3401.871277] ? ion_query_heaps+0x360/0x360 [ 3401.871286] do_vfs_ioctl+0x75a/0xff0 [ 3401.871298] ? ioctl_preallocate+0x1a0/0x1a0 [ 3401.871306] ? lock_downgrade+0x740/0x740 [ 3401.871320] ? __fget+0x225/0x360 [ 3401.875240] lowmem_reserve[]: [ 3401.878335] ? do_vfs_ioctl+0xff0/0xff0 [ 3401.886231] 0 [ 3401.911936] ? security_file_ioctl+0x83/0xb0 [ 3401.911947] SyS_ioctl+0x7f/0xb0 [ 3401.911955] ? do_vfs_ioctl+0xff0/0xff0 [ 3401.911966] do_syscall_64+0x1d5/0x640 [ 3401.911981] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3401.911990] RIP: 0033:0x465f69 [ 3401.911994] RSP: 002b:00007efdc016d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3401.912003] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 3401.912008] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 3401.912012] RBP: 00000000004bfa8f R08: 0000000000000000 R09: 0000000000000000 [ 3401.912020] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 3401.924768] syz-executor.2 cpuset= [ 3401.924999] R13: 00007ffdff6f9c9f R14: 00007efdc016d300 R15: 0000000000022000 [ 3401.928599] / [ 3401.950949] 0 [ 3401.955090] mems_allowed=0-1 [ 3401.956309] 0 [ 3401.961172] CPU: 1 PID: 17130 Comm: syz-executor.2 Not tainted 4.14.225-syzkaller #0 [ 3401.961178] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3401.961181] Call Trace: [ 3401.961201] dump_stack+0x1b2/0x281 [ 3401.961214] warn_alloc.cold+0x96/0x1cc [ 3401.961226] ? zone_watermark_ok_safe+0x220/0x220 [ 3401.971330] 0 [ 3401.972256] ? usleep_range+0x130/0x130 [ 3401.978026] 0 [ 3401.982504] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 3401.982516] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 3401.982525] ? run_timer_softirq+0x5a0/0x5a0 [ 3401.982543] __alloc_pages_nodemask+0x2127/0x2720 [ 3401.993510] ? lock_acquire+0x170/0x3f0 [ 3401.993525] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3401.993537] ? ion_page_pool_alloc+0x9e/0x1b0 [ 3401.993552] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 3401.998132] Node 0 [ 3402.002963] alloc_pages_current+0x155/0x260 [ 3402.002977] ion_page_pool_alloc+0x118/0x1b0 [ 3402.002991] ion_system_heap_allocate+0x133/0x8c0 [ 3402.006691] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3402.012124] ? _raw_spin_unlock+0x29/0x40 [ 3402.012134] ? _ion_heap_freelist_drain+0x6e/0x410 [ 3402.012143] ? ion_system_contig_heap_create+0x130/0x130 [ 3402.012156] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 3402.017577] lowmem_reserve[]: [ 3402.022573] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 3402.022585] ion_alloc+0x27a/0x810 [ 3402.022599] ? ion_dma_buf_release+0x40/0x40 [ 3402.027505] 0 [ 3402.029723] ? __might_fault+0x177/0x1b0 [ 3402.033248] 0 [ 3402.037625] ion_ioctl+0xea/0x1f0 [ 3402.041669] 0 [ 3402.045087] ? ion_query_heaps+0x360/0x360 [ 3402.049292] 0 [ 3402.052921] ? __fget+0x1fe/0x360 [ 3402.052931] ? ion_query_heaps+0x360/0x360 [ 3402.052943] do_vfs_ioctl+0x75a/0xff0 [ 3402.057151] 0 [ 3402.060945] ? ioctl_preallocate+0x1a0/0x1a0 [ 3402.060953] ? lock_downgrade+0x740/0x740 [ 3402.060966] ? __fget+0x225/0x360 [ 3402.069507] ? do_vfs_ioctl+0xff0/0xff0 [ 3402.072988] Node 1 [ 3402.076054] ? security_file_ioctl+0x83/0xb0 [ 3402.080010] Normal free:26772kB min:53696kB low:67120kB high:80544kB active_anon:1164kB inactive_anon:51684kB active_file:84kB inactive_file:208kB unevictable:0kB writepending:416kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:288kB pagetables:24kB bounce:0kB free_pcp:120kB local_pcp:120kB free_cma:0kB [ 3402.081782] SyS_ioctl+0x7f/0xb0 [ 3402.081792] ? do_vfs_ioctl+0xff0/0xff0 [ 3402.081803] do_syscall_64+0x1d5/0x640 [ 3402.086192] lowmem_reserve[]: [ 3402.089558] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3402.100936] 0 [ 3402.102643] RIP: 0033:0x465f69 [ 3402.106003] 0 [ 3402.113960] RSP: 002b:00007fb559d50188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3402.113970] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 3402.113974] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 3402.113979] RBP: 00000000004bfa8f R08: 0000000000000000 R09: 0000000000000000 [ 3402.113983] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 3402.113987] R13: 00007ffd8e3fce9f R14: 00007fb559d50300 R15: 0000000000022000 [ 3402.130971] 2717 [ 3402.333151] 0 [ 3402.345567] 2718 [ 3402.362117] 0 [ 3402.450879] 2718 2718 [ 3402.593381] Node 0 DMA32 free:121784kB min:36200kB low:45248kB high:54296kB active_anon:64196kB inactive_anon:307484kB active_file:36kB inactive_file:40kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7328kB pagetables:2920kB bounce:0kB free_pcp:1352kB local_pcp:644kB free_cma:0kB [ 3402.680860] lowmem_reserve[]: 0 0 0 0 0 [ 3402.717506] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3402.780910] lowmem_reserve[]: 0 0 0 0 0 [ 3402.810842] Node 1 Normal free:1468384kB min:53696kB low:67120kB high:80544kB active_anon:1164kB inactive_anon:51684kB active_file:52kB inactive_file:1040kB unevictable:0kB writepending:20kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:288kB pagetables:24kB bounce:0kB free_pcp:1380kB local_pcp:640kB free_cma:0kB [ 3402.813031] 0 [ 3402.840432] lowmem_reserve[]: 0 0 0 0 0 [ 3402.846279] Node 0 [ 3402.846282] Node 0 DMA: [ 3402.848498] DMA: [ 3402.848506] 18*4kB [ 3402.851236] 18*4kB (UME) [ 3402.872664] (UME) 11*8kB (UME) 10*16kB (ME) 17*32kB (UME) 8*64kB (U) 13*128kB (UME) 4*256kB (UME) 2*512kB (UE) 4*1024kB (UME) 1*2048kB (M) 0*4096kB = 11232kB [ 3402.880809] 11*8kB (UME) 10*16kB (ME) 17*32kB (UME) 8*64kB (U) 13*128kB (UME) 4*256kB (UME) 2*512kB (UE) 4*1024kB (UME) 1*2048kB (M) 0*4096kB = 11232kB [ 3402.890485] Node 0 DMA32: 6831*4kB (UME) 3566*8kB (UME) 4650*16kB (UME) 982*32kB (UME) 984*64kB (UM) 137*128kB (UM) 2*256kB (M) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 242700kB [ 3402.940793] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 3402.990767] Node 0 DMA32: 8102*4kB (UME) 3583*8kB (UME) 7631*16kB (UME) 1007*32kB (UME) 1003*64kB (UM) 137*128kB (UM) 2*256kB (M) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 297632kB [ 3402.993678] Node 1 Normal: 2846*4kB (UM) 488*8kB (UM) 543*16kB (UM) 441*32kB (UM) 13560*64kB (UM) 2368*128kB (UM) 778*256kB (UM) [ 3403.050743] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 3403.062706] Node 1 Normal: 4514*4kB (UM) 529*8kB (UM) 578*16kB (UM) 477*32kB (UM) 13762*64kB (UM) 2407*128kB (UM) 793*256kB (UM) 199*512kB (UM) 1*1024kB (U) 0*2048kB 0*4096kB = 1541584kB [ 3403.062780] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3403.100769] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3403.102946] 197*512kB [ 3403.109352] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3403.109358] (UM) [ 3403.111891] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3403.123483] 1*1024kB (U) 0*2048kB 0*4096kB = 1510088kB [ 3403.136681] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3403.151059] 91301 total pagecache pages [ 3403.156728] 0 pages in swap cache [ 3403.160399] Swap cache stats: add 0, delete 0, find 0/0 [ 3403.175862] Free swap = 0kB [ 3403.186436] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3403.197658] Total swap = 0kB [ 3403.202870] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3403.202951] 2097051 pages RAM [ 3403.214899] 0 pages HighMem/MovableOnly [ 3403.218988] 363840 pages reserved [ 3403.222494] 0 pages cma reserved [ 3403.295830] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3403.324122] 92435 total pagecache pages [ 3403.353063] 0 pages in swap cache [ 3403.356634] Swap cache stats: add 0, delete 0, find 0/0 [ 3403.378488] Free swap = 0kB [ 3403.389966] Total swap = 0kB [ 3403.420726] 2097051 pages RAM [ 3403.423860] 0 pages HighMem/MovableOnly [ 3403.427851] 363840 pages reserved [ 3403.473225] 0 pages cma reserved [ 3403.476632] Out of memory (oom_kill_allocating_task): Kill process 16767 (systemd-journal) score 0 or sacrifice child [ 3403.520646] Killed process 16767 (systemd-journal) total-vm:46096kB, anon-rss:476kB, file-rss:0kB, shmem-rss:2328kB 05:22:15 executing program 2: socketpair(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$bt_sco(r0, &(0x7f0000000000), 0x8) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video1\x00', 0x2, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(r1, 0xc0205649, &(0x7f0000000140)={0xfffffff, 0x4, 0x1, 0xffffffffffffffff, 0x0, &(0x7f0000000100)={0x9a0a2f, 0x0, [], @p_u32=&(0x7f00000000c0)}}) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nullb0\x00', 0x800, 0x0) ioctl$HDIO_GETGEO(r2, 0x301, &(0x7f0000000a00)) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240)='/dev/sequencer\x00', 0x40000, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r3, 0x40085112, &(0x7f0000000280)=@e={0xff, 0x9, 0x6, 0x7f, @SEQ_NOTEON=@note=0x2c, 0x1f, 0x5, 0x8}) socketpair(0x18, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x4048044) 05:22:15 executing program 2: socketpair(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$bt_sco(r0, &(0x7f0000000000), 0x8) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video1\x00', 0x2, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(r1, 0xc0205649, &(0x7f0000000140)={0xfffffff, 0x4, 0x1, 0xffffffffffffffff, 0x0, &(0x7f0000000100)={0x9a0a2f, 0x0, [], @p_u32=&(0x7f00000000c0)}}) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nullb0\x00', 0x800, 0x0) ioctl$HDIO_GETGEO(r2, 0x301, &(0x7f0000000a00)) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240)='/dev/sequencer\x00', 0x40000, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r3, 0x40085112, &(0x7f0000000280)=@e={0xff, 0x9, 0x6, 0x7f, @SEQ_NOTEON=@note=0x2c, 0x1f, 0x5, 0x8}) socketpair(0x18, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x4048044) [ 3403.655932] systemd[1]: systemd-journald.service: Failed with result 'signal'. [ 3403.678595] systemd[1]: systemd-journald.service: Service has no hold-off time, scheduling restart. [ 3403.726808] systemd[1]: Stopped Journal Service. [ 3403.759686] systemd[1]: Starting Journal Service... [ 3403.917094] systemd-journald[17174]: File /run/log/journal/64dd78f1a75445a997c532444ad0f085/system.journal corrupted or uncleanly shut down, renaming and replacing. [ 3404.550456] systemd[1]: Started Journal Service. [ 3404.708446] oom_reaper: reaped process 17159 (syz-executor.5), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 3404.741501] kworker/u4:0 invoked oom-killer: gfp_mask=0x15080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null), order=3, oom_score_adj=0 [ 3404.751483] syz-executor.0: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 3404.769056] kworker/u4:0 cpuset=/ mems_allowed=0-1 [ 3404.777105] CPU: 0 PID: 24058 Comm: kworker/u4:0 Not tainted 4.14.225-syzkaller #0 [ 3404.779173] syz-executor.0 cpuset= [ 3404.784814] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3404.784831] Workqueue: events_unbound call_usermodehelper_exec_work [ 3404.784836] Call Trace: [ 3404.784851] dump_stack+0x1b2/0x281 [ 3404.784862] dump_header+0x178/0x82f [ 3404.784871] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 3404.784879] ? ___ratelimit+0x2cd/0x530 [ 3404.784888] oom_kill_process.cold+0x10/0xb18 [ 3404.784898] ? lock_downgrade+0x740/0x740 [ 3404.784911] out_of_memory+0x2dc/0x1190 [ 3404.784924] ? oom_killer_disable+0x1c0/0x1c0 [ 3404.784930] ? mutex_trylock+0x152/0x1a0 [ 3404.784941] __alloc_pages_nodemask+0x23e1/0x2720 [ 3404.784961] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3404.784969] ? fs_reclaim_release+0xd0/0x110 [ 3404.784987] ? kmem_cache_alloc_node+0x38b/0x410 [ 3404.784997] copy_process.part.0+0x265/0x71c0 [ 3404.785008] ? __lock_acquire+0x5fc/0x3f20 [ 3404.785018] ? debug_object_activate+0x292/0x490 [ 3404.785027] ? static_obj+0x50/0x50 [ 3404.785033] ? lock_acquire+0x170/0x3f0 [ 3404.785045] ? call_usermodehelper_exec_work+0x2a0/0x2a0 [ 3404.785053] ? __cleanup_sighand+0x40/0x40 [ 3404.785061] ? mod_timer+0x4e7/0xf70 [ 3404.785070] ? call_usermodehelper_exec_work+0x2a0/0x2a0 [ 3404.785079] _do_fork+0x184/0xc80 [ 3404.785090] ? fork_idle+0x270/0x270 [ 3404.785097] ? lock_downgrade+0x740/0x740 [ 3404.785111] ? process_one_work+0x6c4/0x14a0 [ 3404.785119] ? call_usermodehelper_exec_work+0x2a0/0x2a0 [ 3404.785127] kernel_thread+0x2f/0x40 [ 3404.785135] call_usermodehelper_exec_work+0x1ac/0x2a0 [ 3404.785143] ? call_usermodehelper+0x80/0x80 [ 3404.785152] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 3404.785161] process_one_work+0x793/0x14a0 [ 3404.785174] ? work_busy+0x320/0x320 [ 3404.785181] ? worker_thread+0x158/0xff0 [ 3404.785189] ? _raw_spin_unlock_irq+0x24/0x80 [ 3404.785199] worker_thread+0x5cc/0xff0 [ 3404.785214] ? rescuer_thread+0xc80/0xc80 [ 3404.785223] kthread+0x30d/0x420 [ 3404.785230] ? kthread_create_on_node+0xd0/0xd0 [ 3404.785238] ret_from_fork+0x24/0x30 [ 3404.785315] Mem-Info: [ 3404.785333] active_anon:16359 inactive_anon:90036 isolated_anon:0 [ 3404.785333] active_file:34 inactive_file:47 isolated_file:24 [ 3404.785333] unevictable:0 dirty:0 writeback:25 unstable:0 [ 3404.785333] slab_reclaimable:12281 slab_unreclaimable:118795 [ 3404.785333] mapped:52572 shmem:90890 pagetables:771 bounce:0 [ 3404.785333] free:13837 free_pcp:166 free_cma:0 [ 3404.785347] Node 0 active_anon:64328kB inactive_anon:308460kB active_file:128kB inactive_file:112kB unevictable:0kB isolated(anon):0kB isolated(file):20kB mapped:210284kB dirty:0kB writeback:96kB shmem:311548kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 3404.785360] Node 1 active_anon:1108kB inactive_anon:51684kB active_file:8kB inactive_file:76kB unevictable:0kB isolated(anon):0kB isolated(file):76kB mapped:4kB dirty:0kB writeback:4kB shmem:52012kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3404.785364] Node 0 DMA free:10976kB min:204kB low:252kB high:300kB active_anon:68kB inactive_anon:980kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3404.785380] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 3404.785399] Node 0 DMA32 free:18072kB min:36200kB low:45248kB high:54296kB active_anon:64260kB inactive_anon:307480kB active_file:572kB inactive_file:588kB unevictable:0kB writepending:96kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7328kB pagetables:3068kB bounce:0kB free_pcp:664kB local_pcp:32kB free_cma:0kB [ 3404.785417] lowmem_reserve[]: 0 0 0 0 0 [ 3404.785436] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3404.785451] lowmem_reserve[]: 0 0 0 0 0 [ 3404.785503] Node 1 Normal free:26300kB min:53696kB low:67120kB high:80544kB active_anon:1108kB inactive_anon:51684kB active_file:108kB inactive_file:76kB unevictable:0kB writepending:4kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:288kB pagetables:16kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3404.785521] lowmem_reserve[]: 0 0 0 0 0 [ 3404.785540] Node 0 DMA: 6*4kB (ME) [ 3404.789093] / [ 3404.798492] 5*8kB [ 3404.804931] mems_allowed=0-1 [ 3404.807519] (ME) [ 3404.811141] CPU: 1 PID: 17146 Comm: syz-executor.0 Not tainted 4.14.225-syzkaller #0 [ 3404.811147] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3404.811151] Call Trace: [ 3404.811170] dump_stack+0x1b2/0x281 [ 3404.811184] warn_alloc.cold+0x96/0x1cc [ 3404.811194] ? zone_watermark_ok_safe+0x220/0x220 [ 3404.811217] __alloc_pages_nodemask+0x2127/0x2720 [ 3404.811230] ? check_preemption_disabled+0x35/0x240 [ 3404.811244] ? lock_acquire+0x170/0x3f0 [ 3404.811258] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3404.811274] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 3404.811286] ? __mutex_unlock_slowpath+0x75/0x770 [ 3404.811295] ? retint_kernel+0x2d/0x2d [ 3404.811307] alloc_pages_current+0x155/0x260 [ 3404.819200] 10*16kB [ 3404.820099] ion_page_pool_alloc+0x118/0x1b0 [ 3404.824075] (ME) [ 3404.828527] ion_system_heap_allocate+0x133/0x8c0 [ 3404.835694] 16*32kB [ 3404.836673] ? _raw_spin_unlock+0x29/0x40 [ 3404.841163] (UME) [ 3404.845190] ? _ion_heap_freelist_drain+0x6e/0x410 [ 3404.850002] 6*64kB (U) [ 3404.854833] ? ion_system_contig_heap_create+0x130/0x130 [ 3404.854844] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 3404.854855] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 3404.854866] ion_alloc+0x27a/0x810 [ 3404.859249] 13*128kB [ 3404.863988] ? ion_dma_buf_release+0x40/0x40 [ 3404.864000] ? __might_fault+0x177/0x1b0 [ 3404.864012] ion_ioctl+0xea/0x1f0 [ 3404.868602] (UME) [ 3404.872837] ? ion_query_heaps+0x360/0x360 [ 3404.872847] ? __fget+0x1fe/0x360 [ 3404.872857] ? ion_query_heaps+0x360/0x360 [ 3404.877587] 4*256kB [ 3404.881212] do_vfs_ioctl+0x75a/0xff0 [ 3404.881224] ? ioctl_preallocate+0x1a0/0x1a0 [ 3404.881235] ? lock_downgrade+0x740/0x740 [ 3404.885271] (UME) [ 3404.890723] ? __fget+0x225/0x360 [ 3404.890732] ? do_vfs_ioctl+0xff0/0xff0 [ 3404.890742] ? security_file_ioctl+0x83/0xb0 [ 3404.894950] 2*512kB [ 3404.898651] SyS_ioctl+0x7f/0xb0 [ 3404.904097] (UE) [ 3404.907598] ? do_vfs_ioctl+0xff0/0xff0 [ 3404.911301] 4*1024kB [ 3404.915418] do_syscall_64+0x1d5/0x640 [ 3404.919813] (UME) [ 3404.925255] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3404.925264] RIP: 0033:0x465f69 [ 3404.925270] RSP: 002b:00007efdc016d188 EFLAGS: 00000246 [ 3404.928962] 1*2048kB [ 3404.934260] ORIG_RAX: 0000000000000010 [ 3404.934267] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 3404.934271] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 3404.934276] RBP: 00000000004bfa8f R08: 0000000000000000 R09: 0000000000000000 [ 3404.934280] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 3404.934284] R13: 00007ffdff6f9c9f R14: 00007efdc016d300 R15: 0000000000022000 [ 3404.937282] warn_alloc_show_mem: 2 callbacks suppressed [ 3404.937285] Mem-Info: [ 3404.939289] (M) [ 3404.944759] active_anon:16359 inactive_anon:90036 isolated_anon:0 [ 3404.944759] active_file:34 inactive_file:47 isolated_file:24 [ 3404.944759] unevictable:0 dirty:0 writeback:25 unstable:0 [ 3404.944759] slab_reclaimable:12281 slab_unreclaimable:118795 [ 3404.944759] mapped:52572 shmem:90890 pagetables:771 bounce:0 [ 3404.944759] free:13963 free_pcp:0 free_cma:0 [ 3404.944775] Node 0 active_anon:64328kB inactive_anon:308460kB active_file:128kB inactive_file:112kB unevictable:0kB isolated(anon):0kB isolated(file):20kB mapped:210284kB dirty:0kB writeback:96kB shmem:311548kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 3404.944789] Node 1 active_anon:1108kB inactive_anon:51684kB active_file:8kB inactive_file:76kB unevictable:0kB isolated(anon):0kB isolated(file):76kB mapped:4kB dirty:0kB writeback:4kB shmem:52012kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3404.944793] Node 0 DMA free:10976kB min:204kB low:252kB high:300kB active_anon:68kB inactive_anon:980kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3404.944816] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 3404.944836] Node 0 DMA32 free:18576kB min:36200kB low:45248kB high:54296kB active_anon:64260kB inactive_anon:307480kB active_file:572kB inactive_file:588kB unevictable:0kB writepending:96kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7328kB pagetables:3068kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3404.944855] lowmem_reserve[]: 0 0 0 0 0 [ 3404.944872] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3404.944888] lowmem_reserve[]: 0 0 0 0 0 [ 3404.944906] Node 1 Normal free:26300kB min:53696kB low:67120kB high:80544kB active_anon:1108kB inactive_anon:51684kB active_file:108kB inactive_file:76kB unevictable:0kB writepending:4kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:288kB pagetables:16kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3404.944925] lowmem_reserve[]: 0 0 0 0 0 [ 3404.944944] Node 0 DMA: 6*4kB (ME) 5*8kB (ME) 10*16kB (ME) 16*32kB (UME) 6*64kB (U) 13*128kB (UME) 4*256kB (UME) 2*512kB (UE) 4*1024kB (UME) 1*2048kB (M) 0*4096kB = 10976kB [ 3404.945015] Node 0 DMA32: 1399*4kB (UME) 399*8kB (UM) 69*16kB (UM) 248*32kB (UM) 16*64kB (UM) 2*128kB (UM) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 19108kB [ 3404.945078] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB [ 3404.969563] 0*4096kB [ 3404.970459] 0*128kB [ 3404.977036] = 10976kB [ 3404.978481] 0*256kB [ 3404.982242] Node 0 [ 3404.984616] 0*512kB [ 3405.028579] DMA32: [ 3405.047705] 0*1024kB [ 3405.074227] 1332*4kB [ 3405.105014] 0*2048kB [ 3405.127575] (UME) [ 3405.138198] 0*4096kB [ 3405.139589] 355*8kB [ 3405.169965] = 0kB [ 3405.172071] (UM) [ 3405.202933] Node 1 [ 3405.204953] 69*16kB [ 3405.208093] Normal: [ 3405.209788] (UM) [ 3405.211962] 166*4kB (UM) [ 3405.215072] 248*32kB [ 3405.217093] 21*8kB (UM) [ 3405.225649] (UM) [ 3405.240399] 35*16kB [ 3405.250268] 16*64kB [ 3405.258126] (M) [ 3405.259784] (UM) [ 3405.264664] 12*32kB [ 3405.281245] 2*128kB [ 3405.286286] (M) [ 3405.288179] (UM) [ 3405.290543] 13*64kB (UM) 6*128kB (UM) 3*256kB (UM) 44*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 26672kB [ 3405.290589] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3405.295499] 0*256kB [ 3405.297045] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3405.301899] 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18488kB [ 3405.301916] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 3405.306470] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3405.308394] Node 1 [ 3405.310553] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3405.310558] 90935 total pagecache pages [ 3405.310568] 0 pages in swap cache [ 3405.315483] Normal: [ 3405.318046] Swap cache stats: add 0, delete 0, find 0/0 [ 3405.323673] 166*4kB (UM) 21*8kB (UM) 35*16kB (M) 12*32kB (M) 13*64kB (UM) 6*128kB (UM) 3*256kB (UM) 44*512kB (UM) 0*1024kB 0*2048kB 0*4096kB [ 3405.330218] Free swap = 0kB [ 3405.334969] = 26672kB [ 3405.337170] Total swap = 0kB [ 3405.339565] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3405.344024] 2097051 pages RAM [ 3405.349124] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3405.353327] 0 pages HighMem/MovableOnly [ 3405.366939] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3405.368889] 363840 pages reserved [ 3405.374854] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3405.378427] 0 pages cma reserved [ 3405.390203] 90935 total pagecache pages [ 3405.963634] 0 pages in swap cache [ 3405.967088] Swap cache stats: add 0, delete 0, find 0/0 [ 3405.972527] Free swap = 0kB [ 3405.975587] Total swap = 0kB [ 3405.978619] 2097051 pages RAM [ 3405.981767] 0 pages HighMem/MovableOnly [ 3405.985881] 363840 pages reserved [ 3405.989340] 0 pages cma reserved [ 3405.990281] syz-executor.4: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 3405.992767] Out of memory: Kill process 7976 (syz-fuzzer) score 7 or sacrifice child [ 3406.012906] Killed process 16867 (syz-executor.5) total-vm:84924kB, anon-rss:64kB, file-rss:0kB, shmem-rss:0kB [ 3406.016100] syz-executor.4 cpuset= [ 3406.023412] syz-executor.0: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 3406.038847] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 3406.044022] CPU: 0 PID: 17146 Comm: syz-executor.0 Not tainted 4.14.225-syzkaller #0 [ 3406.045736] / [ 3406.051897] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3406.063057] Call Trace: [ 3406.065652] dump_stack+0x1b2/0x281 [ 3406.069285] warn_alloc.cold+0x96/0x1cc [ 3406.073267] ? zone_watermark_ok_safe+0x220/0x220 [ 3406.077507] mems_allowed=0-1 [ 3406.078108] ? usleep_range+0x130/0x130 [ 3406.085196] ? _find_next_bit+0xdb/0x100 [ 3406.089258] ? run_timer_softirq+0x5a0/0x5a0 [ 3406.093680] __alloc_pages_nodemask+0x2127/0x2720 [ 3406.098650] ? lock_acquire+0x170/0x3f0 [ 3406.102633] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3406.107490] ? ion_page_pool_alloc+0x9e/0x1b0 [ 3406.110160] syz-executor.5: page allocation failure: order:0 [ 3406.112221] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 3406.112234] ? retint_kernel+0x2d/0x2d [ 3406.118253] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 3406.123778] alloc_pages_current+0x155/0x260 [ 3406.123793] ion_page_pool_alloc+0x118/0x1b0 [ 3406.123802] ion_system_heap_allocate+0x133/0x8c0 [ 3406.123811] ? _raw_spin_unlock+0x29/0x40 [ 3406.123819] ? _ion_heap_freelist_drain+0x6e/0x410 [ 3406.123828] ? ion_system_contig_heap_create+0x130/0x130 [ 3406.123837] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 3406.123845] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 3406.123855] ion_alloc+0x27a/0x810 [ 3406.123868] ? ion_dma_buf_release+0x40/0x40 [ 3406.123879] ? __might_fault+0x177/0x1b0 [ 3406.123890] ion_ioctl+0xea/0x1f0 [ 3406.123899] ? ion_query_heaps+0x360/0x360 [ 3406.123908] ? __fget+0x1fe/0x360 [ 3406.123917] ? ion_query_heaps+0x360/0x360 [ 3406.123925] do_vfs_ioctl+0x75a/0xff0 [ 3406.123938] ? ioctl_preallocate+0x1a0/0x1a0 [ 3406.123946] ? lock_downgrade+0x740/0x740 [ 3406.123957] ? __fget+0x225/0x360 [ 3406.179080] (null) [ 3406.181210] ? do_vfs_ioctl+0xff0/0xff0 [ 3406.181219] ? security_file_ioctl+0x83/0xb0 [ 3406.181228] SyS_ioctl+0x7f/0xb0 [ 3406.181236] ? do_vfs_ioctl+0xff0/0xff0 [ 3406.181248] do_syscall_64+0x1d5/0x640 [ 3406.181263] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3406.181272] RIP: 0033:0x465f69 [ 3406.181277] RSP: 002b:00007efdc016d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3406.181287] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 3406.181291] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 3406.181297] RBP: 00000000004bfa8f R08: 0000000000000000 R09: 0000000000000000 [ 3406.181301] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 3406.181306] R13: 00007ffdff6f9c9f R14: 00007efdc016d300 R15: 0000000000022000 [ 3406.185452] Mem-Info: [ 3406.205591] CPU: 1 PID: 17115 Comm: syz-executor.4 Not tainted 4.14.225-syzkaller #0 [ 3406.218786] oom_reaper: reaped process 16867 (syz-executor.5), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 3406.220664] systemd-journal invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask= [ 3406.222780] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3406.227191] (null) [ 3406.230535] Call Trace: [ 3406.230556] dump_stack+0x1b2/0x281 [ 3406.230568] warn_alloc.cold+0x96/0x1cc [ 3406.230580] ? zone_watermark_ok_safe+0x220/0x220 [ 3406.236359] active_anon:16334 inactive_anon:90036 isolated_anon:0 [ 3406.236359] active_file:16 inactive_file:16 isolated_file:0 [ 3406.236359] unevictable:0 dirty:0 writeback:0 unstable:0 [ 3406.236359] slab_reclaimable:12281 slab_unreclaimable:118423 [ 3406.236359] mapped:52566 shmem:90890 pagetables:771 bounce:0 [ 3406.236359] free:13825 free_pcp:12 free_cma:0 [ 3406.238568] ? usleep_range+0x130/0x130 [ 3406.384865] ? queue_work_on+0x10d/0x1d0 [ 3406.388928] ? _find_next_bit+0xdb/0x100 [ 3406.393193] ? run_timer_softirq+0x5a0/0x5a0 [ 3406.397711] __alloc_pages_nodemask+0x2127/0x2720 [ 3406.402595] ? lock_acquire+0x170/0x3f0 [ 3406.406667] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3406.411496] ? ion_page_pool_alloc+0x9e/0x1b0 [ 3406.415979] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 3406.421413] ? __sanitizer_cov_trace_pc+0x3a/0x50 [ 3406.426243] alloc_pages_current+0x155/0x260 [ 3406.430640] ion_page_pool_alloc+0x118/0x1b0 [ 3406.435035] ion_system_heap_allocate+0x133/0x8c0 [ 3406.439864] ? _raw_spin_unlock+0x29/0x40 [ 3406.445301] ? _ion_heap_freelist_drain+0x6e/0x410 [ 3406.450251] ? ion_system_contig_heap_create+0x130/0x130 [ 3406.458910] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 3406.463924] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 3406.470226] ion_alloc+0x27a/0x810 [ 3406.473957] ? ion_dma_buf_release+0x40/0x40 [ 3406.479561] ? __might_fault+0x177/0x1b0 [ 3406.483986] ion_ioctl+0xea/0x1f0 [ 3406.487422] ? ion_query_heaps+0x360/0x360 [ 3406.491880] ? __fget+0x1fe/0x360 [ 3406.495652] ? ion_query_heaps+0x360/0x360 [ 3406.499969] do_vfs_ioctl+0x75a/0xff0 [ 3406.503757] ? ioctl_preallocate+0x1a0/0x1a0 [ 3406.508165] ? lock_downgrade+0x740/0x740 [ 3406.512297] ? __fget+0x225/0x360 [ 3406.515732] ? do_vfs_ioctl+0xff0/0xff0 [ 3406.519686] ? security_file_ioctl+0x83/0xb0 [ 3406.524074] SyS_ioctl+0x7f/0xb0 [ 3406.527444] ? do_vfs_ioctl+0xff0/0xff0 [ 3406.531398] do_syscall_64+0x1d5/0x640 [ 3406.535269] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3406.540437] RIP: 0033:0x465f69 [ 3406.544039] RSP: 002b:00007fbb52cf0188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3406.551753] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 3406.559012] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 3406.566263] RBP: 00000000004bfa8f R08: 0000000000000000 R09: 0000000000000000 [ 3406.573510] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 3406.580763] R13: 00007ffc0aef8def R14: 00007fbb52cf0300 R15: 0000000000022000 [ 3406.588922] Node 0 active_anon:64228kB inactive_anon:308460kB active_file:60kB inactive_file:60kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:210260kB dirty:0kB writeback:0kB shmem:311548kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3406.605227] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 3406.635703] CPU: 1 PID: 17159 Comm: syz-executor.5 Not tainted 4.14.225-syzkaller #0 [ 3406.637101] Node 1 active_anon:1108kB inactive_anon:51684kB active_file:0kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:52012kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3406.644050] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3406.644054] Call Trace: [ 3406.644074] dump_stack+0x1b2/0x281 [ 3406.644086] warn_alloc.cold+0x96/0x1cc [ 3406.644100] ? zone_watermark_ok_safe+0x220/0x220 [ 3406.671107] , order=1, oom_score_adj=0 [ 3406.680665] ? usleep_range+0x130/0x130 [ 3406.680678] ? _find_next_bit+0xdb/0x100 [ 3406.680690] ? run_timer_softirq+0x5a0/0x5a0 [ 3406.683253] systemd-journal cpuset= [ 3406.686865] __alloc_pages_nodemask+0x2127/0x2720 [ 3406.690875] / [ 3406.695981] ? lock_acquire+0x170/0x3f0 [ 3406.695997] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3406.700117] mems_allowed=0-1 [ 3406.704259] ? ion_page_pool_alloc+0x9e/0x1b0 [ 3406.709934] Node 0 [ 3406.712879] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 3406.716976] DMA free:10976kB min:204kB low:252kB high:300kB active_anon:68kB inactive_anon:980kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3406.721816] ? retint_kernel+0x2d/0x2d [ 3406.721838] alloc_pages_current+0x155/0x260 [ 3406.721856] ion_page_pool_alloc+0x118/0x1b0 [ 3406.721866] ion_system_heap_allocate+0x133/0x8c0 [ 3406.721875] ? ion_alloc+0x187/0x810 [ 3406.721884] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 3406.721893] ? ion_system_contig_heap_create+0x130/0x130 [ 3406.721904] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 3406.721912] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 3406.721921] ion_alloc+0x204/0x810 [ 3406.721933] ? ion_dma_buf_release+0x40/0x40 [ 3406.721944] ? __might_fault+0x177/0x1b0 [ 3406.721959] ion_ioctl+0xea/0x1f0 [ 3406.729951] lowmem_reserve[]: [ 3406.733194] ? ion_query_heaps+0x360/0x360 [ 3406.736279] 0 [ 3406.740964] ? __fget+0x1fe/0x360 [ 3406.740980] ? ion_query_heaps+0x360/0x360 [ 3406.740989] do_vfs_ioctl+0x75a/0xff0 [ 3406.741001] ? ioctl_preallocate+0x1a0/0x1a0 [ 3406.741014] ? lock_downgrade+0x740/0x740 [ 3406.759912] 2717 [ 3406.777079] ? __fget+0x225/0x360 [ 3406.777089] ? do_vfs_ioctl+0xff0/0xff0 [ 3406.777099] ? security_file_ioctl+0x83/0xb0 [ 3406.777108] SyS_ioctl+0x7f/0xb0 [ 3406.777120] ? do_vfs_ioctl+0xff0/0xff0 [ 3406.799913] 2718 [ 3406.804898] do_syscall_64+0x1d5/0x640 [ 3406.819899] 2718 [ 3406.820242] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3406.824035] 2718 [ 3406.828431] RIP: 0033:0x465f69 [ 3406.853691] RSP: 002b:00007f4ecbcc0188 EFLAGS: 00000246 [ 3406.857645] Node 0 [ 3406.862027] ORIG_RAX: 0000000000000010 [ 3406.862033] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 3406.862038] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 3406.862043] RBP: 00000000004bfa8f R08: 0000000000000000 R09: 0000000000000000 [ 3406.862048] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 3406.862056] R13: 00007ffead9296af R14: 00007f4ecbcc0300 R15: 0000000000022000 [ 3406.879902] DMA32 free:17772kB min:36200kB low:45248kB high:54296kB active_anon:64160kB inactive_anon:307480kB active_file:60kB inactive_file:60kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7328kB pagetables:3068kB bounce:0kB free_pcp:76kB local_pcp:48kB free_cma:0kB [ 3406.954855] CPU: 1 PID: 17174 Comm: systemd-journal Not tainted 4.14.225-syzkaller #0 [ 3406.960163] lowmem_reserve[]: [ 3406.987686] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3406.987691] Call Trace: [ 3406.987708] dump_stack+0x1b2/0x281 [ 3406.987720] dump_header+0x178/0x82f [ 3406.987734] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 3406.995807] 0 [ 3406.998881] ? ___ratelimit+0x2cd/0x530 [ 3407.008232] 0 [ 3407.010870] oom_kill_process.cold+0x10/0xb18 [ 3407.010889] out_of_memory+0xe3e/0x1190 [ 3407.014763] 0 [ 3407.018491] ? oom_killer_disable+0x1c0/0x1c0 [ 3407.023617] 0 [ 3407.025406] ? mutex_trylock+0x152/0x1a0 [ 3407.029352] 0 [ 3407.031226] __alloc_pages_nodemask+0x23e1/0x2720 [ 3407.031246] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3407.040124] ? mark_held_locks+0xa6/0xf0 [ 3407.040134] ? cache_grow_begin+0x41/0x630 [ 3407.040144] cache_grow_begin+0x91/0x630 [ 3407.041954] Node 0 [ 3407.046487] ? cache_grow_begin+0x91/0x630 [ 3407.048277] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3407.052310] fallback_alloc+0x207/0x2c0 [ 3407.052322] kmem_cache_alloc+0x1e5/0x3c0 [ 3407.052332] ima_d_path+0x4d/0x1e0 [ 3407.052342] process_measurement+0x905/0xb20 [ 3407.054118] lowmem_reserve[]: [ 3407.058947] ? ima_rdwr_violation_check+0x3a0/0x3a0 [ 3407.063781] 0 [ 3407.067832] ? generic_file_open+0x68/0x90 [ 3407.072057] 0 [ 3407.076089] ? ext4_release_file+0x2d0/0x2d0 [ 3407.078312] 0 [ 3407.082558] ? apparmor_file_alloc_security+0x800/0x800 [ 3407.082568] ? lock_downgrade+0x740/0x740 [ 3407.082579] ? file_ra_state_init+0xc4/0x1e0 [ 3407.082587] ? do_dentry_open+0x698/0xec0 [ 3407.082599] ? ext4_release_file+0x2d0/0x2d0 [ 3407.108231] 0 [ 3407.112659] ? __inode_permission+0xcd/0x2f0 [ 3407.112670] ? vfs_open+0x10d/0x220 [ 3407.112679] path_openat+0x10ad/0x2970 [ 3407.112694] ? path_lookupat+0x780/0x780 [ 3407.112702] ? trace_hardirqs_on+0x10/0x10 [ 3407.112713] ? __might_fault+0x104/0x1b0 [ 3407.117025] 0 [ 3407.120555] do_filp_open+0x179/0x3c0 [ 3407.120563] ? may_open_dev+0xe0/0xe0 [ 3407.120580] ? do_raw_spin_unlock+0x164/0x220 [ 3407.128103] ? __alloc_fd+0x1be/0x490 [ 3407.133140] Node 1 [ 3407.135040] do_sys_open+0x296/0x410 [ 3407.139273] Normal free:38324kB min:53696kB low:67120kB high:80544kB active_anon:1108kB inactive_anon:51684kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:288kB pagetables:16kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3407.141053] ? filp_open+0x60/0x60 [ 3407.141064] ? do_syscall_64+0x4c/0x640 [ 3407.141072] ? do_sys_open+0x410/0x410 [ 3407.145560] lowmem_reserve[]: [ 3407.147351] do_syscall_64+0x1d5/0x640 [ 3407.152709] 0 [ 3407.157696] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3407.162096] 0 [ 3407.166253] RIP: 0033:0x7f7a8677b34a [ 3407.170695] 0 [ 3407.172431] RSP: 002b:00007ffc803996d0 EFLAGS: 00000202 [ 3407.177077] 0 [ 3407.180687] ORIG_RAX: 0000000000000002 [ 3407.180693] RAX: ffffffffffffffda RBX: 0000556e54242490 RCX: 00007f7a8677b34a [ 3407.180697] RDX: 00000000000001b6 RSI: 0000000000080000 RDI: 00007f7a8686b011 [ 3407.180701] RBP: 0000000000000008 R08: 0000000000000008 R09: 0000000000000001 [ 3407.180705] R10: 0000000000080000 R11: 0000000000000202 R12: 00007f7a86869633 [ 3407.180709] R13: 0000000000000001 R14: 00007ffc80399da0 R15: 00007ffc80399941 [ 3407.342538] 0 [ 3407.344433] Node 0 DMA: 6*4kB (ME) 5*8kB (ME) 10*16kB (ME) 16*32kB (UME) 6*64kB (U) 13*128kB (UME) 4*256kB (UME) 2*512kB (UE) 4*1024kB (UME) 1*2048kB (M) 0*4096kB = 10976kB [ 3407.361675] Node 0 DMA32: 373*4kB (UE) 0*8kB 0*16kB 179*32kB (UM) 906*64kB (U) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 65204kB [ 3407.374790] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 3407.386771] Node 1 Normal: 165*4kB (UM) 20*8kB (UM) 34*16kB (M) 11*32kB (M) 2234*64kB (UM) 6*128kB (UM) 3*256kB (UM) 44*512kB (UM) 1*1024kB (U) 0*2048kB 0*4096kB = 169780kB [ 3407.406602] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3407.416919] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3407.426146] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3407.435869] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3407.448726] 93055 total pagecache pages [ 3407.453269] 0 pages in swap cache [ 3407.461658] Swap cache stats: add 0, delete 0, find 0/0 [ 3407.467719] Free swap = 0kB [ 3407.472304] Total swap = 0kB [ 3407.475886] 2097051 pages RAM [ 3407.480066] 0 pages HighMem/MovableOnly [ 3407.485047] 363840 pages reserved [ 3407.489685] 0 pages cma reserved [ 3407.515563] warn_alloc_show_mem: 1 callbacks suppressed [ 3407.515568] Mem-Info: [ 3407.516769] Mem-Info: [ 3407.527820] active_anon:16384 inactive_anon:90036 isolated_anon:0 [ 3407.527820] active_file:540 inactive_file:1841 isolated_file:0 [ 3407.527820] unevictable:0 dirty:25 writeback:0 unstable:0 [ 3407.527820] slab_reclaimable:12281 slab_unreclaimable:118065 [ 3407.527820] mapped:53990 shmem:90890 pagetables:771 bounce:0 [ 3407.527820] free:103107 free_pcp:298 free_cma:0 [ 3407.555806] active_anon:16359 inactive_anon:90036 isolated_anon:0 [ 3407.555806] active_file:540 inactive_file:1841 isolated_file:0 [ 3407.555806] unevictable:0 dirty:25 writeback:0 unstable:0 [ 3407.555806] slab_reclaimable:12281 slab_unreclaimable:118065 [ 3407.555806] mapped:45315 shmem:90890 pagetables:734 bounce:0 [ 3407.555806] free:106268 free_pcp:262 free_cma:0 [ 3407.569827] Node 0 active_anon:64328kB inactive_anon:308460kB active_file:2160kB inactive_file:7460kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:181260kB dirty:100kB writeback:0kB shmem:311548kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3407.628218] Node 1 active_anon:1100kB inactive_anon:51684kB active_file:4kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:52012kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3407.655898] Node 0 DMA free:10996kB min:204kB low:252kB high:300kB active_anon:68kB inactive_anon:980kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3407.683512] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 3407.689192] Node 0 DMA32 free:47528kB min:36200kB low:45248kB high:54296kB active_anon:64308kB inactive_anon:307488kB active_file:2260kB inactive_file:8004kB unevictable:0kB writepending:156kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7328kB pagetables:2868kB bounce:0kB free_pcp:1256kB local_pcp:596kB free_cma:0kB [ 3407.699777] Node 0 active_anon:64376kB inactive_anon:308468kB active_file:2260kB inactive_file:8004kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:181504kB dirty:156kB writeback:0kB shmem:311564kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3407.729765] lowmem_reserve[]: 0 0 0 0 0 [ 3407.795805] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3407.799767] Node 1 active_anon:1100kB inactive_anon:51684kB active_file:4kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:52012kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3407.854427] lowmem_reserve[]: 0 0 0 0 0 [ 3407.858899] Node 1 Normal free:160032kB min:53696kB low:67120kB high:80544kB active_anon:1100kB inactive_anon:51684kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:288kB pagetables:16kB bounce:0kB free_pcp:1420kB local_pcp:724kB free_cma:0kB [ 3407.900114] Node 0 DMA free:10996kB min:204kB low:252kB high:300kB active_anon:68kB inactive_anon:980kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3407.927310] lowmem_reserve[]: 0 0 0 0 0 [ 3407.934515] Node 0 DMA: 14*4kB (UME) 5*8kB (ME) 10*16kB (ME) 16*32kB (UME) 6*64kB (U) 13*128kB (UME) 4*256kB (UME) 2*512kB (UE) 4*1024kB (UME) 1*2048kB (M) 0*4096kB = 11008kB [ 3407.949726] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 3407.953317] Node 0 DMA32: [ 3407.955628] Node 0 DMA32 free:79296kB min:36200kB low:45248kB high:54296kB active_anon:64508kB inactive_anon:307488kB active_file:2360kB inactive_file:9004kB unevictable:0kB writepending:156kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7328kB pagetables:2868kB bounce:0kB free_pcp:1684kB local_pcp:740kB free_cma:0kB [ 3407.958467] 10344*4kB (UE) 2974*8kB (U) 261*16kB (U) 311*32kB (U) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 79296kB [ 3408.029684] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 3408.029734] Node 1 Normal: 3970*4kB (UM) 2469*8kB (UM) 614*16kB (UM) 434*32kB (UM) 11*64kB (U) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 60048kB [ 3408.029788] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3408.029793] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3408.029798] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3408.029803] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3408.029807] 93779 total pagecache pages [ 3408.029817] 0 pages in swap cache [ 3408.029822] Swap cache stats: add 0, delete 0, find 0/0 [ 3408.029825] Free swap = 0kB [ 3408.029828] Total swap = 0kB [ 3408.029833] 2097051 pages RAM [ 3408.029836] 0 pages HighMem/MovableOnly [ 3408.029842] 363840 pages reserved [ 3408.040671] lowmem_reserve[]: 0 0 0 0 [ 3408.101530] 0 pages cma reserved [ 3408.102983] 0 [ 3408.106149] Out of memory (oom_kill_allocating_task): Kill process 17174 (systemd-journal) score 0 or sacrifice child [ 3408.106312] Killed process 17174 (systemd-journal) total-vm:46096kB, anon-rss:464kB, file-rss:4kB, shmem-rss:1292kB [ 3408.141945] oom_reaper: reaped process 17174 (systemd-journal), now anon-rss:0kB, file-rss:0kB, shmem-rss:1292kB [ 3408.152125] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3408.188338] systemd[1]: systemd-journald.service: Failed with result 'signal'. [ 3408.189210] systemd[1]: systemd-journald.service: Service has no hold-off time, scheduling restart. [ 3408.230015] systemd[1]: Stopped Journal Service. [ 3408.249675] lowmem_reserve[]: 0 0 0 0 0 [ 3408.253761] Node 1 Normal free:99052kB min:53696kB low:67120kB high:80544kB active_anon:1100kB inactive_anon:51684kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:256kB pagetables:16kB bounce:0kB free_pcp:1356kB local_pcp:696kB free_cma:0kB [ 3408.299676] lowmem_reserve[]: 0 0 0 0 0 [ 3408.303764] Node 0 DMA: 19*4kB (UME) 10*8kB (UME) 11*16kB (UME) 16*32kB (UME) 5*64kB (U) 13*128kB (UME) 4*256kB (UME) 2*512kB (UE) 4*1024kB (UME) 1*2048kB (M) 0*4096kB = 11020kB [ 3408.309021] systemd[1]: Starting Journal Service... [ 3408.342930] Node 0 DMA32: 17582*4kB (UME) 5048*8kB (UM) 4787*16kB (UM) 1239*32kB (UM) 2*64kB (M) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 227080kB [ 3408.358071] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 3408.370117] Node 1 Normal: 7526*4kB (UM) 1872*8kB (UM) 944*16kB (UM) 980*32kB (UM) 669*64kB (U) 19*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 136792kB [ 3408.385600] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3408.399851] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3408.413398] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3408.439749] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3408.448359] 94260 total pagecache pages [ 3408.453842] 0 pages in swap cache [ 3408.461186] Swap cache stats: add 0, delete 0, find 0/0 [ 3408.467143] Free swap = 0kB [ 3408.471009] Total swap = 0kB [ 3408.475807] 2097051 pages RAM [ 3408.483168] 0 pages HighMem/MovableOnly [ 3408.488172] 363840 pages reserved [ 3408.492766] systemd-journald[17189]: File /run/log/journal/64dd78f1a75445a997c532444ad0f085/system.journal corrupted or uncleanly shut down, renaming and replacing. [ 3408.519663] 0 pages cma reserved [ 3408.966038] systemd[1]: Started Journal Service. [ 3409.941854] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 3409.948634] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3409.959653] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 3409.966421] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3409.977010] device bridge_slave_1 left promiscuous mode [ 3409.982987] bridge0: port 2(bridge_slave_1) entered disabled state [ 3409.994312] device bridge_slave_0 left promiscuous mode [ 3410.000135] bridge0: port 1(bridge_slave_0) entered disabled state [ 3410.012178] device veth1_macvtap left promiscuous mode [ 3410.017889] device veth0_macvtap left promiscuous mode [ 3410.023641] device veth1_vlan left promiscuous mode [ 3410.028724] device veth0_vlan left promiscuous mode [ 3410.174842] device hsr_slave_1 left promiscuous mode [ 3410.184433] device hsr_slave_0 left promiscuous mode [ 3410.205908] team0 (unregistering): Port device team_slave_1 removed [ 3410.220346] team0 (unregistering): Port device team_slave_0 removed [ 3410.235204] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 3410.246604] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 3410.295411] bond0 (unregistering): Released all slaves [ 3414.578393] Bluetooth: hci3 command 0x0406 tx timeout [ 3414.578434] Bluetooth: hci5 command 0x0406 tx timeout [ 3417.731065] IPVS: ftp: loaded support on port[0] = 21 [ 3417.801094] IPVS: ftp: loaded support on port[0] = 21 [ 3417.880259] chnl_net:caif_netlink_parms(): no params data found [ 3417.973966] chnl_net:caif_netlink_parms(): no params data found [ 3418.104476] bridge0: port 1(bridge_slave_0) entered blocking state [ 3418.113402] bridge0: port 1(bridge_slave_0) entered disabled state [ 3418.120860] device bridge_slave_0 entered promiscuous mode [ 3418.135625] bridge0: port 2(bridge_slave_1) entered blocking state [ 3418.142111] bridge0: port 2(bridge_slave_1) entered disabled state [ 3418.150774] device bridge_slave_1 entered promiscuous mode [ 3418.157116] bridge0: port 1(bridge_slave_0) entered blocking state [ 3418.163604] bridge0: port 1(bridge_slave_0) entered disabled state [ 3418.172327] device bridge_slave_0 entered promiscuous mode [ 3418.184441] bridge0: port 2(bridge_slave_1) entered blocking state [ 3418.191812] bridge0: port 2(bridge_slave_1) entered disabled state [ 3418.200201] device bridge_slave_1 entered promiscuous mode [ 3418.219802] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 3418.236397] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 3418.245325] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 3418.256064] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 3418.292408] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 3418.300247] team0: Port device team_slave_0 added [ 3418.305883] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 3418.313985] team0: Port device team_slave_0 added [ 3418.321270] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 3418.329941] team0: Port device team_slave_1 added [ 3418.335736] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 3418.343104] team0: Port device team_slave_1 added [ 3418.375006] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3418.381603] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3418.408454] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3418.419828] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3418.426207] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3418.453531] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3418.465058] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3418.471490] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3418.497505] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3418.508788] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3418.515294] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3418.541922] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3418.554204] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 3418.562838] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 3418.572557] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 3418.587695] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 3418.605113] device hsr_slave_0 entered promiscuous mode [ 3418.611058] device hsr_slave_1 entered promiscuous mode [ 3418.624563] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 3418.637139] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 3418.655054] device hsr_slave_0 entered promiscuous mode [ 3418.661961] device hsr_slave_1 entered promiscuous mode [ 3418.668299] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 3418.675741] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 3418.801931] bridge0: port 2(bridge_slave_1) entered blocking state [ 3418.808368] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3418.814974] bridge0: port 1(bridge_slave_0) entered blocking state [ 3418.821379] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3418.840578] bridge0: port 2(bridge_slave_1) entered blocking state [ 3418.847694] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3418.854314] bridge0: port 1(bridge_slave_0) entered blocking state [ 3418.860755] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3418.907054] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 3418.913971] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3418.923296] bridge0: port 1(bridge_slave_0) entered disabled state [ 3418.932295] bridge0: port 2(bridge_slave_1) entered disabled state [ 3418.940521] bridge0: port 1(bridge_slave_0) entered disabled state [ 3418.948320] bridge0: port 2(bridge_slave_1) entered disabled state [ 3418.955711] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 3418.973742] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3418.981382] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 3418.990835] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 3419.001764] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 3419.009189] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 3419.016174] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 3419.024700] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 3419.032569] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 3419.040698] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 3419.049308] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 3419.055528] 8021q: adding VLAN 0 to HW filter on device team0 [ 3419.064970] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 3419.071661] 8021q: adding VLAN 0 to HW filter on device team0 [ 3419.083356] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 3419.091727] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 3419.099354] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 3419.110529] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 3419.118788] bridge0: port 1(bridge_slave_0) entered blocking state [ 3419.125365] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3419.133446] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 3419.142572] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 3419.150632] bridge0: port 1(bridge_slave_0) entered blocking state [ 3419.157110] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3419.166894] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 3419.178877] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 3419.186736] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 3419.195539] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 3419.203469] bridge0: port 2(bridge_slave_1) entered blocking state [ 3419.209921] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3419.218317] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 3419.228019] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 3419.235327] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 3419.245827] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 3419.254240] bridge0: port 2(bridge_slave_1) entered blocking state [ 3419.261164] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3419.272444] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 3419.280873] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 3419.292241] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 3419.302527] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 3419.310144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 3419.319292] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 3419.328785] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 3419.337925] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 3419.346610] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 3419.356908] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 3419.365628] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 3419.374074] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 3419.382519] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 3419.391231] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 3419.399858] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 3419.407809] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 3419.415870] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 3419.424566] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 3419.433359] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 3419.441686] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 3419.451523] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 3419.462949] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 3419.470112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 3419.478152] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 3419.487891] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 3419.496477] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 3419.507020] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 3419.513579] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 3419.524530] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 3419.535763] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 3419.544460] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 3419.552826] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 3419.560895] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 3419.569270] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 3419.581383] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 3419.589051] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 3419.599187] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 3419.612373] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 3419.618942] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 3419.626186] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 3419.638923] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 3419.646663] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3419.655015] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 3419.665892] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 3419.672947] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 3419.686322] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3419.745109] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 3419.756246] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 3419.765173] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 3419.774627] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 3419.777549] Bluetooth: hci0 command 0x0409 tx timeout [ 3419.794869] Bluetooth: hci1 command 0x0409 tx timeout [ 3419.819788] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 3419.830753] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 3419.839232] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 3419.850948] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 3419.862589] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 3419.869903] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 3419.876941] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 3419.886981] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 3419.894392] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 3419.903514] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 3419.912072] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 3419.920114] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 3419.930889] device veth0_vlan entered promiscuous mode [ 3419.945945] device veth1_vlan entered promiscuous mode [ 3419.954978] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 3419.962818] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 3419.971054] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 3419.981708] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 3419.988859] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 3419.998044] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 3420.005782] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 3420.013227] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 3420.026520] device veth0_vlan entered promiscuous mode [ 3420.041591] device veth1_vlan entered promiscuous mode [ 3420.050104] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 3420.061557] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 3420.069444] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 3420.085664] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 3420.096243] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 3420.108610] device veth0_macvtap entered promiscuous mode [ 3420.116665] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 3420.125578] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 3420.134447] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 3420.142923] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 3420.150912] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 3420.162515] device veth1_macvtap entered promiscuous mode [ 3420.170275] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 3420.180831] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 3420.191856] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 3420.200480] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 3420.209407] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 3420.216963] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 3420.226699] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 3420.241331] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 3420.250237] device veth0_macvtap entered promiscuous mode [ 3420.259349] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 3420.270906] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 3420.281545] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3420.291651] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 3420.301606] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3420.311156] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 3420.320970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3420.331338] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 3420.338616] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 3420.346514] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 3420.354290] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 3420.363029] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 3420.373721] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 3420.384930] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3420.396146] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 3420.406959] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3420.418179] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 3420.428415] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3420.440539] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 3420.448846] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 3420.462864] device veth1_macvtap entered promiscuous mode [ 3420.470185] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 3420.479089] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 3420.486540] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 3420.497682] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 3420.514205] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 3420.534433] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 3420.546011] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 3420.557866] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3420.567851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 3420.579124] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3420.590228] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 3420.601070] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3420.610999] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 3420.621139] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3420.631414] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 3420.638881] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 3420.646835] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 3420.656213] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 3420.666536] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 3420.677875] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3420.688181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 3420.698230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3420.707970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 3420.718422] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3420.728455] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 3420.739074] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3420.750097] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 3420.757280] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 3420.765103] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 3420.774276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 05:22:33 executing program 3: openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x2080000001, 0x32}) 05:22:33 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x40000, 0x0) write$dsp(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$BATADV_CMD_GET_VLAN(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={0x0}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440)='l2tp\x00', 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_CSUM={0x5}]}, 0x1c}}, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, r3, 0x200, 0x70bd25, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x801) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x80000001, 0x32}) add_key(&(0x7f0000000040)='rxrpc\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(0xffffffffffffffff, 0x7a5, &(0x7f0000000000)={{@any, 0x7}, 0x1, 0x1, 0x6}) 05:22:33 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) write$dsp(0xffffffffffffffff, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x80000001, 0x32}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(0xffffffffffffffff, 0x7a5, &(0x7f0000000000)={{@any, 0x7}, 0x1, 0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(0xffffffffffffffff, 0x7a4, &(0x7f00000000c0)={{@hyper}, 0x9, 0x3f}) 05:22:33 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) write$dsp(0xffffffffffffffff, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x80000001, 0x32}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(0xffffffffffffffff, 0x7a5, &(0x7f0000000000)={{@any, 0x7}, 0x1, 0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(0xffffffffffffffff, 0x7a4, &(0x7f00000000c0)={{@hyper}, 0x9, 0x3f, 0x0, 0x8}) 05:22:33 executing program 3: openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x2080000001, 0x32}) 05:22:33 executing program 2: socketpair(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$bt_sco(r0, &(0x7f0000000000), 0x8) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video1\x00', 0x2, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(r1, 0xc0205649, &(0x7f0000000140)={0xfffffff, 0x4, 0x1, 0xffffffffffffffff, 0x0, &(0x7f0000000100)={0x9a0a2f, 0x0, [], @p_u32=&(0x7f00000000c0)}}) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nullb0\x00', 0x800, 0x0) ioctl$HDIO_GETGEO(r2, 0x301, &(0x7f0000000a00)) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240)='/dev/sequencer\x00', 0x40000, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r3, 0x40085112, &(0x7f0000000280)=@e={0xff, 0x9, 0x6, 0x7f, @SEQ_NOTEON=@note=0x2c, 0x1f, 0x5, 0x8}) socketpair(0x18, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x4048044) 05:22:33 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) write$dsp(0xffffffffffffffff, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x80000001, 0x32}) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(0xffffffffffffffff, 0x7a5, &(0x7f0000000000)={{}, 0x1, 0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(0xffffffffffffffff, 0x7a4, &(0x7f00000000c0)={{@hyper}, 0x0, 0x3f, 0x0, 0x8}) 05:22:33 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0) 05:22:33 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x40000, 0x0) write$dsp(0xffffffffffffffff, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x80000001, 0x32}) add_key(&(0x7f0000000040)='rxrpc\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(0xffffffffffffffff, 0x7a5, &(0x7f0000000000)={{@host, 0x7}, 0x1, 0x1, 0x6}) 05:22:33 executing program 2: socketpair(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$bt_sco(r0, &(0x7f0000000000), 0x8) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video1\x00', 0x2, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(r1, 0xc0205649, &(0x7f0000000140)={0xfffffff, 0x4, 0x1, 0xffffffffffffffff, 0x0, &(0x7f0000000100)={0x9a0a2f, 0x0, [], @p_u32=&(0x7f00000000c0)}}) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nullb0\x00', 0x800, 0x0) ioctl$HDIO_GETGEO(r2, 0x301, &(0x7f0000000a00)) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240)='/dev/sequencer\x00', 0x40000, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r3, 0x40085112, &(0x7f0000000280)=@e={0xff, 0x9, 0x6, 0x7f, @SEQ_NOTEON=@note=0x2c, 0x1f, 0x5, 0x8}) socketpair(0x18, 0x5, 0x0, &(0x7f0000000180)) 05:22:33 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0) 05:22:33 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) write$dsp(0xffffffffffffffff, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x80000001, 0x32}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(0xffffffffffffffff, 0x7a5, &(0x7f0000000000)={{@any, 0x7}, 0x1, 0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(0xffffffffffffffff, 0x7a4, &(0x7f00000000c0)={{@hyper}, 0x9, 0x3f}) 05:22:33 executing program 2: socketpair(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$bt_sco(r0, &(0x7f0000000000), 0x8) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video1\x00', 0x2, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(r1, 0xc0205649, &(0x7f0000000140)={0xfffffff, 0x4, 0x1, 0xffffffffffffffff, 0x0, &(0x7f0000000100)={0x9a0a2f, 0x0, [], @p_u32=&(0x7f00000000c0)}}) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nullb0\x00', 0x800, 0x0) ioctl$HDIO_GETGEO(r2, 0x301, &(0x7f0000000a00)) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240)='/dev/sequencer\x00', 0x40000, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r3, 0x40085112, &(0x7f0000000280)=@e={0xff, 0x9, 0x6, 0x7f, @SEQ_NOTEON=@note=0x2c, 0x1f, 0x5, 0x8}) [ 3421.502560] syz-executor.1: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 3421.544805] syz-executor.0: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 3421.558061] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 3421.566012] CPU: 1 PID: 17713 Comm: syz-executor.1 Not tainted 4.14.225-syzkaller #0 [ 3421.574606] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3421.586607] Call Trace: [ 3421.589759] dump_stack+0x1b2/0x281 [ 3421.593882] warn_alloc.cold+0x96/0x1cc [ 3421.598037] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 3421.606049] ? zone_watermark_ok_safe+0x220/0x220 [ 3421.612153] __alloc_pages_nodemask+0x2127/0x2720 [ 3421.617645] ? lock_acquire+0x170/0x3f0 [ 3421.621823] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3421.626698] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 3421.632181] ? __mutex_unlock_slowpath+0x75/0x770 [ 3421.637132] ? retint_kernel+0x2d/0x2d [ 3421.641226] alloc_pages_current+0x155/0x260 [ 3421.645882] ion_page_pool_alloc+0x118/0x1b0 [ 3421.651363] ion_system_heap_allocate+0x133/0x8c0 [ 3421.656407] ? ion_alloc+0x187/0x810 [ 3421.660155] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 3421.665799] ? ion_system_contig_heap_create+0x130/0x130 [ 3421.671461] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 3421.677686] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 3421.682549] ion_alloc+0x204/0x810 [ 3421.686199] ? ion_dma_buf_release+0x40/0x40 [ 3421.690618] ? __might_fault+0x177/0x1b0 [ 3421.694787] ion_ioctl+0xea/0x1f0 [ 3421.698268] ? ion_query_heaps+0x360/0x360 [ 3421.707235] ? __fget+0x1fe/0x360 [ 3421.710714] ? ion_query_heaps+0x360/0x360 [ 3421.715085] do_vfs_ioctl+0x75a/0xff0 [ 3421.718993] ? ioctl_preallocate+0x1a0/0x1a0 [ 3421.723427] ? lock_downgrade+0x740/0x740 [ 3421.727606] ? __fget+0x225/0x360 [ 3421.731257] ? do_vfs_ioctl+0xff0/0xff0 [ 3421.735241] ? security_file_ioctl+0x83/0xb0 [ 3421.739663] SyS_ioctl+0x7f/0xb0 [ 3421.743157] ? do_vfs_ioctl+0xff0/0xff0 [ 3421.747551] do_syscall_64+0x1d5/0x640 [ 3421.751466] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3421.757801] RIP: 0033:0x465f69 [ 3421.761000] RSP: 002b:00007f7868142188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3421.769170] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 3421.776916] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 3421.786025] RBP: 00000000004bfa8f R08: 0000000000000000 R09: 0000000000000000 [ 3421.793651] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 3421.801153] R13: 00007ffe8c1e098f R14: 00007f7868142300 R15: 0000000000022000 [ 3421.815413] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 3421.821216] CPU: 1 PID: 17708 Comm: syz-executor.0 Not tainted 4.14.225-syzkaller #0 [ 3421.829715] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3421.839109] Call Trace: [ 3421.842268] dump_stack+0x1b2/0x281 [ 3421.846920] warn_alloc.cold+0x96/0x1cc [ 3421.851982] ? zone_watermark_ok_safe+0x220/0x220 [ 3421.857558] __alloc_pages_nodemask+0x2127/0x2720 [ 3421.863724] ? __schedule+0x893/0x1de0 [ 3421.868079] ? lock_acquire+0x170/0x3f0 [ 3421.872865] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3421.877732] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 3421.883219] ? __mutex_unlock_slowpath+0x75/0x770 [ 3421.888540] alloc_pages_current+0x155/0x260 [ 3421.892980] ion_page_pool_alloc+0x118/0x1b0 [ 3421.898463] ion_system_heap_allocate+0x133/0x8c0 [ 3421.903423] ? ion_alloc+0x187/0x810 [ 3421.907426] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 3421.913003] ? ion_system_contig_heap_create+0x130/0x130 [ 3421.918487] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 3421.923563] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 3421.928906] ion_alloc+0x204/0x810 [ 3421.932600] ? ion_dma_buf_release+0x40/0x40 [ 3421.937129] ? __might_fault+0x177/0x1b0 [ 3421.941265] ion_ioctl+0xea/0x1f0 [ 3421.944867] ? ion_query_heaps+0x360/0x360 [ 3421.949122] ? __fget+0x1fe/0x360 [ 3421.952603] ? ion_query_heaps+0x360/0x360 [ 3421.956869] do_vfs_ioctl+0x75a/0xff0 [ 3421.960693] ? ioctl_preallocate+0x1a0/0x1a0 [ 3421.965116] ? lock_downgrade+0x740/0x740 [ 3421.969300] ? __fget+0x225/0x360 [ 3421.973111] ? do_vfs_ioctl+0xff0/0xff0 [ 3421.977338] ? security_file_ioctl+0x83/0xb0 [ 3421.981797] SyS_ioctl+0x7f/0xb0 [ 3421.985190] ? do_vfs_ioctl+0xff0/0xff0 [ 3421.989277] do_syscall_64+0x1d5/0x640 [ 3421.993460] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3421.998844] RIP: 0033:0x465f69 [ 3422.002046] RSP: 002b:00007efdc016d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3422.009766] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 3422.017058] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 3422.024347] RBP: 00000000004bfa8f R08: 0000000000000000 R09: 0000000000000000 [ 3422.031719] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 3422.038999] R13: 00007ffdff6f9c9f R14: 00007efdc016d300 R15: 0000000000022000 [ 3422.048214] Bluetooth: hci1 command 0x041b tx timeout [ 3422.053937] Bluetooth: hci0 command 0x041b tx timeout [ 3422.062221] Mem-Info: [ 3422.064780] active_anon:16432 inactive_anon:90040 isolated_anon:0 [ 3422.064780] active_file:2192 inactive_file:5383 isolated_file:0 [ 3422.064780] unevictable:0 dirty:0 writeback:1 unstable:0 [ 3422.064780] slab_reclaimable:12180 slab_unreclaimable:115749 [ 3422.064780] mapped:48734 shmem:90895 pagetables:752 bounce:0 [ 3422.064780] free:203471 free_pcp:39 free_cma:0 [ 3422.129169] Node 0 active_anon:64660kB inactive_anon:308480kB active_file:8764kB inactive_file:21528kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:194936kB dirty:0kB writeback:4kB shmem:311572kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 3422.214663] Node 1 active_anon:1068kB inactive_anon:51680kB active_file:4kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:52008kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3422.303658] Node 0 DMA free:11080kB min:204kB low:252kB high:300kB active_anon:68kB inactive_anon:980kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3422.386095] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 3422.396942] Node 0 DMA32 free:599276kB min:36200kB low:45248kB high:54296kB active_anon:64592kB inactive_anon:307500kB active_file:8764kB inactive_file:21528kB unevictable:0kB writepending:100kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7552kB pagetables:3000kB bounce:0kB free_pcp:140kB local_pcp:92kB free_cma:0kB [ 3422.462813] lowmem_reserve[]: 0 0 0 0 0 [ 3422.471527] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3422.532245] lowmem_reserve[]: 0 0 0 0 0 [ 3422.541305] Node 1 Normal free:76428kB min:53696kB low:67120kB high:80544kB active_anon:1068kB inactive_anon:51680kB active_file:4kB inactive_file:4kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:256kB pagetables:8kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3422.601558] lowmem_reserve[]: 0 0 0 0 0 [ 3422.610305] Node 0 DMA: 24*4kB (UME) 25*8kB (UME) 20*16kB (UME) 25*32kB (UME) 2*64kB (U) 11*128kB (UME) 4*256kB (UME) 2*512kB (UE) 4*1024kB (UME) 1*2048kB (M) 0*4096kB = 11144kB [ 3422.651050] Node 0 DMA32: 74*4kB (UME) 20*8kB (UE) 10157*16kB (UM) 10248*32kB (U) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 490904kB [ 3422.680519] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 3422.703557] Node 1 Normal: 551*4kB (UM) 850*8kB (UM) 720*16kB (UM) 485*32kB (UM) 91*64kB (U) 1*128kB (U) 1*256kB (U) 78*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 82188kB [ 3422.740528] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3422.762950] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3422.782096] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3422.801727] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3422.821085] 98332 total pagecache pages [ 3422.829733] 0 pages in swap cache [ 3422.838553] Swap cache stats: add 0, delete 0, find 0/0 [ 3422.851613] Free swap = 0kB [ 3422.859621] Total swap = 0kB [ 3422.866297] 2097051 pages RAM [ 3422.876615] 0 pages HighMem/MovableOnly [ 3422.888669] 363840 pages reserved [ 3422.897560] 0 pages cma reserved [ 3424.096490] Bluetooth: hci0 command 0x040f tx timeout [ 3424.105199] Bluetooth: hci1 command 0x040f tx timeout [ 3425.538684] oom_reaper: reaped process 17713 (syz-executor.1), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 3425.560268] systemd-journal invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 3425.584433] systemd-journal cpuset=/ mems_allowed=0-1 [ 3425.590427] CPU: 0 PID: 17189 Comm: systemd-journal Not tainted 4.14.225-syzkaller #0 [ 3425.598597] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3425.608017] Call Trace: [ 3425.610651] dump_stack+0x1b2/0x281 [ 3425.614282] dump_header+0x178/0x82f [ 3425.618102] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 3425.623209] ? ___ratelimit+0x2cd/0x530 [ 3425.627414] oom_kill_process.cold+0x10/0xb18 [ 3425.631929] out_of_memory+0xe3e/0x1190 [ 3425.636021] ? oom_killer_disable+0x1c0/0x1c0 [ 3425.640512] ? mutex_trylock+0x152/0x1a0 [ 3425.644573] __alloc_pages_nodemask+0x23e1/0x2720 [ 3425.649692] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3425.655065] alloc_pages_current+0x155/0x260 [ 3425.659510] filemap_fault+0xea3/0x1980 [ 3425.663528] ext4_filemap_fault+0x84/0xb0 [ 3425.668068] __do_fault+0xfa/0x380 [ 3425.672036] __handle_mm_fault+0x2497/0x4620 [ 3425.676745] ? ep_poll+0x1ab/0xa50 [ 3425.680302] ? vm_insert_page+0x7c0/0x7c0 [ 3425.684839] handle_mm_fault+0x391/0x860 [ 3425.688885] __do_page_fault+0x549/0xad0 [ 3425.693410] ? spurious_fault+0x640/0x640 [ 3425.697551] ? do_page_fault+0x60/0x500 [ 3425.701597] ? page_fault+0x2f/0x50 [ 3425.705204] page_fault+0x45/0x50 [ 3425.708645] RIP: 0001:0xffffffffffffffff [ 3425.712804] RSP: 2a6861e0:00007ffe0b439ce0 EFLAGS: 7ffe0b439af0 [ 3425.719622] syz-executor.1: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 3425.730836] Mem-Info: [ 3425.732005] (null) [ 3425.746044] active_anon:16419 inactive_anon:90039 isolated_anon:0 [ 3425.746044] active_file:13 inactive_file:12 isolated_file:0 [ 3425.746044] unevictable:0 dirty:0 writeback:0 unstable:0 [ 3425.746044] slab_reclaimable:12170 slab_unreclaimable:115516 [ 3425.746044] mapped:52641 shmem:90894 pagetables:747 bounce:0 [ 3425.746044] free:13933 free_pcp:30 free_cma:0 [ 3425.758517] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 3425.794765] Node 0 active_anon:64568kB inactive_anon:308476kB active_file:48kB inactive_file:48kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:210564kB dirty:0kB writeback:0kB shmem:311568kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3425.798151] CPU: 1 PID: 17713 Comm: syz-executor.1 Not tainted 4.14.225-syzkaller #0 [ 3425.831318] Node 1 active_anon:1108kB inactive_anon:51680kB active_file:4kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:52008kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3425.837281] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3425.837285] Call Trace: [ 3425.837308] dump_stack+0x1b2/0x281 [ 3425.837322] warn_alloc.cold+0x96/0x1cc [ 3425.866132] Node 0 [ 3425.876098] ? zone_watermark_ok_safe+0x220/0x220 [ 3425.876108] ? usleep_range+0x130/0x130 [ 3425.876118] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 3425.879000] DMA free:10960kB min:204kB low:252kB high:300kB active_anon:68kB inactive_anon:980kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3425.882615] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 3425.886827] lowmem_reserve[]: [ 3425.889050] ? run_timer_softirq+0x5a0/0x5a0 [ 3425.894301] 0 [ 3425.898270] __alloc_pages_nodemask+0x2127/0x2720 [ 3425.898285] ? lock_acquire+0x170/0x3f0 [ 3425.898299] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3425.903402] 2717 [ 3425.930157] ? ion_page_pool_alloc+0x9e/0x1b0 [ 3425.930172] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 3425.930191] alloc_pages_current+0x155/0x260 [ 3425.935332] 2718 [ 3425.938555] ion_page_pool_alloc+0x118/0x1b0 [ 3425.938566] ion_system_heap_allocate+0x133/0x8c0 [ 3425.938575] ? ion_alloc+0x187/0x810 [ 3425.938585] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 3425.938596] ? ion_system_contig_heap_create+0x130/0x130 [ 3425.943503] 2718 [ 3425.945292] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 3425.950150] 2718 [ 3425.954279] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 3425.961347] ion_alloc+0x204/0x810 [ 3425.965972] Node 0 [ 3425.971401] ? ion_dma_buf_release+0x40/0x40 [ 3425.976116] DMA32 free:18396kB min:36200kB low:45248kB high:54296kB active_anon:64500kB inactive_anon:307496kB active_file:48kB inactive_file:48kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7360kB pagetables:2980kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3425.978128] ? __might_fault+0x177/0x1b0 [ 3425.982621] lowmem_reserve[]: [ 3425.987468] ion_ioctl+0xea/0x1f0 [ 3425.987480] ? ion_query_heaps+0x360/0x360 [ 3425.987490] ? __fget+0x1fe/0x360 [ 3425.987502] ? ion_query_heaps+0x360/0x360 [ 3425.991252] 0 [ 3425.996867] do_vfs_ioctl+0x75a/0xff0 [ 3425.996879] ? ioctl_preallocate+0x1a0/0x1a0 [ 3425.996888] ? lock_downgrade+0x740/0x740 [ 3425.996902] ? __fget+0x225/0x360 [ 3426.002581] 0 [ 3426.004635] ? do_vfs_ioctl+0xff0/0xff0 [ 3426.009988] 0 [ 3426.011985] ? security_file_ioctl+0x83/0xb0 [ 3426.017078] 0 [ 3426.020588] SyS_ioctl+0x7f/0xb0 [ 3426.022822] 0 [ 3426.027228] ? do_vfs_ioctl+0xff0/0xff0 [ 3426.027240] do_syscall_64+0x1d5/0x640 [ 3426.027258] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3426.055420] Node 0 [ 3426.059440] RIP: 0033:0x465f69 [ 3426.059446] RSP: 002b:00007f7868142188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3426.059459] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 3426.062555] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3426.065978] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 3426.065983] RBP: 00000000004bfa8f R08: 0000000000000000 R09: 0000000000000000 [ 3426.065988] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 3426.065994] R13: 00007ffe8c1e098f R14: 00007f7868142300 R15: 0000000000022000 [ 3426.070448] warn_alloc_show_mem: 1 callbacks suppressed [ 3426.070452] Mem-Info: [ 3426.085479] lowmem_reserve[]: [ 3426.091461] active_anon:16419 inactive_anon:90039 isolated_anon:0 [ 3426.091461] active_file:13 inactive_file:12 isolated_file:0 [ 3426.091461] unevictable:0 dirty:0 writeback:0 unstable:0 [ 3426.091461] slab_reclaimable:12170 slab_unreclaimable:115516 [ 3426.091461] mapped:52641 shmem:90894 pagetables:747 bounce:0 [ 3426.091461] free:13933 free_pcp:30 free_cma:0 [ 3426.092330] 0 [ 3426.095753] Node 0 active_anon:64568kB inactive_anon:308476kB active_file:48kB inactive_file:48kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:210564kB dirty:0kB writeback:0kB shmem:311568kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3426.115583] 0 [ 3426.122502] Node 1 active_anon:1108kB inactive_anon:51680kB active_file:4kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:52008kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3426.131556] 0 [ 3426.133802] Node 0 [ 3426.148209] 0 [ 3426.152590] DMA free:10960kB min:204kB low:252kB high:300kB active_anon:68kB inactive_anon:980kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3426.186032] 0 [ 3426.193430] Bluetooth: hci1 command 0x0419 tx timeout [ 3426.213513] Bluetooth: hci0 command 0x0419 tx timeout [ 3426.215360] Node 1 [ 3426.252778] lowmem_reserve[]: [ 3426.292286] Normal free:26376kB min:53696kB low:67120kB high:80544kB active_anon:1108kB inactive_anon:51680kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:256kB pagetables:8kB bounce:0kB free_pcp:120kB local_pcp:0kB free_cma:0kB [ 3426.312518] 0 [ 3426.324596] lowmem_reserve[]: [ 3426.350415] 2717 [ 3426.362437] 0 [ 3426.398065] 2718 2718 2718 [ 3426.402948] Node 0 DMA32 free:18396kB min:36200kB low:45248kB high:54296kB active_anon:64500kB inactive_anon:307496kB active_file:48kB inactive_file:48kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7360kB pagetables:2980kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3426.403911] 0 [ 3426.441656] lowmem_reserve[]: [ 3426.441785] 0 [ 3426.443689] 0 [ 3426.448762] 0 0 [ 3426.451610] 0 0 [ 3426.452680] Node 0 DMA: [ 3426.454689] 0 0 [ 3426.464084] 8*4kB [ 3426.468066] (ME) 6*8kB (UME) 10*16kB (ME) 17*32kB (UME) 9*64kB (U) 11*128kB (UME) 4*256kB (UME) 2*512kB (UE) 4*1024kB (UME) 1*2048kB (M) 0*4096kB = 10960kB [ 3426.471145] Node 0 [ 3426.491448] Node 0 [ 3426.492487] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3426.493702] DMA32: [ 3426.498159] lowmem_reserve[]: [ 3426.529923] 1345*4kB [ 3426.533214] 0 [ 3426.534120] (UME) [ 3426.537922] 0 0 0 0 [ 3426.542635] 521*8kB [ 3426.543333] Node 1 [ 3426.543335] (UME) 199*16kB [ 3426.545667] Normal free:26376kB min:53696kB low:67120kB high:80544kB active_anon:1108kB inactive_anon:51680kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:256kB pagetables:8kB bounce:0kB free_pcp:120kB local_pcp:120kB free_cma:0kB [ 3426.584298] (UM) 75*32kB (UM) 41*64kB (UM) 5*128kB (UM) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18396kB [ 3426.593674] lowmem_reserve[]: 0 0 0 0 0 [ 3426.595495] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 3426.602426] Node 0 [ 3426.615998] Node 1 Normal: 78*4kB (M) 50*8kB (UM) 42*16kB (UM) 19*32kB (M) 5*64kB (M) 2*128kB (M) 1*256kB (M) 34*512kB (U) 6*1024kB (U) 0*2048kB 0*4096kB = 26376kB [ 3426.624194] DMA: [ 3426.639418] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3426.647434] 8*4kB (ME) 6*8kB (UME) 10*16kB (ME) 17*32kB (UME) 9*64kB (U) 11*128kB (UME) 4*256kB (UME) 2*512kB [ 3426.650567] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3426.650575] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3426.672786] (UE) 4*1024kB (UME) 1*2048kB (M) 0*4096kB = 10960kB [ 3426.684446] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3426.701958] Node 0 DMA32: 1345*4kB (UME) 521*8kB (UME) 201*16kB (UM) 75*32kB (UM) 41*64kB (UM) 5*128kB (UM) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18428kB [ 3426.702677] 90919 total pagecache pages [ 3426.726751] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 3426.730307] 0 pages in swap cache [ 3426.743354] Swap cache stats: add 0, delete 0, find 0/0 [ 3426.745065] Node 1 Normal: 78*4kB (M) 50*8kB (UM) 42*16kB (UM) 19*32kB (M) 5*64kB (M) 2*128kB (M) 1*256kB (M) 34*512kB (U) 6*1024kB (U) 0*2048kB 0*4096kB = 26376kB [ 3426.755194] Free swap = 0kB [ 3426.779660] Total swap = 0kB [ 3426.783108] 2097051 pages RAM [ 3426.784035] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3426.786254] 0 pages HighMem/MovableOnly [ 3426.786258] 363840 pages reserved [ 3426.786260] 0 pages cma reserved [ 3426.786267] Out of memory (oom_kill_allocating_task): Kill process 17189 (systemd-journal) score 0 or sacrifice child [ 3426.786297] Killed process 17189 (systemd-journal) total-vm:46096kB, anon-rss:472kB, file-rss:4kB, shmem-rss:1552kB [ 3426.787134] oom_reaper: reaped process 17189 (systemd-journal), now anon-rss:0kB, file-rss:0kB, shmem-rss:1552kB [ 3426.804041] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3426.837860] syz-fuzzer invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask= [ 3426.877416] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3426.880621] (null) [ 3426.898141] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3426.907015] , order=0, oom_score_adj=0 [ 3426.914951] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 3426.918946] 90919 total pagecache pages [ 3426.924122] 0 pages in swap cache [ 3426.928913] CPU: 0 PID: 7988 Comm: syz-fuzzer Not tainted 4.14.225-syzkaller #0 [ 3426.931490] Swap cache stats: add 0, delete 0, find 0/0 [ 3426.937347] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3426.937351] Call Trace: [ 3426.937371] dump_stack+0x1b2/0x281 [ 3426.937383] dump_header+0x178/0x82f [ 3426.937393] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 3426.937401] ? ___ratelimit+0x2cd/0x530 [ 3426.937410] oom_kill_process.cold+0x10/0xb18 [ 3426.937426] out_of_memory+0xe3e/0x1190 [ 3426.937439] ? oom_killer_disable+0x1c0/0x1c0 [ 3426.937445] ? mutex_trylock+0x152/0x1a0 [ 3426.937460] __alloc_pages_nodemask+0x23e1/0x2720 [ 3426.950915] Free swap = 0kB [ 3426.952704] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3426.958609] Total swap = 0kB [ 3426.959759] alloc_pages_current+0x155/0x260 [ 3426.963437] 2097051 pages RAM [ 3426.968525] filemap_fault+0xea3/0x1980 [ 3426.968542] ext4_filemap_fault+0x84/0xb0 [ 3426.968553] __do_fault+0xfa/0x380 [ 3426.968561] __handle_mm_fault+0x2497/0x4620 [ 3426.968570] ? vm_insert_page+0x7c0/0x7c0 [ 3426.968591] handle_mm_fault+0x391/0x860 [ 3426.968603] __do_page_fault+0x549/0xad0 [ 3426.968614] ? spurious_fault+0x640/0x640 [ 3426.968621] ? do_page_fault+0x60/0x500 [ 3426.968632] ? page_fault+0x2f/0x50 [ 3426.980722] 0 pages HighMem/MovableOnly [ 3426.981126] page_fault+0x45/0x50 [ 3426.987432] 363840 pages reserved [ 3426.989681] RIP: ad080:0x31de32a240a [ 3426.994518] 0 pages cma reserved [ 3426.997528] RSP: 03de:000000c00035be40 EFLAGS: 00000003 [ 3427.010083] Mem-Info: [ 3427.105797] active_anon:16319 inactive_anon:90039 isolated_anon:0 [ 3427.105797] active_file:16 inactive_file:259 isolated_file:0 [ 3427.105797] unevictable:0 dirty:0 writeback:0 unstable:0 [ 3427.105797] slab_reclaimable:12170 slab_unreclaimable:115516 [ 3427.105797] mapped:52316 shmem:90894 pagetables:747 bounce:0 [ 3427.105797] free:49571 free_pcp:62 free_cma:0 [ 3427.210871] Node 0 active_anon:64168kB inactive_anon:308476kB active_file:156kB inactive_file:2140kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:209664kB dirty:0kB writeback:0kB shmem:311568kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3427.260012] Node 1 active_anon:1108kB inactive_anon:51680kB active_file:108kB inactive_file:1496kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:1200kB dirty:0kB writeback:0kB shmem:52008kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3427.329768] Node 0 DMA free:11152kB min:204kB low:252kB high:300kB active_anon:68kB inactive_anon:980kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3427.361259] systemd[1]: systemd-journald.service: Failed with result 'signal'. [ 3427.380356] systemd[1]: systemd-journald.service: Service has no hold-off time, scheduling restart. [ 3427.415787] systemd[1]: Stopped Journal Service. [ 3427.419211] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 3427.444214] Node 0 DMA32 free:127928kB min:36200kB low:45248kB high:54296kB active_anon:64300kB inactive_anon:307496kB active_file:556kB inactive_file:4540kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7424kB pagetables:2980kB bounce:0kB free_pcp:1004kB local_pcp:740kB free_cma:0kB [ 3427.460217] systemd[1]: Starting Journal Service... [ 3427.505684] lowmem_reserve[]: 0 0 0 0 0 [ 3427.509727] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3427.534073] systemd[1]: Starting Load/Save RF Kill Switch Status... [ 3427.548612] lowmem_reserve[]: 0 0 0 0 0 [ 3427.553140] Node 1 Normal free:228260kB min:53696kB low:67120kB high:80544kB active_anon:1108kB inactive_anon:51680kB active_file:108kB inactive_file:1496kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:256kB pagetables:8kB bounce:0kB free_pcp:852kB local_pcp:620kB free_cma:0kB [ 3427.583583] lowmem_reserve[]: 0 0 0 0 0 [ 3427.601981] Node 0 DMA: 43*4kB (UME) 6*8kB (UME) 10*16kB (ME) 17*32kB (UME) 8*64kB (U) 13*128kB (UME) 4*256kB (UME) 2*512kB (UE) 4*1024kB (UME) 1*2048kB (M) 0*4096kB = 11292kB [ 3427.619873] Node 0 DMA32: 1396*4kB (UE) 197*8kB (UME) 1512*16kB (UM) 1233*32kB (UM) 494*64kB (UM) 11*128kB (UM) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 103832kB [ 3427.635774] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 3427.655040] Node 1 Normal: 1960*4kB (UM) 171*8kB (UM) 18*16kB (UM) 22*32kB (UM) 2580*64kB (UM) 176*128kB (UM) 27*256kB (UM) 34*512kB (U) 6*1024kB (U) 0*2048kB 0*4096kB = 228312kB [ 3427.673384] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3427.683540] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3427.692283] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3427.702120] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3427.712058] 93172 total pagecache pages [ 3427.720494] 0 pages in swap cache [ 3427.745729] Swap cache stats: add 0, delete 0, find 0/0 [ 3427.752530] Free swap = 0kB [ 3427.764233] Total swap = 0kB [ 3427.767859] 2097051 pages RAM [ 3427.771705] 0 pages HighMem/MovableOnly [ 3427.793711] 363840 pages reserved [ 3427.800010] 0 pages cma reserved [ 3427.816380] Out of memory (oom_kill_allocating_task): Kill process 7988 (syz-fuzzer) score 0 or sacrifice child [ 3427.834279] Killed process 17206 (syz-executor.1) total-vm:84924kB, anon-rss:68kB, file-rss:0kB, shmem-rss:0kB [ 3427.867930] oom_reaper: reaped process 17206 (syz-executor.1), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 3427.963781] systemd[1]: Started Load/Save RF Kill Switch Status. [ 3427.971646] systemd-journald[17739]: File /run/log/journal/64dd78f1a75445a997c532444ad0f085/system.journal corrupted or uncleanly shut down, renaming and replacing. 05:22:40 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0) 05:22:40 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) write$dsp(0xffffffffffffffff, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x80000001, 0x32}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(0xffffffffffffffff, 0x7a5, &(0x7f0000000000)={{@any, 0x7}, 0x1, 0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(0xffffffffffffffff, 0x7a4, &(0x7f00000000c0)={{@hyper}, 0x9, 0x3f}) 05:22:40 executing program 0: socketpair(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, &(0x7f0000000000)={0x80000000, 0x4}) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x44}}, 0x0) 05:22:40 executing program 2: socketpair(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$bt_sco(r0, &(0x7f0000000000), 0x8) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video1\x00', 0x2, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(r1, 0xc0205649, &(0x7f0000000140)={0xfffffff, 0x4, 0x1, 0xffffffffffffffff, 0x0, &(0x7f0000000100)={0x9a0a2f, 0x0, [], @p_u32=&(0x7f00000000c0)}}) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nullb0\x00', 0x800, 0x0) ioctl$HDIO_GETGEO(r2, 0x301, &(0x7f0000000a00)) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240)='/dev/sequencer\x00', 0x40000, 0x0) [ 3428.424710] systemd[1]: Started Journal Service. [ 3429.512925] syz-executor.4: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 3429.547940] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 3429.553514] CPU: 1 PID: 17751 Comm: syz-executor.4 Not tainted 4.14.225-syzkaller #0 [ 3429.561749] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3429.572373] Call Trace: [ 3429.575062] dump_stack+0x1b2/0x281 [ 3429.578773] warn_alloc.cold+0x96/0x1cc [ 3429.583804] ? zone_watermark_ok_safe+0x220/0x220 [ 3429.589373] __alloc_pages_nodemask+0x2127/0x2720 [ 3429.595054] ? io_schedule_timeout+0x140/0x140 [ 3429.599654] ? lock_acquire+0x170/0x3f0 [ 3429.603966] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3429.609860] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 3429.615563] ? __mutex_unlock_slowpath+0x75/0x770 [ 3429.621176] alloc_pages_current+0x155/0x260 [ 3429.625661] ion_page_pool_alloc+0x118/0x1b0 [ 3429.630338] ion_system_heap_allocate+0x133/0x8c0 [ 3429.635474] ? ion_alloc+0x187/0x810 [ 3429.639622] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 3429.646159] ? ion_system_contig_heap_create+0x130/0x130 [ 3429.651631] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 3429.656818] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 3429.662078] ion_alloc+0x204/0x810 [ 3429.665693] ? ion_dma_buf_release+0x40/0x40 [ 3429.670274] ? __might_fault+0x177/0x1b0 [ 3429.675206] ion_ioctl+0xea/0x1f0 [ 3429.679163] ? ion_query_heaps+0x360/0x360 [ 3429.683652] ? __fget+0x1fe/0x360 [ 3429.687269] ? ion_query_heaps+0x360/0x360 [ 3429.692448] do_vfs_ioctl+0x75a/0xff0 [ 3429.698134] ? ioctl_preallocate+0x1a0/0x1a0 [ 3429.703627] ? lock_downgrade+0x740/0x740 [ 3429.707876] ? __fget+0x225/0x360 [ 3429.711599] ? do_vfs_ioctl+0xff0/0xff0 [ 3429.716979] ? security_file_ioctl+0x83/0xb0 [ 3429.724347] SyS_ioctl+0x7f/0xb0 [ 3429.729032] ? do_vfs_ioctl+0xff0/0xff0 [ 3429.734528] do_syscall_64+0x1d5/0x640 [ 3429.739539] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3429.747185] RIP: 0033:0x465f69 [ 3429.751582] RSP: 002b:00007fbb52cf0188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3429.765221] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 3429.775335] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 3429.789507] RBP: 00000000004bfa8f R08: 0000000000000000 R09: 0000000000000000 [ 3429.800024] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 3429.812004] R13: 00007ffc0aef8def R14: 00007fbb52cf0300 R15: 0000000000022000 [ 3429.839228] Mem-Info: [ 3429.842619] active_anon:16488 inactive_anon:90040 isolated_anon:0 [ 3429.842619] active_file:1647 inactive_file:2691 isolated_file:0 [ 3429.842619] unevictable:0 dirty:62 writeback:0 unstable:0 [ 3429.842619] slab_reclaimable:12169 slab_unreclaimable:117784 [ 3429.842619] mapped:46552 shmem:90897 pagetables:701 bounce:0 [ 3429.842619] free:94548 free_pcp:284 free_cma:0 [ 3429.901817] Node 0 active_anon:64944kB inactive_anon:316608kB active_file:5404kB inactive_file:10308kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:184760kB dirty:244kB writeback:0kB shmem:319772kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 3429.947278] Node 1 active_anon:1008kB inactive_anon:43552kB active_file:1184kB inactive_file:456kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:1448kB dirty:4kB writeback:0kB shmem:43816kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3429.996980] Node 0 DMA free:11096kB min:204kB low:252kB high:300kB active_anon:68kB inactive_anon:980kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3430.032361] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 3430.039361] Node 0 DMA32 free:77412kB min:36200kB low:45248kB high:54296kB active_anon:64876kB inactive_anon:315628kB active_file:5404kB inactive_file:10308kB unevictable:0kB writepending:244kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7360kB pagetables:2796kB bounce:0kB free_pcp:404kB local_pcp:236kB free_cma:0kB [ 3430.079587] lowmem_reserve[]: 0 0 0 0 0 [ 3430.086378] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3430.126419] lowmem_reserve[]: 0 0 0 0 0 [ 3430.133313] Node 1 Normal free:288748kB min:53696kB low:67120kB high:80544kB active_anon:1008kB inactive_anon:43552kB active_file:1184kB inactive_file:456kB unevictable:0kB writepending:4kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:256kB pagetables:8kB bounce:0kB free_pcp:696kB local_pcp:0kB free_cma:0kB [ 3430.170400] lowmem_reserve[]: 0 0 0 0 0 [ 3430.176251] Node 0 DMA: 48*4kB (UME) 7*8kB (UME) 12*16kB (UME) 21*32kB (UME) 2*64kB (U) 13*128kB (UME) 4*256kB (UME) 2*512kB (UE) 4*1024kB (UME) 1*2048kB (M) 0*4096kB = 11096kB [ 3430.197313] Node 0 DMA32: 2345*4kB (UME) 699*8kB (UME) 1050*16kB (UM) 1403*32kB (U) 1*64kB (U) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 76732kB [ 3430.212476] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 3430.229054] Node 1 Normal: 6619*4kB (UM) 4690*8kB (UM) 4539*16kB (U) 4532*32kB (U) 1*64kB (U) 1*128kB (U) 1*256kB (U) 13*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 288748kB [ 3430.248502] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3430.269552] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3430.280131] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3430.296456] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3430.310516] 95235 total pagecache pages [ 3430.318000] 0 pages in swap cache [ 3430.323639] Swap cache stats: add 0, delete 0, find 0/0 [ 3430.331511] Free swap = 0kB [ 3430.339752] Total swap = 0kB [ 3430.343162] 2097051 pages RAM [ 3430.348580] 0 pages HighMem/MovableOnly [ 3430.352602] 363840 pages reserved [ 3430.359680] 0 pages cma reserved [ 3433.837458] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 3433.851366] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3433.862569] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 3433.875411] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3433.888528] device bridge_slave_1 left promiscuous mode [ 3433.899134] bridge0: port 2(bridge_slave_1) entered disabled state [ 3433.913406] device bridge_slave_0 left promiscuous mode [ 3433.924406] bridge0: port 1(bridge_slave_0) entered disabled state [ 3433.935820] device veth1_macvtap left promiscuous mode [ 3433.941452] device veth0_macvtap left promiscuous mode [ 3433.947745] device veth1_vlan left promiscuous mode [ 3433.954519] device veth0_vlan left promiscuous mode [ 3434.096561] device hsr_slave_1 left promiscuous mode [ 3434.109137] device hsr_slave_0 left promiscuous mode [ 3434.128637] team0 (unregistering): Port device team_slave_1 removed [ 3434.143057] team0 (unregistering): Port device team_slave_0 removed [ 3434.159904] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 3434.179827] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 3434.231042] bond0 (unregistering): Released all slaves [ 3438.200475] IPVS: ftp: loaded support on port[0] = 21 [ 3438.330243] chnl_net:caif_netlink_parms(): no params data found [ 3438.541760] bridge0: port 1(bridge_slave_0) entered blocking state [ 3438.550294] bridge0: port 1(bridge_slave_0) entered disabled state [ 3438.559433] device bridge_slave_0 entered promiscuous mode [ 3438.568273] bridge0: port 2(bridge_slave_1) entered blocking state [ 3438.577073] bridge0: port 2(bridge_slave_1) entered disabled state [ 3438.587897] device bridge_slave_1 entered promiscuous mode [ 3438.612449] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 3438.623627] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 3438.647053] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 3438.656215] team0: Port device team_slave_0 added [ 3438.662448] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 3438.670358] team0: Port device team_slave_1 added [ 3438.690513] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3438.697355] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3438.725128] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3438.739033] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3438.745751] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3438.775695] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3438.788844] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 3438.798808] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 3438.825686] device hsr_slave_0 entered promiscuous mode [ 3438.836124] device hsr_slave_1 entered promiscuous mode [ 3438.845644] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 3438.855254] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 3438.947469] bridge0: port 2(bridge_slave_1) entered blocking state [ 3438.959023] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3438.968585] bridge0: port 1(bridge_slave_0) entered blocking state [ 3438.980638] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3439.021028] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 3439.028999] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3439.043223] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 3439.057640] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 3439.068422] bridge0: port 1(bridge_slave_0) entered disabled state [ 3439.077613] bridge0: port 2(bridge_slave_1) entered disabled state [ 3439.090358] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 3439.098316] 8021q: adding VLAN 0 to HW filter on device team0 [ 3439.109920] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 3439.120829] bridge0: port 1(bridge_slave_0) entered blocking state [ 3439.127850] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3439.142665] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 3439.151784] bridge0: port 2(bridge_slave_1) entered blocking state [ 3439.161746] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3439.180348] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 3439.192695] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 3439.214434] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 3439.227053] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 3439.238476] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 3439.253779] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 3439.266077] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 3439.283613] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 3439.299829] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 3439.310363] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 3439.322252] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 3439.335352] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3439.406413] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 3439.417913] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 3439.428275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 3439.437939] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 3439.470493] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 3439.484378] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 3439.494185] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 3439.509018] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 3439.518883] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 3439.532610] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 3439.547093] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 3439.555847] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 3439.570601] device veth0_vlan entered promiscuous mode [ 3439.582824] device veth1_vlan entered promiscuous mode [ 3439.589358] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 3439.604139] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 3439.621373] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 3439.637750] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 3439.647810] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 3439.656125] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 3439.666828] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 3439.676133] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 3439.688973] device veth0_macvtap entered promiscuous mode [ 3439.698367] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 3439.709323] device veth1_macvtap entered promiscuous mode [ 3439.718993] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 3439.731351] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 3439.743245] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 3439.755901] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 3439.776053] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3439.790035] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 3439.807565] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3439.825680] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 3439.839350] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3439.853876] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 3439.867383] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3439.878743] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 3439.890879] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 3439.901348] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 3439.910309] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 3439.918977] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 3439.929286] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 3439.944823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 3439.958050] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3439.969988] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 3439.983075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3439.995611] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 3440.010953] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3440.024231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 3440.037789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3440.051250] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 3440.060135] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 3440.068338] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 3440.078084] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 05:22:52 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x0, 0x32}) 05:22:52 executing program 0: socketpair(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f0000000380)={&(0x7f0000000180), 0xc, &(0x7f0000000200)={0x0, 0x44}}, 0x0) ioctl$BLKREPORTZONE(0xffffffffffffffff, 0xc0101282, &(0x7f0000000240)={0x8, 0x2, 0x0, [{0x8000, 0x51a5, 0x10000, 0xff, 0xff, 0x1, 0x7}, {0x80, 0xfe, 0x8, 0x0, 0x8, 0x3, 0xff}]}) ioctl$HDIO_GETGEO(0xffffffffffffffff, 0x301, &(0x7f0000000140)) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x34, 0x0, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x100}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x8001) syz_genetlink_get_family_id$batadv(&(0x7f00000001c0)='batadv\x00', r0) 05:22:52 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x40000, 0x0) write$dsp(0xffffffffffffffff, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x80000001, 0x32}) add_key(&(0x7f0000000040)='rxrpc\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(0xffffffffffffffff, 0x7a5, &(0x7f0000000000)={{@host, 0x7}, 0x1, 0x1, 0x6}) [ 3440.253429] Bluetooth: hci1 command 0x0409 tx timeout 05:22:52 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x0, 0x32}) 05:22:52 executing program 5: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140)='batadv\x00', 0xffffffffffffffff) r1 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000040)={&(0x7f0000000000)='./file0\x00'}, 0x10) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000080)={@loopback, 0x0}, &(0x7f00000000c0)=0x14) ioctl$IOCTL_VMCI_GET_CONTEXT_ID(0xffffffffffffffff, 0x7b3, &(0x7f0000000180)) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000600)={'batadv_slave_1\x00'}) bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x7, 0x8, 0x9, 0x1, 0x1487, r1, 0x0, [], r2, 0xffffffffffffffff, 0x4, 0x1}, 0x40) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r0, @ANYBLOB="654b06000000f7feffff0b0000000802f03c502e2fb67c36f9"], 0x1c}}, 0x0) 05:22:52 executing program 0: socketpair(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f0000000380)={&(0x7f0000000180), 0xc, &(0x7f0000000200)={0x0, 0x44}}, 0x0) ioctl$BLKREPORTZONE(0xffffffffffffffff, 0xc0101282, &(0x7f0000000240)={0x8, 0x2, 0x0, [{0x8000, 0x51a5, 0x10000, 0xff, 0xff, 0x1, 0x7}, {0x80, 0xfe, 0x8, 0x0, 0x8, 0x3, 0xff}]}) ioctl$HDIO_GETGEO(0xffffffffffffffff, 0x301, &(0x7f0000000140)) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x34, 0x0, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x100}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x8001) syz_genetlink_get_family_id$batadv(&(0x7f00000001c0)='batadv\x00', r0) 05:22:52 executing program 2: socketpair(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$bt_sco(r0, &(0x7f0000000000), 0x8) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video1\x00', 0x2, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(r1, 0xc0205649, &(0x7f0000000140)={0xfffffff, 0x4, 0x1, 0xffffffffffffffff, 0x0, &(0x7f0000000100)={0x9a0a2f, 0x0, [], @p_u32=&(0x7f00000000c0)}}) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nullb0\x00', 0x800, 0x0) ioctl$HDIO_GETGEO(r2, 0x301, &(0x7f0000000a00)) 05:22:52 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) write$dsp(0xffffffffffffffff, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x80000001, 0x32}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(0xffffffffffffffff, 0x7a5, &(0x7f0000000000)={{@any, 0x7}, 0x1, 0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(0xffffffffffffffff, 0x7a4, &(0x7f00000000c0)={{@hyper}, 0x9, 0x3f}) 05:22:52 executing program 2: socketpair(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$bt_sco(r0, &(0x7f0000000000), 0x8) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video1\x00', 0x2, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(r1, 0xc0205649, &(0x7f0000000140)={0xfffffff, 0x4, 0x1, 0xffffffffffffffff, 0x0, &(0x7f0000000100)={0x9a0a2f, 0x0, [], @p_u32=&(0x7f00000000c0)}}) openat$nullb(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nullb0\x00', 0x800, 0x0) 05:22:52 executing program 5 (fault-call:2 fault-nth:0): r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) write$dsp(0xffffffffffffffff, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x80000001, 0x32}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(0xffffffffffffffff, 0x7a5, &(0x7f0000000000)={{@any, 0x7}, 0x1, 0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(0xffffffffffffffff, 0x7a4, &(0x7f00000000c0)={{@hyper}, 0x9, 0x3f}) 05:22:52 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x0, 0x32}) 05:22:52 executing program 0: socketpair(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f0000000380)={&(0x7f0000000180), 0xc, &(0x7f0000000200)={0x0, 0x44}}, 0x0) ioctl$BLKREPORTZONE(0xffffffffffffffff, 0xc0101282, &(0x7f0000000240)={0x8, 0x2, 0x0, [{0x8000, 0x51a5, 0x10000, 0xff, 0xff, 0x1, 0x7}, {0x80, 0xfe, 0x8, 0x0, 0x8, 0x3, 0xff}]}) ioctl$HDIO_GETGEO(0xffffffffffffffff, 0x301, &(0x7f0000000140)) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x34, 0x0, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x100}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x8001) syz_genetlink_get_family_id$batadv(&(0x7f00000001c0)='batadv\x00', r0) 05:22:52 executing program 2: socketpair(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$bt_sco(r0, &(0x7f0000000000), 0x8) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video1\x00', 0x2, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(r1, 0xc0205649, &(0x7f0000000140)={0xfffffff, 0x4, 0x1, 0xffffffffffffffff, 0x0, &(0x7f0000000100)={0x9a0a2f, 0x0, [], @p_u32=&(0x7f00000000c0)}}) 05:22:52 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x2080000001}) [ 3440.492431] FAULT_INJECTION: forcing a failure. [ 3440.492431] name failslab, interval 1, probability 0, space 0, times 0 [ 3440.553290] CPU: 1 PID: 18034 Comm: syz-executor.5 Not tainted 4.14.225-syzkaller #0 [ 3440.563261] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3440.573767] Call Trace: [ 3440.576844] dump_stack+0x1b2/0x281 [ 3440.580801] should_fail.cold+0x10a/0x149 [ 3440.585148] should_failslab+0xd6/0x130 [ 3440.589261] kmem_cache_alloc_trace+0x29a/0x3d0 [ 3440.594862] ion_alloc+0x187/0x810 [ 3440.598615] ? ion_dma_buf_release+0x40/0x40 [ 3440.603239] ? __might_fault+0x177/0x1b0 [ 3440.607467] ion_ioctl+0xea/0x1f0 [ 3440.611300] ? ion_query_heaps+0x360/0x360 [ 3440.616246] ? SyS_write+0x1b7/0x210 [ 3440.621673] ? ion_query_heaps+0x360/0x360 [ 3440.626713] do_vfs_ioctl+0x75a/0xff0 [ 3440.631381] ? ioctl_preallocate+0x1a0/0x1a0 [ 3440.636875] ? lock_downgrade+0x740/0x740 [ 3440.641526] ? __fget+0x225/0x360 [ 3440.645329] ? do_vfs_ioctl+0xff0/0xff0 [ 3440.650518] ? security_file_ioctl+0x83/0xb0 [ 3440.655202] SyS_ioctl+0x7f/0xb0 [ 3440.659543] ? do_vfs_ioctl+0xff0/0xff0 [ 3440.664376] do_syscall_64+0x1d5/0x640 [ 3440.668586] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3440.675482] RIP: 0033:0x465f69 [ 3440.679903] RSP: 002b:00007f747b89a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3440.688451] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 05:22:53 executing program 2: socketpair(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$bt_sco(r0, &(0x7f0000000000), 0x8) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video1\x00', 0x2, 0x0) [ 3440.698920] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 3440.708299] RBP: 00007f747b89a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3440.716042] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3440.725924] R13: 00007ffe6eac26ff R14: 00007f747b89a300 R15: 0000000000022000 [ 3442.335943] Bluetooth: hci1 command 0x041b tx timeout [ 3442.617440] IPVS: ftp: loaded support on port[0] = 21 [ 3442.807815] chnl_net:caif_netlink_parms(): no params data found [ 3442.909152] bridge0: port 1(bridge_slave_0) entered blocking state [ 3442.920176] bridge0: port 1(bridge_slave_0) entered disabled state [ 3442.931641] device bridge_slave_0 entered promiscuous mode [ 3442.948499] bridge0: port 2(bridge_slave_1) entered blocking state [ 3442.957942] bridge0: port 2(bridge_slave_1) entered disabled state [ 3442.977124] device bridge_slave_1 entered promiscuous mode [ 3443.010094] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 3443.022761] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 3443.051742] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 3443.060797] team0: Port device team_slave_0 added [ 3443.068079] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 3443.077091] team0: Port device team_slave_1 added [ 3443.102821] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3443.111850] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3443.147064] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3443.164071] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3443.171269] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3443.203844] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3443.219325] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 3443.229936] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 3443.273164] device hsr_slave_0 entered promiscuous mode [ 3443.281599] device hsr_slave_1 entered promiscuous mode [ 3443.295982] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 3443.305880] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 3443.430456] bridge0: port 2(bridge_slave_1) entered blocking state [ 3443.437585] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3443.446031] bridge0: port 1(bridge_slave_0) entered blocking state [ 3443.455022] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3443.511557] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 3443.519449] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3443.534628] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 3443.548163] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 3443.559756] bridge0: port 1(bridge_slave_0) entered disabled state [ 3443.569374] bridge0: port 2(bridge_slave_1) entered disabled state [ 3443.585013] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 3443.593759] 8021q: adding VLAN 0 to HW filter on device team0 [ 3443.605818] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 3443.616274] bridge0: port 1(bridge_slave_0) entered blocking state [ 3443.623738] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3443.644874] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 3443.654559] bridge0: port 2(bridge_slave_1) entered blocking state [ 3443.662657] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3443.684004] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 3443.694544] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 3443.706782] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 3443.722569] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 3443.738402] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 3443.748669] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 3443.759003] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 3443.768435] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 3443.780994] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 3443.804998] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 3443.817220] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 3443.824757] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 3443.834524] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 3443.849205] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3443.951419] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 3443.968901] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 3443.980770] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 3443.990919] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 3444.047483] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 3444.057159] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 3444.069210] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 3444.079461] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 3444.088988] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 3444.098884] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 3444.113288] device veth0_vlan entered promiscuous mode [ 3444.122521] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 3444.131705] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 3444.146462] device veth1_vlan entered promiscuous mode [ 3444.158614] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 3444.170442] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 3444.187668] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 3444.198774] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 3444.210091] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 3444.218613] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 3444.228668] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 3444.239252] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 3444.250845] device veth0_macvtap entered promiscuous mode [ 3444.258760] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 3444.270668] device veth1_macvtap entered promiscuous mode [ 3444.277797] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 3444.290606] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 3444.303224] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 3444.313890] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 3444.327484] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3444.340739] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 3444.353751] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3444.364220] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 3444.375497] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3444.386498] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 3444.399470] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3444.411081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 3444.412163] Bluetooth: hci1 command 0x040f tx timeout [ 3444.423983] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3444.443316] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 3444.453341] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 3444.463766] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 3444.471660] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 3444.479602] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 3444.488341] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 3444.500405] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 3444.511185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3444.524800] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 3444.535199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3444.546347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 3444.556883] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3444.571052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 3444.586341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3444.598742] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 3444.609238] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3444.620842] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 3444.628363] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 3444.636166] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 3444.644623] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 3444.653760] Bluetooth: hci2 command 0x0409 tx timeout 05:22:57 executing program 1 (fault-call:1 fault-nth:0): r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x2080000001, 0x32}) 05:22:57 executing program 0: socketpair(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f0000000380)={&(0x7f0000000180), 0xc, &(0x7f0000000200)={0x0, 0x44}}, 0x0) ioctl$BLKREPORTZONE(0xffffffffffffffff, 0xc0101282, &(0x7f0000000240)={0x8, 0x2, 0x0, [{0x8000, 0x51a5, 0x10000, 0xff, 0xff, 0x1, 0x7}, {0x80, 0xfe, 0x8, 0x0, 0x8, 0x3, 0xff}]}) ioctl$HDIO_GETGEO(0xffffffffffffffff, 0x301, &(0x7f0000000140)) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x34, 0x0, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x100}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x8001) 05:22:57 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x2080000001}) 05:22:57 executing program 2: socketpair(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$bt_sco(r0, &(0x7f0000000000), 0x8) 05:22:57 executing program 5 (fault-call:2 fault-nth:1): r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) write$dsp(0xffffffffffffffff, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x80000001, 0x32}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(0xffffffffffffffff, 0x7a5, &(0x7f0000000000)={{@any, 0x7}, 0x1, 0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(0xffffffffffffffff, 0x7a4, &(0x7f00000000c0)={{@hyper}, 0x9, 0x3f}) 05:22:57 executing program 4 (fault-call:1 fault-nth:0): socketpair(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) recvfrom$llc(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 05:22:57 executing program 0: socketpair(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f0000000380)={&(0x7f0000000180), 0xc, &(0x7f0000000200)={0x0, 0x44}}, 0x0) ioctl$BLKREPORTZONE(0xffffffffffffffff, 0xc0101282, &(0x7f0000000240)={0x8, 0x2, 0x0, [{0x8000, 0x51a5, 0x10000, 0xff, 0xff, 0x1, 0x7}, {0x80, 0xfe, 0x8, 0x0, 0x8, 0x3, 0xff}]}) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x34, 0x0, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x100}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x8001) 05:22:57 executing program 2: connect$bt_sco(0xffffffffffffffff, &(0x7f0000000000), 0x8) 05:22:57 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x2080000001}) [ 3444.898620] FAULT_INJECTION: forcing a failure. [ 3444.898620] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 3444.905083] FAULT_INJECTION: forcing a failure. [ 3444.905083] name failslab, interval 1, probability 0, space 0, times 0 05:22:57 executing program 2: connect$bt_sco(0xffffffffffffffff, &(0x7f0000000000), 0x8) [ 3444.989512] CPU: 1 PID: 18310 Comm: syz-executor.5 Not tainted 4.14.225-syzkaller #0 [ 3444.998972] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3445.010275] Call Trace: [ 3445.013240] dump_stack+0x1b2/0x281 [ 3445.017585] should_fail.cold+0x10a/0x149 [ 3445.022884] __alloc_pages_nodemask+0x22c/0x2720 [ 3445.028956] ? lock_acquire+0x170/0x3f0 [ 3445.033667] ? ion_page_pool_alloc+0x28/0x1b0 [ 3445.042910] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3445.049608] ? ion_page_pool_alloc+0x9e/0x1b0 [ 3445.056537] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 3445.063943] ? __mutex_unlock_slowpath+0x75/0x770 [ 3445.069941] alloc_pages_current+0x155/0x260 [ 3445.075688] ion_page_pool_alloc+0x118/0x1b0 [ 3445.082360] ion_system_heap_allocate+0x133/0x8c0 [ 3445.088252] ? ion_alloc+0x187/0x810 [ 3445.093105] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 3445.099503] ? ion_system_contig_heap_create+0x130/0x130 [ 3445.106626] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 3445.112973] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 3445.118084] ion_alloc+0x204/0x810 [ 3445.122229] ? ion_dma_buf_release+0x40/0x40 [ 3445.127811] ? __might_fault+0x177/0x1b0 [ 3445.132318] ion_ioctl+0xea/0x1f0 [ 3445.136584] ? ion_query_heaps+0x360/0x360 [ 3445.141833] ? SyS_write+0x1b7/0x210 [ 3445.146776] ? ion_query_heaps+0x360/0x360 [ 3445.152444] do_vfs_ioctl+0x75a/0xff0 [ 3445.156433] ? ioctl_preallocate+0x1a0/0x1a0 [ 3445.161626] ? lock_downgrade+0x740/0x740 [ 3445.167259] ? __fget+0x225/0x360 [ 3445.172475] ? do_vfs_ioctl+0xff0/0xff0 [ 3445.178005] ? security_file_ioctl+0x83/0xb0 [ 3445.183369] SyS_ioctl+0x7f/0xb0 [ 3445.188162] ? do_vfs_ioctl+0xff0/0xff0 [ 3445.193321] do_syscall_64+0x1d5/0x640 [ 3445.197895] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3445.205727] RIP: 0033:0x465f69 [ 3445.209380] RSP: 002b:00007f747b89a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3445.219589] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 3445.229652] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 3445.239142] RBP: 00007f747b89a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3445.247509] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3445.257915] R13: 00007ffe6eac26ff R14: 00007f747b89a300 R15: 0000000000022000 [ 3445.269253] CPU: 0 PID: 18313 Comm: syz-executor.1 Not tainted 4.14.225-syzkaller #0 [ 3445.279620] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 05:22:57 executing program 0: socketpair(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f0000000380)={&(0x7f0000000180), 0xc, &(0x7f0000000200)={0x0, 0x44}}, 0x0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x34, 0x0, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x100}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x8001) [ 3445.290946] Call Trace: [ 3445.293874] dump_stack+0x1b2/0x281 [ 3445.298625] should_fail.cold+0x10a/0x149 [ 3445.305501] should_failslab+0xd6/0x130 [ 3445.310037] kmem_cache_alloc_trace+0x29a/0x3d0 [ 3445.315763] ion_alloc+0x187/0x810 [ 3445.322947] ? ion_dma_buf_release+0x40/0x40 [ 3445.329903] ? __might_fault+0x177/0x1b0 [ 3445.335270] ion_ioctl+0xea/0x1f0 [ 3445.339358] ? ion_query_heaps+0x360/0x360 [ 3445.344858] ? SyS_write+0x1b7/0x210 [ 3445.348695] ? ion_query_heaps+0x360/0x360 [ 3445.354286] do_vfs_ioctl+0x75a/0xff0 [ 3445.358718] ? ioctl_preallocate+0x1a0/0x1a0 [ 3445.362854] Bluetooth: hci4 command 0x0406 tx timeout [ 3445.364981] ? lock_downgrade+0x740/0x740 [ 3445.364998] ? __fget+0x225/0x360 [ 3445.365007] ? do_vfs_ioctl+0xff0/0xff0 [ 3445.365020] ? security_file_ioctl+0x83/0xb0 05:22:57 executing program 2: connect$bt_sco(0xffffffffffffffff, &(0x7f0000000000), 0x8) [ 3445.391130] SyS_ioctl+0x7f/0xb0 [ 3445.396000] ? do_vfs_ioctl+0xff0/0xff0 [ 3445.402493] do_syscall_64+0x1d5/0x640 [ 3445.409124] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3445.416896] RIP: 0033:0x465f69 [ 3445.422419] RSP: 002b:00007f5e926f0188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3445.433458] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 3445.444345] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 3445.455174] RBP: 00007f5e926f01d0 R08: 0000000000000000 R09: 0000000000000000 [ 3445.466482] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3445.478345] R13: 00007ffe3f1ecd6f R14: 00007f5e926f0300 R15: 0000000000022000 05:22:57 executing program 1 (fault-call:1 fault-nth:1): r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x2080000001, 0x32}) 05:22:57 executing program 2: socketpair(0x0, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$bt_sco(r0, &(0x7f0000000000), 0x8) 05:22:57 executing program 3 (fault-call:1 fault-nth:0): r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x2080000001, 0x32}) 05:22:57 executing program 0: socketpair(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x34, 0x0, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x100}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x8001) [ 3445.583966] FAULT_INJECTION: forcing a failure. [ 3445.583966] name failslab, interval 1, probability 0, space 0, times 0 [ 3445.647573] CPU: 0 PID: 18341 Comm: syz-executor.3 Not tainted 4.14.225-syzkaller #0 [ 3445.657735] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3445.673294] Call Trace: [ 3445.677901] dump_stack+0x1b2/0x281 [ 3445.682777] should_fail.cold+0x10a/0x149 [ 3445.691053] should_failslab+0xd6/0x130 [ 3445.695745] kmem_cache_alloc_trace+0x29a/0x3d0 [ 3445.700538] ion_alloc+0x187/0x810 [ 3445.704820] ? ion_dma_buf_release+0x40/0x40 [ 3445.709326] ? __might_fault+0x177/0x1b0 [ 3445.715410] ion_ioctl+0xea/0x1f0 [ 3445.721187] ? ion_query_heaps+0x360/0x360 [ 3445.726902] ? SyS_write+0x1b7/0x210 [ 3445.735963] ? ion_query_heaps+0x360/0x360 [ 3445.741825] do_vfs_ioctl+0x75a/0xff0 [ 3445.746069] ? ioctl_preallocate+0x1a0/0x1a0 [ 3445.753061] ? lock_downgrade+0x740/0x740 [ 3445.763185] ? __fget+0x225/0x360 [ 3445.766901] ? do_vfs_ioctl+0xff0/0xff0 [ 3445.773706] ? security_file_ioctl+0x83/0xb0 [ 3445.781693] SyS_ioctl+0x7f/0xb0 [ 3445.786494] ? do_vfs_ioctl+0xff0/0xff0 [ 3445.791141] do_syscall_64+0x1d5/0x640 [ 3445.796133] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3445.806617] RIP: 0033:0x465f69 [ 3445.811099] RSP: 002b:00007f1bd0f3a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3445.822399] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 3445.830412] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 3445.839982] RBP: 00007f1bd0f3a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3445.848785] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3445.857368] R13: 00007ffc0620265f R14: 00007f1bd0f3a300 R15: 0000000000022000 [ 3445.874761] FAULT_INJECTION: forcing a failure. [ 3445.874761] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 3445.891228] CPU: 0 PID: 18305 Comm: syz-executor.4 Not tainted 4.14.225-syzkaller #0 [ 3445.902897] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3445.917651] Call Trace: [ 3445.921288] dump_stack+0x1b2/0x281 [ 3445.925375] should_fail.cold+0x10a/0x149 [ 3445.931486] __alloc_pages_nodemask+0x22c/0x2720 [ 3445.938622] ? __lock_acquire+0x5fc/0x3f20 [ 3445.943828] ? trace_hardirqs_on+0x10/0x10 [ 3445.949389] ? trace_hardirqs_on+0x10/0x10 [ 3445.954805] ? deref_stack_reg+0x124/0x1a0 [ 3445.959662] ? __read_once_size_nocheck.constprop.0+0x10/0x10 [ 3445.965862] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3445.972377] ? trace_hardirqs_on+0x10/0x10 [ 3445.976984] ? unwind_next_frame+0xe54/0x17d0 [ 3445.983753] ? lock_acquire+0x170/0x3f0 [ 3445.988342] ? mem_cgroup_id_get_online+0xb0/0xb0 [ 3445.993620] ? check_preemption_disabled+0x35/0x240 [ 3445.999305] ? __unlock_page_memcg+0x4f/0x100 [ 3446.005051] alloc_pages_current+0x155/0x260 [ 3446.009804] __get_free_pages+0xb/0x40 [ 3446.014031] __tlb_remove_page_size+0x272/0x440 [ 3446.019370] unmap_page_range+0xf92/0x1ce0 [ 3446.024072] ? vm_normal_page_pmd+0x340/0x340 [ 3446.029356] unmap_single_vma+0x147/0x2b0 [ 3446.034390] unmap_vmas+0x9d/0x160 [ 3446.040736] exit_mmap+0x270/0x4d0 [ 3446.044474] ? SyS_remap_file_pages+0x6a0/0x6a0 [ 3446.049587] ? kmem_cache_free+0x23a/0x2b0 [ 3446.055786] ? __khugepaged_exit+0x29b/0x3c0 [ 3446.060272] mmput+0xfa/0x420 [ 3446.063965] do_exit+0x984/0x2850 [ 3446.067519] ? mm_update_next_owner+0x5b0/0x5b0 [ 3446.072641] ? get_signal+0x323/0x1ca0 [ 3446.077163] ? lock_acquire+0x170/0x3f0 [ 3446.081521] ? lock_downgrade+0x740/0x740 [ 3446.086374] do_group_exit+0x100/0x2e0 [ 3446.091505] get_signal+0x38d/0x1ca0 [ 3446.097410] ? check_preemption_disabled+0x35/0x240 [ 3446.103983] ? kick_process+0xe4/0x170 [ 3446.108038] do_signal+0x7c/0x1550 [ 3446.112636] ? fput+0xaa/0x140 [ 3446.116705] ? SyS_recvfrom+0x27f/0x340 [ 3446.120967] ? setup_sigcontext+0x820/0x820 [ 3446.125902] ? lock_downgrade+0x740/0x740 [ 3446.131162] ? wait_for_completion_io+0x10/0x10 [ 3446.136324] ? vfs_write+0x319/0x4d0 [ 3446.141190] ? fput+0xb/0x140 [ 3446.145044] ? exit_to_usermode_loop+0x41/0x200 [ 3446.149995] exit_to_usermode_loop+0x160/0x200 [ 3446.156738] do_syscall_64+0x4a3/0x640 [ 3446.160839] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3446.166389] RIP: 0033:0x465f69 [ 3446.175924] RSP: 002b:00007fbb52cf0188 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 3446.185183] RAX: fffffffffffffe00 RBX: 000000000056bf60 RCX: 0000000000465f69 05:22:58 executing program 5 (fault-call:2 fault-nth:2): r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) write$dsp(0xffffffffffffffff, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x80000001, 0x32}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(0xffffffffffffffff, 0x7a5, &(0x7f0000000000)={{@any, 0x7}, 0x1, 0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(0xffffffffffffffff, 0x7a4, &(0x7f00000000c0)={{@hyper}, 0x9, 0x3f}) [ 3446.194107] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 3446.202276] RBP: 00007fbb52cf01d0 R08: 0000000000000000 R09: 0000000000000000 [ 3446.210229] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3446.218026] R13: 00007ffc0aef8def R14: 00007fbb52cf0300 R15: 0000000000022000 [ 3446.279677] FAULT_INJECTION: forcing a failure. [ 3446.279677] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 3446.308799] CPU: 1 PID: 18350 Comm: syz-executor.5 Not tainted 4.14.225-syzkaller #0 [ 3446.319107] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3446.331455] Call Trace: [ 3446.334194] dump_stack+0x1b2/0x281 [ 3446.338186] should_fail.cold+0x10a/0x149 [ 3446.344804] __alloc_pages_nodemask+0x22c/0x2720 [ 3446.351063] ? lock_acquire+0x170/0x3f0 [ 3446.356381] ? ion_page_pool_alloc+0x28/0x1b0 [ 3446.360893] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3446.366822] ? ion_page_pool_alloc+0x9e/0x1b0 [ 3446.372469] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 3446.378879] ? __mutex_unlock_slowpath+0x75/0x770 [ 3446.384483] alloc_pages_current+0x155/0x260 [ 3446.389861] ion_page_pool_alloc+0x118/0x1b0 [ 3446.395541] ion_system_heap_allocate+0x133/0x8c0 [ 3446.403182] ? ion_alloc+0x187/0x810 [ 3446.408526] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 3446.419273] ? ion_system_contig_heap_create+0x130/0x130 [ 3446.427023] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 3446.433016] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 3446.442336] ion_alloc+0x204/0x810 [ 3446.447748] ? ion_dma_buf_release+0x40/0x40 [ 3446.457216] ? __might_fault+0x177/0x1b0 [ 3446.463121] ion_ioctl+0xea/0x1f0 [ 3446.467378] ? ion_query_heaps+0x360/0x360 [ 3446.473025] ? SyS_write+0x1b7/0x210 [ 3446.477828] ? ion_query_heaps+0x360/0x360 [ 3446.483173] do_vfs_ioctl+0x75a/0xff0 [ 3446.488444] ? ioctl_preallocate+0x1a0/0x1a0 [ 3446.497759] ? lock_downgrade+0x740/0x740 [ 3446.505041] ? __fget+0x225/0x360 [ 3446.509411] ? do_vfs_ioctl+0xff0/0xff0 [ 3446.513946] ? security_file_ioctl+0x83/0xb0 [ 3446.521437] SyS_ioctl+0x7f/0xb0 [ 3446.526075] ? do_vfs_ioctl+0xff0/0xff0 [ 3446.531501] do_syscall_64+0x1d5/0x640 [ 3446.537986] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3446.548128] RIP: 0033:0x465f69 [ 3446.551905] RSP: 002b:00007f747b89a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3446.565627] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 3446.574936] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 3446.586836] RBP: 00007f747b89a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3446.598617] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3446.610319] R13: 00007ffe6eac26ff R14: 00007f747b89a300 R15: 0000000000022000 05:22:58 executing program 0: sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x34, 0x0, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x100}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x8001) 05:22:58 executing program 2: socketpair(0x0, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$bt_sco(r0, &(0x7f0000000000), 0x8) 05:22:58 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nullb0\x00', 0x800, 0x0) ioctl$HDIO_GETGEO(r0, 0x301, &(0x7f0000000a00)) ioctl$BLKRESETZONE(r0, 0x40101283, &(0x7f0000000140)={0xffffffffffffffff, 0x3f}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000080)={@empty}, &(0x7f00000000c0)=0x14) openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x600040, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x2080000001, 0x32}) 05:22:58 executing program 3 (fault-call:1 fault-nth:1): r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x2080000001, 0x32}) 05:22:58 executing program 4: socketpair(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) getrusage(0x1, &(0x7f00000000c0)) recvfrom$llc(r0, 0x0, 0x0, 0x0, 0x0, 0x0) [ 3446.632143] Bluetooth: hci1 command 0x0419 tx timeout 05:22:58 executing program 0: sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x34, 0x0, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x100}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x8001) 05:22:58 executing program 2: socketpair(0x0, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$bt_sco(r0, &(0x7f0000000000), 0x8) [ 3446.678186] FAULT_INJECTION: forcing a failure. [ 3446.678186] name failslab, interval 1, probability 0, space 0, times 0 [ 3446.731516] Bluetooth: hci2 command 0x041b tx timeout [ 3446.748658] CPU: 0 PID: 18363 Comm: syz-executor.3 Not tainted 4.14.225-syzkaller #0 [ 3446.758056] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3446.770423] Call Trace: [ 3446.776280] dump_stack+0x1b2/0x281 [ 3446.780761] should_fail.cold+0x10a/0x149 [ 3446.787200] should_failslab+0xd6/0x130 [ 3446.793426] kmem_cache_alloc_node_trace+0x25a/0x400 [ 3446.801079] __get_vm_area_node+0xed/0x340 [ 3446.808054] vmap+0xd5/0x290 [ 3446.812220] ? ion_heap_clear_pages+0x23/0x70 [ 3446.818267] ? is_bpf_text_address+0xb8/0x150 [ 3446.825638] ? vunmap+0x50/0x50 [ 3446.830016] ? unwind_get_return_address+0x51/0x90 [ 3446.835814] ? entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3446.842654] ion_heap_clear_pages+0x23/0x70 [ 3446.849371] ion_heap_sglist_zero+0x165/0x220 [ 3446.854699] ? ion_heap_clear_pages+0x70/0x70 [ 3446.861781] ? kasan_kmalloc+0xeb/0x160 [ 3446.866460] ? kmem_cache_alloc_trace+0x131/0x3d0 [ 3446.872325] ? pagerange_is_ram_callback+0x100/0x100 [ 3446.879955] ? _ion_heap_freelist_drain+0x28b/0x410 [ 3446.888347] ion_system_heap_free+0x1d0/0x240 [ 3446.893845] ion_buffer_destroy+0x132/0x190 [ 3446.900329] _ion_heap_freelist_drain+0x293/0x410 [ 3446.906532] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 3446.914004] ion_alloc+0x244/0x810 [ 3446.919905] ? ion_dma_buf_release+0x40/0x40 [ 3446.925276] ? __might_fault+0x177/0x1b0 [ 3446.931507] ion_ioctl+0xea/0x1f0 [ 3446.936425] ? ion_query_heaps+0x360/0x360 [ 3446.942380] ? SyS_write+0x1b7/0x210 [ 3446.946788] ? ion_query_heaps+0x360/0x360 [ 3446.952744] do_vfs_ioctl+0x75a/0xff0 [ 3446.958479] ? ioctl_preallocate+0x1a0/0x1a0 [ 3446.964434] ? lock_downgrade+0x740/0x740 [ 3446.970534] ? __fget+0x225/0x360 [ 3446.974746] ? do_vfs_ioctl+0xff0/0xff0 [ 3446.979518] ? security_file_ioctl+0x83/0xb0 [ 3446.986037] SyS_ioctl+0x7f/0xb0 [ 3446.989904] ? do_vfs_ioctl+0xff0/0xff0 [ 3446.994893] do_syscall_64+0x1d5/0x640 [ 3447.000038] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3447.006031] RIP: 0033:0x465f69 [ 3447.012269] RSP: 002b:00007f1bd0f3a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3447.022481] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 05:22:59 executing program 1: openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x181001, 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x0, 0x0) read$sequencer(r0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x2080000001, 0x32}) 05:22:59 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = getuid() keyctl$get_persistent(0x16, r1, 0xfffffffffffffffe) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x2080000001, 0x32}) 05:22:59 executing program 1: socketpair(0x24, 0x800, 0x8, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bind$pptp(r0, &(0x7f0000000080)={0x18, 0x2, {0x1, @multicast1}}, 0x1e) sendmsg$nfc_llcp(r1, &(0x7f0000000480)={&(0x7f0000000200)={0x27, 0x1, 0x1, 0x6, 0x40, 0x2, "d29e7eb52747a98801667e1b81252529df384e9bb4c31e2d68152b3f57b294a8ee01f6fe01decd7c996c04d1c1845da99c0e486b3b7ccdb498fb146d5476ac", 0x38}, 0x60, &(0x7f0000000440)=[{&(0x7f0000000280)="e0726f844e30c9510bcf5569f81311b2672c6522cc07bfaafc0614fd8114b8ffd99dc83942b4a183529254e7193756aace6ed2cd0c523d11018c8e364cf231086529318631adc0a5e2bf2676a825fa9a196c9e493c08081731a65591bcbb8d7c007a061bdfb92bfb90b06165e9907a13886071f03876c66b9b25b6ab5e72bc03694f59dbb88d5b25a1c78c4c67fbead76616933852ca871763ffc355a28bc85b408f792f9d838940cf264ac62ec618db2f6f100625b0f9f88ae4d6ce5fb9a1ba068118aabaefa43c03cf909110a4225e82fa73bb3e1edc8db52dacef8e4770d3502030652119", 0xe6}, {&(0x7f0000000380)="11c1ee8272cf94b3dd4c8128cb46a23cec35465e0fe8d77b17fe44dfe6f33fdd16bd5f76591cc964e85f8e8c98aae4258ffe6505360a0fbaa43ec077dce059e2b285fe31dfb6a1d0dd6981c25fefe93f750289283f14208f85ed802d4b0f9948b47274aa129ad69172", 0x69}, {&(0x7f0000000400)="c974dd1fcd", 0x5}], 0x3, 0x0, 0x0, 0x800}, 0x4000) ioctl$SNDCTL_SEQ_CTRLRATE(0xffffffffffffffff, 0xc0045103, &(0x7f00000000c0)=0x1) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(0xffffffffffffffff, 0x7a5, &(0x7f0000000140)={{@any, 0x7}, 0x1, 0x2, 0x3}) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000040)={0x2080000001, 0x30, 0x1}) r3 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x1000, 0x80880) ioctl$IOC_PR_PREEMPT_ABORT(r3, 0x401870cc, &(0x7f00000001c0)={0x800, 0x10000, 0x174c, 0xffffffff}) 05:22:59 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vmci\x00', 0x2, 0x0) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r1, 0x7b2, &(0x7f0000000080)={&(0x7f0000000140)=[0xa1c, 0x581, 0x200, 0x3, 0x5, 0x40, 0x6f5, 0x0, 0x4, 0x80000001, 0x8000, 0x42aee68e, 0x8000, 0x8000, 0x61, 0x2, 0x9, 0x0, 0xae2b, 0x2, 0x5d0bae32, 0x3, 0x3, 0x5, 0x4, 0x8, 0x6, 0x81, 0x7e9, 0x401, 0x2, 0x0, 0xfc000000, 0x7008020a, 0x4, 0x4, 0x4, 0x3, 0x80000000, 0x3f, 0x1, 0x8, 0x20, 0x0, 0x0, 0x40, 0x6, 0xfff, 0x7, 0x9, 0x6d, 0x7, 0xfffffff7, 0x200, 0x5, 0x8, 0x9, 0x8001, 0x8, 0x80000000, 0x8, 0x0, 0x7, 0x5, 0xd03, 0x7, 0x800, 0x5, 0x3, 0x9, 0x3, 0x3, 0x1, 0xff, 0x7, 0x4ca4, 0x4, 0x2, 0x7fffffff, 0x3, 0x7ff, 0x9, 0x401, 0x0, 0x8, 0x3, 0x4, 0x5, 0x5, 0xfffff800, 0x1e, 0x9, 0x6, 0x9, 0x19, 0x1000, 0x70d9648b, 0x401, 0x0, 0x4, 0x401, 0x0, 0x8, 0x2, 0x80000000, 0x80000001, 0x9, 0x401, 0x2, 0x7fffffff, 0x6, 0x1, 0x7fffffff, 0x7fff, 0x2, 0x81, 0x8, 0x6ac, 0x10000, 0x6, 0x3, 0x10000, 0x1, 0x11f0, 0x64, 0x6, 0x3, 0x1, 0x1d9, 0xad18, 0x6, 0x9, 0x57e93396, 0x1, 0x8, 0x5, 0xe1f7, 0x9fc, 0x200000, 0x80000001, 0x1, 0x80, 0x5af0, 0x4, 0x7fffffff, 0x10000, 0x6, 0x5, 0x7, 0x9, 0x8, 0x65485f02, 0xbd67, 0xfffffffc, 0x6, 0x7, 0x0, 0x4, 0x400, 0x9, 0x101, 0xfff, 0x9, 0x5, 0x9, 0x800, 0x4, 0x5, 0x5, 0x9, 0x7f840f98, 0x800, 0xab, 0x3, 0x4, 0x7fff, 0x40, 0xfffffffa, 0xfffffeff, 0x40, 0x1000, 0x5, 0x1, 0x3, 0x9, 0x8000, 0x9, 0x4, 0x9, 0xfffffff7, 0x9, 0xfffffffd, 0xccb, 0x9, 0x3, 0x0, 0x7, 0xffff, 0x2, 0xff, 0x6, 0xb7, 0x80, 0x5, 0x7f, 0xb8e, 0x6, 0x23, 0x7ff, 0x8, 0x8, 0x2, 0x1, 0x2, 0xfffffffb, 0x7, 0x5, 0x3, 0x10001, 0x8, 0xdcf8, 0xe0000000, 0xb26e, 0x1ff, 0xffff, 0xfffff492, 0x1, 0x0, 0x7, 0x3, 0x6, 0x7, 0xd3aa, 0x3f, 0x8, 0x200, 0x9, 0x0, 0x6, 0x6, 0x400, 0x5, 0x9, 0x0, 0x4a22650a, 0x7, 0x7f, 0x82, 0x3, 0x3, 0x1000, 0xfc000000, 0x2, 0xfffffff9, 0x5, 0xe0, 0x9, 0x1, 0x9, 0x7f, 0x7fffffff, 0x3, 0x1d4, 0x1ff, 0x7, 0x4, 0x6, 0x7a014343, 0x1ff, 0x0, 0x200, 0xdf, 0x3, 0x3ff, 0x1, 0x933, 0x7495, 0x3, 0x8, 0x4, 0x100, 0x3ff, 0x8, 0x4, 0x8000, 0x80000000, 0xffff, 0x7fffffff, 0xba, 0x80000001, 0x1, 0x7fffffff, 0x6, 0xf04, 0x0, 0x0, 0x2, 0x0, 0x16, 0x8001, 0x6, 0x8, 0xffffffff, 0x7f, 0x9, 0x80000000, 0x0, 0x1, 0xdf7, 0x2, 0x40, 0x5, 0xfffff53f, 0x5, 0x3, 0x9, 0x6, 0x80, 0x2, 0x4, 0x6, 0x80, 0x6, 0x2, 0x0, 0x1, 0x80, 0x8, 0x101, 0x3, 0x4, 0xb3e, 0x7f, 0x3, 0x7, 0x1, 0x7, 0x6, 0x400, 0xaad, 0x6, 0x1, 0x1f, 0x100, 0x5, 0x7, 0x1, 0x4, 0x0, 0x7, 0x2, 0x6, 0x200, 0x5, 0x0, 0xc184, 0x1e52a57b, 0x1, 0xff, 0x7, 0x6, 0x2, 0x2194, 0x7, 0x7a, 0x6, 0x1, 0x6, 0xffff, 0xfffffffb, 0x6, 0xffffff48, 0x2, 0x2, 0x4, 0x6, 0xff, 0x7, 0xba, 0x8, 0x3ff, 0xff, 0x3, 0x7, 0x800, 0x3d15, 0x0, 0x7f, 0xffff8000, 0x10cc73a, 0x3, 0x2, 0x200, 0xfff, 0x7, 0x10001, 0x0, 0x1ff, 0x4, 0xfff, 0xffff0001, 0x10001, 0x1f, 0x0, 0x2, 0x9, 0x80000000, 0x6, 0x0, 0x6, 0x2, 0x8001, 0x4b, 0x5, 0x3, 0x401, 0x1f63, 0x4, 0x0, 0x9, 0x5, 0x2, 0x751e091c, 0x3, 0x8, 0x9, 0xc6a, 0xffff8001, 0x8, 0x6, 0x9, 0x8, 0x400, 0x4, 0x6, 0x0, 0xfffffff8, 0x7, 0x9, 0x0, 0x401, 0x5, 0x9, 0x8001, 0x1, 0x6, 0x80, 0x80, 0x0, 0x1, 0xffffffab, 0x67, 0xffffffd2, 0x1, 0x3, 0x7fffffff, 0x3, 0x80, 0x7, 0x0, 0x2, 0x5, 0x9, 0x0, 0x80000001, 0xe4f, 0x9, 0x0, 0xc2, 0x100, 0x101, 0xbd, 0x67b4, 0x200, 0x7f, 0x3ff, 0x4, 0xd86, 0xb1, 0x7, 0x9, 0x5d6, 0x8, 0x2, 0x1ff, 0xb84, 0x6, 0x85, 0x4, 0x2552, 0x8, 0x100, 0x0, 0x9, 0x7fff, 0x80000001, 0x80, 0x1, 0x80, 0x2000000, 0x10001, 0x8, 0x1, 0x6, 0x3, 0x2, 0x1f, 0xfffffffe, 0x6, 0x10001, 0xfffff800, 0x4, 0x6, 0x6, 0x3, 0x6, 0x1, 0x8, 0xd4, 0x4, 0xffffffe0, 0x7, 0x4, 0x4, 0x4, 0x4, 0x0, 0x2fe, 0x249b, 0xbd0, 0x20000000, 0x8, 0xc3, 0x6, 0x6, 0x7ff, 0x10001, 0xff, 0x400, 0x1, 0x8, 0x80, 0x6, 0xffff000, 0x10000, 0x5, 0x0, 0xa79, 0x100, 0xc7e, 0xe4, 0x0, 0x85, 0x2, 0x67, 0x401, 0xffff, 0xfffffeff, 0x51, 0x100, 0x7, 0x8, 0x9, 0x8, 0x10000, 0x4, 0x8000, 0xc94, 0xff, 0x0, 0x7f, 0x7, 0x494ad02f, 0x8, 0x200, 0x2, 0x0, 0x7896, 0x4, 0x61c, 0x4, 0x5, 0x0, 0x6, 0x9, 0x4, 0x3, 0x4, 0xb16e, 0x97, 0x7, 0x789d, 0xf506, 0x5, 0x80000000, 0x6, 0x5, 0xffffaf2d, 0x1, 0x7, 0xc57, 0x6, 0x3, 0x6, 0x30d5, 0x1, 0x27, 0x67, 0x400, 0x7ff, 0x5032bd63, 0x9, 0x10000, 0x1, 0xfffff97d, 0xfff, 0x3ff, 0x5, 0x2df, 0x8, 0x7ff, 0x8, 0x4, 0x9a91, 0x97d, 0xffff, 0x7, 0xffff, 0x1, 0x1f, 0x3, 0x8001, 0x8, 0xffffff8c, 0x8, 0x81, 0x4, 0x8, 0x0, 0xffffffff, 0x401, 0x3, 0x99d, 0x9, 0x6, 0xbc, 0x20, 0x6, 0x3, 0x3, 0x6, 0xfffffffb, 0x81, 0x8, 0x2, 0x5, 0x1, 0x13c, 0x5, 0x6, 0x401, 0x512, 0x3, 0x7fff, 0x2, 0x8001, 0x5, 0x80, 0x31, 0x0, 0xfffeffff, 0x0, 0x200, 0x40, 0xc5d, 0x61, 0x1, 0xff, 0x6, 0x0, 0x3, 0xfffff708, 0x7f, 0x1, 0x4, 0xe72e, 0x7, 0x0, 0x6, 0x0, 0x9, 0x3, 0x9, 0x2bb68a1e, 0x3f, 0x81, 0x8, 0x4, 0x297, 0x1000, 0x9f5, 0x3, 0x5, 0x7, 0x27c8, 0x8001, 0xffffffff, 0x8, 0x5, 0x81, 0x88b, 0x91, 0x98e, 0x9, 0xc57e, 0x2, 0x400, 0x8b, 0x1f, 0xdb, 0x0, 0x7, 0x9, 0x5, 0x5, 0x0, 0x3, 0x200, 0xfffffffd, 0xbdb, 0x0, 0x2, 0x97, 0x1ad1, 0x1, 0x10000, 0x8, 0x3, 0x14a, 0x601b, 0x9, 0xfffffffc, 0xfff, 0x6, 0x4, 0x4, 0x7, 0x7f, 0x9, 0x81, 0x2, 0x200, 0x400, 0x3f, 0x80, 0x353b, 0x0, 0xffff32f1, 0x10, 0x1, 0x1, 0x3, 0x0, 0x8, 0x3, 0x200000, 0x0, 0x400, 0x7, 0x1000, 0x836, 0x200, 0x6, 0x0, 0x5, 0xe5, 0x0, 0x7f, 0x9, 0x5, 0xdb, 0x7fff, 0x3, 0x3, 0xe82, 0x2, 0x9, 0x7, 0x2, 0x6, 0x6704, 0x3, 0x70, 0x1a28, 0x3, 0x5, 0x91a, 0x8, 0x1000, 0x1000, 0x80000001, 0x0, 0x215, 0x0, 0x5, 0x5, 0x3, 0x9, 0x10000, 0x4, 0x5, 0x10000, 0x6, 0x2, 0x800, 0x7, 0x6, 0x8, 0x5, 0x1, 0x7, 0x81, 0x7fff, 0x3, 0x8, 0x6, 0x1, 0x7fffffff, 0x8, 0xfffffeff, 0x3, 0x400, 0x1, 0x20, 0x20, 0x986, 0x4, 0x3b, 0x9, 0x2, 0xffffffff, 0x0, 0x6, 0x3, 0x2, 0x2, 0x1, 0x8001, 0x6, 0x5, 0xfffffffb, 0xf2b, 0x4, 0x0, 0x86, 0x0, 0x3, 0x8, 0x3f, 0x100, 0x6, 0x3ff, 0x7ff, 0x3, 0xfffffffb, 0x3, 0x3ff, 0x1, 0x8, 0xfffffffc, 0x1, 0xaf, 0x8, 0x1b, 0x8, 0x0, 0xf9be, 0x10, 0xd85f, 0x101, 0x3, 0xfff00000, 0x3, 0x40, 0x6, 0xab700000, 0x7, 0x2, 0x3ff, 0x80000001, 0x10000, 0x0, 0x2, 0xffffffff, 0x27, 0x6, 0x63f, 0x4, 0x0, 0x4, 0xa7, 0x401, 0x9, 0x3, 0xb, 0x4, 0x2, 0x401, 0x10000, 0x7, 0x4, 0x41, 0xb929, 0x1, 0x1, 0xfffffffc, 0x401, 0x7, 0x0, 0xff, 0x8, 0x401, 0x39, 0x200, 0xa5, 0xa95, 0x0, 0x0, 0x0, 0x8000, 0xa00, 0x0, 0x6, 0x6, 0xff, 0xff, 0x400, 0x9, 0x200, 0x1, 0x7, 0x9, 0x5, 0x299, 0x4, 0x6, 0xec0, 0x7fffffff, 0x2, 0x5, 0xaed, 0xb4, 0x400, 0x3f, 0xffffffff, 0x18fd, 0x3, 0x5, 0x40, 0x3, 0x200, 0x3, 0x7, 0x7, 0xfff, 0x5, 0x2, 0x8, 0xfffffffb, 0x0, 0x6, 0x401, 0x6, 0x4, 0xb8bb, 0x7, 0x6fd2bfd4, 0x1, 0x3ff, 0x7f, 0x1, 0x9ff, 0x3, 0xbf, 0x8, 0x5, 0x9, 0x5, 0xd465, 0x9, 0x2, 0x400, 0x1, 0xffffffff, 0x0, 0x6, 0x2, 0x6, 0x1, 0xffffffff, 0xffffff4d, 0x4, 0x0, 0x1, 0xffffffab, 0x400, 0xbf, 0xfffffff8, 0x200, 0xfffffe46, 0x8, 0x400, 0x0, 0x40, 0x80000000, 0x7ff, 0x1000, 0x6, 0x1ff, 0xffffff73, 0x3, 0x0, 0x9, 0x7], 0x1, 0x400, 0x6, 0x80}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x2080000001, 0x32}) [ 3447.033071] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 3447.043295] RBP: 00007f1bd0f3a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3447.053611] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3447.062359] R13: 00007ffc0620265f R14: 00007f1bd0f3a300 R15: 0000000000022000 [ 3448.811855] Bluetooth: hci2 command 0x040f tx timeout 05:23:02 executing program 2: socketpair(0x1, 0x0, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$bt_sco(r0, &(0x7f0000000000), 0x8) 05:23:02 executing program 4: socketpair(0x6, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) recvfrom$llc(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nullb0\x00', 0x800, 0x0) ioctl$HDIO_GETGEO(r2, 0x301, &(0x7f0000000a00)) ioctl$BLKFRASET(r2, 0x1264, &(0x7f0000000000)=0x40) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nullb0\x00', 0x800, 0x0) ioctl$HDIO_GETGEO(r3, 0x301, &(0x7f0000000a00)) ioctl$IOC_PR_PREEMPT(r3, 0x401870cb, &(0x7f0000000080)={0x100000001, 0x7, 0x101, 0xf4d}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140)='batadv\x00', 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="65cb00000000000000000c00000008000300", @ANYRES32=r7, @ANYBLOB="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"], 0x1c}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f0000000140)={'ip6_vti0\x00', r7, 0x2f, 0x80, 0x0, 0x380, 0x4, @ipv4={[], [], @multicast1}, @empty, 0x8, 0x10, 0xc6f, 0xff}}) 05:23:02 executing program 0: sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x34, 0x0, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x100}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x8001) 05:23:02 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x70880, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x2080000001, 0x32}) 05:23:02 executing program 5: openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) write$dsp(0xffffffffffffffff, 0x0, 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x0, 0x0) read$sequencer(r0, 0x0, 0x0) r1 = add_key$fscrypt_v1(&(0x7f0000000000)='logon\x00', &(0x7f0000000080)={'fscrypt:', @desc1='0000111122223333'}, &(0x7f00000000c0)={0x0, "01ebdc000000000000a7fdef5b815e85c96fffefe558d2eb84a32160aaf272d5cdad41dc7e0408000000002c7533ba99425d6dc4b4786c5900"}, 0x48, 0xfffffffffffffffe) keyctl$describe(0x6, r1, &(0x7f00000001c0)=""/32, 0x20) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x0, 0x0) r3 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio1\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_GETIPTR(r3, 0x800c5011, &(0x7f0000000080)) ioctl$SOUND_PCM_READ_BITS(r3, 0x80045005, &(0x7f0000000140)) read$sequencer(r2, 0x0, 0x0) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvram\x00', 0xcc180, 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000040)={0x80000000, 0x30}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(0xffffffffffffffff, 0x7a5, &(0x7f0000000000)={{@any, 0x1f}, 0x1, 0x2, 0x6}) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(0xffffffffffffffff, 0x7a4, &(0x7f00000000c0)={{@hyper}, 0x9, 0x3f}) r5 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) sendmmsg$nfc_llcp(r5, &(0x7f0000003e00), 0x0, 0x5) r6 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio1\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_GETIPTR(r6, 0x800c5011, &(0x7f0000000080)) ioctl$SNDCTL_DSP_GETFMTS(r6, 0x8004500b, 0xffffffffffffffff) 05:23:02 executing program 3 (fault-call:1 fault-nth:2): r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x2080000001, 0x32}) 05:23:02 executing program 2: socketpair(0x1, 0x0, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$bt_sco(r0, &(0x7f0000000000), 0x8) 05:23:02 executing program 1: ioctl$RFKILL_IOCTL_NOINPUT(0xffffffffffffffff, 0x5201) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x2080000001, 0x32}) ioctl$SNDCTL_SEQ_THRESHOLD(0xffffffffffffffff, 0x4004510d, &(0x7f0000000000)=0x7) 05:23:02 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x2080000001, 0x32}) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x90080, 0x0) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vmci\x00', 0x2, 0x0) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r2, 0x7b2, &(0x7f0000001200)={&(0x7f0000000200)=[0x4, 0x7f, 0x9, 0xfffffffc, 0x0, 0x200, 0x800, 0x40, 0x4, 0x9, 0xff, 0x3e7, 0x800, 0x9, 0xfffffff9, 0x6f3, 0x9, 0x9, 0x7, 0x1, 0x40, 0x800, 0x0, 0x9, 0x3, 0x1495, 0x8, 0x4b7, 0x81, 0x9, 0x8, 0x4, 0xb544, 0x7f, 0x3, 0x5ce3a3ab, 0x1, 0x80, 0x2, 0x6, 0x7, 0xfffffc1a, 0x7, 0x101, 0x6, 0xfffffff7, 0x400, 0x1ff, 0x5, 0x2, 0xffffffff, 0x80, 0xc4, 0x9, 0x3ff, 0x0, 0x7ff, 0x2, 0xdb2, 0x100, 0x0, 0x8, 0x9, 0x7fffffff, 0x4, 0x1ff, 0x5, 0x6, 0xffff, 0x80, 0x3, 0xb7fc, 0x9, 0xa20d, 0x5, 0x6, 0xffffffff, 0x0, 0x7, 0x6, 0x2, 0xffffffff, 0x2, 0x8, 0x7fff, 0x401, 0x7, 0x6, 0xfffffdb5, 0x7, 0x0, 0x2, 0x5, 0x3f, 0x4, 0x6, 0x470, 0x8000, 0xc0000, 0x4227, 0x8, 0x2, 0xff, 0x5, 0xcbaa, 0x10000, 0x64b, 0x8001, 0x6, 0x5, 0x979, 0xffffffb3, 0x5, 0x46, 0x1, 0x1ff, 0x7, 0xfffffba0, 0x3, 0x785c527f, 0x6, 0x3f, 0x7, 0x1ff, 0x9e, 0xd0dc, 0x8, 0x4, 0x6, 0x8, 0x800, 0x8, 0x5, 0xde2, 0x200, 0xfffffffb, 0x9, 0x3, 0x81, 0xfdf, 0x5, 0x6, 0x4, 0x7f, 0x3, 0x1, 0x0, 0x7, 0x401, 0x0, 0x0, 0x0, 0x7f, 0x1f, 0x100, 0x5, 0x9, 0x101, 0x8, 0x18, 0x80, 0x80, 0x4, 0x3, 0x8, 0x3ff, 0x9, 0x80000000, 0x498, 0x7, 0x6, 0x3, 0x9, 0x4, 0x2, 0x0, 0x8000, 0x0, 0xd5e, 0x7f, 0xfd, 0x80000001, 0xffffffff, 0x9, 0x10, 0xfff, 0xfffffffa, 0x4, 0x10001, 0xfff, 0x7fff, 0x4, 0xfffffffc, 0x7, 0x3, 0x1000, 0x1000, 0x20, 0xf451, 0xdc4, 0xfffff800, 0x9, 0xff, 0x4, 0xe00000, 0x3, 0x0, 0x2261, 0x1, 0xffffffff, 0xfffffffe, 0x40, 0x3f, 0x0, 0x3f, 0xfffffffc, 0xacbf, 0x8, 0x6, 0x3f, 0x2, 0x23a9ff47, 0x2f, 0x2, 0x7, 0x0, 0x3, 0xbc, 0x9, 0x4, 0x5, 0x4, 0x27, 0x4, 0x7998, 0x9, 0x1ff, 0x6, 0x3ff, 0x1, 0x3f, 0xd23f, 0x4, 0x10001, 0x1000, 0x1, 0x4000, 0x400, 0x1d0, 0x7, 0xfffffff7, 0xffffff00, 0x0, 0x7, 0x7, 0x7, 0xfff, 0x10001, 0x1, 0x25b, 0x1000, 0x1, 0x20, 0x2, 0x40, 0x2, 0x7, 0x10001, 0x6, 0x5, 0x7, 0x7fffffff, 0x1000, 0x9, 0x0, 0xffff, 0xfffffffa, 0x3f, 0x0, 0x200040, 0x7, 0x2, 0x5a29, 0x9, 0x40, 0x80000001, 0x186, 0x7, 0x0, 0x7, 0x5, 0x9, 0x40, 0xfffffffd, 0x5, 0x80000000, 0x4, 0xc637, 0xffff, 0x0, 0x3c9, 0x6dca0bec, 0x5, 0xb65, 0x0, 0xa, 0x1, 0x100, 0xb6d5, 0x4, 0xfffff092, 0x1, 0x8, 0x36, 0x3ff, 0xb8, 0x4, 0x10000, 0xffff, 0x7, 0x9, 0xfff, 0x7, 0x80000000, 0x1, 0x14, 0x8, 0x80000000, 0xd6b4, 0x2, 0x8e9, 0x1f, 0x1, 0x1, 0xa0000000, 0x101, 0x6, 0x9a, 0x20, 0x2e400000, 0x0, 0x5ef1, 0x6, 0x800, 0x5, 0x8, 0x0, 0x1, 0x5, 0x6, 0x1000, 0x6, 0xc6, 0x1, 0x0, 0x2, 0x770, 0x10000, 0x8, 0x3f, 0x5, 0xa38a, 0x4, 0xffffffff, 0x97f, 0xfffffffe, 0x3, 0x8, 0x3, 0x8, 0x65, 0x4, 0xc7bc, 0x2, 0x7fff, 0x30000000, 0x6, 0x7fff, 0xffff, 0xdb45, 0x7, 0x85d7, 0x80, 0x5, 0x4, 0x7, 0x6d1f7391, 0x5, 0x7fff, 0x200, 0x2, 0x0, 0xb40, 0x9, 0x200, 0x2c2, 0x2, 0x30000, 0x5, 0x8001, 0xfffffbff, 0x3f, 0xc85, 0x800, 0x7ff, 0xffffffff, 0x6, 0x0, 0x3, 0x1, 0x1, 0x4, 0x4, 0xf7f, 0x25, 0x94, 0x2, 0x1, 0x2, 0x0, 0x6, 0x100, 0xe8, 0xd000, 0xff, 0x4, 0x8, 0xf47a, 0x1, 0x8001, 0xb07, 0x101, 0xa690, 0x1, 0x6, 0x100, 0x5, 0xffffffff, 0x8, 0xa9, 0x81, 0x0, 0x6, 0xd206, 0x75e3, 0xa6e, 0x6, 0x89d6, 0x4, 0x9, 0x7, 0x6, 0x2, 0xfffffff9, 0x8b, 0xfffffc5f, 0x5, 0x540a, 0x80000001, 0x9, 0x5, 0xfff, 0x4, 0x9, 0x7, 0x4, 0x2, 0x2e, 0x401, 0xfffffcd9, 0x3, 0x7eb, 0x4, 0x0, 0x2, 0x1f, 0x3, 0x8000, 0x200, 0x5, 0x4, 0x98e, 0xffffffff, 0xffffffff, 0x9, 0x6, 0x4, 0x549febe0, 0x5, 0x40, 0xf4c, 0xc6, 0x3, 0x0, 0x1, 0x0, 0x5, 0x800000, 0x40, 0x7, 0x0, 0x2, 0x96fc, 0x5, 0x5, 0x4aab, 0x8, 0x81, 0xdad, 0x9, 0x9, 0xc43, 0x7, 0x5, 0x80, 0x3, 0x9, 0x80000000, 0x7, 0x0, 0x8000, 0x80000000, 0x5, 0xff, 0x9, 0x80000001, 0x400, 0x8, 0xaa, 0x0, 0xffff8001, 0x1, 0x5, 0x1, 0x99b, 0x212, 0x9, 0x1000, 0x7, 0x3, 0x3f, 0x80000000, 0x0, 0x0, 0x40, 0x80000000, 0x6a, 0x6, 0x10000, 0x9, 0x1ec0, 0x7, 0x2, 0x0, 0xfffff801, 0x9, 0x3, 0x3, 0xfff, 0x15, 0x567, 0x8, 0x3ff, 0x1, 0x6, 0x6f1, 0x5, 0x8, 0x6, 0x1, 0x80000001, 0xc26, 0x3, 0x2, 0x9, 0x2d, 0x3, 0x8001, 0x3ff, 0x4, 0x13, 0x2, 0x9, 0x1, 0x401, 0x7, 0x5, 0x4000000, 0x3f, 0x7, 0x2655, 0x400, 0x1, 0x9, 0x4, 0x2c38, 0x3, 0x3, 0x1, 0x1f, 0x1, 0x6, 0xd0000, 0xff, 0x1000, 0x7572a4ec, 0x2, 0x4, 0x48, 0x6, 0x1, 0x3, 0x0, 0x324, 0xbf02, 0x80000000, 0xd6cc, 0x100, 0xccf, 0x7e48, 0x8, 0x1000, 0xfffffbff, 0x5, 0x5, 0x2, 0x1, 0x2, 0x6, 0x2, 0xffffff7f, 0x1, 0x9, 0x3, 0x4, 0x8, 0xb6b, 0x400, 0x6, 0x8000, 0x0, 0x8, 0x80000001, 0x6, 0xa23, 0x5, 0x3, 0xffff, 0x6, 0xffff, 0x1, 0x9, 0x40, 0x8, 0x2, 0x401, 0x200, 0x2, 0x100, 0x1, 0x6, 0x7, 0xf51, 0xff, 0x9, 0x5, 0x2, 0x3f, 0x4, 0x1ff, 0x1, 0x933b, 0x0, 0x1, 0x3f, 0x7, 0x80, 0x4, 0xfffffff7, 0x20, 0x1fe00000, 0xfffff001, 0x2c8, 0xee, 0xffff, 0x8, 0x8, 0xff, 0x5, 0x0, 0x80000000, 0x5, 0x1, 0xfffffffc, 0xffffffc1, 0x6, 0x7f, 0xf1cc, 0xff, 0x3523, 0x2, 0x4, 0x8, 0x6, 0x5, 0x0, 0xffff, 0x5, 0x7, 0x2, 0x8000, 0x6, 0x100, 0x1, 0x1f, 0x4, 0x0, 0x1, 0x1, 0x2, 0xcd839cc, 0x5, 0x8, 0xd34, 0x0, 0x9, 0x7fff, 0x1, 0x0, 0xffff, 0x1, 0x7f, 0xa1d, 0x4, 0x8, 0x7, 0x62f, 0xa550, 0xac, 0x7fff, 0x7, 0x28, 0x1, 0x500d, 0x0, 0x1, 0x1ff, 0x401, 0x2, 0x2, 0xdd9, 0x0, 0x2, 0x4e1, 0x2, 0x7, 0xff, 0x2, 0x2, 0x9, 0x9, 0x9, 0xfffffff7, 0x400, 0xc2d, 0x0, 0xeb, 0xb0d, 0x6, 0x7, 0x8, 0x5, 0x8, 0x1, 0x6, 0x3, 0x2, 0x2, 0x8, 0x6a9e, 0x1f, 0x9e1a, 0x9, 0x80000001, 0x9, 0xf40, 0x8, 0x0, 0x6, 0xfffffe00, 0xfff, 0x100, 0x4, 0x10001, 0x0, 0x2, 0x2, 0x7, 0x81, 0xf92, 0x7, 0x10928, 0x4, 0x0, 0x2, 0x10ac00, 0x68, 0x9, 0x8, 0xe1, 0x10000, 0x5, 0x101, 0x5, 0x10, 0x1, 0x7, 0x3, 0x3, 0x9, 0x8, 0x8, 0xffffff7f, 0x3ff, 0x8, 0x2, 0x100, 0x2, 0x8, 0x400, 0x1, 0x5, 0x8e6, 0x4, 0x7, 0x7b1, 0x10001, 0x0, 0x7, 0x5, 0x7, 0x3, 0x0, 0x4, 0x4, 0x3, 0x5174, 0x1, 0xbf, 0x33, 0x200, 0x81, 0x9, 0x4, 0x0, 0x9, 0x44, 0x3f, 0x2, 0x246f, 0x6, 0x3, 0x2, 0xffffffff, 0x1, 0x5, 0x6, 0x253, 0x6, 0x10001, 0x8, 0xff, 0x401, 0x3ff, 0x8001, 0x200, 0x8, 0x8, 0x3, 0x8, 0x2b6e, 0x5, 0x3f, 0x7, 0x0, 0x0, 0x9, 0x8, 0x200, 0x1b, 0x4, 0x101, 0x2, 0x7, 0x2, 0x1, 0x5, 0x0, 0xc26, 0x7, 0x200, 0x501f, 0x7fffffff, 0x7, 0xffffff35, 0x20, 0x3ff, 0x10000, 0x4, 0x7, 0x0, 0x10001, 0x7, 0x6, 0x0, 0x7, 0x2, 0x3, 0x10000, 0x1, 0x3, 0x7ede2359, 0xfffffffb, 0x401, 0x4, 0x4, 0x3, 0x0, 0x8001, 0x4, 0x6f, 0xc754, 0x0, 0x3, 0x8, 0x6, 0x5, 0x1, 0x4, 0xa796af5, 0x101, 0x7ff, 0x6, 0xd48, 0x8, 0x9, 0xffff, 0x9, 0x7fff, 0x2, 0x741, 0x4, 0x1ff, 0x8, 0x1, 0x6, 0x9, 0x3, 0x8, 0x3, 0x8, 0xfffffeff, 0x1, 0x725, 0x6f0, 0x8, 0x0, 0x3f, 0x1, 0x0, 0x3, 0x1, 0x7f, 0x0, 0x101, 0xffffffe1, 0x3, 0x7, 0x8001, 0x5, 0xfffffc00, 0x2, 0x401, 0x1, 0xfffff801, 0x0, 0x4, 0x3c, 0x2, 0xfff, 0x2, 0x2, 0x8000, 0x1, 0xa7e5, 0x6, 0x8, 0xffffffff, 0x0, 0x10001, 0x5, 0x5, 0x5, 0x2, 0x0, 0x1b, 0xb86b, 0x5, 0x4, 0x1f, 0x3, 0x2, 0x7ff, 0xfffffff8, 0xffffff81, 0x5, 0x200, 0x5, 0x7ff, 0x9, 0x7, 0xfff, 0x7fffffff, 0x800], 0x1, 0x400, 0x8, 0x4}) ioctl$SNDCTL_SEQ_GETOUTCOUNT(r1, 0x80045104, &(0x7f0000000080)) getrusage(0x0, &(0x7f0000000140)) 05:23:02 executing program 0: socketpair(0x0, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x34, 0x0, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x100}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x8001) 05:23:02 executing program 4: socketpair(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) recvfrom$llc(r0, 0x0, 0x0, 0x0, 0x0, 0x0) getsockname$llc(r1, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000000040)=0x10) 05:23:02 executing program 2: socketpair(0x1, 0x0, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$bt_sco(r0, &(0x7f0000000000), 0x8) 05:23:02 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) recvfrom$llc(0xffffffffffffffff, &(0x7f0000001180)=""/151, 0x97, 0x2, &(0x7f0000001240)={0x1a, 0x325, 0x8, 0x6, 0x20, 0x1, @dev={[], 0x10}}, 0x10) write$dsp(0xffffffffffffffff, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x80000001, 0x32}) openat$ion(0xffffffffffffff9c, &(0x7f0000001140)='/dev/ion\x00', 0x400000, 0x0) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(0xffffffffffffffff, 0x7a5, &(0x7f0000000000)={{@any, 0x7}, 0x1, 0x1}) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(0xffffffffffffffff, 0x7b1, &(0x7f0000000080)={&(0x7f0000000140)=[0x9, 0x100, 0x0, 0x7, 0x2, 0x100, 0x40, 0x3, 0x66, 0x3ff, 0xa5, 0x8, 0x7, 0x20, 0x3, 0x6a3, 0x81, 0x3b7, 0x5f, 0xed4, 0xfff, 0x2, 0x9f7, 0x5, 0x5, 0xffffffff, 0x381, 0x8, 0x8, 0x0, 0x4, 0xffb, 0x5, 0x7, 0x1a, 0x400, 0x4, 0x86, 0x0, 0x3, 0x101, 0x9, 0x9451, 0x1f, 0x71b5, 0x9, 0x101, 0x6, 0xb9, 0x4, 0x9, 0x200, 0xff, 0x2, 0x6, 0xdb88, 0x80000001, 0x7fffffff, 0x32, 0x16c7, 0x9, 0x1, 0x6, 0x7e7e, 0x5, 0x3, 0x7fff, 0x357c, 0x6, 0xc2c, 0x42, 0x18000, 0x80000000, 0x8, 0x0, 0xd5, 0x3, 0xffff, 0x47, 0x7c, 0x80, 0x32, 0x176, 0x1, 0x20, 0x506c, 0x100, 0xa9, 0x8, 0x9b5, 0x1, 0xfffffe00, 0x6, 0x3, 0x7fff, 0xffffffff, 0x7, 0x401, 0xffffff95, 0x8001, 0x3, 0x1000, 0x35, 0xfff, 0xffffffff, 0xfffffff9, 0x9, 0x7, 0x6, 0x7, 0x400, 0x3, 0x81, 0x4, 0x28, 0x5, 0xfffffffb, 0x4, 0x1000, 0x100, 0xffffffff, 0x8, 0xffffff08, 0x2, 0x91, 0x1f, 0x1, 0x3, 0x7, 0x10001, 0x101, 0x200, 0x100, 0x6, 0x100, 0x1ff, 0x6d6, 0x0, 0x1, 0x54, 0xffff, 0x1, 0x2, 0x9, 0x1, 0x6, 0x0, 0xfffffffe, 0xef3f, 0x1000, 0x5, 0x400, 0x0, 0xff, 0x7, 0x1, 0x8f, 0x5, 0x7ff, 0x4, 0x8, 0x6, 0x8, 0x5, 0x4, 0x8, 0x7, 0x2, 0x7fffffff, 0x0, 0x75, 0x6, 0x5, 0xffff, 0x100, 0x9, 0x9, 0x6, 0x1, 0x6df, 0x9, 0x3, 0x5, 0xfff, 0x38a, 0x2, 0xffff, 0x5, 0x0, 0x9, 0xffffffff, 0x8, 0x5, 0x3, 0xfffffffd, 0x2, 0x0, 0x0, 0x30, 0x5, 0x6, 0x7fffffff, 0xfffffffd, 0x5, 0x0, 0x3, 0x7fff, 0x8001, 0x4, 0x1, 0xc04, 0xffff, 0x8453, 0x9, 0x7fff, 0x7, 0x2, 0x200, 0xdb, 0x8000, 0x81, 0x56cd, 0x81, 0x6, 0xffff, 0x0, 0x0, 0x1c7, 0x0, 0x10000, 0x101, 0x6, 0x0, 0x3, 0x8, 0x3, 0x5, 0xfff, 0x101, 0x80, 0x7fff, 0x400, 0x4a, 0x6, 0x3, 0x400, 0x7f, 0x8, 0x2, 0x9, 0x6, 0x6, 0xf93a, 0x8, 0x6, 0x3, 0x589, 0x40, 0xaf, 0x1, 0x4, 0x7, 0x5, 0x9, 0xfffffffa, 0x1, 0x1ff, 0x3, 0x3, 0x6e3, 0x3f, 0xfa8f, 0x667, 0xff, 0x3, 0x0, 0x1, 0x4, 0x1f, 0x9, 0x3f, 0x0, 0x80000000, 0x2, 0x0, 0x10000, 0x5, 0x10000, 0x4, 0x5, 0x3e6, 0x78, 0xa2fe, 0x0, 0x108, 0x1, 0x0, 0xfffffffd, 0x8, 0x4, 0x9, 0x3, 0x3, 0x5, 0x4, 0xf34e, 0x24, 0x8, 0x80000001, 0x3, 0x5, 0x3ff, 0x400, 0x5a3c, 0xffffffff, 0x7, 0x2, 0x1, 0x10001, 0x8, 0xc0, 0xfffffffd, 0x5, 0x7f, 0xfffffffd, 0x7e, 0x9, 0x4, 0x4, 0x3, 0xff, 0x8, 0x7, 0x2, 0x931, 0x100, 0x80000001, 0x9, 0x899b, 0x9, 0xfffffc00, 0x5, 0x8, 0xfffffffc, 0x82, 0x5, 0x9, 0x7f, 0x2, 0x9, 0x0, 0x4952189, 0x5, 0x4, 0x5, 0x0, 0x0, 0xfff, 0x9, 0x100, 0x800, 0xb70, 0x1, 0x9, 0xffff, 0x4, 0x21, 0x20, 0x10001, 0x81, 0x0, 0x8000, 0x2, 0x3cbac7a2, 0x1, 0x9, 0x3ff, 0x0, 0x7, 0xea73, 0x1, 0x6, 0xffffffff, 0xad8, 0x2, 0x7fff, 0x2, 0x5, 0x8, 0x8eb9, 0xa3e, 0x100, 0x1, 0x0, 0x1, 0x2, 0xa, 0xb9, 0x3, 0xfc00, 0x81, 0x2, 0x3, 0x3f, 0x2, 0x1, 0x5, 0x1000, 0x1, 0xffffffff, 0x2, 0x800, 0x6, 0x7, 0x6df, 0x7f, 0x3, 0x6, 0x1, 0x20, 0xc72, 0x2125, 0x7fffffff, 0x3, 0x3, 0x5, 0x9, 0x9, 0x8, 0x0, 0x6ac, 0x7fffffff, 0x7f, 0x81, 0x5, 0x6035, 0x6, 0x0, 0x20, 0x9, 0xff, 0x8, 0x5, 0x7f0a, 0xfb, 0xad, 0x2, 0x5, 0x391, 0xb83, 0x8, 0x0, 0x9, 0x769, 0x20, 0x5, 0x3, 0xc7, 0x96, 0x1, 0x4, 0x101, 0x7, 0x20, 0xb40, 0x9, 0x1f, 0x9e, 0x6, 0x39e5, 0x81, 0x6, 0x2, 0x80000000, 0x425, 0x68e55e25, 0x54b, 0xfff, 0x5, 0x4, 0x2, 0x7, 0x10001, 0x4, 0x1, 0x2, 0x81, 0xa9, 0x8, 0x800, 0x9, 0x7ff, 0x80000001, 0x4, 0x4, 0x40, 0x23c, 0x8, 0x3ff, 0x2, 0xfffffffe, 0x35bd, 0x0, 0x1, 0x1812000, 0x8, 0x44a, 0x7, 0x1000, 0x0, 0x4, 0x9, 0x20, 0x80000001, 0x7, 0x80000000, 0x6, 0xc858, 0xffffaf1a, 0x1, 0x61e9, 0x776f, 0x100, 0x7ff, 0x8, 0x200, 0x10000, 0x80000000, 0x3, 0x1, 0x0, 0x4, 0x8561, 0x1, 0x800, 0x5, 0x8, 0x9, 0x8001, 0x7a4, 0xfffffc01, 0x2d5, 0x0, 0x3f, 0x7, 0xffff, 0x20ba, 0x8, 0x1, 0x2, 0xacf9, 0x5, 0x8, 0x9, 0x8, 0x80000001, 0x10000, 0x7fff, 0xfffffeff, 0x7, 0x9, 0x8, 0x1000, 0x9, 0x5, 0x81, 0x5, 0x0, 0x4, 0x0, 0x2, 0x80000001, 0xad, 0xff, 0x0, 0x0, 0x1f, 0x1, 0x5, 0x2, 0x3, 0x0, 0x800, 0x9, 0xfffffffd, 0x1, 0x4, 0x6, 0x2, 0x80, 0x8, 0x7, 0x5, 0x4, 0x1, 0x5, 0x1, 0xfff, 0x3, 0x8, 0x0, 0x74c7, 0x80, 0x0, 0x100, 0xffffffff, 0x6, 0xfff, 0x14e0b56e, 0x9, 0x3, 0xb606, 0x87, 0x80000000, 0x6207, 0x3, 0x7, 0x4, 0xffffffc0, 0x4, 0x4d1c, 0x800, 0x9, 0x8001, 0x1, 0x4, 0x3, 0x1, 0x80000001, 0x9f, 0xbf5, 0x800, 0x0, 0x80000000, 0x0, 0x0, 0x7, 0x3, 0x4, 0x3ff, 0x9, 0x7f, 0x0, 0x3f, 0x9, 0x20, 0x4, 0x401, 0x3457064a, 0x4d, 0x7, 0x9d, 0x6, 0x7fffffff, 0xad, 0x1, 0x100, 0x6, 0x2, 0x4, 0xc6, 0x8001, 0x7, 0x2, 0xf3b, 0x8, 0x3e01, 0xbae9, 0x9, 0x7, 0x6, 0x2, 0x5, 0x7f, 0x3, 0x1, 0x9, 0x400, 0x3, 0x6, 0x1000000, 0x4, 0x5, 0x6, 0x4, 0x1, 0x4, 0x6, 0x6, 0x41d2, 0x9, 0x400, 0x7, 0x0, 0x78be, 0x2, 0x3ff, 0xf, 0x7fff, 0x3d61, 0xe3, 0x6, 0x3772, 0x5062, 0x1, 0x1, 0xfffffffd, 0x8, 0x8, 0x7, 0x9, 0x7, 0x3f, 0x3ff, 0x20, 0x80, 0x800, 0x8, 0x7, 0x9, 0x3, 0x10001, 0x3, 0x9, 0x80, 0x7, 0x6, 0x3, 0x2, 0x3, 0xf8b8, 0x4, 0x48000, 0x2, 0x5, 0x1, 0x200, 0x400, 0x3ff, 0x5, 0x1, 0x2, 0x0, 0xffffffff, 0x3ff, 0x0, 0xffffffff, 0x7fff, 0x2, 0x7fffffff, 0x1, 0x66ca, 0x2, 0x9, 0xa3, 0x7f, 0x3, 0x1, 0x101, 0x3f, 0xa3aa, 0x1, 0xffffffff, 0x8, 0x80, 0xfff, 0x1, 0x9, 0x0, 0x10000, 0xb1, 0x7f, 0x0, 0xc8, 0x81, 0x6b2c, 0x1, 0x2, 0x2, 0x0, 0x10001, 0x9, 0x5, 0x7f, 0x6, 0x5f9, 0xcab, 0x3ff, 0x0, 0x0, 0x4, 0xffffffe1, 0x8, 0x8, 0x6, 0x0, 0x9d5c, 0x9, 0x62dd, 0x5, 0xc1, 0x80000000, 0xffff, 0x40, 0x800, 0x8, 0x2, 0x400, 0xfff, 0x7, 0x5, 0x8, 0x8, 0x5, 0x10000, 0x8, 0x5, 0x7, 0x5, 0x3ffc, 0x1000, 0x8, 0x929, 0x101, 0x5, 0x3, 0x80, 0x6, 0x3, 0x4, 0x6, 0x9, 0xc9d5, 0x9, 0x8, 0x7f, 0x6, 0xffff, 0x9, 0x2, 0x800, 0x5, 0x0, 0x3c1, 0xfff, 0x5, 0xda3, 0x40, 0x3, 0xde32, 0x1000, 0x8, 0x0, 0x7, 0x9, 0x1f, 0x9, 0x8de5, 0x8, 0x8, 0x6, 0xc143, 0x998, 0x8000, 0x0, 0x2286, 0xdf67a0e, 0x87, 0x800, 0x4, 0x3, 0x6, 0x9, 0x3ff, 0x7, 0x4792, 0x80, 0x10001, 0x1, 0x7fff, 0x6, 0x9, 0x6, 0x2, 0x0, 0x6, 0x6, 0x5c9, 0x20, 0x4, 0x19, 0x6, 0xfff, 0x3, 0x6, 0x3, 0x8, 0x80, 0x0, 0x1, 0x2, 0x0, 0x4, 0x9, 0x3, 0xfff, 0x4, 0x7fff, 0x8, 0xbb62, 0x0, 0x6, 0x8, 0x389c, 0x5, 0xadf, 0x1, 0x1, 0xffffffd2, 0x2, 0x401, 0x4, 0x400, 0x5, 0x1, 0x101, 0x7fffffff, 0x9, 0x6, 0x7fffffff, 0x1, 0xf5b, 0x3ff, 0x5, 0x67, 0x40, 0x7f, 0x7fffffff, 0xffff, 0x0, 0x0, 0x2, 0x8, 0x3, 0xfffffff8, 0x800, 0x0, 0x7fffffff, 0x7fff, 0x7, 0xffffff01, 0x800, 0x825, 0xff, 0x7ff, 0x80000000, 0x7, 0x3a5b, 0x3, 0x9, 0xb832, 0xfff, 0x2, 0x10000, 0x39, 0x80000, 0x3, 0x9, 0x7fffffff, 0x8001, 0x6, 0x6, 0x5, 0x2, 0x4, 0x80000000, 0xff, 0x3, 0x7, 0x7fff, 0xff0, 0xffff, 0x1, 0x4, 0x9, 0x7, 0x10000, 0x7, 0x8000, 0x0, 0x8, 0x9, 0x4, 0x8, 0x996, 0x3, 0x6, 0x2, 0x80000000, 0x81, 0x2, 0x6, 0x80000000, 0x6e4, 0x40, 0xffffff17, 0x1ff, 0x7ff, 0x1ff, 0x53a9, 0x264a, 0x7, 0x5, 0x0, 0x5, 0xfffffae2, 0x100, 0x8, 0x2, 0x7, 0x4, 0x4, 0xae0, 0x2], 0x0, 0x400, 0x80, 0x2}) accept4$llc(0xffffffffffffffff, &(0x7f0000001280)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000012c0)=0x10, 0x40800) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(0xffffffffffffffff, 0x7a4, &(0x7f00000000c0)={{@hyper}, 0x9, 0x3f}) 05:23:02 executing program 2: socketpair(0x1, 0x2, 0x0, 0x0) connect$bt_sco(0xffffffffffffffff, &(0x7f0000000000), 0x8) 05:23:02 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvram\x00', 0x2, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x2080000001, 0x32}) 05:23:02 executing program 2: socketpair(0x1, 0x2, 0x0, 0x0) connect$bt_sco(0xffffffffffffffff, &(0x7f0000000000), 0x8) 05:23:02 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x2080000001, 0x32}) ioctl$IOCTL_VMCI_GET_CONTEXT_ID(0xffffffffffffffff, 0x7b3, &(0x7f0000000000)) 05:23:02 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x2080000001, 0x32}) ioctl$BLKIOOPT(0xffffffffffffffff, 0x1279, &(0x7f0000000000)) 05:23:02 executing program 2: socketpair(0x1, 0x2, 0x0, 0x0) connect$bt_sco(0xffffffffffffffff, &(0x7f0000000000), 0x8) 05:23:02 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvram\x00', 0x44400, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00', 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r2, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, r3, 0x16d1421863385625}, 0x14}}, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x54, r3, 0x20, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x4}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x7}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x2}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x8}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x2}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x7}]}, 0x54}, 0x1, 0x0, 0x0, 0x40}, 0x0) openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x800, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x2080000001, 0x32}) 05:23:02 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x190501, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000140)={0x2080000001, 0x25}) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nullb0\x00', 0x800, 0x0) ioctl$HDIO_GETGEO(r1, 0x301, &(0x7f0000000a00)) ioctl$BLKRAGET(r1, 0x1263, &(0x7f00000000c0)) 05:23:02 executing program 2: socketpair(0x1, 0x2, 0x0, &(0x7f0000000080)) connect$bt_sco(0xffffffffffffffff, &(0x7f0000000000), 0x8) [ 3450.893572] Bluetooth: hci2 command 0x0419 tx timeout 05:23:03 executing program 4: socketpair(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x0, 0x0) read$sequencer(r1, 0x0, 0x0) ioctl$DRM_IOCTL_AGP_UNBIND(r1, 0x40106437, &(0x7f0000000000)={0x0, 0xffffffff}) recvfrom$llc(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 05:23:03 executing program 0: socketpair(0x0, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x34, 0x0, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x100}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x8001) 05:23:03 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) write$dsp(0xffffffffffffffff, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x80000001, 0x32}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(0xffffffffffffffff, 0x7a5, &(0x7f0000000000)) ioctl$IOCTL_VMCI_GET_CONTEXT_ID(0xffffffffffffffff, 0x7b3, &(0x7f0000000080)) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(0xffffffffffffffff, 0x7a4, &(0x7f00000000c0)={{@hyper}, 0x9, 0x3f}) 05:23:03 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x2080000001, 0x32}) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vmci\x00', 0x2, 0x0) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r1, 0x7a5, &(0x7f0000000080)={{@hyper, 0x2400}}) sendto$llc(0xffffffffffffffff, &(0x7f0000000140)="914e4e694f2c5438b57b0b1fbafa4e8f15bf74de5d48220e677e6ec95f77d56122f8960133fbdfc0145b11caac7f448f476e2cbaf52150a9ac0985b5642e729d2c5c857c5a77c5afc2492c038f7a0ca203ca46befb5b761fbda2748a80552e1d5ff9b0d9c371ff53e900704ad80f566c2711588c10f0b2ed4068075472433f8edd9433d4129ed98ceba78042b1679351dc9f515cb24cdf97d612c1da6fdad2", 0x9f, 0x40, 0x0, 0x0) 05:23:03 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x20000, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x2080000001, 0x32}) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x0, 0x0) read$sequencer(r1, 0x0, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x0, 0x0) read$sequencer(r2, 0x0, 0x0) ioctl$SNDCTL_SEQ_GETOUTCOUNT(r1, 0x80045104, &(0x7f0000000100)) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000000c0)={0x2, 0x14}) 05:23:03 executing program 2: socketpair(0x1, 0x2, 0x0, &(0x7f0000000080)) connect$bt_sco(0xffffffffffffffff, &(0x7f0000000000), 0x8) 05:23:03 executing program 0: socketpair(0x0, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x34, 0x0, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x100}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x8001) 05:23:03 executing program 2: socketpair(0x1, 0x2, 0x0, &(0x7f0000000080)) connect$bt_sco(0xffffffffffffffff, &(0x7f0000000000), 0x8) 05:23:04 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x675a9f5575203d15, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x2080000001, 0x32}) 05:23:04 executing program 0: socketpair(0x1, 0x0, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x34, 0x0, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x100}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x8001) 05:23:04 executing program 2: socketpair(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$bt_sco(r0, 0x0, 0x0) 05:23:04 executing program 0: socketpair(0x1, 0x0, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x34, 0x0, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x100}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x8001) 05:23:04 executing program 4: socketpair(0x25, 0x2, 0xfffffffa, &(0x7f0000001140)={0xffffffffffffffff}) socketpair(0x15, 0xa, 0x6, &(0x7f0000000000)) bind$vsock_dgram(r0, &(0x7f0000001100)={0x28, 0x0, 0x0, @hyper}, 0x10) recvfrom$llc(r0, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair(0x3, 0x2, 0x5, &(0x7f0000000040)={0xffffffffffffffff}) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f00000000c0)=""/4096, &(0x7f00000010c0)=0x1000) 05:23:04 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x2080000001, 0x32, 0x0, 0xffffffffffffffff}) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x0, 0x0) r3 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_TRY_EXT_CTRLS(r3, 0xc0205649, &(0x7f0000000180)={0x4, 0x7fffffff, 0x6, r1, 0x0, &(0x7f0000000140)={0x980907, 0x800, [], @p_u32=&(0x7f00000000c0)=0x400}}) read$sequencer(r2, 0x0, 0x0) ioctl$SNDCTL_TMR_TEMPO(r2, 0xc0045405, &(0x7f0000000000)=0x144) [ 3452.896047] syz-executor.5: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 3452.896498] syz-executor.5: [ 3452.963466] syz-executor.5 cpuset= [ 3452.969447] page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 3452.976656] / mems_allowed=0-1 [ 3453.001715] CPU: 0 PID: 18515 Comm: syz-executor.5 Not tainted 4.14.225-syzkaller #0 [ 3453.010450] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3453.014147] syz-executor.5 cpuset= [ 3453.020423] Call Trace: [ 3453.020433] / [ 3453.024072] dump_stack+0x1b2/0x281 [ 3453.041816] warn_alloc.cold+0x96/0x1cc [ 3453.044178] mems_allowed=0-1 [ 3453.046289] ? zone_watermark_ok_safe+0x220/0x220 [ 3453.055772] __alloc_pages_nodemask+0x2127/0x2720 [ 3453.061161] ? lock_acquire+0x170/0x3f0 [ 3453.065162] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3453.070022] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 3453.075826] ? __mutex_unlock_slowpath+0x75/0x770 [ 3453.080678] alloc_pages_current+0x155/0x260 [ 3453.085096] ion_page_pool_alloc+0x118/0x1b0 [ 3453.089753] ion_system_heap_allocate+0x133/0x8c0 [ 3453.094590] ? ion_alloc+0x187/0x810 [ 3453.098392] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 3453.104145] ? ion_system_contig_heap_create+0x130/0x130 [ 3453.110150] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 3453.115434] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 3453.121370] ion_alloc+0x204/0x810 [ 3453.124930] ? ion_dma_buf_release+0x40/0x40 [ 3453.129437] ? __might_fault+0x177/0x1b0 [ 3453.133658] ion_ioctl+0xea/0x1f0 [ 3453.137195] ? ion_query_heaps+0x360/0x360 [ 3453.141516] ? _raw_spin_unlock+0x29/0x40 [ 3453.145949] ? ion_query_heaps+0x360/0x360 [ 3453.150251] do_vfs_ioctl+0x75a/0xff0 [ 3453.154136] ? ioctl_preallocate+0x1a0/0x1a0 [ 3453.158540] ? lock_downgrade+0x740/0x740 [ 3453.162758] ? __fget+0x225/0x360 [ 3453.166191] ? do_vfs_ioctl+0xff0/0xff0 [ 3453.170146] ? security_file_ioctl+0x83/0xb0 [ 3453.174534] SyS_ioctl+0x7f/0xb0 [ 3453.178258] ? do_vfs_ioctl+0xff0/0xff0 [ 3453.182563] do_syscall_64+0x1d5/0x640 [ 3453.186441] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3453.191805] RIP: 0033:0x465f69 [ 3453.195060] RSP: 002b:00007f747b858188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3453.202752] RAX: ffffffffffffffda RBX: 000000000056c0b0 RCX: 0000000000465f69 [ 3453.209999] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 3453.217423] RBP: 00000000004bfa8f R08: 0000000000000000 R09: 0000000000000000 [ 3453.224760] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c0b0 [ 3453.232192] R13: 00007ffe6eac26ff R14: 00007f747b858300 R15: 0000000000022000 [ 3453.239829] CPU: 1 PID: 18481 Comm: syz-executor.5 Not tainted 4.14.225-syzkaller #0 [ 3453.248414] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3453.258165] Call Trace: [ 3453.260848] dump_stack+0x1b2/0x281 [ 3453.264475] warn_alloc.cold+0x96/0x1cc [ 3453.264859] Mem-Info: [ 3453.268438] ? zone_watermark_ok_safe+0x220/0x220 [ 3453.270944] active_anon:16781 inactive_anon:90041 isolated_anon:0 [ 3453.270944] active_file:55 inactive_file:65 isolated_file:0 [ 3453.270944] unevictable:0 dirty:6 writeback:0 unstable:0 [ 3453.270944] slab_reclaimable:12371 slab_unreclaimable:114525 [ 3453.270944] mapped:52674 shmem:90898 pagetables:746 bounce:0 [ 3453.270944] free:25481 free_pcp:67 free_cma:0 [ 3453.275852] __alloc_pages_nodemask+0x2127/0x2720 [ 3453.275861] ? __schedule+0x893/0x1de0 [ 3453.275875] ? lock_acquire+0x170/0x3f0 [ 3453.275896] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3453.310873] Node 0 active_anon:65044kB inactive_anon:316600kB active_file:132kB inactive_file:192kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:210660kB dirty:12kB writeback:0kB shmem:319764kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3453.316000] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 3453.316015] ? __mutex_unlock_slowpath+0x75/0x770 [ 3453.320321] Node 1 active_anon:2080kB inactive_anon:43564kB active_file:88kB inactive_file:68kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:36kB dirty:12kB writeback:0kB shmem:43828kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3453.324801] ? __sanitizer_cov_trace_pc+0x9/0x50 [ 3453.324817] alloc_pages_current+0x155/0x260 [ 3453.324833] ion_page_pool_alloc+0x118/0x1b0 [ 3453.329994] Node 0 [ 3453.361735] ion_system_heap_allocate+0x133/0x8c0 [ 3453.361746] ? ion_alloc+0x187/0x810 [ 3453.361756] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 3453.361766] ? ion_system_contig_heap_create+0x130/0x130 [ 3453.361775] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 3453.361789] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 3453.368403] DMA free:11060kB min:204kB low:252kB high:300kB active_anon:68kB inactive_anon:980kB active_file:16kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3453.373535] ion_alloc+0x204/0x810 [ 3453.408598] lowmem_reserve[]: [ 3453.413492] ? ion_dma_buf_release+0x40/0x40 [ 3453.417917] 0 [ 3453.425731] ? __might_fault+0x177/0x1b0 [ 3453.425745] ion_ioctl+0xea/0x1f0 [ 3453.425755] ? ion_query_heaps+0x360/0x360 [ 3453.428528] 2717 [ 3453.433893] ? __fget+0x1fe/0x360 [ 3453.437969] 2718 [ 3453.443728] ? ion_query_heaps+0x360/0x360 [ 3453.452199] 2718 [ 3453.458289] do_vfs_ioctl+0x75a/0xff0 [ 3453.458305] ? ioctl_preallocate+0x1a0/0x1a0 [ 3453.458315] ? lock_downgrade+0x740/0x740 [ 3453.458327] ? __fget+0x225/0x360 [ 3453.458338] ? do_vfs_ioctl+0xff0/0xff0 [ 3453.464597] 2718 [ 3453.496334] ? security_file_ioctl+0x83/0xb0 [ 3453.496346] SyS_ioctl+0x7f/0xb0 [ 3453.496355] ? do_vfs_ioctl+0xff0/0xff0 [ 3453.496365] do_syscall_64+0x1d5/0x640 [ 3453.496381] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3453.496393] RIP: 0033:0x465f69 [ 3453.505729] RSP: 002b:00007f747b89a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3453.505741] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 3453.505745] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 3453.505750] RBP: 00000000004bfa8f R08: 0000000000000000 R09: 0000000000000000 [ 3453.505754] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 3453.505759] R13: 00007ffe6eac26ff R14: 00007f747b89a300 R15: 0000000000022000 [ 3453.731926] Node 0 DMA32 free:36248kB min:36200kB low:45248kB high:54296kB active_anon:64988kB inactive_anon:315620kB active_file:108kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7360kB pagetables:2768kB bounce:0kB free_pcp:100kB local_pcp:0kB free_cma:0kB [ 3453.763039] lowmem_reserve[]: 0 0 0 0 0 [ 3453.767105] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3453.844838] lowmem_reserve[]: 0 0 0 0 0 [ 3453.852057] Node 1 Normal free:53116kB min:53696kB low:67120kB high:80544kB active_anon:2080kB inactive_anon:43564kB active_file:12kB inactive_file:12kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:320kB pagetables:216kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3453.920772] oom_reaper: reaped process 18481 (syz-executor.5), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 3453.937141] in:imklog invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 3453.965396] lowmem_reserve[]: 0 0 0 0 0 [ 3453.970884] Node 0 DMA: 5*4kB (ME) 6*8kB (UME) 11*16kB [ 3453.970917] in:imklog cpuset=/ mems_allowed=0-1 [ 3453.990531] CPU: 1 PID: 17161 Comm: in:imklog Not tainted 4.14.225-syzkaller #0 [ 3453.994453] (UME) [ 3453.997977] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3453.997981] Call Trace: [ 3453.998002] dump_stack+0x1b2/0x281 [ 3453.998014] dump_header+0x178/0x82f [ 3453.998024] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 3453.998038] ? ___ratelimit+0x2cd/0x530 [ 3454.000445] 7*32kB [ 3454.009814] oom_kill_process.cold+0x10/0xb18 [ 3454.009831] out_of_memory+0xe3e/0x1190 [ 3454.009845] ? oom_killer_disable+0x1c0/0x1c0 [ 3454.012596] (ME) [ 3454.016609] ? mutex_trylock+0x152/0x1a0 [ 3454.016621] __alloc_pages_nodemask+0x23e1/0x2720 [ 3454.016641] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3454.020587] 0*64kB [ 3454.025804] alloc_pages_current+0x155/0x260 [ 3454.025817] filemap_fault+0xea3/0x1980 [ 3454.029765] 4*128kB [ 3454.031997] ext4_filemap_fault+0x84/0xb0 [ 3454.036697] (ME) [ 3454.040852] __do_fault+0xfa/0x380 [ 3454.045466] 3*256kB [ 3454.047697] __handle_mm_fault+0x2497/0x4620 [ 3454.052341] (UME) [ 3454.057298] ? vm_insert_page+0x7c0/0x7c0 [ 3454.057311] ? lock_downgrade+0x740/0x740 [ 3454.057327] handle_mm_fault+0x391/0x860 [ 3454.057341] __do_page_fault+0x549/0xad0 [ 3454.057353] ? spurious_fault+0x640/0x640 [ 3454.062775] 2*512kB [ 3454.065171] ? do_page_fault+0x60/0x500 [ 3454.065181] ? page_fault+0x2f/0x50 [ 3454.065188] page_fault+0x45/0x50 [ 3454.065197] RIP: 1fa0:0x1f9f [ 3454.065201] RSP: 0000:00005603551c59d0 EFLAGS: 7f003fd67da0 [ 3454.088216] Mem-Info: [ 3454.138689] (UE) [ 3454.154202] active_anon:16784 inactive_anon:90041 isolated_anon:0 [ 3454.154202] active_file:21 inactive_file:0 isolated_file:0 [ 3454.154202] unevictable:0 dirty:0 writeback:0 unstable:0 [ 3454.154202] slab_reclaimable:12371 slab_unreclaimable:114618 [ 3454.154202] mapped:52655 shmem:90898 pagetables:746 bounce:0 [ 3454.154202] free:13863 free_pcp:30 free_cma:0 [ 3454.162950] 4*1024kB [ 3454.203978] syz-executor.5: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 3454.209687] Node 0 active_anon:65056kB inactive_anon:316600kB active_file:72kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:210620kB dirty:0kB writeback:0kB shmem:319764kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3454.225983] (UME) [ 3454.259843] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 3454.265381] Node 1 active_anon:2080kB inactive_anon:43564kB active_file:12kB inactive_file:12kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:43828kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3454.268177] CPU: 0 PID: 18481 Comm: syz-executor.5 Not tainted 4.14.225-syzkaller #0 [ 3454.309818] Node 0 [ 3454.310672] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3454.310683] DMA free:10964kB min:204kB low:252kB high:300kB active_anon:68kB inactive_anon:980kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3454.310690] lowmem_reserve[]: [ 3454.313470] Call Trace: [ 3454.337289] 0 [ 3454.353471] dump_stack+0x1b2/0x281 [ 3454.353486] warn_alloc.cold+0x96/0x1cc [ 3454.353496] ? perf_trace_drv_sw_scan_start+0x530/0x6e0 [ 3454.353505] ? zone_watermark_ok_safe+0x220/0x220 [ 3454.353513] ? usleep_range+0x130/0x130 [ 3454.353521] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 3454.353533] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 3454.353544] ? run_timer_softirq+0x5a0/0x5a0 [ 3454.353560] __alloc_pages_nodemask+0x2127/0x2720 [ 3454.353572] ? lock_acquire+0x170/0x3f0 [ 3454.353586] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3454.353595] ? ion_page_pool_alloc+0x9e/0x1b0 [ 3454.353609] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 3454.367168] 2717 [ 3454.369151] ? alloc_pages_current+0x37/0x260 [ 3454.381934] 2718 [ 3454.383950] alloc_pages_current+0x155/0x260 [ 3454.392215] 2718 [ 3454.393678] ion_page_pool_alloc+0x118/0x1b0 [ 3454.411344] 2718 [ 3454.411814] ion_system_heap_allocate+0x133/0x8c0 [ 3454.422452] ? ion_alloc+0x187/0x810 [ 3454.434177] Node 0 [ 3454.434443] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 3454.442537] DMA32 free:17860kB min:36200kB low:45248kB high:54296kB active_anon:64988kB inactive_anon:315620kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7360kB pagetables:2768kB bounce:0kB free_pcp:120kB local_pcp:120kB free_cma:0kB [ 3454.445470] ? ion_system_contig_heap_create+0x130/0x130 [ 3454.445482] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 3454.445493] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 3454.445505] ion_alloc+0x204/0x810 [ 3454.445520] ? ion_dma_buf_release+0x40/0x40 [ 3454.445531] ? __might_fault+0x177/0x1b0 [ 3454.445542] ion_ioctl+0xea/0x1f0 [ 3454.445551] ? ion_query_heaps+0x360/0x360 [ 3454.445567] ? __fget+0x1fe/0x360 [ 3454.459437] lowmem_reserve[]: [ 3454.460226] ? ion_query_heaps+0x360/0x360 [ 3454.464374] 0 [ 3454.466779] do_vfs_ioctl+0x75a/0xff0 [ 3454.466792] ? ioctl_preallocate+0x1a0/0x1a0 [ 3454.466804] ? lock_downgrade+0x740/0x740 [ 3454.466820] ? __fget+0x225/0x360 [ 3454.466828] ? do_vfs_ioctl+0xff0/0xff0 [ 3454.466843] ? security_file_ioctl+0x83/0xb0 [ 3454.466853] SyS_ioctl+0x7f/0xb0 [ 3454.466863] ? do_vfs_ioctl+0xff0/0xff0 [ 3454.466874] do_syscall_64+0x1d5/0x640 [ 3454.466889] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3454.466903] RIP: 0033:0x465f69 [ 3454.482556] 0 [ 3454.501800] RSP: 002b:00007f747b89a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3454.501811] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 3454.501815] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 3454.501820] RBP: 00000000004bfa8f R08: 0000000000000000 R09: 0000000000000000 [ 3454.501824] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 3454.501828] R13: 00007ffe6eac26ff R14: 00007f747b89a300 R15: 0000000000022000 [ 3454.512762] 2*2048kB [ 3454.519273] 0 [ 3454.525352] (UM) [ 3454.526485] 0 [ 3454.530826] 0*4096kB [ 3454.534267] 0 [ 3454.547778] = 10964kB [ 3454.565246] Node 0 [ 3454.569754] Node 0 [ 3454.571808] DMA32: [ 3454.582131] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3454.594336] 1253*4kB [ 3454.604528] lowmem_reserve[]: [ 3454.616616] (ME) [ 3454.626968] 0 [ 3454.636764] 556*8kB [ 3454.649159] 0 [ 3454.658821] (UME) [ 3454.661270] 0 [ 3454.661351] 193*16kB [ 3454.663438] 0 0 [ 3454.674135] (M) [ 3454.715803] 57*32kB [ 3454.724476] Node 1 [ 3454.732969] (M) [ 3454.734897] Normal free:26784kB min:53696kB low:67120kB high:80544kB active_anon:1984kB inactive_anon:43564kB active_file:12kB inactive_file:12kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:320kB pagetables:216kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3454.748839] 43*64kB [ 3454.779413] lowmem_reserve[]: 0 0 0 0 0 [ 3454.781781] (UM) 9*128kB (UM) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18276kB [ 3454.790168] Node 0 DMA: 5*4kB (ME) 6*8kB (UME) 11*16kB (UME) 7*32kB (ME) 0*64kB 4*128kB (ME) 3*256kB (UME) 2*512kB (UE) 4*1024kB (UME) 2*2048kB (UM) 0*4096kB = 10964kB [ 3454.805329] Node 0 [ 3454.828644] Node 0 [ 3454.830318] Normal: [ 3454.830917] DMA32: [ 3454.833186] 0*4kB [ 3454.837365] 1253*4kB (ME) 563*8kB (UME) 197*16kB (UM) 59*32kB (UM) 45*64kB (UM) 11*128kB (UM) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18844kB [ 3454.843065] 0*8kB [ 3454.862520] warn_alloc_show_mem: 1 callbacks suppressed [ 3454.862524] Mem-Info: [ 3454.867661] 0*16kB [ 3454.870223] active_anon:16758 inactive_anon:90041 isolated_anon:0 [ 3454.870223] active_file:11 inactive_file:9 isolated_file:0 [ 3454.870223] unevictable:0 dirty:0 writeback:0 unstable:0 [ 3454.870223] slab_reclaimable:12371 slab_unreclaimable:114486 [ 3454.870223] mapped:52634 shmem:90898 pagetables:746 bounce:0 [ 3454.870223] free:14138 free_pcp:40 free_cma:0 [ 3454.872557] 0*32kB [ 3454.880498] Node 0 active_anon:65048kB inactive_anon:316600kB active_file:32kB inactive_file:24kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:210536kB dirty:0kB writeback:0kB shmem:319764kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3454.921319] 0*64kB [ 3454.952513] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 3454.957905] 0*128kB [ 3454.977642] Node 1 Normal: 130*4kB (ME) 89*8kB (ME) 67*16kB (ME) 37*32kB (ME) 38*64kB (UME) 17*128kB (UME) 43*256kB (UME) 15*512kB (UME) 0*1024kB 0*2048kB 0*4096kB = 26784kB [ 3454.986135] 0*256kB [ 3455.005071] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3455.010482] 0*512kB [ 3455.024313] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3455.026035] 0*1024kB [ 3455.026701] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3455.048374] 0*2048kB 0*4096kB = 0kB [ 3455.052542] Node 1 Normal: 130*4kB (ME) 89*8kB (ME) 67*16kB (ME) 37*32kB (ME) 38*64kB (UME) 17*128kB (UME) 43*256kB (UME) 15*512kB (UME) 0*1024kB 0*2048kB 0*4096kB = 26784kB [ 3455.053300] Node 1 active_anon:1984kB inactive_anon:43564kB active_file:12kB inactive_file:12kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:43828kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3455.080272] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3455.103280] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3455.119084] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3455.123025] 90919 total pagecache pages [ 3455.133657] 0 pages in swap cache [ 3455.137794] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3455.143615] Swap cache stats: add 0, delete 0, find 0/0 [ 3455.152891] Free swap = 0kB [ 3455.156521] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3455.161327] Node 0 DMA free:10964kB min:204kB low:252kB high:300kB active_anon:68kB inactive_anon:980kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3455.176330] 90919 total pagecache pages [ 3455.199907] Total swap = 0kB [ 3455.202935] 2097051 pages RAM [ 3455.206247] 0 pages HighMem/MovableOnly [ 3455.209508] 0 pages in swap cache [ 3455.210577] 363840 pages reserved [ 3455.214285] Swap cache stats: add 0, delete 0, find 0/0 [ 3455.224360] 0 pages cma reserved [ 3455.229074] Out of memory (oom_kill_allocating_task): Kill process 17161 (in:imklog) score 0 or sacrifice child [ 3455.235771] Free swap = 0kB [ 3455.242709] Total swap = 0kB [ 3455.244923] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 3455.251252] Node 0 DMA32 free:18804kB min:36200kB low:45248kB high:54296kB active_anon:64980kB inactive_anon:315620kB active_file:32kB inactive_file:24kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7360kB pagetables:2768kB bounce:0kB free_pcp:160kB local_pcp:132kB free_cma:0kB [ 3455.256520] 2097051 pages RAM [ 3455.287439] Killed process 17157 (rsyslogd) total-vm:254332kB, anon-rss:1020kB, file-rss:0kB, shmem-rss:0kB [ 3455.297556] 0 pages HighMem/MovableOnly [ 3455.301873] oom_reaper: reaped process 17157 (rsyslogd), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 3455.303815] 363840 pages reserved [ 3455.325953] lowmem_reserve[]: 0 0 0 0 0 [ 3455.329320] systemd-journal invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 3455.352609] 0 pages cma reserved [ 3455.359163] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3455.364808] systemd-journal cpuset= [ 3455.404154] lowmem_reserve[]: 0 0 0 0 0 [ 3455.414810] Node 1 Normal free:26844kB min:53696kB low:67120kB high:80544kB active_anon:1584kB inactive_anon:43564kB active_file:12kB inactive_file:12kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:288kB pagetables:216kB bounce:0kB free_pcp:128kB local_pcp:8kB free_cma:0kB [ 3455.432315] / [ 3455.452283] syz-executor.5: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 3455.456215] lowmem_reserve[]: [ 3455.476783] mems_allowed=0-1 [ 3455.480111] 0 0 0 0 0 [ 3455.483343] CPU: 0 PID: 17739 Comm: systemd-journal Not tainted 4.14.225-syzkaller #0 [ 3455.491039] Node 0 [ 3455.494077] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3455.494084] DMA: [ 3455.496948] Call Trace: [ 3455.496970] dump_stack+0x1b2/0x281 [ 3455.496981] dump_header+0x178/0x82f [ 3455.496991] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 3455.497000] ? ___ratelimit+0x2cd/0x530 [ 3455.497008] oom_kill_process.cold+0x10/0xb18 [ 3455.497024] out_of_memory+0xe3e/0x1190 [ 3455.497036] ? oom_killer_disable+0x1c0/0x1c0 [ 3455.497042] ? mutex_trylock+0x152/0x1a0 [ 3455.497054] __alloc_pages_nodemask+0x23e1/0x2720 [ 3455.517509] syz-executor.5 cpuset= [ 3455.519421] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3455.524707] / [ 3455.528682] alloc_pages_current+0x155/0x260 [ 3455.544561] 5*4kB [ 3455.546170] filemap_fault+0xea3/0x1980 [ 3455.546189] ext4_filemap_fault+0x84/0xb0 [ 3455.546200] __do_fault+0xfa/0x380 [ 3455.546208] __handle_mm_fault+0x2497/0x4620 [ 3455.546217] ? ep_poll+0x1ab/0xa50 [ 3455.546223] ? vm_insert_page+0x7c0/0x7c0 [ 3455.546242] handle_mm_fault+0x391/0x860 [ 3455.546254] __do_page_fault+0x549/0xad0 [ 3455.546266] ? spurious_fault+0x640/0x640 [ 3455.552409] (ME) [ 3455.554713] ? do_page_fault+0x60/0x500 [ 3455.568778] mems_allowed=0-1 [ 3455.569761] ? page_fault+0x2f/0x50 [ 3455.581574] 6*8kB [ 3455.582506] page_fault+0x45/0x50 [ 3455.620990] (UME) [ 3455.623211] RIP: 0001:0x1 [ 3455.642079] RSP: 8b4c3310:00007fff5942cf30 EFLAGS: 7fff5942cd40 [ 3455.642103] CPU: 1 PID: 18515 Comm: syz-executor.5 Not tainted 4.14.225-syzkaller #0 [ 3455.652083] 11*16kB [ 3455.657656] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3455.657660] Call Trace: [ 3455.657683] dump_stack+0x1b2/0x281 [ 3455.657696] warn_alloc.cold+0x96/0x1cc [ 3455.657708] ? zone_watermark_ok_safe+0x220/0x220 [ 3455.657716] ? usleep_range+0x130/0x130 [ 3455.657727] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 3455.660707] (UME) [ 3455.673049] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 3455.673061] ? run_timer_softirq+0x5a0/0x5a0 [ 3455.673077] __alloc_pages_nodemask+0x2127/0x2720 [ 3455.673093] ? lock_acquire+0x170/0x3f0 [ 3455.673106] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3455.675706] 7*32kB [ 3455.679560] ? ion_page_pool_alloc+0x9e/0x1b0 [ 3455.684019] (ME) [ 3455.690288] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 3455.690308] alloc_pages_current+0x155/0x260 [ 3455.690326] ion_page_pool_alloc+0x118/0x1b0 [ 3455.690340] ion_system_heap_allocate+0x133/0x8c0 [ 3455.694440] Mem-Info: [ 3455.701532] ? ion_alloc+0x187/0x810 [ 3455.701544] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 3455.701554] ? ion_system_contig_heap_create+0x130/0x130 [ 3455.701565] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 3455.701580] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 3455.703847] active_anon:16466 inactive_anon:90041 isolated_anon:0 [ 3455.703847] active_file:11 inactive_file:11 isolated_file:0 [ 3455.703847] unevictable:0 dirty:0 writeback:0 unstable:0 [ 3455.703847] slab_reclaimable:12370 slab_unreclaimable:114474 [ 3455.703847] mapped:52634 shmem:90898 pagetables:715 bounce:0 [ 3455.703847] free:13920 free_pcp:131 free_cma:0 [ 3455.709051] ion_alloc+0x204/0x810 [ 3455.709065] ? ion_dma_buf_release+0x40/0x40 [ 3455.709077] ? __might_fault+0x177/0x1b0 [ 3455.709087] ion_ioctl+0xea/0x1f0 [ 3455.709098] ? ion_query_heaps+0x360/0x360 [ 3455.714575] 0*64kB [ 3455.719280] ? _raw_spin_unlock+0x29/0x40 [ 3455.719293] ? ion_query_heaps+0x360/0x360 [ 3455.719303] do_vfs_ioctl+0x75a/0xff0 [ 3455.719318] ? ioctl_preallocate+0x1a0/0x1a0 [ 3455.723571] 4*128kB [ 3455.728903] ? lock_downgrade+0x740/0x740 [ 3455.728919] ? __fget+0x225/0x360 [ 3455.728928] ? do_vfs_ioctl+0xff0/0xff0 [ 3455.728938] ? security_file_ioctl+0x83/0xb0 [ 3455.728947] SyS_ioctl+0x7f/0xb0 [ 3455.728956] ? do_vfs_ioctl+0xff0/0xff0 [ 3455.731383] Node 0 active_anon:64300kB inactive_anon:316600kB active_file:32kB inactive_file:32kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:210536kB dirty:0kB writeback:0kB shmem:319764kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3455.736014] do_syscall_64+0x1d5/0x640 [ 3455.736033] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3455.736041] RIP: 0033:0x465f69 [ 3455.736046] RSP: 002b:00007f747b858188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3455.738269] Node 1 active_anon:1564kB inactive_anon:43564kB active_file:12kB inactive_file:12kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:43828kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3455.747088] RAX: ffffffffffffffda RBX: 000000000056c0b0 RCX: 0000000000465f69 [ 3455.747094] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 3455.747098] RBP: 00000000004bfa8f R08: 0000000000000000 R09: 0000000000000000 [ 3455.747102] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c0b0 [ 3455.747107] R13: 00007ffe6eac26ff R14: 00007f747b858300 R15: 0000000000022000 [ 3455.774194] syz-executor.5: [ 3455.782441] (ME) [ 3455.799297] page allocation failure: order:4 [ 3455.842712] Node 0 [ 3455.875425] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 3455.878863] DMA free:10964kB min:204kB low:252kB high:300kB active_anon:68kB inactive_anon:980kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3455.878866] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 3455.878887] Node 0 DMA32 free:19152kB min:36200kB low:45248kB high:54296kB active_anon:64232kB inactive_anon:315620kB active_file:32kB inactive_file:32kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7264kB pagetables:2652kB bounce:0kB free_pcp:768kB local_pcp:120kB free_cma:0kB [ 3455.878903] lowmem_reserve[]: 0 0 [ 3455.914717] (null) [ 3455.915623] 3*256kB [ 3455.973747] syz-executor.5 cpuset= [ 3456.001006] 0 [ 3456.025510] / [ 3456.034839] 0 [ 3456.055600] mems_allowed=0-1 [ 3456.066412] 0 [ 3456.111925] CPU: 1 PID: 18515 Comm: syz-executor.5 Not tainted 4.14.225-syzkaller #0 [ 3456.133095] (UME) [ 3456.134995] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3456.137339] 2*512kB [ 3456.141253] Call Trace: [ 3456.143033] (UE) [ 3456.144942] dump_stack+0x1b2/0x281 [ 3456.146736] 4*1024kB [ 3456.150008] warn_alloc.cold+0x96/0x1cc [ 3456.152713] (UME) [ 3456.162470] ? zone_watermark_ok_safe+0x220/0x220 [ 3456.162492] __alloc_pages_nodemask+0x2127/0x2720 [ 3456.162503] ? lock_acquire+0x170/0x3f0 [ 3456.162516] ? lock_acquire+0x170/0x3f0 [ 3456.164674] 2*2048kB [ 3456.176960] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3456.176978] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 3456.176989] ? __mutex_unlock_slowpath+0x75/0x770 [ 3456.177004] alloc_pages_current+0x155/0x260 [ 3456.180022] (UM) [ 3456.183309] ion_page_pool_alloc+0x118/0x1b0 [ 3456.185350] 0*4096kB [ 3456.189963] ion_system_heap_allocate+0x133/0x8c0 [ 3456.189977] ? _raw_spin_unlock+0x29/0x40 [ 3456.189985] ? _ion_heap_freelist_drain+0x6e/0x410 [ 3456.189994] ? ion_system_contig_heap_create+0x130/0x130 [ 3456.190004] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 3456.190019] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 3456.196986] ion_alloc+0x27a/0x810 [ 3456.197000] ? ion_dma_buf_release+0x40/0x40 [ 3456.197012] ? __might_fault+0x177/0x1b0 [ 3456.197024] ion_ioctl+0xea/0x1f0 [ 3456.199150] Node 0 [ 3456.204412] ? ion_query_heaps+0x360/0x360 [ 3456.209611] = 10964kB [ 3456.213554] ? _raw_spin_unlock+0x29/0x40 [ 3456.213567] ? ion_query_heaps+0x360/0x360 [ 3456.217578] Node 0 [ 3456.219921] do_vfs_ioctl+0x75a/0xff0 [ 3456.224816] DMA32: 1348*4kB [ 3456.230445] ? ioctl_preallocate+0x1a0/0x1a0 [ 3456.230455] ? lock_downgrade+0x740/0x740 [ 3456.230467] ? __fget+0x225/0x360 [ 3456.230476] ? do_vfs_ioctl+0xff0/0xff0 [ 3456.230484] ? security_file_ioctl+0x83/0xb0 [ 3456.230495] SyS_ioctl+0x7f/0xb0 [ 3456.235542] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3456.239907] ? do_vfs_ioctl+0xff0/0xff0 [ 3456.239919] do_syscall_64+0x1d5/0x640 [ 3456.239935] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3456.239945] RIP: 0033:0x465f69 [ 3456.241992] lowmem_reserve[]: [ 3456.246623] RSP: 002b:00007f747b858188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3456.246634] RAX: ffffffffffffffda RBX: 000000000056c0b0 RCX: 0000000000465f69 [ 3456.246639] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 3456.246643] RBP: 00000000004bfa8f R08: 0000000000000000 R09: 0000000000000000 [ 3456.246651] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c0b0 [ 3456.249216] 0 [ 3456.254233] R13: 00007ffe6eac26ff R14: 00007f747b858300 R15: 0000000000022000 [ 3456.268259] warn_alloc_show_mem: 1 callbacks suppressed [ 3456.268263] Mem-Info: [ 3456.273065] (UME) [ 3456.274179] active_anon:16466 inactive_anon:90041 isolated_anon:0 [ 3456.274179] active_file:11 inactive_file:11 isolated_file:0 [ 3456.274179] unevictable:0 dirty:0 writeback:0 unstable:0 [ 3456.274179] slab_reclaimable:12370 slab_unreclaimable:114474 [ 3456.274179] mapped:52634 shmem:90898 pagetables:715 bounce:0 [ 3456.274179] free:14245 free_pcp:287 free_cma:0 [ 3456.279094] 576*8kB (UME) 212*16kB (UM) 70*32kB (UM) 40*64kB (UM) 8*128kB (UM) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 19216kB [ 3456.279146] Node 0 Normal: 0*4kB 0*8kB 0*16kB [ 3456.297987] Node 0 active_anon:64300kB inactive_anon:316600kB active_file:32kB inactive_file:32kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:210536kB dirty:0kB writeback:0kB shmem:319764kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3456.304781] 0 [ 3456.322948] Node 1 active_anon:1564kB inactive_anon:43564kB active_file:12kB inactive_file:12kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:43828kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3456.325852] 0 [ 3456.332944] Node 0 [ 3456.335585] 0 [ 3456.353359] DMA free:10964kB min:204kB low:252kB high:300kB active_anon:68kB inactive_anon:980kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3456.372858] 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 3456.372907] Node 1 Normal: 144*4kB (UME) 90*8kB (UME) 64*16kB (ME) 41*32kB (UME) 41*64kB (UME) 17*128kB (UME) 42*256kB (UME) 15*512kB [ 3456.390989] lowmem_reserve[]: [ 3456.395805] (UME) [ 3456.414770] 0 [ 3456.419921] 0*1024kB [ 3456.440277] 2717 [ 3456.444036] 0 [ 3456.454653] 2718 [ 3456.487953] 0*2048kB [ 3456.510504] 2718 [ 3456.575872] 2718 [ 3456.598153] 0*4096kB [ 3456.622738] = 26864kB [ 3456.623493] Node 0 [ 3456.625902] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3456.642583] DMA32 free:19216kB min:36200kB low:45248kB high:54296kB active_anon:64232kB inactive_anon:315620kB active_file:32kB inactive_file:32kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7264kB pagetables:2652kB bounce:0kB free_pcp:768kB local_pcp:648kB free_cma:0kB [ 3456.645997] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3456.669313] lowmem_reserve[]: [ 3456.689767] Node 1 Normal free:26864kB min:53696kB low:67120kB high:80544kB active_anon:1564kB inactive_anon:43564kB active_file:12kB inactive_file:12kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:288kB pagetables:208kB bounce:0kB free_pcp:380kB local_pcp:120kB free_cma:0kB [ 3456.708207] 0 [ 3456.725905] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3456.737225] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3456.743590] 0 [ 3456.746583] lowmem_reserve[]: 0 0 0 0 0 [ 3456.746604] Node 0 DMA: 5*4kB (ME) 6*8kB (UME) 11*16kB (UME) 7*32kB (ME) 0*64kB 4*128kB (ME) 3*256kB (UME) 2*512kB (UE) 4*1024kB (UME) 2*2048kB (UM) 0*4096kB = 10964kB [ 3456.771309] 90920 total pagecache pages [ 3456.773254] 0 0 0 [ 3456.775908] 0 pages in swap cache [ 3456.775915] Node 0 [ 3456.778129] Swap cache stats: add 0, delete 0, find 0/0 [ 3456.778223] Free swap = 0kB [ 3456.778228] Total swap = 0kB [ 3456.778236] 2097051 pages RAM [ 3456.778239] 0 pages HighMem/MovableOnly [ 3456.778242] 363840 pages reserved [ 3456.778245] 0 pages cma reserved [ 3456.796092] Node 0 DMA32: 1348*4kB (UME) 586*8kB (UME) 212*16kB (UM) 70*32kB (UM) 40*64kB (UM) 8*128kB (UM) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 19296kB [ 3456.888780] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3456.906154] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 3456.966203] Node 1 Normal: 199*4kB (UE) 91*8kB (UME) 57*16kB (UE) 45*32kB (UME) 178*64kB (UME) 24*128kB (UME) 134*256kB (UME) 15*512kB (UME) 0*1024kB 0*2048kB 0*4096kB = 60324kB [ 3457.005492] lowmem_reserve[]: 0 0 0 0 0 [ 3457.036249] Node 1 Normal free:38768kB min:53696kB low:67120kB high:80544kB active_anon:1564kB inactive_anon:43564kB active_file:888kB inactive_file:920kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:288kB pagetables:208kB bounce:0kB free_pcp:40kB local_pcp:40kB free_cma:0kB [ 3457.053019] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3457.083062] lowmem_reserve[]: 0 0 0 0 0 [ 3457.088321] syz-executor.5: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 3457.094699] Node 0 DMA: 5*4kB (ME) 6*8kB (UME) 10*16kB (ME) 9*32kB (UME) 0*64kB 4*128kB (ME) 3*256kB (UME) 2*512kB (UE) 4*1024kB (UME) 2*2048kB (UM) 0*4096kB = 11012kB [ 3457.115175] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 3457.126970] Node 0 DMA32: 1624*4kB (UME) 966*8kB (UME) 326*16kB (UM) 130*32kB (UM) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 23600kB [ 3457.127834] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3457.148939] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 3457.152982] CPU: 0 PID: 18481 Comm: syz-executor.5 Not tainted 4.14.225-syzkaller #0 [ 3457.170212] Node 1 [ 3457.172086] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3457.172093] Normal: [ 3457.174651] Call Trace: [ 3457.189449] dump_stack+0x1b2/0x281 [ 3457.191766] 245*4kB (UME) 171*8kB [ 3457.193339] warn_alloc.cold+0x96/0x1cc [ 3457.193352] ? zone_watermark_ok_safe+0x220/0x220 [ 3457.199464] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3457.201586] __alloc_pages_nodemask+0x2127/0x2720 [ 3457.214575] (UME) [ 3457.216404] ? __schedule+0x893/0x1de0 [ 3457.216421] ? lock_acquire+0x170/0x3f0 [ 3457.216437] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3457.216451] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 3457.216461] ? __mutex_unlock_slowpath+0x75/0x770 [ 3457.216474] alloc_pages_current+0x155/0x260 [ 3457.216490] ion_page_pool_alloc+0x118/0x1b0 [ 3457.216500] ion_system_heap_allocate+0x133/0x8c0 [ 3457.216514] ? _raw_spin_unlock+0x29/0x40 [ 3457.223337] 117*16kB [ 3457.223814] ? _ion_heap_freelist_drain+0x6e/0x410 [ 3457.235219] (UME) [ 3457.237438] ? ion_system_contig_heap_create+0x130/0x130 [ 3457.237450] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 3457.237460] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 3457.237470] ion_alloc+0x27a/0x810 [ 3457.237483] ? ion_dma_buf_release+0x40/0x40 [ 3457.237494] ? __might_fault+0x177/0x1b0 [ 3457.237504] ion_ioctl+0xea/0x1f0 [ 3457.237514] ? ion_query_heaps+0x360/0x360 [ 3457.237524] ? __fget+0x1fe/0x360 [ 3457.237532] ? ion_query_heaps+0x360/0x360 [ 3457.237541] do_vfs_ioctl+0x75a/0xff0 [ 3457.237554] ? ioctl_preallocate+0x1a0/0x1a0 [ 3457.245099] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3457.248309] ? lock_downgrade+0x740/0x740 [ 3457.248327] ? __fget+0x225/0x360 [ 3457.248335] ? do_vfs_ioctl+0xff0/0xff0 [ 3457.248345] ? security_file_ioctl+0x83/0xb0 [ 3457.248354] SyS_ioctl+0x7f/0xb0 [ 3457.248362] ? do_vfs_ioctl+0xff0/0xff0 [ 3457.248372] do_syscall_64+0x1d5/0x640 [ 3457.248388] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3457.248397] RIP: 0033:0x465f69 [ 3457.248401] RSP: 002b:00007f747b89a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3457.248412] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 3457.248417] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 3457.248423] RBP: 00000000004bfa8f R08: 0000000000000000 R09: 0000000000000000 [ 3457.248428] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 3457.248433] R13: 00007ffe6eac26ff R14: 00007f747b89a300 R15: 0000000000022000 [ 3457.356979] 80*32kB [ 3457.360780] 90943 total pagecache pages [ 3457.365019] (UME) [ 3457.371034] 0 pages in swap cache [ 3457.371040] Swap cache stats: add 0, delete 0, find 0/0 [ 3457.371044] Free swap = 0kB [ 3457.371047] Total swap = 0kB [ 3457.371054] 2097051 pages RAM [ 3457.371057] 0 pages HighMem/MovableOnly [ 3457.371067] 363840 pages reserved [ 3457.371070] 0 pages cma reserved [ 3457.371078] Out of memory (oom_kill_allocating_task): Kill process 17739 (systemd-journal) score 0 or sacrifice child [ 3457.371107] Killed process 17739 (systemd-journal) total-vm:46096kB, anon-rss:476kB, file-rss:0kB, shmem-rss:1628kB [ 3457.371972] oom_reaper: reaped process 17739 (systemd-journal), now anon-rss:0kB, file-rss:0kB, shmem-rss:1628kB [ 3457.388779] 41*64kB [ 3457.408341] kworker/1:0 invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask= [ 3457.423320] syz-executor.5: [ 3457.446181] (null) [ 3457.456150] page allocation failure: order:0 [ 3457.457123] systemd-journal: [ 3457.461081] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 3457.463403] page allocation failure: order:0 [ 3457.477194] (UME) [ 3457.478709] , order=0, oom_score_adj=0 [ 3457.483417] 16*128kB [ 3457.487674] kworker/1:0 cpuset=/ mems_allowed=0-1 [ 3457.487696] CPU: 1 PID: 7497 Comm: kworker/1:0 Not tainted 4.14.225-syzkaller #0 [ 3457.487701] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3457.487718] Workqueue: events cgroup1_release_agent [ 3457.487723] Call Trace: [ 3457.487742] dump_stack+0x1b2/0x281 [ 3457.487755] dump_header+0x178/0x82f [ 3457.501372] (null) [ 3457.516847] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 3457.516858] ? ___ratelimit+0x2cd/0x530 [ 3457.516867] oom_kill_process.cold+0x10/0xb18 [ 3457.516878] ? lock_downgrade+0x740/0x740 [ 3457.516891] out_of_memory+0x2dc/0x1190 [ 3457.528237] (ME) [ 3457.539862] ? oom_killer_disable+0x1c0/0x1c0 [ 3457.539872] ? mutex_trylock+0x152/0x1a0 [ 3457.539883] __alloc_pages_nodemask+0x23e1/0x2720 [ 3457.539901] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3457.550990] 31*256kB [ 3457.553445] ? mark_held_locks+0xa6/0xf0 [ 3457.564893] syz-executor.5 cpuset= [ 3457.568573] ? cache_grow_begin+0x41/0x630 [ 3457.568585] cache_grow_begin+0x91/0x630 [ 3457.570893] / [ 3457.575569] ? cache_grow_begin+0x91/0x630 [ 3457.579652] (UME) [ 3457.587491] fallback_alloc+0x207/0x2c0 [ 3457.587506] __kmalloc_track_caller+0x20e/0x400 [ 3457.587516] ? cgroup1_release_agent+0xe0/0x250 [ 3457.587531] kstrdup+0x36/0x70 [ 3457.592162] mems_allowed=0-1 [ 3457.594300] cgroup1_release_agent+0xe0/0x250 [ 3457.606485] 15*512kB [ 3457.613124] ? cgroup1_check_for_release+0x1b0/0x1b0 [ 3457.636482] (UME) [ 3457.637651] ? lock_acquire+0x170/0x3f0 [ 3457.639859] 0*1024kB [ 3457.644943] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 3457.666497] 0*2048kB [ 3457.668055] process_one_work+0x793/0x14a0 [ 3457.672121] 0*4096kB [ 3457.677985] ? work_busy+0x320/0x320 [ 3457.677993] ? worker_thread+0x158/0xff0 [ 3457.678003] ? _raw_spin_unlock_irq+0x24/0x80 [ 3457.678018] worker_thread+0x5cc/0xff0 [ 3457.696586] = 27068kB [ 3457.697664] ? rescuer_thread+0xc80/0xc80 [ 3457.701697] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3457.703485] kthread+0x30d/0x420 [ 3457.726595] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3457.728935] ? kthread_create_on_node+0xd0/0xd0 [ 3457.732115] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3457.736618] ret_from_fork+0x24/0x30 [ 3457.736805] , mode:0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask= [ 3457.739062] CPU: 0 PID: 18481 Comm: syz-executor.5 Not tainted 4.14.225-syzkaller #0 [ 3457.744433] (null) [ 3457.746600] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3457.746605] Call Trace: [ 3457.746626] dump_stack+0x1b2/0x281 [ 3457.746637] warn_alloc.cold+0x96/0x1cc [ 3457.746648] ? perf_trace_drv_sw_scan_start+0x530/0x6e0 [ 3457.746657] ? zone_watermark_ok_safe+0x220/0x220 [ 3457.746666] ? usleep_range+0x130/0x130 [ 3457.746676] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 3457.750636] systemd-journal cpuset= [ 3457.753029] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 3457.758527] / [ 3457.760954] ? run_timer_softirq+0x5a0/0x5a0 [ 3457.765283] mems_allowed=0-1 [ 3457.767707] __alloc_pages_nodemask+0x2127/0x2720 [ 3457.767724] ? lock_acquire+0x170/0x3f0 [ 3457.767738] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3457.927607] ? ion_page_pool_alloc+0x9e/0x1b0 [ 3457.932144] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 3457.938121] alloc_pages_current+0x155/0x260 [ 3457.942927] ion_page_pool_alloc+0x118/0x1b0 [ 3457.947335] ion_system_heap_allocate+0x133/0x8c0 [ 3457.952179] ? _raw_spin_unlock+0x29/0x40 [ 3457.956308] ? _ion_heap_freelist_drain+0x6e/0x410 [ 3457.961235] ? ion_system_contig_heap_create+0x130/0x130 [ 3457.966684] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 3457.971696] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 3457.976540] ion_alloc+0x27a/0x810 [ 3457.980082] ? ion_dma_buf_release+0x40/0x40 [ 3457.984490] ? __might_fault+0x177/0x1b0 [ 3457.986680] Mem-Info: [ 3457.988562] ion_ioctl+0xea/0x1f0 [ 3457.991006] active_anon:16366 inactive_anon:90041 isolated_anon:0 [ 3457.991006] active_file:29 inactive_file:16 isolated_file:0 [ 3457.991006] unevictable:0 dirty:0 writeback:0 unstable:0 [ 3457.991006] slab_reclaimable:12370 slab_unreclaimable:114475 [ 3457.991006] mapped:52659 shmem:90898 pagetables:715 bounce:0 [ 3457.991006] free:13852 free_pcp:178 free_cma:0 [ 3457.994436] ? ion_query_heaps+0x360/0x360 [ 3458.031894] ? __fget+0x1fe/0x360 [ 3458.035333] ? ion_query_heaps+0x360/0x360 [ 3458.039898] do_vfs_ioctl+0x75a/0xff0 [ 3458.043680] ? ioctl_preallocate+0x1a0/0x1a0 [ 3458.048091] ? lock_downgrade+0x740/0x740 [ 3458.052879] ? __fget+0x225/0x360 [ 3458.056337] ? do_vfs_ioctl+0xff0/0xff0 [ 3458.060319] ? security_file_ioctl+0x83/0xb0 [ 3458.064804] SyS_ioctl+0x7f/0xb0 [ 3458.066762] Node 0 active_anon:63900kB inactive_anon:316600kB active_file:32kB inactive_file:20kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:210536kB dirty:0kB writeback:0kB shmem:319764kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3458.068156] ? do_vfs_ioctl+0xff0/0xff0 [ 3458.100619] do_syscall_64+0x1d5/0x640 [ 3458.105298] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3458.110478] RIP: 0033:0x465f69 [ 3458.113822] RSP: 002b:00007f747b89a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3458.121601] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 3458.126778] Node 1 active_anon:1564kB inactive_anon:43564kB active_file:84kB inactive_file:44kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:100kB dirty:0kB writeback:0kB shmem:43828kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3458.128854] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 3458.128862] RBP: 00000000004bfa8f R08: 0000000000000000 R09: 0000000000000000 [ 3458.171030] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 3458.178381] R13: 00007ffe6eac26ff R14: 00007f747b89a300 R15: 0000000000022000 [ 3458.186331] CPU: 1 PID: 17739 Comm: systemd-journal Not tainted 4.14.225-syzkaller #0 [ 3458.194312] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3458.203700] Call Trace: [ 3458.206530] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3458.206554] dump_stack+0x1b2/0x281 [ 3458.218727] warn_alloc.cold+0x96/0x1cc [ 3458.221408] 90926 total pagecache pages [ 3458.222779] ? zone_watermark_ok_safe+0x220/0x220 [ 3458.226822] 0 pages in swap cache [ 3458.231698] ? usleep_range+0x130/0x130 [ 3458.235132] Swap cache stats: add 0, delete 0, find 0/0 [ 3458.239186] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 3458.239197] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 3458.239205] ? run_timer_softirq+0x5a0/0x5a0 [ 3458.239219] __alloc_pages_nodemask+0x2127/0x2720 [ 3458.244854] Free swap = 0kB [ 3458.249969] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3458.249993] alloc_pages_current+0x155/0x260 [ 3458.255061] Total swap = 0kB [ 3458.259450] filemap_fault+0xea3/0x1980 [ 3458.259471] ext4_filemap_fault+0x84/0xb0 [ 3458.264291] 2097051 pages RAM [ 3458.267301] __do_fault+0xfa/0x380 [ 3458.267310] __handle_mm_fault+0x2497/0x4620 [ 3458.267321] ? ep_poll+0x1ab/0xa50 [ 3458.272139] 0 pages HighMem/MovableOnly [ 3458.278001] ? vm_insert_page+0x7c0/0x7c0 [ 3458.278021] handle_mm_fault+0x391/0x860 [ 3458.278034] __do_page_fault+0x549/0xad0 [ 3458.283650] 363840 pages reserved [ 3458.288042] ? spurious_fault+0x640/0x640 [ 3458.288051] ? do_page_fault+0x60/0x500 [ 3458.288061] ? page_fault+0x2f/0x50 [ 3458.292357] 0 pages cma reserved [ 3458.296083] page_fault+0x45/0x50 [ 3458.330735] warn_alloc_show_mem: 1 callbacks suppressed [ 3458.330739] Mem-Info: [ 3458.332056] RIP: 0001:0x1 [ 3458.336020] active_anon:16366 inactive_anon:90041 isolated_anon:0 [ 3458.336020] active_file:36 inactive_file:16 isolated_file:0 [ 3458.336020] unevictable:0 dirty:0 writeback:0 unstable:0 [ 3458.336020] slab_reclaimable:12370 slab_unreclaimable:114472 [ 3458.336020] mapped:52658 shmem:90898 pagetables:715 bounce:0 [ 3458.336020] free:13921 free_pcp:177 free_cma:0 [ 3458.339612] RSP: 8b4c3310:00007fff5942cf30 EFLAGS: 7fff5942cd40 [ 3458.339753] Node 0 [ 3458.343010] Node 0 active_anon:63900kB inactive_anon:316600kB active_file:64kB inactive_file:12kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:210600kB dirty:0kB writeback:0kB shmem:319764kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3458.346529] DMA free:10972kB min:204kB low:252kB high:300kB active_anon:68kB inactive_anon:980kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3458.352732] syz-executor.5: [ 3458.354956] lowmem_reserve[]: [ 3458.368611] page allocation failure: order:0 [ 3458.391276] 0 [ 3458.407825] Node 1 active_anon:1564kB inactive_anon:43564kB active_file:80kB inactive_file:52kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:32kB dirty:0kB writeback:0kB shmem:43828kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3458.428378] 2717 2718 2718 2718 [ 3458.428395] Node 0 DMA32 free:18020kB min:36200kB low:45248kB high:54296kB active_anon:63832kB inactive_anon:315620kB active_file:64kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7264kB pagetables:2652kB bounce:0kB free_pcp:708kB local_pcp:596kB free_cma:0kB [ 3458.428414] lowmem_reserve[]: 0 0 0 0 0 [ 3458.428433] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3458.428452] lowmem_reserve[]: [ 3458.464633] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 3458.464873] 0 [ 3458.466670] (null) [ 3458.499049] 0 [ 3458.506677] Node 0 [ 3458.531991] 0 [ 3458.540217] syz-executor.5 cpuset= [ 3458.566554] 0 [ 3458.573538] DMA free:10972kB min:204kB low:252kB high:300kB active_anon:68kB inactive_anon:980kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3458.573923] 0 [ 3458.575704] lowmem_reserve[]: [ 3458.591163] 0 [ 3458.621254] Node 1 [ 3458.622320] / [ 3458.623067] Normal free:26692kB min:53696kB low:67120kB high:80544kB active_anon:1564kB inactive_anon:43564kB active_file:16kB inactive_file:8kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:288kB pagetables:208kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3458.625276] mems_allowed=0-1 [ 3458.629919] lowmem_reserve[]: [ 3458.658916] 2717 2718 2718 2718 [ 3458.664921] 0 [ 3458.665391] Node 0 [ 3458.665393] 0 0 0 0 [ 3458.670186] DMA32 free:18132kB min:36200kB low:45248kB high:54296kB active_anon:63832kB inactive_anon:315620kB active_file:64kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7264kB pagetables:2652kB bounce:0kB free_pcp:708kB local_pcp:192kB free_cma:0kB [ 3458.671803] Node 0 [ 3458.704437] CPU: 0 PID: 18515 Comm: syz-executor.5 Not tainted 4.14.225-syzkaller #0 [ 3458.708224] DMA: [ 3458.714532] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3458.714536] Call Trace: [ 3458.714554] dump_stack+0x1b2/0x281 [ 3458.714567] warn_alloc.cold+0x96/0x1cc [ 3458.714579] ? zone_watermark_ok_safe+0x220/0x220 [ 3458.714589] ? usleep_range+0x130/0x130 [ 3458.714605] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 3458.716985] 5*4kB [ 3458.727019] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 3458.727028] ? run_timer_softirq+0x5a0/0x5a0 [ 3458.727042] __alloc_pages_nodemask+0x2127/0x2720 [ 3458.727055] ? lock_acquire+0x170/0x3f0 [ 3458.727067] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3458.727078] ? ion_page_pool_alloc+0x9e/0x1b0 [ 3458.727090] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 3458.727108] alloc_pages_current+0x155/0x260 [ 3458.727120] ion_page_pool_alloc+0x118/0x1b0 [ 3458.727130] ion_system_heap_allocate+0x133/0x8c0 [ 3458.727140] ? _raw_spin_unlock+0x29/0x40 [ 3458.727150] ? _ion_heap_freelist_drain+0x6e/0x410 [ 3458.727159] ? ion_system_contig_heap_create+0x130/0x130 [ 3458.727168] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 3458.727179] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 3458.736706] (ME) [ 3458.737313] ion_alloc+0x27a/0x810 [ 3458.737327] ? ion_dma_buf_release+0x40/0x40 [ 3458.737339] ? __might_fault+0x177/0x1b0 [ 3458.737349] ion_ioctl+0xea/0x1f0 [ 3458.737358] ? ion_query_heaps+0x360/0x360 [ 3458.737371] ? _raw_spin_unlock+0x29/0x40 [ 3458.737379] ? ion_query_heaps+0x360/0x360 [ 3458.737389] do_vfs_ioctl+0x75a/0xff0 [ 3458.737401] ? ioctl_preallocate+0x1a0/0x1a0 [ 3458.737408] ? lock_downgrade+0x740/0x740 [ 3458.737421] ? __fget+0x225/0x360 [ 3458.737429] ? do_vfs_ioctl+0xff0/0xff0 [ 3458.737437] ? security_file_ioctl+0x83/0xb0 [ 3458.737447] SyS_ioctl+0x7f/0xb0 [ 3458.737454] ? do_vfs_ioctl+0xff0/0xff0 [ 3458.737464] do_syscall_64+0x1d5/0x640 [ 3458.737479] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3458.737486] RIP: 0033:0x465f69 [ 3458.737490] RSP: 002b:00007f747b858188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3458.737498] RAX: ffffffffffffffda RBX: 000000000056c0b0 RCX: 0000000000465f69 [ 3458.737504] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 3458.737509] RBP: 00000000004bfa8f R08: 0000000000000000 R09: 0000000000000000 [ 3458.737513] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c0b0 [ 3458.737518] R13: 00007ffe6eac26ff R14: 00007f747b858300 R15: 0000000000022000 [ 3458.741302] lowmem_reserve[]: [ 3458.742386] 5*8kB [ 3458.746339] 0 0 [ 3458.760767] (ME) [ 3458.769203] 0 [ 3458.790453] 10*16kB [ 3458.792112] 0 [ 3458.795662] (ME) 8*32kB (UME) 0*64kB 4*128kB (ME) 3*256kB (UME) 2*512kB (UE) 4*1024kB (UME) 2*2048kB (UM) 0*4096kB = 10972kB [ 3458.795705] Node 0 DMA32: 1076*4kB (UME) 534*8kB (UME) 328*16kB (UM) 133*32kB (UM) 179*64kB (U) 109*128kB (U) 0*256kB 0*512kB 1*1024kB (U) 0*2048kB 0*4096kB = 44512kB [ 3458.795768] Node 0 Normal: 0*4kB 0*8kB 0*16kB [ 3458.801348] 0 [ 3458.837140] 0*32kB [ 3458.843079] 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 3458.843107] Node 1 Normal: 245*4kB (UME) 171*8kB (UME) 117*16kB (UME) 80*32kB (UME) 1678*64kB (UME) 18*128kB (UME) 35*256kB (UME) 18*512kB (UME) 0*1024kB 0*2048kB 0*4096kB = 134652kB [ 3458.843176] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3458.843182] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3458.843188] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3458.843194] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3458.843198] 91000 total pagecache pages [ 3458.843208] 0 pages in swap cache [ 3458.848197] Node 0 [ 3458.890495] Swap cache stats: add 0, delete 0, find 0/0 [ 3458.891249] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3458.894802] Free swap = 0kB [ 3458.899081] lowmem_reserve[]: [ 3458.922771] Total swap = 0kB [ 3458.930369] 0 [ 3458.952364] 2097051 pages RAM [ 3458.955145] 0 0 0 0 [ 3458.955161] Node 1 Normal free:200444kB min:53696kB low:67120kB high:80544kB active_anon:1564kB inactive_anon:43564kB active_file:16kB inactive_file:8kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:288kB pagetables:208kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3458.955181] lowmem_reserve[]: 0 [ 3458.961465] 0 pages HighMem/MovableOnly [ 3458.961480] 0 [ 3458.964068] 363840 pages reserved [ 3458.976333] 0 [ 3458.983623] 0 pages cma reserved [ 3459.032524] 0 [ 3459.038701] Out of memory: Kill process 18472 (syz-executor.3) score 1004 or sacrifice child [ 3459.053825] 0 [ 3459.065817] Killed process 18478 (syz-executor.3) total-vm:93516kB, anon-rss:160kB, file-rss:34820kB, shmem-rss:0kB [ 3459.140970] oom_reaper: reaped process 18478 (syz-executor.3), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 3459.251550] Node 0 DMA: 5*4kB (ME) 5*8kB (ME) 10*16kB (ME) 8*32kB (UME) 0*64kB 4*128kB (ME) 3*256kB (UME) 2*512kB (UE) 4*1024kB (UME) 2*2048kB (UM) 0*4096kB = 10972kB [ 3459.287404] Node 0 DMA32: 93*4kB (E) 299*8kB (UME) 315*16kB (UM) 133*32kB (UM) 257*64kB (U) 114*128kB (U) 42*256kB (U) 0*512kB 1*1024kB (U) 0*2048kB 0*4096kB = 54876kB [ 3459.316368] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 3459.335932] Node 1 Normal: 245*4kB (UME) 171*8kB (UME) 117*16kB (UME) 80*32kB (UME) 2225*64kB (UME) 179*128kB (UME) 73*256kB (UME) 19*512kB (UME) 0*1024kB 0*2048kB 0*4096kB = 200508kB [ 3459.370555] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3459.391290] systemd[1]: systemd-journald.service: Failed with result 'signal'. [ 3459.399027] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3459.408230] systemd[1]: systemd-journald.service: Service has no hold-off time, scheduling restart. [ 3459.417978] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3459.426827] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3459.439061] systemd[1]: Stopped Journal Service. [ 3459.453569] systemd[1]: Starting Journal Service... [ 3459.458727] 93199 total pagecache pages [ 3459.462708] 0 pages in swap cache [ 3459.466152] Swap cache stats: add 0, delete 0, find 0/0 [ 3459.477609] Free swap = 0kB [ 3459.481022] Total swap = 0kB [ 3459.484772] 2097051 pages RAM [ 3459.488032] 0 pages HighMem/MovableOnly [ 3459.493712] 363840 pages reserved [ 3459.497764] 0 pages cma reserved [ 3459.501317] systemd[1]: rsyslog.service: Service hold-off time over, scheduling restart. [ 3459.530434] systemd[1]: Stopped System Logging Service. [ 3459.552453] systemd[1]: Starting System Logging Service... 05:23:11 executing program 0: socketpair(0x1, 0x0, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x34, 0x0, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x100}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x8001) 05:23:11 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x2080000001, 0x32}) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vmci\x00', 0x2, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_DETACH(r1, 0x7aa, &(0x7f0000000080)={{@local, 0x20}, 0x200, 0x7}) [ 3459.760468] systemd-journald[18519]: File /run/log/journal/64dd78f1a75445a997c532444ad0f085/system.journal corrupted or uncleanly shut down, renaming and replacing. [ 3460.041624] systemd[1]: Started System Logging Service. [ 3460.302884] systemd[1]: Started Journal Service. 05:23:12 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x200001, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x2}) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x0, 0x0) read$sequencer(r1, 0x0, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x0, 0x0) read$sequencer(r2, 0x0, 0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) timerfd_settime(r2, 0x0, &(0x7f0000000140)={{0x77359400}, {r3, r4+60000000}}, &(0x7f0000000180)) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x4, 0x20}) connect$llc(0xffffffffffffffff, &(0x7f0000000000)={0x1a, 0x336, 0xd8, 0x1, 0x80, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x10) bind$pptp(r1, &(0x7f0000000200)={0x18, 0x2, {0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1e) sched_rr_get_interval(0x0, &(0x7f00000001c0)) 05:23:12 executing program 4: r0 = add_key$fscrypt_v1(&(0x7f0000000000)='logon\x00', &(0x7f0000000080)={'fscrypt:', @desc3='e8dab99234bb312e'}, &(0x7f00000000c0)={0x0, "01b312956356957445a7fdef5b815e85c96fffefd2c7a05f287d2b1de558d2eb84a32160aaf272d5cdad41dc7e36c7000000002c7533ba99425d6dc4b4786c59"}, 0x48, 0xfffffffffffffffe) keyctl$set_timeout(0xf, r0, 0xfff) keyctl$read(0xb, r0, &(0x7f0000000080)=""/153, 0x99) socketpair(0x18, 0x800, 0x3ffee, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) keyctl$assume_authority(0x10, r0) ioctl$BLKIOOPT(r2, 0x1279, &(0x7f0000000000)) recvfrom$llc(r1, 0x0, 0x0, 0x0, 0x0, 0x0) keyctl$negate(0xd, r0, 0x0, r0) r3 = add_key$fscrypt_v1(&(0x7f0000000140)='logon\x00', &(0x7f0000000180)={'fscrypt:', @auto=[0x31, 0x62, 0x34, 0x38, 0x67, 0x61, 0x33, 0x61, 0x63, 0x63, 0x54, 0x34, 0x36, 0x32, 0x37, 0x39]}, &(0x7f00000001c0)={0x0, "9c46b7d2269848a1c6159fd2ebac018621babe8244966be9d00eefbb06da784a81cf0fd092fcc43789458eb502417dba7fc3e83eb732918b8ed585e57f4ff001", 0x40}, 0x48, r0) r4 = add_key$fscrypt_v1(&(0x7f0000000000)='logon\x00', &(0x7f0000000080)={'fscrypt:', @desc3='e8dab99234bb312e'}, &(0x7f00000000c0)={0x0, "01b312956356957445a7fdef5b815e85c96fffefd2c7a05f287d2b1de558d2eb84a32160aaf272d5cdad41dc7e36c7000000002c7533ba99425d6dc4b4786c59"}, 0x48, 0xfffffffffffffffe) r5 = add_key$fscrypt_v1(&(0x7f0000000240)='logon\x00', &(0x7f0000000280)={'fscrypt:', @desc2='e355a76a11a1be18'}, &(0x7f00000002c0)={0x0, "a649f044ef8c393321aaa7104d3deec71d33e6d86b1f2b7342c6cc88a99347f41112c1c114c835855b802b5c7c1c9da61300b783ddf9fdf4b6b8bec3fd737b2a", 0x33}, 0x48, r3) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000000340)={r5, 0xc0, 0x87}, 0x0, &(0x7f0000000380)="e228242313bfebaf4a4bf91415d2a199791fd35a1a7e657ee81102353798e08fa41939001102aef6af0b08d722ba11802db55e0032ffbcdaedc2a010d3bd53f64c4f106b89fe076f42d79f65e314fc16ecc48356c52920b9ff0ef10b78d27ee31ab64ddeea52c7ad449be885f294d650d9f7eda591af86463daaf0c5c339ff5d44ae5c7a116ebc161668f9d75d476f995688ee589274e7c4867c272a3e31d853369359ebb1c7695ddaf0c16910c36c49e9e8aa58110eac87e02ce62ffbc46533", &(0x7f0000000440)="4c365fb7527ea3f24d0aa17bb400f62e088d3d633a915bf20a2ac6bf4cb7dc00345a0e6e1a286ad1bf5ae81e99961e103a11a22196f276c509ec9e8401c6cfec59836c42554fa8133c5dd1cabd9e14f529f87d7112ccf78ffc857623b4d04b2d1641e8d03d0b9786bfca32341b4112f762e3538b870c89ddfaf7be49890a6306fc4a627b0f839a") keyctl$set_timeout(0xf, r4, 0xfff) keyctl$reject(0x13, r3, 0x5, 0x6, r4) 05:23:12 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) write$dsp(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDCTL_SEQ_NRMIDIS(0xffffffffffffffff, 0x8004510b, &(0x7f0000000280)) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x80000001, 0x32}) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x0, 0x0) read$sequencer(r1, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000140)={'ip6tnl0\x00', 0x0, 0x29, 0x92, 0x0, 0x3d3, 0x10, @rand_addr=' \x01\x00', @empty, 0x1, 0x8000, 0x4}}) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r1, 0x89f5, &(0x7f0000000240)={'ip6tnl0\x00', &(0x7f00000001c0)={'syztnl1\x00', r2, 0x2f, 0x7, 0x0, 0x400, 0x0, @loopback, @empty, 0x8, 0x8000, 0x9, 0xbd38}}) ioctl$SNDCTL_TMR_SOURCE(r1, 0xc0045406) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(0xffffffffffffffff, 0x7a5, &(0x7f0000000000)={{@any, 0x7}, 0x1, 0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(0xffffffffffffffff, 0x7a4, &(0x7f00000000c0)={{@hyper}, 0x9, 0x3f}) 05:23:12 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvram\x00', 0x2, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000000c0)={0x9, 0x1}) ioctl$SNDCTL_DSP_GETOSPACE(0xffffffffffffffff, 0x8010500c, &(0x7f0000000000)) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x2080000001, 0x32}) 05:23:12 executing program 0: socketpair(0x1, 0x2, 0x0, 0x0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x34, 0x0, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x100}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x8001) 05:23:12 executing program 2: socketpair(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$bt_sco(r0, 0x0, 0x0) 05:23:12 executing program 0: socketpair(0x1, 0x2, 0x0, 0x0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x34, 0x0, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x100}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x8001) 05:23:12 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x0, 0x0) read$sequencer(r1, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140)='batadv\x00', 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)={0x1c, r3, 0x9312bf8ddbe7cb65, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}]}, 0x1c}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000000)={'ip6tnl0\x00', &(0x7f0000000080)={'ip6_vti0\x00', r5, 0x2f, 0x7, 0x40, 0x5, 0x48, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @empty, 0x80, 0x8, 0x6, 0x7}}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x2080000001, 0x32}) 05:23:12 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x101380, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x2080000001, 0x32}) 05:23:12 executing program 0: socketpair(0x1, 0x2, 0x0, 0x0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x34, 0x0, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x100}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x8001) 05:23:12 executing program 2: socketpair(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$bt_sco(r0, 0x0, 0x0) 05:23:12 executing program 4: socketpair(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x0, 0x0) ioctl$SNDCTL_MIDI_INFO(r2, 0xc074510c, &(0x7f0000000280)={"b5118eaf7afeb2cea77bc9c52f86e7e79a9242098c2a2eac7f55339289b5", 0x7, 0x53, 0x7, [0x3ff, 0x59, 0x2, 0x4c, 0x1, 0x40, 0x40, 0x1f, 0x3f, 0x7, 0x100, 0x3, 0xffff1750, 0x0, 0x0, 0x40, 0x3, 0x21]}) sendmsg$BATADV_CMD_GET_VLAN(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={0x0}}, 0x0) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00', 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9c349ebf", @ANYRES16=r3, @ANYBLOB="04002cbd7000fddbdf250300000008002c000000000005002900010000000600280003000000050035009d000000050035000400000008003a00070000000500290000000000330003d65822249558cf9ba691e84d57e9b8994b4266d3c1848ac14c3de9d2838e68057f115e4b32fd5322f873929b6f903bd90581000cf6"], 0x4c}, 0x1, 0x0, 0x0, 0x4000880}, 0x44) recvfrom$llc(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 05:23:12 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000300)={'ip6_vti0\x00', &(0x7f0000000280)={'ip6tnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @mcast2}}) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x92002, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x2080000001, 0x32}) 05:23:12 executing program 1: sched_rr_get_interval(0x0, &(0x7f0000000200)) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000240)={0x2080000000, 0x30}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$BATADV_CMD_GET_VLAN(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={0x0}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$smc(&(0x7f0000000080)='SMC_PNETID\x00', 0xffffffffffffffff) sendmsg$SMC_PNETID_ADD(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x34, r3, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'lo\x00'}]}, 0x34}}, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x60, r3, 0x4, 0x70bd29, 0x25dfdbfe, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'syzkaller0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000001) 05:23:13 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x141102, 0x0) openat$audio1(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio1\x00', 0x0, 0x0) write$dsp(0xffffffffffffffff, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x80000001, 0x32}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(0xffffffffffffffff, 0x7a5, &(0x7f0000000000)={{@any, 0x7}, 0x1, 0x1}) r1 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio1\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_GETIPTR(r1, 0x800c5011, &(0x7f0000000080)) ioctl$SNDCTL_DSP_STEREO(r1, 0xc0045003, &(0x7f0000000140)=0x1) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(0xffffffffffffffff, 0x7a4, &(0x7f00000000c0)={{@hyper}, 0x9, 0x3f}) 05:23:13 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x100, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x2080000001, 0x32}) 05:23:13 executing program 1: openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x0, 0x0) read$sequencer(r0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x1000, 0x32}) 05:23:13 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x20000, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x2080000001, 0x32}) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x0, 0x0) read$sequencer(r1, 0x0, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x0, 0x0) read$sequencer(r2, 0x0, 0x0) ioctl$SNDCTL_SEQ_GETOUTCOUNT(r1, 0x80045104, &(0x7f0000000100)) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000000c0)={0x2, 0x14}) 05:23:13 executing program 0: socketpair(0x1, 0x2, 0x0, &(0x7f0000000080)) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x34, 0x0, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x100}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x8001) 05:23:13 executing program 0: socketpair(0x1, 0x2, 0x0, &(0x7f0000000080)) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x34, 0x0, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x100}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x8001) 05:23:13 executing program 3: ioctl$BLKFRASET(0xffffffffffffffff, 0x1264, &(0x7f0000000200)=0x3) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nullb0\x00', 0x800, 0x0) ioctl$HDIO_GETGEO(r0, 0x301, &(0x7f0000000a00)) ioctl$BLKRAGET(r0, 0x1263, &(0x7f0000000240)) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x2080000001, 0x32}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00', 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x44, r3, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x4}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xab}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x4}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0xc000}, 0x880) 05:23:13 executing program 0: socketpair(0x1, 0x2, 0x0, &(0x7f0000000080)) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x34, 0x0, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x100}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x8001) 05:23:13 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x2080000001, 0x32}) r1 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$VIDIOC_ENUM_DV_TIMINGS(r1, 0xc0945662, &(0x7f0000000140)={0x5, 0x0, [], {0x0, @bt={0x80000000, 0x2, 0x0, 0x2, 0xd, 0x4, 0x7ffb, 0x1000, 0x1ff, 0x8001, 0x40, 0xffff0000, 0x9, 0x9, 0x3, 0x12, {0x7, 0x1ff}, 0x4, 0x4d}}}) 05:23:13 executing program 4: socketpair(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nullb0\x00', 0x800, 0x0) ioctl$HDIO_GETGEO(r2, 0x301, &(0x7f0000000a00)) ioctl$IOC_PR_RESERVE(r2, 0x401070c9, &(0x7f00000000c0)={0x0, 0x7, 0x1}) recvfrom$llc(r0, 0x0, 0x0, 0x0, 0x0, 0x0) accept4$llc(r1, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f0000000040)=0x10, 0x40800) 05:23:13 executing program 0: socketpair(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, 0x0, 0x8001) 05:23:13 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) accept$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000080)=0x14) ioctl$SNDCTL_TMR_SOURCE(0xffffffffffffffff, 0xc0045406) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f00000001c0)={0x34, 0x0, &(0x7f0000000180)}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x2080000001, 0x32}) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x4002, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x0, 0x0) read$sequencer(r2, 0x0, 0x0) ioctl$IOCTL_VMCI_CTX_REMOVE_NOTIFICATION(r2, 0x7b0, &(0x7f0000000200)={@hyper, 0x7fff}) ioctl$IOC_PR_RESERVE(r1, 0x401070c9, &(0x7f0000000140)={0x1, 0x1}) [ 3462.041617] syz-executor.5: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 3462.057672] syz-executor.5: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 3462.060202] syz-executor.5 cpuset= [ 3462.118740] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 3462.149332] CPU: 1 PID: 18595 Comm: syz-executor.5 Not tainted 4.14.225-syzkaller #0 [ 3462.157233] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3462.166582] Call Trace: [ 3462.169177] dump_stack+0x1b2/0x281 [ 3462.172806] warn_alloc.cold+0x96/0x1cc [ 3462.176787] ? zone_watermark_ok_safe+0x220/0x220 [ 3462.181216] / mems_allowed=0-1 [ 3462.181639] __alloc_pages_nodemask+0x2127/0x2720 [ 3462.189644] ? lock_acquire+0x170/0x3f0 [ 3462.193624] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3462.198468] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 3462.203909] ? __mutex_unlock_slowpath+0x75/0x770 [ 3462.208740] alloc_pages_current+0x155/0x260 [ 3462.213144] ion_page_pool_alloc+0x118/0x1b0 [ 3462.217548] ion_system_heap_allocate+0x133/0x8c0 [ 3462.222385] ? ion_alloc+0x187/0x810 [ 3462.226092] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 3462.231536] ? ion_system_contig_heap_create+0x130/0x130 [ 3462.236990] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 3462.242004] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 3462.246842] ion_alloc+0x204/0x810 [ 3462.250815] ? ion_dma_buf_release+0x40/0x40 [ 3462.255218] ? __might_fault+0x177/0x1b0 [ 3462.259270] ion_ioctl+0xea/0x1f0 [ 3462.262703] ? ion_query_heaps+0x360/0x360 [ 3462.266917] ? __fget+0x1fe/0x360 [ 3462.270370] ? ion_query_heaps+0x360/0x360 [ 3462.274594] do_vfs_ioctl+0x75a/0xff0 [ 3462.278751] ? ioctl_preallocate+0x1a0/0x1a0 [ 3462.279114] syz-executor.4 invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask= [ 3462.283149] ? lock_downgrade+0x740/0x740 [ 3462.283163] ? __fget+0x225/0x360 [ 3462.300781] ? do_vfs_ioctl+0xff0/0xff0 [ 3462.304752] ? security_file_ioctl+0x83/0xb0 [ 3462.309160] SyS_ioctl+0x7f/0xb0 [ 3462.312615] ? do_vfs_ioctl+0xff0/0xff0 [ 3462.316572] do_syscall_64+0x1d5/0x640 [ 3462.320453] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3462.325657] RIP: 0033:0x465f69 [ 3462.328843] RSP: 002b:00007f747b879188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3462.336542] RAX: ffffffffffffffda RBX: 000000000056c008 RCX: 0000000000465f69 [ 3462.343802] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 3462.351051] RBP: 00000000004bfa8f R08: 0000000000000000 R09: 0000000000000000 [ 3462.358299] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c008 [ 3462.365547] R13: 00007ffe6eac26ff R14: 00007f747b879300 R15: 0000000000022000 [ 3462.372828] (null), order=0, oom_score_adj=0 [ 3462.377330] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 3462.423017] CPU: 0 PID: 18587 Comm: syz-executor.5 Not tainted 4.14.225-syzkaller #0 [ 3462.430921] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3462.432884] warn_alloc_show_mem: 2 callbacks suppressed [ 3462.432887] Mem-Info: [ 3462.440261] Call Trace: [ 3462.440282] dump_stack+0x1b2/0x281 [ 3462.440295] warn_alloc.cold+0x96/0x1cc [ 3462.440306] ? zone_watermark_ok_safe+0x220/0x220 [ 3462.440330] __alloc_pages_nodemask+0x2127/0x2720 [ 3462.463125] active_anon:16894 inactive_anon:90041 isolated_anon:0 [ 3462.463125] active_file:23 inactive_file:10 isolated_file:0 [ 3462.463125] unevictable:0 dirty:11 writeback:0 unstable:0 [ 3462.463125] slab_reclaimable:12448 slab_unreclaimable:116203 [ 3462.463125] mapped:52679 shmem:90898 pagetables:775 bounce:0 [ 3462.463125] free:25198 free_pcp:0 free_cma:0 [ 3462.463143] Node 0 active_anon:64856kB inactive_anon:308404kB active_file:36kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:208980kB dirty:28kB writeback:0kB shmem:311568kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 3462.467966] ? io_schedule_timeout+0x140/0x140 [ 3462.533407] ? lock_acquire+0x170/0x3f0 [ 3462.537380] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3462.542222] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 3462.547932] ? __mutex_unlock_slowpath+0x75/0x770 [ 3462.552767] ? alloc_pages_current+0x73/0x260 [ 3462.557253] alloc_pages_current+0x155/0x260 [ 3462.561669] ion_page_pool_alloc+0x118/0x1b0 [ 3462.566069] ion_system_heap_allocate+0x133/0x8c0 [ 3462.570911] ? ion_alloc+0x187/0x810 [ 3462.574616] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 3462.580063] ? ion_system_contig_heap_create+0x130/0x130 [ 3462.581389] Node 1 active_anon:2720kB inactive_anon:51760kB active_file:16kB inactive_file:32kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:1716kB dirty:28kB writeback:0kB shmem:52024kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3462.585510] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 3462.612705] Node 0 DMA free:11088kB min:204kB low:252kB high:300kB active_anon:68kB inactive_anon:980kB active_file:0kB inactive_file:16kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3462.617640] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 3462.617654] ion_alloc+0x204/0x810 [ 3462.644277] lowmem_reserve[]: [ 3462.649021] ? ion_dma_buf_release+0x40/0x40 [ 3462.649034] ? __might_fault+0x177/0x1b0 [ 3462.649047] ion_ioctl+0xea/0x1f0 [ 3462.652557] 0 [ 3462.655645] ? ion_query_heaps+0x360/0x360 [ 3462.660127] 2717 [ 3462.664083] ? __fget+0x1fe/0x360 [ 3462.667519] 2718 [ 3462.669310] ? ion_query_heaps+0x360/0x360 [ 3462.669320] do_vfs_ioctl+0x75a/0xff0 [ 3462.669333] ? ioctl_preallocate+0x1a0/0x1a0 [ 3462.673542] 2718 [ 3462.675588] ? lock_downgrade+0x740/0x740 [ 3462.679060] 2718 [ 3462.681076] ? __fget+0x225/0x360 [ 3462.685276] Node 0 [ 3462.689052] ? do_vfs_ioctl+0xff0/0xff0 [ 3462.689067] ? security_file_ioctl+0x83/0xb0 [ 3462.689076] SyS_ioctl+0x7f/0xb0 [ 3462.689085] ? do_vfs_ioctl+0xff0/0xff0 [ 3462.693476] DMA32 free:36528kB min:36200kB low:45248kB high:54296kB active_anon:64792kB inactive_anon:307424kB active_file:92kB inactive_file:28kB unevictable:0kB writepending:124kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7392kB pagetables:2724kB bounce:0kB free_pcp:108kB local_pcp:108kB free_cma:0kB [ 3462.695525] do_syscall_64+0x1d5/0x640 [ 3462.699703] lowmem_reserve[]: [ 3462.701691] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3462.705107] 0 [ 3462.707338] RIP: 0033:0x465f69 [ 3462.729027] 0 [ 3462.751509] RSP: 002b:00007f747b89a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3462.751519] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 3462.751524] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 3462.751529] RBP: 00000000004bfa8f R08: 0000000000000000 R09: 0000000000000000 [ 3462.751535] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 3462.751540] R13: 00007ffe6eac26ff R14: 00007f747b89a300 R15: 0000000000022000 [ 3462.842650] CPU: 1 PID: 14697 Comm: syz-executor.4 Not tainted 4.14.225-syzkaller #0 [ 3462.850551] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3462.859884] Call Trace: [ 3462.862453] dump_stack+0x1b2/0x281 [ 3462.866063] dump_header+0x178/0x82f [ 3462.869754] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 3462.874833] ? ___ratelimit+0x2cd/0x530 [ 3462.878784] oom_kill_process.cold+0x10/0xb18 [ 3462.883278] out_of_memory+0xe3e/0x1190 [ 3462.887230] ? oom_killer_disable+0x1c0/0x1c0 [ 3462.891701] ? mutex_trylock+0x152/0x1a0 [ 3462.895739] __alloc_pages_nodemask+0x23e1/0x2720 [ 3462.900566] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3462.905481] alloc_pages_current+0x155/0x260 [ 3462.909867] filemap_fault+0xea3/0x1980 [ 3462.913823] ext4_filemap_fault+0x84/0xb0 [ 3462.917947] __do_fault+0xfa/0x380 [ 3462.921465] __handle_mm_fault+0x2497/0x4620 [ 3462.925864] ? vm_insert_page+0x7c0/0x7c0 [ 3462.930011] ? nanosleep_copyout+0x100/0x100 [ 3462.934403] handle_mm_fault+0x391/0x860 [ 3462.938444] __do_page_fault+0x549/0xad0 [ 3462.942483] ? spurious_fault+0x640/0x640 [ 3462.946606] ? do_page_fault+0x60/0x500 [ 3462.950559] ? page_fault+0x2f/0x50 [ 3462.954161] page_fault+0x45/0x50 [ 3462.957591] RIP: 34d351:0x5 [ 3462.960497] RSP: 004a:00007ffc0aef90ac EFLAGS: 00000032 [ 3462.981490] 0 0 0 [ 3462.989020] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3463.015515] lowmem_reserve[]: 0 0 0 0 0 [ 3463.019710] Node 1 Normal free:53576kB min:53696kB low:67120kB high:80544kB active_anon:2720kB inactive_anon:51760kB active_file:20kB inactive_file:104kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:448kB pagetables:376kB bounce:0kB free_pcp:132kB local_pcp:0kB free_cma:0kB [ 3463.048451] Mem-Info: [ 3463.050908] active_anon:16895 inactive_anon:90041 isolated_anon:0 [ 3463.050908] active_file:17 inactive_file:18 isolated_file:9 [ 3463.050908] unevictable:0 dirty:0 writeback:0 unstable:0 [ 3463.050908] slab_reclaimable:12448 slab_unreclaimable:116023 [ 3463.050908] mapped:52637 shmem:90898 pagetables:775 bounce:0 [ 3463.050908] free:25189 free_pcp:195 free_cma:0 [ 3463.085748] lowmem_reserve[]: 0 0 0 0 0 [ 3463.089842] Node 0 DMA: 6*4kB (UME) 5*8kB (ME) 10*16kB (ME) 8*32kB (UME) 2*64kB (U) 4*128kB (ME) 3*256kB (UME) 2*512kB (UE) 4*1024kB (UME) 2*2048kB (UM) 0*4096kB = 11104kB [ 3463.105493] Node 0 active_anon:64860kB inactive_anon:308404kB active_file:48kB inactive_file:72kB unevictable:0kB isolated(anon):0kB isolated(file):36kB mapped:208908kB dirty:0kB writeback:0kB shmem:311568kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3463.133644] Node 0 DMA32: 1992*4kB (UME) 1329*8kB (UME) 397*16kB (UM) 31*32kB (UM) 13*64kB (UM) 5*128kB (UM) 33*256kB (UM) 1*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 36376kB [ 3463.159265] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 3463.170121] Node 1 active_anon:2720kB inactive_anon:51760kB active_file:20kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:1640kB dirty:0kB writeback:0kB shmem:52024kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3463.197218] Node 1 Normal: 266*4kB (UM) 160*8kB (UM) 95*16kB (UM) 37*32kB (UM) 6*64kB (M) 2*128kB (M) 126*256kB (UM) 31*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 53816kB [ 3463.213689] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3463.225534] Node 0 DMA free:11076kB min:204kB low:252kB high:300kB active_anon:68kB inactive_anon:980kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3463.252334] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3463.260971] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3463.269879] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3463.278456] 90948 total pagecache pages [ 3463.282489] 0 pages in swap cache [ 3463.285932] Swap cache stats: add 0, delete 0, find 0/0 [ 3463.291549] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 3463.292242] Free swap = 0kB [ 3463.297213] Node 0 [ 3463.300211] Total swap = 0kB [ 3463.300220] 2097051 pages RAM [ 3463.300224] 0 pages HighMem/MovableOnly [ 3463.300227] 363840 pages reserved [ 3463.300231] 0 pages cma reserved [ 3463.344035] DMA32 free:36084kB min:36200kB low:45248kB high:54296kB active_anon:64792kB inactive_anon:307424kB active_file:292kB inactive_file:240kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7392kB pagetables:2724kB bounce:0kB free_pcp:648kB local_pcp:648kB free_cma:0kB [ 3463.372709] lowmem_reserve[]: 0 0 0 0 0 [ 3463.376689] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3463.404024] lowmem_reserve[]: 0 0 0 0 0 [ 3463.408024] Node 1 Normal free:53576kB min:53696kB low:67120kB high:80544kB active_anon:2720kB inactive_anon:51760kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:448kB pagetables:376kB bounce:0kB free_pcp:132kB local_pcp:0kB free_cma:0kB [ 3463.436619] lowmem_reserve[]: 0 0 0 0 0 [ 3463.440649] Node 0 DMA: 5*4kB (ME) 5*8kB (ME) 11*16kB (UME) 7*32kB (ME) 2*64kB (U) 4*128kB (ME) 3*256kB (UME) 2*512kB (UE) 4*1024kB (UME) 2*2048kB (UM) 0*4096kB = 11084kB [ 3463.457040] Node 0 DMA32: 1961*4kB (UME) 1329*8kB (UME) 397*16kB (UM) 31*32kB (UM) 13*64kB (UM) 5*128kB (UM) 33*256kB (UM) 1*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 36252kB [ 3463.472613] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 3463.483379] Node 1 Normal: 266*4kB (UM) 160*8kB (UM) 95*16kB (UM) 37*32kB (UM) 6*64kB (M) 2*128kB (M) 126*256kB (UM) 31*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 53816kB [ 3463.498728] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3463.507627] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3463.516277] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3463.525206] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3463.533840] 90940 total pagecache pages [ 3463.537820] 0 pages in swap cache [ 3463.541344] Swap cache stats: add 0, delete 0, find 0/0 [ 3463.546712] Free swap = 0kB [ 3463.549782] Total swap = 0kB [ 3463.552800] 2097051 pages RAM [ 3463.555900] 0 pages HighMem/MovableOnly [ 3463.559913] 363840 pages reserved [ 3463.563797] 0 pages cma reserved [ 3463.567172] Out of memory (oom_kill_allocating_task): Kill process 14697 (syz-executor.4) score 0 or sacrifice child [ 3463.579342] Killed process 18614 (syz-executor.4) total-vm:93384kB, anon-rss:104kB, file-rss:33608kB, shmem-rss:0kB [ 3463.621282] oom_reaper: reaped process 18614 (syz-executor.4), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 3463.704405] syz-executor.5 invoked oom-killer: gfp_mask=0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null), order=0, oom_score_adj=1000 [ 3463.765906] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 3463.790129] CPU: 0 PID: 18595 Comm: syz-executor.5 Not tainted 4.14.225-syzkaller #0 [ 3463.798144] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3463.807495] Call Trace: [ 3463.810085] dump_stack+0x1b2/0x281 [ 3463.813712] dump_header+0x178/0x82f [ 3463.817854] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 3463.822955] ? ___ratelimit+0x2cd/0x530 [ 3463.826931] oom_kill_process.cold+0x10/0xb18 [ 3463.831432] out_of_memory+0xe3e/0x1190 [ 3463.835406] ? oom_killer_disable+0x1c0/0x1c0 [ 3463.839893] ? mutex_trylock+0x152/0x1a0 [ 3463.843953] __alloc_pages_nodemask+0x23e1/0x2720 [ 3463.848793] ? lock_acquire+0x170/0x3f0 [ 3463.852766] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3463.857624] ? ion_page_pool_alloc+0x9e/0x1b0 [ 3463.862121] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 3463.867579] alloc_pages_current+0x155/0x260 [ 3463.871985] ion_page_pool_alloc+0x118/0x1b0 [ 3463.876394] ion_system_heap_allocate+0x133/0x8c0 [ 3463.881233] ? ion_alloc+0x187/0x810 [ 3463.884937] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 3463.890991] ? ion_system_contig_heap_create+0x130/0x130 [ 3463.896443] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 3463.901456] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 3463.906294] ion_alloc+0x204/0x810 [ 3463.909831] ? ion_dma_buf_release+0x40/0x40 [ 3463.914236] ? __might_fault+0x177/0x1b0 [ 3463.918293] ion_ioctl+0xea/0x1f0 [ 3463.921739] ? ion_query_heaps+0x360/0x360 [ 3463.926052] ? __fget+0x1fe/0x360 [ 3463.929508] ? ion_query_heaps+0x360/0x360 [ 3463.933742] do_vfs_ioctl+0x75a/0xff0 [ 3463.937539] ? ioctl_preallocate+0x1a0/0x1a0 [ 3463.941942] ? lock_downgrade+0x740/0x740 [ 3463.946090] ? __fget+0x225/0x360 [ 3463.949537] ? do_vfs_ioctl+0xff0/0xff0 [ 3463.953507] ? security_file_ioctl+0x83/0xb0 [ 3463.957908] SyS_ioctl+0x7f/0xb0 [ 3463.961273] ? do_vfs_ioctl+0xff0/0xff0 [ 3463.965239] do_syscall_64+0x1d5/0x640 [ 3463.969132] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3463.974316] RIP: 0033:0x465f69 [ 3463.977495] RSP: 002b:00007f747b879188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3463.985196] RAX: ffffffffffffffda RBX: 000000000056c008 RCX: 0000000000465f69 [ 3463.992457] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 3463.999725] RBP: 00000000004bfa8f R08: 0000000000000000 R09: 0000000000000000 [ 3464.006986] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c008 [ 3464.014253] R13: 00007ffe6eac26ff R14: 00007f747b879300 R15: 0000000000022000 [ 3465.214211] Mem-Info: [ 3465.216662] active_anon:16871 inactive_anon:90041 isolated_anon:0 [ 3465.216662] active_file:43 inactive_file:0 isolated_file:0 [ 3465.216662] unevictable:0 dirty:0 writeback:0 unstable:0 [ 3465.216662] slab_reclaimable:12444 slab_unreclaimable:115686 [ 3465.216662] mapped:52636 shmem:90898 pagetables:748 bounce:0 [ 3465.216662] free:25137 free_pcp:29 free_cma:0 [ 3465.396771] Node 0 active_anon:64860kB inactive_anon:308404kB active_file:76kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:208904kB dirty:0kB writeback:0kB shmem:311568kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3465.525332] Node 1 active_anon:2624kB inactive_anon:51760kB active_file:48kB inactive_file:44kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:1640kB dirty:0kB writeback:0kB shmem:52024kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3465.704086] Node 0 DMA free:11056kB min:204kB low:252kB high:300kB active_anon:68kB inactive_anon:980kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3465.875451] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 3465.880537] Node 0 DMA32 free:36144kB min:36200kB low:45248kB high:54296kB active_anon:64792kB inactive_anon:307424kB active_file:136kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7392kB pagetables:2724kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3465.940601] lowmem_reserve[]: 0 0 0 0 0 [ 3465.944616] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3466.098026] lowmem_reserve[]: 0 0 0 0 0 [ 3466.125012] Node 1 Normal free:53252kB min:53696kB low:67120kB high:80544kB active_anon:2624kB inactive_anon:51760kB active_file:12kB inactive_file:8kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:352kB pagetables:268kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3466.281689] lowmem_reserve[]: 0 0 0 0 0 [ 3466.285721] Node 0 DMA: 6*4kB (UME) 5*8kB (ME) 11*16kB (UME) 8*32kB (UME) 1*64kB (U) 4*128kB (ME) 3*256kB (UME) 2*512kB (UE) 4*1024kB (UME) 2*2048kB (UM) 0*4096kB = 11056kB [ 3466.320667] Node 0 DMA32: 1681*4kB (UME) 1443*8kB (UME) 434*16kB (UM) 31*32kB (UM) 13*64kB (UM) 5*128kB (UM) 33*256kB (UM) 1*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 36636kB [ 3466.450589] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 3466.520882] Node 1 Normal: 245*4kB (UM) 164*8kB (UM) 93*16kB (UM) 36*32kB (UM) 11*64kB (UM) 2*128kB (M) 126*256kB (UM) 31*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 54020kB [ 3466.549113] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3466.597881] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3466.630946] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3466.639942] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3466.652971] 91037 total pagecache pages [ 3466.656964] 0 pages in swap cache [ 3466.660415] Swap cache stats: add 0, delete 0, find 0/0 [ 3466.669824] Free swap = 0kB [ 3466.673401] Total swap = 0kB [ 3466.676425] 2097051 pages RAM [ 3466.679517] 0 pages HighMem/MovableOnly [ 3466.687493] 363840 pages reserved [ 3466.691111] 0 pages cma reserved [ 3466.694465] Out of memory (oom_kill_allocating_task): Kill process 18595 (syz-executor.5) score 0 or sacrifice child [ 3466.708672] Killed process 18581 (syz-executor.5) total-vm:93516kB, anon-rss:156kB, file-rss:34332kB, shmem-rss:0kB [ 3466.729600] oom_reaper: reaped process 18581 (syz-executor.5), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 3466.808021] oom_reaper: reaped process 18586 (syz-executor.2), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 3466.843088] syz-executor.4 invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 3466.870389] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 3466.875571] CPU: 0 PID: 14697 Comm: syz-executor.4 Not tainted 4.14.225-syzkaller #0 [ 3466.883445] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3466.892878] Call Trace: [ 3466.895462] dump_stack+0x1b2/0x281 [ 3466.899082] dump_header+0x178/0x82f [ 3466.902793] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 3466.907891] ? ___ratelimit+0x2cd/0x530 [ 3466.911880] oom_kill_process.cold+0x10/0xb18 [ 3466.916374] out_of_memory+0xe3e/0x1190 [ 3466.920344] ? oom_killer_disable+0x1c0/0x1c0 [ 3466.924833] ? mutex_trylock+0x152/0x1a0 [ 3466.928891] __alloc_pages_nodemask+0x23e1/0x2720 [ 3466.933739] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3466.938586] alloc_pages_current+0x155/0x260 [ 3466.942989] filemap_fault+0xea3/0x1980 [ 3466.946966] ext4_filemap_fault+0x84/0xb0 [ 3466.951109] __do_fault+0xfa/0x380 [ 3466.954639] __handle_mm_fault+0x2497/0x4620 [ 3466.959039] ? vm_insert_page+0x7c0/0x7c0 [ 3466.963184] ? lock_downgrade+0x740/0x740 [ 3466.967339] handle_mm_fault+0x391/0x860 [ 3466.971393] __do_page_fault+0x549/0xad0 [ 3466.975448] ? spurious_fault+0x640/0x640 [ 3466.979584] ? do_page_fault+0x60/0x500 [ 3466.983660] ? page_fault+0x2f/0x50 [ 3466.987301] page_fault+0x45/0x50 [ 3466.990745] RIP: 34d351:0x5 [ 3466.993750] RSP: 004a:00007ffc0aef90ac EFLAGS: 00000064 [ 3467.038813] Mem-Info: [ 3467.048065] syz-executor.5: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 3467.054030] active_anon:16846 inactive_anon:90041 isolated_anon:0 [ 3467.054030] active_file:13 inactive_file:5 isolated_file:0 [ 3467.054030] unevictable:0 dirty:0 writeback:0 unstable:0 [ 3467.054030] slab_reclaimable:12442 slab_unreclaimable:115690 [ 3467.054030] mapped:52636 shmem:90898 pagetables:748 bounce:0 [ 3467.054030] free:13866 free_pcp:0 free_cma:0 [ 3467.061225] syz-executor.2: page allocation failure: order:0, mode:0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null) [ 3467.102479] syz-executor.5: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 3467.109199] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 3467.127067] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 3467.128699] CPU: 1 PID: 18586 Comm: syz-executor.2 Not tainted 4.14.225-syzkaller #0 [ 3467.132752] Node 0 active_anon:64872kB inactive_anon:308404kB active_file:40kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:208904kB dirty:0kB writeback:0kB shmem:311568kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3467.140047] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3467.177163] Call Trace: [ 3467.179741] dump_stack+0x1b2/0x281 [ 3467.181133] syz-executor.5 cpuset= [ 3467.183351] warn_alloc.cold+0x96/0x1cc [ 3467.183353] / mems_allowed=0-1 [ 3467.186877] ? zone_watermark_ok_safe+0x220/0x220 [ 3467.198834] ? usleep_range+0x130/0x130 [ 3467.202788] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 3467.207870] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 3467.212867] ? run_timer_softirq+0x5a0/0x5a0 [ 3467.217260] __alloc_pages_nodemask+0x2127/0x2720 [ 3467.222199] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3467.227030] ? ion_heap_sglist_zero+0x165/0x220 [ 3467.231165] Node 1 active_anon:2512kB inactive_anon:51760kB active_file:12kB inactive_file:12kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:1640kB dirty:0kB writeback:0kB shmem:52024kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3467.231681] ? mark_held_locks+0xa6/0xf0 [ 3467.262771] ? cache_grow_begin+0x41/0x630 [ 3467.266985] cache_grow_begin+0x91/0x630 [ 3467.271045] ? cache_grow_begin+0x91/0x630 [ 3467.275259] fallback_alloc+0x207/0x2c0 [ 3467.279215] kmem_cache_alloc_node_trace+0xed/0x400 [ 3467.284212] __get_vm_area_node+0xed/0x340 [ 3467.288426] vmap+0xd5/0x290 [ 3467.291426] ? ion_heap_clear_pages+0x23/0x70 [ 3467.295900] ? vunmap+0x50/0x50 [ 3467.299157] ? __vunmap+0x21c/0x300 [ 3467.302766] ion_heap_clear_pages+0x23/0x70 [ 3467.307082] ion_heap_sglist_zero+0x165/0x220 [ 3467.311559] ? ion_heap_clear_pages+0x70/0x70 [ 3467.316032] ? kasan_kmalloc+0xeb/0x160 [ 3467.319984] ? kmem_cache_alloc_trace+0x131/0x3d0 [ 3467.321195] Node 0 DMA free:10972kB min:204kB low:252kB high:300kB active_anon:68kB inactive_anon:980kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3467.324822] ? pagerange_is_ram_callback+0x100/0x100 [ 3467.324834] ? _ion_heap_freelist_drain+0x28b/0x410 [ 3467.362639] ion_system_heap_free+0x1d0/0x240 [ 3467.367115] ion_buffer_destroy+0x132/0x190 [ 3467.371420] _ion_heap_freelist_drain+0x293/0x410 [ 3467.376252] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 3467.381074] ion_alloc+0x244/0x810 [ 3467.384595] ? ion_dma_buf_release+0x40/0x40 [ 3467.388984] ? __might_fault+0x177/0x1b0 [ 3467.393036] ion_ioctl+0xea/0x1f0 [ 3467.396467] ? ion_query_heaps+0x360/0x360 [ 3467.400679] ? ion_query_heaps+0x360/0x360 [ 3467.404894] do_vfs_ioctl+0x75a/0xff0 [ 3467.408673] ? ioctl_preallocate+0x1a0/0x1a0 [ 3467.411230] lowmem_reserve[]: [ 3467.413059] ? lock_downgrade+0x740/0x740 [ 3467.413072] ? __fget+0x225/0x360 [ 3467.416149] 0 [ 3467.420288] ? do_vfs_ioctl+0xff0/0xff0 [ 3467.429433] ? security_file_ioctl+0x83/0xb0 [ 3467.433819] SyS_ioctl+0x7f/0xb0 [ 3467.437160] ? do_vfs_ioctl+0xff0/0xff0 [ 3467.441116] do_syscall_64+0x1d5/0x640 [ 3467.444989] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3467.450159] RIP: 0033:0x465f69 [ 3467.451251] 2717 [ 3467.453327] RSP: 002b:00007fb559d50188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3467.455374] 2718 [ 3467.463140] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 3467.463145] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 3467.463150] RBP: 00000000004bfa8f R08: 0000000000000000 R09: 0000000000000000 [ 3467.463156] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 3467.463161] R13: 00007ffd8e3fce9f R14: 00007fb559d50300 R15: 0000000000022000 [ 3467.468878] CPU: 1 PID: 18587 Comm: syz-executor.5 Not tainted 4.14.225-syzkaller #0 [ 3467.491270] 2718 [ 3467.494643] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3467.521129] Call Trace: [ 3467.521281] 2718 [ 3467.523706] dump_stack+0x1b2/0x281 [ 3467.525737] Node 0 DMA32 free:17948kB min:36200kB low:45248kB high:54296kB active_anon:64804kB inactive_anon:307424kB active_file:40kB inactive_file:124kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7360kB pagetables:2724kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3467.529352] warn_alloc.cold+0x96/0x1cc [ 3467.529365] ? zone_watermark_ok_safe+0x220/0x220 [ 3467.566811] ? usleep_range+0x130/0x130 [ 3467.570850] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 3467.575934] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 3467.581045] ? run_timer_softirq+0x5a0/0x5a0 [ 3467.585436] __alloc_pages_nodemask+0x2127/0x2720 [ 3467.590259] ? lock_acquire+0x170/0x3f0 [ 3467.591315] lowmem_reserve[]: 0 0 [ 3467.594221] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3467.594232] ? ion_page_pool_alloc+0x9e/0x1b0 [ 3467.597655] 0 [ 3467.602481] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 3467.602497] ? alloc_pages_current+0x73/0x260 [ 3467.618646] alloc_pages_current+0x155/0x260 [ 3467.621329] 0 0 [ 3467.623052] ion_page_pool_alloc+0x118/0x1b0 [ 3467.623062] ion_system_heap_allocate+0x133/0x8c0 [ 3467.629410] ? ion_alloc+0x187/0x810 [ 3467.637914] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 3467.643371] ? ion_system_contig_heap_create+0x130/0x130 [ 3467.648813] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 3467.651344] Node 0 [ 3467.653809] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 3467.653818] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3467.653823] lowmem_reserve[]: [ 3467.656039] ion_alloc+0x204/0x810 [ 3467.660861] 0 [ 3467.685738] ? ion_dma_buf_release+0x40/0x40 [ 3467.685749] ? __might_fault+0x177/0x1b0 [ 3467.685761] ion_ioctl+0xea/0x1f0 [ 3467.705956] ? ion_query_heaps+0x360/0x360 [ 3467.710170] ? __fget+0x1fe/0x360 [ 3467.713605] ? ion_query_heaps+0x360/0x360 [ 3467.717818] do_vfs_ioctl+0x75a/0xff0 [ 3467.721373] 0 0 [ 3467.721602] ? ioctl_preallocate+0x1a0/0x1a0 [ 3467.721603] 0 0 [ 3467.723562] ? lock_downgrade+0x740/0x740 [ 3467.729897] ? __fget+0x225/0x360 [ 3467.737445] ? do_vfs_ioctl+0xff0/0xff0 [ 3467.741397] ? security_file_ioctl+0x83/0xb0 [ 3467.745783] SyS_ioctl+0x7f/0xb0 [ 3467.749146] ? do_vfs_ioctl+0xff0/0xff0 [ 3467.751389] Node 1 Normal free:26544kB min:53696kB low:67120kB high:80544kB active_anon:2612kB inactive_anon:51760kB active_file:12kB inactive_file:12kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:352kB pagetables:268kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3467.753110] do_syscall_64+0x1d5/0x640 [ 3467.753127] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3467.790497] RIP: 0033:0x465f69 [ 3467.793666] RSP: 002b:00007f747b89a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3467.801350] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 3467.808601] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 3467.811415] lowmem_reserve[]: [ 3467.815848] RBP: 00000000004bfa8f R08: 0000000000000000 R09: 0000000000000000 [ 3467.815855] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 3467.818949] 0 [ 3467.826194] R13: 00007ffe6eac26ff R14: 00007f747b89a300 R15: 0000000000022000 [ 3467.837703] warn_alloc_show_mem: 1 callbacks suppressed [ 3467.837707] Mem-Info: [ 3467.850915] active_anon:16822 inactive_anon:90041 isolated_anon:0 [ 3467.850915] active_file:19 inactive_file:13 isolated_file:0 [ 3467.850915] unevictable:0 dirty:0 writeback:0 unstable:0 [ 3467.850915] slab_reclaimable:12442 slab_unreclaimable:115618 [ 3467.850915] mapped:52636 shmem:90898 pagetables:748 bounce:0 [ 3467.850915] free:13942 free_pcp:65 free_cma:0 [ 3467.856502] CPU: 0 PID: 18595 Comm: syz-executor.5 Not tainted 4.14.225-syzkaller #0 [ 3467.889699] Node 0 active_anon:64868kB inactive_anon:308404kB active_file:56kB inactive_file:44kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:208904kB dirty:0kB writeback:0kB shmem:311568kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3467.892007] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3467.892011] Call Trace: [ 3467.892030] dump_stack+0x1b2/0x281 [ 3467.892043] warn_alloc.cold+0x96/0x1cc [ 3467.892055] ? zone_watermark_ok_safe+0x220/0x220 [ 3467.925484] Node 1 active_anon:2420kB inactive_anon:51760kB active_file:20kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:1640kB dirty:0kB writeback:0kB shmem:52024kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3467.929262] ? usleep_range+0x130/0x130 [ 3467.931863] Node 0 [ 3467.935428] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 3467.939397] DMA free:10972kB min:204kB low:252kB high:300kB active_anon:68kB inactive_anon:980kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3467.944209] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 3467.944219] ? run_timer_softirq+0x5a0/0x5a0 [ 3467.944235] __alloc_pages_nodemask+0x2127/0x2720 [ 3467.944250] ? lock_acquire+0x170/0x3f0 [ 3467.944265] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3467.944276] ? ion_page_pool_alloc+0x9e/0x1b0 [ 3467.944290] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 3467.944308] alloc_pages_current+0x155/0x260 [ 3467.944322] ion_page_pool_alloc+0x118/0x1b0 [ 3467.977156] lowmem_reserve[]: [ 3467.977804] ion_system_heap_allocate+0x133/0x8c0 [ 3467.982908] 0 [ 3468.008632] ? ion_alloc+0x187/0x810 [ 3468.008643] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 3468.008652] ? ion_system_contig_heap_create+0x130/0x130 [ 3468.008661] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 3468.008672] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 3468.008682] ion_alloc+0x204/0x810 [ 3468.008695] ? ion_dma_buf_release+0x40/0x40 [ 3468.008706] ? __might_fault+0x177/0x1b0 [ 3468.008717] ion_ioctl+0xea/0x1f0 [ 3468.008726] ? ion_query_heaps+0x360/0x360 [ 3468.008734] ? __fget+0x1fe/0x360 [ 3468.008745] ? ion_query_heaps+0x360/0x360 [ 3468.019306] 2717 [ 3468.022964] do_vfs_ioctl+0x75a/0xff0 [ 3468.022975] ? ioctl_preallocate+0x1a0/0x1a0 [ 3468.022984] ? lock_downgrade+0x740/0x740 [ 3468.022996] ? __fget+0x225/0x360 [ 3468.023005] ? do_vfs_ioctl+0xff0/0xff0 [ 3468.023014] ? security_file_ioctl+0x83/0xb0 [ 3468.023024] SyS_ioctl+0x7f/0xb0 [ 3468.023036] ? do_vfs_ioctl+0xff0/0xff0 [ 3468.023046] do_syscall_64+0x1d5/0x640 [ 3468.023063] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3468.023070] RIP: 0033:0x465f69 [ 3468.023077] RSP: 002b:00007f747b879188 EFLAGS: 00000246 [ 3468.027033] 2718 [ 3468.031847] ORIG_RAX: 0000000000000010 [ 3468.031853] RAX: ffffffffffffffda RBX: 000000000056c008 RCX: 0000000000465f69 [ 3468.031858] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 3468.031862] RBP: 00000000004bfa8f R08: 0000000000000000 R09: 0000000000000000 [ 3468.031867] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c008 [ 3468.031872] R13: 00007ffe6eac26ff R14: 00007f747b879300 R15: 0000000000022000 [ 3468.047241] 0 [ 3468.056100] 2718 [ 3468.062121] 0 [ 3468.064286] 2718 [ 3468.069668] 0 [ 3468.093630] 0 [ 3468.102655] Node 0 [ 3468.116849] DMA32 free:18280kB min:36200kB low:45248kB high:54296kB active_anon:64800kB inactive_anon:307424kB active_file:56kB inactive_file:44kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7360kB pagetables:2724kB bounce:0kB free_pcp:260kB local_pcp:144kB free_cma:0kB [ 3468.118811] Node 0 [ 3468.126724] lowmem_reserve[]: [ 3468.134227] DMA: [ 3468.136588] 0 [ 3468.139196] 5*4kB [ 3468.146026] 0 [ 3468.155173] (ME) [ 3468.157392] 0 [ 3468.158796] 5*8kB [ 3468.167842] 0 [ 3468.178391] (ME) [ 3468.190914] 0 [ 3468.200976] 10*16kB [ 3468.223929] (ME) [ 3468.260165] Node 0 [ 3468.263396] 8*32kB [ 3468.266596] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3468.268682] (UME) [ 3468.270458] lowmem_reserve[]: [ 3468.273676] 0*64kB [ 3468.287014] 0 [ 3468.345237] syz-executor.5: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 3468.371701] 4*128kB (ME) 3*256kB (UME) 2*512kB (UE) 4*1024kB (UME) 2*2048kB (UM) 0*4096kB = 10972kB [ 3468.380967] Node 0 DMA32: 1855*4kB (UME) 1462*8kB (UME) 438*16kB (UM) 35*32kB (UM) 16*64kB (UM) 11*128kB (UM) 26*256kB (UM) 1*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 36844kB [ 3468.411742] 0 0 0 0 [ 3468.414098] Node 1 Normal free:273584kB min:53696kB low:67120kB high:80544kB active_anon:2420kB inactive_anon:51760kB active_file:20kB inactive_file:8kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:320kB pagetables:268kB bounce:0kB free_pcp:1304kB local_pcp:680kB free_cma:0kB [ 3468.421724] syz-executor.5 cpuset= [ 3468.472403] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 3468.501824] / mems_allowed=0-1 [ 3468.511870] CPU: 0 PID: 18595 Comm: syz-executor.5 Not tainted 4.14.225-syzkaller #0 [ 3468.519767] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3468.529226] Call Trace: [ 3468.531817] dump_stack+0x1b2/0x281 [ 3468.535440] warn_alloc.cold+0x96/0x1cc [ 3468.539415] ? zone_watermark_ok_safe+0x220/0x220 [ 3468.544268] __alloc_pages_nodemask+0x2127/0x2720 [ 3468.549114] ? lock_acquire+0x170/0x3f0 [ 3468.553095] ? lock_acquire+0x170/0x3f0 [ 3468.557071] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3468.561923] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 3468.567371] ? __mutex_unlock_slowpath+0x75/0x770 [ 3468.572221] alloc_pages_current+0x155/0x260 [ 3468.576632] ion_page_pool_alloc+0x118/0x1b0 [ 3468.581050] ion_system_heap_allocate+0x133/0x8c0 [ 3468.585903] ? _raw_spin_unlock+0x29/0x40 [ 3468.590042] ? _ion_heap_freelist_drain+0x6e/0x410 [ 3468.591835] lowmem_reserve[]: [ 3468.594957] ? ion_system_contig_heap_create+0x130/0x130 [ 3468.594960] 0 0 [ 3468.598053] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 3468.610440] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 3468.615276] ion_alloc+0x27a/0x810 [ 3468.618810] ? ion_dma_buf_release+0x40/0x40 [ 3468.623211] ? __might_fault+0x177/0x1b0 [ 3468.627270] ion_ioctl+0xea/0x1f0 [ 3468.630733] ? ion_query_heaps+0x360/0x360 [ 3468.631833] 0 0 [ 3468.634964] ? __fget+0x1fe/0x360 [ 3468.634974] ? ion_query_heaps+0x360/0x360 [ 3468.636931] 0 [ 3468.640365] do_vfs_ioctl+0x75a/0xff0 [ 3468.650138] ? ioctl_preallocate+0x1a0/0x1a0 [ 3468.654534] ? lock_downgrade+0x740/0x740 [ 3468.658674] ? __fget+0x225/0x360 [ 3468.662115] ? do_vfs_ioctl+0xff0/0xff0 [ 3468.666082] ? security_file_ioctl+0x83/0xb0 [ 3468.670481] SyS_ioctl+0x7f/0xb0 [ 3468.673840] ? do_vfs_ioctl+0xff0/0xff0 [ 3468.677810] do_syscall_64+0x1d5/0x640 [ 3468.681695] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3468.686880] RIP: 0033:0x465f69 [ 3468.690080] RSP: 002b:00007f747b879188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3468.697784] RAX: ffffffffffffffda RBX: 000000000056c008 RCX: 0000000000465f69 [ 3468.705042] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 3468.712304] RBP: 00000000004bfa8f R08: 0000000000000000 R09: 0000000000000000 [ 3468.719571] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c008 [ 3468.728485] R13: 00007ffe6eac26ff R14: 00007f747b879300 R15: 0000000000022000 [ 3468.739888] Node 1 Normal: [ 3468.739900] Node 0 [ 3468.739903] 101*4kB (U) [ 3468.744022] DMA: [ 3468.745814] 148*8kB [ 3468.748574] 6*4kB [ 3468.752342] (UM) 107*16kB (UM) 49*32kB (UM) 3619*64kB (UM) 1510*128kB (UM) 561*256kB (UM) 34*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 590788kB [ 3468.762240] (UME) 5*8kB (ME) 10*16kB (ME) 8*32kB (UME) 2*64kB (U) 4*128kB (ME) 3*256kB (UME) 2*512kB (UE) 4*1024kB (UME) 2*2048kB (UM) 0*4096kB = 11104kB [ 3468.783678] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3468.799291] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3468.808558] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3468.822749] Node 0 DMA32: 2050*4kB (UME) 1470*8kB (UME) 439*16kB (UM) 39*32kB (UM) 15*64kB (UM) 54*128kB (UM) 33*256kB (UM) 1*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 45064kB [ 3468.825484] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3468.847282] 91965 total pagecache pages [ 3468.851455] 0 pages in swap cache [ 3468.855615] Swap cache stats: add 0, delete 0, find 0/0 [ 3468.861130] Free swap = 0kB [ 3468.864274] Total swap = 0kB [ 3468.867350] 2097051 pages RAM [ 3468.870514] 0 pages HighMem/MovableOnly [ 3468.872692] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB [ 3468.874587] 363840 pages reserved [ 3468.874803] 0*256kB [ 3468.881123] 0 pages cma reserved [ 3468.890807] Out of memory (oom_kill_allocating_task): Kill process 14697 (syz-executor.4) score 0 or sacrifice child [ 3468.901657] Killed process 14697 (syz-executor.4) total-vm:93120kB, anon-rss:104kB, file-rss:34468kB, shmem-rss:0kB [ 3468.901727] 0*512kB [ 3468.920718] warn_alloc_show_mem: 2 callbacks suppressed [ 3468.920721] Mem-Info: [ 3468.931725] active_anon:16897 inactive_anon:90041 isolated_anon:0 [ 3468.931725] active_file:264 inactive_file:1022 isolated_file:0 [ 3468.931725] unevictable:0 dirty:0 writeback:50 unstable:0 [ 3468.931725] slab_reclaimable:12442 slab_unreclaimable:115618 [ 3468.931725] mapped:53436 shmem:90898 pagetables:748 bounce:0 [ 3468.931725] free:99151 free_pcp:607 free_cma:0 [ 3468.942014] 0*1024kB [ 3468.969522] Node 0 active_anon:64868kB inactive_anon:308404kB active_file:56kB inactive_file:44kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:208904kB dirty:0kB writeback:0kB shmem:311568kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 3468.982004] 0*2048kB [ 3469.003885] Node 1 active_anon:2720kB inactive_anon:51760kB active_file:1000kB inactive_file:4344kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:4940kB dirty:0kB writeback:100kB shmem:52024kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 3469.022045] 0*4096kB [ 3469.037912] Node 0 DMA free:11092kB min:204kB low:252kB high:300kB active_anon:68kB inactive_anon:980kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3469.075819] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 3469.082181] = 0kB [ 3469.084269] Node 1 Normal: 71*4kB (U) 72*8kB (UM) 70*16kB (UM) 29*32kB (U) 2*64kB (UM) 2*128kB (UM) 426*256kB (U) 31*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 128220kB [ 3469.086393] Node 0 DMA32 free:43632kB min:36200kB low:45248kB high:54296kB active_anon:64800kB inactive_anon:307424kB active_file:56kB inactive_file:44kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7360kB pagetables:2724kB bounce:0kB free_pcp:1280kB local_pcp:632kB free_cma:0kB [ 3469.122077] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3469.169282] lowmem_reserve[]: 0 0 0 0 0 [ 3469.176288] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3469.181627] Node 0 [ 3469.188264] in:imklog invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 3469.203083] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3469.203092] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3469.203096] 91211 total pagecache pages [ 3469.203107] 0 pages in swap cache [ 3469.203112] Swap cache stats: add 0, delete 0, find 0/0 [ 3469.203115] Free swap = 0kB [ 3469.203118] Total swap = 0kB [ 3469.203125] 2097051 pages RAM [ 3469.203127] 0 pages HighMem/MovableOnly [ 3469.203130] 363840 pages reserved [ 3469.203133] 0 pages cma reserved [ 3469.261585] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3469.338349] lowmem_reserve[]: 0 0 0 0 0 [ 3469.353075] Node 1 Normal free:525372kB min:53696kB low:67120kB high:80544kB active_anon:2720kB inactive_anon:51760kB active_file:924kB inactive_file:1092kB unevictable:0kB writepending:148kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:320kB pagetables:268kB bounce:0kB free_pcp:692kB local_pcp:24kB free_cma:0kB [ 3469.400256] in:imklog cpuset=/ mems_allowed=0-1 [ 3469.408682] lowmem_reserve[]: 0 0 0 0 0 [ 3469.412902] CPU: 1 PID: 18531 Comm: in:imklog Not tainted 4.14.225-syzkaller #0 [ 3469.412908] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3469.412912] Call Trace: [ 3469.412927] dump_stack+0x1b2/0x281 [ 3469.412939] dump_header+0x178/0x82f [ 3469.412951] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 3469.412961] ? ___ratelimit+0x2cd/0x530 [ 3469.412971] oom_kill_process.cold+0x10/0xb18 [ 3469.412989] out_of_memory+0xe3e/0x1190 [ 3469.413003] ? oom_killer_disable+0x1c0/0x1c0 [ 3469.413010] ? mutex_trylock+0x152/0x1a0 [ 3469.413022] __alloc_pages_nodemask+0x23e1/0x2720 [ 3469.413041] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3469.413063] alloc_pages_current+0x155/0x260 [ 3469.413073] filemap_fault+0xea3/0x1980 [ 3469.413089] ext4_filemap_fault+0x84/0xb0 [ 3469.413099] __do_fault+0xfa/0x380 [ 3469.413107] __handle_mm_fault+0x2497/0x4620 [ 3469.413117] ? vm_insert_page+0x7c0/0x7c0 [ 3469.413126] ? lock_downgrade+0x740/0x740 [ 3469.413146] handle_mm_fault+0x391/0x860 [ 3469.413158] __do_page_fault+0x549/0xad0 [ 3469.413169] ? spurious_fault+0x640/0x640 [ 3469.413177] ? do_page_fault+0x60/0x500 [ 3469.413186] ? page_fault+0x2f/0x50 [ 3469.413194] page_fault+0x45/0x50 [ 3469.413200] RIP: 7999da3:0x1f9f [ 3469.413204] RSP: 79994b8:0000000000000004 EFLAGS: 7ff907999da0 [ 3469.413761] Mem-Info: [ 3469.449381] Node 0 [ 3469.545831] active_anon:16897 inactive_anon:90041 isolated_anon:0 [ 3469.545831] active_file:244 inactive_file:1401 isolated_file:8 [ 3469.545831] unevictable:0 dirty:0 writeback:25 unstable:0 [ 3469.545831] slab_reclaimable:12442 slab_unreclaimable:116444 [ 3469.545831] mapped:45061 shmem:90898 pagetables:748 bounce:0 [ 3469.545831] free:199235 free_pcp:468 free_cma:0 [ 3469.666383] DMA: 7*4kB (UME) 5*8kB (UME) 1*16kB (E) 1*32kB (E) 7*64kB (UM) 12*128kB (UME) 3*256kB (UME) 2*512kB (UE) 3*1024kB (UME) 2*2048kB (UM) 0*4096kB = 11060kB [ 3469.681978] Node 0 active_anon:64748kB inactive_anon:308396kB active_file:980kB inactive_file:3644kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:177004kB dirty:4kB writeback:0kB shmem:311552kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3469.702303] Node 0 DMA32: 6625*4kB (UME) 1547*8kB (UME) 521*16kB (UM) 56*32kB (UM) 45*64kB (U) 30*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 55724kB [ 3469.743129] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 3469.759032] Node 1 active_anon:2792kB inactive_anon:51760kB active_file:1700kB inactive_file:3672kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:5476kB dirty:0kB writeback:0kB shmem:52024kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 3469.762566] Node 1 Normal: 21*4kB (UM) 1*8kB (U) 31*16kB (UM) 42*32kB (U) 3982*64kB (UM) 123*128kB (U) 406*256kB (U) 505*512kB (U) 343*1024kB (U) 27*2048kB (U) 0*4096kB = 1041548kB [ 3469.822432] Node 0 DMA free:11056kB min:204kB low:252kB high:300kB active_anon:80kB inactive_anon:980kB active_file:584kB inactive_file:972kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3469.833632] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3469.872883] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3469.882209] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3469.891602] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 3469.894902] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3469.905725] Node 0 DMA32 free:52360kB min:36200kB low:45248kB high:54296kB active_anon:64768kB inactive_anon:307416kB active_file:596kB inactive_file:3772kB unevictable:0kB writepending:4kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7296kB pagetables:2604kB bounce:0kB free_pcp:1064kB local_pcp:588kB free_cma:0kB [ 3469.909249] 93774 total pagecache pages [ 3469.949924] 0 pages in swap cache [ 3469.961397] Swap cache stats: add 0, delete 0, find 0/0 [ 3469.968844] lowmem_reserve[]: 0 0 0 0 0 [ 3469.972200] Free swap = 0kB [ 3469.972980] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3469.978699] Total swap = 0kB [ 3470.011576] 2097051 pages RAM [ 3470.015948] 0 pages HighMem/MovableOnly [ 3470.021666] 363840 pages reserved [ 3470.030140] 0 pages cma reserved [ 3470.032505] lowmem_reserve[]: 0 0 0 0 0 [ 3470.037673] Node 1 Normal free:1348028kB min:53696kB low:67120kB high:80544kB active_anon:2792kB inactive_anon:51760kB active_file:1700kB inactive_file:3572kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:352kB pagetables:252kB bounce:0kB free_pcp:856kB local_pcp:696kB free_cma:0kB [ 3470.083434] lowmem_reserve[]: 0 0 0 0 0 [ 3470.087449] Node 0 DMA: 7*4kB (UME) 6*8kB (UME) 1*16kB (E) 1*32kB (E) 6*64kB (UM) 11*128kB (UME) 4*256kB (UME) 2*512kB (UE) 3*1024kB (UME) 2*2048kB (UM) 0*4096kB = 11132kB [ 3470.104417] Node 0 DMA32: 6747*4kB (UME) 603*8kB (UME) 536*16kB (UM) 56*32kB (UM) 1*64kB (U) 21*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 44932kB [ 3470.119572] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 3470.130414] Node 1 Normal: 1*4kB (M) 1*8kB (U) 1*16kB (M) 1*32kB (U) 6406*64kB (UM) 431*128kB (U) 418*256kB (U) 505*512kB (U) 351*1024kB (U) 32*2048kB (U) 0*4096kB = 1255740kB [ 3470.146799] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3470.156268] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3470.165433] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3470.174808] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3470.183955] 94119 total pagecache pages [ 3470.187933] 0 pages in swap cache [ 3470.191374] Swap cache stats: add 0, delete 0, find 0/0 [ 3470.197936] Free swap = 0kB [ 3470.200954] Total swap = 0kB [ 3470.204731] 2097051 pages RAM [ 3470.207835] 0 pages HighMem/MovableOnly [ 3470.211808] 363840 pages reserved [ 3470.216315] 0 pages cma reserved [ 3470.219681] Out of memory (oom_kill_allocating_task): Kill process 18531 (in:imklog) score 0 or sacrifice child [ 3470.230792] Killed process 18520 (rsyslogd) total-vm:254332kB, anon-rss:912kB, file-rss:92kB, shmem-rss:0kB [ 3470.244503] oom_reaper: reaped process 18520 (rsyslogd), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 3470.698727] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 3470.705654] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3470.721371] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 3470.728191] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3470.742250] device bridge_slave_1 left promiscuous mode [ 3470.750691] bridge0: port 2(bridge_slave_1) entered disabled state [ 3470.761729] device bridge_slave_0 left promiscuous mode [ 3470.767342] bridge0: port 1(bridge_slave_0) entered disabled state [ 3470.786678] device veth1_macvtap left promiscuous mode [ 3470.792563] device veth0_macvtap left promiscuous mode [ 3470.803618] device veth1_vlan left promiscuous mode [ 3470.809503] device veth0_vlan left promiscuous mode [ 3470.989650] device hsr_slave_1 left promiscuous mode [ 3471.006749] device hsr_slave_0 left promiscuous mode [ 3471.035218] team0 (unregistering): Port device team_slave_1 removed [ 3471.049696] team0 (unregistering): Port device team_slave_0 removed [ 3471.067541] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 3471.087123] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 3471.128609] bond0 (unregistering): Released all slaves [ 3471.895954] syz-executor.5 invoked oom-killer: gfp_mask=0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null), order=0, oom_score_adj=1000 [ 3471.912708] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 3471.923255] CPU: 1 PID: 18595 Comm: syz-executor.5 Not tainted 4.14.225-syzkaller #0 [ 3471.931139] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3471.940501] Call Trace: [ 3471.943082] dump_stack+0x1b2/0x281 [ 3471.946690] dump_header+0x178/0x82f [ 3471.950382] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 3471.955461] ? ___ratelimit+0x2cd/0x530 [ 3471.959432] oom_kill_process.cold+0x10/0xb18 [ 3471.963908] out_of_memory+0xe3e/0x1190 [ 3471.967859] ? oom_killer_disable+0x1c0/0x1c0 [ 3471.972330] ? mutex_trylock+0x152/0x1a0 [ 3471.976383] __alloc_pages_nodemask+0x23e1/0x2720 [ 3471.981206] ? lock_acquire+0x170/0x3f0 [ 3471.985169] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3471.989988] ? ion_page_pool_alloc+0x9e/0x1b0 [ 3471.994471] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 3471.999994] ? alloc_pages_current+0x37/0x260 [ 3472.004513] alloc_pages_current+0x155/0x260 [ 3472.008904] ion_page_pool_alloc+0x118/0x1b0 [ 3472.013290] ion_system_heap_allocate+0x133/0x8c0 [ 3472.018121] ? _raw_spin_unlock+0x29/0x40 [ 3472.022248] ? _ion_heap_freelist_drain+0x6e/0x410 [ 3472.027195] ? ion_system_contig_heap_create+0x130/0x130 [ 3472.032643] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 3472.037656] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 3472.042595] ion_alloc+0x27a/0x810 [ 3472.046113] ? ion_dma_buf_release+0x40/0x40 [ 3472.050599] ? __might_fault+0x177/0x1b0 [ 3472.054638] ion_ioctl+0xea/0x1f0 [ 3472.058068] ? ion_query_heaps+0x360/0x360 [ 3472.062276] ? __fget+0x1fe/0x360 [ 3472.065705] ? ion_query_heaps+0x360/0x360 [ 3472.069915] do_vfs_ioctl+0x75a/0xff0 [ 3472.073694] ? ioctl_preallocate+0x1a0/0x1a0 [ 3472.078076] ? lock_downgrade+0x740/0x740 [ 3472.082211] ? __fget+0x225/0x360 [ 3472.085638] ? do_vfs_ioctl+0xff0/0xff0 [ 3472.089613] ? security_file_ioctl+0x83/0xb0 [ 3472.093996] SyS_ioctl+0x7f/0xb0 [ 3472.097333] ? do_vfs_ioctl+0xff0/0xff0 [ 3472.101370] do_syscall_64+0x1d5/0x640 [ 3472.105237] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3472.110400] RIP: 0033:0x465f69 [ 3472.113566] RSP: 002b:00007f747b879188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3472.121266] RAX: ffffffffffffffda RBX: 000000000056c008 RCX: 0000000000465f69 [ 3472.128510] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 3472.135841] RBP: 00000000004bfa8f R08: 0000000000000000 R09: 0000000000000000 [ 3472.143086] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c008 [ 3472.150340] R13: 00007ffe6eac26ff R14: 00007f747b879300 R15: 0000000000022000 [ 3472.162002] Mem-Info: [ 3472.170774] active_anon:16853 inactive_anon:90040 isolated_anon:0 [ 3472.170774] active_file:17 inactive_file:17 isolated_file:0 [ 3472.170774] unevictable:0 dirty:0 writeback:0 unstable:0 [ 3472.170774] slab_reclaimable:12424 slab_unreclaimable:118103 [ 3472.170774] mapped:44023 shmem:90895 pagetables:698 bounce:0 [ 3472.170774] free:13936 free_pcp:207 free_cma:0 [ 3472.212106] Node 0 active_anon:64352kB inactive_anon:308396kB active_file:28kB inactive_file:28kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:174088kB dirty:0kB writeback:0kB shmem:311552kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3472.244234] Node 1 active_anon:3060kB inactive_anon:51764kB active_file:40kB inactive_file:40kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:2004kB dirty:0kB writeback:0kB shmem:52028kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3472.273755] Node 0 DMA free:10964kB min:204kB low:252kB high:300kB active_anon:76kB inactive_anon:980kB active_file:0kB inactive_file:12kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3472.301783] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 3472.306837] Node 0 DMA32 free:18012kB min:36200kB low:45248kB high:54296kB active_anon:64276kB inactive_anon:307416kB active_file:32kB inactive_file:20kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7136kB pagetables:2556kB bounce:0kB free_pcp:256kB local_pcp:120kB free_cma:0kB [ 3472.338044] lowmem_reserve[]: 0 0 0 0 0 [ 3472.342122] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3472.368340] lowmem_reserve[]: 0 0 0 0 0 [ 3472.372337] Node 1 Normal free:26768kB min:53696kB low:67120kB high:80544kB active_anon:3060kB inactive_anon:51764kB active_file:40kB inactive_file:40kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:416kB pagetables:236kB bounce:0kB free_pcp:572kB local_pcp:120kB free_cma:0kB [ 3472.407566] lowmem_reserve[]: 0 0 0 0 0 [ 3472.411563] Node 0 DMA: 7*4kB (ME) 5*8kB (ME) 11*16kB (ME) 7*32kB (UME) 0*64kB 4*128kB (ME) 3*256kB (UME) 2*512kB (UE) 4*1024kB (UME) 2*2048kB (UM) 0*4096kB = 10964kB [ 3472.428737] Node 0 DMA32: 1075*4kB (ME) 452*8kB (ME) 291*16kB (UM) 78*32kB (UM) 4*64kB (U) 21*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18012kB [ 3472.450954] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 3472.471202] Node 1 Normal: 242*4kB (UME) 133*8kB (M) 68*16kB (M) 45*32kB (M) 21*64kB (UM) 11*128kB (UME) 2*256kB (UE) 1*512kB (E) 2*1024kB (ME) 8*2048kB (U) 0*4096kB = 26768kB [ 3472.492366] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3472.501292] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3472.513961] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3472.522831] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3472.532662] 90929 total pagecache pages [ 3472.536663] 0 pages in swap cache [ 3472.540100] Swap cache stats: add 0, delete 0, find 0/0 [ 3472.547518] Free swap = 0kB [ 3472.550527] Total swap = 0kB [ 3472.553564] 2097051 pages RAM [ 3472.556659] 0 pages HighMem/MovableOnly [ 3472.560614] 363840 pages reserved [ 3472.566113] 0 pages cma reserved [ 3472.569479] Out of memory (oom_kill_allocating_task): Kill process 18595 (syz-executor.5) score 0 or sacrifice child [ 3472.581272] Killed process 18595 (syz-executor.5) total-vm:93516kB, anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 3472.592677] syz-executor.5: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 3472.593259] syz-fuzzer invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 3472.615864] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 3472.617166] syz-fuzzer cpuset= [ 3472.622252] CPU: 1 PID: 18595 Comm: syz-executor.5 Not tainted 4.14.225-syzkaller #0 [ 3472.622254] / mems_allowed=0-1 [ 3472.625425] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3472.625429] Call Trace: [ 3472.625449] dump_stack+0x1b2/0x281 [ 3472.625463] warn_alloc.cold+0x96/0x1cc [ 3472.655914] ? zone_watermark_ok_safe+0x220/0x220 [ 3472.660741] ? wait_for_completion_io+0x10/0x10 [ 3472.665404] __alloc_pages_nodemask+0x2127/0x2720 [ 3472.670418] ? lock_acquire+0x170/0x3f0 [ 3472.674378] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3472.679202] ? ion_page_pool_alloc+0x9e/0x1b0 [ 3472.683682] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 3472.689114] ? alloc_pages_current+0x37/0x260 [ 3472.693590] alloc_pages_current+0x155/0x260 [ 3472.697981] ion_page_pool_alloc+0x118/0x1b0 [ 3472.702370] ion_system_heap_allocate+0x133/0x8c0 [ 3472.707194] ? _raw_spin_unlock+0x29/0x40 [ 3472.711331] ? _ion_heap_freelist_drain+0x6e/0x410 [ 3472.716503] ? ion_system_contig_heap_create+0x130/0x130 [ 3472.721933] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 3472.726928] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 3472.731749] ion_alloc+0x27a/0x810 [ 3472.735285] ? ion_dma_buf_release+0x40/0x40 [ 3472.739673] ? __might_fault+0x177/0x1b0 [ 3472.743716] ion_ioctl+0xea/0x1f0 [ 3472.747147] ? ion_query_heaps+0x360/0x360 [ 3472.751359] ? __fget+0x1fe/0x360 [ 3472.754790] ? ion_query_heaps+0x360/0x360 [ 3472.759001] do_vfs_ioctl+0x75a/0xff0 [ 3472.762792] ? ioctl_preallocate+0x1a0/0x1a0 [ 3472.767178] ? lock_downgrade+0x740/0x740 [ 3472.771349] ? __fget+0x225/0x360 [ 3472.774781] ? do_vfs_ioctl+0xff0/0xff0 [ 3472.778736] ? security_file_ioctl+0x83/0xb0 [ 3472.783120] SyS_ioctl+0x7f/0xb0 [ 3472.786477] ? do_vfs_ioctl+0xff0/0xff0 [ 3472.790517] do_syscall_64+0x1d5/0x640 [ 3472.794387] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3472.799555] RIP: 0033:0x465f69 [ 3472.802720] RSP: 002b:00007f747b879188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3472.810405] RAX: ffffffffffffffda RBX: 000000000056c008 RCX: 0000000000465f69 [ 3472.817658] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 3472.824904] RBP: 00000000004bfa8f R08: 0000000000000000 R09: 0000000000000000 [ 3472.832152] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c008 [ 3472.839486] R13: 00007ffe6eac26ff R14: 00007f747b879300 R15: 0000000000022000 [ 3472.846764] CPU: 0 PID: 7996 Comm: syz-fuzzer Not tainted 4.14.225-syzkaller #0 [ 3472.854207] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3472.857961] Mem-Info: [ 3472.863553] Call Trace: [ 3472.868553] dump_stack+0x1b2/0x281 [ 3472.870587] active_anon:16853 inactive_anon:90040 isolated_anon:0 [ 3472.870587] active_file:24 inactive_file:10 isolated_file:0 [ 3472.870587] unevictable:0 dirty:0 writeback:0 unstable:0 [ 3472.870587] slab_reclaimable:12424 slab_unreclaimable:117975 [ 3472.870587] mapped:44023 shmem:90895 pagetables:698 bounce:0 [ 3472.870587] free:14036 free_pcp:212 free_cma:0 [ 3472.872179] dump_header+0x178/0x82f [ 3472.909075] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 3472.914172] ? ___ratelimit+0x2cd/0x530 [ 3472.915274] Node 0 active_anon:64352kB inactive_anon:308396kB active_file:44kB inactive_file:12kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:174088kB dirty:0kB writeback:0kB shmem:311552kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3472.918132] oom_kill_process.cold+0x10/0xb18 [ 3472.951670] out_of_memory+0xe3e/0x1190 [ 3472.955640] ? oom_killer_disable+0x1c0/0x1c0 [ 3472.956981] Node 1 active_anon:3060kB inactive_anon:51764kB active_file:52kB inactive_file:28kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:2004kB dirty:0kB writeback:0kB shmem:52028kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3472.960121] ? mutex_trylock+0x152/0x1a0 [ 3472.991238] __alloc_pages_nodemask+0x23e1/0x2720 [ 3472.996103] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3472.996993] Node 0 DMA free:10964kB min:204kB low:252kB high:300kB active_anon:76kB inactive_anon:980kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3473.001065] alloc_pages_current+0x155/0x260 [ 3473.001078] filemap_fault+0xea3/0x1980 [ 3473.035803] ext4_filemap_fault+0x84/0xb0 [ 3473.037383] lowmem_reserve[]: 0 [ 3473.039939] __do_fault+0xfa/0x380 [ 3473.039949] __handle_mm_fault+0x2497/0x4620 [ 3473.043226] 2717 [ 3473.046745] ? vm_insert_page+0x7c0/0x7c0 [ 3473.046764] handle_mm_fault+0x391/0x860 [ 3473.046775] __do_page_fault+0x549/0xad0 [ 3473.046786] ? spurious_fault+0x640/0x640 [ 3473.046794] ? do_page_fault+0x60/0x500 [ 3473.046804] ? page_fault+0x2f/0x50 [ 3473.046811] page_fault+0x45/0x50 [ 3473.046818] RIP: 0002:0x4 [ 3473.046823] RSP: 012e:000000c000359e40 EFLAGS: 00000005 [ 3473.053689] Mem-Info: [ 3473.062761] 2718 [ 3473.070362] active_anon:16853 inactive_anon:90040 isolated_anon:0 [ 3473.070362] active_file:17 inactive_file:17 isolated_file:0 [ 3473.070362] unevictable:0 dirty:0 writeback:0 unstable:0 [ 3473.070362] slab_reclaimable:12424 slab_unreclaimable:117975 [ 3473.070362] mapped:44023 shmem:90895 pagetables:698 bounce:0 [ 3473.070362] free:14060 free_pcp:214 free_cma:0 [ 3473.078985] 2718 [ 3473.080915] Node 0 active_anon:64352kB inactive_anon:308396kB active_file:28kB inactive_file:28kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:174088kB dirty:0kB writeback:0kB shmem:311552kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3473.083637] 2718 [ 3473.093733] Node 1 active_anon:3060kB inactive_anon:51764kB active_file:40kB inactive_file:40kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:2004kB dirty:0kB writeback:0kB shmem:52028kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3473.131226] Node 0 [ 3473.164140] Node 0 [ 3473.190653] DMA32 free:18508kB min:36200kB low:45248kB high:54296kB active_anon:64276kB inactive_anon:307416kB active_file:28kB inactive_file:24kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7136kB pagetables:2556kB bounce:0kB free_pcp:292kB local_pcp:156kB free_cma:0kB [ 3473.196058] DMA free:10964kB min:204kB low:252kB high:300kB active_anon:76kB inactive_anon:980kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3473.225030] lowmem_reserve[]: 0 0 0 0 0 [ 3473.255820] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 3473.257137] Node 0 [ 3473.260878] Node 0 [ 3473.260891] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3473.260895] lowmem_reserve[]: [ 3473.263117] DMA32 free:18508kB min:36200kB low:45248kB high:54296kB active_anon:64276kB inactive_anon:307416kB active_file:28kB inactive_file:24kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7136kB pagetables:2556kB bounce:0kB free_pcp:292kB local_pcp:136kB free_cma:0kB [ 3473.277992] 0 [ 3473.292698] lowmem_reserve[]: [ 3473.300825] 0 [ 3473.324505] 0 0 0 0 0 [ 3473.331872] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3473.340598] 0 [ 3473.362934] lowmem_reserve[]: [ 3473.363443] 0 [ 3473.364781] 0 0 0 [ 3473.367874] 0 [ 3473.369658] 0 [ 3473.371781] Node 1 [ 3473.373555] 0 [ 3473.381466] Normal free:26768kB min:53696kB low:67120kB high:80544kB active_anon:3060kB inactive_anon:51764kB active_file:40kB inactive_file:40kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:416kB pagetables:236kB bounce:0kB free_pcp:572kB local_pcp:120kB free_cma:0kB [ 3473.383271] lowmem_reserve[]: [ 3473.416822] Node 1 [ 3473.417420] 0 [ 3473.419938] Normal free:26768kB min:53696kB low:67120kB high:80544kB active_anon:3060kB inactive_anon:51764kB active_file:40kB inactive_file:40kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:416kB pagetables:236kB bounce:0kB free_pcp:572kB local_pcp:452kB free_cma:0kB [ 3473.422145] 0 [ 3473.425769] lowmem_reserve[]: [ 3473.457996] 0 [ 3473.459555] 0 [ 3473.461204] 0 [ 3473.462988] 0 [ 3473.466539] 0 [ 3473.466589] 0 [ 3473.470144] 0 [ 3473.471920] Node 0 [ 3473.471926] 0 [ 3473.473699] DMA: [ 3473.475938] Node 0 DMA: 7*4kB (ME) 5*8kB (ME) 11*16kB (ME) 7*32kB (UME) 0*64kB 4*128kB (ME) 3*256kB (UME) 2*512kB (UE) 4*1024kB (UME) 2*2048kB (UM) 0*4096kB = 10964kB [ 3473.476014] Node 0 [ 3473.481220] 7*4kB [ 3473.500192] DMA32: 1075*4kB (ME) 455*8kB (UME) 293*16kB (UM) 80*32kB (UM) 6*64kB (U) 23*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18516kB [ 3473.502921] (ME) [ 3473.521404] Node 0 [ 3473.522064] 5*8kB [ 3473.523462] Normal: [ 3473.525716] (ME) [ 3473.527850] 0*4kB [ 3473.530149] 11*16kB [ 3473.532185] 0*8kB [ 3473.540038] (ME) [ 3473.541689] 0*16kB [ 3473.542186] 7*32kB [ 3473.544261] 0*32kB [ 3473.546473] (UME) [ 3473.548686] 0*64kB [ 3473.550896] 0*64kB [ 3473.553020] 0*128kB [ 3473.560935] 4*128kB [ 3473.562493] 0*256kB [ 3473.563286] (ME) [ 3473.565612] 0*512kB 0*1024kB 0*2048kB [ 3473.567922] 3*256kB [ 3473.569956] 0*4096kB [ 3473.573815] (UME) [ 3473.581045] = 0kB [ 3473.584065] 2*512kB (UE) 4*1024kB (UME) 2*2048kB (UM) 0*4096kB = 10964kB [ 3473.585737] Node 1 [ 3473.592076] Node 0 [ 3473.592082] Normal: [ 3473.597943] DMA32: 1075*4kB (ME) 455*8kB (UME) 293*16kB (UM) 80*32kB (UM) 6*64kB (U) 23*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18516kB [ 3473.601287] 242*4kB (UME) 133*8kB (M) 68*16kB (M) 45*32kB (M) 21*64kB (UM) 11*128kB (UME) 2*256kB (UE) 1*512kB (E) 2*1024kB (ME) 8*2048kB (U) 0*4096kB = 26768kB [ 3473.619969] Node 0 [ 3473.633894] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3473.633902] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3473.641261] Normal: [ 3473.649499] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3473.653687] 0*4kB [ 3473.656019] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3473.656023] 90929 total pagecache pages [ 3473.656034] 0 pages in swap cache [ 3473.656039] Swap cache stats: add 0, delete 0, find 0/0 [ 3473.656042] Free swap = 0kB [ 3473.656045] Total swap = 0kB [ 3473.656051] 2097051 pages RAM [ 3473.656054] 0 pages HighMem/MovableOnly [ 3473.656057] 363840 pages reserved [ 3473.656063] 0 pages cma reserved [ 3473.670111] 0*8kB [ 3473.680269] Out of memory (oom_kill_allocating_task): Kill process 7996 (syz-fuzzer) score 0 or sacrifice child [ 3473.683155] 0*16kB 0*32kB [ 3473.688604] Killed process 17207 (syz-executor.3) total-vm:84924kB, anon-rss:64kB, file-rss:0kB, shmem-rss:0kB [ 3473.696733] 0*64kB [ 3473.736172] systemd-journal invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 3473.752970] systemd-journal cpuset=/ mems_allowed=0-1 [ 3473.753520] 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 3473.766843] Node 1 Normal: 242*4kB (UME) 133*8kB (M) 68*16kB (M) 45*32kB (M) 21*64kB (UM) 11*128kB (UME) 2*256kB (UE) 1*512kB (E) 2*1024kB (ME) 8*2048kB (U) 0*4096kB = 26768kB [ 3473.778645] CPU: 0 PID: 18519 Comm: systemd-journal Not tainted 4.14.225-syzkaller #0 [ 3473.782916] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3473.790675] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3473.790678] Call Trace: [ 3473.790694] dump_stack+0x1b2/0x281 [ 3473.790705] dump_header+0x178/0x82f [ 3473.790716] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 3473.790726] ? ___ratelimit+0x2cd/0x530 [ 3473.801342] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3473.808968] oom_kill_process.cold+0x10/0xb18 [ 3473.808985] out_of_memory+0xe3e/0x1190 [ 3473.808997] ? oom_killer_disable+0x1c0/0x1c0 [ 3473.811560] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3473.815163] ? mutex_trylock+0x152/0x1a0 [ 3473.815174] __alloc_pages_nodemask+0x23e1/0x2720 [ 3473.815194] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3473.815218] alloc_pages_current+0x155/0x260 [ 3473.820736] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3473.824000] filemap_fault+0xea3/0x1980 [ 3473.827993] 90929 total pagecache pages [ 3473.836530] ext4_filemap_fault+0x84/0xb0 [ 3473.836541] __do_fault+0xfa/0x380 [ 3473.836551] __handle_mm_fault+0x2497/0x4620 [ 3473.836560] ? ep_poll+0x1ab/0xa50 [ 3473.836568] ? vm_insert_page+0x7c0/0x7c0 [ 3473.842650] 0 pages in swap cache [ 3473.845021] handle_mm_fault+0x391/0x860 [ 3473.845033] __do_page_fault+0x549/0xad0 [ 3473.845045] ? spurious_fault+0x640/0x640 [ 3473.849510] Swap cache stats: add 0, delete 0, find 0/0 [ 3473.858323] ? do_page_fault+0x60/0x500 [ 3473.858331] ? page_fault+0x2f/0x50 [ 3473.858339] page_fault+0x45/0x50 [ 3473.858347] RIP: 0001:0xffffffffffffffff [ 3473.858352] RSP: cfc401e0:00007ffcacf07120 EFLAGS: 7ffcacf06f30 [ 3473.866989] Mem-Info: [ 3473.867991] Free swap = 0kB [ 3473.880381] active_anon:16828 inactive_anon:90040 isolated_anon:0 [ 3473.880381] active_file:15 inactive_file:15 isolated_file:0 [ 3473.880381] unevictable:0 dirty:0 writeback:0 unstable:0 [ 3473.880381] slab_reclaimable:12424 slab_unreclaimable:117975 [ 3473.880381] mapped:35323 shmem:90895 pagetables:661 bounce:0 [ 3473.880381] free:17085 free_pcp:348 free_cma:0 [ 3473.886899] Total swap = 0kB [ 3473.906962] Node 0 active_anon:64252kB inactive_anon:308396kB active_file:20kB inactive_file:20kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:139288kB dirty:0kB writeback:0kB shmem:311552kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3473.913964] 2097051 pages RAM [ 3473.923508] Node 1 active_anon:3060kB inactive_anon:51764kB active_file:40kB inactive_file:40kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:2004kB dirty:0kB writeback:0kB shmem:52028kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3473.932478] 0 pages HighMem/MovableOnly [ 3473.949156] Node 0 [ 3473.962825] 363840 pages reserved [ 3473.977747] DMA free:10964kB min:204kB low:252kB high:300kB active_anon:76kB inactive_anon:980kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3474.007217] 0 pages cma reserved [ 3474.044275] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 3474.122729] Node 0 DMA32 free:32600kB min:36200kB low:45248kB high:54296kB active_anon:64176kB inactive_anon:307416kB active_file:28kB inactive_file:24kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7104kB pagetables:2408kB bounce:0kB free_pcp:1320kB local_pcp:644kB free_cma:0kB [ 3474.280859] lowmem_reserve[]: 0 0 0 0 0 [ 3474.294420] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3474.322991] lowmem_reserve[]: 0 0 0 0 0 [ 3474.344850] Node 1 Normal free:246520kB min:53696kB low:67120kB high:80544kB active_anon:3060kB inactive_anon:51764kB active_file:1340kB inactive_file:1628kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:416kB pagetables:236kB bounce:0kB free_pcp:1352kB local_pcp:680kB free_cma:0kB [ 3474.384416] lowmem_reserve[]: 0 0 0 0 0 [ 3474.394430] Node 0 DMA: 10*4kB (UME) 7*8kB (UME) 12*16kB (UME) 7*32kB (UME) 1*64kB (U) 4*128kB (ME) 3*256kB (UME) 2*512kB (UE) 4*1024kB (UME) 2*2048kB (UM) 0*4096kB = 11072kB [ 3474.410383] Node 0 DMA32: 8631*4kB (UME) 532*8kB (UME) 343*16kB (UM) 84*32kB (UM) 14*64kB (U) 25*128kB (U) 4*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 52076kB [ 3474.425861] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 3474.455972] Node 1 Normal: 100*4kB (UME) 35*8kB (UME) 64*16kB (UME) 99*32kB (UME) 4189*64kB (UME) 18*128kB (UME) 9*256kB (UE) 2*512kB (UE) 2*1024kB (ME) 8*2048kB (U) 0*4096kB = 297032kB [ 3474.486526] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3474.507715] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3474.524634] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3474.533462] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3474.542098] 92618 total pagecache pages [ 3474.546122] 0 pages in swap cache [ 3474.549604] Swap cache stats: add 0, delete 0, find 0/0 [ 3474.564474] Free swap = 0kB [ 3474.567492] Total swap = 0kB [ 3474.570497] 2097051 pages RAM [ 3474.573608] 0 pages HighMem/MovableOnly [ 3474.594509] 363840 pages reserved [ 3474.597967] 0 pages cma reserved [ 3474.601320] Out of memory (oom_kill_allocating_task): Kill process 18519 (systemd-journal) score 0 or sacrifice child [ 3474.612208] Killed process 18519 (systemd-journal) total-vm:46096kB, anon-rss:468kB, file-rss:0kB, shmem-rss:1964kB [ 3474.645420] oom_reaper: reaped process 18519 (systemd-journal), now anon-rss:0kB, file-rss:0kB, shmem-rss:1964kB [ 3474.706058] systemd[1]: systemd-journald.service: Failed with result 'signal'. [ 3474.713848] systemd[1]: systemd-journald.service: Service has no hold-off time, scheduling restart. [ 3474.745604] systemd[1]: Stopped Journal Service. [ 3474.765485] systemd[1]: Starting Journal Service... 05:23:27 executing program 0: socketpair(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, 0x0, 0x8001) 05:23:27 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x480200, 0x0) ioctl$SNDCTL_SEQ_PANIC(r1, 0x5111) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x2080000001, 0x32}) 05:23:27 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x2080000003, 0x23}) socketpair(0x5, 0x2, 0x1, &(0x7f0000000040)={0xffffffffffffffff}) connect$vsock_dgram(r1, &(0x7f0000000080)={0x28, 0x0, 0xffffffff}, 0x10) 05:23:27 executing program 4: socketpair(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) recvfrom$llc(r0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(0xffffffffffffffff, 0x40085112, &(0x7f0000000000)=@t={0x85, 0x5, 0x5, 0x4}) 05:23:27 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, &(0x7f0000000080)=0x40) ioctl$SNDCTL_DSP_GETFMTS(0xffffffffffffffff, 0x8004500b, &(0x7f0000000140)=0x7) write$dsp(0xffffffffffffffff, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x80000001, 0x32}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(0xffffffffffffffff, 0x7a5, &(0x7f0000000000)={{@any, 0x7}, 0x1, 0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(0xffffffffffffffff, 0x7a4, &(0x7f00000000c0)={{@hyper}, 0x9, 0x3f}) 05:23:27 executing program 2: socketpair(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x0, 0x0) ioctl$SNDCTL_MIDI_INFO(r2, 0xc074510c, &(0x7f0000000280)={"b5118eaf7afeb2cea77bc9c52f86e7e79a9242098c2a2eac7f55339289b5", 0x7, 0x53, 0x7, [0x3ff, 0x59, 0x2, 0x4c, 0x1, 0x40, 0x40, 0x1f, 0x3f, 0x7, 0x100, 0x3, 0xffff1750, 0x0, 0x0, 0x40, 0x3, 0x21]}) sendmsg$BATADV_CMD_GET_VLAN(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={0x0}}, 0x0) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00', 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9c349ebf", @ANYRES16=r3, @ANYBLOB="04002cbd7000fddbdf250300000008002c000000000005002900010000000600280003000000050035009d000000050035000400000008003a00070000000500290000000000330003d65822249558cf9ba691e84d57e9b8994b4266d3c1848ac14c3de9d2838e68057f115e4b32fd5322f873929b6f903bd90581000cf6"], 0x4c}, 0x1, 0x0, 0x0, 0x4000880}, 0x44) recvfrom$llc(r0, 0x0, 0x0, 0x0, 0x0, 0x0) [ 3475.024101] systemd-journald[18650]: File /run/log/journal/64dd78f1a75445a997c532444ad0f085/system.journal corrupted or uncleanly shut down, renaming and replacing. 05:23:27 executing program 0: socketpair(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, 0x0, 0x8001) 05:23:27 executing program 0: socketpair(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x34, 0x0, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x100}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x8001) 05:23:27 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x2080000001, 0x32}) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000008c00)={0x34, 0x0, &(0x7f0000003c40)}) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvram\x00', 0x2000, 0x0) r2 = accept4$nfc_llcp(r1, &(0x7f0000008c80), &(0x7f0000008d00)=0x60, 0x80800) r3 = accept4$nfc_llcp(r2, &(0x7f0000008d40), &(0x7f0000008c40)=0xffffffffffffff5d, 0x101800) sendmmsg$nfc_llcp(r3, &(0x7f0000008a00)=[{&(0x7f0000000140)={0x27, 0x0, 0x1, 0x1, 0x7, 0x3, "0417b7ad1f5d0ca62bcc81c40e3610d5421f8c847dc9da24fb4e85e814274a49befba9074df8b8fb588a112c799af0815eb32fb7904200bc2e4a9f1fa0636a", 0x23}, 0x60, &(0x7f0000000780)=[{&(0x7f00000001c0)="0b48bb694e17a7819ee5f500614ff1e844295e4d1314fe1e73d1b00732abe12d0f6fbcf532e702f625b0568a2501d08f6e3d602172166075b4f0b1d473541a74976f82f2cbf183d9e2a473e4a162386cfb24a53f039084299ffb0737ba5b9f9312110c67a38c6f6288386cfa0bad019d8950e0556f0f308b18e3aef51382e5c77c1a006543addb359960f94954452c3d878973e4ab397afd31ad74e9341fd8b7e2af0473e54e2d2f8960d480b07fec3b49b113613a579ee1452145f89c8e0146c7", 0xc1}, {&(0x7f00000002c0)="886fa9125987c5f5a44a35f4a91e34eeb0b88c35d54bd951d2e446bb3a41c0979869201f9f2e199ff5a1bcdef3a4cea20eea8de52e753c826d6a05c36ede1d3eede854b2855be054f91b247885ae33af411b92dffc2569d8a59f15a1c8", 0x5d}, {&(0x7f0000000340)="78c56b62e900e65f831eef28123a6ee026c7aba528f07267bbf1d14adcd2c3634288d1c5fd4e711fc5f73df207d154733092f0b7", 0x34}, {&(0x7f0000000380)="180c44687eb783f2a2969fd4d54a7a51f91a971b89bb150f08e4718937c3539f263d000ebdbd0dd85ed1ebd680d9", 0x2e}, {&(0x7f00000003c0)="7300714b939b9028bd191f8dcab04fde7bebcf55757e439267f5280ae4b5ebf5c346f6ae89c74e67c2dd07173eeef1d79326b4232c0f99ae57a2141b9943955dfa8e4269c89cd2c39ec14066745bc8caa684704c91e23417ee14c758633fae9b3a53207d8595e0ae24ee344bfbe59778512ff6ba1df0fba5225ad4a7e3da3f6ce56f81725d72f6d4eb0c456058b12762180851344ec8cebf34bee56c03f874eec1b9", 0xa2}, {&(0x7f0000000480)="868e313bc6bd235d428bf88bfdb8e0a970ee9d98b709ac61573a11875c543c71352550525476e67038232b3752b8493bc33ba28bd8148e9c18138f68fe2daca816d106b794bd48a7fb8183a5fbc52af9780b42efe668afe81adec4270d8f7cfa1e2e4a7532618b708a3ff9f78e7408ba168d5c1a41f201313d94f041b358cb7a1bbe4623ec1ec805ebeca55062d908c0962ff1f33240904faae9fd8494c33d740d6509be882d2cff4838a8e0e056be83c902167179f7dac76ea51c0fd2c2f7d504c7e0516911f905d728e3bb130a022d8908c5fd521ebdacd06547f83e6b3f6b315236fcc03b19c828d3", 0xea}, {&(0x7f0000000580)="b649ecddd07e44941f9fe81ea7ccad4efcfb5382b67e78c0f3bbb7dd4946d3077401a1aa1e269a5be55c5277e2809948dcac847813fd88259d37219dd9a77b8d20c21a8e731339a607fb42508c1d465bcb3ef86e737cbe1db711b406f1b82f7e9ff63f304a4acb22f6a7488e5a04a29424d765675932099a8c919f5b829ab5f9576c4fbd8170d247f75ed9e2a904f035807bda0e8abeee0af815136056a035aa320f4e6dbe55e5f7c2684257e4063d6cec951ed09e14637d6903e3eed026fd9352814a4c6b36f49408069784eaaca8522bea5a14f2c02f9006c18a164d2108df27377619972ed5", 0xe7}, {&(0x7f0000000680)="aef1ccec2ab1c293ca7bf1cba305695cac9ea7f96dac61974e04dfa9d811dbd45c5d86ce6a3c517fe5bea06e3f84fa94fbb0e94d511d9b8edd879aa592401957fa66788499f485fa9782594215cea7e142eaef33b09002f99c801d35575ccc80126009bf17fdff7d3510635e207f0760ad69b3a52698901a06c62ea73aa38abb0928f5b272f7df897dce618510884654ead386e6025b74ce485305f1e91246ede8da6d09f60935c8a2740ed3c5482d6796fd0de157a97ebb3f15b116960398952d27f0bf9e6356da26207375e9a3406963c3da89020296e50d29128dfbcb2c521ec2b2f8338d104c9f7997e16856207991d67ee13a", 0xf5}], 0x8, 0x0, 0x0, 0x8080}, {&(0x7f0000000800)={0x27, 0x1, 0x1, 0x5, 0x6, 0x0, "b907959c2c8d31ead6a4b30e9d32063eda1d950567aec1fbd448e8d411e7365fc202a0cdf91f13147192a567ec0ea4391f2f234a3397a3f7b283a048579434", 0x23}, 0x60, &(0x7f0000003a80)=[{&(0x7f0000000880)="19f6927595a9e53c04a6ce46ec5a058fa7f3401eef7f543660f42393e39cbd44a7672e5e4299536ec9bae7f980349bf4fbe0f5e599cbcc54202ede07f9465b508d16874a688bc282e99616cc4f5715884779cc4470b8231a543d23e7762ab29170344e144d9b1ee01f3e3d59950a706a3f98e04a88f8bec87c1e26dafc4c675c1c28875dcbada05c68f18afa5f0a20ea6a2860b4fa5b3bdb6e16bb9835f58ba66016f937a59855c03d380771f90f118945b2dd5c84d0c5", 0xb7}, {&(0x7f0000000940)="3b99d853c80ed16267e879a7d8bb9abfe0b235230fea02323a0dd55f0741aeb9daab55e93ba804a2eef7e9d94fc2d6d9474b8b8a2ad43d668199e710fc0f74e55a37c12e746bec5cfe9039f259a09f95d3b21e720a99902bd166d2f330b3a741f74d2caafa74ce2ceed41aa068a1877e8fb1716b3762d7e7818659a812d708bd3fe190038ddd0aca87", 0x89}, {&(0x7f0000000a00)="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", 0x1000}, {&(0x7f0000001a00)="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", 0x1000}, {&(0x7f0000002a00)="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", 0x1000}, {&(0x7f0000003a00)="3d6c5107fc48530254e343d8ac2c3c143145ac1f192cf95fecc5f79157b584f5285bb1082aaeb0b82898e14e572a696b91a96bbf4f413f2bed5aa0338e212fa9f1c226c5c82f", 0x46}], 0x6, &(0x7f0000003b00)={0xa0, 0x100, 0x1, "6c988a1708fca7bf9b836ec45f4c07c53f153a20701ead1094b8f654767ee70375eba165e788ca14083a391be27f2fe3ab609d51f956c01c661da0536a8f83e28ab9ef19cbba0e83b443f2bd58b2e16a8e6e547dc643c4b8557810108a7f20972fd70ee8e05be3ec76e5aa2d1eb86d0d4f6e8729be931d97fafa8670063f01aac38dff64859633f3e0667d7e30e1e8"}, 0xa0, 0x24004090}, {&(0x7f0000003bc0)={0x27, 0x1, 0x0, 0x2, 0x3, 0x2b, "b36fee99bddf313e8d8a0be4e7c736f84bd9faa664673f12be90f14b9bcc877353880dfa4ed1fe86230a976d511e8d9d7004b4b85cf46a800c8178866f2123", 0x3d}, 0x60, &(0x7f0000003fc0)=[{&(0x7f0000003c40)}, {&(0x7f0000003c80)="f89b4477cae08fa8d1225b3405a860ef15e676c77c582dcf1b3e58be7c6fb19e104e1a739588d32858652d", 0x2b}, {&(0x7f0000003cc0)="d5a4f2d32db0b73d9b50b6b80b537e3021f16f0c3eac403b5814405b802a3425259f2828357b15e3ed13290175ce6843aefee67935bdef2120f7036a440a926068a65eca474e65f1cf676ee8e7f52542621b0602d68720d8ef219dd6683be9fc20a1988f45435f500d0338c0fdcf5edc889f241b4ce2297e4acb1e7ab3760bbd778cb07284e7091d127c17d32f223bd5fe37cf720c27a60ba43b58e856afc11b3093008a4b9083c29e5e74064c4e2a5fb0c3ceb4d298", 0xb6}, {&(0x7f0000003d80)="b591ebcffb135d89b5b3c25a476905319aa331d6d1147dc0da727607398d63de3fcca22611ce5d626a8ae4613c092295139ef97d0d3d305710a83d7f5816d382963aade7c37dcbb1f1c9fea9baa724a903d24a2753d532e6", 0x58}, {&(0x7f0000003e00)="cd617626af3c28314777ec08472aed17cbd92faeffb8604821c03f6f4596bdd638ca340c3764911105eab909a99586b08d3ef8293c0276324eef6a2fb162fc1fe6ae6c06453af7f1cb71ae155c2ed614868bca139548d47f40f7a93e7ae7e55c489abb7060978358582ca66dc469fb0808c2c8d4ac68838c8703e593e73520cd0a7ee28f8e18bc197ef2af3a3983ce0366ec8d2389d41d40e3f01314922bc7aae2926fa99999b8bb1343100c9d7917083d53261d409003ffc062147c31d64c44cd3f5ceb71566991270bb7e312ae1c29297627", 0xd3}, {&(0x7f0000003f00)="710b30b01cb34529a0822f3a36af86fd53b0b80eff88cb24971b91076610215494c1d0f25beb1dcf7f676ead6f5f819e6d5257a9cb5ba208c7108984137ade201c8ce08bad5d333fc6328f96b9bf57d1dabc7c27699f5f5b7c349eb42261db53a3eacf825a6ba8bae3a02423c6cc529568a342b8a540d4a3352acf9eeb0757fbf2024549a2d006cc3a15c0c7c62327d6a455a9751ccedda20f1bd85d7da9848a99f826c070556babe231c6f8e3e8cbafd3c79619634e394600671c7070b1", 0xbe}], 0x6, &(0x7f0000004040)={0x98, 0x119, 0x8001, "c57d4527aa857bcded33b62bbb0cee42e27dadd15ab58b721f98acc29563eb67d271e85e0ab676cb208c08e249d02cd65c6e68892a98b362e0b61ae2202951d081cb6279a6c7baf2cc4d4646b4ec13b3fdd50efa039fffe26db04c99d869b3f549bfc5b23f64bde350e4a0d192daafd7b3a0f924d043236b278b36147ece4916e8f2baabc343"}, 0x98}, {&(0x7f0000004100)={0x27, 0x0, 0x1, 0x4, 0x6, 0x4, "72b88c5bcc4770cf24df90f717eb8ce4ef77038c46c49a447f2c3a7a3152e9faf4e306eef076c6db881ec616e9e462659b7947e60c6ab50e159b9ee2dfca19", 0x3b}, 0x60, &(0x7f0000005280)=[{&(0x7f0000004180)="21b6014915b03566e7168877b5ebeeeecc15bcb992402d540d3055995bc619a6eb7d240b671a9b8803a7aab34314302ab2e131dfe401a7cb9e25b33b7eda6cea91b95c5f07c228af534f0e66ea8724a2a88b639d1939e9e58616dff30b9f80b989b8cd065f780ef0977e835c966ec6b617e20fef0b2a63a216bdda138a4fc9b200c7d25f82bbec165f190bc325f763b5f74edb4e3a3a523ea744703d09b02bb6f3f4ba612e3a68415361a548404d26a58366c94223e546222a03f3c4aaf98dd7d07d09376bdadbd9273aca2bc80f3c763739c2738d94ab000087a0c1a2ba600b0d", 0xe1}, {&(0x7f0000004280)="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", 0x1000}], 0x2, &(0x7f00000052c0)={0xd8, 0x102, 0xffffff00, "e0cd065270720fd0c2d1e88fd0c1a279694c7617a22ec00c4c5126f10ef75c156a10af9cfa900c47f60364d0dd9978990a9ac3bcc3a4aec6606c181b325dc289c31c582aa173ca48004bd237249d974ae89f8c4d93d956c425996d60db15965d6e64827b6587cfa3a97a75e38455b983704b2805c549689981344a153cceb9f54e61909a18ceea1cb10f33c4ccda2ecef069f2fde8d0a10861f16c34159a378586069e421e9ba338da69191d8d27372580d0c4481eb180f7ed9f745f32387e93745e96db40a24948"}, 0xd8, 0x240400c4}, {&(0x7f00000053c0)={0x27, 0x1, 0x1, 0x6, 0x6a, 0x40, "8dd1da7440ab8d2a0b2321314f06f5e9e81e8828d588f2428fb0851d22301568aeadc4cddd44b72e3ba7f3dd50145269a7ef6371696deb4833c0edf077d80e", 0x6}, 0x60, &(0x7f0000005800)=[{&(0x7f0000005440)="858670aada0b18db5b0544abcb77c4f502f93ad787dfee7d857aa8569666e8b7f1c24891", 0x24}, {&(0x7f0000005480)="ed3b784aa679ee5dbc57bd72faea73626ce5886e67335e5533907f74b060fa5142da6286f033a173fac195f9e249f2d9777ff4bdd9f48a2ce184a0f9ce24d998a7131139d4b4cc9a870daaabe51f487c93623c09de8acb5b64f0d0fe52381546dd5d25a5a9a872036aad389459fd66bb953cc04e71fea9c46dfd8c770fdf92294fbe87aff35ed6677e4531c3100dfbf71ed57481fd38ac006180d83703ae29732683b7d0813c5275aea2a3c063068ed4d90869d86d9b340c8957481d58c4af50021f0807c1cdeadbc71c6f7ff735cf9ce86f3bab3905005ee80230d188c0dde63686818b2f8784fca3b45648132443588f", 0xf1}, {&(0x7f0000005580)="05b818c9eae711f197ecf2ef9e19800ab49e8d694c88cf5bc12af6eeb5a9ff1df86dda5a75d8891b3484ae8fbb9686fc38af34aa", 0x34}, {&(0x7f00000055c0)="1d0bfb489add906d3bdcb4593be15a9caa8f40b8565cf2e47b8c7d9e05a2c508f6b2529524c0add85aa16d3501e59c497964da6daa0d2d7b0af3fa3bda8f29bdaa2d20287f39db46f646b20964709fc2d2ccde846c5ad75a5cf2a9d813de8b8ab3ae356063ee97dd382fea4b76dbde786a42a4815a8df91517ca4566dbe5e578558494606c3d74aec16ae93465f663bd5067ee3fdacaf9098aa9cee72465ffee8083defd39c83f866352b7b5bd1f0512dc3cf2d6", 0xb4}, {&(0x7f0000005680)="9de85b02e8c88b2fd7555f5a9a5227e114ab9653a9b54caaa93f3031ac6b2d17e440c4b53d35eb1bfd79a044b1c0cce2d0ae465c916bba60da3803b08d685723954850b85bcad14ee780184db4e2a0d4b63dbe646a582faedb5ff7171424f6e3d4190753794f3edb9473326f2e35dcd69b3b12f36656f6640d9ae20644836039f77ed490caf258a30f4463d73cda8f969ce23e524f6f6b0f9d6e0a28716b599b613629e82604250598a41cbeb8fb", 0xae}, {&(0x7f0000005740)="34517cd5ba977f8459d887cd0876ffd1b1edfc84d28385895d898b2015bcca02f3a195a1caccb6e4ca8d9adb3eca63195869dded9e132ef8164ecdaad4168b487a8853935522f176fd6015074df750ee79c1281e340351c922e937eaf536602f9a20070249486466da0388cec1d6deb296e7e9c85858f06a0d46bf06867496ef52dcf9c2c68c3438553e4f95b4e0d5ea917c313759", 0x95}], 0x6, &(0x7f0000005880)={0x1010, 0x118, 0x7fff, "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"}, 0x1010, 0x589306dfb72a9b7d}, {&(0x7f00000068c0)={0x27, 0x1, 0x1, 0x6, 0x82, 0x7, "cb526a5b31500c227db8e79ce1631f1d3d37ac7b98baed0f7f5cb413c707e796589058f16d26bd1d27119cb5d4482cb2ec13df23a903015887a6a4f31052ef", 0x14}, 0x60, &(0x7f0000006f00)=[{&(0x7f0000006940)="f562830a99bc998f0d3fc6f6a91c2846bde99d68dd69dd1c008ed366f8987b3ed8d6b734cb6b2aa35c0ce890eff765aaa01715f09ad5e682e137bf2ea35af593", 0x40}, {&(0x7f0000006980)="7256c1164d26ea977a9b4b8db5907d76dbd9283263a97e187b77eeef833d800f16e097b6e1be1c", 0x27}, {&(0x7f00000069c0)="109431d35003e58eea8768ceef6a542fa7cdf08d901b0aa4fd68d388c650a8ca2bfbc0b1076ae315a335545c5890bee40940d5f4de099d4c4b5ed7d64620fa7e1bccf0d562ff4f981eb7ebdf5dfc3d9b49af44fd44f5885a33aadf289fe47ba007ecd9e64fa5eef6a5270a8cf7fc329fc06d691720fef106644e1a08e7e77dc0836633f6ceef806ef93da5310c0f3f9d483a971fedaee6b36ff87ea0448fee7c8b85ee42a0ed7d8459d33d884ca901b73402550f010ced4ddd41a08a74c48fa5276e138b4be31fd22905f2ac", 0xcc}, {&(0x7f0000006ac0)="d6be12014bfec4c35b05f1b51d27aae8c6b1b19b", 0x14}, {&(0x7f0000006b00)="5835df4713e5b0441ae9aa09d540de8e514e3611f5fcf390df95a2cd3a39c765bf6967fdd24d7636d742c9edab49620bc7943f0501bfead1b1033ddcdfc668668899d43b24eb5d7e5934d7f9a17d5e809883751b451a78547601a0043499e210c293cfd57cbfd42b5787d8b451d2e0196da9ced16aa27aede5332063e2486818bad4979a3f8d4581458ddb03686110bc3f6ae5340fc428fce3f8ef54b2496b4b7741e961fd88e0518362367df24b8f2cf8a9a965a31f4061fb", 0xb9}, {&(0x7f0000006bc0)="ea3db0052ee67fc162d9d2959b10f9436c8b23030d9ac1907fb9200696103790b668d609f384a56d9a92f79b81accd390ac95f930fd2be3ce41656d06a6c5e65b6f45c51b49c8808564628d771d849f2a6feeb895314cf6f5553aca7ee3711f1c7bfde476cba2c521183d05a887711e1a510f0fb302b940b59de360725cfa7748dc25f52a69c7bc1e6397f19750cf8d0f03aeddbbc4aaf21610e83d819a4c18d891ff33a59c1b5d9c5c333f3cb65f12341b5a9f8f15949b19498cb7ef7681b0a87a1d5c6a8583037a05a0ccf1d8d0111f0726372bdb83c6b2306", 0xda}, {&(0x7f0000006cc0)="70889bb46fcbf3d1e2a03a916755e6e1ec39c44991520897c29fc03744a9dbcf9e2e2653554bdfc417619444001c7efd44148bd72f33385f62905eea02bd4e36a3fcd32abc3012fab3c1cc", 0x4b}, {&(0x7f0000006d40)="53a5577ea1a8d767c80f57d2c0758179755b0513002fd8b8df02090f636ef125956db2a7f584a3a34305239406a89bd51753fd5d383446eb680dace70df7a1fdad5e23396601c8cbcc9449fccddc864760ffb0e6246cf1f410cd5a3087b825474bdde4e1a9bf8c8722adac8d30df0ee368df26bd94386ef445119c91c30711539dc1c4ae97cd68ae448990d3aad6b85312896e332b5d081a696258561bfe0bcea2c1c156c753e9ad9c5ae75d32f68a2bbed25a69e1", 0xb5}, {&(0x7f0000006e00)="ec0c92f3615681853721226a291813f0637747fde55409bccce881f16d5e2ba2149b67981c800c6f0162a8537ff8336eb88993e9cb37bfee01b11da7f7d34047ee0df7fdd0eb2f8303db11a665343a786f7de0e8d1914574994b95ab31ea1323de09f9b8d04856d3fdd79282054cbf04b189ab6eb283af5220fbb48c913335a9d22984e4f7e07b3071284d40cac3584af803cf3d67c618a893bd96b3efcfd7d1bf5039b7965fd422c90dcce9f0eecc8503e28c96159d0ef5b1b73b49979e1bde3bbf36b4e47608e555402919639224f84859e00be717b3b941", 0xd9}], 0x9, &(0x7f0000006fc0)={0x1010, 0x10e, 0x6, "2da712dc8a9a4fd83c4e044b94f764b0fa3512f4726935e48ab23b5339d6a9446b75a4a0cacb2b5a1bc5349536bbb45470d9599edce3aff3490c4e4a252c21c3a988fd8732d9a532230723936ee5182db54b8b67697eb2da21cef91711baca8925448f0b8eb32e986a37b204a64a6220d7c91cce7463ad5bd4ff2e4a521d1a7938e62b5586845af4c23d1cbba1a9b9f014f231a39c06b8d55b979fc9c8ea40b3b39f2d4f65103f64c1666d0834bae3cff99ec9661524206a87f36a45acc59b5ade7b6b4eea3c375cc737a0e11723f92d18d9497ece20cd19c9a7ac870df2f00506c2a463645f31ce3b425ee35e543d5d7f4c1f39529e624eaa7d8d05f541ee0389146117640d39b73d23784465fb83bf6c7507128c70bfbcca305ed2a5c47e1cd64180efd95313f57011d5e900c70689534fdd84c7885f64c9100a4631c87fbb66c3771b638a7b7d5cf850d7daf8d7f87bfd9a86f56505023b3e7086ecc501173884ee4d28bf4505c3ce6b54ff6eedc01451026266f89406f14323be9699abb9a25c003ef1de8dc66ec463a5924f036f83f4b314d777f2b81f6452b8223ac539fd83f3944bef85b109c950285cb2b67773a1a0de6d0d0713a408547b00318acffe7da1a478bc8954a50063e72594962c9f5314b7e3966d2170eb15a9dad0f34283ebd62010512619d8ce5935327ba473b459e39f17f1f16403e5158868434b1ed8afbe4786936826a6f57690d432a8b41b31a81fae18fd098f0fe2c97e1c91e2938e3f15de7561ae885034405f3cd91b2bcbf3382a22ebb2104e4d9420b4ab7d9139a41daee1ecf288c15864273daf966f1f054bee19ffd22a0c13508ebcde059f8ed92521453e41504089057d5075fb4c4a7860b65ea4d0b8ff22a42aa9b35936b9f2cd2d9252b0cb26d85a7a4aee1b93fbfbdc21a1d2d6d2bc0e88d2b313adf7807ce5ee7da916c043f7c19e3a677a8588ea5d12fdc9a77f02e161e2263bdcbb02ac2f929ca5714a570dfac5625261981b4b150826175e54d44ab505400ecf13cba99a3c3d8a305f8ca6b75294c00735b48e7226c92781b17797221f722f5712e1a848b05755b2cb71ee49424b1245bca216d46ca7fef01a113a2356708c87308780925be575c5402ff1faec7849a9bcdc0d0e35ac8e2a5534d841324f41e0decf2f58975bf127f46f32abe85e122acab172f7bb102f976f16c64da5154039abd0376a5928d13cf5a350784b117c4a7ba7a06595e0020872af122fc9fc6c4b3dcd3951b4ca5314e18ee9226b303207a8133dba558df61bc0d66c0a23fa0655df0a175e669d1f2ece2394e881a9ac8eaa9207724bf37fe55431cae3869f519fff73d5131d58038d75ea56e0d0cfe7502dbd64132726a296b56e16a494711cf4be99593df495ec8523b779dd0508b091c4c6df80122ff6aa94b144c8f118cdbd8b2848d961ac7a304b02a0f3d4d5eaa2f8b3c01656b76afaba1fecee7bcd1a10c25e478f90f6fca4f07df860b7ed9c2cda453f6328c907e5b056d8cbcae0bbcd9592fd1e605cc567f8ae6a0abdd7c2f539c26f464988c0f40c09f79aef347cebda88f9f98b2436d68ce6a79b804ec95c6a53f0e6835632604cd86dcf95ddf40fd9babd7fdbf68e8a59a7f0716ca3189717310564749f7c64632f220ad717adc4404d31ec9b417f7fdc183a9347d3917675e4560578656f493be27322a55fae4c1d83b729b78935d025de364834fc9b9eea78d48c71c128bb8d988e818984281d09208b92a57ad66dbc8ec990ef838caff0b9767bdec66cbf42323f4c9118b6a71240accdfdbb45b7ed8c73e2035993534675865bd72b54f9332c64821a0fb1a5a4a5e352b2fb29b551c81ab251ce2fb32c0e744fb5a85550783b33fda1c5bcaff783df7ba1b3f96671560d2b5f8ae7f082240524e787dd77df8fd0897dec2fd5d7e10a1f9e9f3b8b66fa5339e6017a388df15d65a1891450e7c70afd0b0dd5f9e4eae64ccbf81c728f3dd25947de87b1ece6c9f32b6921e4bf31e822c1ad83f667468a9dbf66c770d396da0b68ea427775b345edfccbd8ef96a366e0a9880c3c47ad4faf2d49a265ec8c5abf3422a929f4bde94d0ab992a780380d0044a048d96b24ca8856c4d60a4976bbfab2bc8bd13146dae0209c9696432998ec8bf5d86bb90718dc18fdf53be2d61bc1f53da7603a1ab2f7c07da099e9b770fa8254f992c61b88a3b3dab8c9e38a0d3452025fdf6309b90b785492df23676caf236dc2ed4c854b68e5a22d7807f218380651578076d704f1ab985d8e18b61fff432d487219cbfe67d161b7297a7f83a55f688e288997f860d70899f5ab52e9cf0700123d97d580ed5c9d2d05cee028c1eba839b03e234e0f15d2ddccc967099c3a02ac1c43ea04294ff1d11a93293ca5fa84a3bcb9d78dd326805bd37aca31ca40e4d51c006eacd01133a165d63d3fe62e72e476903793d2065faaef3e595bef9c293283e4b13dc4449944eb4e70aa79a35c38600b71883e27d2283a396c8193125f80cc1e633276229f1c73af7ebce0bf1c6b4e500f0d90428846301d56f9c120a489c4e4f1436980f64ec6771fffa4f71df3e30a9ba8fa65dc964662720b97b97b2069ffee9b5f854fc24e6dedf85b32af1cb3a6c2002a2f51616fab473ea951bcf969c022a401adf0504b1b8b982258d7818ee89f26d592255bea55de029eb4110e33ce6ce9aa5c00beebbdc5043a9d36b43e4c0b243695b1eea64001ddc987a75830331e9ff0c20f384f23d793692721f32e41490eecb12d69b0aa64b3ba9229597a9ec3f62c73610bc1cece0417ccbb1d620d5dd44d5a2684892de03b4af3046cc96176835ecb22d2392d10b3a3ce23da1e69aea4682e657d041c37936b272753a0a7950f48a4ee43fcd01478e97d54d7f57f63502f42fb8fb216155f6568cc58b2fba0bf3bdae5ed33bc77152de3cace7d82ce3f4d23139ecefe852044453ff75f07d423febf3be6dfbd1e6dbd53454c51afdacfbbfb1ce6057706d983510b1bd6bbbe9f1927248c4446c60934e7f91d34847319657f4e8a39028b851a77516a48aa7143daaf4bef3f75631355a014f1713c877762feeee0e2522a7527a7602301c4977309d9c32af698593ae41bde28ce0737104a891f9e500542d6d79770940cf93fb0df4e6956e3302d0913222052e3119624cd340d57b614b79d0c18def8b4378e4b31eb872c536955a226f32cb4abecb0859930a9ef9ca136adeea57a401e086ed8f35a0080102d59dd8defcae40c77356935c8ffc2bec701deb8cd5270d8642c346263e46066f055fc8ed84d43e8ea8f72c69b84d52b8d1767b257154db32fc09283e668feec3ea8ffc3a07ea002d08f134bd1e8751f4c3eb17f1dd4116bb5e251f15b188f958434e6999fbc596ce6c84fe2a16e54a99a3f8729d971bd0125c7dd9a5bcd14025902307c386a3574e3526ba8b6459151b180fbccd0c07df160d8e6fdb1c03d4dcf4b86a8d7c413cac3c5c2a25b3a33d63ed7038ca11548e9f0ac39be3ad96ab9dc9d642fae18fe7dac1f144204a954acc133cbbe243054204ffb4081cef3f8157c18f23a42cc1d44bf5cc5e1e3d92e6d55471e29ce4b5de7c98ba147a969f81273349fd50f99a88167175b8920c3b12a74e1136fb7494582d06d61dc97d3c1908ccc18aa73ebb57e3639798e89e86d8e462ba0ef924516a45f6ded3ee86ebe023c41ba35d63134b762d329c1e8646c1b24d21326ebf41e4797e0d8b83915e44634c4272ed4f5ca91cf061293edebcaa5abe39a4f65f86f550ca50329c88fa21121b06d6bf4a8ee40cf641500adf99c1387794676bc30c93c4906512ae49d254f6f1f3d4e111d112dcb2f93e21997c6b553a9ced7b3f39ace8963dee9c7e77f799c470bea85be49cc5c0a12b90cc5126d4562b8db811860a9eeeffac48ef3e8c90fd4886bd215a290a7c75d3f6faed54b3ff1409a9b66cde2dc33669ea40ecfc6c68f2b3a08f619651fdad52a6747bafd54490b3645a4a5a1c117f6a9f376a6e1587df435900a2c5719f53b96eaef89d54829d831896c9fed0d826a6516b53cd6e3e952931c46f00355e4071ee7d70a5f38ea2f60b0164f3d263ac683c168759a74015f03f1cf00957d0015a0b8fcd3ac47127cf58145ce2ebd036876774e51bafba772739da8e159e47f6b9fae9dba30288862c580415b1d0062e8fc69ace6dbbb873de7f45c329acc5d5122125abc718d209e5b232388c7101c21effaa82d4be93a436e940d5f8197d84680581c911ab92470e55b42c06e9439a46e8721c76b7076def145b68d43fb5a98b00a1f449a490aa0592c500602688ec50f00acfca496c699185eae3091a79ed6c1d9d8e40e9dc91bcd4f50df0a1259981003d101969bb879ba4f442152c1d55afb5247226815243b1965e42a7c525a760a89e20406ee3b641afda7b05f4ad3634e3f4423911d021220df7a2eba8ff62bb088e0ea7d94d8bf3ff95898b75481c4e7467293e97b8770174c3751d103deddad74798d607860bdf0e136c304683792f25fe4dc98e69c9704b8b44d40c7d2bd540d6c9ff771e3be38f6b4f9bdf12924d161d5c70badcfad28db12a4ca7aa4168b38f7a0f135b54f7350edb457cd23b00edbc44ed92f8489a86604626b269a020e0ffa2db3ca278f648d4a8390d3aa3a526823354fe4b7ec9b210ff2d7494d847d4d2f6fb4b98759b2763d7ed232fc70dfa7c7624f4d649d4d0bf97dbaf586889da958528155a9b4a08c981d3c152412a5d6153f47f85493fad3afed0f42bb9ae8ee3a10323c9e900e2f0875d244b099e6b95e2e44f72ed5ff81cb8a8d92b071085c0f0be921493c1a16f8df4e94652093f842dd3ec79f0f04e39ffa59ce4b2ab75eed54eb6770bd0121788e6bc63f75c79cfe4fd58a5091475c8024d186d39ca8a89bbbbf81382fb44ba8b7a325cff1a52c17ccd8e1a1446e4f46f11ff8b7ade53ad66f3c0c0dd29ff7dca822cb9044ce870ca3e803b2abd1b81e1c725b369a275c2c7f4a81a1f72651485d47ea923ab1acc92a553b2dec10a6e86884f3bba7a3fe4ffff0d6219ee0f854aabe359a6f97d70aa1fcd558e27cd5ff058fef54ec6a87d5124b8991d2315a6a7a14933b07e1b93b730ca5c68e0fe34c07b176b99299c79d81afbdd746d9b060f2e969da6ca40833d55a3dddf7bc5f360add6009c09993b503c40a914734aeb15d322c68724ae0411da8b33d178b6bf603f1a72d752464fad979f7405a5e4805f1bb2f29467cff8155690fa38923e54bf5e1c53d49feaaa1043d11ef6b8fee0de06ea4ea21dbedcb2cd9c193580f2e7962469950807985169460b1a0e13ec6e8fe46a0bd9ff458cdc0ebc47d241ed649adac01a93eb848146c1c49c1a38c077b2384a9ed28f90c38c465e618a5afdb9f882519a8e7471e4bc19c39fa65e3c49fa659ad178d0879c65aacc0844a7af39d1e25624b26a78f78fbd7b125cb336a8a56d2b39f63c72fd6ae41cf133a3935bdd6a1af954a16dbe6ee3d33352a1b5a67dddb5cb00cfabdfced6666aa7267e9a3383c36ee58b9d477e78ee1968f6efade083ddad0e86761f5045129a8de522e2b6c52b8b5061ca332c2725167dea32388331816bad34b3aa441d2cd8a3a2d0d36153376c91134b710b392089fb2b82b5a1e39915e23025dd8e5fb6be6efec5b799b721f16f27eeaf8b54d23fdae6f080dc8f7abbae479bc63555b00c0a5c4ddc142cd91cb75fde1acb8275b817e469764b474eb7671dab697eaf66ddb08000c2c4daa"}, 0x1010}, {&(0x7f0000008000)={0x27, 0x0, 0x0, 0x1, 0x2, 0x2, "115afdc7dee80366ba922342579cbfeab5a719adb43260ff8a5cf6835186fcb2084dc6bff4af202fe3c63a8b819304c134e947f6e0063c2a6a2045d104c2eb", 0x27}, 0x60, &(0x7f0000008140)=[{&(0x7f0000008080)="93616dd6a68630c47673bde7c413656dff6ef791c73b703c73418ee2fcd939bda93fff8dbf96bf57163e6738e077c1f02a3aa9d2a8549be9bb53ffaa1364eb8e00207f0ee26e19678d6af06f005b12ef36387e4251f8b7b7619df08cb31a9d9eb8abc7db9160d3bf08a0688a3a8819660bff702521de487396dc4c9c5a1feecacf7c72f6d748747f3716c8cbe5a563928d4579b135751b7bbbd4fbe6d86af70dec9af1947a22839bc0a1b9d9f625fb6abad9dcfe7484d22af34ad543", 0xbc}], 0x1, &(0x7f0000008180)={0xe8, 0x110, 0x0, "c7e4dfb1f98b0548c093f36061c2204eaac02de9feff750ba69f3146d2f8b81506488976152b0ab81e691b306541a1a37524d0040a71aa1b99e8240bced1a469ad48d2807e08dbb8c4b8fd4e15a8bf4d25e2b3f77df0c4d12196f48e6a46ebb511a11c350ff6934aef94d7d672a64654729d63fbd129cd05965adea31198d721baa91d7b4e8ec63c576d679c43914f1c4c87ff6e55f0f773124f2bb959acbcb2c6986b0548c90b0a637ce1ae0405817af2d068deaca29924152af96d18edb568aad7d6872d24df03f33c070b008432c91f687e9e"}, 0xe8, 0x4}, {&(0x7f0000008280)={0x27, 0x1, 0x2, 0x2, 0x0, 0x1, "4a95e8e499f0e0f58e2bd1ae30024dc630496225495e4079343704ce17f9ad17bb85c92df52a4d1f63ec3601da9af1feb31c1579cda76eb8ad29b72f8f5065", 0x6}, 0x60, &(0x7f0000008400)=[{&(0x7f0000008300)="eab7d40b23406c14d71ac7c56e6cd2aa024809bfd782d8364904ec77da6e5db48219671a98d7dba8b7a3fb547fd8dcceb678e270bf93e235ff94149e9c9aafe9edce859ba9c0348838e1f03413fdf49760b9050d03109b64dc545eef05d98a9bf5cded4b94c272a4c3f1090a982312a1061b44e9b3d2472aced7dd43f6be7e9457d340b513be3cc2152d455e11d6aa21738def23381fc3908d06f62f0828d18cf034915143f3fc72647e1b703a4b685ab8151cb998ff40a2cc3908a2d7a7742b61d612cbeba5b5d6ae696d52eb6573452d6719159115eec6b7d6a3ba2b6aac2049d2cda9fd94f0c03be2c4", 0xeb}], 0x1, &(0x7f0000008440)={0xe8, 0x0, 0x5, "aa4210e488814ab722ae8a59829b3b8701afbc2456be90a6de433b7f888b9cef02f266a0dd62875962cc346d2397b37f056bd636be0f92170bb430ad3b2e6e63214ef1d3c25c1abe9b08410f581c57958f97eca6aab0ae86c0a67dbb923833e47c40b290139ab4ed104c0a3f20062befb6081855a1268086fa68f5e2e082feedb1f8819a563cf89f70f985474c6fb78616ce19539bdc749dd562902d2ef5fb5f303a8a50dc6a9ccb7872edb2c3a93bab378d1981857a097e33e12b39ace657e9aff9453b6f897fed1cfa6d60398f0e8901ddec44665d1dcd"}, 0xe8}, {&(0x7f0000008540)={0x27, 0x1, 0x1, 0x5, 0xb4, 0x3, "d25ab631e4427e473bd71b34eea9006261106f19173906e09a10efc0d9d2e5d070e548ad054c4cbb788c733ecd4ebbe552283bc4e05697be5d30e42d1a3a53", 0x23}, 0x60, &(0x7f0000008940)=[{&(0x7f00000085c0)="9f3ae18a789b1b98417a094476ca9792759cfe4b2216c5aed6f4dda26bac9034909d5b74509018cd57d80821bfbb4e5249dfdeaec8ed511d411801eee4afeb0e4afb1bd6c959b02496abbcd07b3eb0fd29bc2e4a694bcdad6839790e4cbf4f5eb3c99fbb93b8726b41117d99c010d3a7b8d0ad4c469c6a6ee07480e309cfd7f827f87b1a5b53bc37447921a300bd0088a52342e1d12babc321a953db4b656c6059cb527bdf84421040eb7e363915e500b9846a5841a041c67b97a5a3648c92b4a6fccd018845bf344d557d", 0xcb}, {&(0x7f00000086c0)="8f3151a742ffa203dda821ba10ae54c571c6d2a5bd8b864693b21a5738b22fbdbadb58e2e0d1d419df12689a81016b7e7ab6fac337e8280a6e44c5c392528d06ab2a074a138ccc8980a31a8c322cf200241a2db023fffadf3a1c6c679bbbe5a72b18bf2c8d5e66b630f530df316aeef32871e9fd5fe3199f24102cd42f0da3145d263db85e3d25ba2d7280b06a57d8bd4e081a8151be", 0x96}, {&(0x7f0000008780)="785d16bf3ab4c97ae196e6ad1bfb46488506f6fe8ee6ca4ff4aee3c064545ff10b9560fb7b4bfeb2b87b26e52d13ddee13743c19929d85044cf75ca959afea7f47a09546283ddc929a56542a83b569d51f7addb7f7a927c8a8aaf42fa1e55a21c6418516d9858fc63f9bfee67cfacd802fbdcc4299c41df7c9c05f3143dc8e4843053f87e1c2e1de88068f4880b76842201e7be72b23a2881b0d9160f084939e48afe22d82a4eb922540084e0a42df3b5286440ace29a93b99d307ac749c3ca297dd216ccc3ce2c0fdec138193e4438c3f68b823134859e5f8677b11df86a27a114cc79e8f9bd22043ac3d36a8167ba0a8", 0xf1}, {&(0x7f0000008880)="7c1a32dffc601f43d7d940536fed8af5e022704fc4a418cc74d4a703c86d3ab92be644fd0a7ff25afeac14139f5d0f17be49341d99d48c918952a67c3323964edf2a360cfcb397fdae86c30285be300d94d04d", 0x53}, {&(0x7f0000008900)="26a612a47d98e7811a", 0x9}], 0x5, &(0x7f00000089c0)={0x28, 0x102, 0x1ff, "30f87677077dce80795740753e50c9013ac1681fa85c"}, 0x28, 0x8000}], 0x9, 0x11) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0xffffffff, 0x4, 0x1}) [ 3475.270998] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 3475.301050] batman_adv: batadv0: Removing interface: batadv_slave_0 05:23:27 executing program 0: socketpair(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x8001) [ 3475.331108] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 3475.353429] systemd-journald[18650]: /dev/kmsg buffer overrun, some messages lost. 05:23:27 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x2080000001, 0x32}) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x0, 0x0) r2 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r2, &(0x7f0000000080)={0x18, 0x2, {0x0, @private=0xa010102}}, 0x1e) read$sequencer(r1, 0x0, 0x0) ioctl$DRM_IOCTL_SG_ALLOC(r1, 0xc0106438, &(0x7f0000000000)={0x7fffffff}) [ 3475.382021] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3475.408614] device bridge_slave_1 left promiscuous mode 05:23:27 executing program 0: socketpair(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x8001) 05:23:27 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x2080000001, 0x32}) ioctl$SNDCTL_SYNTH_ID(0xffffffffffffffff, 0xc08c5114, &(0x7f0000000140)={"0f3f8eb512ed1b30674939f684264a0c47e655048019927bd3fbb8e43371", 0x101, 0x2, 0x0, 0x20, 0x3, 0x8001, 0x80000001, 0x0, [0x1e41154f, 0x29c8a26e, 0xbaec, 0x200, 0x7, 0xb0, 0xfffe0000, 0x40000000, 0x27, 0x7ea7, 0x81, 0x69, 0x1f, 0x878, 0x9, 0x3, 0xf3, 0x0, 0x7fffffff]}) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvram\x00', 0xa502, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r1, 0x800c5012, &(0x7f00000000c0)) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000)='l2tp\x00', 0xffffffffffffffff) [ 3475.449534] bridge0: port 2(bridge_slave_1) entered disabled state [ 3475.507975] device bridge_slave_0 left promiscuous mode [ 3475.530875] bridge0: port 1(bridge_slave_0) entered disabled state [ 3475.572049] device veth1_macvtap left promiscuous mode [ 3475.589920] device veth0_macvtap left promiscuous mode [ 3475.612392] device veth1_vlan left promiscuous mode [ 3475.630736] device veth0_vlan left promiscuous mode 05:23:28 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) write$dsp(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDCTL_SEQ_NRMIDIS(0xffffffffffffffff, 0x8004510b, &(0x7f0000000280)) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x80000001, 0x32}) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x0, 0x0) read$sequencer(r1, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000140)={'ip6tnl0\x00', 0x0, 0x29, 0x92, 0x0, 0x3d3, 0x10, @rand_addr=' \x01\x00', @empty, 0x1, 0x8000, 0x4}}) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r1, 0x89f5, &(0x7f0000000240)={'ip6tnl0\x00', &(0x7f00000001c0)={'syztnl1\x00', r2, 0x2f, 0x7, 0x0, 0x400, 0x0, @loopback, @empty, 0x8, 0x8000, 0x9, 0xbd38}}) ioctl$SNDCTL_TMR_SOURCE(r1, 0xc0045406) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(0xffffffffffffffff, 0x7a5, &(0x7f0000000000)={{@any, 0x7}, 0x1, 0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(0xffffffffffffffff, 0x7a4, &(0x7f00000000c0)={{@hyper}, 0x9, 0x3f}) [ 3475.945688] device hsr_slave_1 left promiscuous mode [ 3475.987799] device hsr_slave_0 left promiscuous mode [ 3476.055914] team0 (unregistering): Port device team_slave_1 removed [ 3476.091952] team0 (unregistering): Port device team_slave_0 removed [ 3476.133858] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 3476.173566] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 3476.291456] systemd[1]: Started Journal Service. [ 3476.318432] bond0 (unregistering): Released all slaves [ 3476.880846] syz-executor.5: [ 3476.880849] syz-executor.2: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 3476.892651] page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 3476.922287] syz-executor.5: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 3476.948575] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 3476.953557] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 3476.962682] CPU: 1 PID: 18698 Comm: syz-executor.2 Not tainted 4.14.225-syzkaller #0 [ 3476.970573] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3476.979920] Call Trace: [ 3476.982507] dump_stack+0x1b2/0x281 [ 3476.986123] warn_alloc.cold+0x96/0x1cc [ 3476.990079] ? zone_watermark_ok_safe+0x220/0x220 [ 3476.994926] __alloc_pages_nodemask+0x2127/0x2720 [ 3476.999763] ? _raw_spin_unlock_irq+0x5a/0x80 [ 3477.004256] ? finish_task_switch+0x178/0x610 [ 3477.008743] ? finish_task_switch+0x14d/0x610 [ 3477.013238] ? lock_acquire+0x170/0x3f0 [ 3477.017211] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3477.022053] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 3477.027491] ? __mutex_unlock_slowpath+0x75/0x770 [ 3477.032322] ? alloc_pages_current+0x135/0x260 [ 3477.036896] alloc_pages_current+0x155/0x260 [ 3477.041304] ion_page_pool_alloc+0x118/0x1b0 [ 3477.045706] ion_system_heap_allocate+0x133/0x8c0 [ 3477.050539] ? ion_alloc+0x187/0x810 [ 3477.054246] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 3477.059683] ? ion_system_contig_heap_create+0x130/0x130 [ 3477.065118] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 3477.070128] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 3477.074956] ion_alloc+0x204/0x810 [ 3477.078488] ? ion_dma_buf_release+0x40/0x40 [ 3477.082891] ? __might_fault+0x177/0x1b0 [ 3477.086948] ion_ioctl+0xea/0x1f0 [ 3477.090397] ? ion_query_heaps+0x360/0x360 [ 3477.094612] ? __fget+0x1fe/0x360 [ 3477.098053] ? ion_query_heaps+0x360/0x360 [ 3477.102279] do_vfs_ioctl+0x75a/0xff0 [ 3477.106075] ? ioctl_preallocate+0x1a0/0x1a0 [ 3477.110473] ? lock_downgrade+0x740/0x740 [ 3477.114614] ? __fget+0x225/0x360 [ 3477.118053] ? do_vfs_ioctl+0xff0/0xff0 [ 3477.122012] ? security_file_ioctl+0x83/0xb0 [ 3477.126411] SyS_ioctl+0x7f/0xb0 [ 3477.129765] ? do_vfs_ioctl+0xff0/0xff0 [ 3477.133725] do_syscall_64+0x1d5/0x640 [ 3477.137599] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3477.142766] RIP: 0033:0x465f69 [ 3477.145939] RSP: 002b:00007fb559d50188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3477.153633] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 3477.161011] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 3477.168271] RBP: 00000000004bfa8f R08: 0000000000000000 R09: 0000000000000000 [ 3477.175525] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 3477.182787] R13: 00007ffd8e3fce9f R14: 00007fb559d50300 R15: 0000000000022000 [ 3477.190060] CPU: 0 PID: 18652 Comm: syz-executor.5 Not tainted 4.14.225-syzkaller #0 [ 3477.190753] syz-executor.5 cpuset= [ 3477.197939] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3477.197943] Call Trace: [ 3477.197960] dump_stack+0x1b2/0x281 [ 3477.197973] warn_alloc.cold+0x96/0x1cc [ 3477.197986] ? zone_watermark_ok_safe+0x220/0x220 [ 3477.215597] / [ 3477.217052] __alloc_pages_nodemask+0x2127/0x2720 [ 3477.220988] mems_allowed=0-1 [ 3477.225816] ? _raw_spin_unlock_irq+0x24/0x80 [ 3477.225831] ? lock_acquire+0x170/0x3f0 [ 3477.225844] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3477.225858] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 3477.225869] ? __mutex_unlock_slowpath+0x75/0x770 [ 3477.225883] alloc_pages_current+0x155/0x260 [ 3477.263379] ion_page_pool_alloc+0x118/0x1b0 [ 3477.267778] ion_system_heap_allocate+0x133/0x8c0 [ 3477.272615] ? ion_alloc+0x187/0x810 [ 3477.276324] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 3477.281754] ? ion_system_contig_heap_create+0x130/0x130 [ 3477.287192] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 3477.292205] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 3477.297039] ion_alloc+0x204/0x810 [ 3477.300562] ? ion_dma_buf_release+0x40/0x40 [ 3477.304952] ? __might_fault+0x177/0x1b0 [ 3477.309001] ion_ioctl+0xea/0x1f0 [ 3477.312450] ? ion_query_heaps+0x360/0x360 [ 3477.316674] ? __fget+0x1fe/0x360 [ 3477.320127] ? ion_query_heaps+0x360/0x360 [ 3477.324360] do_vfs_ioctl+0x75a/0xff0 [ 3477.328152] ? ioctl_preallocate+0x1a0/0x1a0 [ 3477.332550] ? lock_downgrade+0x740/0x740 [ 3477.336689] ? __fget+0x225/0x360 [ 3477.340124] ? do_vfs_ioctl+0xff0/0xff0 [ 3477.344076] ? security_file_ioctl+0x83/0xb0 [ 3477.348646] SyS_ioctl+0x7f/0xb0 [ 3477.352005] ? do_vfs_ioctl+0xff0/0xff0 [ 3477.355985] do_syscall_64+0x1d5/0x640 [ 3477.359866] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3477.365036] RIP: 0033:0x465f69 [ 3477.368240] RSP: 002b:00007f747b89a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3477.375937] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 3477.383188] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 3477.390443] RBP: 00000000004bfa8f R08: 0000000000000000 R09: 0000000000000000 [ 3477.397710] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 3477.404962] R13: 00007ffe6eac26ff R14: 00007f747b89a300 R15: 0000000000022000 [ 3477.415679] CPU: 1 PID: 18694 Comm: syz-executor.5 Not tainted 4.14.225-syzkaller #0 [ 3477.423572] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3477.432917] Call Trace: [ 3477.435502] dump_stack+0x1b2/0x281 [ 3477.439128] warn_alloc.cold+0x96/0x1cc [ 3477.443095] ? zone_watermark_ok_safe+0x220/0x220 [ 3477.447949] __alloc_pages_nodemask+0x2127/0x2720 [ 3477.452790] ? lock_acquire+0x170/0x3f0 [ 3477.456763] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3477.461605] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 3477.467052] ? __mutex_unlock_slowpath+0x75/0x770 [ 3477.471892] alloc_pages_current+0x155/0x260 [ 3477.476301] ion_page_pool_alloc+0x118/0x1b0 [ 3477.480704] ion_system_heap_allocate+0x133/0x8c0 [ 3477.485539] ? ion_alloc+0x187/0x810 [ 3477.489246] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 3477.494689] ? ion_system_contig_heap_create+0x130/0x130 [ 3477.500133] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 3477.505143] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 3477.509978] ion_alloc+0x204/0x810 [ 3477.513518] ? ion_dma_buf_release+0x40/0x40 [ 3477.517919] ? __might_fault+0x177/0x1b0 [ 3477.521975] ion_ioctl+0xea/0x1f0 [ 3477.525418] ? ion_query_heaps+0x360/0x360 [ 3477.529646] ? _raw_spin_unlock+0x29/0x40 [ 3477.533783] ? ion_query_heaps+0x360/0x360 [ 3477.538011] do_vfs_ioctl+0x75a/0xff0 [ 3477.541808] ? ioctl_preallocate+0x1a0/0x1a0 [ 3477.546208] ? lock_downgrade+0x740/0x740 [ 3477.550351] ? __fget+0x225/0x360 [ 3477.553797] ? do_vfs_ioctl+0xff0/0xff0 [ 3477.557766] ? security_file_ioctl+0x83/0xb0 [ 3477.562168] SyS_ioctl+0x7f/0xb0 [ 3477.565524] ? do_vfs_ioctl+0xff0/0xff0 [ 3477.569492] do_syscall_64+0x1d5/0x640 [ 3477.573377] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3477.578556] RIP: 0033:0x465f69 [ 3477.581734] RSP: 002b:00007f747b858188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3477.589434] RAX: ffffffffffffffda RBX: 000000000056c0b0 RCX: 0000000000465f69 [ 3477.596695] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 3477.603953] RBP: 00000000004bfa8f R08: 0000000000000000 R09: 0000000000000000 [ 3477.611216] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c0b0 [ 3477.618476] R13: 00007ffe6eac26ff R14: 00007f747b858300 R15: 0000000000022000 [ 3477.632456] Mem-Info: [ 3477.634980] active_anon:16414 inactive_anon:90036 isolated_anon:0 [ 3477.634980] active_file:2096 inactive_file:2650 isolated_file:0 [ 3477.634980] unevictable:0 dirty:9 writeback:0 unstable:0 [ 3477.634980] slab_reclaimable:12481 slab_unreclaimable:118069 [ 3477.634980] mapped:56196 shmem:90891 pagetables:768 bounce:0 [ 3477.634980] free:72907 free_pcp:535 free_cma:0 [ 3477.668999] Node 0 active_anon:63924kB inactive_anon:302732kB active_file:8352kB inactive_file:10560kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:186016kB dirty:56kB writeback:0kB shmem:305824kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 3477.697511] Node 1 active_anon:1772kB inactive_anon:57412kB active_file:8kB inactive_file:368kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:38920kB dirty:0kB writeback:0kB shmem:57740kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3477.724919] Node 0 DMA free:11540kB min:204kB low:252kB high:300kB active_anon:76kB inactive_anon:980kB active_file:56kB inactive_file:4kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3477.820088] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 3477.828050] Node 0 DMA32 free:47064kB min:36200kB low:45248kB high:54296kB active_anon:63848kB inactive_anon:301752kB active_file:6152kB inactive_file:6064kB unevictable:0kB writepending:56kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7168kB pagetables:2740kB bounce:0kB free_pcp:684kB local_pcp:620kB free_cma:0kB [ 3477.924632] lowmem_reserve[]: 0 0 0 0 0 [ 3477.933559] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3477.985926] lowmem_reserve[]: 0 0 0 0 0 [ 3477.989985] Node 1 Normal free:77784kB min:53696kB low:67120kB high:80544kB active_anon:1772kB inactive_anon:57412kB active_file:8kB inactive_file:368kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:480kB pagetables:332kB bounce:0kB free_pcp:312kB local_pcp:32kB free_cma:0kB [ 3478.109656] lowmem_reserve[]: 0 0 0 0 0 [ 3478.113780] Node 0 DMA: 8*4kB (ME) 7*8kB (UME) 8*16kB (ME) 7*32kB (ME) 0*64kB 5*128kB (UME) 3*256kB (UME) 2*512kB (UE) 4*1024kB (UME) 2*2048kB (UM) 0*4096kB = 11064kB [ 3478.140395] Node 0 DMA32: 1100*4kB (ME) 480*8kB (UME) 173*16kB (UM) 229*32kB (UM) 19*64kB (U) 114*128kB (U) 8*256kB (UM) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36192kB [ 3478.159115] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 3478.172536] Node 1 Normal: 2*4kB (UM) 90*8kB (M) 52*16kB (M) 49*32kB (UM) 31*64kB (M) 8*128kB (UM) 5*256kB (UM) 1*512kB (M) 39*1024kB (U) 3*2048kB (U) 0*4096kB = 54008kB [ 3478.191618] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3478.201166] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3478.213358] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3478.224902] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3478.258694] 91017 total pagecache pages [ 3478.262691] 0 pages in swap cache [ 3478.278997] Swap cache stats: add 0, delete 0, find 0/0 [ 3478.284364] Free swap = 0kB [ 3478.295044] IPVS: ftp: loaded support on port[0] = 21 [ 3478.302557] Total swap = 0kB [ 3478.305595] 2097051 pages RAM [ 3478.313074] 0 pages HighMem/MovableOnly [ 3478.319385] 363840 pages reserved [ 3478.322837] 0 pages cma reserved [ 3478.355147] oom_reaper: reaped process 18698 (syz-executor.2), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 3478.435659] systemd-rfkill invoked oom-killer: gfp_mask=0x14000c0(GFP_KERNEL), nodemask=(null), order=0, oom_score_adj=0 [ 3478.461145] systemd-rfkill cpuset=/ mems_allowed=0-1 [ 3478.475191] CPU: 0 PID: 18631 Comm: systemd-rfkill Not tainted 4.14.225-syzkaller #0 [ 3478.483090] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3478.492441] Call Trace: [ 3478.495033] dump_stack+0x1b2/0x281 [ 3478.498657] dump_header+0x178/0x82f [ 3478.502368] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 3478.507465] ? ___ratelimit+0x2cd/0x530 [ 3478.511440] oom_kill_process.cold+0x10/0xb18 [ 3478.515937] out_of_memory+0xe3e/0x1190 [ 3478.519912] ? oom_killer_disable+0x1c0/0x1c0 [ 3478.524397] ? mutex_trylock+0x152/0x1a0 [ 3478.528453] __alloc_pages_nodemask+0x23e1/0x2720 [ 3478.533304] ? mark_held_locks+0xa6/0xf0 [ 3478.537358] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3478.542192] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 3478.547210] ? lock_downgrade+0x740/0x740 [ 3478.551357] alloc_pages_current+0x155/0x260 [ 3478.555756] ? do_raw_spin_unlock+0x164/0x220 [ 3478.560231] __change_page_attr_set_clr+0x322/0x2280 [ 3478.565348] ? slow_virt_to_phys+0x300/0x300 [ 3478.569736] ? mark_held_locks+0xa6/0xf0 [ 3478.573776] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 3478.578860] ? __change_page_attr_set_clr+0x1952/0x2280 [ 3478.584203] ? lock_acquire+0x170/0x3f0 [ 3478.588155] ? lock_downgrade+0x740/0x740 [ 3478.592285] __change_page_attr_set_clr+0x1a45/0x2280 [ 3478.597483] ? slow_virt_to_phys+0x300/0x300 [ 3478.601902] ? __mutex_unlock_slowpath+0x75/0x770 [ 3478.606728] ? wait_for_completion_io+0x10/0x10 [ 3478.611380] ? vm_unmap_aliases+0x3a5/0x460 [ 3478.615684] change_page_attr_set_clr+0x2a2/0xa30 [ 3478.620509] ? __change_page_attr_set_clr+0x2280/0x2280 [ 3478.625855] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 3478.630848] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 3478.635929] set_memory_ro+0x68/0x80 [ 3478.639619] ? _set_memory_wb+0x80/0x80 [ 3478.643573] bpf_int_jit_compile+0x441/0x600 [ 3478.647961] ? do_jit+0x5330/0x5330 [ 3478.651568] ? __bpf_prog_run64+0xb0/0xb0 [ 3478.655696] bpf_prog_select_runtime+0xdf/0x4e0 [ 3478.660345] bpf_migrate_filter+0x242/0x2d0 [ 3478.664646] ? __sk_attach_prog+0x360/0x360 [ 3478.668948] bpf_prepare_filter+0x14c/0x320 [ 3478.673250] __get_filter+0x196/0x240 [ 3478.677032] sk_attach_filter+0x1b/0x140 [ 3478.681074] sock_setsockopt+0x119a/0x1a50 [ 3478.685316] ? sk_wait_data+0x3d0/0x3d0 [ 3478.689271] ? __do_page_fault+0x571/0xad0 [ 3478.693485] ? __fdget+0x167/0x1f0 [ 3478.697006] ? security_socket_setsockopt+0x83/0xb0 [ 3478.702001] SyS_setsockopt+0x1a4/0x1e0 [ 3478.705954] ? SyS_recv+0x40/0x40 [ 3478.709385] ? up_read+0x17/0x30 [ 3478.712730] ? __do_page_fault+0x159/0xad0 [ 3478.716950] ? do_syscall_64+0x4c/0x640 [ 3478.720904] ? SyS_recv+0x40/0x40 [ 3478.724364] do_syscall_64+0x1d5/0x640 [ 3478.728235] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3478.733403] RIP: 0033:0x7f457dbf3eba [ 3478.737090] RSP: 002b:00007fff9cd85958 EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 3478.744776] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 00007f457dbf3eba [ 3478.752025] RDX: 000000000000001a RSI: 0000000000000001 RDI: 0000000000000005 [ 3478.759274] RBP: 00007fff9cd85980 R08: 0000000000000010 R09: 0000000000000015 [ 3478.766521] R10: 00007fff9cd85970 R11: 0000000000000206 R12: 0000000000000006 [ 3478.773769] R13: 00007fff9cd859b8 R14: 0000000000000000 R15: 000055cdd05ad780 [ 3478.783808] syz-executor.2: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 3478.795679] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 3478.802983] CPU: 1 PID: 18698 Comm: syz-executor.2 Not tainted 4.14.225-syzkaller #0 [ 3478.810861] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3478.812083] Mem-Info: [ 3478.820200] Call Trace: [ 3478.820221] dump_stack+0x1b2/0x281 [ 3478.820234] warn_alloc.cold+0x96/0x1cc [ 3478.824853] active_anon:16498 inactive_anon:90036 isolated_anon:0 [ 3478.824853] active_file:42 inactive_file:0 isolated_file:0 [ 3478.824853] unevictable:0 dirty:0 writeback:0 unstable:0 [ 3478.824853] slab_reclaimable:12481 slab_unreclaimable:118161 [ 3478.824853] mapped:52599 shmem:90891 pagetables:768 bounce:0 [ 3478.824853] free:13946 free_pcp:60 free_cma:0 [ 3478.825195] ? zone_watermark_ok_safe+0x220/0x220 [ 3478.828861] Node 0 active_anon:64152kB inactive_anon:302732kB active_file:4kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:171768kB dirty:0kB writeback:0kB shmem:305824kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3478.832800] ? usleep_range+0x130/0x130 [ 3478.865870] Node 1 active_anon:1840kB inactive_anon:57412kB active_file:164kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:38628kB dirty:0kB writeback:0kB shmem:57740kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3478.870664] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 3478.870687] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 3478.870698] ? run_timer_softirq+0x5a0/0x5a0 [ 3478.898359] Node 0 [ 3478.902306] __alloc_pages_nodemask+0x2127/0x2720 [ 3478.929460] DMA free:10968kB min:204kB low:252kB high:300kB active_anon:84kB inactive_anon:980kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3478.934516] ? lock_acquire+0x170/0x3f0 [ 3478.939516] lowmem_reserve[]: [ 3478.943896] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3478.946100] 0 [ 3478.950923] ? ion_page_pool_alloc+0x9e/0x1b0 [ 3478.950942] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 3478.950957] ? alloc_pages_current+0x135/0x260 [ 3478.976707] 2717 [ 3478.980646] alloc_pages_current+0x155/0x260 [ 3478.983719] 2718 [ 3478.988542] ion_page_pool_alloc+0x118/0x1b0 [ 3478.988552] ion_system_heap_allocate+0x133/0x8c0 [ 3478.988562] ? ion_alloc+0x187/0x810 [ 3478.990339] 2718 [ 3478.994827] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 3479.000403] 2718 [ 3479.004960] ? ion_system_contig_heap_create+0x130/0x130 [ 3479.011384] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 3479.011396] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 3479.013431] Node 0 [ 3479.017842] ion_alloc+0x204/0x810 [ 3479.017858] ? ion_dma_buf_release+0x40/0x40 [ 3479.017869] ? __might_fault+0x177/0x1b0 [ 3479.022699] DMA32 free:17868kB min:36200kB low:45248kB high:54296kB active_anon:64068kB inactive_anon:301752kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7168kB pagetables:2740kB bounce:0kB free_pcp:120kB local_pcp:0kB free_cma:0kB [ 3479.026404] ion_ioctl+0xea/0x1f0 [ 3479.026414] ? ion_query_heaps+0x360/0x360 [ 3479.026425] ? __fget+0x1fe/0x360 [ 3479.028469] lowmem_reserve[]: [ 3479.033904] ? ion_query_heaps+0x360/0x360 [ 3479.035937] 0 [ 3479.041369] do_vfs_ioctl+0x75a/0xff0 [ 3479.041381] ? ioctl_preallocate+0x1a0/0x1a0 [ 3479.041389] ? lock_downgrade+0x740/0x740 [ 3479.041401] ? __fget+0x225/0x360 [ 3479.046408] 0 [ 3479.051219] ? do_vfs_ioctl+0xff0/0xff0 [ 3479.053428] 0 [ 3479.056946] ? security_file_ioctl+0x83/0xb0 [ 3479.056956] SyS_ioctl+0x7f/0xb0 [ 3479.056965] ? do_vfs_ioctl+0xff0/0xff0 [ 3479.061379] 0 [ 3479.065422] do_syscall_64+0x1d5/0x640 [ 3479.093430] 0 [ 3479.096869] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3479.096878] RIP: 0033:0x465f69 [ 3479.104518] RSP: 002b:00007fb559d50188 EFLAGS: 00000246 [ 3479.107688] Node 0 [ 3479.111886] ORIG_RAX: 0000000000000010 [ 3479.111894] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 3479.113688] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3479.117459] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 3479.117463] RBP: 00000000004bfa8f R08: 0000000000000000 R09: 0000000000000000 [ 3479.117468] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 3479.117472] R13: 00007ffd8e3fce9f R14: 00007fb559d50300 R15: 0000000000022000 [ 3479.119551] warn_alloc_show_mem: 2 callbacks suppressed [ 3479.119554] Mem-Info: [ 3479.121893] lowmem_reserve[]: [ 3479.126035] active_anon:16498 inactive_anon:90036 isolated_anon:0 [ 3479.126035] active_file:42 inactive_file:0 isolated_file:0 [ 3479.126035] unevictable:0 dirty:0 writeback:0 unstable:0 [ 3479.126035] slab_reclaimable:12481 slab_unreclaimable:118161 [ 3479.126035] mapped:52599 shmem:90891 pagetables:768 bounce:0 [ 3479.126035] free:13946 free_pcp:60 free_cma:0 [ 3479.149793] 0 [ 3479.152423] Node 0 active_anon:64152kB inactive_anon:302732kB active_file:4kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:171768kB dirty:0kB writeback:0kB shmem:305824kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3479.154448] 0 [ 3479.156238] Node 1 active_anon:1840kB inactive_anon:57412kB active_file:164kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:38628kB dirty:0kB writeback:0kB shmem:57740kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3479.179737] 0 [ 3479.185334] Node 0 [ 3479.226518] 0 [ 3479.232108] DMA free:10968kB min:204kB low:252kB high:300kB active_anon:84kB inactive_anon:980kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3479.248677] 0 [ 3479.285137] lowmem_reserve[]: [ 3479.343802] 0 [ 3479.344282] Node 1 [ 3479.346061] 2717 2718 2718 2718 [ 3479.388308] Node 0 DMA32 free:17868kB min:36200kB low:45248kB high:54296kB active_anon:64068kB inactive_anon:301752kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7168kB pagetables:2740kB bounce:0kB free_pcp:120kB local_pcp:120kB free_cma:0kB [ 3479.389102] Normal free:26948kB min:53696kB low:67120kB high:80544kB active_anon:1840kB inactive_anon:57412kB active_file:28kB inactive_file:68kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:480kB pagetables:332kB bounce:0kB free_pcp:120kB local_pcp:0kB free_cma:0kB [ 3479.420659] lowmem_reserve[]: 0 0 0 0 0 [ 3479.453516] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3479.462678] lowmem_reserve[]: [ 3479.483235] lowmem_reserve[]: 0 0 0 0 0 [ 3479.490377] Node 1 Normal free:26948kB min:53696kB low:67120kB high:80544kB active_anon:1840kB inactive_anon:57412kB active_file:128kB inactive_file:68kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:480kB pagetables:332kB bounce:0kB free_pcp:120kB local_pcp:120kB free_cma:0kB [ 3479.498811] 0 [ 3479.523510] lowmem_reserve[]: 0 0 0 0 0 [ 3479.529327] Node 0 DMA: 8*4kB (ME) 7*8kB (UME) 8*16kB (ME) 8*32kB (UME) 0*64kB 4*128kB (ME) 3*256kB (UME) 2*512kB (UE) 4*1024kB (UME) 2*2048kB (UM) 0*4096kB = 10968kB [ 3479.536297] 0 [ 3479.555133] Node 0 DMA32: 1105*4kB (UME) 483*8kB (ME) 127*16kB (UM) 16*32kB (M) 0*64kB 39*128kB (U) 8*256kB (UM) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 17868kB [ 3479.557230] 0 [ 3479.581806] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 3479.584427] 0 [ 3479.604784] Node 1 Normal: 177*4kB (M) 120*8kB (M) 76*16kB (UM) 50*32kB (M) 37*64kB (UM) 9*128kB (UM) 4*256kB (M) 1*512kB (M) 11*1024kB (U) 3*2048kB (U) 0*4096kB = 26948kB [ 3479.607305] 0 [ 3479.632724] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3479.653947] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3479.656277] Node 0 DMA: 8*4kB (ME) 7*8kB (UME) 8*16kB (ME) 8*32kB (UME) 0*64kB 4*128kB (ME) 3*256kB (UME) 2*512kB (UE) 4*1024kB (UME) 2*2048kB (UM) 0*4096kB = 10968kB [ 3479.664647] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3479.691158] Node 0 DMA32: 1105*4kB (UME) 487*8kB (UME) 127*16kB (UM) 16*32kB (M) 0*64kB 39*128kB (U) 8*256kB (UM) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 17900kB [ 3479.697761] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3479.713308] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 3479.723153] 90925 total pagecache pages [ 3479.731024] 0 pages in swap cache [ 3479.734475] Swap cache stats: add 0, delete 0, find 0/0 [ 3479.737571] Node 1 Normal: 177*4kB (M) 120*8kB (M) 76*16kB (UM) 50*32kB (M) 37*64kB (UM) 9*128kB (UM) 4*256kB (M) 1*512kB (M) 11*1024kB (U) 3*2048kB (U) 0*4096kB = 26948kB [ 3479.748637] Free swap = 0kB [ 3479.764730] Total swap = 0kB [ 3479.767454] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3479.771378] 2097051 pages RAM [ 3479.776567] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3479.784888] 0 pages HighMem/MovableOnly [ 3479.802884] 363840 pages reserved [ 3479.803753] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3479.806345] 0 pages cma reserved [ 3479.819523] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3479.857305] 91036 total pagecache pages [ 3479.885988] 0 pages in swap cache [ 3479.908511] Swap cache stats: add 0, delete 0, find 0/0 [ 3479.913916] Free swap = 0kB [ 3479.959280] Total swap = 0kB [ 3479.962362] 2097051 pages RAM [ 3479.965569] 0 pages HighMem/MovableOnly [ 3480.018896] 363840 pages reserved [ 3480.022395] 0 pages cma reserved [ 3480.025765] Out of memory (oom_kill_allocating_task): Kill process 18631 (systemd-rfkill) score 0 or sacrifice child [ 3480.060035] IPVS: ftp: loaded support on port[0] = 21 [ 3480.106803] Bluetooth: hci0 command 0x0409 tx timeout [ 3480.112146] Bluetooth: hci5 command 0x0409 tx timeout [ 3480.119728] Killed process 18631 (systemd-rfkill) total-vm:37800kB, anon-rss:408kB, file-rss:0kB, shmem-rss:0kB [ 3480.152729] oom_reaper: reaped process 18631 (systemd-rfkill), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 3480.218743] syz-executor.3 invoked oom-killer: gfp_mask=0x14002c2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_NOWARN), nodemask=(null), order=0, oom_score_adj=0 [ 3480.259526] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 3480.264675] CPU: 0 PID: 18703 Comm: syz-executor.3 Not tainted 4.14.225-syzkaller #0 [ 3480.272551] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3480.281909] Call Trace: [ 3480.284504] dump_stack+0x1b2/0x281 [ 3480.286380] syz-executor.2: [ 3480.288130] dump_header+0x178/0x82f [ 3480.294922] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 3480.300021] ? ___ratelimit+0x2cd/0x530 [ 3480.302714] page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 3480.303988] oom_kill_process.cold+0x10/0xb18 [ 3480.304005] out_of_memory+0xe3e/0x1190 [ 3480.322303] ? oom_killer_disable+0x1c0/0x1c0 [ 3480.326792] ? mutex_trylock+0x152/0x1a0 [ 3480.330849] __alloc_pages_nodemask+0x23e1/0x2720 [ 3480.333679] (null) [ 3480.335683] ? __lock_acquire+0x5fc/0x3f20 [ 3480.342042] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3480.346877] ? fs_reclaim_release+0xd0/0x110 [ 3480.351279] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 3480.356274] ? __kmalloc_node+0x38/0x70 [ 3480.360315] ? kmem_cache_alloc_node_trace+0x383/0x400 [ 3480.365572] alloc_pages_current+0x155/0x260 [ 3480.369962] __vmalloc_area_node+0x40a/0x680 [ 3480.374359] ? __vmalloc_node_range+0x150/0x150 [ 3480.379003] ? __get_vm_area_node+0x27d/0x340 [ 3480.383479] ? ebt_register_table+0x1dd/0xc50 [ 3480.387953] vmalloc+0xc3/0x150 [ 3480.391212] ebt_register_table+0x1dd/0xc50 [ 3480.395514] ? broute_net_exit+0x40/0x40 [ 3480.399555] ops_init+0xaa/0x3e0 [ 3480.402901] setup_net+0x22f/0x530 [ 3480.406418] ? rtnl_net_dumpid_one+0x240/0x240 [ 3480.410979] ? kmem_cache_alloc+0x35f/0x3c0 [ 3480.415286] copy_net_ns+0x19b/0x440 [ 3480.418979] create_new_namespaces+0x375/0x720 [ 3480.423542] unshare_nsproxy_namespaces+0xa1/0x1d0 [ 3480.428448] SyS_unshare+0x308/0x7f0 [ 3480.432141] ? walk_process_tree+0x2a0/0x2a0 [ 3480.436525] ? task_work_run+0xfd/0x190 [ 3480.440482] ? do_syscall_64+0x4c/0x640 [ 3480.444434] ? walk_process_tree+0x2a0/0x2a0 [ 3480.448821] do_syscall_64+0x1d5/0x640 [ 3480.452693] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3480.457861] RIP: 0033:0x467517 [ 3480.461029] RSP: 002b:00007ffd711223f8 EFLAGS: 00000202 ORIG_RAX: 0000000000000110 [ 3480.468715] RAX: ffffffffffffffda RBX: 000000000056ca68 RCX: 0000000000467517 [ 3480.475962] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000040000000 [ 3480.483211] RBP: 00007ffd71122420 R08: 0000000000000000 R09: 0000000000000000 [ 3480.490459] R10: 0000000000000000 R11: 0000000000000202 R12: 00000000ffffffff [ 3480.497708] R13: 000000000056ca68 R14: 0000000000000000 R15: 0000000000400538 [ 3480.527142] systemd-rfkill: page allocation failure: order:0, mode:0x14000c0(GFP_KERNEL), nodemask=(null) [ 3480.546958] Mem-Info: [ 3480.549443] active_anon:16419 inactive_anon:90038 isolated_anon:0 [ 3480.549443] active_file:45 inactive_file:11 isolated_file:0 [ 3480.549443] unevictable:0 dirty:8 writeback:15 unstable:0 [ 3480.549443] slab_reclaimable:12471 slab_unreclaimable:118556 [ 3480.549443] mapped:52627 shmem:90894 pagetables:765 bounce:0 [ 3480.549443] free:13824 free_pcp:0 free_cma:0 [ 3480.600881] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 3480.606014] CPU: 0 PID: 18698 Comm: syz-executor.2 Not tainted 4.14.225-syzkaller #0 [ 3480.613899] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3480.619233] systemd-rfkill cpuset= [ 3480.623241] Call Trace: [ 3480.623263] dump_stack+0x1b2/0x281 [ 3480.626952] / [ 3480.629497] warn_alloc.cold+0x96/0x1cc [ 3480.629511] ? zone_watermark_ok_safe+0x220/0x220 [ 3480.629536] __alloc_pages_nodemask+0x2127/0x2720 [ 3480.648503] ? _raw_spin_unlock_irq+0x24/0x80 [ 3480.648877] mems_allowed=0-1 [ 3480.652992] ? lock_acquire+0x170/0x3f0 [ 3480.660044] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3480.664879] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 3480.670313] ? __mutex_unlock_slowpath+0x75/0x770 [ 3480.675143] alloc_pages_current+0x155/0x260 [ 3480.679544] ion_page_pool_alloc+0x118/0x1b0 [ 3480.683948] ion_system_heap_allocate+0x133/0x8c0 [ 3480.688792] ? _raw_spin_unlock+0x29/0x40 [ 3480.692930] ? _ion_heap_freelist_drain+0x6e/0x410 [ 3480.697846] ? ion_system_contig_heap_create+0x130/0x130 [ 3480.703290] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 3480.708300] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 3480.713136] ion_alloc+0x27a/0x810 [ 3480.716661] ? ion_dma_buf_release+0x40/0x40 [ 3480.721078] ? __might_fault+0x177/0x1b0 [ 3480.725131] ion_ioctl+0xea/0x1f0 [ 3480.728581] ? ion_query_heaps+0x360/0x360 [ 3480.732802] ? __fget+0x1fe/0x360 [ 3480.736236] ? ion_query_heaps+0x360/0x360 [ 3480.740462] do_vfs_ioctl+0x75a/0xff0 [ 3480.744260] ? ioctl_preallocate+0x1a0/0x1a0 [ 3480.748662] ? lock_downgrade+0x740/0x740 [ 3480.752800] ? __fget+0x225/0x360 [ 3480.756234] ? do_vfs_ioctl+0xff0/0xff0 [ 3480.760197] ? security_file_ioctl+0x83/0xb0 [ 3480.764592] SyS_ioctl+0x7f/0xb0 [ 3480.767943] ? do_vfs_ioctl+0xff0/0xff0 [ 3480.771907] do_syscall_64+0x1d5/0x640 [ 3480.775782] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3480.780959] RIP: 0033:0x465f69 [ 3480.784143] RSP: 002b:00007fb559d50188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3480.791842] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 3480.799097] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 3480.806354] RBP: 00000000004bfa8f R08: 0000000000000000 R09: 0000000000000000 [ 3480.808947] Node 0 active_anon:63684kB inactive_anon:302744kB active_file:32kB inactive_file:40kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:171768kB dirty:24kB writeback:0kB shmem:305844kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3480.813605] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 3480.813613] R13: 00007ffd8e3fce9f R14: 00007fb559d50300 R15: 0000000000022000 [ 3480.856051] CPU: 1 PID: 18631 Comm: systemd-rfkill Not tainted 4.14.225-syzkaller #0 [ 3480.863927] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3480.867118] Mem-Info: [ 3480.873271] Call Trace: [ 3480.875674] active_anon:16398 inactive_anon:90042 isolated_anon:0 [ 3480.875674] active_file:9 inactive_file:23 isolated_file:0 [ 3480.875674] unevictable:0 dirty:0 writeback:0 unstable:0 [ 3480.875674] slab_reclaimable:12471 slab_unreclaimable:118565 [ 3480.875674] mapped:52599 shmem:90899 pagetables:768 bounce:0 [ 3480.875674] free:13912 free_pcp:23 free_cma:0 [ 3480.878236] dump_stack+0x1b2/0x281 [ 3480.878253] warn_alloc.cold+0x96/0x1cc [ 3480.878273] ? zone_watermark_ok_safe+0x220/0x220 [ 3480.911341] Node 1 active_anon:1908kB inactive_anon:57424kB active_file:36kB inactive_file:76kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:38628kB dirty:0kB writeback:0kB shmem:57752kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3480.914908] ? usleep_range+0x130/0x130 [ 3480.918879] Node 0 [ 3480.923680] ? _find_next_bit+0xdb/0x100 [ 3480.950843] Node 0 active_anon:63684kB inactive_anon:302744kB active_file:0kB inactive_file:16kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:171768kB dirty:0kB writeback:0kB shmem:305844kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3480.954757] ? run_timer_softirq+0x5a0/0x5a0 [ 3480.956976] Node 1 active_anon:1908kB inactive_anon:57424kB active_file:36kB inactive_file:76kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:38628kB dirty:0kB writeback:0kB shmem:57752kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3480.961038] __alloc_pages_nodemask+0x2127/0x2720 [ 3480.961059] ? mark_held_locks+0xa6/0xf0 [ 3480.988825] DMA free:10968kB min:204kB low:252kB high:300kB active_anon:84kB inactive_anon:980kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3480.993180] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3481.020400] Node 0 [ 3481.025174] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 3481.029235] DMA free:10968kB min:204kB low:252kB high:300kB active_anon:84kB inactive_anon:980kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3481.054953] ? lock_downgrade+0x740/0x740 [ 3481.054966] alloc_pages_current+0x155/0x260 [ 3481.059804] lowmem_reserve[]: [ 3481.062001] ? do_raw_spin_unlock+0x164/0x220 [ 3481.066987] 0 [ 3481.092728] __change_page_attr_set_clr+0x322/0x2280 [ 3481.092746] ? slow_virt_to_phys+0x300/0x300 [ 3481.092753] ? mark_held_locks+0xa6/0xf0 [ 3481.092764] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 3481.096891] lowmem_reserve[]: [ 3481.101271] ? __change_page_attr_set_clr+0x1952/0x2280 [ 3481.101280] ? lock_acquire+0x170/0x3f0 [ 3481.101290] ? lock_downgrade+0x740/0x740 [ 3481.104369] 0 [ 3481.108867] __change_page_attr_set_clr+0x1a45/0x2280 [ 3481.108886] ? slow_virt_to_phys+0x300/0x300 [ 3481.110661] 2717 [ 3481.115740] ? __mutex_unlock_slowpath+0x75/0x770 [ 3481.115750] ? wait_for_completion_io+0x10/0x10 [ 3481.120155] 2717 [ 3481.124174] ? vm_unmap_aliases+0x3a5/0x460 [ 3481.129266] 2718 [ 3481.132338] change_page_attr_set_clr+0x2a2/0xa30 [ 3481.137696] 2718 [ 3481.141646] ? __change_page_attr_set_clr+0x2280/0x2280 [ 3481.145764] 2718 [ 3481.147555] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 3481.147565] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 3481.152741] 2718 [ 3481.157120] set_memory_ro+0x68/0x80 [ 3481.159210] 2718 [ 3481.164009] ? _set_memory_wb+0x80/0x80 [ 3481.168692] 2718 [ 3481.170702] bpf_int_jit_compile+0x441/0x600 [ 3481.177041] ? do_jit+0x5330/0x5330 [ 3481.183907] ? __bpf_prog_run64+0xb0/0xb0 [ 3481.189265] Node 0 [ 3481.191304] bpf_prog_select_runtime+0xdf/0x4e0 [ 3481.196301] DMA32 free:18028kB min:36200kB low:45248kB high:54296kB active_anon:63600kB inactive_anon:301764kB active_file:0kB inactive_file:16kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7168kB pagetables:2740kB bounce:0kB free_pcp:92kB local_pcp:0kB free_cma:0kB [ 3481.201378] bpf_migrate_filter+0x242/0x2d0 [ 3481.201386] ? __sk_attach_prog+0x360/0x360 [ 3481.201399] bpf_prepare_filter+0x14c/0x320 [ 3481.203440] Node 0 [ 3481.207127] __get_filter+0x196/0x240 [ 3481.209192] DMA32 free:18028kB min:36200kB low:45248kB high:54296kB active_anon:63600kB inactive_anon:301764kB active_file:0kB inactive_file:16kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7168kB pagetables:2740kB bounce:0kB free_pcp:92kB local_pcp:0kB free_cma:0kB [ 3481.213117] sk_attach_filter+0x1b/0x140 [ 3481.215150] lowmem_reserve[]: [ 3481.219538] sock_setsockopt+0x119a/0x1a50 [ 3481.219547] ? sk_wait_data+0x3d0/0x3d0 [ 3481.219559] ? __do_page_fault+0x571/0xad0 [ 3481.219567] ? __fdget+0x167/0x1f0 [ 3481.223175] lowmem_reserve[]: [ 3481.227300] ? security_socket_setsockopt+0x83/0xb0 [ 3481.227311] SyS_setsockopt+0x1a4/0x1e0 [ 3481.227320] ? SyS_recv+0x40/0x40 [ 3481.229533] 0 [ 3481.234181] ? up_read+0x17/0x30 [ 3481.262210] 0 [ 3481.266491] ? __do_page_fault+0x159/0xad0 [ 3481.270799] 0 [ 3481.275084] ? do_syscall_64+0x4c/0x640 [ 3481.277307] 0 [ 3481.281077] ? SyS_recv+0x40/0x40 [ 3481.309087] 0 [ 3481.313108] do_syscall_64+0x1d5/0x640 [ 3481.316184] 0 [ 3481.320404] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3481.320415] RIP: 0033:0x7f457dbf3eba [ 3481.324363] 0 [ 3481.328573] RSP: 002b:00007fff9cd85958 EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 3481.328582] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 00007f457dbf3eba [ 3481.328587] RDX: 000000000000001a RSI: 0000000000000001 RDI: 0000000000000005 [ 3481.328591] RBP: 00007fff9cd85980 R08: 0000000000000010 R09: 0000000000000015 [ 3481.328597] R10: 00007fff9cd85970 R11: 0000000000000206 R12: 0000000000000006 [ 3481.332116] 0 [ 3481.335194] R13: 00007fff9cd859b8 R14: 0000000000000000 R15: 000055cdd05ad780 [ 3481.340203] 0 [ 3481.354777] ------------[ cut here ]------------ [ 3481.375032] 0 [ 3481.375570] WARNING: CPU: 1 PID: 18631 at include/linux/filter.h:628 bpf_int_jit_compile+0x50f/0x600 [ 3481.382508] Kernel panic - not syncing: panic_on_warn set ... [ 3481.382508] [ 3481.386201] Node 0 [ 3481.387985] CPU: 1 PID: 18631 Comm: systemd-rfkill Not tainted 4.14.225-syzkaller #0 [ 3481.387990] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3481.387993] Call Trace: [ 3481.388009] dump_stack+0x1b2/0x281 [ 3481.402940] panic+0x1f9/0x42d [ 3481.402949] ? add_taint.cold+0x16/0x16 [ 3481.402961] ? bpf_int_jit_compile+0x50f/0x600 [ 3481.410235] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3481.417469] ? bpf_int_jit_compile+0x50f/0x600 [ 3481.417477] __warn.cold+0x20/0x44 [ 3481.417486] ? ist_end_non_atomic+0x10/0x10 [ 3481.424738] Node 0 [ 3481.426514] ? bpf_int_jit_compile+0x50f/0x600 [ 3481.433776] lowmem_reserve[]: [ 3481.435544] report_bug+0x208/0x250 [ 3481.440301] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3481.442059] do_error_trap+0x195/0x2d0 [ 3481.451316] 0 [ 3481.458642] ? math_error+0x2d0/0x2d0 [ 3481.458652] ? __change_page_attr_set_clr+0x2280/0x2280 [ 3481.458664] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 3481.460872] 0 [ 3481.468734] invalid_op+0x1b/0x40 [ 3481.468742] RIP: 0010:bpf_int_jit_compile+0x50f/0x600 [ 3481.468748] RSP: 0000:ffff8881c4f2fb38 EFLAGS: 00010297 [ 3481.478096] lowmem_reserve[]: [ 3481.484240] 0 [ 3481.487405] RAX: ffff88802807c380 RBX: ffff88802807c380 RCX: 0000000000000000 [ 3481.487410] RDX: 0000000000000000 RSI: ffff88802807cc08 RDI: 0000000000000001 [ 3481.487414] RBP: 0000000000000098 R08: ffffffff8b9add78 R09: 0000000000000000 [ 3481.487419] R10: 0000000000000000 R11: 0000000000000000 R12: 00007ffffffff000 [ 3481.487422] R13: ffffc9000a165000 R14: ffff888094082b00 R15: ffff8881c4f2fba0 [ 3481.487440] ? bpf_int_jit_compile+0x50f/0x600 [ 3481.491380] 0 [ 3481.495940] ? do_jit+0x5330/0x5330 [ 3481.520847] 0 [ 3481.525388] ? __bpf_prog_run64+0xb0/0xb0 [ 3481.528910] 0 [ 3481.533196] bpf_prog_select_runtime+0xdf/0x4e0 [ 3481.535403] 0 [ 3481.539969] bpf_migrate_filter+0x242/0x2d0 [ 3481.539979] ? __sk_attach_prog+0x360/0x360 [ 3481.546688] bpf_prepare_filter+0x14c/0x320 [ 3481.571591] 0 [ 3481.575438] __get_filter+0x196/0x240 [ 3481.577213] 0 [ 3481.580998] sk_attach_filter+0x1b/0x140 [ 3481.581007] sock_setsockopt+0x119a/0x1a50 [ 3481.581016] ? sk_wait_data+0x3d0/0x3d0 [ 3481.586352] 0 [ 3481.591172] ? __do_page_fault+0x571/0xad0 [ 3481.591180] ? __fdget+0x167/0x1f0 [ 3481.591192] ? security_socket_setsockopt+0x83/0xb0 [ 3481.596402] SyS_setsockopt+0x1a4/0x1e0 [ 3481.601583] Node 1 [ 3481.606904] ? SyS_recv+0x40/0x40 [ 3481.609999] Node 1 [ 3481.611765] ? up_read+0x17/0x30 [ 3481.619042] Normal free:26652kB min:53696kB low:67120kB high:80544kB active_anon:1908kB inactive_anon:57424kB active_file:36kB inactive_file:76kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:512kB pagetables:332kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3481.626266] ? __do_page_fault+0x159/0xad0 [ 3481.633543] Normal free:26652kB min:53696kB low:67120kB high:80544kB active_anon:1908kB inactive_anon:57424kB active_file:36kB inactive_file:76kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:512kB pagetables:332kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3481.640761] ? do_syscall_64+0x4c/0x640 [ 3481.640768] ? SyS_recv+0x40/0x40 [ 3481.640778] do_syscall_64+0x1d5/0x640 [ 3481.648042] lowmem_reserve[]: [ 3481.652595] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3481.654366] 0 [ 3481.657971] RIP: 0033:0x7f457dbf3eba [ 3481.657975] RSP: 002b:00007fff9cd85958 EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 3481.657984] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 00007f457dbf3eba [ 3481.657987] RDX: 000000000000001a RSI: 0000000000000001 RDI: 0000000000000005 [ 3481.657993] RBP: 00007fff9cd85980 R08: 0000000000000010 R09: 0000000000000015 [ 3481.659778] lowmem_reserve[]: [ 3481.663894] R10: 00007fff9cd85970 R11: 0000000000000206 R12: 0000000000000006 [ 3481.663900] R13: 00007fff9cd859b8 R14: 0000000000000000 R15: 000055cdd05ad780 [ 3481.665678] 0 [ 3481.672743] Kernel Offset: disabled [ 3481.872159] Rebooting in 86400 seconds..