e allocation failure: order:4 [ 1494.379172] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1494.379178] Call Trace: [ 1494.379196] dump_stack+0x1b2/0x281 [ 1494.379208] dump_header+0x178/0x82f [ 1494.379218] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1494.379229] ? ___ratelimit+0x2cd/0x530 [ 1494.383750] lowmem_reserve[]: [ 1494.393154] oom_kill_process.cold+0x10/0xa40 [ 1494.393172] out_of_memory+0xe3e/0x1190 [ 1494.393183] ? oom_killer_disable+0x1c0/0x1c0 [ 1494.395933] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1494.399647] ? mutex_trylock+0x152/0x1a0 [ 1494.403461] (null) [ 1494.408521] __alloc_pages_nodemask+0x23e1/0x2720 [ 1494.412561] syz-executor.5 cpuset= [ 1494.415729] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1494.415738] ? entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1494.415750] ? debug_check_no_obj_freed+0x2c0/0x680 [ 1494.415765] ? cache_grow_begin+0x3f/0x700 [ 1494.420271] 0 [ 1494.424217] cache_grow_begin+0x91/0x700 [ 1494.424230] fallback_alloc+0x207/0x2c0 [ 1494.424241] kmem_cache_alloc+0x1e5/0x3c0 [ 1494.428895] 0 [ 1494.436097] getname_flags+0xc8/0x550 [ 1494.436108] user_path_at_empty+0x2a/0x50 [ 1494.436117] SyS_faccessat+0x21b/0x680 [ 1494.436126] ? SyS_fallocate+0x80/0x80 [ 1494.436133] ? do_syscall_64+0x4c/0x640 [ 1494.436142] ? SyS_faccessat+0x680/0x680 [ 1494.440239] / [ 1494.442376] do_syscall_64+0x1d5/0x640 [ 1494.447553] 0 [ 1494.451066] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1494.455917] mems_allowed=0-1 [ 1494.461347] RIP: 0033:0x7f53aad979c7 [ 1494.466759] 0 [ 1494.471019] RSP: 002b:00007ffee7950d38 EFLAGS: 00000246 [ 1494.472908] 0 [ 1494.477236] ORIG_RAX: 0000000000000015 [ 1494.477242] RAX: ffffffffffffffda RBX: 00007ffee7953d60 RCX: 00007f53aad979c7 [ 1494.477245] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00005613039109a3 [ 1494.477249] RBP: 00007ffee7950e80 R08: 00005613039063e5 R09: 0000000000000018 [ 1494.477252] R10: 0000000000000069 R11: 0000000000000246 R12: 0000000000000000 [ 1494.477256] R13: 0000000000000000 R14: 00005613040ab8a0 R15: 00007ffee7951370 [ 1494.483078] syz-executor.1: [ 1494.492124] CPU: 0 PID: 8598 Comm: syz-executor.5 Not tainted 4.14.232-syzkaller #0 [ 1494.499416] mems_allowed=0-1 [ 1494.500579] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1494.515049] page allocation failure: order:0 [ 1494.515091] Call Trace: [ 1494.519409] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1494.521215] dump_stack+0x1b2/0x281 [ 1494.534985] syz-executor.1 cpuset= [ 1494.535640] warn_alloc.cold+0x96/0x1cc [ 1494.542034] / [ 1494.544045] ? zone_watermark_ok_safe+0x220/0x220 [ 1494.563066] mems_allowed=0-1 [ 1494.565466] __alloc_pages_nodemask+0x2127/0x2720 [ 1494.652244] ? _raw_spin_unlock_irq+0x24/0x80 [ 1494.656828] ? lock_acquire+0x170/0x3f0 [ 1494.661080] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1494.666054] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1494.671684] ? __mutex_unlock_slowpath+0x75/0x770 [ 1494.676528] alloc_pages_current+0x155/0x260 [ 1494.680936] ion_page_pool_alloc+0x118/0x1b0 [ 1494.685437] ion_system_heap_allocate+0x133/0x8c0 [ 1494.690615] ? _raw_spin_unlock+0x29/0x40 [ 1494.694755] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1494.701373] ? ion_system_contig_heap_create+0x130/0x130 [ 1494.707094] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1494.712184] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1494.717480] ion_alloc+0x27a/0x810 [ 1494.721466] ? ion_dma_buf_release+0x40/0x40 [ 1494.726857] ? __might_fault+0x177/0x1b0 [ 1494.731280] ion_ioctl+0xea/0x1f0 [ 1494.734918] ? ion_query_heaps+0x360/0x360 [ 1494.739240] ? ion_query_heaps+0x360/0x360 [ 1494.743576] do_vfs_ioctl+0x75a/0xff0 [ 1494.747483] ? ioctl_preallocate+0x1a0/0x1a0 [ 1494.752368] ? lock_downgrade+0x740/0x740 [ 1494.758046] ? __fget+0x225/0x360 [ 1494.761894] ? do_vfs_ioctl+0xff0/0xff0 [ 1494.766084] ? security_file_ioctl+0x83/0xb0 [ 1494.770668] SyS_ioctl+0x7f/0xb0 [ 1494.774085] ? do_vfs_ioctl+0xff0/0xff0 [ 1494.778266] do_syscall_64+0x1d5/0x640 [ 1494.782158] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1494.786750] Mem-Info: [ 1494.787808] RIP: 0033:0x4665f9 [ 1494.790233] active_anon:12703 inactive_anon:6743 isolated_anon:0 [ 1494.790233] active_file:11 inactive_file:9 isolated_file:1 [ 1494.790233] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1494.790233] slab_reclaimable:24945 slab_unreclaimable:98841 [ 1494.790233] mapped:54740 shmem:6930 pagetables:776 bounce:0 [ 1494.790233] free:13924 free_pcp:30 free_cma:0 [ 1494.793496] RSP: 002b:00007f0b7034c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1494.793506] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1494.793510] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000008 [ 1494.793514] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1494.793519] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1494.793523] R13: 00007fffa2b007df R14: 00007f0b7034c300 R15: 0000000000022000 [ 1494.834428] CPU: 1 PID: 8596 Comm: syz-executor.1 Not tainted 4.14.232-syzkaller #0 [ 1494.844188] Node 1 [ 1494.844467] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1494.852848] Normal free:26716kB min:53696kB low:67120kB high:80544kB active_anon:0kB inactive_anon:0kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1494.861004] Call Trace: [ 1494.861028] dump_stack+0x1b2/0x281 [ 1494.861040] warn_alloc.cold+0x96/0x1cc [ 1494.861052] ? zone_watermark_ok_safe+0x220/0x220 [ 1494.861065] ? usleep_range+0x130/0x130 [ 1494.869150] lowmem_reserve[]: [ 1494.877005] ? try_to_free_pages+0x23f/0x6e0 [ 1494.877016] ? _find_next_bit+0xdb/0x100 [ 1494.877028] ? run_timer_softirq+0x5a0/0x5a0 [ 1494.885840] 0 [ 1494.888275] __alloc_pages_nodemask+0x2127/0x2720 [ 1494.898357] 0 [ 1494.928543] ? lock_acquire+0x170/0x3f0 [ 1494.928560] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1494.928569] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1494.928585] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1494.931636] 0 [ 1494.935598] ? __sanitizer_cov_trace_pc+0xe/0x50 [ 1494.935612] alloc_pages_current+0x155/0x260 [ 1494.935623] ion_page_pool_alloc+0x118/0x1b0 [ 1494.935634] ion_system_heap_allocate+0x133/0x8c0 [ 1494.939804] 0 [ 1494.945372] ? ion_alloc+0x187/0x810 [ 1494.945384] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1494.945393] ? ion_system_contig_heap_create+0x130/0x130 [ 1494.945401] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1494.945412] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1494.945426] ion_alloc+0x204/0x810 [ 1494.949641] 0 [ 1494.952924] ? ion_dma_buf_release+0x40/0x40 [ 1494.962347] ? __might_fault+0x177/0x1b0 [ 1494.967020] Node 0 [ 1494.968789] ion_ioctl+0xea/0x1f0 [ 1494.974546] DMA: [ 1494.976491] ? ion_query_heaps+0x360/0x360 [ 1494.980892] 2*4kB [ 1494.985920] ? ion_query_heaps+0x360/0x360 [ 1494.985932] do_vfs_ioctl+0x75a/0xff0 [ 1494.985945] ? ioctl_preallocate+0x1a0/0x1a0 [ 1494.985957] ? lock_downgrade+0x740/0x740 [ 1494.990612] (UE) [ 1494.996878] ? __fget+0x225/0x360 [ 1494.996888] ? do_vfs_ioctl+0xff0/0xff0 [ 1494.996899] ? security_file_ioctl+0x83/0xb0 [ 1494.996909] SyS_ioctl+0x7f/0xb0 [ 1494.998712] 1*8kB [ 1495.004923] ? do_vfs_ioctl+0xff0/0xff0 [ 1495.004935] do_syscall_64+0x1d5/0x640 [ 1495.004949] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1495.004957] RIP: 0033:0x4665f9 [ 1495.004965] RSP: 002b:00007f22b5267188 EFLAGS: 00000246 [ 1495.011279] (E) [ 1495.016647] ORIG_RAX: 0000000000000010 [ 1495.016653] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1495.016657] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000008 [ 1495.016662] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1495.016666] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1495.016670] R13: 00007ffea96cbc0f R14: 00007f22b5267300 R15: 0000000000022000 [ 1495.024763] CPU: 1 PID: 8573 Comm: syz-executor.3 Not tainted 4.14.232-syzkaller #0 [ 1495.037895] 1*16kB [ 1495.039650] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1495.044845] (E) [ 1495.049699] Call Trace: [ 1495.053360] 2*32kB [ 1495.055161] dump_stack+0x1b2/0x281 [ 1495.059543] (UE) [ 1495.063618] warn_alloc.cold+0x96/0x1cc [ 1495.063631] ? zone_watermark_ok_safe+0x220/0x220 [ 1495.063655] __alloc_pages_nodemask+0x2127/0x2720 [ 1495.065899] 2*64kB [ 1495.069381] ? lock_acquire+0x170/0x3f0 [ 1495.071611] (UE) [ 1495.075861] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1495.075878] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1495.075890] ? __mutex_unlock_slowpath+0x75/0x770 [ 1495.075901] ? alloc_pages_current+0x84/0x260 [ 1495.078054] 2*128kB [ 1495.082379] alloc_pages_current+0x155/0x260 [ 1495.086289] (UE) [ 1495.090778] ion_page_pool_alloc+0x118/0x1b0 [ 1495.094966] 1*256kB [ 1495.097002] ion_system_heap_allocate+0x133/0x8c0 [ 1495.100694] (E) [ 1495.104789] ? _raw_spin_unlock+0x29/0x40 [ 1495.104798] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1495.104807] ? ion_system_contig_heap_create+0x130/0x130 [ 1495.104819] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1495.109391] 4*512kB [ 1495.112760] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1495.115213] Mem-Info: [ 1495.119231] ion_alloc+0x27a/0x810 [ 1495.123389] (UE) [ 1495.128676] ? ion_dma_buf_release+0x40/0x40 [ 1495.131851] 2*1024kB [ 1495.137610] ? __might_fault+0x177/0x1b0 [ 1495.137622] ion_ioctl+0xea/0x1f0 [ 1495.137629] ? ion_query_heaps+0x360/0x360 [ 1495.137641] ? ion_query_heaps+0x360/0x360 [ 1495.139715] active_anon:12690 inactive_anon:6743 isolated_anon:0 [ 1495.139715] active_file:17 inactive_file:17 isolated_file:0 [ 1495.139715] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1495.139715] slab_reclaimable:24937 slab_unreclaimable:98845 [ 1495.139715] mapped:54725 shmem:6930 pagetables:770 bounce:0 [ 1495.139715] free:13821 free_pcp:32 free_cma:0 [ 1495.143936] do_vfs_ioctl+0x75a/0xff0 [ 1495.143947] ? ioctl_preallocate+0x1a0/0x1a0 [ 1495.143957] ? lock_downgrade+0x740/0x740 [ 1495.143970] ? __fget+0x225/0x360 [ 1495.151416] Node 0 active_anon:50760kB inactive_anon:26972kB active_file:72kB inactive_file:60kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:218900kB dirty:0kB writeback:0kB shmem:27720kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1495.159611] ? do_vfs_ioctl+0xff0/0xff0 [ 1495.159623] ? security_file_ioctl+0x83/0xb0 [ 1495.159632] SyS_ioctl+0x7f/0xb0 [ 1495.159641] ? do_vfs_ioctl+0xff0/0xff0 [ 1495.167123] (UE) [ 1495.174633] do_syscall_64+0x1d5/0x640 [ 1495.174648] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1495.174656] RIP: 0033:0x4665f9 [ 1495.174661] RSP: 002b:00007f89f6a27188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1495.174670] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1495.174674] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000007 [ 1495.174682] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1495.182154] 3*2048kB [ 1495.190379] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1495.190384] R13: 00007ffeb438bdef R14: 00007f89f6a27300 R15: 0000000000022000 [ 1495.203406] Node 0 active_anon:50760kB inactive_anon:26972kB active_file:72kB inactive_file:60kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:218900kB dirty:0kB writeback:0kB shmem:27720kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1495.211621] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1495.221338] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1495.231995] Node 0 [ 1495.244554] Node 0 [ 1495.254997] (UME) [ 1495.267612] DMA free:10976kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1495.272326] DMA free:10976kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1495.272916] lowmem_reserve[]: [ 1495.275260] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1495.275281] Node 0 DMA32 free:17592kB min:36200kB low:45248kB high:54296kB active_anon:50760kB inactive_anon:26972kB active_file:72kB inactive_file:60kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7264kB pagetables:3080kB bounce:0kB free_pcp:132kB local_pcp:12kB free_cma:0kB [ 1495.275302] lowmem_reserve[]: [ 1495.282795] 0 [ 1495.293420] 0*4096kB [ 1495.306465] 2717 [ 1495.316919] 0 [ 1495.322456] 2718 [ 1495.324652] 0 [ 1495.330065] 2718 [ 1495.330578] 0 [ 1495.336915] 2718 [ 1495.345640] = 10976kB [ 1495.424612] 0 [ 1495.484183] Node 0 [ 1495.487043] 0 [ 1495.523108] DMA32 free:229056kB min:36200kB low:45248kB high:54296kB active_anon:50760kB inactive_anon:26972kB active_file:72kB inactive_file:1060kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7264kB pagetables:3080kB bounce:0kB free_pcp:464kB local_pcp:340kB free_cma:0kB [ 1495.532515] Node 0 [ 1495.663070] lowmem_reserve[]: [ 1495.753955] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1495.781158] 0 0 0 0 0 [ 1495.784781] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1495.786741] lowmem_reserve[]: 0 0 0 0 0 [ 1495.819705] Node 1 Normal free:121948kB min:53696kB low:67120kB high:80544kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:8kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1495.852560] DMA32: 1053*4kB (UME) 220*8kB (UME) 168*16kB (ME) 56*32kB (ME) 1*64kB (U) 1*128kB (U) 1*256kB (U) 0*512kB 186*1024kB (U) 41*2048kB (U) 14*4096kB (UM) = 342676kB [ 1495.874170] lowmem_reserve[]: 0 0 0 0 0 [ 1495.880113] Node 0 DMA: 2*4kB (UE) 1*8kB (E) 1*16kB (E) 2*32kB (UE) 2*64kB (UE) 2*128kB (UE) 1*256kB (E) 4*512kB (UE) 4*1024kB (UE) 3*2048kB (UME) 0*4096kB = 13024kB [ 1495.893273] lowmem_reserve[]: [ 1495.899676] Node 0 [ 1495.901470] 0 [ 1495.902915] Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1495.903007] Node 1 Normal: 1*4kB (M) 1*8kB (U) 1*16kB (U) 2*32kB (U) 0*64kB 0*128kB 0*256kB 52*512kB (U) 171*1024kB (U) 22*2048kB (U) 0*4096kB = 246876kB [ 1495.903073] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1495.903078] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1495.903085] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1495.908838] 0 [ 1495.921552] Node 0 [ 1495.966346] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1495.978261] 8667 total pagecache pages [ 1495.987237] 0 pages in swap cache [ 1495.990743] Swap cache stats: add 0, delete 0, find 0/0 [ 1495.993046] 0 0 0 [ 1495.997000] Free swap = 0kB [ 1495.998553] Node 1 Normal free:310108kB min:53696kB low:67120kB high:80544kB active_anon:0kB inactive_anon:0kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1496.002019] Total swap = 0kB [ 1496.038017] DMA32: 1051*4kB (E) 310*8kB (UME) 100*16kB (UME) 58*32kB (UME) 326*64kB (U) 10*128kB (U) 123*256kB (U) 49*512kB (U) 62*1024kB (U) 41*2048kB (U) 14*4096kB (UM) = 293660kB [ 1496.059583] 2097051 pages RAM [ 1496.063408] 0 pages HighMem/MovableOnly [ 1496.069904] 363849 pages reserved [ 1496.076446] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1496.088760] 0 pages cma reserved [ 1496.094132] lowmem_reserve[]: 0 0 0 0 0 [ 1496.097158] Node 1 Normal: 1*4kB (M) 1*8kB (U) 1*16kB (U) 2*32kB (U) 1433*64kB (U) 173*128kB (U) 93*256kB (U) 57*512kB (U) 192*1024kB (U) 28*2048kB (U) 6*4096kB (U) = 445468kB [ 1496.122522] Node 0 DMA: 2*4kB (UE) 1*8kB (E) 1*16kB (E) 2*32kB (UE) 2*64kB (UE) 2*128kB (UE) 1*256kB (E) 4*512kB (UE) 4*1024kB (UE) 3*2048kB (UME) 0*4096kB = 13024kB [ 1496.143661] Node 0 DMA32: 1072*4kB (UME) 423*8kB (UE) 32*16kB (UE) 33*32kB (UME) 329*64kB (U) 11*128kB (U) 126*256kB (U) 52*512kB (U) 0*1024kB 4*2048kB (U) 0*4096kB = 98776kB [ 1496.163575] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1496.172865] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1496.185222] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1496.197167] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1496.212797] Node 1 Normal: 70*4kB (UM) 398*8kB (U) 302*16kB (U) 90*32kB (U) 1805*64kB (U) 195*128kB (U) 101*256kB (U) 91*512kB (U) 31*1024kB (U) 29*2048kB (U) 6*4096kB (U) = 339816kB [ 1496.246738] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1496.264026] 9296 total pagecache pages [ 1496.268891] 0 pages in swap cache [ 1496.272360] Swap cache stats: add 0, delete 0, find 0/0 [ 1496.279287] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1496.290914] Free swap = 0kB [ 1496.295695] Total swap = 0kB [ 1496.298942] 2097051 pages RAM [ 1496.302056] 0 pages HighMem/MovableOnly [ 1496.307696] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1496.318285] 363849 pages reserved [ 1496.321975] 0 pages cma reserved [ 1496.327381] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1496.344437] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1496.364423] 9296 total pagecache pages [ 1496.368534] 0 pages in swap cache [ 1496.372389] Swap cache stats: add 0, delete 0, find 0/0 [ 1496.404435] Free swap = 0kB [ 1496.407599] Total swap = 0kB [ 1496.410975] 2097051 pages RAM [ 1496.424453] 0 pages HighMem/MovableOnly [ 1496.434235] 363849 pages reserved [ 1496.437901] 0 pages cma reserved [ 1496.441277] Out of memory (oom_kill_allocating_task): Kill process 4621 (systemd-journal) score 0 or sacrifice child [ 1496.473864] syz-executor.1: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1496.474674] Killed process 4621 (systemd-journal) total-vm:54288kB, anon-rss:508kB, file-rss:0kB, shmem-rss:12792kB [ 1496.487008] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 1496.518491] CPU: 1 PID: 8596 Comm: syz-executor.1 Not tainted 4.14.232-syzkaller #0 [ 1496.527023] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1496.537568] Call Trace: [ 1496.540880] dump_stack+0x1b2/0x281 [ 1496.544868] warn_alloc.cold+0x96/0x1cc [ 1496.548852] ? zone_watermark_ok_safe+0x220/0x220 [ 1496.554070] __alloc_pages_nodemask+0x2127/0x2720 [ 1496.559303] ? lock_acquire+0x170/0x3f0 [ 1496.563638] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1496.568811] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1496.574540] ? __mutex_unlock_slowpath+0x75/0x770 [ 1496.579442] alloc_pages_current+0x155/0x260 [ 1496.583879] ion_page_pool_alloc+0x118/0x1b0 [ 1496.588623] ion_system_heap_allocate+0x133/0x8c0 [ 1496.593566] ? _raw_spin_unlock+0x29/0x40 [ 1496.597985] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1496.603021] ? ion_system_contig_heap_create+0x130/0x130 [ 1496.608938] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1496.614100] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1496.618417] systemd invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null) [ 1496.618953] ion_alloc+0x27a/0x810 [ 1496.618956] , order=1, oom_score_adj=0 [ 1496.618963] systemd cpuset= [ 1496.628547] ? ion_dma_buf_release+0x40/0x40 [ 1496.628559] ? __might_fault+0x177/0x1b0 [ 1496.628569] ion_ioctl+0xea/0x1f0 [ 1496.628577] ? ion_query_heaps+0x360/0x360 [ 1496.628587] ? ion_query_heaps+0x360/0x360 [ 1496.628596] do_vfs_ioctl+0x75a/0xff0 [ 1496.628607] ? ioctl_preallocate+0x1a0/0x1a0 [ 1496.628615] ? lock_downgrade+0x740/0x740 [ 1496.628627] ? __fget+0x225/0x360 [ 1496.628636] ? do_vfs_ioctl+0xff0/0xff0 [ 1496.649252] / [ 1496.651408] ? security_file_ioctl+0x83/0xb0 [ 1496.651422] SyS_ioctl+0x7f/0xb0 [ 1496.685179] mems_allowed=0-1 [ 1496.687706] ? do_vfs_ioctl+0xff0/0xff0 [ 1496.687721] do_syscall_64+0x1d5/0x640 [ 1496.704382] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1496.710391] RIP: 0033:0x4665f9 [ 1496.713671] RSP: 002b:00007f22b5267188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1496.721385] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1496.728777] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000008 [ 1496.736048] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1496.743463] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1496.750887] R13: 00007ffea96cbc0f R14: 00007f22b5267300 R15: 0000000000022000 [ 1496.758874] CPU: 0 PID: 1 Comm: systemd Not tainted 4.14.232-syzkaller #0 [ 1496.759853] warn_alloc_show_mem: 2 callbacks suppressed [ 1496.759856] Mem-Info: [ 1496.765815] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1496.765819] Call Trace: [ 1496.765840] dump_stack+0x1b2/0x281 [ 1496.765851] dump_header+0x178/0x82f [ 1496.765861] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1496.765869] ? ___ratelimit+0x2cd/0x530 [ 1496.765878] oom_kill_process.cold+0x10/0xa40 [ 1496.765888] ? lock_downgrade+0x740/0x740 [ 1496.765902] out_of_memory+0x2dc/0x1190 [ 1496.765914] ? oom_killer_disable+0x1c0/0x1c0 [ 1496.771643] active_anon:13396 inactive_anon:6018 isolated_anon:0 [ 1496.771643] active_file:21 inactive_file:0 isolated_file:0 [ 1496.771643] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1496.771643] slab_reclaimable:24899 slab_unreclaimable:98656 [ 1496.771643] mapped:52219 shmem:6930 pagetables:784 bounce:0 [ 1496.771643] free:16552 free_pcp:169 free_cma:0 [ 1496.774057] ? mutex_trylock+0x152/0x1a0 [ 1496.774070] __alloc_pages_nodemask+0x23e1/0x2720 [ 1496.774089] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1496.774118] ? cache_grow_begin+0x3f/0x700 [ 1496.774128] cache_grow_begin+0x91/0x700 [ 1496.783660] Node 0 active_anon:53584kB inactive_anon:24072kB active_file:80kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:208876kB dirty:0kB writeback:0kB shmem:27720kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1496.786177] fallback_alloc+0x207/0x2c0 [ 1496.789988] Node 1 active_anon:0kB inactive_anon:0kB active_file:4kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1496.794140] kmem_cache_alloc+0x1e5/0x3c0 [ 1496.794152] getname_flags+0xc8/0x550 [ 1496.794162] do_sys_open+0x1ce/0x410 [ 1496.794170] ? filp_open+0x60/0x60 [ 1496.794180] ? do_syscall_64+0x4c/0x640 [ 1496.794186] ? do_sys_open+0x410/0x410 [ 1496.794193] do_syscall_64+0x1d5/0x640 [ 1496.794205] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1496.794212] RIP: 0033:0x7f13024d270d [ 1496.794217] RSP: 002b:00007fffcc960520 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 1496.794225] RAX: ffffffffffffffda RBX: 00005625d65830f0 RCX: 00007f13024d270d [ 1496.794229] RDX: 00000000000001b6 RSI: 0000000000080000 RDI: 00007fffcc960600 [ 1496.794240] RBP: 0000000000000008 R08: 0000000000000008 R09: 0000000000000001 [ 1496.799574] Node 0 [ 1496.803670] R10: 0000000000080000 R11: 0000000000000293 R12: 00007f1303c0c7b4 [ 1496.803675] R13: 0000000000000001 R14: 0000000000000000 R15: 0000000000000002 [ 1496.886242] Mem-Info: [ 1496.909599] DMA free:10988kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1496.917529] syz-executor.5: [ 1496.938716] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1496.938742] Node 0 DMA32 free:17976kB min:36200kB low:45248kB high:54296kB active_anon:53592kB inactive_anon:24072kB active_file:220kB inactive_file:96kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7296kB pagetables:3136kB bounce:0kB free_pcp:336kB local_pcp:216kB free_cma:0kB [ 1496.938761] lowmem_reserve[]: 0 [ 1496.951294] active_anon:13398 inactive_anon:6018 isolated_anon:0 [ 1496.951294] active_file:21 inactive_file:18 isolated_file:0 [ 1496.951294] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1496.951294] slab_reclaimable:24875 slab_unreclaimable:98633 [ 1496.951294] mapped:52242 shmem:6930 pagetables:784 bounce:0 [ 1496.951294] free:13927 free_pcp:114 free_cma:0 [ 1496.954083] 0 0 0 0 [ 1496.954099] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1496.954122] lowmem_reserve[]: [ 1496.958530] Node 0 active_anon:53648kB inactive_anon:24032kB active_file:64kB inactive_file:68kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:208900kB dirty:0kB writeback:0kB shmem:27720kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1496.962086] 0 [ 1496.974895] Node 1 active_anon:0kB inactive_anon:0kB active_file:4kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1496.976260] 0 [ 1496.992799] page allocation failure: order:0 [ 1496.999512] 0 [ 1497.015974] Node 0 [ 1497.017323] 0 [ 1497.033197] DMA free:10988kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1497.054456] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1497.065995] lowmem_reserve[]: [ 1497.092001] 0 [ 1497.092010] Node 1 Normal free:26744kB min:53696kB low:67120kB high:80544kB active_anon:0kB inactive_anon:0kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:120kB local_pcp:0kB free_cma:0kB [ 1497.092030] lowmem_reserve[]: 0 0 0 0 0 [ 1497.092049] Node 0 DMA: 1*4kB (E) 1*8kB (E) 2*16kB (UE) 2*32kB (UE) [ 1497.103644] 0 [ 1497.129043] 2*64kB (UE) 2*128kB (UE) 1*256kB (E) 4*512kB (UE) 2*1024kB (UE) 3*2048kB (UME) 0*4096kB = 10988kB [ 1497.129088] Node 0 DMA32: 1944*4kB [ 1497.139611] 2717 [ 1497.157207] (null) [ 1497.157214] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 1497.157238] CPU: 1 PID: 8598 Comm: syz-executor.5 Not tainted 4.14.232-syzkaller #0 [ 1497.157243] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1497.157247] Call Trace: [ 1497.157267] dump_stack+0x1b2/0x281 [ 1497.157283] warn_alloc.cold+0x96/0x1cc [ 1497.168527] 2718 [ 1497.188636] ? zone_watermark_ok_safe+0x220/0x220 [ 1497.188647] ? usleep_range+0x130/0x130 [ 1497.188655] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1497.188666] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1497.188677] ? run_timer_softirq+0x5a0/0x5a0 [ 1497.190479] 2718 [ 1497.216634] __alloc_pages_nodemask+0x2127/0x2720 [ 1497.216651] ? lock_acquire+0x170/0x3f0 [ 1497.216665] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1497.218770] (UME) [ 1497.223251] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1497.223266] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1497.223284] alloc_pages_current+0x155/0x260 [ 1497.223296] ion_page_pool_alloc+0x118/0x1b0 [ 1497.225181] 652*8kB [ 1497.227434] ion_system_heap_allocate+0x133/0x8c0 [ 1497.229234] (UME) [ 1497.255487] ? _raw_spin_unlock+0x29/0x40 [ 1497.255498] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1497.255507] ? ion_system_contig_heap_create+0x130/0x130 [ 1497.255515] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1497.255530] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1497.262751] 2718 [ 1497.265827] ion_alloc+0x27a/0x810 [ 1497.265840] ? ion_dma_buf_release+0x40/0x40 [ 1497.265852] ? __might_fault+0x177/0x1b0 [ 1497.295988] ion_ioctl+0xea/0x1f0 [ 1497.295999] ? ion_query_heaps+0x360/0x360 [ 1497.296010] ? ion_query_heaps+0x360/0x360 [ 1497.296019] do_vfs_ioctl+0x75a/0xff0 [ 1497.296031] ? ioctl_preallocate+0x1a0/0x1a0 [ 1497.300028] 150*16kB [ 1497.306662] ? lock_downgrade+0x740/0x740 [ 1497.306675] ? __fget+0x225/0x360 [ 1497.306684] ? do_vfs_ioctl+0xff0/0xff0 [ 1497.306696] ? security_file_ioctl+0x83/0xb0 [ 1497.308479] (ME) [ 1497.318773] SyS_ioctl+0x7f/0xb0 [ 1497.318781] ? do_vfs_ioctl+0xff0/0xff0 [ 1497.318795] do_syscall_64+0x1d5/0x640 [ 1497.322431] Node 0 [ 1497.324490] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1497.324498] RIP: 0033:0x4665f9 [ 1497.324504] RSP: 002b:00007f0b7034c188 EFLAGS: 00000246 [ 1497.326646] DMA32 free:18080kB min:36200kB low:45248kB high:54296kB active_anon:53648kB inactive_anon:24032kB active_file:64kB inactive_file:68kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7296kB pagetables:3048kB bounce:0kB free_pcp:340kB local_pcp:124kB free_cma:0kB [ 1497.331758] ORIG_RAX: 0000000000000010 [ 1497.331767] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1497.340234] 59*32kB [ 1497.349913] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000008 [ 1497.349918] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1497.349923] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1497.349929] R13: 00007fffa2b007df R14: 00007f0b7034c300 R15: 0000000000022000 [ 1497.456106] IPVS: ftp: loaded support on port[0] = 21 [ 1497.459811] lowmem_reserve[]: [ 1497.625911] (UME) 7*64kB (M) 1*128kB (U) 1*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18112kB [ 1497.641276] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1497.655527] Node 1 Normal: 1196*4kB (UM) 393*8kB (U) 311*16kB (UM) 96*32kB (UM) 1985*64kB (UM) 260*128kB (UM) 140*256kB (U) 40*512kB (UM) 2*1024kB (U) 17*2048kB (U) 0*4096kB = 269480kB [ 1497.673426] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1497.683746] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1497.693985] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1497.705012] 0 0 0 0 0 [ 1497.708183] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1497.736322] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1497.748773] 7632 total pagecache pages [ 1497.753155] 0 pages in swap cache [ 1497.757645] Swap cache stats: add 0, delete 0, find 0/0 [ 1497.763923] Free swap = 0kB [ 1497.767492] Total swap = 0kB [ 1497.771065] lowmem_reserve[]: 0 0 0 0 0 [ 1497.775828] 2097051 pages RAM [ 1497.779515] 0 pages HighMem/MovableOnly [ 1497.784357] Node 1 Normal free:291856kB min:53696kB low:67120kB high:80544kB active_anon:0kB inactive_anon:0kB active_file:4kB inactive_file:1000kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:868kB local_pcp:236kB free_cma:0kB [ 1497.814209] 363849 pages reserved [ 1497.818587] 0 pages cma reserved [ 1497.909242] lowmem_reserve[]: 0 0 0 0 0 [ 1497.913136] Bluetooth: hci1 command 0x0409 tx timeout [ 1497.932418] Node 0 DMA: 29*4kB (UE) 8*8kB (UE) 2*16kB (UE) 4*32kB (UE) 6*64kB (UE) 3*128kB (UE) 1*256kB (E) 4*512kB (UE) 2*1024kB (UE) 3*2048kB (UME) 0*4096kB = 11604kB [ 1497.938320] chnl_net:caif_netlink_parms(): no params data found [ 1497.983142] Node 0 DMA32: 10850*4kB (UE) 7566*8kB (UME) 1813*16kB (UME) 499*32kB (UME) 382*64kB (UME) 192*128kB (UM) 84*256kB (UM) 113*512kB (U) 6*1024kB (U) 2*2048kB (U) 0*4096kB = 287528kB [ 1498.001744] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1498.012913] Node 1 Normal: 1503*4kB (UM) 683*8kB (U) 324*16kB (UM) 110*32kB (UM) 1976*64kB (UM) 239*128kB (U) 200*256kB (UM) 94*512kB (UM) 4*1024kB (U) 17*2048kB (U) 0*4096kB = 315476kB [ 1498.041316] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1498.054131] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1498.064369] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1498.080150] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1498.090449] 9036 total pagecache pages [ 1498.096373] 0 pages in swap cache [ 1498.101929] Swap cache stats: add 0, delete 0, find 0/0 [ 1498.108142] Free swap = 0kB [ 1498.112258] Total swap = 0kB [ 1498.116306] 2097051 pages RAM [ 1498.119793] 0 pages HighMem/MovableOnly [ 1498.123960] 363849 pages reserved [ 1498.127938] 0 pages cma reserved [ 1498.131325] Out of memory: Kill process 7961 (syz-fuzzer) score 5 or sacrifice child [ 1498.139839] Killed process 7974 (syz-executor.5) total-vm:84924kB, anon-rss:64kB, file-rss:0kB, shmem-rss:0kB [ 1498.180859] oom_reaper: reaped process 7974 (syz-executor.5), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB 09:38:21 executing program 0: r0 = socket(0x28, 0x1, 0x0) accept4(r0, 0x0, 0x0, 0x0) [ 1498.203506] systemd[1]: systemd-journald.service: Failed with result 'signal'. [ 1498.212023] systemd[1]: rsyslog.service: Main process exited, code=killed, status=9/KILL [ 1498.248542] bridge0: port 1(bridge_slave_0) entered blocking state [ 1498.283805] bridge0: port 1(bridge_slave_0) entered disabled state [ 1498.297208] device bridge_slave_0 entered promiscuous mode [ 1498.322164] systemd[1]: rsyslog.service: Unit entered failed state. [ 1498.331716] bridge0: port 2(bridge_slave_1) entered blocking state [ 1498.345355] bridge0: port 2(bridge_slave_1) entered disabled state [ 1498.345977] systemd[1]: rsyslog.service: Failed with result 'signal'. [ 1498.353662] device bridge_slave_1 entered promiscuous mode [ 1498.369155] systemd[1]: Started Load/Save RF Kill Switch Status. [ 1498.403308] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 1498.418001] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1498.441361] systemd[1]: systemd-journald.service: Service has no hold-off time, scheduling restart. [ 1498.498083] systemd[1]: rsyslog.service: Service hold-off time over, scheduling restart. [ 1498.500094] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 1498.518262] systemd[1]: Stopped System Logging Service. [ 1498.524952] team0: Port device team_slave_0 added [ 1498.531027] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 1498.542658] team0: Port device team_slave_1 added [ 1498.563399] systemd[1]: Starting System Logging Service... [ 1498.572154] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1498.579505] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1498.603103] systemd[1]: Stopped Flush Journal to Persistent Storage. [ 1498.606059] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1498.643685] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1498.650139] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1498.677143] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1498.691317] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 1498.718833] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 1498.764251] device hsr_slave_0 entered promiscuous mode [ 1498.770438] device hsr_slave_1 entered promiscuous mode [ 1498.789427] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 1498.801804] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 1498.811177] systemd-journald[8784]: File /run/log/journal/04d8c135ee6b410280ba31a58c89679d/system.journal corrupted or uncleanly shut down, renaming and replacing. [ 1499.074936] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1499.081977] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1499.128502] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1499.146671] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1499.168590] device bridge_slave_1 left promiscuous mode [ 1499.174495] bridge0: port 2(bridge_slave_1) entered disabled state [ 1499.187575] device bridge_slave_0 left promiscuous mode [ 1499.206793] bridge0: port 1(bridge_slave_0) entered disabled state [ 1499.229298] device veth1_macvtap left promiscuous mode [ 1499.234715] device veth0_macvtap left promiscuous mode [ 1499.240068] device veth1_vlan left promiscuous mode [ 1499.272882] device veth0_vlan left promiscuous mode [ 1499.491830] device hsr_slave_1 left promiscuous mode [ 1499.526822] device hsr_slave_0 left promiscuous mode [ 1499.560889] team0 (unregistering): Port device team_slave_1 removed [ 1499.587571] team0 (unregistering): Port device team_slave_0 removed [ 1499.619603] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 1499.656829] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 1499.734555] bond0 (unregistering): Released all slaves [ 1499.777768] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 1499.900166] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1499.919501] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 1499.945862] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 1499.952427] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1499.975779] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1499.997740] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 1500.005714] Bluetooth: hci1 command 0x041b tx timeout [ 1500.026257] 8021q: adding VLAN 0 to HW filter on device team0 [ 1500.055784] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 1500.092871] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1500.101415] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1500.133157] bridge0: port 1(bridge_slave_0) entered blocking state [ 1500.139769] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1500.166976] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1500.188590] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 1500.215967] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1500.225216] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1500.253552] bridge0: port 2(bridge_slave_1) entered blocking state [ 1500.260329] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1500.298540] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 1500.323014] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1500.338677] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 1500.363235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1500.373321] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 1500.393450] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 1500.400920] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1500.425912] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1500.447022] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1500.467549] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1500.487348] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1500.506848] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 1500.522941] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1500.530753] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1500.549111] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 1500.556998] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1500.573784] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1500.594738] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 1500.601190] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1500.639679] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 1500.648781] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 1500.675927] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1500.696106] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1500.720768] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1501.019920] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 1501.038228] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 1501.056706] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1501.065283] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1501.170345] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 1501.184039] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 1501.191335] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 1501.226297] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 1501.243585] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1501.251764] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1501.265220] device veth0_vlan entered promiscuous mode [ 1501.283170] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1501.290507] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1501.318064] device veth1_vlan entered promiscuous mode [ 1501.324556] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 1501.338643] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 1501.359006] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 1501.369048] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 1501.380053] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1501.388880] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1501.400062] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1501.408608] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1501.422267] device veth0_macvtap entered promiscuous mode [ 1501.430388] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 1501.442142] device veth1_macvtap entered promiscuous mode [ 1501.449871] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 1501.460253] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 1501.472145] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 1501.482283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1501.493616] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1501.503451] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1501.514655] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1501.524772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1501.535739] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1501.545853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1501.557032] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1501.568254] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 1501.576816] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1501.585286] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1501.594293] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1501.602100] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1501.610996] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1501.621737] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1501.632888] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1501.643312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1501.653882] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1501.663505] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1501.673571] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1501.683858] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1501.694699] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1501.711709] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 1501.719517] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1501.727057] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1501.736480] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 09:38:25 executing program 3: socket(0x11, 0x2, 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000004980), 0x0, 0x0) getsockopt$X25_QBITINCL(r0, 0x106, 0x1, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x4, 0x7, 0x7, 0x6, 0xa, @remote, @private2={0xfc, 0x2, '\x00', 0x1}, 0x700, 0x20, 0x9, 0x5f3b}}) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000004980), 0x0, 0x0) getsockopt$X25_QBITINCL(r1, 0x106, 0x1, 0x0, 0x0) r2 = socket$vsock_dgram(0x28, 0x2, 0x0) ioctl$sock_SIOCDELRT(r2, 0x890c, &(0x7f0000000180)={0x0, @llc={0x1a, 0x33a, 0x9, 0x6, 0x27, 0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, @vsock={0x28, 0x0, 0x2710}, @isdn={0x22, 0xcb, 0x81, 0x2, 0x69}, 0xfff, 0x0, 0x0, 0x0, 0x81, &(0x7f0000000140)='dummy0\x00', 0x80000000, 0x101, 0x8001}) r3 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000100)={0x80000004, 0x7}) 09:38:25 executing program 1: socket(0x11, 0x2, 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000004980), 0x0, 0x0) getsockopt$X25_QBITINCL(r0, 0x106, 0x1, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x4, 0x7, 0x7, 0x6, 0xa, @remote, @private2={0xfc, 0x2, '\x00', 0x1}, 0x700, 0x20, 0x9, 0x5f3b}}) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000004980), 0x0, 0x0) getsockopt$X25_QBITINCL(r1, 0x106, 0x1, 0x0, 0x0) r2 = socket$vsock_dgram(0x28, 0x2, 0x0) ioctl$sock_SIOCDELRT(r2, 0x890c, &(0x7f0000000180)={0x0, @llc={0x1a, 0x33a, 0x9, 0x6, 0x27, 0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, @vsock={0x28, 0x0, 0x2710}, @isdn={0x22, 0xcb, 0x81, 0x2, 0x69}, 0xfff, 0x0, 0x0, 0x0, 0x81, &(0x7f0000000140)='dummy0\x00', 0x80000000, 0x101, 0x8001}) openat$zero(0xffffffffffffff9c, &(0x7f00000000c0), 0x800, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000100)={0x80000004, 0x7}) 09:38:25 executing program 0: socket(0x11, 0x2, 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000004980), 0x0, 0x0) getsockopt$X25_QBITINCL(r0, 0x106, 0x1, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x4, 0x7, 0x7, 0x6, 0xa, @remote, @private2={0xfc, 0x2, '\x00', 0x1}, 0x700, 0x20, 0x9, 0x5f3b}}) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000004980), 0x0, 0x0) getsockopt$X25_QBITINCL(r1, 0x106, 0x1, 0x0, 0x0) r2 = socket$vsock_dgram(0x28, 0x2, 0x0) ioctl$sock_SIOCDELRT(r2, 0x890c, &(0x7f0000000180)={0x0, @llc={0x1a, 0x33a, 0x9, 0x6, 0x27, 0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, @vsock={0x28, 0x0, 0x2710}, @isdn={0x22, 0xcb, 0x81, 0x2, 0x69}, 0xfff, 0x0, 0x0, 0x0, 0x81, &(0x7f0000000140)='dummy0\x00', 0x80000000, 0x101, 0x8001}) r3 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000100)={0x80000004, 0x7}) 09:38:25 executing program 2: r0 = socket(0x28, 0x1, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000080), 0x106, 0x5}}, 0x20) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, 0x0, 0x300, 0x70bd2b, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x20040801) 09:38:25 executing program 5: socket(0x11, 0x2, 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000004980), 0x0, 0x0) getsockopt$X25_QBITINCL(r0, 0x106, 0x1, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x4, 0x7, 0x7, 0x6, 0xa, @remote, @private2={0xfc, 0x2, '\x00', 0x1}, 0x700, 0x20, 0x9, 0x5f3b}}) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000004980), 0x0, 0x0) getsockopt$X25_QBITINCL(r1, 0x106, 0x1, 0x0, 0x0) r2 = socket$vsock_dgram(0x28, 0x2, 0x0) ioctl$sock_SIOCDELRT(r2, 0x890c, &(0x7f0000000180)={0x0, @llc={0x1a, 0x33a, 0x9, 0x6, 0x27, 0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, @vsock={0x28, 0x0, 0x2710}, @isdn={0x22, 0xcb, 0x81, 0x2, 0x69}, 0xfff, 0x0, 0x0, 0x0, 0x81, &(0x7f0000000140)='dummy0\x00', 0x80000000, 0x101, 0x8001}) openat$zero(0xffffffffffffff9c, &(0x7f00000000c0), 0x800, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000100)={0x80000004, 0x7}) getsockname(r1, &(0x7f0000002040)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f00000020c0)=0x80) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000240)={0x2, 0x80, 0x1, 0xff, 0x4, 0x41, 0x0, 0xfffffffffffffe00, 0x2000, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0xdc, 0x2, @perf_bp={&(0x7f0000000200), 0x5}, 0x4004, 0x7fffffff, 0x2, 0x4, 0x6, 0x3e7, 0x8001, 0x0, 0x3, 0x0, 0x8001}) socket(0x27, 0xa, 0x40000801) 09:38:25 executing program 4: r0 = socket(0x28, 0x1, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000080)={0xffffffffffffffff}, 0x106, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, &(0x7f0000000040)={0x1, 0x10, 0xfa00, {&(0x7f0000000100), r1}}, 0xffffffffffffff1a) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, 0x0, 0x300, 0x70bd2b, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x20040801) bind$x25(r0, &(0x7f0000000200)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x0}}, 0x12) 09:38:25 executing program 4: r0 = socket(0x28, 0x1, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000080)={0xffffffffffffffff}, 0x106, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, &(0x7f0000000040)={0x1, 0x10, 0xfa00, {&(0x7f0000000100), r1}}, 0xffffffffffffff1a) bind$x25(r0, &(0x7f0000000200)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x0}}, 0x12) 09:38:25 executing program 2: r0 = socket(0x28, 0x1, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, 0x0, 0x300, 0x70bd2b, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x20040801) 09:38:25 executing program 4: r0 = socket(0x28, 0x1, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000080), 0x106, 0x5}}, 0x20) bind$x25(r0, &(0x7f0000000200)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x0}}, 0x12) [ 1502.073110] Bluetooth: hci1 command 0x040f tx timeout 09:38:25 executing program 2: sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, 0x0, 0x300, 0x70bd2b, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x20040801) 09:38:25 executing program 4: r0 = socket(0x28, 0x1, 0x0) bind$x25(r0, &(0x7f0000000200)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x0}}, 0x12) 09:38:25 executing program 4: bind$x25(0xffffffffffffffff, &(0x7f0000000200)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x0}}, 0x12) [ 1502.865573] syz-executor.3: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1502.871429] syz-executor.1: [ 1502.879605] syz-executor.0: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1502.895752] page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1502.907437] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 1502.912222] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 1502.921702] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 1502.927205] CPU: 1 PID: 8876 Comm: syz-executor.0 Not tainted 4.14.232-syzkaller #0 [ 1502.936003] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1502.945769] Call Trace: [ 1502.948378] dump_stack+0x1b2/0x281 [ 1502.952093] warn_alloc.cold+0x96/0x1cc [ 1502.956063] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1502.961724] ? zone_watermark_ok_safe+0x220/0x220 [ 1502.967072] __alloc_pages_nodemask+0x2127/0x2720 [ 1502.972214] ? lock_acquire+0x170/0x3f0 [ 1502.976265] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1502.981393] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1502.986875] ? __mutex_unlock_slowpath+0x75/0x770 [ 1502.991706] alloc_pages_current+0x155/0x260 [ 1502.996474] ion_page_pool_alloc+0x118/0x1b0 [ 1503.001170] ion_system_heap_allocate+0x133/0x8c0 [ 1503.006087] ? ion_alloc+0x187/0x810 [ 1503.009787] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1503.015238] ? ion_system_contig_heap_create+0x130/0x130 [ 1503.020828] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1503.026021] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1503.030853] ion_alloc+0x204/0x810 [ 1503.035031] ? ion_dma_buf_release+0x40/0x40 [ 1503.039432] ? __might_fault+0x177/0x1b0 [ 1503.043708] ion_ioctl+0xea/0x1f0 [ 1503.047145] ? ion_query_heaps+0x360/0x360 [ 1503.051366] ? ion_query_heaps+0x360/0x360 [ 1503.055586] do_vfs_ioctl+0x75a/0xff0 [ 1503.059390] ? ioctl_preallocate+0x1a0/0x1a0 [ 1503.063812] ? lock_downgrade+0x740/0x740 [ 1503.068383] ? __fget+0x225/0x360 [ 1503.072364] ? do_vfs_ioctl+0xff0/0xff0 [ 1503.076683] ? security_file_ioctl+0x83/0xb0 [ 1503.081201] SyS_ioctl+0x7f/0xb0 [ 1503.084748] ? do_vfs_ioctl+0xff0/0xff0 [ 1503.088889] do_syscall_64+0x1d5/0x640 [ 1503.092941] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1503.098596] RIP: 0033:0x4665f9 [ 1503.101769] RSP: 002b:00007fe4a6925188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1503.109896] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1503.118036] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000007 [ 1503.125496] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1503.133019] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1503.140555] R13: 00007ffe5881209f R14: 00007fe4a6925300 R15: 0000000000022000 [ 1503.149014] CPU: 0 PID: 8883 Comm: syz-executor.3 Not tainted 4.14.232-syzkaller #0 [ 1503.157034] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1503.166497] Call Trace: [ 1503.169185] dump_stack+0x1b2/0x281 [ 1503.172871] warn_alloc.cold+0x96/0x1cc [ 1503.176850] ? zone_watermark_ok_safe+0x220/0x220 [ 1503.181807] __alloc_pages_nodemask+0x2127/0x2720 [ 1503.186936] ? _raw_spin_unlock_irq+0x24/0x80 [ 1503.191611] ? lock_acquire+0x170/0x3f0 [ 1503.195765] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1503.200789] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1503.206654] ? __mutex_unlock_slowpath+0x75/0x770 [ 1503.212231] alloc_pages_current+0x155/0x260 [ 1503.217108] ion_page_pool_alloc+0x118/0x1b0 [ 1503.221501] ion_system_heap_allocate+0x133/0x8c0 [ 1503.226340] ? ion_alloc+0x187/0x810 [ 1503.230835] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1503.236451] ? ion_system_contig_heap_create+0x130/0x130 [ 1503.241987] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1503.247019] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1503.251982] ion_alloc+0x204/0x810 [ 1503.256128] ? ion_dma_buf_release+0x40/0x40 [ 1503.260544] ? __might_fault+0x177/0x1b0 [ 1503.264805] ion_ioctl+0xea/0x1f0 [ 1503.268474] ? ion_query_heaps+0x360/0x360 [ 1503.273139] ? ion_query_heaps+0x360/0x360 [ 1503.278895] do_vfs_ioctl+0x75a/0xff0 [ 1503.282972] ? ioctl_preallocate+0x1a0/0x1a0 [ 1503.287385] ? lock_downgrade+0x740/0x740 [ 1503.291802] ? __fget+0x225/0x360 [ 1503.295523] ? do_vfs_ioctl+0xff0/0xff0 [ 1503.299723] ? security_file_ioctl+0x83/0xb0 [ 1503.304752] SyS_ioctl+0x7f/0xb0 [ 1503.308110] ? do_vfs_ioctl+0xff0/0xff0 [ 1503.312350] do_syscall_64+0x1d5/0x640 [ 1503.316237] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1503.321601] RIP: 0033:0x4665f9 [ 1503.324988] RSP: 002b:00007f89f6a27188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1503.333219] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1503.341080] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000007 [ 1503.349045] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1503.356774] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1503.365436] R13: 00007ffeb438bdef R14: 00007f89f6a27300 R15: 0000000000022000 [ 1503.372809] CPU: 1 PID: 8882 Comm: syz-executor.1 Not tainted 4.14.232-syzkaller #0 [ 1503.380745] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1503.390390] Call Trace: [ 1503.393438] dump_stack+0x1b2/0x281 [ 1503.397177] warn_alloc.cold+0x96/0x1cc [ 1503.401140] ? zone_watermark_ok_safe+0x220/0x220 [ 1503.406069] __alloc_pages_nodemask+0x2127/0x2720 [ 1503.410923] ? __schedule+0x893/0x1de0 [ 1503.414987] ? lock_acquire+0x170/0x3f0 [ 1503.419072] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1503.424077] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1503.429947] ? __mutex_unlock_slowpath+0x75/0x770 [ 1503.434970] alloc_pages_current+0x155/0x260 [ 1503.439547] ion_page_pool_alloc+0x118/0x1b0 [ 1503.443940] ion_system_heap_allocate+0x133/0x8c0 [ 1503.449114] ? ion_alloc+0x187/0x810 [ 1503.452906] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1503.458464] ? ion_system_contig_heap_create+0x130/0x130 [ 1503.464419] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1503.469696] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1503.474626] ion_alloc+0x204/0x810 [ 1503.478165] ? ion_dma_buf_release+0x40/0x40 [ 1503.482933] ? __might_fault+0x177/0x1b0 [ 1503.487001] ion_ioctl+0xea/0x1f0 [ 1503.490626] ? ion_query_heaps+0x360/0x360 [ 1503.494951] ? ion_query_heaps+0x360/0x360 [ 1503.499175] do_vfs_ioctl+0x75a/0xff0 [ 1503.503147] ? ioctl_preallocate+0x1a0/0x1a0 [ 1503.507784] ? lock_downgrade+0x740/0x740 [ 1503.511944] ? __fget+0x225/0x360 [ 1503.515382] ? do_vfs_ioctl+0xff0/0xff0 [ 1503.519594] ? security_file_ioctl+0x83/0xb0 [ 1503.524335] SyS_ioctl+0x7f/0xb0 [ 1503.527874] ? do_vfs_ioctl+0xff0/0xff0 [ 1503.532339] do_syscall_64+0x1d5/0x640 [ 1503.536656] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1503.541840] RIP: 0033:0x4665f9 [ 1503.545382] RSP: 002b:00007f22b5267188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1503.554444] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1503.562047] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000008 [ 1503.569310] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1503.576592] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1503.584108] R13: 00007ffea96cbc0f R14: 00007f22b5267300 R15: 0000000000022000 [ 1503.591577] warn_alloc_show_mem: 1 callbacks suppressed [ 1503.591581] Mem-Info: [ 1503.604450] active_anon:15234 inactive_anon:8038 isolated_anon:0 [ 1503.604450] active_file:2050 inactive_file:4828 isolated_file:2 [ 1503.604450] unevictable:0 dirty:21 writeback:0 unstable:0 [ 1503.604450] slab_reclaimable:23286 slab_unreclaimable:101004 [ 1503.604450] mapped:48779 shmem:8978 pagetables:724 bounce:0 [ 1503.604450] free:90120 free_pcp:276 free_cma:0 [ 1503.641767] Node 0 active_anon:59668kB inactive_anon:23956kB active_file:8492kB inactive_file:19300kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:193544kB dirty:80kB writeback:0kB shmem:27716kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 16384kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1503.710337] Node 1 active_anon:1368kB inactive_anon:8196kB active_file:8kB inactive_file:12kB unevictable:0kB isolated(anon):0kB isolated(file):8kB mapped:1672kB dirty:4kB writeback:0kB shmem:8196kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1503.742904] Node 0 DMA free:11088kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1503.807548] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1503.826016] Node 0 DMA32 free:107984kB min:36200kB low:45248kB high:54296kB active_anon:59668kB inactive_anon:23956kB active_file:8792kB inactive_file:19300kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7264kB pagetables:2828kB bounce:0kB free_pcp:1072kB local_pcp:532kB free_cma:0kB [ 1503.866553] lowmem_reserve[]: 0 0 0 0 0 [ 1503.882555] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1503.950853] lowmem_reserve[]: 0 0 0 0 0 [ 1503.966793] Node 1 Normal free:53548kB min:53696kB low:67120kB high:80544kB active_anon:1368kB inactive_anon:8196kB active_file:8kB inactive_file:0kB unevictable:0kB writepending:8kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:96kB pagetables:216kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1504.060081] lowmem_reserve[]: 0 0 0 0 0 [ 1504.067188] Node 0 DMA: 1*4kB (E) 11*8kB (UE) 12*16kB (UE) 7*32kB (UE) 1*64kB (E) 2*128kB (UE) 2*256kB (UE) 3*512kB (UE) 2*1024kB (UE) 3*2048kB (UME) 0*4096kB = 11068kB [ 1504.085164] Node 0 DMA32: 2661*4kB (UME) 921*8kB (UME) 308*16kB (ME) 129*32kB (ME) 42*64kB (UM) 15*128kB (UM) 7*256kB (UM) 2*512kB (M) 2*1024kB (UM) 0*2048kB 0*4096kB = 36540kB [ 1504.102519] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1504.114166] Node 1 Normal: 53*4kB (UM) 477*8kB (UM) 379*16kB (UM) 146*32kB (UM) 22*64kB (UM) 24*128kB (UM) 47*256kB (UM) 44*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 53804kB [ 1504.131178] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1504.140937] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1504.151235] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1504.161154] Bluetooth: hci1 command 0x0419 tx timeout [ 1504.167367] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1504.270393] 9003 total pagecache pages [ 1504.288252] 0 pages in swap cache [ 1504.291741] Swap cache stats: add 0, delete 0, find 0/0 [ 1504.293534] syz-executor.3 invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1504.350154] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 1504.351976] Free swap = 0kB [ 1504.375864] Total swap = 0kB [ 1504.378261] CPU: 0 PID: 7982 Comm: syz-executor.3 Not tainted 4.14.232-syzkaller #0 [ 1504.379262] 2097051 pages RAM [ 1504.387775] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1504.387779] Call Trace: [ 1504.387798] dump_stack+0x1b2/0x281 [ 1504.387808] dump_header+0x178/0x82f [ 1504.387818] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1504.387826] ? ___ratelimit+0x2cd/0x530 [ 1504.387835] oom_kill_process.cold+0x10/0xa40 [ 1504.387851] out_of_memory+0xe3e/0x1190 [ 1504.387863] ? oom_killer_disable+0x1c0/0x1c0 [ 1504.404437] 0 pages HighMem/MovableOnly [ 1504.407533] ? mutex_trylock+0x152/0x1a0 [ 1504.411343] 363849 pages reserved [ 1504.416659] __alloc_pages_nodemask+0x23e1/0x2720 [ 1504.416679] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1504.416700] alloc_pages_current+0x155/0x260 [ 1504.416711] filemap_fault+0x11a1/0x1ad0 [ 1504.416728] ext4_filemap_fault+0x84/0xb0 [ 1504.416739] __do_fault+0xfa/0x380 [ 1504.470501] 0 pages cma reserved [ 1504.473264] __handle_mm_fault+0x2497/0x4620 [ 1504.473274] ? vm_insert_page+0x7c0/0x7c0 [ 1504.473282] ? hrtimer_nanosleep+0x1ff/0x4b0 [ 1504.473289] ? nanosleep_copyout+0x100/0x100 [ 1504.473302] ? mark_held_locks+0xa6/0xf0 [ 1504.473311] handle_mm_fault+0x455/0x9c0 [ 1504.473323] __do_page_fault+0x549/0xad0 [ 1504.473333] ? spurious_fault+0x640/0x640 [ 1504.473340] ? do_page_fault+0x60/0x500 [ 1504.473348] ? page_fault+0x2f/0x50 [ 1504.473355] page_fault+0x45/0x50 [ 1504.473362] RIP: 16ef20:0xa [ 1504.473367] RSP: 4f37:00007ffeb438c0ac EFLAGS: 00000032 [ 1504.546467] Mem-Info: [ 1504.588671] active_anon:15246 inactive_anon:8037 isolated_anon:0 [ 1504.588671] active_file:0 inactive_file:20 isolated_file:0 [ 1504.588671] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1504.588671] slab_reclaimable:23194 slab_unreclaimable:101217 [ 1504.588671] mapped:52656 shmem:8977 pagetables:764 bounce:0 [ 1504.588671] free:25181 free_pcp:0 free_cma:0 [ 1504.793722] Node 0 active_anon:59616kB inactive_anon:23952kB active_file:100kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:208944kB dirty:0kB writeback:0kB shmem:27712kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 16384kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1504.970655] Node 1 active_anon:1368kB inactive_anon:8196kB active_file:0kB inactive_file:12kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:1680kB dirty:0kB writeback:0kB shmem:8196kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1505.042448] Node 0 DMA free:11068kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1505.179146] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1505.187759] Node 0 DMA32 free:35628kB min:36200kB low:45248kB high:54296kB active_anon:59616kB inactive_anon:23952kB active_file:112kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7264kB pagetables:2840kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1505.239036] lowmem_reserve[]: 0 0 0 0 0 [ 1505.258704] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1505.377911] lowmem_reserve[]: 0 0 0 0 0 [ 1505.415725] Node 1 Normal free:53676kB min:53696kB low:67120kB high:80544kB active_anon:1368kB inactive_anon:8196kB active_file:0kB inactive_file:12kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:96kB pagetables:216kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1505.571555] lowmem_reserve[]: 0 0 0 0 0 [ 1505.575932] Node 0 DMA: 1*4kB (E) 11*8kB (UE) 12*16kB (UE) 7*32kB (UE) 1*64kB (E) 2*128kB (UE) 2*256kB (UE) 3*512kB (UE) 2*1024kB (UE) 3*2048kB (UME) 0*4096kB = 11068kB [ 1505.625894] Node 0 DMA32: 2700*4kB (UME) 1037*8kB (UME) 336*16kB (UME) 120*32kB (ME) 32*64kB (UM) 12*128kB (M) 7*256kB (UM) 2*512kB (M) 1*1024kB (M) 0*2048kB 0*4096kB = 35736kB [ 1505.719274] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1505.790888] Node 1 Normal: 52*4kB (UM) 475*8kB (UM) 378*16kB (UM) 145*32kB (UM) 23*64kB (UM) 24*128kB (UM) 47*256kB (UM) 44*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 53800kB [ 1505.899846] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1505.919938] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1505.931145] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1505.965733] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1505.999530] 8998 total pagecache pages [ 1506.026199] 0 pages in swap cache [ 1506.029699] Swap cache stats: add 0, delete 0, find 0/0 [ 1506.088693] Free swap = 0kB [ 1506.091890] Total swap = 0kB [ 1506.127622] 2097051 pages RAM [ 1506.130769] 0 pages HighMem/MovableOnly [ 1506.150410] 363849 pages reserved [ 1506.191361] 0 pages cma reserved [ 1506.217151] Out of memory (oom_kill_allocating_task): Kill process 7982 (syz-executor.3) score 0 or sacrifice child [ 1506.279512] Killed process 8883 (syz-executor.3) total-vm:93252kB, anon-rss:2196kB, file-rss:34820kB, shmem-rss:0kB [ 1506.378299] oom_reaper: reaped process 8883 (syz-executor.3), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1506.446470] in:imklog invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1506.459078] in:imklog cpuset=/ mems_allowed=0-1 [ 1506.473157] CPU: 1 PID: 8798 Comm: in:imklog Not tainted 4.14.232-syzkaller #0 [ 1506.480766] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1506.490496] Call Trace: [ 1506.493094] dump_stack+0x1b2/0x281 [ 1506.496725] dump_header+0x178/0x82f [ 1506.500610] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1506.505795] ? ___ratelimit+0x2cd/0x530 [ 1506.509855] oom_kill_process.cold+0x10/0xa40 [ 1506.514359] out_of_memory+0xe3e/0x1190 [ 1506.518328] ? oom_killer_disable+0x1c0/0x1c0 [ 1506.523092] ? mutex_trylock+0x152/0x1a0 [ 1506.527149] __alloc_pages_nodemask+0x23e1/0x2720 [ 1506.532097] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1506.537437] alloc_pages_current+0x155/0x260 [ 1506.541949] filemap_fault+0x11a1/0x1ad0 [ 1506.546305] ext4_filemap_fault+0x84/0xb0 [ 1506.550609] __do_fault+0xfa/0x380 [ 1506.554167] __handle_mm_fault+0x2497/0x4620 [ 1506.558798] ? vm_insert_page+0x7c0/0x7c0 [ 1506.563393] ? lock_downgrade+0x740/0x740 [ 1506.567638] ? mark_held_locks+0xa6/0xf0 [ 1506.571687] handle_mm_fault+0x455/0x9c0 [ 1506.576002] __do_page_fault+0x549/0xad0 [ 1506.580048] ? spurious_fault+0x640/0x640 [ 1506.584381] ? do_page_fault+0x60/0x500 [ 1506.588705] ? page_fault+0x2f/0x50 [ 1506.592362] page_fault+0x45/0x50 [ 1506.595955] RIP: ffffffff:0xffffffff [ 1506.599828] RSP: 0000:00007fc34c2480a0 EFLAGS: 00000050 [ 1506.605290] Mem-Info: [ 1506.613328] active_anon:14715 inactive_anon:8037 isolated_anon:0 [ 1506.613328] active_file:37 inactive_file:0 isolated_file:0 [ 1506.613328] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1506.613328] slab_reclaimable:23174 slab_unreclaimable:101167 [ 1506.613328] mapped:52646 shmem:8977 pagetables:764 bounce:0 [ 1506.613328] free:13964 free_pcp:108 free_cma:0 [ 1506.615909] syz-executor.3: [ 1506.652560] Node 0 active_anon:57492kB inactive_anon:23952kB active_file:92kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:208904kB dirty:0kB writeback:0kB shmem:27712kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 16384kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1506.663966] page allocation failure: order:0 [ 1506.688549] Node 1 active_anon:1368kB inactive_anon:8196kB active_file:56kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:1680kB dirty:0kB writeback:0kB shmem:8196kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1506.700152] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1506.735455] Node 0 [ 1506.736901] (null) [ 1506.750060] DMA free:10968kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1506.754170] syz-executor.3 cpuset= [ 1506.786858] lowmem_reserve[]: [ 1506.789364] / [ 1506.790603] 0 [ 1506.796660] mems_allowed=0-1 [ 1506.801668] CPU: 0 PID: 8883 Comm: syz-executor.3 Not tainted 4.14.232-syzkaller #0 [ 1506.809550] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1506.810799] 2717 [ 1506.819493] Call Trace: [ 1506.819515] dump_stack+0x1b2/0x281 [ 1506.819527] warn_alloc.cold+0x96/0x1cc [ 1506.819539] ? zone_watermark_ok_safe+0x220/0x220 [ 1506.819548] ? usleep_range+0x130/0x130 [ 1506.819555] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1506.819566] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1506.819576] ? run_timer_softirq+0x5a0/0x5a0 [ 1506.819590] __alloc_pages_nodemask+0x2127/0x2720 [ 1506.819603] ? lock_acquire+0x170/0x3f0 [ 1506.819621] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1506.831638] 2718 [ 1506.832087] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1506.837569] 2718 [ 1506.841583] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1506.856931] 2718 [ 1506.861919] ? alloc_pages_current+0x37/0x260 [ 1506.871462] alloc_pages_current+0x155/0x260 [ 1506.879451] Node 0 [ 1506.880152] ion_page_pool_alloc+0x118/0x1b0 [ 1506.890587] DMA32 free:18112kB min:36200kB low:45248kB high:54296kB active_anon:57480kB inactive_anon:23952kB active_file:80kB inactive_file:4kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7264kB pagetables:2836kB bounce:0kB free_pcp:204kB local_pcp:204kB free_cma:0kB [ 1506.892653] ion_system_heap_allocate+0x133/0x8c0 [ 1506.892664] ? ion_alloc+0x187/0x810 [ 1506.892674] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1506.892683] ? ion_system_contig_heap_create+0x130/0x130 [ 1506.892692] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1506.892703] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1506.892713] ion_alloc+0x204/0x810 [ 1506.892726] ? ion_dma_buf_release+0x40/0x40 [ 1506.892737] ? __might_fault+0x177/0x1b0 [ 1506.906988] lowmem_reserve[]: [ 1506.933350] ion_ioctl+0xea/0x1f0 [ 1506.933361] ? ion_query_heaps+0x360/0x360 [ 1506.933371] ? ion_query_heaps+0x360/0x360 [ 1506.933381] do_vfs_ioctl+0x75a/0xff0 [ 1506.933391] ? ioctl_preallocate+0x1a0/0x1a0 [ 1506.933400] ? lock_downgrade+0x740/0x740 [ 1506.933412] ? __fget+0x225/0x360 [ 1506.933421] ? do_vfs_ioctl+0xff0/0xff0 [ 1506.933431] ? security_file_ioctl+0x83/0xb0 [ 1506.933440] SyS_ioctl+0x7f/0xb0 [ 1506.933447] ? do_vfs_ioctl+0xff0/0xff0 [ 1506.933458] do_syscall_64+0x1d5/0x640 [ 1506.933473] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1506.933481] RIP: 0033:0x4665f9 [ 1506.933486] RSP: 002b:00007f89f6a27188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1506.933496] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1506.933502] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000007 [ 1506.933506] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1506.933514] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1506.948137] 0 [ 1506.953590] R13: 00007ffeb438bdef R14: 00007f89f6a27300 R15: 0000000000022000 [ 1506.967761] warn_alloc_show_mem: 2 callbacks suppressed [ 1506.967764] Mem-Info: [ 1506.979088] 0 [ 1506.986275] active_anon:14712 inactive_anon:8037 isolated_anon:0 [ 1506.986275] active_file:11 inactive_file:11 isolated_file:0 [ 1506.986275] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1506.986275] slab_reclaimable:23174 slab_unreclaimable:101173 [ 1506.986275] mapped:52646 shmem:8977 pagetables:763 bounce:0 [ 1506.986275] free:13958 free_pcp:109 free_cma:0 [ 1506.987166] 0 [ 1506.991384] Node 0 active_anon:57480kB inactive_anon:23952kB active_file:48kB inactive_file:36kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:208904kB dirty:0kB writeback:0kB shmem:27712kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 14336kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1507.005490] 0 [ 1507.016911] Node 1 active_anon:1368kB inactive_anon:8196kB active_file:0kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:1680kB dirty:0kB writeback:0kB shmem:8196kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1507.027471] 0 [ 1507.033168] Node 0 [ 1507.054364] DMA free:10968kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1507.072994] Node 0 [ 1507.085633] lowmem_reserve[]: [ 1507.092927] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1507.106609] 0 [ 1507.139347] lowmem_reserve[]: [ 1507.173001] 2717 [ 1507.198288] 0 [ 1507.234474] 2718 [ 1507.260482] 0 0 0 0 [ 1507.267666] Node 1 Normal free:26768kB min:53696kB low:67120kB high:80544kB active_anon:1368kB inactive_anon:8196kB active_file:0kB inactive_file:8kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:96kB pagetables:216kB bounce:0kB free_pcp:232kB local_pcp:112kB free_cma:0kB [ 1507.271961] 2718 [ 1507.305168] lowmem_reserve[]: 0 0 0 0 0 [ 1507.308542] 2718 [ 1507.311365] Node 0 [ 1507.311372] Node 0 [ 1507.317258] DMA: [ 1507.319442] DMA32 free:18096kB min:36200kB low:45248kB high:54296kB active_anon:57480kB inactive_anon:23952kB active_file:148kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7264kB pagetables:2836kB bounce:0kB free_pcp:208kB local_pcp:0kB free_cma:0kB [ 1507.319520] 2*4kB [ 1507.321677] lowmem_reserve[]: [ 1507.358861] (UE) 2*8kB (UE) 10*16kB (UE) 7*32kB (UE) 1*64kB (E) 2*128kB (UE) 2*256kB (UE) 3*512kB (UE) 2*1024kB (UE) 3*2048kB (UME) 0*4096kB = 10968kB [ 1507.366259] 0 0 0 0 0 [ 1507.387897] Node 0 DMA32: [ 1507.388428] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1507.391591] 2060*4kB [ 1507.426946] lowmem_reserve[]: 0 0 0 0 0 [ 1507.429702] (ME) [ 1507.436794] Node 1 [ 1507.437774] 668*8kB [ 1507.438896] Normal free:26768kB min:53696kB low:67120kB high:80544kB active_anon:1368kB inactive_anon:8196kB active_file:0kB inactive_file:8kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:96kB pagetables:216kB bounce:0kB free_pcp:232kB local_pcp:120kB free_cma:0kB [ 1507.441321] (UME) [ 1507.449021] lowmem_reserve[]: [ 1507.485477] 179*16kB [ 1507.485520] 0 [ 1507.489096] (UME) [ 1507.491760] 0 0 0 0 [ 1507.501595] 52*32kB (UME) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB [ 1507.507769] Node 0 DMA: 2*4kB (UE) 2*8kB (UE) 10*16kB (UE) 7*32kB (UE) 1*64kB (E) 2*128kB (UE) 2*256kB (UE) 3*512kB (UE) 2*1024kB (UE) 3*2048kB (UME) 0*4096kB = 10968kB [ 1507.525971] 0*2048kB [ 1507.546674] Node 0 [ 1507.548925] 0*4096kB [ 1507.549101] DMA32: [ 1507.551333] = 18112kB [ 1507.557333] 2060*4kB (ME) 668*8kB (UME) 179*16kB (UME) 52*32kB (UME) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18112kB [ 1507.569816] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1507.580500] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1507.595430] Node 1 Normal: 52*4kB (UM) 36*8kB (UM) 38*16kB (M) 20*32kB (UM) 19*64kB (UM) 6*128kB (UM) 4*256kB (UM) 43*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 26768kB [ 1507.603272] Node 1 Normal: 52*4kB (UM) 36*8kB (UM) 38*16kB (M) 20*32kB (UM) 19*64kB (UM) 6*128kB (UM) 4*256kB (UM) 43*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 26768kB [ 1507.622134] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1507.635550] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1507.647326] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1507.654564] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1507.661658] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1507.673928] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1507.685945] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1507.693465] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1507.707830] 8999 total pagecache pages [ 1507.711959] 0 pages in swap cache [ 1507.714916] 8999 total pagecache pages [ 1507.719497] 0 pages in swap cache [ 1507.720740] Swap cache stats: add 0, delete 0, find 0/0 [ 1507.731944] Swap cache stats: add 0, delete 0, find 0/0 [ 1507.738020] Free swap = 0kB [ 1507.739501] Free swap = 0kB [ 1507.741141] Total swap = 0kB [ 1507.745996] Total swap = 0kB [ 1507.750366] 2097051 pages RAM [ 1507.756213] 2097051 pages RAM [ 1507.759530] 0 pages HighMem/MovableOnly [ 1507.764434] 0 pages HighMem/MovableOnly [ 1507.768705] 363849 pages reserved [ 1507.769985] 363849 pages reserved [ 1507.772169] 0 pages cma reserved [ 1507.778310] 0 pages cma reserved [ 1507.816299] Out of memory (oom_kill_allocating_task): Kill process 8798 (in:imklog) score 0 or sacrifice child [ 1507.851008] Killed process 8775 (rsyslogd) total-vm:254332kB, anon-rss:756kB, file-rss:0kB, shmem-rss:0kB [ 1507.934936] oom_reaper: reaped process 8775 (rsyslogd), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1508.136807] IPVS: ftp: loaded support on port[0] = 21 [ 1508.309446] oom_reaper: reaped process 8882 (syz-executor.1), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1508.365621] systemd-journal invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1508.384280] systemd-journal cpuset=/ mems_allowed=0-1 [ 1508.389531] CPU: 0 PID: 8784 Comm: systemd-journal Not tainted 4.14.232-syzkaller #0 [ 1508.397896] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1508.407340] Call Trace: [ 1508.409963] dump_stack+0x1b2/0x281 [ 1508.413774] dump_header+0x178/0x82f [ 1508.417697] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1508.422918] ? ___ratelimit+0x2cd/0x530 [ 1508.426992] oom_kill_process.cold+0x10/0xa40 [ 1508.431616] out_of_memory+0xe3e/0x1190 [ 1508.435611] ? oom_killer_disable+0x1c0/0x1c0 [ 1508.440155] ? mutex_trylock+0x152/0x1a0 [ 1508.444261] __alloc_pages_nodemask+0x23e1/0x2720 [ 1508.449270] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1508.454151] alloc_pages_current+0x155/0x260 [ 1508.458875] filemap_fault+0x11a1/0x1ad0 [ 1508.463061] ext4_filemap_fault+0x84/0xb0 [ 1508.467745] __do_fault+0xfa/0x380 [ 1508.471844] __handle_mm_fault+0x2497/0x4620 [ 1508.476294] ? vm_insert_page+0x7c0/0x7c0 [ 1508.480556] ? mark_held_locks+0xa6/0xf0 [ 1508.484658] handle_mm_fault+0x455/0x9c0 [ 1508.488903] __do_page_fault+0x549/0xad0 [ 1508.493067] ? spurious_fault+0x640/0x640 [ 1508.497231] ? do_page_fault+0x60/0x500 [ 1508.501221] ? page_fault+0x2f/0x50 [ 1508.504875] page_fault+0x45/0x50 [ 1508.508536] RIP: 0001:0xffffffffffffffff [ 1508.512853] RSP: 4a3e51e0:00007ffed8159710 EFLAGS: 7ffed8159520 [ 1508.586617] Mem-Info: [ 1508.609364] active_anon:13626 inactive_anon:8037 isolated_anon:0 [ 1508.609364] active_file:411 inactive_file:2782 isolated_file:0 [ 1508.609364] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1508.609364] slab_reclaimable:22787 slab_unreclaimable:102359 [ 1508.609364] mapped:54772 shmem:8977 pagetables:721 bounce:0 [ 1508.609364] free:114165 free_pcp:189 free_cma:0 [ 1508.716504] Node 0 active_anon:54236kB inactive_anon:23952kB active_file:2084kB inactive_file:11344kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:217448kB dirty:100kB writeback:0kB shmem:27712kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 14336kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1508.760715] chnl_net:caif_netlink_parms(): no params data found [ 1508.791324] Node 1 active_anon:768kB inactive_anon:8196kB active_file:60kB inactive_file:84kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:1840kB dirty:0kB writeback:0kB shmem:8196kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1508.819503] Node 0 DMA free:11124kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1508.848748] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1508.854502] Node 0 DMA32 free:43984kB min:36200kB low:45248kB high:54296kB active_anon:53740kB inactive_anon:23952kB active_file:1828kB inactive_file:10916kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7392kB pagetables:2816kB bounce:0kB free_pcp:568kB local_pcp:380kB free_cma:0kB [ 1508.903148] lowmem_reserve[]: 0 0 0 0 0 [ 1508.907195] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1508.935991] lowmem_reserve[]: 0 0 0 0 0 [ 1508.940294] Node 1 Normal free:913984kB min:53696kB low:67120kB high:80544kB active_anon:784kB inactive_anon:8192kB active_file:196kB inactive_file:80kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:32kB pagetables:112kB bounce:0kB free_pcp:372kB local_pcp:176kB free_cma:0kB [ 1508.980214] lowmem_reserve[]: 0 0 0 0 0 [ 1508.998015] Node 0 DMA: 3*4kB (UME) 3*8kB (UME) 2*16kB (ME) 7*32kB (UME) 8*64kB (UME) 3*128kB (UME) 2*256kB (ME) 3*512kB (UME) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (U) = 11428kB [ 1509.028120] bridge0: port 1(bridge_slave_0) entered blocking state [ 1509.035054] Node 0 DMA32: 1585*4kB (E) 559*8kB (UE) 79*16kB (UE) 40*32kB (UE) 323*64kB (U) 5*128kB (UH) 5*256kB (UH) 3*512kB (UM) 6*1024kB (UM) 11*2048kB (U) 1*4096kB (M) = 70252kB [ 1509.053117] bridge0: port 1(bridge_slave_0) entered disabled state [ 1509.060593] device bridge_slave_0 entered promiscuous mode [ 1509.068402] bridge0: port 2(bridge_slave_1) entered blocking state [ 1509.075218] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1509.087373] bridge0: port 2(bridge_slave_1) entered disabled state [ 1509.095258] device bridge_slave_1 entered promiscuous mode [ 1509.101551] Node 1 Normal: 0*4kB 0*8kB 36*16kB (UM) 27*32kB (UM) 7238*64kB (UM) 63*128kB (UM) 30*256kB (UM) 15*512kB (UM) 646*1024kB (U) 38*2048kB (U) 31*4096kB (U) = 1354400kB [ 1509.132204] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1509.149354] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 1509.160526] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1509.174944] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1509.187724] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1509.199896] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1509.210687] 12446 total pagecache pages [ 1509.215054] 0 pages in swap cache [ 1509.218712] Swap cache stats: add 0, delete 0, find 0/0 [ 1509.224949] Free swap = 0kB [ 1509.228591] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 1509.228725] Total swap = 0kB [ 1509.240582] 2097051 pages RAM [ 1509.249236] 0 pages HighMem/MovableOnly [ 1509.253555] team0: Port device team_slave_0 added [ 1509.254940] 363849 pages reserved [ 1509.259403] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 1509.262404] 0 pages cma reserved [ 1509.270192] team0: Port device team_slave_1 added [ 1509.276531] Out of memory (oom_kill_allocating_task): Kill process 8784 (systemd-journal) score 0 or sacrifice child [ 1509.290063] Killed process 8784 (systemd-journal) total-vm:46096kB, anon-rss:472kB, file-rss:0kB, shmem-rss:1832kB [ 1509.293464] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1509.308390] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1509.315545] systemd[1]: systemd-journald.service: Failed with result 'signal'. [ 1509.335067] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1509.349234] systemd[1]: systemd-journald.service: Service has no hold-off time, scheduling restart. [ 1509.356562] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1509.369369] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1509.377251] systemd[1]: Stopped Flush Journal to Persistent Storage. 09:38:32 executing program 4: bind$x25(0xffffffffffffffff, &(0x7f0000000200)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x0}}, 0x12) 09:38:32 executing program 0: socket(0x11, 0x2, 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000004980), 0x0, 0x0) getsockopt$X25_QBITINCL(r0, 0x106, 0x1, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x4, 0x7, 0x7, 0x6, 0xa, @remote, @private2={0xfc, 0x2, '\x00', 0x1}, 0x700, 0x20, 0x9, 0x5f3b}}) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000004980), 0x0, 0x0) getsockopt$X25_QBITINCL(r1, 0x106, 0x1, 0x0, 0x0) r2 = socket$vsock_dgram(0x28, 0x2, 0x0) ioctl$sock_SIOCDELRT(r2, 0x890c, &(0x7f0000000180)={0x0, @llc={0x1a, 0x33a, 0x9, 0x6, 0x27, 0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, @vsock={0x28, 0x0, 0x2710}, @isdn={0x22, 0xcb, 0x81, 0x2, 0x69}, 0xfff, 0x0, 0x0, 0x0, 0x81, &(0x7f0000000140)='dummy0\x00', 0x80000000, 0x101, 0x8001}) r3 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000100)={0x80000004, 0x7}) 09:38:32 executing program 2: sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, 0x0, 0x300, 0x70bd2b, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x20040801) 09:38:32 executing program 3: socket(0x11, 0x2, 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000004980), 0x0, 0x0) getsockopt$X25_QBITINCL(r0, 0x106, 0x1, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x4, 0x7, 0x7, 0x6, 0xa, @remote, @private2={0xfc, 0x2, '\x00', 0x1}, 0x700, 0x20, 0x9, 0x5f3b}}) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000004980), 0x0, 0x0) getsockopt$X25_QBITINCL(r1, 0x106, 0x1, 0x0, 0x0) r2 = socket$vsock_dgram(0x28, 0x2, 0x0) ioctl$sock_SIOCDELRT(r2, 0x890c, &(0x7f0000000180)={0x0, @llc={0x1a, 0x33a, 0x9, 0x6, 0x27, 0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, @vsock={0x28, 0x0, 0x2710}, @isdn={0x22, 0xcb, 0x81, 0x2, 0x69}, 0xfff, 0x0, 0x0, 0x0, 0x81, &(0x7f0000000140)='dummy0\x00', 0x80000000, 0x101, 0x8001}) r3 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000100)={0x80000004, 0x7}) 09:38:32 executing program 1: socket(0x11, 0x2, 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000004980), 0x0, 0x0) getsockopt$X25_QBITINCL(r0, 0x106, 0x1, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x4, 0x7, 0x7, 0x6, 0xa, @remote, @private2={0xfc, 0x2, '\x00', 0x1}, 0x700, 0x20, 0x9, 0x5f3b}}) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000004980), 0x0, 0x0) getsockopt$X25_QBITINCL(r1, 0x106, 0x1, 0x0, 0x0) r2 = socket$vsock_dgram(0x28, 0x2, 0x0) ioctl$sock_SIOCDELRT(r2, 0x890c, &(0x7f0000000180)={0x0, @llc={0x1a, 0x33a, 0x9, 0x6, 0x27, 0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, @vsock={0x28, 0x0, 0x2710}, @isdn={0x22, 0xcb, 0x81, 0x2, 0x69}, 0xfff, 0x0, 0x0, 0x0, 0x81, &(0x7f0000000140)='dummy0\x00', 0x80000000, 0x101, 0x8001}) openat$zero(0xffffffffffffff9c, &(0x7f00000000c0), 0x800, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000100)={0x80000004, 0x7}) getsockname(r1, &(0x7f0000002040)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f00000020c0)=0x80) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000240)={0x2, 0x80, 0x1, 0xff, 0x4, 0x41, 0x0, 0xfffffffffffffe00, 0x2000, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0xdc, 0x2, @perf_bp={&(0x7f0000000200), 0x5}, 0x4004, 0x7fffffff, 0x2, 0x4, 0x6, 0x3e7, 0x8001, 0x0, 0x3, 0x0, 0x8001}) socket(0x27, 0xa, 0x40000801) [ 1509.401792] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1509.422872] systemd[1]: Stopping Flush Journal to Persistent Storage... [ 1509.429079] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 1509.430170] systemd[1]: Stopped Journal Service. [ 1509.443620] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 1509.475977] systemd[1]: Starting Journal Service... [ 1509.517480] device hsr_slave_0 entered promiscuous mode [ 1509.543083] device hsr_slave_1 entered promiscuous mode [ 1509.565065] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 1509.588000] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 1509.679645] systemd-journald[9072]: File /run/log/journal/04d8c135ee6b410280ba31a58c89679d/system.journal corrupted or uncleanly shut down, renaming and replacing. [ 1509.912273] Bluetooth: hci5 command 0x0409 tx timeout [ 1509.935057] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 1510.000193] syz-executor.3: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1510.005661] syz-executor.0: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1510.059397] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 1510.079657] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 1510.082839] CPU: 0 PID: 9070 Comm: syz-executor.3 Not tainted 4.14.232-syzkaller #0 [ 1510.087639] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1510.093099] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1510.093104] Call Trace: [ 1510.093122] dump_stack+0x1b2/0x281 [ 1510.093135] warn_alloc.cold+0x96/0x1cc [ 1510.093146] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1510.093156] ? zone_watermark_ok_safe+0x220/0x220 [ 1510.093177] __alloc_pages_nodemask+0x2127/0x2720 [ 1510.093185] ? __schedule+0x893/0x1de0 [ 1510.093200] ? lock_acquire+0x170/0x3f0 [ 1510.093216] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1510.093233] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1510.093244] ? __mutex_unlock_slowpath+0x75/0x770 [ 1510.093259] alloc_pages_current+0x155/0x260 [ 1510.093272] ion_page_pool_alloc+0x118/0x1b0 [ 1510.093282] ion_system_heap_allocate+0x133/0x8c0 [ 1510.093290] ? ion_alloc+0x187/0x810 [ 1510.093298] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1510.093307] ? ion_system_contig_heap_create+0x130/0x130 [ 1510.093316] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1510.093325] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1510.093333] ion_alloc+0x204/0x810 [ 1510.093345] ? ion_dma_buf_release+0x40/0x40 [ 1510.093357] ? __might_fault+0x177/0x1b0 [ 1510.093369] ion_ioctl+0xea/0x1f0 [ 1510.093378] ? ion_query_heaps+0x360/0x360 [ 1510.093390] ? ion_query_heaps+0x360/0x360 [ 1510.114095] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 1510.115154] do_vfs_ioctl+0x75a/0xff0 [ 1510.115170] ? ioctl_preallocate+0x1a0/0x1a0 [ 1510.132009] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 1510.134416] ? lock_downgrade+0x740/0x740 [ 1510.134431] ? __fget+0x225/0x360 [ 1510.134440] ? do_vfs_ioctl+0xff0/0xff0 [ 1510.134450] ? security_file_ioctl+0x83/0xb0 [ 1510.134461] SyS_ioctl+0x7f/0xb0 [ 1510.134468] ? do_vfs_ioctl+0xff0/0xff0 [ 1510.134478] do_syscall_64+0x1d5/0x640 [ 1510.134492] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1510.134499] RIP: 0033:0x4665f9 [ 1510.134503] RSP: 002b:00007f89f6a27188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1510.134512] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1510.134518] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000007 [ 1510.134523] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1510.134528] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1510.134533] R13: 00007ffeb438bdef R14: 00007f89f6a27300 R15: 0000000000022000 [ 1510.205618] Mem-Info: [ 1510.210269] CPU: 1 PID: 9073 Comm: syz-executor.0 Not tainted 4.14.232-syzkaller #0 [ 1510.224543] active_anon:15374 inactive_anon:10070 isolated_anon:24 [ 1510.224543] active_file:1541 inactive_file:2869 isolated_file:0 [ 1510.224543] unevictable:0 dirty:72 writeback:0 unstable:0 [ 1510.224543] slab_reclaimable:22609 slab_unreclaimable:103160 [ 1510.224543] mapped:55317 shmem:11030 pagetables:785 bounce:0 [ 1510.224543] free:76058 free_pcp:79 free_cma:0 [ 1510.226813] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1510.226818] Call Trace: [ 1510.226839] dump_stack+0x1b2/0x281 [ 1510.226854] warn_alloc.cold+0x96/0x1cc [ 1510.226868] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1510.243705] Node 0 active_anon:61376kB inactive_anon:32152kB active_file:5980kB inactive_file:11420kB unevictable:0kB isolated(anon):96kB isolated(file):0kB mapped:221268kB dirty:276kB writeback:0kB shmem:35924kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 16384kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1510.248634] ? zone_watermark_ok_safe+0x220/0x220 [ 1510.248660] __alloc_pages_nodemask+0x2127/0x2720 [ 1510.248675] ? lock_acquire+0x170/0x3f0 [ 1510.248689] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1510.264212] Node 1 active_anon:120kB inactive_anon:8128kB active_file:184kB inactive_file:56kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:12kB writeback:0kB shmem:8196kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1510.265214] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1510.265229] ? __mutex_unlock_slowpath+0x75/0x770 [ 1510.265236] ? retint_kernel+0x2d/0x2d [ 1510.265250] alloc_pages_current+0x155/0x260 [ 1510.269828] Node 0 [ 1510.272868] ion_page_pool_alloc+0x118/0x1b0 [ 1510.272880] ion_system_heap_allocate+0x133/0x8c0 [ 1510.272890] ? ion_alloc+0x187/0x810 [ 1510.272900] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1510.272908] ? ion_system_contig_heap_create+0x130/0x130 [ 1510.272916] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1510.272926] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1510.272935] ion_alloc+0x204/0x810 [ 1510.272947] ? ion_dma_buf_release+0x40/0x40 [ 1510.280207] DMA free:11128kB min:204kB low:252kB high:300kB active_anon:4kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1510.282104] ? __might_fault+0x177/0x1b0 [ 1510.282119] ion_ioctl+0xea/0x1f0 [ 1510.282128] ? ion_query_heaps+0x360/0x360 [ 1510.282139] ? ion_query_heaps+0x360/0x360 [ 1510.282148] do_vfs_ioctl+0x75a/0xff0 [ 1510.282159] ? ioctl_preallocate+0x1a0/0x1a0 [ 1510.282168] ? lock_downgrade+0x740/0x740 [ 1510.282180] ? __fget+0x225/0x360 [ 1510.287911] lowmem_reserve[]: [ 1510.293409] ? do_vfs_ioctl+0xff0/0xff0 [ 1510.293422] ? security_file_ioctl+0x83/0xb0 [ 1510.293433] SyS_ioctl+0x7f/0xb0 [ 1510.293441] ? do_vfs_ioctl+0xff0/0xff0 [ 1510.293452] do_syscall_64+0x1d5/0x640 [ 1510.293466] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1510.293478] RIP: 0033:0x4665f9 [ 1510.333158] 0 [ 1510.341290] RSP: 002b:00007fe4a6925188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1510.341300] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1510.341305] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000007 [ 1510.341309] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1510.341313] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1510.341317] R13: 00007ffe5881209f R14: 00007fe4a6925300 R15: 0000000000022000 [ 1510.525642] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1510.670312] systemd[1]: Started Journal Service. [ 1510.772586] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1510.783153] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 1510.789615] 8021q: adding VLAN 0 to HW filter on device team0 [ 1510.825582] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 1510.852877] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1510.861211] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1510.882637] bridge0: port 1(bridge_slave_0) entered blocking state [ 1510.889671] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1510.915242] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 1510.952359] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1510.960582] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1511.002600] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1511.010728] 2717 2718 2718 2718 [ 1511.026093] Node 0 DMA32 free:44328kB min:36200kB low:45248kB high:54296kB active_anon:61188kB inactive_anon:32152kB active_file:6468kB inactive_file:10976kB unevictable:0kB writepending:320kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7392kB pagetables:3124kB bounce:0kB free_pcp:1056kB local_pcp:616kB free_cma:0kB [ 1511.032363] bridge0: port 2(bridge_slave_1) entered blocking state [ 1511.064884] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1511.099652] lowmem_reserve[]: 0 0 0 0 0 [ 1511.115146] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1511.154706] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 1511.170405] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1511.180860] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 1511.205568] lowmem_reserve[]: 0 0 0 0 0 [ 1511.214483] Node 1 Normal free:397968kB min:53696kB low:67120kB high:80544kB active_anon:340kB inactive_anon:8132kB active_file:188kB inactive_file:120kB unevictable:0kB writepending:12kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:32kB pagetables:76kB bounce:0kB free_pcp:524kB local_pcp:8kB free_cma:0kB [ 1511.221590] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1511.276606] lowmem_reserve[]: 0 0 0 0 0 [ 1511.286342] Node 0 DMA: 3*4kB (UME) 3*8kB (UME) 6*16kB (UME) 7*32kB (UME) 3*64kB (UME) 3*128kB (UME) 2*256kB (ME) 3*512kB (UME) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (U) = 11172kB [ 1511.294818] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 1511.326526] Node 0 DMA32: 1709*4kB (MEH) 483*8kB (UME) 91*16kB (ME) 29*32kB (ME) 3*64kB (UH) 17*128kB (U) 31*256kB (U) 6*512kB (UMH) 46*1024kB (UMH) 3*2048kB (U) 0*4096kB = 79708kB [ 1511.353094] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1511.361408] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1511.368215] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1511.392929] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1511.401689] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 1511.412041] Node 1 Normal: 1*4kB (M) 0*8kB 5*16kB (UM) 24*32kB (UM) 2189*64kB (UM) 50*128kB (UM) 57*256kB (UM) 48*512kB (UM) 249*1024kB (UM) 10*2048kB (U) 3*4096kB (U) = 474260kB [ 1511.433856] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1511.441923] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1511.462833] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1511.474239] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 1511.483099] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1511.491142] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1511.512422] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1511.521541] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1511.544422] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 1511.552577] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1511.560941] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1511.580072] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1511.584370] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 1511.602177] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1511.609107] 15174 total pagecache pages [ 1511.620487] 0 pages in swap cache [ 1511.627562] Swap cache stats: add 0, delete 0, find 0/0 [ 1511.641604] Free swap = 0kB [ 1511.649967] Total swap = 0kB [ 1511.654721] 2097051 pages RAM [ 1511.658163] 0 pages HighMem/MovableOnly [ 1511.658872] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 1511.673733] 363849 pages reserved [ 1511.681810] 0 pages cma reserved [ 1511.696166] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 1511.715530] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1511.725946] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1511.794601] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1511.992269] Bluetooth: hci5 command 0x041b tx timeout [ 1512.090848] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 1512.117546] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 1512.142190] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1512.154794] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1512.254800] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 1512.276634] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 1512.300062] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 1512.320089] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 1512.336861] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1512.357319] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1512.385474] device veth0_vlan entered promiscuous mode [ 1512.402383] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1512.422463] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1512.459189] device veth1_vlan entered promiscuous mode [ 1512.477216] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 1512.516252] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 1512.543524] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 1512.579457] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 1512.596488] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1512.605029] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1512.637126] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1512.659248] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1512.678785] device veth0_macvtap entered promiscuous mode [ 1512.697099] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 1512.720086] device veth1_macvtap entered promiscuous mode [ 1512.737164] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 1512.759897] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 1512.796677] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 1512.820033] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1512.842012] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1512.875891] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1512.896323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1512.922366] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1512.943345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1512.975512] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1512.996626] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1513.040090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1513.061988] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1513.097038] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 1513.104293] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1513.111092] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1513.135180] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1513.153657] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1513.161750] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1513.184811] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1513.206872] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1513.233658] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1513.272372] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1513.297674] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1513.337308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1513.371951] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1513.385963] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1513.397364] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1513.411098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1513.442223] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 1513.449774] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1513.473179] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1513.481186] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1514.077433] Bluetooth: hci5 command 0x040f tx timeout [ 1514.376165] syz-executor.5 invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1514.389422] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 1514.424593] CPU: 0 PID: 8899 Comm: syz-executor.5 Not tainted 4.14.232-syzkaller #0 [ 1514.432948] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1514.442391] Call Trace: [ 1514.445007] dump_stack+0x1b2/0x281 [ 1514.448723] dump_header+0x178/0x82f [ 1514.452647] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1514.457847] ? ___ratelimit+0x2cd/0x530 [ 1514.462171] oom_kill_process.cold+0x10/0xa40 [ 1514.467286] out_of_memory+0xe3e/0x1190 [ 1514.471448] ? oom_killer_disable+0x1c0/0x1c0 [ 1514.476036] ? mutex_trylock+0x152/0x1a0 [ 1514.482563] __alloc_pages_nodemask+0x23e1/0x2720 [ 1514.487961] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1514.492909] alloc_pages_current+0x155/0x260 [ 1514.497855] filemap_fault+0x11a1/0x1ad0 [ 1514.502102] ext4_filemap_fault+0x84/0xb0 [ 1514.506438] __do_fault+0xfa/0x380 [ 1514.510175] __handle_mm_fault+0x2497/0x4620 [ 1514.515030] ? vm_insert_page+0x7c0/0x7c0 [ 1514.519578] ? hrtimer_nanosleep+0x1ff/0x4b0 [ 1514.524167] ? nanosleep_copyout+0x100/0x100 [ 1514.529641] ? mark_held_locks+0xa6/0xf0 [ 1514.534078] handle_mm_fault+0x455/0x9c0 [ 1514.538594] __do_page_fault+0x549/0xad0 [ 1514.542675] ? spurious_fault+0x640/0x640 [ 1514.547000] ? do_page_fault+0x60/0x500 [ 1514.551147] ? page_fault+0x2f/0x50 [ 1514.554869] page_fault+0x45/0x50 [ 1514.558587] RIP: 171af1: (null) [ 1514.562738] RSP: 0003:00007ffd0570ac6c EFLAGS: 00000032 [ 1514.645926] Mem-Info: [ 1514.682744] active_anon:14749 inactive_anon:10070 isolated_anon:0 [ 1514.682744] active_file:47 inactive_file:0 isolated_file:0 [ 1514.682744] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1514.682744] slab_reclaimable:22063 slab_unreclaimable:104978 [ 1514.682744] mapped:52570 shmem:11029 pagetables:760 bounce:0 [ 1514.682744] free:25239 free_pcp:20 free_cma:0 [ 1514.790420] Node 0 active_anon:58676kB inactive_anon:32152kB active_file:120kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:210296kB dirty:0kB writeback:0kB shmem:35924kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 14336kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1514.831812] Node 1 active_anon:320kB inactive_anon:8128kB active_file:56kB inactive_file:24kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:8192kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1514.876843] Node 0 DMA free:11076kB min:204kB low:252kB high:300kB active_anon:4kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1514.906915] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1514.912045] Node 0 DMA32 free:36136kB min:36200kB low:45248kB high:54296kB active_anon:58672kB inactive_anon:32152kB active_file:44kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7360kB pagetables:2964kB bounce:0kB free_pcp:100kB local_pcp:0kB free_cma:0kB [ 1514.945373] lowmem_reserve[]: 0 0 0 0 0 [ 1514.950454] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1514.979817] lowmem_reserve[]: 0 0 0 0 0 [ 1514.984133] Node 1 Normal free:53620kB min:53696kB low:67120kB high:80544kB active_anon:320kB inactive_anon:8128kB active_file:28kB inactive_file:32kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:32kB pagetables:76kB bounce:0kB free_pcp:120kB local_pcp:120kB free_cma:0kB [ 1515.016245] lowmem_reserve[]: 0 0 0 0 0 [ 1515.020348] Node 0 DMA: 3*4kB (UME) 3*8kB (UME) 2*16kB (ME) 2*32kB (ME) 3*64kB (UME) 2*128kB (ME) 3*256kB (UME) 3*512kB (UME) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (U) = 11076kB [ 1515.038756] Node 0 DMA32: 2428*4kB (ME) 891*8kB (ME) 240*16kB (ME) 73*32kB (MEH) 19*64kB (MH) 5*128kB (MH) 4*256kB (MH) 4*512kB (MH) 2*1024kB (MH) 3*2048kB (UM) 0*4096kB = 36136kB [ 1515.057912] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1515.068910] Node 1 Normal: 35*4kB (ME) 31*8kB (UME) 35*16kB (ME) 26*32kB (UME) 24*64kB (ME) 13*128kB (UME) 6*256kB (ME) 6*512kB (UME) 3*1024kB (ME) 6*2048kB (UME) 7*4096kB (U) = 53620kB [ 1515.088237] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1515.097403] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1515.108126] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1515.117412] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1515.128360] 11054 total pagecache pages [ 1515.132503] 0 pages in swap cache [ 1515.136258] Swap cache stats: add 0, delete 0, find 0/0 [ 1515.144310] Free swap = 0kB [ 1515.147454] Total swap = 0kB [ 1515.150554] 2097051 pages RAM [ 1515.153722] 0 pages HighMem/MovableOnly [ 1515.157832] 363849 pages reserved [ 1515.161443] 0 pages cma reserved [ 1515.170197] Out of memory (oom_kill_allocating_task): Kill process 8899 (syz-executor.5) score 0 or sacrifice child [ 1515.182533] Killed process 9160 (syz-executor.5) total-vm:93120kB, anon-rss:100kB, file-rss:33940kB, shmem-rss:0kB [ 1515.273026] oom_reaper: reaped process 9160 (syz-executor.5), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1515.354204] syz-fuzzer invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1515.380512] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 1515.394690] CPU: 1 PID: 7964 Comm: syz-fuzzer Not tainted 4.14.232-syzkaller #0 [ 1515.402447] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1515.412223] Call Trace: [ 1515.414915] dump_stack+0x1b2/0x281 [ 1515.418671] dump_header+0x178/0x82f [ 1515.422575] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1515.427873] ? ___ratelimit+0x2cd/0x530 [ 1515.431943] oom_kill_process.cold+0x10/0xa40 [ 1515.436482] out_of_memory+0xe3e/0x1190 [ 1515.440464] ? oom_killer_disable+0x1c0/0x1c0 [ 1515.445500] ? mutex_trylock+0x152/0x1a0 [ 1515.449745] __alloc_pages_nodemask+0x23e1/0x2720 [ 1515.454696] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1515.460077] alloc_pages_current+0x155/0x260 [ 1515.464845] filemap_fault+0x11a1/0x1ad0 [ 1515.469114] ext4_filemap_fault+0x84/0xb0 [ 1515.473273] __do_fault+0xfa/0x380 [ 1515.477134] __handle_mm_fault+0x2497/0x4620 [ 1515.482095] ? vm_insert_page+0x7c0/0x7c0 [ 1515.486243] ? lock_downgrade+0x740/0x740 [ 1515.490568] ? mark_held_locks+0xa6/0xf0 [ 1515.494637] handle_mm_fault+0x455/0x9c0 [ 1515.498685] __do_page_fault+0x549/0xad0 [ 1515.502741] ? spurious_fault+0x640/0x640 [ 1515.506875] ? do_page_fault+0x60/0x500 [ 1515.511108] ? page_fault+0x2f/0x50 [ 1515.514718] page_fault+0x45/0x50 [ 1515.518153] RIP: 0000:0x947a5c [ 1515.521352] RSP: 2e000:000000c00003dec8 EFLAGS: 0043b6a0 [ 1515.523828] Mem-Info: [ 1515.531790] active_anon:14749 inactive_anon:10070 isolated_anon:0 [ 1515.531790] active_file:32 inactive_file:0 isolated_file:0 [ 1515.531790] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1515.531790] slab_reclaimable:22063 slab_unreclaimable:105003 [ 1515.531790] mapped:52574 shmem:11029 pagetables:760 bounce:0 [ 1515.531790] free:25174 free_pcp:90 free_cma:0 [ 1515.568044] Node 0 active_anon:58676kB inactive_anon:32152kB active_file:0kB inactive_file:40kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:210296kB dirty:0kB writeback:0kB shmem:35924kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 14336kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1515.597018] Node 1 active_anon:320kB inactive_anon:8128kB active_file:128kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:8192kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1515.624139] Node 0 DMA free:11052kB min:204kB low:252kB high:300kB active_anon:4kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1515.652363] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1515.657432] Node 0 DMA32 free:35948kB min:36200kB low:45248kB high:54296kB active_anon:58672kB inactive_anon:32152kB active_file:0kB inactive_file:40kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7360kB pagetables:2964kB bounce:0kB free_pcp:264kB local_pcp:144kB free_cma:0kB [ 1515.861779] lowmem_reserve[]: 0 0 0 0 0 [ 1515.866168] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1515.910017] lowmem_reserve[]: 0 0 0 0 0 [ 1515.919206] Node 1 Normal free:53728kB min:53696kB low:67120kB high:80544kB active_anon:304kB inactive_anon:8128kB active_file:112kB inactive_file:0kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:32kB pagetables:4kB bounce:0kB free_pcp:92kB local_pcp:92kB free_cma:0kB [ 1515.960394] lowmem_reserve[]: 0 0 0 0 0 [ 1515.966597] Node 0 DMA: 3*4kB (UME) 2*8kB (ME) 3*16kB (UME) 3*32kB (UME) 2*64kB (ME) 2*128kB (ME) 3*256kB (UME) 3*512kB (UME) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (U) = 11052kB [ 1516.038873] Node 0 DMA32: 2434*4kB (UME) 896*8kB (UME) 245*16kB (UME) 76*32kB (UME) 20*64kB (UM) 5*128kB (M) 5*256kB (UM) 5*512kB (UM) 3*1024kB (UM) 2*2048kB (M) 0*4096kB = 36184kB [ 1516.105197] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1516.139449] Node 1 Normal: 37*4kB (ME) 30*8kB (UME) 36*16kB (ME) 26*32kB (UME) 24*64kB (ME) 12*128kB (ME) 7*256kB (UME) 5*512kB (ME) 3*1024kB (ME) 6*2048kB (UME) 7*4096kB (U) = 53252kB [ 1516.158714] Bluetooth: hci5 command 0x0419 tx timeout [ 1516.164309] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1516.175705] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1516.185700] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1516.195970] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1516.207107] 11153 total pagecache pages [ 1516.211247] 0 pages in swap cache [ 1516.214886] Swap cache stats: add 0, delete 0, find 0/0 [ 1516.220565] Free swap = 0kB [ 1516.223631] Total swap = 0kB [ 1516.226865] 2097051 pages RAM [ 1516.230093] 0 pages HighMem/MovableOnly [ 1516.234928] 363849 pages reserved [ 1516.238475] 0 pages cma reserved [ 1516.242393] Out of memory (oom_kill_allocating_task): Kill process 7964 (syz-fuzzer) score 0 or sacrifice child [ 1516.254393] Killed process 7975 (syz-executor.2) total-vm:84924kB, anon-rss:64kB, file-rss:0kB, shmem-rss:0kB [ 1516.278500] oom_reaper: reaped process 7975 (syz-executor.2), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1516.540698] syz-fuzzer invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1516.561710] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 1516.566662] CPU: 1 PID: 7964 Comm: syz-fuzzer Not tainted 4.14.232-syzkaller #0 [ 1516.574213] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1516.583865] Call Trace: [ 1516.586475] dump_stack+0x1b2/0x281 [ 1516.590216] dump_header+0x178/0x82f [ 1516.594218] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1516.599711] ? ___ratelimit+0x2cd/0x530 [ 1516.603741] oom_kill_process.cold+0x10/0xa40 [ 1516.608904] out_of_memory+0xe3e/0x1190 [ 1516.613014] ? oom_killer_disable+0x1c0/0x1c0 [ 1516.617618] ? mutex_trylock+0x152/0x1a0 [ 1516.622047] __alloc_pages_nodemask+0x23e1/0x2720 [ 1516.627002] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1516.631880] alloc_pages_current+0x155/0x260 [ 1516.636474] filemap_fault+0x11a1/0x1ad0 [ 1516.640529] ext4_filemap_fault+0x84/0xb0 [ 1516.644662] __do_fault+0xfa/0x380 [ 1516.648197] __handle_mm_fault+0x2497/0x4620 [ 1516.652710] ? vm_insert_page+0x7c0/0x7c0 [ 1516.656852] ? free_object+0xe4/0x240 [ 1516.660956] ? mark_held_locks+0xa6/0xf0 [ 1516.665779] handle_mm_fault+0x455/0x9c0 [ 1516.670131] __do_page_fault+0x549/0xad0 [ 1516.674276] ? spurious_fault+0x640/0x640 [ 1516.678504] ? do_page_fault+0x60/0x500 [ 1516.682569] ? page_fault+0x2f/0x50 [ 1516.686349] page_fault+0x45/0x50 [ 1516.689880] RIP: 0000:0x947a5c [ 1516.693052] RSP: 2800:000000c00003dfa0 EFLAGS: 0043b6a0 [ 1516.699677] Mem-Info: [ 1516.716844] active_anon:14716 inactive_anon:10070 isolated_anon:0 [ 1516.716844] active_file:35 inactive_file:0 isolated_file:0 [ 1516.716844] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1516.716844] slab_reclaimable:22064 slab_unreclaimable:104620 [ 1516.716844] mapped:43849 shmem:11029 pagetables:737 bounce:0 [ 1516.716844] free:24948 free_pcp:0 free_cma:0 [ 1516.800871] Node 0 active_anon:58560kB inactive_anon:32152kB active_file:688kB inactive_file:1204kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:176596kB dirty:0kB writeback:0kB shmem:35924kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 14336kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1516.836482] Node 1 active_anon:304kB inactive_anon:8128kB active_file:20kB inactive_file:24kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:8192kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1516.904960] Node 0 DMA free:11052kB min:204kB low:252kB high:300kB active_anon:4kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1516.935950] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1516.941675] Node 0 DMA32 free:36660kB min:36200kB low:45248kB high:54296kB active_anon:58500kB inactive_anon:32152kB active_file:696kB inactive_file:200kB unevictable:0kB writepending:8kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7360kB pagetables:2764kB bounce:0kB free_pcp:912kB local_pcp:160kB free_cma:0kB [ 1516.974979] lowmem_reserve[]: 0 0 0 0 0 [ 1516.979825] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1517.007312] lowmem_reserve[]: 0 0 0 0 0 [ 1517.023644] Node 1 Normal free:53260kB min:53696kB low:67120kB high:80544kB active_anon:304kB inactive_anon:8128kB active_file:40kB inactive_file:12kB unevictable:0kB writepending:8kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:32kB pagetables:4kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1517.136265] lowmem_reserve[]: 0 0 0 0 0 [ 1517.140570] Node 0 DMA: 3*4kB (UME) 2*8kB (ME) 3*16kB (UME) 3*32kB (UME) 2*64kB (ME) 2*128kB (ME) 3*256kB (UME) 3*512kB (UME) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (U) = 11052kB [ 1517.200150] Node 0 DMA32: 2411*4kB (ME) 911*8kB (UME) 241*16kB (UME) 74*32kB (UME) 19*64kB (M) 6*128kB (UM) 5*256kB (UM) 5*512kB (UM) 3*1024kB (UM) 2*2048kB (M) 0*4096kB = 36148kB [ 1517.263682] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1517.309156] Node 1 Normal: 34*4kB (ME) 27*8kB (UME) 35*16kB (ME) 26*32kB (UME) 23*64kB (ME) 11*128kB (ME) 8*256kB (UME) 5*512kB (ME) 3*1024kB (ME) 6*2048kB (UME) 7*4096kB (U) = 53264kB [ 1517.406605] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1517.420734] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1517.429519] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1517.500066] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1517.548764] 11079 total pagecache pages [ 1517.569671] 0 pages in swap cache [ 1517.590898] Swap cache stats: add 0, delete 0, find 0/0 [ 1517.602462] Free swap = 0kB [ 1517.609908] Total swap = 0kB [ 1517.652993] 2097051 pages RAM [ 1517.656296] 0 pages HighMem/MovableOnly [ 1517.660377] 363849 pages reserved [ 1517.720913] 0 pages cma reserved [ 1517.743328] Out of memory (oom_kill_allocating_task): Kill process 7964 (syz-fuzzer) score 0 or sacrifice child [ 1517.803427] Killed process 7976 (syz-executor.3) total-vm:84924kB, anon-rss:64kB, file-rss:0kB, shmem-rss:0kB [ 1517.861142] oom_reaper: reaped process 7976 (syz-executor.3), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1518.147882] systemd-journal invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1518.207342] systemd-journal cpuset=/ mems_allowed=0-1 [ 1518.255124] CPU: 0 PID: 9072 Comm: systemd-journal Not tainted 4.14.232-syzkaller #0 [ 1518.263942] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1518.273942] Call Trace: [ 1518.276543] dump_stack+0x1b2/0x281 [ 1518.280202] dump_header+0x178/0x82f [ 1518.284003] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1518.289280] ? ___ratelimit+0x2cd/0x530 [ 1518.293347] oom_kill_process.cold+0x10/0xa40 [ 1518.297868] out_of_memory+0xe3e/0x1190 [ 1518.302030] ? oom_killer_disable+0x1c0/0x1c0 [ 1518.306710] ? mutex_trylock+0x152/0x1a0 [ 1518.310863] __alloc_pages_nodemask+0x23e1/0x2720 [ 1518.316019] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1518.320880] alloc_pages_current+0x155/0x260 [ 1518.325469] filemap_fault+0x11a1/0x1ad0 [ 1518.329741] ext4_filemap_fault+0x84/0xb0 [ 1518.333980] __do_fault+0xfa/0x380 [ 1518.337521] __handle_mm_fault+0x2497/0x4620 [ 1518.342531] ? vm_insert_page+0x7c0/0x7c0 [ 1518.346877] ? __fsnotify_inode_delete+0x20/0x20 [ 1518.351753] ? __fsnotify_update_child_dentry_flags.part.0+0x2e0/0x2e0 [ 1518.358622] ? mark_held_locks+0xa6/0xf0 [ 1518.362739] handle_mm_fault+0x455/0x9c0 [ 1518.366900] __do_page_fault+0x549/0xad0 [ 1518.370971] ? spurious_fault+0x640/0x640 [ 1518.375237] ? do_page_fault+0x60/0x500 [ 1518.379223] ? page_fault+0x2f/0x50 [ 1518.383436] page_fault+0x45/0x50 [ 1518.386978] RIP: 0096:0x55df186ed958 [ 1518.390773] RSP: 7493b4e2:00007ffd7493b4e2 EFLAGS: 7ffd7493ace0 [ 1518.450369] Mem-Info: [ 1518.469205] active_anon:14691 inactive_anon:10070 isolated_anon:0 [ 1518.469205] active_file:35 inactive_file:0 isolated_file:0 [ 1518.469205] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1518.469205] slab_reclaimable:22002 slab_unreclaimable:104121 [ 1518.469205] mapped:43870 shmem:11029 pagetables:692 bounce:0 [ 1518.469205] free:25100 free_pcp:30 free_cma:0 [ 1518.513345] Node 0 active_anon:58460kB inactive_anon:32152kB active_file:116kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:175480kB dirty:0kB writeback:0kB shmem:35924kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 14336kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1518.554643] Node 1 active_anon:304kB inactive_anon:8128kB active_file:24kB inactive_file:24kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:8192kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1518.592752] Node 0 DMA free:11052kB min:204kB low:252kB high:300kB active_anon:4kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1518.630040] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1518.636993] Node 0 DMA32 free:36084kB min:36200kB low:45248kB high:54296kB active_anon:58456kB inactive_anon:32152kB active_file:48kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7296kB pagetables:2764kB bounce:0kB free_pcp:120kB local_pcp:0kB free_cma:0kB [ 1518.676526] lowmem_reserve[]: 0 0 0 0 0 [ 1518.680693] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1518.716929] lowmem_reserve[]: 0 0 0 0 0 [ 1518.720980] Node 1 Normal free:53264kB min:53696kB low:67120kB high:80544kB active_anon:304kB inactive_anon:8128kB active_file:56kB inactive_file:0kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:32kB pagetables:4kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1518.756697] lowmem_reserve[]: 0 0 0 0 0 [ 1518.760916] Node 0 DMA: 3*4kB (UME) 2*8kB (ME) 3*16kB (UME) 3*32kB (UME) 2*64kB (ME) 2*128kB (ME) 3*256kB (UME) 3*512kB (UME) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (U) = 11052kB [ 1518.781203] Node 0 DMA32: 2435*4kB (ME) 912*8kB (UME) 240*16kB (ME) 77*32kB (UME) 18*64kB (M) 7*128kB (UM) 4*256kB (M) 5*512kB (UM) 3*1024kB (UM) 2*2048kB (M) 0*4096kB = 36140kB [ 1518.803619] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1518.817156] Node 1 Normal: 33*4kB (ME) 26*8kB (UME) 34*16kB (ME) 25*32kB (UME) 22*64kB (ME) 10*128kB (ME) 9*256kB (UME) 5*512kB (ME) 3*1024kB (ME) 6*2048kB (UME) 7*4096kB (U) = 53268kB [ 1518.840815] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1518.850417] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1518.865644] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1518.875089] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1518.885935] 11073 total pagecache pages [ 1518.890131] 0 pages in swap cache [ 1518.893643] Swap cache stats: add 0, delete 0, find 0/0 [ 1518.899003] Free swap = 0kB [ 1518.904364] Total swap = 0kB [ 1518.907572] 2097051 pages RAM [ 1518.910897] 0 pages HighMem/MovableOnly [ 1518.914916] 363849 pages reserved [ 1518.918365] 0 pages cma reserved [ 1518.923941] Out of memory (oom_kill_allocating_task): Kill process 9072 (systemd-journal) score 0 or sacrifice child [ 1518.935035] Killed process 9072 (systemd-journal) total-vm:46096kB, anon-rss:472kB, file-rss:0kB, shmem-rss:1400kB [ 1518.948831] oom_reaper: reaped process 9072 (systemd-journal), now anon-rss:0kB, file-rss:0kB, shmem-rss:1400kB [ 1518.970799] systemd invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1518.994628] systemd cpuset=/ mems_allowed=0-1 [ 1518.999314] CPU: 0 PID: 1 Comm: systemd Not tainted 4.14.232-syzkaller #0 [ 1519.006421] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1519.015869] Call Trace: [ 1519.018477] dump_stack+0x1b2/0x281 [ 1519.022116] dump_header+0x178/0x82f [ 1519.026063] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1519.031851] ? ___ratelimit+0x2cd/0x530 [ 1519.035845] oom_kill_process.cold+0x10/0xa40 [ 1519.040439] ? lock_downgrade+0x740/0x740 [ 1519.044610] out_of_memory+0x2dc/0x1190 [ 1519.048585] ? oom_killer_disable+0x1c0/0x1c0 [ 1519.053082] ? mutex_trylock+0x152/0x1a0 [ 1519.057420] __alloc_pages_nodemask+0x23e1/0x2720 [ 1519.062413] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1519.068084] alloc_pages_current+0x155/0x260 [ 1519.073176] filemap_fault+0x11a1/0x1ad0 [ 1519.077523] ext4_filemap_fault+0x84/0xb0 [ 1519.081763] __do_fault+0xfa/0x380 [ 1519.085394] __handle_mm_fault+0x2497/0x4620 [ 1519.089978] ? vm_insert_page+0x7c0/0x7c0 [ 1519.094832] ? lock_downgrade+0x740/0x740 [ 1519.099261] ? mark_held_locks+0xa6/0xf0 [ 1519.104249] handle_mm_fault+0x455/0x9c0 [ 1519.108491] __do_page_fault+0x549/0xad0 [ 1519.112913] ? spurious_fault+0x640/0x640 [ 1519.117432] ? do_page_fault+0x60/0x500 [ 1519.121564] ? page_fault+0x2f/0x50 [ 1519.125381] page_fault+0x45/0x50 [ 1519.129197] RIP: d64cf960:0x5625d599fbb3 [ 1519.133336] RSP: 0000:00007fffcc960610 EFLAGS: 00000007 [ 1519.141864] Mem-Info: [ 1519.149926] active_anon:14560 inactive_anon:10070 isolated_anon:0 [ 1519.149926] active_file:5 inactive_file:16 isolated_file:0 [ 1519.149926] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1519.149926] slab_reclaimable:21981 slab_unreclaimable:104112 [ 1519.149926] mapped:43524 shmem:11029 pagetables:647 bounce:0 [ 1519.149926] free:25120 free_pcp:91 free_cma:0 [ 1519.194245] Node 0 active_anon:57944kB inactive_anon:32152kB active_file:0kB inactive_file:48kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:174096kB dirty:0kB writeback:0kB shmem:35924kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 14336kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1519.231862] Node 1 active_anon:296kB inactive_anon:8128kB active_file:40kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:8192kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1519.268345] Node 0 DMA free:11052kB min:204kB low:252kB high:300kB active_anon:4kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1519.300150] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1519.325307] Node 0 DMA32 free:36020kB min:36200kB low:45248kB high:54296kB active_anon:57944kB inactive_anon:32148kB active_file:8kB inactive_file:136kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7232kB pagetables:2496kB bounce:0kB free_pcp:352kB local_pcp:4kB free_cma:0kB [ 1519.358523] lowmem_reserve[]: 0 0 0 0 0 [ 1519.381045] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1519.418057] lowmem_reserve[]: 0 0 0 0 0 [ 1519.424327] Node 1 Normal free:53272kB min:53696kB low:67120kB high:80544kB active_anon:296kB inactive_anon:8128kB active_file:20kB inactive_file:28kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:32kB pagetables:4kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1519.464716] lowmem_reserve[]: 0 0 0 0 0 [ 1519.468747] Node 0 DMA: 3*4kB (UME) 2*8kB (ME) 3*16kB (UME) 3*32kB (UME) 2*64kB (ME) 2*128kB (ME) 3*256kB (UME) 3*512kB (UME) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (U) = 11052kB [ 1519.493848] Node 0 DMA32: 2427*4kB (ME) 915*8kB (ME) 242*16kB (UME) 75*32kB (UME) 16*64kB (UM) 6*128kB (UM) 5*256kB (UM) 3*512kB (M) 4*1024kB (UM) 2*2048kB (M) 0*4096kB = 36100kB [ 1519.516715] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1519.528898] Node 1 Normal: 34*4kB (ME) 26*8kB (UME) 34*16kB (ME) 25*32kB (UME) 22*64kB (ME) 10*128kB (ME) 9*256kB (UME) 5*512kB (ME) 3*1024kB (ME) 6*2048kB (UME) 7*4096kB (U) = 53272kB [ 1519.552172] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1519.561031] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1519.570901] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1519.600081] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1519.622390] 11052 total pagecache pages [ 1519.626628] 0 pages in swap cache [ 1519.631417] Swap cache stats: add 0, delete 0, find 0/0 [ 1519.645973] Free swap = 0kB [ 1519.650048] Total swap = 0kB [ 1519.658127] 2097051 pages RAM [ 1519.661269] 0 pages HighMem/MovableOnly [ 1519.669150] 363849 pages reserved [ 1519.677756] 0 pages cma reserved [ 1519.684001] Out of memory: Kill process 9062 (syz-executor.3) score 1005 or sacrifice child [ 1519.692780] Killed process 9070 (syz-executor.3) total-vm:93252kB, anon-rss:2196kB, file-rss:34820kB, shmem-rss:0kB [ 1519.783186] oom_reaper: reaped process 9070 (syz-executor.3), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1519.810943] ion_system_heap invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=0, oom_score_adj=0 [ 1519.839863] ion_system_heap cpuset=/ mems_allowed=0-1 [ 1519.849635] CPU: 1 PID: 4247 Comm: ion_system_heap Not tainted 4.14.232-syzkaller #0 [ 1519.853238] syz-executor.3: [ 1519.857621] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1519.857630] page allocation failure: order:0 [ 1519.860719] Call Trace: [ 1519.877544] dump_stack+0x1b2/0x281 [ 1519.880892] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1519.881369] dump_header+0x178/0x82f [ 1519.881381] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1519.889232] syz-executor.3 cpuset= [ 1519.893083] ? ___ratelimit+0x2cd/0x530 [ 1519.893095] oom_kill_process.cold+0x10/0xa40 [ 1519.893107] ? lock_downgrade+0x740/0x740 [ 1519.893120] out_of_memory+0x2dc/0x1190 [ 1519.893133] ? oom_killer_disable+0x1c0/0x1c0 [ 1519.893143] ? mutex_trylock+0x152/0x1a0 [ 1519.893153] __alloc_pages_nodemask+0x23e1/0x2720 [ 1519.893171] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1519.893186] ? ion_heap_clear_pages+0x4c/0x70 [ 1519.909361] / [ 1519.910735] ? lock_acquire+0x170/0x3f0 [ 1519.917557] mems_allowed=0-1 [ 1519.919455] ? cache_grow_begin+0x3f/0x700 [ 1519.956646] cache_grow_begin+0x91/0x700 [ 1519.960960] fallback_alloc+0x207/0x2c0 [ 1519.965031] kmem_cache_alloc_node_trace+0xed/0x400 [ 1519.970299] __get_vm_area_node+0xed/0x340 [ 1519.974621] vmap+0xd5/0x290 [ 1519.977803] ? ion_heap_clear_pages+0x23/0x70 [ 1519.983124] ? vunmap+0x50/0x50 [ 1519.986405] ? __vunmap+0x21c/0x300 [ 1519.990028] ion_heap_clear_pages+0x23/0x70 [ 1519.994453] ion_heap_sglist_zero+0x165/0x220 [ 1519.998946] ? ion_heap_clear_pages+0x70/0x70 [ 1520.003645] ? finish_task_switch+0x178/0x610 [ 1520.008244] ? pagerange_is_ram_callback+0x100/0x100 [ 1520.013642] ? ion_heap_deferred_free+0x222/0x470 [ 1520.018766] ion_system_heap_free+0x1d0/0x240 [ 1520.023628] ion_buffer_destroy+0x132/0x190 [ 1520.028038] ion_heap_deferred_free+0x22a/0x470 [ 1520.032977] ? __schedule+0x807/0x1de0 [ 1520.036865] ? ion_heap_shrink_scan+0x1a0/0x1a0 [ 1520.041532] ? wait_woken+0x230/0x230 [ 1520.045416] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1520.050635] ? ion_heap_shrink_scan+0x1a0/0x1a0 [ 1520.055324] kthread+0x30d/0x420 [ 1520.058843] ? kthread_create_on_node+0xd0/0xd0 [ 1520.063614] ret_from_fork+0x24/0x30 [ 1520.068474] CPU: 0 PID: 9070 Comm: syz-executor.3 Not tainted 4.14.232-syzkaller #0 [ 1520.076672] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1520.083499] Mem-Info: [ 1520.086867] Call Trace: [ 1520.086890] dump_stack+0x1b2/0x281 [ 1520.089291] active_anon:14012 inactive_anon:10069 isolated_anon:0 [ 1520.089291] active_file:11 inactive_file:12 isolated_file:0 [ 1520.089291] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1520.089291] slab_reclaimable:21984 slab_unreclaimable:104123 [ 1520.089291] mapped:34817 shmem:11029 pagetables:624 bounce:0 [ 1520.089291] free:13940 free_pcp:136 free_cma:0 [ 1520.091956] warn_alloc.cold+0x96/0x1cc [ 1520.091968] ? zone_watermark_ok_safe+0x220/0x220 [ 1520.091976] ? usleep_range+0x130/0x130 [ 1520.091984] ? try_to_free_pages+0x23f/0x6e0 [ 1520.091993] ? _find_next_bit+0xdb/0x100 [ 1520.092004] ? run_timer_softirq+0x5a0/0x5a0 [ 1520.095829] Node 0 active_anon:55752kB inactive_anon:32148kB active_file:20kB inactive_file:24kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:139268kB dirty:0kB writeback:0kB shmem:35924kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1520.131377] __alloc_pages_nodemask+0x2127/0x2720 [ 1520.131396] ? lock_acquire+0x170/0x3f0 [ 1520.131413] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1520.135508] Node 1 active_anon:296kB inactive_anon:8128kB active_file:24kB inactive_file:24kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:8192kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1520.140311] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1520.144291] Node 0 [ 1520.148852] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1520.153003] DMA free:10972kB min:204kB low:252kB high:300kB active_anon:4kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1520.157468] ? __sanitizer_cov_trace_pc+0x29/0x50 [ 1520.185882] lowmem_reserve[]: [ 1520.190704] alloc_pages_current+0x155/0x260 [ 1520.194687] 0 [ 1520.199590] ion_page_pool_alloc+0x118/0x1b0 [ 1520.226841] 2717 [ 1520.231668] ion_system_heap_allocate+0x133/0x8c0 [ 1520.231681] ? ion_alloc+0x187/0x810 [ 1520.233918] 2718 [ 1520.239357] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1520.265625] 2718 [ 1520.270565] ? ion_system_contig_heap_create+0x130/0x130 [ 1520.273777] 2718 [ 1520.278343] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1520.284732] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1520.284743] ion_alloc+0x204/0x810 [ 1520.284757] ? ion_dma_buf_release+0x40/0x40 [ 1520.286882] Node 0 [ 1520.291884] ? __might_fault+0x177/0x1b0 [ 1520.291898] ion_ioctl+0xea/0x1f0 [ 1520.295606] DMA32 free:18052kB min:36200kB low:45248kB high:54296kB active_anon:55748kB inactive_anon:32148kB active_file:20kB inactive_file:24kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7232kB pagetables:2492kB bounce:0kB free_pcp:424kB local_pcp:260kB free_cma:0kB [ 1520.297644] ? ion_query_heaps+0x360/0x360 [ 1520.303184] lowmem_reserve[]: [ 1520.305404] ? ion_query_heaps+0x360/0x360 [ 1520.310820] 0 0 [ 1520.313069] do_vfs_ioctl+0x75a/0xff0 [ 1520.313082] ? ioctl_preallocate+0x1a0/0x1a0 [ 1520.313093] ? lock_downgrade+0x740/0x740 [ 1520.318178] 0 0 0 [ 1520.318189] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1520.318203] lowmem_reserve[]: 0 0 0 0 0 [ 1520.318217] Node 1 Normal free:26736kB min:53696kB low:67120kB high:80544kB active_anon:296kB inactive_anon:8128kB active_file:24kB inactive_file:24kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:32kB pagetables:4kB bounce:0kB free_pcp:120kB local_pcp:0kB free_cma:0kB [ 1520.318230] lowmem_reserve[]: 0 0 0 0 0 [ 1520.318244] Node 0 DMA: 3*4kB (UME) 2*8kB (ME) 2*16kB (ME) 3*32kB (UME) 3*64kB (UME) 3*128kB (UME) 2*256kB (ME) 3*512kB (UME) 2*1024kB (ME) [ 1520.323239] ? __fget+0x225/0x360 [ 1520.323248] ? do_vfs_ioctl+0xff0/0xff0 [ 1520.323259] ? security_file_ioctl+0x83/0xb0 [ 1520.323269] SyS_ioctl+0x7f/0xb0 [ 1520.327580] 1*2048kB [ 1520.332081] ? do_vfs_ioctl+0xff0/0xff0 [ 1520.332095] do_syscall_64+0x1d5/0x640 [ 1520.332110] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1520.332117] RIP: 0033:0x4665f9 [ 1520.332125] RSP: 002b:00007f89f6a27188 EFLAGS: 00000246 [ 1520.334618] (E) [ 1520.339355] ORIG_RAX: 0000000000000010 [ 1520.339364] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1520.343700] 1*4096kB [ 1520.374296] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000007 [ 1520.374303] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1520.374307] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1520.374312] R13: 00007ffeb438bdef R14: 00007f89f6a27300 R15: 0000000000022000 [ 1520.385141] warn_alloc_show_mem: 1 callbacks suppressed [ 1520.385144] Mem-Info: [ 1520.411832] (U) [ 1520.443845] active_anon:14012 inactive_anon:10069 isolated_anon:0 [ 1520.443845] active_file:11 inactive_file:12 isolated_file:0 [ 1520.443845] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1520.443845] slab_reclaimable:21984 slab_unreclaimable:104123 [ 1520.443845] mapped:34817 shmem:11029 pagetables:624 bounce:0 [ 1520.443845] free:13940 free_pcp:136 free_cma:0 [ 1520.478856] = 10972kB [ 1520.495439] Node 0 active_anon:55752kB inactive_anon:32148kB active_file:20kB inactive_file:24kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:139268kB dirty:0kB writeback:0kB shmem:35924kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1520.509280] Node 0 [ 1520.520009] Node 1 active_anon:296kB inactive_anon:8128kB active_file:24kB inactive_file:24kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:8192kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1520.524015] DMA32: [ 1520.528262] Node 0 [ 1520.528664] 2027*4kB [ 1520.543957] DMA free:10972kB min:204kB low:252kB high:300kB active_anon:4kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1520.563910] (UME) [ 1520.576985] lowmem_reserve[]: [ 1520.592371] 707*8kB [ 1520.625544] 0 [ 1520.670625] (UME) [ 1520.685967] 2717 [ 1520.706270] 178*16kB [ 1520.724201] 2718 2718 2718 [ 1520.740225] Node 0 DMA32 free:18052kB min:36200kB low:45248kB high:54296kB active_anon:55748kB inactive_anon:32148kB active_file:20kB inactive_file:24kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7232kB pagetables:2492kB bounce:0kB free_pcp:420kB local_pcp:172kB free_cma:0kB [ 1520.740591] (UME) [ 1520.780006] lowmem_reserve[]: [ 1520.785646] 47*32kB [ 1520.786493] 0 [ 1520.789115] (UME) [ 1520.795482] 0 0 0 0 [ 1520.799955] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1520.806265] 0*64kB [ 1520.837417] lowmem_reserve[]: 0 0 0 0 0 [ 1520.845918] Node 1 Normal free:26736kB min:53696kB low:67120kB high:80544kB active_anon:296kB inactive_anon:8128kB active_file:24kB inactive_file:24kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:32kB pagetables:4kB bounce:0kB free_pcp:120kB local_pcp:120kB free_cma:0kB [ 1520.846801] 0*128kB [ 1520.885152] lowmem_reserve[]: 0 0 0 0 0 [ 1520.895928] Node 0 DMA: 3*4kB (UME) 2*8kB (ME) 2*16kB (ME) 3*32kB (UME) 3*64kB (UME) 3*128kB (UME) 2*256kB (ME) 3*512kB (UME) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (U) = 10972kB [ 1520.896500] 0*256kB [ 1520.920506] Node 0 DMA32: 2027*4kB (UME) 714*8kB (UME) 178*16kB (UME) 47*32kB (UME) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18172kB [ 1520.928948] 0*512kB [ 1520.945415] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1520.954310] 0*1024kB 0*2048kB 0*4096kB = 18116kB [ 1520.985708] Node 1 Normal: 34*4kB (ME) 26*8kB (UME) 35*16kB (UME) 25*32kB (UME) 23*64kB (UME) 11*128kB (UME) 9*256kB (UME) 5*512kB (ME) 3*1024kB (ME) 3*2048kB (ME) 2*4096kB (U) = 26856kB [ 1520.987310] Node 0 [ 1521.007167] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1521.019192] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1521.022762] Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1521.032951] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1521.050913] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1521.059126] Node 1 Normal: 34*4kB (ME) 26*8kB (UME) 35*16kB (UME) 25*32kB (UME) 23*64kB (UME) 11*128kB (UME) 9*256kB (UME) 5*512kB (ME) 3*1024kB (ME) 3*2048kB (ME) 2*4096kB (U) = 26856kB [ 1521.063376] 11052 total pagecache pages [ 1521.087107] 0 pages in swap cache [ 1521.090743] Swap cache stats: add 0, delete 0, find 0/0 [ 1521.096953] Free swap = 0kB [ 1521.097369] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1521.100214] Total swap = 0kB [ 1521.117287] 2097051 pages RAM [ 1521.120427] 0 pages HighMem/MovableOnly [ 1521.124549] 363849 pages reserved [ 1521.128170] 0 pages cma reserved [ 1521.135001] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1521.166878] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1521.190846] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1521.239928] batman_adv: batadv0: Interface deactivated: batadv_slave_1 09:38:44 executing program 1: socket(0x11, 0x2, 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000004980), 0x0, 0x0) getsockopt$X25_QBITINCL(r0, 0x106, 0x1, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x4, 0x7, 0x7, 0x6, 0xa, @remote, @private2={0xfc, 0x2, '\x00', 0x1}, 0x700, 0x20, 0x9, 0x5f3b}}) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000004980), 0x0, 0x0) getsockopt$X25_QBITINCL(r1, 0x106, 0x1, 0x0, 0x0) r2 = socket$vsock_dgram(0x28, 0x2, 0x0) ioctl$sock_SIOCDELRT(r2, 0x890c, &(0x7f0000000180)={0x0, @llc={0x1a, 0x33a, 0x9, 0x6, 0x27, 0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, @vsock={0x28, 0x0, 0x2710}, @isdn={0x22, 0xcb, 0x81, 0x2, 0x69}, 0xfff, 0x0, 0x0, 0x0, 0x81, &(0x7f0000000140)='dummy0\x00', 0x80000000, 0x101, 0x8001}) openat$zero(0xffffffffffffff9c, &(0x7f00000000c0), 0x800, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000100)={0x80000004, 0x7}) getsockname(r1, &(0x7f0000002040)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f00000020c0)=0x80) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000240)={0x2, 0x80, 0x1, 0xff, 0x4, 0x41, 0x0, 0xfffffffffffffe00, 0x2000, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0xdc, 0x2, @perf_bp={&(0x7f0000000200), 0x5}, 0x4004, 0x7fffffff, 0x2, 0x4, 0x6, 0x3e7, 0x8001, 0x0, 0x3, 0x0, 0x8001}) socket(0x27, 0xa, 0x40000801) 09:38:44 executing program 5: socket(0x11, 0x2, 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000004980), 0x0, 0x0) getsockopt$X25_QBITINCL(r0, 0x106, 0x1, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x4, 0x7, 0x7, 0x6, 0xa, @remote, @private2={0xfc, 0x2, '\x00', 0x1}, 0x700, 0x20, 0x9, 0x5f3b}}) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000004980), 0x0, 0x0) getsockopt$X25_QBITINCL(r1, 0x106, 0x1, 0x0, 0x0) r2 = socket$vsock_dgram(0x28, 0x2, 0x0) ioctl$sock_SIOCDELRT(r2, 0x890c, &(0x7f0000000180)={0x0, @llc={0x1a, 0x33a, 0x9, 0x6, 0x27, 0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, @vsock={0x28, 0x0, 0x2710}, @isdn={0x22, 0xcb, 0x81, 0x2, 0x69}, 0xfff, 0x0, 0x0, 0x0, 0x81, &(0x7f0000000140)='dummy0\x00', 0x80000000, 0x101, 0x8001}) openat$zero(0xffffffffffffff9c, &(0x7f00000000c0), 0x800, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000100)={0x80000004, 0x7}) getsockname(r1, &(0x7f0000002040)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f00000020c0)=0x80) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000240)={0x2, 0x80, 0x1, 0xff, 0x4, 0x41, 0x0, 0xfffffffffffffe00, 0x2000, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0xdc, 0x2, @perf_bp={&(0x7f0000000200), 0x5}, 0x4004, 0x7fffffff, 0x2, 0x4, 0x6, 0x3e7, 0x8001, 0x0, 0x3, 0x0, 0x8001}) socket(0x27, 0xa, 0x40000801) 09:38:44 executing program 2: sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, 0x0, 0x300, 0x70bd2b, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x20040801) 09:38:44 executing program 4: bind$x25(0xffffffffffffffff, &(0x7f0000000200)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x0}}, 0x12) [ 1521.281750] systemd[1]: systemd-journald.service: Failed with result 'signal'. [ 1521.293916] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1521.333258] systemd[1]: systemd-journald.service: Service has no hold-off time, scheduling restart. [ 1521.369500] device bridge_slave_1 left promiscuous mode [ 1521.390189] bridge0: port 2(bridge_slave_1) entered disabled state [ 1521.407003] systemd[1]: Stopped Flush Journal to Persistent Storage. [ 1521.427774] device bridge_slave_0 left promiscuous mode [ 1521.444014] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1521.461018] bridge0: port 1(bridge_slave_0) entered disabled state 09:38:44 executing program 4: r0 = socket(0x0, 0x1, 0x0) bind$x25(r0, &(0x7f0000000200)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x0}}, 0x12) [ 1521.489725] systemd[1]: Stopping Flush Journal to Persistent Storage... [ 1521.530757] systemd[1]: Stopped Journal Service. [ 1521.532741] device veth1_macvtap left promiscuous mode [ 1521.579816] device veth0_macvtap left promiscuous mode [ 1521.615596] device veth1_vlan left promiscuous mode 09:38:44 executing program 4: r0 = socket(0x0, 0x1, 0x0) bind$x25(r0, &(0x7f0000000200)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x0}}, 0x12) [ 1521.628024] systemd[1]: Starting Journal Service... [ 1521.660449] device veth0_vlan left promiscuous mode 09:38:45 executing program 4: r0 = socket(0x0, 0x1, 0x0) bind$x25(r0, &(0x7f0000000200)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x0}}, 0x12) [ 1521.703192] systemd[1]: Starting Load/Save RF Kill Switch Status... 09:38:45 executing program 4: r0 = socket(0x28, 0x0, 0x0) bind$x25(r0, &(0x7f0000000200)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x0}}, 0x12) 09:38:45 executing program 4: r0 = socket(0x28, 0x0, 0x0) bind$x25(r0, &(0x7f0000000200)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x0}}, 0x12) 09:38:45 executing program 4: r0 = socket(0x28, 0x0, 0x0) bind$x25(r0, &(0x7f0000000200)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x0}}, 0x12) [ 1521.937824] systemd-journald[9180]: File /run/log/journal/04d8c135ee6b410280ba31a58c89679d/system.journal corrupted or uncleanly shut down, renaming and replacing. [ 1521.954078] systemd[1]: Started Load/Save RF Kill Switch Status. [ 1522.261397] device hsr_slave_1 left promiscuous mode [ 1522.311365] device hsr_slave_0 left promiscuous mode [ 1522.351993] team0 (unregistering): Port device team_slave_1 removed [ 1522.403131] team0 (unregistering): Port device team_slave_0 removed [ 1522.456388] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 1522.539082] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 1522.605925] syz-executor.1: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1522.666060] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 1522.704272] CPU: 1 PID: 9171 Comm: syz-executor.1 Not tainted 4.14.232-syzkaller #0 [ 1522.712204] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1522.721651] Call Trace: [ 1522.724299] dump_stack+0x1b2/0x281 [ 1522.728218] warn_alloc.cold+0x96/0x1cc [ 1522.732383] ? zone_watermark_ok_safe+0x220/0x220 [ 1522.734219] syz-executor.5: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1522.737590] __alloc_pages_nodemask+0x2127/0x2720 [ 1522.737597] (null) [ 1522.749377] ? lock_acquire+0x170/0x3f0 [ 1522.749394] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1522.749410] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1522.749420] ? __mutex_unlock_slowpath+0x75/0x770 [ 1522.749433] alloc_pages_current+0x155/0x260 [ 1522.749444] ion_page_pool_alloc+0x118/0x1b0 [ 1522.749453] ion_system_heap_allocate+0x133/0x8c0 [ 1522.749462] ? ion_alloc+0x187/0x810 [ 1522.749472] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1522.749480] ? ion_system_contig_heap_create+0x130/0x130 [ 1522.749490] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1522.749500] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1522.749510] ion_alloc+0x204/0x810 [ 1522.820021] ? ion_dma_buf_release+0x40/0x40 [ 1522.821318] syz-executor.5 cpuset=/ [ 1522.824461] ? __might_fault+0x177/0x1b0 [ 1522.824475] ion_ioctl+0xea/0x1f0 [ 1522.828115] mems_allowed=0-1 [ 1522.832159] ? ion_query_heaps+0x360/0x360 [ 1522.832170] ? ion_query_heaps+0x360/0x360 [ 1522.832179] do_vfs_ioctl+0x75a/0xff0 [ 1522.832190] ? ioctl_preallocate+0x1a0/0x1a0 [ 1522.832199] ? lock_downgrade+0x740/0x740 [ 1522.832210] ? __fget+0x225/0x360 [ 1522.832218] ? do_vfs_ioctl+0xff0/0xff0 [ 1522.832229] ? security_file_ioctl+0x83/0xb0 [ 1522.832238] SyS_ioctl+0x7f/0xb0 [ 1522.832245] ? do_vfs_ioctl+0xff0/0xff0 [ 1522.832256] do_syscall_64+0x1d5/0x640 [ 1522.832271] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1522.832278] RIP: 0033:0x4665f9 [ 1522.832285] RSP: 002b:00007f22b5267188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1522.901674] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1522.909297] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000008 [ 1522.916568] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1522.924104] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1522.931504] R13: 00007ffea96cbc0f R14: 00007f22b5267300 R15: 0000000000022000 [ 1522.938880] CPU: 0 PID: 9172 Comm: syz-executor.5 Not tainted 4.14.232-syzkaller #0 [ 1522.947468] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1522.957570] Call Trace: [ 1522.960260] dump_stack+0x1b2/0x281 [ 1522.964306] warn_alloc.cold+0x96/0x1cc [ 1522.968605] ? zone_watermark_ok_safe+0x220/0x220 [ 1522.973563] __alloc_pages_nodemask+0x2127/0x2720 [ 1522.978407] bond0 (unregistering): Released all slaves [ 1522.978611] ? lock_acquire+0x170/0x3f0 [ 1522.988485] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1522.993579] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1522.999658] ? __mutex_unlock_slowpath+0x75/0x770 [ 1523.004609] alloc_pages_current+0x155/0x260 [ 1523.009149] ion_page_pool_alloc+0x118/0x1b0 [ 1523.013662] ion_system_heap_allocate+0x133/0x8c0 [ 1523.018692] ? ion_alloc+0x187/0x810 [ 1523.022421] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1523.028326] ? ion_system_contig_heap_create+0x130/0x130 [ 1523.034290] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1523.039327] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1523.044271] ion_alloc+0x204/0x810 [ 1523.048547] ? ion_dma_buf_release+0x40/0x40 [ 1523.053500] ? __might_fault+0x177/0x1b0 [ 1523.057663] ion_ioctl+0xea/0x1f0 [ 1523.061649] ? ion_query_heaps+0x360/0x360 [ 1523.065901] ? ion_query_heaps+0x360/0x360 [ 1523.070331] do_vfs_ioctl+0x75a/0xff0 [ 1523.074273] ? ioctl_preallocate+0x1a0/0x1a0 [ 1523.078910] ? lock_downgrade+0x740/0x740 [ 1523.083249] ? __fget+0x225/0x360 [ 1523.086806] ? do_vfs_ioctl+0xff0/0xff0 [ 1523.090788] ? security_file_ioctl+0x83/0xb0 [ 1523.095291] SyS_ioctl+0x7f/0xb0 [ 1523.098827] ? do_vfs_ioctl+0xff0/0xff0 [ 1523.103291] do_syscall_64+0x1d5/0x640 [ 1523.107375] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1523.113618] RIP: 0033:0x4665f9 [ 1523.116826] RSP: 002b:00007f551e7c7188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1523.125698] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1523.133063] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000008 [ 1523.141621] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1523.149619] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1523.157600] R13: 00007ffd0570a9af R14: 00007f551e7c7300 R15: 0000000000022000 [ 1523.241400] Mem-Info: [ 1523.244262] active_anon:14270 inactive_anon:12102 isolated_anon:0 [ 1523.244262] active_file:28 inactive_file:70 isolated_file:0 [ 1523.244262] unevictable:0 dirty:3 writeback:0 unstable:0 [ 1523.244262] slab_reclaimable:21933 slab_unreclaimable:103432 [ 1523.244262] mapped:38706 shmem:13077 pagetables:722 bounce:0 [ 1523.244262] free:57373 free_pcp:532 free_cma:0 [ 1523.335781] Node 0 active_anon:56948kB inactive_anon:36760kB active_file:104kB inactive_file:968kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:149124kB dirty:12kB writeback:0kB shmem:40596kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1523.417220] Node 1 active_anon:132kB inactive_anon:11648kB active_file:8kB inactive_file:1812kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:28000kB dirty:0kB writeback:0kB shmem:11712kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1523.545601] syz-executor.3: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1523.558100] Node 0 DMA free:11036kB min:204kB low:252kB high:300kB active_anon:4kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1523.606191] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 1523.640200] CPU: 1 PID: 9070 Comm: syz-executor.3 Not tainted 4.14.232-syzkaller #0 [ 1523.648479] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1523.657939] Call Trace: [ 1523.660547] dump_stack+0x1b2/0x281 [ 1523.664134] lowmem_reserve[]: 0 [ 1523.664381] warn_alloc.cold+0x96/0x1cc [ 1523.664394] ? zone_watermark_ok_safe+0x220/0x220 [ 1523.667667] 2717 [ 1523.671734] __alloc_pages_nodemask+0x2127/0x2720 [ 1523.671743] ? __schedule+0x893/0x1de0 [ 1523.671757] ? lock_acquire+0x170/0x3f0 [ 1523.671770] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1523.671783] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1523.671794] ? __mutex_unlock_slowpath+0x75/0x770 [ 1523.671808] alloc_pages_current+0x155/0x260 [ 1523.671823] ion_page_pool_alloc+0x118/0x1b0 [ 1523.704195] 2718 [ 1523.705722] ion_system_heap_allocate+0x133/0x8c0 [ 1523.710936] 2718 [ 1523.715421] ? _raw_spin_unlock+0x29/0x40 [ 1523.715429] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1523.715437] ? ion_system_contig_heap_create+0x130/0x130 [ 1523.715446] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1523.715457] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1523.715466] ion_alloc+0x27a/0x810 [ 1523.715478] ? ion_dma_buf_release+0x40/0x40 [ 1523.715488] ? __might_fault+0x177/0x1b0 [ 1523.715498] ion_ioctl+0xea/0x1f0 [ 1523.715506] ? ion_query_heaps+0x360/0x360 [ 1523.715518] ? ion_query_heaps+0x360/0x360 [ 1523.751812] 2718 [ 1523.754189] do_vfs_ioctl+0x75a/0xff0 [ 1523.762698] ? ioctl_preallocate+0x1a0/0x1a0 [ 1523.762709] ? lock_downgrade+0x740/0x740 [ 1523.762722] ? __fget+0x225/0x360 [ 1523.762729] ? do_vfs_ioctl+0xff0/0xff0 [ 1523.762739] ? security_file_ioctl+0x83/0xb0 [ 1523.762747] SyS_ioctl+0x7f/0xb0 [ 1523.762754] ? do_vfs_ioctl+0xff0/0xff0 [ 1523.762765] do_syscall_64+0x1d5/0x640 [ 1523.762779] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1523.762788] RIP: 0033:0x4665f9 [ 1523.762795] RSP: 002b:00007f89f6a27188 EFLAGS: 00000246 [ 1523.804128] Node 0 [ 1523.806089] ORIG_RAX: 0000000000000010 [ 1523.809641] DMA32 free:40396kB min:36200kB low:45248kB high:54296kB active_anon:56844kB inactive_anon:36760kB active_file:736kB inactive_file:0kB unevictable:0kB writepending:12kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7360kB pagetables:2884kB bounce:0kB free_pcp:1352kB local_pcp:728kB free_cma:0kB [ 1523.814220] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1523.814225] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000007 [ 1523.814230] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1523.814234] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1523.814239] R13: 00007ffeb438bdef R14: 00007f89f6a27300 R15: 0000000000022000 [ 1523.822381] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1523.884630] lowmem_reserve[]: 0 0 0 0 0 [ 1524.019235] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1524.081211] lowmem_reserve[]: 0 0 0 0 0 [ 1524.085611] Node 1 Normal free:27660kB min:53696kB low:67120kB high:80544kB active_anon:224kB inactive_anon:11648kB active_file:456kB inactive_file:256kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:128kB pagetables:272kB bounce:0kB free_pcp:216kB local_pcp:0kB free_cma:0kB [ 1524.089475] 13154 total pagecache pages [ 1524.140586] syz-executor.3: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1524.151746] lowmem_reserve[]: 0 0 0 0 0 [ 1524.163459] Node 0 DMA: 2*4kB (ME) 2*8kB (ME) 3*16kB (UME) 6*32kB (UME) 3*64kB (UME) 2*128kB (ME) 2*256kB (ME) 3*512kB (UME) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (U) = 10952kB [ 1524.179482] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 1524.199735] CPU: 1 PID: 9070 Comm: syz-executor.3 Not tainted 4.14.232-syzkaller #0 [ 1524.199764] Node 0 [ 1524.208170] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1524.208174] Call Trace: [ 1524.208191] dump_stack+0x1b2/0x281 [ 1524.208204] warn_alloc.cold+0x96/0x1cc [ 1524.208216] ? zone_watermark_ok_safe+0x220/0x220 [ 1524.208226] ? usleep_range+0x130/0x130 [ 1524.208234] ? try_to_free_pages+0x23f/0x6e0 [ 1524.208243] ? _find_next_bit+0xdb/0x100 [ 1524.208254] ? run_timer_softirq+0x5a0/0x5a0 [ 1524.235018] DMA32: [ 1524.235689] __alloc_pages_nodemask+0x2127/0x2720 [ 1524.239896] 2015*4kB [ 1524.244386] ? lock_acquire+0x170/0x3f0 [ 1524.244400] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1524.244410] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1524.244425] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1524.244437] ? __sanitizer_cov_trace_pc+0x28/0x50 [ 1524.261218] (UMEH) [ 1524.263066] alloc_pages_current+0x155/0x260 [ 1524.267117] 634*8kB [ 1524.272296] ion_page_pool_alloc+0x118/0x1b0 [ 1524.272305] ion_system_heap_allocate+0x133/0x8c0 [ 1524.272318] ? _raw_spin_unlock+0x29/0x40 [ 1524.272326] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1524.272335] ? ion_system_contig_heap_create+0x130/0x130 [ 1524.272344] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1524.272354] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1524.272364] ion_alloc+0x27a/0x810 [ 1524.293563] (UMEH) [ 1524.294284] ? ion_dma_buf_release+0x40/0x40 [ 1524.296670] 162*16kB [ 1524.301181] ? __might_fault+0x177/0x1b0 [ 1524.301192] ion_ioctl+0xea/0x1f0 [ 1524.301200] ? ion_query_heaps+0x360/0x360 [ 1524.301211] ? ion_query_heaps+0x360/0x360 [ 1524.301220] do_vfs_ioctl+0x75a/0xff0 [ 1524.301233] ? ioctl_preallocate+0x1a0/0x1a0 [ 1524.321205] (UMEH) [ 1524.325934] ? lock_downgrade+0x740/0x740 [ 1524.354971] 42*32kB [ 1524.357111] ? __fget+0x225/0x360 [ 1524.361580] (UMEH) [ 1524.365475] ? do_vfs_ioctl+0xff0/0xff0 [ 1524.370405] 9*64kB [ 1524.372803] ? security_file_ioctl+0x83/0xb0 [ 1524.372813] SyS_ioctl+0x7f/0xb0 [ 1524.372821] ? do_vfs_ioctl+0xff0/0xff0 [ 1524.372832] do_syscall_64+0x1d5/0x640 [ 1524.372847] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1524.372854] RIP: 0033:0x4665f9 [ 1524.372861] RSP: 002b:00007f89f6a27188 EFLAGS: 00000246 [ 1524.403180] (UH) [ 1524.405495] ORIG_RAX: 0000000000000010 [ 1524.410267] 2*128kB [ 1524.415537] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1524.415542] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000007 [ 1524.415547] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1524.415551] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1524.415556] R13: 00007ffeb438bdef R14: 00007f89f6a27300 R15: 0000000000022000 [ 1524.438315] 0 pages in swap cache [ 1524.473020] (H) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 17900kB [ 1524.493273] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1524.498329] warn_alloc_show_mem: 2 callbacks suppressed [ 1524.498333] Mem-Info: [ 1524.523398] Node 1 Normal: 23*4kB (UM) 20*8kB (UM) 16*16kB (UM) 807*32kB (UM) 2*64kB (M) 2*128kB (M) 1*256kB (M) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 26972kB [ 1524.529612] active_anon:14390 inactive_anon:12102 isolated_anon:0 [ 1524.529612] active_file:49 inactive_file:0 isolated_file:0 [ 1524.529612] unevictable:0 dirty:7 writeback:0 unstable:0 [ 1524.529612] slab_reclaimable:21882 slab_unreclaimable:105882 [ 1524.529612] mapped:43876 shmem:13075 pagetables:797 bounce:0 [ 1524.529612] free:13787 free_pcp:60 free_cma:0 [ 1524.563320] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1524.589705] Node 0 active_anon:57236kB inactive_anon:36760kB active_file:124kB inactive_file:36kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:148588kB dirty:24kB writeback:0kB shmem:40588kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1524.627545] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1524.635088] Node 1 active_anon:324kB inactive_anon:11648kB active_file:68kB inactive_file:40kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:26916kB dirty:4kB writeback:0kB shmem:11712kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1524.668744] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1524.680684] Node 0 DMA free:10952kB min:204kB low:252kB high:300kB active_anon:4kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1524.708520] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1524.735255] 13129 total pagecache pages [ 1524.735498] lowmem_reserve[]: 0 [ 1524.739732] 0 pages in swap cache [ 1524.739740] Swap cache stats: add 0, delete 0, find 0/0 [ 1524.750651] 2717 2718 2718 2718 [ 1524.770012] Node 0 DMA32 free:17776kB min:36200kB low:45248kB high:54296kB active_anon:57032kB inactive_anon:36760kB active_file:68kB inactive_file:32kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7360kB pagetables:2916kB bounce:0kB free_pcp:236kB local_pcp:116kB free_cma:0kB [ 1524.789502] Free swap = 0kB [ 1524.825468] Total swap = 0kB [ 1524.830285] lowmem_reserve[]: 0 [ 1524.830358] 2097051 pages RAM [ 1524.830364] 0 pages HighMem/MovableOnly [ 1524.841304] 0 0 0 0 [ 1524.844990] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1524.871157] 363849 pages reserved [ 1524.871163] 0 pages cma reserved [ 1524.899686] lowmem_reserve[]: 0 0 0 0 0 [ 1524.925410] Node 1 Normal free:26728kB min:53696kB low:67120kB high:80544kB active_anon:244kB inactive_anon:11648kB active_file:44kB inactive_file:0kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:128kB pagetables:272kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1524.981018] lowmem_reserve[]: 0 0 0 0 0 [ 1525.010137] Node 0 DMA: 2*4kB (ME) 2*8kB (ME) 3*16kB (UME) 6*32kB (UME) 3*64kB (UME) 2*128kB (ME) 2*256kB (ME) 3*512kB (UME) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (U) = 10952kB [ 1525.014585] Swap cache stats: add 0, delete 0, find 0/0 [ 1525.046383] Node 0 DMA32: 2025*4kB (UMEH) 632*8kB (MEH) 163*16kB (UMEH) 43*32kB (UMEH) 10*64kB (UH) 2*128kB (H) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18036kB [ 1525.078241] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1525.097848] Node 1 Normal: 23*4kB (UM) 20*8kB (UM) 16*16kB (UM) 807*32kB (UM) 2*64kB (M) 2*128kB (M) 1*256kB (M) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 26972kB [ 1525.108685] Free swap = 0kB [ 1525.128212] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1525.129796] Total swap = 0kB [ 1525.156964] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1525.186419] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1525.189097] 2097051 pages RAM [ 1525.207503] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1525.222540] 13107 total pagecache pages [ 1525.226547] 0 pages in swap cache [ 1525.230103] Swap cache stats: add 0, delete 0, find 0/0 [ 1525.256453] Free swap = 0kB [ 1525.259505] Total swap = 0kB [ 1525.268954] 2097051 pages RAM [ 1525.278538] 0 pages HighMem/MovableOnly [ 1525.293062] 363849 pages reserved [ 1525.296655] 0 pages cma reserved [ 1525.622373] IPVS: ftp: loaded support on port[0] = 21 [ 1525.959838] systemd[1]: Started Journal Service. [ 1526.105716] chnl_net:caif_netlink_parms(): no params data found [ 1526.189988] 0 pages HighMem/MovableOnly [ 1526.351513] bridge0: port 1(bridge_slave_0) entered blocking state [ 1526.358577] bridge0: port 1(bridge_slave_0) entered disabled state [ 1526.386055] device bridge_slave_0 entered promiscuous mode [ 1526.407244] bridge0: port 2(bridge_slave_1) entered blocking state [ 1526.425783] bridge0: port 2(bridge_slave_1) entered disabled state [ 1526.446473] device bridge_slave_1 entered promiscuous mode [ 1526.493058] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 1526.512984] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1526.575293] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 1526.592524] team0: Port device team_slave_0 added [ 1526.598710] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 1526.621956] team0: Port device team_slave_1 added [ 1526.667368] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1526.682125] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1526.751176] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1526.773656] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1526.780978] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1526.891047] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1526.912928] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 1526.945152] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 1527.011712] device hsr_slave_0 entered promiscuous mode [ 1527.025903] device hsr_slave_1 entered promiscuous mode [ 1527.047625] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 1527.066465] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 1527.300237] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 1527.405318] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1527.414905] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 1527.435928] Bluetooth: hci2 command 0x0409 tx timeout [ 1527.456502] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 1527.475533] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1527.483071] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1527.498699] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 1527.516305] 8021q: adding VLAN 0 to HW filter on device team0 [ 1527.538872] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 1527.574762] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1527.583318] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1527.596569] bridge0: port 1(bridge_slave_0) entered blocking state [ 1527.602986] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1527.637474] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 1527.645224] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1527.657665] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1527.695747] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1527.703736] bridge0: port 2(bridge_slave_1) entered blocking state [ 1527.710097] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1527.746359] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 1527.757128] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1527.774207] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 1527.793786] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1527.814463] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 1527.831935] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1527.839757] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1527.864482] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 1527.872071] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1527.879451] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1527.891729] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1527.902766] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 1527.931459] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1527.939308] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1527.953355] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 1527.962285] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1527.981618] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1527.981627] 363849 pages reserved [ 1528.016779] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 1528.023605] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1528.031139] 0 pages cma reserved [ 1528.034652] Out of memory: Kill process 9064 (syz-executor.0) score 1005 or sacrifice child [ 1528.060278] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 1528.083573] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 1528.090046] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1528.114257] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1528.134762] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1528.335450] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 1528.383938] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 1528.405318] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1528.417819] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready 09:38:51 executing program 4: socket(0x28, 0x1, 0x0) bind$x25(0xffffffffffffffff, &(0x7f0000000200)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x0}}, 0x12) 09:38:51 executing program 3: socket(0x11, 0x2, 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000004980), 0x0, 0x0) getsockopt$X25_QBITINCL(r0, 0x106, 0x1, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x4, 0x7, 0x7, 0x6, 0xa, @remote, @private2={0xfc, 0x2, '\x00', 0x1}, 0x700, 0x20, 0x9, 0x5f3b}}) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000004980), 0x0, 0x0) getsockopt$X25_QBITINCL(r1, 0x106, 0x1, 0x0, 0x0) socket$vsock_dgram(0x28, 0x2, 0x0) r2 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000100)={0x80000004, 0x7}) [ 1529.037349] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1529.044840] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1529.059459] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1529.068114] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1529.132944] device bridge_slave_1 left promiscuous mode [ 1529.168102] bridge0: port 2(bridge_slave_1) entered disabled state [ 1529.231292] device bridge_slave_0 left promiscuous mode [ 1529.237090] bridge0: port 1(bridge_slave_0) entered disabled state [ 1529.290606] in:imklog invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1529.309824] in:imklog cpuset=/ mems_allowed=0-1 [ 1529.314677] CPU: 1 PID: 8960 Comm: in:imklog Not tainted 4.14.232-syzkaller #0 [ 1529.322165] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1529.332361] Call Trace: [ 1529.335064] dump_stack+0x1b2/0x281 [ 1529.338689] dump_header+0x178/0x82f [ 1529.342427] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1529.347948] ? ___ratelimit+0x2cd/0x530 [ 1529.352142] oom_kill_process.cold+0x10/0xa40 [ 1529.356662] out_of_memory+0xe3e/0x1190 [ 1529.360724] ? oom_killer_disable+0x1c0/0x1c0 [ 1529.365585] ? mutex_trylock+0x152/0x1a0 [ 1529.369653] __alloc_pages_nodemask+0x23e1/0x2720 [ 1529.374521] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1529.379728] alloc_pages_current+0x155/0x260 [ 1529.384346] filemap_fault+0x11a1/0x1ad0 [ 1529.388880] ext4_filemap_fault+0x84/0xb0 [ 1529.393244] __do_fault+0xfa/0x380 [ 1529.396819] __handle_mm_fault+0x2497/0x4620 [ 1529.401342] ? vm_insert_page+0x7c0/0x7c0 [ 1529.405492] ? lock_downgrade+0x740/0x740 [ 1529.409661] ? mark_held_locks+0xa6/0xf0 [ 1529.413738] handle_mm_fault+0x455/0x9c0 [ 1529.417824] __do_page_fault+0x549/0xad0 [ 1529.421981] ? spurious_fault+0x640/0x640 [ 1529.426501] ? do_page_fault+0x60/0x500 [ 1529.430974] ? page_fault+0x2f/0x50 [ 1529.434605] page_fault+0x45/0x50 [ 1529.438056] RIP: 0001:0x1f9f [ 1529.441069] RSP: 11c31308:00007fa611c31388 EFLAGS: 7fa61365c3a0 [ 1529.510928] Bluetooth: hci2 command 0x041b tx timeout [ 1529.523022] Mem-Info: [ 1529.525534] active_anon:13787 inactive_anon:12102 isolated_anon:0 [ 1529.525534] active_file:24 inactive_file:1 isolated_file:0 [ 1529.525534] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1529.525534] slab_reclaimable:15549 slab_unreclaimable:115849 [ 1529.525534] mapped:43996 shmem:13074 pagetables:722 bounce:0 [ 1529.525534] free:25106 free_pcp:58 free_cma:0 [ 1529.612242] Node 0 active_anon:54660kB inactive_anon:36748kB active_file:8kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:149056kB dirty:0kB writeback:0kB shmem:40568kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1529.660911] Node 1 active_anon:488kB inactive_anon:11660kB active_file:88kB inactive_file:28kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:26928kB dirty:0kB writeback:0kB shmem:11728kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1529.739123] Node 0 DMA free:11068kB min:204kB low:252kB high:300kB active_anon:8kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1529.769653] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1529.775138] Node 0 DMA32 free:36124kB min:36200kB low:45248kB high:54296kB active_anon:54652kB inactive_anon:36748kB active_file:56kB inactive_file:4kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7264kB pagetables:2716kB bounce:0kB free_pcp:232kB local_pcp:120kB free_cma:0kB [ 1529.821357] lowmem_reserve[]: 0 0 0 0 0 [ 1529.826130] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1529.876642] lowmem_reserve[]: 0 0 0 0 0 [ 1529.880689] Node 1 Normal free:53232kB min:53696kB low:67120kB high:80544kB active_anon:488kB inactive_anon:11660kB active_file:100kB inactive_file:0kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:160kB pagetables:172kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1529.923967] lowmem_reserve[]: 0 0 0 0 0 [ 1529.928176] Node 0 DMA: 3*4kB (ME) 2*8kB (UE) 2*16kB (ME) 2*32kB (ME) 3*64kB (UME) 4*128kB (UME) 2*256kB (ME) 3*512kB (UME) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (U) = 11068kB [ 1529.993375] Node 0 DMA32: 3373*4kB (UME) 1376*8kB (UME) 360*16kB (UME) 78*32kB (UME) 26*64kB (UME) 4*128kB (UME) 3*256kB (UM) 1*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 36212kB [ 1530.093853] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1530.151544] Node 1 Normal: 54*4kB (M) 40*8kB (M) 55*16kB (M) 39*32kB (UM) 28*64kB (M) 28*128kB (UM) 16*256kB (M) 5*512kB (UM) 4*1024kB (UM) 9*2048kB (UM) 4*4096kB (UM) = 53608kB [ 1530.171036] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1530.180294] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1530.197733] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1530.207472] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1530.222596] 13102 total pagecache pages [ 1530.226782] 0 pages in swap cache [ 1530.230622] Swap cache stats: add 0, delete 0, find 0/0 [ 1530.240028] Free swap = 0kB [ 1530.245321] Total swap = 0kB [ 1530.248683] 2097051 pages RAM [ 1530.255980] 0 pages HighMem/MovableOnly [ 1530.259974] 363849 pages reserved [ 1530.265502] 0 pages cma reserved [ 1530.268981] Out of memory (oom_kill_allocating_task): Kill process 8960 (in:imklog) score 0 or sacrifice child [ 1530.285767] Killed process 8912 (rsyslogd) total-vm:254332kB, anon-rss:848kB, file-rss:0kB, shmem-rss:0kB [ 1530.297300] oom_reaper: reaped process 8912 (rsyslogd), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1530.462004] systemd invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1530.550335] systemd cpuset=/ mems_allowed=0-1 [ 1530.565495] CPU: 0 PID: 1 Comm: systemd Not tainted 4.14.232-syzkaller #0 [ 1530.572641] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1530.582819] Call Trace: [ 1530.585936] dump_stack+0x1b2/0x281 [ 1530.590001] dump_header+0x178/0x82f [ 1530.593926] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1530.599647] ? ___ratelimit+0x2cd/0x530 [ 1530.603838] oom_kill_process.cold+0x10/0xa40 [ 1530.608439] ? lock_downgrade+0x740/0x740 [ 1530.613154] out_of_memory+0x2dc/0x1190 [ 1530.617535] ? oom_killer_disable+0x1c0/0x1c0 [ 1530.622052] ? mutex_trylock+0x152/0x1a0 [ 1530.626208] __alloc_pages_nodemask+0x23e1/0x2720 [ 1530.631162] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1530.636437] alloc_pages_current+0x155/0x260 [ 1530.640849] filemap_fault+0x11a1/0x1ad0 [ 1530.644919] ext4_filemap_fault+0x84/0xb0 [ 1530.649195] __do_fault+0xfa/0x380 [ 1530.652737] __handle_mm_fault+0x2497/0x4620 [ 1530.657382] ? vm_insert_page+0x7c0/0x7c0 [ 1530.661626] ? mark_held_locks+0xa6/0xf0 [ 1530.665798] handle_mm_fault+0x455/0x9c0 [ 1530.670073] __do_page_fault+0x549/0xad0 [ 1530.674423] ? spurious_fault+0x640/0x640 [ 1530.678676] ? do_page_fault+0x60/0x500 [ 1530.682758] ? page_fault+0x2f/0x50 [ 1530.686486] page_fault+0x45/0x50 [ 1530.690025] RIP: 0001:0xffffffffffffffff [ 1530.696290] RSP: d64c3f50:00007fffcc960800 EFLAGS: 7fffcc960520 [ 1530.701223] Mem-Info: [ 1530.713330] active_anon:13587 inactive_anon:12102 isolated_anon:0 [ 1530.713330] active_file:25 inactive_file:26 isolated_file:0 [ 1530.713330] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1530.713330] slab_reclaimable:15540 slab_unreclaimable:115789 [ 1530.713330] mapped:43956 shmem:13074 pagetables:722 bounce:0 [ 1530.713330] free:25100 free_pcp:310 free_cma:0 [ 1530.753149] Node 0 active_anon:53860kB inactive_anon:36748kB active_file:48kB inactive_file:12kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:148996kB dirty:0kB writeback:0kB shmem:40568kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1530.785250] Node 1 active_anon:488kB inactive_anon:11660kB active_file:52kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:26828kB dirty:0kB writeback:0kB shmem:11728kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1530.815862] Node 0 DMA free:11068kB min:204kB low:252kB high:300kB active_anon:8kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1530.845929] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1530.863993] Node 0 DMA32 free:35644kB min:36200kB low:45248kB high:54296kB active_anon:53852kB inactive_anon:36748kB active_file:16kB inactive_file:4kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7200kB pagetables:2716kB bounce:0kB free_pcp:1112kB local_pcp:600kB free_cma:0kB [ 1530.903725] lowmem_reserve[]: 0 0 0 0 0 [ 1530.908123] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1530.953153] device veth1_macvtap left promiscuous mode [ 1530.962444] device veth0_macvtap left promiscuous mode [ 1530.964241] lowmem_reserve[]: 0 0 0 0 0 [ 1530.967968] device veth1_vlan left promiscuous mode [ 1530.976612] Node 1 Normal free:53576kB min:53696kB low:67120kB high:80544kB active_anon:416kB inactive_anon:11660kB active_file:44kB inactive_file:44kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:128kB pagetables:172kB bounce:0kB free_pcp:120kB local_pcp:0kB free_cma:0kB [ 1530.982930] device veth0_vlan left promiscuous mode [ 1531.012702] lowmem_reserve[]: 0 0 0 0 0 [ 1531.024763] Node 0 DMA: 1*4kB (E) 2*8kB (UE) 1*16kB (E) 1*32kB (E) 2*64kB (UE) 3*128kB (UE) 1*256kB (E) 2*512kB (UE) 1*1024kB (E) 2*2048kB (ME) 1*4096kB (U) = 11076kB [ 1531.049060] Node 0 DMA32: 3183*4kB (ME) 1392*8kB (UME) 365*16kB (UME) 77*32kB (UME) 23*64kB (UME) 4*128kB (UME) 3*256kB (UM) 1*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 35436kB [ 1531.074290] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1531.088921] Node 1 Normal: 54*4kB (UM) 41*8kB (M) 56*16kB (UM) 39*32kB (UM) 29*64kB (UM) 27*128kB (M) 16*256kB (M) 5*512kB (UM) 4*1024kB (UM) 9*2048kB (UM) 4*4096kB (UM) = 53568kB [ 1531.114140] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1531.127972] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1531.140023] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1531.157394] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1531.166332] 13103 total pagecache pages [ 1531.170415] 0 pages in swap cache [ 1531.181721] Swap cache stats: add 0, delete 0, find 0/0 [ 1531.187269] Free swap = 0kB [ 1531.190277] Total swap = 0kB [ 1531.203220] 2097051 pages RAM [ 1531.206680] 0 pages HighMem/MovableOnly [ 1531.214503] 363849 pages reserved [ 1531.218077] 0 pages cma reserved [ 1531.225577] Out of memory: Kill process 9168 (syz-executor.5) score 1004 or sacrifice child [ 1531.239138] Killed process 9172 (syz-executor.5) total-vm:93384kB, anon-rss:160kB, file-rss:34820kB, shmem-rss:0kB [ 1531.368058] oom_reaper: reaped process 9172 (syz-executor.5), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1531.378939] syz-executor.5: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1531.394583] systemd invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1531.398749] syz-executor.5 cpuset= [ 1531.407556] systemd cpuset=/ mems_allowed=0-1 [ 1531.416632] CPU: 0 PID: 1 Comm: systemd Not tainted 4.14.232-syzkaller #0 [ 1531.423739] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1531.428201] / [ 1531.434311] Call Trace: [ 1531.434358] mems_allowed=0-1 [ 1531.436211] dump_stack+0x1b2/0x281 [ 1531.445897] dump_header+0x178/0x82f [ 1531.449793] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1531.455159] ? ___ratelimit+0x2cd/0x530 [ 1531.459250] oom_kill_process.cold+0x10/0xa40 [ 1531.463733] ? lock_downgrade+0x740/0x740 [ 1531.467867] out_of_memory+0x2dc/0x1190 [ 1531.471923] ? oom_killer_disable+0x1c0/0x1c0 [ 1531.476415] ? mutex_trylock+0x152/0x1a0 [ 1531.480987] __alloc_pages_nodemask+0x23e1/0x2720 [ 1531.485925] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1531.490789] alloc_pages_current+0x155/0x260 [ 1531.495392] filemap_fault+0x11a1/0x1ad0 [ 1531.499531] ext4_filemap_fault+0x84/0xb0 [ 1531.503852] __do_fault+0xfa/0x380 [ 1531.507479] __handle_mm_fault+0x2497/0x4620 [ 1531.512090] ? vm_insert_page+0x7c0/0x7c0 [ 1531.516249] ? mark_held_locks+0xa6/0xf0 [ 1531.520418] handle_mm_fault+0x455/0x9c0 [ 1531.524934] __do_page_fault+0x549/0xad0 [ 1531.529081] ? spurious_fault+0x640/0x640 [ 1531.533391] ? do_page_fault+0x60/0x500 [ 1531.537349] ? page_fault+0x2f/0x50 [ 1531.540963] page_fault+0x45/0x50 [ 1531.544405] RIP: 0001:0xffffffffffffffff [ 1531.548634] RSP: d64c3f50:00007fffcc960800 EFLAGS: 7fffcc960520 [ 1531.548654] CPU: 1 PID: 9172 Comm: syz-executor.5 Not tainted 4.14.232-syzkaller #0 [ 1531.549009] Mem-Info: [ 1531.555018] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1531.555023] Call Trace: [ 1531.555039] dump_stack+0x1b2/0x281 [ 1531.555053] warn_alloc.cold+0x96/0x1cc [ 1531.555064] ? zone_watermark_ok_safe+0x220/0x220 [ 1531.555073] ? usleep_range+0x130/0x130 [ 1531.555080] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1531.555092] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1531.555105] ? run_timer_softirq+0x5a0/0x5a0 [ 1531.562933] active_anon:13524 inactive_anon:12102 isolated_anon:0 [ 1531.562933] active_file:22 inactive_file:7 isolated_file:0 [ 1531.562933] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1531.562933] slab_reclaimable:15538 slab_unreclaimable:115789 [ 1531.562933] mapped:43931 shmem:13074 pagetables:692 bounce:0 [ 1531.562933] free:13957 free_pcp:338 free_cma:0 [ 1531.565499] __alloc_pages_nodemask+0x2127/0x2720 [ 1531.574880] Node 0 active_anon:53692kB inactive_anon:36748kB active_file:16kB inactive_file:12kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:148896kB dirty:0kB writeback:0kB shmem:40568kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1531.577429] ? lock_acquire+0x170/0x3f0 [ 1531.581325] Node 1 active_anon:404kB inactive_anon:11660kB active_file:72kB inactive_file:16kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:26828kB dirty:0kB writeback:0kB shmem:11728kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1531.585256] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1531.590247] Node 0 [ 1531.594294] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1531.594310] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1531.594325] ? alloc_pages_current+0x135/0x260 [ 1531.594334] alloc_pages_current+0x155/0x260 [ 1531.594344] ion_page_pool_alloc+0x118/0x1b0 [ 1531.594351] ion_system_heap_allocate+0x133/0x8c0 [ 1531.594359] ? ion_alloc+0x187/0x810 [ 1531.594368] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1531.594377] ? ion_system_contig_heap_create+0x130/0x130 [ 1531.594387] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1531.594397] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1531.594406] ion_alloc+0x204/0x810 [ 1531.594417] ? ion_dma_buf_release+0x40/0x40 [ 1531.594430] ? __might_fault+0x177/0x1b0 [ 1531.594439] ion_ioctl+0xea/0x1f0 [ 1531.594448] ? ion_query_heaps+0x360/0x360 [ 1531.594460] ? ion_query_heaps+0x360/0x360 [ 1531.594468] do_vfs_ioctl+0x75a/0xff0 [ 1531.594478] ? ioctl_preallocate+0x1a0/0x1a0 [ 1531.594486] ? lock_downgrade+0x740/0x740 [ 1531.594499] ? __fget+0x225/0x360 [ 1531.594508] ? do_vfs_ioctl+0xff0/0xff0 [ 1531.594525] ? security_file_ioctl+0x83/0xb0 [ 1531.594534] SyS_ioctl+0x7f/0xb0 [ 1531.599727] Bluetooth: hci2 command 0x040f tx timeout [ 1531.604713] ? do_vfs_ioctl+0xff0/0xff0 [ 1531.604725] do_syscall_64+0x1d5/0x640 [ 1531.604738] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1531.604746] RIP: 0033:0x4665f9 [ 1531.604750] RSP: 002b:00007f551e7c7188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1531.604762] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1531.609467] DMA free:10976kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1531.643178] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000008 [ 1531.643183] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1531.643187] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1531.643191] R13: 00007ffd0570a9af R14: 00007f551e7c7300 R15: 0000000000022000 [ 1531.659852] Mem-Info: [ 1531.682064] lowmem_reserve[]: [ 1531.721279] active_anon:13524 inactive_anon:12102 isolated_anon:0 [ 1531.721279] active_file:22 inactive_file:7 isolated_file:0 [ 1531.721279] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1531.721279] slab_reclaimable:15538 slab_unreclaimable:115789 [ 1531.721279] mapped:43931 shmem:13074 pagetables:692 bounce:0 [ 1531.721279] free:13957 free_pcp:336 free_cma:0 [ 1531.728284] 0 [ 1531.728880] Node 0 active_anon:53692kB inactive_anon:36748kB active_file:16kB inactive_file:12kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:148896kB dirty:0kB writeback:0kB shmem:40568kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1531.733514] 2717 2718 2718 2718 [ 1531.733530] Node 0 DMA32 free:18068kB min:36200kB low:45248kB high:54296kB active_anon:53692kB inactive_anon:36748kB active_file:16kB inactive_file:12kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7168kB pagetables:2596kB bounce:0kB free_pcp:1088kB local_pcp:464kB free_cma:0kB [ 1531.733548] lowmem_reserve[]: 0 0 0 0 0 [ 1531.733565] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1531.733581] lowmem_reserve[]: [ 1531.744993] Node 1 active_anon:404kB inactive_anon:11660kB active_file:72kB inactive_file:16kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:26828kB dirty:0kB writeback:0kB shmem:11728kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1531.756748] 0 [ 1531.760930] Node 0 [ 1531.765351] 0 [ 1531.769922] DMA free:10976kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1531.784060] 0 [ 1531.794810] lowmem_reserve[]: [ 1531.804454] 0 [ 1531.811907] 0 [ 1531.816695] 0 [ 1531.816772] 2717 [ 1531.834885] 2718 2718 2718 [ 1531.834900] Node 0 DMA32 free:18068kB min:36200kB low:45248kB high:54296kB active_anon:53692kB inactive_anon:36748kB active_file:16kB inactive_file:12kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7168kB pagetables:2596kB bounce:0kB free_pcp:1088kB local_pcp:624kB free_cma:0kB [ 1531.834920] lowmem_reserve[]: 0 0 0 0 0 [ 1531.834948] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1531.834966] lowmem_reserve[]: 0 0 0 0 0 [ 1531.834986] Node 1 Normal free:26784kB min:53696kB low:67120kB high:80544kB active_anon:404kB inactive_anon:11660kB active_file:72kB inactive_file:16kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:128kB pagetables:172kB bounce:0kB free_pcp:256kB local_pcp:132kB free_cma:0kB [ 1531.835006] lowmem_reserve[]: 0 0 0 0 0 [ 1531.835024] Node 0 DMA: 2*4kB (UE) 1*8kB (E) 1*16kB (E) 2*32kB (UE) 2*64kB (UE) 2*128kB (UE) 1*256kB (E) 2*512kB (UE) 1*1024kB (E) 2*2048kB (ME) 1*4096kB (U) = 10976kB [ 1531.835099] Node 0 DMA32: 1809*4kB (UME) 816*8kB (ME) 209*16kB (UME) 30*32kB (ME) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18068kB [ 1531.835158] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1531.835203] Node 1 Normal: 54*4kB (UM) 41*8kB (M) 56*16kB (UM) 38*32kB (M) 29*64kB (UM) 28*128kB (UM) 17*256kB (UM) 4*512kB (M) 4*1024kB (UM) 2*2048kB (M) 1*4096kB (M) = 26784kB [ 1531.835281] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1531.835287] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1531.835292] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1531.835300] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1531.850775] Node 1 [ 1531.860320] 13103 total pagecache pages [ 1531.871510] Normal free:26784kB min:53696kB low:67120kB high:80544kB active_anon:404kB inactive_anon:11660kB active_file:72kB inactive_file:16kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:128kB pagetables:172kB bounce:0kB free_pcp:256kB local_pcp:124kB free_cma:0kB [ 1531.902731] 0 pages in swap cache [ 1531.913878] lowmem_reserve[]: [ 1531.925267] Swap cache stats: add 0, delete 0, find 0/0 [ 1531.934568] 0 [ 1531.967339] Free swap = 0kB [ 1531.984635] 0 [ 1531.997300] Total swap = 0kB [ 1531.997307] 2097051 pages RAM [ 1531.997311] 0 pages HighMem/MovableOnly [ 1531.997314] 363849 pages reserved [ 1531.997317] 0 pages cma reserved [ 1532.427500] 0 0 0 [ 1532.435163] Node 0 DMA: 2*4kB (UE) 1*8kB (E) 1*16kB (E) 2*32kB (UE) 2*64kB (UE) 2*128kB (UE) 1*256kB (E) 2*512kB (UE) 1*1024kB (E) 2*2048kB (ME) 1*4096kB (U) = 10976kB [ 1532.488419] Node 0 DMA32: 1530*4kB (UME) 817*8kB (MEH) 209*16kB (UME) 31*32kB (UME) 664*64kB (UH) 215*128kB (U) 114*256kB (U) 14*512kB (U) 12*1024kB (U) 1*2048kB (U) 0*4096kB = 137696kB [ 1532.572942] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1532.592906] Node 1 Normal: 67*4kB (UM) 65*8kB (UM) 62*16kB (U) 62*32kB (U) 2638*64kB (U) 169*128kB (UM) 48*256kB (UM) 10*512kB (UM) 165*1024kB (UM) 10*2048kB (UM) 1*4096kB (M) = 405172kB [ 1532.654805] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1532.680763] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1532.689557] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1532.730729] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1532.739698] 16211 total pagecache pages [ 1532.764352] 0 pages in swap cache [ 1532.768033] Swap cache stats: add 0, delete 0, find 0/0 [ 1532.773792] Free swap = 0kB [ 1532.776899] Total swap = 0kB [ 1532.779920] 2097051 pages RAM [ 1532.801368] 0 pages HighMem/MovableOnly [ 1532.805661] 363849 pages reserved [ 1532.809319] 0 pages cma reserved [ 1532.816901] Out of memory: Kill process 9169 (syz-executor.1) score 1004 or sacrifice child [ 1533.750669] Bluetooth: hci2 command 0x0419 tx timeout 09:38:57 executing program 0: socket(0x11, 0x2, 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000004980), 0x0, 0x0) getsockopt$X25_QBITINCL(r0, 0x106, 0x1, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x4, 0x7, 0x7, 0x6, 0xa, @remote, @private2={0xfc, 0x2, '\x00', 0x1}, 0x700, 0x20, 0x9, 0x5f3b}}) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000004980), 0x0, 0x0) getsockopt$X25_QBITINCL(r1, 0x106, 0x1, 0x0, 0x0) r2 = socket$vsock_dgram(0x28, 0x2, 0x0) ioctl$sock_SIOCDELRT(r2, 0x890c, &(0x7f0000000180)={0x0, @llc={0x1a, 0x33a, 0x9, 0x6, 0x27, 0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, @vsock={0x28, 0x0, 0x2710}, @isdn={0x22, 0xcb, 0x81, 0x2, 0x69}, 0xfff, 0x0, 0x0, 0x0, 0x81, &(0x7f0000000140)='dummy0\x00', 0x80000000, 0x101, 0x8001}) r3 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000100)={0x80000004, 0x7}) 09:38:57 executing program 5: socket(0x11, 0x2, 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000004980), 0x0, 0x0) getsockopt$X25_QBITINCL(r0, 0x106, 0x1, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x4, 0x7, 0x7, 0x6, 0xa, @remote, @private2={0xfc, 0x2, '\x00', 0x1}, 0x700, 0x20, 0x9, 0x5f3b}}) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000004980), 0x0, 0x0) getsockopt$X25_QBITINCL(r1, 0x106, 0x1, 0x0, 0x0) r2 = socket$vsock_dgram(0x28, 0x2, 0x0) ioctl$sock_SIOCDELRT(r2, 0x890c, &(0x7f0000000180)={0x0, @llc={0x1a, 0x33a, 0x9, 0x6, 0x27, 0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, @vsock={0x28, 0x0, 0x2710}, @isdn={0x22, 0xcb, 0x81, 0x2, 0x69}, 0xfff, 0x0, 0x0, 0x0, 0x81, &(0x7f0000000140)='dummy0\x00', 0x80000000, 0x101, 0x8001}) openat$zero(0xffffffffffffff9c, &(0x7f00000000c0), 0x800, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000100)={0x80000004, 0x7}) getsockname(r1, &(0x7f0000002040)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f00000020c0)=0x80) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000240)={0x2, 0x80, 0x1, 0xff, 0x4, 0x41, 0x0, 0xfffffffffffffe00, 0x2000, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0xdc, 0x2, @perf_bp={&(0x7f0000000200), 0x5}, 0x4004, 0x7fffffff, 0x2, 0x4, 0x6, 0x3e7, 0x8001, 0x0, 0x3, 0x0, 0x8001}) socket$can_bcm(0x1d, 0x2, 0x2) [ 1535.164203] syz-executor.0: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1535.171708] syz-executor.5: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1535.191681] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 1535.196035] syz-executor.0 cpuset= [ 1535.197173] CPU: 0 PID: 9440 Comm: syz-executor.5 Not tainted 4.14.232-syzkaller #0 [ 1535.197182] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1535.204372] / [ 1535.208885] Call Trace: [ 1535.220795] mems_allowed=0-1 [ 1535.223632] dump_stack+0x1b2/0x281 [ 1535.223646] warn_alloc.cold+0x96/0x1cc [ 1535.223659] ? zone_watermark_ok_safe+0x220/0x220 [ 1535.240175] __alloc_pages_nodemask+0x2127/0x2720 [ 1535.245105] ? __schedule+0x893/0x1de0 [ 1535.248980] ? lock_acquire+0x170/0x3f0 [ 1535.252956] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1535.257927] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1535.263454] ? __mutex_unlock_slowpath+0x75/0x770 [ 1535.268637] alloc_pages_current+0x155/0x260 [ 1535.273211] ion_page_pool_alloc+0x118/0x1b0 [ 1535.277984] ion_system_heap_allocate+0x133/0x8c0 [ 1535.283163] ? ion_alloc+0x187/0x810 [ 1535.286868] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1535.292514] ? ion_system_contig_heap_create+0x130/0x130 [ 1535.298738] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1535.304151] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1535.309425] ion_alloc+0x204/0x810 [ 1535.313130] ? ion_dma_buf_release+0x40/0x40 [ 1535.317648] ? __might_fault+0x177/0x1b0 [ 1535.321997] ion_ioctl+0xea/0x1f0 [ 1535.325531] ? ion_query_heaps+0x360/0x360 [ 1535.330045] ? ion_query_heaps+0x360/0x360 [ 1535.334362] do_vfs_ioctl+0x75a/0xff0 [ 1535.338374] ? ioctl_preallocate+0x1a0/0x1a0 [ 1535.342871] ? lock_downgrade+0x740/0x740 [ 1535.347335] ? __fget+0x225/0x360 [ 1535.350892] ? do_vfs_ioctl+0xff0/0xff0 [ 1535.354856] ? security_file_ioctl+0x83/0xb0 [ 1535.359397] SyS_ioctl+0x7f/0xb0 [ 1535.363029] ? do_vfs_ioctl+0xff0/0xff0 [ 1535.367180] do_syscall_64+0x1d5/0x640 [ 1535.371176] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1535.376698] RIP: 0033:0x4665f9 [ 1535.380004] RSP: 002b:00007f551e7c7188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1535.387992] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1535.395359] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000008 [ 1535.402639] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1535.409915] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1535.417367] R13: 00007ffd0570a9af R14: 00007f551e7c7300 R15: 0000000000022000 [ 1535.424828] CPU: 1 PID: 9442 Comm: syz-executor.0 Not tainted 4.14.232-syzkaller #0 [ 1535.431452] Mem-Info: [ 1535.432637] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1535.435069] active_anon:14211 inactive_anon:12101 isolated_anon:24 [ 1535.435069] active_file:1710 inactive_file:2145 isolated_file:12 [ 1535.435069] unevictable:0 dirty:63 writeback:0 unstable:0 [ 1535.435069] slab_reclaimable:15547 slab_unreclaimable:115552 [ 1535.435069] mapped:55376 shmem:13073 pagetables:739 bounce:0 [ 1535.435069] free:121614 free_pcp:83 free_cma:0 [ 1535.444835] Call Trace: [ 1535.444853] dump_stack+0x1b2/0x281 [ 1535.444865] warn_alloc.cold+0x96/0x1cc [ 1535.444876] ? zone_watermark_ok_safe+0x220/0x220 [ 1535.444896] __alloc_pages_nodemask+0x2127/0x2720 [ 1535.444919] ? io_schedule_timeout+0x140/0x140 [ 1535.481245] Node 0 active_anon:56412kB inactive_anon:36744kB active_file:3104kB inactive_file:4760kB unevictable:0kB isolated(anon):48kB isolated(file):0kB mapped:188060kB dirty:188kB writeback:0kB shmem:40564kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1535.483679] ? lock_acquire+0x170/0x3f0 [ 1535.487359] Node 1 active_anon:432kB inactive_anon:11660kB active_file:3736kB inactive_file:3820kB unevictable:0kB isolated(anon):48kB isolated(file):48kB mapped:33444kB dirty:64kB writeback:0kB shmem:11728kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1535.491717] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1535.491734] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1535.491745] ? __mutex_unlock_slowpath+0x75/0x770 [ 1535.491754] ? alloc_pages_current+0xe3/0x260 [ 1535.491764] alloc_pages_current+0x155/0x260 [ 1535.496781] Node 0 [ 1535.501708] ion_page_pool_alloc+0x118/0x1b0 [ 1535.501718] ion_system_heap_allocate+0x133/0x8c0 [ 1535.501728] ? ion_alloc+0x187/0x810 [ 1535.501738] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1535.501749] ? ion_system_contig_heap_create+0x130/0x130 [ 1535.506421] DMA free:11112kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1535.536183] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1535.536196] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1535.536207] ion_alloc+0x204/0x810 [ 1535.536220] ? ion_dma_buf_release+0x40/0x40 [ 1535.536231] ? __might_fault+0x177/0x1b0 [ 1535.536241] ion_ioctl+0xea/0x1f0 [ 1535.536249] ? ion_query_heaps+0x360/0x360 [ 1535.536259] ? ion_query_heaps+0x360/0x360 [ 1535.536270] do_vfs_ioctl+0x75a/0xff0 [ 1535.540360] lowmem_reserve[]: [ 1535.568649] ? ioctl_preallocate+0x1a0/0x1a0 [ 1535.568659] ? lock_downgrade+0x740/0x740 [ 1535.568671] ? __fget+0x225/0x360 [ 1535.568678] ? do_vfs_ioctl+0xff0/0xff0 [ 1535.568688] ? security_file_ioctl+0x83/0xb0 [ 1535.568697] SyS_ioctl+0x7f/0xb0 [ 1535.568703] ? do_vfs_ioctl+0xff0/0xff0 [ 1535.568715] do_syscall_64+0x1d5/0x640 [ 1535.568727] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1535.568735] RIP: 0033:0x4665f9 [ 1535.568739] RSP: 002b:00007fe4a6925188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1535.568748] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1535.568753] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000007 [ 1535.568759] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1535.568764] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1535.568769] R13: 00007ffe5881209f R14: 00007fe4a6925300 R15: 0000000000022000 [ 1535.751245] device hsr_slave_1 left promiscuous mode [ 1535.766505] device hsr_slave_0 left promiscuous mode [ 1535.775262] 0 2717 2718 2718 2718 [ 1535.796266] Node 0 DMA32 free:118660kB min:36200kB low:45248kB high:54296kB active_anon:56412kB inactive_anon:36744kB active_file:3104kB inactive_file:4756kB unevictable:0kB writepending:188kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7328kB pagetables:2800kB bounce:0kB free_pcp:260kB local_pcp:180kB free_cma:0kB [ 1535.827150] lowmem_reserve[]: 0 0 0 0 0 [ 1535.831511] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1535.859210] lowmem_reserve[]: 0 0 0 0 0 [ 1535.859446] team0 (unregistering): Port device team_slave_1 removed [ 1535.863671] Node 1 Normal free:193724kB min:53696kB low:67120kB high:80544kB active_anon:432kB inactive_anon:11660kB active_file:3540kB inactive_file:3780kB unevictable:0kB writepending:64kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:128kB pagetables:156kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1535.899970] lowmem_reserve[]: 0 0 0 0 0 [ 1535.900244] team0 (unregistering): Port device team_slave_0 removed [ 1535.904363] Node 0 DMA: 4*4kB (UE) 7*8kB (UE) 6*16kB (UE) 6*32kB (UE) 2*64kB (UE) 9*128kB (UE) 7*256kB (UE) 1*512kB (E) 3*1024kB (UE) 2*2048kB (ME) 0*4096kB = 11112kB [ 1535.928939] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 1535.934680] Node 0 DMA32: 1546*4kB (MEH) 738*8kB (UMEH) 152*16kB (UEH) 951*32kB (UEH) 3*64kB (UH) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 45144kB [ 1535.952553] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1535.964252] Node 1 Normal: 0*4kB [ 1535.964270] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 1535.974885] 1573*8kB (UM) 3335*16kB (UM) 3262*32kB (UM) 1*64kB (M) 2*128kB (M) 0*256kB 1*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 171160kB [ 1535.988129] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1535.997253] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1536.006392] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1536.015450] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1536.024250] 17010 total pagecache pages [ 1536.028291] 0 pages in swap cache [ 1536.031950] Swap cache stats: add 0, delete 0, find 0/0 [ 1536.037982] Free swap = 0kB [ 1536.038508] bond0 (unregistering): Released all slaves [ 1536.041292] Total swap = 0kB [ 1536.049898] 2097051 pages RAM [ 1536.053376] 0 pages HighMem/MovableOnly [ 1536.057776] 363849 pages reserved [ 1536.062274] 0 pages cma reserved [ 1536.084311] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 1536.097537] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 1536.118341] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 1536.168085] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 1536.196539] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1536.208835] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1536.242961] device veth0_vlan entered promiscuous mode [ 1536.265535] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1536.533185] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1537.294570] device veth1_vlan entered promiscuous mode [ 1537.361948] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 1537.397892] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 1537.414586] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1537.423030] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1537.457351] device veth0_macvtap entered promiscuous mode [ 1537.465137] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 1537.496410] device veth1_macvtap entered promiscuous mode [ 1537.515355] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 1537.536678] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 1537.569732] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 1537.599231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1537.633050] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1537.653982] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1537.665259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1537.679475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1537.690800] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1537.704172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1537.715911] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1537.729614] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 1537.738342] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1537.752178] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1537.764348] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1537.784453] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1537.796945] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1537.810253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1537.826067] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1537.838069] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1537.853092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1537.864877] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1537.878570] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1537.889548] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1537.902746] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1537.913744] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 1537.922302] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1537.930128] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1537.938303] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1538.163028] IPVS: ftp: loaded support on port[0] = 21 [ 1538.230380] Bluetooth: hci4 command 0x0409 tx timeout 09:39:01 executing program 4: socket(0x28, 0x1, 0x0) bind$x25(0xffffffffffffffff, &(0x7f0000000200)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x0}}, 0x12) 09:39:01 executing program 5: socket(0x11, 0x2, 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000004980), 0x0, 0x0) getsockopt$X25_QBITINCL(r0, 0x106, 0x1, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x4, 0x7, 0x7, 0x6, 0xa, @remote, @private2={0xfc, 0x2, '\x00', 0x1}, 0x700, 0x20, 0x9, 0x5f3b}}) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000004980), 0x0, 0x0) getsockopt$X25_QBITINCL(r1, 0x106, 0x1, 0x0, 0x0) r2 = socket$vsock_dgram(0x28, 0x2, 0x0) ioctl$sock_SIOCDELRT(r2, 0x890c, &(0x7f0000000180)={0x0, @llc={0x1a, 0x33a, 0x9, 0x6, 0x27, 0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, @vsock={0x28, 0x0, 0x2710}, @isdn={0x22, 0xcb, 0x81, 0x2, 0x69}, 0xfff, 0x0, 0x0, 0x0, 0x81, &(0x7f0000000140)='dummy0\x00', 0x80000000, 0x101, 0x8001}) openat$zero(0xffffffffffffff9c, &(0x7f00000000c0), 0x800, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000100)={0x80000004, 0x7}) getsockname(r1, &(0x7f0000002040)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f00000020c0)=0x80) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000240)={0x2, 0x80, 0x1, 0xff, 0x4, 0x41, 0x0, 0xfffffffffffffe00, 0x2000, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0xdc, 0x2, @perf_bp={&(0x7f0000000200), 0x5}, 0x4004, 0x7fffffff, 0x2, 0x4, 0x6, 0x3e7, 0x8001, 0x0, 0x3, 0x0, 0x8001}) socket$can_bcm(0x1d, 0x2, 0x2) 09:39:01 executing program 2: r0 = socket(0x0, 0x1, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, 0x0, 0x300, 0x70bd2b, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x20040801) 09:39:01 executing program 1: socket(0x11, 0x2, 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000004980), 0x0, 0x0) getsockopt$X25_QBITINCL(r0, 0x106, 0x1, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x4, 0x7, 0x7, 0x6, 0xa, @remote, @private2={0xfc, 0x2, '\x00', 0x1}, 0x700, 0x20, 0x9, 0x5f3b}}) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000004980), 0x0, 0x0) getsockopt$X25_QBITINCL(r1, 0x106, 0x1, 0x0, 0x0) r2 = socket$vsock_dgram(0x28, 0x2, 0x0) ioctl$sock_SIOCDELRT(r2, 0x890c, &(0x7f0000000180)={0x0, @llc={0x1a, 0x33a, 0x9, 0x6, 0x27, 0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, @vsock={0x28, 0x0, 0x2710}, @isdn={0x22, 0xcb, 0x81, 0x2, 0x69}, 0xfff, 0x0, 0x0, 0x0, 0x81, &(0x7f0000000140)='dummy0\x00', 0x80000000, 0x101, 0x8001}) openat$zero(0xffffffffffffff9c, &(0x7f00000000c0), 0x800, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000100)={0x80000004, 0x7}) getsockname(r1, &(0x7f0000002040)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f00000020c0)=0x80) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000240)={0x2, 0x80, 0x1, 0xff, 0x4, 0x41, 0x0, 0xfffffffffffffe00, 0x2000, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0xdc, 0x2, @perf_bp={&(0x7f0000000200), 0x5}, 0x4004, 0x7fffffff, 0x2, 0x4, 0x6, 0x3e7, 0x8001, 0x0, 0x3, 0x0, 0x8001}) socket(0x27, 0xa, 0x40000801) 09:39:01 executing program 0: socket(0x11, 0x2, 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000004980), 0x0, 0x0) getsockopt$X25_QBITINCL(r0, 0x106, 0x1, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x4, 0x7, 0x7, 0x6, 0xa, @remote, @private2={0xfc, 0x2, '\x00', 0x1}, 0x700, 0x20, 0x9, 0x5f3b}}) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000004980), 0x0, 0x0) getsockopt$X25_QBITINCL(r1, 0x106, 0x1, 0x0, 0x0) r2 = socket$vsock_dgram(0x28, 0x2, 0x0) ioctl$sock_SIOCDELRT(r2, 0x890c, &(0x7f0000000180)={0x0, @llc={0x1a, 0x33a, 0x9, 0x6, 0x27, 0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, @vsock={0x28, 0x0, 0x2710}, @isdn={0x22, 0xcb, 0x81, 0x2, 0x69}, 0xfff, 0x0, 0x0, 0x0, 0x81, &(0x7f0000000140)='dummy0\x00', 0x80000000, 0x101, 0x8001}) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000100)={0x80000004, 0x7}) [ 1538.364147] chnl_net:caif_netlink_parms(): no params data found 09:39:01 executing program 2: r0 = socket(0x0, 0x1, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, 0x0, 0x300, 0x70bd2b, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x20040801) 09:39:01 executing program 0: socket(0x11, 0x2, 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000004980), 0x0, 0x0) getsockopt$X25_QBITINCL(r0, 0x106, 0x1, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x4, 0x7, 0x7, 0x6, 0xa, @remote, @private2={0xfc, 0x2, '\x00', 0x1}, 0x700, 0x20, 0x9, 0x5f3b}}) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000004980), 0x0, 0x0) getsockopt$X25_QBITINCL(r1, 0x106, 0x1, 0x0, 0x0) r2 = socket$vsock_dgram(0x28, 0x2, 0x0) ioctl$sock_SIOCDELRT(r2, 0x890c, &(0x7f0000000180)={0x0, @llc={0x1a, 0x33a, 0x9, 0x6, 0x27, 0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, @vsock={0x28, 0x0, 0x2710}, @isdn={0x22, 0xcb, 0x81, 0x2, 0x69}, 0xfff, 0x0, 0x0, 0x0, 0x81, &(0x7f0000000140)='dummy0\x00', 0x80000000, 0x101, 0x8001}) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000100)={0x80000004, 0x7}) 09:39:01 executing program 4: socket(0x28, 0x1, 0x0) bind$x25(0xffffffffffffffff, &(0x7f0000000200)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x0}}, 0x12) 09:39:01 executing program 0: socket(0x11, 0x2, 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000004980), 0x0, 0x0) getsockopt$X25_QBITINCL(r0, 0x106, 0x1, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x4, 0x7, 0x7, 0x6, 0xa, @remote, @private2={0xfc, 0x2, '\x00', 0x1}, 0x700, 0x20, 0x9, 0x5f3b}}) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000004980), 0x0, 0x0) getsockopt$X25_QBITINCL(r1, 0x106, 0x1, 0x0, 0x0) r2 = socket$vsock_dgram(0x28, 0x2, 0x0) ioctl$sock_SIOCDELRT(r2, 0x890c, &(0x7f0000000180)={0x0, @llc={0x1a, 0x33a, 0x9, 0x6, 0x27, 0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, @vsock={0x28, 0x0, 0x2710}, @isdn={0x22, 0xcb, 0x81, 0x2, 0x69}, 0xfff, 0x0, 0x0, 0x0, 0x81, &(0x7f0000000140)='dummy0\x00', 0x80000000, 0x101, 0x8001}) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000100)={0x80000004, 0x7}) [ 1538.581267] bridge0: port 1(bridge_slave_0) entered blocking state [ 1538.604508] bridge0: port 1(bridge_slave_0) entered disabled state [ 1538.628851] device bridge_slave_0 entered promiscuous mode [ 1538.646753] bridge0: port 2(bridge_slave_1) entered blocking state [ 1538.653435] bridge0: port 2(bridge_slave_1) entered disabled state [ 1538.665188] device bridge_slave_1 entered promiscuous mode [ 1538.711048] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 1538.725689] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1538.765339] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 1538.774256] team0: Port device team_slave_0 added [ 1538.784528] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 1538.793399] team0: Port device team_slave_1 added [ 1538.829652] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1538.836538] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1538.867074] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1538.899665] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1538.918069] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1539.009456] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1539.038617] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 1539.064483] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 1539.170550] device hsr_slave_0 entered promiscuous mode [ 1539.184797] device hsr_slave_1 entered promiscuous mode [ 1539.198109] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 1539.214672] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 1539.509741] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 1539.629488] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1539.648441] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 1539.667470] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 1539.682430] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1539.693570] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1539.712243] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 1539.718362] 8021q: adding VLAN 0 to HW filter on device team0 [ 1539.748519] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 1539.771069] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1539.785436] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1539.806663] bridge0: port 1(bridge_slave_0) entered blocking state [ 1539.813430] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1539.842350] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 1539.858064] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1539.877120] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1539.898983] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1539.922675] bridge0: port 2(bridge_slave_1) entered blocking state [ 1539.929284] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1539.944594] syz-executor.5: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1539.963102] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 1539.971476] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 1539.976454] syz-executor.1: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1539.977663] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1539.997846] CPU: 0 PID: 9596 Comm: syz-executor.5 Not tainted 4.14.232-syzkaller #0 [ 1540.006286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1540.006871] syz-executor.1 cpuset= [ 1540.015945] Call Trace: [ 1540.015967] dump_stack+0x1b2/0x281 [ 1540.015980] warn_alloc.cold+0x96/0x1cc [ 1540.015992] ? zone_watermark_ok_safe+0x220/0x220 [ 1540.016011] __alloc_pages_nodemask+0x2127/0x2720 [ 1540.032508] / [ 1540.035494] ? __schedule+0x893/0x1de0 [ 1540.046426] ? lock_acquire+0x170/0x3f0 [ 1540.049460] mems_allowed=0-1 [ 1540.050499] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1540.050518] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1540.050530] ? __mutex_unlock_slowpath+0x75/0x770 [ 1540.069000] alloc_pages_current+0x155/0x260 [ 1540.073411] ion_page_pool_alloc+0x118/0x1b0 [ 1540.077916] ion_system_heap_allocate+0x133/0x8c0 [ 1540.082770] ? ion_alloc+0x187/0x810 [ 1540.086687] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1540.092233] ? ion_system_contig_heap_create+0x130/0x130 [ 1540.097883] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1540.103429] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1540.108369] ion_alloc+0x204/0x810 [ 1540.112131] ? ion_dma_buf_release+0x40/0x40 [ 1540.116729] ? __might_fault+0x177/0x1b0 [ 1540.120807] ion_ioctl+0xea/0x1f0 [ 1540.124460] ? ion_query_heaps+0x360/0x360 [ 1540.128714] ? ion_query_heaps+0x360/0x360 [ 1540.133039] do_vfs_ioctl+0x75a/0xff0 [ 1540.136849] ? ioctl_preallocate+0x1a0/0x1a0 [ 1540.141438] ? lock_downgrade+0x740/0x740 [ 1540.146390] ? __fget+0x225/0x360 [ 1540.150107] ? do_vfs_ioctl+0xff0/0xff0 [ 1540.154176] ? security_file_ioctl+0x83/0xb0 [ 1540.158726] SyS_ioctl+0x7f/0xb0 [ 1540.162304] ? do_vfs_ioctl+0xff0/0xff0 [ 1540.166419] do_syscall_64+0x1d5/0x640 [ 1540.170308] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1540.175759] RIP: 0033:0x4665f9 [ 1540.179035] RSP: 002b:00007f551e7c7188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1540.187125] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1540.194600] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000008 [ 1540.201871] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1540.209319] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1540.217142] R13: 00007ffd0570a9af R14: 00007f551e7c7300 R15: 0000000000022000 [ 1540.231512] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 1540.239915] CPU: 1 PID: 9595 Comm: syz-executor.1 Not tainted 4.14.232-syzkaller #0 [ 1540.241817] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 1540.247846] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1540.247852] Call Trace: [ 1540.247870] dump_stack+0x1b2/0x281 [ 1540.247883] warn_alloc.cold+0x96/0x1cc [ 1540.255212] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1540.265159] ? zone_watermark_ok_safe+0x220/0x220 [ 1540.265180] __alloc_pages_nodemask+0x2127/0x2720 [ 1540.265195] ? lock_acquire+0x170/0x3f0 [ 1540.265215] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1540.268706] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1540.271576] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1540.271588] ? __mutex_unlock_slowpath+0x75/0x770 [ 1540.271602] alloc_pages_current+0x155/0x260 [ 1540.271615] ion_page_pool_alloc+0x118/0x1b0 [ 1540.271624] ion_system_heap_allocate+0x133/0x8c0 [ 1540.271636] ? ion_alloc+0x187/0x810 [ 1540.276527] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1540.283283] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1540.283294] ? ion_system_contig_heap_create+0x130/0x130 [ 1540.283302] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1540.283313] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1540.283322] ion_alloc+0x204/0x810 [ 1540.283334] ? ion_dma_buf_release+0x40/0x40 [ 1540.283345] ? __might_fault+0x177/0x1b0 [ 1540.283356] ion_ioctl+0xea/0x1f0 [ 1540.283364] ? ion_query_heaps+0x360/0x360 [ 1540.283377] ? ion_query_heaps+0x360/0x360 [ 1540.283386] do_vfs_ioctl+0x75a/0xff0 [ 1540.283397] ? ioctl_preallocate+0x1a0/0x1a0 [ 1540.283406] ? lock_downgrade+0x740/0x740 [ 1540.283419] ? __fget+0x225/0x360 [ 1540.283428] ? do_vfs_ioctl+0xff0/0xff0 [ 1540.283439] ? security_file_ioctl+0x83/0xb0 [ 1540.283448] SyS_ioctl+0x7f/0xb0 [ 1540.283455] ? do_vfs_ioctl+0xff0/0xff0 [ 1540.283466] do_syscall_64+0x1d5/0x640 [ 1540.283478] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1540.283486] RIP: 0033:0x4665f9 [ 1540.283490] RSP: 002b:00007f22b5267188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1540.283499] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1540.283504] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000008 [ 1540.283509] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1540.283513] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1540.283521] R13: 00007ffea96cbc0f R14: 00007f22b5267300 R15: 0000000000022000 [ 1540.291382] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 1540.389615] warn_alloc_show_mem: 1 callbacks suppressed [ 1540.389618] Mem-Info: [ 1540.397189] Bluetooth: hci4 command 0x041b tx timeout [ 1540.403869] active_anon:14865 inactive_anon:12104 isolated_anon:0 [ 1540.403869] active_file:398 inactive_file:385 isolated_file:1 [ 1540.403869] unevictable:0 dirty:1 writeback:7 unstable:0 [ 1540.403869] slab_reclaimable:15491 slab_unreclaimable:115535 [ 1540.403869] mapped:53318 shmem:13078 pagetables:762 bounce:0 [ 1540.403869] free:126989 free_pcp:178 free_cma:0 [ 1540.407342] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1540.417303] Node 0 active_anon:59036kB inactive_anon:36752kB active_file:1516kB inactive_file:1520kB unevictable:0kB isolated(anon):0kB isolated(file):4kB mapped:186444kB dirty:0kB writeback:8kB shmem:40580kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 14336kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1540.423311] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1540.439985] Node 1 active_anon:424kB inactive_anon:11664kB active_file:76kB inactive_file:20kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:26828kB dirty:4kB writeback:20kB shmem:11732kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1540.444249] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1540.464975] Node 0 [ 1540.469383] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 1540.479520] DMA free:11072kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:4kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1540.483769] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1540.488971] lowmem_reserve[]: [ 1540.497276] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1540.504733] 0 [ 1540.513105] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 1540.549103] 2717 [ 1540.553079] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1540.585143] 2718 [ 1540.592125] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1540.617498] 2718 [ 1540.630950] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 1540.633911] 2718 [ 1540.679030] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1540.714307] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 1540.717028] Node 0 [ 1540.725923] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 1540.727017] DMA32 free:392628kB min:36200kB low:45248kB high:54296kB active_anon:59036kB inactive_anon:36752kB active_file:1712kB inactive_file:1720kB unevictable:0kB writepending:4kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7328kB pagetables:2892kB bounce:0kB free_pcp:848kB local_pcp:688kB free_cma:0kB [ 1540.763013] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1540.776249] lowmem_reserve[]: 0 0 0 0 0 [ 1540.786480] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1540.803788] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1540.816387] lowmem_reserve[]: 0 0 0 0 0 [ 1540.830902] Node 1 Normal free:118876kB min:53696kB low:67120kB high:80544kB active_anon:424kB inactive_anon:11664kB active_file:76kB inactive_file:20kB unevictable:0kB writepending:24kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:128kB pagetables:156kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1540.844522] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1540.864739] lowmem_reserve[]: 0 0 0 0 0 [ 1540.872423] Node 0 DMA: 2*4kB (ME) 3*8kB (UME) 2*16kB (ME) 8*32kB (UME) 4*64kB (UME) 4*128kB (UME) 3*256kB (UME) 2*512kB (ME) 4*1024kB (UME) 2*2048kB (UE) 0*4096kB = 11072kB [ 1540.893326] Node 0 DMA32: 2012*4kB (UMEH) 998*8kB (UMEH) 236*16kB (UMEH) 600*32kB (UMEH) 3008*64kB (UH) 161*128kB (U) 113*256kB (U) 29*512kB (U) 27*1024kB (U) 0*2048kB 0*4096kB = 323552kB [ 1540.917649] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1540.930292] Node 1 Normal: 358*4kB (UM) 592*8kB (UM) 1640*16kB (UM) 2706*32kB (UM) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 119000kB [ 1540.954625] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1540.973819] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1540.985436] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1540.999404] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1541.014237] 13875 total pagecache pages [ 1541.023721] 0 pages in swap cache [ 1541.028300] Swap cache stats: add 0, delete 0, find 0/0 [ 1541.038533] Free swap = 0kB [ 1541.045315] Total swap = 0kB [ 1541.055296] 2097051 pages RAM [ 1541.059144] 0 pages HighMem/MovableOnly [ 1541.065556] 363849 pages reserved [ 1541.077502] 0 pages cma reserved [ 1541.458628] systemd-journal invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1541.562826] systemd-journal cpuset=/ mems_allowed=0-1 [ 1541.568189] CPU: 1 PID: 9180 Comm: systemd-journal Not tainted 4.14.232-syzkaller #0 [ 1541.576351] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1541.586570] Call Trace: [ 1541.589187] dump_stack+0x1b2/0x281 [ 1541.592830] dump_header+0x178/0x82f [ 1541.596544] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1541.601647] ? ___ratelimit+0x2cd/0x530 [ 1541.605737] oom_kill_process.cold+0x10/0xa40 [ 1541.610349] out_of_memory+0xe3e/0x1190 [ 1541.614331] ? oom_killer_disable+0x1c0/0x1c0 [ 1541.618835] ? mutex_trylock+0x152/0x1a0 [ 1541.622899] __alloc_pages_nodemask+0x23e1/0x2720 [ 1541.627757] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1541.632756] alloc_pages_current+0x155/0x260 [ 1541.637387] filemap_fault+0x11a1/0x1ad0 [ 1541.641460] ext4_filemap_fault+0x84/0xb0 [ 1541.645869] __do_fault+0xfa/0x380 [ 1541.649495] __handle_mm_fault+0x2497/0x4620 [ 1541.653995] ? vm_insert_page+0x7c0/0x7c0 [ 1541.658240] ? __fsnotify_inode_delete+0x20/0x20 [ 1541.663000] ? __fsnotify_update_child_dentry_flags.part.0+0x2e0/0x2e0 [ 1541.670383] ? mark_held_locks+0xa6/0xf0 [ 1541.674796] handle_mm_fault+0x455/0x9c0 [ 1541.678967] __do_page_fault+0x549/0xad0 [ 1541.683293] ? spurious_fault+0x640/0x640 [ 1541.687537] ? do_page_fault+0x60/0x500 [ 1541.691691] ? page_fault+0x2f/0x50 [ 1541.697283] page_fault+0x45/0x50 [ 1541.700918] RIP: ea9b2208:0x563d81892958 [ 1541.705332] RSP: 8364c1e0:00000000000023dc EFLAGS: ffffffffffffffff [ 1541.914830] Mem-Info: [ 1541.924503] active_anon:14866 inactive_anon:12104 isolated_anon:0 [ 1541.924503] active_file:16 inactive_file:18 isolated_file:0 [ 1541.924503] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1541.924503] slab_reclaimable:15479 slab_unreclaimable:115266 [ 1541.924503] mapped:52715 shmem:13078 pagetables:762 bounce:0 [ 1541.924503] free:25219 free_pcp:117 free_cma:0 [ 1541.959613] Node 0 active_anon:59040kB inactive_anon:36752kB active_file:32kB inactive_file:36kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:184004kB dirty:0kB writeback:0kB shmem:40580kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 14336kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1541.988886] Node 1 active_anon:424kB inactive_anon:11664kB active_file:32kB inactive_file:36kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:26856kB dirty:0kB writeback:0kB shmem:11732kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1542.017548] Node 0 DMA free:11076kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1542.084269] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1542.089502] Node 0 DMA32 free:36396kB min:36200kB low:45248kB high:54296kB active_anon:59040kB inactive_anon:36752kB active_file:32kB inactive_file:36kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7328kB pagetables:2892kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1542.124606] lowmem_reserve[]: 0 0 0 0 0 [ 1542.128724] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1542.157083] lowmem_reserve[]: 0 0 0 0 0 [ 1542.161360] Node 1 Normal free:53280kB min:53696kB low:67120kB high:80544kB active_anon:424kB inactive_anon:11664kB active_file:0kB inactive_file:84kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:160kB pagetables:156kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1542.195744] lowmem_reserve[]: 0 0 0 0 0 [ 1542.200264] Node 0 DMA: 1*4kB (E) 2*8kB (UE) 1*16kB (E) 7*32kB (UE) 3*64kB (UE) 3*128kB (UE) 2*256kB (UE) 1*512kB (E) 3*1024kB (UE) 3*2048kB (UME) 0*4096kB = 11076kB [ 1542.218167] Node 0 DMA32: 2354*4kB (UME) 1090*8kB (ME) 258*16kB (ME) 51*32kB (ME) 4*64kB (UM) 1*128kB (U) 0*256kB 1*512kB (U) 11*1024kB (U) 0*2048kB 0*4096kB = 36056kB [ 1542.243672] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1542.257867] Node 1 Normal: 13*4kB (M) 6*8kB (UM) 7*16kB (M) 1659*32kB (UM) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 53300kB [ 1542.274532] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1542.287727] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1542.296787] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1542.305961] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1542.315940] 13112 total pagecache pages [ 1542.319956] 0 pages in swap cache [ 1542.323506] Swap cache stats: add 0, delete 0, find 0/0 [ 1542.328865] Free swap = 0kB [ 1542.332123] Total swap = 0kB [ 1542.335370] 2097051 pages RAM [ 1542.338461] 0 pages HighMem/MovableOnly [ 1542.347303] 363849 pages reserved [ 1542.351278] 0 pages cma reserved [ 1542.354652] Out of memory (oom_kill_allocating_task): Kill process 9180 (systemd-journal) score 0 or sacrifice child [ 1542.368465] Killed process 9180 (systemd-journal) total-vm:46096kB, anon-rss:476kB, file-rss:0kB, shmem-rss:1964kB [ 1542.383078] oom_reaper: reaped process 9180 (systemd-journal), now anon-rss:0kB, file-rss:0kB, shmem-rss:1964kB [ 1542.419638] kworker/u4:1 invoked oom-killer: gfp_mask=0x15080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null), order=3, oom_score_adj=0 [ 1542.470267] Bluetooth: hci4 command 0x040f tx timeout [ 1542.530549] kworker/u4:1 cpuset=/ mems_allowed=0-1 [ 1542.537938] CPU: 0 PID: 22 Comm: kworker/u4:1 Not tainted 4.14.232-syzkaller #0 [ 1542.545733] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1542.555534] Workqueue: events_unbound call_usermodehelper_exec_work [ 1542.562133] Call Trace: [ 1542.564722] dump_stack+0x1b2/0x281 [ 1542.568392] dump_header+0x178/0x82f [ 1542.572136] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1542.577329] ? ___ratelimit+0x2cd/0x530 [ 1542.581570] oom_kill_process.cold+0x10/0xa40 [ 1542.586254] ? lock_downgrade+0x740/0x740 [ 1542.590576] out_of_memory+0x2dc/0x1190 [ 1542.595103] ? oom_killer_disable+0x1c0/0x1c0 [ 1542.599870] ? mutex_trylock+0x152/0x1a0 [ 1542.604158] __alloc_pages_nodemask+0x23e1/0x2720 [ 1542.609275] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1542.614117] ? fs_reclaim_release+0xd0/0x110 [ 1542.618529] ? kmem_cache_alloc_node+0x38b/0x410 [ 1542.624196] copy_process.part.0+0x265/0x71c0 [ 1542.628958] ? __lock_acquire+0x5fc/0x3f20 [ 1542.634213] ? debug_object_activate+0x292/0x490 [ 1542.639750] ? trace_hardirqs_on+0x10/0x10 [ 1542.644169] ? static_obj+0x50/0x50 [ 1542.647969] ? call_usermodehelper_exec_work+0x2a0/0x2a0 [ 1542.656641] ? __cleanup_sighand+0x40/0x40 [ 1542.661441] ? call_usermodehelper_exec_work+0x2a0/0x2a0 [ 1542.666902] _do_fork+0x184/0xc80 [ 1542.671025] ? fork_idle+0x270/0x270 [ 1542.674740] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1542.680025] ? process_one_work+0x6c4/0x14a0 [ 1542.684603] ? call_usermodehelper_exec_work+0x2a0/0x2a0 [ 1542.690657] kernel_thread+0x2f/0x40 [ 1542.696967] call_usermodehelper_exec_work+0x1ac/0x2a0 [ 1542.702726] ? call_usermodehelper+0x80/0x80 [ 1542.707668] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1542.713346] process_one_work+0x793/0x14a0 [ 1542.717952] ? work_busy+0x320/0x320 [ 1542.722304] ? worker_thread+0x158/0xff0 [ 1542.726683] ? _raw_spin_unlock_irq+0x24/0x80 [ 1542.731391] worker_thread+0x5cc/0xff0 [ 1542.735376] ? rescuer_thread+0xc80/0xc80 [ 1542.740084] kthread+0x30d/0x420 [ 1542.743991] ? kthread_create_on_node+0xd0/0xd0 [ 1542.749393] ret_from_fork+0x24/0x30 [ 1542.755801] Mem-Info: [ 1542.758851] active_anon:14767 inactive_anon:12104 isolated_anon:0 [ 1542.758851] active_file:51 inactive_file:0 isolated_file:0 [ 1542.758851] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1542.758851] slab_reclaimable:15479 slab_unreclaimable:115266 [ 1542.758851] mapped:52241 shmem:13078 pagetables:763 bounce:0 [ 1542.758851] free:25098 free_pcp:32 free_cma:0 [ 1542.794063] Node 0 active_anon:58644kB inactive_anon:36752kB active_file:108kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:182108kB dirty:0kB writeback:0kB shmem:40580kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 14336kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1542.823763] Node 1 active_anon:424kB inactive_anon:11664kB active_file:96kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:26856kB dirty:0kB writeback:0kB shmem:11732kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1542.854125] Node 0 DMA free:11076kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1542.881503] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1542.886780] Node 0 DMA32 free:36016kB min:36200kB low:45248kB high:54296kB active_anon:58644kB inactive_anon:36752kB active_file:108kB inactive_file:96kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7296kB pagetables:2896kB bounce:0kB free_pcp:128kB local_pcp:120kB free_cma:0kB [ 1543.103600] lowmem_reserve[]: 0 0 0 0 0 [ 1543.107821] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1543.183596] lowmem_reserve[]: 0 0 0 0 0 [ 1543.187769] Node 1 Normal free:53300kB min:53696kB low:67120kB high:80544kB active_anon:424kB inactive_anon:11664kB active_file:36kB inactive_file:32kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:160kB pagetables:156kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1543.260215] lowmem_reserve[]: 0 0 0 0 0 [ 1543.264877] Node 0 DMA: 1*4kB (E) 2*8kB (UE) 1*16kB (E) 7*32kB (UE) 3*64kB (UE) 3*128kB (UE) 2*256kB (UE) 1*512kB (E) 3*1024kB (UE) 3*2048kB (UME) 0*4096kB = 11076kB [ 1543.369591] Node 0 DMA32: 2332*4kB (ME) 1092*8kB (ME) 260*16kB (UME) 51*32kB (ME) 3*64kB (M) 1*128kB (U) 1*256kB (U) 0*512kB 11*1024kB (U) 0*2048kB 0*4096kB = 35696kB [ 1543.387691] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1543.399430] Node 1 Normal: 13*4kB (M) 6*8kB (UM) 7*16kB (M) 1659*32kB (UM) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 53300kB [ 1543.420368] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1543.433347] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1543.444739] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1543.457290] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1543.468350] 13098 total pagecache pages [ 1543.474607] 0 pages in swap cache [ 1543.478495] Swap cache stats: add 0, delete 0, find 0/0 [ 1543.486029] Free swap = 0kB [ 1543.489271] Total swap = 0kB [ 1543.494590] 2097051 pages RAM [ 1543.497786] 0 pages HighMem/MovableOnly [ 1543.504554] 363849 pages reserved [ 1543.508101] 0 pages cma reserved [ 1543.514337] Out of memory: Kill process 9591 (syz-executor.1) score 1005 or sacrifice child [ 1543.525944] Killed process 9595 (syz-executor.1) total-vm:93384kB, anon-rss:2196kB, file-rss:34820kB, shmem-rss:0kB [ 1543.572157] syz-fuzzer invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1543.598468] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 1543.607489] CPU: 0 PID: 7965 Comm: syz-fuzzer Not tainted 4.14.232-syzkaller #0 [ 1543.614961] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1543.624552] Call Trace: [ 1543.627167] dump_stack+0x1b2/0x281 [ 1543.630890] dump_header+0x178/0x82f [ 1543.634993] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1543.640095] ? ___ratelimit+0x2cd/0x530 [ 1543.644072] oom_kill_process.cold+0x10/0xa40 [ 1543.649321] out_of_memory+0xe3e/0x1190 [ 1543.653387] ? oom_killer_disable+0x1c0/0x1c0 [ 1543.658425] ? mutex_trylock+0x152/0x1a0 [ 1543.663305] __alloc_pages_nodemask+0x23e1/0x2720 [ 1543.668416] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1543.673391] alloc_pages_current+0x155/0x260 [ 1543.678227] filemap_fault+0x11a1/0x1ad0 [ 1543.682439] ext4_filemap_fault+0x84/0xb0 [ 1543.686684] __do_fault+0xfa/0x380 [ 1543.690418] __handle_mm_fault+0x2497/0x4620 [ 1543.696664] ? vm_insert_page+0x7c0/0x7c0 [ 1543.700811] ? mark_held_locks+0xa6/0xf0 [ 1543.705161] handle_mm_fault+0x455/0x9c0 [ 1543.709493] __do_page_fault+0x549/0xad0 [ 1543.713556] ? spurious_fault+0x640/0x640 [ 1543.717883] ? do_page_fault+0x60/0x500 [ 1543.722032] ? page_fault+0x2f/0x50 [ 1543.726060] page_fault+0x45/0x50 [ 1543.730458] RIP: 0900:0x171dff90fc2 [ 1543.734618] RSP: 2e400:000000c00003ff28 EFLAGS: 00000003 [ 1543.741735] Mem-Info: [ 1543.749829] active_anon:14749 inactive_anon:12103 isolated_anon:0 [ 1543.749829] active_file:37 inactive_file:0 isolated_file:0 [ 1543.749829] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1543.749829] slab_reclaimable:15448 slab_unreclaimable:115207 [ 1543.749829] mapped:52225 shmem:13078 pagetables:739 bounce:0 [ 1543.749829] free:13953 free_pcp:90 free_cma:0 [ 1543.751885] syz-executor.1: [ 1543.790738] Node 0 active_anon:58572kB inactive_anon:36748kB active_file:128kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:182072kB dirty:0kB writeback:0kB shmem:40580kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 14336kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1543.799552] page allocation failure: order:0 [ 1543.828887] Node 1 active_anon:424kB inactive_anon:11664kB active_file:20kB inactive_file:48kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:26828kB dirty:0kB writeback:0kB shmem:11732kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1543.837667] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1543.872623] Node 0 [ 1543.875275] (null) [ 1543.885505] DMA free:10976kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1543.889718] syz-executor.1 cpuset= [ 1543.923569] lowmem_reserve[]: [ 1543.923878] / [ 1543.927205] 0 [ 1543.932979] mems_allowed=0-1 [ 1543.937883] CPU: 1 PID: 9595 Comm: syz-executor.1 Not tainted 4.14.232-syzkaller #0 [ 1543.944800] 2717 [ 1543.946055] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1543.946063] 2718 [ 1543.948208] Call Trace: [ 1543.962477] dump_stack+0x1b2/0x281 [ 1543.966225] warn_alloc.cold+0x96/0x1cc [ 1543.970287] ? zone_watermark_ok_safe+0x220/0x220 [ 1543.972300] 2718 [ 1543.975124] ? usleep_range+0x130/0x130 [ 1543.975130] 2718 [ 1543.977188] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1543.977200] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1543.990362] aoe: skb alloc failure [ 1543.993458] ? run_timer_softirq+0x5a0/0x5a0 [ 1543.993478] __alloc_pages_nodemask+0x2127/0x2720 [ 1543.997264] aoe: skb alloc failure [ 1544.001650] ? lock_acquire+0x170/0x3f0 [ 1544.001665] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1544.001674] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1544.001689] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1544.006641] aoe: skb alloc failure [ 1544.010243] alloc_pages_current+0x155/0x260 [ 1544.010254] ion_page_pool_alloc+0x118/0x1b0 [ 1544.010263] ion_system_heap_allocate+0x133/0x8c0 [ 1544.014323] aoe: skb alloc failure [ 1544.019151] ? ion_alloc+0x187/0x810 [ 1544.024249] aoe: skb alloc failure [ 1544.029831] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1544.033792] aoe: skb alloc failure [ 1544.038220] ? ion_system_contig_heap_create+0x130/0x130 [ 1544.043195] aoe: skb alloc failure [ 1544.048424] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1544.051988] aoe: skb alloc failure [ 1544.055964] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1544.059770] aoe: skb alloc failure [ 1544.065265] ion_alloc+0x204/0x810 [ 1544.065276] ? ion_dma_buf_release+0x40/0x40 [ 1544.065287] ? __might_fault+0x177/0x1b0 [ 1544.065300] ion_ioctl+0xea/0x1f0 [ 1544.068941] aoe: skb alloc failure [ 1544.074537] ? ion_query_heaps+0x360/0x360 [ 1544.074549] ? ion_query_heaps+0x360/0x360 [ 1544.074561] do_vfs_ioctl+0x75a/0xff0 [ 1544.078106] aoe: skb alloc failure [ 1544.083098] ? ioctl_preallocate+0x1a0/0x1a0 [ 1544.083108] ? lock_downgrade+0x740/0x740 [ 1544.083121] ? __fget+0x225/0x360 [ 1544.086776] aoe: skb alloc failure [ 1544.091581] ? do_vfs_ioctl+0xff0/0xff0 [ 1544.091592] ? security_file_ioctl+0x83/0xb0 [ 1544.091603] SyS_ioctl+0x7f/0xb0 [ 1544.095183] aoe: skb alloc failure [ 1544.098697] ? do_vfs_ioctl+0xff0/0xff0 [ 1544.103324] aoe: skb alloc failure [ 1544.107316] do_syscall_64+0x1d5/0x640 [ 1544.110892] aoe: skb alloc failure [ 1544.114471] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1544.118793] aoe: skb alloc failure [ 1544.123006] RIP: 0033:0x4665f9 [ 1544.123011] RSP: 002b:00007f22b5267188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1544.123019] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1544.123024] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000008 [ 1544.123029] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1544.123033] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1544.123041] R13: 00007ffea96cbc0f R14: 00007f22b5267300 R15: 0000000000022000 [ 1544.126934] aoe: skb alloc failure [ 1544.143059] aoe: skb alloc failure [ 1544.146717] Node 0 [ 1544.150820] aoe: skb alloc failure [ 1544.150842] aoe: skb alloc failure [ 1544.150872] aoe: skb alloc failure [ 1544.150896] aoe: skb alloc failure [ 1544.150920] aoe: skb alloc failure [ 1544.162613] warn_alloc_show_mem: 1 callbacks suppressed [ 1544.162617] Mem-Info: [ 1544.163188] aoe: skb alloc failure [ 1544.167245] active_anon:14749 inactive_anon:12103 isolated_anon:0 [ 1544.167245] active_file:16 inactive_file:18 isolated_file:0 [ 1544.167245] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1544.167245] slab_reclaimable:15448 slab_unreclaimable:115207 [ 1544.167245] mapped:52225 shmem:13078 pagetables:739 bounce:0 [ 1544.167245] free:13953 free_pcp:102 free_cma:0 [ 1544.171126] aoe: skb alloc failure [ 1544.171152] aoe: skb alloc failure [ 1544.171176] aoe: skb alloc failure [ 1544.171198] aoe: skb alloc failure [ 1544.171222] aoe: skb alloc failure [ 1544.182471] DMA32 free:18072kB min:36200kB low:45248kB high:54296kB active_anon:58572kB inactive_anon:36748kB active_file:32kB inactive_file:36kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7296kB pagetables:2800kB bounce:0kB free_pcp:288kB local_pcp:120kB free_cma:0kB [ 1544.184465] aoe: skb alloc failure [ 1544.188176] lowmem_reserve[]: [ 1544.191570] aoe: skb alloc failure [ 1544.191593] aoe: skb alloc failure [ 1544.191618] aoe: skb alloc failure [ 1544.191640] aoe: skb alloc failure [ 1544.191663] aoe: skb alloc failure [ 1544.201819] Node 0 active_anon:58572kB inactive_anon:36748kB active_file:32kB inactive_file:36kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:182072kB dirty:0kB writeback:0kB shmem:40580kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 14336kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1544.207864] aoe: skb alloc failure [ 1544.224617] 0 [ 1544.225345] aoe: skb alloc failure [ 1544.240755] Node 1 active_anon:424kB inactive_anon:11664kB active_file:32kB inactive_file:36kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:26828kB dirty:0kB writeback:0kB shmem:11732kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1544.241101] aoe: skb alloc failure [ 1544.244902] Node 0 [ 1544.248983] aoe: skb alloc failure [ 1544.258592] 0 [ 1544.259127] aoe: skb alloc failure [ 1544.263348] 0 [ 1544.266644] aoe: skb alloc failure [ 1544.277504] DMA free:10976kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1544.278307] aoe: skb alloc failure [ 1544.281851] lowmem_reserve[]: [ 1544.316375] aoe: skb alloc failure [ 1544.316402] aoe: skb alloc failure [ 1544.316424] aoe: skb alloc failure [ 1544.338906] 0 [ 1544.372526] 0 [ 1544.392485] 0 [ 1544.403046] 2717 [ 1544.467781] 2718 [ 1544.483043] Node 0 [ 1544.516891] 2718 [ 1544.532295] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1544.542442] 2718 [ 1544.578960] Node 0 DMA32 free:18072kB min:36200kB low:45248kB high:54296kB active_anon:58572kB inactive_anon:36748kB active_file:32kB inactive_file:36kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7296kB pagetables:2800kB bounce:0kB free_pcp:284kB local_pcp:120kB free_cma:0kB [ 1544.580096] Bluetooth: hci4 command 0x0419 tx timeout [ 1544.616946] lowmem_reserve[]: 0 0 0 0 0 [ 1544.627977] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1544.629797] lowmem_reserve[]: 0 0 0 0 0 [ 1544.666406] Node 1 Normal free:26764kB min:53696kB low:67120kB high:80544kB active_anon:424kB inactive_anon:11664kB active_file:32kB inactive_file:36kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:160kB pagetables:156kB bounce:0kB free_pcp:120kB local_pcp:0kB free_cma:0kB [ 1544.671177] lowmem_reserve[]: [ 1544.704043] lowmem_reserve[]: 0 0 0 0 0 [ 1544.711720] Node 0 DMA: 2*4kB (UE) 1*8kB (E) 1*16kB (E) 4*32kB (UE) 3*64kB (UE) 3*128kB (UE) 2*256kB (UE) 1*512kB (E) 3*1024kB (UE) 3*2048kB (UME) 0*4096kB = 10976kB [ 1544.720003] 0 0 0 0 0 [ 1544.729329] Node 0 DMA32: 1862*4kB (ME) 817*8kB (MEH) 188*16kB (MEH) 33*32kB (MEH) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18048kB [ 1544.747705] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1544.748201] Node 1 [ 1544.758963] Node 1 Normal: 13*4kB (M) 5*8kB (M) 7*16kB (M) 830*32kB (UM) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 26764kB [ 1544.777666] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1544.779973] Normal free:26764kB min:53696kB low:67120kB high:80544kB active_anon:424kB inactive_anon:11664kB active_file:0kB inactive_file:36kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:160kB pagetables:156kB bounce:0kB free_pcp:120kB local_pcp:120kB free_cma:0kB [ 1544.789508] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1544.829233] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1544.836426] lowmem_reserve[]: 0 0 0 0 0 [ 1544.839081] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1544.855715] 13112 total pagecache pages [ 1544.861254] 0 pages in swap cache [ 1544.862713] Node 0 DMA: [ 1544.865331] Swap cache stats: add 0, delete 0, find 0/0 [ 1544.865337] Free swap = 0kB [ 1544.868145] 2*4kB [ 1544.876063] Total swap = 0kB [ 1544.882410] 2097051 pages RAM [ 1544.885532] 0 pages HighMem/MovableOnly [ 1544.889510] 363849 pages reserved [ 1544.895193] 0 pages cma reserved [ 1544.898575] Out of memory (oom_kill_allocating_task): Kill process 7965 (syz-fuzzer) score 0 or sacrifice child [ 1544.898782] (UE) [ 1544.909280] Killed process 8611 (syz-executor.4) total-vm:84924kB, anon-rss:64kB, file-rss:0kB, shmem-rss:0kB [ 1544.932482] 1*8kB (E) 1*16kB (E) 4*32kB (UE) 3*64kB (UE) 3*128kB (UE) 2*256kB (UE) 1*512kB (E) 3*1024kB (UE) 3*2048kB (UME) 0*4096kB = 10976kB [ 1544.956933] Node 0 DMA32: 1862*4kB (ME) 819*8kB (UMEH) 188*16kB (MEH) 33*32kB (MEH) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 1*2048kB (M) 0*4096kB = 20112kB [ 1544.981954] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1545.006534] oom_reaper: reaped process 9595 (syz-executor.1), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1545.009169] Node 1 Normal: 13*4kB (M) 5*8kB (M) 7*16kB (M) 830*32kB (UM) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 26764kB [ 1545.043694] syz-fuzzer invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1545.057947] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1545.075182] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 1545.087994] CPU: 0 PID: 7968 Comm: syz-fuzzer Not tainted 4.14.232-syzkaller #0 [ 1545.088902] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1545.096264] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1545.096268] Call Trace: [ 1545.096292] dump_stack+0x1b2/0x281 [ 1545.096303] dump_header+0x178/0x82f [ 1545.096313] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1545.096321] ? ___ratelimit+0x2cd/0x530 [ 1545.096330] oom_kill_process.cold+0x10/0xa40 [ 1545.096346] out_of_memory+0xe3e/0x1190 [ 1545.096358] ? oom_killer_disable+0x1c0/0x1c0 [ 1545.105713] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1545.114908] ? mutex_trylock+0x152/0x1a0 [ 1545.114920] __alloc_pages_nodemask+0x23e1/0x2720 [ 1545.114940] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1545.117503] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1545.121126] alloc_pages_current+0x155/0x260 [ 1545.121139] filemap_fault+0x11a1/0x1ad0 [ 1545.124886] 13112 total pagecache pages [ 1545.130005] ext4_filemap_fault+0x84/0xb0 [ 1545.130018] __do_fault+0xfa/0x380 [ 1545.130027] __handle_mm_fault+0x2497/0x4620 [ 1545.130038] ? vm_insert_page+0x7c0/0x7c0 [ 1545.134043] 0 pages in swap cache [ 1545.139019] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1545.139035] ? mark_held_locks+0xa6/0xf0 [ 1545.143079] Swap cache stats: add 0, delete 0, find 0/0 [ 1545.147686] handle_mm_fault+0x455/0x9c0 [ 1545.157133] Free swap = 0kB [ 1545.161246] __do_page_fault+0x549/0xad0 [ 1545.161261] ? spurious_fault+0x640/0x640 [ 1545.166503] Total swap = 0kB [ 1545.171787] ? do_page_fault+0x60/0x500 [ 1545.171795] ? page_fault+0x2f/0x50 [ 1545.171801] page_fault+0x45/0x50 [ 1545.171811] RIP: 290480:0xc0000562a0 [ 1545.180534] 2097051 pages RAM [ 1545.184890] RSP: 28e400:000000c0002a1de0 EFLAGS: 00000003 [ 1545.189110] 0 pages HighMem/MovableOnly [ 1545.201433] Mem-Info: [ 1545.216862] 363849 pages reserved [ 1545.225386] active_anon:14191 inactive_anon:12103 isolated_anon:0 [ 1545.225386] active_file:15 inactive_file:19 isolated_file:0 [ 1545.225386] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1545.225386] slab_reclaimable:15441 slab_unreclaimable:115211 [ 1545.225386] mapped:43525 shmem:13078 pagetables:701 bounce:0 [ 1545.225386] free:14459 free_pcp:237 free_cma:0 [ 1545.235493] 0 pages cma reserved [ 1545.237109] Node 0 active_anon:56340kB inactive_anon:36748kB active_file:40kB inactive_file:28kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:147272kB dirty:0kB writeback:0kB shmem:40580kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1545.349542] Node 1 active_anon:424kB inactive_anon:11664kB active_file:20kB inactive_file:48kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:26828kB dirty:0kB writeback:0kB shmem:11732kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1545.404698] systemd[1]: systemd-journald.service: Failed with result 'signal'. [ 1545.430736] Node 0 DMA free:11104kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1545.452951] systemd[1]: systemd-journald.service: Service has no hold-off time, scheduling restart. [ 1545.482055] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 1545.496617] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 1545.520139] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1545.529092] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1545.536281] systemd[1]: Stopped Flush Journal to Persistent Storage. [ 1545.548676] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1545.570735] systemd[1]: Stopping Flush Journal to Persistent Storage... [ 1545.572047] Node 0 [ 1545.578359] systemd[1]: Stopped Journal Service. [ 1545.588493] DMA32 free:36096kB min:36200kB low:45248kB high:54296kB active_anon:56340kB inactive_anon:36748kB active_file:1940kB inactive_file:7428kB unevictable:0kB writepending:148kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7264kB pagetables:2648kB bounce:0kB free_pcp:748kB local_pcp:192kB free_cma:0kB [ 1545.636062] lowmem_reserve[]: 0 0 0 0 0 [ 1545.644161] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1545.683640] lowmem_reserve[]: 0 0 0 0 0 [ 1545.687891] Node 1 Normal free:29352kB min:53696kB low:67120kB high:80544kB active_anon:424kB inactive_anon:11664kB active_file:120kB inactive_file:900kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:128kB pagetables:156kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1545.763710] lowmem_reserve[]: 0 0 0 0 0 [ 1545.767782] Node 0 DMA: 5*4kB (UME) 4*8kB (UME) 4*16kB (UME) 4*32kB (UME) 5*64kB (UME) 4*128kB (UME) 3*256kB (UME) 2*512kB (ME) 4*1024kB (UME) 2*2048kB (UE) 0*4096kB = 11060kB [ 1545.788555] Node 0 DMA32: 1895*4kB (UMEH) 842*8kB (UMEH) 190*16kB (UMEH) 51*32kB (UMEH) 16*64kB (UM) 4*128kB (UM) 2*256kB (M) 1*512kB (M) 5*1024kB (U) 0*2048kB 0*4096kB = 26668kB [ 1545.809526] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1545.824409] Node 1 Normal: 18*4kB (UM) 9*8kB (UM) 10*16kB (UM) 13*32kB (UM) 373*64kB (U) 19*128kB (U) 5*256kB (U) 2*512kB (U) 1*1024kB (M) 0*2048kB 0*4096kB = 30352kB [ 1545.889247] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1545.898777] syz-executor.1: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1545.913365] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1545.951777] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1545.965675] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1546.000120] 13126 total pagecache pages [ 1546.004746] 0 pages in swap cache [ 1546.008480] Swap cache stats: add 0, delete 0, find 0/0 [ 1546.027091] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 1546.055602] CPU: 1 PID: 9595 Comm: syz-executor.1 Not tainted 4.14.232-syzkaller #0 [ 1546.064216] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1546.073753] Call Trace: [ 1546.077828] dump_stack+0x1b2/0x281 [ 1546.081734] warn_alloc.cold+0x96/0x1cc [ 1546.085718] ? zone_watermark_ok_safe+0x220/0x220 [ 1546.090592] __alloc_pages_nodemask+0x2127/0x2720 [ 1546.096052] ? __schedule+0x893/0x1de0 [ 1546.100092] ? lock_acquire+0x170/0x3f0 [ 1546.104338] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1546.109187] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1546.113373] Free swap = 0kB [ 1546.114641] ? __mutex_unlock_slowpath+0x75/0x770 [ 1546.118265] Total swap = 0kB [ 1546.123112] ? retint_kernel+0x2d/0x2d [ 1546.123126] alloc_pages_current+0x155/0x260 [ 1546.123138] ion_page_pool_alloc+0x118/0x1b0 [ 1546.123148] ion_system_heap_allocate+0x133/0x8c0 [ 1546.123158] ? _raw_spin_unlock+0x29/0x40 [ 1546.123166] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1546.123174] ? ion_system_contig_heap_create+0x130/0x130 [ 1546.123185] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1546.166387] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1546.171666] ion_alloc+0x27a/0x810 [ 1546.176369] ? ion_dma_buf_release+0x40/0x40 [ 1546.180955] ? __might_fault+0x177/0x1b0 [ 1546.185305] ion_ioctl+0xea/0x1f0 [ 1546.189078] ? ion_query_heaps+0x360/0x360 [ 1546.193409] ? ion_query_heaps+0x360/0x360 [ 1546.196061] 2097051 pages RAM [ 1546.197989] do_vfs_ioctl+0x75a/0xff0 [ 1546.205189] ? ioctl_preallocate+0x1a0/0x1a0 [ 1546.209885] ? lock_downgrade+0x740/0x740 [ 1546.214733] ? __fget+0x225/0x360 [ 1546.218533] ? do_vfs_ioctl+0xff0/0xff0 [ 1546.222783] ? security_file_ioctl+0x83/0xb0 [ 1546.227191] SyS_ioctl+0x7f/0xb0 [ 1546.230556] ? do_vfs_ioctl+0xff0/0xff0 [ 1546.234623] do_syscall_64+0x1d5/0x640 [ 1546.237027] 0 pages HighMem/MovableOnly [ 1546.238681] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1546.248484] RIP: 0033:0x4665f9 [ 1546.252595] RSP: 002b:00007f22b5267188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1546.261019] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1546.269348] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000008 [ 1546.276897] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1546.284738] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1546.288014] 363849 pages reserved [ 1546.292545] R13: 00007ffea96cbc0f R14: 00007f22b5267300 R15: 0000000000022000 [ 1546.367980] 0 pages cma reserved [ 1546.371661] Out of memory (oom_kill_allocating_task): Kill process 7968 (syz-fuzzer) score 0 or sacrifice child [ 1546.438819] Killed process 9432 (syz-executor.3) total-vm:84924kB, anon-rss:64kB, file-rss:0kB, shmem-rss:0kB [ 1546.559417] oom_reaper: reaped process 9432 (syz-executor.3), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1546.722404] kworker/u4:2 invoked oom-killer: gfp_mask=0x15080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null), order=3, oom_score_adj=0 [ 1546.872426] kworker/u4:2 cpuset=/ mems_allowed=0-1 [ 1546.878104] CPU: 1 PID: 5517 Comm: kworker/u4:2 Not tainted 4.14.232-syzkaller #0 [ 1546.886419] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1546.896130] Workqueue: events_unbound call_usermodehelper_exec_work [ 1546.902616] Call Trace: [ 1546.905302] dump_stack+0x1b2/0x281 [ 1546.909373] dump_header+0x178/0x82f [ 1546.913171] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1546.918270] ? ___ratelimit+0x2cd/0x530 [ 1546.922245] oom_kill_process.cold+0x10/0xa40 [ 1546.927022] ? lock_downgrade+0x740/0x740 [ 1546.931258] out_of_memory+0x2dc/0x1190 [ 1546.935319] ? oom_killer_disable+0x1c0/0x1c0 [ 1546.940226] ? mutex_trylock+0x152/0x1a0 [ 1546.944378] __alloc_pages_nodemask+0x23e1/0x2720 [ 1546.949538] ? __lock_acquire+0x5fc/0x3f20 [ 1546.953951] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1546.958886] ? fs_reclaim_release+0xd0/0x110 [ 1546.963390] ? kmem_cache_alloc_node+0x38b/0x410 [ 1546.968144] copy_process.part.0+0x265/0x71c0 [ 1546.972816] ? __lock_acquire+0x5fc/0x3f20 [ 1546.977143] ? debug_object_activate+0x292/0x490 [ 1546.981893] ? trace_hardirqs_on+0x10/0x10 [ 1546.986120] ? static_obj+0x50/0x50 [ 1546.989923] ? call_usermodehelper_exec_work+0x2a0/0x2a0 [ 1546.995542] ? __cleanup_sighand+0x40/0x40 [ 1546.999795] ? call_usermodehelper_exec_work+0x2a0/0x2a0 [ 1547.005693] _do_fork+0x184/0xc80 [ 1547.009356] ? fork_idle+0x270/0x270 [ 1547.013258] ? mark_held_locks+0xa6/0xf0 [ 1547.017314] ? _raw_spin_unlock_irq+0x24/0x80 [ 1547.022090] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1547.027101] ? _raw_spin_unlock_irq+0x5a/0x80 [ 1547.031944] ? kernel_sigaction+0x13b/0x200 [ 1547.036978] ? recalc_sigpending+0x1d0/0x1d0 [ 1547.041730] ? call_usermodehelper_exec_work+0x2a0/0x2a0 [ 1547.047265] kernel_thread+0x2f/0x40 [ 1547.051223] call_usermodehelper_exec_work+0x97/0x2a0 [ 1547.056867] ? call_usermodehelper+0x80/0x80 [ 1547.061968] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1547.067708] process_one_work+0x793/0x14a0 [ 1547.073366] ? work_busy+0x320/0x320 [ 1547.077447] ? worker_thread+0x158/0xff0 [ 1547.081771] ? _raw_spin_unlock_irq+0x24/0x80 [ 1547.087133] worker_thread+0x5cc/0xff0 [ 1547.091131] ? rescuer_thread+0xc80/0xc80 [ 1547.095367] kthread+0x30d/0x420 [ 1547.098833] ? kthread_create_on_node+0xd0/0xd0 [ 1547.103595] ret_from_fork+0x24/0x30 [ 1547.799229] Mem-Info: [ 1547.805604] active_anon:14166 inactive_anon:12103 isolated_anon:0 [ 1547.805604] active_file:9 inactive_file:19 isolated_file:0 [ 1547.805604] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1547.805604] slab_reclaimable:15428 slab_unreclaimable:114612 [ 1547.805604] mapped:34817 shmem:13078 pagetables:648 bounce:0 [ 1547.805604] free:17664 free_pcp:158 free_cma:0 [ 1547.853987] Node 0 active_anon:56252kB inactive_anon:36748kB active_file:32kB inactive_file:72kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:112440kB dirty:0kB writeback:0kB shmem:40580kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1547.918008] Mem-Info: [ 1547.922022] active_anon:14166 inactive_anon:12103 isolated_anon:0 [ 1547.922022] active_file:13 inactive_file:14 isolated_file:3 [ 1547.922022] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1547.922022] slab_reclaimable:15428 slab_unreclaimable:114586 [ 1547.922022] mapped:34817 shmem:13078 pagetables:648 bounce:0 [ 1547.922022] free:17879 free_pcp:0 free_cma:0 [ 1547.929064] Node 1 active_anon:412kB inactive_anon:11664kB active_file:4kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:26828kB dirty:0kB writeback:0kB shmem:11732kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1547.957958] Node 0 active_anon:56252kB inactive_anon:36748kB active_file:48kB inactive_file:52kB unevictable:0kB isolated(anon):0kB isolated(file):12kB mapped:112440kB dirty:0kB writeback:0kB shmem:40580kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1547.985763] Node 0 DMA free:11060kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:20kB inactive_file:16kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1548.016418] Node 1 active_anon:412kB inactive_anon:11664kB active_file:4kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:26828kB dirty:0kB writeback:0kB shmem:11732kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1548.050494] lowmem_reserve[]: [ 1548.068222] Node 0 [ 1548.069838] 0 [ 1548.072009] DMA free:11060kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:20kB inactive_file:16kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1548.073903] 2717 [ 1548.075705] lowmem_reserve[]: [ 1548.102505] 2718 [ 1548.104165] 0 [ 1548.107513] 2718 2718 [ 1548.109576] 2717 [ 1548.113937] 2718 [ 1548.116164] Node 0 [ 1548.116171] 2718 [ 1548.118411] DMA32 free:33360kB min:36200kB low:45248kB high:54296kB active_anon:56252kB inactive_anon:36748kB active_file:28kB inactive_file:36kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7264kB pagetables:2444kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1548.124086] 2718 [ 1548.151378] lowmem_reserve[]: 0 0 0 0 0 [ 1548.151401] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1548.151420] lowmem_reserve[]: 0 0 0 0 0 [ 1548.151437] Node 1 Normal free:27096kB min:53696kB low:67120kB high:80544kB active_anon:412kB inactive_anon:11664kB active_file:4kB inactive_file:4kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:96kB pagetables:148kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1548.151457] lowmem_reserve[]: [ 1548.157495] 0 0 [ 1548.183415] Node 0 DMA32 free:33360kB min:36200kB low:45248kB high:54296kB active_anon:56252kB inactive_anon:36748kB active_file:28kB inactive_file:36kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7264kB pagetables:2444kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1548.183434] lowmem_reserve[]: 0 0 0 0 0 [ 1548.183452] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1548.183467] lowmem_reserve[]: 0 0 0 0 0 [ 1548.183486] Node 1 Normal free:27096kB min:53696kB low:67120kB high:80544kB active_anon:412kB inactive_anon:11664kB active_file:4kB inactive_file:4kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:96kB pagetables:148kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1548.183502] lowmem_reserve[]: 0 0 0 0 0 [ 1548.183520] Node 0 DMA: 5*4kB [ 1548.199737] 0 [ 1548.223690] (UME) [ 1548.224885] 0 [ 1548.257830] 4*8kB [ 1548.284787] 0 [ 1548.284795] Node 0 DMA: 5*4kB (UME) 4*8kB (UME) 4*16kB (UME) 4*32kB (UME) 5*64kB (UME) 4*128kB (UME) 3*256kB [ 1548.289403] (UME) [ 1548.319971] (UME) [ 1548.334318] 4*16kB [ 1548.335577] 2*512kB [ 1548.348854] (UME) [ 1548.350745] (ME) [ 1548.352608] 4*32kB [ 1548.354965] 4*1024kB [ 1548.357103] (UME) 5*64kB [ 1548.359240] (UME) 2*2048kB [ 1548.361596] (UME) 4*128kB (UME) 3*256kB (UME) 2*512kB (ME) 4*1024kB (UME) 2*2048kB [ 1548.364384] (UE) 0*4096kB [ 1548.367395] (UE) [ 1548.370358] = 11060kB [ 1548.370362] Node 0 DMA32: 1982*4kB (UME) 929*8kB (UME) [ 1548.381961] 0*4096kB [ 1548.383559] 241*16kB [ 1548.386039] = 11060kB [ 1548.391769] (UME) 79*32kB (UME) 173*64kB (UM) 1*128kB (U) 2*256kB (U) 0*512kB [ 1548.394192] Node 0 [ 1548.397155] 0*1024kB [ 1548.399738] DMA32: 1982*4kB (UME) 929*8kB [ 1548.407215] 0*2048kB [ 1548.410622] (UME) [ 1548.412553] 0*4096kB [ 1548.416767] 241*16kB [ 1548.419167] = 33456kB [ 1548.419172] Node 0 [ 1548.421369] (UME) [ 1548.423749] Normal: [ 1548.426249] 79*32kB [ 1548.432601] 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1548.439678] (UME) 173*64kB (UM) 1*128kB (U) 2*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 33456kB [ 1548.449873] Node 1 Normal: 22*4kB (UM) 12*8kB (UM) 10*16kB (UM) 14*32kB (UM) 321*64kB (U) 19*128kB (U) 5*256kB (U) 2*512kB (U) 1*1024kB (M) 0*2048kB 0*4096kB = 27096kB [ 1548.464628] Node 0 [ 1548.475467] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1548.481218] Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1548.487100] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1548.506658] Node 1 Normal: 22*4kB (UM) 12*8kB (UM) 10*16kB (UM) 14*32kB (UM) 321*64kB (U) 19*128kB (U) 5*256kB (U) 2*512kB (U) 1*1024kB (M) 0*2048kB 0*4096kB = 27096kB [ 1548.506985] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1548.523668] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1548.532823] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1548.542692] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1548.553871] 13108 total pagecache pages [ 1548.564341] 0 pages in swap cache [ 1548.567879] Swap cache stats: add 0, delete 0, find 0/0 [ 1548.572273] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1548.573495] Free swap = 0kB [ 1548.582383] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1548.585415] Total swap = 0kB [ 1548.585422] 2097051 pages RAM [ 1548.596990] 13108 total pagecache pages [ 1548.598113] 0 pages HighMem/MovableOnly [ 1548.606219] 0 pages in swap cache [ 1548.609136] 363849 pages reserved [ 1548.614437] Swap cache stats: add 0, delete 0, find 0/0 [ 1548.618578] 0 pages cma reserved [ 1548.622399] Free swap = 0kB [ 1548.629332] Total swap = 0kB [ 1548.632821] 2097051 pages RAM [ 1548.636093] 0 pages HighMem/MovableOnly [ 1548.640915] 363849 pages reserved [ 1548.644450] 0 pages cma reserved [ 1548.648094] Out of memory: Kill process 9593 (syz-executor.5) score 1005 or sacrifice child [ 1548.657728] Killed process 9596 (syz-executor.5) total-vm:93384kB, anon-rss:2196kB, file-rss:34820kB, shmem-rss:0kB [ 1548.704861] oom_reaper: reaped process 9596 (syz-executor.5), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1548.731787] systemd-rfkill invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1548.755308] systemd-rfkill cpuset=/ mems_allowed=0-1 [ 1548.817394] CPU: 0 PID: 9447 Comm: systemd-rfkill Not tainted 4.14.232-syzkaller #0 [ 1548.825417] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1548.835211] Call Trace: [ 1548.837815] dump_stack+0x1b2/0x281 [ 1548.841464] dump_header+0x178/0x82f [ 1548.845212] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1548.850349] ? ___ratelimit+0x2cd/0x530 [ 1548.854422] oom_kill_process.cold+0x10/0xa40 [ 1548.859198] out_of_memory+0xe3e/0x1190 [ 1548.863275] ? oom_killer_disable+0x1c0/0x1c0 [ 1548.867782] ? mutex_trylock+0x152/0x1a0 [ 1548.871958] __alloc_pages_nodemask+0x23e1/0x2720 [ 1548.877444] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1548.882626] alloc_pages_current+0x155/0x260 [ 1548.887336] filemap_fault+0x11a1/0x1ad0 [ 1548.891577] ext4_filemap_fault+0x84/0xb0 [ 1548.895932] __do_fault+0xfa/0x380 [ 1548.899475] __handle_mm_fault+0x2497/0x4620 [ 1548.903878] ? vm_insert_page+0x7c0/0x7c0 [ 1548.908128] ? compat_poll_select_copy_remaining+0x2c0/0x2c0 [ 1548.914086] ? ktime_get_ts64+0x261/0x3a0 [ 1548.918928] ? mark_held_locks+0xa6/0xf0 [ 1548.923303] handle_mm_fault+0x455/0x9c0 [ 1548.927452] __do_page_fault+0x549/0xad0 [ 1548.931505] ? spurious_fault+0x640/0x640 [ 1548.935872] ? do_page_fault+0x60/0x500 [ 1548.940126] ? page_fault+0x2f/0x50 [ 1548.943853] page_fault+0x45/0x50 [ 1548.947574] RIP: 6a656db0: (null) [ 1548.952084] RSP: 23057040:00007ffe6a656db8 EFLAGS: 0000000b [ 1548.958293] Mem-Info: [ 1548.971357] syz-executor.1: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1548.985821] syz-executor.5: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1548.998313] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 1548.998335] CPU: 0 PID: 9595 Comm: syz-executor.1 Not tainted 4.14.232-syzkaller #0 [ 1548.998341] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1548.998344] Call Trace: [ 1548.998363] dump_stack+0x1b2/0x281 [ 1548.998376] warn_alloc.cold+0x96/0x1cc [ 1548.998388] ? zone_watermark_ok_safe+0x220/0x220 [ 1548.998397] ? usleep_range+0x130/0x130 [ 1548.998408] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1549.013467] active_anon:13630 inactive_anon:12103 isolated_anon:0 [ 1549.013467] active_file:15 inactive_file:15 isolated_file:0 [ 1549.013467] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1549.013467] slab_reclaimable:15415 slab_unreclaimable:114582 [ 1549.013467] mapped:34817 shmem:13078 pagetables:647 bounce:0 [ 1549.013467] free:13920 free_pcp:42 free_cma:0 [ 1549.013647] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1549.024936] syz-executor.5 cpuset= [ 1549.027509] ? run_timer_softirq+0x5a0/0x5a0 [ 1549.031450] Node 0 active_anon:54108kB inactive_anon:36748kB active_file:56kB inactive_file:56kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:112440kB dirty:0kB writeback:0kB shmem:40580kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1549.035363] __alloc_pages_nodemask+0x2127/0x2720 [ 1549.040483] / [ 1549.044420] ? lock_acquire+0x170/0x3f0 [ 1549.049696] Node 1 active_anon:412kB inactive_anon:11664kB active_file:4kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:26828kB dirty:0kB writeback:0kB shmem:11732kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1549.085182] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1549.085193] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1549.085208] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1549.085221] ? retint_kernel+0x2d/0x2d [ 1549.090415] mems_allowed=0-1 [ 1549.094715] alloc_pages_current+0x155/0x260 [ 1549.139638] Node 0 [ 1549.140598] ion_page_pool_alloc+0x118/0x1b0 [ 1549.189661] DMA free:10976kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:16kB inactive_file:28kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1549.190489] ion_system_heap_allocate+0x133/0x8c0 [ 1549.194891] lowmem_reserve[]: [ 1549.197159] ? _raw_spin_unlock+0x29/0x40 [ 1549.219625] 0 [ 1549.228190] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1549.239615] 2717 [ 1549.240600] ? ion_system_contig_heap_create+0x130/0x130 [ 1549.242551] 2718 [ 1549.247687] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1549.259634] 2718 2718 [ 1549.262345] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1549.262361] ion_alloc+0x27a/0x810 [ 1549.269849] ? ion_dma_buf_release+0x40/0x40 [ 1549.269861] ? __might_fault+0x177/0x1b0 [ 1549.269873] ion_ioctl+0xea/0x1f0 [ 1549.285825] ? ion_query_heaps+0x360/0x360 [ 1549.289613] Node 0 DMA32 free:17864kB min:36200kB low:45248kB high:54296kB active_anon:54108kB inactive_anon:36748kB active_file:40kB inactive_file:28kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7264kB pagetables:2440kB bounce:0kB free_pcp:48kB local_pcp:48kB free_cma:0kB [ 1549.290058] ? ion_query_heaps+0x360/0x360 [ 1549.290070] do_vfs_ioctl+0x75a/0xff0 [ 1549.327837] ? ioctl_preallocate+0x1a0/0x1a0 [ 1549.332339] ? lock_downgrade+0x740/0x740 [ 1549.336688] ? __fget+0x225/0x360 [ 1549.340435] ? do_vfs_ioctl+0xff0/0xff0 [ 1549.344398] ? security_file_ioctl+0x83/0xb0 [ 1549.348976] SyS_ioctl+0x7f/0xb0 [ 1549.349606] lowmem_reserve[]: [ 1549.352434] ? do_vfs_ioctl+0xff0/0xff0 [ 1549.352437] 0 0 [ 1549.355533] do_syscall_64+0x1d5/0x640 [ 1549.359487] 0 [ 1549.361466] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1549.361475] RIP: 0033:0x4665f9 [ 1549.361482] RSP: 002b:00007f22b5267188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1549.379628] 0 [ 1549.383508] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1549.383514] 0 [ 1549.385294] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000008 [ 1549.385301] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1549.409320] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1549.416757] R13: 00007ffea96cbc0f R14: 00007f22b5267300 R15: 0000000000022000 [ 1549.432735] Mem-Info: [ 1549.435286] active_anon:13630 inactive_anon:12103 isolated_anon:0 [ 1549.435286] active_file:15 inactive_file:15 isolated_file:0 [ 1549.435286] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1549.435286] slab_reclaimable:15415 slab_unreclaimable:114582 [ 1549.435286] mapped:34817 shmem:13078 pagetables:647 bounce:0 [ 1549.435286] free:13889 free_pcp:72 free_cma:0 [ 1549.447669] CPU: 1 PID: 9596 Comm: syz-executor.5 Not tainted 4.14.232-syzkaller #0 [ 1549.476397] Node 0 active_anon:54108kB inactive_anon:36748kB active_file:56kB inactive_file:56kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:112440kB dirty:0kB writeback:0kB shmem:40580kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1549.477448] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1549.514867] Node 1 active_anon:412kB inactive_anon:11664kB active_file:4kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:26828kB dirty:0kB writeback:0kB shmem:11732kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1549.517311] Call Trace: [ 1549.548539] dump_stack+0x1b2/0x281 [ 1549.552257] warn_alloc.cold+0x96/0x1cc [ 1549.552780] Node 0 DMA free:10976kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:40kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1549.556333] ? zone_watermark_ok_safe+0x220/0x220 [ 1549.556344] ? usleep_range+0x130/0x130 [ 1549.590246] Node 0 [ 1549.592225] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1549.592243] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1549.594561] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1549.605395] lowmem_reserve[]: [ 1549.625884] ? run_timer_softirq+0x5a0/0x5a0 [ 1549.625902] __alloc_pages_nodemask+0x2127/0x2720 [ 1549.625917] ? lock_acquire+0x170/0x3f0 [ 1549.625935] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1549.625944] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1549.625961] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1549.625985] alloc_pages_current+0x155/0x260 [ 1549.625997] ion_page_pool_alloc+0x118/0x1b0 [ 1549.626007] ion_system_heap_allocate+0x133/0x8c0 [ 1549.637937] lowmem_reserve[]: [ 1549.638879] ? ion_alloc+0x187/0x810 [ 1549.643927] 0 [ 1549.648108] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1549.660093] 0 [ 1549.663426] ? ion_system_contig_heap_create+0x130/0x130 [ 1549.667813] 0 [ 1549.672313] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1549.672324] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1549.672333] ion_alloc+0x204/0x810 [ 1549.672347] ? ion_dma_buf_release+0x40/0x40 [ 1549.672358] ? __might_fault+0x177/0x1b0 [ 1549.672369] ion_ioctl+0xea/0x1f0 [ 1549.672379] ? ion_query_heaps+0x360/0x360 [ 1549.672392] ? ion_query_heaps+0x360/0x360 [ 1549.684000] 0 [ 1549.684137] do_vfs_ioctl+0x75a/0xff0 [ 1549.685926] 2717 [ 1549.691938] ? ioctl_preallocate+0x1a0/0x1a0 [ 1549.691949] ? lock_downgrade+0x740/0x740 [ 1549.691960] ? __fget+0x225/0x360 [ 1549.691968] ? do_vfs_ioctl+0xff0/0xff0 [ 1549.691980] ? security_file_ioctl+0x83/0xb0 [ 1549.691988] SyS_ioctl+0x7f/0xb0 [ 1549.691995] ? do_vfs_ioctl+0xff0/0xff0 [ 1549.692005] do_syscall_64+0x1d5/0x640 [ 1549.692020] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1549.695721] 2718 [ 1549.700572] RIP: 0033:0x4665f9 [ 1549.700578] RSP: 002b:00007f551e7c7188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1549.700586] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1549.700591] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000008 [ 1549.700595] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1549.700599] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1549.700604] R13: 00007ffd0570a9af R14: 00007f551e7c7300 R15: 0000000000022000 [ 1549.781863] 0 [ 1549.782446] 2718 2718 [ 1549.849754] Node 0 DMA32 free:65220kB min:36200kB low:45248kB high:54296kB active_anon:54108kB inactive_anon:36748kB active_file:340kB inactive_file:6228kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7424kB pagetables:2440kB bounce:0kB free_pcp:248kB local_pcp:116kB free_cma:0kB [ 1549.879600] 0 [ 1549.894054] lowmem_reserve[]: 0 0 0 0 0 [ 1549.896186] Node 1 Normal free:26840kB min:53696kB low:67120kB high:80544kB active_anon:412kB inactive_anon:11664kB active_file:4kB inactive_file:4kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:96kB pagetables:148kB bounce:0kB free_pcp:120kB local_pcp:120kB free_cma:0kB [ 1549.899507] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1549.987635] systemd[1]: Starting Journal Service... [ 1550.025756] lowmem_reserve[]: 0 0 0 0 0 [ 1550.030122] Node 1 Normal free:26840kB min:53696kB low:67120kB high:80544kB active_anon:412kB inactive_anon:11664kB active_file:4kB inactive_file:4kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:96kB pagetables:148kB bounce:0kB free_pcp:144kB local_pcp:24kB free_cma:0kB [ 1550.063326] lowmem_reserve[]: 0 0 0 0 0 [ 1550.063984] lowmem_reserve[]: 0 0 0 0 0 [ 1550.067560] Node 0 [ 1550.072875] Node 0 [ 1550.078400] DMA: [ 1550.078452] DMA: 2*4kB (ME) 3*8kB (UME) 2*16kB (ME) 3*32kB (UME) 5*64kB (UME) 4*128kB (UME) 3*256kB (UME) 2*512kB (ME) 4*1024kB (UME) 2*2048kB (UE) 0*4096kB = 10976kB [ 1550.099182] 2*4kB (ME) 3*8kB (UME) 2*16kB (ME) 3*32kB (UME) 5*64kB (UME) 4*128kB (UME) 3*256kB (UME) 2*512kB (ME) 4*1024kB (UME) 2*2048kB (UE) 0*4096kB = 10976kB [ 1550.130497] Node 0 DMA32: 1275*4kB (UME) 892*8kB (UE) 208*16kB (UE) 80*32kB (UME) 337*64kB (UM) 87*128kB (U) 19*256kB (UM) 4*512kB (UM) 166*1024kB (UM) 14*2048kB (U) 0*4096kB = 256396kB [ 1550.148812] Node 0 DMA32: 1274*4kB (UE) 893*8kB (UME) 208*16kB (UE) 80*32kB (UME) 337*64kB (UM) 88*128kB (UM) 18*256kB (U) 4*512kB (UM) 166*1024kB (UM) 14*2048kB (U) 0*4096kB = 256272kB [ 1550.167509] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1550.180730] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1550.198945] Node 1 Normal: 10*4kB (M) 2*8kB (M) 6*16kB (UM) 12*32kB (UM) 321*64kB (U) 19*128kB (U) 5*256kB (U) 2*512kB (U) 212*1024kB (UM) 0*2048kB 0*4096kB = 242904kB [ 1550.215835] Node 1 Normal: 10*4kB (M) 2*8kB (M) 6*16kB (UM) 12*32kB (UM) 321*64kB (U) 19*128kB (U) 5*256kB (U) 2*512kB (U) 212*1024kB (UM) 0*2048kB 0*4096kB = 242904kB [ 1550.233018] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1550.247496] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1550.257019] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1550.266180] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1550.275581] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1550.294201] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1550.303687] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1550.315085] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1550.325002] 17840 total pagecache pages [ 1550.330869] 18099 total pagecache pages [ 1550.335105] 0 pages in swap cache [ 1550.345929] 0 pages in swap cache [ 1550.350188] Swap cache stats: add 0, delete 0, find 0/0 [ 1550.356074] Swap cache stats: add 0, delete 0, find 0/0 [ 1550.368425] Free swap = 0kB [ 1550.372096] Total swap = 0kB [ 1550.375216] 2097051 pages RAM [ 1550.378755] Free swap = 0kB [ 1550.382929] Total swap = 0kB [ 1550.386553] 2097051 pages RAM [ 1550.388727] systemd-journald[9719]: File /run/log/journal/04d8c135ee6b410280ba31a58c89679d/system.journal corrupted or uncleanly shut down, renaming and replacing. [ 1550.392181] 0 pages HighMem/MovableOnly [ 1550.413276] 0 pages HighMem/MovableOnly [ 1550.417488] 363849 pages reserved [ 1550.421396] 0 pages cma reserved [ 1550.425143] Out of memory (oom_kill_allocating_task): Kill process 9447 (systemd-rfkill) score 0 or sacrifice child [ 1550.437250] 363849 pages reserved [ 1550.441207] 0 pages cma reserved [ 1550.453321] Killed process 9447 (systemd-rfkill) total-vm:37800kB, anon-rss:376kB, file-rss:0kB, shmem-rss:0kB [ 1550.489624] oom_reaper: reaped process 9447 (systemd-rfkill), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1550.514219] systemd[1]: systemd-rfkill.service: Main process exited, code=killed, status=9/KILL [ 1550.554517] systemd[1]: systemd-rfkill.service: Unit entered failed state. [ 1550.565560] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1550.587380] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1550.612172] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1550.619162] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1550.629925] systemd[1]: systemd-rfkill.service: Failed with result 'signal'. [ 1550.680014] systemd[1]: Starting Load/Save RF Kill Switch Status... [ 1550.696024] device bridge_slave_1 left promiscuous mode [ 1550.704466] bridge0: port 2(bridge_slave_1) entered disabled state [ 1550.739683] device bridge_slave_0 left promiscuous mode [ 1550.745480] bridge0: port 1(bridge_slave_0) entered disabled state [ 1550.765060] device veth1_macvtap left promiscuous mode [ 1550.771169] device veth0_macvtap left promiscuous mode [ 1550.776790] device veth1_vlan left promiscuous mode [ 1550.782280] device veth0_vlan left promiscuous mode [ 1550.810591] systemd[1]: Started Load/Save RF Kill Switch Status. [ 1550.933931] device hsr_slave_1 left promiscuous mode [ 1550.969751] device hsr_slave_0 left promiscuous mode [ 1551.000137] team0 (unregistering): Port device team_slave_1 removed [ 1551.021112] team0 (unregistering): Port device team_slave_0 removed [ 1551.041754] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 1551.066508] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 1551.109027] bond0 (unregistering): Released all slaves [ 1551.343000] systemd[1]: Started Journal Service. [ 1552.584652] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1552.593986] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1552.604573] device bridge_slave_1 left promiscuous mode [ 1552.612281] bridge0: port 2(bridge_slave_1) entered disabled state [ 1552.623232] device bridge_slave_0 left promiscuous mode [ 1552.628825] bridge0: port 1(bridge_slave_0) entered disabled state [ 1552.748714] device hsr_slave_1 left promiscuous mode [ 1552.766908] device hsr_slave_0 left promiscuous mode [ 1552.786145] team0 (unregistering): Port device team_slave_1 removed [ 1552.800838] team0 (unregistering): Port device team_slave_0 removed [ 1552.812627] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 1552.823884] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 1552.858235] bond0 (unregistering): Released all slaves [ 1553.427649] IPVS: ftp: loaded support on port[0] = 21 [ 1553.520442] chnl_net:caif_netlink_parms(): no params data found [ 1553.576456] bridge0: port 1(bridge_slave_0) entered blocking state [ 1553.583882] bridge0: port 1(bridge_slave_0) entered disabled state [ 1553.591812] device bridge_slave_0 entered promiscuous mode [ 1553.599582] bridge0: port 2(bridge_slave_1) entered blocking state [ 1553.606295] bridge0: port 2(bridge_slave_1) entered disabled state [ 1553.613677] device bridge_slave_1 entered promiscuous mode [ 1553.633252] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 1553.642341] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1553.661518] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 1553.668820] team0: Port device team_slave_0 added [ 1553.674907] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 1553.682535] team0: Port device team_slave_1 added [ 1553.700953] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1553.708448] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1553.735931] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1553.747374] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1553.754697] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1553.781335] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1553.793125] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 1553.801333] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 1553.824105] device hsr_slave_0 entered promiscuous mode [ 1553.831075] device hsr_slave_1 entered promiscuous mode [ 1553.837703] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 1553.845263] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 1553.918673] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 1553.948953] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1553.958561] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 1553.968782] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 1553.978049] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1553.986542] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1553.996921] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 1554.003876] 8021q: adding VLAN 0 to HW filter on device team0 [ 1554.013937] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 1554.022173] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1554.031270] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1554.038979] bridge0: port 1(bridge_slave_0) entered blocking state [ 1554.045595] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1554.053186] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1554.063284] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 1554.071192] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1554.080202] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1554.088320] bridge0: port 2(bridge_slave_1) entered blocking state [ 1554.096533] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1554.106198] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 1554.117089] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 1554.125461] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1554.133810] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1554.143957] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 1554.154037] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1554.162965] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1554.171799] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1554.182214] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 1554.190226] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1554.198926] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1554.211608] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 1554.218539] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1554.226947] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1554.237896] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 1554.246094] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1554.254472] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1554.265417] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 1554.272958] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1554.285145] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 1554.293589] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 1554.300442] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1554.307714] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1554.319141] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1554.374168] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 1554.386492] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 1554.394369] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1554.403203] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1554.430181] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 1554.437949] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 1554.445303] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 1554.455136] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 1554.464149] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1554.472255] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1554.480603] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1554.487991] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1554.497232] device veth0_vlan entered promiscuous mode [ 1554.507100] device veth1_vlan entered promiscuous mode [ 1554.513950] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 1554.523465] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 1554.536815] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 1554.547638] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1554.555767] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1554.563532] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1554.573628] device veth0_macvtap entered promiscuous mode [ 1554.580693] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 1554.592130] device veth1_macvtap entered promiscuous mode [ 1554.602600] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 1554.613465] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 1554.623847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1554.635619] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1554.645711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1554.658178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1554.669949] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1554.681024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1554.693587] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1554.705936] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1554.716731] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 1554.724454] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1554.732377] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1554.740764] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1554.749507] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1554.759785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1554.771263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1554.782073] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1554.794607] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1554.799432] Bluetooth: hci1 command 0x0409 tx timeout [ 1554.806411] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1554.822531] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1554.832721] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1554.843234] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1554.854984] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 1554.862643] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1554.870484] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1554.879227] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 09:39:18 executing program 5: socket(0x11, 0x2, 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000004980), 0x0, 0x0) getsockopt$X25_QBITINCL(r0, 0x106, 0x1, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x4, 0x7, 0x7, 0x6, 0xa, @remote, @private2={0xfc, 0x2, '\x00', 0x1}, 0x700, 0x20, 0x9, 0x5f3b}}) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000004980), 0x0, 0x0) getsockopt$X25_QBITINCL(r1, 0x106, 0x1, 0x0, 0x0) r2 = socket$vsock_dgram(0x28, 0x2, 0x0) ioctl$sock_SIOCDELRT(r2, 0x890c, &(0x7f0000000180)={0x0, @llc={0x1a, 0x33a, 0x9, 0x6, 0x27, 0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, @vsock={0x28, 0x0, 0x2710}, @isdn={0x22, 0xcb, 0x81, 0x2, 0x69}, 0xfff, 0x0, 0x0, 0x0, 0x81, &(0x7f0000000140)='dummy0\x00', 0x80000000, 0x101, 0x8001}) openat$zero(0xffffffffffffff9c, &(0x7f00000000c0), 0x800, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000100)={0x80000004, 0x7}) getsockname(r1, &(0x7f0000002040)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f00000020c0)=0x80) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000240)={0x2, 0x80, 0x1, 0xff, 0x4, 0x41, 0x0, 0xfffffffffffffe00, 0x2000, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0xdc, 0x2, @perf_bp={&(0x7f0000000200), 0x5}, 0x4004, 0x7fffffff, 0x2, 0x4, 0x6, 0x3e7, 0x8001, 0x0, 0x3, 0x0, 0x8001}) socket$can_bcm(0x1d, 0x2, 0x2) 09:39:18 executing program 2: r0 = socket(0x0, 0x1, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, 0x0, 0x300, 0x70bd2b, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x20040801) 09:39:18 executing program 4: r0 = socket(0x28, 0x1, 0x0) bind$x25(r0, 0x0, 0x0) 09:39:18 executing program 0: socket(0x11, 0x2, 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000004980), 0x0, 0x0) getsockopt$X25_QBITINCL(r0, 0x106, 0x1, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x4, 0x7, 0x7, 0x6, 0xa, @remote, @private2={0xfc, 0x2, '\x00', 0x1}, 0x700, 0x20, 0x9, 0x5f3b}}) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000004980), 0x0, 0x0) getsockopt$X25_QBITINCL(r1, 0x106, 0x1, 0x0, 0x0) socket$vsock_dgram(0x28, 0x2, 0x0) r2 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000100)={0x80000004, 0x7}) 09:39:18 executing program 1: socket(0x11, 0x2, 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000004980), 0x0, 0x0) getsockopt$X25_QBITINCL(r0, 0x106, 0x1, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x4, 0x7, 0x7, 0x6, 0xa, @remote, @private2={0xfc, 0x2, '\x00', 0x1}, 0x700, 0x20, 0x9, 0x5f3b}}) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000004980), 0x0, 0x0) getsockopt$X25_QBITINCL(r1, 0x106, 0x1, 0x0, 0x0) r2 = socket$vsock_dgram(0x28, 0x2, 0x0) ioctl$sock_SIOCDELRT(r2, 0x890c, &(0x7f0000000180)={0x0, @llc={0x1a, 0x33a, 0x9, 0x6, 0x27, 0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, @vsock={0x28, 0x0, 0x2710}, @isdn={0x22, 0xcb, 0x81, 0x2, 0x69}, 0xfff, 0x0, 0x0, 0x0, 0x81, &(0x7f0000000140)='dummy0\x00', 0x80000000, 0x101, 0x8001}) openat$zero(0xffffffffffffff9c, &(0x7f00000000c0), 0x800, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000100)={0x80000004, 0x7}) getsockname(r1, &(0x7f0000002040)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f00000020c0)=0x80) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000240)={0x2, 0x80, 0x1, 0xff, 0x4, 0x41, 0x0, 0xfffffffffffffe00, 0x2000, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0xdc, 0x2, @perf_bp={&(0x7f0000000200), 0x5}, 0x4004, 0x7fffffff, 0x2, 0x4, 0x6, 0x3e7, 0x8001, 0x0, 0x3, 0x0, 0x8001}) 09:39:18 executing program 3: socket(0x11, 0x2, 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000004980), 0x0, 0x0) getsockopt$X25_QBITINCL(r0, 0x106, 0x1, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x4, 0x7, 0x7, 0x6, 0xa, @remote, @private2={0xfc, 0x2, '\x00', 0x1}, 0x700, 0x20, 0x9, 0x5f3b}}) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000004980), 0x0, 0x0) getsockopt$X25_QBITINCL(r1, 0x106, 0x1, 0x0, 0x0) r2 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000100)={0x80000004, 0x7}) 09:39:18 executing program 2: r0 = socket(0x28, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, 0x0, 0x300, 0x70bd2b, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x20040801) 09:39:18 executing program 2: r0 = socket(0x28, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, 0x0, 0x300, 0x70bd2b, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x20040801) 09:39:18 executing program 2: r0 = socket(0x28, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, 0x0, 0x300, 0x70bd2b, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x20040801) 09:39:18 executing program 2: socket(0x28, 0x1, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, 0x0, 0x300, 0x70bd2b, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x20040801) 09:39:18 executing program 2: socket(0x28, 0x1, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, 0x0, 0x300, 0x70bd2b, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x20040801) 09:39:19 executing program 2: socket(0x28, 0x1, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, 0x0, 0x300, 0x70bd2b, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x20040801) [ 1556.013133] syz-executor.0: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1556.027271] syz-executor.1: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1556.033848] syz-executor.3: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1556.048677] syz-executor.1 cpuset= [ 1556.063496] syz-executor.5: [ 1556.065276] syz-executor.0 cpuset= [ 1556.067157] page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1556.067173] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 1556.078692] / [ 1556.090395] / [ 1556.094385] syz-executor.3 cpuset= [ 1556.095794] mems_allowed=0-1 [ 1556.098635] / [ 1556.100768] CPU: 1 PID: 9972 Comm: syz-executor.1 Not tainted 4.14.232-syzkaller #0 [ 1556.113524] mems_allowed=0-1 [ 1556.114484] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1556.120086] mems_allowed=0-1 [ 1556.128167] Call Trace: [ 1556.128188] dump_stack+0x1b2/0x281 [ 1556.128203] warn_alloc.cold+0x96/0x1cc [ 1556.128215] ? zone_watermark_ok_safe+0x220/0x220 [ 1556.128236] __alloc_pages_nodemask+0x2127/0x2720 [ 1556.153212] ? __schedule+0x893/0x1de0 [ 1556.157226] ? lock_acquire+0x170/0x3f0 [ 1556.161327] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1556.166531] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1556.172169] ? __mutex_unlock_slowpath+0x75/0x770 [ 1556.177128] alloc_pages_current+0x155/0x260 [ 1556.182098] ion_page_pool_alloc+0x118/0x1b0 [ 1556.187290] ion_system_heap_allocate+0x133/0x8c0 [ 1556.192232] ? ion_alloc+0x187/0x810 [ 1556.195955] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1556.201669] ? ion_system_contig_heap_create+0x130/0x130 [ 1556.207484] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1556.212694] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1556.218433] ion_alloc+0x204/0x810 [ 1556.222592] ? ion_dma_buf_release+0x40/0x40 [ 1556.228235] ? __might_fault+0x177/0x1b0 [ 1556.232596] ion_ioctl+0xea/0x1f0 [ 1556.236508] ? ion_query_heaps+0x360/0x360 [ 1556.240742] ? ion_query_heaps+0x360/0x360 [ 1556.245370] do_vfs_ioctl+0x75a/0xff0 [ 1556.249348] ? ioctl_preallocate+0x1a0/0x1a0 [ 1556.253939] ? lock_downgrade+0x740/0x740 [ 1556.258576] ? __fget+0x225/0x360 [ 1556.262251] ? do_vfs_ioctl+0xff0/0xff0 [ 1556.266692] ? security_file_ioctl+0x83/0xb0 [ 1556.271522] SyS_ioctl+0x7f/0xb0 [ 1556.274892] ? do_vfs_ioctl+0xff0/0xff0 [ 1556.279151] do_syscall_64+0x1d5/0x640 [ 1556.283068] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1556.288346] RIP: 0033:0x4665f9 [ 1556.291527] RSP: 002b:00007f22b5267188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1556.299298] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1556.307009] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000008 [ 1556.314783] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1556.322599] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1556.331518] R13: 00007ffea96cbc0f R14: 00007f22b5267300 R15: 0000000000022000 [ 1556.350295] CPU: 0 PID: 9974 Comm: syz-executor.0 Not tainted 4.14.232-syzkaller #0 [ 1556.359068] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1556.369303] Call Trace: [ 1556.372044] dump_stack+0x1b2/0x281 [ 1556.375853] warn_alloc.cold+0x96/0x1cc [ 1556.380185] ? zone_watermark_ok_safe+0x220/0x220 [ 1556.385684] __alloc_pages_nodemask+0x2127/0x2720 [ 1556.390965] ? lock_acquire+0x170/0x3f0 [ 1556.395140] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1556.400064] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1556.405955] ? __mutex_unlock_slowpath+0x75/0x770 [ 1556.411139] alloc_pages_current+0x155/0x260 [ 1556.415909] ion_page_pool_alloc+0x118/0x1b0 [ 1556.421075] ion_system_heap_allocate+0x133/0x8c0 [ 1556.427211] ? ion_alloc+0x187/0x810 [ 1556.430961] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1556.436662] ? ion_system_contig_heap_create+0x130/0x130 [ 1556.442591] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1556.448052] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1556.453564] ion_alloc+0x204/0x810 [ 1556.457191] ? ion_dma_buf_release+0x40/0x40 [ 1556.461872] ? __might_fault+0x177/0x1b0 [ 1556.466185] ion_ioctl+0xea/0x1f0 [ 1556.469628] ? ion_query_heaps+0x360/0x360 [ 1556.473942] ? ion_query_heaps+0x360/0x360 [ 1556.478195] do_vfs_ioctl+0x75a/0xff0 [ 1556.482423] ? ioctl_preallocate+0x1a0/0x1a0 [ 1556.489229] ? lock_downgrade+0x740/0x740 [ 1556.494022] ? __fget+0x225/0x360 [ 1556.497844] ? do_vfs_ioctl+0xff0/0xff0 [ 1556.501929] ? security_file_ioctl+0x83/0xb0 [ 1556.506709] SyS_ioctl+0x7f/0xb0 [ 1556.510436] ? do_vfs_ioctl+0xff0/0xff0 [ 1556.514598] do_syscall_64+0x1d5/0x640 [ 1556.519947] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1556.525509] RIP: 0033:0x4665f9 [ 1556.529169] RSP: 002b:00007fe4a6925188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1556.537267] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1556.545089] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000007 [ 1556.552549] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1556.560288] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1556.568260] R13: 00007ffe5881209f R14: 00007fe4a6925300 R15: 0000000000022000 [ 1556.577030] CPU: 1 PID: 9971 Comm: syz-executor.5 Not tainted 4.14.232-syzkaller #0 [ 1556.585219] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1556.595237] Call Trace: [ 1556.598387] dump_stack+0x1b2/0x281 [ 1556.602292] warn_alloc.cold+0x96/0x1cc [ 1556.606540] ? zone_watermark_ok_safe+0x220/0x220 [ 1556.611538] __alloc_pages_nodemask+0x2127/0x2720 [ 1556.617497] ? lock_acquire+0x170/0x3f0 [ 1556.622476] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1556.628553] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1556.634942] ? __mutex_unlock_slowpath+0x75/0x770 [ 1556.641009] alloc_pages_current+0x155/0x260 [ 1556.647261] ion_page_pool_alloc+0x118/0x1b0 [ 1556.653528] ion_system_heap_allocate+0x133/0x8c0 [ 1556.660084] ? ion_alloc+0x187/0x810 [ 1556.664181] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1556.670076] ? ion_system_contig_heap_create+0x130/0x130 [ 1556.676528] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1556.683334] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1556.688573] ion_alloc+0x204/0x810 [ 1556.694614] ? ion_dma_buf_release+0x40/0x40 [ 1556.699528] ? __might_fault+0x177/0x1b0 [ 1556.704119] ion_ioctl+0xea/0x1f0 [ 1556.707581] ? ion_query_heaps+0x360/0x360 [ 1556.712487] ? ion_query_heaps+0x360/0x360 [ 1556.716986] do_vfs_ioctl+0x75a/0xff0 [ 1556.721091] ? ioctl_preallocate+0x1a0/0x1a0 [ 1556.725605] ? lock_downgrade+0x740/0x740 [ 1556.738290] ? __fget+0x225/0x360 [ 1556.741867] ? do_vfs_ioctl+0xff0/0xff0 [ 1556.746315] ? security_file_ioctl+0x83/0xb0 [ 1556.750826] SyS_ioctl+0x7f/0xb0 [ 1556.754224] ? do_vfs_ioctl+0xff0/0xff0 [ 1556.758418] do_syscall_64+0x1d5/0x640 [ 1556.762414] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1556.767821] RIP: 0033:0x4665f9 [ 1556.771460] RSP: 002b:00007f551e7c7188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1556.779295] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1556.787283] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000008 [ 1556.797417] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1556.805858] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1556.814220] R13: 00007ffd0570a9af R14: 00007f551e7c7300 R15: 0000000000022000 [ 1556.830581] CPU: 0 PID: 9975 Comm: syz-executor.3 Not tainted 4.14.232-syzkaller #0 [ 1556.839876] warn_alloc_show_mem: 1 callbacks suppressed [ 1556.839880] Mem-Info: [ 1556.840435] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1556.840439] Call Trace: [ 1556.840458] dump_stack+0x1b2/0x281 [ 1556.840474] warn_alloc.cold+0x96/0x1cc [ 1556.846837] active_anon:14339 inactive_anon:14134 isolated_anon:48 [ 1556.846837] active_file:1869 inactive_file:5432 isolated_file:48 [ 1556.846837] unevictable:0 dirty:99 writeback:0 unstable:0 [ 1556.846837] slab_reclaimable:15020 slab_unreclaimable:112854 [ 1556.846837] mapped:57446 shmem:15122 pagetables:770 bounce:0 [ 1556.846837] free:139147 free_pcp:365 free_cma:0 [ 1556.849159] ? zone_watermark_ok_safe+0x220/0x220 [ 1556.849182] __alloc_pages_nodemask+0x2127/0x2720 [ 1556.849198] ? lock_acquire+0x170/0x3f0 [ 1556.849212] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1556.849229] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1556.861046] Node 0 active_anon:57268kB inactive_anon:44876kB active_file:7468kB inactive_file:21560kB unevictable:0kB isolated(anon):48kB isolated(file):192kB mapped:202956kB dirty:388kB writeback:0kB shmem:48760kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1556.863262] ? __mutex_unlock_slowpath+0x75/0x770 [ 1556.863279] alloc_pages_current+0x155/0x260 [ 1556.863292] ion_page_pool_alloc+0x118/0x1b0 [ 1556.863303] ion_system_heap_allocate+0x133/0x8c0 [ 1556.867291] Node 1 active_anon:88kB inactive_anon:11660kB active_file:8kB inactive_file:168kB unevictable:0kB isolated(anon):144kB isolated(file):0kB mapped:26828kB dirty:8kB writeback:0kB shmem:11728kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1556.871352] ? ion_alloc+0x187/0x810 [ 1556.871363] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1556.871373] ? ion_system_contig_heap_create+0x130/0x130 [ 1556.871383] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1556.871394] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1556.871408] ion_alloc+0x204/0x810 [ 1556.871420] ? ion_dma_buf_release+0x40/0x40 [ 1556.871432] ? __might_fault+0x177/0x1b0 [ 1556.871453] ion_ioctl+0xea/0x1f0 [ 1556.911953] Node 0 [ 1556.916069] ? ion_query_heaps+0x360/0x360 [ 1556.916081] ? ion_query_heaps+0x360/0x360 [ 1556.916094] do_vfs_ioctl+0x75a/0xff0 [ 1556.921713] DMA free:11136kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:32kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1556.925624] ? ioctl_preallocate+0x1a0/0x1a0 [ 1556.925635] ? lock_downgrade+0x740/0x740 [ 1556.925650] ? __fget+0x225/0x360 [ 1556.932323] lowmem_reserve[]: [ 1556.937933] ? do_vfs_ioctl+0xff0/0xff0 [ 1556.937950] ? security_file_ioctl+0x83/0xb0 [ 1556.937960] SyS_ioctl+0x7f/0xb0 [ 1556.937968] ? do_vfs_ioctl+0xff0/0xff0 [ 1556.937979] do_syscall_64+0x1d5/0x640 [ 1556.937993] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1556.968379] 0 [ 1556.972989] RIP: 0033:0x4665f9 [ 1556.972994] RSP: 002b:00007fd59d707188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1556.973003] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1556.973008] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000006 [ 1556.973013] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1556.973018] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1556.973023] R13: 00007ffcfd15ebff R14: 00007fd59d707300 R15: 0000000000022000 [ 1557.197631] Bluetooth: hci1 command 0x041b tx timeout [ 1557.205748] 2717 2718 2718 2718 [ 1557.209942] Node 0 DMA32 free:204572kB min:36200kB low:45248kB high:54296kB active_anon:57336kB inactive_anon:44876kB active_file:7436kB inactive_file:21600kB unevictable:0kB writepending:436kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7424kB pagetables:3108kB bounce:0kB free_pcp:248kB local_pcp:120kB free_cma:0kB [ 1557.241363] lowmem_reserve[]: 0 0 0 0 0 [ 1557.246013] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1557.274075] lowmem_reserve[]: 0 0 0 0 0 [ 1557.283066] Node 1 Normal free:202248kB min:53696kB low:67120kB high:80544kB active_anon:88kB inactive_anon:11660kB active_file:8kB inactive_file:168kB unevictable:0kB writepending:8kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:96kB pagetables:148kB bounce:0kB free_pcp:696kB local_pcp:0kB free_cma:0kB [ 1557.333002] lowmem_reserve[]: 0 0 0 0 0 [ 1557.337456] Node 0 DMA: 14*4kB (UME) 12*8kB (UME) 8*16kB (UME) 5*32kB (UME) 2*64kB (ME) 7*128kB (UME) 6*256kB (UME) 4*512kB (UME) 2*1024kB (ME) 2*2048kB (UE) 0*4096kB = 11192kB [ 1557.376557] Node 0 DMA32: 1550*4kB (UE) 627*8kB (ME) 144*16kB (UME) 750*32kB (UME) 116*64kB (UM) 2*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 45200kB [ 1557.404468] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1557.420846] Node 1 Normal: 1*4kB (M) 2*8kB (UM) 3272*16kB (UM) 3150*32kB (UM) 22*64kB (UM) 3*128kB (UM) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 154964kB [ 1557.458778] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1557.477456] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1557.499152] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1557.508387] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1557.526605] 22010 total pagecache pages [ 1557.548252] 0 pages in swap cache [ 1557.552016] Swap cache stats: add 0, delete 0, find 0/0 [ 1557.557472] Free swap = 0kB [ 1557.575009] Total swap = 0kB [ 1557.587490] 2097051 pages RAM [ 1557.594773] 0 pages HighMem/MovableOnly [ 1557.598904] 363849 pages reserved [ 1557.611363] 0 pages cma reserved [ 1557.957952] systemd-journal invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1558.071806] systemd-journal cpuset=/ mems_allowed=0-1 [ 1558.077253] CPU: 1 PID: 9719 Comm: systemd-journal Not tainted 4.14.232-syzkaller #0 [ 1558.085992] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1558.095835] Call Trace: [ 1558.098564] dump_stack+0x1b2/0x281 [ 1558.102200] dump_header+0x178/0x82f [ 1558.106007] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1558.111350] ? ___ratelimit+0x2cd/0x530 [ 1558.115424] oom_kill_process.cold+0x10/0xa40 [ 1558.120521] out_of_memory+0xe3e/0x1190 [ 1558.125118] ? oom_killer_disable+0x1c0/0x1c0 [ 1558.129839] ? mutex_trylock+0x152/0x1a0 [ 1558.134253] __alloc_pages_nodemask+0x23e1/0x2720 [ 1558.139204] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1558.144252] alloc_pages_current+0x155/0x260 [ 1558.149233] filemap_fault+0x11a1/0x1ad0 [ 1558.153767] ext4_filemap_fault+0x84/0xb0 [ 1558.158020] __do_fault+0xfa/0x380 [ 1558.161625] __handle_mm_fault+0x2497/0x4620 [ 1558.166424] ? vm_insert_page+0x7c0/0x7c0 [ 1558.170587] ? mark_held_locks+0xa6/0xf0 [ 1558.174658] handle_mm_fault+0x455/0x9c0 [ 1558.179423] __do_page_fault+0x549/0xad0 [ 1558.183939] ? spurious_fault+0x640/0x640 [ 1558.188510] ? do_page_fault+0x60/0x500 [ 1558.192501] ? page_fault+0x2f/0x50 [ 1558.196351] page_fault+0x45/0x50 [ 1558.199909] RIP: 0001:0xffffffffffffffff [ 1558.204292] RSP: d24d81e0:00007ffeb58f04d0 EFLAGS: 7ffeb58f02e0 [ 1558.209795] Mem-Info: [ 1558.218505] active_anon:14433 inactive_anon:14134 isolated_anon:0 [ 1558.218505] active_file:30 inactive_file:22 isolated_file:0 [ 1558.218505] unevictable:0 dirty:0 writeback:20 unstable:0 [ 1558.218505] slab_reclaimable:15020 slab_unreclaimable:112973 [ 1558.218505] mapped:52679 shmem:15122 pagetables:814 bounce:0 [ 1558.218505] free:24995 free_pcp:30 free_cma:0 [ 1558.253306] Node 0 active_anon:57544kB inactive_anon:44876kB active_file:112kB inactive_file:44kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:183888kB dirty:0kB writeback:48kB shmem:48760kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1558.282703] Node 1 active_anon:188kB inactive_anon:11660kB active_file:8kB inactive_file:44kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:26828kB dirty:0kB writeback:32kB shmem:11728kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1558.434152] Node 0 DMA free:11072kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:16kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1558.509816] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1558.515065] Node 0 DMA32 free:35744kB min:36200kB low:45248kB high:54296kB active_anon:57444kB inactive_anon:44876kB active_file:32kB inactive_file:0kB unevictable:0kB writepending:444kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7424kB pagetables:3108kB bounce:0kB free_pcp:116kB local_pcp:0kB free_cma:0kB [ 1558.718232] lowmem_reserve[]: 0 0 0 0 0 [ 1558.722590] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1558.799612] lowmem_reserve[]: 0 0 0 0 0 [ 1558.804006] Node 1 Normal free:53164kB min:53696kB low:67120kB high:80544kB active_anon:88kB inactive_anon:11660kB active_file:8kB inactive_file:0kB unevictable:0kB writepending:16kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:96kB pagetables:148kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1558.895323] lowmem_reserve[]: 0 0 0 0 0 [ 1558.905195] Node 0 DMA: 1*4kB (E) 3*8kB (UE) 6*16kB (UE) 4*32kB (UE) 1*64kB (E) 6*128kB (UE) 5*256kB (UE) 3*512kB (UE) 1*1024kB (E) 3*2048kB (UME) 0*4096kB = 11068kB [ 1558.931366] Node 0 DMA32: 2431*4kB (UME) 1137*8kB (ME) 300*16kB (ME) 96*32kB (ME) 31*64kB (M) 17*128kB (UM) 15*256kB (UM) 2*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 35716kB [ 1558.954178] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1558.965476] Node 1 Normal: 1*4kB (U) 2*8kB (UM) 3*16kB (UM) 1607*32kB (UM) 22*64kB (UM) 3*128kB (UM) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 53284kB [ 1558.983355] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1558.992562] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1559.003575] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1559.013479] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1559.024425] 15145 total pagecache pages [ 1559.028867] 0 pages in swap cache [ 1559.032654] Swap cache stats: add 0, delete 0, find 0/0 [ 1559.038024] Free swap = 0kB [ 1559.043333] Total swap = 0kB [ 1559.046436] 2097051 pages RAM [ 1559.049913] 0 pages HighMem/MovableOnly [ 1559.053889] 363849 pages reserved [ 1559.057341] 0 pages cma reserved [ 1559.063892] Out of memory (oom_kill_allocating_task): Kill process 9719 (systemd-journal) score 0 or sacrifice child [ 1559.074912] Killed process 9719 (systemd-journal) total-vm:46096kB, anon-rss:464kB, file-rss:0kB, shmem-rss:1556kB [ 1559.088413] syz-executor.3 invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1559.102797] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 1559.108495] CPU: 1 PID: 9728 Comm: syz-executor.3 Not tainted 4.14.232-syzkaller #0 [ 1559.116838] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1559.126554] Call Trace: [ 1559.129199] dump_stack+0x1b2/0x281 [ 1559.133008] dump_header+0x178/0x82f [ 1559.136812] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1559.142279] ? ___ratelimit+0x2cd/0x530 [ 1559.146566] oom_kill_process.cold+0x10/0xa40 [ 1559.151627] out_of_memory+0xe3e/0x1190 [ 1559.155944] ? oom_killer_disable+0x1c0/0x1c0 [ 1559.160655] ? mutex_trylock+0x152/0x1a0 [ 1559.165632] __alloc_pages_nodemask+0x23e1/0x2720 [ 1559.170943] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1559.175819] alloc_pages_current+0x155/0x260 [ 1559.180233] filemap_fault+0x11a1/0x1ad0 [ 1559.184674] ext4_filemap_fault+0x84/0xb0 [ 1559.188910] __do_fault+0xfa/0x380 [ 1559.192861] __handle_mm_fault+0x2497/0x4620 [ 1559.197589] ? vm_insert_page+0x7c0/0x7c0 [ 1559.202176] ? hrtimer_nanosleep+0x1ff/0x4b0 [ 1559.207232] ? nanosleep_copyout+0x100/0x100 [ 1559.212225] ? mark_held_locks+0xa6/0xf0 [ 1559.216660] handle_mm_fault+0x455/0x9c0 [ 1559.221163] __do_page_fault+0x549/0xad0 [ 1559.225946] ? spurious_fault+0x640/0x640 [ 1559.230113] ? do_page_fault+0x60/0x500 [ 1559.234520] ? page_fault+0x2f/0x50 [ 1559.238315] page_fault+0x45/0x50 [ 1559.241982] RIP: 17c01f:0x8 [ 1559.246050] RSP: 0005:00007ffcfd15eebc EFLAGS: 00000032 [ 1559.246773] Mem-Info: [ 1559.255273] active_anon:14446 inactive_anon:14134 isolated_anon:0 [ 1559.255273] active_file:22 inactive_file:1 isolated_file:0 [ 1559.255273] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1559.255273] slab_reclaimable:15020 slab_unreclaimable:112995 [ 1559.255273] mapped:52675 shmem:15122 pagetables:814 bounce:0 [ 1559.255273] free:25077 free_pcp:0 free_cma:0 [ 1559.289986] Bluetooth: hci1 command 0x040f tx timeout [ 1559.296389] Node 0 active_anon:57568kB inactive_anon:44876kB active_file:84kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:183872kB dirty:0kB writeback:0kB shmem:48760kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1559.343589] Node 1 active_anon:216kB inactive_anon:11660kB active_file:4kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:26828kB dirty:0kB writeback:0kB shmem:11728kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1559.382290] Node 0 DMA free:11068kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1559.415589] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1559.421177] Node 0 DMA32 free:35836kB min:36200kB low:45248kB high:54296kB active_anon:57568kB inactive_anon:44876kB active_file:112kB inactive_file:40kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7424kB pagetables:3108kB bounce:0kB free_pcp:116kB local_pcp:0kB free_cma:0kB [ 1559.455023] lowmem_reserve[]: 0 0 0 0 0 [ 1559.474251] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1559.512590] lowmem_reserve[]: 0 0 0 0 0 [ 1559.517060] Node 1 Normal free:53284kB min:53696kB low:67120kB high:80544kB active_anon:216kB inactive_anon:11660kB active_file:4kB inactive_file:4kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:96kB pagetables:148kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1559.556982] lowmem_reserve[]: 0 0 0 0 0 [ 1559.563917] Node 0 DMA: 1*4kB (E) 3*8kB (UE) 6*16kB (UE) 4*32kB (UE) 1*64kB (E) 6*128kB (UE) 5*256kB (UE) 3*512kB (UE) 1*1024kB (E) 3*2048kB (UME) 0*4096kB = 11068kB [ 1559.588464] Node 0 DMA32: 2461*4kB (ME) 1137*8kB (ME) 300*16kB (ME) 96*32kB (ME) 31*64kB (M) 17*128kB (UM) 15*256kB (UM) 2*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 35836kB [ 1559.621869] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1559.637376] Node 1 Normal: 1*4kB (U) 2*8kB (UM) 3*16kB (UM) 1607*32kB (UM) 22*64kB (UM) 3*128kB (UM) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 53284kB [ 1559.657636] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1559.683703] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1559.706461] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1559.716527] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1559.733685] 15145 total pagecache pages [ 1559.738389] 0 pages in swap cache [ 1559.742266] Swap cache stats: add 0, delete 0, find 0/0 [ 1559.748288] Free swap = 0kB [ 1559.754056] Total swap = 0kB [ 1559.757496] 2097051 pages RAM [ 1559.774336] 0 pages HighMem/MovableOnly [ 1559.781376] 363849 pages reserved [ 1559.785557] 0 pages cma reserved [ 1559.804167] Out of memory (oom_kill_allocating_task): Kill process 9728 (syz-executor.3) score 0 or sacrifice child [ 1559.818641] Killed process 9975 (syz-executor.3) total-vm:93252kB, anon-rss:152kB, file-rss:34820kB, shmem-rss:0kB [ 1559.897630] oom_reaper: reaped process 9975 (syz-executor.3), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1559.931152] in:imklog invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1559.954738] in:imklog cpuset=/ mems_allowed=0-1 [ 1559.960273] CPU: 1 PID: 9437 Comm: in:imklog Not tainted 4.14.232-syzkaller #0 [ 1559.968083] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1559.977889] Call Trace: [ 1559.980587] dump_stack+0x1b2/0x281 [ 1559.984229] dump_header+0x178/0x82f [ 1559.988228] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1559.993577] ? ___ratelimit+0x2cd/0x530 [ 1559.998594] oom_kill_process.cold+0x10/0xa40 [ 1560.003674] out_of_memory+0xe3e/0x1190 [ 1560.008335] ? oom_killer_disable+0x1c0/0x1c0 [ 1560.012940] ? mutex_trylock+0x152/0x1a0 [ 1560.017028] __alloc_pages_nodemask+0x23e1/0x2720 [ 1560.021987] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1560.027006] alloc_pages_current+0x155/0x260 [ 1560.031776] filemap_fault+0x11a1/0x1ad0 [ 1560.036057] ext4_filemap_fault+0x84/0xb0 [ 1560.040219] __do_fault+0xfa/0x380 [ 1560.043796] __handle_mm_fault+0x2497/0x4620 [ 1560.048281] ? vm_insert_page+0x7c0/0x7c0 [ 1560.052711] ? lock_downgrade+0x740/0x740 [ 1560.056942] ? mark_held_locks+0xa6/0xf0 [ 1560.061020] handle_mm_fault+0x455/0x9c0 [ 1560.065604] __do_page_fault+0x549/0xad0 [ 1560.069659] ? spurious_fault+0x640/0x640 [ 1560.073972] ? do_page_fault+0x60/0x500 [ 1560.077996] ? page_fault+0x2f/0x50 [ 1560.081849] page_fault+0x45/0x50 [ 1560.085688] RIP: 1fa0:0x1f9f [ 1560.088810] RSP: 0000:000055de1f9469d0 EFLAGS: 7f53e0363da0 [ 1560.092622] Mem-Info: [ 1560.098617] syz-executor.3: [ 1560.101143] active_anon:14306 inactive_anon:14133 isolated_anon:0 [ 1560.101143] active_file:20 inactive_file:3 isolated_file:0 [ 1560.101143] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1560.101143] slab_reclaimable:14987 slab_unreclaimable:112682 [ 1560.101143] mapped:52225 shmem:15122 pagetables:789 bounce:0 [ 1560.101143] free:13911 free_pcp:288 free_cma:0 [ 1560.101159] Node 0 active_anon:57008kB inactive_anon:44872kB active_file:76kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:182072kB dirty:0kB writeback:0kB shmem:48760kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1560.122511] page allocation failure: order:0 [ 1560.140414] Node 1 active_anon:216kB inactive_anon:11660kB active_file:4kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:26828kB dirty:0kB writeback:0kB shmem:11728kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1560.192720] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1560.202493] Node 0 DMA free:10968kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1560.224108] (null) [ 1560.243286] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1560.248487] Node 0 DMA32 free:17928kB min:36200kB low:45248kB high:54296kB active_anon:57008kB inactive_anon:44872kB active_file:76kB inactive_file:8kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7392kB pagetables:3008kB bounce:0kB free_pcp:912kB local_pcp:180kB free_cma:0kB [ 1560.260968] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 1560.282843] lowmem_reserve[]: 0 0 0 0 0 [ 1560.287613] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1560.304455] CPU: 0 PID: 9975 Comm: syz-executor.3 Not tainted 4.14.232-syzkaller #0 [ 1560.320980] lowmem_reserve[]: [ 1560.322922] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1560.322931] 0 [ 1560.326149] Call Trace: [ 1560.338758] 0 [ 1560.340264] dump_stack+0x1b2/0x281 [ 1560.340280] warn_alloc.cold+0x96/0x1cc [ 1560.340292] ? zone_watermark_ok_safe+0x220/0x220 [ 1560.340301] ? usleep_range+0x130/0x130 [ 1560.340309] ? try_to_free_pages+0x23f/0x6e0 [ 1560.340319] ? _find_next_bit+0xdb/0x100 [ 1560.340329] ? run_timer_softirq+0x5a0/0x5a0 [ 1560.340345] __alloc_pages_nodemask+0x2127/0x2720 [ 1560.344185] 0 [ 1560.345988] ? lock_acquire+0x170/0x3f0 [ 1560.353117] 0 [ 1560.355436] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1560.361335] 0 [ 1560.364489] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1560.373228] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1560.373248] alloc_pages_current+0x155/0x260 [ 1560.373262] ion_page_pool_alloc+0x118/0x1b0 [ 1560.373271] ion_system_heap_allocate+0x133/0x8c0 [ 1560.373279] ? ion_alloc+0x187/0x810 [ 1560.373289] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1560.373297] ? ion_system_contig_heap_create+0x130/0x130 [ 1560.373306] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1560.373316] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1560.373325] ion_alloc+0x204/0x810 [ 1560.373337] ? ion_dma_buf_release+0x40/0x40 [ 1560.373348] ? __might_fault+0x177/0x1b0 [ 1560.373359] ion_ioctl+0xea/0x1f0 [ 1560.373371] ? ion_query_heaps+0x360/0x360 [ 1560.383590] Node 1 [ 1560.384374] ? ion_query_heaps+0x360/0x360 [ 1560.386174] Normal free:26748kB min:53696kB low:67120kB high:80544kB active_anon:216kB inactive_anon:11660kB active_file:4kB inactive_file:4kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:96kB pagetables:148kB bounce:0kB free_pcp:240kB local_pcp:120kB free_cma:0kB [ 1560.391240] do_vfs_ioctl+0x75a/0xff0 [ 1560.391254] ? ioctl_preallocate+0x1a0/0x1a0 [ 1560.391263] ? lock_downgrade+0x740/0x740 [ 1560.391274] ? __fget+0x225/0x360 [ 1560.391282] ? do_vfs_ioctl+0xff0/0xff0 [ 1560.391292] ? security_file_ioctl+0x83/0xb0 [ 1560.391301] SyS_ioctl+0x7f/0xb0 [ 1560.391307] ? do_vfs_ioctl+0xff0/0xff0 [ 1560.391317] do_syscall_64+0x1d5/0x640 [ 1560.391331] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1560.391339] RIP: 0033:0x4665f9 [ 1560.391348] RSP: 002b:00007fd59d707188 EFLAGS: 00000246 [ 1560.394011] lowmem_reserve[]: [ 1560.397993] ORIG_RAX: 0000000000000010 [ 1560.407659] 0 [ 1560.407937] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1560.413580] 0 [ 1560.418115] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000006 [ 1560.418124] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1560.426302] 0 [ 1560.427545] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1560.427554] R13: 00007ffcfd15ebff R14: 00007fd59d707300 R15: 0000000000022000 [ 1560.433882] 0 [ 1560.446280] warn_alloc_show_mem: 3 callbacks suppressed [ 1560.446283] Mem-Info: [ 1560.497560] 0 [ 1560.508345] active_anon:14306 inactive_anon:14133 isolated_anon:0 [ 1560.508345] active_file:20 inactive_file:3 isolated_file:0 [ 1560.508345] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1560.508345] slab_reclaimable:14987 slab_unreclaimable:112682 [ 1560.508345] mapped:52225 shmem:15122 pagetables:789 bounce:0 [ 1560.508345] free:13911 free_pcp:288 free_cma:0 [ 1560.546656] Node 0 active_anon:57008kB inactive_anon:44872kB active_file:76kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:182072kB dirty:0kB writeback:0kB shmem:48760kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1560.563318] Node 0 [ 1560.575296] Node 1 active_anon:216kB inactive_anon:11660kB active_file:4kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:26828kB dirty:0kB writeback:0kB shmem:11728kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1560.597324] DMA: [ 1560.608789] Node 0 [ 1560.634793] 2*4kB [ 1560.659936] DMA free:10968kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1560.737322] (UE) [ 1560.759847] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1560.768636] Node 0 DMA32 free:17928kB min:36200kB low:45248kB high:54296kB active_anon:57008kB inactive_anon:44872kB active_file:72kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7392kB pagetables:3008kB bounce:0kB free_pcp:912kB local_pcp:732kB free_cma:0kB [ 1560.778292] 2*8kB [ 1560.812304] lowmem_reserve[]: 0 0 0 0 0 [ 1560.816440] (UE) 2*16kB (UE) 3*32kB (UE) 1*64kB (E) 6*128kB (UE) 5*256kB (UE) 3*512kB (UE) 1*1024kB (E) 3*2048kB (UME) 0*4096kB = 10968kB [ 1560.826936] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1560.856761] Node 0 [ 1560.890472] lowmem_reserve[]: 0 0 0 0 0 [ 1560.895132] DMA32: [ 1560.896998] Node 1 [ 1560.897006] 1762*4kB [ 1560.911404] Normal free:26748kB min:53696kB low:67120kB high:80544kB active_anon:216kB inactive_anon:11660kB active_file:4kB inactive_file:4kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:96kB pagetables:148kB bounce:0kB free_pcp:240kB local_pcp:120kB free_cma:0kB [ 1560.924675] (ME) [ 1560.956209] lowmem_reserve[]: 0 0 0 0 0 [ 1560.965814] 816*8kB (UME) 190*16kB (UME) 39*32kB (UME) 1*64kB (U) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 17928kB [ 1560.966534] Node 0 DMA: 2*4kB (UE) 2*8kB (UE) 2*16kB (UE) 3*32kB (UE) 1*64kB (E) 6*128kB (UE) 5*256kB (UE) 3*512kB (UE) 1*1024kB (E) 3*2048kB (UME) 0*4096kB = 10968kB [ 1560.995828] Node 0 [ 1561.018496] Node 0 DMA32: 1762*4kB (ME) 816*8kB (UME) 190*16kB (UME) 39*32kB (UME) 1*64kB (U) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 17928kB [ 1561.025268] Normal: [ 1561.049411] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1561.054009] 0*4kB [ 1561.074849] Node 1 Normal: 1*4kB (U) 1*8kB (M) 1*16kB (M) 779*32kB (UM) 22*64kB (UM) 3*128kB (UM) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 26748kB [ 1561.083243] 0*8kB [ 1561.104410] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1561.114453] 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1561.122511] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1561.138418] Node 1 Normal: 1*4kB (U) 1*8kB (M) 1*16kB (M) 779*32kB (UM) 22*64kB (UM) 3*128kB (UM) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 26748kB [ 1561.148473] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1561.165516] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1561.178430] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1561.187462] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1561.197815] 15145 total pagecache pages [ 1561.210943] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1561.217419] 0 pages in swap cache [ 1561.233834] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1561.239106] Swap cache stats: add 0, delete 0, find 0/0 [ 1561.248582] Free swap = 0kB [ 1561.255280] 15145 total pagecache pages [ 1561.266554] 0 pages in swap cache [ 1561.267363] Total swap = 0kB [ 1561.277301] Swap cache stats: add 0, delete 0, find 0/0 [ 1561.281095] 2097051 pages RAM [ 1561.285883] 0 pages HighMem/MovableOnly [ 1561.288177] Free swap = 0kB [ 1561.306338] 363849 pages reserved [ 1561.306993] Total swap = 0kB [ 1561.317447] 0 pages cma reserved [ 1561.318535] 2097051 pages RAM [ 1561.350611] Bluetooth: hci1 command 0x0419 tx timeout [ 1561.356248] 0 pages HighMem/MovableOnly [ 1561.371628] 363849 pages reserved [ 1561.394897] 0 pages cma reserved [ 1561.407418] Out of memory (oom_kill_allocating_task): Kill process 9437 (in:imklog) score 0 or sacrifice child [ 1561.452972] Killed process 9434 (rsyslogd) total-vm:254332kB, anon-rss:952kB, file-rss:0kB, shmem-rss:0kB [ 1561.470370] systemd[1]: systemd-journald.service: Failed with result 'signal'. [ 1561.550045] oom_reaper: reaped process 9434 (rsyslogd), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1561.609129] systemd[1]: rsyslog.service: Main process exited, code=killed, status=9/KILL [ 1561.646751] IPVS: ftp: loaded support on port[0] = 21 [ 1561.654498] systemd[1]: rsyslog.service: Unit entered failed state. [ 1561.679863] systemd[1]: rsyslog.service: Failed with result 'signal'. [ 1561.701680] systemd[1]: systemd-journald.service: Service has no hold-off time, scheduling restart. [ 1561.736497] systemd[1]: Stopped Flush Journal to Persistent Storage. [ 1561.789145] systemd[1]: Stopping Flush Journal to Persistent Storage... [ 1561.796146] systemd[1]: Stopped Journal Service. [ 1561.856251] syz-executor.3: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1561.871756] oom_reaper: reaped process 9972 (syz-executor.1), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1561.909125] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 1561.923631] oom_reaper: reaped process 9971 (syz-executor.5), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1561.933882] CPU: 1 PID: 9975 Comm: syz-executor.3 Not tainted 4.14.232-syzkaller #0 [ 1561.942315] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1561.952556] Call Trace: [ 1561.955143] dump_stack+0x1b2/0x281 [ 1561.958947] warn_alloc.cold+0x96/0x1cc [ 1561.963091] ? zone_watermark_ok_safe+0x220/0x220 [ 1561.967948] __alloc_pages_nodemask+0x2127/0x2720 [ 1561.972863] ? _raw_spin_unlock_irq+0x24/0x80 [ 1561.977541] ? lock_acquire+0x170/0x3f0 [ 1561.981636] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1561.986656] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1561.992217] ? __mutex_unlock_slowpath+0x75/0x770 [ 1561.997221] alloc_pages_current+0x155/0x260 [ 1562.001702] ion_page_pool_alloc+0x118/0x1b0 [ 1562.006306] ion_system_heap_allocate+0x133/0x8c0 [ 1562.011228] ? _raw_spin_unlock+0x29/0x40 [ 1562.015363] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1562.020289] ? ion_system_contig_heap_create+0x130/0x130 [ 1562.025814] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1562.031124] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1562.036063] ion_alloc+0x27a/0x810 [ 1562.039678] ? ion_dma_buf_release+0x40/0x40 [ 1562.044085] ? __might_fault+0x177/0x1b0 [ 1562.048220] ion_ioctl+0xea/0x1f0 [ 1562.051806] ? ion_query_heaps+0x360/0x360 [ 1562.056446] ? ion_query_heaps+0x360/0x360 [ 1562.060755] do_vfs_ioctl+0x75a/0xff0 [ 1562.064781] ? ioctl_preallocate+0x1a0/0x1a0 [ 1562.069295] ? lock_downgrade+0x740/0x740 [ 1562.073695] ? __fget+0x225/0x360 [ 1562.077154] ? do_vfs_ioctl+0xff0/0xff0 [ 1562.081413] ? security_file_ioctl+0x83/0xb0 [ 1562.086317] SyS_ioctl+0x7f/0xb0 [ 1562.089677] ? do_vfs_ioctl+0xff0/0xff0 [ 1562.093645] do_syscall_64+0x1d5/0x640 [ 1562.097612] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1562.102894] RIP: 0033:0x4665f9 [ 1562.106072] RSP: 002b:00007fd59d707188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1562.113785] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1562.121464] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000006 [ 1562.128834] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1562.136212] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1562.143824] R13: 00007ffcfd15ebff R14: 00007fd59d707300 R15: 0000000000022000 [ 1562.152324] syz-executor.1: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1562.155765] syz-fuzzer invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask= [ 1562.167157] syz-executor.5: [ 1562.177748] (null), order=0, oom_score_adj=0 [ 1562.190015] Mem-Info: [ 1562.192914] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 1562.193938] active_anon:13365 inactive_anon:14136 isolated_anon:0 [ 1562.193938] active_file:15 inactive_file:14 isolated_file:0 [ 1562.193938] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1562.193938] slab_reclaimable:14947 slab_unreclaimable:112702 [ 1562.193938] mapped:52225 shmem:15126 pagetables:735 bounce:0 [ 1562.193938] free:13761 free_pcp:364 free_cma:0 [ 1562.198751] CPU: 0 PID: 7964 Comm: syz-fuzzer Not tainted 4.14.232-syzkaller #0 [ 1562.240922] page allocation failure: order:0 [ 1562.242261] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1562.242273] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1562.247206] Call Trace: [ 1562.263624] syz-executor.1 cpuset= [ 1562.264118] dump_stack+0x1b2/0x281 [ 1562.266680] / [ 1562.270318] dump_header+0x178/0x82f [ 1562.274442] mems_allowed=0-1 [ 1562.276103] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1562.286325] (null) [ 1562.288277] ? ___ratelimit+0x2cd/0x530 [ 1562.294589] oom_kill_process.cold+0x10/0xa40 [ 1562.299229] out_of_memory+0xe3e/0x1190 [ 1562.303307] ? oom_killer_disable+0x1c0/0x1c0 [ 1562.305413] syz-executor.5 cpuset= [ 1562.308306] ? mutex_trylock+0x152/0x1a0 [ 1562.308309] / mems_allowed=0-1 [ 1562.311949] __alloc_pages_nodemask+0x23e1/0x2720 [ 1562.311969] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1562.311991] alloc_pages_current+0x155/0x260 [ 1562.312002] filemap_fault+0x11a1/0x1ad0 [ 1562.312020] ext4_filemap_fault+0x84/0xb0 [ 1562.312028] __do_fault+0xfa/0x380 [ 1562.312037] __handle_mm_fault+0x2497/0x4620 [ 1562.312050] ? vm_insert_page+0x7c0/0x7c0 [ 1562.357082] ? lock_downgrade+0x740/0x740 [ 1562.361675] ? mark_held_locks+0xa6/0xf0 [ 1562.365527] Node 0 active_anon:53236kB inactive_anon:44884kB active_file:52kB inactive_file:52kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:182072kB dirty:0kB writeback:0kB shmem:48776kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1562.365739] handle_mm_fault+0x455/0x9c0 [ 1562.399237] __do_page_fault+0x549/0xad0 [ 1562.403301] ? spurious_fault+0x640/0x640 [ 1562.407435] ? do_page_fault+0x60/0x500 [ 1562.411415] ? page_fault+0x2f/0x50 [ 1562.415043] page_fault+0x45/0x50 [ 1562.418757] RIP: 0000:0x947a5c [ 1562.422024] RSP: 2e000:000000c00003dec8 EFLAGS: 0043b6a0 [ 1562.423757] CPU: 1 PID: 9972 Comm: syz-executor.1 Not tainted 4.14.232-syzkaller #0 [ 1562.437523] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1562.446870] Call Trace: [ 1562.449466] dump_stack+0x1b2/0x281 [ 1562.453111] warn_alloc.cold+0x96/0x1cc [ 1562.457639] ? zone_watermark_ok_safe+0x220/0x220 [ 1562.462919] ? usleep_range+0x130/0x130 [ 1562.467067] ? try_to_free_pages+0x23f/0x6e0 [ 1562.468798] Mem-Info: [ 1562.471567] ? _find_next_bit+0xdb/0x100 [ 1562.474605] active_anon:13365 inactive_anon:14136 isolated_anon:0 [ 1562.474605] active_file:15 inactive_file:14 isolated_file:0 [ 1562.474605] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1562.474605] slab_reclaimable:14947 slab_unreclaimable:112702 [ 1562.474605] mapped:52225 shmem:15126 pagetables:735 bounce:0 [ 1562.474605] free:13761 free_pcp:368 free_cma:0 [ 1562.478757] ? run_timer_softirq+0x5a0/0x5a0 [ 1562.517206] __alloc_pages_nodemask+0x2127/0x2720 [ 1562.522332] ? lock_acquire+0x170/0x3f0 [ 1562.526393] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1562.531547] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1562.536043] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1562.541577] alloc_pages_current+0x155/0x260 [ 1562.546193] ion_page_pool_alloc+0x118/0x1b0 [ 1562.550789] ion_system_heap_allocate+0x133/0x8c0 [ 1562.556230] ? ion_alloc+0x187/0x810 [ 1562.558829] Node 0 active_anon:53236kB inactive_anon:44884kB active_file:52kB inactive_file:52kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:182072kB dirty:0kB writeback:0kB shmem:48776kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1562.559950] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1562.594079] ? ion_system_contig_heap_create+0x130/0x130 [ 1562.599711] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1562.604815] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1562.609817] ion_alloc+0x204/0x810 [ 1562.613436] ? ion_dma_buf_release+0x40/0x40 [ 1562.618051] ? __might_fault+0x177/0x1b0 [ 1562.618793] Node 1 active_anon:224kB inactive_anon:11660kB active_file:8kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:26828kB dirty:0kB writeback:0kB shmem:11728kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1562.622109] ion_ioctl+0xea/0x1f0 [ 1562.654531] ? ion_query_heaps+0x360/0x360 [ 1562.658767] ? ion_query_heaps+0x360/0x360 [ 1562.663216] do_vfs_ioctl+0x75a/0xff0 [ 1562.667096] ? ioctl_preallocate+0x1a0/0x1a0 [ 1562.671713] ? lock_downgrade+0x740/0x740 [ 1562.676127] ? __fget+0x225/0x360 [ 1562.679573] ? do_vfs_ioctl+0xff0/0xff0 [ 1562.683825] ? security_file_ioctl+0x83/0xb0 [ 1562.688396] SyS_ioctl+0x7f/0xb0 [ 1562.688812] Node 0 [ 1562.693935] ? do_vfs_ioctl+0xff0/0xff0 [ 1562.693955] DMA free:10976kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1562.696594] do_syscall_64+0x1d5/0x640 [ 1562.708773] lowmem_reserve[]: [ 1562.726982] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1562.726991] RIP: 0033:0x4665f9 [ 1562.726999] RSP: 002b:00007f22b5267188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1562.751837] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1562.758806] 0 [ 1562.759117] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000008 [ 1562.759124] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1562.761122] 2717 [ 1562.768831] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1562.768837] R13: 00007ffea96cbc0f R14: 00007f22b5267300 R15: 0000000000022000 [ 1562.780675] Node 1 active_anon:224kB inactive_anon:11660kB active_file:8kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:26828kB dirty:0kB writeback:0kB shmem:11728kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1562.792486] CPU: 0 PID: 9971 Comm: syz-executor.5 Not tainted 4.14.232-syzkaller #0 [ 1562.801160] Node 0 [ 1562.822666] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1562.822671] Call Trace: [ 1562.822692] dump_stack+0x1b2/0x281 [ 1562.822705] warn_alloc.cold+0x96/0x1cc [ 1562.822716] ? zone_watermark_ok_safe+0x220/0x220 [ 1562.822725] ? usleep_range+0x130/0x130 [ 1562.822732] ? try_to_free_pages+0x23f/0x6e0 [ 1562.822742] ? _find_next_bit+0xdb/0x100 [ 1562.822752] ? run_timer_softirq+0x5a0/0x5a0 [ 1562.822768] __alloc_pages_nodemask+0x2127/0x2720 [ 1562.822782] ? lock_acquire+0x170/0x3f0 [ 1562.822796] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1562.822806] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1562.822820] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1562.822831] ? ion_page_pool_alloc+0x28/0x1b0 [ 1562.837413] DMA free:10976kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1562.843663] alloc_pages_current+0x155/0x260 [ 1562.843677] ion_page_pool_alloc+0x118/0x1b0 [ 1562.843686] ion_system_heap_allocate+0x133/0x8c0 [ 1562.843694] ? ion_alloc+0x187/0x810 [ 1562.843704] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1562.843712] ? ion_system_contig_heap_create+0x130/0x130 [ 1562.843721] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1562.843734] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1562.846432] lowmem_reserve[]: [ 1562.850143] ion_alloc+0x204/0x810 [ 1562.850156] ? ion_dma_buf_release+0x40/0x40 [ 1562.850166] ? __might_fault+0x177/0x1b0 [ 1562.850176] ion_ioctl+0xea/0x1f0 [ 1562.850183] ? ion_query_heaps+0x360/0x360 [ 1562.850194] ? ion_query_heaps+0x360/0x360 [ 1562.850209] do_vfs_ioctl+0x75a/0xff0 [ 1562.850219] ? ioctl_preallocate+0x1a0/0x1a0 [ 1562.850229] ? lock_downgrade+0x740/0x740 [ 1562.850242] ? __fget+0x225/0x360 [ 1562.850250] ? do_vfs_ioctl+0xff0/0xff0 [ 1562.850264] ? security_file_ioctl+0x83/0xb0 [ 1562.861281] 0 [ 1562.864571] SyS_ioctl+0x7f/0xb0 [ 1562.872094] 2717 [ 1562.873442] ? do_vfs_ioctl+0xff0/0xff0 [ 1562.878452] 2718 [ 1562.883722] do_syscall_64+0x1d5/0x640 [ 1562.883736] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1562.883744] RIP: 0033:0x4665f9 [ 1562.883748] RSP: 002b:00007f551e7c7188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1562.883756] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1562.883761] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000008 [ 1562.883765] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1562.883769] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1562.883774] R13: 00007ffd0570a9af R14: 00007f551e7c7300 R15: 0000000000022000 [ 1562.887947] 2718 [ 1562.894633] 2718 [ 1562.897501] 2718 [ 1562.907220] 2718 [ 1562.909306] 2718 [ 1562.955576] Node 0 [ 1562.961502] Node 0 [ 1562.975246] DMA32 free:17772kB min:36200kB low:45248kB high:54296kB active_anon:53228kB inactive_anon:44884kB active_file:52kB inactive_file:52kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7424kB pagetables:2792kB bounce:0kB free_pcp:656kB local_pcp:592kB free_cma:0kB [ 1562.976208] DMA32 free:17772kB min:36200kB low:45248kB high:54296kB active_anon:53228kB inactive_anon:44884kB active_file:52kB inactive_file:52kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7424kB pagetables:2792kB bounce:0kB free_pcp:656kB local_pcp:64kB free_cma:0kB [ 1562.982278] lowmem_reserve[]: [ 1562.985064] lowmem_reserve[]: [ 1562.987827] 0 [ 1562.998792] 0 [ 1563.003708] 0 [ 1563.004352] 0 [ 1563.008475] 0 [ 1563.028801] 0 [ 1563.108811] 0 0 [ 1563.314372] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1563.338773] 0 0 [ 1563.343201] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1563.351442] lowmem_reserve[]: 0 0 0 0 0 [ 1563.380988] Node 1 Normal free:135084kB min:53696kB low:67120kB high:80544kB active_anon:224kB inactive_anon:11660kB active_file:0kB inactive_file:2012kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:128kB pagetables:148kB bounce:0kB free_pcp:740kB local_pcp:632kB free_cma:0kB [ 1563.428841] Bluetooth: hci4 command 0x0409 tx timeout [ 1563.434158] lowmem_reserve[]: 0 0 0 0 0 [ 1563.438271] Node 1 Normal free:38024kB min:53696kB low:67120kB high:80544kB active_anon:224kB inactive_anon:11660kB active_file:604kB inactive_file:1552kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:128kB pagetables:148kB bounce:0kB free_pcp:680kB local_pcp:0kB free_cma:0kB [ 1563.496266] syz-executor.5: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1563.508426] warn_alloc_show_mem: 1 callbacks suppressed [ 1563.508429] Mem-Info: [ 1563.516935] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 1563.522155] lowmem_reserve[]: 0 0 0 0 0 [ 1563.526944] Node 0 DMA: 2*4kB (UE) 2*8kB (UE) 2*16kB (UE) 3*32kB (UE) 2*64kB (UE) 6*128kB (UE) 5*256kB (UE) 3*512kB (UE) 1*1024kB (E) 3*2048kB (UME) 0*4096kB = 11032kB [ 1563.528739] lowmem_reserve[]: [ 1563.542449] CPU: 0 PID: 9971 Comm: syz-executor.5 Not tainted 4.14.232-syzkaller #0 [ 1563.546514] active_anon:13363 inactive_anon:14136 isolated_anon:0 [ 1563.546514] active_file:86 inactive_file:35 isolated_file:27 [ 1563.546514] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1563.546514] slab_reclaimable:14947 slab_unreclaimable:112934 [ 1563.546514] mapped:52275 shmem:15126 pagetables:735 bounce:0 [ 1563.546514] free:18578 free_pcp:184 free_cma:0 [ 1563.554123] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1563.554127] Call Trace: [ 1563.554149] dump_stack+0x1b2/0x281 [ 1563.554163] warn_alloc.cold+0x96/0x1cc [ 1563.554174] ? zone_watermark_ok_safe+0x220/0x220 [ 1563.554202] __alloc_pages_nodemask+0x2127/0x2720 [ 1563.601550] Node 0 [ 1563.602932] ? lock_acquire+0x170/0x3f0 [ 1563.606945] DMA32: 1466*4kB [ 1563.611390] ? lock_acquire+0x170/0x3f0 [ 1563.611406] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1563.611422] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1563.611432] ? __mutex_unlock_slowpath+0x75/0x770 [ 1563.611445] alloc_pages_current+0x155/0x260 [ 1563.611459] ion_page_pool_alloc+0x118/0x1b0 [ 1563.611468] ion_system_heap_allocate+0x133/0x8c0 [ 1563.611478] ? _raw_spin_unlock+0x29/0x40 [ 1563.611485] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1563.611493] ? ion_system_contig_heap_create+0x130/0x130 [ 1563.611502] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1563.611514] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1563.618771] (UME) [ 1563.621323] ion_alloc+0x27a/0x810 [ 1563.624033] 690*8kB [ 1563.628134] ? ion_dma_buf_release+0x40/0x40 [ 1563.633572] (ME) [ 1563.635161] ? __might_fault+0x177/0x1b0 [ 1563.640267] Node 0 active_anon:53228kB inactive_anon:44884kB active_file:192kB inactive_file:68kB unevictable:0kB isolated(anon):0kB isolated(file):108kB mapped:182172kB dirty:0kB writeback:0kB shmem:48776kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1563.645655] ion_ioctl+0xea/0x1f0 [ 1563.654053] 176*16kB [ 1563.655102] ? ion_query_heaps+0x360/0x360 [ 1563.660529] Node 1 active_anon:224kB inactive_anon:11660kB active_file:152kB inactive_file:72kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:26928kB dirty:0kB writeback:0kB shmem:11728kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1563.665083] ? ion_query_heaps+0x360/0x360 [ 1563.672533] (ME) [ 1563.674619] do_vfs_ioctl+0x75a/0xff0 [ 1563.680348] 696*32kB [ 1563.685703] ? ioctl_preallocate+0x1a0/0x1a0 [ 1563.685713] ? lock_downgrade+0x740/0x740 [ 1563.685725] ? __fget+0x225/0x360 [ 1563.685733] ? do_vfs_ioctl+0xff0/0xff0 [ 1563.685743] ? security_file_ioctl+0x83/0xb0 [ 1563.685754] SyS_ioctl+0x7f/0xb0 [ 1563.696341] Node 0 [ 1563.700835] ? do_vfs_ioctl+0xff0/0xff0 [ 1563.700849] do_syscall_64+0x1d5/0x640 [ 1563.700863] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1563.700871] RIP: 0033:0x4665f9 [ 1563.700875] RSP: 002b:00007f551e7c7188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1563.700884] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1563.700888] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000008 [ 1563.700893] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1563.700898] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1563.700903] R13: 00007ffd0570a9af R14: 00007f551e7c7300 R15: 0000000000022000 [ 1563.708624] 0 [ 1563.714071] DMA free:11016kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1563.715093] 0 [ 1563.748027] (UMEH) [ 1563.748198] 0 [ 1563.750878] 0*64kB [ 1563.755356] 0 [ 1563.786684] lowmem_reserve[]: [ 1563.788148] 0 [ 1563.790083] 0 2717 2718 2718 2718 [ 1563.793885] Node 0 [ 1563.800797] DMA: 2*4kB (UE) 2*8kB (UE) 2*16kB (UE) 3*32kB (UE) 2*64kB (UE) 6*128kB (UE) 5*256kB (UE) 3*512kB (UE) 1*1024kB (E) 3*2048kB (UME) 0*4096kB = 11032kB [ 1563.800868] Node 0 DMA32: 1650*4kB (UME) 691*8kB [ 1563.808464] 0*128kB [ 1563.809533] (UME) [ 1563.813638] 0*256kB [ 1563.818053] 176*16kB [ 1563.824366] Node 0 [ 1563.828228] (ME) [ 1563.838422] DMA32 free:36008kB min:36200kB low:45248kB high:54296kB active_anon:53228kB inactive_anon:44884kB active_file:552kB inactive_file:320kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7456kB pagetables:2792kB bounce:0kB free_pcp:120kB local_pcp:0kB free_cma:0kB [ 1563.841685] 657*32kB [ 1563.852309] 0*512kB [ 1563.857116] (UMEH) [ 1563.865020] lowmem_reserve[]: [ 1563.908732] 0*64kB [ 1563.922081] 0*1024kB [ 1563.926690] 0*128kB [ 1563.927036] 0*2048kB [ 1563.929054] 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 35968kB [ 1563.929073] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB [ 1563.933609] 0*4096kB [ 1563.934326] 0*512kB [ 1563.938214] = 36472kB [ 1563.940478] 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1563.940493] Node 1 Normal: 12*4kB [ 1563.960398] 0 [ 1563.962928] syz-executor.5: [ 1563.965160] 0 [ 1563.967557] page allocation failure: order:0 [ 1563.972863] 0 [ 1563.974297] (UM) [ 1564.021455] 0 [ 1564.022844] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1564.025361] 0 [ 1564.031663] Node 0 [ 1564.049048] (null) [ 1564.053282] Node 0 [ 1564.054594] syz-executor.5 cpuset= [ 1564.056663] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1564.059863] / mems_allowed=0-1 [ 1564.059880] CPU: 0 PID: 9971 Comm: syz-executor.5 Not tainted 4.14.232-syzkaller #0 [ 1564.059886] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1564.059889] Call Trace: [ 1564.059909] dump_stack+0x1b2/0x281 [ 1564.059923] warn_alloc.cold+0x96/0x1cc [ 1564.059938] ? zone_watermark_ok_safe+0x220/0x220 [ 1564.068253] lowmem_reserve[]: [ 1564.070047] ? usleep_range+0x130/0x130 [ 1564.070056] ? try_to_free_pages+0x23f/0x6e0 [ 1564.070066] ? _find_next_bit+0xdb/0x100 [ 1564.070076] ? run_timer_softirq+0x5a0/0x5a0 [ 1564.070091] __alloc_pages_nodemask+0x2127/0x2720 [ 1564.070107] ? lock_acquire+0x170/0x3f0 [ 1564.070121] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1564.070132] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1564.073840] Normal: [ 1564.079300] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1564.079318] alloc_pages_current+0x155/0x260 [ 1564.079332] ion_page_pool_alloc+0x118/0x1b0 [ 1564.079341] ion_system_heap_allocate+0x133/0x8c0 [ 1564.079352] ? _raw_spin_unlock+0x29/0x40 [ 1564.079360] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1564.079369] ? ion_system_contig_heap_create+0x130/0x130 [ 1564.079379] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1564.079388] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1564.079398] ion_alloc+0x27a/0x810 [ 1564.079410] ? ion_dma_buf_release+0x40/0x40 [ 1564.087712] 0 [ 1564.088165] ? __might_fault+0x177/0x1b0 [ 1564.094464] 0 [ 1564.117668] ion_ioctl+0xea/0x1f0 [ 1564.117679] ? ion_query_heaps+0x360/0x360 [ 1564.117690] ? ion_query_heaps+0x360/0x360 [ 1564.117700] do_vfs_ioctl+0x75a/0xff0 [ 1564.117710] ? ioctl_preallocate+0x1a0/0x1a0 [ 1564.117719] ? lock_downgrade+0x740/0x740 [ 1564.117731] ? __fget+0x225/0x360 [ 1564.117738] ? do_vfs_ioctl+0xff0/0xff0 [ 1564.117749] ? security_file_ioctl+0x83/0xb0 [ 1564.117758] SyS_ioctl+0x7f/0xb0 [ 1564.117765] ? do_vfs_ioctl+0xff0/0xff0 [ 1564.117776] do_syscall_64+0x1d5/0x640 [ 1564.117789] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1564.117797] RIP: 0033:0x4665f9 [ 1564.117802] RSP: 002b:00007f551e7c7188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1564.117816] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1564.129842] 0*4kB [ 1564.138665] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000008 [ 1564.138670] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1564.138674] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1564.138679] R13: 00007ffd0570a9af R14: 00007f551e7c7300 R15: 0000000000022000 [ 1564.143529] 7*8kB [ 1564.146200] 0*8kB [ 1564.149410] (M) [ 1564.157345] 0*16kB [ 1564.158411] 273*16kB [ 1564.162497] 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1564.162527] Node 1 Normal: 12*4kB (UM) 8*8kB [ 1564.171710] (UM) [ 1564.179679] 0 [ 1564.184670] 575*32kB [ 1564.185312] 0 [ 1564.191606] (UM) [ 1564.195371] (UM) [ 1564.197495] 9*64kB [ 1564.205877] 280*16kB [ 1564.211291] (M) [ 1564.213150] (UM) [ 1564.218354] 6*128kB [ 1564.226377] 0 [ 1564.239327] (UM) [ 1564.249016] 575*32kB [ 1564.259863] 4*256kB [ 1564.273600] (UM) [ 1564.279056] Node 1 [ 1564.283910] 3*512kB [ 1564.293310] (UM) [ 1564.298444] (UM) [ 1564.301934] Normal free:69628kB min:53696kB low:67120kB high:80544kB active_anon:224kB inactive_anon:11660kB active_file:4kB inactive_file:8kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:128kB pagetables:148kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1564.306841] 0*1024kB [ 1564.314720] lowmem_reserve[]: [ 1564.319035] 0*2048kB [ 1564.324911] 9*64kB [ 1564.328268] 0*4096kB [ 1564.339100] 0 [ 1564.348718] = 26776kB [ 1564.389002] 0 [ 1564.393934] (M) [ 1564.394281] 0 [ 1564.396587] 6*128kB [ 1564.398390] 0 [ 1564.400906] (UM) [ 1564.405082] systemd[1]: Starting Journal Service... [ 1564.407506] 4*256kB [ 1564.422822] systemd[1]: Starting Load/Save RF Kill Switch Status... [ 1564.439589] (UM) [ 1564.478957] 0 [ 1564.479849] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1564.506947] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1564.538977] Node 0 DMA: 2*4kB (UE) 1*8kB (E) 2*16kB (UE) 1*32kB (E) 6*64kB (UE) 7*128kB (UE) 5*256kB (UE) 3*512kB (UE) 1*1024kB (E) 3*2048kB (UME) 0*4096kB = 11344kB [ 1564.550459] 3*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 26896kB [ 1564.585529] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1564.596418] Node 0 DMA32: 856*4kB (E) 389*8kB (UME) 97*16kB (UME) 21*32kB (UEH) 1247*64kB (UMH) 24*128kB (U) 59*256kB (U) 10*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 111864kB [ 1564.611232] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1564.631570] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1564.655534] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1564.673389] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1564.673542] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1564.702246] chnl_net:caif_netlink_parms(): no params data found [ 1564.710832] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1564.718350] Node 1 Normal: 12*4kB (UM) 8*8kB (UM) 280*16kB (UM) 575*32kB (UM) 3986*64kB (UM) 95*128kB (UM) 9*256kB (UM) 7*512kB (UM) 1*1024kB (U) 0*2048kB 0*4096kB = 297168kB [ 1564.728422] 17300 total pagecache pages [ 1564.756603] 17448 total pagecache pages [ 1564.765482] 0 pages in swap cache [ 1564.769428] 0 pages in swap cache [ 1564.773406] Swap cache stats: add 0, delete 0, find 0/0 [ 1564.782768] Swap cache stats: add 0, delete 0, find 0/0 [ 1564.788580] Free swap = 0kB [ 1564.791797] Free swap = 0kB [ 1564.791883] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1564.794911] Total swap = 0kB [ 1564.794921] 2097051 pages RAM [ 1564.794924] 0 pages HighMem/MovableOnly [ 1564.794926] 363849 pages reserved [ 1564.794929] 0 pages cma reserved [ 1564.794936] Out of memory (oom_kill_allocating_task): Kill process 7964 (syz-fuzzer) score 0 or sacrifice child [ 1564.795005] Killed process 9991 (syz-executor.4) total-vm:84924kB, anon-rss:68kB, file-rss:0kB, shmem-rss:0kB [ 1564.795077] Total swap = 0kB [ 1564.795084] 2097051 pages RAM [ 1564.795088] 0 pages HighMem/MovableOnly [ 1564.795091] 363849 pages reserved [ 1564.795094] 0 pages cma reserved [ 1564.820825] oom_reaper: reaped process 9991 (syz-executor.4), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1564.826105] systemd-journald[10038]: File /run/log/journal/04d8c135ee6b410280ba31a58c89679d/system.journal corrupted or uncleanly shut down, renaming and replacing. [ 1564.938665] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1564.947410] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1564.981127] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1565.005061] 18538 total pagecache pages [ 1565.011890] 0 pages in swap cache [ 1565.050955] Swap cache stats: add 0, delete 0, find 0/0 [ 1565.062264] Free swap = 0kB [ 1565.068534] Total swap = 0kB [ 1565.078261] 2097051 pages RAM [ 1565.089161] 0 pages HighMem/MovableOnly [ 1565.094553] 363849 pages reserved [ 1565.094958] syz-executor.4 (9992) used greatest stack depth: 24760 bytes left [ 1565.100366] 0 pages cma reserved [ 1565.573181] oom_reaper: reaped process 9974 (syz-executor.0), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1565.589311] syz-executor.1: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1565.624303] bond0 (unregistering): Released all slaves [ 1565.630550] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 1565.630582] CPU: 1 PID: 9972 Comm: syz-executor.1 Not tainted 4.14.232-syzkaller #0 [ 1565.630588] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1565.630591] Call Trace: [ 1565.630607] dump_stack+0x1b2/0x281 [ 1565.630622] warn_alloc.cold+0x96/0x1cc [ 1565.630633] ? zone_watermark_ok_safe+0x220/0x220 [ 1565.630654] __alloc_pages_nodemask+0x2127/0x2720 [ 1565.630667] ? io_schedule_timeout+0x140/0x140 [ 1565.680034] ? lock_acquire+0x170/0x3f0 [ 1565.684049] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1565.688998] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1565.696098] ? __mutex_unlock_slowpath+0x75/0x770 [ 1565.701139] alloc_pages_current+0x155/0x260 [ 1565.705735] ion_page_pool_alloc+0x118/0x1b0 [ 1565.710346] ion_system_heap_allocate+0x133/0x8c0 [ 1565.710732] systemd-journal invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null) [ 1565.715311] ? _raw_spin_unlock+0x29/0x40 [ 1565.715322] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1565.735179] ? ion_system_contig_heap_create+0x130/0x130 [ 1565.741312] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1565.746432] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1565.751295] ion_alloc+0x27a/0x810 [ 1565.755308] ? ion_dma_buf_release+0x40/0x40 [ 1565.757825] , order=1, oom_score_adj=0 [ 1565.760107] ? __might_fault+0x177/0x1b0 [ 1565.760121] ion_ioctl+0xea/0x1f0 [ 1565.760130] ? ion_query_heaps+0x360/0x360 [ 1565.760142] ? ion_query_heaps+0x360/0x360 [ 1565.764398] systemd-journal cpuset= [ 1565.768729] do_vfs_ioctl+0x75a/0xff0 [ 1565.768740] ? ioctl_preallocate+0x1a0/0x1a0 [ 1565.768750] ? lock_downgrade+0x740/0x740 [ 1565.768763] ? __fget+0x225/0x360 [ 1565.786323] / [ 1565.788568] ? do_vfs_ioctl+0xff0/0xff0 [ 1565.806312] ? security_file_ioctl+0x83/0xb0 [ 1565.808596] mems_allowed=0-1 [ 1565.810859] SyS_ioctl+0x7f/0xb0 [ 1565.817514] ? do_vfs_ioctl+0xff0/0xff0 [ 1565.821828] do_syscall_64+0x1d5/0x640 [ 1565.825717] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1565.830894] RIP: 0033:0x4665f9 [ 1565.834085] RSP: 002b:00007f22b5267188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1565.842022] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1565.849910] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000008 [ 1565.857285] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1565.864666] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1565.871932] R13: 00007ffea96cbc0f R14: 00007f22b5267300 R15: 0000000000022000 [ 1565.879724] CPU: 0 PID: 10038 Comm: systemd-journal Not tainted 4.14.232-syzkaller #0 [ 1565.887797] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1565.897371] warn_alloc_show_mem: 2 callbacks suppressed [ 1565.897375] Mem-Info: [ 1565.897636] Call Trace: [ 1565.903369] active_anon:13718 inactive_anon:16144 isolated_anon:0 [ 1565.903369] active_file:0 inactive_file:17 isolated_file:23 [ 1565.903369] unevictable:0 dirty:9 writeback:0 unstable:0 [ 1565.903369] slab_reclaimable:14934 slab_unreclaimable:114612 [ 1565.903369] mapped:43909 shmem:17150 pagetables:747 bounce:0 [ 1565.903369] free:13839 free_pcp:218 free_cma:0 [ 1565.905931] dump_stack+0x1b2/0x281 [ 1565.909847] Node 0 active_anon:54112kB inactive_anon:52908kB active_file:28kB inactive_file:84kB unevictable:0kB isolated(anon):0kB isolated(file):92kB mapped:148620kB dirty:32kB writeback:0kB shmem:56860kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1565.945788] dump_header+0x178/0x82f [ 1565.945800] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1565.945808] ? ___ratelimit+0x2cd/0x530 [ 1565.945817] oom_kill_process.cold+0x10/0xa40 [ 1565.945834] out_of_memory+0xe3e/0x1190 [ 1565.945845] ? oom_killer_disable+0x1c0/0x1c0 [ 1565.945852] ? mutex_trylock+0x152/0x1a0 [ 1565.945861] __alloc_pages_nodemask+0x23e1/0x2720 [ 1565.945882] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1565.949866] Node 1 active_anon:800kB inactive_anon:11664kB active_file:0kB inactive_file:84kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:26916kB dirty:0kB writeback:0kB shmem:11732kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1565.978447] ? debug_check_no_obj_freed+0x2c0/0x680 [ 1565.978460] ? cache_grow_begin+0x3f/0x700 [ 1565.978469] cache_grow_begin+0x91/0x700 [ 1565.978480] fallback_alloc+0x207/0x2c0 [ 1565.978492] kmem_cache_alloc+0x1e5/0x3c0 [ 1565.978502] getname_flags+0xc8/0x550 [ 1565.978513] do_sys_open+0x1ce/0x410 [ 1565.982372] Node 0 [ 1565.987440] ? filp_open+0x60/0x60 [ 1565.991819] DMA free:10972kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1565.996498] ? do_syscall_64+0x4c/0x640 [ 1566.000964] lowmem_reserve[]: [ 1566.005434] ? do_sys_open+0x410/0x410 [ 1566.010152] 0 [ 1566.014594] do_syscall_64+0x1d5/0x640 [ 1566.019482] 2717 [ 1566.047013] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1566.047021] RIP: 0033:0x7f9756677840 [ 1566.047025] RSP: 002b:00007ffcfa523318 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 1566.047033] RAX: ffffffffffffffda RBX: 00007ffcfa523620 RCX: 00007f9756677840 [ 1566.047037] RDX: 00000000000001a0 RSI: 0000000000080042 RDI: 000055c3d31d7130 [ 1566.047042] RBP: 000000000000000d R08: 000000000000c0c1 R09: 00000000ffffffff [ 1566.047045] R10: 0000000000000069 R11: 0000000000000246 R12: 00000000ffffffff [ 1566.047050] R13: 000055c3d31d3040 R14: 00007ffcfa5235e0 R15: 000055c3d31d79b0 [ 1566.092303] Mem-Info: [ 1566.109702] 2718 [ 1566.117231] active_anon:13701 inactive_anon:16165 isolated_anon:0 [ 1566.117231] active_file:17 inactive_file:17 isolated_file:0 [ 1566.117231] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1566.117231] slab_reclaimable:14929 slab_unreclaimable:114629 [ 1566.117231] mapped:43848 shmem:17169 pagetables:741 bounce:0 [ 1566.117231] free:13847 free_pcp:30 free_cma:0 [ 1566.120979] 2718 2718 [ 1566.120990] Node 0 DMA32 free:17760kB min:36200kB low:45248kB high:54296kB active_anon:54020kB inactive_anon:52996kB active_file:32kB inactive_file:32kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7488kB pagetables:2776kB bounce:0kB free_pcp:136kB local_pcp:0kB free_cma:0kB [ 1566.121010] lowmem_reserve[]: 0 0 0 0 0 [ 1566.121029] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1566.121046] lowmem_reserve[]: 0 0 0 0 0 [ 1566.121067] Node 1 Normal free:26656kB min:53696kB low:67120kB high:80544kB active_anon:784kB inactive_anon:11664kB active_file:36kB inactive_file:36kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:224kB pagetables:188kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1566.121086] lowmem_reserve[]: 0 0 0 0 0 [ 1566.121106] Node 0 DMA: 1*4kB (E) 1*8kB (E) 1*16kB (E) 2*32kB (UE) 2*64kB (UE) 6*128kB (UE) 5*256kB (UE) 3*512kB (UE) 1*1024kB (E) 3*2048kB (UME) 0*4096kB = 10972kB [ 1566.121182] Node 0 DMA32: 1681*4kB (UMEH) 732*8kB (UME) 180*16kB (ME) 34*32kB (MEH) 11*64kB (MEH) 1*128kB (M) 0*256kB 1*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 17892kB [ 1566.121251] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1566.121297] Node 1 Normal: 14*4kB (UM) 16*8kB (UM) 18*16kB (UM) 19*32kB (UM) 22*64kB (UM) 11*128kB (M) 5*256kB (M) 42*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 26680kB [ 1566.121372] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1566.121378] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1566.121385] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1566.121391] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1566.121395] 17203 total pagecache pages [ 1566.121404] 0 pages in swap cache [ 1566.121409] Swap cache stats: add 0, delete 0, find 0/0 [ 1566.121413] Free swap = 0kB [ 1566.121416] Total swap = 0kB [ 1566.121422] 2097051 pages RAM [ 1566.121426] 0 pages HighMem/MovableOnly [ 1566.121429] 363849 pages reserved [ 1566.121432] 0 pages cma reserved [ 1566.128659] syz-executor.0: [ 1566.133934] Node 0 active_anon:54020kB inactive_anon:52996kB active_file:32kB inactive_file:32kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:148564kB dirty:0kB writeback:0kB shmem:56944kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1566.135862] page allocation failure: order:0 [ 1566.139641] Node 1 active_anon:784kB inactive_anon:11664kB active_file:36kB inactive_file:36kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:26828kB dirty:0kB writeback:0kB shmem:11732kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1566.139645] Node 0 DMA free:10972kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1566.139663] lowmem_reserve[]: [ 1566.147591] syz-executor.1: [ 1566.160102] 0 [ 1566.168604] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1566.179363] 2717 [ 1566.185774] (null) [ 1566.188250] 2718 [ 1566.190784] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 1566.190807] CPU: 1 PID: 9974 Comm: syz-executor.0 Not tainted 4.14.232-syzkaller #0 [ 1566.190813] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1566.190816] Call Trace: [ 1566.190836] dump_stack+0x1b2/0x281 [ 1566.190850] warn_alloc.cold+0x96/0x1cc [ 1566.190862] ? zone_watermark_ok_safe+0x220/0x220 [ 1566.190873] ? usleep_range+0x130/0x130 [ 1566.190892] ? queue_work_on+0x10d/0x1d0 [ 1566.251648] page allocation failure: order:0 [ 1566.258406] ? _find_next_bit+0xdb/0x100 [ 1566.272993] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1566.288559] ? run_timer_softirq+0x5a0/0x5a0 [ 1566.288576] __alloc_pages_nodemask+0x2127/0x2720 [ 1566.288594] ? lock_acquire+0x170/0x3f0 [ 1566.288608] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1566.313381] (null) [ 1566.323931] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1566.323947] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1566.323965] alloc_pages_current+0x155/0x260 [ 1566.323976] ion_page_pool_alloc+0x118/0x1b0 [ 1566.328930] syz-executor.1 cpuset= [ 1566.343250] ion_system_heap_allocate+0x133/0x8c0 [ 1566.343261] ? ion_alloc+0x187/0x810 [ 1566.343271] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1566.343279] ? ion_system_contig_heap_create+0x130/0x130 [ 1566.343287] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1566.343302] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1566.358688] 2718 [ 1566.369743] ion_alloc+0x204/0x810 [ 1566.369757] ? ion_dma_buf_release+0x40/0x40 [ 1566.369769] ? __might_fault+0x177/0x1b0 [ 1566.369780] ion_ioctl+0xea/0x1f0 [ 1566.385181] 2718 [ 1566.394503] ? ion_query_heaps+0x360/0x360 [ 1566.394516] ? ion_query_heaps+0x360/0x360 [ 1566.394529] do_vfs_ioctl+0x75a/0xff0 [ 1566.405567] / [ 1566.414871] ? ioctl_preallocate+0x1a0/0x1a0 [ 1566.423877] mems_allowed=0-1 [ 1566.428309] ? lock_downgrade+0x740/0x740 [ 1566.437648] ? __fget+0x225/0x360 [ 1566.448538] Node 0 [ 1566.451763] ? do_vfs_ioctl+0xff0/0xff0 [ 1566.455555] DMA32 free:18020kB min:36200kB low:45248kB high:54296kB active_anon:54020kB inactive_anon:52996kB active_file:32kB inactive_file:32kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7488kB pagetables:2776kB bounce:0kB free_pcp:188kB local_pcp:120kB free_cma:0kB [ 1566.459183] ? security_file_ioctl+0x83/0xb0 [ 1566.459193] SyS_ioctl+0x7f/0xb0 [ 1566.459201] ? do_vfs_ioctl+0xff0/0xff0 [ 1566.459212] do_syscall_64+0x1d5/0x640 [ 1566.459227] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1566.478589] lowmem_reserve[]: [ 1566.491302] RIP: 0033:0x4665f9 [ 1566.491307] RSP: 002b:00007fe4a6925188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1566.491317] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1566.491326] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000007 [ 1566.508526] 0 [ 1566.523468] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1566.523474] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1566.523479] R13: 00007ffe5881209f R14: 00007fe4a6925300 R15: 0000000000022000 [ 1566.649159] syz-executor.3: [ 1566.652576] 0 [ 1566.657652] page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1566.661316] 0 [ 1566.671599] CPU: 1 PID: 9972 Comm: syz-executor.1 Not tainted 4.14.232-syzkaller #0 [ 1566.688685] 0 [ 1566.689421] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1566.695417] 0 [ 1566.701566] Call Trace: [ 1566.701590] dump_stack+0x1b2/0x281 [ 1566.701603] warn_alloc.cold+0x96/0x1cc [ 1566.701613] ? zone_watermark_ok_safe+0x220/0x220 [ 1566.701623] ? usleep_range+0x130/0x130 [ 1566.701631] ? try_to_free_pages+0x23f/0x6e0 [ 1566.701645] ? _find_next_bit+0xdb/0x100 [ 1566.728843] ? run_timer_softirq+0x5a0/0x5a0 [ 1566.732984] Node 0 [ 1566.736520] __alloc_pages_nodemask+0x2127/0x2720 [ 1566.748524] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1566.751250] ? lock_acquire+0x170/0x3f0 [ 1566.752973] lowmem_reserve[]: [ 1566.757908] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1566.778550] 0 [ 1566.804097] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1566.804114] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1566.804131] alloc_pages_current+0x155/0x260 [ 1566.804140] ion_page_pool_alloc+0x118/0x1b0 [ 1566.804149] ion_system_heap_allocate+0x133/0x8c0 [ 1566.804159] ? _raw_spin_unlock+0x29/0x40 [ 1566.804166] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1566.804174] ? ion_system_contig_heap_create+0x130/0x130 [ 1566.804183] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1566.804191] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1566.804201] ion_alloc+0x27a/0x810 [ 1566.838523] 0 [ 1566.840639] ? ion_dma_buf_release+0x40/0x40 [ 1566.847976] 0 [ 1566.855625] ? __might_fault+0x177/0x1b0 [ 1566.855636] ion_ioctl+0xea/0x1f0 [ 1566.855645] ? ion_query_heaps+0x360/0x360 [ 1566.855656] ? ion_query_heaps+0x360/0x360 [ 1566.868507] 0 [ 1566.872590] do_vfs_ioctl+0x75a/0xff0 [ 1566.898503] 0 [ 1566.906488] ? ioctl_preallocate+0x1a0/0x1a0 [ 1566.918379] ? lock_downgrade+0x740/0x740 [ 1566.918392] ? __fget+0x225/0x360 [ 1566.918400] ? do_vfs_ioctl+0xff0/0xff0 [ 1566.918410] ? security_file_ioctl+0x83/0xb0 [ 1566.918420] SyS_ioctl+0x7f/0xb0 [ 1566.938504] Node 1 [ 1566.939397] ? do_vfs_ioctl+0xff0/0xff0 [ 1566.943794] Normal free:171192kB min:53696kB low:67120kB high:80544kB active_anon:784kB inactive_anon:11664kB active_file:36kB inactive_file:36kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:224kB pagetables:188kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1566.947838] do_syscall_64+0x1d5/0x640 [ 1566.968510] lowmem_reserve[]: [ 1566.985602] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1566.985610] RIP: 0033:0x4665f9 [ 1566.985617] RSP: 002b:00007f22b5267188 EFLAGS: 00000246 [ 1567.008508] 0 [ 1567.009753] ORIG_RAX: 0000000000000010 [ 1567.014346] 0 [ 1567.019296] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1567.019301] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000008 [ 1567.019305] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1567.019310] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1567.019315] R13: 00007ffea96cbc0f R14: 00007f22b5267300 R15: 0000000000022000 [ 1567.211502] (null) [ 1567.215485] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 1567.238601] CPU: 1 PID: 9975 Comm: syz-executor.3 Not tainted 4.14.232-syzkaller #0 [ 1567.246750] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1567.256442] Call Trace: [ 1567.259158] dump_stack+0x1b2/0x281 [ 1567.262963] warn_alloc.cold+0x96/0x1cc [ 1567.267199] ? zone_watermark_ok_safe+0x220/0x220 [ 1567.272421] ? usleep_range+0x130/0x130 [ 1567.276485] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1567.281683] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1567.286711] ? run_timer_softirq+0x5a0/0x5a0 [ 1567.291313] __alloc_pages_nodemask+0x2127/0x2720 [ 1567.296266] ? lock_acquire+0x170/0x3f0 [ 1567.300331] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1567.305169] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1567.309685] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1567.315170] ? ion_page_pool_remove+0x82/0x280 [ 1567.319758] alloc_pages_current+0x155/0x260 [ 1567.324193] ion_page_pool_alloc+0x118/0x1b0 [ 1567.328616] ion_system_heap_allocate+0x133/0x8c0 [ 1567.333465] ? _raw_spin_unlock+0x29/0x40 [ 1567.337612] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1567.342623] ? ion_system_contig_heap_create+0x130/0x130 [ 1567.348156] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1567.353281] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1567.358554] ion_alloc+0x27a/0x810 [ 1567.362182] ? ion_dma_buf_release+0x40/0x40 [ 1567.366685] ? __might_fault+0x177/0x1b0 [ 1567.370745] ion_ioctl+0xea/0x1f0 [ 1567.374195] ? ion_query_heaps+0x360/0x360 [ 1567.378695] ? ion_query_heaps+0x360/0x360 [ 1567.382929] do_vfs_ioctl+0x75a/0xff0 [ 1567.386813] ? ioctl_preallocate+0x1a0/0x1a0 [ 1567.391334] ? lock_downgrade+0x740/0x740 [ 1567.395480] ? __fget+0x225/0x360 [ 1567.398928] ? do_vfs_ioctl+0xff0/0xff0 [ 1567.402929] ? security_file_ioctl+0x83/0xb0 [ 1567.407334] SyS_ioctl+0x7f/0xb0 [ 1567.410796] ? do_vfs_ioctl+0xff0/0xff0 [ 1567.414768] do_syscall_64+0x1d5/0x640 [ 1567.418763] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1567.423955] RIP: 0033:0x4665f9 [ 1567.427239] RSP: 002b:00007fd59d707188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1567.428496] 0 [ 1567.434962] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1567.434969] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000006 [ 1567.436769] 0 [ 1567.444022] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1567.444027] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1567.444032] R13: 00007ffcfd15ebff R14: 00007fd59d707300 R15: 0000000000022000 [ 1567.569175] 0 [ 1567.571036] Node 0 DMA: 1*4kB (E) 1*8kB (E) 1*16kB (E) 2*32kB (UE) 2*64kB (UE) 6*128kB (UE) 5*256kB (UE) 3*512kB (UE) 1*1024kB (E) 3*2048kB (UME) 0*4096kB = 10972kB [ 1567.629029] Node 0 DMA32: 997*4kB (UME) 629*8kB (UME) 286*16kB (UME) 1165*32kB (UME) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 50876kB [ 1567.667767] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1567.682262] syz-executor.0: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1567.696282] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 1567.702545] CPU: 1 PID: 9974 Comm: syz-executor.0 Not tainted 4.14.232-syzkaller #0 [ 1567.710699] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1567.711511] Node 1 [ 1567.720434] Call Trace: [ 1567.720455] dump_stack+0x1b2/0x281 [ 1567.720467] warn_alloc.cold+0x96/0x1cc [ 1567.720490] ? zone_watermark_ok_safe+0x220/0x220 [ 1567.737950] __alloc_pages_nodemask+0x2127/0x2720 [ 1567.742812] ? lock_acquire+0x170/0x3f0 [ 1567.746976] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1567.748479] Normal: 16*4kB [ 1567.751910] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1567.751922] ? __mutex_unlock_slowpath+0x75/0x770 [ 1567.755211] (UM) [ 1567.760700] alloc_pages_current+0x155/0x260 [ 1567.760713] ion_page_pool_alloc+0x118/0x1b0 [ 1567.760723] ion_system_heap_allocate+0x133/0x8c0 [ 1567.760734] ? _raw_spin_unlock+0x29/0x40 [ 1567.760744] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1567.787279] 19*8kB [ 1567.791530] ? ion_system_contig_heap_create+0x130/0x130 [ 1567.791541] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1567.791555] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1567.809961] ion_alloc+0x27a/0x810 [ 1567.813514] ? ion_dma_buf_release+0x40/0x40 [ 1567.818174] ? __might_fault+0x177/0x1b0 [ 1567.818476] (UM) 22*16kB [ 1567.822945] ion_ioctl+0xea/0x1f0 [ 1567.822955] ? ion_query_heaps+0x360/0x360 [ 1567.825876] (UM) [ 1567.829315] ? ion_query_heaps+0x360/0x360 [ 1567.829324] do_vfs_ioctl+0x75a/0xff0 [ 1567.829335] ? ioctl_preallocate+0x1a0/0x1a0 [ 1567.829343] ? lock_downgrade+0x740/0x740 [ 1567.829355] ? __fget+0x225/0x360 [ 1567.829365] ? do_vfs_ioctl+0xff0/0xff0 [ 1567.834158] 145*32kB [ 1567.835894] ? security_file_ioctl+0x83/0xb0 [ 1567.848486] (UM) [ 1567.848718] SyS_ioctl+0x7f/0xb0 [ 1567.853290] 21*64kB [ 1567.856730] ? do_vfs_ioctl+0xff0/0xff0 [ 1567.878474] (M) 13*128kB [ 1567.879614] do_syscall_64+0x1d5/0x640 [ 1567.879620] (UM) [ 1567.882379] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1567.886341] 7*256kB [ 1567.888497] RIP: 0033:0x4665f9 [ 1567.888501] RSP: 002b:00007fe4a6925188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1567.888510] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1567.888515] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000007 [ 1567.888519] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1567.888526] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1567.908474] (UM) [ 1567.916079] R13: 00007ffe5881209f R14: 00007fe4a6925300 R15: 0000000000022000 [ 1567.938471] 33*512kB [ 1567.941863] warn_alloc_show_mem: 1 callbacks suppressed [ 1567.941866] Mem-Info: [ 1567.952151] (UM) [ 1567.956172] active_anon:13752 inactive_anon:16165 isolated_anon:0 [ 1567.956172] active_file:467 inactive_file:462 isolated_file:0 [ 1567.956172] unevictable:0 dirty:42 writeback:0 unstable:0 [ 1567.956172] slab_reclaimable:14926 slab_unreclaimable:114429 [ 1567.956172] mapped:53424 shmem:17169 pagetables:782 bounce:0 [ 1567.956172] free:61073 free_pcp:412 free_cma:0 [ 1567.968465] 0*1024kB [ 1567.995958] Node 0 active_anon:54224kB inactive_anon:52996kB active_file:1832kB inactive_file:1808kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:185524kB dirty:160kB writeback:0kB shmem:56944kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1568.027372] Node 1 active_anon:784kB inactive_anon:11664kB active_file:36kB inactive_file:40kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:28172kB dirty:8kB writeback:0kB shmem:11732kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1568.055782] 0*2048kB 0*4096kB = 26904kB [ 1568.055905] Node 0 DMA free:11000kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1568.066421] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1568.087450] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1568.115445] Node 0 DMA32 free:208968kB min:36200kB low:45248kB high:54296kB active_anon:54224kB inactive_anon:52996kB active_file:2332kB inactive_file:2208kB unevictable:0kB writepending:160kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7488kB pagetables:2892kB bounce:0kB free_pcp:912kB local_pcp:244kB free_cma:0kB [ 1568.145829] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1568.176787] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1568.186140] lowmem_reserve[]: 0 0 0 0 0 [ 1568.190698] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1568.217975] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1568.223570] lowmem_reserve[]: 0 0 0 0 0 [ 1568.235872] 18813 total pagecache pages [ 1568.244860] 0 pages in swap cache [ 1568.248603] Node 1 Normal free:159112kB min:53696kB low:67120kB high:80544kB active_anon:784kB inactive_anon:11664kB active_file:36kB inactive_file:40kB unevictable:0kB writepending:8kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:256kB pagetables:236kB bounce:0kB free_pcp:632kB local_pcp:0kB free_cma:0kB [ 1568.258523] Swap cache stats: add 0, delete 0, find 0/0 [ 1568.298458] Free swap = 0kB [ 1568.301627] Total swap = 0kB [ 1568.304652] 2097051 pages RAM [ 1568.307998] 0 pages HighMem/MovableOnly [ 1568.338468] 363849 pages reserved [ 1568.338974] lowmem_reserve[]: [ 1568.342728] 0 pages cma reserved [ 1568.342735] 0 [ 1568.346009] Out of memory (oom_kill_allocating_task): Kill process 10038 (systemd-journal) score 0 or sacrifice child [ 1568.358546] 0 0 0 0 [ 1568.364777] Node 0 DMA: 11*4kB (UE) 8*8kB (UE) 1*16kB (E) 2*32kB (UE) 2*64kB (UE) 6*128kB (UE) 5*256kB (UE) 3*512kB (UE) 1*1024kB (E) 3*2048kB (UME) 0*4096kB = 11068kB [ 1568.398465] Node 0 DMA32: 1648*4kB (UE) [ 1568.398489] Killed process 10038 (systemd-journal) total-vm:46096kB, anon-rss:464kB, file-rss:4kB, shmem-rss:1292kB [ 1568.400648] oom_reaper: reaped process 10038 (systemd-journal), now anon-rss:0kB, file-rss:0kB, shmem-rss:1292kB [ 1568.412362] 9674*8kB (UME) 3801*16kB (UME) 2345*32kB (UE) 492*64kB (UM) 42*128kB (UM) 79*256kB (UM) 37*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 295872kB [ 1568.478525] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1568.492722] systemd[1]: systemd-journald.service: Main process exited, code=killed, status=9/KILL [ 1568.502469] Node 1 Normal: 1018*4kB (UM) 1460*8kB (UM) 1638*16kB (UM) 851*32kB (UM) 4202*64kB (UM) 469*128kB (UM) 246*256kB (UM) 63*512kB (UM) 10*1024kB (U) 0*2048kB 0*4096kB = 503624kB [ 1568.514514] systemd[1]: Failed to start Journal Service. [ 1568.535925] systemd[1]: Dependency failed for Flush Journal to Persistent Storage. [ 1568.538515] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1568.553533] systemd[1]: systemd-journal-flush.service: Job systemd-journal-flush.service/start failed with result 'dependency'. [ 1568.571104] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1568.581847] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1568.594367] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1568.605870] systemd[1]: systemd-journald.service: Unit entered failed state. [ 1568.616096] 19824 total pagecache pages [ 1568.620759] systemd[1]: systemd-journald.service: Failed with result 'signal'. [ 1568.632212] 0 pages in swap cache [ 1568.635695] Swap cache stats: add 0, delete 0, find 0/0 [ 1568.641927] systemd[1]: systemd-journald.service: Service has no hold-off time, scheduling restart. [ 1568.655050] systemd[1]: Stopped Journal Service. [ 1568.660044] Free swap = 0kB [ 1568.663422] Total swap = 0kB [ 1568.666457] 2097051 pages RAM [ 1568.678528] 0 pages HighMem/MovableOnly [ 1568.682712] 363849 pages reserved [ 1568.683226] systemd[1]: Starting Journal Service... [ 1568.686253] 0 pages cma reserved 09:39:32 executing program 3: socket(0x11, 0x2, 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000004980), 0x0, 0x0) getsockopt$X25_QBITINCL(r0, 0x106, 0x1, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x4, 0x7, 0x7, 0x6, 0xa, @remote, @private2={0xfc, 0x2, '\x00', 0x1}, 0x700, 0x20, 0x9, 0x5f3b}}) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000004980), 0x0, 0x0) getsockopt$X25_QBITINCL(r1, 0x106, 0x1, 0x0, 0x0) r2 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000100)={0x80000004, 0x7}) [ 1568.870918] systemd-journald[10136]: File /run/log/journal/04d8c135ee6b410280ba31a58c89679d/system.journal corrupted or uncleanly shut down, renaming and replacing. [ 1569.182592] syz-executor.3: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1569.206983] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 1569.224817] CPU: 0 PID: 10139 Comm: syz-executor.3 Not tainted 4.14.232-syzkaller #0 [ 1569.233719] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1569.244239] Call Trace: [ 1569.247190] dump_stack+0x1b2/0x281 [ 1569.250900] warn_alloc.cold+0x96/0x1cc [ 1569.255082] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1569.261474] ? zone_watermark_ok_safe+0x220/0x220 [ 1569.266313] __alloc_pages_nodemask+0x2127/0x2720 [ 1569.271254] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1569.277063] ? lock_acquire+0x170/0x3f0 [ 1569.281027] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1569.285954] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1569.291877] ? __mutex_unlock_slowpath+0x75/0x770 [ 1569.297878] alloc_pages_current+0x155/0x260 [ 1569.302487] ion_page_pool_alloc+0x118/0x1b0 [ 1569.307529] ion_system_heap_allocate+0x133/0x8c0 [ 1569.313242] ? ion_alloc+0x187/0x810 [ 1569.317226] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1569.325141] ? ion_system_contig_heap_create+0x130/0x130 [ 1569.331241] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1569.337163] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1569.342204] ion_alloc+0x204/0x810 [ 1569.346293] ? ion_dma_buf_release+0x40/0x40 [ 1569.350780] ? __might_fault+0x177/0x1b0 [ 1569.355549] ion_ioctl+0xea/0x1f0 [ 1569.359108] ? ion_query_heaps+0x360/0x360 [ 1569.363880] ? ion_query_heaps+0x360/0x360 [ 1569.368816] do_vfs_ioctl+0x75a/0xff0 [ 1569.372709] ? ioctl_preallocate+0x1a0/0x1a0 [ 1569.377798] ? lock_downgrade+0x740/0x740 [ 1569.381932] ? __fget+0x225/0x360 [ 1569.385454] ? do_vfs_ioctl+0xff0/0xff0 [ 1569.389427] ? security_file_ioctl+0x83/0xb0 [ 1569.393820] SyS_ioctl+0x7f/0xb0 [ 1569.397189] ? do_vfs_ioctl+0xff0/0xff0 [ 1569.401324] do_syscall_64+0x1d5/0x640 [ 1569.405516] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1569.411274] RIP: 0033:0x4665f9 [ 1569.414455] RSP: 002b:00007fd59d707188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1569.422444] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1569.430140] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000006 [ 1569.437707] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1569.445100] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1569.452620] R13: 00007ffcfd15ebff R14: 00007fd59d707300 R15: 0000000000022000 [ 1569.495318] rs:main Q:Reg invoked oom-killer: gfp_mask=0x1c200ca(GFP_HIGHUSER_MOVABLE|__GFP_WRITE), nodemask=(null), order=0, oom_score_adj=0 [ 1569.526135] rs:main Q:Reg cpuset=/ mems_allowed=0-1 [ 1569.540950] CPU: 1 PID: 10132 Comm: rs:main Q:Reg Not tainted 4.14.232-syzkaller #0 [ 1569.549075] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1569.558607] Call Trace: [ 1569.561274] dump_stack+0x1b2/0x281 [ 1569.564982] dump_header+0x178/0x82f [ 1569.568805] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1569.574160] ? ___ratelimit+0x2cd/0x530 [ 1569.578136] oom_kill_process.cold+0x10/0xa40 [ 1569.582618] out_of_memory+0xe3e/0x1190 [ 1569.586761] ? oom_killer_disable+0x1c0/0x1c0 [ 1569.591238] ? mutex_trylock+0x152/0x1a0 [ 1569.595747] __alloc_pages_nodemask+0x23e1/0x2720 [ 1569.600787] ? trace_hardirqs_on+0x10/0x10 [ 1569.605380] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1569.610795] ? __radix_tree_lookup+0x1b5/0x2e0 [ 1569.615572] alloc_pages_current+0x155/0x260 [ 1569.620356] pagecache_get_page+0x3f5/0xab0 [ 1569.625099] grab_cache_page_write_begin+0x63/0x90 [ 1569.630101] ext4_da_write_begin+0x249/0xe70 [ 1569.634707] ? ext4_write_begin+0x1260/0x1260 [ 1569.639211] generic_perform_write+0x1c9/0x420 [ 1569.643780] ? __mnt_drop_write_file+0x5f/0x90 [ 1569.648364] ? filemap_page_mkwrite+0x2d0/0x2d0 [ 1569.653294] ? current_time+0xb0/0xb0 [ 1569.657385] ? ext4_file_write_iter+0x1cc/0xd20 [ 1569.662036] __generic_file_write_iter+0x227/0x590 [ 1569.667206] ext4_file_write_iter+0x276/0xd20 [ 1569.671857] ? aa_file_perm+0x304/0xab0 [ 1569.676087] ? ext4_file_read_iter+0x330/0x330 [ 1569.680940] ? trace_hardirqs_on+0x10/0x10 [ 1569.685635] ? iov_iter_init+0xa6/0x1c0 [ 1569.691974] __vfs_write+0x44c/0x630 [ 1569.696064] ? kernel_read+0x110/0x110 [ 1569.700033] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1569.705477] vfs_write+0x17f/0x4d0 [ 1569.709060] SyS_write+0xf2/0x210 [ 1569.712841] ? SyS_read+0x210/0x210 [ 1569.716817] ? __do_page_fault+0x159/0xad0 [ 1569.721388] ? do_syscall_64+0x4c/0x640 [ 1569.725435] ? SyS_read+0x210/0x210 [ 1569.729046] do_syscall_64+0x1d5/0x640 [ 1569.732935] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1569.738214] RIP: 0033:0x7f81087bc1cd [ 1569.742009] RSP: 002b:00007f8105d77590 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 1569.749701] RAX: ffffffffffffffda RBX: 00007f80fc0262b0 RCX: 00007f81087bc1cd [ 1569.756958] RDX: 000000000000005a RSI: 00007f80fc0262b0 RDI: 0000000000000006 [ 1569.764386] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1569.772029] R10: 0000000000000000 R11: 0000000000000293 R12: 00007f80fc026030 [ 1569.779505] R13: 00007f8105d775b0 R14: 000055d6d15303a0 R15: 000000000000005a [ 1569.804463] warn_alloc_show_mem: 2 callbacks suppressed [ 1569.804468] Mem-Info: [ 1569.809036] Mem-Info: [ 1569.815177] active_anon:13796 inactive_anon:18189 isolated_anon:0 [ 1569.815177] active_file:70 inactive_file:39 isolated_file:26 [ 1569.815177] unevictable:0 dirty:5 writeback:0 unstable:0 [ 1569.815177] slab_reclaimable:14908 slab_unreclaimable:114177 [ 1569.815177] mapped:52658 shmem:19194 pagetables:758 bounce:0 [ 1569.815177] free:13908 free_pcp:240 free_cma:0 [ 1569.815656] active_anon:13796 inactive_anon:18189 isolated_anon:0 [ 1569.815656] active_file:70 inactive_file:39 isolated_file:26 [ 1569.815656] unevictable:0 dirty:5 writeback:0 unstable:0 [ 1569.815656] slab_reclaimable:14908 slab_unreclaimable:114177 [ 1569.815656] mapped:52658 shmem:19194 pagetables:758 bounce:0 [ 1569.815656] free:13908 free_pcp:240 free_cma:0 [ 1569.854142] Node 0 active_anon:54400kB inactive_anon:61092kB active_file:244kB inactive_file:128kB unevictable:0kB isolated(anon):0kB isolated(file):104kB mapped:182460kB dirty:12kB writeback:0kB shmem:65044kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1569.951325] Node 0 active_anon:54420kB inactive_anon:61124kB active_file:52kB inactive_file:48kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:181960kB dirty:0kB writeback:0kB shmem:65136kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1569.987191] Node 1 active_anon:832kB inactive_anon:11664kB active_file:4kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:28172kB dirty:0kB writeback:0kB shmem:11732kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1570.026129] Node 0 DMA free:10956kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1570.048120] Node 1 active_anon:832kB inactive_anon:11664kB active_file:4kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:28172kB dirty:0kB writeback:0kB shmem:11732kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1570.066645] lowmem_reserve[]: [ 1570.094031] Node 0 DMA free:10956kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1570.097289] 0 [ 1570.128946] syz-executor.0: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1570.138874] 2717 2718 2718 2718 [ 1570.147245] Node 0 DMA32 free:17980kB min:36200kB low:45248kB high:54296kB active_anon:54420kB inactive_anon:61124kB active_file:104kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7520kB pagetables:2816kB bounce:0kB free_pcp:120kB local_pcp:0kB free_cma:0kB [ 1570.152707] lowmem_reserve[]: [ 1570.188698] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 1570.194901] lowmem_reserve[]: 0 [ 1570.196950] CPU: 1 PID: 9974 Comm: syz-executor.0 Not tainted 4.14.232-syzkaller #0 [ 1570.196957] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1570.200255] 0 [ 1570.208354] Call Trace: [ 1570.208375] dump_stack+0x1b2/0x281 [ 1570.208388] warn_alloc.cold+0x96/0x1cc [ 1570.208401] ? zone_watermark_ok_safe+0x220/0x220 [ 1570.217916] 0 [ 1570.219698] ? usleep_range+0x130/0x130 [ 1570.219707] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1570.219717] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1570.219727] ? run_timer_softirq+0x5a0/0x5a0 [ 1570.222283] 0 [ 1570.226123] __alloc_pages_nodemask+0x2127/0x2720 [ 1570.230188] 0 [ 1570.235172] ? lock_acquire+0x170/0x3f0 [ 1570.241872] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1570.241881] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1570.241897] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1570.247414] Node 0 [ 1570.252593] alloc_pages_current+0x155/0x260 [ 1570.252604] ion_page_pool_alloc+0x118/0x1b0 [ 1570.252614] ion_system_heap_allocate+0x133/0x8c0 [ 1570.257195] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1570.259201] ? _raw_spin_unlock+0x29/0x40 [ 1570.259210] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1570.259220] ? ion_system_contig_heap_create+0x130/0x130 [ 1570.264494] lowmem_reserve[]: [ 1570.266647] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1570.271184] 0 [ 1570.276430] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1570.280949] 0 [ 1570.286460] ion_alloc+0x27a/0x810 [ 1570.288813] 0 [ 1570.293485] ? ion_dma_buf_release+0x40/0x40 [ 1570.298362] 0 [ 1570.303164] ? __might_fault+0x177/0x1b0 [ 1570.328529] 0 [ 1570.332658] ion_ioctl+0xea/0x1f0 [ 1570.344090] ? ion_query_heaps+0x360/0x360 [ 1570.344101] ? ion_query_heaps+0x360/0x360 [ 1570.344111] do_vfs_ioctl+0x75a/0xff0 [ 1570.344122] ? ioctl_preallocate+0x1a0/0x1a0 [ 1570.347395] Node 1 [ 1570.352502] ? lock_downgrade+0x740/0x740 [ 1570.352516] ? __fget+0x225/0x360 [ 1570.352525] ? do_vfs_ioctl+0xff0/0xff0 [ 1570.352537] ? security_file_ioctl+0x83/0xb0 [ 1570.354562] Normal free:26716kB min:53696kB low:67120kB high:80544kB active_anon:832kB inactive_anon:11664kB active_file:4kB inactive_file:4kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:256kB pagetables:240kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1570.359404] SyS_ioctl+0x7f/0xb0 [ 1570.359414] ? do_vfs_ioctl+0xff0/0xff0 [ 1570.359424] do_syscall_64+0x1d5/0x640 [ 1570.359438] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1570.359456] RIP: 0033:0x4665f9 [ 1570.361241] lowmem_reserve[]: [ 1570.364957] RSP: 002b:00007fe4a6925188 EFLAGS: 00000246 [ 1570.366849] 0 [ 1570.371258] ORIG_RAX: 0000000000000010 [ 1570.371265] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1570.371270] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000007 [ 1570.371275] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1570.371280] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1570.371285] R13: 00007ffe5881209f R14: 00007fe4a6925300 R15: 0000000000022000 [ 1570.379900] 0 [ 1570.399064] 0 [ 1570.407124] 2717 [ 1570.425509] 0 [ 1570.454130] 2718 [ 1570.470135] 0 [ 1570.477409] 2718 [ 1570.497639] 0 [ 1570.512712] 2718 [ 1570.538972] Node 0 DMA32 free:17980kB min:36200kB low:45248kB high:54296kB active_anon:54420kB inactive_anon:61124kB active_file:104kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7520kB pagetables:2816kB bounce:0kB free_pcp:120kB local_pcp:120kB free_cma:0kB [ 1570.554431] Node 0 [ 1570.579102] lowmem_reserve[]: 0 0 0 0 0 [ 1570.585703] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1570.590535] DMA: [ 1570.621218] lowmem_reserve[]: 0 0 0 0 0 [ 1570.628010] Node 1 Normal free:26716kB min:53696kB low:67120kB high:80544kB active_anon:832kB inactive_anon:11664kB active_file:4kB inactive_file:4kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:256kB pagetables:240kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1570.629432] 1*4kB (E) 1*8kB (E) 2*16kB (UE) 1*32kB (E) 2*64kB (UE) 6*128kB (UE) 5*256kB (UE) 3*512kB (UE) 1*1024kB (E) 3*2048kB (UME) 0*4096kB = 10956kB [ 1570.674978] lowmem_reserve[]: [ 1570.692493] Node 0 DMA32: 1601*4kB (ME) 688*8kB (UME) 163*16kB (ME) 25*32kB (UME) 4*64kB (UM) 2*128kB (UM) 1*256kB (M) 4*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 18132kB [ 1570.703087] 0 0 0 0 0 [ 1570.745258] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1570.753591] Node 0 DMA: 1*4kB (E) 1*8kB (E) 2*16kB (UE) 1*32kB (E) 2*64kB (UE) 6*128kB (UE) 5*256kB (UE) 3*512kB (UE) 1*1024kB (E) 3*2048kB (UME) 0*4096kB = 10956kB [ 1570.798538] Node 1 Normal: 4*4kB (UM) 3*8kB (UM) 2*16kB (UM) 2*32kB (UM) 1631*64kB (U) 133*128kB (UM) 53*256kB (UM) 47*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 159176kB [ 1570.828154] Node 0 DMA32: 1571*4kB (UME) 688*8kB (UME) 163*16kB (ME) 26*32kB (UME) 1821*64kB (UM) 212*128kB (UM) 57*256kB (UM) 4*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 175548kB [ 1570.858311] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1570.867704] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1570.892447] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1570.898314] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1570.926437] Node 1 Normal: 4*4kB (UM) 3*8kB (UM) 2*16kB (UM) 2*32kB (UM) 5736*64kB (U) 643*128kB (UM) 85*256kB (UM) 60*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 502024kB [ 1570.946917] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1570.956661] 20076 total pagecache pages [ 1570.956692] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1570.988289] 0 pages in swap cache [ 1570.991423] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1570.992015] Swap cache stats: add 0, delete 0, find 0/0 [ 1570.992019] Free swap = 0kB [ 1570.992023] Total swap = 0kB [ 1570.992032] 2097051 pages RAM [ 1571.001151] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1571.018283] 0 pages HighMem/MovableOnly [ 1571.038310] 363849 pages reserved [ 1571.041884] 0 pages cma reserved [ 1571.081576] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1571.095307] 20150 total pagecache pages [ 1571.128118] 0 pages in swap cache [ 1571.148281] Swap cache stats: add 0, delete 0, find 0/0 [ 1571.161077] Free swap = 0kB [ 1571.164768] Total swap = 0kB [ 1571.168136] 2097051 pages RAM [ 1571.171603] 0 pages HighMem/MovableOnly [ 1571.175746] 363849 pages reserved [ 1571.183137] 0 pages cma reserved [ 1571.186612] Out of memory (oom_kill_allocating_task): Kill process 10132 (rs:main Q:Reg) score 0 or sacrifice child [ 1571.197758] Killed process 10111 (rsyslogd) total-vm:254332kB, anon-rss:820kB, file-rss:52kB, shmem-rss:0kB [ 1571.243053] oom_reaper: reaped process 10111 (rsyslogd), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1571.335092] systemd[1]: rsyslog.service: Main process exited, code=killed, status=9/KILL 09:39:34 executing program 5: socket(0x11, 0x2, 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000004980), 0x0, 0x0) getsockopt$X25_QBITINCL(r0, 0x106, 0x1, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x4, 0x7, 0x7, 0x6, 0xa, @remote, @private2={0xfc, 0x2, '\x00', 0x1}, 0x700, 0x20, 0x9, 0x5f3b}}) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000004980), 0x0, 0x0) getsockopt$X25_QBITINCL(r1, 0x106, 0x1, 0x0, 0x0) r2 = socket$vsock_dgram(0x28, 0x2, 0x0) ioctl$sock_SIOCDELRT(r2, 0x890c, &(0x7f0000000180)={0x0, @llc={0x1a, 0x33a, 0x9, 0x6, 0x27, 0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, @vsock={0x28, 0x0, 0x2710}, @isdn={0x22, 0xcb, 0x81, 0x2, 0x69}, 0xfff, 0x0, 0x0, 0x0, 0x81, &(0x7f0000000140)='dummy0\x00', 0x80000000, 0x101, 0x8001}) openat$zero(0xffffffffffffff9c, &(0x7f00000000c0), 0x800, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000100)={0x80000004, 0x7}) getsockname(r1, &(0x7f0000002040)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f00000020c0)=0x80) socket(0x27, 0xa, 0x40000801) socket$can_bcm(0x1d, 0x2, 0x2) 09:39:34 executing program 0: socket(0x11, 0x2, 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000004980), 0x0, 0x0) getsockopt$X25_QBITINCL(r0, 0x106, 0x1, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x4, 0x7, 0x7, 0x6, 0xa, @remote, @private2={0xfc, 0x2, '\x00', 0x1}, 0x700, 0x20, 0x9, 0x5f3b}}) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000004980), 0x0, 0x0) getsockopt$X25_QBITINCL(r1, 0x106, 0x1, 0x0, 0x0) r2 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000100)={0x80000004, 0x7}) 09:39:34 executing program 2: r0 = socket(0x28, 0x1, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r0, 0x0, 0x20040801) [ 1572.674581] IPVS: ftp: loaded support on port[0] = 21 [ 1572.798368] Bluetooth: hci4 command 0x0409 tx timeout [ 1572.828381] syz-executor.0: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1572.856983] syz-executor.5: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1572.870130] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 1572.875698] CPU: 0 PID: 10157 Comm: syz-executor.0 Not tainted 4.14.232-syzkaller #0 [ 1572.883766] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1572.893531] Call Trace: [ 1572.896221] dump_stack+0x1b2/0x281 [ 1572.899901] warn_alloc.cold+0x96/0x1cc [ 1572.903974] ? zone_watermark_ok_safe+0x220/0x220 [ 1572.908938] __alloc_pages_nodemask+0x2127/0x2720 [ 1572.913990] ? __schedule+0x893/0x1de0 [ 1572.917895] ? lock_acquire+0x170/0x3f0 [ 1572.922412] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1572.927539] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1572.933375] ? __mutex_unlock_slowpath+0x75/0x770 [ 1572.938492] alloc_pages_current+0x155/0x260 [ 1572.942917] ion_page_pool_alloc+0x118/0x1b0 [ 1572.947689] ion_system_heap_allocate+0x133/0x8c0 [ 1572.952543] ? ion_alloc+0x187/0x810 [ 1572.956644] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1572.958839] syz-executor.5 cpuset= [ 1572.962133] ? ion_system_contig_heap_create+0x130/0x130 [ 1572.962143] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1572.962157] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1572.972253] / [ 1572.976168] ion_alloc+0x204/0x810 [ 1572.986888] ? ion_dma_buf_release+0x40/0x40 [ 1572.991508] ? __might_fault+0x177/0x1b0 [ 1572.993282] mems_allowed=0-1 [ 1572.995751] ion_ioctl+0xea/0x1f0 [ 1572.995760] ? ion_query_heaps+0x360/0x360 [ 1572.995771] ? ion_query_heaps+0x360/0x360 [ 1573.010977] do_vfs_ioctl+0x75a/0xff0 [ 1573.014906] ? ioctl_preallocate+0x1a0/0x1a0 [ 1573.019929] ? lock_downgrade+0x740/0x740 [ 1573.024109] ? __fget+0x225/0x360 [ 1573.027573] ? do_vfs_ioctl+0xff0/0xff0 [ 1573.031661] ? security_file_ioctl+0x83/0xb0 [ 1573.036530] SyS_ioctl+0x7f/0xb0 [ 1573.040178] ? do_vfs_ioctl+0xff0/0xff0 [ 1573.044660] do_syscall_64+0x1d5/0x640 [ 1573.048932] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1573.054729] RIP: 0033:0x4665f9 [ 1573.057918] RSP: 002b:00007fe4a6925188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1573.065907] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1573.073353] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000006 [ 1573.081064] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1573.088692] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1573.096061] R13: 00007ffe5881209f R14: 00007fe4a6925300 R15: 0000000000022000 [ 1573.106471] warn_alloc_show_mem: 1 callbacks suppressed [ 1573.106475] Mem-Info: [ 1573.113872] CPU: 1 PID: 10153 Comm: syz-executor.5 Not tainted 4.14.232-syzkaller #0 [ 1573.115028] active_anon:13761 inactive_anon:18199 isolated_anon:0 [ 1573.115028] active_file:1620 inactive_file:2150 isolated_file:0 [ 1573.115028] unevictable:0 dirty:36 writeback:0 unstable:0 [ 1573.115028] slab_reclaimable:14884 slab_unreclaimable:115674 [ 1573.115028] mapped:55193 shmem:19221 pagetables:764 bounce:0 [ 1573.115028] free:159915 free_pcp:60 free_cma:0 [ 1573.122743] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1573.122747] Call Trace: [ 1573.122764] dump_stack+0x1b2/0x281 [ 1573.122782] warn_alloc.cold+0x96/0x1cc [ 1573.122793] ? zone_watermark_ok_safe+0x220/0x220 [ 1573.122813] __alloc_pages_nodemask+0x2127/0x2720 [ 1573.122829] ? lock_acquire+0x170/0x3f0 [ 1573.122845] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1573.122863] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1573.122874] ? __mutex_unlock_slowpath+0x75/0x770 [ 1573.122884] ? alloc_pages_current+0x84/0x260 [ 1573.122895] alloc_pages_current+0x155/0x260 [ 1573.122908] ion_page_pool_alloc+0x118/0x1b0 [ 1573.122918] ion_system_heap_allocate+0x133/0x8c0 [ 1573.122926] ? ion_alloc+0x187/0x810 [ 1573.122947] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1573.158265] Node 0 active_anon:54820kB inactive_anon:61136kB active_file:5064kB inactive_file:7380kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:189968kB dirty:132kB writeback:0kB shmem:65156kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1573.167423] ? ion_system_contig_heap_create+0x130/0x130 [ 1573.170110] Node 1 active_anon:224kB inactive_anon:11660kB active_file:1416kB inactive_file:1220kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:30804kB dirty:12kB writeback:0kB shmem:11728kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1573.173959] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1573.177909] Node 0 [ 1573.183032] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1573.183043] ion_alloc+0x204/0x810 [ 1573.183055] ? ion_dma_buf_release+0x40/0x40 [ 1573.183066] ? __might_fault+0x177/0x1b0 [ 1573.183077] ion_ioctl+0xea/0x1f0 [ 1573.189076] DMA free:11144kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1573.191878] ? ion_query_heaps+0x360/0x360 [ 1573.196785] lowmem_reserve[]: [ 1573.202343] ? ion_query_heaps+0x360/0x360 [ 1573.202353] do_vfs_ioctl+0x75a/0xff0 [ 1573.202364] ? ioctl_preallocate+0x1a0/0x1a0 [ 1573.202372] ? lock_downgrade+0x740/0x740 [ 1573.202383] ? __fget+0x225/0x360 [ 1573.202391] ? do_vfs_ioctl+0xff0/0xff0 [ 1573.202403] ? security_file_ioctl+0x83/0xb0 [ 1573.208383] 0 [ 1573.211722] SyS_ioctl+0x7f/0xb0 [ 1573.216195] 2717 [ 1573.220715] ? do_vfs_ioctl+0xff0/0xff0 [ 1573.220727] do_syscall_64+0x1d5/0x640 [ 1573.220744] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1573.225950] 2718 [ 1573.229734] RIP: 0033:0x4665f9 [ 1573.229738] RSP: 002b:00007f551e7c7188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1573.229747] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1573.229752] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000008 [ 1573.229758] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1573.229762] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1573.229774] R13: 00007ffd0570a9af R14: 00007f551e7c7300 R15: 0000000000022000 [ 1573.236766] 2718 2718 [ 1573.465589] Node 0 DMA32 free:394608kB min:36200kB low:45248kB high:54296kB active_anon:54820kB inactive_anon:61136kB active_file:5264kB inactive_file:7380kB unevictable:0kB writepending:132kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7616kB pagetables:2860kB bounce:0kB free_pcp:480kB local_pcp:44kB free_cma:0kB [ 1573.498272] lowmem_reserve[]: 0 0 0 0 0 [ 1573.502489] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1573.530683] lowmem_reserve[]: 0 0 0 0 0 [ 1573.534797] Node 1 Normal free:232436kB min:53696kB low:67120kB high:80544kB active_anon:224kB inactive_anon:11660kB active_file:1416kB inactive_file:1220kB unevictable:0kB writepending:12kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:160kB pagetables:196kB bounce:0kB free_pcp:48kB local_pcp:0kB free_cma:0kB [ 1573.538642] chnl_net:caif_netlink_parms(): no params data found [ 1573.565096] lowmem_reserve[]: 0 0 0 0 0 [ 1573.574554] Node 0 DMA: 10*4kB (UE) 12*8kB (UE) 12*16kB (UE) 8*32kB (UE) 1*64kB (E) 2*128kB (UE) 6*256kB (UE) 3*512kB (UE) 1*1024kB (E) 3*2048kB (UME) 0*4096kB = 11144kB [ 1573.592151] Node 0 DMA32: 8558*4kB (UME) 8123*8kB (UME) 8314*16kB (UME) 4707*32kB (UME) 80*64kB (U) 3*128kB (U) 1*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 388624kB [ 1573.615506] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1573.639089] Node 1 Normal: 2839*4kB (UM) 3277*8kB (UM) 3474*16kB (UM) 3034*32kB (UM) 648*64kB (U) 6*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 232484kB [ 1573.658907] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1573.672144] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1573.685193] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1573.713038] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1573.724411] 23102 total pagecache pages [ 1573.732475] 0 pages in swap cache [ 1573.736130] Swap cache stats: add 0, delete 0, find 0/0 [ 1573.746609] Free swap = 0kB [ 1573.756423] Total swap = 0kB [ 1573.760122] 2097051 pages RAM [ 1573.763381] 0 pages HighMem/MovableOnly [ 1573.767435] 363849 pages reserved [ 1573.778262] 0 pages cma reserved [ 1573.837851] bridge0: port 1(bridge_slave_0) entered blocking state [ 1573.861643] bridge0: port 1(bridge_slave_0) entered disabled state [ 1573.871672] device bridge_slave_0 entered promiscuous mode [ 1573.883425] bridge0: port 2(bridge_slave_1) entered blocking state [ 1573.886449] systemd[1]: Started Journal Service. [ 1573.897544] bridge0: port 2(bridge_slave_1) entered disabled state [ 1573.922482] device bridge_slave_1 entered promiscuous mode [ 1573.984204] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 1574.012616] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1574.073572] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 1574.081356] team0: Port device team_slave_0 added [ 1574.087532] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 1574.108809] team0: Port device team_slave_1 added [ 1574.159626] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1574.166370] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1574.199258] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1574.259722] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1574.266469] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1574.328327] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1574.810518] systemd-journal invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1574.868092] Bluetooth: hci4 command 0x041b tx timeout [ 1574.874576] systemd-journal cpuset=/ mems_allowed=0-1 [ 1574.895885] CPU: 1 PID: 10136 Comm: systemd-journal Not tainted 4.14.232-syzkaller #0 [ 1574.904248] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1574.914652] Call Trace: [ 1574.917341] dump_stack+0x1b2/0x281 [ 1574.921072] dump_header+0x178/0x82f [ 1574.924797] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1574.929980] ? ___ratelimit+0x2cd/0x530 [ 1574.934026] oom_kill_process.cold+0x10/0xa40 [ 1574.938685] out_of_memory+0xe3e/0x1190 [ 1574.942756] ? oom_killer_disable+0x1c0/0x1c0 [ 1574.947235] ? mutex_trylock+0x152/0x1a0 [ 1574.951305] __alloc_pages_nodemask+0x23e1/0x2720 [ 1574.956150] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1574.961018] alloc_pages_current+0x155/0x260 [ 1574.965603] filemap_fault+0x11a1/0x1ad0 [ 1574.969856] ext4_filemap_fault+0x84/0xb0 [ 1574.973991] __do_fault+0xfa/0x380 [ 1574.977626] __handle_mm_fault+0x2497/0x4620 [ 1574.982109] ? vm_insert_page+0x7c0/0x7c0 [ 1574.986261] ? __fsnotify_inode_delete+0x20/0x20 [ 1574.991213] ? __fsnotify_update_child_dentry_flags.part.0+0x2e0/0x2e0 [ 1574.998069] ? mark_held_locks+0xa6/0xf0 [ 1575.002556] handle_mm_fault+0x455/0x9c0 [ 1575.006790] __do_page_fault+0x549/0xad0 [ 1575.010861] ? spurious_fault+0x640/0x640 [ 1575.015081] ? do_page_fault+0x60/0x500 [ 1575.019446] ? page_fault+0x2f/0x50 [ 1575.023170] page_fault+0x45/0x50 [ 1575.026956] RIP: 0074:0x559787971958 [ 1575.030822] RSP: b74ba3d0:00007f537d4106c0 EFLAGS: 7fffb74b9b8c [ 1575.061954] Mem-Info: [ 1575.071342] active_anon:13783 inactive_anon:18200 isolated_anon:0 [ 1575.071342] active_file:16 inactive_file:17 isolated_file:0 [ 1575.071342] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1575.071342] slab_reclaimable:14537 slab_unreclaimable:117828 [ 1575.071342] mapped:52696 shmem:19222 pagetables:764 bounce:0 [ 1575.071342] free:25164 free_pcp:3 free_cma:0 [ 1575.106436] Node 0 active_anon:54908kB inactive_anon:61140kB active_file:64kB inactive_file:64kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:182612kB dirty:0kB writeback:0kB shmem:65160kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1575.149174] Node 1 active_anon:224kB inactive_anon:11660kB active_file:0kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:28172kB dirty:0kB writeback:0kB shmem:11728kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1575.238223] Node 0 DMA free:11064kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1575.309432] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1575.314957] Node 0 DMA32 free:35900kB min:36200kB low:45248kB high:54296kB active_anon:54908kB inactive_anon:61140kB active_file:16kB inactive_file:64kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7616kB pagetables:2860kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1575.543513] lowmem_reserve[]: 0 0 0 0 0 [ 1575.578032] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1575.704488] lowmem_reserve[]: 0 0 0 0 0 [ 1575.731852] Node 1 Normal free:53692kB min:53696kB low:67120kB high:80544kB active_anon:224kB inactive_anon:11660kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:160kB pagetables:196kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1575.881928] lowmem_reserve[]: 0 0 0 0 0 [ 1575.886508] Node 0 DMA: 2*4kB (UE) 2*8kB (UE) 10*16kB (UE) 8*32kB (UE) 2*64kB (UE) 2*128kB (UE) 6*256kB (UE) 3*512kB (UE) 1*1024kB (E) 3*2048kB (UME) 0*4096kB = 11064kB [ 1575.909590] Node 0 DMA32: 2113*4kB (ME) 934*8kB (UME) 254*16kB (UME) 156*32kB (UME) 153*64kB (UME) 7*128kB (UM) 1*256kB (M) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 35924kB [ 1575.928342] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1575.960688] Node 1 Normal: 24*4kB (UM) 18*8kB (UM) 11*16kB (UM) 295*32kB (U) 674*64kB (U) 5*128kB (UM) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 53632kB [ 1576.040854] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1576.060695] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1576.096534] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1576.153994] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1576.210104] 19462 total pagecache pages [ 1576.252932] 0 pages in swap cache [ 1576.257459] Swap cache stats: add 0, delete 0, find 0/0 [ 1576.284826] Free swap = 0kB [ 1576.306464] Total swap = 0kB [ 1576.320713] 2097051 pages RAM [ 1576.324301] 0 pages HighMem/MovableOnly [ 1576.356937] 363849 pages reserved [ 1576.374129] 0 pages cma reserved [ 1576.377543] Out of memory (oom_kill_allocating_task): Kill process 10136 (systemd-journal) score 0 or sacrifice child [ 1576.433137] Killed process 10136 (systemd-journal) total-vm:46096kB, anon-rss:472kB, file-rss:0kB, shmem-rss:1888kB [ 1576.485628] oom_reaper: reaped process 10136 (systemd-journal), now anon-rss:0kB, file-rss:0kB, shmem-rss:1888kB [ 1576.605268] oom_reaper: reaped process 10157 (syz-executor.0), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1576.709121] syz-executor.5 invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1576.726190] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 1576.733945] CPU: 1 PID: 8899 Comm: syz-executor.5 Not tainted 4.14.232-syzkaller #0 [ 1576.742710] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1576.752956] Call Trace: [ 1576.755573] dump_stack+0x1b2/0x281 [ 1576.759661] dump_header+0x178/0x82f [ 1576.764108] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1576.769667] ? ___ratelimit+0x2cd/0x530 [ 1576.773686] oom_kill_process.cold+0x10/0xa40 [ 1576.778629] out_of_memory+0xe3e/0x1190 [ 1576.782802] ? oom_killer_disable+0x1c0/0x1c0 [ 1576.787589] ? mutex_trylock+0x152/0x1a0 [ 1576.792045] __alloc_pages_nodemask+0x23e1/0x2720 [ 1576.797041] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1576.802254] alloc_pages_current+0x155/0x260 [ 1576.806754] filemap_fault+0x11a1/0x1ad0 [ 1576.810924] ext4_filemap_fault+0x84/0xb0 [ 1576.815245] __do_fault+0xfa/0x380 [ 1576.818880] __handle_mm_fault+0x2497/0x4620 [ 1576.823642] ? vm_insert_page+0x7c0/0x7c0 [ 1576.828053] ? hrtimer_nanosleep+0x1ff/0x4b0 [ 1576.832649] ? nanosleep_copyout+0x100/0x100 [ 1576.837613] ? mark_held_locks+0xa6/0xf0 [ 1576.841860] handle_mm_fault+0x455/0x9c0 [ 1576.846880] __do_page_fault+0x549/0xad0 [ 1576.851963] ? spurious_fault+0x640/0x640 [ 1576.856481] ? do_page_fault+0x60/0x500 [ 1576.858019] syz-executor.0: page allocation failure: order:0 [ 1576.861111] ? page_fault+0x2f/0x50 [ 1576.861121] page_fault+0x45/0x50 [ 1576.867698] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1576.871764] RIP: 17ff7d:0xe [ 1576.871768] RSP: 0010:00007ffd0570ac6c EFLAGS: 00000032 [ 1576.897940] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 1576.907984] Mem-Info: [ 1576.913266] CPU: 0 PID: 10157 Comm: syz-executor.0 Not tainted 4.14.232-syzkaller #0 [ 1576.913673] active_anon:13660 inactive_anon:18199 isolated_anon:0 [ 1576.913673] active_file:26 inactive_file:9 isolated_file:0 [ 1576.913673] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1576.913673] slab_reclaimable:14532 slab_unreclaimable:117383 [ 1576.913673] mapped:52257 shmem:19222 pagetables:739 bounce:0 [ 1576.913673] free:14022 free_pcp:60 free_cma:0 [ 1576.922027] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1576.922032] Call Trace: [ 1576.922054] dump_stack+0x1b2/0x281 [ 1576.922068] warn_alloc.cold+0x96/0x1cc [ 1576.922080] ? zone_watermark_ok_safe+0x220/0x220 [ 1576.922089] ? usleep_range+0x130/0x130 [ 1576.922097] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1576.922108] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1576.922117] ? run_timer_softirq+0x5a0/0x5a0 [ 1576.922133] __alloc_pages_nodemask+0x2127/0x2720 [ 1576.922154] ? lock_acquire+0x170/0x3f0 [ 1576.963207] Node 0 active_anon:54416kB inactive_anon:61136kB active_file:100kB inactive_file:24kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:180808kB dirty:0kB writeback:0kB shmem:65160kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1576.968158] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1576.968168] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1576.968183] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1576.970846] Node 1 active_anon:224kB inactive_anon:11660kB active_file:4kB inactive_file:12kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:28220kB dirty:0kB writeback:0kB shmem:11728kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1576.974612] ? alloc_pages_current+0x15d/0x260 [ 1576.978775] Node 0 [ 1576.983875] alloc_pages_current+0x155/0x260 [ 1576.988158] DMA free:10952kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1576.993400] ion_page_pool_alloc+0x118/0x1b0 [ 1576.998404] lowmem_reserve[]: [ 1577.002880] ion_system_heap_allocate+0x133/0x8c0 [ 1577.008276] 0 [ 1577.012481] ? ion_alloc+0x187/0x810 [ 1577.041447] 2717 [ 1577.046614] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1577.051104] 2718 [ 1577.056535] ? ion_system_contig_heap_create+0x130/0x130 [ 1577.083890] 2718 [ 1577.088456] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1577.088470] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1577.088481] ion_alloc+0x204/0x810 [ 1577.088496] ? ion_dma_buf_release+0x40/0x40 [ 1577.090944] 2718 [ 1577.090953] Node 0 DMA32 free:18052kB min:36200kB low:45248kB high:54296kB active_anon:54416kB inactive_anon:61136kB active_file:128kB inactive_file:60kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7584kB pagetables:2760kB bounce:0kB free_pcp:120kB local_pcp:0kB free_cma:0kB [ 1577.090971] lowmem_reserve[]: [ 1577.095512] ? __might_fault+0x177/0x1b0 [ 1577.121900] 0 [ 1577.126383] ion_ioctl+0xea/0x1f0 [ 1577.130170] 0 [ 1577.135247] ? ion_query_heaps+0x360/0x360 [ 1577.137032] 0 [ 1577.140749] ? ion_query_heaps+0x360/0x360 [ 1577.140759] do_vfs_ioctl+0x75a/0xff0 [ 1577.140769] ? ioctl_preallocate+0x1a0/0x1a0 [ 1577.140779] ? lock_downgrade+0x740/0x740 [ 1577.140792] ? __fget+0x225/0x360 [ 1577.143226] 0 [ 1577.149108] ? do_vfs_ioctl+0xff0/0xff0 [ 1577.149120] ? security_file_ioctl+0x83/0xb0 [ 1577.149130] SyS_ioctl+0x7f/0xb0 [ 1577.151342] 0 [ 1577.156774] ? do_vfs_ioctl+0xff0/0xff0 [ 1577.164699] do_syscall_64+0x1d5/0x640 [ 1577.169744] Node 0 [ 1577.173349] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1577.178042] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1577.180249] RIP: 0033:0x4665f9 [ 1577.212170] lowmem_reserve[]: [ 1577.215491] RSP: 002b:00007fe4a6925188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1577.219734] 0 [ 1577.221601] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1577.221608] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000006 [ 1577.225042] 0 [ 1577.226917] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1577.231337] 0 [ 1577.233106] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1577.237893] 0 [ 1577.241660] R13: 00007ffe5881209f R14: 00007fe4a6925300 R15: 0000000000022000 [ 1577.243809] Bluetooth: hci4 command 0x040f tx timeout [ 1577.246329] 0 [ 1577.250372] warn_alloc_show_mem: 1 callbacks suppressed [ 1577.250376] Mem-Info: [ 1577.250396] active_anon:13660 inactive_anon:18199 isolated_anon:0 [ 1577.250396] active_file:26 inactive_file:9 isolated_file:0 [ 1577.250396] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1577.250396] slab_reclaimable:14532 slab_unreclaimable:117383 [ 1577.250396] mapped:52257 shmem:19222 pagetables:739 bounce:0 [ 1577.250396] free:14022 free_pcp:60 free_cma:0 [ 1577.250411] Node 0 active_anon:54416kB inactive_anon:61136kB active_file:100kB inactive_file:24kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:180808kB dirty:0kB writeback:0kB shmem:65160kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1577.250426] Node 1 active_anon:224kB inactive_anon:11660kB active_file:4kB inactive_file:12kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:28220kB dirty:0kB writeback:0kB shmem:11728kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1577.250429] Node 0 DMA free:10952kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1577.250448] lowmem_reserve[]: 0 2717 2718 2718 [ 1577.280492] 2718 [ 1577.294285] Node 1 [ 1577.338257] Normal free:27084kB min:53696kB low:67120kB high:80544kB active_anon:224kB inactive_anon:11660kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:160kB pagetables:196kB bounce:0kB free_pcp:120kB local_pcp:0kB free_cma:0kB [ 1577.348730] Node 0 [ 1577.373021] lowmem_reserve[]: [ 1577.377616] DMA32 free:18052kB min:36200kB low:45248kB high:54296kB active_anon:54344kB inactive_anon:61136kB active_file:64kB inactive_file:64kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7584kB pagetables:2760kB bounce:0kB free_pcp:120kB local_pcp:120kB free_cma:0kB [ 1577.398401] 0 [ 1577.427346] lowmem_reserve[]: [ 1577.470384] 0 [ 1577.482664] 0 [ 1577.511241] 0 [ 1577.533071] 0 [ 1577.552623] 0 [ 1577.589993] 0 0 0 [ 1577.594229] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1577.600054] 0 [ 1577.633260] Node 0 DMA: 2*4kB (UE) 2*8kB (UE) 3*16kB (UE) 8*32kB (UE) 2*64kB (UE) 2*128kB (UE) 6*256kB (UE) 3*512kB (UE) 1*1024kB (E) 3*2048kB (UME) 0*4096kB = 10952kB [ 1577.634566] lowmem_reserve[]: [ 1577.659946] Node 0 [ 1577.662997] 0 [ 1577.663103] DMA32: [ 1577.665331] 0 [ 1577.667310] 1839*4kB [ 1577.677450] 0 [ 1577.679742] (ME) 799*8kB (UME) 199*16kB (UME) 35*32kB (UME) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18052kB [ 1577.685359] 0 [ 1577.707218] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1577.711448] 0 [ 1577.731244] Node 1 Normal: 1*4kB (M) 5*8kB (UM) 4*16kB (UM) 1*32kB (U) 401*64kB (U) 6*128kB (UM) 0*256kB 1*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 27084kB [ 1577.759603] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1577.764247] Node 1 Normal free:27084kB min:53696kB low:67120kB high:80544kB active_anon:224kB inactive_anon:11660kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:160kB pagetables:196kB bounce:0kB free_pcp:120kB local_pcp:120kB free_cma:0kB [ 1577.776789] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1577.820446] lowmem_reserve[]: 0 0 0 0 0 [ 1577.823995] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1577.824464] Node 0 [ 1577.836373] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1577.846839] DMA: 2*4kB (UE) 2*8kB (UE) 3*16kB (UE) 8*32kB (UE) 2*64kB (UE) 2*128kB (UE) 6*256kB (UE) 3*512kB (UE) 1*1024kB (E) 3*2048kB (UME) 0*4096kB = 10952kB [ 1577.858534] 19255 total pagecache pages [ 1577.883429] Node 0 DMA32: 1839*4kB (ME) 799*8kB (UME) 199*16kB (UME) 35*32kB (UME) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18052kB [ 1577.884411] 0 pages in swap cache [ 1577.912572] Swap cache stats: add 0, delete 0, find 0/0 [ 1577.914620] Node 0 [ 1577.924578] Free swap = 0kB [ 1577.931797] Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1577.933716] Total swap = 0kB [ 1577.955761] 2097051 pages RAM [ 1577.956242] Node 1 [ 1577.961661] 0 pages HighMem/MovableOnly [ 1577.964054] Normal: [ 1577.977184] 363849 pages reserved [ 1577.977613] 1*4kB [ 1577.981673] 0 pages cma reserved [ 1577.997576] Out of memory (oom_kill_allocating_task): Kill process 8899 (syz-executor.5) score 0 or sacrifice child [ 1577.997693] (M) [ 1578.019253] Killed process 10153 (syz-executor.5) total-vm:93384kB, anon-rss:160kB, file-rss:34820kB, shmem-rss:0kB [ 1578.022445] 11*8kB (UM) 6*16kB (UM) 2*32kB (U) 401*64kB (U) 6*128kB (UM) 0*256kB 1*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 27196kB [ 1578.055243] oom_reaper: reaped process 10153 (syz-executor.5), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1578.072308] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1578.106024] syz-executor.4 invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1578.116931] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1578.132380] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 1578.136090] syz-executor.5: page allocation failure: order:0 [ 1578.137602] CPU: 0 PID: 10134 Comm: syz-executor.4 Not tainted 4.14.232-syzkaller #0 [ 1578.137609] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1578.143442] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1578.151713] Call Trace: [ 1578.151732] dump_stack+0x1b2/0x281 [ 1578.151745] dump_header+0x178/0x82f [ 1578.161120] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1578.168397] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1578.168407] ? ___ratelimit+0x2cd/0x530 [ 1578.168417] oom_kill_process.cold+0x10/0xa40 [ 1578.168433] out_of_memory+0xe3e/0x1190 [ 1578.171017] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1578.174626] ? oom_killer_disable+0x1c0/0x1c0 [ 1578.178453] (null) [ 1578.187422] ? mutex_trylock+0x152/0x1a0 [ 1578.192759] 19255 total pagecache pages [ 1578.196787] __alloc_pages_nodemask+0x23e1/0x2720 [ 1578.201287] 0 pages in swap cache [ 1578.205251] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1578.213923] syz-executor.5 cpuset= [ 1578.218489] alloc_pages_current+0x155/0x260 [ 1578.218501] filemap_fault+0x11a1/0x1ad0 [ 1578.220628] / [ 1578.224682] ext4_filemap_fault+0x84/0xb0 [ 1578.228678] Swap cache stats: add 0, delete 0, find 0/0 [ 1578.233830] __do_fault+0xfa/0x380 [ 1578.237360] Free swap = 0kB [ 1578.242293] __handle_mm_fault+0x2497/0x4620 [ 1578.242302] ? vm_insert_page+0x7c0/0x7c0 [ 1578.242321] ? mark_held_locks+0xa6/0xf0 [ 1578.246309] mems_allowed=0-1 [ 1578.250785] handle_mm_fault+0x455/0x9c0 [ 1578.250798] __do_page_fault+0x549/0xad0 [ 1578.250809] ? spurious_fault+0x640/0x640 [ 1578.267791] Total swap = 0kB [ 1578.270240] ? do_page_fault+0x60/0x500 [ 1578.273511] 2097051 pages RAM [ 1578.278372] ? page_fault+0x2f/0x50 [ 1578.278379] page_fault+0x45/0x50 [ 1578.278387] RIP: 4bf913:0x3 [ 1578.278393] RSP: 0000:00000000004bf913 EFLAGS: 00000000 [ 1578.297809] 0 pages HighMem/MovableOnly [ 1578.312067] Mem-Info: [ 1578.320609] CPU: 1 PID: 10153 Comm: syz-executor.5 Not tainted 4.14.232-syzkaller #0 [ 1578.335331] active_anon:13617 inactive_anon:18199 isolated_anon:0 [ 1578.335331] active_file:29 inactive_file:4 isolated_file:0 [ 1578.335331] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1578.335331] slab_reclaimable:14482 slab_unreclaimable:117250 [ 1578.335331] mapped:52225 shmem:19222 pagetables:739 bounce:0 [ 1578.335331] free:13946 free_pcp:226 free_cma:0 [ 1578.343096] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1578.343100] Call Trace: [ 1578.343122] dump_stack+0x1b2/0x281 [ 1578.343135] warn_alloc.cold+0x96/0x1cc [ 1578.343148] ? zone_watermark_ok_safe+0x220/0x220 [ 1578.343158] ? usleep_range+0x130/0x130 [ 1578.343165] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1578.343186] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1578.390432] Node 0 active_anon:54244kB inactive_anon:61136kB active_file:108kB inactive_file:20kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:180728kB dirty:0kB writeback:0kB shmem:65160kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1578.393678] ? run_timer_softirq+0x5a0/0x5a0 [ 1578.397731] Node 1 active_anon:224kB inactive_anon:11660kB active_file:8kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:28172kB dirty:0kB writeback:0kB shmem:11728kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1578.402661] __alloc_pages_nodemask+0x2127/0x2720 [ 1578.402677] ? lock_acquire+0x170/0x3f0 [ 1578.402691] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1578.402701] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1578.402716] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1578.402736] alloc_pages_current+0x155/0x260 [ 1578.402747] ion_page_pool_alloc+0x118/0x1b0 [ 1578.402756] ion_system_heap_allocate+0x133/0x8c0 [ 1578.402766] ? ion_alloc+0x187/0x810 [ 1578.420536] Node 0 [ 1578.445613] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1578.445624] ? ion_system_contig_heap_create+0x130/0x130 [ 1578.445632] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1578.445643] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1578.445652] ion_alloc+0x204/0x810 [ 1578.445665] ? ion_dma_buf_release+0x40/0x40 [ 1578.445675] ? __might_fault+0x177/0x1b0 [ 1578.445685] ion_ioctl+0xea/0x1f0 [ 1578.445694] ? ion_query_heaps+0x360/0x360 [ 1578.445706] ? ion_query_heaps+0x360/0x360 [ 1578.445717] do_vfs_ioctl+0x75a/0xff0 [ 1578.445728] ? ioctl_preallocate+0x1a0/0x1a0 [ 1578.445737] ? lock_downgrade+0x740/0x740 [ 1578.445750] ? __fget+0x225/0x360 [ 1578.445759] ? do_vfs_ioctl+0xff0/0xff0 [ 1578.445768] ? security_file_ioctl+0x83/0xb0 [ 1578.445779] SyS_ioctl+0x7f/0xb0 [ 1578.463143] DMA free:10952kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1578.478113] ? do_vfs_ioctl+0xff0/0xff0 [ 1578.478127] do_syscall_64+0x1d5/0x640 [ 1578.478141] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1578.478149] RIP: 0033:0x4665f9 [ 1578.478153] RSP: 002b:00007f551e7c7188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1578.478162] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1578.478167] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000008 [ 1578.478172] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1578.478176] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1578.478180] R13: 00007ffd0570a9af R14: 00007f551e7c7300 R15: 0000000000022000 [ 1578.486108] 363849 pages reserved [ 1578.496697] lowmem_reserve[]: [ 1578.496766] 0 pages cma reserved [ 1578.502565] 0 2717 2718 2718 2718 [ 1578.502586] Node 0 DMA32 free:18008kB min:36200kB low:45248kB high:54296kB active_anon:54244kB inactive_anon:61136kB active_file:108kB inactive_file:20kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7584kB pagetables:2760kB bounce:0kB free_pcp:664kB local_pcp:416kB free_cma:0kB [ 1578.502603] lowmem_reserve[]: 0 0 0 [ 1578.696221] systemd[1]: systemd-journald.service: Failed with result 'signal'. [ 1578.709954] 0 0 [ 1578.764546] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1578.806380] lowmem_reserve[]: 0 0 0 0 0 [ 1578.815489] Node 1 Normal free:278856kB min:53696kB low:67120kB high:80544kB active_anon:224kB inactive_anon:11660kB active_file:8kB inactive_file:0kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:160kB pagetables:196kB bounce:0kB free_pcp:240kB local_pcp:120kB free_cma:0kB [ 1578.898292] lowmem_reserve[]: 0 0 0 0 0 [ 1578.898922] systemd[1]: systemd-journald.service: Service has no hold-off time, scheduling restart. [ 1578.912861] Node 0 DMA: 2*4kB (UE) 2*8kB (UE) [ 1578.934251] systemd[1]: Stopped Journal Service. [ 1578.943809] 3*16kB (UE) 8*32kB (UE) 2*64kB (UE) 2*128kB (UE) 6*256kB (UE) 3*512kB (UE) 1*1024kB (E) 3*2048kB (UME) 0*4096kB = 10952kB [ 1578.956593] systemd[1]: Starting Journal Service... [ 1578.987881] Mem-Info: [ 1578.990535] active_anon:13639 inactive_anon:18199 isolated_anon:0 [ 1578.990535] active_file:915 inactive_file:1877 isolated_file:0 [ 1578.990535] unevictable:0 dirty:32 writeback:0 unstable:0 [ 1578.990535] slab_reclaimable:14466 slab_unreclaimable:116896 [ 1578.990535] mapped:53761 shmem:19222 pagetables:777 bounce:0 [ 1578.990535] free:130697 free_pcp:376 free_cma:0 [ 1579.017813] Node 0 DMA32: 1747*4kB (UME) 1189*8kB (UME) 3264*16kB (UME) 941*32kB (UME) 0*64kB 148*128kB (U) 135*256kB (UM) 10*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 157460kB [ 1579.107848] Node 0 active_anon:54532kB inactive_anon:61136kB active_file:3856kB inactive_file:8008kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:188272kB dirty:128kB writeback:0kB shmem:65160kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1579.111301] Node 0 [ 1579.139135] systemd-journald[10308]: File /run/log/journal/04d8c135ee6b410280ba31a58c89679d/system.journal corrupted or uncleanly shut down, renaming and replacing. [ 1579.190155] Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1579.201094] Node 1 Normal: 1571*4kB (UM) 2012*8kB (UM) 1730*16kB (UM) 1012*32kB (UM) 1004*64kB (U) 607*128kB (UM) 226*256kB (U) 36*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 300684kB [ 1579.211208] Node 1 active_anon:224kB inactive_anon:11660kB active_file:4kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:28172kB dirty:0kB writeback:0kB shmem:11728kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1579.218311] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1579.256595] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1579.266061] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1579.275745] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1579.284855] 24230 total pagecache pages [ 1579.289146] 0 pages in swap cache [ 1579.292677] Swap cache stats: add 0, delete 0, find 0/0 [ 1579.298750] Free swap = 0kB [ 1579.301835] Total swap = 0kB [ 1579.304907] 2097051 pages RAM [ 1579.308527] 0 pages HighMem/MovableOnly [ 1579.312836] 363849 pages reserved [ 1579.316448] Node 0 DMA free:11132kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1579.346407] 0 pages cma reserved [ 1579.350208] Bluetooth: hci4 command 0x0419 tx timeout [ 1579.355779] Out of memory (oom_kill_allocating_task): Kill process 10134 (syz-executor.4) score 0 or sacrifice child [ 1579.367313] Killed process 10134 (syz-executor.4) total-vm:93120kB, anon-rss:84kB, file-rss:34748kB, shmem-rss:0kB [ 1579.379673] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1579.384378] oom_reaper: reaped process 10134 (syz-executor.4), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1579.384842] Node 0 DMA32 free:112416kB min:36200kB low:45248kB high:54296kB active_anon:54632kB inactive_anon:69236kB active_file:3856kB inactive_file:7984kB unevictable:0kB writepending:128kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7584kB pagetables:2912kB bounce:0kB free_pcp:1144kB local_pcp:496kB free_cma:0kB [ 1579.431798] lowmem_reserve[]: [ 1579.438201] syz-executor.0: [ 1579.439905] 0 [ 1579.442194] page allocation failure: order:4 [ 1579.446272] 0 0 0 0 [ 1579.459254] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1579.478971] systemd[1]: Starting Load/Save RF Kill Switch Status... [ 1579.496680] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1579.497529] lowmem_reserve[]: 0 0 0 0 0 [ 1579.526852] Node 1 Normal free:82248kB min:53696kB low:67120kB high:80544kB active_anon:224kB inactive_anon:11660kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:128kB pagetables:196kB bounce:0kB free_pcp:60kB local_pcp:60kB free_cma:0kB [ 1579.528230] syz-executor.0 cpuset= [ 1579.591464] lowmem_reserve[]: 0 0 0 0 0 [ 1579.607011] Node 0 DMA: 20*4kB (UE) 2*8kB (UE) 10*16kB (UE) 8*32kB (UE) 2*64kB (UE) 1*128kB (E) 6*256kB (UE) 3*512kB (UE) 1*1024kB (E) 3*2048kB (UME) 0*4096kB = 11008kB [ 1579.607798] / [ 1579.624115] systemd[1]: Started Load/Save RF Kill Switch Status. [ 1579.627434] Node 0 DMA32: 221*4kB (UME) 1498*8kB (UE) 3926*16kB (UE) 1561*32kB (UME) 5*64kB (U) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 125956kB [ 1579.653590] mems_allowed=0-1 [ 1579.656850] CPU: 0 PID: 10157 Comm: syz-executor.0 Not tainted 4.14.232-syzkaller #0 [ 1579.665788] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1579.675430] Call Trace: [ 1579.678105] dump_stack+0x1b2/0x281 [ 1579.681721] warn_alloc.cold+0x96/0x1cc [ 1579.685792] ? zone_watermark_ok_safe+0x220/0x220 [ 1579.691760] __alloc_pages_nodemask+0x2127/0x2720 [ 1579.697169] ? lock_acquire+0x170/0x3f0 [ 1579.701133] ? lock_acquire+0x170/0x3f0 [ 1579.705105] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1579.710317] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1579.715758] ? __mutex_unlock_slowpath+0x75/0x770 [ 1579.720675] ? alloc_pages_current+0x16/0x260 [ 1579.725316] alloc_pages_current+0x155/0x260 [ 1579.729885] ion_page_pool_alloc+0x118/0x1b0 [ 1579.734791] ion_system_heap_allocate+0x133/0x8c0 [ 1579.739855] ? _raw_spin_unlock+0x29/0x40 [ 1579.744164] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1579.749626] ? ion_system_contig_heap_create+0x130/0x130 [ 1579.755155] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1579.760256] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1579.765102] ion_alloc+0x27a/0x810 [ 1579.768917] ? ion_dma_buf_release+0x40/0x40 [ 1579.773325] ? __might_fault+0x177/0x1b0 [ 1579.777403] ion_ioctl+0xea/0x1f0 [ 1579.780851] ? ion_query_heaps+0x360/0x360 [ 1579.785072] ? ion_query_heaps+0x360/0x360 [ 1579.789589] do_vfs_ioctl+0x75a/0xff0 [ 1579.793376] ? ioctl_preallocate+0x1a0/0x1a0 [ 1579.798043] ? lock_downgrade+0x740/0x740 [ 1579.802187] ? __fget+0x225/0x360 [ 1579.805884] ? do_vfs_ioctl+0xff0/0xff0 [ 1579.809955] ? security_file_ioctl+0x83/0xb0 [ 1579.814541] SyS_ioctl+0x7f/0xb0 [ 1579.818029] ? do_vfs_ioctl+0xff0/0xff0 [ 1579.821999] do_syscall_64+0x1d5/0x640 [ 1579.825900] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1579.831108] RIP: 0033:0x4665f9 [ 1579.834304] RSP: 002b:00007fe4a6925188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1579.842016] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1579.849594] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000006 [ 1579.857241] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1579.865196] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1579.872474] R13: 00007ffe5881209f R14: 00007fe4a6925300 R15: 0000000000022000 09:39:43 executing program 4: r0 = socket(0x28, 0x1, 0x0) bind$x25(r0, 0x0, 0x0) 09:39:43 executing program 2: r0 = socket(0x28, 0x1, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r0, 0x0, 0x20040801) [ 1579.888128] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1579.901717] Node 1 Normal: 1567*4kB (UM) 2015*8kB (UM) 1741*16kB (UM) 1026*32kB (UM) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 83076kB [ 1579.916895] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1579.926404] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB 09:39:43 executing program 3: socket(0x11, 0x2, 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000004980), 0x0, 0x0) getsockopt$X25_QBITINCL(r0, 0x106, 0x1, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x4, 0x7, 0x7, 0x6, 0xa, @remote, @private2={0xfc, 0x2, '\x00', 0x1}, 0x700, 0x20, 0x9, 0x5f3b}}) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000004980), 0x0, 0x0) getsockopt$X25_QBITINCL(r1, 0x106, 0x1, 0x0, 0x0) r2 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000100)={0x80000004, 0x7}) 09:39:43 executing program 1: socket(0x11, 0x2, 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000004980), 0x0, 0x0) getsockopt$X25_QBITINCL(r0, 0x106, 0x1, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x4, 0x7, 0x7, 0x6, 0xa, @remote, @private2={0xfc, 0x2, '\x00', 0x1}, 0x700, 0x20, 0x9, 0x5f3b}}) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000004980), 0x0, 0x0) getsockopt$X25_QBITINCL(r1, 0x106, 0x1, 0x0, 0x0) r2 = socket$vsock_dgram(0x28, 0x2, 0x0) ioctl$sock_SIOCDELRT(r2, 0x890c, &(0x7f0000000180)={0x0, @llc={0x1a, 0x33a, 0x9, 0x6, 0x27, 0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, @vsock={0x28, 0x0, 0x2710}, @isdn={0x22, 0xcb, 0x81, 0x2, 0x69}, 0xfff, 0x0, 0x0, 0x0, 0x81, &(0x7f0000000140)='dummy0\x00', 0x80000000, 0x101, 0x8001}) openat$zero(0xffffffffffffff9c, &(0x7f00000000c0), 0x800, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000100)={0x80000004, 0x7}) getsockname(r1, &(0x7f0000002040)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f00000020c0)=0x80) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000240)={0x2, 0x80, 0x1, 0xff, 0x4, 0x41, 0x0, 0xfffffffffffffe00, 0x2000, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0xdc, 0x2, @perf_bp={&(0x7f0000000200), 0x5}, 0x4004, 0x7fffffff, 0x2, 0x4, 0x6, 0x3e7, 0x8001, 0x0, 0x3, 0x0, 0x8001}) [ 1579.935650] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1579.945049] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1579.954131] 25441 total pagecache pages [ 1579.958625] 0 pages in swap cache [ 1579.962157] Swap cache stats: add 0, delete 0, find 0/0 [ 1579.971289] Free swap = 0kB [ 1579.975071] Total swap = 0kB [ 1579.979579] 2097051 pages RAM [ 1579.984137] 0 pages HighMem/MovableOnly [ 1579.988738] 363849 pages reserved 09:39:43 executing program 2: r0 = socket(0x28, 0x1, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r0, 0x0, 0x20040801) [ 1579.993376] 0 pages cma reserved 09:39:43 executing program 2: r0 = socket(0x28, 0x1, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, 0x0, 0x300, 0x70bd2b, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x20040801) 09:39:43 executing program 2: r0 = socket(0x28, 0x1, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x20040801) [ 1580.122169] syz-executor.1: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1580.123880] syz-executor.3: [ 1580.170142] syz-executor.1 cpuset= [ 1580.173542] page allocation failure: order:4 [ 1580.179143] / [ 1580.182836] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1580.195855] mems_allowed=0-1 [ 1580.207628] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 1580.216311] CPU: 0 PID: 10325 Comm: syz-executor.1 Not tainted 4.14.232-syzkaller #0 [ 1580.225125] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1580.234776] Call Trace: [ 1580.237674] dump_stack+0x1b2/0x281 [ 1580.241305] warn_alloc.cold+0x96/0x1cc [ 1580.245388] ? zone_watermark_ok_safe+0x220/0x220 [ 1580.250355] __alloc_pages_nodemask+0x2127/0x2720 [ 1580.255197] ? io_schedule_timeout+0x140/0x140 [ 1580.259996] ? lock_acquire+0x170/0x3f0 [ 1580.263999] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1580.268855] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1580.274624] ? __mutex_unlock_slowpath+0x75/0x770 [ 1580.279472] alloc_pages_current+0x155/0x260 [ 1580.284155] ion_page_pool_alloc+0x118/0x1b0 [ 1580.288769] ion_system_heap_allocate+0x133/0x8c0 [ 1580.293799] ? ion_alloc+0x187/0x810 [ 1580.297626] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1580.303395] ? ion_system_contig_heap_create+0x130/0x130 [ 1580.308857] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1580.314157] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1580.319017] ion_alloc+0x204/0x810 [ 1580.322568] ? ion_dma_buf_release+0x40/0x40 [ 1580.327001] ? __might_fault+0x177/0x1b0 [ 1580.331078] ion_ioctl+0xea/0x1f0 [ 1580.334626] ? ion_query_heaps+0x360/0x360 [ 1580.339196] ? ion_query_heaps+0x360/0x360 [ 1580.343466] do_vfs_ioctl+0x75a/0xff0 [ 1580.347376] ? ioctl_preallocate+0x1a0/0x1a0 [ 1580.351902] ? lock_downgrade+0x740/0x740 [ 1580.356232] ? __fget+0x225/0x360 [ 1580.359802] ? do_vfs_ioctl+0xff0/0xff0 [ 1580.363821] ? security_file_ioctl+0x83/0xb0 [ 1580.368417] SyS_ioctl+0x7f/0xb0 [ 1580.371795] ? do_vfs_ioctl+0xff0/0xff0 [ 1580.376059] do_syscall_64+0x1d5/0x640 [ 1580.379965] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1580.385169] RIP: 0033:0x4665f9 [ 1580.386513] systemd[1]: Started Journal Service. [ 1580.388627] RSP: 002b:00007f22b5267188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1580.388638] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1580.388642] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000008 09:39:43 executing program 2: r0 = socket(0x28, 0x1, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x20040801) [ 1580.388647] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1580.388651] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1580.388656] R13: 00007ffea96cbc0f R14: 00007f22b5267300 R15: 0000000000022000 [ 1580.439309] Mem-Info: [ 1580.443700] active_anon:13789 inactive_anon:20229 isolated_anon:24 [ 1580.443700] active_file:1717 inactive_file:5218 isolated_file:0 [ 1580.443700] unevictable:0 dirty:40 writeback:0 unstable:0 [ 1580.443700] slab_reclaimable:14466 slab_unreclaimable:118505 [ 1580.443700] mapped:48596 shmem:21265 pagetables:792 bounce:0 [ 1580.443700] free:76414 free_pcp:213 free_cma:0 [ 1580.454894] CPU: 1 PID: 10322 Comm: syz-executor.3 Not tainted 4.14.232-syzkaller #0 [ 1580.486800] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1580.496526] Call Trace: [ 1580.499158] dump_stack+0x1b2/0x281 [ 1580.502816] warn_alloc.cold+0x96/0x1cc [ 1580.506818] ? zone_watermark_ok_safe+0x220/0x220 [ 1580.513393] __alloc_pages_nodemask+0x2127/0x2720 [ 1580.519029] ? retint_kernel+0x2d/0x2d [ 1580.522950] ? lock_acquire+0x170/0x3f0 [ 1580.527289] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1580.530108] Node 0 active_anon:54952kB inactive_anon:69256kB active_file:6868kB inactive_file:20868kB unevictable:0kB isolated(anon):96kB isolated(file):0kB mapped:167556kB dirty:160kB writeback:0kB shmem:73332kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1580.532141] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1580.532155] ? __mutex_unlock_slowpath+0x75/0x770 [ 1580.571759] ? __list_del_entry_valid+0x21/0xf0 [ 1580.576446] alloc_pages_current+0x155/0x260 [ 1580.580871] ion_page_pool_alloc+0x118/0x1b0 [ 1580.585293] ion_system_heap_allocate+0x133/0x8c0 [ 1580.590319] ? ion_alloc+0x187/0x810 [ 1580.594152] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1580.594292] Node 1 active_anon:204kB inactive_anon:11660kB active_file:0kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:26828kB dirty:0kB writeback:0kB shmem:11728kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1580.600159] ? ion_system_contig_heap_create+0x130/0x130 [ 1580.600171] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1580.600185] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1580.643432] ion_alloc+0x204/0x810 [ 1580.647036] ? ion_dma_buf_release+0x40/0x40 [ 1580.651641] ? __might_fault+0x177/0x1b0 [ 1580.656472] ion_ioctl+0xea/0x1f0 [ 1580.660013] ? ion_query_heaps+0x360/0x360 [ 1580.664500] ? ion_query_heaps+0x360/0x360 09:39:44 executing program 2: r0 = socket(0x28, 0x1, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x20040801) [ 1580.668973] do_vfs_ioctl+0x75a/0xff0 [ 1580.671024] Node 0 [ 1580.672806] ? ioctl_preallocate+0x1a0/0x1a0 [ 1580.672816] ? lock_downgrade+0x740/0x740 [ 1580.672828] ? __fget+0x225/0x360 [ 1580.677543] DMA free:11008kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1580.679940] ? do_vfs_ioctl+0xff0/0xff0 [ 1580.679951] ? security_file_ioctl+0x83/0xb0 [ 1580.679960] SyS_ioctl+0x7f/0xb0 [ 1580.679968] ? do_vfs_ioctl+0xff0/0xff0 [ 1580.679979] do_syscall_64+0x1d5/0x640 [ 1580.679994] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1580.680002] RIP: 0033:0x4665f9 [ 1580.680006] RSP: 002b:00007fd59d707188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1580.689340] lowmem_reserve[]: [ 1580.715516] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1580.715522] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000006 [ 1580.715526] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1580.715531] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1580.715535] R13: 00007ffcfd15ebff R14: 00007fd59d707300 R15: 0000000000022000 [ 1580.800443] syz-executor.5: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1580.822219] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 1580.833288] CPU: 0 PID: 10153 Comm: syz-executor.5 Not tainted 4.14.232-syzkaller #0 [ 1580.841609] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1580.851182] Call Trace: [ 1580.853974] dump_stack+0x1b2/0x281 [ 1580.857725] warn_alloc.cold+0x96/0x1cc [ 1580.861704] ? zone_watermark_ok_safe+0x220/0x220 [ 1580.866855] __alloc_pages_nodemask+0x2127/0x2720 [ 1580.871726] ? lock_acquire+0x170/0x3f0 [ 1580.875709] ? lock_acquire+0x170/0x3f0 [ 1580.879692] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1580.884635] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1580.890233] ? __mutex_unlock_slowpath+0x75/0x770 [ 1580.895447] alloc_pages_current+0x155/0x260 [ 1580.899863] ion_page_pool_alloc+0x118/0x1b0 [ 1580.904408] ion_system_heap_allocate+0x133/0x8c0 [ 1580.909436] ? _raw_spin_unlock+0x29/0x40 [ 1580.913681] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1580.918797] ? ion_system_contig_heap_create+0x130/0x130 [ 1580.924749] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1580.930018] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1580.935005] ion_alloc+0x27a/0x810 [ 1580.938556] ? ion_dma_buf_release+0x40/0x40 [ 1580.943598] ? __might_fault+0x177/0x1b0 [ 1580.947939] ion_ioctl+0xea/0x1f0 [ 1580.951570] ? ion_query_heaps+0x360/0x360 [ 1580.955986] ? ion_query_heaps+0x360/0x360 [ 1580.960485] do_vfs_ioctl+0x75a/0xff0 [ 1580.964494] ? ioctl_preallocate+0x1a0/0x1a0 [ 1580.969080] ? lock_downgrade+0x740/0x740 [ 1580.973334] ? __fget+0x225/0x360 [ 1580.976927] ? do_vfs_ioctl+0xff0/0xff0 [ 1580.980906] ? security_file_ioctl+0x83/0xb0 [ 1580.985507] SyS_ioctl+0x7f/0xb0 [ 1580.989061] ? do_vfs_ioctl+0xff0/0xff0 [ 1580.993039] do_syscall_64+0x1d5/0x640 [ 1580.997124] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1581.002609] RIP: 0033:0x4665f9 [ 1581.006160] RSP: 002b:00007f551e7c7188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1581.014833] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1581.022868] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000008 [ 1581.031021] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1581.039724] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1581.048011] R13: 00007ffd0570a9af R14: 00007f551e7c7300 R15: 0000000000022000 [ 1581.105468] 0 2717 2718 2718 2718 [ 1581.127681] Node 0 DMA32 free:68072kB min:36200kB low:45248kB high:54296kB active_anon:54972kB inactive_anon:69260kB active_file:7300kB inactive_file:20384kB unevictable:0kB writepending:336kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7744kB pagetables:2932kB bounce:0kB free_pcp:548kB local_pcp:368kB free_cma:0kB [ 1581.217717] lowmem_reserve[]: 0 0 0 0 0 [ 1581.221847] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1581.330667] lowmem_reserve[]: 0 0 0 0 0 [ 1581.334807] Node 1 Normal free:53172kB min:53696kB low:67120kB high:80544kB active_anon:204kB inactive_anon:11660kB active_file:0kB inactive_file:204kB unevictable:0kB writepending:4kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:160kB pagetables:148kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1581.349854] syz-executor.4 invoked oom-killer: gfp_mask=0x14082c2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_NOWARN|__GFP_ZERO), nodemask=(null), order=0, oom_score_adj=0 [ 1581.406907] lowmem_reserve[]: 0 0 0 0 0 [ 1581.437339] Node 0 DMA: 15*4kB (UE) 7*8kB (UE) 10*16kB (UE) 8*32kB (UE) 2*64kB (UE) 1*128kB (E) 6*256kB (UE) 3*512kB (UE) 1*1024kB (E) 3*2048kB (UME) 0*4096kB = 11028kB [ 1581.463173] Node 0 DMA32: 905*4kB (UME) 813*8kB (ME) 221*16kB (UME) 127*32kB (UME) 42*64kB (UM) 3*128kB (M) 0*256kB 1*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 21308kB [ 1581.483771] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1581.493670] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 1581.495839] Node 1 Normal: 5*4kB (M) 3*8kB (M) 607*16kB (UM) 1082*32kB (UM) 5*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 44700kB [ 1581.517657] CPU: 1 PID: 10336 Comm: syz-executor.4 Not tainted 4.14.232-syzkaller #0 [ 1581.530822] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1581.540632] Call Trace: [ 1581.543491] dump_stack+0x1b2/0x281 [ 1581.545991] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1581.547317] dump_header+0x178/0x82f [ 1581.557158] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1581.560930] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1581.560940] ? ___ratelimit+0x2cd/0x530 [ 1581.560950] oom_kill_process.cold+0x10/0xa40 [ 1581.560966] out_of_memory+0xe3e/0x1190 [ 1581.560978] ? oom_killer_disable+0x1c0/0x1c0 [ 1581.560985] ? mutex_trylock+0x152/0x1a0 [ 1581.560996] __alloc_pages_nodemask+0x23e1/0x2720 [ 1581.561009] ? __schedule+0x893/0x1de0 [ 1581.561024] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1581.573905] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1581.575786] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1581.580097] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1581.584750] ? retint_kernel+0x2d/0x2d [ 1581.593222] 21383 total pagecache pages [ 1581.594504] alloc_pages_current+0x155/0x260 [ 1581.599174] 0 pages in swap cache [ 1581.604891] __vmalloc_area_node+0x40a/0x680 [ 1581.612801] Swap cache stats: add 0, delete 0, find 0/0 [ 1581.614343] ? __vmalloc_node_range+0x150/0x150 [ 1581.623967] Free swap = 0kB [ 1581.628886] ? __get_vm_area_node+0x27d/0x340 [ 1581.628901] __vmalloc_node_range+0xbe/0x150 [ 1581.628911] vmalloc_user+0x47/0xa0 [ 1581.628918] ? kcov_mmap+0x2b/0x120 [ 1581.628927] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1581.628932] kcov_mmap+0x2b/0x120 [ 1581.628942] ? kmem_cache_alloc+0x35f/0x3c0 [ 1581.628952] mmap_region+0xa1a/0x1220 [ 1581.628965] do_mmap+0x5b3/0xcb0 [ 1581.628977] vm_mmap_pgoff+0x14e/0x1a0 [ 1581.628988] ? vma_is_stack_for_current+0xb0/0xb0 [ 1581.641398] Total swap = 0kB [ 1581.641868] ? __fget+0x225/0x360 [ 1581.646163] 2097051 pages RAM [ 1581.650660] SyS_mmap_pgoff+0x249/0x510 [ 1581.650671] ? find_mergeable_anon_vma+0x230/0x230 [ 1581.650680] ? do_syscall_64+0x4c/0x640 [ 1581.650687] ? align_vdso_addr+0x250/0x250 [ 1581.650694] do_syscall_64+0x1d5/0x640 [ 1581.650706] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1581.650714] RIP: 0033:0x466642 [ 1581.650718] RSP: 002b:00007ffd37bd2c38 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1581.650729] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 0000000000466642 [ 1581.657378] 0 pages HighMem/MovableOnly [ 1581.658775] RDX: 0000000000000003 RSI: 0000000000200000 RDI: 0000000000000000 [ 1581.658779] RBP: 0000000000000000 R08: 00000000000000e8 R09: 0000000000000000 [ 1581.658783] R10: 0000000000000001 R11: 0000000000000246 R12: 000000000056c090 [ 1581.658787] R13: 000000000056ca68 R14: 0000000000000000 R15: 00000000000000e9 [ 1581.665910] Mem-Info: [ 1581.673765] 363849 pages reserved [ 1581.676922] active_anon:13819 inactive_anon:20230 isolated_anon:0 [ 1581.676922] active_file:26 inactive_file:33 isolated_file:0 [ 1581.676922] unevictable:0 dirty:85 writeback:0 unstable:0 [ 1581.676922] slab_reclaimable:14436 slab_unreclaimable:119012 [ 1581.676922] mapped:43964 shmem:21266 pagetables:770 bounce:0 [ 1581.676922] free:13965 free_pcp:0 free_cma:0 [ 1581.681437] 0 pages cma reserved [ 1581.864695] Node 0 active_anon:55072kB inactive_anon:69260kB active_file:200kB inactive_file:16kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:148928kB dirty:336kB writeback:0kB shmem:73336kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1581.899424] Node 1 active_anon:204kB inactive_anon:11660kB active_file:0kB inactive_file:84kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:26928kB dirty:4kB writeback:0kB shmem:11728kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1581.933474] Node 0 DMA free:10972kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1581.963178] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1581.968360] Node 0 DMA32 free:18736kB min:36200kB low:45248kB high:54296kB active_anon:55148kB inactive_anon:69260kB active_file:140kB inactive_file:100kB unevictable:0kB writepending:192kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7648kB pagetables:2944kB bounce:0kB free_pcp:68kB local_pcp:4kB free_cma:0kB [ 1582.001578] lowmem_reserve[]: 0 0 0 0 0 [ 1582.005950] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1582.018793] syz-executor.5: [ 1582.034581] lowmem_reserve[]: 0 0 0 0 0 [ 1582.041757] Node 1 Normal free:26788kB min:53696kB low:67120kB high:80544kB active_anon:224kB inactive_anon:11660kB active_file:8kB inactive_file:0kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:160kB pagetables:152kB bounce:0kB free_pcp:120kB local_pcp:0kB free_cma:0kB [ 1582.052866] syz-executor.0: [ 1582.073387] lowmem_reserve[]: 0 0 0 0 0 [ 1582.080989] Node 0 DMA: 1*4kB (E) 7*8kB (UE) 10*16kB (UE) 8*32kB (UE) 2*64kB (UE) 1*128kB (E) 6*256kB (UE) 3*512kB (UE) 1*1024kB (E) 3*2048kB (UME) 0*4096kB = 10972kB [ 1582.099428] Node 0 DMA32: 910*4kB (UME) 814*8kB (ME) 220*16kB (ME) 54*32kB (UME) 21*64kB (UM) 3*128kB (M) 0*256kB 1*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 17640kB [ 1582.115938] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1582.125647] page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1582.129547] Node 1 [ 1582.145116] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1582.148374] Normal: 5*4kB (M) 4*8kB (UM) 5*16kB (UM) 823*32kB (UM) 5*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 26788kB [ 1582.155810] page allocation failure: order:0 [ 1582.175583] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1582.178138] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1582.182530] syz-executor.5 cpuset= [ 1582.186999] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1582.204306] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1582.218205] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1582.225457] / mems_allowed=0-1 [ 1582.227558] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1582.230817] syz-executor.0 cpuset= [ 1582.249831] 21337 total pagecache pages [ 1582.250065] device bridge_slave_1 left promiscuous mode [ 1582.253468] 0 pages in swap cache [ 1582.263733] CPU: 0 PID: 10153 Comm: syz-executor.5 Not tainted 4.14.232-syzkaller #0 [ 1582.272086] Swap cache stats: add 0, delete 0, find 0/0 [ 1582.274973] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1582.280478] Free swap = 0kB [ 1582.290370] Call Trace: [ 1582.290390] dump_stack+0x1b2/0x281 [ 1582.290405] warn_alloc.cold+0x96/0x1cc [ 1582.290416] ? zone_watermark_ok_safe+0x220/0x220 [ 1582.293540] Total swap = 0kB [ 1582.296142] ? usleep_range+0x130/0x130 [ 1582.299884] 2097051 pages RAM [ 1582.304110] ? try_to_free_pages+0x23f/0x6e0 [ 1582.309035] 0 pages HighMem/MovableOnly [ 1582.312196] ? _find_next_bit+0xdb/0x100 [ 1582.316262] 363849 pages reserved [ 1582.319450] ? run_timer_softirq+0x5a0/0x5a0 [ 1582.319472] __alloc_pages_nodemask+0x2127/0x2720 [ 1582.319488] ? lock_acquire+0x170/0x3f0 [ 1582.323883] 0 pages cma reserved [ 1582.327935] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1582.327944] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1582.327959] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1582.332186] Out of memory (oom_kill_allocating_task): Kill process 10336 (syz-executor.4) score 0 or sacrifice child [ 1582.335746] alloc_pages_current+0x155/0x260 [ 1582.340831] Killed process 10336 (syz-executor.4) total-vm:50108kB, anon-rss:64kB, file-rss:0kB, shmem-rss:0kB [ 1582.345577] ion_page_pool_alloc+0x118/0x1b0 [ 1582.345588] ion_system_heap_allocate+0x133/0x8c0 [ 1582.345598] ? _raw_spin_unlock+0x29/0x40 [ 1582.345608] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1582.345618] ? ion_system_contig_heap_create+0x130/0x130 [ 1582.345628] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1582.352550] syz-executor.4: [ 1582.353413] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1582.358271] vmalloc: allocation failure, allocated 2035712 of 2101248 bytes [ 1582.362721] ion_alloc+0x27a/0x810 [ 1582.368195] , mode:0x14080c0(GFP_KERNEL|__GFP_ZERO), nodemask= [ 1582.379265] ? ion_dma_buf_release+0x40/0x40 [ 1582.379278] ? __might_fault+0x177/0x1b0 [ 1582.379289] ion_ioctl+0xea/0x1f0 [ 1582.379299] ? ion_query_heaps+0x360/0x360 [ 1582.383789] (null) [ 1582.394718] ? ion_query_heaps+0x360/0x360 [ 1582.394727] do_vfs_ioctl+0x75a/0xff0 [ 1582.394738] ? ioctl_preallocate+0x1a0/0x1a0 [ 1582.394747] ? lock_downgrade+0x740/0x740 [ 1582.394759] ? __fget+0x225/0x360 [ 1582.399367] syz-executor.4 cpuset= [ 1582.404331] ? do_vfs_ioctl+0xff0/0xff0 [ 1582.404342] ? security_file_ioctl+0x83/0xb0 [ 1582.404352] SyS_ioctl+0x7f/0xb0 [ 1582.404360] ? do_vfs_ioctl+0xff0/0xff0 [ 1582.404371] do_syscall_64+0x1d5/0x640 [ 1582.409585] / [ 1582.414623] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1582.414633] RIP: 0033:0x4665f9 [ 1582.414638] RSP: 002b:00007f551e7c7188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1582.420943] mems_allowed=0-1 [ 1582.426517] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1582.544449] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000008 [ 1582.552338] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1582.559700] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1582.566954] R13: 00007ffd0570a9af R14: 00007f551e7c7300 R15: 0000000000022000 [ 1582.574580] CPU: 1 PID: 10336 Comm: syz-executor.4 Not tainted 4.14.232-syzkaller #0 [ 1582.582747] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1582.590527] syz-executor.3: [ 1582.592720] Call Trace: [ 1582.592724] page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1582.597167] dump_stack+0x1b2/0x281 [ 1582.600831] bridge0: port 2(bridge_slave_1) entered disabled state [ 1582.611270] warn_alloc.cold+0x96/0x1cc [ 1582.611281] ? zone_watermark_ok_safe+0x220/0x220 [ 1582.611287] ? retint_kernel+0x2d/0x2d [ 1582.611309] __vmalloc_area_node+0x48a/0x680 [ 1582.619056] / [ 1582.622279] ? __vmalloc_node_range+0x150/0x150 [ 1582.626751] mems_allowed=0-1 [ 1582.632312] ? __get_vm_area_node+0x27d/0x340 [ 1582.632322] __vmalloc_node_range+0xbe/0x150 [ 1582.632331] vmalloc_user+0x47/0xa0 [ 1582.632338] ? kcov_mmap+0x2b/0x120 [ 1582.632346] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1582.632351] kcov_mmap+0x2b/0x120 [ 1582.632360] ? kmem_cache_alloc+0x35f/0x3c0 [ 1582.632369] mmap_region+0xa1a/0x1220 [ 1582.632381] do_mmap+0x5b3/0xcb0 [ 1582.632393] vm_mmap_pgoff+0x14e/0x1a0 [ 1582.632405] ? vma_is_stack_for_current+0xb0/0xb0 [ 1582.632414] ? __fget+0x225/0x360 [ 1582.632424] SyS_mmap_pgoff+0x249/0x510 [ 1582.632434] ? find_mergeable_anon_vma+0x230/0x230 [ 1582.632443] ? do_syscall_64+0x4c/0x640 [ 1582.632450] ? align_vdso_addr+0x250/0x250 [ 1582.632457] do_syscall_64+0x1d5/0x640 [ 1582.632470] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1582.632477] RIP: 0033:0x466642 [ 1582.632481] RSP: 002b:00007ffd37bd2c38 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1582.632490] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 0000000000466642 [ 1582.632494] RDX: 0000000000000003 RSI: 0000000000200000 RDI: 0000000000000000 [ 1582.632498] RBP: 0000000000000000 R08: 00000000000000e8 R09: 0000000000000000 [ 1582.632502] R10: 0000000000000001 R11: 0000000000000246 R12: 000000000056c090 [ 1582.632507] R13: 000000000056ca68 R14: 0000000000000000 R15: 00000000000000e9 [ 1582.635681] syz-executor.1: [ 1582.637361] CPU: 0 PID: 10157 Comm: syz-executor.0 Not tainted 4.14.232-syzkaller #0 [ 1582.650752] syz-executor.3 invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask= [ 1582.652203] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1582.652208] Call Trace: [ 1582.652224] dump_stack+0x1b2/0x281 [ 1582.652238] warn_alloc.cold+0x96/0x1cc [ 1582.652250] ? zone_watermark_ok_safe+0x220/0x220 [ 1582.652260] ? usleep_range+0x130/0x130 [ 1582.652269] ? try_to_free_pages+0x23f/0x6e0 [ 1582.652279] ? _find_next_bit+0xdb/0x100 [ 1582.652290] ? run_timer_softirq+0x5a0/0x5a0 [ 1582.652306] __alloc_pages_nodemask+0x2127/0x2720 [ 1582.652322] ? lock_acquire+0x170/0x3f0 [ 1582.652337] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1582.652347] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1582.652362] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1582.652377] ? alloc_pages_current+0x16/0x260 [ 1582.652388] alloc_pages_current+0x155/0x260 [ 1582.652399] ion_page_pool_alloc+0x118/0x1b0 [ 1582.652409] ion_system_heap_allocate+0x133/0x8c0 [ 1582.652420] ? _raw_spin_unlock+0x29/0x40 [ 1582.652434] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1582.652443] ? ion_system_contig_heap_create+0x130/0x130 [ 1582.652452] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1582.652463] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1582.652473] ion_alloc+0x27a/0x810 [ 1582.652487] ? ion_dma_buf_release+0x40/0x40 [ 1582.652499] ? __might_fault+0x177/0x1b0 [ 1582.652511] ion_ioctl+0xea/0x1f0 [ 1582.652520] ? ion_query_heaps+0x360/0x360 [ 1582.652532] ? ion_query_heaps+0x360/0x360 [ 1582.652543] do_vfs_ioctl+0x75a/0xff0 [ 1582.652554] ? ioctl_preallocate+0x1a0/0x1a0 [ 1582.657289] (null) [ 1582.661940] ? lock_downgrade+0x740/0x740 [ 1582.661951] ? __fget+0x225/0x360 [ 1582.661959] ? do_vfs_ioctl+0xff0/0xff0 [ 1582.661969] ? security_file_ioctl+0x83/0xb0 [ 1582.661978] SyS_ioctl+0x7f/0xb0 [ 1582.661987] ? do_vfs_ioctl+0xff0/0xff0 [ 1582.668833] page allocation failure: order:0 [ 1582.669297] do_syscall_64+0x1d5/0x640 [ 1582.674568] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1582.678012] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1582.678020] RIP: 0033:0x4665f9 [ 1582.678023] RSP: 002b:00007fe4a6925188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1582.678033] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1582.678037] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000006 [ 1582.678044] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1582.683397] (null) [ 1582.686334] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1582.694104] , order=0, oom_score_adj=0 [ 1582.695255] R13: 00007ffe5881209f R14: 00007fe4a6925300 R15: 0000000000022000 [ 1582.695961] warn_alloc_show_mem: 3 callbacks suppressed [ 1582.695964] Mem-Info: [ 1582.704499] (null) [ 1582.708677] device bridge_slave_0 left promiscuous mode [ 1582.714903] syz-executor.3 cpuset= [ 1582.718160] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 1582.718184] CPU: 0 PID: 10322 Comm: syz-executor.3 Not tainted 4.14.232-syzkaller #0 [ 1582.718189] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1582.718192] Call Trace: [ 1582.718209] dump_stack+0x1b2/0x281 [ 1582.718223] warn_alloc.cold+0x96/0x1cc [ 1582.718235] ? zone_watermark_ok_safe+0x220/0x220 [ 1582.718254] ? wait_for_completion_io+0x10/0x10 [ 1582.718268] __alloc_pages_nodemask+0x2127/0x2720 [ 1582.718286] ? lock_acquire+0x170/0x3f0 [ 1582.718300] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1582.726015] syz-executor.1 cpuset= [ 1582.727104] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1582.732596] / [ 1582.736254] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1582.736271] alloc_pages_current+0x155/0x260 [ 1582.736280] ion_page_pool_alloc+0x118/0x1b0 [ 1582.736290] ion_system_heap_allocate+0x133/0x8c0 [ 1582.736299] ? ion_alloc+0x187/0x810 [ 1582.744529] / [ 1582.752451] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1582.760001] mems_allowed=0-1 [ 1582.767489] ? ion_system_contig_heap_create+0x130/0x130 [ 1582.774854] mems_allowed=0-1 [ 1582.782293] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1582.782307] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1582.782318] ion_alloc+0x204/0x810 [ 1582.782331] ? ion_dma_buf_release+0x40/0x40 [ 1582.782343] ? __might_fault+0x177/0x1b0 [ 1583.203586] ion_ioctl+0xea/0x1f0 [ 1583.207026] ? ion_query_heaps+0x360/0x360 [ 1583.211263] ? ion_query_heaps+0x360/0x360 [ 1583.215767] do_vfs_ioctl+0x75a/0xff0 [ 1583.219560] ? ioctl_preallocate+0x1a0/0x1a0 [ 1583.223978] ? lock_downgrade+0x740/0x740 [ 1583.228247] ? __fget+0x225/0x360 [ 1583.231688] ? do_vfs_ioctl+0xff0/0xff0 [ 1583.236083] ? security_file_ioctl+0x83/0xb0 [ 1583.240498] SyS_ioctl+0x7f/0xb0 [ 1583.244110] ? do_vfs_ioctl+0xff0/0xff0 [ 1583.248314] do_syscall_64+0x1d5/0x640 [ 1583.252299] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1583.258087] RIP: 0033:0x4665f9 [ 1583.261272] RSP: 002b:00007fd59d707188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1583.269146] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1583.276407] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000006 [ 1583.283754] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1583.291290] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1583.298552] R13: 00007ffcfd15ebff R14: 00007fd59d707300 R15: 0000000000022000 [ 1583.306061] CPU: 1 PID: 10325 Comm: syz-executor.1 Not tainted 4.14.232-syzkaller #0 [ 1583.307250] bridge0: port 1(bridge_slave_0) entered disabled state [ 1583.315167] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1583.315172] Call Trace: [ 1583.315190] dump_stack+0x1b2/0x281 [ 1583.315203] warn_alloc.cold+0x96/0x1cc [ 1583.315214] ? zone_watermark_ok_safe+0x220/0x220 [ 1583.315230] ? wait_for_completion_io+0x10/0x10 [ 1583.321957] active_anon:13843 inactive_anon:20230 isolated_anon:0 [ 1583.321957] active_file:32 inactive_file:7 isolated_file:0 [ 1583.321957] unevictable:0 dirty:23 writeback:0 unstable:0 [ 1583.321957] slab_reclaimable:14404 slab_unreclaimable:118906 [ 1583.321957] mapped:43903 shmem:21266 pagetables:774 bounce:0 [ 1583.321957] free:14027 free_pcp:391 free_cma:0 [ 1583.331270] __alloc_pages_nodemask+0x2127/0x2720 [ 1583.331288] ? lock_acquire+0x170/0x3f0 [ 1583.331302] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1583.334129] Node 0 active_anon:55148kB inactive_anon:69260kB active_file:128kB inactive_file:24kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:148784kB dirty:92kB writeback:0kB shmem:73336kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1583.337953] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1583.337970] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1583.337988] alloc_pages_current+0x155/0x260 [ 1583.337999] ion_page_pool_alloc+0x118/0x1b0 [ 1583.342288] Node 1 active_anon:224kB inactive_anon:11660kB active_file:0kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:26828kB dirty:0kB writeback:0kB shmem:11728kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1583.347083] ion_system_heap_allocate+0x133/0x8c0 [ 1583.352149] Node 0 [ 1583.386019] ? ion_alloc+0x187/0x810 [ 1583.386031] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1583.386039] ? ion_system_contig_heap_create+0x130/0x130 [ 1583.386047] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1583.386057] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1583.386066] ion_alloc+0x204/0x810 [ 1583.386078] ? ion_dma_buf_release+0x40/0x40 [ 1583.386089] ? __might_fault+0x177/0x1b0 [ 1583.386099] ion_ioctl+0xea/0x1f0 [ 1583.386109] ? ion_query_heaps+0x360/0x360 [ 1583.391031] DMA free:10972kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1583.395009] ? ion_query_heaps+0x360/0x360 [ 1583.399853] lowmem_reserve[]: [ 1583.430476] do_vfs_ioctl+0x75a/0xff0 [ 1583.430490] ? ioctl_preallocate+0x1a0/0x1a0 [ 1583.430499] ? lock_downgrade+0x740/0x740 [ 1583.430510] ? __fget+0x225/0x360 [ 1583.430518] ? do_vfs_ioctl+0xff0/0xff0 [ 1583.430529] ? security_file_ioctl+0x83/0xb0 [ 1583.430538] SyS_ioctl+0x7f/0xb0 [ 1583.430544] ? do_vfs_ioctl+0xff0/0xff0 [ 1583.430554] do_syscall_64+0x1d5/0x640 [ 1583.430568] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1583.435091] 0 [ 1583.440502] RIP: 0033:0x4665f9 [ 1583.440506] RSP: 002b:00007f22b5267188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1583.440515] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1583.440520] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000008 [ 1583.440524] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1583.440529] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1583.440534] R13: 00007ffea96cbc0f R14: 00007f22b5267300 R15: 0000000000022000 [ 1583.452461] CPU: 1 PID: 9728 Comm: syz-executor.3 Not tainted 4.14.232-syzkaller #0 [ 1583.478194] 2717 [ 1583.482524] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1583.484744] 2718 [ 1583.488437] Call Trace: [ 1583.488453] dump_stack+0x1b2/0x281 [ 1583.488464] dump_header+0x178/0x82f [ 1583.488474] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1583.488482] ? ___ratelimit+0x2cd/0x530 [ 1583.488491] oom_kill_process.cold+0x10/0xa40 [ 1583.488507] out_of_memory+0xe3e/0x1190 [ 1583.488519] ? oom_killer_disable+0x1c0/0x1c0 [ 1583.488525] ? mutex_trylock+0x152/0x1a0 [ 1583.488536] __alloc_pages_nodemask+0x23e1/0x2720 [ 1583.488554] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1583.488579] alloc_pages_current+0x155/0x260 [ 1583.488590] filemap_fault+0x11a1/0x1ad0 [ 1583.488608] ext4_filemap_fault+0x84/0xb0 [ 1583.488618] __do_fault+0xfa/0x380 [ 1583.488626] __handle_mm_fault+0x2497/0x4620 [ 1583.488637] ? vm_insert_page+0x7c0/0x7c0 [ 1583.494544] 2718 [ 1583.499959] ? hrtimer_nanosleep+0x1ff/0x4b0 [ 1583.499967] ? nanosleep_copyout+0x100/0x100 [ 1583.499979] ? mark_held_locks+0xa6/0xf0 [ 1583.499991] handle_mm_fault+0x455/0x9c0 [ 1583.500002] __do_page_fault+0x549/0xad0 [ 1583.500013] ? spurious_fault+0x640/0x640 [ 1583.500020] ? do_page_fault+0x60/0x500 [ 1583.500027] ? page_fault+0x2f/0x50 [ 1583.500036] page_fault+0x45/0x50 [ 1583.505409] 2718 [ 1583.510563] RIP: 1820b7:0x8 [ 1583.510567] RSP: 0009:00007ffcfd15eebc EFLAGS: 00000032 [ 1583.514125] Mem-Info: [ 1583.518923] active_anon:13843 inactive_anon:20230 isolated_anon:0 [ 1583.518923] active_file:16 inactive_file:7 isolated_file:0 [ 1583.518923] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1583.518923] slab_reclaimable:14404 slab_unreclaimable:118905 [ 1583.518923] mapped:43903 shmem:21266 pagetables:774 bounce:0 [ 1583.518923] free:14070 free_pcp:392 free_cma:0 [ 1583.525025] Node 0 [ 1583.526515] Node 0 active_anon:55148kB inactive_anon:69260kB active_file:64kB inactive_file:24kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:148784kB dirty:0kB writeback:0kB shmem:73336kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1583.530875] DMA32 free:17780kB min:36200kB low:45248kB high:54296kB active_anon:55148kB inactive_anon:69260kB active_file:64kB inactive_file:24kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7648kB pagetables:2944kB bounce:0kB free_pcp:764kB local_pcp:136kB free_cma:0kB [ 1583.530878] lowmem_reserve[]: 0 0 0 0 0 [ 1583.530900] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1583.530921] lowmem_reserve[]: [ 1583.574576] team0 (unregistering): Port device team_slave_1 removed [ 1583.587783] 0 [ 1583.600570] Node 1 active_anon:224kB inactive_anon:11660kB active_file:0kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:26828kB dirty:0kB writeback:0kB shmem:11728kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1583.613690] 0 [ 1583.631440] team0 (unregistering): Port device team_slave_0 removed [ 1583.637752] 0 [ 1583.679056] Node 0 [ 1583.681206] 0 [ 1583.683112] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 1583.685740] 0 [ 1583.692355] DMA free:10972kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1583.711660] warn_alloc_show_mem: 2 callbacks suppressed [ 1583.711663] Mem-Info: [ 1583.714418] Node 1 [ 1583.722984] lowmem_reserve[]: [ 1583.729315] Normal free:39428kB min:53696kB low:67120kB high:80544kB active_anon:224kB inactive_anon:11660kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:160kB pagetables:152kB bounce:0kB free_pcp:852kB local_pcp:620kB free_cma:0kB [ 1583.733546] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 1583.759812] lowmem_reserve[]: [ 1583.760622] active_anon:13843 inactive_anon:20230 isolated_anon:0 [ 1583.760622] active_file:16 inactive_file:7 isolated_file:0 [ 1583.760622] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1583.760622] slab_reclaimable:14404 slab_unreclaimable:118699 [ 1583.760622] mapped:43903 shmem:21266 pagetables:774 bounce:0 [ 1583.760622] free:34724 free_pcp:697 free_cma:0 [ 1583.762134] 0 [ 1583.767050] Node 0 active_anon:55148kB inactive_anon:69260kB active_file:64kB inactive_file:24kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:148784kB dirty:0kB writeback:0kB shmem:73336kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1583.779859] 0 [ 1583.780652] 0 [ 1583.784922] 0 0 [ 1583.789213] 2717 2718 2718 2718 [ 1583.789228] Node 0 DMA32 free:69840kB min:36200kB low:45248kB high:54296kB active_anon:55148kB inactive_anon:69260kB active_file:64kB inactive_file:24kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7648kB pagetables:2944kB bounce:0kB free_pcp:1356kB local_pcp:676kB free_cma:0kB [ 1583.789245] lowmem_reserve[]: 0 0 0 0 0 [ 1583.789262] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1583.789276] lowmem_reserve[]: 0 [ 1583.796520] 0 [ 1583.815891] 0 [ 1583.887345] Node 1 active_anon:224kB inactive_anon:11660kB active_file:0kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:26828kB dirty:0kB writeback:0kB shmem:11728kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1583.917911] Node 0 [ 1583.974081] bond0 (unregistering): Released all slaves [ 1583.993449] DMA: [ 1584.008225] Node 0 [ 1584.015018] 15*4kB [ 1584.051481] 0 [ 1584.070893] (UE) [ 1584.113239] DMA free:11028kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1584.197488] 7*8kB [ 1584.208960] 0 [ 1584.322349] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1584.327510] (UE) 10*16kB (UE) 8*32kB (UE) 2*64kB (UE) 1*128kB (E) 6*256kB (UE) 3*512kB (UE) 1*1024kB (E) 3*2048kB (UME) 0*4096kB = 11028kB [ 1584.330969] Node 0 DMA32 free:53612kB min:36200kB low:45248kB high:54296kB active_anon:55248kB inactive_anon:69260kB active_file:64kB inactive_file:4540kB unevictable:0kB writepending:148kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7648kB pagetables:2944kB bounce:0kB free_pcp:1328kB local_pcp:680kB free_cma:0kB [ 1584.391345] 0 [ 1584.395696] Node 1 Normal free:152400kB min:53696kB low:67120kB high:80544kB active_anon:224kB inactive_anon:11660kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:160kB pagetables:152kB bounce:0kB free_pcp:1352kB local_pcp:732kB free_cma:0kB [ 1584.397467] Node 0 [ 1584.487490] lowmem_reserve[]: 0 0 0 0 0 [ 1584.493933] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1584.497508] DMA32: [ 1584.524933] lowmem_reserve[]: 0 0 0 0 0 [ 1584.531917] Node 0 DMA: 10*4kB (UE) 13*8kB (UE) 11*16kB (UE) 8*32kB (UE) 1*64kB (E) 1*128kB (E) 6*256kB (UE) 3*512kB (UE) 1*1024kB (E) 3*2048kB (UME) 0*4096kB = 11008kB [ 1584.575344] 9563*4kB (UME) 6336*8kB (UME) 3844*16kB (UME) 1376*32kB (UME) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 194476kB [ 1584.587420] Node 0 DMA32: 9661*4kB (UME) 6343*8kB (UME) 3970*16kB (UME) 1380*32kB (UME) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 197068kB [ 1584.590093] syz-executor.3: [ 1584.620693] lowmem_reserve[]: 0 0 0 0 0 [ 1584.627986] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1584.631385] Node 1 [ 1584.639325] page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1584.643485] Node 0 [ 1584.665848] Normal free:153412kB min:53696kB low:67120kB high:80544kB active_anon:224kB inactive_anon:11660kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:160kB pagetables:152kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1584.677482] Node 1 [ 1584.699999] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 1584.705597] Normal: [ 1584.723720] CPU: 0 PID: 10322 Comm: syz-executor.3 Not tainted 4.14.232-syzkaller #0 [ 1584.727855] 0*4kB [ 1584.734326] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1584.734330] Call Trace: [ 1584.734346] dump_stack+0x1b2/0x281 [ 1584.734360] warn_alloc.cold+0x96/0x1cc [ 1584.734371] ? zone_watermark_ok_safe+0x220/0x220 [ 1584.734393] __alloc_pages_nodemask+0x2127/0x2720 [ 1584.734403] ? lock_acquire+0x170/0x3f0 [ 1584.734415] ? lock_acquire+0x170/0x3f0 [ 1584.747553] 0*8kB [ 1584.748056] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1584.750699] 0*16kB [ 1584.754494] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1584.767419] 0*32kB [ 1584.769482] ? __mutex_unlock_slowpath+0x75/0x770 [ 1584.773953] 0*64kB [ 1584.778218] alloc_pages_current+0x155/0x260 [ 1584.778232] ion_page_pool_alloc+0x118/0x1b0 [ 1584.778241] ion_system_heap_allocate+0x133/0x8c0 [ 1584.778256] ? _raw_spin_unlock+0x29/0x40 [ 1584.797482] lowmem_reserve[]: [ 1584.800788] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1584.803252] 0 [ 1584.807822] ? ion_system_contig_heap_create+0x130/0x130 [ 1584.807831] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1584.807842] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1584.807851] ion_alloc+0x27a/0x810 [ 1584.807864] ? ion_dma_buf_release+0x40/0x40 [ 1584.807876] ? __might_fault+0x177/0x1b0 [ 1584.812289] 0*128kB [ 1584.817125] ion_ioctl+0xea/0x1f0 [ 1584.827393] 0*256kB [ 1584.829388] ? ion_query_heaps+0x360/0x360 [ 1584.831174] 0*512kB [ 1584.837216] ? ion_query_heaps+0x360/0x360 [ 1584.847661] 0 [ 1584.851118] do_vfs_ioctl+0x75a/0xff0 [ 1584.855592] 0 [ 1584.859909] ? ioctl_preallocate+0x1a0/0x1a0 [ 1584.859918] ? lock_downgrade+0x740/0x740 [ 1584.859930] ? __fget+0x225/0x360 [ 1584.859941] ? do_vfs_ioctl+0xff0/0xff0 [ 1584.877484] 0*1024kB [ 1584.879657] ? security_file_ioctl+0x83/0xb0 [ 1584.881452] 0*2048kB [ 1584.885360] SyS_ioctl+0x7f/0xb0 [ 1584.887135] 0*4096kB [ 1584.891708] ? do_vfs_ioctl+0xff0/0xff0 [ 1584.891719] do_syscall_64+0x1d5/0x640 [ 1584.891733] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1584.891741] RIP: 0033:0x4665f9 [ 1584.891745] RSP: 002b:00007fd59d707188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1584.891756] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1584.895907] 0 [ 1584.899346] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000006 [ 1584.899351] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1584.899355] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1584.899359] R13: 00007ffcfd15ebff R14: 00007fd59d707300 R15: 0000000000022000 [ 1584.927729] Normal: [ 1584.962014] = 0kB [ 1584.989652] 466*4kB (UM) 1126*8kB (UM) 3202*16kB (UM) 2854*32kB (UM) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 153432kB [ 1585.005703] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1585.015215] 0 [ 1585.016055] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1585.017085] Node 0 [ 1585.026187] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1585.037646] Node 1 Normal: 466*4kB (UM) 1126*8kB (UM) 3202*16kB (UM) 2854*32kB (UM) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 153432kB [ 1585.039594] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1585.055822] DMA: [ 1585.062585] 23306 total pagecache pages [ 1585.067391] 10*4kB (UE) 14*8kB (UE) 15*16kB (UE) 9*32kB (UE) 1*64kB [ 1585.070864] 0 pages in swap cache [ 1585.081519] (E) 1*128kB (E) 6*256kB (UE) 3*512kB (UE) 1*1024kB (E) 3*2048kB (UME) 0*4096kB = 11112kB [ 1585.083290] Swap cache stats: add 0, delete 0, find 0/0 [ 1585.091925] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1585.099062] Free swap = 0kB [ 1585.112036] Total swap = 0kB [ 1585.117164] 2097051 pages RAM [ 1585.117542] Node 0 DMA32: 9744*4kB (UE) 5784*8kB (UME) 8171*16kB (UME) 1967*32kB (UME) 17*64kB (U) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 280016kB [ 1585.122228] 0 pages HighMem/MovableOnly [ 1585.143344] warn_alloc_show_mem: 1 callbacks suppressed [ 1585.143347] Mem-Info: [ 1585.147391] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1585.151277] 363849 pages reserved [ 1585.151568] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1585.163908] active_anon:13775 inactive_anon:20229 isolated_anon:0 [ 1585.163908] active_file:179 inactive_file:1963 isolated_file:0 [ 1585.163908] unevictable:0 dirty:43 writeback:0 unstable:0 [ 1585.163908] slab_reclaimable:14258 slab_unreclaimable:120703 [ 1585.163908] mapped:45271 shmem:21265 pagetables:752 bounce:0 [ 1585.163908] free:111240 free_pcp:219 free_cma:0 [ 1585.173514] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1585.173562] Node 1 Normal: 466*4kB (UM) 1133*8kB (UM) 3200*16kB (UM) 2856*32kB (UM) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 153520kB [ 1585.173627] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1585.173633] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1585.173639] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1585.173662] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1585.209344] 0 pages cma reserved [ 1585.233494] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1585.277030] Node 0 active_anon:54876kB inactive_anon:69256kB active_file:716kB inactive_file:8048kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:154456kB dirty:172kB writeback:0kB shmem:73332kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1585.290520] 23528 total pagecache pages [ 1585.323382] 23528 total pagecache pages [ 1585.330525] 0 pages in swap cache [ 1585.334656] Swap cache stats: add 0, delete 0, find 0/0 [ 1585.353031] Free swap = 0kB [ 1585.356212] Total swap = 0kB [ 1585.357456] Node 1 active_anon:224kB inactive_anon:11660kB active_file:0kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:26828kB dirty:0kB writeback:0kB shmem:11728kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1585.363506] 0 pages in swap cache [ 1585.394978] 2097051 pages RAM [ 1585.399782] 0 pages HighMem/MovableOnly [ 1585.406235] 363849 pages reserved [ 1585.410195] Node 0 DMA free:11104kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1585.414835] 0 pages cma reserved [ 1585.445812] Swap cache stats: add 0, delete 0, find 0/0 [ 1585.451905] Free swap = 0kB [ 1585.454935] Total swap = 0kB [ 1585.462242] 2097051 pages RAM [ 1585.465373] 0 pages HighMem/MovableOnly [ 1585.467412] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1585.471642] Out of memory (oom_kill_allocating_task): Kill process 9728 (syz-executor.3) score 0 or sacrifice child [ 1585.475142] Node 0 [ 1585.490349] 363849 pages reserved [ 1585.496135] 0 pages cma reserved [ 1585.497590] DMA32 free:278972kB min:36200kB low:45248kB high:54296kB active_anon:54876kB inactive_anon:69256kB active_file:2568kB inactive_file:6568kB unevictable:0kB writepending:172kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7584kB pagetables:2856kB bounce:0kB free_pcp:1380kB local_pcp:744kB free_cma:0kB [ 1585.501793] Killed process 10322 (syz-executor.3) total-vm:93252kB, anon-rss:152kB, file-rss:34820kB, shmem-rss:0kB [ 1585.567416] lowmem_reserve[]: 0 0 0 0 0 [ 1585.571940] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1585.597585] oom_reaper: reaped process 10336 (syz-executor.4), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1585.632771] lowmem_reserve[]: 0 0 0 0 0 [ 1585.637662] Node 1 Normal free:153848kB min:53696kB low:67120kB high:80544kB active_anon:224kB inactive_anon:11660kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:128kB pagetables:152kB bounce:0kB free_pcp:20kB local_pcp:0kB free_cma:0kB [ 1585.644463] oom_reaper: reaped process 10325 (syz-executor.1), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB 09:39:49 executing program 5: socket(0x11, 0x2, 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000004980), 0x0, 0x0) getsockopt$X25_QBITINCL(r0, 0x106, 0x1, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x4, 0x7, 0x7, 0x6, 0xa, @remote, @private2={0xfc, 0x2, '\x00', 0x1}, 0x700, 0x20, 0x9, 0x5f3b}}) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000004980), 0x0, 0x0) getsockopt$X25_QBITINCL(r1, 0x106, 0x1, 0x0, 0x0) r2 = socket$vsock_dgram(0x28, 0x2, 0x0) ioctl$sock_SIOCDELRT(r2, 0x890c, &(0x7f0000000180)={0x0, @llc={0x1a, 0x33a, 0x9, 0x6, 0x27, 0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, @vsock={0x28, 0x0, 0x2710}, @isdn={0x22, 0xcb, 0x81, 0x2, 0x69}, 0xfff, 0x0, 0x0, 0x0, 0x81, &(0x7f0000000140)='dummy0\x00', 0x80000000, 0x101, 0x8001}) openat$zero(0xffffffffffffff9c, &(0x7f00000000c0), 0x800, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000100)={0x80000004, 0x7}) getsockname(r1, &(0x7f0000002040)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f00000020c0)=0x80) socket(0x27, 0xa, 0x40000801) socket$can_bcm(0x1d, 0x2, 0x2) [ 1585.707485] lowmem_reserve[]: 0 0 0 0 0 [ 1585.713161] Node 0 DMA: 10*4kB (UE) 16*8kB (UE) 16*16kB (UE) 9*32kB (UE) 2*64kB (UE) 1*128kB (E) 6*256kB (UE) 3*512kB (UE) 1*1024kB (E) 3*2048kB (UME) 0*4096kB = 11208kB [ 1585.757365] Node 0 DMA32: 8670*4kB (U) 5525*8kB (UE) 8069*16kB (UE) 1943*32kB (UE) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 270160kB [ 1585.776040] oom_reaper: reaped process 10322 (syz-executor.3), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1585.781489] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB 09:39:49 executing program 2: r0 = socket(0x28, 0x1, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x20040801) 09:39:49 executing program 1: socket(0x11, 0x2, 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000004980), 0x0, 0x0) getsockopt$X25_QBITINCL(r0, 0x106, 0x1, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x4, 0x7, 0x7, 0x6, 0xa, @remote, @private2={0xfc, 0x2, '\x00', 0x1}, 0x700, 0x20, 0x9, 0x5f3b}}) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000004980), 0x0, 0x0) getsockopt$X25_QBITINCL(r1, 0x106, 0x1, 0x0, 0x0) r2 = socket$vsock_dgram(0x28, 0x2, 0x0) ioctl$sock_SIOCDELRT(r2, 0x890c, &(0x7f0000000180)={0x0, @llc={0x1a, 0x33a, 0x9, 0x6, 0x27, 0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, @vsock={0x28, 0x0, 0x2710}, @isdn={0x22, 0xcb, 0x81, 0x2, 0x69}, 0xfff, 0x0, 0x0, 0x0, 0x81, &(0x7f0000000140)='dummy0\x00', 0x80000000, 0x101, 0x8001}) openat$zero(0xffffffffffffff9c, &(0x7f00000000c0), 0x800, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000100)={0x80000004, 0x7}) getsockname(r1, &(0x7f0000002040)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f00000020c0)=0x80) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000240)={0x2, 0x80, 0x1, 0xff, 0x4, 0x41, 0x0, 0xfffffffffffffe00, 0x2000, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0xdc, 0x2, @perf_bp={&(0x7f0000000200), 0x5}, 0x4004, 0x7fffffff, 0x2, 0x4, 0x6, 0x3e7, 0x8001, 0x0, 0x3, 0x0, 0x8001}) [ 1585.812353] Node 1 Normal: 466*4kB (UM) 1181*8kB (UM) 3196*16kB (UM) 2854*32kB (UM) 4*64kB (U) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 154032kB [ 1585.831865] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1585.844771] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1585.859311] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1585.872004] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1585.906335] 27598 total pagecache pages [ 1585.922498] 0 pages in swap cache [ 1585.940077] Swap cache stats: add 0, delete 0, find 0/0 [ 1585.978968] Free swap = 0kB [ 1585.988132] Total swap = 0kB [ 1585.996671] 2097051 pages RAM [ 1586.012300] 0 pages HighMem/MovableOnly [ 1586.027823] 363849 pages reserved [ 1586.036048] 0 pages cma reserved [ 1586.070640] syz-executor.5: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1586.071574] syz-executor.1: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1586.109588] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 1586.134506] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 1586.135940] CPU: 0 PID: 10339 Comm: syz-executor.5 Not tainted 4.14.232-syzkaller #0 [ 1586.147986] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1586.157771] Call Trace: [ 1586.160545] dump_stack+0x1b2/0x281 [ 1586.164468] warn_alloc.cold+0x96/0x1cc [ 1586.168437] ? zone_watermark_ok_safe+0x220/0x220 [ 1586.173388] __alloc_pages_nodemask+0x2127/0x2720 [ 1586.178322] ? lock_acquire+0x170/0x3f0 [ 1586.182495] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1586.187623] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1586.193556] ? __mutex_unlock_slowpath+0x75/0x770 [ 1586.198696] ? __sanitizer_cov_trace_pc+0x23/0x50 [ 1586.203809] alloc_pages_current+0x155/0x260 [ 1586.208501] ion_page_pool_alloc+0x118/0x1b0 [ 1586.213201] ion_system_heap_allocate+0x133/0x8c0 [ 1586.218127] ? ion_alloc+0x187/0x810 [ 1586.222193] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1586.227917] ? ion_system_contig_heap_create+0x130/0x130 [ 1586.234354] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1586.239398] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1586.245301] ion_alloc+0x204/0x810 [ 1586.249755] ? ion_dma_buf_release+0x40/0x40 [ 1586.254712] ? __might_fault+0x177/0x1b0 [ 1586.259288] ion_ioctl+0xea/0x1f0 [ 1586.263351] ? ion_query_heaps+0x360/0x360 [ 1586.267704] ? ion_query_heaps+0x360/0x360 [ 1586.272285] do_vfs_ioctl+0x75a/0xff0 [ 1586.276704] ? ioctl_preallocate+0x1a0/0x1a0 [ 1586.281498] ? lock_downgrade+0x740/0x740 [ 1586.285924] ? __fget+0x225/0x360 [ 1586.289656] ? do_vfs_ioctl+0xff0/0xff0 [ 1586.293740] ? security_file_ioctl+0x83/0xb0 [ 1586.298285] SyS_ioctl+0x7f/0xb0 [ 1586.301766] ? do_vfs_ioctl+0xff0/0xff0 [ 1586.305938] do_syscall_64+0x1d5/0x640 [ 1586.310024] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1586.315569] RIP: 0033:0x4665f9 [ 1586.318955] RSP: 002b:00007f551e7c7188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1586.326841] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1586.335820] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000008 [ 1586.343801] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1586.351241] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1586.358887] R13: 00007ffd0570a9af R14: 00007f551e7c7300 R15: 0000000000022000 [ 1586.366321] CPU: 1 PID: 10341 Comm: syz-executor.1 Not tainted 4.14.232-syzkaller #0 [ 1586.374310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1586.383674] Call Trace: [ 1586.386290] dump_stack+0x1b2/0x281 [ 1586.390027] warn_alloc.cold+0x96/0x1cc [ 1586.394936] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1586.400669] ? zone_watermark_ok_safe+0x220/0x220 [ 1586.405545] __alloc_pages_nodemask+0x2127/0x2720 [ 1586.410496] ? __schedule+0x893/0x1de0 [ 1586.415361] ? lock_acquire+0x170/0x3f0 [ 1586.419623] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1586.424492] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1586.429962] ? __mutex_unlock_slowpath+0x75/0x770 [ 1586.434920] ? retint_kernel+0x2d/0x2d [ 1586.439044] alloc_pages_current+0x155/0x260 [ 1586.444120] ion_page_pool_alloc+0x118/0x1b0 [ 1586.448640] ion_system_heap_allocate+0x133/0x8c0 [ 1586.453924] ? ion_alloc+0x187/0x810 [ 1586.457763] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1586.464050] ? ion_system_contig_heap_create+0x130/0x130 [ 1586.469644] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1586.474689] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1586.479562] ion_alloc+0x204/0x810 [ 1586.483252] ? ion_dma_buf_release+0x40/0x40 [ 1586.488593] ? __might_fault+0x177/0x1b0 [ 1586.492682] ion_ioctl+0xea/0x1f0 [ 1586.496280] ? ion_query_heaps+0x360/0x360 [ 1586.500772] ? ion_query_heaps+0x360/0x360 [ 1586.505667] do_vfs_ioctl+0x75a/0xff0 [ 1586.509974] ? ioctl_preallocate+0x1a0/0x1a0 [ 1586.514660] ? lock_downgrade+0x740/0x740 [ 1586.519525] ? __fget+0x225/0x360 [ 1586.523875] ? do_vfs_ioctl+0xff0/0xff0 [ 1586.527869] ? security_file_ioctl+0x83/0xb0 [ 1586.532589] SyS_ioctl+0x7f/0xb0 [ 1586.538577] ? do_vfs_ioctl+0xff0/0xff0 [ 1586.542838] do_syscall_64+0x1d5/0x640 [ 1586.547036] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1586.552510] RIP: 0033:0x4665f9 [ 1586.555930] RSP: 002b:00007f22b5267188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1586.563951] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1586.571937] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000008 [ 1586.579419] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1586.587270] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1586.595473] R13: 00007ffea96cbc0f R14: 00007f22b5267300 R15: 0000000000022000 [ 1586.627164] Mem-Info: [ 1586.638605] active_anon:13719 inactive_anon:20229 isolated_anon:36 [ 1586.638605] active_file:691 inactive_file:5802 isolated_file:0 [ 1586.638605] unevictable:0 dirty:84 writeback:0 unstable:0 [ 1586.638605] slab_reclaimable:14220 slab_unreclaimable:120790 [ 1586.638605] mapped:48074 shmem:21265 pagetables:744 bounce:0 [ 1586.638605] free:356999 free_pcp:82 free_cma:0 [ 1586.766100] Node 0 active_anon:54672kB inactive_anon:69256kB active_file:2764kB inactive_file:23204kB unevictable:0kB isolated(anon):96kB isolated(file):0kB mapped:165468kB dirty:332kB writeback:0kB shmem:73332kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1586.832943] Node 1 active_anon:204kB inactive_anon:11660kB active_file:0kB inactive_file:4kB unevictable:0kB isolated(anon):48kB isolated(file):0kB mapped:26828kB dirty:4kB writeback:0kB shmem:11728kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1586.900470] Node 0 DMA free:11160kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1586.942708] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1586.964575] Node 0 DMA32 free:320784kB min:36200kB low:45248kB high:54296kB active_anon:54716kB inactive_anon:69256kB active_file:2788kB inactive_file:23256kB unevictable:0kB writepending:372kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7552kB pagetables:2740kB bounce:0kB free_pcp:240kB local_pcp:192kB free_cma:0kB [ 1587.000892] lowmem_reserve[]: 0 0 0 0 0 [ 1587.005252] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1587.080077] lowmem_reserve[]: 0 0 0 0 0 [ 1587.093193] Node 1 Normal free:1376928kB min:53696kB low:67120kB high:80544kB active_anon:204kB inactive_anon:11660kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:4kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:128kB pagetables:148kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1587.163583] lowmem_reserve[]: 0 0 0 0 0 [ 1587.175756] Node 0 DMA: 10*4kB (UE) 17*8kB (UE) 15*16kB (UE) 8*32kB (UE) 6*64kB (UE) 2*128kB (UE) 5*256kB (UE) 3*512kB (UE) 1*1024kB (E) 3*2048kB (UME) 0*4096kB = 11296kB [ 1587.199028] Node 0 DMA32: 5*4kB (E) 502*8kB (UME) 117*16kB (ME) 27*32kB (UME) 11*64kB (ME) 1075*128kB (UM) 341*256kB (UM) 22*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 243636kB [ 1587.225011] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1587.237197] Node 1 Normal: 470*4kB (UM) 1209*8kB (UM) 3192*16kB (UM) 2856*32kB (UM) 6490*64kB (UM) 2369*128kB (U) 904*256kB (U) 395*512kB (U) 65*1024kB (U) 2*2048kB (U) 0*4096kB = 1376928kB [ 1587.262439] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1587.273306] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1587.285979] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1587.296181] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1587.309309] 27896 total pagecache pages [ 1587.313384] 0 pages in swap cache [ 1587.317036] Swap cache stats: add 0, delete 0, find 0/0 [ 1587.325352] Free swap = 0kB [ 1587.331209] Total swap = 0kB [ 1587.339256] 2097051 pages RAM [ 1587.344929] 0 pages HighMem/MovableOnly [ 1587.355785] 363849 pages reserved [ 1587.366868] 0 pages cma reserved [ 1588.302726] IPVS: ftp: loaded support on port[0] = 21 [ 1588.629626] kworker/u4:2 invoked oom-killer: gfp_mask=0x15080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null), order=3, oom_score_adj=0 [ 1588.669913] kworker/u4:2 cpuset=/ mems_allowed=0-1 [ 1588.675120] CPU: 0 PID: 5517 Comm: kworker/u4:2 Not tainted 4.14.232-syzkaller #0 [ 1588.683172] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1588.693165] Workqueue: events_unbound call_usermodehelper_exec_work [ 1588.699747] Call Trace: [ 1588.703352] dump_stack+0x1b2/0x281 [ 1588.707014] dump_header+0x178/0x82f [ 1588.710764] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1588.715880] ? ___ratelimit+0x2cd/0x530 [ 1588.720172] oom_kill_process.cold+0x10/0xa40 [ 1588.724777] ? lock_downgrade+0x740/0x740 [ 1588.729682] out_of_memory+0x2dc/0x1190 [ 1588.734012] ? oom_killer_disable+0x1c0/0x1c0 [ 1588.738950] ? mutex_trylock+0x152/0x1a0 [ 1588.743096] __alloc_pages_nodemask+0x23e1/0x2720 [ 1588.748121] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1588.753564] ? fs_reclaim_release+0xd0/0x110 [ 1588.758344] ? kmem_cache_alloc_node+0x38b/0x410 [ 1588.763453] copy_process.part.0+0x265/0x71c0 [ 1588.768040] ? __lock_acquire+0x5fc/0x3f20 [ 1588.772448] ? trace_hardirqs_on+0x10/0x10 [ 1588.777225] ? static_obj+0x50/0x50 [ 1588.781186] ? call_usermodehelper_exec_work+0x2a0/0x2a0 [ 1588.786877] ? __cleanup_sighand+0x40/0x40 [ 1588.791384] ? call_usermodehelper_exec_work+0x2a0/0x2a0 [ 1588.796827] _do_fork+0x184/0xc80 [ 1588.800419] ? fork_idle+0x270/0x270 [ 1588.804399] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1588.810196] ? process_one_work+0x6c4/0x14a0 [ 1588.814805] ? call_usermodehelper_exec_work+0x2a0/0x2a0 [ 1588.821179] kernel_thread+0x2f/0x40 [ 1588.825262] call_usermodehelper_exec_work+0x1ac/0x2a0 [ 1588.831077] ? call_usermodehelper+0x80/0x80 [ 1588.835924] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1588.841800] process_one_work+0x793/0x14a0 [ 1588.847506] ? work_busy+0x320/0x320 [ 1588.851505] ? worker_thread+0x158/0xff0 [ 1588.855735] ? _raw_spin_unlock_irq+0x24/0x80 [ 1588.860393] worker_thread+0x5cc/0xff0 [ 1588.864718] ? rescuer_thread+0xc80/0xc80 [ 1588.869203] kthread+0x30d/0x420 [ 1588.872646] ? kthread_create_on_node+0xd0/0xd0 [ 1588.877770] ret_from_fork+0x24/0x30 [ 1588.889754] Mem-Info: [ 1588.892268] active_anon:13896 inactive_anon:20229 isolated_anon:0 [ 1588.892268] active_file:40 inactive_file:0 isolated_file:0 [ 1588.892268] unevictable:0 dirty:25 writeback:0 unstable:0 [ 1588.892268] slab_reclaimable:14190 slab_unreclaimable:120720 [ 1588.892268] mapped:52713 shmem:21265 pagetables:803 bounce:0 [ 1588.892268] free:14021 free_pcp:60 free_cma:0 [ 1588.896806] syz-executor.3: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1588.955845] Node 0 active_anon:54700kB inactive_anon:69256kB active_file:0kB inactive_file:68kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:183908kB dirty:0kB writeback:0kB shmem:73332kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1588.960837] syz-executor.3 cpuset= [ 1588.991341] Node 1 active_anon:916kB inactive_anon:11672kB active_file:32kB inactive_file:40kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:26828kB dirty:0kB writeback:0kB shmem:11748kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1589.004382] / [ 1589.027823] Node 0 DMA free:10976kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1589.040242] mems_allowed=0-1 [ 1589.060650] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1589.065705] Node 0 DMA32 free:18896kB min:36200kB low:45248kB high:54296kB active_anon:54700kB inactive_anon:69256kB active_file:0kB inactive_file:68kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7616kB pagetables:2916kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1589.075424] CPU: 1 PID: 10322 Comm: syz-executor.3 Not tainted 4.14.232-syzkaller #0 [ 1589.103033] lowmem_reserve[]: [ 1589.103364] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1589.103372] Call Trace: [ 1589.106666] 0 [ 1589.116399] dump_stack+0x1b2/0x281 [ 1589.116413] warn_alloc.cold+0x96/0x1cc [ 1589.116424] ? zone_watermark_ok_safe+0x220/0x220 [ 1589.116433] ? usleep_range+0x130/0x130 [ 1589.116446] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1589.116458] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1589.116469] ? run_timer_softirq+0x5a0/0x5a0 [ 1589.124931] 0 [ 1589.125104] __alloc_pages_nodemask+0x2127/0x2720 [ 1589.129094] 0 [ 1589.134238] ? lock_acquire+0x170/0x3f0 [ 1589.143891] 0 [ 1589.148490] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1589.148501] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1589.148517] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1589.148524] ? retint_kernel+0x2d/0x2d [ 1589.148530] ? ion_page_pool_alloc+0x28/0x1b0 [ 1589.148541] ? ion_page_pool_alloc+0x28/0x1b0 [ 1589.153300] 0 [ 1589.155098] alloc_pages_current+0x155/0x260 [ 1589.166580] ion_page_pool_alloc+0x118/0x1b0 [ 1589.168408] Node 0 [ 1589.173316] ion_system_heap_allocate+0x133/0x8c0 [ 1589.183819] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1589.184041] ? _raw_spin_unlock+0x29/0x40 [ 1589.189963] lowmem_reserve[]: [ 1589.194664] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1589.205369] 0 [ 1589.205915] ? ion_system_contig_heap_create+0x130/0x130 [ 1589.210539] 0 [ 1589.212979] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1589.223644] 0 [ 1589.244612] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1589.244624] ion_alloc+0x27a/0x810 [ 1589.244638] ? ion_dma_buf_release+0x40/0x40 [ 1589.244648] ? __might_fault+0x177/0x1b0 [ 1589.244658] ion_ioctl+0xea/0x1f0 [ 1589.244666] ? ion_query_heaps+0x360/0x360 [ 1589.244677] ? ion_query_heaps+0x360/0x360 [ 1589.244688] do_vfs_ioctl+0x75a/0xff0 [ 1589.244703] ? ioctl_preallocate+0x1a0/0x1a0 [ 1589.254601] 0 [ 1589.257131] ? lock_downgrade+0x740/0x740 [ 1589.257144] ? __fget+0x225/0x360 [ 1589.257154] ? do_vfs_ioctl+0xff0/0xff0 [ 1589.257164] ? security_file_ioctl+0x83/0xb0 [ 1589.257173] SyS_ioctl+0x7f/0xb0 [ 1589.257182] ? do_vfs_ioctl+0xff0/0xff0 [ 1589.258978] 0 [ 1589.264617] do_syscall_64+0x1d5/0x640 [ 1589.271488] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1589.271496] RIP: 0033:0x4665f9 [ 1589.271500] RSP: 002b:00007fd59d707188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1589.271510] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1589.271514] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000006 [ 1589.271519] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1589.271524] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1589.271530] R13: 00007ffcfd15ebff R14: 00007fd59d707300 R15: 0000000000022000 [ 1589.324232] warn_alloc_show_mem: 1 callbacks suppressed [ 1589.324235] Mem-Info: [ 1589.326671] Node 1 [ 1589.341425] active_anon:13904 inactive_anon:20232 isolated_anon:0 [ 1589.341425] active_file:4 inactive_file:27 isolated_file:0 [ 1589.341425] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1589.341425] slab_reclaimable:14170 slab_unreclaimable:120737 [ 1589.341425] mapped:52684 shmem:21270 pagetables:788 bounce:0 [ 1589.341425] free:14092 free_pcp:0 free_cma:0 [ 1589.344504] Normal free:26496kB min:53696kB low:67120kB high:80544kB active_anon:916kB inactive_anon:11672kB active_file:32kB inactive_file:40kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:224kB pagetables:236kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1589.365281] Node 0 active_anon:54700kB inactive_anon:69256kB active_file:0kB inactive_file:68kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:183908kB dirty:0kB writeback:0kB shmem:73332kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1589.369308] lowmem_reserve[]: [ 1589.394556] Node 1 active_anon:916kB inactive_anon:11672kB active_file:32kB inactive_file:40kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:26828kB dirty:0kB writeback:0kB shmem:11748kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1589.399459] 0 [ 1589.417026] Node 0 [ 1589.452986] 0 [ 1589.483217] DMA free:10976kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1589.506774] 0 [ 1589.537251] lowmem_reserve[]: [ 1589.574201] 0 [ 1589.578247] 0 2717 2718 2718 2718 [ 1589.581385] 0 [ 1589.583684] Node 0 [ 1589.585529] DMA32 free:18896kB min:36200kB low:45248kB high:54296kB active_anon:54700kB inactive_anon:69256kB active_file:0kB inactive_file:68kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7616kB pagetables:2916kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1589.594778] Node 0 [ 1589.623979] lowmem_reserve[]: 0 0 0 0 0 [ 1589.630396] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1589.634946] DMA: [ 1589.663011] lowmem_reserve[]: 0 0 0 0 0 [ 1589.669584] Node 1 Normal free:26496kB min:53696kB low:67120kB high:80544kB active_anon:916kB inactive_anon:11672kB active_file:32kB inactive_file:40kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:224kB pagetables:236kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1589.674481] 2*4kB [ 1589.707705] lowmem_reserve[]: 0 0 0 0 0 [ 1589.714057] Node 0 DMA: 2*4kB (UE) 1*8kB (E) 5*16kB (UE) 8*32kB (UE) 6*64kB (UE) 2*128kB (UE) 5*256kB (UE) 3*512kB (UE) 1*1024kB (E) 3*2048kB (UME) 0*4096kB = 10976kB [ 1589.722828] (UE) [ 1589.736853] Node 0 DMA32: 1014*4kB (UME) 874*8kB (UME) 240*16kB (UME) 47*32kB (UME) 19*64kB (UME) 1*128kB (M) 1*256kB (M) 2*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 19016kB [ 1589.754685] 1*8kB (E) 5*16kB (UE) 8*32kB (UE) 6*64kB (UE) 2*128kB (UE) 5*256kB (UE) 3*512kB (UE) 1*1024kB (E) 3*2048kB (UME) 0*4096kB = 10976kB [ 1589.761778] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1589.786810] Node 1 Normal: 27*4kB (UM) 19*8kB (UM) 21*16kB (UM) 10*32kB (UM) 4*64kB (M) 4*128kB (UM) 1*256kB (M) 0*512kB 22*1024kB (U) 1*2048kB (U) 0*4096kB = 26516kB [ 1589.794610] Node 0 [ 1589.809135] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1589.825288] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1589.825414] DMA32: [ 1589.836468] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1589.850233] 1014*4kB (UME) 874*8kB (UME) 240*16kB (UME) 47*32kB (UME) 19*64kB (UME) 1*128kB (M) 1*256kB (M) 2*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 19016kB [ 1589.858037] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1589.875608] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1589.885892] 21301 total pagecache pages [ 1589.898385] Node 1 Normal: 27*4kB (UM) 19*8kB (UM) 21*16kB (UM) 10*32kB (UM) 4*64kB (M) 4*128kB (UM) 1*256kB (M) 0*512kB 22*1024kB (U) 1*2048kB (U) 0*4096kB = 26516kB [ 1589.904087] 0 pages in swap cache [ 1589.926388] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1589.934156] Swap cache stats: add 0, delete 0, find 0/0 [ 1589.947563] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1589.954242] Free swap = 0kB [ 1589.956616] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1589.963462] Total swap = 0kB [ 1589.981707] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1589.985604] 2097051 pages RAM [ 1589.996244] 21301 total pagecache pages [ 1589.997071] 0 pages HighMem/MovableOnly [ 1590.004304] 363849 pages reserved [ 1590.005682] 0 pages in swap cache [ 1590.020689] 0 pages cma reserved [ 1590.023239] Swap cache stats: add 0, delete 0, find 0/0 [ 1590.046987] Free swap = 0kB [ 1590.055231] Total swap = 0kB [ 1590.064991] 2097051 pages RAM [ 1590.080281] 0 pages HighMem/MovableOnly [ 1590.098630] 363849 pages reserved [ 1590.112490] 0 pages cma reserved [ 1590.120574] Out of memory: Kill process 10338 (syz-executor.5) score 1004 or sacrifice child [ 1590.141239] Killed process 10339 (syz-executor.5) total-vm:93384kB, anon-rss:160kB, file-rss:34816kB, shmem-rss:0kB [ 1590.193916] oom_reaper: reaped process 10339 (syz-executor.5), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1590.307137] Bluetooth: hci4 command 0x0409 tx timeout [ 1590.405977] chnl_net:caif_netlink_parms(): no params data found 09:39:53 executing program 0: socket(0x11, 0x2, 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000004980), 0x0, 0x0) getsockopt$X25_QBITINCL(r0, 0x106, 0x1, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x4, 0x7, 0x7, 0x6, 0xa, @remote, @private2={0xfc, 0x2, '\x00', 0x1}, 0x700, 0x20, 0x9, 0x5f3b}}) openat$nvram(0xffffffffffffff9c, &(0x7f0000004980), 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000100)={0x80000004, 0x7}) [ 1590.833674] bridge0: port 1(bridge_slave_0) entered blocking state [ 1590.850200] bridge0: port 1(bridge_slave_0) entered disabled state [ 1590.873614] device bridge_slave_0 entered promiscuous mode [ 1590.899665] bridge0: port 2(bridge_slave_1) entered blocking state [ 1590.919269] bridge0: port 2(bridge_slave_1) entered disabled state [ 1590.934663] device bridge_slave_1 entered promiscuous mode [ 1590.987695] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 1591.010183] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1591.085217] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 1591.108101] team0: Port device team_slave_0 added [ 1591.127549] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 1591.145248] team0: Port device team_slave_1 added [ 1591.205230] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1591.231184] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1591.261744] syz-executor.0: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1591.285011] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 1591.295876] CPU: 0 PID: 10464 Comm: syz-executor.0 Not tainted 4.14.232-syzkaller #0 [ 1591.295904] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1591.303946] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1591.303950] Call Trace: [ 1591.303971] dump_stack+0x1b2/0x281 [ 1591.303984] warn_alloc.cold+0x96/0x1cc [ 1591.303994] ? zone_watermark_ok_safe+0x220/0x220 [ 1591.304015] __alloc_pages_nodemask+0x2127/0x2720 [ 1591.304030] ? lock_acquire+0x170/0x3f0 [ 1591.304044] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1591.339518] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1591.344628] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1591.344641] ? __mutex_unlock_slowpath+0x75/0x770 [ 1591.360269] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1591.361144] alloc_pages_current+0x155/0x260 [ 1591.373356] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1591.398381] ion_page_pool_alloc+0x118/0x1b0 [ 1591.398391] ion_system_heap_allocate+0x133/0x8c0 [ 1591.398400] ? ion_alloc+0x187/0x810 [ 1591.398413] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1591.432214] ? ion_system_contig_heap_create+0x130/0x130 [ 1591.432507] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 1591.437673] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1591.437686] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1591.437696] ion_alloc+0x204/0x810 [ 1591.437713] ? ion_dma_buf_release+0x40/0x40 [ 1591.455250] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 1591.458812] ? __might_fault+0x177/0x1b0 [ 1591.458826] ion_ioctl+0xea/0x1f0 [ 1591.458835] ? ion_query_heaps+0x360/0x360 [ 1591.458845] ? ion_query_heaps+0x360/0x360 [ 1591.458856] do_vfs_ioctl+0x75a/0xff0 [ 1591.491804] ? ioctl_preallocate+0x1a0/0x1a0 [ 1591.496599] ? lock_downgrade+0x740/0x740 [ 1591.501196] ? __fget+0x225/0x360 [ 1591.505401] ? do_vfs_ioctl+0xff0/0xff0 [ 1591.509412] ? security_file_ioctl+0x83/0xb0 [ 1591.514006] SyS_ioctl+0x7f/0xb0 [ 1591.517378] ? do_vfs_ioctl+0xff0/0xff0 [ 1591.521449] do_syscall_64+0x1d5/0x640 [ 1591.525354] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1591.530548] RIP: 0033:0x4665f9 [ 1591.533751] RSP: 002b:00007fe4a6925188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1591.541610] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1591.548983] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000006 [ 1591.556370] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1591.563650] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1591.571025] R13: 00007ffe5881209f R14: 00007fe4a6925300 R15: 0000000000022000 [ 1591.597188] device hsr_slave_0 entered promiscuous mode [ 1591.613989] device hsr_slave_1 entered promiscuous mode [ 1591.633649] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 1591.648669] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 1591.877251] Mem-Info: [ 1591.879749] active_anon:13885 inactive_anon:20232 isolated_anon:0 [ 1591.879749] active_file:1181 inactive_file:1336 isolated_file:0 [ 1591.879749] unevictable:0 dirty:13 writeback:0 unstable:0 [ 1591.879749] slab_reclaimable:14128 slab_unreclaimable:121476 [ 1591.879749] mapped:54750 shmem:21270 pagetables:762 bounce:0 [ 1591.879749] free:83825 free_pcp:376 free_cma:0 [ 1591.949607] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 1591.967201] Node 0 active_anon:54616kB inactive_anon:69256kB active_file:4852kB inactive_file:5360kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:192020kB dirty:44kB writeback:0kB shmem:73332kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1592.037032] Node 1 active_anon:932kB inactive_anon:11672kB active_file:16kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:26836kB dirty:0kB writeback:0kB shmem:11748kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1592.049548] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1592.097002] Node 0 DMA free:11076kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:100kB inactive_file:236kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1592.110272] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 1592.156979] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1592.162074] Node 0 DMA32 free:56312kB min:36200kB low:45248kB high:54296kB active_anon:54616kB inactive_anon:69256kB active_file:4752kB inactive_file:5124kB unevictable:0kB writepending:44kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7616kB pagetables:2812kB bounce:0kB free_pcp:848kB local_pcp:228kB free_cma:0kB [ 1592.166227] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 1592.226961] lowmem_reserve[]: 0 0 0 0 0 [ 1592.231004] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1592.241708] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1592.279460] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1592.287203] lowmem_reserve[]: 0 0 0 0 0 [ 1592.291222] Node 1 Normal free:363720kB min:53696kB low:67120kB high:80544kB active_anon:932kB inactive_anon:11672kB active_file:16kB inactive_file:8kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:160kB pagetables:236kB bounce:0kB free_pcp:772kB local_pcp:120kB free_cma:0kB [ 1592.300606] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 1592.356938] lowmem_reserve[]: 0 0 0 0 0 [ 1592.361020] Node 0 DMA: 5*4kB (ME) 2*8kB (UE) 2*16kB (UE) 4*32kB (UME) 10*64kB (UE) 6*128kB (UME) 5*256kB (UE) 4*512kB (UME) 2*1024kB (ME) 2*2048kB (UE) 0*4096kB = 11076kB [ 1592.361466] 8021q: adding VLAN 0 to HW filter on device team0 [ 1592.386985] Bluetooth: hci4 command 0x041b tx timeout [ 1592.397168] Node 0 DMA32: 270*4kB (ME) 519*8kB (UME) 2294*16kB (UME) 114*32kB (UME) 5*64kB (U) 281*128kB (U) 2*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 82384kB [ 1592.411917] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 1592.432930] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1592.436957] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1592.450260] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1592.456966] Node 1 Normal: 344*4kB (UM) 1602*8kB (U) 256*16kB (UM) 1888*32kB (UM) 2554*64kB (U) 324*128kB (U) 57*256kB (U) 44*512kB (U) 34*1024kB (U) 2*2048kB (U) 1*4096kB (U) = 363760kB [ 1592.473443] bridge0: port 1(bridge_slave_0) entered blocking state [ 1592.482528] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1592.496990] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1592.505968] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1592.513557] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 1592.531071] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1592.536971] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1592.542961] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1592.557024] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1592.565774] 23833 total pagecache pages [ 1592.567507] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1592.586975] 0 pages in swap cache [ 1592.590480] Swap cache stats: add 0, delete 0, find 0/0 [ 1592.590794] bridge0: port 2(bridge_slave_1) entered blocking state [ 1592.595920] Free swap = 0kB [ 1592.595924] Total swap = 0kB [ 1592.595932] 2097051 pages RAM [ 1592.595935] 0 pages HighMem/MovableOnly [ 1592.595938] 363849 pages reserved [ 1592.595941] 0 pages cma reserved [ 1592.623088] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1592.684267] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 1592.700076] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1592.721291] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 1592.741000] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1592.762065] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 1592.781062] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1592.795880] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1592.815022] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 1592.835685] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1592.846086] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1592.855975] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1592.874313] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 1592.896148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1592.907686] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1592.928579] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 1592.946543] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1592.962701] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1592.983308] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 1592.992046] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1593.034988] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 1593.064192] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 1593.080879] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1593.091359] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1593.115778] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1593.361521] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 1593.385664] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 1593.404744] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1593.415520] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1593.552994] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 1593.566561] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 1593.585942] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 1593.610306] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 1593.624855] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1593.635510] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1593.656594] device veth0_vlan entered promiscuous mode [ 1593.665471] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1593.675871] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1593.695763] device veth1_vlan entered promiscuous mode [ 1593.706753] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 1593.721594] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1593.750396] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 1593.773946] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 1593.792052] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1593.804365] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1593.814998] device veth0_macvtap entered promiscuous mode [ 1593.828977] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 1593.852725] device veth1_macvtap entered promiscuous mode [ 1593.877635] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 1593.902169] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 1593.924427] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 1593.947866] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1593.967237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1593.976743] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1594.006883] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1594.027141] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1594.047102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1594.067432] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1594.090997] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1594.130401] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1594.140731] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1594.178651] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 1594.186626] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1594.220467] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1594.228615] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1594.236636] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1594.267378] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1594.287995] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1594.298506] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1594.316894] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1594.346830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1594.356325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1594.367613] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1594.377544] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1594.388697] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1594.398894] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1594.409704] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1594.427540] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 1594.435096] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1594.466908] Bluetooth: hci4 command 0x040f tx timeout [ 1594.474656] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1594.487416] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 09:39:58 executing program 4: r0 = socket(0x28, 0x1, 0x0) bind$x25(r0, 0x0, 0x0) 09:39:58 executing program 1: socket(0x11, 0x2, 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000004980), 0x0, 0x0) getsockopt$X25_QBITINCL(r0, 0x106, 0x1, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x4, 0x7, 0x7, 0x6, 0xa, @remote, @private2={0xfc, 0x2, '\x00', 0x1}, 0x700, 0x20, 0x9, 0x5f3b}}) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000004980), 0x0, 0x0) getsockopt$X25_QBITINCL(r1, 0x106, 0x1, 0x0, 0x0) r2 = socket$vsock_dgram(0x28, 0x2, 0x0) ioctl$sock_SIOCDELRT(r2, 0x890c, &(0x7f0000000180)={0x0, @llc={0x1a, 0x33a, 0x9, 0x6, 0x27, 0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, @vsock={0x28, 0x0, 0x2710}, @isdn={0x22, 0xcb, 0x81, 0x2, 0x69}, 0xfff, 0x0, 0x0, 0x0, 0x81, &(0x7f0000000140)='dummy0\x00', 0x80000000, 0x101, 0x8001}) openat$zero(0xffffffffffffff9c, &(0x7f00000000c0), 0x800, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000100)={0x80000004, 0x7}) getsockname(r1, &(0x7f0000002040)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f00000020c0)=0x80) socket(0x27, 0xa, 0x40000801) 09:39:58 executing program 3: socket(0x11, 0x2, 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000004980), 0x0, 0x0) getsockopt$X25_QBITINCL(r0, 0x106, 0x1, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x4, 0x7, 0x7, 0x6, 0xa, @remote, @private2={0xfc, 0x2, '\x00', 0x1}, 0x700, 0x20, 0x9, 0x5f3b}}) openat$nvram(0xffffffffffffff9c, &(0x7f0000004980), 0x0, 0x0) socket$vsock_dgram(0x28, 0x2, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000100)={0x80000004, 0x7}) 09:39:58 executing program 2: r0 = socket(0x28, 0x1, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x20040801) 09:39:58 executing program 5: socket(0x11, 0x2, 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000004980), 0x0, 0x0) getsockopt$X25_QBITINCL(r0, 0x106, 0x1, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x4, 0x7, 0x7, 0x6, 0xa, @remote, @private2={0xfc, 0x2, '\x00', 0x1}, 0x700, 0x20, 0x9, 0x5f3b}}) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000004980), 0x0, 0x0) getsockopt$X25_QBITINCL(r1, 0x106, 0x1, 0x0, 0x0) r2 = socket$vsock_dgram(0x28, 0x2, 0x0) ioctl$sock_SIOCDELRT(r2, 0x890c, &(0x7f0000000180)={0x0, @llc={0x1a, 0x33a, 0x9, 0x6, 0x27, 0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, @vsock={0x28, 0x0, 0x2710}, @isdn={0x22, 0xcb, 0x81, 0x2, 0x69}, 0xfff, 0x0, 0x0, 0x0, 0x81, &(0x7f0000000140)='dummy0\x00', 0x80000000, 0x101, 0x8001}) openat$zero(0xffffffffffffff9c, &(0x7f00000000c0), 0x800, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000100)={0x80000004, 0x7}) getsockname(r1, &(0x7f0000002040)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f00000020c0)=0x80) socket(0x27, 0xa, 0x40000801) socket$can_bcm(0x1d, 0x2, 0x2) 09:39:58 executing program 0: socket(0x11, 0x2, 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000004980), 0x0, 0x0) getsockopt$X25_QBITINCL(r0, 0x106, 0x1, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x4, 0x7, 0x7, 0x6, 0xa, @remote, @private2={0xfc, 0x2, '\x00', 0x1}, 0x700, 0x20, 0x9, 0x5f3b}}) r1 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000100)={0x80000004, 0x7}) 09:39:58 executing program 4: socket(0x11, 0x2, 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000004980), 0x0, 0x0) getsockopt$X25_QBITINCL(r0, 0x106, 0x1, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x4, 0x7, 0x7, 0x6, 0xa, @remote, @private2={0xfc, 0x2, '\x00', 0x1}, 0x700, 0x20, 0x9, 0x5f3b}}) openat$nvram(0xffffffffffffff9c, &(0x7f0000004980), 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000100)={0x80000004, 0x7}) 09:39:58 executing program 2: r0 = socket(0x28, 0x1, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) 09:39:58 executing program 2: r0 = socket(0x28, 0x1, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) 09:39:58 executing program 2: r0 = socket(0x28, 0x1, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) 09:39:58 executing program 2: socket(0x11, 0x2, 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000004980), 0x0, 0x0) getsockopt$X25_QBITINCL(r0, 0x106, 0x1, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x4, 0x7, 0x7, 0x6, 0xa, @remote, @private2={0xfc, 0x2, '\x00', 0x1}, 0x700, 0x20, 0x9, 0x5f3b}}) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000004980), 0x0, 0x0) getsockopt$X25_QBITINCL(r1, 0x106, 0x1, 0x0, 0x0) r2 = socket$vsock_dgram(0x28, 0x2, 0x0) ioctl$sock_SIOCDELRT(r2, 0x890c, &(0x7f0000000180)={0x0, @llc={0x1a, 0x33a, 0x9, 0x6, 0x27, 0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, @vsock={0x28, 0x0, 0x2710}, @isdn={0x22, 0xcb, 0x81, 0x2, 0x69}, 0xfff, 0x0, 0x0, 0x0, 0x81, &(0x7f0000000140)='dummy0\x00', 0x80000000, 0x101, 0x8001}) openat$zero(0xffffffffffffff9c, &(0x7f00000000c0), 0x800, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000100)={0x80000004, 0x7}) getsockname(r1, &(0x7f0000002040)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f00000020c0)=0x80) socket(0x27, 0xa, 0x40000801) socket$can_bcm(0x1d, 0x2, 0x2) [ 1595.615663] syz-executor.2: [ 1595.615666] syz-executor.0: page allocation failure: order:4 [ 1595.619172] syz-executor.5: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1595.619198] syz-executor.5 cpuset= [ 1595.626005] syz-executor.4: [ 1595.643595] page allocation failure: order:4 [ 1595.647023] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1595.652208] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1595.652747] (null) [ 1595.666164] syz-executor.1: [ 1595.673186] syz-executor.3: [ 1595.674099] page allocation failure: order:4 [ 1595.676294] page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1595.676310] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 1595.676334] CPU: 0 PID: 10593 Comm: syz-executor.3 Not tainted 4.14.232-syzkaller #0 [ 1595.676340] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1595.676344] Call Trace: [ 1595.676364] dump_stack+0x1b2/0x281 [ 1595.676379] warn_alloc.cold+0x96/0x1cc [ 1595.685178] (null) [ 1595.697059] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1595.697072] ? zone_watermark_ok_safe+0x220/0x220 [ 1595.697094] __alloc_pages_nodemask+0x2127/0x2720 [ 1595.697110] ? lock_acquire+0x170/0x3f0 [ 1595.697126] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1595.697145] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1595.697157] ? __mutex_unlock_slowpath+0x75/0x770 [ 1595.697169] alloc_pages_current+0x155/0x260 [ 1595.697181] ion_page_pool_alloc+0x118/0x1b0 [ 1595.697190] ion_system_heap_allocate+0x133/0x8c0 [ 1595.697199] ? ion_alloc+0x187/0x810 [ 1595.697207] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1595.697216] ? ion_system_contig_heap_create+0x130/0x130 [ 1595.697223] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1595.697235] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1595.712424] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1595.720858] ion_alloc+0x204/0x810 [ 1595.720873] ? ion_dma_buf_release+0x40/0x40 [ 1595.720886] ? __might_fault+0x177/0x1b0 [ 1595.720897] ion_ioctl+0xea/0x1f0 [ 1595.720906] ? ion_query_heaps+0x360/0x360 [ 1595.720918] ? ion_query_heaps+0x360/0x360 [ 1595.720928] do_vfs_ioctl+0x75a/0xff0 [ 1595.720940] ? ioctl_preallocate+0x1a0/0x1a0 [ 1595.720949] ? lock_downgrade+0x740/0x740 [ 1595.720960] ? __fget+0x225/0x360 [ 1595.720968] ? do_vfs_ioctl+0xff0/0xff0 [ 1595.720978] ? security_file_ioctl+0x83/0xb0 [ 1595.720991] SyS_ioctl+0x7f/0xb0 [ 1595.733737] / [ 1595.734864] ? do_vfs_ioctl+0xff0/0xff0 [ 1595.750348] (null) [ 1595.750607] do_syscall_64+0x1d5/0x640 [ 1595.750624] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1595.750633] RIP: 0033:0x4665f9 [ 1595.750638] RSP: 002b:00007fd59d707188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1595.750649] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1595.750654] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000007 [ 1595.750662] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1595.760548] mems_allowed=0-1 [ 1595.765648] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1595.765654] R13: 00007ffcfd15ebff R14: 00007fd59d707300 R15: 0000000000022000 [ 1595.770011] page allocation failure: order:4 [ 1595.774035] syz-executor.2 cpuset= [ 1595.777024] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1595.783682] syz-executor.1 cpuset= [ 1595.792015] (null) [ 1595.800864] / [ 1595.803704] syz-executor.0 cpuset= [ 1595.808294] / [ 1595.977102] / [ 1595.988462] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 1595.995424] CPU: 0 PID: 10603 Comm: syz-executor.4 Not tainted 4.14.232-syzkaller #0 [ 1596.003494] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1596.012937] Call Trace: [ 1596.015578] dump_stack+0x1b2/0x281 [ 1596.019223] warn_alloc.cold+0x96/0x1cc [ 1596.023206] ? zone_watermark_ok_safe+0x220/0x220 [ 1596.028251] __alloc_pages_nodemask+0x2127/0x2720 [ 1596.033378] ? lock_acquire+0x170/0x3f0 [ 1596.037373] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1596.042316] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1596.048155] ? __mutex_unlock_slowpath+0x75/0x770 [ 1596.053542] alloc_pages_current+0x155/0x260 [ 1596.058049] ion_page_pool_alloc+0x118/0x1b0 [ 1596.062586] ion_system_heap_allocate+0x133/0x8c0 [ 1596.067540] ? ion_alloc+0x187/0x810 [ 1596.071348] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1596.077098] ? ion_system_contig_heap_create+0x130/0x130 [ 1596.082842] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1596.087879] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1596.092983] ion_alloc+0x204/0x810 [ 1596.096579] ? ion_dma_buf_release+0x40/0x40 [ 1596.100990] ? __might_fault+0x177/0x1b0 [ 1596.105153] ion_ioctl+0xea/0x1f0 [ 1596.108830] ? ion_query_heaps+0x360/0x360 [ 1596.113503] ? ion_query_heaps+0x360/0x360 [ 1596.117856] do_vfs_ioctl+0x75a/0xff0 [ 1596.121749] ? ioctl_preallocate+0x1a0/0x1a0 [ 1596.126185] ? lock_downgrade+0x740/0x740 [ 1596.130435] ? __fget+0x225/0x360 [ 1596.133890] ? do_vfs_ioctl+0xff0/0xff0 [ 1596.138072] ? security_file_ioctl+0x83/0xb0 [ 1596.142686] SyS_ioctl+0x7f/0xb0 [ 1596.146208] ? do_vfs_ioctl+0xff0/0xff0 [ 1596.150386] do_syscall_64+0x1d5/0x640 [ 1596.154412] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1596.159806] RIP: 0033:0x4665f9 [ 1596.163000] RSP: 002b:00007f6205eee188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1596.170717] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1596.178416] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000006 [ 1596.185688] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1596.193228] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1596.200503] R13: 00007fffcb653cef R14: 00007f6205eee300 R15: 0000000000022000 [ 1596.216605] CPU: 1 PID: 10598 Comm: syz-executor.5 Not tainted 4.14.232-syzkaller #0 [ 1596.217046] mems_allowed=0-1 [ 1596.224821] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1596.237646] Call Trace: [ 1596.240360] dump_stack+0x1b2/0x281 [ 1596.244123] warn_alloc.cold+0x96/0x1cc [ 1596.248118] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1596.253335] ? zone_watermark_ok_safe+0x220/0x220 [ 1596.258186] __alloc_pages_nodemask+0x2127/0x2720 [ 1596.263151] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1596.268090] ? migrate_swap_stop+0x880/0x880 [ 1596.272581] ? lock_acquire+0x170/0x3f0 [ 1596.276544] ? wake_up_q+0x82/0xd0 [ 1596.280070] ? __mutex_unlock_slowpath+0x261/0x770 [ 1596.284981] ? retint_kernel+0x2d/0x2d [ 1596.288855] alloc_pages_current+0x155/0x260 [ 1596.293924] ion_page_pool_alloc+0x118/0x1b0 [ 1596.296970] Mem-Info: [ 1596.298324] ion_system_heap_allocate+0x133/0x8c0 [ 1596.300915] active_anon:13907 inactive_anon:20231 isolated_anon:0 [ 1596.300915] active_file:1762 inactive_file:2113 isolated_file:0 [ 1596.300915] unevictable:0 dirty:79 writeback:0 unstable:0 [ 1596.300915] slab_reclaimable:14116 slab_unreclaimable:120016 [ 1596.300915] mapped:55173 shmem:21269 pagetables:845 bounce:0 [ 1596.300915] free:193111 free_pcp:394 free_cma:0 [ 1596.305831] ? ion_alloc+0x187/0x810 [ 1596.344895] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1596.350725] ? ion_system_contig_heap_create+0x130/0x130 [ 1596.356185] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1596.361461] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1596.366299] ion_alloc+0x204/0x810 [ 1596.369930] ? ion_dma_buf_release+0x40/0x40 [ 1596.374935] ? __might_fault+0x177/0x1b0 [ 1596.379530] ion_ioctl+0xea/0x1f0 [ 1596.383114] ? ion_query_heaps+0x360/0x360 [ 1596.386797] Node 0 active_anon:55120kB inactive_anon:69256kB active_file:5992kB inactive_file:6368kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:192924kB dirty:284kB writeback:0kB shmem:73332kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1596.388241] ? ion_query_heaps+0x360/0x360 [ 1596.423188] do_vfs_ioctl+0x75a/0xff0 [ 1596.427523] ? ioctl_preallocate+0x1a0/0x1a0 [ 1596.432548] ? lock_downgrade+0x740/0x740 [ 1596.436699] ? __fget+0x225/0x360 [ 1596.440404] ? do_vfs_ioctl+0xff0/0xff0 [ 1596.444799] ? security_file_ioctl+0x83/0xb0 [ 1596.449477] SyS_ioctl+0x7f/0xb0 [ 1596.453540] ? do_vfs_ioctl+0xff0/0xff0 [ 1596.456775] Node 1 active_anon:508kB inactive_anon:11668kB active_file:1056kB inactive_file:2084kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:27768kB dirty:32kB writeback:0kB shmem:11744kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1596.457778] do_syscall_64+0x1d5/0x640 [ 1596.492198] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1596.498111] RIP: 0033:0x4665f9 [ 1596.501584] RSP: 002b:00007f551e7c7188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1596.506767] mems_allowed=0-1 [ 1596.509466] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1596.520316] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000008 [ 1596.527725] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1596.535310] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1596.543228] R13: 00007ffd0570a9af R14: 00007f551e7c7300 R15: 0000000000022000 [ 1596.546911] Bluetooth: hci4 command 0x0419 tx timeout [ 1596.563304] Node 0 DMA free:11156kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:100kB inactive_file:236kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1596.594297] CPU: 0 PID: 10597 Comm: syz-executor.0 Not tainted 4.14.232-syzkaller #0 [ 1596.602884] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1596.612621] Call Trace: [ 1596.615351] dump_stack+0x1b2/0x281 [ 1596.619250] warn_alloc.cold+0x96/0x1cc [ 1596.623414] ? zone_watermark_ok_safe+0x220/0x220 [ 1596.628834] __alloc_pages_nodemask+0x2127/0x2720 [ 1596.633784] ? ___preempt_schedule+0x16/0x18 [ 1596.638460] ? lock_acquire+0x170/0x3f0 [ 1596.642887] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1596.644597] mems_allowed=0-1 [ 1596.648017] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1596.648030] ? __mutex_unlock_slowpath+0x75/0x770 [ 1596.648042] ? alloc_pages_current+0x37/0x260 [ 1596.648055] alloc_pages_current+0x155/0x260 [ 1596.648071] ion_page_pool_alloc+0x118/0x1b0 [ 1596.648079] ion_system_heap_allocate+0x133/0x8c0 [ 1596.648088] ? ion_alloc+0x187/0x810 [ 1596.648097] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1596.648108] ? ion_system_contig_heap_create+0x130/0x130 [ 1596.697953] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1596.703239] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1596.708095] ion_alloc+0x204/0x810 [ 1596.711653] ? ion_dma_buf_release+0x40/0x40 [ 1596.716084] ? __might_fault+0x177/0x1b0 [ 1596.720252] ion_ioctl+0xea/0x1f0 [ 1596.723830] ? ion_query_heaps+0x360/0x360 [ 1596.728676] ? ion_query_heaps+0x360/0x360 [ 1596.733105] do_vfs_ioctl+0x75a/0xff0 [ 1596.736915] ? ioctl_preallocate+0x1a0/0x1a0 [ 1596.741335] ? lock_downgrade+0x740/0x740 [ 1596.745500] ? __fget+0x225/0x360 [ 1596.749526] ? do_vfs_ioctl+0xff0/0xff0 [ 1596.753702] ? security_file_ioctl+0x83/0xb0 [ 1596.758195] SyS_ioctl+0x7f/0xb0 [ 1596.761743] ? do_vfs_ioctl+0xff0/0xff0 [ 1596.765732] do_syscall_64+0x1d5/0x640 [ 1596.770020] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1596.775429] RIP: 0033:0x4665f9 [ 1596.778786] RSP: 002b:00007fe4a6925188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1596.787033] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1596.794891] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000005 [ 1596.802378] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1596.809943] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1596.817407] R13: 00007ffe5881209f R14: 00007fe4a6925300 R15: 0000000000022000 [ 1596.824959] CPU: 1 PID: 10600 Comm: syz-executor.1 Not tainted 4.14.232-syzkaller #0 [ 1596.834369] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1596.843916] Call Trace: [ 1596.846622] dump_stack+0x1b2/0x281 [ 1596.850352] warn_alloc.cold+0x96/0x1cc [ 1596.854706] ? zone_watermark_ok_safe+0x220/0x220 [ 1596.859786] __alloc_pages_nodemask+0x2127/0x2720 [ 1596.864647] ? lock_acquire+0x170/0x3f0 [ 1596.869432] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1596.874553] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1596.881174] ? __mutex_unlock_slowpath+0x75/0x770 [ 1596.886548] ? retint_kernel+0x2d/0x2d [ 1596.886651] lowmem_reserve[]: 0 [ 1596.890453] alloc_pages_current+0x155/0x260 [ 1596.890466] ion_page_pool_alloc+0x118/0x1b0 [ 1596.893901] 2717 [ 1596.898400] ion_system_heap_allocate+0x133/0x8c0 [ 1596.898409] ? ion_alloc+0x187/0x810 [ 1596.898420] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1596.898427] ? ion_system_contig_heap_create+0x130/0x130 [ 1596.898436] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1596.898446] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1596.898455] ion_alloc+0x204/0x810 [ 1596.898468] ? ion_dma_buf_release+0x40/0x40 [ 1596.898480] ? __might_fault+0x177/0x1b0 [ 1596.898491] ion_ioctl+0xea/0x1f0 [ 1596.898500] ? ion_query_heaps+0x360/0x360 [ 1596.898511] ? ion_query_heaps+0x360/0x360 [ 1596.920549] 2718 [ 1596.925187] do_vfs_ioctl+0x75a/0xff0 [ 1596.956649] 2718 [ 1596.960037] ? ioctl_preallocate+0x1a0/0x1a0 [ 1596.962184] 2718 [ 1596.965972] ? lock_downgrade+0x740/0x740 [ 1596.965986] ? __fget+0x225/0x360 [ 1596.982781] ? do_vfs_ioctl+0xff0/0xff0 [ 1596.986837] ? security_file_ioctl+0x83/0xb0 [ 1596.991343] SyS_ioctl+0x7f/0xb0 [ 1596.994796] ? do_vfs_ioctl+0xff0/0xff0 [ 1596.998776] do_syscall_64+0x1d5/0x640 [ 1596.998779] Node 0 DMA32 free:473976kB min:36200kB low:45248kB high:54296kB active_anon:55120kB inactive_anon:69256kB active_file:5892kB inactive_file:6132kB unevictable:0kB writepending:284kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:8000kB pagetables:3232kB bounce:0kB free_pcp:740kB local_pcp:120kB free_cma:0kB [ 1597.002671] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1597.038682] RIP: 0033:0x4665f9 [ 1597.041907] RSP: 002b:00007f22b5267188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1597.050072] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1597.058026] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000008 [ 1597.065906] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1597.073849] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1597.081569] R13: 00007ffea96cbc0f R14: 00007f22b5267300 R15: 0000000000022000 [ 1597.091635] CPU: 0 PID: 10613 Comm: syz-executor.2 Not tainted 4.14.232-syzkaller #0 [ 1597.099563] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1597.109233] Call Trace: [ 1597.112144] dump_stack+0x1b2/0x281 [ 1597.115798] warn_alloc.cold+0x96/0x1cc [ 1597.119879] ? zone_watermark_ok_safe+0x220/0x220 [ 1597.124764] __alloc_pages_nodemask+0x2127/0x2720 [ 1597.129619] ? __schedule+0x893/0x1de0 [ 1597.133919] ? lock_acquire+0x170/0x3f0 [ 1597.138130] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1597.143887] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1597.149625] ? __mutex_unlock_slowpath+0x75/0x770 [ 1597.154747] alloc_pages_current+0x155/0x260 [ 1597.159297] ion_page_pool_alloc+0x118/0x1b0 [ 1597.163718] ion_system_heap_allocate+0x133/0x8c0 [ 1597.168659] ? ion_alloc+0x187/0x810 [ 1597.172585] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1597.178076] ? ion_system_contig_heap_create+0x130/0x130 [ 1597.183745] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1597.189158] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1597.194108] ion_alloc+0x204/0x810 [ 1597.197667] ? ion_dma_buf_release+0x40/0x40 [ 1597.202211] ? __might_fault+0x177/0x1b0 [ 1597.206287] ion_ioctl+0xea/0x1f0 [ 1597.209867] ? ion_query_heaps+0x360/0x360 [ 1597.214460] ? ion_query_heaps+0x360/0x360 [ 1597.218792] do_vfs_ioctl+0x75a/0xff0 [ 1597.222789] ? ioctl_preallocate+0x1a0/0x1a0 [ 1597.227394] ? lock_downgrade+0x740/0x740 [ 1597.231556] ? __fget+0x225/0x360 [ 1597.235054] ? do_vfs_ioctl+0xff0/0xff0 [ 1597.239223] ? security_file_ioctl+0x83/0xb0 [ 1597.243759] SyS_ioctl+0x7f/0xb0 [ 1597.247136] ? do_vfs_ioctl+0xff0/0xff0 [ 1597.251285] do_syscall_64+0x1d5/0x640 [ 1597.255244] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1597.260457] RIP: 0033:0x4665f9 [ 1597.263652] RSP: 002b:00007f1adcca2188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1597.271564] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1597.278930] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000008 [ 1597.286298] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1597.293758] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1597.301312] R13: 00007ffee928410f R14: 00007f1adcca2300 R15: 0000000000022000 [ 1597.328005] lowmem_reserve[]: 0 0 0 0 0 [ 1597.340641] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1597.373198] lowmem_reserve[]: 0 0 0 0 0 [ 1597.396214] Node 1 Normal free:831880kB min:53696kB low:67120kB high:80544kB active_anon:508kB inactive_anon:11668kB active_file:1056kB inactive_file:2084kB unevictable:0kB writepending:32kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:128kB pagetables:148kB bounce:0kB free_pcp:620kB local_pcp:0kB free_cma:0kB [ 1597.470399] lowmem_reserve[]: 0 0 0 0 0 [ 1597.474527] Node 0 DMA: 15*4kB (UME) 19*8kB (UE) 18*16kB (UE) 6*32kB (UME) 8*64kB (UE) 7*128kB (UME) 6*256kB (UE) 4*512kB (UME) 2*1024kB (ME) 2*2048kB (UE) 0*4096kB = 11828kB [ 1597.488169] warn_alloc_show_mem: 2 callbacks suppressed [ 1597.488173] Mem-Info: [ 1597.516685] Node 0 DMA32: 180*4kB (ME) 456*8kB (E) 5557*16kB (UE) 4312*32kB (UME) 1916*64kB (U) 352*128kB (UM) 61*256kB (U) 8*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 418656kB [ 1597.527443] active_anon:13907 inactive_anon:20231 isolated_anon:0 [ 1597.527443] active_file:1762 inactive_file:2113 isolated_file:0 [ 1597.527443] unevictable:0 dirty:89 writeback:0 unstable:0 [ 1597.527443] slab_reclaimable:14108 slab_unreclaimable:120672 [ 1597.527443] mapped:55189 shmem:21269 pagetables:845 bounce:0 [ 1597.527443] free:334286 free_pcp:250 free_cma:0 [ 1597.556627] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1597.610260] Node 1 Normal: 2802*4kB (UM) 3183*8kB (UM) 3403*16kB (U) 3222*32kB (U) 7828*64kB (U) 1366*128kB (U) 110*256kB (U) 20*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 908464kB [ 1597.633300] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1597.656040] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1597.665882] Node 0 active_anon:55120kB inactive_anon:69256kB active_file:5992kB inactive_file:6368kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:192988kB dirty:324kB writeback:0kB shmem:73332kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1597.706627] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1597.715775] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1597.733906] 25156 total pagecache pages [ 1597.756648] 0 pages in swap cache [ 1597.760143] Swap cache stats: add 0, delete 0, find 0/0 [ 1597.765505] Free swap = 0kB [ 1597.793697] Node 1 active_anon:508kB inactive_anon:11668kB active_file:1056kB inactive_file:2084kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:27768kB dirty:32kB writeback:0kB shmem:11744kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1597.806644] Total swap = 0kB [ 1597.835698] 2097051 pages RAM [ 1597.856624] 0 pages HighMem/MovableOnly [ 1597.861335] 363849 pages reserved [ 1597.864789] 0 pages cma reserved [ 1597.871779] Node 0 DMA free:11912kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:100kB inactive_file:236kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1597.956683] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1597.964447] Node 0 DMA32 free:314196kB min:36200kB low:45248kB high:54296kB active_anon:55120kB inactive_anon:69256kB active_file:5892kB inactive_file:6132kB unevictable:0kB writepending:324kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7808kB pagetables:3232kB bounce:0kB free_pcp:280kB local_pcp:180kB free_cma:0kB [ 1598.035531] lowmem_reserve[]: 0 0 0 0 0 [ 1598.065723] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1598.171977] lowmem_reserve[]: 0 0 0 0 0 [ 1598.185699] Node 1 Normal free:911748kB min:53696kB low:67120kB high:80544kB active_anon:508kB inactive_anon:11668kB active_file:1056kB inactive_file:2084kB unevictable:0kB writepending:32kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:128kB pagetables:148kB bounce:0kB free_pcp:208kB local_pcp:84kB free_cma:0kB [ 1598.224646] lowmem_reserve[]: 0 0 0 0 0 [ 1598.256110] Node 0 DMA: 5*4kB (ME) 2*8kB (UE) 2*16kB (UE) 3*32kB (UME) 5*64kB (UE) 7*128kB (UME) 6*256kB (UE) 4*512kB (UME) 2*1024kB (ME) 2*2048kB (UE) 0*4096kB = 11108kB [ 1598.311176] Node 0 DMA32: 180*4kB (E) 457*8kB (ME) 102*16kB (E) 25*32kB (UME) 1*64kB (U) 124*128kB (UM) 71*256kB (U) 8*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 45016kB [ 1598.343708] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1598.359482] Node 1 Normal: 0*4kB 0*8kB 0*16kB 246*32kB (U) 7829*64kB (UM) 1409*128kB (UM) 117*256kB (U) 20*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 729472kB [ 1598.422302] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1598.448908] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1598.483622] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1598.520055] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1598.566595] 25156 total pagecache pages [ 1598.571024] 0 pages in swap cache [ 1598.574932] Swap cache stats: add 0, delete 0, find 0/0 [ 1598.626614] Free swap = 0kB [ 1598.629710] Total swap = 0kB [ 1598.633104] 2097051 pages RAM [ 1598.636421] 0 pages HighMem/MovableOnly [ 1598.656560] 363849 pages reserved [ 1598.660329] 0 pages cma reserved [ 1600.754292] oom_reaper: reaped process 10613 (syz-executor.2), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1600.846720] in:imklog invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1600.866394] in:imklog cpuset=/ mems_allowed=0-1 [ 1600.871303] CPU: 0 PID: 10152 Comm: in:imklog Not tainted 4.14.232-syzkaller #0 [ 1600.878946] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1600.888737] Call Trace: [ 1600.891348] dump_stack+0x1b2/0x281 [ 1600.894978] dump_header+0x178/0x82f [ 1600.898739] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1600.904103] ? ___ratelimit+0x2cd/0x530 [ 1600.908295] oom_kill_process.cold+0x10/0xa40 [ 1600.913491] out_of_memory+0xe3e/0x1190 [ 1600.917764] ? oom_killer_disable+0x1c0/0x1c0 [ 1600.922540] ? mutex_trylock+0x152/0x1a0 [ 1600.927186] __alloc_pages_nodemask+0x23e1/0x2720 [ 1600.932857] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1600.938155] alloc_pages_current+0x155/0x260 [ 1600.942570] filemap_fault+0x11a1/0x1ad0 [ 1600.945929] syz-executor.3: [ 1600.946670] ext4_filemap_fault+0x84/0xb0 [ 1600.946681] __do_fault+0xfa/0x380 [ 1600.949695] page allocation failure: order:0 [ 1600.954004] __handle_mm_fault+0x2497/0x4620 [ 1600.966788] ? vm_insert_page+0x7c0/0x7c0 [ 1600.970793] syz-executor.2: page allocation failure: order:0 [ 1600.970934] ? lock_downgrade+0x740/0x740 [ 1600.970947] ? mark_held_locks+0xa6/0xf0 [ 1600.976794] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1600.980897] handle_mm_fault+0x455/0x9c0 [ 1600.984954] (null) [ 1600.992827] __do_page_fault+0x549/0xad0 [ 1600.992837] ? spurious_fault+0x640/0x640 [ 1600.992845] ? do_page_fault+0x60/0x500 [ 1600.992853] ? page_fault+0x2f/0x50 [ 1600.992861] page_fault+0x45/0x50 [ 1600.997061] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1600.999168] RIP: 1fa0:0x1f9f [ 1601.003338] (null) [ 1601.007565] RSP: 0000:000056338adcf9d0 EFLAGS: 7f9577890da0 [ 1601.009344] Mem-Info: [ 1601.011718] syz-executor.3 cpuset= [ 1601.015521] active_anon:13890 inactive_anon:20231 isolated_anon:0 [ 1601.015521] active_file:15 inactive_file:15 isolated_file:0 [ 1601.015521] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1601.015521] slab_reclaimable:14099 slab_unreclaimable:120955 [ 1601.015521] mapped:52762 shmem:21269 pagetables:845 bounce:0 [ 1601.015521] free:13956 free_pcp:129 free_cma:0 [ 1601.028951] / [ 1601.034148] syz-executor.2 cpuset= [ 1601.044509] mems_allowed=0-1 [ 1601.046444] / [ 1601.083631] CPU: 1 PID: 10593 Comm: syz-executor.3 Not tainted 4.14.232-syzkaller #0 [ 1601.084997] Node 0 active_anon:55028kB inactive_anon:69256kB active_file:44kB inactive_file:44kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:184220kB dirty:0kB writeback:0kB shmem:73332kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1601.088311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1601.088315] Call Trace: [ 1601.088332] dump_stack+0x1b2/0x281 [ 1601.088347] warn_alloc.cold+0x96/0x1cc [ 1601.088357] ? zone_watermark_ok_safe+0x220/0x220 [ 1601.088368] ? usleep_range+0x130/0x130 [ 1601.097908] Node 1 active_anon:532kB inactive_anon:11668kB active_file:16kB inactive_file:16kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:26828kB dirty:0kB writeback:0kB shmem:11744kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1601.098294] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1601.132685] Node 0 [ 1601.136659] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1601.136669] ? run_timer_softirq+0x5a0/0x5a0 [ 1601.136686] __alloc_pages_nodemask+0x2127/0x2720 [ 1601.136700] ? lock_acquire+0x170/0x3f0 [ 1601.136713] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1601.136725] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1601.139524] DMA free:10964kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1601.143579] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1601.153086] mems_allowed=0-1 [ 1601.156788] alloc_pages_current+0x155/0x260 [ 1601.156801] ion_page_pool_alloc+0x118/0x1b0 [ 1601.156810] ion_system_heap_allocate+0x133/0x8c0 [ 1601.156819] ? ion_alloc+0x187/0x810 [ 1601.156829] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1601.156838] ? ion_system_contig_heap_create+0x130/0x130 [ 1601.156847] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1601.156859] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1601.190331] lowmem_reserve[]: [ 1601.192570] ion_alloc+0x204/0x810 [ 1601.198923] 0 [ 1601.202198] ? ion_dma_buf_release+0x40/0x40 [ 1601.211228] 2717 [ 1601.211479] ? __might_fault+0x177/0x1b0 [ 1601.230628] 2718 [ 1601.248848] ion_ioctl+0xea/0x1f0 [ 1601.248858] ? ion_query_heaps+0x360/0x360 [ 1601.248869] ? ion_query_heaps+0x360/0x360 [ 1601.248879] do_vfs_ioctl+0x75a/0xff0 [ 1601.248889] ? ioctl_preallocate+0x1a0/0x1a0 [ 1601.248898] ? lock_downgrade+0x740/0x740 [ 1601.248910] ? __fget+0x225/0x360 [ 1601.248919] ? do_vfs_ioctl+0xff0/0xff0 [ 1601.248930] ? security_file_ioctl+0x83/0xb0 [ 1601.248939] SyS_ioctl+0x7f/0xb0 [ 1601.248947] ? do_vfs_ioctl+0xff0/0xff0 [ 1601.248958] do_syscall_64+0x1d5/0x640 [ 1601.278232] 2718 [ 1601.281922] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1601.309727] 2718 [ 1601.310537] RIP: 0033:0x4665f9 [ 1601.316796] RSP: 002b:00007fd59d707188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1601.316805] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1601.316809] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000007 [ 1601.316814] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1601.316818] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1601.316823] R13: 00007ffcfd15ebff R14: 00007fd59d707300 R15: 0000000000022000 [ 1601.337153] CPU: 1 PID: 10613 Comm: syz-executor.2 Not tainted 4.14.232-syzkaller #0 [ 1601.338447] Node 0 [ 1601.343893] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1601.348090] DMA32 free:18036kB min:36200kB low:45248kB high:54296kB active_anon:55028kB inactive_anon:69256kB active_file:44kB inactive_file:44kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7744kB pagetables:3232kB bounce:0kB free_pcp:332kB local_pcp:212kB free_cma:0kB [ 1601.351811] Call Trace: [ 1601.355772] lowmem_reserve[]: [ 1601.361047] dump_stack+0x1b2/0x281 [ 1601.361059] warn_alloc.cold+0x96/0x1cc [ 1601.361068] ? perf_trace_nfs4_inode_stateid_event+0x390/0x610 [ 1601.361078] ? zone_watermark_ok_safe+0x220/0x220 [ 1601.361087] ? usleep_range+0x130/0x130 [ 1601.361095] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1601.361106] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1601.361118] ? run_timer_softirq+0x5a0/0x5a0 [ 1601.364917] 0 [ 1601.369059] __alloc_pages_nodemask+0x2127/0x2720 [ 1601.369076] ? lock_acquire+0x170/0x3f0 [ 1601.369091] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1601.373521] 0 [ 1601.375761] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1601.381088] 0 [ 1601.383217] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1601.386561] 0 [ 1601.394394] alloc_pages_current+0x155/0x260 [ 1601.402128] warn_alloc_show_mem: 2 callbacks suppressed [ 1601.402131] Mem-Info: [ 1601.409675] ion_page_pool_alloc+0x118/0x1b0 [ 1601.409685] ion_system_heap_allocate+0x133/0x8c0 [ 1601.409694] ? ion_alloc+0x187/0x810 [ 1601.409708] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1601.417342] 0 [ 1601.424844] ? ion_system_contig_heap_create+0x130/0x130 [ 1601.432851] active_anon:13890 inactive_anon:20231 isolated_anon:0 [ 1601.432851] active_file:15 inactive_file:15 isolated_file:0 [ 1601.432851] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1601.432851] slab_reclaimable:14099 slab_unreclaimable:120955 [ 1601.432851] mapped:52762 shmem:21269 pagetables:845 bounce:0 [ 1601.432851] free:13956 free_pcp:129 free_cma:0 [ 1601.440937] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1601.440950] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1601.440961] ion_alloc+0x204/0x810 [ 1601.440973] ? ion_dma_buf_release+0x40/0x40 [ 1601.440984] ? __might_fault+0x177/0x1b0 [ 1601.440995] ion_ioctl+0xea/0x1f0 [ 1601.443233] Node 0 active_anon:55028kB inactive_anon:69256kB active_file:44kB inactive_file:44kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:184220kB dirty:0kB writeback:0kB shmem:73332kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1601.452748] ? ion_query_heaps+0x360/0x360 [ 1601.452763] ? ion_query_heaps+0x360/0x360 [ 1601.452773] do_vfs_ioctl+0x75a/0xff0 [ 1601.452784] ? ioctl_preallocate+0x1a0/0x1a0 [ 1601.452791] ? lock_downgrade+0x740/0x740 [ 1601.452804] ? __fget+0x225/0x360 [ 1601.485169] ? do_vfs_ioctl+0xff0/0xff0 [ 1601.488492] Node 0 [ 1601.492433] ? security_file_ioctl+0x83/0xb0 [ 1601.496703] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1601.502811] SyS_ioctl+0x7f/0xb0 [ 1601.507961] lowmem_reserve[]: [ 1601.511870] ? do_vfs_ioctl+0xff0/0xff0 [ 1601.517346] Node 1 active_anon:532kB inactive_anon:11668kB active_file:16kB inactive_file:16kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:26828kB dirty:0kB writeback:0kB shmem:11744kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1601.522235] do_syscall_64+0x1d5/0x640 [ 1601.526845] 0 [ 1601.528597] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1601.533514] 0 0 [ 1601.537752] RIP: 0033:0x4665f9 [ 1601.537757] RSP: 002b:00007f1adcca2188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1601.537767] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1601.537772] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000008 [ 1601.537776] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1601.537780] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1601.537785] R13: 00007ffee928410f R14: 00007f1adcca2300 R15: 0000000000022000 [ 1601.857430] Node 0 DMA free:10964kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1601.886482] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1601.896349] Node 0 DMA32 free:34144kB min:36200kB low:45248kB high:54296kB active_anon:55028kB inactive_anon:69256kB active_file:44kB inactive_file:44kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7744kB pagetables:3232kB bounce:0kB free_pcp:900kB local_pcp:644kB free_cma:0kB [ 1601.927485] lowmem_reserve[]: 0 0 0 0 0 [ 1601.931599] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1602.006362] lowmem_reserve[]: 0 0 0 0 0 [ 1602.016467] Node 1 Normal free:80988kB min:53696kB low:67120kB high:80544kB active_anon:532kB inactive_anon:11668kB active_file:1968kB inactive_file:3460kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:128kB pagetables:148kB bounce:0kB free_pcp:1060kB local_pcp:688kB free_cma:0kB [ 1602.019792] 0 0 [ 1602.053195] Node 1 Normal free:80988kB min:53696kB low:67120kB high:80544kB active_anon:532kB inactive_anon:11668kB active_file:1968kB inactive_file:3460kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:128kB pagetables:148kB bounce:0kB free_pcp:1060kB local_pcp:372kB free_cma:0kB [ 1602.100306] lowmem_reserve[]: 0 0 0 0 0 [ 1602.104728] Node 0 DMA: 1*4kB (E) 3*8kB (UE) 2*16kB (UE) 1*32kB (E) 2*64kB (UE) 2*128kB (UE) 1*256kB (E) 2*512kB (UE) 1*1024kB (E) 2*2048kB (ME) 1*4096kB (U) = 10972kB [ 1602.156561] lowmem_reserve[]: 0 0 0 0 0 [ 1602.184780] Node 0 DMA: 1*4kB (E) 3*8kB (UE) 2*16kB (UE) 1*32kB (E) 2*64kB (UE) 2*128kB (UE) 1*256kB (E) 2*512kB (UE) 1*1024kB (E) 2*2048kB (ME) 1*4096kB (U) = 10972kB [ 1602.199761] Node 0 DMA32: 1518*4kB (UME) 1186*8kB (UME) 263*16kB (UME) 81*32kB (UME) 194*64kB (UM) 8*128kB (UM) 1*256kB (M) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36056kB [ 1602.257460] Node 0 DMA32: 1565*4kB (UME) 1185*8kB (UME) 264*16kB (UME) 81*32kB (UME) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 22556kB [ 1602.260283] Node 0 [ 1602.274563] syz-executor.2: [ 1602.278496] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1602.286153] page allocation failure: order:4 [ 1602.294824] Normal: [ 1602.296727] Node 1 Normal: 9*4kB (M) 15*8kB (UM) 6*16kB (M) 7*32kB (M) 9*64kB (UM) 4*128kB (M) 18*256kB (UM) 10*512kB (UM) 3*1024kB (UM) 2*2048kB (UM) 2*4096kB (U) = 26652kB [ 1602.308405] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1602.319760] 0*4kB [ 1602.324981] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1602.330627] (null) [ 1602.342992] 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1602.346304] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1602.355755] syz-executor.2 cpuset= [ 1602.363407] Node 1 [ 1602.368824] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1602.371015] Normal: [ 1602.371618] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1602.383817] / [ 1602.390453] 21318 total pagecache pages [ 1602.399237] mems_allowed=0-1 [ 1602.402938] CPU: 0 PID: 10613 Comm: syz-executor.2 Not tainted 4.14.232-syzkaller #0 [ 1602.407299] 0 pages in swap cache [ 1602.411098] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1602.414645] Swap cache stats: add 0, delete 0, find 0/0 [ 1602.425295] Call Trace: [ 1602.425317] dump_stack+0x1b2/0x281 [ 1602.425330] warn_alloc.cold+0x96/0x1cc [ 1602.425341] ? zone_watermark_ok_safe+0x220/0x220 [ 1602.425361] __alloc_pages_nodemask+0x2127/0x2720 [ 1602.425374] ? lock_acquire+0x170/0x3f0 [ 1602.434513] Free swap = 0kB [ 1602.437224] ? lock_acquire+0x170/0x3f0 [ 1602.437240] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1602.437256] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1602.441320] Total swap = 0kB [ 1602.446174] ? __mutex_unlock_slowpath+0x75/0x770 [ 1602.451139] 2097051 pages RAM [ 1602.455108] alloc_pages_current+0x155/0x260 [ 1602.458364] 0 pages HighMem/MovableOnly [ 1602.462302] ion_page_pool_alloc+0x118/0x1b0 [ 1602.467622] 363849 pages reserved [ 1602.473135] ion_system_heap_allocate+0x133/0x8c0 [ 1602.476126] 0 pages cma reserved [ 1602.481236] ? _raw_spin_unlock+0x29/0x40 [ 1602.481246] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1602.481255] ? ion_system_contig_heap_create+0x130/0x130 [ 1602.481264] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1602.481277] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1602.534733] ion_alloc+0x27a/0x810 [ 1602.538646] ? ion_dma_buf_release+0x40/0x40 [ 1602.543071] ? __might_fault+0x177/0x1b0 [ 1602.547237] ion_ioctl+0xea/0x1f0 [ 1602.551270] ? ion_query_heaps+0x360/0x360 [ 1602.555617] ? ion_query_heaps+0x360/0x360 [ 1602.560049] do_vfs_ioctl+0x75a/0xff0 [ 1602.563914] ? ioctl_preallocate+0x1a0/0x1a0 [ 1602.568586] ? lock_downgrade+0x740/0x740 [ 1602.572833] ? __fget+0x225/0x360 [ 1602.576489] ? do_vfs_ioctl+0xff0/0xff0 [ 1602.580669] ? security_file_ioctl+0x83/0xb0 [ 1602.585086] SyS_ioctl+0x7f/0xb0 [ 1602.588540] ? do_vfs_ioctl+0xff0/0xff0 [ 1602.592697] do_syscall_64+0x1d5/0x640 [ 1602.596588] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1602.601913] RIP: 0033:0x4665f9 [ 1602.605385] RSP: 002b:00007f1adcca2188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1602.613769] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1602.621407] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000008 [ 1602.628688] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1602.636051] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1602.643733] R13: 00007ffee928410f R14: 00007f1adcca2300 R15: 0000000000022000 [ 1602.676664] 3234*4kB (UM) 17*8kB (UM) 7*16kB (UM) 29*32kB (UM) 11*64kB (UM) 4*128kB (M) 18*256kB (UM) 10*512kB (UM) 3*1024kB (UM) 2*2048kB (UM) 2*4096kB (U) = 40416kB [ 1602.684643] warn_alloc_show_mem: 1 callbacks suppressed [ 1602.684647] Mem-Info: [ 1602.728372] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1602.740461] active_anon:13890 inactive_anon:20231 isolated_anon:0 [ 1602.740461] active_file:32 inactive_file:595 isolated_file:0 [ 1602.740461] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1602.740461] slab_reclaimable:14099 slab_unreclaimable:121569 [ 1602.740461] mapped:53187 shmem:21269 pagetables:845 bounce:0 [ 1602.740461] free:41333 free_pcp:398 free_cma:0 [ 1602.776370] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1602.780365] Node 0 active_anon:55028kB inactive_anon:69256kB active_file:44kB inactive_file:2544kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:185788kB dirty:0kB writeback:0kB shmem:73332kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1602.826322] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1602.832580] Node 1 active_anon:532kB inactive_anon:11668kB active_file:84kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:26960kB dirty:0kB writeback:0kB shmem:11744kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1602.836091] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1602.836096] 22021 total pagecache pages [ 1602.836104] 0 pages in swap cache [ 1602.836109] Swap cache stats: add 0, delete 0, find 0/0 [ 1602.836111] Free swap = 0kB [ 1602.836114] Total swap = 0kB [ 1602.836121] 2097051 pages RAM [ 1602.836123] 0 pages HighMem/MovableOnly [ 1602.836126] 363849 pages reserved [ 1602.836128] 0 pages cma reserved [ 1602.836134] Out of memory (oom_kill_allocating_task): Kill process 10152 (in:imklog) score 0 or sacrifice child [ 1602.836179] Killed process 10149 (rsyslogd) total-vm:254332kB, anon-rss:884kB, file-rss:0kB, shmem-rss:0kB [ 1602.842414] oom_reaper: reaped process 10593 (syz-executor.3), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1602.868280] Node 0 DMA free:11404kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1602.974248] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1602.980486] Node 0 DMA32 free:39156kB min:36200kB low:45248kB high:54296kB active_anon:53908kB inactive_anon:69256kB active_file:72kB inactive_file:3752kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7648kB pagetables:3108kB bounce:0kB free_pcp:1200kB local_pcp:720kB free_cma:0kB [ 1603.047861] lowmem_reserve[]: 0 0 0 0 0 [ 1603.052075] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1603.055620] oom_reaper: reaped process 10597 (syz-executor.0), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1603.095242] lowmem_reserve[]: 0 0 0 0 0 [ 1603.100603] syz-executor.3: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1603.104784] Node 1 Normal free:26836kB min:53696kB low:67120kB high:80544kB active_anon:532kB inactive_anon:11668kB active_file:16kB inactive_file:16kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:128kB pagetables:148kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1603.143367] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 1603.151610] lowmem_reserve[]: 0 0 0 0 0 [ 1603.155073] CPU: 0 PID: 10593 Comm: syz-executor.3 Not tainted 4.14.232-syzkaller #0 [ 1603.155632] Node 0 [ 1603.163694] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1603.163698] Call Trace: [ 1603.163718] dump_stack+0x1b2/0x281 [ 1603.163731] warn_alloc.cold+0x96/0x1cc [ 1603.163741] ? zone_watermark_ok_safe+0x220/0x220 [ 1603.163766] __alloc_pages_nodemask+0x2127/0x2720 [ 1603.166099] DMA: [ 1603.175617] ? lock_acquire+0x170/0x3f0 [ 1603.175635] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1603.175651] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1603.175662] ? __mutex_unlock_slowpath+0x75/0x770 [ 1603.175669] ? retint_kernel+0x2d/0x2d [ 1603.175681] alloc_pages_current+0x155/0x260 [ 1603.175692] ion_page_pool_alloc+0x118/0x1b0 [ 1603.175700] ion_system_heap_allocate+0x133/0x8c0 [ 1603.175710] ? _raw_spin_unlock+0x29/0x40 [ 1603.175717] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1603.175725] ? ion_system_contig_heap_create+0x130/0x130 [ 1603.175734] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1603.175743] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1603.175754] ion_alloc+0x27a/0x810 [ 1603.178354] 2*4kB [ 1603.181972] ? ion_dma_buf_release+0x40/0x40 [ 1603.185928] (ME) [ 1603.190760] ? __might_fault+0x177/0x1b0 [ 1603.190772] ion_ioctl+0xea/0x1f0 [ 1603.190780] ? ion_query_heaps+0x360/0x360 [ 1603.190791] ? ion_query_heaps+0x360/0x360 [ 1603.195610] 6*8kB [ 1603.197668] do_vfs_ioctl+0x75a/0xff0 [ 1603.197680] ? ioctl_preallocate+0x1a0/0x1a0 [ 1603.197692] ? lock_downgrade+0x740/0x740 [ 1603.201709] (UME) [ 1603.206927] ? __fget+0x225/0x360 [ 1603.206937] ? do_vfs_ioctl+0xff0/0xff0 [ 1603.206948] ? security_file_ioctl+0x83/0xb0 [ 1603.206957] SyS_ioctl+0x7f/0xb0 [ 1603.206970] ? do_vfs_ioctl+0xff0/0xff0 [ 1603.212704] 5*16kB [ 1603.217544] do_syscall_64+0x1d5/0x640 [ 1603.217558] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1603.217566] RIP: 0033:0x4665f9 [ 1603.217572] RSP: 002b:00007fd59d707188 EFLAGS: 00000246 [ 1603.221711] (UME) [ 1603.226316] ORIG_RAX: 0000000000000010 [ 1603.226322] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1603.226327] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000007 [ 1603.226331] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1603.226336] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1603.226341] R13: 00007ffcfd15ebff R14: 00007fd59d707300 R15: 0000000000022000 [ 1603.276294] syz-executor.0: [ 1603.286342] 2*32kB [ 1603.295165] oom_reaper: reaped process 10598 (syz-executor.5), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1603.307868] (ME) [ 1603.322281] page allocation failure: order:0 [ 1603.335619] 2*64kB [ 1603.394436] oom_reaper: reaped process 10603 (syz-executor.4), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1603.408225] (ME) [ 1603.418608] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1603.440315] 3*128kB [ 1603.456264] syz-executor.3: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1603.464144] (UME) [ 1603.471644] syz-executor.5: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1603.471667] syz-executor.5 cpuset= [ 1603.479698] 2*256kB [ 1603.496233] (null) [ 1603.501146] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 1603.505855] (ME) [ 1603.509418] systemd invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=0 [ 1603.515013] syz-executor.3 cpuset= [ 1603.525570] / mems_allowed=0-1 [ 1603.533417] CPU: 0 PID: 10598 Comm: syz-executor.5 Not tainted 4.14.232-syzkaller #0 [ 1603.538072] 3*512kB [ 1603.542079] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1603.542087] Call Trace: [ 1603.544411] (UME) [ 1603.554211] dump_stack+0x1b2/0x281 [ 1603.554223] warn_alloc.cold+0x96/0x1cc [ 1603.554235] ? zone_watermark_ok_safe+0x220/0x220 [ 1603.554244] ? usleep_range+0x130/0x130 [ 1603.554255] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1603.557571] systemd cpuset= [ 1603.558964] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1603.562748] / [ 1603.566710] ? run_timer_softirq+0x5a0/0x5a0 [ 1603.572016] 2*1024kB [ 1603.576367] __alloc_pages_nodemask+0x2127/0x2720 [ 1603.576386] ? lock_acquire+0x170/0x3f0 [ 1603.576401] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1603.581699] (ME) [ 1603.584995] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1603.590225] mems_allowed=0-1 [ 1603.591869] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1603.606203] 1*2048kB [ 1603.607636] alloc_pages_current+0x155/0x260 [ 1603.612641] (E) [ 1603.614781] ion_page_pool_alloc+0x118/0x1b0 [ 1603.626204] 1*4096kB [ 1603.628189] ion_system_heap_allocate+0x133/0x8c0 [ 1603.630877] (U) [ 1603.635548] ? ion_alloc+0x187/0x810 [ 1603.655649] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1603.656208] = 10952kB [ 1603.661179] ? ion_system_contig_heap_create+0x130/0x130 [ 1603.663590] Node 0 [ 1603.669141] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1603.669155] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1603.669166] ion_alloc+0x204/0x810 [ 1603.669179] ? ion_dma_buf_release+0x40/0x40 [ 1603.669191] ? __might_fault+0x177/0x1b0 [ 1603.687141] DMA32: [ 1603.691935] ion_ioctl+0xea/0x1f0 [ 1603.696020] 874*4kB [ 1603.698538] ? ion_query_heaps+0x360/0x360 [ 1603.698549] ? ion_query_heaps+0x360/0x360 [ 1603.698559] do_vfs_ioctl+0x75a/0xff0 [ 1603.698569] ? ioctl_preallocate+0x1a0/0x1a0 [ 1603.698578] ? lock_downgrade+0x740/0x740 [ 1603.698591] ? __fget+0x225/0x360 [ 1603.716214] (ME) [ 1603.717317] ? do_vfs_ioctl+0xff0/0xff0 [ 1603.721970] 763*8kB (UME) [ 1603.726141] ? security_file_ioctl+0x83/0xb0 [ 1603.736190] 174*16kB [ 1603.738893] SyS_ioctl+0x7f/0xb0 [ 1603.743489] (ME) [ 1603.745937] ? do_vfs_ioctl+0xff0/0xff0 [ 1603.755376] do_syscall_64+0x1d5/0x640 [ 1603.759705] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1603.764920] RIP: 0033:0x4665f9 [ 1603.766241] 177*32kB [ 1603.768306] RSP: 002b:00007f551e7c7188 EFLAGS: 00000246 [ 1603.768315] (UME) [ 1603.771131] ORIG_RAX: 0000000000000010 [ 1603.783234] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1603.786199] 0*64kB [ 1603.790582] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000008 [ 1603.790590] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1603.792810] 0*128kB [ 1603.800276] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1603.800282] R13: 00007ffd0570a9af R14: 00007f551e7c7300 R15: 0000000000022000 [ 1603.800670] CPU: 0 PID: 10597 Comm: syz-executor.0 Not tainted 4.14.232-syzkaller #0 [ 1603.834891] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1603.836215] syz-executor.4: [ 1603.844586] Call Trace: [ 1603.844595] page allocation failure: order:0 [ 1603.847971] dump_stack+0x1b2/0x281 [ 1603.847985] warn_alloc.cold+0x96/0x1cc [ 1603.847997] ? zone_watermark_ok_safe+0x220/0x220 [ 1603.848010] ? usleep_range+0x130/0x130 [ 1603.856237] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1603.858920] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1603.863118] (null) [ 1603.868141] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1603.868150] ? run_timer_softirq+0x5a0/0x5a0 [ 1603.868167] __alloc_pages_nodemask+0x2127/0x2720 [ 1603.868182] ? lock_acquire+0x170/0x3f0 [ 1603.886189] 0*256kB [ 1603.887596] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1603.892861] 0*512kB [ 1603.897439] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1603.897454] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1603.897474] alloc_pages_current+0x155/0x260 [ 1603.916189] syz-executor.4 cpuset= [ 1603.916305] ion_page_pool_alloc+0x118/0x1b0 [ 1603.920954] / [ 1603.926658] ion_system_heap_allocate+0x133/0x8c0 [ 1603.931163] 0*1024kB [ 1603.934738] ? ion_alloc+0x187/0x810 [ 1603.946173] 0*2048kB [ 1603.946498] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1603.948931] 0*4096kB [ 1603.952801] ? ion_system_contig_heap_create+0x130/0x130 [ 1603.955200] = 18048kB [ 1603.960939] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1603.960951] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1603.960961] ion_alloc+0x204/0x810 [ 1603.960973] ? ion_dma_buf_release+0x40/0x40 [ 1603.963847] mems_allowed=0-1 [ 1603.969271] ? __might_fault+0x177/0x1b0 [ 1603.969283] ion_ioctl+0xea/0x1f0 [ 1603.969294] ? ion_query_heaps+0x360/0x360 [ 1603.996222] Node 0 [ 1603.997514] ? ion_query_heaps+0x360/0x360 [ 1604.000968] Normal: [ 1604.005210] do_vfs_ioctl+0x75a/0xff0 [ 1604.018087] ? ioctl_preallocate+0x1a0/0x1a0 [ 1604.022828] ? lock_downgrade+0x740/0x740 [ 1604.027233] ? __fget+0x225/0x360 [ 1604.030672] ? do_vfs_ioctl+0xff0/0xff0 [ 1604.034656] ? security_file_ioctl+0x83/0xb0 [ 1604.036172] 0*4kB 0*8kB [ 1604.039064] SyS_ioctl+0x7f/0xb0 [ 1604.039073] ? do_vfs_ioctl+0xff0/0xff0 [ 1604.041991] 0*16kB [ 1604.045620] do_syscall_64+0x1d5/0x640 [ 1604.056552] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1604.061913] RIP: 0033:0x4665f9 [ 1604.065094] RSP: 002b:00007fe4a6925188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1604.072998] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1604.076175] 0*32kB [ 1604.080634] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000005 [ 1604.080641] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1604.082871] 0*64kB [ 1604.090405] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1604.090409] R13: 00007ffe5881209f R14: 00007fe4a6925300 R15: 0000000000022000 [ 1604.091142] / [ 1604.113879] CPU: 1 PID: 1 Comm: systemd Not tainted 4.14.232-syzkaller #0 [ 1604.115622] mems_allowed=0-1 [ 1604.117497] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1604.117501] Call Trace: [ 1604.117522] dump_stack+0x1b2/0x281 [ 1604.117533] dump_header+0x178/0x82f [ 1604.117543] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1604.117551] ? ___ratelimit+0x2cd/0x530 [ 1604.117561] oom_kill_process.cold+0x10/0xa40 [ 1604.117571] ? lock_downgrade+0x740/0x740 [ 1604.117585] out_of_memory+0x2dc/0x1190 [ 1604.172514] ? oom_killer_disable+0x1c0/0x1c0 [ 1604.177565] ? mutex_trylock+0x152/0x1a0 [ 1604.181628] __alloc_pages_nodemask+0x23e1/0x2720 [ 1604.186641] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1604.191554] ? do_wait+0x2d7/0x930 [ 1604.195276] ? cache_grow_begin+0x3f/0x700 [ 1604.200027] cache_grow_begin+0x91/0x700 [ 1604.204458] fallback_alloc+0x207/0x2c0 [ 1604.208419] kmem_cache_alloc+0x1e5/0x3c0 [ 1604.212550] getname_flags+0xc8/0x550 [ 1604.216341] do_sys_open+0x1ce/0x410 [ 1604.220157] ? filp_open+0x60/0x60 [ 1604.223689] ? __do_page_fault+0x159/0xad0 [ 1604.228007] ? do_syscall_64+0x4c/0x640 [ 1604.231981] ? do_sys_open+0x410/0x410 [ 1604.235857] do_syscall_64+0x1d5/0x640 [ 1604.239931] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1604.245361] RIP: 0033:0x7f13024d270d [ 1604.249110] RSP: 002b:00007fffcc960460 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 1604.257084] RAX: ffffffffffffffda RBX: 00005625d65830b0 RCX: 00007f13024d270d [ 1604.264434] RDX: 00000000000001b6 RSI: 0000000000080000 RDI: 00007fffcc960540 [ 1604.272241] RBP: 0000000000000008 R08: 0000000000000008 R09: 0000000000000001 [ 1604.279931] R10: 0000000000080000 R11: 0000000000000293 R12: 00007f1303c0c7b4 [ 1604.287467] R13: 0000000000000001 R14: 0000000000000001 R15: 0000000000000002 [ 1604.294847] CPU: 0 PID: 10593 Comm: syz-executor.3 Not tainted 4.14.232-syzkaller #0 [ 1604.303049] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1604.313901] Call Trace: [ 1604.316489] dump_stack+0x1b2/0x281 [ 1604.320371] warn_alloc.cold+0x96/0x1cc [ 1604.324363] ? zone_watermark_ok_safe+0x220/0x220 [ 1604.326165] 0*128kB [ 1604.329587] ? usleep_range+0x130/0x130 [ 1604.329592] 0*256kB 0*512kB [ 1604.332542] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1604.332556] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1604.346169] 0*1024kB 0*2048kB [ 1604.350382] ? run_timer_softirq+0x5a0/0x5a0 [ 1604.350400] __alloc_pages_nodemask+0x2127/0x2720 [ 1604.353772] 0*4096kB [ 1604.358172] ? lock_acquire+0x170/0x3f0 [ 1604.358186] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1604.358195] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1604.358209] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1604.358219] ? retint_kernel+0x2d/0x2d [ 1604.358231] alloc_pages_current+0x155/0x260 [ 1604.358240] ion_page_pool_alloc+0x118/0x1b0 [ 1604.358248] ion_system_heap_allocate+0x133/0x8c0 [ 1604.358258] ? _raw_spin_unlock+0x29/0x40 [ 1604.358265] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1604.358273] ? ion_system_contig_heap_create+0x130/0x130 [ 1604.358282] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1604.358292] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1604.358302] ion_alloc+0x27a/0x810 [ 1604.386167] = 0kB [ 1604.387387] ? ion_dma_buf_release+0x40/0x40 [ 1604.391618] Node 1 [ 1604.396194] ? __might_fault+0x177/0x1b0 [ 1604.396206] ion_ioctl+0xea/0x1f0 [ 1604.396215] ? ion_query_heaps+0x360/0x360 [ 1604.396228] ? ion_query_heaps+0x360/0x360 [ 1604.406153] Normal: [ 1604.409938] do_vfs_ioctl+0x75a/0xff0 [ 1604.414854] 3132*4kB [ 1604.420383] ? ioctl_preallocate+0x1a0/0x1a0 [ 1604.420394] ? lock_downgrade+0x740/0x740 [ 1604.420406] ? __fget+0x225/0x360 [ 1604.446154] (UM) [ 1604.447556] ? do_vfs_ioctl+0xff0/0xff0 [ 1604.451008] 141*8kB [ 1604.455347] ? security_file_ioctl+0x83/0xb0 [ 1604.476196] (UM) [ 1604.477495] SyS_ioctl+0x7f/0xb0 [ 1604.481367] 124*16kB [ 1604.483683] ? do_vfs_ioctl+0xff0/0xff0 [ 1604.506158] (UM) 145*32kB [ 1604.507205] do_syscall_64+0x1d5/0x640 [ 1604.507220] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1604.510042] (UM) [ 1604.513912] RIP: 0033:0x4665f9 [ 1604.524757] RSP: 002b:00007fd59d707188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1604.526144] 8*64kB [ 1604.532711] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1604.532718] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000007 [ 1604.535041] (M) [ 1604.542501] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1604.542506] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1604.542511] R13: 00007ffcfd15ebff R14: 00007fd59d707300 R15: 0000000000022000 [ 1604.547054] warn_alloc_show_mem: 1 callbacks suppressed [ 1604.547057] Mem-Info: [ 1604.560047] CPU: 1 PID: 10603 Comm: syz-executor.4 Not tainted 4.14.232-syzkaller #0 [ 1604.570668] active_anon:13533 inactive_anon:20231 isolated_anon:0 [ 1604.570668] active_file:16 inactive_file:17 isolated_file:0 [ 1604.570668] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1604.570668] slab_reclaimable:14081 slab_unreclaimable:121595 [ 1604.570668] mapped:52783 shmem:21269 pagetables:814 bounce:0 [ 1604.570668] free:13978 free_pcp:89 free_cma:0 [ 1604.574678] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1604.596192] Node 0 active_anon:53604kB inactive_anon:69256kB active_file:48kB inactive_file:52kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:184304kB dirty:0kB writeback:0kB shmem:73332kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1604.625532] Call Trace: [ 1604.625555] dump_stack+0x1b2/0x281 [ 1604.625568] warn_alloc.cold+0x96/0x1cc [ 1604.625580] ? zone_watermark_ok_safe+0x220/0x220 [ 1604.625589] ? usleep_range+0x130/0x130 [ 1604.625597] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1604.625608] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1604.625617] ? run_timer_softirq+0x5a0/0x5a0 [ 1604.625633] __alloc_pages_nodemask+0x2127/0x2720 [ 1604.625646] ? lock_acquire+0x170/0x3f0 [ 1604.625660] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1604.625670] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1604.625684] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1604.686913] Node 1 active_anon:528kB inactive_anon:11668kB active_file:16kB inactive_file:16kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:26828kB dirty:0kB writeback:0kB shmem:11744kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1604.691683] alloc_pages_current+0x155/0x260 [ 1604.706777] Node 0 [ 1604.707102] ion_page_pool_alloc+0x118/0x1b0 [ 1604.711063] DMA free:10952kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1604.716070] ion_system_heap_allocate+0x133/0x8c0 [ 1604.739085] lowmem_reserve[]: [ 1604.753255] ? ion_alloc+0x187/0x810 [ 1604.753266] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1604.753275] ? ion_system_contig_heap_create+0x130/0x130 [ 1604.753283] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1604.753295] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1604.753306] ion_alloc+0x204/0x810 [ 1604.785204] 0 [ 1604.790751] ? ion_dma_buf_release+0x40/0x40 [ 1604.790764] ? __might_fault+0x177/0x1b0 [ 1604.790774] ion_ioctl+0xea/0x1f0 [ 1604.790782] ? ion_query_heaps+0x360/0x360 [ 1604.790792] ? ion_query_heaps+0x360/0x360 [ 1604.790801] do_vfs_ioctl+0x75a/0xff0 [ 1604.790811] ? ioctl_preallocate+0x1a0/0x1a0 [ 1604.790821] ? lock_downgrade+0x740/0x740 [ 1604.790832] ? __fget+0x225/0x360 [ 1604.790838] ? do_vfs_ioctl+0xff0/0xff0 [ 1604.790849] ? security_file_ioctl+0x83/0xb0 [ 1604.790857] SyS_ioctl+0x7f/0xb0 [ 1604.790865] ? do_vfs_ioctl+0xff0/0xff0 [ 1604.790876] do_syscall_64+0x1d5/0x640 [ 1604.790890] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1604.790898] RIP: 0033:0x4665f9 [ 1604.790903] RSP: 002b:00007f6205eee188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1604.790913] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1604.790917] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000006 [ 1604.790922] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1604.790926] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1604.790931] R13: 00007fffcb653cef R14: 00007f6205eee300 R15: 0000000000022000 [ 1604.846179] 4*128kB [ 1604.886161] Mem-Info: [ 1604.954220] 2717 2718 2718 2718 [ 1604.977524] Node 0 DMA32 free:91748kB min:36200kB low:45248kB high:54296kB active_anon:53604kB inactive_anon:69256kB active_file:44kB inactive_file:1052kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7648kB pagetables:3108kB bounce:0kB free_pcp:460kB local_pcp:356kB free_cma:0kB [ 1605.026158] (M) 2*256kB (M) 4*512kB (UM) 3*1024kB (UM) 0*2048kB 0*4096kB = 26936kB [ 1605.033970] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1605.050098] active_anon:13533 inactive_anon:20231 isolated_anon:0 [ 1605.050098] active_file:16 inactive_file:267 isolated_file:0 [ 1605.050098] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1605.050098] slab_reclaimable:14078 slab_unreclaimable:121584 [ 1605.050098] mapped:52933 shmem:21269 pagetables:814 bounce:0 [ 1605.050098] free:115405 free_pcp:270 free_cma:0 [ 1605.076154] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1605.088262] lowmem_reserve[]: 0 0 0 0 0 [ 1605.110009] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1605.146184] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1605.151184] Node 0 active_anon:53604kB inactive_anon:69256kB active_file:48kB inactive_file:1052kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:184904kB dirty:0kB writeback:0kB shmem:73332kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1605.155510] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1605.193319] lowmem_reserve[]: 0 0 0 0 0 [ 1605.229071] Node 1 Normal free:398624kB min:53696kB low:67120kB high:80544kB active_anon:528kB inactive_anon:11668kB active_file:16kB inactive_file:16kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:128kB pagetables:148kB bounce:0kB free_pcp:792kB local_pcp:144kB free_cma:0kB [ 1605.256137] 21561 total pagecache pages [ 1605.266028] 0 pages in swap cache [ 1605.269648] Swap cache stats: add 0, delete 0, find 0/0 [ 1605.275111] Free swap = 0kB [ 1605.296136] Total swap = 0kB [ 1605.299950] 2097051 pages RAM [ 1605.303952] 0 pages HighMem/MovableOnly [ 1605.319924] 363849 pages reserved [ 1605.323861] 0 pages cma reserved [ 1605.346160] Node 1 active_anon:528kB inactive_anon:11668kB active_file:16kB inactive_file:16kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:26828kB dirty:0kB writeback:0kB shmem:11744kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1605.376176] lowmem_reserve[]: 0 0 0 0 0 [ 1605.386139] Node 0 DMA: 2*4kB (ME) 6*8kB (UME) 5*16kB (UME) 2*32kB (ME) 2*64kB (ME) 3*128kB (UME) 2*256kB (ME) 3*512kB (UME) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (U) = 10952kB [ 1605.419982] Node 0 DMA32: 622*4kB (ME) 925*8kB (UME) 398*16kB (UME) 587*32kB (UME) 3*64kB (M) 18*128kB (U) 16*256kB (U) 7*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 45216kB [ 1605.456552] Node 0 DMA free:10952kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1605.496122] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1605.508509] Node 1 Normal: 6437*4kB (U) 1013*8kB (UM) 1633*16kB (UM) 1240*32kB (UM) 0*64kB 55*128kB (UM) 54*256kB (UM) 25*512kB (UM) 1*1024kB (U) 1*2048kB (U) 0*4096kB = 136396kB [ 1605.529453] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1605.535275] Node 0 DMA32 free:45216kB min:36200kB low:45248kB high:54296kB active_anon:53604kB inactive_anon:69256kB active_file:300kB inactive_file:364kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7648kB pagetables:3108kB bounce:0kB free_pcp:528kB local_pcp:248kB free_cma:0kB [ 1605.571758] lowmem_reserve[]: 0 0 0 0 0 [ 1605.572064] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1605.585720] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1605.601737] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1605.611989] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1605.631595] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1605.652901] 22015 total pagecache pages [ 1605.665070] 0 pages in swap cache [ 1605.700511] syz-executor.0: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1605.709815] lowmem_reserve[]: [ 1605.721961] Swap cache stats: add 0, delete 0, find 0/0 [ 1605.748113] 0 0 0 0 0 [ 1605.751041] Node 1 Normal free:97136kB min:53696kB low:67120kB high:80544kB active_anon:528kB inactive_anon:11668kB active_file:116kB inactive_file:1620kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:128kB pagetables:148kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1605.766157] syz-executor.0 cpuset= [ 1605.781332] Free swap = 0kB [ 1605.790627] Total swap = 0kB [ 1605.793755] 2097051 pages RAM [ 1605.806117] / mems_allowed=0-1 [ 1605.809513] 0 pages HighMem/MovableOnly [ 1605.813522] 363849 pages reserved [ 1605.818212] CPU: 0 PID: 10597 Comm: syz-executor.0 Not tainted 4.14.232-syzkaller #0 [ 1605.826273] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1605.835808] Call Trace: [ 1605.838512] dump_stack+0x1b2/0x281 [ 1605.842177] warn_alloc.cold+0x96/0x1cc [ 1605.846182] ? zone_watermark_ok_safe+0x220/0x220 [ 1605.852104] __alloc_pages_nodemask+0x2127/0x2720 [ 1605.857404] ? lock_acquire+0x170/0x3f0 [ 1605.861566] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1605.866523] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1605.872164] ? __mutex_unlock_slowpath+0x75/0x770 [ 1605.877193] ? __list_del_entry_valid+0xb3/0xf0 [ 1605.882128] alloc_pages_current+0x155/0x260 [ 1605.886117] lowmem_reserve[]: [ 1605.886731] ion_page_pool_alloc+0x118/0x1b0 [ 1605.886740] ion_system_heap_allocate+0x133/0x8c0 [ 1605.886751] ? _raw_spin_unlock+0x29/0x40 [ 1605.886759] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1605.886766] ? ion_system_contig_heap_create+0x130/0x130 [ 1605.886776] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1605.886786] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1605.886795] ion_alloc+0x27a/0x810 [ 1605.886808] ? ion_dma_buf_release+0x40/0x40 [ 1605.890442] 0 [ 1605.894319] ? __might_fault+0x177/0x1b0 [ 1605.894331] ion_ioctl+0xea/0x1f0 [ 1605.894339] ? ion_query_heaps+0x360/0x360 [ 1605.894350] ? ion_query_heaps+0x360/0x360 [ 1605.894360] do_vfs_ioctl+0x75a/0xff0 [ 1605.894371] ? ioctl_preallocate+0x1a0/0x1a0 [ 1605.894379] ? lock_downgrade+0x740/0x740 [ 1605.894391] ? __fget+0x225/0x360 [ 1605.946104] 0 [ 1605.947932] ? do_vfs_ioctl+0xff0/0xff0 [ 1605.954011] 0 [ 1605.956781] ? security_file_ioctl+0x83/0xb0 [ 1605.956792] SyS_ioctl+0x7f/0xb0 [ 1605.956800] ? do_vfs_ioctl+0xff0/0xff0 [ 1605.956810] do_syscall_64+0x1d5/0x640 [ 1605.956822] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1605.956830] RIP: 0033:0x4665f9 [ 1605.956834] RSP: 002b:00007fe4a6925188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1605.956843] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1605.956854] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000005 [ 1605.956858] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1605.956863] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1605.956868] R13: 00007ffe5881209f R14: 00007fe4a6925300 R15: 0000000000022000 [ 1605.967703] 0 pages cma reserved [ 1606.053965] 0 0 [ 1606.063837] Node 0 DMA: 1*4kB (E) 5*8kB (UE) 4*16kB (UE) 1*32kB (E) 1*64kB (E) 2*128kB (UE) 1*256kB (E) 2*512kB (UE) 1*1024kB (E) 2*2048kB (ME) 1*4096kB (U) = 10956kB [ 1606.086642] Node 0 DMA32: 275*4kB (UME) 761*8kB (UME) 1026*16kB (UME) 700*32kB (UME) 97*64kB (U) 2*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 52468kB [ 1606.134537] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1606.166192] Node 1 Normal: 2427*4kB (U) 1016*8kB (U) 1635*16kB (U) 1241*32kB (U) 716*64kB (U) 0*128kB 0*256kB 0*512kB 17*1024kB (U) 0*2048kB 0*4096kB = 146940kB [ 1606.236655] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1606.246204] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1606.276087] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1606.285488] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1606.296119] 22595 total pagecache pages [ 1606.300193] 0 pages in swap cache [ 1606.303741] Swap cache stats: add 0, delete 0, find 0/0 [ 1606.309499] Free swap = 0kB [ 1606.312685] Total swap = 0kB [ 1606.315711] 2097051 pages RAM [ 1606.319019] 0 pages HighMem/MovableOnly [ 1606.326103] 363849 pages reserved [ 1606.329910] 0 pages cma reserved [ 1606.333954] Out of memory: Kill process 10596 (syz-executor.1) score 1004 or sacrifice child [ 1606.339536] warn_alloc_show_mem: 3 callbacks suppressed [ 1606.339540] Mem-Info: [ 1606.376152] Killed process 10600 (syz-executor.1) total-vm:93384kB, anon-rss:160kB, file-rss:34820kB, shmem-rss:0kB [ 1606.386403] active_anon:13546 inactive_anon:20231 isolated_anon:0 [ 1606.386403] active_file:499 inactive_file:784 isolated_file:21 [ 1606.386403] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1606.386403] slab_reclaimable:14002 slab_unreclaimable:123694 [ 1606.386403] mapped:53303 shmem:21269 pagetables:836 bounce:0 [ 1606.386403] free:58560 free_pcp:370 free_cma:0 [ 1606.433399] oom_reaper: reaped process 10600 (syz-executor.1), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1606.459030] Node 0 active_anon:53520kB inactive_anon:69256kB active_file:1476kB inactive_file:2584kB unevictable:0kB isolated(anon):0kB isolated(file):84kB mapped:186812kB dirty:0kB writeback:0kB shmem:73332kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1606.495887] Node 1 active_anon:564kB inactive_anon:11668kB active_file:620kB inactive_file:2052kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:27900kB dirty:0kB writeback:0kB shmem:11744kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1606.545107] Node 0 DMA free:10980kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1606.578300] lowmem_reserve[]: 0 2717 2718 2718 2718 09:40:09 executing program 3: socket(0x11, 0x2, 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000004980), 0x0, 0x0) getsockopt$X25_QBITINCL(r0, 0x106, 0x1, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x4, 0x7, 0x7, 0x6, 0xa, @remote, @private2={0xfc, 0x2, '\x00', 0x1}, 0x700, 0x20, 0x9, 0x5f3b}}) socket$vsock_dgram(0x28, 0x2, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000100)={0x80000004, 0x7}) [ 1606.590765] Node 0 DMA32 free:51596kB min:36200kB low:45248kB high:54296kB active_anon:53720kB inactive_anon:69256kB active_file:1416kB inactive_file:5732kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7648kB pagetables:3004kB bounce:0kB free_pcp:500kB local_pcp:324kB free_cma:0kB [ 1606.642832] lowmem_reserve[]: 0 0 0 0 0 [ 1606.647328] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1606.705676] lowmem_reserve[]: 0 0 0 0 0 [ 1606.739313] Node 1 Normal free:377676kB min:53696kB low:67120kB high:80544kB active_anon:564kB inactive_anon:11668kB active_file:620kB inactive_file:2252kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:128kB pagetables:192kB bounce:0kB free_pcp:836kB local_pcp:176kB free_cma:0kB [ 1606.772857] lowmem_reserve[]: 0 0 0 0 0 09:40:10 executing program 1: socket(0x11, 0x2, 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000004980), 0x0, 0x0) getsockopt$X25_QBITINCL(r0, 0x106, 0x1, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x4, 0x7, 0x7, 0x6, 0xa, @remote, @private2={0xfc, 0x2, '\x00', 0x1}, 0x700, 0x20, 0x9, 0x5f3b}}) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000004980), 0x0, 0x0) getsockopt$X25_QBITINCL(r1, 0x106, 0x1, 0x0, 0x0) r2 = socket$vsock_dgram(0x28, 0x2, 0x0) ioctl$sock_SIOCDELRT(r2, 0x890c, &(0x7f0000000180)={0x0, @llc={0x1a, 0x33a, 0x9, 0x6, 0x27, 0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, @vsock={0x28, 0x0, 0x2710}, @isdn={0x22, 0xcb, 0x81, 0x2, 0x69}, 0xfff, 0x0, 0x0, 0x0, 0x81, &(0x7f0000000140)='dummy0\x00', 0x80000000, 0x101, 0x8001}) openat$zero(0xffffffffffffff9c, &(0x7f00000000c0), 0x800, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000100)={0x80000004, 0x7}) getsockname(r1, &(0x7f0000002040)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f00000020c0)=0x80) socket(0x27, 0xa, 0x40000801) [ 1606.780753] Node 0 DMA: 1*4kB (E) 5*8kB (UE) 5*16kB (UE) 3*32kB (UE) 2*64kB (UE) 2*128kB (UE) 1*256kB (E) 2*512kB (UE) 1*1024kB (E) 2*2048kB (ME) 1*4096kB (U) = 11100kB [ 1606.834078] Node 0 DMA32: 227*4kB (UE) 502*8kB (UME) 281*16kB (UE) 103*32kB (UME) 322*64kB (U) 43*128kB (UM) 18*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 43436kB [ 1606.870283] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1606.905663] Node 1 Normal: 2510*4kB (UM) 1631*8kB (UM) 1742*16kB (UM) 1341*32kB (UM) 789*64kB (UM) 277*128kB (UM) 112*256kB (U) 8*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 212592kB [ 1606.981994] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1607.025357] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1607.075596] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1607.094011] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1607.111089] 24859 total pagecache pages [ 1607.122478] 0 pages in swap cache [ 1607.140164] Swap cache stats: add 0, delete 0, find 0/0 [ 1607.148022] Free swap = 0kB [ 1607.151238] Total swap = 0kB [ 1607.154487] 2097051 pages RAM [ 1607.162957] 0 pages HighMem/MovableOnly [ 1607.167782] 363849 pages reserved [ 1607.171773] 0 pages cma reserved [ 1607.304536] syz-executor.4: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1607.323698] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 1607.332548] CPU: 1 PID: 10603 Comm: syz-executor.4 Not tainted 4.14.232-syzkaller #0 [ 1607.340637] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1607.350200] Call Trace: [ 1607.352822] dump_stack+0x1b2/0x281 [ 1607.356826] warn_alloc.cold+0x96/0x1cc [ 1607.360898] ? zone_watermark_ok_safe+0x220/0x220 [ 1607.365853] __alloc_pages_nodemask+0x2127/0x2720 [ 1607.370994] ? ___preempt_schedule+0x16/0x18 [ 1607.375753] ? lock_acquire+0x170/0x3f0 [ 1607.379762] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1607.384977] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1607.390580] ? __mutex_unlock_slowpath+0x75/0x770 [ 1607.395579] alloc_pages_current+0x155/0x260 [ 1607.399999] ion_page_pool_alloc+0x118/0x1b0 [ 1607.404776] ion_system_heap_allocate+0x133/0x8c0 [ 1607.409984] ? _raw_spin_unlock+0x29/0x40 [ 1607.414137] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1607.419344] ? ion_system_contig_heap_create+0x130/0x130 [ 1607.424885] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1607.430168] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1607.435387] ion_alloc+0x27a/0x810 [ 1607.438940] ? ion_dma_buf_release+0x40/0x40 [ 1607.443697] ? __might_fault+0x177/0x1b0 [ 1607.447963] ion_ioctl+0xea/0x1f0 [ 1607.451427] ? ion_query_heaps+0x360/0x360 [ 1607.455860] ? ion_query_heaps+0x360/0x360 [ 1607.460425] do_vfs_ioctl+0x75a/0xff0 [ 1607.464592] ? ioctl_preallocate+0x1a0/0x1a0 [ 1607.469112] ? lock_downgrade+0x740/0x740 [ 1607.473936] ? __fget+0x225/0x360 [ 1607.477764] ? do_vfs_ioctl+0xff0/0xff0 [ 1607.482279] ? security_file_ioctl+0x83/0xb0 [ 1607.487121] SyS_ioctl+0x7f/0xb0 [ 1607.490491] ? do_vfs_ioctl+0xff0/0xff0 [ 1607.494497] do_syscall_64+0x1d5/0x640 [ 1607.498483] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1607.503684] RIP: 0033:0x4665f9 [ 1607.507008] RSP: 002b:00007f6205eee188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1607.514827] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1607.522364] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000006 [ 1607.529659] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1607.537362] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1607.544644] R13: 00007fffcb653cef R14: 00007f6205eee300 R15: 0000000000022000 [ 1607.596586] Mem-Info: [ 1607.630617] active_anon:13627 inactive_anon:20231 isolated_anon:0 [ 1607.630617] active_file:1304 inactive_file:1241 isolated_file:42 [ 1607.630617] unevictable:0 dirty:25 writeback:0 unstable:0 [ 1607.630617] slab_reclaimable:14000 slab_unreclaimable:124043 [ 1607.630617] mapped:54849 shmem:21269 pagetables:812 bounce:0 [ 1607.630617] free:30454 free_pcp:407 free_cma:0 [ 1607.720434] Node 0 active_anon:53692kB inactive_anon:69256kB active_file:3020kB inactive_file:2984kB unevictable:0kB isolated(anon):0kB isolated(file):148kB mapped:190340kB dirty:68kB writeback:0kB shmem:73332kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1607.794306] Node 1 active_anon:816kB inactive_anon:11668kB active_file:292kB inactive_file:104kB unevictable:0kB isolated(anon):0kB isolated(file):120kB mapped:27256kB dirty:32kB writeback:0kB shmem:11744kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1607.895984] Node 0 DMA free:10952kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:16kB inactive_file:16kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1608.001873] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1608.008789] Node 0 DMA32 free:35888kB min:36200kB low:45248kB high:54296kB active_anon:53704kB inactive_anon:69256kB active_file:40kB inactive_file:36kB unevictable:0kB writepending:4kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7584kB pagetables:3032kB bounce:0kB free_pcp:396kB local_pcp:120kB free_cma:0kB [ 1608.062126] syz-executor.3: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1608.106232] lowmem_reserve[]: 0 0 0 0 0 [ 1608.110539] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1608.136592] lowmem_reserve[]: 0 0 0 0 0 [ 1608.156932] systemd-journal invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1608.160326] Node 1 [ 1608.185985] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 1608.215245] Normal free:53284kB min:53696kB low:67120kB high:80544kB active_anon:916kB inactive_anon:11668kB active_file:28kB inactive_file:492kB unevictable:0kB writepending:4kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:192kB pagetables:320kB bounce:0kB free_pcp:100kB local_pcp:124kB free_cma:0kB [ 1608.215980] CPU: 0 PID: 10617 Comm: syz-executor.3 Not tainted 4.14.232-syzkaller #0 [ 1608.252323] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1608.261683] Call Trace: [ 1608.264288] dump_stack+0x1b2/0x281 [ 1608.267925] warn_alloc.cold+0x96/0x1cc [ 1608.272154] ? zone_watermark_ok_safe+0x220/0x220 [ 1608.277107] __alloc_pages_nodemask+0x2127/0x2720 [ 1608.282063] ? io_schedule_timeout+0x140/0x140 [ 1608.283566] lowmem_reserve[]: [ 1608.286750] ? lock_acquire+0x170/0x3f0 [ 1608.286765] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1608.286783] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1608.293207] 0 [ 1608.293870] ? __mutex_unlock_slowpath+0x75/0x770 [ 1608.304289] 0 [ 1608.306020] alloc_pages_current+0x155/0x260 [ 1608.306034] ion_page_pool_alloc+0x118/0x1b0 [ 1608.306046] ion_system_heap_allocate+0x133/0x8c0 [ 1608.313091] 0 [ 1608.317355] ? ion_alloc+0x187/0x810 [ 1608.317367] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1608.317375] ? ion_system_contig_heap_create+0x130/0x130 [ 1608.317385] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1608.317396] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1608.325966] 0 [ 1608.326633] ion_alloc+0x204/0x810 [ 1608.326646] ? ion_dma_buf_release+0x40/0x40 [ 1608.326658] ? __might_fault+0x177/0x1b0 [ 1608.329209] 0 [ 1608.332478] ion_ioctl+0xea/0x1f0 [ 1608.332489] ? ion_query_heaps+0x360/0x360 [ 1608.332502] ? ion_query_heaps+0x360/0x360 [ 1608.346081] do_vfs_ioctl+0x75a/0xff0 [ 1608.346093] ? ioctl_preallocate+0x1a0/0x1a0 [ 1608.346103] ? lock_downgrade+0x740/0x740 [ 1608.346119] ? __fget+0x225/0x360 [ 1608.351521] Node 0 [ 1608.356379] ? do_vfs_ioctl+0xff0/0xff0 [ 1608.356391] ? security_file_ioctl+0x83/0xb0 [ 1608.356400] SyS_ioctl+0x7f/0xb0 [ 1608.356408] ? do_vfs_ioctl+0xff0/0xff0 [ 1608.356418] do_syscall_64+0x1d5/0x640 [ 1608.358329] DMA: [ 1608.362439] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1608.362448] RIP: 0033:0x4665f9 [ 1608.362455] RSP: 002b:00007fd59d707188 EFLAGS: 00000246 [ 1608.367187] 6*4kB [ 1608.371341] ORIG_RAX: 0000000000000010 [ 1608.371347] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1608.371352] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000006 [ 1608.371357] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1608.371361] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1608.371365] R13: 00007ffcfd15ebff R14: 00007fd59d707300 R15: 0000000000022000 [ 1608.371838] systemd-journal cpuset= [ 1608.380625] syz-executor.0: [ 1608.385978] / [ 1608.410090] (UE) [ 1608.445982] mems_allowed=0-1 [ 1608.484417] page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1608.513947] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 1608.522728] CPU: 1 PID: 10597 Comm: syz-executor.0 Not tainted 4.14.232-syzkaller #0 [ 1608.531507] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1608.541451] Call Trace: [ 1608.544150] dump_stack+0x1b2/0x281 [ 1608.548038] warn_alloc.cold+0x96/0x1cc [ 1608.552192] ? zone_watermark_ok_safe+0x220/0x220 [ 1608.557112] ? usleep_range+0x130/0x130 [ 1608.561692] ? try_to_free_pages+0x23f/0x6e0 [ 1608.566270] ? _find_next_bit+0xdb/0x100 [ 1608.570507] ? run_timer_softirq+0x5a0/0x5a0 [ 1608.575253] __alloc_pages_nodemask+0x2127/0x2720 [ 1608.579325] 6*8kB (UE) 10*16kB [ 1608.580349] ? lock_acquire+0x170/0x3f0 [ 1608.580363] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1608.583714] (UE) [ 1608.587889] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1608.587904] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1608.587922] alloc_pages_current+0x155/0x260 [ 1608.587933] ion_page_pool_alloc+0x118/0x1b0 [ 1608.587942] ion_system_heap_allocate+0x133/0x8c0 [ 1608.587953] ? _raw_spin_unlock+0x29/0x40 [ 1608.605955] 11*32kB [ 1608.610126] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1608.614618] (UE) 6*64kB [ 1608.619553] ? ion_system_contig_heap_create+0x130/0x130 [ 1608.619563] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1608.619573] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1608.619583] ion_alloc+0x27a/0x810 [ 1608.619596] ? ion_dma_buf_release+0x40/0x40 [ 1608.619606] ? __might_fault+0x177/0x1b0 [ 1608.619621] ion_ioctl+0xea/0x1f0 [ 1608.619630] ? ion_query_heaps+0x360/0x360 [ 1608.619641] ? ion_query_heaps+0x360/0x360 [ 1608.619650] do_vfs_ioctl+0x75a/0xff0 [ 1608.619662] ? ioctl_preallocate+0x1a0/0x1a0 [ 1608.619669] ? lock_downgrade+0x740/0x740 [ 1608.619682] ? __fget+0x225/0x360 [ 1608.647600] (UE) [ 1608.649980] ? do_vfs_ioctl+0xff0/0xff0 [ 1608.653694] 2*128kB [ 1608.658189] ? security_file_ioctl+0x83/0xb0 [ 1608.658199] SyS_ioctl+0x7f/0xb0 [ 1608.658208] ? do_vfs_ioctl+0xff0/0xff0 [ 1608.658219] do_syscall_64+0x1d5/0x640 [ 1608.658234] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1608.658243] RIP: 0033:0x4665f9 [ 1608.658248] RSP: 002b:00007fe4a6925188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1608.658257] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1608.658265] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000005 [ 1608.677778] (UE) [ 1608.678419] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1608.682924] 2*256kB [ 1608.689421] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1608.689427] R13: 00007ffe5881209f R14: 00007fe4a6925300 R15: 0000000000022000 [ 1608.769495] CPU: 1 PID: 10308 Comm: systemd-journal Not tainted 4.14.232-syzkaller #0 [ 1608.782436] Mem-Info: [ 1608.783272] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1608.783277] Call Trace: [ 1608.783293] dump_stack+0x1b2/0x281 [ 1608.783305] dump_header+0x178/0x82f [ 1608.791520] active_anon:13655 inactive_anon:20231 isolated_anon:0 [ 1608.791520] active_file:386 inactive_file:388 isolated_file:0 [ 1608.791520] unevictable:0 dirty:2 writeback:0 unstable:0 [ 1608.791520] slab_reclaimable:14018 slab_unreclaimable:123902 [ 1608.791520] mapped:53416 shmem:21269 pagetables:838 bounce:0 [ 1608.791520] free:28057 free_pcp:104 free_cma:0 [ 1608.793832] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1608.793841] ? ___ratelimit+0x2cd/0x530 [ 1608.793853] oom_kill_process.cold+0x10/0xa40 [ 1608.803634] Node 0 active_anon:53704kB inactive_anon:69256kB active_file:1512kB inactive_file:1520kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:186692kB dirty:4kB writeback:0kB shmem:73332kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1608.806497] out_of_memory+0xe3e/0x1190 [ 1608.806510] ? oom_killer_disable+0x1c0/0x1c0 [ 1608.806517] ? mutex_trylock+0x152/0x1a0 [ 1608.806527] __alloc_pages_nodemask+0x23e1/0x2720 [ 1608.806547] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1608.811370] Node 1 active_anon:916kB inactive_anon:11668kB active_file:32kB inactive_file:32kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:26972kB dirty:4kB writeback:0kB shmem:11744kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1608.815225] alloc_pages_current+0x155/0x260 [ 1608.815252] filemap_fault+0x11a1/0x1ad0 [ 1608.856835] Node 0 [ 1608.857965] ext4_filemap_fault+0x84/0xb0 [ 1608.857978] __do_fault+0xfa/0x380 [ 1608.861983] DMA free:10976kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:4kB inactive_file:24kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1608.866416] __handle_mm_fault+0x2497/0x4620 [ 1608.866426] ? vm_insert_page+0x7c0/0x7c0 [ 1608.866433] ? check_stack_object+0x86/0xa0 [ 1608.866448] ? mark_held_locks+0xa6/0xf0 [ 1608.866457] handle_mm_fault+0x455/0x9c0 [ 1608.866469] __do_page_fault+0x549/0xad0 [ 1608.866480] ? spurious_fault+0x640/0x640 [ 1608.896801] (UE) [ 1608.900965] ? do_page_fault+0x60/0x500 [ 1608.900975] ? page_fault+0x2f/0x50 [ 1608.900985] page_fault+0x45/0x50 [ 1608.905509] 2*512kB [ 1608.909547] RIP: cd6f9040:0x7ffc80c08800 [ 1608.909551] RSP: 80c08840:000000000000000d EFLAGS: ffffffff [ 1608.968051] Mem-Info: [ 1608.996373] syz-executor.1: [ 1609.075898] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1609.084269] Node 0 DMA32 free:58348kB min:36200kB low:45248kB high:54296kB active_anon:53728kB inactive_anon:69256kB active_file:372kB inactive_file:3120kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7584kB pagetables:3040kB bounce:0kB free_pcp:496kB local_pcp:228kB free_cma:0kB [ 1609.151116] page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1609.162975] lowmem_reserve[]: 0 0 0 0 0 [ 1609.163936] active_anon:13661 inactive_anon:20231 isolated_anon:0 [ 1609.163936] active_file:220 inactive_file:1014 isolated_file:0 [ 1609.163936] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1609.163936] slab_reclaimable:14022 slab_unreclaimable:123939 [ 1609.163936] mapped:53617 shmem:21269 pagetables:840 bounce:0 [ 1609.163936] free:127657 free_pcp:105 free_cma:0 [ 1609.171469] Node 0 [ 1609.210699] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 1609.226426] CPU: 0 PID: 10620 Comm: syz-executor.1 Not tainted 4.14.232-syzkaller #0 [ 1609.234794] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1609.244529] Call Trace: [ 1609.247150] dump_stack+0x1b2/0x281 [ 1609.250980] warn_alloc.cold+0x96/0x1cc [ 1609.255274] ? zone_watermark_ok_safe+0x220/0x220 [ 1609.260678] __alloc_pages_nodemask+0x2127/0x2720 [ 1609.265713] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1609.270925] ? lock_acquire+0x170/0x3f0 [ 1609.275033] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1609.279902] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1609.285734] ? __mutex_unlock_slowpath+0x75/0x770 [ 1609.290595] alloc_pages_current+0x155/0x260 [ 1609.295017] ion_page_pool_alloc+0x118/0x1b0 [ 1609.299529] ion_system_heap_allocate+0x133/0x8c0 [ 1609.304930] ? ion_alloc+0x187/0x810 [ 1609.308750] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1609.314473] ? ion_system_contig_heap_create+0x130/0x130 [ 1609.319959] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1609.325427] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1609.330558] ion_alloc+0x204/0x810 [ 1609.334121] ? ion_dma_buf_release+0x40/0x40 [ 1609.339084] ? __might_fault+0x177/0x1b0 [ 1609.343240] ion_ioctl+0xea/0x1f0 [ 1609.346789] ? ion_query_heaps+0x360/0x360 [ 1609.351055] ? ion_query_heaps+0x360/0x360 [ 1609.355311] do_vfs_ioctl+0x75a/0xff0 [ 1609.355931] Node 0 active_anon:53728kB inactive_anon:69256kB active_file:864kB inactive_file:3744kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:187428kB dirty:0kB writeback:0kB shmem:73332kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1609.359573] ? ioctl_preallocate+0x1a0/0x1a0 [ 1609.393203] ? lock_downgrade+0x740/0x740 [ 1609.397385] ? __fget+0x225/0x360 [ 1609.401529] ? do_vfs_ioctl+0xff0/0xff0 [ 1609.406084] ? security_file_ioctl+0x83/0xb0 [ 1609.412320] SyS_ioctl+0x7f/0xb0 [ 1609.415963] ? do_vfs_ioctl+0xff0/0xff0 [ 1609.420042] do_syscall_64+0x1d5/0x640 [ 1609.423959] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1609.429377] RIP: 0033:0x4665f9 [ 1609.432652] RSP: 002b:00007f22b5267188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1609.440454] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1609.447818] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000008 [ 1609.455442] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1609.463354] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1609.471763] R13: 00007ffea96cbc0f R14: 00007f22b5267300 R15: 0000000000022000 [ 1609.480882] Node 1 active_anon:916kB inactive_anon:11668kB active_file:16kB inactive_file:312kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:27040kB dirty:0kB writeback:0kB shmem:11744kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1609.497558] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1609.534919] (UE) 2*1024kB (UE) 3*2048kB (UME) 0*4096kB = 10952kB [ 1609.549483] Node 0 DMA32: 180*4kB (UE) 565*8kB (UME) 175*16kB (ME) 30*32kB (ME) 1247*64kB (UME) 348*128kB (UE) 55*256kB (U) 2*512kB (U) 3*1024kB (U) 0*2048kB 0*4096kB = 151528kB [ 1609.555851] Node 0 [ 1609.584235] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1609.602575] DMA free:11192kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:16kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1609.611817] Node 1 [ 1609.628712] lowmem_reserve[]: 0 0 0 0 0 [ 1609.643558] Node 1 Normal free:857504kB min:53696kB low:67120kB high:80544kB active_anon:916kB inactive_anon:11668kB active_file:16kB inactive_file:364kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:192kB pagetables:320kB bounce:0kB free_pcp:20kB local_pcp:0kB free_cma:0kB [ 1609.674287] Normal: 2*4kB (UM) 1*8kB (E) 412*16kB (UE) 1118*32kB (UE) 8128*64kB (U) 731*128kB (U) 125*256kB (U) 86*512kB (UM) 75*1024kB (U) 1*2048kB (U) 2*4096kB (U) = 819216kB [ 1609.692335] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1609.702202] lowmem_reserve[]: 0 0 0 0 0 [ 1609.706749] Node 0 DMA: 15*4kB (UE) 6*8kB (UE) 10*16kB (UE) 11*32kB (UE) 8*64kB (UE) 2*128kB (UE) 2*256kB (UE) 2*512kB (UE) 2*1024kB (UE) 3*2048kB (UME) 0*4096kB = 11116kB [ 1609.723878] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1609.733734] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1609.743507] Node 0 DMA32: 718*4kB (UME) 653*8kB (UME) 112*16kB (UME) 28*32kB (UME) 4*64kB (ME) 130*128kB (UME) 56*256kB (UM) 2*512kB (U) 2*1024kB (U) 0*2048kB 0*4096kB = 45088kB [ 1609.750700] lowmem_reserve[]: [ 1609.765392] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1609.780077] 0 2717 2718 2718 2718 [ 1609.785084] Node 0 DMA32 free:45056kB min:36200kB low:45248kB high:54296kB active_anon:54232kB inactive_anon:69256kB active_file:104kB inactive_file:124kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7584kB pagetables:3040kB bounce:0kB free_pcp:848kB local_pcp:740kB free_cma:0kB [ 1609.790903] 21626 total pagecache pages [ 1609.820577] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1609.845851] Node 1 Normal: 1*4kB (M) 3*8kB (UME) 5*16kB (ME) 234*32kB (UME) 5726*64kB (U) 731*128kB (U) 126*256kB (UM) 86*512kB (UM) 75*1024kB (U) 2*2048kB (UM) 1*4096kB (U) = 628908kB [ 1609.885837] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1609.890711] 0 pages in swap cache [ 1609.895065] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1609.895073] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1609.895080] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1609.895088] 21921 total pagecache pages [ 1609.910131] lowmem_reserve[]: [ 1609.935014] Swap cache stats: add 0, delete 0, find 0/0 [ 1609.946136] 0 pages in swap cache [ 1609.949737] Swap cache stats: add 0, delete 0, find 0/0 [ 1609.952849] Free swap = 0kB [ 1609.955368] Free swap = 0kB [ 1609.955372] Total swap = 0kB [ 1609.955380] 2097051 pages RAM [ 1609.955384] 0 pages HighMem/MovableOnly [ 1609.955387] 363849 pages reserved [ 1609.955394] 0 pages cma reserved [ 1609.965162] Total swap = 0kB [ 1609.992431] 0 0 0 0 0 [ 1610.001670] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1610.034772] 2097051 pages RAM [ 1610.041453] 0 pages HighMem/MovableOnly [ 1610.050062] 363849 pages reserved [ 1610.062169] 0 pages cma reserved [ 1610.085834] warn_alloc_show_mem: 1 callbacks suppressed [ 1610.085837] Mem-Info: [ 1610.093902] active_anon:13867 inactive_anon:20231 isolated_anon:0 [ 1610.093902] active_file:90 inactive_file:779 isolated_file:0 [ 1610.093902] unevictable:0 dirty:5 writeback:0 unstable:0 [ 1610.093902] slab_reclaimable:14027 slab_unreclaimable:123740 [ 1610.093902] mapped:53325 shmem:21269 pagetables:845 bounce:0 [ 1610.093902] free:37666 free_pcp:279 free_cma:0 [ 1610.094863] lowmem_reserve[]: [ 1610.175843] Node 0 active_anon:54480kB inactive_anon:69256kB active_file:52kB inactive_file:64kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:184560kB dirty:4kB writeback:0kB shmem:73332kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1610.210413] Node 1 active_anon:988kB inactive_anon:11668kB active_file:184kB inactive_file:20kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:26940kB dirty:16kB writeback:0kB shmem:11744kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1610.241479] syz-executor.5: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1610.263408] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 1610.268797] CPU: 0 PID: 10598 Comm: syz-executor.5 Not tainted 4.14.232-syzkaller #0 [ 1610.277643] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1610.280579] 0 [ 1610.287523] Call Trace: [ 1610.287543] dump_stack+0x1b2/0x281 [ 1610.287555] warn_alloc.cold+0x96/0x1cc [ 1610.287568] ? zone_watermark_ok_safe+0x220/0x220 [ 1610.304793] __alloc_pages_nodemask+0x2127/0x2720 [ 1610.307349] 0 0 [ 1610.309970] ? io_schedule_timeout+0x140/0x140 [ 1610.309986] ? lock_acquire+0x170/0x3f0 [ 1610.312033] 0 [ 1610.316725] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1610.316740] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1610.316752] ? __mutex_unlock_slowpath+0x75/0x770 [ 1610.316766] alloc_pages_current+0x155/0x260 [ 1610.335660] 0 [ 1610.338817] ion_page_pool_alloc+0x118/0x1b0 [ 1610.338827] ion_system_heap_allocate+0x133/0x8c0 [ 1610.338840] ? _raw_spin_unlock+0x29/0x40 [ 1610.345031] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1610.349807] Node 1 [ 1610.354770] ? ion_system_contig_heap_create+0x130/0x130 [ 1610.359465] Normal free:26680kB min:53696kB low:67120kB high:80544kB active_anon:988kB inactive_anon:11668kB active_file:184kB inactive_file:800kB unevictable:0kB writepending:16kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:192kB pagetables:320kB bounce:0kB free_pcp:132kB local_pcp:132kB free_cma:0kB [ 1610.364715] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1610.367050] lowmem_reserve[]: [ 1610.372745] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1610.402500] 0 [ 1610.407703] ion_alloc+0x27a/0x810 [ 1610.407718] ? ion_dma_buf_release+0x40/0x40 [ 1610.407731] ? __might_fault+0x177/0x1b0 [ 1610.407743] ion_ioctl+0xea/0x1f0 [ 1610.411394] 0 [ 1610.416857] ? ion_query_heaps+0x360/0x360 [ 1610.416869] ? ion_query_heaps+0x360/0x360 [ 1610.416879] do_vfs_ioctl+0x75a/0xff0 [ 1610.416889] ? ioctl_preallocate+0x1a0/0x1a0 [ 1610.416897] ? lock_downgrade+0x740/0x740 [ 1610.416910] ? __fget+0x225/0x360 [ 1610.418815] 0 [ 1610.422445] ? do_vfs_ioctl+0xff0/0xff0 [ 1610.422457] ? security_file_ioctl+0x83/0xb0 [ 1610.422467] SyS_ioctl+0x7f/0xb0 [ 1610.422474] ? do_vfs_ioctl+0xff0/0xff0 [ 1610.422488] do_syscall_64+0x1d5/0x640 [ 1610.434445] 0 [ 1610.434813] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1610.437006] 0 [ 1610.441201] RIP: 0033:0x4665f9 [ 1610.449934] RSP: 002b:00007f551e7c7188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1610.449944] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1610.449959] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000008 [ 1610.449964] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1610.449968] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1610.449973] R13: 00007ffd0570a9af R14: 00007f551e7c7300 R15: 0000000000022000 [ 1610.454060] Node 0 [ 1610.454533] Node 0 [ 1610.459080] DMA free:10972kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1610.459084] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1610.459104] Node 0 DMA32 free:18048kB min:36200kB low:45248kB high:54296kB active_anon:54480kB inactive_anon:69256kB active_file:52kB inactive_file:64kB unevictable:0kB writepending:4kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7680kB pagetables:3060kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1610.459122] lowmem_reserve[]: 0 0 0 0 0 [ 1610.459140] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1610.459158] lowmem_reserve[]: 0 0 0 0 0 [ 1610.459178] Node 1 Normal free:26680kB min:53696kB low:67120kB high:80544kB active_anon:988kB inactive_anon:11668kB active_file:184kB inactive_file:800kB unevictable:0kB writepending:16kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:192kB pagetables:320kB bounce:0kB free_pcp:132kB local_pcp:0kB free_cma:0kB [ 1610.459197] lowmem_reserve[]: 0 0 0 0 0 [ 1610.459215] Node 0 DMA: 1*4kB (E) 3*8kB (UE) 10*16kB (UE) 11*32kB (UE) 7*64kB (UE) 2*128kB (UE) 2*256kB (UE) 2*512kB (UE) 2*1024kB (UE) 3*2048kB (UME) 0*4096kB = 10972kB [ 1610.459284] Node 0 DMA32: 807*4kB (ME) 755*8kB (ME) 154*16kB (ME) 30*32kB (ME) 6*64kB (ME) 1*128kB (E) 5*256kB (UM) 3*512kB (UM) 2*1024kB (U) 0*2048kB 0*4096kB = 18068kB [ 1610.459355] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB [ 1610.469370] syz-executor.2: [ 1610.477524] 0*512kB [ 1610.481390] syz-executor.4: [ 1610.485547] 0*1024kB [ 1610.492112] page allocation failure: order:0 [ 1610.494581] 0*2048kB [ 1610.500875] DMA: [ 1610.509730] 0*4096kB [ 1610.516349] 1*4kB [ 1610.521039] = 0kB [ 1610.533989] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1610.540090] Node 1 [ 1610.543935] (null) [ 1610.546327] Normal: [ 1610.550563] page allocation failure: order:0 [ 1610.578581] 21*4kB [ 1610.579986] (E) [ 1610.621555] (UM) [ 1610.640240] syz-executor.4 cpuset= [ 1610.653636] 15*8kB [ 1610.677098] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1610.684199] (ME) [ 1610.698394] / [ 1610.718659] 16*16kB [ 1610.722866] (null) [ 1610.724664] (UME) [ 1610.727946] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 1610.734032] 12*32kB [ 1610.735096] CPU: 1 PID: 10613 Comm: syz-executor.2 Not tainted 4.14.232-syzkaller #0 [ 1610.741891] (ME) [ 1610.742697] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1610.744952] 6*64kB [ 1610.747262] Call Trace: [ 1610.747284] dump_stack+0x1b2/0x281 [ 1610.747297] warn_alloc.cold+0x96/0x1cc [ 1610.747306] ? perf_trace_nfs4_inode_stateid_event+0x390/0x610 [ 1610.747315] ? zone_watermark_ok_safe+0x220/0x220 [ 1610.747324] ? usleep_range+0x130/0x130 [ 1610.747332] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1610.747344] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1610.747354] ? run_timer_softirq+0x5a0/0x5a0 [ 1610.747369] __alloc_pages_nodemask+0x2127/0x2720 [ 1610.747383] ? lock_acquire+0x170/0x3f0 [ 1610.747399] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1610.760036] (UM) [ 1610.760408] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1610.762712] 7*128kB [ 1610.767575] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1610.767593] alloc_pages_current+0x155/0x260 [ 1610.767604] ion_page_pool_alloc+0x118/0x1b0 [ 1610.767613] ion_system_heap_allocate+0x133/0x8c0 [ 1610.767623] ? _raw_spin_unlock+0x29/0x40 [ 1610.767630] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1610.767638] ? ion_system_contig_heap_create+0x130/0x130 [ 1610.767647] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1610.767656] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1610.767670] ion_alloc+0x27a/0x810 [ 1610.773297] (UM) [ 1610.774018] ? ion_dma_buf_release+0x40/0x40 [ 1610.781332] mems_allowed=0-1 [ 1610.787680] ? __might_fault+0x177/0x1b0 [ 1610.787694] ion_ioctl+0xea/0x1f0 [ 1610.787703] ? ion_query_heaps+0x360/0x360 [ 1610.787713] ? ion_query_heaps+0x360/0x360 [ 1610.787723] do_vfs_ioctl+0x75a/0xff0 [ 1610.787733] ? ioctl_preallocate+0x1a0/0x1a0 [ 1610.787741] ? lock_downgrade+0x740/0x740 [ 1610.787753] ? __fget+0x225/0x360 [ 1610.787761] ? do_vfs_ioctl+0xff0/0xff0 [ 1610.787771] ? security_file_ioctl+0x83/0xb0 [ 1610.787779] SyS_ioctl+0x7f/0xb0 [ 1610.787786] ? do_vfs_ioctl+0xff0/0xff0 [ 1610.787796] do_syscall_64+0x1d5/0x640 [ 1610.787810] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1610.787818] RIP: 0033:0x4665f9 [ 1610.787823] RSP: 002b:00007f1adcca2188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1610.787833] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1610.787838] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000008 [ 1610.787842] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1610.787847] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1610.787852] R13: 00007ffee928410f R14: 00007f1adcca2300 R15: 0000000000022000 [ 1610.798553] 3*8kB [ 1610.802641] 5*256kB [ 1610.804551] (UE) [ 1610.807165] (UM) 2*512kB (UM) 14*1024kB (U) 2*2048kB (UM) 1*4096kB (U) = 26956kB [ 1610.807206] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1610.807212] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1610.807218] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1610.807223] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1610.807227] 21317 total pagecache pages [ 1610.807241] 0 pages in swap cache [ 1610.819646] 10*16kB [ 1610.834578] CPU: 0 PID: 10603 Comm: syz-executor.4 Not tainted 4.14.232-syzkaller #0 [ 1610.842536] (UE) [ 1610.848758] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1610.848764] Call Trace: [ 1610.848785] dump_stack+0x1b2/0x281 [ 1610.848798] warn_alloc.cold+0x96/0x1cc [ 1610.848808] ? zone_watermark_ok_safe+0x220/0x220 [ 1610.848821] ? usleep_range+0x130/0x130 [ 1610.853751] 11*32kB [ 1610.857980] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1610.857993] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1610.858002] ? run_timer_softirq+0x5a0/0x5a0 [ 1610.858019] __alloc_pages_nodemask+0x2127/0x2720 [ 1610.875784] (UE) [ 1610.878781] ? lock_acquire+0x170/0x3f0 [ 1610.882848] 7*64kB [ 1610.888004] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1610.888014] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1610.888030] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1610.888049] alloc_pages_current+0x155/0x260 [ 1610.905782] (UE) [ 1610.907569] ion_page_pool_alloc+0x118/0x1b0 [ 1610.912234] 2*128kB [ 1610.917510] ion_system_heap_allocate+0x133/0x8c0 [ 1610.917522] ? _raw_spin_unlock+0x29/0x40 [ 1610.917530] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1610.917540] ? ion_system_contig_heap_create+0x130/0x130 [ 1610.935777] (UE) [ 1610.939780] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1610.945583] 2*256kB [ 1610.949735] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1610.949747] ion_alloc+0x27a/0x810 [ 1610.949760] ? ion_dma_buf_release+0x40/0x40 [ 1610.949771] ? __might_fault+0x177/0x1b0 [ 1610.949781] ion_ioctl+0xea/0x1f0 [ 1610.965773] (UE) [ 1610.967364] ? ion_query_heaps+0x360/0x360 [ 1610.971926] 2*512kB [ 1610.976375] ? ion_query_heaps+0x360/0x360 [ 1610.976387] do_vfs_ioctl+0x75a/0xff0 [ 1610.976405] ? ioctl_preallocate+0x1a0/0x1a0 [ 1610.976418] ? lock_downgrade+0x740/0x740 [ 1610.995787] (UE) [ 1610.998416] ? __fget+0x225/0x360 [ 1611.003153] 2*1024kB [ 1611.006606] ? do_vfs_ioctl+0xff0/0xff0 [ 1611.006618] ? security_file_ioctl+0x83/0xb0 [ 1611.006627] SyS_ioctl+0x7f/0xb0 [ 1611.006635] ? do_vfs_ioctl+0xff0/0xff0 [ 1611.006647] do_syscall_64+0x1d5/0x640 [ 1611.025771] (UE) [ 1611.030648] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1611.055772] 3*2048kB [ 1611.060264] RIP: 0033:0x4665f9 [ 1611.075766] (UME) [ 1611.082278] RSP: 002b:00007f6205eee188 EFLAGS: 00000246 [ 1611.105780] 0*4096kB [ 1611.109425] ORIG_RAX: 0000000000000010 [ 1611.135772] = 10972kB [ 1611.136054] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1611.138113] Node 0 [ 1611.147647] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000006 [ 1611.147652] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1611.147656] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1611.147660] R13: 00007fffcb653cef R14: 00007f6205eee300 R15: 0000000000022000 [ 1611.157947] Swap cache stats: add 0, delete 0, find 0/0 [ 1611.194757] DMA32: [ 1611.255820] Free swap = 0kB [ 1611.267268] 6920*4kB [ 1611.268849] Total swap = 0kB [ 1611.275735] (UME) [ 1611.295795] 2097051 pages RAM [ 1611.346929] 867*8kB [ 1611.409443] 0 pages HighMem/MovableOnly [ 1611.485742] 363849 pages reserved [ 1611.489235] 0 pages cma reserved [ 1611.495825] (UME) 256*16kB (UME) 115*32kB (UME) 282*64kB (UME) 11*128kB (UME) 6*256kB (UM) 3*512kB (UM) 2*1024kB (U) 0*2048kB 0*4096kB = 66968kB [ 1611.515824] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1611.519161] warn_alloc_show_mem: 2 callbacks suppressed [ 1611.519164] Mem-Info: [ 1611.539911] active_anon:13869 inactive_anon:20231 isolated_anon:0 [ 1611.539911] active_file:67 inactive_file:572 isolated_file:0 [ 1611.539911] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1611.539911] slab_reclaimable:14023 slab_unreclaimable:123577 [ 1611.539911] mapped:53247 shmem:21269 pagetables:845 bounce:0 [ 1611.539911] free:72399 free_pcp:551 free_cma:0 [ 1611.585765] Node 1 Normal: 11319*4kB (UM) 207*8kB (UME) 167*16kB (UME) 152*32kB (UME) 151*64kB (U) 6*128kB (UM) 3*256kB (UM) 2*512kB (UM) 36*1024kB (U) 3*2048kB (UM) 2*4096kB (U) = 117892kB [ 1611.605827] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1611.625781] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1611.635748] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1611.635776] Node 0 active_anon:54480kB inactive_anon:69256kB active_file:60kB inactive_file:56kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:184560kB dirty:0kB writeback:0kB shmem:73332kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1611.644946] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1611.678792] Node 1 active_anon:996kB inactive_anon:11668kB active_file:208kB inactive_file:2232kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:28428kB dirty:0kB writeback:0kB shmem:11744kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1611.682939] 21907 total pagecache pages [ 1611.712874] Node 0 DMA free:11272kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1611.725746] 0 pages in swap cache [ 1611.751354] Swap cache stats: add 0, delete 0, find 0/0 [ 1611.756991] Free swap = 0kB [ 1611.760227] Total swap = 0kB [ 1611.763325] 2097051 pages RAM [ 1611.784609] 0 pages HighMem/MovableOnly [ 1611.805725] lowmem_reserve[]: [ 1611.805734] 363849 pages reserved [ 1611.805743] 0 pages cma reserved [ 1611.809131] 0 [ 1611.812613] Out of memory (oom_kill_allocating_task): Kill process 10308 (systemd-journal) score 0 or sacrifice child [ 1611.835823] Killed process 10308 (systemd-journal) total-vm:46096kB, anon-rss:472kB, file-rss:0kB, shmem-rss:2484kB [ 1611.840006] 2717 2718 2718 2718 [ 1611.850707] Node 0 DMA32 free:196532kB min:36200kB low:45248kB high:54296kB active_anon:54480kB inactive_anon:69256kB active_file:60kB inactive_file:56kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7680kB pagetables:3060kB bounce:0kB free_pcp:1532kB local_pcp:840kB free_cma:0kB [ 1611.903139] lowmem_reserve[]: 0 0 0 0 0 [ 1611.907837] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1611.943872] lowmem_reserve[]: 0 0 0 0 0 [ 1611.966525] Node 1 Normal free:200984kB min:53696kB low:67120kB high:80544kB active_anon:996kB inactive_anon:11668kB active_file:208kB inactive_file:2232kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:192kB pagetables:320kB bounce:0kB free_pcp:1444kB local_pcp:720kB free_cma:0kB [ 1612.001910] systemd[1]: systemd-journald.service: Failed with result 'signal'. [ 1612.012160] lowmem_reserve[]: 0 0 0 0 0 09:40:15 executing program 0: socket(0x11, 0x2, 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000004980), 0x0, 0x0) getsockopt$X25_QBITINCL(r0, 0x106, 0x1, 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000100)={0x80000004, 0x7}) [ 1612.028385] Node 0 DMA: 55*4kB (UE) 14*8kB (UE) 10*16kB (UE) 11*32kB (UE) 7*64kB (UE) 2*128kB (UE) 2*256kB (UE) 2*512kB (UE) 2*1024kB (UE) 3*2048kB (UME) 0*4096kB = 11276kB [ 1612.067633] systemd[1]: systemd-journald.service: Service has no hold-off time, scheduling restart. [ 1612.086732] Node 0 DMA32: 23034*4kB (UME) 2792*8kB (UE) 2409*16kB (UME) 766*32kB (UME) 422*64kB (UME) 15*128kB (UME) 4*256kB (U) 3*512kB (UM) 2*1024kB (U) 0*2048kB 0*4096kB = 211064kB [ 1612.088341] systemd[1]: Stopped Journal Service. [ 1612.141357] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1612.178741] Node 1 Normal: 23117*4kB (UM) 2236*8kB (UME) 1166*16kB (UME) 1003*32kB (UME) 841*64kB (U) 23*128kB (UM) 15*256kB (UM) 4*512kB (UM) 0*1024kB 2*2048kB (UM) 2*4096kB (U) = 236052kB [ 1612.196812] systemd[1]: Starting Journal Service... [ 1612.220464] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1612.275753] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1612.321168] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1612.340372] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1612.368663] 24694 total pagecache pages [ 1612.371240] syz-executor.0: [ 1612.374231] 0 pages in swap cache [ 1612.374288] page allocation failure: order:4 [ 1612.396004] Swap cache stats: add 0, delete 0, find 0/0 [ 1612.401059] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1612.430337] Free swap = 0kB [ 1612.436350] (null) [ 1612.445778] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 1612.459584] CPU: 1 PID: 10627 Comm: syz-executor.0 Not tainted 4.14.232-syzkaller #0 [ 1612.463621] Total swap = 0kB [ 1612.467596] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1612.467601] Call Trace: [ 1612.467620] dump_stack+0x1b2/0x281 [ 1612.467632] warn_alloc.cold+0x96/0x1cc [ 1612.467643] ? zone_watermark_ok_safe+0x220/0x220 [ 1612.467663] __alloc_pages_nodemask+0x2127/0x2720 [ 1612.467678] ? lock_acquire+0x170/0x3f0 [ 1612.467693] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1612.467709] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1612.467718] ? __mutex_unlock_slowpath+0x75/0x770 [ 1612.467730] alloc_pages_current+0x155/0x260 [ 1612.467742] ion_page_pool_alloc+0x118/0x1b0 [ 1612.467751] ion_system_heap_allocate+0x133/0x8c0 [ 1612.467761] ? ion_alloc+0x187/0x810 [ 1612.467771] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1612.467780] ? ion_system_contig_heap_create+0x130/0x130 [ 1612.467789] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1612.467799] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1612.467807] ion_alloc+0x204/0x810 [ 1612.467820] ? ion_dma_buf_release+0x40/0x40 [ 1612.467831] ? __might_fault+0x177/0x1b0 [ 1612.467841] ion_ioctl+0xea/0x1f0 [ 1612.467848] ? ion_query_heaps+0x360/0x360 [ 1612.467859] ? ion_query_heaps+0x360/0x360 [ 1612.467868] do_vfs_ioctl+0x75a/0xff0 [ 1612.467878] ? ioctl_preallocate+0x1a0/0x1a0 [ 1612.467886] ? lock_downgrade+0x740/0x740 [ 1612.467899] ? __fget+0x225/0x360 [ 1612.467909] ? do_vfs_ioctl+0xff0/0xff0 [ 1612.467920] ? security_file_ioctl+0x83/0xb0 [ 1612.467930] SyS_ioctl+0x7f/0xb0 [ 1612.467937] ? do_vfs_ioctl+0xff0/0xff0 [ 1612.467949] do_syscall_64+0x1d5/0x640 [ 1612.467963] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1612.467970] RIP: 0033:0x4665f9 [ 1612.467975] RSP: 002b:00007fe4a6925188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1612.467984] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1612.467989] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000005 [ 1612.467994] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1612.467999] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1612.468004] R13: 00007ffe5881209f R14: 00007fe4a6925300 R15: 0000000000022000 [ 1612.695137] 2097051 pages RAM [ 1612.709028] 0 pages HighMem/MovableOnly [ 1612.713348] 363849 pages reserved [ 1612.726147] 0 pages cma reserved 09:40:16 executing program 4: socket(0x11, 0x2, 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000004980), 0x0, 0x0) getsockopt$X25_QBITINCL(r0, 0x106, 0x1, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x4, 0x7, 0x7, 0x6, 0xa, @remote, @private2={0xfc, 0x2, '\x00', 0x1}, 0x700, 0x20, 0x9, 0x5f3b}}) openat$nvram(0xffffffffffffff9c, &(0x7f0000004980), 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000100)={0x80000004, 0x7}) [ 1612.753922] systemd-journald[10628]: File /run/log/journal/04d8c135ee6b410280ba31a58c89679d/system.journal corrupted or uncleanly shut down, renaming and replacing. [ 1613.041009] syz-executor.4: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1613.107677] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 1613.125019] CPU: 1 PID: 10630 Comm: syz-executor.4 Not tainted 4.14.232-syzkaller #0 [ 1613.133554] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1613.143006] Call Trace: [ 1613.146043] dump_stack+0x1b2/0x281 [ 1613.149937] warn_alloc.cold+0x96/0x1cc [ 1613.154087] ? zone_watermark_ok_safe+0x220/0x220 [ 1613.159129] __alloc_pages_nodemask+0x2127/0x2720 [ 1613.164368] ? io_schedule_timeout+0x140/0x140 [ 1613.169036] ? lock_acquire+0x170/0x3f0 [ 1613.173373] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1613.178302] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1613.183836] ? __mutex_unlock_slowpath+0x75/0x770 [ 1613.188881] alloc_pages_current+0x155/0x260 [ 1613.193278] ion_page_pool_alloc+0x118/0x1b0 [ 1613.197681] ion_system_heap_allocate+0x133/0x8c0 [ 1613.202923] ? ion_alloc+0x187/0x810 [ 1613.206630] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1613.212683] ? ion_system_contig_heap_create+0x130/0x130 [ 1613.218303] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1613.223479] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1613.228940] ion_alloc+0x204/0x810 [ 1613.232467] ? ion_dma_buf_release+0x40/0x40 [ 1613.236957] ? __might_fault+0x177/0x1b0 [ 1613.241489] ion_ioctl+0xea/0x1f0 [ 1613.245336] ? ion_query_heaps+0x360/0x360 [ 1613.250166] ? ion_query_heaps+0x360/0x360 [ 1613.255020] do_vfs_ioctl+0x75a/0xff0 [ 1613.259077] ? ioctl_preallocate+0x1a0/0x1a0 [ 1613.263649] ? lock_downgrade+0x740/0x740 [ 1613.267989] ? __fget+0x225/0x360 [ 1613.271601] ? do_vfs_ioctl+0xff0/0xff0 [ 1613.275646] ? security_file_ioctl+0x83/0xb0 [ 1613.280218] SyS_ioctl+0x7f/0xb0 [ 1613.283575] ? do_vfs_ioctl+0xff0/0xff0 [ 1613.288465] do_syscall_64+0x1d5/0x640 [ 1613.292725] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1613.297909] RIP: 0033:0x4665f9 [ 1613.301135] RSP: 002b:00007f6205eee188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1613.309428] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1613.316858] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000006 [ 1613.324664] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1613.332921] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1613.340989] R13: 00007fffcb653cef R14: 00007f6205eee300 R15: 0000000000022000 [ 1613.378580] oom_reaper: reaped process 10617 (syz-executor.3), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1613.417180] systemd-journal invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1613.441796] systemd-journal cpuset=/ [ 1613.441810] warn_alloc_show_mem: 1 callbacks suppressed [ 1613.441816] Mem-Info: [ 1613.451214] mems_allowed=0-1 [ 1613.455432] active_anon:13925 inactive_anon:22249 isolated_anon:0 [ 1613.455432] active_file:24 inactive_file:31 isolated_file:25 [ 1613.455432] unevictable:0 dirty:5 writeback:0 unstable:0 [ 1613.455432] slab_reclaimable:14030 slab_unreclaimable:123229 [ 1613.455432] mapped:52570 shmem:23304 pagetables:842 bounce:0 [ 1613.455432] free:13834 free_pcp:55 free_cma:0 [ 1613.456548] CPU: 0 PID: 10628 Comm: systemd-journal Not tainted 4.14.232-syzkaller #0 [ 1613.456556] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1613.460271] Node 0 active_anon:54744kB inactive_anon:69192kB active_file:96kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):100kB mapped:182120kB dirty:20kB writeback:0kB shmem:73332kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1613.497849] Call Trace: [ 1613.497872] dump_stack+0x1b2/0x281 [ 1613.497883] dump_header+0x178/0x82f [ 1613.497893] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1613.497901] ? ___ratelimit+0x2cd/0x530 [ 1613.497912] oom_kill_process.cold+0x10/0xa40 [ 1613.506292] Node 1 active_anon:956kB inactive_anon:19804kB active_file:0kB inactive_file:136kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:28160kB dirty:0kB writeback:0kB shmem:19884kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1613.516774] out_of_memory+0xe3e/0x1190 [ 1613.516787] ? oom_killer_disable+0x1c0/0x1c0 [ 1613.516796] ? mutex_trylock+0x152/0x1a0 [ 1613.516805] __alloc_pages_nodemask+0x23e1/0x2720 [ 1613.516824] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1613.545092] Node 0 [ 1613.547650] alloc_pages_current+0x155/0x260 [ 1613.547666] filemap_fault+0x11a1/0x1ad0 [ 1613.551641] DMA free:10960kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1613.555738] ext4_filemap_fault+0x84/0xb0 [ 1613.555748] __do_fault+0xfa/0x380 [ 1613.555758] __handle_mm_fault+0x2497/0x4620 [ 1613.563294] lowmem_reserve[]: [ 1613.567888] ? vm_insert_page+0x7c0/0x7c0 [ 1613.567898] ? __fsnotify_inode_delete+0x20/0x20 [ 1613.567906] ? __fsnotify_update_child_dentry_flags.part.0+0x2e0/0x2e0 [ 1613.567920] ? mark_held_locks+0xa6/0xf0 [ 1613.567931] handle_mm_fault+0x455/0x9c0 [ 1613.573131] 0 [ 1613.602514] __do_page_fault+0x549/0xad0 [ 1613.602527] ? spurious_fault+0x640/0x640 [ 1613.602534] ? do_page_fault+0x60/0x500 [ 1613.602542] ? page_fault+0x2f/0x50 [ 1613.602553] page_fault+0x45/0x50 [ 1613.607435] 2717 [ 1613.612963] RIP: 0042:0x5584a0695958 [ 1613.617794] 2718 [ 1613.624186] RSP: 824251e0:00007fff82422fe1 EFLAGS: 7fff82422fe0 [ 1613.636253] Mem-Info: [ 1613.655587] 2718 [ 1613.675395] active_anon:13925 inactive_anon:22249 isolated_anon:0 [ 1613.675395] active_file:24 inactive_file:31 isolated_file:25 [ 1613.675395] unevictable:0 dirty:5 writeback:0 unstable:0 [ 1613.675395] slab_reclaimable:14030 slab_unreclaimable:123229 [ 1613.675395] mapped:52570 shmem:23304 pagetables:842 bounce:0 [ 1613.675395] free:13834 free_pcp:0 free_cma:0 [ 1613.681988] 2718 [ 1613.682489] Node 0 active_anon:54744kB inactive_anon:69192kB active_file:96kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):100kB mapped:182120kB dirty:20kB writeback:0kB shmem:73332kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1613.688404] Node 0 DMA32 free:17992kB min:36200kB low:45248kB high:54296kB active_anon:54744kB inactive_anon:69192kB active_file:324kB inactive_file:808kB unevictable:0kB writepending:120kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7648kB pagetables:2944kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1613.688426] lowmem_reserve[]: 0 0 0 0 [ 1613.695599] Node 1 active_anon:956kB inactive_anon:19804kB active_file:0kB inactive_file:136kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:28160kB dirty:0kB writeback:0kB shmem:19884kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1613.698154] 0 [ 1613.708965] Node 0 [ 1613.714684] DMA free:10960kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1613.716540] Node 0 [ 1613.720957] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1613.725917] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1613.725921] lowmem_reserve[]: 0 0 0 0 0 [ 1613.725943] Node 1 Normal free:26384kB min:53696kB low:67120kB high:80544kB active_anon:956kB inactive_anon:19804kB active_file:228kB inactive_file:288kB unevictable:0kB writepending:100kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:256kB pagetables:424kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1613.725961] lowmem_reserve[]: 0 [ 1613.733873] Node 0 [ 1613.734645] 0 [ 1613.738422] DMA32 free:17992kB min:36200kB low:45248kB high:54296kB active_anon:54744kB inactive_anon:69192kB active_file:324kB inactive_file:808kB unevictable:0kB writepending:120kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7648kB pagetables:2944kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1613.738425] lowmem_reserve[]: 0 [ 1613.740811] 0 [ 1613.745105] 0 [ 1613.747510] 0 0 [ 1613.757815] 0 [ 1613.775887] Node 0 [ 1613.796969] 0 [ 1613.815601] DMA: [ 1613.829888] 0 [ 1613.867299] 24*4kB [ 1613.913410] (UE) [ 1613.925061] Node 0 [ 1613.943010] 14*8kB [ 1613.956472] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1613.963947] (UE) [ 1613.991755] lowmem_reserve[]: [ 1614.006581] 10*16kB [ 1614.050937] 0 [ 1614.065029] (UE) 11*32kB (UE) 4*64kB (UE) 2*128kB (UE) 2*256kB (UE) 2*512kB (UE) 2*1024kB (UE) 3*2048kB (UME) 0*4096kB = 10960kB [ 1614.129144] Node 0 DMA32: 746*4kB (ME) 700*8kB (UME) 165*16kB (UME) 169*32kB (UME) 22*64kB (UM) 1*128kB (M) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18168kB [ 1614.152531] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1614.168018] Node 1 Normal: 18*4kB (UM) 8*8kB (UM) 10*16kB (UME) 659*32kB (UME) 63*64kB (U) 11*128kB (UM) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 26824kB [ 1614.190812] 0 0 0 0 [ 1614.193204] Node 1 Normal free:26824kB min:53696kB low:67120kB high:80544kB active_anon:980kB inactive_anon:19860kB active_file:12kB inactive_file:12kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:256kB pagetables:432kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1614.206965] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1614.232904] syz-executor.5: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1614.234414] syz-executor.3: [ 1614.257940] lowmem_reserve[]: [ 1614.258736] page allocation failure: order:0 [ 1614.261004] 0 [ 1614.264118] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1614.281235] syz-executor.5 cpuset= [ 1614.282944] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1614.294017] 0 [ 1614.306171] (null) [ 1614.310444] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 1614.317985] CPU: 1 PID: 10617 Comm: syz-executor.3 Not tainted 4.14.232-syzkaller #0 [ 1614.323242] / [ 1614.326735] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1614.337865] Call Trace: [ 1614.340630] dump_stack+0x1b2/0x281 [ 1614.344268] warn_alloc.cold+0x96/0x1cc [ 1614.344429] mems_allowed=0-1 [ 1614.348260] ? zone_watermark_ok_safe+0x220/0x220 [ 1614.348269] ? usleep_range+0x130/0x130 [ 1614.348277] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1614.348288] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1614.348297] ? run_timer_softirq+0x5a0/0x5a0 [ 1614.348311] __alloc_pages_nodemask+0x2127/0x2720 [ 1614.348325] ? lock_acquire+0x170/0x3f0 [ 1614.348341] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1614.348351] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1614.348366] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1614.371169] 0 [ 1614.371529] ? retint_kernel+0x2d/0x2d [ 1614.405779] alloc_pages_current+0x155/0x260 [ 1614.410305] ion_page_pool_alloc+0x118/0x1b0 [ 1614.415010] ion_system_heap_allocate+0x133/0x8c0 [ 1614.420034] ? ion_alloc+0x187/0x810 [ 1614.424102] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1614.424764] 0 [ 1614.429642] ? ion_system_contig_heap_create+0x130/0x130 [ 1614.429652] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1614.429663] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1614.429672] ion_alloc+0x204/0x810 [ 1614.429684] ? ion_dma_buf_release+0x40/0x40 [ 1614.429695] ? __might_fault+0x177/0x1b0 [ 1614.429706] ion_ioctl+0xea/0x1f0 [ 1614.429715] ? ion_query_heaps+0x360/0x360 [ 1614.429727] ? ion_query_heaps+0x360/0x360 [ 1614.429737] do_vfs_ioctl+0x75a/0xff0 [ 1614.429747] ? ioctl_preallocate+0x1a0/0x1a0 [ 1614.429758] ? lock_downgrade+0x740/0x740 [ 1614.472780] 0 [ 1614.476331] ? __fget+0x225/0x360 [ 1614.476341] ? do_vfs_ioctl+0xff0/0xff0 [ 1614.476352] ? security_file_ioctl+0x83/0xb0 [ 1614.476361] SyS_ioctl+0x7f/0xb0 [ 1614.476368] ? do_vfs_ioctl+0xff0/0xff0 [ 1614.476379] do_syscall_64+0x1d5/0x640 [ 1614.476395] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1614.476403] RIP: 0033:0x4665f9 [ 1614.476408] RSP: 002b:00007fd59d707188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1614.476417] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1614.476423] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000006 [ 1614.476429] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1614.476434] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1614.476439] R13: 00007ffcfd15ebff R14: 00007fd59d707300 R15: 0000000000022000 [ 1614.487911] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1614.502207] CPU: 0 PID: 10598 Comm: syz-executor.5 Not tainted 4.14.232-syzkaller #0 [ 1614.509979] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1614.510799] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1614.516132] 23351 total pagecache pages [ 1614.519311] Call Trace: [ 1614.527668] 0 pages in swap cache [ 1614.535258] dump_stack+0x1b2/0x281 [ 1614.543153] Swap cache stats: add 0, delete 0, find 0/0 [ 1614.550769] warn_alloc.cold+0x96/0x1cc [ 1614.550781] ? zone_watermark_ok_safe+0x220/0x220 [ 1614.550789] ? usleep_range+0x130/0x130 [ 1614.550801] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1614.558705] Free swap = 0kB [ 1614.566121] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1614.566132] ? run_timer_softirq+0x5a0/0x5a0 [ 1614.566149] __alloc_pages_nodemask+0x2127/0x2720 [ 1614.575239] Total swap = 0kB [ 1614.583933] ? lock_acquire+0x170/0x3f0 [ 1614.583950] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1614.583960] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1614.583976] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1614.592980] 2097051 pages RAM [ 1614.602484] ? retint_kernel+0x2d/0x2d [ 1614.602499] alloc_pages_current+0x155/0x260 [ 1614.602513] ion_page_pool_alloc+0x118/0x1b0 [ 1614.602526] ion_system_heap_allocate+0x133/0x8c0 [ 1614.606757] 0 pages HighMem/MovableOnly [ 1614.609805] ? _raw_spin_unlock+0x29/0x40 [ 1614.613500] 363849 pages reserved [ 1614.617221] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1614.617230] ? ion_system_contig_heap_create+0x130/0x130 [ 1614.617239] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1614.617250] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1614.617258] ion_alloc+0x27a/0x810 [ 1614.617271] ? ion_dma_buf_release+0x40/0x40 [ 1614.617283] ? __might_fault+0x177/0x1b0 [ 1614.623150] 0 pages cma reserved [ 1614.627423] ion_ioctl+0xea/0x1f0 [ 1614.627434] ? ion_query_heaps+0x360/0x360 [ 1614.627444] ? ion_query_heaps+0x360/0x360 [ 1614.627454] do_vfs_ioctl+0x75a/0xff0 [ 1614.627466] ? ioctl_preallocate+0x1a0/0x1a0 [ 1614.634510] Mem-Info: [ 1614.636419] ? lock_downgrade+0x740/0x740 [ 1614.636433] ? __fget+0x225/0x360 [ 1614.636442] ? do_vfs_ioctl+0xff0/0xff0 [ 1614.636457] ? security_file_ioctl+0x83/0xb0 [ 1614.641557] active_anon:13909 inactive_anon:22263 isolated_anon:0 [ 1614.641557] active_file:30 inactive_file:7 isolated_file:0 [ 1614.641557] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1614.641557] slab_reclaimable:14030 slab_unreclaimable:123265 [ 1614.641557] mapped:52531 shmem:23317 pagetables:818 bounce:0 [ 1614.641557] free:13958 free_pcp:0 free_cma:0 [ 1614.644679] SyS_ioctl+0x7f/0xb0 [ 1614.649717] Node 0 active_anon:54656kB inactive_anon:69192kB active_file:108kB inactive_file:16kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:182076kB dirty:0kB writeback:0kB shmem:73332kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1614.654240] ? do_vfs_ioctl+0xff0/0xff0 [ 1614.659193] Node 1 active_anon:980kB inactive_anon:19860kB active_file:12kB inactive_file:12kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:28048kB dirty:0kB writeback:0kB shmem:19936kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1614.662171] do_syscall_64+0x1d5/0x640 [ 1614.666199] Node 0 [ 1614.671189] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1614.675945] DMA free:10960kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1614.681865] RIP: 0033:0x4665f9 [ 1614.684949] lowmem_reserve[]: [ 1614.691178] RSP: 002b:00007f551e7c7188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1614.691188] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1614.691193] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000008 [ 1614.691197] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1614.691202] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1614.691206] R13: 00007ffd0570a9af R14: 00007f551e7c7300 R15: 0000000000022000 [ 1614.721170] 0 [ 1614.727075] Node 0 [ 1614.745990] 2717 [ 1614.755382] DMA: [ 1614.772954] 2718 [ 1614.779810] 24*4kB [ 1614.792401] 2718 [ 1614.792973] (UE) [ 1614.808605] 2718 [ 1614.839658] 14*8kB [ 1614.902434] (UE) [ 1614.921519] Node 0 [ 1615.044964] 10*16kB (UE) 11*32kB (UE) 4*64kB (UE) 2*128kB (UE) 2*256kB (UE) 2*512kB (UE) 2*1024kB (UE) 3*2048kB (UME) 0*4096kB = 10960kB [ 1615.145514] Node 0 DMA32: 123*4kB (UE) 641*8kB (UE) 112*16kB (UME) 165*32kB (UME) 2381*64kB (UM) 317*128kB (UM) 20*256kB (U) 7*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 214356kB [ 1615.145575] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1615.145619] Node 1 Normal: 18*4kB (UM) 8*8kB (UM) 10*16kB (UME) 659*32kB (UME) 9002*64kB (U) 222*128kB (UM) 141*256kB (U) 34*512kB (U) 3*1024kB (U) 2*2048kB (U) 0*4096kB = 686600kB [ 1615.253798] DMA32 free:302284kB min:36200kB low:45248kB high:54296kB active_anon:54656kB inactive_anon:69192kB active_file:56kB inactive_file:5256kB unevictable:0kB writepending:148kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7616kB pagetables:2840kB bounce:0kB free_pcp:0kB local_pcp:700kB free_cma:0kB [ 1615.325544] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1615.351095] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1615.360018] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1615.375571] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1615.405522] 24546 total pagecache pages [ 1615.410243] 0 pages in swap cache [ 1615.413905] Swap cache stats: add 0, delete 0, find 0/0 [ 1615.445546] lowmem_reserve[]: 0 0 0 0 0 [ 1615.448986] Free swap = 0kB [ 1615.452804] Total swap = 0kB [ 1615.460927] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1615.493932] 2097051 pages RAM [ 1615.504087] 0 pages HighMem/MovableOnly [ 1615.516980] lowmem_reserve[]: 0 0 0 0 0 [ 1615.524630] 363849 pages reserved 09:40:18 executing program 2: socket(0x11, 0x2, 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000004980), 0x0, 0x0) getsockopt$X25_QBITINCL(r0, 0x106, 0x1, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x4, 0x7, 0x7, 0x6, 0xa, @remote, @private2={0xfc, 0x2, '\x00', 0x1}, 0x700, 0x20, 0x9, 0x5f3b}}) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000004980), 0x0, 0x0) getsockopt$X25_QBITINCL(r1, 0x106, 0x1, 0x0, 0x0) r2 = socket$vsock_dgram(0x28, 0x2, 0x0) ioctl$sock_SIOCDELRT(r2, 0x890c, &(0x7f0000000180)={0x0, @llc={0x1a, 0x33a, 0x9, 0x6, 0x27, 0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, @vsock={0x28, 0x0, 0x2710}, @isdn={0x22, 0xcb, 0x81, 0x2, 0x69}, 0xfff, 0x0, 0x0, 0x0, 0x81, &(0x7f0000000140)='dummy0\x00', 0x80000000, 0x101, 0x8001}) openat$zero(0xffffffffffffff9c, &(0x7f00000000c0), 0x800, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000100)={0x80000004, 0x7}) getsockname(r1, &(0x7f0000002040)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f00000020c0)=0x80) socket(0x27, 0xa, 0x40000801) socket$can_bcm(0x1d, 0x2, 0x2) [ 1615.544571] 0 pages cma reserved [ 1615.546408] Node 1 Normal free:950528kB min:53696kB low:67120kB high:80544kB active_anon:980kB inactive_anon:19860kB active_file:12kB inactive_file:12kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:256kB pagetables:432kB bounce:0kB free_pcp:1352kB local_pcp:712kB free_cma:0kB [ 1615.557242] Out of memory (oom_kill_allocating_task): Kill process 10628 (systemd-journal) score 0 or sacrifice child [ 1615.645557] lowmem_reserve[]: 0 0 0 0 0 [ 1615.662850] Node 0 DMA: 59*4kB (UE) 14*8kB (UE) 10*16kB (UE) 11*32kB (UE) 6*64kB (UE) 2*128kB (UE) 2*256kB (UE) 2*512kB (UE) 2*1024kB (UE) 3*2048kB (UME) 0*4096kB = 11228kB 09:40:19 executing program 5: socket(0x11, 0x2, 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000004980), 0x0, 0x0) getsockopt$X25_QBITINCL(r0, 0x106, 0x1, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x4, 0x7, 0x7, 0x6, 0xa, @remote, @private2={0xfc, 0x2, '\x00', 0x1}, 0x700, 0x20, 0x9, 0x5f3b}}) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000004980), 0x0, 0x0) getsockopt$X25_QBITINCL(r1, 0x106, 0x1, 0x0, 0x0) r2 = socket$vsock_dgram(0x28, 0x2, 0x0) ioctl$sock_SIOCDELRT(r2, 0x890c, &(0x7f0000000180)={0x0, @llc={0x1a, 0x33a, 0x9, 0x6, 0x27, 0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, @vsock={0x28, 0x0, 0x2710}, @isdn={0x22, 0xcb, 0x81, 0x2, 0x69}, 0xfff, 0x0, 0x0, 0x0, 0x81, &(0x7f0000000140)='dummy0\x00', 0x80000000, 0x101, 0x8001}) openat$zero(0xffffffffffffff9c, &(0x7f00000000c0), 0x800, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000100)={0x80000004, 0x7}) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000240)={0x2, 0x80, 0x1, 0xff, 0x4, 0x41, 0x0, 0xfffffffffffffe00, 0x2000, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0xdc, 0x2, @perf_bp={&(0x7f0000000200), 0x5}, 0x4004, 0x7fffffff, 0x2, 0x4, 0x6, 0x3e7, 0x8001, 0x0, 0x3, 0x0, 0x8001}) socket(0x27, 0xa, 0x40000801) socket$can_bcm(0x1d, 0x2, 0x2) [ 1615.699223] Killed process 10628 (systemd-journal) total-vm:46096kB, anon-rss:456kB, file-rss:0kB, shmem-rss:1052kB [ 1615.714288] Node 0 DMA32: 114*4kB (E) 440*8kB (ME) 105*16kB (UME) 23*32kB (UE) 0*64kB 149*128kB (UM) 63*256kB (UM) 7*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 45176kB [ 1615.732810] oom_reaper: reaped process 10628 (systemd-journal), now anon-rss:0kB, file-rss:0kB, shmem-rss:1052kB [ 1615.830818] systemd[1]: systemd-journald.service: Main process exited, code=killed, status=9/KILL [ 1615.883419] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1615.955629] systemd[1]: Failed to start Journal Service. [ 1615.963750] Node 1 Normal: 1*4kB (M) 2*8kB (UM) 4*16kB (E) 1*32kB (E) 4663*64kB (UM) 712*128kB (U) 221*256kB (U) 76*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 485172kB [ 1616.001960] systemd[1]: systemd-journald.service: Unit entered failed state. [ 1616.026104] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1616.042386] systemd[1]: systemd-journald.service: Failed with result 'signal'. [ 1616.069343] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1616.083702] systemd[1]: systemd-journald.service: Service has no hold-off time, scheduling restart. [ 1616.130141] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1616.158565] systemd[1]: Stopped Journal Service. [ 1616.187744] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1616.260497] 23870 total pagecache pages [ 1616.264836] 0 pages in swap cache [ 1616.269236] Swap cache stats: add 0, delete 0, find 0/0 [ 1616.275138] Free swap = 0kB [ 1616.283595] Total swap = 0kB [ 1616.287598] 2097051 pages RAM [ 1616.291248] 0 pages HighMem/MovableOnly [ 1616.300596] 363849 pages reserved [ 1616.304613] 0 pages cma reserved [ 1616.687939] syz-executor.2: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1616.705993] syz-executor.5: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1616.722777] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 1616.729723] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 1616.738664] CPU: 0 PID: 10635 Comm: syz-executor.5 Not tainted 4.14.232-syzkaller #0 [ 1616.748034] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1616.758579] Call Trace: [ 1616.761406] dump_stack+0x1b2/0x281 [ 1616.765691] warn_alloc.cold+0x96/0x1cc [ 1616.769771] ? zone_watermark_ok_safe+0x220/0x220 [ 1616.774735] __alloc_pages_nodemask+0x2127/0x2720 [ 1616.779972] ? io_schedule_timeout+0x140/0x140 [ 1616.784853] ? lock_acquire+0x170/0x3f0 [ 1616.789193] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1616.794535] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1616.800271] ? __mutex_unlock_slowpath+0x75/0x770 [ 1616.805209] alloc_pages_current+0x155/0x260 [ 1616.810007] ion_page_pool_alloc+0x118/0x1b0 [ 1616.814581] ion_system_heap_allocate+0x133/0x8c0 [ 1616.819864] ? ion_alloc+0x187/0x810 [ 1616.823860] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1616.829402] ? ion_system_contig_heap_create+0x130/0x130 [ 1616.836438] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1616.841844] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1616.847284] ion_alloc+0x204/0x810 [ 1616.851056] ? ion_dma_buf_release+0x40/0x40 [ 1616.855636] ? __might_fault+0x177/0x1b0 [ 1616.859915] ion_ioctl+0xea/0x1f0 [ 1616.863772] ? ion_query_heaps+0x360/0x360 [ 1616.868095] ? ion_query_heaps+0x360/0x360 [ 1616.872329] do_vfs_ioctl+0x75a/0xff0 [ 1616.876371] ? ioctl_preallocate+0x1a0/0x1a0 [ 1616.881086] ? lock_downgrade+0x740/0x740 [ 1616.885279] ? __fget+0x225/0x360 [ 1616.888814] ? do_vfs_ioctl+0xff0/0xff0 [ 1616.892781] ? security_file_ioctl+0x83/0xb0 [ 1616.897825] SyS_ioctl+0x7f/0xb0 [ 1616.901464] ? do_vfs_ioctl+0xff0/0xff0 [ 1616.905604] do_syscall_64+0x1d5/0x640 [ 1616.909656] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1616.915068] RIP: 0033:0x4665f9 [ 1616.918289] RSP: 002b:00007f551e7c7188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1616.926093] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1616.934463] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000008 [ 1616.942358] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1616.950159] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1616.958089] R13: 00007ffd0570a9af R14: 00007f551e7c7300 R15: 0000000000022000 [ 1616.985487] CPU: 0 PID: 10632 Comm: syz-executor.2 Not tainted 4.14.232-syzkaller #0 [ 1616.994753] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1617.004657] Call Trace: [ 1617.007264] dump_stack+0x1b2/0x281 [ 1617.011250] warn_alloc.cold+0x96/0x1cc [ 1617.015406] ? zone_watermark_ok_safe+0x220/0x220 [ 1617.020270] __alloc_pages_nodemask+0x2127/0x2720 [ 1617.025125] ? _raw_spin_unlock_irq+0x24/0x80 [ 1617.029982] ? lock_acquire+0x170/0x3f0 [ 1617.034068] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1617.038933] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1617.044505] ? __mutex_unlock_slowpath+0x75/0x770 [ 1617.049456] alloc_pages_current+0x155/0x260 [ 1617.053967] ion_page_pool_alloc+0x118/0x1b0 [ 1617.058386] ion_system_heap_allocate+0x133/0x8c0 [ 1617.063234] ? ion_alloc+0x187/0x810 [ 1617.067048] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1617.072636] ? ion_system_contig_heap_create+0x130/0x130 [ 1617.078640] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1617.083930] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1617.088794] ion_alloc+0x204/0x810 [ 1617.092446] ? ion_dma_buf_release+0x40/0x40 [ 1617.097218] ? __might_fault+0x177/0x1b0 [ 1617.101579] ion_ioctl+0xea/0x1f0 [ 1617.105047] ? ion_query_heaps+0x360/0x360 [ 1617.109992] ? ion_query_heaps+0x360/0x360 [ 1617.114856] do_vfs_ioctl+0x75a/0xff0 [ 1617.119067] ? ioctl_preallocate+0x1a0/0x1a0 [ 1617.124075] ? lock_downgrade+0x740/0x740 [ 1617.128866] ? __fget+0x225/0x360 [ 1617.132463] ? do_vfs_ioctl+0xff0/0xff0 [ 1617.136993] ? security_file_ioctl+0x83/0xb0 [ 1617.141411] SyS_ioctl+0x7f/0xb0 [ 1617.144871] ? do_vfs_ioctl+0xff0/0xff0 [ 1617.148892] do_syscall_64+0x1d5/0x640 [ 1617.153439] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1617.158931] RIP: 0033:0x4665f9 [ 1617.162227] RSP: 002b:00007f1adcca2188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1617.170134] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1617.177602] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000008 [ 1617.185632] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1617.193003] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1617.200797] R13: 00007ffee928410f R14: 00007f1adcca2300 R15: 0000000000022000 [ 1617.214667] warn_alloc_show_mem: 1 callbacks suppressed [ 1617.224866] Mem-Info: [ 1617.231446] active_anon:13923 inactive_anon:22262 isolated_anon:0 [ 1617.231446] active_file:505 inactive_file:493 isolated_file:0 [ 1617.231446] unevictable:0 dirty:5 writeback:0 unstable:0 [ 1617.231446] slab_reclaimable:14093 slab_unreclaimable:122698 [ 1617.231446] mapped:53230 shmem:23317 pagetables:853 bounce:0 [ 1617.231446] free:28209 free_pcp:349 free_cma:0 [ 1617.322396] Node 0 active_anon:54616kB inactive_anon:69192kB active_file:832kB inactive_file:688kB unevictable:0kB isolated(anon):0kB isolated(file):128kB mapped:183604kB dirty:12kB writeback:0kB shmem:73332kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1617.392073] Node 1 active_anon:1076kB inactive_anon:19856kB active_file:172kB inactive_file:548kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:27016kB dirty:8kB writeback:0kB shmem:19936kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1617.438641] Node 0 DMA free:11012kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:24kB inactive_file:24kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1617.485390] syz-executor.3: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1617.515411] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 1617.521334] CPU: 1 PID: 10617 Comm: syz-executor.3 Not tainted 4.14.232-syzkaller #0 [ 1617.530020] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1617.539645] Call Trace: [ 1617.542258] dump_stack+0x1b2/0x281 [ 1617.546441] warn_alloc.cold+0x96/0x1cc [ 1617.548237] lowmem_reserve[]: 0 [ 1617.550717] ? zone_watermark_ok_safe+0x220/0x220 [ 1617.550737] __alloc_pages_nodemask+0x2127/0x2720 [ 1617.554009] 2717 [ 1617.559072] ? lock_acquire+0x170/0x3f0 [ 1617.559086] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1617.559102] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1617.559112] ? __mutex_unlock_slowpath+0x75/0x770 [ 1617.559125] alloc_pages_current+0x155/0x260 [ 1617.559137] ion_page_pool_alloc+0x118/0x1b0 [ 1617.559147] ion_system_heap_allocate+0x133/0x8c0 [ 1617.559158] ? _raw_spin_unlock+0x29/0x40 [ 1617.588190] 2718 [ 1617.590254] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1617.594786] 2718 [ 1617.599629] ? ion_system_contig_heap_create+0x130/0x130 [ 1617.599639] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1617.599649] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1617.599658] ion_alloc+0x27a/0x810 [ 1617.599670] ? ion_dma_buf_release+0x40/0x40 [ 1617.599681] ? __might_fault+0x177/0x1b0 [ 1617.599691] ion_ioctl+0xea/0x1f0 [ 1617.599698] ? ion_query_heaps+0x360/0x360 [ 1617.599710] ? ion_query_heaps+0x360/0x360 [ 1617.599720] do_vfs_ioctl+0x75a/0xff0 [ 1617.615953] 2718 [ 1617.619266] ? ioctl_preallocate+0x1a0/0x1a0 [ 1617.629554] ? lock_downgrade+0x740/0x740 [ 1617.629570] ? __fget+0x225/0x360 [ 1617.629579] ? do_vfs_ioctl+0xff0/0xff0 [ 1617.629590] ? security_file_ioctl+0x83/0xb0 [ 1617.629599] SyS_ioctl+0x7f/0xb0 [ 1617.629607] ? do_vfs_ioctl+0xff0/0xff0 [ 1617.629617] do_syscall_64+0x1d5/0x640 [ 1617.629630] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1617.629639] RIP: 0033:0x4665f9 [ 1617.629644] RSP: 002b:00007fd59d707188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1617.629653] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1617.629661] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000006 [ 1617.651695] Node 0 [ 1617.654744] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1617.661207] DMA32 free:36308kB min:36200kB low:45248kB high:54296kB active_anon:54616kB inactive_anon:69192kB active_file:448kB inactive_file:688kB unevictable:0kB writepending:12kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7584kB pagetables:2756kB bounce:0kB free_pcp:752kB local_pcp:0kB free_cma:0kB [ 1617.665207] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1617.671200] lowmem_reserve[]: [ 1617.672962] R13: 00007ffcfd15ebff R14: 00007fd59d707300 R15: 0000000000022000 [ 1617.688161] 0 [ 1617.769850] oom_reaper: reaped process 10630 (syz-executor.4), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1617.778901] 0 0 0 0 [ 1617.802489] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1617.832062] lowmem_reserve[]: 0 0 0 0 0 [ 1617.836705] Node 1 Normal free:28356kB min:53696kB low:67120kB high:80544kB active_anon:1076kB inactive_anon:19856kB active_file:156kB inactive_file:700kB unevictable:0kB writepending:8kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:288kB pagetables:656kB bounce:0kB free_pcp:640kB local_pcp:0kB free_cma:0kB [ 1617.839061] (journald) invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask= [ 1617.871599] lowmem_reserve[]: 0 0 0 0 0 [ 1617.893036] Node 0 DMA: 1*4kB (U) 8*8kB (UE) 23*16kB (UE) 12*32kB (UE) 1*64kB (E) 3*128kB (UE) 2*256kB (UE) 2*512kB (UE) 2*1024kB (UE) 3*2048kB (UME) 0*4096kB = 10996kB [ 1617.917318] Node 0 DMA32: 758*4kB (UME) 655*8kB (ME) 149*16kB (UME) 235*32kB (UME) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18176kB [ 1617.943845] (null), order=0, oom_score_adj=0 [ 1617.948904] (journald) cpuset=/ mems_allowed=0-1 [ 1617.953770] CPU: 1 PID: 10638 Comm: (journald) Not tainted 4.14.232-syzkaller #0 [ 1617.961477] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1617.970842] Call Trace: [ 1617.971001] Node 0 Normal: [ 1617.973435] dump_stack+0x1b2/0x281 [ 1617.973438] 0*4kB 0*8kB [ 1617.976360] dump_header+0x178/0x82f [ 1617.976371] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1617.976378] ? ___ratelimit+0x2cd/0x530 [ 1617.976387] oom_kill_process.cold+0x10/0xa40 [ 1617.976403] out_of_memory+0xe3e/0x1190 [ 1617.976414] ? oom_killer_disable+0x1c0/0x1c0 [ 1617.976421] ? mutex_trylock+0x152/0x1a0 [ 1617.976432] __alloc_pages_nodemask+0x23e1/0x2720 [ 1617.976452] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1617.976477] alloc_pages_current+0x155/0x260 [ 1618.003657] 0*16kB [ 1618.004797] filemap_fault+0x11a1/0x1ad0 [ 1618.031547] 0*32kB 0*64kB 0*128kB 0*256kB [ 1618.034188] ext4_filemap_fault+0x84/0xb0 [ 1618.034199] __do_fault+0xfa/0x380 [ 1618.046677] __handle_mm_fault+0x2497/0x4620 [ 1618.051543] ? do_seccomp+0xea3/0x19c0 [ 1618.055527] ? vm_insert_page+0x7c0/0x7c0 [ 1618.060039] ? lock_acquire+0x170/0x3f0 [ 1618.062006] 0*512kB [ 1618.064027] ? lock_downgrade+0x740/0x740 [ 1618.064030] 0*1024kB 0*2048kB [ 1618.066580] ? mark_held_locks+0xa6/0xf0 [ 1618.066592] handle_mm_fault+0x455/0x9c0 [ 1618.066605] __do_page_fault+0x549/0xad0 [ 1618.066616] ? spurious_fault+0x640/0x640 [ 1618.066624] ? do_page_fault+0x60/0x500 [ 1618.066631] ? page_fault+0x2f/0x50 [ 1618.066636] page_fault+0x45/0x50 [ 1618.066644] RIP: cc9600f8:0x7f1303c2a238 [ 1618.066648] RSP: c000003e:00005625d64d4e60 EFLAGS: 7fffcc960100 [ 1618.074887] Mem-Info: [ 1618.086330] syz-executor.4: [ 1618.095138] active_anon:13898 inactive_anon:22262 isolated_anon:0 [ 1618.095138] active_file:15 inactive_file:16 isolated_file:0 [ 1618.095138] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1618.095138] slab_reclaimable:14061 slab_unreclaimable:122742 [ 1618.095138] mapped:52225 shmem:23317 pagetables:853 bounce:0 [ 1618.095138] free:13845 free_pcp:90 free_cma:0 [ 1618.108368] page allocation failure: order:0 [ 1618.121234] Node 0 active_anon:54596kB inactive_anon:69192kB active_file:28kB inactive_file:28kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:182072kB dirty:0kB writeback:0kB shmem:73332kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1618.160415] syz-executor.3: [ 1618.196010] 0*4096kB [ 1618.196696] page allocation failure: order:0 [ 1618.199154] = 0kB [ 1618.201655] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1618.211655] Node 1 [ 1618.214367] (null) [ 1618.221225] Normal: [ 1618.223659] syz-executor.3 cpuset= [ 1618.223790] 6*4kB [ 1618.232216] / mems_allowed=0-1 [ 1618.239355] (UM) 23*8kB (UM) 8*16kB (ME) 807*32kB (UE) 3*64kB (U) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 26352kB [ 1618.240236] CPU: 1 PID: 10617 Comm: syz-executor.3 Not tainted 4.14.232-syzkaller #0 [ 1618.259163] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1618.259827] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1618.273272] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1618.279136] Call Trace: [ 1618.279157] dump_stack+0x1b2/0x281 [ 1618.279170] warn_alloc.cold+0x96/0x1cc [ 1618.279181] ? zone_watermark_ok_safe+0x220/0x220 [ 1618.279189] ? usleep_range+0x130/0x130 [ 1618.279198] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1618.279209] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1618.279220] ? run_timer_softirq+0x5a0/0x5a0 [ 1618.294113] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1618.296833] __alloc_pages_nodemask+0x2127/0x2720 [ 1618.296850] ? lock_acquire+0x170/0x3f0 [ 1618.296865] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1618.301695] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1618.305666] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1618.305683] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1618.305694] ? retint_kernel+0x2d/0x2d [ 1618.305706] alloc_pages_current+0x155/0x260 [ 1618.305717] ion_page_pool_alloc+0x118/0x1b0 [ 1618.305727] ion_system_heap_allocate+0x133/0x8c0 [ 1618.305738] ? _raw_spin_unlock+0x29/0x40 [ 1618.305746] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1618.305755] ? ion_system_contig_heap_create+0x130/0x130 [ 1618.305764] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1618.305775] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1618.318193] (null) [ 1618.320720] ion_alloc+0x27a/0x810 [ 1618.333201] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1618.334604] ? ion_dma_buf_release+0x40/0x40 [ 1618.342721] syz-executor.4 cpuset= [ 1618.343732] ? __might_fault+0x177/0x1b0 [ 1618.360511] 23348 total pagecache pages [ 1618.363687] ion_ioctl+0xea/0x1f0 [ 1618.369546] 0 pages in swap cache [ 1618.372138] ? ion_query_heaps+0x360/0x360 [ 1618.382558] / [ 1618.386288] ? ion_query_heaps+0x360/0x360 [ 1618.392968] Swap cache stats: add 0, delete 0, find 0/0 [ 1618.396838] do_vfs_ioctl+0x75a/0xff0 [ 1618.396851] ? ioctl_preallocate+0x1a0/0x1a0 [ 1618.396861] ? lock_downgrade+0x740/0x740 [ 1618.396873] ? __fget+0x225/0x360 [ 1618.396882] ? do_vfs_ioctl+0xff0/0xff0 [ 1618.396894] ? security_file_ioctl+0x83/0xb0 [ 1618.396904] SyS_ioctl+0x7f/0xb0 [ 1618.396914] ? do_vfs_ioctl+0xff0/0xff0 [ 1618.407558] Free swap = 0kB [ 1618.409284] do_syscall_64+0x1d5/0x640 [ 1618.412964] Total swap = 0kB [ 1618.421730] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1618.421739] RIP: 0033:0x4665f9 [ 1618.421743] RSP: 002b:00007fd59d707188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1618.421752] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1618.421756] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000006 [ 1618.421761] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1618.421765] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1618.421770] R13: 00007ffcfd15ebff R14: 00007fd59d707300 R15: 0000000000022000 [ 1618.433352] Node 1 active_anon:996kB inactive_anon:19856kB active_file:32kB inactive_file:36kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:26828kB dirty:0kB writeback:0kB shmem:19936kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1618.439341] mems_allowed=0-1 [ 1618.448861] Node 0 [ 1618.452200] CPU: 0 PID: 10630 Comm: syz-executor.4 Not tainted 4.14.232-syzkaller #0 [ 1618.461857] DMA free:10976kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1618.465033] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1618.465039] Call Trace: [ 1618.469966] lowmem_reserve[]: [ 1618.474327] dump_stack+0x1b2/0x281 [ 1618.477825] 0 [ 1618.482017] warn_alloc.cold+0x96/0x1cc [ 1618.486465] 2717 [ 1618.489795] ? zone_watermark_ok_safe+0x220/0x220 [ 1618.493736] 2718 [ 1618.496762] ? usleep_range+0x130/0x130 [ 1618.496771] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1618.496782] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1618.496792] ? run_timer_softirq+0x5a0/0x5a0 [ 1618.501064] 2718 [ 1618.504099] __alloc_pages_nodemask+0x2127/0x2720 [ 1618.509569] 2718 [ 1618.512816] ? lock_acquire+0x170/0x3f0 [ 1618.528804] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1618.528817] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1618.536112] Node 0 [ 1618.543719] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1618.551632] DMA32 free:18052kB min:36200kB low:45248kB high:54296kB active_anon:54596kB inactive_anon:69192kB active_file:28kB inactive_file:28kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7584kB pagetables:2756kB bounce:0kB free_pcp:240kB local_pcp:120kB free_cma:0kB [ 1618.559036] alloc_pages_current+0x155/0x260 [ 1618.559050] ion_page_pool_alloc+0x118/0x1b0 [ 1618.586841] lowmem_reserve[]: [ 1618.590086] ion_system_heap_allocate+0x133/0x8c0 [ 1618.592339] 0 [ 1618.600421] ? ion_alloc+0x187/0x810 [ 1618.600432] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1618.600440] ? ion_system_contig_heap_create+0x130/0x130 [ 1618.600453] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1618.626584] warn_alloc_show_mem: 2 callbacks suppressed [ 1618.626587] Mem-Info: [ 1618.635894] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1618.635906] ion_alloc+0x204/0x810 [ 1618.635921] ? ion_dma_buf_release+0x40/0x40 [ 1618.638512] active_anon:13898 inactive_anon:22262 isolated_anon:0 [ 1618.638512] active_file:15 inactive_file:16 isolated_file:0 [ 1618.638512] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1618.638512] slab_reclaimable:14061 slab_unreclaimable:122742 [ 1618.638512] mapped:52225 shmem:23317 pagetables:853 bounce:0 [ 1618.638512] free:13845 free_pcp:90 free_cma:0 [ 1618.641678] ? __might_fault+0x177/0x1b0 [ 1618.645483] 0 [ 1618.647281] ion_ioctl+0xea/0x1f0 [ 1618.651247] 0 [ 1618.653419] ? ion_query_heaps+0x360/0x360 [ 1618.658698] Node 0 active_anon:54596kB inactive_anon:69192kB active_file:28kB inactive_file:28kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:182072kB dirty:0kB writeback:0kB shmem:73332kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1618.660971] ? ion_query_heaps+0x360/0x360 [ 1618.665521] Node 1 active_anon:996kB inactive_anon:19856kB active_file:32kB inactive_file:36kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:26828kB dirty:0kB writeback:0kB shmem:19936kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1618.670872] do_vfs_ioctl+0x75a/0xff0 [ 1618.676109] 0 [ 1618.680551] ? ioctl_preallocate+0x1a0/0x1a0 [ 1618.682695] 0 [ 1618.688961] ? lock_downgrade+0x740/0x740 [ 1618.688976] ? __fget+0x225/0x360 [ 1618.688985] ? do_vfs_ioctl+0xff0/0xff0 [ 1618.688995] ? security_file_ioctl+0x83/0xb0 [ 1618.689006] SyS_ioctl+0x7f/0xb0 [ 1618.691168] Node 0 [ 1618.695282] ? do_vfs_ioctl+0xff0/0xff0 [ 1618.695294] do_syscall_64+0x1d5/0x640 [ 1618.695310] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1618.700270] DMA free:10976kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1618.704738] RIP: 0033:0x4665f9 [ 1618.712501] RSP: 002b:00007f6205eee188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1618.743511] lowmem_reserve[]: [ 1618.748570] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1618.748576] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000006 [ 1618.748580] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1618.748584] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1618.748588] R13: 00007fffcb653cef R14: 00007f6205eee300 R15: 0000000000022000 [ 1618.754461] 2097051 pages RAM [ 1618.774459] 0 [ 1618.786007] 0 pages HighMem/MovableOnly [ 1618.804267] Node 0 [ 1618.814412] 363849 pages reserved [ 1618.854260] 2717 [ 1618.864662] 0 pages cma reserved [ 1618.899622] 2718 [ 1619.096410] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1619.156912] lowmem_reserve[]: 0 0 0 0 0 [ 1619.162353] Node 1 Normal free:119184kB min:53696kB low:67120kB high:80544kB active_anon:996kB inactive_anon:19856kB active_file:36kB inactive_file:432kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:288kB pagetables:656kB bounce:0kB free_pcp:312kB local_pcp:128kB free_cma:0kB [ 1619.228236] lowmem_reserve[]: 0 [ 1619.231491] 2718 [ 1619.255466] 0 0 0 0 [ 1619.262458] 2718 [ 1619.267089] Node 0 DMA: 15*4kB (ME) 12*8kB (UM) 6*16kB (ME) 8*32kB (UME) 4*64kB (UME) 5*128kB (UE) 2*256kB (ME) 2*512kB (UE) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (U) = 11132kB [ 1619.304853] Node 0 DMA32: 259*4kB (UME) 655*8kB (ME) 148*16kB (ME) 26*32kB (ME) 247*64kB (UM) 44*128kB (U) 19*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 35780kB [ 1619.318784] Node 0 DMA32 free:35656kB min:36200kB low:45248kB high:54296kB active_anon:54596kB inactive_anon:69192kB active_file:628kB inactive_file:732kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7584kB pagetables:2756kB bounce:0kB free_pcp:856kB local_pcp:620kB free_cma:0kB [ 1619.324423] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1619.375278] lowmem_reserve[]: 0 0 0 0 0 [ 1619.382697] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1619.382739] Node 1 [ 1619.455121] lowmem_reserve[]: [ 1619.465846] Normal: 549*4kB (UM) 62*8kB (UM) 61*16kB (UME) 50*32kB (UME) 631*64kB (UM) 88*128kB (U) 6*256kB (U) 6*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 61524kB [ 1619.484984] 0 0 0 0 0 [ 1619.491466] Node 1 Normal free:70604kB min:53696kB low:67120kB high:80544kB active_anon:996kB inactive_anon:19856kB active_file:36kB inactive_file:612kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:288kB pagetables:656kB bounce:0kB free_pcp:1444kB local_pcp:708kB free_cma:0kB [ 1619.535318] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1619.544212] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1619.577906] lowmem_reserve[]: 0 0 0 0 0 [ 1619.581965] Node 0 DMA: 21*4kB (UE) 0*8kB 1*16kB (E) 1*32kB (E) 2*64kB (UE) 3*128kB (UE) 1*256kB (E) 2*512kB (UE) 1*1024kB (E) 2*2048kB (ME) 1*4096kB (U) = 11140kB [ 1619.585291] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1619.600473] Node 0 DMA32: 774*4kB (UME) 704*8kB (UME) 261*16kB (UME) 43*32kB (UME) 232*64kB (UM) 44*128kB (U) 19*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 39624kB [ 1619.675633] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1619.684350] 23442 total pagecache pages [ 1619.685616] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1619.709749] 0 pages in swap cache [ 1619.713627] Node 1 Normal: 243*4kB (UM) 1431*8kB (UM) 27*16kB (UME) 12*32kB (UME) 1*64kB (M) 73*128kB (U) 6*256kB (U) 5*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 26740kB [ 1619.714757] Swap cache stats: add 0, delete 0, find 0/0 [ 1619.735076] Free swap = 0kB [ 1619.738158] Total swap = 0kB [ 1619.738201] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1619.741311] 2097051 pages RAM [ 1619.753434] 0 pages HighMem/MovableOnly [ 1619.756108] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1619.757583] 363849 pages reserved [ 1619.770057] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1619.770374] 0 pages cma reserved [ 1619.780826] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1619.783689] Out of memory (oom_kill_allocating_task): Kill process 10638 ((journald)) score 0 or sacrifice child [ 1619.795842] 23367 total pagecache pages [ 1619.805483] Killed process 10638 ((journald)) total-vm:139504kB, anon-rss:2032kB, file-rss:0kB, shmem-rss:0kB [ 1619.822563] oom_reaper: reaped process 10638 ((journald)), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1619.824294] 0 pages in swap cache [ 1619.839045] Swap cache stats: add 0, delete 0, find 0/0 [ 1619.844901] Free swap = 0kB [ 1619.848296] Total swap = 0kB [ 1619.851447] 2097051 pages RAM [ 1619.854686] 0 pages HighMem/MovableOnly [ 1619.858822] 363849 pages reserved [ 1619.862397] 0 pages cma reserved [ 1619.963936] kworker/u4:2 invoked oom-killer: gfp_mask=0x15080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null), order=3, oom_score_adj=0 [ 1619.989635] kworker/u4:2 cpuset=/ mems_allowed=0-1 [ 1619.994904] CPU: 0 PID: 5517 Comm: kworker/u4:2 Not tainted 4.14.232-syzkaller #0 [ 1620.002697] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1620.005948] syz-executor.4: page allocation failure: order:4 [ 1620.012361] Workqueue: events_unbound call_usermodehelper_exec_work [ 1620.024870] Call Trace: [ 1620.027466] dump_stack+0x1b2/0x281 [ 1620.031096] dump_header+0x178/0x82f [ 1620.034495] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1620.034819] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1620.034829] ? ___ratelimit+0x2cd/0x530 [ 1620.042608] syz-executor.4 cpuset= [ 1620.047767] oom_kill_process.cold+0x10/0xa40 [ 1620.047785] ? lock_downgrade+0x740/0x740 [ 1620.051845] / [ 1620.055369] out_of_memory+0x2dc/0x1190 [ 1620.069918] ? oom_killer_disable+0x1c0/0x1c0 [ 1620.074427] ? mutex_trylock+0x152/0x1a0 [ 1620.078560] __alloc_pages_nodemask+0x23e1/0x2720 [ 1620.083589] ? deref_stack_reg+0x124/0x1a0 [ 1620.087998] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1620.092835] ? kthread+0x30d/0x420 [ 1620.096375] ? fs_reclaim_release+0xd0/0x110 [ 1620.101090] ? kmem_cache_alloc_node+0x38b/0x410 [ 1620.106632] copy_process.part.0+0x265/0x71c0 [ 1620.111321] ? __lock_acquire+0x5fc/0x3f20 [ 1620.115821] ? kasan_slab_free+0xc3/0x1a0 [ 1620.120716] ? kfree+0xc9/0x250 [ 1620.124092] ? batadv_iv_send_outstanding_bat_ogm_packet+0x229/0x6f0 [ 1620.130989] ? process_one_work+0x793/0x14a0 [ 1620.135543] ? static_obj+0x50/0x50 [ 1620.139161] ? free_object+0xe4/0x240 [ 1620.143331] ? call_usermodehelper_exec_work+0x2a0/0x2a0 [ 1620.148769] ? __cleanup_sighand+0x40/0x40 [ 1620.153111] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1620.158211] ? call_usermodehelper_exec_work+0x2a0/0x2a0 [ 1620.164111] _do_fork+0x184/0xc80 [ 1620.167562] ? fork_idle+0x270/0x270 [ 1620.171381] ? lock_downgrade+0x740/0x740 [ 1620.175709] ? process_one_work+0x6c4/0x14a0 [ 1620.180100] ? call_usermodehelper_exec_work+0x2a0/0x2a0 [ 1620.185631] kernel_thread+0x2f/0x40 [ 1620.189363] call_usermodehelper_exec_work+0x1ac/0x2a0 [ 1620.194626] ? call_usermodehelper+0x80/0x80 [ 1620.199160] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1620.205056] process_one_work+0x793/0x14a0 [ 1620.209436] ? work_busy+0x320/0x320 [ 1620.213137] ? worker_thread+0x158/0xff0 [ 1620.217719] ? _raw_spin_unlock_irq+0x24/0x80 [ 1620.222285] worker_thread+0x5cc/0xff0 [ 1620.226204] ? rescuer_thread+0xc80/0xc80 [ 1620.230714] kthread+0x30d/0x420 [ 1620.234115] ? kthread_create_on_node+0xd0/0xd0 [ 1620.238781] ret_from_fork+0x24/0x30 [ 1620.242520] mems_allowed=0-1 [ 1620.247341] Mem-Info: [ 1620.249782] active_anon:13836 inactive_anon:22262 isolated_anon:0 [ 1620.249782] active_file:16 inactive_file:3 isolated_file:0 [ 1620.249782] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1620.249782] slab_reclaimable:14064 slab_unreclaimable:122533 [ 1620.249782] mapped:52250 shmem:23317 pagetables:793 bounce:0 [ 1620.249782] free:17016 free_pcp:0 free_cma:0 [ 1620.262551] CPU: 1 PID: 10630 Comm: syz-executor.4 Not tainted 4.14.232-syzkaller #0 [ 1620.289000] Node 0 active_anon:54360kB inactive_anon:69192kB active_file:28kB inactive_file:32kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:182072kB dirty:0kB writeback:0kB shmem:73332kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1620.291009] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1620.324744] Node 1 active_anon:984kB inactive_anon:19856kB active_file:36kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:26928kB dirty:0kB writeback:0kB shmem:19936kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1620.329238] Call Trace: [ 1620.329260] dump_stack+0x1b2/0x281 [ 1620.329273] warn_alloc.cold+0x96/0x1cc [ 1620.329284] ? zone_watermark_ok_safe+0x220/0x220 [ 1620.329304] __alloc_pages_nodemask+0x2127/0x2720 [ 1620.363354] Node 0 [ 1620.364114] ? lock_acquire+0x170/0x3f0 [ 1620.368152] DMA free:11016kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1620.373232] ? lock_acquire+0x170/0x3f0 [ 1620.383835] lowmem_reserve[]: [ 1620.384385] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1620.418348] 0 [ 1620.419310] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1620.419324] ? __mutex_unlock_slowpath+0x75/0x770 [ 1620.419341] alloc_pages_current+0x155/0x260 [ 1620.431768] 2717 [ 1620.431912] ion_page_pool_alloc+0x118/0x1b0 [ 1620.443722] 2718 [ 1620.444015] ion_system_heap_allocate+0x133/0x8c0 [ 1620.452243] 2718 [ 1620.455883] ? _raw_spin_unlock+0x29/0x40 [ 1620.455893] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1620.455901] ? ion_system_contig_heap_create+0x130/0x130 [ 1620.455911] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1620.455923] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1620.455934] ion_alloc+0x27a/0x810 [ 1620.455946] ? ion_dma_buf_release+0x40/0x40 [ 1620.463693] 2718 [ 1620.467314] ? __might_fault+0x177/0x1b0 [ 1620.467326] ion_ioctl+0xea/0x1f0 [ 1620.467335] ? ion_query_heaps+0x360/0x360 [ 1620.467345] ? ion_query_heaps+0x360/0x360 [ 1620.467355] do_vfs_ioctl+0x75a/0xff0 [ 1620.467366] ? ioctl_preallocate+0x1a0/0x1a0 [ 1620.467375] ? lock_downgrade+0x740/0x740 [ 1620.467390] ? __fget+0x225/0x360 [ 1620.483396] ? do_vfs_ioctl+0xff0/0xff0 [ 1620.487083] Node 0 [ 1620.491418] ? security_file_ioctl+0x83/0xb0 [ 1620.493869] DMA32 free:30468kB min:36200kB low:45248kB high:54296kB active_anon:54360kB inactive_anon:69192kB active_file:28kB inactive_file:32kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7552kB pagetables:2644kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1620.497915] SyS_ioctl+0x7f/0xb0 [ 1620.497925] ? do_vfs_ioctl+0xff0/0xff0 [ 1620.497934] do_syscall_64+0x1d5/0x640 [ 1620.497948] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1620.497956] RIP: 0033:0x4665f9 [ 1620.497960] RSP: 002b:00007f6205eee188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1620.497969] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1620.497973] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000006 [ 1620.497979] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1620.497983] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1620.497989] R13: 00007fffcb653cef R14: 00007f6205eee300 R15: 0000000000022000 [ 1620.514277] warn_alloc_show_mem: 1 callbacks suppressed [ 1620.514281] Mem-Info: [ 1620.519287] lowmem_reserve[]: 0 0 0 0 0 [ 1620.519309] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1620.519326] lowmem_reserve[]: 0 0 0 0 0 [ 1620.519345] Node 1 Normal free:26580kB min:53696kB low:67120kB high:80544kB active_anon:984kB inactive_anon:19856kB active_file:36kB inactive_file:28kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:256kB pagetables:528kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1620.519361] lowmem_reserve[]: 0 0 0 0 0 [ 1620.529205] active_anon:13836 inactive_anon:22262 isolated_anon:0 [ 1620.529205] active_file:16 inactive_file:3 isolated_file:0 [ 1620.529205] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1620.529205] slab_reclaimable:14064 slab_unreclaimable:122533 [ 1620.529205] mapped:52250 shmem:23317 pagetables:793 bounce:0 [ 1620.529205] free:17016 free_pcp:0 free_cma:0 [ 1620.531768] Node 0 [ 1620.534293] Node 0 active_anon:54360kB inactive_anon:69192kB active_file:28kB inactive_file:32kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:182072kB dirty:0kB writeback:0kB shmem:73332kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1620.544735] DMA: [ 1620.582166] Node 1 active_anon:984kB inactive_anon:19856kB active_file:36kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:26928kB dirty:0kB writeback:0kB shmem:19936kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1620.590294] 2*4kB [ 1620.611944] Node 0 [ 1620.618770] (UE) [ 1620.629573] DMA free:11016kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1620.646507] 2*8kB [ 1620.659561] lowmem_reserve[]: [ 1620.690585] (U) [ 1620.719920] 0 [ 1620.741592] 1*16kB [ 1620.758790] 2717 [ 1620.782904] (E) [ 1620.791568] 2718 [ 1620.843402] 1*32kB [ 1620.856741] 2718 2718 [ 1620.879876] Node 0 DMA32 free:30556kB min:36200kB low:45248kB high:54296kB active_anon:54360kB inactive_anon:69192kB active_file:4kB inactive_file:56kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7552kB pagetables:2644kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1620.894448] (E) [ 1620.912787] lowmem_reserve[]: 0 0 0 0 0 [ 1620.919846] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1620.934104] 1*64kB [ 1620.949528] lowmem_reserve[]: 0 0 0 0 0 [ 1620.956010] Node 1 Normal free:26592kB min:53696kB low:67120kB high:80544kB active_anon:984kB inactive_anon:19856kB active_file:56kB inactive_file:92kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:256kB pagetables:528kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1620.971736] (E) [ 1620.992947] lowmem_reserve[]: 0 0 0 0 0 [ 1620.999210] Node 0 DMA: 2*4kB (UE) 2*8kB (U) 1*16kB (E) 1*32kB (E) 1*64kB (E) 3*128kB (UE) 1*256kB (E) 2*512kB (UE) 1*1024kB (E) 2*2048kB (ME) 1*4096kB (U) = 11016kB [ 1621.001969] 3*128kB [ 1621.015403] Node 0 DMA32: 917*4kB (UME) 685*8kB (UME) 168*16kB (UME) 597*32kB (UME) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 30940kB [ 1621.015462] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1621.015509] Node 1 Normal: 11*4kB (UM) [ 1621.033538] (UE) [ 1621.049628] 2*8kB (UM) 541*16kB (UME) 371*32kB (UE) 2*64kB (M) 2*128kB (UM) 2*256kB (UM) 10*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 26604kB [ 1621.063371] 1*256kB (E) 2*512kB (UE) 1*1024kB (E) 2*2048kB (ME) 1*4096kB (U) = 11016kB [ 1621.072619] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1621.096883] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1621.098540] Node 0 [ 1621.112372] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1621.122577] DMA32: 917*4kB (UME) 685*8kB (UME) 168*16kB (UME) 597*32kB (UME) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 30940kB [ 1621.126042] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1621.153312] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1621.153770] 23348 total pagecache pages [ 1621.175906] 0 pages in swap cache [ 1621.179442] Swap cache stats: add 0, delete 0, find 0/0 [ 1621.180668] Node 1 [ 1621.189598] Free swap = 0kB [ 1621.192903] Normal: [ 1621.194869] Total swap = 0kB [ 1621.194875] 11*4kB [ 1621.203895] 2097051 pages RAM [ 1621.204587] (UM) [ 1621.209904] 0 pages HighMem/MovableOnly [ 1621.220669] 2*8kB (UM) 541*16kB (UME) 371*32kB (UE) 2*64kB (M) 2*128kB (UM) 2*256kB (UM) 10*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 26604kB [ 1621.222386] 363849 pages reserved [ 1621.246432] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1621.248671] 0 pages cma reserved [ 1621.266067] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1621.274802] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1621.290790] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1621.300721] 23348 total pagecache pages [ 1621.312045] 0 pages in swap cache [ 1621.315744] Swap cache stats: add 0, delete 0, find 0/0 [ 1621.321465] Free swap = 0kB [ 1621.324513] Total swap = 0kB [ 1621.333716] 2097051 pages RAM [ 1621.335190] syz-executor.4: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1621.337095] 0 pages HighMem/MovableOnly [ 1621.360079] 363849 pages reserved [ 1621.363883] 0 pages cma reserved [ 1621.367407] Out of memory: Kill process 10619 (syz-executor.1) score 1004 or sacrifice child [ 1621.368199] syz-executor.4 cpuset= [ 1621.382818] Killed process 10620 (syz-executor.1) total-vm:93384kB, anon-rss:160kB, file-rss:34820kB, shmem-rss:0kB [ 1621.395130] / mems_allowed=0-1 [ 1621.401162] CPU: 1 PID: 10630 Comm: syz-executor.4 Not tainted 4.14.232-syzkaller #0 [ 1621.409249] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1621.418942] Call Trace: [ 1621.421889] dump_stack+0x1b2/0x281 [ 1621.425645] warn_alloc.cold+0x96/0x1cc [ 1621.427223] in:imklog invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask= [ 1621.430089] ? zone_watermark_ok_safe+0x220/0x220 [ 1621.430101] ? usleep_range+0x130/0x130 [ 1621.430109] ? try_to_free_pages+0x23f/0x6e0 [ 1621.430118] ? _find_next_bit+0xdb/0x100 [ 1621.430131] ? run_timer_softirq+0x5a0/0x5a0 [ 1621.439908] syz-executor.1: [ 1621.444678] __alloc_pages_nodemask+0x2127/0x2720 [ 1621.450797] page allocation failure: order:0 [ 1621.453247] ? lock_acquire+0x170/0x3f0 [ 1621.467803] (null) [ 1621.469670] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1621.474073] , order=0, oom_score_adj=0 [ 1621.478034] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1621.478051] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1621.478069] alloc_pages_current+0x155/0x260 [ 1621.478080] ion_page_pool_alloc+0x118/0x1b0 [ 1621.478089] ion_system_heap_allocate+0x133/0x8c0 [ 1621.478100] ? _raw_spin_unlock+0x29/0x40 [ 1621.478107] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1621.478115] ? ion_system_contig_heap_create+0x130/0x130 [ 1621.478127] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1621.480270] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1621.485086] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1621.485095] ion_alloc+0x27a/0x810 [ 1621.485109] ? ion_dma_buf_release+0x40/0x40 [ 1621.485119] ? __might_fault+0x177/0x1b0 [ 1621.485130] ion_ioctl+0xea/0x1f0 [ 1621.485139] ? ion_query_heaps+0x360/0x360 [ 1621.485151] ? ion_query_heaps+0x360/0x360 [ 1621.485162] do_vfs_ioctl+0x75a/0xff0 [ 1621.492910] (null) [ 1621.493975] ? ioctl_preallocate+0x1a0/0x1a0 [ 1621.499839] in:imklog cpuset= [ 1621.504250] ? lock_downgrade+0x740/0x740 [ 1621.512828] syz-executor.1 cpuset= [ 1621.513891] ? __fget+0x225/0x360 [ 1621.518115] / [ 1621.523066] ? do_vfs_ioctl+0xff0/0xff0 [ 1621.532497] / [ 1621.533928] ? security_file_ioctl+0x83/0xb0 [ 1621.541156] mems_allowed=0-1 [ 1621.546063] SyS_ioctl+0x7f/0xb0 [ 1621.546073] ? do_vfs_ioctl+0xff0/0xff0 [ 1621.546085] do_syscall_64+0x1d5/0x640 [ 1621.546100] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1621.546108] RIP: 0033:0x4665f9 [ 1621.546113] RSP: 002b:00007f6205eee188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1621.553771] mems_allowed=0-1 [ 1621.554377] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1621.650866] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000006 [ 1621.658222] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1621.665917] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1621.673495] R13: 00007fffcb653cef R14: 00007f6205eee300 R15: 0000000000022000 [ 1621.681277] CPU: 0 PID: 10623 Comm: in:imklog Not tainted 4.14.232-syzkaller #0 [ 1621.691564] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1621.700457] Mem-Info: [ 1621.701965] Call Trace: [ 1621.705673] active_anon:13836 inactive_anon:22262 isolated_anon:0 [ 1621.705673] active_file:19 inactive_file:11 isolated_file:0 [ 1621.705673] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1621.705673] slab_reclaimable:14048 slab_unreclaimable:122519 [ 1621.705673] mapped:52225 shmem:23317 pagetables:793 bounce:0 [ 1621.705673] free:13906 free_pcp:30 free_cma:0 [ 1621.708294] dump_stack+0x1b2/0x281 [ 1621.745610] Node 0 active_anon:54360kB inactive_anon:69192kB active_file:0kB inactive_file:84kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:182072kB dirty:0kB writeback:0kB shmem:73332kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1621.749694] dump_header+0x178/0x82f [ 1621.779734] Node 1 active_anon:984kB inactive_anon:19856kB active_file:104kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:26828kB dirty:0kB writeback:0kB shmem:19936kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1621.783760] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1621.814290] Node 0 [ 1621.820240] ? ___ratelimit+0x2cd/0x530 [ 1621.820253] oom_kill_process.cold+0x10/0xa40 [ 1621.820272] out_of_memory+0xe3e/0x1190 [ 1621.822558] DMA free:10976kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1621.826711] ? oom_killer_disable+0x1c0/0x1c0 [ 1621.826721] ? mutex_trylock+0x152/0x1a0 [ 1621.826734] __alloc_pages_nodemask+0x23e1/0x2720 [ 1621.831425] lowmem_reserve[]: [ 1621.835741] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1621.835766] alloc_pages_current+0x155/0x260 [ 1621.863760] 0 [ 1621.868228] filemap_fault+0x11a1/0x1ad0 [ 1621.868247] ext4_filemap_fault+0x84/0xb0 [ 1621.872395] 2717 [ 1621.878090] __do_fault+0xfa/0x380 [ 1621.878100] __handle_mm_fault+0x2497/0x4620 [ 1621.878110] ? vm_insert_page+0x7c0/0x7c0 [ 1621.878122] ? lock_downgrade+0x740/0x740 [ 1621.881487] 2718 [ 1621.886581] ? mark_held_locks+0xa6/0xf0 [ 1621.886593] handle_mm_fault+0x455/0x9c0 [ 1621.886605] __do_page_fault+0x549/0xad0 [ 1621.886617] ? spurious_fault+0x640/0x640 [ 1621.891485] 2718 2718 [ 1621.893285] ? do_page_fault+0x60/0x500 [ 1621.902374] ? page_fault+0x2f/0x50 [ 1621.905170] Node 0 [ 1621.908927] page_fault+0x45/0x50 [ 1621.913946] DMA32 free:18044kB min:36200kB low:45248kB high:54296kB active_anon:54360kB inactive_anon:69192kB active_file:0kB inactive_file:84kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7552kB pagetables:2644kB bounce:0kB free_pcp:120kB local_pcp:120kB free_cma:0kB [ 1621.918478] RIP: 1fa0:0x1f9f [ 1621.918484] RSP: 0000:000055f07a3bb9d0 EFLAGS: 7f7848f43da0 [ 1621.923681] CPU: 0 PID: 10620 Comm: syz-executor.1 Not tainted 4.14.232-syzkaller #0 [ 1621.946146] lowmem_reserve[]: [ 1621.949581] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1621.949587] Call Trace: [ 1621.953513] 0 0 [ 1621.955885] dump_stack+0x1b2/0x281 [ 1621.955900] warn_alloc.cold+0x96/0x1cc [ 1621.955911] ? zone_watermark_ok_safe+0x220/0x220 [ 1621.955923] ? usleep_range+0x130/0x130 [ 1621.959492] 0 [ 1621.989705] ? try_to_free_pages+0x23f/0x6e0 [ 1621.989716] ? _find_next_bit+0xdb/0x100 [ 1621.989725] ? run_timer_softirq+0x5a0/0x5a0 [ 1621.989741] __alloc_pages_nodemask+0x2127/0x2720 [ 1621.989758] ? lock_acquire+0x170/0x3f0 [ 1621.992940] 0 [ 1621.999088] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1621.999098] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1621.999116] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1622.007296] 0 [ 1622.010391] alloc_pages_current+0x155/0x260 [ 1622.022656] ion_page_pool_alloc+0x118/0x1b0 [ 1622.024692] Node 0 [ 1622.028320] ion_system_heap_allocate+0x133/0x8c0 [ 1622.028330] ? ion_alloc+0x187/0x810 [ 1622.028343] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1622.032422] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1622.037252] ? ion_system_contig_heap_create+0x130/0x130 [ 1622.037262] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1622.037275] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1622.041228] lowmem_reserve[]: [ 1622.043035] ion_alloc+0x204/0x810 [ 1622.047454] 0 [ 1622.051498] ? ion_dma_buf_release+0x40/0x40 [ 1622.056073] 0 [ 1622.061038] ? __might_fault+0x177/0x1b0 [ 1622.065219] 0 [ 1622.066988] ion_ioctl+0xea/0x1f0 [ 1622.071802] 0 [ 1622.076298] ? ion_query_heaps+0x360/0x360 [ 1622.076310] ? ion_query_heaps+0x360/0x360 [ 1622.076323] do_vfs_ioctl+0x75a/0xff0 [ 1622.081961] 0 [ 1622.083850] ? ioctl_preallocate+0x1a0/0x1a0 [ 1622.092641] ? lock_downgrade+0x740/0x740 [ 1622.094859] Node 1 [ 1622.099884] ? __fget+0x225/0x360 [ 1622.099897] ? do_vfs_ioctl+0xff0/0xff0 [ 1622.099909] ? security_file_ioctl+0x83/0xb0 [ 1622.103807] Normal free:26604kB min:53696kB low:67120kB high:80544kB active_anon:984kB inactive_anon:19856kB active_file:32kB inactive_file:36kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:256kB pagetables:528kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1622.109958] SyS_ioctl+0x7f/0xb0 [ 1622.109967] ? do_vfs_ioctl+0xff0/0xff0 [ 1622.109980] do_syscall_64+0x1d5/0x640 [ 1622.136822] lowmem_reserve[]: [ 1622.142387] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1622.148628] 0 [ 1622.153512] RIP: 0033:0x4665f9 [ 1622.156616] 0 [ 1622.160320] RSP: 002b:00007f22b5267188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1622.162294] 0 [ 1622.166778] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1622.166782] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000008 [ 1622.166787] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1622.166791] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1622.166795] R13: 00007ffea96cbc0f R14: 00007f22b5267300 R15: 0000000000022000 [ 1622.298826] Mem-Info: [ 1622.301230] 0 0 [ 1622.340486] Node 0 DMA: 3*4kB (UME) 0*8kB 2*16kB (ME) 2*32kB (UE) 14*64kB (UME) 3*128kB (UE) 2*256kB (ME) 2*512kB (UE) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (U) = 11116kB [ 1622.357461] Node 0 DMA32: 732*4kB (ME) 659*8kB (UME) 160*16kB (ME) 224*32kB (UME) 353*64kB (U) 4*128kB (U) 1*256kB (U) 0*512kB 1*1024kB (U) 1*2048kB (U) 0*4096kB = 44360kB [ 1622.374953] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1622.378051] active_anon:13836 inactive_anon:22262 isolated_anon:0 [ 1622.378051] active_file:90 inactive_file:1141 isolated_file:0 [ 1622.378051] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1622.378051] slab_reclaimable:14048 slab_unreclaimable:122519 [ 1622.378051] mapped:52900 shmem:23317 pagetables:793 bounce:0 [ 1622.378051] free:36904 free_pcp:171 free_cma:0 [ 1622.412969] Node 1 [ 1622.447536] Node 0 active_anon:54360kB inactive_anon:69192kB active_file:128kB inactive_file:1028kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:182572kB dirty:0kB writeback:0kB shmem:73332kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1622.453767] Normal: [ 1622.488105] Node 1 active_anon:984kB inactive_anon:19856kB active_file:332kB inactive_file:4536kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:29628kB dirty:0kB writeback:0kB shmem:19936kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1622.488753] 5*4kB [ 1622.494423] Node 0 [ 1622.525197] systemd[1]: systemd-journald.service: Main process exited, code=killed, status=9/KILL [ 1622.547691] DMA free:11116kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:220kB inactive_file:592kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1622.593515] systemd[1]: Failed to start Journal Service. [ 1622.608095] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1622.614170] Node 0 DMA32 free:44744kB min:36200kB low:45248kB high:54296kB active_anon:54360kB inactive_anon:69192kB active_file:28kB inactive_file:2228kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7552kB pagetables:2644kB bounce:0kB free_pcp:512kB local_pcp:48kB free_cma:0kB [ 1622.633405] (U) [ 1622.645657] lowmem_reserve[]: 0 0 0 0 0 [ 1622.649793] systemd[1]: systemd-journald.service: Unit entered failed state. [ 1622.652270] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1622.692402] lowmem_reserve[]: 0 0 0 0 0 [ 1622.699399] 9*8kB (UM) 8*16kB (UE) 74*32kB (UE) 1668*64kB (U) 70*128kB (UM) 26*256kB (U) 2*512kB (U) [ 1622.701197] systemd[1]: systemd-journald.service: Failed with result 'signal'. [ 1622.705862] Node 1 Normal free:85464kB min:53696kB low:67120kB high:80544kB active_anon:984kB inactive_anon:19856kB active_file:632kB inactive_file:7676kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:256kB pagetables:528kB bounce:0kB free_pcp:216kB local_pcp:76kB free_cma:0kB [ 1622.728449] 0*1024kB [ 1622.756760] lowmem_reserve[]: 0 0 0 0 0 09:40:26 executing program 3: socket(0x11, 0x2, 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000004980), 0x0, 0x0) getsockopt$X25_QBITINCL(r0, 0x106, 0x1, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x4, 0x7, 0x7, 0x6, 0xa, @remote, @private2={0xfc, 0x2, '\x00', 0x1}, 0x700, 0x20, 0x9, 0x5f3b}}) socket$vsock_dgram(0x28, 0x2, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000100)={0x80000004, 0x7}) [ 1622.805791] Node 0 DMA: 6*4kB (UME) 0*8kB 4*16kB (UME) 3*32kB (UME) 12*64kB (UME) 3*128kB (UE) 2*256kB (ME) 2*512kB (UE) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (U) = 11064kB [ 1622.808957] 0*2048kB [ 1622.824069] systemd[1]: systemd-journald.service: Service has no hold-off time, scheduling restart. [ 1622.870892] systemd[1]: Stopped Journal Service. [ 1622.882212] Node 0 DMA32: 896*4kB (UME) 649*8kB (UME) 165*16kB (UME) 41*32kB (UME) 223*64kB (U) 15*128kB (U) 5*256kB (U) 1*512kB (U) 1*1024kB (U) 3*2048kB (U) 0*4096kB = 37880kB [ 1622.895547] 0*4096kB [ 1622.905579] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1622.911739] = 125980kB [ 1622.921890] Node 1 Normal: 815*4kB (UM) 26*8kB (U) 20*16kB (UME) 8*32kB (UME) 620*64kB (UM) 68*128kB (U) 18*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 57036kB [ 1622.928641] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1622.954514] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1622.963978] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1622.997968] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1623.007295] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1623.016650] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1623.025580] 24375 total pagecache pages [ 1623.029655] 0 pages in swap cache [ 1623.033985] Swap cache stats: add 0, delete 0, find 0/0 [ 1623.041984] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1623.044202] Free swap = 0kB [ 1623.060919] Total swap = 0kB [ 1623.075040] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1623.075184] 2097051 pages RAM [ 1623.084443] 24200 total pagecache pages [ 1623.084455] 0 pages in swap cache [ 1623.084459] Swap cache stats: add 0, delete 0, find 0/0 [ 1623.084462] Free swap = 0kB [ 1623.084465] Total swap = 0kB [ 1623.084472] 2097051 pages RAM [ 1623.084476] 0 pages HighMem/MovableOnly [ 1623.084478] 363849 pages reserved [ 1623.084485] 0 pages cma reserved [ 1623.150733] 0 pages HighMem/MovableOnly [ 1623.162853] 363849 pages reserved [ 1623.178543] 0 pages cma reserved [ 1623.182049] Out of memory (oom_kill_allocating_task): Kill process 10623 (in:imklog) score 0 or sacrifice child [ 1623.218862] Killed process 10618 (rsyslogd) total-vm:254332kB, anon-rss:1124kB, file-rss:0kB, shmem-rss:0kB [ 1623.251814] oom_reaper: reaped process 10620 (syz-executor.1), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1623.268348] oom_reaper: reaped process 10618 (rsyslogd), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB 09:40:26 executing program 4: socket(0x11, 0x2, 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000004980), 0x0, 0x0) getsockopt$X25_QBITINCL(r0, 0x106, 0x1, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x4, 0x7, 0x7, 0x6, 0xa, @remote, @private2={0xfc, 0x2, '\x00', 0x1}, 0x700, 0x20, 0x9, 0x5f3b}}) openat$nvram(0xffffffffffffff9c, &(0x7f0000004980), 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000100)={0x80000004, 0x7}) [ 1623.409619] systemd[1]: Starting Journal Service... [ 1623.449394] systemd[1]: rsyslog.service: Main process exited, code=killed, status=9/KILL [ 1623.528584] systemd[1]: rsyslog.service: Unit entered failed state. [ 1623.764472] systemd[1]: rsyslog.service: Failed with result 'signal'. [ 1623.874259] syz-executor.1: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1623.906159] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 1623.919994] syz-executor.3: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1623.924712] CPU: 1 PID: 10620 Comm: syz-executor.1 Not tainted 4.14.232-syzkaller #0 [ 1623.932874] syz-executor.3 cpuset= [ 1623.940954] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1623.940958] Call Trace: [ 1623.940978] dump_stack+0x1b2/0x281 [ 1623.940992] warn_alloc.cold+0x96/0x1cc [ 1623.941003] ? zone_watermark_ok_safe+0x220/0x220 [ 1623.941022] __alloc_pages_nodemask+0x2127/0x2720 [ 1623.941032] ? lock_acquire+0x170/0x3f0 [ 1623.941044] ? lock_acquire+0x170/0x3f0 [ 1623.941058] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1623.941075] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1623.941087] ? __mutex_unlock_slowpath+0x75/0x770 [ 1623.941100] alloc_pages_current+0x155/0x260 [ 1624.006714] ion_page_pool_alloc+0x118/0x1b0 [ 1624.011109] ion_system_heap_allocate+0x133/0x8c0 [ 1624.015938] ? _raw_spin_unlock+0x29/0x40 [ 1624.020070] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1624.024985] ? ion_system_contig_heap_create+0x130/0x130 [ 1624.030891] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1624.036211] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1624.041045] ion_alloc+0x27a/0x810 [ 1624.044748] ? ion_dma_buf_release+0x40/0x40 [ 1624.049231] ? __might_fault+0x177/0x1b0 [ 1624.053372] ion_ioctl+0xea/0x1f0 [ 1624.057137] ? ion_query_heaps+0x360/0x360 [ 1624.061374] ? ion_query_heaps+0x360/0x360 [ 1624.065727] do_vfs_ioctl+0x75a/0xff0 [ 1624.069712] ? ioctl_preallocate+0x1a0/0x1a0 [ 1624.074190] ? lock_downgrade+0x740/0x740 [ 1624.078326] ? __fget+0x225/0x360 [ 1624.082570] ? do_vfs_ioctl+0xff0/0xff0 [ 1624.086531] ? security_file_ioctl+0x83/0xb0 [ 1624.090962] SyS_ioctl+0x7f/0xb0 [ 1624.094419] ? do_vfs_ioctl+0xff0/0xff0 [ 1624.098543] do_syscall_64+0x1d5/0x640 [ 1624.102521] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1624.107887] RIP: 0033:0x4665f9 [ 1624.111338] RSP: 002b:00007f22b5267188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1624.119061] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1624.126591] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000008 [ 1624.134193] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1624.141744] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1624.149410] R13: 00007ffea96cbc0f R14: 00007f22b5267300 R15: 0000000000022000 [ 1624.171581] syz-executor.4: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1624.187775] / mems_allowed=0-1 [ 1624.203259] CPU: 1 PID: 10641 Comm: syz-executor.3 Not tainted 4.14.232-syzkaller #0 [ 1624.211273] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1624.220637] Call Trace: [ 1624.221631] syz-executor.4 cpuset= [ 1624.223331] dump_stack+0x1b2/0x281 [ 1624.223345] warn_alloc.cold+0x96/0x1cc [ 1624.234666] ? zone_watermark_ok_safe+0x220/0x220 [ 1624.237183] / [ 1624.239750] __alloc_pages_nodemask+0x2127/0x2720 [ 1624.243174] mems_allowed=0-1 [ 1624.246544] ? lock_acquire+0x170/0x3f0 [ 1624.246560] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1624.246577] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1624.246588] ? __mutex_unlock_slowpath+0x75/0x770 [ 1624.246595] ? __sanitizer_cov_trace_pc+0x23/0x50 [ 1624.246608] alloc_pages_current+0x155/0x260 [ 1624.246621] ion_page_pool_alloc+0x118/0x1b0 [ 1624.246634] ion_system_heap_allocate+0x133/0x8c0 [ 1624.290351] ? ion_alloc+0x187/0x810 [ 1624.294067] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1624.299622] ? ion_system_contig_heap_create+0x130/0x130 [ 1624.305254] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1624.310302] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1624.315158] ion_alloc+0x204/0x810 [ 1624.318716] ? ion_dma_buf_release+0x40/0x40 [ 1624.323414] ? __might_fault+0x177/0x1b0 [ 1624.327474] ion_ioctl+0xea/0x1f0 [ 1624.330935] ? ion_query_heaps+0x360/0x360 [ 1624.335335] ? ion_query_heaps+0x360/0x360 [ 1624.339663] do_vfs_ioctl+0x75a/0xff0 [ 1624.343689] ? ioctl_preallocate+0x1a0/0x1a0 [ 1624.348230] ? lock_downgrade+0x740/0x740 [ 1624.352373] ? __fget+0x225/0x360 [ 1624.356020] ? do_vfs_ioctl+0xff0/0xff0 [ 1624.360001] ? security_file_ioctl+0x83/0xb0 [ 1624.364506] SyS_ioctl+0x7f/0xb0 [ 1624.368227] ? do_vfs_ioctl+0xff0/0xff0 [ 1624.372204] do_syscall_64+0x1d5/0x640 [ 1624.376275] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1624.381537] RIP: 0033:0x4665f9 [ 1624.384997] RSP: 002b:00007fd59d707188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1624.392884] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1624.400265] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000006 [ 1624.407670] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1624.415188] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1624.422452] R13: 00007ffcfd15ebff R14: 00007fd59d707300 R15: 0000000000022000 [ 1624.433635] warn_alloc_show_mem: 1 callbacks suppressed [ 1624.433639] Mem-Info: [ 1624.436943] CPU: 0 PID: 10645 Comm: syz-executor.4 Not tainted 4.14.232-syzkaller #0 [ 1624.439541] active_anon:13601 inactive_anon:22262 isolated_anon:0 [ 1624.439541] active_file:32 inactive_file:55 isolated_file:25 [ 1624.439541] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1624.439541] slab_reclaimable:14043 slab_unreclaimable:122204 [ 1624.439541] mapped:52283 shmem:23317 pagetables:826 bounce:0 [ 1624.439541] free:25134 free_pcp:90 free_cma:0 [ 1624.442075] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1624.451298] Node 0 active_anon:53372kB inactive_anon:69192kB active_file:92kB inactive_file:28kB unevictable:0kB isolated(anon):0kB isolated(file):12kB mapped:182120kB dirty:0kB writeback:0kB shmem:73332kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1624.485425] Call Trace: [ 1624.485450] dump_stack+0x1b2/0x281 [ 1624.485463] warn_alloc.cold+0x96/0x1cc [ 1624.485474] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1624.485487] ? zone_watermark_ok_safe+0x220/0x220 [ 1624.494971] Node 1 active_anon:1032kB inactive_anon:19856kB active_file:36kB inactive_file:192kB unevictable:0kB isolated(anon):0kB isolated(file):88kB mapped:27012kB dirty:0kB writeback:0kB shmem:19936kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1624.524031] __alloc_pages_nodemask+0x2127/0x2720 [ 1624.524053] ? lock_acquire+0x170/0x3f0 [ 1624.526723] Node 0 [ 1624.530335] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1624.534644] DMA free:11068kB min:204kB low:252kB high:300kB active_anon:72kB inactive_anon:0kB active_file:0kB inactive_file:16kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:8kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1624.539724] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1624.539738] ? __mutex_unlock_slowpath+0x75/0x770 [ 1624.544554] lowmem_reserve[]: [ 1624.573034] alloc_pages_current+0x155/0x260 [ 1624.573050] ion_page_pool_alloc+0x118/0x1b0 [ 1624.573059] ion_system_heap_allocate+0x133/0x8c0 [ 1624.573069] ? ion_alloc+0x187/0x810 [ 1624.580816] 0 [ 1624.584768] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1624.587441] 2717 [ 1624.592463] ? ion_system_contig_heap_create+0x130/0x130 [ 1624.618943] 2718 [ 1624.624552] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1624.629472] 2718 [ 1624.632591] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1624.636993] 2718 [ 1624.642172] ion_alloc+0x204/0x810 [ 1624.650720] ? ion_dma_buf_release+0x40/0x40 [ 1624.652532] Node 0 [ 1624.658218] ? __might_fault+0x177/0x1b0 [ 1624.658231] ion_ioctl+0xea/0x1f0 [ 1624.658240] ? ion_query_heaps+0x360/0x360 [ 1624.658251] ? ion_query_heaps+0x360/0x360 [ 1624.658262] do_vfs_ioctl+0x75a/0xff0 [ 1624.660334] DMA32 free:36024kB min:36200kB low:45248kB high:54296kB active_anon:53300kB inactive_anon:69192kB active_file:92kB inactive_file:36kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7488kB pagetables:2632kB bounce:0kB free_pcp:168kB local_pcp:0kB free_cma:0kB [ 1624.666205] ? ioctl_preallocate+0x1a0/0x1a0 [ 1624.666215] ? lock_downgrade+0x740/0x740 [ 1624.666228] ? __fget+0x225/0x360 [ 1624.668459] lowmem_reserve[]: [ 1624.674018] ? do_vfs_ioctl+0xff0/0xff0 [ 1624.676078] 0 [ 1624.680922] ? security_file_ioctl+0x83/0xb0 [ 1624.683230] 0 [ 1624.688373] SyS_ioctl+0x7f/0xb0 [ 1624.688383] ? do_vfs_ioctl+0xff0/0xff0 [ 1624.688394] do_syscall_64+0x1d5/0x640 [ 1624.688408] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1624.688419] RIP: 0033:0x4665f9 [ 1624.692990] 0 [ 1624.695299] RSP: 002b:00007f6205eee188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1624.695309] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1624.695315] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000006 [ 1624.695319] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1624.695327] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1624.700174] 0 [ 1624.703911] R13: 00007fffcb653cef R14: 00007f6205eee300 R15: 0000000000022000 [ 1624.850335] 0 [ 1624.852379] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1624.879384] lowmem_reserve[]: 0 0 0 0 0 [ 1624.884107] Node 1 Normal free:53572kB min:53696kB low:67120kB high:80544kB active_anon:1380kB inactive_anon:19856kB active_file:212kB inactive_file:404kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:288kB pagetables:684kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1624.914107] lowmem_reserve[]: 0 0 0 0 0 [ 1624.918415] Node 0 DMA: 17*4kB (ME) 15*8kB (UM) 30*16kB (UME) 7*32kB (ME) 5*64kB (UME) 1*128kB (E) 2*256kB (ME) 2*512kB (UE) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (U) = 11068kB [ 1624.935183] Node 0 DMA32: 2204*4kB (UME) 859*8kB (UME) 471*16kB (UME) 367*32kB (UME) 8*64kB (U) 7*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36376kB [ 1624.951561] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1624.962919] Node 1 Normal: 186*4kB (UM) 2594*8kB (UM) 511*16kB (UME) 749*32kB (UME) 5*64kB (U) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 53960kB [ 1624.978025] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1624.987365] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1624.993112] oom_reaper: reaped process 10635 (syz-executor.5), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1624.996453] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1625.016340] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1625.025938] 23351 total pagecache pages [ 1625.030374] 0 pages in swap cache [ 1625.033842] Swap cache stats: add 0, delete 0, find 0/0 [ 1625.039378] Free swap = 0kB [ 1625.042683] Total swap = 0kB [ 1625.046229] 2097051 pages RAM [ 1625.049346] 0 pages HighMem/MovableOnly [ 1625.053578] 363849 pages reserved [ 1625.057191] 0 pages cma reserved [ 1625.113722] syz-fuzzer invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1625.134242] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 1625.144989] syz-executor.1: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1625.147809] syz-executor.5: [ 1625.165711] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 1625.174301] CPU: 1 PID: 10620 Comm: syz-executor.1 Not tainted 4.14.232-syzkaller #0 [ 1625.182646] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1625.192549] Call Trace: [ 1625.194539] page allocation failure: order:0 [ 1625.195245] dump_stack+0x1b2/0x281 [ 1625.195259] warn_alloc.cold+0x96/0x1cc [ 1625.195271] ? zone_watermark_ok_safe+0x220/0x220 [ 1625.195281] ? usleep_range+0x130/0x130 [ 1625.195289] ? try_to_free_pages+0x23f/0x6e0 [ 1625.195300] ? _find_next_bit+0xdb/0x100 [ 1625.195309] ? run_timer_softirq+0x5a0/0x5a0 [ 1625.195324] __alloc_pages_nodemask+0x2127/0x2720 [ 1625.231154] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1625.236278] ? lock_acquire+0x170/0x3f0 [ 1625.236294] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1625.236303] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1625.236317] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1625.236335] alloc_pages_current+0x155/0x260 [ 1625.236346] ion_page_pool_alloc+0x118/0x1b0 [ 1625.236355] ion_system_heap_allocate+0x133/0x8c0 [ 1625.236365] ? _raw_spin_unlock+0x29/0x40 [ 1625.236376] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1625.257120] (null) [ 1625.259794] ? ion_system_contig_heap_create+0x130/0x130 [ 1625.302250] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1625.307470] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1625.312421] ion_alloc+0x27a/0x810 [ 1625.312639] syz-executor.5 cpuset= [ 1625.315965] ? ion_dma_buf_release+0x40/0x40 [ 1625.315977] ? __might_fault+0x177/0x1b0 [ 1625.315986] ion_ioctl+0xea/0x1f0 [ 1625.315995] ? ion_query_heaps+0x360/0x360 [ 1625.316005] ? ion_query_heaps+0x360/0x360 [ 1625.316015] do_vfs_ioctl+0x75a/0xff0 [ 1625.316024] ? ioctl_preallocate+0x1a0/0x1a0 [ 1625.316034] ? lock_downgrade+0x740/0x740 [ 1625.316047] ? __fget+0x225/0x360 [ 1625.316055] ? do_vfs_ioctl+0xff0/0xff0 [ 1625.316068] ? security_file_ioctl+0x83/0xb0 [ 1625.359272] / [ 1625.363758] SyS_ioctl+0x7f/0xb0 [ 1625.373324] ? do_vfs_ioctl+0xff0/0xff0 [ 1625.377388] do_syscall_64+0x1d5/0x640 [ 1625.381548] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1625.386840] RIP: 0033:0x4665f9 [ 1625.390323] RSP: 002b:00007f22b5267188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1625.392417] mems_allowed=0-1 [ 1625.399166] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1625.399173] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000008 [ 1625.399177] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1625.399181] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1625.399186] R13: 00007ffea96cbc0f R14: 00007f22b5267300 R15: 0000000000022000 [ 1625.475063] CPU: 0 PID: 7964 Comm: syz-fuzzer Not tainted 4.14.232-syzkaller #0 [ 1625.483422] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1625.493637] Call Trace: [ 1625.496406] dump_stack+0x1b2/0x281 [ 1625.500141] dump_header+0x178/0x82f [ 1625.504030] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1625.509397] ? ___ratelimit+0x2cd/0x530 [ 1625.513388] oom_kill_process.cold+0x10/0xa40 [ 1625.518516] out_of_memory+0xe3e/0x1190 [ 1625.523220] ? oom_killer_disable+0x1c0/0x1c0 [ 1625.528264] ? mutex_trylock+0x152/0x1a0 [ 1625.532515] __alloc_pages_nodemask+0x23e1/0x2720 [ 1625.537379] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1625.542425] alloc_pages_current+0x155/0x260 [ 1625.547192] filemap_fault+0x11a1/0x1ad0 [ 1625.551275] ext4_filemap_fault+0x84/0xb0 [ 1625.555870] __do_fault+0xfa/0x380 [ 1625.559428] __handle_mm_fault+0x2497/0x4620 [ 1625.564451] ? vm_insert_page+0x7c0/0x7c0 [ 1625.568778] ? lock_downgrade+0x740/0x740 [ 1625.573037] ? mark_held_locks+0xa6/0xf0 [ 1625.577274] handle_mm_fault+0x455/0x9c0 [ 1625.581341] __do_page_fault+0x549/0xad0 [ 1625.585499] ? spurious_fault+0x640/0x640 [ 1625.589969] ? do_page_fault+0x60/0x500 [ 1625.594970] ? page_fault+0x2f/0x50 [ 1625.598867] page_fault+0x45/0x50 [ 1625.602578] RIP: 0000:0x947a5c [ 1625.605763] RSP: 2e000:000000c00003dec8 EFLAGS: 0043b6a0 [ 1625.782215] CPU: 0 PID: 10635 Comm: syz-executor.5 Not tainted 4.14.232-syzkaller #0 [ 1625.797017] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1625.806463] Call Trace: [ 1625.809073] dump_stack+0x1b2/0x281 [ 1625.812731] warn_alloc.cold+0x96/0x1cc [ 1625.816803] ? zone_watermark_ok_safe+0x220/0x220 [ 1625.821818] ? usleep_range+0x130/0x130 [ 1625.825879] ? try_to_free_pages+0x23f/0x6e0 [ 1625.830547] ? _find_next_bit+0xdb/0x100 [ 1625.834626] ? run_timer_softirq+0x5a0/0x5a0 [ 1625.839306] __alloc_pages_nodemask+0x2127/0x2720 [ 1625.844168] ? lock_acquire+0x170/0x3f0 [ 1625.848328] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1625.853436] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1625.858257] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1625.863723] alloc_pages_current+0x155/0x260 [ 1625.868749] ion_page_pool_alloc+0x118/0x1b0 [ 1625.873776] ion_system_heap_allocate+0x133/0x8c0 [ 1625.878625] ? ion_alloc+0x187/0x810 [ 1625.882623] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1625.888608] ? ion_system_contig_heap_create+0x130/0x130 [ 1625.894146] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1625.899685] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1625.904714] ion_alloc+0x204/0x810 [ 1625.908400] ? ion_dma_buf_release+0x40/0x40 [ 1625.913433] ? __might_fault+0x177/0x1b0 [ 1625.918086] ion_ioctl+0xea/0x1f0 [ 1625.921725] ? ion_query_heaps+0x360/0x360 [ 1625.926810] ? ion_query_heaps+0x360/0x360 [ 1625.931886] do_vfs_ioctl+0x75a/0xff0 [ 1625.935870] ? ioctl_preallocate+0x1a0/0x1a0 [ 1625.941620] ? lock_downgrade+0x740/0x740 [ 1625.946130] ? __fget+0x225/0x360 [ 1625.949806] ? do_vfs_ioctl+0xff0/0xff0 [ 1625.953782] ? security_file_ioctl+0x83/0xb0 [ 1625.958630] SyS_ioctl+0x7f/0xb0 [ 1625.961997] ? do_vfs_ioctl+0xff0/0xff0 [ 1625.966059] do_syscall_64+0x1d5/0x640 [ 1625.970045] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1625.975349] RIP: 0033:0x4665f9 [ 1625.978637] RSP: 002b:00007f551e7c7188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1625.986425] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1625.994637] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000008 [ 1626.002079] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1626.009614] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1626.017193] R13: 00007ffd0570a9af R14: 00007f551e7c7300 R15: 0000000000022000 [ 1626.029700] Mem-Info: [ 1626.032598] active_anon:13564 inactive_anon:22262 isolated_anon:0 [ 1626.032598] active_file:31 inactive_file:12 isolated_file:0 [ 1626.032598] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1626.032598] slab_reclaimable:14007 slab_unreclaimable:121868 [ 1626.032598] mapped:52225 shmem:23317 pagetables:809 bounce:0 [ 1626.032598] free:17032 free_pcp:0 free_cma:0 [ 1626.054058] warn_alloc_show_mem: 3 callbacks suppressed [ 1626.054062] Mem-Info: [ 1626.074435] Node 0 active_anon:53292kB inactive_anon:69192kB active_file:4kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:182072kB dirty:0kB writeback:0kB shmem:73332kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1626.091695] active_anon:13564 inactive_anon:22262 isolated_anon:0 [ 1626.091695] active_file:17 inactive_file:17 isolated_file:0 [ 1626.091695] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1626.091695] slab_reclaimable:14007 slab_unreclaimable:121868 [ 1626.091695] mapped:52225 shmem:23317 pagetables:809 bounce:0 [ 1626.091695] free:17087 free_pcp:5 free_cma:0 [ 1626.111649] Node 1 active_anon:964kB inactive_anon:19856kB active_file:64kB inactive_file:64kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:26828kB dirty:0kB writeback:0kB shmem:19936kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1626.159369] Node 0 active_anon:53292kB inactive_anon:69192kB active_file:4kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:182072kB dirty:0kB writeback:0kB shmem:73332kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1626.177627] Node 0 DMA free:11064kB min:204kB low:252kB high:300kB active_anon:76kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:8kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1626.221561] Node 1 active_anon:964kB inactive_anon:19856kB active_file:36kB inactive_file:36kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:26828kB dirty:0kB writeback:0kB shmem:19936kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1626.240798] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1626.275685] Node 0 DMA32 free:21092kB min:36200kB low:45248kB high:54296kB active_anon:53216kB inactive_anon:69192kB active_file:4kB inactive_file:4kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7456kB pagetables:2600kB bounce:0kB free_pcp:20kB local_pcp:0kB free_cma:0kB [ 1626.284830] Node 0 [ 1626.316861] lowmem_reserve[]: 0 0 0 0 0 [ 1626.320782] DMA free:11064kB min:204kB low:252kB high:300kB active_anon:76kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:8kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1626.323526] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1626.367565] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1626.404215] Node 0 DMA32 free:21092kB min:36200kB low:45248kB high:54296kB active_anon:53216kB inactive_anon:69192kB active_file:4kB inactive_file:4kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7456kB pagetables:2600kB bounce:0kB free_pcp:20kB local_pcp:20kB free_cma:0kB [ 1626.409051] lowmem_reserve[]: [ 1626.446063] lowmem_reserve[]: 0 0 0 0 0 [ 1626.453281] 0 [ 1626.453378] Node 0 [ 1626.453381] 0 0 [ 1626.461513] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1626.463733] 0 [ 1626.499218] lowmem_reserve[]: 0 0 0 0 0 [ 1626.509449] Node 1 Normal free:36192kB min:53696kB low:67120kB high:80544kB active_anon:964kB inactive_anon:19856kB active_file:104kB inactive_file:4kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:288kB pagetables:628kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1626.512670] 0 [ 1626.553098] Node 1 Normal free:36192kB min:53696kB low:67120kB high:80544kB active_anon:964kB inactive_anon:19856kB active_file:104kB inactive_file:0kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:288kB pagetables:628kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1626.556057] lowmem_reserve[]: 0 0 0 0 0 [ 1626.597953] lowmem_reserve[]: 0 0 0 0 0 [ 1626.598292] Node 0 [ 1626.602360] Node 0 [ 1626.602363] DMA: 16*4kB [ 1626.604600] DMA: 16*4kB (ME) 11*8kB (M) 24*16kB (UME) 7*32kB (ME) 5*64kB (UME) 2*128kB (UE) 2*256kB (ME) 2*512kB (UE) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (U) = 11064kB [ 1626.621339] (ME) [ 1626.646883] Node 0 DMA32: 855*4kB (UME) 725*8kB (UME) 212*16kB (UME) 186*32kB (UME) 22*64kB (U) 9*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 21124kB [ 1626.651116] 11*8kB (M) 24*16kB (UME) 7*32kB (ME) 5*64kB (UME) 2*128kB (UE) 2*256kB (ME) 2*512kB (UE) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (U) = 11064kB [ 1626.674346] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1626.703945] Node 0 [ 1626.722253] Node 1 [ 1626.727252] DMA32: [ 1626.727417] Normal: [ 1626.729547] 855*4kB [ 1626.731949] 950*4kB (UM) 549*8kB (UM) 112*16kB (UME) 749*32kB (UME) 35*64kB (U) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36192kB [ 1626.749560] (UME) [ 1626.773852] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1626.777518] 725*8kB [ 1626.795940] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1626.799784] (UME) [ 1626.819336] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1626.823329] 212*16kB [ 1626.841753] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1626.845249] (UME) 186*32kB (UME) 22*64kB (U) 9*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 21124kB [ 1626.863760] 23351 total pagecache pages [ 1626.869063] 0 pages in swap cache [ 1626.872697] Swap cache stats: add 0, delete 0, find 0/0 [ 1626.877751] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1626.887351] Free swap = 0kB [ 1626.892177] Total swap = 0kB [ 1626.901533] 2097051 pages RAM [ 1626.902776] Node 1 [ 1626.904650] 0 pages HighMem/MovableOnly [ 1626.904655] 363849 pages reserved [ 1626.912844] Normal: 950*4kB (UM) 549*8kB (UM) 112*16kB (UME) 749*32kB (UME) 35*64kB (U) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36192kB [ 1626.925309] 0 pages cma reserved [ 1626.951041] Out of memory (oom_kill_allocating_task): Kill process 7964 (syz-fuzzer) score 0 or sacrifice child [ 1626.952267] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1626.962928] Killed process 23084 (syz-executor.0) total-vm:84924kB, anon-rss:64kB, file-rss:0kB, shmem-rss:0kB [ 1626.974344] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1626.995664] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1626.997813] oom_reaper: reaped process 23084 (syz-executor.0), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1627.008482] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1627.024050] 23351 total pagecache pages [ 1627.031716] 0 pages in swap cache [ 1627.035637] Swap cache stats: add 0, delete 0, find 0/0 [ 1627.041470] Free swap = 0kB [ 1627.044520] Total swap = 0kB [ 1627.051158] 2097051 pages RAM [ 1627.054421] 0 pages HighMem/MovableOnly [ 1627.058813] 363849 pages reserved [ 1627.062711] 0 pages cma reserved [ 1627.878192] syz-executor.2: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1627.910827] oom_reaper: reaped process 10632 (syz-executor.2), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1627.914788] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 1627.928461] syz-fuzzer invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1627.946335] syz-executor.5: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1627.967646] CPU: 1 PID: 10632 Comm: syz-executor.2 Not tainted 4.14.232-syzkaller #0 [ 1627.975768] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1627.985384] Call Trace: [ 1627.987984] dump_stack+0x1b2/0x281 [ 1627.991723] warn_alloc.cold+0x96/0x1cc [ 1627.996005] ? zone_watermark_ok_safe+0x220/0x220 [ 1628.001353] ? wait_for_completion_io+0x10/0x10 [ 1628.006587] __alloc_pages_nodemask+0x2127/0x2720 [ 1628.011827] ? lock_acquire+0x170/0x3f0 [ 1628.016064] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1628.021243] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1628.025751] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1628.031318] ? retint_kernel+0x2d/0x2d [ 1628.035259] alloc_pages_current+0x155/0x260 [ 1628.039682] ion_page_pool_alloc+0x118/0x1b0 [ 1628.044095] ion_system_heap_allocate+0x133/0x8c0 [ 1628.048943] ? ion_alloc+0x187/0x810 [ 1628.052714] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1628.058537] ? ion_system_contig_heap_create+0x130/0x130 [ 1628.064154] syz-executor.5 cpuset= [ 1628.064167] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1628.064180] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1628.078151] ion_alloc+0x204/0x810 [ 1628.082050] ? ion_dma_buf_release+0x40/0x40 [ 1628.087177] ? __might_fault+0x177/0x1b0 [ 1628.091825] ion_ioctl+0xea/0x1f0 [ 1628.092832] / [ 1628.095282] ? ion_query_heaps+0x360/0x360 [ 1628.101234] ? ion_query_heaps+0x360/0x360 [ 1628.105570] do_vfs_ioctl+0x75a/0xff0 [ 1628.109401] ? ioctl_preallocate+0x1a0/0x1a0 [ 1628.113821] ? lock_downgrade+0x740/0x740 [ 1628.114021] mems_allowed=0-1 [ 1628.118077] ? __fget+0x225/0x360 [ 1628.118088] ? do_vfs_ioctl+0xff0/0xff0 [ 1628.118099] ? security_file_ioctl+0x83/0xb0 [ 1628.118108] SyS_ioctl+0x7f/0xb0 [ 1628.118116] ? do_vfs_ioctl+0xff0/0xff0 [ 1628.118126] do_syscall_64+0x1d5/0x640 [ 1628.118140] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1628.118149] RIP: 0033:0x4665f9 [ 1628.118154] RSP: 002b:00007f1adcca2188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1628.118164] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1628.118169] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000008 [ 1628.118174] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1628.118182] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1628.192361] R13: 00007ffee928410f R14: 00007f1adcca2300 R15: 0000000000022000 [ 1628.200957] CPU: 0 PID: 10635 Comm: syz-executor.5 Not tainted 4.14.232-syzkaller #0 [ 1628.204541] syz-fuzzer cpuset= [ 1628.209132] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1628.209137] Call Trace: [ 1628.209156] dump_stack+0x1b2/0x281 [ 1628.209170] warn_alloc.cold+0x96/0x1cc [ 1628.209180] ? zone_watermark_ok_safe+0x220/0x220 [ 1628.209199] __alloc_pages_nodemask+0x2127/0x2720 [ 1628.224692] / [ 1628.225334] ? lock_acquire+0x170/0x3f0 [ 1628.229044] mems_allowed=0-1 [ 1628.233039] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1628.257228] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1628.263299] ? __mutex_unlock_slowpath+0x75/0x770 [ 1628.268344] ? retint_kernel+0x2d/0x2d [ 1628.272228] alloc_pages_current+0x155/0x260 [ 1628.276954] ion_page_pool_alloc+0x118/0x1b0 [ 1628.281358] ion_system_heap_allocate+0x133/0x8c0 [ 1628.286294] ? _raw_spin_unlock+0x29/0x40 [ 1628.290436] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1628.295350] ? ion_system_contig_heap_create+0x130/0x130 [ 1628.301439] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1628.306529] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1628.311363] ion_alloc+0x27a/0x810 [ 1628.314895] ? ion_dma_buf_release+0x40/0x40 [ 1628.319507] ? __might_fault+0x177/0x1b0 [ 1628.323694] ion_ioctl+0xea/0x1f0 [ 1628.327140] ? ion_query_heaps+0x360/0x360 [ 1628.331474] ? ion_query_heaps+0x360/0x360 [ 1628.336102] do_vfs_ioctl+0x75a/0xff0 [ 1628.340013] ? ioctl_preallocate+0x1a0/0x1a0 [ 1628.344410] ? lock_downgrade+0x740/0x740 [ 1628.348908] ? __fget+0x225/0x360 [ 1628.352449] ? do_vfs_ioctl+0xff0/0xff0 [ 1628.356862] ? security_file_ioctl+0x83/0xb0 [ 1628.361972] SyS_ioctl+0x7f/0xb0 [ 1628.365636] ? do_vfs_ioctl+0xff0/0xff0 [ 1628.369688] do_syscall_64+0x1d5/0x640 [ 1628.373563] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1628.378752] RIP: 0033:0x4665f9 [ 1628.382012] RSP: 002b:00007f551e7c7188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1628.390058] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1628.397589] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000008 [ 1628.405728] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1628.413772] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1628.421361] R13: 00007ffd0570a9af R14: 00007f551e7c7300 R15: 0000000000022000 [ 1628.428912] CPU: 1 PID: 7964 Comm: syz-fuzzer Not tainted 4.14.232-syzkaller #0 [ 1628.437548] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1628.444139] Mem-Info: [ 1628.447440] Call Trace: [ 1628.447460] dump_stack+0x1b2/0x281 [ 1628.447471] dump_header+0x178/0x82f [ 1628.447481] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1628.447490] ? ___ratelimit+0x2cd/0x530 [ 1628.447498] oom_kill_process.cold+0x10/0xa40 [ 1628.447514] out_of_memory+0xe3e/0x1190 [ 1628.447530] ? oom_killer_disable+0x1c0/0x1c0 [ 1628.453607] active_anon:13514 inactive_anon:22262 isolated_anon:0 [ 1628.453607] active_file:17 inactive_file:17 isolated_file:0 [ 1628.453607] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1628.453607] slab_reclaimable:14003 slab_unreclaimable:121627 [ 1628.453607] mapped:52225 shmem:23317 pagetables:738 bounce:0 [ 1628.453607] free:13843 free_pcp:0 free_cma:0 [ 1628.457596] ? mutex_trylock+0x152/0x1a0 [ 1628.457608] __alloc_pages_nodemask+0x23e1/0x2720 [ 1628.457627] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1628.457649] alloc_pages_current+0x155/0x260 [ 1628.457662] filemap_fault+0x11a1/0x1ad0 [ 1628.457681] ext4_filemap_fault+0x84/0xb0 [ 1628.457689] __do_fault+0xfa/0x380 [ 1628.457700] __handle_mm_fault+0x2497/0x4620 [ 1628.477318] Node 0 active_anon:53096kB inactive_anon:69192kB active_file:8kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:182072kB dirty:0kB writeback:0kB shmem:73332kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1628.480220] ? vm_insert_page+0x7c0/0x7c0 [ 1628.535651] Node 1 active_anon:960kB inactive_anon:19856kB active_file:60kB inactive_file:60kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:26828kB dirty:0kB writeback:0kB shmem:19936kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1628.539553] ? lock_downgrade+0x740/0x740 [ 1628.543796] Node 0 [ 1628.548098] ? mark_held_locks+0xa6/0xf0 [ 1628.548110] handle_mm_fault+0x455/0x9c0 [ 1628.548124] __do_page_fault+0x549/0xad0 [ 1628.548133] ? spurious_fault+0x640/0x640 [ 1628.548141] ? do_page_fault+0x60/0x500 [ 1628.548149] ? page_fault+0x2f/0x50 [ 1628.548155] page_fault+0x45/0x50 [ 1628.548161] RIP: 0000:0x947a5c [ 1628.548166] RSP: 2e000:000000c00003df00 EFLAGS: 0043b6a0 [ 1628.557213] Mem-Info: [ 1628.762304] DMA free:11356kB min:204kB low:252kB high:300kB active_anon:76kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:8kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1628.790560] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1628.825774] Node 0 DMA32 free:111444kB min:36200kB low:45248kB high:54296kB active_anon:53020kB inactive_anon:69192kB active_file:508kB inactive_file:2348kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7424kB pagetables:2420kB bounce:0kB free_pcp:1440kB local_pcp:656kB free_cma:0kB [ 1628.862160] lowmem_reserve[]: 0 0 0 0 0 [ 1628.866769] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB 09:40:32 executing program 1: socket(0x11, 0x2, 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000004980), 0x0, 0x0) getsockopt$X25_QBITINCL(r0, 0x106, 0x1, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x4, 0x7, 0x7, 0x6, 0xa, @remote, @private2={0xfc, 0x2, '\x00', 0x1}, 0x700, 0x20, 0x9, 0x5f3b}}) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000004980), 0x0, 0x0) getsockopt$X25_QBITINCL(r1, 0x106, 0x1, 0x0, 0x0) r2 = socket$vsock_dgram(0x28, 0x2, 0x0) ioctl$sock_SIOCDELRT(r2, 0x890c, &(0x7f0000000180)={0x0, @llc={0x1a, 0x33a, 0x9, 0x6, 0x27, 0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, @vsock={0x28, 0x0, 0x2710}, @isdn={0x22, 0xcb, 0x81, 0x2, 0x69}, 0xfff, 0x0, 0x0, 0x0, 0x81, &(0x7f0000000140)='dummy0\x00', 0x80000000, 0x101, 0x8001}) openat$zero(0xffffffffffffff9c, &(0x7f00000000c0), 0x800, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000100)={0x80000004, 0x7}) getsockname(r1, &(0x7f0000002040)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f00000020c0)=0x80) socket(0x27, 0xa, 0x40000801) [ 1628.985211] lowmem_reserve[]: 0 0 0 0 0 [ 1628.988171] active_anon:13512 inactive_anon:22262 isolated_anon:0 [ 1628.988171] active_file:184 inactive_file:1293 isolated_file:0 [ 1628.988171] unevictable:0 dirty:10 writeback:0 unstable:0 [ 1628.988171] slab_reclaimable:13993 slab_unreclaimable:121618 [ 1628.988171] mapped:53307 shmem:23317 pagetables:738 bounce:0 [ 1628.988171] free:243366 free_pcp:651 free_cma:0 [ 1628.995561] Node 1 Normal free:791412kB min:53696kB low:67120kB high:80544kB active_anon:956kB inactive_anon:19856kB active_file:60kB inactive_file:60kB unevictable:0kB writepending:4kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:224kB pagetables:524kB bounce:0kB free_pcp:1300kB local_pcp:640kB free_cma:0kB [ 1629.085354] lowmem_reserve[]: 0 0 0 0 0 [ 1629.089488] Node 0 active_anon:53092kB inactive_anon:69192kB active_file:2676kB inactive_file:5848kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:189000kB dirty:36kB writeback:0kB shmem:73332kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1629.105769] Node 0 DMA: 59*4kB (UME) 16*8kB (UM) 23*16kB (UME) 9*32kB (UME) 10*64kB (UME) 2*128kB (UE) 2*256kB (ME) 2*512kB (UE) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (U) = 11644kB [ 1629.167960] Node 0 DMA32: 1453*4kB (UME) 2193*8kB (UE) 907*16kB (UME) 382*32kB (UE) 1134*64kB (UM) 152*128kB (U) 12*256kB (UM) 6*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 148268kB [ 1629.203750] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1629.216876] Node 1 active_anon:956kB inactive_anon:19856kB active_file:60kB inactive_file:60kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:26828kB dirty:4kB writeback:0kB shmem:19936kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1629.253234] systemd[1]: rsyslog.service: Service hold-off time over, scheduling restart. [ 1629.264034] Node 1 Normal: 16077*4kB (UM) 2759*8kB (UM) 744*16kB (UME) 1176*32kB (UME) 7070*64kB (UM) 658*128kB (U) 135*256kB (U) 45*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 730220kB [ 1629.287444] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1629.297655] systemd[1]: Stopped System Logging Service. [ 1629.303846] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1629.333605] systemd[1]: Starting System Logging Service... [ 1629.351128] systemd-journald[10643]: File /run/log/journal/04d8c135ee6b410280ba31a58c89679d/system.journal corrupted or uncleanly shut down, renaming and replacing. [ 1629.352339] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1629.378656] Node 0 DMA free:11124kB min:204kB low:252kB high:300kB active_anon:76kB inactive_anon:0kB active_file:0kB inactive_file:40kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:8kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1629.409906] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1629.419432] 26230 total pagecache pages [ 1629.446250] 0 pages in swap cache [ 1629.449848] Swap cache stats: add 0, delete 0, find 0/0 [ 1629.474132] Free swap = 0kB [ 1629.495769] Total swap = 0kB [ 1629.499774] 2097051 pages RAM [ 1629.502935] 0 pages HighMem/MovableOnly [ 1629.504044] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1629.536448] 363849 pages reserved [ 1629.550577] 0 pages cma reserved [ 1629.554914] Node 0 DMA32 free:44492kB min:36200kB low:45248kB high:54296kB active_anon:53216kB inactive_anon:69192kB active_file:3476kB inactive_file:7260kB unevictable:0kB writepending:36kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7520kB pagetables:2420kB bounce:0kB free_pcp:404kB local_pcp:256kB free_cma:0kB [ 1629.590236] systemd-journald[10643]: /dev/kmsg buffer overrun, some messages lost. [ 1629.674203] lowmem_reserve[]: 0 0 0 0 0 [ 1629.706303] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1629.802618] lowmem_reserve[]: 0 0 0 0 0 [ 1629.819727] Node 1 Normal free:200000kB min:53696kB low:67120kB high:80544kB active_anon:1256kB inactive_anon:27856kB active_file:660kB inactive_file:1560kB unevictable:0kB writepending:4kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:256kB pagetables:524kB bounce:0kB free_pcp:304kB local_pcp:132kB free_cma:0kB [ 1629.984571] syz-executor.1: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1630.023031] lowmem_reserve[]: 0 0 0 0 0 [ 1630.038594] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 1630.041833] Node 0 [ 1630.043934] CPU: 0 PID: 10647 Comm: syz-executor.1 Not tainted 4.14.232-syzkaller #0 [ 1630.043940] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1630.043943] Call Trace: [ 1630.043962] dump_stack+0x1b2/0x281 [ 1630.070508] warn_alloc.cold+0x96/0x1cc [ 1630.074564] ? zone_watermark_ok_safe+0x220/0x220 [ 1630.079577] __alloc_pages_nodemask+0x2127/0x2720 [ 1630.084763] ? lock_acquire+0x170/0x3f0 [ 1630.088983] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1630.093817] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1630.099608] ? __mutex_unlock_slowpath+0x75/0x770 [ 1630.104599] alloc_pages_current+0x155/0x260 [ 1630.109114] ion_page_pool_alloc+0x118/0x1b0 [ 1630.113507] ion_system_heap_allocate+0x133/0x8c0 [ 1630.118481] ? ion_alloc+0x187/0x810 [ 1630.122662] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1630.128528] ? ion_system_contig_heap_create+0x130/0x130 [ 1630.134498] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1630.139593] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1630.144530] ion_alloc+0x204/0x810 [ 1630.148089] ? ion_dma_buf_release+0x40/0x40 [ 1630.152497] ? __might_fault+0x177/0x1b0 [ 1630.156635] ion_ioctl+0xea/0x1f0 [ 1630.160249] ? ion_query_heaps+0x360/0x360 [ 1630.164558] ? ion_query_heaps+0x360/0x360 [ 1630.168777] do_vfs_ioctl+0x75a/0xff0 [ 1630.172595] ? ioctl_preallocate+0x1a0/0x1a0 [ 1630.177375] ? lock_downgrade+0x740/0x740 [ 1630.181518] ? __fget+0x225/0x360 [ 1630.185054] ? do_vfs_ioctl+0xff0/0xff0 [ 1630.189035] ? security_file_ioctl+0x83/0xb0 [ 1630.193613] SyS_ioctl+0x7f/0xb0 [ 1630.197148] ? do_vfs_ioctl+0xff0/0xff0 [ 1630.201194] do_syscall_64+0x1d5/0x640 [ 1630.205192] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1630.210463] RIP: 0033:0x4665f9 [ 1630.213653] RSP: 002b:00007f22b5267188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1630.221695] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1630.229123] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000008 [ 1630.236641] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1630.244007] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1630.251630] R13: 00007ffea96cbc0f R14: 00007f22b5267300 R15: 0000000000022000 [ 1630.260540] DMA: 13*4kB (UME) 13*8kB (U) 26*16kB (UME) 11*32kB (UME) 5*64kB (UME) 2*128kB (UE) 3*256kB (UME) 1*512kB (E) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (U) = 10972kB [ 1630.303608] warn_alloc_show_mem: 1 callbacks suppressed [ 1630.303612] Mem-Info: [ 1630.313105] active_anon:13710 inactive_anon:24295 isolated_anon:0 [ 1630.313105] active_file:449 inactive_file:405 isolated_file:57 [ 1630.313105] unevictable:0 dirty:18 writeback:0 unstable:0 [ 1630.313105] slab_reclaimable:13998 slab_unreclaimable:121628 [ 1630.313105] mapped:53408 shmem:25365 pagetables:788 bounce:0 [ 1630.313105] free:14027 free_pcp:30 free_cma:0 [ 1630.354977] Node 0 DMA32: 882*4kB (ME) 767*8kB (ME) 194*16kB (UME) 45*32kB (ME) 8*64kB (M) 1*128kB (U) 4*256kB (UM) 5*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 18432kB [ 1630.376001] Node 0 active_anon:53416kB inactive_anon:69292kB active_file:1164kB inactive_file:1028kB unevictable:0kB isolated(anon):0kB isolated(file):112kB mapped:184220kB dirty:68kB writeback:0kB shmem:73432kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1630.380430] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1630.428947] Node 1 Normal: 21*4kB (UME) 10*8kB (UME) 19*16kB (UME) 12*32kB (UME) 7*64kB (UM) 2*128kB (UM) 39*256kB (UM) 30*512kB (UE) 0*1024kB 0*2048kB 0*4096kB = 26900kB [ 1630.437803] Node 1 active_anon:1424kB inactive_anon:27888kB active_file:120kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:28212kB dirty:4kB writeback:0kB shmem:28028kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1630.446540] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1630.480834] syz-executor.2: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1630.481867] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1630.498848] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 1630.502811] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1630.508099] CPU: 0 PID: 10632 Comm: syz-executor.2 Not tainted 4.14.232-syzkaller #0 [ 1630.517876] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1630.525239] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1630.525244] Call Trace: [ 1630.525262] dump_stack+0x1b2/0x281 [ 1630.525275] warn_alloc.cold+0x96/0x1cc [ 1630.525285] ? zone_watermark_ok_safe+0x220/0x220 [ 1630.525306] __alloc_pages_nodemask+0x2127/0x2720 [ 1630.533987] 25447 total pagecache pages [ 1630.543671] ? lock_acquire+0x170/0x3f0 [ 1630.543684] ? lock_acquire+0x170/0x3f0 [ 1630.543700] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1630.546314] 0 pages in swap cache [ 1630.549915] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1630.549928] ? __mutex_unlock_slowpath+0x75/0x770 [ 1630.553903] Swap cache stats: add 0, delete 0, find 0/0 [ 1630.558917] alloc_pages_current+0x155/0x260 [ 1630.558930] ion_page_pool_alloc+0x118/0x1b0 [ 1630.558939] ion_system_heap_allocate+0x133/0x8c0 [ 1630.558950] ? _raw_spin_unlock+0x29/0x40 [ 1630.564081] Free swap = 0kB [ 1630.568117] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1630.568126] ? ion_system_contig_heap_create+0x130/0x130 [ 1630.568136] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1630.568147] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1630.568157] ion_alloc+0x27a/0x810 [ 1630.568170] ? ion_dma_buf_release+0x40/0x40 [ 1630.572407] Total swap = 0kB [ 1630.576628] ? __might_fault+0x177/0x1b0 [ 1630.576642] ion_ioctl+0xea/0x1f0 [ 1630.576652] ? ion_query_heaps+0x360/0x360 [ 1630.576663] ? ion_query_heaps+0x360/0x360 [ 1630.576672] do_vfs_ioctl+0x75a/0xff0 [ 1630.576683] ? ioctl_preallocate+0x1a0/0x1a0 [ 1630.576692] ? lock_downgrade+0x740/0x740 [ 1630.576704] ? __fget+0x225/0x360 [ 1630.582303] 2097051 pages RAM [ 1630.585902] ? do_vfs_ioctl+0xff0/0xff0 [ 1630.585914] ? security_file_ioctl+0x83/0xb0 [ 1630.585923] SyS_ioctl+0x7f/0xb0 [ 1630.585931] ? do_vfs_ioctl+0xff0/0xff0 [ 1630.585942] do_syscall_64+0x1d5/0x640 [ 1630.585956] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1630.591617] 0 pages HighMem/MovableOnly [ 1630.596502] RIP: 0033:0x4665f9 [ 1630.596507] RSP: 002b:00007f1adcca2188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1630.596516] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1630.596520] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000008 [ 1630.596525] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1630.596530] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1630.596536] R13: 00007ffee928410f R14: 00007f1adcca2300 R15: 0000000000022000 [ 1630.601496] Node 0 [ 1630.602298] 363849 pages reserved [ 1630.613147] DMA free:10968kB min:204kB low:252kB high:300kB active_anon:76kB inactive_anon:100kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:8kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1630.632410] 0 pages cma reserved [ 1630.638830] lowmem_reserve[]: [ 1630.655767] Out of memory (oom_kill_allocating_task): Kill process 7964 (syz-fuzzer) score 0 or sacrifice child [ 1630.660325] 0 [ 1630.662778] Killed process 8897 (syz-executor.5) total-vm:84924kB, anon-rss:60kB, file-rss:0kB, shmem-rss:0kB [ 1630.666273] 2717 2718 2718 2718 [ 1630.666292] Node 0 [ 1630.700211] oom_reaper: reaped process 8897 (syz-executor.5), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1630.702421] DMA32 free:17892kB min:36200kB low:45248kB high:54296kB active_anon:53340kB inactive_anon:69192kB active_file:428kB inactive_file:352kB unevictable:0kB writepending:68kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7456kB pagetables:2532kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 1630.782217] oom_reaper: reaped process 10641 (syz-executor.3), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1630.782626] lowmem_reserve[]: 0 0 0 0 0 [ 1630.917416] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1630.949091] syz-fuzzer invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1630.977633] lowmem_reserve[]: 0 0 0 0 0 [ 1630.982188] Node 1 Normal free:26796kB min:53696kB low:67120kB high:80544kB active_anon:1464kB inactive_anon:27888kB active_file:56kB inactive_file:56kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:256kB pagetables:628kB bounce:0kB free_pcp:120kB local_pcp:120kB free_cma:0kB [ 1631.040731] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 1631.061555] CPU: 0 PID: 7961 Comm: syz-fuzzer Not tainted 4.14.232-syzkaller #0 [ 1631.062833] lowmem_reserve[]: [ 1631.069840] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1631.069844] Call Trace: [ 1631.069862] dump_stack+0x1b2/0x281 [ 1631.069875] dump_header+0x178/0x82f [ 1631.069888] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1631.076473] 0 [ 1631.083501] ? ___ratelimit+0x2cd/0x530 [ 1631.086108] 0 [ 1631.089688] oom_kill_process.cold+0x10/0xa40 [ 1631.093376] 0 [ 1631.098586] out_of_memory+0xe3e/0x1190 [ 1631.098600] ? oom_killer_disable+0x1c0/0x1c0 [ 1631.100378] 0 [ 1631.104418] ? mutex_trylock+0x152/0x1a0 [ 1631.106421] 0 [ 1631.111353] __alloc_pages_nodemask+0x23e1/0x2720 [ 1631.117299] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1631.117321] alloc_pages_current+0x155/0x260 [ 1631.117332] filemap_fault+0x11a1/0x1ad0 [ 1631.117350] ext4_filemap_fault+0x84/0xb0 [ 1631.121817] Node 0 [ 1631.123770] __do_fault+0xfa/0x380 [ 1631.127994] DMA: [ 1631.129750] __handle_mm_fault+0x2497/0x4620 [ 1631.134832] 8*4kB [ 1631.139741] ? vm_insert_page+0x7c0/0x7c0 [ 1631.144763] (UME) [ 1631.148910] ? mark_held_locks+0xa6/0xf0 [ 1631.153119] 11*8kB [ 1631.155378] handle_mm_fault+0x455/0x9c0 [ 1631.155391] __do_page_fault+0x549/0xad0 [ 1631.155403] ? spurious_fault+0x640/0x640 [ 1631.159014] (UM) [ 1631.161208] ? do_page_fault+0x60/0x500 [ 1631.165704] 24*16kB [ 1631.167845] ? page_fault+0x2f/0x50 [ 1631.172079] (UME) [ 1631.174303] page_fault+0x45/0x50 [ 1631.178394] 11*32kB [ 1631.180596] RIP: 184f4a0:0x183e2999a6d [ 1631.184895] (UME) [ 1631.189024] RSP: 03e6:00007fffa3a15330 EFLAGS: 00000003 [ 1631.193154] 6*64kB [ 1631.199053] syz-executor.2: [ 1631.199187] (UME) [ 1631.202627] page allocation failure: order:0 [ 1631.206472] syz-executor.3: [ 1631.231249] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1631.239397] 2*128kB (UE) 3*256kB (UME) 1*512kB (E) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (U) = 10968kB [ 1631.259888] (null) [ 1631.265595] Node 0 DMA32: 867*4kB (UME) 776*8kB (UME) 218*16kB (ME) 56*32kB (UME) 26*64kB (UM) 3*128kB (UM) 4*256kB (M) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18028kB [ 1631.281248] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 1631.287014] page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1631.300625] CPU: 0 PID: 10632 Comm: syz-executor.2 Not tainted 4.14.232-syzkaller #0 [ 1631.302081] syz-executor.3 cpuset= [ 1631.309136] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1631.309141] Call Trace: [ 1631.309162] dump_stack+0x1b2/0x281 [ 1631.309175] warn_alloc.cold+0x96/0x1cc [ 1631.309186] ? zone_watermark_ok_safe+0x220/0x220 [ 1631.309195] ? usleep_range+0x130/0x130 [ 1631.309203] ? try_to_free_pages+0x23f/0x6e0 [ 1631.309212] ? _find_next_bit+0xdb/0x100 [ 1631.309221] ? run_timer_softirq+0x5a0/0x5a0 [ 1631.309236] __alloc_pages_nodemask+0x2127/0x2720 [ 1631.309250] ? lock_acquire+0x170/0x3f0 [ 1631.309263] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1631.309275] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1631.312912] Node 0 [ 1631.322780] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1631.322799] alloc_pages_current+0x155/0x260 [ 1631.322810] ion_page_pool_alloc+0x118/0x1b0 [ 1631.325485] / [ 1631.329106] ion_system_heap_allocate+0x133/0x8c0 [ 1631.329117] ? _raw_spin_unlock+0x29/0x40 [ 1631.333913] mems_allowed=0-1 [ 1631.340105] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1631.340116] ? ion_system_contig_heap_create+0x130/0x130 [ 1631.340126] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1631.340137] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1631.340147] ion_alloc+0x27a/0x810 [ 1631.344318] Normal: [ 1631.348800] ? ion_dma_buf_release+0x40/0x40 [ 1631.348813] ? __might_fault+0x177/0x1b0 [ 1631.348823] ion_ioctl+0xea/0x1f0 [ 1631.348830] ? ion_query_heaps+0x360/0x360 [ 1631.348842] ? ion_query_heaps+0x360/0x360 [ 1631.352978] 0*4kB [ 1631.357637] do_vfs_ioctl+0x75a/0xff0 [ 1631.357649] ? ioctl_preallocate+0x1a0/0x1a0 [ 1631.357658] ? lock_downgrade+0x740/0x740 [ 1631.357671] ? __fget+0x225/0x360 [ 1631.374472] 0*8kB [ 1631.377627] ? do_vfs_ioctl+0xff0/0xff0 [ 1631.379950] 0*16kB [ 1631.385488] ? security_file_ioctl+0x83/0xb0 [ 1631.385498] SyS_ioctl+0x7f/0xb0 [ 1631.385508] ? do_vfs_ioctl+0xff0/0xff0 [ 1631.404511] 0*32kB [ 1631.405593] do_syscall_64+0x1d5/0x640 [ 1631.408683] 0*64kB [ 1631.413605] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1631.434459] 0*128kB [ 1631.434724] RIP: 0033:0x4665f9 [ 1631.439110] 0*256kB [ 1631.443155] RSP: 002b:00007f1adcca2188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1631.464467] 0*512kB [ 1631.465965] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1631.470191] 0*1024kB [ 1631.473891] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000008 [ 1631.484452] 0*2048kB [ 1631.486846] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1631.486853] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1631.490200] 0*4096kB [ 1631.494514] R13: 00007ffee928410f R14: 00007f1adcca2300 R15: 0000000000022000 [ 1631.504488] syz-executor.5: [ 1631.515279] CPU: 1 PID: 10641 Comm: syz-executor.3 Not tainted 4.14.232-syzkaller #0 [ 1631.522431] warn_alloc_show_mem: 1 callbacks suppressed [ 1631.522436] Mem-Info: [ 1631.524013] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1631.526418] active_anon:13691 inactive_anon:24295 isolated_anon:0 [ 1631.526418] active_file:11 inactive_file:14 isolated_file:0 [ 1631.526418] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1631.526418] slab_reclaimable:14002 slab_unreclaimable:121642 [ 1631.526418] mapped:43835 shmem:25365 pagetables:770 bounce:0 [ 1631.526418] free:13899 free_pcp:30 free_cma:0 [ 1631.533618] Call Trace: [ 1631.541837] page allocation failure: order:0 [ 1631.543476] dump_stack+0x1b2/0x281 [ 1631.546118] Mem-Info: [ 1631.553578] warn_alloc.cold+0x96/0x1cc [ 1631.566765] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1631.571291] ? zone_watermark_ok_safe+0x220/0x220 [ 1631.574417] (null) [ 1631.576414] Node 0 active_anon:53300kB inactive_anon:69292kB active_file:12kB inactive_file:12kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:147276kB dirty:0kB writeback:0kB shmem:73432kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1631.582413] ? usleep_range+0x130/0x130 [ 1631.599888] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1631.599903] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1631.599912] ? run_timer_softirq+0x5a0/0x5a0 [ 1631.599927] __alloc_pages_nodemask+0x2127/0x2720 [ 1631.599942] ? lock_acquire+0x170/0x3f0 [ 1631.599956] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1631.599965] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1631.599979] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1631.600006] alloc_pages_current+0x155/0x260 [ 1631.640159] active_anon:13691 inactive_anon:24295 isolated_anon:0 [ 1631.640159] active_file:11 inactive_file:14 isolated_file:0 [ 1631.640159] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1631.640159] slab_reclaimable:14002 slab_unreclaimable:121642 [ 1631.640159] mapped:43835 shmem:25365 pagetables:770 bounce:0 [ 1631.640159] free:13899 free_pcp:30 free_cma:0 [ 1631.641425] ion_page_pool_alloc+0x118/0x1b0 [ 1631.645826] Node 1 active_anon:1464kB inactive_anon:27888kB active_file:32kB inactive_file:44kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:28064kB dirty:0kB writeback:0kB shmem:28028kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1631.648264] ion_system_heap_allocate+0x133/0x8c0 [ 1631.652251] Node 0 [ 1631.659576] ? ion_alloc+0x187/0x810 [ 1631.659587] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1631.659595] ? ion_system_contig_heap_create+0x130/0x130 [ 1631.659604] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1631.659614] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1631.659624] ion_alloc+0x204/0x810 [ 1631.659635] ? ion_dma_buf_release+0x40/0x40 [ 1631.659645] ? __might_fault+0x177/0x1b0 [ 1631.659656] ion_ioctl+0xea/0x1f0 [ 1631.659665] ? ion_query_heaps+0x360/0x360 [ 1631.659678] ? ion_query_heaps+0x360/0x360 [ 1631.659689] do_vfs_ioctl+0x75a/0xff0 [ 1631.671310] Node 0 active_anon:53300kB inactive_anon:69292kB active_file:12kB inactive_file:12kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:147276kB dirty:0kB writeback:0kB shmem:73432kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1631.697014] ? ioctl_preallocate+0x1a0/0x1a0 [ 1631.697025] ? lock_downgrade+0x740/0x740 [ 1631.697037] ? __fget+0x225/0x360 [ 1631.697045] ? do_vfs_ioctl+0xff0/0xff0 [ 1631.697056] ? security_file_ioctl+0x83/0xb0 [ 1631.697064] SyS_ioctl+0x7f/0xb0 [ 1631.697071] ? do_vfs_ioctl+0xff0/0xff0 [ 1631.697082] do_syscall_64+0x1d5/0x640 [ 1631.697096] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1631.697106] RIP: 0033:0x4665f9 [ 1631.697110] RSP: 002b:00007fd59d707188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1631.697120] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1631.697124] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000006 [ 1631.697130] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1631.697134] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1631.697139] R13: 00007ffcfd15ebff R14: 00007fd59d707300 R15: 0000000000022000 [ 1631.716717] = 0kB [ 1631.721314] DMA free:10968kB min:204kB low:252kB high:300kB active_anon:20kB inactive_anon:100kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:8kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1631.740356] Node 1 [ 1631.740553] lowmem_reserve[]: [ 1631.754225] Normal: [ 1631.778968] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 1631.778992] CPU: 0 PID: 10635 Comm: syz-executor.5 Not tainted 4.14.232-syzkaller #0 [ 1631.778997] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1631.779001] Call Trace: [ 1631.779020] dump_stack+0x1b2/0x281 [ 1631.798394] 15*4kB [ 1631.811809] warn_alloc.cold+0x96/0x1cc [ 1631.811822] ? zone_watermark_ok_safe+0x220/0x220 [ 1631.811831] ? usleep_range+0x130/0x130 [ 1631.811843] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1631.817053] (UME) [ 1631.819095] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1631.823129] 9*8kB [ 1631.828772] ? run_timer_softirq+0x5a0/0x5a0 [ 1631.828788] __alloc_pages_nodemask+0x2127/0x2720 [ 1631.828802] ? lock_acquire+0x170/0x3f0 [ 1631.828817] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1631.834243] (UME) [ 1631.839241] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1631.839257] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1631.839276] alloc_pages_current+0x155/0x260 [ 1631.844090] 14*16kB [ 1631.847703] ion_page_pool_alloc+0x118/0x1b0 [ 1631.847713] ion_system_heap_allocate+0x133/0x8c0 [ 1631.847725] ? _raw_spin_unlock+0x29/0x40 [ 1631.852463] (ME) [ 1631.856528] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1631.856542] ? ion_system_contig_heap_create+0x130/0x130 [ 1631.856552] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1631.856564] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1631.860015] 12*32kB [ 1631.864881] ion_alloc+0x27a/0x810 [ 1631.864895] ? ion_dma_buf_release+0x40/0x40 [ 1631.864907] ? __might_fault+0x177/0x1b0 [ 1631.869215] (ME) [ 1631.873372] ion_ioctl+0xea/0x1f0 [ 1631.902789] 7*64kB [ 1631.907261] ? ion_query_heaps+0x360/0x360 [ 1631.907273] ? ion_query_heaps+0x360/0x360 [ 1631.911396] (UM) [ 1631.915104] do_vfs_ioctl+0x75a/0xff0 [ 1631.915116] ? ioctl_preallocate+0x1a0/0x1a0 [ 1631.915128] ? lock_downgrade+0x740/0x740 [ 1631.919166] 2*128kB [ 1631.923568] ? __fget+0x225/0x360 [ 1631.934444] (UM) [ 1631.935810] ? do_vfs_ioctl+0xff0/0xff0 [ 1631.941241] 39*256kB (UM) [ 1631.944891] ? security_file_ioctl+0x83/0xb0 [ 1631.944903] SyS_ioctl+0x7f/0xb0 [ 1631.944912] ? do_vfs_ioctl+0xff0/0xff0 [ 1631.944922] do_syscall_64+0x1d5/0x640 [ 1631.944936] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1631.974459] 30*512kB [ 1631.975758] RIP: 0033:0x4665f9 [ 1631.983272] (UE) [ 1631.990783] RSP: 002b:00007f551e7c7188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1631.990792] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1631.990797] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000008 [ 1631.990801] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1631.990806] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1631.990811] R13: 00007ffd0570a9af R14: 00007f551e7c7300 R15: 0000000000022000 [ 1631.991744] Node 1 active_anon:1464kB inactive_anon:27888kB active_file:56kB inactive_file:44kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:28064kB dirty:0kB writeback:0kB shmem:28028kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1632.112444] 0*1024kB [ 1632.114902] 0 2717 2718 2718 2718 [ 1632.114923] Node 0 DMA32 free:34256kB min:36200kB low:45248kB high:54296kB active_anon:53192kB inactive_anon:69192kB active_file:12kB inactive_file:12kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7424kB pagetables:2356kB bounce:0kB free_pcp:200kB local_pcp:100kB free_cma:0kB [ 1632.114944] lowmem_reserve[]: 0 0 0 0 0 [ 1632.114964] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1632.114983] lowmem_reserve[]: 0 0 0 0 0 [ 1632.115003] Node 1 Normal free:86308kB min:53696kB low:67120kB high:80544kB active_anon:1448kB inactive_anon:27888kB active_file:456kB inactive_file:5412kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:256kB pagetables:624kB bounce:0kB free_pcp:124kB local_pcp:0kB free_cma:0kB [ 1632.115023] lowmem_reserve[]: 0 0 0 0 0 [ 1632.115043] Node 0 DMA: 8*4kB (UME) 11*8kB (UM) 24*16kB (UME) 11*32kB (UME) 7*64kB (UME) 2*128kB (UE) 3*256kB (UME) 1*512kB (E) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (U) = 11032kB [ 1632.115124] Node 0 DMA32: 836*4kB (UME) 870*8kB (UME) 232*16kB (UME) 61*32kB (UME) 153*64kB [ 1632.172285] 0*2048kB [ 1632.181649] (UM) [ 1632.231409] 0*4096kB [ 1632.279509] Node 0 [ 1632.290859] systemd[1]: Started System Logging Service. [ 1632.314504] 3*128kB [ 1632.374844] = 26788kB [ 1632.417940] DMA free:11416kB min:204kB low:252kB high:300kB active_anon:20kB inactive_anon:100kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:8kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1632.574519] (UM) 4*256kB (M) 0*512kB 1*1024kB (U) 3*2048kB (U) 0*4096kB = 34336kB [ 1632.583264] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1632.584424] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1632.594698] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1632.608814] Node 1 Normal: 4210*4kB (UME) 703*8kB (UM) 291*16kB (UME) 269*32kB (UME) 1595*64kB (UM) 212*128kB (UM) 59*256kB (U) 24*512kB (UE) 1*1024kB (U) 0*2048kB 0*4096kB = 193360kB [ 1632.644436] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1632.653167] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1632.654485] Node 0 DMA32 free:64672kB min:36200kB low:45248kB high:54296kB active_anon:54192kB inactive_anon:69192kB active_file:212kB inactive_file:1512kB unevictable:0kB writepending:148kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7456kB pagetables:2356kB bounce:0kB free_pcp:956kB local_pcp:276kB free_cma:0kB [ 1632.684421] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1632.694575] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1632.754496] 27398 total pagecache pages [ 1632.758910] 0 pages in swap cache [ 1632.762914] Swap cache stats: add 0, delete 0, find 0/0 [ 1632.764455] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1632.804427] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1632.807851] warn_alloc_show_mem: 1 callbacks suppressed [ 1632.807855] Mem-Info: [ 1632.813580] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1632.824407] Free swap = 0kB [ 1632.831607] lowmem_reserve[]: 0 0 0 0 0 [ 1632.851670] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1632.874408] active_anon:13915 inactive_anon:24295 isolated_anon:0 [ 1632.874408] active_file:715 inactive_file:716 isolated_file:32 [ 1632.874408] unevictable:0 dirty:25 writeback:0 unstable:0 [ 1632.874408] slab_reclaimable:13828 slab_unreclaimable:124144 [ 1632.874408] mapped:45031 shmem:25365 pagetables:747 bounce:0 [ 1632.874408] free:28569 free_pcp:445 free_cma:0 [ 1632.912225] Total swap = 0kB [ 1632.919803] 2097051 pages RAM [ 1632.923095] 0 pages HighMem/MovableOnly [ 1632.957945] 363849 pages reserved [ 1632.961564] 0 pages cma reserved [ 1632.966828] 25854 total pagecache pages [ 1632.971203] 0 pages in swap cache [ 1632.972565] Node 0 active_anon:54268kB inactive_anon:69292kB active_file:40kB inactive_file:40kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:147260kB dirty:0kB writeback:12kB shmem:73432kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1632.995581] lowmem_reserve[]: 0 0 0 0 0 [ 1633.006299] Node 1 active_anon:1524kB inactive_anon:27888kB active_file:156kB inactive_file:20kB unevictable:0kB isolated(anon):0kB isolated(file):4kB mapped:28772kB dirty:0kB writeback:4kB shmem:28028kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1633.009410] Swap cache stats: add 0, delete 0, find 0/0 [ 1633.034768] Node 0 DMA free:11000kB min:204kB low:252kB high:300kB active_anon:20kB inactive_anon:100kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:8kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1633.070171] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1633.077206] Node 1 Normal free:26424kB min:53696kB low:67120kB high:80544kB active_anon:1524kB inactive_anon:27888kB active_file:668kB inactive_file:404kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:320kB pagetables:632kB bounce:0kB free_pcp:724kB local_pcp:724kB free_cma:0kB [ 1633.078707] Node 0 [ 1633.107264] Bluetooth: hci5 command 0x0406 tx timeout [ 1633.114421] Free swap = 0kB [ 1633.117880] Total swap = 0kB [ 1633.125289] 2097051 pages RAM [ 1633.128521] 0 pages HighMem/MovableOnly [ 1633.132606] 363849 pages reserved [ 1633.132859] DMA32 free:23128kB min:36200kB low:45248kB high:54296kB active_anon:54148kB inactive_anon:69192kB active_file:40kB inactive_file:40kB unevictable:0kB writepending:8kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7456kB pagetables:2224kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1633.136197] lowmem_reserve[]: 0 0 0 0 0 [ 1633.136219] Node 0 DMA: 7*4kB (ME) 16*8kB (UM) 26*16kB (UME) 12*32kB (UME) 5*64kB (ME) [ 1633.168889] 0 pages cma reserved [ 1633.171353] lowmem_reserve[]: [ 1633.178103] 2*128kB [ 1633.180921] 0 [ 1633.184203] (UE) 3*256kB (UME) 1*512kB (E) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (U) = 11004kB [ 1633.199125] Node 0 DMA32: 2629*4kB (UME) 921*8kB (UME) 226*16kB (UME) 57*32kB (UME) 52*64kB (U) 111*128kB (U) 2*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 41372kB [ 1633.199312] 0 [ 1633.214738] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1633.214784] Node 1 Normal: 86*4kB (UME) 57*8kB (UM) 255*16kB (UME) 395*32kB [ 1633.219962] 0 [ 1633.227862] (UME) 33*64kB (UM) 25*128kB (UM) 74*256kB (U) 16*512kB (UE) 0*1024kB 0*2048kB 0*4096kB = 49968kB [ 1633.238982] 0 [ 1633.247456] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1633.247461] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1633.247466] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1633.247473] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1633.249264] 0 [ 1633.258330] 25429 total pagecache pages [ 1633.258338] 0 pages in swap cache [ 1633.258343] Swap cache stats: add 0, delete 0, find 0/0 [ 1633.258345] Free swap = 0kB [ 1633.258348] Total swap = 0kB [ 1633.258356] 2097051 pages RAM [ 1633.258359] 0 pages HighMem/MovableOnly [ 1633.258362] 363849 pages reserved [ 1633.258365] 0 pages cma reserved [ 1633.258372] Out of memory (oom_kill_allocating_task): Kill process 7961 (syz-fuzzer) score 0 or sacrifice child [ 1633.258425] Killed process 9196 (syz-executor.2) total-vm:84924kB, anon-rss:60kB, file-rss:0kB, shmem-rss:0kB [ 1633.366107] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1633.393759] oom_reaper: reaped process 9196 (syz-executor.2), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1633.428639] lowmem_reserve[]: 0 0 0 0 0 [ 1633.449626] Node 1 Normal free:49520kB min:53696kB low:67120kB high:80544kB active_anon:1524kB inactive_anon:27888kB active_file:668kB inactive_file:404kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:320kB pagetables:632kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB [ 1633.539844] lowmem_reserve[]: 0 0 0 0 0 [ 1633.578466] Node 0 DMA: 7*4kB (ME) 16*8kB (UM) 26*16kB (UME) 12*32kB (UME) 6*64kB (UME) 2*128kB (UE) 3*256kB (UME) 1*512kB (E) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (U) = 11068kB [ 1633.604463] systemd[1]: Starting Load/Save RF Kill Switch Status... [ 1633.678166] Node 0 DMA32: 270*4kB (UME) 541*8kB (UME) 369*16kB (UME) 65*32kB (UME) 186*64kB (UE) 127*128kB (UE) 7*256kB (U) 0*512kB 2*1024kB (U) 0*2048kB 0*4096kB = 45392kB [ 1633.804398] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1633.860955] Node 1 Normal: 308*4kB (UME) 325*8kB (UM) 80*16kB (UME) 358*32kB (UME) 8*64kB (UM) 2*128kB (UM) 12*256kB (UM) 6*512kB (UE) 22*1024kB (UM) 5*2048kB (U) 1*4096kB (U) = 60344kB [ 1633.902687] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1633.912426] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1633.921122] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1633.930346] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1633.939255] 25844 total pagecache pages [ 1633.943411] 0 pages in swap cache [ 1633.947246] Swap cache stats: add 0, delete 0, find 0/0 [ 1633.952904] Free swap = 0kB [ 1633.956059] Total swap = 0kB [ 1633.959173] 2097051 pages RAM [ 1633.962558] 0 pages HighMem/MovableOnly [ 1633.966631] 363849 pages reserved [ 1633.970108] 0 pages cma reserved [ 1634.070561] syz-executor.3: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1634.107333] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 1634.112763] CPU: 0 PID: 10641 Comm: syz-executor.3 Not tainted 4.14.232-syzkaller #0 [ 1634.121144] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1634.131103] Call Trace: [ 1634.133706] dump_stack+0x1b2/0x281 [ 1634.137365] warn_alloc.cold+0x96/0x1cc [ 1634.141499] ? zone_watermark_ok_safe+0x220/0x220 [ 1634.146482] __alloc_pages_nodemask+0x2127/0x2720 [ 1634.151430] ? _raw_spin_unlock_irq+0x5a/0x80 [ 1634.156250] ? finish_task_switch+0x178/0x610 [ 1634.162006] ? finish_task_switch+0x14d/0x610 [ 1634.166522] ? lock_acquire+0x170/0x3f0 [ 1634.170797] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1634.175899] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1634.181759] ? __mutex_unlock_slowpath+0x75/0x770 [ 1634.186811] ? alloc_pages_current+0x21c/0x260 [ 1634.191617] alloc_pages_current+0x155/0x260 [ 1634.196308] ion_page_pool_alloc+0x118/0x1b0 [ 1634.200819] ion_system_heap_allocate+0x133/0x8c0 [ 1634.206166] ? _raw_spin_unlock+0x29/0x40 [ 1634.211401] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1634.217100] ? ion_system_contig_heap_create+0x130/0x130 [ 1634.223089] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1634.228535] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1634.233845] ion_alloc+0x27a/0x810 [ 1634.237401] ? ion_dma_buf_release+0x40/0x40 [ 1634.242003] ? __might_fault+0x177/0x1b0 [ 1634.246341] ion_ioctl+0xea/0x1f0 [ 1634.249917] ? ion_query_heaps+0x360/0x360 [ 1634.254251] ? ion_query_heaps+0x360/0x360 [ 1634.258672] do_vfs_ioctl+0x75a/0xff0 [ 1634.262592] ? ioctl_preallocate+0x1a0/0x1a0 [ 1634.267318] ? lock_downgrade+0x740/0x740 [ 1634.272208] ? __fget+0x225/0x360 [ 1634.275818] ? do_vfs_ioctl+0xff0/0xff0 [ 1634.279994] ? security_file_ioctl+0x83/0xb0 [ 1634.284947] SyS_ioctl+0x7f/0xb0 [ 1634.288758] ? do_vfs_ioctl+0xff0/0xff0 [ 1634.292749] do_syscall_64+0x1d5/0x640 [ 1634.297189] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1634.303175] RIP: 0033:0x4665f9 [ 1634.306467] RSP: 002b:00007fd59d707188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1634.314794] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1634.322256] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000006 [ 1634.329706] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1634.336986] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1634.344628] R13: 00007ffcfd15ebff R14: 00007fd59d707300 R15: 0000000000022000 09:40:37 executing program 0: socket(0x11, 0x2, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000004980), 0x0, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000100)={0x80000004, 0x7}) 09:40:37 executing program 2: socket(0x11, 0x2, 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000004980), 0x0, 0x0) getsockopt$X25_QBITINCL(r0, 0x106, 0x1, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x4, 0x7, 0x7, 0x6, 0xa, @remote, @private2={0xfc, 0x2, '\x00', 0x1}, 0x700, 0x20, 0x9, 0x5f3b}}) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000004980), 0x0, 0x0) getsockopt$X25_QBITINCL(r1, 0x106, 0x1, 0x0, 0x0) r2 = socket$vsock_dgram(0x28, 0x2, 0x0) ioctl$sock_SIOCDELRT(r2, 0x890c, &(0x7f0000000180)={0x0, @llc={0x1a, 0x33a, 0x9, 0x6, 0x27, 0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, @vsock={0x28, 0x0, 0x2710}, @isdn={0x22, 0xcb, 0x81, 0x2, 0x69}, 0xfff, 0x0, 0x0, 0x0, 0x81, &(0x7f0000000140)='dummy0\x00', 0x80000000, 0x101, 0x8001}) openat$zero(0xffffffffffffff9c, &(0x7f00000000c0), 0x800, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000100)={0x80000004, 0x7}) getsockname(r1, &(0x7f0000002040)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f00000020c0)=0x80) socket(0x27, 0xa, 0x40000801) socket$can_bcm(0x1d, 0x2, 0x2) [ 1634.793479] Mem-Info: [ 1634.799700] active_anon:13975 inactive_anon:24291 isolated_anon:0 [ 1634.799700] active_file:648 inactive_file:2504 isolated_file:0 [ 1634.799700] unevictable:0 dirty:3 writeback:0 unstable:0 [ 1634.799700] slab_reclaimable:13790 slab_unreclaimable:122849 [ 1634.799700] mapped:28687 shmem:25359 pagetables:669 bounce:0 [ 1634.799700] free:149958 free_pcp:560 free_cma:0 [ 1634.867743] systemd[1]: Started Load/Save RF Kill Switch Status. [ 1634.927367] Node 0 active_anon:54636kB inactive_anon:69284kB active_file:2660kB inactive_file:10668kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:113500kB dirty:88kB writeback:0kB shmem:73416kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1635.085907] Node 1 active_anon:1356kB inactive_anon:27876kB active_file:376kB inactive_file:8708kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:8148kB dirty:8kB writeback:0kB shmem:28012kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1635.174293] Node 0 DMA free:11116kB min:204kB low:252kB high:300kB active_anon:20kB inactive_anon:100kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:8kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1635.234281] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1635.240168] Node 0 DMA32 free:51836kB min:36200kB low:45248kB high:54296kB active_anon:54216kB inactive_anon:69184kB active_file:2688kB inactive_file:12108kB unevictable:0kB writepending:124kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7360kB pagetables:2204kB bounce:0kB free_pcp:688kB local_pcp:620kB free_cma:0kB [ 1635.314252] lowmem_reserve[]: 0 0 0 0 0 [ 1635.318304] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1635.374258] lowmem_reserve[]: 0 0 0 0 0 [ 1635.378481] Node 1 Normal free:596436kB min:53696kB low:67120kB high:80544kB active_anon:1356kB inactive_anon:27876kB active_file:376kB inactive_file:8708kB unevictable:0kB writepending:8kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:288kB pagetables:404kB bounce:0kB free_pcp:848kB local_pcp:620kB free_cma:0kB [ 1635.444268] lowmem_reserve[]: 0 0 0 0 0 [ 1635.448307] Node 0 DMA: 7*4kB (ME) 7*8kB (UM) 32*16kB (UME) 17*32kB (UME) 6*64kB (UME) 1*128kB (E) 3*256kB (UME) 1*512kB (E) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (U) = 11124kB [ 1635.484271] Node 0 DMA32: 384*4kB (UME) 449*8kB (ME) 112*16kB (ME) 66*32kB (UME) 391*64kB (UM) 91*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 45704kB [ 1635.514246] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1635.544261] Node 1 Normal: 18240*4kB (UM) 10274*8kB (UM) 5483*16kB (UME) 4136*32kB (UME) 3460*64kB (UM) 299*128kB (U) 31*256kB (UM) 21*512kB (UM) 1*1024kB (U) 0*2048kB 0*4096kB = 654656kB [ 1635.574258] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1635.583690] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1635.614257] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1635.623596] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1635.654263] 31223 total pagecache pages [ 1635.658728] 0 pages in swap cache [ 1635.662654] Swap cache stats: add 0, delete 0, find 0/0 [ 1635.684548] Free swap = 0kB [ 1635.688621] Total swap = 0kB [ 1635.691868] 2097051 pages RAM [ 1635.704283] 0 pages HighMem/MovableOnly [ 1635.708669] 363849 pages reserved [ 1635.712122] 0 pages cma reserved [ 1636.118988] systemd[1]: Started Journal Service. 09:40:39 executing program 5: socket(0x11, 0x2, 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000004980), 0x0, 0x0) getsockopt$X25_QBITINCL(r0, 0x106, 0x1, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x4, 0x7, 0x7, 0x6, 0xa, @remote, @private2={0xfc, 0x2, '\x00', 0x1}, 0x700, 0x20, 0x9, 0x5f3b}}) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000004980), 0x0, 0x0) getsockopt$X25_QBITINCL(r1, 0x106, 0x1, 0x0, 0x0) r2 = socket$vsock_dgram(0x28, 0x2, 0x0) ioctl$sock_SIOCDELRT(r2, 0x890c, &(0x7f0000000180)={0x0, @llc={0x1a, 0x33a, 0x9, 0x6, 0x27, 0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, @vsock={0x28, 0x0, 0x2710}, @isdn={0x22, 0xcb, 0x81, 0x2, 0x69}, 0xfff, 0x0, 0x0, 0x0, 0x81, &(0x7f0000000140)='dummy0\x00', 0x80000000, 0x101, 0x8001}) openat$zero(0xffffffffffffff9c, &(0x7f00000000c0), 0x800, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000100)={0x80000004, 0x7}) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000240)={0x2, 0x80, 0x1, 0xff, 0x4, 0x41, 0x0, 0xfffffffffffffe00, 0x2000, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0xdc, 0x2, @perf_bp={&(0x7f0000000200), 0x5}, 0x4004, 0x7fffffff, 0x2, 0x4, 0x6, 0x3e7, 0x8001, 0x0, 0x3, 0x0, 0x8001}) socket(0x27, 0xa, 0x40000801) socket$can_bcm(0x1d, 0x2, 0x2) [ 1636.886001] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1636.893329] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1637.005550] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1637.012919] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1637.049231] oom_reaper: reaped process 10647 (syz-executor.1), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1637.153359] oom_reaper: reaped process 10645 (syz-executor.4), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1637.193886] kworker/u4:2 invoked oom-killer: gfp_mask=0x14142c0(GFP_KERNEL|__GFP_NOWARN|__GFP_COMP|__GFP_NOMEMALLOC), nodemask=(null), order=1, oom_score_adj=0 [ 1637.212924] kworker/u4:2 cpuset=/ mems_allowed=0-1 [ 1637.214187] syz-executor.4: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1637.218588] CPU: 0 PID: 5517 Comm: kworker/u4:2 Not tainted 4.14.232-syzkaller #0 [ 1637.234119] syz-executor.3: [ 1637.238373] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1637.238381] page allocation failure: order:0 [ 1637.241400] Workqueue: netns cleanup_net [ 1637.260255] Call Trace: [ 1637.263118] dump_stack+0x1b2/0x281 [ 1637.267268] dump_header+0x178/0x82f [ 1637.269904] syz-executor.4 cpuset= [ 1637.270977] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1637.270978] / mems_allowed=0-1 [ 1637.274650] ? ___ratelimit+0x2cd/0x530 [ 1637.274661] oom_kill_process.cold+0x10/0xa40 [ 1637.274672] ? lock_downgrade+0x740/0x740 [ 1637.274686] out_of_memory+0x2dc/0x1190 [ 1637.284122] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1637.287006] ? oom_killer_disable+0x1c0/0x1c0 [ 1637.291482] (null) [ 1637.296073] ? mutex_trylock+0x152/0x1a0 [ 1637.296087] __alloc_pages_nodemask+0x23e1/0x2720 [ 1637.296107] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1637.296118] ? ops_exit_list+0xf9/0x150 [ 1637.314096] syz-executor.3 cpuset= [ 1637.314315] ? cleanup_net+0x3b3/0x840 [ 1637.316439] / [ 1637.320572] ? process_one_work+0x793/0x14a0 [ 1637.334089] mems_allowed=0-1 [ 1637.335414] ? mark_held_locks+0xa6/0xf0 [ 1637.357148] ? cache_grow_begin+0x3f/0x700 [ 1637.361458] cache_grow_begin+0x91/0x700 [ 1637.365685] fallback_alloc+0x207/0x2c0 [ 1637.370094] kmem_cache_alloc_node_trace+0xed/0x400 [ 1637.375202] __kmalloc_node_track_caller+0x38/0x70 [ 1637.380317] __alloc_skb+0x96/0x510 [ 1637.383955] rtmsg_ifinfo_build_skb+0x65/0x130 [ 1637.388558] rtnetlink_event+0xee/0x1a0 [ 1637.392556] notifier_call_chain+0x108/0x1a0 [ 1637.397304] netdev_upper_dev_unlink+0x1a7/0x200 [ 1637.402283] ? netdev_notify_peers+0xd0/0xd0 [ 1637.406682] batadv_hardif_disable_interface.cold+0x74c/0x92e [ 1637.412656] batadv_softif_destroy_netlink+0xab/0x200 [ 1637.417856] ? batadv_interface_kill_vid+0x150/0x150 [ 1637.423027] default_device_exit_batch+0x204/0x380 [ 1637.428117] ? unregister_netdevice_many+0x50/0x50 [ 1637.433139] ? do_wait_intr_irq+0x270/0x270 [ 1637.437565] ? __local_bh_enable_ip+0xc1/0x170 [ 1637.442142] ? unregister_netdevice_many+0x50/0x50 [ 1637.447165] ? dev_change_net_namespace+0xc90/0xc90 [ 1637.452371] ops_exit_list+0xf9/0x150 [ 1637.456522] cleanup_net+0x3b3/0x840 [ 1637.460520] ? net_drop_ns+0x70/0x70 [ 1637.464260] ? lock_acquire+0x170/0x3f0 [ 1637.468243] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1637.473942] process_one_work+0x793/0x14a0 [ 1637.478353] ? work_busy+0x320/0x320 [ 1637.482138] ? worker_thread+0x158/0xff0 [ 1637.486196] ? _raw_spin_unlock_irq+0x24/0x80 [ 1637.490694] worker_thread+0x5cc/0xff0 [ 1637.494573] ? rescuer_thread+0xc80/0xc80 [ 1637.498968] kthread+0x30d/0x420 [ 1637.502420] ? kthread_create_on_node+0xd0/0xd0 [ 1637.507071] ret_from_fork+0x24/0x30 [ 1637.511201] CPU: 1 PID: 10645 Comm: syz-executor.4 Not tainted 4.14.232-syzkaller #0 [ 1637.519276] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1637.529356] Call Trace: [ 1637.532135] dump_stack+0x1b2/0x281 [ 1637.535955] warn_alloc.cold+0x96/0x1cc [ 1637.540481] ? zone_watermark_ok_safe+0x220/0x220 [ 1637.542753] Mem-Info: [ 1637.545525] ? usleep_range+0x130/0x130 [ 1637.545535] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1637.545547] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1637.545556] ? run_timer_softirq+0x5a0/0x5a0 [ 1637.545572] __alloc_pages_nodemask+0x2127/0x2720 [ 1637.545587] ? lock_acquire+0x170/0x3f0 [ 1637.545602] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1637.545613] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1637.545626] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1637.545644] alloc_pages_current+0x155/0x260 [ 1637.552740] active_anon:13885 inactive_anon:24289 isolated_anon:0 [ 1637.552740] active_file:40 inactive_file:58 isolated_file:0 [ 1637.552740] unevictable:0 dirty:22 writeback:0 unstable:0 [ 1637.552740] slab_reclaimable:13563 slab_unreclaimable:124770 [ 1637.552740] mapped:44197 shmem:25354 pagetables:742 bounce:0 [ 1637.552740] free:13883 free_pcp:3 free_cma:0 [ 1637.558069] ion_page_pool_alloc+0x118/0x1b0 [ 1637.558079] ion_system_heap_allocate+0x133/0x8c0 [ 1637.558088] ? ion_alloc+0x187/0x810 [ 1637.558098] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1637.558105] ? ion_system_contig_heap_create+0x130/0x130 [ 1637.558113] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1637.558124] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1637.558133] ion_alloc+0x204/0x810 [ 1637.558145] ? ion_dma_buf_release+0x40/0x40 [ 1637.558155] ? __might_fault+0x177/0x1b0 [ 1637.558166] ion_ioctl+0xea/0x1f0 [ 1637.558175] ? ion_query_heaps+0x360/0x360 [ 1637.558185] ? ion_query_heaps+0x360/0x360 [ 1637.558195] do_vfs_ioctl+0x75a/0xff0 [ 1637.558206] ? ioctl_preallocate+0x1a0/0x1a0 [ 1637.558215] ? lock_downgrade+0x740/0x740 [ 1637.558231] ? __fget+0x225/0x360 [ 1637.574558] Node 0 active_anon:54104kB inactive_anon:69276kB active_file:40kB inactive_file:88kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:118496kB dirty:56kB writeback:0kB shmem:73400kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1637.576970] ? do_vfs_ioctl+0xff0/0xff0 [ 1637.582006] Node 1 active_anon:1436kB inactive_anon:27880kB active_file:120kB inactive_file:144kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:58292kB dirty:32kB writeback:0kB shmem:28016kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1637.586740] ? security_file_ioctl+0x83/0xb0 [ 1637.586750] SyS_ioctl+0x7f/0xb0 [ 1637.586758] ? do_vfs_ioctl+0xff0/0xff0 [ 1637.586770] do_syscall_64+0x1d5/0x640 [ 1637.586783] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1637.586791] RIP: 0033:0x4665f9 [ 1637.586796] RSP: 002b:00007f6205eee188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1637.586805] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1637.586810] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000006 [ 1637.586815] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1637.586820] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1637.586825] R13: 00007fffcb653cef R14: 00007f6205eee300 R15: 0000000000022000 [ 1637.587073] syz-executor.1: [ 1637.600174] Node 0 [ 1637.637374] CPU: 1 PID: 10641 Comm: syz-executor.3 Not tainted 4.14.232-syzkaller #0 [ 1637.651529] DMA free:10968kB min:204kB low:252kB high:300kB active_anon:20kB inactive_anon:100kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:8kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1637.656118] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1637.656122] Call Trace: [ 1637.656143] dump_stack+0x1b2/0x281 [ 1637.656161] warn_alloc.cold+0x96/0x1cc [ 1637.656172] ? zone_watermark_ok_safe+0x220/0x220 [ 1637.656182] ? usleep_range+0x130/0x130 [ 1637.656190] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1637.656203] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1637.656215] ? run_timer_softirq+0x5a0/0x5a0 [ 1637.669995] lowmem_reserve[]: [ 1637.674306] __alloc_pages_nodemask+0x2127/0x2720 [ 1637.674325] ? lock_acquire+0x170/0x3f0 [ 1637.674338] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1637.674348] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1637.674365] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1637.681823] 0 [ 1637.681908] ? alloc_pages_current+0x37/0x260 [ 1637.698346] 2717 [ 1637.700328] alloc_pages_current+0x155/0x260 [ 1637.709734] 2718 [ 1637.737192] ion_page_pool_alloc+0x118/0x1b0 [ 1637.737202] ion_system_heap_allocate+0x133/0x8c0 [ 1637.737213] ? _raw_spin_unlock+0x29/0x40 [ 1637.737221] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1637.737229] ? ion_system_contig_heap_create+0x130/0x130 [ 1637.737238] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1637.737249] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1637.737258] ion_alloc+0x27a/0x810 [ 1637.737270] ? ion_dma_buf_release+0x40/0x40 [ 1637.737282] ? __might_fault+0x177/0x1b0 [ 1637.737292] ion_ioctl+0xea/0x1f0 [ 1637.737300] ? ion_query_heaps+0x360/0x360 [ 1637.737312] ? ion_query_heaps+0x360/0x360 [ 1637.737321] do_vfs_ioctl+0x75a/0xff0 [ 1637.737332] ? ioctl_preallocate+0x1a0/0x1a0 [ 1637.737341] ? lock_downgrade+0x740/0x740 [ 1637.737356] ? __fget+0x225/0x360 [ 1637.750731] page allocation failure: order:0 [ 1637.769549] ? do_vfs_ioctl+0xff0/0xff0 [ 1637.769561] ? security_file_ioctl+0x83/0xb0 [ 1637.769570] SyS_ioctl+0x7f/0xb0 [ 1637.769578] ? do_vfs_ioctl+0xff0/0xff0 [ 1637.769588] do_syscall_64+0x1d5/0x640 [ 1637.769602] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1637.769611] RIP: 0033:0x4665f9 [ 1637.769615] RSP: 002b:00007fd59d707188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1637.769624] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1637.769629] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000006 [ 1637.769634] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1637.769639] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1637.769644] R13: 00007ffcfd15ebff R14: 00007fd59d707300 R15: 0000000000022000 [ 1637.780199] Mem-Info: [ 1637.787065] 2718 [ 1637.794462] active_anon:13885 inactive_anon:24289 isolated_anon:0 [ 1637.794462] active_file:40 inactive_file:58 isolated_file:0 [ 1637.794462] unevictable:0 dirty:22 writeback:0 unstable:0 [ 1637.794462] slab_reclaimable:13563 slab_unreclaimable:124770 [ 1637.794462] mapped:44197 shmem:25354 pagetables:742 bounce:0 [ 1637.794462] free:13883 free_pcp:3 free_cma:0 [ 1637.807475] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1637.818442] Node 0 active_anon:54104kB inactive_anon:69276kB active_file:40kB inactive_file:88kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:118496kB dirty:56kB writeback:0kB shmem:73400kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1637.829373] 2718 [ 1637.841250] Node 1 active_anon:1436kB inactive_anon:27880kB active_file:120kB inactive_file:144kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:58292kB dirty:32kB writeback:0kB shmem:28016kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1637.853024] Node 0 [ 1637.859840] (null) [ 1637.915048] DMA free:11336kB min:204kB low:252kB high:300kB active_anon:20kB inactive_anon:100kB active_file:0kB inactive_file:40kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:8kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1637.924535] Node 0 [ 1638.050791] lowmem_reserve[]: [ 1638.074487] syz-executor.1 cpuset= [ 1638.200214] 0 [ 1638.228270] DMA32 free:90972kB min:36200kB low:45248kB high:54296kB active_anon:54356kB inactive_anon:69176kB active_file:840kB inactive_file:4220kB unevictable:0kB writepending:156kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7392kB pagetables:2236kB bounce:0kB free_pcp:288kB local_pcp:376kB free_cma:0kB [ 1638.374107] 2717 2718 2718 2718 [ 1638.377867] Node 0 DMA32 free:119732kB min:36200kB low:45248kB high:54296kB active_anon:54388kB inactive_anon:69176kB active_file:956kB inactive_file:4592kB unevictable:0kB writepending:88kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7392kB pagetables:2236kB bounce:0kB free_pcp:432kB local_pcp:292kB free_cma:0kB [ 1638.392965] / mems_allowed=0-1 [ 1638.415342] CPU: 0 PID: 10647 Comm: syz-executor.1 Not tainted 4.14.232-syzkaller #0 [ 1638.423259] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1638.432800] Call Trace: [ 1638.435399] dump_stack+0x1b2/0x281 [ 1638.439036] warn_alloc.cold+0x96/0x1cc [ 1638.443021] ? zone_watermark_ok_safe+0x220/0x220 [ 1638.447960] ? usleep_range+0x130/0x130 [ 1638.452004] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1638.457301] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1638.462442] ? run_timer_softirq+0x5a0/0x5a0 [ 1638.466882] __alloc_pages_nodemask+0x2127/0x2720 [ 1638.471750] ? lock_acquire+0x170/0x3f0 [ 1638.475763] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1638.480760] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1638.485381] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1638.489309] lowmem_reserve[]: 0 0 [ 1638.491050] alloc_pages_current+0x155/0x260 [ 1638.491064] ion_page_pool_alloc+0x118/0x1b0 [ 1638.503605] ion_system_heap_allocate+0x133/0x8c0 [ 1638.508460] ? ion_alloc+0x187/0x810 [ 1638.511405] 0 0 [ 1638.512182] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1638.512194] ? ion_system_contig_heap_create+0x130/0x130 [ 1638.514468] 0 [ 1638.520060] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1638.520074] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1638.520087] ion_alloc+0x204/0x810 [ 1638.541322] ? ion_dma_buf_release+0x40/0x40 [ 1638.546027] ? __might_fault+0x177/0x1b0 [ 1638.550134] ion_ioctl+0xea/0x1f0 [ 1638.553681] ? ion_query_heaps+0x360/0x360 [ 1638.558178] ? ion_query_heaps+0x360/0x360 [ 1638.562527] do_vfs_ioctl+0x75a/0xff0 [ 1638.566517] ? ioctl_preallocate+0x1a0/0x1a0 [ 1638.566526] ? lock_downgrade+0x740/0x740 [ 1638.566539] ? __fget+0x225/0x360 [ 1638.570982] Node 0 [ 1638.575077] ? do_vfs_ioctl+0xff0/0xff0 [ 1638.575089] ? security_file_ioctl+0x83/0xb0 [ 1638.575098] SyS_ioctl+0x7f/0xb0 [ 1638.575106] ? do_vfs_ioctl+0xff0/0xff0 [ 1638.575117] do_syscall_64+0x1d5/0x640 [ 1638.575131] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1638.594055] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1638.597826] RIP: 0033:0x4665f9 [ 1638.597830] RSP: 002b:00007f22b5267188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1638.597840] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1638.597844] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000008 [ 1638.597851] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1638.622051] lowmem_reserve[]: [ 1638.634078] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1638.634084] R13: 00007ffea96cbc0f R14: 00007f22b5267300 R15: 0000000000022000 [ 1638.640312] lowmem_reserve[]: [ 1638.694143] 0 0 0 0 0 [ 1638.698005] 0 0 [ 1638.699986] Node 1 Normal free:662508kB min:53696kB low:67120kB high:80544kB active_anon:1540kB inactive_anon:27880kB active_file:1084kB inactive_file:3728kB unevictable:0kB writepending:32kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:352kB pagetables:804kB bounce:0kB free_pcp:1068kB local_pcp:692kB free_cma:0kB [ 1638.702162] 0 0 0 [ 1638.747220] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1638.781060] lowmem_reserve[]: 0 0 0 0 0 [ 1638.786476] Node 1 Normal free:721808kB min:53696kB low:67120kB high:80544kB active_anon:1540kB inactive_anon:27880kB active_file:1084kB inactive_file:3728kB unevictable:0kB writepending:32kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:352kB pagetables:804kB bounce:0kB free_pcp:1120kB local_pcp:376kB free_cma:0kB [ 1638.814027] lowmem_reserve[]: 0 0 0 0 0 [ 1638.821494] Node 0 DMA: 8*4kB (UME) 1*8kB (M) 12*16kB (UE) 14*32kB (UME) 12*64kB (UME) 3*128kB (UE) 2*256kB (ME) 2*512kB (UE) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (U) = 11560kB [ 1638.821846] lowmem_reserve[]: 0 0 0 0 0 [ 1638.847979] Node 0 DMA: 8*4kB (UME) 1*8kB (M) 12*16kB (UE) 14*32kB (UME) 12*64kB (UME) 3*128kB (UE) 2*256kB (ME) 2*512kB (UE) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (U) = 11560kB [ 1638.870496] Node 0 DMA32: 9918*4kB (UE) 3524*8kB (UME) 743*16kB (UME) 249*32kB (UME) 544*64kB (UME) 281*128kB (UME) 84*256kB (U) 7*512kB (UM) 5*1024kB (U) 3*2048kB (U) 0*4096kB = 194856kB [ 1638.892935] Node 0 DMA32: 9918*4kB (UE) 3518*8kB (UME) 743*16kB (UME) 249*32kB (UME) 544*64kB (UME) 281*128kB (UME) 84*256kB (U) 7*512kB (UM) 5*1024kB (U) 3*2048kB (U) 0*4096kB = 194808kB [ 1638.916173] warn_alloc_show_mem: 1 callbacks suppressed [ 1638.916177] Mem-Info: [ 1638.924034] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1638.924082] Node 1 Normal: 23794*4kB (U) 10404*8kB (UM) 4557*16kB (UME) 2209*32kB [ 1638.938946] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1638.961759] (UME) 4881*64kB (UM) 632*128kB (U) 242*256kB (U) 57*512kB (U) 46*1024kB (UM) 7*2048kB (UM) 1*4096kB (U) = 871960kB [ 1638.966219] active_anon:13962 inactive_anon:24292 isolated_anon:0 [ 1638.966219] active_file:555 inactive_file:2097 isolated_file:0 [ 1638.966219] unevictable:0 dirty:32 writeback:0 unstable:0 [ 1638.966219] slab_reclaimable:13505 slab_unreclaimable:125275 [ 1638.966219] mapped:54787 shmem:25358 pagetables:786 bounce:0 [ 1638.966219] free:278033 free_pcp:532 free_cma:0 [ 1639.005578] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1639.015789] Node 1 Normal: 23923*4kB (UM) 10472*8kB (UM) 4619*16kB (UME) 2267*32kB (UME) 4940*64kB (UM) 732*128kB (U) 268*256kB (U) 58*512kB (U) 46*1024kB (UM) 7*2048kB (UM) 1*4096kB (U) = 899612kB [ 1639.052465] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1639.059480] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1639.076281] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1639.081835] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1639.088261] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1639.100562] Node 0 active_anon:54356kB inactive_anon:69284kB active_file:1780kB inactive_file:4036kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:158016kB dirty:0kB writeback:0kB shmem:73408kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1639.110189] 27964 total pagecache pages [ 1639.133404] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1639.146432] 0 pages in swap cache [ 1639.146439] Swap cache stats: add 0, delete 0, find 0/0 [ 1639.146443] Free swap = 0kB [ 1639.146446] Total swap = 0kB [ 1639.146453] 2097051 pages RAM [ 1639.146457] 0 pages HighMem/MovableOnly [ 1639.146461] 363849 pages reserved [ 1639.146464] 0 pages cma reserved [ 1639.178993] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1639.185845] Node 1 active_anon:1492kB inactive_anon:27884kB active_file:1240kB inactive_file:3336kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:61232kB dirty:36kB writeback:0kB shmem:28024kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1639.188033] 27964 total pagecache pages [ 1639.220371] 0 pages in swap cache [ 1639.224383] Swap cache stats: add 0, delete 0, find 0/0 [ 1639.229854] Free swap = 0kB [ 1639.232896] Total swap = 0kB [ 1639.236514] 2097051 pages RAM [ 1639.239727] 0 pages HighMem/MovableOnly [ 1639.243828] 363849 pages reserved [ 1639.248627] 0 pages cma reserved [ 1639.252026] Out of memory: Kill process 7961 (syz-fuzzer) score 5 or sacrifice child [ 1639.260379] Node 0 DMA free:11720kB min:204kB low:252kB high:300kB active_anon:20kB inactive_anon:100kB active_file:204kB inactive_file:40kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:8kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1639.262546] Killed process 10688 (syz-executor.5) total-vm:84924kB, anon-rss:60kB, file-rss:904kB, shmem-rss:0kB [ 1639.314048] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1639.319267] Node 0 DMA32 free:231464kB min:36200kB low:45248kB high:54296kB active_anon:54336kB inactive_anon:69184kB active_file:1556kB inactive_file:3916kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7424kB pagetables:2400kB bounce:0kB free_pcp:1088kB local_pcp:468kB free_cma:0kB [ 1639.324682] device bridge_slave_1 left promiscuous mode [ 1639.370612] oom_reaper: reaped process 10688 (syz-executor.5), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1639.391903] bridge0: port 2(bridge_slave_1) entered disabled state [ 1639.393983] lowmem_reserve[]: 0 0 0 0 0 [ 1639.402450] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1639.430267] device bridge_slave_0 left promiscuous mode [ 1639.439412] bridge0: port 1(bridge_slave_0) entered disabled state [ 1639.455698] device veth1_macvtap left promiscuous mode [ 1639.461902] device veth0_macvtap left promiscuous mode [ 1639.463966] lowmem_reserve[]: 0 0 0 0 0 [ 1639.471361] Node 1 Normal free:797716kB min:53696kB low:67120kB high:80544kB active_anon:1492kB inactive_anon:27884kB active_file:1240kB inactive_file:3336kB unevictable:0kB writepending:36kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:320kB pagetables:736kB bounce:0kB free_pcp:1084kB local_pcp:672kB free_cma:0kB [ 1639.473215] device veth1_vlan left promiscuous mode [ 1639.516631] device veth0_vlan left promiscuous mode [ 1639.534043] lowmem_reserve[]: 0 0 0 0 0 09:40:42 executing program 3: socket(0x11, 0x2, 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000004980), 0x0, 0x0) getsockopt$X25_QBITINCL(r0, 0x106, 0x1, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x4, 0x7, 0x7, 0x6, 0xa, @remote, @private2={0xfc, 0x2, '\x00', 0x1}, 0x700, 0x20, 0x9, 0x5f3b}}) socket$vsock_dgram(0x28, 0x2, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000100)={0x80000004, 0x7}) [ 1639.538189] Node 0 DMA: 11*4kB (UME) 6*8kB (UM) 20*16kB (UE) 15*32kB (UME) 6*64kB (UME) 1*128kB (E) 2*256kB (ME) 2*512kB (UE) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (U) = 11132kB [ 1639.574042] Node 0 DMA32: 9996*4kB (UE) 3497*8kB (UE) 855*16kB (UE) 292*32kB (UE) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 90984kB [ 1639.603968] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1639.630681] Node 1 Normal: 23933*4kB (UM) 10484*8kB (UM) 4622*16kB (UME) 2268*32kB (UME) 4*64kB (M) 419*128kB (U) 268*256kB (U) 58*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 478324kB [ 1639.668699] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1639.690087] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1639.720844] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1639.748913] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1639.771450] 28445 total pagecache pages [ 1639.795859] 0 pages in swap cache [ 1639.801466] device hsr_slave_1 left promiscuous mode [ 1639.806250] Swap cache stats: add 0, delete 0, find 0/0 [ 1639.813511] Free swap = 0kB [ 1639.816897] Total swap = 0kB [ 1639.820129] 2097051 pages RAM [ 1639.823288] 0 pages HighMem/MovableOnly [ 1639.830507] 363849 pages reserved [ 1639.838822] 0 pages cma reserved [ 1639.862115] device hsr_slave_0 left promiscuous mode [ 1639.924883] team0 (unregistering): Port device team_slave_1 removed [ 1639.970127] team0 (unregistering): Port device team_slave_0 removed [ 1640.002255] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 1640.032627] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 1640.078770] bond0 (unregistering): Released all slaves [ 1640.223997] Bluetooth: hci2 command 0x0409 tx timeout [ 1640.264380] syz-executor.4: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1640.293207] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 1640.305216] syz-executor.3: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1640.319696] CPU: 0 PID: 10645 Comm: syz-executor.4 Not tainted 4.14.232-syzkaller #0 [ 1640.328205] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1640.337379] syz-executor.3 cpuset= [ 1640.337939] Call Trace: [ 1640.337941] / mems_allowed=0-1 [ 1640.342479] dump_stack+0x1b2/0x281 [ 1640.342492] warn_alloc.cold+0x96/0x1cc [ 1640.356388] ? zone_watermark_ok_safe+0x220/0x220 [ 1640.361368] __alloc_pages_nodemask+0x2127/0x2720 [ 1640.366509] ? lock_acquire+0x170/0x3f0 [ 1640.370586] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1640.376024] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1640.383244] ? __mutex_unlock_slowpath+0x75/0x770 [ 1640.388270] ? retint_kernel+0x2d/0x2d [ 1640.392429] alloc_pages_current+0x155/0x260 [ 1640.397094] ion_page_pool_alloc+0x118/0x1b0 [ 1640.401794] ion_system_heap_allocate+0x133/0x8c0 [ 1640.406827] ? _raw_spin_unlock+0x29/0x40 [ 1640.410959] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1640.416024] ? ion_system_contig_heap_create+0x130/0x130 [ 1640.421691] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1640.427239] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1640.432233] ion_alloc+0x27a/0x810 [ 1640.436061] ? ion_dma_buf_release+0x40/0x40 [ 1640.440649] ? __might_fault+0x177/0x1b0 [ 1640.444968] ion_ioctl+0xea/0x1f0 [ 1640.449188] ? ion_query_heaps+0x360/0x360 [ 1640.453741] ? ion_query_heaps+0x360/0x360 [ 1640.458323] do_vfs_ioctl+0x75a/0xff0 [ 1640.462372] ? ioctl_preallocate+0x1a0/0x1a0 [ 1640.466970] ? lock_downgrade+0x740/0x740 [ 1640.471536] ? __fget+0x225/0x360 [ 1640.475075] ? do_vfs_ioctl+0xff0/0xff0 [ 1640.479662] ? security_file_ioctl+0x83/0xb0 [ 1640.484108] SyS_ioctl+0x7f/0xb0 [ 1640.487556] ? do_vfs_ioctl+0xff0/0xff0 [ 1640.492079] do_syscall_64+0x1d5/0x640 [ 1640.496097] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1640.501472] RIP: 0033:0x4665f9 [ 1640.504667] RSP: 002b:00007f6205eee188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1640.512664] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1640.520512] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000006 [ 1640.528136] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1640.536014] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1640.543385] R13: 00007fffcb653cef R14: 00007f6205eee300 R15: 0000000000022000 [ 1640.550741] CPU: 1 PID: 10704 Comm: syz-executor.3 Not tainted 4.14.232-syzkaller #0 [ 1640.558742] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1640.568594] Call Trace: [ 1640.571290] dump_stack+0x1b2/0x281 [ 1640.575305] warn_alloc.cold+0x96/0x1cc [ 1640.579456] ? zone_watermark_ok_safe+0x220/0x220 [ 1640.584682] __alloc_pages_nodemask+0x2127/0x2720 [ 1640.589534] ? ___preempt_schedule+0x16/0x18 [ 1640.595159] ? lock_acquire+0x170/0x3f0 [ 1640.599308] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1640.604719] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1640.610642] ? __mutex_unlock_slowpath+0x75/0x770 [ 1640.616006] ? ion_page_pool_remove+0x15/0x280 [ 1640.620594] alloc_pages_current+0x155/0x260 [ 1640.625093] ion_page_pool_alloc+0x118/0x1b0 [ 1640.629961] ion_system_heap_allocate+0x133/0x8c0 [ 1640.634851] ? ion_alloc+0x187/0x810 [ 1640.638568] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1640.644479] ? ion_system_contig_heap_create+0x130/0x130 [ 1640.650049] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1640.655392] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1640.660599] ion_alloc+0x204/0x810 [ 1640.664511] ? ion_dma_buf_release+0x40/0x40 [ 1640.669046] ? __might_fault+0x177/0x1b0 [ 1640.673203] ion_ioctl+0xea/0x1f0 [ 1640.676985] ? ion_query_heaps+0x360/0x360 [ 1640.681401] ? ion_query_heaps+0x360/0x360 [ 1640.688163] do_vfs_ioctl+0x75a/0xff0 [ 1640.692204] ? ioctl_preallocate+0x1a0/0x1a0 [ 1640.696891] ? lock_downgrade+0x740/0x740 [ 1640.701127] ? __fget+0x225/0x360 [ 1640.704575] ? do_vfs_ioctl+0xff0/0xff0 [ 1640.708648] ? security_file_ioctl+0x83/0xb0 [ 1640.713230] SyS_ioctl+0x7f/0xb0 [ 1640.716857] ? do_vfs_ioctl+0xff0/0xff0 [ 1640.720973] do_syscall_64+0x1d5/0x640 [ 1640.725062] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1640.733460] RIP: 0033:0x4665f9 [ 1640.736663] RSP: 002b:00007fd59d707188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1640.744624] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1640.752327] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000006 [ 1640.760035] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1640.768009] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1640.776507] R13: 00007ffcfd15ebff R14: 00007fd59d707300 R15: 0000000000022000 [ 1640.790437] Mem-Info: [ 1640.796538] active_anon:14020 inactive_anon:24293 isolated_anon:24 [ 1640.796538] active_file:785 inactive_file:2375 isolated_file:0 [ 1640.796538] unevictable:0 dirty:28 writeback:0 unstable:0 [ 1640.796538] slab_reclaimable:13505 slab_unreclaimable:123002 [ 1640.796538] mapped:55401 shmem:25362 pagetables:764 bounce:0 [ 1640.796538] free:224479 free_pcp:376 free_cma:0 [ 1640.879802] Node 0 active_anon:54508kB inactive_anon:69300kB active_file:1844kB inactive_file:6420kB unevictable:0kB isolated(anon):48kB isolated(file):0kB mapped:160116kB dirty:104kB writeback:0kB shmem:73440kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1640.941795] Node 1 active_anon:1480kB inactive_anon:27884kB active_file:1356kB inactive_file:3024kB unevictable:0kB isolated(anon):48kB isolated(file):0kB mapped:61520kB dirty:8kB writeback:0kB shmem:28024kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1641.000842] Node 0 DMA free:11052kB min:204kB low:252kB high:300kB active_anon:20kB inactive_anon:100kB active_file:216kB inactive_file:52kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1641.085909] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1641.103925] Bluetooth: hci3 command 0x0409 tx timeout [ 1641.108460] Node 0 DMA32 free:342440kB min:36200kB low:45248kB high:54296kB active_anon:54504kB inactive_anon:69208kB active_file:1632kB inactive_file:6444kB unevictable:0kB writepending:128kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7424kB pagetables:2424kB bounce:0kB free_pcp:1340kB local_pcp:700kB free_cma:0kB [ 1641.182782] lowmem_reserve[]: 0 0 0 0 0 [ 1641.195717] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1641.298777] lowmem_reserve[]: 0 0 0 0 0 [ 1641.309081] Node 1 Normal free:677700kB min:53696kB low:67120kB high:80544kB active_anon:1480kB inactive_anon:27884kB active_file:1356kB inactive_file:3024kB unevictable:0kB writepending:8kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:320kB pagetables:632kB bounce:0kB free_pcp:1360kB local_pcp:716kB free_cma:0kB [ 1641.413884] lowmem_reserve[]: 0 0 0 0 0 [ 1641.418261] Node 0 DMA: 89*4kB (UME) 44*8kB (UM) 26*16kB (UE) 22*32kB (UME) 5*64kB (ME) 2*128kB (UE) 2*256kB (ME) 2*512kB (UE) 3*1024kB (UME) 2*2048kB (UE) 0*4096kB = 11108kB [ 1641.447783] Node 0 DMA32: 38424*4kB (UME) 18020*8kB (UME) 5969*16kB (UME) 2844*32kB (UME) 21*64kB (U) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 485712kB [ 1641.479118] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1641.528012] Node 1 Normal: 46471*4kB (UM) 18120*8kB (UM) 9887*16kB (UME) 7373*32kB (UE) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 724972kB [ 1641.564434] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1641.613879] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1641.636600] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1641.653871] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1641.662951] 28553 total pagecache pages [ 1641.670849] 0 pages in swap cache [ 1641.674559] Swap cache stats: add 0, delete 0, find 0/0 [ 1641.679929] Free swap = 0kB [ 1641.697950] Total swap = 0kB [ 1641.701095] 2097051 pages RAM [ 1641.709382] 0 pages HighMem/MovableOnly [ 1641.710255] syz-executor.1: [ 1641.713494] 363849 pages reserved [ 1641.713498] 0 pages cma reserved [ 1641.745446] page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1641.765758] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 1641.776601] CPU: 0 PID: 10647 Comm: syz-executor.1 Not tainted 4.14.232-syzkaller #0 [ 1641.785324] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1641.795044] Call Trace: [ 1641.797819] dump_stack+0x1b2/0x281 [ 1641.801640] warn_alloc.cold+0x96/0x1cc [ 1641.805654] ? zone_watermark_ok_safe+0x220/0x220 [ 1641.810530] __alloc_pages_nodemask+0x2127/0x2720 [ 1641.815556] ? lock_acquire+0x170/0x3f0 [ 1641.819723] ? lock_acquire+0x170/0x3f0 [ 1641.824156] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1641.829093] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1641.834754] ? __mutex_unlock_slowpath+0x75/0x770 [ 1641.840361] alloc_pages_current+0x155/0x260 [ 1641.845485] ion_page_pool_alloc+0x118/0x1b0 [ 1641.851315] ion_system_heap_allocate+0x133/0x8c0 [ 1641.856744] ? _raw_spin_unlock+0x29/0x40 [ 1641.861524] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1641.866564] ? ion_system_contig_heap_create+0x130/0x130 [ 1641.872106] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1641.878049] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1641.883334] ion_alloc+0x27a/0x810 [ 1641.887148] ? ion_dma_buf_release+0x40/0x40 [ 1641.891902] ? __might_fault+0x177/0x1b0 [ 1641.896315] ion_ioctl+0xea/0x1f0 [ 1641.899954] ? ion_query_heaps+0x360/0x360 [ 1641.904333] ? ion_query_heaps+0x360/0x360 [ 1641.908742] do_vfs_ioctl+0x75a/0xff0 [ 1641.913274] ? ioctl_preallocate+0x1a0/0x1a0 [ 1641.917684] ? lock_downgrade+0x740/0x740 [ 1641.921838] ? __fget+0x225/0x360 [ 1641.925470] ? do_vfs_ioctl+0xff0/0xff0 [ 1641.929623] ? security_file_ioctl+0x83/0xb0 [ 1641.934405] SyS_ioctl+0x7f/0xb0 [ 1641.938341] ? do_vfs_ioctl+0xff0/0xff0 [ 1641.943457] do_syscall_64+0x1d5/0x640 [ 1641.947714] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1641.953366] RIP: 0033:0x4665f9 [ 1641.956647] RSP: 002b:00007f22b5267188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1641.964876] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1641.972426] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000008 [ 1641.979873] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1641.987403] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1641.997278] R13: 00007ffea96cbc0f R14: 00007f22b5267300 R15: 0000000000022000 [ 1642.064387] IPVS: ftp: loaded support on port[0] = 21 [ 1642.072312] warn_alloc_show_mem: 1 callbacks suppressed [ 1642.079806] Mem-Info: [ 1642.082433] active_anon:14002 inactive_anon:24298 isolated_anon:0 [ 1642.082433] active_file:1337 inactive_file:1712 isolated_file:0 [ 1642.082433] unevictable:0 dirty:37 writeback:0 unstable:0 [ 1642.082433] slab_reclaimable:13503 slab_unreclaimable:123224 [ 1642.082433] mapped:55454 shmem:25366 pagetables:764 bounce:0 [ 1642.082433] free:235412 free_pcp:74 free_cma:0 [ 1642.169898] Node 0 active_anon:54528kB inactive_anon:69308kB active_file:3264kB inactive_file:4972kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:160204kB dirty:140kB writeback:0kB shmem:73440kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1642.216955] IPVS: ftp: loaded support on port[0] = 21 [ 1642.224313] Bluetooth: hci5 command 0x0409 tx timeout [ 1642.279467] Node 1 active_anon:1480kB inactive_anon:27884kB active_file:2084kB inactive_file:1876kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:61612kB dirty:8kB writeback:0kB shmem:28024kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1642.309933] Node 0 DMA free:11024kB min:204kB low:252kB high:300kB active_anon:20kB inactive_anon:100kB active_file:216kB inactive_file:52kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1642.316822] Bluetooth: hci2 command 0x041b tx timeout [ 1642.339853] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1642.349681] Node 0 DMA32 free:44764kB min:36200kB low:45248kB high:54296kB active_anon:54508kB inactive_anon:69208kB active_file:3048kB inactive_file:4920kB unevictable:0kB writepending:140kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7424kB pagetables:2424kB bounce:0kB free_pcp:348kB local_pcp:228kB free_cma:0kB [ 1642.387746] lowmem_reserve[]: 0 0 0 0 0 [ 1642.399272] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1642.471882] lowmem_reserve[]: 0 0 0 0 0 [ 1642.481871] Node 1 Normal free:551548kB min:53696kB low:67120kB high:80544kB active_anon:1480kB inactive_anon:27884kB active_file:2084kB inactive_file:1876kB unevictable:0kB writepending:8kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:480kB pagetables:632kB bounce:0kB free_pcp:308kB local_pcp:220kB free_cma:0kB [ 1642.539417] IPVS: ftp: loaded support on port[0] = 21 [ 1642.549758] chnl_net:caif_netlink_parms(): no params data found [ 1642.581456] lowmem_reserve[]: 0 0 0 0 0 [ 1642.586847] Node 0 DMA: 84*4kB (UME) 48*8kB (UM) 28*16kB (UE) 22*32kB (UME) 5*64kB (ME) 1*128kB (E) 2*256kB (ME) 2*512kB (UE) 3*1024kB (UME) 2*2048kB (UE) 0*4096kB = 11024kB [ 1642.605232] Node 0 DMA32: 217*4kB (ME) 488*8kB (UMEH) 137*16kB (UME) 1145*32kB (UMEH) 3*64kB (U) 4*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 44308kB [ 1642.621527] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1642.647744] Node 1 Normal: 1*4kB (U) 2222*8kB (UM) 9597*16kB (UE) 8229*32kB (UME) 1*64kB (M) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 434724kB [ 1642.693371] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1642.734199] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1642.764570] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1642.803886] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1642.812854] 28452 total pagecache pages [ 1642.827418] chnl_net:caif_netlink_parms(): no params data found [ 1642.845038] 0 pages in swap cache [ 1642.848785] Swap cache stats: add 0, delete 0, find 0/0 [ 1642.874419] Free swap = 0kB [ 1642.877752] Total swap = 0kB [ 1642.880771] 2097051 pages RAM [ 1642.926935] 0 pages HighMem/MovableOnly [ 1642.931406] 363849 pages reserved [ 1642.977595] 0 pages cma reserved [ 1643.184690] Bluetooth: hci3 command 0x041b tx timeout [ 1643.437200] oom_reaper: reaped process 10704 (syz-executor.3), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1643.457875] in:imklog invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1643.482588] in:imklog cpuset=/ mems_allowed=0-1 [ 1643.489902] CPU: 0 PID: 10651 Comm: in:imklog Not tainted 4.14.232-syzkaller #0 [ 1643.498417] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1643.509303] Call Trace: [ 1643.512350] dump_stack+0x1b2/0x281 [ 1643.516688] dump_header+0x178/0x82f [ 1643.520995] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1643.528029] ? ___ratelimit+0x2cd/0x530 [ 1643.532739] oom_kill_process.cold+0x10/0xa40 [ 1643.538040] out_of_memory+0xe3e/0x1190 [ 1643.543265] ? oom_killer_disable+0x1c0/0x1c0 [ 1643.548642] ? mutex_trylock+0x152/0x1a0 [ 1643.553230] __alloc_pages_nodemask+0x23e1/0x2720 [ 1643.558916] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1643.564133] alloc_pages_current+0x155/0x260 [ 1643.568655] filemap_fault+0x11a1/0x1ad0 [ 1643.573150] ext4_filemap_fault+0x84/0xb0 [ 1643.577722] __do_fault+0xfa/0x380 [ 1643.581493] __handle_mm_fault+0x2497/0x4620 [ 1643.586199] ? vm_insert_page+0x7c0/0x7c0 [ 1643.590873] ? lock_downgrade+0x740/0x740 [ 1643.595413] ? mark_held_locks+0xa6/0xf0 [ 1643.599587] handle_mm_fault+0x455/0x9c0 [ 1643.604187] __do_page_fault+0x549/0xad0 [ 1643.608439] ? spurious_fault+0x640/0x640 [ 1643.612887] ? do_page_fault+0x60/0x500 [ 1643.616880] ? page_fault+0x2f/0x50 [ 1643.620621] page_fault+0x45/0x50 [ 1643.624336] RIP: 1fa0:0x1f9f [ 1643.627353] RSP: 0000:000055f531da59d0 EFLAGS: 7fc10ed37da0 [ 1643.627907] syz-executor.1: [ 1643.634070] syz-executor.4: [ 1643.634218] page allocation failure: order:0 [ 1643.637287] page allocation failure: order:0 [ 1643.640516] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1643.661681] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 1643.666947] CPU: 0 PID: 10647 Comm: syz-executor.1 Not tainted 4.14.232-syzkaller #0 [ 1643.676690] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1643.688105] Call Trace: [ 1643.691309] dump_stack+0x1b2/0x281 [ 1643.692723] Mem-Info: [ 1643.695426] warn_alloc.cold+0x96/0x1cc [ 1643.695439] ? zone_watermark_ok_safe+0x220/0x220 [ 1643.695448] ? usleep_range+0x130/0x130 [ 1643.695456] ? try_to_free_pages+0x23f/0x6e0 [ 1643.695466] ? _find_next_bit+0xdb/0x100 [ 1643.695476] ? run_timer_softirq+0x5a0/0x5a0 [ 1643.695492] __alloc_pages_nodemask+0x2127/0x2720 [ 1643.695507] ? lock_acquire+0x170/0x3f0 [ 1643.695522] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1643.695531] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1643.695547] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1643.695566] alloc_pages_current+0x155/0x260 [ 1643.695578] ion_page_pool_alloc+0x118/0x1b0 [ 1643.705062] active_anon:13981 inactive_anon:24298 isolated_anon:0 [ 1643.705062] active_file:11 inactive_file:262 isolated_file:0 [ 1643.705062] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1643.705062] slab_reclaimable:13426 slab_unreclaimable:122707 [ 1643.705062] mapped:53028 shmem:25366 pagetables:764 bounce:0 [ 1643.705062] free:55953 free_pcp:17 free_cma:0 [ 1643.707277] ion_system_heap_allocate+0x133/0x8c0 [ 1643.707290] ? _raw_spin_unlock+0x29/0x40 [ 1643.707299] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1643.707307] ? ion_system_contig_heap_create+0x130/0x130 [ 1643.707318] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1643.707329] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1643.707339] ion_alloc+0x27a/0x810 [ 1643.711778] Node 0 active_anon:54452kB inactive_anon:69308kB active_file:8kB inactive_file:1108kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:153816kB dirty:0kB writeback:0kB shmem:73440kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1643.715997] ? ion_dma_buf_release+0x40/0x40 [ 1643.716009] ? __might_fault+0x177/0x1b0 [ 1643.716019] ion_ioctl+0xea/0x1f0 [ 1643.716027] ? ion_query_heaps+0x360/0x360 [ 1643.716037] ? ion_query_heaps+0x360/0x360 [ 1643.716045] do_vfs_ioctl+0x75a/0xff0 [ 1643.716054] ? ioctl_preallocate+0x1a0/0x1a0 [ 1643.716062] ? lock_downgrade+0x740/0x740 [ 1643.716074] ? __fget+0x225/0x360 [ 1643.716082] ? do_vfs_ioctl+0xff0/0xff0 [ 1643.716092] ? security_file_ioctl+0x83/0xb0 [ 1643.716102] SyS_ioctl+0x7f/0xb0 [ 1643.716109] ? do_vfs_ioctl+0xff0/0xff0 [ 1643.716119] do_syscall_64+0x1d5/0x640 [ 1643.716138] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1643.744194] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1643.749258] RIP: 0033:0x4665f9 [ 1643.749263] RSP: 002b:00007f22b5267188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1643.749271] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1643.749276] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000008 [ 1643.749280] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1643.749285] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1643.749289] R13: 00007ffea96cbc0f R14: 00007f22b5267300 R15: 0000000000022000 [ 1643.749621] Mem-Info: [ 1643.775395] (null) [ 1643.793618] Node 1 active_anon:1472kB inactive_anon:27884kB active_file:36kB inactive_file:40kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:58396kB dirty:0kB writeback:0kB shmem:28024kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1643.793623] Node 0 DMA free:10960kB min:204kB low:252kB high:300kB active_anon:20kB inactive_anon:100kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1643.793643] lowmem_reserve[]: [ 1643.896540] syz-executor.4 cpuset= [ 1643.898939] active_anon:13981 inactive_anon:24298 isolated_anon:0 [ 1643.898939] active_file:11 inactive_file:637 isolated_file:0 [ 1643.898939] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1643.898939] slab_reclaimable:13426 slab_unreclaimable:122838 [ 1643.898939] mapped:53328 shmem:25366 pagetables:764 bounce:0 [ 1643.898939] free:115990 free_pcp:336 free_cma:0 [ 1643.925522] / [ 1643.931062] Node 0 active_anon:54452kB inactive_anon:69308kB active_file:4kB inactive_file:2532kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:154996kB dirty:0kB writeback:0kB shmem:73440kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1643.939101] mems_allowed=0-1 [ 1643.953732] Node 1 active_anon:1472kB inactive_anon:27884kB active_file:36kB inactive_file:40kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:58428kB dirty:0kB writeback:0kB shmem:28024kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1644.063778] CPU: 1 PID: 10645 Comm: syz-executor.4 Not tainted 4.14.232-syzkaller #0 [ 1644.087708] 0 [ 1644.089314] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1644.120104] 2717 [ 1644.123173] Call Trace: [ 1644.151444] 2718 [ 1644.159721] dump_stack+0x1b2/0x281 [ 1644.159736] warn_alloc.cold+0x96/0x1cc [ 1644.159747] ? zone_watermark_ok_safe+0x220/0x220 [ 1644.159755] ? usleep_range+0x130/0x130 [ 1644.159764] ? queue_work_on+0x10d/0x1d0 [ 1644.159774] ? _find_next_bit+0xdb/0x100 [ 1644.159784] ? run_timer_softirq+0x5a0/0x5a0 [ 1644.159797] __alloc_pages_nodemask+0x2127/0x2720 [ 1644.159811] ? lock_acquire+0x170/0x3f0 [ 1644.159827] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1644.173717] 2718 [ 1644.174527] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1644.177619] 2718 [ 1644.179946] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1644.183775] Node 0 [ 1644.187865] alloc_pages_current+0x155/0x260 [ 1644.192699] DMA32 free:212056kB min:36200kB low:45248kB high:54296kB active_anon:54432kB inactive_anon:69208kB active_file:804kB inactive_file:1464kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7424kB pagetables:2424kB bounce:0kB free_pcp:1380kB local_pcp:648kB free_cma:0kB [ 1644.196740] ion_page_pool_alloc+0x118/0x1b0 [ 1644.196750] ion_system_heap_allocate+0x133/0x8c0 [ 1644.196761] ? _raw_spin_unlock+0x29/0x40 [ 1644.196768] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1644.196778] ? ion_system_contig_heap_create+0x130/0x130 [ 1644.196786] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1644.196798] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1644.253704] lowmem_reserve[]: [ 1644.278443] ion_alloc+0x27a/0x810 [ 1644.278458] ? ion_dma_buf_release+0x40/0x40 [ 1644.278469] ? __might_fault+0x177/0x1b0 [ 1644.278479] ion_ioctl+0xea/0x1f0 [ 1644.278487] ? ion_query_heaps+0x360/0x360 [ 1644.278497] ? ion_query_heaps+0x360/0x360 [ 1644.278506] do_vfs_ioctl+0x75a/0xff0 [ 1644.278517] ? ioctl_preallocate+0x1a0/0x1a0 [ 1644.293729] Node 0 [ 1644.297310] ? lock_downgrade+0x740/0x740 [ 1644.302835] DMA free:11120kB min:204kB low:252kB high:300kB active_anon:20kB inactive_anon:100kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1644.307851] ? __fget+0x225/0x360 [ 1644.307860] ? do_vfs_ioctl+0xff0/0xff0 [ 1644.307870] ? security_file_ioctl+0x83/0xb0 [ 1644.307879] SyS_ioctl+0x7f/0xb0 [ 1644.307887] ? do_vfs_ioctl+0xff0/0xff0 [ 1644.307897] do_syscall_64+0x1d5/0x640 [ 1644.307911] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1644.307918] RIP: 0033:0x4665f9 [ 1644.307922] RSP: 002b:00007f6205eee188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1644.307939] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1644.353723] lowmem_reserve[]: [ 1644.356624] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000006 [ 1644.413700] 0 [ 1644.413807] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1644.417815] 0 [ 1644.427050] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1644.427055] R13: 00007fffcb653cef R14: 00007f6205eee300 R15: 0000000000022000 [ 1644.433717] Bluetooth: hci5 command 0x041b tx timeout [ 1644.473679] 0 2717 2718 2718 2718 [ 1644.482121] Node 0 DMA32 free:225564kB min:36200kB low:45248kB high:54296kB active_anon:54432kB inactive_anon:69208kB active_file:804kB inactive_file:1464kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7424kB pagetables:2424kB bounce:0kB free_pcp:1460kB local_pcp:728kB free_cma:0kB [ 1644.513653] 0 0 0 [ 1644.515817] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1644.543753] lowmem_reserve[]: 0 0 0 0 0 [ 1644.564220] Node 1 Normal free:671992kB min:53696kB low:67120kB high:80544kB active_anon:1472kB inactive_anon:27884kB active_file:36kB inactive_file:40kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:416kB pagetables:632kB bounce:0kB free_pcp:1336kB local_pcp:624kB free_cma:0kB [ 1644.583760] Bluetooth: hci2 command 0x040f tx timeout [ 1644.604539] lowmem_reserve[]: 0 0 0 0 0 [ 1644.608564] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1644.693669] lowmem_reserve[]: 0 0 0 0 0 [ 1644.698087] Node 0 DMA: 22*4kB (UME) 53*8kB (UM) 36*16kB (UME) 26*32kB (UME) 8*64kB (UME) 1*128kB (E) 2*256kB (ME) 3*512kB (UE) 3*1024kB (UME) 2*2048kB (UE) 0*4096kB = 11776kB [ 1644.723478] lowmem_reserve[]: 0 0 0 0 0 [ 1644.728307] Node 1 Normal free:816392kB min:53696kB low:67120kB high:80544kB active_anon:1472kB inactive_anon:27884kB active_file:36kB inactive_file:40kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:416kB pagetables:632kB bounce:0kB free_pcp:1312kB local_pcp:620kB free_cma:0kB [ 1644.774144] Node 0 DMA32: 4710*4kB (UMEH) 3322*8kB (UMEH) 3452*16kB (UMEH) 2698*32kB (UMEH) 2426*64kB (UH) 387*128kB (U) 15*256kB (U) 2*512kB (U) 13*1024kB (U) 2*2048kB (U) 0*4096kB = 414056kB [ 1644.801823] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1644.814711] lowmem_reserve[]: 0 0 0 0 0 [ 1644.818789] Node 0 DMA: 22*4kB (UME) 53*8kB (UM) 36*16kB (UME) 26*32kB (UME) 8*64kB (UME) 1*128kB (E) 2*256kB (ME) 3*512kB (UE) 3*1024kB (UME) 2*2048kB (UE) 0*4096kB = 11776kB [ 1644.824806] chnl_net:caif_netlink_parms(): no params data found [ 1644.836591] Node 1 Normal: 7378*4kB (UM) 4242*8kB (UM) 3241*16kB (UM) 4048*32kB (UM) 6867*64kB (UM) 585*128kB (UM) 88*256kB (U) 12*512kB (U) 18*1024kB (U) 2*2048kB (U) 2*4096kB (U) = 818600kB [ 1644.862907] Node 0 DMA32: 357*4kB (UMEH) 2463*8kB (UMEH) 3460*16kB (UMEH) 2703*32kB (UMEH) 2427*64kB (UH) 389*128kB (U) 15*256kB (U) 2*512kB (U) 13*1024kB (U) 2*2048kB (U) 0*4096kB = 390380kB [ 1644.882059] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1644.897388] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1644.912445] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1644.939484] Node 1 Normal: 7378*4kB (UM) 4252*8kB (UM) 3243*16kB (UM) 4049*32kB (UM) 6867*64kB (UM) 585*128kB (UM) 88*256kB (U) 12*512kB (U) 18*1024kB (U) 2*2048kB (U) 2*4096kB (U) = 818744kB [ 1644.959116] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1644.969605] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1644.979927] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1644.989939] 26486 total pagecache pages [ 1644.994510] 0 pages in swap cache [ 1644.998063] Swap cache stats: add 0, delete 0, find 0/0 [ 1645.006329] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1645.010583] bridge0: port 1(bridge_slave_0) entered blocking state [ 1645.022417] Free swap = 0kB [ 1645.027255] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1645.033765] bridge0: port 1(bridge_slave_0) entered disabled state [ 1645.042240] Total swap = 0kB [ 1645.047723] 2097051 pages RAM [ 1645.051455] 0 pages HighMem/MovableOnly [ 1645.054929] device bridge_slave_0 entered promiscuous mode [ 1645.062771] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1645.072753] 363849 pages reserved [ 1645.080949] 0 pages cma reserved [ 1645.085347] Out of memory (oom_kill_allocating_task): Kill process 10651 (in:imklog) score 0 or sacrifice child [ 1645.088901] bridge0: port 1(bridge_slave_0) entered blocking state [ 1645.097973] 26486 total pagecache pages [ 1645.109269] 0 pages in swap cache [ 1645.112860] Swap cache stats: add 0, delete 0, find 0/0 [ 1645.119365] Killed process 10649 (rsyslogd) total-vm:254332kB, anon-rss:1452kB, file-rss:0kB, shmem-rss:0kB [ 1645.129795] bridge0: port 1(bridge_slave_0) entered disabled state [ 1645.130439] Free swap = 0kB [ 1645.142839] oom_reaper: reaped process 10649 (rsyslogd), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1645.153501] Total swap = 0kB [ 1645.154557] device bridge_slave_0 entered promiscuous mode [ 1645.157464] 2097051 pages RAM [ 1645.173114] bridge0: port 2(bridge_slave_1) entered blocking state [ 1645.174164] 0 pages HighMem/MovableOnly [ 1645.183768] bridge0: port 2(bridge_slave_1) entered disabled state [ 1645.192143] device bridge_slave_1 entered promiscuous mode [ 1645.194562] 363849 pages reserved [ 1645.202616] 0 pages cma reserved [ 1645.231556] bridge0: port 2(bridge_slave_1) entered blocking state [ 1645.241183] bridge0: port 2(bridge_slave_1) entered disabled state [ 1645.260261] device bridge_slave_1 entered promiscuous mode [ 1645.266362] Bluetooth: hci3 command 0x040f tx timeout 09:40:48 executing program 1: socket(0x11, 0x2, 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000004980), 0x0, 0x0) getsockopt$X25_QBITINCL(r0, 0x106, 0x1, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x4, 0x7, 0x7, 0x6, 0xa, @remote, @private2={0xfc, 0x2, '\x00', 0x1}, 0x700, 0x20, 0x9, 0x5f3b}}) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000004980), 0x0, 0x0) getsockopt$X25_QBITINCL(r1, 0x106, 0x1, 0x0, 0x0) r2 = socket$vsock_dgram(0x28, 0x2, 0x0) ioctl$sock_SIOCDELRT(r2, 0x890c, &(0x7f0000000180)={0x0, @llc={0x1a, 0x33a, 0x9, 0x6, 0x27, 0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, @vsock={0x28, 0x0, 0x2710}, @isdn={0x22, 0xcb, 0x81, 0x2, 0x69}, 0xfff, 0x0, 0x0, 0x0, 0x81, &(0x7f0000000140)='dummy0\x00', 0x80000000, 0x101, 0x8001}) openat$zero(0xffffffffffffff9c, &(0x7f00000000c0), 0x800, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000100)={0x80000004, 0x7}) socket(0x27, 0xa, 0x40000801) [ 1645.378916] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 1645.407384] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 1645.417780] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1645.435439] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1645.458943] bridge0: port 1(bridge_slave_0) entered blocking state [ 1645.465914] bridge0: port 1(bridge_slave_0) entered disabled state [ 1645.472678] Mem-Info: [ 1645.476186] device bridge_slave_0 entered promiscuous mode [ 1645.482142] active_anon:13504 inactive_anon:24298 isolated_anon:0 [ 1645.482142] active_file:1157 inactive_file:2138 isolated_file:0 [ 1645.482142] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1645.482142] slab_reclaimable:13424 slab_unreclaimable:123613 [ 1645.482142] mapped:54913 shmem:25366 pagetables:698 bounce:0 [ 1645.482142] free:244339 free_pcp:490 free_cma:0 [ 1645.535748] bridge0: port 2(bridge_slave_1) entered blocking state [ 1645.543006] bridge0: port 2(bridge_slave_1) entered disabled state [ 1645.550858] device bridge_slave_1 entered promiscuous mode 09:40:48 executing program 3: socket(0x11, 0x2, 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000004980), 0x0, 0x0) getsockopt$X25_QBITINCL(r0, 0x106, 0x1, 0x0, 0x0) socket$vsock_dgram(0x28, 0x2, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000100)={0x80000004, 0x7}) [ 1645.558638] Node 0 active_anon:53044kB inactive_anon:69308kB active_file:4580kB inactive_file:8524kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:161176kB dirty:0kB writeback:0kB shmem:73440kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1645.601155] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 1645.610475] team0: Port device team_slave_0 added [ 1645.635689] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 1645.645421] team0: Port device team_slave_0 added [ 1645.651158] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 1645.665251] team0: Port device team_slave_1 added [ 1645.682558] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 1645.692892] Node 1 active_anon:972kB inactive_anon:27884kB active_file:48kB inactive_file:28kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:58476kB dirty:0kB writeback:0kB shmem:28024kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1645.723075] team0: Port device team_slave_1 added [ 1645.737540] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 1645.759762] Node 0 DMA free:11112kB min:204kB low:252kB high:300kB active_anon:20kB inactive_anon:100kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1645.788428] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1645.794029] Node 0 DMA32 free:46504kB min:36200kB low:45248kB high:54296kB active_anon:53224kB inactive_anon:69208kB active_file:4580kB inactive_file:9224kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7424kB pagetables:2308kB bounce:0kB free_pcp:420kB local_pcp:288kB free_cma:0kB [ 1645.834270] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1645.855996] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1645.862689] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1645.890115] lowmem_reserve[]: 0 0 0 0 0 [ 1645.895393] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1645.923862] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1645.945516] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1645.955009] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1645.962569] syz-executor.1: [ 1646.002569] lowmem_reserve[]: 0 0 0 0 0 [ 1646.011687] Node 1 Normal free:249804kB min:53696kB low:67120kB high:80544kB active_anon:836kB inactive_anon:27880kB active_file:56kB inactive_file:20kB unevictable:0kB writepending:8kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:384kB pagetables:504kB bounce:0kB free_pcp:236kB local_pcp:236kB free_cma:0kB [ 1646.012972] page allocation failure: order:4 [ 1646.042231] lowmem_reserve[]: 0 0 0 0 0 [ 1646.048825] syz-executor.3: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1646.053117] Node 0 DMA: 22*4kB (UME) 45*8kB (UM) 36*16kB (UME) 26*32kB (UME) 6*64kB (UME) 1*128kB (E) 2*256kB (ME) 2*512kB (UE) 3*1024kB (UME) 2*2048kB (UE) 0*4096kB = 11072kB [ 1646.070241] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1646.084503] Node 0 DMA32: 373*4kB (UMEH) 499*8kB (UMEH) 157*16kB (UMEH) 44*32kB (UMEH) 1*64kB (H) 192*128kB (U) 15*256kB (U) 1*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 38396kB [ 1646.098524] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1646.110740] Node 0 [ 1646.122245] (null) [ 1646.127082] Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1646.129464] syz-executor.1 cpuset= [ 1646.145722] syz-executor.3 cpuset= [ 1646.150126] / [ 1646.153711] / [ 1646.157061] mems_allowed=0-1 [ 1646.158436] mems_allowed=0-1 [ 1646.162900] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1646.169356] Node 1 [ 1646.172560] CPU: 0 PID: 11094 Comm: syz-executor.1 Not tainted 4.14.232-syzkaller #0 [ 1646.172566] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1646.172569] Call Trace: [ 1646.172586] dump_stack+0x1b2/0x281 [ 1646.172599] warn_alloc.cold+0x96/0x1cc [ 1646.172611] ? zone_watermark_ok_safe+0x220/0x220 [ 1646.172635] __alloc_pages_nodemask+0x2127/0x2720 [ 1646.172650] ? lock_acquire+0x170/0x3f0 [ 1646.183303] Normal: [ 1646.183419] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1646.215396] 7329*4kB [ 1646.218664] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1646.218677] ? __mutex_unlock_slowpath+0x75/0x770 [ 1646.225776] (UM) [ 1646.226191] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1646.238588] 4355*8kB [ 1646.240109] alloc_pages_current+0x155/0x260 [ 1646.240123] ion_page_pool_alloc+0x118/0x1b0 [ 1646.240132] ion_system_heap_allocate+0x133/0x8c0 [ 1646.240141] ? ion_alloc+0x187/0x810 [ 1646.240153] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1646.240161] ? ion_system_contig_heap_create+0x130/0x130 [ 1646.240170] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1646.240179] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1646.240188] ion_alloc+0x204/0x810 [ 1646.251030] (U) [ 1646.254982] ? ion_dma_buf_release+0x40/0x40 [ 1646.254996] ? __might_fault+0x177/0x1b0 [ 1646.255006] ion_ioctl+0xea/0x1f0 [ 1646.255018] ? ion_query_heaps+0x360/0x360 [ 1646.267498] 3238*16kB [ 1646.268531] ? ion_query_heaps+0x360/0x360 [ 1646.268542] do_vfs_ioctl+0x75a/0xff0 [ 1646.268554] ? ioctl_preallocate+0x1a0/0x1a0 [ 1646.291020] (UM) [ 1646.294359] ? lock_downgrade+0x740/0x740 [ 1646.294376] ? __fget+0x225/0x360 [ 1646.294384] ? do_vfs_ioctl+0xff0/0xff0 [ 1646.294396] ? security_file_ioctl+0x83/0xb0 [ 1646.294405] SyS_ioctl+0x7f/0xb0 [ 1646.294411] ? do_vfs_ioctl+0xff0/0xff0 [ 1646.294421] do_syscall_64+0x1d5/0x640 [ 1646.294435] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1646.294443] RIP: 0033:0x4665f9 [ 1646.294447] RSP: 002b:00007f22b5267188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1646.294456] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1646.294461] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000008 [ 1646.294468] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1646.302044] 4051*32kB [ 1646.305236] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1646.305241] R13: 00007ffea96cbc0f R14: 00007f22b5267300 R15: 0000000000022000 [ 1646.382719] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1646.387943] CPU: 1 PID: 11122 Comm: syz-executor.3 Not tainted 4.14.232-syzkaller #0 [ 1646.418823] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1646.420488] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1646.420493] Call Trace: [ 1646.420513] dump_stack+0x1b2/0x281 [ 1646.420528] warn_alloc.cold+0x96/0x1cc [ 1646.486084] ? zone_watermark_ok_safe+0x220/0x220 [ 1646.491133] __alloc_pages_nodemask+0x2127/0x2720 [ 1646.496360] ? __schedule+0x893/0x1de0 [ 1646.500435] ? lock_acquire+0x170/0x3f0 [ 1646.505067] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1646.510019] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1646.515956] ? __mutex_unlock_slowpath+0x75/0x770 [ 1646.521523] alloc_pages_current+0x155/0x260 [ 1646.526142] ion_page_pool_alloc+0x118/0x1b0 [ 1646.530883] ion_system_heap_allocate+0x133/0x8c0 [ 1646.536084] ? ion_alloc+0x187/0x810 [ 1646.540165] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1646.545891] ? ion_system_contig_heap_create+0x130/0x130 [ 1646.552102] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1646.557239] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1646.562392] ion_alloc+0x204/0x810 [ 1646.566123] ? ion_dma_buf_release+0x40/0x40 [ 1646.570808] ? __might_fault+0x177/0x1b0 [ 1646.575261] ion_ioctl+0xea/0x1f0 [ 1646.578906] ? ion_query_heaps+0x360/0x360 [ 1646.581092] Mem-Info: [ 1646.583408] ? ion_query_heaps+0x360/0x360 [ 1646.583419] do_vfs_ioctl+0x75a/0xff0 [ 1646.583433] ? ioctl_preallocate+0x1a0/0x1a0 [ 1646.599305] ? lock_downgrade+0x740/0x740 [ 1646.603462] ? __fget+0x225/0x360 [ 1646.606916] ? do_vfs_ioctl+0xff0/0xff0 [ 1646.608018] active_anon:13738 inactive_anon:24297 isolated_anon:12 [ 1646.608018] active_file:1242 inactive_file:2580 isolated_file:0 [ 1646.608018] unevictable:0 dirty:45 writeback:0 unstable:0 [ 1646.608018] slab_reclaimable:13416 slab_unreclaimable:124098 [ 1646.608018] mapped:55344 shmem:25365 pagetables:727 bounce:0 [ 1646.608018] free:226587 free_pcp:402 free_cma:0 [ 1646.610979] ? security_file_ioctl+0x83/0xb0 [ 1646.610990] SyS_ioctl+0x7f/0xb0 [ 1646.611008] ? do_vfs_ioctl+0xff0/0xff0 [ 1646.659058] do_syscall_64+0x1d5/0x640 [ 1646.663232] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1646.668516] RIP: 0033:0x4665f9 [ 1646.671703] RSP: 002b:00007fd59d707188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1646.679789] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1646.689334] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000006 [ 1646.697402] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1646.703321] Node 0 active_anon:54116kB inactive_anon:69308kB active_file:4912kB inactive_file:10200kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:162760kB dirty:172kB writeback:0kB shmem:73440kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1646.705203] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1646.705208] R13: 00007ffcfd15ebff R14: 00007fd59d707300 R15: 0000000000022000 [ 1646.708837] Bluetooth: hci2 command 0x0419 tx timeout [ 1646.756067] Bluetooth: hci5 command 0x040f tx timeout [ 1646.762701] (UM) 713*64kB (UM) 103*128kB (UM) 39*256kB (UM) 16*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 322588kB [ 1646.774033] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1646.774405] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1646.783072] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1646.783078] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1646.783083] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1646.783086] 29214 total pagecache pages [ 1646.783094] 0 pages in swap cache [ 1646.783099] Swap cache stats: add 0, delete 0, find 0/0 [ 1646.783101] Free swap = 0kB [ 1646.783104] Total swap = 0kB [ 1646.783111] 2097051 pages RAM [ 1646.783114] 0 pages HighMem/MovableOnly [ 1646.783116] 363849 pages reserved [ 1646.783119] 0 pages cma reserved [ 1646.855114] Node 1 active_anon:836kB inactive_anon:27880kB active_file:56kB inactive_file:120kB unevictable:0kB isolated(anon):48kB isolated(file):0kB mapped:58616kB dirty:8kB writeback:0kB shmem:28020kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1646.888127] Node 0 DMA free:12064kB min:204kB low:252kB high:300kB active_anon:20kB inactive_anon:100kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1646.923713] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1646.923738] Node 0 DMA32 free:335616kB min:36200kB low:45248kB high:54296kB active_anon:54136kB inactive_anon:69208kB active_file:4936kB inactive_file:10236kB unevictable:0kB writepending:188kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7520kB pagetables:2444kB bounce:0kB free_pcp:1460kB local_pcp:684kB free_cma:0kB [ 1646.967641] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. 09:40:50 executing program 4: socket(0x11, 0x2, 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000004980), 0x0, 0x0) getsockopt$X25_QBITINCL(r0, 0x106, 0x1, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x4, 0x7, 0x7, 0x6, 0xa, @remote, @private2={0xfc, 0x2, '\x00', 0x1}, 0x700, 0x20, 0x9, 0x5f3b}}) openat$nvram(0xffffffffffffff9c, &(0x7f0000004980), 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000100)={0x80000004, 0x7}) [ 1647.000100] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1647.020768] lowmem_reserve[]: 0 0 0 0 0 [ 1647.033391] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1647.067024] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 1647.079722] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 1647.091370] lowmem_reserve[]: 0 0 0 0 0 [ 1647.091417] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 1647.098068] Node 1 Normal free:835340kB min:53696kB low:67120kB high:80544kB active_anon:864kB inactive_anon:27880kB active_file:84kB inactive_file:172kB unevictable:0kB writepending:8kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:320kB pagetables:364kB bounce:0kB free_pcp:1284kB local_pcp:664kB free_cma:0kB [ 1647.105594] team0: Port device team_slave_0 added [ 1647.135364] lowmem_reserve[]: 0 0 0 0 0 09:40:50 executing program 4: socket(0x11, 0x2, 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000004980), 0x0, 0x0) getsockopt$X25_QBITINCL(r0, 0x106, 0x1, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x4, 0x7, 0x7, 0x6, 0xa, @remote, @private2={0xfc, 0x2, '\x00', 0x1}, 0x700, 0x20, 0x9, 0x5f3b}}) openat$nvram(0xffffffffffffff9c, &(0x7f0000004980), 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000100)={0x80000004, 0x7}) [ 1647.146447] Node 0 DMA: 93*4kB (UME) 58*8kB (UM) 39*16kB (UME) 30*32kB (UME) 16*64kB (UME) 2*128kB (UE) 2*256kB (ME) 2*512kB (UE) 3*1024kB (UME) 2*2048kB (UE) 0*4096kB = 12404kB [ 1647.188961] Node 0 DMA32: 27690*4kB (UEH) 12555*8kB (UMEH) 4021*16kB (UMEH) 1297*32kB (UEH) 1294*64kB (UMH) 207*128kB (UM) 15*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 430192kB [ 1647.197361] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready 09:40:50 executing program 4: socket(0x11, 0x2, 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000004980), 0x0, 0x0) getsockopt$X25_QBITINCL(r0, 0x106, 0x1, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x4, 0x7, 0x7, 0x6, 0xa, @remote, @private2={0xfc, 0x2, '\x00', 0x1}, 0x700, 0x20, 0x9, 0x5f3b}}) openat$nvram(0xffffffffffffff9c, &(0x7f0000004980), 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000100)={0x80000004, 0x7}) [ 1647.232428] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 1647.239806] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1647.259019] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready 09:40:50 executing program 4: socket(0x11, 0x2, 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000004980), 0x0, 0x0) getsockopt$X25_QBITINCL(r0, 0x106, 0x1, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x4, 0x7, 0x7, 0x6, 0xa, @remote, @private2={0xfc, 0x2, '\x00', 0x1}, 0x700, 0x20, 0x9, 0x5f3b}}) r1 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000100)={0x80000004, 0x7}) [ 1647.273520] Node 1 Normal: 36729*4kB (UM) 11404*8kB (UM) 4795*16kB (UM) 4119*32kB (U) 6017*64kB (U) 175*128kB (U) 62*256kB (U) 24*512kB (UM) 22*1024kB (U) 0*2048kB 0*4096kB = 904852kB [ 1647.290469] team0: Port device team_slave_1 added [ 1647.324313] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1647.343703] Bluetooth: hci3 command 0x0419 tx timeout [ 1647.345443] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1647.373552] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1647.391375] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1647.414069] 29315 total pagecache pages [ 1647.416005] device hsr_slave_0 entered promiscuous mode [ 1647.418418] 0 pages in swap cache [ 1647.418425] Swap cache stats: add 0, delete 0, find 0/0 [ 1647.418729] Free swap = 0kB [ 1647.454834] Total swap = 0kB [ 1647.455125] device hsr_slave_1 entered promiscuous mode [ 1647.460137] 2097051 pages RAM [ 1647.475751] 0 pages HighMem/MovableOnly [ 1647.485389] 363849 pages reserved [ 1647.492291] 0 pages cma reserved [ 1647.492959] device hsr_slave_0 entered promiscuous mode [ 1647.510755] device hsr_slave_1 entered promiscuous mode [ 1647.535947] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 1647.550026] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1647.561111] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1647.657858] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1647.700847] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 1647.712795] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 1647.732834] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1647.747727] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1647.823346] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1647.850510] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 1647.883736] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 1647.925035] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 1648.051865] device hsr_slave_0 entered promiscuous mode [ 1648.081780] device hsr_slave_1 entered promiscuous mode [ 1648.112584] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1648.128972] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1648.158545] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1648.179889] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1648.201589] syz-executor.4: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1648.224149] device bridge_slave_1 left promiscuous mode [ 1648.230095] bridge0: port 2(bridge_slave_1) entered disabled state [ 1648.242376] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 1648.263496] CPU: 0 PID: 11171 Comm: syz-executor.4 Not tainted 4.14.232-syzkaller #0 [ 1648.271519] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1648.280967] Call Trace: [ 1648.283573] dump_stack+0x1b2/0x281 [ 1648.287210] warn_alloc.cold+0x96/0x1cc [ 1648.291199] ? zone_watermark_ok_safe+0x220/0x220 [ 1648.296159] __alloc_pages_nodemask+0x2127/0x2720 [ 1648.301102] ? _raw_spin_unlock_irq+0x24/0x80 [ 1648.305636] ? lock_acquire+0x170/0x3f0 [ 1648.309699] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1648.314560] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1648.320233] ? __mutex_unlock_slowpath+0x75/0x770 [ 1648.325610] alloc_pages_current+0x155/0x260 [ 1648.330432] ion_page_pool_alloc+0x118/0x1b0 [ 1648.335074] ion_system_heap_allocate+0x133/0x8c0 [ 1648.340117] ? ion_alloc+0x187/0x810 [ 1648.343842] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1648.349411] ? ion_system_contig_heap_create+0x130/0x130 [ 1648.354874] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1648.360416] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1648.365287] ion_alloc+0x204/0x810 [ 1648.368843] ? ion_dma_buf_release+0x40/0x40 [ 1648.373287] ? __might_fault+0x177/0x1b0 [ 1648.377363] ion_ioctl+0xea/0x1f0 [ 1648.381099] ? ion_query_heaps+0x360/0x360 [ 1648.385437] ? ion_query_heaps+0x360/0x360 [ 1648.390012] do_vfs_ioctl+0x75a/0xff0 [ 1648.393830] ? ioctl_preallocate+0x1a0/0x1a0 [ 1648.398530] ? lock_downgrade+0x740/0x740 [ 1648.402958] ? __fget+0x225/0x360 [ 1648.406432] ? do_vfs_ioctl+0xff0/0xff0 [ 1648.410545] ? security_file_ioctl+0x83/0xb0 [ 1648.415558] SyS_ioctl+0x7f/0xb0 [ 1648.419078] ? do_vfs_ioctl+0xff0/0xff0 [ 1648.423336] do_syscall_64+0x1d5/0x640 [ 1648.427329] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1648.432557] RIP: 0033:0x4665f9 [ 1648.435751] RSP: 002b:00007f6205eee188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1648.444038] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1648.451492] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000005 [ 1648.458776] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1648.466170] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1648.473562] R13: 00007fffcb653cef R14: 00007f6205eee300 R15: 0000000000022000 [ 1648.482034] device bridge_slave_0 left promiscuous mode [ 1648.487916] bridge0: port 1(bridge_slave_0) entered disabled state [ 1648.497557] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1648.505506] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1648.514578] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1648.521415] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1648.530034] device bridge_slave_1 left promiscuous mode [ 1648.538913] bridge0: port 2(bridge_slave_1) entered disabled state [ 1648.549507] device bridge_slave_0 left promiscuous mode [ 1648.558372] bridge0: port 1(bridge_slave_0) entered disabled state [ 1648.571920] warn_alloc_show_mem: 1 callbacks suppressed [ 1648.572231] Mem-Info: [ 1648.580447] device veth1_macvtap left promiscuous mode [ 1648.591222] device veth0_macvtap left promiscuous mode [ 1648.597142] device veth1_vlan left promiscuous mode [ 1648.602389] device veth0_vlan left promiscuous mode [ 1648.614088] active_anon:13788 inactive_anon:24297 isolated_anon:0 [ 1648.614088] active_file:1530 inactive_file:2415 isolated_file:0 [ 1648.614088] unevictable:0 dirty:18 writeback:0 unstable:0 [ 1648.614088] slab_reclaimable:13398 slab_unreclaimable:124295 [ 1648.614088] mapped:55430 shmem:25365 pagetables:740 bounce:0 [ 1648.614088] free:195451 free_pcp:108 free_cma:0 [ 1648.666047] Node 0 active_anon:54308kB inactive_anon:69308kB active_file:6036kB inactive_file:9592kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:163040kB dirty:64kB writeback:0kB shmem:73440kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1648.666133] device veth1_macvtap left promiscuous mode [ 1648.710270] Node 1 active_anon:844kB inactive_anon:27880kB active_file:84kB inactive_file:68kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:58680kB dirty:8kB writeback:0kB shmem:28020kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1648.746008] Node 0 DMA free:11100kB min:204kB low:252kB high:300kB active_anon:20kB inactive_anon:100kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1648.779829] device veth0_macvtap left promiscuous mode [ 1648.787419] device veth1_vlan left promiscuous mode [ 1648.792855] device veth0_vlan left promiscuous mode [ 1648.793596] Bluetooth: hci5 command 0x0419 tx timeout [ 1648.819012] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1648.832267] Node 0 DMA32 free:56652kB min:36200kB low:45248kB high:54296kB active_anon:54288kB inactive_anon:69208kB active_file:6036kB inactive_file:9592kB unevictable:0kB writepending:264kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7648kB pagetables:2552kB bounce:0kB free_pcp:892kB local_pcp:236kB free_cma:0kB [ 1648.943558] lowmem_reserve[]: 0 0 0 0 0 [ 1648.948153] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1648.994051] lowmem_reserve[]: 0 0 0 0 0 [ 1649.003730] Node 1 Normal free:708460kB min:53696kB low:67120kB high:80544kB active_anon:844kB inactive_anon:27880kB active_file:8kB inactive_file:12kB unevictable:0kB writepending:8kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:320kB pagetables:408kB bounce:0kB free_pcp:284kB local_pcp:224kB free_cma:0kB [ 1649.045576] lowmem_reserve[]: 0 0 0 0 0 [ 1649.049648] Node 0 DMA: 7*4kB (ME) 54*8kB (UM) 51*16kB (UME) 29*32kB (UME) 15*64kB (UME) 2*128kB (UE) 2*256kB (ME) 2*512kB (UE) 2*1024kB (ME) 2*2048kB (UE) 0*4096kB = 11100kB [ 1649.066690] Node 0 DMA32: 556*4kB (MEH) 763*8kB (UMEH) 224*16kB (UMEH) 337*32kB (UMEH) 375*64kB (UMH) 1*128kB (M) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 46824kB [ 1649.100531] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1649.131221] Node 1 Normal: 4720*4kB (U) 18917*8kB (U) 10557*16kB (UM) 8110*32kB (UM) 1115*64kB (UM) 28*128kB (UM) 3*256kB (UM) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 674360kB [ 1649.178100] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1649.202570] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1649.218946] device hsr_slave_1 left promiscuous mode [ 1649.229199] device hsr_slave_0 left promiscuous mode [ 1649.240737] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1649.280025] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1649.296448] team0 (unregistering): Port device team_slave_1 removed [ 1649.303883] 26214 total pagecache pages [ 1649.307896] 0 pages in swap cache [ 1649.311358] Swap cache stats: add 0, delete 0, find 0/0 [ 1649.322617] team0 (unregistering): Port device team_slave_0 removed [ 1649.329750] Free swap = 0kB [ 1649.332871] Total swap = 0kB [ 1649.339695] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 1649.347472] 2097051 pages RAM [ 1649.350925] 0 pages HighMem/MovableOnly [ 1649.359426] 363849 pages reserved [ 1649.363116] 0 pages cma reserved [ 1649.367381] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 1649.401519] bond0 (unregistering): Released all slaves [ 1649.466776] device hsr_slave_1 left promiscuous mode [ 1649.476294] device hsr_slave_0 left promiscuous mode [ 1649.494770] team0 (unregistering): Port device team_slave_1 removed [ 1649.508363] team0 (unregistering): Port device team_slave_0 removed [ 1649.519021] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 1649.533851] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 1649.570329] bond0 (unregistering): Released all slaves [ 1649.586425] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 1649.625500] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 1649.899672] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 1649.954691] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 1650.082100] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1650.099865] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1650.115875] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 1650.137061] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 1650.146475] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 1650.159753] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1650.184599] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1650.194360] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 1650.211155] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 1650.247934] 8021q: adding VLAN 0 to HW filter on device team0 [ 1650.279081] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 1650.286448] 8021q: adding VLAN 0 to HW filter on device team0 [ 1650.304488] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1650.317770] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1650.329342] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 1650.359611] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1650.370023] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1650.406945] bridge0: port 1(bridge_slave_0) entered blocking state [ 1650.415105] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1650.870741] syz-executor.0 invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1650.898026] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 1650.910887] CPU: 1 PID: 10675 Comm: syz-executor.0 Not tainted 4.14.232-syzkaller #0 [ 1650.919615] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1650.929575] Call Trace: [ 1650.932264] dump_stack+0x1b2/0x281 [ 1650.936076] dump_header+0x178/0x82f [ 1650.940141] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1650.945528] ? ___ratelimit+0x2cd/0x530 [ 1650.949687] oom_kill_process.cold+0x10/0xa40 [ 1650.954767] out_of_memory+0xe3e/0x1190 [ 1650.959016] ? oom_killer_disable+0x1c0/0x1c0 [ 1650.964594] ? mutex_trylock+0x152/0x1a0 [ 1650.968783] __alloc_pages_nodemask+0x23e1/0x2720 [ 1650.973727] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1650.979634] alloc_pages_current+0x155/0x260 [ 1650.984326] filemap_fault+0x11a1/0x1ad0 [ 1650.988748] ext4_filemap_fault+0x84/0xb0 [ 1650.993070] __do_fault+0xfa/0x380 [ 1650.996783] __handle_mm_fault+0x2497/0x4620 [ 1651.001500] ? vm_insert_page+0x7c0/0x7c0 [ 1651.006811] ? mark_held_locks+0xa6/0xf0 [ 1651.010965] handle_mm_fault+0x455/0x9c0 [ 1651.015038] __do_page_fault+0x549/0xad0 [ 1651.019110] ? spurious_fault+0x640/0x640 [ 1651.023427] ? do_page_fault+0x60/0x500 [ 1651.027548] ? page_fault+0x2f/0x50 [ 1651.031253] page_fault+0x45/0x50 [ 1651.034699] RIP: 4bf79b:0x3 [ 1651.037712] RSP: 0006:00000000004bf79b EFLAGS: 00000000 [ 1651.069980] Mem-Info: [ 1651.101199] active_anon:13804 inactive_anon:24297 isolated_anon:0 [ 1651.101199] active_file:28 inactive_file:0 isolated_file:0 [ 1651.101199] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1651.101199] slab_reclaimable:13370 slab_unreclaimable:120055 [ 1651.101199] mapped:52970 shmem:25365 pagetables:745 bounce:0 [ 1651.101199] free:24997 free_pcp:0 free_cma:0 [ 1651.173348] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1651.186289] Node 0 active_anon:54364kB inactive_anon:69308kB active_file:8kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:153216kB dirty:0kB writeback:0kB shmem:73440kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1651.345480] Node 1 active_anon:852kB inactive_anon:27880kB active_file:84kB inactive_file:68kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:58764kB dirty:0kB writeback:0kB shmem:28020kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1651.472135] Node 0 DMA free:11060kB min:204kB low:252kB high:300kB active_anon:20kB inactive_anon:100kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1651.628028] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1651.633154] Node 0 DMA32 free:35828kB min:36200kB low:45248kB high:54296kB active_anon:54344kB inactive_anon:69208kB active_file:8kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7456kB pagetables:2572kB bounce:0kB free_pcp:120kB local_pcp:0kB free_cma:0kB [ 1651.887358] lowmem_reserve[]: 0 0 0 0 0 [ 1651.891488] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1652.036481] lowmem_reserve[]: 0 0 0 0 0 [ 1652.040527] Node 1 Normal free:60512kB min:53696kB low:67120kB high:80544kB active_anon:884kB inactive_anon:27880kB active_file:1076kB inactive_file:1456kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:320kB pagetables:412kB bounce:0kB free_pcp:688kB local_pcp:0kB free_cma:0kB [ 1652.077439] lowmem_reserve[]: 0 0 0 0 0 [ 1652.082463] Node 0 DMA: 7*4kB (ME) 49*8kB (UM) 51*16kB (UME) 29*32kB (UME) 15*64kB (UME) 2*128kB (UE) 2*256kB (ME) 2*512kB (UE) 2*1024kB (ME) 2*2048kB (UE) 0*4096kB = 11060kB [ 1652.107809] Node 0 DMA32: 1210*4kB (ME) 976*8kB (ME) 278*16kB (UME) 78*32kB (UME) 46*64kB (UM) 57*128kB (UM) 8*256kB (U) 2*512kB (UM) 3*1024kB (UM) 0*2048kB 0*4096kB = 35976kB [ 1652.131224] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1652.193376] Node 1 Normal: 106*4kB (UM) 51*8kB (UM) 21*16kB (M) 14*32kB (UM) 615*64kB (UM) 27*128kB (UM) 3*256kB (UM) 1*512kB (U) 5*1024kB (UM) 2*2048kB (U) 0*4096kB = 54928kB [ 1652.245797] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1652.283604] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1652.292417] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1652.413255] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1652.473372] 25439 total pagecache pages [ 1652.477642] 0 pages in swap cache [ 1652.481301] Swap cache stats: add 0, delete 0, find 0/0 [ 1652.589326] Free swap = 0kB [ 1652.592396] Total swap = 0kB [ 1652.629494] 2097051 pages RAM [ 1652.632775] 0 pages HighMem/MovableOnly [ 1652.678843] 363849 pages reserved [ 1652.718363] 0 pages cma reserved [ 1652.722215] Out of memory (oom_kill_allocating_task): Kill process 10675 (syz-executor.0) score 0 or sacrifice child [ 1652.819797] Killed process 10675 (syz-executor.0) total-vm:93120kB, anon-rss:84kB, file-rss:33324kB, shmem-rss:0kB [ 1652.891361] oom_reaper: reaped process 10675 (syz-executor.0), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1653.081679] modprobe invoked oom-killer: gfp_mask=0x14280ca(GFP_HIGHUSER_MOVABLE|__GFP_ZERO), nodemask=(null), order=0, oom_score_adj=0 [ 1653.148403] modprobe cpuset=/ mems_allowed=0-1 [ 1653.153071] CPU: 1 PID: 11301 Comm: modprobe Not tainted 4.14.232-syzkaller #0 [ 1653.160515] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1653.170220] Call Trace: [ 1653.172823] dump_stack+0x1b2/0x281 [ 1653.176893] dump_header+0x178/0x82f [ 1653.180983] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1653.186119] ? ___ratelimit+0x2cd/0x530 [ 1653.190350] oom_kill_process.cold+0x10/0xa40 [ 1653.194859] out_of_memory+0xe3e/0x1190 [ 1653.199017] ? oom_killer_disable+0x1c0/0x1c0 [ 1653.203691] ? mutex_trylock+0x152/0x1a0 [ 1653.209067] __alloc_pages_nodemask+0x23e1/0x2720 [ 1653.214666] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1653.219960] ? filemap_map_pages+0x51b/0xe40 [ 1653.224488] ? __lock_acquire+0x5fc/0x3f20 [ 1653.228825] alloc_pages_vma+0xd2/0x6d0 [ 1653.233504] __handle_mm_fault+0x25fa/0x4620 [ 1653.239068] ? vm_insert_page+0x7c0/0x7c0 [ 1653.243586] ? lock_acquire+0x170/0x3f0 [ 1653.248944] ? mark_held_locks+0xa6/0xf0 [ 1653.254329] handle_mm_fault+0x455/0x9c0 [ 1653.259542] __do_page_fault+0x549/0xad0 [ 1653.263883] ? spurious_fault+0x640/0x640 [ 1653.268735] ? do_page_fault+0x60/0x500 [ 1653.272803] ? page_fault+0x2f/0x50 [ 1653.276622] page_fault+0x45/0x50 [ 1653.280263] RIP: 0000:0x3 [ 1653.283025] RSP: d8883110:00007ffdd8883190 EFLAGS: 00000000 [ 1653.385370] Mem-Info: [ 1653.394562] active_anon:13802 inactive_anon:24297 isolated_anon:0 [ 1653.394562] active_file:26 inactive_file:24 isolated_file:0 [ 1653.394562] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1653.394562] slab_reclaimable:13350 slab_unreclaimable:119230 [ 1653.394562] mapped:52961 shmem:25365 pagetables:747 bounce:0 [ 1653.394562] free:83096 free_pcp:675 free_cma:0 [ 1653.436835] Node 0 active_anon:54352kB inactive_anon:69308kB active_file:0kB inactive_file:32kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:153248kB dirty:0kB writeback:0kB shmem:73440kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1653.471568] Node 1 active_anon:856kB inactive_anon:27880kB active_file:112kB inactive_file:64kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:58596kB dirty:0kB writeback:0kB shmem:28020kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1653.526838] Node 0 DMA free:11060kB min:204kB low:252kB high:300kB active_anon:20kB inactive_anon:100kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1653.616972] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1653.622809] Node 0 DMA32 free:270684kB min:36200kB low:45248kB high:54296kB active_anon:54332kB inactive_anon:69208kB active_file:32kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7392kB pagetables:2572kB bounce:0kB free_pcp:1348kB local_pcp:720kB free_cma:0kB [ 1653.720450] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 1653.736193] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1653.750766] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1653.810099] bridge0: port 2(bridge_slave_1) entered blocking state [ 1653.817265] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1653.833945] lowmem_reserve[]: 0 0 0 0 0 [ 1653.838129] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1653.876390] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 1653.896477] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1653.917040] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 1653.954610] lowmem_reserve[]: 0 0 0 0 0 [ 1653.959725] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1653.976400] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 1653.980422] Node 1 Normal free:419388kB min:53696kB low:67120kB high:80544kB active_anon:780kB inactive_anon:27876kB active_file:40kB inactive_file:48kB unevictable:0kB writepending:4kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:288kB pagetables:264kB bounce:0kB free_pcp:1360kB local_pcp:672kB free_cma:0kB [ 1654.013275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready 09:40:57 executing program 0: socket(0x11, 0x2, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000004980), 0x0, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000100)={0x80000004, 0x7}) [ 1654.047638] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1654.050384] lowmem_reserve[]: 0 0 0 0 0 [ 1654.081248] Node 0 DMA: 12*4kB (UME) 49*8kB (UM) 51*16kB (UME) 29*32kB (UME) 15*64kB (UME) 2*128kB (UE) 2*256kB (ME) 2*512kB (UE) 2*1024kB (ME) 2*2048kB (UE) 0*4096kB = 11080kB [ 1654.100130] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 1654.126013] Node 0 DMA32: 404*4kB (UEH) 492*8kB (UMEH) 141*16kB (EH) 33*32kB (UMEH) 261*64kB (UM) 82*128kB (UM) 11*256kB (U) 4*512kB (UM) 4*1024kB (UM) 0*2048kB 0*4096kB = 45024kB [ 1654.126837] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1654.173779] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1654.182486] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1654.226925] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 1654.258493] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1654.272837] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1654.282472] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1654.324133] Node 1 Normal: 0*4kB 1*8kB (M) 1*16kB (M) 1063*32kB (U) 2774*64kB (U) 85*128kB (UM) 9*256kB (U) 4*512kB (UM) 3*1024kB (U) 0*2048kB 0*4096kB = 229880kB [ 1654.331887] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 1654.340099] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1654.388118] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1654.395620] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1654.403602] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1654.413123] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1654.433846] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1654.438531] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 1654.442614] 31822 total pagecache pages [ 1654.467206] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1654.473109] 0 pages in swap cache [ 1654.478335] Swap cache stats: add 0, delete 0, find 0/0 [ 1654.493125] Free swap = 0kB [ 1654.496175] Total swap = 0kB [ 1654.499475] 2097051 pages RAM [ 1654.523671] 0 pages HighMem/MovableOnly [ 1654.526868] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 1654.527851] 363849 pages reserved [ 1654.545067] 0 pages cma reserved [ 1654.548785] Out of memory (oom_kill_allocating_task): Kill process 11301 (modprobe) score 0 or sacrifice child [ 1654.566696] Killed process 11301 (modprobe) total-vm:4172kB, anon-rss:68kB, file-rss:0kB, shmem-rss:0kB [ 1654.578268] oom_reaper: reaped process 11301 (modprobe), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1654.598507] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 1654.633972] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1654.641125] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1654.788582] oom_reaper: reaped process 11171 (syz-executor.4), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1654.830293] systemd-journal invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1654.854735] systemd-journal cpuset=/ mems_allowed=0-1 [ 1654.859985] CPU: 1 PID: 10643 Comm: systemd-journal Not tainted 4.14.232-syzkaller #0 [ 1654.868261] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1654.878894] Call Trace: [ 1654.881646] dump_stack+0x1b2/0x281 [ 1654.885608] dump_header+0x178/0x82f [ 1654.889318] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1654.895555] ? ___ratelimit+0x2cd/0x530 [ 1654.899790] oom_kill_process.cold+0x10/0xa40 [ 1654.904479] out_of_memory+0xe3e/0x1190 [ 1654.908892] ? oom_killer_disable+0x1c0/0x1c0 [ 1654.914093] ? mutex_trylock+0x152/0x1a0 [ 1654.918781] __alloc_pages_nodemask+0x23e1/0x2720 [ 1654.924668] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1654.930131] alloc_pages_current+0x155/0x260 [ 1654.934734] filemap_fault+0x11a1/0x1ad0 [ 1654.939445] ext4_filemap_fault+0x84/0xb0 [ 1654.943777] __do_fault+0xfa/0x380 [ 1654.947419] __handle_mm_fault+0x2497/0x4620 [ 1654.951843] ? vm_insert_page+0x7c0/0x7c0 [ 1654.956190] ? mark_held_locks+0xa6/0xf0 [ 1654.960557] handle_mm_fault+0x455/0x9c0 [ 1654.965047] __do_page_fault+0x549/0xad0 [ 1654.969556] ? spurious_fault+0x640/0x640 [ 1654.974218] ? do_page_fault+0x60/0x500 [ 1654.978281] ? page_fault+0x2f/0x50 [ 1654.982395] page_fault+0x45/0x50 [ 1654.985845] RIP: 0001:0xffffffffffffffff [ 1654.990472] RSP: 6fb991e0:00007fff61b557c0 EFLAGS: 7fff61b555d0 [ 1654.991053] syz-executor.4: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1655.000349] Mem-Info: [ 1655.016957] active_anon:13816 inactive_anon:24295 isolated_anon:0 [ 1655.016957] active_file:17 inactive_file:16 isolated_file:0 [ 1655.016957] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1655.016957] slab_reclaimable:13344 slab_unreclaimable:118371 [ 1655.016957] mapped:44284 shmem:25362 pagetables:718 bounce:0 [ 1655.016957] free:13974 free_pcp:60 free_cma:0 [ 1655.024410] syz-executor.4 cpuset= [ 1655.054962] Node 0 active_anon:54172kB inactive_anon:69304kB active_file:28kB inactive_file:28kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:146532kB dirty:0kB writeback:0kB shmem:73436kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1655.063777] / [ 1655.094530] Node 1 active_anon:1092kB inactive_anon:27876kB active_file:40kB inactive_file:36kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:30604kB dirty:0kB writeback:0kB shmem:28012kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1655.105800] mems_allowed=0-1 [ 1655.134544] Node 0 DMA free:10968kB min:204kB low:252kB high:300kB active_anon:20kB inactive_anon:100kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1655.135585] CPU: 0 PID: 11171 Comm: syz-executor.4 Not tainted 4.14.232-syzkaller #0 [ 1655.162082] lowmem_reserve[]: [ 1655.170006] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1655.170010] Call Trace: [ 1655.170031] dump_stack+0x1b2/0x281 [ 1655.170045] warn_alloc.cold+0x96/0x1cc [ 1655.173155] 0 [ 1655.183075] ? zone_watermark_ok_safe+0x220/0x220 [ 1655.183086] ? usleep_range+0x130/0x130 [ 1655.183093] ? try_to_free_pages+0x23f/0x6e0 [ 1655.183105] ? _find_next_bit+0xdb/0x100 [ 1655.185692] 2717 [ 1655.189740] ? run_timer_softirq+0x5a0/0x5a0 [ 1655.193802] 2718 [ 1655.195591] __alloc_pages_nodemask+0x2127/0x2720 [ 1655.200510] 2718 [ 1655.204573] ? lock_acquire+0x170/0x3f0 [ 1655.204588] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1655.208970] 2718 [ 1655.213103] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1655.213118] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1655.213137] alloc_pages_current+0x155/0x260 [ 1655.219672] ion_page_pool_alloc+0x118/0x1b0 [ 1655.221804] Node 0 [ 1655.226725] ion_system_heap_allocate+0x133/0x8c0 [ 1655.226734] ? ion_alloc+0x187/0x810 [ 1655.226744] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1655.226751] ? ion_system_contig_heap_create+0x130/0x130 [ 1655.226761] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1655.228830] DMA32 free:18248kB min:36200kB low:45248kB high:54296kB active_anon:54152kB inactive_anon:69204kB active_file:28kB inactive_file:28kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7456kB pagetables:2576kB bounce:0kB free_pcp:240kB local_pcp:124kB free_cma:0kB [ 1655.233331] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1655.233343] ion_alloc+0x204/0x810 [ 1655.233358] ? ion_dma_buf_release+0x40/0x40 [ 1655.233368] ? __might_fault+0x177/0x1b0 [ 1655.233379] ion_ioctl+0xea/0x1f0 [ 1655.238332] lowmem_reserve[]: [ 1655.240384] ? ion_query_heaps+0x360/0x360 [ 1655.245191] 0 [ 1655.250685] ? ion_query_heaps+0x360/0x360 [ 1655.255099] 0 [ 1655.259670] do_vfs_ioctl+0x75a/0xff0 [ 1655.261896] 0 [ 1655.266858] ? ioctl_preallocate+0x1a0/0x1a0 [ 1655.266868] ? lock_downgrade+0x740/0x740 [ 1655.266880] ? __fget+0x225/0x360 [ 1655.266889] ? do_vfs_ioctl+0xff0/0xff0 [ 1655.270596] 0 [ 1655.276033] ? security_file_ioctl+0x83/0xb0 [ 1655.276043] SyS_ioctl+0x7f/0xb0 [ 1655.276050] ? do_vfs_ioctl+0xff0/0xff0 [ 1655.276061] do_syscall_64+0x1d5/0x640 [ 1655.281778] 0 [ 1655.286873] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1655.286881] RIP: 0033:0x4665f9 [ 1655.286889] RSP: 002b:00007f6205eee188 EFLAGS: 00000246 [ 1655.320880] ORIG_RAX: 0000000000000010 [ 1655.324601] Node 0 [ 1655.329161] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1655.333267] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1655.336757] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000005 [ 1655.340218] lowmem_reserve[]: [ 1655.344439] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1655.344444] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1655.344448] R13: 00007fffcb653cef R14: 00007f6205eee300 R15: 0000000000022000 [ 1655.351938] Mem-Info: [ 1655.353169] ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb [ 1655.356273] active_anon:13816 inactive_anon:24295 isolated_anon:0 [ 1655.356273] active_file:17 inactive_file:16 isolated_file:0 [ 1655.356273] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1655.356273] slab_reclaimable:13344 slab_unreclaimable:118371 [ 1655.356273] mapped:44284 shmem:25362 pagetables:718 bounce:0 [ 1655.356273] free:13974 free_pcp:60 free_cma:0 [ 1655.358369] ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb [ 1655.362632] Node 0 active_anon:54172kB inactive_anon:69304kB active_file:28kB inactive_file:28kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:146532kB dirty:0kB writeback:0kB shmem:73436kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1655.373081] 0 [ 1655.381795] Node 1 active_anon:1092kB inactive_anon:27876kB active_file:40kB inactive_file:36kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:30604kB dirty:0kB writeback:0kB shmem:28012kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1655.397457] 0 [ 1655.407540] Node 0 [ 1655.416838] 0 [ 1655.431908] DMA free:10968kB min:204kB low:252kB high:300kB active_anon:20kB inactive_anon:100kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1655.461165] 0 [ 1655.469575] lowmem_reserve[]: [ 1655.475190] 0 [ 1655.477356] 0 [ 1655.493937] Node 1 Normal free:26680kB min:53696kB low:67120kB high:80544kB active_anon:1092kB inactive_anon:27876kB active_file:40kB inactive_file:36kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:256kB pagetables:296kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1655.493955] lowmem_reserve[]: 0 0 0 [ 1655.532088] 2717 [ 1655.549213] 0 [ 1655.567682] 2718 [ 1655.607521] 0 [ 1655.636391] 2718 [ 1655.676746] 2718 [ 1655.687869] Node 0 [ 1655.690169] DMA: 8*4kB [ 1655.692699] Node 0 [ 1655.692703] (UME) 37*8kB [ 1655.701277] DMA32 free:18248kB min:36200kB low:45248kB high:54296kB active_anon:54152kB inactive_anon:69204kB active_file:28kB inactive_file:28kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7456kB pagetables:2576kB bounce:0kB free_pcp:240kB local_pcp:116kB free_cma:0kB [ 1655.701918] (UM) [ 1655.705972] lowmem_reserve[]: 0 0 0 0 0 [ 1655.744858] 51*16kB (UME) [ 1655.749001] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1655.760188] 29*32kB [ 1655.788737] lowmem_reserve[]: [ 1655.790483] (UME) [ 1655.791074] 0 [ 1655.797101] 15*64kB [ 1655.799469] 0 [ 1655.799533] (UME) [ 1655.801858] 0 [ 1655.811762] 2*128kB [ 1655.811889] 0 [ 1655.816500] (UE) [ 1655.818123] 0 [ 1655.818313] 2*256kB [ 1655.822198] (ME) [ 1655.830637] Node 1 [ 1655.832473] 2*512kB [ 1655.832868] Normal free:26680kB min:53696kB low:67120kB high:80544kB active_anon:1092kB inactive_anon:27876kB active_file:40kB inactive_file:36kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:256kB pagetables:296kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1655.837096] (UE) [ 1655.839449] lowmem_reserve[]: 0 0 0 0 0 [ 1655.877879] 2*1024kB [ 1655.881801] Node 0 [ 1655.881804] (ME) 2*2048kB [ 1655.886272] DMA: 8*4kB (UME) 37*8kB (UM) 51*16kB (UME) 29*32kB (UME) 15*64kB (UME) 2*128kB (UE) 2*256kB (ME) 2*512kB (UE) 2*1024kB (ME) 2*2048kB (UE) 0*4096kB = 10968kB [ 1655.891363] (UE) [ 1655.914505] Node 0 DMA32: 1168*4kB (MEH) 900*8kB (UMEH) 246*16kB (MEH) 57*32kB (UMEH) 10*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18272kB [ 1655.919145] 0*4096kB [ 1655.940281] Node 0 [ 1655.942118] = 10968kB [ 1655.942866] Normal: [ 1655.946363] Node 0 [ 1655.947764] 0*4kB [ 1655.950336] DMA32: [ 1655.952561] 0*8kB [ 1655.961702] 1168*4kB (MEH) 900*8kB (UMEH) 246*16kB (MEH) 57*32kB (UMEH) 10*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18272kB [ 1655.983176] ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb [ 1655.984302] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1655.990149] ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb [ 1656.005737] Node 1 Normal: 178*4kB (UM) 46*8kB (UM) 34*16kB (UM) 25*32kB (UM) 23*64kB (M) 66*128kB (UM) 20*256kB (UM) 6*512kB (UM) 6*1024kB (UM) 0*2048kB 0*4096kB = 26680kB [ 1656.015426] 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1656.036284] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1656.041069] Node 1 Normal: 178*4kB (UM) 46*8kB (UM) 34*16kB (UM) 25*32kB (UM) 23*64kB (M) 66*128kB (UM) 20*256kB (UM) 6*512kB (UM) 6*1024kB (UM) 0*2048kB 0*4096kB = 26680kB [ 1656.056146] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1656.074323] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1656.088211] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1656.091335] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1656.103240] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1656.113676] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1656.124756] 25395 total pagecache pages [ 1656.129428] 0 pages in swap cache [ 1656.130450] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1656.141909] Swap cache stats: add 0, delete 0, find 0/0 [ 1656.148088] 25395 total pagecache pages [ 1656.148098] 0 pages in swap cache [ 1656.148103] Swap cache stats: add 0, delete 0, find 0/0 [ 1656.148106] Free swap = 0kB [ 1656.148109] Total swap = 0kB [ 1656.148115] 2097051 pages RAM [ 1656.148118] 0 pages HighMem/MovableOnly [ 1656.148121] 363849 pages reserved [ 1656.148123] 0 pages cma reserved [ 1656.148185] ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb [ 1656.197844] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1656.223130] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 1656.307268] Free swap = 0kB [ 1656.310517] Total swap = 0kB [ 1656.323059] 2097051 pages RAM [ 1656.328890] 0 pages HighMem/MovableOnly [ 1656.357938] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1656.365503] 363849 pages reserved [ 1656.368970] 0 pages cma reserved [ 1656.372327] Out of memory (oom_kill_allocating_task): Kill process 10643 (systemd-journal) score 0 or sacrifice child [ 1656.408878] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 1656.439212] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 1656.445717] Killed process 10643 (systemd-journal) total-vm:46096kB, anon-rss:472kB, file-rss:0kB, shmem-rss:2984kB [ 1656.457083] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1656.464585] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1656.475482] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 1656.481939] 8021q: adding VLAN 0 to HW filter on device team0 [ 1656.489591] oom_reaper: reaped process 10643 (systemd-journal), now anon-rss:0kB, file-rss:0kB, shmem-rss:3056kB [ 1656.521833] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 1656.544486] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1656.552804] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1656.597661] bridge0: port 1(bridge_slave_0) entered blocking state [ 1656.604285] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1656.620002] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 1656.635320] systemd[1]: systemd-journald.service: Failed with result 'signal'. [ 1656.662670] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1656.670673] systemd[1]: systemd-journald.service: Service has no hold-off time, scheduling restart. [ 1656.687578] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1656.700941] systemd[1]: Stopped Journal Service. [ 1656.706786] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1656.739776] systemd[1]: Starting Journal Service... [ 1656.757090] bridge0: port 2(bridge_slave_1) entered blocking state [ 1656.764765] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1656.816759] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready 09:41:00 executing program 1: socket(0x11, 0x2, 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000004980), 0x0, 0x0) getsockopt$X25_QBITINCL(r0, 0x106, 0x1, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x4, 0x7, 0x7, 0x6, 0xa, @remote, @private2={0xfc, 0x2, '\x00', 0x1}, 0x700, 0x20, 0x9, 0x5f3b}}) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000004980), 0x0, 0x0) getsockopt$X25_QBITINCL(r1, 0x106, 0x1, 0x0, 0x0) r2 = socket$vsock_dgram(0x28, 0x2, 0x0) ioctl$sock_SIOCDELRT(r2, 0x890c, &(0x7f0000000180)={0x0, @llc={0x1a, 0x33a, 0x9, 0x6, 0x27, 0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, @vsock={0x28, 0x0, 0x2710}, @isdn={0x22, 0xcb, 0x81, 0x2, 0x69}, 0xfff, 0x0, 0x0, 0x0, 0x81, &(0x7f0000000140)='dummy0\x00', 0x80000000, 0x101, 0x8001}) openat$zero(0xffffffffffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000100)={0x80000004, 0x7}) socket(0x27, 0xa, 0x40000801) [ 1656.860395] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1656.872488] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1656.901026] device bridge_slave_1 left promiscuous mode [ 1656.920062] bridge0: port 2(bridge_slave_1) entered disabled state [ 1656.928900] systemd-journald[11321]: File /run/log/journal/04d8c135ee6b410280ba31a58c89679d/system.journal corrupted or uncleanly shut down, renaming and replacing. [ 1656.963515] device bridge_slave_0 left promiscuous mode [ 1656.970697] bridge0: port 1(bridge_slave_0) entered disabled state [ 1657.099037] device hsr_slave_1 left promiscuous mode [ 1657.133895] device hsr_slave_0 left promiscuous mode [ 1657.169785] team0 (unregistering): Port device team_slave_1 removed [ 1657.179973] team0 (unregistering): Port device team_slave_0 removed [ 1657.211212] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 1657.240646] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 1657.309307] bond0 (unregistering): Released all slaves [ 1657.346399] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1657.365722] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 1657.377561] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1657.402154] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 1657.425750] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1657.438138] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1657.485553] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 1657.496104] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1657.508791] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1657.534993] systemd[1]: Started Journal Service. [ 1657.536875] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1657.566114] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 1657.584558] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1657.597368] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1657.637828] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 1657.656353] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 1657.666514] syz-executor.4: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1657.680839] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 1657.694162] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 1657.699946] CPU: 1 PID: 11171 Comm: syz-executor.4 Not tainted 4.14.232-syzkaller #0 [ 1657.703182] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1657.708622] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1657.726488] Call Trace: [ 1657.729959] dump_stack+0x1b2/0x281 [ 1657.733972] warn_alloc.cold+0x96/0x1cc [ 1657.738100] ? zone_watermark_ok_safe+0x220/0x220 [ 1657.743446] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1657.743545] __alloc_pages_nodemask+0x2127/0x2720 [ 1657.756525] ? _raw_spin_unlock_irq+0x24/0x80 [ 1657.761486] ? lock_acquire+0x170/0x3f0 [ 1657.765466] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1657.770615] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1657.776386] ? __mutex_unlock_slowpath+0x75/0x770 [ 1657.781595] alloc_pages_current+0x155/0x260 [ 1657.783240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1657.786095] ion_page_pool_alloc+0x118/0x1b0 [ 1657.797879] ion_system_heap_allocate+0x133/0x8c0 [ 1657.802935] ? _raw_spin_unlock+0x29/0x40 [ 1657.807178] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1657.812374] ? ion_system_contig_heap_create+0x130/0x130 [ 1657.817920] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1657.823042] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1657.823360] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1657.828000] ion_alloc+0x27a/0x810 [ 1657.839544] ? ion_dma_buf_release+0x40/0x40 [ 1657.844160] ? __might_fault+0x177/0x1b0 [ 1657.848316] ion_ioctl+0xea/0x1f0 [ 1657.851980] ? ion_query_heaps+0x360/0x360 [ 1657.856957] ? ion_query_heaps+0x360/0x360 [ 1657.861291] do_vfs_ioctl+0x75a/0xff0 [ 1657.865101] ? ioctl_preallocate+0x1a0/0x1a0 [ 1657.869508] ? lock_downgrade+0x740/0x740 [ 1657.873657] ? __fget+0x225/0x360 [ 1657.877322] ? do_vfs_ioctl+0xff0/0xff0 [ 1657.881424] ? security_file_ioctl+0x83/0xb0 [ 1657.886015] SyS_ioctl+0x7f/0xb0 [ 1657.889376] ? do_vfs_ioctl+0xff0/0xff0 [ 1657.893636] do_syscall_64+0x1d5/0x640 [ 1657.898495] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1657.904481] RIP: 0033:0x4665f9 [ 1657.907776] RSP: 002b:00007f6205eee188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1657.915597] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1657.923037] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000005 [ 1657.930945] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1657.938657] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1657.946111] R13: 00007fffcb653cef R14: 00007f6205eee300 R15: 0000000000022000 [ 1657.959856] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 1657.966638] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1657.989614] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 1657.997814] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 1658.004557] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1658.011430] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1658.019477] Mem-Info: [ 1658.026134] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1658.033854] active_anon:13832 inactive_anon:26326 isolated_anon:0 [ 1658.033854] active_file:1003 inactive_file:3120 isolated_file:0 [ 1658.033854] unevictable:0 dirty:25 writeback:0 unstable:0 [ 1658.033854] slab_reclaimable:13071 slab_unreclaimable:118962 [ 1658.033854] mapped:55088 shmem:27410 pagetables:709 bounce:0 [ 1658.033854] free:195643 free_pcp:420 free_cma:0 [ 1658.095323] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 1658.107086] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 1658.114632] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 1658.121484] Node 0 active_anon:54344kB inactive_anon:70572kB active_file:3772kB inactive_file:9072kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:190136kB dirty:80kB writeback:0kB shmem:74708kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1658.135983] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 1658.173620] Node 1 active_anon:984kB inactive_anon:34732kB active_file:240kB inactive_file:3408kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:30216kB dirty:20kB writeback:0kB shmem:34932kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1658.192971] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1658.207077] Node 0 DMA free:11080kB min:204kB low:252kB high:300kB active_anon:16kB inactive_anon:160kB active_file:0kB inactive_file:788kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1658.233379] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1658.253540] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1658.260938] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1658.276195] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1658.281410] Node 0 DMA32 free:519060kB min:36200kB low:45248kB high:54296kB active_anon:54328kB inactive_anon:70412kB active_file:3772kB inactive_file:8284kB unevictable:0kB writepending:80kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7520kB pagetables:2616kB bounce:0kB free_pcp:1360kB local_pcp:616kB free_cma:0kB [ 1658.318329] device veth0_vlan entered promiscuous mode [ 1658.341666] device veth1_vlan entered promiscuous mode [ 1658.357181] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 1658.362827] lowmem_reserve[]: 0 0 0 0 0 [ 1658.367821] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1658.380109] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 1658.428407] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 1658.446236] lowmem_reserve[]: 0 0 0 0 0 [ 1658.450385] Node 1 Normal free:476024kB min:53696kB low:67120kB high:80544kB active_anon:984kB inactive_anon:34732kB active_file:240kB inactive_file:3408kB unevictable:0kB writepending:20kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:160kB pagetables:220kB bounce:0kB free_pcp:712kB local_pcp:8kB free_cma:0kB [ 1658.455658] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 1658.513136] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1658.520609] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1658.536440] lowmem_reserve[]: 0 0 0 0 0 [ 1658.540499] Node 0 DMA: 31*4kB (UME) 14*8kB (UME) 42*16kB (UME) 26*32kB (UME) 4*64kB (UE) 4*128kB (UE) 2*256kB (UE) 2*512kB (UE) 3*1024kB (UME) 2*2048kB (UE) 0*4096kB = 11212kB [ 1658.543889] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1658.582812] Node 0 DMA32: 28314*4kB (UMEH) 19332*8kB (UMEH) 10610*16kB (UMEH) 3934*32kB (UMEH) 342*64kB (UH) 14*128kB (UM) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 587240kB [ 1658.593486] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1658.613023] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1658.630593] device veth0_macvtap entered promiscuous mode [ 1658.637899] Node 1 Normal: 25266*4kB (UM) 14747*8kB (UM) 9121*16kB (UM) 5858*32kB (U) 590*64kB (U) 25*128kB (U) 1*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 593648kB [ 1658.647116] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 1658.675752] device veth1_macvtap entered promiscuous mode [ 1658.677412] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1658.709150] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 1658.709467] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1658.727128] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 1658.752954] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1658.756718] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1658.777351] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1658.793890] 31536 total pagecache pages [ 1658.796076] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1658.798293] 0 pages in swap cache [ 1658.816105] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1658.836185] Swap cache stats: add 0, delete 0, find 0/0 [ 1658.841585] Free swap = 0kB [ 1658.842832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1658.852802] Total swap = 0kB [ 1658.857169] 2097051 pages RAM [ 1658.860372] 0 pages HighMem/MovableOnly [ 1658.863075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1658.882838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1658.886540] 363849 pages reserved [ 1658.902812] 0 pages cma reserved [ 1658.903901] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 1658.933015] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1658.944433] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 1658.952819] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1658.960340] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1658.983868] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1659.004378] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1659.022928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1659.032274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1659.062811] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1659.072401] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1659.103117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1659.124011] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 1659.131477] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1659.164735] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 1659.176943] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1659.185981] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1659.204344] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1659.227748] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1659.355957] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 1659.383542] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 1659.390455] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 1659.425566] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 1659.433912] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1659.441728] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1659.475198] device veth0_vlan entered promiscuous mode [ 1659.483963] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1659.502205] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1659.526645] device veth1_vlan entered promiscuous mode [ 1659.546191] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 1659.553947] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1659.580734] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 1659.617364] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 1659.633431] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1659.641643] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1659.664372] device veth0_macvtap entered promiscuous mode [ 1659.671694] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 1659.690335] device veth1_macvtap entered promiscuous mode [ 1659.707267] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 1659.727188] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 1659.746896] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 1659.762641] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1659.781750] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1659.792866] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1659.806434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1659.817382] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1659.831295] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1659.841489] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1659.855668] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1659.867377] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 1659.879835] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1659.888144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1659.900011] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1659.917106] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1659.930991] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1659.944474] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1659.958707] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1659.969573] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1659.985643] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1659.997704] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1660.009209] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1660.019383] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1660.030241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1660.053544] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 1660.060492] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1660.084789] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1660.102913] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1660.852267] syz-executor.2: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1660.854445] syz-executor.5: [ 1660.869564] syz-executor.2 cpuset= [ 1660.874009] page allocation failure: order:4 [ 1660.874514] / [ 1660.878657] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1660.886931] mems_allowed=0-1 [ 1660.892989] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 1660.897877] CPU: 1 PID: 11376 Comm: syz-executor.2 Not tainted 4.14.232-syzkaller #0 [ 1660.911394] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1660.922595] Call Trace: [ 1660.925374] dump_stack+0x1b2/0x281 [ 1660.928996] warn_alloc.cold+0x96/0x1cc [ 1660.933054] ? zone_watermark_ok_safe+0x220/0x220 [ 1660.938151] __alloc_pages_nodemask+0x2127/0x2720 [ 1660.943158] ? __schedule+0x893/0x1de0 [ 1660.947744] ? lock_acquire+0x170/0x3f0 [ 1660.951908] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1660.956843] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1660.962745] ? __mutex_unlock_slowpath+0x75/0x770 [ 1660.967877] alloc_pages_current+0x155/0x260 [ 1660.972279] ion_page_pool_alloc+0x118/0x1b0 [ 1660.977126] ion_system_heap_allocate+0x133/0x8c0 [ 1660.982215] ? ion_alloc+0x187/0x810 [ 1660.985934] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1660.991726] ? ion_system_contig_heap_create+0x130/0x130 [ 1660.997284] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1661.002394] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1661.007320] ion_alloc+0x204/0x810 [ 1661.010862] ? ion_dma_buf_release+0x40/0x40 [ 1661.015359] ? __might_fault+0x177/0x1b0 [ 1661.019415] ion_ioctl+0xea/0x1f0 [ 1661.022858] ? ion_query_heaps+0x360/0x360 [ 1661.027284] ? ion_query_heaps+0x360/0x360 [ 1661.031509] do_vfs_ioctl+0x75a/0xff0 [ 1661.035317] ? ioctl_preallocate+0x1a0/0x1a0 [ 1661.039938] ? lock_downgrade+0x740/0x740 [ 1661.044347] ? __fget+0x225/0x360 [ 1661.048067] ? do_vfs_ioctl+0xff0/0xff0 [ 1661.052028] ? security_file_ioctl+0x83/0xb0 [ 1661.056812] SyS_ioctl+0x7f/0xb0 [ 1661.060376] ? do_vfs_ioctl+0xff0/0xff0 [ 1661.064687] do_syscall_64+0x1d5/0x640 [ 1661.068745] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1661.074094] RIP: 0033:0x4665f9 [ 1661.077358] RSP: 002b:00007f02b4df9188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1661.085325] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1661.093044] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000008 [ 1661.100573] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1661.108826] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1661.116465] R13: 00007ffd0aa0cdcf R14: 00007f02b4df9300 R15: 0000000000022000 [ 1661.123748] CPU: 0 PID: 11399 Comm: syz-executor.5 Not tainted 4.14.232-syzkaller #0 [ 1661.126750] Mem-Info: [ 1661.132259] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1661.132264] Call Trace: [ 1661.132282] dump_stack+0x1b2/0x281 [ 1661.132296] warn_alloc.cold+0x96/0x1cc [ 1661.134963] active_anon:14295 inactive_anon:26326 isolated_anon:0 [ 1661.134963] active_file:1904 inactive_file:1929 isolated_file:0 [ 1661.134963] unevictable:0 dirty:82 writeback:0 unstable:0 [ 1661.134963] slab_reclaimable:12924 slab_unreclaimable:117494 [ 1661.134963] mapped:55239 shmem:27409 pagetables:715 bounce:0 [ 1661.134963] free:370966 free_pcp:99 free_cma:0 [ 1661.144085] ? zone_watermark_ok_safe+0x220/0x220 [ 1661.144109] __alloc_pages_nodemask+0x2127/0x2720 [ 1661.144124] ? lock_acquire+0x170/0x3f0 [ 1661.144139] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1661.147122] Node 0 active_anon:56524kB inactive_anon:70572kB active_file:6320kB inactive_file:6320kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:190764kB dirty:308kB writeback:0kB shmem:74704kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1661.150883] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1661.150896] ? __mutex_unlock_slowpath+0x75/0x770 [ 1661.150907] ? alloc_pages_current+0x84/0x260 [ 1661.155147] Node 1 active_anon:656kB inactive_anon:34732kB active_file:1296kB inactive_file:1396kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:30192kB dirty:20kB writeback:0kB shmem:34932kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1661.189661] alloc_pages_current+0x155/0x260 [ 1661.189675] ion_page_pool_alloc+0x118/0x1b0 [ 1661.189683] ion_system_heap_allocate+0x133/0x8c0 [ 1661.189692] ? ion_alloc+0x187/0x810 [ 1661.189701] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1661.189710] ? ion_system_contig_heap_create+0x130/0x130 [ 1661.189717] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1661.189728] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1661.195539] Node 0 [ 1661.200438] ion_alloc+0x204/0x810 [ 1661.200452] ? ion_dma_buf_release+0x40/0x40 [ 1661.200464] ? __might_fault+0x177/0x1b0 [ 1661.204648] DMA free:11124kB min:204kB low:252kB high:300kB active_anon:16kB inactive_anon:160kB active_file:396kB inactive_file:200kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1661.209424] ion_ioctl+0xea/0x1f0 [ 1661.209434] ? ion_query_heaps+0x360/0x360 [ 1661.209445] ? ion_query_heaps+0x360/0x360 [ 1661.238720] lowmem_reserve[]: [ 1661.244132] do_vfs_ioctl+0x75a/0xff0 [ 1661.244144] ? ioctl_preallocate+0x1a0/0x1a0 [ 1661.244154] ? lock_downgrade+0x740/0x740 [ 1661.244166] ? __fget+0x225/0x360 [ 1661.244176] ? do_vfs_ioctl+0xff0/0xff0 [ 1661.249207] 0 [ 1661.253868] ? security_file_ioctl+0x83/0xb0 [ 1661.253879] SyS_ioctl+0x7f/0xb0 [ 1661.253886] ? do_vfs_ioctl+0xff0/0xff0 [ 1661.253897] do_syscall_64+0x1d5/0x640 [ 1661.253911] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1661.253918] RIP: 0033:0x4665f9 [ 1661.253927] RSP: 002b:00007fe6b3da8188 EFLAGS: 00000246 [ 1661.283150] 2717 [ 1661.287326] ORIG_RAX: 0000000000000010 [ 1661.287332] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1661.287337] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000008 [ 1661.287341] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1661.287347] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1661.287352] R13: 00007ffec293891f R14: 00007fe6b3da8300 R15: 0000000000022000 [ 1661.506980] IPVS: ftp: loaded support on port[0] = 21 [ 1661.515478] 2718 2718 2718 [ 1661.518968] Node 0 DMA32 free:567100kB min:36200kB low:45248kB high:54296kB active_anon:56708kB inactive_anon:70412kB active_file:5924kB inactive_file:6520kB unevictable:0kB writepending:308kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7552kB pagetables:2828kB bounce:0kB free_pcp:380kB local_pcp:224kB free_cma:0kB [ 1661.639509] lowmem_reserve[]: 0 0 0 0 0 [ 1661.648474] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1661.708927] lowmem_reserve[]: 0 0 0 0 0 [ 1661.716724] Node 1 Normal free:766344kB min:53696kB low:67120kB high:80544kB active_anon:656kB inactive_anon:34732kB active_file:1296kB inactive_file:1396kB unevictable:0kB writepending:20kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:160kB pagetables:180kB bounce:0kB free_pcp:136kB local_pcp:0kB free_cma:0kB [ 1661.763425] lowmem_reserve[]: 0 0 0 0 0 [ 1661.767622] Node 0 DMA: 59*4kB (UME) 41*8kB (UME) 44*16kB (UME) 28*32kB (UME) 2*64kB (UE) 7*128kB (UE) 3*256kB (UE) 2*512kB (UE) 2*1024kB (ME) 2*2048kB (UE) 0*4096kB = 11124kB [ 1661.813750] Node 0 DMA32: 277*4kB (UEH) 495*8kB (UMEH) 11205*16kB (UMEH) 5750*32kB (UMEH) 19*64kB (UMH) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 369564kB [ 1661.864101] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1661.879804] chnl_net:caif_netlink_parms(): no params data found [ 1661.890955] Node 1 Normal: 25042*4kB (UM) 18990*8kB (UM) 12180*16kB (UM) 9963*32kB (U) 9*64kB (U) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 766360kB [ 1661.912938] syz-executor.0: page allocation failure: order:5, mode:0x1084020(GFP_ATOMIC|__GFP_COMP), nodemask=(null) [ 1661.923905] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 1661.929470] CPU: 1 PID: 11317 Comm: syz-executor.0 Not tainted 4.14.232-syzkaller #0 [ 1661.937506] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1661.947555] Call Trace: [ 1661.950242] dump_stack+0x1b2/0x281 [ 1661.953894] warn_alloc.cold+0x96/0x1cc [ 1661.957917] ? zone_watermark_ok_safe+0x220/0x220 [ 1661.962857] ? wake_all_kswapds+0x175/0x360 [ 1661.967282] __alloc_pages_nodemask+0x2127/0x2720 [ 1661.972217] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1661.977505] ? __alloc_pages_nodemask+0x1a6e/0x2720 [ 1661.982944] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1661.987807] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1661.992832] ? entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1661.998226] ? mark_held_locks+0xa6/0xf0 [ 1662.002319] ? cache_alloc_refill+0x2fa/0x350 [ 1662.007344] ? ____cache_alloc_node+0x156/0x1d0 [ 1662.012040] cache_grow_begin+0x91/0x700 [ 1662.016138] fallback_alloc+0x207/0x2c0 [ 1662.020132] __kmalloc+0x213/0x400 [ 1662.023695] ? batadv_hash_new+0xaa/0x270 [ 1662.027865] batadv_hash_new+0xaa/0x270 [ 1662.031963] ? batadv_hash_set_lock_class+0x9a/0xf0 [ 1662.034823] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1662.037349] batadv_tt_init+0x2b2/0x390 [ 1662.037360] batadv_mesh_init+0x478/0x630 [ 1662.037374] batadv_softif_init_late+0xa26/0xc90 [ 1662.058562] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1662.059370] ? batadv_get_strings+0x40/0x40 [ 1662.072459] ? dev_valid_name+0x1a0/0x1a0 [ 1662.076696] ? batadv_get_strings+0x40/0x40 [ 1662.078279] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1662.081118] register_netdevice+0x291/0xe40 [ 1662.081131] ? netdev_change_features+0xa0/0xa0 [ 1662.081141] ? rtnl_create_link+0x129/0x890 [ 1662.103387] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1662.103887] rtnl_newlink+0x14ff/0x1860 [ 1662.117140] ? rtnl_newlink+0x43d/0x1860 [ 1662.121318] ? __lock_acquire+0x5fc/0x3f20 [ 1662.123216] 31455 total pagecache pages [ 1662.125894] ? trace_hardirqs_on+0x10/0x10 [ 1662.125904] ? rtnl_dellink+0x6a0/0x6a0 [ 1662.125910] ? trace_hardirqs_on+0x10/0x10 [ 1662.125920] ? __read_once_size_nocheck.constprop.0+0x10/0x10 [ 1662.125927] ? deref_stack_reg+0x124/0x1a0 [ 1662.125967] ? lock_acquire+0x170/0x3f0 [ 1662.125975] ? lock_downgrade+0x740/0x740 [ 1662.125985] ? rtnl_dellink+0x6a0/0x6a0 [ 1662.144159] 0 pages in swap cache [ 1662.145800] rtnetlink_rcv_msg+0x3be/0xb10 [ 1662.145814] ? rtnl_calcit.isra.0+0x3a0/0x3a0 [ 1662.153077] Swap cache stats: add 0, delete 0, find 0/0 [ 1662.156285] ? __netlink_lookup+0x345/0x5d0 [ 1662.156301] netlink_rcv_skb+0x125/0x390 [ 1662.163708] Free swap = 0kB [ 1662.164804] ? rtnl_calcit.isra.0+0x3a0/0x3a0 [ 1662.164820] ? netlink_ack+0x9a0/0x9a0 [ 1662.170180] Total swap = 0kB [ 1662.172782] netlink_unicast+0x437/0x610 [ 1662.172793] ? netlink_sendskb+0xd0/0xd0 [ 1662.172801] ? __check_object_size+0x179/0x230 [ 1662.172811] netlink_sendmsg+0x62e/0xb80 [ 1662.172822] ? nlmsg_notify+0x170/0x170 [ 1662.172838] ? security_socket_sendmsg+0x83/0xb0 [ 1662.180548] 2097051 pages RAM [ 1662.181841] ? nlmsg_notify+0x170/0x170 [ 1662.181851] sock_sendmsg+0xb5/0x100 [ 1662.181862] SyS_sendto+0x1c7/0x2c0 [ 1662.193924] 0 pages HighMem/MovableOnly [ 1662.195726] ? SyS_getpeername+0x220/0x220 [ 1662.195744] ? sock_poll+0x220/0x220 [ 1662.201064] 363849 pages reserved [ 1662.203433] ? SyS_socket+0x12f/0x1b0 [ 1662.203441] ? move_addr_to_kernel+0x60/0x60 [ 1662.203449] ? do_syscall_64+0x4c/0x640 [ 1662.203455] ? SyS_getpeername+0x220/0x220 [ 1662.203463] do_syscall_64+0x1d5/0x640 [ 1662.203477] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1662.203486] RIP: 0033:0x41958c [ 1662.209823] 0 pages cma reserved [ 1662.210794] RSP: 002b:00007ffc37ea3ee0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 1662.310309] RAX: ffffffffffffffda RBX: 00000000014a4320 RCX: 000000000041958c [ 1662.318038] RDX: 000000000000003c RSI: 00000000014a4370 RDI: 0000000000000003 [ 1662.325522] RBP: 0000000000000000 R08: 00007ffc37ea3f34 R09: 000000000000000c [ 1662.332948] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1662.340398] R13: 00000000014a4370 R14: 0000000000000003 R15: 0000000000000000 [ 1662.347927] warn_alloc_show_mem: 1 callbacks suppressed [ 1662.347930] Mem-Info: [ 1662.356053] active_anon:14406 inactive_anon:26330 isolated_anon:0 [ 1662.356053] active_file:2145 inactive_file:1918 isolated_file:0 [ 1662.356053] unevictable:0 dirty:91 writeback:0 unstable:0 [ 1662.356053] slab_reclaimable:12905 slab_unreclaimable:118315 [ 1662.356053] mapped:55362 shmem:27414 pagetables:737 bounce:0 [ 1662.356053] free:190306 free_pcp:229 free_cma:0 [ 1662.390799] Node 0 active_anon:56976kB inactive_anon:70588kB active_file:7272kB inactive_file:6388kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:191396kB dirty:344kB writeback:0kB shmem:74724kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1662.420889] Node 1 active_anon:648kB inactive_anon:34732kB active_file:1308kB inactive_file:1284kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:30052kB dirty:20kB writeback:0kB shmem:34932kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1662.449630] Node 0 DMA free:10996kB min:204kB low:252kB high:300kB active_anon:16kB inactive_anon:160kB active_file:396kB inactive_file:200kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1662.477262] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1662.482318] Node 0 DMA32 free:45028kB min:36200kB low:45248kB high:54296kB active_anon:56960kB inactive_anon:70428kB active_file:6876kB inactive_file:6188kB unevictable:0kB writepending:344kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7584kB pagetables:2768kB bounce:0kB free_pcp:520kB local_pcp:240kB free_cma:0kB [ 1662.512696] lowmem_reserve[]: 0 0 0 0 0 [ 1662.516959] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1662.544194] lowmem_reserve[]: 0 0 0 0 0 [ 1662.548385] Node 1 Normal free:517216kB min:53696kB low:67120kB high:80544kB active_anon:648kB inactive_anon:34732kB active_file:1308kB inactive_file:1384kB unevictable:0kB writepending:20kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:160kB pagetables:180kB bounce:0kB free_pcp:360kB local_pcp:0kB free_cma:0kB [ 1662.577633] lowmem_reserve[]: 0 0 0 0 0 [ 1662.581719] Node 0 DMA: 59*4kB (UMEH) 41*8kB (UMEH) 44*16kB (UMEH) 28*32kB (UMEH) 2*64kB (UE) 6*128kB (UEH) 3*256kB (UE) 2*512kB (UE) 2*1024kB (ME) 2*2048kB (UE) 0*4096kB = 10996kB [ 1662.598438] Node 0 DMA32: 277*4kB (UEH) 495*8kB (UMEH) 160*16kB (UMEH) 1125*32kB (UMEH) 21*64kB (UMH) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 44972kB [ 1662.613278] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1662.624086] Node 1 Normal: 2*4kB (UM) 3*8kB (UM) 7739*16kB (UM) 9961*32kB (U) 11*64kB (U) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 443312kB [ 1662.638704] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1662.648012] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1662.656598] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1662.665627] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1662.674831] 31455 total pagecache pages [ 1662.678833] 0 pages in swap cache [ 1662.683247] Swap cache stats: add 0, delete 0, find 0/0 [ 1662.688960] Free swap = 0kB [ 1662.691974] Total swap = 0kB [ 1662.695173] 2097051 pages RAM [ 1662.698295] 0 pages HighMem/MovableOnly [ 1662.702443] 363849 pages reserved [ 1662.706065] 0 pages cma reserved [ 1662.861808] ODEBUG: assert_init not available (active state 0) object type: timer_list hint: (null) [ 1662.872334] ------------[ cut here ]------------ [ 1662.877193] WARNING: CPU: 1 PID: 11317 at lib/debugobjects.c:287 debug_print_object.cold+0xa7/0xdb [ 1662.887876] Kernel panic - not syncing: panic_on_warn set ... [ 1662.887876] [ 1662.895358] CPU: 1 PID: 11317 Comm: syz-executor.0 Not tainted 4.14.232-syzkaller #0 [ 1662.903436] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1662.913064] Call Trace: [ 1662.915747] dump_stack+0x1b2/0x281 [ 1662.919692] panic+0x1f9/0x42d [ 1662.922971] ? add_taint.cold+0x16/0x16 [ 1662.927049] ? debug_print_object.cold+0xa7/0xdb [ 1662.931810] ? debug_print_object.cold+0xa7/0xdb [ 1662.936565] __warn.cold+0x20/0x44 [ 1662.940206] ? ist_end_non_atomic+0x10/0x10 [ 1662.944817] ? debug_print_object.cold+0xa7/0xdb [ 1662.949707] report_bug+0x208/0x250 [ 1662.953472] do_error_trap+0x195/0x2d0 [ 1662.957882] ? math_error+0x2d0/0x2d0 [ 1662.962037] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1662.967234] invalid_op+0x1b/0x40 [ 1662.972918] RIP: 0010:debug_print_object.cold+0xa7/0xdb [ 1662.978714] RSP: 0018:ffff88805903f248 EFLAGS: 00010086 [ 1662.984099] RAX: 0000000000000061 RBX: 0000000000000005 RCX: 0000000000000000 [ 1662.991594] RDX: 0000000000000000 RSI: ffffffff878bbbc0 RDI: ffffed100b207e3f [ 1662.999560] RBP: ffffffff878b6e80 R08: 0000000000000061 R09: 0000000000000001 [ 1663.006941] R10: 0000000000000000 R11: ffff888059034540 R12: 0000000000000000 [ 1663.014600] R13: 0000000000000000 R14: ffff88809e0a63f0 R15: 1ffff1100b207e52 [ 1663.021982] ? debug_print_object.cold+0xa7/0xdb [ 1663.026948] debug_object_assert_init+0x1d3/0x2d0 [ 1663.031891] ? debug_object_active_state+0x330/0x330 [ 1663.037023] ? rtnl_newlink+0x14ff/0x1860 [ 1663.041184] ? rtnetlink_rcv_msg+0x3be/0xb10 [ 1663.045688] ? netlink_rcv_skb+0x125/0x390 [ 1663.049954] ? entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1663.055873] del_timer+0x5d/0xe0 [ 1663.059793] ? process_timeout+0x20/0x20 [ 1663.064085] try_to_grab_pending+0x243/0x610 [ 1663.068492] __cancel_work_timer+0x90/0x460 [ 1663.073203] ? work_on_cpu_safe+0x70/0x70 [ 1663.078330] ? batadv_tvlv_handler_get+0x1db/0x2b0 [ 1663.083447] batadv_nc_mesh_free+0x41/0x120 [ 1663.087858] batadv_mesh_free+0x70/0x150 [ 1663.092171] batadv_mesh_init+0x561/0x630 [ 1663.096388] batadv_softif_init_late+0xa26/0xc90 [ 1663.101240] ? batadv_get_strings+0x40/0x40 [ 1663.105545] ? dev_valid_name+0x1a0/0x1a0 [ 1663.109770] ? batadv_get_strings+0x40/0x40 [ 1663.114482] register_netdevice+0x291/0xe40 [ 1663.119047] ? netdev_change_features+0xa0/0xa0 [ 1663.123884] ? rtnl_create_link+0x129/0x890 [ 1663.128202] rtnl_newlink+0x14ff/0x1860 [ 1663.132331] ? rtnl_newlink+0x43d/0x1860 [ 1663.136485] ? __lock_acquire+0x5fc/0x3f20 [ 1663.140863] ? trace_hardirqs_on+0x10/0x10 [ 1663.145316] ? rtnl_dellink+0x6a0/0x6a0 [ 1663.149705] ? trace_hardirqs_on+0x10/0x10 [ 1663.154193] ? __read_once_size_nocheck.constprop.0+0x10/0x10 [ 1663.160060] ? deref_stack_reg+0x124/0x1a0 [ 1663.164468] ? lock_acquire+0x170/0x3f0 [ 1663.168520] ? lock_downgrade+0x740/0x740 [ 1663.172830] ? rtnl_dellink+0x6a0/0x6a0 [ 1663.176807] rtnetlink_rcv_msg+0x3be/0xb10 [ 1663.181497] ? rtnl_calcit.isra.0+0x3a0/0x3a0 [ 1663.186076] ? __netlink_lookup+0x345/0x5d0 [ 1663.190394] netlink_rcv_skb+0x125/0x390 [ 1663.195414] ? rtnl_calcit.isra.0+0x3a0/0x3a0 [ 1663.200071] ? netlink_ack+0x9a0/0x9a0 [ 1663.204122] netlink_unicast+0x437/0x610 [ 1663.208192] ? netlink_sendskb+0xd0/0xd0 [ 1663.212712] ? __check_object_size+0x179/0x230 [ 1663.217710] netlink_sendmsg+0x62e/0xb80 [ 1663.222039] ? nlmsg_notify+0x170/0x170 [ 1663.226692] ? security_socket_sendmsg+0x83/0xb0 [ 1663.232033] ? nlmsg_notify+0x170/0x170 [ 1663.235989] sock_sendmsg+0xb5/0x100 [ 1663.239770] SyS_sendto+0x1c7/0x2c0 [ 1663.243429] ? SyS_getpeername+0x220/0x220 [ 1663.247818] ? sock_poll+0x220/0x220 [ 1663.251602] ? SyS_socket+0x12f/0x1b0 [ 1663.255478] ? move_addr_to_kernel+0x60/0x60 [ 1663.259955] ? do_syscall_64+0x4c/0x640 [ 1663.263916] ? SyS_getpeername+0x220/0x220 [ 1663.268401] do_syscall_64+0x1d5/0x640 [ 1663.272479] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1663.277875] RIP: 0033:0x41958c [ 1663.281320] RSP: 002b:00007ffc37ea3ee0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 1663.289355] RAX: ffffffffffffffda RBX: 00000000014a4320 RCX: 000000000041958c [ 1663.296953] RDX: 000000000000003c RSI: 00000000014a4370 RDI: 0000000000000003 [ 1663.305062] RBP: 0000000000000000 R08: 00007ffc37ea3f34 R09: 000000000000000c [ 1663.313757] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1663.321118] R13: 00000000014a4370 R14: 0000000000000003 R15: 0000000000000000 [ 1663.330458] Kernel Offset: disabled [ 1663.334443] Rebooting in 86400 seconds..