Pv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1338.673996] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1338.728745] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1338.738369] warn_alloc_show_mem: 2 callbacks suppressed [ 1338.738373] Mem-Info: [ 1338.761060] active_anon:78753 inactive_anon:16922 isolated_anon:0 [ 1338.761060] active_file:749 inactive_file:2384 isolated_file:0 [ 1338.761060] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1338.761060] slab_reclaimable:14016 slab_unreclaimable:130247 [ 1338.761060] mapped:53750 shmem:17203 pagetables:8852 bounce:0 [ 1338.761060] free:510278 free_pcp:395 free_cma:0 [ 1338.764536] bridge0: port 2(bridge_slave_1) entered blocking state [ 1338.801220] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1338.813887] Node 0 active_anon:297512kB inactive_anon:51768kB active_file:2996kB inactive_file:9532kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:215000kB dirty:0kB writeback:0kB shmem:52756kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 239616kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1338.860454] Node 1 active_anon:17500kB inactive_anon:15920kB active_file:0kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:16056kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1338.934309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1338.968218] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 1338.988116] Node 0 DMA free:11496kB min:204kB low:252kB high:300kB active_anon:2100kB inactive_anon:8kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:56kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1339.016592] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1339.033265] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 1339.051333] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1339.062553] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1339.088923] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 1339.104610] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1339.113760] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1339.125901] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1339.127008] Node 0 DMA32 free:72600kB min:36200kB low:45248kB high:54296kB active_anon:295368kB inactive_anon:51760kB active_file:3152kB inactive_file:9520kB unevictable:0kB writepending:96kB present:3129332kB managed:2788136kB mlocked:0kB kernel_stack:12288kB pagetables:16604kB bounce:0kB free_pcp:1368kB local_pcp:724kB free_cma:0kB [ 1339.153776] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1339.290539] lowmem_reserve[]: 0 0 0 0 0 [ 1339.300976] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 1339.307215] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1339.320467] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1339.349159] lowmem_reserve[]: 0 0 0 0 0 [ 1339.376536] Node 1 Normal free:1091644kB min:53696kB low:67120kB high:80544kB active_anon:17460kB inactive_anon:15920kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:4kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:6208kB pagetables:18796kB bounce:0kB free_pcp:1308kB local_pcp:688kB free_cma:0kB [ 1339.389946] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1339.467644] lowmem_reserve[]: 0 0 0 0 0 [ 1339.482076] Node 0 DMA: 45*4kB (UME) 60*8kB (UME) 51*16kB (UME) 18*32kB (UME) 4*64kB (UME) 3*128kB (UM) 3*256kB (UE) 3*512kB (UME) 2*1024kB (ME) 2*2048kB (ME) 0*4096kB = 11140kB [ 1339.501321] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 1339.517468] Node 0 DMA32: 3189*4kB (UME) 9857*8kB (UE) 3680*16kB (UME) 891*32kB (UE) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB [ 1339.520969] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1339.535186] = 179004kB [ 1339.551918] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1339.586737] Node 1 Normal: 5847*4kB (UME) 4991*8kB (UME) 2157*16kB (UME) 2324*32kB (UM) 39*64kB (UME) 775*128kB (U) 1385*256kB (U) 125*512kB (U) 5*1024kB (U) 1*2048kB (U) 0*4096kB = 699620kB [ 1339.597891] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1339.636051] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1339.661526] Node 0 hugepages_total=1 hugepages_free=1 hugepages_surp=1 hugepages_size=2048kB [ 1339.671509] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 1339.677521] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1339.697718] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1339.715468] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1339.748361] 20372 total pagecache pages [ 1339.757040] 0 pages in swap cache [ 1339.764197] Swap cache stats: add 0, delete 0, find 0/0 [ 1339.770837] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 1339.792952] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 1339.794847] Free swap = 0kB [ 1339.799173] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1339.813781] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1339.819319] Total swap = 0kB [ 1339.836032] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1339.844160] syz-executor.3: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1339.857027] 2097051 pages RAM [ 1339.860539] 0 pages HighMem/MovableOnly [ 1339.861453] syz-executor.2: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1339.864718] 363846 pages reserved [ 1339.879998] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 1339.884814] syz-executor.1: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1339.885296] CPU: 1 PID: 612 Comm: syz-executor.3 Not tainted 4.14.228-syzkaller #0 [ 1339.904608] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1339.913954] Call Trace: [ 1339.915890] syz-executor.2 cpuset= [ 1339.916801] dump_stack+0x1b2/0x281 [ 1339.916818] warn_alloc.cold+0x96/0x1cc [ 1339.920340] / [ 1339.923956] ? zone_watermark_ok_safe+0x220/0x220 [ 1339.932090] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 1339.934453] __alloc_pages_nodemask+0x2127/0x2720 [ 1339.944357] ? __schedule+0x893/0x1de0 [ 1339.948242] ? lock_acquire+0x170/0x3f0 [ 1339.952215] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1339.952698] mems_allowed=0-1 [ 1339.957076] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1339.965613] ? __mutex_unlock_slowpath+0x75/0x770 [ 1339.970463] alloc_pages_current+0x155/0x260 [ 1339.974863] ion_page_pool_alloc+0x118/0x1b0 [ 1339.979262] ion_system_heap_allocate+0x133/0x8c0 [ 1339.984102] ? ion_alloc+0x187/0x810 [ 1339.987812] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1339.993259] ? ion_system_contig_heap_create+0x130/0x130 [ 1339.998700] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1340.003710] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1340.008542] ion_alloc+0x204/0x810 [ 1340.012079] ? ion_dma_buf_release+0x40/0x40 [ 1340.016487] ? __might_fault+0x177/0x1b0 [ 1340.020551] ion_ioctl+0xea/0x1f0 [ 1340.024020] ? ion_query_heaps+0x360/0x360 [ 1340.028248] ? __tun_chr_ioctl.isra.0+0x3310/0x3310 [ 1340.033257] ? ion_query_heaps+0x360/0x360 [ 1340.037482] do_vfs_ioctl+0x75a/0xff0 [ 1340.041278] ? ioctl_preallocate+0x1a0/0x1a0 [ 1340.045677] ? lock_downgrade+0x740/0x740 [ 1340.049816] ? __fget+0x225/0x360 [ 1340.053262] ? do_vfs_ioctl+0xff0/0xff0 [ 1340.057228] ? security_file_ioctl+0x83/0xb0 [ 1340.061628] SyS_ioctl+0x7f/0xb0 [ 1340.064990] ? do_vfs_ioctl+0xff0/0xff0 [ 1340.068955] do_syscall_64+0x1d5/0x640 [ 1340.072837] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1340.078024] RIP: 0033:0x466459 [ 1340.081204] RSP: 002b:00007f6ba9340188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1340.088903] RAX: ffffffffffffffda RBX: 000000000056c008 RCX: 0000000000466459 [ 1340.096162] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1340.103436] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1340.110695] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c008 [ 1340.117956] R13: 00007ffd9352709f R14: 00007f6ba9340300 R15: 0000000000022000 [ 1340.125235] CPU: 0 PID: 606 Comm: syz-executor.2 Not tainted 4.14.228-syzkaller #0 [ 1340.131893] 0 pages cma reserved [ 1340.132944] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1340.132948] Call Trace: [ 1340.132967] dump_stack+0x1b2/0x281 [ 1340.132981] warn_alloc.cold+0x96/0x1cc [ 1340.155853] ? zone_watermark_ok_safe+0x220/0x220 [ 1340.160710] __alloc_pages_nodemask+0x2127/0x2720 [ 1340.161401] systemd[1]: systemd-journald.service: Failed with result 'signal'. [ 1340.165553] ? lock_acquire+0x170/0x3f0 [ 1340.165573] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1340.181727] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1340.187181] ? __mutex_unlock_slowpath+0x75/0x770 [ 1340.190071] systemd[1]: systemd-journald.service: Service has no hold-off time, scheduling restart. [ 1340.192026] alloc_pages_current+0x155/0x260 [ 1340.192041] ion_page_pool_alloc+0x118/0x1b0 [ 1340.192062] ion_system_heap_allocate+0x133/0x8c0 [ 1340.210308] Mem-Info: [ 1340.214871] ? ion_alloc+0x187/0x810 [ 1340.214883] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1340.214893] ? ion_system_contig_heap_create+0x130/0x130 [ 1340.214903] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1340.214914] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1340.214924] ion_alloc+0x204/0x810 [ 1340.214937] ? ion_dma_buf_release+0x40/0x40 20:21:14 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r1, 0x800454cf, &(0x7f0000000240)) ioctl$TUNSETSNDBUF(r1, 0x400454d4, &(0x7f0000000040)=0x1000) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r2, 0x800454cf, &(0x7f0000000240)) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000080)={'lo\x00', @broadcast}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000180)={0x80000000, 0xa}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x1) ioctl$TUNGETFEATURES(r3, 0x800454cf, &(0x7f0000000240)) [ 1340.214949] ? __might_fault+0x177/0x1b0 [ 1340.214960] ion_ioctl+0xea/0x1f0 [ 1340.214972] ? ion_query_heaps+0x360/0x360 [ 1340.218262] systemd[1]: Stopped Journal Service. [ 1340.221078] ? __tun_chr_ioctl.isra.0+0x3310/0x3310 [ 1340.221087] ? ion_query_heaps+0x360/0x360 [ 1340.221098] do_vfs_ioctl+0x75a/0xff0 [ 1340.221109] ? ioctl_preallocate+0x1a0/0x1a0 [ 1340.221118] ? lock_downgrade+0x740/0x740 [ 1340.221132] ? __fget+0x225/0x360 [ 1340.221148] ? do_vfs_ioctl+0xff0/0xff0 [ 1340.221160] ? security_file_ioctl+0x83/0xb0 [ 1340.221170] SyS_ioctl+0x7f/0xb0 [ 1340.227202] active_anon:78758 inactive_anon:16922 isolated_anon:0 [ 1340.227202] active_file:975 inactive_file:2391 isolated_file:0 [ 1340.227202] unevictable:0 dirty:25 writeback:0 unstable:0 [ 1340.227202] slab_reclaimable:13989 slab_unreclaimable:129844 [ 1340.227202] mapped:54290 shmem:17203 pagetables:8836 bounce:0 [ 1340.227202] free:109745 free_pcp:144 free_cma:0 [ 1340.232051] ? do_vfs_ioctl+0xff0/0xff0 [ 1340.232064] do_syscall_64+0x1d5/0x640 [ 1340.232079] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1340.232087] RIP: 0033:0x466459 [ 1340.232091] RSP: 002b:00007f79418d2188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1340.232101] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1340.232106] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1340.232111] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1340.232117] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1340.232122] R13: 00007ffef88b512f R14: 00007f79418d2300 R15: 0000000000022000 [ 1340.255814] CPU: 0 PID: 344 Comm: syz-executor.1 Not tainted 4.14.228-syzkaller #0 [ 1340.270946] systemd[1]: Starting Journal Service... [ 1340.271857] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1340.291884] Node 0 active_anon:297772kB inactive_anon:51768kB active_file:4100kB inactive_file:9860kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:217060kB dirty:96kB writeback:0kB shmem:52756kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 243712kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1340.295773] Call Trace: [ 1340.295792] dump_stack+0x1b2/0x281 [ 1340.295806] warn_alloc.cold+0x96/0x1cc [ 1340.295818] ? zone_watermark_ok_safe+0x220/0x220 [ 1340.295842] __alloc_pages_nodemask+0x2127/0x2720 [ 1340.295860] ? lock_acquire+0x170/0x3f0 [ 1340.295875] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1340.300852] Node 1 active_anon:17460kB inactive_anon:15920kB active_file:0kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:16056kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1340.303642] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1340.303656] ? __mutex_unlock_slowpath+0x75/0x770 [ 1340.303671] alloc_pages_current+0x155/0x260 [ 1340.303684] ion_page_pool_alloc+0x118/0x1b0 [ 1340.303694] ion_system_heap_allocate+0x133/0x8c0 [ 1340.303705] ? _raw_spin_unlock+0x29/0x40 [ 1340.303715] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1340.303741] ? ion_system_contig_heap_create+0x130/0x130 [ 1340.338249] Node 0 [ 1340.341452] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1340.341466] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1340.341479] ion_alloc+0x27a/0x810 [ 1340.341491] ? ion_dma_buf_release+0x40/0x40 [ 1340.341502] ? __might_fault+0x177/0x1b0 [ 1340.341514] ion_ioctl+0xea/0x1f0 [ 1340.341522] ? ion_query_heaps+0x360/0x360 [ 1340.341535] ? __tun_chr_ioctl.isra.0+0x3310/0x3310 [ 1340.341542] ? ion_query_heaps+0x360/0x360 [ 1340.341552] do_vfs_ioctl+0x75a/0xff0 [ 1340.341563] ? ioctl_preallocate+0x1a0/0x1a0 [ 1340.341575] ? lock_downgrade+0x740/0x740 [ 1340.345912] DMA free:11012kB min:204kB low:252kB high:300kB active_anon:2100kB inactive_anon:8kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:56kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1340.350620] ? __fget+0x225/0x360 [ 1340.350630] ? do_vfs_ioctl+0xff0/0xff0 [ 1340.350642] ? security_file_ioctl+0x83/0xb0 [ 1340.350653] SyS_ioctl+0x7f/0xb0 [ 1340.350663] ? do_vfs_ioctl+0xff0/0xff0 [ 1340.353918] lowmem_reserve[]: [ 1340.361531] do_syscall_64+0x1d5/0x640 [ 1340.361548] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1340.361555] RIP: 0033:0x466459 [ 1340.361561] RSP: 002b:00007fdd4fdf9188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1340.368909] 0 [ 1340.376073] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1340.376078] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1340.376084] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1340.376089] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1340.376095] R13: 00007ffc5b7c415f R14: 00007fdd4fdf9300 R15: 0000000000022000 [ 1340.579733] systemd[1]: Starting Load/Save RF Kill Switch Status... [ 1340.581411] 2717 [ 1340.823981] systemd[1]: Started Load/Save RF Kill Switch Status. [ 1340.867277] systemd-journald[618]: File /run/log/journal/04d8c135ee6b410280ba31a58c89679d/system.journal corrupted or uncleanly shut down, renaming and replacing. [ 1340.924540] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 1340.971618] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 1340.987378] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1341.000061] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1341.050037] 2718 2718 2718 [ 1341.069257] Node 0 DMA32 free:61144kB min:36200kB low:45248kB high:54296kB active_anon:296480kB inactive_anon:59888kB active_file:6968kB inactive_file:7020kB unevictable:0kB writepending:104kB present:3129332kB managed:2788136kB mlocked:0kB kernel_stack:12352kB pagetables:16924kB bounce:0kB free_pcp:268kB local_pcp:208kB free_cma:0kB [ 1341.196782] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 1341.227576] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 1341.243240] lowmem_reserve[]: 0 0 0 0 0 [ 1341.261844] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1341.290625] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 1341.307858] syz-executor.0: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1341.320873] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 1341.337023] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1341.345948] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1341.356257] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 1341.368038] CPU: 1 PID: 626 Comm: syz-executor.0 Not tainted 4.14.228-syzkaller #0 [ 1341.375753] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1341.385100] Call Trace: [ 1341.387694] dump_stack+0x1b2/0x281 [ 1341.391322] warn_alloc.cold+0x96/0x1cc [ 1341.395295] ? zone_watermark_ok_safe+0x220/0x220 [ 1341.400157] __alloc_pages_nodemask+0x2127/0x2720 [ 1341.405035] ? lock_acquire+0x170/0x3f0 [ 1341.409016] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1341.413868] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1341.419323] ? __mutex_unlock_slowpath+0x75/0x770 [ 1341.424165] ? retint_kernel+0x2d/0x2d [ 1341.428075] alloc_pages_current+0x155/0x260 [ 1341.432487] ion_page_pool_alloc+0x118/0x1b0 [ 1341.436894] ion_system_heap_allocate+0x133/0x8c0 [ 1341.441734] ? ion_alloc+0x187/0x810 [ 1341.445444] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1341.450898] ? ion_system_contig_heap_create+0x130/0x130 [ 1341.456344] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1341.461360] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1341.466205] ion_alloc+0x204/0x810 [ 1341.469743] ? ion_dma_buf_release+0x40/0x40 [ 1341.474143] ? __might_fault+0x177/0x1b0 [ 1341.478209] ion_ioctl+0xea/0x1f0 [ 1341.481655] ? ion_query_heaps+0x360/0x360 [ 1341.485897] ? _raw_spin_unlock+0x29/0x40 [ 1341.490045] ? ion_query_heaps+0x360/0x360 [ 1341.494273] do_vfs_ioctl+0x75a/0xff0 [ 1341.498067] ? ioctl_preallocate+0x1a0/0x1a0 [ 1341.502464] ? lock_downgrade+0x740/0x740 [ 1341.506603] ? __fget+0x225/0x360 [ 1341.510043] ? do_vfs_ioctl+0xff0/0xff0 [ 1341.514010] ? security_file_ioctl+0x83/0xb0 [ 1341.518419] SyS_ioctl+0x7f/0xb0 [ 1341.521774] ? do_vfs_ioctl+0xff0/0xff0 [ 1341.525737] do_syscall_64+0x1d5/0x640 [ 1341.529617] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1341.534795] RIP: 0033:0x466459 [ 1341.537973] RSP: 002b:00007fb4b9e26188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1341.545668] RAX: ffffffffffffffda RBX: 000000000056c0b0 RCX: 0000000000466459 [ 1341.552925] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1341.560180] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1341.567448] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c0b0 [ 1341.574707] R13: 00007fffe82eec4f R14: 00007fb4b9e26300 R15: 0000000000022000 [ 1341.588786] device veth0_vlan entered promiscuous mode [ 1341.596053] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1341.604185] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1341.617335] lowmem_reserve[]: 0 0 0 0 0 [ 1341.631630] Node 1 Normal free:53676kB min:53696kB low:67120kB high:80544kB active_anon:17336kB inactive_anon:15872kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:4kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:6176kB pagetables:18692kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1341.670596] syz-executor.4 invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=0, oom_score_adj=0 [ 1341.695029] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 1341.721416] CPU: 1 PID: 32675 Comm: syz-executor.4 Not tainted 4.14.228-syzkaller #0 [ 1341.729314] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1341.738660] Call Trace: [ 1341.741253] dump_stack+0x1b2/0x281 [ 1341.744872] dump_header+0x178/0x82f [ 1341.748571] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1341.753661] ? ___ratelimit+0x2cd/0x530 [ 1341.757624] oom_kill_process.cold+0x10/0xb18 [ 1341.762127] out_of_memory+0xe3e/0x1190 [ 1341.766104] ? oom_killer_disable+0x1c0/0x1c0 [ 1341.770583] ? mutex_trylock+0x152/0x1a0 [ 1341.774635] __alloc_pages_nodemask+0x23e1/0x2720 [ 1341.779488] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1341.784333] ? cache_grow_begin+0x41/0x630 [ 1341.788558] cache_grow_begin+0x91/0x630 [ 1341.792618] ? cache_grow_begin+0x91/0x630 [ 1341.796838] fallback_alloc+0x207/0x2c0 [ 1341.800803] kmem_cache_alloc+0x1e5/0x3c0 [ 1341.804943] sk_prot_alloc+0x5f/0x290 [ 1341.808731] sk_alloc+0x36/0xcd0 [ 1341.812091] unix_create1+0x78/0x4f0 [ 1341.815808] unix_create+0xdd/0x1c0 [ 1341.819425] __sock_create+0x303/0x620 [ 1341.823320] SyS_socket+0xd1/0x1b0 [ 1341.826846] ? move_addr_to_kernel+0x60/0x60 [ 1341.831241] ? do_syscall_64+0x4c/0x640 [ 1341.835200] ? move_addr_to_kernel+0x60/0x60 [ 1341.839598] do_syscall_64+0x1d5/0x640 [ 1341.843477] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1341.848653] RIP: 0033:0x467ac7 [ 1341.851827] RSP: 002b:00007ffff30a1278 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 1341.859523] RAX: ffffffffffffffda RBX: 0000000000000010 RCX: 0000000000467ac7 [ 1341.866775] RDX: 0000000000000000 RSI: 0000000000080002 RDI: 0000000000000001 [ 1341.874038] RBP: 00000000004bf56a R08: 000000000000000a R09: 00007ffff30a1312 [ 1341.881293] R10: 0000000000000017 R11: 0000000000000246 R12: 00007ffff30a12e0 [ 1341.888558] R13: 0000000000000003 R14: 00007ffff30a1360 R15: 0000000000000032 [ 1341.938120] warn_alloc_show_mem: 2 callbacks suppressed [ 1341.938124] Mem-Info: [ 1341.945765] lowmem_reserve[]: 0 0 0 0 0 [ 1341.956958] active_anon:78953 inactive_anon:18941 isolated_anon:24 [ 1341.956958] active_file:787 inactive_file:802 isolated_file:5 [ 1341.956958] unevictable:0 dirty:29 writeback:0 unstable:0 [ 1341.956958] slab_reclaimable:13989 slab_unreclaimable:129348 [ 1341.956958] mapped:45376 shmem:19247 pagetables:8888 bounce:0 [ 1341.956958] free:16049 free_pcp:75 free_cma:0 [ 1342.010661] Node 0 DMA: 24*4kB (UME) 61*8kB (UME) 52*16kB (UME) 18*32kB (UME) 4*64kB (UME) 2*128kB (UM) 3*256kB (UE) 3*512kB (UME) 2*1024kB (ME) 2*2048kB (ME) 0*4096kB = 10952kB [ 1342.046675] Node 0 active_anon:298476kB inactive_anon:59892kB active_file:2708kB inactive_file:2664kB unevictable:0kB isolated(anon):0kB isolated(file):20kB mapped:180504kB dirty:112kB writeback:0kB shmem:60936kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 243712kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1342.058090] Node 0 DMA32: 1814*4kB (UME) 319*8kB (UME) 89*16kB (UME) 227*32kB (UME) 2*64kB (M) 2*128kB (M) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18880kB [ 1342.116715] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1342.127509] Node 1 active_anon:17420kB inactive_anon:15916kB active_file:0kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:16052kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1342.127516] Node 0 [ 1342.154296] Node 1 Normal: 35*4kB (UM) 9*8kB (UM) 9*16kB (UM) 830*32kB (UM) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 26916kB [ 1342.154364] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1342.154370] Node 0 hugepages_total=1 hugepages_free=1 hugepages_surp=1 hugepages_size=2048kB [ 1342.154376] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1342.154383] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1342.154387] 19855 total pagecache pages [ 1342.154396] 0 pages in swap cache [ 1342.228005] Swap cache stats: add 0, delete 0, find 0/0 [ 1342.236695] DMA free:10952kB min:204kB low:252kB high:300kB active_anon:2100kB inactive_anon:8kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:56kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1342.239268] Free swap = 0kB [ 1342.265740] Total swap = 0kB [ 1342.268760] 2097051 pages RAM [ 1342.275920] 0 pages HighMem/MovableOnly [ 1342.281889] 363846 pages reserved [ 1342.285637] 0 pages cma reserved [ 1342.295606] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1342.300872] Mem-Info: [ 1342.303642] active_anon:78974 inactive_anon:18952 isolated_anon:0 [ 1342.303642] active_file:38 inactive_file:44 isolated_file:20 [ 1342.303642] unevictable:0 dirty:30 writeback:0 unstable:0 [ 1342.303642] slab_reclaimable:13989 slab_unreclaimable:129170 [ 1342.303642] mapped:43916 shmem:19247 pagetables:8888 bounce:0 [ 1342.303642] free:14400 free_pcp:126 free_cma:0 [ 1342.306320] Node 0 [ 1342.346062] Node 0 active_anon:298476kB inactive_anon:59892kB active_file:152kB inactive_file:100kB unevictable:0kB isolated(anon):0kB isolated(file):80kB mapped:175464kB dirty:116kB writeback:0kB shmem:60936kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 243712kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1342.376550] DMA32 free:17896kB min:36200kB low:45248kB high:54296kB active_anon:296376kB inactive_anon:59884kB active_file:284kB inactive_file:324kB unevictable:0kB writepending:116kB present:3129332kB managed:2788136kB mlocked:0kB kernel_stack:12128kB pagetables:16804kB bounce:0kB free_pcp:504kB local_pcp:668kB free_cma:0kB [ 1342.376553] lowmem_reserve[]: 0 0 0 0 0 [ 1342.376573] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1342.376593] lowmem_reserve[]: 0 0 0 0 0 [ 1342.376614] Node 1 Normal free:26788kB min:53696kB low:67120kB high:80544kB active_anon:17420kB inactive_anon:15916kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:4kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:6176kB pagetables:18692kB bounce:0kB free_pcp:120kB local_pcp:0kB free_cma:0kB [ 1342.376635] lowmem_reserve[]: 0 0 0 0 0 [ 1342.376654] Node 0 DMA: 24*4kB (UME) 61*8kB (UME) 52*16kB (UME) 18*32kB (UME) 4*64kB (UME) 2*128kB (UM) 3*256kB (UE) 3*512kB (UME) 2*1024kB (ME) 2*2048kB (ME) 0*4096kB = 10952kB [ 1342.376737] Node 0 DMA32: 2294*4kB (UME) 327*8kB (UME) 92*16kB (UME) 131*32kB (UME) 1*64kB (M) 3*128kB (M) [ 1342.412098] Node 1 active_anon:17420kB inactive_anon:15916kB active_file:0kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:16052kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1342.490303] 1*256kB [ 1342.502466] Node 0 DMA free:10952kB min:204kB low:252kB high:300kB active_anon:2100kB inactive_anon:8kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:56kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1342.548473] (M) [ 1342.554366] lowmem_reserve[]: [ 1342.554541] 0*512kB [ 1342.556345] 0 [ 1342.559438] 0*1024kB [ 1342.561781] 2717 2718 2718 2718 [ 1342.561798] Node 0 DMA32 free:17776kB min:36200kB low:45248kB high:54296kB active_anon:296376kB inactive_anon:59884kB active_file:284kB inactive_file:324kB unevictable:0kB writepending:116kB present:3129332kB managed:2788136kB mlocked:0kB kernel_stack:12128kB pagetables:16804kB bounce:0kB free_pcp:140kB local_pcp:120kB free_cma:0kB [ 1342.561821] lowmem_reserve[]: [ 1342.567614] 0*2048kB [ 1342.569559] 0 [ 1342.603877] 0*4096kB [ 1342.604985] 0 [ 1342.606744] = 18160kB [ 1342.609132] 0 [ 1342.611917] Node 0 [ 1342.613886] 0 [ 1342.615247] Normal: [ 1342.618779] 0 [ 1342.623966] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1342.631229] 0*4kB [ 1342.651291] lowmem_reserve[]: 0 0 0 0 0 [ 1342.657503] Node 1 Normal free:26880kB min:53696kB low:67120kB high:80544kB active_anon:17420kB inactive_anon:15916kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:4kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:6176kB pagetables:18692kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1342.667796] 0*8kB [ 1342.686170] lowmem_reserve[]: 0 0 0 0 0 [ 1342.686191] Node 0 DMA: 24*4kB (UME) 61*8kB (UME) 52*16kB (UME) 18*32kB (UME) 4*64kB (UME) 2*128kB (UM) 3*256kB (UE) 3*512kB (UME) 2*1024kB (ME) 2*2048kB (ME) 0*4096kB = 10952kB [ 1342.694004] 0*16kB [ 1342.709439] Node 0 [ 1342.710047] 0*32kB [ 1342.711694] DMA32: 2422*4kB (ME) 328*8kB (ME) 89*16kB (ME) 118*32kB (UME) 1*64kB (M) 2*128kB (M) 0*256kB 1*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 18344kB [ 1342.717075] 0*64kB [ 1342.730186] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1342.742472] 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1342.745101] Node 1 Normal: 34*4kB (M) 9*8kB (UM) 8*16kB (M) 830*32kB (UM) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 26896kB [ 1342.763399] Node 1 Normal: 34*4kB (M) 9*8kB (UM) 8*16kB (M) 830*32kB (UM) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB [ 1342.765088] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1342.765096] Node 0 hugepages_total=1 hugepages_free=1 hugepages_surp=1 hugepages_size=2048kB [ 1342.778131] 0*2048kB [ 1342.785198] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1342.797045] 0*4096kB [ 1342.805998] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1342.817814] 19305 total pagecache pages [ 1342.820593] = 26896kB [ 1342.821883] 0 pages in swap cache [ 1342.826164] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1342.826173] Node 0 hugepages_total=1 hugepages_free=1 hugepages_surp=1 hugepages_size=2048kB [ 1342.829606] Swap cache stats: add 0, delete 0, find 0/0 [ 1342.855899] Free swap = 0kB [ 1342.858917] Total swap = 0kB [ 1342.861975] 2097051 pages RAM [ 1342.862858] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1342.865074] 0 pages HighMem/MovableOnly [ 1342.865082] 363846 pages reserved [ 1342.882011] 0 pages cma reserved [ 1342.885395] Out of memory (oom_kill_allocating_task): Kill process 32675 (syz-executor.4) score 0 or sacrifice child [ 1342.885407] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1342.896123] Killed process 32675 (syz-executor.4) total-vm:93120kB, anon-rss:76kB, file-rss:32556kB, shmem-rss:0kB [ 1342.908421] 19305 total pagecache pages [ 1342.937901] oom_reaper: reaped process 32675 (syz-executor.4), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1342.951788] 0 pages in swap cache [ 1342.955250] Swap cache stats: add 0, delete 0, find 0/0 [ 1342.972553] Free swap = 0kB [ 1342.975615] Total swap = 0kB [ 1342.978626] 2097051 pages RAM [ 1342.981770] 0 pages HighMem/MovableOnly [ 1342.983032] syz-executor.3 invoked oom-killer: gfp_mask=0x14200ca(GFP_HIGHUSER_MOVABLE), nodemask= [ 1342.985841] 363846 pages reserved [ 1342.985845] 0 pages cma reserved [ 1343.012344] (null), order=0, oom_score_adj=0 [ 1343.016914] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 1343.028226] CPU: 0 PID: 7997 Comm: syz-executor.3 Not tainted 4.14.228-syzkaller #0 [ 1343.036033] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1343.045382] Call Trace: [ 1343.047966] dump_stack+0x1b2/0x281 [ 1343.051599] dump_header+0x178/0x82f [ 1343.055304] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1343.060393] ? ___ratelimit+0x2cd/0x530 [ 1343.064356] oom_kill_process.cold+0x10/0xb18 [ 1343.068849] out_of_memory+0xe3e/0x1190 [ 1343.072816] ? oom_killer_disable+0x1c0/0x1c0 [ 1343.077301] ? mutex_trylock+0x152/0x1a0 [ 1343.081354] __alloc_pages_nodemask+0x23e1/0x2720 [ 1343.086192] ? ima_rdwr_violation_check+0x3a0/0x3a0 [ 1343.091207] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1343.096053] alloc_pages_vma+0xd2/0x6d0 [ 1343.100017] wp_page_copy+0x1f5/0x25c0 [ 1343.103915] ? tlb_flush_mmu_free+0x1a0/0x1a0 [ 1343.108396] ? __lock_acquire+0x5fc/0x3f20 [ 1343.112618] do_wp_page+0x245/0x1db0 [ 1343.116317] ? __handle_mm_fault+0x129c/0x4620 [ 1343.120883] ? finish_mkwrite_fault+0x5e0/0x5e0 [ 1343.125538] __handle_mm_fault+0x234f/0x4620 [ 1343.129949] ? vm_insert_page+0x7c0/0x7c0 [ 1343.134087] ? vfs_statx_fd+0x6d/0xd0 [ 1343.137895] handle_mm_fault+0x391/0x860 [ 1343.141948] __do_page_fault+0x549/0xad0 [ 1343.146001] ? spurious_fault+0x640/0x640 [ 1343.150137] ? do_page_fault+0x60/0x500 [ 1343.154096] ? page_fault+0x2f/0x50 [ 1343.157720] page_fault+0x45/0x50 [ 1343.161160] RIP: 8040:0x804 [ 1343.164084] RSP: 5465c0:0000000000008030 EFLAGS: 00000802 [ 1343.171184] Mem-Info: [ 1343.179161] active_anon:78960 inactive_anon:18952 isolated_anon:0 [ 1343.179161] active_file:14 inactive_file:15 isolated_file:0 [ 1343.179161] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1343.179161] slab_reclaimable:13988 slab_unreclaimable:128807 [ 1343.179161] mapped:43827 shmem:19247 pagetables:8888 bounce:0 [ 1343.179161] free:14312 free_pcp:16 free_cma:0 [ 1343.232375] Node 0 active_anon:298432kB inactive_anon:59892kB active_file:56kB inactive_file:56kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:175308kB dirty:0kB writeback:0kB shmem:60936kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 243712kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1343.264637] Node 1 active_anon:17408kB inactive_anon:15916kB active_file:0kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:16052kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1343.276583] syz-executor.1: [ 1343.295594] Node 0 DMA free:10952kB min:204kB low:252kB high:300kB active_anon:2100kB inactive_anon:8kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:56kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1343.320586] page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1343.329234] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1343.344895] Node 0 DMA32 free:18060kB min:36200kB low:45248kB high:54296kB active_anon:296332kB inactive_anon:59884kB active_file:56kB inactive_file:56kB unevictable:0kB writepending:0kB present:3129332kB managed:2788136kB mlocked:0kB kernel_stack:12128kB pagetables:16804kB bounce:0kB free_pcp:124kB local_pcp:4kB free_cma:0kB [ 1343.360026] syz-executor.1 cpuset= [ 1343.378372] lowmem_reserve[]: 0 0 0 0 0 [ 1343.385951] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1343.392087] / [ 1343.415988] lowmem_reserve[]: 0 0 0 0 0 [ 1343.421744] Node 1 Normal free:26776kB min:53696kB low:67120kB high:80544kB active_anon:17408kB inactive_anon:15916kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:6176kB pagetables:18692kB bounce:0kB free_pcp:120kB local_pcp:0kB free_cma:0kB [ 1343.431508] mems_allowed=0-1 [ 1343.456834] lowmem_reserve[]: 0 0 0 0 0 [ 1343.460895] Node 0 DMA: 24*4kB (UME) 61*8kB (UME) 52*16kB (UME) 18*32kB (UME) 4*64kB (UME) 2*128kB (UM) 3*256kB (UE) 3*512kB (UME) 2*1024kB (ME) 2*2048kB (ME) 0*4096kB = 10952kB [ 1343.469924] CPU: 1 PID: 344 Comm: syz-executor.1 Not tainted 4.14.228-syzkaller #0 [ 1343.482930] Node 0 [ 1343.484683] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1343.484690] DMA32: [ 1343.486905] Call Trace: [ 1343.498264] 2445*4kB [ 1343.498491] dump_stack+0x1b2/0x281 [ 1343.504982] (UME) 331*8kB [ 1343.507069] warn_alloc.cold+0x96/0x1cc [ 1343.507081] ? zone_watermark_ok_safe+0x220/0x220 [ 1343.509902] (UME) [ 1343.513857] ? usleep_range+0x130/0x130 [ 1343.513866] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1343.513878] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1343.513888] ? run_timer_softirq+0x5a0/0x5a0 [ 1343.513904] __alloc_pages_nodemask+0x2127/0x2720 [ 1343.513920] ? lock_acquire+0x170/0x3f0 [ 1343.519997] 90*16kB [ 1343.520877] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1343.520887] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1343.520903] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1343.520923] alloc_pages_current+0x155/0x260 [ 1343.520933] ion_page_pool_alloc+0x118/0x1b0 [ 1343.520945] ion_system_heap_allocate+0x133/0x8c0 [ 1343.529698] (UME) [ 1343.530004] ? _raw_spin_unlock+0x29/0x40 [ 1343.535030] 108*32kB [ 1343.539388] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1343.550041] (UME) [ 1343.550469] ? ion_system_contig_heap_create+0x130/0x130 [ 1343.555322] 2*64kB [ 1343.559769] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1343.571080] (UM) [ 1343.574000] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1343.578814] 2*128kB [ 1343.580948] ion_alloc+0x27a/0x810 [ 1343.580963] ? ion_dma_buf_release+0x40/0x40 [ 1343.580976] ? __might_fault+0x177/0x1b0 [ 1343.580988] ion_ioctl+0xea/0x1f0 [ 1343.580998] ? ion_query_heaps+0x360/0x360 [ 1343.589151] (M) [ 1343.592451] ? __tun_chr_ioctl.isra.0+0x3310/0x3310 [ 1343.592460] ? ion_query_heaps+0x360/0x360 [ 1343.592470] do_vfs_ioctl+0x75a/0xff0 [ 1343.592482] ? ioctl_preallocate+0x1a0/0x1a0 [ 1343.592494] ? lock_downgrade+0x740/0x740 [ 1343.596691] 0*256kB [ 1343.600066] ? __fget+0x225/0x360 [ 1343.606197] 1*512kB [ 1343.607291] ? do_vfs_ioctl+0xff0/0xff0 [ 1343.609329] (M) [ 1343.614159] ? security_file_ioctl+0x83/0xb0 [ 1343.614170] SyS_ioctl+0x7f/0xb0 [ 1343.614178] ? do_vfs_ioctl+0xff0/0xff0 [ 1343.614190] do_syscall_64+0x1d5/0x640 [ 1343.614204] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1343.614213] RIP: 0033:0x466459 [ 1343.614220] RSP: 002b:00007fdd4fdf9188 EFLAGS: 00000246 [ 1343.618576] 0*1024kB [ 1343.620080] ORIG_RAX: 0000000000000010 [ 1343.628376] 0*2048kB [ 1343.628508] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1343.633909] 0*4096kB [ 1343.636179] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1343.638127] = 18220kB [ 1343.638133] Node 0 [ 1343.643130] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1343.643137] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1343.643142] R13: 00007ffc5b7c415f R14: 00007fdd4fdf9300 R15: 0000000000022000 [ 1343.652285] Mem-Info: [ 1343.669543] Normal: [ 1343.680072] active_anon:78960 inactive_anon:18952 isolated_anon:0 [ 1343.680072] active_file:34 inactive_file:8 isolated_file:0 [ 1343.680072] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1343.680072] slab_reclaimable:13988 slab_unreclaimable:128807 [ 1343.680072] mapped:43827 shmem:19247 pagetables:8888 bounce:0 [ 1343.680072] free:13947 free_pcp:61 free_cma:0 [ 1343.695163] 0*4kB [ 1343.706356] Node 0 active_anon:298432kB inactive_anon:59892kB active_file:136kB inactive_file:28kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:175308kB dirty:0kB writeback:0kB shmem:60936kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 243712kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1343.716407] 0*8kB [ 1343.722542] Node 1 active_anon:17408kB inactive_anon:15916kB active_file:0kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:16052kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1343.736660] 0*16kB [ 1343.751199] Node 0 [ 1343.769088] 0*32kB [ 1343.797151] DMA free:10952kB min:204kB low:252kB high:300kB active_anon:2100kB inactive_anon:8kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:56kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1343.870521] 0*64kB [ 1343.893126] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1343.900393] Node 0 DMA32 free:18060kB min:36200kB low:45248kB high:54296kB active_anon:296332kB inactive_anon:59884kB active_file:32kB inactive_file:28kB unevictable:0kB writepending:0kB present:3129332kB managed:2788136kB mlocked:0kB kernel_stack:12128kB pagetables:16804kB bounce:0kB free_pcp:124kB local_pcp:120kB free_cma:0kB [ 1343.905008] 0*128kB [ 1343.936744] lowmem_reserve[]: 0 0 0 0 0 [ 1343.943176] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1343.945889] 0*256kB [ 1343.975583] lowmem_reserve[]: 0 0 0 0 0 [ 1343.981963] Node 1 Normal free:26776kB min:53696kB low:67120kB high:80544kB active_anon:17408kB inactive_anon:15916kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:6176kB pagetables:18692kB bounce:0kB free_pcp:120kB local_pcp:120kB free_cma:0kB [ 1343.986646] 0*512kB [ 1344.019622] lowmem_reserve[]: 0 0 0 0 0 [ 1344.025870] 0*1024kB [ 1344.025983] Node 0 [ 1344.025986] 0*2048kB 0*4096kB [ 1344.028385] DMA: [ 1344.039268] = 0kB [ 1344.042241] 24*4kB (UME) 61*8kB (UME) 52*16kB (UME) 18*32kB (UME) 4*64kB (UME) 2*128kB (UM) 3*256kB (UE) 3*512kB (UME) 2*1024kB (ME) 2*2048kB (ME) 0*4096kB = 10952kB [ 1344.049584] Node 1 [ 1344.068402] Node 0 DMA32: 2445*4kB (UME) 334*8kB (UME) 91*16kB (UME) 108*32kB (UME) 2*64kB (UM) 2*128kB (M) 0*256kB 1*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 18260kB [ 1344.074909] Normal: [ 1344.094289] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1344.100295] 38*4kB [ 1344.115979] Node 1 Normal: 38*4kB (UM) 8*8kB (M) 9*16kB (UM) 827*32kB (UM) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 26824kB [ 1344.123904] (UM) [ 1344.139940] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1344.145483] 8*8kB (M) 9*16kB (UM) 827*32kB (UM) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 26824kB [ 1344.159345] Node 0 hugepages_total=1 hugepages_free=1 hugepages_surp=1 hugepages_size=2048kB [ 1344.184010] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1344.187008] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1344.206802] Node 0 hugepages_total=1 hugepages_free=1 hugepages_surp=1 hugepages_size=2048kB [ 1344.210841] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1344.229845] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1344.233113] 19276 total pagecache pages [ 1344.251333] 0 pages in swap cache [ 1344.253747] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1344.254786] Swap cache stats: add 0, delete 0, find 0/0 [ 1344.274818] Free swap = 0kB [ 1344.277639] 19276 total pagecache pages [ 1344.277836] Total swap = 0kB [ 1344.287434] 2097051 pages RAM [ 1344.287892] 0 pages in swap cache [ 1344.294611] 0 pages HighMem/MovableOnly [ 1344.298587] 363846 pages reserved [ 1344.306317] 0 pages cma reserved [ 1344.309096] Swap cache stats: add 0, delete 0, find 0/0 [ 1344.318956] Free swap = 0kB [ 1344.331850] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1344.347154] Total swap = 0kB [ 1344.351061] 2097051 pages RAM [ 1344.356201] 0 pages HighMem/MovableOnly [ 1344.366876] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1344.377592] 363846 pages reserved [ 1344.387221] 0 pages cma reserved [ 1344.402353] device bridge_slave_1 left promiscuous mode [ 1344.409616] Out of memory (oom_kill_allocating_task): Kill process 7997 (syz-executor.3) score 0 or sacrifice child [ 1344.433266] bridge0: port 2(bridge_slave_1) entered disabled state [ 1344.455942] Killed process 612 (syz-executor.3) total-vm:93516kB, anon-rss:2200kB, file-rss:34820kB, shmem-rss:0kB [ 1344.468143] device bridge_slave_0 left promiscuous mode [ 1344.479359] bridge0: port 1(bridge_slave_0) entered disabled state [ 1344.511763] oom_reaper: reaped process 612 (syz-executor.3), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1344.698601] device hsr_slave_1 left promiscuous mode [ 1344.760827] device hsr_slave_0 left promiscuous mode [ 1344.822978] team0 (unregistering): Port device team_slave_1 removed [ 1344.855282] team0 (unregistering): Port device team_slave_0 removed [ 1344.878780] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 1344.906980] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 1345.008741] bond0 (unregistering): Released all slaves 20:21:19 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r1, 0x800454cf, &(0x7f0000000240)) ioctl$TUNSETSNDBUF(r1, 0x400454d4, &(0x7f0000000040)=0x1000) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r2, 0x800454cf, &(0x7f0000000240)) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000080)={'lo\x00', @broadcast}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000180)={0x80000000, 0xa}) openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) 20:21:19 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r1, 0x800454cf, &(0x7f0000000240)) ioctl$TUNSETSNDBUF(r1, 0x400454d4, &(0x7f0000000040)=0x1000) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r2, 0x800454cf, &(0x7f0000000240)) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000080)={'lo\x00', @broadcast}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000180)={0x80000000, 0xa}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x4000, 0x0) ioctl$TUNGETFEATURES(r3, 0x800454cf, &(0x7f0000000240)) 20:21:19 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r1, 0x800454cf, &(0x7f0000000240)) ioctl$TUNSETSNDBUF(r1, 0x400454d4, &(0x7f0000000040)=0x1000) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r2, 0x800454cf, &(0x7f0000000240)) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000180)={0x80000000, 0xa}) openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) [ 1345.722598] oom_reaper: reaped process 626 (syz-executor.0), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1345.830960] syz-executor.1: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1345.860278] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 1345.896688] oom_reaper: reaped process 606 (syz-executor.2), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1345.920933] systemd-journal invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=0 [ 1345.923767] CPU: 1 PID: 661 Comm: syz-executor.1 Not tainted 4.14.228-syzkaller #0 [ 1345.940782] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1345.950140] Call Trace: [ 1345.950648] systemd-journal cpuset= [ 1345.952731] dump_stack+0x1b2/0x281 [ 1345.952732] / [ 1345.956383] warn_alloc.cold+0x96/0x1cc [ 1345.956396] ? zone_watermark_ok_safe+0x220/0x220 [ 1345.956420] __alloc_pages_nodemask+0x2127/0x2720 [ 1345.960156] mems_allowed=0-1 [ 1345.961878] ? lock_acquire+0x170/0x3f0 [ 1345.961893] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1345.961910] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1345.961925] ? __mutex_unlock_slowpath+0x75/0x770 [ 1345.997745] alloc_pages_current+0x155/0x260 [ 1346.002154] ion_page_pool_alloc+0x118/0x1b0 [ 1346.006551] ion_system_heap_allocate+0x133/0x8c0 [ 1346.011387] ? ion_alloc+0x187/0x810 [ 1346.015101] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1346.020544] ? ion_system_contig_heap_create+0x130/0x130 [ 1346.020693] syz-executor.3: [ 1346.025989] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1346.025997] page allocation failure: order:0 [ 1346.029000] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1346.040597] syz-executor.0: page allocation failure: order:0 [ 1346.043226] ion_alloc+0x204/0x810 [ 1346.043241] ? ion_dma_buf_release+0x40/0x40 [ 1346.049029] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1346.052570] ? __might_fault+0x177/0x1b0 [ 1346.052582] ion_ioctl+0xea/0x1f0 [ 1346.052592] ? ion_query_heaps+0x360/0x360 [ 1346.052605] ? __tun_chr_ioctl.isra.0+0x3310/0x3310 [ 1346.052613] ? ion_query_heaps+0x360/0x360 [ 1346.052623] do_vfs_ioctl+0x75a/0xff0 [ 1346.052634] ? ioctl_preallocate+0x1a0/0x1a0 [ 1346.052643] ? lock_downgrade+0x740/0x740 [ 1346.052656] ? __fget+0x225/0x360 [ 1346.052668] ? do_vfs_ioctl+0xff0/0xff0 [ 1346.070613] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1346.071617] ? security_file_ioctl+0x83/0xb0 [ 1346.075824] (null) [ 1346.080823] SyS_ioctl+0x7f/0xb0 [ 1346.080832] ? do_vfs_ioctl+0xff0/0xff0 [ 1346.080844] do_syscall_64+0x1d5/0x640 [ 1346.080863] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1346.100584] (null) [ 1346.100818] RIP: 0033:0x466459 [ 1346.104774] syz-executor.0 cpuset= [ 1346.111867] RSP: 002b:00007fdd4fdf9188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1346.111878] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1346.111883] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1346.111888] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1346.111894] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1346.111899] R13: 00007ffc5b7c415f R14: 00007fdd4fdf9300 R15: 0000000000022000 [ 1346.130572] Mem-Info: [ 1346.140591] CPU: 0 PID: 618 Comm: systemd-journal Not tainted 4.14.228-syzkaller #0 [ 1346.159983] syz-executor.2: [ 1346.165780] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1346.165784] Call Trace: [ 1346.165803] dump_stack+0x1b2/0x281 [ 1346.165815] dump_header+0x178/0x82f [ 1346.180570] syz-executor.3 cpuset= [ 1346.187585] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1346.195595] page allocation failure: order:0 [ 1346.197232] ? ___ratelimit+0x2cd/0x530 [ 1346.205045] active_anon:78397 inactive_anon:18949 isolated_anon:0 [ 1346.205045] active_file:12 inactive_file:13 isolated_file:0 [ 1346.205045] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1346.205045] slab_reclaimable:13831 slab_unreclaimable:128595 [ 1346.205045] mapped:35215 shmem:19243 pagetables:8842 bounce:0 [ 1346.205045] free:13748 free_pcp:0 free_cma:0 [ 1346.208004] oom_kill_process.cold+0x10/0xb18 [ 1346.217370] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1346.219914] out_of_memory+0xe3e/0x1190 [ 1346.223541] / [ 1346.227212] ? oom_killer_disable+0x1c0/0x1c0 [ 1346.230766] Node 0 active_anon:295956kB inactive_anon:59892kB active_file:28kB inactive_file:28kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:140860kB dirty:0kB writeback:0kB shmem:60936kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 241664kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1346.235834] ? mutex_trylock+0x152/0x1a0 [ 1346.240246] Node 1 active_anon:17632kB inactive_anon:15904kB active_file:20kB inactive_file:24kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:16036kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1346.244195] __alloc_pages_nodemask+0x23e1/0x2720 [ 1346.244217] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1346.244243] ? cache_grow_begin+0x41/0x630 [ 1346.277429] (null) [ 1346.281876] cache_grow_begin+0x91/0x630 [ 1346.281887] ? cache_grow_begin+0x91/0x630 [ 1346.281897] fallback_alloc+0x207/0x2c0 [ 1346.288990] mems_allowed=0-1 [ 1346.292939] kmem_cache_alloc+0x1e5/0x3c0 [ 1346.292953] getname_flags+0xc8/0x550 [ 1346.292964] user_path_at_empty+0x2a/0x50 [ 1346.300563] syz-executor.2 cpuset= [ 1346.326987] SyS_faccessat+0x21b/0x680 [ 1346.326998] ? SyS_fallocate+0x80/0x80 [ 1346.327008] ? do_syscall_64+0x4c/0x640 [ 1346.327014] ? SyS_faccessat+0x680/0x680 [ 1346.327025] do_syscall_64+0x1d5/0x640 [ 1346.360566] / [ 1346.362774] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1346.367588] mems_allowed=0-1 [ 1346.371890] RIP: 0033:0x7fd4c677d9c7 [ 1346.371895] RSP: 002b:00007ffc468cabb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000015 [ 1346.371904] RAX: ffffffffffffffda RBX: 00007ffc468cdad0 RCX: 00007fd4c677d9c7 [ 1346.371909] RDX: 00007fd4c71eea00 RSI: 0000000000000000 RDI: 000055a6a20b19a3 [ 1346.371913] RBP: 00007ffc468cabf0 R08: 0000000000000000 R09: 0000000000000000 [ 1346.371917] R10: 0000000000000069 R11: 0000000000000246 R12: 0000000000000000 [ 1346.371926] R13: 0000000000000000 R14: 00007ffc468cdad0 R15: 00007ffc468cb0e0 [ 1346.380575] Node 0 [ 1346.410591] / [ 1346.430133] CPU: 1 PID: 612 Comm: syz-executor.3 Not tainted 4.14.228-syzkaller #0 [ 1346.450814] mems_allowed=0-1 [ 1346.453791] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1346.506851] Call Trace: [ 1346.509439] dump_stack+0x1b2/0x281 [ 1346.513063] warn_alloc.cold+0x96/0x1cc [ 1346.517027] ? zone_watermark_ok_safe+0x220/0x220 [ 1346.521857] ? usleep_range+0x130/0x130 [ 1346.525825] ? _find_next_bit+0xdb/0x100 [ 1346.529879] ? run_timer_softirq+0x5a0/0x5a0 [ 1346.534283] __alloc_pages_nodemask+0x2127/0x2720 [ 1346.539121] ? lock_acquire+0x170/0x3f0 [ 1346.543093] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1346.547925] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1346.552416] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1346.557856] ? policy_node+0xb1/0x110 [ 1346.561652] alloc_pages_current+0x155/0x260 [ 1346.566057] ion_page_pool_alloc+0x118/0x1b0 [ 1346.570454] ion_system_heap_allocate+0x133/0x8c0 [ 1346.575290] ? ion_alloc+0x187/0x810 [ 1346.579011] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1346.584451] ? ion_system_contig_heap_create+0x130/0x130 [ 1346.589891] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1346.594903] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1346.599735] ion_alloc+0x204/0x810 [ 1346.603268] ? ion_dma_buf_release+0x40/0x40 [ 1346.607665] ? __might_fault+0x177/0x1b0 [ 1346.611713] ion_ioctl+0xea/0x1f0 [ 1346.615154] ? ion_query_heaps+0x360/0x360 [ 1346.619380] ? __tun_chr_ioctl.isra.0+0x3310/0x3310 [ 1346.624386] ? ion_query_heaps+0x360/0x360 [ 1346.628614] do_vfs_ioctl+0x75a/0xff0 [ 1346.632408] ? ioctl_preallocate+0x1a0/0x1a0 [ 1346.636804] ? lock_downgrade+0x740/0x740 [ 1346.640946] ? __fget+0x225/0x360 [ 1346.644402] ? do_vfs_ioctl+0xff0/0xff0 [ 1346.648367] ? security_file_ioctl+0x83/0xb0 [ 1346.652768] SyS_ioctl+0x7f/0xb0 [ 1346.656125] ? do_vfs_ioctl+0xff0/0xff0 [ 1346.660091] do_syscall_64+0x1d5/0x640 [ 1346.663972] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1346.669145] RIP: 0033:0x466459 [ 1346.672322] RSP: 002b:00007f6ba9340188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1346.680030] RAX: ffffffffffffffda RBX: 000000000056c008 RCX: 0000000000466459 [ 1346.687310] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1346.694576] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1346.701832] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c008 [ 1346.709085] R13: 00007ffd9352709f R14: 00007f6ba9340300 R15: 0000000000022000 [ 1346.720584] CPU: 0 PID: 626 Comm: syz-executor.0 Not tainted 4.14.228-syzkaller #0 [ 1346.728297] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1346.731916] Bluetooth: hci0 command 0x0406 tx timeout [ 1346.737658] Call Trace: [ 1346.745436] dump_stack+0x1b2/0x281 [ 1346.749060] warn_alloc.cold+0x96/0x1cc [ 1346.753025] ? zone_watermark_ok_safe+0x220/0x220 [ 1346.757875] ? usleep_range+0x130/0x130 [ 1346.761840] ? _find_next_bit+0xdb/0x100 [ 1346.765908] ? run_timer_softirq+0x5a0/0x5a0 [ 1346.770312] __alloc_pages_nodemask+0x2127/0x2720 [ 1346.770583] DMA free:10964kB min:204kB low:252kB high:300kB active_anon:2100kB inactive_anon:8kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:56kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1346.775154] ? lock_acquire+0x170/0x3f0 [ 1346.805050] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1346.809896] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1346.814397] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1346.819859] alloc_pages_current+0x155/0x260 [ 1346.824261] ion_page_pool_alloc+0x118/0x1b0 [ 1346.828659] ion_system_heap_allocate+0x133/0x8c0 [ 1346.830578] lowmem_reserve[]: 0 [ 1346.833491] ? ion_alloc+0x187/0x810 [ 1346.833504] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1346.836768] 2717 [ 1346.840467] ? ion_system_contig_heap_create+0x130/0x130 [ 1346.840476] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1346.840488] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1346.840497] ion_alloc+0x204/0x810 [ 1346.840509] ? ion_dma_buf_release+0x40/0x40 [ 1346.840520] ? __might_fault+0x177/0x1b0 [ 1346.840531] ion_ioctl+0xea/0x1f0 [ 1346.840540] ? ion_query_heaps+0x360/0x360 [ 1346.840553] ? _raw_spin_unlock+0x29/0x40 [ 1346.840561] ? ion_query_heaps+0x360/0x360 [ 1346.840571] do_vfs_ioctl+0x75a/0xff0 [ 1346.840582] ? ioctl_preallocate+0x1a0/0x1a0 [ 1346.860589] 2718 [ 1346.863307] ? lock_downgrade+0x740/0x740 [ 1346.866819] 2718 [ 1346.871218] ? __fget+0x225/0x360 [ 1346.871229] ? do_vfs_ioctl+0xff0/0xff0 [ 1346.871244] ? security_file_ioctl+0x83/0xb0 [ 1346.890573] 2718 [ 1346.891317] SyS_ioctl+0x7f/0xb0 [ 1346.899480] ? do_vfs_ioctl+0xff0/0xff0 [ 1346.910564] Node 0 [ 1346.911125] do_syscall_64+0x1d5/0x640 [ 1346.915090] DMA32 free:17876kB min:36200kB low:45248kB high:54296kB active_anon:293856kB inactive_anon:59884kB active_file:28kB inactive_file:28kB unevictable:0kB writepending:0kB present:3129332kB managed:2788136kB mlocked:0kB kernel_stack:12000kB pagetables:16524kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB [ 1346.919474] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1346.930564] lowmem_reserve[]: [ 1346.931020] RIP: 0033:0x466459 [ 1346.934884] 0 [ 1346.963068] RSP: 002b:00007fb4b9e26188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1346.963079] RAX: ffffffffffffffda RBX: 000000000056c0b0 RCX: 0000000000466459 [ 1346.963084] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1346.963089] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1346.963093] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c0b0 [ 1346.963098] R13: 00007fffe82eec4f R14: 00007fb4b9e26300 R15: 0000000000022000 [ 1347.040110] CPU: 1 PID: 606 Comm: syz-executor.2 Not tainted 4.14.228-syzkaller #0 [ 1347.047827] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1347.050602] Mem-Info: [ 1347.057187] Call Trace: [ 1347.059600] active_anon:78397 inactive_anon:18949 isolated_anon:0 [ 1347.059600] active_file:12 inactive_file:13 isolated_file:0 [ 1347.059600] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1347.059600] slab_reclaimable:13831 slab_unreclaimable:128594 [ 1347.059600] mapped:35215 shmem:19243 pagetables:8842 bounce:0 [ 1347.059600] free:13748 free_pcp:1 free_cma:0 [ 1347.062164] dump_stack+0x1b2/0x281 [ 1347.062178] warn_alloc.cold+0x96/0x1cc [ 1347.062189] ? zone_watermark_ok_safe+0x220/0x220 [ 1347.062200] ? usleep_range+0x130/0x130 [ 1347.062224] ? _find_next_bit+0xdb/0x100 [ 1347.115757] ? run_timer_softirq+0x5a0/0x5a0 [ 1347.120167] __alloc_pages_nodemask+0x2127/0x2720 [ 1347.125013] ? lock_acquire+0x170/0x3f0 [ 1347.128986] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1347.133825] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1347.138320] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1347.140591] Node 0 active_anon:295956kB inactive_anon:59892kB active_file:28kB inactive_file:28kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:140860kB dirty:0kB writeback:0kB shmem:60936kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 241664kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1347.143768] alloc_pages_current+0x155/0x260 [ 1347.176004] ion_page_pool_alloc+0x118/0x1b0 [ 1347.180404] ion_system_heap_allocate+0x133/0x8c0 [ 1347.185237] ? ion_alloc+0x187/0x810 [ 1347.188944] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1347.194388] ? ion_system_contig_heap_create+0x130/0x130 [ 1347.199832] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1347.204697] Node 1 active_anon:17632kB inactive_anon:15904kB active_file:24kB inactive_file:20kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:16036kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1347.204854] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1347.232226] Node 0 DMA free:10964kB min:204kB low:252kB high:300kB active_anon:2100kB inactive_anon:8kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:56kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1347.236587] ion_alloc+0x204/0x810 [ 1347.236602] ? ion_dma_buf_release+0x40/0x40 [ 1347.263252] lowmem_reserve[]: [ 1347.266666] ? __might_fault+0x177/0x1b0 [ 1347.271072] 0 [ 1347.274139] ion_ioctl+0xea/0x1f0 [ 1347.278170] 2717 [ 1347.279962] ? ion_query_heaps+0x360/0x360 [ 1347.283468] 2718 [ 1347.285438] ? __tun_chr_ioctl.isra.0+0x3310/0x3310 [ 1347.289639] 2718 [ 1347.291682] ? ion_query_heaps+0x360/0x360 [ 1347.291693] do_vfs_ioctl+0x75a/0xff0 [ 1347.291705] ? ioctl_preallocate+0x1a0/0x1a0 [ 1347.291715] ? lock_downgrade+0x740/0x740 [ 1347.291728] ? __fget+0x225/0x360 [ 1347.291737] ? do_vfs_ioctl+0xff0/0xff0 [ 1347.296746] Mem-Info: [ 1347.298805] ? security_file_ioctl+0x83/0xb0 [ 1347.303149] active_anon:78397 inactive_anon:18949 isolated_anon:0 [ 1347.303149] active_file:13 inactive_file:12 isolated_file:0 [ 1347.303149] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1347.303149] slab_reclaimable:13831 slab_unreclaimable:128594 [ 1347.303149] mapped:35215 shmem:19243 pagetables:8842 bounce:0 [ 1347.303149] free:13748 free_pcp:7 free_cma:0 [ 1347.306809] SyS_ioctl+0x7f/0xb0 [ 1347.311234] 2718 [ 1347.315321] ? do_vfs_ioctl+0xff0/0xff0 [ 1347.322704] do_syscall_64+0x1d5/0x640 [ 1347.322720] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1347.322729] RIP: 0033:0x466459 [ 1347.322734] RSP: 002b:00007f79418d2188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1347.322746] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1347.325178] Node 0 active_anon:295956kB inactive_anon:59892kB active_file:28kB inactive_file:28kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:140860kB dirty:0kB writeback:0kB shmem:60936kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 241664kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1347.329540] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1347.362821] Node 0 [ 1347.366050] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1347.368106] DMA32 free:17876kB min:36200kB low:45248kB high:54296kB active_anon:293856kB inactive_anon:59884kB active_file:28kB inactive_file:28kB unevictable:0kB writepending:0kB present:3129332kB managed:2788136kB mlocked:0kB kernel_stack:12000kB pagetables:16524kB bounce:0kB free_pcp:28kB local_pcp:24kB free_cma:0kB [ 1347.372060] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1347.372066] R13: 00007ffef88b512f R14: 00007f79418d2300 R15: 0000000000022000 [ 1347.387583] 0 [ 1347.392344] lowmem_reserve[]: [ 1347.406251] 0 [ 1347.427729] Node 1 active_anon:17632kB inactive_anon:15904kB active_file:24kB inactive_file:20kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:16036kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1347.448209] 0 [ 1347.551561] 0 0 0 0 0 [ 1347.584688] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1347.600565] 0 [ 1347.625697] Node 0 DMA free:11068kB min:204kB low:252kB high:300kB active_anon:2100kB inactive_anon:8kB active_file:0kB inactive_file:900kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:56kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1347.670578] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1347.695316] lowmem_reserve[]: 0 0 0 0 0 [ 1347.714426] Node 1 Normal free:333920kB min:53696kB low:67120kB high:80544kB active_anon:17632kB inactive_anon:15904kB active_file:24kB inactive_file:20kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:6272kB pagetables:18788kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1347.758805] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1347.761813] lowmem_reserve[]: 0 0 0 0 0 [ 1347.777228] Node 0 DMA32 free:217900kB min:36200kB low:45248kB high:54296kB active_anon:293856kB inactive_anon:59884kB active_file:28kB inactive_file:2428kB unevictable:0kB writepending:0kB present:3129332kB managed:2788136kB mlocked:0kB kernel_stack:12000kB pagetables:16524kB bounce:0kB free_pcp:944kB local_pcp:696kB free_cma:0kB [ 1347.778048] Node 1 [ 1347.844953] lowmem_reserve[]: 0 0 0 0 0 [ 1347.869005] Node 0 DMA: 5*4kB (UME) 45*8kB (UME) 48*16kB (UE) 16*32kB (UME) 6*64kB (UE) 3*128kB (U) 3*256kB (UE) 2*512kB (UE) 3*1024kB (UME) 2*2048kB (ME) 0*4096kB = 11388kB [ 1347.895072] lowmem_reserve[]: 0 0 0 0 0 [ 1347.904615] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1347.917974] Normal free:489268kB min:53696kB low:67120kB high:80544kB active_anon:17632kB inactive_anon:15904kB active_file:24kB inactive_file:20kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:6272kB pagetables:18788kB bounce:0kB free_pcp:1448kB local_pcp:636kB free_cma:0kB [ 1347.948972] Node 0 DMA32: 2904*4kB (UME) 914*8kB (UME) 204*16kB (UME) 1056*32kB (UME) 6*64kB (ME) 230*128kB (UM) 59*256kB (U) 19*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 110640kB [ 1348.024837] lowmem_reserve[]: 0 0 0 0 0 [ 1348.033330] Node 1 Normal free:556484kB min:53696kB low:67120kB high:80544kB active_anon:17632kB inactive_anon:15904kB active_file:24kB inactive_file:20kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:6272kB pagetables:18788kB bounce:0kB free_pcp:1316kB local_pcp:660kB free_cma:0kB [ 1348.060140] lowmem_reserve[]: [ 1348.065069] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1348.070235] 0 [ 1348.082441] Node 1 Normal: 1562*4kB (UM) 1379*8kB (UM) 1415*16kB (UME) 814*32kB (UM) 4736*64kB (UM) 819*128kB (UM) 128*256kB (UM) 9*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 511280kB [ 1348.090495] 0 [ 1348.113972] lowmem_reserve[]: 0 0 0 0 0 [ 1348.122711] 0 0 0 [ 1348.124968] Node 0 DMA: 5*4kB (UME) 45*8kB (UME) 48*16kB (UE) 16*32kB (UME) 2*64kB (E) 3*128kB (U) 3*256kB (UE) 2*512kB (UE) 3*1024kB (UME) 2*2048kB (ME) 0*4096kB = 11132kB [ 1348.136192] Node 0 [ 1348.141866] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1348.167554] Node 0 DMA32: 3107*4kB (UME) 1190*8kB (UME) 292*16kB (UME) 1157*32kB (UME) 4*64kB (U) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 63900kB [ 1348.168597] DMA: [ 1348.182020] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1348.182067] Node 1 Normal: 1705*4kB (UM) 1585*8kB (UM) 1628*16kB (UME) 1036*32kB (UM) 4265*64kB (UM) 987*128kB (UM) 153*256kB (UM) 13*512kB [ 1348.198602] Node 0 hugepages_total=1 hugepages_free=1 hugepages_surp=1 hugepages_size=2048kB [ 1348.230740] 5*4kB (UME) 45*8kB (UME) 48*16kB (UE) 16*32kB (UME) 2*64kB (E) 3*128kB (U) 3*256kB (UE) 2*512kB (UE) 3*1024kB (UME) 2*2048kB (ME) 0*4096kB = 11132kB [ 1348.250614] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1348.270565] (UM) 1*1024kB (U) 1*2048kB (U) 0*4096kB = 526892kB [ 1348.286072] Node 0 DMA32: 3107*4kB (UME) 1190*8kB (UME) 292*16kB (UME) 1157*32kB (UME) 1797*64kB (U) 117*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 193628kB [ 1348.290593] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1348.309328] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1348.343958] 20146 total pagecache pages [ 1348.348000] 0 pages in swap cache [ 1348.353727] Node 0 hugepages_total=1 hugepages_free=1 hugepages_surp=1 hugepages_size=2048kB [ 1348.358084] Swap cache stats: add 0, delete 0, find 0/0 [ 1348.381272] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1348.385619] Free swap = 0kB [ 1348.390126] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1348.390131] 20146 total pagecache pages [ 1348.390142] 0 pages in swap cache [ 1348.393230] Node 0 Normal: [ 1348.422128] Total swap = 0kB [ 1348.434796] 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1348.446672] Swap cache stats: add 0, delete 0, find 0/0 [ 1348.448853] 2097051 pages RAM [ 1348.465004] 0 pages HighMem/MovableOnly [ 1348.470785] Node 1 Normal: 3907*4kB (UM) 2116*8kB (UM) 2631*16kB (UME) 1126*32kB (UM) 4974*64kB (UM) 1347*128kB (UM) 379*256kB (UM) 18*512kB (UM) 10*1024kB (U) 1*2048kB (U) 0*4096kB = 719964kB [ 1348.480597] Free swap = 0kB [ 1348.488289] 363846 pages reserved [ 1348.494752] 0 pages cma reserved [ 1348.499040] Out of memory (oom_kill_allocating_task): Kill process 618 (systemd-journal) score 0 or sacrifice child [ 1348.510724] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1348.520602] Total swap = 0kB [ 1348.523627] 2097051 pages RAM [ 1348.540692] Killed process 618 (systemd-journal) total-vm:46096kB, anon-rss:464kB, file-rss:4kB, shmem-rss:1580kB [ 1348.551238] Node 0 hugepages_total=1 hugepages_free=1 hugepages_surp=1 hugepages_size=2048kB [ 1348.560913] oom_reaper: reaped process 618 (systemd-journal), now anon-rss:0kB, file-rss:0kB, shmem-rss:1580kB [ 1348.564497] 0 pages HighMem/MovableOnly [ 1348.574592] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1348.586825] systemd[1]: systemd-journald.service: Main process exited, code=killed, status=9/KILL [ 1348.617253] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1348.627087] 363846 pages reserved [ 1348.638810] 0 pages cma reserved [ 1348.658243] 20479 total pagecache pages [ 1348.666778] 0 pages in swap cache [ 1348.670298] Swap cache stats: add 0, delete 0, find 0/0 [ 1348.675934] Free swap = 0kB [ 1348.690178] Total swap = 0kB [ 1348.693493] 2097051 pages RAM [ 1348.698742] systemd[1]: Failed to start Journal Service. [ 1348.710665] 0 pages HighMem/MovableOnly [ 1348.714695] 363846 pages reserved [ 1348.718215] 0 pages cma reserved [ 1348.732623] systemd[1]: systemd-journald.service: Unit entered failed state. [ 1348.772210] systemd[1]: systemd-journald.service: Failed with result 'signal'. [ 1348.779829] systemd[1]: systemd-journald.service: Service has no hold-off time, scheduling restart. [ 1348.856423] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1348.874813] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1348.911079] systemd[1]: Stopped Journal Service. [ 1348.917473] device bridge_slave_1 left promiscuous mode [ 1348.940764] bridge0: port 2(bridge_slave_1) entered disabled state [ 1348.952941] systemd[1]: Starting Journal Service... [ 1348.958963] device bridge_slave_0 left promiscuous mode [ 1348.978728] bridge0: port 1(bridge_slave_0) entered disabled state [ 1348.991610] device veth0_vlan left promiscuous mode [ 1349.219010] systemd-journald[664]: File /run/log/journal/04d8c135ee6b410280ba31a58c89679d/system.journal corrupted or uncleanly shut down, renaming and replacing. [ 1349.346489] device hsr_slave_1 left promiscuous mode [ 1349.376675] device hsr_slave_0 left promiscuous mode [ 1349.391242] systemd-journald[664]: /dev/kmsg buffer overrun, some messages lost. [ 1349.445178] team0 (unregistering): Port device team_slave_1 removed [ 1349.474768] team0 (unregistering): Port device team_slave_0 removed [ 1349.517510] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 1349.575233] bond0 (unregistering): Releasing backup interface bond_slave_0 20:21:23 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r1, 0x800454cf, &(0x7f0000000240)) ioctl$TUNSETSNDBUF(r1, 0x400454d4, &(0x7f0000000040)=0x1000) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r2, 0x800454cf, &(0x7f0000000240)) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000180)={0x80000000, 0xa}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x4000, 0x0) ioctl$TUNSETPERSIST(r4, 0x400454cb, 0x1) ioctl$TUNGETFEATURES(r3, 0x800454cf, &(0x7f0000000240)) ioctl$TUNSETOWNER(r3, 0x400454cc, 0xffffffffffffffff) [ 1349.724898] bond0 (unregistering): Released all slaves [ 1349.951646] syz-executor.0: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1349.979984] syz-executor.2: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1350.004077] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 1350.012583] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 1350.019962] CPU: 0 PID: 626 Comm: syz-executor.0 Not tainted 4.14.228-syzkaller #0 [ 1350.027672] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1350.037022] Call Trace: [ 1350.039615] dump_stack+0x1b2/0x281 [ 1350.043247] warn_alloc.cold+0x96/0x1cc [ 1350.047231] ? zone_watermark_ok_safe+0x220/0x220 [ 1350.052097] __alloc_pages_nodemask+0x2127/0x2720 [ 1350.056958] ? _raw_spin_unlock_irq+0x5a/0x80 [ 1350.061457] ? finish_task_switch+0x178/0x610 [ 1350.065952] ? finish_task_switch+0x14d/0x610 [ 1350.070450] ? lock_acquire+0x170/0x3f0 [ 1350.074425] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1350.079279] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1350.084728] ? __mutex_unlock_slowpath+0x75/0x770 [ 1350.089594] ? alloc_pages_current+0xe3/0x260 [ 1350.094174] alloc_pages_current+0x155/0x260 [ 1350.098580] ion_page_pool_alloc+0x118/0x1b0 [ 1350.102985] ion_system_heap_allocate+0x133/0x8c0 [ 1350.107826] ? _raw_spin_unlock+0x29/0x40 [ 1350.111970] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1350.116893] ? ion_system_contig_heap_create+0x130/0x130 [ 1350.122342] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1350.127359] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1350.132202] ion_alloc+0x27a/0x810 [ 1350.135744] ? ion_dma_buf_release+0x40/0x40 [ 1350.140152] ? __might_fault+0x177/0x1b0 [ 1350.144211] ion_ioctl+0xea/0x1f0 [ 1350.147678] ? ion_query_heaps+0x360/0x360 [ 1350.151937] ? _raw_spin_unlock+0x29/0x40 [ 1350.156086] ? ion_query_heaps+0x360/0x360 [ 1350.160318] do_vfs_ioctl+0x75a/0xff0 [ 1350.164119] ? ioctl_preallocate+0x1a0/0x1a0 [ 1350.168545] ? lock_downgrade+0x740/0x740 [ 1350.172697] ? __fget+0x225/0x360 [ 1350.176170] ? do_vfs_ioctl+0xff0/0xff0 [ 1350.180141] ? security_file_ioctl+0x83/0xb0 [ 1350.184566] SyS_ioctl+0x7f/0xb0 [ 1350.187952] ? do_vfs_ioctl+0xff0/0xff0 [ 1350.191929] do_syscall_64+0x1d5/0x640 [ 1350.195820] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1350.201001] RIP: 0033:0x466459 [ 1350.204184] RSP: 002b:00007fb4b9e26188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1350.211893] RAX: ffffffffffffffda RBX: 000000000056c0b0 RCX: 0000000000466459 [ 1350.219156] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1350.226440] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1350.233709] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c0b0 [ 1350.240973] R13: 00007fffe82eec4f R14: 00007fb4b9e26300 R15: 0000000000022000 [ 1350.277281] CPU: 1 PID: 606 Comm: syz-executor.2 Not tainted 4.14.228-syzkaller #0 [ 1350.285014] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1350.294364] Call Trace: [ 1350.296956] dump_stack+0x1b2/0x281 [ 1350.300591] warn_alloc.cold+0x96/0x1cc [ 1350.304565] ? zone_watermark_ok_safe+0x220/0x220 [ 1350.309418] __alloc_pages_nodemask+0x2127/0x2720 [ 1350.314268] ? lock_acquire+0x170/0x3f0 [ 1350.318260] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1350.323110] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1350.328585] ? __mutex_unlock_slowpath+0x75/0x770 [ 1350.333434] alloc_pages_current+0x155/0x260 [ 1350.337855] ion_page_pool_alloc+0x118/0x1b0 [ 1350.342264] ion_system_heap_allocate+0x133/0x8c0 [ 1350.347113] ? _raw_spin_unlock+0x29/0x40 [ 1350.351259] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1350.356203] ? ion_system_contig_heap_create+0x130/0x130 [ 1350.361651] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1350.366689] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1350.371536] ion_alloc+0x27a/0x810 [ 1350.375096] ? ion_dma_buf_release+0x40/0x40 [ 1350.379567] ? __might_fault+0x177/0x1b0 [ 1350.383635] ion_ioctl+0xea/0x1f0 [ 1350.387087] ? ion_query_heaps+0x360/0x360 [ 1350.391323] ? __tun_chr_ioctl.isra.0+0x3310/0x3310 [ 1350.396336] ? ion_query_heaps+0x360/0x360 [ 1350.400567] do_vfs_ioctl+0x75a/0xff0 [ 1350.404385] ? ioctl_preallocate+0x1a0/0x1a0 [ 1350.408790] ? lock_downgrade+0x740/0x740 [ 1350.412944] ? __fget+0x225/0x360 [ 1350.416407] ? do_vfs_ioctl+0xff0/0xff0 [ 1350.420390] ? security_file_ioctl+0x83/0xb0 [ 1350.424810] SyS_ioctl+0x7f/0xb0 [ 1350.428174] ? do_vfs_ioctl+0xff0/0xff0 [ 1350.432158] do_syscall_64+0x1d5/0x640 [ 1350.436078] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1350.441272] RIP: 0033:0x466459 [ 1350.444453] RSP: 002b:00007f79418d2188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1350.452157] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1350.459420] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1350.466689] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1350.473957] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1350.481230] R13: 00007ffef88b512f R14: 00007f79418d2300 R15: 0000000000022000 [ 1350.680600] warn_alloc_show_mem: 2 callbacks suppressed [ 1350.680604] Mem-Info: [ 1350.688409] active_anon:78334 inactive_anon:20981 isolated_anon:0 [ 1350.688409] active_file:1612 inactive_file:2181 isolated_file:0 [ 1350.688409] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1350.688409] slab_reclaimable:13811 slab_unreclaimable:126054 [ 1350.688409] mapped:37705 shmem:21291 pagetables:8821 bounce:0 [ 1350.688409] free:215928 free_pcp:86 free_cma:0 [ 1350.820604] Node 0 active_anon:295776kB inactive_anon:68020kB active_file:6444kB inactive_file:8720kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:150920kB dirty:0kB writeback:0kB shmem:69128kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 241664kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1350.923503] Node 1 active_anon:17460kB inactive_anon:15904kB active_file:4kB inactive_file:2004kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:900kB dirty:0kB writeback:0kB shmem:16036kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1351.020598] Node 0 DMA free:11108kB min:204kB low:252kB high:300kB active_anon:2100kB inactive_anon:8kB active_file:732kB inactive_file:4kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:56kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1351.120578] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1351.125648] Node 0 DMA32 free:43664kB min:36200kB low:45248kB high:54296kB active_anon:293396kB inactive_anon:68012kB active_file:5724kB inactive_file:8744kB unevictable:0kB writepending:0kB present:3129332kB managed:2788136kB mlocked:0kB kernel_stack:11936kB pagetables:16440kB bounce:0kB free_pcp:380kB local_pcp:368kB free_cma:0kB [ 1351.220604] lowmem_reserve[]: 0 0 0 0 0 [ 1351.224660] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1351.312237] lowmem_reserve[]: 0 0 0 0 0 [ 1351.316266] Node 1 Normal free:67260kB min:53696kB low:67120kB high:80544kB active_anon:17440kB inactive_anon:15904kB active_file:24kB inactive_file:9596kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:6208kB pagetables:18788kB bounce:0kB free_pcp:276kB local_pcp:104kB free_cma:0kB [ 1351.400585] syz-executor.3: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1351.430655] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 1351.436480] CPU: 0 PID: 668 Comm: syz-executor.3 Not tainted 4.14.228-syzkaller #0 [ 1351.444187] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1351.453536] Call Trace: [ 1351.456157] dump_stack+0x1b2/0x281 [ 1351.459815] warn_alloc.cold+0x96/0x1cc [ 1351.463794] ? zone_watermark_ok_safe+0x220/0x220 [ 1351.468651] __alloc_pages_nodemask+0x2127/0x2720 [ 1351.473490] ? io_schedule_timeout+0x140/0x140 [ 1351.478085] ? lock_acquire+0x170/0x3f0 [ 1351.482069] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1351.486918] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1351.492369] ? check_preemption_disabled+0x35/0x240 [ 1351.497383] ? __mutex_unlock_slowpath+0x75/0x770 [ 1351.502233] alloc_pages_current+0x155/0x260 [ 1351.506642] ion_page_pool_alloc+0x118/0x1b0 [ 1351.511049] ion_system_heap_allocate+0x133/0x8c0 [ 1351.515895] ? ion_alloc+0x187/0x810 [ 1351.519627] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1351.525073] ? ion_system_contig_heap_create+0x130/0x130 [ 1351.530521] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1351.535538] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1351.540383] ion_alloc+0x204/0x810 [ 1351.543925] ? ion_dma_buf_release+0x40/0x40 [ 1351.548344] ? __might_fault+0x177/0x1b0 [ 1351.552405] ion_ioctl+0xea/0x1f0 [ 1351.555855] ? ion_query_heaps+0x360/0x360 [ 1351.560093] ? __tun_chr_ioctl.isra.0+0x3310/0x3310 [ 1351.565104] ? ion_query_heaps+0x360/0x360 [ 1351.569343] do_vfs_ioctl+0x75a/0xff0 [ 1351.573144] ? ioctl_preallocate+0x1a0/0x1a0 [ 1351.577545] ? lock_downgrade+0x740/0x740 [ 1351.581688] ? __fget+0x225/0x360 [ 1351.585137] ? do_vfs_ioctl+0xff0/0xff0 [ 1351.589110] ? security_file_ioctl+0x83/0xb0 [ 1351.593543] SyS_ioctl+0x7f/0xb0 [ 1351.596907] ? do_vfs_ioctl+0xff0/0xff0 [ 1351.600877] do_syscall_64+0x1d5/0x640 [ 1351.604760] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1351.609961] RIP: 0033:0x466459 [ 1351.613152] RSP: 002b:00007f6ba9361188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1351.620849] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1351.628108] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1351.635387] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1351.642645] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1351.649901] R13: 00007ffd9352709f R14: 00007f6ba9361300 R15: 0000000000022000 [ 1351.659614] lowmem_reserve[]: 0 0 0 0 0 [ 1351.679724] Node 0 DMA: 25*4kB (ME) 50*8kB (UME) 52*16kB (UME) 15*32kB (UE) 6*64kB (UME) 1*128kB (U) 2*256kB (UE) 2*512kB (UE) 3*1024kB (UME) 2*2048kB (ME) 0*4096kB = 11028kB [ 1351.719081] Node 0 DMA32: 1496*4kB (UME) 390*8kB (UME) 103*16kB (UME) 18*32kB (UE) 2*64kB (U) 0*128kB 19*256kB (U) 16*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 24512kB [ 1351.773615] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1351.800604] Node 1 Normal: 31*4kB (M) 8*8kB (UM) 5*16kB (UM) 3*32kB (M) 4*64kB (M) 0*128kB 0*256kB 30*512kB (U) 5*1024kB (UM) 1*2048kB (M) 1*4096kB (M) = 27244kB [ 1351.830680] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1351.839534] Node 0 hugepages_total=1 hugepages_free=1 hugepages_surp=1 hugepages_size=2048kB [ 1351.870727] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1351.879578] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1351.900610] 21335 total pagecache pages [ 1351.904597] 0 pages in swap cache [ 1351.908038] Swap cache stats: add 0, delete 0, find 0/0 [ 1351.930621] Free swap = 0kB [ 1351.933646] Total swap = 0kB [ 1351.936651] 2097051 pages RAM [ 1351.939742] 0 pages HighMem/MovableOnly [ 1351.960586] 363846 pages reserved [ 1351.965224] 0 pages cma reserved [ 1351.983632] warn_alloc_show_mem: 1 callbacks suppressed [ 1351.983636] Mem-Info: [ 1351.991509] active_anon:78234 inactive_anon:20981 isolated_anon:0 [ 1351.991509] active_file:22 inactive_file:22 isolated_file:10 [ 1351.991509] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1351.991509] slab_reclaimable:13811 slab_unreclaimable:126395 [ 1351.991509] mapped:35256 shmem:21291 pagetables:8821 bounce:0 [ 1351.991509] free:13898 free_pcp:93 free_cma:0 [ 1352.025006] Node 0 active_anon:295496kB inactive_anon:68020kB active_file:64kB inactive_file:44kB unevictable:0kB isolated(anon):0kB isolated(file):40kB mapped:140928kB dirty:0kB writeback:0kB shmem:69128kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 241664kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1352.053152] Node 1 active_anon:17440kB inactive_anon:15904kB active_file:24kB inactive_file:44kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:56kB dirty:0kB writeback:0kB shmem:16036kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1352.080388] Node 0 DMA free:10968kB min:204kB low:252kB high:300kB active_anon:2100kB inactive_anon:8kB active_file:12kB inactive_file:48kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:56kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1352.123786] systemd-journal invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1352.131030] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1352.157189] Node 0 DMA32 free:17372kB min:36200kB low:45248kB high:54296kB active_anon:293380kB inactive_anon:68012kB active_file:52kB inactive_file:16kB unevictable:0kB writepending:0kB present:3129332kB managed:2788136kB mlocked:0kB kernel_stack:11936kB pagetables:16440kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1352.182146] systemd-journal cpuset=/ mems_allowed=0-1 [ 1352.235305] lowmem_reserve[]: 0 0 0 0 0 [ 1352.239328] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1352.239513] CPU: 1 PID: 664 Comm: systemd-journal Not tainted 4.14.228-syzkaller #0 [ 1352.272633] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1352.282000] Call Trace: [ 1352.284588] dump_stack+0x1b2/0x281 [ 1352.288211] dump_header+0x178/0x82f [ 1352.291922] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1352.297016] ? ___ratelimit+0x2cd/0x530 [ 1352.300598] syz-executor.0: page allocation failure: order:0 [ 1352.300985] oom_kill_process.cold+0x10/0xb18 [ 1352.301004] out_of_memory+0xe3e/0x1190 [ 1352.306779] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1352.311261] ? oom_killer_disable+0x1c0/0x1c0 [ 1352.311271] ? mutex_trylock+0x152/0x1a0 [ 1352.311281] __alloc_pages_nodemask+0x23e1/0x2720 [ 1352.311302] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1352.317389] lowmem_reserve[]: [ 1352.322360] alloc_pages_current+0x155/0x260 [ 1352.322373] filemap_fault+0xea3/0x1980 [ 1352.322392] ext4_filemap_fault+0x84/0xb0 [ 1352.340584] (null) [ 1352.343643] __do_fault+0xfa/0x380 [ 1352.348049] syz-executor.0 cpuset= [ 1352.352007] __handle_mm_fault+0x2497/0x4620 [ 1352.352018] ? vm_insert_page+0x7c0/0x7c0 [ 1352.352026] ? check_stack_object+0x86/0xa0 [ 1352.352046] handle_mm_fault+0x391/0x860 [ 1352.352058] __do_page_fault+0x549/0xad0 [ 1352.352070] ? spurious_fault+0x640/0x640 [ 1352.358402] 0 [ 1352.361869] ? do_page_fault+0x60/0x500 [ 1352.361878] ? page_fault+0x2f/0x50 [ 1352.361885] page_fault+0x45/0x50 [ 1352.361893] RIP: 0000:0x7fff55100570 [ 1352.361901] RSP: 55100570:00007fff550fd690 EFLAGS: 00000000 [ 1352.365424] 0 [ 1352.388017] / [ 1352.416766] 0 0 0 [ 1352.420666] Node 1 Normal free:26848kB min:53696kB low:67120kB high:80544kB active_anon:17424kB inactive_anon:15904kB active_file:4kB inactive_file:4kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:6208kB pagetables:18788kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1352.451526] lowmem_reserve[]: 0 0 0 0 0 [ 1352.455530] Node 0 DMA: 12*4kB (UME) 11*8kB (UME) 27*16kB (UME) 19*32kB (UME) 7*64kB (UME) 1*128kB (U) 2*256kB (UE) 3*512kB (UME) 3*1024kB (UME) 2*2048kB (ME) 0*4096kB = 10968kB [ 1352.458956] mems_allowed=0-1 [ 1352.482896] Node 0 DMA32: 2203*4kB (UME) 554*8kB (UME) 85*16kB (UME) 4*32kB (UE) 0*64kB 0*128kB 1*256kB (U) 6*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 18060kB [ 1352.484535] CPU: 1 PID: 626 Comm: syz-executor.0 Not tainted 4.14.228-syzkaller #0 [ 1352.504826] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1352.507906] Node 0 [ 1352.514171] Call Trace: [ 1352.514191] dump_stack+0x1b2/0x281 [ 1352.514205] warn_alloc.cold+0x96/0x1cc [ 1352.514217] ? zone_watermark_ok_safe+0x220/0x220 [ 1352.514227] ? usleep_range+0x130/0x130 [ 1352.514237] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1352.514250] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1352.514263] ? run_timer_softirq+0x5a0/0x5a0 [ 1352.519761] Normal: [ 1352.522698] __alloc_pages_nodemask+0x2127/0x2720 [ 1352.522722] ? lock_acquire+0x170/0x3f0 [ 1352.522738] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1352.522748] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1352.522765] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1352.522780] ? alloc_pages_current+0xe3/0x260 [ 1352.537062] 0*4kB [ 1352.540712] alloc_pages_current+0x155/0x260 [ 1352.540727] ion_page_pool_alloc+0x118/0x1b0 [ 1352.540737] ion_system_heap_allocate+0x133/0x8c0 [ 1352.540750] ? _raw_spin_unlock+0x29/0x40 [ 1352.540758] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1352.540766] ? ion_system_contig_heap_create+0x130/0x130 [ 1352.540776] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1352.540789] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1352.548244] 0*8kB [ 1352.550178] ion_alloc+0x27a/0x810 [ 1352.560411] 0*16kB [ 1352.561284] ? ion_dma_buf_release+0x40/0x40 [ 1352.561297] ? __might_fault+0x177/0x1b0 [ 1352.561309] ion_ioctl+0xea/0x1f0 [ 1352.561318] ? ion_query_heaps+0x360/0x360 [ 1352.561330] ? _raw_spin_unlock+0x29/0x40 [ 1352.567403] 0*32kB [ 1352.570627] ? ion_query_heaps+0x360/0x360 [ 1352.570638] do_vfs_ioctl+0x75a/0xff0 [ 1352.570650] ? ioctl_preallocate+0x1a0/0x1a0 [ 1352.570659] ? lock_downgrade+0x740/0x740 [ 1352.570673] ? __fget+0x225/0x360 [ 1352.570683] ? do_vfs_ioctl+0xff0/0xff0 [ 1352.570695] ? security_file_ioctl+0x83/0xb0 [ 1352.570712] SyS_ioctl+0x7f/0xb0 [ 1352.570722] ? do_vfs_ioctl+0xff0/0xff0 [ 1352.586091] 0*64kB [ 1352.587155] do_syscall_64+0x1d5/0x640 [ 1352.594243] 0*128kB [ 1352.596368] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1352.600481] 0*256kB [ 1352.605390] RIP: 0033:0x466459 [ 1352.605395] RSP: 002b:00007fb4b9e26188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1352.605405] RAX: ffffffffffffffda RBX: 000000000056c0b0 RCX: 0000000000466459 [ 1352.605411] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1352.605416] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1352.605421] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c0b0 [ 1352.605426] R13: 00007fffe82eec4f R14: 00007fb4b9e26300 R15: 0000000000022000 [ 1352.630638] syz-executor.2: [ 1352.680617] 0*512kB [ 1352.684642] page allocation failure: order:0 [ 1352.687674] 0*1024kB [ 1352.690526] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1352.703258] 0*2048kB [ 1352.704442] (null) [ 1352.713148] 0*4096kB [ 1352.715160] syz-executor.2 cpuset= [ 1352.725588] Mem-Info: [ 1352.730559] / [ 1352.746229] = 0kB [ 1352.752827] mems_allowed=0-1 [ 1352.761470] active_anon:78226 inactive_anon:20981 isolated_anon:0 [ 1352.761470] active_file:13 inactive_file:365 isolated_file:0 [ 1352.761470] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1352.761470] slab_reclaimable:13810 slab_unreclaimable:125998 [ 1352.761470] mapped:35390 shmem:21291 pagetables:8821 bounce:0 [ 1352.761470] free:76981 free_pcp:90 free_cma:0 [ 1352.764366] CPU: 1 PID: 606 Comm: syz-executor.2 Not tainted 4.14.228-syzkaller #0 [ 1352.775220] Node 1 [ 1352.775261] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1352.779967] Normal: [ 1352.781169] Call Trace: [ 1352.781189] dump_stack+0x1b2/0x281 [ 1352.781203] warn_alloc.cold+0x96/0x1cc [ 1352.781215] ? zone_watermark_ok_safe+0x220/0x220 [ 1352.781225] ? usleep_range+0x130/0x130 [ 1352.781234] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1352.781246] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1352.781257] ? run_timer_softirq+0x5a0/0x5a0 [ 1352.784835] 3*4kB [ 1352.785377] __alloc_pages_nodemask+0x2127/0x2720 [ 1352.793330] (UM) [ 1352.823850] ? lock_acquire+0x170/0x3f0 [ 1352.823868] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1352.823877] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1352.823893] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1352.823911] alloc_pages_current+0x155/0x260 [ 1352.823922] ion_page_pool_alloc+0x118/0x1b0 [ 1352.823932] ion_system_heap_allocate+0x133/0x8c0 [ 1352.823943] ? _raw_spin_unlock+0x29/0x40 [ 1352.823952] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1352.823961] ? ion_system_contig_heap_create+0x130/0x130 [ 1352.823970] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1352.823980] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1352.823993] ion_alloc+0x27a/0x810 [ 1352.837625] Node 0 active_anon:295480kB inactive_anon:68020kB active_file:48kB inactive_file:1356kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:141456kB dirty:0kB writeback:0kB shmem:69128kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 241664kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1352.843305] ? ion_dma_buf_release+0x40/0x40 [ 1352.843319] ? __might_fault+0x177/0x1b0 [ 1352.843331] ion_ioctl+0xea/0x1f0 [ 1352.843340] ? ion_query_heaps+0x360/0x360 [ 1352.843355] ? __tun_chr_ioctl.isra.0+0x3310/0x3310 [ 1352.854600] Node 1 active_anon:17424kB inactive_anon:15904kB active_file:4kB inactive_file:304kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:204kB dirty:0kB writeback:0kB shmem:16036kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1352.855855] ? ion_query_heaps+0x360/0x360 [ 1352.855867] do_vfs_ioctl+0x75a/0xff0 [ 1352.855879] ? ioctl_preallocate+0x1a0/0x1a0 [ 1352.867556] Node 0 [ 1352.869777] ? lock_downgrade+0x740/0x740 [ 1352.869793] ? __fget+0x225/0x360 [ 1352.885328] DMA free:11076kB min:204kB low:252kB high:300kB active_anon:2100kB inactive_anon:8kB active_file:60kB inactive_file:36kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:56kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1352.886150] ? do_vfs_ioctl+0xff0/0xff0 [ 1352.890510] lowmem_reserve[]: [ 1352.892170] ? security_file_ioctl+0x83/0xb0 [ 1352.892190] SyS_ioctl+0x7f/0xb0 [ 1352.892204] ? do_vfs_ioctl+0xff0/0xff0 [ 1352.892215] do_syscall_64+0x1d5/0x640 [ 1352.892252] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1352.901962] 0 [ 1352.906984] RIP: 0033:0x466459 [ 1352.906989] RSP: 002b:00007f79418d2188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1352.907002] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1352.924229] 2717 [ 1352.924749] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1352.934282] 2*8kB [ 1352.935109] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1352.944677] 2718 [ 1352.944938] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1352.953289] (U) [ 1352.976579] R13: 00007ffef88b512f R14: 00007f79418d2300 R15: 0000000000022000 [ 1353.164230] 2718 2718 [ 1353.166747] Node 0 DMA32 free:181540kB min:36200kB low:45248kB high:54296kB active_anon:293680kB inactive_anon:68012kB active_file:992kB inactive_file:4608kB unevictable:0kB writepending:56kB present:3129332kB managed:2788136kB mlocked:0kB kernel_stack:12000kB pagetables:16440kB bounce:0kB free_pcp:308kB local_pcp:184kB free_cma:0kB [ 1353.230660] lowmem_reserve[]: 0 0 0 0 0 [ 1353.234684] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1353.283820] lowmem_reserve[]: 0 0 0 0 0 [ 1353.287849] Node 1 Normal free:377532kB min:53696kB low:67120kB high:80544kB active_anon:17424kB inactive_anon:15904kB active_file:0kB inactive_file:372kB unevictable:0kB writepending:4kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:6208kB pagetables:18788kB bounce:0kB free_pcp:160kB local_pcp:4kB free_cma:0kB [ 1353.316918] lowmem_reserve[]: 0 0 0 0 0 [ 1353.320975] Node 0 DMA: 9*4kB (ME) 10*8kB (ME) 22*16kB (UME) 19*32kB (UME) 7*64kB (UME) 1*128kB (U) 3*256kB (UE) 3*512kB (UME) 3*1024kB (UME) 2*2048kB (ME) 0*4096kB = 11124kB [ 1353.323183] warn_alloc_show_mem: 1 callbacks suppressed [ 1353.323186] Mem-Info: [ 1353.336856] Node 0 DMA32: 702*4kB (UME) 495*8kB (UME) 79*16kB (UME) 3*32kB (E) 2*64kB (UM) 18*128kB (U) 77*256kB (U) 29*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 45120kB [ 1353.336931] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1353.360599] active_anon:78301 inactive_anon:20981 isolated_anon:0 [ 1353.360599] active_file:257 inactive_file:1246 isolated_file:0 [ 1353.360599] unevictable:0 dirty:15 writeback:0 unstable:0 [ 1353.360599] slab_reclaimable:13810 slab_unreclaimable:126101 [ 1353.360599] mapped:53612 shmem:21291 pagetables:8895 bounce:0 [ 1353.360599] free:101440 free_pcp:83 free_cma:0 [ 1353.370676] Node 1 Normal: 1*4kB (M) 0*8kB 0*16kB 2*32kB (UM) 2330*64kB (UME) 499*128kB (UM) 349*256kB (U) 56*512kB (U) 8*1024kB (UM) 1*2048kB (M) 2*4096kB (UM) = 349508kB [ 1353.420675] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1353.429520] Node 0 hugepages_total=1 hugepages_free=1 hugepages_surp=1 hugepages_size=2048kB [ 1353.438206] 1*16kB (U) 2*32kB (UM) 884*64kB (UM) 6*128kB (U) 0*256kB 29*512kB (U) 6*1024kB (UM) 1*2048kB (M) 2*4096kB (UM) = 88684kB [ 1353.450489] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1353.459410] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1353.459442] Node 0 active_anon:295780kB inactive_anon:68020kB active_file:1028kB inactive_file:4612kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:214204kB dirty:56kB writeback:0kB shmem:69128kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 241664kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1353.468287] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1353.468292] 22808 total pagecache pages [ 1353.468302] 0 pages in swap cache [ 1353.468306] Swap cache stats: add 0, delete 0, find 0/0 [ 1353.468309] Free swap = 0kB [ 1353.468312] Total swap = 0kB [ 1353.468318] 2097051 pages RAM [ 1353.468321] 0 pages HighMem/MovableOnly [ 1353.468324] 363846 pages reserved [ 1353.468326] 0 pages cma reserved [ 1353.468332] Out of memory (oom_kill_allocating_task): Kill process 664 (systemd-journal) score 0 or sacrifice child [ 1353.468363] Killed process 664 (systemd-journal) total-vm:46096kB, anon-rss:456kB, file-rss:4kB, shmem-rss:1564kB [ 1353.472670] oom_reaper: reaped process 664 (systemd-journal), now anon-rss:0kB, file-rss:0kB, shmem-rss:1564kB 20:21:27 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r1, 0x800454cf, &(0x7f0000000240)) ioctl$TUNSETSNDBUF(r1, 0x400454d4, &(0x7f0000000040)=0x1000) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r2, 0x800454cf, &(0x7f0000000240)) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000080)={'lo\x00', @broadcast}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000180)={0x80000000, 0xa}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x1) ioctl$TUNGETFEATURES(r3, 0x800454cf, &(0x7f0000000240)) [ 1353.541204] Node 1 active_anon:17424kB inactive_anon:15904kB active_file:0kB inactive_file:372kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:244kB dirty:4kB writeback:0kB shmem:16036kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1353.562208] Node 0 hugepages_total=1 hugepages_free=1 hugepages_surp=1 hugepages_size=2048kB [ 1353.605616] Node 0 DMA free:11124kB min:204kB low:252kB high:300kB active_anon:2100kB inactive_anon:8kB active_file:36kB inactive_file:8kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:56kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1353.663813] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1353.689087] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1353.691437] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1353.713000] Node 0 DMA32 free:45028kB min:36200kB low:45248kB high:54296kB active_anon:293680kB inactive_anon:68012kB active_file:2000kB inactive_file:1664kB unevictable:0kB writepending:56kB present:3129332kB managed:2788136kB mlocked:0kB kernel_stack:12064kB pagetables:16736kB bounce:0kB free_pcp:844kB local_pcp:200kB free_cma:0kB [ 1353.730683] 23008 total pagecache pages [ 1353.791177] lowmem_reserve[]: 0 0 0 0 0 [ 1353.795207] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1353.805510] 0 pages in swap cache [ 1353.829994] systemd[1]: systemd-journald.service: Main process exited, code=killed, status=9/KILL [ 1353.875878] lowmem_reserve[]: 0 0 0 0 0 [ 1353.879895] Node 1 Normal free:53700kB min:53696kB low:67120kB high:80544kB active_anon:17524kB inactive_anon:15904kB active_file:1812kB inactive_file:2880kB unevictable:0kB writepending:4kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:6304kB pagetables:18788kB bounce:0kB free_pcp:336kB local_pcp:0kB free_cma:0kB [ 1353.885539] Swap cache stats: add 0, delete 0, find 0/0 [ 1353.937241] lowmem_reserve[]: 0 0 0 0 0 [ 1353.941331] Node 0 DMA: 8*4kB (ME) 10*8kB (UME) 17*16kB (UME) 18*32kB (UME) 6*64kB (UME) 2*128kB (UM) 3*256kB (UE) 3*512kB (UME) 3*1024kB (UME) 2*2048kB (ME) 0*4096kB = 11072kB [ 1353.957357] Node 0 DMA32: 1623*4kB (ME) 513*8kB (UME) 79*16kB (UME) 3*32kB (E) 1*64kB (M) 1*128kB (U) 35*256kB (U) 29*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 35956kB [ 1353.972509] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1353.983275] Node 1 Normal: 25*4kB (UM) 13*8kB (M) 10*16kB (M) 9*32kB (UM) 6*64kB (UME) 4*128kB (M) 99*256kB (UM) 53*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 54028kB [ 1353.997573] Free swap = 0kB [ 1353.998111] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1354.007784] Total swap = 0kB [ 1354.009911] Node 0 hugepages_total=1 hugepages_free=1 hugepages_surp=1 hugepages_size=2048kB [ 1354.009919] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1354.009926] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1354.009930] 22613 total pagecache pages [ 1354.009939] 0 pages in swap cache [ 1354.026761] 2097051 pages RAM [ 1354.030430] Swap cache stats: add 0, delete 0, find 0/0 [ 1354.030434] Free swap = 0kB [ 1354.030438] Total swap = 0kB [ 1354.030444] 2097051 pages RAM [ 1354.030447] 0 pages HighMem/MovableOnly [ 1354.030451] 363846 pages reserved [ 1354.030458] 0 pages cma reserved [ 1354.102080] 0 pages HighMem/MovableOnly [ 1354.118744] 363846 pages reserved [ 1354.124872] 0 pages cma reserved [ 1354.216577] systemd[1]: Failed to start Journal Service. [ 1354.244834] systemd[1]: systemd-journald.service: Unit entered failed state. [ 1354.279736] IPVS: ftp: loaded support on port[0] = 21 [ 1354.301236] systemd[1]: systemd-journald.service: Failed with result 'signal'. [ 1354.357047] systemd[1]: systemd-journald.service: Service has no hold-off time, scheduling restart. 20:21:28 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r1, 0x800454cf, &(0x7f0000000240)) ioctl$TUNSETSNDBUF(r1, 0x400454d4, &(0x7f0000000040)=0x1000) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r2, 0x800454cf, &(0x7f0000000240)) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000080)={'lo\x00', @broadcast}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000180)={0x80000000, 0xa}) openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) [ 1354.893399] syz-executor.0: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1354.899604] oom_reaper: reaped process 668 (syz-executor.3), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1354.912829] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 1354.935069] CPU: 0 PID: 676 Comm: syz-executor.0 Not tainted 4.14.228-syzkaller #0 [ 1354.937439] oom_reaper: reaped process 661 (syz-executor.1), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1354.942787] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1354.942791] Call Trace: [ 1354.942809] dump_stack+0x1b2/0x281 [ 1354.942824] warn_alloc.cold+0x96/0x1cc [ 1354.942836] ? zone_watermark_ok_safe+0x220/0x220 [ 1354.942860] __alloc_pages_nodemask+0x2127/0x2720 [ 1354.942870] ? io_schedule_timeout+0x140/0x140 [ 1354.942885] ? lock_acquire+0x170/0x3f0 [ 1354.942900] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1355.000032] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1355.005483] ? __mutex_unlock_slowpath+0x75/0x770 [ 1355.010318] ? __sanitizer_cov_trace_pc+0x3d/0x50 [ 1355.015171] alloc_pages_current+0x155/0x260 [ 1355.019583] ion_page_pool_alloc+0x118/0x1b0 [ 1355.023993] ion_system_heap_allocate+0x133/0x8c0 [ 1355.028834] ? ion_alloc+0x187/0x810 [ 1355.029821] syz-executor.1 invoked oom-killer: gfp_mask=0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1355.032560] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1355.032570] ? ion_system_contig_heap_create+0x130/0x130 [ 1355.032580] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1355.032592] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1355.042904] (null) [ 1355.048325] ion_alloc+0x204/0x810 [ 1355.053771] , order=0, oom_score_adj=1000 [ 1355.058756] ? ion_dma_buf_release+0x40/0x40 [ 1355.063589] syz-executor.1 cpuset= [ 1355.065710] ? __might_fault+0x177/0x1b0 [ 1355.069221] / [ 1355.073441] ion_ioctl+0xea/0x1f0 [ 1355.077845] mems_allowed=0-1 [ 1355.081344] ? ion_query_heaps+0x360/0x360 [ 1355.081359] ? __tun_chr_ioctl.isra.0+0x3310/0x3310 [ 1355.081369] ? ion_query_heaps+0x360/0x360 [ 1355.107040] do_vfs_ioctl+0x75a/0xff0 [ 1355.110831] ? ioctl_preallocate+0x1a0/0x1a0 [ 1355.115228] ? lock_downgrade+0x740/0x740 [ 1355.119384] ? __fget+0x225/0x360 [ 1355.122823] ? do_vfs_ioctl+0xff0/0xff0 [ 1355.126785] ? security_file_ioctl+0x83/0xb0 [ 1355.131181] SyS_ioctl+0x7f/0xb0 [ 1355.134539] ? do_vfs_ioctl+0xff0/0xff0 [ 1355.138504] do_syscall_64+0x1d5/0x640 [ 1355.142395] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1355.147572] RIP: 0033:0x466459 [ 1355.150762] RSP: 002b:00007fb4b9e68188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1355.158469] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1355.165728] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1355.172986] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1355.180240] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1355.187494] R13: 00007fffe82eec4f R14: 00007fb4b9e68300 R15: 0000000000022000 [ 1355.194766] CPU: 1 PID: 661 Comm: syz-executor.1 Not tainted 4.14.228-syzkaller #0 [ 1355.202478] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1355.211828] Call Trace: [ 1355.214418] dump_stack+0x1b2/0x281 [ 1355.218047] dump_header+0x178/0x82f [ 1355.221760] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1355.226863] ? ___ratelimit+0x2cd/0x530 [ 1355.230837] oom_kill_process.cold+0x10/0xb18 [ 1355.235338] out_of_memory+0xe3e/0x1190 [ 1355.239314] ? oom_killer_disable+0x1c0/0x1c0 [ 1355.243809] ? mutex_trylock+0x152/0x1a0 [ 1355.247876] __alloc_pages_nodemask+0x23e1/0x2720 [ 1355.252724] ? lock_acquire+0x170/0x3f0 [ 1355.257219] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1355.262065] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1355.266553] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1355.272003] alloc_pages_current+0x155/0x260 [ 1355.276403] ion_page_pool_alloc+0x118/0x1b0 [ 1355.280807] ion_system_heap_allocate+0x133/0x8c0 [ 1355.285639] ? ion_alloc+0x187/0x810 [ 1355.289347] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1355.294801] ? ion_system_contig_heap_create+0x130/0x130 [ 1355.300242] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1355.305267] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1355.310106] ion_alloc+0x204/0x810 [ 1355.313662] ? ion_dma_buf_release+0x40/0x40 [ 1355.318061] ? __might_fault+0x177/0x1b0 [ 1355.322112] ion_ioctl+0xea/0x1f0 [ 1355.325567] ? ion_query_heaps+0x360/0x360 [ 1355.329799] ? __tun_chr_ioctl.isra.0+0x3310/0x3310 [ 1355.334806] ? ion_query_heaps+0x360/0x360 [ 1355.339044] do_vfs_ioctl+0x75a/0xff0 [ 1355.342841] ? ioctl_preallocate+0x1a0/0x1a0 [ 1355.347238] ? lock_downgrade+0x740/0x740 [ 1355.351376] ? __fget+0x225/0x360 [ 1355.354820] ? do_vfs_ioctl+0xff0/0xff0 [ 1355.358788] ? security_file_ioctl+0x83/0xb0 [ 1355.363187] SyS_ioctl+0x7f/0xb0 [ 1355.366540] ? do_vfs_ioctl+0xff0/0xff0 [ 1355.370505] do_syscall_64+0x1d5/0x640 [ 1355.374387] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1355.379565] RIP: 0033:0x466459 [ 1355.382743] RSP: 002b:00007fdd4fdf9188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1355.390437] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1355.397700] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1355.404958] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1355.412216] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1355.419471] R13: 00007ffc5b7c415f R14: 00007fdd4fdf9300 R15: 0000000000022000 [ 1355.428533] Mem-Info: [ 1355.431005] active_anon:77726 inactive_anon:20986 isolated_anon:0 [ 1355.431005] active_file:16 inactive_file:16 isolated_file:0 [ 1355.431005] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1355.431005] slab_reclaimable:13796 slab_unreclaimable:125377 [ 1355.431005] mapped:52225 shmem:21299 pagetables:8880 bounce:0 [ 1355.431005] free:13911 free_pcp:105 free_cma:0 [ 1355.441308] syz-executor.3: [ 1355.465391] Node 0 active_anon:293252kB inactive_anon:68008kB active_file:28kB inactive_file:28kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:208900kB dirty:0kB writeback:0kB shmem:69120kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 239616kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1355.473663] page allocation failure: order:0 [ 1355.498577] Node 1 active_anon:17572kB inactive_anon:15936kB active_file:36kB inactive_file:36kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:16076kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1355.505241] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1355.538830] Node 0 [ 1355.539892] syz-executor.3 cpuset= [ 1355.539911] DMA free:10972kB min:204kB low:252kB high:300kB active_anon:2100kB inactive_anon:8kB active_file:8kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:56kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1355.539920] lowmem_reserve[]: [ 1355.542180] / [ 1355.545701] 0 [ 1355.574352] mems_allowed=0-1 [ 1355.581437] CPU: 1 PID: 668 Comm: syz-executor.3 Not tainted 4.14.228-syzkaller #0 [ 1355.583543] 2717 [ 1355.589135] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1355.589142] 2718 [ 1355.591181] Call Trace: [ 1355.591202] dump_stack+0x1b2/0x281 [ 1355.591216] warn_alloc.cold+0x96/0x1cc [ 1355.591228] ? zone_watermark_ok_safe+0x220/0x220 [ 1355.591238] ? usleep_range+0x130/0x130 [ 1355.591248] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1355.591260] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1355.609224] 2718 [ 1355.612797] ? run_timer_softirq+0x5a0/0x5a0 [ 1355.612816] __alloc_pages_nodemask+0x2127/0x2720 [ 1355.612834] ? lock_acquire+0x170/0x3f0 [ 1355.617660] 2718 [ 1355.621636] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1355.621647] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1355.621664] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1355.621684] alloc_pages_current+0x155/0x260 [ 1355.621696] ion_page_pool_alloc+0x118/0x1b0 [ 1355.621706] ion_system_heap_allocate+0x133/0x8c0 [ 1355.621716] ? ion_alloc+0x187/0x810 [ 1355.639010] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1355.646767] Node 0 [ 1355.647792] ? ion_system_contig_heap_create+0x130/0x130 [ 1355.649856] DMA32 free:17972kB min:36200kB low:45248kB high:54296kB active_anon:291152kB inactive_anon:68000kB active_file:20kB inactive_file:32kB unevictable:0kB writepending:0kB present:3129332kB managed:2788136kB mlocked:0kB kernel_stack:12000kB pagetables:16500kB bounce:0kB free_pcp:268kB local_pcp:128kB free_cma:0kB [ 1355.654680] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1355.654693] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1355.654703] ion_alloc+0x204/0x810 [ 1355.654717] ? ion_dma_buf_release+0x40/0x40 [ 1355.654730] ? __might_fault+0x177/0x1b0 [ 1355.654741] ion_ioctl+0xea/0x1f0 [ 1355.654751] ? ion_query_heaps+0x360/0x360 [ 1355.654764] ? __tun_chr_ioctl.isra.0+0x3310/0x3310 [ 1355.667972] lowmem_reserve[]: [ 1355.669061] ? ion_query_heaps+0x360/0x360 [ 1355.674128] 0 [ 1355.678272] do_vfs_ioctl+0x75a/0xff0 [ 1355.678289] ? ioctl_preallocate+0x1a0/0x1a0 [ 1355.689982] 0 [ 1355.695089] ? lock_downgrade+0x740/0x740 [ 1355.695104] ? __fget+0x225/0x360 [ 1355.695113] ? do_vfs_ioctl+0xff0/0xff0 [ 1355.695126] ? security_file_ioctl+0x83/0xb0 [ 1355.695136] SyS_ioctl+0x7f/0xb0 [ 1355.732540] Mem-Info: [ 1355.733496] ? do_vfs_ioctl+0xff0/0xff0 [ 1355.737020] active_anon:77706 inactive_anon:20986 isolated_anon:0 [ 1355.737020] active_file:16 inactive_file:16 isolated_file:0 [ 1355.737020] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1355.737020] slab_reclaimable:13796 slab_unreclaimable:125378 [ 1355.737020] mapped:52225 shmem:21299 pagetables:8879 bounce:0 [ 1355.737020] free:13911 free_pcp:107 free_cma:0 [ 1355.741402] do_syscall_64+0x1d5/0x640 [ 1355.741417] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1355.741425] RIP: 0033:0x466459 [ 1355.741430] RSP: 002b:00007f6ba9361188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1355.741440] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1355.741446] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1355.741451] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1355.741457] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1355.741462] R13: 00007ffd9352709f R14: 00007f6ba9361300 R15: 0000000000022000 [ 1355.912338] 0 0 0 [ 1355.914515] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1355.954676] IPVS: ftp: loaded support on port[0] = 21 [ 1355.976804] lowmem_reserve[]: 0 0 0 0 0 [ 1355.983747] Node 1 Normal free:130688kB min:53696kB low:67120kB high:80544kB active_anon:17572kB inactive_anon:15936kB active_file:36kB inactive_file:2036kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:6304kB pagetables:18960kB bounce:0kB free_pcp:660kB local_pcp:40kB free_cma:0kB [ 1356.039612] lowmem_reserve[]: 0 0 0 0 0 [ 1356.059463] Node 0 DMA: 18*4kB (UME) 9*8kB (ME) 9*16kB (UME) 16*32kB (UME) 7*64kB (UME) 3*128kB (UM) 3*256kB (UE) 3*512kB (UME) 3*1024kB (UME) 2*2048kB (ME) 0*4096kB = 11104kB [ 1356.121362] Node 0 DMA32: 2401*4kB (UMEH) 921*8kB (UMEH) 236*16kB (UME) 263*32kB (UEH) 13*64kB (UMEH) 12*128kB (UM) 19*256kB (U) 3*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 37932kB [ 1356.153442] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1356.186045] Node 1 Normal: 400*4kB (U) 335*8kB (U) 264*16kB (U) 1130*32kB (U) 5*64kB (U) 2*128kB (U) 3*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 46008kB [ 1356.208871] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1356.217891] Node 0 active_anon:293252kB inactive_anon:68008kB active_file:24kB inactive_file:132kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:209000kB dirty:0kB writeback:0kB shmem:69120kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 239616kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1356.252334] Node 0 hugepages_total=1 hugepages_free=1 hugepages_surp=1 hugepages_size=2048kB [ 1356.261983] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1356.272990] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1356.279203] Node 1 active_anon:17572kB inactive_anon:15936kB active_file:576kB inactive_file:508kB unevictable:0kB isolated(anon):0kB isolated(file):80kB mapped:1124kB dirty:0kB writeback:0kB shmem:16076kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1356.282363] 21661 total pagecache pages [ 1356.310622] Bluetooth: hci1 command 0x0409 tx timeout [ 1356.316058] 0 pages in swap cache [ 1356.322926] Swap cache stats: add 0, delete 0, find 0/0 [ 1356.328374] Free swap = 0kB [ 1356.334289] Total swap = 0kB [ 1356.337392] 2097051 pages RAM [ 1356.340612] 0 pages HighMem/MovableOnly [ 1356.344683] 363846 pages reserved [ 1356.348208] 0 pages cma reserved [ 1356.366900] Node 0 DMA free:11012kB min:204kB low:252kB high:300kB active_anon:2100kB inactive_anon:8kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:56kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1356.393671] Bluetooth: hci5 command 0x0409 tx timeout [ 1356.400852] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1356.405974] Node 0 DMA32 free:35916kB min:36200kB low:45248kB high:54296kB active_anon:291152kB inactive_anon:68000kB active_file:24kB inactive_file:112kB unevictable:0kB writepending:0kB present:3129332kB managed:2788136kB mlocked:0kB kernel_stack:12032kB pagetables:16500kB bounce:0kB free_pcp:864kB local_pcp:220kB free_cma:0kB [ 1356.438132] lowmem_reserve[]: 0 0 0 0 0 [ 1356.443346] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1356.476165] lowmem_reserve[]: 0 [ 1356.476176] syz-executor.2: page allocation failure: order:4 [ 1356.479449] 0 0 0 0 [ 1356.479466] Node 1 Normal free:48672kB min:53696kB low:67120kB high:80544kB active_anon:17572kB inactive_anon:15936kB active_file:168kB inactive_file:308kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:6336kB pagetables:18960kB bounce:0kB free_pcp:36kB local_pcp:0kB free_cma:0kB [ 1356.479493] lowmem_reserve[]: [ 1356.488706] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1356.522611] 0 0 0 0 0 [ 1356.535073] Node 0 DMA: 29*4kB (UME) 10*8kB (UME) 14*16kB (UME) 15*32kB (UME) 4*64kB (UME) 3*128kB (UM) 3*256kB (UE) 3*512kB (UME) 3*1024kB (UME) 2*2048kB (ME) 0*4096kB = 11012kB [ 1356.549802] (null) [ 1356.553960] Node 0 DMA32: 2139*4kB (UME) 912*8kB (UME) 349*16kB (UME) 413*32kB (UEH) 10*64kB (UH) 2*128kB (U) 0*256kB 1*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 36060kB [ 1356.559279] syz-executor.2 cpuset= [ 1356.570419] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1356.580285] / [ 1356.587498] Node 1 Normal: 441*4kB (UM) 366*8kB (UM) 289*16kB (UM) 1150*32kB (U) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 46116kB [ 1356.596421] mems_allowed=0-1 [ 1356.605741] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1356.612523] CPU: 1 PID: 713 Comm: syz-executor.2 Not tainted 4.14.228-syzkaller #0 [ 1356.617944] Node 0 hugepages_total=1 hugepages_free=1 hugepages_surp=1 hugepages_size=2048kB [ 1356.622420] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1356.622425] Call Trace: [ 1356.622443] dump_stack+0x1b2/0x281 [ 1356.622457] warn_alloc.cold+0x96/0x1cc [ 1356.622469] ? zone_watermark_ok_safe+0x220/0x220 [ 1356.622492] __alloc_pages_nodemask+0x2127/0x2720 [ 1356.622501] ? __schedule+0x893/0x1de0 [ 1356.622516] ? lock_acquire+0x170/0x3f0 [ 1356.622531] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1356.633652] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1356.640447] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1356.644999] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1356.646611] ? __mutex_unlock_slowpath+0x75/0x770 [ 1356.653109] 21361 total pagecache pages [ 1356.655389] alloc_pages_current+0x155/0x260 [ 1356.660203] 0 pages in swap cache [ 1356.664085] ion_page_pool_alloc+0x118/0x1b0 [ 1356.664095] ion_system_heap_allocate+0x133/0x8c0 [ 1356.664105] ? ion_alloc+0x187/0x810 [ 1356.664115] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1356.664124] ? ion_system_contig_heap_create+0x130/0x130 [ 1356.664137] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1356.668153] Swap cache stats: add 0, delete 0, find 0/0 [ 1356.672988] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1356.673000] ion_alloc+0x204/0x810 [ 1356.673014] ? ion_dma_buf_release+0x40/0x40 [ 1356.673025] ? __might_fault+0x177/0x1b0 [ 1356.673035] ion_ioctl+0xea/0x1f0 [ 1356.673043] ? ion_query_heaps+0x360/0x360 [ 1356.673058] ? __tun_chr_ioctl.isra.0+0x3310/0x3310 [ 1356.673065] ? ion_query_heaps+0x360/0x360 [ 1356.673074] do_vfs_ioctl+0x75a/0xff0 [ 1356.673086] ? ioctl_preallocate+0x1a0/0x1a0 [ 1356.673095] ? lock_downgrade+0x740/0x740 [ 1356.673106] ? __fget+0x225/0x360 [ 1356.673114] ? do_vfs_ioctl+0xff0/0xff0 [ 1356.673126] ? security_file_ioctl+0x83/0xb0 [ 1356.673136] SyS_ioctl+0x7f/0xb0 [ 1356.807707] ? do_vfs_ioctl+0xff0/0xff0 [ 1356.811677] do_syscall_64+0x1d5/0x640 [ 1356.815557] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1356.820743] RIP: 0033:0x466459 [ 1356.823935] RSP: 002b:00007f79418d2188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1356.831638] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1356.838909] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1356.846172] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1356.853443] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1356.860708] R13: 00007ffef88b512f R14: 00007f79418d2300 R15: 0000000000022000 [ 1356.873608] Free swap = 0kB [ 1356.876648] Total swap = 0kB [ 1356.879657] 2097051 pages RAM [ 1356.882901] 0 pages HighMem/MovableOnly [ 1356.886872] 363846 pages reserved [ 1356.890314] 0 pages cma reserved [ 1356.900417] Out of memory (oom_kill_allocating_task): Kill process 661 (syz-executor.1) score 0 or sacrifice child [ 1356.902643] warn_alloc_show_mem: 1 callbacks suppressed [ 1356.902646] Mem-Info: [ 1356.917292] Killed process 661 (syz-executor.1) total-vm:93384kB, anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1356.920612] active_anon:77706 inactive_anon:20986 isolated_anon:0 [ 1356.920612] active_file:34 inactive_file:16 isolated_file:0 [ 1356.920612] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1356.920612] slab_reclaimable:13796 slab_unreclaimable:125101 [ 1356.920612] mapped:52256 shmem:21299 pagetables:8879 bounce:0 [ 1356.920612] free:23030 free_pcp:7 free_cma:0 [ 1356.928904] syz-executor.1: [ 1356.963962] Node 0 active_anon:293252kB inactive_anon:68008kB active_file:24kB inactive_file:20kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:209000kB dirty:0kB writeback:0kB shmem:69120kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 239616kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1356.972609] syz-executor.4 invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask= [ 1356.999633] page allocation failure: order:0 [ 1357.003698] syz-executor.3: [ 1357.020575] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1357.044711] page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1357.054573] (null), order=1, oom_score_adj=0 [ 1357.059645] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 1357.064815] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 1357.067403] syz-executor.3 cpuset= [ 1357.069950] CPU: 0 PID: 661 Comm: syz-executor.1 Not tainted 4.14.228-syzkaller #0 [ 1357.069952] / mems_allowed=0-1 [ 1357.073479] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1357.073484] Call Trace: [ 1357.073504] dump_stack+0x1b2/0x281 [ 1357.073518] warn_alloc.cold+0x96/0x1cc [ 1357.073529] ? zone_watermark_ok_safe+0x220/0x220 [ 1357.073546] ? wait_for_completion_io+0x10/0x10 [ 1357.073559] __alloc_pages_nodemask+0x2127/0x2720 [ 1357.073576] ? lock_acquire+0x170/0x3f0 [ 1357.073590] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1357.100574] Node 1 active_anon:17604kB inactive_anon:15936kB active_file:48kB inactive_file:28kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:8kB dirty:12kB writeback:0kB shmem:16076kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1357.103938] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1357.108753] Node 0 [ 1357.113431] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1357.113451] alloc_pages_current+0x155/0x260 [ 1357.130566] DMA free:10972kB min:204kB low:252kB high:300kB active_anon:2100kB inactive_anon:8kB active_file:0kB inactive_file:8kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:56kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1357.154050] ion_page_pool_alloc+0x118/0x1b0 [ 1357.154061] ion_system_heap_allocate+0x133/0x8c0 [ 1357.154071] ? ion_alloc+0x187/0x810 [ 1357.180551] lowmem_reserve[]: [ 1357.196531] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1357.196543] ? ion_system_contig_heap_create+0x130/0x130 [ 1357.196556] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1357.220551] 0 [ 1357.223400] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1357.228401] 2717 [ 1357.230197] ion_alloc+0x204/0x810 [ 1357.240747] ? ion_dma_buf_release+0x40/0x40 [ 1357.245163] ? __might_fault+0x177/0x1b0 [ 1357.249216] ion_ioctl+0xea/0x1f0 [ 1357.250553] 2718 [ 1357.252656] ? ion_query_heaps+0x360/0x360 [ 1357.252663] 2718 [ 1357.254713] ? __tun_chr_ioctl.isra.0+0x3310/0x3310 [ 1357.258938] 2718 [ 1357.260981] ? ion_query_heaps+0x360/0x360 [ 1357.260992] do_vfs_ioctl+0x75a/0xff0 [ 1357.261007] ? ioctl_preallocate+0x1a0/0x1a0 [ 1357.280486] ? lock_downgrade+0x740/0x740 [ 1357.284620] Node 0 [ 1357.284630] ? __fget+0x225/0x360 [ 1357.284641] ? do_vfs_ioctl+0xff0/0xff0 [ 1357.286896] DMA32 free:18100kB min:36200kB low:45248kB high:54296kB active_anon:291216kB inactive_anon:68000kB active_file:36kB inactive_file:24kB unevictable:0kB writepending:0kB present:3129332kB managed:2788136kB mlocked:0kB kernel_stack:12032kB pagetables:16512kB bounce:0kB free_pcp:120kB local_pcp:0kB free_cma:0kB [ 1357.290324] ? security_file_ioctl+0x83/0xb0 [ 1357.310552] lowmem_reserve[]: [ 1357.322644] SyS_ioctl+0x7f/0xb0 [ 1357.322654] ? do_vfs_ioctl+0xff0/0xff0 [ 1357.322666] do_syscall_64+0x1d5/0x640 [ 1357.322680] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1357.340555] 0 [ 1357.341408] RIP: 0033:0x466459 [ 1357.346571] 0 [ 1357.348363] RSP: 002b:00007fdd4fdf9188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1357.361003] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1357.368266] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1357.370555] 0 [ 1357.375529] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1357.375537] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1357.377329] 0 [ 1357.384581] R13: 00007ffc5b7c415f R14: 00007fdd4fdf9300 R15: 0000000000022000 [ 1357.430613] syz-executor.0: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1357.442545] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 1357.448431] CPU: 1 PID: 668 Comm: syz-executor.3 Not tainted 4.14.228-syzkaller #0 [ 1357.456149] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1357.465491] Call Trace: [ 1357.468072] dump_stack+0x1b2/0x281 [ 1357.471696] warn_alloc.cold+0x96/0x1cc [ 1357.475691] ? zone_watermark_ok_safe+0x220/0x220 [ 1357.480535] __alloc_pages_nodemask+0x2127/0x2720 [ 1357.485371] ? finish_task_switch+0x178/0x610 [ 1357.489872] ? switch_mm_irqs_off+0x601/0xeb0 [ 1357.494363] ? lock_acquire+0x170/0x3f0 [ 1357.498332] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1357.503174] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1357.508620] ? __mutex_unlock_slowpath+0x75/0x770 [ 1357.513475] alloc_pages_current+0x155/0x260 [ 1357.517880] ion_page_pool_alloc+0x118/0x1b0 [ 1357.522308] ion_system_heap_allocate+0x133/0x8c0 [ 1357.527160] ? _raw_spin_unlock+0x29/0x40 [ 1357.531304] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1357.536232] ? ion_system_contig_heap_create+0x130/0x130 [ 1357.541681] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1357.546696] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1357.551562] ion_alloc+0x27a/0x810 [ 1357.555100] ? ion_dma_buf_release+0x40/0x40 [ 1357.559525] ? __might_fault+0x177/0x1b0 [ 1357.563590] ion_ioctl+0xea/0x1f0 [ 1357.567039] ? ion_query_heaps+0x360/0x360 [ 1357.571279] ? __tun_chr_ioctl.isra.0+0x3310/0x3310 [ 1357.576323] ? ion_query_heaps+0x360/0x360 [ 1357.580552] do_vfs_ioctl+0x75a/0xff0 [ 1357.584347] ? ioctl_preallocate+0x1a0/0x1a0 [ 1357.588763] ? lock_downgrade+0x740/0x740 [ 1357.592903] ? __fget+0x225/0x360 [ 1357.596345] ? do_vfs_ioctl+0xff0/0xff0 [ 1357.600326] ? security_file_ioctl+0x83/0xb0 [ 1357.604729] SyS_ioctl+0x7f/0xb0 [ 1357.608112] ? do_vfs_ioctl+0xff0/0xff0 [ 1357.612084] do_syscall_64+0x1d5/0x640 [ 1357.615971] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1357.621156] RIP: 0033:0x466459 [ 1357.624338] RSP: 002b:00007f6ba9361188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1357.632035] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1357.639299] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1357.646555] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1357.653826] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1357.661089] R13: 00007ffd9352709f R14: 00007f6ba9361300 R15: 0000000000022000 [ 1357.670608] CPU: 0 PID: 676 Comm: syz-executor.0 Not tainted 4.14.228-syzkaller #0 [ 1357.678327] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1357.687682] Call Trace: [ 1357.690282] dump_stack+0x1b2/0x281 [ 1357.690563] 0 [ 1357.693908] warn_alloc.cold+0x96/0x1cc [ 1357.693921] ? zone_watermark_ok_safe+0x220/0x220 [ 1357.693932] ? usleep_range+0x130/0x130 [ 1357.693941] ? try_to_free_pages+0x23f/0x6e0 [ 1357.693951] ? _find_next_bit+0xdb/0x100 [ 1357.693962] ? run_timer_softirq+0x5a0/0x5a0 [ 1357.693979] __alloc_pages_nodemask+0x2127/0x2720 [ 1357.693994] ? lock_acquire+0x170/0x3f0 [ 1357.699789] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1357.699800] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1357.699817] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1357.699836] alloc_pages_current+0x155/0x260 [ 1357.699848] ion_page_pool_alloc+0x118/0x1b0 [ 1357.699858] ion_system_heap_allocate+0x133/0x8c0 [ 1357.699868] ? ion_alloc+0x187/0x810 [ 1357.705581] Node 0 [ 1357.708656] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1357.708667] ? ion_system_contig_heap_create+0x130/0x130 [ 1357.708677] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1357.708689] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1357.708700] ion_alloc+0x204/0x810 [ 1357.708713] ? ion_dma_buf_release+0x40/0x40 [ 1357.708726] ? __might_fault+0x177/0x1b0 [ 1357.708739] ion_ioctl+0xea/0x1f0 [ 1357.708748] ? ion_query_heaps+0x360/0x360 [ 1357.708762] ? __tun_chr_ioctl.isra.0+0x3310/0x3310 [ 1357.708769] ? ion_query_heaps+0x360/0x360 [ 1357.708780] do_vfs_ioctl+0x75a/0xff0 [ 1357.708791] ? ioctl_preallocate+0x1a0/0x1a0 [ 1357.714030] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1357.717232] ? lock_downgrade+0x740/0x740 [ 1357.717246] ? __fget+0x225/0x360 [ 1357.717256] ? do_vfs_ioctl+0xff0/0xff0 [ 1357.717268] ? security_file_ioctl+0x83/0xb0 [ 1357.717278] SyS_ioctl+0x7f/0xb0 [ 1357.717286] ? do_vfs_ioctl+0xff0/0xff0 [ 1357.717297] do_syscall_64+0x1d5/0x640 [ 1357.717313] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1357.717321] RIP: 0033:0x466459 [ 1357.717326] RSP: 002b:00007fb4b9e68188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1357.717337] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1357.717342] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1357.717348] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1357.717354] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1357.717359] R13: 00007fffe82eec4f R14: 00007fb4b9e68300 R15: 0000000000022000 [ 1357.717508] CPU: 0 PID: 673 Comm: syz-executor.4 Not tainted 4.14.228-syzkaller #0 [ 1357.725856] lowmem_reserve[]: [ 1357.726587] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1357.726591] Call Trace: [ 1357.726606] dump_stack+0x1b2/0x281 [ 1357.726618] dump_header+0x178/0x82f [ 1357.726629] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1357.726638] ? ___ratelimit+0x2cd/0x530 [ 1357.726648] oom_kill_process.cold+0x10/0xb18 [ 1357.726667] out_of_memory+0xe3e/0x1190 [ 1357.726681] ? oom_killer_disable+0x1c0/0x1c0 [ 1357.731472] 0 [ 1357.735473] ? mutex_trylock+0x152/0x1a0 [ 1357.735487] __alloc_pages_nodemask+0x23e1/0x2720 [ 1357.735508] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1357.735519] ? kernfs_add_one+0x2e5/0x3a0 [ 1357.735537] ? mark_held_locks+0xa6/0xf0 [ 1357.735548] ? cache_grow_begin+0x41/0x630 [ 1357.735559] cache_grow_begin+0x91/0x630 [ 1357.735568] ? cache_grow_begin+0x91/0x630 [ 1357.735578] fallback_alloc+0x207/0x2c0 [ 1357.735591] kmem_cache_alloc_trace+0x1f1/0x3d0 [ 1357.735603] kobject_uevent_env+0x20c/0xf40 [ 1357.740843] 0 [ 1357.745521] ? internal_create_group+0x48f/0x710 [ 1357.745536] netdev_queue_update_kobjects+0x296/0x350 [ 1357.745550] netdev_register_kobject+0x34a/0x410 [ 1357.745562] register_netdevice+0x955/0xe40 [ 1357.745572] ? netdev_change_features+0xa0/0xa0 [ 1357.745585] rtnl_newlink+0xfab/0x1860 [ 1357.745592] ? rtnl_newlink+0x43d/0x1860 [ 1357.745600] ? __lock_acquire+0x5fc/0x3f20 [ 1357.745617] ? team_ethtool_get_drvinfo+0xe0/0xe0 [ 1357.745625] ? trace_hardirqs_on+0x10/0x10 [ 1357.745633] ? rtnl_dellink+0x6a0/0x6a0 [ 1357.745640] ? trace_hardirqs_on+0x10/0x10 [ 1357.745653] ? __read_once_size_nocheck.constprop.0+0x10/0x10 [ 1357.750800] 0 [ 1357.754448] ? deref_stack_reg+0x124/0x1a0 [ 1357.754489] ? lock_acquire+0x170/0x3f0 [ 1357.754497] ? lock_downgrade+0x740/0x740 [ 1357.754508] ? rtnl_dellink+0x6a0/0x6a0 [ 1357.754516] rtnetlink_rcv_msg+0x3be/0xb10 [ 1357.754527] ? rtnl_calcit.isra.0+0x3a0/0x3a0 [ 1357.759793] 0 [ 1357.763078] ? __netlink_lookup+0x345/0x5d0 [ 1357.763093] netlink_rcv_skb+0x125/0x390 [ 1357.763103] ? rtnl_calcit.isra.0+0x3a0/0x3a0 [ 1357.763112] ? netlink_ack+0x9a0/0x9a0 [ 1357.763128] netlink_unicast+0x437/0x610 [ 1357.763138] ? netlink_sendskb+0xd0/0xd0 [ 1357.763154] ? __check_object_size+0x179/0x230 [ 1357.763165] netlink_sendmsg+0x62e/0xb80 [ 1357.763177] ? nlmsg_notify+0x170/0x170 [ 1357.763190] ? security_socket_sendmsg+0x83/0xb0 [ 1357.765883] 0 [ 1357.770856] ? nlmsg_notify+0x170/0x170 [ 1357.770865] sock_sendmsg+0xb5/0x100 [ 1357.770874] SyS_sendto+0x1c7/0x2c0 [ 1357.770882] ? SyS_getpeername+0x220/0x220 [ 1357.770906] ? up_read+0x17/0x30 [ 1357.770916] ? __do_page_fault+0x159/0xad0 [ 1357.770924] ? do_syscall_64+0x4c/0x640 [ 1357.770931] ? SyS_getpeername+0x220/0x220 [ 1357.770940] do_syscall_64+0x1d5/0x640 [ 1357.770953] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1357.770961] RIP: 0033:0x4193ec [ 1357.770965] RSP: 002b:00007ffd79f468f0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 1357.770975] RAX: ffffffffffffffda RBX: 00000000014a4320 RCX: 00000000004193ec [ 1357.770980] RDX: 0000000000000038 RSI: 00000000014a4370 RDI: 0000000000000003 [ 1357.770984] RBP: 0000000000000000 R08: 00007ffd79f46944 R09: 000000000000000c [ 1357.770989] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1357.770993] R13: 00000000014a4370 R14: 0000000000000003 R15: 0000000000000000 [ 1357.830582] Mem-Info: [ 1357.900681] active_anon:77730 inactive_anon:20986 isolated_anon:0 [ 1357.900681] active_file:131 inactive_file:1509 isolated_file:0 [ 1357.900681] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1357.900681] slab_reclaimable:13796 slab_unreclaimable:125077 [ 1357.900681] mapped:53375 shmem:21299 pagetables:8885 bounce:0 [ 1357.900681] free:72809 free_pcp:702 free_cma:0 [ 1357.912562] Node 1 [ 1357.963160] Node 0 active_anon:293316kB inactive_anon:68008kB active_file:600kB inactive_file:4296kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:212400kB dirty:0kB writeback:0kB shmem:69120kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 239616kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1358.170682] systemd[1]: Starting Load/Save RF Kill Switch Status... [ 1358.268904] warn_alloc_show_mem: 2 callbacks suppressed [ 1358.268908] Mem-Info: [ 1358.322385] Normal free:153884kB min:53696kB low:67120kB high:80544kB active_anon:17604kB inactive_anon:15936kB active_file:224kB inactive_file:1644kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:6304kB pagetables:18972kB bounce:0kB free_pcp:1408kB local_pcp:732kB free_cma:0kB [ 1358.330422] active_anon:77730 inactive_anon:20986 isolated_anon:0 [ 1358.330422] active_file:321 inactive_file:1690 isolated_file:0 [ 1358.330422] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1358.330422] slab_reclaimable:13796 slab_unreclaimable:125210 [ 1358.330422] mapped:53730 shmem:21299 pagetables:8885 bounce:0 [ 1358.330422] free:67802 free_pcp:597 free_cma:0 [ 1358.333124] lowmem_reserve[]: [ 1358.353206] Node 0 active_anon:293316kB inactive_anon:68008kB active_file:1060kB inactive_file:5116kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:213608kB dirty:0kB writeback:0kB shmem:69120kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 239616kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1358.390156] 0 [ 1358.430288] Bluetooth: hci1 command 0x041b tx timeout [ 1358.468396] Bluetooth: hci5 command 0x041b tx timeout [ 1358.469928] Node 1 active_anon:17604kB inactive_anon:15936kB active_file:224kB inactive_file:1644kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:1312kB dirty:0kB writeback:0kB shmem:16076kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1358.473896] 0 0 0 0 [ 1358.503556] Node 0 DMA: 29*4kB (UME) 10*8kB (UME) 14*16kB (UME) 15*32kB (UME) 4*64kB (UME) 3*128kB (UM) 3*256kB (UE) 3*512kB (UME) 3*1024kB (UME) 2*2048kB (ME) 0*4096kB = 11012kB [ 1358.520036] systemd[1]: Stopped Journal Service. [ 1358.553156] Node 1 active_anon:17604kB inactive_anon:15936kB active_file:224kB inactive_file:1644kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:1312kB dirty:0kB writeback:0kB shmem:16076kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1358.588874] Node 0 DMA free:11012kB min:204kB low:252kB high:300kB active_anon:2100kB inactive_anon:8kB active_file:8kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:56kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1358.636191] systemd[1]: Starting Journal Service... [ 1358.641579] Node 0 DMA32: 10934*4kB (UE) 4161*8kB (UME) 1865*16kB (UME) 1207*32kB (UMEH) 63*64kB (UH) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 149520kB [ 1358.643106] Node 0 [ 1358.656907] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1358.700810] syz-executor.0: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1358.711419] Node 1 Normal: 15137*4kB (UME) 7033*8kB (UME) 1081*16kB (U) 1812*32kB (U) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 192092kB [ 1358.716799] DMA free:11012kB min:204kB low:252kB high:300kB active_anon:2100kB inactive_anon:8kB active_file:8kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:56kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1358.737015] systemd[1]: Started Load/Save RF Kill Switch Status. [ 1358.774301] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1358.777764] syz-executor.0 cpuset= [ 1358.779352] Node 0 DMA32 free:212304kB min:36200kB low:45248kB high:54296kB active_anon:291720kB inactive_anon:68000kB active_file:1960kB inactive_file:6640kB unevictable:0kB writepending:0kB present:3129332kB managed:2788136kB mlocked:0kB kernel_stack:12064kB pagetables:16512kB bounce:0kB free_pcp:1400kB local_pcp:696kB free_cma:0kB [ 1358.779372] lowmem_reserve[]: 0 0 0 0 0 [ 1358.779388] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1358.779403] lowmem_reserve[]: 0 0 [ 1358.833858] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1358.877869] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1358.883401] 0 0 0 [ 1358.885566] Node 1 Normal free:191772kB min:53696kB low:67120kB high:80544kB active_anon:17604kB inactive_anon:15936kB active_file:728kB inactive_file:1128kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:6304kB pagetables:18972kB bounce:0kB free_pcp:192kB local_pcp:24kB free_cma:0kB [ 1358.901032] Node 0 hugepages_total=1 hugepages_free=1 hugepages_surp=1 hugepages_size=2048kB [ 1358.931340] Node 0 DMA32 free:261732kB min:36200kB low:45248kB high:54296kB active_anon:291708kB inactive_anon:68000kB active_file:3988kB inactive_file:5460kB unevictable:0kB writepending:0kB present:3129332kB managed:2788136kB mlocked:0kB kernel_stack:12064kB pagetables:16564kB bounce:0kB free_pcp:1316kB local_pcp:740kB free_cma:0kB [ 1358.942937] / [ 1358.966657] lowmem_reserve[]: [ 1358.968855] lowmem_reserve[]: 0 0 0 0 0 [ 1358.975991] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1358.976890] mems_allowed=0-1 [ 1359.010592] 0 0 0 0 0 [ 1359.013127] Node 0 DMA: 29*4kB (UME) 10*8kB (UME) 14*16kB (UME) 15*32kB (UME) 4*64kB (UME) 3*128kB (UM) 3*256kB (UE) 3*512kB (UME) 3*1024kB (UME) 2*2048kB (ME) 0*4096kB = 11012kB [ 1359.014640] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1359.050454] Node 0 DMA32: 10950*4kB (UE) 11175*8kB (UEH) 6404*16kB (UMEH) 1957*32kB (UMEH) 33*64kB (UMH) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 300400kB [ 1359.064505] systemd-journald[785]: File /run/log/journal/04d8c135ee6b410280ba31a58c89679d/system.journal corrupted or uncleanly shut down, renaming and replacing. [ 1359.078564] lowmem_reserve[]: [ 1359.090033] Node 0 [ 1359.098045] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1359.100629] CPU: 1 PID: 676 Comm: syz-executor.0 Not tainted 4.14.228-syzkaller #0 [ 1359.109043] Normal: [ 1359.116583] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1359.116588] Call Trace: [ 1359.116610] dump_stack+0x1b2/0x281 [ 1359.116624] warn_alloc.cold+0x96/0x1cc [ 1359.116636] ? zone_watermark_ok_safe+0x220/0x220 [ 1359.116657] __alloc_pages_nodemask+0x2127/0x2720 [ 1359.116674] ? lock_acquire+0x170/0x3f0 [ 1359.116688] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1359.116705] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1359.116716] ? __mutex_unlock_slowpath+0x75/0x770 [ 1359.116730] alloc_pages_current+0x155/0x260 [ 1359.116743] ion_page_pool_alloc+0x118/0x1b0 [ 1359.116753] ion_system_heap_allocate+0x133/0x8c0 [ 1359.116766] ? _raw_spin_unlock+0x29/0x40 [ 1359.116775] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1359.116784] ? ion_system_contig_heap_create+0x130/0x130 [ 1359.116795] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1359.116806] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1359.116817] ion_alloc+0x27a/0x810 [ 1359.116830] ? ion_dma_buf_release+0x40/0x40 [ 1359.116842] ? __might_fault+0x177/0x1b0 [ 1359.116853] ion_ioctl+0xea/0x1f0 [ 1359.122579] 0 [ 1359.128538] ? ion_query_heaps+0x360/0x360 [ 1359.128556] ? __tun_chr_ioctl.isra.0+0x3310/0x3310 [ 1359.131859] 0*4kB [ 1359.134733] ? ion_query_heaps+0x360/0x360 [ 1359.134745] do_vfs_ioctl+0x75a/0xff0 [ 1359.134758] ? ioctl_preallocate+0x1a0/0x1a0 [ 1359.138761] 24109 total pagecache pages [ 1359.143561] ? lock_downgrade+0x740/0x740 [ 1359.143576] ? __fget+0x225/0x360 [ 1359.143585] ? do_vfs_ioctl+0xff0/0xff0 [ 1359.143596] ? security_file_ioctl+0x83/0xb0 [ 1359.143606] SyS_ioctl+0x7f/0xb0 [ 1359.143614] ? do_vfs_ioctl+0xff0/0xff0 [ 1359.143626] do_syscall_64+0x1d5/0x640 [ 1359.143641] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1359.143657] RIP: 0033:0x466459 [ 1359.150384] 0*8kB [ 1359.152443] RSP: 002b:00007fb4b9e68188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1359.152454] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1359.152459] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1359.152465] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1359.152470] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1359.152476] R13: 00007fffe82eec4f R14: 00007fb4b9e68300 R15: 0000000000022000 [ 1359.294067] 0 pages in swap cache [ 1359.300488] 0 [ 1359.326600] Swap cache stats: add 0, delete 0, find 0/0 [ 1359.333941] 0 0 0 [ 1359.346797] Node 1 Normal free:192148kB min:53696kB low:67120kB high:80544kB active_anon:17612kB inactive_anon:15928kB active_file:900kB inactive_file:720kB unevictable:0kB writepending:8kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:6272kB pagetables:18972kB bounce:0kB free_pcp:232kB local_pcp:20kB free_cma:0kB [ 1359.370568] Free swap = 0kB [ 1359.376277] lowmem_reserve[]: [ 1359.379166] Total swap = 0kB [ 1359.379174] 2097051 pages RAM [ 1359.379178] 0 pages HighMem/MovableOnly [ 1359.379181] 363846 pages reserved [ 1359.379187] 0 pages cma reserved [ 1359.384905] 0 0 0 0 0 [ 1359.404783] Node 0 DMA: 29*4kB (UME) 10*8kB (UME) 14*16kB (UME) 15*32kB (UME) 4*64kB (UME) 3*128kB (UM) 3*256kB (UE) 3*512kB (UME) 3*1024kB (UME) 2*2048kB (ME) 0*4096kB = 11012kB [ 1359.423760] Node 0 DMA32: 10819*4kB (UE) 10984*8kB (UEH) 6329*16kB (UEH) 2136*32kB (UEH) 5*64kB (H) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 301084kB [ 1359.438535] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1359.453277] Node 1 Normal: 15083*4kB (UME) 6992*8kB (UME) 3381*16kB (U) 2065*32kB (U) 32*64kB (U) 35*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 242972kB [ 1359.469069] 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1359.504738] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1359.520227] Node 1 Normal: 15695*4kB (UME) 6994*8kB (UME) 3382*16kB (U) 2065*32kB (U) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 238924kB [ 1359.548079] Node 0 hugepages_total=1 hugepages_free=1 hugepages_surp=1 hugepages_size=2048kB [ 1359.565735] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1359.587768] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1359.610758] Node 0 hugepages_total=1 hugepages_free=1 hugepages_surp=1 hugepages_size=2048kB [ 1359.619418] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1359.642957] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1359.651910] 26134 total pagecache pages [ 1359.657022] 0 pages in swap cache [ 1359.666391] Swap cache stats: add 0, delete 0, find 0/0 [ 1359.677094] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1359.699586] syz-executor.1: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1359.714414] Free swap = 0kB [ 1359.717434] Total swap = 0kB [ 1359.720447] 2097051 pages RAM [ 1359.723614] 26059 total pagecache pages [ 1359.727594] 0 pages in swap cache [ 1359.730566] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 1359.736159] CPU: 1 PID: 661 Comm: syz-executor.1 Not tainted 4.14.228-syzkaller #0 [ 1359.743856] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1359.753060] 0 pages HighMem/MovableOnly [ 1359.753201] Call Trace: [ 1359.757161] 363846 pages reserved [ 1359.759747] dump_stack+0x1b2/0x281 [ 1359.763215] Swap cache stats: add 0, delete 0, find 0/0 [ 1359.766781] warn_alloc.cold+0x96/0x1cc [ 1359.776081] ? zone_watermark_ok_safe+0x220/0x220 [ 1359.780936] __alloc_pages_nodemask+0x2127/0x2720 [ 1359.785782] ? lock_acquire+0x170/0x3f0 [ 1359.789759] ? lock_acquire+0x170/0x3f0 [ 1359.793096] 0 pages cma reserved [ 1359.793730] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1359.801918] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1359.802500] Free swap = 0kB [ 1359.807381] ? __mutex_unlock_slowpath+0x75/0x770 [ 1359.810382] Total swap = 0kB [ 1359.815214] alloc_pages_current+0x155/0x260 [ 1359.815229] ion_page_pool_alloc+0x118/0x1b0 [ 1359.815239] ion_system_heap_allocate+0x133/0x8c0 [ 1359.815250] ? _raw_spin_unlock+0x29/0x40 [ 1359.815257] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1359.815265] ? ion_system_contig_heap_create+0x130/0x130 [ 1359.815275] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1359.815285] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1359.815296] ion_alloc+0x27a/0x810 [ 1359.815310] ? ion_dma_buf_release+0x40/0x40 [ 1359.815322] ? __might_fault+0x177/0x1b0 [ 1359.815333] ion_ioctl+0xea/0x1f0 [ 1359.815342] ? ion_query_heaps+0x360/0x360 [ 1359.815356] ? __tun_chr_ioctl.isra.0+0x3310/0x3310 [ 1359.815363] ? ion_query_heaps+0x360/0x360 [ 1359.815374] do_vfs_ioctl+0x75a/0xff0 [ 1359.815385] ? ioctl_preallocate+0x1a0/0x1a0 [ 1359.815394] ? lock_downgrade+0x740/0x740 [ 1359.815406] ? __fget+0x225/0x360 [ 1359.815415] ? do_vfs_ioctl+0xff0/0xff0 [ 1359.815425] ? security_file_ioctl+0x83/0xb0 [ 1359.815434] SyS_ioctl+0x7f/0xb0 [ 1359.815442] ? do_vfs_ioctl+0xff0/0xff0 [ 1359.815452] do_syscall_64+0x1d5/0x640 [ 1359.815466] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1359.815474] RIP: 0033:0x466459 [ 1359.815479] RSP: 002b:00007fdd4fdf9188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1359.815490] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1359.815495] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1359.815503] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1359.841855] 2097051 pages RAM [ 1359.846594] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1359.881833] 0 pages HighMem/MovableOnly [ 1359.885796] R13: 00007ffc5b7c415f R14: 00007fdd4fdf9300 R15: 0000000000022000 [ 1359.889582] 363846 pages reserved [ 1360.010618] 0 pages cma reserved [ 1360.014016] Out of memory (oom_kill_allocating_task): Kill process 673 (syz-executor.4) score 0 or sacrifice child [ 1360.060626] Killed process 673 (syz-executor.4) total-vm:93120kB, anon-rss:72kB, file-rss:32796kB, shmem-rss:0kB [ 1360.110863] oom_reaper: reaped process 676 (syz-executor.0), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1360.159472] oom_reaper: reaped process 673 (syz-executor.4), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1360.401000] warn_alloc_show_mem: 1 callbacks suppressed [ 1360.401004] Mem-Info: [ 1360.422519] active_anon:77974 inactive_anon:23017 isolated_anon:0 [ 1360.422519] active_file:670 inactive_file:783 isolated_file:0 [ 1360.422519] unevictable:0 dirty:3 writeback:0 unstable:0 [ 1360.422519] slab_reclaimable:13795 slab_unreclaimable:126296 [ 1360.422519] mapped:45083 shmem:23347 pagetables:8930 bounce:0 [ 1360.422519] free:33279 free_pcp:298 free_cma:0 [ 1360.530591] Bluetooth: hci5 command 0x040f tx timeout [ 1360.620632] Node 0 active_anon:294284kB inactive_anon:76140kB active_file:196kB inactive_file:208kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:176028kB dirty:4kB writeback:0kB shmem:77312kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 239616kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1360.657902] oom_reaper: reaped process 713 (syz-executor.2), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1360.760610] Node 1 active_anon:17612kB inactive_anon:15928kB active_file:764kB inactive_file:848kB unevictable:0kB isolated(anon):0kB isolated(file):108kB mapped:1604kB dirty:8kB writeback:0kB shmem:16076kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1360.830621] Node 0 DMA free:10964kB min:204kB low:252kB high:300kB active_anon:2100kB inactive_anon:8kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:56kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1360.861315] kworker/u4:4 invoked oom-killer: gfp_mask=0x15080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null), order=3, oom_score_adj=0 [ 1360.892301] kworker/u4:4 cpuset=/ mems_allowed=0-1 [ 1360.897276] CPU: 0 PID: 2892 Comm: kworker/u4:4 Not tainted 4.14.228-syzkaller #0 [ 1360.904889] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1360.914250] Workqueue: events_unbound call_usermodehelper_exec_work [ 1360.920650] Call Trace: [ 1360.923239] dump_stack+0x1b2/0x281 [ 1360.926868] dump_header+0x178/0x82f [ 1360.930596] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1360.935700] ? ___ratelimit+0x2cd/0x530 [ 1360.939672] oom_kill_process.cold+0x10/0xb18 [ 1360.944186] ? lock_downgrade+0x740/0x740 [ 1360.948375] out_of_memory+0x2dc/0x1190 [ 1360.952350] ? oom_killer_disable+0x1c0/0x1c0 [ 1360.956857] ? mutex_trylock+0x152/0x1a0 [ 1360.960914] __alloc_pages_nodemask+0x23e1/0x2720 [ 1360.965778] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1360.970632] ? fs_reclaim_release+0xd0/0x110 [ 1360.975047] ? kmem_cache_alloc_node+0x38b/0x410 [ 1360.979803] copy_process.part.0+0x265/0x71c0 [ 1360.984308] ? __lock_acquire+0x5fc/0x3f20 [ 1360.988539] ? cpuacct_charge+0x1ca/0x350 [ 1360.992679] ? static_obj+0x50/0x50 [ 1360.996299] ? lock_downgrade+0x740/0x740 [ 1361.000451] ? call_usermodehelper_exec_work+0x2a0/0x2a0 [ 1361.005894] ? __cleanup_sighand+0x40/0x40 [ 1361.010142] ? call_usermodehelper_exec_work+0x2a0/0x2a0 [ 1361.015590] _do_fork+0x184/0xc80 [ 1361.019047] ? fork_idle+0x270/0x270 [ 1361.022756] ? lock_downgrade+0x740/0x740 [ 1361.026894] ? lock_downgrade+0x740/0x740 [ 1361.031036] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1361.036068] ? process_one_work+0x6c4/0x14a0 [ 1361.040486] ? call_usermodehelper_exec_work+0x2a0/0x2a0 [ 1361.045933] kernel_thread+0x2f/0x40 [ 1361.049643] call_usermodehelper_exec_work+0x1ac/0x2a0 [ 1361.054911] ? call_usermodehelper+0x80/0x80 [ 1361.059329] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1361.064776] process_one_work+0x793/0x14a0 [ 1361.069101] ? work_busy+0x320/0x320 [ 1361.072806] ? worker_thread+0x158/0xff0 [ 1361.076863] ? _raw_spin_unlock_irq+0x24/0x80 [ 1361.081360] worker_thread+0x5cc/0xff0 [ 1361.085249] ? rescuer_thread+0xc80/0xc80 [ 1361.089411] kthread+0x30d/0x420 [ 1361.092770] ? kthread_create_on_node+0xd0/0xd0 [ 1361.097442] ret_from_fork+0x24/0x30 [ 1361.120562] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1361.125627] Node 0 DMA32 free:18200kB min:36200kB low:45248kB high:54296kB active_anon:291964kB inactive_anon:76132kB active_file:32kB inactive_file:36kB unevictable:0kB writepending:0kB present:3129332kB managed:2788136kB mlocked:0kB kernel_stack:12000kB pagetables:16516kB bounce:0kB free_pcp:120kB local_pcp:120kB free_cma:0kB [ 1361.161772] lowmem_reserve[]: 0 0 0 0 0 [ 1361.165800] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1361.191668] lowmem_reserve[]: 0 0 0 0 0 [ 1361.195675] Node 1 Normal free:26648kB min:53696kB low:67120kB high:80544kB active_anon:17504kB inactive_anon:15920kB active_file:24kB inactive_file:24kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:6336kB pagetables:18972kB bounce:0kB free_pcp:120kB local_pcp:120kB free_cma:0kB [ 1361.288201] lowmem_reserve[]: 0 0 0 0 0 [ 1361.380620] Node 0 DMA: 11*4kB (UME) 9*8kB (ME) 18*16kB (UME) 16*32kB (UME) 3*64kB (ME) 3*128kB (UM) 3*256kB (UE) 3*512kB (UME) 3*1024kB (UME) 2*2048kB (ME) 0*4096kB = 10964kB [ 1361.625449] Node 0 DMA32: 2310*4kB (MEH) 492*8kB (MEH) 98*16kB (MEH) 10*32kB (MEH) 37*64kB (UH) 5*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18072kB [ 1361.830613] syz-executor.2: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1361.844943] syz-executor.3: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1361.879155] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1361.901349] syz-executor.0: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1362.034128] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 1362.039282] CPU: 1 PID: 713 Comm: syz-executor.2 Not tainted 4.14.228-syzkaller #0 [ 1362.046977] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1362.056320] Call Trace: [ 1362.058912] dump_stack+0x1b2/0x281 [ 1362.062542] warn_alloc.cold+0x96/0x1cc [ 1362.066518] ? zone_watermark_ok_safe+0x220/0x220 [ 1362.071356] ? usleep_range+0x130/0x130 [ 1362.075324] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1362.080422] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1362.085439] ? run_timer_softirq+0x5a0/0x5a0 [ 1362.089859] __alloc_pages_nodemask+0x2127/0x2720 [ 1362.094704] ? lock_acquire+0x170/0x3f0 [ 1362.098680] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1362.103518] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1362.108015] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1362.113473] alloc_pages_current+0x155/0x260 [ 1362.117880] ion_page_pool_alloc+0x118/0x1b0 [ 1362.122286] ion_system_heap_allocate+0x133/0x8c0 [ 1362.127124] ? ion_alloc+0x187/0x810 [ 1362.130855] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1362.136303] ? ion_system_contig_heap_create+0x130/0x130 [ 1362.141757] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1362.146775] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1362.151618] ion_alloc+0x204/0x810 [ 1362.155163] ? ion_dma_buf_release+0x40/0x40 [ 1362.159568] ? __might_fault+0x177/0x1b0 [ 1362.163629] ion_ioctl+0xea/0x1f0 [ 1362.167078] ? ion_query_heaps+0x360/0x360 [ 1362.171311] ? __tun_chr_ioctl.isra.0+0x3310/0x3310 [ 1362.176321] ? ion_query_heaps+0x360/0x360 [ 1362.180552] do_vfs_ioctl+0x75a/0xff0 [ 1362.184351] ? ioctl_preallocate+0x1a0/0x1a0 [ 1362.188760] ? lock_downgrade+0x740/0x740 [ 1362.192906] ? __fget+0x225/0x360 [ 1362.196353] ? do_vfs_ioctl+0xff0/0xff0 [ 1362.200332] ? security_file_ioctl+0x83/0xb0 [ 1362.204737] SyS_ioctl+0x7f/0xb0 [ 1362.208101] ? do_vfs_ioctl+0xff0/0xff0 [ 1362.212094] do_syscall_64+0x1d5/0x640 [ 1362.215983] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1362.221165] RIP: 0033:0x466459 [ 1362.224345] RSP: 002b:00007f79418d2188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1362.232049] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1362.239310] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1362.246573] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1362.253836] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1362.261126] R13: 00007ffef88b512f R14: 00007f79418d2300 R15: 0000000000022000 [ 1362.274364] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 1362.279498] CPU: 1 PID: 668 Comm: syz-executor.3 Not tainted 4.14.228-syzkaller #0 [ 1362.287198] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1362.296543] Call Trace: [ 1362.299133] dump_stack+0x1b2/0x281 [ 1362.302766] warn_alloc.cold+0x96/0x1cc [ 1362.306738] ? zone_watermark_ok_safe+0x220/0x220 [ 1362.311580] ? usleep_range+0x130/0x130 [ 1362.315549] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1362.320649] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1362.325658] ? run_timer_softirq+0x5a0/0x5a0 [ 1362.330066] __alloc_pages_nodemask+0x2127/0x2720 [ 1362.334912] ? lock_acquire+0x170/0x3f0 [ 1362.338898] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1362.343735] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1362.348256] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1362.353713] alloc_pages_current+0x155/0x260 [ 1362.358121] ion_page_pool_alloc+0x118/0x1b0 [ 1362.362525] ion_system_heap_allocate+0x133/0x8c0 [ 1362.367364] ? _raw_spin_unlock+0x29/0x40 [ 1362.371507] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1362.376450] ? ion_system_contig_heap_create+0x130/0x130 [ 1362.381896] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1362.386906] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1362.391754] ion_alloc+0x27a/0x810 [ 1362.395297] ? ion_dma_buf_release+0x40/0x40 [ 1362.399702] ? __might_fault+0x177/0x1b0 [ 1362.403766] ion_ioctl+0xea/0x1f0 [ 1362.407214] ? ion_query_heaps+0x360/0x360 [ 1362.411448] ? __tun_chr_ioctl.isra.0+0x3310/0x3310 [ 1362.416455] ? ion_query_heaps+0x360/0x360 [ 1362.420683] do_vfs_ioctl+0x75a/0xff0 [ 1362.424482] ? ioctl_preallocate+0x1a0/0x1a0 [ 1362.428884] ? lock_downgrade+0x740/0x740 [ 1362.433028] ? __fget+0x225/0x360 [ 1362.436477] ? do_vfs_ioctl+0xff0/0xff0 [ 1362.440447] ? security_file_ioctl+0x83/0xb0 [ 1362.444853] SyS_ioctl+0x7f/0xb0 [ 1362.448211] ? do_vfs_ioctl+0xff0/0xff0 [ 1362.452186] do_syscall_64+0x1d5/0x640 [ 1362.456077] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1362.461259] RIP: 0033:0x466459 [ 1362.464441] RSP: 002b:00007f6ba9361188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1362.472142] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1362.479405] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1362.486665] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1362.493929] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1362.501195] R13: 00007ffd9352709f R14: 00007f6ba9361300 R15: 0000000000022000 [ 1362.523299] Node 1 Normal: 116*4kB (UME) 42*8kB (UME) 5*16kB (M) 805*32kB (UM) 2*64kB (U) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 26768kB [ 1362.539866] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 1362.546458] CPU: 1 PID: 676 Comm: syz-executor.0 Not tainted 4.14.228-syzkaller #0 [ 1362.554163] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1362.563508] Call Trace: [ 1362.566098] dump_stack+0x1b2/0x281 [ 1362.569730] warn_alloc.cold+0x96/0x1cc [ 1362.573710] ? zone_watermark_ok_safe+0x220/0x220 [ 1362.578550] ? usleep_range+0x130/0x130 [ 1362.582522] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1362.587622] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1362.592655] ? run_timer_softirq+0x5a0/0x5a0 [ 1362.597071] __alloc_pages_nodemask+0x2127/0x2720 [ 1362.601923] ? lock_acquire+0x170/0x3f0 [ 1362.605899] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1362.610738] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1362.615242] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1362.620704] alloc_pages_current+0x155/0x260 [ 1362.625111] ion_page_pool_alloc+0x118/0x1b0 [ 1362.629516] ion_system_heap_allocate+0x133/0x8c0 [ 1362.634367] ? _raw_spin_unlock+0x29/0x40 [ 1362.638510] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1362.643434] ? ion_system_contig_heap_create+0x130/0x130 [ 1362.648885] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1362.653898] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1362.658750] ion_alloc+0x27a/0x810 [ 1362.662293] ? ion_dma_buf_release+0x40/0x40 [ 1362.666723] ? __might_fault+0x177/0x1b0 [ 1362.670788] ion_ioctl+0xea/0x1f0 [ 1362.674238] ? ion_query_heaps+0x360/0x360 [ 1362.678474] ? __tun_chr_ioctl.isra.0+0x3310/0x3310 [ 1362.683483] ? ion_query_heaps+0x360/0x360 [ 1362.687712] do_vfs_ioctl+0x75a/0xff0 [ 1362.691513] ? ioctl_preallocate+0x1a0/0x1a0 [ 1362.695918] ? lock_downgrade+0x740/0x740 [ 1362.700065] ? __fget+0x225/0x360 [ 1362.703515] ? do_vfs_ioctl+0xff0/0xff0 [ 1362.707486] ? security_file_ioctl+0x83/0xb0 [ 1362.711891] SyS_ioctl+0x7f/0xb0 [ 1362.715253] ? do_vfs_ioctl+0xff0/0xff0 [ 1362.719224] do_syscall_64+0x1d5/0x640 [ 1362.723112] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1362.728294] RIP: 0033:0x466459 [ 1362.731475] RSP: 002b:00007fb4b9e68188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1362.739181] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1362.746452] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1362.753722] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1362.760988] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1362.768255] R13: 00007fffe82eec4f R14: 00007fb4b9e68300 R15: 0000000000022000 [ 1362.775812] Bluetooth: hci5 command 0x0419 tx timeout [ 1362.787185] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1362.796076] Node 0 hugepages_total=1 hugepages_free=1 hugepages_surp=1 hugepages_size=2048kB [ 1362.807484] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1362.816367] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1362.824990] 23372 total pagecache pages [ 1362.828971] 0 pages in swap cache [ 1362.832492] Mem-Info: [ 1362.834912] active_anon:77892 inactive_anon:23015 isolated_anon:0 [ 1362.834912] active_file:10 inactive_file:10 isolated_file:9 [ 1362.834912] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1362.834912] slab_reclaimable:13795 slab_unreclaimable:126467 [ 1362.834912] mapped:43895 shmem:23343 pagetables:8886 bounce:0 [ 1362.834912] free:14033 free_pcp:36 free_cma:0 [ 1362.868436] Swap cache stats: add 0, delete 0, find 0/0 [ 1362.873854] Free swap = 0kB [ 1362.876864] Total swap = 0kB [ 1362.879873] 2097051 pages RAM [ 1362.885797] 0 pages HighMem/MovableOnly [ 1362.889765] 363846 pages reserved [ 1362.893238] 0 pages cma reserved [ 1362.898520] Node 0 active_anon:294064kB inactive_anon:76140kB active_file:16kB inactive_file:16kB unevictable:0kB isolated(anon):0kB isolated(file):36kB mapped:175580kB dirty:0kB writeback:0kB shmem:77312kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 239616kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1362.929609] Node 1 active_anon:17504kB inactive_anon:15920kB active_file:24kB inactive_file:24kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:16060kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1362.956608] Node 0 DMA free:10964kB min:204kB low:252kB high:300kB active_anon:2100kB inactive_anon:8kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:56kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1362.983242] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1362.988286] Node 0 DMA32 free:18028kB min:36200kB low:45248kB high:54296kB active_anon:291964kB inactive_anon:76132kB active_file:16kB inactive_file:16kB unevictable:0kB writepending:0kB present:3129332kB managed:2788136kB mlocked:0kB kernel_stack:12000kB pagetables:16516kB bounce:0kB free_pcp:240kB local_pcp:120kB free_cma:0kB [ 1363.026788] lowmem_reserve[]: 0 0 0 0 0 [ 1363.030869] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1363.059845] Mem-Info: [ 1363.062329] active_anon:77892 inactive_anon:23015 isolated_anon:0 [ 1363.062329] active_file:10 inactive_file:10 isolated_file:9 [ 1363.062329] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1363.062329] slab_reclaimable:13795 slab_unreclaimable:126467 [ 1363.062329] mapped:43895 shmem:23343 pagetables:8886 bounce:0 [ 1363.062329] free:13809 free_pcp:30 free_cma:0 [ 1363.123318] lowmem_reserve[]: 0 0 0 0 0 [ 1363.127342] Node 1 Normal free:26768kB min:53696kB low:67120kB high:80544kB active_anon:17504kB inactive_anon:15920kB active_file:24kB inactive_file:24kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:6336kB pagetables:18972kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1363.591235] Node 0 active_anon:294064kB inactive_anon:76140kB active_file:28kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):36kB mapped:175580kB dirty:0kB writeback:0kB shmem:77312kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 239616kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1363.619254] lowmem_reserve[]: 0 0 0 0 0 [ 1363.700790] Node 0 DMA: 24*4kB (UME) 46*8kB (UME) 27*16kB (UME) 16*32kB (UME) 9*64kB (UME) 3*128kB (UM) 3*256kB (UE) 3*512kB (UME) 3*1024kB (UME) 2*2048kB (ME) 0*4096kB = 11840kB [ 1363.881851] Node 0 DMA32: 6636*4kB (UME) 3143*8kB (UME) 270*16kB (UME) 1211*32kB (UME) 1316*64kB (UM) 85*128kB (UM) 86*256kB (UM) 18*512kB (U) 4*1024kB (U) 1*2048kB (U) 0*4096kB = 227240kB [ 1363.930874] Node 1 active_anon:17504kB inactive_anon:15920kB active_file:24kB inactive_file:24kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:16060kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1364.100629] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1364.261352] Node 1 Normal: 14315*4kB (UME) 7963*8kB (UME) 2455*16kB (UME) 1661*32kB (UM) 6050*64kB (U) 2911*128kB (U) 692*256kB (U) 65*512kB (U) 12*1024kB (U) 1*2048kB (U) 2*4096kB (U) = 1206164kB [ 1364.410990] Node 0 DMA free:11896kB min:204kB low:252kB high:300kB active_anon:2100kB inactive_anon:8kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:56kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1364.602823] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1364.650592] Node 0 hugepages_total=1 hugepages_free=1 hugepages_surp=1 hugepages_size=2048kB [ 1364.659200] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1364.680564] lowmem_reserve[]: 0 2717 2718 2718 2718 20:21:38 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r1, 0x800454cf, &(0x7f0000000240)) ioctl$TUNSETSNDBUF(r1, 0x400454d4, &(0x7f0000000040)=0x1000) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r2, 0x800454cf, &(0x7f0000000240)) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000080)={'lo\x00', @broadcast}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000180)={0x80000000, 0xa}) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x4000, 0x0) [ 1364.685626] Node 0 DMA32 free:286468kB min:36200kB low:45248kB high:54296kB active_anon:291964kB inactive_anon:76132kB active_file:1196kB inactive_file:4476kB unevictable:0kB writepending:0kB present:3129332kB managed:2788136kB mlocked:0kB kernel_stack:12032kB pagetables:16516kB bounce:0kB free_pcp:776kB local_pcp:616kB free_cma:0kB [ 1364.740886] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1364.749600] 25109 total pagecache pages [ 1364.770887] 0 pages in swap cache [ 1364.774358] Swap cache stats: add 0, delete 0, find 0/0 [ 1364.779711] Free swap = 0kB [ 1364.800614] Total swap = 0kB [ 1364.803652] 2097051 pages RAM [ 1364.806747] 0 pages HighMem/MovableOnly [ 1364.820619] lowmem_reserve[]: 0 0 0 0 0 [ 1364.824664] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1364.870580] 363846 pages reserved [ 1364.874077] 0 pages cma reserved [ 1364.877447] Out of memory: Kill process 21123 (syz-executor.3) score 1005 or sacrifice child [ 1364.911032] Killed process 21123 (syz-executor.3) total-vm:93384kB, anon-rss:2200kB, file-rss:34628kB, shmem-rss:0kB [ 1364.940093] lowmem_reserve[]: 0 0 0 0 0 20:21:38 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r1, 0x800454cf, &(0x7f0000000240)) ioctl$TUNSETSNDBUF(r1, 0x400454d4, &(0x7f0000000040)=0x1000) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r2, 0x800454cf, &(0x7f0000000240)) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000080)={'lo\x00', @broadcast}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000180)={0x80000000, 0xa}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x1) ioctl$TUNGETFEATURES(r3, 0x800454cf, &(0x7f0000000240)) [ 1364.950965] Node 1 Normal free:1172436kB min:53696kB low:67120kB high:80544kB active_anon:17504kB inactive_anon:15920kB active_file:24kB inactive_file:24kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:6304kB pagetables:18972kB bounce:0kB free_pcp:1380kB local_pcp:712kB free_cma:0kB [ 1364.992036] oom_reaper: reaped process 21123 (syz-executor.3), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1365.004657] chnl_net:caif_netlink_parms(): no params data found [ 1365.091088] lowmem_reserve[]: 0 0 0 0 0 [ 1365.095102] Node 0 DMA: 47*4kB (UMEH) 51*8kB (UMEH) 40*16kB (UMEH) 16*32kB (UMEH) 9*64kB (UMEH) 2*128kB (UM) 3*256kB (UE) 3*512kB (UME) 2*1024kB (ME) 2*2048kB (ME) 0*4096kB = 11028kB [ 1365.162114] Node 0 DMA32: 1*4kB (U) 569*8kB (U) 4053*16kB (UE) 2164*32kB (UE) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 138652kB [ 1365.220599] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1365.251835] Node 1 Normal: 12885*4kB (UME) 7320*8kB (UME) 3450*16kB (UME) 2496*32kB (UM) 1*64kB (U) 2458*128kB (U) 863*256kB (U) 107*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 835572kB [ 1365.290919] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1365.312737] Node 0 hugepages_total=1 hugepages_free=1 hugepages_surp=1 hugepages_size=2048kB [ 1365.331414] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1365.344115] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1365.396722] 29545 total pagecache pages [ 1365.426958] 0 pages in swap cache [ 1365.430730] Swap cache stats: add 0, delete 0, find 0/0 [ 1365.436111] Free swap = 0kB [ 1365.439161] Total swap = 0kB [ 1365.450880] bond0 (unregistering): Released all slaves [ 1365.484535] 2097051 pages RAM [ 1365.487885] 0 pages HighMem/MovableOnly [ 1365.496921] 363846 pages reserved [ 1365.505375] 0 pages cma reserved [ 1365.546346] bridge0: port 1(bridge_slave_0) entered blocking state [ 1365.576290] bridge0: port 1(bridge_slave_0) entered disabled state [ 1365.605162] device bridge_slave_0 entered promiscuous mode [ 1365.644708] bridge0: port 2(bridge_slave_1) entered blocking state [ 1365.669743] bridge0: port 2(bridge_slave_1) entered disabled state [ 1365.690160] syz-executor.2: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1365.724793] device bridge_slave_1 entered promiscuous mode [ 1365.740397] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 1365.757744] CPU: 0 PID: 713 Comm: syz-executor.2 Not tainted 4.14.228-syzkaller #0 [ 1365.765493] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1365.774866] Call Trace: [ 1365.777458] dump_stack+0x1b2/0x281 [ 1365.781091] warn_alloc.cold+0x96/0x1cc [ 1365.785065] ? zone_watermark_ok_safe+0x220/0x220 [ 1365.789918] __alloc_pages_nodemask+0x2127/0x2720 [ 1365.794767] ? __schedule+0x893/0x1de0 [ 1365.798656] ? lock_acquire+0x170/0x3f0 [ 1365.802637] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1365.807491] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1365.812946] ? __mutex_unlock_slowpath+0x75/0x770 [ 1365.817792] alloc_pages_current+0x155/0x260 [ 1365.822201] ion_page_pool_alloc+0x118/0x1b0 [ 1365.826785] ion_system_heap_allocate+0x133/0x8c0 [ 1365.831631] ? _raw_spin_unlock+0x29/0x40 [ 1365.835780] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1365.840710] ? ion_system_contig_heap_create+0x130/0x130 [ 1365.846169] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1365.851190] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1365.856034] ion_alloc+0x27a/0x810 [ 1365.859581] ? ion_dma_buf_release+0x40/0x40 [ 1365.863993] ? __might_fault+0x177/0x1b0 [ 1365.868056] ion_ioctl+0xea/0x1f0 [ 1365.871508] ? ion_query_heaps+0x360/0x360 [ 1365.875746] ? __tun_chr_ioctl.isra.0+0x3310/0x3310 [ 1365.880761] ? ion_query_heaps+0x360/0x360 [ 1365.884997] do_vfs_ioctl+0x75a/0xff0 [ 1365.888798] ? ioctl_preallocate+0x1a0/0x1a0 [ 1365.893206] ? lock_downgrade+0x740/0x740 [ 1365.897356] ? __fget+0x225/0x360 [ 1365.900805] ? do_vfs_ioctl+0xff0/0xff0 [ 1365.904785] ? security_file_ioctl+0x83/0xb0 [ 1365.909212] SyS_ioctl+0x7f/0xb0 [ 1365.912573] ? do_vfs_ioctl+0xff0/0xff0 [ 1365.916549] do_syscall_64+0x1d5/0x640 [ 1365.916552] systemd[1]: Started Journal Service. [ 1365.925221] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1365.930412] RIP: 0033:0x466459 [ 1365.933597] RSP: 002b:00007f79418d2188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1365.941305] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1365.948571] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1365.955846] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1365.963118] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1365.970403] R13: 00007ffef88b512f R14: 00007f79418d2300 R15: 0000000000022000 20:21:39 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r1, 0x800454cf, &(0x7f0000000240)) ioctl$TUNSETSNDBUF(r1, 0x400454d4, &(0x7f0000000040)=0x1000) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r2, 0x800454cf, &(0x7f0000000240)) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000180)={0x80000000, 0xa}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x4000, 0x0) ioctl$TUNSETPERSIST(r4, 0x400454cb, 0x1) ioctl$TUNGETFEATURES(r3, 0x800454cf, &(0x7f0000000240)) ioctl$TUNSETOWNER(r3, 0x400454cc, 0xffffffffffffffff) [ 1365.999231] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 1366.038449] syz-executor.0: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1366.062699] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1366.085498] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 1366.107521] CPU: 1 PID: 905 Comm: syz-executor.0 Not tainted 4.14.228-syzkaller #0 [ 1366.115245] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1366.124599] Call Trace: [ 1366.127190] dump_stack+0x1b2/0x281 [ 1366.130824] warn_alloc.cold+0x96/0x1cc [ 1366.134801] ? zone_watermark_ok_safe+0x220/0x220 [ 1366.139681] __alloc_pages_nodemask+0x2127/0x2720 [ 1366.145016] ? lock_acquire+0x170/0x3f0 [ 1366.148999] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1366.153853] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1366.159309] ? __mutex_unlock_slowpath+0x75/0x770 [ 1366.164164] alloc_pages_current+0x155/0x260 [ 1366.165831] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 1366.168576] ion_page_pool_alloc+0x118/0x1b0 [ 1366.168587] ion_system_heap_allocate+0x133/0x8c0 [ 1366.168601] ? ion_alloc+0x187/0x810 [ 1366.188188] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1366.193637] ? ion_system_contig_heap_create+0x130/0x130 [ 1366.199084] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1366.200840] team0: Port device team_slave_0 added [ 1366.204110] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1366.204123] ion_alloc+0x204/0x810 [ 1366.204142] ? ion_dma_buf_release+0x40/0x40 [ 1366.221353] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 1366.221773] ? __might_fault+0x177/0x1b0 [ 1366.221787] ion_ioctl+0xea/0x1f0 [ 1366.221798] ? ion_query_heaps+0x360/0x360 [ 1366.240358] ? __tun_chr_ioctl.isra.0+0x3310/0x3310 [ 1366.242335] team0: Port device team_slave_1 added [ 1366.245369] ? ion_query_heaps+0x360/0x360 [ 1366.245382] do_vfs_ioctl+0x75a/0xff0 [ 1366.245394] ? ioctl_preallocate+0x1a0/0x1a0 [ 1366.245405] ? lock_downgrade+0x740/0x740 [ 1366.245417] ? __fget+0x225/0x360 [ 1366.272262] ? do_vfs_ioctl+0xff0/0xff0 [ 1366.276239] ? security_file_ioctl+0x83/0xb0 [ 1366.280651] SyS_ioctl+0x7f/0xb0 [ 1366.284017] ? do_vfs_ioctl+0xff0/0xff0 [ 1366.287992] do_syscall_64+0x1d5/0x640 [ 1366.292014] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1366.297199] RIP: 0033:0x466459 [ 1366.300385] RSP: 002b:00007fb4b9e68188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1366.308118] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1366.315499] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1366.318848] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1366.322763] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1366.322769] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1366.322775] R13: 00007fffe82eec4f R14: 00007fb4b9e68300 R15: 0000000000022000 [ 1366.360588] syz-executor.3: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1366.403813] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 1366.425714] CPU: 0 PID: 944 Comm: syz-executor.3 Not tainted 4.14.228-syzkaller #0 [ 1366.433446] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1366.442800] Call Trace: [ 1366.445392] dump_stack+0x1b2/0x281 [ 1366.449027] warn_alloc.cold+0x96/0x1cc [ 1366.453003] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1366.458109] ? zone_watermark_ok_safe+0x220/0x220 [ 1366.462966] __alloc_pages_nodemask+0x2127/0x2720 [ 1366.467905] ? lock_acquire+0x170/0x3f0 [ 1366.471887] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1366.476735] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1366.482191] ? __mutex_unlock_slowpath+0x75/0x770 [ 1366.487038] alloc_pages_current+0x155/0x260 [ 1366.491450] ion_page_pool_alloc+0x118/0x1b0 [ 1366.495859] ion_system_heap_allocate+0x133/0x8c0 [ 1366.500699] ? ion_alloc+0x187/0x810 [ 1366.504412] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1366.509858] ? ion_system_contig_heap_create+0x130/0x130 [ 1366.515305] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1366.520320] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1366.525164] ion_alloc+0x204/0x810 [ 1366.528707] ? ion_dma_buf_release+0x40/0x40 [ 1366.533212] ? __might_fault+0x177/0x1b0 [ 1366.537274] ion_ioctl+0xea/0x1f0 [ 1366.540723] ? ion_query_heaps+0x360/0x360 [ 1366.544959] ? __tun_chr_ioctl.isra.0+0x3310/0x3310 [ 1366.549973] ? ion_query_heaps+0x360/0x360 [ 1366.554207] do_vfs_ioctl+0x75a/0xff0 [ 1366.558006] ? ioctl_preallocate+0x1a0/0x1a0 [ 1366.562416] ? lock_downgrade+0x740/0x740 [ 1366.566658] ? __fget+0x225/0x360 [ 1366.570110] ? do_vfs_ioctl+0xff0/0xff0 [ 1366.574111] ? security_file_ioctl+0x83/0xb0 [ 1366.578515] SyS_ioctl+0x7f/0xb0 [ 1366.581880] ? do_vfs_ioctl+0xff0/0xff0 [ 1366.585854] do_syscall_64+0x1d5/0x640 [ 1366.589742] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1366.594924] RIP: 0033:0x466459 [ 1366.598101] RSP: 002b:00007f6ba9361188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1366.605798] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1366.613054] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1366.620311] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1366.627568] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1366.634824] R13: 00007ffd9352709f R14: 00007f6ba9361300 R15: 0000000000022000 [ 1366.700593] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1366.704454] warn_alloc_show_mem: 2 callbacks suppressed [ 1366.704457] Mem-Info: [ 1366.783790] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1366.827062] oom_reaper: reaped process 905 (syz-executor.0), now anon-rss:0kB, file-rss:4kB, shmem-rss:0kB [ 1366.827585] active_anon:77293 inactive_anon:23015 isolated_anon:9 [ 1366.827585] active_file:652 inactive_file:674 isolated_file:25 [ 1366.827585] unevictable:0 dirty:20 writeback:0 unstable:0 [ 1366.827585] slab_reclaimable:13799 slab_unreclaimable:129469 [ 1366.827585] mapped:45762 shmem:23343 pagetables:8818 bounce:0 [ 1366.827585] free:13675 free_pcp:99 free_cma:0 [ 1366.851106] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1366.901249] systemd-journal invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=0 [ 1366.923695] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1366.953346] systemd-journal cpuset=/ mems_allowed=0-1 [ 1366.964115] CPU: 0 PID: 785 Comm: systemd-journal Not tainted 4.14.228-syzkaller #0 [ 1366.971928] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1366.981268] Call Trace: [ 1366.983848] dump_stack+0x1b2/0x281 [ 1366.987463] dump_header+0x178/0x82f [ 1366.991168] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1366.996265] ? ___ratelimit+0x2cd/0x530 [ 1367.000231] oom_kill_process.cold+0x10/0xb18 [ 1367.004736] out_of_memory+0xe3e/0x1190 [ 1367.008712] ? oom_killer_disable+0x1c0/0x1c0 [ 1367.013198] ? mutex_trylock+0x152/0x1a0 [ 1367.017249] __alloc_pages_nodemask+0x23e1/0x2720 [ 1367.022091] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1367.026934] ? cache_grow_begin+0x41/0x630 [ 1367.031162] cache_grow_begin+0x91/0x630 [ 1367.035213] ? cache_grow_begin+0x91/0x630 [ 1367.039446] fallback_alloc+0x207/0x2c0 [ 1367.043433] kmem_cache_alloc+0x1e5/0x3c0 [ 1367.047573] getname_flags+0xc8/0x550 [ 1367.051363] user_path_at_empty+0x2a/0x50 [ 1367.055498] SyS_faccessat+0x21b/0x680 [ 1367.059374] ? SyS_fallocate+0x80/0x80 [ 1367.063249] ? do_syscall_64+0x4c/0x640 [ 1367.067210] ? SyS_faccessat+0x680/0x680 [ 1367.071259] do_syscall_64+0x1d5/0x640 [ 1367.075157] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1367.080333] RIP: 0033:0x7fd54675e9c7 [ 1367.084026] RSP: 002b:00007ffd778b6978 EFLAGS: 00000246 ORIG_RAX: 0000000000000015 [ 1367.091717] RAX: ffffffffffffffda RBX: 00007ffd778b99a0 RCX: 00007fd54675e9c7 [ 1367.098969] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000055d4c586e9a3 [ 1367.106224] RBP: 00007ffd778b6ac0 R08: 000055d4c58643e5 R09: 0000000000000018 [ 1367.113479] R10: 0000000000000069 R11: 0000000000000246 R12: 0000000000000000 [ 1367.120732] R13: 0000000000000000 R14: 000055d4c6438300 R15: 00007ffd778b6fb0 [ 1367.144610] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1367.145521] Node 0 active_anon:291420kB inactive_anon:76140kB active_file:1144kB inactive_file:1152kB unevictable:0kB isolated(anon):0kB isolated(file):204kB mapped:178908kB dirty:16kB writeback:0kB shmem:77312kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 237568kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1367.186841] Node 1 active_anon:17788kB inactive_anon:15920kB active_file:4kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:1396kB dirty:0kB writeback:0kB shmem:16060kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1367.217475] Node 0 DMA free:10952kB min:204kB low:252kB high:300kB active_anon:2100kB inactive_anon:8kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:56kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1367.247697] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1367.252867] Node 0 DMA32 free:17504kB min:36200kB low:45248kB high:54296kB active_anon:289320kB inactive_anon:76132kB active_file:1144kB inactive_file:1152kB unevictable:0kB writepending:16kB present:3129332kB managed:2788136kB mlocked:0kB kernel_stack:12000kB pagetables:16324kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1367.288084] lowmem_reserve[]: 0 0 0 0 0 [ 1367.292198] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1367.310014] Mem-Info: [ 1367.327853] active_anon:77302 inactive_anon:23015 isolated_anon:0 [ 1367.327853] active_file:255 inactive_file:244 isolated_file:32 [ 1367.327853] unevictable:0 dirty:4 writeback:0 unstable:0 [ 1367.327853] slab_reclaimable:13798 slab_unreclaimable:129207 [ 1367.327853] mapped:45001 shmem:23343 pagetables:8845 bounce:0 [ 1367.327853] free:13771 free_pcp:96 free_cma:0 [ 1367.361519] lowmem_reserve[]: 0 0 0 0 0 [ 1367.361551] Node 1 Normal free:26628kB min:53696kB low:67120kB high:80544kB active_anon:17788kB inactive_anon:15920kB active_file:4kB inactive_file:4kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:6304kB pagetables:19000kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1367.361574] lowmem_reserve[]: 0 0 0 0 0 [ 1367.361593] Node 0 DMA: 28*4kB (UMEH) 51*8kB (UMEH) 40*16kB (UMEH) 16*32kB (UMEH) 9*64kB (UMEH) 2*128kB (UM) 3*256kB (UE) 3*512kB (UME) 2*1024kB (ME) 2*2048kB [ 1367.400590] Node 0 active_anon:291420kB inactive_anon:76140kB active_file:780kB inactive_file:764kB unevictable:0kB isolated(anon):0kB isolated(file):128kB mapped:178108kB dirty:16kB writeback:0kB shmem:77312kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 237568kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1367.428872] (ME) 0*4096kB = 10952kB [ 1367.473246] Node 0 DMA32: 2210*4kB (UME) 514*8kB (UME) 97*16kB (ME) 62*32kB (UME) 9*64kB (UM) 2*128kB (M) 1*256kB (M) 1*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 18088kB [ 1367.490574] Node 1 active_anon:17788kB inactive_anon:15920kB active_file:4kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:1396kB dirty:0kB writeback:0kB shmem:16060kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1367.510301] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1367.540570] Node 0 DMA free:10952kB min:204kB low:252kB high:300kB active_anon:2100kB inactive_anon:8kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:56kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1367.572128] Node 1 Normal: 47*4kB (ME) 33*8kB (UME) 8*16kB (ME) 815*32kB (U) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 26660kB [ 1367.594770] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1367.603723] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1367.608766] Node 0 DMA32 free:17924kB min:36200kB low:45248kB high:54296kB active_anon:289320kB inactive_anon:76132kB active_file:568kB inactive_file:616kB unevictable:0kB writepending:16kB present:3129332kB managed:2788136kB mlocked:0kB kernel_stack:12000kB pagetables:16324kB bounce:0kB free_pcp:36kB local_pcp:0kB free_cma:0kB [ 1367.638174] Node 0 hugepages_total=1 hugepages_free=1 hugepages_surp=1 hugepages_size=2048kB [ 1367.656424] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1367.667637] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1367.676334] lowmem_reserve[]: 0 0 0 0 0 [ 1367.680337] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1367.706178] 23463 total pagecache pages [ 1367.710287] 0 pages in swap cache [ 1367.717946] Swap cache stats: add 0, delete 0, find 0/0 [ 1367.724542] Free swap = 0kB [ 1367.726413] lowmem_reserve[]: 0 0 0 [ 1367.736502] Total swap = 0kB [ 1367.740557] 0 0 [ 1367.745139] Node 1 Normal free:26628kB min:53696kB low:67120kB high:80544kB active_anon:17788kB inactive_anon:15920kB active_file:4kB inactive_file:4kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:6304kB pagetables:19000kB bounce:0kB free_pcp:24kB local_pcp:24kB free_cma:0kB [ 1367.774076] 2097051 pages RAM [ 1367.777316] 0 pages HighMem/MovableOnly [ 1367.791922] 363846 pages reserved [ 1367.800050] 0 pages cma reserved [ 1367.802220] lowmem_reserve[]: 0 0 0 0 0 [ 1367.807432] Node 0 DMA: 28*4kB (UMEH) 51*8kB (UMEH) 40*16kB (UMEH) 16*32kB (UMEH) 9*64kB (UMEH) 2*128kB (UM) 3*256kB (UE) 3*512kB (UME) 2*1024kB (ME) 2*2048kB (ME) 0*4096kB = 10952kB [ 1367.832936] syz-executor.0: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1367.860293] Node 0 DMA32: 2367*4kB (UME) 507*8kB (UME) 91*16kB (UME) 25*32kB (UME) 3*64kB (U) 0*128kB 0*256kB 0*512kB 0*1024kB 1*2048kB (M) 0*4096kB = 18020kB [ 1367.863999] syz-executor.0 cpuset= [ 1367.874804] syz-executor.1: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1367.890592] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1367.917538] Node 1 Normal: 54*4kB (UME) 33*8kB (UME) 8*16kB (ME) 815*32kB (U) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 26688kB [ 1367.919390] syz-executor.1 cpuset= [ 1367.931511] / mems_allowed=0-1 [ 1367.938262] CPU: 1 PID: 905 Comm: syz-executor.0 Not tainted 4.14.228-syzkaller #0 [ 1367.945958] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1367.947243] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1367.955317] Call Trace: [ 1367.955339] dump_stack+0x1b2/0x281 [ 1367.955353] warn_alloc.cold+0x96/0x1cc [ 1367.955365] ? zone_watermark_ok_safe+0x220/0x220 [ 1367.955375] ? usleep_range+0x130/0x130 [ 1367.955384] ? try_to_free_pages+0x23f/0x6e0 [ 1367.955394] ? _find_next_bit+0xdb/0x100 [ 1367.955405] ? run_timer_softirq+0x5a0/0x5a0 [ 1367.955422] __alloc_pages_nodemask+0x2127/0x2720 [ 1367.955438] ? lock_acquire+0x170/0x3f0 [ 1367.955453] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1367.969632] Node 0 hugepages_total=1 hugepages_free=1 hugepages_surp=1 hugepages_size=2048kB [ 1367.970462] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1367.974444] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1367.979241] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1367.988525] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1367.991622] ? audit_kill_trees+0x230/0x230 [ 1367.991638] alloc_pages_current+0x155/0x260 [ 1367.991652] ion_page_pool_alloc+0x118/0x1b0 [ 1367.991662] ion_system_heap_allocate+0x133/0x8c0 [ 1367.991675] ? ion_alloc+0x187/0x810 [ 1367.996085] 23388 total pagecache pages [ 1368.000913] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1368.000924] ? ion_system_contig_heap_create+0x130/0x130 [ 1368.000934] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1368.000945] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1368.000956] ion_alloc+0x204/0x810 [ 1368.000971] ? ion_dma_buf_release+0x40/0x40 [ 1368.000983] ? __might_fault+0x177/0x1b0 [ 1368.000995] ion_ioctl+0xea/0x1f0 [ 1368.001004] ? ion_query_heaps+0x360/0x360 [ 1368.001021] ? __tun_chr_ioctl.isra.0+0x3310/0x3310 [ 1368.010197] 0 pages in swap cache [ 1368.018384] ? ion_query_heaps+0x360/0x360 [ 1368.018396] do_vfs_ioctl+0x75a/0xff0 [ 1368.018408] ? ioctl_preallocate+0x1a0/0x1a0 [ 1368.018418] ? lock_downgrade+0x740/0x740 [ 1368.018431] ? __fget+0x225/0x360 [ 1368.028159] / [ 1368.031733] ? do_vfs_ioctl+0xff0/0xff0 [ 1368.037206] mems_allowed=0-1 [ 1368.045738] ? security_file_ioctl+0x83/0xb0 [ 1368.045749] SyS_ioctl+0x7f/0xb0 [ 1368.045758] ? do_vfs_ioctl+0xff0/0xff0 [ 1368.045770] do_syscall_64+0x1d5/0x640 [ 1368.045786] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1368.045795] RIP: 0033:0x466459 [ 1368.045800] RSP: 002b:00007fb4b9e68188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1368.045810] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1368.045815] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1368.045821] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1368.045829] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1368.055841] Swap cache stats: add 0, delete 0, find 0/0 [ 1368.058949] R13: 00007fffe82eec4f R14: 00007fb4b9e68300 R15: 0000000000022000 [ 1368.107588] Free swap = 0kB [ 1368.175642] warn_alloc_show_mem: 2 callbacks suppressed [ 1368.175646] Mem-Info: [ 1368.184549] Total swap = 0kB [ 1368.200597] syz-executor.2: [ 1368.230563] 2097051 pages RAM [ 1368.240867] CPU: 1 PID: 661 Comm: syz-executor.1 Not tainted 4.14.228-syzkaller #0 [ 1368.251761] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1368.261103] Call Trace: [ 1368.263193] 0 pages HighMem/MovableOnly [ 1368.263688] dump_stack+0x1b2/0x281 [ 1368.267632] 363846 pages reserved [ 1368.271242] warn_alloc.cold+0x96/0x1cc [ 1368.271255] ? zone_watermark_ok_safe+0x220/0x220 [ 1368.271265] ? usleep_range+0x130/0x130 [ 1368.271275] ? queue_work_on+0x10d/0x1d0 [ 1368.271286] ? _find_next_bit+0xdb/0x100 [ 1368.271297] ? run_timer_softirq+0x5a0/0x5a0 [ 1368.271316] __alloc_pages_nodemask+0x2127/0x2720 [ 1368.274773] 0 pages cma reserved [ 1368.278732] ? lock_acquire+0x170/0x3f0 [ 1368.312129] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1368.316972] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1368.321462] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1368.326905] ? alloc_pages_current+0xe3/0x260 [ 1368.331403] alloc_pages_current+0x155/0x260 [ 1368.335804] ion_page_pool_alloc+0x118/0x1b0 [ 1368.340202] ion_system_heap_allocate+0x133/0x8c0 [ 1368.345053] ? _raw_spin_unlock+0x29/0x40 [ 1368.349187] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1368.354116] ? ion_system_contig_heap_create+0x130/0x130 [ 1368.359562] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1368.364571] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1368.369402] ion_alloc+0x27a/0x810 [ 1368.372936] ? ion_dma_buf_release+0x40/0x40 [ 1368.377341] ? __might_fault+0x177/0x1b0 [ 1368.381394] ion_ioctl+0xea/0x1f0 [ 1368.384843] ? ion_query_heaps+0x360/0x360 [ 1368.389066] ? __tun_chr_ioctl.isra.0+0x3310/0x3310 [ 1368.394069] ? ion_query_heaps+0x360/0x360 [ 1368.398300] do_vfs_ioctl+0x75a/0xff0 [ 1368.402089] ? ioctl_preallocate+0x1a0/0x1a0 [ 1368.406485] ? lock_downgrade+0x740/0x740 [ 1368.410623] ? __fget+0x225/0x360 [ 1368.414066] ? do_vfs_ioctl+0xff0/0xff0 [ 1368.418036] ? security_file_ioctl+0x83/0xb0 [ 1368.422442] SyS_ioctl+0x7f/0xb0 [ 1368.425794] ? do_vfs_ioctl+0xff0/0xff0 [ 1368.429762] do_syscall_64+0x1d5/0x640 [ 1368.433643] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1368.438820] RIP: 0033:0x466459 [ 1368.442006] RSP: 002b:00007fdd4fdf9188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1368.449701] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1368.456960] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1368.464214] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1368.471482] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1368.478741] R13: 00007ffc5b7c415f R14: 00007fdd4fdf9300 R15: 0000000000022000 [ 1368.487764] Out of memory (oom_kill_allocating_task): Kill process 785 (systemd-journal) score 0 or sacrifice child [ 1368.498159] active_anon:77302 inactive_anon:23015 isolated_anon:0 [ 1368.498159] active_file:10 inactive_file:11 isolated_file:0 [ 1368.498159] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1368.498159] slab_reclaimable:13798 slab_unreclaimable:129207 [ 1368.498159] mapped:44502 shmem:23343 pagetables:8845 bounce:0 [ 1368.498159] free:13920 free_pcp:0 free_cma:0 [ 1368.499356] page allocation failure: order:0 [ 1368.533807] Killed process 785 (systemd-journal) total-vm:46096kB, anon-rss:468kB, file-rss:0kB, shmem-rss:1856kB [ 1368.549221] Node 0 active_anon:291220kB inactive_anon:76140kB active_file:40kB inactive_file:40kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:176616kB dirty:0kB writeback:0kB shmem:77312kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 237568kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1368.549534] oom_reaper: reaped process 785 (systemd-journal), now anon-rss:0kB, file-rss:0kB, shmem-rss:1856kB [ 1368.605362] Node 1 active_anon:17788kB inactive_anon:15920kB active_file:0kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:1392kB dirty:0kB writeback:0kB shmem:16060kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1368.606270] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1368.649384] Node 0 [ 1368.658105] systemd-journal invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=0 [ 1368.663933] DMA free:10952kB min:204kB low:252kB high:300kB active_anon:2100kB inactive_anon:8kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:56kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1368.674541] (null) [ 1368.702793] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1368.707835] Node 0 DMA32 free:18040kB min:36200kB low:45248kB high:54296kB active_anon:288920kB inactive_anon:76132kB active_file:40kB inactive_file:40kB unevictable:0kB writepending:0kB present:3129332kB managed:2788136kB mlocked:0kB kernel_stack:11968kB pagetables:16324kB bounce:0kB free_pcp:460kB local_pcp:0kB free_cma:0kB [ 1368.714168] systemd-journal cpuset= [ 1368.745617] lowmem_reserve[]: [ 1368.746717] syz-executor.2 cpuset= [ 1368.749264] 0 [ 1368.755761] / mems_allowed=0-1 [ 1368.758077] 0 0 0 0 [ 1368.767389] / [ 1368.769684] Node 0 [ 1368.769687] mems_allowed=0-1 [ 1368.769700] CPU: 0 PID: 785 Comm: systemd-journal Not tainted 4.14.228-syzkaller #0 [ 1368.771428] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1368.773612] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1368.776704] lowmem_reserve[]: [ 1368.784491] Call Trace: [ 1368.784511] dump_stack+0x1b2/0x281 [ 1368.784524] dump_header+0x178/0x82f [ 1368.809437] 0 [ 1368.818754] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1368.818764] ? ___ratelimit+0x2cd/0x530 [ 1368.818775] oom_kill_process.cold+0x10/0xb18 [ 1368.821890] 0 [ 1368.824462] out_of_memory+0xe3e/0x1190 [ 1368.828068] 0 [ 1368.831767] ? oom_killer_disable+0x1c0/0x1c0 [ 1368.831776] ? mutex_trylock+0x152/0x1a0 [ 1368.831786] __alloc_pages_nodemask+0x23e1/0x2720 [ 1368.831806] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1368.833581] 0 [ 1368.838675] ? cache_grow_begin+0x41/0x630 [ 1368.850552] 0 [ 1368.852862] cache_grow_begin+0x91/0x630 [ 1368.859170] ? cache_grow_begin+0x91/0x630 [ 1368.880555] Node 1 [ 1368.880802] fallback_alloc+0x207/0x2c0 [ 1368.884872] Normal free:26688kB min:53696kB low:67120kB high:80544kB active_anon:17788kB inactive_anon:15920kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:6304kB pagetables:19000kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 1368.889082] kmem_cache_alloc+0x1e5/0x3c0 [ 1368.900550] lowmem_reserve[]: [ 1368.923200] getname_flags+0xc8/0x550 [ 1368.923213] user_path_at_empty+0x2a/0x50 [ 1368.923224] SyS_faccessat+0x21b/0x680 [ 1368.942229] ? SyS_fallocate+0x80/0x80 [ 1368.946109] ? do_syscall_64+0x4c/0x640 [ 1368.950092] ? SyS_faccessat+0x680/0x680 [ 1368.950542] 0 0 [ 1368.954146] do_syscall_64+0x1d5/0x640 [ 1368.954160] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1368.956114] 0 [ 1368.959989] RIP: 0033:0x7fd54675e9c7 [ 1368.970629] RSP: 002b:00007ffd778b6978 EFLAGS: 00000246 ORIG_RAX: 0000000000000015 [ 1368.978328] RAX: ffffffffffffffda RBX: 00007ffd778b99a0 RCX: 00007fd54675e9c7 [ 1368.980543] 0 [ 1368.985583] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000055d4c586e9a3 [ 1368.985591] RBP: 00007ffd778b6ac0 R08: 000055d4c58643e5 R09: 0000000000000018 [ 1368.987383] 0 [ 1368.994642] R10: 0000000000000069 R11: 0000000000000246 R12: 0000000000000000 [ 1368.994647] R13: 0000000000000000 R14: 000055d4c6438300 R15: 00007ffd778b6fb0 [ 1369.018198] CPU: 0 PID: 713 Comm: syz-executor.2 Not tainted 4.14.228-syzkaller #0 [ 1369.026207] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1369.032066] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 1369.035549] Call Trace: [ 1369.035567] dump_stack+0x1b2/0x281 [ 1369.035581] warn_alloc.cold+0x96/0x1cc [ 1369.052543] ? zone_watermark_ok_safe+0x220/0x220 [ 1369.055560] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 1369.057381] ? usleep_range+0x130/0x130 [ 1369.057391] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1369.057404] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1369.057415] ? run_timer_softirq+0x5a0/0x5a0 [ 1369.057433] __alloc_pages_nodemask+0x2127/0x2720 [ 1369.057448] ? lock_acquire+0x170/0x3f0 [ 1369.057463] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1369.096325] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1369.100827] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1369.106283] alloc_pages_current+0x155/0x260 [ 1369.110693] ion_page_pool_alloc+0x118/0x1b0 [ 1369.115102] ion_system_heap_allocate+0x133/0x8c0 [ 1369.119937] Node 0 [ 1369.119949] ? _raw_spin_unlock+0x29/0x40 [ 1369.119960] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1369.131228] ? ion_system_contig_heap_create+0x130/0x130 [ 1369.131255] DMA: [ 1369.136673] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1369.136686] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1369.136697] ion_alloc+0x27a/0x810 [ 1369.148924] 28*4kB [ 1369.152093] ? ion_dma_buf_release+0x40/0x40 [ 1369.152107] ? __might_fault+0x177/0x1b0 [ 1369.152118] ion_ioctl+0xea/0x1f0 [ 1369.162264] (UME) [ 1369.162776] ? ion_query_heaps+0x360/0x360 [ 1369.172599] ? __tun_chr_ioctl.isra.0+0x3310/0x3310 [ 1369.175286] 51*8kB [ 1369.177616] ? ion_query_heaps+0x360/0x360 [ 1369.177627] do_vfs_ioctl+0x75a/0xff0 [ 1369.177638] ? ioctl_preallocate+0x1a0/0x1a0 [ 1369.184418] (UME) [ 1369.187860] ? lock_downgrade+0x740/0x740 [ 1369.187875] ? __fget+0x225/0x360 [ 1369.201959] ? do_vfs_ioctl+0xff0/0xff0 [ 1369.205928] ? security_file_ioctl+0x83/0xb0 [ 1369.210281] 40*16kB (UME) [ 1369.210328] SyS_ioctl+0x7f/0xb0 [ 1369.210337] ? do_vfs_ioctl+0xff0/0xff0 [ 1369.220499] do_syscall_64+0x1d5/0x640 [ 1369.224388] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1369.229569] RIP: 0033:0x466459 [ 1369.232755] RSP: 002b:00007f79418d2188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1369.240543] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1369.240546] 16*32kB (UME) [ 1369.247811] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1369.247819] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1369.260550] 9*64kB [ 1369.265163] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1369.265170] (UME) [ 1369.267390] R13: 00007ffef88b512f R14: 00007f79418d2300 R15: 0000000000022000 [ 1369.287801] device hsr_slave_0 entered promiscuous mode [ 1369.301360] device hsr_slave_1 entered promiscuous mode [ 1369.314777] 2*128kB (UM) 3*256kB (UE) 3*512kB (UME) 2*1024kB (ME) 2*2048kB (ME) 0*4096kB = 10952kB [ 1369.341446] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 1369.348543] Node 0 DMA32: 3384*4kB (UME) 659*8kB (UME) 384*16kB (UME) 7*32kB (UME) 332*64kB (U) 0*128kB 0*256kB 0*512kB 0*1024kB 1*2048kB (M) 0*4096kB = 48472kB [ 1369.363237] Mem-Info: [ 1369.366449] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 1369.368501] active_anon:77185 inactive_anon:23015 isolated_anon:0 [ 1369.368501] active_file:3 inactive_file:371 isolated_file:0 [ 1369.368501] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1369.368501] slab_reclaimable:13798 slab_unreclaimable:129334 [ 1369.368501] mapped:52938 shmem:23343 pagetables:8885 bounce:0 [ 1369.368501] free:35653 free_pcp:81 free_cma:0 [ 1369.426663] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1369.455117] Node 0 active_anon:290960kB inactive_anon:76140kB active_file:108kB inactive_file:1328kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:192304kB dirty:0kB writeback:0kB shmem:77312kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 237568kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1369.467202] Node 1 Normal: 6676*4kB (UME) 1265*8kB (UME) 780*16kB (UME) 441*32kB (U) 706*64kB (U) 203*128kB (U) 14*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 138168kB [ 1369.515010] Node 1 active_anon:17780kB inactive_anon:15920kB active_file:4kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:19448kB dirty:0kB writeback:0kB shmem:16060kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1369.550704] Node 0 DMA free:11016kB min:204kB low:252kB high:300kB active_anon:2100kB inactive_anon:8kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:56kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1369.570886] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1369.597697] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1369.622781] warn_alloc_show_mem: 1 callbacks suppressed [ 1369.622785] Mem-Info: [ 1369.632264] Node 0 DMA32 free:81456kB min:36200kB low:45248kB high:54296kB active_anon:288960kB inactive_anon:76132kB active_file:1708kB inactive_file:4628kB unevictable:0kB writepending:0kB present:3129332kB managed:2788136kB mlocked:0kB kernel_stack:12672kB pagetables:16336kB bounce:0kB free_pcp:1320kB local_pcp:736kB free_cma:0kB [ 1369.640802] Node 0 hugepages_total=1 hugepages_free=1 hugepages_surp=1 hugepages_size=2048kB [ 1369.662445] active_anon:77210 inactive_anon:23015 isolated_anon:0 [ 1369.662445] active_file:428 inactive_file:1157 isolated_file:0 [ 1369.662445] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1369.662445] slab_reclaimable:13798 slab_unreclaimable:129379 [ 1369.662445] mapped:53438 shmem:23343 pagetables:8885 bounce:0 [ 1369.662445] free:69092 free_pcp:661 free_cma:0 [ 1369.711041] lowmem_reserve[]: 0 0 0 0 0 [ 1369.715045] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1369.740710] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1369.749571] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1369.750189] Node 0 active_anon:291060kB inactive_anon:76140kB active_file:1888kB inactive_file:4920kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:194704kB dirty:0kB writeback:0kB shmem:77312kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 237568kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1369.774658] 25061 total pagecache pages [ 1369.800851] lowmem_reserve[]: 0 0 0 0 0 [ 1369.804867] Node 1 Normal free:197508kB min:53696kB low:67120kB high:80544kB active_anon:17780kB inactive_anon:15920kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:6336kB pagetables:19148kB bounce:0kB free_pcp:1320kB local_pcp:620kB free_cma:0kB [ 1369.827463] 0 pages in swap cache [ 1369.850586] Node 1 active_anon:17780kB inactive_anon:15920kB active_file:4kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:19448kB dirty:0kB writeback:0kB shmem:16060kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1369.863221] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 1369.879338] lowmem_reserve[]: 0 0 0 0 0 [ 1369.888300] Node 0 DMA: 32*4kB (UME) 51*8kB (UME) 40*16kB (UME) 16*32kB (UME) 10*64kB (UME) 2*128kB (UM) 3*256kB (UE) 3*512kB (UME) 2*1024kB (ME) 2*2048kB (ME) 0*4096kB = 11032kB [ 1369.901150] Swap cache stats: add 0, delete 0, find 0/0 [ 1369.904859] Node 0 DMA free:11016kB min:204kB low:252kB high:300kB active_anon:2100kB inactive_anon:8kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:56kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1369.914118] Free swap = 0kB [ 1369.936677] Node 0 DMA32: 727*4kB (UME) 583*8kB (UME) 750*16kB (UME) 439*32kB (UME) 370*64kB (U) 0*128kB 0*256kB 0*512kB 0*1024kB 1*2048kB (M) 0*4096kB = 59348kB [ 1369.954561] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1369.959671] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1369.970507] Node 0 DMA32 free:45748kB min:36200kB low:45248kB high:54296kB active_anon:288960kB inactive_anon:76132kB active_file:2872kB inactive_file:4012kB unevictable:0kB writepending:0kB present:3129332kB managed:2788136kB mlocked:0kB kernel_stack:11968kB pagetables:16336kB bounce:0kB free_pcp:900kB local_pcp:648kB free_cma:0kB [ 1369.977750] Total swap = 0kB [ 1370.004656] Node 1 Normal: 9121*4kB (UME) 4576*8kB (UME) 1811*16kB (UME) 543*32kB (U) 717*64kB (U) 203*128kB (U) 14*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 194900kB [ 1370.031473] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1370.036732] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1370.040198] 2097051 pages RAM [ 1370.050297] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 1370.055587] lowmem_reserve[]: 0 0 0 0 0 [ 1370.062466] Node 0 hugepages_total=1 hugepages_free=1 hugepages_surp=1 hugepages_size=2048kB [ 1370.065878] Node 0 [ 1370.072893] 0 pages HighMem/MovableOnly [ 1370.075504] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1370.079092] 363846 pages reserved [ 1370.079097] 0 pages cma reserved [ 1370.081142] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1370.125740] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 1370.134698] lowmem_reserve[]: 0 0 0 0 0 [ 1370.142033] Node 1 Normal free:131660kB min:53696kB low:67120kB high:80544kB active_anon:17780kB inactive_anon:15920kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:6336kB pagetables:19148kB bounce:0kB free_pcp:820kB local_pcp:120kB free_cma:0kB [ 1370.146113] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1370.180740] lowmem_reserve[]: 0 0 0 0 0 [ 1370.191675] Node 0 DMA: 32*4kB (UME) 51*8kB (UME) 40*16kB (UME) 16*32kB (UME) 10*64kB (UME) 2*128kB (UM) 3*256kB (UE) 3*512kB (UME) 2*1024kB (ME) 2*2048kB (ME) 0*4096kB = 11032kB [ 1370.213744] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1370.222927] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1370.231400] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 1370.237467] 8021q: adding VLAN 0 to HW filter on device team0 [ 1370.250598] 24979 total pagecache pages [ 1370.254627] 0 pages in swap cache [ 1370.258081] Swap cache stats: add 0, delete 0, find 0/0 [ 1370.262079] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 1370.271195] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1370.276325] Node 0 DMA32: 787*4kB (UME) 506*8kB (UME) 91*16kB (UME) 338*32kB (UME) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 19468kB [ 1370.279282] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1370.310780] Free swap = 0kB [ 1370.313811] Total swap = 0kB [ 1370.316823] 2097051 pages RAM [ 1370.319924] 0 pages HighMem/MovableOnly [ 1370.320574] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1370.332755] syz-executor.0: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1370.350356] bridge0: port 1(bridge_slave_0) entered blocking state [ 1370.352918] Node 1 Normal: 42*4kB (UME) 32*8kB (ME) 636*16kB (UME) 543*32kB (U) 0*64kB 0*128kB 0*256kB 0*512kB [ 1370.356735] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1370.356743] 0*1024kB [ 1370.370642] 363846 pages reserved [ 1370.379323] 0 pages cma reserved [ 1370.386095] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 1370.393882] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 1370.400824] 0*2048kB 0*4096kB = 27976kB [ 1370.400841] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1370.400848] Node 0 hugepages_total=1 hugepages_free=1 hugepages_surp=1 hugepages_size=2048kB [ 1370.400855] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1370.400861] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1370.400865] 24404 total pagecache pages [ 1370.400875] 0 pages in swap cache [ 1370.400880] Swap cache stats: add 0, delete 0, find 0/0 [ 1370.400884] Free swap = 0kB [ 1370.400887] Total swap = 0kB [ 1370.400893] 2097051 pages RAM [ 1370.400896] 0 pages HighMem/MovableOnly [ 1370.400899] 363846 pages reserved [ 1370.400903] 0 pages cma reserved [ 1370.450743] Out of memory (oom_kill_allocating_task): Kill process 785 (systemd-journal) score 0 or sacrifice child [ 1370.453632] CPU: 1 PID: 905 Comm: syz-executor.0 Not tainted 4.14.228-syzkaller #0 [ 1370.460666] Killed process 785 (systemd-journal) total-vm:46096kB, anon-rss:0kB, file-rss:0kB, shmem-rss:1856kB [ 1370.461685] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1370.465900] systemd-journal: [ 1370.469118] Call Trace: [ 1370.500611] page allocation failure: order:1 [ 1370.500926] dump_stack+0x1b2/0x281 [ 1370.510270] , mode:0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask= [ 1370.513366] warn_alloc.cold+0x96/0x1cc [ 1370.513379] ? zone_watermark_ok_safe+0x220/0x220 [ 1370.513401] __alloc_pages_nodemask+0x2127/0x2720 [ 1370.513418] ? lock_acquire+0x170/0x3f0 [ 1370.540602] (null) [ 1370.543556] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1370.547520] systemd-journal cpuset= [ 1370.549661] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1370.563529] ? __mutex_unlock_slowpath+0x75/0x770 [ 1370.568377] alloc_pages_current+0x155/0x260 [ 1370.572792] ion_page_pool_alloc+0x118/0x1b0 [ 1370.577195] ion_system_heap_allocate+0x133/0x8c0 [ 1370.582037] ? _raw_spin_unlock+0x29/0x40 [ 1370.586179] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1370.590556] / [ 1370.591103] ? ion_system_contig_heap_create+0x130/0x130 [ 1370.591107] mems_allowed=0-1 [ 1370.601333] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1370.606365] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1370.611209] ion_alloc+0x27a/0x810 [ 1370.614777] ? ion_dma_buf_release+0x40/0x40 [ 1370.619183] ? __might_fault+0x177/0x1b0 [ 1370.623245] ion_ioctl+0xea/0x1f0 [ 1370.626687] ? ion_query_heaps+0x360/0x360 [ 1370.630919] ? __tun_chr_ioctl.isra.0+0x3310/0x3310 [ 1370.635926] ? ion_query_heaps+0x360/0x360 [ 1370.640155] do_vfs_ioctl+0x75a/0xff0 [ 1370.643954] ? ioctl_preallocate+0x1a0/0x1a0 [ 1370.648373] ? lock_downgrade+0x740/0x740 [ 1370.652519] ? __fget+0x225/0x360 [ 1370.655959] ? do_vfs_ioctl+0xff0/0xff0 [ 1370.659924] ? security_file_ioctl+0x83/0xb0 [ 1370.664324] SyS_ioctl+0x7f/0xb0 [ 1370.667683] ? do_vfs_ioctl+0xff0/0xff0 [ 1370.671652] do_syscall_64+0x1d5/0x640 [ 1370.675542] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1370.680738] RIP: 0033:0x466459 [ 1370.684261] RSP: 002b:00007fb4b9e68188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1370.691959] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1370.699218] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1370.706479] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1370.713740] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1370.721004] R13: 00007fffe82eec4f R14: 00007fb4b9e68300 R15: 0000000000022000 [ 1370.728286] CPU: 0 PID: 785 Comm: systemd-journal Not tainted 4.14.228-syzkaller #0 [ 1370.736081] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1370.739266] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1370.745422] Call Trace: [ 1370.745441] dump_stack+0x1b2/0x281 [ 1370.745453] warn_alloc.cold+0x96/0x1cc [ 1370.745462] ? lock_downgrade+0x740/0x740 [ 1370.745471] ? zone_watermark_ok_safe+0x220/0x220 [ 1370.745482] ? wake_up_q+0x82/0xd0 [ 1370.753329] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1370.755057] ? wait_for_completion_io+0x10/0x10 [ 1370.759076] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1370.762641] __alloc_pages_nodemask+0x2127/0x2720 [ 1370.762662] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1370.762683] ? cache_grow_begin+0x41/0x630 [ 1370.767164] bridge0: port 2(bridge_slave_1) entered blocking state [ 1370.771632] cache_grow_begin+0x91/0x630 [ 1370.771642] ? cache_grow_begin+0x91/0x630 [ 1370.771651] fallback_alloc+0x207/0x2c0 [ 1370.771663] kmem_cache_alloc+0x1e5/0x3c0 [ 1370.775205] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1370.782541] getname_flags+0xc8/0x550 [ 1370.782553] user_path_at_empty+0x2a/0x50 [ 1370.782563] SyS_faccessat+0x21b/0x680 [ 1370.790308] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 1370.794472] ? SyS_fallocate+0x80/0x80 [ 1370.794482] ? do_syscall_64+0x4c/0x640 [ 1370.794488] ? SyS_faccessat+0x680/0x680 [ 1370.794497] do_syscall_64+0x1d5/0x640 [ 1370.794509] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1370.799819] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1370.804159] RIP: 0033:0x7fd54675e9c7 [ 1370.804164] RSP: 002b:00007ffd778b6978 EFLAGS: 00000246 ORIG_RAX: 0000000000000015 [ 1370.804173] RAX: ffffffffffffffda RBX: 00007ffd778b99a0 RCX: 00007fd54675e9c7 [ 1370.804177] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000055d4c586e9a3 [ 1370.804181] RBP: 00007ffd778b6ac0 R08: 000055d4c58643e5 R09: 0000000000000018 [ 1370.804186] R10: 0000000000000069 R11: 0000000000000246 R12: 0000000000000000 [ 1370.804193] R13: 0000000000000000 R14: 000055d4c6438300 R15: 00007ffd778b6fb0 [ 1370.811627] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 1370.920598] Mem-Info: [ 1370.940407] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 1370.960759] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1370.970752] active_anon:77193 inactive_anon:23015 isolated_anon:0 [ 1370.970752] active_file:643 inactive_file:653 isolated_file:0 [ 1370.970752] unevictable:0 dirty:1 writeback:0 unstable:0 [ 1370.970752] slab_reclaimable:13807 slab_unreclaimable:128843 [ 1370.970752] mapped:53383 shmem:23343 pagetables:8848 bounce:0 [ 1370.970752] free:67009 free_pcp:288 free_cma:0 [ 1370.984131] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1371.025035] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1371.049505] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 1371.059865] Node 0 active_anon:290992kB inactive_anon:76140kB active_file:2268kB inactive_file:2212kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:194648kB dirty:4kB writeback:0kB shmem:77312kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 237568kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1371.064390] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready 20:21:44 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r1, 0x800454cf, &(0x7f0000000240)) ioctl$TUNSETSNDBUF(r1, 0x400454d4, &(0x7f0000000040)=0x1000) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r2, 0x800454cf, &(0x7f0000000240)) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000080)={'lo\x00', @broadcast}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000180)={0x80000000, 0xa}) 20:21:44 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r1, 0x800454cf, &(0x7f0000000240)) ioctl$TUNSETSNDBUF(r1, 0x400454d4, &(0x7f0000000040)=0x1000) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r2, 0x800454cf, &(0x7f0000000240)) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000180)={0x80000000, 0xa}) openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) [ 1371.165442] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1371.169548] Node 1 active_anon:18052kB inactive_anon:15920kB active_file:1720kB inactive_file:5668kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:24620kB dirty:12kB writeback:0kB shmem:16060kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1371.194928] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1371.254165] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 1371.271423] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1371.274288] Node 0 [ 1371.279076] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1371.300839] DMA free:11060kB min:204kB low:252kB high:300kB active_anon:2100kB inactive_anon:8kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:56kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1371.301772] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 1371.339708] IPVS: ftp: loaded support on port[0] = 21 [ 1371.408143] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1371.424533] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1371.439349] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1371.445464] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 1371.458669] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1371.461691] Node 0 DMA32 free:17668kB min:36200kB low:45248kB high:54296kB active_anon:290960kB inactive_anon:76132kB active_file:2304kB inactive_file:1608kB unevictable:0kB writepending:36kB present:3129332kB managed:2788136kB mlocked:0kB kernel_stack:11936kB pagetables:16332kB bounce:0kB free_pcp:328kB local_pcp:88kB free_cma:0kB [ 1371.494001] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 1371.534301] syz-executor.4 invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=0 [ 1371.574049] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 1371.584906] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 1371.600059] CPU: 1 PID: 972 Comm: syz-executor.4 Not tainted 4.14.228-syzkaller #0 [ 1371.601094] lowmem_reserve[]: [ 1371.607768] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1371.620230] Call Trace: [ 1371.622814] dump_stack+0x1b2/0x281 [ 1371.626450] dump_header+0x178/0x82f [ 1371.630174] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1371.635266] ? ___ratelimit+0x2cd/0x530 [ 1371.639251] oom_kill_process.cold+0x10/0xb18 [ 1371.643744] out_of_memory+0xe3e/0x1190 [ 1371.647727] ? oom_killer_disable+0x1c0/0x1c0 [ 1371.652211] ? mutex_trylock+0x152/0x1a0 [ 1371.656264] __alloc_pages_nodemask+0x23e1/0x2720 [ 1371.661110] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1371.665952] ? mark_held_locks+0xa6/0xf0 [ 1371.670005] ? cache_grow_begin+0x41/0x630 [ 1371.674229] cache_grow_begin+0x91/0x630 [ 1371.678277] ? cache_grow_begin+0x91/0x630 [ 1371.682501] fallback_alloc+0x207/0x2c0 [ 1371.686471] __kmalloc_track_caller+0x20e/0x400 [ 1371.691130] ? __addrconf_sysctl_register+0x8a/0x380 [ 1371.696223] kmemdup+0x23/0x50 [ 1371.699402] __addrconf_sysctl_register+0x8a/0x380 [ 1371.704325] ? inet6_netconf_notify_devconf+0x170/0x170 [ 1371.709675] ? inet6_netconf_notify_devconf+0x14c/0x170 [ 1371.715036] ? addrconf_add_dev+0x140/0x140 [ 1371.719346] ? memcpy+0x35/0x50 [ 1371.722619] ? addrconf_add_dev+0x140/0x140 [ 1371.726944] addrconf_init_net+0x216/0x3b0 [ 1371.731182] ? addrconf_add_dev+0x140/0x140 [ 1371.735513] ops_init+0xaa/0x3e0 [ 1371.738881] setup_net+0x22f/0x530 [ 1371.742414] ? rtnl_net_dumpid_one+0x240/0x240 [ 1371.746987] ? kmem_cache_alloc+0x35f/0x3c0 [ 1371.751299] copy_net_ns+0x19b/0x440 [ 1371.755003] create_new_namespaces+0x375/0x720 [ 1371.759590] unshare_nsproxy_namespaces+0xa1/0x1d0 [ 1371.764529] SyS_unshare+0x308/0x7f0 [ 1371.769029] ? walk_process_tree+0x2a0/0x2a0 [ 1371.773436] ? task_work_run+0xfd/0x190 [ 1371.777400] ? do_syscall_64+0x4c/0x640 [ 1371.781368] ? walk_process_tree+0x2a0/0x2a0 [ 1371.785763] do_syscall_64+0x1d5/0x640 [ 1371.789642] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1371.794820] RIP: 0033:0x467a07 [ 1371.798002] RSP: 002b:00007fffa36252a8 EFLAGS: 00000202 ORIG_RAX: 0000000000000110 [ 1371.805700] RAX: ffffffffffffffda RBX: 00007fffa36258c8 RCX: 0000000000467a07 [ 1371.812957] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000040000000 [ 1371.820212] RBP: 00007fffa3625360 R08: 0000000000000000 R09: 0000000000000000 [ 1371.827484] R10: 0000000000000000 R11: 0000000000000202 R12: 00000000ffffffff [ 1371.834740] R13: 000000000056ca68 R14: 0000000000000000 R15: 00000000000000f8 [ 1371.855698] syz-executor.1: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1371.855859] 0 [ 1371.889712] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1371.891244] 0 [ 1371.891773] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1371.898100] 0 [ 1371.910225] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 1371.923858] 0 0 [ 1371.925852] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1371.929845] CPU: 1 PID: 1022 Comm: syz-executor.1 Not tainted 4.14.228-syzkaller #0 [ 1371.951497] lowmem_reserve[]: [ 1371.959158] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1371.959168] Call Trace: [ 1371.962311] 0 [ 1371.971607] dump_stack+0x1b2/0x281 [ 1371.971621] warn_alloc.cold+0x96/0x1cc [ 1371.971633] ? zone_watermark_ok_safe+0x220/0x220 [ 1371.971658] __alloc_pages_nodemask+0x2127/0x2720 [ 1371.974278] 0 [ 1371.976032] ? __schedule+0x893/0x1de0 [ 1371.979628] 0 0 [ 1371.983598] ? lock_acquire+0x170/0x3f0 [ 1371.983614] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1371.983631] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1371.983643] ? __mutex_unlock_slowpath+0x75/0x770 [ 1371.983658] alloc_pages_current+0x155/0x260 [ 1371.988485] 0 [ 1371.993330] ion_page_pool_alloc+0x118/0x1b0 [ 1371.993340] ion_system_heap_allocate+0x133/0x8c0 [ 1371.993350] ? ion_alloc+0x187/0x810 [ 1371.993360] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1371.993369] ? ion_system_contig_heap_create+0x130/0x130 [ 1371.993378] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1371.993396] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1371.999049] ion_alloc+0x204/0x810 [ 1372.001038] Node 1 [ 1372.004965] ? ion_dma_buf_release+0x40/0x40 [ 1372.009813] Normal free:26648kB min:53696kB low:67120kB high:80544kB active_anon:18152kB inactive_anon:15920kB active_file:684kB inactive_file:480kB unevictable:0kB writepending:12kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:6592kB pagetables:19220kB bounce:0kB free_pcp:776kB local_pcp:656kB free_cma:0kB [ 1372.015592] ? __might_fault+0x177/0x1b0 [ 1372.015605] ion_ioctl+0xea/0x1f0 [ 1372.015614] ? ion_query_heaps+0x360/0x360 [ 1372.015628] ? __tun_chr_ioctl.isra.0+0x3310/0x3310 [ 1372.015634] ? ion_query_heaps+0x360/0x360 [ 1372.015644] do_vfs_ioctl+0x75a/0xff0 [ 1372.015654] ? ioctl_preallocate+0x1a0/0x1a0 [ 1372.015663] ? lock_downgrade+0x740/0x740 [ 1372.015676] ? __fget+0x225/0x360 [ 1372.015687] ? do_vfs_ioctl+0xff0/0xff0 [ 1372.021158] lowmem_reserve[]: [ 1372.024920] ? security_file_ioctl+0x83/0xb0 [ 1372.026692] 0 [ 1372.031085] SyS_ioctl+0x7f/0xb0 [ 1372.031094] ? do_vfs_ioctl+0xff0/0xff0 [ 1372.031106] do_syscall_64+0x1d5/0x640 [ 1372.031120] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1372.031128] RIP: 0033:0x466459 [ 1372.031141] RSP: 002b:00007fdd4fdd8188 EFLAGS: 00000246 [ 1372.036070] 0 [ 1372.039740] ORIG_RAX: 0000000000000010 [ 1372.179685] RAX: ffffffffffffffda RBX: 000000000056c008 RCX: 0000000000466459 [ 1372.186948] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1372.194213] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1372.201472] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c008 [ 1372.208737] R13: 00007ffc5b7c415f R14: 00007fdd4fdd8300 R15: 0000000000022000 [ 1372.216270] 0 0 0 [ 1372.218469] Node 0 DMA: 10*4kB (ME) 9*8kB (ME) 9*16kB (UME) 11*32kB (UME) 10*64kB (UME) 2*128kB (UM) 3*256kB (UE) 3*512kB (UME) 3*1024kB (UME) 2*2048kB (ME) 0*4096kB = 10976kB [ 1372.240683] syz-executor.2: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1372.260847] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 1372.264434] Node 0 DMA32: [ 1372.265980] CPU: 1 PID: 1024 Comm: syz-executor.2 Not tainted 4.14.228-syzkaller #0 [ 1372.265988] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1372.268821] 1936*4kB [ 1372.276594] Call Trace: [ 1372.276616] dump_stack+0x1b2/0x281 [ 1372.276630] warn_alloc.cold+0x96/0x1cc [ 1372.276641] ? zone_watermark_ok_safe+0x220/0x220 [ 1372.276665] __alloc_pages_nodemask+0x2127/0x2720 [ 1372.276681] ? lock_acquire+0x170/0x3f0 [ 1372.276697] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1372.317001] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1372.322448] ? __mutex_unlock_slowpath+0x75/0x770 [ 1372.327285] alloc_pages_current+0x155/0x260 [ 1372.331698] ion_page_pool_alloc+0x118/0x1b0 [ 1372.336096] ion_system_heap_allocate+0x133/0x8c0 [ 1372.340928] ? ion_alloc+0x187/0x810 [ 1372.344632] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1372.350069] ? ion_system_contig_heap_create+0x130/0x130 [ 1372.355515] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1372.360609] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1372.365451] ion_alloc+0x204/0x810 [ 1372.368996] ? ion_dma_buf_release+0x40/0x40 [ 1372.373411] ? __might_fault+0x177/0x1b0 [ 1372.377462] ion_ioctl+0xea/0x1f0 [ 1372.380905] ? ion_query_heaps+0x360/0x360 [ 1372.385131] ? _raw_spin_unlock+0x29/0x40 [ 1372.389268] ? ion_query_heaps+0x360/0x360 [ 1372.393961] do_vfs_ioctl+0x75a/0xff0 [ 1372.397751] ? ioctl_preallocate+0x1a0/0x1a0 [ 1372.402157] ? lock_downgrade+0x740/0x740 [ 1372.406300] ? __fget+0x225/0x360 [ 1372.409743] ? do_vfs_ioctl+0xff0/0xff0 [ 1372.413707] ? security_file_ioctl+0x83/0xb0 [ 1372.418120] SyS_ioctl+0x7f/0xb0 [ 1372.421480] ? do_vfs_ioctl+0xff0/0xff0 [ 1372.425444] do_syscall_64+0x1d5/0x640 [ 1372.429337] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1372.434527] RIP: 0033:0x466459 [ 1372.437701] RSP: 002b:00007f7941890188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1372.445398] RAX: ffffffffffffffda RBX: 000000000056c0b0 RCX: 0000000000466459 [ 1372.452658] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1372.459928] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1372.467182] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c0b0 [ 1372.474448] R13: 00007ffef88b512f R14: 00007f7941890300 R15: 0000000000022000 [ 1372.481804] (UME) 522*8kB (UME) 94*16kB (UMEH) 7*32kB (UME) 2*64kB (M) 4*128kB (UM) 2*256kB (UM) 9*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 19408kB [ 1372.493668] warn_alloc_show_mem: 1 callbacks suppressed [ 1372.493671] Mem-Info: [ 1372.495131] Node 0 [ 1372.500438] active_anon:77766 inactive_anon:23018 isolated_anon:0 [ 1372.500438] active_file:214 inactive_file:236 isolated_file:55 [ 1372.500438] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1372.500438] slab_reclaimable:13829 slab_unreclaimable:128815 [ 1372.500438] mapped:53079 shmem:23347 pagetables:8885 bounce:0 [ 1372.500438] free:13886 free_pcp:100 free_cma:0 [ 1372.502858] Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1372.502900] Node 1 Normal: 107*4kB (UME) [ 1372.508263] Node 0 active_anon:292864kB inactive_anon:76140kB active_file:824kB inactive_file:912kB unevictable:0kB isolated(anon):0kB isolated(file):220kB mapped:192848kB dirty:0kB writeback:0kB shmem:77312kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 239616kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1372.581906] 61*8kB (UME) 26*16kB (UME) 19*32kB (UM) 17*64kB (UM) 52*128kB (UM) 57*256kB (UM) 1*512kB (M) 0*1024kB 1*2048kB (M) 0*4096kB = 26836kB [ 1372.588000] Node 1 active_anon:18200kB inactive_anon:15932kB active_file:32kB inactive_file:32kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:19468kB dirty:0kB writeback:0kB shmem:16076kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1372.595216] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1372.595222] Node 0 hugepages_total=1 hugepages_free=1 hugepages_surp=1 hugepages_size=2048kB [ 1372.595227] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1372.595232] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1372.595235] 23764 total pagecache pages [ 1372.595244] 0 pages in swap cache [ 1372.595250] Swap cache stats: add 0, delete 0, find 0/0 [ 1372.595253] Free swap = 0kB [ 1372.595256] Total swap = 0kB [ 1372.595262] 2097051 pages RAM [ 1372.595265] 0 pages HighMem/MovableOnly [ 1372.595269] 363846 pages reserved [ 1372.595272] 0 pages cma reserved [ 1372.680555] Mem-Info: [ 1372.689243] Node 0 DMA free:10976kB min:204kB low:252kB high:300kB active_anon:2100kB inactive_anon:8kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:56kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1372.720576] active_anon:77766 inactive_anon:23018 isolated_anon:0 [ 1372.720576] active_file:189 inactive_file:211 isolated_file:55 [ 1372.720576] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1372.720576] slab_reclaimable:13829 slab_unreclaimable:128815 [ 1372.720576] mapped:53054 shmem:23347 pagetables:8885 bounce:0 [ 1372.720576] free:13885 free_pcp:51 free_cma:0 [ 1372.720593] Node 0 active_anon:292864kB inactive_anon:76140kB active_file:724kB inactive_file:812kB unevictable:0kB isolated(anon):0kB isolated(file):220kB mapped:192748kB dirty:0kB writeback:0kB shmem:77312kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 239616kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1372.720607] Node 1 active_anon:18200kB inactive_anon:15932kB active_file:32kB inactive_file:32kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:19468kB dirty:0kB writeback:0kB shmem:16076kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1372.720611] Node 0 DMA free:10976kB min:204kB low:252kB high:300kB active_anon:2100kB inactive_anon:8kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:56kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1372.720628] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1372.720653] Node 0 DMA32 free:17732kB min:36200kB low:45248kB high:54296kB active_anon:290764kB inactive_anon:76132kB active_file:1044kB inactive_file:1148kB unevictable:0kB writepending:0kB present:3129332kB managed:2788136kB mlocked:0kB kernel_stack:11936kB pagetables:16332kB bounce:0kB free_pcp:84kB local_pcp:8kB free_cma:0kB [ 1372.758827] lowmem_reserve[]: [ 1372.890605] lowmem_reserve[]: 0 0 0 0 0 [ 1372.897751] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1372.940580] lowmem_reserve[]: 0 0 0 0 0 [ 1372.944599] Node 1 Normal free:26824kB min:53696kB low:67120kB high:80544kB active_anon:18200kB inactive_anon:15932kB active_file:32kB inactive_file:32kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:6592kB pagetables:19152kB bounce:0kB free_pcp:120kB local_pcp:0kB free_cma:0kB [ 1373.000372] 0 2717 2718 2718 2718 [ 1373.020176] Node 0 DMA32 free:18612kB min:36200kB low:45248kB high:54296kB active_anon:290764kB inactive_anon:76132kB active_file:388kB inactive_file:208kB unevictable:0kB writepending:0kB present:3129332kB managed:2788136kB mlocked:0kB kernel_stack:11936kB pagetables:16332kB bounce:0kB free_pcp:24kB local_pcp:0kB free_cma:0kB [ 1373.020575] lowmem_reserve[]: 0 0 0 0 0 [ 1373.052726] lowmem_reserve[]: [ 1373.054733] Node 0 [ 1373.054736] 0 0 [ 1373.057826] DMA: [ 1373.060045] 0 [ 1373.062087] 10*4kB (ME) 9*8kB (ME) 9*16kB (UME) 11*32kB (UME) 10*64kB (UME) 2*128kB (UM) 3*256kB (UE) 3*512kB (UME) 3*1024kB (UME) 2*2048kB (ME) 0*4096kB = 10976kB [ 1373.062157] Node 0 DMA32: 2385*4kB (ME) 519*8kB (ME) 92*16kB (UMEH) 6*32kB (ME) 3*64kB (UM) 4*128kB (UM) 2*256kB (UM) 4*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 18620kB [ 1373.062222] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1373.062263] Node 1 Normal: 106*4kB (ME) 61*8kB (UME) 25*16kB (ME) 19*32kB (UM) 17*64kB (UM) 53*128kB (UM) 57*256kB (UM) 1*512kB (M) 0*1024kB 1*2048kB (M) 0*4096kB = 26944kB [ 1373.062341] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1373.062347] Node 0 hugepages_total=1 hugepages_free=1 hugepages_surp=1 hugepages_size=2048kB [ 1373.062353] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1373.062359] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1373.062363] 23397 total pagecache pages [ 1373.062372] 0 pages in swap cache [ 1373.062377] Swap cache stats: add 0, delete 0, find 0/0 [ 1373.062380] Free swap = 0kB [ 1373.062387] Total swap = 0kB [ 1373.065367] 0 [ 1373.066269] 2097051 pages RAM [ 1373.084171] 0 [ 1373.096139] 0 pages HighMem/MovableOnly [ 1373.140551] 363846 pages reserved [ 1373.159722] Node 0 [ 1373.170620] Bluetooth: hci1 command 0x0409 tx timeout [ 1373.175646] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1373.233989] lowmem_reserve[]: 0 0 0 0 0 [ 1373.237994] Node 1 Normal free:26816kB min:53696kB low:67120kB high:80544kB active_anon:18200kB inactive_anon:15932kB active_file:32kB inactive_file:32kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:6592kB pagetables:19152kB bounce:0kB free_pcp:120kB local_pcp:0kB free_cma:0kB [ 1373.244598] 0 pages cma reserved [ 1373.286464] lowmem_reserve[]: 0 0 0 0 0 [ 1373.290477] Node 0 DMA: 10*4kB (ME) 9*8kB (ME) 9*16kB (UME) 11*32kB (UME) 10*64kB (UME) 2*128kB (UM) 3*256kB (UE) 3*512kB (UME) 3*1024kB (UME) 2*2048kB (ME) 0*4096kB = 10976kB [ 1373.303864] Out of memory (oom_kill_allocating_task): Kill process 972 (syz-executor.4) score 0 or sacrifice child [ 1373.334034] syz-executor.0: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1373.339129] Node 0 [ 1373.345971] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 1373.345994] CPU: 0 PID: 905 Comm: syz-executor.0 Not tainted 4.14.228-syzkaller #0 [ 1373.346000] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1373.346004] Call Trace: [ 1373.346021] dump_stack+0x1b2/0x281 [ 1373.346036] warn_alloc.cold+0x96/0x1cc [ 1373.346048] ? zone_watermark_ok_safe+0x220/0x220 [ 1373.346063] ? usleep_range+0x130/0x130 [ 1373.358988] DMA32: [ 1373.361079] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1373.361094] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1373.361105] ? run_timer_softirq+0x5a0/0x5a0 [ 1373.370442] 2392*4kB [ 1373.373019] __alloc_pages_nodemask+0x2127/0x2720 [ 1373.373038] ? lock_acquire+0x170/0x3f0 [ 1373.376644] (UME) [ 1373.380603] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1373.380613] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1373.380629] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1373.385458] 520*8kB [ 1373.389421] alloc_pages_current+0x155/0x260 [ 1373.391663] (UME) [ 1373.396742] ion_page_pool_alloc+0x118/0x1b0 [ 1373.401764] 92*16kB [ 1373.406165] ion_system_heap_allocate+0x133/0x8c0 [ 1373.408546] (UME) [ 1373.413372] ? _raw_spin_unlock+0x29/0x40 [ 1373.413382] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1373.413393] ? ion_system_contig_heap_create+0x130/0x130 [ 1373.417343] 6*32kB [ 1373.419478] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1373.424312] (ME) [ 1373.428776] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1373.434230] 3*64kB [ 1373.436518] ion_alloc+0x27a/0x810 [ 1373.440932] (UM) [ 1373.443051] ? ion_dma_buf_release+0x40/0x40 [ 1373.447427] 4*128kB [ 1373.449735] ? __might_fault+0x177/0x1b0 [ 1373.454566] (UM) [ 1373.456684] ion_ioctl+0xea/0x1f0 [ 1373.460834] 2*256kB [ 1373.465739] ? ion_query_heaps+0x360/0x360 [ 1373.471180] (UM) [ 1373.473386] ? __tun_chr_ioctl.isra.0+0x3310/0x3310 [ 1373.478372] 3*512kB [ 1373.480421] ? ion_query_heaps+0x360/0x360 [ 1373.485260] (U) [ 1373.487454] do_vfs_ioctl+0x75a/0xff0 [ 1373.490982] 0*1024kB [ 1373.493017] ? ioctl_preallocate+0x1a0/0x1a0 [ 1373.497394] 0*2048kB [ 1373.499705] ? lock_downgrade+0x740/0x740 [ 1373.503760] 0*4096kB [ 1373.505785] ? __fget+0x225/0x360 [ 1373.509231] = 18144kB [ 1373.511537] ? do_vfs_ioctl+0xff0/0xff0 [ 1373.511550] ? security_file_ioctl+0x83/0xb0 [ 1373.511560] SyS_ioctl+0x7f/0xb0 [ 1373.515773] Node 0 [ 1373.517826] ? do_vfs_ioctl+0xff0/0xff0 [ 1373.522861] Normal: [ 1373.525144] do_syscall_64+0x1d5/0x640 [ 1373.529348] 0*4kB [ 1373.531328] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1373.531337] RIP: 0033:0x466459 [ 1373.531345] RSP: 002b:00007fb4b9e68188 EFLAGS: 00000246 [ 1373.535134] 0*8kB [ 1373.537535] ORIG_RAX: 0000000000000010 [ 1373.541950] 0*16kB [ 1373.544318] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1373.548442] 0*32kB [ 1373.550829] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1373.550834] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1373.550839] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1373.550845] R13: 00007fffe82eec4f R14: 00007fb4b9e68300 R15: 0000000000022000 [ 1373.555678] Killed process 972 (syz-executor.4) total-vm:93120kB, anon-rss:72kB, file-rss:34000kB, shmem-rss:0kB [ 1373.556683] 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1373.556713] Node 1 Normal: 106*4kB (ME) 61*8kB (UME) 25*16kB (ME) 19*32kB (UM) 17*64kB (UM) 52*128kB [ 1373.610673] oom_reaper: reaped process 972 (syz-executor.4), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1373.636785] (UM) [ 1373.672705] syz-executor.1 invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask= [ 1373.686753] 57*256kB (UM) 1*512kB (M) 0*1024kB 1*2048kB (M) 0*4096kB = 26816kB [ 1373.706158] (null), order=0, oom_score_adj=1000 [ 1373.711224] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1373.720038] syz-executor.1 cpuset= [ 1373.728394] Node 0 hugepages_total=1 hugepages_free=1 hugepages_surp=1 hugepages_size=2048kB [ 1373.740228] / [ 1373.743388] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1373.754592] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1373.765891] 23379 total pagecache pages [ 1373.769897] 0 pages in swap cache [ 1373.775769] mems_allowed=0-1 [ 1373.777854] Swap cache stats: add 0, delete 0, find 0/0 [ 1373.779054] CPU: 0 PID: 1017 Comm: syz-executor.1 Not tainted 4.14.228-syzkaller #0 [ 1373.784350] Free swap = 0kB [ 1373.792022] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1373.792027] Call Trace: [ 1373.792044] dump_stack+0x1b2/0x281 [ 1373.792057] dump_header+0x178/0x82f [ 1373.795052] Total swap = 0kB [ 1373.804407] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1373.804417] ? ___ratelimit+0x2cd/0x530 [ 1373.804429] oom_kill_process.cold+0x10/0xb18 [ 1373.806995] 2097051 pages RAM [ 1373.810608] out_of_memory+0xe3e/0x1190 [ 1373.810621] ? oom_killer_disable+0x1c0/0x1c0 [ 1373.814329] warn_alloc_show_mem: 1 callbacks suppressed [ 1373.814333] Mem-Info: [ 1373.817325] ? mutex_trylock+0x152/0x1a0 [ 1373.822439] 0 pages HighMem/MovableOnly [ 1373.826388] __alloc_pages_nodemask+0x23e1/0x2720 [ 1373.830901] active_anon:77766 inactive_anon:23018 isolated_anon:0 [ 1373.830901] active_file:16 inactive_file:16 isolated_file:0 [ 1373.830901] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1373.830901] slab_reclaimable:13829 slab_unreclaimable:128815 [ 1373.830901] mapped:52244 shmem:23347 pagetables:8885 bounce:0 [ 1373.830901] free:13992 free_pcp:66 free_cma:0 [ 1373.833972] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1373.837927] Node 0 active_anon:292864kB inactive_anon:76140kB active_file:32kB inactive_file:32kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:189508kB dirty:0kB writeback:0kB shmem:77312kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 239616kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1373.842407] alloc_pages_current+0x155/0x260 [ 1373.842419] filemap_fault+0xea3/0x1980 [ 1373.842436] ext4_filemap_fault+0x84/0xb0 [ 1373.842445] __do_fault+0xfa/0x380 [ 1373.842452] ? pmd_devmap_trans_unstable+0x151/0x1b0 [ 1373.842462] __handle_mm_fault+0x2373/0x4620 [ 1373.842472] ? vm_insert_page+0x7c0/0x7c0 [ 1373.847900] 363846 pages reserved [ 1373.850205] ? nanosleep_copyout+0x100/0x100 [ 1373.854309] 0 pages cma reserved [ 1373.858250] handle_mm_fault+0x391/0x860 [ 1373.863105] Node 1 active_anon:18200kB inactive_anon:15932kB active_file:32kB inactive_file:32kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:19468kB dirty:0kB writeback:0kB shmem:16076kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1373.896293] __do_page_fault+0x549/0xad0 [ 1373.896305] ? spurious_fault+0x640/0x640 [ 1373.896314] ? do_page_fault+0x60/0x500 [ 1373.896326] ? page_fault+0x2f/0x50 [ 1373.903659] Node 0 [ 1373.929018] page_fault+0x45/0x50 [ 1373.929028] RIP: 03e7:0x56bf60 [ 1373.929032] RSP: 56c008:0000000000000001 EFLAGS: 0056c008 [ 1373.936989] Mem-Info: [ 1373.979776] DMA free:10976kB min:204kB low:252kB high:300kB active_anon:2100kB inactive_anon:8kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:56kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1374.006153] active_anon:77766 inactive_anon:23018 isolated_anon:0 [ 1374.006153] active_file:16 inactive_file:16 isolated_file:0 [ 1374.006153] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1374.006153] slab_reclaimable:13829 slab_unreclaimable:128815 [ 1374.006153] mapped:52244 shmem:23347 pagetables:8885 bounce:0 [ 1374.006153] free:13961 free_pcp:96 free_cma:0 [ 1374.099676] Node 0 active_anon:292840kB inactive_anon:76136kB active_file:32kB inactive_file:32kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:189432kB dirty:0kB writeback:0kB shmem:77312kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 239616kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1374.099842] lowmem_reserve[]: [ 1374.132177] Node 1 active_anon:18172kB inactive_anon:15932kB active_file:32kB inactive_file:32kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:19468kB dirty:0kB writeback:0kB shmem:16076kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1374.162915] 0 2717 2718 2718 2718 [ 1374.166487] Node 0 DMA32 free:18388kB min:36200kB low:45248kB high:54296kB active_anon:290740kB inactive_anon:76128kB active_file:32kB inactive_file:32kB unevictable:0kB writepending:0kB present:3129332kB managed:2788136kB mlocked:0kB kernel_stack:11904kB pagetables:16244kB bounce:0kB free_pcp:284kB local_pcp:112kB free_cma:0kB [ 1374.166711] Node 0 DMA free:10976kB min:204kB low:252kB high:300kB active_anon:2100kB inactive_anon:8kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:56kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1374.224688] lowmem_reserve[]: 0 0 0 0 [ 1374.231464] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1374.240295] Node 0 DMA32 free:18388kB min:36200kB low:45248kB high:54296kB active_anon:290740kB inactive_anon:76128kB active_file:32kB inactive_file:32kB unevictable:0kB writepending:0kB present:3129332kB managed:2788136kB mlocked:0kB kernel_stack:11904kB pagetables:16244kB bounce:0kB free_pcp:272kB local_pcp:176kB free_cma:0kB [ 1374.274100] lowmem_reserve[]: 0 0 0 0 0 [ 1374.278109] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1374.308146] 0 [ 1374.309961] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1374.310123] lowmem_reserve[]: 0 0 0 0 0 [ 1374.358922] Node 1 Normal free:26816kB min:53696kB low:67120kB high:80544kB active_anon:18172kB inactive_anon:15932kB active_file:32kB inactive_file:32kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:6592kB pagetables:19148kB bounce:0kB free_pcp:152kB local_pcp:152kB free_cma:0kB [ 1374.376591] lowmem_reserve[]: [ 1374.395227] lowmem_reserve[]: 0 0 0 0 0 [ 1374.431850] Node 0 DMA: 10*4kB (ME) 9*8kB (ME) 9*16kB (UME) 11*32kB (UME) 10*64kB (UME) 2*128kB (UM) 3*256kB (UE) 3*512kB (UME) 3*1024kB (UME) 2*2048kB (ME) 0*4096kB = 10976kB [ 1374.488111] Node 0 DMA32: 2391*4kB (ME) 705*8kB (UME) 92*16kB (UME) 6*32kB (ME) 2*64kB (M) 5*128kB (UM) 2*256kB (UM) 3*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 19684kB [ 1374.496846] 0 [ 1374.533619] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1374.547034] 0 0 0 0 [ 1374.549387] Node 1 Normal free:26816kB min:53696kB low:67120kB high:80544kB active_anon:18172kB inactive_anon:15932kB active_file:20kB inactive_file:24kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:6592kB pagetables:19148kB bounce:0kB free_pcp:152kB local_pcp:0kB free_cma:0kB [ 1374.578021] Node 1 Normal: 106*4kB (ME) 61*8kB (UME) 25*16kB (ME) 19*32kB (UM) 17*64kB (UM) 52*128kB (UM) 57*256kB (UM) 1*512kB (M) 0*1024kB 1*2048kB (M) 0*4096kB = 26816kB [ 1374.618372] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1374.626741] lowmem_reserve[]: 0 0 0 0 0 [ 1374.629434] Node 0 hugepages_total=1 hugepages_free=1 hugepages_surp=1 hugepages_size=2048kB [ 1374.652710] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1374.678372] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1374.700290] 23379 total pagecache pages [ 1374.706536] 0 pages in swap cache [ 1374.709989] Swap cache stats: add 0, delete 0, find 0/0 [ 1374.719587] Node 0 DMA: 10*4kB (ME) 9*8kB (ME) 9*16kB (UME) 11*32kB (UME) 10*64kB (UME) 2*128kB (UM) 3*256kB (UE) 3*512kB (UME) 3*1024kB (UME) 2*2048kB (ME) 0*4096kB = 10976kB [ 1374.728087] Free swap = 0kB [ 1374.751916] Total swap = 0kB [ 1374.754951] 2097051 pages RAM [ 1374.758052] 0 pages HighMem/MovableOnly [ 1374.778955] 363846 pages reserved [ 1374.789079] 0 pages cma reserved [ 1374.799270] Out of memory (oom_kill_allocating_task): Kill process 1017 (syz-executor.1) score 0 or sacrifice child [ 1374.799778] Node 0 [ 1374.827772] Killed process 1017 (syz-executor.1) total-vm:93516kB, anon-rss:2152kB, file-rss:33736kB, shmem-rss:0kB [ 1374.836306] DMA32: [ 1374.897148] oom_reaper: reaped process 1017 (syz-executor.1), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1374.900683] 2392*4kB (UME) 520*8kB (UME) 90*16kB (ME) 8*32kB (UMEH) 3*64kB (MH) 3*128kB (M) 2*256kB (UM) 3*512kB (U) 0*1024kB 1*2048kB (M) 0*4096kB = 20096kB [ 1374.952965] syz-executor.2 invoked oom-killer: gfp_mask=0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null), order=0, oom_score_adj=1000 [ 1375.028777] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1375.050695] syz-executor.1: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1375.059055] syz-executor.2 cpuset= [ 1375.062637] syz-executor.4: page allocation failure: order:1, mode:0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null) [ 1375.074752] / mems_allowed=0-1 [ 1375.080247] CPU: 1 PID: 1024 Comm: syz-executor.2 Not tainted 4.14.228-syzkaller #0 [ 1375.088037] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1375.090437] Node 1 [ 1375.097382] Call Trace: [ 1375.097403] dump_stack+0x1b2/0x281 [ 1375.097417] dump_header+0x178/0x82f [ 1375.097430] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1375.097440] ? ___ratelimit+0x2cd/0x530 [ 1375.097452] oom_kill_process.cold+0x10/0xb18 [ 1375.097472] out_of_memory+0xe3e/0x1190 [ 1375.097486] ? oom_killer_disable+0x1c0/0x1c0 [ 1375.118010] syz-executor.1 cpuset= [ 1375.118677] ? mutex_trylock+0x152/0x1a0 [ 1375.138371] Normal: [ 1375.139201] __alloc_pages_nodemask+0x23e1/0x2720 [ 1375.139204] 106*4kB (ME) [ 1375.141531] ? lock_acquire+0x170/0x3f0 [ 1375.141548] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1375.141558] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1375.141575] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1375.141599] alloc_pages_current+0x155/0x260 [ 1375.150078] syz-executor.4 cpuset= [ 1375.153143] ion_page_pool_alloc+0x118/0x1b0 [ 1375.153154] ion_system_heap_allocate+0x133/0x8c0 [ 1375.153164] ? ion_alloc+0x187/0x810 [ 1375.153174] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1375.153184] ? ion_system_contig_heap_create+0x130/0x130 [ 1375.153193] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1375.153205] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1375.153216] ion_alloc+0x204/0x810 [ 1375.153236] ? ion_dma_buf_release+0x40/0x40 [ 1375.153255] ? __might_fault+0x177/0x1b0 [ 1375.170161] 60*8kB [ 1375.172553] ion_ioctl+0xea/0x1f0 [ 1375.172564] ? ion_query_heaps+0x360/0x360 [ 1375.172578] ? _raw_spin_unlock+0x29/0x40 [ 1375.172585] ? ion_query_heaps+0x360/0x360 [ 1375.172597] do_vfs_ioctl+0x75a/0xff0 [ 1375.177707] / [ 1375.180524] ? ioctl_preallocate+0x1a0/0x1a0 [ 1375.198531] / [ 1375.199924] ? lock_downgrade+0x740/0x740 [ 1375.199940] ? __fget+0x225/0x360 [ 1375.199953] ? do_vfs_ioctl+0xff0/0xff0 [ 1375.199965] ? security_file_ioctl+0x83/0xb0 [ 1375.199976] SyS_ioctl+0x7f/0xb0 [ 1375.210159] (ME) [ 1375.213459] ? do_vfs_ioctl+0xff0/0xff0 [ 1375.213473] do_syscall_64+0x1d5/0x640 [ 1375.213488] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1375.213496] RIP: 0033:0x466459 [ 1375.213501] RSP: 002b:00007f7941890188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1375.213511] RAX: ffffffffffffffda RBX: 000000000056c0b0 RCX: 0000000000466459 [ 1375.213516] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1375.213521] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1375.213526] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c0b0 [ 1375.213531] R13: 00007ffef88b512f R14: 00007f7941890300 R15: 0000000000022000 [ 1375.274711] Mem-Info: [ 1375.277961] Bluetooth: hci1 command 0x041b tx timeout [ 1375.344920] mems_allowed=0-1 [ 1375.348057] CPU: 0 PID: 972 Comm: syz-executor.4 Not tainted 4.14.228-syzkaller #0 [ 1375.355756] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1375.362720] active_anon:77217 inactive_anon:23017 isolated_anon:0 [ 1375.362720] active_file:5 inactive_file:27 isolated_file:0 [ 1375.362720] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1375.362720] slab_reclaimable:13829 slab_unreclaimable:128501 [ 1375.362720] mapped:52225 shmem:23347 pagetables:8839 bounce:0 [ 1375.362720] free:13814 free_pcp:106 free_cma:0 [ 1375.365117] Call Trace: [ 1375.398796] Node 0 active_anon:290776kB inactive_anon:76136kB active_file:24kB inactive_file:40kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:189432kB dirty:0kB writeback:0kB shmem:77312kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 237568kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1375.400936] dump_stack+0x1b2/0x281 [ 1375.400949] warn_alloc.cold+0x96/0x1cc [ 1375.429010] Node 1 active_anon:18092kB inactive_anon:15932kB active_file:0kB inactive_file:68kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:19468kB dirty:0kB writeback:0kB shmem:16076kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1375.432588] ? zone_watermark_ok_safe+0x220/0x220 [ 1375.432599] ? usleep_range+0x130/0x130 [ 1375.436551] Node 0 [ 1375.463710] ? _find_next_bit+0xdb/0x100 [ 1375.463719] ? run_timer_softirq+0x5a0/0x5a0 [ 1375.463736] __alloc_pages_nodemask+0x2127/0x2720 [ 1375.463755] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1375.468591] DMA free:10976kB min:204kB low:252kB high:300kB active_anon:2100kB inactive_anon:8kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:56kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1375.472556] ? mark_held_locks+0xa6/0xf0 [ 1375.472566] ? cache_grow_begin+0x41/0x630 [ 1375.472576] cache_grow_begin+0x91/0x630 [ 1375.474800] lowmem_reserve[]: [ 1375.478864] ? cache_grow_begin+0x91/0x630 [ 1375.483269] 0 [ 1375.488076] fallback_alloc+0x207/0x2c0 [ 1375.492931] 2717 [ 1375.518846] kmem_cache_alloc_trace+0x1f1/0x3d0 [ 1375.518856] ? dev_uevent_filter+0xd0/0xd0 [ 1375.518870] kobject_uevent_env+0x20c/0xf40 [ 1375.522932] 2718 [ 1375.527167] ? wait_for_completion_io+0x10/0x10 [ 1375.531252] 2718 [ 1375.534334] ? is_acpi_device_node+0x5b/0x70 [ 1375.538542] 2718 [ 1375.540332] device_del+0x642/0xa80 [ 1375.546328] ? device_find_child+0x107/0x140 [ 1375.551002] Node 0 [ 1375.555209] ? __device_links_no_driver+0x1b0/0x1b0 [ 1375.559517] DMA32 free:17616kB min:36200kB low:45248kB high:54296kB active_anon:288676kB inactive_anon:76128kB active_file:24kB inactive_file:40kB unevictable:0kB writepending:0kB present:3129332kB managed:2788136kB mlocked:0kB kernel_stack:11904kB pagetables:16244kB bounce:0kB free_pcp:200kB local_pcp:52kB free_cma:0kB [ 1375.561552] hci_conn_del_sysfs+0xca/0x160 [ 1375.561562] hci_conn_cleanup+0x216/0x500 [ 1375.561573] hci_conn_del+0x253/0x6f0 [ 1375.566220] lowmem_reserve[]: 0 [ 1375.568280] hci_conn_hash_flush+0x19c/0x260 [ 1375.572674] 0 [ 1375.574716] hci_dev_do_close+0x535/0xca0 [ 1375.578324] 0 [ 1375.582716] ? __fsnotify_inode_delete+0x20/0x20 [ 1375.582728] hci_unregister_dev+0x17f/0x8c0 [ 1375.582738] ? fcntl_setlk+0xdb0/0xdb0 [ 1375.584976] 0 [ 1375.589995] ? vhci_close_dev+0x50/0x50 [ 1375.618466] 0 [ 1375.622666] vhci_release+0x70/0xe0 [ 1375.622682] __fput+0x25f/0x7a0 [ 1375.630592] task_work_run+0x11f/0x190 [ 1375.630610] do_exit+0xa44/0x2850 [ 1375.633863] Node 0 [ 1375.638257] ? native_usergs_sysret64+0x1/0x10 [ 1375.640044] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1375.644161] ? __save_stack_trace+0xa0/0x160 [ 1375.644172] ? check_preemption_disabled+0x35/0x240 [ 1375.644181] ? mm_update_next_owner+0x5b0/0x5b0 [ 1375.644191] ? get_signal+0x323/0x1ca0 [ 1375.645970] lowmem_reserve[]: [ 1375.650711] ? lock_acquire+0x170/0x3f0 [ 1375.650719] ? lock_downgrade+0x740/0x740 [ 1375.650732] do_group_exit+0x100/0x2e0 [ 1375.655032] 0 [ 1375.658906] get_signal+0x38d/0x1ca0 [ 1375.660701] 0 [ 1375.664729] ? debug_check_no_obj_freed+0x2c0/0x680 [ 1375.666528] 0 [ 1375.670141] ? lock_acquire+0x170/0x3f0 [ 1375.673412] 0 [ 1375.677292] do_signal+0x7c/0x1550 [ 1375.680728] 0 [ 1375.682935] ? debug_check_no_obj_freed+0x2c0/0x680 [ 1375.712403] ? kmem_cache_alloc+0x35f/0x3c0 [ 1375.712414] ? setup_sigcontext+0x820/0x820 [ 1375.712422] ? SyS_unshare+0x4ca/0x7f0 [ 1375.712436] ? lock_acquire+0x170/0x3f0 [ 1375.716825] Node 1 [ 1375.721830] ? lock_downgrade+0x740/0x740 [ 1375.721839] ? kmem_cache_free+0x23a/0x2b0 [ 1375.721847] ? do_raw_spin_unlock+0x164/0x220 [ 1375.721859] ? perf_event_namespaces+0x9/0x30 [ 1375.726528] Normal free:26664kB min:53696kB low:67120kB high:80544kB active_anon:18092kB inactive_anon:15932kB active_file:0kB inactive_file:68kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:6496kB pagetables:19056kB bounce:0kB free_pcp:224kB local_pcp:0kB free_cma:0kB [ 1375.730387] ? SyS_unshare+0x56c/0x7f0 [ 1375.733483] lowmem_reserve[]: [ 1375.737440] ? walk_process_tree+0x2a0/0x2a0 [ 1375.741577] 0 [ 1375.745434] ? task_work_run+0xfd/0x190 [ 1375.745445] ? exit_to_usermode_loop+0x41/0x200 [ 1375.747243] 0 [ 1375.750941] exit_to_usermode_loop+0x160/0x200 [ 1375.750953] do_syscall_64+0x4a3/0x640 [ 1375.750969] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1375.752753] 0 [ 1375.757753] RIP: 0033:0x467a07 [ 1375.759535] 0 [ 1375.763487] RSP: 002b:00007fffa36252a8 EFLAGS: 00000202 ORIG_RAX: 0000000000000110 [ 1375.763496] RAX: 0000000000000000 RBX: 00007fffa36258c8 RCX: 0000000000467a07 [ 1375.763500] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000040000000 [ 1375.763505] RBP: 00007fffa3625360 R08: 0000000000000000 R09: 0000000000000000 [ 1375.763509] R10: 0000000000000000 R11: 0000000000000202 R12: 00000000ffffffff [ 1375.763513] R13: 000000000056ca68 R14: 0000000000000000 R15: 00000000000000f8 [ 1375.768126] mems_allowed=0-1 [ 1375.834760] 0 [ 1375.844285] 26*16kB [ 1375.933689] CPU: 0 PID: 1022 Comm: syz-executor.1 Not tainted 4.14.228-syzkaller #0 [ 1375.943783] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1375.953133] Call Trace: [ 1375.955729] dump_stack+0x1b2/0x281 [ 1375.959345] Node 0 [ 1375.959357] warn_alloc.cold+0x96/0x1cc [ 1375.959369] ? zone_watermark_ok_safe+0x220/0x220 [ 1375.961617] DMA: [ 1375.965561] ? usleep_range+0x130/0x130 [ 1375.970384] 10*4kB [ 1375.972433] ? try_to_free_pages+0x23f/0x6e0 [ 1375.972444] ? _find_next_bit+0xdb/0x100 [ 1375.972454] ? run_timer_softirq+0x5a0/0x5a0 [ 1375.972472] __alloc_pages_nodemask+0x2127/0x2720 [ 1375.976511] (ME) [ 1375.978749] ? lock_acquire+0x170/0x3f0 [ 1375.983147] 9*8kB [ 1375.987177] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1375.991580] (ME) [ 1375.996418] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1375.998476] 9*16kB [ 1376.002445] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1376.002464] alloc_pages_current+0x155/0x260 [ 1376.002478] ion_page_pool_alloc+0x118/0x1b0 [ 1376.002488] ion_system_heap_allocate+0x133/0x8c0 [ 1376.004620] (UME) [ 1376.009448] ? ion_alloc+0x187/0x810 [ 1376.011513] 11*32kB [ 1376.015971] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1376.018179] (UME) [ 1376.023635] ? ion_system_contig_heap_create+0x130/0x130 [ 1376.023645] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1376.023657] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1376.023667] ion_alloc+0x204/0x810 [ 1376.028069] 10*64kB [ 1376.032463] ? ion_dma_buf_release+0x40/0x40 [ 1376.032476] ? __might_fault+0x177/0x1b0 [ 1376.032487] ion_ioctl+0xea/0x1f0 [ 1376.037306] (UME) [ 1376.039438] ? ion_query_heaps+0x360/0x360 [ 1376.043160] 2*128kB [ 1376.045451] ? __tun_chr_ioctl.isra.0+0x3310/0x3310 [ 1376.050889] (UM) [ 1376.053009] ? ion_query_heaps+0x360/0x360 [ 1376.058435] 3*256kB [ 1376.063437] do_vfs_ioctl+0x75a/0xff0 [ 1376.063450] ? ioctl_preallocate+0x1a0/0x1a0 [ 1376.063460] ? lock_downgrade+0x740/0x740 [ 1376.063473] ? __fget+0x225/0x360 [ 1376.068289] (UE) [ 1376.071812] ? do_vfs_ioctl+0xff0/0xff0 [ 1376.071824] ? security_file_ioctl+0x83/0xb0 [ 1376.071839] SyS_ioctl+0x7f/0xb0 [ 1376.074140] 3*512kB [ 1376.078529] ? do_vfs_ioctl+0xff0/0xff0 [ 1376.082580] (UME) [ 1376.086000] do_syscall_64+0x1d5/0x640 [ 1376.088128] 3*1024kB [ 1376.092349] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1376.092357] RIP: 0033:0x466459 [ 1376.092365] RSP: 002b:00007fdd4fdd8188 EFLAGS: 00000246 [ 1376.094669] (UME) [ 1376.099670] ORIG_RAX: 0000000000000010 [ 1376.099678] RAX: ffffffffffffffda RBX: 000000000056c008 RCX: 0000000000466459 [ 1376.101750] 2*2048kB [ 1376.105942] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1376.105950] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1376.108266] (ME) [ 1376.112043] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c008 [ 1376.112049] R13: 00007ffc5b7c415f R14: 00007fdd4fdd8300 R15: 0000000000022000 [ 1376.112768] (UME) [ 1376.119866] 0*4096kB [ 1376.120646] 18*32kB (M) 17*64kB (UM) 51*128kB (UM) 57*256kB (UM) 1*512kB (M) 0*1024kB 1*2048kB (M) 0*4096kB = 26664kB [ 1376.120703] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1376.120710] Node 0 hugepages_total=1 hugepages_free=1 hugepages_surp=1 hugepages_size=2048kB [ 1376.120716] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1376.120723] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1376.120727] 23379 total pagecache pages [ 1376.120737] 0 pages in swap cache [ 1376.120742] Swap cache stats: add 0, delete 0, find 0/0 [ 1376.120746] Free swap = 0kB [ 1376.120749] Total swap = 0kB [ 1376.120756] 2097051 pages RAM [ 1376.120759] 0 pages HighMem/MovableOnly [ 1376.120763] 363846 pages reserved [ 1376.120766] 0 pages cma reserved [ 1376.160584] Mem-Info: [ 1376.216948] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1376.221139] active_anon:77217 inactive_anon:23017 isolated_anon:0 [ 1376.221139] active_file:12 inactive_file:924 isolated_file:0 [ 1376.221139] unevictable:0 dirty:2 writeback:0 unstable:0 [ 1376.221139] slab_reclaimable:13829 slab_unreclaimable:128539 [ 1376.221139] mapped:52801 shmem:23347 pagetables:8840 bounce:0 [ 1376.221139] free:21662 free_pcp:151 free_cma:0 [ 1376.282740] systemd[1]: systemd-journald.service: Failed with result 'signal'. [ 1376.287590] Node 0 active_anon:290776kB inactive_anon:76136kB active_file:16kB inactive_file:48kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:189432kB dirty:4kB writeback:0kB shmem:77312kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 237568kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1376.315918] systemd[1]: systemd-rfkill.service: Main process exited, code=killed, status=11/SEGV [ 1376.344367] Node 1 active_anon:18092kB inactive_anon:15932kB active_file:132kB inactive_file:5248kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:23272kB dirty:4kB writeback:0kB shmem:16076kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1376.386372] = 10976kB [ 1376.413091] Node 0 DMA free:10976kB min:204kB low:252kB high:300kB active_anon:2100kB inactive_anon:8kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:56kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1376.441924] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1376.448371] Node 0 DMA32 free:19664kB min:36200kB low:45248kB high:54296kB active_anon:288676kB inactive_anon:76128kB active_file:16kB inactive_file:48kB unevictable:0kB writepending:4kB present:3129332kB managed:2788136kB mlocked:0kB kernel_stack:11904kB pagetables:16244kB bounce:0kB free_pcp:216kB local_pcp:160kB free_cma:0kB [ 1376.479801] lowmem_reserve[]: 0 0 0 0 0 [ 1376.483891] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1376.498845] systemd[1]: Failed to start Load/Save RF Kill Switch Status. [ 1376.512499] lowmem_reserve[]: 0 0 0 0 0 [ 1376.527431] Node 1 Normal free:212544kB min:53696kB low:67120kB high:80544kB active_anon:18192kB inactive_anon:15932kB active_file:432kB inactive_file:6148kB unevictable:0kB writepending:4kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:6496kB pagetables:19060kB bounce:0kB free_pcp:208kB local_pcp:12kB free_cma:0kB [ 1376.558057] lowmem_reserve[]: 0 0 0 0 0 [ 1376.563328] systemd[1]: systemd-rfkill.service: Unit entered failed state. [ 1376.564692] Node 0 [ 1376.571951] systemd[1]: systemd-rfkill.service: Failed with result 'signal'. [ 1376.590367] Node 0 DMA: 10*4kB (ME) 9*8kB (ME) 9*16kB (UME) 11*32kB (UME) 10*64kB (UME) 2*128kB (UM) 3*256kB (UE) 3*512kB (UME) 3*1024kB (UME) 2*2048kB (ME) 0*4096kB = 10976kB [ 1376.594784] DMA32: [ 1376.612084] systemd[1]: systemd-journald.service: Service has no hold-off time, scheduling restart. [ 1376.623866] Node 0 DMA32: 2392*4kB (UME) 862*8kB (UMEH) 104*16kB (UME) 8*32kB (UMEH) 181*64kB (UMH) 70*128kB (UM) 12*256kB (UM) 0*512kB 1*1024kB (U) 1*2048kB (U) 0*4096kB = 45072kB [ 1376.647247] 2330*4kB (UME) 813*8kB (UMEH) 104*16kB (UME) 8*32kB (UMEH) 181*64kB (UMH) 70*128kB (UM) 12*256kB (UM) 0*512kB 1*1024kB (U) 1*2048kB (U) 0*4096kB = 44432kB [ 1376.656378] systemd[1]: Starting Load/Save RF Kill Switch Status... [ 1376.674810] systemd[1]: Stopped Journal Service. [ 1376.686002] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1376.706479] systemd[1]: Starting Journal Service... [ 1376.711628] Node 1 Normal: 0*4kB 2*8kB (UM) 1*16kB (U) 1*32kB (U) 1555*64kB (U) 1042*128kB (U) 173*256kB (U) 1*512kB (U) 2*1024kB (UM) 0*2048kB 0*4096kB = 279808kB [ 1376.755735] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1376.763589] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1376.770710] Node 0 hugepages_total=1 hugepages_free=1 hugepages_surp=1 hugepages_size=2048kB [ 1376.784714] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1376.805001] Node 1 Normal: 2*4kB (UE) 3*8kB (UME) 2*16kB (E) 4*32kB (UME) 2416*64kB (U) 1090*128kB (UM) 180*256kB (UM) 1*512kB (U) 1*1024kB (U) 0*2048kB 0*4096kB = 341952kB [ 1376.808459] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1376.829543] 25789 total pagecache pages [ 1376.833631] 0 pages in swap cache [ 1376.837104] Swap cache stats: add 0, delete 0, find 0/0 [ 1376.842533] Free swap = 0kB [ 1376.845547] Total swap = 0kB [ 1376.848585] 2097051 pages RAM [ 1376.851831] 0 pages HighMem/MovableOnly [ 1376.855819] 363846 pages reserved [ 1376.859266] 0 pages cma reserved [ 1376.880392] systemd[1]: Started Load/Save RF Kill Switch Status. [ 1376.915117] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1376.918785] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 1376.941737] Node 0 hugepages_total=1 hugepages_free=1 hugepages_surp=1 hugepages_size=2048kB [ 1376.972346] systemd-journald[1058]: File /run/log/journal/04d8c135ee6b410280ba31a58c89679d/system.journal corrupted or uncleanly shut down, renaming and replacing. [ 1376.989006] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 1377.003571] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1377.032920] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1377.040490] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1377.054024] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1377.086965] 27235 total pagecache pages [ 1377.105318] 0 pages in swap cache [ 1377.117252] Swap cache stats: add 0, delete 0, find 0/0 [ 1377.129206] Free swap = 0kB [ 1377.143340] Total swap = 0kB [ 1377.150027] 2097051 pages RAM [ 1377.164422] systemd-journald[1058]: /dev/kmsg buffer overrun, some messages lost. [ 1377.164495] 0 pages HighMem/MovableOnly [ 1377.197913] 363846 pages reserved [ 1377.207310] 0 pages cma reserved [ 1377.216953] Out of memory (oom_kill_allocating_task): Kill process 1024 (syz-executor.2) score 0 or sacrifice child [ 1377.249630] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 1377.271301] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 1377.277764] Killed process 1024 (syz-executor.2) total-vm:93516kB, anon-rss:160kB, file-rss:35012kB, shmem-rss:0kB [ 1377.295050] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 1377.341092] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 1377.353398] oom_reaper: reaped process 1024 (syz-executor.2), now anon-rss:0kB, file-rss:8kB, shmem-rss:0kB [ 1377.363447] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1377.391352] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1377.413827] device veth0_vlan entered promiscuous mode [ 1377.586526] oom_reaper: reaped process 944 (syz-executor.3), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1377.820950] syz-executor.0 invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=0 [ 1377.839960] syz-executor.1: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1377.860567] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 1377.865701] CPU: 1 PID: 32227 Comm: syz-executor.0 Not tainted 4.14.228-syzkaller #0 [ 1377.873571] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1377.882930] Call Trace: [ 1377.885514] dump_stack+0x1b2/0x281 [ 1377.889135] dump_header+0x178/0x82f [ 1377.892842] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1377.897937] ? ___ratelimit+0x2cd/0x530 [ 1377.901903] oom_kill_process.cold+0x10/0xb18 [ 1377.906400] out_of_memory+0xe3e/0x1190 [ 1377.910370] ? oom_killer_disable+0x1c0/0x1c0 [ 1377.914858] ? mutex_trylock+0x152/0x1a0 [ 1377.918915] __alloc_pages_nodemask+0x23e1/0x2720 [ 1377.923763] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1377.928601] ? trace_hardirqs_on+0x10/0x10 [ 1377.932837] ? cache_grow_begin+0x41/0x630 [ 1377.937063] cache_grow_begin+0x91/0x630 [ 1377.941123] ? cache_grow_begin+0x91/0x630 [ 1377.945369] fallback_alloc+0x207/0x2c0 [ 1377.949336] kmem_cache_alloc+0x1e5/0x3c0 [ 1377.953479] getname_flags+0xc8/0x550 [ 1377.957276] user_path_mountpoint_at+0x23/0x40 [ 1377.961863] SyS_umount+0x125/0xeb0 [ 1377.965482] ? lock_downgrade+0x740/0x740 [ 1377.969370] syz-executor.1 cpuset= [ 1377.969622] ? __detach_mounts+0x400/0x400 [ 1377.969632] ? up_read+0x17/0x30 [ 1377.973197] / [ 1377.977385] ? __do_page_fault+0x159/0xad0 [ 1377.983872] mems_allowed=0-1 [ 1377.986640] ? do_syscall_64+0x4c/0x640 [ 1377.993692] ? __detach_mounts+0x400/0x400 [ 1377.997922] do_syscall_64+0x1d5/0x640 [ 1378.001812] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1378.006994] RIP: 0033:0x4678b7 [ 1378.010166] RSP: 002b:00007fffe82edd98 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 1378.017861] RAX: ffffffffffffffda RBX: 000000000000000e RCX: 00000000004678b7 [ 1378.025115] RDX: 000000000000000c RSI: 0000000000000002 RDI: 00007fffe82eef30 [ 1378.032369] RBP: 00007fffe82eef0c R08: 0000000000000000 R09: 0000000000546620 [ 1378.039621] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000004bebb2 [ 1378.046876] R13: 00007fffe82eef30 R14: 000000000000000b R15: 00007fffe82eef70 [ 1378.054148] CPU: 0 PID: 1022 Comm: syz-executor.1 Not tainted 4.14.228-syzkaller #0 [ 1378.061945] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1378.071290] Call Trace: [ 1378.073879] dump_stack+0x1b2/0x281 [ 1378.077505] warn_alloc.cold+0x96/0x1cc [ 1378.081477] ? zone_watermark_ok_safe+0x220/0x220 [ 1378.086330] __alloc_pages_nodemask+0x2127/0x2720 [ 1378.091174] ? check_preemption_disabled+0x35/0x240 [ 1378.096189] ? lock_acquire+0x170/0x3f0 [ 1378.100167] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1378.105015] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1378.110482] ? __mutex_unlock_slowpath+0x75/0x770 [ 1378.115326] alloc_pages_current+0x155/0x260 [ 1378.117519] Mem-Info: [ 1378.119734] ion_page_pool_alloc+0x118/0x1b0 [ 1378.122173] active_anon:77389 inactive_anon:25048 isolated_anon:0 [ 1378.122173] active_file:21 inactive_file:21 isolated_file:1 [ 1378.122173] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1378.122173] slab_reclaimable:13886 slab_unreclaimable:128400 [ 1378.122173] mapped:43849 shmem:25392 pagetables:8837 bounce:0 [ 1378.122173] free:13947 free_pcp:32 free_cma:0 [ 1378.126535] ion_system_heap_allocate+0x133/0x8c0 [ 1378.159802] Node 0 active_anon:291068kB inactive_anon:77108kB active_file:8kB inactive_file:12kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:174460kB dirty:0kB writeback:0kB shmem:78344kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 237568kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1378.164579] ? _raw_spin_unlock+0x29/0x40 [ 1378.164590] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1378.164602] ? ion_system_contig_heap_create+0x130/0x130 [ 1378.192385] Node 1 active_anon:18488kB inactive_anon:23084kB active_file:76kB inactive_file:72kB unevictable:0kB isolated(anon):0kB isolated(file):4kB mapped:936kB dirty:0kB writeback:0kB shmem:23224kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1378.196507] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1378.201430] Node 0 [ 1378.206875] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1378.233986] DMA free:10976kB min:204kB low:252kB high:300kB active_anon:2100kB inactive_anon:8kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:56kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1378.238946] ion_alloc+0x27a/0x810 [ 1378.241181] lowmem_reserve[]: [ 1378.246001] ? ion_dma_buf_release+0x40/0x40 [ 1378.271971] 0 [ 1378.275454] ? __might_fault+0x177/0x1b0 [ 1378.278528] 2717 [ 1378.282922] ion_ioctl+0xea/0x1f0 [ 1378.282932] ? ion_query_heaps+0x360/0x360 [ 1378.282945] ? __tun_chr_ioctl.isra.0+0x3310/0x3310 [ 1378.282952] ? ion_query_heaps+0x360/0x360 [ 1378.282961] do_vfs_ioctl+0x75a/0xff0 [ 1378.282972] ? ioctl_preallocate+0x1a0/0x1a0 [ 1378.284749] 2718 [ 1378.288795] ? lock_downgrade+0x740/0x740 [ 1378.288809] ? __fget+0x225/0x360 [ 1378.290884] 2718 [ 1378.294280] ? do_vfs_ioctl+0xff0/0xff0 [ 1378.298484] 2718 [ 1378.303485] ? security_file_ioctl+0x83/0xb0 [ 1378.303495] SyS_ioctl+0x7f/0xb0 [ 1378.303503] ? do_vfs_ioctl+0xff0/0xff0 [ 1378.303514] do_syscall_64+0x1d5/0x640 [ 1378.303529] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1378.311543] RIP: 0033:0x466459 [ 1378.311548] RSP: 002b:00007fdd4fdd8188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1378.311558] RAX: ffffffffffffffda RBX: 000000000056c008 RCX: 0000000000466459 [ 1378.311564] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1378.311572] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1378.315957] Node 0 [ 1378.317999] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c008 [ 1378.318006] R13: 00007ffc5b7c415f R14: 00007fdd4fdd8300 R15: 0000000000022000 [ 1378.322176] DMA32 free:18012kB min:36200kB low:45248kB high:54296kB active_anon:288968kB inactive_anon:77100kB active_file:8kB inactive_file:12kB unevictable:0kB writepending:0kB present:3129332kB managed:2788136kB mlocked:0kB kernel_stack:11872kB pagetables:16144kB bounce:0kB free_pcp:120kB local_pcp:120kB free_cma:0kB [ 1378.333563] warn_alloc_show_mem: 1 callbacks suppressed [ 1378.333566] Mem-Info: [ 1378.333791] syz-executor.2: [ 1378.338188] active_anon:77389 inactive_anon:25048 isolated_anon:0 [ 1378.338188] active_file:21 inactive_file:21 isolated_file:1 [ 1378.338188] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1378.338188] slab_reclaimable:13886 slab_unreclaimable:128400 [ 1378.338188] mapped:43849 shmem:25392 pagetables:8837 bounce:0 [ 1378.338188] free:13947 free_pcp:32 free_cma:0 [ 1378.363330] lowmem_reserve[]: [ 1378.367626] Node 0 active_anon:291068kB inactive_anon:77108kB active_file:8kB inactive_file:12kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:174460kB dirty:0kB writeback:0kB shmem:78344kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 237568kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1378.373087] syz-executor.3: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1378.373109] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 1378.373143] CPU: 1 PID: 944 Comm: syz-executor.3 Not tainted 4.14.228-syzkaller #0 [ 1378.373149] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1378.373153] Call Trace: [ 1378.373169] dump_stack+0x1b2/0x281 [ 1378.373183] warn_alloc.cold+0x96/0x1cc [ 1378.373196] ? zone_watermark_ok_safe+0x220/0x220 [ 1378.382726] Node 1 active_anon:18488kB inactive_anon:23084kB active_file:76kB inactive_file:72kB unevictable:0kB isolated(anon):0kB isolated(file):4kB mapped:936kB dirty:0kB writeback:0kB shmem:23224kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1378.387717] ? usleep_range+0x130/0x130 [ 1378.389926] Node 0 [ 1378.397196] ? try_to_free_pages+0x23f/0x6e0 [ 1378.397207] ? _find_next_bit+0xdb/0x100 [ 1378.397218] ? run_timer_softirq+0x5a0/0x5a0 [ 1378.397236] __alloc_pages_nodemask+0x2127/0x2720 [ 1378.406643] DMA free:10976kB min:204kB low:252kB high:300kB active_anon:2100kB inactive_anon:8kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:56kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1378.432975] ? lock_acquire+0x170/0x3f0 [ 1378.432992] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1378.433001] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1378.433017] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1378.433037] alloc_pages_current+0x155/0x260 [ 1378.433048] ion_page_pool_alloc+0x118/0x1b0 [ 1378.433058] ion_system_heap_allocate+0x133/0x8c0 [ 1378.433068] ? ion_alloc+0x187/0x810 [ 1378.433078] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1378.433090] ? ion_system_contig_heap_create+0x130/0x130 [ 1378.439847] lowmem_reserve[]: [ 1378.440841] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1378.440853] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1378.440864] ion_alloc+0x204/0x810 [ 1378.440879] ? ion_dma_buf_release+0x40/0x40 [ 1378.443891] 0 [ 1378.477114] ? __might_fault+0x177/0x1b0 [ 1378.477127] ion_ioctl+0xea/0x1f0 [ 1378.477143] ? ion_query_heaps+0x360/0x360 [ 1378.477157] ? __tun_chr_ioctl.isra.0+0x3310/0x3310 [ 1378.477164] ? ion_query_heaps+0x360/0x360 [ 1378.477173] do_vfs_ioctl+0x75a/0xff0 [ 1378.477184] ? ioctl_preallocate+0x1a0/0x1a0 [ 1378.477193] ? lock_downgrade+0x740/0x740 [ 1378.477204] ? __fget+0x225/0x360 [ 1378.477213] ? do_vfs_ioctl+0xff0/0xff0 [ 1378.477225] ? security_file_ioctl+0x83/0xb0 [ 1378.477236] SyS_ioctl+0x7f/0xb0 [ 1378.495279] 2717 [ 1378.508075] ? do_vfs_ioctl+0xff0/0xff0 [ 1378.508089] do_syscall_64+0x1d5/0x640 [ 1378.508105] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1378.508113] RIP: 0033:0x466459 [ 1378.508119] RSP: 002b:00007f6ba9361188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1378.508142] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1378.531258] 2718 [ 1378.532684] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1378.555690] page allocation failure: order:0 [ 1378.556984] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1378.598027] 2718 [ 1378.598668] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1378.620225] 2718 [ 1378.633816] R13: 00007ffd9352709f R14: 00007f6ba9361300 R15: 0000000000022000 [ 1378.634593] 0 [ 1378.652731] 0 [ 1378.657094] Node 0 [ 1378.661498] 0 0 0 [ 1378.661510] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1378.661529] lowmem_reserve[]: 0 0 0 0 0 [ 1378.661547] Node 1 Normal free:26468kB min:53696kB low:67120kB high:80544kB active_anon:18488kB inactive_anon:23084kB active_file:76kB inactive_file:16kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:6400kB pagetables:19148kB bounce:0kB free_pcp:120kB local_pcp:120kB free_cma:0kB [ 1378.661563] lowmem_reserve[]: 0 0 0 0 0 [ 1378.661578] Node 0 DMA: 10*4kB (ME) 9*8kB (ME) 9*16kB (UME) 11*32kB (UME) 10*64kB (UME) 2*128kB [ 1378.679163] DMA32 free:18008kB min:36200kB low:45248kB high:54296kB active_anon:288968kB inactive_anon:77100kB active_file:8kB inactive_file:12kB unevictable:0kB writepending:0kB present:3129332kB managed:2788136kB mlocked:0kB kernel_stack:11872kB pagetables:16144kB bounce:0kB free_pcp:120kB local_pcp:0kB free_cma:0kB [ 1378.681088] (UM) 3*256kB [ 1378.686941] lowmem_reserve[]: [ 1378.689185] (UE) [ 1378.707464] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1378.708060] 3*512kB [ 1378.717383] (null) [ 1378.720725] (UME) 3*1024kB (UME) 2*2048kB (ME) 0*4096kB = 10976kB [ 1378.720749] Node 0 DMA32: 2026*4kB (ME) 536*8kB (UME) 95*16kB (UME) 12*32kB [ 1378.738109] 0 [ 1378.740811] (UME) 4*64kB (UM) 3*128kB (M) 12*256kB (UM) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18008kB [ 1378.740853] Node 0 [ 1378.749186] syz-executor.2 cpuset= [ 1378.749204] Normal: [ 1378.756659] 0 [ 1378.760533] 0*4kB [ 1378.768785] / [ 1378.772829] 0*8kB [ 1378.789052] 0 [ 1378.798259] 0*16kB [ 1378.799586] mems_allowed=0-1 [ 1378.806880] 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1378.806912] Node 1 [ 1378.819201] 0 [ 1378.828779] Normal: [ 1378.829213] CPU: 0 PID: 1024 Comm: syz-executor.2 Not tainted 4.14.228-syzkaller #0 [ 1378.831433] 129*4kB [ 1378.833572] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1378.859248] (ME) [ 1378.863009] Call Trace: [ 1378.863032] dump_stack+0x1b2/0x281 [ 1378.863046] warn_alloc.cold+0x96/0x1cc [ 1378.863061] ? zone_watermark_ok_safe+0x220/0x220 [ 1378.892176] 66*8kB [ 1378.896104] ? usleep_range+0x130/0x130 [ 1378.905022] (ME) [ 1378.933268] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1378.933283] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1378.933294] ? run_timer_softirq+0x5a0/0x5a0 [ 1378.970533] 42*16kB [ 1378.977077] __alloc_pages_nodemask+0x2127/0x2720 [ 1378.979280] (UME) [ 1378.982826] ? lock_acquire+0x170/0x3f0 [ 1378.982843] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1379.000544] 31*32kB [ 1379.007797] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1379.010035] (UME) [ 1379.011828] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1379.011849] alloc_pages_current+0x155/0x260 [ 1379.030534] 30*64kB [ 1379.033571] ion_page_pool_alloc+0x118/0x1b0 [ 1379.035605] (UM) [ 1379.038175] ion_system_heap_allocate+0x133/0x8c0 [ 1379.050532] 21*128kB [ 1379.050561] ? ion_alloc+0x187/0x810 [ 1379.052778] (UM) [ 1379.056790] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1379.058825] 73*256kB [ 1379.063909] ? ion_system_contig_heap_create+0x130/0x130 [ 1379.063919] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1379.063931] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1379.063942] ion_alloc+0x204/0x810 [ 1379.090535] (UM) [ 1379.091355] ? ion_dma_buf_release+0x40/0x40 [ 1379.093647] 1*512kB [ 1379.098131] ? __might_fault+0x177/0x1b0 [ 1379.100252] (M) [ 1379.105686] ion_ioctl+0xea/0x1f0 [ 1379.105696] ? ion_query_heaps+0x360/0x360 [ 1379.105710] ? _raw_spin_unlock+0x29/0x40 [ 1379.105719] ? ion_query_heaps+0x360/0x360 [ 1379.130551] 0*1024kB [ 1379.131831] do_vfs_ioctl+0x75a/0xff0 [ 1379.137257] 0*2048kB [ 1379.139654] ? ioctl_preallocate+0x1a0/0x1a0 [ 1379.160532] 0*4096kB [ 1379.164864] ? lock_downgrade+0x740/0x740 [ 1379.167164] = 26516kB [ 1379.171227] ? __fget+0x225/0x360 [ 1379.171238] ? do_vfs_ioctl+0xff0/0xff0 [ 1379.171251] ? security_file_ioctl+0x83/0xb0 [ 1379.180545] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1379.180883] SyS_ioctl+0x7f/0xb0 [ 1379.185027] Node 0 hugepages_total=1 hugepages_free=1 hugepages_surp=1 hugepages_size=2048kB [ 1379.189243] ? do_vfs_ioctl+0xff0/0xff0 [ 1379.200534] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1379.202217] do_syscall_64+0x1d5/0x640 [ 1379.204612] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1379.208747] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1379.220533] 25440 total pagecache pages [ 1379.222926] RIP: 0033:0x466459 [ 1379.250537] 0 pages in swap cache [ 1379.256413] RSP: 002b:00007f7941890188 EFLAGS: 00000246 [ 1379.260286] Swap cache stats: add 0, delete 0, find 0/0 [ 1379.268826] ORIG_RAX: 0000000000000010 [ 1379.268832] RAX: ffffffffffffffda RBX: 000000000056c0b0 RCX: 0000000000466459 [ 1379.268837] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1379.268842] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1379.268847] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c0b0 [ 1379.268853] R13: 00007ffef88b512f R14: 00007f7941890300 R15: 0000000000022000 [ 1379.269722] 0 [ 1379.303685] Free swap = 0kB [ 1379.314035] Total swap = 0kB [ 1379.343807] 2097051 pages RAM [ 1379.346896] 0 pages HighMem/MovableOnly [ 1379.350900] 363846 pages reserved [ 1379.354341] 0 pages cma reserved [ 1379.357720] Out of memory (oom_kill_allocating_task): Kill process 32227 (syz-executor.0) score 0 or sacrifice child [ 1379.380580] Killed process 32227 (syz-executor.0) total-vm:93120kB, anon-rss:108kB, file-rss:33288kB, shmem-rss:0kB [ 1379.393640] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1379.398792] oom_reaper: reaped process 32227 (syz-executor.0), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1379.421669] lowmem_reserve[]: 0 0 0 0 0 [ 1379.435710] Node 1 Normal free:66516kB min:53696kB low:67120kB high:80544kB active_anon:18488kB inactive_anon:23084kB active_file:44kB inactive_file:40kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:6400kB pagetables:19148kB bounce:0kB free_pcp:788kB local_pcp:664kB free_cma:0kB [ 1379.540583] lowmem_reserve[]: 0 0 0 0 0 [ 1379.543692] warn_alloc_show_mem: 1 callbacks suppressed [ 1379.543695] Mem-Info: [ 1379.544656] Node 0 [ 1379.549971] active_anon:77389 inactive_anon:25048 isolated_anon:0 [ 1379.549971] active_file:14 inactive_file:12 isolated_file:0 [ 1379.549971] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1379.549971] slab_reclaimable:13886 slab_unreclaimable:128329 [ 1379.549971] mapped:43827 shmem:25392 pagetables:8837 bounce:0 [ 1379.549971] free:55058 free_pcp:528 free_cma:0 [ 1379.610555] DMA: 13*4kB (UME) 10*8kB (UME) 12*16kB (UME) 11*32kB (UME) 10*64kB (UME) 2*128kB (UM) 3*256kB (UE) 3*512kB (UME) 3*1024kB (UME) 2*2048kB (ME) 0*4096kB = 11044kB [ 1379.613699] Node 0 active_anon:291068kB inactive_anon:77108kB active_file:12kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:174460kB dirty:0kB writeback:0kB shmem:78344kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 237568kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1379.690725] Node 0 DMA32: 12471*4kB (UME) 8086*8kB (UME) 2460*16kB (UME) 902*32kB (UME) 239*64kB (UM) 47*128kB (UM) 30*256kB (UM) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 211788kB [ 1379.753870] Node 1 active_anon:18488kB inactive_anon:23084kB active_file:44kB inactive_file:40kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:848kB dirty:0kB writeback:0kB shmem:23224kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1379.760574] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1379.850552] Node 0 DMA free:11136kB min:204kB low:252kB high:300kB active_anon:2100kB inactive_anon:8kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:56kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1379.864401] Node 1 Normal: 8157*4kB (UME) 6456*8kB (UME) 3977*16kB (UME) 1658*32kB (U) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 200964kB [ 1379.911319] syz-executor.3: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1379.940540] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 1379.945741] CPU: 0 PID: 944 Comm: syz-executor.3 Not tainted 4.14.228-syzkaller #0 [ 1379.953437] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1379.962790] Call Trace: [ 1379.965383] dump_stack+0x1b2/0x281 [ 1379.969012] warn_alloc.cold+0x96/0x1cc [ 1379.972984] ? zone_watermark_ok_safe+0x220/0x220 [ 1379.977833] __alloc_pages_nodemask+0x2127/0x2720 [ 1379.980549] lowmem_reserve[]: 0 [ 1379.982672] ? lock_acquire+0x170/0x3f0 [ 1379.982685] ? lock_acquire+0x170/0x3f0 [ 1379.985948] 2717 [ 1379.989913] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1380.000750] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1380.006198] ? __mutex_unlock_slowpath+0x75/0x770 [ 1380.011042] alloc_pages_current+0x155/0x260 [ 1380.015450] ion_page_pool_alloc+0x118/0x1b0 [ 1380.019853] ion_system_heap_allocate+0x133/0x8c0 [ 1380.024693] ? _raw_spin_unlock+0x29/0x40 [ 1380.028838] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1380.033762] ? ion_system_contig_heap_create+0x130/0x130 [ 1380.039206] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1380.040534] 2718 [ 1380.044217] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1380.044219] 2718 2718 [ 1380.046275] ion_alloc+0x27a/0x810 [ 1380.057146] ? ion_dma_buf_release+0x40/0x40 [ 1380.061552] ? __might_fault+0x177/0x1b0 [ 1380.065609] ion_ioctl+0xea/0x1f0 [ 1380.069058] ? ion_query_heaps+0x360/0x360 [ 1380.073303] ? __tun_chr_ioctl.isra.0+0x3310/0x3310 [ 1380.078312] ? ion_query_heaps+0x360/0x360 [ 1380.082538] do_vfs_ioctl+0x75a/0xff0 [ 1380.082541] Node 0 DMA32 free:407620kB min:36200kB low:45248kB high:54296kB active_anon:288968kB inactive_anon:77100kB active_file:12kB inactive_file:8kB unevictable:0kB writepending:0kB present:3129332kB managed:2788136kB mlocked:0kB kernel_stack:11872kB pagetables:16144kB bounce:0kB free_pcp:1424kB local_pcp:716kB free_cma:0kB [ 1380.086333] ? ioctl_preallocate+0x1a0/0x1a0 [ 1380.119956] ? lock_downgrade+0x740/0x740 [ 1380.124108] ? __fget+0x225/0x360 [ 1380.127557] ? do_vfs_ioctl+0xff0/0xff0 [ 1380.131526] ? security_file_ioctl+0x83/0xb0 [ 1380.135944] SyS_ioctl+0x7f/0xb0 [ 1380.139310] ? do_vfs_ioctl+0xff0/0xff0 [ 1380.143281] do_syscall_64+0x1d5/0x640 [ 1380.147166] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1380.152349] RIP: 0033:0x466459 [ 1380.155528] RSP: 002b:00007f6ba9361188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1380.163236] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1380.170515] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1380.177777] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1380.185043] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1380.192310] R13: 00007ffd9352709f R14: 00007f6ba9361300 R15: 0000000000022000 [ 1380.200601] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1380.204531] lowmem_reserve[]: [ 1380.209440] Node 0 hugepages_total=1 hugepages_free=1 hugepages_surp=1 hugepages_size=2048kB [ 1380.209448] 0 [ 1380.212582] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1380.270594] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1380.279189] 25418 total pagecache pages [ 1380.296502] 0 0 0 0 [ 1380.298852] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1380.310548] 0 pages in swap cache [ 1380.340629] Swap cache stats: add 0, delete 0, find 0/0 [ 1380.350603] Free swap = 0kB [ 1380.353624] Total swap = 0kB [ 1380.356632] 2097051 pages RAM [ 1380.359723] 0 pages HighMem/MovableOnly [ 1380.390558] lowmem_reserve[]: [ 1380.390566] 363846 pages reserved [ 1380.390573] 0 [ 1380.393702] 0 pages cma reserved [ 1380.397144] 0 0 0 0 [ 1380.436239] Node 1 Normal free:625824kB min:53696kB low:67120kB high:80544kB active_anon:18488kB inactive_anon:23084kB active_file:44kB inactive_file:40kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:6400kB pagetables:19148kB bounce:0kB free_pcp:1356kB local_pcp:688kB free_cma:0kB [ 1380.500564] lowmem_reserve[]: 0 0 0 0 0 [ 1380.504786] Node 0 DMA: 38*4kB (UME) 51*8kB (UME) 52*16kB (UME) 15*32kB (UME) 8*64kB (UME) 2*128kB (UM) 3*256kB (UE) 3*512kB (UME) 3*1024kB (UME) 2*2048kB (ME) 0*4096kB = 12112kB [ 1380.520995] Node 0 DMA32: 14171*4kB (UME) 14554*8kB (UME) 6616*16kB (UE) 3028*32kB (UME) 1986*64kB (U) 174*128kB (U) 78*256kB (U) 13*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 551868kB [ 1380.537409] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1380.569459] Node 1 Normal: 8349*4kB (UME) 4695*8kB (UME) 3789*16kB (UME) 3361*32kB (U) 5088*64kB (U) 679*128kB (U) 49*256kB (U) 2*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 665244kB [ 1380.586788] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1380.587097] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1380.598874] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1380.635288] device veth1_vlan entered promiscuous mode [ 1380.644588] Node 0 hugepages_total=1 hugepages_free=1 hugepages_surp=1 hugepages_size=2048kB [ 1380.674974] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1380.696012] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 1380.707511] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1380.719952] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 1380.731181] 25677 total pagecache pages [ 1380.735644] 0 pages in swap cache [ 1380.745349] Swap cache stats: add 0, delete 0, find 0/0 [ 1380.752987] device veth0_macvtap entered promiscuous mode [ 1380.759013] Free swap = 0kB [ 1380.771236] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 1380.778737] Total swap = 0kB [ 1380.814696] 2097051 pages RAM [ 1380.836795] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1380.844964] 0 pages HighMem/MovableOnly [ 1380.854481] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1380.873985] 363846 pages reserved [ 1380.874572] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1380.884626] 0 pages cma reserved [ 1380.939706] device veth1_macvtap entered promiscuous mode [ 1380.963961] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 1381.057626] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 1381.087959] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 1381.126693] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 20:21:55 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r1, 0x800454cf, &(0x7f0000000240)) ioctl$TUNSETSNDBUF(r1, 0x400454d4, &(0x7f0000000040)=0x1000) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r2, 0x800454cf, &(0x7f0000000240)) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000080)={'lo\x00', @broadcast}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000180)={0x80000000, 0xa}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x1) ioctl$TUNSETOWNER(r3, 0x400454cc, 0xffffffffffffffff) [ 1381.171626] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1381.212916] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1381.243191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1381.282820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1381.323011] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1381.343145] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1381.362664] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1381.392751] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 1381.399727] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1381.424149] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1381.432565] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1381.443352] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1381.473313] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1381.500539] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1381.509685] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1381.560583] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1381.569757] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1381.607060] syz-executor.2: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1381.645403] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1381.650534] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 1381.659789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1381.661743] CPU: 1 PID: 1024 Comm: syz-executor.2 Not tainted 4.14.228-syzkaller #0 [ 1381.677279] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1381.686627] Call Trace: [ 1381.689216] dump_stack+0x1b2/0x281 [ 1381.692851] warn_alloc.cold+0x96/0x1cc [ 1381.696826] ? zone_watermark_ok_safe+0x220/0x220 [ 1381.701681] __alloc_pages_nodemask+0x2127/0x2720 [ 1381.706525] ? _raw_spin_unlock_irq+0x5a/0x80 [ 1381.711017] ? finish_task_switch+0x178/0x610 [ 1381.715525] ? finish_task_switch+0x14d/0x610 [ 1381.720026] ? lock_acquire+0x170/0x3f0 [ 1381.724009] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1381.725527] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1381.728852] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1381.743458] ? __mutex_unlock_slowpath+0x75/0x770 [ 1381.749087] ? alloc_pages_current+0x37/0x260 [ 1381.753597] alloc_pages_current+0x155/0x260 [ 1381.758007] ion_page_pool_alloc+0x118/0x1b0 [ 1381.762419] ion_system_heap_allocate+0x133/0x8c0 [ 1381.767277] ? _raw_spin_unlock+0x29/0x40 [ 1381.771426] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1381.776354] ? ion_system_contig_heap_create+0x130/0x130 [ 1381.781807] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1381.784220] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 1381.786823] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1381.798477] ion_alloc+0x27a/0x810 [ 1381.802018] ? ion_dma_buf_release+0x40/0x40 [ 1381.806427] ? __might_fault+0x177/0x1b0 [ 1381.810487] ion_ioctl+0xea/0x1f0 [ 1381.813937] ? ion_query_heaps+0x360/0x360 [ 1381.818176] ? _raw_spin_unlock+0x29/0x40 [ 1381.820663] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1381.822327] ? ion_query_heaps+0x360/0x360 [ 1381.839122] do_vfs_ioctl+0x75a/0xff0 [ 1381.842928] ? ioctl_preallocate+0x1a0/0x1a0 [ 1381.847338] ? lock_downgrade+0x740/0x740 [ 1381.851487] ? __fget+0x225/0x360 [ 1381.854937] ? do_vfs_ioctl+0xff0/0xff0 [ 1381.858911] ? security_file_ioctl+0x83/0xb0 [ 1381.863319] SyS_ioctl+0x7f/0xb0 [ 1381.866684] ? do_vfs_ioctl+0xff0/0xff0 [ 1381.870660] do_syscall_64+0x1d5/0x640 [ 1381.874560] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1381.879832] RIP: 0033:0x466459 [ 1381.883017] RSP: 002b:00007f7941890188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1381.890728] RAX: ffffffffffffffda RBX: 000000000056c0b0 RCX: 0000000000466459 [ 1381.897998] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1381.905263] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1381.912537] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c0b0 [ 1381.919801] R13: 00007ffef88b512f R14: 00007f7941890300 R15: 0000000000022000 [ 1381.942210] syz-fuzzer invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1381.955329] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1381.962029] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 1381.967403] CPU: 1 PID: 7981 Comm: syz-fuzzer Not tainted 4.14.228-syzkaller #0 [ 1381.974456] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1381.974843] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1381.991526] Call Trace: [ 1381.994127] dump_stack+0x1b2/0x281 [ 1381.997758] dump_header+0x178/0x82f [ 1382.001469] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1382.006569] ? ___ratelimit+0x2cd/0x530 [ 1382.010546] oom_kill_process.cold+0x10/0xb18 [ 1382.015048] out_of_memory+0xe3e/0x1190 [ 1382.019020] ? oom_killer_disable+0x1c0/0x1c0 [ 1382.023502] ? mutex_trylock+0x152/0x1a0 [ 1382.027552] __alloc_pages_nodemask+0x23e1/0x2720 [ 1382.032393] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1382.037243] alloc_pages_current+0x155/0x260 [ 1382.041638] filemap_fault+0xea3/0x1980 [ 1382.045608] ext4_filemap_fault+0x84/0xb0 [ 1382.049755] __do_fault+0xfa/0x380 [ 1382.053297] __handle_mm_fault+0x2497/0x4620 [ 1382.057694] ? vm_insert_page+0x7c0/0x7c0 [ 1382.061839] ? __might_fault+0x177/0x1b0 [ 1382.065895] handle_mm_fault+0x391/0x860 [ 1382.069943] __do_page_fault+0x549/0xad0 [ 1382.073992] ? spurious_fault+0x640/0x640 [ 1382.078129] ? do_page_fault+0x60/0x500 [ 1382.082090] ? page_fault+0x2f/0x50 [ 1382.085713] page_fault+0x45/0x50 [ 1382.089153] RIP: 0004:0x141cfc4016a [ 1382.092763] RSP: 4390c5:000000c00002bfc8 EFLAGS: 142491d1f54 [ 1382.101105] Mem-Info: [ 1382.109376] active_anon:77275 inactive_anon:25045 isolated_anon:0 [ 1382.109376] active_file:609 inactive_file:604 isolated_file:53 [ 1382.109376] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1382.109376] slab_reclaimable:13876 slab_unreclaimable:129427 [ 1382.109376] mapped:36415 shmem:25388 pagetables:8792 bounce:0 [ 1382.109376] free:13832 free_pcp:163 free_cma:0 [ 1382.152946] Node 0 active_anon:290872kB inactive_anon:77096kB active_file:1840kB inactive_file:1644kB unevictable:0kB isolated(anon):0kB isolated(file):320kB mapped:143208kB dirty:0kB writeback:0kB shmem:78328kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 237568kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1382.184497] Node 1 active_anon:18228kB inactive_anon:23084kB active_file:36kB inactive_file:36kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:1152kB dirty:0kB writeback:0kB shmem:23224kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1382.216331] Node 0 DMA free:10968kB min:204kB low:252kB high:300kB active_anon:2100kB inactive_anon:8kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:56kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1382.254255] warn_alloc_show_mem: 1 callbacks suppressed [ 1382.254258] Mem-Info: [ 1382.265330] active_anon:77275 inactive_anon:25045 isolated_anon:0 [ 1382.265330] active_file:209 inactive_file:232 isolated_file:53 [ 1382.265330] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1382.265330] slab_reclaimable:13876 slab_unreclaimable:129064 [ 1382.265330] mapped:35640 shmem:25388 pagetables:8792 bounce:0 [ 1382.265330] free:14397 free_pcp:48 free_cma:0 [ 1382.270564] lowmem_reserve[]: [ 1382.305602] Node 0 active_anon:290872kB inactive_anon:77096kB active_file:684kB inactive_file:580kB unevictable:0kB isolated(anon):0kB isolated(file):84kB mapped:140708kB dirty:0kB writeback:0kB shmem:78328kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 237568kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1382.329333] 0 [ 1382.340114] Node 1 active_anon:18228kB inactive_anon:23084kB active_file:36kB inactive_file:36kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:1152kB dirty:0kB writeback:0kB shmem:23224kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1382.349558] 2717 [ 1382.375302] Node 0 DMA free:10968kB min:204kB low:252kB high:300kB active_anon:2100kB inactive_anon:8kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:56kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1382.387849] 2718 2718 2718 [ 1382.407084] Node 0 DMA32 free:18288kB min:36200kB low:45248kB high:54296kB active_anon:288772kB inactive_anon:77088kB active_file:436kB inactive_file:60kB unevictable:0kB writepending:0kB present:3129332kB managed:2788136kB mlocked:0kB kernel_stack:11808kB pagetables:15968kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1382.408833] lowmem_reserve[]: [ 1382.438430] lowmem_reserve[]: [ 1382.441905] 0 2717 2718 2718 2718 [ 1382.448563] Node 0 DMA32 free:17664kB min:36200kB low:45248kB high:54296kB active_anon:288772kB inactive_anon:77088kB active_file:436kB inactive_file:60kB unevictable:0kB writepending:0kB present:3129332kB managed:2788136kB mlocked:0kB kernel_stack:11808kB pagetables:15968kB bounce:0kB free_pcp:120kB local_pcp:120kB free_cma:0kB [ 1382.452490] 0 [ 1382.482616] lowmem_reserve[]: 0 0 0 0 0 [ 1382.489028] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1382.495276] 0 0 0 0 [ 1382.517106] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1382.518594] lowmem_reserve[]: [ 1382.542774] lowmem_reserve[]: 0 0 0 0 0 [ 1382.546717] 0 [ 1382.549872] Node 1 [ 1382.549874] 0 0 [ 1382.552127] Normal free:26844kB min:53696kB low:67120kB high:80544kB active_anon:18228kB inactive_anon:23084kB active_file:36kB inactive_file:36kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:6400kB pagetables:19144kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1382.553945] 0 [ 1382.555887] lowmem_reserve[]: [ 1382.589309] 0 [ 1382.594278] Node 1 Normal free:26844kB min:53696kB low:67120kB high:80544kB active_anon:18228kB inactive_anon:23084kB active_file:36kB inactive_file:36kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:6400kB pagetables:19144kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1382.602991] 0 [ 1382.626600] lowmem_reserve[]: 0 0 0 0 0 [ 1382.632721] Node 0 DMA: 23*4kB (UME) 50*8kB (UME) 52*16kB (UME) 16*32kB (UME) 7*64kB (UME) 2*128kB (UM) 3*256kB (UE) 3*512kB (UME) 2*1024kB (ME) 2*2048kB (ME) 0*4096kB = 10988kB [ 1382.638171] 0 0 0 0 [ 1382.651302] Node 0 DMA: 23*4kB (UME) 50*8kB (UME) 52*16kB (UME) 16*32kB (UME) 7*64kB (UME) 2*128kB (UM) 3*256kB (UE) 3*512kB (UME) 2*1024kB (ME) 2*2048kB (ME) 0*4096kB = 10988kB [ 1382.652572] Node 0 [ 1382.667399] Node 0 DMA32: 2049*4kB (UME) 534*8kB (UME) 95*16kB (ME) 9*32kB (ME) 7*64kB (M) 1*128kB (M) 3*256kB (UM) 5*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 18180kB [ 1382.671788] DMA32: 2049*4kB (UME) 534*8kB (UME) 95*16kB (ME) 9*32kB (ME) 7*64kB (M) 1*128kB (M) 3*256kB (UM) 5*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 18180kB [ 1382.689329] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1382.709125] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB [ 1382.713050] Node 1 [ 1382.714521] 0*4096kB = 0kB [ 1382.731104] Node 1 Normal: 63*4kB (ME) 36*8kB (UME) 6*16kB (ME) 819*32kB (U) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 26844kB [ 1382.740783] Normal: 63*4kB (ME) 36*8kB [ 1382.747469] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1382.751532] (UME) 6*16kB (ME) 819*32kB (U) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 26844kB [ 1382.760777] Node 0 hugepages_total=1 hugepages_free=1 hugepages_surp=1 hugepages_size=2048kB [ 1382.772987] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1382.781949] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1382.788113] Node 0 hugepages_total=1 hugepages_free=1 hugepages_surp=1 hugepages_size=2048kB [ 1382.801871] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1382.806571] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1382.815759] 25435 total pagecache pages [ 1382.826892] 0 pages in swap cache [ 1382.830226] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1382.830375] Swap cache stats: add 0, delete 0, find 0/0 [ 1382.839017] 25435 total pagecache pages [ 1382.844816] Free swap = 0kB [ 1382.852202] Total swap = 0kB [ 1382.855222] 2097051 pages RAM [ 1382.858339] 0 pages HighMem/MovableOnly [ 1382.862731] 0 pages in swap cache [ 1382.863859] 363846 pages reserved [ 1382.866202] Swap cache stats: add 0, delete 0, find 0/0 [ 1382.869638] 0 pages cma reserved [ 1382.882862] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1382.889548] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1382.911727] Free swap = 0kB [ 1382.914762] Total swap = 0kB [ 1382.917773] 2097051 pages RAM [ 1382.921244] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1382.927930] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1382.935119] 0 pages HighMem/MovableOnly [ 1382.939123] 363846 pages reserved [ 1382.945870] 0 pages cma reserved [ 1382.949245] Out of memory (oom_kill_allocating_task): Kill process 7981 (syz-fuzzer) score 0 or sacrifice child [ 1382.959631] Killed process 30323 (syz-executor.2) total-vm:84924kB, anon-rss:64kB, file-rss:0kB, shmem-rss:0kB [ 1382.998630] oom_reaper: reaped process 30323 (syz-executor.2), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1383.022445] syz-fuzzer invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1383.035116] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 1383.039885] CPU: 0 PID: 7977 Comm: syz-fuzzer Not tainted 4.14.228-syzkaller #0 [ 1383.047325] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1383.056667] Call Trace: [ 1383.059254] dump_stack+0x1b2/0x281 [ 1383.062878] dump_header+0x178/0x82f [ 1383.066583] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1383.071671] ? ___ratelimit+0x2cd/0x530 [ 1383.075651] oom_kill_process.cold+0x10/0xb18 [ 1383.080144] out_of_memory+0xe3e/0x1190 [ 1383.084111] ? oom_killer_disable+0x1c0/0x1c0 [ 1383.088603] ? mutex_trylock+0x152/0x1a0 [ 1383.092658] __alloc_pages_nodemask+0x23e1/0x2720 [ 1383.097498] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1383.102345] alloc_pages_current+0x155/0x260 [ 1383.106743] filemap_fault+0xea3/0x1980 [ 1383.110729] ext4_filemap_fault+0x84/0xb0 [ 1383.114879] __do_fault+0xfa/0x380 [ 1383.118419] __handle_mm_fault+0x2497/0x4620 [ 1383.122828] ? vm_insert_page+0x7c0/0x7c0 [ 1383.126962] ? mark_held_locks+0xa6/0xf0 [ 1383.131007] ? rcu_read_unlock_special+0x7ef/0xdd0 [ 1383.135932] handle_mm_fault+0x391/0x860 [ 1383.139985] __do_page_fault+0x549/0xad0 [ 1383.144038] ? spurious_fault+0x640/0x640 [ 1383.148176] ? do_page_fault+0x60/0x500 [ 1383.152149] ? page_fault+0x2f/0x50 [ 1383.155765] page_fault+0x45/0x50 [ 1383.159222] RIP: 0001:0x142491d1f54 [ 1383.162828] RSP: 400000:000000c000cc9598 EFLAGS: 142491d1f54 [ 1383.196252] syz-executor.1: [ 1383.203617] Mem-Info: [ 1383.204162] page allocation failure: order:0 [ 1383.206650] active_anon:77236 inactive_anon:25045 isolated_anon:0 [ 1383.206650] active_file:16 inactive_file:15 isolated_file:0 [ 1383.206650] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1383.206650] slab_reclaimable:13876 slab_unreclaimable:129027 [ 1383.206650] mapped:26495 shmem:25388 pagetables:8749 bounce:0 [ 1383.206650] free:13894 free_pcp:0 free_cma:0 [ 1383.209050] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1383.238598] Node 0 active_anon:290744kB inactive_anon:77096kB active_file:28kB inactive_file:24kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:104828kB dirty:0kB writeback:0kB shmem:78328kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 237568kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1383.254942] (null) [ 1383.292702] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 1383.297835] CPU: 0 PID: 1022 Comm: syz-executor.1 Not tainted 4.14.228-syzkaller #0 [ 1383.305620] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1383.310924] Node 1 active_anon:18200kB inactive_anon:23084kB active_file:36kB inactive_file:36kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:1152kB dirty:0kB writeback:0kB shmem:23224kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1383.314973] Call Trace: [ 1383.342170] Node 0 DMA free:10960kB min:204kB low:252kB high:300kB active_anon:2100kB inactive_anon:8kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:56kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1383.344719] dump_stack+0x1b2/0x281 [ 1383.344734] warn_alloc.cold+0x96/0x1cc [ 1383.371295] lowmem_reserve[]: [ 1383.374902] ? zone_watermark_ok_safe+0x220/0x220 [ 1383.378841] 0 [ 1383.381931] ? usleep_range+0x130/0x130 [ 1383.381940] ? try_to_free_pages+0x23f/0x6e0 [ 1383.381949] ? _find_next_bit+0xdb/0x100 [ 1383.381963] ? run_timer_softirq+0x5a0/0x5a0 [ 1383.386777] 2717 [ 1383.388588] __alloc_pages_nodemask+0x2127/0x2720 [ 1383.392549] 2718 [ 1383.396924] ? lock_acquire+0x170/0x3f0 [ 1383.400969] 2718 [ 1383.405361] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1383.407390] 2718 [ 1383.412215] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1383.412232] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1383.412252] alloc_pages_current+0x155/0x260 [ 1383.418243] ion_page_pool_alloc+0x118/0x1b0 [ 1383.420275] Node 0 [ 1383.425102] ion_system_heap_allocate+0x133/0x8c0 [ 1383.425114] ? _raw_spin_unlock+0x29/0x40 [ 1383.425123] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1383.425133] ? ion_system_contig_heap_create+0x130/0x130 [ 1383.427208] DMA32 free:17784kB min:36200kB low:45248kB high:54296kB active_anon:288644kB inactive_anon:77088kB active_file:28kB inactive_file:24kB unevictable:0kB writepending:0kB present:3129332kB managed:2788136kB mlocked:0kB kernel_stack:11776kB pagetables:15880kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1383.431686] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1383.431698] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1383.431709] ion_alloc+0x27a/0x810 [ 1383.437139] lowmem_reserve[]: [ 1383.441534] ? ion_dma_buf_release+0x40/0x40 [ 1383.441547] ? __might_fault+0x177/0x1b0 [ 1383.441558] ion_ioctl+0xea/0x1f0 [ 1383.445958] 0 [ 1383.448178] ? ion_query_heaps+0x360/0x360 [ 1383.453012] 0 [ 1383.457124] ? __tun_chr_ioctl.isra.0+0x3310/0x3310 [ 1383.462043] 0 [ 1383.467461] ? ion_query_heaps+0x360/0x360 [ 1383.495666] 0 [ 1383.500649] do_vfs_ioctl+0x75a/0xff0 [ 1383.500662] ? ioctl_preallocate+0x1a0/0x1a0 [ 1383.505493] 0 [ 1383.509024] ? lock_downgrade+0x740/0x740 [ 1383.516490] ? __fget+0x225/0x360 [ 1383.520541] Node 0 [ 1383.523957] ? do_vfs_ioctl+0xff0/0xff0 [ 1383.525742] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1383.529951] ? security_file_ioctl+0x83/0xb0 [ 1383.531755] lowmem_reserve[]: [ 1383.536748] SyS_ioctl+0x7f/0xb0 [ 1383.538523] 0 [ 1383.542741] ? do_vfs_ioctl+0xff0/0xff0 [ 1383.542753] do_syscall_64+0x1d5/0x640 [ 1383.542770] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1383.544547] 0 [ 1383.548332] RIP: 0033:0x466459 [ 1383.552732] 0 [ 1383.554494] RSP: 002b:00007fdd4fdd8188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1383.558624] 0 [ 1383.562058] RAX: ffffffffffffffda RBX: 000000000056c008 RCX: 0000000000466459 [ 1383.562064] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1383.562069] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1383.562074] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c008 [ 1383.562079] R13: 00007ffc5b7c415f R14: 00007fdd4fdd8300 R15: 0000000000022000 [ 1383.606286] Mem-Info: [ 1383.614366] syz-executor.2: [ 1383.615048] syz-executor.3: [ 1383.620214] page allocation failure: order:0 [ 1383.629640] active_anon:77236 inactive_anon:25045 isolated_anon:0 [ 1383.629640] active_file:16 inactive_file:15 isolated_file:0 [ 1383.629640] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1383.629640] slab_reclaimable:13876 slab_unreclaimable:129027 [ 1383.629640] mapped:26495 shmem:25388 pagetables:8749 bounce:0 [ 1383.629640] free:13894 free_pcp:0 free_cma:0 [ 1383.645470] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1383.659982] page allocation failure: order:0 [ 1383.674610] (null) [ 1383.685000] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1383.689708] 0 [ 1383.730157] Node 0 active_anon:290744kB inactive_anon:77096kB active_file:28kB inactive_file:24kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:104828kB dirty:0kB writeback:0kB shmem:78328kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 237568kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1383.735145] syz-executor.2 cpuset= [ 1383.748625] Node 1 active_anon:18200kB inactive_anon:23084kB active_file:36kB inactive_file:36kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:1152kB dirty:0kB writeback:0kB shmem:23224kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1383.776159] / [ 1383.802804] (null) [ 1383.806651] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 1383.811806] CPU: 0 PID: 944 Comm: syz-executor.3 Not tainted 4.14.228-syzkaller #0 [ 1383.819505] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1383.819512] Call Trace: [ 1383.831441] dump_stack+0x1b2/0x281 [ 1383.835031] Node 1 Normal free:26832kB min:53696kB low:67120kB high:80544kB active_anon:18200kB inactive_anon:23084kB active_file:36kB inactive_file:36kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:6400kB pagetables:19060kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1383.835077] warn_alloc.cold+0x96/0x1cc [ 1383.835089] ? zone_watermark_ok_safe+0x220/0x220 [ 1383.864022] mems_allowed=0-1 [ 1383.867784] ? usleep_range+0x130/0x130 [ 1383.879636] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1383.884733] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1383.889744] ? run_timer_softirq+0x5a0/0x5a0 [ 1383.890528] lowmem_reserve[]: 0 0 [ 1383.894163] __alloc_pages_nodemask+0x2127/0x2720 [ 1383.894180] ? lock_acquire+0x170/0x3f0 [ 1383.897606] 0 [ 1383.902438] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1383.902449] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1383.902466] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1383.920525] 0 0 [ 1383.922957] alloc_pages_current+0x155/0x260 [ 1383.924922] Node 0 DMA: 16*4kB [ 1383.929324] ion_page_pool_alloc+0x118/0x1b0 [ 1383.929334] ion_system_heap_allocate+0x133/0x8c0 [ 1383.941817] ? _raw_spin_unlock+0x29/0x40 [ 1383.945952] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1383.950532] (UME) [ 1383.950868] ? ion_system_contig_heap_create+0x130/0x130 [ 1383.950871] 50*8kB (UME) [ 1383.953011] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1383.953024] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1383.958458] 52*16kB [ 1383.961231] ion_alloc+0x27a/0x810 [ 1383.961246] ? ion_dma_buf_release+0x40/0x40 [ 1383.961261] ? __might_fault+0x177/0x1b0 [ 1383.980525] (UME) [ 1383.981582] ion_ioctl+0xea/0x1f0 [ 1383.985611] 16*32kB [ 1383.987744] ? ion_query_heaps+0x360/0x360 [ 1383.997709] ? __tun_chr_ioctl.isra.0+0x3310/0x3310 [ 1384.000545] (UME) [ 1384.002736] ? ion_query_heaps+0x360/0x360 [ 1384.002745] 7*64kB [ 1384.004892] do_vfs_ioctl+0x75a/0xff0 [ 1384.009108] (UME) [ 1384.011349] ? ioctl_preallocate+0x1a0/0x1a0 [ 1384.011359] ? lock_downgrade+0x740/0x740 [ 1384.011373] ? __fget+0x225/0x360 [ 1384.029240] ? do_vfs_ioctl+0xff0/0xff0 [ 1384.030522] 2*128kB [ 1384.033208] ? security_file_ioctl+0x83/0xb0 [ 1384.033210] (UM) 3*256kB [ 1384.035521] SyS_ioctl+0x7f/0xb0 [ 1384.039904] (UE) [ 1384.042645] ? do_vfs_ioctl+0xff0/0xff0 [ 1384.042658] do_syscall_64+0x1d5/0x640 [ 1384.042675] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1384.060523] 3*512kB [ 1384.061044] RIP: 0033:0x466459 [ 1384.061046] (UME) 2*1024kB [ 1384.063354] RSP: 002b:00007f6ba9361188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1384.066534] (ME) [ 1384.069450] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1384.086463] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1384.093732] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1384.100533] 2*2048kB [ 1384.101012] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1384.101019] R13: 00007ffd9352709f R14: 00007f6ba9361300 R15: 0000000000022000 [ 1384.103411] (ME) [ 1384.113748] Node 0 [ 1384.117965] CPU: 1 PID: 1024 Comm: syz-executor.2 Not tainted 4.14.228-syzkaller #0 [ 1384.120012] DMA free:10960kB min:204kB low:252kB high:300kB active_anon:2100kB inactive_anon:8kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:56kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1384.122216] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1384.122220] Call Trace: [ 1384.122238] dump_stack+0x1b2/0x281 [ 1384.122252] warn_alloc.cold+0x96/0x1cc [ 1384.122264] ? zone_watermark_ok_safe+0x220/0x220 [ 1384.122274] ? usleep_range+0x130/0x130 [ 1384.122283] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1384.122296] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1384.130070] lowmem_reserve[]: [ 1384.156002] ? run_timer_softirq+0x5a0/0x5a0 [ 1384.156019] __alloc_pages_nodemask+0x2127/0x2720 [ 1384.156036] ? lock_acquire+0x170/0x3f0 [ 1384.156050] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1384.156059] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1384.156076] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1384.156095] ? alloc_pages_current+0x37/0x260 [ 1384.167522] 0 [ 1384.168009] alloc_pages_current+0x155/0x260 [ 1384.171672] 2717 [ 1384.175597] ion_page_pool_alloc+0x118/0x1b0 [ 1384.180408] 2718 [ 1384.184382] ion_system_heap_allocate+0x133/0x8c0 [ 1384.184395] ? _raw_spin_unlock+0x29/0x40 [ 1384.184403] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1384.184412] ? ion_system_contig_heap_create+0x130/0x130 [ 1384.184422] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1384.184434] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1384.184444] ion_alloc+0x27a/0x810 [ 1384.190554] 2718 [ 1384.194536] ? ion_dma_buf_release+0x40/0x40 [ 1384.197628] 2718 [ 1384.202027] ? __might_fault+0x177/0x1b0 [ 1384.202039] ion_ioctl+0xea/0x1f0 [ 1384.202048] ? ion_query_heaps+0x360/0x360 [ 1384.202061] ? _raw_spin_unlock+0x29/0x40 [ 1384.202072] ? ion_query_heaps+0x360/0x360 [ 1384.210851] do_vfs_ioctl+0x75a/0xff0 [ 1384.210864] ? ioctl_preallocate+0x1a0/0x1a0 [ 1384.210874] ? lock_downgrade+0x740/0x740 [ 1384.210889] ? __fget+0x225/0x360 [ 1384.215728] Node 0 [ 1384.220208] ? do_vfs_ioctl+0xff0/0xff0 [ 1384.227701] DMA32 free:18360kB min:36200kB low:45248kB high:54296kB active_anon:288644kB inactive_anon:77088kB active_file:32kB inactive_file:20kB unevictable:0kB writepending:0kB present:3129332kB managed:2788136kB mlocked:0kB kernel_stack:11776kB pagetables:15880kB bounce:0kB free_pcp:64kB local_pcp:64kB free_cma:0kB [ 1384.230123] ? security_file_ioctl+0x83/0xb0 [ 1384.231931] lowmem_reserve[]: [ 1384.236299] SyS_ioctl+0x7f/0xb0 [ 1384.238337] 0 [ 1384.242728] ? do_vfs_ioctl+0xff0/0xff0 [ 1384.242741] do_syscall_64+0x1d5/0x640 [ 1384.242756] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1384.242763] RIP: 0033:0x466459 [ 1384.242768] RSP: 002b:00007f7941890188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1384.242777] RAX: ffffffffffffffda RBX: 000000000056c0b0 RCX: 0000000000466459 [ 1384.242782] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1384.242787] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1384.242791] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c0b0 [ 1384.242796] R13: 00007ffef88b512f R14: 00007f7941890300 R15: 0000000000022000 [ 1384.261986] 0*4096kB [ 1384.266490] 0 [ 1384.269521] = 10960kB [ 1384.274424] 0 0 0 [ 1384.274438] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1384.274459] lowmem_reserve[]: 0 0 0 0 0 [ 1384.274476] Node 1 Normal free:26856kB min:53696kB low:67120kB high:80544kB active_anon:18200kB inactive_anon:23084kB active_file:36kB inactive_file:36kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:6400kB pagetables:19060kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1384.274498] lowmem_reserve[]: 0 0 0 0 0 [ 1384.274519] Node 0 DMA: 16*4kB (UME) 50*8kB (UME) 52*16kB (UME) 16*32kB (UME) 7*64kB (UME) 2*128kB (UM) 3*256kB (UE) 3*512kB (UME) 2*1024kB (ME) 2*2048kB (ME) 0*4096kB = 10960kB [ 1384.292951] Node 0 [ 1384.296178] Node 0 [ 1384.298459] DMA32: [ 1384.302625] DMA32: 2048*4kB (UME) 546*8kB (UME) 103*16kB (UME) 9*32kB (UE) 9*64kB (UM) 3*128kB (U) 2*256kB (M) 5*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 18528kB [ 1384.302696] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB [ 1384.319162] 2048*4kB [ 1384.320569] 0*4096kB [ 1384.327839] (UME) [ 1384.328947] = 0kB [ 1384.372249] 546*8kB [ 1384.375076] Node 1 [ 1384.377977] (UME) [ 1384.383179] Normal: 66*4kB (UME) 34*8kB (ME) 7*16kB (UME) 819*32kB (U) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 26856kB [ 1384.383248] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1384.383255] Node 0 hugepages_total=1 hugepages_free=1 hugepages_surp=1 hugepages_size=2048kB [ 1384.383261] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1384.383268] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1384.383272] 25419 total pagecache pages [ 1384.383282] 0 pages in swap cache [ 1384.383288] Swap cache stats: add 0, delete 0, find 0/0 [ 1384.383291] Free swap = 0kB [ 1384.383297] Total swap = 0kB [ 1384.401575] 103*16kB [ 1384.410866] 2097051 pages RAM [ 1384.430703] (UME) [ 1384.435008] 0 pages HighMem/MovableOnly [ 1384.437238] 9*32kB [ 1384.439369] 363846 pages reserved [ 1384.479976] (UE) [ 1384.574103] device bridge_slave_1 left promiscuous mode [ 1384.590360] 9*64kB [ 1384.658840] bridge0: port 2(bridge_slave_1) entered disabled state [ 1384.669278] device bridge_slave_0 left promiscuous mode [ 1384.677872] 0 pages cma reserved [ 1384.678759] bridge0: port 1(bridge_slave_0) entered disabled state [ 1384.697376] device veth1_macvtap left promiscuous mode [ 1384.720703] device veth0_macvtap left promiscuous mode [ 1384.726155] device veth1_vlan left promiscuous mode [ 1384.740903] device veth0_vlan left promiscuous mode [ 1384.789268] (UM) 3*128kB (U) 2*256kB (M) 5*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 18528kB [ 1384.801234] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1384.831059] Node 1 Normal: 66*4kB (UME) 34*8kB (ME) 7*16kB (UME) 819*32kB (U) 4957*64kB (UM) 207*128kB (U) 102*256kB (U) 20*512kB (U) 15*1024kB (U) 1*2048kB (U) 0*4096kB = 424360kB [ 1384.892210] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1384.920827] Node 0 hugepages_total=1 hugepages_free=1 hugepages_surp=1 hugepages_size=2048kB [ 1384.929420] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1384.961781] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1384.970374] 26640 total pagecache pages [ 1384.992129] 0 pages in swap cache [ 1384.995619] Swap cache stats: add 0, delete 0, find 0/0 [ 1385.010883] Free swap = 0kB [ 1385.013911] Total swap = 0kB [ 1385.016922] 2097051 pages RAM [ 1385.020016] 0 pages HighMem/MovableOnly [ 1385.040556] 363846 pages reserved [ 1385.044022] 0 pages cma reserved [ 1385.047404] Out of memory (oom_kill_allocating_task): Kill process 7977 (syz-fuzzer) score 0 or sacrifice child [ 1385.047429] device hsr_slave_1 left promiscuous mode [ 1385.071256] Killed process 31046 (syz-executor.1) total-vm:84924kB, anon-rss:60kB, file-rss:0kB, shmem-rss:0kB [ 1385.090615] device hsr_slave_0 left promiscuous mode [ 1385.115226] oom_reaper: reaped process 31046 (syz-executor.1), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1385.132304] team0 (unregistering): Port device team_slave_1 removed [ 1385.155243] team0 (unregistering): Port device team_slave_0 removed [ 1385.187432] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 1385.215274] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 1385.279192] bond0 (unregistering): Released all slaves 20:21:59 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r1, 0x800454cf, &(0x7f0000000240)) ioctl$TUNSETSNDBUF(r1, 0x400454d4, &(0x7f0000000040)=0x1000) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000080)={'lo\x00', @broadcast}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000180)={0x80000000, 0xa}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x4000, 0x0) ioctl$TUNSETPERSIST(r4, 0x400454cb, 0x1) ioctl$TUNGETFEATURES(r3, 0x800454cf, &(0x7f0000000240)) ioctl$TUNSETOWNER(r3, 0x400454cc, 0xffffffffffffffff) [ 1386.605414] systemd[1]: Started Journal Service. 20:22:01 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r1, 0x800454cf, &(0x7f0000000240)) ioctl$TUNSETSNDBUF(r1, 0x400454d4, &(0x7f0000000040)=0x1000) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r2, 0x800454cf, &(0x7f0000000240)) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000080)={'lo\x00', @broadcast}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000180)={0x80000000, 0xa}) openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x4000, 0x0) 20:22:01 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r1, 0x800454cf, &(0x7f0000000240)) ioctl$TUNSETSNDBUF(r1, 0x400454d4, &(0x7f0000000040)=0x1000) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000080)={'lo\x00', @broadcast}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000180)={0x80000000, 0xa}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x4000, 0x0) ioctl$TUNSETPERSIST(r4, 0x400454cb, 0x1) ioctl$TUNGETFEATURES(r3, 0x800454cf, &(0x7f0000000240)) ioctl$TUNSETOWNER(r3, 0x400454cc, 0xffffffffffffffff) [ 1387.862551] syz-executor.5: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1387.862785] syz-executor.3: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1387.890431] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 1387.890915] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 1387.896561] CPU: 1 PID: 1127 Comm: syz-executor.3 Not tainted 4.14.228-syzkaller #0 [ 1387.908467] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1387.917809] Call Trace: [ 1387.920390] dump_stack+0x1b2/0x281 [ 1387.924015] warn_alloc.cold+0x96/0x1cc [ 1387.927987] ? zone_watermark_ok_safe+0x220/0x220 [ 1387.932855] __alloc_pages_nodemask+0x2127/0x2720 [ 1387.937698] ? retint_kernel+0x2d/0x2d [ 1387.941586] ? lock_acquire+0x170/0x3f0 [ 1387.945560] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1387.950420] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1387.955870] ? __mutex_unlock_slowpath+0x75/0x770 [ 1387.960702] ? retint_kernel+0x2d/0x2d [ 1387.964586] alloc_pages_current+0x155/0x260 [ 1387.968992] ion_page_pool_alloc+0x118/0x1b0 [ 1387.973397] ion_system_heap_allocate+0x133/0x8c0 [ 1387.978233] ? ion_alloc+0x187/0x810 [ 1387.981940] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1387.987393] ? ion_system_contig_heap_create+0x130/0x130 [ 1387.992843] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1387.997850] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1388.002690] ion_alloc+0x204/0x810 [ 1388.006239] ? ion_dma_buf_release+0x40/0x40 [ 1388.010651] ? __might_fault+0x177/0x1b0 [ 1388.014704] ion_ioctl+0xea/0x1f0 [ 1388.018146] ? ion_query_heaps+0x360/0x360 [ 1388.022376] ? __tun_chr_ioctl.isra.0+0x3310/0x3310 [ 1388.027387] ? ion_query_heaps+0x360/0x360 [ 1388.031632] do_vfs_ioctl+0x75a/0xff0 [ 1388.035425] ? ioctl_preallocate+0x1a0/0x1a0 [ 1388.043568] ? lock_downgrade+0x740/0x740 [ 1388.047729] ? __fget+0x225/0x360 [ 1388.051187] ? do_vfs_ioctl+0xff0/0xff0 [ 1388.055154] ? security_file_ioctl+0x83/0xb0 [ 1388.059552] SyS_ioctl+0x7f/0xb0 [ 1388.062912] ? do_vfs_ioctl+0xff0/0xff0 [ 1388.066883] do_syscall_64+0x1d5/0x640 [ 1388.070781] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1388.075970] RIP: 0033:0x466459 [ 1388.079145] RSP: 002b:00007f6ba9361188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1388.086871] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1388.094133] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1388.101392] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1388.108656] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1388.115916] R13: 00007ffd9352709f R14: 00007f6ba9361300 R15: 0000000000022000 [ 1388.130538] CPU: 0 PID: 1129 Comm: syz-executor.5 Not tainted 4.14.228-syzkaller #0 [ 1388.138344] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1388.147691] Call Trace: [ 1388.150282] dump_stack+0x1b2/0x281 [ 1388.153914] warn_alloc.cold+0x96/0x1cc [ 1388.155057] warn_alloc_show_mem: 2 callbacks suppressed [ 1388.155060] Mem-Info: [ 1388.157910] ? zone_watermark_ok_safe+0x220/0x220 [ 1388.157937] __alloc_pages_nodemask+0x2127/0x2720 [ 1388.163433] active_anon:77246 inactive_anon:25045 isolated_anon:0 [ 1388.163433] active_file:1470 inactive_file:2560 isolated_file:0 [ 1388.163433] unevictable:0 dirty:43 writeback:0 unstable:0 [ 1388.163433] slab_reclaimable:13702 slab_unreclaimable:132771 [ 1388.163433] mapped:37602 shmem:25388 pagetables:8746 bounce:0 [ 1388.163433] free:243841 free_pcp:28 free_cma:0 [ 1388.165679] ? __schedule+0x893/0x1de0 [ 1388.165697] ? lock_acquire+0x170/0x3f0 [ 1388.165712] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1388.173709] Node 0 active_anon:291076kB inactive_anon:77104kB active_file:5812kB inactive_file:10236kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:148536kB dirty:160kB writeback:0kB shmem:78336kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 237568kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1388.175364] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1388.175378] ? __mutex_unlock_slowpath+0x75/0x770 [ 1388.175405] alloc_pages_current+0x155/0x260 [ 1388.211133] Node 1 active_anon:17908kB inactive_anon:23076kB active_file:68kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:1872kB dirty:12kB writeback:0kB shmem:23216kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1388.213031] ion_page_pool_alloc+0x118/0x1b0 [ 1388.213041] ion_system_heap_allocate+0x133/0x8c0 [ 1388.213052] ? ion_alloc+0x187/0x810 [ 1388.217095] Node 0 [ 1388.221852] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1388.221863] ? ion_system_contig_heap_create+0x130/0x130 [ 1388.221873] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1388.221885] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1388.221897] ion_alloc+0x204/0x810 [ 1388.221912] ? ion_dma_buf_release+0x40/0x40 [ 1388.256737] DMA free:11324kB min:204kB low:252kB high:300kB active_anon:2100kB inactive_anon:8kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:56kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1388.260645] ? __might_fault+0x177/0x1b0 [ 1388.260660] ion_ioctl+0xea/0x1f0 [ 1388.260670] ? ion_query_heaps+0x360/0x360 [ 1388.260683] ? __tun_chr_ioctl.isra.0+0x3310/0x3310 [ 1388.265904] lowmem_reserve[]: [ 1388.292913] ? ion_query_heaps+0x360/0x360 [ 1388.292924] do_vfs_ioctl+0x75a/0xff0 [ 1388.292937] ? ioctl_preallocate+0x1a0/0x1a0 [ 1388.292946] ? lock_downgrade+0x740/0x740 [ 1388.292960] ? __fget+0x225/0x360 [ 1388.292969] ? do_vfs_ioctl+0xff0/0xff0 [ 1388.292981] ? security_file_ioctl+0x83/0xb0 [ 1388.292991] SyS_ioctl+0x7f/0xb0 [ 1388.302930] 0 [ 1388.305925] ? do_vfs_ioctl+0xff0/0xff0 [ 1388.305938] do_syscall_64+0x1d5/0x640 [ 1388.305954] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1388.308280] 2717 [ 1388.313611] RIP: 0033:0x466459 [ 1388.313616] RSP: 002b:00007f2761281188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1388.313627] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1388.313632] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1388.313637] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1388.313641] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1388.313647] R13: 00007ffddf757caf R14: 00007f2761281300 R15: 0000000000022000 [ 1388.480300] 2718 2718 2718 [ 1388.483385] Node 0 DMA32 free:484436kB min:36200kB low:45248kB high:54296kB active_anon:288976kB inactive_anon:77096kB active_file:5812kB inactive_file:10236kB unevictable:0kB writepending:160kB present:3129332kB managed:2788136kB mlocked:0kB kernel_stack:11904kB pagetables:16232kB bounce:0kB free_pcp:760kB local_pcp:88kB free_cma:0kB [ 1388.530556] lowmem_reserve[]: 0 0 0 0 0 [ 1388.534572] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1388.583455] lowmem_reserve[]: 0 0 0 0 0 [ 1388.601211] Node 1 Normal free:817416kB min:53696kB low:67120kB high:80544kB active_anon:17908kB inactive_anon:23076kB active_file:68kB inactive_file:4kB unevictable:0kB writepending:12kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:6304kB pagetables:18696kB bounce:0kB free_pcp:732kB local_pcp:0kB free_cma:0kB [ 1388.657599] lowmem_reserve[]: 0 0 0 0 0 [ 1388.661840] Node 0 DMA: 17*4kB (UME) 47*8kB (UME) 52*16kB (UME) 16*32kB (UME) 7*64kB (UME) 1*128kB (M) 1*256kB (E) 3*512kB (UME) 3*1024kB (UME) 2*2048kB (ME) 0*4096kB = 11324kB [ 1388.683190] Node 0 DMA32: 9659*4kB (UE) 12626*8kB (UE) 7309*16kB (UME) 2614*32kB (UME) 1027*64kB (UME) 366*128kB (UM) 122*256kB (U) 2*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 485068kB 20:22:02 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r1, 0x800454cf, &(0x7f0000000240)) ioctl$TUNSETSNDBUF(r1, 0x400454d4, &(0x7f0000000040)=0x1000) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r2, 0x800454cf, &(0x7f0000000240)) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000180)={0x80000000, 0xa}) openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) 20:22:02 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r1, 0x800454cf, &(0x7f0000000240)) ioctl$TUNSETSNDBUF(r1, 0x400454d4, &(0x7f0000000040)=0x1000) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r2, 0x800454cf, &(0x7f0000000240)) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000080)={'lo\x00', @broadcast}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000180)={0x80000000, 0xa}) [ 1388.701915] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1388.717115] Node 1 Normal: 3149*4kB (UM) 2623*8kB (U) 2396*16kB (U) 2129*32kB (U) 7061*64kB (U) 554*128kB (U) 601*256kB (U) 2*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 817740kB [ 1388.739469] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1388.749611] Node 0 hugepages_total=1 hugepages_free=1 hugepages_surp=1 hugepages_size=2048kB [ 1388.764610] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1388.780847] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1388.789925] 29677 total pagecache pages [ 1388.801946] 0 pages in swap cache [ 1388.805580] Swap cache stats: add 0, delete 0, find 0/0 [ 1388.815553] Free swap = 0kB [ 1388.818737] Total swap = 0kB [ 1388.823427] 2097051 pages RAM [ 1388.827215] 0 pages HighMem/MovableOnly [ 1388.835468] 363846 pages reserved [ 1388.844475] 0 pages cma reserved [ 1389.103230] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1389.109948] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1389.132119] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1389.146846] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1389.164050] device bridge_slave_1 left promiscuous mode [ 1389.177034] bridge0: port 2(bridge_slave_1) entered disabled state [ 1389.192603] device bridge_slave_0 left promiscuous mode [ 1389.205106] bridge0: port 1(bridge_slave_0) entered disabled state [ 1389.225476] device veth1_macvtap left promiscuous mode [ 1389.236774] device veth0_macvtap left promiscuous mode [ 1389.243183] device veth1_vlan left promiscuous mode [ 1389.248354] device veth0_vlan left promiscuous mode [ 1389.412493] device hsr_slave_1 left promiscuous mode [ 1389.423706] device hsr_slave_0 left promiscuous mode [ 1389.440100] team0 (unregistering): Port device team_slave_1 removed [ 1389.457933] team0 (unregistering): Port device team_slave_0 removed [ 1389.469109] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 1389.486239] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 1389.547666] bond0 (unregistering): Released all slaves [ 1390.610417] syz-executor.1 invoked oom-killer: gfp_mask=0x14082c2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_NOWARN|__GFP_ZERO), nodemask=(null), order=0, oom_score_adj=0 [ 1390.662622] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 1390.667771] CPU: 1 PID: 1168 Comm: syz-executor.1 Not tainted 4.14.228-syzkaller #0 [ 1390.675559] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1390.684907] Call Trace: [ 1390.687502] dump_stack+0x1b2/0x281 [ 1390.691138] dump_header+0x178/0x82f [ 1390.694853] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1390.699951] ? ___ratelimit+0x2cd/0x530 [ 1390.703927] oom_kill_process.cold+0x10/0xb18 [ 1390.708427] out_of_memory+0xe3e/0x1190 [ 1390.712414] ? oom_killer_disable+0x1c0/0x1c0 [ 1390.716918] ? mutex_trylock+0x152/0x1a0 [ 1390.720987] __alloc_pages_nodemask+0x23e1/0x2720 [ 1390.725832] ? __lock_acquire+0x5fc/0x3f20 [ 1390.730097] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1390.734946] ? fs_reclaim_release+0xd0/0x110 [ 1390.739363] alloc_pages_current+0x155/0x260 [ 1390.743771] __vmalloc_area_node+0x40a/0x680 [ 1390.748192] ? __vmalloc_node_range+0x150/0x150 [ 1390.752858] ? __get_vm_area_node+0x27d/0x340 [ 1390.757354] __vmalloc_node_range+0xbe/0x150 [ 1390.761764] vmalloc_user+0x47/0xa0 [ 1390.765412] ? kcov_mmap+0x2b/0x120 [ 1390.769034] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1390.774065] kcov_mmap+0x2b/0x120 [ 1390.777524] ? kmem_cache_alloc+0x35f/0x3c0 [ 1390.781856] mmap_region+0xa1a/0x1220 [ 1390.785660] do_mmap+0x5b3/0xcb0 [ 1390.789027] vm_mmap_pgoff+0x14e/0x1a0 [ 1390.792933] ? vma_is_stack_for_current+0xb0/0xb0 [ 1390.797771] ? __fget+0x225/0x360 [ 1390.801248] SyS_mmap_pgoff+0x249/0x510 [ 1390.805238] ? find_mergeable_anon_vma+0x230/0x230 [ 1390.810166] ? do_syscall_64+0x4c/0x640 [ 1390.814156] ? align_vdso_addr+0x250/0x250 [ 1390.818388] do_syscall_64+0x1d5/0x640 [ 1390.822287] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1390.827488] RIP: 0033:0x4664a2 [ 1390.830668] RSP: 002b:00007ffc7512b2e8 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1390.838374] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 00000000004664a2 [ 1390.845639] RDX: 0000000000000003 RSI: 0000000000200000 RDI: 0000000000000000 [ 1390.852909] RBP: 0000000000000000 R08: 00000000000000f7 R09: 0000000000000000 [ 1390.860176] R10: 0000000000000001 R11: 0000000000000246 R12: 000000000056ca68 [ 1390.867439] R13: 000000000056ca68 R14: 0000000000000000 R15: 00000000000000f8 [ 1391.110550] Mem-Info: [ 1391.113032] active_anon:77420 inactive_anon:25046 isolated_anon:0 [ 1391.113032] active_file:3 inactive_file:18 isolated_file:5 [ 1391.113032] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1391.113032] slab_reclaimable:13690 slab_unreclaimable:130985 [ 1391.113032] mapped:46143 shmem:25388 pagetables:8799 bounce:0 [ 1391.113032] free:25146 free_pcp:36 free_cma:0 [ 1391.146352] Node 0 active_anon:291760kB inactive_anon:77088kB active_file:12kB inactive_file:60kB unevictable:0kB isolated(anon):0kB isolated(file):20kB mapped:159692kB dirty:0kB writeback:0kB shmem:78316kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 237568kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1391.174457] Node 1 active_anon:17920kB inactive_anon:23096kB active_file:0kB inactive_file:12kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:24880kB dirty:0kB writeback:0kB shmem:23236kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1391.202176] Node 0 DMA free:11048kB min:204kB low:252kB high:300kB active_anon:2100kB inactive_anon:8kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:56kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1391.231172] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1391.236308] Node 0 DMA32 free:36248kB min:36200kB low:45248kB high:54296kB active_anon:289660kB inactive_anon:77080kB active_file:12kB inactive_file:60kB unevictable:0kB writepending:0kB present:3129332kB managed:2788136kB mlocked:0kB kernel_stack:11872kB pagetables:16368kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1391.265614] lowmem_reserve[]: 0 0 0 0 0 [ 1391.269611] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1391.295216] lowmem_reserve[]: 0 0 0 0 0 [ 1391.299237] Node 1 Normal free:53264kB min:53696kB low:67120kB high:80544kB active_anon:17920kB inactive_anon:23096kB active_file:0kB inactive_file:12kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:6304kB pagetables:18772kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1391.327976] lowmem_reserve[]: 0 0 0 0 0 [ 1391.332036] Node 0 DMA: 10*4kB (ME) 16*8kB (UME) 52*16kB (UME) 16*32kB (UME) 7*64kB (UME) 1*128kB (M) 1*256kB (E) 3*512kB (UME) 3*1024kB (UME) 2*2048kB (ME) 0*4096kB = 11048kB [ 1391.400548] Node 0 DMA32: 2220*4kB (ME) 634*8kB (ME) 129*16kB (UME) 16*32kB (ME) 1385*64kB (UME) 199*128kB (UM) 86*256kB (UM) 14*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 159824kB [ 1391.440592] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1391.490550] Node 1 Normal: 8*4kB (UM) 6*8kB (UM) 4*16kB (UM) 0*32kB 6381*64kB (UM) 744*128kB (UM) 281*256kB (U) 12*512kB (U) 3*1024kB (U) 1*2048kB (U) 0*4096kB = 586960kB [ 1391.530560] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1391.543358] IPVS: ftp: loaded support on port[0] = 21 [ 1391.560566] Node 0 hugepages_total=1 hugepages_free=1 hugepages_surp=1 hugepages_size=2048kB [ 1391.569171] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1391.584963] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1391.593824] 25414 total pagecache pages [ 1391.597803] 0 pages in swap cache [ 1391.601322] Swap cache stats: add 0, delete 0, find 0/0 [ 1391.606674] Free swap = 0kB [ 1391.609674] Total swap = 0kB [ 1391.612723] 2097051 pages RAM [ 1391.615823] 0 pages HighMem/MovableOnly [ 1391.619780] 363846 pages reserved [ 1391.623725] 0 pages cma reserved [ 1391.627092] Out of memory (oom_kill_allocating_task): Kill process 1168 (syz-executor.1) score 0 or sacrifice child [ 1391.650576] Bluetooth: hci1 command 0x0409 tx timeout [ 1391.656049] Bluetooth: hci0 command 0x0409 tx timeout [ 1391.662003] Killed process 1168 (syz-executor.1) total-vm:80828kB, anon-rss:60kB, file-rss:0kB, shmem-rss:0kB [ 1391.710580] IPVS: ftp: loaded support on port[0] = 21 [ 1392.060058] chnl_net:caif_netlink_parms(): no params data found [ 1392.227989] chnl_net:caif_netlink_parms(): no params data found [ 1392.506516] bridge0: port 1(bridge_slave_0) entered blocking state [ 1392.513740] bridge0: port 1(bridge_slave_0) entered disabled state [ 1392.525725] device bridge_slave_0 entered promiscuous mode [ 1392.557650] bridge0: port 2(bridge_slave_1) entered blocking state [ 1392.568427] bridge0: port 2(bridge_slave_1) entered disabled state [ 1392.575838] device bridge_slave_1 entered promiscuous mode [ 1392.609846] bridge0: port 1(bridge_slave_0) entered blocking state [ 1392.617513] bridge0: port 1(bridge_slave_0) entered disabled state [ 1392.628647] device bridge_slave_0 entered promiscuous mode [ 1392.651554] bridge0: port 2(bridge_slave_1) entered blocking state [ 1392.658015] bridge0: port 2(bridge_slave_1) entered disabled state [ 1392.669707] device bridge_slave_1 entered promiscuous mode [ 1392.677841] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 1392.700914] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1392.707622] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1392.719448] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1392.726773] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1392.738771] device bridge_slave_1 left promiscuous mode [ 1392.745313] bridge0: port 2(bridge_slave_1) entered disabled state [ 1392.774608] device bridge_slave_0 left promiscuous mode [ 1392.780150] bridge0: port 1(bridge_slave_0) entered disabled state [ 1392.803351] device veth1_macvtap left promiscuous mode [ 1392.808675] device veth0_macvtap left promiscuous mode [ 1392.830631] device veth1_vlan left promiscuous mode [ 1392.835763] device veth0_vlan left promiscuous mode 20:22:06 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r1, 0x800454cf, &(0x7f0000000240)) ioctl$TUNSETSNDBUF(r1, 0x400454d4, &(0x7f0000000040)=0x1000) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000080)={'lo\x00', @broadcast}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000180)={0x80000000, 0xa}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x4000, 0x0) ioctl$TUNSETPERSIST(r4, 0x400454cb, 0x1) ioctl$TUNGETFEATURES(r3, 0x800454cf, &(0x7f0000000240)) ioctl$TUNSETOWNER(r3, 0x400454cc, 0xffffffffffffffff) [ 1392.976137] device hsr_slave_1 left promiscuous mode [ 1392.985421] device hsr_slave_0 left promiscuous mode [ 1393.005070] team0 (unregistering): Port device team_slave_1 removed [ 1393.016123] team0 (unregistering): Port device team_slave_0 removed [ 1393.027087] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 1393.048525] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 1393.085145] bond0 (unregistering): Released all slaves [ 1393.108243] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1393.175321] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 1393.191747] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 1393.199101] team0: Port device team_slave_0 added [ 1393.215052] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1393.244997] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 1393.257658] team0: Port device team_slave_1 added [ 1393.277353] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 1393.296497] team0: Port device team_slave_0 added [ 1393.319764] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 1393.328342] team0: Port device team_slave_1 added [ 1393.406268] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1393.415037] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1393.473443] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1393.518818] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1393.551261] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1393.642396] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1393.677484] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1393.687299] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1393.731053] Bluetooth: hci0 command 0x041b tx timeout [ 1393.740002] Bluetooth: hci1 command 0x041b tx timeout [ 1393.747784] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1393.773667] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 1393.785308] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 1393.811641] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1393.817907] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1393.870541] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1393.910821] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 1393.918322] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 1393.957538] device hsr_slave_0 entered promiscuous mode [ 1393.981211] device hsr_slave_1 entered promiscuous mode [ 1394.002368] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 1394.041931] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 1394.074373] device hsr_slave_0 entered promiscuous mode [ 1394.091041] device hsr_slave_1 entered promiscuous mode [ 1394.106451] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 1394.141280] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 1394.500358] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 1394.555907] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 1394.638096] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1394.667371] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 1394.701958] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 1394.731359] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1394.740957] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1394.769224] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 1394.784317] 8021q: adding VLAN 0 to HW filter on device team0 [ 1394.794324] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1394.815002] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 1394.841559] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1394.849371] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1394.881027] bridge0: port 1(bridge_slave_0) entered blocking state [ 1394.887399] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1394.922029] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 1394.940621] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1394.949487] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 1394.972629] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 1394.980246] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 1395.013558] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1395.031662] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1395.039322] bridge0: port 2(bridge_slave_1) entered blocking state [ 1395.045732] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1395.101063] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1395.108016] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1395.131129] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1395.149973] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 1395.171224] 8021q: adding VLAN 0 to HW filter on device team0 [ 1395.180705] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 1395.201685] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 1395.208566] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1395.223581] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1395.241891] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1395.252728] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 1395.270922] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 1395.280226] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 1395.300692] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1395.307721] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1395.316596] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1395.341871] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1395.361655] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1395.373522] bridge0: port 1(bridge_slave_0) entered blocking state [ 1395.379883] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1395.415512] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1395.433512] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1395.454192] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1395.464349] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 1395.490878] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1395.498710] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1395.520211] bridge0: port 2(bridge_slave_1) entered blocking state [ 1395.526627] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1395.557072] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 1395.573631] Bluetooth: hci2 command 0x0409 tx timeout [ 1395.579303] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1395.601716] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1395.634991] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 1395.654185] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1395.673539] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 1395.693530] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1395.713331] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 1395.721363] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 1395.727377] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1395.744049] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 1395.761682] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1395.770326] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1395.791110] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1395.798826] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1395.813763] Bluetooth: hci1 command 0x040f tx timeout [ 1395.819068] Bluetooth: hci0 command 0x040f tx timeout [ 1395.826005] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 1395.837099] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 1395.850867] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1395.857941] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1395.881335] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1395.891014] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 1395.899003] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1395.921291] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 1395.927328] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1395.952687] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 1395.959109] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1395.967127] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1395.993800] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1396.001095] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1396.015498] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1396.036830] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 1396.062360] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 1396.068602] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1396.091110] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1396.132225] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1396.270466] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 1396.285709] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 1396.299998] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1396.312799] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1396.345060] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 1396.364481] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 1396.395969] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1396.404338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1396.458060] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 1396.471999] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 1396.491681] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 1396.512268] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 1396.518950] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1396.527882] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1396.541642] IPVS: ftp: loaded support on port[0] = 21 [ 1396.546411] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 1396.554819] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 1396.565056] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 1396.573746] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1396.583483] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1396.594854] device veth0_vlan entered promiscuous mode [ 1396.604845] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 1396.613509] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1396.622091] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1396.629839] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1396.637655] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1396.652152] device veth0_vlan entered promiscuous mode [ 1396.660438] device veth1_vlan entered promiscuous mode [ 1396.666823] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 1396.686592] device veth1_vlan entered promiscuous mode [ 1396.694285] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 1396.713116] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 1396.724824] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 1396.739541] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 1396.789528] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 1396.843282] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1396.852920] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1396.860113] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1396.868206] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1396.875785] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1396.884031] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1396.893275] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 1396.902387] device veth0_macvtap entered promiscuous mode [ 1396.908986] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 1396.926380] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 1396.933709] chnl_net:caif_netlink_parms(): no params data found [ 1396.945530] device veth1_macvtap entered promiscuous mode [ 1396.951929] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 1396.958248] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1396.966078] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1396.973412] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1396.981314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1397.005117] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 1397.013949] device veth0_macvtap entered promiscuous mode [ 1397.020207] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 1397.032756] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 1397.042218] device veth1_macvtap entered promiscuous mode [ 1397.048469] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 1397.064380] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1397.074839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1397.084458] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1397.094774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1397.104853] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 1397.112000] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1397.121219] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 1397.128252] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1397.136044] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1397.143985] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1397.152046] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1397.165844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1397.176237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1397.185598] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1397.196319] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1397.206415] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 1397.213438] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1397.226822] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 1397.234057] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1397.242145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1397.259020] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1397.268974] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1397.279168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1397.289010] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1397.298188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1397.307968] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1397.318049] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 1397.325440] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1397.333689] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1397.343194] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1397.354149] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1397.364849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1397.374570] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1397.385195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1397.394418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1397.404180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1397.414931] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 1397.422001] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1397.430268] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1397.438225] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1397.467939] bridge0: port 1(bridge_slave_0) entered blocking state [ 1397.475043] bridge0: port 1(bridge_slave_0) entered disabled state [ 1397.484135] device bridge_slave_0 entered promiscuous mode [ 1397.494369] bridge0: port 2(bridge_slave_1) entered blocking state [ 1397.500843] bridge0: port 2(bridge_slave_1) entered disabled state [ 1397.508120] device bridge_slave_1 entered promiscuous mode [ 1397.546318] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 1397.556152] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1397.611392] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 1397.618666] team0: Port device team_slave_0 added [ 1397.650775] Bluetooth: hci2 command 0x041b tx timeout [ 1397.657476] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 1397.669279] IPVS: ftp: loaded support on port[0] = 21 [ 1397.675607] team0: Port device team_slave_1 added [ 1397.723971] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1397.730229] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1397.756793] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1397.768468] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1397.775579] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1397.801488] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1397.841747] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 1397.849667] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 1397.891798] Bluetooth: hci0 command 0x0419 tx timeout [ 1397.897370] Bluetooth: hci1 command 0x0419 tx timeout [ 1397.926331] device hsr_slave_0 entered promiscuous mode [ 1397.932649] device hsr_slave_1 entered promiscuous mode [ 1397.939060] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 1397.998133] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 1398.035377] chnl_net:caif_netlink_parms(): no params data found [ 1398.276469] bridge0: port 2(bridge_slave_1) entered blocking state [ 1398.282914] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1398.289600] bridge0: port 1(bridge_slave_0) entered blocking state [ 1398.296040] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1398.310898] bridge0: port 1(bridge_slave_0) entered blocking state [ 1398.327214] bridge0: port 1(bridge_slave_0) entered disabled state [ 1398.347994] device bridge_slave_0 entered promiscuous mode [ 1398.367227] bridge0: port 2(bridge_slave_1) entered blocking state [ 1398.381809] bridge0: port 2(bridge_slave_1) entered disabled state [ 1398.397076] device bridge_slave_1 entered promiscuous mode [ 1398.409676] bridge0: port 1(bridge_slave_0) entered disabled state [ 1398.417883] bridge0: port 2(bridge_slave_1) entered disabled state [ 1398.475898] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 1398.502005] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1398.620162] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 1398.643325] team0: Port device team_slave_0 added [ 1398.668597] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 1398.685336] team0: Port device team_slave_1 added [ 1398.737878] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1398.777704] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 1398.795254] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1398.803951] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1398.860231] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1398.885956] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 1398.915775] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1398.931957] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1398.939703] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1398.948386] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1399.008439] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1399.042801] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 1399.051390] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 1399.057483] 8021q: adding VLAN 0 to HW filter on device team0 [ 1399.077420] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 1399.121623] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 1399.142212] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 1399.165935] device hsr_slave_0 entered promiscuous mode [ 1399.176349] device hsr_slave_1 entered promiscuous mode [ 1399.182930] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 1399.193157] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1399.209856] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1399.243034] bridge0: port 1(bridge_slave_0) entered blocking state [ 1399.249463] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1399.268491] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1399.276862] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1399.284623] bridge0: port 2(bridge_slave_1) entered blocking state [ 1399.291038] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1399.299517] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 1399.319984] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 1399.327749] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1399.343930] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 1399.365150] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1399.376751] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 1399.389414] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1399.399529] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1399.420142] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 1399.437094] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1399.447792] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1399.457558] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1399.475936] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 1399.494358] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1399.506115] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1399.527266] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready 20:22:13 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r1, 0x800454cf, &(0x7f0000000240)) ioctl$TUNSETSNDBUF(r1, 0x400454d4, &(0x7f0000000040)=0x1000) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r2, 0x800454cf, &(0x7f0000000240)) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000180)={0x80000000, 0xa}) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x4000, 0x0) 20:22:13 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r1, 0x800454cf, &(0x7f0000000240)) ioctl$TUNSETSNDBUF(r1, 0x400454d4, &(0x7f0000000040)=0x1000) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r2, 0x800454cf, &(0x7f0000000240)) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000080)={'lo\x00', @broadcast}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000180)={0x80000000, 0xa}) openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) 20:22:13 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r1, 0x800454cf, &(0x7f0000000240)) ioctl$TUNSETSNDBUF(r1, 0x400454d4, &(0x7f0000000040)=0x1000) ioctl$TUNGETFEATURES(0xffffffffffffffff, 0x800454cf, &(0x7f0000000240)) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000080)={'lo\x00', @broadcast}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000180)={0x80000000, 0xa}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x4000, 0x0) ioctl$TUNSETPERSIST(r3, 0x400454cb, 0x1) ioctl$TUNGETFEATURES(r2, 0x800454cf, &(0x7f0000000240)) ioctl$TUNSETOWNER(r2, 0x400454cc, 0xffffffffffffffff) 20:22:13 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r1, 0x800454cf, &(0x7f0000000240)) ioctl$TUNSETSNDBUF(r1, 0x400454d4, &(0x7f0000000040)=0x1000) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r2, 0x800454cf, &(0x7f0000000240)) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000080)={'lo\x00', @broadcast}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000180)={0x80000000, 0xa}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x1) ioctl$TUNSETOWNER(r3, 0x400454cc, 0xffffffffffffffff) [ 1399.556724] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1399.574372] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1399.617770] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 1399.628561] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1399.651027] Bluetooth: hci3 command 0x0409 tx timeout [ 1399.718262] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 1399.735431] Bluetooth: hci2 command 0x040f tx timeout [ 1399.762020] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 1399.790420] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1399.806536] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1399.849092] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1399.897754] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 1400.105905] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1400.158658] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 1400.188708] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 1400.215661] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1400.228504] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1400.262351] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 1400.268451] 8021q: adding VLAN 0 to HW filter on device team0 [ 1400.325871] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 1400.365253] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1400.380337] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1400.419977] bridge0: port 1(bridge_slave_0) entered blocking state [ 1400.426421] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1400.494466] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 1400.516899] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1400.526867] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1400.577106] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1400.604773] syz-executor.3: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1400.622599] bridge0: port 2(bridge_slave_1) entered blocking state [ 1400.628991] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1400.631847] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 1400.650194] CPU: 1 PID: 2117 Comm: syz-executor.3 Not tainted 4.14.228-syzkaller #0 [ 1400.658016] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1400.667381] Call Trace: [ 1400.669990] dump_stack+0x1b2/0x281 [ 1400.673627] warn_alloc.cold+0x96/0x1cc [ 1400.677600] ? zone_watermark_ok_safe+0x220/0x220 [ 1400.680214] syz-executor.5: [ 1400.682450] __alloc_pages_nodemask+0x2127/0x2720 [ 1400.682468] ? lock_acquire+0x170/0x3f0 [ 1400.682483] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1400.682502] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1400.682514] ? __mutex_unlock_slowpath+0x75/0x770 [ 1400.687031] syz-executor.4: [ 1400.690351] ? retint_kernel+0x2d/0x2d [ 1400.690366] alloc_pages_current+0x155/0x260 [ 1400.690379] ion_page_pool_alloc+0x118/0x1b0 [ 1400.709801] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 1400.712446] ion_system_heap_allocate+0x133/0x8c0 [ 1400.712457] ? ion_alloc+0x187/0x810 [ 1400.712467] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1400.712477] ? ion_system_contig_heap_create+0x130/0x130 [ 1400.712486] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1400.712498] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1400.712508] ion_alloc+0x204/0x810 [ 1400.717020] page allocation failure: order:4 [ 1400.720799] ? ion_dma_buf_release+0x40/0x40 [ 1400.720813] ? __might_fault+0x177/0x1b0 [ 1400.720825] ion_ioctl+0xea/0x1f0 [ 1400.720834] ? ion_query_heaps+0x360/0x360 [ 1400.720847] ? __tun_chr_ioctl.isra.0+0x3310/0x3310 [ 1400.720854] ? ion_query_heaps+0x360/0x360 [ 1400.720865] do_vfs_ioctl+0x75a/0xff0 [ 1400.720877] ? ioctl_preallocate+0x1a0/0x1a0 [ 1400.720886] ? lock_downgrade+0x740/0x740 [ 1400.720899] ? __fget+0x225/0x360 [ 1400.720909] ? do_vfs_ioctl+0xff0/0xff0 [ 1400.737216] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 1400.740557] ? security_file_ioctl+0x83/0xb0 [ 1400.740569] SyS_ioctl+0x7f/0xb0 [ 1400.740577] ? do_vfs_ioctl+0xff0/0xff0 [ 1400.740589] do_syscall_64+0x1d5/0x640 [ 1400.740603] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1400.740611] RIP: 0033:0x466459 [ 1400.740615] RSP: 002b:00007f6ba9361188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1400.740626] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1400.740634] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1400.746800] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1400.751502] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1400.751508] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1400.751514] R13: 00007ffd9352709f R14: 00007f6ba9361300 R15: 0000000000022000 [ 1400.837087] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1400.838421] page allocation failure: order:4 [ 1400.850401] (null) [ 1400.869496] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1400.908456] syz-executor.5 cpuset= [ 1400.910712] (null) [ 1400.921803] / [ 1400.924132] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 1400.928444] mems_allowed=0-1 [ 1400.932754] CPU: 0 PID: 2122 Comm: syz-executor.4 Not tainted 4.14.228-syzkaller #0 [ 1400.943177] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1400.952792] Call Trace: [ 1400.955390] dump_stack+0x1b2/0x281 [ 1400.959018] warn_alloc.cold+0x96/0x1cc [ 1400.960089] warn_alloc_show_mem: 1 callbacks suppressed [ 1400.960092] Mem-Info: [ 1400.962989] ? zone_watermark_ok_safe+0x220/0x220 [ 1400.963012] __alloc_pages_nodemask+0x2127/0x2720 [ 1400.963029] ? lock_acquire+0x170/0x3f0 [ 1400.981721] active_anon:77983 inactive_anon:25048 isolated_anon:60 [ 1400.981721] active_file:1423 inactive_file:4744 isolated_file:36 [ 1400.981721] unevictable:0 dirty:59 writeback:0 unstable:0 [ 1400.981721] slab_reclaimable:13583 slab_unreclaimable:127506 [ 1400.981721] mapped:57159 shmem:25396 pagetables:8915 bounce:0 [ 1400.981721] free:328431 free_pcp:145 free_cma:0 [ 1400.984393] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1400.984422] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1401.028801] ? __mutex_unlock_slowpath+0x75/0x770 [ 1401.033645] ? alloc_pages_current+0xe3/0x260 [ 1401.038136] alloc_pages_current+0x155/0x260 [ 1401.042548] ion_page_pool_alloc+0x118/0x1b0 [ 1401.046974] ion_system_heap_allocate+0x133/0x8c0 [ 1401.051814] ? ion_alloc+0x187/0x810 [ 1401.055523] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1401.060969] ? ion_system_contig_heap_create+0x130/0x130 [ 1401.066413] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1401.071425] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1401.076277] ion_alloc+0x204/0x810 [ 1401.079814] ? ion_dma_buf_release+0x40/0x40 [ 1401.084216] ? __might_fault+0x177/0x1b0 [ 1401.088270] ion_ioctl+0xea/0x1f0 [ 1401.091715] ? ion_query_heaps+0x360/0x360 [ 1401.094809] Node 0 active_anon:294168kB inactive_anon:77116kB active_file:4244kB inactive_file:8124kB unevictable:0kB isolated(anon):96kB isolated(file):0kB mapped:200792kB dirty:200kB writeback:0kB shmem:78348kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 239616kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1401.095949] ? __tun_chr_ioctl.isra.0+0x3310/0x3310 [ 1401.095957] ? ion_query_heaps+0x360/0x360 [ 1401.095969] do_vfs_ioctl+0x75a/0xff0 [ 1401.138297] ? ioctl_preallocate+0x1a0/0x1a0 [ 1401.142701] ? lock_downgrade+0x740/0x740 [ 1401.146847] ? __fget+0x225/0x360 [ 1401.150293] ? do_vfs_ioctl+0xff0/0xff0 [ 1401.154258] ? security_file_ioctl+0x83/0xb0 [ 1401.158662] SyS_ioctl+0x7f/0xb0 [ 1401.162025] ? do_vfs_ioctl+0xff0/0xff0 [ 1401.165998] do_syscall_64+0x1d5/0x640 [ 1401.169907] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1401.175091] RIP: 0033:0x466459 [ 1401.178272] RSP: 002b:00007f6a95319188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1401.185970] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1401.193229] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1401.196833] Node 1 active_anon:17764kB inactive_anon:23076kB active_file:1448kB inactive_file:10852kB unevictable:0kB isolated(anon):144kB isolated(file):144kB mapped:27844kB dirty:36kB writeback:0kB shmem:23236kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1401.200584] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1401.200590] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1401.200595] R13: 00007ffc0329f33f R14: 00007f6a95319300 R15: 0000000000022000 [ 1401.205186] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 1401.254186] CPU: 1 PID: 2121 Comm: syz-executor.5 Not tainted 4.14.228-syzkaller #0 [ 1401.265237] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1401.274610] Call Trace: [ 1401.277205] dump_stack+0x1b2/0x281 [ 1401.280836] warn_alloc.cold+0x96/0x1cc [ 1401.284820] ? zone_watermark_ok_safe+0x220/0x220 [ 1401.289682] __alloc_pages_nodemask+0x2127/0x2720 [ 1401.294526] ? __schedule+0x893/0x1de0 [ 1401.298420] ? lock_acquire+0x170/0x3f0 [ 1401.302406] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1401.307254] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1401.312709] ? __mutex_unlock_slowpath+0x75/0x770 [ 1401.317557] alloc_pages_current+0x155/0x260 [ 1401.321982] ion_page_pool_alloc+0x118/0x1b0 [ 1401.326392] ion_system_heap_allocate+0x133/0x8c0 [ 1401.331250] ? ion_alloc+0x187/0x810 [ 1401.334966] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1401.340419] ? ion_system_contig_heap_create+0x130/0x130 [ 1401.345875] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1401.350900] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1401.355742] ion_alloc+0x204/0x810 [ 1401.359286] ? ion_dma_buf_release+0x40/0x40 [ 1401.363699] ? __might_fault+0x177/0x1b0 [ 1401.367760] ion_ioctl+0xea/0x1f0 [ 1401.371230] ? ion_query_heaps+0x360/0x360 [ 1401.375464] ? __tun_chr_ioctl.isra.0+0x3310/0x3310 [ 1401.378511] Node 0 [ 1401.380469] ? ion_query_heaps+0x360/0x360 [ 1401.380480] do_vfs_ioctl+0x75a/0xff0 [ 1401.380493] ? ioctl_preallocate+0x1a0/0x1a0 [ 1401.380503] ? lock_downgrade+0x740/0x740 [ 1401.380517] ? __fget+0x225/0x360 [ 1401.380526] ? do_vfs_ioctl+0xff0/0xff0 [ 1401.385025] DMA free:11080kB min:204kB low:252kB high:300kB active_anon:2100kB inactive_anon:8kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:56kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1401.386970] ? security_file_ioctl+0x83/0xb0 [ 1401.386982] SyS_ioctl+0x7f/0xb0 [ 1401.386990] ? do_vfs_ioctl+0xff0/0xff0 [ 1401.387002] do_syscall_64+0x1d5/0x640 [ 1401.415379] lowmem_reserve[]: [ 1401.432628] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1401.432638] RIP: 0033:0x466459 [ 1401.432643] RSP: 002b:00007f2761281188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1401.432652] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1401.432657] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1401.432668] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1401.432673] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1401.432678] R13: 00007ffddf757caf R14: 00007f2761281300 R15: 0000000000022000 [ 1401.457646] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 1401.551821] 0 2717 2718 2718 2718 [ 1401.558844] Node 0 DMA32 free:529716kB min:36200kB low:45248kB high:54296kB active_anon:292116kB inactive_anon:77108kB active_file:4244kB inactive_file:7608kB unevictable:0kB writepending:208kB present:3129332kB managed:2788136kB mlocked:0kB kernel_stack:12064kB pagetables:16748kB bounce:0kB free_pcp:304kB local_pcp:280kB free_cma:0kB [ 1401.590090] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1401.603592] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1401.624088] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1401.647412] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 1401.673459] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1401.685536] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1401.698530] lowmem_reserve[]: 0 0 0 0 0 [ 1401.708195] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 1401.718660] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1401.744609] Bluetooth: hci3 command 0x041b tx timeout [ 1401.755766] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1401.763447] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1401.784104] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1401.807089] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 1401.817735] Bluetooth: hci2 command 0x0419 tx timeout [ 1401.834204] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1401.846415] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1401.860333] lowmem_reserve[]: 0 0 0 0 0 [ 1401.870354] Node 1 Normal free:232196kB min:53696kB low:67120kB high:80544kB active_anon:17700kB inactive_anon:23092kB active_file:1448kB inactive_file:10832kB unevictable:0kB writepending:44kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:6336kB pagetables:18836kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1401.903477] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 1401.911215] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1401.926823] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1401.946402] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 1401.955447] lowmem_reserve[]: 0 0 0 0 0 [ 1401.959582] Node 0 DMA: 46*4kB (UME) 50*8kB (UME) 44*16kB (UME) 18*32kB (UME) 4*64kB (UME) 2*128kB (UM) 2*256kB (UE) 2*512kB (ME) 3*1024kB (UME) 2*2048kB (ME) 0*4096kB = 11080kB [ 1401.975526] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 1401.991999] Node 0 DMA32: 759*4kB (ME) 348*8kB (UME) 6881*16kB (UME) 7901*32kB (UE) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 368748kB [ 1402.018260] syz-executor.0: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1402.031182] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1402.048210] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 1402.054673] Node 1 Normal: 3633*4kB (UM) 3355*8kB (UM) 2490*16kB (UM) 2018*32kB (U) 0*64kB 1*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 145916kB [ 1402.054743] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1402.054750] Node 0 hugepages_total=1 hugepages_free=1 hugepages_surp=1 hugepages_size=2048kB [ 1402.054756] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1402.054763] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1402.054767] 31098 total pagecache pages [ 1402.054777] 0 pages in swap cache [ 1402.085233] syz-executor.0 cpuset= [ 1402.132691] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 1402.147923] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1402.148531] / [ 1402.156958] Swap cache stats: add 0, delete 0, find 0/0 [ 1402.161207] mems_allowed=0-1 [ 1402.176212] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 1402.182806] Free swap = 0kB [ 1402.184638] CPU: 1 PID: 2114 Comm: syz-executor.0 Not tainted 4.14.228-syzkaller #0 [ 1402.189284] Total swap = 0kB [ 1402.193636] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1402.193640] Call Trace: [ 1402.193659] dump_stack+0x1b2/0x281 [ 1402.193673] warn_alloc.cold+0x96/0x1cc [ 1402.193685] ? zone_watermark_ok_safe+0x220/0x220 [ 1402.193707] __alloc_pages_nodemask+0x2127/0x2720 [ 1402.193724] ? lock_acquire+0x170/0x3f0 [ 1402.206890] 2097051 pages RAM [ 1402.208640] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1402.208659] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1402.208672] ? __mutex_unlock_slowpath+0x75/0x770 [ 1402.219325] 0 pages HighMem/MovableOnly [ 1402.221073] alloc_pages_current+0x155/0x260 [ 1402.221088] ion_page_pool_alloc+0x118/0x1b0 [ 1402.221097] ion_system_heap_allocate+0x133/0x8c0 [ 1402.221107] ? ion_alloc+0x187/0x810 [ 1402.221118] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1402.221127] ? ion_system_contig_heap_create+0x130/0x130 [ 1402.221137] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1402.221157] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1402.231923] 363846 pages reserved [ 1402.233026] ion_alloc+0x204/0x810 [ 1402.233041] ? ion_dma_buf_release+0x40/0x40 [ 1402.233056] ? __might_fault+0x177/0x1b0 [ 1402.239041] 0 pages cma reserved [ 1402.243320] ion_ioctl+0xea/0x1f0 [ 1402.243330] ? ion_query_heaps+0x360/0x360 [ 1402.243345] ? __tun_chr_ioctl.isra.0+0x3310/0x3310 [ 1402.243351] ? ion_query_heaps+0x360/0x360 [ 1402.243362] do_vfs_ioctl+0x75a/0xff0 [ 1402.243373] ? ioctl_preallocate+0x1a0/0x1a0 [ 1402.243383] ? lock_downgrade+0x740/0x740 [ 1402.243396] ? __fget+0x225/0x360 [ 1402.243406] ? do_vfs_ioctl+0xff0/0xff0 [ 1402.304586] device veth0_vlan entered promiscuous mode [ 1402.305612] ? security_file_ioctl+0x83/0xb0 [ 1402.305631] SyS_ioctl+0x7f/0xb0 [ 1402.305641] ? do_vfs_ioctl+0xff0/0xff0 [ 1402.328677] device veth1_vlan entered promiscuous mode [ 1402.329671] do_syscall_64+0x1d5/0x640 [ 1402.329689] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1402.329700] RIP: 0033:0x466459 [ 1402.351122] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 1402.355278] RSP: 002b:00007f2e01ed3188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1402.355289] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1402.355295] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1402.355301] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1402.355307] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1402.355316] R13: 00007ffdb70bf23f R14: 00007f2e01ed3300 R15: 0000000000022000 [ 1402.381849] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 1402.442593] warn_alloc_show_mem: 2 callbacks suppressed [ 1402.442597] Mem-Info: [ 1402.464549] active_anon:77981 inactive_anon:25052 isolated_anon:0 [ 1402.464549] active_file:1635 inactive_file:4073 isolated_file:12 [ 1402.464549] unevictable:0 dirty:63 writeback:0 unstable:0 [ 1402.464549] slab_reclaimable:13562 slab_unreclaimable:128505 [ 1402.464549] mapped:57166 shmem:25396 pagetables:8910 bounce:0 [ 1402.464549] free:68013 free_pcp:71 free_cma:0 [ 1402.503979] Node 0 active_anon:294224kB inactive_anon:77116kB active_file:5092kB inactive_file:6156kB unevictable:0kB isolated(anon):0kB isolated(file):48kB mapped:200808kB dirty:208kB writeback:0kB shmem:78348kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 239616kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1402.540572] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1402.548034] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1402.568123] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1402.587306] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1402.608506] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1402.644206] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1402.654199] Node 1 active_anon:17700kB inactive_anon:23092kB active_file:3048kB inactive_file:6464kB unevictable:0kB isolated(anon):0kB isolated(file):128kB mapped:27256kB dirty:44kB writeback:0kB shmem:23236kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1402.718652] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 1402.746999] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 1402.780420] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 1402.809724] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1402.824600] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1402.870870] Node 0 DMA free:11052kB min:204kB low:252kB high:300kB active_anon:2100kB inactive_anon:8kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:56kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1402.899858] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 1402.911473] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1402.918177] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1402.943747] device veth0_macvtap entered promiscuous mode [ 1402.950194] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 1402.964523] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1402.969635] Node 0 DMA32 free:36868kB min:36200kB low:45248kB high:54296kB active_anon:292124kB inactive_anon:77108kB active_file:2520kB inactive_file:2960kB unevictable:0kB writepending:208kB present:3129332kB managed:2788136kB mlocked:0kB kernel_stack:12064kB pagetables:16748kB bounce:0kB free_pcp:476kB local_pcp:424kB free_cma:0kB [ 1403.004596] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1403.012320] lowmem_reserve[]: 0 0 0 0 0 [ 1403.014007] device veth1_macvtap entered promiscuous mode [ 1403.025735] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 1403.032084] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1403.081333] lowmem_reserve[]: 0 0 0 0 0 [ 1403.085340] Node 1 Normal free:53356kB min:53696kB low:67120kB high:80544kB active_anon:17708kB inactive_anon:23092kB active_file:164kB inactive_file:0kB unevictable:0kB writepending:16kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:6336kB pagetables:18836kB bounce:0kB free_pcp:240kB local_pcp:116kB free_cma:0kB [ 1403.124261] lowmem_reserve[]: 0 0 0 0 0 [ 1403.128272] Node 0 DMA: 33*4kB (UME) 50*8kB (UME) 44*16kB (UME) 18*32kB (UME) 4*64kB (UME) 2*128kB (UM) 2*256kB (UE) 2*512kB (ME) 3*1024kB (UME) 2*2048kB (ME) 0*4096kB = 11028kB [ 1403.154990] Node 0 DMA32: 1775*4kB (UME) 627*8kB (ME) 126*16kB (UMEH) 675*32kB (UMEH) 10*64kB (UM) 4*128kB (UM) 2*256kB (U) 1*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 37908kB [ 1403.206591] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1403.217668] Node 1 Normal: 165*4kB (UM) 25*8kB (M) 14*16kB (M) 1457*32kB (UM) 26*64kB (UM) 11*128kB (UM) 3*256kB (M) 2*512kB (M) 1*1024kB (M) 0*2048kB 0*4096kB = 53596kB [ 1403.219763] oom_reaper: reaped process 2122 (syz-executor.4), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1403.234463] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1403.252636] Node 0 hugepages_total=1 hugepages_free=1 hugepages_surp=1 hugepages_size=2048kB [ 1403.261551] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1403.270409] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1403.279064] 25689 total pagecache pages [ 1403.283123] 0 pages in swap cache [ 1403.286577] Swap cache stats: add 0, delete 0, find 0/0 [ 1403.292257] Free swap = 0kB [ 1403.295276] Total swap = 0kB [ 1403.298285] 2097051 pages RAM [ 1403.301525] 0 pages HighMem/MovableOnly [ 1403.305496] 363846 pages reserved [ 1403.308943] 0 pages cma reserved [ 1403.402561] oom_reaper: reaped process 2121 (syz-executor.5), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1403.456280] oom_reaper: reaped process 2114 (syz-executor.0), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1403.562886] oom_reaper: reaped process 2117 (syz-executor.3), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1403.693112] systemd invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1403.745127] systemd cpuset=/ mems_allowed=0-1 [ 1403.749653] CPU: 0 PID: 1 Comm: systemd Not tainted 4.14.228-syzkaller #0 [ 1403.756569] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1403.765914] Call Trace: [ 1403.768520] dump_stack+0x1b2/0x281 [ 1403.772154] dump_header+0x178/0x82f [ 1403.775865] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1403.780963] ? ___ratelimit+0x2cd/0x530 [ 1403.784958] oom_kill_process.cold+0x10/0xb18 [ 1403.789452] ? lock_downgrade+0x740/0x740 [ 1403.793599] out_of_memory+0x2dc/0x1190 [ 1403.797579] ? oom_killer_disable+0x1c0/0x1c0 [ 1403.802076] ? mutex_trylock+0x152/0x1a0 [ 1403.806133] __alloc_pages_nodemask+0x23e1/0x2720 [ 1403.811000] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1403.815854] alloc_pages_current+0x155/0x260 [ 1403.820276] filemap_fault+0xea3/0x1980 [ 1403.824274] ext4_filemap_fault+0x84/0xb0 [ 1403.828419] __do_fault+0xfa/0x380 [ 1403.831957] __handle_mm_fault+0x2497/0x4620 [ 1403.836369] ? ep_poll+0x1ab/0xa50 [ 1403.839904] ? vm_insert_page+0x7c0/0x7c0 [ 1403.844058] ? sync_mm_rss+0xf2/0x160 [ 1403.847860] handle_mm_fault+0x391/0x860 [ 1403.851926] __do_page_fault+0x549/0xad0 [ 1403.855993] ? spurious_fault+0x640/0x640 [ 1403.860191] ? do_page_fault+0x60/0x500 [ 1403.864163] ? page_fault+0x2f/0x50 [ 1403.867789] page_fault+0x45/0x50 [ 1403.871254] RIP: 0001:0x1 [ 1403.873996] RSP: e1b13f50:00007ffd334bc730 EFLAGS: 7ffd334bc460 [ 1403.874606] Bluetooth: hci3 command 0x040f tx timeout [ 1403.885185] syz-executor.0: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1403.885961] Mem-Info: [ 1403.905088] active_anon:77295 inactive_anon:25052 isolated_anon:0 [ 1403.905088] active_file:42 inactive_file:0 isolated_file:0 [ 1403.905088] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1403.905088] slab_reclaimable:13537 slab_unreclaimable:128144 [ 1403.905088] mapped:52868 shmem:25396 pagetables:8887 bounce:0 [ 1403.905088] free:13842 free_pcp:0 free_cma:0 [ 1403.906732] syz-executor.4: [ 1403.938301] syz-executor.3: [ 1403.942059] Node 0 active_anon:291552kB inactive_anon:77116kB active_file:160kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:192796kB dirty:0kB writeback:0kB shmem:78348kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 237568kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1403.960613] page allocation failure: order:0 [ 1403.976059] Node 1 active_anon:17628kB inactive_anon:23092kB active_file:8kB inactive_file:12kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:18676kB dirty:0kB writeback:0kB shmem:23236kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1403.998361] syz-executor.0 cpuset= [ 1404.007759] Node 0 [ 1404.015747] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1404.025755] DMA free:10972kB min:204kB low:252kB high:300kB active_anon:2100kB inactive_anon:8kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:56kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1404.031826] / [ 1404.055055] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 1404.061946] CPU: 0 PID: 2117 Comm: syz-executor.3 Not tainted 4.14.228-syzkaller #0 [ 1404.069237] page allocation failure: order:0 [ 1404.069735] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1404.069746] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1404.074144] Call Trace: [ 1404.074163] dump_stack+0x1b2/0x281 [ 1404.074178] warn_alloc.cold+0x96/0x1cc [ 1404.074191] ? zone_watermark_ok_safe+0x220/0x220 [ 1404.083562] mems_allowed=0-1 [ 1404.090626] ? usleep_range+0x130/0x130 [ 1404.090636] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1404.090652] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1404.093217] (null) [ 1404.096836] ? run_timer_softirq+0x5a0/0x5a0 [ 1404.110512] syz-executor.4 cpuset= [ 1404.112675] __alloc_pages_nodemask+0x2127/0x2720 [ 1404.117745] / [ 1404.122764] ? lock_acquire+0x170/0x3f0 [ 1404.140515] mems_allowed=0-1 [ 1404.143281] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1404.151182] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1404.155672] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1404.161125] alloc_pages_current+0x155/0x260 [ 1404.165548] ion_page_pool_alloc+0x118/0x1b0 [ 1404.169947] ion_system_heap_allocate+0x133/0x8c0 [ 1404.174780] ? ion_alloc+0x187/0x810 [ 1404.179022] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1404.184478] ? ion_system_contig_heap_create+0x130/0x130 [ 1404.189931] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1404.194942] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1404.199773] ion_alloc+0x204/0x810 [ 1404.203306] ? ion_dma_buf_release+0x40/0x40 [ 1404.207703] ? __might_fault+0x177/0x1b0 [ 1404.211769] ion_ioctl+0xea/0x1f0 [ 1404.215213] ? ion_query_heaps+0x360/0x360 [ 1404.219442] ? __tun_chr_ioctl.isra.0+0x3310/0x3310 [ 1404.224461] ? ion_query_heaps+0x360/0x360 [ 1404.228686] do_vfs_ioctl+0x75a/0xff0 [ 1404.232563] ? ioctl_preallocate+0x1a0/0x1a0 [ 1404.236959] ? lock_downgrade+0x740/0x740 [ 1404.241102] ? __fget+0x225/0x360 [ 1404.244563] ? do_vfs_ioctl+0xff0/0xff0 [ 1404.248527] ? security_file_ioctl+0x83/0xb0 [ 1404.252924] SyS_ioctl+0x7f/0xb0 [ 1404.256276] ? do_vfs_ioctl+0xff0/0xff0 [ 1404.260238] do_syscall_64+0x1d5/0x640 [ 1404.264129] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1404.269316] RIP: 0033:0x466459 [ 1404.272490] RSP: 002b:00007f6ba9361188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1404.280192] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1404.287446] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1404.294702] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1404.301982] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1404.309239] R13: 00007ffd9352709f R14: 00007f6ba9361300 R15: 0000000000022000 [ 1404.316516] CPU: 1 PID: 2114 Comm: syz-executor.0 Not tainted 4.14.228-syzkaller #0 [ 1404.319652] lowmem_reserve[]: [ 1404.324308] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1404.324312] Call Trace: [ 1404.324330] dump_stack+0x1b2/0x281 [ 1404.324344] warn_alloc.cold+0x96/0x1cc [ 1404.324356] ? zone_watermark_ok_safe+0x220/0x220 [ 1404.324366] ? usleep_range+0x130/0x130 [ 1404.324378] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1404.327467] 0 [ 1404.336810] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1404.336821] ? run_timer_softirq+0x5a0/0x5a0 [ 1404.336837] __alloc_pages_nodemask+0x2127/0x2720 [ 1404.336853] ? lock_acquire+0x170/0x3f0 [ 1404.336869] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1404.336880] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1404.341773] 2717 [ 1404.343062] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1404.347001] 2718 [ 1404.351824] ? check_preemption_disabled+0x35/0x240 [ 1404.351845] alloc_pages_current+0x155/0x260 [ 1404.351858] ion_page_pool_alloc+0x118/0x1b0 [ 1404.351868] ion_system_heap_allocate+0x133/0x8c0 [ 1404.355818] 2718 [ 1404.360905] ? ion_alloc+0x187/0x810 [ 1404.360917] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1404.360926] ? ion_system_contig_heap_create+0x130/0x130 [ 1404.360936] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1404.360947] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1404.360957] ion_alloc+0x204/0x810 [ 1404.364976] 2718 [ 1404.367744] ? ion_dma_buf_release+0x40/0x40 [ 1404.376961] ? __might_fault+0x177/0x1b0 [ 1404.383131] Node 0 [ 1404.385736] ion_ioctl+0xea/0x1f0 [ 1404.390226] DMA32 free:17748kB min:36200kB low:45248kB high:54296kB active_anon:289452kB inactive_anon:77108kB active_file:60kB inactive_file:60kB unevictable:0kB writepending:0kB present:3129332kB managed:2788136kB mlocked:0kB kernel_stack:12032kB pagetables:16656kB bounce:0kB free_pcp:32kB local_pcp:24kB free_cma:0kB [ 1404.392280] ? ion_query_heaps+0x360/0x360 [ 1404.392296] ? __tun_chr_ioctl.isra.0+0x3310/0x3310 [ 1404.392303] ? ion_query_heaps+0x360/0x360 [ 1404.392314] do_vfs_ioctl+0x75a/0xff0 [ 1404.397743] lowmem_reserve[]: [ 1404.399805] ? ioctl_preallocate+0x1a0/0x1a0 [ 1404.407036] 0 [ 1404.409205] ? lock_downgrade+0x740/0x740 [ 1404.413633] 0 [ 1404.418413] ? __fget+0x225/0x360 [ 1404.420464] 0 [ 1404.424172] ? do_vfs_ioctl+0xff0/0xff0 [ 1404.442034] 0 [ 1404.444880] ? security_file_ioctl+0x83/0xb0 [ 1404.448391] 0 [ 1404.450442] SyS_ioctl+0x7f/0xb0 [ 1404.458885] ? do_vfs_ioctl+0xff0/0xff0 [ 1404.463304] Node 0 [ 1404.464561] do_syscall_64+0x1d5/0x640 [ 1404.495263] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1404.497147] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1404.502161] lowmem_reserve[]: [ 1404.506347] RIP: 0033:0x466459 [ 1404.510119] 0 [ 1404.513205] RSP: 002b:00007f2e01ed3188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1404.513215] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1404.513220] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1404.513225] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1404.513230] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1404.513236] R13: 00007ffdb70bf23f R14: 00007f2e01ed3300 R15: 0000000000022000 [ 1404.526868] syz-executor.5: [ 1404.531329] 0 [ 1404.542004] CPU: 1 PID: 2122 Comm: syz-executor.4 Not tainted 4.14.228-syzkaller #0 [ 1404.542793] 0 [ 1404.546145] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1404.550094] 0 [ 1404.552311] Call Trace: [ 1404.552331] dump_stack+0x1b2/0x281 [ 1404.552345] warn_alloc.cold+0x96/0x1cc [ 1404.552357] ? zone_watermark_ok_safe+0x220/0x220 [ 1404.552368] ? usleep_range+0x130/0x130 [ 1404.552379] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1404.558518] 0 [ 1404.581148] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1404.581158] ? run_timer_softirq+0x5a0/0x5a0 [ 1404.581175] __alloc_pages_nodemask+0x2127/0x2720 [ 1404.581190] ? lock_acquire+0x170/0x3f0 [ 1404.581205] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1404.581215] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1404.581232] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1404.581250] alloc_pages_current+0x155/0x260 [ 1404.581260] ion_page_pool_alloc+0x118/0x1b0 [ 1404.581269] ion_system_heap_allocate+0x133/0x8c0 [ 1404.581280] ? ion_alloc+0x187/0x810 [ 1404.589557] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1404.593670] page allocation failure: order:0 [ 1404.594513] ? ion_system_contig_heap_create+0x130/0x130 [ 1404.602236] Node 1 [ 1404.609454] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1404.618958] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1404.623961] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1404.623974] ion_alloc+0x204/0x810 [ 1404.623989] ? ion_dma_buf_release+0x40/0x40 [ 1404.633438] Normal free:26784kB min:53696kB low:67120kB high:80544kB active_anon:17628kB inactive_anon:23092kB active_file:4kB inactive_file:8kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:6336kB pagetables:18836kB bounce:0kB free_pcp:120kB local_pcp:0kB free_cma:0kB [ 1404.638507] ? __might_fault+0x177/0x1b0 [ 1404.641547] (null) [ 1404.643305] ion_ioctl+0xea/0x1f0 [ 1404.653305] lowmem_reserve[]: [ 1404.662202] ? ion_query_heaps+0x360/0x360 [ 1404.662218] ? __tun_chr_ioctl.isra.0+0x3310/0x3310 [ 1404.662225] ? ion_query_heaps+0x360/0x360 [ 1404.662236] do_vfs_ioctl+0x75a/0xff0 [ 1404.662247] ? ioctl_preallocate+0x1a0/0x1a0 [ 1404.664040] syz-executor.5 cpuset= [ 1404.666613] ? lock_downgrade+0x740/0x740 [ 1404.666627] ? __fget+0x225/0x360 [ 1404.670223] / [ 1404.674204] ? do_vfs_ioctl+0xff0/0xff0 [ 1404.681350] 0 [ 1404.682982] ? security_file_ioctl+0x83/0xb0 [ 1404.688055] 0 [ 1404.689847] SyS_ioctl+0x7f/0xb0 [ 1404.695103] Mem-Info: [ 1404.699229] ? do_vfs_ioctl+0xff0/0xff0 [ 1404.706296] mems_allowed=0-1 [ 1404.708024] do_syscall_64+0x1d5/0x640 [ 1404.712925] active_anon:77295 inactive_anon:25052 isolated_anon:0 [ 1404.712925] active_file:16 inactive_file:17 isolated_file:0 [ 1404.712925] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1404.712925] slab_reclaimable:13537 slab_unreclaimable:128144 [ 1404.712925] mapped:52866 shmem:25396 pagetables:8887 bounce:0 [ 1404.712925] free:13876 free_pcp:38 free_cma:0 [ 1404.717336] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1404.725012] 0 [ 1404.727146] RIP: 0033:0x466459 [ 1404.742710] Node 0 active_anon:291552kB inactive_anon:77116kB active_file:60kB inactive_file:60kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:192796kB dirty:0kB writeback:0kB shmem:78348kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 237568kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1404.745464] RSP: 002b:00007f6a95319188 EFLAGS: 00000246 [ 1404.749865] Node 1 active_anon:17628kB inactive_anon:23092kB active_file:4kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:18668kB dirty:0kB writeback:0kB shmem:23236kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1404.755279] ORIG_RAX: 0000000000000010 [ 1404.755285] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1404.755290] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1404.755295] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1404.755300] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1404.755305] R13: 00007ffc0329f33f R14: 00007f6a95319300 R15: 0000000000022000 [ 1404.858348] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 1404.861951] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 1404.870615] 0 [ 1404.970559] CPU: 1 PID: 2121 Comm: syz-executor.5 Not tainted 4.14.228-syzkaller #0 [ 1405.016277] Node 0 [ 1405.019064] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1405.026390] 0 [ 1405.033582] Call Trace: [ 1405.033603] dump_stack+0x1b2/0x281 [ 1405.033618] warn_alloc.cold+0x96/0x1cc [ 1405.033629] ? zone_watermark_ok_safe+0x220/0x220 [ 1405.033640] ? usleep_range+0x130/0x130 [ 1405.033649] ? try_to_free_pages+0x23f/0x6e0 [ 1405.033660] ? _find_next_bit+0xdb/0x100 [ 1405.033675] ? run_timer_softirq+0x5a0/0x5a0 [ 1405.044358] DMA free:10972kB min:204kB low:252kB high:300kB active_anon:2100kB inactive_anon:8kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:56kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1405.047523] __alloc_pages_nodemask+0x2127/0x2720 [ 1405.049291] lowmem_reserve[]: [ 1405.057085] ? lock_acquire+0x170/0x3f0 [ 1405.057102] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1405.057111] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1405.057127] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1405.057146] alloc_pages_current+0x155/0x260 [ 1405.057157] ion_page_pool_alloc+0x118/0x1b0 [ 1405.068717] ion_system_heap_allocate+0x133/0x8c0 [ 1405.068727] ? ion_alloc+0x187/0x810 [ 1405.068738] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1405.068746] ? ion_system_contig_heap_create+0x130/0x130 [ 1405.068755] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1405.068766] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1405.068776] ion_alloc+0x204/0x810 [ 1405.068790] ? ion_dma_buf_release+0x40/0x40 [ 1405.068801] ? __might_fault+0x177/0x1b0 [ 1405.068816] ion_ioctl+0xea/0x1f0 [ 1405.074405] 0 [ 1405.076800] ? ion_query_heaps+0x360/0x360 [ 1405.080792] Node 0 [ 1405.085598] ? __tun_chr_ioctl.isra.0+0x3310/0x3310 [ 1405.089546] DMA: [ 1405.093950] ? ion_query_heaps+0x360/0x360 [ 1405.093961] do_vfs_ioctl+0x75a/0xff0 [ 1405.093974] ? ioctl_preallocate+0x1a0/0x1a0 [ 1405.093983] ? lock_downgrade+0x740/0x740 [ 1405.094002] ? __fget+0x225/0x360 [ 1405.094011] ? do_vfs_ioctl+0xff0/0xff0 [ 1405.094023] ? security_file_ioctl+0x83/0xb0 [ 1405.094034] SyS_ioctl+0x7f/0xb0 [ 1405.094041] ? do_vfs_ioctl+0xff0/0xff0 [ 1405.094052] do_syscall_64+0x1d5/0x640 [ 1405.094085] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1405.094094] RIP: 0033:0x466459 [ 1405.102102] 2717 [ 1405.102548] RSP: 002b:00007f2761281188 EFLAGS: 00000246 [ 1405.132857] 19*4kB [ 1405.133307] ORIG_RAX: 0000000000000010 [ 1405.136396] (UME) [ 1405.140365] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1405.161771] 50*8kB [ 1405.163863] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1405.168683] (UME) [ 1405.172375] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1405.172381] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1405.172386] R13: 00007ffddf757caf R14: 00007f2761281300 R15: 0000000000022000 [ 1405.300603] 2718 [ 1405.307315] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1405.370041] 2718 2718 [ 1405.380139] Node 0 DMA32 free:139104kB min:36200kB low:45248kB high:54296kB active_anon:289452kB inactive_anon:77108kB active_file:60kB inactive_file:760kB unevictable:0kB writepending:0kB present:3129332kB managed:2788136kB mlocked:0kB kernel_stack:12032kB pagetables:16656kB bounce:0kB free_pcp:1364kB local_pcp:620kB free_cma:0kB [ 1405.382061] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1405.466512] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1405.470303] lowmem_reserve[]: [ 1405.484366] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1405.500777] 0 0 0 0 0 [ 1405.503307] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1405.524312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1405.529201] lowmem_reserve[]: 0 0 0 0 0 [ 1405.561224] Node 1 Normal free:26896kB min:53696kB low:67120kB high:80544kB active_anon:17632kB inactive_anon:23092kB active_file:336kB inactive_file:5352kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:6368kB pagetables:18840kB bounce:0kB free_pcp:808kB local_pcp:688kB free_cma:0kB [ 1405.564342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1405.600797] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1405.650902] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1405.684599] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1405.690506] lowmem_reserve[]: 0 0 0 0 0 [ 1405.710523] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1405.710526] Node 0 DMA: 33*4kB (UME) 50*8kB (UME) 44*16kB (UME) 18*32kB (UME) 4*64kB (UME) 2*128kB (UM) 2*256kB (UE) 2*512kB (ME) 3*1024kB (UME) 2*2048kB (ME) 0*4096kB = 11028kB [ 1405.720088] 44*16kB [ 1405.737299] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 1405.739825] Node 0 [ 1405.746497] (UME) 18*32kB (UME) 4*64kB (UME) 2*128kB (UM) 2*256kB (UE) 2*512kB (ME) 3*1024kB (UME) 2*2048kB (ME) 0*4096kB = 10972kB [ 1405.752281] syz-executor.4: [ 1405.770527] DMA32: 18166*4kB (UMEH) 15972*8kB (UMEH) 7521*16kB (UMEH) 3748*32kB (UEH) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 440712kB [ 1405.787856] page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1405.788047] syz-executor.0: [ 1405.801252] warn_alloc_show_mem: 2 callbacks suppressed [ 1405.801255] Mem-Info: [ 1405.811251] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1405.813485] syz-executor.4 cpuset= [ 1405.818767] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1405.818977] Node 0 [ 1405.822910] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1405.829938] active_anon:77296 inactive_anon:25052 isolated_anon:0 [ 1405.829938] active_file:274 inactive_file:1335 isolated_file:20 [ 1405.829938] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1405.829938] slab_reclaimable:13532 slab_unreclaimable:127487 [ 1405.829938] mapped:53967 shmem:25396 pagetables:8888 bounce:0 [ 1405.829938] free:132860 free_pcp:154 free_cma:0 [ 1405.852424] page allocation failure: order:4 [ 1405.875072] / [ 1405.875398] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1405.880537] Normal: [ 1405.885046] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1405.891804] mems_allowed=0-1 [ 1405.891830] CPU: 1 PID: 2122 Comm: syz-executor.4 Not tainted 4.14.228-syzkaller #0 [ 1405.891836] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1405.891839] Call Trace: [ 1405.891857] dump_stack+0x1b2/0x281 [ 1405.891871] warn_alloc.cold+0x96/0x1cc [ 1405.891883] ? zone_watermark_ok_safe+0x220/0x220 [ 1405.891906] __alloc_pages_nodemask+0x2127/0x2720 [ 1405.894408] Node 0 [ 1405.903306] ? lock_acquire+0x170/0x3f0 [ 1405.903320] ? lock_acquire+0x170/0x3f0 [ 1405.903336] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1405.903354] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1405.903366] ? __mutex_unlock_slowpath+0x75/0x770 [ 1405.903381] alloc_pages_current+0x155/0x260 [ 1405.903394] ion_page_pool_alloc+0x118/0x1b0 [ 1405.903404] ion_system_heap_allocate+0x133/0x8c0 [ 1405.903416] ? _raw_spin_unlock+0x29/0x40 [ 1405.903424] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1405.903434] ? ion_system_contig_heap_create+0x130/0x130 [ 1405.903444] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1405.903455] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1405.903466] ion_alloc+0x27a/0x810 [ 1405.903479] ? ion_dma_buf_release+0x40/0x40 [ 1405.903491] ? __might_fault+0x177/0x1b0 [ 1405.903502] ion_ioctl+0xea/0x1f0 [ 1405.903511] ? ion_query_heaps+0x360/0x360 [ 1405.903524] ? __tun_chr_ioctl.isra.0+0x3310/0x3310 [ 1405.903532] ? ion_query_heaps+0x360/0x360 [ 1405.903542] do_vfs_ioctl+0x75a/0xff0 [ 1405.903554] ? ioctl_preallocate+0x1a0/0x1a0 [ 1405.903563] ? lock_downgrade+0x740/0x740 [ 1405.903577] ? __fget+0x225/0x360 [ 1405.903586] ? do_vfs_ioctl+0xff0/0xff0 [ 1405.903601] ? security_file_ioctl+0x83/0xb0 [ 1405.917345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1405.923844] SyS_ioctl+0x7f/0xb0 [ 1405.923852] ? do_vfs_ioctl+0xff0/0xff0 [ 1405.923864] do_syscall_64+0x1d5/0x640 [ 1405.923879] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1405.923889] RIP: 0033:0x466459 [ 1405.926485] DMA32: [ 1405.930088] RSP: 002b:00007f6a95319188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1405.937940] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1405.938888] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1405.943765] 17887*4kB [ 1405.945937] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1405.949886] (UMEH) [ 1405.953843] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1405.953849] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1405.953854] R13: 00007ffc0329f33f R14: 00007f6a95319300 R15: 0000000000022000 [ 1405.955146] 0*4kB [ 1405.964099] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1405.979687] 0*8kB [ 1405.984853] Bluetooth: hci3 command 0x0419 tx timeout [ 1406.000511] 0*16kB [ 1406.011685] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1406.016492] 0*32kB [ 1406.019956] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1406.019963] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1406.019967] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1406.023661] 15965*8kB [ 1406.040544] Node 0 active_anon:291552kB inactive_anon:77116kB active_file:460kB inactive_file:1820kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:194296kB dirty:0kB writeback:0kB shmem:78348kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 237568kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1406.049825] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 1406.054121] 0*64kB [ 1406.066176] (null) [ 1406.080540] Node 1 active_anon:17656kB inactive_anon:23092kB active_file:1236kB inactive_file:4028kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:22908kB dirty:0kB writeback:0kB shmem:23236kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1406.087987] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1406.088504] Node 0 [ 1406.092804] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1406.110514] 0*128kB [ 1406.116654] (UMEH) [ 1406.118230] 0*256kB [ 1406.121355] 7521*16kB [ 1406.128319] DMA free:11028kB min:204kB low:252kB high:300kB active_anon:2100kB inactive_anon:8kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:56kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1406.136858] syz-executor.0 cpuset= [ 1406.156162] lowmem_reserve[]: [ 1406.163187] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1406.164007] 0*512kB [ 1406.175586] (UMEH) [ 1406.200513] 0 [ 1406.235168] / [ 1406.270515] 0*1024kB [ 1406.289058] 3747*32kB [ 1406.320514] 0*2048kB [ 1406.387481] 2717 2718 2718 2718 [ 1406.402432] (UEH) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 439508kB [ 1406.417939] mems_allowed=0-1 [ 1406.421110] Node 0 DMA32 free:353316kB min:36200kB low:45248kB high:54296kB active_anon:289876kB inactive_anon:77108kB active_file:1704kB inactive_file:3096kB unevictable:0kB writepending:0kB present:3129332kB managed:2788136kB mlocked:0kB kernel_stack:12128kB pagetables:16696kB bounce:0kB free_pcp:860kB local_pcp:480kB free_cma:0kB [ 1406.421140] lowmem_reserve[]: [ 1406.467582] Node 0 [ 1406.470536] 0*4096kB = 0kB [ 1406.475772] Node 1 Normal: 1740*4kB (U) 1271*8kB (U) 815*16kB (U) 1584*32kB (UE) 23*64kB (U) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 82328kB [ 1406.480421] Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1406.529109] 0 0 0 0 0 [ 1406.529191] Node 1 [ 1406.533150] CPU: 0 PID: 2114 Comm: syz-executor.0 Not tainted 4.14.228-syzkaller #0 [ 1406.543172] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1406.550520] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1406.552520] Call Trace: [ 1406.561386] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1406.563943] dump_stack+0x1b2/0x281 [ 1406.563959] warn_alloc.cold+0x96/0x1cc [ 1406.597030] ? zone_watermark_ok_safe+0x220/0x220 [ 1406.600519] Node 0 hugepages_total=1 hugepages_free=1 hugepages_surp=1 hugepages_size=2048kB [ 1406.601878] __alloc_pages_nodemask+0x2127/0x2720 [ 1406.610438] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1406.615283] ? lock_acquire+0x170/0x3f0 [ 1406.615300] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1406.615320] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1406.638390] ? __mutex_unlock_slowpath+0x75/0x770 [ 1406.643240] alloc_pages_current+0x155/0x260 [ 1406.647650] ion_page_pool_alloc+0x118/0x1b0 [ 1406.652061] ion_system_heap_allocate+0x133/0x8c0 [ 1406.656906] ? _raw_spin_unlock+0x29/0x40 [ 1406.660508] lowmem_reserve[]: [ 1406.661048] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1406.661050] 0 0 [ 1406.664147] ? ion_system_contig_heap_create+0x130/0x130 [ 1406.669054] 0 [ 1406.671019] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1406.671032] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1406.671045] ion_alloc+0x27a/0x810 [ 1406.691634] ? ion_dma_buf_release+0x40/0x40 [ 1406.696042] ? __might_fault+0x177/0x1b0 [ 1406.699456] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1406.700100] ion_ioctl+0xea/0x1f0 [ 1406.712109] ? ion_query_heaps+0x360/0x360 [ 1406.712493] 28007 total pagecache pages [ 1406.716345] ? __tun_chr_ioctl.isra.0+0x3310/0x3310 [ 1406.720311] 0 pages in swap cache [ 1406.725307] ? ion_query_heaps+0x360/0x360 [ 1406.725318] do_vfs_ioctl+0x75a/0xff0 [ 1406.725331] ? ioctl_preallocate+0x1a0/0x1a0 [ 1406.725340] ? lock_downgrade+0x740/0x740 [ 1406.725354] ? __fget+0x225/0x360 [ 1406.730512] 0 [ 1406.733020] ? do_vfs_ioctl+0xff0/0xff0 [ 1406.736806] 0 [ 1406.741212] ? security_file_ioctl+0x83/0xb0 [ 1406.741223] SyS_ioctl+0x7f/0xb0 [ 1406.741235] ? do_vfs_ioctl+0xff0/0xff0 [ 1406.768832] do_syscall_64+0x1d5/0x640 [ 1406.770514] Swap cache stats: add 0, delete 0, find 0/0 [ 1406.772718] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1406.778061] Free swap = 0kB [ 1406.783230] RIP: 0033:0x466459 [ 1406.783235] RSP: 002b:00007f2e01ed3188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1406.783244] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1406.783249] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1406.783253] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1406.783258] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1406.783263] R13: 00007ffdb70bf23f R14: 00007f2e01ed3300 R15: 0000000000022000 [ 1406.796602] Normal: [ 1406.817841] 1740*4kB [ 1406.839327] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 1406.851739] Node 1 Normal free:82368kB min:53696kB low:67120kB high:80544kB active_anon:17656kB inactive_anon:23092kB active_file:2036kB inactive_file:3228kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:6336kB pagetables:18856kB bounce:0kB free_pcp:744kB local_pcp:176kB free_cma:0kB [ 1406.861737] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 1406.892042] Total swap = 0kB [ 1406.895100] 2097051 pages RAM [ 1406.898200] 0 pages HighMem/MovableOnly [ 1406.904141] (U) 1265*8kB (U) 814*16kB (U) 1585*32kB (UE) 25*64kB (U) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 82424kB [ 1406.910980] 363846 pages reserved [ 1406.918721] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1406.919460] 0 pages cma reserved [ 1406.929150] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1406.940817] lowmem_reserve[]: 0 0 0 0 0 [ 1406.942870] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1406.944871] Node 0 [ 1406.970069] Node 0 hugepages_total=1 hugepages_free=1 hugepages_surp=1 hugepages_size=2048kB [ 1406.970631] DMA: [ 1406.972504] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1406.993261] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1407.002890] 28007 total pagecache pages [ 1407.006893] 0 pages in swap cache [ 1407.010330] Swap cache stats: add 0, delete 0, find 0/0 [ 1407.019711] 33*4kB (UME) 50*8kB (UME) 44*16kB (UME) 18*32kB (UME) 4*64kB (UME) 2*128kB (UM) 2*256kB (UE) 2*512kB (ME) 3*1024kB (UME) 2*2048kB (ME) 0*4096kB = 11028kB [ 1407.034385] Free swap = 0kB [ 1407.045129] Total swap = 0kB [ 1407.048354] 2097051 pages RAM [ 1407.055738] 0 pages HighMem/MovableOnly [ 1407.060081] 363846 pages reserved [ 1407.066802] Node 0 DMA32: 894*4kB (MEH) 620*8kB (UMEH) 4822*16kB (UMEH) 3887*32kB (UEH) 55*64kB (U) 1*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 213720kB [ 1407.067401] 0 pages cma reserved [ 1407.099860] Out of memory: Kill process 21406 (syz-executor.3) score 1005 or sacrifice child [ 1407.112915] syz-executor.3: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1407.117259] Killed process 21406 (syz-executor.3) total-vm:93384kB, anon-rss:2200kB, file-rss:34628kB, shmem-rss:0kB [ 1407.135798] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1407.139540] warn_alloc_show_mem: 1 callbacks suppressed [ 1407.139543] Mem-Info: [ 1407.160588] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 1407.176784] CPU: 1 PID: 2117 Comm: syz-executor.3 Not tainted 4.14.228-syzkaller #0 [ 1407.179821] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 1407.184584] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1407.184589] Call Trace: [ 1407.184607] dump_stack+0x1b2/0x281 [ 1407.184621] warn_alloc.cold+0x96/0x1cc [ 1407.184632] ? zone_watermark_ok_safe+0x220/0x220 [ 1407.184654] __alloc_pages_nodemask+0x2127/0x2720 [ 1407.184670] ? lock_acquire+0x170/0x3f0 [ 1407.184685] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1407.184703] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1407.184715] ? __mutex_unlock_slowpath+0x75/0x770 [ 1407.184725] ? __list_del_entry_valid+0xad/0xf0 [ 1407.184738] alloc_pages_current+0x155/0x260 [ 1407.184751] ion_page_pool_alloc+0x118/0x1b0 [ 1407.184761] ion_system_heap_allocate+0x133/0x8c0 [ 1407.184773] ? _raw_spin_unlock+0x29/0x40 [ 1407.184782] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1407.184792] ? ion_system_contig_heap_create+0x130/0x130 [ 1407.184802] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1407.184813] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1407.184824] ion_alloc+0x27a/0x810 [ 1407.184837] ? ion_dma_buf_release+0x40/0x40 [ 1407.184849] ? __might_fault+0x177/0x1b0 [ 1407.208315] active_anon:76769 inactive_anon:25051 isolated_anon:12 [ 1407.208315] active_file:1231 inactive_file:1302 isolated_file:0 [ 1407.208315] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1407.208315] slab_reclaimable:13355 slab_unreclaimable:129081 [ 1407.208315] mapped:54312 shmem:25395 pagetables:8888 bounce:0 [ 1407.208315] free:71712 free_pcp:142 free_cma:0 [ 1407.210836] ion_ioctl+0xea/0x1f0 [ 1407.210848] ? ion_query_heaps+0x360/0x360 [ 1407.210862] ? __tun_chr_ioctl.isra.0+0x3310/0x3310 [ 1407.210869] ? ion_query_heaps+0x360/0x360 [ 1407.210885] do_vfs_ioctl+0x75a/0xff0 [ 1407.215724] Node 0 active_anon:289448kB inactive_anon:77112kB active_file:2360kB inactive_file:2972kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:194656kB dirty:0kB writeback:0kB shmem:78344kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 237568kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1407.220541] ? ioctl_preallocate+0x1a0/0x1a0 [ 1407.220551] ? lock_downgrade+0x740/0x740 [ 1407.220564] ? __fget+0x225/0x360 [ 1407.220573] ? do_vfs_ioctl+0xff0/0xff0 [ 1407.220585] ? security_file_ioctl+0x83/0xb0 [ 1407.220595] SyS_ioctl+0x7f/0xb0 [ 1407.220602] ? do_vfs_ioctl+0xff0/0xff0 [ 1407.220614] do_syscall_64+0x1d5/0x640 [ 1407.220629] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1407.220638] RIP: 0033:0x466459 [ 1407.236308] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 1407.239718] RSP: 002b:00007f6ba9361188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1407.264306] Node 1 active_anon:17628kB inactive_anon:23092kB active_file:2564kB inactive_file:2236kB unevictable:0kB isolated(anon):48kB isolated(file):0kB mapped:22592kB dirty:0kB writeback:0kB shmem:23236kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1407.267025] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1407.273492] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 1407.277557] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1407.277566] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1407.304294] Node 0 [ 1407.328109] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1407.328115] R13: 00007ffd9352709f R14: 00007f6ba9361300 R15: 0000000000022000 [ 1407.335147] Node 1 [ 1407.342184] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 1407.347826] Normal: [ 1407.360797] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1407.390755] 1806*4kB [ 1407.416049] DMA free:11028kB min:204kB low:252kB high:300kB active_anon:2100kB inactive_anon:8kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:56kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1407.418702] (UM) [ 1407.440526] lowmem_reserve[]: [ 1407.462288] 1286*8kB [ 1407.472325] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1407.473399] (UM) [ 1407.493433] device veth0_vlan entered promiscuous mode [ 1407.497819] 825*16kB [ 1407.524369] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1407.540518] (UM) [ 1407.560669] 0 [ 1407.599727] 1590*32kB (UME) 0*64kB 1*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 81720kB [ 1407.604914] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1407.620769] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1407.640904] Node 0 hugepages_total=1 hugepages_free=1 hugepages_surp=1 hugepages_size=2048kB [ 1407.644281] 2717 2718 2718 2718 [ 1407.671036] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1407.679399] device veth1_vlan entered promiscuous mode [ 1407.694518] Node 0 DMA32 free:36836kB min:36200kB low:45248kB high:54296kB active_anon:289444kB inactive_anon:77104kB active_file:1572kB inactive_file:3248kB unevictable:0kB writepending:0kB present:3129332kB managed:2788136kB mlocked:0kB kernel_stack:12032kB pagetables:16512kB bounce:0kB free_pcp:892kB local_pcp:148kB free_cma:0kB [ 1407.698445] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1407.729520] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 1407.785809] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 1407.832871] systemd-udevd invoked oom-killer: gfp_mask=0x14200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=-1000 [ 1407.845518] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 1407.864486] 26886 total pagecache pages [ 1407.877320] 0 pages in swap cache [ 1407.883079] systemd-udevd cpuset=/ mems_allowed=0-1 [ 1407.887311] lowmem_reserve[]: 0 0 0 0 0 [ 1407.892561] Swap cache stats: add 0, delete 0, find 0/0 [ 1407.904598] CPU: 1 PID: 2195 Comm: systemd-udevd Not tainted 4.14.228-syzkaller #0 [ 1407.904919] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 1407.912303] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1407.912307] Call Trace: [ 1407.912323] dump_stack+0x1b2/0x281 [ 1407.912335] dump_header+0x178/0x82f [ 1407.912347] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1407.912356] ? ___ratelimit+0x2cd/0x530 [ 1407.912365] oom_kill_process.cold+0x10/0xb18 [ 1407.912377] ? lock_downgrade+0x740/0x740 [ 1407.912392] out_of_memory+0x2dc/0x1190 [ 1407.912406] ? oom_killer_disable+0x1c0/0x1c0 [ 1407.912414] ? mutex_trylock+0x152/0x1a0 [ 1407.912425] __alloc_pages_nodemask+0x23e1/0x2720 [ 1407.912446] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1407.912471] alloc_pages_vma+0xd2/0x6d0 [ 1407.912481] wp_page_copy+0x1f5/0x25c0 [ 1407.912495] ? tlb_flush_mmu_free+0x1a0/0x1a0 [ 1407.912503] ? __lock_acquire+0x5fc/0x3f20 [ 1407.912513] do_wp_page+0x245/0x1db0 [ 1407.912522] ? __handle_mm_fault+0x129c/0x4620 [ 1407.926231] Node 0 [ 1407.928608] ? finish_mkwrite_fault+0x5e0/0x5e0 [ 1407.928625] __handle_mm_fault+0x234f/0x4620 [ 1407.933440] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1407.934811] ? static_obj+0x50/0x50 [ 1407.934819] ? vm_insert_page+0x7c0/0x7c0 [ 1407.934840] handle_mm_fault+0x391/0x860 [ 1407.938673] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1407.943611] __do_page_fault+0x549/0xad0 [ 1407.943623] ? spurious_fault+0x640/0x640 [ 1407.943631] ? do_page_fault+0x60/0x500 [ 1407.943642] page_fault+0x25/0x50 [ 1407.943652] RIP: 0010:__put_user_4+0x1c/0x30 [ 1407.943656] RSP: 0018:ffff88821e947f10 EFLAGS: 00010297 [ 1407.951375] lowmem_reserve[]: [ 1407.952101] RAX: 0000000000000893 RBX: 00007fffffffeffd RCX: 00007f8e86909b90 [ 1407.952107] RDX: dffffc0000000000 RSI: 0000000000000001 RDI: ffff8881a16946f0 [ 1407.952111] RBP: ffff8880ba52a300 R08: 0000000000000000 R09: 0000000000000000 [ 1407.952116] R10: 0000000000000000 R11: ffff8881a1694140 R12: ffff8880ba52ac98 [ 1407.952120] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1407.952148] schedule_tail+0xe8/0x1e0 [ 1407.970871] 0 [ 1407.973576] ret_from_fork+0x8/0x30 [ 1407.978396] 0 [ 1407.985797] Free swap = 0kB [ 1407.998187] 0 [ 1408.010573] Total swap = 0kB [ 1408.056077] 0 [ 1408.099279] 2097051 pages RAM [ 1408.164997] 0 pages HighMem/MovableOnly [ 1408.169015] 363846 pages reserved [ 1408.171662] 0 [ 1408.172771] 0 pages cma reserved [ 1408.176521] Node 1 Normal free:26464kB min:53696kB low:67120kB high:80544kB active_anon:17736kB inactive_anon:23092kB active_file:1048kB inactive_file:1096kB unevictable:0kB writepending:4kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:6400kB pagetables:18916kB bounce:0kB free_pcp:680kB local_pcp:680kB free_cma:0kB [ 1408.253965] lowmem_reserve[]: 0 0 0 0 0 [ 1408.254666] Mem-Info: [ 1408.258025] Node 0 DMA: [ 1408.260455] active_anon:77319 inactive_anon:25051 isolated_anon:0 [ 1408.260455] active_file:166 inactive_file:155 isolated_file:18 [ 1408.260455] unevictable:0 dirty:12 writeback:0 unstable:0 [ 1408.260455] slab_reclaimable:13355 slab_unreclaimable:128941 [ 1408.260455] mapped:53269 shmem:25395 pagetables:8910 bounce:0 [ 1408.260455] free:60921 free_pcp:394 free_cma:0 [ 1408.260468] 19*4kB [ 1408.263168] Node 0 active_anon:291540kB inactive_anon:77112kB active_file:56kB inactive_file:64kB unevictable:0kB isolated(anon):0kB isolated(file):72kB mapped:193064kB dirty:44kB writeback:0kB shmem:78344kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 237568kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1408.303405] (UME) [ 1408.351222] Node 1 active_anon:17736kB inactive_anon:23092kB active_file:608kB inactive_file:556kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:20012kB dirty:4kB writeback:0kB shmem:23236kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1408.354146] 50*8kB [ 1408.490568] Node 0 DMA free:11036kB min:204kB low:252kB high:300kB active_anon:2100kB inactive_anon:8kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:56kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1408.550182] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1408.557119] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1408.570545] (UME) 44*16kB (UME) 18*32kB [ 1408.570567] Node 0 DMA32 free:101712kB min:36200kB low:45248kB high:54296kB active_anon:289440kB inactive_anon:77104kB active_file:360kB inactive_file:480kB unevictable:0kB writepending:44kB present:3129332kB managed:2788136kB mlocked:0kB kernel_stack:12064kB pagetables:16668kB bounce:0kB free_pcp:740kB local_pcp:736kB free_cma:0kB [ 1408.574657] (UME) 5*64kB (UME) 2*128kB (UM) 2*256kB (UE) 2*512kB [ 1408.631125] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1408.644895] syz-executor.2: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1408.654615] lowmem_reserve[]: 0 0 0 0 0 [ 1408.678596] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1408.681131] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1408.708689] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 1408.717395] CPU: 1 PID: 2193 Comm: syz-executor.2 Not tainted 4.14.228-syzkaller #0 [ 1408.725194] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1408.734538] Call Trace: [ 1408.737127] dump_stack+0x1b2/0x281 [ 1408.740764] warn_alloc.cold+0x96/0x1cc [ 1408.744744] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1408.749752] ? zone_watermark_ok_safe+0x220/0x220 [ 1408.754619] __alloc_pages_nodemask+0x2127/0x2720 [ 1408.759527] ? lock_acquire+0x170/0x3f0 [ 1408.763500] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1408.768340] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1408.773785] ? __mutex_unlock_slowpath+0x75/0x770 [ 1408.778977] alloc_pages_current+0x155/0x260 [ 1408.783384] ion_page_pool_alloc+0x118/0x1b0 [ 1408.787786] ion_system_heap_allocate+0x133/0x8c0 [ 1408.792619] ? ion_alloc+0x187/0x810 [ 1408.796323] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1408.801763] ? ion_system_contig_heap_create+0x130/0x130 [ 1408.807205] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1408.812218] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1408.817073] ion_alloc+0x204/0x810 [ 1408.820614] ? ion_dma_buf_release+0x40/0x40 [ 1408.825016] ? __might_fault+0x177/0x1b0 [ 1408.829068] ion_ioctl+0xea/0x1f0 [ 1408.832513] ? ion_query_heaps+0x360/0x360 [ 1408.836745] ? __tun_chr_ioctl.isra.0+0x3310/0x3310 [ 1408.841750] ? ion_query_heaps+0x360/0x360 [ 1408.845975] do_vfs_ioctl+0x75a/0xff0 [ 1408.849767] ? ioctl_preallocate+0x1a0/0x1a0 [ 1408.854224] ? lock_downgrade+0x740/0x740 [ 1408.858399] ? __fget+0x225/0x360 [ 1408.861849] ? do_vfs_ioctl+0xff0/0xff0 [ 1408.865817] ? security_file_ioctl+0x83/0xb0 [ 1408.870218] SyS_ioctl+0x7f/0xb0 [ 1408.873574] ? do_vfs_ioctl+0xff0/0xff0 [ 1408.877538] do_syscall_64+0x1d5/0x640 [ 1408.881453] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1408.886632] RIP: 0033:0x466459 [ 1408.889825] RSP: 002b:00007f613992b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1408.897523] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1408.904781] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1408.912038] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1408.919295] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1408.926554] R13: 00007fff85f2b35f R14: 00007f613992b300 R15: 0000000000022000 [ 1408.950540] (ME) 3*1024kB (UME) 2*2048kB (ME) 0*4096kB = 11036kB [ 1408.956740] Node 0 DMA32: 2148*4kB (UMEH) 609*8kB (UMEH) 134*16kB (MEH) 315*32kB (UEH) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 25688kB [ 1408.994684] Node 0 [ 1408.994688] syz-executor.5: page allocation failure: order:4 [ 1408.996930] Normal: [ 1408.996942] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1409.005565] 0*4kB [ 1409.006490] lowmem_reserve[]: [ 1409.013270] 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1409.020503] (null) [ 1409.027136] Node 1 Normal: 104*4kB (UM) 11*8kB (UM) 3*16kB (UM) 803*32kB (UME) 3*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 26440kB [ 1409.030199] 0 [ 1409.043511] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1409.053155] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 1409.054200] Node 0 hugepages_total=1 hugepages_free=1 hugepages_surp=1 hugepages_size=2048kB [ 1409.059308] CPU: 1 PID: 2121 Comm: syz-executor.5 Not tainted 4.14.228-syzkaller #0 [ 1409.068276] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1409.075669] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1409.075673] Call Trace: [ 1409.075692] dump_stack+0x1b2/0x281 [ 1409.075706] warn_alloc.cold+0x96/0x1cc [ 1409.075718] ? zone_watermark_ok_safe+0x220/0x220 [ 1409.075740] __alloc_pages_nodemask+0x2127/0x2720 [ 1409.084580] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1409.093900] ? lock_acquire+0x170/0x3f0 [ 1409.093917] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1409.093932] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1409.093943] ? __mutex_unlock_slowpath+0x75/0x770 [ 1409.093956] alloc_pages_current+0x155/0x260 [ 1409.093969] ion_page_pool_alloc+0x118/0x1b0 [ 1409.093979] ion_system_heap_allocate+0x133/0x8c0 [ 1409.093990] ? _raw_spin_unlock+0x29/0x40 [ 1409.093998] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1409.094007] ? ion_system_contig_heap_create+0x130/0x130 [ 1409.094017] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1409.094027] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1409.094037] ion_alloc+0x27a/0x810 [ 1409.094050] ? ion_dma_buf_release+0x40/0x40 [ 1409.094082] ? __might_fault+0x177/0x1b0 [ 1409.094093] ion_ioctl+0xea/0x1f0 [ 1409.094101] ? ion_query_heaps+0x360/0x360 [ 1409.094113] ? __tun_chr_ioctl.isra.0+0x3310/0x3310 [ 1409.094120] ? ion_query_heaps+0x360/0x360 [ 1409.094130] do_vfs_ioctl+0x75a/0xff0 [ 1409.094139] ? ioctl_preallocate+0x1a0/0x1a0 [ 1409.094147] ? lock_downgrade+0x740/0x740 [ 1409.094160] ? __fget+0x225/0x360 [ 1409.094170] ? do_vfs_ioctl+0xff0/0xff0 [ 1409.094182] ? security_file_ioctl+0x83/0xb0 [ 1409.094192] SyS_ioctl+0x7f/0xb0 [ 1409.094200] ? do_vfs_ioctl+0xff0/0xff0 [ 1409.094211] do_syscall_64+0x1d5/0x640 [ 1409.094226] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1409.094234] RIP: 0033:0x466459 [ 1409.094239] RSP: 002b:00007f2761281188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1409.094250] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1409.094255] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1409.094260] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1409.094264] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1409.094270] R13: 00007ffddf757caf R14: 00007f2761281300 R15: 0000000000022000 [ 1409.148232] 0 [ 1409.155421] 25473 total pagecache pages [ 1409.164972] 0 [ 1409.166331] 0 pages in swap cache [ 1409.184241] 0 [ 1409.185712] Swap cache stats: add 0, delete 0, find 0/0 [ 1409.191067] 0 [ 1409.194371] Free swap = 0kB [ 1409.220509] Total swap = 0kB [ 1409.227734] warn_alloc_show_mem: 1 callbacks suppressed [ 1409.227738] Mem-Info: [ 1409.233938] 2097051 pages RAM [ 1409.235834] active_anon:77319 inactive_anon:25051 isolated_anon:0 [ 1409.235834] active_file:14 inactive_file:12 isolated_file:1 [ 1409.235834] unevictable:0 dirty:4 writeback:0 unstable:0 [ 1409.235834] slab_reclaimable:13355 slab_unreclaimable:128932 [ 1409.235834] mapped:52974 shmem:25395 pagetables:8910 bounce:0 [ 1409.235834] free:13857 free_pcp:12 free_cma:0 [ 1409.238635] 0 pages HighMem/MovableOnly [ 1409.246372] Node 1 [ 1409.246507] 363846 pages reserved [ 1409.252192] Normal free:26440kB min:53696kB low:67120kB high:80544kB active_anon:17736kB inactive_anon:23092kB active_file:124kB inactive_file:124kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:6368kB pagetables:18916kB bounce:0kB free_pcp:48kB local_pcp:0kB free_cma:0kB [ 1409.255240] 0 pages cma reserved [ 1409.268396] Node 0 active_anon:291540kB inactive_anon:77112kB active_file:56kB inactive_file:48kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:193000kB dirty:16kB writeback:0kB shmem:78344kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 237568kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1409.292888] lowmem_reserve[]: [ 1409.299526] Node 1 active_anon:17736kB inactive_anon:23092kB active_file:0kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):4kB mapped:18896kB dirty:0kB writeback:0kB shmem:23236kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1409.302646] 0 [ 1409.305301] Node 0 [ 1409.307085] 0 [ 1409.311047] DMA free:10960kB min:204kB low:252kB high:300kB active_anon:2100kB inactive_anon:8kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:56kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1409.314870] 0 [ 1409.317743] lowmem_reserve[]: [ 1409.319528] 0 [ 1409.322960] 0 [ 1409.326856] 0 [ 1409.331144] 2717 2718 2718 2718 [ 1409.331158] Node 0 DMA32 free:18028kB min:36200kB low:45248kB high:54296kB active_anon:289440kB inactive_anon:77104kB active_file:52kB inactive_file:44kB unevictable:0kB writepending:12kB present:3129332kB managed:2788136kB mlocked:0kB kernel_stack:12032kB pagetables:16668kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1409.331181] lowmem_reserve[]: 0 0 0 0 0 [ 1409.331200] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1409.331220] lowmem_reserve[]: 0 0 0 0 0 [ 1409.331239] Node 1 Normal free:26440kB min:53696kB low:67120kB high:80544kB active_anon:17736kB inactive_anon:23092kB active_file:124kB inactive_file:124kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:6368kB pagetables:18916kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1409.331259] lowmem_reserve[]: 0 0 0 0 0 [ 1409.331276] Node 0 DMA: 10*4kB (ME) 45*8kB (UME) 44*16kB (UME) 18*32kB (UME) 5*64kB (UME) 2*128kB (UM) 2*256kB (UE) 2*512kB (ME) 3*1024kB (UME) [ 1409.372811] 2*2048kB [ 1409.378330] Node 0 [ 1409.379913] (ME) [ 1409.437495] DMA: [ 1409.458849] 0*4096kB [ 1409.495058] 10*4kB [ 1409.509204] = 10960kB [ 1409.515089] (ME) [ 1409.516592] Node 0 [ 1409.519943] 45*8kB [ 1409.548946] DMA32: 2245*4kB (MEH) 610*8kB (UMEH) 134*16kB (MEH) 82*32kB (UEH) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18628kB [ 1409.549008] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1409.549055] Node 1 Normal: 144*4kB (UM) 17*8kB (UM) 3*16kB (UM) 807*32kB (UME) 3*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB [ 1409.576033] (UME) [ 1409.579478] 0*4096kB [ 1409.595930] 44*16kB [ 1409.613260] = 26776kB [ 1409.624431] (UME) [ 1409.632601] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1409.644511] 18*32kB [ 1409.645324] Node 0 hugepages_total=1 hugepages_free=1 hugepages_surp=1 hugepages_size=2048kB [ 1409.646825] (UME) [ 1409.649132] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1409.657910] 5*64kB [ 1409.664587] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1409.664593] 25473 total pagecache pages [ 1409.664603] 0 pages in swap cache [ 1409.708819] (UME) [ 1409.711831] Swap cache stats: add 0, delete 0, find 0/0 [ 1409.722594] 2*128kB [ 1409.730504] Free swap = 0kB [ 1409.751999] (UM) [ 1409.763518] Total swap = 0kB [ 1409.768608] 2097051 pages RAM [ 1409.772387] 0 pages HighMem/MovableOnly [ 1409.774313] 2*256kB [ 1409.776352] 363846 pages reserved [ 1409.776359] (UE) [ 1409.778663] 0 pages cma reserved [ 1409.787440] 2*512kB (ME) 3*1024kB (UME) 2*2048kB (ME) 0*4096kB = 10960kB [ 1409.798250] Node 0 DMA32: 2246*4kB (UMEH) 743*8kB (UMEH) 134*16kB (MEH) 63*32kB (UEH) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 19088kB [ 1409.834674] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1409.845493] Node 1 Normal: 144*4kB (UM) 17*8kB (UM) 3*16kB (UM) 807*32kB (UME) 3*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 26776kB [ 1409.866685] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1409.877123] Node 0 hugepages_total=1 hugepages_free=1 hugepages_surp=1 hugepages_size=2048kB [ 1409.892371] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1409.907260] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1409.916619] 25473 total pagecache pages [ 1409.923643] 0 pages in swap cache [ 1409.927108] Swap cache stats: add 0, delete 0, find 0/0 [ 1409.933176] Free swap = 0kB [ 1409.936197] Total swap = 0kB [ 1409.939209] 2097051 pages RAM [ 1409.945727] 0 pages HighMem/MovableOnly [ 1409.949716] 363846 pages reserved [ 1409.954014] 0 pages cma reserved [ 1409.957498] Out of memory: Kill process 2191 (syz-executor.2) score 1005 or sacrifice child [ 1409.969147] Killed process 2193 (syz-executor.2) total-vm:93384kB, anon-rss:2192kB, file-rss:34820kB, shmem-rss:0kB [ 1410.057135] oom_reaper: reaped process 2193 (syz-executor.2), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1410.092733] syz-executor.1 invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1410.162239] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 1410.167387] CPU: 1 PID: 1487 Comm: syz-executor.1 Not tainted 4.14.228-syzkaller #0 [ 1410.175170] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1410.184698] Call Trace: [ 1410.187287] dump_stack+0x1b2/0x281 [ 1410.190913] dump_header+0x178/0x82f [ 1410.194625] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1410.199755] ? ___ratelimit+0x2cd/0x530 [ 1410.203727] oom_kill_process.cold+0x10/0xb18 [ 1410.208227] out_of_memory+0xe3e/0x1190 [ 1410.212230] ? oom_killer_disable+0x1c0/0x1c0 [ 1410.216723] ? mutex_trylock+0x152/0x1a0 [ 1410.220784] __alloc_pages_nodemask+0x23e1/0x2720 [ 1410.225637] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1410.230499] alloc_pages_current+0x155/0x260 [ 1410.234935] filemap_fault+0xea3/0x1980 [ 1410.238917] ext4_filemap_fault+0x84/0xb0 [ 1410.240577] syz-executor.5: page allocation failure: order:0 [ 1410.243061] __do_fault+0xfa/0x380 [ 1410.243071] __handle_mm_fault+0x2497/0x4620 [ 1410.248883] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1410.252408] ? vm_insert_page+0x7c0/0x7c0 [ 1410.252417] ? task_work_run+0xfd/0x190 [ 1410.252434] handle_mm_fault+0x391/0x860 [ 1410.252447] __do_page_fault+0x549/0xad0 [ 1410.252458] ? spurious_fault+0x640/0x640 [ 1410.252467] ? do_page_fault+0x60/0x500 [ 1410.252478] ? page_fault+0x2f/0x50 [ 1410.256895] syz-executor.4: [ 1410.263967] page_fault+0x45/0x50 [ 1410.263975] RIP: 4bf6d6:0x7ffc8ee66610 [ 1410.263980] RSP: 0000:00007ffc8ee664c0 EFLAGS: 7ffc8ee664d0 [ 1410.264170] syz-executor.2: [ 1410.274221] (null) [ 1410.304802] page allocation failure: order:0 [ 1410.322780] page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1410.333226] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1410.343680] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 1410.350354] CPU: 0 PID: 2122 Comm: syz-executor.4 Not tainted 4.14.228-syzkaller #0 [ 1410.358141] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1410.367488] Call Trace: [ 1410.368257] syz-executor.2 cpuset=/ [ 1410.370102] dump_stack+0x1b2/0x281 [ 1410.370117] warn_alloc.cold+0x96/0x1cc [ 1410.374700] mems_allowed=0-1 [ 1410.377342] ? zone_watermark_ok_safe+0x220/0x220 [ 1410.389215] ? usleep_range+0x130/0x130 [ 1410.393180] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1410.398277] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1410.403310] ? run_timer_softirq+0x5a0/0x5a0 [ 1410.407713] __alloc_pages_nodemask+0x2127/0x2720 [ 1410.412550] ? lock_acquire+0x170/0x3f0 [ 1410.416519] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1410.421353] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1410.425843] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1410.435545] ? alloc_pages_current+0xe3/0x260 [ 1410.440031] alloc_pages_current+0x155/0x260 [ 1410.444435] ion_page_pool_alloc+0x118/0x1b0 [ 1410.448829] ion_system_heap_allocate+0x133/0x8c0 [ 1410.450502] Mem-Info: [ 1410.453664] ? _raw_spin_unlock+0x29/0x40 [ 1410.456078] active_anon:76786 inactive_anon:25051 isolated_anon:0 [ 1410.456078] active_file:21 inactive_file:11 isolated_file:0 [ 1410.456078] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1410.456078] slab_reclaimable:13355 slab_unreclaimable:128609 [ 1410.456078] mapped:52938 shmem:25395 pagetables:8909 bounce:0 [ 1410.456078] free:13926 free_pcp:30 free_cma:0 [ 1410.460216] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1410.498352] ? ion_system_contig_heap_create+0x130/0x130 [ 1410.503846] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1410.508855] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1410.513705] ion_alloc+0x27a/0x810 [ 1410.517256] ? ion_dma_buf_release+0x40/0x40 [ 1410.521657] ? __might_fault+0x177/0x1b0 [ 1410.525712] ion_ioctl+0xea/0x1f0 [ 1410.529156] ? ion_query_heaps+0x360/0x360 [ 1410.533406] ? __tun_chr_ioctl.isra.0+0x3310/0x3310 [ 1410.538408] ? ion_query_heaps+0x360/0x360 [ 1410.540517] Node 0 active_anon:289452kB inactive_anon:77112kB active_file:68kB inactive_file:24kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:192968kB dirty:0kB writeback:0kB shmem:78344kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 235520kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1410.542671] do_vfs_ioctl+0x75a/0xff0 [ 1410.574322] ? ioctl_preallocate+0x1a0/0x1a0 [ 1410.578719] ? lock_downgrade+0x740/0x740 [ 1410.582861] ? __fget+0x225/0x360 [ 1410.586303] ? do_vfs_ioctl+0xff0/0xff0 [ 1410.590285] ? security_file_ioctl+0x83/0xb0 [ 1410.594686] SyS_ioctl+0x7f/0xb0 [ 1410.598042] ? do_vfs_ioctl+0xff0/0xff0 [ 1410.600520] Node 1 active_anon:17692kB inactive_anon:23092kB active_file:16kB inactive_file:20kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:18784kB dirty:0kB writeback:0kB shmem:23236kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1410.602007] do_syscall_64+0x1d5/0x640 [ 1410.633140] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1410.638318] RIP: 0033:0x466459 [ 1410.641518] RSP: 002b:00007f6a95319188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1410.649214] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1410.650505] Node 0 [ 1410.656484] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1410.656492] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1410.658742] DMA free:10960kB min:204kB low:252kB high:300kB active_anon:2100kB inactive_anon:8kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:56kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1410.665982] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1410.665987] R13: 00007ffc0329f33f R14: 00007f6a95319300 R15: 0000000000022000 [ 1410.671442] syz-executor.0: [ 1410.680511] syz-executor.3: [ 1410.705037] syz-executor.5 cpuset= [ 1410.719523] CPU: 1 PID: 2193 Comm: syz-executor.2 Not tainted 4.14.228-syzkaller #0 [ 1410.719880] / [ 1410.723367] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1410.735663] page allocation failure: order:0 [ 1410.742192] Call Trace: [ 1410.742212] dump_stack+0x1b2/0x281 [ 1410.742227] warn_alloc.cold+0x96/0x1cc [ 1410.742238] ? zone_watermark_ok_safe+0x220/0x220 [ 1410.742249] ? usleep_range+0x130/0x130 [ 1410.742261] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1410.746667] mems_allowed=0-1 [ 1410.749230] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1410.774913] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1410.778731] ? run_timer_softirq+0x5a0/0x5a0 [ 1410.778750] __alloc_pages_nodemask+0x2127/0x2720 [ 1410.794625] syz-executor.0 cpuset=/ [ 1410.795576] ? lock_acquire+0x170/0x3f0 [ 1410.795593] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1410.799198] mems_allowed=0-1 [ 1410.803167] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1410.803193] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1410.803222] alloc_pages_current+0x155/0x260 [ 1410.825467] ion_page_pool_alloc+0x118/0x1b0 [ 1410.829867] ion_system_heap_allocate+0x133/0x8c0 [ 1410.834706] ? ion_alloc+0x187/0x810 [ 1410.838412] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1410.843852] ? ion_system_contig_heap_create+0x130/0x130 [ 1410.849291] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1410.854311] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1410.859153] ion_alloc+0x204/0x810 [ 1410.862694] ? ion_dma_buf_release+0x40/0x40 [ 1410.867096] ? __might_fault+0x177/0x1b0 [ 1410.871153] ion_ioctl+0xea/0x1f0 [ 1410.874625] ? ion_query_heaps+0x360/0x360 [ 1410.874639] ? __tun_chr_ioctl.isra.0+0x3310/0x3310 [ 1410.874645] ? ion_query_heaps+0x360/0x360 [ 1410.874655] do_vfs_ioctl+0x75a/0xff0 [ 1410.874667] ? ioctl_preallocate+0x1a0/0x1a0 [ 1410.874677] ? lock_downgrade+0x740/0x740 [ 1410.874690] ? __fget+0x225/0x360 [ 1410.874700] ? do_vfs_ioctl+0xff0/0xff0 [ 1410.874711] ? security_file_ioctl+0x83/0xb0 [ 1410.874721] SyS_ioctl+0x7f/0xb0 [ 1410.874729] ? do_vfs_ioctl+0xff0/0xff0 [ 1410.874740] do_syscall_64+0x1d5/0x640 [ 1410.874755] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1410.928651] RIP: 0033:0x466459 [ 1410.931833] RSP: 002b:00007f613992b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1410.939544] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1410.946819] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1410.954083] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1410.961342] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1410.968614] R13: 00007fff85f2b35f R14: 00007f613992b300 R15: 0000000000022000 [ 1410.975888] CPU: 0 PID: 2114 Comm: syz-executor.0 Not tainted 4.14.228-syzkaller #0 [ 1410.983712] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1410.984874] page allocation failure: order:0 [ 1410.993059] Call Trace: [ 1410.993080] dump_stack+0x1b2/0x281 [ 1410.993112] warn_alloc.cold+0x96/0x1cc [ 1410.997504] lowmem_reserve[]: [ 1411.000063] ? zone_watermark_ok_safe+0x220/0x220 [ 1411.003703] 0 [ 1411.007635] ? usleep_range+0x130/0x130 [ 1411.010740] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1411.015551] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1411.015565] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1411.017339] (null) [ 1411.021297] ? run_timer_softirq+0x5a0/0x5a0 [ 1411.021315] __alloc_pages_nodemask+0x2127/0x2720 [ 1411.021331] ? lock_acquire+0x170/0x3f0 [ 1411.028412] 2717 [ 1411.033500] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1411.033511] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1411.033527] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1411.038516] 2718 [ 1411.040661] alloc_pages_current+0x155/0x260 [ 1411.040674] ion_page_pool_alloc+0x118/0x1b0 [ 1411.045065] syz-executor.3 cpuset= [ 1411.049880] ion_system_heap_allocate+0x133/0x8c0 [ 1411.053858] 2718 [ 1411.055879] ? _raw_spin_unlock+0x29/0x40 [ 1411.060716] / [ 1411.065170] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1411.070621] 2718 [ 1411.072645] ? ion_system_contig_heap_create+0x130/0x130 [ 1411.081416] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1411.081429] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1411.081440] ion_alloc+0x27a/0x810 [ 1411.084968] mems_allowed=0-1 [ 1411.089784] ? ion_dma_buf_release+0x40/0x40 [ 1411.091866] Node 0 [ 1411.095965] ? __might_fault+0x177/0x1b0 [ 1411.097673] DMA32 free:17924kB min:36200kB low:45248kB high:54296kB active_anon:287352kB inactive_anon:77104kB active_file:68kB inactive_file:24kB unevictable:0kB writepending:0kB present:3129332kB managed:2788136kB mlocked:0kB kernel_stack:12032kB pagetables:16664kB bounce:0kB free_pcp:228kB local_pcp:120kB free_cma:0kB [ 1411.102573] ion_ioctl+0xea/0x1f0 [ 1411.102582] ? ion_query_heaps+0x360/0x360 [ 1411.102597] ? __tun_chr_ioctl.isra.0+0x3310/0x3310 [ 1411.102606] ? ion_query_heaps+0x360/0x360 [ 1411.120493] lowmem_reserve[]: [ 1411.123430] do_vfs_ioctl+0x75a/0xff0 [ 1411.126505] 0 [ 1411.130900] ? ioctl_preallocate+0x1a0/0x1a0 [ 1411.130910] ? lock_downgrade+0x740/0x740 [ 1411.130924] ? __fget+0x225/0x360 [ 1411.150495] 0 [ 1411.165712] ? do_vfs_ioctl+0xff0/0xff0 [ 1411.165725] ? security_file_ioctl+0x83/0xb0 [ 1411.165734] SyS_ioctl+0x7f/0xb0 [ 1411.165744] ? do_vfs_ioctl+0xff0/0xff0 [ 1411.180499] 0 [ 1411.182616] do_syscall_64+0x1d5/0x640 [ 1411.185689] 0 [ 1411.189480] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1411.210498] 0 [ 1411.213337] RIP: 0033:0x466459 [ 1411.220625] RSP: 002b:00007f2e01ed3188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1411.220636] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1411.220641] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1411.220647] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1411.220654] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1411.230505] Node 0 [ 1411.233264] R13: 00007ffdb70bf23f R14: 00007f2e01ed3300 R15: 0000000000022000 [ 1411.235055] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1411.251133] CPU: 0 PID: 2121 Comm: syz-executor.5 Not tainted 4.14.228-syzkaller #0 [ 1411.290499] lowmem_reserve[]: [ 1411.311133] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1411.311137] Call Trace: [ 1411.311159] dump_stack+0x1b2/0x281 [ 1411.311173] warn_alloc.cold+0x96/0x1cc [ 1411.341513] ? zone_watermark_ok_safe+0x220/0x220 [ 1411.346346] ? usleep_range+0x130/0x130 [ 1411.350305] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1411.350498] 0 0 [ 1411.355401] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1411.355412] ? run_timer_softirq+0x5a0/0x5a0 [ 1411.357371] 0 [ 1411.362384] __alloc_pages_nodemask+0x2127/0x2720 [ 1411.362401] ? lock_acquire+0x170/0x3f0 [ 1411.362415] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1411.380506] 0 0 [ 1411.382231] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1411.382248] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1411.384198] Node 1 [ 1411.388688] alloc_pages_current+0x155/0x260 [ 1411.400718] ion_page_pool_alloc+0x118/0x1b0 [ 1411.405116] ion_system_heap_allocate+0x133/0x8c0 [ 1411.409963] ? _raw_spin_unlock+0x29/0x40 [ 1411.410515] Normal free:26820kB min:53696kB low:67120kB high:80544kB active_anon:17692kB inactive_anon:23092kB active_file:20kB inactive_file:16kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:6368kB pagetables:18916kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1411.414105] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1411.447128] ? ion_system_contig_heap_create+0x130/0x130 [ 1411.452600] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1411.457624] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1411.462459] ion_alloc+0x27a/0x810 [ 1411.465996] ? ion_dma_buf_release+0x40/0x40 [ 1411.470408] ? __might_fault+0x177/0x1b0 [ 1411.470510] lowmem_reserve[]: 0 [ 1411.474462] ion_ioctl+0xea/0x1f0 [ 1411.474471] ? ion_query_heaps+0x360/0x360 [ 1411.477733] 0 [ 1411.481183] ? __tun_chr_ioctl.isra.0+0x3310/0x3310 [ 1411.481190] ? ion_query_heaps+0x360/0x360 [ 1411.481200] do_vfs_ioctl+0x75a/0xff0 [ 1411.481212] ? ioctl_preallocate+0x1a0/0x1a0 [ 1411.490508] warn_alloc_show_mem: 1 callbacks suppressed [ 1411.490511] Mem-Info: [ 1411.492202] ? lock_downgrade+0x740/0x740 [ 1411.496435] active_anon:76784 inactive_anon:25051 isolated_anon:0 [ 1411.496435] active_file:17 inactive_file:15 isolated_file:0 [ 1411.496435] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1411.496435] slab_reclaimable:13338 slab_unreclaimable:128612 [ 1411.496435] mapped:52938 shmem:25395 pagetables:8909 bounce:0 [ 1411.496435] free:13900 free_pcp:55 free_cma:0 [ 1411.500207] ? __fget+0x225/0x360 [ 1411.520518] 0 [ 1411.549709] ? do_vfs_ioctl+0xff0/0xff0 [ 1411.549721] ? security_file_ioctl+0x83/0xb0 [ 1411.549730] SyS_ioctl+0x7f/0xb0 [ 1411.549738] ? do_vfs_ioctl+0xff0/0xff0 [ 1411.549752] do_syscall_64+0x1d5/0x640 [ 1411.553241] Node 0 active_anon:289444kB inactive_anon:77112kB active_file:48kB inactive_file:44kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:192968kB dirty:0kB writeback:0kB shmem:78344kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 235520kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1411.554994] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1411.558951] Node 1 active_anon:17692kB inactive_anon:23092kB active_file:20kB inactive_file:16kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:18784kB dirty:0kB writeback:0kB shmem:23236kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1411.563343] RIP: 0033:0x466459 [ 1411.563348] RSP: 002b:00007f2761281188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1411.563357] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1411.563361] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1411.563366] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1411.563371] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1411.563379] R13: 00007ffddf757caf R14: 00007f2761281300 R15: 0000000000022000 [ 1411.580497] Node 0 [ 1411.684618] CPU: 1 PID: 2117 Comm: syz-executor.3 Not tainted 4.14.228-syzkaller #0 [ 1411.694633] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1411.703981] Call Trace: [ 1411.706570] dump_stack+0x1b2/0x281 [ 1411.710202] warn_alloc.cold+0x96/0x1cc [ 1411.714175] ? zone_watermark_ok_safe+0x220/0x220 [ 1411.719012] ? usleep_range+0x130/0x130 [ 1411.722982] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1411.728103] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1411.733136] ? run_timer_softirq+0x5a0/0x5a0 [ 1411.737548] __alloc_pages_nodemask+0x2127/0x2720 [ 1411.742396] ? lock_acquire+0x170/0x3f0 [ 1411.746370] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1411.751206] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1411.755703] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1411.761157] alloc_pages_current+0x155/0x260 [ 1411.765567] ion_page_pool_alloc+0x118/0x1b0 [ 1411.769973] ion_system_heap_allocate+0x133/0x8c0 [ 1411.774813] ? _raw_spin_unlock+0x29/0x40 [ 1411.778953] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1411.783877] ? ion_system_contig_heap_create+0x130/0x130 [ 1411.789325] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1411.794344] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1411.799186] ion_alloc+0x27a/0x810 [ 1411.802730] ? ion_dma_buf_release+0x40/0x40 [ 1411.807137] ? __might_fault+0x177/0x1b0 [ 1411.811195] ion_ioctl+0xea/0x1f0 [ 1411.814640] ? ion_query_heaps+0x360/0x360 [ 1411.818880] ? __tun_chr_ioctl.isra.0+0x3310/0x3310 [ 1411.823888] ? ion_query_heaps+0x360/0x360 [ 1411.828119] do_vfs_ioctl+0x75a/0xff0 [ 1411.831920] ? ioctl_preallocate+0x1a0/0x1a0 [ 1411.836324] ? lock_downgrade+0x740/0x740 [ 1411.840467] ? __fget+0x225/0x360 [ 1411.843914] ? do_vfs_ioctl+0xff0/0xff0 [ 1411.847886] ? security_file_ioctl+0x83/0xb0 [ 1411.852298] SyS_ioctl+0x7f/0xb0 [ 1411.855663] ? do_vfs_ioctl+0xff0/0xff0 [ 1411.859648] do_syscall_64+0x1d5/0x640 [ 1411.863537] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1411.868718] RIP: 0033:0x466459 [ 1411.871901] RSP: 002b:00007f6ba9361188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1411.879616] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1411.886877] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1411.894139] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1411.901424] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1411.908686] R13: 00007ffd9352709f R14: 00007f6ba9361300 R15: 0000000000022000 [ 1411.920201] 0 0 [ 1411.927636] Node 0 DMA: 10*4kB (ME) 45*8kB (UME) 44*16kB (UME) 18*32kB (UME) 5*64kB (UME) 2*128kB (UM) 2*256kB (UE) 2*512kB (ME) 3*1024kB (UME) 2*2048kB (ME) 0*4096kB = 10960kB [ 1411.951929] Node 0 DMA32: 17478*4kB (UME) 4515*8kB (UMEH) 139*16kB (UME) 16*32kB (UEH) 590*64kB (UH) 43*128kB (U) 1*256kB (H) 0*512kB 1*1024kB (H) 0*2048kB 0*4096kB = 153312kB [ 1411.974392] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1411.988786] Node 1 Normal: 155*4kB (UM) 17*8kB (UM) 3*16kB (UM) 807*32kB (UME) 1298*64kB (UM) 221*128kB (U) 62*256kB (U) 7*512kB (U) 152*1024kB (U) 21*2048kB (U) 0*4096kB = 356100kB [ 1412.005422] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1412.026061] Node 0 hugepages_total=1 hugepages_free=1 hugepages_surp=1 hugepages_size=2048kB [ 1412.044562] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1412.053959] DMA free:11024kB min:204kB low:252kB high:300kB active_anon:2100kB inactive_anon:8kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:56kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1412.080530] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1412.089577] 26373 total pagecache pages [ 1412.094012] 0 pages in swap cache [ 1412.097772] Swap cache stats: add 0, delete 0, find 0/0 [ 1412.103693] Free swap = 0kB [ 1412.106761] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1412.111903] Total swap = 0kB [ 1412.114972] Node 0 DMA32 free:201708kB min:36200kB low:45248kB high:54296kB active_anon:287364kB inactive_anon:77104kB active_file:76kB inactive_file:3848kB unevictable:0kB writepending:0kB present:3129332kB managed:2788136kB mlocked:0kB kernel_stack:12032kB pagetables:16664kB bounce:0kB free_pcp:868kB local_pcp:160kB free_cma:0kB [ 1412.145730] 2097051 pages RAM [ 1412.157275] 0 pages HighMem/MovableOnly [ 1412.161712] 363846 pages reserved [ 1412.165623] 0 pages cma reserved [ 1412.169524] Out of memory (oom_kill_allocating_task): Kill process 1487 (syz-executor.1) score 0 or sacrifice child [ 1412.185720] Killed process 1487 (syz-executor.1) total-vm:93120kB, anon-rss:76kB, file-rss:33364kB, shmem-rss:0kB [ 1412.196625] lowmem_reserve[]: 0 0 0 0 0 [ 1412.206239] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1412.274970] oom_reaper: reaped process 1487 (syz-executor.1), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1412.355068] lowmem_reserve[]: 0 0 0 0 0 [ 1412.359095] Node 1 Normal free:1518852kB min:53696kB low:67120kB high:80544kB active_anon:17692kB inactive_anon:23092kB active_file:20kB inactive_file:16kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:6336kB pagetables:18916kB bounce:0kB free_pcp:108kB local_pcp:104kB free_cma:0kB [ 1412.408812] warn_alloc_show_mem: 3 callbacks suppressed [ 1412.408816] Mem-Info: [ 1412.411120] lowmem_reserve[]: 0 0 0 0 0 [ 1412.418923] active_anon:76864 inactive_anon:25051 isolated_anon:0 [ 1412.418923] active_file:124 inactive_file:2366 isolated_file:0 [ 1412.418923] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1412.418923] slab_reclaimable:13338 slab_unreclaimable:128222 [ 1412.418923] mapped:54706 shmem:25395 pagetables:8872 bounce:0 [ 1412.418923] free:530055 free_pcp:275 free_cma:0 [ 1412.426646] Node 0 DMA: 10*4kB (ME) 45*8kB (UME) 44*16kB (UME) 18*32kB (UME) 4*64kB (UME) 1*128kB (M) 1*256kB (E) 3*512kB (UME) 3*1024kB (UME) 2*2048kB (ME) 0*4096kB = 11024kB [ 1412.483060] Node 0 DMA32: 16677*4kB (UME) 7413*8kB (UMEH) 205*16kB (UME) 49*32kB (UMEH) 3358*64kB (UH) 481*128kB (UM) 173*256kB (UMH) 3*512kB (U) 1*1024kB (H) 1*2048kB (U) 0*4096kB = 456236kB [ 1412.506615] Node 0 active_anon:289564kB inactive_anon:77112kB active_file:2576kB inactive_file:7848kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:199840kB dirty:0kB writeback:0kB shmem:78344kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 235520kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1412.541263] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB 20:22:26 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r1, 0x800454cf, &(0x7f0000000240)) ioctl$TUNSETSNDBUF(r1, 0x400454d4, &(0x7f0000000040)=0x1000) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r2, 0x800454cf, &(0x7f0000000240)) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000080)={'lo\x00', @broadcast}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000180)={0x80000000, 0xa}) 20:22:26 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r1, 0x800454cf, &(0x7f0000000240)) ioctl$TUNSETSNDBUF(r1, 0x400454d4, &(0x7f0000000040)=0x1000) openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000180)={0x80000000, 0xa}) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x4000, 0x0) 20:22:26 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r1, 0x800454cf, &(0x7f0000000240)) ioctl$TUNSETSNDBUF(r1, 0x400454d4, &(0x7f0000000040)=0x1000) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r2, 0x800454cf, &(0x7f0000000240)) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000080)={'lo\x00', @broadcast}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000180)={0x80000000, 0xa}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x1) ioctl$TUNSETOWNER(r3, 0x400454cc, 0xffffffffffffffff) [ 1412.556247] Node 1 Normal: 155*4kB (UM) 17*8kB (UM) 3*16kB (UM) 808*32kB (UME) 8636*64kB (UME) 2099*128kB (U) 635*256kB (U) 782*512kB (U) 205*1024kB (U) 28*2048kB (U) 0*4096kB = 1678244kB [ 1412.578010] Node 1 active_anon:17592kB inactive_anon:23092kB active_file:20kB inactive_file:16kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:18784kB dirty:0kB writeback:0kB shmem:23236kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1412.610257] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1412.619146] Node 0 hugepages_total=1 hugepages_free=1 hugepages_surp=1 hugepages_size=2048kB [ 1412.631735] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1412.643220] Node 0 DMA free:11044kB min:204kB low:252kB high:300kB active_anon:2100kB inactive_anon:8kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:56kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1412.679084] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1412.695862] 28297 total pagecache pages [ 1412.709717] 0 pages in swap cache [ 1412.720567] Swap cache stats: add 0, delete 0, find 0/0 [ 1412.735354] Free swap = 0kB [ 1412.739571] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1412.747010] Total swap = 0kB [ 1412.756107] Node 0 DMA32 free:730904kB min:36200kB low:45248kB high:54296kB active_anon:287564kB inactive_anon:77104kB active_file:2576kB inactive_file:8748kB unevictable:0kB writepending:0kB present:3129332kB managed:2788136kB mlocked:0kB kernel_stack:12160kB pagetables:16516kB bounce:0kB free_pcp:888kB local_pcp:160kB free_cma:0kB [ 1412.790441] 2097051 pages RAM [ 1412.794041] 0 pages HighMem/MovableOnly [ 1412.798148] 363846 pages reserved [ 1412.805418] 0 pages cma reserved [ 1412.814566] lowmem_reserve[]: 0 0 0 0 0 [ 1412.845139] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1412.943169] lowmem_reserve[]: 0 0 0 0 0 [ 1412.960548] Node 1 Normal free:1372968kB min:53696kB low:67120kB high:80544kB active_anon:17592kB inactive_anon:23092kB active_file:20kB inactive_file:16kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:6336kB pagetables:18916kB bounce:0kB free_pcp:860kB local_pcp:208kB free_cma:0kB [ 1413.036726] lowmem_reserve[]: 0 0 0 0 0 [ 1413.067240] Node 0 DMA: 47*4kB (UME) 46*8kB (UME) 44*16kB (UME) 18*32kB (UME) 4*64kB (UME) 1*128kB (M) 1*256kB (E) 3*512kB (UME) 3*1024kB (UME) 2*2048kB (ME) 0*4096kB = 11180kB [ 1413.167798] Node 0 DMA32: 17162*4kB (UE) 14256*8kB (UEH) 11109*16kB (UE) 5030*32kB (UEH) 1*64kB (H) 0*128kB 1*256kB (H) 0*512kB 1*1024kB (H) 0*2048kB 0*4096kB = 522744kB [ 1413.262718] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1413.308385] Node 1 Normal: 2556*4kB (UME) 2977*8kB (UME) 1799*16kB (UE) 1336*32kB (UME) 6*64kB (ME) 1*128kB (U) 503*256kB (U) 783*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 635752kB 20:22:27 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r1, 0x800454cf, &(0x7f0000000240)) ioctl$TUNSETSNDBUF(r1, 0x400454d4, &(0x7f0000000040)=0x1000) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000080)={'lo\x00', @broadcast}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000180)={0x80000000, 0xa}) openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) [ 1413.365920] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1413.405873] Node 0 hugepages_total=1 hugepages_free=1 hugepages_surp=1 hugepages_size=2048kB [ 1413.432481] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1413.457256] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1413.523447] 31488 total pagecache pages [ 1413.551140] 0 pages in swap cache [ 1413.573509] Swap cache stats: add 0, delete 0, find 0/0 [ 1413.590433] syz-executor.0: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1413.590934] syz-executor.4: [ 1413.595880] syz-executor.2: [ 1413.606678] syz-executor.5: [ 1413.613381] syz-executor.0 cpuset= [ 1413.616399] page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1413.616414] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 1413.622221] Free swap = 0kB [ 1413.638298] page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1413.640522] / [ 1413.655358] page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1413.660971] CPU: 0 PID: 2205 Comm: syz-executor.5 Not tainted 4.14.228-syzkaller #0 [ 1413.667647] mems_allowed=0-1 [ 1413.675349] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1413.675353] Call Trace: [ 1413.675371] dump_stack+0x1b2/0x281 [ 1413.675385] warn_alloc.cold+0x96/0x1cc [ 1413.675398] ? zone_watermark_ok_safe+0x220/0x220 [ 1413.678513] Total swap = 0kB [ 1413.687835] __alloc_pages_nodemask+0x2127/0x2720 [ 1413.687853] ? lock_acquire+0x170/0x3f0 [ 1413.687868] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1413.695918] syz-executor.4 cpuset= [ 1413.698045] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1413.698058] ? __mutex_unlock_slowpath+0x75/0x770 [ 1413.705119] 2097051 pages RAM [ 1413.705903] alloc_pages_current+0x155/0x260 [ 1413.715127] / [ 1413.719514] ion_page_pool_alloc+0x118/0x1b0 [ 1413.724199] 0 pages HighMem/MovableOnly [ 1413.728495] ion_system_heap_allocate+0x133/0x8c0 [ 1413.728505] ? ion_alloc+0x187/0x810 [ 1413.728518] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1413.740991] mems_allowed=0-1 [ 1413.742519] ? ion_system_contig_heap_create+0x130/0x130 [ 1413.742530] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1413.742543] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1413.750212] 363846 pages reserved [ 1413.750887] ion_alloc+0x204/0x810 [ 1413.750902] ? ion_dma_buf_release+0x40/0x40 [ 1413.750914] ? __might_fault+0x177/0x1b0 [ 1413.767721] 0 pages cma reserved [ 1413.767956] ion_ioctl+0xea/0x1f0 [ 1413.805347] ? ion_query_heaps+0x360/0x360 [ 1413.809581] ? __tun_chr_ioctl.isra.0+0x3310/0x3310 [ 1413.814595] ? ion_query_heaps+0x360/0x360 [ 1413.818841] do_vfs_ioctl+0x75a/0xff0 [ 1413.822638] ? ioctl_preallocate+0x1a0/0x1a0 [ 1413.827044] ? lock_downgrade+0x740/0x740 [ 1413.831189] ? __fget+0x225/0x360 [ 1413.834635] ? do_vfs_ioctl+0xff0/0xff0 [ 1413.838612] ? security_file_ioctl+0x83/0xb0 [ 1413.843013] SyS_ioctl+0x7f/0xb0 [ 1413.846389] ? do_vfs_ioctl+0xff0/0xff0 [ 1413.850359] do_syscall_64+0x1d5/0x640 [ 1413.854264] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1413.859450] RIP: 0033:0x466459 [ 1413.862629] RSP: 002b:00007f2761281188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1413.870328] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1413.877587] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1413.884845] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1413.892102] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1413.899363] R13: 00007ffddf757caf R14: 00007f2761281300 R15: 0000000000022000 [ 1413.907822] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 1413.909445] CPU: 1 PID: 2207 Comm: syz-executor.4 Not tainted 4.14.228-syzkaller #0 [ 1413.920725] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1413.930077] Call Trace: [ 1413.932660] dump_stack+0x1b2/0x281 [ 1413.936287] warn_alloc.cold+0x96/0x1cc [ 1413.940259] ? zone_watermark_ok_safe+0x220/0x220 [ 1413.945107] __alloc_pages_nodemask+0x2127/0x2720 [ 1413.949944] ? _raw_spin_unlock_irq+0x5a/0x80 [ 1413.954441] ? lock_acquire+0x170/0x3f0 [ 1413.958414] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1413.963264] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1413.968715] ? __mutex_unlock_slowpath+0x75/0x770 [ 1413.973561] ? alloc_pages_current+0x15d/0x260 [ 1413.978145] alloc_pages_current+0x155/0x260 [ 1413.982553] ion_page_pool_alloc+0x118/0x1b0 [ 1413.986962] ion_system_heap_allocate+0x133/0x8c0 [ 1413.991807] ? ion_alloc+0x187/0x810 [ 1413.995525] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1414.000969] ? ion_system_contig_heap_create+0x130/0x130 [ 1414.006418] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1414.011437] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1414.016277] ion_alloc+0x204/0x810 [ 1414.019820] ? ion_dma_buf_release+0x40/0x40 [ 1414.024229] ? __might_fault+0x177/0x1b0 [ 1414.028291] ion_ioctl+0xea/0x1f0 [ 1414.031764] ? ion_query_heaps+0x360/0x360 [ 1414.035994] ? ion_query_heaps+0x360/0x360 [ 1414.040220] do_vfs_ioctl+0x75a/0xff0 [ 1414.044020] ? ioctl_preallocate+0x1a0/0x1a0 [ 1414.048431] ? lock_downgrade+0x740/0x740 [ 1414.052586] ? __fget+0x225/0x360 [ 1414.056036] ? do_vfs_ioctl+0xff0/0xff0 [ 1414.060012] ? security_file_ioctl+0x83/0xb0 [ 1414.064429] SyS_ioctl+0x7f/0xb0 [ 1414.067792] ? do_vfs_ioctl+0xff0/0xff0 [ 1414.071761] do_syscall_64+0x1d5/0x640 [ 1414.075652] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1414.080838] RIP: 0033:0x466459 [ 1414.084022] RSP: 002b:00007f6a95319188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1414.091740] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1414.099000] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1414.106264] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1414.113533] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 20:22:27 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r1, 0x800454cf, &(0x7f0000000240)) ioctl$TUNSETSNDBUF(r1, 0x400454d4, &(0x7f0000000040)=0x1000) ioctl$TUNGETFEATURES(0xffffffffffffffff, 0x800454cf, &(0x7f0000000240)) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000080)={'lo\x00', @broadcast}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000180)={0x80000000, 0xa}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x4000, 0x0) ioctl$TUNSETPERSIST(r3, 0x400454cb, 0x1) ioctl$TUNGETFEATURES(r2, 0x800454cf, &(0x7f0000000240)) ioctl$TUNSETOWNER(r2, 0x400454cc, 0xffffffffffffffff) [ 1414.120799] R13: 00007ffc0329f33f R14: 00007f6a95319300 R15: 0000000000022000 [ 1414.128086] CPU: 0 PID: 2193 Comm: syz-executor.2 Not tainted 4.14.228-syzkaller #0 [ 1414.135886] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1414.145228] Call Trace: [ 1414.147809] dump_stack+0x1b2/0x281 [ 1414.151428] warn_alloc.cold+0x96/0x1cc [ 1414.155393] ? zone_watermark_ok_safe+0x220/0x220 [ 1414.160244] __alloc_pages_nodemask+0x2127/0x2720 [ 1414.165097] ? lock_acquire+0x170/0x3f0 [ 1414.169075] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1414.173917] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1414.179361] ? __mutex_unlock_slowpath+0x75/0x770 [ 1414.184195] ? alloc_pages_current+0x84/0x260 [ 1414.188680] alloc_pages_current+0x155/0x260 [ 1414.193088] ion_page_pool_alloc+0x118/0x1b0 [ 1414.197487] ion_system_heap_allocate+0x133/0x8c0 [ 1414.202338] ? _raw_spin_unlock+0x29/0x40 [ 1414.206473] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1414.211391] ? ion_system_contig_heap_create+0x130/0x130 [ 1414.216832] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1414.221843] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1414.226697] ion_alloc+0x27a/0x810 [ 1414.230240] ? ion_dma_buf_release+0x40/0x40 [ 1414.234656] ? __might_fault+0x177/0x1b0 [ 1414.238707] ion_ioctl+0xea/0x1f0 [ 1414.242161] ? ion_query_heaps+0x360/0x360 [ 1414.246388] ? __tun_chr_ioctl.isra.0+0x3310/0x3310 [ 1414.251389] ? ion_query_heaps+0x360/0x360 [ 1414.255611] do_vfs_ioctl+0x75a/0xff0 [ 1414.259404] ? ioctl_preallocate+0x1a0/0x1a0 [ 1414.263803] ? lock_downgrade+0x740/0x740 [ 1414.267944] ? __fget+0x225/0x360 [ 1414.271386] ? do_vfs_ioctl+0xff0/0xff0 [ 1414.275349] ? security_file_ioctl+0x83/0xb0 [ 1414.279744] SyS_ioctl+0x7f/0xb0 [ 1414.283099] ? do_vfs_ioctl+0xff0/0xff0 [ 1414.287065] do_syscall_64+0x1d5/0x640 [ 1414.290950] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1414.296125] RIP: 0033:0x466459 [ 1414.299312] RSP: 002b:00007f613992b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1414.307011] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1414.314268] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1414.321525] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1414.328781] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1414.336036] R13: 00007fff85f2b35f R14: 00007f613992b300 R15: 0000000000022000 [ 1414.343456] CPU: 1 PID: 2206 Comm: syz-executor.0 Not tainted 4.14.228-syzkaller #0 [ 1414.351259] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1414.360609] Call Trace: [ 1414.363197] dump_stack+0x1b2/0x281 [ 1414.366830] warn_alloc.cold+0x96/0x1cc [ 1414.370810] ? zone_watermark_ok_safe+0x220/0x220 [ 1414.375667] __alloc_pages_nodemask+0x2127/0x2720 [ 1414.380505] ? _raw_spin_unlock_irq+0x5a/0x80 [ 1414.385002] ? finish_task_switch+0x178/0x610 [ 1414.389609] ? finish_task_switch+0x14d/0x610 [ 1414.394109] ? lock_acquire+0x170/0x3f0 [ 1414.398090] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1414.402941] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1414.408438] ? __mutex_unlock_slowpath+0x75/0x770 [ 1414.413281] ? alloc_pages_current+0x15d/0x260 [ 1414.417869] alloc_pages_current+0x155/0x260 [ 1414.422282] ion_page_pool_alloc+0x118/0x1b0 [ 1414.426685] ion_system_heap_allocate+0x133/0x8c0 [ 1414.431534] ? ion_alloc+0x187/0x810 [ 1414.435251] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1414.440704] ? ion_system_contig_heap_create+0x130/0x130 [ 1414.446150] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1414.451171] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1414.456019] ion_alloc+0x204/0x810 [ 1414.459567] ? ion_dma_buf_release+0x40/0x40 [ 1414.464009] ? __might_fault+0x177/0x1b0 [ 1414.468072] ion_ioctl+0xea/0x1f0 [ 1414.471523] ? ion_query_heaps+0x360/0x360 [ 1414.475765] ? __tun_chr_ioctl.isra.0+0x3310/0x3310 [ 1414.480780] ? ion_query_heaps+0x360/0x360 [ 1414.485012] do_vfs_ioctl+0x75a/0xff0 [ 1414.488816] ? ioctl_preallocate+0x1a0/0x1a0 [ 1414.493223] ? lock_downgrade+0x740/0x740 [ 1414.497375] ? __fget+0x225/0x360 [ 1414.500827] ? do_vfs_ioctl+0xff0/0xff0 [ 1414.504799] ? security_file_ioctl+0x83/0xb0 [ 1414.509208] SyS_ioctl+0x7f/0xb0 [ 1414.512569] ? do_vfs_ioctl+0xff0/0xff0 [ 1414.516550] do_syscall_64+0x1d5/0x640 [ 1414.520455] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1414.525639] RIP: 0033:0x466459 [ 1414.528824] RSP: 002b:00007f2e01ed3188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1414.536531] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1414.543796] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1414.549895] Mem-Info: [ 1414.551057] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1414.551063] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1414.551069] R13: 00007ffdb70bf23f R14: 00007f2e01ed3300 R15: 0000000000022000 [ 1414.656534] active_anon:76891 inactive_anon:25048 isolated_anon:0 [ 1414.656534] active_file:1620 inactive_file:4949 isolated_file:0 [ 1414.656534] unevictable:0 dirty:7 writeback:0 unstable:0 [ 1414.656534] slab_reclaimable:13337 slab_unreclaimable:129234 [ 1414.656534] mapped:48692 shmem:25391 pagetables:8880 bounce:0 [ 1414.656534] free:161908 free_pcp:681 free_cma:0 [ 1414.695682] Node 0 active_anon:290012kB inactive_anon:77104kB active_file:6476kB inactive_file:19784kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:191292kB dirty:24kB writeback:0kB shmem:78332kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 235520kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1414.701557] syz-executor.3: [ 1414.740978] Node 1 active_anon:17552kB inactive_anon:23088kB active_file:4kB inactive_file:12kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:5476kB dirty:4kB writeback:0kB shmem:23232kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1414.810040] Node 0 DMA free:11040kB min:204kB low:252kB high:300kB active_anon:2100kB inactive_anon:8kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:56kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1414.819939] page allocation failure: order:4 [ 1414.846542] lowmem_reserve[]: [ 1414.854612] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1414.874077] 0 2717 2718 2718 2718 [ 1414.890018] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1414.891046] Node 0 DMA32 free:393296kB min:36200kB low:45248kB high:54296kB active_anon:288012kB inactive_anon:77096kB active_file:6476kB inactive_file:19484kB unevictable:0kB writepending:24kB present:3129332kB managed:2788136kB mlocked:0kB kernel_stack:12096kB pagetables:16656kB bounce:0kB free_pcp:720kB local_pcp:200kB free_cma:0kB [ 1414.911630] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1414.948359] device bridge_slave_1 left promiscuous mode [ 1414.965606] lowmem_reserve[]: 0 0 0 0 0 [ 1414.987027] bridge0: port 2(bridge_slave_1) entered disabled state [ 1414.991777] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1415.002765] (null) [ 1415.026139] device bridge_slave_0 left promiscuous mode [ 1415.042734] bridge0: port 1(bridge_slave_0) entered disabled state [ 1415.058398] lowmem_reserve[]: 0 0 0 0 0 [ 1415.066843] device veth1_vlan left promiscuous mode [ 1415.082362] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 1415.085018] Node 1 [ 1415.087680] device veth0_vlan left promiscuous mode [ 1415.091969] Normal free:122724kB min:53696kB low:67120kB high:80544kB active_anon:17548kB inactive_anon:23088kB active_file:4kB inactive_file:12kB unevictable:0kB writepending:4kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:6304kB pagetables:18808kB bounce:0kB free_pcp:628kB local_pcp:4kB free_cma:0kB [ 1415.100743] CPU: 1 PID: 2221 Comm: syz-executor.3 Not tainted 4.14.228-syzkaller #0 [ 1415.131054] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1415.140404] Call Trace: [ 1415.142997] dump_stack+0x1b2/0x281 [ 1415.146628] warn_alloc.cold+0x96/0x1cc [ 1415.150607] ? zone_watermark_ok_safe+0x220/0x220 [ 1415.155463] __alloc_pages_nodemask+0x2127/0x2720 [ 1415.156741] lowmem_reserve[]: [ 1415.160308] ? lock_acquire+0x170/0x3f0 [ 1415.160325] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1415.172214] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1415.173889] 0 [ 1415.177663] ? __mutex_unlock_slowpath+0x75/0x770 [ 1415.177673] ? retint_kernel+0x2d/0x2d [ 1415.177689] alloc_pages_current+0x155/0x260 [ 1415.184982] 0 [ 1415.188177] ion_page_pool_alloc+0x118/0x1b0 [ 1415.188187] ion_system_heap_allocate+0x133/0x8c0 [ 1415.188198] ? ion_alloc+0x187/0x810 [ 1415.202118] 0 [ 1415.203594] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1415.203605] ? ion_system_contig_heap_create+0x130/0x130 [ 1415.203615] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1415.203629] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1415.209551] 0 [ 1415.214579] ion_alloc+0x204/0x810 [ 1415.214593] ? ion_dma_buf_release+0x40/0x40 [ 1415.214606] ? __might_fault+0x177/0x1b0 [ 1415.214618] ion_ioctl+0xea/0x1f0 [ 1415.214627] ? ion_query_heaps+0x360/0x360 [ 1415.214640] ? __tun_chr_ioctl.isra.0+0x3310/0x3310 [ 1415.214648] ? ion_query_heaps+0x360/0x360 [ 1415.214658] do_vfs_ioctl+0x75a/0xff0 [ 1415.214669] ? ioctl_preallocate+0x1a0/0x1a0 [ 1415.231551] 0 [ 1415.231727] ? lock_downgrade+0x740/0x740 [ 1415.231742] ? __fget+0x225/0x360 [ 1415.243722] ? do_vfs_ioctl+0xff0/0xff0 [ 1415.243736] ? security_file_ioctl+0x83/0xb0 [ 1415.243746] SyS_ioctl+0x7f/0xb0 [ 1415.251878] Node 0 [ 1415.256404] ? do_vfs_ioctl+0xff0/0xff0 [ 1415.256417] do_syscall_64+0x1d5/0x640 [ 1415.256434] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1415.272088] DMA: [ 1415.274741] RIP: 0033:0x466459 [ 1415.274747] RSP: 002b:00007f6ba9361188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1415.274757] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1415.274767] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1415.280450] 46*4kB [ 1415.282178] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1415.282183] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1415.282189] R13: 00007ffd9352709f R14: 00007f6ba9361300 R15: 0000000000022000 [ 1415.372714] (UME) 51*8kB (UME) 45*16kB (UME) 18*32kB (UME) 3*64kB (ME) 2*128kB (UM) 2*256kB (UE) 2*512kB (ME) 3*1024kB (UME) 2*2048kB (ME) 0*4096kB = 11040kB [ 1415.423165] Node 0 DMA32: 3*4kB (UEH) 356*8kB (UEH) 110*16kB (UEH) 3385*32kB (UMEH) 31*64kB (UH) 0*128kB 1*256kB (H) 0*512kB 1*1024kB (H) 0*2048kB 0*4096kB = 116204kB [ 1415.458196] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1415.500156] Node 1 Normal: 3143*4kB (UM) 2877*8kB (U) 2182*16kB (U) 1598*32kB (UM) 17*64kB (U) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 122724kB [ 1415.530898] device hsr_slave_1 left promiscuous mode [ 1415.548846] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1415.557749] device hsr_slave_0 left promiscuous mode [ 1415.565551] Node 0 hugepages_total=1 hugepages_free=1 hugepages_surp=1 hugepages_size=2048kB [ 1415.578614] team0 (unregistering): Port device team_slave_1 removed [ 1415.604815] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1415.635394] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1415.649310] team0 (unregistering): Port device team_slave_0 removed [ 1415.676507] 31483 total pagecache pages [ 1415.689063] 0 pages in swap cache [ 1415.695981] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 1415.698185] Swap cache stats: add 0, delete 0, find 0/0 [ 1415.727453] Free swap = 0kB [ 1415.741702] Total swap = 0kB [ 1415.745436] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 1415.752502] 2097051 pages RAM [ 1415.769074] 0 pages HighMem/MovableOnly [ 1415.775982] oom_reaper: reaped process 2207 (syz-executor.4), now anon-rss:0kB, file-rss:8kB, shmem-rss:0kB [ 1415.850552] 363846 pages reserved [ 1415.854036] 0 pages cma reserved [ 1415.924743] bond0 (unregistering): Released all slaves [ 1415.937556] oom_reaper: reaped process 2205 (syz-executor.5), now anon-rss:0kB, file-rss:4kB, shmem-rss:0kB [ 1415.977242] warn_alloc_show_mem: 3 callbacks suppressed [ 1415.977246] Mem-Info: [ 1415.998972] active_anon:76909 inactive_anon:25048 isolated_anon:0 [ 1415.998972] active_file:621 inactive_file:567 isolated_file:48 [ 1415.998972] unevictable:0 dirty:25 writeback:0 unstable:0 [ 1415.998972] slab_reclaimable:13328 slab_unreclaimable:128020 [ 1415.998972] mapped:54240 shmem:25392 pagetables:8913 bounce:0 [ 1415.998972] free:13933 free_pcp:172 free_cma:0 [ 1416.110619] Node 0 active_anon:290064kB inactive_anon:77108kB active_file:1392kB inactive_file:1448kB unevictable:0kB isolated(anon):0kB isolated(file):160kB mapped:209404kB dirty:0kB writeback:0kB shmem:78336kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 235520kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1416.143103] Node 1 active_anon:17548kB inactive_anon:23088kB active_file:4kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:5612kB dirty:0kB writeback:0kB shmem:23232kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1416.178202] Node 0 DMA free:10968kB min:204kB low:252kB high:300kB active_anon:2100kB inactive_anon:8kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:56kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1416.215719] oom_reaper: reaped process 2206 (syz-executor.0), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1416.225675] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1416.230864] Node 0 DMA32 free:18060kB min:36200kB low:45248kB high:54296kB active_anon:287964kB inactive_anon:77100kB active_file:1100kB inactive_file:708kB unevictable:0kB writepending:0kB present:3129332kB managed:2788136kB mlocked:0kB kernel_stack:12096kB pagetables:16788kB bounce:0kB free_pcp:136kB local_pcp:8kB free_cma:0kB [ 1416.260695] lowmem_reserve[]: 0 0 0 0 0 [ 1416.264693] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1416.302177] lowmem_reserve[]: 0 0 0 0 0 [ 1416.306202] Node 1 Normal free:26792kB min:53696kB low:67120kB high:80544kB active_anon:17548kB inactive_anon:23088kB active_file:4kB inactive_file:4kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:6304kB pagetables:18808kB bounce:0kB free_pcp:120kB local_pcp:0kB free_cma:0kB [ 1416.377733] lowmem_reserve[]: 0 0 0 0 0 [ 1416.381842] Node 0 DMA: 18*4kB (UME) 56*8kB (UME) 45*16kB (UME) 18*32kB (UME) 3*64kB (ME) 2*128kB (UM) 2*256kB (UE) 2*512kB (ME) 3*1024kB (UME) 2*2048kB (ME) 0*4096kB = 10968kB [ 1416.423948] Node 0 DMA32: 2166*4kB (MEH) 613*8kB (MEH) 139*16kB (UMEH) 21*32kB (UMEH) 4*64kB (UH) 1*128kB (H) 2*256kB (H) 0*512kB 1*1024kB (H) 0*2048kB 0*4096kB = 18384kB [ 1416.459912] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1416.480542] Node 1 Normal: 1*4kB (M) 1*8kB (U) 0*16kB 803*32kB (UM) 17*64kB (U) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 26796kB [ 1416.505926] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1416.514855] Node 0 hugepages_total=1 hugepages_free=1 hugepages_surp=1 hugepages_size=2048kB [ 1416.526888] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1416.537839] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1416.568755] 25463 total pagecache pages [ 1416.584014] 0 pages in swap cache [ 1416.587471] Swap cache stats: add 0, delete 0, find 0/0 [ 1416.603942] Free swap = 0kB [ 1416.606965] Total swap = 0kB [ 1416.609972] 2097051 pages RAM [ 1416.624368] 0 pages HighMem/MovableOnly [ 1416.628366] 363846 pages reserved [ 1416.643849] 0 pages cma reserved [ 1416.786490] oom_reaper: reaped process 2221 (syz-executor.3), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1416.952962] kworker/u4:5 invoked oom-killer: gfp_mask=0x15080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null), order=3, oom_score_adj=0 [ 1416.997985] kworker/u4:5 cpuset=/ mems_allowed=0-1 [ 1417.003609] CPU: 0 PID: 3588 Comm: kworker/u4:5 Not tainted 4.14.228-syzkaller #0 [ 1417.011345] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1417.020706] Workqueue: events_unbound call_usermodehelper_exec_work [ 1417.027102] Call Trace: [ 1417.029694] dump_stack+0x1b2/0x281 [ 1417.033331] dump_header+0x178/0x82f [ 1417.037043] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1417.042152] ? ___ratelimit+0x2cd/0x530 [ 1417.046138] oom_kill_process.cold+0x10/0xb18 [ 1417.050630] ? lock_downgrade+0x740/0x740 [ 1417.054785] out_of_memory+0x2dc/0x1190 [ 1417.058751] ? oom_killer_disable+0x1c0/0x1c0 [ 1417.063251] ? mutex_trylock+0x152/0x1a0 [ 1417.067299] __alloc_pages_nodemask+0x23e1/0x2720 [ 1417.072151] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1417.076990] ? fs_reclaim_release+0xd0/0x110 [ 1417.081400] ? kmem_cache_alloc_node+0x38b/0x410 [ 1417.086149] copy_process.part.0+0x265/0x71c0 [ 1417.090633] ? __lock_acquire+0x5fc/0x3f20 [ 1417.094859] ? trace_hardirqs_on+0x10/0x10 [ 1417.099083] ? static_obj+0x50/0x50 [ 1417.102702] ? call_usermodehelper_exec_work+0x2a0/0x2a0 [ 1417.108139] ? __cleanup_sighand+0x40/0x40 [ 1417.112364] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1417.117465] ? call_usermodehelper_exec_work+0x2a0/0x2a0 [ 1417.122917] _do_fork+0x184/0xc80 [ 1417.126357] ? fork_idle+0x270/0x270 [ 1417.130067] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1417.135157] ? process_one_work+0x6c4/0x14a0 [ 1417.139554] ? call_usermodehelper_exec_work+0x2a0/0x2a0 [ 1417.145005] kernel_thread+0x2f/0x40 [ 1417.148708] call_usermodehelper_exec_work+0x1ac/0x2a0 [ 1417.153970] ? call_usermodehelper+0x80/0x80 [ 1417.158369] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1417.163824] process_one_work+0x793/0x14a0 [ 1417.168050] ? work_busy+0x320/0x320 [ 1417.171749] ? worker_thread+0x158/0xff0 [ 1417.175799] ? _raw_spin_unlock_irq+0x24/0x80 [ 1417.180291] worker_thread+0x5cc/0xff0 [ 1417.184172] ? rescuer_thread+0xc80/0xc80 [ 1417.188319] kthread+0x30d/0x420 [ 1417.191671] ? kthread_create_on_node+0xd0/0xd0 [ 1417.196339] ret_from_fork+0x24/0x30 [ 1417.200900] Mem-Info: [ 1417.203343] active_anon:76855 inactive_anon:25049 isolated_anon:0 [ 1417.203343] active_file:7 inactive_file:7 isolated_file:0 [ 1417.203343] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1417.203343] slab_reclaimable:13328 slab_unreclaimable:127360 [ 1417.203343] mapped:53060 shmem:25392 pagetables:8913 bounce:0 [ 1417.203343] free:13960 free_pcp:0 free_cma:0 [ 1417.238510] Node 0 active_anon:289872kB inactive_anon:77108kB active_file:64kB inactive_file:64kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:206552kB dirty:0kB writeback:0kB shmem:78336kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 235520kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1417.240665] syz-executor.2: [ 1417.266370] syz-executor.3: [ 1417.268513] Node 1 active_anon:17548kB inactive_anon:23088kB active_file:0kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:5612kB dirty:0kB writeback:0kB shmem:23232kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1417.269396] page allocation failure: order:0 [ 1417.272430] Node 0 DMA free:10968kB min:204kB low:252kB high:300kB active_anon:2100kB inactive_anon:8kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:56kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1417.272454] lowmem_reserve[]: [ 1417.299551] syz-executor.0: [ 1417.306031] 0 [ 1417.330553] syz-executor.5: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1417.330574] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 1417.330596] CPU: 1 PID: 2205 Comm: syz-executor.5 Not tainted 4.14.228-syzkaller #0 [ 1417.330602] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1417.330606] Call Trace: [ 1417.330626] dump_stack+0x1b2/0x281 [ 1417.335873] syz-executor.4: [ 1417.336728] warn_alloc.cold+0x96/0x1cc [ 1417.338503] page allocation failure: order:0 [ 1417.350276] ? zone_watermark_ok_safe+0x220/0x220 [ 1417.350287] ? usleep_range+0x130/0x130 [ 1417.350295] ? try_to_free_pages+0x23f/0x6e0 [ 1417.350306] ? _find_next_bit+0xdb/0x100 [ 1417.350316] ? run_timer_softirq+0x5a0/0x5a0 [ 1417.350332] __alloc_pages_nodemask+0x2127/0x2720 [ 1417.360012] 2717 [ 1417.363208] ? lock_acquire+0x170/0x3f0 [ 1417.363225] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1417.363238] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1417.376960] 2718 [ 1417.378792] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1417.381836] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1417.385750] alloc_pages_current+0x155/0x260 [ 1417.390120] (null) [ 1417.394962] ion_page_pool_alloc+0x118/0x1b0 [ 1417.394973] ion_system_heap_allocate+0x133/0x8c0 [ 1417.394983] ? ion_alloc+0x187/0x810 [ 1417.394993] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1417.395003] ? ion_system_contig_heap_create+0x130/0x130 [ 1417.395013] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1417.395024] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1417.395035] ion_alloc+0x204/0x810 [ 1417.395049] ? ion_dma_buf_release+0x40/0x40 [ 1417.395061] ? __might_fault+0x177/0x1b0 [ 1417.404378] 2718 [ 1417.407462] ion_ioctl+0xea/0x1f0 [ 1417.413051] page allocation failure: order:0 [ 1417.416685] ? ion_query_heaps+0x360/0x360 [ 1417.418727] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1417.422712] ? __tun_chr_ioctl.isra.0+0x3310/0x3310 [ 1417.422728] ? ion_query_heaps+0x360/0x360 [ 1417.422749] do_vfs_ioctl+0x75a/0xff0 [ 1417.422765] ? ioctl_preallocate+0x1a0/0x1a0 [ 1417.422786] ? lock_downgrade+0x740/0x740 [ 1417.422806] ? __fget+0x225/0x360 [ 1417.432592] 2718 [ 1417.434159] ? do_vfs_ioctl+0xff0/0xff0 [ 1417.446694] ? security_file_ioctl+0x83/0xb0 [ 1417.446706] SyS_ioctl+0x7f/0xb0 [ 1417.446715] ? do_vfs_ioctl+0xff0/0xff0 [ 1417.446726] do_syscall_64+0x1d5/0x640 [ 1417.446740] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1417.446749] RIP: 0033:0x466459 [ 1417.446753] RSP: 002b:00007f2761281188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1417.446764] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1417.446772] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1417.455095] syz-executor.4 cpuset= [ 1417.457682] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1417.462591] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1417.466197] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1417.476981] (null) [ 1417.477054] R13: 00007ffddf757caf R14: 00007f2761281300 R15: 0000000000022000 [ 1417.482120] / [ 1417.514468] page allocation failure: order:0 [ 1417.551130] syz-executor.2 cpuset= [ 1417.561342] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1417.573663] (null) [ 1417.585512] (null) [ 1417.608852] Node 0 [ 1417.619266] syz-executor.0 cpuset= [ 1417.627739] / [ 1417.659888] / [ 1417.664247] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 1417.671131] DMA32 free:17636kB min:36200kB low:45248kB high:54296kB active_anon:287772kB inactive_anon:77100kB active_file:64kB inactive_file:64kB unevictable:0kB writepending:0kB present:3129332kB managed:2788136kB mlocked:0kB kernel_stack:12064kB pagetables:16788kB bounce:0kB free_pcp:128kB local_pcp:8kB free_cma:0kB [ 1417.681500] mems_allowed=0-1 [ 1417.703761] CPU: 0 PID: 2221 Comm: syz-executor.3 Not tainted 4.14.228-syzkaller #0 [ 1417.711554] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1417.720908] Call Trace: [ 1417.723496] dump_stack+0x1b2/0x281 [ 1417.727158] warn_alloc.cold+0x96/0x1cc [ 1417.731127] ? zone_watermark_ok_safe+0x220/0x220 [ 1417.735961] ? usleep_range+0x130/0x130 [ 1417.739950] ? queue_work_on+0x10d/0x1d0 [ 1417.740493] Mem-Info: [ 1417.744021] ? _find_next_bit+0xdb/0x100 [ 1417.746426] active_anon:76855 inactive_anon:25049 isolated_anon:0 [ 1417.746426] active_file:16 inactive_file:17 isolated_file:0 [ 1417.746426] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1417.746426] slab_reclaimable:13328 slab_unreclaimable:127347 [ 1417.746426] mapped:53041 shmem:25392 pagetables:8913 bounce:0 [ 1417.746426] free:13719 free_pcp:32 free_cma:0 [ 1417.750466] ? run_timer_softirq+0x5a0/0x5a0 [ 1417.750484] __alloc_pages_nodemask+0x2127/0x2720 [ 1417.750511] ? lock_acquire+0x170/0x3f0 [ 1417.796923] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1417.801774] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1417.806265] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1417.811705] ? retint_kernel+0x2d/0x2d [ 1417.815589] alloc_pages_current+0x155/0x260 [ 1417.819989] ion_page_pool_alloc+0x118/0x1b0 [ 1417.824389] ion_system_heap_allocate+0x133/0x8c0 [ 1417.829222] ? ion_alloc+0x187/0x810 [ 1417.830514] Node 0 active_anon:289872kB inactive_anon:77108kB active_file:64kB inactive_file:64kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:206552kB dirty:0kB writeback:0kB shmem:78336kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 235520kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1417.832939] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1417.866228] ? ion_system_contig_heap_create+0x130/0x130 [ 1417.871672] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1417.876680] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1417.881513] ion_alloc+0x204/0x810 [ 1417.885046] ? ion_dma_buf_release+0x40/0x40 [ 1417.889443] ? __might_fault+0x177/0x1b0 [ 1417.890518] Node 1 active_anon:17548kB inactive_anon:23088kB active_file:0kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:5612kB dirty:0kB writeback:0kB shmem:23232kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1417.893496] ion_ioctl+0xea/0x1f0 [ 1417.923916] ? ion_query_heaps+0x360/0x360 [ 1417.928143] ? __tun_chr_ioctl.isra.0+0x3310/0x3310 [ 1417.933143] ? ion_query_heaps+0x360/0x360 [ 1417.937367] do_vfs_ioctl+0x75a/0xff0 [ 1417.941173] ? ioctl_preallocate+0x1a0/0x1a0 [ 1417.945568] ? lock_downgrade+0x740/0x740 [ 1417.949729] ? __fget+0x225/0x360 [ 1417.950504] Node 0 [ 1417.953180] ? do_vfs_ioctl+0xff0/0xff0 [ 1417.953199] DMA free:10968kB min:204kB low:252kB high:300kB active_anon:2100kB inactive_anon:8kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:56kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1417.953204] lowmem_reserve[]: [ 1417.955432] ? security_file_ioctl+0x83/0xb0 [ 1417.959383] 0 [ 1417.985322] SyS_ioctl+0x7f/0xb0 [ 1417.985332] ? do_vfs_ioctl+0xff0/0xff0 [ 1417.985343] do_syscall_64+0x1d5/0x640 [ 1417.985357] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1417.985369] RIP: 0033:0x466459 [ 1418.014182] RSP: 002b:00007f6ba9361188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1418.020497] 2717 [ 1418.021878] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1418.021886] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1418.023936] 2718 [ 1418.031187] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1418.031192] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1418.031197] R13: 00007ffd9352709f R14: 00007f6ba9361300 R15: 0000000000022000 [ 1418.035916] mems_allowed=0-1 [ 1418.038485] CPU: 1 PID: 2206 Comm: syz-executor.0 Not tainted 4.14.228-syzkaller #0 [ 1418.056163] mems_allowed=0-1 [ 1418.062270] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1418.062274] Call Trace: [ 1418.062292] dump_stack+0x1b2/0x281 [ 1418.062307] warn_alloc.cold+0x96/0x1cc [ 1418.062320] ? zone_watermark_ok_safe+0x220/0x220 [ 1418.065417] lowmem_reserve[]: [ 1418.073190] ? usleep_range+0x130/0x130 [ 1418.073200] ? try_to_free_pages+0x23f/0x6e0 [ 1418.073210] ? _find_next_bit+0xdb/0x100 [ 1418.073221] ? run_timer_softirq+0x5a0/0x5a0 [ 1418.073238] __alloc_pages_nodemask+0x2127/0x2720 [ 1418.073255] ? lock_acquire+0x170/0x3f0 [ 1418.102515] 0 [ 1418.103717] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1418.107657] 0 [ 1418.112050] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1418.112067] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1418.112080] ? retint_kernel+0x2d/0x2d [ 1418.112094] alloc_pages_current+0x155/0x260 [ 1418.112106] ion_page_pool_alloc+0x118/0x1b0 [ 1418.142560] 0 [ 1418.147659] ion_system_heap_allocate+0x133/0x8c0 [ 1418.166913] ? ion_alloc+0x187/0x810 [ 1418.170618] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1418.176063] ? ion_system_contig_heap_create+0x130/0x130 [ 1418.181524] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1418.182529] 0 [ 1418.186533] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1418.186534] 0 [ 1418.188328] ion_alloc+0x204/0x810 [ 1418.198502] ? ion_dma_buf_release+0x40/0x40 [ 1418.202905] ? __might_fault+0x177/0x1b0 [ 1418.206958] ion_ioctl+0xea/0x1f0 [ 1418.210400] ? ion_query_heaps+0x360/0x360 [ 1418.214631] ? __tun_chr_ioctl.isra.0+0x3310/0x3310 [ 1418.219634] ? ion_query_heaps+0x360/0x360 [ 1418.222531] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1418.223886] do_vfs_ioctl+0x75a/0xff0 [ 1418.223898] ? ioctl_preallocate+0x1a0/0x1a0 [ 1418.257579] ? lock_downgrade+0x740/0x740 [ 1418.261720] ? __fget+0x225/0x360 [ 1418.265161] ? do_vfs_ioctl+0xff0/0xff0 [ 1418.269124] ? security_file_ioctl+0x83/0xb0 [ 1418.273524] SyS_ioctl+0x7f/0xb0 [ 1418.276884] ? do_vfs_ioctl+0xff0/0xff0 [ 1418.280849] do_syscall_64+0x1d5/0x640 [ 1418.284731] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1418.289908] RIP: 0033:0x466459 [ 1418.293087] RSP: 002b:00007f2e01ed3188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1418.300787] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1418.308039] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1418.315295] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1418.320515] lowmem_reserve[]: [ 1418.322549] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1418.322557] R13: 00007ffdb70bf23f R14: 00007f2e01ed3300 R15: 0000000000022000 [ 1418.325647] 0 [ 1418.350518] CPU: 0 PID: 2207 Comm: syz-executor.4 Not tainted 4.14.228-syzkaller #0 [ 1418.360101] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1418.366384] 2718 [ 1418.369442] Call Trace: [ 1418.369449] 2718 [ 1418.371503] dump_stack+0x1b2/0x281 [ 1418.371518] warn_alloc.cold+0x96/0x1cc [ 1418.371529] ? zone_watermark_ok_safe+0x220/0x220 [ 1418.371539] ? usleep_range+0x130/0x130 [ 1418.371549] ? try_to_free_pages+0x23f/0x6e0 [ 1418.371560] ? _find_next_bit+0xdb/0x100 [ 1418.376181] ? run_timer_softirq+0x5a0/0x5a0 [ 1418.379775] Node 0 [ 1418.383736] __alloc_pages_nodemask+0x2127/0x2720 [ 1418.383755] ? lock_acquire+0x170/0x3f0 [ 1418.383770] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1418.388604] DMA32 free:18180kB min:36200kB low:45248kB high:54296kB active_anon:287772kB inactive_anon:77100kB active_file:64kB inactive_file:64kB unevictable:0kB writepending:0kB present:3129332kB managed:2788136kB mlocked:0kB kernel_stack:12064kB pagetables:16788kB bounce:0kB free_pcp:244kB local_pcp:152kB free_cma:0kB [ 1418.392540] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1418.392557] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1418.392576] alloc_pages_current+0x155/0x260 [ 1418.396957] lowmem_reserve[]: [ 1418.401004] ion_page_pool_alloc+0x118/0x1b0 [ 1418.401015] ion_system_heap_allocate+0x133/0x8c0 [ 1418.401025] ? ion_alloc+0x187/0x810 [ 1418.405409] 0 [ 1418.407650] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1418.412482] 0 [ 1418.416435] ? ion_system_contig_heap_create+0x130/0x130 [ 1418.421267] 0 [ 1418.449873] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1418.449886] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1418.449897] ion_alloc+0x204/0x810 [ 1418.449911] ? ion_dma_buf_release+0x40/0x40 [ 1418.454412] 0 [ 1418.459847] ? __might_fault+0x177/0x1b0 [ 1418.464250] 0 [ 1418.467335] ion_ioctl+0xea/0x1f0 [ 1418.476552] ? ion_query_heaps+0x360/0x360 [ 1418.480238] Node 0 [ 1418.482029] ? ion_query_heaps+0x360/0x360 [ 1418.482039] do_vfs_ioctl+0x75a/0xff0 [ 1418.482050] ? ioctl_preallocate+0x1a0/0x1a0 [ 1418.482060] ? lock_downgrade+0x740/0x740 [ 1418.482079] ? __fget+0x225/0x360 [ 1418.487522] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1418.489301] ? do_vfs_ioctl+0xff0/0xff0 [ 1418.494762] lowmem_reserve[]: [ 1418.496525] ? security_file_ioctl+0x83/0xb0 [ 1418.501543] 0 [ 1418.506341] SyS_ioctl+0x7f/0xb0 [ 1418.509854] 0 [ 1418.514247] ? do_vfs_ioctl+0xff0/0xff0 [ 1418.514260] do_syscall_64+0x1d5/0x640 [ 1418.514274] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1418.514284] RIP: 0033:0x466459 [ 1418.516069] 0 [ 1418.520114] RSP: 002b:00007f6a95319188 EFLAGS: 00000246 [ 1418.521930] 0 [ 1418.525341] ORIG_RAX: 0000000000000010 [ 1418.529553] 0 [ 1418.531782] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1418.531788] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1418.531792] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1418.531797] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1418.531801] R13: 00007ffc0329f33f R14: 00007f6a95319300 R15: 0000000000022000 [ 1418.532142] CPU: 0 PID: 2193 Comm: syz-executor.2 Not tainted 4.14.228-syzkaller #0 [ 1418.539826] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1418.580496] Node 1 [ 1418.580620] Call Trace: [ 1418.583722] Normal free:26392kB min:53696kB low:67120kB high:80544kB active_anon:17548kB inactive_anon:23088kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:6304kB pagetables:18808kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1418.588109] dump_stack+0x1b2/0x281 [ 1418.589875] lowmem_reserve[]: [ 1418.593231] warn_alloc.cold+0x96/0x1cc [ 1418.593243] ? zone_watermark_ok_safe+0x220/0x220 [ 1418.593253] ? usleep_range+0x130/0x130 [ 1418.593264] ? try_to_free_pages+0x23f/0x6e0 [ 1418.600499] 0 [ 1418.602880] ? _find_next_bit+0xdb/0x100 [ 1418.608038] 0 [ 1418.611216] ? run_timer_softirq+0x5a0/0x5a0 [ 1418.611234] __alloc_pages_nodemask+0x2127/0x2720 [ 1418.611251] ? lock_acquire+0x170/0x3f0 [ 1418.622753] 0 [ 1418.624135] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1418.625907] 0 [ 1418.633166] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1418.633183] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1418.633203] alloc_pages_current+0x155/0x260 [ 1418.640503] 0 [ 1418.647712] ion_page_pool_alloc+0x118/0x1b0 [ 1418.662212] ion_system_heap_allocate+0x133/0x8c0 [ 1418.662226] ? _raw_spin_unlock+0x29/0x40 [ 1418.662237] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1418.670009] Node 0 [ 1418.679349] ? ion_system_contig_heap_create+0x130/0x130 [ 1418.679361] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1418.679373] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1418.679383] ion_alloc+0x27a/0x810 [ 1418.681615] DMA: [ 1418.684166] ? ion_dma_buf_release+0x40/0x40 [ 1418.730520] 18*4kB [ 1418.731532] ? __might_fault+0x177/0x1b0 [ 1418.735912] (UME) [ 1418.737702] ion_ioctl+0xea/0x1f0 [ 1418.750504] 56*8kB [ 1418.752760] ? ion_query_heaps+0x360/0x360 [ 1418.756709] (UME) [ 1418.758502] ? __tun_chr_ioctl.isra.0+0x3310/0x3310 [ 1418.770498] 45*16kB [ 1418.775030] ? ion_query_heaps+0x360/0x360 [ 1418.779410] (UME) [ 1418.781208] do_vfs_ioctl+0x75a/0xff0 [ 1418.781221] ? ioctl_preallocate+0x1a0/0x1a0 [ 1418.781234] ? lock_downgrade+0x740/0x740 [ 1418.800499] 18*32kB [ 1418.801694] ? __fget+0x225/0x360 [ 1418.807115] (UME) [ 1418.812138] ? do_vfs_ioctl+0xff0/0xff0 [ 1418.812150] ? security_file_ioctl+0x83/0xb0 [ 1418.812161] SyS_ioctl+0x7f/0xb0 [ 1418.850496] 3*64kB [ 1418.852320] ? do_vfs_ioctl+0xff0/0xff0 [ 1418.854616] (ME) [ 1418.858853] do_syscall_64+0x1d5/0x640 [ 1418.880499] 2*128kB [ 1418.881214] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1418.885162] (UM) [ 1418.889551] RIP: 0033:0x466459 [ 1418.910494] 2*256kB [ 1418.912444] RSP: 002b:00007f613992b188 EFLAGS: 00000246 [ 1418.914486] (UE) [ 1418.917682] ORIG_RAX: 0000000000000010 [ 1418.919991] 2*512kB [ 1418.925330] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1418.925335] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1418.925340] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1418.925345] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1418.925350] R13: 00007fff85f2b35f R14: 00007f613992b300 R15: 0000000000022000 [ 1418.926742] 0 0 0 0 [ 1418.976517] Node 1 Normal free:118476kB min:53696kB low:67120kB high:80544kB active_anon:17548kB inactive_anon:23088kB active_file:0kB inactive_file:1404kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:6304kB pagetables:18808kB bounce:0kB free_pcp:692kB local_pcp:0kB free_cma:0kB [ 1419.006575] lowmem_reserve[]: 0 0 0 0 0 [ 1419.011602] Node 0 DMA: 18*4kB (UME) 56*8kB (UME) 45*16kB (UME) 18*32kB (UME) 3*64kB (ME) 2*128kB (UM) 2*256kB (UE) 2*512kB (ME) 3*1024kB (UME) 2*2048kB (ME) 0*4096kB = 10968kB [ 1419.021918] (ME) [ 1419.028764] Node 0 DMA32: 2363*4kB (UMEH) 1454*8kB (UMEH) 233*16kB (UMEH) 315*32kB (UMEH) 322*64kB (UH) 2*128kB (UH) 2*256kB (H) 0*512kB 1*1024kB (H) 0*2048kB 0*4096kB = 57292kB [ 1419.049265] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1419.051660] 3*1024kB [ 1419.060878] Node 1 Normal: 857*4kB (U) 137*8kB (UM) 94*16kB (UM) 842*32kB (U) 441*64kB (UM) 71*128kB (UM) 1*256kB (M) 0*512kB 71*1024kB (U) 5*2048kB (U) 0*4096kB = 153484kB [ 1419.095975] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1419.105096] (UME) 2*2048kB (ME) 0*4096kB = 10968kB [ 1419.113087] Node 0 hugepages_total=1 hugepages_free=1 hugepages_surp=1 hugepages_size=2048kB [ 1419.140517] Node 0 DMA32: 1681*4kB (UMEH) 1239*8kB (UMEH) 292*16kB (UMEH) 315*32kB (UMEH) 1158*64kB (UH) 29*128kB (UH) 13*256kB (UH) 0*512kB 1*1024kB (H) 0*2048kB 0*4096kB = 113564kB [ 1419.140761] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1419.194879] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1419.221161] 27667 total pagecache pages [ 1419.225588] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1419.231426] 0 pages in swap cache [ 1419.251053] Swap cache stats: add 0, delete 0, find 0/0 [ 1419.256425] Free swap = 0kB [ 1419.259442] Total swap = 0kB [ 1419.280536] 2097051 pages RAM [ 1419.283650] 0 pages HighMem/MovableOnly [ 1419.288033] 363846 pages reserved [ 1419.291917] warn_alloc_show_mem: 2 callbacks suppressed [ 1419.291921] Mem-Info: [ 1419.299718] active_anon:76855 inactive_anon:25049 isolated_anon:0 [ 1419.299718] active_file:143 inactive_file:2205 isolated_file:0 [ 1419.299718] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1419.299718] slab_reclaimable:13317 slab_unreclaimable:127000 [ 1419.299718] mapped:54782 shmem:25392 pagetables:8913 bounce:0 [ 1419.299718] free:63859 free_pcp:413 free_cma:0 [ 1419.310499] Node 1 [ 1419.341419] 0 pages cma reserved [ 1419.347037] Out of memory: Kill process 21448 (syz-executor.3) score 1005 or sacrifice child [ 1419.370541] Killed process 21448 (syz-executor.3) total-vm:93384kB, anon-rss:2200kB, file-rss:34628kB, shmem-rss:0kB [ 1419.411083] Node 0 active_anon:289872kB inactive_anon:77108kB active_file:572kB inactive_file:7416kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:212520kB dirty:0kB writeback:0kB shmem:78336kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 235520kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1419.420205] oom_reaper: reaped process 21448 (syz-executor.3), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1419.453026] Normal: 863*4kB (UM) 140*8kB (U) 97*16kB (U) 961*32kB (UM) 1238*64kB (U) 231*128kB (U) 0*256kB 1*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 146188kB [ 1419.470560] Node 1 active_anon:17548kB inactive_anon:23088kB active_file:0kB inactive_file:1404kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:6708kB dirty:0kB writeback:0kB shmem:23232kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1419.506225] Node 0 DMA free:10968kB min:204kB low:252kB high:300kB active_anon:2100kB inactive_anon:8kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:56kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1419.532848] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1419.532856] Node 0 hugepages_total=1 hugepages_free=1 hugepages_surp=1 hugepages_size=2048kB [ 1419.532862] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1419.532868] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1419.532872] 27815 total pagecache pages [ 1419.532881] 0 pages in swap cache [ 1419.532886] Swap cache stats: add 0, delete 0, find 0/0 [ 1419.532889] Free swap = 0kB [ 1419.532891] Total swap = 0kB [ 1419.532897] 2097051 pages RAM [ 1419.532900] 0 pages HighMem/MovableOnly [ 1419.532904] 363846 pages reserved [ 1419.532907] 0 pages cma reserved [ 1419.632609] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1419.637671] Node 0 DMA32 free:194168kB min:36200kB low:45248kB high:54296kB active_anon:285764kB inactive_anon:77100kB active_file:572kB inactive_file:7416kB unevictable:0kB writepending:0kB present:3129332kB managed:2788136kB mlocked:0kB kernel_stack:12032kB pagetables:16640kB bounce:0kB free_pcp:1400kB local_pcp:712kB free_cma:0kB [ 1419.699175] lowmem_reserve[]: 0 0 0 0 0 [ 1419.705958] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1419.820877] lowmem_reserve[]: 0 0 0 0 0 [ 1419.828045] Node 1 Normal free:69348kB min:53696kB low:67120kB high:80544kB active_anon:17548kB inactive_anon:23088kB active_file:0kB inactive_file:1404kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:6304kB pagetables:18808kB bounce:0kB free_pcp:1368kB local_pcp:668kB free_cma:0kB [ 1419.859221] lowmem_reserve[]: 0 0 0 0 0 [ 1419.863628] Node 0 DMA: 18*4kB (UME) 56*8kB (UME) 45*16kB (UME) 18*32kB (UME) 3*64kB (ME) 2*128kB (UM) 2*256kB (UE) 2*512kB (ME) 3*1024kB (UME) 2*2048kB (ME) 0*4096kB = 10968kB [ 1419.900058] Node 0 DMA32: 15074*4kB (UEH) 7551*8kB (UMEH) 6919*16kB (UMEH) 2413*32kB (UEH) 15*64kB (UMH) 1*128kB (H) 2*256kB (H) 0*512kB 1*1024kB (H) 0*2048kB 0*4096kB = 311248kB 20:22:33 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r1, 0x800454cf, &(0x7f0000000240)) ioctl$TUNSETSNDBUF(r1, 0x400454d4, &(0x7f0000000040)=0x1000) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r2, 0x800454cf, &(0x7f0000000240)) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000080)={'lo\x00', @broadcast}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000180)={0x80000000, 0xa}) [ 1419.917701] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1419.964018] Node 1 Normal: 1485*4kB (UE) 1403*8kB (U) 991*16kB (UE) 1136*32kB (U) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 69372kB [ 1420.016335] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1420.048168] Node 0 hugepages_total=1 hugepages_free=1 hugepages_surp=1 hugepages_size=2048kB [ 1420.070547] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1420.079576] syz-executor.5: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1420.081330] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1420.100283] syz-executor.0: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1420.120565] 28469 total pagecache pages [ 1420.122114] syz-executor.5 cpuset= [ 1420.124550] 0 pages in swap cache [ 1420.124557] Swap cache stats: add 0, delete 0, find 0/0 [ 1420.124560] Free swap = 0kB [ 1420.124564] Total swap = 0kB [ 1420.124572] 2097051 pages RAM [ 1420.130347] / [ 1420.146087] 0 pages HighMem/MovableOnly [ 1420.153746] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 1420.158892] CPU: 1 PID: 2206 Comm: syz-executor.0 Not tainted 4.14.228-syzkaller #0 [ 1420.166682] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1420.169162] mems_allowed=0-1 [ 1420.176122] Call Trace: [ 1420.176144] dump_stack+0x1b2/0x281 [ 1420.176158] warn_alloc.cold+0x96/0x1cc [ 1420.176170] ? zone_watermark_ok_safe+0x220/0x220 [ 1420.176192] __alloc_pages_nodemask+0x2127/0x2720 [ 1420.199107] ? lock_acquire+0x170/0x3f0 [ 1420.203085] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1420.207928] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1420.213370] ? __mutex_unlock_slowpath+0x75/0x770 [ 1420.218208] alloc_pages_current+0x155/0x260 [ 1420.222610] ion_page_pool_alloc+0x118/0x1b0 [ 1420.227010] ion_system_heap_allocate+0x133/0x8c0 [ 1420.231845] ? _raw_spin_unlock+0x29/0x40 [ 1420.235984] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1420.240908] ? ion_system_contig_heap_create+0x130/0x130 [ 1420.246355] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1420.251370] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1420.256203] ion_alloc+0x27a/0x810 [ 1420.259738] ? ion_dma_buf_release+0x40/0x40 [ 1420.264137] ? __might_fault+0x177/0x1b0 [ 1420.268192] ion_ioctl+0xea/0x1f0 [ 1420.271640] ? ion_query_heaps+0x360/0x360 [ 1420.275871] ? __tun_chr_ioctl.isra.0+0x3310/0x3310 [ 1420.280878] ? ion_query_heaps+0x360/0x360 [ 1420.285113] do_vfs_ioctl+0x75a/0xff0 [ 1420.288909] ? ioctl_preallocate+0x1a0/0x1a0 [ 1420.293315] ? lock_downgrade+0x740/0x740 [ 1420.297458] ? __fget+0x225/0x360 [ 1420.300902] ? do_vfs_ioctl+0xff0/0xff0 [ 1420.304871] ? security_file_ioctl+0x83/0xb0 [ 1420.309269] SyS_ioctl+0x7f/0xb0 [ 1420.312624] ? do_vfs_ioctl+0xff0/0xff0 [ 1420.316591] do_syscall_64+0x1d5/0x640 [ 1420.320475] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1420.325656] RIP: 0033:0x466459 [ 1420.328836] RSP: 002b:00007f2e01ed3188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1420.336540] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1420.343802] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1420.350272] 363846 pages reserved [ 1420.351059] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1420.351065] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1420.351070] R13: 00007ffdb70bf23f R14: 00007f2e01ed3300 R15: 0000000000022000 [ 1420.385549] CPU: 0 PID: 2205 Comm: syz-executor.5 Not tainted 4.14.228-syzkaller #0 [ 1420.389051] syz-executor.4: [ 1420.393357] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1420.393361] Call Trace: [ 1420.393379] dump_stack+0x1b2/0x281 [ 1420.393395] warn_alloc.cold+0x96/0x1cc [ 1420.393410] ? zone_watermark_ok_safe+0x220/0x220 [ 1420.396414] page allocation failure: order:4 [ 1420.405765] __alloc_pages_nodemask+0x2127/0x2720 [ 1420.405777] ? lock_acquire+0x170/0x3f0 [ 1420.405790] ? lock_acquire+0x170/0x3f0 [ 1420.413219] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1420.415945] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1420.420800] (null) [ 1420.425181] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1420.429988] syz-executor.4 cpuset= [ 1420.433993] ? __mutex_unlock_slowpath+0x75/0x770 [ 1420.434008] alloc_pages_current+0x155/0x260 [ 1420.434022] ion_page_pool_alloc+0x118/0x1b0 [ 1420.434032] ion_system_heap_allocate+0x133/0x8c0 [ 1420.434055] ? _raw_spin_unlock+0x29/0x40 [ 1420.440500] / [ 1420.445118] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1420.449951] mems_allowed=0-1 [ 1420.452085] ? ion_system_contig_heap_create+0x130/0x130 [ 1420.452096] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1420.452107] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1420.452118] ion_alloc+0x27a/0x810 [ 1420.512044] ? ion_dma_buf_release+0x40/0x40 [ 1420.516447] ? __might_fault+0x177/0x1b0 [ 1420.520501] ion_ioctl+0xea/0x1f0 [ 1420.523944] ? ion_query_heaps+0x360/0x360 [ 1420.528177] ? __tun_chr_ioctl.isra.0+0x3310/0x3310 [ 1420.533181] ? ion_query_heaps+0x360/0x360 [ 1420.537420] do_vfs_ioctl+0x75a/0xff0 [ 1420.541211] ? ioctl_preallocate+0x1a0/0x1a0 [ 1420.545607] ? lock_downgrade+0x740/0x740 [ 1420.549758] ? __fget+0x225/0x360 [ 1420.553211] ? do_vfs_ioctl+0xff0/0xff0 [ 1420.557174] ? security_file_ioctl+0x83/0xb0 [ 1420.561572] SyS_ioctl+0x7f/0xb0 [ 1420.564934] ? do_vfs_ioctl+0xff0/0xff0 [ 1420.568907] do_syscall_64+0x1d5/0x640 [ 1420.572795] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1420.577972] RIP: 0033:0x466459 [ 1420.580497] warn_alloc_show_mem: 1 callbacks suppressed [ 1420.580501] Mem-Info: [ 1420.581150] RSP: 002b:00007f2761281188 EFLAGS: 00000246 [ 1420.586512] active_anon:76360 inactive_anon:25050 isolated_anon:0 [ 1420.586512] active_file:605 inactive_file:2464 isolated_file:0 [ 1420.586512] unevictable:0 dirty:13 writeback:0 unstable:0 [ 1420.586512] slab_reclaimable:13317 slab_unreclaimable:126846 [ 1420.586512] mapped:55326 shmem:25394 pagetables:8867 bounce:0 [ 1420.586512] free:185975 free_pcp:349 free_cma:0 [ 1420.588881] ORIG_RAX: 0000000000000010 [ 1420.588889] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1420.620504] Node 0 active_anon:287892kB inactive_anon:77116kB active_file:1928kB inactive_file:8808kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:214152kB dirty:48kB writeback:0kB shmem:78344kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 233472kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1420.627976] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1420.641340] Node 1 active_anon:17548kB inactive_anon:23084kB active_file:492kB inactive_file:1048kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:7152kB dirty:4kB writeback:0kB shmem:23232kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1420.667457] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1420.667463] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1420.667468] R13: 00007ffddf757caf R14: 00007f2761281300 R15: 0000000000022000 [ 1420.673523] 0 pages cma reserved [ 1420.677979] CPU: 1 PID: 2207 Comm: syz-executor.4 Not tainted 4.14.228-syzkaller #0 [ 1420.710867] syz-executor.2: [ 1420.716701] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1420.716706] Call Trace: [ 1420.716725] dump_stack+0x1b2/0x281 [ 1420.716739] warn_alloc.cold+0x96/0x1cc [ 1420.727319] page allocation failure: order:4 [ 1420.727346] ? zone_watermark_ok_safe+0x220/0x220 [ 1420.735242] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1420.738163] __alloc_pages_nodemask+0x2127/0x2720 [ 1420.738181] ? lock_acquire+0x170/0x3f0 [ 1420.756038] (null) [ 1420.757675] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1420.757695] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1420.771162] syz-executor.2 cpuset= [ 1420.773997] ? __mutex_unlock_slowpath+0x75/0x770 [ 1420.774009] ? __list_del_entry_valid+0xb3/0xf0 [ 1420.774022] alloc_pages_current+0x155/0x260 [ 1420.779693] syz-executor.3: [ 1420.782818] ion_page_pool_alloc+0x118/0x1b0 [ 1420.782829] ion_system_heap_allocate+0x133/0x8c0 [ 1420.782841] ? _raw_spin_unlock+0x29/0x40 [ 1420.782850] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1420.782859] ? ion_system_contig_heap_create+0x130/0x130 [ 1420.782870] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1420.782881] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1420.782891] ion_alloc+0x27a/0x810 [ 1420.782904] ? ion_dma_buf_release+0x40/0x40 [ 1420.787574] / [ 1420.789877] ? __might_fault+0x177/0x1b0 [ 1420.796086] page allocation failure: order:4 [ 1420.798849] ion_ioctl+0xea/0x1f0 [ 1420.798859] ? ion_query_heaps+0x360/0x360 [ 1420.798871] ? ion_query_heaps+0x360/0x360 [ 1420.808953] mems_allowed=0-1 [ 1420.812740] do_vfs_ioctl+0x75a/0xff0 [ 1420.812754] ? ioctl_preallocate+0x1a0/0x1a0 [ 1420.812764] ? lock_downgrade+0x740/0x740 [ 1420.812777] ? __fget+0x225/0x360 [ 1420.812786] ? do_vfs_ioctl+0xff0/0xff0 [ 1420.812798] ? security_file_ioctl+0x83/0xb0 [ 1420.812808] SyS_ioctl+0x7f/0xb0 [ 1420.816484] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1420.820203] ? do_vfs_ioctl+0xff0/0xff0 [ 1420.820215] do_syscall_64+0x1d5/0x640 [ 1420.820230] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1420.834449] (null) [ 1420.839530] RIP: 0033:0x466459 [ 1420.839535] RSP: 002b:00007f6a95319188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1420.839548] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1420.859136] syz-executor.3 cpuset= [ 1420.863037] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1420.863043] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1420.863048] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1420.863054] R13: 00007ffc0329f33f R14: 00007f6a95319300 R15: 0000000000022000 [ 1420.876050] Node 0 [ 1420.879575] CPU: 0 PID: 2233 Comm: syz-executor.2 Not tainted 4.14.228-syzkaller #0 [ 1420.890509] DMA free:11016kB min:204kB low:252kB high:300kB active_anon:2100kB inactive_anon:8kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:56kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1420.890776] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1420.894924] lowmem_reserve[]: [ 1420.898358] Call Trace: [ 1420.911020] 0 [ 1420.917145] dump_stack+0x1b2/0x281 [ 1420.921118] 2717 [ 1420.924973] warn_alloc.cold+0x96/0x1cc [ 1420.930141] 2718 [ 1420.932277] ? zone_watermark_ok_safe+0x220/0x220 [ 1420.932301] __alloc_pages_nodemask+0x2127/0x2720 [ 1420.935470] 2718 [ 1420.943184] ? lock_acquire+0x170/0x3f0 [ 1420.943199] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1420.943217] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1420.943229] ? __mutex_unlock_slowpath+0x75/0x770 [ 1420.954925] 2718 [ 1420.961299] alloc_pages_current+0x155/0x260 [ 1420.961314] ion_page_pool_alloc+0x118/0x1b0 [ 1420.961326] ion_system_heap_allocate+0x133/0x8c0 [ 1420.975856] ? ion_alloc+0x187/0x810 [ 1420.975868] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1420.975879] ? ion_system_contig_heap_create+0x130/0x130 [ 1420.975889] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1420.975903] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1420.985012] Node 0 [ 1420.985382] ion_alloc+0x204/0x810 [ 1420.994015] DMA32 free:593268kB min:36200kB low:45248kB high:54296kB active_anon:285792kB inactive_anon:77108kB active_file:1928kB inactive_file:8808kB unevictable:0kB writepending:48kB present:3129332kB managed:2788136kB mlocked:0kB kernel_stack:12032kB pagetables:16604kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1421.019101] ? ion_dma_buf_release+0x40/0x40 [ 1421.019115] ? __might_fault+0x177/0x1b0 [ 1421.019128] ion_ioctl+0xea/0x1f0 [ 1421.028496] lowmem_reserve[]: [ 1421.031563] ? ion_query_heaps+0x360/0x360 [ 1421.031577] ? __tun_chr_ioctl.isra.0+0x3310/0x3310 [ 1421.031584] ? ion_query_heaps+0x360/0x360 [ 1421.031595] do_vfs_ioctl+0x75a/0xff0 [ 1421.031606] ? ioctl_preallocate+0x1a0/0x1a0 [ 1421.040506] 0 [ 1421.041629] ? lock_downgrade+0x740/0x740 [ 1421.045576] 0 [ 1421.047645] ? __fget+0x225/0x360 [ 1421.053925] 0 [ 1421.057288] ? do_vfs_ioctl+0xff0/0xff0 [ 1421.059330] 0 [ 1421.063288] ? security_file_ioctl+0x83/0xb0 [ 1421.063299] SyS_ioctl+0x7f/0xb0 [ 1421.063308] ? do_vfs_ioctl+0xff0/0xff0 [ 1421.063319] do_syscall_64+0x1d5/0x640 [ 1421.068139] 0 [ 1421.073580] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1421.073588] RIP: 0033:0x466459 [ 1421.073593] RSP: 002b:00007f613992b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1421.073603] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1421.073608] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1421.073616] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1421.094132] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1421.097826] Node 0 [ 1421.103254] R13: 00007fff85f2b35f R14: 00007f613992b300 R15: 0000000000022000 [ 1421.103747] / [ 1421.130517] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1421.153135] mems_allowed=0-1 [ 1421.193639] lowmem_reserve[]: [ 1421.195874] CPU: 0 PID: 2221 Comm: syz-executor.3 Not tainted 4.14.228-syzkaller #0 [ 1421.197550] 0 [ 1421.200979] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1421.200983] Call Trace: [ 1421.201004] dump_stack+0x1b2/0x281 [ 1421.201018] warn_alloc.cold+0x96/0x1cc [ 1421.201030] ? zone_watermark_ok_safe+0x220/0x220 [ 1421.201052] __alloc_pages_nodemask+0x2127/0x2720 [ 1421.201069] ? lock_acquire+0x170/0x3f0 [ 1421.201086] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1421.201104] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1421.201117] ? __mutex_unlock_slowpath+0x75/0x770 [ 1421.201128] ? ion_page_pool_alloc+0x28/0x1b0 [ 1421.201141] alloc_pages_current+0x155/0x260 [ 1421.201151] ion_page_pool_alloc+0x118/0x1b0 [ 1421.217093] 0 [ 1421.220388] ion_system_heap_allocate+0x133/0x8c0 [ 1421.230489] 0 [ 1421.231223] ? _raw_spin_unlock+0x29/0x40 [ 1421.234389] 0 [ 1421.242081] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1421.242091] ? ion_system_contig_heap_create+0x130/0x130 [ 1421.242102] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1421.242116] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1421.270502] 0 [ 1421.271147] ion_alloc+0x27a/0x810 [ 1421.280620] ? ion_dma_buf_release+0x40/0x40 [ 1421.280634] ? __might_fault+0x177/0x1b0 [ 1421.280645] ion_ioctl+0xea/0x1f0 [ 1421.292439] Node 1 [ 1421.307233] ? ion_query_heaps+0x360/0x360 [ 1421.307249] ? __tun_chr_ioctl.isra.0+0x3310/0x3310 [ 1421.307260] ? ion_query_heaps+0x360/0x360 [ 1421.330513] Normal free:138568kB min:53696kB low:67120kB high:80544kB active_anon:17548kB inactive_anon:23084kB active_file:492kB inactive_file:1048kB unevictable:0kB writepending:4kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:6304kB pagetables:18808kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1421.332351] do_vfs_ioctl+0x75a/0xff0 [ 1421.334913] lowmem_reserve[]: [ 1421.338529] ? ioctl_preallocate+0x1a0/0x1a0 [ 1421.360498] 0 [ 1421.360926] ? lock_downgrade+0x740/0x740 [ 1421.366362] 0 [ 1421.371194] ? __fget+0x225/0x360 [ 1421.371205] ? do_vfs_ioctl+0xff0/0xff0 [ 1421.371218] ? security_file_ioctl+0x83/0xb0 [ 1421.390504] 0 [ 1421.391096] SyS_ioctl+0x7f/0xb0 [ 1421.392876] 0 [ 1421.397006] ? do_vfs_ioctl+0xff0/0xff0 [ 1421.398778] 0 [ 1421.403692] do_syscall_64+0x1d5/0x640 [ 1421.403708] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1421.403717] RIP: 0033:0x466459 [ 1421.432784] RSP: 002b:00007f6ba9361188 EFLAGS: 00000246 [ 1421.436229] Node 0 [ 1421.438442] ORIG_RAX: 0000000000000010 [ 1421.460507] DMA: [ 1421.480319] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1421.480325] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1421.480329] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1421.480334] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1421.480339] R13: 00007ffd9352709f R14: 00007f6ba9361300 R15: 0000000000022000 [ 1421.483673] warn_alloc_show_mem: 1 callbacks suppressed [ 1421.483676] Mem-Info: [ 1421.513681] 46*4kB [ 1421.518453] active_anon:76367 inactive_anon:25049 isolated_anon:0 [ 1421.518453] active_file:605 inactive_file:2470 isolated_file:0 [ 1421.518453] unevictable:0 dirty:14 writeback:0 unstable:0 [ 1421.518453] slab_reclaimable:13317 slab_unreclaimable:126909 [ 1421.518453] mapped:55349 shmem:25394 pagetables:8867 bounce:0 [ 1421.518453] free:138021 free_pcp:11 free_cma:0 [ 1421.543029] (UME) [ 1421.545119] Node 0 active_anon:287920kB inactive_anon:77112kB active_file:1928kB inactive_file:8832kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:214160kB dirty:52kB writeback:0kB shmem:78344kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 233472kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1421.548035] 56*8kB (UME) 45*16kB (UME) 18*32kB (UME) 4*64kB (UME) 1*128kB [ 1421.550152] Node 1 active_anon:17548kB inactive_anon:23084kB active_file:492kB inactive_file:1048kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:7236kB dirty:4kB writeback:0kB shmem:23232kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1421.571788] (M) [ 1421.573758] Node 0 [ 1421.579332] 2*256kB (UE) 2*512kB (ME) 3*1024kB (UME) 2*2048kB (ME) [ 1421.587503] DMA free:11016kB min:204kB low:252kB high:300kB active_anon:2100kB inactive_anon:8kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:56kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1421.644235] 0*4096kB [ 1421.662166] lowmem_reserve[]: [ 1421.699377] = 11016kB [ 1421.704699] 0 [ 1421.730496] Node 0 [ 1421.733166] 2717 [ 1421.735315] DMA32: [ 1421.737892] 2718 [ 1421.740271] 706*4kB (UMEH) 369*8kB (MEH) 3098*16kB (UMEH) [ 1421.743720] 2718 [ 1421.764120] 6816*32kB (UEH) 47*64kB (UH) 1*128kB (H) 2*256kB (H) 0*512kB 1*1024kB (H) 0*2048kB 0*4096kB = 278128kB [ 1421.770602] 2718 [ 1421.785491] Node 0 DMA32 free:242576kB min:36200kB low:45248kB high:54296kB active_anon:285820kB inactive_anon:77104kB active_file:1928kB inactive_file:8832kB unevictable:0kB writepending:52kB present:3129332kB managed:2788136kB mlocked:0kB kernel_stack:12032kB pagetables:16604kB bounce:0kB free_pcp:76kB local_pcp:76kB free_cma:0kB [ 1421.810497] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1421.833042] Node 1 Normal: 3540*4kB (UME) 3223*8kB (UME) 2372*16kB (UME) [ 1421.850540] lowmem_reserve[]: [ 1421.864201] 1896*32kB [ 1421.865192] 0 [ 1421.867317] (UE) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB [ 1421.871688] 0 [ 1421.880516] 0*2048kB 0*4096kB = 138568kB [ 1421.883837] 0 [ 1421.886385] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1421.886392] Node 0 hugepages_total=1 hugepages_free=1 hugepages_surp=1 hugepages_size=2048kB [ 1421.886402] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1421.890391] 0 [ 1421.899980] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1421.920523] 0 [ 1421.926896] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1421.960399] lowmem_reserve[]: 0 0 0 0 0 [ 1421.974523] Node 1 Normal free:138568kB min:53696kB low:67120kB high:80544kB active_anon:17548kB inactive_anon:23084kB active_file:492kB inactive_file:1048kB unevictable:0kB writepending:4kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:6304kB pagetables:18808kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1421.994435] 28469 total pagecache pages [ 1422.028944] lowmem_reserve[]: 0 0 0 0 0 [ 1422.032231] 0 pages in swap cache [ 1422.039740] Node 0 DMA: 46*4kB (UME) 56*8kB (UME) 45*16kB (UME) 18*32kB (UME) 4*64kB (UME) 1*128kB (M) 2*256kB (UE) 2*512kB (ME) 3*1024kB (UME) 2*2048kB (ME) 0*4096kB = 11016kB [ 1422.044544] Swap cache stats: add 0, delete 0, find 0/0 [ 1422.080551] Node 0 DMA32: 705*4kB (MEH) 370*8kB (UMEH) 109*16kB (UMEH) 959*32kB (UEH) 49*64kB (UH) 3*128kB (UH) 2*256kB (H) 0*512kB 1*1024kB (H) 0*2048kB 0*4096kB = 43268kB [ 1422.110667] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1422.111653] Free swap = 0kB [ 1422.163762] Node 1 Normal: 20*4kB (UME) 12*8kB (UME) 6*16kB (UME) 1674*32kB (UE) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 53840kB [ 1422.166460] Total swap = 0kB [ 1422.202357] 2097051 pages RAM [ 1422.212115] 0 pages HighMem/MovableOnly [ 1422.214398] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1422.225146] 363846 pages reserved [ 1422.235272] 0 pages cma reserved [ 1422.263831] Node 0 hugepages_total=1 hugepages_free=1 hugepages_surp=1 hugepages_size=2048kB [ 1422.282728] systemd-journal invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=0 [ 1422.283747] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1422.303269] systemd-journal cpuset=/ mems_allowed=0-1 [ 1422.315996] CPU: 1 PID: 1058 Comm: systemd-journal Not tainted 4.14.228-syzkaller #0 [ 1422.323631] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1422.323880] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1422.341801] Call Trace: [ 1422.344388] dump_stack+0x1b2/0x281 [ 1422.348015] dump_header+0x178/0x82f [ 1422.350510] 26619 total pagecache pages [ 1422.351722] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1422.355676] 0 pages in swap cache [ 1422.360759] ? ___ratelimit+0x2cd/0x530 [ 1422.360770] oom_kill_process.cold+0x10/0xb18 [ 1422.360789] out_of_memory+0xe3e/0x1190 [ 1422.360801] ? oom_killer_disable+0x1c0/0x1c0 [ 1422.360810] ? mutex_trylock+0x152/0x1a0 [ 1422.360821] __alloc_pages_nodemask+0x23e1/0x2720 [ 1422.360841] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1422.383591] Swap cache stats: add 0, delete 0, find 0/0 [ 1422.385221] ? cache_grow_begin+0x41/0x630 [ 1422.390029] Free swap = 0kB [ 1422.394853] cache_grow_begin+0x91/0x630 [ 1422.394863] ? cache_grow_begin+0x91/0x630 [ 1422.394872] fallback_alloc+0x207/0x2c0 [ 1422.394884] kmem_cache_alloc+0x1e5/0x3c0 [ 1422.394896] getname_flags+0xc8/0x550 [ 1422.394907] user_path_at_empty+0x2a/0x50 [ 1422.423609] Total swap = 0kB [ 1422.423952] SyS_faccessat+0x21b/0x680 [ 1422.427727] 2097051 pages RAM [ 1422.431908] ? SyS_fallocate+0x80/0x80 [ 1422.431918] ? do_syscall_64+0x4c/0x640 [ 1422.431923] ? SyS_faccessat+0x680/0x680 [ 1422.431931] do_syscall_64+0x1d5/0x640 [ 1422.431944] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1422.431952] RIP: 0033:0x7f9e14a499c7 [ 1422.431956] RSP: 002b:00007ffeeda1a2f8 EFLAGS: 00000246 ORIG_RAX: 0000000000000015 [ 1422.450516] 0 pages HighMem/MovableOnly [ 1422.453803] RAX: ffffffffffffffda RBX: 00007ffeeda1d210 RCX: 00007f9e14a499c7 [ 1422.457672] 363846 pages reserved [ 1422.462844] RDX: 00007f9e154baa00 RSI: 0000000000000000 RDI: 0000562cda8a09a3 [ 1422.462849] RBP: 00007ffeeda1a330 R08: 0000000000000000 R09: 0000000000000000 [ 1422.462853] R10: 0000000000000069 R11: 0000000000000246 R12: 0000000000000000 [ 1422.462857] R13: 0000000000000000 R14: 00007ffeeda1d210 R15: 00007ffeeda1a820 [ 1422.601793] 0 pages cma reserved [ 1422.720553] syz-executor.0: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1422.730554] syz-executor.5: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1422.732456] syz-executor.4: [ 1422.752393] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 1422.757163] page allocation failure: order:0 [ 1422.765013] syz-executor.0 cpuset= [ 1422.765995] CPU: 0 PID: 2205 Comm: syz-executor.5 Not tainted 4.14.228-syzkaller #0 [ 1422.775780] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1422.776429] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1422.784252] / [ 1422.791297] Call Trace: [ 1422.800678] (null) [ 1422.802370] dump_stack+0x1b2/0x281 [ 1422.804922] syz-executor.4 cpuset= [ 1422.807060] warn_alloc.cold+0x96/0x1cc [ 1422.810708] / [ 1422.814199] ? zone_watermark_ok_safe+0x220/0x220 [ 1422.818145] mems_allowed=0-1 [ 1422.819862] ? usleep_range+0x130/0x130 [ 1422.824732] mems_allowed=0-1 [ 1422.827776] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1422.839895] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1422.844901] ? run_timer_softirq+0x5a0/0x5a0 [ 1422.849320] __alloc_pages_nodemask+0x2127/0x2720 [ 1422.854184] ? lock_acquire+0x170/0x3f0 [ 1422.858156] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1422.862994] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1422.867484] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1422.872932] alloc_pages_current+0x155/0x260 [ 1422.877332] ion_page_pool_alloc+0x118/0x1b0 [ 1422.881760] ion_system_heap_allocate+0x133/0x8c0 [ 1422.886599] ? _raw_spin_unlock+0x29/0x40 [ 1422.890737] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1422.895655] ? ion_system_contig_heap_create+0x130/0x130 [ 1422.901095] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1422.906102] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1422.910951] ion_alloc+0x27a/0x810 [ 1422.914483] ? ion_dma_buf_release+0x40/0x40 [ 1422.918882] ? __might_fault+0x177/0x1b0 [ 1422.920486] Mem-Info: [ 1422.922932] ion_ioctl+0xea/0x1f0 [ 1422.925340] active_anon:76367 inactive_anon:25049 isolated_anon:0 [ 1422.925340] active_file:33 inactive_file:6 isolated_file:0 [ 1422.925340] unevictable:0 dirty:14 writeback:0 unstable:0 [ 1422.925340] slab_reclaimable:13317 slab_unreclaimable:126543 [ 1422.925340] mapped:53185 shmem:25394 pagetables:8867 bounce:0 [ 1422.925340] free:13824 free_pcp:0 free_cma:0 [ 1422.928776] ? ion_query_heaps+0x360/0x360 [ 1422.966157] ? __tun_chr_ioctl.isra.0+0x3310/0x3310 [ 1422.971164] ? ion_query_heaps+0x360/0x360 [ 1422.975390] do_vfs_ioctl+0x75a/0xff0 [ 1422.979183] ? ioctl_preallocate+0x1a0/0x1a0 [ 1422.983584] ? lock_downgrade+0x740/0x740 [ 1422.987841] ? __fget+0x225/0x360 [ 1422.991305] ? do_vfs_ioctl+0xff0/0xff0 [ 1422.995272] ? security_file_ioctl+0x83/0xb0 [ 1422.999668] SyS_ioctl+0x7f/0xb0 [ 1423.003023] ? do_vfs_ioctl+0xff0/0xff0 [ 1423.006986] do_syscall_64+0x1d5/0x640 [ 1423.010867] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1423.016046] RIP: 0033:0x466459 [ 1423.019229] RSP: 002b:00007f2761281188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1423.026926] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1423.034187] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1423.041455] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1423.048713] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1423.050503] Node 0 active_anon:287920kB inactive_anon:77112kB active_file:68kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:206664kB dirty:52kB writeback:0kB shmem:78344kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 233472kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1423.055983] R13: 00007ffddf757caf R14: 00007f2761281300 R15: 0000000000022000 [ 1423.073676] CPU: 0 PID: 2207 Comm: syz-executor.4 Not tainted 4.14.228-syzkaller #0 [ 1423.086211] syz-executor.3: [ 1423.091097] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1423.091102] Call Trace: [ 1423.091122] dump_stack+0x1b2/0x281 [ 1423.091136] warn_alloc.cold+0x96/0x1cc [ 1423.091148] ? zone_watermark_ok_safe+0x220/0x220 [ 1423.091161] ? usleep_range+0x130/0x130 [ 1423.120497] page allocation failure: order:0 [ 1423.121434] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1423.126254] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1423.130224] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1423.140486] (null) [ 1423.146779] ? run_timer_softirq+0x5a0/0x5a0 [ 1423.158303] __alloc_pages_nodemask+0x2127/0x2720 [ 1423.160508] Node 1 active_anon:17548kB inactive_anon:23088kB active_file:12kB inactive_file:36kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:5996kB dirty:4kB writeback:0kB shmem:23232kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1423.163141] ? lock_acquire+0x170/0x3f0 [ 1423.194241] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1423.199079] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1423.200489] syz-executor.3 cpuset=/ [ 1423.203568] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1423.203587] alloc_pages_current+0x155/0x260 [ 1423.207209] mems_allowed=0-1 [ 1423.212658] ion_page_pool_alloc+0x118/0x1b0 [ 1423.212668] ion_system_heap_allocate+0x133/0x8c0 [ 1423.212680] ? _raw_spin_unlock+0x29/0x40 [ 1423.212691] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1423.238395] ? ion_system_contig_heap_create+0x130/0x130 [ 1423.243837] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1423.248841] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1423.253676] ion_alloc+0x27a/0x810 [ 1423.257221] ? ion_dma_buf_release+0x40/0x40 [ 1423.260488] Node 0 DMA free:10960kB min:204kB low:252kB high:300kB active_anon:2100kB inactive_anon:8kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:56kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1423.261651] ? __might_fault+0x177/0x1b0 [ 1423.261663] ion_ioctl+0xea/0x1f0 [ 1423.295678] ? ion_query_heaps+0x360/0x360 [ 1423.299901] ? ion_query_heaps+0x360/0x360 [ 1423.304125] do_vfs_ioctl+0x75a/0xff0 [ 1423.307916] ? ioctl_preallocate+0x1a0/0x1a0 [ 1423.312326] ? lock_downgrade+0x740/0x740 [ 1423.316466] ? __fget+0x225/0x360 [ 1423.319906] ? do_vfs_ioctl+0xff0/0xff0 [ 1423.323872] ? security_file_ioctl+0x83/0xb0 [ 1423.328277] SyS_ioctl+0x7f/0xb0 [ 1423.331629] ? do_vfs_ioctl+0xff0/0xff0 [ 1423.335606] do_syscall_64+0x1d5/0x640 [ 1423.339526] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1423.340486] lowmem_reserve[]: [ 1423.344714] RIP: 0033:0x466459 [ 1423.344721] 0 [ 1423.347802] RSP: 002b:00007f6a95319188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1423.360450] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1423.367723] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1423.374978] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1423.380482] 2717 [ 1423.382233] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1423.382240] R13: 00007ffc0329f33f R14: 00007f6a95319300 R15: 0000000000022000 [ 1423.384284] 2718 [ 1423.398847] CPU: 1 PID: 2206 Comm: syz-executor.0 Not tainted 4.14.228-syzkaller #0 [ 1423.406737] warn_alloc_show_mem: 2 callbacks suppressed [ 1423.406741] Mem-Info: [ 1423.408676] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1423.417184] active_anon:76367 inactive_anon:25050 isolated_anon:0 [ 1423.417184] active_file:14 inactive_file:15 isolated_file:0 [ 1423.417184] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1423.417184] slab_reclaimable:13316 slab_unreclaimable:126557 [ 1423.417184] mapped:53123 shmem:25394 pagetables:8867 bounce:0 [ 1423.417184] free:14045 free_pcp:7 free_cma:0 [ 1423.425766] Call Trace: [ 1423.425789] dump_stack+0x1b2/0x281 [ 1423.425802] warn_alloc.cold+0x96/0x1cc [ 1423.425814] ? zone_watermark_ok_safe+0x220/0x220 [ 1423.425823] ? usleep_range+0x130/0x130 [ 1423.425833] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1423.425845] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1423.425873] ? run_timer_softirq+0x5a0/0x5a0 [ 1423.464502] Node 0 active_anon:287920kB inactive_anon:77112kB active_file:52kB inactive_file:56kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:206580kB dirty:0kB writeback:0kB shmem:78344kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 233472kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1423.465301] __alloc_pages_nodemask+0x2127/0x2720 [ 1423.469252] Node 1 active_anon:17548kB inactive_anon:23088kB active_file:4kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:5912kB dirty:0kB writeback:0kB shmem:23232kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1423.474083] ? lock_acquire+0x170/0x3f0 [ 1423.474106] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1423.474117] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1423.474135] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1423.478089] Node 0 [ 1423.483185] ? alloc_pages_current+0x84/0x260 [ 1423.483197] alloc_pages_current+0x155/0x260 [ 1423.483210] ion_page_pool_alloc+0x118/0x1b0 [ 1423.483220] ion_system_heap_allocate+0x133/0x8c0 [ 1423.483233] ? _raw_spin_unlock+0x29/0x40 [ 1423.483242] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1423.483252] ? ion_system_contig_heap_create+0x130/0x130 [ 1423.483265] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1423.492577] DMA free:10960kB min:204kB low:252kB high:300kB active_anon:2100kB inactive_anon:8kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:56kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1423.492653] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1423.525549] lowmem_reserve[]: [ 1423.552286] ion_alloc+0x27a/0x810 [ 1423.552300] ? ion_dma_buf_release+0x40/0x40 [ 1423.552313] ? __might_fault+0x177/0x1b0 [ 1423.552323] ion_ioctl+0xea/0x1f0 [ 1423.552331] ? ion_query_heaps+0x360/0x360 [ 1423.552344] ? __tun_chr_ioctl.isra.0+0x3310/0x3310 [ 1423.552351] ? ion_query_heaps+0x360/0x360 [ 1423.552360] do_vfs_ioctl+0x75a/0xff0 [ 1423.552372] ? ioctl_preallocate+0x1a0/0x1a0 [ 1423.552381] ? lock_downgrade+0x740/0x740 [ 1423.552395] ? __fget+0x225/0x360 [ 1423.552405] ? do_vfs_ioctl+0xff0/0xff0 [ 1423.552416] ? security_file_ioctl+0x83/0xb0 [ 1423.552430] SyS_ioctl+0x7f/0xb0 [ 1423.561676] 0 [ 1423.565714] ? do_vfs_ioctl+0xff0/0xff0 [ 1423.574541] 2717 [ 1423.577840] do_syscall_64+0x1d5/0x640 [ 1423.584441] 2718 [ 1423.586645] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1423.594683] 2718 [ 1423.595586] RIP: 0033:0x466459 [ 1423.602666] 2718 [ 1423.605925] RSP: 002b:00007f2e01ed3188 EFLAGS: 00000246 [ 1423.636842] ORIG_RAX: 0000000000000010 [ 1423.636849] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1423.636854] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1423.636858] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1423.636863] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1423.636868] R13: 00007ffdb70bf23f R14: 00007f2e01ed3300 R15: 0000000000022000 [ 1423.644867] CPU: 1 PID: 2221 Comm: syz-executor.3 Not tainted 4.14.228-syzkaller #0 [ 1423.651743] Node 0 [ 1423.652831] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1423.656883] DMA32 free:17632kB min:36200kB low:45248kB high:54296kB active_anon:285820kB inactive_anon:77104kB active_file:52kB inactive_file:56kB unevictable:0kB writepending:0kB present:3129332kB managed:2788136kB mlocked:0kB kernel_stack:12032kB pagetables:16604kB bounce:0kB free_pcp:28kB local_pcp:0kB free_cma:0kB [ 1423.660300] Call Trace: [ 1423.669685] lowmem_reserve[]: [ 1423.673729] dump_stack+0x1b2/0x281 [ 1423.673743] warn_alloc.cold+0x96/0x1cc [ 1423.673756] ? zone_watermark_ok_safe+0x220/0x220 [ 1423.673768] ? usleep_range+0x130/0x130 [ 1423.677547] 0 [ 1423.681936] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1423.681949] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1423.681960] ? run_timer_softirq+0x5a0/0x5a0 [ 1423.681978] __alloc_pages_nodemask+0x2127/0x2720 [ 1423.681994] ? lock_acquire+0x170/0x3f0 [ 1423.682010] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1423.682020] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1423.682035] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1423.691257] 0 [ 1423.693578] alloc_pages_current+0x155/0x260 [ 1423.697954] 0 [ 1423.701305] ion_page_pool_alloc+0x118/0x1b0 [ 1423.701316] ion_system_heap_allocate+0x133/0x8c0 [ 1423.701328] ? _raw_spin_unlock+0x29/0x40 [ 1423.701337] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1423.701347] ? ion_system_contig_heap_create+0x130/0x130 [ 1423.701358] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1423.701370] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1423.701382] ion_alloc+0x27a/0x810 [ 1423.707029] 0 [ 1423.707127] ? ion_dma_buf_release+0x40/0x40 [ 1423.709162] 0 [ 1423.713048] ? __might_fault+0x177/0x1b0 [ 1423.713060] ion_ioctl+0xea/0x1f0 [ 1423.713069] ? ion_query_heaps+0x360/0x360 [ 1423.713083] ? __tun_chr_ioctl.isra.0+0x3310/0x3310 [ 1423.713090] ? ion_query_heaps+0x360/0x360 [ 1423.713107] do_vfs_ioctl+0x75a/0xff0 [ 1423.713119] ? ioctl_preallocate+0x1a0/0x1a0 [ 1423.720339] ? lock_downgrade+0x740/0x740 [ 1423.726371] Node 0 [ 1423.727605] ? __fget+0x225/0x360 [ 1423.751790] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1423.758669] ? do_vfs_ioctl+0xff0/0xff0 [ 1423.812560] lowmem_reserve[]: [ 1423.820792] ? security_file_ioctl+0x83/0xb0 [ 1423.820805] SyS_ioctl+0x7f/0xb0 [ 1423.820813] ? do_vfs_ioctl+0xff0/0xff0 [ 1423.820826] do_syscall_64+0x1d5/0x640 [ 1423.820842] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1423.842385] 0 [ 1423.842854] RIP: 0033:0x466459 [ 1423.844640] 0 [ 1423.849744] RSP: 002b:00007f6ba9361188 EFLAGS: 00000246 [ 1423.882405] 0 [ 1423.882658] ORIG_RAX: 0000000000000010 [ 1423.884457] 0 [ 1423.888855] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1423.911812] 0 [ 1423.914319] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1423.924141] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1423.924146] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1423.924151] R13: 00007ffd9352709f R14: 00007f6ba9361300 R15: 0000000000022000 [ 1423.937719] 2718 [ 1423.940141] Node 1 [ 1423.958988] 2718 [ 1423.990601] Normal free:259944kB min:53696kB low:67120kB high:80544kB active_anon:17548kB inactive_anon:23088kB active_file:4kB inactive_file:804kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:6304kB pagetables:18808kB bounce:0kB free_pcp:216kB local_pcp:0kB free_cma:0kB [ 1424.127137] lowmem_reserve[]: 0 0 0 0 0 [ 1424.143700] Node 0 DMA: 32*4kB (UME) 56*8kB (UME) 45*16kB (UME) 18*32kB (UME) 5*64kB (UME) 1*128kB (M) 2*256kB (UE) 2*512kB (ME) 3*1024kB (UME) 2*2048kB (ME) 0*4096kB = 11024kB [ 1424.183717] Node 0 DMA32: 1932*4kB (ME) 535*8kB (ME) 109*16kB (UME) 9*32kB (UME) 2077*64kB (U) 120*128kB (U) 13*256kB (U) 0*512kB 1*1024kB (U) 1*2048kB (U) 0*4096kB = 168728kB [ 1424.210567] Node 0 DMA32 free:185032kB min:36200kB low:45248kB high:54296kB active_anon:285820kB inactive_anon:77104kB active_file:52kB inactive_file:456kB unevictable:0kB writepending:0kB present:3129332kB managed:2788136kB mlocked:0kB kernel_stack:12032kB pagetables:16604kB bounce:0kB free_pcp:360kB local_pcp:144kB free_cma:0kB [ 1424.223710] Node 0 [ 1424.270517] lowmem_reserve[]: [ 1424.270582] Normal: [ 1424.272775] 0 [ 1424.275868] 0*4kB [ 1424.278166] 0 [ 1424.279948] 0*8kB [ 1424.290513] 0 0 0 [ 1424.294950] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1424.303662] 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1424.350493] lowmem_reserve[]: 0 0 0 0 0 [ 1424.356222] Node 1 Normal free:855564kB min:53696kB low:67120kB high:80544kB active_anon:17548kB inactive_anon:23088kB active_file:8kB inactive_file:1628kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:6304kB pagetables:18808kB bounce:0kB free_pcp:224kB local_pcp:212kB free_cma:0kB [ 1424.363630] Node 1 [ 1424.420498] lowmem_reserve[]: 0 0 0 0 0 [ 1424.423656] Normal: [ 1424.426759] Node 0 DMA: 32*4kB (UME) 56*8kB (UME) 45*16kB (UME) 18*32kB (UME) 4*64kB (UME) 2*128kB (UM) 2*256kB (UE) 2*512kB (ME) 3*1024kB (UME) 2*2048kB (ME) 0*4096kB = 11088kB [ 1424.426821] Node 0 DMA32: 1530*4kB (UME) 536*8kB (UME) 109*16kB (UME) 9*32kB (UME) 974*64kB (U) 232*128kB (U) 50*256kB (U) 1*512kB (U) 2*1024kB (U) 1*2048kB [ 1424.429690] 17*4kB [ 1424.470521] (U) 0*4096kB = 121880kB [ 1424.470534] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1424.470577] Node 1 Normal: 17*4kB (UE) 11*8kB (UE) 5*16kB (UME) 805*32kB (UME) 5571*64kB (UME) 1224*128kB (UM) 366*256kB (UM) 347*512kB (UM) [ 1424.510532] (UE) [ 1424.511033] 127*1024kB (UM) 23*2048kB (U) 0*4096kB = 987724kB [ 1424.543680] 11*8kB [ 1424.546431] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1424.546437] Node 0 hugepages_total=1 hugepages_free=1 hugepages_surp=1 hugepages_size=2048kB [ 1424.546441] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1424.546447] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1424.546450] 26542 total pagecache pages [ 1424.546458] 0 pages in swap cache [ 1424.546462] Swap cache stats: add 0, delete 0, find 0/0 [ 1424.546465] Free swap = 0kB [ 1424.546468] Total swap = 0kB [ 1424.546474] 2097051 pages RAM [ 1424.546476] 0 pages HighMem/MovableOnly [ 1424.546479] 363846 pages reserved [ 1424.546482] 0 pages cma reserved [ 1424.546488] Out of memory (oom_kill_allocating_task): Kill process 1058 (systemd-journal) score 0 or sacrifice child [ 1424.546517] Killed process 1058 (systemd-journal) total-vm:46096kB, anon-rss:472kB, file-rss:4kB, shmem-rss:3460kB [ 1424.561010] warn_alloc_show_mem: 2 callbacks suppressed [ 1424.561013] Mem-Info: [ 1424.602947] (UE) [ 1424.691821] active_anon:76267 inactive_anon:25050 isolated_anon:0 [ 1424.691821] active_file:40 inactive_file:1946 isolated_file:0 [ 1424.691821] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1424.691821] slab_reclaimable:13312 slab_unreclaimable:126575 [ 1424.691821] mapped:53593 shmem:25394 pagetables:8830 bounce:0 [ 1424.691821] free:365420 free_pcp:192 free_cma:0 [ 1424.712438] 5*16kB [ 1424.730243] systemd[1]: systemd-journald.service: Failed with result 'signal'. [ 1424.763779] (UME) 805*32kB (UME) 5456*64kB (UME) 1191*128kB (UM) 363*256kB (UM) 347*512kB (UM) 127*1024kB (UM) 23*2048kB (U) 0*4096kB = 975372kB [ 1424.784303] systemd[1]: systemd-journald.service: Service has no hold-off time, scheduling restart. [ 1424.813065] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1424.827738] systemd[1]: Stopped Journal Service. [ 1424.829310] Node 0 active_anon:287620kB inactive_anon:77112kB active_file:852kB inactive_file:7256kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:210580kB dirty:0kB writeback:0kB shmem:78344kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 233472kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1424.852468] Node 0 hugepages_total=1 hugepages_free=1 hugepages_surp=1 hugepages_size=2048kB [ 1424.899444] systemd[1]: Starting Journal Service... [ 1424.931406] Node 1 active_anon:17348kB inactive_anon:23088kB active_file:8kB inactive_file:1628kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:4192kB dirty:0kB writeback:0kB shmem:23232kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1424.933796] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1424.988487] Node 0 DMA free:11216kB min:204kB low:252kB high:300kB active_anon:2100kB inactive_anon:8kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:56kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1425.002458] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1425.044929] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1425.050426] Node 0 DMA32 free:108720kB min:36200kB low:45248kB high:54296kB active_anon:285216kB inactive_anon:77104kB active_file:4684kB inactive_file:4516kB unevictable:0kB writepending:32kB present:3129332kB managed:2788136kB mlocked:0kB kernel_stack:11968kB pagetables:16364kB bounce:0kB free_pcp:836kB local_pcp:332kB free_cma:0kB [ 1425.080525] 28140 total pagecache pages [ 1425.081372] lowmem_reserve[]: 0 0 0 0 0 [ 1425.089377] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1425.095139] 0 pages in swap cache [ 1425.119632] lowmem_reserve[]: 0 0 0 0 0 [ 1425.123684] Node 1 Normal free:1652404kB min:53696kB low:67120kB high:80544kB active_anon:17308kB inactive_anon:23088kB active_file:8kB inactive_file:1756kB unevictable:0kB writepending:4kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:6272kB pagetables:18716kB bounce:0kB free_pcp:680kB local_pcp:656kB free_cma:0kB [ 1425.149045] Swap cache stats: add 0, delete 0, find 0/0 [ 1425.160409] Free swap = 0kB [ 1425.166576] Total swap = 0kB [ 1425.170002] 2097051 pages RAM [ 1425.175407] 0 pages HighMem/MovableOnly [ 1425.179876] 363846 pages reserved [ 1425.181150] lowmem_reserve[]: 0 0 0 0 0 [ 1425.186564] 0 pages cma reserved [ 1425.187654] Node 0 [ 1425.206488] systemd-journald[2240]: File /run/log/journal/04d8c135ee6b410280ba31a58c89679d/system.journal corrupted or uncleanly shut down, renaming and replacing. [ 1425.223668] DMA: 5*4kB (UE) 56*8kB (UME) 45*16kB (UME) 18*32kB (UME) 4*64kB (UME) 1*128kB (M) 1*256kB (E) 3*512kB (UME) 3*1024kB (UME) 2*2048kB (ME) 0*4096kB = 11108kB 20:22:39 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r1, 0x800454cf, &(0x7f0000000240)) ioctl$TUNSETSNDBUF(r1, 0x400454d4, &(0x7f0000000040)=0x1000) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000180)={0x80000000, 0xa}) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x4000, 0x0) 20:22:39 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r1, 0x800454cf, &(0x7f0000000240)) ioctl$TUNSETSNDBUF(r1, 0x400454d4, &(0x7f0000000040)=0x1000) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r2, 0x800454cf, &(0x7f0000000240)) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000180)={0x80000000, 0xa}) 20:22:39 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r1, 0x800454cf, &(0x7f0000000240)) ioctl$TUNSETSNDBUF(r1, 0x400454d4, &(0x7f0000000040)=0x1000) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r2, 0x800454cf, &(0x7f0000000240)) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000080)={'lo\x00', @broadcast}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000180)={0x80000000, 0xa}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r3, 0x800454cf, &(0x7f0000000240)) ioctl$TUNSETOWNER(r3, 0x400454cc, 0xffffffffffffffff) [ 1425.252530] Node 0 DMA32: 563*4kB (UE) 304*8kB (UE) 75*16kB (ME) 5*32kB (E) 2*64kB (UM) 73*128kB (U) 104*256kB (UM) 2*512kB (UM) 1*1024kB (U) 0*2048kB 0*4096kB = 44188kB [ 1425.268188] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1425.279926] Node 1 Normal: 18*4kB (UME) 10*8kB (UE) 4*16kB (UE) 6*32kB (ME) 8716*64kB (UME) 2349*128kB (U) 696*256kB (U) 786*512kB (U) 130*1024kB (UM) 20*2048kB (U) 0*4096kB = 1613592kB [ 1425.314447] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1425.319860] systemd-journald[2240]: /dev/kmsg buffer overrun, some messages lost. [ 1425.345776] Node 0 hugepages_total=1 hugepages_free=1 hugepages_surp=1 hugepages_size=2048kB [ 1425.376105] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1425.412704] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1425.445940] 31262 total pagecache pages [ 1425.458937] 0 pages in swap cache [ 1425.465731] Swap cache stats: add 0, delete 0, find 0/0 [ 1425.493828] Free swap = 0kB [ 1425.503682] Total swap = 0kB [ 1425.513518] 2097051 pages RAM [ 1425.523428] 0 pages HighMem/MovableOnly [ 1425.536440] 363846 pages reserved [ 1425.546711] 0 pages cma reserved 20:22:39 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r1, 0x800454cf, &(0x7f0000000240)) ioctl$TUNSETSNDBUF(r1, 0x400454d4, &(0x7f0000000040)=0x1000) ioctl$TUNGETFEATURES(0xffffffffffffffff, 0x800454cf, &(0x7f0000000240)) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000080)={'lo\x00', @broadcast}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000180)={0x80000000, 0xa}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x4000, 0x0) ioctl$TUNSETPERSIST(r3, 0x400454cb, 0x1) ioctl$TUNGETFEATURES(r2, 0x800454cf, &(0x7f0000000240)) ioctl$TUNSETOWNER(r2, 0x400454cc, 0xffffffffffffffff) [ 1425.971341] syz-executor.3: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1426.011535] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 1426.025006] CPU: 1 PID: 2254 Comm: syz-executor.3 Not tainted 4.14.228-syzkaller #0 [ 1426.032811] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1426.042164] Call Trace: [ 1426.044755] dump_stack+0x1b2/0x281 [ 1426.048414] warn_alloc.cold+0x96/0x1cc [ 1426.052392] ? zone_watermark_ok_safe+0x220/0x220 [ 1426.057252] __alloc_pages_nodemask+0x2127/0x2720 [ 1426.062107] ? lock_acquire+0x170/0x3f0 [ 1426.066092] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1426.070945] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1426.076407] ? __mutex_unlock_slowpath+0x75/0x770 [ 1426.081269] alloc_pages_current+0x155/0x260 [ 1426.085670] ion_page_pool_alloc+0x118/0x1b0 [ 1426.090065] ion_system_heap_allocate+0x133/0x8c0 [ 1426.094918] ? ion_alloc+0x187/0x810 [ 1426.098620] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1426.104065] ? ion_system_contig_heap_create+0x130/0x130 [ 1426.109521] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1426.114555] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1426.119387] ion_alloc+0x204/0x810 [ 1426.122941] ? ion_dma_buf_release+0x40/0x40 [ 1426.127340] ? __might_fault+0x177/0x1b0 [ 1426.131391] ion_ioctl+0xea/0x1f0 [ 1426.134834] ? ion_query_heaps+0x360/0x360 [ 1426.139079] ? __tun_chr_ioctl.isra.0+0x3310/0x3310 [ 1426.144091] ? ion_query_heaps+0x360/0x360 [ 1426.148316] do_vfs_ioctl+0x75a/0xff0 [ 1426.152125] ? ioctl_preallocate+0x1a0/0x1a0 [ 1426.156533] ? lock_downgrade+0x740/0x740 [ 1426.160689] ? __fget+0x225/0x360 [ 1426.164132] ? do_vfs_ioctl+0xff0/0xff0 [ 1426.168113] ? security_file_ioctl+0x83/0xb0 [ 1426.172526] SyS_ioctl+0x7f/0xb0 [ 1426.175891] ? do_vfs_ioctl+0xff0/0xff0 [ 1426.179856] do_syscall_64+0x1d5/0x640 [ 1426.183739] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1426.188915] RIP: 0033:0x466459 [ 1426.192106] RSP: 002b:00007f6ba9361188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1426.199836] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1426.207096] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1426.214357] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1426.221615] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1426.228875] R13: 00007ffd9352709f R14: 00007f6ba9361300 R15: 0000000000022000 [ 1426.425816] Mem-Info: [ 1426.428319] active_anon:76364 inactive_anon:27081 isolated_anon:0 [ 1426.428319] active_file:90 inactive_file:86 isolated_file:57 [ 1426.428319] unevictable:0 dirty:5 writeback:0 unstable:0 [ 1426.428319] slab_reclaimable:13338 slab_unreclaimable:128107 [ 1426.428319] mapped:52701 shmem:27441 pagetables:8843 bounce:0 [ 1426.428319] free:25185 free_pcp:79 free_cma:0 [ 1426.465307] Node 0 active_anon:287668kB inactive_anon:77036kB active_file:128kB inactive_file:92kB unevictable:0kB isolated(anon):0kB isolated(file):92kB mapped:205868kB dirty:20kB writeback:0kB shmem:78332kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 233472kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1426.497948] Node 1 active_anon:17788kB inactive_anon:31288kB active_file:96kB inactive_file:252kB unevictable:0kB isolated(anon):0kB isolated(file):4kB mapped:4736kB dirty:0kB writeback:0kB shmem:31432kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1426.529845] Node 0 DMA free:11052kB min:204kB low:252kB high:300kB active_anon:2100kB inactive_anon:8kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:56kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1426.534346] syz-executor.0: [ 1426.563501] lowmem_reserve[]: [ 1426.564450] syz-executor.4: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1426.569985] 0 2717 2718 2718 2718 [ 1426.590799] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 1426.590823] CPU: 1 PID: 2244 Comm: syz-executor.4 Not tainted 4.14.228-syzkaller #0 [ 1426.590831] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1426.596032] Node 0 [ 1426.603714] Call Trace: [ 1426.603734] dump_stack+0x1b2/0x281 [ 1426.603749] warn_alloc.cold+0x96/0x1cc [ 1426.603761] ? zone_watermark_ok_safe+0x220/0x220 [ 1426.603785] __alloc_pages_nodemask+0x2127/0x2720 [ 1426.603802] ? lock_acquire+0x170/0x3f0 [ 1426.603816] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1426.603833] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1426.603845] ? __mutex_unlock_slowpath+0x75/0x770 [ 1426.603860] alloc_pages_current+0x155/0x260 [ 1426.603873] ion_page_pool_alloc+0x118/0x1b0 [ 1426.603883] ion_system_heap_allocate+0x133/0x8c0 [ 1426.603894] ? ion_alloc+0x187/0x810 [ 1426.636018] DMA32 free:36088kB min:36200kB low:45248kB high:54296kB active_anon:285568kB inactive_anon:77028kB active_file:168kB inactive_file:392kB unevictable:0kB writepending:20kB present:3129332kB managed:2788136kB mlocked:0kB kernel_stack:11904kB pagetables:16176kB bounce:0kB free_pcp:0kB local_pcp:8kB free_cma:0kB [ 1426.639228] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1426.639241] ? ion_system_contig_heap_create+0x130/0x130 [ 1426.639253] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1426.648156] lowmem_reserve[]: [ 1426.650472] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1426.650485] ion_alloc+0x204/0x810 [ 1426.650500] ? ion_dma_buf_release+0x40/0x40 [ 1426.650512] ? __might_fault+0x177/0x1b0 [ 1426.650524] ion_ioctl+0xea/0x1f0 [ 1426.650533] ? ion_query_heaps+0x360/0x360 [ 1426.650548] ? __tun_chr_ioctl.isra.0+0x3310/0x3310 [ 1426.650554] ? ion_query_heaps+0x360/0x360 [ 1426.650564] do_vfs_ioctl+0x75a/0xff0 [ 1426.650575] ? ioctl_preallocate+0x1a0/0x1a0 [ 1426.658701] 0 [ 1426.659820] ? lock_downgrade+0x740/0x740 [ 1426.659835] ? __fget+0x225/0x360 [ 1426.659845] ? do_vfs_ioctl+0xff0/0xff0 [ 1426.664349] 0 [ 1426.669070] ? security_file_ioctl+0x83/0xb0 [ 1426.669082] SyS_ioctl+0x7f/0xb0 [ 1426.669095] ? do_vfs_ioctl+0xff0/0xff0 [ 1426.677826] 0 [ 1426.701257] do_syscall_64+0x1d5/0x640 [ 1426.701274] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1426.701282] RIP: 0033:0x466459 [ 1426.701286] RSP: 002b:00007f6a95319188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1426.701296] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1426.701301] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1426.701306] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1426.701311] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1426.701316] R13: 00007ffc0329f33f R14: 00007f6a95319300 R15: 0000000000022000 [ 1426.726240] page allocation failure: order:4 [ 1426.749315] 0 [ 1426.770500] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1426.777750] 0 [ 1426.777937] (null) [ 1426.800495] syz-executor.0 cpuset= [ 1426.804059] Node 0 [ 1426.820052] / [ 1426.829375] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1426.834907] mems_allowed=0-1 [ 1426.843833] lowmem_reserve[]: [ 1426.848113] CPU: 1 PID: 2247 Comm: syz-executor.0 Not tainted 4.14.228-syzkaller #0 [ 1426.852531] 0 [ 1426.854204] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1426.854212] Call Trace: [ 1426.865287] 0 [ 1426.868756] dump_stack+0x1b2/0x281 [ 1426.871062] 0 [ 1426.872672] warn_alloc.cold+0x96/0x1cc [ 1426.902293] 0 [ 1426.903813] ? zone_watermark_ok_safe+0x220/0x220 [ 1426.913540] 0 [ 1426.922741] __alloc_pages_nodemask+0x2127/0x2720 [ 1426.922760] ? lock_acquire+0x170/0x3f0 [ 1426.922775] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1426.922793] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1426.922806] ? __mutex_unlock_slowpath+0x75/0x770 [ 1426.922820] alloc_pages_current+0x155/0x260 [ 1426.927204] ion_page_pool_alloc+0x118/0x1b0 [ 1426.932777] Node 1 [ 1426.936558] ion_system_heap_allocate+0x133/0x8c0 [ 1426.938348] Normal free:53568kB min:53696kB low:67120kB high:80544kB active_anon:17788kB inactive_anon:31288kB active_file:524kB inactive_file:468kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:6560kB pagetables:19140kB bounce:0kB free_pcp:44kB local_pcp:0kB free_cma:0kB [ 1426.943184] ? ion_alloc+0x187/0x810 [ 1426.943196] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1426.943205] ? ion_system_contig_heap_create+0x130/0x130 [ 1426.943215] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1426.943227] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1426.943237] ion_alloc+0x204/0x810 [ 1426.943251] ? ion_dma_buf_release+0x40/0x40 [ 1426.943264] ? __might_fault+0x177/0x1b0 [ 1426.946364] lowmem_reserve[]: [ 1426.949910] ion_ioctl+0xea/0x1f0 [ 1426.957299] 0 [ 1426.958691] ? ion_query_heaps+0x360/0x360 [ 1426.965544] 0 [ 1426.968964] ? __tun_chr_ioctl.isra.0+0x3310/0x3310 [ 1426.975295] 0 [ 1426.977739] ? ion_query_heaps+0x360/0x360 [ 1426.979965] 0 [ 1426.984802] do_vfs_ioctl+0x75a/0xff0 [ 1426.984815] ? ioctl_preallocate+0x1a0/0x1a0 [ 1426.984825] ? lock_downgrade+0x740/0x740 [ 1426.984838] ? __fget+0x225/0x360 [ 1426.984847] ? do_vfs_ioctl+0xff0/0xff0 [ 1426.984859] ? security_file_ioctl+0x83/0xb0 [ 1426.984869] SyS_ioctl+0x7f/0xb0 [ 1426.984877] ? do_vfs_ioctl+0xff0/0xff0 [ 1426.984888] do_syscall_64+0x1d5/0x640 [ 1426.984911] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1426.984921] RIP: 0033:0x466459 [ 1427.018604] 0 [ 1427.022459] RSP: 002b:00007f2e01ed3188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1427.022469] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1427.022474] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1427.022479] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1427.022483] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1427.022489] R13: 00007ffdb70bf23f R14: 00007f2e01ed3300 R15: 0000000000022000 [ 1427.168067] Node 0 DMA: 3*4kB (E) 50*8kB (UME) 45*16kB (UME) 18*32kB (UME) 4*64kB (UME) 1*128kB (M) 1*256kB (E) 3*512kB (UME) 3*1024kB (UME) 2*2048kB (ME) 0*4096kB = 11052kB [ 1427.183974] Node 0 DMA32: 2203*4kB (UME) 514*8kB (ME) 93*16kB (UME) 9*32kB (UME) 6*64kB (UM) 5*128kB (UM) 72*256kB (UM) 2*512kB (UM) 1*1024kB (M) 0*2048kB 0*4096kB = 36204kB [ 1427.199754] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1427.210525] Node 1 Normal: 36*4kB (ME) 27*8kB (UME) 20*16kB (UME) 15*32kB (ME) 16*64kB (ME) 6*128kB (M) 4*256kB (UM) 97*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 53640kB [ 1427.225812] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1427.234726] Node 0 hugepages_total=1 hugepages_free=1 hugepages_surp=1 hugepages_size=2048kB [ 1427.243345] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1427.252304] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1427.260947] 27504 total pagecache pages [ 1427.264919] 0 pages in swap cache [ 1427.268364] Swap cache stats: add 0, delete 0, find 0/0 [ 1427.273790] Free swap = 0kB [ 1427.276821] Total swap = 0kB [ 1427.279847] 2097051 pages RAM [ 1427.285712] 0 pages HighMem/MovableOnly [ 1427.289684] 363846 pages reserved [ 1427.293169] 0 pages cma reserved [ 1427.301148] syz-executor.5: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1427.323631] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 1427.328783] CPU: 1 PID: 2248 Comm: syz-executor.5 Not tainted 4.14.228-syzkaller #0 [ 1427.336578] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1427.345929] Call Trace: [ 1427.348514] dump_stack+0x1b2/0x281 [ 1427.352138] warn_alloc.cold+0x96/0x1cc [ 1427.356121] ? zone_watermark_ok_safe+0x220/0x220 [ 1427.360965] __alloc_pages_nodemask+0x2127/0x2720 [ 1427.365805] ? lock_acquire+0x170/0x3f0 [ 1427.369772] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1427.374611] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1427.380057] ? __mutex_unlock_slowpath+0x75/0x770 [ 1427.384907] alloc_pages_current+0x155/0x260 [ 1427.389309] ion_page_pool_alloc+0x118/0x1b0 [ 1427.393706] ion_system_heap_allocate+0x133/0x8c0 [ 1427.398541] ? ion_alloc+0x187/0x810 [ 1427.402273] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1427.407713] ? ion_system_contig_heap_create+0x130/0x130 [ 1427.413156] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1427.418166] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1427.423002] ion_alloc+0x204/0x810 [ 1427.426551] ? ion_dma_buf_release+0x40/0x40 [ 1427.430963] ? __might_fault+0x177/0x1b0 [ 1427.435015] ion_ioctl+0xea/0x1f0 [ 1427.438471] ? ion_query_heaps+0x360/0x360 [ 1427.442719] ? __tun_chr_ioctl.isra.0+0x3310/0x3310 [ 1427.447723] ? ion_query_heaps+0x360/0x360 [ 1427.451950] do_vfs_ioctl+0x75a/0xff0 [ 1427.455743] ? ioctl_preallocate+0x1a0/0x1a0 [ 1427.460142] ? lock_downgrade+0x740/0x740 [ 1427.464282] ? __fget+0x225/0x360 [ 1427.467722] ? do_vfs_ioctl+0xff0/0xff0 [ 1427.471708] ? security_file_ioctl+0x83/0xb0 [ 1427.476108] SyS_ioctl+0x7f/0xb0 [ 1427.479467] ? do_vfs_ioctl+0xff0/0xff0 [ 1427.483433] do_syscall_64+0x1d5/0x640 [ 1427.487316] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1427.492497] RIP: 0033:0x466459 [ 1427.495673] RSP: 002b:00007f2761281188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1427.503375] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1427.510650] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1427.517910] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1427.525166] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1427.532420] R13: 00007ffddf757caf R14: 00007f2761281300 R15: 0000000000022000 [ 1427.562971] warn_alloc_show_mem: 2 callbacks suppressed [ 1427.562975] Mem-Info: [ 1427.575664] active_anon:76364 inactive_anon:27081 isolated_anon:0 [ 1427.575664] active_file:40 inactive_file:18 isolated_file:1 [ 1427.575664] unevictable:0 dirty:7 writeback:0 unstable:0 [ 1427.575664] slab_reclaimable:13338 slab_unreclaimable:127558 [ 1427.575664] mapped:52576 shmem:27441 pagetables:8843 bounce:0 [ 1427.575664] free:25186 free_pcp:0 free_cma:0 [ 1427.608983] Node 0 active_anon:287668kB inactive_anon:77036kB active_file:92kB inactive_file:48kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:205836kB dirty:24kB writeback:0kB shmem:78332kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 233472kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1427.638544] Node 1 active_anon:17788kB inactive_anon:31288kB active_file:68kB inactive_file:24kB unevictable:0kB isolated(anon):0kB isolated(file):4kB mapped:4468kB dirty:4kB writeback:0kB shmem:31432kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1427.691484] Node 0 DMA free:11072kB min:204kB low:252kB high:300kB active_anon:2100kB inactive_anon:8kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:56kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1427.721397] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1427.726453] Node 0 DMA32 free:36080kB min:36200kB low:45248kB high:54296kB active_anon:285568kB inactive_anon:77028kB active_file:92kB inactive_file:0kB unevictable:0kB writepending:16kB present:3129332kB managed:2788136kB mlocked:0kB kernel_stack:11936kB pagetables:16176kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1427.758999] lowmem_reserve[]: 0 0 0 0 0 [ 1427.763063] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1427.802331] lowmem_reserve[]: 0 0 0 0 0 [ 1427.806375] Node 1 Normal free:53612kB min:53696kB low:67120kB high:80544kB active_anon:17788kB inactive_anon:31288kB active_file:12kB inactive_file:68kB unevictable:0kB writepending:4kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:6464kB pagetables:19140kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1427.838567] lowmem_reserve[]: 0 0 0 0 0 [ 1427.842675] Node 0 DMA: 10*4kB (ME) 50*8kB (UME) 45*16kB (UME) 18*32kB (UME) 4*64kB (UME) 1*128kB (M) 1*256kB (E) 3*512kB (UME) 3*1024kB (UME) 2*2048kB (ME) 0*4096kB = 11080kB [ 1427.861767] Node 0 DMA32: 2203*4kB (UME) 514*8kB (ME) 93*16kB (UME) 9*32kB (UME) 6*64kB (UM) 5*128kB (UM) 72*256kB (UM) 2*512kB (UM) 1*1024kB (M) 0*2048kB 0*4096kB = 36204kB [ 1427.878794] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1427.892831] Node 1 Normal: 37*4kB (UME) 27*8kB (UME) 19*16kB (ME) 15*32kB (ME) 16*64kB (ME) 7*128kB (UM) 4*256kB (UM) 97*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 53756kB [ 1427.908874] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1427.924386] Node 0 hugepages_total=1 hugepages_free=1 hugepages_surp=1 hugepages_size=2048kB [ 1427.935750] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1427.945361] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1427.956387] 27504 total pagecache pages [ 1427.960382] 0 pages in swap cache [ 1427.964550] Swap cache stats: add 0, delete 0, find 0/0 [ 1427.969917] Free swap = 0kB [ 1427.975568] Total swap = 0kB [ 1427.978627] 2097051 pages RAM [ 1427.982407] 0 pages HighMem/MovableOnly [ 1427.986382] 363846 pages reserved [ 1427.989841] 0 pages cma reserved [ 1428.718474] systemd[1]: Starting Load/Save RF Kill Switch Status... [ 1429.061000] systemd[1]: Started Load/Save RF Kill Switch Status. [ 1429.359351] systemd[1]: Started Journal Service. [ 1430.525542] oom_reaper: reaped process 2244 (syz-executor.4), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1430.607337] oom_reaper: reaped process 2254 (syz-executor.3), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1430.639011] syz-executor.3 invoked oom-killer: gfp_mask=0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null), order=0, oom_score_adj=1000 [ 1430.650569] syz-executor.4: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1430.664320] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 1430.665716] syz-executor.3 cpuset= [ 1430.669436] CPU: 0 PID: 2244 Comm: syz-executor.4 Not tainted 4.14.228-syzkaller #0 [ 1430.669437] / mems_allowed=0-1 [ 1430.672972] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1430.672976] Call Trace: [ 1430.672997] dump_stack+0x1b2/0x281 [ 1430.673011] warn_alloc.cold+0x96/0x1cc [ 1430.673024] ? zone_watermark_ok_safe+0x220/0x220 [ 1430.673034] ? usleep_range+0x130/0x130 [ 1430.673043] ? try_to_free_pages+0x23f/0x6e0 [ 1430.673054] ? _find_next_bit+0xdb/0x100 [ 1430.673065] ? run_timer_softirq+0x5a0/0x5a0 [ 1430.725127] __alloc_pages_nodemask+0x2127/0x2720 [ 1430.729971] ? lock_acquire+0x170/0x3f0 [ 1430.733945] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1430.738783] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1430.743304] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1430.748767] alloc_pages_current+0x155/0x260 [ 1430.753180] ion_page_pool_alloc+0x118/0x1b0 [ 1430.757583] ion_system_heap_allocate+0x133/0x8c0 [ 1430.762416] ? ion_alloc+0x187/0x810 [ 1430.766127] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1430.771580] ? ion_system_contig_heap_create+0x130/0x130 [ 1430.777028] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1430.782041] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1430.786880] ion_alloc+0x204/0x810 [ 1430.790423] ? ion_dma_buf_release+0x40/0x40 [ 1430.794828] ? __might_fault+0x177/0x1b0 [ 1430.798882] ion_ioctl+0xea/0x1f0 [ 1430.802337] ? ion_query_heaps+0x360/0x360 [ 1430.806615] ? __tun_chr_ioctl.isra.0+0x3310/0x3310 [ 1430.811628] ? ion_query_heaps+0x360/0x360 [ 1430.815857] do_vfs_ioctl+0x75a/0xff0 [ 1430.819649] ? ioctl_preallocate+0x1a0/0x1a0 [ 1430.824050] ? lock_downgrade+0x740/0x740 [ 1430.828892] ? __fget+0x225/0x360 [ 1430.832343] ? do_vfs_ioctl+0xff0/0xff0 [ 1430.836329] ? security_file_ioctl+0x83/0xb0 [ 1430.840729] SyS_ioctl+0x7f/0xb0 [ 1430.844089] ? do_vfs_ioctl+0xff0/0xff0 [ 1430.848060] do_syscall_64+0x1d5/0x640 [ 1430.851952] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1430.857157] RIP: 0033:0x466459 [ 1430.860335] RSP: 002b:00007f6a95319188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1430.868035] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1430.875298] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1430.882559] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1430.889819] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1430.897079] R13: 00007ffc0329f33f R14: 00007f6a95319300 R15: 0000000000022000 [ 1430.906571] CPU: 1 PID: 2254 Comm: syz-executor.3 Not tainted 4.14.228-syzkaller #0 [ 1430.914380] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1430.916174] Mem-Info: [ 1430.923727] Call Trace: [ 1430.923746] dump_stack+0x1b2/0x281 [ 1430.923760] dump_header+0x178/0x82f [ 1430.923775] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1430.926181] active_anon:76426 inactive_anon:27081 isolated_anon:0 [ 1430.926181] active_file:26 inactive_file:0 isolated_file:0 [ 1430.926181] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1430.926181] slab_reclaimable:13315 slab_unreclaimable:129687 [ 1430.926181] mapped:48002 shmem:27440 pagetables:8857 bounce:0 [ 1430.926181] free:13824 free_pcp:66 free_cma:0 [ 1430.928742] ? ___ratelimit+0x2cd/0x530 [ 1430.932379] Node 0 active_anon:287928kB inactive_anon:77032kB active_file:56kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:170948kB dirty:0kB writeback:0kB shmem:78324kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 233472kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1430.936036] oom_kill_process.cold+0x10/0xb18 [ 1430.941148] Node 1 active_anon:17776kB inactive_anon:31292kB active_file:48kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:21060kB dirty:0kB writeback:0kB shmem:31436kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1430.974272] out_of_memory+0xe3e/0x1190 [ 1430.974288] ? oom_killer_disable+0x1c0/0x1c0 [ 1430.974301] ? mutex_trylock+0x152/0x1a0 [ 1430.978268] Node 0 [ 1431.006031] __alloc_pages_nodemask+0x23e1/0x2720 [ 1431.006049] ? lock_acquire+0x170/0x3f0 [ 1431.006063] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1431.006078] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1431.010589] DMA free:10968kB min:204kB low:252kB high:300kB active_anon:2100kB inactive_anon:8kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:56kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1431.037707] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1431.037718] ? check_preemption_disabled+0x35/0x240 [ 1431.037736] alloc_pages_current+0x155/0x260 [ 1431.041700] lowmem_reserve[]: [ 1431.046170] ion_page_pool_alloc+0x118/0x1b0 [ 1431.050202] 0 [ 1431.052421] ion_system_heap_allocate+0x133/0x8c0 [ 1431.052431] ? ion_alloc+0x187/0x810 [ 1431.052442] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1431.052452] ? ion_system_contig_heap_create+0x130/0x130 [ 1431.057271] 2717 [ 1431.061229] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1431.061241] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1431.061251] ion_alloc+0x204/0x810 [ 1431.066069] 2718 [ 1431.070548] ? ion_dma_buf_release+0x40/0x40 [ 1431.070566] ? __might_fault+0x177/0x1b0 [ 1431.096523] 2718 [ 1431.101940] ion_ioctl+0xea/0x1f0 [ 1431.101954] ? ion_query_heaps+0x360/0x360 [ 1431.106956] 2718 [ 1431.111369] ? __tun_chr_ioctl.isra.0+0x3310/0x3310 [ 1431.111378] ? ion_query_heaps+0x360/0x360 [ 1431.111389] do_vfs_ioctl+0x75a/0xff0 [ 1431.118873] ? ioctl_preallocate+0x1a0/0x1a0 [ 1431.120669] Node 0 [ 1431.125485] ? lock_downgrade+0x740/0x740 [ 1431.129183] DMA32 free:17540kB min:36200kB low:45248kB high:54296kB active_anon:285828kB inactive_anon:77024kB active_file:0kB inactive_file:96kB unevictable:0kB writepending:0kB present:3129332kB managed:2788136kB mlocked:0kB kernel_stack:11872kB pagetables:16180kB bounce:0kB free_pcp:136kB local_pcp:136kB free_cma:0kB [ 1431.134602] ? __fget+0x225/0x360 [ 1431.134612] ? do_vfs_ioctl+0xff0/0xff0 [ 1431.134627] ? security_file_ioctl+0x83/0xb0 [ 1431.140048] lowmem_reserve[]: [ 1431.142099] SyS_ioctl+0x7f/0xb0 [ 1431.142108] ? do_vfs_ioctl+0xff0/0xff0 [ 1431.142120] do_syscall_64+0x1d5/0x640 [ 1431.142135] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1431.147123] 0 [ 1431.151947] RIP: 0033:0x466459 [ 1431.151951] RSP: 002b:00007f6ba9361188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1431.151961] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1431.151967] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1431.151975] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1431.155494] 0 [ 1431.157540] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1431.162041] 0 [ 1431.166066] R13: 00007ffd9352709f R14: 00007f6ba9361300 R15: 0000000000022000 [ 1431.168112] 0 [ 1431.180915] Mem-Info: [ 1431.193695] 0 [ 1431.203298] active_anon:76426 inactive_anon:27081 isolated_anon:0 [ 1431.203298] active_file:12 inactive_file:13 isolated_file:0 [ 1431.203298] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1431.203298] slab_reclaimable:13315 slab_unreclaimable:129687 [ 1431.203298] mapped:48002 shmem:27440 pagetables:8857 bounce:0 [ 1431.203298] free:13909 free_pcp:68 free_cma:0 [ 1431.249368] Node 0 active_anon:287928kB inactive_anon:77032kB active_file:24kB inactive_file:28kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:170948kB dirty:0kB writeback:0kB shmem:78324kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 233472kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1431.262290] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1431.272418] Node 1 active_anon:17776kB inactive_anon:31292kB active_file:24kB inactive_file:24kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:21060kB dirty:0kB writeback:0kB shmem:31436kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1431.282222] lowmem_reserve[]: 0 0 0 0 0 [ 1431.282245] Node 1 Normal free:26788kB min:53696kB low:67120kB high:80544kB active_anon:17776kB inactive_anon:31292kB active_file:24kB inactive_file:24kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:6432kB pagetables:19192kB bounce:0kB free_pcp:128kB local_pcp:124kB free_cma:0kB [ 1431.282267] lowmem_reserve[]: 0 0 0 0 0 [ 1431.282286] Node 0 DMA: 10*4kB (ME) [ 1431.296542] Node 0 [ 1431.305988] 10*8kB [ 1431.309115] DMA free:10968kB min:204kB low:252kB high:300kB active_anon:2100kB inactive_anon:8kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:56kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1431.322290] (UME) [ 1431.363385] lowmem_reserve[]: [ 1431.391551] 8*16kB [ 1431.416084] 0 [ 1431.439621] (ME) [ 1431.474836] 2717 [ 1431.487944] 5*32kB [ 1431.517251] 2718 2718 2718 [ 1431.527914] Node 0 DMA32 free:17880kB min:36200kB low:45248kB high:54296kB active_anon:285828kB inactive_anon:77024kB active_file:24kB inactive_file:28kB unevictable:0kB writepending:0kB present:3129332kB managed:2788136kB mlocked:0kB kernel_stack:11872kB pagetables:16180kB bounce:0kB free_pcp:148kB local_pcp:12kB free_cma:0kB [ 1431.528729] (UME) [ 1431.565866] lowmem_reserve[]: [ 1431.566767] 3*64kB [ 1431.568020] 0 [ 1431.573636] (ME) 1*128kB (M) 2*256kB (UE) 3*512kB (UME) 2*1024kB (ME) 3*2048kB (UME) 0*4096kB = 10968kB [ 1431.575526] 0 0 0 0 [ 1431.594991] Node 0 [ 1431.596180] Node 0 [ 1431.596182] DMA32: 2232*4kB [ 1431.598419] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1431.605325] (UME) [ 1431.637278] lowmem_reserve[]: [ 1431.638511] 508*8kB [ 1431.639435] 0 [ 1431.643809] (UME) [ 1431.645452] 0 [ 1431.646696] 94*16kB [ 1431.648830] 0 [ 1431.659194] (UME) [ 1431.661460] 0 [ 1431.662334] 12*32kB [ 1431.663611] 0 [ 1431.665394] (ME) [ 1431.669497] 9*64kB [ 1431.677937] Node 1 [ 1431.679850] (UME) [ 1431.680191] Normal free:26788kB min:53696kB low:67120kB high:80544kB active_anon:17776kB inactive_anon:31292kB active_file:24kB inactive_file:24kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:6432kB pagetables:19192kB bounce:0kB free_pcp:128kB local_pcp:4kB free_cma:0kB [ 1431.683713] 7*128kB [ 1431.686773] lowmem_reserve[]: [ 1431.723005] (UM) [ 1431.723724] 0 [ 1431.726118] 6*256kB [ 1431.728164] 0 [ 1431.729947] (UM) [ 1431.736409] 0 0 0 [ 1431.744572] 0*512kB 0*1024kB 0*2048kB 0*4096kB = 17888kB [ 1431.744991] Node 0 [ 1431.750045] Node 0 [ 1431.750054] DMA: [ 1431.757665] Normal: [ 1431.758812] 10*4kB [ 1431.759729] 0*4kB [ 1431.766250] (ME) 10*8kB (UME) 8*16kB (ME) 5*32kB [ 1431.768432] 0*8kB 0*16kB [ 1431.778079] (UME) [ 1431.778716] 0*32kB [ 1431.785090] 3*64kB [ 1431.787148] 0*64kB [ 1431.787325] (ME) [ 1431.789543] 0*128kB [ 1431.795917] 1*128kB (M) 2*256kB (UE) 3*512kB (UME) 2*1024kB (ME) 3*2048kB (UME) 0*4096kB = 10968kB [ 1431.799122] 0*256kB [ 1431.816011] Node 0 DMA32: 2232*4kB (UME) 508*8kB (UME) 94*16kB (UME) 12*32kB (ME) 9*64kB (UME) 7*128kB (UM) 6*256kB (UM) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 17888kB [ 1431.820497] 0*512kB [ 1431.842107] Node 0 [ 1431.843998] 0*1024kB [ 1431.844468] Normal: [ 1431.846690] 0*2048kB [ 1431.849075] 0*4kB 0*8kB [ 1431.857584] 0*4096kB [ 1431.859975] 0*16kB [ 1431.860272] = 0kB [ 1431.864736] 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1431.868037] Node 1 [ 1431.883222] Node 1 [ 1431.884730] Normal: [ 1431.885466] Normal: [ 1431.887691] 41*4kB [ 1431.889990] 41*4kB [ 1431.897692] (UME) [ 1431.899087] (UME) [ 1431.899932] 30*8kB [ 1431.906799] 30*8kB (ME) 17*16kB (ME) 16*32kB (ME) 16*64kB (UME) 6*128kB (UM) 3*256kB (M) 3*512kB (UM) 1*1024kB (U) 2*2048kB (U) 4*4096kB (U) = 26788kB [ 1431.909609] (ME) [ 1431.931215] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1431.932511] 17*16kB [ 1431.933280] Node 0 hugepages_total=1 hugepages_free=1 hugepages_surp=1 hugepages_size=2048kB [ 1431.949362] (ME) 16*32kB (ME) 16*64kB (UME) 6*128kB (UM) 3*256kB (M) 3*512kB (UM) 1*1024kB (U) 2*2048kB (U) 4*4096kB (U) = 26788kB [ 1431.961136] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1431.974280] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1431.984004] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1431.994051] Node 0 hugepages_total=1 hugepages_free=1 hugepages_surp=1 hugepages_size=2048kB [ 1431.997483] 27465 total pagecache pages [ 1432.010251] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1432.014882] 0 pages in swap cache [ 1432.021181] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1432.024647] Swap cache stats: add 0, delete 0, find 0/0 [ 1432.040697] 27465 total pagecache pages [ 1432.044673] 0 pages in swap cache [ 1432.045306] Free swap = 0kB [ 1432.048133] Swap cache stats: add 0, delete 0, find 0/0 [ 1432.053185] Total swap = 0kB [ 1432.059601] 2097051 pages RAM [ 1432.064255] Free swap = 0kB [ 1432.067276] Total swap = 0kB [ 1432.068869] 0 pages HighMem/MovableOnly [ 1432.070288] 2097051 pages RAM [ 1432.076248] 363846 pages reserved [ 1432.084909] 0 pages HighMem/MovableOnly [ 1432.087173] 0 pages cma reserved [ 1432.088883] 363846 pages reserved [ 1432.094250] Out of memory (oom_kill_allocating_task): Kill process 2254 (syz-executor.3) score 0 or sacrifice child [ 1432.099834] 0 pages cma reserved [ 1432.114645] Killed process 2254 (syz-executor.3) total-vm:93384kB, anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1432.171198] syz-executor.3: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1432.210764] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 1432.215910] CPU: 1 PID: 2254 Comm: syz-executor.3 Not tainted 4.14.228-syzkaller #0 [ 1432.223698] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1432.233072] Call Trace: [ 1432.235691] dump_stack+0x1b2/0x281 [ 1432.239320] warn_alloc.cold+0x96/0x1cc [ 1432.243295] ? zone_watermark_ok_safe+0x220/0x220 [ 1432.248231] ? wait_for_completion_io+0x10/0x10 [ 1432.252916] __alloc_pages_nodemask+0x2127/0x2720 [ 1432.257764] ? lock_acquire+0x170/0x3f0 [ 1432.261741] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1432.266582] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1432.271110] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1432.276560] ? check_preemption_disabled+0x35/0x240 [ 1432.281609] alloc_pages_current+0x155/0x260 [ 1432.286021] ion_page_pool_alloc+0x118/0x1b0 [ 1432.290512] ion_system_heap_allocate+0x133/0x8c0 [ 1432.295350] ? ion_alloc+0x187/0x810 [ 1432.299065] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1432.304512] ? ion_system_contig_heap_create+0x130/0x130 [ 1432.310055] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1432.315070] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1432.319914] ion_alloc+0x204/0x810 [ 1432.323463] ? ion_dma_buf_release+0x40/0x40 [ 1432.327974] ? __might_fault+0x177/0x1b0 [ 1432.332035] ion_ioctl+0xea/0x1f0 [ 1432.335483] ? ion_query_heaps+0x360/0x360 [ 1432.339720] ? __tun_chr_ioctl.isra.0+0x3310/0x3310 [ 1432.344730] ? ion_query_heaps+0x360/0x360 [ 1432.348963] do_vfs_ioctl+0x75a/0xff0 [ 1432.352763] ? ioctl_preallocate+0x1a0/0x1a0 [ 1432.357167] ? lock_downgrade+0x740/0x740 [ 1432.361401] ? __fget+0x225/0x360 [ 1432.364847] ? do_vfs_ioctl+0xff0/0xff0 [ 1432.368819] ? security_file_ioctl+0x83/0xb0 [ 1432.373224] SyS_ioctl+0x7f/0xb0 [ 1432.376584] ? do_vfs_ioctl+0xff0/0xff0 [ 1432.380579] do_syscall_64+0x1d5/0x640 [ 1432.384475] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1432.389656] RIP: 0033:0x466459 [ 1432.392838] RSP: 002b:00007f6ba9361188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1432.400561] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1432.407824] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1432.415106] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1432.422370] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1432.429636] R13: 00007ffd9352709f R14: 00007f6ba9361300 R15: 0000000000022000 [ 1432.550519] Mem-Info: [ 1432.553000] active_anon:76426 inactive_anon:27081 isolated_anon:0 [ 1432.553000] active_file:12 inactive_file:1013 isolated_file:0 [ 1432.553000] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1432.553000] slab_reclaimable:13315 slab_unreclaimable:129666 [ 1432.553000] mapped:53352 shmem:27440 pagetables:8857 bounce:0 [ 1432.553000] free:173364 free_pcp:382 free_cma:0 [ 1432.611460] Node 0 active_anon:287928kB inactive_anon:77032kB active_file:124kB inactive_file:828kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:173248kB dirty:0kB writeback:0kB shmem:78324kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 233472kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1432.679584] Node 1 active_anon:17776kB inactive_anon:31292kB active_file:924kB inactive_file:3292kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:41060kB dirty:0kB writeback:0kB shmem:31436kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1432.790545] Node 0 DMA free:11028kB min:204kB low:252kB high:300kB active_anon:2100kB inactive_anon:8kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:56kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1432.880549] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1432.885623] Node 0 DMA32 free:35128kB min:36200kB low:45248kB high:54296kB active_anon:285828kB inactive_anon:77024kB active_file:324kB inactive_file:452kB unevictable:0kB writepending:0kB present:3129332kB managed:2788136kB mlocked:0kB kernel_stack:11904kB pagetables:16180kB bounce:0kB free_pcp:576kB local_pcp:428kB free_cma:0kB [ 1432.938112] oom_reaper: reaped process 2233 (syz-executor.2), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1432.981438] lowmem_reserve[]: 0 0 0 0 0 [ 1432.985478] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1433.018665] lowmem_reserve[]: 0 0 0 0 0 [ 1433.022913] Node 1 Normal free:27860kB min:53696kB low:67120kB high:80544kB active_anon:17776kB inactive_anon:31292kB active_file:680kB inactive_file:380kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:6432kB pagetables:19228kB bounce:0kB free_pcp:696kB local_pcp:16kB free_cma:0kB [ 1433.052485] lowmem_reserve[]: 0 0 0 0 0 [ 1433.056747] Node 0 DMA: 10*4kB (ME) 10*8kB (UME) 9*16kB (UME) 5*32kB (UME) 3*64kB (ME) 1*128kB (M) 2*256kB (UE) 3*512kB (UME) 2*1024kB (ME) 3*2048kB (UME) 0*4096kB = 10984kB [ 1433.072611] Node 0 DMA32: 2227*4kB (UME) 514*8kB (UME) 93*16kB (ME) 12*32kB (ME) 11*64kB (ME) 4*128kB (M) 8*256kB (UM) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18156kB [ 1433.087500] oom_reaper: reaped process 2248 (syz-executor.5), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1433.097923] systemd-journal invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=0 [ 1433.100664] syz-executor.4: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1433.110328] Node 0 [ 1433.127805] systemd-journal cpuset=/ mems_allowed=0-1 [ 1433.135330] Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1433.152041] CPU: 1 PID: 2240 Comm: systemd-journal Not tainted 4.14.228-syzkaller #0 [ 1433.160229] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1433.167393] syz-executor.4 cpuset= [ 1433.169590] Call Trace: [ 1433.169597] / [ 1433.173149] dump_stack+0x1b2/0x281 [ 1433.181361] dump_header+0x178/0x82f [ 1433.185091] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1433.190266] ? ___ratelimit+0x2cd/0x530 [ 1433.193728] mems_allowed=0-1 [ 1433.194341] oom_kill_process.cold+0x10/0xb18 [ 1433.201951] out_of_memory+0xe3e/0x1190 [ 1433.205942] ? oom_killer_disable+0x1c0/0x1c0 [ 1433.210449] ? mutex_trylock+0x152/0x1a0 [ 1433.214676] __alloc_pages_nodemask+0x23e1/0x2720 [ 1433.219535] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1433.224398] ? cache_grow_begin+0x41/0x630 [ 1433.228843] cache_grow_begin+0x91/0x630 [ 1433.232913] ? cache_grow_begin+0x91/0x630 [ 1433.237159] fallback_alloc+0x207/0x2c0 [ 1433.241143] kmem_cache_alloc+0x1e5/0x3c0 [ 1433.245300] getname_flags+0xc8/0x550 [ 1433.249110] user_path_at_empty+0x2a/0x50 [ 1433.253438] SyS_faccessat+0x21b/0x680 [ 1433.257339] ? SyS_fallocate+0x80/0x80 [ 1433.261232] ? do_syscall_64+0x4c/0x640 [ 1433.265213] ? SyS_faccessat+0x680/0x680 [ 1433.269545] do_syscall_64+0x1d5/0x640 [ 1433.273445] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1433.278643] RIP: 0033:0x7f11784379c7 [ 1433.282893] RSP: 002b:00007fff766c87a8 EFLAGS: 00000246 ORIG_RAX: 0000000000000015 [ 1433.291043] RAX: ffffffffffffffda RBX: 00007fff766cb6c0 RCX: 00007f11784379c7 [ 1433.298414] RDX: 00007f1178ea8a00 RSI: 0000000000000000 RDI: 000055d2f4beb9a3 [ 1433.305917] RBP: 00007fff766c87e0 R08: 0000000000000000 R09: 0000000000000000 [ 1433.313193] R10: 0000000000000069 R11: 0000000000000246 R12: 0000000000000000 [ 1433.320615] R13: 0000000000000000 R14: 00007fff766cb6c0 R15: 00007fff766c8cd0 [ 1433.327917] CPU: 0 PID: 2244 Comm: syz-executor.4 Not tainted 4.14.228-syzkaller #0 [ 1433.334367] Node 1 [ 1433.335823] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1433.335825] Normal: 38*4kB [ 1433.338067] Call Trace: [ 1433.349699] (ME) [ 1433.350709] dump_stack+0x1b2/0x281 [ 1433.350724] warn_alloc.cold+0x96/0x1cc [ 1433.350736] ? zone_watermark_ok_safe+0x220/0x220 [ 1433.350760] __alloc_pages_nodemask+0x2127/0x2720 [ 1433.357025] 29*8kB [ 1433.359239] ? check_preemption_disabled+0x35/0x240 [ 1433.365130] (ME) [ 1433.368514] ? lock_acquire+0x170/0x3f0 [ 1433.376895] 17*16kB [ 1433.380917] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1433.380936] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1433.380949] ? __mutex_unlock_slowpath+0x75/0x770 [ 1433.380964] alloc_pages_current+0x155/0x260 [ 1433.380979] ion_page_pool_alloc+0x118/0x1b0 [ 1433.380989] ion_system_heap_allocate+0x133/0x8c0 [ 1433.384913] (ME) [ 1433.387123] ? _raw_spin_unlock+0x29/0x40 [ 1433.389434] 17*32kB [ 1433.394437] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1433.394447] ? ion_system_contig_heap_create+0x130/0x130 [ 1433.394457] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1433.394468] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1433.394478] ion_alloc+0x27a/0x810 [ 1433.394491] ? ion_dma_buf_release+0x40/0x40 [ 1433.394512] ? __might_fault+0x177/0x1b0 [ 1433.394523] ion_ioctl+0xea/0x1f0 [ 1433.405749] (ME) [ 1433.409715] ? ion_query_heaps+0x360/0x360 [ 1433.415984] 15*64kB [ 1433.420638] ? __tun_chr_ioctl.isra.0+0x3310/0x3310 [ 1433.420648] ? ion_query_heaps+0x360/0x360 [ 1433.420659] do_vfs_ioctl+0x75a/0xff0 [ 1433.420671] ? ioctl_preallocate+0x1a0/0x1a0 [ 1433.420681] ? lock_downgrade+0x740/0x740 [ 1433.420695] ? __fget+0x225/0x360 [ 1433.420704] ? do_vfs_ioctl+0xff0/0xff0 [ 1433.420715] ? security_file_ioctl+0x83/0xb0 [ 1433.420725] SyS_ioctl+0x7f/0xb0 [ 1433.420733] ? do_vfs_ioctl+0xff0/0xff0 [ 1433.420744] do_syscall_64+0x1d5/0x640 [ 1433.428195] (UME) [ 1433.429974] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1433.435039] 6*128kB [ 1433.440749] RIP: 0033:0x466459 [ 1433.440754] RSP: 002b:00007f6a95319188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1433.440765] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1433.440770] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1433.440775] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1433.440779] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1433.440784] R13: 00007ffc0329f33f R14: 00007f6a95319300 R15: 0000000000022000 [ 1433.444656] syz-executor.5: [ 1433.447313] (M) [ 1433.451099] syz-executor.2: page allocation failure: order:0 [ 1433.455132] 4*256kB (M) [ 1433.459559] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1433.465406] 44*512kB [ 1433.467964] page allocation failure: order:0 [ 1433.473001] (UM) [ 1433.474272] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1433.476587] 0*1024kB [ 1433.481684] (null) [ 1433.487873] 0*2048kB [ 1433.490750] (null) [ 1433.490757] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 1433.490781] CPU: 0 PID: 2248 Comm: syz-executor.5 Not tainted 4.14.228-syzkaller #0 [ 1433.490790] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1433.500561] 0*4096kB [ 1433.500683] Call Trace: [ 1433.504296] = 26480kB [ 1433.508510] dump_stack+0x1b2/0x281 [ 1433.516259] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1433.516491] warn_alloc.cold+0x96/0x1cc [ 1433.522929] Node 0 hugepages_total=1 hugepages_free=1 hugepages_surp=1 hugepages_size=2048kB [ 1433.524675] ? zone_watermark_ok_safe+0x220/0x220 [ 1433.527052] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1433.532586] ? usleep_range+0x130/0x130 [ 1433.532596] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1433.532608] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1433.532617] ? run_timer_softirq+0x5a0/0x5a0 [ 1433.532633] __alloc_pages_nodemask+0x2127/0x2720 [ 1433.532648] ? lock_acquire+0x170/0x3f0 [ 1433.532663] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1433.532673] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1433.532689] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1433.532701] ? retint_kernel+0x2d/0x2d [ 1433.538253] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1433.546181] alloc_pages_current+0x155/0x260 [ 1433.546194] ion_page_pool_alloc+0x118/0x1b0 [ 1433.546203] ion_system_heap_allocate+0x133/0x8c0 [ 1433.546213] ? ion_alloc+0x187/0x810 [ 1433.546224] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1433.546232] ? ion_system_contig_heap_create+0x130/0x130 [ 1433.546242] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1433.546253] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1433.546263] ion_alloc+0x204/0x810 [ 1433.559534] 27474 total pagecache pages [ 1433.561519] ? ion_dma_buf_release+0x40/0x40 [ 1433.561532] ? __might_fault+0x177/0x1b0 [ 1433.561543] ion_ioctl+0xea/0x1f0 [ 1433.561552] ? ion_query_heaps+0x360/0x360 [ 1433.561566] ? __tun_chr_ioctl.isra.0+0x3310/0x3310 [ 1433.561576] ? ion_query_heaps+0x360/0x360 [ 1433.569291] 0 pages in swap cache [ 1433.577321] do_vfs_ioctl+0x75a/0xff0 [ 1433.577334] ? ioctl_preallocate+0x1a0/0x1a0 [ 1433.577343] ? lock_downgrade+0x740/0x740 [ 1433.577355] ? __fget+0x225/0x360 [ 1433.577364] ? do_vfs_ioctl+0xff0/0xff0 [ 1433.577375] ? security_file_ioctl+0x83/0xb0 [ 1433.577384] SyS_ioctl+0x7f/0xb0 [ 1433.577391] ? do_vfs_ioctl+0xff0/0xff0 [ 1433.577403] do_syscall_64+0x1d5/0x640 [ 1433.577418] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1433.577426] RIP: 0033:0x466459 [ 1433.577434] RSP: 002b:00007f2761281188 EFLAGS: 00000246 [ 1433.590283] Swap cache stats: add 0, delete 0, find 0/0 [ 1433.595913] ORIG_RAX: 0000000000000010 [ 1433.595919] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1433.595924] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1433.595929] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1433.595934] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1433.595939] R13: 00007ffddf757caf R14: 00007f2761281300 R15: 0000000000022000 [ 1433.596120] syz-executor.2 cpuset= [ 1433.599447] Mem-Info: [ 1433.606253] / mems_allowed=0-1 [ 1433.606277] CPU: 0 PID: 2233 Comm: syz-executor.2 Not tainted 4.14.228-syzkaller #0 [ 1433.606282] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1433.606286] Call Trace: [ 1433.606304] dump_stack+0x1b2/0x281 [ 1433.606318] warn_alloc.cold+0x96/0x1cc [ 1433.606331] ? zone_watermark_ok_safe+0x220/0x220 [ 1433.614388] Free swap = 0kB [ 1433.615426] ? usleep_range+0x130/0x130 [ 1433.622689] active_anon:76387 inactive_anon:27081 isolated_anon:0 [ 1433.622689] active_file:17 inactive_file:17 isolated_file:0 [ 1433.622689] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1433.622689] slab_reclaimable:13315 slab_unreclaimable:130014 [ 1433.622689] mapped:52623 shmem:27440 pagetables:8888 bounce:0 [ 1433.622689] free:13802 free_pcp:0 free_cma:0 [ 1433.625025] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1433.627185] Node 0 active_anon:287844kB inactive_anon:77032kB active_file:24kB inactive_file:24kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:172580kB dirty:0kB writeback:0kB shmem:78324kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 233472kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1433.629975] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1433.637676] Total swap = 0kB [ 1433.645643] ? run_timer_softirq+0x5a0/0x5a0 [ 1433.645661] __alloc_pages_nodemask+0x2127/0x2720 [ 1433.645678] ? lock_acquire+0x170/0x3f0 [ 1433.645692] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1433.645702] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1433.645718] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1433.670270] Node 1 active_anon:17704kB inactive_anon:31292kB active_file:44kB inactive_file:44kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:37912kB dirty:0kB writeback:0kB shmem:31436kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1433.676266] alloc_pages_current+0x155/0x260 [ 1433.676280] ion_page_pool_alloc+0x118/0x1b0 [ 1433.676290] ion_system_heap_allocate+0x133/0x8c0 [ 1433.676299] ? ion_alloc+0x187/0x810 [ 1433.676309] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1433.676318] ? ion_system_contig_heap_create+0x130/0x130 [ 1433.676328] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1433.676341] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1433.688763] Node 0 [ 1433.689065] ion_alloc+0x204/0x810 [ 1433.694108] DMA free:10956kB min:204kB low:252kB high:300kB active_anon:2100kB inactive_anon:8kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:56kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1433.703136] ? ion_dma_buf_release+0x40/0x40 [ 1433.703150] ? __might_fault+0x177/0x1b0 [ 1433.703161] ion_ioctl+0xea/0x1f0 [ 1433.703169] ? ion_query_heaps+0x360/0x360 [ 1433.703183] ? __tun_chr_ioctl.isra.0+0x3310/0x3310 [ 1433.703190] ? ion_query_heaps+0x360/0x360 [ 1433.703201] do_vfs_ioctl+0x75a/0xff0 [ 1433.703212] ? ioctl_preallocate+0x1a0/0x1a0 [ 1433.703221] ? lock_downgrade+0x740/0x740 [ 1433.703234] ? __fget+0x225/0x360 [ 1433.703245] ? do_vfs_ioctl+0xff0/0xff0 [ 1433.718966] 2097051 pages RAM [ 1433.721773] ? security_file_ioctl+0x83/0xb0 [ 1433.721785] SyS_ioctl+0x7f/0xb0 [ 1433.721793] ? do_vfs_ioctl+0xff0/0xff0 [ 1433.721805] do_syscall_64+0x1d5/0x640 [ 1433.721818] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1433.721826] RIP: 0033:0x466459 [ 1433.721831] RSP: 002b:00007f613992b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1433.721842] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1433.721850] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1433.728221] 0 pages HighMem/MovableOnly [ 1433.730825] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1433.730831] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1433.730836] R13: 00007fff85f2b35f R14: 00007f613992b300 R15: 0000000000022000 [ 1433.744850] Mem-Info: [ 1433.756031] lowmem_reserve[]: [ 1433.762529] active_anon:76387 inactive_anon:27081 isolated_anon:0 [ 1433.762529] active_file:17 inactive_file:17 isolated_file:0 [ 1433.762529] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1433.762529] slab_reclaimable:13315 slab_unreclaimable:130014 [ 1433.762529] mapped:52623 shmem:27440 pagetables:8888 bounce:0 [ 1433.762529] free:13802 free_pcp:0 free_cma:0 [ 1433.767252] 0 [ 1433.769004] Node 0 active_anon:287844kB inactive_anon:77032kB active_file:24kB inactive_file:24kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:172580kB dirty:0kB writeback:0kB shmem:78324kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 233472kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1433.780218] 363846 pages reserved [ 1433.849117] Node 1 active_anon:17704kB inactive_anon:31292kB active_file:44kB inactive_file:2044kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:39112kB dirty:0kB writeback:0kB shmem:31436kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1433.868737] 2717 [ 1433.931827] Node 0 [ 1433.946886] 2718 [ 1434.000525] DMA free:10956kB min:204kB low:252kB high:300kB active_anon:2100kB inactive_anon:8kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:56kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1434.025863] 0 pages cma reserved [ 1434.133767] lowmem_reserve[]: [ 1434.139647] 2718 [ 1434.200546] 0 [ 1434.270709] 2718 [ 1434.272348] 2717 [ 1434.288183] 2718 [ 1434.380956] Node 0 [ 1434.429192] 2718 2718 [ 1434.483065] Node 0 DMA32 free:33760kB min:36200kB low:45248kB high:54296kB active_anon:285744kB inactive_anon:77024kB active_file:24kB inactive_file:24kB unevictable:0kB writepending:0kB present:3129332kB managed:2788136kB mlocked:0kB kernel_stack:11904kB pagetables:16268kB bounce:0kB free_pcp:88kB local_pcp:88kB free_cma:0kB [ 1434.533766] lowmem_reserve[]: 0 0 0 0 0 [ 1434.537968] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1434.566867] lowmem_reserve[]: 0 0 0 0 0 [ 1434.580534] DMA32 free:51296kB min:36200kB low:45248kB high:54296kB active_anon:285744kB inactive_anon:77024kB active_file:24kB inactive_file:24kB unevictable:0kB writepending:0kB present:3129332kB managed:2788136kB mlocked:0kB kernel_stack:11904kB pagetables:16268kB bounce:0kB free_pcp:76kB local_pcp:0kB free_cma:0kB [ 1434.593651] Node 1 Normal free:616484kB min:53696kB low:67120kB high:80544kB active_anon:17740kB inactive_anon:31292kB active_file:2020kB inactive_file:4404kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:6432kB pagetables:19312kB bounce:0kB free_pcp:876kB local_pcp:640kB free_cma:0kB [ 1434.656240] lowmem_reserve[]: 0 0 0 0 0 [ 1434.691449] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1434.699411] lowmem_reserve[]: 0 0 0 0 0 [ 1434.757217] Node 0 DMA: 12*4kB (UME) 10*8kB (UME) 9*16kB (UME) 4*32kB (ME) 3*64kB (ME) 1*128kB (M) 2*256kB (UE) 3*512kB (UME) 2*1024kB (ME) 3*2048kB (UME) 0*4096kB = 10960kB [ 1434.776535] Node 0 DMA32: 2244*4kB (UME) 631*8kB (UME) 117*16kB (UME) 78*32kB (UME) 436*64kB (UME) 29*128kB (UM) 11*256kB (UM) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 52824kB [ 1434.780574] lowmem_reserve[]: 0 0 0 0 0 [ 1434.824969] Node 1 Normal free:461204kB min:53696kB low:67120kB high:80544kB active_anon:17740kB inactive_anon:31292kB active_file:2020kB inactive_file:4404kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:6432kB pagetables:19312kB bounce:0kB free_pcp:856kB local_pcp:236kB free_cma:0kB [ 1434.840679] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1434.910545] lowmem_reserve[]: 0 0 0 0 0 [ 1434.940510] Node 0 DMA: 12*4kB (UME) 10*8kB (UME) 9*16kB (UME) 4*32kB (ME) 3*64kB (ME) 1*128kB (M) 2*256kB (UE) 3*512kB (UME) 2*1024kB (ME) 3*2048kB (UME) 0*4096kB = 10960kB [ 1434.963155] Node 1 Normal: 209*4kB (UME) 186*8kB (UME) 177*16kB (UME) 169*32kB (UME) 1*64kB (E) 570*128kB (U) 188*256kB (U) 201*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 234628kB [ 1434.970546] Node 0 DMA32: 5179*4kB (UME) 636*8kB (UME) 117*16kB (UME) 78*32kB (UME) 134*64kB (UME) 29*128kB (UM) 11*256kB (UM) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 45276kB [ 1435.013748] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1435.025864] Node 0 hugepages_total=1 hugepages_free=1 hugepages_surp=1 hugepages_size=2048kB [ 1435.070517] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1435.070533] Node 0 [ 1435.079813] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1435.079822] Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1435.123762] 28918 total pagecache pages [ 1435.153989] 0 pages in swap cache [ 1435.157973] Swap cache stats: add 0, delete 0, find 0/0 [ 1435.173745] Free swap = 0kB [ 1435.179932] Total swap = 0kB [ 1435.189390] 2097051 pages RAM [ 1435.190595] Node 1 Normal: 3253*4kB (UME) 320*8kB (UME) 307*16kB (UME) 286*32kB (UME) 104*64kB (UME) 1*128kB (U) 1*256kB (U) 8*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 40772kB [ 1435.200852] 0 pages HighMem/MovableOnly [ 1435.227065] 363846 pages reserved [ 1435.240483] 0 pages cma reserved [ 1435.251322] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1435.280963] Node 0 hugepages_total=1 hugepages_free=1 hugepages_surp=1 hugepages_size=2048kB [ 1435.289827] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1435.320536] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1435.329641] 28553 total pagecache pages [ 1435.333728] 0 pages in swap cache [ 1435.337198] Swap cache stats: add 0, delete 0, find 0/0 [ 1435.405548] syz-executor.5: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1435.411159] Free swap = 0kB [ 1435.420830] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 1435.420855] CPU: 0 PID: 2248 Comm: syz-executor.5 Not tainted 4.14.228-syzkaller #0 [ 1435.420861] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1435.420865] Call Trace: [ 1435.420886] dump_stack+0x1b2/0x281 [ 1435.420900] warn_alloc.cold+0x96/0x1cc [ 1435.454606] ? zone_watermark_ok_safe+0x220/0x220 [ 1435.459752] __alloc_pages_nodemask+0x2127/0x2720 [ 1435.464796] ? lock_acquire+0x170/0x3f0 [ 1435.468969] ? lock_acquire+0x170/0x3f0 [ 1435.473158] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1435.478301] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1435.480496] Total swap = 0kB [ 1435.483870] ? __mutex_unlock_slowpath+0x75/0x770 [ 1435.487109] 2097051 pages RAM [ 1435.492100] alloc_pages_current+0x155/0x260 [ 1435.492114] ion_page_pool_alloc+0x118/0x1b0 [ 1435.492124] ion_system_heap_allocate+0x133/0x8c0 [ 1435.492135] ? _raw_spin_unlock+0x29/0x40 [ 1435.492143] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1435.492152] ? ion_system_contig_heap_create+0x130/0x130 [ 1435.492162] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1435.492172] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1435.492182] ion_alloc+0x27a/0x810 [ 1435.496347] syz-executor.3: [ 1435.499710] ? ion_dma_buf_release+0x40/0x40 [ 1435.530537] page allocation failure: order:4 [ 1435.533963] ? __might_fault+0x177/0x1b0 [ 1435.537806] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1435.541175] ion_ioctl+0xea/0x1f0 [ 1435.541186] ? ion_query_heaps+0x360/0x360 [ 1435.541200] ? __tun_chr_ioctl.isra.0+0x3310/0x3310 [ 1435.541207] ? ion_query_heaps+0x360/0x360 [ 1435.541216] do_vfs_ioctl+0x75a/0xff0 [ 1435.541228] ? ioctl_preallocate+0x1a0/0x1a0 [ 1435.541240] ? lock_downgrade+0x740/0x740 [ 1435.546319] 0 pages HighMem/MovableOnly [ 1435.550318] ? __fget+0x225/0x360 [ 1435.580500] (null) [ 1435.583268] ? do_vfs_ioctl+0xff0/0xff0 [ 1435.587665] syz-executor.3 cpuset= [ 1435.591979] ? security_file_ioctl+0x83/0xb0 [ 1435.591990] SyS_ioctl+0x7f/0xb0 [ 1435.591999] ? do_vfs_ioctl+0xff0/0xff0 [ 1435.592010] do_syscall_64+0x1d5/0x640 [ 1435.592025] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1435.592035] RIP: 0033:0x466459 [ 1435.620508] 363846 pages reserved [ 1435.621498] RSP: 002b:00007f2761281188 EFLAGS: 00000246 [ 1435.625395] 0 pages cma reserved [ 1435.630581] ORIG_RAX: 0000000000000010 [ 1435.630588] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1435.630593] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1435.630597] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1435.630602] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1435.630608] R13: 00007ffddf757caf R14: 00007f2761281300 R15: 0000000000022000 [ 1435.724910] Out of memory (oom_kill_allocating_task): Kill process 2240 (systemd-journal) score 0 or sacrifice child [ 1435.731209] / mems_allowed=0-1 [ 1435.757532] CPU: 0 PID: 2254 Comm: syz-executor.3 Not tainted 4.14.228-syzkaller #0 [ 1435.765421] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1435.770538] Killed process 2240 (systemd-journal) total-vm:46096kB, anon-rss:468kB, file-rss:0kB, shmem-rss:1544kB [ 1435.775220] Call Trace: [ 1435.788318] dump_stack+0x1b2/0x281 [ 1435.791966] warn_alloc.cold+0x96/0x1cc [ 1435.795954] ? zone_watermark_ok_safe+0x220/0x220 [ 1435.800845] __alloc_pages_nodemask+0x2127/0x2720 [ 1435.805705] ? io_schedule_timeout+0x140/0x140 [ 1435.810499] ? lock_acquire+0x170/0x3f0 [ 1435.814764] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1435.819633] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1435.825099] ? __mutex_unlock_slowpath+0x75/0x770 [ 1435.830638] alloc_pages_current+0x155/0x260 [ 1435.835071] ion_page_pool_alloc+0x118/0x1b0 [ 1435.839502] ion_system_heap_allocate+0x133/0x8c0 [ 1435.844593] ? _raw_spin_unlock+0x29/0x40 [ 1435.848847] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1435.853883] ? ion_system_contig_heap_create+0x130/0x130 [ 1435.859344] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1435.864515] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1435.870208] ion_alloc+0x27a/0x810 [ 1435.873858] ? ion_dma_buf_release+0x40/0x40 [ 1435.878286] ? __might_fault+0x177/0x1b0 [ 1435.882363] ion_ioctl+0xea/0x1f0 [ 1435.885833] ? ion_query_heaps+0x360/0x360 [ 1435.890089] ? __tun_chr_ioctl.isra.0+0x3310/0x3310 [ 1435.895130] ? ion_query_heaps+0x360/0x360 [ 1435.899378] do_vfs_ioctl+0x75a/0xff0 [ 1435.903197] ? ioctl_preallocate+0x1a0/0x1a0 [ 1435.908081] ? lock_downgrade+0x740/0x740 [ 1435.912497] ? __fget+0x225/0x360 [ 1435.915966] ? do_vfs_ioctl+0xff0/0xff0 [ 1435.919958] ? security_file_ioctl+0x83/0xb0 [ 1435.924383] SyS_ioctl+0x7f/0xb0 [ 1435.927759] ? do_vfs_ioctl+0xff0/0xff0 [ 1435.931750] do_syscall_64+0x1d5/0x640 [ 1435.935665] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1435.941029] RIP: 0033:0x466459 [ 1435.944326] RSP: 002b:00007f6ba9361188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1435.952142] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1435.959664] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1435.967221] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1435.974822] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1435.982242] R13: 00007ffd9352709f R14: 00007f6ba9361300 R15: 0000000000022000 [ 1436.004720] warn_alloc_show_mem: 2 callbacks suppressed [ 1436.004724] Mem-Info: [ 1436.027761] active_anon:76273 inactive_anon:27084 isolated_anon:0 [ 1436.027761] active_file:79 inactive_file:1500 isolated_file:0 [ 1436.027761] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1436.027761] slab_reclaimable:13312 slab_unreclaimable:130171 [ 1436.027761] mapped:53206 shmem:27444 pagetables:8849 bounce:0 [ 1436.027761] free:164337 free_pcp:595 free_cma:0 [ 1436.143374] systemd[1]: systemd-journald.service: Failed with result 'signal'. 20:22:50 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r1, 0x800454cf, &(0x7f0000000240)) ioctl$TUNSETSNDBUF(r1, 0x400454d4, &(0x7f0000000040)=0x1000) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r2, 0x800454cf, &(0x7f0000000240)) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000080)={'lo\x00', @broadcast}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000180)={0x80000000, 0xa}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r3, 0x800454cf, &(0x7f0000000240)) ioctl$TUNSETOWNER(r3, 0x400454cc, 0xffffffffffffffff) [ 1436.183682] systemd[1]: systemd-journald.service: Service has no hold-off time, scheduling restart. [ 1436.228537] systemd[1]: Stopped Journal Service. [ 1436.236941] Node 0 active_anon:287772kB inactive_anon:77032kB active_file:716kB inactive_file:12376kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:181268kB dirty:36kB writeback:0kB shmem:78324kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 233472kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1436.306283] systemd[1]: Starting Journal Service... [ 1436.345908] Node 1 active_anon:17664kB inactive_anon:31296kB active_file:48kB inactive_file:48kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:36324kB dirty:4kB writeback:0kB shmem:31452kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1436.423874] Node 0 DMA free:11040kB min:204kB low:252kB high:300kB active_anon:2100kB inactive_anon:8kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:56kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1436.460518] Bluetooth: hci3 command 0x0409 tx timeout [ 1436.555498] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1436.576933] systemd-journald[2275]: File /run/log/journal/04d8c135ee6b410280ba31a58c89679d/system.journal corrupted or uncleanly shut down, renaming and replacing. [ 1436.596964] Node 0 DMA32 free:126084kB min:36200kB low:45248kB high:54296kB active_anon:285772kB inactive_anon:77024kB active_file:3116kB inactive_file:10976kB unevictable:0kB writepending:36kB present:3129332kB managed:2788136kB mlocked:0kB kernel_stack:12000kB pagetables:16332kB bounce:0kB free_pcp:996kB local_pcp:620kB free_cma:0kB [ 1436.722509] syz-executor.2: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1436.726889] lowmem_reserve[]: [ 1436.766187] syz-executor.2 cpuset= [ 1436.776339] 0 [ 1436.777209] / mems_allowed=0-1 [ 1436.795115] 0 0 0 0 [ 1436.795730] CPU: 0 PID: 2233 Comm: syz-executor.2 Not tainted 4.14.228-syzkaller #0 [ 1436.799469] systemd-journald[2275]: /dev/kmsg buffer overrun, some messages lost. [ 1436.805294] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1436.805298] Call Trace: [ 1436.805316] dump_stack+0x1b2/0x281 [ 1436.805330] warn_alloc.cold+0x96/0x1cc [ 1436.805342] ? zone_watermark_ok_safe+0x220/0x220 [ 1436.805364] __alloc_pages_nodemask+0x2127/0x2720 [ 1436.805380] ? lock_acquire+0x170/0x3f0 [ 1436.805394] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1436.805411] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1436.805424] ? __mutex_unlock_slowpath+0x75/0x770 [ 1436.805439] alloc_pages_current+0x155/0x260 [ 1436.805453] ion_page_pool_alloc+0x118/0x1b0 [ 1436.805463] ion_system_heap_allocate+0x133/0x8c0 [ 1436.805475] ? _raw_spin_unlock+0x29/0x40 [ 1436.805483] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1436.805492] ? ion_system_contig_heap_create+0x130/0x130 [ 1436.805506] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1436.821092] Node 0 [ 1436.822953] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1436.822968] ion_alloc+0x27a/0x810 [ 1436.828876] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1436.829348] ? ion_dma_buf_release+0x40/0x40 [ 1436.846799] lowmem_reserve[]: [ 1436.847568] ? __might_fault+0x177/0x1b0 [ 1436.868987] 0 [ 1436.872184] ion_ioctl+0xea/0x1f0 [ 1436.872194] ? ion_query_heaps+0x360/0x360 [ 1436.872209] ? __tun_chr_ioctl.isra.0+0x3310/0x3310 [ 1436.872215] ? ion_query_heaps+0x360/0x360 [ 1436.872225] do_vfs_ioctl+0x75a/0xff0 [ 1436.872237] ? ioctl_preallocate+0x1a0/0x1a0 [ 1436.872247] ? lock_downgrade+0x740/0x740 [ 1436.872260] ? __fget+0x225/0x360 [ 1436.872271] ? do_vfs_ioctl+0xff0/0xff0 [ 1436.900410] 0 [ 1436.903853] ? security_file_ioctl+0x83/0xb0 [ 1436.903866] SyS_ioctl+0x7f/0xb0 [ 1436.903874] ? do_vfs_ioctl+0xff0/0xff0 [ 1436.903886] do_syscall_64+0x1d5/0x640 [ 1436.903901] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1436.903911] RIP: 0033:0x466459 [ 1436.918043] 0 [ 1436.932733] RSP: 002b:00007f613992b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1436.932743] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1436.932749] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1436.932753] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1436.932758] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1436.932763] R13: 00007fff85f2b35f R14: 00007f613992b300 R15: 0000000000022000 [ 1437.061208] syz-executor.0: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1437.085985] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 1437.103531] CPU: 1 PID: 2273 Comm: syz-executor.0 Not tainted 4.14.228-syzkaller #0 [ 1437.111634] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1437.121100] Call Trace: [ 1437.123709] dump_stack+0x1b2/0x281 [ 1437.127494] warn_alloc.cold+0x96/0x1cc [ 1437.131490] ? zone_watermark_ok_safe+0x220/0x220 [ 1437.136453] __alloc_pages_nodemask+0x2127/0x2720 [ 1437.141517] ? io_schedule_timeout+0x140/0x140 [ 1437.146243] ? lock_acquire+0x170/0x3f0 [ 1437.150241] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1437.155301] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1437.161148] ? __mutex_unlock_slowpath+0x75/0x770 [ 1437.166014] alloc_pages_current+0x155/0x260 [ 1437.170762] ion_page_pool_alloc+0x118/0x1b0 [ 1437.175195] ion_system_heap_allocate+0x133/0x8c0 [ 1437.180052] ? ion_alloc+0x187/0x810 [ 1437.184079] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1437.189760] ? ion_system_contig_heap_create+0x130/0x130 [ 1437.195229] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1437.200263] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1437.205125] ion_alloc+0x204/0x810 [ 1437.208686] ? ion_dma_buf_release+0x40/0x40 [ 1437.213210] ? __might_fault+0x177/0x1b0 [ 1437.217451] ion_ioctl+0xea/0x1f0 [ 1437.221014] ? ion_query_heaps+0x360/0x360 [ 1437.225398] ? __tun_chr_ioctl.isra.0+0x3310/0x3310 [ 1437.230679] ? ion_query_heaps+0x360/0x360 [ 1437.235124] do_vfs_ioctl+0x75a/0xff0 [ 1437.239026] ? ioctl_preallocate+0x1a0/0x1a0 [ 1437.243618] ? lock_downgrade+0x740/0x740 [ 1437.248332] ? __fget+0x225/0x360 [ 1437.252046] ? do_vfs_ioctl+0xff0/0xff0 [ 1437.256041] ? security_file_ioctl+0x83/0xb0 [ 1437.260474] SyS_ioctl+0x7f/0xb0 [ 1437.264047] ? do_vfs_ioctl+0xff0/0xff0 [ 1437.268035] do_syscall_64+0x1d5/0x640 [ 1437.271943] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1437.277146] RIP: 0033:0x466459 [ 1437.280349] RSP: 002b:00007f2e01ed3188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1437.288072] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1437.290490] warn_alloc_show_mem: 1 callbacks suppressed [ 1437.290493] Mem-Info: [ 1437.295351] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1437.295359] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1437.318108] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1437.320506] active_anon:76411 inactive_anon:29107 isolated_anon:0 [ 1437.320506] active_file:1640 inactive_file:1122 isolated_file:64 [ 1437.320506] unevictable:0 dirty:15 writeback:0 unstable:0 [ 1437.320506] slab_reclaimable:13318 slab_unreclaimable:130193 [ 1437.320506] mapped:54847 shmem:29492 pagetables:8889 bounce:0 [ 1437.320506] free:14041 free_pcp:370 free_cma:0 [ 1437.325490] R13: 00007ffdb70bf23f R14: 00007f2e01ed3300 R15: 0000000000022000 [ 1437.530496] Node 0 active_anon:287976kB inactive_anon:85208kB active_file:4332kB inactive_file:4192kB unevictable:0kB isolated(anon):0kB isolated(file):128kB mapped:181664kB dirty:56kB writeback:0kB shmem:86516kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 233472kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1437.565277] 0 0 [ 1437.571726] Node 1 Normal free:132700kB min:53696kB low:67120kB high:80544kB active_anon:17668kB inactive_anon:31220kB active_file:48kB inactive_file:48kB unevictable:0kB writepending:4kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:6400kB pagetables:19116kB bounce:0kB free_pcp:672kB local_pcp:620kB free_cma:0kB [ 1437.660512] Node 1 active_anon:17668kB inactive_anon:31220kB active_file:48kB inactive_file:48kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:36324kB dirty:4kB writeback:0kB shmem:31452kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1437.662959] lowmem_reserve[]: 0 0 0 0 0 [ 1437.758414] Node 0 DMA: 180*4kB (UME) 15*8kB (UME) 14*16kB (UME) 4*32kB (ME) 3*64kB (ME) 1*128kB (M) 1*256kB (E) 2*512kB (ME) 2*1024kB (ME) 3*2048kB (UME) 0*4096kB = 10984kB [ 1437.783917] Node 0 DMA free:10960kB min:204kB low:252kB high:300kB active_anon:2100kB inactive_anon:8kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:56kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1437.810371] Node 0 DMA32: 676*4kB (UME) 373*8kB (UME) 134*16kB (UME) 85*32kB (UE) 750*64kB (U) 11*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 59960kB [ 1437.860074] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1437.897479] Node 1 Normal: 62*4kB (UM) 46*8kB (UM) 45*16kB (UM) 45*32kB (UM) 1681*64kB (U) 120*128kB (U) 7*256kB (U) 7*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 131096kB [ 1437.923981] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1437.929058] Node 0 DMA32 free:44720kB min:36200kB low:45248kB high:54296kB active_anon:285876kB inactive_anon:85200kB active_file:2936kB inactive_file:3936kB unevictable:0kB writepending:56kB present:3129332kB managed:2788136kB mlocked:0kB kernel_stack:11936kB pagetables:16384kB bounce:0kB free_pcp:1440kB local_pcp:704kB free_cma:0kB [ 1437.959600] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1437.999943] Node 0 hugepages_total=1 hugepages_free=1 hugepages_surp=1 hugepages_size=2048kB [ 1438.035754] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1438.079637] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1438.093681] lowmem_reserve[]: 0 0 0 0 0 [ 1438.098004] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1438.117251] 31228 total pagecache pages [ 1438.150543] 0 pages in swap cache [ 1438.167571] Swap cache stats: add 0, delete 0, find 0/0 [ 1438.190536] Free swap = 0kB [ 1438.204793] Total swap = 0kB [ 1438.219045] 2097051 pages RAM [ 1438.228541] lowmem_reserve[]: 0 0 0 0 0 [ 1438.232803] 0 pages HighMem/MovableOnly [ 1438.250526] 363846 pages reserved [ 1438.267893] 0 pages cma reserved [ 1438.270492] Node 1 Normal free:54372kB min:53696kB low:67120kB high:80544kB active_anon:17672kB inactive_anon:31232kB active_file:248kB inactive_file:48kB unevictable:0kB writepending:4kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:6400kB pagetables:19116kB bounce:0kB free_pcp:808kB local_pcp:164kB free_cma:0kB [ 1438.400510] lowmem_reserve[]: 0 0 0 0 0 [ 1438.404414] oom_reaper: reaped process 2273 (syz-executor.0), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1438.404738] Node 0 DMA: 183*4kB (UME) 18*8kB (UME) 13*16kB (UME) 3*32kB (M) 2*64kB (ME) 2*128kB (ME) 1*256kB (E) 2*512kB (ME) 2*1024kB (ME) 3*2048kB (UME) 0*4096kB = 11036kB [ 1438.473845] syz-executor.0 invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1438.500520] Node 0 DMA32: 1696*4kB (ME) 532*8kB (ME) 79*16kB (UME) 6*32kB (UME) 56*64kB (UM) 13*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 17744kB [ 1438.520521] syz-executor.4: page allocation failure: order:0 [ 1438.520534] syz-executor.5: page allocation failure: order:0 [ 1438.526485] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1438.526497] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1438.532565] Bluetooth: hci3 command 0x041b tx timeout [ 1438.552022] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 1438.557169] CPU: 0 PID: 1098 Comm: syz-executor.0 Not tainted 4.14.228-syzkaller #0 [ 1438.563680] (null) [ 1438.564974] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1438.567126] syz-executor.5 cpuset= [ 1438.576474] Call Trace: [ 1438.576495] dump_stack+0x1b2/0x281 [ 1438.576507] dump_header+0x178/0x82f [ 1438.576517] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1438.576525] ? ___ratelimit+0x2cd/0x530 [ 1438.576534] oom_kill_process.cold+0x10/0xb18 [ 1438.576552] out_of_memory+0xe3e/0x1190 [ 1438.576564] ? oom_killer_disable+0x1c0/0x1c0 [ 1438.576571] ? mutex_trylock+0x152/0x1a0 [ 1438.576584] __alloc_pages_nodemask+0x23e1/0x2720 [ 1438.621651] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1438.623705] / mems_allowed=0-1 [ 1438.626504] alloc_pages_current+0x155/0x260 [ 1438.634085] filemap_fault+0xea3/0x1980 [ 1438.638070] ext4_filemap_fault+0x84/0xb0 [ 1438.642217] __do_fault+0xfa/0x380 [ 1438.645751] __handle_mm_fault+0x2497/0x4620 [ 1438.650173] ? vm_insert_page+0x7c0/0x7c0 [ 1438.654313] ? nanosleep_copyout+0x100/0x100 [ 1438.658730] handle_mm_fault+0x391/0x860 [ 1438.662789] __do_page_fault+0x549/0xad0 [ 1438.666844] ? spurious_fault+0x640/0x640 [ 1438.670525] (null) [ 1438.670982] ? do_page_fault+0x60/0x500 [ 1438.673123] syz-executor.4 cpuset= [ 1438.677097] ? page_fault+0x2f/0x50 [ 1438.677104] / mems_allowed=0-1 [ 1438.680631] page_fault+0x45/0x50 [ 1438.680640] RIP: 15ed9f:0xb [ 1438.680644] RSP: 000f:00007ffdb70bf4fc EFLAGS: 00000032 [ 1438.691514] Node 0 [ 1438.697297] CPU: 1 PID: 2248 Comm: syz-executor.5 Not tainted 4.14.228-syzkaller #0 [ 1438.709576] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1438.710588] Normal: [ 1438.718926] Call Trace: [ 1438.718935] 0*4kB [ 1438.721247] dump_stack+0x1b2/0x281 [ 1438.721262] warn_alloc.cold+0x96/0x1cc [ 1438.721274] ? zone_watermark_ok_safe+0x220/0x220 [ 1438.738393] ? usleep_range+0x130/0x130 [ 1438.740486] 0*8kB [ 1438.742361] ? try_to_free_pages+0x23f/0x6e0 [ 1438.742363] 0*16kB 0*32kB [ 1438.744505] ? _find_next_bit+0xdb/0x100 [ 1438.748893] 0*64kB [ 1438.751718] ? run_timer_softirq+0x5a0/0x5a0 [ 1438.751736] __alloc_pages_nodemask+0x2127/0x2720 [ 1438.751760] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1438.767799] 0*128kB [ 1438.772047] ? migrate_swap_stop+0x880/0x880 [ 1438.772057] ? lock_acquire+0x170/0x3f0 [ 1438.772080] alloc_pages_current+0x155/0x260 [ 1438.775441] 0*256kB [ 1438.778815] ion_page_pool_alloc+0x118/0x1b0 [ 1438.782794] 0*512kB [ 1438.787158] ion_system_heap_allocate+0x133/0x8c0 [ 1438.789473] 0*1024kB [ 1438.793886] ? _raw_spin_unlock+0x29/0x40 [ 1438.793896] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1438.793906] ? ion_system_contig_heap_create+0x130/0x130 [ 1438.793919] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1438.796218] 0*2048kB [ 1438.801044] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1438.801056] ion_alloc+0x27a/0x810 [ 1438.801069] ? ion_dma_buf_release+0x40/0x40 [ 1438.803455] 0*4096kB [ 1438.807586] ? __might_fault+0x177/0x1b0 [ 1438.812519] = 0kB [ 1438.817931] ion_ioctl+0xea/0x1f0 [ 1438.822950] Node 1 [ 1438.825316] ? ion_query_heaps+0x360/0x360 [ 1438.830130] Normal: [ 1438.833660] ? __tun_chr_ioctl.isra.0+0x3310/0x3310 [ 1438.833667] ? ion_query_heaps+0x360/0x360 [ 1438.833678] do_vfs_ioctl+0x75a/0xff0 [ 1438.833689] ? ioctl_preallocate+0x1a0/0x1a0 [ 1438.838076] 6*4kB [ 1438.840501] ? lock_downgrade+0x740/0x740 [ 1438.840515] ? __fget+0x225/0x360 [ 1438.840525] ? do_vfs_ioctl+0xff0/0xff0 [ 1438.844710] (UM) [ 1438.846618] ? security_file_ioctl+0x83/0xb0 [ 1438.850051] 7*8kB [ 1438.852303] SyS_ioctl+0x7f/0xb0 [ 1438.852313] ? do_vfs_ioctl+0xff0/0xff0 [ 1438.852325] do_syscall_64+0x1d5/0x640 [ 1438.852343] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1438.856576] Mem-Info: [ 1438.858869] RIP: 0033:0x466459 [ 1438.863903] (UM) [ 1438.868077] RSP: 002b:00007f2761281188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1438.871906] active_anon:76415 inactive_anon:29114 isolated_anon:0 [ 1438.871906] active_file:84 inactive_file:159 isolated_file:0 [ 1438.871906] unevictable:0 dirty:15 writeback:0 unstable:0 [ 1438.871906] slab_reclaimable:13308 slab_unreclaimable:132215 [ 1438.871906] mapped:52736 shmem:29492 pagetables:8889 bounce:0 [ 1438.871906] free:14013 free_pcp:156 free_cma:0 [ 1438.876252] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1438.878389] Node 0 active_anon:287988kB inactive_anon:85224kB active_file:116kB inactive_file:32kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:174220kB dirty:56kB writeback:0kB shmem:86516kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 233472kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1438.882505] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1438.882510] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1438.882515] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1438.882520] R13: 00007ffddf757caf R14: 00007f2761281300 R15: 0000000000022000 [ 1439.016384] 5*16kB [ 1439.022444] Node 1 active_anon:17656kB inactive_anon:31232kB active_file:0kB inactive_file:236kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:36328kB dirty:4kB writeback:0kB shmem:31452kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1439.060086] Node 0 DMA free:10972kB min:204kB low:252kB high:300kB active_anon:2100kB inactive_anon:8kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:56kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1439.072390] (UM) [ 1439.121132] CPU: 0 PID: 2244 Comm: syz-executor.4 Not tainted 4.14.228-syzkaller #0 [ 1439.131001] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1439.132375] 0*32kB [ 1439.140345] Call Trace: [ 1439.140353] 2*64kB [ 1439.142591] dump_stack+0x1b2/0x281 [ 1439.142606] warn_alloc.cold+0x96/0x1cc [ 1439.142619] ? zone_watermark_ok_safe+0x220/0x220 [ 1439.142629] ? usleep_range+0x130/0x130 [ 1439.142641] ? _find_next_bit+0xdb/0x100 [ 1439.142651] ? run_timer_softirq+0x5a0/0x5a0 [ 1439.142666] __alloc_pages_nodemask+0x2127/0x2720 [ 1439.172557] (UM) 86*128kB (U) 31*256kB (UM) [ 1439.177077] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1439.177090] ? migrate_swap_stop+0x880/0x880 [ 1439.190721] ? lock_acquire+0x170/0x3f0 [ 1439.194709] alloc_pages_current+0x155/0x260 [ 1439.199126] ion_page_pool_alloc+0x118/0x1b0 [ 1439.201754] 16*512kB (U) [ 1439.203526] ion_system_heap_allocate+0x133/0x8c0 [ 1439.203539] ? _raw_spin_unlock+0x29/0x40 [ 1439.206277] 0*1024kB [ 1439.211101] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1439.211110] ? ion_system_contig_heap_create+0x130/0x130 [ 1439.211121] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1439.211132] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1439.211143] ion_alloc+0x27a/0x810 [ 1439.211157] ? ion_dma_buf_release+0x40/0x40 [ 1439.211169] ? __might_fault+0x177/0x1b0 [ 1439.211180] ion_ioctl+0xea/0x1f0 [ 1439.242335] 0*2048kB [ 1439.245838] ? ion_query_heaps+0x360/0x360 [ 1439.249875] 0*4096kB [ 1439.253342] ? __tun_chr_ioctl.isra.0+0x3310/0x3310 [ 1439.253350] ? ion_query_heaps+0x360/0x360 [ 1439.253361] do_vfs_ioctl+0x75a/0xff0 [ 1439.253373] ? ioctl_preallocate+0x1a0/0x1a0 [ 1439.253383] ? lock_downgrade+0x740/0x740 [ 1439.253399] ? __fget+0x225/0x360 [ 1439.281767] = 27424kB [ 1439.283912] ? do_vfs_ioctl+0xff0/0xff0 [ 1439.287351] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1439.289743] ? security_file_ioctl+0x83/0xb0 [ 1439.306924] SyS_ioctl+0x7f/0xb0 [ 1439.310283] ? do_vfs_ioctl+0xff0/0xff0 [ 1439.314254] do_syscall_64+0x1d5/0x640 [ 1439.318146] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1439.321927] Node 0 hugepages_total=1 hugepages_free=1 hugepages_surp=1 hugepages_size=2048kB [ 1439.323345] RIP: 0033:0x466459 [ 1439.335093] RSP: 002b:00007f6a95319188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1439.342801] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1439.350064] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1439.357344] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1439.361770] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1439.364603] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1439.364612] R13: 00007ffc0329f33f R14: 00007f6a95319300 R15: 0000000000022000 [ 1439.414505] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1439.423238] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1439.428361] Node 0 DMA32 free:45168kB min:36200kB low:45248kB high:54296kB active_anon:285808kB inactive_anon:85216kB active_file:56kB inactive_file:3060kB unevictable:0kB writepending:0kB present:3129332kB managed:2788136kB mlocked:0kB kernel_stack:11936kB pagetables:16384kB bounce:0kB free_pcp:364kB local_pcp:152kB free_cma:0kB [ 1439.463254] 30669 total pagecache pages [ 1439.475745] 0 pages in swap cache [ 1439.506598] Swap cache stats: add 0, delete 0, find 0/0 [ 1439.513772] Free swap = 0kB [ 1439.517726] Total swap = 0kB [ 1439.530183] 2097051 pages RAM [ 1439.533967] 0 pages HighMem/MovableOnly [ 1439.538636] 363846 pages reserved [ 1439.548808] 0 pages cma reserved [ 1439.560511] warn_alloc_show_mem: 1 callbacks suppressed [ 1439.560515] Mem-Info: [ 1439.568467] active_anon:76316 inactive_anon:29114 isolated_anon:0 [ 1439.568467] active_file:11 inactive_file:1510 isolated_file:0 [ 1439.568467] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1439.568467] slab_reclaimable:13300 slab_unreclaimable:132560 [ 1439.568467] mapped:53680 shmem:29492 pagetables:8889 bounce:0 [ 1439.568467] free:28055 free_pcp:163 free_cma:0 [ 1439.590474] lowmem_reserve[]: 0 0 0 0 0 [ 1439.648519] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1439.721272] Node 0 active_anon:287608kB inactive_anon:85224kB active_file:956kB inactive_file:2460kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:176564kB dirty:0kB writeback:0kB shmem:86516kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 233472kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1439.749648] lowmem_reserve[]: 0 0 0 0 0 [ 1439.779004] Node 1 Normal free:44364kB min:53696kB low:67120kB high:80544kB active_anon:17556kB inactive_anon:31232kB active_file:264kB inactive_file:268kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:6400kB pagetables:19116kB bounce:0kB free_pcp:1484kB local_pcp:756kB free_cma:0kB [ 1439.820539] Node 1 active_anon:17556kB inactive_anon:31232kB active_file:48kB inactive_file:44kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:36456kB dirty:0kB writeback:0kB shmem:31452kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1439.870518] lowmem_reserve[]: 0 0 0 0 0 [ 1439.880552] Node 0 DMA: 9*4kB (ME) 8*8kB (ME) 30*16kB (UME) 17*32kB (UM) 2*64kB (ME) 2*128kB (ME) 1*256kB (E) 2*512kB (ME) 2*1024kB (ME) 3*2048kB (UME) 0*4096kB = 10980kB [ 1439.910524] Node 0 DMA32: 1718*4kB (ME) 1049*8kB (UME) 79*16kB (UME) 5*32kB (ME) 3*64kB (UM) 5*128kB (U) 16*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 21616kB [ 1439.926457] Node 0 DMA free:10960kB min:204kB low:252kB high:300kB active_anon:2100kB inactive_anon:8kB active_file:0kB inactive_file:40kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:56kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1439.932525] Node 0 [ 1439.953279] syz-executor.2: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1439.967400] Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1439.977578] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 1439.980521] syz-executor.3: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1439.982780] Node 1 [ 1439.994698] CPU: 0 PID: 2233 Comm: syz-executor.2 Not tainted 4.14.228-syzkaller #0 [ 1439.998149] syz-executor.0: [ 1440.004713] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1440.004718] Call Trace: [ 1440.004739] dump_stack+0x1b2/0x281 [ 1440.004753] warn_alloc.cold+0x96/0x1cc [ 1440.004767] ? zone_watermark_ok_safe+0x220/0x220 [ 1440.020837] page allocation failure: order:0 [ 1440.023287] ? usleep_range+0x130/0x130 [ 1440.027238] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1440.032056] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1440.032070] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1440.032080] ? run_timer_softirq+0x5a0/0x5a0 [ 1440.032099] __alloc_pages_nodemask+0x2127/0x2720 [ 1440.032115] ? lock_acquire+0x170/0x3f0 [ 1440.032130] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1440.032142] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1440.039631] syz-executor.3 cpuset= [ 1440.040514] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1440.040534] alloc_pages_current+0x155/0x260 [ 1440.040547] ion_page_pool_alloc+0x118/0x1b0 [ 1440.040557] ion_system_heap_allocate+0x133/0x8c0 [ 1440.047746] / [ 1440.052726] ? _raw_spin_unlock+0x29/0x40 [ 1440.063700] lowmem_reserve[]: [ 1440.066942] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1440.070940] (null) [ 1440.075729] ? ion_system_contig_heap_create+0x130/0x130 [ 1440.080194] syz-executor.0 cpuset= [ 1440.083718] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1440.083731] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1440.083742] ion_alloc+0x27a/0x810 [ 1440.083756] ? ion_dma_buf_release+0x40/0x40 [ 1440.083768] ? __might_fault+0x177/0x1b0 [ 1440.083779] ion_ioctl+0xea/0x1f0 [ 1440.083788] ? ion_query_heaps+0x360/0x360 [ 1440.083802] ? __tun_chr_ioctl.isra.0+0x3310/0x3310 [ 1440.083810] ? ion_query_heaps+0x360/0x360 [ 1440.083820] do_vfs_ioctl+0x75a/0xff0 [ 1440.093094] 0 [ 1440.093644] ? ioctl_preallocate+0x1a0/0x1a0 [ 1440.098029] 2717 [ 1440.102854] ? lock_downgrade+0x740/0x740 [ 1440.102869] ? __fget+0x225/0x360 [ 1440.102878] ? do_vfs_ioctl+0xff0/0xff0 [ 1440.102890] ? security_file_ioctl+0x83/0xb0 [ 1440.102900] SyS_ioctl+0x7f/0xb0 [ 1440.102908] ? do_vfs_ioctl+0xff0/0xff0 [ 1440.102921] do_syscall_64+0x1d5/0x640 [ 1440.105539] mems_allowed=0-1 [ 1440.108760] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1440.121413] / [ 1440.124325] RIP: 0033:0x466459 [ 1440.127859] mems_allowed=0-1 [ 1440.132853] RSP: 002b:00007f613992b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1440.132864] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1440.132869] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1440.132874] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1440.132879] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1440.132885] R13: 00007fff85f2b35f R14: 00007f613992b300 R15: 0000000000022000 [ 1440.140962] Normal: [ 1440.149252] 2718 [ 1440.149750] 471*4kB [ 1440.153291] CPU: 1 PID: 2254 Comm: syz-executor.3 Not tainted 4.14.228-syzkaller #0 [ 1440.157452] (UM) [ 1440.162444] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1440.162449] Call Trace: [ 1440.162469] dump_stack+0x1b2/0x281 [ 1440.162484] warn_alloc.cold+0x96/0x1cc [ 1440.166692] 131*8kB [ 1440.170478] ? zone_watermark_ok_safe+0x220/0x220 [ 1440.170490] ? usleep_range+0x130/0x130 [ 1440.170501] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1440.172280] (UM) [ 1440.176682] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1440.178720] 115*16kB [ 1440.182851] ? run_timer_softirq+0x5a0/0x5a0 [ 1440.182868] __alloc_pages_nodemask+0x2127/0x2720 [ 1440.182884] ? lock_acquire+0x170/0x3f0 [ 1440.186310] (UM) [ 1440.190283] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1440.194685] 110*32kB [ 1440.198017] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1440.201983] (UM) [ 1440.205841] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1440.208911] 111*64kB [ 1440.214094] alloc_pages_current+0x155/0x260 [ 1440.214108] ion_page_pool_alloc+0x118/0x1b0 [ 1440.230473] (UM) [ 1440.237042] ion_system_heap_allocate+0x133/0x8c0 [ 1440.260475] 2*128kB [ 1440.266066] ? _raw_spin_unlock+0x29/0x40 [ 1440.268364] (U) [ 1440.270429] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1440.290488] 27*256kB [ 1440.291979] ? ion_system_contig_heap_create+0x130/0x130 [ 1440.294537] (U) [ 1440.298154] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1440.310471] 27*512kB [ 1440.313232] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1440.318320] (U) [ 1440.320372] ion_alloc+0x27a/0x810 [ 1440.340470] 5*1024kB [ 1440.340920] ? ion_dma_buf_release+0x40/0x40 [ 1440.342952] (UM) [ 1440.347780] ? __might_fault+0x177/0x1b0 [ 1440.350161] 0*2048kB [ 1440.354640] ion_ioctl+0xea/0x1f0 [ 1440.354649] ? ion_query_heaps+0x360/0x360 [ 1440.354668] ? __tun_chr_ioctl.isra.0+0x3310/0x3310 [ 1440.380488] 0*4096kB [ 1440.382472] ? ion_query_heaps+0x360/0x360 [ 1440.386604] = 41508kB [ 1440.388563] do_vfs_ioctl+0x75a/0xff0 [ 1440.420478] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1440.420949] ? ioctl_preallocate+0x1a0/0x1a0 [ 1440.423336] Node 0 hugepages_total=1 hugepages_free=1 hugepages_surp=1 hugepages_size=2048kB [ 1440.427727] ? lock_downgrade+0x740/0x740 [ 1440.429762] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1440.433806] ? __fget+0x225/0x360 [ 1440.433815] ? do_vfs_ioctl+0xff0/0xff0 [ 1440.433827] ? security_file_ioctl+0x83/0xb0 [ 1440.433838] SyS_ioctl+0x7f/0xb0 [ 1440.450470] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1440.451261] ? do_vfs_ioctl+0xff0/0xff0 [ 1440.455471] 29525 total pagecache pages [ 1440.457869] do_syscall_64+0x1d5/0x640 [ 1440.470475] 0 pages in swap cache [ 1440.474874] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1440.500469] Swap cache stats: add 0, delete 0, find 0/0 [ 1440.503778] RIP: 0033:0x466459 [ 1440.508177] Free swap = 0kB [ 1440.511521] RSP: 002b:00007f6ba9361188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1440.511531] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1440.511537] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1440.511542] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1440.511547] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1440.511555] R13: 00007ffd9352709f R14: 00007f6ba9361300 R15: 0000000000022000 [ 1440.540471] Total swap = 0kB [ 1440.562577] 2718 [ 1440.605236] CPU: 1 PID: 2273 Comm: syz-executor.0 Not tainted 4.14.228-syzkaller #0 [ 1440.615097] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1440.624614] Call Trace: [ 1440.627203] dump_stack+0x1b2/0x281 [ 1440.630830] warn_alloc.cold+0x96/0x1cc [ 1440.634804] ? zone_watermark_ok_safe+0x220/0x220 [ 1440.639651] ? usleep_range+0x130/0x130 [ 1440.643647] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1440.648750] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1440.650475] 2097051 pages RAM [ 1440.653782] ? run_timer_softirq+0x5a0/0x5a0 [ 1440.656872] 0 pages HighMem/MovableOnly [ 1440.661269] __alloc_pages_nodemask+0x2127/0x2720 [ 1440.661286] ? lock_acquire+0x170/0x3f0 [ 1440.661301] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1440.679126] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1440.683634] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1440.689092] alloc_pages_current+0x155/0x260 [ 1440.693496] ion_page_pool_alloc+0x118/0x1b0 [ 1440.697900] ion_system_heap_allocate+0x133/0x8c0 [ 1440.700097] 363846 pages reserved [ 1440.702758] ? ion_alloc+0x187/0x810 [ 1440.702770] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1440.702778] ? ion_system_contig_heap_create+0x130/0x130 [ 1440.702788] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1440.702798] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1440.702809] ion_alloc+0x204/0x810 [ 1440.702821] ? ion_dma_buf_release+0x40/0x40 [ 1440.702833] ? __might_fault+0x177/0x1b0 [ 1440.702845] ion_ioctl+0xea/0x1f0 [ 1440.702853] ? ion_query_heaps+0x360/0x360 [ 1440.702866] ? __tun_chr_ioctl.isra.0+0x3310/0x3310 [ 1440.702875] ? ion_query_heaps+0x360/0x360 [ 1440.710478] 0 pages cma reserved [ 1440.715473] do_vfs_ioctl+0x75a/0xff0 [ 1440.760485] Out of memory (oom_kill_allocating_task): Kill process 1098 (syz-executor.0) score 0 or sacrifice child [ 1440.763329] ? ioctl_preallocate+0x1a0/0x1a0 [ 1440.767129] Killed process 1098 (syz-executor.0) total-vm:93120kB, anon-rss:108kB, file-rss:34564kB, shmem-rss:0kB [ 1440.777666] ? lock_downgrade+0x740/0x740 [ 1440.777681] ? __fget+0x225/0x360 [ 1440.777690] ? do_vfs_ioctl+0xff0/0xff0 [ 1440.777706] ? security_file_ioctl+0x83/0xb0 [ 1440.808534] SyS_ioctl+0x7f/0xb0 [ 1440.811895] ? do_vfs_ioctl+0xff0/0xff0 [ 1440.815883] do_syscall_64+0x1d5/0x640 [ 1440.819769] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1440.824956] RIP: 0033:0x466459 [ 1440.828142] RSP: 002b:00007f2e01ed3188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1440.835849] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1440.843113] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1440.850378] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1440.857643] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1440.864937] R13: 00007ffdb70bf23f R14: 00007f2e01ed3300 R15: 0000000000022000 [ 1440.877856] 2718 [ 1440.880384] Node 0 DMA32 free:64932kB min:36200kB low:45248kB high:54296kB active_anon:285484kB inactive_anon:85216kB active_file:64kB inactive_file:952kB unevictable:0kB writepending:0kB present:3129332kB managed:2788136kB mlocked:0kB kernel_stack:11872kB pagetables:16148kB bounce:0kB free_pcp:896kB local_pcp:812kB free_cma:0kB [ 1440.880747] Bluetooth: hci3 command 0x040f tx timeout [ 1440.914123] lowmem_reserve[]: 0 0 0 0 0 [ 1440.920610] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1440.953102] lowmem_reserve[]: 0 0 0 0 0 [ 1440.957167] Node 1 Normal free:832292kB min:53696kB low:67120kB high:80544kB active_anon:17552kB inactive_anon:31232kB active_file:8kB inactive_file:208kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:6400kB pagetables:19112kB bounce:0kB free_pcp:1316kB local_pcp:684kB free_cma:0kB [ 1440.998687] lowmem_reserve[]: 0 0 0 0 0 [ 1441.007849] warn_alloc_show_mem: 2 callbacks suppressed [ 1441.007854] Mem-Info: [ 1441.013150] Node 0 [ 1441.013392] active_anon:76284 inactive_anon:29114 isolated_anon:0 [ 1441.013392] active_file:46 inactive_file:761 isolated_file:0 [ 1441.013392] unevictable:0 dirty:10 writeback:0 unstable:0 [ 1441.013392] slab_reclaimable:13272 slab_unreclaimable:132801 [ 1441.013392] mapped:53084 shmem:29492 pagetables:8829 bounce:0 [ 1441.013392] free:235262 free_pcp:708 free_cma:0 [ 1441.016083] DMA: [ 1441.017886] Node 0 active_anon:287584kB inactive_anon:85224kB active_file:176kB inactive_file:2936kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:175908kB dirty:36kB writeback:0kB shmem:86516kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 233472kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1441.017903] Node 1 active_anon:17552kB inactive_anon:31232kB active_file:8kB inactive_file:208kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:36428kB dirty:4kB writeback:0kB shmem:31452kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1441.017907] Node 0 DMA free:11684kB min:204kB low:252kB high:300kB active_anon:2100kB inactive_anon:8kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:56kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1441.017928] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1441.017949] Node 0 DMA32 free:83960kB min:36200kB low:45248kB high:54296kB active_anon:285484kB inactive_anon:85216kB active_file:176kB inactive_file:2936kB unevictable:0kB writepending:36kB present:3129332kB managed:2788136kB mlocked:0kB kernel_stack:11872kB pagetables:16148kB bounce:0kB free_pcp:1456kB local_pcp:740kB free_cma:0kB [ 1441.017972] lowmem_reserve[]: 0 0 0 0 0 20:22:55 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r1, 0x800454cf, &(0x7f0000000240)) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000180)={0x80000000, 0xa}) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x4000, 0x0) 20:22:55 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r1, 0x800454cf, &(0x7f0000000240)) ioctl$TUNSETSNDBUF(r1, 0x400454d4, &(0x7f0000000040)=0x1000) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r2, 0x800454cf, &(0x7f0000000240)) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000180)={0x80000000, 0xa}) openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) [ 1441.100486] 10*4kB [ 1441.215621] (UME) 10*8kB (UME) 30*16kB (UME) 17*32kB (UM) 3*64kB (UME) 3*128kB (UME) 3*256kB (UE) 2*512kB (ME) 2*1024kB (ME) 3*2048kB (UME) 0*4096kB = 11704kB [ 1441.217135] Node 0 [ 1441.245376] Node 0 [ 1441.246154] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1441.247880] DMA32: [ 1441.250497] lowmem_reserve[]: [ 1441.283044] 2781*4kB (UME) 3196*8kB (UME) 3108*16kB (UME) 25*32kB (UME) 366*64kB (UM) 137*128kB (U) 32*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 136372kB [ 1441.294121] 0 [ 1441.312981] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1441.331706] 0 [ 1441.368176] Node 1 [ 1441.370069] 0 [ 1441.375168] Normal: [ 1441.380294] 0 [ 1441.384927] 7968*4kB (U) 997*8kB (UM) 983*16kB (UM) 954*32kB (UM) 6055*64kB (UM) 1476*128kB (UM) 284*256kB (U) 179*512kB (UM) 5*1024kB (UM) 5*2048kB (U) 4*4096kB (U) = 858648kB [ 1441.391515] 0 [ 1441.436100] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1441.454528] Node 1 Normal free:831552kB min:53696kB low:67120kB high:80544kB active_anon:17548kB inactive_anon:31232kB active_file:12kB inactive_file:264kB unevictable:0kB writepending:4kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:6368kB pagetables:18964kB bounce:0kB free_pcp:1320kB local_pcp:620kB free_cma:0kB [ 1441.466184] Node 0 hugepages_total=1 hugepages_free=1 hugepages_surp=1 hugepages_size=2048kB [ 1441.547192] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1441.553622] lowmem_reserve[]: [ 1441.572507] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1441.580393] 0 0 0 0 0 [ 1441.599092] Node 0 DMA: 10*4kB (UME) 16*8kB (UME) 32*16kB (UME) 17*32kB (UM) 3*64kB (UME) 2*128kB (ME) 1*256kB (E) 2*512kB (ME) 2*1024kB (ME) 3*2048kB (UME) 0*4096kB = 11144kB [ 1441.605978] 32331 total pagecache pages [ 1441.637587] 0 pages in swap cache [ 1441.647712] Swap cache stats: add 0, delete 0, find 0/0 [ 1441.658657] Free swap = 0kB [ 1441.677288] Total swap = 0kB [ 1441.680492] Node 0 DMA32: 3036*4kB (UME) 3870*8kB (UME) 6169*16kB (UE) 902*32kB (UME) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 170672kB [ 1441.687206] 2097051 pages RAM [ 1441.719405] 0 pages HighMem/MovableOnly [ 1441.720502] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1441.737524] 363846 pages reserved [ 1441.749337] 0 pages cma reserved 20:22:55 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r1, 0x800454cf, &(0x7f0000000240)) ioctl$TUNSETSNDBUF(r1, 0x400454d4, &(0x7f0000000040)=0x1000) openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000180)={0x80000000, 0xa}) [ 1441.763076] Node 1 Normal: 9672*4kB (U) 2081*8kB (UM) 1765*16kB (UM) 1794*32kB (UM) 0*64kB 869*128kB (U) 323*256kB (U) 181*512kB (U) 126*1024kB (U) 5*2048kB (U) 0*4096kB = 566840kB [ 1441.862946] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1441.899417] Node 0 hugepages_total=1 hugepages_free=1 hugepages_surp=1 hugepages_size=2048kB [ 1441.919113] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1441.949326] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1441.980414] 32405 total pagecache pages [ 1441.992253] 0 pages in swap cache [ 1442.001309] Swap cache stats: add 0, delete 0, find 0/0 [ 1442.019002] Free swap = 0kB [ 1442.033127] Total swap = 0kB [ 1442.044814] 2097051 pages RAM [ 1442.057936] 0 pages HighMem/MovableOnly [ 1442.063133] 363846 pages reserved [ 1442.086248] 0 pages cma reserved [ 1443.010518] Bluetooth: hci3 command 0x0419 tx timeout 20:22:57 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r1, 0x800454cf, &(0x7f0000000240)) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r2, 0x800454cf, &(0x7f0000000240)) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000080)={'lo\x00', @broadcast}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000180)={0x80000000, 0xa}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x4000, 0x0) ioctl$TUNSETPERSIST(r4, 0x400454cb, 0x1) ioctl$TUNGETFEATURES(r3, 0x800454cf, &(0x7f0000000240)) ioctl$TUNSETOWNER(r3, 0x400454cc, 0xffffffffffffffff) [ 1444.428006] syz-executor.4: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1444.428234] syz-executor.0: [ 1444.446170] syz-executor.2: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1444.452538] syz-executor.5: [ 1444.466889] syz-executor.4 cpuset= [ 1444.471400] syz-executor.3: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1444.482446] page allocation failure: order:4 [ 1444.490196] / [ 1444.491341] page allocation failure: order:4 [ 1444.494677] syz-executor.2 cpuset= [ 1444.498700] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1444.503925] mems_allowed=0-1 [ 1444.507780] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1444.511502] / [ 1444.517937] (null) [ 1444.524935] CPU: 0 PID: 2282 Comm: syz-executor.4 Not tainted 4.14.228-syzkaller #0 [ 1444.532413] (null) [ 1444.533343] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1444.535579] syz-executor.0 cpuset= [ 1444.544806] Call Trace: [ 1444.544825] dump_stack+0x1b2/0x281 [ 1444.544841] warn_alloc.cold+0x96/0x1cc [ 1444.544853] ? zone_watermark_ok_safe+0x220/0x220 [ 1444.544875] __alloc_pages_nodemask+0x2127/0x2720 [ 1444.555261] syz-executor.5 cpuset= [ 1444.558543] ? lock_acquire+0x170/0x3f0 [ 1444.558559] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1444.577134] / [ 1444.580519] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1444.582901] / [ 1444.587666] ? __mutex_unlock_slowpath+0x75/0x770 [ 1444.592302] mems_allowed=0-1 [ 1444.594238] alloc_pages_current+0x155/0x260 [ 1444.594253] ion_page_pool_alloc+0x118/0x1b0 [ 1444.594263] ion_system_heap_allocate+0x133/0x8c0 [ 1444.605083] mems_allowed=0-1 [ 1444.606161] ? ion_alloc+0x187/0x810 [ 1444.606173] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1444.606184] ? ion_system_contig_heap_create+0x130/0x130 [ 1444.628664] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1444.633679] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1444.638535] ion_alloc+0x204/0x810 [ 1444.642080] ? ion_dma_buf_release+0x40/0x40 [ 1444.646488] ? __might_fault+0x177/0x1b0 [ 1444.650549] ion_ioctl+0xea/0x1f0 [ 1444.654008] ? ion_query_heaps+0x360/0x360 [ 1444.658254] ? __tun_chr_ioctl.isra.0+0x3310/0x3310 [ 1444.663262] ? ion_query_heaps+0x360/0x360 [ 1444.667491] do_vfs_ioctl+0x75a/0xff0 [ 1444.671288] ? ioctl_preallocate+0x1a0/0x1a0 [ 1444.675703] ? lock_downgrade+0x740/0x740 [ 1444.679845] ? __fget+0x225/0x360 [ 1444.683289] ? do_vfs_ioctl+0xff0/0xff0 [ 1444.687257] ? security_file_ioctl+0x83/0xb0 [ 1444.691659] SyS_ioctl+0x7f/0xb0 [ 1444.695013] ? do_vfs_ioctl+0xff0/0xff0 [ 1444.698980] do_syscall_64+0x1d5/0x640 [ 1444.702864] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1444.708043] RIP: 0033:0x466459 [ 1444.711223] RSP: 002b:00007f6a95319188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1444.718937] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1444.726194] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1444.733450] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1444.740725] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1444.747986] R13: 00007ffc0329f33f R14: 00007f6a95319300 R15: 0000000000022000 [ 1444.755345] CPU: 1 PID: 2273 Comm: syz-executor.0 Not tainted 4.14.228-syzkaller #0 [ 1444.756932] syz-executor.3 cpuset= [ 1444.763141] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1444.763145] Call Trace: [ 1444.763163] dump_stack+0x1b2/0x281 [ 1444.763177] warn_alloc.cold+0x96/0x1cc [ 1444.763189] ? zone_watermark_ok_safe+0x220/0x220 [ 1444.763213] __alloc_pages_nodemask+0x2127/0x2720 [ 1444.763230] ? lock_acquire+0x170/0x3f0 [ 1444.763246] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1444.763265] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1444.763279] ? __mutex_unlock_slowpath+0x75/0x770 [ 1444.763295] alloc_pages_current+0x155/0x260 [ 1444.763308] ion_page_pool_alloc+0x118/0x1b0 [ 1444.763319] ion_system_heap_allocate+0x133/0x8c0 [ 1444.763331] ? _raw_spin_unlock+0x29/0x40 [ 1444.763340] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1444.763350] ? ion_system_contig_heap_create+0x130/0x130 [ 1444.763361] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1444.763372] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1444.763383] ion_alloc+0x27a/0x810 [ 1444.763396] ? ion_dma_buf_release+0x40/0x40 [ 1444.763409] ? __might_fault+0x177/0x1b0 [ 1444.763421] ion_ioctl+0xea/0x1f0 [ 1444.763430] ? ion_query_heaps+0x360/0x360 [ 1444.763445] ? __tun_chr_ioctl.isra.0+0x3310/0x3310 [ 1444.763453] ? ion_query_heaps+0x360/0x360 [ 1444.763463] do_vfs_ioctl+0x75a/0xff0 [ 1444.763475] ? ioctl_preallocate+0x1a0/0x1a0 [ 1444.763484] ? lock_downgrade+0x740/0x740 [ 1444.763498] ? __fget+0x225/0x360 [ 1444.763508] ? do_vfs_ioctl+0xff0/0xff0 [ 1444.763520] ? security_file_ioctl+0x83/0xb0 [ 1444.763530] SyS_ioctl+0x7f/0xb0 [ 1444.763538] ? do_vfs_ioctl+0xff0/0xff0 [ 1444.763550] do_syscall_64+0x1d5/0x640 [ 1444.763565] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1444.763582] RIP: 0033:0x466459 [ 1444.763588] RSP: 002b:00007f2e01ed3188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1444.763598] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1444.763604] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1444.763609] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1444.763615] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1444.763621] R13: 00007ffdb70bf23f R14: 00007f2e01ed3300 R15: 0000000000022000 [ 1444.770132] IPVS: ftp: loaded support on port[0] = 21 [ 1444.776825] mems_allowed=0-1 [ 1444.792773] CPU: 1 PID: 2291 Comm: syz-executor.5 Not tainted 4.14.228-syzkaller #0 [ 1444.797111] / [ 1444.800710] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1444.820484] mems_allowed=0-1 [ 1444.824568] Call Trace: [ 1445.002810] dump_stack+0x1b2/0x281 [ 1445.006436] warn_alloc.cold+0x96/0x1cc [ 1445.010401] ? zone_watermark_ok_safe+0x220/0x220 [ 1445.015266] __alloc_pages_nodemask+0x2127/0x2720 [ 1445.020107] ? lock_acquire+0x170/0x3f0 [ 1445.024091] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1445.028942] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1445.034384] ? __mutex_unlock_slowpath+0x75/0x770 [ 1445.039221] alloc_pages_current+0x155/0x260 [ 1445.043636] ion_page_pool_alloc+0x118/0x1b0 [ 1445.048033] ion_system_heap_allocate+0x133/0x8c0 [ 1445.052866] ? ion_alloc+0x187/0x810 [ 1445.056581] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1445.062021] ? ion_system_contig_heap_create+0x130/0x130 [ 1445.067458] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1445.072469] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1445.077305] ion_alloc+0x204/0x810 [ 1445.080842] ? ion_dma_buf_release+0x40/0x40 [ 1445.085239] ? __might_fault+0x177/0x1b0 [ 1445.089306] ion_ioctl+0xea/0x1f0 [ 1445.092760] ? ion_query_heaps+0x360/0x360 [ 1445.096994] ? ion_query_heaps+0x360/0x360 [ 1445.101238] do_vfs_ioctl+0x75a/0xff0 [ 1445.105028] ? ioctl_preallocate+0x1a0/0x1a0 [ 1445.109434] ? lock_downgrade+0x740/0x740 [ 1445.113576] ? __fget+0x225/0x360 [ 1445.117031] ? do_vfs_ioctl+0xff0/0xff0 [ 1445.120997] ? security_file_ioctl+0x83/0xb0 [ 1445.125407] SyS_ioctl+0x7f/0xb0 [ 1445.128763] ? do_vfs_ioctl+0xff0/0xff0 [ 1445.132731] do_syscall_64+0x1d5/0x640 [ 1445.136640] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1445.141825] RIP: 0033:0x466459 [ 1445.145001] RSP: 002b:00007f2761281188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1445.152721] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1445.159980] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1445.167248] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1445.174505] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1445.181762] R13: 00007ffddf757caf R14: 00007f2761281300 R15: 0000000000022000 [ 1445.189037] CPU: 0 PID: 2295 Comm: syz-executor.3 Not tainted 4.14.228-syzkaller #0 [ 1445.191822] warn_alloc_show_mem: 1 callbacks suppressed [ 1445.191825] Mem-Info: [ 1445.196833] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1445.196838] Call Trace: [ 1445.196856] dump_stack+0x1b2/0x281 [ 1445.196871] warn_alloc.cold+0x96/0x1cc [ 1445.196882] ? zone_watermark_ok_safe+0x220/0x220 [ 1445.196906] __alloc_pages_nodemask+0x2127/0x2720 [ 1445.196915] ? ___preempt_schedule+0x16/0x18 [ 1445.196931] ? lock_acquire+0x170/0x3f0 [ 1445.196946] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1445.196963] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1445.202846] active_anon:76365 inactive_anon:29114 isolated_anon:0 [ 1445.202846] active_file:1065 inactive_file:2103 isolated_file:0 [ 1445.202846] unevictable:0 dirty:3 writeback:3 unstable:0 [ 1445.202846] slab_reclaimable:13312 slab_unreclaimable:132802 [ 1445.202846] mapped:54917 shmem:29492 pagetables:8843 bounce:0 [ 1445.202846] free:216093 free_pcp:82 free_cma:0 [ 1445.204728] ? __mutex_unlock_slowpath+0x75/0x770 [ 1445.204744] alloc_pages_current+0x155/0x260 [ 1445.204757] ion_page_pool_alloc+0x118/0x1b0 [ 1445.214228] Node 0 active_anon:287952kB inactive_anon:85232kB active_file:4188kB inactive_file:8208kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:183092kB dirty:12kB writeback:12kB shmem:86524kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 233472kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1445.216663] ion_system_heap_allocate+0x133/0x8c0 [ 1445.216674] ? ion_alloc+0x187/0x810 [ 1445.216685] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1445.216695] ? ion_system_contig_heap_create+0x130/0x130 [ 1445.220390] Node 1 active_anon:17508kB inactive_anon:31224kB active_file:72kB inactive_file:204kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:36576kB dirty:0kB writeback:0kB shmem:31444kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1445.224257] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1445.224269] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1445.224280] ion_alloc+0x204/0x810 [ 1445.224294] ? ion_dma_buf_release+0x40/0x40 [ 1445.224306] ? __might_fault+0x177/0x1b0 [ 1445.229214] Node 0 [ 1445.233960] ion_ioctl+0xea/0x1f0 [ 1445.233970] ? ion_query_heaps+0x360/0x360 [ 1445.233985] ? __tun_chr_ioctl.isra.0+0x3310/0x3310 [ 1445.233991] ? ion_query_heaps+0x360/0x360 [ 1445.234006] do_vfs_ioctl+0x75a/0xff0 [ 1445.238491] DMA free:11012kB min:204kB low:252kB high:300kB active_anon:2100kB inactive_anon:8kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:56kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1445.242359] ? ioctl_preallocate+0x1a0/0x1a0 [ 1445.242370] ? lock_downgrade+0x740/0x740 [ 1445.242383] ? __fget+0x225/0x360 [ 1445.242393] ? do_vfs_ioctl+0xff0/0xff0 [ 1445.242406] ? security_file_ioctl+0x83/0xb0 [ 1445.247305] lowmem_reserve[]: [ 1445.252679] SyS_ioctl+0x7f/0xb0 [ 1445.252688] ? do_vfs_ioctl+0xff0/0xff0 [ 1445.252700] do_syscall_64+0x1d5/0x640 [ 1445.252715] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1445.252741] RIP: 0033:0x466459 [ 1445.286956] 0 [ 1445.291230] RSP: 002b:00007f6ba9361188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1445.291240] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1445.291246] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1445.291251] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1445.291256] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1445.291261] R13: 00007ffd9352709f R14: 00007f6ba9361300 R15: 0000000000022000 [ 1445.313651] CPU: 0 PID: 2283 Comm: syz-executor.2 Not tainted 4.14.228-syzkaller #0 [ 1445.330532] 2717 [ 1445.333211] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1445.333216] Call Trace: [ 1445.333235] dump_stack+0x1b2/0x281 [ 1445.333249] warn_alloc.cold+0x96/0x1cc [ 1445.337021] 2718 [ 1445.342380] ? zone_watermark_ok_safe+0x220/0x220 [ 1445.342405] __alloc_pages_nodemask+0x2127/0x2720 [ 1445.342424] ? lock_acquire+0x170/0x3f0 [ 1445.347948] 2718 [ 1445.375181] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1445.375199] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1445.375210] ? __mutex_unlock_slowpath+0x75/0x770 [ 1445.375224] alloc_pages_current+0x155/0x260 [ 1445.375243] ion_page_pool_alloc+0x118/0x1b0 [ 1445.380433] 2718 [ 1445.385092] ion_system_heap_allocate+0x133/0x8c0 [ 1445.385103] ? ion_alloc+0x187/0x810 [ 1445.385114] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1445.385124] ? ion_system_contig_heap_create+0x130/0x130 [ 1445.393045] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1445.393058] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1445.393068] ion_alloc+0x204/0x810 [ 1445.393082] ? ion_dma_buf_release+0x40/0x40 [ 1445.393094] ? __might_fault+0x177/0x1b0 [ 1445.397236] Node 0 [ 1445.399376] ion_ioctl+0xea/0x1f0 [ 1445.399386] ? ion_query_heaps+0x360/0x360 [ 1445.399402] ? __tun_chr_ioctl.isra.0+0x3310/0x3310 [ 1445.402952] DMA32 free:687104kB min:36200kB low:45248kB high:54296kB active_anon:285852kB inactive_anon:85224kB active_file:4188kB inactive_file:8208kB unevictable:0kB writepending:24kB present:3129332kB managed:2788136kB mlocked:0kB kernel_stack:12000kB pagetables:16516kB bounce:0kB free_pcp:460kB local_pcp:112kB free_cma:0kB [ 1445.407046] ? ion_query_heaps+0x360/0x360 [ 1445.407058] do_vfs_ioctl+0x75a/0xff0 [ 1445.407070] ? ioctl_preallocate+0x1a0/0x1a0 [ 1445.407082] ? lock_downgrade+0x740/0x740 [ 1445.412195] lowmem_reserve[]: [ 1445.416335] ? __fget+0x225/0x360 [ 1445.416345] ? do_vfs_ioctl+0xff0/0xff0 [ 1445.416361] ? security_file_ioctl+0x83/0xb0 [ 1445.420233] 0 [ 1445.446104] SyS_ioctl+0x7f/0xb0 [ 1445.446113] ? do_vfs_ioctl+0xff0/0xff0 [ 1445.446124] do_syscall_64+0x1d5/0x640 [ 1445.446139] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1445.446147] RIP: 0033:0x466459 [ 1445.446152] RSP: 002b:00007f613992b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1445.450742] 0 [ 1445.454694] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1445.454700] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1445.454705] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1445.454711] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1445.454717] R13: 00007fff85f2b35f R14: 00007f613992b300 R15: 0000000000022000 [ 1445.797938] 0 0 0 [ 1445.800181] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1445.827868] lowmem_reserve[]: 0 0 0 0 0 [ 1445.831997] Node 1 Normal free:165404kB min:53696kB low:67120kB high:80544kB active_anon:17508kB inactive_anon:31224kB active_file:72kB inactive_file:204kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:6304kB pagetables:18800kB bounce:0kB free_pcp:12kB local_pcp:0kB free_cma:0kB [ 1445.864012] lowmem_reserve[]: 0 0 0 0 0 [ 1445.868079] Node 0 DMA: 51*4kB (UME) 63*8kB (UME) 46*16kB (UME) 22*32kB (UM) 3*64kB (UME) 2*128kB (ME) 1*256kB (E) 2*512kB (ME) 3*1024kB (UME) 2*2048kB (ME) 0*4096kB = 11044kB [ 1445.885951] Node 0 DMA32: 31*4kB (UME) 7409*8kB (UE) 14806*16kB (UE) 8197*32kB (UE) 53*64kB (U) 4*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 562500kB [ 1445.902204] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1445.914519] Node 1 Normal: 3643*4kB (UME) 3663*8kB (UME) 2809*16kB (UME) 2393*32kB (UME) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 165396kB [ 1445.932950] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1445.941915] Node 0 hugepages_total=1 hugepages_free=1 hugepages_surp=1 hugepages_size=2048kB [ 1445.952561] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1445.965282] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1445.975187] 32661 total pagecache pages [ 1445.979230] 0 pages in swap cache [ 1445.983236] Swap cache stats: add 0, delete 0, find 0/0 [ 1445.988662] Free swap = 0kB [ 1445.993088] Total swap = 0kB [ 1446.000579] 2097051 pages RAM [ 1446.004601] 0 pages HighMem/MovableOnly [ 1446.020544] 363846 pages reserved [ 1446.031806] 0 pages cma reserved [ 1446.037084] chnl_net:caif_netlink_parms(): no params data found [ 1446.215347] systemd[1]: Started Journal Service. [ 1446.437375] bridge0: port 1(bridge_slave_0) entered blocking state [ 1446.470601] bridge0: port 1(bridge_slave_0) entered disabled state [ 1446.490647] device bridge_slave_0 entered promiscuous mode [ 1446.511372] bridge0: port 2(bridge_slave_1) entered blocking state [ 1446.517832] bridge0: port 2(bridge_slave_1) entered disabled state [ 1446.549282] device bridge_slave_1 entered promiscuous mode [ 1446.727899] oom_reaper: reaped process 2283 (syz-executor.2), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1446.818081] oom_reaper: reaped process 2295 (syz-executor.3), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1446.844088] oom_reaper: reaped process 2291 (syz-executor.5), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1446.861612] systemd-journal invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=0 [ 1446.874312] systemd-journal cpuset=/ mems_allowed=0-1 [ 1446.879520] CPU: 1 PID: 2275 Comm: systemd-journal Not tainted 4.14.228-syzkaller #0 [ 1446.887388] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1446.902201] Call Trace: [ 1446.904787] dump_stack+0x1b2/0x281 [ 1446.908425] dump_header+0x178/0x82f [ 1446.912134] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1446.917249] ? ___ratelimit+0x2cd/0x530 [ 1446.921215] oom_kill_process.cold+0x10/0xb18 [ 1446.925719] out_of_memory+0xe3e/0x1190 [ 1446.929691] ? oom_killer_disable+0x1c0/0x1c0 [ 1446.934188] ? mutex_trylock+0x152/0x1a0 [ 1446.938245] __alloc_pages_nodemask+0x23e1/0x2720 [ 1446.943095] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1446.947953] ? cache_grow_begin+0x41/0x630 [ 1446.952200] cache_grow_begin+0x91/0x630 [ 1446.956257] ? cache_grow_begin+0x91/0x630 [ 1446.960488] fallback_alloc+0x207/0x2c0 [ 1446.964464] kmem_cache_alloc+0x1e5/0x3c0 [ 1446.968612] getname_flags+0xc8/0x550 [ 1446.972412] user_path_at_empty+0x2a/0x50 [ 1446.976560] SyS_faccessat+0x21b/0x680 [ 1446.980452] ? SyS_fallocate+0x80/0x80 [ 1446.984366] ? do_syscall_64+0x4c/0x640 [ 1446.988334] ? SyS_faccessat+0x680/0x680 [ 1446.992396] do_syscall_64+0x1d5/0x640 [ 1446.996286] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1447.001473] RIP: 0033:0x7f4c448b29c7 [ 1447.005179] RSP: 002b:00007ffc73c81138 EFLAGS: 00000246 ORIG_RAX: 0000000000000015 [ 1447.012883] RAX: ffffffffffffffda RBX: 00007ffc73c84050 RCX: 00007f4c448b29c7 [ 1447.020145] RDX: 00007f4c45323a00 RSI: 0000000000000000 RDI: 0000559c3d9c19a3 [ 1447.027409] RBP: 00007ffc73c81170 R08: 0000000000000000 R09: 0000000000000000 [ 1447.034670] R10: 0000000000000069 R11: 0000000000000246 R12: 0000000000000000 [ 1447.041940] R13: 0000000000000000 R14: 00007ffc73c84050 R15: 00007ffc73c81660 [ 1447.075280] Mem-Info: [ 1447.077724] active_anon:76294 inactive_anon:29114 isolated_anon:0 [ 1447.077724] active_file:39 inactive_file:11 isolated_file:0 [ 1447.077724] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1447.077724] slab_reclaimable:13299 slab_unreclaimable:135443 [ 1447.077724] mapped:52694 shmem:29491 pagetables:8843 bounce:0 [ 1447.077724] free:13847 free_pcp:0 free_cma:0 [ 1447.086185] syz-executor.3: [ 1447.121618] Node 0 active_anon:287712kB inactive_anon:85232kB active_file:44kB inactive_file:80kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:174448kB dirty:0kB writeback:0kB shmem:86524kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 233472kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1447.138065] page allocation failure: order:0 [ 1447.154801] syz-executor.2: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1447.164672] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1447.173267] syz-executor.0: [ 1447.176960] (null) [ 1447.180377] page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1447.189634] syz-executor.5: [ 1447.198216] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 1447.206976] CPU: 1 PID: 2273 Comm: syz-executor.0 Not tainted 4.14.228-syzkaller #0 [ 1447.214675] syz-executor.3 cpuset= [ 1447.214760] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1447.214767] / [ 1447.218284] Call Trace: [ 1447.231917] dump_stack+0x1b2/0x281 [ 1447.235547] warn_alloc.cold+0x96/0x1cc [ 1447.239519] ? zone_watermark_ok_safe+0x220/0x220 [ 1447.243129] page allocation failure: order:0 [ 1447.244380] ? usleep_range+0x130/0x130 [ 1447.244386] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1447.248783] ? try_to_free_pages+0x23f/0x6e0 [ 1447.264732] ? _find_next_bit+0xdb/0x100 [ 1447.265947] syz-executor.5 cpuset= [ 1447.268807] ? run_timer_softirq+0x5a0/0x5a0 [ 1447.268808] / mems_allowed=0-1 [ 1447.272347] __alloc_pages_nodemask+0x2127/0x2720 [ 1447.272366] ? lock_acquire+0x170/0x3f0 [ 1447.272382] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1447.272393] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1447.272410] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1447.272429] alloc_pages_current+0x155/0x260 [ 1447.292579] syz-executor.2 cpuset= [ 1447.293599] ion_page_pool_alloc+0x118/0x1b0 [ 1447.298070] / [ 1447.303503] ion_system_heap_allocate+0x133/0x8c0 [ 1447.322373] ? _raw_spin_unlock+0x29/0x40 [ 1447.322739] mems_allowed=0-1 [ 1447.326547] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1447.334553] ? ion_system_contig_heap_create+0x130/0x130 [ 1447.340006] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1447.345019] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1447.349855] ion_alloc+0x27a/0x810 [ 1447.353393] ? ion_dma_buf_release+0x40/0x40 [ 1447.357799] ? __might_fault+0x177/0x1b0 [ 1447.361858] ion_ioctl+0xea/0x1f0 [ 1447.365307] ? ion_query_heaps+0x360/0x360 [ 1447.369534] ? __tun_chr_ioctl.isra.0+0x3310/0x3310 [ 1447.374540] ? ion_query_heaps+0x360/0x360 [ 1447.378769] do_vfs_ioctl+0x75a/0xff0 [ 1447.382571] ? ioctl_preallocate+0x1a0/0x1a0 [ 1447.386987] ? lock_downgrade+0x740/0x740 [ 1447.391137] ? __fget+0x225/0x360 [ 1447.394584] ? do_vfs_ioctl+0xff0/0xff0 [ 1447.398578] ? security_file_ioctl+0x83/0xb0 [ 1447.400397] mems_allowed=0-1 [ 1447.402987] SyS_ioctl+0x7f/0xb0 [ 1447.402997] ? do_vfs_ioctl+0xff0/0xff0 [ 1447.403008] do_syscall_64+0x1d5/0x640 [ 1447.403023] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1447.403032] RIP: 0033:0x466459 [ 1447.403037] RSP: 002b:00007f2e01ed3188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1447.433365] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1447.440632] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1447.447902] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1447.455185] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1447.462474] R13: 00007ffdb70bf23f R14: 00007f2e01ed3300 R15: 0000000000022000 [ 1447.469766] CPU: 0 PID: 2291 Comm: syz-executor.5 Not tainted 4.14.228-syzkaller #0 [ 1447.472524] Node 1 active_anon:17464kB inactive_anon:31224kB active_file:12kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:36324kB dirty:0kB writeback:0kB shmem:31440kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1447.477583] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1447.514059] Call Trace: [ 1447.516644] dump_stack+0x1b2/0x281 [ 1447.520268] warn_alloc.cold+0x96/0x1cc [ 1447.524238] ? zone_watermark_ok_safe+0x220/0x220 [ 1447.529071] ? usleep_range+0x130/0x130 [ 1447.533037] ? try_to_free_pages+0x23f/0x6e0 [ 1447.537435] ? _find_next_bit+0xdb/0x100 [ 1447.540472] Node 0 [ 1447.541485] ? run_timer_softirq+0x5a0/0x5a0 [ 1447.541501] DMA free:10960kB min:204kB low:252kB high:300kB active_anon:2100kB inactive_anon:8kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:56kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1447.541506] lowmem_reserve[]: [ 1447.543736] __alloc_pages_nodemask+0x2127/0x2720 [ 1447.548133] 0 [ 1447.574083] ? lock_acquire+0x170/0x3f0 [ 1447.574100] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1447.574110] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1447.574126] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1447.602516] alloc_pages_current+0x155/0x260 [ 1447.606919] ion_page_pool_alloc+0x118/0x1b0 [ 1447.610471] 2717 2718 [ 1447.611333] ion_system_heap_allocate+0x133/0x8c0 [ 1447.611343] ? ion_alloc+0x187/0x810 [ 1447.613821] 2718 [ 1447.618651] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1447.629834] ? ion_system_contig_heap_create+0x130/0x130 [ 1447.635276] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1447.640282] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1447.640470] 2718 [ 1447.645113] ion_alloc+0x204/0x810 [ 1447.645127] ? ion_dma_buf_release+0x40/0x40 [ 1447.647171] Node 0 [ 1447.650710] ? __might_fault+0x177/0x1b0 [ 1447.650722] ion_ioctl+0xea/0x1f0 [ 1447.650731] ? ion_query_heaps+0x360/0x360 [ 1447.650743] ? ion_query_heaps+0x360/0x360 [ 1447.670477] DMA32 free:17544kB min:36200kB low:45248kB high:54296kB active_anon:285612kB inactive_anon:85224kB active_file:44kB inactive_file:80kB unevictable:0kB writepending:0kB present:3129332kB managed:2788136kB mlocked:0kB kernel_stack:12032kB pagetables:16516kB bounce:0kB free_pcp:120kB local_pcp:120kB free_cma:0kB [ 1447.673246] do_vfs_ioctl+0x75a/0xff0 [ 1447.705582] ? ioctl_preallocate+0x1a0/0x1a0 [ 1447.709978] ? lock_downgrade+0x740/0x740 [ 1447.714121] ? __fget+0x225/0x360 [ 1447.717568] ? do_vfs_ioctl+0xff0/0xff0 [ 1447.721535] ? security_file_ioctl+0x83/0xb0 [ 1447.725933] SyS_ioctl+0x7f/0xb0 [ 1447.729288] ? do_vfs_ioctl+0xff0/0xff0 [ 1447.730469] lowmem_reserve[]: 0 [ 1447.733269] do_syscall_64+0x1d5/0x640 [ 1447.733285] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1447.736540] 0 [ 1447.740411] RIP: 0033:0x466459 [ 1447.750551] RSP: 002b:00007f2761281188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1447.758264] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1447.760462] 0 [ 1447.765519] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1447.765525] 0 [ 1447.767309] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1447.783600] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1447.790460] 0 [ 1447.790867] R13: 00007ffddf757caf R14: 00007f2761281300 R15: 0000000000022000 [ 1447.799915] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1447.802031] CPU: 0 PID: 2295 Comm: syz-executor.3 Not tainted 4.14.228-syzkaller #0 [ 1447.828465] lowmem_reserve[]: [ 1447.833241] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1447.833246] Call Trace: [ 1447.833265] dump_stack+0x1b2/0x281 [ 1447.833279] warn_alloc.cold+0x96/0x1cc [ 1447.833293] ? zone_watermark_ok_safe+0x220/0x220 [ 1447.840463] 0 [ 1447.845731] ? usleep_range+0x130/0x130 [ 1447.848287] 0 0 [ 1447.851917] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1447.851930] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1447.851943] ? run_timer_softirq+0x5a0/0x5a0 [ 1447.870479] 0 [ 1447.873626] __alloc_pages_nodemask+0x2127/0x2720 [ 1447.878631] 0 [ 1447.883042] ? lock_acquire+0x170/0x3f0 [ 1447.883087] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1447.900229] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1447.904711] Node 1 [ 1447.904723] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1447.904743] alloc_pages_current+0x155/0x260 [ 1447.906980] Normal free:26388kB min:53696kB low:67120kB high:80544kB active_anon:17464kB inactive_anon:31224kB active_file:12kB inactive_file:0kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:6336kB pagetables:18800kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1447.912441] ion_page_pool_alloc+0x118/0x1b0 [ 1447.912458] ion_system_heap_allocate+0x133/0x8c0 [ 1447.940489] lowmem_reserve[]: [ 1447.944875] ? ion_alloc+0x187/0x810 [ 1447.949256] 0 [ 1447.954091] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1447.954103] ? ion_system_contig_heap_create+0x130/0x130 [ 1447.954113] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1447.954133] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1447.970468] warn_alloc_show_mem: 4 callbacks suppressed [ 1447.970471] Mem-Info: [ 1447.973588] ion_alloc+0x204/0x810 [ 1447.978594] active_anon:76294 inactive_anon:29114 isolated_anon:0 [ 1447.978594] active_file:39 inactive_file:0 isolated_file:0 [ 1447.978594] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1447.978594] slab_reclaimable:13299 slab_unreclaimable:135443 [ 1447.978594] mapped:52693 shmem:29491 pagetables:8843 bounce:0 [ 1447.978594] free:13723 free_pcp:30 free_cma:0 [ 1447.983410] ? ion_dma_buf_release+0x40/0x40 [ 1447.983424] ? __might_fault+0x177/0x1b0 [ 1447.983435] ion_ioctl+0xea/0x1f0 [ 1447.983445] ? ion_query_heaps+0x360/0x360 [ 1447.988802] 0 [ 1447.991187] ? __tun_chr_ioctl.isra.0+0x3310/0x3310 [ 1447.991196] ? ion_query_heaps+0x360/0x360 [ 1447.991210] do_vfs_ioctl+0x75a/0xff0 [ 1447.994740] 0 [ 1448.027890] ? ioctl_preallocate+0x1a0/0x1a0 [ 1448.027901] ? lock_downgrade+0x740/0x740 [ 1448.027914] ? __fget+0x225/0x360 [ 1448.027922] ? do_vfs_ioctl+0xff0/0xff0 [ 1448.027937] ? security_file_ioctl+0x83/0xb0 [ 1448.040480] Node 0 active_anon:287712kB inactive_anon:85232kB active_file:144kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:174448kB dirty:0kB writeback:0kB shmem:86524kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 233472kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1448.044027] SyS_ioctl+0x7f/0xb0 [ 1448.045813] Node 1 active_anon:17464kB inactive_anon:31224kB active_file:12kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:36324kB dirty:0kB writeback:0kB shmem:31440kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1448.050812] ? do_vfs_ioctl+0xff0/0xff0 [ 1448.050825] do_syscall_64+0x1d5/0x640 [ 1448.050840] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1448.070461] Node 0 [ 1448.072600] RIP: 0033:0x466459 [ 1448.076561] DMA free:10960kB min:204kB low:252kB high:300kB active_anon:2100kB inactive_anon:8kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:56kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1448.080928] RSP: 002b:00007f6ba9361188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1448.080939] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1448.080945] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1448.080950] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1448.080959] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1448.130462] 0 [ 1448.139286] R13: 00007ffd9352709f R14: 00007f6ba9361300 R15: 0000000000022000 [ 1448.150453] 0 [ 1448.230856] CPU: 1 PID: 2283 Comm: syz-executor.2 Not tainted 4.14.228-syzkaller #0 [ 1448.240446] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1448.249792] Call Trace: [ 1448.252381] dump_stack+0x1b2/0x281 [ 1448.256044] warn_alloc.cold+0x96/0x1cc [ 1448.260024] ? zone_watermark_ok_safe+0x220/0x220 [ 1448.264866] ? usleep_range+0x130/0x130 [ 1448.268835] ? try_to_free_pages+0x23f/0x6e0 [ 1448.273240] ? _find_next_bit+0xdb/0x100 [ 1448.277298] ? run_timer_softirq+0x5a0/0x5a0 [ 1448.281711] __alloc_pages_nodemask+0x2127/0x2720 [ 1448.286582] ? lock_acquire+0x170/0x3f0 [ 1448.290568] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1448.295409] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1448.299906] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1448.305351] ? check_preemption_disabled+0x35/0x240 [ 1448.310372] alloc_pages_current+0x155/0x260 [ 1448.314787] ion_page_pool_alloc+0x118/0x1b0 [ 1448.319207] ion_system_heap_allocate+0x133/0x8c0 [ 1448.324049] ? ion_alloc+0x187/0x810 [ 1448.327760] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1448.333204] ? ion_system_contig_heap_create+0x130/0x130 [ 1448.338669] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1448.343686] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1448.348523] ion_alloc+0x204/0x810 [ 1448.352066] ? ion_dma_buf_release+0x40/0x40 [ 1448.356472] ? __might_fault+0x177/0x1b0 [ 1448.360560] ion_ioctl+0xea/0x1f0 [ 1448.364017] ? ion_query_heaps+0x360/0x360 [ 1448.368257] ? __tun_chr_ioctl.isra.0+0x3310/0x3310 [ 1448.373276] ? ion_query_heaps+0x360/0x360 [ 1448.377504] do_vfs_ioctl+0x75a/0xff0 [ 1448.381300] ? ioctl_preallocate+0x1a0/0x1a0 [ 1448.385703] ? lock_downgrade+0x740/0x740 [ 1448.389849] ? __fget+0x225/0x360 [ 1448.393303] ? do_vfs_ioctl+0xff0/0xff0 [ 1448.397293] ? security_file_ioctl+0x83/0xb0 [ 1448.401711] SyS_ioctl+0x7f/0xb0 [ 1448.405068] ? do_vfs_ioctl+0xff0/0xff0 [ 1448.409036] do_syscall_64+0x1d5/0x640 [ 1448.412921] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1448.418101] RIP: 0033:0x466459 [ 1448.421280] RSP: 002b:00007f613992b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1448.429017] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1448.436294] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1448.443562] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1448.450827] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1448.458093] R13: 00007fff85f2b35f R14: 00007f613992b300 R15: 0000000000022000 [ 1448.466471] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1448.471717] Node 0 DMA32 free:83660kB min:36200kB low:45248kB high:54296kB active_anon:285612kB inactive_anon:85224kB active_file:60kB inactive_file:264kB unevictable:0kB writepending:0kB present:3129332kB managed:2788136kB mlocked:0kB kernel_stack:12032kB pagetables:16516kB bounce:0kB free_pcp:164kB local_pcp:120kB free_cma:0kB [ 1448.501822] lowmem_reserve[]: 0 0 0 0 0 [ 1448.505894] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1448.540114] Node 0 DMA: 30*4kB (UME) 63*8kB (UME) 46*16kB (UME) 22*32kB (UM) 3*64kB (UME) 2*128kB (ME) 1*256kB (E) 2*512kB (ME) 3*1024kB (UME) 2*2048kB (ME) 0*4096kB = 10960kB [ 1448.558687] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 1448.566290] lowmem_reserve[]: 0 0 0 0 0 [ 1448.570295] Node 1 Normal free:364668kB min:53696kB low:67120kB high:80544kB active_anon:17464kB inactive_anon:31224kB active_file:4kB inactive_file:100kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:6304kB pagetables:18800kB bounce:0kB free_pcp:344kB local_pcp:120kB free_cma:0kB [ 1448.602228] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1448.610762] Node 0 DMA32: 1527*4kB (UME) 920*8kB (UME) 1242*16kB (UME) 668*32kB (UME) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 54716kB [ 1448.639711] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1448.653297] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 1448.660483] lowmem_reserve[]: 0 0 0 0 0 [ 1448.664484] Node 0 DMA: 30*4kB (UME) 63*8kB (UME) 46*16kB (UME) 22*32kB (UM) 3*64kB (UME) 2*128kB (ME) 1*256kB (E) 2*512kB (ME) 3*1024kB (UME) 2*2048kB (ME) 0*4096kB = 10960kB [ 1448.680762] Node 1 Normal: 1338*4kB (UE) 365*8kB (UE) 447*16kB (UME) 811*32kB (UME) 2077*64kB (UM) 626*128kB (U) 26*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 261088kB [ 1448.696575] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1448.705493] Node 0 DMA32: 1788*4kB (UME) 1533*8kB (UME) 1465*16kB (UME) 1348*32kB (UME) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 85992kB [ 1448.720013] Node 0 hugepages_total=1 hugepages_free=1 hugepages_surp=1 hugepages_size=2048kB [ 1448.724608] team0: Port device team_slave_0 added [ 1448.740515] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1448.751397] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1448.760229] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1448.768926] Node 1 Normal: 1392*4kB (UE) 414*8kB (UE) 498*16kB (UME) 968*32kB (UME) 260*64kB (UM) 626*128kB (U) 26*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 151248kB [ 1448.771486] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 1448.784502] 30042 total pagecache pages [ 1448.798263] 0 pages in swap cache [ 1448.801833] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1448.823797] Swap cache stats: add 0, delete 0, find 0/0 [ 1448.829192] Free swap = 0kB [ 1448.840479] Node 0 hugepages_total=1 hugepages_free=1 hugepages_surp=1 hugepages_size=2048kB [ 1448.849114] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1448.851317] team0: Port device team_slave_1 added [ 1448.859042] Total swap = 0kB [ 1448.870491] 2097051 pages RAM [ 1448.873593] 0 pages HighMem/MovableOnly [ 1448.877553] 363846 pages reserved [ 1448.881117] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1448.889694] 30042 total pagecache pages [ 1448.900470] 0 pages cma reserved [ 1448.903837] Out of memory (oom_kill_allocating_task): Kill process 2275 (systemd-journal) score 0 or sacrifice child [ 1448.912601] syz-executor.3: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1448.920510] 0 pages in swap cache [ 1448.934209] Swap cache stats: add 0, delete 0, find 0/0 [ 1448.939571] Free swap = 0kB [ 1448.942770] Killed process 2275 (systemd-journal) total-vm:46096kB, anon-rss:468kB, file-rss:0kB, shmem-rss:1872kB [ 1448.953348] Total swap = 0kB [ 1448.956368] 2097051 pages RAM [ 1448.959464] 0 pages HighMem/MovableOnly [ 1448.964788] oom_reaper: reaped process 2275 (systemd-journal), now anon-rss:0kB, file-rss:0kB, shmem-rss:1876kB [ 1448.970466] 363846 pages reserved [ 1448.978463] 0 pages cma reserved [ 1448.984099] warn_alloc_show_mem: 2 callbacks suppressed [ 1448.984101] Mem-Info: [ 1449.011475] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 1449.017042] CPU: 1 PID: 2295 Comm: syz-executor.3 Not tainted 4.14.228-syzkaller #0 [ 1449.018094] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1449.024839] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1449.024843] Call Trace: [ 1449.024861] dump_stack+0x1b2/0x281 [ 1449.024876] warn_alloc.cold+0x96/0x1cc [ 1449.024888] ? zone_watermark_ok_safe+0x220/0x220 [ 1449.024911] __alloc_pages_nodemask+0x2127/0x2720 [ 1449.024920] ? __schedule+0x893/0x1de0 [ 1449.024936] ? lock_acquire+0x170/0x3f0 [ 1449.024951] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1449.024966] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1449.078425] ? __mutex_unlock_slowpath+0x75/0x770 [ 1449.080517] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1449.083282] alloc_pages_current+0x155/0x260 [ 1449.112826] ion_page_pool_alloc+0x118/0x1b0 [ 1449.117231] ion_system_heap_allocate+0x133/0x8c0 [ 1449.122081] ? _raw_spin_unlock+0x29/0x40 [ 1449.126226] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1449.131162] ? ion_system_contig_heap_create+0x130/0x130 [ 1449.136609] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1449.141625] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1449.146464] ion_alloc+0x27a/0x810 [ 1449.150004] ? ion_dma_buf_release+0x40/0x40 [ 1449.154413] ? __might_fault+0x177/0x1b0 [ 1449.158491] ion_ioctl+0xea/0x1f0 [ 1449.161939] ? ion_query_heaps+0x360/0x360 [ 1449.166188] ? __tun_chr_ioctl.isra.0+0x3310/0x3310 [ 1449.171197] ? ion_query_heaps+0x360/0x360 [ 1449.175427] do_vfs_ioctl+0x75a/0xff0 [ 1449.179226] ? ioctl_preallocate+0x1a0/0x1a0 [ 1449.183678] ? lock_downgrade+0x740/0x740 [ 1449.187827] ? __fget+0x225/0x360 [ 1449.191280] ? do_vfs_ioctl+0xff0/0xff0 [ 1449.192994] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1449.195266] ? security_file_ioctl+0x83/0xb0 [ 1449.209436] SyS_ioctl+0x7f/0xb0 [ 1449.212797] ? do_vfs_ioctl+0xff0/0xff0 [ 1449.216764] do_syscall_64+0x1d5/0x640 [ 1449.220651] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1449.225831] RIP: 0033:0x466459 [ 1449.229014] RSP: 002b:00007f6ba9361188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1449.236716] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1449.243979] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1449.251240] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1449.258502] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1449.261027] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1449.265761] R13: 00007ffd9352709f R14: 00007f6ba9361300 R15: 0000000000022000 [ 1449.271052] active_anon:76176 inactive_anon:29114 isolated_anon:0 [ 1449.271052] active_file:174 inactive_file:453 isolated_file:0 [ 1449.271052] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1449.271052] slab_reclaimable:13299 slab_unreclaimable:135594 [ 1449.271052] mapped:52616 shmem:29491 pagetables:8843 bounce:0 [ 1449.271052] free:181991 free_pcp:168 free_cma:0 [ 1449.310539] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1449.374590] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1449.380531] Node 0 active_anon:287244kB inactive_anon:85232kB active_file:988kB inactive_file:4492kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:176612kB dirty:0kB writeback:0kB shmem:86524kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 233472kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1449.427439] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 1449.435854] systemd[1]: systemd-journald.service: Failed with result 'signal'. [ 1449.453046] systemd[1]: systemd-journald.service: Service has no hold-off time, scheduling restart. [ 1449.477363] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 1449.500541] Node 1 active_anon:17460kB inactive_anon:31224kB active_file:8kB inactive_file:128kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:36452kB dirty:0kB writeback:0kB shmem:31440kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1449.503924] systemd[1]: Stopped Journal Service. [ 1449.556892] Node 0 DMA free:11664kB min:204kB low:252kB high:300kB active_anon:2100kB inactive_anon:8kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:56kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1449.620489] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1449.625570] Node 0 DMA32 free:102952kB min:36200kB low:45248kB high:54296kB active_anon:285280kB inactive_anon:85224kB active_file:2828kB inactive_file:6700kB unevictable:0kB writepending:0kB present:3129332kB managed:2788136kB mlocked:0kB kernel_stack:12000kB pagetables:16368kB bounce:0kB free_pcp:824kB local_pcp:140kB free_cma:0kB [ 1449.655770] lowmem_reserve[]: 0 0 0 0 0 [ 1449.658929] device hsr_slave_0 entered promiscuous mode [ 1449.659779] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1449.676489] systemd[1]: Starting Journal Service... [ 1449.696302] device hsr_slave_1 entered promiscuous mode [ 1449.702052] lowmem_reserve[]: 0 0 0 0 0 [ 1449.706510] Node 1 Normal free:487972kB min:53696kB low:67120kB high:80544kB active_anon:17460kB inactive_anon:31224kB active_file:8kB inactive_file:128kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:6304kB pagetables:18800kB bounce:0kB free_pcp:636kB local_pcp:8kB free_cma:0kB [ 1449.739918] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 1449.747675] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 1449.758090] lowmem_reserve[]: 0 0 0 0 0 [ 1449.762247] Node 0 DMA: 9*4kB (ME) 8*8kB (ME) 45*16kB (UME) 22*32kB (UM) 6*64kB (UME) 4*128kB (UME) 2*256kB (UE) 2*512kB (ME) 3*1024kB (UME) 2*2048kB (ME) 0*4096kB = 11124kB [ 1449.768253] systemd[1]: Starting Load/Save RF Kill Switch Status... [ 1449.795382] Node 0 DMA32: 131*4kB (E) 327*8kB (UME) 81*16kB (E) 9*32kB (E) 540*64kB (UM) 42*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 44660kB [ 1449.835492] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1449.864631] Node 1 Normal: 16*4kB (E) 9*8kB (E) 3*16kB (E) 406*32kB (UME) 5290*64kB (UM) 539*128kB (UM) 38*256kB (U) 2*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 431480kB [ 1449.920522] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1449.929447] Node 0 hugepages_total=1 hugepages_free=1 hugepages_surp=1 hugepages_size=2048kB [ 1449.970802] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1449.979766] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1450.007551] 32593 total pagecache pages [ 1450.013815] 0 pages in swap cache [ 1450.015128] systemd-journald[2463]: File /run/log/journal/04d8c135ee6b410280ba31a58c89679d/system.journal corrupted or uncleanly shut down, renaming and replacing. [ 1450.017329] Swap cache stats: add 0, delete 0, find 0/0 [ 1450.041034] Free swap = 0kB [ 1450.044165] Total swap = 0kB [ 1450.048058] systemd[1]: Started Load/Save RF Kill Switch Status. [ 1450.064352] 2097051 pages RAM [ 1450.067474] 0 pages HighMem/MovableOnly [ 1450.092644] 363846 pages reserved [ 1450.096126] 0 pages cma reserved [ 1450.163932] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 1450.224123] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1450.260578] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1450.269644] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1450.320568] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1450.354743] device bridge_slave_1 left promiscuous mode [ 1450.360297] bridge0: port 2(bridge_slave_1) entered disabled state [ 1450.428664] kworker/u4:6 invoked oom-killer: gfp_mask=0x14142c0(GFP_KERNEL|__GFP_NOWARN|__GFP_COMP|__GFP_NOMEMALLOC), nodemask=(null), order=1, oom_score_adj=0 [ 1450.455293] kworker/u4:6 cpuset=/ mems_allowed=0-1 [ 1450.473058] CPU: 1 PID: 875 Comm: kworker/u4:6 Not tainted 4.14.228-syzkaller #0 [ 1450.480600] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1450.489987] Workqueue: netns cleanup_net [ 1450.494053] Call Trace: [ 1450.496674] dump_stack+0x1b2/0x281 [ 1450.500299] dump_header+0x178/0x82f [ 1450.504009] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1450.509111] ? ___ratelimit+0x2cd/0x530 [ 1450.513118] oom_kill_process.cold+0x10/0xb18 [ 1450.517610] ? lock_downgrade+0x740/0x740 [ 1450.521762] out_of_memory+0x2dc/0x1190 [ 1450.525738] ? oom_killer_disable+0x1c0/0x1c0 [ 1450.530234] ? mutex_trylock+0x152/0x1a0 [ 1450.534293] __alloc_pages_nodemask+0x23e1/0x2720 [ 1450.539151] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1450.543996] ? cleanup_net+0x3b3/0x840 [ 1450.547881] ? process_one_work+0x793/0x14a0 [ 1450.552293] ? mark_held_locks+0xa6/0xf0 [ 1450.556351] ? cache_grow_begin+0x41/0x630 [ 1450.560582] cache_grow_begin+0x91/0x630 [ 1450.564642] ? cache_grow_begin+0x91/0x630 [ 1450.568928] fallback_alloc+0x207/0x2c0 [ 1450.572902] kmem_cache_alloc_node_trace+0xed/0x400 [ 1450.577916] __kmalloc_node_track_caller+0x38/0x70 [ 1450.582842] __alloc_skb+0x96/0x510 [ 1450.586467] rtmsg_ifinfo_build_skb+0x65/0x130 [ 1450.589303] warn_alloc: 1 callbacks suppressed [ 1450.589307] syz-executor.2: [ 1450.591044] rtnetlink_event+0xee/0x1a0 [ 1450.602612] notifier_call_chain+0x108/0x1a0 [ 1450.607012] netdev_upper_dev_unlink+0x1a7/0x200 [ 1450.611754] ? netdev_notify_peers+0xd0/0xd0 [ 1450.616149] ? br_vlan_enabled+0x9/0x40 [ 1450.620114] del_nbp+0x490/0x9a0 [ 1450.623470] ? veth_get_drvinfo+0xe0/0xe0 [ 1450.627605] br_dev_delete+0x95/0x190 [ 1450.631405] ? del_nbp+0x9a0/0x9a0 [ 1450.634945] default_device_exit_batch+0x204/0x380 [ 1450.639860] ? unregister_netdevice_many+0x50/0x50 [ 1450.644781] ? do_wait_intr_irq+0x270/0x270 [ 1450.649095] ? __local_bh_enable_ip+0xc1/0x170 [ 1450.653681] ? unregister_netdevice_many+0x50/0x50 [ 1450.658610] ? dev_change_net_namespace+0xc90/0xc90 [ 1450.663616] ops_exit_list+0xf9/0x150 [ 1450.667421] cleanup_net+0x3b3/0x840 [ 1450.671139] ? net_drop_ns+0x70/0x70 [ 1450.674844] ? lock_acquire+0x170/0x3f0 [ 1450.678811] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1450.684248] process_one_work+0x793/0x14a0 [ 1450.688487] ? work_busy+0x320/0x320 [ 1450.692188] ? worker_thread+0x158/0xff0 [ 1450.696248] ? _raw_spin_unlock_irq+0x24/0x80 [ 1450.700751] worker_thread+0x5cc/0xff0 [ 1450.704641] ? rescuer_thread+0xc80/0xc80 [ 1450.708787] kthread+0x30d/0x420 [ 1450.712156] ? kthread_create_on_node+0xd0/0xd0 [ 1450.716810] ret_from_fork+0x24/0x30 [ 1450.745021] Mem-Info: [ 1450.747465] active_anon:76390 inactive_anon:31119 isolated_anon:0 [ 1450.747465] active_file:1054 inactive_file:963 isolated_file:59 [ 1450.747465] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1450.747465] slab_reclaimable:13332 slab_unreclaimable:135184 [ 1450.747465] mapped:45761 shmem:31512 pagetables:8816 bounce:0 [ 1450.747465] free:13935 free_pcp:182 free_cma:0 [ 1450.785442] page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1450.810470] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 1450.815622] CPU: 1 PID: 2283 Comm: syz-executor.2 Not tainted 4.14.228-syzkaller #0 [ 1450.823412] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1450.832770] Call Trace: [ 1450.835397] dump_stack+0x1b2/0x281 [ 1450.839051] warn_alloc.cold+0x96/0x1cc [ 1450.843028] ? zone_watermark_ok_safe+0x220/0x220 [ 1450.847887] __alloc_pages_nodemask+0x2127/0x2720 [ 1450.852731] ? io_schedule_timeout+0x140/0x140 [ 1450.857316] ? lock_acquire+0x170/0x3f0 [ 1450.861303] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1450.866159] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1450.871612] ? __mutex_unlock_slowpath+0x75/0x770 [ 1450.876450] ? retint_kernel+0x2d/0x2d [ 1450.880341] alloc_pages_current+0x155/0x260 [ 1450.884775] ion_page_pool_alloc+0x118/0x1b0 [ 1450.889185] ion_system_heap_allocate+0x133/0x8c0 [ 1450.894046] ? _raw_spin_unlock+0x29/0x40 [ 1450.898201] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1450.903130] ? ion_system_contig_heap_create+0x130/0x130 [ 1450.908583] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1450.913600] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1450.918442] ion_alloc+0x27a/0x810 [ 1450.921985] ? ion_dma_buf_release+0x40/0x40 [ 1450.926395] ? __might_fault+0x177/0x1b0 [ 1450.930452] ion_ioctl+0xea/0x1f0 [ 1450.933902] ? ion_query_heaps+0x360/0x360 [ 1450.938139] ? __tun_chr_ioctl.isra.0+0x3310/0x3310 [ 1450.943158] ? ion_query_heaps+0x360/0x360 [ 1450.947394] do_vfs_ioctl+0x75a/0xff0 [ 1450.951203] ? ioctl_preallocate+0x1a0/0x1a0 [ 1450.955612] ? lock_downgrade+0x740/0x740 [ 1450.959765] ? __fget+0x225/0x360 [ 1450.963217] ? do_vfs_ioctl+0xff0/0xff0 [ 1450.967217] ? security_file_ioctl+0x83/0xb0 [ 1450.971622] SyS_ioctl+0x7f/0xb0 [ 1450.974983] ? do_vfs_ioctl+0xff0/0xff0 [ 1450.978956] do_syscall_64+0x1d5/0x640 [ 1450.982866] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1450.988043] RIP: 0033:0x466459 [ 1450.991225] RSP: 002b:00007f613992b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1450.998930] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1451.006192] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1451.013449] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1451.020706] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1451.027965] R13: 00007fff85f2b35f R14: 00007f613992b300 R15: 0000000000022000 [ 1451.035284] syz-executor.5: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1451.047188] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 1451.052408] CPU: 0 PID: 2291 Comm: syz-executor.5 Not tainted 4.14.228-syzkaller #0 [ 1451.060194] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1451.064644] Node 0 active_anon:286968kB inactive_anon:85168kB active_file:40kB inactive_file:96kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:137788kB dirty:0kB writeback:0kB shmem:86524kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 233472kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1451.069540] Call Trace: [ 1451.097427] Node 1 active_anon:18492kB inactive_anon:39308kB active_file:48kB inactive_file:68kB unevictable:0kB isolated(anon):0kB isolated(file):88kB mapped:37616kB dirty:0kB writeback:0kB shmem:39524kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1451.099974] dump_stack+0x1b2/0x281 [ 1451.127316] Node 0 [ 1451.130895] warn_alloc.cold+0x96/0x1cc [ 1451.130911] ? zone_watermark_ok_safe+0x220/0x220 [ 1451.133151] DMA free:10956kB min:204kB low:252kB high:300kB active_anon:2100kB inactive_anon:8kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:56kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1451.137102] ? usleep_range+0x130/0x130 [ 1451.141946] lowmem_reserve[]: [ 1451.167857] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1451.167871] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1451.167881] ? run_timer_softirq+0x5a0/0x5a0 [ 1451.167898] __alloc_pages_nodemask+0x2127/0x2720 [ 1451.171872] 0 [ 1451.174964] ? lock_acquire+0x170/0x3f0 [ 1451.180054] 2717 [ 1451.185062] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1451.185072] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1451.185096] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1451.189481] 2718 [ 1451.194316] alloc_pages_current+0x155/0x260 [ 1451.194330] ion_page_pool_alloc+0x118/0x1b0 [ 1451.196113] 2718 [ 1451.200072] ion_system_heap_allocate+0x133/0x8c0 [ 1451.202155] 2718 [ 1451.206954] ? _raw_spin_unlock+0x29/0x40 [ 1451.216858] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1451.218890] Node 0 [ 1451.223282] ? ion_system_contig_heap_create+0x130/0x130 [ 1451.223293] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1451.223305] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1451.223315] ion_alloc+0x27a/0x810 [ 1451.227715] DMA32 free:17760kB min:36200kB low:45248kB high:54296kB active_anon:284868kB inactive_anon:85160kB active_file:20kB inactive_file:200kB unevictable:0kB writepending:0kB present:3129332kB managed:2788136kB mlocked:0kB kernel_stack:11936kB pagetables:16224kB bounce:0kB free_pcp:860kB local_pcp:120kB free_cma:0kB [ 1451.229750] ? ion_dma_buf_release+0x40/0x40 [ 1451.234595] lowmem_reserve[]: [ 1451.236640] ? __might_fault+0x177/0x1b0 [ 1451.240781] 0 [ 1451.245676] ion_ioctl+0xea/0x1f0 [ 1451.247883] 0 [ 1451.253317] ? ion_query_heaps+0x360/0x360 [ 1451.253329] ? ion_query_heaps+0x360/0x360 [ 1451.253343] do_vfs_ioctl+0x75a/0xff0 [ 1451.258334] 0 [ 1451.263162] ? ioctl_preallocate+0x1a0/0x1a0 [ 1451.263173] ? lock_downgrade+0x740/0x740 [ 1451.263187] ? __fget+0x225/0x360 [ 1451.266705] 0 [ 1451.295325] ? do_vfs_ioctl+0xff0/0xff0 [ 1451.295337] ? security_file_ioctl+0x83/0xb0 [ 1451.295347] SyS_ioctl+0x7f/0xb0 [ 1451.295360] ? do_vfs_ioctl+0xff0/0xff0 [ 1451.299788] warn_alloc_show_mem: 1 callbacks suppressed [ 1451.299791] Mem-Info: [ 1451.302853] do_syscall_64+0x1d5/0x640 [ 1451.302869] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1451.302879] RIP: 0033:0x466459 [ 1451.306930] active_anon:76365 inactive_anon:31119 isolated_anon:0 [ 1451.306930] active_file:22 inactive_file:41 isolated_file:22 [ 1451.306930] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1451.306930] slab_reclaimable:13332 slab_unreclaimable:135190 [ 1451.306930] mapped:43851 shmem:31512 pagetables:8816 bounce:0 [ 1451.306930] free:13871 free_pcp:372 free_cma:0 [ 1451.308695] RSP: 002b:00007f2761281188 EFLAGS: 00000246 [ 1451.312165] Node 0 active_anon:286968kB inactive_anon:85168kB active_file:40kB inactive_file:96kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:137788kB dirty:0kB writeback:0kB shmem:86524kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 233472kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1451.313920] ORIG_RAX: 0000000000000010 [ 1451.313928] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1451.318151] Node 1 active_anon:18492kB inactive_anon:39308kB active_file:48kB inactive_file:68kB unevictable:0kB isolated(anon):0kB isolated(file):88kB mapped:37616kB dirty:0kB writeback:0kB shmem:39524kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1451.322352] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1451.322357] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1451.322362] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1451.322368] R13: 00007ffddf757caf R14: 00007f2761281300 R15: 0000000000022000 [ 1451.490519] 0 [ 1451.566427] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1451.597318] lowmem_reserve[]: 0 0 0 0 0 [ 1451.602171] Node 1 Normal free:352804kB min:53696kB low:67120kB high:80544kB active_anon:18504kB inactive_anon:39400kB active_file:52kB inactive_file:652kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:6336kB pagetables:18992kB bounce:0kB free_pcp:484kB local_pcp:276kB free_cma:0kB [ 1451.653041] lowmem_reserve[]: 0 0 0 0 0 [ 1451.661147] Node 0 DMA: 9*4kB (ME) 9*8kB (UME) 34*16kB (UME) 22*32kB (UM) 9*64kB (UME) 3*128kB (UME) 1*256kB (E) 3*512kB (UME) 3*1024kB (UME) 2*2048kB (ME) 0*4096kB = 11276kB [ 1451.677880] Node 0 DMA32: 784*4kB (UME) 686*8kB (UME) 104*16kB (UME) 14*32kB (UME) 2874*64kB (UM) 494*128kB (U) 100*256kB (U) 5*512kB (U) 4*1024kB (U) 0*2048kB 0*4096kB = 290160kB [ 1451.694587] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1451.706483] Node 1 Normal: 112*4kB (UME) 1202*8kB (UME) 442*16kB (UME) 84*32kB (UE) 5111*64kB (UM) 937*128kB (UM) 54*256kB (UM) 4*512kB (U) 116*1024kB (U) 3*2048kB (U) 0*4096kB = 607664kB [ 1451.724308] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1451.733671] Node 0 hugepages_total=1 hugepages_free=1 hugepages_surp=1 hugepages_size=2048kB [ 1451.742772] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1451.752188] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1451.761853] 33359 total pagecache pages [ 1451.773212] 0 pages in swap cache [ 1451.777002] Swap cache stats: add 0, delete 0, find 0/0 [ 1451.790044] Free swap = 0kB [ 1451.796372] Node 0 DMA free:11356kB min:204kB low:252kB high:300kB active_anon:2100kB inactive_anon:8kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:56kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1451.800523] Total swap = 0kB [ 1451.850486] 2097051 pages RAM [ 1451.853641] 0 pages HighMem/MovableOnly [ 1451.857611] 363846 pages reserved [ 1451.870504] 0 pages cma reserved [ 1451.873910] Out of memory: Kill process 21449 (syz-executor.3) score 1005 or sacrifice child [ 1451.874566] lowmem_reserve[]: [ 1451.890555] Killed process 21449 (syz-executor.3) total-vm:93384kB, anon-rss:2200kB, file-rss:34628kB, shmem-rss:0kB [ 1451.894652] 0 2717 2718 2718 2718 [ 1451.927889] Node 0 DMA32 free:487896kB min:36200kB low:45248kB high:54296kB active_anon:284868kB inactive_anon:85160kB active_file:116kB inactive_file:7916kB unevictable:0kB writepending:0kB present:3129332kB managed:2788136kB mlocked:0kB kernel_stack:11904kB pagetables:16216kB bounce:0kB free_pcp:1268kB local_pcp:620kB free_cma:0kB [ 1451.957725] device bridge_slave_0 left promiscuous mode [ 1451.974909] bridge0: port 1(bridge_slave_0) entered disabled state [ 1451.994949] lowmem_reserve[]: 0 0 0 0 0 [ 1452.001712] device veth1_macvtap left promiscuous mode [ 1452.010576] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1452.020574] device veth0_macvtap left promiscuous mode [ 1452.046771] device veth1_vlan left promiscuous mode [ 1452.070638] lowmem_reserve[]: 0 0 0 [ 1452.070660] device veth0_vlan left promiscuous mode [ 1452.090777] 0 0 [ 1452.092774] Node 1 Normal free:770940kB min:53696kB low:67120kB high:80544kB active_anon:18504kB inactive_anon:39400kB active_file:52kB inactive_file:652kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:6336kB pagetables:18992kB bounce:0kB free_pcp:1360kB local_pcp:716kB free_cma:0kB [ 1452.150493] lowmem_reserve[]: 0 0 0 0 0 [ 1452.154634] Node 0 DMA: 30*4kB (UME) 10*8kB (UME) 37*16kB (UME) 22*32kB (UM) 9*64kB (UME) 3*128kB (UME) 1*256kB (E) 3*512kB (UME) 3*1024kB (UME) 2*2048kB (ME) 0*4096kB = 11416kB [ 1452.190493] Node 0 DMA32: 128*4kB (UE) 1560*8kB (UME) 3056*16kB (UE) 4118*32kB (UE) 3152*64kB (UM) 544*128kB (U) 104*256kB (U) 5*512kB (U) 4*1024kB (U) 1*2048kB (M) 0*4096kB = 500352kB [ 1452.230490] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1452.252651] Node 1 Normal: 2209*4kB (UME) 2135*8kB (UME) 1896*16kB (UME) 1219*32kB (UME) 6000*64kB (UM) 1137*128kB (UM) 75*256kB (UM) 4*512kB (U) 116*1024kB (U) 3*2048kB (U) 0*4096kB = 770972kB [ 1452.301119] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1452.310239] Node 0 hugepages_total=1 hugepages_free=1 hugepages_surp=1 hugepages_size=2048kB [ 1452.330497] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1452.339374] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1452.348023] device hsr_slave_1 left promiscuous mode [ 1452.356795] device hsr_slave_0 left promiscuous mode [ 1452.362034] 34003 total pagecache pages [ 1452.366012] 0 pages in swap cache [ 1452.369457] Swap cache stats: add 0, delete 0, find 0/0 [ 1452.388272] team0 (unregistering): Port device team_slave_1 removed [ 1452.398812] Free swap = 0kB [ 1452.402456] Total swap = 0kB [ 1452.405476] 2097051 pages RAM [ 1452.408587] 0 pages HighMem/MovableOnly [ 1452.420343] team0 (unregistering): Port device team_slave_0 removed [ 1452.427960] 363846 pages reserved [ 1452.437475] 0 pages cma reserved [ 1452.443717] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 1452.477294] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 1452.567592] bond0 (unregistering): Released all slaves [ 1452.645040] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1452.684682] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 1452.702521] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 1452.708673] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1452.721523] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1452.741880] systemd[1]: Started Journal Service. [ 1452.753445] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 1452.780492] 8021q: adding VLAN 0 to HW filter on device team0 [ 1452.811930] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 1452.818964] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1452.844462] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1452.864172] bridge0: port 1(bridge_slave_0) entered blocking state [ 1452.870590] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1452.926352] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 1452.944118] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1452.951716] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1452.971311] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1453.003928] bridge0: port 2(bridge_slave_1) entered blocking state [ 1453.010286] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1453.027541] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 1453.044659] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1453.056185] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 1453.085431] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1453.096687] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 1453.125066] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1453.133243] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1453.147747] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 1453.161328] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1453.168382] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1453.191781] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1453.201869] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 1453.221169] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 1453.228008] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1453.241013] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1453.248491] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1453.271036] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1453.306353] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 1453.312720] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1453.351729] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 1453.364980] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 1453.384762] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1453.392304] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1453.407735] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1453.977273] kworker/u4:7 invoked oom-killer: gfp_mask=0x15080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null), order=0, oom_score_adj=0 [ 1454.031641] kworker/u4:7 cpuset=/ mems_allowed=0-1 [ 1454.036874] CPU: 1 PID: 2511 Comm: kworker/u4:7 Not tainted 4.14.228-syzkaller #0 [ 1454.040510] syz-executor.3: [ 1454.044502] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1454.044511] page allocation failure: order:0 [ 1454.047507] Call Trace: [ 1454.063839] dump_stack+0x1b2/0x281 [ 1454.067478] dump_header+0x178/0x82f [ 1454.070497] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1454.071183] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1454.071194] ? ___ratelimit+0x2cd/0x530 [ 1454.078798] syz-executor.3 cpuset= [ 1454.083887] oom_kill_process.cold+0x10/0xb18 [ 1454.083900] ? lock_downgrade+0x740/0x740 [ 1454.083916] out_of_memory+0x2dc/0x1190 [ 1454.083928] ? oom_killer_disable+0x1c0/0x1c0 [ 1454.083936] ? mutex_trylock+0x152/0x1a0 [ 1454.083946] __alloc_pages_nodemask+0x23e1/0x2720 [ 1454.083960] ? do_execveat_common+0x9a9/0x1f30 [ 1454.100503] / [ 1454.103990] ? call_usermodehelper_exec_async+0x2ed/0x510 [ 1454.108458] mems_allowed=0-1 [ 1454.112503] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1454.112514] ? sched_ttwu_pending+0x1a0/0x1a0 [ 1454.112525] ? sched_ttwu_pending+0x1a0/0x1a0 [ 1454.112535] ? fs_reclaim_release+0xd0/0x110 [ 1454.112549] alloc_pages_current+0x155/0x260 [ 1454.154782] __get_free_pages+0xb/0x40 [ 1454.158678] pgd_alloc+0x20/0x2b0 [ 1454.162133] mm_init+0x578/0x960 [ 1454.165490] mm_alloc+0xa2/0xc0 [ 1454.168756] do_execveat_common+0x9a9/0x1f30 [ 1454.173158] ? copy_strings_kernel+0x110/0x110 [ 1454.177731] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1454.183171] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1454.188174] do_execve+0x33/0x50 [ 1454.191532] call_usermodehelper_exec_async+0x2ed/0x510 [ 1454.196878] ? call_usermodehelper_exec_work+0x2a0/0x2a0 [ 1454.202318] ret_from_fork+0x24/0x30 [ 1454.206031] CPU: 0 PID: 2295 Comm: syz-executor.3 Not tainted 4.14.228-syzkaller #0 [ 1454.213830] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1454.218828] Mem-Info: [ 1454.223174] Call Trace: [ 1454.223194] dump_stack+0x1b2/0x281 [ 1454.223210] warn_alloc.cold+0x96/0x1cc [ 1454.225614] active_anon:75836 inactive_anon:31143 isolated_anon:0 [ 1454.225614] active_file:17 inactive_file:17 isolated_file:0 [ 1454.225614] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1454.225614] slab_reclaimable:13321 slab_unreclaimable:134549 [ 1454.225614] mapped:43914 shmem:31536 pagetables:8741 bounce:0 [ 1454.225614] free:13908 free_pcp:51 free_cma:0 [ 1454.228180] ? zone_watermark_ok_safe+0x220/0x220 [ 1454.231816] Node 0 active_anon:284840kB inactive_anon:85172kB active_file:16kB inactive_file:16kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:137764kB dirty:0kB writeback:0kB shmem:86528kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 231424kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1454.235752] ? usleep_range+0x130/0x130 [ 1454.269028] Node 1 active_anon:18504kB inactive_anon:39400kB active_file:52kB inactive_file:52kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:37892kB dirty:0kB writeback:0kB shmem:39616kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1454.273809] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1454.273824] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1454.273835] ? run_timer_softirq+0x5a0/0x5a0 [ 1454.301711] Node 0 [ 1454.305651] __alloc_pages_nodemask+0x2127/0x2720 [ 1454.332938] DMA free:10948kB min:204kB low:252kB high:300kB active_anon:2100kB inactive_anon:8kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:56kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1454.337983] ? lock_acquire+0x170/0x3f0 [ 1454.342990] lowmem_reserve[]: [ 1454.347365] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1454.349567] 0 [ 1454.354395] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1454.354411] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1454.354431] alloc_pages_current+0x155/0x260 [ 1454.380394] 2717 [ 1454.384328] ion_page_pool_alloc+0x118/0x1b0 [ 1454.384339] ion_system_heap_allocate+0x133/0x8c0 [ 1454.387422] 2718 [ 1454.392252] ? _raw_spin_unlock+0x29/0x40 [ 1454.392262] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1454.392272] ? ion_system_contig_heap_create+0x130/0x130 [ 1454.394052] 2718 [ 1454.398551] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1454.403990] 2718 [ 1454.408379] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1454.414815] ion_alloc+0x27a/0x810 [ 1454.414830] ? ion_dma_buf_release+0x40/0x40 [ 1454.414843] ? __might_fault+0x177/0x1b0 [ 1454.419661] Node 0 [ 1454.421723] ion_ioctl+0xea/0x1f0 [ 1454.421732] ? ion_query_heaps+0x360/0x360 [ 1454.421747] ? __tun_chr_ioctl.isra.0+0x3310/0x3310 [ 1454.425879] DMA32 free:17948kB min:36200kB low:45248kB high:54296kB active_anon:282740kB inactive_anon:85164kB active_file:16kB inactive_file:16kB unevictable:0kB writepending:0kB present:3129332kB managed:2788136kB mlocked:0kB kernel_stack:11808kB pagetables:15916kB bounce:0kB free_pcp:84kB local_pcp:0kB free_cma:0kB [ 1454.430781] ? ion_query_heaps+0x360/0x360 [ 1454.430792] do_vfs_ioctl+0x75a/0xff0 [ 1454.430804] ? ioctl_preallocate+0x1a0/0x1a0 [ 1454.430816] ? lock_downgrade+0x740/0x740 [ 1454.436241] lowmem_reserve[]: [ 1454.438305] ? __fget+0x225/0x360 [ 1454.443316] 0 [ 1454.445339] ? do_vfs_ioctl+0xff0/0xff0 [ 1454.450154] 0 [ 1454.453695] ? security_file_ioctl+0x83/0xb0 [ 1454.453706] SyS_ioctl+0x7f/0xb0 [ 1454.453715] ? do_vfs_ioctl+0xff0/0xff0 [ 1454.458102] 0 [ 1454.462159] do_syscall_64+0x1d5/0x640 [ 1454.462175] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1454.462184] RIP: 0033:0x466459 [ 1454.464410] 0 [ 1454.467840] RSP: 002b:00007f6ba9361188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1454.472080] 0 [ 1454.477066] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1454.477074] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1454.509557] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1454.513370] Node 0 [ 1454.517746] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1454.521902] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1454.524955] R13: 00007ffd9352709f R14: 00007f6ba9361300 R15: 0000000000022000 [ 1454.528380] lowmem_reserve[]: [ 1454.531170] warn_alloc_show_mem: 1 callbacks suppressed [ 1454.531173] Mem-Info: [ 1454.542309] syz-executor.2: [ 1454.543965] active_anon:75836 inactive_anon:31143 isolated_anon:0 [ 1454.543965] active_file:17 inactive_file:17 isolated_file:0 [ 1454.543965] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1454.543965] slab_reclaimable:13321 slab_unreclaimable:134549 [ 1454.543965] mapped:43914 shmem:31536 pagetables:8741 bounce:0 [ 1454.543965] free:13908 free_pcp:59 free_cma:0 [ 1454.547659] page allocation failure: order:0 [ 1454.549684] Node 0 active_anon:284840kB inactive_anon:85172kB active_file:16kB inactive_file:16kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:137764kB dirty:0kB writeback:0kB shmem:86528kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 231424kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1454.559217] 0 [ 1454.561941] Node 1 active_anon:18504kB inactive_anon:39400kB active_file:52kB inactive_file:52kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:37892kB dirty:0kB writeback:0kB shmem:39616kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1454.563545] 0 [ 1454.571440] Node 0 DMA free:10948kB min:204kB low:252kB high:300kB active_anon:2100kB inactive_anon:8kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:56kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1454.578740] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1454.600498] lowmem_reserve[]: [ 1454.610316] 0 [ 1454.647097] 0 [ 1454.659148] 0 [ 1454.686944] (null) [ 1454.693122] 0 [ 1454.727893] syz-executor.2 cpuset= [ 1454.777501] 2717 [ 1454.790230] Node 1 [ 1454.792937] 2718 [ 1454.793111] Normal free:26736kB min:53696kB low:67120kB high:80544kB active_anon:18504kB inactive_anon:39400kB active_file:52kB inactive_file:52kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:6336kB pagetables:18992kB bounce:0kB free_pcp:120kB local_pcp:120kB free_cma:0kB [ 1454.794883] 2718 [ 1454.798401] lowmem_reserve[]: [ 1454.800507] 2718 [ 1454.800514] Node 0 DMA32 free:17948kB min:36200kB low:45248kB high:54296kB active_anon:282740kB inactive_anon:85164kB active_file:16kB inactive_file:16kB unevictable:0kB writepending:0kB present:3129332kB managed:2788136kB mlocked:0kB kernel_stack:11808kB pagetables:15916kB bounce:0kB free_pcp:116kB local_pcp:116kB free_cma:0kB [ 1454.800537] lowmem_reserve[]: 0 0 0 0 [ 1454.810027] 0 [ 1454.835478] / [ 1454.843342] 0 [ 1454.872159] 0 [ 1454.881204] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1454.883085] 0 [ 1454.908936] mems_allowed=0-1 [ 1454.914142] 0 0 [ 1454.914256] CPU: 0 PID: 2283 Comm: syz-executor.2 Not tainted 4.14.228-syzkaller #0 [ 1454.916149] Node 0 [ 1454.923913] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1454.923918] Call Trace: [ 1454.923938] dump_stack+0x1b2/0x281 [ 1454.923952] warn_alloc.cold+0x96/0x1cc [ 1454.923963] ? zone_watermark_ok_safe+0x220/0x220 [ 1454.923973] ? usleep_range+0x130/0x130 [ 1454.923982] ? try_to_free_pages+0x23f/0x6e0 [ 1454.923993] ? _find_next_bit+0xdb/0x100 [ 1454.924004] ? run_timer_softirq+0x5a0/0x5a0 [ 1454.924020] __alloc_pages_nodemask+0x2127/0x2720 [ 1454.926247] DMA: [ 1454.935599] ? lock_acquire+0x170/0x3f0 [ 1454.935617] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1454.938194] 9*4kB [ 1454.941790] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1454.941806] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1454.941826] alloc_pages_current+0x155/0x260 [ 1454.945769] (ME) [ 1454.950614] ion_page_pool_alloc+0x118/0x1b0 [ 1454.950625] ion_system_heap_allocate+0x133/0x8c0 [ 1454.950637] ? _raw_spin_unlock+0x29/0x40 [ 1454.954586] 8*8kB [ 1454.958993] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1454.963055] (ME) [ 1454.967420] ? ion_system_contig_heap_create+0x130/0x130 [ 1454.972262] 14*16kB [ 1454.974312] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1454.974326] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1454.978291] (UME) [ 1454.983127] ion_alloc+0x27a/0x810 [ 1454.983142] ? ion_dma_buf_release+0x40/0x40 [ 1454.983154] ? __might_fault+0x177/0x1b0 [ 1454.985281] 22*32kB [ 1454.989770] ion_ioctl+0xea/0x1f0 [ 1454.995238] (UM) [ 1454.999608] ? ion_query_heaps+0x360/0x360 [ 1455.001678] 9*64kB [ 1455.006053] ? __tun_chr_ioctl.isra.0+0x3310/0x3310 [ 1455.010888] (UME) [ 1455.015000] ? ion_query_heaps+0x360/0x360 [ 1455.017120] 3*128kB [ 1455.022042] do_vfs_ioctl+0x75a/0xff0 [ 1455.022055] ? ioctl_preallocate+0x1a0/0x1a0 [ 1455.022065] ? lock_downgrade+0x740/0x740 [ 1455.022078] ? __fget+0x225/0x360 [ 1455.024120] (UME) [ 1455.029554] ? do_vfs_ioctl+0xff0/0xff0 [ 1455.031875] 1*256kB [ 1455.036854] ? security_file_ioctl+0x83/0xb0 [ 1455.041690] (E) [ 1455.043811] SyS_ioctl+0x7f/0xb0 [ 1455.047336] 3*512kB [ 1455.051728] ? do_vfs_ioctl+0xff0/0xff0 [ 1455.051740] do_syscall_64+0x1d5/0x640 [ 1455.051755] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1455.051764] RIP: 0033:0x466459 [ 1455.055819] (UME) [ 1455.058121] RSP: 002b:00007f613992b188 EFLAGS: 00000246 [ 1455.061580] 3*1024kB [ 1455.063594] ORIG_RAX: 0000000000000010 [ 1455.063602] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1455.067831] (UME) [ 1455.070049] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1455.070056] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1455.075097] 2*2048kB [ 1455.077193] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1455.081427] (ME) [ 1455.083705] R13: 00007fff85f2b35f R14: 00007f613992b300 R15: 0000000000022000 [ 1455.087479] 0*4096kB [ 1455.100938] lowmem_reserve[]: [ 1455.112115] = 10948kB [ 1455.116391] 0 [ 1455.117585] Node 0 [ 1455.134456] 0 [ 1455.143359] DMA32: [ 1455.154465] 0 [ 1455.164506] 1769*4kB [ 1455.194544] 0 [ 1455.203378] (UME) [ 1455.214483] 0 [ 1455.219449] Node 1 Normal free:26736kB min:53696kB low:67120kB high:80544kB active_anon:18504kB inactive_anon:39400kB active_file:52kB inactive_file:52kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:6336kB pagetables:18992kB bounce:0kB free_pcp:120kB local_pcp:0kB free_cma:0kB [ 1455.220683] 596*8kB (UME) 109*16kB (UME) 15*32kB (UME) 4*64kB (UM) 1*128kB (U) 2*256kB (UM) 2*512kB (UM) 2*1024kB (UM) 0*2048kB 0*4096kB = 18036kB [ 1455.268039] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1455.269604] lowmem_reserve[]: [ 1455.283200] Node 1 [ 1455.286338] 0 0 [ 1455.288571] Normal: 52*4kB (ME) 26*8kB (UME) 11*16kB (UME) 13*32kB (UME) 10*64kB (M) 4*128kB (UM) 2*256kB (M) 1*512kB (U) 17*1024kB (U) 3*2048kB (U) 0*4096kB = 26736kB [ 1455.307907] 0 0 0 [ 1455.310010] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1455.310076] Node 0 [ 1455.319016] Node 0 hugepages_total=1 hugepages_free=1 hugepages_surp=1 hugepages_size=2048kB [ 1455.319025] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1455.350469] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1455.351791] DMA: 9*4kB (ME) 8*8kB (ME) 14*16kB (UME) 22*32kB (UM) 9*64kB (UME) 3*128kB (UME) [ 1455.359157] 31570 total pagecache pages [ 1455.383870] 1*256kB (E) 3*512kB (UME) 3*1024kB (UME) 2*2048kB (ME) 0*4096kB = 10948kB [ 1455.401974] 0 pages in swap cache [ 1455.410465] Node 0 DMA32: 1738*4kB (UME) 628*8kB (UME) 137*16kB (UME) 15*32kB (UME) 176*64kB (UM) 73*128kB (U) 2*256kB (UM) 2*512kB (UM) 2*1024kB (UM) 0*2048kB 0*4096kB = 38840kB [ 1455.420498] Swap cache stats: add 0, delete 0, find 0/0 [ 1455.440522] Free swap = 0kB [ 1455.443560] Total swap = 0kB [ 1455.446613] 2097051 pages RAM [ 1455.449707] 0 pages HighMem/MovableOnly [ 1455.452638] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1455.480497] 363846 pages reserved [ 1455.483658] Node 1 Normal: 17*4kB (ME) 10*8kB (UE) 4*16kB [ 1455.483988] 0 pages cma reserved [ 1455.483995] (UE) [ 1455.489636] Out of memory: Kill process 22191 (syz-executor.3) score 1005 or sacrifice child [ 1455.503611] 6*32kB (UE) 1471*64kB (UM) 4*128kB (U) 1*256kB (U) 1*512kB (U) 54*1024kB (UM) 9*2048kB (UM) 0*4096kB = 169556kB [ 1455.530479] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1455.539333] Node 0 hugepages_total=1 hugepages_free=1 hugepages_surp=1 hugepages_size=2048kB [ 1455.548564] Killed process 22191 (syz-executor.3) total-vm:93384kB, anon-rss:2200kB, file-rss:34628kB, shmem-rss:0kB [ 1455.571788] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1455.602416] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1455.622703] 32421 total pagecache pages [ 1455.626695] 0 pages in swap cache [ 1455.627810] oom_reaper: reaped process 22191 (syz-executor.3), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1455.630139] Swap cache stats: add 0, delete 0, find 0/0 [ 1455.690491] Free swap = 0kB [ 1455.693530] Total swap = 0kB [ 1455.696623] 2097051 pages RAM [ 1455.699780] 0 pages HighMem/MovableOnly [ 1455.732006] 363846 pages reserved [ 1455.735562] 0 pages cma reserved [ 1455.818016] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 1455.843873] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 1455.850907] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1455.859214] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1455.902014] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 1455.909201] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 1455.917887] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 1455.931693] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 1455.938272] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1455.950237] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1455.965763] device veth0_vlan entered promiscuous mode [ 1455.973629] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1455.985525] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1455.995592] device veth1_vlan entered promiscuous mode [ 1456.006352] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 1456.016692] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 1456.047935] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 1456.058001] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 1456.069808] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1456.077920] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1456.089039] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1456.097322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1456.111220] device veth0_macvtap entered promiscuous mode [ 1456.117479] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 1456.126976] device veth1_macvtap entered promiscuous mode [ 1456.133409] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 1456.143162] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 1456.153860] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 1456.172918] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1456.182908] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1456.192256] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1456.202411] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1456.211692] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1456.221548] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1456.231452] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1456.241261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1456.251923] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 1456.258870] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1456.265826] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1456.273512] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1456.284650] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1456.292502] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1456.302314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1456.317431] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1456.328009] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1456.342670] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1456.352964] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1456.366189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1456.376473] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1456.389299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1456.401078] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 1456.407939] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1456.419088] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1456.428712] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 20:23:11 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000180)={0x80000000, 0xa}) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x4000, 0x0) 20:23:11 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r1, 0x800454cf, &(0x7f0000000240)) ioctl$TUNSETSNDBUF(r1, 0x400454d4, &(0x7f0000000040)=0x1000) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000080)={'lo\x00', @broadcast}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000180)={0x80000000, 0xa}) openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) 20:23:11 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r1, 0x800454cf, &(0x7f0000000240)) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r2, 0x800454cf, &(0x7f0000000240)) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000080)={'lo\x00', @broadcast}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000180)={0x80000000, 0xa}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x4000, 0x0) ioctl$TUNSETPERSIST(r4, 0x400454cb, 0x1) ioctl$TUNGETFEATURES(r3, 0x800454cf, &(0x7f0000000240)) ioctl$TUNSETOWNER(r3, 0x400454cc, 0xffffffffffffffff) 20:23:11 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r1, 0x800454cf, &(0x7f0000000240)) ioctl$TUNSETSNDBUF(r1, 0x400454d4, &(0x7f0000000040)=0x1000) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000180)={0x80000000, 0xa}) 20:23:11 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r1, 0x800454cf, &(0x7f0000000240)) ioctl$TUNSETSNDBUF(r1, 0x400454d4, &(0x7f0000000040)=0x1000) openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000180)={0x80000000, 0xa}) openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) 20:23:11 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r1, 0x800454cf, &(0x7f0000000240)) ioctl$TUNSETSNDBUF(r1, 0x400454d4, &(0x7f0000000040)=0x1000) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r2, 0x800454cf, &(0x7f0000000240)) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000080)={'lo\x00', @broadcast}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000180)={0x80000000, 0xa}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r3, 0x800454cf, &(0x7f0000000240)) ioctl$TUNSETOWNER(r3, 0x400454cc, 0xffffffffffffffff) [ 1458.189702] syz-executor.2: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1458.190051] syz-executor.3: [ 1458.234286] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 1458.252838] page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1458.265044] CPU: 0 PID: 2562 Comm: syz-executor.2 Not tainted 4.14.228-syzkaller #0 [ 1458.272844] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1458.277150] syz-executor.3 cpuset= [ 1458.282191] Call Trace: [ 1458.282213] dump_stack+0x1b2/0x281 [ 1458.282228] warn_alloc.cold+0x96/0x1cc [ 1458.282240] ? zone_watermark_ok_safe+0x220/0x220 [ 1458.282263] __alloc_pages_nodemask+0x2127/0x2720 [ 1458.285881] / [ 1458.288362] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1458.292111] mems_allowed=0-1 [ 1458.295927] ? lock_acquire+0x170/0x3f0 [ 1458.295945] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1458.295964] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1458.295976] ? __mutex_unlock_slowpath+0x75/0x770 [ 1458.334435] alloc_pages_current+0x155/0x260 [ 1458.338854] ion_page_pool_alloc+0x118/0x1b0 [ 1458.343268] ion_system_heap_allocate+0x133/0x8c0 [ 1458.348101] ? ion_alloc+0x187/0x810 [ 1458.351811] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1458.357251] ? ion_system_contig_heap_create+0x130/0x130 [ 1458.362691] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1458.367716] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1458.372552] ion_alloc+0x204/0x810 [ 1458.376092] ? ion_dma_buf_release+0x40/0x40 [ 1458.380498] ? __might_fault+0x177/0x1b0 [ 1458.384550] ion_ioctl+0xea/0x1f0 [ 1458.387992] ? ion_query_heaps+0x360/0x360 [ 1458.392227] ? ion_query_heaps+0x360/0x360 [ 1458.396450] do_vfs_ioctl+0x75a/0xff0 [ 1458.400243] ? ioctl_preallocate+0x1a0/0x1a0 [ 1458.404639] ? lock_downgrade+0x740/0x740 [ 1458.408798] ? __fget+0x225/0x360 [ 1458.412242] ? do_vfs_ioctl+0xff0/0xff0 [ 1458.416213] ? security_file_ioctl+0x83/0xb0 [ 1458.420611] SyS_ioctl+0x7f/0xb0 [ 1458.423965] ? do_vfs_ioctl+0xff0/0xff0 [ 1458.427940] do_syscall_64+0x1d5/0x640 [ 1458.431838] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1458.437016] RIP: 0033:0x466459 [ 1458.440194] RSP: 002b:00007f613992b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1458.447893] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1458.455173] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1458.462462] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1458.469740] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1458.477176] R13: 00007fff85f2b35f R14: 00007f613992b300 R15: 0000000000022000 [ 1458.484467] CPU: 1 PID: 2555 Comm: syz-executor.3 Not tainted 4.14.228-syzkaller #0 [ 1458.492271] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1458.501648] Call Trace: [ 1458.504242] dump_stack+0x1b2/0x281 [ 1458.507872] warn_alloc.cold+0x96/0x1cc [ 1458.511870] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1458.516892] ? zone_watermark_ok_safe+0x220/0x220 [ 1458.521754] __alloc_pages_nodemask+0x2127/0x2720 [ 1458.526608] ? lock_acquire+0x170/0x3f0 [ 1458.530643] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1458.535499] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1458.541043] ? __mutex_unlock_slowpath+0x75/0x770 [ 1458.545899] alloc_pages_current+0x155/0x260 [ 1458.550308] ion_page_pool_alloc+0x118/0x1b0 [ 1458.554721] ion_system_heap_allocate+0x133/0x8c0 [ 1458.559573] ? ion_alloc+0x187/0x810 [ 1458.563292] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1458.568767] ? ion_system_contig_heap_create+0x130/0x130 [ 1458.574222] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1458.579241] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1458.584093] ion_alloc+0x204/0x810 [ 1458.587644] ? ion_dma_buf_release+0x40/0x40 [ 1458.592065] ? __might_fault+0x177/0x1b0 [ 1458.596137] ion_ioctl+0xea/0x1f0 [ 1458.599605] ? ion_query_heaps+0x360/0x360 [ 1458.603850] ? __tun_chr_ioctl.isra.0+0x3310/0x3310 [ 1458.608864] ? ion_query_heaps+0x360/0x360 [ 1458.613099] do_vfs_ioctl+0x75a/0xff0 [ 1458.616911] ? ioctl_preallocate+0x1a0/0x1a0 [ 1458.621342] ? lock_downgrade+0x740/0x740 [ 1458.625494] ? __fget+0x225/0x360 [ 1458.628949] ? do_vfs_ioctl+0xff0/0xff0 [ 1458.632935] ? security_file_ioctl+0x83/0xb0 [ 1458.637357] SyS_ioctl+0x7f/0xb0 [ 1458.640732] ? do_vfs_ioctl+0xff0/0xff0 [ 1458.644715] do_syscall_64+0x1d5/0x640 [ 1458.648617] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1458.653805] RIP: 0033:0x466459 [ 1458.656993] RSP: 002b:00007f6ba9361188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1458.664730] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1458.672004] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1458.679274] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1458.686539] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1458.693828] R13: 00007ffd9352709f R14: 00007f6ba9361300 R15: 0000000000022000 [ 1458.739988] syz-executor.4: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1458.756090] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 1458.761644] CPU: 1 PID: 2557 Comm: syz-executor.4 Not tainted 4.14.228-syzkaller #0 [ 1458.769440] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1458.778803] Call Trace: [ 1458.781589] dump_stack+0x1b2/0x281 [ 1458.785233] warn_alloc.cold+0x96/0x1cc [ 1458.789208] ? zone_watermark_ok_safe+0x220/0x220 [ 1458.794072] __alloc_pages_nodemask+0x2127/0x2720 [ 1458.798920] ? _raw_spin_unlock_irq+0x24/0x80 [ 1458.803422] ? lock_acquire+0x170/0x3f0 [ 1458.807428] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1458.812277] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1458.817749] ? __mutex_unlock_slowpath+0x75/0x770 [ 1458.822605] alloc_pages_current+0x155/0x260 [ 1458.827037] ion_page_pool_alloc+0x118/0x1b0 [ 1458.831489] ion_system_heap_allocate+0x133/0x8c0 [ 1458.836339] ? ion_alloc+0x187/0x810 [ 1458.840056] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1458.845621] ? ion_system_contig_heap_create+0x130/0x130 [ 1458.851077] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1458.856107] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1458.860974] ion_alloc+0x204/0x810 [ 1458.864550] ? ion_dma_buf_release+0x40/0x40 [ 1458.868980] ? __might_fault+0x177/0x1b0 [ 1458.873042] ion_ioctl+0xea/0x1f0 [ 1458.876508] ? ion_query_heaps+0x360/0x360 [ 1458.880752] ? ion_query_heaps+0x360/0x360 [ 1458.885000] do_vfs_ioctl+0x75a/0xff0 [ 1458.888805] ? ioctl_preallocate+0x1a0/0x1a0 [ 1458.893214] ? lock_downgrade+0x740/0x740 [ 1458.897360] ? __fget+0x225/0x360 [ 1458.900904] ? do_vfs_ioctl+0xff0/0xff0 [ 1458.904912] ? security_file_ioctl+0x83/0xb0 [ 1458.909344] SyS_ioctl+0x7f/0xb0 [ 1458.912715] ? do_vfs_ioctl+0xff0/0xff0 [ 1458.916723] do_syscall_64+0x1d5/0x640 [ 1458.920624] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1458.925816] RIP: 0033:0x466459 [ 1458.929012] RSP: 002b:00007f6a95319188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1458.936724] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1458.944011] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1458.951471] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1458.958746] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1458.966020] R13: 00007ffc0329f33f R14: 00007f6a95319300 R15: 0000000000022000 [ 1458.992216] warn_alloc_show_mem: 1 callbacks suppressed [ 1458.992220] Mem-Info: [ 1459.000176] active_anon:75284 inactive_anon:31142 isolated_anon:48 [ 1459.000176] active_file:1533 inactive_file:4890 isolated_file:12 [ 1459.000176] unevictable:0 dirty:21 writeback:25 unstable:0 [ 1459.000176] slab_reclaimable:13300 slab_unreclaimable:133988 [ 1459.000176] mapped:48007 shmem:31535 pagetables:8773 bounce:0 [ 1459.000176] free:128523 free_pcp:5 free_cma:0 [ 1459.058685] Node 0 active_anon:283072kB inactive_anon:85168kB active_file:5196kB inactive_file:18564kB unevictable:0kB isolated(anon):96kB isolated(file):0kB mapped:152060kB dirty:8kB writeback:36kB shmem:86524kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 229376kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1459.160494] Node 1 active_anon:18068kB inactive_anon:39400kB active_file:984kB inactive_file:948kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:40016kB dirty:0kB writeback:0kB shmem:39616kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1459.264090] Node 0 DMA free:11128kB min:204kB low:252kB high:300kB active_anon:2100kB inactive_anon:8kB active_file:80kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:56kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1459.364974] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1459.385872] Node 0 DMA32 free:66300kB min:36200kB low:45248kB high:54296kB active_anon:280916kB inactive_anon:85160kB active_file:5228kB inactive_file:18864kB unevictable:0kB writepending:48kB present:3129332kB managed:2788136kB mlocked:0kB kernel_stack:11904kB pagetables:16280kB bounce:0kB free_pcp:84kB local_pcp:28kB free_cma:0kB [ 1459.475944] lowmem_reserve[]: 0 0 0 0 0 [ 1459.490494] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1459.586861] lowmem_reserve[]: 0 0 0 0 0 [ 1459.603264] Node 1 Normal free:286448kB min:53696kB low:67120kB high:80544kB active_anon:18068kB inactive_anon:39400kB active_file:984kB inactive_file:948kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:6304kB pagetables:18904kB bounce:0kB free_pcp:80kB local_pcp:0kB free_cma:0kB [ 1459.697690] lowmem_reserve[]: 0 0 0 0 0 [ 1459.712175] Node 0 DMA: 19*4kB (UME) 1*8kB (E) 45*16kB (UME) 22*32kB (UM) 2*64kB (ME) 4*128kB (UME) 1*256kB (E) 3*512kB (UME) 3*1024kB (UME) 2*2048kB (ME) 0*4096kB = 11108kB [ 1459.769850] Node 0 DMA32: 2*4kB (UM) 315*8kB (UE) 87*16kB (E) 1284*32kB (UE) 2*64kB (U) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 45136kB [ 1459.823988] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1459.862871] Node 1 Normal: 50*4kB (UME) 21*8kB (ME) 7*16kB (UME) 6*32kB (ME) 3*64kB (U) 301*128kB (U) 12*256kB (U) 12*512kB (U) 5*1024kB (U) 0*2048kB 0*4096kB = 53728kB [ 1459.883015] syz-executor.1: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1459.895545] syz-executor.5: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1459.900528] syz-executor.1 cpuset= [ 1459.907557] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1459.921747] Node 0 hugepages_total=1 hugepages_free=1 hugepages_surp=1 hugepages_size=2048kB [ 1459.931715] / mems_allowed=0-1 [ 1459.942033] CPU: 0 PID: 2552 Comm: syz-executor.1 Not tainted 4.14.228-syzkaller #0 [ 1459.949843] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1459.959203] Call Trace: [ 1459.961796] dump_stack+0x1b2/0x281 [ 1459.965432] warn_alloc.cold+0x96/0x1cc [ 1459.969418] ? zone_watermark_ok_safe+0x220/0x220 [ 1459.974305] __alloc_pages_nodemask+0x2127/0x2720 [ 1459.979230] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1459.984084] ? migrate_swap_stop+0x880/0x880 [ 1459.988492] ? lock_acquire+0x170/0x3f0 [ 1459.992475] ? wake_up_q+0x82/0xd0 [ 1459.996019] ? __mutex_unlock_slowpath+0x261/0x770 [ 1460.000989] alloc_pages_current+0x155/0x260 [ 1460.005404] ion_page_pool_alloc+0x118/0x1b0 [ 1460.009816] ion_system_heap_allocate+0x133/0x8c0 [ 1460.014660] ? ion_alloc+0x187/0x810 [ 1460.018374] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1460.023826] ? ion_system_contig_heap_create+0x130/0x130 [ 1460.029277] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1460.034296] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1460.039145] ion_alloc+0x204/0x810 [ 1460.042700] ? ion_dma_buf_release+0x40/0x40 [ 1460.047112] ? __might_fault+0x177/0x1b0 [ 1460.051178] ion_ioctl+0xea/0x1f0 [ 1460.054628] ? ion_query_heaps+0x360/0x360 [ 1460.058868] ? __tun_chr_ioctl.isra.0+0x3310/0x3310 [ 1460.063878] ? ion_query_heaps+0x360/0x360 [ 1460.068133] do_vfs_ioctl+0x75a/0xff0 [ 1460.071938] ? ioctl_preallocate+0x1a0/0x1a0 [ 1460.076348] ? lock_downgrade+0x740/0x740 [ 1460.080500] ? __fget+0x225/0x360 [ 1460.083955] ? do_vfs_ioctl+0xff0/0xff0 [ 1460.087932] ? security_file_ioctl+0x83/0xb0 [ 1460.092339] SyS_ioctl+0x7f/0xb0 [ 1460.095705] ? do_vfs_ioctl+0xff0/0xff0 [ 1460.099679] do_syscall_64+0x1d5/0x640 [ 1460.103573] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1460.108759] RIP: 0033:0x466459 [ 1460.111946] RSP: 002b:00007f1402e26188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1460.119653] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1460.126922] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1460.134190] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1460.141460] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1460.148722] R13: 00007fff2d7045cf R14: 00007f1402e26300 R15: 0000000000022000 [ 1460.162743] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1460.181003] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1460.184634] syz-executor.5 cpuset= [ 1460.199631] 33262 total pagecache pages [ 1460.212006] 0 pages in swap cache [ 1460.214066] / [ 1460.218838] Swap cache stats: add 0, delete 0, find 0/0 [ 1460.221047] mems_allowed=0-1 [ 1460.228343] Free swap = 0kB [ 1460.236609] Total swap = 0kB [ 1460.239798] 2097051 pages RAM [ 1460.245349] 0 pages HighMem/MovableOnly [ 1460.248785] CPU: 1 PID: 2560 Comm: syz-executor.5 Not tainted 4.14.228-syzkaller #0 [ 1460.257117] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1460.258730] 363846 pages reserved [ 1460.266460] Call Trace: [ 1460.266479] dump_stack+0x1b2/0x281 [ 1460.266494] warn_alloc.cold+0x96/0x1cc [ 1460.266505] ? zone_watermark_ok_safe+0x220/0x220 [ 1460.266528] __alloc_pages_nodemask+0x2127/0x2720 [ 1460.266541] ? _raw_spin_unlock_irq+0x24/0x80 [ 1460.278986] 0 pages cma reserved [ 1460.280199] ? lock_acquire+0x170/0x3f0 [ 1460.280217] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1460.306488] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1460.311949] ? __mutex_unlock_slowpath+0x75/0x770 [ 1460.316788] alloc_pages_current+0x155/0x260 [ 1460.321195] ion_page_pool_alloc+0x118/0x1b0 [ 1460.325872] ion_system_heap_allocate+0x133/0x8c0 [ 1460.330706] ? ion_alloc+0x187/0x810 [ 1460.334414] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1460.339855] ? ion_system_contig_heap_create+0x130/0x130 [ 1460.345298] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1460.350307] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1460.355143] ion_alloc+0x204/0x810 [ 1460.358674] ? ion_dma_buf_release+0x40/0x40 [ 1460.363077] ? __might_fault+0x177/0x1b0 [ 1460.367159] ion_ioctl+0xea/0x1f0 [ 1460.370613] ? ion_query_heaps+0x360/0x360 [ 1460.374848] ? __tun_chr_ioctl.isra.0+0x3310/0x3310 [ 1460.379876] ? ion_query_heaps+0x360/0x360 [ 1460.384101] do_vfs_ioctl+0x75a/0xff0 [ 1460.387919] ? ioctl_preallocate+0x1a0/0x1a0 [ 1460.392317] ? lock_downgrade+0x740/0x740 [ 1460.396458] ? __fget+0x225/0x360 [ 1460.399934] ? do_vfs_ioctl+0xff0/0xff0 [ 1460.403903] ? security_file_ioctl+0x83/0xb0 [ 1460.408302] SyS_ioctl+0x7f/0xb0 [ 1460.411681] ? do_vfs_ioctl+0xff0/0xff0 [ 1460.415647] do_syscall_64+0x1d5/0x640 [ 1460.419529] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1460.424712] RIP: 0033:0x466459 [ 1460.427887] RSP: 002b:00007f2761281188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1460.435608] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1460.442880] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1460.450138] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1460.457411] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1460.464667] R13: 00007ffddf757caf R14: 00007f2761281300 R15: 0000000000022000 [ 1460.494435] warn_alloc_show_mem: 2 callbacks suppressed [ 1460.494439] Mem-Info: [ 1460.504277] active_anon:75330 inactive_anon:31142 isolated_anon:0 [ 1460.504277] active_file:525 inactive_file:478 isolated_file:92 [ 1460.504277] unevictable:0 dirty:1 writeback:0 unstable:0 [ 1460.504277] slab_reclaimable:13299 slab_unreclaimable:133477 [ 1460.504277] mapped:53641 shmem:31535 pagetables:8817 bounce:0 [ 1460.504277] free:25165 free_pcp:103 free_cma:0 [ 1460.538328] Node 0 active_anon:283220kB inactive_anon:85168kB active_file:1652kB inactive_file:1624kB unevictable:0kB isolated(anon):0kB isolated(file):240kB mapped:175960kB dirty:4kB writeback:0kB shmem:86524kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 229376kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1460.566956] Node 1 active_anon:18100kB inactive_anon:39400kB active_file:4kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:38104kB dirty:0kB writeback:0kB shmem:39616kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1460.594274] Node 0 DMA free:11072kB min:204kB low:252kB high:300kB active_anon:2100kB inactive_anon:8kB active_file:0kB inactive_file:28kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:56kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1460.623294] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1460.628497] Node 0 DMA32 free:35816kB min:36200kB low:45248kB high:54296kB active_anon:281120kB inactive_anon:85160kB active_file:1688kB inactive_file:1208kB unevictable:0kB writepending:4kB present:3129332kB managed:2788136kB mlocked:0kB kernel_stack:11904kB pagetables:16308kB bounce:0kB free_pcp:860kB local_pcp:120kB free_cma:0kB [ 1460.658471] lowmem_reserve[]: 0 0 0 0 0 [ 1460.662660] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1460.688596] lowmem_reserve[]: 0 0 0 0 0 [ 1460.692921] Node 1 Normal free:53604kB min:53696kB low:67120kB high:80544kB active_anon:18100kB inactive_anon:39400kB active_file:4kB inactive_file:4kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:6304kB pagetables:18904kB bounce:0kB free_pcp:156kB local_pcp:0kB free_cma:0kB [ 1460.731310] lowmem_reserve[]: 0 0 0 0 0 [ 1460.735526] Node 0 DMA: 13*4kB (UME) 5*8kB (UME) 43*16kB (UME) 22*32kB (UM) 2*64kB (ME) 4*128kB (UME) 1*256kB (E) 3*512kB (UME) 3*1024kB (UME) 2*2048kB (ME) 0*4096kB = 11084kB [ 1460.792556] Node 0 DMA32: 1717*4kB (UME) 576*8kB (UME) 113*16kB (UME) 709*32kB (UME) 2*64kB (U) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36100kB [ 1460.847930] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1460.960780] Node 1 Normal: 66*4kB (UME) 28*8kB (UME) 13*16kB (ME) 13*32kB (UME) 3*64kB (UM) 298*128kB (UM) 12*256kB (U) 12*512kB (U) 5*1024kB (U) 0*2048kB 0*4096kB = 53784kB [ 1461.053028] syz-executor.1 invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1461.132696] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1461.185020] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 1461.190165] CPU: 0 PID: 2261 Comm: syz-executor.1 Not tainted 4.14.228-syzkaller #0 [ 1461.197948] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1461.207315] Call Trace: [ 1461.209901] dump_stack+0x1b2/0x281 [ 1461.213553] dump_header+0x178/0x82f [ 1461.217267] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1461.222370] ? ___ratelimit+0x2cd/0x530 [ 1461.226346] oom_kill_process.cold+0x10/0xb18 [ 1461.230849] out_of_memory+0xe3e/0x1190 [ 1461.234853] ? oom_killer_disable+0x1c0/0x1c0 [ 1461.239365] ? mutex_trylock+0x152/0x1a0 [ 1461.243424] __alloc_pages_nodemask+0x23e1/0x2720 [ 1461.248302] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1461.253164] alloc_pages_current+0x155/0x260 [ 1461.257570] filemap_fault+0xea3/0x1980 [ 1461.261556] ext4_filemap_fault+0x84/0xb0 [ 1461.265706] __do_fault+0xfa/0x380 [ 1461.269330] __handle_mm_fault+0x2497/0x4620 [ 1461.273737] ? vm_insert_page+0x7c0/0x7c0 [ 1461.277890] ? nanosleep_copyout+0x100/0x100 [ 1461.282305] handle_mm_fault+0x391/0x860 [ 1461.286367] __do_page_fault+0x549/0xad0 [ 1461.290422] ? spurious_fault+0x640/0x640 [ 1461.294570] ? do_page_fault+0x60/0x500 [ 1461.298540] ? page_fault+0x2f/0x50 [ 1461.302163] page_fault+0x45/0x50 [ 1461.305607] RIP: 16423e:0x8 [ 1461.308541] RSP: 0006:00007fff2d70488c EFLAGS: 00000032 [ 1461.348868] Node 0 hugepages_total=1 hugepages_free=1 hugepages_surp=1 hugepages_size=2048kB [ 1461.429017] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1461.492523] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1461.553297] 31562 total pagecache pages [ 1461.557297] 0 pages in swap cache [ 1461.616782] Swap cache stats: add 0, delete 0, find 0/0 [ 1461.663850] Free swap = 0kB [ 1461.666912] Total swap = 0kB [ 1461.669926] 2097051 pages RAM [ 1461.745618] 0 pages HighMem/MovableOnly [ 1461.749606] 363846 pages reserved [ 1461.820972] 0 pages cma reserved [ 1462.310472] Mem-Info: [ 1462.312919] active_anon:75330 inactive_anon:31142 isolated_anon:0 [ 1462.312919] active_file:44 inactive_file:1 isolated_file:0 [ 1462.312919] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1462.312919] slab_reclaimable:13295 slab_unreclaimable:133416 [ 1462.312919] mapped:52670 shmem:31535 pagetables:8817 bounce:0 [ 1462.312919] free:25232 free_pcp:0 free_cma:0 [ 1462.635661] Node 0 active_anon:283220kB inactive_anon:85168kB active_file:52kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:172580kB dirty:0kB writeback:0kB shmem:86524kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 229376kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1462.896503] Node 1 active_anon:18100kB inactive_anon:39400kB active_file:4kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:38100kB dirty:0kB writeback:0kB shmem:39616kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1463.096182] Node 0 DMA free:11076kB min:204kB low:252kB high:300kB active_anon:2100kB inactive_anon:8kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:56kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1463.147523] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1463.165863] Node 0 DMA32 free:36080kB min:36200kB low:45248kB high:54296kB active_anon:281120kB inactive_anon:85160kB active_file:164kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2788136kB mlocked:0kB kernel_stack:11904kB pagetables:16308kB bounce:0kB free_pcp:120kB local_pcp:0kB free_cma:0kB [ 1463.215517] lowmem_reserve[]: 0 0 0 0 0 [ 1463.219542] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1463.269663] lowmem_reserve[]: 0 0 0 0 0 [ 1463.300264] Node 1 Normal free:53080kB min:53696kB low:67120kB high:80544kB active_anon:18100kB inactive_anon:39400kB active_file:24kB inactive_file:0kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:6368kB pagetables:18904kB bounce:0kB free_pcp:120kB local_pcp:0kB free_cma:0kB [ 1463.349666] lowmem_reserve[]: 0 0 0 0 0 [ 1463.380320] Node 0 DMA: 9*4kB (ME) 8*8kB (ME) 42*16kB (UME) 22*32kB (UM) 2*64kB (ME) 4*128kB (UME) 1*256kB (E) 3*512kB (UME) 3*1024kB (UME) 2*2048kB (ME) 0*4096kB = 11076kB [ 1463.429139] Node 0 DMA32: 1746*4kB (UME) 577*8kB (UME) 111*16kB (ME) 706*32kB (UME) 2*64kB (U) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36096kB [ 1463.469797] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1463.509958] Node 1 Normal: 65*4kB (ME) 27*8kB (ME) 13*16kB (ME) 12*32kB (ME) 3*64kB (UM) 293*128kB (UM) 12*256kB (U) 12*512kB (U) 5*1024kB (U) 0*2048kB 0*4096kB = 53100kB [ 1463.549957] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1463.570004] Node 0 hugepages_total=1 hugepages_free=1 hugepages_surp=1 hugepages_size=2048kB [ 1463.578626] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1463.605653] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1463.629764] 31561 total pagecache pages [ 1463.638764] 0 pages in swap cache [ 1463.657739] Swap cache stats: add 0, delete 0, find 0/0 [ 1463.679323] Free swap = 0kB [ 1463.688983] Total swap = 0kB [ 1463.707592] 2097051 pages RAM [ 1463.717450] 0 pages HighMem/MovableOnly [ 1463.730216] 363846 pages reserved [ 1463.749291] 0 pages cma reserved [ 1463.757290] Out of memory (oom_kill_allocating_task): Kill process 2261 (syz-executor.1) score 0 or sacrifice child [ 1463.786409] Killed process 2552 (syz-executor.1) total-vm:93384kB, anon-rss:156kB, file-rss:34820kB, shmem-rss:0kB [ 1463.848649] oom_reaper: reaped process 2552 (syz-executor.1), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1463.912726] syz-executor.3 invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1463.979244] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 1463.999574] CPU: 1 PID: 7997 Comm: syz-executor.3 Not tainted 4.14.228-syzkaller #0 [ 1464.007398] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1464.016748] Call Trace: [ 1464.019363] dump_stack+0x1b2/0x281 [ 1464.022995] dump_header+0x178/0x82f [ 1464.026714] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1464.031814] ? ___ratelimit+0x2cd/0x530 [ 1464.035786] oom_kill_process.cold+0x10/0xb18 [ 1464.040306] out_of_memory+0xe3e/0x1190 [ 1464.044280] ? oom_killer_disable+0x1c0/0x1c0 [ 1464.048771] ? mutex_trylock+0x152/0x1a0 [ 1464.052855] __alloc_pages_nodemask+0x23e1/0x2720 [ 1464.057718] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1464.062575] alloc_pages_current+0x155/0x260 [ 1464.066979] filemap_fault+0xea3/0x1980 [ 1464.070970] ext4_filemap_fault+0x84/0xb0 [ 1464.075120] __do_fault+0xfa/0x380 [ 1464.078657] __handle_mm_fault+0x2497/0x4620 [ 1464.083126] ? vm_insert_page+0x7c0/0x7c0 [ 1464.087284] ? nanosleep_copyout+0x100/0x100 [ 1464.091700] handle_mm_fault+0x391/0x860 [ 1464.095756] __do_page_fault+0x549/0xad0 [ 1464.099826] ? spurious_fault+0x640/0x640 [ 1464.104083] ? do_page_fault+0x60/0x500 [ 1464.108069] ? page_fault+0x2f/0x50 [ 1464.111683] page_fault+0x45/0x50 [ 1464.115130] RIP: 164238:0xc [ 1464.118045] RSP: 3787:00007ffd9352735c EFLAGS: 00000032 [ 1464.129026] Mem-Info: [ 1464.137290] active_anon:75306 inactive_anon:31142 isolated_anon:0 [ 1464.137290] active_file:14 inactive_file:7 isolated_file:6 [ 1464.137290] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1464.137290] slab_reclaimable:13279 slab_unreclaimable:133415 [ 1464.137290] mapped:52670 shmem:31535 pagetables:8817 bounce:0 [ 1464.137290] free:13945 free_pcp:98 free_cma:0 [ 1464.170574] Node 0 active_anon:283124kB inactive_anon:85168kB active_file:52kB inactive_file:28kB unevictable:0kB isolated(anon):0kB isolated(file):24kB mapped:172580kB dirty:0kB writeback:0kB shmem:86524kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 229376kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1464.198675] Node 1 active_anon:18100kB inactive_anon:39400kB active_file:4kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:38100kB dirty:0kB writeback:0kB shmem:39616kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1464.225840] Node 0 DMA free:10976kB min:204kB low:252kB high:300kB active_anon:2100kB inactive_anon:8kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:56kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1464.254422] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1464.259465] Node 0 DMA32 free:18092kB min:36200kB low:45248kB high:54296kB active_anon:281024kB inactive_anon:85160kB active_file:52kB inactive_file:28kB unevictable:0kB writepending:0kB present:3129332kB managed:2788136kB mlocked:0kB kernel_stack:11904kB pagetables:16308kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1464.293552] lowmem_reserve[]: 0 0 0 0 0 [ 1464.297592] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1464.323235] lowmem_reserve[]: 0 0 0 0 0 [ 1464.327310] Node 1 Normal free:26808kB min:53696kB low:67120kB high:80544kB active_anon:18100kB inactive_anon:39400kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:6368kB pagetables:18904kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1464.355960] lowmem_reserve[]: 0 0 0 0 0 [ 1464.359954] Node 0 DMA: 10*4kB (UME) 9*8kB (UME) 35*16kB (UME) 22*32kB (UM) 2*64kB (ME) 4*128kB (UME) 1*256kB (E) 3*512kB (UME) 3*1024kB (UME) 2*2048kB (ME) 0*4096kB = 10976kB [ 1464.377012] Node 0 DMA32: 1764*4kB (UME) 770*8kB (UME) 111*16kB (ME) 148*32kB (UME) 3*64kB (U) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 19920kB [ 1464.391796] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1464.402971] Node 1 Normal: 66*4kB (UME) 27*8kB (ME) 14*16kB (UME) 13*32kB (UME) 2*64kB (M) 88*128kB (UM) 12*256kB (U) 12*512kB (U) 5*1024kB (U) 0*2048kB 0*4096kB = 26848kB [ 1464.424346] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1464.433257] Node 0 hugepages_total=1 hugepages_free=1 hugepages_surp=1 hugepages_size=2048kB [ 1464.443371] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1464.452263] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1464.460868] 31562 total pagecache pages [ 1464.464839] 0 pages in swap cache [ 1464.468281] Swap cache stats: add 0, delete 0, find 0/0 [ 1464.473724] Free swap = 0kB [ 1464.476744] Total swap = 0kB [ 1464.479750] 2097051 pages RAM [ 1464.482887] 0 pages HighMem/MovableOnly [ 1464.486851] 363846 pages reserved [ 1464.490296] 0 pages cma reserved [ 1464.494469] Out of memory (oom_kill_allocating_task): Kill process 7997 (syz-executor.3) score 0 or sacrifice child [ 1464.506441] Killed process 22449 (syz-executor.3) total-vm:93384kB, anon-rss:2200kB, file-rss:34628kB, shmem-rss:0kB [ 1464.527277] oom_reaper: reaped process 2555 (syz-executor.3), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1464.553351] oom_reaper: reaped process 22449 (syz-executor.3), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1464.610939] systemd-journal invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=0 [ 1464.623589] systemd-journal cpuset=/ mems_allowed=0-1 [ 1464.628832] CPU: 1 PID: 2463 Comm: systemd-journal Not tainted 4.14.228-syzkaller #0 [ 1464.636701] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1464.646061] Call Trace: [ 1464.648668] dump_stack+0x1b2/0x281 [ 1464.652294] dump_header+0x178/0x82f [ 1464.656009] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1464.661106] ? ___ratelimit+0x2cd/0x530 [ 1464.665079] oom_kill_process.cold+0x10/0xb18 [ 1464.669588] out_of_memory+0xe3e/0x1190 [ 1464.673598] ? oom_killer_disable+0x1c0/0x1c0 [ 1464.678091] ? mutex_trylock+0x152/0x1a0 [ 1464.682156] __alloc_pages_nodemask+0x23e1/0x2720 [ 1464.687010] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1464.691862] ? cache_grow_begin+0x41/0x630 [ 1464.696092] cache_grow_begin+0x91/0x630 [ 1464.700146] ? cache_grow_begin+0x91/0x630 [ 1464.704376] fallback_alloc+0x207/0x2c0 [ 1464.708352] kmem_cache_alloc+0x1e5/0x3c0 [ 1464.712503] getname_flags+0xc8/0x550 [ 1464.716300] user_path_at_empty+0x2a/0x50 [ 1464.720443] SyS_faccessat+0x21b/0x680 [ 1464.724361] ? SyS_fallocate+0x80/0x80 [ 1464.728244] ? do_syscall_64+0x4c/0x640 [ 1464.732219] ? SyS_faccessat+0x680/0x680 [ 1464.736274] do_syscall_64+0x1d5/0x640 [ 1464.740163] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1464.745346] RIP: 0033:0x7f1ef911e9c7 [ 1464.749056] RSP: 002b:00007fff01d9f2f8 EFLAGS: 00000246 ORIG_RAX: 0000000000000015 [ 1464.756760] RAX: ffffffffffffffda RBX: 00007fff01da2210 RCX: 00007f1ef911e9c7 [ 1464.764019] RDX: 00007f1ef9b8fa00 RSI: 0000000000000000 RDI: 000055f9d17f39a3 [ 1464.771285] RBP: 00007fff01d9f330 R08: 0000000000000000 R09: 0000000000000000 [ 1464.778548] R10: 0000000000000069 R11: 0000000000000246 R12: 0000000000000000 [ 1464.785812] R13: 0000000000000000 R14: 00007fff01da2210 R15: 00007fff01d9f820 [ 1464.816123] Mem-Info: [ 1464.820314] active_anon:74751 inactive_anon:31142 isolated_anon:0 [ 1464.820314] active_file:40 inactive_file:0 isolated_file:0 [ 1464.820314] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1464.820314] slab_reclaimable:13276 slab_unreclaimable:132538 [ 1464.820314] mapped:52670 shmem:31535 pagetables:8793 bounce:0 [ 1464.820314] free:13883 free_pcp:0 free_cma:0 [ 1464.890507] syz-executor.3: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1464.928314] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 1464.940125] CPU: 0 PID: 2555 Comm: syz-executor.3 Not tainted 4.14.228-syzkaller #0 [ 1464.947951] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1464.956315] Node 0 active_anon:280904kB inactive_anon:85168kB active_file:152kB inactive_file:32kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:172580kB dirty:0kB writeback:0kB shmem:86524kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 229376kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1464.957317] Call Trace: [ 1464.985359] Node 1 active_anon:18100kB inactive_anon:39400kB active_file:4kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:38100kB dirty:0kB writeback:0kB shmem:39616kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1464.987891] dump_stack+0x1b2/0x281 [ 1465.014977] Node 0 DMA free:10964kB min:204kB low:252kB high:300kB active_anon:52kB inactive_anon:8kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:52kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1465.018576] warn_alloc.cold+0x96/0x1cc [ 1465.018590] ? zone_watermark_ok_safe+0x220/0x220 [ 1465.044973] lowmem_reserve[]: [ 1465.048908] ? usleep_range+0x130/0x130 [ 1465.053734] 0 [ 1465.056811] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1465.060773] 2717 [ 1465.062546] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1465.067612] 2718 2718 [ 1465.069671] ? run_timer_softirq+0x5a0/0x5a0 [ 1465.074681] 2718 [ 1465.077150] __alloc_pages_nodemask+0x2127/0x2720 [ 1465.083581] ? lock_acquire+0x170/0x3f0 [ 1465.088391] Node 0 [ 1465.092356] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1465.092365] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1465.092382] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1465.094605] DMA32 free:17740kB min:36200kB low:45248kB high:54296kB active_anon:281024kB inactive_anon:85160kB active_file:56kB inactive_file:48kB unevictable:0kB writepending:0kB present:3129332kB managed:2788136kB mlocked:0kB kernel_stack:11872kB pagetables:16216kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1465.099431] alloc_pages_current+0x155/0x260 [ 1465.103917] lowmem_reserve[]: [ 1465.109332] ion_page_pool_alloc+0x118/0x1b0 [ 1465.137539] 0 [ 1465.141909] ion_system_heap_allocate+0x133/0x8c0 [ 1465.141919] ? ion_alloc+0x187/0x810 [ 1465.145002] 0 [ 1465.149400] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1465.151196] 0 [ 1465.156013] ? ion_system_contig_heap_create+0x130/0x130 [ 1465.159713] 0 [ 1465.161504] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1465.161517] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1465.161528] ion_alloc+0x204/0x810 [ 1465.161542] ? ion_dma_buf_release+0x40/0x40 [ 1465.166966] 0 [ 1465.168757] ? __might_fault+0x177/0x1b0 [ 1465.175964] ion_ioctl+0xea/0x1f0 [ 1465.180968] Node 0 [ 1465.185776] ? ion_query_heaps+0x360/0x360 [ 1465.189309] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1465.193695] ? __tun_chr_ioctl.isra.0+0x3310/0x3310 [ 1465.193703] ? ion_query_heaps+0x360/0x360 [ 1465.193713] do_vfs_ioctl+0x75a/0xff0 [ 1465.193725] ? ioctl_preallocate+0x1a0/0x1a0 [ 1465.195500] lowmem_reserve[]: [ 1465.199545] ? lock_downgrade+0x740/0x740 [ 1465.202988] 0 [ 1465.205190] ? __fget+0x225/0x360 [ 1465.209392] 0 [ 1465.234284] ? do_vfs_ioctl+0xff0/0xff0 [ 1465.234297] ? security_file_ioctl+0x83/0xb0 [ 1465.234306] SyS_ioctl+0x7f/0xb0 [ 1465.234315] ? do_vfs_ioctl+0xff0/0xff0 [ 1465.234328] do_syscall_64+0x1d5/0x640 [ 1465.239325] 0 [ 1465.243548] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1465.243557] RIP: 0033:0x466459 [ 1465.243565] RSP: 002b:00007f6ba9361188 EFLAGS: 00000246 [ 1465.247342] 0 [ 1465.251725] ORIG_RAX: 0000000000000010 [ 1465.251732] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1465.251737] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1465.251742] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1465.251747] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1465.251755] R13: 00007ffd9352709f R14: 00007f6ba9361300 R15: 0000000000022000 [ 1465.254852] 0 [ 1465.264217] warn_alloc_show_mem: 1 callbacks suppressed [ 1465.264220] Mem-Info: [ 1465.276639] syz-executor.1: [ 1465.278036] active_anon:74751 inactive_anon:31142 isolated_anon:0 [ 1465.278036] active_file:31 inactive_file:0 isolated_file:0 [ 1465.278036] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1465.278036] slab_reclaimable:13276 slab_unreclaimable:132538 [ 1465.278036] mapped:52670 shmem:31535 pagetables:8793 bounce:0 [ 1465.278036] free:13913 free_pcp:0 free_cma:0 [ 1465.329846] page allocation failure: order:0 [ 1465.338249] Node 0 active_anon:280884kB inactive_anon:85168kB active_file:52kB inactive_file:52kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:172580kB dirty:0kB writeback:0kB shmem:86524kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 227328kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1465.350887] Node 1 active_anon:18100kB inactive_anon:39400kB active_file:0kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):4kB mapped:38100kB dirty:0kB writeback:0kB shmem:39616kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1465.353241] Node 1 [ 1465.356252] Node 0 [ 1465.389425] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1465.397868] DMA free:10968kB min:204kB low:252kB high:300kB active_anon:52kB inactive_anon:8kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:52kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1465.421740] Normal free:26848kB min:53696kB low:67120kB high:80544kB active_anon:18100kB inactive_anon:39400kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:6368kB pagetables:18904kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1465.421743] lowmem_reserve[]: 0 0 0 0 0 [ 1465.421760] Node 0 DMA: 12*4kB (UME) 9*8kB (UME) 8*16kB (UME) 3*32kB (M) 2*64kB (ME) 2*128kB (ME) 2*256kB (UE) 3*512kB (UME) 2*1024kB (ME) 3*2048kB (ME) 0*4096kB = 10968kB [ 1465.421828] Node 0 DMA32: 1757*4kB (ME) 579*8kB (ME) 111*16kB (ME) 135*32kB (UME) 3*64kB (U) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 17948kB [ 1465.421883] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1465.421920] Node 1 Normal: 66*4kB (UME) 27*8kB (ME) 14*16kB (UME) 13*32kB (UME) 2*64kB (M) 88*128kB (UM) 12*256kB (U) 12*512kB (U) 5*1024kB (U) 0*2048kB 0*4096kB = 26848kB [ 1465.421991] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1465.421997] Node 0 hugepages_total=1 hugepages_free=1 hugepages_surp=1 hugepages_size=2048kB [ 1465.422002] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1465.422008] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1465.422012] 31562 total pagecache pages [ 1465.422020] 0 pages in swap cache [ 1465.422026] Swap cache stats: add 0, delete 0, find 0/0 [ 1465.422029] Free swap = 0kB [ 1465.422032] Total swap = 0kB [ 1465.422038] 2097051 pages RAM [ 1465.422041] 0 pages HighMem/MovableOnly [ 1465.422045] 363846 pages reserved [ 1465.422047] 0 pages cma reserved [ 1465.422054] Out of memory (oom_kill_allocating_task): Kill process 2463 (systemd-journal) score 0 or sacrifice child [ 1465.422084] Killed process 2463 (systemd-journal) total-vm:46096kB, anon-rss:468kB, file-rss:0kB, shmem-rss:1784kB [ 1465.423004] oom_reaper: reaped process 2463 (systemd-journal), now anon-rss:0kB, file-rss:0kB, shmem-rss:1784kB [ 1465.453887] lowmem_reserve[]: [ 1465.469359] (null) [ 1465.499166] 0 [ 1465.525318] syz-executor.1 cpuset= [ 1465.538957] kworker/u4:6 invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask= [ 1465.584998] / [ 1465.592784] 2717 [ 1465.605261] mems_allowed=0-1 [ 1465.610356] 2718 [ 1465.614307] CPU: 1 PID: 2552 Comm: syz-executor.1 Not tainted 4.14.228-syzkaller #0 [ 1465.621402] 2718 [ 1465.623011] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1465.626007] 2718 [ 1465.629006] Call Trace: [ 1465.636062] dump_stack+0x1b2/0x281 [ 1465.639479] Node 0 [ 1465.642832] warn_alloc.cold+0x96/0x1cc [ 1465.642844] ? zone_watermark_ok_safe+0x220/0x220 [ 1465.642855] ? usleep_range+0x130/0x130 [ 1465.642864] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1465.642877] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1465.642888] ? run_timer_softirq+0x5a0/0x5a0 [ 1465.658052] (null) [ 1465.664039] __alloc_pages_nodemask+0x2127/0x2720 [ 1465.664056] ? lock_acquire+0x170/0x3f0 [ 1465.664072] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1465.676533] DMA32 free:17948kB min:36200kB low:45248kB high:54296kB active_anon:280832kB inactive_anon:85160kB active_file:52kB inactive_file:52kB unevictable:0kB writepending:0kB present:3129332kB managed:2788136kB mlocked:0kB kernel_stack:11840kB pagetables:16212kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1465.677399] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1465.679520] lowmem_reserve[]: [ 1465.681402] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1465.681423] alloc_pages_current+0x155/0x260 [ 1465.681436] ion_page_pool_alloc+0x118/0x1b0 [ 1465.684952] 0 [ 1465.693951] ion_system_heap_allocate+0x133/0x8c0 [ 1465.693961] ? ion_alloc+0x187/0x810 [ 1465.693972] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1465.693980] ? ion_system_contig_heap_create+0x130/0x130 [ 1465.693990] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1465.694002] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1465.694012] ion_alloc+0x204/0x810 [ 1465.695766] , order=1, oom_score_adj=0 [ 1465.697786] ? ion_dma_buf_release+0x40/0x40 [ 1465.700900] kworker/u4:6 cpuset= [ 1465.702913] ? __might_fault+0x177/0x1b0 [ 1465.710763] / [ 1465.712741] ion_ioctl+0xea/0x1f0 [ 1465.722117] 0 [ 1465.724133] ? ion_query_heaps+0x360/0x360 [ 1465.726731] 0 [ 1465.730362] ? __tun_chr_ioctl.isra.0+0x3310/0x3310 [ 1465.733181] mems_allowed=0-1 [ 1465.736536] ? ion_query_heaps+0x360/0x360 [ 1465.741629] 0 [ 1465.745312] do_vfs_ioctl+0x75a/0xff0 [ 1465.750389] 0 [ 1465.755420] ? ioctl_preallocate+0x1a0/0x1a0 [ 1465.755429] ? lock_downgrade+0x740/0x740 [ 1465.755442] ? __fget+0x225/0x360 [ 1465.755451] ? do_vfs_ioctl+0xff0/0xff0 [ 1465.755462] ? security_file_ioctl+0x83/0xb0 [ 1465.755473] SyS_ioctl+0x7f/0xb0 [ 1465.755481] ? do_vfs_ioctl+0xff0/0xff0 [ 1465.755493] do_syscall_64+0x1d5/0x640 [ 1465.755508] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1465.755518] RIP: 0033:0x466459 [ 1465.803819] RSP: 002b:00007f1402e26188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1465.803831] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1465.803835] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1465.803840] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1465.803845] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1465.803850] R13: 00007fff2d7045cf R14: 00007f1402e26300 R15: 0000000000022000 [ 1465.911941] CPU: 1 PID: 2567 Comm: kworker/u4:6 Not tainted 4.14.228-syzkaller #0 [ 1465.969269] Node 0 [ 1465.972898] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1465.972902] Call Trace: [ 1465.972918] dump_stack+0x1b2/0x281 [ 1465.972930] dump_header+0x178/0x82f [ 1465.972941] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1465.972951] ? ___ratelimit+0x2cd/0x530 [ 1465.972965] oom_kill_process.cold+0x10/0xb18 [ 1465.980239] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1465.987494] ? lock_downgrade+0x740/0x740 [ 1465.987510] out_of_memory+0x2dc/0x1190 [ 1465.987523] ? oom_killer_disable+0x1c0/0x1c0 [ 1465.987532] ? mutex_trylock+0x152/0x1a0 [ 1465.987545] __alloc_pages_nodemask+0x23e1/0x2720 [ 1465.994830] lowmem_reserve[]: [ 1466.002429] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1466.002451] ? cache_grow_begin+0x41/0x630 [ 1466.002460] cache_grow_begin+0x91/0x630 [ 1466.002467] ? cache_grow_begin+0x91/0x630 [ 1466.002476] fallback_alloc+0x207/0x2c0 [ 1466.002487] kmem_cache_alloc+0x1e5/0x3c0 [ 1466.002499] getname_kernel+0x4e/0x340 [ 1466.002514] call_usermodehelper_exec_async+0x2df/0x510 [ 1466.004732] 0 [ 1466.014081] ? call_usermodehelper_exec_work+0x2a0/0x2a0 [ 1466.014090] ret_from_fork+0x24/0x30 [ 1466.198485] IPVS: ftp: loaded support on port[0] = 21 [ 1466.226361] Mem-Info: [ 1466.228895] active_anon:74646 inactive_anon:31142 isolated_anon:0 [ 1466.228895] active_file:563 inactive_file:531 isolated_file:68 [ 1466.228895] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1466.228895] slab_reclaimable:13276 slab_unreclaimable:132507 [ 1466.228895] mapped:53095 shmem:31535 pagetables:8792 bounce:0 [ 1466.228895] free:13945 free_pcp:96 free_cma:0 [ 1466.275864] Node 0 active_anon:280884kB inactive_anon:85168kB active_file:52kB inactive_file:52kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:172580kB dirty:0kB writeback:0kB shmem:86524kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 227328kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1466.307421] Node 1 active_anon:17700kB inactive_anon:39400kB active_file:1800kB inactive_file:1604kB unevictable:0kB isolated(anon):0kB isolated(file):236kB mapped:39500kB dirty:0kB writeback:0kB shmem:39616kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1466.338969] Node 0 DMA free:11032kB min:204kB low:252kB high:300kB active_anon:52kB inactive_anon:8kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:52kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1466.376405] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1466.385993] Node 0 DMA32 free:17856kB min:36200kB low:45248kB high:54296kB active_anon:280832kB inactive_anon:85160kB active_file:52kB inactive_file:52kB unevictable:0kB writepending:0kB present:3129332kB managed:2788136kB mlocked:0kB kernel_stack:11840kB pagetables:16212kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1466.423063] lowmem_reserve[]: 0 0 0 0 0 [ 1466.427160] 0 0 0 0 [ 1466.429570] Node 1 Normal free:27340kB min:53696kB low:67120kB high:80544kB active_anon:17700kB inactive_anon:39400kB active_file:800kB inactive_file:900kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:6368kB pagetables:18904kB bounce:0kB free_pcp:508kB local_pcp:0kB free_cma:0kB [ 1466.464580] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1466.494097] lowmem_reserve[]: 0 0 0 0 0 [ 1466.498207] Node 1 Normal free:28348kB min:53696kB low:67120kB high:80544kB active_anon:17700kB inactive_anon:39400kB active_file:296kB inactive_file:380kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:6368kB pagetables:18904kB bounce:0kB free_pcp:692kB local_pcp:0kB free_cma:0kB [ 1466.500502] lowmem_reserve[]: [ 1466.531272] lowmem_reserve[]: 0 0 0 0 0 [ 1466.538559] Node 0 DMA: 12*4kB (UME) 9*8kB (UME) 9*16kB (UME) 3*32kB (M) 3*64kB (UME) 2*128kB (ME) 2*256kB (UE) 3*512kB (UME) 2*1024kB (ME) 3*2048kB (ME) 0*4096kB = 11048kB [ 1466.561838] Node 0 DMA32: 1805*4kB (UME) 588*8kB (UME) 113*16kB (UME) 136*32kB (UME) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18084kB [ 1466.577889] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1466.581409] 0 0 0 0 0 [ 1466.597984] Node 1 Normal: 92*4kB (UME) 48*8kB (UME) 29*16kB (UME) 27*32kB (UME) 16*64kB (UM) 6*128kB (UM) 43*256kB (UM) 23*512kB (U) 1*1024kB (M) 0*2048kB 0*4096kB = 27680kB [ 1466.612628] Node 0 DMA: 12*4kB (UME) 9*8kB (UME) 9*16kB (UME) 3*32kB (M) 3*64kB (UME) 2*128kB (ME) 2*256kB (UE) 3*512kB (UME) 2*1024kB (ME) 3*2048kB (ME) 0*4096kB = 11048kB [ 1466.628652] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1466.635025] Node 0 DMA32: 1805*4kB (UME) 588*8kB (UME) 113*16kB (UME) 136*32kB (UME) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18084kB [ 1466.651887] Node 0 hugepages_total=1 hugepages_free=1 hugepages_surp=1 hugepages_size=2048kB [ 1466.657680] Node 0 [ 1466.663473] syz-executor.1: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1466.672153] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1466.708521] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1466.715060] Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1466.725419] 31606 total pagecache pages [ 1466.740368] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 1466.747975] Node 1 Normal: 92*4kB (UME) 48*8kB (UME) 29*16kB (UME) 27*32kB (UME) 5*64kB (M) 5*128kB (UM) 43*256kB (UM) 23*512kB (U) 1*1024kB (M) 0*2048kB 0*4096kB = 26848kB [ 1466.750693] 0 pages in swap cache [ 1466.776621] CPU: 0 PID: 2552 Comm: syz-executor.1 Not tainted 4.14.228-syzkaller #0 [ 1466.781322] Swap cache stats: add 0, delete 0, find 0/0 [ 1466.784421] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1466.789792] Free swap = 0kB [ 1466.799660] Call Trace: [ 1466.799682] dump_stack+0x1b2/0x281 [ 1466.799696] warn_alloc.cold+0x96/0x1cc [ 1466.799708] ? zone_watermark_ok_safe+0x220/0x220 [ 1466.802719] Total swap = 0kB [ 1466.805288] __alloc_pages_nodemask+0x2127/0x2720 [ 1466.808877] 2097051 pages RAM [ 1466.812840] ? lock_acquire+0x170/0x3f0 [ 1466.812857] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1466.817678] 0 pages HighMem/MovableOnly [ 1466.820700] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1466.820713] ? __mutex_unlock_slowpath+0x75/0x770 [ 1466.825544] 363846 pages reserved [ 1466.828640] alloc_pages_current+0x155/0x260 [ 1466.832608] 0 pages cma reserved [ 1466.837419] ion_page_pool_alloc+0x118/0x1b0 [ 1466.841408] Out of memory: Kill process 22602 (syz-executor.3) score 1005 or sacrifice child [ 1466.846833] ion_system_heap_allocate+0x133/0x8c0 [ 1466.851728] Killed process 22602 (syz-executor.3) total-vm:93384kB, anon-rss:2200kB, file-rss:34628kB, shmem-rss:0kB [ 1466.855091] ? _raw_spin_unlock+0x29/0x40 [ 1466.859880] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1466.862838] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1466.862849] ? ion_system_contig_heap_create+0x130/0x130 [ 1466.862859] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1466.862872] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1466.862882] ion_alloc+0x27a/0x810 [ 1466.867273] Node 0 hugepages_total=1 hugepages_free=1 hugepages_surp=1 hugepages_size=2048kB [ 1466.875843] ? ion_dma_buf_release+0x40/0x40 [ 1466.875856] ? __might_fault+0x177/0x1b0 [ 1466.875868] ion_ioctl+0xea/0x1f0 [ 1466.880723] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1466.891366] ? ion_query_heaps+0x360/0x360 [ 1466.891381] ? __tun_chr_ioctl.isra.0+0x3310/0x3310 [ 1466.891391] ? ion_query_heaps+0x360/0x360 [ 1466.895519] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1466.904335] do_vfs_ioctl+0x75a/0xff0 [ 1466.904348] ? ioctl_preallocate+0x1a0/0x1a0 [ 1466.904360] ? lock_downgrade+0x740/0x740 [ 1466.909346] 31606 total pagecache pages [ 1466.914781] ? __fget+0x225/0x360 [ 1466.914791] ? do_vfs_ioctl+0xff0/0xff0 [ 1466.914804] ? security_file_ioctl+0x83/0xb0 [ 1466.919797] 0 pages in swap cache [ 1466.924620] SyS_ioctl+0x7f/0xb0 [ 1466.924629] ? do_vfs_ioctl+0xff0/0xff0 [ 1466.924642] do_syscall_64+0x1d5/0x640 [ 1466.928157] Swap cache stats: add 0, delete 0, find 0/0 [ 1466.936720] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1466.936730] RIP: 0033:0x466459 [ 1466.936737] RSP: 002b:00007f1402e26188 EFLAGS: 00000246 [ 1466.941142] Free swap = 0kB [ 1466.945164] ORIG_RAX: 0000000000000010 [ 1466.945173] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1466.948614] Total swap = 0kB [ 1466.957432] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1466.957437] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1466.957442] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1466.957446] R13: 00007fff2d7045cf R14: 00007f1402e26300 R15: 0000000000022000 [ 1466.964122] warn_alloc_show_mem: 1 callbacks suppressed [ 1466.964125] Mem-Info: [ 1466.992533] syz-executor.0 invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask= [ 1467.002456] active_anon:74646 inactive_anon:31142 isolated_anon:0 [ 1467.002456] active_file:30 inactive_file:5 isolated_file:0 [ 1467.002456] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1467.002456] slab_reclaimable:13276 slab_unreclaimable:132507 [ 1467.002456] mapped:52245 shmem:31535 pagetables:8792 bounce:0 [ 1467.002456] free:13889 free_pcp:0 free_cma:0 [ 1467.021315] 2097051 pages RAM [ 1467.028929] Node 0 active_anon:280876kB inactive_anon:85168kB active_file:4kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:172576kB dirty:0kB writeback:0kB shmem:86524kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 227328kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1467.056068] (null) [ 1467.062425] Node 1 active_anon:17656kB inactive_anon:39396kB active_file:56kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:36400kB dirty:0kB writeback:0kB shmem:39616kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1467.086559] 0 pages HighMem/MovableOnly [ 1467.096856] Node 0 [ 1467.127497] , order=1, oom_score_adj=0 [ 1467.146876] DMA free:10968kB min:204kB low:252kB high:300kB active_anon:52kB inactive_anon:8kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:52kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1467.173313] 363846 pages reserved [ 1467.242443] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 1467.247576] CPU: 1 PID: 2566 Comm: syz-executor.0 Not tainted 4.14.228-syzkaller #0 [ 1467.255358] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1467.264701] Call Trace: [ 1467.267288] dump_stack+0x1b2/0x281 [ 1467.270935] dump_header+0x178/0x82f [ 1467.274646] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1467.279745] ? ___ratelimit+0x2cd/0x530 [ 1467.283714] oom_kill_process.cold+0x10/0xb18 [ 1467.288215] out_of_memory+0xe3e/0x1190 [ 1467.292189] ? oom_killer_disable+0x1c0/0x1c0 [ 1467.296676] ? mutex_trylock+0x152/0x1a0 [ 1467.300733] __alloc_pages_nodemask+0x23e1/0x2720 [ 1467.305587] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1467.310423] ? console_unlock+0xb43/0xf20 [ 1467.314563] ? netconsole_netdev_event+0x250/0x250 [ 1467.319502] ? mark_held_locks+0xa6/0xf0 [ 1467.323559] ? cache_grow_begin+0x41/0x630 [ 1467.327825] cache_grow_begin+0x91/0x630 [ 1467.331880] ? cache_grow_begin+0x91/0x630 [ 1467.336111] fallback_alloc+0x207/0x2c0 [ 1467.340084] __kmalloc_track_caller+0x20e/0x400 [ 1467.344745] ? ipv4_sysctl_init_net+0x3a/0x320 [ 1467.349320] ? proc_configure_early_demux+0x350/0x350 [ 1467.354507] kmemdup+0x23/0x50 [ 1467.357693] ipv4_sysctl_init_net+0x3a/0x320 [ 1467.362094] ? proc_configure_early_demux+0x350/0x350 [ 1467.367289] ops_init+0xaa/0x3e0 [ 1467.370650] setup_net+0x22f/0x530 [ 1467.374184] ? rtnl_net_dumpid_one+0x240/0x240 [ 1467.378764] ? kmem_cache_alloc+0x35f/0x3c0 [ 1467.383078] copy_net_ns+0x19b/0x440 [ 1467.386796] create_new_namespaces+0x375/0x720 [ 1467.391378] unshare_nsproxy_namespaces+0xa1/0x1d0 [ 1467.396303] SyS_unshare+0x308/0x7f0 [ 1467.400010] ? walk_process_tree+0x2a0/0x2a0 [ 1467.404409] ? task_work_run+0xfd/0x190 [ 1467.408383] ? do_syscall_64+0x4c/0x640 [ 1467.412350] ? walk_process_tree+0x2a0/0x2a0 [ 1467.416752] do_syscall_64+0x1d5/0x640 [ 1467.420638] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1467.425818] RIP: 0033:0x467a07 [ 1467.429002] RSP: 002b:00007ffd6a796858 EFLAGS: 00000202 ORIG_RAX: 0000000000000110 [ 1467.436705] RAX: ffffffffffffffda RBX: 00007ffd6a796e78 RCX: 0000000000467a07 [ 1467.443964] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000040000000 [ 1467.451225] RBP: 00007ffd6a796910 R08: 0000000000000000 R09: 0000000000000000 [ 1467.458484] R10: 0000000000000000 R11: 0000000000000202 R12: 00000000ffffffff [ 1467.465742] R13: 000000000056ca68 R14: 0000000000000000 R15: 00000000000000f8 [ 1467.484639] 0 pages cma reserved [ 1467.490914] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1467.511097] Node 0 DMA32 free:22180kB min:36200kB low:45248kB high:54296kB active_anon:280824kB inactive_anon:85160kB active_file:8kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2788136kB mlocked:0kB kernel_stack:11840kB pagetables:16212kB bounce:0kB free_pcp:1072kB local_pcp:520kB free_cma:0kB [ 1467.555990] Mem-Info: [ 1467.558438] active_anon:74636 inactive_anon:31141 isolated_anon:0 [ 1467.558438] active_file:17 inactive_file:14 isolated_file:32 [ 1467.558438] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1467.558438] slab_reclaimable:13261 slab_unreclaimable:132543 [ 1467.558438] mapped:52225 shmem:31535 pagetables:8766 bounce:0 [ 1467.558438] free:14270 free_pcp:513 free_cma:0 [ 1467.579548] lowmem_reserve[]: 0 0 0 0 0 [ 1467.601394] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1467.619806] Node 0 active_anon:280876kB inactive_anon:85168kB active_file:8kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:172576kB dirty:0kB writeback:0kB shmem:86524kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 227328kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1467.627106] lowmem_reserve[]: 0 0 0 0 0 [ 1467.658773] Node 1 Normal free:27492kB min:53696kB low:67120kB high:80544kB active_anon:17668kB inactive_anon:39396kB active_file:60kB inactive_file:60kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:6336kB pagetables:18800kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1467.666396] Node 1 active_anon:17668kB inactive_anon:39396kB active_file:60kB inactive_file:60kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:36324kB dirty:0kB writeback:0kB shmem:39616kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1467.696802] lowmem_reserve[]: [ 1467.731100] syz-executor.3: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1467.763762] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 1467.768894] CPU: 1 PID: 2555 Comm: syz-executor.3 Not tainted 4.14.228-syzkaller #0 [ 1467.776681] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1467.786027] Call Trace: [ 1467.788618] dump_stack+0x1b2/0x281 [ 1467.792264] warn_alloc.cold+0x96/0x1cc [ 1467.796254] ? zone_watermark_ok_safe+0x220/0x220 [ 1467.801107] __alloc_pages_nodemask+0x2127/0x2720 [ 1467.805963] ? ___preempt_schedule+0x16/0x18 [ 1467.810371] ? lock_acquire+0x170/0x3f0 [ 1467.814348] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1467.819197] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1467.824648] ? __mutex_unlock_slowpath+0x75/0x770 [ 1467.829491] alloc_pages_current+0x155/0x260 [ 1467.833901] ion_page_pool_alloc+0x118/0x1b0 [ 1467.838331] ion_system_heap_allocate+0x133/0x8c0 [ 1467.843172] ? _raw_spin_unlock+0x29/0x40 [ 1467.847315] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1467.852251] ? ion_system_contig_heap_create+0x130/0x130 [ 1467.857745] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1467.859275] 0 [ 1467.862765] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1467.862777] ion_alloc+0x27a/0x810 [ 1467.862792] ? ion_dma_buf_release+0x40/0x40 [ 1467.862804] ? __might_fault+0x177/0x1b0 [ 1467.862816] ion_ioctl+0xea/0x1f0 [ 1467.862826] ? ion_query_heaps+0x360/0x360 [ 1467.862840] ? __tun_chr_ioctl.isra.0+0x3310/0x3310 [ 1467.862852] ? ion_query_heaps+0x360/0x360 [ 1467.898413] do_vfs_ioctl+0x75a/0xff0 [ 1467.902221] ? ioctl_preallocate+0x1a0/0x1a0 [ 1467.906645] ? lock_downgrade+0x740/0x740 [ 1467.910793] ? __fget+0x225/0x360 [ 1467.914244] ? do_vfs_ioctl+0xff0/0xff0 [ 1467.916866] 0 [ 1467.918214] ? security_file_ioctl+0x83/0xb0 [ 1467.918216] 0 0 [ 1467.920007] SyS_ioctl+0x7f/0xb0 [ 1467.929715] ? do_vfs_ioctl+0xff0/0xff0 [ 1467.933687] do_syscall_64+0x1d5/0x640 [ 1467.937575] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1467.942757] RIP: 0033:0x466459 [ 1467.945937] RSP: 002b:00007f6ba9361188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1467.953642] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1467.960904] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1467.968169] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1467.975433] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1467.982698] R13: 00007ffd9352709f R14: 00007f6ba9361300 R15: 0000000000022000 [ 1467.996319] 0 [ 1467.998139] Node 0 DMA: 9*4kB (ME) 8*8kB (ME) 11*16kB (UME) 4*32kB (UM) 3*64kB (UME) 3*128kB (UME) 1*256kB (E) 3*512kB (UME) 2*1024kB (ME) 3*2048kB (ME) 0*4096kB = 10964kB [ 1468.003007] Node 0 DMA free:10964kB min:204kB low:252kB high:300kB active_anon:52kB inactive_anon:8kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:52kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1468.029971] Node 0 [ 1468.055225] syz-executor.2: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1468.059396] lowmem_reserve[]: [ 1468.082408] DMA32: [ 1468.082546] 0 [ 1468.085524] 1777*4kB [ 1468.087748] 2717 [ 1468.089530] (ME) [ 1468.100079] syz-executor.2 cpuset= [ 1468.102493] 2718 [ 1468.104413] 581*8kB [ 1468.106039] 2718 [ 1468.108083] (ME) [ 1468.110388] 2718 [ 1468.117990] / mems_allowed=0-1 [ 1468.125228] Node 0 DMA32 free:18156kB min:36200kB low:45248kB high:54296kB active_anon:280824kB inactive_anon:85160kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:0kB present:3129332kB managed:2788136kB mlocked:0kB kernel_stack:11840kB pagetables:16212kB bounce:0kB free_pcp:8kB local_pcp:4kB free_cma:0kB [ 1468.125599] CPU: 0 PID: 2562 Comm: syz-executor.2 Not tainted 4.14.228-syzkaller #0 [ 1468.156761] lowmem_reserve[]: [ 1468.161795] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1468.161800] Call Trace: [ 1468.161822] dump_stack+0x1b2/0x281 [ 1468.161837] warn_alloc.cold+0x96/0x1cc [ 1468.164919] 0 [ 1468.174272] ? zone_watermark_ok_safe+0x220/0x220 [ 1468.174283] ? usleep_range+0x130/0x130 [ 1468.174294] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1468.176856] 0 [ 1468.180467] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1468.180478] ? run_timer_softirq+0x5a0/0x5a0 [ 1468.180494] __alloc_pages_nodemask+0x2127/0x2720 [ 1468.184437] 0 [ 1468.186232] ? lock_acquire+0x170/0x3f0 [ 1468.191072] 0 [ 1468.195488] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1468.200602] 0 [ 1468.202378] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1468.211764] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1468.211784] alloc_pages_current+0x155/0x260 [ 1468.216604] Node 0 [ 1468.218394] ion_page_pool_alloc+0x118/0x1b0 [ 1468.222384] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1468.224138] ion_system_heap_allocate+0x133/0x8c0 [ 1468.228953] lowmem_reserve[]: [ 1468.230766] ? ion_alloc+0x187/0x810 [ 1468.230777] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1468.230789] ? ion_system_contig_heap_create+0x130/0x130 [ 1468.235259] 0 [ 1468.240691] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1468.240703] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1468.240714] ion_alloc+0x204/0x810 [ 1468.245095] 0 [ 1468.247318] ? ion_dma_buf_release+0x40/0x40 [ 1468.251716] 0 [ 1468.276584] ? __might_fault+0x177/0x1b0 [ 1468.276596] ion_ioctl+0xea/0x1f0 [ 1468.276606] ? ion_query_heaps+0x360/0x360 [ 1468.276623] ? ion_query_heaps+0x360/0x360 [ 1468.281477] Mem-Info: [ 1468.284530] do_vfs_ioctl+0x75a/0xff0 [ 1468.288228] active_anon:74636 inactive_anon:31141 isolated_anon:0 [ 1468.288228] active_file:17 inactive_file:17 isolated_file:0 [ 1468.288228] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1468.288228] slab_reclaimable:13261 slab_unreclaimable:132545 [ 1468.288228] mapped:52225 shmem:31535 pagetables:8766 bounce:0 [ 1468.288228] free:13915 free_pcp:2 free_cma:0 [ 1468.293650] ? ioctl_preallocate+0x1a0/0x1a0 [ 1468.293660] ? lock_downgrade+0x740/0x740 [ 1468.293676] ? __fget+0x225/0x360 [ 1468.299118] 0 [ 1468.300888] ? do_vfs_ioctl+0xff0/0xff0 [ 1468.300901] ? security_file_ioctl+0x83/0xb0 [ 1468.300911] SyS_ioctl+0x7f/0xb0 [ 1468.305902] 0 [ 1468.310728] ? do_vfs_ioctl+0xff0/0xff0 [ 1468.310741] do_syscall_64+0x1d5/0x640 [ 1468.310756] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1468.314291] Node 0 active_anon:280876kB inactive_anon:85168kB active_file:0kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:172576kB dirty:0kB writeback:0kB shmem:86524kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 227328kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1468.316059] RIP: 0033:0x466459 [ 1468.320480] Node 1 active_anon:17668kB inactive_anon:39396kB active_file:68kB inactive_file:64kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:36324kB dirty:0kB writeback:0kB shmem:39616kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1468.322229] RSP: 002b:00007f613992b188 EFLAGS: 00000246 [ 1468.326267] Node 0 [ 1468.329717] ORIG_RAX: 0000000000000010 [ 1468.338145] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1468.338153] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1468.340585] Node 1 [ 1468.344354] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1468.344374] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1468.377624] DMA free:10964kB min:204kB low:252kB high:300kB active_anon:52kB inactive_anon:8kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:52kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1468.381896] R13: 00007fff85f2b35f R14: 00007f613992b300 R15: 0000000000022000 [ 1468.392484] Bluetooth: hci1 command 0x0409 tx timeout [ 1468.410446] lowmem_reserve[]: [ 1468.420286] 112*16kB [ 1468.462096] Normal free:26540kB min:53696kB low:67120kB high:80544kB active_anon:17668kB inactive_anon:39396kB active_file:68kB inactive_file:64kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:6336kB pagetables:18800kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1468.483891] (UME) [ 1468.500574] 0 [ 1468.510386] 144*32kB [ 1468.524718] lowmem_reserve[]: [ 1468.557378] (UME) [ 1468.571264] 2717 [ 1468.604181] 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18156kB [ 1468.616191] 0 0 0 0 0 [ 1468.618710] Node 0 DMA: 9*4kB (ME) 8*8kB (ME) 11*16kB (UME) 4*32kB (UM) 3*64kB (UME) 3*128kB (UME) 1*256kB (E) 3*512kB (UME) 2*1024kB (ME) 3*2048kB (ME) 0*4096kB = 10964kB [ 1468.625838] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1468.647238] 2718 [ 1468.663325] Node 1 [ 1468.663768] 2718 [ 1468.665396] Normal: [ 1468.667616] 2718 [ 1468.669689] 771*4kB [ 1468.685613] Node 0 [ 1468.686523] (UME) [ 1468.687940] DMA32: [ 1468.690160] 48*8kB [ 1468.698641] Node 0 DMA32 free:18156kB min:36200kB low:45248kB high:54296kB active_anon:280824kB inactive_anon:85160kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:0kB present:3129332kB managed:2788136kB mlocked:0kB kernel_stack:11840kB pagetables:16212kB bounce:0kB free_pcp:8kB local_pcp:4kB free_cma:0kB [ 1468.712224] (UME) 30*16kB (UME) 28*32kB (UME) 9*64kB (M) 5*128kB (UM) 4*256kB (UM) 28*512kB (U) 5*1024kB (U) 0*2048kB 0*4096kB = 26540kB [ 1468.749464] 1777*4kB (ME) 582*8kB (UME) 112*16kB (UME) 144*32kB (UME) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18164kB [ 1468.773379] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1468.795600] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1468.805869] Node 0 hugepages_total=1 hugepages_free=1 hugepages_surp=1 hugepages_size=2048kB [ 1468.816691] lowmem_reserve[]: 0 0 0 0 0 [ 1468.827255] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1468.829789] Node 0 [ 1468.848679] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1468.849458] Node 1 [ 1468.854397] 31569 total pagecache pages [ 1468.860451] Normal: 771*4kB (UME) 48*8kB (UME) 30*16kB (UME) 28*32kB (UME) 9*64kB (M) 5*128kB (UM) 4*256kB (UM) 28*512kB (U) 5*1024kB (U) 0*2048kB 0*4096kB = 26540kB [ 1468.869942] 0 pages in swap cache [ 1468.892795] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1468.896368] Swap cache stats: add 0, delete 0, find 0/0 [ 1468.936084] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1468.959014] lowmem_reserve[]: 0 0 0 0 0 [ 1468.963695] Node 0 hugepages_total=1 hugepages_free=1 hugepages_surp=1 hugepages_size=2048kB [ 1468.979723] Node 1 Normal free:142080kB min:53696kB low:67120kB high:80544kB active_anon:17668kB inactive_anon:39396kB active_file:112kB inactive_file:2528kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:6304kB pagetables:18800kB bounce:0kB free_pcp:236kB local_pcp:108kB free_cma:0kB [ 1469.021378] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1469.034618] Free swap = 0kB [ 1469.053390] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1469.062873] 32791 total pagecache pages [ 1469.063830] Total swap = 0kB [ 1469.067515] 0 pages in swap cache [ 1469.069996] 2097051 pages RAM [ 1469.073907] lowmem_reserve[]: [ 1469.077254] Swap cache stats: add 0, delete 0, find 0/0 [ 1469.110475] 0 pages HighMem/MovableOnly [ 1469.110782] 0 [ 1469.114460] 363846 pages reserved [ 1469.114464] 0 pages cma reserved [ 1469.132707] Free swap = 0kB [ 1469.144519] Total swap = 0kB [ 1469.149959] 2097051 pages RAM [ 1469.154005] 0 0 0 0 [ 1469.156364] Node 0 DMA: 9*4kB (ME) 8*8kB (ME) 11*16kB (UME) 4*32kB (UM) 3*64kB (UME) 3*128kB (UME) 1*256kB (E) 3*512kB (UME) 2*1024kB (ME) 3*2048kB (ME) 0*4096kB = 10964kB [ 1469.184092] 0 pages HighMem/MovableOnly [ 1469.188086] 363846 pages reserved [ 1469.200454] 0 pages cma reserved [ 1469.204184] Out of memory (oom_kill_allocating_task): Kill process 2566 (syz-executor.0) score 0 or sacrifice child [ 1469.215627] Node 0 DMA32: 855*4kB (UME) 581*8kB (ME) 1425*16kB (UME) 435*32kB (UME) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 44788kB [ 1469.260661] Killed process 2566 (syz-executor.0) total-vm:93120kB, anon-rss:80kB, file-rss:33540kB, shmem-rss:0kB [ 1469.280952] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1469.299339] oom_reaper: reaped process 22602 (syz-executor.3), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1469.309832] systemd[1]: systemd-journald.service: Failed with result 'signal'. [ 1469.370351] oom_reaper: reaped process 2566 (syz-executor.0), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1469.383068] Node 1 Normal: 23*4kB (UME) 12*8kB (ME) 5*16kB (UME) 6*32kB (UE) 2*64kB (UM) 61*128kB (U) 52*256kB (UM) 67*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 56012kB [ 1469.473942] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1469.484887] oom_reaper: reaped process 2562 (syz-executor.2), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1469.498405] Node 0 hugepages_total=1 hugepages_free=1 hugepages_surp=1 hugepages_size=2048kB [ 1469.507082] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1469.517871] kworker/u4:9 invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=0 [ 1469.519287] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1469.540510] kworker/u4:9 cpuset=/ mems_allowed=0-1 [ 1469.541778] 31742 total pagecache pages [ 1469.545461] CPU: 0 PID: 14266 Comm: kworker/u4:9 Not tainted 4.14.228-syzkaller #0 [ 1469.549418] 0 pages in swap cache [ 1469.557103] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1469.557121] Workqueue: events_unbound call_usermodehelper_exec_work [ 1469.557126] Call Trace: [ 1469.557142] dump_stack+0x1b2/0x281 [ 1469.557154] dump_header+0x178/0x82f [ 1469.560607] Swap cache stats: add 0, delete 0, find 0/0 [ 1469.569943] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1469.576363] Free swap = 0kB [ 1469.578913] ? ___ratelimit+0x2cd/0x530 [ 1469.582522] Total swap = 0kB [ 1469.586209] oom_kill_process.cold+0x10/0xb18 [ 1469.591578] 2097051 pages RAM [ 1469.596644] ? lock_downgrade+0x740/0x740 [ 1469.599635] 0 pages HighMem/MovableOnly [ 1469.603617] out_of_memory+0x2dc/0x1190 [ 1469.603630] ? oom_killer_disable+0x1c0/0x1c0 [ 1469.603639] ? mutex_trylock+0x152/0x1a0 [ 1469.606646] 363846 pages reserved [ 1469.611126] __alloc_pages_nodemask+0x23e1/0x2720 [ 1469.611147] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1469.614230] 0 pages cma reserved [ 1469.651273] ? mark_held_locks+0xa6/0xf0 [ 1469.655347] ? cache_grow_begin+0x41/0x630 [ 1469.659578] cache_grow_begin+0x91/0x630 [ 1469.663645] ? cache_grow_begin+0x91/0x630 [ 1469.667876] fallback_alloc+0x207/0x2c0 [ 1469.671854] kmem_cache_alloc_node+0xe3/0x410 [ 1469.676358] copy_process.part.0+0x17d3/0x71c0 [ 1469.680962] ? __lock_acquire+0x5fc/0x3f20 [ 1469.685189] ? cpuacct_charge+0x1ca/0x350 [ 1469.689334] ? static_obj+0x50/0x50 [ 1469.692949] ? lock_downgrade+0x740/0x740 [ 1469.697115] ? call_usermodehelper_exec_work+0x2a0/0x2a0 [ 1469.702558] ? __cleanup_sighand+0x40/0x40 [ 1469.706784] ? update_curr+0x28d/0x670 [ 1469.710674] ? call_usermodehelper_exec_work+0x2a0/0x2a0 [ 1469.716123] _do_fork+0x184/0xc80 [ 1469.719570] ? fork_idle+0x270/0x270 [ 1469.723275] ? lock_downgrade+0x740/0x740 [ 1469.727411] ? lock_downgrade+0x740/0x740 [ 1469.731550] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1469.736559] ? process_one_work+0x6c4/0x14a0 [ 1469.740958] ? call_usermodehelper_exec_work+0x2a0/0x2a0 [ 1469.747263] kernel_thread+0x2f/0x40 [ 1469.750968] call_usermodehelper_exec_work+0x1ac/0x2a0 [ 1469.756237] ? call_usermodehelper+0x80/0x80 [ 1469.760635] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1469.766078] process_one_work+0x793/0x14a0 [ 1469.770324] ? work_busy+0x320/0x320 [ 1469.774034] ? worker_thread+0x158/0xff0 [ 1469.778085] ? _raw_spin_unlock_irq+0x24/0x80 [ 1469.782587] worker_thread+0x5cc/0xff0 [ 1469.786474] ? rescuer_thread+0xc80/0xc80 [ 1469.790609] kthread+0x30d/0x420 [ 1469.793962] ? kthread_create_on_node+0xd0/0xd0 [ 1469.798620] ret_from_fork+0x24/0x30 [ 1469.810009] syz-executor.2: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1469.824136] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 1469.829267] CPU: 0 PID: 2562 Comm: syz-executor.2 Not tainted 4.14.228-syzkaller #0 [ 1469.835199] syz-executor.3: [ 1469.837048] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1469.837057] page allocation failure: order:0 [ 1469.840064] Call Trace: [ 1469.856420] dump_stack+0x1b2/0x281 [ 1469.860060] warn_alloc.cold+0x96/0x1cc [ 1469.864839] ? zone_watermark_ok_safe+0x220/0x220 [ 1469.869695] __alloc_pages_nodemask+0x2127/0x2720 [ 1469.874544] ? lock_acquire+0x170/0x3f0 [ 1469.877570] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1469.878540] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1469.890986] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1469.896437] ? __mutex_unlock_slowpath+0x75/0x770 [ 1469.898920] syz-executor.3 cpuset= [ 1469.901293] alloc_pages_current+0x155/0x260 [ 1469.901309] ion_page_pool_alloc+0x118/0x1b0 [ 1469.901319] ion_system_heap_allocate+0x133/0x8c0 [ 1469.904842] / [ 1469.909237] ? _raw_spin_unlock+0x29/0x40 [ 1469.924280] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1469.925554] mems_allowed=0-1 [ 1469.929203] ? ion_system_contig_heap_create+0x130/0x130 [ 1469.937745] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1469.942768] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1469.947608] ion_alloc+0x27a/0x810 [ 1469.951144] ? ion_dma_buf_release+0x40/0x40 [ 1469.955551] ? __might_fault+0x177/0x1b0 [ 1469.959611] ion_ioctl+0xea/0x1f0 [ 1469.963056] ? ion_query_heaps+0x360/0x360 [ 1469.967285] ? ion_query_heaps+0x360/0x360 [ 1469.971527] do_vfs_ioctl+0x75a/0xff0 [ 1469.975321] ? ioctl_preallocate+0x1a0/0x1a0 [ 1469.979822] ? lock_downgrade+0x740/0x740 [ 1469.983987] ? __fget+0x225/0x360 [ 1469.987440] ? do_vfs_ioctl+0xff0/0xff0 [ 1469.991409] ? security_file_ioctl+0x83/0xb0 [ 1469.995807] SyS_ioctl+0x7f/0xb0 [ 1469.999160] ? do_vfs_ioctl+0xff0/0xff0 [ 1470.003141] do_syscall_64+0x1d5/0x640 [ 1470.007020] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1470.012199] RIP: 0033:0x466459 [ 1470.015375] RSP: 002b:00007f613992b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1470.023073] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1470.030344] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1470.037692] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1470.044946] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1470.052203] R13: 00007fff85f2b35f R14: 00007f613992b300 R15: 0000000000022000 [ 1470.059490] CPU: 1 PID: 2555 Comm: syz-executor.3 Not tainted 4.14.228-syzkaller #0 [ 1470.062827] warn_alloc_show_mem: 1 callbacks suppressed [ 1470.062830] Mem-Info: [ 1470.067291] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1470.072696] active_anon:74078 inactive_anon:31144 isolated_anon:0 [ 1470.072696] active_file:11 inactive_file:7 isolated_file:1 [ 1470.072696] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1470.072696] slab_reclaimable:13261 slab_unreclaimable:132287 [ 1470.072696] mapped:52218 shmem:31539 pagetables:8706 bounce:0 [ 1470.072696] free:13844 free_pcp:1 free_cma:0 [ 1470.075030] Call Trace: [ 1470.085915] Node 0 active_anon:278736kB inactive_anon:85172kB active_file:0kB inactive_file:20kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:172548kB dirty:0kB writeback:0kB shmem:86532kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 227328kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1470.117632] dump_stack+0x1b2/0x281 [ 1470.117646] warn_alloc.cold+0x96/0x1cc [ 1470.117657] ? zone_watermark_ok_safe+0x220/0x220 [ 1470.117666] ? usleep_range+0x130/0x130 [ 1470.117675] ? try_to_free_pages+0x23f/0x6e0 [ 1470.117685] ? _find_next_bit+0xdb/0x100 [ 1470.117698] ? run_timer_softirq+0x5a0/0x5a0 [ 1470.120292] Node 1 active_anon:17576kB inactive_anon:39404kB active_file:96kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):4kB mapped:36324kB dirty:0kB writeback:0kB shmem:39624kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1470.148036] __alloc_pages_nodemask+0x2127/0x2720 [ 1470.148054] ? lock_acquire+0x170/0x3f0 [ 1470.148074] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1470.148084] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1470.148099] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1470.148117] alloc_pages_current+0x155/0x260 [ 1470.148128] ion_page_pool_alloc+0x118/0x1b0 [ 1470.148138] ion_system_heap_allocate+0x133/0x8c0 [ 1470.148150] ? _raw_spin_unlock+0x29/0x40 [ 1470.148158] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1470.148167] ? ion_system_contig_heap_create+0x130/0x130 [ 1470.148176] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1470.148186] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1470.148197] ion_alloc+0x27a/0x810 [ 1470.151847] Node 0 [ 1470.155777] ? ion_dma_buf_release+0x40/0x40 [ 1470.160633] Mem-Info: [ 1470.164553] ? __might_fault+0x177/0x1b0 [ 1470.168942] active_anon:74078 inactive_anon:31144 isolated_anon:0 [ 1470.168942] active_file:11 inactive_file:7 isolated_file:1 [ 1470.168942] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1470.168942] slab_reclaimable:13261 slab_unreclaimable:132287 [ 1470.168942] mapped:52218 shmem:31539 pagetables:8706 bounce:0 [ 1470.168942] free:13844 free_pcp:1 free_cma:0 [ 1470.172979] ion_ioctl+0xea/0x1f0 [ 1470.172989] ? ion_query_heaps+0x360/0x360 [ 1470.173003] ? __tun_chr_ioctl.isra.0+0x3310/0x3310 [ 1470.173013] ? ion_query_heaps+0x360/0x360 [ 1470.177424] DMA free:10964kB min:204kB low:252kB high:300kB active_anon:52kB inactive_anon:8kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:52kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1470.204550] do_vfs_ioctl+0x75a/0xff0 [ 1470.204564] ? ioctl_preallocate+0x1a0/0x1a0 [ 1470.204573] ? lock_downgrade+0x740/0x740 [ 1470.204585] ? __fget+0x225/0x360 [ 1470.204593] ? do_vfs_ioctl+0xff0/0xff0 [ 1470.204604] ? security_file_ioctl+0x83/0xb0 [ 1470.204614] SyS_ioctl+0x7f/0xb0 [ 1470.204621] ? do_vfs_ioctl+0xff0/0xff0 [ 1470.204631] do_syscall_64+0x1d5/0x640 [ 1470.204645] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1470.204657] RIP: 0033:0x466459 [ 1470.209843] Node 0 active_anon:278736kB inactive_anon:85172kB active_file:0kB inactive_file:20kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:172548kB dirty:0kB writeback:0kB shmem:86532kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 227328kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1470.213440] RSP: 002b:00007f6ba9361188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1470.213451] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1470.213456] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1470.213461] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1470.213466] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1470.213471] R13: 00007ffd9352709f R14: 00007f6ba9361300 R15: 0000000000022000 [ 1470.220456] syz-executor.1: [ 1470.222920] Node 1 active_anon:17576kB inactive_anon:39404kB active_file:96kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):4kB mapped:36324kB dirty:0kB writeback:0kB shmem:39624kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1470.228297] page allocation failure: order:0 [ 1470.232740] lowmem_reserve[]: [ 1470.255607] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1470.256509] Node 0 [ 1470.261709] (null) [ 1470.266661] DMA free:10964kB min:204kB low:252kB high:300kB active_anon:52kB inactive_anon:8kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:52kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1470.270113] syz-executor.1 cpuset= [ 1470.272346] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1470.272370] Node 0 DMA32 free:17940kB min:36200kB low:45248kB high:54296kB active_anon:278680kB inactive_anon:85164kB active_file:20kB inactive_file:20kB unevictable:0kB writepending:0kB present:3129332kB managed:2788136kB mlocked:0kB kernel_stack:11840kB pagetables:16212kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB [ 1470.272387] lowmem_reserve[]: 0 0 [ 1470.279891] / [ 1470.283287] 0 [ 1470.319496] mems_allowed=0-1 [ 1470.319830] 0 [ 1470.324062] CPU: 1 PID: 2552 Comm: syz-executor.1 Not tainted 4.14.228-syzkaller #0 [ 1470.324075] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1470.329796] 0 [ 1470.333285] Call Trace: [ 1470.333306] dump_stack+0x1b2/0x281 [ 1470.333320] warn_alloc.cold+0x96/0x1cc [ 1470.333331] ? zone_watermark_ok_safe+0x220/0x220 [ 1470.333341] ? usleep_range+0x130/0x130 [ 1470.333350] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1470.333364] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1470.361405] 2717 [ 1470.362918] ? run_timer_softirq+0x5a0/0x5a0 [ 1470.367294] 2718 [ 1470.371450] __alloc_pages_nodemask+0x2127/0x2720 [ 1470.371469] ? lock_acquire+0x170/0x3f0 [ 1470.371484] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1470.374930] 0 [ 1470.378886] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1470.385499] 2718 [ 1470.386625] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1470.390613] 2718 [ 1470.394463] alloc_pages_current+0x155/0x260 [ 1470.402798] ion_page_pool_alloc+0x118/0x1b0 [ 1470.402809] ion_system_heap_allocate+0x133/0x8c0 [ 1470.402821] ? _raw_spin_unlock+0x29/0x40 [ 1470.402829] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1470.402837] ? ion_system_contig_heap_create+0x130/0x130 [ 1470.402847] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1470.402858] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1470.402869] ion_alloc+0x27a/0x810 [ 1470.438328] ? ion_dma_buf_release+0x40/0x40 [ 1470.445627] Node 0 [ 1470.452849] ? __might_fault+0x177/0x1b0 [ 1470.452863] ion_ioctl+0xea/0x1f0 [ 1470.452873] ? ion_query_heaps+0x360/0x360 [ 1470.452886] ? __tun_chr_ioctl.isra.0+0x3310/0x3310 [ 1470.452893] ? ion_query_heaps+0x360/0x360 [ 1470.452904] do_vfs_ioctl+0x75a/0xff0 [ 1470.452915] ? ioctl_preallocate+0x1a0/0x1a0 [ 1470.460461] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1470.467429] ? lock_downgrade+0x740/0x740 [ 1470.476817] lowmem_reserve[]: [ 1470.477685] ? __fget+0x225/0x360 [ 1470.507039] Node 0 [ 1470.509217] ? do_vfs_ioctl+0xff0/0xff0 [ 1470.512348] DMA32 free:17940kB min:36200kB low:45248kB high:54296kB active_anon:278680kB inactive_anon:85164kB active_file:20kB inactive_file:20kB unevictable:0kB writepending:0kB present:3129332kB managed:2788136kB mlocked:0kB kernel_stack:11840kB pagetables:16212kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB [ 1470.519397] ? security_file_ioctl+0x83/0xb0 [ 1470.523737] lowmem_reserve[]: [ 1470.549489] SyS_ioctl+0x7f/0xb0 [ 1470.549499] ? do_vfs_ioctl+0xff0/0xff0 [ 1470.549510] do_syscall_64+0x1d5/0x640 [ 1470.549524] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1470.549532] RIP: 0033:0x466459 [ 1470.549536] RSP: 002b:00007f1402e26188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1470.549544] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1470.549548] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1470.549553] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1470.549558] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1470.549563] R13: 00007fff2d7045cf R14: 00007f1402e26300 R15: 0000000000022000 [ 1470.716686] systemd[1]: systemd-journald.service: Service has no hold-off time, scheduling restart. [ 1470.720923] Bluetooth: hci1 command 0x041b tx timeout [ 1470.721379] 0 [ 1470.793624] systemd[1]: Stopped Journal Service. [ 1470.795239] 0 [ 1470.908107] systemd[1]: Starting Journal Service... [ 1470.925358] 0 [ 1470.936653] 0 0 0 [ 1470.941218] 0 0 0 0 [ 1470.943561] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1470.969790] Node 1 Normal free:68080kB min:53696kB low:67120kB high:80544kB active_anon:17528kB inactive_anon:39404kB active_file:2056kB inactive_file:2132kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:6400kB pagetables:18700kB bounce:0kB free_pcp:848kB local_pcp:212kB free_cma:0kB [ 1471.000132] lowmem_reserve[]: 0 0 0 0 0 [ 1471.005167] lowmem_reserve[]: 0 0 0 0 0 [ 1471.009169] Node 0 DMA: 9*4kB (ME) 8*8kB (ME) 11*16kB (UME) 4*32kB (UM) 2*64kB (ME) 2*128kB (ME) 2*256kB (UE) 3*512kB (UME) 2*1024kB (ME) 3*2048kB (ME) 0*4096kB = 11028kB [ 1471.024723] Node 1 Normal free:53308kB min:53696kB low:67120kB high:80544kB active_anon:17528kB inactive_anon:39404kB active_file:2056kB inactive_file:2132kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:6400kB pagetables:18700kB bounce:0kB free_pcp:816kB local_pcp:180kB free_cma:0kB [ 1471.080510] Node 0 DMA32: 1777*4kB (UME) 1201*8kB (UME) 114*16kB (UME) 136*32kB (UME) 0*64kB 0*128kB 0*256kB 0*512kB 5*1024kB (U) 0*2048kB 0*4096kB = 28012kB [ 1471.118187] lowmem_reserve[]: 0 0 0 0 0 [ 1471.126629] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1471.137548] Node 0 DMA: 9*4kB (ME) 8*8kB (ME) 11*16kB (UME) 4*32kB (UM) 2*64kB (ME) 2*128kB (ME) 2*256kB (UE) 3*512kB (UME) 2*1024kB (ME) 3*2048kB (ME) 0*4096kB = 11028kB [ 1471.165065] systemd[1]: Starting Load/Save RF Kill Switch Status... [ 1471.172238] Node 0 DMA32: 2981*4kB (UMEH) 1199*8kB (UME) 116*16kB (UME) 363*32kB (UME) 8*64kB (U) 0*128kB 0*256kB 0*512kB 5*1024kB (U) 0*2048kB 0*4096kB = 40620kB [ 1471.187497] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1471.216904] Node 1 Normal: 17*4kB (ME) 11*8kB (UME) 5*16kB (UME) 7*32kB (UME) 1262*64kB (UM) 488*128kB (UM) 75*256kB (UM) 63*512kB (U) 64*1024kB (U) 0*2048kB 0*4096kB = 260684kB [ 1471.221338] Node 1 [ 1471.238522] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1471.258975] Node 0 hugepages_total=1 hugepages_free=1 hugepages_surp=1 hugepages_size=2048kB [ 1471.270472] Normal: 18*4kB (UME) 11*8kB (UME) 4*16kB (ME) 6*32kB (UE) 926*64kB (U) 485*128kB (U) 73*256kB (U) 63*512kB (U) 64*1024kB (UM) 0*2048kB 0*4096kB = 238240kB [ 1471.278102] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1471.296663] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1471.320661] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1471.320996] Node 0 hugepages_total=1 hugepages_free=1 hugepages_surp=1 hugepages_size=2048kB [ 1471.329266] 32964 total pagecache pages [ 1471.329278] 0 pages in swap cache [ 1471.329283] Swap cache stats: add 0, delete 0, find 0/0 [ 1471.329286] Free swap = 0kB [ 1471.329289] Total swap = 0kB [ 1471.329296] 2097051 pages RAM [ 1471.329299] 0 pages HighMem/MovableOnly [ 1471.329302] 363846 pages reserved [ 1471.329304] 0 pages cma reserved [ 1471.413886] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1471.424595] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1471.433947] 33186 total pagecache pages [ 1471.438555] 0 pages in swap cache [ 1471.448901] Swap cache stats: add 0, delete 0, find 0/0 [ 1471.455462] Free swap = 0kB [ 1471.459454] Total swap = 0kB [ 1471.463659] 2097051 pages RAM [ 1471.467716] 0 pages HighMem/MovableOnly [ 1471.472560] 363846 pages reserved [ 1471.476119] 0 pages cma reserved [ 1471.480964] Out of memory: Kill process 10211 (syz-executor.3) score 1005 or sacrifice child [ 1471.499845] Killed process 10211 (syz-executor.3) total-vm:93252kB, anon-rss:2192kB, file-rss:34628kB, shmem-rss:0kB 20:23:25 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r1, 0x800454cf, &(0x7f0000000240)) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000180)={0x80000000, 0xa}) 20:23:25 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r1, 0x800454cf, &(0x7f0000000240)) ioctl$TUNSETSNDBUF(r1, 0x400454d4, &(0x7f0000000040)=0x1000) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000080)={'lo\x00', @broadcast}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000180)={0x80000000, 0xa}) openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) 20:23:25 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r1, 0x800454cf, &(0x7f0000000240)) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r2, 0x800454cf, &(0x7f0000000240)) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000080)={'lo\x00', @broadcast}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000180)={0x80000000, 0xa}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x4000, 0x0) ioctl$TUNSETPERSIST(r4, 0x400454cb, 0x1) ioctl$TUNGETFEATURES(r3, 0x800454cf, &(0x7f0000000240)) ioctl$TUNSETOWNER(r3, 0x400454cc, 0xffffffffffffffff) [ 1471.738556] syz-executor.1: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1471.780879] systemd[1]: Started Load/Save RF Kill Switch Status. [ 1471.784615] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 1471.817670] CPU: 0 PID: 2605 Comm: syz-executor.1 Not tainted 4.14.228-syzkaller #0 [ 1471.825502] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1471.834860] Call Trace: [ 1471.837455] dump_stack+0x1b2/0x281 [ 1471.841093] warn_alloc.cold+0x96/0x1cc [ 1471.845074] ? zone_watermark_ok_safe+0x220/0x220 [ 1471.849939] __alloc_pages_nodemask+0x2127/0x2720 [ 1471.854786] ? __schedule+0x893/0x1de0 [ 1471.858699] ? lock_acquire+0x170/0x3f0 [ 1471.862680] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1471.867320] syz-executor.3: [ 1471.867530] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1471.867544] ? __mutex_unlock_slowpath+0x75/0x770 [ 1471.867560] alloc_pages_current+0x155/0x260 [ 1471.870725] page allocation failure: order:4 [ 1471.876012] ion_page_pool_alloc+0x118/0x1b0 [ 1471.876023] ion_system_heap_allocate+0x133/0x8c0 [ 1471.876034] ? ion_alloc+0x187/0x810 [ 1471.876045] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1471.876056] ? ion_system_contig_heap_create+0x130/0x130 [ 1471.881033] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1471.885287] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1471.885301] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1471.885313] ion_alloc+0x204/0x810 [ 1471.885326] ? ion_dma_buf_release+0x40/0x40 [ 1471.885339] ? __might_fault+0x177/0x1b0 [ 1471.889879] (null) [ 1471.894132] ion_ioctl+0xea/0x1f0 [ 1471.894142] ? ion_query_heaps+0x360/0x360 [ 1471.894156] ? __tun_chr_ioctl.isra.0+0x3310/0x3310 [ 1471.894164] ? ion_query_heaps+0x360/0x360 [ 1471.894175] do_vfs_ioctl+0x75a/0xff0 [ 1471.894187] ? ioctl_preallocate+0x1a0/0x1a0 [ 1471.894200] ? lock_downgrade+0x740/0x740 [ 1471.899188] syz-executor.3 cpuset= [ 1471.902743] ? __fget+0x225/0x360 [ 1471.902754] ? do_vfs_ioctl+0xff0/0xff0 [ 1471.902766] ? security_file_ioctl+0x83/0xb0 [ 1471.902776] SyS_ioctl+0x7f/0xb0 [ 1471.902785] ? do_vfs_ioctl+0xff0/0xff0 [ 1471.902796] do_syscall_64+0x1d5/0x640 [ 1471.902811] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1471.908374] / [ 1471.913674] RIP: 0033:0x466459 [ 1471.921017] mems_allowed=0-1 [ 1471.925751] RSP: 002b:00007f1402e26188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1471.925762] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1471.925768] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1471.925773] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1471.925779] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1471.925785] R13: 00007fff2d7045cf R14: 00007f1402e26300 R15: 0000000000022000 [ 1472.059213] CPU: 1 PID: 2607 Comm: syz-executor.3 Not tainted 4.14.228-syzkaller #0 [ 1472.067017] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1472.069540] systemd-journald[2595]: File /run/log/journal/04d8c135ee6b410280ba31a58c89679d/system.journal corrupted or uncleanly shut down, renaming and replacing. [ 1472.076363] Call Trace: [ 1472.076388] dump_stack+0x1b2/0x281 [ 1472.076403] warn_alloc.cold+0x96/0x1cc [ 1472.076415] ? zone_watermark_ok_safe+0x220/0x220 [ 1472.076436] __alloc_pages_nodemask+0x2127/0x2720 [ 1472.076448] ? check_preemption_disabled+0x35/0x240 [ 1472.076462] ? lock_acquire+0x170/0x3f0 [ 1472.119996] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1472.124849] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1472.130300] ? __mutex_unlock_slowpath+0x75/0x770 [ 1472.135144] ? alloc_pages_current+0x84/0x260 [ 1472.139639] alloc_pages_current+0x155/0x260 [ 1472.144050] ion_page_pool_alloc+0x118/0x1b0 [ 1472.148463] ion_system_heap_allocate+0x133/0x8c0 [ 1472.153312] ? ion_alloc+0x187/0x810 [ 1472.157022] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1472.162473] ? ion_system_contig_heap_create+0x130/0x130 [ 1472.167945] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1472.172969] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1472.177813] ion_alloc+0x204/0x810 [ 1472.181357] ? ion_dma_buf_release+0x40/0x40 [ 1472.185767] ? __might_fault+0x177/0x1b0 [ 1472.189827] ion_ioctl+0xea/0x1f0 [ 1472.193273] ? ion_query_heaps+0x360/0x360 [ 1472.197509] ? __tun_chr_ioctl.isra.0+0x3310/0x3310 [ 1472.202524] ? ion_query_heaps+0x360/0x360 [ 1472.206757] do_vfs_ioctl+0x75a/0xff0 [ 1472.210565] ? ioctl_preallocate+0x1a0/0x1a0 [ 1472.214985] ? lock_downgrade+0x740/0x740 [ 1472.219141] ? __fget+0x225/0x360 [ 1472.222593] ? do_vfs_ioctl+0xff0/0xff0 [ 1472.226573] ? security_file_ioctl+0x83/0xb0 [ 1472.230991] SyS_ioctl+0x7f/0xb0 [ 1472.234362] ? do_vfs_ioctl+0xff0/0xff0 [ 1472.238344] do_syscall_64+0x1d5/0x640 [ 1472.242236] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1472.247420] RIP: 0033:0x466459 [ 1472.250631] RSP: 002b:00007f6ba9361188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1472.258341] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1472.265616] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1472.272886] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1472.280162] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1472.287432] R13: 00007ffd9352709f R14: 00007f6ba9361300 R15: 0000000000022000 [ 1472.440504] warn_alloc_show_mem: 2 callbacks suppressed [ 1472.440509] Mem-Info: [ 1472.448309] active_anon:74307 inactive_anon:33168 isolated_anon:0 [ 1472.448309] active_file:1461 inactive_file:1328 isolated_file:32 [ 1472.448309] unevictable:0 dirty:6 writeback:25 unstable:0 [ 1472.448309] slab_reclaimable:13347 slab_unreclaimable:131792 [ 1472.448309] mapped:54888 shmem:33564 pagetables:8739 bounce:0 [ 1472.448309] free:27855 free_pcp:366 free_cma:0 [ 1472.590464] Node 0 active_anon:278944kB inactive_anon:93260kB active_file:216kB inactive_file:12kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:173808kB dirty:0kB writeback:0kB shmem:94624kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 225280kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1472.691971] Node 1 active_anon:18284kB inactive_anon:39412kB active_file:4260kB inactive_file:4264kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:44244kB dirty:24kB writeback:100kB shmem:39632kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1472.770478] Bluetooth: hci1 command 0x040f tx timeout [ 1472.783506] Node 0 DMA free:11060kB min:204kB low:252kB high:300kB active_anon:52kB inactive_anon:8kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:52kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1472.880473] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1472.885545] Node 0 DMA32 free:35492kB min:36200kB low:45248kB high:54296kB active_anon:278892kB inactive_anon:93252kB active_file:216kB inactive_file:12kB unevictable:0kB writepending:0kB present:3129332kB managed:2788136kB mlocked:0kB kernel_stack:11712kB pagetables:15748kB bounce:0kB free_pcp:204kB local_pcp:16kB free_cma:0kB [ 1473.000497] lowmem_reserve[]: 0 0 0 0 0 [ 1473.004537] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1473.137412] lowmem_reserve[]: 0 0 0 0 0 [ 1473.141515] Node 1 Normal free:54196kB min:53696kB low:67120kB high:80544kB active_anon:18344kB inactive_anon:39352kB active_file:3004kB inactive_file:3004kB unevictable:0kB writepending:44kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:6432kB pagetables:19156kB bounce:0kB free_pcp:120kB local_pcp:120kB free_cma:0kB [ 1473.273520] lowmem_reserve[]: 0 0 0 0 0 [ 1473.277569] Node 0 DMA: 9*4kB (ME) 9*8kB (UME) 7*16kB (ME) 3*32kB (M) 4*64kB (UME) 2*128kB (ME) 2*256kB (UE) 3*512kB (UME) 2*1024kB (ME) 3*2048kB (ME) 0*4096kB = 11068kB [ 1473.352597] Node 0 DMA32: 147*4kB (UMEH) 334*8kB (ME) 89*16kB (UE) 10*32kB (UE) 10*64kB (MH) 3*128kB (UH) 63*256kB (U) 16*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 30348kB [ 1473.414779] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1473.460890] Node 1 Normal: 264*4kB (UME) 166*8kB (ME) 102*16kB (ME) 65*32kB (ME) 77*64kB (UM) 222*128kB (UM) 57*256kB (UM) 52*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 80656kB [ 1473.513133] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1473.559300] Node 0 hugepages_total=1 hugepages_free=1 hugepages_surp=1 hugepages_size=2048kB [ 1473.585427] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1473.610917] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1473.619517] 33922 total pagecache pages [ 1473.627305] 0 pages in swap cache [ 1473.630834] Swap cache stats: add 0, delete 0, find 0/0 [ 1473.636219] Free swap = 0kB [ 1473.639231] Total swap = 0kB [ 1473.645521] 2097051 pages RAM [ 1473.648630] 0 pages HighMem/MovableOnly [ 1473.663674] 363846 pages reserved [ 1473.667140] 0 pages cma reserved [ 1473.956737] oom_reaper: reaped process 2605 (syz-executor.1), now anon-rss:0kB, file-rss:4kB, shmem-rss:0kB [ 1474.003802] oom_reaper: reaped process 2607 (syz-executor.3), now anon-rss:0kB, file-rss:4kB, shmem-rss:0kB [ 1474.065970] syz-executor.1 invoked oom-killer: gfp_mask=0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null), order=0, oom_score_adj=1000 [ 1474.100666] syz-executor.5: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1474.105975] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 1474.119740] CPU: 1 PID: 2605 Comm: syz-executor.1 Not tainted 4.14.228-syzkaller #0 [ 1474.127535] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1474.136880] Call Trace: [ 1474.139469] dump_stack+0x1b2/0x281 [ 1474.143098] dump_header+0x178/0x82f [ 1474.144068] syz-executor.5 cpuset= [ 1474.146808] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1474.146810] / [ 1474.150343] ? ___ratelimit+0x2cd/0x530 [ 1474.161096] oom_kill_process.cold+0x10/0xb18 [ 1474.165633] out_of_memory+0xe3e/0x1190 [ 1474.169612] ? oom_killer_disable+0x1c0/0x1c0 [ 1474.174106] ? mutex_trylock+0x152/0x1a0 [ 1474.178169] __alloc_pages_nodemask+0x23e1/0x2720 [ 1474.183020] ? lock_acquire+0x170/0x3f0 [ 1474.186998] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1474.191837] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1474.196338] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1474.201797] alloc_pages_current+0x155/0x260 [ 1474.206204] ion_page_pool_alloc+0x118/0x1b0 [ 1474.210610] ion_system_heap_allocate+0x133/0x8c0 [ 1474.215469] ? ion_alloc+0x187/0x810 [ 1474.219181] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1474.224630] ? ion_system_contig_heap_create+0x130/0x130 [ 1474.230075] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1474.235088] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1474.239941] ion_alloc+0x204/0x810 [ 1474.243487] ? ion_dma_buf_release+0x40/0x40 [ 1474.247898] ? __might_fault+0x177/0x1b0 [ 1474.251960] ion_ioctl+0xea/0x1f0 [ 1474.254657] mems_allowed=0-1 [ 1474.255428] ? ion_query_heaps+0x360/0x360 [ 1474.262743] ? __tun_chr_ioctl.isra.0+0x3310/0x3310 [ 1474.267754] ? ion_query_heaps+0x360/0x360 [ 1474.271990] do_vfs_ioctl+0x75a/0xff0 [ 1474.275787] ? ioctl_preallocate+0x1a0/0x1a0 [ 1474.280190] ? lock_downgrade+0x740/0x740 [ 1474.284338] ? __fget+0x225/0x360 [ 1474.287791] ? do_vfs_ioctl+0xff0/0xff0 [ 1474.291767] ? security_file_ioctl+0x83/0xb0 [ 1474.296170] SyS_ioctl+0x7f/0xb0 [ 1474.299524] ? do_vfs_ioctl+0xff0/0xff0 [ 1474.303509] do_syscall_64+0x1d5/0x640 [ 1474.307426] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1474.312609] RIP: 0033:0x466459 [ 1474.315811] RSP: 002b:00007f1402e26188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1474.323526] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1474.330794] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1474.338064] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1474.345340] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1474.352602] R13: 00007fff2d7045cf R14: 00007f1402e26300 R15: 0000000000022000 [ 1474.379897] CPU: 0 PID: 2603 Comm: syz-executor.5 Not tainted 4.14.228-syzkaller #0 [ 1474.387706] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1474.390827] Mem-Info: [ 1474.397058] Call Trace: [ 1474.399471] active_anon:74278 inactive_anon:33176 isolated_anon:0 [ 1474.399471] active_file:20 inactive_file:20 isolated_file:0 [ 1474.399471] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1474.399471] slab_reclaimable:13349 slab_unreclaimable:133032 [ 1474.399471] mapped:52613 shmem:33587 pagetables:8741 bounce:0 [ 1474.399471] free:13869 free_pcp:0 free_cma:0 [ 1474.402049] dump_stack+0x1b2/0x281 [ 1474.402064] warn_alloc.cold+0x96/0x1cc [ 1474.402092] ? zone_watermark_ok_safe+0x220/0x220 [ 1474.435283] Node 0 active_anon:278880kB inactive_anon:93352kB active_file:24kB inactive_file:28kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:174096kB dirty:0kB writeback:0kB shmem:94716kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 225280kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1474.438852] __alloc_pages_nodemask+0x2127/0x2720 [ 1474.442821] Node 1 active_anon:18232kB inactive_anon:39352kB active_file:56kB inactive_file:52kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:36356kB dirty:0kB writeback:0kB shmem:39632kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1474.447609] ? io_schedule_timeout+0x140/0x140 [ 1474.475479] Node 0 [ 1474.480273] ? lock_acquire+0x170/0x3f0 [ 1474.507466] DMA free:10972kB min:204kB low:252kB high:300kB active_anon:52kB inactive_anon:8kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:52kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1474.511982] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1474.512002] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1474.514209] lowmem_reserve[]: [ 1474.518167] ? __mutex_unlock_slowpath+0x75/0x770 [ 1474.543953] 0 [ 1474.548752] ? alloc_pages_current+0xe3/0x260 [ 1474.554183] 2717 [ 1474.557257] alloc_pages_current+0x155/0x260 [ 1474.562111] 2718 [ 1474.563884] ion_page_pool_alloc+0x118/0x1b0 [ 1474.568362] 2718 [ 1474.570413] ion_system_heap_allocate+0x133/0x8c0 [ 1474.570423] ? ion_alloc+0x187/0x810 [ 1474.570433] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1474.570444] ? ion_system_contig_heap_create+0x130/0x130 [ 1474.574832] 2718 [ 1474.576883] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1474.583314] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1474.588139] Node 0 [ 1474.591850] ion_alloc+0x204/0x810 [ 1474.591865] ? ion_dma_buf_release+0x40/0x40 [ 1474.591877] ? __might_fault+0x177/0x1b0 [ 1474.597322] DMA32 free:18092kB min:36200kB low:45248kB high:54296kB active_anon:278828kB inactive_anon:93344kB active_file:24kB inactive_file:28kB unevictable:0kB writepending:0kB present:3129332kB managed:2788136kB mlocked:0kB kernel_stack:11680kB pagetables:15756kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1474.602759] ion_ioctl+0xea/0x1f0 [ 1474.602769] ? ion_query_heaps+0x360/0x360 [ 1474.602786] ? __tun_chr_ioctl.isra.0+0x3310/0x3310 [ 1474.604825] lowmem_reserve[]: [ 1474.609841] ? ion_query_heaps+0x360/0x360 [ 1474.609852] do_vfs_ioctl+0x75a/0xff0 [ 1474.614716] 0 [ 1474.616904] ? ioctl_preallocate+0x1a0/0x1a0 [ 1474.620439] 0 [ 1474.624831] ? lock_downgrade+0x740/0x740 [ 1474.624845] ? __fget+0x225/0x360 [ 1474.628878] 0 [ 1474.657065] ? do_vfs_ioctl+0xff0/0xff0 [ 1474.657077] ? security_file_ioctl+0x83/0xb0 [ 1474.657086] SyS_ioctl+0x7f/0xb0 [ 1474.657094] ? do_vfs_ioctl+0xff0/0xff0 [ 1474.657109] do_syscall_64+0x1d5/0x640 [ 1474.660568] 0 [ 1474.664772] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1474.669750] 0 [ 1474.672858] RIP: 0033:0x466459 [ 1474.672863] RSP: 002b:00007f2761281188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1474.672873] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1474.672880] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1474.672888] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1474.677105] Node 0 [ 1474.680889] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1474.680895] R13: 00007ffddf757caf R14: 00007f2761281300 R15: 0000000000022000 [ 1474.687494] syz-executor.3: [ 1474.689004] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1474.693081] syz-executor.2: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1474.693102] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 1474.693123] CPU: 0 PID: 2562 Comm: syz-executor.2 Not tainted 4.14.228-syzkaller #0 [ 1474.693128] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1474.693132] Call Trace: [ 1474.693148] dump_stack+0x1b2/0x281 [ 1474.693161] warn_alloc.cold+0x96/0x1cc [ 1474.693173] ? zone_watermark_ok_safe+0x220/0x220 [ 1474.693183] ? usleep_range+0x130/0x130 [ 1474.693192] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1474.693204] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1474.693213] ? run_timer_softirq+0x5a0/0x5a0 [ 1474.693228] __alloc_pages_nodemask+0x2127/0x2720 [ 1474.693244] ? lock_acquire+0x170/0x3f0 [ 1474.693259] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1474.693268] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1474.693283] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1474.693302] alloc_pages_current+0x155/0x260 [ 1474.693312] ion_page_pool_alloc+0x118/0x1b0 [ 1474.693323] ion_system_heap_allocate+0x133/0x8c0 [ 1474.693334] ? _raw_spin_unlock+0x29/0x40 [ 1474.693342] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1474.693351] ? ion_system_contig_heap_create+0x130/0x130 [ 1474.693361] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1474.693371] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1474.693382] ion_alloc+0x27a/0x810 [ 1474.693394] ? ion_dma_buf_release+0x40/0x40 [ 1474.693406] ? __might_fault+0x177/0x1b0 [ 1474.693418] ion_ioctl+0xea/0x1f0 [ 1474.693428] ? ion_query_heaps+0x360/0x360 [ 1474.731666] warn_alloc_show_mem: 1 callbacks suppressed [ 1474.731670] Mem-Info: [ 1474.737787] ? ion_query_heaps+0x360/0x360 [ 1474.750442] lowmem_reserve[]: [ 1474.752300] do_vfs_ioctl+0x75a/0xff0 [ 1474.759545] 0 [ 1474.761776] ? ioctl_preallocate+0x1a0/0x1a0 [ 1474.761786] ? lock_downgrade+0x740/0x740 [ 1474.761800] ? __fget+0x225/0x360 [ 1474.769943] active_anon:74278 inactive_anon:33176 isolated_anon:0 [ 1474.769943] active_file:20 inactive_file:20 isolated_file:0 [ 1474.769943] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1474.769943] slab_reclaimable:13349 slab_unreclaimable:133032 [ 1474.769943] mapped:52613 shmem:33587 pagetables:8741 bounce:0 [ 1474.769943] free:13869 free_pcp:0 free_cma:0 [ 1474.776314] ? do_vfs_ioctl+0xff0/0xff0 [ 1474.776327] ? security_file_ioctl+0x83/0xb0 [ 1474.776337] SyS_ioctl+0x7f/0xb0 [ 1474.776347] ? do_vfs_ioctl+0xff0/0xff0 [ 1474.779352] 0 [ 1474.804242] do_syscall_64+0x1d5/0x640 [ 1474.804259] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1474.804267] RIP: 0033:0x466459 [ 1474.804272] RSP: 002b:00007f613992b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1474.804286] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1474.816132] Node 0 active_anon:278880kB inactive_anon:93352kB active_file:24kB inactive_file:28kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:174096kB dirty:0kB writeback:0kB shmem:94716kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 225280kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1474.821160] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1474.821165] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1474.821171] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1474.821176] R13: 00007fff85f2b35f R14: 00007f613992b300 R15: 0000000000022000 [ 1474.828030] page allocation failure: order:0 [ 1474.865110] Node 1 active_anon:18232kB inactive_anon:39352kB active_file:56kB inactive_file:52kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:36356kB dirty:0kB writeback:0kB shmem:39632kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1474.874020] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1474.905779] Node 0 [ 1474.915910] (null) [ 1474.947412] DMA free:10972kB min:204kB low:252kB high:300kB active_anon:52kB inactive_anon:8kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:52kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1475.203870] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 1475.231202] CPU: 0 PID: 2607 Comm: syz-executor.3 Not tainted 4.14.228-syzkaller #0 [ 1475.231789] 0 [ 1475.238997] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1475.239004] 0 [ 1475.240782] Call Trace: [ 1475.240801] dump_stack+0x1b2/0x281 [ 1475.240815] warn_alloc.cold+0x96/0x1cc [ 1475.240826] ? zone_watermark_ok_safe+0x220/0x220 [ 1475.240836] ? usleep_range+0x130/0x130 [ 1475.240845] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1475.240858] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1475.240869] ? run_timer_softirq+0x5a0/0x5a0 [ 1475.240884] __alloc_pages_nodemask+0x2127/0x2720 [ 1475.270445] 0 [ 1475.270999] ? lock_acquire+0x170/0x3f0 [ 1475.281081] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1475.281092] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1475.281111] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1475.300447] Node 1 [ 1475.300955] alloc_pages_current+0x155/0x260 [ 1475.305431] Normal free:122652kB min:53696kB low:67120kB high:80544kB active_anon:18228kB inactive_anon:39352kB active_file:140kB inactive_file:5040kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:6432kB pagetables:19156kB bounce:0kB free_pcp:636kB local_pcp:0kB free_cma:0kB [ 1475.310855] ion_page_pool_alloc+0x118/0x1b0 [ 1475.310866] ion_system_heap_allocate+0x133/0x8c0 [ 1475.310875] ? ion_alloc+0x187/0x810 [ 1475.330442] lowmem_reserve[]: [ 1475.346114] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1475.346126] ? ion_system_contig_heap_create+0x130/0x130 [ 1475.346139] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1475.370444] 0 [ 1475.373060] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1475.378053] 0 [ 1475.379843] ion_alloc+0x204/0x810 [ 1475.389987] ? ion_dma_buf_release+0x40/0x40 [ 1475.390441] 0 [ 1475.394398] ? __might_fault+0x177/0x1b0 [ 1475.394408] 0 [ 1475.396196] ion_ioctl+0xea/0x1f0 [ 1475.400235] 0 [ 1475.402043] ? ion_query_heaps+0x360/0x360 [ 1475.402057] ? __tun_chr_ioctl.isra.0+0x3310/0x3310 [ 1475.402064] ? ion_query_heaps+0x360/0x360 [ 1475.402075] do_vfs_ioctl+0x75a/0xff0 [ 1475.402086] ? ioctl_preallocate+0x1a0/0x1a0 [ 1475.420775] ? lock_downgrade+0x740/0x740 [ 1475.424551] Node 0 [ 1475.428960] ? __fget+0x225/0x360 [ 1475.438739] ? do_vfs_ioctl+0xff0/0xff0 [ 1475.442718] ? security_file_ioctl+0x83/0xb0 [ 1475.447155] SyS_ioctl+0x7f/0xb0 [ 1475.450444] DMA: [ 1475.450517] ? do_vfs_ioctl+0xff0/0xff0 [ 1475.450519] 9*4kB (ME) [ 1475.452579] do_syscall_64+0x1d5/0x640 [ 1475.456529] 9*8kB [ 1475.459105] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1475.470269] RIP: 0033:0x466459 [ 1475.470439] (UME) [ 1475.473450] RSP: 002b:00007f6ba9361188 EFLAGS: 00000246 [ 1475.473459] 7*16kB [ 1475.475584] ORIG_RAX: 0000000000000010 [ 1475.487126] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1475.494391] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1475.500444] (ME) [ 1475.501654] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1475.501662] 4*32kB [ 1475.503706] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1475.520439] R13: 00007ffd9352709f R14: 00007f6ba9361300 R15: 0000000000022000 [ 1475.520441] (UM) 2*64kB (ME) 2*128kB (ME) 2*256kB (UE) 3*512kB (UME) 2*1024kB (ME) 3*2048kB (ME) 0*4096kB = 10972kB [ 1475.600580] Node 0 DMA32: 1445*4kB (UME) 1845*8kB (UME) 1611*16kB (UME) 134*32kB (UE) 409*64kB (U) 131*128kB (U) 16*256kB (U) 14*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 104812kB [ 1475.670471] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1475.699160] Node 1 Normal: 2102*4kB (UME) 239*8kB (UME) 226*16kB (UME) 223*32kB (UE) 998*64kB (UM) 164*128kB (UM) 68*256kB (UM) 44*512kB (UM) 30*1024kB (UM) 0*2048kB 0*4096kB = 176592kB [ 1475.730610] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1475.776222] Node 0 hugepages_total=1 hugepages_free=1 hugepages_surp=1 hugepages_size=2048kB [ 1475.802600] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1475.827003] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1475.837108] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1475.850223] Node 0 DMA32 free:181692kB min:36200kB low:45248kB high:54296kB active_anon:278856kB inactive_anon:93344kB active_file:428kB inactive_file:14024kB unevictable:0kB writepending:0kB present:3129332kB managed:2788136kB mlocked:0kB kernel_stack:11648kB pagetables:15668kB bounce:0kB free_pcp:1360kB local_pcp:704kB free_cma:0kB [ 1475.909348] 38699 total pagecache pages [ 1475.919717] 0 pages in swap cache [ 1475.929946] Swap cache stats: add 0, delete 0, find 0/0 [ 1475.946390] Free swap = 0kB [ 1475.953432] Total swap = 0kB [ 1475.960273] 2097051 pages RAM [ 1475.971037] 0 pages HighMem/MovableOnly [ 1475.978685] lowmem_reserve[]: 0 0 0 0 0 [ 1475.987208] 363846 pages reserved [ 1475.995300] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1476.024106] 0 pages cma reserved [ 1476.031778] Out of memory (oom_kill_allocating_task): Kill process 2605 (syz-executor.1) score 0 or sacrifice child [ 1476.059959] Killed process 2605 (syz-executor.1) total-vm:93384kB, anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1476.087563] syz-executor.1: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1476.109972] lowmem_reserve[]: 0 0 0 0 0 [ 1476.128956] Node 1 Normal free:230432kB min:53696kB low:67120kB high:80544kB active_anon:18120kB inactive_anon:39344kB active_file:1936kB inactive_file:3216kB unevictable:0kB writepending:24kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:6432kB pagetables:19156kB bounce:0kB free_pcp:1336kB local_pcp:692kB free_cma:0kB [ 1476.176991] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 1476.199876] CPU: 1 PID: 2605 Comm: syz-executor.1 Not tainted 4.14.228-syzkaller #0 [ 1476.207690] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1476.217046] Call Trace: [ 1476.219636] dump_stack+0x1b2/0x281 [ 1476.223261] warn_alloc.cold+0x96/0x1cc [ 1476.227232] ? lock_downgrade+0x740/0x740 [ 1476.231376] ? zone_watermark_ok_safe+0x220/0x220 [ 1476.236223] ? wake_up_q+0x82/0xd0 [ 1476.239779] ? wait_for_completion_io+0x10/0x10 [ 1476.244456] __alloc_pages_nodemask+0x2127/0x2720 [ 1476.249309] ? lock_acquire+0x170/0x3f0 [ 1476.253286] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1476.258126] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1476.262638] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1476.268107] alloc_pages_current+0x155/0x260 [ 1476.272532] ion_page_pool_alloc+0x118/0x1b0 [ 1476.276934] ion_system_heap_allocate+0x133/0x8c0 [ 1476.281772] ? ion_alloc+0x187/0x810 [ 1476.285487] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1476.290943] ? ion_system_contig_heap_create+0x130/0x130 [ 1476.296394] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1476.301408] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1476.306249] ion_alloc+0x204/0x810 [ 1476.309795] ? ion_dma_buf_release+0x40/0x40 [ 1476.314218] ? __might_fault+0x177/0x1b0 [ 1476.318287] ion_ioctl+0xea/0x1f0 [ 1476.321734] ? ion_query_heaps+0x360/0x360 [ 1476.325964] ? __tun_chr_ioctl.isra.0+0x3310/0x3310 [ 1476.330992] ? ion_query_heaps+0x360/0x360 [ 1476.335226] do_vfs_ioctl+0x75a/0xff0 [ 1476.339028] ? ioctl_preallocate+0x1a0/0x1a0 [ 1476.343440] ? lock_downgrade+0x740/0x740 [ 1476.347600] ? __fget+0x225/0x360 [ 1476.351055] ? do_vfs_ioctl+0xff0/0xff0 [ 1476.355022] ? security_file_ioctl+0x83/0xb0 [ 1476.359439] SyS_ioctl+0x7f/0xb0 [ 1476.362800] ? do_vfs_ioctl+0xff0/0xff0 [ 1476.366773] do_syscall_64+0x1d5/0x640 [ 1476.370660] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1476.375848] RIP: 0033:0x466459 [ 1476.379038] RSP: 002b:00007f1402e26188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1476.386762] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1476.394039] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1476.401312] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1476.408582] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1476.415845] R13: 00007fff2d7045cf R14: 00007f1402e26300 R15: 0000000000022000 [ 1476.458210] lowmem_reserve[]: 0 0 0 0 0 [ 1476.465737] Node 0 DMA: 12*4kB (UME) 9*8kB (UME) 8*16kB (UME) 4*32kB (UM) 2*64kB (ME) 2*128kB (ME) 2*256kB (UE) 3*512kB (UME) 2*1024kB (ME) 3*2048kB (ME) 0*4096kB = 11000kB [ 1476.503724] Node 0 DMA32: 158*4kB (UE) 339*8kB (UME) 1516*16kB (UMEH) 263*32kB (UME) 13*64kB (UM) 6*128kB (UM) 2*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 38128kB [ 1476.543804] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1476.590460] Node 1 Normal: 70*4kB (UME) 46*8kB (UME) 28*16kB (UME) 589*32kB (UME) 35*64kB (UM) 21*128kB (UM) 6*256kB (UM) 2*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 27432kB [ 1476.619159] systemd-journal invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=0 [ 1476.646508] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1476.663739] systemd-journal cpuset=/ mems_allowed=0-1 [ 1476.668955] CPU: 1 PID: 2595 Comm: systemd-journal Not tainted 4.14.228-syzkaller #0 [ 1476.676822] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1476.686161] Call Trace: [ 1476.688742] dump_stack+0x1b2/0x281 [ 1476.692360] dump_header+0x178/0x82f [ 1476.696060] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1476.701156] ? ___ratelimit+0x2cd/0x530 [ 1476.705122] oom_kill_process.cold+0x10/0xb18 [ 1476.709619] out_of_memory+0xe3e/0x1190 [ 1476.713587] ? oom_killer_disable+0x1c0/0x1c0 [ 1476.718071] ? mutex_trylock+0x152/0x1a0 [ 1476.722138] __alloc_pages_nodemask+0x23e1/0x2720 [ 1476.726996] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1476.731840] ? cache_grow_begin+0x41/0x630 [ 1476.736063] cache_grow_begin+0x91/0x630 [ 1476.740111] ? cache_grow_begin+0x91/0x630 [ 1476.744331] fallback_alloc+0x207/0x2c0 [ 1476.748292] kmem_cache_alloc+0x1e5/0x3c0 [ 1476.752428] getname_flags+0xc8/0x550 [ 1476.756216] do_sys_open+0x1ce/0x410 [ 1476.759918] ? filp_open+0x60/0x60 [ 1476.763448] ? do_syscall_64+0x4c/0x640 [ 1476.767405] ? do_sys_open+0x410/0x410 [ 1476.771278] do_syscall_64+0x1d5/0x640 [ 1476.775159] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1476.780334] RIP: 0033:0x7fce92dec840 [ 1476.784053] RSP: 002b:00007ffce5b38738 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 1476.791748] RAX: ffffffffffffffda RBX: 00007ffce5b38a40 RCX: 00007fce92dec840 [ 1476.799015] RDX: 00000000000001a0 RSI: 0000000000080042 RDI: 0000556509a0d130 [ 1476.806277] RBP: 000000000000000d R08: 000000000000ffc0 R09: 00000000ffffffff [ 1476.813531] R10: 0000000000000069 R11: 0000000000000246 R12: 00000000ffffffff [ 1476.820808] R13: 0000556509a09040 R14: 00007ffce5b38a00 R15: 0000556509a0d9b0 [ 1476.860510] Node 0 hugepages_total=1 hugepages_free=1 hugepages_surp=1 hugepages_size=2048kB [ 1476.889393] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1476.910465] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1476.919047] 33935 total pagecache pages [ 1476.937411] 0 pages in swap cache [ 1476.944337] Swap cache stats: add 0, delete 0, find 0/0 [ 1476.949703] Free swap = 0kB [ 1476.953820] Total swap = 0kB [ 1476.956840] 2097051 pages RAM [ 1476.959936] 0 pages HighMem/MovableOnly [ 1476.968115] 363846 pages reserved [ 1476.971692] 0 pages cma reserved [ 1476.976163] warn_alloc_show_mem: 2 callbacks suppressed [ 1476.976165] Mem-Info: [ 1476.987515] active_anon:74208 inactive_anon:33174 isolated_anon:0 [ 1476.987515] active_file:124 inactive_file:151 isolated_file:28 [ 1476.987515] unevictable:0 dirty:8 writeback:0 unstable:0 [ 1476.987515] slab_reclaimable:13321 slab_unreclaimable:133417 [ 1476.987515] mapped:44182 shmem:33583 pagetables:8719 bounce:0 [ 1476.987515] free:19442 free_pcp:0 free_cma:0 [ 1477.025306] Node 0 active_anon:278800kB inactive_anon:93352kB active_file:100kB inactive_file:120kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:139664kB dirty:0kB writeback:4kB shmem:94708kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 225280kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1477.057143] Node 1 active_anon:18120kB inactive_anon:39344kB active_file:240kB inactive_file:244kB unevictable:0kB isolated(anon):0kB isolated(file):20kB mapped:36764kB dirty:28kB writeback:0kB shmem:39624kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1477.089451] Node 0 DMA free:11000kB min:204kB low:252kB high:300kB active_anon:52kB inactive_anon:8kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:52kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1477.120368] Mem-Info: [ 1477.122845] active_anon:74218 inactive_anon:33174 isolated_anon:0 [ 1477.122845] active_file:17 inactive_file:13 isolated_file:0 [ 1477.122845] unevictable:0 dirty:7 writeback:0 unstable:0 [ 1477.122845] slab_reclaimable:13317 slab_unreclaimable:133445 [ 1477.122845] mapped:43989 shmem:33583 pagetables:8693 bounce:0 [ 1477.122845] free:18448 free_pcp:0 free_cma:0 [ 1477.162985] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1477.168036] Node 0 DMA32 free:35880kB min:36200kB low:45248kB high:54296kB active_anon:278724kB inactive_anon:93344kB active_file:36kB inactive_file:36kB unevictable:0kB writepending:0kB present:3129332kB managed:2788136kB mlocked:0kB kernel_stack:11616kB pagetables:15564kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1477.182928] syz-executor.3: [ 1477.205278] lowmem_reserve[]: 0 0 0 0 0 [ 1477.210467] Node 0 active_anon:278776kB inactive_anon:93352kB active_file:36kB inactive_file:36kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:139632kB dirty:0kB writeback:0kB shmem:94708kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 225280kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1477.215445] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1477.270474] Node 1 active_anon:18096kB inactive_anon:39344kB active_file:32kB inactive_file:16kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:36324kB dirty:28kB writeback:0kB shmem:39624kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1477.311249] page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1477.364102] lowmem_reserve[]: 0 0 0 0 0 [ 1477.368113] Node 1 Normal free:26368kB min:53696kB low:67120kB high:80544kB active_anon:18096kB inactive_anon:39344kB active_file:32kB inactive_file:16kB unevictable:0kB writepending:12kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:6432kB pagetables:19156kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1477.390447] Node 0 DMA free:11000kB min:204kB low:252kB high:300kB active_anon:52kB inactive_anon:8kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:52kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1477.410783] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 1477.428463] CPU: 1 PID: 2607 Comm: syz-executor.3 Not tainted 4.14.228-syzkaller #0 [ 1477.436246] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1477.445589] Call Trace: [ 1477.448178] dump_stack+0x1b2/0x281 [ 1477.451802] warn_alloc.cold+0x96/0x1cc [ 1477.453545] lowmem_reserve[]: 0 [ 1477.455773] ? zone_watermark_ok_safe+0x220/0x220 [ 1477.455795] __alloc_pages_nodemask+0x2127/0x2720 [ 1477.459050] 2717 [ 1477.463879] ? lock_acquire+0x170/0x3f0 [ 1477.463894] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1477.463911] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1477.463922] ? __mutex_unlock_slowpath+0x75/0x770 [ 1477.463936] alloc_pages_current+0x155/0x260 [ 1477.463950] ion_page_pool_alloc+0x118/0x1b0 [ 1477.470103] 2718 [ 1477.470813] ion_system_heap_allocate+0x133/0x8c0 [ 1477.470825] ? _raw_spin_unlock+0x29/0x40 [ 1477.470835] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1477.470844] ? ion_system_contig_heap_create+0x130/0x130 [ 1477.470856] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1477.474806] 2718 [ 1477.479647] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1477.485975] 2718 [ 1477.489913] ion_alloc+0x27a/0x810 [ 1477.498689] ? ion_dma_buf_release+0x40/0x40 [ 1477.502773] Node 0 [ 1477.505552] ? __might_fault+0x177/0x1b0 [ 1477.509685] DMA32 free:35880kB min:36200kB low:45248kB high:54296kB active_anon:278724kB inactive_anon:93344kB active_file:36kB inactive_file:36kB unevictable:0kB writepending:0kB present:3129332kB managed:2788136kB mlocked:0kB kernel_stack:11616kB pagetables:15564kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1477.514587] ion_ioctl+0xea/0x1f0 [ 1477.514596] ? ion_query_heaps+0x360/0x360 [ 1477.514611] ? __tun_chr_ioctl.isra.0+0x3310/0x3310 [ 1477.514620] ? ion_query_heaps+0x360/0x360 [ 1477.520061] lowmem_reserve[]: [ 1477.525056] do_vfs_ioctl+0x75a/0xff0 [ 1477.525068] ? ioctl_preallocate+0x1a0/0x1a0 [ 1477.525078] ? lock_downgrade+0x740/0x740 [ 1477.525090] ? __fget+0x225/0x360 [ 1477.525098] ? do_vfs_ioctl+0xff0/0xff0 [ 1477.525109] ? security_file_ioctl+0x83/0xb0 [ 1477.525119] SyS_ioctl+0x7f/0xb0 [ 1477.529355] 0 [ 1477.531988] ? do_vfs_ioctl+0xff0/0xff0 [ 1477.532001] do_syscall_64+0x1d5/0x640 [ 1477.532015] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1477.532024] RIP: 0033:0x466459 [ 1477.534075] 0 [ 1477.537594] RSP: 002b:00007f6ba9361188 EFLAGS: 00000246 [ 1477.544009] 0 [ 1477.544193] ORIG_RAX: 0000000000000010 [ 1477.548232] 0 [ 1477.576417] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1477.576423] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1477.576428] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1477.576432] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1477.576437] R13: 00007ffd9352709f R14: 00007f6ba9361300 R15: 0000000000022000 [ 1477.589996] lowmem_reserve[]: [ 1477.597898] 0 [ 1477.611674] 0 [ 1477.672019] 0 [ 1477.704017] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1477.707139] 0 0 0 [ 1477.740984] Node 0 DMA: 12*4kB (UME) 9*8kB (UME) 8*16kB (UME) 4*32kB (UM) 2*64kB (ME) 2*128kB (ME) 2*256kB (UE) 3*512kB (UME) 2*1024kB (ME) 3*2048kB (ME) 0*4096kB = 11000kB [ 1477.774775] Node 0 DMA32: 183*4kB (ME) 341*8kB (ME) 1101*16kB (UEH) 282*32kB (UE) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 30100kB [ 1477.783785] lowmem_reserve[]: 0 0 0 0 0 [ 1477.806972] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1477.814415] Node 1 Normal free:26368kB min:53696kB low:67120kB high:80544kB active_anon:18096kB inactive_anon:39344kB active_file:32kB inactive_file:16kB unevictable:0kB writepending:12kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:6432kB pagetables:19156kB bounce:0kB free_pcp:24kB local_pcp:24kB free_cma:0kB [ 1477.830440] Node 1 Normal: 134*4kB (UME) 93*8kB (UME) 66*16kB (UME) 631*32kB (UME) 34*64kB (UM) 11*128kB (UM) 1*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 26368kB [ 1477.903845] lowmem_reserve[]: 0 0 0 0 0 [ 1477.907856] Node 0 DMA: 10*4kB (UME) 9*8kB (UME) 8*16kB (UME) 3*32kB (M) 2*64kB (ME) 2*128kB (ME) 2*256kB (UE) 3*512kB (UME) 2*1024kB (ME) 3*2048kB (ME) 0*4096kB = 10960kB [ 1477.923633] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1477.936889] Node 0 DMA32: 184*4kB (UME) 341*8kB (ME) 349*16kB (UEH) 282*32kB (UE) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18072kB [ 1477.943937] Node 0 hugepages_total=1 hugepages_free=1 hugepages_surp=1 hugepages_size=2048kB [ 1477.957693] Node 0 Normal: 0*4kB 0*8kB [ 1477.959209] syz-executor.3: [ 1477.971911] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1477.977711] 0*16kB [ 1477.990182] page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1477.998111] 0*32kB [ 1478.014509] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1478.017866] 0*64kB [ 1478.029668] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 1478.045785] 33613 total pagecache pages [ 1478.049764] 0 pages in swap cache [ 1478.058008] CPU: 1 PID: 2607 Comm: syz-executor.3 Not tainted 4.14.228-syzkaller #0 [ 1478.058352] 0*128kB [ 1478.065800] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1478.065804] Call Trace: [ 1478.065823] dump_stack+0x1b2/0x281 [ 1478.065837] warn_alloc.cold+0x96/0x1cc [ 1478.065849] ? zone_watermark_ok_safe+0x220/0x220 [ 1478.068163] 0*256kB [ 1478.077506] ? usleep_range+0x130/0x130 [ 1478.077516] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1478.077529] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1478.077539] ? run_timer_softirq+0x5a0/0x5a0 [ 1478.077556] __alloc_pages_nodemask+0x2127/0x2720 [ 1478.077572] ? lock_acquire+0x170/0x3f0 [ 1478.077588] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1478.077598] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1478.077613] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1478.107572] 0*512kB [ 1478.108929] alloc_pages_current+0x155/0x260 [ 1478.113349] 0*1024kB [ 1478.118136] ion_page_pool_alloc+0x118/0x1b0 [ 1478.129815] 0*2048kB [ 1478.131396] ion_system_heap_allocate+0x133/0x8c0 [ 1478.131410] ? _raw_spin_unlock+0x29/0x40 [ 1478.131419] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1478.131430] ? ion_system_contig_heap_create+0x130/0x130 [ 1478.136873] 0*4096kB [ 1478.139185] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1478.150775] = 0kB [ 1478.152759] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1478.157573] Node 1 [ 1478.161708] ion_alloc+0x27a/0x810 [ 1478.161723] ? ion_dma_buf_release+0x40/0x40 [ 1478.161736] ? __might_fault+0x177/0x1b0 [ 1478.161747] ion_ioctl+0xea/0x1f0 [ 1478.161756] ? ion_query_heaps+0x360/0x360 [ 1478.161770] ? __tun_chr_ioctl.isra.0+0x3310/0x3310 [ 1478.161778] ? ion_query_heaps+0x360/0x360 [ 1478.161788] do_vfs_ioctl+0x75a/0xff0 [ 1478.161800] ? ioctl_preallocate+0x1a0/0x1a0 [ 1478.161812] ? lock_downgrade+0x740/0x740 [ 1478.173325] Normal: [ 1478.174571] ? __fget+0x225/0x360 [ 1478.179560] 134*4kB [ 1478.181607] ? do_vfs_ioctl+0xff0/0xff0 [ 1478.181620] ? security_file_ioctl+0x83/0xb0 [ 1478.181630] SyS_ioctl+0x7f/0xb0 [ 1478.181638] ? do_vfs_ioctl+0xff0/0xff0 [ 1478.181657] do_syscall_64+0x1d5/0x640 [ 1478.181671] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1478.189208] (UME) [ 1478.192232] RIP: 0033:0x466459 [ 1478.192238] RSP: 002b:00007f6ba9361188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1478.192248] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1478.192253] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1478.192258] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1478.192263] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1478.192269] R13: 00007ffd9352709f R14: 00007f6ba9361300 R15: 0000000000022000 [ 1478.201048] Swap cache stats: add 0, delete 0, find 0/0 [ 1478.211940] 93*8kB [ 1478.221637] Free swap = 0kB [ 1478.233332] (UME) [ 1478.242417] Total swap = 0kB [ 1478.242424] 2097051 pages RAM [ 1478.242428] 0 pages HighMem/MovableOnly [ 1478.242431] 363846 pages reserved [ 1478.242434] 0 pages cma reserved [ 1478.267065] syz-executor.1: [ 1478.275981] 66*16kB [ 1478.282707] page allocation failure: order:4 [ 1478.285010] (UME) [ 1478.299063] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1478.312646] 631*32kB [ 1478.320979] (null) [ 1478.328012] (UME) [ 1478.328632] syz-executor.1 cpuset= [ 1478.334263] 34*64kB [ 1478.342330] / [ 1478.347227] (UM) [ 1478.347875] mems_allowed=0-1 [ 1478.354807] 11*128kB [ 1478.369634] CPU: 1 PID: 2605 Comm: syz-executor.1 Not tainted 4.14.228-syzkaller #0 [ 1478.378888] (UM) [ 1478.380970] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1478.380974] Call Trace: [ 1478.380996] dump_stack+0x1b2/0x281 [ 1478.381009] warn_alloc.cold+0x96/0x1cc [ 1478.381020] ? zone_watermark_ok_safe+0x220/0x220 [ 1478.381042] __alloc_pages_nodemask+0x2127/0x2720 [ 1478.383427] 1*256kB [ 1478.391221] ? lock_acquire+0x170/0x3f0 [ 1478.391234] ? lock_acquire+0x170/0x3f0 [ 1478.391249] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1478.391267] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1478.391280] ? __mutex_unlock_slowpath+0x75/0x770 [ 1478.391295] alloc_pages_current+0x155/0x260 [ 1478.391310] ion_page_pool_alloc+0x118/0x1b0 [ 1478.400554] (U) [ 1478.402704] ion_system_heap_allocate+0x133/0x8c0 [ 1478.405260] 0*512kB [ 1478.408874] ? _raw_spin_unlock+0x29/0x40 [ 1478.418255] 0*1024kB [ 1478.422476] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1478.422487] ? ion_system_contig_heap_create+0x130/0x130 [ 1478.422498] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1478.422510] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1478.422521] ion_alloc+0x27a/0x810 [ 1478.422535] ? ion_dma_buf_release+0x40/0x40 [ 1478.426927] warn_alloc_show_mem: 1 callbacks suppressed [ 1478.426930] Mem-Info: [ 1478.428803] ? __might_fault+0x177/0x1b0 [ 1478.437976] 0*2048kB [ 1478.443014] ion_ioctl+0xea/0x1f0 [ 1478.443025] ? ion_query_heaps+0x360/0x360 [ 1478.443040] ? __tun_chr_ioctl.isra.0+0x3310/0x3310 [ 1478.443047] ? ion_query_heaps+0x360/0x360 [ 1478.443058] do_vfs_ioctl+0x75a/0xff0 [ 1478.449169] active_anon:74218 inactive_anon:33174 isolated_anon:0 [ 1478.449169] active_file:15 inactive_file:15 isolated_file:0 [ 1478.449169] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1478.449169] slab_reclaimable:13317 slab_unreclaimable:133096 [ 1478.449169] mapped:43989 shmem:33583 pagetables:8693 bounce:0 [ 1478.449169] free:18499 free_pcp:328 free_cma:0 [ 1478.452277] ? ioctl_preallocate+0x1a0/0x1a0 [ 1478.452287] ? lock_downgrade+0x740/0x740 [ 1478.452300] ? __fget+0x225/0x360 [ 1478.452309] ? do_vfs_ioctl+0xff0/0xff0 [ 1478.452321] ? security_file_ioctl+0x83/0xb0 [ 1478.452332] SyS_ioctl+0x7f/0xb0 [ 1478.452339] ? do_vfs_ioctl+0xff0/0xff0 [ 1478.452350] do_syscall_64+0x1d5/0x640 [ 1478.452364] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1478.452374] RIP: 0033:0x466459 [ 1478.462694] 0*4096kB [ 1478.463552] RSP: 002b:00007f1402e26188 EFLAGS: 00000246 [ 1478.465855] = 26368kB [ 1478.469980] ORIG_RAX: 0000000000000010 [ 1478.475551] Node 0 active_anon:278776kB inactive_anon:93352kB active_file:36kB inactive_file:36kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:139632kB dirty:0kB writeback:0kB shmem:94708kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 225280kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1478.477279] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1478.486716] Node 1 active_anon:18096kB inactive_anon:39344kB active_file:24kB inactive_file:24kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:36324kB dirty:0kB writeback:0kB shmem:39624kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1478.487704] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1478.495678] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1478.496048] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1478.504438] Node 0 [ 1478.505779] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1478.508180] DMA free:10960kB min:204kB low:252kB high:300kB active_anon:52kB inactive_anon:8kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:52kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1478.512201] R13: 00007fff2d7045cf R14: 00007f1402e26300 R15: 0000000000022000 [ 1478.597185] Node 0 hugepages_total=1 hugepages_free=1 hugepages_surp=1 hugepages_size=2048kB [ 1478.600388] lowmem_reserve[]: [ 1478.634525] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1478.650830] 0 2717 2718 2718 2718 [ 1478.650851] Node 0 DMA32 free:18052kB min:36200kB low:45248kB high:54296kB active_anon:278724kB inactive_anon:93344kB active_file:36kB inactive_file:36kB unevictable:0kB writepending:0kB present:3129332kB managed:2788136kB mlocked:0kB kernel_stack:11616kB pagetables:15564kB bounce:0kB free_pcp:124kB local_pcp:4kB free_cma:0kB [ 1478.650874] lowmem_reserve[]: 0 0 0 0 0 [ 1478.650895] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1478.650915] lowmem_reserve[]: 0 0 0 0 0 [ 1478.650935] Node 1 Normal free:26740kB min:53696kB low:67120kB high:80544kB active_anon:18096kB inactive_anon:39344kB active_file:24kB inactive_file:24kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:6432kB pagetables:19156kB bounce:0kB free_pcp:144kB local_pcp:24kB free_cma:0kB [ 1478.650958] lowmem_reserve[]: [ 1478.681808] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1478.685604] 0 [ 1478.700447] syz-executor.1: [ 1478.701681] 0 [ 1478.708932] page allocation failure: order:0 [ 1478.723219] 0 [ 1478.744376] 33613 total pagecache pages [ 1478.766408] 0 [ 1478.772201] 0 pages in swap cache [ 1478.772207] Swap cache stats: add 0, delete 0, find 0/0 [ 1478.772210] Free swap = 0kB [ 1478.772213] Total swap = 0kB [ 1478.772219] 2097051 pages RAM [ 1478.772222] 0 pages HighMem/MovableOnly [ 1478.772225] 363846 pages reserved [ 1478.772229] 0 pages cma reserved [ 1478.772235] Out of memory (oom_kill_allocating_task): Kill process 2595 (systemd-journal) score 0 or sacrifice child [ 1478.772265] Killed process 2595 (systemd-journal) total-vm:46096kB, anon-rss:460kB, file-rss:4kB, shmem-rss:1628kB [ 1478.773175] oom_reaper: reaped process 2595 (systemd-journal), now anon-rss:0kB, file-rss:0kB, shmem-rss:1628kB [ 1478.791940] 0 [ 1478.812655] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1478.902461] syz-fuzzer invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask= [ 1478.919414] Node 0 [ 1478.925700] (null) [ 1478.928736] DMA: [ 1478.940107] , order=0, oom_score_adj=0 [ 1478.959052] 10*4kB [ 1478.959990] systemd-journal: [ 1478.969236] (UME) [ 1478.978909] (null) [ 1478.990693] 9*8kB [ 1478.994756] syz-fuzzer cpuset= [ 1478.994816] (UME) [ 1478.996949] / [ 1478.999079] 8*16kB [ 1479.002320] page allocation failure: order:1, mode:0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null) [ 1479.002335] systemd-journal cpuset=/ mems_allowed=0-1 [ 1479.002353] CPU: 1 PID: 2595 Comm: systemd-journal Not tainted 4.14.228-syzkaller #0 [ 1479.002358] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1479.002364] Call Trace: [ 1479.015743] (UME) [ 1479.017677] dump_stack+0x1b2/0x281 [ 1479.027437] 3*32kB [ 1479.030722] warn_alloc.cold+0x96/0x1cc [ 1479.030734] ? zone_watermark_ok_safe+0x220/0x220 [ 1479.030743] ? usleep_range+0x130/0x130 [ 1479.030751] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1479.030762] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1479.030771] ? run_timer_softirq+0x5a0/0x5a0 [ 1479.030786] __alloc_pages_nodemask+0x2127/0x2720 [ 1479.030806] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1479.049530] (M) [ 1479.050703] ? cache_grow_begin+0x41/0x630 [ 1479.050714] cache_grow_begin+0x91/0x630 [ 1479.050723] ? cache_grow_begin+0x91/0x630 [ 1479.050734] fallback_alloc+0x207/0x2c0 [ 1479.054691] 2*64kB [ 1479.059554] kmem_cache_alloc+0x1e5/0x3c0 [ 1479.074836] (ME) [ 1479.077980] getname_flags+0xc8/0x550 [ 1479.089522] 2*128kB [ 1479.089605] do_sys_open+0x1ce/0x410 [ 1479.098523] (ME) [ 1479.102098] ? filp_open+0x60/0x60 [ 1479.102110] ? do_syscall_64+0x4c/0x640 [ 1479.102116] ? do_sys_open+0x410/0x410 [ 1479.102124] do_syscall_64+0x1d5/0x640 [ 1479.102137] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1479.102144] RIP: 0033:0x7fce92dec840 [ 1479.102149] RSP: 002b:00007ffce5b38738 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 1479.102158] RAX: ffffffffffffffda RBX: 00007ffce5b38a40 RCX: 00007fce92dec840 [ 1479.102162] RDX: 00000000000001a0 RSI: 0000000000080042 RDI: 0000556509a0d130 [ 1479.102167] RBP: 000000000000000d R08: 000000000000ffc0 R09: 00000000ffffffff [ 1479.102171] R10: 0000000000000069 R11: 0000000000000246 R12: 00000000ffffffff [ 1479.102175] R13: 0000556509a09040 R14: 00007ffce5b38a00 R15: 0000556509a0d9b0 [ 1479.105421] syz-executor.1 cpuset= [ 1479.117396] 2*256kB [ 1479.118398] mems_allowed=0-1 [ 1479.124856] (UE) [ 1479.127765] CPU: 1 PID: 7981 Comm: syz-fuzzer Not tainted 4.14.228-syzkaller #0 [ 1479.130034] 3*512kB [ 1479.133986] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1479.133990] Call Trace: [ 1479.134019] dump_stack+0x1b2/0x281 [ 1479.134032] dump_header+0x178/0x82f [ 1479.134044] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1479.134053] ? ___ratelimit+0x2cd/0x530 [ 1479.134063] oom_kill_process.cold+0x10/0xb18 [ 1479.134082] out_of_memory+0xe3e/0x1190 [ 1479.134095] ? oom_killer_disable+0x1c0/0x1c0 [ 1479.134104] ? mutex_trylock+0x152/0x1a0 [ 1479.134115] __alloc_pages_nodemask+0x23e1/0x2720 [ 1479.149440] (UME) [ 1479.150832] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1479.150859] alloc_pages_current+0x155/0x260 [ 1479.150871] filemap_fault+0xea3/0x1980 [ 1479.168155] 2*1024kB [ 1479.173099] ext4_filemap_fault+0x84/0xb0 [ 1479.173111] __do_fault+0xfa/0x380 [ 1479.173121] __handle_mm_fault+0x2497/0x4620 [ 1479.173131] ? vm_insert_page+0x7c0/0x7c0 [ 1479.173149] handle_mm_fault+0x391/0x860 [ 1479.173160] __do_page_fault+0x549/0xad0 [ 1479.173174] ? spurious_fault+0x640/0x640 [ 1479.191287] (ME) [ 1479.194972] ? do_page_fault+0x60/0x500 [ 1479.198483] 3*2048kB [ 1479.200786] ? page_fault+0x2f/0x50 [ 1479.200794] page_fault+0x45/0x50 [ 1479.200803] RIP: 0001:0x157f0588154 [ 1479.200807] RSP: 80198:000000c0002b9db8 EFLAGS: 157f0588154 [ 1479.208985] / [ 1479.218743] (ME) [ 1479.233201] mems_allowed=0-1 [ 1479.240266] 0*4096kB [ 1479.250760] CPU: 1 PID: 2605 Comm: syz-executor.1 Not tainted 4.14.228-syzkaller #0 [ 1479.257802] = 10960kB [ 1479.262899] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1479.262904] Call Trace: [ 1479.262924] dump_stack+0x1b2/0x281 [ 1479.262939] warn_alloc.cold+0x96/0x1cc [ 1479.262952] ? zone_watermark_ok_safe+0x220/0x220 [ 1479.267791] Node 0 [ 1479.269927] ? usleep_range+0x130/0x130 [ 1479.279999] DMA32: [ 1479.283093] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1479.283107] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1479.283118] ? run_timer_softirq+0x5a0/0x5a0 [ 1479.283135] __alloc_pages_nodemask+0x2127/0x2720 [ 1479.285519] 183*4kB [ 1479.289654] ? lock_acquire+0x170/0x3f0 [ 1479.298585] (ME) [ 1479.301709] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1479.301720] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1479.301737] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1479.301756] alloc_pages_current+0x155/0x260 [ 1479.305788] 347*8kB [ 1479.309833] ion_page_pool_alloc+0x118/0x1b0 [ 1479.319170] (UME) [ 1479.319963] ion_system_heap_allocate+0x133/0x8c0 [ 1479.322378] 321*16kB [ 1479.325964] ? _raw_spin_unlock+0x29/0x40 [ 1479.329386] (UE) [ 1479.332993] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1479.333003] ? ion_system_contig_heap_create+0x130/0x130 [ 1479.333014] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1479.333025] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1479.333036] ion_alloc+0x27a/0x810 [ 1479.333050] ? ion_dma_buf_release+0x40/0x40 [ 1479.333063] ? __might_fault+0x177/0x1b0 [ 1479.333074] ion_ioctl+0xea/0x1f0 [ 1479.333083] ? ion_query_heaps+0x360/0x360 [ 1479.333096] ? __tun_chr_ioctl.isra.0+0x3310/0x3310 [ 1479.343314] 298*32kB [ 1479.345628] ? ion_query_heaps+0x360/0x360 [ 1479.348010] (UE) [ 1479.355794] do_vfs_ioctl+0x75a/0xff0 [ 1479.355807] ? ioctl_preallocate+0x1a0/0x1a0 [ 1479.355816] ? lock_downgrade+0x740/0x740 [ 1479.355828] ? __fget+0x225/0x360 [ 1479.355839] ? do_vfs_ioctl+0xff0/0xff0 [ 1479.359169] 0*64kB [ 1479.367573] ? security_file_ioctl+0x83/0xb0 [ 1479.367584] SyS_ioctl+0x7f/0xb0 [ 1479.367592] ? do_vfs_ioctl+0xff0/0xff0 [ 1479.367603] do_syscall_64+0x1d5/0x640 [ 1479.367618] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1479.367626] RIP: 0033:0x466459 [ 1479.367631] RSP: 002b:00007f1402e26188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1479.367641] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1479.367646] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1479.367651] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1479.367657] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1479.367665] R13: 00007fff2d7045cf R14: 00007f1402e26300 R15: 0000000000022000 [ 1479.375528] 0*128kB [ 1479.386557] Mem-Info: [ 1479.388846] 0*256kB [ 1479.399478] active_anon:74103 inactive_anon:33174 isolated_anon:0 [ 1479.399478] active_file:15 inactive_file:15 isolated_file:0 [ 1479.399478] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1479.399478] slab_reclaimable:13317 slab_unreclaimable:133056 [ 1479.399478] mapped:43989 shmem:33583 pagetables:8693 bounce:0 [ 1479.399478] free:13950 free_pcp:190 free_cma:0 [ 1479.423888] 0*512kB [ 1479.496862] Node 0 active_anon:278472kB inactive_anon:93352kB active_file:36kB inactive_file:36kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:139632kB dirty:0kB writeback:0kB shmem:94708kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 225280kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1479.608325] 0*1024kB [ 1479.690464] Bluetooth: hci5 command 0x0406 tx timeout [ 1479.758405] 0*2048kB 0*4096kB = 18180kB [ 1479.762441] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1479.790454] Node 1 Normal: 30*4kB (UME) 32*8kB (ME) 28*16kB (UME) 23*32kB (ME) 51*64kB (UM) 18*128kB (UM) 50*256kB (U) 0*512kB 33*1024kB (U) 0*2048kB 0*4096kB = 53720kB [ 1479.834355] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1479.864617] Node 0 hugepages_total=1 hugepages_free=1 hugepages_surp=1 hugepages_size=2048kB [ 1479.879449] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1479.888336] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1479.913222] 33636 total pagecache pages [ 1479.917212] 0 pages in swap cache [ 1479.932761] Swap cache stats: add 0, delete 0, find 0/0 [ 1479.938123] Free swap = 0kB [ 1479.958820] Total swap = 0kB [ 1479.961902] 2097051 pages RAM [ 1479.964172] Node 1 active_anon:17940kB inactive_anon:39344kB active_file:68kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:36324kB dirty:0kB writeback:0kB shmem:39624kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1479.965021] 0 pages HighMem/MovableOnly [ 1480.024321] 363846 pages reserved [ 1480.027790] 0 pages cma reserved [ 1480.110459] Node 0 DMA free:10960kB min:204kB low:252kB high:300kB active_anon:52kB inactive_anon:8kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:52kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1480.147054] lowmem_reserve[]: 0 2717 2718 2718 2718 20:23:33 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r1, 0x800454cf, &(0x7f0000000240)) ioctl$TUNSETSNDBUF(r1, 0x400454d4, &(0x7f0000000040)=0x1000) openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000180)={0x80000000, 0xa}) openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) [ 1480.167614] Node 0 DMA32 free:174564kB min:36200kB low:45248kB high:54296kB active_anon:278520kB inactive_anon:93344kB active_file:240kB inactive_file:8048kB unevictable:0kB writepending:0kB present:3129332kB managed:2788136kB mlocked:0kB kernel_stack:11680kB pagetables:15712kB bounce:0kB free_pcp:1464kB local_pcp:740kB free_cma:0kB [ 1480.268742] lowmem_reserve[]: 0 0 0 0 0 [ 1480.280550] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1480.360374] lowmem_reserve[]: 0 0 0 0 0 [ 1480.367906] Node 1 Normal free:53536kB min:53696kB low:67120kB high:80544kB active_anon:17840kB inactive_anon:39344kB active_file:524kB inactive_file:348kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:6432kB pagetables:19156kB bounce:0kB free_pcp:680kB local_pcp:0kB free_cma:0kB [ 1480.477663] lowmem_reserve[]: 0 0 0 0 0 [ 1480.489096] Node 0 DMA: 12*4kB (UME) 9*8kB (UME) 8*16kB (UME) 4*32kB (UM) 3*64kB (UME) 2*128kB (ME) 2*256kB (UE) 3*512kB (UME) 2*1024kB (ME) 3*2048kB (ME) 0*4096kB = 11064kB [ 1480.515423] Node 0 DMA32: 307*4kB (UME) 368*8kB (UME) 110*16kB (UME) 35*32kB (UME) 76*64kB (UM) 191*128kB (UM) 2*256kB (UM) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36876kB [ 1480.552702] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1480.567261] Node 1 Normal: 80*4kB (UME) 45*8kB (UME) 23*16kB (UME) 17*32kB (UME) 28*64kB (UM) 4*128kB (UM) 78*256kB (UM) 59*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 54072kB [ 1480.586619] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1480.599523] Node 0 hugepages_total=1 hugepages_free=1 hugepages_surp=1 hugepages_size=2048kB [ 1480.611933] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1480.622840] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1480.632730] 33658 total pagecache pages [ 1480.636718] 0 pages in swap cache [ 1480.640169] Swap cache stats: add 0, delete 0, find 0/0 [ 1480.647591] Free swap = 0kB [ 1480.652084] Total swap = 0kB [ 1480.655111] 2097051 pages RAM [ 1480.656372] syz-executor.2: [ 1480.658202] 0 pages HighMem/MovableOnly [ 1480.658211] page allocation failure: order:4 [ 1480.674035] 363846 pages reserved [ 1480.687244] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1480.706815] 0 pages cma reserved [ 1480.710207] Out of memory (oom_kill_allocating_task): Kill process 7981 (syz-fuzzer) score 0 or sacrifice child [ 1480.740446] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 1480.745593] CPU: 0 PID: 2620 Comm: syz-executor.2 Not tainted 4.14.228-syzkaller #0 [ 1480.753377] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1480.762720] Call Trace: [ 1480.765308] dump_stack+0x1b2/0x281 [ 1480.768937] warn_alloc.cold+0x96/0x1cc [ 1480.772910] ? zone_watermark_ok_safe+0x220/0x220 [ 1480.777762] __alloc_pages_nodemask+0x2127/0x2720 [ 1480.782607] ? lock_acquire+0x170/0x3f0 [ 1480.786581] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1480.791429] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1480.795860] Killed process 1169 (syz-executor.2) total-vm:84924kB, anon-rss:64kB, file-rss:0kB, shmem-rss:0kB [ 1480.796876] ? __mutex_unlock_slowpath+0x75/0x770 [ 1480.811741] ? audit_kill_trees+0x230/0x230 [ 1480.816068] alloc_pages_current+0x155/0x260 [ 1480.820588] ion_page_pool_alloc+0x118/0x1b0 [ 1480.825001] ion_system_heap_allocate+0x133/0x8c0 [ 1480.829840] ? ion_alloc+0x187/0x810 [ 1480.833551] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1480.839000] ? ion_system_contig_heap_create+0x130/0x130 [ 1480.844448] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1480.849473] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1480.854323] ion_alloc+0x204/0x810 [ 1480.857863] ? ion_dma_buf_release+0x40/0x40 [ 1480.860507] systemd-cgroups invoked oom-killer: gfp_mask=0x15080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null) [ 1480.862271] ? __might_fault+0x177/0x1b0 [ 1480.862283] ion_ioctl+0xea/0x1f0 [ 1480.880264] ? ion_query_heaps+0x360/0x360 [ 1480.884524] ? ion_query_heaps+0x360/0x360 [ 1480.888761] do_vfs_ioctl+0x75a/0xff0 [ 1480.892563] ? ioctl_preallocate+0x1a0/0x1a0 [ 1480.896970] ? lock_downgrade+0x740/0x740 [ 1480.901125] ? __fget+0x225/0x360 [ 1480.901193] , order=0, oom_score_adj=0 [ 1480.904570] ? do_vfs_ioctl+0xff0/0xff0 [ 1480.908524] systemd-cgroups cpuset= [ 1480.912485] ? security_file_ioctl+0x83/0xb0 [ 1480.912496] SyS_ioctl+0x7f/0xb0 [ 1480.912505] ? do_vfs_ioctl+0xff0/0xff0 [ 1480.912516] do_syscall_64+0x1d5/0x640 [ 1480.931731] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1480.936925] RIP: 0033:0x466459 [ 1480.940113] RSP: 002b:00007f613992b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1480.946459] / [ 1480.947820] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1480.947830] mems_allowed=0-1 [ 1480.949543] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1480.949561] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1480.974430] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1480.981686] R13: 00007fff85f2b35f R14: 00007f613992b300 R15: 0000000000022000 [ 1480.988964] CPU: 1 PID: 2622 Comm: systemd-cgroups Not tainted 4.14.228-syzkaller #0 [ 1480.996842] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1481.006185] Call Trace: [ 1481.008764] dump_stack+0x1b2/0x281 [ 1481.012387] dump_header+0x178/0x82f [ 1481.016101] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1481.021198] ? ___ratelimit+0x2cd/0x530 [ 1481.025167] oom_kill_process.cold+0x10/0xb18 [ 1481.029662] out_of_memory+0xe3e/0x1190 [ 1481.033631] ? oom_killer_disable+0x1c0/0x1c0 [ 1481.038118] ? mutex_trylock+0x152/0x1a0 [ 1481.042174] __alloc_pages_nodemask+0x23e1/0x2720 [ 1481.047037] ? kasan_slab_free+0xc3/0x1a0 [ 1481.051181] ? __handle_mm_fault+0xfcb/0x4620 [ 1481.055694] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1481.060532] ? lock_downgrade+0x740/0x740 [ 1481.064677] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1481.069773] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1481.074865] ? debug_check_no_obj_freed+0x2c0/0x680 [ 1481.079874] ? __lock_acquire+0x5fc/0x3f20 [ 1481.084104] alloc_pages_current+0x155/0x260 [ 1481.088511] pte_alloc_one+0x15/0x100 [ 1481.092304] do_fault_around+0x3f1/0x620 [ 1481.096355] __handle_mm_fault+0x2b1f/0x4620 [ 1481.100777] ? vm_insert_page+0x7c0/0x7c0 [ 1481.104916] ? vm_mmap_pgoff+0x168/0x1a0 [ 1481.108970] ? vm_mmap_pgoff+0xcb/0x1a0 [ 1481.112965] handle_mm_fault+0x391/0x860 [ 1481.117029] __do_page_fault+0x549/0xad0 [ 1481.121092] ? spurious_fault+0x640/0x640 [ 1481.125231] ? do_page_fault+0x60/0x500 [ 1481.129190] ? page_fault+0x2f/0x50 [ 1481.132807] page_fault+0x45/0x50 [ 1481.136272] RIP: 7ffff1a0:0x801 [ 1481.139541] RSP: 4bdd1000:00007ffc70936250 EFLAGS: 7ffc70936338 [ 1481.172811] warn_alloc_show_mem: 3 callbacks suppressed [ 1481.172815] Mem-Info: [ 1481.186697] active_anon:74054 inactive_anon:33174 isolated_anon:0 [ 1481.186697] active_file:20 inactive_file:32 isolated_file:0 [ 1481.186697] unevictable:0 dirty:9 writeback:0 unstable:0 [ 1481.186697] slab_reclaimable:13306 slab_unreclaimable:133004 [ 1481.186697] mapped:44013 shmem:33583 pagetables:8720 bounce:0 [ 1481.186697] free:25202 free_pcp:30 free_cma:0 [ 1481.206980] Mem-Info: [ 1481.221587] Node 0 active_anon:278348kB inactive_anon:93352kB active_file:0kB inactive_file:64kB unevictable:0kB isolated(anon):0kB isolated(file):16kB mapped:139632kB dirty:0kB writeback:0kB shmem:94708kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 225280kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1481.225683] active_anon:74032 inactive_anon:33174 isolated_anon:0 [ 1481.225683] active_file:0 inactive_file:34 isolated_file:4 [ 1481.225683] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1481.225683] slab_reclaimable:13306 slab_unreclaimable:133026 [ 1481.225683] mapped:43989 shmem:33583 pagetables:8701 bounce:0 [ 1481.225683] free:25204 free_pcp:66 free_cma:0 [ 1481.250493] Node 1 active_anon:17780kB inactive_anon:39344kB active_file:0kB inactive_file:72kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:36324kB dirty:0kB writeback:0kB shmem:39624kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1481.250498] Node 0 DMA free:11064kB min:204kB low:252kB high:300kB active_anon:52kB inactive_anon:8kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:52kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1481.250520] lowmem_reserve[]: 0 2717 [ 1481.287058] Node 0 active_anon:278348kB inactive_anon:93352kB active_file:0kB inactive_file:64kB unevictable:0kB isolated(anon):0kB isolated(file):16kB mapped:139632kB dirty:0kB writeback:0kB shmem:94708kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 225280kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1481.310949] 2718 2718 2718 [ 1481.310963] Node 0 DMA32 free:36176kB min:36200kB low:45248kB high:54296kB active_anon:278296kB inactive_anon:93344kB active_file:0kB inactive_file:64kB unevictable:0kB writepending:0kB present:3129332kB managed:2788136kB mlocked:0kB kernel_stack:11712kB pagetables:15664kB bounce:0kB free_pcp:144kB local_pcp:120kB free_cma:0kB [ 1481.310985] lowmem_reserve[]: 0 0 0 0 0 [ 1481.311004] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1481.311024] lowmem_reserve[]: 0 0 0 0 0 [ 1481.311045] Node 1 Normal free:53576kB min:53696kB low:67120kB high:80544kB active_anon:17780kB inactive_anon:39344kB active_file:0kB inactive_file:72kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:6432kB pagetables:19088kB bounce:0kB free_pcp:120kB local_pcp:120kB free_cma:0kB [ 1481.311066] lowmem_reserve[]: 0 0 0 0 0 [ 1481.311088] Node 0 [ 1481.343628] Node 1 active_anon:17780kB inactive_anon:39344kB active_file:0kB inactive_file:72kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:36324kB dirty:0kB writeback:0kB shmem:39624kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1481.369320] DMA: [ 1481.378179] Node 0 [ 1481.414855] 12*4kB [ 1481.435157] DMA free:11064kB min:204kB low:252kB high:300kB active_anon:52kB inactive_anon:8kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:52kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1481.464023] (UME) 9*8kB (UME) 8*16kB (UME) 4*32kB (UM) 3*64kB (UME) 2*128kB (ME) 2*256kB (UE) 3*512kB (UME) 2*1024kB (ME) 3*2048kB (ME) 0*4096kB = 11064kB [ 1481.464092] Node 0 DMA32: 323*4kB (UME) 349*8kB (UME) [ 1481.471459] lowmem_reserve[]: [ 1481.497510] 91*16kB (UME) 40*32kB (UME) 69*64kB (UM) 191*128kB (UM) 2*256kB (UM) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36196kB [ 1481.497591] Node 0 Normal: [ 1481.505994] 0 [ 1481.543584] 0*4kB [ 1481.547198] 2717 [ 1481.549233] 0*8kB [ 1481.552405] 2718 [ 1481.563866] 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB [ 1481.569873] 2718 [ 1481.570747] 0*1024kB [ 1481.572791] 2718 [ 1481.574919] 0*2048kB [ 1481.582534] 0*4096kB = 0kB [ 1481.582542] Node 1 Normal: 72*4kB (UME) 42*8kB (ME) 23*16kB (UME) 17*32kB (UME) 27*64kB (M) 4*128kB (UM) 77*256kB (UM) 59*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 53696kB [ 1481.582629] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1481.582636] Node 0 hugepages_total=1 hugepages_free=1 hugepages_surp=1 hugepages_size=2048kB [ 1481.582644] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1481.591278] Node 0 [ 1481.591580] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1481.594378] DMA32 free:36176kB min:36200kB low:45248kB high:54296kB active_anon:278296kB inactive_anon:93344kB active_file:0kB inactive_file:64kB unevictable:0kB writepending:0kB present:3129332kB managed:2788136kB mlocked:0kB kernel_stack:11712kB pagetables:15664kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1481.609561] 33617 total pagecache pages [ 1481.609571] 0 pages in swap cache [ 1481.609576] Swap cache stats: add 0, delete 0, find 0/0 [ 1481.609579] Free swap = 0kB [ 1481.609582] Total swap = 0kB [ 1481.609590] 2097051 pages RAM [ 1481.609593] 0 pages HighMem/MovableOnly [ 1481.609596] 363846 pages reserved [ 1481.609600] 0 pages cma reserved [ 1481.712113] lowmem_reserve[]: 0 0 0 0 0 [ 1481.716118] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1481.741704] lowmem_reserve[]: 0 0 0 0 0 [ 1481.745695] Node 1 Normal free:53676kB min:53696kB low:67120kB high:80544kB active_anon:17780kB inactive_anon:39344kB active_file:0kB inactive_file:72kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:6432kB pagetables:19088kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1481.774415] lowmem_reserve[]: 0 0 0 0 0 [ 1481.778419] Node 0 DMA: 9*4kB (ME) 11*8kB (UME) 8*16kB (UME) 4*32kB (UM) 3*64kB (UME) 2*128kB (ME) 2*256kB (UE) 3*512kB (UME) 2*1024kB (ME) 3*2048kB (ME) 0*4096kB = 11068kB [ 1481.794135] Node 0 DMA32: 322*4kB (ME) 343*8kB (ME) 90*16kB (ME) 10*32kB (ME) 51*64kB (UM) 205*128kB (UM) 2*256kB (UM) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 35808kB [ 1481.809026] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1481.819797] Node 1 Normal: 72*4kB (UME) 42*8kB (ME) 23*16kB (UME) 17*32kB (UME) 27*64kB (M) 4*128kB (UM) 77*256kB (UM) 59*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 53696kB [ 1481.837944] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1481.846853] Node 0 hugepages_total=1 hugepages_free=1 hugepages_surp=1 hugepages_size=2048kB [ 1481.855518] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1481.864438] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1481.873069] 33617 total pagecache pages [ 1481.877039] 0 pages in swap cache [ 1481.880511] Swap cache stats: add 0, delete 0, find 0/0 [ 1481.885863] Free swap = 0kB [ 1481.888864] Total swap = 0kB [ 1481.891958] 2097051 pages RAM [ 1481.895054] 0 pages HighMem/MovableOnly [ 1481.899010] 363846 pages reserved [ 1481.902537] 0 pages cma reserved [ 1481.905910] Out of memory (oom_kill_allocating_task): Kill process 2622 (systemd-cgroups) score 0 or sacrifice child [ 1481.916662] Killed process 2622 (systemd-cgroups) total-vm:2496kB, anon-rss:40kB, file-rss:0kB, shmem-rss:0kB [ 1481.937725] oom_reaper: reaped process 1169 (syz-executor.2), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB 20:23:35 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETSNDBUF(r1, 0x400454d4, &(0x7f0000000040)=0x1000) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r2, 0x800454cf, &(0x7f0000000240)) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000080)={'lo\x00', @broadcast}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000180)={0x80000000, 0xa}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x4000, 0x0) ioctl$TUNSETPERSIST(r4, 0x400454cb, 0x1) ioctl$TUNGETFEATURES(r3, 0x800454cf, &(0x7f0000000240)) ioctl$TUNSETOWNER(r3, 0x400454cc, 0xffffffffffffffff) 20:23:36 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r1, 0x800454cf, &(0x7f0000000240)) ioctl$TUNSETSNDBUF(r1, 0x400454d4, &(0x7f0000000040)=0x1000) ioctl$TUNGETFEATURES(0xffffffffffffffff, 0x800454cf, &(0x7f0000000240)) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000080)={'lo\x00', @broadcast}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000180)={0x80000000, 0xa}) openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) [ 1482.376288] systemd[1]: systemd-journald.service: Main process exited, code=killed, status=9/KILL [ 1482.428536] systemd[1]: Failed to start Journal Service. [ 1482.449667] systemd[1]: systemd-journald.service: Unit entered failed state. [ 1482.476991] systemd[1]: systemd-journald.service: Failed with result 'signal'. [ 1482.509086] systemd[1]: systemd-journald.service: Service has no hold-off time, scheduling restart. [ 1482.529285] systemd[1]: Stopped Journal Service. [ 1482.565460] systemd[1]: Starting Journal Service... [ 1482.885460] systemd-journald[2633]: File /run/log/journal/04d8c135ee6b410280ba31a58c89679d/system.journal corrupted or uncleanly shut down, renaming and replacing. 20:23:37 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000180)={0x80000000, 0xa}) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x4000, 0x0) [ 1483.328545] syz-executor.4: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1483.341160] syz-executor.1: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1483.372890] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 1483.387640] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 1483.398874] CPU: 0 PID: 2638 Comm: syz-executor.4 Not tainted 4.14.228-syzkaller #0 [ 1483.406686] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1483.416053] Call Trace: [ 1483.418647] dump_stack+0x1b2/0x281 [ 1483.422286] warn_alloc.cold+0x96/0x1cc [ 1483.426282] ? zone_watermark_ok_safe+0x220/0x220 [ 1483.431146] __alloc_pages_nodemask+0x2127/0x2720 [ 1483.435994] ? lock_acquire+0x170/0x3f0 [ 1483.439979] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1483.444820] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1483.450266] ? __mutex_unlock_slowpath+0x75/0x770 [ 1483.455103] alloc_pages_current+0x155/0x260 [ 1483.459509] ion_page_pool_alloc+0x118/0x1b0 [ 1483.463928] ion_system_heap_allocate+0x133/0x8c0 [ 1483.468764] ? ion_alloc+0x187/0x810 [ 1483.472485] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1483.477927] ? ion_system_contig_heap_create+0x130/0x130 [ 1483.483364] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1483.488372] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1483.493206] ion_alloc+0x204/0x810 [ 1483.496742] ? ion_dma_buf_release+0x40/0x40 [ 1483.501158] ? __might_fault+0x177/0x1b0 [ 1483.505239] ion_ioctl+0xea/0x1f0 [ 1483.508706] ? ion_query_heaps+0x360/0x360 [ 1483.512934] ? ion_query_heaps+0x360/0x360 [ 1483.517157] do_vfs_ioctl+0x75a/0xff0 [ 1483.520950] ? ioctl_preallocate+0x1a0/0x1a0 [ 1483.525354] ? lock_downgrade+0x740/0x740 [ 1483.529494] ? __fget+0x225/0x360 [ 1483.532949] ? do_vfs_ioctl+0xff0/0xff0 [ 1483.536928] ? security_file_ioctl+0x83/0xb0 [ 1483.541324] SyS_ioctl+0x7f/0xb0 [ 1483.544675] ? do_vfs_ioctl+0xff0/0xff0 [ 1483.548646] do_syscall_64+0x1d5/0x640 [ 1483.552542] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1483.557718] RIP: 0033:0x466459 [ 1483.560894] RSP: 002b:00007f6a95319188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1483.568590] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1483.575846] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1483.583125] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1483.590380] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1483.597645] R13: 00007ffc0329f33f R14: 00007f6a95319300 R15: 0000000000022000 [ 1483.620457] CPU: 1 PID: 2630 Comm: syz-executor.1 Not tainted 4.14.228-syzkaller #0 [ 1483.628274] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1483.637622] Call Trace: [ 1483.640215] dump_stack+0x1b2/0x281 [ 1483.643867] warn_alloc.cold+0x96/0x1cc [ 1483.647843] ? zone_watermark_ok_safe+0x220/0x220 [ 1483.652790] __alloc_pages_nodemask+0x2127/0x2720 [ 1483.657646] ? lock_acquire+0x170/0x3f0 [ 1483.661627] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1483.666483] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1483.671938] ? __mutex_unlock_slowpath+0x75/0x770 [ 1483.676786] alloc_pages_current+0x155/0x260 [ 1483.681197] ion_page_pool_alloc+0x118/0x1b0 [ 1483.685606] ion_system_heap_allocate+0x133/0x8c0 [ 1483.690467] ? ion_alloc+0x187/0x810 [ 1483.694184] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1483.699649] ? ion_system_contig_heap_create+0x130/0x130 [ 1483.705099] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1483.710118] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1483.714962] ion_alloc+0x204/0x810 [ 1483.718505] ? ion_dma_buf_release+0x40/0x40 [ 1483.722916] ? __might_fault+0x177/0x1b0 [ 1483.726979] ion_ioctl+0xea/0x1f0 [ 1483.730436] ? ion_query_heaps+0x360/0x360 [ 1483.734677] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1483.739780] ? ion_query_heaps+0x360/0x360 [ 1483.744033] do_vfs_ioctl+0x75a/0xff0 [ 1483.747833] ? ioctl_preallocate+0x1a0/0x1a0 [ 1483.752258] ? lock_downgrade+0x740/0x740 [ 1483.756406] ? __fget+0x225/0x360 [ 1483.759860] ? do_vfs_ioctl+0xff0/0xff0 [ 1483.763835] ? security_file_ioctl+0x83/0xb0 [ 1483.768248] SyS_ioctl+0x7f/0xb0 [ 1483.771610] ? do_vfs_ioctl+0xff0/0xff0 [ 1483.775585] do_syscall_64+0x1d5/0x640 [ 1483.779480] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1483.784668] RIP: 0033:0x466459 [ 1483.787856] RSP: 002b:00007f1402e26188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1483.795562] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1483.802828] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1483.810096] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1483.817362] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1483.824629] R13: 00007fff2d7045cf R14: 00007f1402e26300 R15: 0000000000022000 [ 1483.904816] systemd-journald[2633]: /dev/kmsg buffer overrun, some messages lost. [ 1483.933461] systemd[1]: Starting Load/Save RF Kill Switch Status... [ 1484.190674] Mem-Info: [ 1484.193613] active_anon:74394 inactive_anon:35207 isolated_anon:0 [ 1484.193613] active_file:405 inactive_file:710 isolated_file:32 [ 1484.193613] unevictable:0 dirty:18 writeback:0 unstable:0 [ 1484.193613] slab_reclaimable:13307 slab_unreclaimable:132628 [ 1484.193613] mapped:53272 shmem:35633 pagetables:8791 bounce:0 [ 1484.193613] free:28867 free_pcp:434 free_cma:0 [ 1484.390960] Node 0 active_anon:278728kB inactive_anon:101484kB active_file:352kB inactive_file:544kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:144556kB dirty:40kB writeback:0kB shmem:102904kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 225280kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1484.510192] Node 1 active_anon:18348kB inactive_anon:39344kB active_file:1572kB inactive_file:1264kB unevictable:0kB isolated(anon):0kB isolated(file):128kB mapped:68832kB dirty:32kB writeback:0kB shmem:39628kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1484.649332] Node 0 DMA free:11068kB min:204kB low:252kB high:300kB active_anon:52kB inactive_anon:8kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:52kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1484.723718] systemd[1]: Started Load/Save RF Kill Switch Status. [ 1484.783871] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1484.788941] Node 0 DMA32 free:35880kB min:36200kB low:45248kB high:54296kB active_anon:278692kB inactive_anon:101476kB active_file:612kB inactive_file:956kB unevictable:0kB writepending:40kB present:3129332kB managed:2788136kB mlocked:0kB kernel_stack:11872kB pagetables:15868kB bounce:0kB free_pcp:772kB local_pcp:652kB free_cma:0kB [ 1484.856719] lowmem_reserve[]: 0 0 0 0 0 [ 1484.863008] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1484.892564] lowmem_reserve[]: 0 0 0 0 0 [ 1484.896572] Node 1 Normal free:94376kB min:53696kB low:67120kB high:80544kB active_anon:18648kB inactive_anon:39344kB active_file:124kB inactive_file:3056kB unevictable:0kB writepending:32kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:6400kB pagetables:19096kB bounce:0kB free_pcp:1392kB local_pcp:688kB free_cma:0kB [ 1484.929390] lowmem_reserve[]: 0 0 0 0 0 [ 1484.933473] Node 0 DMA: 13*4kB (UME) 10*8kB (UME) 8*16kB (UME) 4*32kB (UM) 2*64kB (ME) 3*128kB (UME) 2*256kB (UE) 3*512kB (UME) 2*1024kB (ME) 3*2048kB (ME) 0*4096kB = 11140kB [ 1485.001120] Node 0 DMA32: 162*4kB (ME) 21*8kB (ME) 61*16kB (ME) 924*32kB (UME) 29*64kB (U) 6*128kB (U) 9*256kB (UM) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36288kB [ 1485.058914] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1485.108030] Node 1 Normal: 1464*4kB (UME) 166*8kB (UME) 145*16kB (UME) 102*32kB (UME) 102*64kB (UME) 37*128kB (UM) 2*256kB (UM) 96*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 73696kB [ 1485.183753] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1485.192999] Node 0 hugepages_total=1 hugepages_free=1 hugepages_surp=1 hugepages_size=2048kB [ 1485.224065] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1485.243922] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1485.264075] 36463 total pagecache pages [ 1485.268070] 0 pages in swap cache [ 1485.284545] Swap cache stats: add 0, delete 0, find 0/0 [ 1485.290462] Free swap = 0kB [ 1485.293481] Total swap = 0kB [ 1485.296494] 2097051 pages RAM [ 1485.299595] 0 pages HighMem/MovableOnly [ 1485.343732] 363846 pages reserved [ 1485.347203] 0 pages cma reserved [ 1485.731282] Bluetooth: hci1 command 0x0409 tx timeout [ 1485.894595] systemd[1]: Started Journal Service. [ 1486.510603] IPVS: ftp: loaded support on port[0] = 21 [ 1486.840451] syz-executor.3: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1486.913787] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 1486.918943] CPU: 0 PID: 2627 Comm: syz-executor.3 Not tainted 4.14.228-syzkaller #0 [ 1486.926731] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1486.936083] Call Trace: [ 1486.938678] dump_stack+0x1b2/0x281 [ 1486.942308] warn_alloc.cold+0x96/0x1cc [ 1486.946296] ? zone_watermark_ok_safe+0x220/0x220 [ 1486.951152] __alloc_pages_nodemask+0x2127/0x2720 [ 1486.956014] ? _raw_spin_unlock_irq+0x24/0x80 [ 1486.960515] ? lock_acquire+0x170/0x3f0 [ 1486.964492] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1486.969339] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1486.974793] ? __mutex_unlock_slowpath+0x75/0x770 [ 1486.979638] alloc_pages_current+0x155/0x260 [ 1486.984049] ion_page_pool_alloc+0x118/0x1b0 [ 1486.988469] ion_system_heap_allocate+0x133/0x8c0 [ 1486.993333] ? ion_alloc+0x187/0x810 [ 1486.997061] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1487.002514] ? ion_system_contig_heap_create+0x130/0x130 [ 1487.007964] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1487.012980] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1487.017822] ion_alloc+0x204/0x810 [ 1487.021365] ? ion_dma_buf_release+0x40/0x40 [ 1487.025772] ? __might_fault+0x177/0x1b0 [ 1487.029841] ion_ioctl+0xea/0x1f0 [ 1487.033292] ? ion_query_heaps+0x360/0x360 [ 1487.037528] ? __tun_chr_ioctl.isra.0+0x3310/0x3310 [ 1487.042540] ? ion_query_heaps+0x360/0x360 [ 1487.046774] do_vfs_ioctl+0x75a/0xff0 [ 1487.050574] ? ioctl_preallocate+0x1a0/0x1a0 [ 1487.054983] ? lock_downgrade+0x740/0x740 [ 1487.059137] ? __fget+0x225/0x360 [ 1487.062587] ? do_vfs_ioctl+0xff0/0xff0 [ 1487.066560] ? security_file_ioctl+0x83/0xb0 [ 1487.070986] SyS_ioctl+0x7f/0xb0 [ 1487.074352] ? do_vfs_ioctl+0xff0/0xff0 [ 1487.078326] do_syscall_64+0x1d5/0x640 [ 1487.082224] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1487.087411] RIP: 0033:0x466459 [ 1487.090596] RSP: 002b:00007f6ba9361188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1487.098303] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1487.105567] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1487.112833] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1487.120116] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1487.127382] R13: 00007ffd9352709f R14: 00007f6ba9361300 R15: 0000000000022000 [ 1487.193586] warn_alloc_show_mem: 1 callbacks suppressed [ 1487.193591] Mem-Info: [ 1487.201444] active_anon:74355 inactive_anon:35209 isolated_anon:0 [ 1487.201444] active_file:19 inactive_file:13 isolated_file:2 [ 1487.201444] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1487.201444] slab_reclaimable:13295 slab_unreclaimable:133277 [ 1487.201444] mapped:52669 shmem:35636 pagetables:8717 bounce:0 [ 1487.201444] free:25012 free_pcp:107 free_cma:0 [ 1487.234840] Node 0 active_anon:278812kB inactive_anon:101492kB active_file:44kB inactive_file:20kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:144388kB dirty:0kB writeback:0kB shmem:102916kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 225280kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1487.263260] Node 1 active_anon:18608kB inactive_anon:39344kB active_file:32kB inactive_file:32kB unevictable:0kB isolated(anon):0kB isolated(file):8kB mapped:66288kB dirty:0kB writeback:0kB shmem:39628kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1487.323269] Node 0 DMA free:11056kB min:204kB low:252kB high:300kB active_anon:52kB inactive_anon:8kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:52kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1487.349925] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1487.355026] Node 0 DMA32 free:35744kB min:36200kB low:45248kB high:54296kB active_anon:278760kB inactive_anon:101484kB active_file:468kB inactive_file:12kB unevictable:0kB writepending:0kB present:3129332kB managed:2788136kB mlocked:0kB kernel_stack:11776kB pagetables:15864kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1487.384062] lowmem_reserve[]: 0 0 0 0 0 [ 1487.388055] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1487.447523] lowmem_reserve[]: 0 0 0 0 0 [ 1487.451579] Node 1 Normal free:53248kB min:53696kB low:67120kB high:80544kB active_anon:18608kB inactive_anon:39344kB active_file:148kB inactive_file:148kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:6336kB pagetables:18952kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1487.480558] lowmem_reserve[]: 0 0 0 0 0 [ 1487.484555] Node 0 DMA: 10*4kB (UME) 9*8kB (UME) 8*16kB (UME) 4*32kB (UM) 3*64kB (UME) 2*128kB (ME) 2*256kB (UE) 3*512kB (UME) 2*1024kB (ME) 3*2048kB (ME) 0*4096kB = 11056kB [ 1487.500305] Node 0 DMA32: 188*4kB (UME) 22*8kB (ME) 68*16kB (ME) 1046*32kB (UME) 14*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36384kB [ 1487.529195] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1487.539976] Node 1 Normal: 950*4kB (UME) 721*8kB (UME) 702*16kB (UME) 216*32kB (UME) 22*64kB (UME) 8*128kB (UM) 5*256kB (UM) 43*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 53440kB [ 1487.570436] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1487.579276] Node 0 hugepages_total=1 hugepages_free=1 hugepages_surp=1 hugepages_size=2048kB [ 1487.598507] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1487.607396] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1487.615996] 35689 total pagecache pages [ 1487.619972] 0 pages in swap cache [ 1487.623475] Swap cache stats: add 0, delete 0, find 0/0 [ 1487.628828] Free swap = 0kB [ 1487.631871] Total swap = 0kB [ 1487.640435] 2097051 pages RAM [ 1487.643539] 0 pages HighMem/MovableOnly [ 1487.647512] 363846 pages reserved [ 1487.660424] 0 pages cma reserved [ 1487.810483] Bluetooth: hci1 command 0x041b tx timeout [ 1488.049352] oom_reaper: reaped process 2603 (syz-executor.5), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1488.098564] oom_reaper: reaped process 2630 (syz-executor.1), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1488.162661] systemd-journal invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1488.195049] systemd-journal cpuset=/ mems_allowed=0-1 [ 1488.200278] CPU: 1 PID: 2633 Comm: systemd-journal Not tainted 4.14.228-syzkaller #0 [ 1488.208148] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1488.217494] Call Trace: [ 1488.220086] dump_stack+0x1b2/0x281 [ 1488.223713] dump_header+0x178/0x82f [ 1488.227423] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1488.232517] ? ___ratelimit+0x2cd/0x530 [ 1488.236508] oom_kill_process.cold+0x10/0xb18 [ 1488.241010] out_of_memory+0xe3e/0x1190 [ 1488.244986] ? oom_killer_disable+0x1c0/0x1c0 [ 1488.249475] ? mutex_trylock+0x152/0x1a0 [ 1488.253531] __alloc_pages_nodemask+0x23e1/0x2720 [ 1488.258385] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1488.260519] syz-executor.1: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1488.263248] alloc_pages_current+0x155/0x260 [ 1488.263250] (null) [ 1488.263256] syz-executor.1 cpuset= [ 1488.274505] filemap_fault+0xea3/0x1980 [ 1488.274525] ext4_filemap_fault+0x84/0xb0 [ 1488.274535] __do_fault+0xfa/0x380 [ 1488.274551] __handle_mm_fault+0x2497/0x4620 [ 1488.274562] ? ep_poll+0x1ab/0xa50 [ 1488.274572] ? vm_insert_page+0x7c0/0x7c0 [ 1488.307672] / mems_allowed=0-1 [ 1488.308307] handle_mm_fault+0x391/0x860 [ 1488.315560] __do_page_fault+0x549/0xad0 [ 1488.319613] ? spurious_fault+0x640/0x640 [ 1488.323750] ? do_page_fault+0x60/0x500 [ 1488.327718] ? page_fault+0x2f/0x50 [ 1488.331341] page_fault+0x45/0x50 [ 1488.334798] RIP: 0001:0x1 [ 1488.337550] RSP: c1a4e1e0:00007fffb4518fb0 EFLAGS: 7fffb4518dc0 [ 1488.348244] CPU: 0 PID: 2630 Comm: syz-executor.1 Not tainted 4.14.228-syzkaller #0 [ 1488.348704] Mem-Info: [ 1488.354306] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1488.354310] Call Trace: [ 1488.354328] dump_stack+0x1b2/0x281 [ 1488.354342] warn_alloc.cold+0x96/0x1cc [ 1488.362147] active_anon:73821 inactive_anon:35209 isolated_anon:0 [ 1488.362147] active_file:67 inactive_file:0 isolated_file:0 [ 1488.362147] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1488.362147] slab_reclaimable:13295 slab_unreclaimable:133261 [ 1488.362147] mapped:52643 shmem:35636 pagetables:8716 bounce:0 [ 1488.362147] free:13831 free_pcp:156 free_cma:0 [ 1488.364514] ? zone_watermark_ok_safe+0x220/0x220 [ 1488.373908] Node 0 active_anon:276744kB inactive_anon:101492kB active_file:140kB inactive_file:20kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:144380kB dirty:0kB writeback:0kB shmem:102916kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 223232kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1488.376412] ? usleep_range+0x130/0x130 [ 1488.380022] Node 1 active_anon:18540kB inactive_anon:39344kB active_file:128kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:66192kB dirty:0kB writeback:0kB shmem:39628kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1488.383969] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1488.383983] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1488.384006] ? run_timer_softirq+0x5a0/0x5a0 [ 1488.417250] Node 0 [ 1488.422081] __alloc_pages_nodemask+0x2127/0x2720 [ 1488.422099] ? lock_acquire+0x170/0x3f0 [ 1488.450224] DMA free:10964kB min:204kB low:252kB high:300kB active_anon:52kB inactive_anon:8kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:52kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1488.454171] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1488.454184] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1488.481430] lowmem_reserve[]: [ 1488.486504] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1488.491502] 0 [ 1488.495886] alloc_pages_current+0x155/0x260 [ 1488.498083] 2717 [ 1488.502912] ion_page_pool_alloc+0x118/0x1b0 [ 1488.502922] ion_system_heap_allocate+0x133/0x8c0 [ 1488.502932] ? ion_alloc+0x187/0x810 [ 1488.506891] 2718 [ 1488.532660] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1488.532671] ? ion_system_contig_heap_create+0x130/0x130 [ 1488.532680] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1488.532694] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1488.537514] 2718 [ 1488.541994] ion_alloc+0x204/0x810 [ 1488.542010] ? ion_dma_buf_release+0x40/0x40 [ 1488.542022] ? __might_fault+0x177/0x1b0 [ 1488.545101] 2718 [ 1488.550534] ion_ioctl+0xea/0x1f0 [ 1488.550544] ? ion_query_heaps+0x360/0x360 [ 1488.550562] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1488.556728] ? ion_query_heaps+0x360/0x360 [ 1488.558765] Node 0 [ 1488.563158] do_vfs_ioctl+0x75a/0xff0 [ 1488.563171] ? ioctl_preallocate+0x1a0/0x1a0 [ 1488.563182] ? lock_downgrade+0x740/0x740 [ 1488.568011] DMA32 free:17524kB min:36200kB low:45248kB high:54296kB active_anon:276692kB inactive_anon:101484kB active_file:140kB inactive_file:20kB unevictable:0kB writepending:0kB present:3129332kB managed:2788136kB mlocked:0kB kernel_stack:11776kB pagetables:15864kB bounce:0kB free_pcp:352kB local_pcp:120kB free_cma:0kB [ 1488.571700] ? __fget+0x225/0x360 [ 1488.571710] ? do_vfs_ioctl+0xff0/0xff0 [ 1488.571722] ? security_file_ioctl+0x83/0xb0 [ 1488.573756] lowmem_reserve[]: [ 1488.579192] SyS_ioctl+0x7f/0xb0 [ 1488.584650] 0 [ 1488.589629] ? do_vfs_ioctl+0xff0/0xff0 [ 1488.594469] 0 [ 1488.596498] do_syscall_64+0x1d5/0x640 [ 1488.600007] 0 [ 1488.604403] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1488.604411] RIP: 0033:0x466459 [ 1488.604418] RSP: 002b:00007f1402e26188 EFLAGS: 00000246 [ 1488.608459] 0 [ 1488.610517] ORIG_RAX: 0000000000000010 [ 1488.610523] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1488.610529] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1488.610534] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1488.610539] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1488.610552] R13: 00007fff2d7045cf R14: 00007f1402e26300 R15: 0000000000022000 [ 1488.614009] 0 [ 1488.758898] syz-executor.5: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1488.778046] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 1488.787741] CPU: 1 PID: 2603 Comm: syz-executor.5 Not tainted 4.14.228-syzkaller #0 [ 1488.795535] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1488.804894] Call Trace: [ 1488.807488] dump_stack+0x1b2/0x281 [ 1488.811116] warn_alloc.cold+0x96/0x1cc [ 1488.815099] ? zone_watermark_ok_safe+0x220/0x220 [ 1488.819938] ? usleep_range+0x130/0x130 [ 1488.823912] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1488.829017] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1488.834042] ? run_timer_softirq+0x5a0/0x5a0 [ 1488.838453] __alloc_pages_nodemask+0x2127/0x2720 [ 1488.843299] ? lock_acquire+0x170/0x3f0 [ 1488.847274] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1488.852114] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1488.856625] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1488.862101] alloc_pages_current+0x155/0x260 [ 1488.866519] ion_page_pool_alloc+0x118/0x1b0 [ 1488.870931] ion_system_heap_allocate+0x133/0x8c0 [ 1488.875772] ? ion_alloc+0x187/0x810 [ 1488.879484] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1488.885058] ? ion_system_contig_heap_create+0x130/0x130 [ 1488.890511] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1488.895553] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1488.900396] ion_alloc+0x204/0x810 [ 1488.903938] ? ion_dma_buf_release+0x40/0x40 [ 1488.908346] ? __might_fault+0x177/0x1b0 [ 1488.912407] ion_ioctl+0xea/0x1f0 [ 1488.915869] ? ion_query_heaps+0x360/0x360 [ 1488.920119] ? __tun_chr_ioctl.isra.0+0x3310/0x3310 [ 1488.925152] ? ion_query_heaps+0x360/0x360 [ 1488.929393] do_vfs_ioctl+0x75a/0xff0 [ 1488.933200] ? ioctl_preallocate+0x1a0/0x1a0 [ 1488.937603] ? lock_downgrade+0x740/0x740 [ 1488.941749] ? __fget+0x225/0x360 [ 1488.945203] ? do_vfs_ioctl+0xff0/0xff0 [ 1488.949174] ? security_file_ioctl+0x83/0xb0 [ 1488.953580] SyS_ioctl+0x7f/0xb0 [ 1488.956940] ? do_vfs_ioctl+0xff0/0xff0 [ 1488.960919] do_syscall_64+0x1d5/0x640 [ 1488.964822] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1488.970009] RIP: 0033:0x466459 [ 1488.973203] RSP: 002b:00007f2761281188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1488.980911] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1488.988172] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1488.995442] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1489.002707] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1489.009975] R13: 00007ffddf757caf R14: 00007f2761281300 R15: 0000000000022000 [ 1489.022934] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1489.053151] lowmem_reserve[]: 0 0 0 0 0 [ 1489.057188] Node 1 Normal free:26836kB min:53696kB low:67120kB high:80544kB active_anon:18540kB inactive_anon:39344kB active_file:52kB inactive_file:0kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:6336kB pagetables:18948kB bounce:0kB free_pcp:272kB local_pcp:188kB free_cma:0kB [ 1489.091299] lowmem_reserve[]: 0 0 0 0 0 [ 1489.092636] Mem-Info: [ 1489.095325] Node 0 DMA: [ 1489.097742] active_anon:73796 inactive_anon:35209 isolated_anon:0 [ 1489.097742] active_file:14 inactive_file:9 isolated_file:11 [ 1489.097742] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1489.097742] slab_reclaimable:13288 slab_unreclaimable:133241 [ 1489.097742] mapped:52643 shmem:35636 pagetables:8716 bounce:0 [ 1489.097742] free:13851 free_pcp:158 free_cma:0 [ 1489.097761] Node 0 active_anon:276660kB inactive_anon:101492kB active_file:40kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):44kB mapped:144380kB dirty:0kB writeback:0kB shmem:102916kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 223232kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1489.101827] 9*4kB (ME) 8*8kB (ME) 7*16kB (ME) 4*32kB (UM) 2*64kB (ME) 2*128kB (ME) 2*256kB (UE) 3*512kB (UME) 2*1024kB (ME) 3*2048kB (ME) 0*4096kB = 10964kB [ 1489.176969] Node 1 active_anon:18524kB inactive_anon:39344kB active_file:16kB inactive_file:40kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:66192kB dirty:0kB writeback:0kB shmem:39628kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1489.204346] Node 0 DMA32: 187*4kB (ME) 23*8kB (UME) 68*16kB (ME) 11*32kB (ME) 206*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 1*2048kB (M) 0*4096kB = 17604kB [ 1489.218617] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1489.243703] Node 1 Normal: 75*4kB (ME) 69*8kB (UME) 52*16kB (UME) 26*32kB (ME) 68*64kB (UME) 9*128kB (UM) 7*256kB (UM) 41*512kB (U) 32*1024kB (U) 0*2048kB 0*4096kB = 63572kB [ 1489.270437] Node 0 DMA free:10964kB min:204kB low:252kB high:300kB active_anon:52kB inactive_anon:8kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:52kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1489.313106] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1489.333051] Node 0 hugepages_total=1 hugepages_free=1 hugepages_surp=1 hugepages_size=2048kB [ 1489.353043] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1489.362600] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1489.367662] Node 0 DMA32 free:224964kB min:36200kB low:45248kB high:54296kB active_anon:276608kB inactive_anon:101484kB active_file:40kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2788136kB mlocked:0kB kernel_stack:11776kB pagetables:15864kB bounce:0kB free_pcp:360kB local_pcp:128kB free_cma:0kB [ 1489.414163] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1489.430686] lowmem_reserve[]: 0 0 0 0 0 [ 1489.434202] 35670 total pagecache pages [ 1489.434703] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1489.438682] 0 pages in swap cache [ 1489.438691] Swap cache stats: add 0, delete 0, find 0/0 [ 1489.464291] lowmem_reserve[]: [ 1489.500504] Free swap = 0kB [ 1489.503684] 0 [ 1489.506621] Total swap = 0kB [ 1489.506628] 0 [ 1489.508413] 2097051 pages RAM [ 1489.516353] 0 pages HighMem/MovableOnly [ 1489.520313] 363846 pages reserved [ 1489.523802] 0 pages cma reserved [ 1489.527162] Out of memory (oom_kill_allocating_task): Kill process 2633 (systemd-journal) score 0 or sacrifice child [ 1489.580486] 0 0 0 [ 1489.580516] Killed process 2633 (systemd-journal) total-vm:46096kB, anon-rss:464kB, file-rss:0kB, shmem-rss:1672kB [ 1489.582662] Node 1 Normal free:866100kB min:53696kB low:67120kB high:80544kB active_anon:18524kB inactive_anon:39344kB active_file:16kB inactive_file:40kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:6336kB pagetables:18948kB bounce:0kB free_pcp:1276kB local_pcp:680kB free_cma:0kB [ 1489.624630] oom_reaper: reaped process 2633 (systemd-journal), now anon-rss:0kB, file-rss:0kB, shmem-rss:1672kB [ 1489.649911] lowmem_reserve[]: 0 0 0 0 0 [ 1489.703724] Node 0 DMA: 12*4kB (UME) 11*8kB (UME) 8*16kB (UME) 5*32kB (UM) 9*64kB (UME) 2*128kB (ME) 2*256kB (UE) 3*512kB (UME) 2*1024kB (ME) 3*2048kB (ME) 0*4096kB = 11496kB [ 1489.728675] Node 0 DMA32: 6045*4kB (UME) 5218*8kB (UE) 1792*16kB (UE) 494*32kB (UME) 1728*64kB (UM) 751*128kB (U) 60*256kB (U) 1*512kB (U) 5*1024kB (U) 1*2048kB (M) 0*4096kB = 340164kB [ 1489.758479] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1489.803869] Node 1 Normal: 4340*4kB (UME) 2744*8kB (UME) 1313*16kB (UME) 865*32kB (UME) 7930*64kB (UME) 2156*128kB (UM) 122*256kB (UM) 54*512kB (U) 33*1024kB (U) 0*2048kB 0*4096kB = 964160kB [ 1489.872886] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1489.890471] Bluetooth: hci1 command 0x040f tx timeout [ 1489.921097] Node 0 hugepages_total=1 hugepages_free=1 hugepages_surp=1 hugepages_size=2048kB [ 1489.932755] systemd[1]: systemd-journald.service: Failed with result 'signal'. [ 1489.976583] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1489.991113] systemd[1]: systemd-journald.service: Service has no hold-off time, scheduling restart. [ 1490.006930] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1490.040746] 37298 total pagecache pages [ 1490.048272] systemd[1]: Stopped Journal Service. [ 1490.070526] 0 pages in swap cache [ 1490.074042] Swap cache stats: add 0, delete 0, find 0/0 [ 1490.079408] Free swap = 0kB [ 1490.103778] systemd[1]: Starting Journal Service... [ 1490.109123] Total swap = 0kB [ 1490.112220] 2097051 pages RAM [ 1490.115334] 0 pages HighMem/MovableOnly [ 1490.119303] 363846 pages reserved [ 1490.150500] 0 pages cma reserved [ 1490.407014] systemd-journald[2655]: File /run/log/journal/04d8c135ee6b410280ba31a58c89679d/system.journal corrupted or uncleanly shut down, renaming and replacing. [ 1491.238966] chnl_net:caif_netlink_parms(): no params data found [ 1491.320840] syz-executor.1: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1491.325768] syz-executor.0: page allocation failure: order:5, mode:0x1084020(GFP_ATOMIC|__GFP_COMP), nodemask=(null) [ 1491.333617] syz-executor.5: [ 1491.343336] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 1491.351510] CPU: 1 PID: 2634 Comm: syz-executor.0 Not tainted 4.14.228-syzkaller #0 [ 1491.359302] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1491.360453] page allocation failure: order:4 [ 1491.368648] Call Trace: [ 1491.368659] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1491.373053] dump_stack+0x1b2/0x281 [ 1491.373067] warn_alloc.cold+0x96/0x1cc [ 1491.373077] ? zone_watermark_ok_safe+0x220/0x220 [ 1491.373090] ? wake_all_kswapds+0x175/0x360 [ 1491.373103] __alloc_pages_nodemask+0x2127/0x2720 [ 1491.375701] syz-executor.1 cpuset= [ 1491.382777] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1491.382786] ? __alloc_pages_nodemask+0x1a6e/0x2720 [ 1491.382804] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1491.382811] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1491.382827] ? cache_alloc_refill+0x2fa/0x350 [ 1491.382835] ? ____cache_alloc_node+0x156/0x1d0 [ 1491.382845] cache_grow_begin+0x91/0x630 [ 1491.390752] / [ 1491.395254] ? cache_grow_begin+0x91/0x630 [ 1491.399556] mems_allowed=0-1 [ 1491.404380] fallback_alloc+0x207/0x2c0 [ 1491.404393] __kmalloc+0x213/0x400 [ 1491.404402] ? batadv_hash_new+0xaa/0x270 [ 1491.404415] batadv_hash_new+0xaa/0x270 [ 1491.420437] (null) [ 1491.422758] ? batadv_hash_set_lock_class+0x9a/0xf0 [ 1491.427577] syz-executor.5 cpuset= [ 1491.432060] batadv_tt_init+0x2b2/0x390 [ 1491.432070] batadv_mesh_init+0x478/0x630 [ 1491.432079] batadv_softif_init_late+0xa26/0xc90 [ 1491.432088] ? batadv_get_strings+0x40/0x40 [ 1491.432094] ? dev_valid_name+0x1a0/0x1a0 [ 1491.432102] ? batadv_get_strings+0x40/0x40 [ 1491.432111] register_netdevice+0x291/0xe40 [ 1491.432122] ? netdev_change_features+0xa0/0xa0 [ 1491.432133] ? rtnl_create_link+0x129/0x890 [ 1491.450495] / [ 1491.453836] rtnl_newlink+0x14ff/0x1860 [ 1491.457358] mems_allowed=0-1 [ 1491.461483] ? rtnl_newlink+0x43d/0x1860 [ 1491.461492] ? __lock_acquire+0x5fc/0x3f20 [ 1491.461507] ? trace_hardirqs_on+0x10/0x10 [ 1491.461515] ? rtnl_dellink+0x6a0/0x6a0 [ 1491.461529] ? trace_hardirqs_on+0x10/0x10 [ 1491.511277] systemd[1]: Started Journal Service. [ 1491.514934] ? __read_once_size_nocheck.constprop.0+0x10/0x10 [ 1491.554926] ? deref_stack_reg+0x124/0x1a0 [ 1491.559201] ? lock_acquire+0x170/0x3f0 [ 1491.563164] ? lock_downgrade+0x740/0x740 [ 1491.567302] ? rtnl_dellink+0x6a0/0x6a0 [ 1491.571276] rtnetlink_rcv_msg+0x3be/0xb10 [ 1491.575503] ? rtnl_calcit.isra.0+0x3a0/0x3a0 [ 1491.579999] ? __netlink_lookup+0x345/0x5d0 [ 1491.584327] netlink_rcv_skb+0x125/0x390 [ 1491.588377] ? rtnl_calcit.isra.0+0x3a0/0x3a0 [ 1491.592875] ? netlink_ack+0x9a0/0x9a0 [ 1491.596761] netlink_unicast+0x437/0x610 [ 1491.600825] ? netlink_sendskb+0xd0/0xd0 [ 1491.604888] ? __check_object_size+0x179/0x230 [ 1491.609460] netlink_sendmsg+0x62e/0xb80 [ 1491.613512] ? nlmsg_notify+0x170/0x170 [ 1491.617481] ? security_socket_sendmsg+0x83/0xb0 [ 1491.622224] ? nlmsg_notify+0x170/0x170 [ 1491.626181] sock_sendmsg+0xb5/0x100 [ 1491.629881] SyS_sendto+0x1c7/0x2c0 [ 1491.633494] ? SyS_getpeername+0x220/0x220 [ 1491.637733] ? up_read+0x17/0x30 [ 1491.641085] ? __do_page_fault+0x159/0xad0 [ 1491.645307] ? do_syscall_64+0x4c/0x640 [ 1491.649262] ? SyS_getpeername+0x220/0x220 [ 1491.653484] do_syscall_64+0x1d5/0x640 [ 1491.657361] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1491.662542] RIP: 0033:0x4193ec [ 1491.665713] RSP: 002b:00007ffd041de2e0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 1491.673408] RAX: ffffffffffffffda RBX: 00000000014a4320 RCX: 00000000004193ec [ 1491.680662] RDX: 000000000000003c RSI: 00000000014a4370 RDI: 0000000000000003 [ 1491.687917] RBP: 0000000000000000 R08: 00007ffd041de334 R09: 000000000000000c [ 1491.695188] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1491.702443] R13: 00000000014a4370 R14: 0000000000000003 R15: 0000000000000000 [ 1491.709713] CPU: 0 PID: 2603 Comm: syz-executor.5 Not tainted 4.14.228-syzkaller #0 [ 1491.709766] warn_alloc_show_mem: 1 callbacks suppressed [ 1491.709770] Mem-Info: [ 1491.717507] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1491.722860] active_anon:73701 inactive_anon:37240 isolated_anon:0 [ 1491.722860] active_file:1070 inactive_file:1044 isolated_file:0 [ 1491.722860] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1491.722860] slab_reclaimable:13288 slab_unreclaimable:133078 [ 1491.722860] mapped:54028 shmem:37683 pagetables:8695 bounce:0 [ 1491.722860] free:124164 free_pcp:118 free_cma:0 [ 1491.725238] Call Trace: [ 1491.734609] Node 0 active_anon:277152kB inactive_anon:109616kB active_file:4276kB inactive_file:4156kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:149920kB dirty:0kB writeback:0kB shmem:111104kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 223232kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1491.768348] dump_stack+0x1b2/0x281 [ 1491.770909] Node 1 active_anon:17652kB inactive_anon:39344kB active_file:4kB inactive_file:20kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:66192kB dirty:0kB writeback:0kB shmem:39628kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1491.799180] warn_alloc.cold+0x96/0x1cc [ 1491.802777] Node 0 [ 1491.829836] ? zone_watermark_ok_safe+0x220/0x220 [ 1491.833789] DMA free:11036kB min:204kB low:252kB high:300kB active_anon:52kB inactive_anon:8kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:52kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1491.836012] __alloc_pages_nodemask+0x2127/0x2720 [ 1491.840824] lowmem_reserve[]: [ 1491.866602] ? __schedule+0x893/0x1de0 [ 1491.871415] 0 [ 1491.874515] ? lock_acquire+0x170/0x3f0 [ 1491.878369] 2717 2718 [ 1491.880182] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1491.884118] 2718 [ 1491.886608] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1491.891413] 2718 [ 1491.893464] ? __mutex_unlock_slowpath+0x75/0x770 [ 1491.900936] alloc_pages_current+0x155/0x260 [ 1491.905761] Node 0 DMA32 free:217712kB min:36200kB low:45248kB high:54296kB active_anon:277100kB inactive_anon:109608kB active_file:3876kB inactive_file:4220kB unevictable:0kB writepending:0kB present:3129332kB managed:2788136kB mlocked:0kB kernel_stack:11840kB pagetables:15892kB bounce:0kB free_pcp:472kB local_pcp:120kB free_cma:0kB [ 1491.910173] ion_page_pool_alloc+0x118/0x1b0 [ 1491.910184] ion_system_heap_allocate+0x133/0x8c0 [ 1491.939833] lowmem_reserve[]: [ 1491.944259] ? _raw_spin_unlock+0x29/0x40 [ 1491.949065] 0 [ 1491.952172] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1491.956291] 0 [ 1491.958081] ? ion_system_contig_heap_create+0x130/0x130 [ 1491.962980] 0 [ 1491.964769] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1491.964782] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1491.970200] 0 [ 1491.971990] ion_alloc+0x27a/0x810 [ 1491.977502] 0 [ 1491.982333] ? ion_dma_buf_release+0x40/0x40 [ 1491.987629] ? __might_fault+0x177/0x1b0 [ 1491.989421] Node 0 [ 1491.993828] ion_ioctl+0xea/0x1f0 [ 1491.997876] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1492.000095] ? ion_query_heaps+0x360/0x360 [ 1492.003524] lowmem_reserve[]: [ 1492.028671] ? __tun_chr_ioctl.isra.0+0x3310/0x3310 [ 1492.032874] 0 [ 1492.035971] ? ion_query_heaps+0x360/0x360 [ 1492.040957] 0 [ 1492.042759] do_vfs_ioctl+0x75a/0xff0 [ 1492.046963] 0 [ 1492.048754] ? ioctl_preallocate+0x1a0/0x1a0 [ 1492.052523] 0 [ 1492.054315] ? lock_downgrade+0x740/0x740 [ 1492.058695] 0 [ 1492.060496] ? __fget+0x225/0x360 [ 1492.066413] ? do_vfs_ioctl+0xff0/0xff0 [ 1492.069839] Node 1 [ 1492.073801] ? security_file_ioctl+0x83/0xb0 [ 1492.073818] Normal free:267908kB min:53696kB low:67120kB high:80544kB active_anon:17652kB inactive_anon:39344kB active_file:4kB inactive_file:20kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:6304kB pagetables:18836kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1492.073822] lowmem_reserve[]: [ 1492.076049] SyS_ioctl+0x7f/0xb0 [ 1492.080452] 0 [ 1492.108558] ? do_vfs_ioctl+0xff0/0xff0 [ 1492.111637] 0 [ 1492.115004] do_syscall_64+0x1d5/0x640 [ 1492.116776] 0 [ 1492.120739] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1492.122529] 0 [ 1492.126404] RIP: 0033:0x466459 [ 1492.128189] 0 [ 1492.128197] Node 0 [ 1492.133541] RSP: 002b:00007f2761281188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1492.135328] DMA: [ 1492.138498] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1492.140279] 55*4kB [ 1492.142496] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1492.150179] (UME) [ 1492.152226] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1492.159475] 20*8kB [ 1492.161691] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1492.168954] (UME) [ 1492.171100] R13: 00007ffddf757caf R14: 00007f2761281300 R15: 0000000000022000 [ 1492.178360] 40*16kB [ 1492.181131] Bluetooth: hci1 command 0x0419 tx timeout [ 1492.187841] (UME) 25*32kB [ 1492.190197] CPU: 0 PID: 2630 Comm: syz-executor.1 Not tainted 4.14.228-syzkaller #0 [ 1492.197252] (UM) [ 1492.199567] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1492.204726] 2*64kB (ME) [ 1492.207558] Call Trace: [ 1492.215330] 3*128kB [ 1492.217393] dump_stack+0x1b2/0x281 [ 1492.226717] (UME) 2*256kB [ 1492.229403] warn_alloc.cold+0x96/0x1cc [ 1492.231961] (UE) [ 1492.234276] ? zone_watermark_ok_safe+0x220/0x220 [ 1492.237870] 2*512kB [ 1492.240726] __alloc_pages_nodemask+0x2127/0x2720 [ 1492.244663] (ME) 3*1024kB [ 1492.246735] ? lock_acquire+0x170/0x3f0 [ 1492.251538] (UME) [ 1492.253858] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1492.258798] 2*2048kB (M) [ 1492.261659] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1492.265781] 0*4096kB [ 1492.267927] ? __mutex_unlock_slowpath+0x75/0x770 [ 1492.272737] = 11036kB [ 1492.275481] ? policy_node+0x35/0x110 [ 1492.280924] Node 0 [ 1492.283348] alloc_pages_current+0x155/0x260 [ 1492.288180] DMA32: [ 1492.290586] ion_page_pool_alloc+0x118/0x1b0 [ 1492.294353] 29*4kB [ 1492.296593] ion_system_heap_allocate+0x133/0x8c0 [ 1492.300980] (M) [ 1492.303218] ? _raw_spin_unlock+0x29/0x40 [ 1492.307607] 24*8kB [ 1492.309858] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1492.314696] (M) [ 1492.316741] ? ion_system_contig_heap_create+0x130/0x130 [ 1492.320873] 3735*16kB [ 1492.323114] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1492.328014] (UME) [ 1492.329987] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1492.335404] 4914*32kB [ 1492.337894] ion_alloc+0x27a/0x810 [ 1492.342883] (UME) [ 1492.345044] ? ion_dma_buf_release+0x40/0x40 [ 1492.349853] 4*64kB (U) [ 1492.352345] ? __might_fault+0x177/0x1b0 [ 1492.355867] 0*128kB [ 1492.358007] ion_ioctl+0xea/0x1f0 [ 1492.362500] 0*256kB 0*512kB [ 1492.365094] ? ion_query_heaps+0x360/0x360 [ 1492.369128] 0*1024kB [ 1492.371451] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1492.374873] 0*2048kB [ 1492.377885] ? ion_query_heaps+0x360/0x360 [ 1492.382102] 0*4096kB [ 1492.384504] do_vfs_ioctl+0x75a/0xff0 [ 1492.389574] = 217572kB [ 1492.391975] ? ioctl_preallocate+0x1a0/0x1a0 [ 1492.396202] Node 0 [ 1492.398611] ? lock_downgrade+0x740/0x740 [ 1492.402384] Normal: [ 1492.404889] ? __fget+0x225/0x360 [ 1492.409266] 0*4kB [ 1492.411489] ? do_vfs_ioctl+0xff0/0xff0 [ 1492.415714] 0*8kB 0*16kB [ 1492.418045] ? security_file_ioctl+0x83/0xb0 [ 1492.421465] 0*32kB [ 1492.423602] SyS_ioctl+0x7f/0xb0 [ 1492.427555] 0*64kB 0*128kB [ 1492.430304] ? do_vfs_ioctl+0xff0/0xff0 [ 1492.434692] 0*256kB [ 1492.436988] do_syscall_64+0x1d5/0x640 [ 1492.440329] 0*512kB [ 1492.443253] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1492.447188] 0*1024kB 0*2048kB [ 1492.449518] RIP: 0033:0x466459 [ 1492.453384] 0*4096kB = 0kB [ 1492.455711] RSP: 002b:00007f1402e26188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1492.460899] Node 1 [ 1492.464079] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1492.467247] Normal: [ 1492.470076] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1492.477886] 9800*4kB [ 1492.480112] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1492.487362] (UM) [ 1492.489677] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1492.496940] 6290*8kB [ 1492.499357] R13: 00007fff2d7045cf R14: 00007f1402e26300 R15: 0000000000022000 [ 1492.506604] (UM) 4304*16kB (UM) 3377*32kB (UM) 27*64kB (U) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 268176kB [ 1492.536637] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1492.545475] Node 0 hugepages_total=1 hugepages_free=1 hugepages_surp=1 hugepages_size=2048kB [ 1492.554048] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1492.562890] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1492.571581] 39818 total pagecache pages [ 1492.575553] 0 pages in swap cache [ 1492.578997] Swap cache stats: add 0, delete 0, find 0/0 [ 1492.584350] Free swap = 0kB [ 1492.587362] Total swap = 0kB [ 1492.590443] 2097051 pages RAM [ 1492.593543] 0 pages HighMem/MovableOnly [ 1492.597529] 363846 pages reserved [ 1492.600972] 0 pages cma reserved [ 1492.624938] ODEBUG: assert_init not available (active state 0) object type: timer_list hint: (null) [ 1492.635204] ------------[ cut here ]------------ [ 1492.639994] WARNING: CPU: 1 PID: 2634 at lib/debugobjects.c:287 debug_print_object.cold+0xa7/0xdb [ 1492.649001] Kernel panic - not syncing: panic_on_warn set ... [ 1492.649001] [ 1492.656381] CPU: 1 PID: 2634 Comm: syz-executor.0 Not tainted 4.14.228-syzkaller #0 [ 1492.664174] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1492.673614] Call Trace: [ 1492.676217] dump_stack+0x1b2/0x281 [ 1492.679844] panic+0x1f9/0x42d [ 1492.683032] ? add_taint.cold+0x16/0x16 [ 1492.687039] ? debug_print_object.cold+0xa7/0xdb [ 1492.691797] ? debug_print_object.cold+0xa7/0xdb [ 1492.696552] __warn.cold+0x20/0x44 [ 1492.700706] ? ist_end_non_atomic+0x10/0x10 [ 1492.705027] ? debug_print_object.cold+0xa7/0xdb [ 1492.709785] report_bug+0x208/0x250 [ 1492.713414] do_error_trap+0x195/0x2d0 [ 1492.717297] ? math_error+0x2d0/0x2d0 [ 1492.721212] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1492.726056] invalid_op+0x1b/0x40 [ 1492.729522] RIP: 0010:debug_print_object.cold+0xa7/0xdb [ 1492.734887] RSP: 0018:ffff8881b3007248 EFLAGS: 00010086 [ 1492.740244] RAX: 0000000000000061 RBX: 0000000000000005 RCX: 0000000000000000 [ 1492.747512] RDX: 0000000000000000 RSI: ffffffff878bbbc0 RDI: ffffed1036600e3f [ 1492.754793] RBP: ffffffff878b6e80 R08: 0000000000000061 R09: 0000000000000001 [ 1492.762061] R10: 0000000000000000 R11: ffff888099874000 R12: 0000000000000000 [ 1492.769325] R13: 0000000000000000 R14: ffff8880a544da70 R15: 1ffff11036600e52 [ 1492.776636] ? debug_print_object.cold+0xa7/0xdb [ 1492.781402] debug_object_assert_init+0x1d3/0x2d0 [ 1492.786251] ? debug_object_active_state+0x330/0x330 [ 1492.791379] ? rtnl_newlink+0x14ff/0x1860 [ 1492.795526] ? rtnetlink_rcv_msg+0x3be/0xb10 [ 1492.799950] ? netlink_rcv_skb+0x125/0x390 [ 1492.804234] ? entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1492.809607] del_timer+0x5d/0xe0 [ 1492.812975] ? process_timeout+0x20/0x20 [ 1492.817042] try_to_grab_pending+0x243/0x610 [ 1492.821459] __cancel_work_timer+0x90/0x460 [ 1492.825790] ? work_on_cpu_safe+0x70/0x70 [ 1492.829955] ? batadv_tvlv_handler_get+0x1db/0x2b0 [ 1492.834915] batadv_nc_mesh_free+0x41/0x120 [ 1492.839246] batadv_mesh_free+0x70/0x150 [ 1492.843321] batadv_mesh_init+0x561/0x630 [ 1492.847477] batadv_softif_init_late+0xa26/0xc90 [ 1492.852260] ? batadv_get_strings+0x40/0x40 [ 1492.856586] ? dev_valid_name+0x1a0/0x1a0 [ 1492.860742] ? batadv_get_strings+0x40/0x40 [ 1492.865069] register_netdevice+0x291/0xe40 [ 1492.869400] ? netdev_change_features+0xa0/0xa0 [ 1492.874074] ? rtnl_create_link+0x129/0x890 [ 1492.878405] rtnl_newlink+0x14ff/0x1860 [ 1492.882390] ? rtnl_newlink+0x43d/0x1860 [ 1492.886447] ? __lock_acquire+0x5fc/0x3f20 [ 1492.890697] ? trace_hardirqs_on+0x10/0x10 [ 1492.894936] ? rtnl_dellink+0x6a0/0x6a0 [ 1492.898912] ? trace_hardirqs_on+0x10/0x10 [ 1492.903148] ? __read_once_size_nocheck.constprop.0+0x10/0x10 [ 1492.909032] ? deref_stack_reg+0x124/0x1a0 [ 1492.913295] ? lock_acquire+0x170/0x3f0 [ 1492.917266] ? lock_downgrade+0x740/0x740 [ 1492.921410] ? rtnl_dellink+0x6a0/0x6a0 [ 1492.925403] rtnetlink_rcv_msg+0x3be/0xb10 [ 1492.929640] ? rtnl_calcit.isra.0+0x3a0/0x3a0 [ 1492.934141] ? __netlink_lookup+0x345/0x5d0 [ 1492.938468] netlink_rcv_skb+0x125/0x390 [ 1492.942526] ? rtnl_calcit.isra.0+0x3a0/0x3a0 [ 1492.947018] ? netlink_ack+0x9a0/0x9a0 [ 1492.950914] netlink_unicast+0x437/0x610 [ 1492.954977] ? netlink_sendskb+0xd0/0xd0 [ 1492.959057] ? __check_object_size+0x179/0x230 [ 1492.963670] netlink_sendmsg+0x62e/0xb80 [ 1492.967735] ? nlmsg_notify+0x170/0x170 [ 1492.971714] ? security_socket_sendmsg+0x83/0xb0 [ 1492.976471] ? nlmsg_notify+0x170/0x170 [ 1492.980440] sock_sendmsg+0xb5/0x100 [ 1492.984176] SyS_sendto+0x1c7/0x2c0 [ 1492.987820] ? SyS_getpeername+0x220/0x220 [ 1492.992100] ? up_read+0x17/0x30 [ 1492.995473] ? __do_page_fault+0x159/0xad0 [ 1492.999709] ? do_syscall_64+0x4c/0x640 [ 1493.003681] ? SyS_getpeername+0x220/0x220 [ 1493.007917] do_syscall_64+0x1d5/0x640 [ 1493.011808] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1493.016993] RIP: 0033:0x4193ec [ 1493.020180] RSP: 002b:00007ffd041de2e0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 1493.027890] RAX: ffffffffffffffda RBX: 00000000014a4320 RCX: 00000000004193ec [ 1493.035153] RDX: 000000000000003c RSI: 00000000014a4370 RDI: 0000000000000003 [ 1493.042417] RBP: 0000000000000000 R08: 00007ffd041de334 R09: 000000000000000c [ 1493.049686] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1493.056951] R13: 00000000014a4370 R14: 0000000000000003 R15: 0000000000000000 [ 1493.065120] Kernel Offset: disabled [ 1493.068756] Rebooting in 86400 seconds..