ctive_file:176kB inactive_file:52kB unevictable:0kB writepending:112kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:8160kB pagetables:5324kB bounce:0kB free_pcp:124kB local_pcp:0kB free_cma:0kB [ 2155.284713] 0*4096kB [ 2155.320865] lowmem_reserve[]: 0 0 0 0 0 [ 2155.324331] = 0kB [ 2155.327302] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2155.332593] Node 1 [ 2155.364736] lowmem_reserve[]: 0 0 0 0 0 [ 2155.368425] Normal: 14*4kB (M) 9*8kB (M) 5*16kB (UM) 4*32kB (M) 0*64kB 0*128kB 1*256kB (U) 1*512kB (U) 25*1024kB (UM) 0*2048kB 0*4096kB = 26704kB [ 2155.371098] Node 1 Normal free:26704kB min:53696kB low:67120kB high:80544kB active_anon:5264kB inactive_anon:33316kB active_file:4kB inactive_file:8kB unevictable:0kB writepending:8kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:2240kB pagetables:6380kB bounce:0kB free_pcp:120kB local_pcp:0kB free_cma:0kB [ 2155.393043] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2155.422517] lowmem_reserve[]: 0 0 0 0 0 [ 2155.431120] Node 0 DMA: 8*4kB (ME) 4*8kB (M) 6*16kB (UM) 8*32kB (UME) 7*64kB (UME) 5*128kB (UME) 7*256kB (UME) 5*512kB (UE) 1*1024kB (E) 2*2048kB (UM) 0*4096kB = 10976kB [ 2155.433010] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2155.451000] Node 0 DMA32: 914*4kB (ME) 54*8kB (ME) 13*16kB (UME) 5*32kB (UME) 140*64kB (U) 33*128kB (UM) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 17640kB [ 2155.462918] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2155.473930] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2155.488576] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2155.494815] Node 1 Normal: 14*4kB (M) 9*8kB (M) 5*16kB (UM) 4*32kB (M) 0*64kB 0*128kB 1*256kB (U) 1*512kB (U) 25*1024kB (UM) 0*2048kB 0*4096kB = 26704kB [ 2155.506729] 49998 total pagecache pages [ 2155.519935] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2155.528864] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2155.528987] 0 pages in swap cache [ 2155.537450] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2155.549895] Swap cache stats: add 0, delete 0, find 0/0 [ 2155.554180] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2155.555281] Free swap = 0kB [ 2155.563917] 49998 total pagecache pages [ 2155.563929] 0 pages in swap cache [ 2155.563934] Swap cache stats: add 0, delete 0, find 0/0 [ 2155.563937] Free swap = 0kB [ 2155.563940] Total swap = 0kB [ 2155.563947] 2097051 pages RAM [ 2155.563951] 0 pages HighMem/MovableOnly [ 2155.563954] 363848 pages reserved [ 2155.563957] 0 pages cma reserved [ 2155.671198] Total swap = 0kB [ 2155.674267] 2097051 pages RAM [ 2155.677362] 0 pages HighMem/MovableOnly [ 2155.691297] 363848 pages reserved [ 2155.694783] 0 pages cma reserved [ 2155.710967] Out of memory (oom_kill_allocating_task): Kill process 28910 (systemd-journal) score 0 or sacrifice child [ 2155.731781] Killed process 28910 (systemd-journal) total-vm:46096kB, anon-rss:460kB, file-rss:4kB, shmem-rss:1560kB [ 2155.752221] oom_reaper: reaped process 28910 (systemd-journal), now anon-rss:0kB, file-rss:0kB, shmem-rss:1612kB [ 2155.973391] systemd-journald[28912]: File /run/log/journal/04d8c135ee6b410280ba31a58c89679d/system.journal corrupted or uncleanly shut down, renaming and replacing. 14:58:30 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x80000000, 0xe}) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x321002, 0x0) 14:58:30 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x408200, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r1, &(0x7f00000016c0)="4904e565354dbeee3d0a7d6117a5fa50d4124c31ad4be15b016935fe4d7ed3b0cc47c0e2970e56ada969eba342aebd5002e1865b94f2efb1d5da3cce09f907f5df737234138c54714c7cd52d41cde59586648c4b92d01e8c0da51e3bf6d77c6277bc8966ece594c5f86345d6b9e8f592beb946538f37a21da2d5811e373b256a6f5ede09af2e579547a468c7dcbf25", 0x8f, 0x40, &(0x7f0000001780)={0x11, 0xf6, 0x0, 0x1, 0x4, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x14) 14:58:30 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_CMAP(r0, 0x4b70, &(0x7f0000001c40)) ioctl$KDGETMODE(r0, 0x4b3b, &(0x7f00000003c0)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x208400, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/btrfs-control\x00', 0x0, 0x0) ioctl$sock_SIOCADDRT(r3, 0x890b, &(0x7f0000000340)={0x0, @can={0x1d, 0x0}, @qipcrtr={0x2a, 0x4, 0x1}, @generic={0x3, "1b2000a27c7be7875e3504da8000"}, 0x4, 0x0, 0x0, 0x0, 0x9d8, 0x0, 0x1, 0x5, 0xffff}) ioctl$sock_SIOCDELRT(r3, 0x890c, &(0x7f00000002c0)={0x0, @can={0x1d, r4}, @can, @can={0x1d, 0x0}, 0x7f, 0x0, 0x0, 0x0, 0x3}) r6 = syz_genetlink_get_family_id$fou(&(0x7f00000001c0)='fou\x00', 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r3, &(0x7f0000000200)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="28000000a91690579571c360e143aa9f53d29b3b92ab33dd903a4edaf46cd2238c6fff0700000000c9c5ba091d21c790c1b3242aa90269a4f0a47281b1be840a28d63879ac718b8db0382e0901fd68c1ed1b4e6f0303864033a77813566b7df44fb037cd4e0610e4198a2e9cde50a2c2131adb4a09d57dcec45a1329d70622f9a8c62062b8c93fd0173d0a089cab52ceeed56f74fa10fafc6c91cb6d4025fd7050cbfc82dec435b395bcdb5b2c37471723433960867b2c33ec88ab50287efdd74239538adbccb18334d408c2ef00f2cf2d11d64809f5267a1e36b96a60b918080953dccfc1ab3026abf1815f7b385b00139a882d", @ANYRES16=r6, @ANYBLOB="00042dbd7000ffdbdf25010000001400090000000000000000000000000000000001"], 0x28}, 0x1, 0x0, 0x0, 0x2000c851}, 0x8000) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f0000000040)=r2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000980)={'team0\x00'}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) ioctl$sock_SIOCDELRT(r7, 0x890c, &(0x7f0000000580)={0x0, @nfc={0x27, 0x1, 0x0, 0x2}, @qipcrtr={0x2a, 0xffffffff, 0x3fff}, @can={0x1d, r5}, 0xd1, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000540)='sit0\x00', 0x3ff, 0xb4, 0x3a7e}) ioctl$sock_SIOCADDRT(r7, 0x890b, &(0x7f0000000640)={0x0, @ethernet={0x6}, @llc={0x1a, 0x338, 0x0, 0x5, 0x0, 0xec, @random="272c06020926"}, @can={0x1d, r9}, 0x1, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000600)='ipvlan1\x00', 0x7, 0xffff, 0x7}) ioctl$sock_inet6_SIOCADDRT(r7, 0x890b, &(0x7f0000000100)={@private0={0xfc, 0x0, [], 0x1}, @private2, @mcast1, 0x2, 0x4, 0x7, 0x100, 0x9d, 0x200000, r8}) 14:58:30 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x80000000, 0xe}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x2, 0x2, 0x1}) 14:58:30 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x8000, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x80000000, 0xe}) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0xfffffffffffffed1) 14:58:30 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x80000000, 0xe}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000980)={'team0\x00'}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000800)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000000)={'sit0\x00', r3, 0x0, 0x0, 0x0, 0x0, 0x22, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private2}}) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f00000000c0)={@mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xadeb, 0x7fff, 0x1440, 0x0, 0x6, 0x10282, r3}) 14:58:30 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x408200, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r1, &(0x7f00000016c0)="4904e565354dbeee3d0a7d6117a5fa50d4124c31ad4be15b016935fe4d7ed3b0cc47c0e2970e56ada969eba342aebd5002e1865b94f2efb1d5da3cce09f907f5df737234138c54714c7cd52d41cde59586648c4b92d01e8c0da51e3bf6d77c6277bc8966ece594c5f86345d6b9e8f592beb946538f37a21da2d5811e373b256a6f5ede09af2e579547a468c7dcbf25", 0x8f, 0x40, &(0x7f0000001780)={0x11, 0xf6, 0x0, 0x1, 0x4, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x14) [ 2157.240137] syz-executor.1: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2157.242047] syz-executor.3: [ 2157.257108] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 2157.280242] page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2157.300590] CPU: 1 PID: 28918 Comm: syz-executor.1 Not tainted 4.14.229-syzkaller #0 [ 2157.308627] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2157.317775] syz-executor.3 cpuset= [ 2157.317983] Call Trace: [ 2157.318007] dump_stack+0x1b2/0x281 [ 2157.318021] warn_alloc.cold+0x96/0x1cc [ 2157.331695] / mems_allowed=0-1 [ 2157.331719] ? zone_watermark_ok_safe+0x220/0x220 [ 2157.331741] __alloc_pages_nodemask+0x2127/0x2720 [ 2157.344611] ? lock_acquire+0x170/0x3f0 [ 2157.348609] ? lock_acquire+0x170/0x3f0 [ 2157.352600] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2157.357469] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2157.363040] ? __mutex_unlock_slowpath+0x75/0x770 [ 2157.367928] alloc_pages_current+0x155/0x260 [ 2157.372380] ion_page_pool_alloc+0x118/0x1b0 [ 2157.379178] ion_system_heap_allocate+0x133/0x8c0 [ 2157.384040] ? ion_alloc+0x187/0x810 [ 2157.387765] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2157.393239] ? ion_system_contig_heap_create+0x130/0x130 [ 2157.398706] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2157.403745] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2157.408618] ion_alloc+0x204/0x810 [ 2157.412195] ? ion_dma_buf_release+0x40/0x40 [ 2157.416616] ? __might_fault+0x177/0x1b0 [ 2157.420701] ion_ioctl+0xea/0x1f0 [ 2157.424160] ? ion_query_heaps+0x360/0x360 [ 2157.428511] ? ion_query_heaps+0x360/0x360 [ 2157.432758] do_vfs_ioctl+0x75a/0xff0 [ 2157.436594] ? ioctl_preallocate+0x1a0/0x1a0 [ 2157.441025] ? lock_downgrade+0x740/0x740 [ 2157.445193] ? __fget+0x225/0x360 [ 2157.448676] ? do_vfs_ioctl+0xff0/0xff0 [ 2157.452660] ? security_file_ioctl+0x83/0xb0 [ 2157.457075] SyS_ioctl+0x7f/0xb0 [ 2157.460439] ? do_vfs_ioctl+0xff0/0xff0 [ 2157.464416] do_syscall_64+0x1d5/0x640 [ 2157.468308] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2157.473505] RIP: 0033:0x466459 [ 2157.476698] RSP: 002b:00007fdc8e5a7188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2157.484441] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 2157.491717] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2157.499014] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2157.506295] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2157.513571] R13: 00007ffd2c2faa2f R14: 00007fdc8e5a7300 R15: 0000000000022000 [ 2157.520863] CPU: 0 PID: 28925 Comm: syz-executor.3 Not tainted 4.14.229-syzkaller #0 [ 2157.528816] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2157.538189] Call Trace: [ 2157.540785] dump_stack+0x1b2/0x281 [ 2157.544425] warn_alloc.cold+0x96/0x1cc [ 2157.548412] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2157.553440] ? zone_watermark_ok_safe+0x220/0x220 [ 2157.558336] __alloc_pages_nodemask+0x2127/0x2720 [ 2157.563208] ? lock_acquire+0x170/0x3f0 [ 2157.567210] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2157.572080] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2157.578074] ? __mutex_unlock_slowpath+0x75/0x770 [ 2157.582939] ? alloc_pages_current+0x16/0x260 [ 2157.587670] alloc_pages_current+0x155/0x260 [ 2157.592115] ion_page_pool_alloc+0x118/0x1b0 [ 2157.596551] ion_system_heap_allocate+0x133/0x8c0 [ 2157.601410] ? ion_alloc+0x187/0x810 [ 2157.605179] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2157.610645] ? ion_system_contig_heap_create+0x130/0x130 [ 2157.616110] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2157.621147] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2157.623688] Mem-Info: [ 2157.625999] ion_alloc+0x204/0x810 [ 2157.626014] ? ion_dma_buf_release+0x40/0x40 [ 2157.631840] active_anon:17898 inactive_anon:51443 isolated_anon:0 [ 2157.631840] active_file:1378 inactive_file:5687 isolated_file:24 [ 2157.631840] unevictable:0 dirty:18 writeback:0 unstable:0 [ 2157.631840] slab_reclaimable:12278 slab_unreclaimable:126964 [ 2157.631840] mapped:48493 shmem:51984 pagetables:2950 bounce:0 [ 2157.631840] free:69216 free_pcp:337 free_cma:0 [ 2157.631982] ? __might_fault+0x177/0x1b0 [ 2157.636480] Node 0 active_anon:66320kB inactive_anon:172456kB active_file:4376kB inactive_file:21188kB unevictable:0kB isolated(anon):0kB isolated(file):48kB mapped:156900kB dirty:48kB writeback:0kB shmem:174280kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 14336kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2157.670235] ion_ioctl+0xea/0x1f0 [ 2157.670247] ? ion_query_heaps+0x360/0x360 [ 2157.670259] ? ion_query_heaps+0x360/0x360 [ 2157.670269] do_vfs_ioctl+0x75a/0xff0 [ 2157.670280] ? ioctl_preallocate+0x1a0/0x1a0 [ 2157.670290] ? lock_downgrade+0x740/0x740 [ 2157.670310] ? __fget+0x225/0x360 [ 2157.670319] ? do_vfs_ioctl+0xff0/0xff0 [ 2157.670331] ? security_file_ioctl+0x83/0xb0 [ 2157.670340] SyS_ioctl+0x7f/0xb0 [ 2157.670347] ? do_vfs_ioctl+0xff0/0xff0 [ 2157.670359] do_syscall_64+0x1d5/0x640 [ 2157.670373] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2157.670382] RIP: 0033:0x466459 [ 2157.670387] RSP: 002b:00007fb199b88188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2157.670397] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 2157.670403] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2157.670409] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2157.670414] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2157.670419] R13: 00007ffe54ba022f R14: 00007fb199b88300 R15: 0000000000022000 [ 2157.813872] Node 1 active_anon:5272kB inactive_anon:33316kB active_file:1136kB inactive_file:1560kB unevictable:0kB isolated(anon):0kB isolated(file):48kB mapped:37072kB dirty:24kB writeback:0kB shmem:33656kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2157.842742] Node 0 DMA free:11128kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:4kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2157.886852] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2157.892505] syz-executor.1: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2157.892569] syz-executor.2: [ 2157.905709] Node 0 DMA32 free:204600kB min:36200kB low:45248kB high:54296kB active_anon:66320kB inactive_anon:172456kB active_file:3976kB inactive_file:21416kB unevictable:0kB writepending:144kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:8288kB pagetables:5420kB bounce:0kB free_pcp:708kB local_pcp:0kB free_cma:0kB [ 2157.927785] syz-executor.1 cpuset= [ 2157.940166] page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2157.951522] / mems_allowed=0-1 [ 2157.961207] CPU: 0 PID: 28924 Comm: syz-executor.1 Not tainted 4.14.229-syzkaller #0 [ 2157.967262] syz-executor.2 cpuset= [ 2157.969111] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2157.969116] Call Trace: [ 2157.969139] dump_stack+0x1b2/0x281 [ 2157.969153] warn_alloc.cold+0x96/0x1cc [ 2157.969166] ? zone_watermark_ok_safe+0x220/0x220 [ 2157.969187] __alloc_pages_nodemask+0x2127/0x2720 [ 2157.969203] ? lock_acquire+0x170/0x3f0 [ 2157.969219] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2157.969237] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2157.975237] / [ 2157.982144] ? __mutex_unlock_slowpath+0x75/0x770 [ 2158.003387] mems_allowed=0-1 [ 2158.006092] ? retint_kernel+0x2d/0x2d [ 2158.006110] alloc_pages_current+0x155/0x260 [ 2158.006129] ion_page_pool_alloc+0x118/0x1b0 [ 2158.011480] lowmem_reserve[]: [ 2158.016448] ion_system_heap_allocate+0x133/0x8c0 [ 2158.016460] ? ion_alloc+0x187/0x810 [ 2158.016472] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2158.016485] ? ion_system_contig_heap_create+0x130/0x130 [ 2158.030566] 0 [ 2158.034382] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2158.034397] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2158.034410] ion_alloc+0x204/0x810 [ 2158.034424] ? ion_dma_buf_release+0x40/0x40 [ 2158.061422] 0 [ 2158.063137] ? __might_fault+0x177/0x1b0 [ 2158.063153] ion_ioctl+0xea/0x1f0 [ 2158.063163] ? ion_query_heaps+0x360/0x360 [ 2158.088215] 0 [ 2158.090268] ? ion_query_heaps+0x360/0x360 [ 2158.090282] do_vfs_ioctl+0x75a/0xff0 [ 2158.090296] ? ioctl_preallocate+0x1a0/0x1a0 [ 2158.090309] ? lock_downgrade+0x740/0x740 [ 2158.102192] 0 [ 2158.104456] ? __fget+0x225/0x360 [ 2158.104468] ? do_vfs_ioctl+0xff0/0xff0 [ 2158.104481] ? security_file_ioctl+0x83/0xb0 [ 2158.104491] SyS_ioctl+0x7f/0xb0 [ 2158.127787] 0 [ 2158.130038] ? do_vfs_ioctl+0xff0/0xff0 [ 2158.130054] do_syscall_64+0x1d5/0x640 [ 2158.130071] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2158.145158] RIP: 0033:0x466459 [ 2158.145164] RSP: 002b:00007fdc8e586188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2158.145174] RAX: ffffffffffffffda RBX: 000000000056c008 RCX: 0000000000466459 [ 2158.145180] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2158.145186] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2158.145192] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c008 [ 2158.145197] R13: 00007ffd2c2faa2f R14: 00007fdc8e586300 R15: 0000000000022000 [ 2158.193324] CPU: 1 PID: 28928 Comm: syz-executor.2 Not tainted 4.14.229-syzkaller #0 [ 2158.201221] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2158.210582] Call Trace: [ 2158.213179] dump_stack+0x1b2/0x281 [ 2158.216821] warn_alloc.cold+0x96/0x1cc [ 2158.220802] ? zone_watermark_ok_safe+0x220/0x220 [ 2158.225660] __alloc_pages_nodemask+0x2127/0x2720 [ 2158.230516] ? lock_acquire+0x170/0x3f0 [ 2158.234501] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2158.239353] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2158.244811] ? __mutex_unlock_slowpath+0x75/0x770 [ 2158.249664] alloc_pages_current+0x155/0x260 [ 2158.254087] ion_page_pool_alloc+0x118/0x1b0 [ 2158.258504] ion_system_heap_allocate+0x133/0x8c0 [ 2158.263351] ? ion_alloc+0x187/0x810 [ 2158.267065] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2158.272522] ? ion_system_contig_heap_create+0x130/0x130 [ 2158.278000] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2158.283043] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2158.287899] ion_alloc+0x204/0x810 [ 2158.291451] ? ion_dma_buf_release+0x40/0x40 [ 2158.295874] ? __might_fault+0x177/0x1b0 [ 2158.299971] ion_ioctl+0xea/0x1f0 [ 2158.303461] ? ion_query_heaps+0x360/0x360 [ 2158.307717] ? ion_query_heaps+0x360/0x360 [ 2158.311961] do_vfs_ioctl+0x75a/0xff0 [ 2158.315853] ? ioctl_preallocate+0x1a0/0x1a0 [ 2158.320267] ? lock_downgrade+0x740/0x740 [ 2158.324417] ? __fget+0x225/0x360 [ 2158.327897] ? do_vfs_ioctl+0xff0/0xff0 [ 2158.331897] ? security_file_ioctl+0x83/0xb0 [ 2158.336311] SyS_ioctl+0x7f/0xb0 [ 2158.339678] ? do_vfs_ioctl+0xff0/0xff0 [ 2158.343658] do_syscall_64+0x1d5/0x640 [ 2158.347555] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2158.352737] RIP: 0033:0x466459 [ 2158.355924] RSP: 002b:00007fc228c87188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2158.363656] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 2158.370928] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2158.378431] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2158.385749] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2158.393043] R13: 00007ffe5f3badff R14: 00007fc228c87300 R15: 0000000000022000 [ 2158.417204] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2158.454020] lowmem_reserve[]: 0 0 0 0 0 [ 2158.458884] Node 1 Normal free:371188kB min:53696kB low:67120kB high:80544kB active_anon:5288kB inactive_anon:33320kB active_file:1136kB inactive_file:1564kB unevictable:0kB writepending:20kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:2240kB pagetables:6384kB bounce:0kB free_pcp:740kB local_pcp:0kB free_cma:0kB [ 2158.488422] lowmem_reserve[]: 0 0 0 0 0 [ 2158.505323] Node 0 DMA: 49*4kB (UME) 11*8kB (UM) 8*16kB (UM) 7*32kB (ME) 6*64kB (ME) 5*128kB (UME) 7*256kB (UME) 5*512kB (UE) 1*1024kB (E) 2*2048kB (UM) 0*4096kB = 11132kB [ 2158.521183] Node 0 DMA32: 26892*4kB (UME) 8613*8kB (UME) 3805*16kB (UME) 2775*32kB (UME) 778*64kB (UM) 74*128kB (U) 3*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 386184kB [ 2158.544522] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2158.555516] Node 1 Normal: 14872*4kB (UM) 6578*8kB (UM) 4229*16kB (UM) 3101*32kB (UM) 1013*64kB (UM) 148*128kB (U) 11*256kB (U) 1*512kB (U) 5*1024kB (U) 0*2048kB 0*4096kB = 371232kB [ 2158.577850] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2158.597894] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2158.617897] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2158.629654] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2158.638433] 59090 total pagecache pages [ 2158.642526] 0 pages in swap cache [ 2158.646073] Swap cache stats: add 0, delete 0, find 0/0 [ 2158.651633] Free swap = 0kB [ 2158.661304] Total swap = 0kB [ 2158.664487] 2097051 pages RAM 14:58:33 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x408200, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f00000016c0)="4904e565354dbeee3d0a7d6117a5fa50d4124c31ad4be15b016935fe4d7ed3b0cc47c0e2970e56ada969eba342aebd5002e1865b94f2efb1d5da3cce09f907f5df737234138c54714c7cd52d41cde59586648c4b92d01e8c0da51e3bf6d77c6277bc8966ece594c5f86345d6b9e8f592beb946538f37a21da2d5811e373b256a6f5ede09af2e579547a468c7dcbf25", 0x8f, 0x40, &(0x7f0000001780)={0x11, 0xf6, 0x0, 0x1, 0x4, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x14) 14:58:33 executing program 0: openat$tun(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/net/tun\x00', 0x0, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000800)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000000)={'sit0\x00', r1, 0x0, 0x0, 0x0, 0x0, 0x22, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private2}}) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000040)={@mcast1, @private1={0xfc, 0x1, [], 0x1}, @remote, 0x1, 0xfffd, 0x5, 0x0, 0x759, 0x1010000, r1}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000000)='fou\x00', 0xffffffffffffffff) [ 2158.669077] 0 pages HighMem/MovableOnly [ 2158.673247] 363848 pages reserved [ 2158.676822] 0 pages cma reserved 14:58:33 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x408200, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f00000016c0)="4904e565354dbeee3d0a7d6117a5fa50d4124c31ad4be15b016935fe4d7ed3b0cc47c0e2970e56ada969eba342aebd5002e1865b94f2efb1d5da3cce09f907f5df737234138c54714c7cd52d41cde59586648c4b92d01e8c0da51e3bf6d77c6277bc8966ece594c5f86345d6b9e8f592beb946538f37a21da2d5811e373b256a6f5ede09af2e579547a468c7dcbf25", 0x8f, 0x40, &(0x7f0000001780)={0x11, 0xf6, 0x0, 0x1, 0x4, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x14) 14:58:33 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, 0x0) socket$rds(0x15, 0x5, 0x0) 14:58:33 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x408200, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f00000016c0)="4904e565354dbeee3d0a7d6117a5fa50d4124c31ad4be15b016935fe4d7ed3b0cc47c0e2970e56ada969eba342aebd5002e1865b94f2efb1d5da3cce09f907f5df737234138c54714c7cd52d41cde59586648c4b92d01e8c0da51e3bf6d77c6277bc8966ece594c5f86345d6b9e8f592beb946538f37a21da2d5811e373b256a6f5ede09af2e579547a468c7dcbf25", 0x8f, 0x40, &(0x7f0000001780)={0x11, 0xf6, 0x0, 0x1, 0x4, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x14) 14:58:33 executing program 0: ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000400)={0x0, 0x0, "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", "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"}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, 0x0) [ 2159.757062] syz-executor.3 invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 2159.825854] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 2159.855127] CPU: 0 PID: 16116 Comm: syz-executor.3 Not tainted 4.14.229-syzkaller #0 [ 2159.863075] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2159.872435] Call Trace: [ 2159.875031] dump_stack+0x1b2/0x281 [ 2159.878670] dump_header+0x178/0x82f [ 2159.882388] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2159.887491] ? ___ratelimit+0x2cd/0x530 [ 2159.891472] oom_kill_process.cold+0x10/0xa40 [ 2159.895981] out_of_memory+0xe3e/0x1190 [ 2159.899962] ? oom_killer_disable+0x1c0/0x1c0 [ 2159.904457] ? mutex_trylock+0x152/0x1a0 [ 2159.908522] __alloc_pages_nodemask+0x23e1/0x2720 [ 2159.913385] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2159.918252] alloc_pages_current+0x155/0x260 [ 2159.922664] filemap_fault+0x11a1/0x1ad0 [ 2159.926736] ext4_filemap_fault+0x84/0xb0 [ 2159.930882] __do_fault+0xfa/0x380 [ 2159.934420] __handle_mm_fault+0x2497/0x4620 [ 2159.938829] ? vm_insert_page+0x7c0/0x7c0 [ 2159.942980] ? hrtimer_nanosleep+0x1ff/0x4b0 [ 2159.947387] ? nanosleep_copyout+0x100/0x100 [ 2159.951803] ? mark_held_locks+0xa6/0xf0 [ 2159.955868] handle_mm_fault+0x455/0x9c0 [ 2159.959933] __do_page_fault+0x549/0xad0 [ 2159.963999] ? spurious_fault+0x640/0x640 [ 2159.968150] ? do_page_fault+0x60/0x500 [ 2159.972126] ? page_fault+0x2f/0x50 [ 2159.975753] page_fault+0x45/0x50 [ 2159.979204] RIP: 20ec16:0x3 [ 2159.982134] RSP: 031c:00007ffe54ba04ec EFLAGS: 00000000 [ 2160.055687] Mem-Info: [ 2160.066611] active_anon:17348 inactive_anon:51443 isolated_anon:0 [ 2160.066611] active_file:10 inactive_file:2 isolated_file:27 [ 2160.066611] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2160.066611] slab_reclaimable:12278 slab_unreclaimable:126771 [ 2160.066611] mapped:43913 shmem:51983 pagetables:2928 bounce:0 [ 2160.066611] free:25119 free_pcp:126 free_cma:0 [ 2160.103474] Node 0 active_anon:64128kB inactive_anon:172456kB active_file:16kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):108kB mapped:140836kB dirty:0kB writeback:0kB shmem:174280kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 14336kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2160.135298] Node 1 active_anon:5264kB inactive_anon:33316kB active_file:24kB inactive_file:20kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:34816kB dirty:0kB writeback:0kB shmem:33652kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2160.168031] Node 0 DMA free:11060kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2160.197812] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2160.202866] Node 0 DMA32 free:36096kB min:36200kB low:45248kB high:54296kB active_anon:64128kB inactive_anon:172456kB active_file:20kB inactive_file:88kB unevictable:0kB writepending:0kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:8192kB pagetables:5328kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2160.235027] lowmem_reserve[]: 0 0 0 0 0 [ 2160.239142] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2160.273782] lowmem_reserve[]: 0 0 0 0 0 [ 2160.280637] Node 1 Normal free:53320kB min:53696kB low:67120kB high:80544kB active_anon:5264kB inactive_anon:33316kB active_file:24kB inactive_file:20kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:2240kB pagetables:6384kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2160.314591] lowmem_reserve[]: 0 0 0 0 0 [ 2160.318667] Node 0 DMA: 31*4kB (UME) 11*8kB (UM) 8*16kB (UM) 7*32kB (ME) 6*64kB (ME) 5*128kB (UME) 7*256kB (UME) 5*512kB (UE) 1*1024kB (E) 2*2048kB (UM) 0*4096kB = 11060kB [ 2160.337561] Node 0 DMA32: 968*4kB (UME) 97*8kB (UME) 31*16kB (UME) 19*32kB (UME) 254*64kB (UM) 104*128kB (UM) 5*256kB (UM) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36600kB [ 2160.356031] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2160.367016] Node 1 Normal: 64*4kB (UM) 27*8kB (UM) 9*16kB (M) 5*32kB (UM) 309*64kB (UM) 182*128kB (U) 13*256kB (UM) 2*512kB (UM) 5*1024kB (U) 0*2048kB 0*4096kB = 53320kB [ 2160.385567] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2160.394538] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2160.407206] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2160.416218] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2160.431802] 52101 total pagecache pages [ 2160.435907] 0 pages in swap cache [ 2160.439491] Swap cache stats: add 0, delete 0, find 0/0 [ 2160.444866] Free swap = 0kB [ 2160.447999] Total swap = 0kB [ 2160.451022] 2097051 pages RAM [ 2160.454124] 0 pages HighMem/MovableOnly [ 2160.458151] 363848 pages reserved [ 2160.461612] 0 pages cma reserved [ 2160.464999] Out of memory (oom_kill_allocating_task): Kill process 16116 (syz-executor.3) score 0 or sacrifice child [ 2160.476172] Killed process 17568 (syz-executor.3) total-vm:93252kB, anon-rss:2200kB, file-rss:34628kB, shmem-rss:0kB [ 2160.495031] oom_reaper: reaped process 17568 (syz-executor.3), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 2160.717356] oom_reaper: reaped process 28924 (syz-executor.1), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 2160.778022] syz-executor.1 invoked oom-killer: gfp_mask=0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null), order=0, oom_score_adj=1000 [ 2160.797962] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 2160.803136] CPU: 1 PID: 28918 Comm: syz-executor.1 Not tainted 4.14.229-syzkaller #0 [ 2160.811029] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2160.820399] Call Trace: [ 2160.823004] dump_stack+0x1b2/0x281 [ 2160.826635] dump_header+0x178/0x82f [ 2160.830352] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2160.835456] ? ___ratelimit+0x2cd/0x530 [ 2160.839430] oom_kill_process.cold+0x10/0xa40 [ 2160.843935] out_of_memory+0xe3e/0x1190 [ 2160.847914] ? oom_killer_disable+0x1c0/0x1c0 [ 2160.852432] ? mutex_trylock+0x152/0x1a0 [ 2160.856494] __alloc_pages_nodemask+0x23e1/0x2720 [ 2160.861343] ? lock_acquire+0x170/0x3f0 [ 2160.865339] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2160.870174] ? ion_page_pool_alloc+0x9e/0x1b0 [ 2160.874671] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2160.880126] ? alloc_pages_current+0x16/0x260 [ 2160.884624] alloc_pages_current+0x155/0x260 [ 2160.889032] ion_page_pool_alloc+0x118/0x1b0 [ 2160.893436] ion_system_heap_allocate+0x133/0x8c0 [ 2160.898300] ? ion_alloc+0x187/0x810 [ 2160.902017] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2160.907482] ? ion_system_contig_heap_create+0x130/0x130 [ 2160.912937] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2160.917957] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2160.922804] ion_alloc+0x204/0x810 [ 2160.926345] ? ion_dma_buf_release+0x40/0x40 [ 2160.930754] ? __might_fault+0x177/0x1b0 [ 2160.934817] ion_ioctl+0xea/0x1f0 [ 2160.938281] ? ion_query_heaps+0x360/0x360 [ 2160.942522] ? ion_query_heaps+0x360/0x360 [ 2160.946781] do_vfs_ioctl+0x75a/0xff0 [ 2160.950592] ? ioctl_preallocate+0x1a0/0x1a0 [ 2160.955002] ? lock_downgrade+0x740/0x740 [ 2160.959152] ? __fget+0x225/0x360 [ 2160.962601] ? do_vfs_ioctl+0xff0/0xff0 [ 2160.966571] ? security_file_ioctl+0x83/0xb0 [ 2160.970979] SyS_ioctl+0x7f/0xb0 [ 2160.974340] ? do_vfs_ioctl+0xff0/0xff0 [ 2160.978322] do_syscall_64+0x1d5/0x640 [ 2160.982214] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2160.987403] RIP: 0033:0x466459 [ 2160.990586] RSP: 002b:00007fdc8e5a7188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2160.998295] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 2161.005570] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2161.012852] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2161.020125] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2161.027397] R13: 00007ffd2c2faa2f R14: 00007fdc8e5a7300 R15: 0000000000022000 [ 2161.041883] Mem-Info: [ 2161.044362] active_anon:16787 inactive_anon:51443 isolated_anon:0 [ 2161.044362] active_file:0 inactive_file:0 isolated_file:17 [ 2161.044362] unevictable:0 dirty:1 writeback:3 unstable:0 [ 2161.044362] slab_reclaimable:12278 slab_unreclaimable:126151 [ 2161.044362] mapped:43896 shmem:51983 pagetables:2905 bounce:0 [ 2161.044362] free:13927 free_pcp:5 free_cma:0 [ 2161.081010] Node 0 active_anon:61872kB inactive_anon:172456kB active_file:20kB inactive_file:20kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:140836kB dirty:0kB writeback:0kB shmem:174280kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2161.112224] Node 1 active_anon:5260kB inactive_anon:33316kB active_file:24kB inactive_file:20kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:34816kB dirty:4kB writeback:0kB shmem:33652kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2161.142591] Node 0 DMA free:10976kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2161.180255] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2161.185345] Node 0 DMA32 free:18244kB min:36200kB low:45248kB high:54296kB active_anon:61872kB inactive_anon:172456kB active_file:20kB inactive_file:20kB unevictable:0kB writepending:0kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:8160kB pagetables:5232kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2161.222418] syz-executor.1: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2161.231108] lowmem_reserve[]: 0 0 0 0 0 [ 2161.240222] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 2161.245554] CPU: 0 PID: 28924 Comm: syz-executor.1 Not tainted 4.14.229-syzkaller #0 [ 2161.253442] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2161.254375] Node 0 [ 2161.262819] Call Trace: [ 2161.262845] dump_stack+0x1b2/0x281 [ 2161.262857] warn_alloc.cold+0x96/0x1cc [ 2161.262869] ? zone_watermark_ok_safe+0x220/0x220 [ 2161.262879] ? usleep_range+0x130/0x130 [ 2161.262888] ? try_to_free_pages+0x23f/0x6e0 [ 2161.262898] ? _find_next_bit+0xdb/0x100 [ 2161.262907] ? run_timer_softirq+0x5a0/0x5a0 [ 2161.262925] __alloc_pages_nodemask+0x2127/0x2720 [ 2161.262950] ? lock_acquire+0x170/0x3f0 [ 2161.262964] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2161.281065] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2161.284153] ? ion_page_pool_alloc+0x9e/0x1b0 [ 2161.297109] lowmem_reserve[]: [ 2161.297169] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2161.307412] 0 [ 2161.310814] alloc_pages_current+0x155/0x260 [ 2161.310829] ion_page_pool_alloc+0x118/0x1b0 [ 2161.310838] ion_system_heap_allocate+0x133/0x8c0 [ 2161.310847] ? ion_alloc+0x187/0x810 [ 2161.310858] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2161.310868] ? ion_system_contig_heap_create+0x130/0x130 [ 2161.310878] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2161.310889] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2161.310899] ion_alloc+0x204/0x810 [ 2161.310912] ? ion_dma_buf_release+0x40/0x40 [ 2161.310924] ? __might_fault+0x177/0x1b0 [ 2161.350411] 0 [ 2161.350968] ion_ioctl+0xea/0x1f0 [ 2161.355452] 0 [ 2161.359865] ? ion_query_heaps+0x360/0x360 [ 2161.359877] ? ion_query_heaps+0x360/0x360 [ 2161.359887] do_vfs_ioctl+0x75a/0xff0 [ 2161.359898] ? ioctl_preallocate+0x1a0/0x1a0 [ 2161.359908] ? lock_downgrade+0x740/0x740 [ 2161.359920] ? __fget+0x225/0x360 [ 2161.359928] ? do_vfs_ioctl+0xff0/0xff0 [ 2161.359940] ? security_file_ioctl+0x83/0xb0 [ 2161.359950] SyS_ioctl+0x7f/0xb0 [ 2161.359958] ? do_vfs_ioctl+0xff0/0xff0 [ 2161.359970] do_syscall_64+0x1d5/0x640 [ 2161.359985] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2161.380183] 0 [ 2161.385045] RIP: 0033:0x466459 [ 2161.402702] 0 [ 2161.403676] RSP: 002b:00007fdc8e586188 EFLAGS: 00000246 [ 2161.408947] ORIG_RAX: 0000000000000010 [ 2161.408954] RAX: ffffffffffffffda RBX: 000000000056c008 RCX: 0000000000466459 [ 2161.408959] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2161.408963] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2161.408968] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c008 [ 2161.408973] R13: 00007ffd2c2faa2f R14: 00007fdc8e586300 R15: 0000000000022000 [ 2161.427799] warn_alloc_show_mem: 3 callbacks suppressed [ 2161.427803] Mem-Info: [ 2161.444860] Node 1 [ 2161.455996] active_anon:16783 inactive_anon:51443 isolated_anon:0 [ 2161.455996] active_file:11 inactive_file:10 isolated_file:0 [ 2161.455996] unevictable:0 dirty:1 writeback:0 unstable:0 [ 2161.455996] slab_reclaimable:12278 slab_unreclaimable:126132 [ 2161.455996] mapped:43913 shmem:51983 pagetables:2904 bounce:0 [ 2161.455996] free:13889 free_pcp:0 free_cma:0 [ 2161.468227] Normal free:26876kB min:53696kB low:67120kB high:80544kB active_anon:5260kB inactive_anon:33316kB active_file:24kB inactive_file:20kB unevictable:0kB writepending:4kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:2240kB pagetables:6384kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2161.481428] Node 0 active_anon:61872kB inactive_anon:172456kB active_file:20kB inactive_file:20kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:140836kB dirty:0kB writeback:0kB shmem:174280kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2161.491654] lowmem_reserve[]: [ 2161.506309] Node 1 active_anon:5260kB inactive_anon:33316kB active_file:24kB inactive_file:20kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:34816kB dirty:4kB writeback:0kB shmem:33652kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2161.521250] 0 [ 2161.531416] Node 0 [ 2161.566025] 0 [ 2161.594305] DMA free:10976kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2161.620807] 0 [ 2161.652087] lowmem_reserve[]: [ 2161.683328] 0 [ 2161.685904] 0 [ 2161.686472] 0 [ 2161.690534] 2717 2718 2718 2718 [ 2161.695721] Node 0 [ 2161.695724] Node 0 DMA: 10*4kB (UME) 11*8kB (UM) 8*16kB (UM) 7*32kB (ME) 6*64kB (ME) 5*128kB (UME) 7*256kB (UME) 5*512kB (UE) 1*1024kB (E) 2*2048kB (UM) 0*4096kB = 10976kB [ 2161.706790] DMA32 free:17704kB min:36200kB low:45248kB high:54296kB active_anon:61872kB inactive_anon:172456kB active_file:20kB inactive_file:20kB unevictable:0kB writepending:0kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:8160kB pagetables:5232kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2161.730144] Node 0 [ 2161.753090] lowmem_reserve[]: 0 0 0 0 0 [ 2161.759410] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2161.773508] DMA32: [ 2161.792127] lowmem_reserve[]: 0 0 0 0 0 [ 2161.798460] Node 1 Normal free:26876kB min:53696kB low:67120kB high:80544kB active_anon:5260kB inactive_anon:33316kB active_file:24kB inactive_file:20kB unevictable:0kB writepending:4kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:2240kB pagetables:6384kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2161.801695] 993*4kB [ 2161.833783] lowmem_reserve[]: 0 0 0 0 0 [ 2161.840173] Node 0 DMA: 10*4kB (UME) 11*8kB (UM) 8*16kB (UM) 7*32kB (ME) 6*64kB (ME) 5*128kB (UME) 7*256kB (UME) 5*512kB (UE) 1*1024kB (E) 2*2048kB (UM) 0*4096kB = 10976kB [ 2161.841473] (ME) [ 2161.862646] Node 0 DMA32: 993*4kB (ME) 99*8kB (UME) 26*16kB (ME) 14*32kB (ME) 11*64kB (UM) 62*128kB (UM) 6*256kB (UM) 0*512kB 0*1024kB 1*2048kB (M) 0*4096kB = 17852kB [ 2161.870647] 99*8kB [ 2161.887019] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2161.895536] (UME) 26*16kB (ME) 14*32kB (ME) 11*64kB (UM) 62*128kB (UM) 6*256kB (UM) 0*512kB 0*1024kB 1*2048kB (M) 0*4096kB = 17852kB [ 2161.906581] Node 1 Normal: 62*4kB (M) 27*8kB (UM) 10*16kB (UM) 5*32kB (UM) 4*64kB (M) 128*128kB (U) 13*256kB (UM) 2*512kB (UM) 5*1024kB (U) 0*2048kB 0*4096kB = 26896kB [ 2161.932608] Node 0 [ 2161.946919] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2161.955974] Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2161.964668] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2161.982597] Node 1 Normal: 62*4kB (M) 27*8kB (UM) 10*16kB (UM) 5*32kB (UM) 4*64kB (M) 128*128kB (U) 13*256kB (UM) 2*512kB (UM) 5*1024kB (U) 0*2048kB 0*4096kB = 26896kB [ 2161.992017] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2162.007467] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2162.014996] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2162.016386] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2162.036103] 52004 total pagecache pages [ 2162.044051] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2162.048567] 0 pages in swap cache [ 2162.055436] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2162.056470] Swap cache stats: add 0, delete 0, find 0/0 [ 2162.075316] 52004 total pagecache pages [ 2162.081361] Free swap = 0kB [ 2162.082171] 0 pages in swap cache [ 2162.084386] Total swap = 0kB [ 2162.095147] Swap cache stats: add 0, delete 0, find 0/0 [ 2162.099655] 2097051 pages RAM [ 2162.103412] Free swap = 0kB [ 2162.103769] 0 pages HighMem/MovableOnly [ 2162.106802] Total swap = 0kB [ 2162.121740] 363848 pages reserved [ 2162.124169] 2097051 pages RAM [ 2162.125218] 0 pages cma reserved [ 2162.130633] 0 pages HighMem/MovableOnly [ 2162.135763] 363848 pages reserved [ 2162.157849] 0 pages cma reserved [ 2162.173518] Out of memory (oom_kill_allocating_task): Kill process 28918 (syz-executor.1) score 0 or sacrifice child [ 2162.218161] Killed process 28918 (syz-executor.1) total-vm:93516kB, anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 2162.658391] oom_reaper: reaped process 28928 (syz-executor.2), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 2162.704419] syz-executor.1: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2162.718869] systemd-journal invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 2162.744999] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 2162.754044] systemd-journal cpuset=/ mems_allowed=0-1 [ 2162.759554] CPU: 1 PID: 28912 Comm: systemd-journal Not tainted 4.14.229-syzkaller #0 [ 2162.767540] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2162.777342] Call Trace: [ 2162.779944] dump_stack+0x1b2/0x281 [ 2162.783585] dump_header+0x178/0x82f [ 2162.787323] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2162.792585] ? ___ratelimit+0x2cd/0x530 [ 2162.796573] oom_kill_process.cold+0x10/0xa40 [ 2162.801100] out_of_memory+0xe3e/0x1190 [ 2162.805097] ? oom_killer_disable+0x1c0/0x1c0 [ 2162.809598] ? mutex_trylock+0x152/0x1a0 [ 2162.813760] __alloc_pages_nodemask+0x23e1/0x2720 [ 2162.818628] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2162.823505] alloc_pages_current+0x155/0x260 [ 2162.827951] filemap_fault+0x11a1/0x1ad0 [ 2162.832029] ext4_filemap_fault+0x84/0xb0 [ 2162.836179] __do_fault+0xfa/0x380 [ 2162.839722] __handle_mm_fault+0x2497/0x4620 [ 2162.844161] ? vm_insert_page+0x7c0/0x7c0 [ 2162.848324] ? mark_held_locks+0xa6/0xf0 [ 2162.852401] handle_mm_fault+0x455/0x9c0 [ 2162.856479] __do_page_fault+0x549/0xad0 [ 2162.860569] ? spurious_fault+0x640/0x640 [ 2162.864726] ? do_page_fault+0x60/0x500 [ 2162.868700] page_fault+0x25/0x50 [ 2162.872186] RIP: 0010:strncpy_from_user+0x18c/0x2c0 [ 2162.877193] RSP: 0018:ffff88801f127da8 EFLAGS: 00010246 [ 2162.882563] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 000000000000000c [ 2162.889840] RDX: 0000000000000000 RSI: 0000000000000fe4 RDI: ffff88809bce5918 [ 2162.897285] RBP: 000055f078ee89a3 R08: 0000000000000fe4 R09: ffff888060984400 [ 2162.904562] R10: ffff8880609853ff R11: 0000000000000000 R12: 0000000000000fe4 [ 2162.911868] R13: ffff88806098441c R14: 000055f078ee9987 R15: dffffc0000000000 [ 2162.919178] ? strncpy_from_user+0x18a/0x2c0 [ 2162.923594] getname_flags+0x10d/0x550 [ 2162.927489] user_path_at_empty+0x2a/0x50 [ 2162.931673] SyS_faccessat+0x21b/0x680 [ 2162.935582] ? SyS_fallocate+0x80/0x80 [ 2162.939469] ? do_syscall_64+0x4c/0x640 [ 2162.943461] ? SyS_faccessat+0x680/0x680 [ 2162.947540] do_syscall_64+0x1d5/0x640 [ 2162.951436] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2162.956620] RIP: 0033:0x7fd05baf29c7 [ 2162.960321] RSP: 002b:00007fff21ea46a8 EFLAGS: 00000246 ORIG_RAX: 0000000000000015 [ 2162.968044] RAX: ffffffffffffffda RBX: 00007fff21ea75c0 RCX: 00007fd05baf29c7 [ 2162.975316] RDX: 00007fd05c563a00 RSI: 0000000000000000 RDI: 000055f078ee89a3 [ 2162.982597] RBP: 00007fff21ea46e0 R08: 0000000000000000 R09: 0000000000000000 [ 2162.989870] R10: 0000000000000069 R11: 0000000000000246 R12: 0000000000000000 [ 2162.997154] R13: 0000000000000000 R14: 00007fff21ea75c0 R15: 00007fff21ea4bd0 [ 2163.009632] CPU: 1 PID: 28924 Comm: syz-executor.1 Not tainted 4.14.229-syzkaller #0 [ 2163.017545] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2163.026905] Call Trace: [ 2163.029503] dump_stack+0x1b2/0x281 [ 2163.033136] warn_alloc.cold+0x96/0x1cc [ 2163.037258] ? zone_watermark_ok_safe+0x220/0x220 [ 2163.042125] __alloc_pages_nodemask+0x2127/0x2720 [ 2163.046976] ? check_preemption_disabled+0x35/0x240 [ 2163.052001] ? lock_acquire+0x170/0x3f0 [ 2163.055984] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2163.060842] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2163.066308] ? __mutex_unlock_slowpath+0x75/0x770 [ 2163.071192] alloc_pages_current+0x155/0x260 [ 2163.075616] ion_page_pool_alloc+0x118/0x1b0 [ 2163.080033] ion_system_heap_allocate+0x133/0x8c0 [ 2163.084890] ? _raw_spin_unlock+0x29/0x40 [ 2163.089166] ? _ion_heap_freelist_drain+0x6e/0x410 [ 2163.094099] ? ion_system_contig_heap_create+0x130/0x130 [ 2163.099564] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2163.104603] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2163.109472] ion_alloc+0x27a/0x810 [ 2163.113026] ? ion_dma_buf_release+0x40/0x40 [ 2163.117549] ? __might_fault+0x177/0x1b0 [ 2163.121638] ion_ioctl+0xea/0x1f0 [ 2163.125096] ? ion_query_heaps+0x360/0x360 [ 2163.129348] ? ion_query_heaps+0x360/0x360 [ 2163.133595] do_vfs_ioctl+0x75a/0xff0 [ 2163.137406] ? ioctl_preallocate+0x1a0/0x1a0 [ 2163.141829] ? lock_downgrade+0x740/0x740 [ 2163.145977] ? __fget+0x225/0x360 [ 2163.149427] ? do_vfs_ioctl+0xff0/0xff0 [ 2163.153400] ? security_file_ioctl+0x83/0xb0 [ 2163.157805] SyS_ioctl+0x7f/0xb0 [ 2163.161185] ? do_vfs_ioctl+0xff0/0xff0 [ 2163.165156] do_syscall_64+0x1d5/0x640 [ 2163.169062] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2163.174343] RIP: 0033:0x466459 [ 2163.177542] RSP: 002b:00007fdc8e586188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2163.185448] RAX: ffffffffffffffda RBX: 000000000056c008 RCX: 0000000000466459 [ 2163.192866] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2163.200150] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2163.207612] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c008 [ 2163.214892] R13: 00007ffd2c2faa2f R14: 00007fdc8e586300 R15: 0000000000022000 [ 2163.227996] syz-executor.2: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2163.230804] Mem-Info: [ 2163.239945] syz-executor.1: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2163.244552] active_anon:16791 inactive_anon:51443 isolated_anon:0 [ 2163.244552] active_file:27 inactive_file:20 isolated_file:0 [ 2163.244552] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2163.244552] slab_reclaimable:12273 slab_unreclaimable:126256 [ 2163.244552] mapped:48039 shmem:51983 pagetables:2904 bounce:0 [ 2163.244552] free:13793 free_pcp:30 free_cma:0 [ 2163.264107] syz-executor.2 cpuset= [ 2163.293505] Node 0 active_anon:61808kB inactive_anon:172456kB active_file:12kB inactive_file:12kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:144552kB dirty:0kB writeback:0kB shmem:174280kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2163.296438] syz-executor.1 cpuset= [ 2163.297093] Node 1 active_anon:5424kB inactive_anon:33316kB active_file:48kB inactive_file:48kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:47512kB dirty:0kB writeback:0kB shmem:33652kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2163.341550] / [ 2163.364378] / [ 2163.365593] Node 0 [ 2163.366130] mems_allowed=0-1 [ 2163.367897] DMA free:10976kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2163.370109] CPU: 0 PID: 28918 Comm: syz-executor.1 Not tainted 4.14.229-syzkaller #0 [ 2163.373191] lowmem_reserve[]: [ 2163.398820] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2163.398826] Call Trace: [ 2163.398849] dump_stack+0x1b2/0x281 [ 2163.398862] warn_alloc.cold+0x96/0x1cc [ 2163.398874] ? zone_watermark_ok_safe+0x220/0x220 [ 2163.398884] ? usleep_range+0x130/0x130 [ 2163.398892] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 2163.398903] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 2163.398913] ? run_timer_softirq+0x5a0/0x5a0 [ 2163.398930] __alloc_pages_nodemask+0x2127/0x2720 [ 2163.398945] ? lock_acquire+0x170/0x3f0 [ 2163.398961] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2163.398971] ? ion_page_pool_alloc+0x9e/0x1b0 [ 2163.398985] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2163.399004] alloc_pages_current+0x155/0x260 [ 2163.399019] ion_page_pool_alloc+0x118/0x1b0 [ 2163.412989] 0 [ 2163.419351] ion_system_heap_allocate+0x133/0x8c0 [ 2163.419362] ? ion_alloc+0x187/0x810 [ 2163.419372] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2163.419381] ? ion_system_contig_heap_create+0x130/0x130 [ 2163.419390] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2163.419402] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2163.419412] ion_alloc+0x204/0x810 [ 2163.419425] ? ion_dma_buf_release+0x40/0x40 [ 2163.423534] 2717 [ 2163.425639] ? __might_fault+0x177/0x1b0 [ 2163.434984] 2718 [ 2163.438402] ion_ioctl+0xea/0x1f0 [ 2163.438413] ? ion_query_heaps+0x360/0x360 [ 2163.438425] ? ion_query_heaps+0x360/0x360 [ 2163.438435] do_vfs_ioctl+0x75a/0xff0 [ 2163.438445] ? ioctl_preallocate+0x1a0/0x1a0 [ 2163.438454] ? lock_downgrade+0x740/0x740 [ 2163.438467] ? __fget+0x225/0x360 [ 2163.438476] ? do_vfs_ioctl+0xff0/0xff0 [ 2163.438488] ? security_file_ioctl+0x83/0xb0 [ 2163.438498] SyS_ioctl+0x7f/0xb0 [ 2163.445642] 2718 [ 2163.449304] ? do_vfs_ioctl+0xff0/0xff0 [ 2163.449318] do_syscall_64+0x1d5/0x640 [ 2163.449332] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2163.449340] RIP: 0033:0x466459 [ 2163.449344] RSP: 002b:00007fdc8e5a7188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2163.449353] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 2163.449359] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2163.449363] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2163.449368] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2163.449373] R13: 00007ffd2c2faa2f R14: 00007fdc8e5a7300 R15: 0000000000022000 [ 2163.458201] mems_allowed=0-1 [ 2163.466996] 2718 [ 2163.467581] CPU: 0 PID: 28928 Comm: syz-executor.2 Not tainted 4.14.229-syzkaller #0 [ 2163.477449] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2163.489284] Node 0 [ 2163.492880] Call Trace: [ 2163.496602] DMA32 free:18084kB min:36200kB low:45248kB high:54296kB active_anon:61808kB inactive_anon:172456kB active_file:12kB inactive_file:12kB unevictable:0kB writepending:0kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:8160kB pagetables:5244kB bounce:0kB free_pcp:320kB local_pcp:0kB free_cma:0kB [ 2163.502137] dump_stack+0x1b2/0x281 [ 2163.502151] warn_alloc.cold+0x96/0x1cc [ 2163.502162] ? zone_watermark_ok_safe+0x220/0x220 [ 2163.502171] ? usleep_range+0x130/0x130 [ 2163.502180] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 2163.502192] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 2163.502201] ? run_timer_softirq+0x5a0/0x5a0 [ 2163.502218] __alloc_pages_nodemask+0x2127/0x2720 [ 2163.502234] ? lock_acquire+0x170/0x3f0 [ 2163.502248] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2163.502258] ? ion_page_pool_alloc+0x9e/0x1b0 [ 2163.502273] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2163.502296] alloc_pages_current+0x155/0x260 [ 2163.515638] lowmem_reserve[]: [ 2163.518134] ion_page_pool_alloc+0x118/0x1b0 [ 2163.518145] ion_system_heap_allocate+0x133/0x8c0 [ 2163.518154] ? ion_alloc+0x187/0x810 [ 2163.518165] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2163.518173] ? ion_system_contig_heap_create+0x130/0x130 [ 2163.518183] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2163.518194] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2163.518204] ion_alloc+0x204/0x810 [ 2163.518220] ? ion_dma_buf_release+0x40/0x40 [ 2163.521756] 0 [ 2163.526165] ? __might_fault+0x177/0x1b0 [ 2163.535551] 0 [ 2163.537810] ion_ioctl+0xea/0x1f0 [ 2163.537821] ? ion_query_heaps+0x360/0x360 [ 2163.537832] ? ion_query_heaps+0x360/0x360 [ 2163.537842] do_vfs_ioctl+0x75a/0xff0 [ 2163.537853] ? ioctl_preallocate+0x1a0/0x1a0 [ 2163.537862] ? lock_downgrade+0x740/0x740 [ 2163.537875] ? __fget+0x225/0x360 [ 2163.537884] ? do_vfs_ioctl+0xff0/0xff0 [ 2163.537896] ? security_file_ioctl+0x83/0xb0 [ 2163.537907] SyS_ioctl+0x7f/0xb0 [ 2163.537915] ? do_vfs_ioctl+0xff0/0xff0 [ 2163.537927] do_syscall_64+0x1d5/0x640 [ 2163.537941] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2163.537949] RIP: 0033:0x466459 [ 2163.537958] RSP: 002b:00007fc228c87188 EFLAGS: 00000246 [ 2163.547408] 0 [ 2163.550207] ORIG_RAX: 0000000000000010 [ 2163.550213] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 2163.550218] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2163.550223] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2163.550228] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2163.550232] R13: 00007ffe5f3badff R14: 00007fc228c87300 R15: 0000000000022000 [ 2164.017869] Mem-Info: [ 2164.020358] active_anon:16808 inactive_anon:51443 isolated_anon:0 [ 2164.020358] active_file:24 inactive_file:1339 isolated_file:0 [ 2164.020358] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2164.020358] slab_reclaimable:12269 slab_unreclaimable:126071 [ 2164.020358] mapped:53581 shmem:51983 pagetables:2948 bounce:0 [ 2164.020358] free:65413 free_pcp:218 free_cma:0 [ 2164.087951] syz-executor.1: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2164.101434] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 2164.106587] CPU: 1 PID: 28918 Comm: syz-executor.1 Not tainted 4.14.229-syzkaller #0 [ 2164.114470] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2164.122020] Node 0 active_anon:61808kB inactive_anon:172456kB active_file:1016kB inactive_file:1144kB unevictable:0kB isolated(anon):0kB isolated(file):128kB mapped:164156kB dirty:0kB writeback:0kB shmem:174280kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2164.123832] Call Trace: [ 2164.154804] dump_stack+0x1b2/0x281 [ 2164.158463] warn_alloc.cold+0x96/0x1cc [ 2164.162470] ? zone_watermark_ok_safe+0x220/0x220 [ 2164.167343] __alloc_pages_nodemask+0x2127/0x2720 [ 2164.172375] ? lock_acquire+0x170/0x3f0 [ 2164.176358] ? lock_acquire+0x170/0x3f0 [ 2164.180344] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2164.185209] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2164.187810] Node 1 active_anon:5424kB inactive_anon:33316kB active_file:4kB inactive_file:24kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:48368kB dirty:0kB writeback:0kB shmem:33652kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2164.190670] ? __mutex_unlock_slowpath+0x75/0x770 [ 2164.222520] alloc_pages_current+0x155/0x260 [ 2164.227048] ion_page_pool_alloc+0x118/0x1b0 [ 2164.231466] ion_system_heap_allocate+0x133/0x8c0 [ 2164.236316] ? _raw_spin_unlock+0x29/0x40 [ 2164.240468] ? _ion_heap_freelist_drain+0x6e/0x410 [ 2164.245954] ? ion_system_contig_heap_create+0x130/0x130 [ 2164.247797] Node 0 [ 2164.251425] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2164.251447] DMA free:10976kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2164.253670] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2164.267800] lowmem_reserve[]: [ 2164.284215] ion_alloc+0x27a/0x810 [ 2164.284231] ? ion_dma_buf_release+0x40/0x40 [ 2164.284244] ? __might_fault+0x177/0x1b0 [ 2164.284256] ion_ioctl+0xea/0x1f0 [ 2164.308492] ? ion_query_heaps+0x360/0x360 [ 2164.312746] ? ion_query_heaps+0x360/0x360 [ 2164.316983] do_vfs_ioctl+0x75a/0xff0 [ 2164.317781] 0 2717 [ 2164.320789] ? ioctl_preallocate+0x1a0/0x1a0 [ 2164.320801] ? lock_downgrade+0x740/0x740 [ 2164.323029] 2718 [ 2164.327441] ? __fget+0x225/0x360 [ 2164.337130] ? do_vfs_ioctl+0xff0/0xff0 [ 2164.337792] 2718 [ 2164.341146] ? security_file_ioctl+0x83/0xb0 [ 2164.341148] 2718 [ 2164.343243] SyS_ioctl+0x7f/0xb0 [ 2164.347665] Node 0 [ 2164.349726] ? do_vfs_ioctl+0xff0/0xff0 [ 2164.349739] do_syscall_64+0x1d5/0x640 [ 2164.349752] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2164.349761] RIP: 0033:0x466459 [ 2164.349765] RSP: 002b:00007fdc8e5a7188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2164.367812] DMA32 free:151400kB min:36200kB low:45248kB high:54296kB active_anon:61808kB inactive_anon:172456kB active_file:604kB inactive_file:1364kB unevictable:0kB writepending:0kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:8192kB pagetables:5368kB bounce:0kB free_pcp:848kB local_pcp:640kB free_cma:0kB [ 2164.368413] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 2164.371630] lowmem_reserve[]: [ 2164.379348] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2164.379354] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2164.379358] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2164.379363] R13: 00007ffd2c2faa2f R14: 00007fdc8e5a7300 R15: 0000000000022000 [ 2164.390218] 0 [ 2164.451736] warn_alloc_show_mem: 2 callbacks suppressed [ 2164.451740] Mem-Info: [ 2164.468284] active_anon:16808 inactive_anon:51443 isolated_anon:12 [ 2164.468284] active_file:280 inactive_file:667 isolated_file:0 [ 2164.468284] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2164.468284] slab_reclaimable:12269 slab_unreclaimable:126071 [ 2164.468284] mapped:53381 shmem:51983 pagetables:2948 bounce:0 [ 2164.468284] free:64969 free_pcp:162 free_cma:0 [ 2164.487799] 0 [ 2164.511499] Node 0 active_anon:61808kB inactive_anon:172456kB active_file:1116kB inactive_file:2440kB unevictable:0kB isolated(anon):48kB isolated(file):0kB mapped:164956kB dirty:0kB writeback:0kB shmem:174280kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2164.527803] 0 [ 2164.548479] 0 [ 2164.549239] syz-executor.2: [ 2164.552119] page allocation failure: order:4 [ 2164.555121] Node 0 [ 2164.555128] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2164.560233] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2164.577796] 0 [ 2164.603327] Node 1 active_anon:5424kB inactive_anon:33316kB active_file:4kB inactive_file:24kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:48368kB dirty:0kB writeback:0kB shmem:33652kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2164.607789] syz-executor.2 cpuset= [ 2164.632872] lowmem_reserve[]: 0 0 0 0 0 [ 2164.632897] Node 1 Normal free:127888kB min:53696kB low:67120kB high:80544kB active_anon:5424kB inactive_anon:33316kB active_file:368kB inactive_file:128kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:2272kB pagetables:6424kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2164.667803] / mems_allowed=0-1 [ 2164.680690] Node 0 DMA free:10996kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2164.688154] CPU: 0 PID: 28928 Comm: syz-executor.2 Not tainted 4.14.229-syzkaller #0 [ 2164.710920] 0 [ 2164.715446] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2164.715456] 0 [ 2164.717247] Call Trace: [ 2164.727434] lowmem_reserve[]: [ 2164.729158] dump_stack+0x1b2/0x281 [ 2164.729172] warn_alloc.cold+0x96/0x1cc [ 2164.729185] ? zone_watermark_ok_safe+0x220/0x220 [ 2164.729206] __alloc_pages_nodemask+0x2127/0x2720 [ 2164.729216] ? _raw_spin_unlock_irq+0x24/0x80 [ 2164.729233] ? lock_acquire+0x170/0x3f0 [ 2164.729249] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2164.738700] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2164.738712] ? __mutex_unlock_slowpath+0x75/0x770 [ 2164.738727] alloc_pages_current+0x155/0x260 [ 2164.738741] ion_page_pool_alloc+0x118/0x1b0 [ 2164.738751] ion_system_heap_allocate+0x133/0x8c0 [ 2164.738762] ? _raw_spin_unlock+0x29/0x40 [ 2164.738775] ? _ion_heap_freelist_drain+0x6e/0x410 [ 2164.742851] Node 0 [ 2164.747714] ? ion_system_contig_heap_create+0x130/0x130 [ 2164.755857] 0 [ 2164.757043] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2164.761101] lowmem_reserve[]: [ 2164.765875] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2164.774591] 2717 [ 2164.776254] ion_alloc+0x27a/0x810 [ 2164.780761] 0 [ 2164.785067] ? ion_dma_buf_release+0x40/0x40 [ 2164.793178] 2718 [ 2164.794049] ? __might_fault+0x177/0x1b0 [ 2164.799153] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2164.801281] ion_ioctl+0xea/0x1f0 [ 2164.806912] lowmem_reserve[]: [ 2164.808744] ? ion_query_heaps+0x360/0x360 [ 2164.808756] ? ion_query_heaps+0x360/0x360 [ 2164.808766] do_vfs_ioctl+0x75a/0xff0 [ 2164.808777] ? ioctl_preallocate+0x1a0/0x1a0 [ 2164.808786] ? lock_downgrade+0x740/0x740 [ 2164.808798] ? __fget+0x225/0x360 [ 2164.808806] ? do_vfs_ioctl+0xff0/0xff0 [ 2164.808817] ? security_file_ioctl+0x83/0xb0 [ 2164.808827] SyS_ioctl+0x7f/0xb0 [ 2164.808835] ? do_vfs_ioctl+0xff0/0xff0 [ 2164.808847] do_syscall_64+0x1d5/0x640 [ 2164.808861] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2164.817065] 2718 [ 2164.823055] RIP: 0033:0x466459 [ 2164.823060] RSP: 002b:00007fc228c87188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2164.823069] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 2164.823074] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2164.823079] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2164.823083] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2164.823088] R13: 00007ffe5f3badff R14: 00007fc228c87300 R15: 0000000000022000 [ 2164.910031] 0 [ 2164.912776] 0 [ 2164.916557] 0 [ 2164.920526] 0 0 0 [ 2164.920543] Node 0 [ 2164.939092] 0 [ 2164.947083] DMA: [ 2164.980360] 0 [ 2164.982312] 18*4kB [ 2164.984026] 0 [ 2164.986248] (UME) 5*8kB (UM) 5*16kB (M) 8*32kB (UME) 7*64kB (UME) 5*128kB (UME) 7*256kB (UME) 5*512kB (UE) 1*1024kB (E) 2*2048kB (UM) 0*4096kB = 11008kB [ 2165.010333] Node 0 DMA32: 21069*4kB (UME) 6092*8kB (UME) 4513*16kB (UE) 2324*32kB (UE) 243*64kB (U) 2*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 295396kB [ 2165.026291] 2718 [ 2165.026584] Node 1 [ 2165.028514] Node 0 DMA32 free:295968kB min:36200kB low:45248kB high:54296kB active_anon:61808kB inactive_anon:172456kB active_file:956kB inactive_file:1796kB unevictable:0kB writepending:68kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:8192kB pagetables:5368kB bounce:0kB free_pcp:660kB local_pcp:20kB free_cma:0kB [ 2165.028544] lowmem_reserve[]: [ 2165.034465] Normal free:210440kB min:53696kB low:67120kB high:80544kB active_anon:5424kB inactive_anon:33316kB active_file:400kB inactive_file:136kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:2272kB pagetables:6424kB bounce:0kB free_pcp:680kB local_pcp:680kB free_cma:0kB [ 2165.064858] Node 0 [ 2165.097885] 0 0 0 0 0 [ 2165.103746] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2165.133001] Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2165.143351] Node 1 Normal: 17334*4kB (UM) 6507*8kB (UM) 2838*16kB (UM) 1978*32kB (UM) 269*64kB (U) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 247312kB [ 2165.161301] lowmem_reserve[]: 0 0 0 0 0 [ 2165.165364] Node 1 Normal free:255884kB min:53696kB low:67120kB high:80544kB active_anon:5428kB inactive_anon:33316kB active_file:48kB inactive_file:48kB unevictable:0kB writepending:4kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:2272kB pagetables:6424kB bounce:0kB free_pcp:728kB local_pcp:0kB free_cma:0kB [ 2165.197627] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2165.206618] lowmem_reserve[]: 0 0 0 0 0 [ 2165.214349] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2165.223202] Node 0 DMA: 23*4kB (UME) 5*8kB (UM) 5*16kB (M) 8*32kB (UME) 7*64kB (UME) 5*128kB (UME) 7*256kB (UME) 5*512kB (UE) 1*1024kB (E) 2*2048kB (UM) 0*4096kB = 11028kB [ 2165.242355] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2165.251412] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2165.263576] Node 0 DMA32: 9818*4kB (UE) 6090*8kB (UE) 4516*16kB (UE) 2366*32kB (UE) 260*64kB (UM) 2*128kB (UM) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 252856kB [ 2165.277802] lowmem_reserve[]: 0 0 0 0 0 [ 2165.281849] 52865 total pagecache pages [ 2165.283144] Node 0 DMA: [ 2165.286533] 0 pages in swap cache [ 2165.286542] 23*4kB [ 2165.289449] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2165.306209] (UME) 5*8kB (UM) 5*16kB (M) 8*32kB (UME) 7*64kB (UME) 5*128kB (UME) 7*256kB (UME) 5*512kB (UE) 1*1024kB (E) 2*2048kB (UM) 0*4096kB = 11028kB [ 2165.309341] Swap cache stats: add 0, delete 0, find 0/0 [ 2165.327511] Free swap = 0kB [ 2165.332972] Total swap = 0kB [ 2165.336022] 2097051 pages RAM [ 2165.341118] Node 1 Normal: 19130*4kB (UM) 6491*8kB (UM) 2917*16kB (UM) 2103*32kB (UM) 537*64kB (U) 10*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 278064kB [ 2165.359660] Node 0 DMA32: 239*4kB (UE) 3114*8kB (UE) 4516*16kB (UE) 2366*32kB (UE) 260*64kB (UM) 2*128kB (UM) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 190732kB [ 2165.375944] 0 pages HighMem/MovableOnly [ 2165.382052] 363848 pages reserved [ 2165.385538] 0 pages cma reserved [ 2165.390277] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2165.401278] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2165.427839] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2165.436462] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2165.437795] Node 1 Normal: 19130*4kB (UM) 6491*8kB (UM) 2917*16kB (UM) 2103*32kB (UM) 537*64kB (U) 10*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 278064kB [ 2165.457964] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2165.487821] 52902 total pagecache pages [ 2165.491853] 0 pages in swap cache [ 2165.495313] Swap cache stats: add 0, delete 0, find 0/0 [ 2165.511163] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2165.517887] Free swap = 0kB [ 2165.523064] Total swap = 0kB [ 2165.526085] 2097051 pages RAM [ 2165.538904] 0 pages HighMem/MovableOnly [ 2165.542913] 363848 pages reserved [ 2165.543921] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2165.546368] 0 pages cma reserved [ 2165.555071] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2165.577837] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2165.586458] 52902 total pagecache pages [ 2165.590759] Out of memory (oom_kill_allocating_task): Kill process 28912 (systemd-journal) score 0 or sacrifice child [ 2165.611059] 0 pages in swap cache [ 2165.614553] Swap cache stats: add 0, delete 0, find 0/0 [ 2165.627834] Killed process 28912 (systemd-journal) total-vm:46096kB, anon-rss:464kB, file-rss:0kB, shmem-rss:1572kB [ 2165.648991] oom_reaper: reaped process 28912 (systemd-journal), now anon-rss:0kB, file-rss:0kB, shmem-rss:1572kB [ 2165.662329] Free swap = 0kB [ 2165.665373] Total swap = 0kB [ 2165.681123] 2097051 pages RAM [ 2165.702431] 0 pages HighMem/MovableOnly [ 2165.706449] 363848 pages reserved [ 2165.721213] 0 pages cma reserved [ 2165.761806] systemd[1]: systemd-journald.service: Failed with result 'signal'. [ 2165.785690] systemd[1]: systemd-journald.service: Service has no hold-off time, scheduling restart. [ 2165.837722] oom_reaper: reaped process 28925 (syz-executor.3), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 2166.010786] in:imklog invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 2166.077827] syz-executor.2: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2166.096454] in:imklog cpuset=/ mems_allowed=0-1 [ 2166.105981] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 2166.116439] CPU: 0 PID: 28768 Comm: in:imklog Not tainted 4.14.229-syzkaller #0 [ 2166.123918] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2166.133321] Call Trace: [ 2166.135926] dump_stack+0x1b2/0x281 [ 2166.139573] dump_header+0x178/0x82f [ 2166.143311] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2166.147884] syz-executor.1: page allocation failure: order:0 [ 2166.148426] ? ___ratelimit+0x2cd/0x530 [ 2166.148443] oom_kill_process.cold+0x10/0xa40 [ 2166.154266] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 2166.158250] out_of_memory+0xe3e/0x1190 [ 2166.158262] ? oom_killer_disable+0x1c0/0x1c0 [ 2166.158270] ? mutex_trylock+0x152/0x1a0 [ 2166.158280] __alloc_pages_nodemask+0x23e1/0x2720 [ 2166.158299] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2166.158322] alloc_pages_current+0x155/0x260 [ 2166.158331] filemap_fault+0x11a1/0x1ad0 [ 2166.158349] ext4_filemap_fault+0x84/0xb0 [ 2166.158364] __do_fault+0xfa/0x380 [ 2166.175243] (null) [ 2166.178489] __handle_mm_fault+0x2497/0x4620 [ 2166.178499] ? vm_insert_page+0x7c0/0x7c0 [ 2166.178509] ? lock_downgrade+0x740/0x740 [ 2166.178522] ? mark_held_locks+0xa6/0xf0 [ 2166.178531] handle_mm_fault+0x455/0x9c0 [ 2166.178543] __do_page_fault+0x549/0xad0 [ 2166.178552] ? spurious_fault+0x640/0x640 [ 2166.178560] ? do_page_fault+0x60/0x500 [ 2166.178568] ? page_fault+0x2f/0x50 [ 2166.178576] page_fault+0x45/0x50 [ 2166.178583] RIP: 1fa0:0x1f9f [ 2166.178588] RSP: 0000:00005650b7f569d0 EFLAGS: 7f3b1e4b5da0 [ 2166.186223] CPU: 0 PID: 28928 Comm: syz-executor.2 Not tainted 4.14.229-syzkaller #0 [ 2166.198293] syz-executor.3: [ 2166.201565] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2166.205714] page allocation failure: order:0 [ 2166.209238] Call Trace: [ 2166.209261] dump_stack+0x1b2/0x281 [ 2166.209274] warn_alloc.cold+0x96/0x1cc [ 2166.209285] ? zone_watermark_ok_safe+0x220/0x220 [ 2166.209295] ? usleep_range+0x130/0x130 [ 2166.209303] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 2166.209314] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 2166.209324] ? run_timer_softirq+0x5a0/0x5a0 [ 2166.209341] __alloc_pages_nodemask+0x2127/0x2720 [ 2166.209356] ? lock_acquire+0x170/0x3f0 [ 2166.209371] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2166.209381] ? ion_page_pool_alloc+0x9e/0x1b0 [ 2166.209397] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2166.209416] alloc_pages_current+0x155/0x260 [ 2166.221564] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 2166.224230] ion_page_pool_alloc+0x118/0x1b0 [ 2166.233265] syz-executor.1 cpuset= [ 2166.236389] ion_system_heap_allocate+0x133/0x8c0 [ 2166.245533] (null) [ 2166.248114] ? _raw_spin_unlock+0x29/0x40 [ 2166.248124] ? _ion_heap_freelist_drain+0x6e/0x410 [ 2166.248134] ? ion_system_contig_heap_create+0x130/0x130 [ 2166.248145] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2166.248156] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2166.248166] ion_alloc+0x27a/0x810 [ 2166.248180] ? ion_dma_buf_release+0x40/0x40 [ 2166.248192] ? __might_fault+0x177/0x1b0 [ 2166.248205] ion_ioctl+0xea/0x1f0 [ 2166.248217] ? ion_query_heaps+0x360/0x360 [ 2166.256553] syz-executor.3 cpuset= [ 2166.260513] ? ion_query_heaps+0x360/0x360 [ 2166.260524] do_vfs_ioctl+0x75a/0xff0 [ 2166.260536] ? ioctl_preallocate+0x1a0/0x1a0 [ 2166.260546] ? lock_downgrade+0x740/0x740 [ 2166.260558] ? __fget+0x225/0x360 [ 2166.260567] ? do_vfs_ioctl+0xff0/0xff0 [ 2166.260578] ? security_file_ioctl+0x83/0xb0 [ 2166.260588] SyS_ioctl+0x7f/0xb0 [ 2166.260596] ? do_vfs_ioctl+0xff0/0xff0 [ 2166.260608] do_syscall_64+0x1d5/0x640 [ 2166.260622] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2166.260631] RIP: 0033:0x466459 [ 2166.260641] RSP: 002b:00007fc228c87188 EFLAGS: 00000246 [ 2166.278213] / [ 2166.281031] ORIG_RAX: 0000000000000010 [ 2166.285448] mems_allowed=0-1 [ 2166.316890] / [ 2166.319040] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 2166.324743] mems_allowed=0-1 [ 2166.327932] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2166.327938] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2166.327943] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2166.327948] R13: 00007ffe5f3badff R14: 00007fc228c87300 R15: 0000000000022000 [ 2166.346727] warn_alloc_show_mem: 1 callbacks suppressed [ 2166.346731] Mem-Info: [ 2166.350652] CPU: 1 PID: 28918 Comm: syz-executor.1 Not tainted 4.14.229-syzkaller #0 [ 2166.366520] active_anon:16693 inactive_anon:51442 isolated_anon:0 [ 2166.366520] active_file:41 inactive_file:0 isolated_file:0 [ 2166.366520] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2166.366520] slab_reclaimable:12271 slab_unreclaimable:125842 [ 2166.366520] mapped:52225 shmem:51983 pagetables:2931 bounce:0 [ 2166.366520] free:13962 free_pcp:0 free_cma:0 [ 2166.367465] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2166.369674] Node 0 active_anon:61296kB inactive_anon:172452kB active_file:16kB inactive_file:16kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:160564kB dirty:0kB writeback:0kB shmem:174280kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2166.373768] Call Trace: [ 2166.378754] Node 1 active_anon:5476kB inactive_anon:33316kB active_file:148kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:48336kB dirty:0kB writeback:0kB shmem:33652kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2166.384147] dump_stack+0x1b2/0x281 [ 2166.389187] Node 0 [ 2166.394006] warn_alloc.cold+0x96/0x1cc [ 2166.397535] DMA free:10972kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2166.401945] ? zone_watermark_ok_safe+0x220/0x220 [ 2166.401955] ? usleep_range+0x130/0x130 [ 2166.401964] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 2166.401976] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 2166.401987] ? run_timer_softirq+0x5a0/0x5a0 [ 2166.406041] lowmem_reserve[]: [ 2166.409508] __alloc_pages_nodemask+0x2127/0x2720 [ 2166.409526] ? lock_acquire+0x170/0x3f0 [ 2166.409540] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2166.413763] 0 [ 2166.417316] ? ion_page_pool_alloc+0x9e/0x1b0 [ 2166.421573] 2717 [ 2166.425356] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2166.429777] 2718 [ 2166.433901] ? __sanitizer_cov_trace_pc+0x9/0x50 [ 2166.437327] 2718 [ 2166.441305] alloc_pages_current+0x155/0x260 [ 2166.441319] ion_page_pool_alloc+0x118/0x1b0 [ 2166.441329] ion_system_heap_allocate+0x133/0x8c0 [ 2166.441343] ? _raw_spin_unlock+0x29/0x40 [ 2166.445737] 2718 [ 2166.449097] ? _ion_heap_freelist_drain+0x6e/0x410 [ 2166.449106] ? ion_system_contig_heap_create+0x130/0x130 [ 2166.449117] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2166.449129] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2166.449140] ion_alloc+0x27a/0x810 [ 2166.456997] ? ion_dma_buf_release+0x40/0x40 [ 2166.462243] Node 0 [ 2166.465388] ? __might_fault+0x177/0x1b0 [ 2166.472305] DMA32 free:18080kB min:36200kB low:45248kB high:54296kB active_anon:61296kB inactive_anon:172452kB active_file:16kB inactive_file:16kB unevictable:0kB writepending:0kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:8192kB pagetables:5276kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2166.473976] ion_ioctl+0xea/0x1f0 [ 2166.478081] lowmem_reserve[]: [ 2166.481145] ? ion_query_heaps+0x360/0x360 [ 2166.482832] 0 [ 2166.490111] ? ion_query_heaps+0x360/0x360 [ 2166.490122] do_vfs_ioctl+0x75a/0xff0 [ 2166.490135] ? ioctl_preallocate+0x1a0/0x1a0 [ 2166.490151] ? lock_downgrade+0x740/0x740 [ 2166.490163] ? __fget+0x225/0x360 [ 2166.493272] 0 [ 2166.500553] ? do_vfs_ioctl+0xff0/0xff0 [ 2166.500566] ? security_file_ioctl+0x83/0xb0 [ 2166.500577] SyS_ioctl+0x7f/0xb0 [ 2166.500586] ? do_vfs_ioctl+0xff0/0xff0 [ 2166.500600] do_syscall_64+0x1d5/0x640 [ 2166.507943] 0 [ 2166.515185] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2166.522491] 0 [ 2166.527813] RIP: 0033:0x466459 [ 2166.527819] RSP: 002b:00007fdc8e5a7188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2166.527828] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 2166.527834] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2166.527839] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2166.527849] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2166.530307] 0 [ 2166.538185] R13: 00007ffd2c2faa2f R14: 00007fdc8e5a7300 R15: 0000000000022000 [ 2166.541903] CPU: 1 PID: 28925 Comm: syz-executor.3 Not tainted 4.14.229-syzkaller #0 [ 2166.571636] syz-executor.1: [ 2166.580672] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2166.580677] Call Trace: [ 2166.580699] dump_stack+0x1b2/0x281 [ 2166.580713] warn_alloc.cold+0x96/0x1cc [ 2166.580724] ? zone_watermark_ok_safe+0x220/0x220 [ 2166.580734] ? usleep_range+0x130/0x130 [ 2166.580742] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 2166.580754] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 2166.580764] ? run_timer_softirq+0x5a0/0x5a0 [ 2166.580784] __alloc_pages_nodemask+0x2127/0x2720 [ 2166.619885] Mem-Info: [ 2166.638383] ? lock_acquire+0x170/0x3f0 [ 2166.638400] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2166.638410] ? ion_page_pool_alloc+0x9e/0x1b0 [ 2166.638426] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2166.642065] active_anon:16693 inactive_anon:51442 isolated_anon:0 [ 2166.642065] active_file:41 inactive_file:0 isolated_file:0 [ 2166.642065] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2166.642065] slab_reclaimable:12271 slab_unreclaimable:125842 [ 2166.642065] mapped:52225 shmem:51983 pagetables:2931 bounce:0 [ 2166.642065] free:13962 free_pcp:0 free_cma:0 [ 2166.644285] alloc_pages_current+0x155/0x260 [ 2166.648291] Node 0 active_anon:61296kB inactive_anon:172452kB active_file:16kB inactive_file:16kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:160564kB dirty:0kB writeback:0kB shmem:174280kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2166.673758] ion_page_pool_alloc+0x118/0x1b0 [ 2166.673769] ion_system_heap_allocate+0x133/0x8c0 [ 2166.673779] ? ion_alloc+0x187/0x810 [ 2166.673789] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2166.673798] ? ion_system_contig_heap_create+0x130/0x130 [ 2166.673813] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2166.682649] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2166.687814] page allocation failure: order:0 [ 2166.692772] ion_alloc+0x204/0x810 [ 2166.697175] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 2166.700278] ? ion_dma_buf_release+0x40/0x40 [ 2166.700291] ? __might_fault+0x177/0x1b0 [ 2166.700301] ion_ioctl+0xea/0x1f0 [ 2166.700310] ? ion_query_heaps+0x360/0x360 [ 2166.700326] ? ion_query_heaps+0x360/0x360 [ 2166.705185] Node 0 [ 2166.709142] do_vfs_ioctl+0x75a/0xff0 [ 2166.709155] ? ioctl_preallocate+0x1a0/0x1a0 [ 2166.709165] ? lock_downgrade+0x740/0x740 [ 2166.709178] ? __fget+0x225/0x360 [ 2166.709190] ? do_vfs_ioctl+0xff0/0xff0 [ 2166.714161] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2166.715960] ? security_file_ioctl+0x83/0xb0 [ 2166.720529] (null) [ 2166.722517] SyS_ioctl+0x7f/0xb0 [ 2166.727998] lowmem_reserve[]: [ 2166.730033] ? do_vfs_ioctl+0xff0/0xff0 [ 2166.734771] 0 [ 2166.736833] do_syscall_64+0x1d5/0x640 [ 2166.741327] syz-executor.1 cpuset= [ 2166.745852] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2166.750952] Node 1 active_anon:5476kB inactive_anon:33316kB active_file:148kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:48336kB dirty:0kB writeback:0kB shmem:33652kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2166.755050] RIP: 0033:0x466459 [ 2166.757096] Node 0 [ 2166.762017] RSP: 002b:00007fb199b88188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2166.762028] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 2166.762033] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2166.762038] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2166.762043] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2166.762047] R13: 00007ffe54ba022f R14: 00007fb199b88300 R15: 0000000000022000 [ 2166.858353] 0 [ 2166.863089] / [ 2166.865831] 0 [ 2166.867993] mems_allowed=0-1 [ 2166.911077] 0 [ 2166.918998] CPU: 0 PID: 28924 Comm: syz-executor.1 Not tainted 4.14.229-syzkaller #0 [ 2166.988472] 0 [ 2166.992659] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2166.992664] Call Trace: [ 2166.992686] dump_stack+0x1b2/0x281 [ 2166.992699] warn_alloc.cold+0x96/0x1cc [ 2166.992711] ? zone_watermark_ok_safe+0x220/0x220 [ 2166.992720] ? usleep_range+0x130/0x130 [ 2166.992729] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 2166.992740] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 2166.992749] ? run_timer_softirq+0x5a0/0x5a0 [ 2166.992765] __alloc_pages_nodemask+0x2127/0x2720 [ 2166.992785] ? lock_acquire+0x170/0x3f0 [ 2166.999185] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2166.999196] ? ion_page_pool_alloc+0x9e/0x1b0 [ 2166.999212] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2166.999230] alloc_pages_current+0x155/0x260 [ 2166.999241] ion_page_pool_alloc+0x118/0x1b0 [ 2166.999250] ion_system_heap_allocate+0x133/0x8c0 [ 2166.999268] ? _raw_spin_unlock+0x29/0x40 [ 2166.999277] ? _ion_heap_freelist_drain+0x6e/0x410 [ 2166.999285] ? ion_system_contig_heap_create+0x130/0x130 [ 2166.999295] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2166.999305] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2166.999316] ion_alloc+0x27a/0x810 [ 2166.999330] ? ion_dma_buf_release+0x40/0x40 [ 2166.999344] ? __might_fault+0x177/0x1b0 [ 2166.999356] ion_ioctl+0xea/0x1f0 [ 2166.999364] ? ion_query_heaps+0x360/0x360 [ 2166.999376] ? ion_query_heaps+0x360/0x360 [ 2166.999386] do_vfs_ioctl+0x75a/0xff0 [ 2166.999398] ? ioctl_preallocate+0x1a0/0x1a0 [ 2166.999408] ? lock_downgrade+0x740/0x740 [ 2166.999420] ? __fget+0x225/0x360 [ 2166.999429] ? do_vfs_ioctl+0xff0/0xff0 [ 2166.999441] ? security_file_ioctl+0x83/0xb0 [ 2166.999453] SyS_ioctl+0x7f/0xb0 [ 2167.023770] Node 1 [ 2167.047314] ? do_vfs_ioctl+0xff0/0xff0 [ 2167.047329] do_syscall_64+0x1d5/0x640 [ 2167.047343] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2167.047352] RIP: 0033:0x466459 [ 2167.047356] RSP: 002b:00007fdc8e586188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2167.047365] RAX: ffffffffffffffda RBX: 000000000056c008 RCX: 0000000000466459 [ 2167.047370] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2167.047374] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2167.047379] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c008 [ 2167.047384] R13: 00007ffd2c2faa2f R14: 00007fdc8e586300 R15: 0000000000022000 [ 2167.049851] DMA free:10972kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2167.151111] Normal free:394180kB min:53696kB low:67120kB high:80544kB active_anon:5548kB inactive_anon:33316kB active_file:1668kB inactive_file:6108kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:2272kB pagetables:6416kB bounce:0kB free_pcp:328kB local_pcp:628kB free_cma:0kB [ 2167.152974] lowmem_reserve[]: [ 2167.155944] lowmem_reserve[]: [ 2167.163189] 0 [ 2167.191541] 0 [ 2167.227490] 2717 [ 2167.331035] 0 [ 2167.337349] 2718 [ 2167.351068] 0 [ 2167.353358] 2718 [ 2167.377890] 0 [ 2167.395052] systemd[1]: Starting Load/Save RF Kill Switch Status... [ 2167.467864] 0 [ 2167.478100] 2718 [ 2167.547821] Node 0 [ 2167.573756] systemd[1]: Stopped Journal Service. [ 2167.644825] Node 0 DMA32 free:266168kB min:36200kB low:45248kB high:54296kB active_anon:61500kB inactive_anon:172452kB active_file:116kB inactive_file:1384kB unevictable:0kB writepending:0kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:8160kB pagetables:5424kB bounce:0kB free_pcp:716kB local_pcp:208kB free_cma:0kB [ 2167.694910] lowmem_reserve[]: 0 0 0 0 0 [ 2167.697891] DMA: 9*4kB (ME) 5*8kB (UM) 5*16kB (M) 8*32kB (UME) 8*64kB (UME) 5*128kB (UME) 7*256kB (UME) 5*512kB (UE) 1*1024kB (E) 2*2048kB (UM) 0*4096kB = 11036kB [ 2167.699530] Node 0 [ 2167.725828] systemd[1]: Starting Journal Service... [ 2167.733283] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2167.757849] Node 0 DMA32: 448*4kB (UE) 145*8kB (UE) 22*16kB (UME) 4*32kB (UE) 3310*64kB (UM) 807*128kB (UM) 11*256kB (UM) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 321384kB [ 2167.782574] systemd[1]: Started Load/Save RF Kill Switch Status. [ 2167.788955] lowmem_reserve[]: 0 0 0 0 0 [ 2167.792971] Node 1 Normal free:649204kB min:53696kB low:67120kB high:80544kB active_anon:5456kB inactive_anon:33316kB active_file:2620kB inactive_file:5128kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:2272kB pagetables:6416kB bounce:0kB free_pcp:880kB local_pcp:204kB free_cma:0kB [ 2167.810352] Node 0 [ 2167.835664] lowmem_reserve[]: 0 0 0 0 0 [ 2167.842063] Node 0 DMA: 9*4kB (ME) 5*8kB (UM) 5*16kB (M) 8*32kB (UME) 8*64kB (UME) 5*128kB (UME) 7*256kB (UME) 5*512kB (UE) 1*1024kB (E) 2*2048kB (UM) 0*4096kB = 11036kB [ 2167.858166] Node 0 DMA32: 439*4kB (UME) 107*8kB (UE) 14*16kB (UE) 5*32kB (UME) 3332*64kB (UM) 814*128kB (UM) 10*256kB (UM) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 322996kB [ 2167.870445] Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2167.874506] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2167.894565] Node 1 Normal: 1*4kB (E) 2*8kB (UM) 4*16kB (UME) 7*32kB (UME) 5367*64kB (UME) 602*128kB (U) 189*256kB (UME) 41*512kB (UME) 82*1024kB (UM) 20*2048kB (U) 5*4096kB (U) = 635636kB [ 2167.912355] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2167.921370] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2167.930061] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2167.939053] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2167.941886] Node 1 [ 2167.947638] 54593 total pagecache pages [ 2167.947642] Normal: 1*4kB [ 2167.949978] 0 pages in swap cache [ 2167.949984] Swap cache stats: add 0, delete 0, find 0/0 [ 2167.949987] Free swap = 0kB [ 2167.949990] Total swap = 0kB [ 2167.949997] 2097051 pages RAM [ 2167.950000] 0 pages HighMem/MovableOnly [ 2167.950003] 363848 pages reserved [ 2167.950006] 0 pages cma reserved [ 2167.950013] Out of memory (oom_kill_allocating_task): Kill process 28768 (in:imklog) score 0 or sacrifice child [ 2167.950066] Killed process 28766 (rsyslogd) total-vm:254332kB, anon-rss:984kB, file-rss:0kB, shmem-rss:0kB [ 2167.968059] systemd-journald[28971]: File /run/log/journal/04d8c135ee6b410280ba31a58c89679d/system.journal corrupted or uncleanly shut down, renaming and replacing. [ 2168.023181] systemd[1]: rsyslog.service: Main process exited, code=killed, status=9/KILL [ 2168.037906] (E) 2*8kB (UM) 4*16kB (UME) 7*32kB (UME) 5684*64kB (UME) 653*128kB (U) 231*256kB (UME) 45*512kB (UME) 34*1024kB (UM) 20*2048kB (U) 5*4096kB (U) = 626100kB [ 2168.058592] systemd[1]: rsyslog.service: Unit entered failed state. [ 2168.065349] systemd[1]: rsyslog.service: Failed with result 'signal'. [ 2168.099517] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2168.131372] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2168.147838] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2168.156726] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2168.187829] 56609 total pagecache pages [ 2168.191857] 0 pages in swap cache [ 2168.195315] Swap cache stats: add 0, delete 0, find 0/0 [ 2168.196323] systemd[1]: rsyslog.service: Service hold-off time over, scheduling restart. [ 2168.207860] Free swap = 0kB [ 2168.212067] Total swap = 0kB [ 2168.215087] 2097051 pages RAM [ 2168.237831] 0 pages HighMem/MovableOnly [ 2168.241847] 363848 pages reserved [ 2168.245298] 0 pages cma reserved [ 2168.792040] syz-executor.3: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2168.804003] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 2168.809216] CPU: 1 PID: 28925 Comm: syz-executor.3 Not tainted 4.14.229-syzkaller #0 [ 2168.817111] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2168.826600] Call Trace: [ 2168.829200] dump_stack+0x1b2/0x281 [ 2168.832884] warn_alloc.cold+0x96/0x1cc [ 2168.836882] ? zone_watermark_ok_safe+0x220/0x220 [ 2168.841756] __alloc_pages_nodemask+0x2127/0x2720 [ 2168.846615] ? lock_acquire+0x170/0x3f0 [ 2168.850606] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2168.855461] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2168.860925] ? __mutex_unlock_slowpath+0x75/0x770 [ 2168.866302] ? retint_kernel+0x2d/0x2d [ 2168.870205] alloc_pages_current+0x155/0x260 [ 2168.874716] ion_page_pool_alloc+0x118/0x1b0 [ 2168.879139] ion_system_heap_allocate+0x133/0x8c0 [ 2168.884034] ? _raw_spin_unlock+0x29/0x40 [ 2168.888202] ? _ion_heap_freelist_drain+0x6e/0x410 [ 2168.893148] ? ion_system_contig_heap_create+0x130/0x130 [ 2168.898613] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2168.903658] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2168.908520] ion_alloc+0x27a/0x810 [ 2168.912073] ? ion_dma_buf_release+0x40/0x40 [ 2168.916492] ? __might_fault+0x177/0x1b0 [ 2168.920578] ion_ioctl+0xea/0x1f0 [ 2168.924045] ? ion_query_heaps+0x360/0x360 [ 2168.928297] ? ion_query_heaps+0x360/0x360 [ 2168.932686] do_vfs_ioctl+0x75a/0xff0 [ 2168.936510] ? ioctl_preallocate+0x1a0/0x1a0 [ 2168.940934] ? lock_downgrade+0x740/0x740 [ 2168.945221] ? __fget+0x225/0x360 [ 2168.948690] ? do_vfs_ioctl+0xff0/0xff0 [ 2168.953216] ? security_file_ioctl+0x83/0xb0 [ 2168.957644] SyS_ioctl+0x7f/0xb0 [ 2168.961022] ? do_vfs_ioctl+0xff0/0xff0 [ 2168.965018] do_syscall_64+0x1d5/0x640 [ 2168.968924] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2168.974122] RIP: 0033:0x466459 [ 2168.977315] RSP: 002b:00007fb199b88188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2168.985039] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 2168.992345] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2168.999626] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2169.006910] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2169.014192] R13: 00007ffe54ba022f R14: 00007fb199b88300 R15: 0000000000022000 [ 2169.030336] IPVS: ftp: loaded support on port[0] = 21 [ 2169.047850] warn_alloc_show_mem: 3 callbacks suppressed [ 2169.047854] Mem-Info: [ 2169.059325] active_anon:16869 inactive_anon:53454 isolated_anon:0 [ 2169.059325] active_file:1380 inactive_file:2831 isolated_file:0 [ 2169.059325] unevictable:0 dirty:35 writeback:0 unstable:0 [ 2169.059325] slab_reclaimable:12398 slab_unreclaimable:127483 [ 2169.059325] mapped:55303 shmem:54012 pagetables:2966 bounce:0 [ 2169.059325] free:126951 free_pcp:703 free_cma:0 [ 2169.171493] Node 0 active_anon:62136kB inactive_anon:180592kB active_file:1360kB inactive_file:7760kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:167348kB dirty:136kB writeback:0kB shmem:182480kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2169.238246] Node 1 active_anon:5396kB inactive_anon:33316kB active_file:4252kB inactive_file:3564kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:54008kB dirty:16kB writeback:0kB shmem:33660kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2169.297883] Node 0 DMA free:11056kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2169.346146] chnl_net:caif_netlink_parms(): no params data found [ 2169.358496] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2169.363594] Node 0 DMA32 free:469512kB min:36200kB low:45248kB high:54296kB active_anon:62136kB inactive_anon:180592kB active_file:1360kB inactive_file:7760kB unevictable:0kB writepending:136kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:8256kB pagetables:5360kB bounce:0kB free_pcp:1356kB local_pcp:704kB free_cma:0kB [ 2169.394329] Bluetooth: hci1 command 0x0409 tx timeout [ 2169.437922] lowmem_reserve[]: 0 0 0 0 0 [ 2169.441970] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2169.467720] lowmem_reserve[]: 0 0 0 0 0 [ 2169.471764] Node 1 Normal free:279364kB min:53696kB low:67120kB high:80544kB active_anon:5396kB inactive_anon:33316kB active_file:4252kB inactive_file:3564kB unevictable:0kB writepending:16kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:2272kB pagetables:6420kB bounce:0kB free_pcp:1332kB local_pcp:632kB free_cma:0kB [ 2169.501556] lowmem_reserve[]: 0 0 0 0 0 [ 2169.505668] Node 0 DMA: 30*4kB (UME) 6*8kB (UM) 5*16kB (M) 8*32kB (UME) 7*64kB (UME) 5*128kB (UME) 7*256kB (UME) 5*512kB (UE) 1*1024kB (E) 2*2048kB (UM) 0*4096kB = 11064kB [ 2169.521471] Node 0 DMA32: 27495*4kB (UME) 13688*8kB (UE) 10739*16kB (UE) 3159*32kB (UME) 238*64kB (UM) 2*128kB (U) 0*256kB 0*512kB 5*1024kB (U) 0*2048kB 0*4096kB = 513004kB [ 2169.537863] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2169.548977] Node 1 Normal: 16541*4kB (UM) 7078*8kB (UM) 3386*16kB (U) 2119*32kB (U) 485*64kB (U) 28*128kB (U) 0*256kB 0*512kB 33*1024kB (U) 14*2048kB (U) 0*4096kB = 341860kB [ 2169.566131] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2169.575787] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2169.585277] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2169.595020] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2169.604469] 58311 total pagecache pages [ 2169.609165] 0 pages in swap cache [ 2169.612630] Swap cache stats: add 0, delete 0, find 0/0 [ 2169.618945] Free swap = 0kB [ 2169.621974] Total swap = 0kB [ 2169.624993] 2097051 pages RAM [ 2169.629661] 0 pages HighMem/MovableOnly [ 2169.633651] 363848 pages reserved [ 2169.637116] 0 pages cma reserved [ 2169.677268] bridge0: port 1(bridge_slave_0) entered blocking state [ 2169.684190] bridge0: port 1(bridge_slave_0) entered disabled state [ 2169.693238] device bridge_slave_0 entered promiscuous mode [ 2169.701482] bridge0: port 2(bridge_slave_1) entered blocking state [ 2169.709796] bridge0: port 2(bridge_slave_1) entered disabled state [ 2169.717223] device bridge_slave_1 entered promiscuous mode [ 2169.745425] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 2169.755793] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 2169.782381] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 2169.790348] team0: Port device team_slave_0 added [ 2169.796109] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 2169.806046] team0: Port device team_slave_1 added [ 2169.831479] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2169.838113] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2169.864487] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2169.877182] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2169.884134] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2169.909982] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2169.921637] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 2169.929935] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 2169.959082] device hsr_slave_0 entered promiscuous mode [ 2169.965203] device hsr_slave_1 entered promiscuous mode [ 2169.972521] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 2169.980384] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 2170.123915] bridge0: port 2(bridge_slave_1) entered blocking state [ 2170.130383] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2170.137070] bridge0: port 1(bridge_slave_0) entered blocking state [ 2170.143538] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2170.200402] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 2170.206511] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2170.221501] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 2170.235913] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2170.243647] bridge0: port 1(bridge_slave_0) entered disabled state [ 2170.257475] bridge0: port 2(bridge_slave_1) entered disabled state [ 2170.269767] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 2170.275859] 8021q: adding VLAN 0 to HW filter on device team0 [ 2170.291915] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 2170.303426] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2170.312966] bridge0: port 1(bridge_slave_0) entered blocking state [ 2170.319416] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2170.334917] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 2170.342905] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2170.356465] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2170.365614] bridge0: port 2(bridge_slave_1) entered blocking state [ 2170.372100] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2170.387715] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 2170.396083] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2170.412922] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 2170.424505] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2170.443981] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 2170.451373] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2170.466195] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2170.477551] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 2170.489488] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2170.496701] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2170.505811] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2170.519129] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 2170.534035] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 2170.541392] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2170.554500] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2170.563266] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2170.575835] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2170.586620] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 2170.598085] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2170.621269] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 2170.636466] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 2170.643358] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2170.655606] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2170.674491] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2170.759536] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 2170.770345] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 2170.777557] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2170.786213] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2170.839897] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 2170.847103] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 2170.859826] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 2170.873709] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 2170.881215] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2170.892917] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2170.904898] device veth0_vlan entered promiscuous mode [ 2170.916341] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2170.925971] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2170.942362] device veth1_vlan entered promiscuous mode [ 2170.952364] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 2170.964780] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 2170.984767] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 2171.002303] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 2171.013369] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2171.022107] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 2171.033169] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2171.042513] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2171.056308] device veth0_macvtap entered promiscuous mode [ 2171.065295] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 2171.080364] device veth1_macvtap entered promiscuous mode [ 2171.086769] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 2171.101796] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 2171.112953] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 2171.123424] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2171.134315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2171.154490] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2171.168432] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2171.177562] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2171.191415] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2171.201308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2171.215053] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2171.224345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2171.238467] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2171.252414] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 2171.260236] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2171.267341] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2171.279589] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2171.286970] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2171.300882] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2171.313570] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2171.324922] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2171.335407] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2171.346736] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2171.356971] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2171.367910] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2171.377084] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2171.388810] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2171.398049] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2171.409489] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2171.420851] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 2171.428777] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2171.435955] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2171.446491] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2171.458442] Bluetooth: hci1 command 0x041b tx timeout 14:58:45 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_CMAP(r0, 0x4b70, &(0x7f0000001c40)) ioctl$KDGETMODE(r0, 0x4b3b, &(0x7f00000003c0)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x208400, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/btrfs-control\x00', 0x0, 0x0) ioctl$sock_SIOCADDRT(r3, 0x890b, &(0x7f0000000340)={0x0, @can={0x1d, 0x0}, @qipcrtr={0x2a, 0x4, 0x1}, @generic={0x3, "1b2000a27c7be7875e3504da8000"}, 0x4, 0x0, 0x0, 0x0, 0x9d8, 0x0, 0x1, 0x5, 0xffff}) ioctl$sock_SIOCDELRT(r3, 0x890c, &(0x7f00000002c0)={0x0, @can={0x1d, r4}, @can, @can={0x1d, 0x0}, 0x7f, 0x0, 0x0, 0x0, 0x3}) r6 = syz_genetlink_get_family_id$fou(&(0x7f00000001c0)='fou\x00', 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r3, &(0x7f0000000200)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="28000000a91690579571c360e143aa9f53d29b3b92ab33dd903a4edaf46cd2238c6fff0700000000c9c5ba091d21c790c1b3242aa90269a4f0a47281b1be840a28d63879ac718b8db0382e0901fd68c1ed1b4e6f0303864033a77813566b7df44fb037cd4e0610e4198a2e9cde50a2c2131adb4a09d57dcec45a1329d70622f9a8c62062b8c93fd0173d0a089cab52ceeed56f74fa10fafc6c91cb6d4025fd7050cbfc82dec435b395bcdb5b2c37471723433960867b2c33ec88ab50287efdd74239538adbccb18334d408c2ef00f2cf2d11d64809f5267a1e36b96a60b918080953dccfc1ab3026abf1815f7b385b00139a882d", @ANYRES16=r6, @ANYBLOB="00042dbd7000ffdbdf25010000001400090000000000000000000000000000000001"], 0x28}, 0x1, 0x0, 0x0, 0x2000c851}, 0x8000) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f0000000040)=r2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000980)={'team0\x00'}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) ioctl$sock_SIOCDELRT(r7, 0x890c, &(0x7f0000000580)={0x0, @nfc={0x27, 0x1, 0x0, 0x2}, @qipcrtr={0x2a, 0xffffffff, 0x3fff}, @can={0x1d, r5}, 0xd1, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000540)='sit0\x00', 0x3ff, 0xb4, 0x3a7e}) ioctl$sock_SIOCADDRT(r7, 0x890b, &(0x7f0000000640)={0x0, @ethernet={0x6}, @llc={0x1a, 0x338, 0x0, 0x5, 0x0, 0xec, @random="272c06020926"}, @can={0x1d, r9}, 0x1, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000600)='ipvlan1\x00', 0x7, 0xffff, 0x7}) ioctl$sock_inet6_SIOCADDRT(r7, 0x890b, &(0x7f0000000100)={@private0={0xfc, 0x0, [], 0x1}, @private2, @mcast1, 0x2, 0x4, 0x7, 0x100, 0x9d, 0x200000, r8}) 14:58:45 executing program 1: openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/btrfs-control\x00', 0x0, 0x0) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000340)={0x0, @can, @can, @can}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x80000000, 0x2e}) 14:58:47 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x80000000, 0xe}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x4, 0x14, 0x1}) 14:58:47 executing program 4: openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x408200, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r0, &(0x7f00000016c0)="4904e565354dbeee3d0a7d6117a5fa50d4124c31ad4be15b016935fe4d7ed3b0cc47c0e2970e56ada969eba342aebd5002e1865b94f2efb1d5da3cce09f907f5df737234138c54714c7cd52d41cde59586648c4b92d01e8c0da51e3bf6d77c6277bc8966ece594c5f86345d6b9e8f592beb946538f37a21da2d5811e373b256a6f5ede09af2e579547a468c7dcbf25", 0x8f, 0x40, &(0x7f0000001780)={0x11, 0xf6, 0x0, 0x1, 0x4, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x14) 14:58:47 executing program 3: openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x8000, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0xfffffffffffffed1) 14:58:47 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_CMAP(r0, 0x4b70, &(0x7f0000001c40)) ioctl$KDGETMODE(r0, 0x4b3b, &(0x7f00000003c0)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x208400, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/btrfs-control\x00', 0x0, 0x0) ioctl$sock_SIOCADDRT(r3, 0x890b, &(0x7f0000000340)={0x0, @can={0x1d, 0x0}, @qipcrtr={0x2a, 0x4, 0x1}, @generic={0x3, "1b2000a27c7be7875e3504da8000"}, 0x4, 0x0, 0x0, 0x0, 0x9d8, 0x0, 0x1, 0x5, 0xffff}) ioctl$sock_SIOCDELRT(r3, 0x890c, &(0x7f00000002c0)={0x0, @can={0x1d, r4}, @can, @can={0x1d, 0x0}, 0x7f, 0x0, 0x0, 0x0, 0x3}) r6 = syz_genetlink_get_family_id$fou(&(0x7f00000001c0)='fou\x00', 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r3, &(0x7f0000000200)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="28000000a91690579571c360e143aa9f53d29b3b92ab33dd903a4edaf46cd2238c6fff0700000000c9c5ba091d21c790c1b3242aa90269a4f0a47281b1be840a28d63879ac718b8db0382e0901fd68c1ed1b4e6f0303864033a77813566b7df44fb037cd4e0610e4198a2e9cde50a2c2131adb4a09d57dcec45a1329d70622f9a8c62062b8c93fd0173d0a089cab52ceeed56f74fa10fafc6c91cb6d4025fd7050cbfc82dec435b395bcdb5b2c37471723433960867b2c33ec88ab50287efdd74239538adbccb18334d408c2ef00f2cf2d11d64809f5267a1e36b96a60b918080953dccfc1ab3026abf1815f7b385b00139a882d", @ANYRES16=r6, @ANYBLOB="00042dbd7000ffdbdf25010000001400090000000000000000000000000000000001"], 0x28}, 0x1, 0x0, 0x0, 0x2000c851}, 0x8000) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f0000000040)=r2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000980)={'team0\x00'}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) ioctl$sock_SIOCDELRT(r7, 0x890c, &(0x7f0000000580)={0x0, @nfc={0x27, 0x1, 0x0, 0x2}, @qipcrtr={0x2a, 0xffffffff, 0x3fff}, @can={0x1d, r5}, 0xd1, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000540)='sit0\x00', 0x3ff, 0xb4, 0x3a7e}) ioctl$sock_SIOCADDRT(r7, 0x890b, &(0x7f0000000640)={0x0, @ethernet={0x6}, @llc={0x1a, 0x338, 0x0, 0x5, 0x0, 0xec, @random="272c06020926"}, @can={0x1d, r9}, 0x1, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000600)='ipvlan1\x00', 0x7, 0xffff, 0x7}) ioctl$sock_inet6_SIOCADDRT(r7, 0x890b, &(0x7f0000000100)={@private0={0xfc, 0x0, [], 0x1}, @private2, @mcast1, 0x2, 0x4, 0x7, 0x100, 0x9d, 0x200000, r8}) 14:58:47 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f00000000c0)={0x6, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x10, "5dc67f5324c386"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f00000010c0)={{0x0, 0x4, 0x3, 0x7ff, 0x93, 0x9, 0x0, 0x0, 0x76200000, 0x4, 0x2b, 0x3, 0x7, 0x1ff}, 0x8, [0x0]}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f0000001140)={r1, r2, "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", "af677f8e9371a7f54a36d8ee020bb6d19542d7a1bd6e84fccd0f33d9b62221f6d8281f2c91c9fa25bf642b814a74f59a5e5a14ae30d27d0f0cbf7962380ce0532f6092d1ca40d002536875ee4f3b499437ca87eb8793df75965ef847e9bb0631c982f4b91c857e67b42b47e1400475e843d67282408634dda5887dbab2bcffcf5c8aab1e0441e984ac689f1f83a9e4ce5d6581bfbb8297d030530ed06327579d4bc5ad0a7d3bf03752d24781cccc71f4795d20d42b47e6a2a0c3c9654f770251559d0fb4173e66de3c30837648de754b9b93d9d0a5090dc35ba0b14f9ac14f95322d1b10290287c3353d96493a784f2024960f42119cf6ce8a8968f8c8d809e8ac3e630bc46b93444cbfbf7a6b5544a856a0de18741a4405718f9acfcd2f939d33dde54568f521b2eb37ed64287360a126f539bad2be6207cbc1590e1930eb2fc141483b57bf60b29ea70d993eae4f6737d4dc591a817ec2820c55af20b34c58f57630c42361bc9d789d2e6087cb2dab14c6cc5a4291659618d9b39d4ca924a89b37c9df85ed96e9426ee8c34ef9603d058621bcf39ae5de6e47f6cb1f43cb8b77a83bb31abe36a955537c3526aa4afd140783beccab0faf6a3c40c0597dcc042d78e932ced284c5e35438276b15a041de5e88b32d4387afc7b936cf76133424c48e8cc6cd463b29a58f7288ef3237b0d6ac0cf868733378fb9a90c6de52912a4f9be875120d3ad55ea335ff63e6ebe18cbe59fef409fca7cdc1ffacfb34ef5ee286098f887251449fa4b0bef9c2050b706ee7355d4b3e1b2c6b6c07e21bfbcf9f90991f8721635c13e0a5beb93a5ed66e0980ad1347e047dae928ce26256effcfb66270cbc277c9f85afa57bad685e19bcc18ee33a75e89adac77e583a8c105d334f25d233db725fa435afe1242438202afe5fab103fca2a8bcd020d02e4c8f9e9757ecfcc49c3847e436460669d70256fe94c346fa34cd084d9a66f12ddb138009c0a0434b13c3dab11e81c5ce6510daa0fa2ab903b0294e600febe46ae4fdcb8a7d8cf517c7331866d8ba785be2928a464d474865166c7cb460d5b046cf837584b6893359ab864b431b5d924f460b876f6f13bcf9afdb98280885766638407f9c72703c5be738d75038478a70808af2bc57af999636ace551f44b80495737388c7e1037e40f7358c2b4a680323b2066aed2aabb7eefede57cd86e97c3220b15d2154518a68c2d06996494236acec49fadcfd78a0fc8e958922ac8874d74b9be811280e355594ac09b109f58e44ae8fb0deec51b864483e65452732ffe7105c44beb3cb912b59a4ab6550ecf1f9684637bf1726d7b861f449c9356fa52c2cd7886c3b7250298ac6a36ae21321ed8f0da4c630332a8e22c9c8e4f6a2aea770147a48080174fecf29736245de444a8e983ed467126daf5367b0e32f8fd43e6593bc5fa68057f0e6cbff8e9877ffa44e38af8428235430815c38b0375da5f54748471a23de640bf932fd14f739a17a7179f0850a0b4c30aaff20d20ae5bbf9545187e8225f5d5bfdb3c57dae37db8f92ee34584e7836a5d0a0ee98993f9125c8bbb4f23e5b8f5544e911b7b3c5482a5afc96fd0094e154d59ef054560c912c9b04ba93d574adb54678d0951238b8c58e428a5b66fcb217086b52ca2f2bb54b4e978942c76e67fe358638c130bae8dd5df0f44f8fe849a5a8f8473847c343d1e653bc6ebbc34e5447f793ff34d2d7f345d999174f75f848c4558e21b32caf424ab24cda98640e9cddc70f78d61ac6e6c79b02c9e328313f295ae6856f48c31d34681dbd94335c3123c1ab2553961d5463d58cf894163394c17ba595fdab45b0ec5ed4b9986ce4906e3c7e10dc943406f2f147f9b5b41966a0df43fbc33de7f1572a11c9445b77bf72215cac898093e51208b66c5cb8a0b413b8f9c2d8a2a4c3b6eb39acfb8402ff1a84d29461be33f1ee4fa2b62e0de68d1ed7699a0f2a28dc3254b3be00d65364e24aa274dd0d1499dbb6da258d7ed808839b98154d26ce2c49071a6b5ed53db95c9496ad32324f6751a984b3fe8f4d56dc8d43cfbaacfd198eab1248a11a510c86029e907a7e60202be120a9e75cbfdce9d12a3077b9ba138f3deab11584db9ce4ce06882741615dc1fb81292c50d856db430c26abc5f1d7431c59c69584439ae3c4b0476261422b537c1724e47bfbce257d8ad094f8c23a2bfc41c87ae43fce6b74d697b91f98c4be911504fcb2fb075a372164b37b3bb41b7d39400b2ab2e890143189ca17786699960e88dbb1fadb1733148c2c6dcf0988ce685cfcb4a997801347924ad856e30c567f51c04fc4944b434519e217b37b4a3559c6949219dfb00bec50d3b0a4aa4632d9bdc94d16fe54032cad5a98f678eb539f0c74dacac5bc5919364d18a6511a8d6f68e3958b0e5a4b2d2fdcc3681823169bc30f7dd4824fee45079502d74806159822ed826f269b7666e49d0bab0b34e675061e85120645ba663c79208f3866098951add7abd3f8379835b3dc8cafe55b3e5897945f0ddd04144ce194934fd8376bd9aedf39fc832afcf81ab643387f0fead2f822c033c5c96ccfa37cec0813c503913e733d0413e9a699b46851d3870b6bbd790b5fd8de69aff77f8a62035f2e472c683c69dc3386a9a0d29d34bcdea74392cc37e32e9cc258681249b222df05c6fc6330596b0325b9354d80894331d11007beb4e032c0b95411be261ea66c822f1f8aae08baaef3f7bf9ebbb1fbd467fc2e19310c892fb0afa63dfe7e0871a1cffbb5259eee8eb62bf1d8e1ec5d4c442a5aece69495933cdf9ede10c54667c5ccc9d0e60ae359a9885421cddf199cc9d398f930e741713deb43f1a1a576b20f1bf274f69da591eddfa363375cc84f7074e826eb8108788ee4ca780343de597a0f2cd7d4fb2b9b20d3cee9deae21fafa800ce3ffebbfff21bb77768ad67f19afb9c23fb80fba04eff9e4896d806b360e8619160a0011c22a61cddb15b623df1834981e41522b1bea805bcd7161a51fa8e4dcb0bbd74da0f3de0c0214b88828f5dc380eb80618ac2792fd60d483ee2f20de41e0a2feb4efe9bd7254d65547d456e60ccab9cc4a69f21e179ce9da3a23a5d22a4a3d8698dee08dc1d717224b81d2e0d7d0140c13bc443cdc13fcf7f6d6d9fecca05ebd1ef1c64866ca3fd4e8b3bba5fa9ab17adfd8d846c1a6918c0f8bc19c516beac5baff460a5c14c668154c76779ce6003f3b449deb35dce81a80da411b90dd3fbc59febb142cbc09887755aed9588da1f9eb43a5bec19dd01b66f4f53d0eaabc673b19d02868c1c126b437931d6d8f532687266616588321861b559ea5c85741be55746b2c73150895f674cf5033f0c1ee08596a60259a67c5ab7f0d70cc2c6d4f3f3f302761e060c139ec7b7283bbeaa86a78adfbe8c2454d279803c8d45adeebcbd218f7466a4cdc97b322b21cb51da7129e867361dab6b9dc4330045f182a829aa419f99d91feed39586ad24a66a419ca1f7881505f0bc3f0f2d565ad0fc332a8e614bc5f15c62fd70c9dc661fd09c9b044ab0b85e7537306c9d3c364af8ae44b993cf9f4e7c547f891aad126ff64a564bef6f59917c6c23c7d489490dde2895efbf44419245ae08c32aa3cc0b66c2e3b001aacfd0ea856d4cb7009c64f12378d1813348cd26326833cb1bf0df4b5afc0e492345a26a0dac37e1b2c06ae769497c501aa07fa2898381a61911abef4e75033441e8faa71d0e576e9b7771f81ca66873e24e828ee462f157e3a48a12798da50030f11409e82bc346c886683979aa78c34157263a8c466c741d5f88c6a88f0abdbfd70a3fab81296394bd826c52f793d00545e8790da88f477d812906a45ae752475b70ef3a40cd23d4783063df1babdfd8493651793fcf6df0d745515dbeed079021d23a9b44ef7dadfb714ebbeb9aa022d506c3c9b576dafe09e1e6bc55e4db74486eec1ff6bae73d51b5485fd84553cc8dcb03a02440f6e1064a4da0645a328c058162c41c7662166ed2f638b10014871672ce3911a80616aa477c9f210555ee4eb2e6e62a244c9032af8ba60af16eefe49108eb62739f5a81206ddb1e925a04786e014b9728935f27e5a7b4ed60b4760da8932e9269450323529096d0e0c360fc2b844453b14428ce4f51862a2ba886bd0d26742ca4f41da17b9aa2ec11d928ca893f9b41a057d1a3d4a3ab00d6bc84f128949e12cd1e66d3c9a04cd88d3ad25eec65d4c49966544048fdfa984de9c966627d03d908854c1036dbea87a68b9d646e8b23f2c00bfa3685340d1adf7c7cf6c5a00317771a9e794c4cbfe5d302d73f8071618ee97620ef8b8910679683744d685dbfb57d670ce4bcf7e401cfcd69d27d8743b0529750b2037d782ec5a5f77e62e45f34e553c9363e6f923dfcb1cde58baaffa5aee53d61a2f6c158b4d4f53ccb06667045d15e0028f9e2f2f961c78060fd2cb336fce8675f4903caddd69b96bd1d0a0ec2cc5f6b8da78b64ee0b8447f72e007a4969e1681575086752140c2d225eec771fcd350719aa4e94744eed29271bd3ab0d57b48788e4e31e3c2c79a76c13c31ce8b9697d922219ae3417a57e9845a3f6806896d8cce547b54c708855ecd0c7c51b7c0bde52c18ba0987edade6f4aa8c61fd00bb449b086624ae8e2c49efad29067de6b83fc2ec317d89f54873671222d7b0bd720e59f4453b5d847bfb98e1af0d666f849f530e3f7b9dedfe53da29d8dd851e03c489c1390e1a8169f23f6c7121d436f9603603c653656c6cab9fe294eb2934e3a85fa5a2ddd1e86d4a9555f7580acee1e485f4ba533281d6329ebfc20588323144888d12746c5ee938301226ca9170332b5ffad5dfc6adc1cf882398071d93b3162c6598c797621f7163040a881601329e4b4960ebd4063bf13098910c4afffe492c0b43f0264327f31137d464b67d8d5f56303767840a5e8a9b8abebaf48e04e2446107963ab254d12c7d80c3b848ce86862b52779ac6db4d93124790a434b5b2fd9ebb6481f3be805e3774dbb3d71874fec9c973b72b26b04393b72e839813f27a82e99d45c907d1bd483ef4ce1dfa0c13277d28d883734258d52b3572aa64047efc831e083444262417ba612246117173223b91b7f0d852b47e9871d187af4ca107b1be2b24d8c6abc15a069510d9b8745df2e2fb45e07450ae349eca09b79a858c6e229a87685c0e9a079886467e00b2d8aa1f4af986b1ac6b17504faca06b02e2d7303f4e93e0158b71fd33a0f79a0f503563d475cada115d6ee8ebec1b61fa50d4ae3b27d2ec57a7acfe222b027de75b2aea0cae4927d5ec7b34333cf371ef92de04d14d76206b3c66db70fb36ef6b0abff84e7f31d7c124222761deca15e71ca083c86d98f13c6a943463f"}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x80000000, 0xe}) 14:58:47 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x80000000, 0xe}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000180)={0x800, 0x56, 0x1, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f00000001c0)=0x6) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/btrfs-control\x00', 0x0, 0x0) ioctl$sock_SIOCDELRT(r2, 0x890c, &(0x7f0000000340)={0x0, @can, @can, @can}) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_CMAP(r3, 0x4b70, &(0x7f0000001c40)) ioctl$KDFONTOP_COPY(r3, 0x4b72, &(0x7f0000000200)={0x3, 0x1, 0x1b, 0x12, 0x12e, &(0x7f00000003c0)}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x4, 0x0, 0x4, 0x40, 0x0, @mcast1, @empty, 0x700, 0x7, 0xffffffff, 0xb5f}}) openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x420, 0x0) 14:58:47 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x80000000, 0xe}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000980)={'team0\x00'}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000800)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000000)={'sit0\x00', r3, 0x0, 0x0, 0x0, 0x0, 0x22, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private2}}) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f00000000c0)={@mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xadeb, 0x7fff, 0x1440, 0x0, 0x6, 0x10282, r3}) 14:58:47 executing program 3: setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0xfffffffffffffed1) 14:58:47 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r0, &(0x7f00000016c0)="4904e565354dbeee3d0a7d6117a5fa50d4124c31ad4be15b016935fe4d7ed3b0cc47c0e2970e56ada969eba342aebd5002e1865b94f2efb1d5da3cce09f907f5df737234138c54714c7cd52d41cde59586648c4b92d01e8c0da51e3bf6d77c6277bc8966ece594c5f86345d6b9e8f592beb946538f37a21da2d5811e373b256a6f5ede09af2e579547a468c7dcbf25", 0x8f, 0x40, &(0x7f0000001780)={0x11, 0xf6, 0x0, 0x1, 0x4, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x14) 14:58:47 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$PPPIOCGL2TPSTATS(0xffffffffffffffff, 0x80487436, &(0x7f00000000c0)="5c611b9b502021ab4ad768701eb69a07c48e0a1e30edd70e3adee8e7b5542b699162572d42b994e2f936311dc372142d73aca85ee03f2c0565fae7b5dbef25963a5f22a8b854b29005f5b2d3420b79086c179b9d0f4af170466b6be65cd90aa2e67f38f74765d32f58eddd8ac80c6752d025c600adb59ed03ecfc3eddf3e") ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x80000000, 0xe}) 14:58:47 executing program 4: r0 = socket$packet(0x11, 0x0, 0x300) sendto$packet(r0, &(0x7f00000016c0)="4904e565354dbeee3d0a7d6117a5fa50d4124c31ad4be15b016935fe4d7ed3b0cc47c0e2970e56ada969eba342aebd5002e1865b94f2efb1d5da3cce09f907f5df737234138c54714c7cd52d41cde59586648c4b92d01e8c0da51e3bf6d77c6277bc8966ece594c5f86345d6b9e8f592beb946538f37a21da2d5811e373b256a6f5ede09af2e579547a468c7dcbf25", 0x8f, 0x40, &(0x7f0000001780)={0x11, 0xf6, 0x0, 0x1, 0x4, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x14) 14:58:47 executing program 4: r0 = socket$packet(0x11, 0x0, 0x300) sendto$packet(r0, &(0x7f00000016c0)="4904e565354dbeee3d0a7d6117a5fa50d4124c31ad4be15b016935fe4d7ed3b0cc47c0e2970e56ada969eba342aebd5002e1865b94f2efb1d5da3cce09f907f5df737234138c54714c7cd52d41cde59586648c4b92d01e8c0da51e3bf6d77c6277bc8966ece594c5f86345d6b9e8f592beb946538f37a21da2d5811e373b256a6f5ede09af2e579547a468c7dcbf25", 0x8f, 0x40, &(0x7f0000001780)={0x11, 0xf6, 0x0, 0x1, 0x4, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x14) [ 2173.212744] syz-executor.5: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2173.222636] syz-executor.1: [ 2173.226656] syz-executor.5 cpuset= [ 2173.230694] page allocation failure: order:4 [ 2173.234512] / [ 2173.244963] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 2173.249378] mems_allowed=0-1 [ 2173.263190] (null) [ 2173.293496] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 2173.321322] CPU: 1 PID: 29225 Comm: syz-executor.1 Not tainted 4.14.229-syzkaller #0 [ 2173.329254] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2173.338633] Call Trace: [ 2173.341252] dump_stack+0x1b2/0x281 [ 2173.344911] warn_alloc.cold+0x96/0x1cc [ 2173.348912] ? zone_watermark_ok_safe+0x220/0x220 [ 2173.353801] __alloc_pages_nodemask+0x2127/0x2720 [ 2173.358687] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2173.363552] ? migrate_swap_stop+0x880/0x880 [ 2173.367978] ? lock_acquire+0x170/0x3f0 [ 2173.371964] ? wake_up_q+0x82/0xd0 [ 2173.375523] ? __mutex_unlock_slowpath+0x261/0x770 [ 2173.380487] alloc_pages_current+0x155/0x260 [ 2173.384936] ion_page_pool_alloc+0x118/0x1b0 [ 2173.389439] ion_system_heap_allocate+0x133/0x8c0 [ 2173.394302] ? ion_alloc+0x187/0x810 [ 2173.398045] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2173.403515] ? ion_system_contig_heap_create+0x130/0x130 [ 2173.408985] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2173.414021] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2173.418882] ion_alloc+0x204/0x810 [ 2173.422466] ? ion_dma_buf_release+0x40/0x40 [ 2173.426911] ? __might_fault+0x177/0x1b0 [ 2173.430992] ion_ioctl+0xea/0x1f0 [ 2173.434471] ? ion_query_heaps+0x360/0x360 [ 2173.438849] ? ion_query_heaps+0x360/0x360 [ 2173.439470] syz-executor.3: [ 2173.443096] do_vfs_ioctl+0x75a/0xff0 [ 2173.443111] ? ioctl_preallocate+0x1a0/0x1a0 [ 2173.443121] ? lock_downgrade+0x740/0x740 [ 2173.443135] ? __fget+0x225/0x360 [ 2173.443146] ? do_vfs_ioctl+0xff0/0xff0 [ 2173.465811] page allocation failure: order:4 [ 2173.466130] ? security_file_ioctl+0x83/0xb0 [ 2173.466143] SyS_ioctl+0x7f/0xb0 [ 2173.466154] ? do_vfs_ioctl+0xff0/0xff0 [ 2173.482434] do_syscall_64+0x1d5/0x640 [ 2173.486345] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2173.488495] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 2173.491540] RIP: 0033:0x466459 [ 2173.491546] RSP: 002b:00007fdc8e5a7188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2173.491556] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 2173.491562] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2173.491568] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2173.491574] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2173.491579] R13: 00007ffd2c2faa2f R14: 00007fdc8e5a7300 R15: 0000000000022000 [ 2173.500258] CPU: 1 PID: 29219 Comm: syz-executor.5 Not tainted 4.14.229-syzkaller #0 [ 2173.537084] (null) [ 2173.539254] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2173.539259] Call Trace: [ 2173.539283] dump_stack+0x1b2/0x281 [ 2173.539299] warn_alloc.cold+0x96/0x1cc [ 2173.539311] ? zone_watermark_ok_safe+0x220/0x220 [ 2173.539333] __alloc_pages_nodemask+0x2127/0x2720 [ 2173.555106] syz-executor.3 cpuset= [ 2173.556686] ? lock_acquire+0x170/0x3f0 [ 2173.556709] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2173.593623] / [ 2173.595457] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2173.607468] ? __mutex_unlock_slowpath+0x75/0x770 [ 2173.612428] alloc_pages_current+0x155/0x260 [ 2173.615976] mems_allowed=0-1 [ 2173.616852] ion_page_pool_alloc+0x118/0x1b0 [ 2173.624372] ion_system_heap_allocate+0x133/0x8c0 [ 2173.629238] ? ion_alloc+0x187/0x810 [ 2173.632961] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2173.638427] ? ion_system_contig_heap_create+0x130/0x130 [ 2173.643906] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2173.648944] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2173.653809] ion_alloc+0x204/0x810 [ 2173.657446] ? ion_dma_buf_release+0x40/0x40 [ 2173.661889] ? __might_fault+0x177/0x1b0 [ 2173.665980] ion_ioctl+0xea/0x1f0 [ 2173.669457] ? ion_query_heaps+0x360/0x360 [ 2173.673709] ? ion_query_heaps+0x360/0x360 [ 2173.677959] do_vfs_ioctl+0x75a/0xff0 [ 2173.681776] ? ioctl_preallocate+0x1a0/0x1a0 [ 2173.686199] ? lock_downgrade+0x740/0x740 [ 2173.690366] ? __fget+0x225/0x360 [ 2173.693843] ? do_vfs_ioctl+0xff0/0xff0 [ 2173.697849] ? security_file_ioctl+0x83/0xb0 [ 2173.702367] SyS_ioctl+0x7f/0xb0 [ 2173.705751] ? do_vfs_ioctl+0xff0/0xff0 [ 2173.709763] do_syscall_64+0x1d5/0x640 [ 2173.713665] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2173.718960] RIP: 0033:0x466459 [ 2173.722163] RSP: 002b:00007fb589bc1188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2173.729889] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 2173.737177] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2173.744465] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2173.751772] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2173.759075] R13: 00007ffc43c5be2f R14: 00007fb589bc1300 R15: 0000000000022000 [ 2173.766471] CPU: 0 PID: 29242 Comm: syz-executor.3 Not tainted 4.14.229-syzkaller #0 [ 2173.767322] Bluetooth: hci1 command 0x040f tx timeout [ 2173.774377] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2173.774382] Call Trace: [ 2173.774405] dump_stack+0x1b2/0x281 [ 2173.774418] warn_alloc.cold+0x96/0x1cc [ 2173.774429] ? zone_watermark_ok_safe+0x220/0x220 [ 2173.774452] __alloc_pages_nodemask+0x2127/0x2720 [ 2173.774470] ? lock_acquire+0x170/0x3f0 [ 2173.774486] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2173.774503] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2173.774514] ? __mutex_unlock_slowpath+0x75/0x770 [ 2173.774528] alloc_pages_current+0x155/0x260 [ 2173.774541] ion_page_pool_alloc+0x118/0x1b0 [ 2173.774551] ion_system_heap_allocate+0x133/0x8c0 [ 2173.774561] ? ion_alloc+0x187/0x810 [ 2173.774571] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2173.774580] ? ion_system_contig_heap_create+0x130/0x130 [ 2173.774590] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2173.774601] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2173.774612] ion_alloc+0x204/0x810 [ 2173.774626] ? ion_dma_buf_release+0x40/0x40 [ 2173.774639] ? __might_fault+0x177/0x1b0 [ 2173.774651] ion_ioctl+0xea/0x1f0 [ 2173.774661] ? ion_query_heaps+0x360/0x360 [ 2173.774673] ? ion_query_heaps+0x360/0x360 [ 2173.774684] do_vfs_ioctl+0x75a/0xff0 [ 2173.774695] ? ioctl_preallocate+0x1a0/0x1a0 [ 2173.774703] ? lock_downgrade+0x740/0x740 [ 2173.774719] ? __fget+0x225/0x360 [ 2173.840608] syz-executor.1: [ 2173.841933] ? do_vfs_ioctl+0xff0/0xff0 [ 2173.841947] ? security_file_ioctl+0x83/0xb0 [ 2173.841958] SyS_ioctl+0x7f/0xb0 [ 2173.841971] ? do_vfs_ioctl+0xff0/0xff0 [ 2173.848042] page allocation failure: order:4 [ 2173.851141] do_syscall_64+0x1d5/0x640 [ 2173.851159] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2173.851167] RIP: 0033:0x466459 [ 2173.851176] RSP: 002b:00007fb199b88188 EFLAGS: 00000246 [ 2173.860770] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 2173.861770] ORIG_RAX: 0000000000000010 [ 2173.861777] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 2173.861783] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2173.861789] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2173.861795] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2173.861801] R13: 00007ffe54ba022f R14: 00007fb199b88300 R15: 0000000000022000 [ 2174.011029] Mem-Info: [ 2174.013591] active_anon:16999 inactive_anon:53477 isolated_anon:24 [ 2174.013591] active_file:2534 inactive_file:1995 isolated_file:37 [ 2174.013591] unevictable:0 dirty:13 writeback:0 unstable:0 [ 2174.013591] slab_reclaimable:12354 slab_unreclaimable:126043 [ 2174.013591] mapped:55961 shmem:54035 pagetables:3018 bounce:0 [ 2174.013591] free:237212 free_pcp:86 free_cma:0 [ 2174.048365] syz-executor.2: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2174.061801] syz-executor.5: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2174.082240] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 2174.093487] CPU: 1 PID: 29228 Comm: syz-executor.5 Not tainted 4.14.229-syzkaller #0 [ 2174.101415] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2174.108959] syz-executor.2 cpuset= [ 2174.110783] Call Trace: [ 2174.110815] dump_stack+0x1b2/0x281 [ 2174.110832] warn_alloc.cold+0x96/0x1cc [ 2174.114474] / [ 2174.117007] ? zone_watermark_ok_safe+0x220/0x220 [ 2174.131147] __alloc_pages_nodemask+0x2127/0x2720 [ 2174.136022] ? lock_acquire+0x170/0x3f0 [ 2174.140018] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2174.144074] mems_allowed=0-1 [ 2174.144898] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2174.153447] ? __mutex_unlock_slowpath+0x75/0x770 [ 2174.158312] alloc_pages_current+0x155/0x260 [ 2174.162745] ion_page_pool_alloc+0x118/0x1b0 [ 2174.167167] ion_system_heap_allocate+0x133/0x8c0 [ 2174.172042] ? ion_alloc+0x187/0x810 [ 2174.175784] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2174.181285] ? ion_system_contig_heap_create+0x130/0x130 [ 2174.186760] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2174.191817] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2174.196687] ion_alloc+0x204/0x810 [ 2174.200252] ? ion_dma_buf_release+0x40/0x40 [ 2174.204688] ? __might_fault+0x177/0x1b0 [ 2174.208790] ion_ioctl+0xea/0x1f0 [ 2174.212263] ? ion_query_heaps+0x360/0x360 [ 2174.216521] ? ion_query_heaps+0x360/0x360 [ 2174.220781] do_vfs_ioctl+0x75a/0xff0 [ 2174.224604] ? ioctl_preallocate+0x1a0/0x1a0 [ 2174.229030] ? lock_downgrade+0x740/0x740 [ 2174.233217] ? __fget+0x225/0x360 [ 2174.236775] ? do_vfs_ioctl+0xff0/0xff0 [ 2174.240861] ? security_file_ioctl+0x83/0xb0 [ 2174.245311] SyS_ioctl+0x7f/0xb0 [ 2174.248689] ? do_vfs_ioctl+0xff0/0xff0 [ 2174.252677] do_syscall_64+0x1d5/0x640 [ 2174.256852] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2174.262065] RIP: 0033:0x466459 [ 2174.265262] RSP: 002b:00007fb589ba0188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2174.273026] RAX: ffffffffffffffda RBX: 000000000056c008 RCX: 0000000000466459 [ 2174.280398] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2174.287705] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2174.294990] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c008 [ 2174.302278] R13: 00007ffc43c5be2f R14: 00007fb589ba0300 R15: 0000000000022000 [ 2174.327124] Node 0 active_anon:62608kB inactive_anon:180592kB active_file:4844kB inactive_file:4692kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:169856kB dirty:48kB writeback:80kB shmem:182480kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2174.358320] CPU: 1 PID: 29233 Comm: syz-executor.2 Not tainted 4.14.229-syzkaller #0 [ 2174.366243] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2174.375609] Call Trace: [ 2174.378229] dump_stack+0x1b2/0x281 [ 2174.381878] warn_alloc.cold+0x96/0x1cc [ 2174.385874] ? zone_watermark_ok_safe+0x220/0x220 [ 2174.390755] __alloc_pages_nodemask+0x2127/0x2720 [ 2174.395649] ? lock_acquire+0x170/0x3f0 [ 2174.399648] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2174.404519] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2174.410001] ? __mutex_unlock_slowpath+0x75/0x770 [ 2174.414959] alloc_pages_current+0x155/0x260 [ 2174.419388] ion_page_pool_alloc+0x118/0x1b0 [ 2174.423840] ion_system_heap_allocate+0x133/0x8c0 [ 2174.428702] ? ion_alloc+0x187/0x810 [ 2174.432433] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2174.437946] ? ion_system_contig_heap_create+0x130/0x130 [ 2174.443421] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2174.448455] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2174.453316] ion_alloc+0x204/0x810 [ 2174.456871] ? ion_dma_buf_release+0x40/0x40 [ 2174.461298] ? __might_fault+0x177/0x1b0 [ 2174.465566] ion_ioctl+0xea/0x1f0 [ 2174.469034] ? ion_query_heaps+0x360/0x360 [ 2174.473285] ? ion_query_heaps+0x360/0x360 [ 2174.477561] do_vfs_ioctl+0x75a/0xff0 [ 2174.481373] ? ioctl_preallocate+0x1a0/0x1a0 [ 2174.485791] ? lock_downgrade+0x740/0x740 [ 2174.489951] ? __fget+0x225/0x360 [ 2174.493425] ? do_vfs_ioctl+0xff0/0xff0 [ 2174.497421] ? security_file_ioctl+0x83/0xb0 [ 2174.501850] SyS_ioctl+0x7f/0xb0 [ 2174.505242] ? do_vfs_ioctl+0xff0/0xff0 [ 2174.509237] do_syscall_64+0x1d5/0x640 [ 2174.513155] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2174.518370] RIP: 0033:0x466459 [ 2174.521573] RSP: 002b:00007fc228c66188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2174.529313] RAX: ffffffffffffffda RBX: 000000000056c008 RCX: 0000000000466459 [ 2174.536593] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2174.543880] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2174.551171] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c008 [ 2174.558451] R13: 00007ffe5f3badff R14: 00007fc228c66300 R15: 0000000000022000 [ 2174.599276] Node 1 active_anon:5376kB inactive_anon:33316kB active_file:4968kB inactive_file:2796kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:53980kB dirty:8kB writeback:16kB shmem:33660kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2174.617334] (null) [ 2174.627649] Node 0 DMA free:11076kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2174.679023] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2174.684309] Node 0 DMA32 free:671888kB min:36200kB low:45248kB high:54296kB active_anon:62608kB inactive_anon:180592kB active_file:5056kB inactive_file:4976kB unevictable:0kB writepending:128kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:8448kB pagetables:5584kB bounce:0kB free_pcp:700kB local_pcp:208kB free_cma:0kB [ 2174.690177] syz-executor.1 cpuset= [ 2174.731994] lowmem_reserve[]: 0 0 0 0 0 [ 2174.765323] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2174.811575] / mems_allowed=0-1 [ 2174.819294] lowmem_reserve[]: 0 0 0 0 0 [ 2174.830405] CPU: 0 PID: 29250 Comm: syz-executor.1 Not tainted 4.14.229-syzkaller #0 [ 2174.837075] Node 1 [ 2174.838315] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2174.838319] Call Trace: [ 2174.838342] dump_stack+0x1b2/0x281 [ 2174.838357] warn_alloc.cold+0x96/0x1cc [ 2174.838370] ? zone_watermark_ok_safe+0x220/0x220 [ 2174.838392] __alloc_pages_nodemask+0x2127/0x2720 [ 2174.838407] ? lock_acquire+0x170/0x3f0 [ 2174.838422] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2174.838441] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2174.838454] ? __mutex_unlock_slowpath+0x75/0x770 [ 2174.838469] alloc_pages_current+0x155/0x260 [ 2174.841940] Normal free:102860kB min:53696kB low:67120kB high:80544kB active_anon:5376kB inactive_anon:33316kB active_file:4968kB inactive_file:2796kB unevictable:0kB writepending:24kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:2272kB pagetables:6420kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2174.850081] ion_page_pool_alloc+0x118/0x1b0 [ 2174.850093] ion_system_heap_allocate+0x133/0x8c0 [ 2174.850103] ? ion_alloc+0x187/0x810 [ 2174.850114] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2174.850122] ? ion_system_contig_heap_create+0x130/0x130 [ 2174.850132] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2174.850144] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2174.850153] ion_alloc+0x204/0x810 [ 2174.850166] ? ion_dma_buf_release+0x40/0x40 [ 2174.850177] ? __might_fault+0x177/0x1b0 [ 2174.850187] ion_ioctl+0xea/0x1f0 [ 2174.850196] ? ion_query_heaps+0x360/0x360 [ 2174.850210] ? _raw_spin_unlock+0x29/0x40 [ 2174.850218] ? ion_query_heaps+0x360/0x360 [ 2174.850229] do_vfs_ioctl+0x75a/0xff0 [ 2174.850240] ? ioctl_preallocate+0x1a0/0x1a0 [ 2174.850249] ? lock_downgrade+0x740/0x740 [ 2174.850261] ? __fget+0x225/0x360 [ 2174.850273] ? do_vfs_ioctl+0xff0/0xff0 [ 2174.883938] lowmem_reserve[]: [ 2174.884445] ? security_file_ioctl+0x83/0xb0 [ 2174.894999] 0 [ 2174.922254] SyS_ioctl+0x7f/0xb0 [ 2174.922264] ? do_vfs_ioctl+0xff0/0xff0 [ 2174.922277] do_syscall_64+0x1d5/0x640 [ 2174.922292] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2174.922300] RIP: 0033:0x466459 [ 2174.922305] RSP: 002b:00007fdc8e565188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2174.922314] RAX: ffffffffffffffda RBX: 000000000056c0b0 RCX: 0000000000466459 [ 2174.922319] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2174.922324] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2174.922329] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c0b0 [ 2174.922334] R13: 00007ffd2c2faa2f R14: 00007fdc8e565300 R15: 0000000000022000 [ 2175.107073] warn_alloc_show_mem: 2 callbacks suppressed [ 2175.107077] Mem-Info: [ 2175.124480] active_anon:16998 inactive_anon:53477 isolated_anon:0 [ 2175.124480] active_file:2456 inactive_file:1876 isolated_file:0 [ 2175.124480] unevictable:0 dirty:13 writeback:0 unstable:0 [ 2175.124480] slab_reclaimable:12355 slab_unreclaimable:126466 [ 2175.124480] mapped:55975 shmem:54035 pagetables:3001 bounce:0 [ 2175.124480] free:148074 free_pcp:152 free_cma:0 [ 2175.184352] Node 0 active_anon:62616kB inactive_anon:180592kB active_file:4856kB inactive_file:4708kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:169920kB dirty:48kB writeback:0kB shmem:182480kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2175.270606] Node 1 active_anon:5376kB inactive_anon:33316kB active_file:4968kB inactive_file:2796kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:53980kB dirty:4kB writeback:0kB shmem:33660kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2175.355049] Node 0 DMA free:11332kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2175.412812] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2175.467862] Node 0 DMA32 free:158052kB min:36200kB low:45248kB high:54296kB active_anon:62616kB inactive_anon:180592kB active_file:4856kB inactive_file:4708kB unevictable:0kB writepending:48kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:8352kB pagetables:5584kB bounce:0kB free_pcp:664kB local_pcp:200kB free_cma:0kB [ 2175.513525] 0 0 0 0 [ 2175.515906] Node 0 DMA: 17*4kB (UME) 24*8kB (UM) 22*16kB (UM) 13*32kB (UME) 8*64kB (UME) 7*128kB (UME) 8*256kB (UME) 5*512kB (UE) 2*1024kB (UE) 1*2048kB (M) 0*4096kB = 11140kB [ 2175.539047] lowmem_reserve[]: 0 0 0 0 0 [ 2175.571759] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2175.601867] Node 0 DMA32: 76*4kB (UME) 26*8kB (ME) 4*16kB (UE) 1793*32kB (UE) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 57952kB [ 2175.631154] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2175.674231] lowmem_reserve[]: 0 0 0 0 0 [ 2175.717824] Node 1 Normal: 1*4kB (U) 2*8kB (UM) 1*16kB (U) 514*32kB (U) 1*64kB (U) 947*128kB (U) 0*256kB 0*512kB 1*1024kB (U) 2*2048kB (U) 0*4096kB = 142884kB [ 2175.736666] Node 1 Normal free:138640kB min:53696kB low:67120kB high:80544kB active_anon:5376kB inactive_anon:33316kB active_file:4968kB inactive_file:2796kB unevictable:0kB writepending:4kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:2272kB pagetables:6420kB bounce:0kB free_pcp:188kB local_pcp:108kB free_cma:0kB [ 2175.786291] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2175.858668] Bluetooth: hci1 command 0x0419 tx timeout [ 2175.874752] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2175.907874] lowmem_reserve[]: 0 0 0 0 0 [ 2175.912141] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2175.932857] Node 0 DMA: 10*4kB (UME) 18*8kB (UM) 22*16kB (UM) 13*32kB (UME) 8*64kB (UME) 7*128kB (UME) 8*256kB (UME) 5*512kB (UE) 2*1024kB (UE) 1*2048kB (M) 0*4096kB = 11064kB [ 2175.972323] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2175.998948] 57076 total pagecache pages [ 2176.004106] Node 0 DMA32: 397*4kB (UME) 51*8kB (UME) 9*16kB (ME) 1063*32kB (UME) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36156kB [ 2176.020391] 0 pages in swap cache [ 2176.024596] Swap cache stats: add 0, delete 0, find 0/0 [ 2176.030473] Free swap = 0kB [ 2176.035779] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2176.049137] Total swap = 0kB [ 2176.059988] 2097051 pages RAM [ 2176.071003] 0 pages HighMem/MovableOnly [ 2176.087574] Node 1 Normal: 55*4kB (UM) 36*8kB (UM) 25*16kB (UM) 16*32kB (UM) 5*64kB (UM) 1*128kB (U) 183*256kB (UM) 0*512kB 1*1024kB (U) 2*2048kB (U) 0*4096kB = 53836kB [ 2176.104270] 363848 pages reserved [ 2176.130674] 0 pages cma reserved [ 2176.144987] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2176.154116] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2176.163134] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2176.172354] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2176.182446] 54885 total pagecache pages [ 2176.186532] 0 pages in swap cache [ 2176.190252] Swap cache stats: add 0, delete 0, find 0/0 [ 2176.195838] Free swap = 0kB [ 2176.205976] Total swap = 0kB [ 2176.209287] 2097051 pages RAM [ 2176.212499] 0 pages HighMem/MovableOnly [ 2176.216691] 363848 pages reserved [ 2176.220444] 0 pages cma reserved [ 2176.262089] syz-executor.0: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2176.297839] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 2176.303098] CPU: 0 PID: 29234 Comm: syz-executor.0 Not tainted 4.14.229-syzkaller #0 [ 2176.311067] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2176.320421] Call Trace: [ 2176.323023] dump_stack+0x1b2/0x281 [ 2176.326663] warn_alloc.cold+0x96/0x1cc [ 2176.330646] ? zone_watermark_ok_safe+0x220/0x220 [ 2176.335617] __alloc_pages_nodemask+0x2127/0x2720 [ 2176.340826] ? io_schedule_timeout+0x140/0x140 [ 2176.345636] ? lock_acquire+0x170/0x3f0 [ 2176.349628] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2176.354517] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2176.359986] ? __mutex_unlock_slowpath+0x75/0x770 [ 2176.364838] ? __alloc_pages_nodemask+0x27a/0x2720 [ 2176.369779] alloc_pages_current+0x155/0x260 [ 2176.374200] ion_page_pool_alloc+0x118/0x1b0 [ 2176.378616] ion_system_heap_allocate+0x133/0x8c0 [ 2176.383470] ? ion_alloc+0x187/0x810 [ 2176.387299] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2176.392758] ? ion_system_contig_heap_create+0x130/0x130 [ 2176.398243] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2176.403268] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2176.408119] ion_alloc+0x204/0x810 [ 2176.411669] ? ion_dma_buf_release+0x40/0x40 [ 2176.416097] ? __might_fault+0x177/0x1b0 [ 2176.420163] ion_ioctl+0xea/0x1f0 [ 2176.423621] ? ion_query_heaps+0x360/0x360 [ 2176.427862] ? ion_query_heaps+0x360/0x360 [ 2176.433579] do_vfs_ioctl+0x75a/0xff0 [ 2176.437491] ? ioctl_preallocate+0x1a0/0x1a0 [ 2176.442150] ? lock_downgrade+0x740/0x740 [ 2176.452402] ? __fget+0x225/0x360 [ 2176.455900] ? do_vfs_ioctl+0xff0/0xff0 [ 2176.460240] ? security_file_ioctl+0x83/0xb0 [ 2176.464653] SyS_ioctl+0x7f/0xb0 [ 2176.468045] ? do_vfs_ioctl+0xff0/0xff0 [ 2176.472210] do_syscall_64+0x1d5/0x640 [ 2176.476132] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2176.481528] RIP: 0033:0x466459 [ 2176.484743] RSP: 002b:00007f78296bb188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2176.492469] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 2176.500642] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2176.509137] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2176.516603] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2176.523899] R13: 00007ffd4f3c2b7f R14: 00007f78296bb300 R15: 0000000000022000 [ 2176.562237] warn_alloc_show_mem: 2 callbacks suppressed [ 2176.562241] Mem-Info: [ 2176.570347] active_anon:16998 inactive_anon:53477 isolated_anon:0 [ 2176.570347] active_file:57 inactive_file:40 isolated_file:6 [ 2176.570347] unevictable:0 dirty:14 writeback:7 unstable:0 [ 2176.570347] slab_reclaimable:12351 slab_unreclaimable:126358 [ 2176.570347] mapped:52729 shmem:54035 pagetables:3001 bounce:0 [ 2176.570347] free:25167 free_pcp:2 free_cma:0 [ 2176.604646] Node 0 active_anon:62616kB inactive_anon:180592kB active_file:184kB inactive_file:108kB unevictable:0kB isolated(anon):0kB isolated(file):24kB mapped:162536kB dirty:48kB writeback:24kB shmem:182480kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2176.633343] Node 1 active_anon:5376kB inactive_anon:33316kB active_file:44kB inactive_file:52kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:48380kB dirty:8kB writeback:4kB shmem:33660kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2176.685759] Node 0 DMA free:11064kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2176.712257] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2176.717347] Node 0 DMA32 free:38148kB min:36200kB low:45248kB high:54296kB active_anon:62616kB inactive_anon:180592kB active_file:412kB inactive_file:280kB unevictable:0kB writepending:72kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:8352kB pagetables:5584kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2176.746587] lowmem_reserve[]: 0 0 0 0 0 [ 2176.750646] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2176.776610] lowmem_reserve[]: 0 0 0 0 0 [ 2176.797845] Node 1 Normal free:53472kB min:53696kB low:67120kB high:80544kB active_anon:5376kB inactive_anon:33316kB active_file:4kB inactive_file:124kB unevictable:0kB writepending:12kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:2272kB pagetables:6420kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2176.826752] lowmem_reserve[]: 0 0 0 0 0 [ 2176.830900] Node 0 DMA: 10*4kB (UME) 18*8kB (UM) 22*16kB (UM) 13*32kB (UME) 8*64kB (UME) 7*128kB (UME) 8*256kB (UME) 5*512kB (UE) 2*1024kB (UE) 1*2048kB (M) 0*4096kB = 11064kB [ 2176.848429] Node 0 DMA32: 751*4kB (ME) 61*8kB (ME) 14*16kB (UME) 997*32kB (UME) 5*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 35940kB [ 2176.862479] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2176.873598] Node 1 Normal: 25*4kB (UM) 10*8kB (UM) 5*16kB (UM) 7*32kB (UM) 8*64kB (UM) 2*128kB (UM) 183*256kB (UM) 1*512kB (M) 1*1024kB (U) 2*2048kB (U) 0*4096kB = 53732kB [ 2176.889225] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2176.898438] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2176.907032] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2176.919273] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2176.928582] 54110 total pagecache pages [ 2176.932569] 0 pages in swap cache [ 2176.936025] Swap cache stats: add 0, delete 0, find 0/0 [ 2176.941475] Free swap = 0kB [ 2176.944494] Total swap = 0kB [ 2176.947515] 2097051 pages RAM [ 2176.950830] 0 pages HighMem/MovableOnly [ 2176.955769] 363848 pages reserved [ 2176.959301] 0 pages cma reserved [ 2177.189314] syz-fuzzer invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 2177.224839] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 2177.257870] CPU: 1 PID: 20452 Comm: syz-fuzzer Not tainted 4.14.229-syzkaller #0 [ 2177.265649] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2177.275104] Call Trace: [ 2177.277900] dump_stack+0x1b2/0x281 [ 2177.281543] dump_header+0x178/0x82f [ 2177.285968] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2177.291627] ? ___ratelimit+0x2cd/0x530 [ 2177.295617] oom_kill_process.cold+0x10/0xa40 [ 2177.301550] out_of_memory+0xe3e/0x1190 [ 2177.305921] ? oom_killer_disable+0x1c0/0x1c0 [ 2177.310444] ? mutex_trylock+0x152/0x1a0 [ 2177.314518] __alloc_pages_nodemask+0x23e1/0x2720 [ 2177.319639] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2177.324508] alloc_pages_current+0x155/0x260 [ 2177.328934] filemap_fault+0x11a1/0x1ad0 [ 2177.333019] ext4_filemap_fault+0x84/0xb0 [ 2177.337199] __do_fault+0xfa/0x380 [ 2177.340846] __handle_mm_fault+0x2497/0x4620 [ 2177.345281] ? vm_insert_page+0x7c0/0x7c0 [ 2177.349442] ? mark_held_locks+0xa6/0xf0 [ 2177.353538] handle_mm_fault+0x455/0x9c0 [ 2177.357611] __do_page_fault+0x549/0xad0 [ 2177.361689] ? spurious_fault+0x640/0x640 [ 2177.365842] ? do_page_fault+0x60/0x500 [ 2177.369840] ? page_fault+0x2f/0x50 [ 2177.373559] page_fault+0x45/0x50 [ 2177.377019] RIP: f72780:0x1fafd258bca [ 2177.380815] RSP: 03e3:000000c000433e40 EFLAGS: 00000003 [ 2178.022078] Mem-Info: [ 2178.030107] active_anon:16999 inactive_anon:53477 isolated_anon:0 [ 2178.030107] active_file:12 inactive_file:12 isolated_file:2 [ 2178.030107] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2178.030107] slab_reclaimable:12330 slab_unreclaimable:125425 [ 2178.030107] mapped:52700 shmem:54035 pagetables:3001 bounce:0 [ 2178.030107] free:25356 free_pcp:8 free_cma:0 [ 2178.067554] Node 0 active_anon:62620kB inactive_anon:180592kB active_file:36kB inactive_file:36kB unevictable:0kB isolated(anon):0kB isolated(file):8kB mapped:162464kB dirty:0kB writeback:0kB shmem:182480kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2178.100915] Node 1 active_anon:5376kB inactive_anon:33316kB active_file:12kB inactive_file:12kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:48336kB dirty:0kB writeback:0kB shmem:33660kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2178.132289] Node 0 DMA free:11064kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2178.180340] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2178.185869] Node 0 DMA32 free:36124kB min:36200kB low:45248kB high:54296kB active_anon:62620kB inactive_anon:180592kB active_file:36kB inactive_file:36kB unevictable:0kB writepending:0kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:8352kB pagetables:5584kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2178.221900] lowmem_reserve[]: 0 0 0 0 0 [ 2178.226210] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2178.252507] lowmem_reserve[]: 0 0 0 0 0 [ 2178.256580] Node 1 Normal free:53592kB min:53696kB low:67120kB high:80544kB active_anon:5376kB inactive_anon:33316kB active_file:12kB inactive_file:12kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:2272kB pagetables:6420kB bounce:0kB free_pcp:120kB local_pcp:120kB free_cma:0kB [ 2178.287642] lowmem_reserve[]: 0 0 0 0 0 [ 2178.305990] Node 0 DMA: 10*4kB (UME) 18*8kB (UM) 22*16kB (UM) 13*32kB (UME) 8*64kB (UME) 7*128kB (UME) 8*256kB (UME) 5*512kB (UE) 2*1024kB (UE) 1*2048kB (M) 0*4096kB = 11064kB [ 2178.323608] Node 0 DMA32: 761*4kB (UME) 63*8kB (ME) 31*16kB (UME) 997*32kB (UME) 5*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36268kB [ 2178.338222] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2178.350403] Node 1 Normal: 18*4kB (M) 6*8kB (M) 3*16kB (M) 4*32kB (M) 7*64kB (UM) 3*128kB (UM) 183*256kB (UM) 1*512kB (M) 1*1024kB (U) 2*2048kB (U) 0*4096kB = 53608kB [ 2178.366220] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2178.375428] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2178.386454] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2178.397066] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2178.405778] 54062 total pagecache pages [ 2178.414212] 0 pages in swap cache [ 2178.417691] Swap cache stats: add 0, delete 0, find 0/0 [ 2178.432000] Free swap = 0kB [ 2178.435044] Total swap = 0kB [ 2178.438108] 2097051 pages RAM [ 2178.441222] 0 pages HighMem/MovableOnly [ 2178.445510] 363848 pages reserved [ 2178.449340] 0 pages cma reserved [ 2178.452714] Out of memory (oom_kill_allocating_task): Kill process 20452 (syz-fuzzer) score 0 or sacrifice child [ 2178.463924] Killed process 27983 (syz-executor.1) total-vm:84924kB, anon-rss:64kB, file-rss:0kB, shmem-rss:0kB [ 2178.497987] oom_reaper: reaped process 27983 (syz-executor.1), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 2178.587322] syz-executor.5 invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 2178.767535] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 2178.819772] CPU: 1 PID: 28960 Comm: syz-executor.5 Not tainted 4.14.229-syzkaller #0 [ 2178.827708] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2178.837653] Call Trace: [ 2178.840277] dump_stack+0x1b2/0x281 [ 2178.843917] dump_header+0x178/0x82f [ 2178.847640] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2178.852754] ? ___ratelimit+0x2cd/0x530 [ 2178.856744] oom_kill_process.cold+0x10/0xa40 [ 2178.861264] out_of_memory+0xe3e/0x1190 [ 2178.865369] ? oom_killer_disable+0x1c0/0x1c0 [ 2178.869873] ? mutex_trylock+0x152/0x1a0 [ 2178.873947] __alloc_pages_nodemask+0x23e1/0x2720 [ 2178.879175] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2178.884401] alloc_pages_current+0x155/0x260 [ 2178.888839] filemap_fault+0x11a1/0x1ad0 [ 2178.893100] ext4_filemap_fault+0x84/0xb0 [ 2178.897891] __do_fault+0xfa/0x380 [ 2178.901541] __handle_mm_fault+0x2497/0x4620 [ 2178.906065] ? vm_insert_page+0x7c0/0x7c0 [ 2178.910329] ? hrtimer_nanosleep+0x1ff/0x4b0 [ 2178.914941] ? nanosleep_copyout+0x100/0x100 [ 2178.919496] ? mark_held_locks+0xa6/0xf0 [ 2178.923592] handle_mm_fault+0x455/0x9c0 [ 2178.927954] __do_page_fault+0x549/0xad0 [ 2178.932030] ? spurious_fault+0x640/0x640 [ 2178.936194] ? do_page_fault+0x60/0x500 [ 2178.940173] ? page_fault+0x2f/0x50 [ 2178.943891] page_fault+0x45/0x50 [ 2178.947346] RIP: 212beb:0x3 [ 2178.950459] RSP: 0006:00007ffc43c5c0ec EFLAGS: 00000000 [ 2179.972032] Mem-Info: [ 2180.037846] active_anon:16988 inactive_anon:53477 isolated_anon:0 [ 2180.037846] active_file:18 inactive_file:8 isolated_file:0 [ 2180.037846] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2180.037846] slab_reclaimable:12325 slab_unreclaimable:125417 [ 2180.037846] mapped:52700 shmem:54035 pagetables:2979 bounce:0 [ 2180.037846] free:25120 free_pcp:61 free_cma:0 [ 2180.381823] Node 0 active_anon:62576kB inactive_anon:180592kB active_file:44kB inactive_file:108kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:162464kB dirty:0kB writeback:0kB shmem:182480kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2180.639867] Node 1 active_anon:5376kB inactive_anon:33316kB active_file:12kB inactive_file:12kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:48336kB dirty:0kB writeback:0kB shmem:33660kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2180.908406] Node 0 DMA free:11064kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2181.151460] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2181.156547] Node 0 DMA32 free:36184kB min:36200kB low:45248kB high:54296kB active_anon:62532kB inactive_anon:180592kB active_file:80kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:8320kB pagetables:5404kB bounce:0kB free_pcp:120kB local_pcp:120kB free_cma:0kB [ 2181.464802] lowmem_reserve[]: 0 0 0 0 0 [ 2181.501450] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2181.747425] lowmem_reserve[]: 0 0 0 0 0 [ 2181.782450] Node 1 Normal free:53092kB min:53696kB low:67120kB high:80544kB active_anon:5376kB inactive_anon:33316kB active_file:36kB inactive_file:0kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:2272kB pagetables:6420kB bounce:0kB free_pcp:120kB local_pcp:120kB free_cma:0kB [ 2182.054966] lowmem_reserve[]: 0 0 0 0 0 [ 2182.085601] Node 0 DMA: 10*4kB (UME) 18*8kB (UM) 22*16kB (UM) 13*32kB (UME) 8*64kB (UME) 7*128kB (UME) 8*256kB (UME) 5*512kB (UE) 2*1024kB (UE) 1*2048kB (M) 0*4096kB = 11064kB [ 2182.253454] Node 0 DMA32: 800*4kB (ME) 68*8kB (UME) 14*16kB (UME) 997*32kB (UME) 5*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36192kB [ 2182.382595] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2182.475258] Node 1 Normal: 19*4kB (UM) 7*8kB (UM) 4*16kB (UM) 5*32kB (UM) 6*64kB (UM) 3*128kB (UM) 181*256kB (UM) 1*512kB (M) 1*1024kB (U) 2*2048kB (U) 0*4096kB = 53092kB [ 2182.618847] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2182.627724] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2182.779562] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2182.867130] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2182.947679] 54061 total pagecache pages [ 2182.982306] 0 pages in swap cache [ 2182.985805] Swap cache stats: add 0, delete 0, find 0/0 [ 2183.073030] Free swap = 0kB [ 2183.076110] Total swap = 0kB [ 2183.119222] 2097051 pages RAM [ 2183.122367] 0 pages HighMem/MovableOnly [ 2183.126343] 363848 pages reserved [ 2183.209408] 0 pages cma reserved [ 2183.213444] Out of memory (oom_kill_allocating_task): Kill process 28960 (syz-executor.5) score 0 or sacrifice child [ 2183.360796] Killed process 29219 (syz-executor.5) total-vm:93516kB, anon-rss:156kB, file-rss:34820kB, shmem-rss:0kB [ 2183.475141] oom_reaper: reaped process 29219 (syz-executor.5), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 2183.574245] oom_reaper: reaped process 29250 (syz-executor.1), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 2183.650041] syz-executor.3 invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 2183.715514] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 2183.763385] CPU: 1 PID: 16116 Comm: syz-executor.3 Not tainted 4.14.229-syzkaller #0 [ 2183.771304] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2183.775157] syz-executor.1: [ 2183.781046] Call Trace: [ 2183.781070] dump_stack+0x1b2/0x281 [ 2183.781082] dump_header+0x178/0x82f [ 2183.781092] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2183.781101] ? ___ratelimit+0x2cd/0x530 [ 2183.781109] oom_kill_process.cold+0x10/0xa40 [ 2183.781126] out_of_memory+0xe3e/0x1190 [ 2183.781139] ? oom_killer_disable+0x1c0/0x1c0 [ 2183.781151] ? mutex_trylock+0x152/0x1a0 [ 2183.784172] page allocation failure: order:0 [ 2183.786760] __alloc_pages_nodemask+0x23e1/0x2720 [ 2183.791572] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 2183.794111] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2183.799251] (null) [ 2183.803196] alloc_pages_current+0x155/0x260 [ 2183.807680] syz-executor.1 cpuset= [ 2183.811664] filemap_fault+0x11a1/0x1ad0 [ 2183.811683] ext4_filemap_fault+0x84/0xb0 [ 2183.811692] __do_fault+0xfa/0x380 [ 2183.811701] __handle_mm_fault+0x2497/0x4620 [ 2183.811712] ? vm_insert_page+0x7c0/0x7c0 [ 2183.816222] / [ 2183.820275] ? hrtimer_nanosleep+0x1ff/0x4b0 [ 2183.824745] mems_allowed=0-1 [ 2183.829533] ? nanosleep_copyout+0x100/0x100 [ 2183.829548] ? mark_held_locks+0xa6/0xf0 [ 2183.829560] handle_mm_fault+0x455/0x9c0 [ 2183.829573] __do_page_fault+0x549/0xad0 [ 2183.897670] ? spurious_fault+0x640/0x640 [ 2183.901835] ? do_page_fault+0x60/0x500 [ 2183.906518] ? page_fault+0x2f/0x50 [ 2183.910156] page_fault+0x45/0x50 [ 2183.913623] RIP: 212c78:0x3 [ 2183.916560] RSP: 0323:00007ffe54ba04ec EFLAGS: 00000006 [ 2183.916593] CPU: 0 PID: 29225 Comm: syz-executor.1 Not tainted 4.14.229-syzkaller #0 [ 2183.929863] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2183.931397] Mem-Info: [ 2183.939226] Call Trace: [ 2183.939253] dump_stack+0x1b2/0x281 [ 2183.939266] warn_alloc.cold+0x96/0x1cc [ 2183.939278] ? zone_watermark_ok_safe+0x220/0x220 [ 2183.939288] ? usleep_range+0x130/0x130 [ 2183.939297] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 2183.939309] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 2183.939319] ? run_timer_softirq+0x5a0/0x5a0 [ 2183.939336] __alloc_pages_nodemask+0x2127/0x2720 [ 2183.939353] ? lock_acquire+0x170/0x3f0 [ 2183.939368] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2183.947926] syz-executor.1: [ 2183.948027] ? ion_page_pool_alloc+0x9e/0x1b0 [ 2183.951989] page allocation failure: order:0 [ 2183.956840] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2183.969855] active_anon:16927 inactive_anon:53477 isolated_anon:0 [ 2183.969855] active_file:16 inactive_file:0 isolated_file:0 [ 2183.969855] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2183.969855] slab_reclaimable:12287 slab_unreclaimable:125347 [ 2183.969855] mapped:44000 shmem:54035 pagetables:2956 bounce:0 [ 2183.969855] free:13963 free_pcp:64 free_cma:0 [ 2183.970926] alloc_pages_current+0x155/0x260 [ 2183.975302] Node 0 active_anon:62332kB inactive_anon:180592kB active_file:40kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:127664kB dirty:0kB writeback:0kB shmem:182480kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2183.980147] ion_page_pool_alloc+0x118/0x1b0 [ 2183.980158] ion_system_heap_allocate+0x133/0x8c0 [ 2183.980167] ? ion_alloc+0x187/0x810 [ 2183.980177] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2183.980186] ? ion_system_contig_heap_create+0x130/0x130 [ 2183.980195] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2183.980207] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2183.980216] ion_alloc+0x204/0x810 [ 2183.980230] ? ion_dma_buf_release+0x40/0x40 [ 2183.980241] ? __might_fault+0x177/0x1b0 [ 2183.994757] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 2183.996601] ion_ioctl+0xea/0x1f0 [ 2184.001095] Node 1 active_anon:5376kB inactive_anon:33316kB active_file:24kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:48336kB dirty:0kB writeback:0kB shmem:33660kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2184.006477] ? ion_query_heaps+0x360/0x360 [ 2184.050484] (null) [ 2184.071803] ? ion_query_heaps+0x360/0x360 [ 2184.071816] do_vfs_ioctl+0x75a/0xff0 [ 2184.071828] ? ioctl_preallocate+0x1a0/0x1a0 [ 2184.071837] ? lock_downgrade+0x740/0x740 [ 2184.071850] ? __fget+0x225/0x360 [ 2184.071858] ? do_vfs_ioctl+0xff0/0xff0 [ 2184.071869] ? security_file_ioctl+0x83/0xb0 [ 2184.071877] SyS_ioctl+0x7f/0xb0 [ 2184.071884] ? do_vfs_ioctl+0xff0/0xff0 [ 2184.071895] do_syscall_64+0x1d5/0x640 [ 2184.071909] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2184.071917] RIP: 0033:0x466459 [ 2184.071922] RSP: 002b:00007fdc8e5a7188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2184.071931] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 2184.071936] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2184.071941] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2184.071946] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2184.071951] R13: 00007ffd2c2faa2f R14: 00007fdc8e5a7300 R15: 0000000000022000 [ 2184.085272] syz-executor.5: [ 2184.095157] Node 0 [ 2184.096110] syz-executor.5: [ 2184.102781] syz-executor.1 cpuset= [ 2184.130098] page allocation failure: order:0 [ 2184.160418] DMA free:10964kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2184.160425] lowmem_reserve[]: [ 2184.182561] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 2184.200117] page allocation failure: order:0 [ 2184.215818] (null) [ 2184.236590] 0 [ 2184.250961] syz-executor.5 cpuset= [ 2184.286554] 2717 [ 2184.307549] / mems_allowed=0-1 [ 2184.335224] CPU: 0 PID: 29219 Comm: syz-executor.5 Not tainted 4.14.229-syzkaller #0 [ 2184.343113] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2184.347420] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 2184.352481] Call Trace: [ 2184.352506] dump_stack+0x1b2/0x281 [ 2184.352518] warn_alloc.cold+0x96/0x1cc [ 2184.352530] ? zone_watermark_ok_safe+0x220/0x220 [ 2184.352540] ? usleep_range+0x130/0x130 [ 2184.352549] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 2184.352560] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 2184.352571] ? run_timer_softirq+0x5a0/0x5a0 [ 2184.352589] __alloc_pages_nodemask+0x2127/0x2720 [ 2184.352609] ? lock_acquire+0x170/0x3f0 [ 2184.402018] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2184.406890] ? ion_page_pool_alloc+0x9e/0x1b0 [ 2184.411412] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2184.415125] (null) [ 2184.416883] alloc_pages_current+0x155/0x260 [ 2184.423445] ion_page_pool_alloc+0x118/0x1b0 [ 2184.427871] ion_system_heap_allocate+0x133/0x8c0 [ 2184.432750] ? ion_alloc+0x187/0x810 [ 2184.436484] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2184.441946] ? ion_system_contig_heap_create+0x130/0x130 [ 2184.447413] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2184.452448] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2184.457307] ion_alloc+0x204/0x810 [ 2184.460923] ? ion_dma_buf_release+0x40/0x40 [ 2184.465351] ? __might_fault+0x177/0x1b0 [ 2184.466572] / [ 2184.469426] ion_ioctl+0xea/0x1f0 [ 2184.474602] ? ion_query_heaps+0x360/0x360 [ 2184.478858] ? ion_query_heaps+0x360/0x360 [ 2184.483118] do_vfs_ioctl+0x75a/0xff0 [ 2184.486957] ? ioctl_preallocate+0x1a0/0x1a0 [ 2184.491817] ? lock_downgrade+0x740/0x740 [ 2184.496061] ? __fget+0x225/0x360 [ 2184.497728] syz-executor.5 cpuset= [ 2184.499525] ? do_vfs_ioctl+0xff0/0xff0 [ 2184.499537] ? security_file_ioctl+0x83/0xb0 [ 2184.499546] SyS_ioctl+0x7f/0xb0 [ 2184.499556] ? do_vfs_ioctl+0xff0/0xff0 [ 2184.499567] do_syscall_64+0x1d5/0x640 [ 2184.499582] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2184.499590] RIP: 0033:0x466459 [ 2184.499596] RSP: 002b:00007fb589bc1188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2184.499606] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 2184.499612] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2184.499617] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2184.499623] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2184.499628] R13: 00007ffc43c5be2f R14: 00007fb589bc1300 R15: 0000000000022000 [ 2184.515388] Mem-Info: [ 2184.527045] mems_allowed=0-1 [ 2184.541918] active_anon:16910 inactive_anon:53477 isolated_anon:0 [ 2184.541918] active_file:13 inactive_file:13 isolated_file:0 [ 2184.541918] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2184.541918] slab_reclaimable:12286 slab_unreclaimable:125341 [ 2184.541918] mapped:43996 shmem:54035 pagetables:2956 bounce:0 [ 2184.541918] free:14080 free_pcp:64 free_cma:0 [ 2184.557277] 2718 [ 2184.586507] Node 0 active_anon:62268kB inactive_anon:180592kB active_file:40kB inactive_file:40kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:127648kB dirty:0kB writeback:0kB shmem:182480kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2184.620306] CPU: 1 PID: 29250 Comm: syz-executor.1 Not tainted 4.14.229-syzkaller #0 [ 2184.654087] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2184.663713] Call Trace: [ 2184.666331] dump_stack+0x1b2/0x281 [ 2184.670068] warn_alloc.cold+0x96/0x1cc [ 2184.672550] Node 1 active_anon:5372kB inactive_anon:33316kB active_file:12kB inactive_file:12kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:48336kB dirty:0kB writeback:0kB shmem:33660kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2184.674061] ? zone_watermark_ok_safe+0x220/0x220 [ 2184.701883] Node 0 [ 2184.706840] ? usleep_range+0x130/0x130 [ 2184.706863] DMA free:10964kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2184.706871] lowmem_reserve[]: [ 2184.709211] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 2184.709225] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 2184.709235] ? run_timer_softirq+0x5a0/0x5a0 [ 2184.709251] __alloc_pages_nodemask+0x2127/0x2720 [ 2184.709269] ? lock_acquire+0x170/0x3f0 [ 2184.709284] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2184.713371] 0 [ 2184.739027] ? ion_page_pool_alloc+0x9e/0x1b0 [ 2184.739044] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2184.739063] alloc_pages_current+0x155/0x260 [ 2184.739079] ion_page_pool_alloc+0x118/0x1b0 [ 2184.757850] 2717 [ 2184.763362] ion_system_heap_allocate+0x133/0x8c0 [ 2184.767339] 2718 [ 2184.772209] ? ion_alloc+0x187/0x810 [ 2184.772221] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2184.772230] ? ion_system_contig_heap_create+0x130/0x130 [ 2184.772240] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2184.772252] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2184.772263] ion_alloc+0x204/0x810 [ 2184.797867] 2718 [ 2184.799723] ? ion_dma_buf_release+0x40/0x40 [ 2184.801790] 2718 [ 2184.805506] ? __might_fault+0x177/0x1b0 [ 2184.821457] ion_ioctl+0xea/0x1f0 [ 2184.826403] Node 0 [ 2184.829963] ? ion_query_heaps+0x360/0x360 [ 2184.829978] ? _raw_spin_unlock+0x29/0x40 [ 2184.829986] ? ion_query_heaps+0x360/0x360 [ 2184.830002] do_vfs_ioctl+0x75a/0xff0 [ 2184.847877] DMA32 free:20436kB min:36200kB low:45248kB high:54296kB active_anon:62268kB inactive_anon:180592kB active_file:40kB inactive_file:40kB unevictable:0kB writepending:0kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:8320kB pagetables:5404kB bounce:0kB free_pcp:136kB local_pcp:676kB free_cma:0kB [ 2184.848405] ? ioctl_preallocate+0x1a0/0x1a0 [ 2184.852624] lowmem_reserve[]: [ 2184.856794] ? lock_downgrade+0x740/0x740 [ 2184.877859] 0 [ 2184.893342] ? __fget+0x225/0x360 [ 2184.893353] ? do_vfs_ioctl+0xff0/0xff0 [ 2184.893365] ? security_file_ioctl+0x83/0xb0 [ 2184.893383] SyS_ioctl+0x7f/0xb0 [ 2184.917847] 0 [ 2184.918815] ? do_vfs_ioctl+0xff0/0xff0 [ 2184.922162] 0 [ 2184.923980] do_syscall_64+0x1d5/0x640 [ 2184.933627] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2184.937854] 0 0 [ 2184.938819] RIP: 0033:0x466459 [ 2184.938828] RSP: 002b:00007fdc8e565188 EFLAGS: 00000246 [ 2184.944020] ORIG_RAX: 0000000000000010 [ 2184.944030] RAX: ffffffffffffffda RBX: 000000000056c0b0 RCX: 0000000000466459 [ 2184.957866] Node 0 [ 2184.960608] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2184.960631] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2184.962836] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2184.962845] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c0b0 [ 2184.977856] lowmem_reserve[]: [ 2184.995092] R13: 00007ffd2c2faa2f R14: 00007fdc8e565300 R15: 0000000000022000 [ 2184.999901] / mems_allowed=0-1 [ 2185.024213] CPU: 1 PID: 29228 Comm: syz-executor.5 Not tainted 4.14.229-syzkaller #0 [ 2185.032102] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2185.042451] Call Trace: [ 2185.045048] dump_stack+0x1b2/0x281 [ 2185.048708] warn_alloc.cold+0x96/0x1cc [ 2185.052800] ? zone_watermark_ok_safe+0x220/0x220 [ 2185.057646] ? usleep_range+0x130/0x130 [ 2185.061627] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 2185.066736] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 2185.071760] ? run_timer_softirq+0x5a0/0x5a0 [ 2185.076192] __alloc_pages_nodemask+0x2127/0x2720 [ 2185.081148] ? lock_acquire+0x170/0x3f0 [ 2185.085145] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2185.089994] ? ion_page_pool_alloc+0x9e/0x1b0 [ 2185.094681] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2185.100356] alloc_pages_current+0x155/0x260 [ 2185.104877] ion_page_pool_alloc+0x118/0x1b0 [ 2185.109307] ion_system_heap_allocate+0x133/0x8c0 [ 2185.114174] ? ion_alloc+0x187/0x810 [ 2185.117913] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2185.123388] ? ion_system_contig_heap_create+0x130/0x130 [ 2185.128856] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2185.133904] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2185.138769] ion_alloc+0x204/0x810 [ 2185.142341] ? ion_dma_buf_release+0x40/0x40 [ 2185.146764] ? __might_fault+0x177/0x1b0 [ 2185.150842] ion_ioctl+0xea/0x1f0 [ 2185.154307] ? ion_query_heaps+0x360/0x360 [ 2185.158556] ? ion_query_heaps+0x360/0x360 [ 2185.162817] do_vfs_ioctl+0x75a/0xff0 [ 2185.166664] ? ioctl_preallocate+0x1a0/0x1a0 [ 2185.171088] ? lock_downgrade+0x740/0x740 [ 2185.175255] ? __fget+0x225/0x360 [ 2185.177848] 0 0 [ 2185.178727] ? do_vfs_ioctl+0xff0/0xff0 [ 2185.178741] ? security_file_ioctl+0x83/0xb0 [ 2185.180723] 0 [ 2185.184695] SyS_ioctl+0x7f/0xb0 [ 2185.194287] ? do_vfs_ioctl+0xff0/0xff0 [ 2185.198275] do_syscall_64+0x1d5/0x640 [ 2185.202205] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2185.207423] RIP: 0033:0x466459 [ 2185.210616] RSP: 002b:00007fb589ba0188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2185.218332] RAX: ffffffffffffffda RBX: 000000000056c008 RCX: 0000000000466459 [ 2185.225608] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2185.233929] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2185.237569] 0 [ 2185.241201] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c008 [ 2185.241207] R13: 00007ffc43c5be2f R14: 00007fb589ba0300 R15: 0000000000022000 [ 2185.281409] 2718 2718 [ 2185.299021] Node 0 DMA32 free:35832kB min:36200kB low:45248kB high:54296kB active_anon:62268kB inactive_anon:180592kB active_file:160kB inactive_file:468kB unevictable:0kB writepending:4kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:8320kB pagetables:5404kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB [ 2185.333597] 0 [ 2185.335428] Node 1 Normal free:26888kB min:53696kB low:67120kB high:80544kB active_anon:5372kB inactive_anon:33316kB active_file:12kB inactive_file:12kB unevictable:0kB writepending:4kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:2272kB pagetables:6420kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2185.380595] syz-executor.5: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2185.420006] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 2185.425197] CPU: 0 PID: 29219 Comm: syz-executor.5 Not tainted 4.14.229-syzkaller #0 [ 2185.433083] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2185.442444] Call Trace: [ 2185.445046] dump_stack+0x1b2/0x281 [ 2185.448778] warn_alloc.cold+0x96/0x1cc [ 2185.452766] ? zone_watermark_ok_safe+0x220/0x220 [ 2185.457646] __alloc_pages_nodemask+0x2127/0x2720 [ 2185.462679] ? lock_acquire+0x170/0x3f0 [ 2185.466682] ? lock_acquire+0x170/0x3f0 [ 2185.471553] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2185.476517] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2185.476770] lowmem_reserve[]: [ 2185.481994] ? __mutex_unlock_slowpath+0x75/0x770 [ 2185.482010] alloc_pages_current+0x155/0x260 [ 2185.482024] ion_page_pool_alloc+0x118/0x1b0 [ 2185.482034] ion_system_heap_allocate+0x133/0x8c0 [ 2185.482045] ? _raw_spin_unlock+0x29/0x40 [ 2185.482053] ? _ion_heap_freelist_drain+0x6e/0x410 [ 2185.482061] ? ion_system_contig_heap_create+0x130/0x130 [ 2185.482072] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2185.482083] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2185.482094] ion_alloc+0x27a/0x810 [ 2185.482108] ? ion_dma_buf_release+0x40/0x40 [ 2185.482127] ? __might_fault+0x177/0x1b0 [ 2185.482137] ion_ioctl+0xea/0x1f0 [ 2185.482145] ? ion_query_heaps+0x360/0x360 [ 2185.482157] ? ion_query_heaps+0x360/0x360 [ 2185.482170] do_vfs_ioctl+0x75a/0xff0 [ 2185.507287] 0 [ 2185.511384] ? ioctl_preallocate+0x1a0/0x1a0 [ 2185.511395] ? lock_downgrade+0x740/0x740 [ 2185.511407] ? __fget+0x225/0x360 [ 2185.511415] ? do_vfs_ioctl+0xff0/0xff0 [ 2185.511427] ? security_file_ioctl+0x83/0xb0 [ 2185.511436] SyS_ioctl+0x7f/0xb0 [ 2185.511443] ? do_vfs_ioctl+0xff0/0xff0 [ 2185.511455] do_syscall_64+0x1d5/0x640 [ 2185.511471] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2185.511479] RIP: 0033:0x466459 [ 2185.511484] RSP: 002b:00007fb589bc1188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2185.511494] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 2185.511499] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2185.511508] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2185.537465] 0 [ 2185.539777] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2185.539783] R13: 00007ffc43c5be2f R14: 00007fb589bc1300 R15: 0000000000022000 [ 2185.548353] lowmem_reserve[]: [ 2185.577303] 0 [ 2185.586054] 0 [ 2185.617377] 0 [ 2185.627422] 0 [ 2185.656923] 0 [ 2185.666304] 0 [ 2185.676643] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2185.677624] 0 [ 2185.715882] warn_alloc_show_mem: 1 callbacks suppressed [ 2185.715887] Mem-Info: [ 2185.724564] lowmem_reserve[]: 0 0 0 0 0 [ 2185.729871] active_anon:16910 inactive_anon:53477 isolated_anon:0 [ 2185.729871] active_file:22 inactive_file:0 isolated_file:0 [ 2185.729871] unevictable:0 dirty:2 writeback:0 unstable:0 [ 2185.729871] slab_reclaimable:12260 slab_unreclaimable:125317 [ 2185.729871] mapped:43998 shmem:54035 pagetables:2956 bounce:0 [ 2185.729871] free:18395 free_pcp:72 free_cma:0 [ 2185.746702] Node 1 [ 2185.777230] 0 [ 2185.783715] Normal free:26888kB min:53696kB low:67120kB high:80544kB active_anon:5372kB inactive_anon:33316kB active_file:12kB inactive_file:12kB unevictable:0kB writepending:4kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:2272kB pagetables:6420kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2185.784939] Node 0 [ 2185.827496] Node 0 active_anon:62268kB inactive_anon:180592kB active_file:76kB inactive_file:72kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:127656kB dirty:4kB writeback:0kB shmem:182480kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2185.833720] lowmem_reserve[]: [ 2185.871269] DMA: 9*4kB (ME) 6*8kB (UM) 22*16kB (UM) 13*32kB (UME) 8*64kB (UME) 7*128kB (UME) 8*256kB (UME) 5*512kB (UE) 2*1024kB (UE) 1*2048kB (M) 0*4096kB = 10964kB [ 2185.875641] 0 [ 2185.900709] Node 0 DMA32: 747*4kB (ME) 49*8kB (ME) 1038*16kB (UE) 498*32kB (UE) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 35924kB [ 2185.930996] Node 1 active_anon:5372kB inactive_anon:33316kB active_file:12kB inactive_file:612kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:48436kB dirty:4kB writeback:0kB shmem:33660kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2185.985300] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2186.005719] Node 1 Normal: 2*4kB (UM) 0*8kB 1*16kB (U) 0*32kB 0*64kB 1*128kB (M) 0*256kB 1*512kB (U) 2*1024kB (UM) 8*2048kB (U) 15*4096kB (U) = 80536kB [ 2186.012201] 0 [ 2186.026363] Node 0 DMA free:10964kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2186.047190] 0 0 0 [ 2186.077632] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2186.078532] Node 0 [ 2186.117544] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2186.154388] DMA: 9*4kB (ME) 6*8kB (UM) 22*16kB (UM) 13*32kB (UME) 8*64kB (UME) 7*128kB (UME) 8*256kB (UME) 5*512kB (UE) 2*1024kB (UE) 1*2048kB (M) 0*4096kB = 10964kB [ 2186.157876] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2186.179248] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2186.184419] Node 0 DMA32 free:36192kB min:36200kB low:45248kB high:54296kB active_anon:62180kB inactive_anon:180592kB active_file:84kB inactive_file:516kB unevictable:0kB writepending:0kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:8320kB pagetables:5404kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2186.230897] Node 0 DMA32: 790*4kB (UME) 50*8kB (UME) 662*16kB (UE) 635*32kB (UE) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 34472kB [ 2186.245146] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2186.246353] Node 0 [ 2186.254826] 54317 total pagecache pages [ 2186.261108] 0 pages in swap cache [ 2186.264566] Swap cache stats: add 0, delete 0, find 0/0 [ 2186.270136] Free swap = 0kB [ 2186.273156] Total swap = 0kB [ 2186.274028] Normal: [ 2186.276173] 2097051 pages RAM [ 2186.276177] 0 pages HighMem/MovableOnly [ 2186.276180] 363848 pages reserved [ 2186.276183] 0 pages cma reserved [ 2186.307445] lowmem_reserve[]: 0 0 0 0 0 [ 2186.319483] 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2186.325429] syz-executor.1: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2186.367909] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2186.404728] syz-executor.1: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2186.421597] syz-executor.5: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2186.429563] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 2186.433721] Node 1 Normal: 199*4kB (UM) 155*8kB (UM) 126*16kB (UM) 224*32kB (UM) 71*64kB (UM) 44*128kB (UM) 9*256kB (UM) 2*512kB (M) 0*1024kB 1*2048kB (M) 0*4096kB [ 2186.470181] CPU: 0 PID: 29225 Comm: syz-executor.1 Not tainted 4.14.229-syzkaller #0 [ 2186.485564] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2186.485569] Call Trace: [ 2186.485594] dump_stack+0x1b2/0x281 [ 2186.485607] warn_alloc.cold+0x96/0x1cc [ 2186.485618] ? zone_watermark_ok_safe+0x220/0x220 [ 2186.485639] __alloc_pages_nodemask+0x2127/0x2720 [ 2186.485650] ? lock_acquire+0x170/0x3f0 [ 2186.485664] ? lock_acquire+0x170/0x3f0 [ 2186.485679] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2186.485704] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2186.512467] lowmem_reserve[]: [ 2186.513973] ? __mutex_unlock_slowpath+0x75/0x770 [ 2186.532102] 0 [ 2186.532183] alloc_pages_current+0x155/0x260 [ 2186.537032] 0 [ 2186.542486] ion_page_pool_alloc+0x118/0x1b0 [ 2186.542497] ion_system_heap_allocate+0x133/0x8c0 [ 2186.542509] ? _raw_spin_unlock+0x29/0x40 [ 2186.542517] ? _ion_heap_freelist_drain+0x6e/0x410 [ 2186.542526] ? ion_system_contig_heap_create+0x130/0x130 [ 2186.542536] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2186.542547] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2186.542557] ion_alloc+0x27a/0x810 [ 2186.542571] ? ion_dma_buf_release+0x40/0x40 [ 2186.542583] ? __might_fault+0x177/0x1b0 [ 2186.542595] ion_ioctl+0xea/0x1f0 [ 2186.542604] ? ion_query_heaps+0x360/0x360 [ 2186.542616] ? ion_query_heaps+0x360/0x360 [ 2186.558689] = 26772kB [ 2186.562937] do_vfs_ioctl+0x75a/0xff0 [ 2186.567783] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2186.580514] 0 [ 2186.582274] ? ioctl_preallocate+0x1a0/0x1a0 [ 2186.587268] 0 [ 2186.592110] ? lock_downgrade+0x740/0x740 [ 2186.592125] ? __fget+0x225/0x360 [ 2186.592134] ? do_vfs_ioctl+0xff0/0xff0 [ 2186.592146] ? security_file_ioctl+0x83/0xb0 [ 2186.592155] SyS_ioctl+0x7f/0xb0 [ 2186.592164] ? do_vfs_ioctl+0xff0/0xff0 [ 2186.592174] do_syscall_64+0x1d5/0x640 [ 2186.592189] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2186.592197] RIP: 0033:0x466459 [ 2186.592202] RSP: 002b:00007fdc8e5a7188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2186.592213] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 2186.592218] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2186.592222] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2186.592227] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2186.592233] R13: 00007ffd2c2faa2f R14: 00007fdc8e5a7300 R15: 0000000000022000 [ 2186.603165] syz-executor.1 cpuset= [ 2186.627398] syz-executor.5 cpuset= [ 2186.645477] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2186.652210] / [ 2186.668515] 0 [ 2186.677685] / [ 2186.695884] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2186.710295] mems_allowed=0-1 [ 2186.729302] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2186.739942] mems_allowed=0-1 [ 2186.765946] CPU: 0 PID: 29250 Comm: syz-executor.1 Not tainted 4.14.229-syzkaller #0 [ 2186.765954] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2186.765965] Call Trace: [ 2186.782989] 54092 total pagecache pages [ 2186.787377] dump_stack+0x1b2/0x281 [ 2186.796688] Node 1 Normal free:26548kB min:53696kB low:67120kB high:80544kB active_anon:5364kB inactive_anon:33316kB active_file:40kB inactive_file:4kB unevictable:0kB writepending:192kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:2272kB pagetables:6420kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2186.797670] warn_alloc.cold+0x96/0x1cc [ 2186.797686] ? zone_watermark_ok_safe+0x220/0x220 [ 2186.836134] __alloc_pages_nodemask+0x2127/0x2720 [ 2186.840741] 0 pages in swap cache [ 2186.841096] ? lock_acquire+0x170/0x3f0 [ 2186.844535] Swap cache stats: add 0, delete 0, find 0/0 [ 2186.848534] ? lock_acquire+0x170/0x3f0 [ 2186.848551] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2186.848568] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2186.848580] ? __mutex_unlock_slowpath+0x75/0x770 [ 2186.848593] alloc_pages_current+0x155/0x260 [ 2186.848607] ion_page_pool_alloc+0x118/0x1b0 [ 2186.848617] ion_system_heap_allocate+0x133/0x8c0 [ 2186.848629] ? _raw_spin_unlock+0x29/0x40 [ 2186.848638] ? _ion_heap_freelist_drain+0x6e/0x410 [ 2186.848647] ? ion_system_contig_heap_create+0x130/0x130 [ 2186.848661] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2186.866131] Free swap = 0kB [ 2186.868464] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2186.868477] ion_alloc+0x27a/0x810 [ 2186.868491] ? ion_dma_buf_release+0x40/0x40 [ 2186.868502] ? __might_fault+0x177/0x1b0 [ 2186.868513] ion_ioctl+0xea/0x1f0 [ 2186.868521] ? ion_query_heaps+0x360/0x360 [ 2186.868534] ? _raw_spin_unlock+0x29/0x40 [ 2186.868543] ? ion_query_heaps+0x360/0x360 [ 2186.868555] do_vfs_ioctl+0x75a/0xff0 [ 2186.875873] Total swap = 0kB [ 2186.877845] ? ioctl_preallocate+0x1a0/0x1a0 [ 2186.877855] ? lock_downgrade+0x740/0x740 [ 2186.877867] ? __fget+0x225/0x360 [ 2186.877876] ? do_vfs_ioctl+0xff0/0xff0 [ 2186.877887] ? security_file_ioctl+0x83/0xb0 [ 2186.877897] SyS_ioctl+0x7f/0xb0 [ 2186.877904] ? do_vfs_ioctl+0xff0/0xff0 [ 2186.877916] do_syscall_64+0x1d5/0x640 [ 2186.877932] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2186.877940] RIP: 0033:0x466459 [ 2186.877945] RSP: 002b:00007fdc8e565188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2186.877955] RAX: ffffffffffffffda RBX: 000000000056c0b0 RCX: 0000000000466459 [ 2186.877964] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2186.893903] 2097051 pages RAM [ 2186.898193] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2186.898200] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c0b0 [ 2186.898205] R13: 00007ffd2c2faa2f R14: 00007fdc8e565300 R15: 0000000000022000 [ 2186.907719] CPU: 0 PID: 29228 Comm: syz-executor.5 Not tainted 4.14.229-syzkaller #0 [ 2186.921726] 0 pages HighMem/MovableOnly [ 2186.924600] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2186.937129] lowmem_reserve[]: [ 2186.940453] Call Trace: [ 2186.940476] dump_stack+0x1b2/0x281 [ 2186.940488] warn_alloc.cold+0x96/0x1cc [ 2186.940500] ? zone_watermark_ok_safe+0x220/0x220 [ 2186.940520] __alloc_pages_nodemask+0x2127/0x2720 [ 2186.940532] ? lock_acquire+0x170/0x3f0 [ 2186.940544] ? lock_acquire+0x170/0x3f0 [ 2186.940558] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2186.940576] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2186.940588] ? __mutex_unlock_slowpath+0x75/0x770 [ 2186.957285] 0 [ 2186.960747] alloc_pages_current+0x155/0x260 [ 2186.960828] ion_page_pool_alloc+0x118/0x1b0 [ 2186.960855] ion_system_heap_allocate+0x133/0x8c0 [ 2186.960870] ? _raw_spin_unlock+0x29/0x40 [ 2186.960878] ? _ion_heap_freelist_drain+0x6e/0x410 [ 2186.960886] ? ion_system_contig_heap_create+0x130/0x130 [ 2186.960897] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2186.960911] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2186.960922] ion_alloc+0x27a/0x810 [ 2186.964427] 0 [ 2186.968563] ? ion_dma_buf_release+0x40/0x40 [ 2186.968576] ? __might_fault+0x177/0x1b0 [ 2186.968587] ion_ioctl+0xea/0x1f0 [ 2186.968594] ? ion_query_heaps+0x360/0x360 [ 2186.968605] ? ion_query_heaps+0x360/0x360 [ 2186.968615] do_vfs_ioctl+0x75a/0xff0 [ 2186.968626] ? ioctl_preallocate+0x1a0/0x1a0 [ 2186.968636] ? lock_downgrade+0x740/0x740 [ 2186.968648] ? __fget+0x225/0x360 [ 2186.968656] ? do_vfs_ioctl+0xff0/0xff0 [ 2186.968670] ? security_file_ioctl+0x83/0xb0 [ 2186.968687] SyS_ioctl+0x7f/0xb0 [ 2186.968695] ? do_vfs_ioctl+0xff0/0xff0 [ 2186.968712] do_syscall_64+0x1d5/0x640 [ 2186.984024] 363848 pages reserved [ 2186.984338] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2186.992628] 0 pages cma reserved [ 2186.992720] RIP: 0033:0x466459 [ 2187.013090] 0 [ 2187.015056] RSP: 002b:00007fb589ba0188 EFLAGS: 00000246 [ 2187.024745] Out of memory (oom_kill_allocating_task): Kill process 16116 (syz-executor.3) score 0 or sacrifice child [ 2187.025506] ORIG_RAX: 0000000000000010 [ 2187.045631] 0 [ 2187.048095] RAX: ffffffffffffffda RBX: 000000000056c008 RCX: 0000000000466459 [ 2187.048101] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2187.048106] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2187.048111] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c008 [ 2187.048116] R13: 00007ffc43c5be2f R14: 00007fb589ba0300 R15: 0000000000022000 [ 2187.057047] warn_alloc_show_mem: 2 callbacks suppressed [ 2187.057052] Mem-Info: [ 2187.075452] Killed process 29242 (syz-executor.3) total-vm:93252kB, anon-rss:152kB, file-rss:34820kB, shmem-rss:0kB [ 2187.112131] active_anon:16900 inactive_anon:53477 isolated_anon:0 [ 2187.112131] active_file:13 inactive_file:13 isolated_file:0 [ 2187.112131] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2187.112131] slab_reclaimable:12248 slab_unreclaimable:124912 [ 2187.112131] mapped:43996 shmem:54035 pagetables:2956 bounce:0 [ 2187.112131] free:13949 free_pcp:30 free_cma:0 [ 2187.121317] 0 [ 2187.146785] Node 0 active_anon:62180kB inactive_anon:180592kB active_file:40kB inactive_file:40kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:127648kB dirty:0kB writeback:0kB shmem:182480kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2187.164785] oom_reaper: reaped process 29242 (syz-executor.3), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 2187.194003] Node 1 active_anon:5420kB inactive_anon:33316kB active_file:12kB inactive_file:12kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:48336kB dirty:0kB writeback:0kB shmem:33660kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2187.225514] Node 0 [ 2187.233492] Node 0 [ 2187.263136] DMA free:10964kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2187.277004] DMA: [ 2187.286167] syz-fuzzer invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask= [ 2187.299025] 9*4kB [ 2187.306231] syz-executor.3: [ 2187.366420] (null) [ 2187.396256] lowmem_reserve[]: [ 2187.436318] (ME) [ 2187.473037] , order=0, oom_score_adj=0 [ 2187.485610] page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2187.485843] 6*8kB [ 2187.496235] syz-executor.1: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2187.516625] syz-fuzzer cpuset= [ 2187.527618] 0 2717 2718 2718 2718 [ 2187.535575] Node 0 DMA32 free:19568kB min:36200kB low:45248kB high:54296kB active_anon:62180kB inactive_anon:180592kB active_file:40kB inactive_file:40kB unevictable:0kB writepending:0kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:8288kB pagetables:5404kB bounce:0kB free_pcp:92kB local_pcp:0kB free_cma:0kB [ 2187.545136] / [ 2187.569702] (UM) 22*16kB (UM) 13*32kB (UME) 8*64kB (UME) 7*128kB (UME) 8*256kB (UME) 5*512kB (UE) 2*1024kB (UE) 1*2048kB (M) 0*4096kB = 10964kB [ 2187.587050] mems_allowed=0-1 [ 2187.587832] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 2187.595302] CPU: 0 PID: 29250 Comm: syz-executor.1 Not tainted 4.14.229-syzkaller #0 [ 2187.599914] Node 0 [ 2187.603225] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2187.603233] Call Trace: [ 2187.605484] DMA32: [ 2187.614852] dump_stack+0x1b2/0x281 [ 2187.614866] warn_alloc.cold+0x96/0x1cc [ 2187.614878] ? zone_watermark_ok_safe+0x220/0x220 [ 2187.614888] ? usleep_range+0x130/0x130 [ 2187.614897] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 2187.614908] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 2187.614917] ? run_timer_softirq+0x5a0/0x5a0 [ 2187.614935] __alloc_pages_nodemask+0x2127/0x2720 [ 2187.614950] ? lock_acquire+0x170/0x3f0 [ 2187.614969] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2187.665155] ? ion_page_pool_alloc+0x9e/0x1b0 [ 2187.666535] 822*4kB [ 2187.669669] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2187.669689] alloc_pages_current+0x155/0x260 [ 2187.669703] ion_page_pool_alloc+0x118/0x1b0 [ 2187.669712] ion_system_heap_allocate+0x133/0x8c0 [ 2187.669723] ? _raw_spin_unlock+0x29/0x40 [ 2187.669732] ? _ion_heap_freelist_drain+0x6e/0x410 [ 2187.669740] ? ion_system_contig_heap_create+0x130/0x130 [ 2187.669750] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2187.669761] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2187.669770] ion_alloc+0x27a/0x810 [ 2187.669783] ? ion_dma_buf_release+0x40/0x40 [ 2187.669795] ? __might_fault+0x177/0x1b0 [ 2187.669806] ion_ioctl+0xea/0x1f0 [ 2187.672360] (UME) [ 2187.677602] ? ion_query_heaps+0x360/0x360 [ 2187.712793] 51*8kB [ 2187.716444] ? _raw_spin_unlock+0x29/0x40 [ 2187.742214] (UME) 7*16kB [ 2187.744625] ? ion_query_heaps+0x360/0x360 [ 2187.744637] do_vfs_ioctl+0x75a/0xff0 [ 2187.747384] (ME) [ 2187.751618] ? ioctl_preallocate+0x1a0/0x1a0 [ 2187.751627] ? lock_downgrade+0x740/0x740 [ 2187.751639] ? __fget+0x225/0x360 [ 2187.751647] ? do_vfs_ioctl+0xff0/0xff0 [ 2187.751658] ? security_file_ioctl+0x83/0xb0 [ 2187.751668] SyS_ioctl+0x7f/0xb0 [ 2187.751675] ? do_vfs_ioctl+0xff0/0xff0 [ 2187.751685] do_syscall_64+0x1d5/0x640 [ 2187.751700] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2187.751709] RIP: 0033:0x466459 [ 2187.751714] RSP: 002b:00007fdc8e565188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2187.751724] RAX: ffffffffffffffda RBX: 000000000056c0b0 RCX: 0000000000466459 [ 2187.751733] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2187.765077] syz-executor.3 cpuset= [ 2187.766099] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2187.786440] / [ 2187.789221] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c0b0 [ 2187.795176] 453*32kB [ 2187.797669] R13: 00007ffd2c2faa2f R14: 00007fdc8e565300 R15: 0000000000022000 [ 2187.820037] mems_allowed=0-1 [ 2187.836463] lowmem_reserve[]: [ 2187.853011] (UME) 23*64kB (U) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 19776kB [ 2187.859077] CPU: 0 PID: 20454 Comm: syz-fuzzer Not tainted 4.14.229-syzkaller #0 [ 2187.867333] Node 0 [ 2187.872445] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2187.872449] Call Trace: [ 2187.872469] dump_stack+0x1b2/0x281 [ 2187.872481] dump_header+0x178/0x82f [ 2187.872491] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2187.872500] ? ___ratelimit+0x2cd/0x530 [ 2187.872509] oom_kill_process.cold+0x10/0xa40 [ 2187.872527] out_of_memory+0xe3e/0x1190 [ 2187.872540] ? oom_killer_disable+0x1c0/0x1c0 [ 2187.872551] ? mutex_trylock+0x152/0x1a0 [ 2187.906374] Normal: [ 2187.907539] __alloc_pages_nodemask+0x23e1/0x2720 [ 2187.911554] 0*4kB [ 2187.916023] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2187.934206] alloc_pages_current+0x155/0x260 [ 2187.938626] filemap_fault+0x11a1/0x1ad0 [ 2187.942711] ext4_filemap_fault+0x84/0xb0 [ 2187.944438] 0*8kB 0*16kB [ 2187.946869] __do_fault+0xfa/0x380 [ 2187.946880] __handle_mm_fault+0x2497/0x4620 [ 2187.952895] 0*32kB [ 2187.953166] ? vm_insert_page+0x7c0/0x7c0 [ 2187.957577] 0*64kB [ 2187.959825] ? mark_held_locks+0xa6/0xf0 [ 2187.959837] handle_mm_fault+0x455/0x9c0 [ 2187.959850] __do_page_fault+0x549/0xad0 [ 2187.959860] ? spurious_fault+0x640/0x640 [ 2187.959868] ? do_page_fault+0x60/0x500 [ 2187.959876] ? page_fault+0x2f/0x50 [ 2187.959882] page_fault+0x45/0x50 [ 2187.959889] RIP: 334a80:0x4 [ 2187.959893] RSP: 015f:000000c000783e40 EFLAGS: 00000003 [ 2187.968937] 0 [ 2187.981178] CPU: 1 PID: 29242 Comm: syz-executor.3 Not tainted 4.14.229-syzkaller #0 [ 2187.990559] 0 [ 2187.993739] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2187.996660] 0 [ 2188.002005] Call Trace: [ 2188.002028] dump_stack+0x1b2/0x281 [ 2188.002041] warn_alloc.cold+0x96/0x1cc [ 2188.002053] ? zone_watermark_ok_safe+0x220/0x220 [ 2188.002066] ? usleep_range+0x130/0x130 [ 2188.004271] 0 [ 2188.011783] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 2188.011797] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 2188.011806] ? run_timer_softirq+0x5a0/0x5a0 [ 2188.011831] __alloc_pages_nodemask+0x2127/0x2720 [ 2188.013615] 0 [ 2188.022977] ? lock_acquire+0x170/0x3f0 [ 2188.022993] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2188.023003] ? ion_page_pool_alloc+0x9e/0x1b0 [ 2188.023019] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2188.027430] alloc_pages_current+0x155/0x260 [ 2188.031072] Node 0 [ 2188.035020] ion_page_pool_alloc+0x118/0x1b0 [ 2188.039893] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2188.043806] ion_system_heap_allocate+0x133/0x8c0 [ 2188.045591] lowmem_reserve[]: [ 2188.050685] ? ion_alloc+0x187/0x810 [ 2188.050701] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2188.050710] ? ion_system_contig_heap_create+0x130/0x130 [ 2188.050719] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2188.050731] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2188.050742] ion_alloc+0x204/0x810 [ 2188.055774] 0 [ 2188.060203] ? ion_dma_buf_release+0x40/0x40 [ 2188.060215] ? __might_fault+0x177/0x1b0 [ 2188.060226] ion_ioctl+0xea/0x1f0 [ 2188.060238] ? ion_query_heaps+0x360/0x360 [ 2188.065098] 0 [ 2188.066907] ? ion_query_heaps+0x360/0x360 [ 2188.070914] Mem-Info: [ 2188.075779] do_vfs_ioctl+0x75a/0xff0 [ 2188.080311] 0 [ 2188.085707] ? ioctl_preallocate+0x1a0/0x1a0 [ 2188.090186] active_anon:16900 inactive_anon:53477 isolated_anon:0 [ 2188.090186] active_file:38 inactive_file:0 isolated_file:0 [ 2188.090186] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2188.090186] slab_reclaimable:12248 slab_unreclaimable:124912 [ 2188.090186] mapped:43996 shmem:54035 pagetables:2956 bounce:0 [ 2188.090186] free:20941 free_pcp:0 free_cma:0 [ 2188.092343] ? lock_downgrade+0x740/0x740 [ 2188.096746] Node 0 active_anon:62180kB inactive_anon:180592kB active_file:140kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:127648kB dirty:0kB writeback:0kB shmem:182480kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2188.121642] ? __fget+0x225/0x360 [ 2188.121653] ? do_vfs_ioctl+0xff0/0xff0 [ 2188.121664] ? security_file_ioctl+0x83/0xb0 [ 2188.121674] SyS_ioctl+0x7f/0xb0 [ 2188.121685] ? do_vfs_ioctl+0xff0/0xff0 [ 2188.126543] 0 [ 2188.129642] do_syscall_64+0x1d5/0x640 [ 2188.129657] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2188.129665] RIP: 0033:0x466459 [ 2188.129670] RSP: 002b:00007fb199b88188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2188.133373] 0 [ 2188.138808] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 2188.138813] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2188.138818] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2188.138827] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2188.138832] R13: 00007ffe54ba022f R14: 00007fb199b88300 R15: 0000000000022000 [ 2188.149893] 0*128kB [ 2188.174377] 0*256kB [ 2188.179906] Node 1 [ 2188.185968] 0*512kB [ 2188.195253] Normal free:53164kB min:53696kB low:67120kB high:80544kB active_anon:5420kB inactive_anon:33316kB active_file:12kB inactive_file:12kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:2272kB pagetables:6420kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2188.206294] 0*1024kB [ 2188.237036] Node 1 active_anon:5420kB inactive_anon:33316kB active_file:12kB inactive_file:12kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:48336kB dirty:0kB writeback:0kB shmem:33660kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2188.271594] 0*2048kB [ 2188.281190] lowmem_reserve[]: [ 2188.292793] 0*4096kB [ 2188.300612] Node 0 [ 2188.306831] = 0kB [ 2188.319655] 0 [ 2188.339477] Node 1 [ 2188.345158] DMA free:10964kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2188.347052] Normal: [ 2188.347722] lowmem_reserve[]: [ 2188.364749] 25*4kB [ 2188.382538] warn_alloc_show_mem: 2 callbacks suppressed [ 2188.382542] Mem-Info: [ 2188.472460] 0 0 0 0 [ 2188.474827] Node 0 DMA: 9*4kB (ME) 6*8kB (UM) 22*16kB (UM) 13*32kB (UME) 8*64kB (UME) 7*128kB (UME) 8*256kB (UME) 5*512kB (UE) 2*1024kB (UE) 1*2048kB (M) 0*4096kB = 10964kB [ 2188.475365] (UM) [ 2188.490567] 0 2717 2718 2718 2718 [ 2188.490587] Node 0 DMA32 free:19776kB min:36200kB low:45248kB high:54296kB active_anon:62088kB inactive_anon:180592kB active_file:40kB inactive_file:40kB unevictable:0kB writepending:0kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:8288kB pagetables:5404kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2188.490606] lowmem_reserve[]: 0 0 0 0 0 [ 2188.490624] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2188.490641] lowmem_reserve[]: 0 0 0 0 0 [ 2188.490661] Node 1 Normal free:75132kB min:53696kB low:67120kB high:80544kB active_anon:5420kB inactive_anon:33316kB active_file:12kB inactive_file:1412kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:2272kB pagetables:6420kB bounce:0kB free_pcp:296kB local_pcp:220kB free_cma:0kB [ 2188.490680] lowmem_reserve[]: 0 0 0 0 0 [ 2188.490710] Node 0 DMA: 9*4kB (ME) 6*8kB (UM) 22*16kB (UM) 13*32kB (UME) 8*64kB (UME) 7*128kB (UME) 8*256kB (UME) 5*512kB (UE) 2*1024kB (UE) [ 2188.578005] 11*8kB [ 2188.612200] Node 0 DMA32: 822*4kB (UME) 51*8kB (UME) 7*16kB (ME) 453*32kB (UME) 23*64kB (U) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 19776kB [ 2188.617006] (M) [ 2188.632879] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2188.645704] Node 1 Normal: 1*4kB (U) 1*8kB (U) 2*16kB (UM) 1*32kB (M) 14*64kB (U) 14*128kB (UM) 13*256kB (U) 12*512kB (U) 31*1024kB (U) 23*2048kB (UM) 10*4096kB (U) = 132044kB [ 2188.665686] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2188.667876] 9*16kB (UM) 213*32kB (UM) 95*64kB (UM) 46*128kB (UM) 9*256kB (UM) 2*512kB (M) 2*1024kB [ 2188.687958] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2188.697335] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2188.697343] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2188.697347] 54936 total pagecache pages [ 2188.697357] 0 pages in swap cache [ 2188.697362] Swap cache stats: add 0, delete 0, find 0/0 [ 2188.697365] Free swap = 0kB [ 2188.697368] Total swap = 0kB [ 2188.697375] 2097051 pages RAM [ 2188.697378] 0 pages HighMem/MovableOnly [ 2188.697381] 363848 pages reserved [ 2188.697384] 0 pages cma reserved [ 2188.697436] active_anon:16902 inactive_anon:53477 isolated_anon:0 [ 2188.697436] active_file:138 inactive_file:740 isolated_file:0 [ 2188.697436] unevictable:0 dirty:25 writeback:0 unstable:0 [ 2188.697436] slab_reclaimable:12248 slab_unreclaimable:124912 [ 2188.697436] mapped:44546 shmem:54035 pagetables:2956 bounce:0 [ 2188.697436] free:33618 free_pcp:271 free_cma:0 [ 2188.697454] Node 0 active_anon:62088kB inactive_anon:180592kB active_file:40kB inactive_file:40kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:127648kB dirty:0kB writeback:0kB shmem:182480kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2188.697469] Node 1 active_anon:5520kB inactive_anon:33316kB active_file:512kB inactive_file:2920kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:50536kB dirty:100kB writeback:0kB shmem:33660kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2188.697473] Node 0 DMA free:10964kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2188.777882] (U) [ 2188.837871] 1*2048kB [ 2188.928247] 2*2048kB [ 2188.928466] (M) [ 2188.930691] (UM) [ 2188.933101] 0*4096kB [ 2188.935057] 6*4096kB [ 2188.937105] = 10964kB [ 2188.943475] (U) = 53164kB [ 2188.949104] Node 0 DMA32: 888*4kB (UME) 197*8kB (UME) 1526*16kB (UME) 453*32kB (UME) 23*64kB (U) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 45512kB [ 2188.991785] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2188.992011] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2188.996870] Node 0 DMA32 free:55640kB min:36200kB low:45248kB high:54296kB active_anon:62088kB inactive_anon:180592kB active_file:108kB inactive_file:180kB unevictable:0kB writepending:0kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:8288kB pagetables:5404kB bounce:0kB free_pcp:1488kB local_pcp:712kB free_cma:0kB [ 2188.996893] lowmem_reserve[]: 0 0 0 0 0 [ 2188.996911] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2188.996929] lowmem_reserve[]: 0 0 0 0 0 [ 2188.996948] Node 1 Normal free:53240kB min:53696kB low:67120kB high:80544kB active_anon:5564kB inactive_anon:33316kB active_file:440kB inactive_file:588kB unevictable:0kB writepending:40kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:2272kB pagetables:6420kB bounce:0kB free_pcp:1144kB local_pcp:684kB free_cma:0kB [ 2188.996969] lowmem_reserve[]: 0 0 0 0 0 [ 2188.996987] Node 0 DMA: 9*4kB (ME) 6*8kB (UM) 22*16kB (UM) 13*32kB (UME) 8*64kB (UME) 7*128kB (UME) 8*256kB (UME) 5*512kB (UE) 2*1024kB (UE) 1*2048kB (M) 0*4096kB = 10964kB [ 2188.997069] Node 0 DMA32: 799*4kB (UME) 154*8kB (UME) 2196*16kB (UME) 453*32kB (UME) 23*64kB (U) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 55532kB [ 2188.997136] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2188.997188] Node 1 Normal: 84*4kB (UM) 49*8kB (M) 33*16kB (UM) 20*32kB (UM) 12*64kB (UM) 7*128kB (UM) 2*256kB (M) 1*512kB [ 2189.148783] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2189.215205] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2189.257890] Node 1 Normal: 57*4kB (UM) 29*8kB (UM) 19*16kB (M) 6*32kB (M) 32*64kB (UM) 6*128kB (UM) 5*256kB (UM) 1*512kB (U) 1*1024kB (U) 4*2048kB (UM) 10*4096kB (U) = 55740kB [ 2189.279656] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2189.288723] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2189.292785] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2189.348585] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2189.365054] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2189.375505] 54336 total pagecache pages [ 2189.387952] 0 pages in swap cache [ 2189.391443] Swap cache stats: add 0, delete 0, find 0/0 [ 2189.396986] Free swap = 0kB [ 2189.397882] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2189.407933] Total swap = 0kB [ 2189.417297] 2097051 pages RAM [ 2189.420509] 0 pages HighMem/MovableOnly [ 2189.424489] 363848 pages reserved [ 2189.428708] 0 pages cma reserved [ 2189.436448] 54086 total pagecache pages [ 2189.440641] 0 pages in swap cache [ 2189.444239] Swap cache stats: add 0, delete 0, find 0/0 [ 2189.451262] Free swap = 0kB [ 2189.454313] Total swap = 0kB [ 2189.456343] (M) 0*1024kB 4*2048kB (U) 10*4096kB (U) = 53736kB [ 2189.458863] 2097051 pages RAM [ 2189.466422] 0 pages HighMem/MovableOnly [ 2189.470519] 363848 pages reserved [ 2189.473962] 0 pages cma reserved [ 2189.474692] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2189.477331] Out of memory (oom_kill_allocating_task): Kill process 20454 (syz-fuzzer) score 0 or sacrifice child [ 2189.486857] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2189.497486] Killed process 28959 (syz-executor.5) total-vm:84924kB, anon-rss:60kB, file-rss:0kB, shmem-rss:0kB [ 2189.509547] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2189.527293] oom_reaper: reaped process 28959 (syz-executor.5), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 2189.539535] warn_alloc: 1 callbacks suppressed [ 2189.539540] syz-executor.3: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2189.555884] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2189.568751] 54086 total pagecache pages [ 2189.572760] 0 pages in swap cache [ 2189.577089] Swap cache stats: add 0, delete 0, find 0/0 [ 2189.585664] Free swap = 0kB [ 2189.585782] syz-executor.3 cpuset= [ 2189.590381] Total swap = 0kB [ 2189.591059] oom_reaper: reaped process 29227 (syz-executor.2), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 2189.593933] 2097051 pages RAM [ 2189.610474] / mems_allowed=0-1 [ 2189.613699] CPU: 1 PID: 29242 Comm: syz-executor.3 Not tainted 4.14.229-syzkaller #0 [ 2189.615558] 0 pages HighMem/MovableOnly [ 2189.621574] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2189.621579] Call Trace: [ 2189.621601] dump_stack+0x1b2/0x281 [ 2189.621614] warn_alloc.cold+0x96/0x1cc [ 2189.621631] ? zone_watermark_ok_safe+0x220/0x220 [ 2189.625597] 363848 pages reserved [ 2189.634968] __alloc_pages_nodemask+0x2127/0x2720 [ 2189.634981] ? lock_acquire+0x170/0x3f0 [ 2189.634997] ? lock_acquire+0x170/0x3f0 [ 2189.637578] 0 pages cma reserved [ 2189.641850] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2189.641867] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2189.641880] ? __mutex_unlock_slowpath+0x75/0x770 [ 2189.641894] alloc_pages_current+0x155/0x260 [ 2189.690617] ion_page_pool_alloc+0x118/0x1b0 [ 2189.695027] ion_system_heap_allocate+0x133/0x8c0 [ 2189.699875] ? _raw_spin_unlock+0x29/0x40 [ 2189.704018] ? _ion_heap_freelist_drain+0x6e/0x410 [ 2189.708954] ? ion_system_contig_heap_create+0x130/0x130 [ 2189.714399] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2189.719431] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2189.724292] ion_alloc+0x27a/0x810 [ 2189.727832] ? ion_dma_buf_release+0x40/0x40 [ 2189.732242] ? __might_fault+0x177/0x1b0 [ 2189.736317] ion_ioctl+0xea/0x1f0 [ 2189.739765] ? ion_query_heaps+0x360/0x360 [ 2189.743996] ? ion_query_heaps+0x360/0x360 [ 2189.748222] do_vfs_ioctl+0x75a/0xff0 [ 2189.752015] ? ioctl_preallocate+0x1a0/0x1a0 [ 2189.756415] ? lock_downgrade+0x740/0x740 [ 2189.760563] ? __fget+0x225/0x360 [ 2189.764008] ? do_vfs_ioctl+0xff0/0xff0 [ 2189.767974] ? security_file_ioctl+0x83/0xb0 [ 2189.772375] SyS_ioctl+0x7f/0xb0 [ 2189.775734] ? do_vfs_ioctl+0xff0/0xff0 [ 2189.779716] do_syscall_64+0x1d5/0x640 [ 2189.783619] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2189.788798] RIP: 0033:0x466459 [ 2189.791996] RSP: 002b:00007fb199b88188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2189.799709] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 2189.806980] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2189.814258] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2189.821540] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2189.828834] R13: 00007ffe54ba022f R14: 00007fb199b88300 R15: 0000000000022000 [ 2189.847986] warn_alloc_show_mem: 1 callbacks suppressed [ 2189.847990] Mem-Info: [ 2189.865780] oom_reaper: reaped process 29234 (syz-executor.0), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 2189.886944] active_anon:16838 inactive_anon:53477 isolated_anon:0 [ 2189.886944] active_file:42 inactive_file:15 isolated_file:25 [ 2189.886944] unevictable:0 dirty:0 writeback:14 unstable:0 [ 2189.886944] slab_reclaimable:12248 slab_unreclaimable:124724 [ 2189.886944] mapped:35342 shmem:54035 pagetables:2956 bounce:0 [ 2189.886944] free:13931 free_pcp:72 free_cma:0 [ 2189.920748] Node 0 active_anon:61780kB inactive_anon:180592kB active_file:40kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):16kB mapped:106456kB dirty:0kB writeback:28kB shmem:182480kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2189.949256] Node 1 active_anon:5564kB inactive_anon:33316kB active_file:0kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:34868kB dirty:0kB writeback:60kB shmem:33660kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2189.977291] Node 0 DMA free:10988kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2190.005004] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2190.010124] Node 0 DMA32 free:17980kB min:36200kB low:45248kB high:54296kB active_anon:62080kB inactive_anon:180592kB active_file:128kB inactive_file:372kB unevictable:0kB writepending:8kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:8288kB pagetables:5328kB bounce:0kB free_pcp:220kB local_pcp:100kB free_cma:0kB [ 2190.039737] lowmem_reserve[]: 0 0 0 0 0 [ 2190.043447] syz-executor.0 invoked oom-killer: gfp_mask=0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 2190.043757] Node 0 [ 2190.043759] (null), order=0, oom_score_adj=1000 [ 2190.054140] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2190.054144] lowmem_reserve[]: 0 0 0 0 0 [ 2190.054195] Node 1 Normal free:26400kB min:53696kB low:67120kB high:80544kB active_anon:5540kB inactive_anon:33316kB active_file:12kB inactive_file:12kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:2240kB pagetables:6380kB bounce:0kB free_pcp:120kB local_pcp:0kB free_cma:0kB [ 2190.054217] lowmem_reserve[]: 0 0 0 0 0 [ 2190.054246] Node 0 DMA: 10*4kB (UME) 6*8kB (UM) 22*16kB (UM) 13*32kB (UME) 8*64kB (UME) 7*128kB (UME) 8*256kB (UME) 5*512kB (UE) 2*1024kB (UE) 1*2048kB (M) 0*4096kB = 10968kB [ 2190.054326] Node 0 [ 2190.066776] syz-executor.0 cpuset= [ 2190.086658] DMA32: [ 2190.117884] / [ 2190.119571] 831*4kB [ 2190.123457] mems_allowed=0-1 [ 2190.139241] (UME) 60*8kB (UME) 8*16kB (ME) 447*32kB (UME) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18236kB [ 2190.139300] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2190.139352] Node 1 Normal: 28*4kB (M) 13*8kB (UM) 10*16kB (UM) 9*32kB (M) 10*64kB (UM) 5*128kB (UM) 8*256kB (M) 0*512kB 0*1024kB 1*2048kB (M) 5*4096kB (U) = 26520kB [ 2190.199720] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2190.223287] CPU: 0 PID: 29234 Comm: syz-executor.0 Not tainted 4.14.229-syzkaller #0 [ 2190.231204] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2190.234101] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2190.240594] Call Trace: [ 2190.240618] dump_stack+0x1b2/0x281 [ 2190.240631] dump_header+0x178/0x82f [ 2190.240643] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2190.240653] ? ___ratelimit+0x2cd/0x530 [ 2190.240668] oom_kill_process.cold+0x10/0xa40 [ 2190.272715] out_of_memory+0xe3e/0x1190 [ 2190.276707] ? oom_killer_disable+0x1c0/0x1c0 [ 2190.281210] ? mutex_trylock+0x152/0x1a0 [ 2190.285286] __alloc_pages_nodemask+0x23e1/0x2720 [ 2190.290181] ? lock_acquire+0x170/0x3f0 [ 2190.294168] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2190.299020] ? ion_page_pool_alloc+0x9e/0x1b0 [ 2190.303548] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2190.309032] ? retint_kernel+0x2d/0x2d [ 2190.312931] alloc_pages_current+0x155/0x260 [ 2190.317352] ion_page_pool_alloc+0x118/0x1b0 [ 2190.321769] ion_system_heap_allocate+0x133/0x8c0 [ 2190.326621] ? ion_alloc+0x187/0x810 [ 2190.330347] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2190.335830] ? ion_system_contig_heap_create+0x130/0x130 [ 2190.341324] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2190.346354] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2190.351205] ion_alloc+0x204/0x810 [ 2190.351406] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2190.354759] ? ion_dma_buf_release+0x40/0x40 [ 2190.368013] ? __might_fault+0x177/0x1b0 [ 2190.372096] ion_ioctl+0xea/0x1f0 [ 2190.375595] ? ion_query_heaps+0x360/0x360 [ 2190.379850] ? ion_query_heaps+0x360/0x360 [ 2190.384125] do_vfs_ioctl+0x75a/0xff0 [ 2190.387936] ? ioctl_preallocate+0x1a0/0x1a0 [ 2190.392365] ? lock_downgrade+0x740/0x740 [ 2190.396515] ? __fget+0x225/0x360 [ 2190.399968] ? do_vfs_ioctl+0xff0/0xff0 [ 2190.403942] ? security_file_ioctl+0x83/0xb0 [ 2190.408352] SyS_ioctl+0x7f/0xb0 [ 2190.411748] ? do_vfs_ioctl+0xff0/0xff0 [ 2190.415755] do_syscall_64+0x1d5/0x640 [ 2190.417760] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2190.419651] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2190.419661] RIP: 0033:0x466459 [ 2190.419665] RSP: 002b:00007f78296bb188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2190.419675] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 2190.419680] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2190.419685] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2190.419690] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2190.419695] R13: 00007ffd4f3c2b7f R14: 00007f78296bb300 R15: 0000000000022000 [ 2190.465823] Mem-Info: [ 2190.467901] syz-executor.2: [ 2190.475933] active_anon:16821 inactive_anon:53477 isolated_anon:0 [ 2190.475933] active_file:13 inactive_file:13 isolated_file:0 [ 2190.475933] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2190.475933] slab_reclaimable:12248 slab_unreclaimable:124751 [ 2190.475933] mapped:35301 shmem:54035 pagetables:2911 bounce:0 [ 2190.475933] free:13844 free_pcp:0 free_cma:0 [ 2190.481856] syz-executor.2: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2190.481880] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 2190.484318] syz-executor.1: [ 2190.487323] CPU: 1 PID: 29227 Comm: syz-executor.2 Not tainted 4.14.229-syzkaller #0 [ 2190.524160] syz-executor.1: [ 2190.535872] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2190.535877] Call Trace: [ 2190.535907] dump_stack+0x1b2/0x281 [ 2190.535932] warn_alloc.cold+0x96/0x1cc [ 2190.535947] ? zone_watermark_ok_safe+0x220/0x220 [ 2190.543648] Node 0 active_anon:61744kB inactive_anon:180592kB active_file:40kB inactive_file:40kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:106388kB dirty:0kB writeback:0kB shmem:182480kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2190.544066] ? usleep_range+0x130/0x130 [ 2190.552176] Node 1 active_anon:5540kB inactive_anon:33316kB active_file:12kB inactive_file:12kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:34816kB dirty:0kB writeback:0kB shmem:33660kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2190.555126] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 2190.564531] page allocation failure: order:0 [ 2190.567048] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 2190.570683] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 2190.574656] ? run_timer_softirq+0x5a0/0x5a0 [ 2190.579533] Node 0 [ 2190.608216] __alloc_pages_nodemask+0x2127/0x2720 [ 2190.608242] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2190.608256] ? migrate_swap_stop+0x880/0x880 [ 2190.612245] (null) [ 2190.640532] ? lock_acquire+0x170/0x3f0 [ 2190.640556] alloc_pages_current+0x155/0x260 [ 2190.640571] ion_page_pool_alloc+0x118/0x1b0 [ 2190.640583] ion_system_heap_allocate+0x133/0x8c0 [ 2190.645801] page allocation failure: order:0 [ 2190.650191] ? ion_alloc+0x187/0x810 [ 2190.650202] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2190.650212] ? ion_system_contig_heap_create+0x130/0x130 [ 2190.650221] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2190.650236] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2190.655278] , mode:0x14280ca(GFP_HIGHUSER_MOVABLE|__GFP_ZERO), nodemask= [ 2190.662501] ion_alloc+0x204/0x810 [ 2190.662517] ? ion_dma_buf_release+0x40/0x40 [ 2190.662529] ? __might_fault+0x177/0x1b0 [ 2190.662540] ion_ioctl+0xea/0x1f0 [ 2190.662551] ? ion_query_heaps+0x360/0x360 [ 2190.666994] DMA free:10968kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2190.669365] ? ion_query_heaps+0x360/0x360 [ 2190.669376] do_vfs_ioctl+0x75a/0xff0 [ 2190.669388] ? ioctl_preallocate+0x1a0/0x1a0 [ 2190.669398] ? lock_downgrade+0x740/0x740 [ 2190.669411] ? __fget+0x225/0x360 [ 2190.674236] lowmem_reserve[]: [ 2190.679078] ? do_vfs_ioctl+0xff0/0xff0 [ 2190.679090] ? security_file_ioctl+0x83/0xb0 [ 2190.679099] SyS_ioctl+0x7f/0xb0 [ 2190.679107] ? do_vfs_ioctl+0xff0/0xff0 [ 2190.679121] do_syscall_64+0x1d5/0x640 [ 2190.683622] (null) [ 2190.685755] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2190.690066] syz-executor.1 cpuset= [ 2190.694417] RIP: 0033:0x466459 [ 2190.698869] syz-executor.1 cpuset= [ 2190.703641] RSP: 002b:00007fc228c87188 EFLAGS: 00000246 [ 2190.708114] / [ 2190.711763] ORIG_RAX: 0000000000000010 [ 2190.717207] mems_allowed=0-1 [ 2190.722642] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 2190.722648] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2190.722652] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2190.722657] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2190.722662] R13: 00007ffe5f3badff R14: 00007fc228c87300 R15: 0000000000022000 [ 2190.722839] syz-executor.5: [ 2190.727743] 0 [ 2190.736255] page allocation failure: order:0 [ 2190.755801] / [ 2190.763866] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 2190.795463] page allocation failure: order:0 [ 2190.802380] 54061 total pagecache pages [ 2190.806877] 2717 [ 2190.808654] 0 pages in swap cache [ 2190.808661] Swap cache stats: add 0, delete 0, find 0/0 [ 2190.817232] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 2190.817253] Free swap = 0kB [ 2190.820694] 2718 [ 2190.829022] Total swap = 0kB [ 2190.839407] (null) [ 2190.839569] (null) [ 2190.842686] syz-executor.2 cpuset= [ 2190.846235] syz-executor.5 cpuset= [ 2190.862046] CPU: 0 PID: 29225 Comm: syz-executor.1 Not tainted 4.14.229-syzkaller #0 [ 2190.872106] 2097051 pages RAM [ 2190.875167] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2190.882538] 0 pages HighMem/MovableOnly [ 2190.889715] Call Trace: [ 2190.889739] dump_stack+0x1b2/0x281 [ 2190.889752] warn_alloc.cold+0x96/0x1cc [ 2190.889764] ? zone_watermark_ok_safe+0x220/0x220 [ 2190.889773] ? usleep_range+0x130/0x130 [ 2190.889781] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 2190.889794] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 2190.889804] ? run_timer_softirq+0x5a0/0x5a0 [ 2190.889819] __alloc_pages_nodemask+0x2127/0x2720 [ 2190.901557] 363848 pages reserved [ 2190.901913] ? lock_acquire+0x170/0x3f0 [ 2190.906295] 0 pages cma reserved [ 2190.908008] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2190.908018] ? ion_page_pool_alloc+0x9e/0x1b0 [ 2190.908034] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2190.908052] alloc_pages_current+0x155/0x260 [ 2190.908064] ion_page_pool_alloc+0x118/0x1b0 [ 2190.908073] ion_system_heap_allocate+0x133/0x8c0 [ 2190.908084] ? _raw_spin_unlock+0x29/0x40 [ 2190.908097] ? _ion_heap_freelist_drain+0x6e/0x410 [ 2190.916739] / [ 2190.919623] ? ion_system_contig_heap_create+0x130/0x130 [ 2190.934871] mems_allowed=0-1 [ 2190.941529] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2190.941544] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2190.941555] ion_alloc+0x27a/0x810 [ 2190.941570] ? ion_dma_buf_release+0x40/0x40 [ 2190.941581] ? __might_fault+0x177/0x1b0 [ 2190.941592] ion_ioctl+0xea/0x1f0 [ 2190.941600] ? ion_query_heaps+0x360/0x360 [ 2190.941612] ? ion_query_heaps+0x360/0x360 [ 2190.941627] do_vfs_ioctl+0x75a/0xff0 [ 2190.951387] / [ 2190.951881] ? ioctl_preallocate+0x1a0/0x1a0 [ 2190.954007] mems_allowed=0-1 [ 2190.957550] ? lock_downgrade+0x740/0x740 [ 2191.077947] syz-executor.3: [ 2191.079118] ? __fget+0x225/0x360 [ 2191.082222] page allocation failure: order:0 [ 2191.087232] ? do_vfs_ioctl+0xff0/0xff0 [ 2191.132194] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 2191.133393] ? security_file_ioctl+0x83/0xb0 [ 2191.136396] (null) [ 2191.139848] SyS_ioctl+0x7f/0xb0 [ 2191.139858] ? do_vfs_ioctl+0xff0/0xff0 [ 2191.139870] do_syscall_64+0x1d5/0x640 [ 2191.139883] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2191.139891] RIP: 0033:0x466459 [ 2191.139896] RSP: 002b:00007fdc8e5a7188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2191.139905] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 2191.139910] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2191.139915] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2191.139920] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2191.139925] R13: 00007ffd2c2faa2f R14: 00007fdc8e5a7300 R15: 0000000000022000 [ 2191.154958] 2718 [ 2191.160017] CPU: 1 PID: 29219 Comm: syz-executor.5 Not tainted 4.14.229-syzkaller #0 [ 2191.177858] 2718 [ 2191.178738] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2191.190665] Call Trace: [ 2191.190689] dump_stack+0x1b2/0x281 [ 2191.190702] warn_alloc.cold+0x96/0x1cc [ 2191.190715] ? zone_watermark_ok_safe+0x220/0x220 [ 2191.190729] ? usleep_range+0x130/0x130 [ 2191.198698] mems_allowed=0-1 [ 2191.205893] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 2191.227869] Node 0 [ 2191.229095] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 2191.231149] DMA32 free:18236kB min:36200kB low:45248kB high:54296kB active_anon:61744kB inactive_anon:180592kB active_file:40kB inactive_file:40kB unevictable:0kB writepending:0kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:8288kB pagetables:5264kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2191.239027] ? run_timer_softirq+0x5a0/0x5a0 [ 2191.239044] __alloc_pages_nodemask+0x2127/0x2720 [ 2191.239068] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2191.277863] lowmem_reserve[]: [ 2191.279793] ? migrate_swap_stop+0x880/0x880 [ 2191.284794] 0 [ 2191.313535] ? lock_acquire+0x170/0x3f0 [ 2191.313559] alloc_pages_current+0x155/0x260 [ 2191.313574] ion_page_pool_alloc+0x118/0x1b0 [ 2191.313586] ion_system_heap_allocate+0x133/0x8c0 [ 2191.354739] ? _raw_spin_unlock+0x29/0x40 [ 2191.358899] ? _ion_heap_freelist_drain+0x6e/0x410 [ 2191.363838] ? ion_system_contig_heap_create+0x130/0x130 [ 2191.369292] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2191.374334] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2191.379184] ion_alloc+0x27a/0x810 [ 2191.382750] ? ion_dma_buf_release+0x40/0x40 [ 2191.387170] ? __might_fault+0x177/0x1b0 [ 2191.391332] ion_ioctl+0xea/0x1f0 [ 2191.394783] ? ion_query_heaps+0x360/0x360 [ 2191.397866] 0 0 [ 2191.399019] ? ion_query_heaps+0x360/0x360 [ 2191.399031] do_vfs_ioctl+0x75a/0xff0 [ 2191.401013] 0 [ 2191.405278] ? ioctl_preallocate+0x1a0/0x1a0 [ 2191.415225] ? lock_downgrade+0x740/0x740 [ 2191.419380] ? __fget+0x225/0x360 [ 2191.422833] ? do_vfs_ioctl+0xff0/0xff0 [ 2191.426806] ? security_file_ioctl+0x83/0xb0 [ 2191.427858] 0 [ 2191.431218] SyS_ioctl+0x7f/0xb0 [ 2191.431228] ? do_vfs_ioctl+0xff0/0xff0 [ 2191.433029] Node 0 [ 2191.436388] do_syscall_64+0x1d5/0x640 [ 2191.446481] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2191.451675] RIP: 0033:0x466459 [ 2191.454865] RSP: 002b:00007fb589bc1188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2191.462582] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 2191.467882] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2191.469850] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2191.502569] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2191.509841] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2191.517295] R13: 00007ffc43c5be2f R14: 00007fb589bc1300 R15: 0000000000022000 [ 2191.524598] CPU: 0 PID: 29233 Comm: syz-executor.2 Not tainted 4.14.229-syzkaller #0 [ 2191.529566] syz-executor.3 cpuset= [ 2191.532598] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2191.532609] / [ 2191.536137] Call Trace: [ 2191.549775] dump_stack+0x1b2/0x281 [ 2191.549983] mems_allowed=0-1 [ 2191.553426] warn_alloc.cold+0x96/0x1cc [ 2191.560482] ? zone_watermark_ok_safe+0x220/0x220 [ 2191.565608] ? usleep_range+0x130/0x130 [ 2191.570314] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 2191.575448] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 2191.580467] ? run_timer_softirq+0x5a0/0x5a0 [ 2191.584986] __alloc_pages_nodemask+0x2127/0x2720 [ 2191.590053] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2191.594924] ? migrate_swap_stop+0x880/0x880 [ 2191.599372] ? lock_acquire+0x170/0x3f0 [ 2191.603352] alloc_pages_current+0x155/0x260 [ 2191.607756] ion_page_pool_alloc+0x118/0x1b0 [ 2191.612159] ion_system_heap_allocate+0x133/0x8c0 [ 2191.616999] ? ion_alloc+0x187/0x810 [ 2191.620740] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2191.626439] ? ion_system_contig_heap_create+0x130/0x130 [ 2191.631892] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2191.636916] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2191.641764] ion_alloc+0x204/0x810 [ 2191.645302] ? ion_dma_buf_release+0x40/0x40 [ 2191.649712] ? __might_fault+0x177/0x1b0 [ 2191.653797] ion_ioctl+0xea/0x1f0 [ 2191.657246] ? ion_query_heaps+0x360/0x360 [ 2191.661497] ? ion_query_heaps+0x360/0x360 [ 2191.665732] do_vfs_ioctl+0x75a/0xff0 [ 2191.669814] ? ioctl_preallocate+0x1a0/0x1a0 [ 2191.674237] ? lock_downgrade+0x740/0x740 [ 2191.678385] ? __fget+0x225/0x360 [ 2191.681855] ? do_vfs_ioctl+0xff0/0xff0 [ 2191.686036] ? security_file_ioctl+0x83/0xb0 [ 2191.690539] SyS_ioctl+0x7f/0xb0 [ 2191.692202] Mem-Info: [ 2191.693915] ? do_vfs_ioctl+0xff0/0xff0 [ 2191.696334] active_anon:16821 inactive_anon:53477 isolated_anon:0 [ 2191.696334] active_file:13 inactive_file:13 isolated_file:0 [ 2191.696334] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2191.696334] slab_reclaimable:12226 slab_unreclaimable:124746 [ 2191.696334] mapped:35301 shmem:54035 pagetables:2911 bounce:0 [ 2191.696334] free:13931 free_pcp:0 free_cma:0 [ 2191.700308] do_syscall_64+0x1d5/0x640 [ 2191.700324] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2191.700332] RIP: 0033:0x466459 [ 2191.700337] RSP: 002b:00007fc228c66188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2191.700346] RAX: ffffffffffffffda RBX: 000000000056c008 RCX: 0000000000466459 [ 2191.700351] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2191.700356] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2191.700360] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c008 [ 2191.700365] R13: 00007ffe5f3badff R14: 00007fc228c66300 R15: 0000000000022000 [ 2191.712629] CPU: 0 PID: 29250 Comm: syz-executor.1 Not tainted 4.14.229-syzkaller #0 [ 2191.800680] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2191.802139] Node 0 active_anon:61744kB inactive_anon:180592kB active_file:40kB inactive_file:40kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:106388kB dirty:0kB writeback:0kB shmem:182480kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2191.810048] Call Trace: [ 2191.810073] dump_stack+0x1b2/0x281 [ 2191.810084] warn_alloc.cold+0x96/0x1cc [ 2191.810094] ? zone_watermark_ok_safe+0x220/0x220 [ 2191.810102] ? usleep_range+0x130/0x130 [ 2191.810108] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 2191.810118] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 2191.810126] ? run_timer_softirq+0x5a0/0x5a0 [ 2191.810146] __alloc_pages_nodemask+0x2127/0x2720 [ 2191.810171] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2191.882207] Node 1 active_anon:5540kB inactive_anon:33316kB active_file:12kB inactive_file:12kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:34816kB dirty:0kB writeback:0kB shmem:33660kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2191.882938] ? __lock_acquire+0x5fc/0x3f20 [ 2191.914335] ? __handle_mm_fault+0x2095/0x4620 [ 2191.918924] ? __lock_acquire+0x5fc/0x3f20 [ 2191.923163] alloc_pages_vma+0xd2/0x6d0 [ 2191.927144] __handle_mm_fault+0x25fa/0x4620 [ 2191.931563] ? vm_insert_page+0x7c0/0x7c0 [ 2191.935749] ? mark_held_locks+0xa6/0xf0 [ 2191.939816] handle_mm_fault+0x455/0x9c0 [ 2191.943885] __do_page_fault+0x549/0xad0 [ 2191.947952] ? spurious_fault+0x640/0x640 [ 2191.952127] Node 0 DMA free:10968kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2191.952291] ? do_page_fault+0x60/0x500 [ 2191.952303] page_fault+0x25/0x50 [ 2191.985960] RIP: 0010:__put_user_4+0x1c/0x30 [ 2191.990711] RSP: 0000:ffff88802cdc7ad0 EFLAGS: 00010293 [ 2191.997291] RAX: 0000000000000000 RBX: 00007fffffffeffd RCX: 00007fdc8e5659d0 [ 2192.004584] RDX: 1ffff11002fc2d2f RSI: 0000000000000001 RDI: 00007fdc8e5659d0 [ 2192.012055] RBP: ffff888017e163c0 R08: ffffffff8b994ac0 R09: 0000000000000000 [ 2192.019564] R10: 0000000000000000 R11: ffff888017e163c0 R12: ffff888017e16978 [ 2192.026838] R13: ffff8880a5e17440 R14: 0000000000000000 R15: ffff888094593980 [ 2192.034143] mm_release+0x239/0x2d0 [ 2192.037786] do_exit+0x56f/0x2850 [ 2192.041285] ? mm_update_next_owner+0x5b0/0x5b0 [ 2192.046064] ? get_signal+0x323/0x1ca0 [ 2192.050160] ? lock_acquire+0x170/0x3f0 [ 2192.054151] ? lock_downgrade+0x740/0x740 [ 2192.058314] do_group_exit+0x100/0x2e0 [ 2192.062218] get_signal+0x38d/0x1ca0 [ 2192.065953] ? ion_dma_buf_release+0x40/0x40 [ 2192.070373] do_signal+0x7c/0x1550 [ 2192.073912] ? ion_ioctl+0x13a/0x1f0 [ 2192.077636] ? ion_query_heaps+0x360/0x360 [ 2192.077704] lowmem_reserve[]: [ 2192.081885] ? setup_sigcontext+0x820/0x820 [ 2192.081895] ? _raw_spin_unlock+0x29/0x40 [ 2192.081902] ? ion_query_heaps+0x360/0x360 [ 2192.081911] ? do_vfs_ioctl+0xe2/0xff0 [ 2192.081920] ? ioctl_preallocate+0x1a0/0x1a0 [ 2192.081928] ? lock_downgrade+0x740/0x740 [ 2192.081939] ? __fget+0x225/0x360 [ 2192.081946] ? task_work_add+0x87/0xe0 [ 2192.081954] ? exit_to_usermode_loop+0x41/0x200 [ 2192.081963] exit_to_usermode_loop+0x160/0x200 [ 2192.081971] ? SyS_ioctl+0x5c/0xb0 [ 2192.081981] do_syscall_64+0x4a3/0x640 [ 2192.087872] 0 [ 2192.089426] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2192.093552] 2717 [ 2192.097867] RIP: 0033:0x466459 [ 2192.097871] RSP: 002b:00007fdc8e565188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2192.097879] RAX: fffffffffffffff4 RBX: 000000000056c0b0 RCX: 0000000000466459 [ 2192.097883] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2192.097886] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2192.097890] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c0b0 [ 2192.097894] R13: 00007ffd2c2faa2f R14: 00007fdc8e565300 R15: 0000000000022000 [ 2192.108951] lowmem_reserve[]: [ 2192.116241] CPU: 1 PID: 29242 Comm: syz-executor.3 Not tainted 4.14.229-syzkaller #0 [ 2192.117726] 0 [ 2192.122388] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2192.122393] Call Trace: [ 2192.122414] dump_stack+0x1b2/0x281 [ 2192.122426] warn_alloc.cold+0x96/0x1cc [ 2192.122439] ? zone_watermark_ok_safe+0x220/0x220 [ 2192.122458] ? usleep_range+0x130/0x130 [ 2192.136758] 0 [ 2192.141472] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 2192.141486] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 2192.141497] ? run_timer_softirq+0x5a0/0x5a0 [ 2192.141514] __alloc_pages_nodemask+0x2127/0x2720 [ 2192.143563] 0 [ 2192.146753] ? lock_acquire+0x170/0x3f0 [ 2192.154492] 0 [ 2192.161728] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2192.161738] ? ion_page_pool_alloc+0x9e/0x1b0 [ 2192.161757] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2192.169147] 0 [ 2192.176392] alloc_pages_current+0x155/0x260 [ 2192.191969] ion_page_pool_alloc+0x118/0x1b0 [ 2192.191979] ion_system_heap_allocate+0x133/0x8c0 [ 2192.191993] ? _raw_spin_unlock+0x29/0x40 [ 2192.192005] ? _ion_heap_freelist_drain+0x6e/0x410 [ 2192.195135] Node 1 [ 2192.203102] ? ion_system_contig_heap_create+0x130/0x130 [ 2192.203113] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2192.203125] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2192.203136] ion_alloc+0x27a/0x810 [ 2192.203149] ? ion_dma_buf_release+0x40/0x40 [ 2192.205066] Normal free:143764kB min:53696kB low:67120kB high:80544kB active_anon:5540kB inactive_anon:33316kB active_file:12kB inactive_file:2136kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:2240kB pagetables:6380kB bounce:0kB free_pcp:144kB local_pcp:120kB free_cma:0kB [ 2192.214496] ? __might_fault+0x177/0x1b0 [ 2192.214510] ion_ioctl+0xea/0x1f0 [ 2192.214520] ? ion_query_heaps+0x360/0x360 [ 2192.214536] ? ion_query_heaps+0x360/0x360 [ 2192.217117] lowmem_reserve[]: [ 2192.220736] do_vfs_ioctl+0x75a/0xff0 [ 2192.220749] ? ioctl_preallocate+0x1a0/0x1a0 [ 2192.220758] ? lock_downgrade+0x740/0x740 [ 2192.220771] ? __fget+0x225/0x360 [ 2192.224748] 0 [ 2192.229595] ? do_vfs_ioctl+0xff0/0xff0 [ 2192.229607] ? security_file_ioctl+0x83/0xb0 [ 2192.229622] SyS_ioctl+0x7f/0xb0 [ 2192.229633] ? do_vfs_ioctl+0xff0/0xff0 [ 2192.233645] 0 [ 2192.235447] do_syscall_64+0x1d5/0x640 [ 2192.240664] 0 [ 2192.245638] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2192.250072] 0 [ 2192.254910] RIP: 0033:0x466459 [ 2192.256696] 0 [ 2192.260666] RSP: 002b:00007fb199b88188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2192.260676] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 2192.260681] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2192.260685] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2192.260690] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2192.260694] R13: 00007ffe54ba022f R14: 00007fb199b88300 R15: 0000000000022000 [ 2192.427893] 2718 2718 2718 [ 2192.540873] Node 0 DMA32 free:67548kB min:36200kB low:45248kB high:54296kB active_anon:61744kB inactive_anon:180592kB active_file:40kB inactive_file:40kB unevictable:0kB writepending:0kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:8256kB pagetables:5264kB bounce:0kB free_pcp:1284kB local_pcp:664kB free_cma:0kB [ 2192.597975] lowmem_reserve[]: 0 0 0 0 0 [ 2192.602024] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2192.637955] Node 0 DMA: 17*4kB (UME) 6*8kB (UM) 22*16kB (UM) 13*32kB (UME) 8*64kB (UME) 7*128kB (UME) 8*256kB (UME) 5*512kB (UE) 2*1024kB (UE) 1*2048kB (M) 0*4096kB = 10996kB [ 2192.667887] Node 0 DMA32: 3667*4kB (UME) 2607*8kB (UME) 2346*16kB (UME) 1845*32kB (UME) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 132100kB [ 2192.687889] lowmem_reserve[]: 0 0 0 0 0 [ 2192.692242] Node 1 Normal free:48960kB min:53696kB low:67120kB high:80544kB active_anon:5540kB inactive_anon:33316kB active_file:12kB inactive_file:4136kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:2240kB pagetables:6380kB bounce:0kB free_pcp:1256kB local_pcp:620kB free_cma:0kB [ 2192.737909] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2192.757896] Node 1 Normal: 1896*4kB (UM) 737*8kB (U) 429*16kB (UM) 429*32kB (UM) 156*64kB (UM) 39*128kB (U) 45*256kB (U) 22*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 71832kB [ 2192.777932] lowmem_reserve[]: 0 0 0 0 0 [ 2192.781985] Node 0 DMA: 15*4kB (UME) 19*8kB (UM) 22*16kB (UM) 13*32kB (UME) 8*64kB (UME) 7*128kB (UME) 8*256kB (UME) 5*512kB (UE) 2*1024kB (UE) 1*2048kB (M) 0*4096kB = 11092kB [ 2192.807907] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2192.816794] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2192.837924] Node 0 DMA32: 4234*4kB (UME) 3355*8kB (UME) 5341*16kB (UME) 3193*32kB (UME) 6*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 231792kB [ 2192.853414] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2192.877911] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2192.886523] 55100 total pagecache pages [ 2192.890582] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2192.907898] 0 pages in swap cache [ 2192.911390] Swap cache stats: add 0, delete 0, find 0/0 [ 2192.916757] Free swap = 0kB [ 2192.919867] Node 1 Normal: 4753*4kB (UM) 1364*8kB (U) 637*16kB (UM) 631*32kB (UM) 266*64kB (UM) 119*128kB (U) 70*256kB (U) 37*512kB (U) 2*1024kB (U) 0*2048kB 0*4096kB = 131476kB [ 2192.947889] Total swap = 0kB [ 2192.950985] 2097051 pages RAM [ 2192.954120] 0 pages HighMem/MovableOnly [ 2192.967915] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2192.976788] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2192.986068] 363848 pages reserved [ 2192.989642] 0 pages cma reserved [ 2192.993028] Out of memory (oom_kill_allocating_task): Kill process 29234 (syz-executor.0) score 0 or sacrifice child [ 2192.998166] warn_alloc_show_mem: 4 callbacks suppressed [ 2192.998170] Mem-Info: [ 2193.017890] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2193.026932] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2193.041945] active_anon:16821 inactive_anon:53477 isolated_anon:0 [ 2193.041945] active_file:17 inactive_file:1059 isolated_file:0 [ 2193.041945] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2193.041945] slab_reclaimable:12226 slab_unreclaimable:125231 [ 2193.041945] mapped:36148 shmem:54035 pagetables:2911 bounce:0 [ 2193.041945] free:121857 free_pcp:657 free_cma:0 [ 2193.047919] Killed process 29234 (syz-executor.0) total-vm:93516kB, anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 2193.097902] 55091 total pagecache pages [ 2193.101949] 0 pages in swap cache [ 2193.105404] Swap cache stats: add 0, delete 0, find 0/0 [ 2193.120734] Free swap = 0kB [ 2193.138210] syz-executor.0: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2193.154503] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 2193.160067] Total swap = 0kB [ 2193.163162] 2097051 pages RAM [ 2193.166284] 0 pages HighMem/MovableOnly [ 2193.167107] CPU: 0 PID: 29234 Comm: syz-executor.0 Not tainted 4.14.229-syzkaller #0 [ 2193.178166] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2193.181983] Node 0 active_anon:61844kB inactive_anon:180592kB active_file:40kB inactive_file:2140kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:107996kB dirty:100kB writeback:0kB shmem:182480kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2193.187549] Call Trace: [ 2193.187573] dump_stack+0x1b2/0x281 [ 2193.187586] warn_alloc.cold+0x96/0x1cc [ 2193.187595] ? lock_downgrade+0x740/0x740 [ 2193.187606] ? zone_watermark_ok_safe+0x220/0x220 [ 2193.187617] ? wake_up_q+0x82/0xd0 [ 2193.187633] ? wait_for_completion_io+0x10/0x10 [ 2193.187647] __alloc_pages_nodemask+0x2127/0x2720 [ 2193.187661] ? lock_acquire+0x170/0x3f0 [ 2193.187676] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2193.227967] 363848 pages reserved [ 2193.230237] ? ion_page_pool_alloc+0x9e/0x1b0 [ 2193.235195] 0 pages cma reserved [ 2193.238664] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2193.238677] ? retint_kernel+0x2d/0x2d [ 2193.238691] alloc_pages_current+0x155/0x260 [ 2193.238703] ion_page_pool_alloc+0x118/0x1b0 [ 2193.238712] ion_system_heap_allocate+0x133/0x8c0 [ 2193.238721] ? ion_alloc+0x187/0x810 [ 2193.238732] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2193.238741] ? ion_system_contig_heap_create+0x130/0x130 [ 2193.238751] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2193.238762] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2193.238772] ion_alloc+0x204/0x810 [ 2193.320284] ? ion_dma_buf_release+0x40/0x40 [ 2193.324730] ? __might_fault+0x177/0x1b0 [ 2193.329264] Node 1 active_anon:5440kB inactive_anon:33316kB active_file:528kB inactive_file:3396kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:37996kB dirty:0kB writeback:0kB shmem:33660kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2193.329610] ion_ioctl+0xea/0x1f0 [ 2193.360940] ? ion_query_heaps+0x360/0x360 [ 2193.365204] ? ion_query_heaps+0x360/0x360 [ 2193.369445] do_vfs_ioctl+0x75a/0xff0 [ 2193.373257] ? ioctl_preallocate+0x1a0/0x1a0 [ 2193.377673] ? lock_downgrade+0x740/0x740 [ 2193.381828] ? __fget+0x225/0x360 [ 2193.385285] ? do_vfs_ioctl+0xff0/0xff0 [ 2193.389266] ? security_file_ioctl+0x83/0xb0 [ 2193.393685] SyS_ioctl+0x7f/0xb0 [ 2193.397063] ? do_vfs_ioctl+0xff0/0xff0 [ 2193.401047] do_syscall_64+0x1d5/0x640 [ 2193.404974] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2193.410300] RIP: 0033:0x466459 [ 2193.413611] RSP: 002b:00007f78296bb188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2193.421336] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 2193.427908] Node 0 [ 2193.428612] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2193.428632] DMA free:11120kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2193.430837] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2193.430845] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2193.478275] R13: 00007ffd4f3c2b7f R14: 00007f78296bb300 R15: 0000000000022000 [ 2193.481917] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2193.506613] syz-executor.2: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2193.514096] Node 0 [ 2193.537966] syz-executor.2 cpuset= [ 2193.542711] DMA32 free:295512kB min:36200kB low:45248kB high:54296kB active_anon:61844kB inactive_anon:180592kB active_file:540kB inactive_file:4040kB unevictable:0kB writepending:148kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:8224kB pagetables:5116kB bounce:0kB free_pcp:0kB local_pcp:8kB free_cma:0kB [ 2193.548021] / mems_allowed=0-1 [ 2193.581184] CPU: 0 PID: 29233 Comm: syz-executor.2 Not tainted 4.14.229-syzkaller #0 [ 2193.589069] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2193.598427] Call Trace: [ 2193.601113] dump_stack+0x1b2/0x281 [ 2193.604760] warn_alloc.cold+0x96/0x1cc [ 2193.608746] ? zone_watermark_ok_safe+0x220/0x220 [ 2193.613653] __alloc_pages_nodemask+0x2127/0x2720 [ 2193.618503] ? retint_kernel+0x2d/0x2d [ 2193.622409] ? lock_acquire+0x170/0x3f0 [ 2193.626428] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2193.631290] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2193.636748] ? check_preemption_disabled+0x35/0x240 [ 2193.641776] ? __mutex_unlock_slowpath+0x75/0x770 [ 2193.646634] alloc_pages_current+0x155/0x260 [ 2193.651056] ion_page_pool_alloc+0x118/0x1b0 [ 2193.655508] ion_system_heap_allocate+0x133/0x8c0 [ 2193.660391] ? _raw_spin_unlock+0x29/0x40 [ 2193.664551] ? _ion_heap_freelist_drain+0x6e/0x410 [ 2193.669494] ? ion_system_contig_heap_create+0x130/0x130 [ 2193.675003] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2193.677929] lowmem_reserve[]: 0 [ 2193.680056] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2193.680068] ion_alloc+0x27a/0x810 [ 2193.683341] 0 [ 2193.689593] ? ion_dma_buf_release+0x40/0x40 [ 2193.689606] ? __might_fault+0x177/0x1b0 [ 2193.689617] ion_ioctl+0xea/0x1f0 [ 2193.689625] ? ion_query_heaps+0x360/0x360 [ 2193.689635] ? ion_query_heaps+0x360/0x360 [ 2193.689645] do_vfs_ioctl+0x75a/0xff0 [ 2193.689656] ? ioctl_preallocate+0x1a0/0x1a0 [ 2193.689665] ? lock_downgrade+0x740/0x740 [ 2193.689678] ? __fget+0x225/0x360 [ 2193.689686] ? do_vfs_ioctl+0xff0/0xff0 [ 2193.689699] ? security_file_ioctl+0x83/0xb0 [ 2193.689709] SyS_ioctl+0x7f/0xb0 [ 2193.689716] ? do_vfs_ioctl+0xff0/0xff0 [ 2193.689727] do_syscall_64+0x1d5/0x640 [ 2193.689741] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2193.689753] RIP: 0033:0x466459 [ 2193.721800] 0 [ 2193.724471] RSP: 002b:00007fc228c66188 EFLAGS: 00000246 [ 2193.747912] 0 [ 2193.751689] ORIG_RAX: 0000000000000010 [ 2193.757323] 0 [ 2193.760506] RAX: ffffffffffffffda RBX: 000000000056c008 RCX: 0000000000466459 [ 2193.760513] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2193.760518] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2193.760522] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c008 [ 2193.760527] R13: 00007ffe5f3badff R14: 00007fc228c66300 R15: 0000000000022000 [ 2193.835142] syz-executor.2: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2193.872491] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 2193.877671] CPU: 1 PID: 29227 Comm: syz-executor.2 Not tainted 4.14.229-syzkaller #0 [ 2193.885572] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2193.895115] Call Trace: [ 2193.897721] dump_stack+0x1b2/0x281 [ 2193.901448] warn_alloc.cold+0x96/0x1cc [ 2193.905437] ? zone_watermark_ok_safe+0x220/0x220 [ 2193.910331] __alloc_pages_nodemask+0x2127/0x2720 [ 2193.915182] ? lock_acquire+0x170/0x3f0 [ 2193.919166] ? lock_acquire+0x170/0x3f0 [ 2193.923153] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2193.928100] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2193.933568] ? __mutex_unlock_slowpath+0x75/0x770 [ 2193.938419] ? retint_kernel+0x2d/0x2d [ 2193.942317] alloc_pages_current+0x155/0x260 [ 2193.946742] ion_page_pool_alloc+0x118/0x1b0 [ 2193.951189] ion_system_heap_allocate+0x133/0x8c0 [ 2193.956047] ? _raw_spin_unlock+0x29/0x40 [ 2193.960205] ? _ion_heap_freelist_drain+0x6e/0x410 [ 2193.965197] ? ion_system_contig_heap_create+0x130/0x130 [ 2193.970924] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2193.975951] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2193.980810] ion_alloc+0x27a/0x810 [ 2193.984375] ? ion_dma_buf_release+0x40/0x40 [ 2193.988798] ? __might_fault+0x177/0x1b0 [ 2193.992866] ion_ioctl+0xea/0x1f0 [ 2193.996321] ? ion_query_heaps+0x360/0x360 [ 2194.000578] ? ion_query_heaps+0x360/0x360 [ 2194.004900] do_vfs_ioctl+0x75a/0xff0 [ 2194.008702] ? ioctl_preallocate+0x1a0/0x1a0 [ 2194.013105] ? lock_downgrade+0x740/0x740 [ 2194.017258] ? __fget+0x225/0x360 [ 2194.020715] ? do_vfs_ioctl+0xff0/0xff0 [ 2194.024722] ? security_file_ioctl+0x83/0xb0 [ 2194.029140] SyS_ioctl+0x7f/0xb0 [ 2194.032568] ? do_vfs_ioctl+0xff0/0xff0 [ 2194.036574] do_syscall_64+0x1d5/0x640 [ 2194.040488] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2194.045802] RIP: 0033:0x466459 [ 2194.048999] RSP: 002b:00007fc228c87188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2194.056720] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 2194.064001] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2194.071282] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2194.078564] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2194.085877] R13: 00007ffe5f3badff R14: 00007fc228c87300 R15: 0000000000022000 [ 2194.151100] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2194.221699] lowmem_reserve[]: 0 0 0 0 0 [ 2194.225743] Node 1 Normal free:73184kB min:53696kB low:67120kB high:80544kB active_anon:5356kB inactive_anon:33316kB active_file:12kB inactive_file:12kB unevictable:0kB writepending:4kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:2240kB pagetables:6380kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2194.299573] lowmem_reserve[]: 0 0 0 0 0 [ 2194.303608] Node 0 DMA: 12*4kB (UME) 24*8kB (UM) 21*16kB (UM) 13*32kB (UME) 7*64kB (UME) 7*128kB (UME) 8*256kB (UME) 5*512kB (UE) 2*1024kB (UE) 1*2048kB (M) 0*4096kB = 11040kB [ 2194.371890] Node 0 DMA32: 968*4kB (UME) 49*8kB (ME) 25*16kB (ME) 421*32kB (UME) 1*64kB (U) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18200kB [ 2194.386328] systemd-journal invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=0 [ 2194.401600] systemd-journal cpuset=/ mems_allowed=0-1 [ 2194.407034] CPU: 1 PID: 28971 Comm: systemd-journal Not tainted 4.14.229-syzkaller #0 [ 2194.415014] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2194.421851] warn_alloc_show_mem: 2 callbacks suppressed [ 2194.421855] Mem-Info: [ 2194.424476] Call Trace: [ 2194.429939] active_anon:16815 inactive_anon:53477 isolated_anon:0 [ 2194.429939] active_file:14 inactive_file:8 isolated_file:0 [ 2194.429939] unevictable:0 dirty:12 writeback:0 unstable:0 [ 2194.429939] slab_reclaimable:12225 slab_unreclaimable:126258 [ 2194.429939] mapped:35470 shmem:54035 pagetables:2860 bounce:0 [ 2194.429939] free:16815 free_pcp:187 free_cma:0 [ 2194.432295] dump_stack+0x1b2/0x281 [ 2194.434895] Node 0 active_anon:61904kB inactive_anon:180592kB active_file:44kB inactive_file:20kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:107064kB dirty:44kB writeback:0kB shmem:182480kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2194.468214] dump_header+0x178/0x82f [ 2194.468227] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2194.468235] ? ___ratelimit+0x2cd/0x530 [ 2194.468244] oom_kill_process.cold+0x10/0xa40 [ 2194.468261] out_of_memory+0xe3e/0x1190 [ 2194.468274] ? oom_killer_disable+0x1c0/0x1c0 [ 2194.471923] Node 1 active_anon:5356kB inactive_anon:33316kB active_file:12kB inactive_file:12kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:34816kB dirty:4kB writeback:0kB shmem:33660kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2194.500267] ? mutex_trylock+0x152/0x1a0 [ 2194.500280] __alloc_pages_nodemask+0x23e1/0x2720 [ 2194.500301] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2194.500310] ? __put_seccomp_filter+0x90/0x90 [ 2194.500327] ? __seccomp_filter+0xbd/0xd60 [ 2194.504048] Node 0 [ 2194.509158] ? cache_grow_begin+0x3f/0x700 [ 2194.509168] cache_grow_begin+0x91/0x700 [ 2194.509179] fallback_alloc+0x207/0x2c0 [ 2194.509191] kmem_cache_alloc+0x1e5/0x3c0 [ 2194.509201] getname_flags+0xc8/0x550 [ 2194.509213] SyS_mkdirat+0x83/0x270 [ 2194.513198] DMA free:10956kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2194.517694] ? SyS_mknod+0x30/0x30 [ 2194.521715] lowmem_reserve[]: [ 2194.526146] ? do_syscall_64+0x4c/0x640 [ 2194.553345] 0 [ 2194.557377] ? SyS_mkdirat+0x270/0x270 [ 2194.562249] 2717 [ 2194.567040] do_syscall_64+0x1d5/0x640 [ 2194.571561] 2718 [ 2194.575741] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2194.578001] 2718 [ 2194.582179] RIP: 0033:0x7f573ce74687 [ 2194.586219] 2718 [ 2194.590178] RSP: 002b:00007ffd04ace148 EFLAGS: 00000293 ORIG_RAX: 0000000000000053 [ 2194.590187] RAX: ffffffffffffffda RBX: 00007ffd04ad1060 RCX: 00007f573ce74687 [ 2194.590191] RDX: 00007f573d8e5a00 RSI: 00000000000001ed RDI: 000056191cc51300 [ 2194.590195] RBP: 00007ffd04ace180 R08: 0000000000000000 R09: 0000000000000000 [ 2194.590198] R10: 0000000000000069 R11: 0000000000000293 R12: 0000000000000000 [ 2194.590202] R13: 0000000000000000 R14: 00007ffd04ad1060 R15: 00007ffd04ace670 [ 2194.593283] Node 0 [ 2194.598276] Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2194.598329] Node 1 Normal: 15*4kB (M) 2*8kB (M) 1*16kB (U) 832*32kB (U) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 26716kB [ 2194.598388] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2194.598393] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2194.598397] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2194.598402] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2194.598406] 54084 total pagecache pages [ 2194.598414] 0 pages in swap cache [ 2194.598424] Swap cache stats: add 0, delete 0, find 0/0 [ 2194.604716] warn_alloc: 1 callbacks suppressed [ 2194.604721] syz-executor.2: [ 2194.630768] Free swap = 0kB [ 2194.632071] syz-executor.0: [ 2194.635150] Total swap = 0kB [ 2194.646193] Node 0 [ 2194.652784] 2097051 pages RAM [ 2194.652926] page allocation failure: order:0 [ 2194.658799] 0 pages HighMem/MovableOnly [ 2194.660178] DMA32 free:29524kB min:36200kB low:45248kB high:54296kB active_anon:61904kB inactive_anon:180592kB active_file:44kB inactive_file:60kB unevictable:0kB writepending:244kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:8224kB pagetables:5060kB bounce:0kB free_pcp:628kB local_pcp:628kB free_cma:0kB [ 2194.663885] 363848 pages reserved [ 2194.665941] lowmem_reserve[]: [ 2194.679811] 0 pages cma reserved [ 2194.685150] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 2194.694043] Mem-Info: [ 2194.700206] (null) [ 2194.710377] page allocation failure: order:0 [ 2194.712929] 0 [ 2194.715124] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 2194.727427] syz-executor.0 cpuset= [ 2194.742413] active_anon:16815 inactive_anon:53477 isolated_anon:0 [ 2194.742413] active_file:14 inactive_file:8 isolated_file:0 [ 2194.742413] unevictable:0 dirty:12 writeback:0 unstable:0 [ 2194.742413] slab_reclaimable:12225 slab_unreclaimable:126258 [ 2194.742413] mapped:35470 shmem:54035 pagetables:2860 bounce:0 [ 2194.742413] free:16893 free_pcp:218 free_cma:0 [ 2194.748440] 0 [ 2194.763926] Node 0 active_anon:61904kB inactive_anon:180592kB active_file:44kB inactive_file:20kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:107064kB dirty:44kB writeback:0kB shmem:182480kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2194.766295] / [ 2194.775193] Node 1 active_anon:5356kB inactive_anon:33316kB active_file:12kB inactive_file:12kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:34816kB dirty:4kB writeback:0kB shmem:33660kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2194.777190] 0 [ 2194.786735] (null) [ 2194.792744] mems_allowed=0-1 [ 2194.795573] Node 0 [ 2194.796700] CPU: 0 PID: 29234 Comm: syz-executor.0 Not tainted 4.14.229-syzkaller #0 [ 2194.805991] syz-executor.2 cpuset= [ 2194.808075] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2194.808081] Call Trace: [ 2194.808103] dump_stack+0x1b2/0x281 [ 2194.808117] warn_alloc.cold+0x96/0x1cc [ 2194.808128] ? zone_watermark_ok_safe+0x220/0x220 [ 2194.808138] ? usleep_range+0x130/0x130 [ 2194.808153] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 2194.808166] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 2194.808176] ? run_timer_softirq+0x5a0/0x5a0 [ 2194.808193] __alloc_pages_nodemask+0x2127/0x2720 [ 2194.808207] ? lock_acquire+0x170/0x3f0 [ 2194.814527] DMA free:10956kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2194.816590] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2194.849524] / [ 2194.851666] ? ion_page_pool_alloc+0x9e/0x1b0 [ 2194.855010] mems_allowed=0-1 [ 2194.862118] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2194.862138] alloc_pages_current+0x155/0x260 [ 2194.862152] ion_page_pool_alloc+0x118/0x1b0 [ 2194.862161] ion_system_heap_allocate+0x133/0x8c0 [ 2194.862173] ? _raw_spin_unlock+0x29/0x40 [ 2194.862180] ? _ion_heap_freelist_drain+0x6e/0x410 [ 2194.862190] ? ion_system_contig_heap_create+0x130/0x130 [ 2194.862200] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2194.862211] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2194.862224] ion_alloc+0x27a/0x810 [ 2194.913530] lowmem_reserve[]: [ 2194.917133] ? ion_dma_buf_release+0x40/0x40 [ 2194.921930] 0 [ 2194.946865] ? __might_fault+0x177/0x1b0 [ 2194.946879] ion_ioctl+0xea/0x1f0 [ 2194.946889] ? ion_query_heaps+0x360/0x360 [ 2194.946903] ? ion_query_heaps+0x360/0x360 [ 2194.946913] do_vfs_ioctl+0x75a/0xff0 [ 2194.946923] ? ioctl_preallocate+0x1a0/0x1a0 [ 2194.946932] ? lock_downgrade+0x740/0x740 [ 2194.946944] ? __fget+0x225/0x360 [ 2194.946953] ? do_vfs_ioctl+0xff0/0xff0 [ 2194.946964] ? security_file_ioctl+0x83/0xb0 [ 2194.946981] SyS_ioctl+0x7f/0xb0 [ 2194.946991] ? do_vfs_ioctl+0xff0/0xff0 [ 2194.947003] do_syscall_64+0x1d5/0x640 [ 2194.947018] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2194.947026] RIP: 0033:0x466459 [ 2194.947031] RSP: 002b:00007f78296bb188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2194.947041] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 2194.947046] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2194.947051] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2194.947056] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2194.947062] R13: 00007ffd4f3c2b7f R14: 00007f78296bb300 R15: 0000000000022000 [ 2194.954355] 0 [ 2194.980550] CPU: 1 PID: 29233 Comm: syz-executor.2 Not tainted 4.14.229-syzkaller #0 [ 2194.989559] 0 [ 2194.993260] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2195.006174] Call Trace: [ 2195.006200] dump_stack+0x1b2/0x281 [ 2195.006213] warn_alloc.cold+0x96/0x1cc [ 2195.006225] ? zone_watermark_ok_safe+0x220/0x220 [ 2195.006238] ? usleep_range+0x130/0x130 [ 2195.008860] Node 0 [ 2195.012468] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 2195.016457] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2195.021295] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 2195.021306] ? run_timer_softirq+0x5a0/0x5a0 [ 2195.021322] __alloc_pages_nodemask+0x2127/0x2720 [ 2195.021339] ? lock_acquire+0x170/0x3f0 [ 2195.021358] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2195.025329] lowmem_reserve[]: [ 2195.030434] ? ion_page_pool_alloc+0x9e/0x1b0 [ 2195.030450] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2195.030469] alloc_pages_current+0x155/0x260 [ 2195.030482] ion_page_pool_alloc+0x118/0x1b0 [ 2195.035590] 0 [ 2195.040014] ion_system_heap_allocate+0x133/0x8c0 [ 2195.040028] ? _raw_spin_unlock+0x29/0x40 [ 2195.040036] ? _ion_heap_freelist_drain+0x6e/0x410 [ 2195.040051] ? ion_system_contig_heap_create+0x130/0x130 [ 2195.040076] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2195.044916] 0 [ 2195.048891] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2195.048903] ion_alloc+0x27a/0x810 [ 2195.048917] ? ion_dma_buf_release+0x40/0x40 [ 2195.048932] ? __might_fault+0x177/0x1b0 [ 2195.074478] 0 [ 2195.079302] ion_ioctl+0xea/0x1f0 [ 2195.079312] ? ion_query_heaps+0x360/0x360 [ 2195.079322] ? ion_query_heaps+0x360/0x360 [ 2195.079333] do_vfs_ioctl+0x75a/0xff0 [ 2195.079344] ? ioctl_preallocate+0x1a0/0x1a0 [ 2195.079353] ? lock_downgrade+0x740/0x740 [ 2195.079369] ? __fget+0x225/0x360 [ 2195.085457] 0 [ 2195.085592] ? do_vfs_ioctl+0xff0/0xff0 [ 2195.088715] 0 [ 2195.094130] ? security_file_ioctl+0x83/0xb0 [ 2195.103029] SyS_ioctl+0x7f/0xb0 [ 2195.107892] Node 1 [ 2195.111990] ? do_vfs_ioctl+0xff0/0xff0 [ 2195.116931] Normal free:26716kB min:53696kB low:67120kB high:80544kB active_anon:5356kB inactive_anon:33316kB active_file:12kB inactive_file:12kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:2240kB pagetables:6380kB bounce:0kB free_pcp:120kB local_pcp:120kB free_cma:0kB [ 2195.122363] do_syscall_64+0x1d5/0x640 [ 2195.122379] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2195.122387] RIP: 0033:0x466459 [ 2195.122392] RSP: 002b:00007fc228c66188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2195.147875] lowmem_reserve[]: [ 2195.149280] RAX: ffffffffffffffda RBX: 000000000056c008 RCX: 0000000000466459 [ 2195.152740] 0 [ 2195.156960] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2195.156969] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2195.167885] 0 [ 2195.169384] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c008 [ 2195.173544] 0 [ 2195.177074] R13: 00007ffe5f3badff R14: 00007fc228c66300 R15: 0000000000022000 [ 2195.197881] 0 [ 2195.220498] 2717 [ 2195.247915] 0 [ 2195.302500] 2718 [ 2195.537939] 2718 2718 [ 2195.585044] Node 0 DMA32 free:514216kB min:36200kB low:45248kB high:54296kB active_anon:61904kB inactive_anon:180592kB active_file:48kB inactive_file:1744kB unevictable:0kB writepending:0kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:8224kB pagetables:5060kB bounce:0kB free_pcp:844kB local_pcp:128kB free_cma:0kB [ 2195.622478] warn_alloc_show_mem: 1 callbacks suppressed [ 2195.622483] Mem-Info: [ 2195.644086] active_anon:16840 inactive_anon:53477 isolated_anon:0 [ 2195.644086] active_file:65 inactive_file:1374 isolated_file:25 [ 2195.644086] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2195.644086] slab_reclaimable:12202 slab_unreclaimable:126300 [ 2195.644086] mapped:36523 shmem:54035 pagetables:2897 bounce:0 [ 2195.644086] free:212462 free_pcp:271 free_cma:0 [ 2195.693787] lowmem_reserve[]: 0 0 0 0 0 [ 2195.701930] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2195.733090] Node 0 active_anon:62104kB inactive_anon:180592kB active_file:148kB inactive_file:1984kB unevictable:0kB isolated(anon):0kB isolated(file):100kB mapped:108176kB dirty:0kB writeback:0kB shmem:182480kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2195.768920] lowmem_reserve[]: 0 0 0 0 0 [ 2195.772969] Node 1 Normal free:173320kB min:53696kB low:67120kB high:80544kB active_anon:5356kB inactive_anon:33316kB active_file:112kB inactive_file:3912kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:2240kB pagetables:6380kB bounce:0kB free_pcp:748kB local_pcp:120kB free_cma:0kB [ 2195.807975] Node 0 DMA: 11*4kB (UME) 13*8kB (UM) 18*16kB (UM) 14*32kB (UME) 10*64kB (UME) 7*128kB (UME) 8*256kB (UME) 5*512kB (UE) 2*1024kB (UE) 1*2048kB (M) 0*4096kB = 11124kB [ 2195.816095] Node 1 active_anon:5356kB inactive_anon:33316kB active_file:112kB inactive_file:3912kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:37916kB dirty:0kB writeback:0kB shmem:33660kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2195.837887] Node 0 DMA32: 513*4kB (UE) 327*8kB (UME) 23*16kB (UE) 426*32kB (UE) 6608*64kB (UE) 2253*128kB (UM) 404*256kB (U) 10*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 838508kB [ 2195.870725] lowmem_reserve[]: 0 0 0 0 0 [ 2195.901983] Node 0 DMA free:11124kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2195.917878] Node 0 [ 2195.933596] Node 0 DMA: 11*4kB (UME) 13*8kB (UM) 18*16kB (UM) 14*32kB (UME) 10*64kB (UME) 7*128kB (UME) 8*256kB (UME) 5*512kB (UE) 2*1024kB (UE) 1*2048kB (M) 0*4096kB = 11124kB [ 2195.937996] Normal: [ 2195.959022] Node 0 DMA32: 11316*4kB (UME) 310*8kB (UME) 25*16kB (UE) 429*32kB (UME) 6605*64kB (UME) 2254*128kB (U) 407*256kB (U) 10*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 882416kB [ 2195.968343] 0*4kB [ 2195.983834] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2195.987881] 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2195.991484] Node 0 [ 2196.004833] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2196.018389] Node 1 Normal: 52*4kB (UM) 27*8kB (UM) 60*16kB (UM) 840*32kB (UM) 2077*64kB (UM) 112*128kB (UM) 6*256kB (UM) 2*512kB (UM) 6*1024kB (UM) 5*2048kB (UM) 30*4096kB (U) = 317352kB [ 2196.024032] DMA32 free:918608kB min:36200kB low:45248kB high:54296kB active_anon:61972kB inactive_anon:180584kB active_file:740kB inactive_file:2700kB unevictable:0kB writepending:12kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:8192kB pagetables:5092kB bounce:0kB free_pcp:996kB local_pcp:204kB free_cma:0kB [ 2196.047896] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2196.072139] Node 1 Normal: 52*4kB (UM) 27*8kB (UM) 60*16kB (UM) 840*32kB (UM) 2077*64kB (UM) 112*128kB (UM) 6*256kB (UM) 2*512kB (UM) 6*1024kB (UM) 5*2048kB (UM) 30*4096kB (U) = 317352kB [ 2196.098402] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2196.107272] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2196.107882] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2196.123919] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2196.135794] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2196.144967] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2196.149668] lowmem_reserve[]: 0 0 0 0 0 [ 2196.159399] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2196.161801] 56013 total pagecache pages [ 2196.174664] 0 pages in swap cache [ 2196.177914] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2196.181175] Swap cache stats: add 0, delete 0, find 0/0 [ 2196.214658] 56013 total pagecache pages [ 2196.219430] 0 pages in swap cache [ 2196.224056] Swap cache stats: add 0, delete 0, find 0/0 [ 2196.227918] lowmem_reserve[]: 0 0 0 0 0 [ 2196.233648] Node 1 Normal free:317804kB min:53696kB low:67120kB high:80544kB active_anon:5360kB inactive_anon:33316kB active_file:1684kB inactive_file:2344kB unevictable:0kB writepending:76kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:2240kB pagetables:6380kB bounce:0kB free_pcp:832kB local_pcp:712kB free_cma:0kB [ 2196.234690] Free swap = 0kB [ 2196.268016] Free swap = 0kB [ 2196.271142] Total swap = 0kB [ 2196.274264] 2097051 pages RAM [ 2196.277464] 0 pages HighMem/MovableOnly [ 2196.281950] 363848 pages reserved [ 2196.285410] 0 pages cma reserved [ 2196.289204] Total swap = 0kB [ 2196.292244] 2097051 pages RAM [ 2196.295345] 0 pages HighMem/MovableOnly [ 2196.299809] Out of memory (oom_kill_allocating_task): Kill process 28971 (systemd-journal) score 0 or sacrifice child [ 2196.311083] 363848 pages reserved [ 2196.314629] 0 pages cma reserved [ 2196.318516] Killed process 28971 (systemd-journal) total-vm:46096kB, anon-rss:472kB, file-rss:4kB, shmem-rss:2448kB [ 2196.319809] lowmem_reserve[]: [ 2196.330778] oom_reaper: reaped process 28971 (systemd-journal), now anon-rss:0kB, file-rss:0kB, shmem-rss:2448kB [ 2196.360377] 0 0 0 0 0 [ 2196.370917] Node 0 DMA: 11*4kB (UME) 13*8kB (UM) 18*16kB (UM) 14*32kB (UME) 10*64kB (UME) 7*128kB (UME) 8*256kB (UME) 5*512kB (UE) 2*1024kB (UE) 1*2048kB (M) 0*4096kB = 11124kB [ 2196.396562] Node 0 DMA32: 16407*4kB (UE) 5277*8kB (UE) 4318*16kB (UME) 2338*32kB (UE) 6592*64kB (UE) 2251*128kB (UM) 406*256kB (UM) 9*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 1070308kB [ 2196.413868] systemd[1]: systemd-journald.service: Failed with result 'signal'. [ 2196.423186] systemd[1]: systemd-journald.service: Service has no hold-off time, scheduling restart. [ 2196.433203] systemd[1]: Stopped Journal Service. [ 2196.438393] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2196.471188] systemd[1]: Starting Journal Service... [ 2196.476939] systemd[1]: Started Load/Save RF Kill Switch Status. [ 2196.483282] Node 1 Normal: 3578*4kB (UM) 444*8kB (UM) 236*16kB (UM) 900*32kB (UM) 2127*64kB (UM) 127*128kB (UM) 11*256kB (UM) 12*512kB (UM) 7*1024kB (UM) 5*2048kB (UM) 30*4096kB (U) = 352072kB [ 2196.513289] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2196.522313] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2196.537966] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2196.547355] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2196.563213] 56839 total pagecache pages [ 2196.567962] 0 pages in swap cache [ 2196.571904] Swap cache stats: add 0, delete 0, find 0/0 [ 2196.582262] Free swap = 0kB [ 2196.585373] Total swap = 0kB [ 2196.588828] 2097051 pages RAM [ 2196.591993] 0 pages HighMem/MovableOnly [ 2196.596041] 363848 pages reserved [ 2196.600270] 0 pages cma reserved 14:59:10 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x80000000, 0xe}) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x65, &(0x7f0000000000), &(0x7f00000000c0)=0x4) 14:59:10 executing program 4: r0 = socket$packet(0x11, 0x0, 0x300) sendto$packet(r0, &(0x7f00000016c0)="4904e565354dbeee3d0a7d6117a5fa50d4124c31ad4be15b016935fe4d7ed3b0cc47c0e2970e56ada969eba342aebd5002e1865b94f2efb1d5da3cce09f907f5df737234138c54714c7cd52d41cde59586648c4b92d01e8c0da51e3bf6d77c6277bc8966ece594c5f86345d6b9e8f592beb946538f37a21da2d5811e373b256a6f5ede09af2e579547a468c7dcbf25", 0x8f, 0x40, &(0x7f0000001780)={0x11, 0xf6, 0x0, 0x1, 0x4, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x14) 14:59:10 executing program 0: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x125001, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x58) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x100301, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x80000000, 0xe}) 14:59:10 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$PPPIOCGL2TPSTATS(0xffffffffffffffff, 0x80487436, &(0x7f00000000c0)="5c611b9b502021ab4ad768701eb69a07c48e0a1e30edd70e3adee8e7b5542b699162572d42b994e2f936311dc372142d73aca85ee03f2c0565fae7b5dbef25963a5f22a8b854b29005f5b2d3420b79086c179b9d0f4af170466b6be65cd90aa2e67f38f74765d32f58eddd8ac80c6752d025c600adb59ed03ecfc3eddf3e") ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x80000000, 0xe}) [ 2196.732314] systemd-journald[29263]: File /run/log/journal/04d8c135ee6b410280ba31a58c89679d/system.journal corrupted or uncleanly shut down, renaming and replacing. 14:59:11 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x240000, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x2e0040, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000000c0)={0x4, 0x8, 0x1}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x80000000, 0xe}) [ 2197.103623] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2197.121582] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2197.153078] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2197.176153] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2197.202910] device bridge_slave_1 left promiscuous mode [ 2197.223791] bridge0: port 2(bridge_slave_1) entered disabled state [ 2197.248143] device bridge_slave_0 left promiscuous mode [ 2197.268105] bridge0: port 1(bridge_slave_0) entered disabled state [ 2197.304662] device veth1_macvtap left promiscuous mode [ 2197.321560] device veth0_macvtap left promiscuous mode [ 2197.326945] device veth1_vlan left promiscuous mode [ 2197.358407] device veth0_vlan left promiscuous mode [ 2197.466074] syz-executor.0: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2197.467626] syz-executor.3: [ 2197.506571] syz-executor.0 cpuset= [ 2197.511311] page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2197.517020] / mems_allowed=0-1 [ 2197.553530] CPU: 0 PID: 29274 Comm: syz-executor.0 Not tainted 4.14.229-syzkaller #0 [ 2197.561457] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2197.570629] syz-executor.3 cpuset= [ 2197.570867] Call Trace: [ 2197.570869] / mems_allowed=0-1 [ 2197.574433] dump_stack+0x1b2/0x281 [ 2197.583838] warn_alloc.cold+0x96/0x1cc [ 2197.587833] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2197.592865] ? zone_watermark_ok_safe+0x220/0x220 [ 2197.597743] __alloc_pages_nodemask+0x2127/0x2720 [ 2197.602595] ? switch_mm_irqs_off+0x601/0xeb0 [ 2197.607137] ? lock_acquire+0x170/0x3f0 [ 2197.611133] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2197.615999] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2197.621466] ? __mutex_unlock_slowpath+0x75/0x770 [ 2197.626317] ? policy_node+0x13/0x110 [ 2197.630130] alloc_pages_current+0x155/0x260 [ 2197.634554] ion_page_pool_alloc+0x118/0x1b0 [ 2197.638982] ion_system_heap_allocate+0x133/0x8c0 [ 2197.643840] ? ion_alloc+0x187/0x810 [ 2197.647576] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2197.653048] ? ion_system_contig_heap_create+0x130/0x130 [ 2197.658514] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2197.663554] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2197.668418] ion_alloc+0x204/0x810 [ 2197.671981] ? ion_dma_buf_release+0x40/0x40 [ 2197.676414] ? __might_fault+0x177/0x1b0 [ 2197.680498] ion_ioctl+0xea/0x1f0 [ 2197.684063] ? ion_query_heaps+0x360/0x360 [ 2197.688315] ? ion_query_heaps+0x360/0x360 [ 2197.692602] do_vfs_ioctl+0x75a/0xff0 [ 2197.696424] ? ioctl_preallocate+0x1a0/0x1a0 [ 2197.700847] ? lock_downgrade+0x740/0x740 [ 2197.705002] ? __fget+0x225/0x360 [ 2197.708450] ? do_vfs_ioctl+0xff0/0xff0 [ 2197.712422] ? security_file_ioctl+0x83/0xb0 [ 2197.716842] SyS_ioctl+0x7f/0xb0 [ 2197.720207] ? do_vfs_ioctl+0xff0/0xff0 [ 2197.724186] do_syscall_64+0x1d5/0x640 [ 2197.728085] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2197.733277] RIP: 0033:0x466459 [ 2197.736473] RSP: 002b:00007f78296bb188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2197.744193] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 2197.751471] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2197.758783] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2197.766060] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2197.773357] R13: 00007ffd4f3c2b7f R14: 00007f78296bb300 R15: 0000000000022000 [ 2197.808797] CPU: 1 PID: 29278 Comm: syz-executor.3 Not tainted 4.14.229-syzkaller #0 [ 2197.816716] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2197.826080] Call Trace: [ 2197.828681] dump_stack+0x1b2/0x281 [ 2197.832314] warn_alloc.cold+0x96/0x1cc [ 2197.836293] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2197.841331] ? zone_watermark_ok_safe+0x220/0x220 [ 2197.846203] __alloc_pages_nodemask+0x2127/0x2720 [ 2197.851240] ? lock_acquire+0x170/0x3f0 [ 2197.855235] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2197.860100] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2197.865568] ? __mutex_unlock_slowpath+0x75/0x770 [ 2197.870431] alloc_pages_current+0x155/0x260 [ 2197.874855] ion_page_pool_alloc+0x118/0x1b0 [ 2197.879286] ion_system_heap_allocate+0x133/0x8c0 [ 2197.884161] ? ion_alloc+0x187/0x810 [ 2197.887876] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2197.893339] ? ion_system_contig_heap_create+0x130/0x130 [ 2197.898800] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2197.903831] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2197.908772] ion_alloc+0x204/0x810 [ 2197.912319] ? ion_dma_buf_release+0x40/0x40 [ 2197.916769] ? __might_fault+0x177/0x1b0 [ 2197.920841] ion_ioctl+0xea/0x1f0 [ 2197.924299] ? ion_query_heaps+0x360/0x360 [ 2197.928545] ? ion_query_heaps+0x360/0x360 [ 2197.932790] do_vfs_ioctl+0x75a/0xff0 [ 2197.936603] ? ioctl_preallocate+0x1a0/0x1a0 [ 2197.941021] ? lock_downgrade+0x740/0x740 [ 2197.945231] ? __fget+0x225/0x360 [ 2197.948694] ? do_vfs_ioctl+0xff0/0xff0 [ 2197.952703] ? security_file_ioctl+0x83/0xb0 [ 2197.957215] SyS_ioctl+0x7f/0xb0 [ 2197.960590] ? do_vfs_ioctl+0xff0/0xff0 [ 2197.964573] do_syscall_64+0x1d5/0x640 [ 2197.968473] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2197.968475] Mem-Info: [ 2197.968497] active_anon:16759 inactive_anon:55504 isolated_anon:0 [ 2197.968497] active_file:823 inactive_file:5767 isolated_file:0 [ 2197.968497] unevictable:0 dirty:46 writeback:0 unstable:0 [ 2197.968497] slab_reclaimable:12177 slab_unreclaimable:126571 [ 2197.968497] mapped:39331 shmem:56075 pagetables:2882 bounce:0 [ 2197.968497] free:14044 free_pcp:284 free_cma:0 [ 2197.973690] RIP: 0033:0x466459 [ 2197.976129] Node 0 active_anon:61804kB inactive_anon:188700kB active_file:3268kB inactive_file:22992kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:122440kB dirty:92kB writeback:0kB shmem:190648kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2198.009773] RSP: 002b:00007fb199b88188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2198.009785] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 2198.009790] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2198.009795] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2198.009799] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2198.009804] R13: 00007ffe54ba022f R14: 00007fb199b88300 R15: 0000000000022000 [ 2198.135720] syz-fuzzer invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 2198.187892] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 2198.192742] CPU: 0 PID: 20454 Comm: syz-fuzzer Not tainted 4.14.229-syzkaller #0 [ 2198.200281] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2198.209639] Call Trace: [ 2198.212258] dump_stack+0x1b2/0x281 [ 2198.215900] dump_header+0x178/0x82f [ 2198.219613] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2198.224723] ? ___ratelimit+0x2cd/0x530 [ 2198.228726] oom_kill_process.cold+0x10/0xa40 [ 2198.233243] out_of_memory+0xe3e/0x1190 [ 2198.237224] ? oom_killer_disable+0x1c0/0x1c0 [ 2198.241729] ? mutex_trylock+0x152/0x1a0 [ 2198.245799] __alloc_pages_nodemask+0x23e1/0x2720 [ 2198.250668] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2198.255535] alloc_pages_current+0x155/0x260 [ 2198.259960] filemap_fault+0x11a1/0x1ad0 [ 2198.264041] ext4_filemap_fault+0x84/0xb0 [ 2198.268236] __do_fault+0xfa/0x380 [ 2198.271778] __handle_mm_fault+0x2497/0x4620 [ 2198.276194] ? vm_insert_page+0x7c0/0x7c0 [ 2198.280355] ? mark_held_locks+0xa6/0xf0 [ 2198.284446] handle_mm_fault+0x455/0x9c0 [ 2198.288522] __do_page_fault+0x549/0xad0 [ 2198.292594] ? spurious_fault+0x640/0x640 [ 2198.296747] ? do_page_fault+0x60/0x500 [ 2198.300723] ? page_fault+0x2f/0x50 [ 2198.304346] page_fault+0x45/0x50 [ 2198.307798] RIP: 334a80:0x2a [ 2198.310805] RSP: 0370:000000c000783e40 EFLAGS: 00000003 [ 2198.327751] device hsr_slave_1 left promiscuous mode [ 2198.386022] device hsr_slave_0 left promiscuous mode [ 2198.393429] Node 1 active_anon:5232kB inactive_anon:33316kB active_file:12kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:34816kB dirty:8kB writeback:0kB shmem:33652kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2198.437584] team0 (unregistering): Port device team_slave_1 removed [ 2198.450689] Node 0 DMA free:10968kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2198.485161] team0 (unregistering): Port device team_slave_0 removed [ 2198.497772] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 2198.505947] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2198.518054] Node 0 DMA32 free:19104kB min:36200kB low:45248kB high:54296kB active_anon:61804kB inactive_anon:188700kB active_file:592kB inactive_file:752kB unevictable:0kB writepending:48kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:8128kB pagetables:5148kB bounce:0kB free_pcp:332kB local_pcp:264kB free_cma:0kB [ 2198.554673] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 2198.562347] Mem-Info: [ 2198.564786] active_anon:16759 inactive_anon:55504 isolated_anon:0 [ 2198.564786] active_file:33 inactive_file:9 isolated_file:21 [ 2198.564786] unevictable:0 dirty:14 writeback:0 unstable:0 [ 2198.564786] slab_reclaimable:12162 slab_unreclaimable:125750 [ 2198.564786] mapped:35179 shmem:56075 pagetables:2882 bounce:0 [ 2198.564786] free:13921 free_pcp:72 free_cma:0 [ 2198.579214] lowmem_reserve[]: [ 2198.599497] Node 0 active_anon:61804kB inactive_anon:188700kB active_file:120kB inactive_file:28kB unevictable:0kB isolated(anon):0kB isolated(file):84kB mapped:105900kB dirty:48kB writeback:0kB shmem:190648kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2198.632238] Node 1 active_anon:5232kB inactive_anon:33316kB active_file:12kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:34816kB dirty:8kB writeback:0kB shmem:33652kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2198.632654] 0 [ 2198.671107] bond0 (unregistering): Released all slaves [ 2198.678018] Node 0 DMA free:10968kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2198.682934] 0 0 0 0 [ 2198.713919] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2198.722202] lowmem_reserve[]: [ 2198.744716] lowmem_reserve[]: [ 2198.744885] 0 2717 2718 2718 2718 [ 2198.753094] 0 [ 2198.756465] Node 0 [ 2198.756467] 0 0 0 0 [ 2198.762316] DMA32 free:19448kB min:36200kB low:45248kB high:54296kB active_anon:61804kB inactive_anon:188700kB active_file:592kB inactive_file:752kB unevictable:0kB writepending:48kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:8128kB pagetables:5148kB bounce:0kB free_pcp:104kB local_pcp:0kB free_cma:0kB [ 2198.763628] Node 1 Normal free:26776kB min:53696kB low:67120kB high:80544kB active_anon:5232kB inactive_anon:33316kB active_file:12kB inactive_file:8kB unevictable:0kB writepending:8kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:2240kB pagetables:6380kB bounce:0kB free_pcp:0kB local_pcp:120kB free_cma:0kB [ 2198.807899] lowmem_reserve[]: 0 0 0 0 0 [ 2198.838002] lowmem_reserve[]: 0 0 0 0 0 [ 2198.839214] Node 0 [ 2198.843144] Node 0 [ 2198.843161] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2198.843168] lowmem_reserve[]: [ 2198.845400] DMA: [ 2198.847642] 0 [ 2198.873895] 8*4kB (ME) 5*8kB (ME) 17*16kB (UM) 14*32kB (UME) 9*64kB (UME) 7*128kB (UME) 8*256kB (UME) 5*512kB (UE) 2*1024kB (UE) 1*2048kB (M) 0*4096kB = 10968kB [ 2198.896382] Node 0 DMA32: 960*4kB (UME) 189*8kB (UME) 81*16kB (UME) [ 2198.896422] 0 0 [ 2198.903000] 63*32kB (UME) 58*64kB (UM) 25*128kB (M) 10*256kB (UM) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18136kB [ 2198.903043] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2198.903092] Node 1 Normal: 21*4kB (UM) 10*8kB (UM) 6*16kB (UM) 723*32kB (UM) 7*64kB (UM) [ 2198.918424] 0 [ 2198.928485] 6*128kB (M) 1*256kB (M) 0*512kB 2*1024kB (M) 0*2048kB 0*4096kB = 26916kB [ 2198.945595] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2198.955320] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2198.964749] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2198.967004] 0 [ 2198.975090] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2198.986191] 56127 total pagecache pages [ 2198.990172] Node 1 Normal free:26772kB min:53696kB low:67120kB high:80544kB active_anon:5232kB inactive_anon:33316kB active_file:12kB inactive_file:8kB unevictable:0kB writepending:4kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:2240kB pagetables:6380kB bounce:0kB free_pcp:120kB local_pcp:0kB free_cma:0kB [ 2198.990241] 0 pages in swap cache [ 2199.028202] Swap cache stats: add 0, delete 0, find 0/0 [ 2199.033753] Free swap = 0kB [ 2199.036811] Total swap = 0kB [ 2199.044248] 2097051 pages RAM [ 2199.077167] 0 pages HighMem/MovableOnly [ 2199.090145] lowmem_reserve[]: 0 0 0 0 0 [ 2199.094187] Node 0 DMA: 8*4kB (ME) 5*8kB (ME) 17*16kB (UM) 14*32kB (UME) 9*64kB (UME) 7*128kB (UME) 8*256kB (UME) 5*512kB (UE) 2*1024kB (UE) 1*2048kB (M) 0*4096kB = 10968kB [ 2199.104696] 363848 pages reserved [ 2199.137907] Node 0 DMA32: 966*4kB (UME) 189*8kB (UME) 80*16kB (UME) 53*32kB (UME) 57*64kB (UM) 26*128kB (UM) 9*256kB (M) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 17632kB [ 2199.140034] syz-executor.2: [ 2199.174602] 0 pages cma reserved [ 2199.177894] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2199.204419] page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2199.207913] Node 1 Normal: 20*4kB (M) 10*8kB (UM) 6*16kB (UM) 719*32kB (UM) 7*64kB (UM) 6*128kB (M) 1*256kB (M) 0*512kB 2*1024kB (M) 0*2048kB 0*4096kB = 26784kB [ 2199.235377] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 2199.257877] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2199.265590] CPU: 1 PID: 29227 Comm: syz-executor.2 Not tainted 4.14.229-syzkaller #0 [ 2199.267136] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2199.275109] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2199.275115] Call Trace: [ 2199.275138] dump_stack+0x1b2/0x281 [ 2199.275151] warn_alloc.cold+0x96/0x1cc [ 2199.275163] ? zone_watermark_ok_safe+0x220/0x220 [ 2199.275173] ? usleep_range+0x130/0x130 [ 2199.275185] ? try_to_free_pages+0x23f/0x6e0 [ 2199.307907] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2199.311472] ? _find_next_bit+0xdb/0x100 [ 2199.315454] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2199.319985] ? run_timer_softirq+0x5a0/0x5a0 [ 2199.320004] __alloc_pages_nodemask+0x2127/0x2720 [ 2199.320022] ? lock_acquire+0x170/0x3f0 [ 2199.320038] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2199.347892] 56115 total pagecache pages [ 2199.351304] ? ion_page_pool_alloc+0x9e/0x1b0 [ 2199.355283] 0 pages in swap cache [ 2199.360348] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2199.360362] ? retint_kernel+0x2d/0x2d [ 2199.360379] alloc_pages_current+0x155/0x260 [ 2199.360393] ion_page_pool_alloc+0x118/0x1b0 [ 2199.360405] ion_system_heap_allocate+0x133/0x8c0 [ 2199.387899] Swap cache stats: add 0, delete 0, find 0/0 [ 2199.389766] ? _raw_spin_unlock+0x29/0x40 [ 2199.394158] Free swap = 0kB [ 2199.398998] ? _ion_heap_freelist_drain+0x6e/0x410 [ 2199.399008] ? ion_system_contig_heap_create+0x130/0x130 [ 2199.399021] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2199.399033] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2199.399046] ion_alloc+0x27a/0x810 [ 2199.417878] Total swap = 0kB [ 2199.421951] ? ion_dma_buf_release+0x40/0x40 [ 2199.427031] 2097051 pages RAM [ 2199.431868] ? __might_fault+0x177/0x1b0 [ 2199.431880] ion_ioctl+0xea/0x1f0 [ 2199.431890] ? ion_query_heaps+0x360/0x360 [ 2199.431902] ? ion_query_heaps+0x360/0x360 [ 2199.431913] do_vfs_ioctl+0x75a/0xff0 [ 2199.447902] 0 pages HighMem/MovableOnly [ 2199.450700] ? ioctl_preallocate+0x1a0/0x1a0 [ 2199.454345] 363848 pages reserved [ 2199.458581] ? lock_downgrade+0x740/0x740 [ 2199.458596] ? __fget+0x225/0x360 [ 2199.458608] ? do_vfs_ioctl+0xff0/0xff0 [ 2199.458619] ? security_file_ioctl+0x83/0xb0 [ 2199.458629] SyS_ioctl+0x7f/0xb0 [ 2199.458639] ? do_vfs_ioctl+0xff0/0xff0 [ 2199.487893] 0 pages cma reserved [ 2199.490841] do_syscall_64+0x1d5/0x640 [ 2199.495425] Out of memory (oom_kill_allocating_task): Kill process 20454 (syz-fuzzer) score 0 or sacrifice child [ 2199.498804] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2199.498814] RIP: 0033:0x466459 [ 2199.498818] RSP: 002b:00007fc228c87188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2199.498828] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 2199.498833] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2199.498838] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2199.498847] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2199.517974] Killed process 28036 (syz-executor.2) total-vm:84924kB, anon-rss:60kB, file-rss:0kB, shmem-rss:0kB [ 2199.520376] R13: 00007ffe5f3badff R14: 00007fc228c87300 R15: 0000000000022000 [ 2199.548393] oom_reaper: reaped process 28036 (syz-executor.2), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 2199.586177] warn_alloc_show_mem: 1 callbacks suppressed [ 2199.586181] Mem-Info: [ 2199.624568] active_anon:16772 inactive_anon:55504 isolated_anon:0 [ 2199.624568] active_file:22 inactive_file:0 isolated_file:0 [ 2199.624568] unevictable:0 dirty:1 writeback:0 unstable:0 [ 2199.624568] slab_reclaimable:12154 slab_unreclaimable:125255 [ 2199.624568] mapped:35151 shmem:56075 pagetables:2882 bounce:0 [ 2199.624568] free:13846 free_pcp:72 free_cma:0 [ 2199.663987] syz-fuzzer invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 2199.686869] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 2199.691757] CPU: 1 PID: 7965 Comm: syz-fuzzer Not tainted 4.14.229-syzkaller #0 [ 2199.699212] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2199.708572] Call Trace: [ 2199.711173] dump_stack+0x1b2/0x281 [ 2199.714808] dump_header+0x178/0x82f [ 2199.718528] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2199.723637] ? ___ratelimit+0x2cd/0x530 [ 2199.727637] oom_kill_process.cold+0x10/0xa40 [ 2199.732160] out_of_memory+0xe3e/0x1190 [ 2199.736160] ? oom_killer_disable+0x1c0/0x1c0 [ 2199.740665] ? mutex_trylock+0x152/0x1a0 [ 2199.744736] __alloc_pages_nodemask+0x23e1/0x2720 [ 2199.749597] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2199.754465] alloc_pages_current+0x155/0x260 [ 2199.758911] filemap_fault+0x11a1/0x1ad0 [ 2199.762986] ext4_filemap_fault+0x84/0xb0 [ 2199.767141] __do_fault+0xfa/0x380 [ 2199.770686] __handle_mm_fault+0x2497/0x4620 [ 2199.775103] ? vm_insert_page+0x7c0/0x7c0 [ 2199.779250] ? lock_downgrade+0x740/0x740 [ 2199.783406] ? mark_held_locks+0xa6/0xf0 [ 2199.787497] handle_mm_fault+0x455/0x9c0 [ 2199.791581] __do_page_fault+0x549/0xad0 [ 2199.795653] ? spurious_fault+0x640/0x640 [ 2199.799804] ? do_page_fault+0x60/0x500 [ 2199.803786] ? page_fault+0x2f/0x50 [ 2199.807420] page_fault+0x45/0x50 [ 2199.810878] RIP: 0000:0x940aec [ 2199.814065] RSP: 2e000:000000c00003dec8 EFLAGS: 0043b6a0 [ 2199.821041] Node 0 active_anon:61856kB inactive_anon:188700kB active_file:72kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:105788kB dirty:0kB writeback:0kB shmem:190648kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2199.861565] Node 1 active_anon:5232kB inactive_anon:33316kB active_file:16kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:34816kB dirty:4kB writeback:0kB shmem:33652kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2199.891069] Node 0 DMA free:10968kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2199.919627] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2199.924712] Node 0 DMA32 free:17632kB min:36200kB low:45248kB high:54296kB active_anon:61856kB inactive_anon:188700kB active_file:72kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:8096kB pagetables:5148kB bounce:0kB free_pcp:172kB local_pcp:120kB free_cma:0kB [ 2199.956039] Mem-Info: [ 2199.958528] active_anon:16772 inactive_anon:55504 isolated_anon:0 [ 2199.958528] active_file:22 inactive_file:0 isolated_file:0 [ 2199.958528] unevictable:0 dirty:1 writeback:0 unstable:0 [ 2199.958528] slab_reclaimable:12154 slab_unreclaimable:125255 [ 2199.958528] mapped:35151 shmem:56075 pagetables:2882 bounce:0 [ 2199.958528] free:13846 free_pcp:73 free_cma:0 [ 2199.994458] lowmem_reserve[]: 0 0 0 0 0 [ 2199.998554] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2200.026574] Node 0 active_anon:61856kB inactive_anon:188700kB active_file:100kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:105788kB dirty:0kB writeback:0kB shmem:190648kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2200.072875] lowmem_reserve[]: 0 0 0 0 0 [ 2200.076917] Node 1 Normal free:26772kB min:53696kB low:67120kB high:80544kB active_anon:5232kB inactive_anon:33316kB active_file:12kB inactive_file:8kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:2240kB pagetables:6380kB bounce:0kB free_pcp:244kB local_pcp:120kB free_cma:0kB [ 2200.110339] Node 1 active_anon:5232kB inactive_anon:33316kB active_file:12kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:34816kB dirty:0kB writeback:0kB shmem:33652kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2200.141983] lowmem_reserve[]: 0 0 0 0 0 [ 2200.146019] Node 0 DMA: 8*4kB (ME) 5*8kB (ME) 17*16kB (UM) 14*32kB (UME) 9*64kB (UME) 7*128kB (UME) 8*256kB (UME) 5*512kB (UE) 2*1024kB (UE) 1*2048kB (M) 0*4096kB = 10968kB [ 2200.166244] Node 0 DMA free:10968kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2200.196971] Node 0 DMA32: 966*4kB (UME) 191*8kB (UME) 80*16kB (UME) 54*32kB (UME) 57*64kB (UM) 26*128kB (UM) 9*256kB (M) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 17680kB [ 2200.216306] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2200.227149] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2200.236596] Node 0 DMA32 free:17632kB min:36200kB low:45248kB high:54296kB active_anon:61708kB inactive_anon:188700kB active_file:48kB inactive_file:48kB unevictable:0kB writepending:0kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:8064kB pagetables:5140kB bounce:0kB free_pcp:524kB local_pcp:344kB free_cma:0kB [ 2200.270400] Node 1 Normal: 21*4kB (UM) 10*8kB (UM) 5*16kB (M) 719*32kB (UM) 7*64kB (UM) 6*128kB (M) 1*256kB (M) 0*512kB 2*1024kB (M) 0*2048kB 0*4096kB = 26772kB [ 2200.285308] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2200.298633] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2200.307324] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2200.320556] lowmem_reserve[]: 0 0 0 0 0 [ 2200.324589] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2200.354452] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2200.373641] 56104 total pagecache pages [ 2200.377655] 0 pages in swap cache [ 2200.385485] Swap cache stats: add 0, delete 0, find 0/0 [ 2200.397114] lowmem_reserve[]: 0 0 0 0 0 [ 2200.405512] Node 1 Normal free:26772kB min:53696kB low:67120kB high:80544kB active_anon:5232kB inactive_anon:33316kB active_file:12kB inactive_file:8kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:2240kB pagetables:6380kB bounce:0kB free_pcp:244kB local_pcp:120kB free_cma:0kB [ 2200.445222] lowmem_reserve[]: 0 0 0 0 0 [ 2200.451559] Node 0 DMA: 8*4kB (ME) 5*8kB (ME) 17*16kB (UM) 14*32kB (UME) 9*64kB (UME) 7*128kB (UME) 8*256kB (UME) 5*512kB (UE) 2*1024kB (UE) 1*2048kB (M) 0*4096kB = 10968kB [ 2200.458136] Free swap = 0kB [ 2200.477870] Node 0 DMA32: 966*4kB (UME) 191*8kB (UME) 80*16kB (UME) 54*32kB (UME) 57*64kB (UM) 26*128kB (UM) 9*256kB (M) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 17680kB [ 2200.503495] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2200.512557] Total swap = 0kB [ 2200.517364] 2097051 pages RAM [ 2200.524500] Node 1 Normal: 21*4kB (UM) 10*8kB (UM) 5*16kB (M) 719*32kB (UM) 7*64kB (UM) 6*128kB (M) 1*256kB (M) 0*512kB 2*1024kB (M) 0*2048kB 0*4096kB = 26772kB [ 2200.531953] 0 pages HighMem/MovableOnly [ 2200.549472] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2200.566829] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2200.577722] 363848 pages reserved [ 2200.591685] 0 pages cma reserved [ 2200.597953] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2200.606893] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2200.637955] 56104 total pagecache pages [ 2200.641985] 0 pages in swap cache [ 2200.645431] Swap cache stats: add 0, delete 0, find 0/0 [ 2200.657955] Free swap = 0kB [ 2200.661008] Total swap = 0kB [ 2200.664027] 2097051 pages RAM [ 2200.667122] 0 pages HighMem/MovableOnly [ 2200.697920] 363848 pages reserved [ 2200.701408] 0 pages cma reserved [ 2200.704791] Out of memory (oom_kill_allocating_task): Kill process 7965 (syz-fuzzer) score 0 or sacrifice child [ 2200.787962] Killed process 16114 (syz-executor.3) total-vm:84924kB, anon-rss:64kB, file-rss:0kB, shmem-rss:0kB [ 2201.725209] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2201.743236] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2201.789404] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2201.796837] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2201.840321] device bridge_slave_1 left promiscuous mode [ 2201.845897] bridge0: port 2(bridge_slave_1) entered disabled state [ 2201.887231] device bridge_slave_0 left promiscuous mode [ 2201.913210] bridge0: port 1(bridge_slave_0) entered disabled state [ 2201.954083] device veth1_macvtap left promiscuous mode [ 2201.959583] device veth0_macvtap left promiscuous mode [ 2201.964923] device veth1_vlan left promiscuous mode [ 2201.978399] device veth0_vlan left promiscuous mode [ 2202.139127] systemd[1]: Started Journal Service. [ 2202.241250] device hsr_slave_1 left promiscuous mode [ 2202.261618] device hsr_slave_0 left promiscuous mode [ 2202.298430] team0 (unregistering): Port device team_slave_1 removed [ 2202.316240] team0 (unregistering): Port device team_slave_0 removed [ 2202.341857] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 2202.371921] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 2202.405845] bond0 (unregistering): Released all slaves 14:59:16 executing program 4: socket$packet(0x11, 0x2, 0x300) sendto$packet(0xffffffffffffffff, &(0x7f00000016c0)="4904e565354dbeee3d0a7d6117a5fa50d4124c31ad4be15b016935fe4d7ed3b0cc47c0e2970e56ada969eba342aebd5002e1865b94f2efb1d5da3cce09f907f5df737234138c54714c7cd52d41cde59586648c4b92d01e8c0da51e3bf6d77c6277bc8966ece594c5f86345d6b9e8f592beb946538f37a21da2d5811e373b256a6f5ede09af2e579547a468c7dcbf25", 0x8f, 0x40, &(0x7f0000001780)={0x11, 0xf6, 0x0, 0x1, 0x4, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x14) 14:59:16 executing program 2: openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/btrfs-control\x00', 0x0, 0x0) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000340)={0x0, @can, @can, @can}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x80000000, 0xe, 0x0, 0xffffffffffffffff}) sendmmsg$inet6(r0, &(0x7f0000000bc0)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000140)="e58edc69af038e9eef293283d2cb6d8e009b9637819c019d5a941cab0bdc53ad09da4fb96d86612977154f31d9717d2403477a525d2eab2cb38b967c912efc60a1e23e41011fd8208c09dbae027b673c8b28ca51d27625d1958dc60ccf9b71c35c7438d3976f2146ea4cfdac119be298ed2b5dc1b75db7b6d99ee4d44147903f3f80efd395d89ee5bd0d2057a56e", 0x8e}, {&(0x7f0000000200)="39adb7188a749defd77c9c9204b7f0abb75f3a0055222c9dc236cf907bde11cfb2183eb9b06ca5eb8ac0f37dac9fb359662b0f5dbdb18c92b530a611614afcabff5ea4b509aa12aa0a463e0b313c463b99dafbdaf0eea1438e3a477a21638243ff55be9bbbde0d872eba13c1b08778318470792f8a9ae062bd5a4f9505fb5bdbac7598f7815d67cfa5dc7ddccf76b07c3bb53e98a54f24", 0x97}, {&(0x7f00000000c0)}, {&(0x7f00000002c0)="4b23db41ebef60d6da2b9e6d49722a93ef05fef048c0e04e4e9e655d495de986a8e73daf642d1d92156a189c009b726a1bc0fdd511beae52b11d141405ddc256f1e5dcf5261429", 0x47}, {&(0x7f00000003c0)="5a8bbe33074fd1f8309c42851e09b7d2ddcc983c6545e34e61bd2b25d0068b3c88d29b7c176992c3608b0d6518769ae4556259fe7e677476a151b11487840f524fc8830e00ca1a0b2aa6967ba819efa3fc8e4345f5f041478a4683faf9b6588f416a7ac9663f70d0c80552bacfa876f8d9078bb6da9901485031bd51c4b615ca", 0x80}], 0x5, &(0x7f00000004c0)=[@hopopts={{0x148, 0x29, 0x36, {0x3a, 0x26, [], [@generic={0x5, 0xc0, "f4300bdf1cfd383e9185e3bb308634561d03da0821dd3f2d6b29edde31b99b351ca61f591a01478a6c0e0854c9a90618accd69841775885ccba157c7e50c6012fbdfd7b7ff380be7f2b5933a605ea1c85bdbfb3a3e158d761a191430ac3005934a20d366dff81b5b930d935aaff00bb131c011ba1603fabf2caf939b8b977096aabd98a58474d540aaefa0b3ca356a5e7348296b62a684309ffe2d45a927174564809df87fa51eeb2adcdfdc3e4830711c6e2899ef2ad1eada254884a9cafa9f"}, @jumbo={0xc2, 0x4, 0x200}, @hao={0xc9, 0x10, @loopback}, @generic={0x8, 0x42, "e062848d852f81c7791a18d2989b169d61c11f37144c070a76bd6b45434666d056a31dbb918aad00af6bbea7e7e2b38c1d6a69aa3f9f1098da5981f4a2d1017280e7"}, @hao={0xc9, 0x10, @initdev={0xfe, 0x88, [], 0x1, 0x0}}]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x174f}}, @hopopts_2292={{0x28, 0x29, 0x36, {0x0, 0x1, [], [@ra={0x5, 0x2, 0x7fff}, @pad1, @jumbo]}}}, @tclass={{0x14, 0x29, 0x43, 0x4c}}, @dontfrag={{0x14, 0x29, 0x3e, 0x5}}, @hopopts={{0x180, 0x29, 0x36, {0x21, 0x2c, [], [@calipso={0x7, 0x18, {0x2, 0x4, 0xde, 0xcfc0, [0x9, 0x3f]}}, @generic={0xff, 0xd2, "a639aad3ffa6bf1b4058063adf3caa1b0f6a76b635dedf1ce82b948a73c6896acfef01689bc8a8d132b01449e43495cd1cbf5b133fb44600f208133fa3f3fde98b328d5b5c4577f9317f8ad507c711ef4eb67d2925865e807ce47bdb92a4790e86579132ae96da1dc7ca71d3903ef39fea1e5ed424e838ded989cad8ad9317dcd6e2e0279bc82a54218530082cfeb1c3f342b73a327b0f2b6a33c54acab62e55029be446ce8fb5c6dc9ef9c65a9d22659a98f9fcfe82644f2a55ab23e78f9247df876d811e6a3132364b52deb16d9db52c9e"}, @enc_lim={0x4, 0x1, 0x66}, @hao={0xc9, 0x10, @private2}, @ra={0x5, 0x2, 0x5}, @calipso={0x7, 0x48, {0x3, 0x10, 0x9c, 0x7, [0x3, 0x2, 0x2, 0x34c0, 0xfffffffffffffffa, 0x1, 0xffffffff00000000, 0x2]}}, @hao={0xc9, 0x10, @dev={0xfe, 0x80, [], 0x17}}, @pad1]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x1}}, @hopopts={{0xd0, 0x29, 0x36, {0x89, 0x16, [], [@generic={0x1, 0xa9, "fdc8ef60a68ad51966d2012e9b360190443a23980d8e0588b4478284953377a48ada4eeec0d043f6250158501b3d9419c2518dfb9021df04882a70f504303d20e59346761a8868d6d6582ee8c3d86ff7b8142a1199b83752ee11b001f20724fa479c0cb1da7ef0a4d44c95cd81531f7c2e626bae88aff23a5462ce7a8ed3b73b383334109a604484873fa1b32e5e4cfd8d23ced352740e4fedc7d6ffde60d95b5d1481c29b6ff1d72c"}, @jumbo={0xc2, 0x4, 0x7}]}}}, @hoplimit={{0x14, 0x29, 0x34, 0x101}}, @tclass={{0x14, 0x29, 0x43, 0xfffffe92}}], 0x450}}, {{&(0x7f0000000940)={0xa, 0x4e24, 0x2, @private0={0xfc, 0x0, [], 0x1}, 0x7ff}, 0x1c, &(0x7f0000000ac0)=[{&(0x7f0000000980)="453f9fbcb487f2871748331a1489e90a6597405f3e125fcd2fc9d1613a79710f0253a214a4420bb7dcadb05e3f8cdbef0b1752d2bb44627785ac09a7c9ee0e223fcda946e1ba8162c0404f860e009083cd9fec2b22ba8bcb16a4a86408c4b928c438f311b49d74552999fe59e040a7852a60885bdfea98d1dcc1c1fa2a4570875711b268d278e7b7c903f772b1c5c6323739ff6d884f282872fa62a5d4bf94194463ccba04c5365fb98273a25a960758f8d33f1e0d51174e46463a23df6d4b6a9b7cc930d41dd002fe9024cc9d14", 0xce}, {&(0x7f0000000a80)="aa9a5b0af1de4094948b2f6dcfa90ab8b5fb4b0c8b34e77939853790d691d23f586dcccde32a99f8479c4cca3e9ba51d00f6af4d33952a4ea23576ec2279", 0x3e}], 0x2, &(0x7f0000000b00)=[@rthdr={{0x28, 0x29, 0x39, {0x0, 0x2, 0x2, 0x8, 0x0, [@private1]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x1}}, @rthdr_2292={{0x68, 0x29, 0x39, {0x3c, 0xa, 0x1, 0x80, 0x0, [@private0={0xfc, 0x0, [], 0x1}, @loopback, @private2={0xfc, 0x2, [], 0x1}, @rand_addr=' \x01\x00', @private2]}}}, @hoplimit={{0x14, 0x29, 0x34, 0xcf9}}], 0xc0}}], 0x2, 0x10) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000000)=0x4) 14:59:17 executing program 4: socket$packet(0x11, 0x2, 0x300) sendto$packet(0xffffffffffffffff, &(0x7f00000016c0)="4904e565354dbeee3d0a7d6117a5fa50d4124c31ad4be15b016935fe4d7ed3b0cc47c0e2970e56ada969eba342aebd5002e1865b94f2efb1d5da3cce09f907f5df737234138c54714c7cd52d41cde59586648c4b92d01e8c0da51e3bf6d77c6277bc8966ece594c5f86345d6b9e8f592beb946538f37a21da2d5811e373b256a6f5ede09af2e579547a468c7dcbf25", 0x8f, 0x40, &(0x7f0000001780)={0x11, 0xf6, 0x0, 0x1, 0x4, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x14) 14:59:17 executing program 4: socket$packet(0x11, 0x2, 0x300) sendto$packet(0xffffffffffffffff, &(0x7f00000016c0)="4904e565354dbeee3d0a7d6117a5fa50d4124c31ad4be15b016935fe4d7ed3b0cc47c0e2970e56ada969eba342aebd5002e1865b94f2efb1d5da3cce09f907f5df737234138c54714c7cd52d41cde59586648c4b92d01e8c0da51e3bf6d77c6277bc8966ece594c5f86345d6b9e8f592beb946538f37a21da2d5811e373b256a6f5ede09af2e579547a468c7dcbf25", 0x8f, 0x40, &(0x7f0000001780)={0x11, 0xf6, 0x0, 0x1, 0x4, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x14) 14:59:17 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r0, 0x0, 0x0, 0x40, &(0x7f0000001780)={0x11, 0xf6, 0x0, 0x1, 0x4, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x14) 14:59:17 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r0, 0x0, 0x0, 0x0, &(0x7f0000001780)={0x11, 0xf6, 0x0, 0x1, 0x4, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x14) 14:59:17 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r0, 0x0, 0x0, 0x0, &(0x7f0000001780)={0x11, 0xf6, 0x0, 0x1, 0x4, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x14) [ 2203.312605] oom_reaper: reaped process 29278 (syz-executor.3), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 2203.380256] kworker/u4:8 invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=0 [ 2203.429753] kworker/u4:8 cpuset=/ mems_allowed=0-1 [ 2203.434763] CPU: 1 PID: 29326 Comm: kworker/u4:8 Not tainted 4.14.229-syzkaller #0 [ 2203.442469] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2203.451824] Call Trace: [ 2203.454437] dump_stack+0x1b2/0x281 [ 2203.458090] dump_header+0x178/0x82f [ 2203.461815] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2203.466922] ? ___ratelimit+0x2cd/0x530 [ 2203.470905] oom_kill_process.cold+0x10/0xa40 [ 2203.476803] ? lock_downgrade+0x740/0x740 [ 2203.480969] out_of_memory+0x2dc/0x1190 [ 2203.484968] ? oom_killer_disable+0x1c0/0x1c0 [ 2203.489471] ? mutex_trylock+0x152/0x1a0 [ 2203.493540] __alloc_pages_nodemask+0x23e1/0x2720 [ 2203.498424] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2203.503286] ? cache_grow_begin+0x3f/0x700 [ 2203.507546] cache_grow_begin+0x91/0x700 [ 2203.511634] fallback_alloc+0x207/0x2c0 [ 2203.515620] kmem_cache_alloc+0x1e5/0x3c0 [ 2203.519774] getname_kernel+0x4e/0x340 [ 2203.523664] call_usermodehelper_exec_async+0x2df/0x510 [ 2203.529031] ? call_usermodehelper_exec_work+0x2a0/0x2a0 [ 2203.534482] ret_from_fork+0x24/0x30 [ 2203.636206] Mem-Info: [ 2203.641591] active_anon:14648 inactive_anon:55508 isolated_anon:0 [ 2203.641591] active_file:9 inactive_file:17 isolated_file:0 [ 2203.641591] unevictable:0 dirty:14 writeback:0 unstable:0 [ 2203.641591] slab_reclaimable:12136 slab_unreclaimable:120972 [ 2203.641591] mapped:35268 shmem:56080 pagetables:1002 bounce:0 [ 2203.641591] free:13907 free_pcp:30 free_cma:0 [ 2203.675137] syz-executor.3: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2203.694015] Node 0 active_anon:57668kB inactive_anon:188692kB active_file:0kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:106140kB dirty:12kB writeback:0kB shmem:190636kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2203.732666] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 2203.737827] CPU: 1 PID: 29278 Comm: syz-executor.3 Not tainted 4.14.229-syzkaller #0 [ 2203.745713] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2203.755085] Call Trace: [ 2203.757683] dump_stack+0x1b2/0x281 [ 2203.761323] warn_alloc.cold+0x96/0x1cc [ 2203.766006] ? zone_watermark_ok_safe+0x220/0x220 [ 2203.770858] ? usleep_range+0x130/0x130 [ 2203.774850] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 2203.779956] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 2203.784987] ? run_timer_softirq+0x5a0/0x5a0 [ 2203.789405] __alloc_pages_nodemask+0x2127/0x2720 [ 2203.794262] ? lock_acquire+0x170/0x3f0 [ 2203.798258] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2203.803129] ? ion_page_pool_alloc+0x9e/0x1b0 [ 2203.807673] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2203.813153] alloc_pages_current+0x155/0x260 [ 2203.817586] ion_page_pool_alloc+0x118/0x1b0 [ 2203.822038] ion_system_heap_allocate+0x133/0x8c0 [ 2203.826903] ? ion_alloc+0x187/0x810 [ 2203.830636] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2203.836094] ? ion_system_contig_heap_create+0x130/0x130 [ 2203.841546] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2203.846564] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2203.851408] ion_alloc+0x204/0x810 [ 2203.854955] ? ion_dma_buf_release+0x40/0x40 [ 2203.859361] ? __might_fault+0x177/0x1b0 [ 2203.863423] ion_ioctl+0xea/0x1f0 [ 2203.866889] ? ion_query_heaps+0x360/0x360 [ 2203.871116] ? ion_query_heaps+0x360/0x360 [ 2203.875361] do_vfs_ioctl+0x75a/0xff0 [ 2203.879162] ? ioctl_preallocate+0x1a0/0x1a0 [ 2203.883569] ? lock_downgrade+0x740/0x740 [ 2203.887721] ? __fget+0x225/0x360 [ 2203.891178] ? do_vfs_ioctl+0xff0/0xff0 [ 2203.895155] ? security_file_ioctl+0x83/0xb0 [ 2203.899580] SyS_ioctl+0x7f/0xb0 [ 2203.902956] ? do_vfs_ioctl+0xff0/0xff0 [ 2203.906937] do_syscall_64+0x1d5/0x640 [ 2203.910832] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2203.916038] RIP: 0033:0x466459 [ 2203.919223] RSP: 002b:00007fb199b88188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2203.926946] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 2203.934233] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2203.941517] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2203.948786] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2203.956062] R13: 00007ffe54ba022f R14: 00007fb199b88300 R15: 0000000000022000 [ 2203.972070] Node 1 active_anon:924kB inactive_anon:33340kB active_file:60kB inactive_file:100kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:34932kB dirty:44kB writeback:0kB shmem:33684kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2204.004037] Node 0 DMA free:10972kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2204.035371] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2204.040544] Node 0 DMA32 free:18796kB min:36200kB low:45248kB high:54296kB active_anon:57652kB inactive_anon:188692kB active_file:68kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:7360kB pagetables:3036kB bounce:0kB free_pcp:24kB local_pcp:0kB free_cma:0kB [ 2204.061302] Mem-Info: [ 2204.074291] lowmem_reserve[]: 0 0 0 0 0 [ 2204.075282] active_anon:14600 inactive_anon:55508 isolated_anon:0 [ 2204.075282] active_file:12 inactive_file:12 isolated_file:0 [ 2204.075282] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2204.075282] slab_reclaimable:12128 slab_unreclaimable:120821 [ 2204.075282] mapped:35221 shmem:56080 pagetables:730 bounce:0 [ 2204.075282] free:14089 free_pcp:37 free_cma:0 [ 2204.078372] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2204.078392] lowmem_reserve[]: 0 0 0 0 0 [ 2204.078410] Node 1 Normal free:26420kB min:53696kB low:67120kB high:80544kB active_anon:784kB inactive_anon:33340kB active_file:16kB inactive_file:16kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:224kB pagetables:184kB bounce:0kB free_pcp:120kB local_pcp:120kB free_cma:0kB [ 2204.078428] lowmem_reserve[]: 0 0 0 0 0 [ 2204.078445] Node 0 DMA: 9*4kB (UME) 6*8kB (UME) 13*16kB (UM) 14*32kB (UME) 10*64kB (UME) 7*128kB (UME) 8*256kB (UME) 5*512kB (UE) 2*1024kB (UE) 1*2048kB (M) 0*4096kB = 10980kB [ 2204.078524] Node 0 DMA32: 1255*4kB (UME) 284*8kB (UME) 105*16kB (UME) 54*32kB (UME) 59*64kB (UME) 19*128kB (M) 8*256kB (UM) [ 2204.117093] Node 0 active_anon:57616kB inactive_anon:188692kB active_file:32kB inactive_file:32kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:106068kB dirty:0kB writeback:0kB shmem:190636kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2204.156632] 0*512kB [ 2204.172536] Node 1 active_anon:784kB inactive_anon:33340kB active_file:16kB inactive_file:16kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:34816kB dirty:0kB writeback:0kB shmem:33684kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2204.217376] 0*1024kB [ 2204.232358] Node 0 DMA free:10980kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2204.286186] 0*2048kB [ 2204.302452] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2204.310034] Node 0 DMA32 free:18956kB min:36200kB low:45248kB high:54296kB active_anon:57616kB inactive_anon:188692kB active_file:32kB inactive_file:32kB unevictable:0kB writepending:0kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:7328kB pagetables:2736kB bounce:0kB free_pcp:28kB local_pcp:28kB free_cma:0kB [ 2204.326410] 0*4096kB [ 2204.353568] lowmem_reserve[]: 0 0 0 0 0 [ 2204.364793] = 18956kB [ 2204.367241] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2204.368558] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2204.404727] Node 1 [ 2204.433821] lowmem_reserve[]: 0 0 0 0 0 [ 2204.455021] Node 1 Normal free:26420kB min:53696kB low:67120kB high:80544kB active_anon:784kB inactive_anon:33340kB active_file:16kB inactive_file:16kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:224kB pagetables:184kB bounce:0kB free_pcp:120kB local_pcp:0kB free_cma:0kB [ 2204.464751] Normal: [ 2204.498392] lowmem_reserve[]: 0 0 0 0 0 [ 2204.504779] Node 0 DMA: 9*4kB (UME) 6*8kB (UME) 13*16kB (UM) 14*32kB (UME) 10*64kB (UME) 7*128kB (UME) 8*256kB (UME) 5*512kB (UE) 2*1024kB (UE) 1*2048kB (M) 0*4096kB = 10980kB [ 2204.511973] 463*4kB (UM) 41*8kB (M) 21*16kB (UM) 15*32kB (UM) 14*64kB (UM) 12*128kB (UM) 4*256kB (UM) 3*512kB (M) 2*1024kB (M) 2*2048kB (M) 3*4096kB (U) = 26420kB [ 2204.535813] Node 0 DMA32: 1255*4kB (UME) 284*8kB (UME) 105*16kB (UME) 54*32kB (UME) 59*64kB (UME) 19*128kB (M) 8*256kB (UM) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18956kB [ 2204.565757] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2204.581043] IPVS: ftp: loaded support on port[0] = 21 [ 2204.599089] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2204.602870] Node 0 [ 2204.607702] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2204.607705] Normal: 0*4kB [ 2204.623089] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2204.627523] 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2204.650913] 56104 total pagecache pages [ 2204.653590] Node 1 Normal: [ 2204.654910] 0 pages in swap cache [ 2204.654918] 463*4kB (UM) 41*8kB (M) 21*16kB (UM) 15*32kB (UM) 14*64kB (UM) [ 2204.666086] Swap cache stats: add 0, delete 0, find 0/0 [ 2204.666094] Free swap = 0kB [ 2204.679158] 12*128kB (UM) 4*256kB (UM) 3*512kB (M) 2*1024kB (M) 2*2048kB (M) 3*4096kB (U) = 26420kB [ 2204.694607] Total swap = 0kB [ 2204.697650] 2097051 pages RAM [ 2204.699091] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2204.705393] 0 pages HighMem/MovableOnly [ 2204.720225] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2204.726941] 363848 pages reserved [ 2204.728864] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2204.728871] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2204.728876] 56104 total pagecache pages [ 2204.728885] 0 pages in swap cache [ 2204.728891] Swap cache stats: add 0, delete 0, find 0/0 [ 2204.728898] Free swap = 0kB [ 2204.732352] 0 pages cma reserved [ 2204.751030] Total swap = 0kB [ 2204.772233] Out of memory: Kill process 29273 (syz-executor.0) score 1004 or sacrifice child [ 2204.782934] 2097051 pages RAM [ 2204.786057] 0 pages HighMem/MovableOnly [ 2204.787738] Killed process 29274 (syz-executor.0) total-vm:93252kB, anon-rss:148kB, file-rss:34816kB, shmem-rss:0kB [ 2204.796402] 363848 pages reserved [ 2204.814523] 0 pages cma reserved [ 2204.818025] Bluetooth: hci0 command 0x0409 tx timeout [ 2204.855426] oom_reaper: reaped process 29274 (syz-executor.0), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 2204.897930] Bluetooth: hci1 command 0x0409 tx timeout [ 2205.075913] IPVS: ftp: loaded support on port[0] = 21 [ 2205.397540] chnl_net:caif_netlink_parms(): no params data found [ 2205.669058] chnl_net:caif_netlink_parms(): no params data found [ 2205.974652] bridge0: port 1(bridge_slave_0) entered blocking state [ 2206.015265] bridge0: port 1(bridge_slave_0) entered disabled state [ 2206.038954] device bridge_slave_0 entered promiscuous mode [ 2206.085481] bridge0: port 2(bridge_slave_1) entered blocking state [ 2206.099219] bridge0: port 2(bridge_slave_1) entered disabled state [ 2206.128037] device bridge_slave_1 entered promiscuous mode [ 2206.134831] bridge0: port 1(bridge_slave_0) entered blocking state [ 2206.142964] bridge0: port 1(bridge_slave_0) entered disabled state [ 2206.159136] device bridge_slave_0 entered promiscuous mode 14:59:20 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x8000, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x80000000, 0xe}) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/btrfs-control\x00', 0x0, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0xfffffffffffffed1) [ 2206.210966] bridge0: port 2(bridge_slave_1) entered blocking state [ 2206.218933] bridge0: port 2(bridge_slave_1) entered disabled state [ 2206.227189] device bridge_slave_1 entered promiscuous mode [ 2206.240598] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 2206.250257] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 2206.326007] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 2206.343711] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 2206.357144] team0: Port device team_slave_0 added [ 2206.374610] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 2206.404868] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 2206.419397] team0: Port device team_slave_1 added [ 2206.467416] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 2206.479154] team0: Port device team_slave_0 added [ 2206.511511] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 2206.530158] team0: Port device team_slave_1 added [ 2206.547408] syz-executor.3: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2206.565628] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 2206.574240] CPU: 1 PID: 29278 Comm: syz-executor.3 Not tainted 4.14.229-syzkaller #0 [ 2206.582185] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2206.591558] Call Trace: [ 2206.594173] dump_stack+0x1b2/0x281 [ 2206.597840] warn_alloc.cold+0x96/0x1cc [ 2206.601820] ? zone_watermark_ok_safe+0x220/0x220 [ 2206.606687] __alloc_pages_nodemask+0x2127/0x2720 [ 2206.611565] ? lock_acquire+0x170/0x3f0 [ 2206.615566] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2206.620461] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2206.625937] ? __mutex_unlock_slowpath+0x75/0x770 [ 2206.630838] ? retint_kernel+0x2d/0x2d [ 2206.634859] alloc_pages_current+0x155/0x260 [ 2206.639287] ion_page_pool_alloc+0x118/0x1b0 [ 2206.643714] ion_system_heap_allocate+0x133/0x8c0 [ 2206.648586] ? _raw_spin_unlock+0x29/0x40 [ 2206.652756] ? _ion_heap_freelist_drain+0x6e/0x410 [ 2206.657704] ? ion_system_contig_heap_create+0x130/0x130 [ 2206.663201] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2206.668244] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2206.673123] ion_alloc+0x27a/0x810 [ 2206.676681] ? ion_dma_buf_release+0x40/0x40 [ 2206.681118] ? __might_fault+0x177/0x1b0 [ 2206.685208] ion_ioctl+0xea/0x1f0 [ 2206.688682] ? ion_query_heaps+0x360/0x360 [ 2206.692929] ? ion_query_heaps+0x360/0x360 [ 2206.698839] do_vfs_ioctl+0x75a/0xff0 [ 2206.702672] ? ioctl_preallocate+0x1a0/0x1a0 [ 2206.707115] ? lock_downgrade+0x740/0x740 [ 2206.711288] ? __fget+0x225/0x360 [ 2206.714756] ? do_vfs_ioctl+0xff0/0xff0 [ 2206.718756] ? security_file_ioctl+0x83/0xb0 [ 2206.723197] SyS_ioctl+0x7f/0xb0 [ 2206.726582] ? do_vfs_ioctl+0xff0/0xff0 [ 2206.730569] do_syscall_64+0x1d5/0x640 [ 2206.734475] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2206.739673] RIP: 0033:0x466459 [ 2206.742870] RSP: 002b:00007fb199b88188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2206.750599] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 2206.757877] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2206.765168] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2206.772447] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2206.779738] R13: 00007ffe54ba022f R14: 00007fb199b88300 R15: 0000000000022000 [ 2206.788200] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2206.794463] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2206.825922] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2206.848028] Mem-Info: [ 2206.850558] active_anon:14614 inactive_anon:55506 isolated_anon:0 [ 2206.850558] active_file:1306 inactive_file:4125 isolated_file:0 [ 2206.850558] unevictable:0 dirty:14 writeback:0 unstable:0 [ 2206.850558] slab_reclaimable:12128 slab_unreclaimable:119804 [ 2206.850558] mapped:39251 shmem:56076 pagetables:752 bounce:0 [ 2206.850558] free:136375 free_pcp:61 free_cma:0 [ 2206.861441] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2206.892266] Node 0 active_anon:57572kB inactive_anon:188684kB active_file:2744kB inactive_file:12284kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:116588kB dirty:32kB writeback:0kB shmem:190620kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2206.921048] Bluetooth: hci0 command 0x041b tx timeout [ 2206.930201] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2206.959409] Node 1 active_anon:884kB inactive_anon:33340kB active_file:2480kB inactive_file:4216kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:40416kB dirty:24kB writeback:0kB shmem:33684kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2206.990866] Bluetooth: hci1 command 0x041b tx timeout [ 2207.000144] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2207.010085] Node 0 DMA free:11176kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2207.010111] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2207.050990] Node 0 DMA32 free:357732kB min:36200kB low:45248kB high:54296kB active_anon:57720kB inactive_anon:188684kB active_file:2768kB inactive_file:12428kB unevictable:0kB writepending:20kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:7456kB pagetables:2912kB bounce:0kB free_pcp:216kB local_pcp:192kB free_cma:0kB [ 2207.082449] lowmem_reserve[]: 0 0 0 0 0 [ 2207.086683] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2207.166639] lowmem_reserve[]: 0 0 0 0 0 [ 2207.171599] Node 1 Normal free:192732kB min:53696kB low:67120kB high:80544kB active_anon:832kB inactive_anon:33340kB active_file:2480kB inactive_file:4268kB unevictable:0kB writepending:16kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:224kB pagetables:200kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2207.212482] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2207.223211] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2207.254496] lowmem_reserve[]: 0 0 0 0 0 [ 2207.271389] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2207.281352] Node 0 DMA: 20*4kB (UME) 15*8kB (UME) 12*16kB (UM) 15*32kB (UME) 9*64kB (UME) 8*128kB (UME) 8*256kB (UME) 5*512kB (UE) 2*1024kB (UE) 1*2048kB (M) 0*4096kB = 11176kB [ 2207.309250] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2207.315551] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2207.321814] Node 0 DMA32: 609*4kB (UE) 10506*8kB (UE) 6173*16kB (UE) 4047*32kB (UE) 1*64kB (E) 0*128kB 71*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 332996kB [ 2207.369327] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2207.383355] Node 1 Normal: 12237*4kB (UM) 3087*8kB (UM) 1717*16kB (UM) 1037*32kB (UM) 508*64kB (UM) 29*128kB (U) 2*256kB (U) 12*512kB (U) 0*1024kB 26*2048kB (U) 1*4096kB (U) = 234524kB [ 2207.396829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2207.405688] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2207.423198] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2207.432814] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2207.440683] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 2207.453181] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2207.464109] 61646 total pagecache pages [ 2207.477174] syz-executor.0: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2207.479079] 0 pages in swap cache [ 2207.497290] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 2207.497935] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 2207.506254] Swap cache stats: add 0, delete 0, find 0/0 [ 2207.521163] CPU: 0 PID: 29585 Comm: syz-executor.0 Not tainted 4.14.229-syzkaller #0 [ 2207.521166] Free swap = 0kB [ 2207.521173] Total swap = 0kB [ 2207.529071] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2207.529076] Call Trace: [ 2207.529097] dump_stack+0x1b2/0x281 [ 2207.529111] warn_alloc.cold+0x96/0x1cc [ 2207.529122] ? zone_watermark_ok_safe+0x220/0x220 [ 2207.529144] __alloc_pages_nodemask+0x2127/0x2720 [ 2207.529154] ? io_schedule_timeout+0x140/0x140 [ 2207.529169] ? lock_acquire+0x170/0x3f0 [ 2207.529185] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2207.529202] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2207.529214] ? __mutex_unlock_slowpath+0x75/0x770 [ 2207.533687] 2097051 pages RAM [ 2207.535274] ? __sanitizer_cov_trace_pc+0x3d/0x50 [ 2207.535298] alloc_pages_current+0x155/0x260 [ 2207.558021] 0 pages HighMem/MovableOnly [ 2207.560000] ion_page_pool_alloc+0x118/0x1b0 [ 2207.560012] ion_system_heap_allocate+0x133/0x8c0 [ 2207.564907] 363848 pages reserved [ 2207.569455] ? ion_alloc+0x187/0x810 [ 2207.569466] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2207.569476] ? ion_system_contig_heap_create+0x130/0x130 [ 2207.569485] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2207.569497] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2207.569508] ion_alloc+0x204/0x810 [ 2207.569521] ? ion_dma_buf_release+0x40/0x40 [ 2207.569533] ? __might_fault+0x177/0x1b0 [ 2207.569551] ion_ioctl+0xea/0x1f0 [ 2207.569562] ? ion_query_heaps+0x360/0x360 [ 2207.569574] ? ion_query_heaps+0x360/0x360 [ 2207.569584] do_vfs_ioctl+0x75a/0xff0 [ 2207.569596] ? ioctl_preallocate+0x1a0/0x1a0 [ 2207.569605] ? lock_downgrade+0x740/0x740 [ 2207.569619] ? __fget+0x225/0x360 [ 2207.569631] ? do_vfs_ioctl+0xff0/0xff0 [ 2207.586513] 0 pages cma reserved [ 2207.588713] ? security_file_ioctl+0x83/0xb0 [ 2207.588724] SyS_ioctl+0x7f/0xb0 [ 2207.588732] ? do_vfs_ioctl+0xff0/0xff0 [ 2207.588743] do_syscall_64+0x1d5/0x640 [ 2207.588757] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2207.588765] RIP: 0033:0x466459 [ 2207.588770] RSP: 002b:00007f78296bb188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2207.721034] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 2207.728318] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2207.735599] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2207.742880] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2207.750156] R13: 00007ffd4f3c2b7f R14: 00007f78296bb300 R15: 0000000000022000 [ 2207.763520] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 2207.786024] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 2207.873188] device hsr_slave_0 entered promiscuous mode [ 2207.886841] device hsr_slave_1 entered promiscuous mode [ 2207.907009] device hsr_slave_0 entered promiscuous mode [ 2207.922525] device hsr_slave_1 entered promiscuous mode [ 2207.946108] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 2207.953892] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 2207.965437] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 2207.978905] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 2208.271525] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2208.279260] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2208.299999] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2208.306837] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2208.329725] device bridge_slave_1 left promiscuous mode [ 2208.335318] bridge0: port 2(bridge_slave_1) entered disabled state [ 2208.343827] device bridge_slave_0 left promiscuous mode [ 2208.349788] bridge0: port 1(bridge_slave_0) entered disabled state [ 2208.380463] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2208.395442] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2208.417019] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2208.437606] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2208.457540] device bridge_slave_1 left promiscuous mode [ 2208.473949] bridge0: port 2(bridge_slave_1) entered disabled state [ 2208.493421] device bridge_slave_0 left promiscuous mode [ 2208.510496] bridge0: port 1(bridge_slave_0) entered disabled state [ 2208.537126] device veth1_macvtap left promiscuous mode [ 2208.553266] device veth0_macvtap left promiscuous mode [ 2208.568977] device veth1_vlan left promiscuous mode [ 2208.585502] device veth0_vlan left promiscuous mode [ 2208.596680] device veth1_macvtap left promiscuous mode [ 2208.611781] device veth0_macvtap left promiscuous mode [ 2208.627668] device veth1_vlan left promiscuous mode [ 2208.637269] device veth0_vlan left promiscuous mode [ 2208.977221] device hsr_slave_1 left promiscuous mode [ 2208.988511] Bluetooth: hci0 command 0x040f tx timeout [ 2208.995279] device hsr_slave_0 left promiscuous mode [ 2209.029974] team0 (unregistering): Port device team_slave_1 removed [ 2209.053050] team0 (unregistering): Port device team_slave_0 removed [ 2209.059761] Bluetooth: hci1 command 0x040f tx timeout [ 2209.084277] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 2209.108166] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 2209.137957] Bluetooth: hci3 command 0x0409 tx timeout [ 2209.181505] bond0 (unregistering): Released all slaves [ 2209.342767] device hsr_slave_1 left promiscuous mode [ 2209.371729] device hsr_slave_0 left promiscuous mode [ 2209.428753] team0 (unregistering): Port device team_slave_1 removed [ 2209.449983] team0 (unregistering): Port device team_slave_0 removed [ 2209.470652] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 2209.492345] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 2209.556096] bond0 (unregistering): Released all slaves [ 2209.686703] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 2209.753465] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 2209.885576] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2209.916558] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2209.950891] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 2209.984399] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 2209.999895] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 2210.029323] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 2210.035458] 8021q: adding VLAN 0 to HW filter on device team0 [ 2210.068455] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2210.075573] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2210.110891] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 2210.120704] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 2210.128796] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2210.135875] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2210.168690] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2210.176698] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2210.218747] bridge0: port 1(bridge_slave_0) entered blocking state [ 2210.225193] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2210.260462] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 2210.266593] 8021q: adding VLAN 0 to HW filter on device team0 [ 2210.300683] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 2210.308804] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2210.316463] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2210.326067] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2210.358492] bridge0: port 2(bridge_slave_1) entered blocking state [ 2210.364903] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2210.400715] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 2210.413193] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 2210.439912] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2210.449381] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2210.457247] bridge0: port 1(bridge_slave_0) entered blocking state [ 2210.463713] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2210.498423] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2210.523676] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 2210.533339] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 2210.548245] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2210.555931] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2210.582178] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2210.600651] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2210.620672] bridge0: port 2(bridge_slave_1) entered blocking state [ 2210.627178] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2210.655898] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 2210.686670] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2210.701745] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2210.722846] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 2210.744143] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 2210.752524] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2210.768668] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2210.780039] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2210.798761] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2210.821223] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 2210.829745] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2210.847399] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 2210.868083] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2210.875844] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2210.890464] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 2210.908744] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2210.916670] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2210.939996] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2210.956608] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 2210.967011] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 2210.976889] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2210.992492] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2211.000270] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2211.010855] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2211.021454] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 2211.027545] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2211.039442] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 2211.050882] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 2211.058982] Bluetooth: hci0 command 0x0419 tx timeout [ 2211.064795] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2211.072968] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2211.081055] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2211.089341] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2211.114353] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 2211.130165] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 2211.136291] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2211.143232] Bluetooth: hci1 command 0x0419 tx timeout [ 2211.165674] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 2211.172720] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2211.193247] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2211.207143] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 2211.218106] Bluetooth: hci3 command 0x041b tx timeout [ 2211.224652] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 2211.234748] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2211.242711] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2211.250765] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2211.262547] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2211.415725] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 2211.436431] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 2211.452397] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2211.464868] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2211.487438] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 2211.488429] IPVS: ftp: loaded support on port[0] = 21 [ 2211.501608] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 2211.511055] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2211.526954] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2211.590093] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 2211.601228] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 2211.616063] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 2211.632323] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 2211.640612] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 2211.647552] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 2211.663146] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 2211.672370] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2211.682367] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2211.702658] IPVS: ftp: loaded support on port[0] = 21 [ 2211.711630] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 2211.724749] device veth0_vlan entered promiscuous mode [ 2211.732111] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2211.740399] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2211.748207] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2211.755770] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2211.769869] device veth0_vlan entered promiscuous mode [ 2211.779716] Bluetooth: hci4 command 0x0409 tx timeout [ 2211.792458] device veth1_vlan entered promiscuous mode [ 2211.804765] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2211.812675] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2211.827540] device veth1_vlan entered promiscuous mode [ 2211.934202] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 2211.954455] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 2211.962261] chnl_net:caif_netlink_parms(): no params data found [ 2211.981818] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 2211.995628] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 2212.010976] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2212.021952] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2212.035868] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2212.045293] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2212.064392] device veth0_macvtap entered promiscuous mode [ 2212.073980] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 2212.093909] device veth0_macvtap entered promiscuous mode [ 2212.100658] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 2212.118193] device veth1_macvtap entered promiscuous mode [ 2212.124647] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 2212.144540] device veth1_macvtap entered promiscuous mode [ 2212.152119] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 2212.166072] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 2212.202478] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 2212.225299] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 2212.235440] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 2212.320331] chnl_net:caif_netlink_parms(): no params data found [ 2212.350894] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2212.365177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2212.376224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2212.391411] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2212.402766] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 2212.414349] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2212.423752] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2212.439206] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2212.451600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2212.463476] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2212.476518] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2212.487621] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2212.503076] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 2212.510517] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2212.524837] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2212.532979] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2212.546501] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2212.554820] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2212.563468] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2212.576395] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2212.587199] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2212.599750] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2212.617504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2212.632801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2212.642341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2212.656759] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2212.672645] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 2212.679710] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2212.695873] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2212.715595] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2212.724928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2212.736389] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2212.747240] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2212.758260] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2212.769445] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 2212.776371] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2212.785875] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2212.795166] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2212.804186] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2212.813399] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2212.851214] bridge0: port 1(bridge_slave_0) entered blocking state [ 2212.857719] bridge0: port 1(bridge_slave_0) entered disabled state [ 2212.875312] device bridge_slave_0 entered promiscuous mode [ 2212.914245] bridge0: port 2(bridge_slave_1) entered blocking state [ 2212.925991] bridge0: port 2(bridge_slave_1) entered disabled state [ 2212.935786] device bridge_slave_1 entered promiscuous mode [ 2212.983241] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 2213.028757] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 2213.064506] bridge0: port 1(bridge_slave_0) entered blocking state [ 2213.071485] bridge0: port 1(bridge_slave_0) entered disabled state [ 2213.087236] device bridge_slave_0 entered promiscuous mode [ 2213.096261] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 2213.103781] team0: Port device team_slave_0 added [ 2213.110983] bridge0: port 2(bridge_slave_1) entered blocking state [ 2213.117351] bridge0: port 2(bridge_slave_1) entered disabled state [ 2213.127531] device bridge_slave_1 entered promiscuous mode [ 2213.139879] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 2213.147225] team0: Port device team_slave_1 added [ 2213.183112] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 2213.225766] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 2213.255395] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2213.262675] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2213.293561] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2213.298190] Bluetooth: hci3 command 0x040f tx timeout [ 2213.306298] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2213.316045] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2213.343338] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2213.355833] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 2213.363675] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 2213.372263] team0: Port device team_slave_0 added [ 2213.380531] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2213.387338] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2213.403191] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2213.410379] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2213.418608] device bridge_slave_1 left promiscuous mode [ 2213.424340] bridge0: port 2(bridge_slave_1) entered disabled state [ 2213.432027] device bridge_slave_0 left promiscuous mode [ 2213.437591] bridge0: port 1(bridge_slave_0) entered disabled state [ 2213.447014] device veth1_macvtap left promiscuous mode [ 2213.452524] device veth0_macvtap left promiscuous mode [ 2213.458296] device veth1_vlan left promiscuous mode [ 2213.463400] device veth0_vlan left promiscuous mode [ 2213.565514] device hsr_slave_1 left promiscuous mode [ 2213.579588] device hsr_slave_0 left promiscuous mode [ 2213.596013] team0 (unregistering): Port device team_slave_1 removed [ 2213.609370] team0 (unregistering): Port device team_slave_0 removed [ 2213.620865] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 2213.631965] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 2213.669523] bond0 (unregistering): Released all slaves [ 2213.686041] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 2213.702778] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 2213.710606] team0: Port device team_slave_1 added [ 2213.749215] device hsr_slave_0 entered promiscuous mode [ 2213.758724] device hsr_slave_1 entered promiscuous mode [ 2213.788673] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 2213.796755] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 2213.815149] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2213.822346] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2213.853017] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2213.865813] Bluetooth: hci4 command 0x041b tx timeout [ 2213.883766] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2213.908246] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2213.934490] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2213.949321] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 2213.966896] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 2214.050168] device hsr_slave_0 entered promiscuous mode [ 2214.057072] device hsr_slave_1 entered promiscuous mode [ 2214.073521] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 2214.094173] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 2214.266357] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 2214.392057] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2214.417798] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 2214.438744] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 2214.453813] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2214.463350] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2214.494508] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 2214.504308] 8021q: adding VLAN 0 to HW filter on device team0 [ 2214.522111] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 2214.536169] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 2214.552963] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2214.565858] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2214.584250] bridge0: port 1(bridge_slave_0) entered blocking state [ 2214.592040] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2214.630286] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 2214.642868] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2214.651781] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2214.670207] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2214.686815] bridge0: port 2(bridge_slave_1) entered blocking state [ 2214.694874] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2214.719564] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 2214.733274] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2214.747257] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 2214.762292] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2214.778852] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 2214.792884] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2214.800135] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2214.808875] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2214.820397] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 2214.841141] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 2214.851771] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2214.860481] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2214.871436] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2214.893118] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 2214.913491] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 2214.920791] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2214.932442] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2214.971408] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2214.998532] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2215.009111] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 2215.020033] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 2215.026132] 8021q: adding VLAN 0 to HW filter on device team0 [ 2215.048804] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2215.056603] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2215.090644] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 2215.096901] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2215.141247] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 2215.149436] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2215.157382] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2215.178454] bridge0: port 1(bridge_slave_0) entered blocking state [ 2215.185486] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2215.215248] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 2215.241051] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 2215.249151] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2215.257209] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2215.288523] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2215.318412] bridge0: port 2(bridge_slave_1) entered blocking state [ 2215.325051] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2215.349816] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 2215.360823] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 2215.378521] Bluetooth: hci3 command 0x0419 tx timeout [ 2215.387175] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2215.396315] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2215.408508] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2215.420831] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2215.430348] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 2215.450357] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 2215.458508] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2215.467260] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2215.498699] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2215.509701] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 2215.531891] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2215.540749] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2215.563651] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2215.581960] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 2215.601908] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2215.623530] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2215.656885] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 2215.679194] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2215.702197] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2215.717286] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 2215.732188] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2215.794454] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 2215.842999] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 2215.864152] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2215.873135] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2215.894772] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2215.938443] Bluetooth: hci4 command 0x040f tx timeout [ 2215.974456] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 2215.991888] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 2216.008535] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2216.020384] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2216.116863] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 2216.132140] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 2216.152190] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 2216.176913] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 2216.201943] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2216.210376] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2216.230970] device veth0_vlan entered promiscuous mode [ 2216.249437] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2216.272269] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2216.304928] device veth1_vlan entered promiscuous mode [ 2216.312060] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 2216.334032] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 2216.370056] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 2216.396653] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 2216.406047] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 2216.431473] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2216.439593] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready 14:59:30 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x200, 0x0) ioctl$KDGETMODE(r1, 0x4b3b, &(0x7f00000000c0)) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x80000000, 0xe}) 14:59:30 executing program 5: openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/btrfs-control\x00', 0x0, 0x0) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000340)={0x0, @can, @can, @can}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x80000000, 0xe}) r1 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCGIFMTU(r1, 0x8921, &(0x7f0000000000)={'batadv_slave_0\x00'}) 14:59:30 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x80000000, 0xe}) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/bsg\x00', 0x8c800, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(r1, 0xd0009411, &(0x7f0000000600)={{0x0, 0x0, 0x8000, 0x10000, 0x793d, 0x7fffffff, 0x0, 0x8, 0x6, 0x6, 0x0, 0x1ff, 0x0, 0x1}}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/btrfs-control\x00', 0x0, 0x0) ioctl$sock_SIOCDELRT(r4, 0x890c, &(0x7f0000000340)={0x0, @can, @can, @can}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000980)={'team0\x00'}) ioctl$sock_bt_cmtp_CMTPCONNADD(r4, 0x400443c8, &(0x7f0000000340)={r5}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x100, 0x7, 0x7, 0x20, 0xffffffffffffffff, 0x2, [], 0x0, 0xffffffffffffffff, 0x5, 0x4, 0x3}, 0x40) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r6, 0xc0709411, &(0x7f0000001600)=ANY=[@ANYRES64=r2, @ANYBLOB="000000000000000002000000000000002000000000000000030000000000000006000000000000000500000000000000000000800100010006000000e94900000800000000000000023800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003f0000000000000000000000000000000f43c5e6a600c6a59daee8a4fac65f2a118c702af1f8d7e35a00000000000000"]) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r6, 0x81f8943c, &(0x7f00000000c0)) sendmsg$ETHTOOL_MSG_STRSET_GET(r3, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB="0c014000", @ANYRES16=0x0, @ANYBLOB="00032cbd7000fbdbdf25010000007000018014000200687372300000000000000000000000001400020076657468315f746f5f627269646765001400020067726530000000000000000000000000140002006970366772653000000000000000000014000200776730000000000000000000000000000800030001000000040002804c0002802400018008000100050000000800010004000000080001000600000008000100010000002400018008000100010000000800010002000000080001000800000008000100050000003800028034000180080001000300000008000100070000000800010006000000080001000500000008000100020000000800010001000000"], 0x10c}, 0x1, 0x0, 0x0, 0x20001}, 0x40020010) [ 2216.452142] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2216.472587] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready 14:59:30 executing program 1: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x4b0081, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(r0, 0x111, 0x2, 0x0, 0x4) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/btrfs-control\x00', 0x20ca03, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x80000000, 0xe}) [ 2216.504220] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 2216.519368] device veth0_macvtap entered promiscuous mode [ 2216.525914] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready 14:59:30 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x6ca802, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000100)={0x80000000}) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x242801, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000000c0)={0x0, 0x4}) [ 2216.600318] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2216.616076] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2216.653259] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2216.704185] device veth1_macvtap entered promiscuous mode [ 2216.721408] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 2216.766655] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 2216.804864] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 2216.844167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2216.877217] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2216.906336] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2216.940414] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2216.975379] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2217.018109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2217.052848] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 2217.076557] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2217.102583] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2217.115572] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2217.147141] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2217.181847] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 2217.197088] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 2217.226782] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 2217.253947] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2217.287948] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2217.297233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2217.339684] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2217.375106] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2217.411985] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2217.440184] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 2217.447555] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2217.511505] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 2217.522089] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2217.534859] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2217.568720] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2217.601665] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2217.641949] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2217.650591] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2217.670709] device veth0_vlan entered promiscuous mode [ 2217.706381] device veth1_vlan entered promiscuous mode [ 2217.729599] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 2217.787824] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 2217.873868] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 2217.937013] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 2217.968849] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2217.981433] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 2218.015895] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2218.019162] Bluetooth: hci4 command 0x0419 tx timeout [ 2218.049735] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2218.094304] device veth0_macvtap entered promiscuous mode [ 2218.114804] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 2218.134819] syz-executor.0: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2218.136634] syz-executor.1: [ 2218.155934] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2218.174502] page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2218.187097] device veth1_macvtap entered promiscuous mode [ 2218.198630] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 2218.209063] CPU: 0 PID: 30249 Comm: syz-executor.0 Not tainted 4.14.229-syzkaller #0 [ 2218.214061] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 2218.216976] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2218.216981] Call Trace: [ 2218.217002] dump_stack+0x1b2/0x281 [ 2218.217017] warn_alloc.cold+0x96/0x1cc [ 2218.237625] syz-executor.1 cpuset= [ 2218.239524] ? zone_watermark_ok_safe+0x220/0x220 [ 2218.239548] __alloc_pages_nodemask+0x2127/0x2720 [ 2218.239559] ? __schedule+0x893/0x1de0 [ 2218.239575] ? lock_acquire+0x170/0x3f0 [ 2218.239590] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2218.239605] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2218.239617] ? __mutex_unlock_slowpath+0x75/0x770 [ 2218.239631] alloc_pages_current+0x155/0x260 [ 2218.239643] ion_page_pool_alloc+0x118/0x1b0 [ 2218.239654] ion_system_heap_allocate+0x133/0x8c0 [ 2218.239663] ? ion_alloc+0x187/0x810 [ 2218.239673] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2218.239684] ? ion_system_contig_heap_create+0x130/0x130 [ 2218.239693] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2218.239703] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2218.239713] ion_alloc+0x204/0x810 [ 2218.239726] ? ion_dma_buf_release+0x40/0x40 [ 2218.239739] ? __might_fault+0x177/0x1b0 [ 2218.239751] ion_ioctl+0xea/0x1f0 [ 2218.239758] ? ion_query_heaps+0x360/0x360 [ 2218.239769] ? ion_query_heaps+0x360/0x360 [ 2218.239779] do_vfs_ioctl+0x75a/0xff0 [ 2218.239790] ? ioctl_preallocate+0x1a0/0x1a0 [ 2218.239797] ? lock_downgrade+0x740/0x740 [ 2218.239811] ? __fget+0x225/0x360 [ 2218.239821] ? do_vfs_ioctl+0xff0/0xff0 [ 2218.239834] ? security_file_ioctl+0x83/0xb0 [ 2218.239845] SyS_ioctl+0x7f/0xb0 [ 2218.239853] ? do_vfs_ioctl+0xff0/0xff0 [ 2218.239865] do_syscall_64+0x1d5/0x640 [ 2218.239881] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2218.239889] RIP: 0033:0x466459 [ 2218.239895] RSP: 002b:00007f78296bb188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2218.239905] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 2218.239910] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2218.239915] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2218.239920] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2218.239926] R13: 00007ffd4f3c2b7f R14: 00007f78296bb300 R15: 0000000000022000 [ 2218.287965] warn_alloc_show_mem: 1 callbacks suppressed [ 2218.287970] Mem-Info: [ 2218.401515] / [ 2218.458694] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 2218.483703] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2218.489958] active_anon:14631 inactive_anon:55508 isolated_anon:0 [ 2218.489958] active_file:1937 inactive_file:5050 isolated_file:0 [ 2218.489958] unevictable:0 dirty:121 writeback:0 unstable:0 [ 2218.489958] slab_reclaimable:12062 slab_unreclaimable:115156 [ 2218.489958] mapped:57078 shmem:56079 pagetables:821 bounce:0 [ 2218.489958] free:232859 free_pcp:251 free_cma:0 [ 2218.517332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2218.537524] Node 0 active_anon:57708kB inactive_anon:188680kB active_file:2020kB inactive_file:17460kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:186960kB dirty:340kB writeback:0kB shmem:190616kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2218.571016] Node 1 active_anon:816kB inactive_anon:33352kB active_file:5728kB inactive_file:2740kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:41352kB dirty:144kB writeback:0kB shmem:33700kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2218.583345] mems_allowed=0-1 [ 2218.604625] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2218.614686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2218.626941] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2218.636768] Node 0 DMA free:11116kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2218.642621] CPU: 1 PID: 30248 Comm: syz-executor.1 Not tainted 4.14.229-syzkaller #0 [ 2218.671077] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2218.677944] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2218.680469] Call Trace: [ 2218.692199] dump_stack+0x1b2/0x281 [ 2218.695860] warn_alloc.cold+0x96/0x1cc [ 2218.699887] ? zone_watermark_ok_safe+0x220/0x220 [ 2218.700295] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2218.704837] __alloc_pages_nodemask+0x2127/0x2720 [ 2218.719708] ? lock_acquire+0x170/0x3f0 [ 2218.723728] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2218.727946] lowmem_reserve[]: 0 2717 [ 2218.728594] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2218.728607] ? __mutex_unlock_slowpath+0x75/0x770 [ 2218.732401] 2718 [ 2218.737856] ? retint_kernel+0x2d/0x2d [ 2218.745480] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2218.748652] alloc_pages_current+0x155/0x260 [ 2218.748668] ion_page_pool_alloc+0x118/0x1b0 [ 2218.748678] ion_system_heap_allocate+0x133/0x8c0 [ 2218.748691] ? ion_alloc+0x187/0x810 [ 2218.775448] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2218.775975] 2718 [ 2218.781794] ? ion_system_contig_heap_create+0x130/0x130 [ 2218.781806] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2218.781818] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2218.781829] ion_alloc+0x204/0x810 [ 2218.781843] ? ion_dma_buf_release+0x40/0x40 [ 2218.785313] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 2218.789528] ? __might_fault+0x177/0x1b0 [ 2218.789543] ion_ioctl+0xea/0x1f0 [ 2218.789552] ? ion_query_heaps+0x360/0x360 [ 2218.789564] ? ion_query_heaps+0x360/0x360 [ 2218.789574] do_vfs_ioctl+0x75a/0xff0 [ 2218.789585] ? ioctl_preallocate+0x1a0/0x1a0 [ 2218.789599] ? lock_downgrade+0x740/0x740 [ 2218.819661] 2718 [ 2218.821736] ? __fget+0x225/0x360 [ 2218.830197] ? do_vfs_ioctl+0xff0/0xff0 [ 2218.830210] ? security_file_ioctl+0x83/0xb0 [ 2218.830219] SyS_ioctl+0x7f/0xb0 [ 2218.830228] ? do_vfs_ioctl+0xff0/0xff0 [ 2218.830240] do_syscall_64+0x1d5/0x640 [ 2218.830255] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2218.834224] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2218.838452] RIP: 0033:0x466459 [ 2218.838463] RSP: 002b:00007f431c6d3188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2218.838473] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 2218.838478] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2218.838483] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2218.838487] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2218.838492] R13: 00007ffd8dc7798f R14: 00007f431c6d3300 R15: 0000000000022000 [ 2218.957930] Node 0 DMA32 free:880612kB min:36200kB low:45248kB high:54296kB active_anon:57608kB inactive_anon:188680kB active_file:2020kB inactive_file:17460kB unevictable:0kB writepending:340kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:7488kB pagetables:3084kB bounce:0kB free_pcp:656kB local_pcp:112kB free_cma:0kB [ 2218.991908] lowmem_reserve[]: 0 0 0 0 0 [ 2218.995997] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2219.025984] lowmem_reserve[]: 0 0 0 0 0 [ 2219.030736] Node 1 Normal free:260636kB min:53696kB low:67120kB high:80544kB active_anon:816kB inactive_anon:33352kB active_file:5176kB inactive_file:2740kB unevictable:0kB writepending:144kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:192kB pagetables:200kB bounce:0kB free_pcp:132kB local_pcp:132kB free_cma:0kB [ 2219.067606] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2219.077222] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2219.090160] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2219.102003] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2219.117552] lowmem_reserve[]: 0 0 0 0 0 [ 2219.122263] Node 0 DMA: 21*4kB (UME) 7*8kB (UME) 6*16kB (UM) 6*32kB (ME) 5*64kB (ME) 3*128kB (ME) 3*256kB (UME) 2*512kB (ME) 2*1024kB (UE) 1*2048kB (M) 1*4096kB (U) = 11116kB [ 2219.138863] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2219.149561] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2219.159604] Node 0 DMA32: 5499*4kB (UEH) 24125*8kB (UEH) 16764*16kB (UEH) 4643*32kB (UEH) 5*64kB (H) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 632116kB [ 2219.175674] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2219.191439] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2219.201404] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2219.216128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2219.227514] Node 1 Normal: 1453*4kB (UM) 1565*8kB (UM) 1641*16kB (UM) 1284*32kB (UM) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 85676kB [ 2219.250681] syz-executor.1: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2219.254990] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2219.269325] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 2219.276274] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2219.286091] CPU: 1 PID: 30260 Comm: syz-executor.1 Not tainted 4.14.229-syzkaller #0 [ 2219.292223] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 2219.297201] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2219.305320] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2219.313409] Call Trace: [ 2219.313433] dump_stack+0x1b2/0x281 [ 2219.313446] warn_alloc.cold+0x96/0x1cc [ 2219.313458] ? zone_watermark_ok_safe+0x220/0x220 [ 2219.313480] __alloc_pages_nodemask+0x2127/0x2720 [ 2219.313498] ? lock_acquire+0x170/0x3f0 [ 2219.325272] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2219.328293] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2219.328312] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2219.328325] ? __mutex_unlock_slowpath+0x75/0x770 [ 2219.328335] ? alloc_pages_current+0x16/0x260 [ 2219.328347] alloc_pages_current+0x155/0x260 [ 2219.328360] ion_page_pool_alloc+0x118/0x1b0 [ 2219.343687] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2219.346015] ion_system_heap_allocate+0x133/0x8c0 [ 2219.366059] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2219.367906] ? ion_alloc+0x187/0x810 [ 2219.367918] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2219.367932] ? ion_system_contig_heap_create+0x130/0x130 [ 2219.367941] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2219.367953] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2219.367964] ion_alloc+0x204/0x810 [ 2219.367977] ? ion_dma_buf_release+0x40/0x40 [ 2219.372536] 62773 total pagecache pages [ 2219.376909] ? __might_fault+0x177/0x1b0 [ 2219.386009] 0 pages in swap cache [ 2219.390287] ion_ioctl+0xea/0x1f0 [ 2219.390298] ? ion_query_heaps+0x360/0x360 [ 2219.390309] ? ion_query_heaps+0x360/0x360 [ 2219.390320] do_vfs_ioctl+0x75a/0xff0 [ 2219.390331] ? ioctl_preallocate+0x1a0/0x1a0 [ 2219.390340] ? lock_downgrade+0x740/0x740 [ 2219.390358] ? __fget+0x225/0x360 [ 2219.399364] Swap cache stats: add 0, delete 0, find 0/0 [ 2219.403781] ? do_vfs_ioctl+0xff0/0xff0 [ 2219.407508] Free swap = 0kB [ 2219.412966] ? security_file_ioctl+0x83/0xb0 [ 2219.412977] SyS_ioctl+0x7f/0xb0 [ 2219.412986] ? do_vfs_ioctl+0xff0/0xff0 [ 2219.412997] do_syscall_64+0x1d5/0x640 [ 2219.413012] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2219.413021] RIP: 0033:0x466459 [ 2219.413026] RSP: 002b:00007f431c691188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2219.413040] RAX: ffffffffffffffda RBX: 000000000056c0b0 RCX: 0000000000466459 [ 2219.424231] Total swap = 0kB [ 2219.428499] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2219.428505] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2219.428510] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c0b0 [ 2219.428515] R13: 00007ffd8dc7798f R14: 00007f431c691300 R15: 0000000000022000 [ 2219.563387] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2219.571877] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2219.626902] 2097051 pages RAM [ 2219.630452] 0 pages HighMem/MovableOnly [ 2219.635191] 363848 pages reserved [ 2219.635852] warn_alloc_show_mem: 1 callbacks suppressed [ 2219.635856] Mem-Info: [ 2219.648764] 0 pages cma reserved [ 2219.653512] active_anon:14661 inactive_anon:55508 isolated_anon:0 [ 2219.653512] active_file:2012 inactive_file:4674 isolated_file:12 [ 2219.653512] unevictable:0 dirty:130 writeback:0 unstable:0 [ 2219.653512] slab_reclaimable:12067 slab_unreclaimable:114708 [ 2219.653512] mapped:57025 shmem:56079 pagetables:821 bounce:0 [ 2219.653512] free:133454 free_pcp:200 free_cma:0 [ 2219.743696] Node 0 active_anon:57828kB inactive_anon:188680kB active_file:2520kB inactive_file:16568kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:187012kB dirty:376kB writeback:0kB shmem:190616kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2219.810033] Node 1 active_anon:816kB inactive_anon:33352kB active_file:5528kB inactive_file:2228kB unevictable:0kB isolated(anon):0kB isolated(file):48kB mapped:41088kB dirty:144kB writeback:0kB shmem:33700kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no 14:59:34 executing program 2: openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/btrfs-control\x00', 0x0, 0x0) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000340)={0x0, @can, @can, @can}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00'}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x5, 0x4}) 14:59:34 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x80000000, 0xe}) openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x14400, 0x0) [ 2219.850972] Node 0 DMA free:11116kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2219.879641] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2219.899346] Node 0 DMA32 free:245468kB min:36200kB low:45248kB high:54296kB active_anon:57728kB inactive_anon:188680kB active_file:2524kB inactive_file:16684kB unevictable:0kB writepending:376kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:7520kB pagetables:3084kB bounce:0kB free_pcp:792kB local_pcp:620kB free_cma:0kB 14:59:34 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x80000000, 0xe}) rt_sigtimedwait(&(0x7f0000000000)={[0x3]}, &(0x7f00000000c0), &(0x7f0000000140)={0x0, 0x989680}, 0x8) [ 2219.969929] syz-executor.5: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2219.983315] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 2219.990874] CPU: 1 PID: 30309 Comm: syz-executor.5 Not tainted 4.14.229-syzkaller #0 [ 2219.998869] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2220.008265] Call Trace: [ 2220.010889] dump_stack+0x1b2/0x281 [ 2220.014544] warn_alloc.cold+0x96/0x1cc [ 2220.018557] ? zone_watermark_ok_safe+0x220/0x220 [ 2220.023434] __alloc_pages_nodemask+0x2127/0x2720 [ 2220.028300] ? lock_acquire+0x170/0x3f0 [ 2220.032303] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2220.037194] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2220.042664] ? __mutex_unlock_slowpath+0x75/0x770 [ 2220.047560] alloc_pages_current+0x155/0x260 [ 2220.051996] ion_page_pool_alloc+0x118/0x1b0 [ 2220.056424] ion_system_heap_allocate+0x133/0x8c0 [ 2220.061280] ? ion_alloc+0x187/0x810 [ 2220.065010] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2220.070474] ? ion_system_contig_heap_create+0x130/0x130 [ 2220.075945] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2220.081003] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2220.085865] ion_alloc+0x204/0x810 [ 2220.089450] ? ion_dma_buf_release+0x40/0x40 [ 2220.094053] ? __might_fault+0x177/0x1b0 [ 2220.098220] ion_ioctl+0xea/0x1f0 [ 2220.101715] ? ion_query_heaps+0x360/0x360 [ 2220.105973] ? ion_query_heaps+0x360/0x360 [ 2220.110222] do_vfs_ioctl+0x75a/0xff0 [ 2220.114044] ? ioctl_preallocate+0x1a0/0x1a0 [ 2220.118463] ? lock_downgrade+0x740/0x740 [ 2220.122627] ? __fget+0x225/0x360 [ 2220.126087] ? do_vfs_ioctl+0xff0/0xff0 [ 2220.130084] ? security_file_ioctl+0x83/0xb0 [ 2220.134509] SyS_ioctl+0x7f/0xb0 [ 2220.137893] ? do_vfs_ioctl+0xff0/0xff0 [ 2220.141882] do_syscall_64+0x1d5/0x640 [ 2220.145785] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2220.150985] RIP: 0033:0x466459 [ 2220.154174] RSP: 002b:00007ff517869188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2220.161893] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 2220.169255] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2220.176532] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2220.183816] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2220.191093] R13: 00007ffe3e591c2f R14: 00007ff517869300 R15: 0000000000022000 [ 2220.218411] lowmem_reserve[]: 0 0 0 0 0 [ 2220.222441] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2220.287043] IPVS: ftp: loaded support on port[0] = 21 [ 2220.314517] syz-executor.2: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2220.373955] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 2220.391438] CPU: 1 PID: 30312 Comm: syz-executor.2 Not tainted 4.14.229-syzkaller #0 [ 2220.399366] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2220.408730] Call Trace: [ 2220.411339] dump_stack+0x1b2/0x281 [ 2220.414986] warn_alloc.cold+0x96/0x1cc [ 2220.418980] ? zone_watermark_ok_safe+0x220/0x220 [ 2220.423862] __alloc_pages_nodemask+0x2127/0x2720 [ 2220.428728] ? lock_acquire+0x170/0x3f0 [ 2220.432760] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2220.437633] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2220.443129] ? __mutex_unlock_slowpath+0x75/0x770 [ 2220.447993] alloc_pages_current+0x155/0x260 [ 2220.452422] ion_page_pool_alloc+0x118/0x1b0 [ 2220.456847] ion_system_heap_allocate+0x133/0x8c0 [ 2220.461712] ? ion_alloc+0x187/0x810 [ 2220.465445] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2220.470935] ? ion_system_contig_heap_create+0x130/0x130 [ 2220.476395] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2220.481447] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2220.486303] ion_alloc+0x204/0x810 [ 2220.489857] ? ion_dma_buf_release+0x40/0x40 [ 2220.494296] ? __might_fault+0x177/0x1b0 [ 2220.498365] ion_ioctl+0xea/0x1f0 [ 2220.501834] ? ion_query_heaps+0x360/0x360 [ 2220.506078] ? retint_kernel+0x2d/0x2d [ 2220.509979] ? putname+0xcd/0x110 [ 2220.513437] ? ion_query_heaps+0x360/0x360 [ 2220.517693] do_vfs_ioctl+0x75a/0xff0 [ 2220.521518] ? ioctl_preallocate+0x1a0/0x1a0 [ 2220.525923] ? lock_downgrade+0x740/0x740 [ 2220.530073] ? __fget+0x225/0x360 [ 2220.533530] ? do_vfs_ioctl+0xff0/0xff0 [ 2220.537519] ? security_file_ioctl+0x83/0xb0 [ 2220.541930] SyS_ioctl+0x7f/0xb0 [ 2220.545290] ? do_vfs_ioctl+0xff0/0xff0 [ 2220.549353] do_syscall_64+0x1d5/0x640 [ 2220.553249] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2220.558437] RIP: 0033:0x466459 [ 2220.561619] RSP: 002b:00007effc187a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 14:59:34 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) [ 2220.569440] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 2220.577322] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2220.584594] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2220.591872] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2220.599157] R13: 00007ffc8c893f1f R14: 00007effc187a300 R15: 0000000000022000 [ 2220.660651] lowmem_reserve[]: 0 0 0 0 0 [ 2220.692503] Node 1 Normal free:53904kB min:53696kB low:67120kB high:80544kB active_anon:804kB inactive_anon:33352kB active_file:2368kB inactive_file:1864kB unevictable:0kB writepending:16kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:192kB pagetables:200kB bounce:0kB free_pcp:68kB local_pcp:0kB free_cma:0kB [ 2220.812107] lowmem_reserve[]: 0 0 0 0 0 [ 2220.834562] Node 0 DMA: 21*4kB (UME) 5*8kB (ME) 4*16kB (M) 7*32kB (UME) 6*64kB (UME) 4*128kB (UME) 2*256kB (ME) 2*512kB (ME) 2*1024kB (UE) 1*2048kB (M) 1*4096kB (U) = 11036kB [ 2220.851613] Node 0 DMA32: 1114*4kB (UMEH) 252*8kB (UMEH) 115*16kB (UMEH) 785*32kB (UMEH) 32*64kB (UMH) 5*128kB (UM) 1*256kB (M) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36376kB [ 2220.868057] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2220.879052] Node 1 Normal: 438*4kB (UM) 120*8kB (UM) 577*16kB (UME) 1320*32kB (UE) 6*64kB (U) 1*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 54696kB [ 2220.894428] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2220.906969] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2220.917284] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2220.927302] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2220.937818] 56340 total pagecache pages [ 2220.942520] 0 pages in swap cache [ 2220.946582] Swap cache stats: add 0, delete 0, find 0/0 [ 2220.957011] Free swap = 0kB [ 2220.962758] Total swap = 0kB [ 2220.965792] 2097051 pages RAM [ 2220.969041] 0 pages HighMem/MovableOnly [ 2220.973017] 363848 pages reserved [ 2220.976466] 0 pages cma reserved [ 2220.984262] Mem-Info: [ 2220.986706] active_anon:14767 inactive_anon:55508 isolated_anon:0 [ 2220.986706] active_file:35 inactive_file:26 isolated_file:8 [ 2220.986706] unevictable:0 dirty:9 writeback:0 unstable:0 [ 2220.986706] slab_reclaimable:12083 slab_unreclaimable:113883 [ 2220.986706] mapped:52766 shmem:56079 pagetables:874 bounce:0 [ 2220.986706] free:25104 free_pcp:406 free_cma:0 [ 2221.020228] Node 0 active_anon:58064kB inactive_anon:188680kB active_file:104kB inactive_file:88kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:176200kB dirty:20kB writeback:0kB shmem:190616kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2221.056328] Node 1 active_anon:1004kB inactive_anon:33352kB active_file:0kB inactive_file:16kB unevictable:0kB isolated(anon):0kB isolated(file):32kB mapped:34764kB dirty:16kB writeback:0kB shmem:33700kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2221.088529] Node 0 DMA free:11052kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2221.119574] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2221.128020] Node 0 DMA32 free:39472kB min:36200kB low:45248kB high:54296kB active_anon:57844kB inactive_anon:188680kB active_file:420kB inactive_file:0kB unevictable:0kB writepending:32kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:7648kB pagetables:3216kB bounce:0kB free_pcp:772kB local_pcp:692kB free_cma:0kB [ 2221.159370] lowmem_reserve[]: 0 0 0 0 0 [ 2221.163389] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2221.189128] lowmem_reserve[]: 0 0 0 0 0 [ 2221.193135] Node 1 Normal free:53668kB min:53696kB low:67120kB high:80544kB active_anon:872kB inactive_anon:33352kB active_file:132kB inactive_file:0kB unevictable:0kB writepending:32kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:160kB pagetables:168kB bounce:0kB free_pcp:12kB local_pcp:0kB free_cma:0kB [ 2221.228909] lowmem_reserve[]: 0 0 0 0 0 [ 2221.232952] Node 0 DMA: 21*4kB (UME) 5*8kB (ME) 4*16kB (M) 7*32kB (UME) 6*64kB (UME) 4*128kB (UME) 2*256kB (ME) 2*512kB (ME) 2*1024kB (UE) 1*2048kB (M) 1*4096kB (U) = 11036kB [ 2221.258099] Node 0 DMA32: 1291*4kB (UMEH) 413*8kB (UMEH) 260*16kB (UMEH) 1681*32kB (UMEH) 39*64kB (UMH) 6*128kB (UM) 0*256kB 1*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 70196kB [ 2221.368027] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2221.408153] Node 1 Normal: 1754*4kB (UM) 1864*8kB (UM) 1979*16kB (UME) 2331*32kB (UE) 1371*64kB (U) 313*128kB (U) 37*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 265464kB [ 2221.424237] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2221.440306] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2221.459037] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2221.478021] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2221.478027] 56106 total pagecache pages [ 2221.478037] 0 pages in swap cache [ 2221.478042] Swap cache stats: add 0, delete 0, find 0/0 [ 2221.478046] Free swap = 0kB [ 2221.478049] Total swap = 0kB [ 2221.478057] 2097051 pages RAM [ 2221.478060] 0 pages HighMem/MovableOnly [ 2221.478064] 363848 pages reserved [ 2221.478067] 0 pages cma reserved [ 2221.772432] syz-executor.5: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2221.867624] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 2221.873670] CPU: 1 PID: 30313 Comm: syz-executor.5 Not tainted 4.14.229-syzkaller #0 [ 2221.881571] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2221.890935] Call Trace: [ 2221.893543] dump_stack+0x1b2/0x281 [ 2221.897263] warn_alloc.cold+0x96/0x1cc [ 2221.901244] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2221.906355] ? zone_watermark_ok_safe+0x220/0x220 [ 2221.911221] __alloc_pages_nodemask+0x2127/0x2720 [ 2221.916085] ? _raw_spin_unlock_irq+0x5a/0x80 [ 2221.920590] ? finish_task_switch+0x178/0x610 [ 2221.925439] ? finish_task_switch+0x14d/0x610 [ 2221.929948] ? lock_acquire+0x170/0x3f0 [ 2221.933940] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2221.938805] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2221.944265] ? __mutex_unlock_slowpath+0x75/0x770 [ 2221.949120] ? alloc_pages_current+0x84/0x260 [ 2221.953628] alloc_pages_current+0x155/0x260 [ 2221.958044] ion_page_pool_alloc+0x118/0x1b0 [ 2221.962551] ion_system_heap_allocate+0x133/0x8c0 [ 2221.967399] ? ion_alloc+0x187/0x810 [ 2221.971258] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2221.976713] ? ion_system_contig_heap_create+0x130/0x130 [ 2221.982182] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2221.987185] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2221.992043] ion_alloc+0x204/0x810 [ 2221.995589] ? ion_dma_buf_release+0x40/0x40 [ 2221.999985] ? __might_fault+0x177/0x1b0 [ 2222.004053] ion_ioctl+0xea/0x1f0 [ 2222.007507] ? ion_query_heaps+0x360/0x360 [ 2222.011739] ? ion_query_heaps+0x360/0x360 [ 2222.015966] do_vfs_ioctl+0x75a/0xff0 [ 2222.019762] ? ioctl_preallocate+0x1a0/0x1a0 [ 2222.024178] ? lock_downgrade+0x740/0x740 [ 2222.028365] ? __fget+0x225/0x360 [ 2222.031804] ? do_vfs_ioctl+0xff0/0xff0 [ 2222.035764] ? security_file_ioctl+0x83/0xb0 [ 2222.040166] SyS_ioctl+0x7f/0xb0 [ 2222.043529] ? do_vfs_ioctl+0xff0/0xff0 [ 2222.047511] do_syscall_64+0x1d5/0x640 [ 2222.051386] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2222.056569] RIP: 0033:0x466459 [ 2222.059742] RSP: 002b:00007ff517848188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2222.067433] RAX: ffffffffffffffda RBX: 000000000056c008 RCX: 0000000000466459 [ 2222.074708] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2222.082055] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2222.089316] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c008 [ 2222.096704] R13: 00007ffe3e591c2f R14: 00007ff517848300 R15: 0000000000022000 [ 2222.118823] warn_alloc_show_mem: 1 callbacks suppressed [ 2222.118827] Mem-Info: [ 2222.126640] active_anon:14739 inactive_anon:55511 isolated_anon:0 [ 2222.126640] active_file:15 inactive_file:17 isolated_file:0 [ 2222.126640] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2222.126640] slab_reclaimable:12087 slab_unreclaimable:113972 [ 2222.126640] mapped:52742 shmem:56083 pagetables:883 bounce:0 [ 2222.126640] free:34743 free_pcp:409 free_cma:0 [ 2222.161913] Node 0 active_anon:58020kB inactive_anon:188680kB active_file:52kB inactive_file:56kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:176152kB dirty:0kB writeback:0kB shmem:190616kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2222.190737] Node 1 active_anon:936kB inactive_anon:33364kB active_file:8kB inactive_file:12kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:34816kB dirty:0kB writeback:0kB shmem:33716kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2222.218159] Node 0 DMA free:11072kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2222.267973] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2222.273050] Node 0 DMA32 free:39276kB min:36200kB low:45248kB high:54296kB active_anon:58020kB inactive_anon:188680kB active_file:52kB inactive_file:56kB unevictable:0kB writepending:0kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:7616kB pagetables:3328kB bounce:0kB free_pcp:716kB local_pcp:84kB free_cma:0kB [ 2222.348092] Bluetooth: hci2 command 0x0409 tx timeout [ 2222.397569] lowmem_reserve[]: 0 0 0 0 0 [ 2222.406786] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB 14:59:36 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) [ 2222.626458] lowmem_reserve[]: 0 0 0 0 0 14:59:37 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) [ 2222.657231] Node 1 Normal free:120016kB min:53696kB low:67120kB high:80544kB active_anon:1236kB inactive_anon:33364kB active_file:2000kB inactive_file:10160kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:448kB pagetables:352kB bounce:0kB free_pcp:312kB local_pcp:120kB free_cma:0kB 14:59:37 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r0, 0x0, 0x0, 0x0, &(0x7f0000001780)={0x11, 0x0, 0x0, 0x1, 0x4, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x14) [ 2222.877335] lowmem_reserve[]: 0 0 0 0 0 [ 2222.907975] Node 0 DMA: 8*4kB (UME) 6*8kB (UME) 5*16kB (UM) 7*32kB (UME) 5*64kB (ME) 3*128kB (ME) 3*256kB (UME) 2*512kB (ME) 2*1024kB (UE) 1*2048kB (M) 1*4096kB (U) = 11072kB [ 2222.935803] Node 0 DMA32: 1142*4kB (UMEH) 357*8kB (UMEH) 114*16kB (MEH) 722*32kB (UMEH) 43*64kB (UMH) 6*128kB (UM) 0*256kB 1*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 36384kB [ 2222.952631] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2222.964040] Node 1 Normal: 453*4kB (UM) 83*8kB (UM) 78*16kB (UME) 55*32kB (UME) 38*64kB (UM) 13*128kB (UM) 7*256kB (UM) 2*512kB (M) 1*1024kB (M) 20*2048kB (U) 0*4096kB = 54380kB [ 2222.983118] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2222.992854] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2223.002130] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2223.019019] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2223.027622] 56114 total pagecache pages [ 2223.031690] 0 pages in swap cache [ 2223.035139] Swap cache stats: add 0, delete 0, find 0/0 [ 2223.040612] Free swap = 0kB [ 2223.043645] Total swap = 0kB [ 2223.046641] 2097051 pages RAM [ 2223.054498] 0 pages HighMem/MovableOnly [ 2223.058941] 363848 pages reserved [ 2223.062499] 0 pages cma reserved [ 2223.083026] syz-fuzzer invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 2223.095728] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 2223.100554] CPU: 0 PID: 7985 Comm: syz-fuzzer Not tainted 4.14.229-syzkaller #0 [ 2223.108010] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2223.117377] Call Trace: [ 2223.120060] dump_stack+0x1b2/0x281 [ 2223.123702] dump_header+0x178/0x82f [ 2223.127432] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2223.132531] ? ___ratelimit+0x2cd/0x530 [ 2223.136516] oom_kill_process.cold+0x10/0xa40 [ 2223.141046] out_of_memory+0xe3e/0x1190 [ 2223.145028] ? oom_killer_disable+0x1c0/0x1c0 [ 2223.149540] ? mutex_trylock+0x152/0x1a0 [ 2223.153640] __alloc_pages_nodemask+0x23e1/0x2720 [ 2223.158530] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2223.163420] alloc_pages_current+0x155/0x260 [ 2223.167844] filemap_fault+0x11a1/0x1ad0 [ 2223.171911] ext4_filemap_fault+0x84/0xb0 [ 2223.176071] __do_fault+0xfa/0x380 [ 2223.179620] __handle_mm_fault+0x2497/0x4620 [ 2223.184036] ? vm_insert_page+0x7c0/0x7c0 [ 2223.188218] ? mark_held_locks+0xa6/0xf0 [ 2223.192289] handle_mm_fault+0x455/0x9c0 [ 2223.196364] __do_page_fault+0x549/0xad0 [ 2223.200438] ? spurious_fault+0x640/0x640 [ 2223.204674] ? do_page_fault+0x60/0x500 [ 2223.208650] ? page_fault+0x2f/0x50 [ 2223.212279] page_fault+0x45/0x50 [ 2223.215754] RIP: 64b0480:0x4 [ 2223.218772] RSP: 0116:000000c0009dfe30 EFLAGS: 00000003 [ 2223.234321] Mem-Info: [ 2223.266585] active_anon:14840 inactive_anon:55510 isolated_anon:0 [ 2223.266585] active_file:11 inactive_file:15 isolated_file:0 [ 2223.266585] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2223.266585] slab_reclaimable:12096 slab_unreclaimable:113816 [ 2223.266585] mapped:52753 shmem:56083 pagetables:920 bounce:0 [ 2223.266585] free:25095 free_pcp:0 free_cma:0 [ 2223.315313] Node 0 active_anon:58012kB inactive_anon:188680kB active_file:20kB inactive_file:32kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:176196kB dirty:0kB writeback:0kB shmem:190616kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2223.356558] Node 1 active_anon:1348kB inactive_anon:33360kB active_file:12kB inactive_file:40kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:34816kB dirty:0kB writeback:0kB shmem:33716kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2223.391556] Node 0 DMA free:11072kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2223.424464] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2223.433129] Node 0 DMA32 free:35444kB min:36200kB low:45248kB high:54296kB active_anon:58012kB inactive_anon:188680kB active_file:12kB inactive_file:40kB unevictable:0kB writepending:0kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:7584kB pagetables:3328kB bounce:0kB free_pcp:232kB local_pcp:116kB free_cma:0kB [ 2223.469497] lowmem_reserve[]: 0 0 0 0 0 [ 2223.473566] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2223.509383] lowmem_reserve[]: 0 0 0 0 0 [ 2223.513463] Node 1 Normal free:53124kB min:53696kB low:67120kB high:80544kB active_anon:1348kB inactive_anon:33360kB active_file:36kB inactive_file:16kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:256kB pagetables:352kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2223.554494] lowmem_reserve[]: 0 0 0 0 0 [ 2223.562955] Node 0 DMA: 8*4kB (UME) 6*8kB (UME) 5*16kB (UM) 7*32kB (UME) 5*64kB (ME) 3*128kB (ME) 3*256kB (UME) 2*512kB (ME) 2*1024kB (UE) 1*2048kB (M) 1*4096kB (U) = 11072kB [ 2223.588084] Node 0 DMA32: 1143*4kB (UMEH) 268*8kB (MEH) 115*16kB (UMEH) 714*32kB (UMEH) 43*64kB (UMH) 6*128kB (UM) 0*256kB 1*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 35436kB [ 2223.612726] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2223.625748] Node 1 Normal: 449*4kB (UM) 53*8kB (UM) 39*16kB (UME) 35*32kB (UME) 26*64kB (M) 16*128kB (UM) 8*256kB (UM) 5*512kB (M) 2*1024kB (M) 19*2048kB (U) 0*4096kB = 53244kB [ 2223.651549] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2223.664934] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2223.682608] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2223.693754] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2223.717329] 56109 total pagecache pages [ 2223.726763] 0 pages in swap cache [ 2223.735099] Swap cache stats: add 0, delete 0, find 0/0 [ 2223.747362] Free swap = 0kB [ 2223.755059] Total swap = 0kB [ 2223.764996] 2097051 pages RAM [ 2223.772744] 0 pages HighMem/MovableOnly [ 2223.776818] 363848 pages reserved [ 2223.786629] 0 pages cma reserved [ 2223.794866] Out of memory (oom_kill_allocating_task): Kill process 7985 (syz-fuzzer) score 0 or sacrifice child [ 2223.814753] Killed process 30263 (syz-executor.3) total-vm:84924kB, anon-rss:64kB, file-rss:0kB, shmem-rss:0kB [ 2223.845291] oom_reaper: reaped process 30263 (syz-executor.3), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 2223.860394] in:imklog invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 2223.881232] in:imklog cpuset=/ mems_allowed=0-1 [ 2223.885988] CPU: 1 PID: 28975 Comm: in:imklog Not tainted 4.14.229-syzkaller #0 [ 2223.893438] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2223.902903] Call Trace: [ 2223.905491] dump_stack+0x1b2/0x281 [ 2223.909115] dump_header+0x178/0x82f [ 2223.912838] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2223.917960] ? ___ratelimit+0x2cd/0x530 [ 2223.921933] oom_kill_process.cold+0x10/0xa40 [ 2223.926437] out_of_memory+0xe3e/0x1190 [ 2223.930421] ? oom_killer_disable+0x1c0/0x1c0 [ 2223.934913] ? mutex_trylock+0x152/0x1a0 [ 2223.938968] __alloc_pages_nodemask+0x23e1/0x2720 [ 2223.943805] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2223.948666] alloc_pages_current+0x155/0x260 [ 2223.953069] filemap_fault+0x11a1/0x1ad0 [ 2223.957135] ext4_filemap_fault+0x84/0xb0 [ 2223.961294] __do_fault+0xfa/0x380 [ 2223.964863] __handle_mm_fault+0x2497/0x4620 [ 2223.969261] ? vm_insert_page+0x7c0/0x7c0 [ 2223.973428] ? lock_downgrade+0x740/0x740 [ 2223.977603] ? mark_held_locks+0xa6/0xf0 [ 2223.981672] handle_mm_fault+0x455/0x9c0 [ 2223.985745] __do_page_fault+0x549/0xad0 [ 2223.989798] ? spurious_fault+0x640/0x640 [ 2223.993956] ? do_page_fault+0x60/0x500 [ 2223.997985] ? page_fault+0x2f/0x50 [ 2224.001723] page_fault+0x45/0x50 [ 2224.005179] RIP: 496e2da3:0x1f9f [ 2224.008722] RSP: 0000:0000000000000004 EFLAGS: 7f0a496e2da0 [ 2224.013560] Mem-Info: [ 2224.036556] active_anon:14830 inactive_anon:55510 isolated_anon:0 [ 2224.036556] active_file:12 inactive_file:13 isolated_file:0 [ 2224.036556] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2224.036556] slab_reclaimable:12096 slab_unreclaimable:113842 [ 2224.036556] mapped:52752 shmem:56083 pagetables:898 bounce:0 [ 2224.036556] free:24940 free_pcp:86 free_cma:0 [ 2224.079203] Node 0 active_anon:57972kB inactive_anon:188680kB active_file:24kB inactive_file:24kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:176192kB dirty:0kB writeback:0kB shmem:190616kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2224.114170] Node 1 active_anon:1348kB inactive_anon:33360kB active_file:36kB inactive_file:16kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:34816kB dirty:0kB writeback:0kB shmem:33716kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2224.148281] Node 0 DMA free:11072kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2224.176973] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2224.194001] Node 0 DMA32 free:35444kB min:36200kB low:45248kB high:54296kB active_anon:57972kB inactive_anon:188680kB active_file:48kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:7552kB pagetables:3240kB bounce:0kB free_pcp:344kB local_pcp:216kB free_cma:0kB [ 2224.234466] lowmem_reserve[]: 0 0 0 0 0 [ 2224.243074] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2224.280640] lowmem_reserve[]: 0 0 0 0 0 [ 2224.284702] Node 1 Normal free:53244kB min:53696kB low:67120kB high:80544kB active_anon:1348kB inactive_anon:33360kB active_file:0kB inactive_file:84kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:256kB pagetables:352kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2224.325051] lowmem_reserve[]: 0 0 0 0 0 [ 2224.333908] Node 0 DMA: 8*4kB (UME) 6*8kB (UME) 5*16kB (UM) 7*32kB (UME) 5*64kB (ME) 3*128kB (ME) 3*256kB (UME) 2*512kB (ME) 2*1024kB (UE) 1*2048kB (M) 1*4096kB (U) = 11072kB [ 2224.360922] Node 0 DMA32: 1143*4kB (UMEH) 268*8kB (MEH) 115*16kB (UMEH) 714*32kB (UMEH) 43*64kB (UMH) 6*128kB (UM) 0*256kB 1*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 35436kB [ 2224.384248] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2224.411000] Node 1 Normal: 449*4kB (UM) 53*8kB (UM) 39*16kB (UME) 35*32kB (UME) 26*64kB (M) 16*128kB (UM) 8*256kB (UM) 5*512kB (M) 2*1024kB (M) 19*2048kB (U) 0*4096kB = 53244kB [ 2224.419640] Bluetooth: hci2 command 0x041b tx timeout [ 2224.436459] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2224.459586] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2224.476990] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2224.490414] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2224.512993] 56108 total pagecache pages [ 2224.517014] 0 pages in swap cache [ 2224.536286] Swap cache stats: add 0, delete 0, find 0/0 [ 2224.547335] Free swap = 0kB [ 2224.555813] Total swap = 0kB [ 2224.576788] 2097051 pages RAM [ 2224.593000] 0 pages HighMem/MovableOnly [ 2224.597052] 363848 pages reserved [ 2224.607859] 0 pages cma reserved [ 2224.616233] Out of memory (oom_kill_allocating_task): Kill process 28975 (in:imklog) score 0 or sacrifice child [ 2224.644621] Killed process 28973 (rsyslogd) total-vm:254332kB, anon-rss:924kB, file-rss:0kB, shmem-rss:0kB [ 2224.675520] oom_reaper: reaped process 28973 (rsyslogd), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 2224.907889] oom_reaper: reaped process 30313 (syz-executor.5), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 2224.954964] oom_reaper: reaped process 30260 (syz-executor.1), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 2224.980275] syz-executor.5 invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 2225.000724] syz-executor.5: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2225.020748] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 2225.022327] syz-executor.5: page allocation failure: order:0 [ 2225.025912] CPU: 1 PID: 30313 Comm: syz-executor.5 Not tainted 4.14.229-syzkaller #0 [ 2225.025921] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2225.042938] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 2225.048948] Call Trace: [ 2225.048972] dump_stack+0x1b2/0x281 [ 2225.048985] warn_alloc.cold+0x96/0x1cc [ 2225.049000] ? zone_watermark_ok_safe+0x220/0x220 [ 2225.056130] (null) [ 2225.058675] ? usleep_range+0x130/0x130 [ 2225.058684] ? try_to_free_pages+0x23f/0x6e0 [ 2225.058694] ? _find_next_bit+0xdb/0x100 [ 2225.058705] ? run_timer_softirq+0x5a0/0x5a0 [ 2225.058722] __alloc_pages_nodemask+0x2127/0x2720 [ 2225.062341] syz-executor.5 cpuset= [ 2225.066337] ? lock_acquire+0x170/0x3f0 [ 2225.071480] / [ 2225.073589] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2225.077556] mems_allowed=0-1 [ 2225.081969] ? ion_page_pool_alloc+0x9e/0x1b0 [ 2225.081986] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2225.082002] ? alloc_pages_current+0x84/0x260 [ 2225.082013] alloc_pages_current+0x155/0x260 [ 2225.131219] ion_page_pool_alloc+0x118/0x1b0 [ 2225.135631] ion_system_heap_allocate+0x133/0x8c0 [ 2225.140481] ? ion_alloc+0x187/0x810 [ 2225.144217] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2225.149673] ? ion_system_contig_heap_create+0x130/0x130 [ 2225.157407] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2225.162431] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2225.167293] ion_alloc+0x204/0x810 [ 2225.170862] ? ion_dma_buf_release+0x40/0x40 [ 2225.175270] ? __might_fault+0x177/0x1b0 [ 2225.179336] ion_ioctl+0xea/0x1f0 [ 2225.182811] ? ion_query_heaps+0x360/0x360 [ 2225.187050] ? ion_query_heaps+0x360/0x360 [ 2225.191283] do_vfs_ioctl+0x75a/0xff0 [ 2225.195260] ? ioctl_preallocate+0x1a0/0x1a0 [ 2225.199668] ? lock_downgrade+0x740/0x740 [ 2225.203819] ? __fget+0x225/0x360 [ 2225.207289] ? do_vfs_ioctl+0xff0/0xff0 [ 2225.211270] ? security_file_ioctl+0x83/0xb0 [ 2225.215683] SyS_ioctl+0x7f/0xb0 [ 2225.219060] ? do_vfs_ioctl+0xff0/0xff0 [ 2225.223040] do_syscall_64+0x1d5/0x640 [ 2225.226948] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2225.232235] RIP: 0033:0x466459 [ 2225.235593] RSP: 002b:00007ff517848188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2225.243314] RAX: ffffffffffffffda RBX: 000000000056c008 RCX: 0000000000466459 [ 2225.251115] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2225.258380] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2225.265664] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c008 [ 2225.273036] R13: 00007ffe3e591c2f R14: 00007ff517848300 R15: 0000000000022000 [ 2225.280516] CPU: 0 PID: 30309 Comm: syz-executor.5 Not tainted 4.14.229-syzkaller #0 [ 2225.282115] ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb [ 2225.288941] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2225.288946] Call Trace: [ 2225.288968] dump_stack+0x1b2/0x281 [ 2225.288981] warn_alloc.cold+0x96/0x1cc [ 2225.288993] ? zone_watermark_ok_safe+0x220/0x220 [ 2225.289003] ? usleep_range+0x130/0x130 [ 2225.289016] ? try_to_free_pages+0x23f/0x6e0 [ 2225.295904] ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb [ 2225.305263] ? _find_next_bit+0xdb/0x100 [ 2225.305275] ? run_timer_softirq+0x5a0/0x5a0 [ 2225.305295] __alloc_pages_nodemask+0x2127/0x2720 [ 2225.305313] ? lock_acquire+0x170/0x3f0 [ 2225.305328] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2225.308018] ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb [ 2225.311529] ? ion_page_pool_alloc+0x9e/0x1b0 [ 2225.315580] ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb [ 2225.320336] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2225.320362] alloc_pages_current+0x155/0x260 [ 2225.320377] ion_page_pool_alloc+0x118/0x1b0 [ 2225.320387] ion_system_heap_allocate+0x133/0x8c0 [ 2225.324447] ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb [ 2225.329047] ? ion_alloc+0x187/0x810 [ 2225.329058] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2225.329067] ? ion_system_contig_heap_create+0x130/0x130 [ 2225.329077] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2225.329091] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2225.335650] ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb [ 2225.339626] ion_alloc+0x204/0x810 [ 2225.339640] ? ion_dma_buf_release+0x40/0x40 [ 2225.339651] ? __might_fault+0x177/0x1b0 [ 2225.339663] ion_ioctl+0xea/0x1f0 [ 2225.339673] ? ion_query_heaps+0x360/0x360 [ 2225.344161] ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb [ 2225.350046] ? ion_query_heaps+0x360/0x360 [ 2225.350057] do_vfs_ioctl+0x75a/0xff0 [ 2225.350069] ? ioctl_preallocate+0x1a0/0x1a0 [ 2225.350079] ? lock_downgrade+0x740/0x740 [ 2225.350091] ? __fget+0x225/0x360 [ 2225.354320] ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb [ 2225.359212] ? do_vfs_ioctl+0xff0/0xff0 [ 2225.359225] ? security_file_ioctl+0x83/0xb0 [ 2225.359234] SyS_ioctl+0x7f/0xb0 [ 2225.359242] ? do_vfs_ioctl+0xff0/0xff0 [ 2225.359253] do_syscall_64+0x1d5/0x640 [ 2225.359272] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2225.380891] syz-executor.1: [ 2225.382199] RIP: 0033:0x466459 [ 2225.386592] page allocation failure: order:0 [ 2225.390986] RSP: 002b:00007ff517869188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2225.390997] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 2225.391001] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2225.391006] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2225.391011] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2225.391016] R13: 00007ffe3e591c2f R14: 00007ff517869300 R15: 0000000000022000 [ 2225.405711] syz-executor.1: [ 2225.421837] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 2225.437537] syz-executor.5 cpuset= [ 2225.456086] (null) [ 2225.477187] page allocation failure: order:0 [ 2225.585591] / [ 2225.595373] Mem-Info: [ 2225.596851] syz-executor.1 cpuset= [ 2225.597144] active_anon:14492 inactive_anon:55510 isolated_anon:0 [ 2225.597144] active_file:18 inactive_file:16 isolated_file:0 [ 2225.597144] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2225.597144] slab_reclaimable:12095 slab_unreclaimable:113076 [ 2225.597144] mapped:44048 shmem:56083 pagetables:846 bounce:0 [ 2225.597144] free:13675 free_pcp:58 free_cma:0 [ 2225.627619] / [ 2225.639259] mems_allowed=0-1 [ 2225.644179] CPU: 0 PID: 29283 Comm: syz-executor.5 Not tainted 4.14.229-syzkaller #0 [ 2225.652079] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2225.661446] Call Trace: [ 2225.664054] dump_stack+0x1b2/0x281 [ 2225.667731] dump_header+0x178/0x82f [ 2225.671473] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2225.676600] ? ___ratelimit+0x2cd/0x530 [ 2225.677458] mems_allowed=0-1 [ 2225.680592] oom_kill_process.cold+0x10/0xa40 [ 2225.680614] out_of_memory+0xe3e/0x1190 [ 2225.680626] ? oom_killer_disable+0x1c0/0x1c0 [ 2225.680634] ? mutex_trylock+0x152/0x1a0 [ 2225.680644] __alloc_pages_nodemask+0x23e1/0x2720 [ 2225.680662] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2225.680686] alloc_pages_current+0x155/0x260 [ 2225.680696] filemap_fault+0x11a1/0x1ad0 [ 2225.680715] ext4_filemap_fault+0x84/0xb0 [ 2225.680736] __do_fault+0xfa/0x380 [ 2225.680746] __handle_mm_fault+0x2497/0x4620 [ 2225.680757] ? vm_insert_page+0x7c0/0x7c0 [ 2225.698204] ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb [ 2225.701904] ? hrtimer_nanosleep+0x1ff/0x4b0 [ 2225.707340] ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb [ 2225.711727] ? nanosleep_copyout+0x100/0x100 [ 2225.711742] ? mark_held_locks+0xa6/0xf0 [ 2225.711753] handle_mm_fault+0x455/0x9c0 [ 2225.711766] __do_page_fault+0x549/0xad0 [ 2225.711781] ? spurious_fault+0x640/0x640 [ 2225.774732] ? do_page_fault+0x60/0x500 [ 2225.778711] ? page_fault+0x2f/0x50 [ 2225.782387] page_fault+0x45/0x50 [ 2225.785841] RIP: 21e33f:0x3 [ 2225.788767] RSP: 000d:00007ffe3e591eec EFLAGS: 0000004f [ 2225.794758] Node 0 active_anon:56680kB inactive_anon:188680kB active_file:56kB inactive_file:36kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:141376kB dirty:0kB writeback:0kB shmem:190616kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2225.807295] CPU: 1 PID: 30248 Comm: syz-executor.1 Not tainted 4.14.229-syzkaller #0 [ 2225.830800] Node 1 active_anon:1288kB inactive_anon:33360kB active_file:16kB inactive_file:28kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:34816kB dirty:0kB writeback:0kB shmem:33716kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2225.836031] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2225.863254] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 2225.872536] Call Trace: [ 2225.872559] dump_stack+0x1b2/0x281 [ 2225.872573] warn_alloc.cold+0x96/0x1cc [ 2225.872585] ? zone_watermark_ok_safe+0x220/0x220 [ 2225.872599] ? usleep_range+0x130/0x130 [ 2225.879747] (null) [ 2225.882288] ? try_to_free_pages+0x23f/0x6e0 [ 2225.885903] syz-executor.1 cpuset= [ 2225.889870] ? _find_next_bit+0xdb/0x100 [ 2225.889881] ? run_timer_softirq+0x5a0/0x5a0 [ 2225.889897] __alloc_pages_nodemask+0x2127/0x2720 [ 2225.889918] ? lock_acquire+0x170/0x3f0 [ 2225.894773] Node 0 [ 2225.898729] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2225.898739] ? ion_page_pool_alloc+0x9e/0x1b0 [ 2225.898755] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2225.898775] alloc_pages_current+0x155/0x260 [ 2225.900916] DMA free:10956kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2225.905301] ion_page_pool_alloc+0x118/0x1b0 [ 2225.908882] / [ 2225.912896] ion_system_heap_allocate+0x133/0x8c0 [ 2225.917286] mems_allowed=0-1 [ 2225.922124] ? ion_alloc+0x187/0x810 [ 2225.922137] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2225.922146] ? ion_system_contig_heap_create+0x130/0x130 [ 2225.922155] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2225.922167] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2225.922177] ion_alloc+0x204/0x810 [ 2225.926176] lowmem_reserve[]: [ 2225.928395] ? ion_dma_buf_release+0x40/0x40 [ 2225.928407] ? __might_fault+0x177/0x1b0 [ 2225.928418] ion_ioctl+0xea/0x1f0 [ 2225.928429] ? ion_query_heaps+0x360/0x360 [ 2225.933259] 0 [ 2225.937763] ? ion_query_heaps+0x360/0x360 [ 2225.947945] 2717 [ 2225.973165] do_vfs_ioctl+0x75a/0xff0 [ 2225.973179] ? ioctl_preallocate+0x1a0/0x1a0 [ 2225.973188] ? lock_downgrade+0x740/0x740 [ 2225.973204] ? __fget+0x225/0x360 [ 2225.997952] Mem-Info: [ 2226.001822] ? do_vfs_ioctl+0xff0/0xff0 [ 2226.006836] active_anon:14492 inactive_anon:55510 isolated_anon:0 [ 2226.006836] active_file:18 inactive_file:16 isolated_file:0 [ 2226.006836] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2226.006836] slab_reclaimable:12095 slab_unreclaimable:113076 [ 2226.006836] mapped:44048 shmem:56083 pagetables:846 bounce:0 [ 2226.006836] free:13640 free_pcp:57 free_cma:0 [ 2226.011670] ? security_file_ioctl+0x83/0xb0 [ 2226.011682] SyS_ioctl+0x7f/0xb0 [ 2226.011691] ? do_vfs_ioctl+0xff0/0xff0 [ 2226.011702] do_syscall_64+0x1d5/0x640 [ 2226.011716] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2226.027970] 2718 [ 2226.030401] RIP: 0033:0x466459 [ 2226.034745] 2718 [ 2226.036547] RSP: 002b:00007f431c6d3188 EFLAGS: 00000246 [ 2226.042242] Node 0 active_anon:56680kB inactive_anon:188680kB active_file:56kB inactive_file:36kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:141376kB dirty:0kB writeback:0kB shmem:190616kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2226.044207] ORIG_RAX: 0000000000000010 [ 2226.057964] Node 1 active_anon:1288kB inactive_anon:33360kB active_file:16kB inactive_file:28kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:34816kB dirty:0kB writeback:0kB shmem:33716kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2226.060012] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 2226.062408] Node 0 [ 2226.066399] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2226.066420] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2226.099756] 2718 [ 2226.104087] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2226.111417] R13: 00007ffd8dc7798f R14: 00007f431c6d3300 R15: 0000000000022000 [ 2226.238798] CPU: 0 PID: 30260 Comm: syz-executor.1 Not tainted 4.14.229-syzkaller #0 [ 2226.246713] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2226.256081] Call Trace: [ 2226.258709] dump_stack+0x1b2/0x281 [ 2226.262349] warn_alloc.cold+0x96/0x1cc [ 2226.266338] ? zone_watermark_ok_safe+0x220/0x220 [ 2226.271193] ? usleep_range+0x130/0x130 [ 2226.275196] ? try_to_free_pages+0x23f/0x6e0 [ 2226.279619] ? _find_next_bit+0xdb/0x100 [ 2226.283700] ? run_timer_softirq+0x5a0/0x5a0 [ 2226.288400] __alloc_pages_nodemask+0x2127/0x2720 [ 2226.293268] ? lock_acquire+0x170/0x3f0 [ 2226.297273] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2226.302238] ? ion_page_pool_alloc+0x9e/0x1b0 [ 2226.306767] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2226.312249] alloc_pages_current+0x155/0x260 [ 2226.316783] ion_page_pool_alloc+0x118/0x1b0 [ 2226.321355] ion_system_heap_allocate+0x133/0x8c0 [ 2226.326212] ? ion_alloc+0x187/0x810 [ 2226.329932] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2226.335411] ? ion_system_contig_heap_create+0x130/0x130 [ 2226.340871] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2226.345901] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2226.350780] ion_alloc+0x204/0x810 [ 2226.354337] ? ion_dma_buf_release+0x40/0x40 [ 2226.358752] ? __might_fault+0x177/0x1b0 [ 2226.362825] ion_ioctl+0xea/0x1f0 [ 2226.366366] ? ion_query_heaps+0x360/0x360 [ 2226.370611] ? ion_query_heaps+0x360/0x360 [ 2226.374865] do_vfs_ioctl+0x75a/0xff0 [ 2226.378730] ? ioctl_preallocate+0x1a0/0x1a0 [ 2226.383153] ? lock_downgrade+0x740/0x740 [ 2226.387324] ? __fget+0x225/0x360 [ 2226.390783] ? do_vfs_ioctl+0xff0/0xff0 [ 2226.394768] ? security_file_ioctl+0x83/0xb0 [ 2226.399215] SyS_ioctl+0x7f/0xb0 [ 2226.402598] ? do_vfs_ioctl+0xff0/0xff0 [ 2226.406353] DMA free:11016kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2226.406576] do_syscall_64+0x1d5/0x640 [ 2226.435999] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2226.441203] RIP: 0033:0x466459 [ 2226.444412] RSP: 002b:00007f431c691188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2226.452136] RAX: ffffffffffffffda RBX: 000000000056c0b0 RCX: 0000000000466459 [ 2226.459419] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2226.466699] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2226.473981] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c0b0 [ 2226.481377] R13: 00007ffd8dc7798f R14: 00007f431c691300 R15: 0000000000022000 [ 2226.501417] Node 0 DMA32 free:36232kB min:36200kB low:45248kB high:54296kB active_anon:56780kB inactive_anon:188680kB active_file:508kB inactive_file:1484kB unevictable:0kB writepending:0kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:7424kB pagetables:3032kB bounce:0kB free_pcp:704kB local_pcp:152kB free_cma:0kB [ 2226.583599] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2226.603904] Node 0 DMA32 free:37536kB min:36200kB low:45248kB high:54296kB active_anon:56780kB inactive_anon:188680kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:7424kB pagetables:3032kB bounce:0kB free_pcp:656kB local_pcp:536kB free_cma:0kB [ 2226.604119] lowmem_reserve[]: [ 2226.633124] warn_alloc_show_mem: 1 callbacks suppressed [ 2226.633127] Mem-Info: [ 2226.644079] lowmem_reserve[]: 0 0 0 0 0 [ 2226.648381] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2226.671101] 0 0 0 0 0 [ 2226.681929] syz-executor.5: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2226.694746] active_anon:14592 inactive_anon:55510 isolated_anon:0 [ 2226.694746] active_file:44 inactive_file:41 isolated_file:4 [ 2226.694746] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2226.694746] slab_reclaimable:12095 slab_unreclaimable:112978 [ 2226.694746] mapped:44098 shmem:56083 pagetables:883 bounce:0 [ 2226.694746] free:18404 free_pcp:60 free_cma:0 [ 2226.707958] Node 0 [ 2226.736198] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 2226.743770] CPU: 1 PID: 30313 Comm: syz-executor.5 Not tainted 4.14.229-syzkaller #0 [ 2226.751663] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2226.758789] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2226.761255] Call Trace: [ 2226.786237] lowmem_reserve[]: [ 2226.788780] dump_stack+0x1b2/0x281 [ 2226.788796] warn_alloc.cold+0x96/0x1cc [ 2226.788811] ? zone_watermark_ok_safe+0x220/0x220 [ 2226.791907] 0 [ 2226.795547] __alloc_pages_nodemask+0x2127/0x2720 [ 2226.807971] 0 0 [ 2226.810979] ? switch_mm_irqs_off+0x601/0xeb0 [ 2226.810997] ? lock_acquire+0x170/0x3f0 [ 2226.812978] 0 [ 2226.817499] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2226.828150] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2226.833617] ? __mutex_unlock_slowpath+0x75/0x770 [ 2226.837956] 0 [ 2226.838557] ? __list_del_entry_valid+0xb3/0xf0 [ 2226.838566] Node 1 [ 2226.840362] alloc_pages_current+0x155/0x260 [ 2226.845038] Normal free:26928kB min:53696kB low:67120kB high:80544kB active_anon:1588kB inactive_anon:33360kB active_file:576kB inactive_file:780kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:384kB pagetables:500kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2226.847268] ion_page_pool_alloc+0x118/0x1b0 [ 2226.867963] lowmem_reserve[]: [ 2226.879597] ion_system_heap_allocate+0x133/0x8c0 [ 2226.879612] ? _raw_spin_unlock+0x29/0x40 [ 2226.879624] ? _ion_heap_freelist_drain+0x6e/0x410 [ 2226.897954] 0 0 [ 2226.901043] ? ion_system_contig_heap_create+0x130/0x130 [ 2226.901064] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2226.903056] 0 [ 2226.908509] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2226.908522] ion_alloc+0x27a/0x810 [ 2226.908536] ? ion_dma_buf_release+0x40/0x40 [ 2226.908548] ? __might_fault+0x177/0x1b0 [ 2226.908559] ion_ioctl+0xea/0x1f0 [ 2226.927958] 0 [ 2226.928128] ? ion_query_heaps+0x360/0x360 [ 2226.932199] 0 [ 2226.935655] ? ion_query_heaps+0x360/0x360 [ 2226.941654] do_vfs_ioctl+0x75a/0xff0 [ 2226.941666] ? ioctl_preallocate+0x1a0/0x1a0 [ 2226.941676] ? lock_downgrade+0x740/0x740 [ 2226.941688] ? __fget+0x225/0x360 [ 2226.941698] ? do_vfs_ioctl+0xff0/0xff0 [ 2226.957956] Node 0 [ 2226.960048] ? security_file_ioctl+0x83/0xb0 [ 2226.963503] DMA: [ 2226.967477] SyS_ioctl+0x7f/0xb0 [ 2226.979640] ? do_vfs_ioctl+0xff0/0xff0 [ 2226.983628] do_syscall_64+0x1d5/0x640 [ 2226.987534] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2226.987951] 21*4kB [ 2226.992732] RIP: 0033:0x466459 [ 2226.992734] (UME) 7*8kB [ 2226.994975] RSP: 002b:00007ff517848188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2227.007970] (UME) [ 2227.008540] RAX: ffffffffffffffda RBX: 000000000056c008 RCX: 0000000000466459 [ 2227.008549] 5*16kB [ 2227.010685] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2227.010693] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2227.027985] (UM) [ 2227.034941] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c008 [ 2227.034953] R13: 00007ffe3e591c2f R14: 00007ff517848300 R15: 0000000000022000 [ 2227.037018] 7*32kB [ 2227.095043] lowmem_reserve[]: 0 0 0 0 0 [ 2227.120097] Node 1 Normal free:66544kB min:53696kB low:67120kB high:80544kB active_anon:1340kB inactive_anon:33352kB active_file:2240kB inactive_file:1744kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:224kB pagetables:276kB bounce:0kB free_pcp:1076kB local_pcp:736kB free_cma:0kB [ 2227.155881] Node 0 active_anon:56704kB inactive_anon:188680kB active_file:84kB inactive_file:348kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:141676kB dirty:0kB writeback:0kB shmem:190616kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2227.197425] (UME) 6*64kB (UME) 4*128kB (UME) 2*256kB (ME) 2*512kB (ME) 2*1024kB (UE) 1*2048kB (M) 1*4096kB (U) = 11068kB [ 2227.199198] Node 1 active_anon:1340kB inactive_anon:33352kB active_file:1128kB inactive_file:1112kB unevictable:0kB isolated(anon):0kB isolated(file):256kB mapped:37316kB dirty:0kB writeback:0kB shmem:33700kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2227.247958] Node 0 DMA32: 2437*4kB (UMEH) 720*8kB (UMEH) 158*16kB (UMEH) 564*32kB (UMEH) 7*64kB (H) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36532kB [ 2227.252654] Node 0 DMA free:10996kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2227.288954] syz-executor.1: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2227.306036] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2227.306062] Node 0 DMA32 free:36560kB min:36200kB low:45248kB high:54296kB active_anon:56804kB inactive_anon:188680kB active_file:64kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:7392kB pagetables:3112kB bounce:0kB free_pcp:84kB local_pcp:0kB free_cma:0kB [ 2227.306084] lowmem_reserve[]: 0 0 0 0 0 [ 2227.306105] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2227.306126] lowmem_reserve[]: 0 0 0 0 0 [ 2227.306147] Node 1 Normal free:31276kB min:53696kB low:67120kB high:80544kB active_anon:1340kB inactive_anon:33352kB active_file:652kB inactive_file:104kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:224kB pagetables:276kB bounce:0kB free_pcp:104kB local_pcp:0kB free_cma:0kB [ 2227.306170] lowmem_reserve[]: 0 0 0 0 0 [ 2227.311861] lowmem_reserve[]: [ 2227.412673] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2227.450164] Node 1 Normal: 451*4kB (UM) 51*8kB (UM) 277*16kB (UME) 742*32kB (UME) 10*64kB (U) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 31028kB [ 2227.473330] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 2227.480929] CPU: 0 PID: 30260 Comm: syz-executor.1 Not tainted 4.14.229-syzkaller #0 [ 2227.489015] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2227.489020] Call Trace: [ 2227.489045] dump_stack+0x1b2/0x281 [ 2227.489059] warn_alloc.cold+0x96/0x1cc [ 2227.489071] ? zone_watermark_ok_safe+0x220/0x220 [ 2227.489092] __alloc_pages_nodemask+0x2127/0x2720 [ 2227.489108] ? lock_acquire+0x170/0x3f0 [ 2227.489124] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2227.489142] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2227.489156] ? __mutex_unlock_slowpath+0x75/0x770 [ 2227.489163] ? retint_kernel+0x2d/0x2d [ 2227.489181] alloc_pages_current+0x155/0x260 [ 2227.514319] Node 0 [ 2227.518606] ion_page_pool_alloc+0x118/0x1b0 [ 2227.518617] ion_system_heap_allocate+0x133/0x8c0 [ 2227.518629] ? _raw_spin_unlock+0x29/0x40 [ 2227.518637] ? _ion_heap_freelist_drain+0x6e/0x410 [ 2227.518646] ? ion_system_contig_heap_create+0x130/0x130 [ 2227.518655] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2227.518667] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2227.518677] ion_alloc+0x27a/0x810 [ 2227.518690] ? ion_dma_buf_release+0x40/0x40 [ 2227.518703] ? __might_fault+0x177/0x1b0 [ 2227.518715] ion_ioctl+0xea/0x1f0 [ 2227.518723] ? ion_query_heaps+0x360/0x360 [ 2227.518734] ? ion_query_heaps+0x360/0x360 [ 2227.518745] do_vfs_ioctl+0x75a/0xff0 [ 2227.518757] ? ioctl_preallocate+0x1a0/0x1a0 [ 2227.545937] DMA: [ 2227.546900] ? lock_downgrade+0x740/0x740 [ 2227.562537] 7*4kB [ 2227.567535] ? __fget+0x225/0x360 [ 2227.592836] (ME) [ 2227.594946] ? do_vfs_ioctl+0xff0/0xff0 [ 2227.614079] 5*8kB [ 2227.615257] ? security_file_ioctl+0x83/0xb0 [ 2227.617324] (ME) [ 2227.621470] SyS_ioctl+0x7f/0xb0 [ 2227.621480] ? do_vfs_ioctl+0xff0/0xff0 [ 2227.621491] do_syscall_64+0x1d5/0x640 [ 2227.621504] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2227.621513] RIP: 0033:0x466459 [ 2227.621517] RSP: 002b:00007f431c691188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2227.621526] RAX: ffffffffffffffda RBX: 000000000056c0b0 RCX: 0000000000466459 [ 2227.621531] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2227.621535] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2227.621539] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c0b0 [ 2227.621544] R13: 00007ffd8dc7798f R14: 00007f431c691300 R15: 0000000000022000 [ 2227.631160] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2227.647309] 5*16kB [ 2227.660773] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2227.660781] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2227.660787] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2227.660791] 56121 total pagecache pages [ 2227.660801] 0 pages in swap cache [ 2227.660806] Swap cache stats: add 0, delete 0, find 0/0 [ 2227.660809] Free swap = 0kB [ 2227.660813] Total swap = 0kB [ 2227.660819] 2097051 pages RAM [ 2227.660822] 0 pages HighMem/MovableOnly [ 2227.660825] 363848 pages reserved [ 2227.660828] 0 pages cma reserved [ 2227.764232] 0 [ 2227.770333] warn_alloc_show_mem: 1 callbacks suppressed [ 2227.770338] Mem-Info: [ 2227.793671] (UM) 7*32kB (UME) 6*64kB (UME) 4*128kB (UME) 2*256kB (ME) 2*512kB (ME) 2*1024kB (UE) 1*2048kB (M) 1*4096kB (U) = 10996kB [ 2227.826647] active_anon:14511 inactive_anon:55508 isolated_anon:0 [ 2227.826647] active_file:189 inactive_file:223 isolated_file:32 [ 2227.826647] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2227.826647] slab_reclaimable:12096 slab_unreclaimable:112589 [ 2227.826647] mapped:44423 shmem:56079 pagetables:847 bounce:0 [ 2227.826647] free:20683 free_pcp:259 free_cma:0 [ 2227.834464] 0 0 0 0 [ 2227.874829] Node 0 DMA: 6*4kB (ME) 6*8kB (UME) 5*16kB (UM) 7*32kB (UME) 6*64kB (UME) 10*128kB (UME) 7*256kB (UME) 4*512kB (UME) 1*1024kB (E) 2*2048kB (UM) 0*4096kB = 11000kB [ 2227.903139] Node 0 DMA32: 959*4kB (UMEH) 831*8kB (UMEH) 328*16kB (UMEH) 618*32kB (UMEH) 7*64kB (H) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 35956kB [ 2227.906089] Node 0 [ 2227.932631] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2227.940890] DMA32: 1053*4kB (UMEH) 777*8kB (UMEH) 328*16kB (UMEH) 618*32kB (UMEH) 7*64kB (H) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 35900kB [ 2227.966374] syz-executor.5: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2227.998061] Node 0 active_anon:56704kB inactive_anon:188680kB active_file:140kB inactive_file:96kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:141376kB dirty:0kB writeback:0kB shmem:190616kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2228.001652] Node 1 [ 2228.027513] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2228.045055] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 2228.048470] Node 1 Normal: 1360*4kB (UM) 142*8kB (UM) 290*16kB (UME) 750*32kB (UME) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 35216kB [ 2228.060068] CPU: 0 PID: 30309 Comm: syz-executor.5 Not tainted 4.14.229-syzkaller #0 [ 2228.064640] Node 1 active_anon:1328kB inactive_anon:33352kB active_file:4kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:34816kB dirty:0kB writeback:0kB shmem:33700kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2228.072275] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2228.072280] Call Trace: [ 2228.072303] dump_stack+0x1b2/0x281 [ 2228.072317] warn_alloc.cold+0x96/0x1cc [ 2228.072328] ? zone_watermark_ok_safe+0x220/0x220 [ 2228.072350] __alloc_pages_nodemask+0x2127/0x2720 [ 2228.072360] ? lock_acquire+0x170/0x3f0 [ 2228.072372] ? lock_acquire+0x170/0x3f0 [ 2228.072386] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2228.072403] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2228.104484] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2228.109894] ? __mutex_unlock_slowpath+0x75/0x770 [ 2228.109910] alloc_pages_current+0x155/0x260 [ 2228.109924] ion_page_pool_alloc+0x118/0x1b0 [ 2228.109934] ion_system_heap_allocate+0x133/0x8c0 [ 2228.109947] ? _raw_spin_unlock+0x29/0x40 [ 2228.112567] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2228.116214] ? _ion_heap_freelist_drain+0x6e/0x410 [ 2228.120562] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2228.125127] ? ion_system_contig_heap_create+0x130/0x130 [ 2228.125139] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2228.125151] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2228.125161] ion_alloc+0x27a/0x810 [ 2228.125175] ? ion_dma_buf_release+0x40/0x40 [ 2228.125186] ? __might_fault+0x177/0x1b0 [ 2228.125196] ion_ioctl+0xea/0x1f0 [ 2228.125205] ? ion_query_heaps+0x360/0x360 [ 2228.125216] ? ion_query_heaps+0x360/0x360 [ 2228.125229] do_vfs_ioctl+0x75a/0xff0 [ 2228.158025] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2228.162569] ? ioctl_preallocate+0x1a0/0x1a0 [ 2228.166969] 56117 total pagecache pages [ 2228.171466] ? lock_downgrade+0x740/0x740 [ 2228.171480] ? __fget+0x225/0x360 [ 2228.171490] ? do_vfs_ioctl+0xff0/0xff0 [ 2228.171500] ? security_file_ioctl+0x83/0xb0 [ 2228.171510] SyS_ioctl+0x7f/0xb0 [ 2228.171518] ? do_vfs_ioctl+0xff0/0xff0 [ 2228.171529] do_syscall_64+0x1d5/0x640 [ 2228.171543] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2228.171551] RIP: 0033:0x466459 [ 2228.171556] RSP: 002b:00007ff517869188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2228.200227] Node 0 [ 2228.203118] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 2228.208690] 0 pages in swap cache [ 2228.213599] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2228.213609] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2228.220700] DMA free:10972kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2228.221968] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2228.226380] lowmem_reserve[]: [ 2228.230465] R13: 00007ffe3e591c2f R14: 00007ff517869300 R15: 0000000000022000 [ 2228.249661] Normal: [ 2228.290070] Swap cache stats: add 0, delete 0, find 0/0 [ 2228.309548] 419*4kB [ 2228.323376] Free swap = 0kB [ 2228.343731] (M) [ 2228.363369] syz-executor.1: [ 2228.387541] 24*8kB [ 2228.393896] 0 2717 2718 2718 2718 [ 2228.402369] (M) [ 2228.403468] Node 0 [ 2228.403472] 75*16kB (UME) [ 2228.405804] DMA32 free:17632kB min:36200kB low:45248kB high:54296kB active_anon:56608kB inactive_anon:188680kB active_file:48kB inactive_file:44kB unevictable:0kB writepending:0kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:7392kB pagetables:3032kB bounce:0kB free_pcp:240kB local_pcp:120kB free_cma:0kB [ 2228.418472] 750*32kB [ 2228.444024] page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2228.457164] Total swap = 0kB [ 2228.457756] (UME) [ 2228.464637] 2097051 pages RAM [ 2228.469965] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 2228.474607] 0*64kB 0*128kB [ 2228.475214] CPU: 1 PID: 30260 Comm: syz-executor.1 Not tainted 4.14.229-syzkaller #0 [ 2228.475223] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2228.482300] 0*256kB [ 2228.486032] Call Trace: [ 2228.495563] 0*512kB [ 2228.497854] dump_stack+0x1b2/0x281 [ 2228.500478] 0*1024kB [ 2228.502745] warn_alloc.cold+0x96/0x1cc [ 2228.506352] 0*2048kB [ 2228.508780] ? zone_watermark_ok_safe+0x220/0x220 [ 2228.508792] ? usleep_range+0x130/0x130 [ 2228.508805] ? try_to_free_pages+0x23f/0x6e0 [ 2228.508815] ? _find_next_bit+0xdb/0x100 [ 2228.508825] ? run_timer_softirq+0x5a0/0x5a0 [ 2228.508856] __alloc_pages_nodemask+0x2127/0x2720 [ 2228.513119] 0*4096kB [ 2228.515552] ? lock_acquire+0x170/0x3f0 [ 2228.520421] = 27068kB [ 2228.524353] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2228.531208] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2228.532800] ? ion_page_pool_alloc+0x9e/0x1b0 [ 2228.537462] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2228.542343] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2228.542356] ? retint_kernel+0x2d/0x2d [ 2228.542371] alloc_pages_current+0x155/0x260 [ 2228.542388] ion_page_pool_alloc+0x118/0x1b0 [ 2228.544792] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2228.548765] ion_system_heap_allocate+0x133/0x8c0 [ 2228.548779] ? _raw_spin_unlock+0x29/0x40 [ 2228.548786] ? _ion_heap_freelist_drain+0x6e/0x410 [ 2228.548795] ? ion_system_contig_heap_create+0x130/0x130 [ 2228.548807] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2228.548821] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2228.551221] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2228.556070] ion_alloc+0x27a/0x810 [ 2228.564996] 56117 total pagecache pages [ 2228.569447] ? ion_dma_buf_release+0x40/0x40 [ 2228.569461] ? __might_fault+0x177/0x1b0 [ 2228.569472] ion_ioctl+0xea/0x1f0 [ 2228.569482] ? ion_query_heaps+0x360/0x360 [ 2228.578212] 0 pages in swap cache [ 2228.583712] ? ion_query_heaps+0x360/0x360 [ 2228.587604] Swap cache stats: add 0, delete 0, find 0/0 [ 2228.592298] do_vfs_ioctl+0x75a/0xff0 [ 2228.592312] ? ioctl_preallocate+0x1a0/0x1a0 [ 2228.592321] ? lock_downgrade+0x740/0x740 [ 2228.592333] ? __fget+0x225/0x360 [ 2228.592343] ? do_vfs_ioctl+0xff0/0xff0 [ 2228.596924] Free swap = 0kB [ 2228.606234] ? security_file_ioctl+0x83/0xb0 [ 2228.606248] SyS_ioctl+0x7f/0xb0 [ 2228.606256] ? do_vfs_ioctl+0xff0/0xff0 [ 2228.606268] do_syscall_64+0x1d5/0x640 [ 2228.606288] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2228.611378] Total swap = 0kB [ 2228.615796] RIP: 0033:0x466459 [ 2228.620797] 2097051 pages RAM [ 2228.626196] RSP: 002b:00007f431c691188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2228.631314] 0 pages HighMem/MovableOnly [ 2228.636102] RAX: ffffffffffffffda RBX: 000000000056c0b0 RCX: 0000000000466459 [ 2228.636113] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2228.644865] 363848 pages reserved [ 2228.648343] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2228.648350] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c0b0 [ 2228.648355] R13: 00007ffd8dc7798f R14: 00007f431c691300 R15: 0000000000022000 [ 2228.652876] 0 pages HighMem/MovableOnly [ 2228.660458] syz-executor.5: [ 2228.661191] 363848 pages reserved [ 2228.664321] page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 2228.672821] lowmem_reserve[]: [ 2228.691225] 0 pages cma reserved [ 2228.698321] 0 pages cma reserved [ 2228.712031] (null) [ 2228.738290] 0 [ 2228.795875] Out of memory (oom_kill_allocating_task): Kill process 29283 (syz-executor.5) score 0 or sacrifice child [ 2228.878143] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 2228.898584] CPU: 0 PID: 30309 Comm: syz-executor.5 Not tainted 4.14.229-syzkaller #0 [ 2228.906496] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2228.915861] Call Trace: [ 2228.918461] dump_stack+0x1b2/0x281 [ 2228.922141] warn_alloc.cold+0x96/0x1cc [ 2228.926142] ? zone_watermark_ok_safe+0x220/0x220 [ 2228.930994] ? usleep_range+0x130/0x130 [ 2228.934981] ? try_to_free_pages+0x23f/0x6e0 [ 2228.939404] ? _find_next_bit+0xdb/0x100 [ 2228.943478] ? run_timer_softirq+0x5a0/0x5a0 [ 2228.947903] __alloc_pages_nodemask+0x2127/0x2720 [ 2228.952769] ? lock_acquire+0x170/0x3f0 [ 2228.956894] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2228.961752] ? ion_page_pool_alloc+0x9e/0x1b0 [ 2228.966387] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2228.971881] alloc_pages_current+0x155/0x260 [ 2228.976315] ion_page_pool_alloc+0x118/0x1b0 [ 2228.980754] ion_system_heap_allocate+0x133/0x8c0 [ 2228.985617] ? _raw_spin_unlock+0x29/0x40 [ 2228.989780] ? _ion_heap_freelist_drain+0x6e/0x410 [ 2228.994723] ? ion_system_contig_heap_create+0x130/0x130 [ 2229.000207] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2229.005241] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2229.010099] ion_alloc+0x27a/0x810 [ 2229.013739] ? ion_dma_buf_release+0x40/0x40 [ 2229.018163] ? __might_fault+0x177/0x1b0 [ 2229.022268] ion_ioctl+0xea/0x1f0 [ 2229.025736] ? ion_query_heaps+0x360/0x360 [ 2229.029992] ? ion_query_heaps+0x360/0x360 [ 2229.034253] do_vfs_ioctl+0x75a/0xff0 [ 2229.038151] ? ioctl_preallocate+0x1a0/0x1a0 [ 2229.042568] ? lock_downgrade+0x740/0x740 [ 2229.046733] ? __fget+0x225/0x360 [ 2229.050202] ? do_vfs_ioctl+0xff0/0xff0 [ 2229.054191] ? security_file_ioctl+0x83/0xb0 [ 2229.058641] SyS_ioctl+0x7f/0xb0 [ 2229.062019] ? do_vfs_ioctl+0xff0/0xff0 [ 2229.067054] do_syscall_64+0x1d5/0x640 [ 2229.071717] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2229.077025] RIP: 0033:0x466459 [ 2229.080211] RSP: 002b:00007ff517869188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2229.088013] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 2229.095301] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2229.102599] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2229.109882] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2229.117527] R13: 00007ffe3e591c2f R14: 00007ff517869300 R15: 0000000000022000 [ 2229.117961] 0 0 0 0 [ 2229.168147] Killed process 29283 (syz-executor.5) total-vm:93120kB, anon-rss:104kB, file-rss:34304kB, shmem-rss:0kB [ 2229.188101] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2229.335999] lowmem_reserve[]: 0 0 0 0 0 [ 2229.360618] Node 1 Normal free:720304kB min:53696kB low:67120kB high:80544kB active_anon:1552kB inactive_anon:33352kB active_file:424kB inactive_file:9200kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:256kB pagetables:240kB bounce:0kB free_pcp:276kB local_pcp:148kB free_cma:0kB [ 2229.361308] bond0 (unregistering): Released all slaves [ 2229.498005] warn_alloc_show_mem: 2 callbacks suppressed [ 2229.498009] Mem-Info: [ 2229.505886] active_anon:14565 inactive_anon:55508 isolated_anon:0 [ 2229.505886] active_file:343 inactive_file:2400 isolated_file:0 [ 2229.505886] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2229.505886] slab_reclaimable:12103 slab_unreclaimable:112613 [ 2229.505886] mapped:46072 shmem:56079 pagetables:818 bounce:0 [ 2229.505886] free:228859 free_pcp:246 free_cma:0 [ 2229.562833] lowmem_reserve[]: 0 0 0 0 0 [ 2229.582965] Node 0 DMA: 7*4kB (UME) 6*8kB (UME) 5*16kB (UM) 6*32kB (ME) 6*64kB (UME) 10*128kB (UME) 7*256kB (UME) 4*512kB (UME) 1*1024kB (E) 2*2048kB (UM) 0*4096kB = 10972kB [ 2229.658015] Node 0 active_anon:57208kB inactive_anon:188680kB active_file:948kB inactive_file:1748kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:142720kB dirty:100kB writeback:0kB shmem:190616kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2229.686617] Node 0 DMA32: 495*4kB (MEH) 322*8kB (UMEH) 108*16kB (UMEH) 26*32kB (UMEH) 389*64kB (UH) 350*128kB (U) 99*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 102156kB [ 2229.754222] Node 1 active_anon:1552kB inactive_anon:33352kB active_file:824kB inactive_file:8752kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:42568kB dirty:0kB writeback:0kB shmem:33700kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2229.761505] Node 0 [ 2229.838009] Node 0 DMA free:10972kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2229.903761] Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2229.925581] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2229.938928] Node 0 DMA32 free:45772kB min:36200kB low:45248kB high:54296kB active_anon:57208kB inactive_anon:188680kB active_file:1048kB inactive_file:3544kB unevictable:0kB writepending:296kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:7424kB pagetables:3032kB bounce:0kB free_pcp:908kB local_pcp:496kB free_cma:0kB [ 2229.965455] Node 1 Normal: 0*4kB 1*8kB (M) 6*16kB (UME) 4*32kB (UE) 2197*64kB (U) 615*128kB (U) 334*256kB (UM) 61*512kB (UM) 2*1024kB (UM) 8*2048kB (UM) 26*4096kB (U) = 461224kB [ 2230.041217] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2230.068608] lowmem_reserve[]: 0 0 0 0 0 [ 2230.070495] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2230.072664] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2230.112009] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2230.198549] lowmem_reserve[]: 0 0 0 0 0 [ 2230.202580] Node 1 Normal free:188544kB min:53696kB low:67120kB high:80544kB active_anon:1196kB inactive_anon:33352kB active_file:3028kB inactive_file:8660kB unevictable:0kB writepending:8kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:224kB pagetables:252kB bounce:0kB free_pcp:768kB local_pcp:300kB free_cma:0kB [ 2230.284911] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2230.307965] lowmem_reserve[]: 0 0 0 0 0 [ 2230.312089] Node 0 DMA: 7*4kB (UME) 6*8kB (UME) 5*16kB (UM) 6*32kB (ME) 6*64kB (UME) 10*128kB (UME) 7*256kB (UME) 4*512kB (UME) 1*1024kB (E) 2*2048kB (UM) 0*4096kB = 10972kB [ 2230.366323] 61144 total pagecache pages [ 2230.390436] 0 pages in swap cache [ 2230.393914] Swap cache stats: add 0, delete 0, find 0/0 [ 2230.401697] Node 0 DMA32: 775*4kB (UMEH) 303*8kB (UMEH) 152*16kB (UMEH) 34*32kB (UMEH) 8*64kB (UH) 1*128kB (U) 33*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18132kB [ 2230.420467] oom_reaper: reaped process 30312 (syz-executor.2), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 2230.440728] Free swap = 0kB [ 2230.443777] Total swap = 0kB [ 2230.446796] 2097051 pages RAM [ 2230.466695] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2230.477787] 0 pages HighMem/MovableOnly [ 2230.487996] 363848 pages reserved [ 2230.491478] 0 pages cma reserved [ 2230.508032] Node 1 Normal: 224*4kB (UM) 77*8kB (UM) 57*16kB (UME) 22*32kB (UME) 8*64kB (UM) 4*128kB (UM) 1*256kB (M) 46*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 27960kB [ 2230.561549] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2230.588595] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2230.597791] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2230.613852] syz-executor.1: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2230.625935] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2230.634647] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 2230.643185] 56244 total pagecache pages [ 2230.647198] 0 pages in swap cache [ 2230.650888] CPU: 0 PID: 30248 Comm: syz-executor.1 Not tainted 4.14.229-syzkaller #0 [ 2230.658798] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2230.668162] Call Trace: [ 2230.670786] dump_stack+0x1b2/0x281 [ 2230.674536] warn_alloc.cold+0x96/0x1cc [ 2230.678699] ? zone_watermark_ok_safe+0x220/0x220 [ 2230.684033] __alloc_pages_nodemask+0x2127/0x2720 [ 2230.690314] ? lock_acquire+0x170/0x3f0 [ 2230.694332] ? lock_acquire+0x170/0x3f0 [ 2230.698437] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2230.703310] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2230.709280] ? __mutex_unlock_slowpath+0x75/0x770 [ 2230.714231] alloc_pages_current+0x155/0x260 [ 2230.718658] ion_page_pool_alloc+0x118/0x1b0 [ 2230.721484] Swap cache stats: add 0, delete 0, find 0/0 [ 2230.723069] ion_system_heap_allocate+0x133/0x8c0 [ 2230.733348] ? _raw_spin_unlock+0x29/0x40 [ 2230.737523] ? _ion_heap_freelist_drain+0x6e/0x410 [ 2230.741617] Free swap = 0kB [ 2230.742467] ? ion_system_contig_heap_create+0x130/0x130 [ 2230.742482] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2230.745490] Total swap = 0kB [ 2230.750938] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2230.750950] ion_alloc+0x27a/0x810 [ 2230.750963] ? ion_dma_buf_release+0x40/0x40 [ 2230.750975] ? __might_fault+0x177/0x1b0 [ 2230.750985] ion_ioctl+0xea/0x1f0 [ 2230.750994] ? ion_query_heaps+0x360/0x360 [ 2230.751005] ? ion_query_heaps+0x360/0x360 [ 2230.751015] do_vfs_ioctl+0x75a/0xff0 [ 2230.751027] ? ioctl_preallocate+0x1a0/0x1a0 [ 2230.751040] ? lock_downgrade+0x740/0x740 [ 2230.788221] 2097051 pages RAM [ 2230.790448] ? __fget+0x225/0x360 [ 2230.794413] 0 pages HighMem/MovableOnly [ 2230.798839] ? do_vfs_ioctl+0xff0/0xff0 [ 2230.798852] ? security_file_ioctl+0x83/0xb0 [ 2230.798862] SyS_ioctl+0x7f/0xb0 [ 2230.798870] ? do_vfs_ioctl+0xff0/0xff0 [ 2230.798881] do_syscall_64+0x1d5/0x640 [ 2230.798896] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2230.798904] RIP: 0033:0x466459 [ 2230.798909] RSP: 002b:00007f431c6d3188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2230.798918] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 2230.798923] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2230.798928] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2230.798932] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2230.798938] R13: 00007ffd8dc7798f R14: 00007f431c6d3300 R15: 0000000000022000 [ 2230.805700] warn_alloc_show_mem: 1 callbacks suppressed [ 2230.805705] Mem-Info: [ 2230.808340] syz-executor.5 invoked oom-killer: gfp_mask=0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 2230.810133] active_anon:14461 inactive_anon:55508 isolated_anon:0 [ 2230.810133] active_file:32 inactive_file:26 isolated_file:7 [ 2230.810133] unevictable:0 dirty:7 writeback:0 unstable:0 [ 2230.810133] slab_reclaimable:12153 slab_unreclaimable:113414 [ 2230.810133] mapped:44192 shmem:56079 pagetables:782 bounce:0 [ 2230.810133] free:13751 free_pcp:30 free_cma:0 [ 2230.814071] (null) [ 2230.818566] Node 0 active_anon:56648kB inactive_anon:188680kB active_file:152kB inactive_file:16kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:141800kB dirty:20kB writeback:0kB shmem:190616kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2230.818586] Node 1 active_anon:1196kB inactive_anon:33352kB active_file:0kB inactive_file:88kB unevictable:0kB isolated(anon):0kB isolated(file):28kB mapped:34968kB dirty:8kB writeback:0kB shmem:33700kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2230.818590] Node 0 DMA free:10972kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:4kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2230.818612] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2230.818633] Node 0 DMA32 free:17528kB min:36200kB low:45248kB high:54296kB active_anon:57048kB inactive_anon:188680kB active_file:112kB inactive_file:16kB unevictable:0kB writepending:316kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:7392kB pagetables:2876kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2230.818657] lowmem_reserve[]: 0 0 0 0 0 [ 2230.818679] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2230.818699] lowmem_reserve[]: 0 0 0 0 0 [ 2230.818721] Node 1 Normal free:26504kB min:53696kB low:67120kB high:80544kB active_anon:1196kB inactive_anon:33352kB active_file:732kB inactive_file:568kB unevictable:0kB writepending:8kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:224kB pagetables:252kB bounce:0kB free_pcp:120kB local_pcp:120kB free_cma:0kB [ 2230.818743] lowmem_reserve[]: 0 0 0 0 0 [ 2230.818762] Node 0 DMA: 8*4kB (UME) 6*8kB (UME) 5*16kB (UM) 6*32kB (ME) 6*64kB (UME) 10*128kB (UME) 7*256kB (UME) 4*512kB (UME) 1*1024kB (E) 2*2048kB (UM) 0*4096kB = 10976kB [ 2230.818848] Node 0 DMA32: 1030*4kB (UMEH) 239*8kB (MEH) 99*16kB (MEH) 30*32kB (MEH) 10*64kB (UMH) 0*128kB 33*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 17664kB [ 2230.818914] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2230.818968] Node 1 Normal: 431*4kB (UM) 29*8kB (M) 12*16kB (UME) 8*32kB (ME) 7*64kB (UM) 5*128kB (UM) 6*256kB (M) 32*512kB (UM) 1*1024kB (M) 2*2048kB (M) 0*4096kB = 26532kB [ 2230.819055] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2230.819062] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2230.819069] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2230.819076] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2230.819080] 56169 total pagecache pages [ 2230.819091] 0 pages in swap cache [ 2230.819097] Swap cache stats: add 0, delete 0, find 0/0 [ 2230.819101] Free swap = 0kB [ 2230.819104] Total swap = 0kB [ 2230.819110] 2097051 pages RAM [ 2230.819114] 0 pages HighMem/MovableOnly [ 2230.819117] 363848 pages reserved [ 2230.819121] 0 pages cma reserved [ 2230.898652] 363848 pages reserved [ 2230.907638] , order=0, oom_score_adj=1000 [ 2230.984223] 0 pages cma reserved [ 2231.056121] syz-executor.5 cpuset= [ 2231.198046] syz-executor.2: [ 2231.268445] syz-executor.1: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2231.327980] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 2231.333154] CPU: 0 PID: 30248 Comm: syz-executor.1 Not tainted 4.14.229-syzkaller #0 [ 2231.341051] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2231.350416] Call Trace: [ 2231.353034] dump_stack+0x1b2/0x281 [ 2231.356694] warn_alloc.cold+0x96/0x1cc [ 2231.360689] ? zone_watermark_ok_safe+0x220/0x220 [ 2231.365559] ? usleep_range+0x130/0x130 [ 2231.369549] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 2231.374669] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 2231.379700] ? run_timer_softirq+0x5a0/0x5a0 [ 2231.384131] __alloc_pages_nodemask+0x2127/0x2720 [ 2231.388992] ? lock_acquire+0x170/0x3f0 [ 2231.392986] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2231.397840] ? ion_page_pool_alloc+0x9e/0x1b0 [ 2231.402355] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2231.407843] alloc_pages_current+0x155/0x260 [ 2231.412270] ion_page_pool_alloc+0x118/0x1b0 [ 2231.416715] ion_system_heap_allocate+0x133/0x8c0 [ 2231.421580] ? _raw_spin_unlock+0x29/0x40 [ 2231.425833] ? _ion_heap_freelist_drain+0x6e/0x410 [ 2231.430776] ? ion_system_contig_heap_create+0x130/0x130 [ 2231.436233] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2231.441257] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2231.446117] ion_alloc+0x27a/0x810 [ 2231.449665] ? ion_dma_buf_release+0x40/0x40 [ 2231.454113] ? __might_fault+0x177/0x1b0 [ 2231.458184] ion_ioctl+0xea/0x1f0 [ 2231.461646] ? ion_query_heaps+0x360/0x360 [ 2231.465886] ? ion_query_heaps+0x360/0x360 [ 2231.470124] do_vfs_ioctl+0x75a/0xff0 [ 2231.473938] ? ioctl_preallocate+0x1a0/0x1a0 [ 2231.478356] ? lock_downgrade+0x740/0x740 [ 2231.482516] ? __fget+0x225/0x360 [ 2231.485981] ? do_vfs_ioctl+0xff0/0xff0 [ 2231.489959] ? security_file_ioctl+0x83/0xb0 [ 2231.494382] SyS_ioctl+0x7f/0xb0 [ 2231.497842] ? do_vfs_ioctl+0xff0/0xff0 [ 2231.501825] do_syscall_64+0x1d5/0x640 [ 2231.505738] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2231.510939] RIP: 0033:0x466459 [ 2231.514129] RSP: 002b:00007f431c6d3188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2231.522019] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 2231.529314] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2231.536620] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2231.543904] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2231.551200] R13: 00007ffd8dc7798f R14: 00007f431c6d3300 R15: 0000000000022000 [ 2231.668046] page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2231.678018] / mems_allowed=0-1 [ 2231.681841] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 2231.683875] CPU: 1 PID: 30313 Comm: syz-executor.5 Not tainted 4.14.229-syzkaller #0 [ 2231.694887] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2231.704356] Call Trace: [ 2231.707140] dump_stack+0x1b2/0x281 [ 2231.710799] dump_header+0x178/0x82f [ 2231.714533] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2231.719650] ? ___ratelimit+0x2cd/0x530 [ 2231.723666] oom_kill_process.cold+0x10/0xa40 [ 2231.728188] out_of_memory+0xe3e/0x1190 [ 2231.732200] ? oom_killer_disable+0x1c0/0x1c0 [ 2231.736721] ? mutex_trylock+0x152/0x1a0 [ 2231.740824] __alloc_pages_nodemask+0x23e1/0x2720 [ 2231.745814] ? lock_acquire+0x170/0x3f0 [ 2231.749817] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2231.754696] ? ion_page_pool_alloc+0x9e/0x1b0 [ 2231.759214] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2231.764693] ? __list_del_entry_valid+0xb3/0xf0 [ 2231.769378] alloc_pages_current+0x155/0x260 [ 2231.773823] ion_page_pool_alloc+0x118/0x1b0 [ 2231.778242] ion_system_heap_allocate+0x133/0x8c0 [ 2231.783120] ? _raw_spin_unlock+0x29/0x40 [ 2231.787275] ? _ion_heap_freelist_drain+0x6e/0x410 [ 2231.792216] ? ion_system_contig_heap_create+0x130/0x130 [ 2231.797678] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2231.802811] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2231.807669] ion_alloc+0x27a/0x810 [ 2231.811237] ? ion_dma_buf_release+0x40/0x40 [ 2231.815664] ? __might_fault+0x177/0x1b0 [ 2231.819746] ion_ioctl+0xea/0x1f0 [ 2231.823229] ? ion_query_heaps+0x360/0x360 [ 2231.827478] ? ion_query_heaps+0x360/0x360 [ 2231.831722] do_vfs_ioctl+0x75a/0xff0 [ 2231.835536] ? ioctl_preallocate+0x1a0/0x1a0 [ 2231.839951] ? lock_downgrade+0x740/0x740 [ 2231.844114] ? __fget+0x225/0x360 [ 2231.847578] ? do_vfs_ioctl+0xff0/0xff0 [ 2231.851570] ? security_file_ioctl+0x83/0xb0 [ 2231.855991] SyS_ioctl+0x7f/0xb0 [ 2231.859364] ? do_vfs_ioctl+0xff0/0xff0 [ 2231.863366] do_syscall_64+0x1d5/0x640 [ 2231.867291] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2231.872589] RIP: 0033:0x466459 [ 2231.875781] RSP: 002b:00007ff517848188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2231.883647] RAX: ffffffffffffffda RBX: 000000000056c008 RCX: 0000000000466459 [ 2231.890966] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2231.898247] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2231.905526] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c008 [ 2231.912801] R13: 00007ffe3e591c2f R14: 00007ff517848300 R15: 0000000000022000 [ 2231.920102] CPU: 0 PID: 30312 Comm: syz-executor.2 Not tainted 4.14.229-syzkaller #0 [ 2231.928003] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2231.937451] Call Trace: [ 2231.940050] dump_stack+0x1b2/0x281 [ 2231.943690] warn_alloc.cold+0x96/0x1cc [ 2231.947774] ? zone_watermark_ok_safe+0x220/0x220 [ 2231.952722] ? usleep_range+0x130/0x130 [ 2231.956747] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 2231.961900] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 2231.966933] ? run_timer_softirq+0x5a0/0x5a0 [ 2231.971370] __alloc_pages_nodemask+0x2127/0x2720 [ 2231.976235] ? lock_acquire+0x170/0x3f0 [ 2231.980221] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2231.985196] ? ion_page_pool_alloc+0x9e/0x1b0 [ 2231.989713] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2231.995182] ? alloc_pages_current+0x135/0x260 [ 2231.999819] alloc_pages_current+0x155/0x260 [ 2232.004274] ion_page_pool_alloc+0x118/0x1b0 [ 2232.008700] ion_system_heap_allocate+0x133/0x8c0 [ 2232.013568] ? ion_alloc+0x187/0x810 [ 2232.017306] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2232.022776] ? ion_system_contig_heap_create+0x130/0x130 [ 2232.028250] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2232.033286] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2232.038167] ion_alloc+0x204/0x810 [ 2232.041735] ? ion_dma_buf_release+0x40/0x40 [ 2232.046164] ? __might_fault+0x177/0x1b0 [ 2232.050249] ion_ioctl+0xea/0x1f0 [ 2232.053717] ? ion_query_heaps+0x360/0x360 [ 2232.057960] ? retint_kernel+0x2d/0x2d [ 2232.061861] ? putname+0xcd/0x110 [ 2232.065752] ? ion_query_heaps+0x360/0x360 [ 2232.069996] do_vfs_ioctl+0x75a/0xff0 [ 2232.073812] ? ioctl_preallocate+0x1a0/0x1a0 [ 2232.078231] ? lock_downgrade+0x740/0x740 [ 2232.082402] ? __fget+0x225/0x360 [ 2232.085865] ? do_vfs_ioctl+0xff0/0xff0 [ 2232.089856] ? security_file_ioctl+0x83/0xb0 [ 2232.094280] SyS_ioctl+0x7f/0xb0 [ 2232.097654] ? do_vfs_ioctl+0xff0/0xff0 [ 2232.101642] do_syscall_64+0x1d5/0x640 [ 2232.105644] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2232.110928] RIP: 0033:0x466459 [ 2232.114129] RSP: 002b:00007effc187a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2232.122023] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 2232.129333] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2232.136715] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2232.144112] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2232.151513] R13: 00007ffc8c893f1f R14: 00007effc187a300 R15: 0000000000022000 [ 2232.487621] warn_alloc_show_mem: 1 callbacks suppressed [ 2232.487625] Mem-Info: [ 2232.504291] active_anon:14506 inactive_anon:55508 isolated_anon:0 [ 2232.504291] active_file:514 inactive_file:1856 isolated_file:0 [ 2232.504291] unevictable:0 dirty:19 writeback:0 unstable:0 [ 2232.504291] slab_reclaimable:12162 slab_unreclaimable:115324 [ 2232.504291] mapped:54507 shmem:56079 pagetables:819 bounce:0 [ 2232.504291] free:620861 free_pcp:445 free_cma:0 [ 2232.542637] Node 0 active_anon:56828kB inactive_anon:188680kB active_file:1604kB inactive_file:6840kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:182204kB dirty:28kB writeback:0kB shmem:190616kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2232.545020] Mem-Info: [ 2232.575928] Node 1 active_anon:1196kB inactive_anon:33352kB active_file:452kB inactive_file:884kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:35924kB dirty:48kB writeback:0kB shmem:33700kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2232.603991] active_anon:14506 inactive_anon:55508 isolated_anon:0 [ 2232.603991] active_file:514 inactive_file:1981 isolated_file:0 [ 2232.603991] unevictable:0 dirty:19 writeback:0 unstable:0 [ 2232.603991] slab_reclaimable:12162 slab_unreclaimable:114986 [ 2232.603991] mapped:54582 shmem:56079 pagetables:819 bounce:0 [ 2232.603991] free:621048 free_pcp:436 free_cma:0 [ 2232.604012] Node 0 active_anon:56828kB inactive_anon:188680kB active_file:1604kB inactive_file:7040kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:182404kB dirty:28kB writeback:0kB shmem:190616kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2232.604028] Node 1 active_anon:1196kB inactive_anon:33352kB active_file:452kB inactive_file:884kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:35924kB dirty:48kB writeback:0kB shmem:33700kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2232.604032] Node 0 DMA free:14860kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:108kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2232.604054] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2232.604074] Node 0 DMA32 free:651180kB min:36200kB low:45248kB high:54296kB active_anon:56828kB inactive_anon:188680kB active_file:1556kB inactive_file:7040kB unevictable:0kB writepending:28kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:7424kB pagetables:3024kB bounce:0kB free_pcp:336kB local_pcp:268kB free_cma:0kB [ 2232.604097] lowmem_reserve[]: 0 0 0 0 0 [ 2232.604117] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2232.646469] Node 0 [ 2232.674716] lowmem_reserve[]: [ 2232.697730] DMA free:14860kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:108kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2232.723585] 0 [ 2232.726498] lowmem_reserve[]: [ 2232.757590] 0 [ 2232.767528] 0 [ 2232.786739] 0 [ 2232.793265] 2717 [ 2232.818359] 0 [ 2232.823883] 2718 [ 2232.825395] 0 [ 2232.827187] 2718 [ 2232.832800] 2718 [ 2232.833005] Node 1 [ 2232.836857] Normal free:1818152kB min:53696kB low:67120kB high:80544kB active_anon:1196kB inactive_anon:33352kB active_file:452kB inactive_file:884kB unevictable:0kB writepending:48kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:224kB pagetables:252kB bounce:0kB free_pcp:1408kB local_pcp:696kB free_cma:0kB [ 2232.843492] Node 0 [ 2232.872366] lowmem_reserve[]: 0 0 0 0 0 [ 2232.876046] DMA32 free:649744kB min:36200kB low:45248kB high:54296kB active_anon:56828kB inactive_anon:188680kB active_file:1556kB inactive_file:7440kB unevictable:0kB writepending:28kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:7424kB pagetables:3024kB bounce:0kB free_pcp:316kB local_pcp:64kB free_cma:0kB [ 2232.878998] Node 0 DMA: 4*4kB (ME) 4*8kB (UME) 2*16kB (UM) 6*32kB (UME) 12*64kB (UME) 8*128kB (UME) 6*256kB (UME) 4*512kB (UME) 3*1024kB (UE) 1*2048kB (M) 1*4096kB (U) = 14864kB [ 2232.912811] lowmem_reserve[]: 0 0 0 0 0 [ 2232.924089] Node 0 DMA32: 488*4kB (UME) 81*8kB (UME) 11*16kB (UE) 5*32kB (UME) 4948*64kB (U) 1573*128kB (UE) 436*256kB (UM) 7*512kB (UM) 13*1024kB (U) 0*2048kB 0*4096kB = 649464kB [ 2232.932194] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2232.945250] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2232.974675] lowmem_reserve[]: 0 0 0 0 0 [ 2232.982427] Node 1 Normal: [ 2232.985461] Node 1 Normal free:1818152kB min:53696kB low:67120kB high:80544kB active_anon:1196kB inactive_anon:33352kB active_file:452kB inactive_file:884kB unevictable:0kB writepending:48kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:224kB pagetables:252kB bounce:0kB free_pcp:1408kB local_pcp:712kB free_cma:0kB [ 2232.988823] 1028*4kB [ 2233.020849] lowmem_reserve[]: [ 2233.021301] (UM) [ 2233.023280] 0 [ 2233.026384] 151*8kB [ 2233.030255] 0 [ 2233.030737] (UM) [ 2233.032765] 0 [ 2233.034555] 150*16kB [ 2233.036599] 0 [ 2233.042018] (UME) [ 2233.043326] 0 [ 2233.043829] 8*32kB [ 2233.047766] (ME) 4208*64kB (UM) 1370*128kB (UM) 688*256kB (UM) 313*512kB (UM) 501*1024kB (UM) 174*2048kB (UM) 39*4096kB (U) = 1818152kB [ 2233.051824] Node 0 DMA: 4*4kB (ME) 4*8kB (UME) 2*16kB (UM) 6*32kB (UME) 12*64kB (UME) 8*128kB (UME) 6*256kB (UME) 4*512kB (UME) 3*1024kB (UE) 1*2048kB (M) 1*4096kB (U) = 14864kB [ 2233.066445] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2233.080690] Node 0 DMA32: 488*4kB (UME) 180*8kB (UME) 17*16kB (UE) 5*32kB (UME) 4948*64kB (U) 1573*128kB (UE) 436*256kB (UM) 7*512kB (UM) 13*1024kB (U) 0*2048kB 0*4096kB = 650352kB [ 2233.092421] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2233.106199] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2233.117283] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2233.125557] Node 1 Normal: 1028*4kB (UM) 153*8kB (UM) 150*16kB (UME) 8*32kB (ME) 4208*64kB (UM) 1370*128kB (UM) 688*256kB (UM) 313*512kB (UM) 501*1024kB (UM) 174*2048kB (UM) 39*4096kB (U) = 1818168kB [ 2233.137030] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2233.153467] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2233.160879] 58749 total pagecache pages [ 2233.173639] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2233.173983] 0 pages in swap cache [ 2233.183294] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2233.186204] Swap cache stats: add 0, delete 0, find 0/0 [ 2233.199213] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2233.200675] Free swap = 0kB [ 2233.212317] Total swap = 0kB [ 2233.213403] 58749 total pagecache pages [ 2233.215367] 2097051 pages RAM [ 2233.223244] 0 pages HighMem/MovableOnly [ 2233.224050] 0 pages in swap cache [ 2233.227243] 363848 pages reserved [ 2233.234822] 0 pages cma reserved [ 2233.236140] Swap cache stats: add 0, delete 0, find 0/0 [ 2233.238527] Out of memory (oom_kill_allocating_task): Kill process 30313 (syz-executor.5) score 0 or sacrifice child [ 2233.245030] Free swap = 0kB [ 2233.254854] Killed process 30313 (syz-executor.5) total-vm:93516kB, anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 2233.261810] Total swap = 0kB [ 2233.268315] syz-executor.5: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2233.276350] 2097051 pages RAM [ 2233.283592] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 2233.287625] 0 pages HighMem/MovableOnly [ 2233.293304] CPU: 1 PID: 30313 Comm: syz-executor.5 Not tainted 4.14.229-syzkaller #0 [ 2233.302379] 363848 pages reserved [ 2233.305367] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2233.305372] Call Trace: [ 2233.305393] dump_stack+0x1b2/0x281 [ 2233.305409] warn_alloc.cold+0x96/0x1cc [ 2233.309128] 0 pages cma reserved [ 2233.318261] ? lock_downgrade+0x740/0x740 [ 2233.318272] ? zone_watermark_ok_safe+0x220/0x220 [ 2233.318283] ? wake_up_q+0x82/0xd0 [ 2233.318299] ? wait_for_completion_io+0x10/0x10 [ 2233.318312] __alloc_pages_nodemask+0x2127/0x2720 [ 2233.318327] ? lock_acquire+0x170/0x3f0 [ 2233.318347] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2233.362850] ? ion_page_pool_alloc+0x9e/0x1b0 [ 2233.367378] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2233.372878] ? __list_del_entry_valid+0xb3/0xf0 [ 2233.377572] alloc_pages_current+0x155/0x260 [ 2233.382001] ion_page_pool_alloc+0x118/0x1b0 [ 2233.386436] ion_system_heap_allocate+0x133/0x8c0 [ 2233.391374] ? _raw_spin_unlock+0x29/0x40 [ 2233.395537] ? _ion_heap_freelist_drain+0x6e/0x410 [ 2233.400490] ? ion_system_contig_heap_create+0x130/0x130 [ 2233.405962] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2233.410994] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2233.415877] ion_alloc+0x27a/0x810 [ 2233.419438] ? ion_dma_buf_release+0x40/0x40 [ 2233.423877] ? __might_fault+0x177/0x1b0 [ 2233.427959] ion_ioctl+0xea/0x1f0 [ 2233.431434] ? ion_query_heaps+0x360/0x360 [ 2233.435687] ? ion_query_heaps+0x360/0x360 [ 2233.440098] do_vfs_ioctl+0x75a/0xff0 [ 2233.443920] ? ioctl_preallocate+0x1a0/0x1a0 [ 2233.448342] ? lock_downgrade+0x740/0x740 [ 2233.452509] ? __fget+0x225/0x360 [ 2233.455974] ? do_vfs_ioctl+0xff0/0xff0 [ 2233.459964] ? security_file_ioctl+0x83/0xb0 [ 2233.464384] SyS_ioctl+0x7f/0xb0 [ 2233.467758] ? do_vfs_ioctl+0xff0/0xff0 [ 2233.471752] do_syscall_64+0x1d5/0x640 [ 2233.475659] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2233.480887] RIP: 0033:0x466459 [ 2233.484077] RSP: 002b:00007ff517848188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2233.491802] RAX: ffffffffffffffda RBX: 000000000056c008 RCX: 0000000000466459 [ 2233.499230] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2233.506509] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2233.513897] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c008 [ 2233.521199] R13: 00007ffe3e591c2f R14: 00007ff517848300 R15: 0000000000022000 [ 2233.534693] Mem-Info: [ 2233.537728] active_anon:14524 inactive_anon:55508 isolated_anon:0 [ 2233.537728] active_file:574 inactive_file:2184 isolated_file:0 [ 2233.537728] unevictable:0 dirty:40 writeback:0 unstable:0 [ 2233.537728] slab_reclaimable:12156 slab_unreclaimable:115125 [ 2233.537728] mapped:54787 shmem:56079 pagetables:790 bounce:0 [ 2233.537728] free:602752 free_pcp:464 free_cma:0 [ 2233.572728] Node 0 active_anon:56900kB inactive_anon:188680kB active_file:1756kB inactive_file:8244kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:183352kB dirty:92kB writeback:0kB shmem:190616kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2233.602601] Node 1 active_anon:1196kB inactive_anon:33352kB active_file:540kB inactive_file:792kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:35996kB dirty:68kB writeback:0kB shmem:33700kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2233.654341] IPVS: ftp: loaded support on port[0] = 21 [ 2233.677411] Node 0 DMA free:11792kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:108kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2233.718152] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2233.726798] Node 0 DMA32 free:635456kB min:36200kB low:45248kB high:54296kB active_anon:57200kB inactive_anon:188680kB active_file:1948kB inactive_file:9344kB unevictable:0kB writepending:92kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:7584kB pagetables:3056kB bounce:0kB free_pcp:340kB local_pcp:20kB free_cma:0kB [ 2233.834362] lowmem_reserve[]: 0 0 0 0 0 [ 2233.841020] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2233.869434] lowmem_reserve[]: 0 0 0 0 0 [ 2233.873459] Node 1 Normal free:1089280kB min:53696kB low:67120kB high:80544kB active_anon:1096kB inactive_anon:33352kB active_file:540kB inactive_file:792kB unevictable:0kB writepending:68kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:224kB pagetables:252kB bounce:0kB free_pcp:1344kB local_pcp:632kB free_cma:0kB [ 2233.904939] lowmem_reserve[]: 0 0 0 0 0 [ 2233.910086] Node 0 DMA: 4*4kB (ME) 4*8kB (UME) 2*16kB (UM) 6*32kB (UME) 12*64kB (UME) 8*128kB (UME) 6*256kB (UME) 4*512kB (UME) 2*1024kB (UE) 2*2048kB (UM) 0*4096kB = 11792kB [ 2233.928504] Node 0 DMA32: 487*4kB (ME) 109*8kB (UE) 13*16kB (UME) 8*32kB (UE) 4912*64kB (U) 1570*128kB (UME) 434*256kB (UM) 3*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 631252kB [ 2233.950627] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2233.963645] Node 1 Normal: 1043*4kB (UM) 156*8kB (UM) 168*16kB (UME) 8*32kB (ME) 4208*64kB (UM) 1370*128kB (UM) 688*256kB (UM) 313*512kB (UM) 2*1024kB (UM) 3*2048kB (UM) 34*4096kB (U) = 936876kB [ 2233.984526] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2233.994963] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2234.009284] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2234.021636] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2234.036837] 59983 total pagecache pages [ 2234.042681] 0 pages in swap cache [ 2234.046690] Swap cache stats: add 0, delete 0, find 0/0 [ 2234.059352] Free swap = 0kB [ 2234.062460] Total swap = 0kB [ 2234.065482] 2097051 pages RAM [ 2234.065545] chnl_net:caif_netlink_parms(): no params data found [ 2234.073127] 0 pages HighMem/MovableOnly [ 2234.084892] 363848 pages reserved [ 2234.089981] 0 pages cma reserved [ 2234.321338] bridge0: port 1(bridge_slave_0) entered blocking state [ 2234.330114] bridge0: port 1(bridge_slave_0) entered disabled state [ 2234.341503] device bridge_slave_0 entered promiscuous mode [ 2234.357258] bridge0: port 2(bridge_slave_1) entered blocking state [ 2234.366123] bridge0: port 2(bridge_slave_1) entered disabled state [ 2234.376445] device bridge_slave_1 entered promiscuous mode [ 2234.422127] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 2234.433513] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 2234.480376] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 2234.490229] team0: Port device team_slave_0 added [ 2234.506888] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 2234.516494] team0: Port device team_slave_1 added [ 2234.555613] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2234.564547] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2234.596577] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2234.617672] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2234.624050] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2234.655466] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2234.667509] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 2234.684208] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 2234.724055] device hsr_slave_0 entered promiscuous mode [ 2234.732098] device hsr_slave_1 entered promiscuous mode [ 2234.740646] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2234.747391] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2234.756221] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2234.763197] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2234.772215] device bridge_slave_1 left promiscuous mode [ 2234.777851] bridge0: port 2(bridge_slave_1) entered disabled state [ 2234.785798] device bridge_slave_0 left promiscuous mode [ 2234.791642] bridge0: port 1(bridge_slave_0) entered disabled state [ 2234.801437] device veth1_macvtap left promiscuous mode [ 2234.806785] device veth0_macvtap left promiscuous mode [ 2234.812465] device veth1_vlan left promiscuous mode [ 2234.817684] device veth0_vlan left promiscuous mode [ 2234.926042] device hsr_slave_1 left promiscuous mode [ 2234.937206] device hsr_slave_0 left promiscuous mode [ 2234.953977] team0 (unregistering): Port device team_slave_1 removed [ 2234.965446] team0 (unregistering): Port device team_slave_0 removed [ 2234.976837] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 2234.990194] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 2235.027793] bond0 (unregistering): Released all slaves [ 2235.042949] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 2235.054504] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 2235.201785] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 2235.244518] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2235.254802] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 2235.264575] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 2235.272224] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2235.280179] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2235.290115] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 2235.296206] 8021q: adding VLAN 0 to HW filter on device team0 [ 2235.313705] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 2235.324423] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2235.333291] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2235.346447] bridge0: port 1(bridge_slave_0) entered blocking state [ 2235.352938] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2235.368345] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 2235.376632] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2235.389609] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2235.397680] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2235.410162] bridge0: port 2(bridge_slave_1) entered blocking state [ 2235.416551] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2235.428908] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 2235.443046] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 2235.450191] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2235.462667] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2235.473449] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 2235.485365] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2235.494183] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2235.510126] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 2235.522037] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2235.529390] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2235.537339] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2235.552378] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 2235.559963] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2235.567710] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2235.578927] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 2235.587590] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2235.602988] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 2235.609311] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2235.616621] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2235.628831] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2235.643749] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 2235.655237] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 2235.662387] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2235.670413] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2235.686015] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2235.705081] Bluetooth: hci2 command 0x0409 tx timeout [ 2235.910102] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 2235.924674] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 2235.932156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2235.946865] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2236.036708] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 2236.045894] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 2236.054572] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 2236.066666] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2236.075599] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2236.088744] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2236.097854] device veth0_vlan entered promiscuous mode [ 2236.113325] device veth1_vlan entered promiscuous mode [ 2236.134110] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 2236.149618] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 2236.157023] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2236.168829] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2236.178997] device veth0_macvtap entered promiscuous mode [ 2236.185359] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 2236.200252] device veth1_macvtap entered promiscuous mode [ 2236.206725] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 2236.220774] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 2236.234602] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 2236.244205] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2236.257112] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2236.266444] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2236.279785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2236.290547] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2236.302519] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2236.312960] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2236.325115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2236.337210] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 2236.344573] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2236.353304] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2236.361059] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2236.368518] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2236.376498] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2236.385286] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2236.395671] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2236.405414] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2236.415592] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2236.424870] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2236.434926] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2236.444142] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2236.454527] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2236.465125] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 2236.472233] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2236.480653] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2236.488827] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 14:59:51 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x80000000, 0xe}) openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x14400, 0x0) 14:59:51 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x80000000, 0xe}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000800)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000000)={'sit0\x00', r2, 0x0, 0x0, 0x0, 0x0, 0x22, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private2}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000000)={'syztnl0\x00', &(0x7f00000000c0)={'sit0\x00', r2, 0x0, 0x1, 0x81, 0x7, 0x2, @remote, @remote, 0x1, 0x20, 0x9, 0x81}}) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/btrfs-control\x00', 0x0, 0x0) ioctl$sock_SIOCDELRT(r3, 0x890c, &(0x7f0000000340)={0x0, @can, @can, @can}) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000140)={0x7, 0x0, 0x1}) 14:59:51 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000980)={'team0\x00'}) getsockopt$sock_timeval(r0, 0x1, 0x43, &(0x7f00000006c0), &(0x7f0000000700)=0x10) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/btrfs-control\x00', 0x80, 0x0) ioctl$DRM_IOCTL_AGP_UNBIND(r1, 0x40106437, &(0x7f00000001c0)={0x0, 0x3f}) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x400000, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, &(0x7f00000000c0)={{@any, 0xc748}, @any, 0x1, 0x4000000000000, 0x8, 0x80000000, 0xffffffffffffffff, 0x3, 0x208}) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000800)={'team0\x00', 0x0}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x19, 0x4, 0x9, 0x0, 0x10, r1, 0xe7, [], r5, r1, 0x1, 0x0, 0x4}, 0x40) ioctl$BTRFS_IOC_TREE_SEARCH(r6, 0xd0009411, &(0x7f0000000840)={{0x0, 0x6, 0xf800000000, 0x7, 0x3, 0x1000, 0x8, 0x9, 0x81, 0x5, 0x10001, 0x0, 0xfffffffffffffffd, 0x2, 0x20}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000000)={'sit0\x00', r5, 0x0, 0x0, 0x0, 0x0, 0x22, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private2}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000340)={'syztnl2\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB='ip_vti0\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r5, @ANYBLOB="8000880000000002000000004a0100280068000000049078640101006401010088117966e9894e29f7f8ef45567475b682000000"]}) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000003c0)={0x0, @llc={0x1a, 0x1, 0x0, 0xd3, 0x7f, 0x7f, @dev={[], 0x33}}, @ethernet={0x6, @broadcast}, @xdp={0x2c, 0x8, r7, 0x35}, 0xf801, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000380)='vxcan1\x00', 0x7fff, 0x3d6, 0x8}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f00000004c0)={'ip6tnl0\x00', &(0x7f0000000440)={'ip6_vti0\x00', r5, 0x4, 0x3, 0xd, 0x0, 0x4, @private2={0xfc, 0x2, [], 0x1}, @mcast1, 0x700, 0x8000, 0x4, 0x95}}) getsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000000500)={@ipv4={[], [], @loopback}, 0x0}, &(0x7f0000000540)=0x14) sendmsg$ETHTOOL_MSG_PAUSE_GET(r3, &(0x7f0000000680)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000640)={&(0x7f0000000580)={0xbc, 0x0, 0x800, 0x70bd26, 0x25dfdbfe, {}, [@HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0xbc}}, 0x820) sendto$packet(r3, &(0x7f0000000200)="0fb8de1b54c9e5001e5269395154de5f75068b9ed8c75277a3cf2be162c2ef43f05521bbaa1180e04d2cf94e977a14ff37def00c8988ad9c9960455c90dc44fe5f002e4978091c5a99880064e4b90135", 0x50, 0x8840, &(0x7f0000000140)={0x11, 0xf8, r5, 0x1, 0x64, 0x6, @multicast}, 0x14) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000080)={0x80000000, 0xe}) 14:59:51 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r0, 0x0, 0x0, 0x0, &(0x7f0000001780)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x14) 14:59:51 executing program 5: openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/btrfs-control\x00', 0x0, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000980)={'team0\x00', 0x0}) getsockopt$sock_timeval(r2, 0x1, 0x43, &(0x7f0000000080), &(0x7f00000000c0)=0x10) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_udp_SIOCOUTQ(r4, 0x5411, &(0x7f0000000000)) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000800)={'team0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000100)={@ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x39}}, @dev={0xfe, 0x80, [], 0x14}, @empty, 0xdd0b, 0x8, 0x7, 0x0, 0x0, 0x4040308, r3}) getsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f00000003c0)={@remote, 0x0}, &(0x7f0000000400)=0x14) r8 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, &(0x7f0000000800)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r8, 0x89f3, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000000)={'sit0\x00', r9, 0x0, 0x0, 0x0, 0x0, 0x22, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private2}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f00000004c0)={'sit0\x00', &(0x7f0000000440)={'ip6gre0\x00', r6, 0x4, 0x6, 0x20, 0x0, 0x20, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1, 0x80, 0x10, 0xc9, 0x6}}) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000340)={0x0, @can, @can={0x1d, r7}, @can={0x1d, r7}}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x8, 0xe, 0x1}) connect(r0, &(0x7f0000000240)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e20, @multicast1}, 0x1, 0x2, 0x1, 0x4}}, 0x80) 14:59:51 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x101000, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$TIOCMGET(r0, 0x5415, &(0x7f0000000100)) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x80000000, 0xe, 0x0, 0xffffffffffffffff}) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x5, 0xe0003) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000180)=0x3) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000980)={'team0\x00'}) ioctl$BTRFS_IOC_TREE_SEARCH(r4, 0xd0009411, &(0x7f00000009c0)={{0x0, 0x2, 0x79f7832d, 0x8, 0x800, 0x3, 0x7, 0xccb, 0x6, 0x6, 0x200, 0x4, 0x1, 0x9, 0x1a2}}) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000980)={'team0\x00'}) ioctl$sock_bt_cmtp_CMTPCONNADD(0xffffffffffffffff, 0x400443c8, &(0x7f0000000140)={r3, 0xffff8001}) 14:59:52 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r0, 0x0, 0x0, 0x0, &(0x7f0000001780)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) [ 2237.787101] Bluetooth: hci2 command 0x041b tx timeout 14:59:52 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000980)={'team0\x00'}) getsockopt$sock_timeval(r0, 0x1, 0x43, &(0x7f00000006c0), &(0x7f0000000700)=0x10) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/btrfs-control\x00', 0x80, 0x0) ioctl$DRM_IOCTL_AGP_UNBIND(r1, 0x40106437, &(0x7f00000001c0)={0x0, 0x3f}) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x400000, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, &(0x7f00000000c0)={{@any, 0xc748}, @any, 0x1, 0x4000000000000, 0x8, 0x80000000, 0xffffffffffffffff, 0x3, 0x208}) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000800)={'team0\x00', 0x0}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x19, 0x4, 0x9, 0x0, 0x10, r1, 0xe7, [], r5, r1, 0x1, 0x0, 0x4}, 0x40) ioctl$BTRFS_IOC_TREE_SEARCH(r6, 0xd0009411, &(0x7f0000000840)={{0x0, 0x6, 0xf800000000, 0x7, 0x3, 0x1000, 0x8, 0x9, 0x81, 0x5, 0x10001, 0x0, 0xfffffffffffffffd, 0x2, 0x20}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000000)={'sit0\x00', r5, 0x0, 0x0, 0x0, 0x0, 0x22, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private2}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000340)={'syztnl2\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB='ip_vti0\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r5, @ANYBLOB="8000880000000002000000004a0100280068000000049078640101006401010088117966e9894e29f7f8ef45567475b682000000"]}) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000003c0)={0x0, @llc={0x1a, 0x1, 0x0, 0xd3, 0x7f, 0x7f, @dev={[], 0x33}}, @ethernet={0x6, @broadcast}, @xdp={0x2c, 0x8, r7, 0x35}, 0xf801, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000380)='vxcan1\x00', 0x7fff, 0x3d6, 0x8}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f00000004c0)={'ip6tnl0\x00', &(0x7f0000000440)={'ip6_vti0\x00', r5, 0x4, 0x3, 0xd, 0x0, 0x4, @private2={0xfc, 0x2, [], 0x1}, @mcast1, 0x700, 0x8000, 0x4, 0x95}}) getsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000000500)={@ipv4={[], [], @loopback}, 0x0}, &(0x7f0000000540)=0x14) sendmsg$ETHTOOL_MSG_PAUSE_GET(r3, &(0x7f0000000680)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000640)={&(0x7f0000000580)={0xbc, 0x0, 0x800, 0x70bd26, 0x25dfdbfe, {}, [@HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0xbc}}, 0x820) sendto$packet(r3, &(0x7f0000000200)="0fb8de1b54c9e5001e5269395154de5f75068b9ed8c75277a3cf2be162c2ef43f05521bbaa1180e04d2cf94e977a14ff37def00c8988ad9c9960455c90dc44fe5f002e4978091c5a99880064e4b90135", 0x50, 0x8840, &(0x7f0000000140)={0x11, 0xf8, r5, 0x1, 0x64, 0x6, @multicast}, 0x14) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000080)={0x80000000, 0xe}) [ 2238.191522] syz-executor.3: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2238.191703] syz-executor.2: [ 2238.225837] syz-executor.0: [ 2238.225962] syz-executor.4: [ 2238.229808] syz-executor.1: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2238.242397] page allocation failure: order:4 [ 2238.249380] page allocation failure: order:4 [ 2238.254096] page allocation failure: order:4 [ 2238.256953] syz-executor.3 cpuset= [ 2238.262026] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 2238.266291] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 2238.266797] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 2238.279163] / [ 2238.283338] (null) [ 2238.293506] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 2238.301073] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 2238.306429] CPU: 1 PID: 30703 Comm: syz-executor.1 Not tainted 4.14.229-syzkaller #0 [ 2238.308482] (null) [ 2238.314327] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2238.314332] Call Trace: [ 2238.314353] dump_stack+0x1b2/0x281 [ 2238.314368] warn_alloc.cold+0x96/0x1cc [ 2238.314381] ? zone_watermark_ok_safe+0x220/0x220 [ 2238.314402] __alloc_pages_nodemask+0x2127/0x2720 [ 2238.319965] mems_allowed=0-1 [ 2238.325994] ? switch_mm_irqs_off+0x601/0xeb0 [ 2238.326012] ? lock_acquire+0x170/0x3f0 [ 2238.326029] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2238.326050] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2238.338828] syz-executor.4 cpuset= [ 2238.341056] ? __mutex_unlock_slowpath+0x75/0x770 [ 2238.341068] ? policy_node+0xad/0x110 [ 2238.341084] alloc_pages_current+0x155/0x260 [ 2238.376148] / [ 2238.378636] ion_page_pool_alloc+0x118/0x1b0 [ 2238.393050] ion_system_heap_allocate+0x133/0x8c0 [ 2238.397908] ? ion_alloc+0x187/0x810 [ 2238.401634] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2238.402573] mems_allowed=0-1 [ 2238.407089] ? ion_system_contig_heap_create+0x130/0x130 [ 2238.407102] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2238.407115] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2238.407130] ion_alloc+0x204/0x810 [ 2238.429081] ? ion_dma_buf_release+0x40/0x40 [ 2238.433502] ? __might_fault+0x177/0x1b0 [ 2238.437574] ion_ioctl+0xea/0x1f0 [ 2238.441036] ? ion_query_heaps+0x360/0x360 [ 2238.445278] ? ion_query_heaps+0x360/0x360 [ 2238.449520] do_vfs_ioctl+0x75a/0xff0 [ 2238.453331] ? ioctl_preallocate+0x1a0/0x1a0 [ 2238.457759] ? lock_downgrade+0x740/0x740 [ 2238.461920] ? __fget+0x225/0x360 [ 2238.465385] ? do_vfs_ioctl+0xff0/0xff0 [ 2238.469373] ? security_file_ioctl+0x83/0xb0 [ 2238.474195] SyS_ioctl+0x7f/0xb0 [ 2238.477559] ? do_vfs_ioctl+0xff0/0xff0 [ 2238.481543] do_syscall_64+0x1d5/0x640 [ 2238.485552] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2238.490746] RIP: 0033:0x466459 [ 2238.493938] RSP: 002b:00007f431c6d3188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2238.501652] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 2238.508927] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2238.516302] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2238.523668] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2238.530945] R13: 00007ffd8dc7798f R14: 00007f431c6d3300 R15: 0000000000022000 [ 2238.538730] CPU: 0 PID: 30724 Comm: syz-executor.4 Not tainted 4.14.229-syzkaller #0 [ 2238.546636] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2238.556006] Call Trace: [ 2238.558619] dump_stack+0x1b2/0x281 [ 2238.562277] warn_alloc.cold+0x96/0x1cc [ 2238.566358] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2238.571424] ? zone_watermark_ok_safe+0x220/0x220 [ 2238.574700] (null) [ 2238.576302] __alloc_pages_nodemask+0x2127/0x2720 [ 2238.576320] ? lock_acquire+0x170/0x3f0 [ 2238.587342] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2238.591264] syz-executor.0 cpuset= [ 2238.592211] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2238.592226] ? __mutex_unlock_slowpath+0x75/0x770 [ 2238.592242] alloc_pages_current+0x155/0x260 [ 2238.595912] / [ 2238.601258] ion_page_pool_alloc+0x118/0x1b0 [ 2238.616600] ion_system_heap_allocate+0x133/0x8c0 [ 2238.621456] ? ion_alloc+0x187/0x810 [ 2238.625203] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2238.630663] ? ion_system_contig_heap_create+0x130/0x130 [ 2238.631457] mems_allowed=0-1 [ 2238.636230] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2238.636246] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2238.636259] ion_alloc+0x204/0x810 [ 2238.636274] ? ion_dma_buf_release+0x40/0x40 [ 2238.636286] ? __might_fault+0x177/0x1b0 [ 2238.662317] ion_ioctl+0xea/0x1f0 [ 2238.666222] ? ion_query_heaps+0x360/0x360 [ 2238.670472] ? SyS_getpeername+0x220/0x220 [ 2238.674757] ? ion_query_heaps+0x360/0x360 [ 2238.679001] do_vfs_ioctl+0x75a/0xff0 [ 2238.682824] ? ioctl_preallocate+0x1a0/0x1a0 [ 2238.687232] ? lock_downgrade+0x740/0x740 [ 2238.691414] ? __fget+0x225/0x360 [ 2238.694873] ? do_vfs_ioctl+0xff0/0xff0 [ 2238.698914] ? security_file_ioctl+0x83/0xb0 [ 2238.703346] SyS_ioctl+0x7f/0xb0 [ 2238.706753] ? do_vfs_ioctl+0xff0/0xff0 [ 2238.710738] do_syscall_64+0x1d5/0x640 [ 2238.714633] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2238.719835] RIP: 0033:0x466459 [ 2238.723031] RSP: 002b:00007fb6cdc12188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2238.730750] RAX: ffffffffffffffda RBX: 000000000056c008 RCX: 0000000000466459 [ 2238.738023] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000005 [ 2238.745301] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2238.752700] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c008 [ 2238.759982] R13: 00007ffef01b8b7f R14: 00007fb6cdc12300 R15: 0000000000022000 [ 2238.767281] CPU: 1 PID: 30710 Comm: syz-executor.2 Not tainted 4.14.229-syzkaller #0 [ 2238.775322] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2238.784690] Call Trace: [ 2238.787293] dump_stack+0x1b2/0x281 [ 2238.790949] warn_alloc.cold+0x96/0x1cc [ 2238.794943] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2238.799980] ? zone_watermark_ok_safe+0x220/0x220 [ 2238.804869] __alloc_pages_nodemask+0x2127/0x2720 [ 2238.809738] ? __schedule+0x893/0x1de0 [ 2238.813668] ? lock_acquire+0x170/0x3f0 [ 2238.817673] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2238.822530] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2238.827993] ? __mutex_unlock_slowpath+0x75/0x770 [ 2238.832853] alloc_pages_current+0x155/0x260 [ 2238.837291] ion_page_pool_alloc+0x118/0x1b0 [ 2238.841744] ion_system_heap_allocate+0x133/0x8c0 [ 2238.846607] ? ion_alloc+0x187/0x810 [ 2238.850348] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2238.855811] ? ion_system_contig_heap_create+0x130/0x130 [ 2238.861449] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2238.866826] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2238.871677] ion_alloc+0x204/0x810 [ 2238.875228] ? ion_dma_buf_release+0x40/0x40 [ 2238.879736] ? __might_fault+0x177/0x1b0 [ 2238.883835] ion_ioctl+0xea/0x1f0 [ 2238.887300] ? ion_query_heaps+0x360/0x360 [ 2238.891544] ? ion_query_heaps+0x360/0x360 [ 2238.895782] do_vfs_ioctl+0x75a/0xff0 [ 2238.899615] ? ioctl_preallocate+0x1a0/0x1a0 [ 2238.904030] ? lock_downgrade+0x740/0x740 [ 2238.908221] ? __fget+0x225/0x360 [ 2238.911677] ? do_vfs_ioctl+0xff0/0xff0 [ 2238.915663] ? security_file_ioctl+0x83/0xb0 [ 2238.920233] SyS_ioctl+0x7f/0xb0 [ 2238.923732] ? do_vfs_ioctl+0xff0/0xff0 [ 2238.927746] do_syscall_64+0x1d5/0x640 [ 2238.931691] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2238.936887] RIP: 0033:0x466459 [ 2238.940094] RSP: 002b:00007effc187a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2238.947813] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 2238.955109] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000005 [ 2238.962383] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2238.969661] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2238.976939] R13: 00007ffc8c893f1f R14: 00007effc187a300 R15: 0000000000022000 [ 2238.996925] CPU: 0 PID: 30700 Comm: syz-executor.3 Not tainted 4.14.229-syzkaller #0 [ 2239.004854] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2239.014213] Call Trace: [ 2239.016816] dump_stack+0x1b2/0x281 [ 2239.020484] warn_alloc.cold+0x96/0x1cc [ 2239.024471] ? zone_watermark_ok_safe+0x220/0x220 [ 2239.029340] __alloc_pages_nodemask+0x2127/0x2720 [ 2239.034201] ? lock_acquire+0x170/0x3f0 [ 2239.038188] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2239.043049] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2239.048510] ? __mutex_unlock_slowpath+0x75/0x770 [ 2239.053365] alloc_pages_current+0x155/0x260 [ 2239.057780] ion_page_pool_alloc+0x118/0x1b0 [ 2239.062202] ion_system_heap_allocate+0x133/0x8c0 [ 2239.067052] ? ion_system_contig_heap_create+0x130/0x130 [ 2239.072506] ? kmem_cache_alloc_trace+0x324/0x3d0 [ 2239.077380] ion_alloc+0x204/0x810 [ 2239.080920] ? ion_dma_buf_release+0x40/0x40 [ 2239.085347] ? __might_fault+0x177/0x1b0 [ 2239.089408] ion_ioctl+0xea/0x1f0 [ 2239.092862] ? ion_query_heaps+0x360/0x360 [ 2239.097110] ? ion_query_heaps+0x360/0x360 [ 2239.101362] do_vfs_ioctl+0x75a/0xff0 [ 2239.105172] ? ioctl_preallocate+0x1a0/0x1a0 [ 2239.109588] ? lock_downgrade+0x740/0x740 [ 2239.113741] ? __fget+0x225/0x360 [ 2239.117192] ? do_vfs_ioctl+0xff0/0xff0 [ 2239.124515] ? security_file_ioctl+0x83/0xb0 [ 2239.128952] SyS_ioctl+0x7f/0xb0 [ 2239.132330] ? do_vfs_ioctl+0xff0/0xff0 [ 2239.137022] do_syscall_64+0x1d5/0x640 [ 2239.140928] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2239.146139] RIP: 0033:0x466459 [ 2239.149350] RSP: 002b:00007fb2f6ce7188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2239.157075] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 2239.164358] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2239.171668] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2239.178953] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2239.186239] R13: 00007ffde948695f R14: 00007fb2f6ce7300 R15: 0000000000022000 [ 2239.209034] CPU: 1 PID: 30716 Comm: syz-executor.0 Not tainted 4.14.229-syzkaller #0 [ 2239.216964] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2239.227840] Call Trace: [ 2239.230458] dump_stack+0x1b2/0x281 [ 2239.234107] warn_alloc.cold+0x96/0x1cc [ 2239.238103] ? zone_watermark_ok_safe+0x220/0x220 [ 2239.243035] __alloc_pages_nodemask+0x2127/0x2720 [ 2239.247917] ? lock_acquire+0x170/0x3f0 [ 2239.251921] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2239.256792] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2239.262265] ? __mutex_unlock_slowpath+0x75/0x770 [ 2239.267169] alloc_pages_current+0x155/0x260 [ 2239.271610] ion_page_pool_alloc+0x118/0x1b0 [ 2239.276213] ion_system_heap_allocate+0x133/0x8c0 [ 2239.281124] ? ion_alloc+0x187/0x810 [ 2239.284852] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2239.290323] ? ion_system_contig_heap_create+0x130/0x130 [ 2239.296408] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2239.301533] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2239.306393] ion_alloc+0x204/0x810 [ 2239.309966] ? ion_dma_buf_release+0x40/0x40 [ 2239.314415] ? __might_fault+0x177/0x1b0 [ 2239.318500] ion_ioctl+0xea/0x1f0 [ 2239.321968] ? ion_query_heaps+0x360/0x360 [ 2239.327096] ? SyS_getpeername+0x220/0x220 [ 2239.332361] ? ion_query_heaps+0x360/0x360 [ 2239.338337] do_vfs_ioctl+0x75a/0xff0 [ 2239.342345] ? ioctl_preallocate+0x1a0/0x1a0 [ 2239.346780] ? lock_downgrade+0x740/0x740 [ 2239.350970] ? __fget+0x225/0x360 [ 2239.354462] ? do_vfs_ioctl+0xff0/0xff0 [ 2239.358453] ? security_file_ioctl+0x83/0xb0 [ 2239.362993] SyS_ioctl+0x7f/0xb0 [ 2239.366368] ? do_vfs_ioctl+0xff0/0xff0 [ 2239.370355] do_syscall_64+0x1d5/0x640 [ 2239.374257] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2239.379464] RIP: 0033:0x466459 [ 2239.383012] RSP: 002b:00007f782969a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2239.390797] RAX: ffffffffffffffda RBX: 000000000056c008 RCX: 0000000000466459 [ 2239.398074] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000005 [ 2239.405354] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2239.412630] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c008 [ 2239.420021] R13: 00007ffd4f3c2b7f R14: 00007f782969a300 R15: 0000000000022000 [ 2239.451191] Mem-Info: [ 2239.453656] active_anon:14677 inactive_anon:55508 isolated_anon:0 [ 2239.453656] active_file:1569 inactive_file:6109 isolated_file:0 [ 2239.453656] unevictable:0 dirty:246 writeback:0 unstable:0 [ 2239.453656] slab_reclaimable:12189 slab_unreclaimable:113289 [ 2239.453656] mapped:57808 shmem:56080 pagetables:880 bounce:0 [ 2239.453656] free:373489 free_pcp:422 free_cma:0 [ 2239.490368] Node 0 active_anon:57944kB inactive_anon:188692kB active_file:6012kB inactive_file:23060kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:194360kB dirty:884kB writeback:0kB shmem:190636kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2239.538052] Node 1 active_anon:964kB inactive_anon:33340kB active_file:964kB inactive_file:776kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:36072kB dirty:100kB writeback:0kB shmem:33684kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2239.583567] Node 0 DMA free:11136kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:108kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2239.624575] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2239.629836] Node 0 DMA32 free:572980kB min:36200kB low:45248kB high:54296kB active_anon:58044kB inactive_anon:188692kB active_file:5308kB inactive_file:23256kB unevictable:0kB writepending:884kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:7488kB pagetables:3268kB bounce:0kB free_pcp:1028kB local_pcp:396kB free_cma:0kB [ 2239.717992] lowmem_reserve[]: 0 0 0 0 0 [ 2239.722046] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2239.762055] lowmem_reserve[]: 0 0 0 0 0 [ 2239.778489] Node 1 Normal free:1226324kB min:53696kB low:67120kB high:80544kB active_anon:964kB inactive_anon:33340kB active_file:964kB inactive_file:776kB unevictable:0kB writepending:100kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:224kB pagetables:252kB bounce:0kB free_pcp:688kB local_pcp:0kB free_cma:0kB [ 2239.858215] Bluetooth: hci2 command 0x040f tx timeout [ 2239.873159] lowmem_reserve[]: 0 0 0 0 0 [ 2239.882215] Node 0 DMA: 12*4kB (UME) 14*8kB (UME) 8*16kB (UM) 13*32kB (UME) 6*64kB (UME) 3*128kB (ME) 2*256kB (ME) 4*512kB (UME) 1*1024kB (E) 1*2048kB (M) 1*4096kB (U) = 11200kB [ 2239.934762] Node 0 DMA32: 264*4kB (ME) 76*8kB (ME) 2042*16kB (UME) 3451*32kB (UME) 5207*64kB (UM) 288*128kB (UE) 9*256kB (UM) 2*512kB (U) 1*1024kB (U) 0*2048kB 0*4096kB = 519232kB [ 2239.987441] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2240.015138] Node 1 Normal: 7045*4kB (UM) 2856*8kB (UM) 2212*16kB (UE) 1776*32kB (UME) 1981*64kB (U) 220*128kB (U) 50*256kB (U) 17*512kB (U) 402*1024kB (U) 175*2048kB (U) 39*4096kB (U) = 1249492kB [ 2240.053108] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2240.068128] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2240.088946] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2240.109398] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2240.127006] 63615 total pagecache pages [ 2240.135800] 0 pages in swap cache [ 2240.143989] Swap cache stats: add 0, delete 0, find 0/0 [ 2240.156277] Free swap = 0kB [ 2240.159692] Total swap = 0kB [ 2240.162887] 2097051 pages RAM [ 2240.166203] 0 pages HighMem/MovableOnly [ 2240.170552] 363848 pages reserved [ 2240.181675] 0 pages cma reserved [ 2240.941893] IPVS: ftp: loaded support on port[0] = 21 [ 2241.243690] chnl_net:caif_netlink_parms(): no params data found [ 2241.401255] bridge0: port 1(bridge_slave_0) entered blocking state [ 2241.411902] bridge0: port 1(bridge_slave_0) entered disabled state [ 2241.421132] device bridge_slave_0 entered promiscuous mode [ 2241.469277] bridge0: port 2(bridge_slave_1) entered blocking state [ 2241.475770] bridge0: port 2(bridge_slave_1) entered disabled state [ 2241.509182] device bridge_slave_1 entered promiscuous mode [ 2241.630563] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 2241.684202] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 2241.829006] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 2241.868637] team0: Port device team_slave_0 added [ 2241.882925] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 2241.903489] team0: Port device team_slave_1 added [ 2241.938213] Bluetooth: hci2 command 0x0419 tx timeout [ 2242.038342] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2242.044626] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2242.147627] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2242.179603] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2242.185972] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2242.287999] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2242.346823] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 2242.402079] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 2242.485867] device hsr_slave_0 entered promiscuous mode [ 2242.542699] device hsr_slave_1 entered promiscuous mode [ 2242.563664] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 2242.595132] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 2242.978406] Bluetooth: hci1 command 0x0409 tx timeout [ 2243.951531] oom_reaper: reaped process 30703 (syz-executor.1), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 2243.977329] modprobe invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 2243.998897] modprobe cpuset=/ mems_allowed=0-1 [ 2244.003554] CPU: 1 PID: 30933 Comm: modprobe Not tainted 4.14.229-syzkaller #0 [ 2244.011022] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2244.020385] Call Trace: [ 2244.022985] dump_stack+0x1b2/0x281 [ 2244.026618] dump_header+0x178/0x82f [ 2244.030341] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2244.035455] ? ___ratelimit+0x2cd/0x530 [ 2244.039439] oom_kill_process.cold+0x10/0xa40 [ 2244.043953] out_of_memory+0xe3e/0x1190 [ 2244.047933] ? oom_killer_disable+0x1c0/0x1c0 [ 2244.052423] ? mutex_trylock+0x152/0x1a0 [ 2244.056481] __alloc_pages_nodemask+0x23e1/0x2720 [ 2244.061335] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2244.066273] alloc_pages_current+0x155/0x260 [ 2244.070677] filemap_fault+0x11a1/0x1ad0 [ 2244.074761] ext4_filemap_fault+0x84/0xb0 [ 2244.078906] __do_fault+0xfa/0x380 [ 2244.082450] __handle_mm_fault+0x2497/0x4620 [ 2244.086866] ? vm_insert_page+0x7c0/0x7c0 [ 2244.091014] ? lock_acquire+0x170/0x3f0 [ 2244.095116] ? mark_held_locks+0xa6/0xf0 [ 2244.099166] handle_mm_fault+0x455/0x9c0 [ 2244.103217] __do_page_fault+0x549/0xad0 [ 2244.107262] ? spurious_fault+0x640/0x640 [ 2244.111396] ? do_page_fault+0x60/0x500 [ 2244.115362] ? page_fault+0x2f/0x50 [ 2244.118975] page_fault+0x45/0x50 [ 2244.122409] RIP: c72b4b0:0x7f66eed79170 [ 2244.126371] RSP: 0004:00007ffd0c72b578 EFLAGS: 7ffd0c72b5a0 [ 2244.132494] Mem-Info: [ 2244.141494] active_anon:14824 inactive_anon:55510 isolated_anon:0 [ 2244.141494] active_file:17 inactive_file:16 isolated_file:0 [ 2244.141494] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2244.141494] slab_reclaimable:12189 slab_unreclaimable:114443 [ 2244.141494] mapped:52931 shmem:56084 pagetables:931 bounce:0 [ 2244.141494] free:14016 free_pcp:30 free_cma:0 [ 2244.147618] syz-executor.1: [ 2244.174872] Node 0 active_anon:57544kB inactive_anon:188688kB active_file:24kB inactive_file:24kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:176908kB dirty:0kB writeback:0kB shmem:190636kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2244.195923] page allocation failure: order:0 [ 2244.205950] Node 1 active_anon:1752kB inactive_anon:33352kB active_file:40kB inactive_file:44kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:34816kB dirty:0kB writeback:0kB shmem:33700kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2244.205956] Node 0 DMA free:10964kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2244.205975] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2244.205995] Node 0 DMA32 free:18192kB min:36200kB low:45248kB high:54296kB active_anon:57544kB inactive_anon:188688kB active_file:24kB inactive_file:24kB unevictable:0kB writepending:0kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:7488kB pagetables:3360kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2244.206013] lowmem_reserve[]: 0 0 0 0 0 [ 2244.206032] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2244.206048] lowmem_reserve[]: 0 0 0 0 0 [ 2244.206067] Node 1 Normal free:26908kB min:53696kB low:67120kB high:80544kB active_anon:1752kB inactive_anon:33352kB active_file:40kB inactive_file:44kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:320kB pagetables:364kB bounce:0kB free_pcp:120kB local_pcp:0kB free_cma:0kB [ 2244.206089] lowmem_reserve[]: [ 2244.237575] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 2244.237969] 0 [ 2244.272877] (null) [ 2244.325305] 0 [ 2244.332552] syz-executor.1 cpuset= [ 2244.355319] 0 [ 2244.364792] / mems_allowed=0-1 [ 2244.389596] CPU: 0 PID: 30703 Comm: syz-executor.1 Not tainted 4.14.229-syzkaller #0 [ 2244.397486] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2244.406853] Call Trace: [ 2244.409460] dump_stack+0x1b2/0x281 [ 2244.413099] warn_alloc.cold+0x96/0x1cc [ 2244.417105] ? r8152_poll+0x2d20/0x3410 [ 2244.421092] ? zone_watermark_ok_safe+0x220/0x220 [ 2244.425941] ? usleep_range+0x130/0x130 [ 2244.426689] 0 [ 2244.429919] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 2244.429933] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 2244.429942] ? run_timer_softirq+0x5a0/0x5a0 [ 2244.429965] __alloc_pages_nodemask+0x2127/0x2720 [ 2244.429981] ? lock_acquire+0x170/0x3f0 [ 2244.429996] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2244.430006] ? ion_page_pool_alloc+0x9e/0x1b0 [ 2244.430023] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2244.430036] ? retint_kernel+0x2d/0x2d [ 2244.430049] alloc_pages_current+0x155/0x260 [ 2244.430060] ion_page_pool_alloc+0x118/0x1b0 [ 2244.430071] ion_system_heap_allocate+0x133/0x8c0 [ 2244.430081] ? ion_alloc+0x187/0x810 [ 2244.464646] 0 [ 2244.464721] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2244.498657] ? ion_system_contig_heap_create+0x130/0x130 [ 2244.498669] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2244.498681] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2244.498691] ion_alloc+0x204/0x810 [ 2244.498704] ? ion_dma_buf_release+0x40/0x40 [ 2244.498716] ? __might_fault+0x177/0x1b0 [ 2244.498727] ion_ioctl+0xea/0x1f0 [ 2244.498737] ? ion_query_heaps+0x360/0x360 [ 2244.498750] ? ion_query_heaps+0x360/0x360 [ 2244.498761] do_vfs_ioctl+0x75a/0xff0 [ 2244.498773] ? ioctl_preallocate+0x1a0/0x1a0 [ 2244.498786] ? lock_downgrade+0x740/0x740 [ 2244.545539] Node 0 [ 2244.546345] ? __fget+0x225/0x360 [ 2244.556187] ? do_vfs_ioctl+0xff0/0xff0 [ 2244.560182] ? security_file_ioctl+0x83/0xb0 [ 2244.564608] SyS_ioctl+0x7f/0xb0 [ 2244.567988] ? do_vfs_ioctl+0xff0/0xff0 [ 2244.571980] do_syscall_64+0x1d5/0x640 [ 2244.575887] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2244.581085] RIP: 0033:0x466459 [ 2244.584297] RSP: 002b:00007f431c6d3188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2244.592113] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 2244.594703] DMA: [ 2244.599392] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2244.599398] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2244.599403] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2244.599408] R13: 00007ffd8dc7798f R14: 00007f431c6d3300 R15: 0000000000022000 [ 2244.608006] warn_alloc_show_mem: 4 callbacks suppressed [ 2244.608010] Mem-Info: [ 2244.622331] 7*4kB [ 2244.634389] active_anon:14824 inactive_anon:55510 isolated_anon:0 [ 2244.634389] active_file:16 inactive_file:17 isolated_file:0 [ 2244.634389] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2244.634389] slab_reclaimable:12189 slab_unreclaimable:114443 [ 2244.634389] mapped:52931 shmem:56084 pagetables:931 bounce:0 [ 2244.634389] free:14016 free_pcp:30 free_cma:0 [ 2244.648605] (ME) [ 2244.680145] Node 0 active_anon:57544kB inactive_anon:188688kB active_file:24kB inactive_file:24kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:176908kB dirty:0kB writeback:0kB shmem:190636kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2244.696927] 5*8kB [ 2244.714775] Node 1 active_anon:1752kB inactive_anon:33352kB active_file:40kB inactive_file:44kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:34816kB dirty:0kB writeback:0kB shmem:33700kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2244.737727] (ME) [ 2244.749306] Node 0 DMA free:10964kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2244.766940] 5*16kB [ 2244.782552] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2244.790126] Node 0 DMA32 free:18192kB min:36200kB low:45248kB high:54296kB active_anon:57544kB inactive_anon:188688kB active_file:24kB inactive_file:24kB unevictable:0kB writepending:0kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:7488kB pagetables:3360kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2244.807705] (UM) [ 2244.828016] lowmem_reserve[]: 0 0 0 0 0 [ 2244.834113] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2244.834972] 8*32kB [ 2244.869227] lowmem_reserve[]: 0 0 0 0 0 [ 2244.875509] Node 1 Normal free:26908kB min:53696kB low:67120kB high:80544kB active_anon:1752kB inactive_anon:33352kB active_file:40kB inactive_file:44kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:320kB pagetables:364kB bounce:0kB free_pcp:120kB local_pcp:120kB free_cma:0kB [ 2244.875534] (UME) 7*64kB [ 2244.921599] lowmem_reserve[]: [ 2244.922123] (UME) [ 2244.924393] 0 [ 2244.927513] 3*128kB (ME) 2*256kB (ME) 4*512kB (UME) 1*1024kB (E) 1*2048kB (M) 1*4096kB (U) = 10964kB [ 2244.943183] 0 [ 2244.957154] Node 0 [ 2244.960576] 0 0 0 [ 2244.965048] Node 0 DMA: 7*4kB (ME) 5*8kB (ME) 5*16kB (UM) 8*32kB (UME) 7*64kB (UME) 3*128kB (ME) 2*256kB (ME) 4*512kB (UME) 1*1024kB (E) 1*2048kB (M) 1*4096kB (U) = 10964kB [ 2244.965732] DMA32: 1070*4kB (UME) 325*8kB (ME) 127*16kB (ME) 68*32kB (UME) 59*64kB (UM) 14*128kB (ME) 4*256kB (M) 1*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 18192kB [ 2244.995418] Node 0 [ 2245.020147] Node 0 [ 2245.021766] DMA32: [ 2245.022418] Normal: [ 2245.024680] 1070*4kB [ 2245.026902] 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2245.043420] (UME) [ 2245.057619] Node 1 [ 2245.060666] 325*8kB (ME) 127*16kB (ME) 68*32kB (UME) 59*64kB (UM) 14*128kB (ME) 4*256kB (M) 1*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 18192kB [ 2245.066275] Normal: [ 2245.075987] Bluetooth: hci1 command 0x041b tx timeout [ 2245.086574] 405*4kB (M) 7*8kB (UM) 7*16kB (ME) 5*32kB (ME) 6*64kB (M) 2*128kB (M) 1*256kB (M) 1*512kB (M) 1*1024kB (U) 1*2048kB (M) 5*4096kB (U) = 26908kB [ 2245.098099] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2245.111494] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2245.111501] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2245.111507] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2245.111512] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2245.111516] 56117 total pagecache pages [ 2245.111526] 0 pages in swap cache [ 2245.111531] Swap cache stats: add 0, delete 0, find 0/0 [ 2245.111534] Free swap = 0kB [ 2245.111537] Total swap = 0kB [ 2245.111542] 2097051 pages RAM [ 2245.111545] 0 pages HighMem/MovableOnly [ 2245.111548] 363848 pages reserved [ 2245.111551] 0 pages cma reserved [ 2245.111558] Out of memory (oom_kill_allocating_task): Kill process 30933 (modprobe) score 0 or sacrifice child [ 2245.111584] Killed process 30933 (modprobe) total-vm:4172kB, anon-rss:68kB, file-rss:0kB, shmem-rss:0kB [ 2245.132991] Node 1 [ 2245.150013] oom_reaper: reaped process 30933 (modprobe), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 2245.163981] Normal: [ 2245.174266] syz-executor.2: [ 2245.180892] syz-executor.4: [ 2245.194455] syz-executor.3: [ 2245.238190] 414*4kB (M) 8*8kB (UM) 8*16kB (UME) 7*32kB (UME) 7*64kB (UM) 3*128kB (UM) 2*256kB (UM) 2*512kB (UM) 0*1024kB 1*2048kB (M) 5*4096kB (U) = 26968kB [ 2245.243326] oom_reaper: reaped process 30716 (syz-executor.0), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 2245.270535] page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2245.293662] page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2245.295270] page allocation failure: order:0 [ 2245.313076] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2245.320970] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 2245.343075] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 2245.348514] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2245.353642] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 2245.357111] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2245.357113] (null) [ 2245.357121] syz-executor.3 cpuset= [ 2245.370668] CPU: 0 PID: 30724 Comm: syz-executor.4 Not tainted 4.14.229-syzkaller #0 [ 2245.386796] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2245.396421] Call Trace: [ 2245.399026] dump_stack+0x1b2/0x281 [ 2245.402674] warn_alloc.cold+0x96/0x1cc [ 2245.406666] ? zone_watermark_ok_safe+0x220/0x220 [ 2245.406920] oom_reaper: reaped process 30700 (syz-executor.3), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 2245.411535] ? wait_for_completion_io+0x10/0x10 [ 2245.411552] __alloc_pages_nodemask+0x2127/0x2720 [ 2245.411569] ? lock_acquire+0x170/0x3f0 [ 2245.411584] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2245.411593] ? ion_page_pool_alloc+0x9e/0x1b0 [ 2245.411606] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2245.411622] ? alloc_pages_current+0x123/0x260 [ 2245.411633] alloc_pages_current+0x155/0x260 [ 2245.411645] ion_page_pool_alloc+0x118/0x1b0 [ 2245.463330] ion_system_heap_allocate+0x133/0x8c0 [ 2245.468215] ? ion_alloc+0x187/0x810 [ 2245.471950] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2245.476360] / mems_allowed=0-1 [ 2245.477417] ? ion_system_contig_heap_create+0x130/0x130 [ 2245.477432] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2245.491115] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2245.495971] ion_alloc+0x204/0x810 [ 2245.499523] ? ion_dma_buf_release+0x40/0x40 [ 2245.503957] ? __might_fault+0x177/0x1b0 [ 2245.508024] ion_ioctl+0xea/0x1f0 [ 2245.511492] ? ion_query_heaps+0x360/0x360 [ 2245.515741] ? SyS_getpeername+0x220/0x220 [ 2245.519997] ? ion_query_heaps+0x360/0x360 [ 2245.524231] do_vfs_ioctl+0x75a/0xff0 [ 2245.528037] ? ioctl_preallocate+0x1a0/0x1a0 [ 2245.532457] ? lock_downgrade+0x740/0x740 [ 2245.536610] ? __fget+0x225/0x360 [ 2245.540071] ? do_vfs_ioctl+0xff0/0xff0 [ 2245.544052] ? security_file_ioctl+0x83/0xb0 [ 2245.548474] SyS_ioctl+0x7f/0xb0 [ 2245.551841] ? do_vfs_ioctl+0xff0/0xff0 [ 2245.555824] do_syscall_64+0x1d5/0x640 [ 2245.559721] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2245.564915] RIP: 0033:0x466459 [ 2245.568116] RSP: 002b:00007fb6cdc12188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2245.575842] RAX: ffffffffffffffda RBX: 000000000056c008 RCX: 0000000000466459 [ 2245.583117] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000005 [ 2245.590393] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2245.597689] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c008 [ 2245.604973] R13: 00007ffef01b8b7f R14: 00007fb6cdc12300 R15: 0000000000022000 [ 2245.615202] CPU: 1 PID: 30710 Comm: syz-executor.2 Not tainted 4.14.229-syzkaller #0 [ 2245.623129] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2245.632513] Call Trace: [ 2245.632676] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2245.635114] dump_stack+0x1b2/0x281 [ 2245.643736] 56117 total pagecache pages [ 2245.647321] warn_alloc.cold+0x96/0x1cc [ 2245.651342] 0 pages in swap cache [ 2245.655282] ? zone_watermark_ok_safe+0x220/0x220 [ 2245.658769] Swap cache stats: add 0, delete 0, find 0/0 [ 2245.663567] ? wait_for_completion_io+0x10/0x10 [ 2245.668958] Free swap = 0kB [ 2245.673582] __alloc_pages_nodemask+0x2127/0x2720 [ 2245.676574] Total swap = 0kB [ 2245.681423] ? lock_acquire+0x170/0x3f0 [ 2245.681440] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2245.681449] ? ion_page_pool_alloc+0x9e/0x1b0 [ 2245.681470] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2245.684487] 2097051 pages RAM [ 2245.688488] alloc_pages_current+0x155/0x260 [ 2245.688503] ion_page_pool_alloc+0x118/0x1b0 [ 2245.688513] ion_system_heap_allocate+0x133/0x8c0 [ 2245.688524] ? ion_alloc+0x187/0x810 [ 2245.693370] 0 pages HighMem/MovableOnly [ 2245.697868] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2245.697882] ? ion_system_contig_heap_create+0x130/0x130 [ 2245.703375] 363848 pages reserved [ 2245.706438] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2245.710868] 0 pages cma reserved [ 2245.715251] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2245.737671] oom_reaper: reaped process 30724 (syz-executor.4), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 2245.738648] ion_alloc+0x204/0x810 [ 2245.738664] ? ion_dma_buf_release+0x40/0x40 [ 2245.738676] ? __might_fault+0x177/0x1b0 [ 2245.738687] ion_ioctl+0xea/0x1f0 [ 2245.738697] ? ion_query_heaps+0x360/0x360 [ 2245.785896] ? ion_query_heaps+0x360/0x360 [ 2245.791106] do_vfs_ioctl+0x75a/0xff0 [ 2245.794922] ? ioctl_preallocate+0x1a0/0x1a0 [ 2245.799336] ? lock_downgrade+0x740/0x740 [ 2245.803587] ? __fget+0x225/0x360 [ 2245.807043] ? do_vfs_ioctl+0xff0/0xff0 [ 2245.811022] ? security_file_ioctl+0x83/0xb0 [ 2245.815437] SyS_ioctl+0x7f/0xb0 [ 2245.818829] ? do_vfs_ioctl+0xff0/0xff0 [ 2245.823189] do_syscall_64+0x1d5/0x640 [ 2245.827092] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2245.832290] RIP: 0033:0x466459 [ 2245.835483] RSP: 002b:00007effc187a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2245.843284] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 2245.850554] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000005 [ 2245.857822] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2245.865112] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2245.872384] R13: 00007ffc8c893f1f R14: 00007effc187a300 R15: 0000000000022000 [ 2245.888238] CPU: 1 PID: 30700 Comm: syz-executor.3 Not tainted 4.14.229-syzkaller #0 [ 2245.895402] syz-executor.0: [ 2245.896149] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2245.896154] page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 2245.899188] Call Trace: [ 2245.899209] dump_stack+0x1b2/0x281 [ 2245.899222] warn_alloc.cold+0x96/0x1cc [ 2245.899234] ? zone_watermark_ok_safe+0x220/0x220 [ 2245.899252] ? wait_for_completion_io+0x10/0x10 [ 2245.899265] __alloc_pages_nodemask+0x2127/0x2720 [ 2245.899281] ? lock_acquire+0x170/0x3f0 [ 2245.928009] (null) [ 2245.929006] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2245.933865] syz-executor.0 cpuset= [ 2245.938699] ? ion_page_pool_alloc+0x9e/0x1b0 [ 2245.938716] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2245.938735] alloc_pages_current+0x155/0x260 [ 2245.938752] ion_page_pool_alloc+0x118/0x1b0 [ 2245.958027] / [ 2245.958114] ion_system_heap_allocate+0x133/0x8c0 [ 2245.962607] mems_allowed=0-1 [ 2245.968070] ? ion_system_contig_heap_create+0x130/0x130 [ 2245.968084] ? kmem_cache_alloc_trace+0x324/0x3d0 [ 2245.968095] ion_alloc+0x204/0x810 [ 2245.968108] ? ion_dma_buf_release+0x40/0x40 [ 2246.005190] ? __might_fault+0x177/0x1b0 [ 2246.009275] ion_ioctl+0xea/0x1f0 [ 2246.012746] ? ion_query_heaps+0x360/0x360 [ 2246.017102] ? ion_query_heaps+0x360/0x360 [ 2246.021553] do_vfs_ioctl+0x75a/0xff0 [ 2246.025388] ? ioctl_preallocate+0x1a0/0x1a0 [ 2246.029802] ? lock_downgrade+0x740/0x740 [ 2246.033975] ? __fget+0x225/0x360 [ 2246.037432] ? do_vfs_ioctl+0xff0/0xff0 [ 2246.041415] ? security_file_ioctl+0x83/0xb0 [ 2246.046017] SyS_ioctl+0x7f/0xb0 [ 2246.049393] ? do_vfs_ioctl+0xff0/0xff0 [ 2246.053379] do_syscall_64+0x1d5/0x640 [ 2246.057297] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2246.062497] RIP: 0033:0x466459 [ 2246.065699] RSP: 002b:00007fb2f6ce7188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2246.073430] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 2246.080707] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2246.087988] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2246.095266] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2246.102545] R13: 00007ffde948695f R14: 00007fb2f6ce7300 R15: 0000000000022000 [ 2246.109851] CPU: 0 PID: 30716 Comm: syz-executor.0 Not tainted 4.14.229-syzkaller #0 [ 2246.117755] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2246.127130] Call Trace: [ 2246.129745] dump_stack+0x1b2/0x281 [ 2246.133387] warn_alloc.cold+0x96/0x1cc [ 2246.137384] ? zone_watermark_ok_safe+0x220/0x220 [ 2246.142286] ? usleep_range+0x130/0x130 [ 2246.146278] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 2246.151408] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 2246.156444] ? run_timer_softirq+0x5a0/0x5a0 [ 2246.160888] __alloc_pages_nodemask+0x2127/0x2720 [ 2246.165776] ? lock_acquire+0x170/0x3f0 [ 2246.169799] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2246.174740] ? ion_page_pool_alloc+0x9e/0x1b0 [ 2246.179258] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2246.184741] alloc_pages_current+0x155/0x260 [ 2246.189234] ion_page_pool_alloc+0x118/0x1b0 [ 2246.192741] Mem-Info: [ 2246.193653] ion_system_heap_allocate+0x133/0x8c0 [ 2246.196068] active_anon:14755 inactive_anon:55510 isolated_anon:0 [ 2246.196068] active_file:24 inactive_file:34 isolated_file:0 [ 2246.196068] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2246.196068] slab_reclaimable:12184 slab_unreclaimable:114384 [ 2246.196068] mapped:52931 shmem:56084 pagetables:924 bounce:0 [ 2246.196068] free:91721 free_pcp:129 free_cma:0 [ 2246.200898] ? ion_alloc+0x187/0x810 [ 2246.200910] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2246.200919] ? ion_system_contig_heap_create+0x130/0x130 [ 2246.200928] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2246.200939] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2246.200949] ion_alloc+0x204/0x810 [ 2246.200961] ? ion_dma_buf_release+0x40/0x40 [ 2246.200991] ? __might_fault+0x177/0x1b0 [ 2246.234429] Node 0 active_anon:57304kB inactive_anon:188688kB active_file:100kB inactive_file:48kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:176908kB dirty:0kB writeback:0kB shmem:190636kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2246.237950] ion_ioctl+0xea/0x1f0 [ 2246.237962] ? ion_query_heaps+0x360/0x360 [ 2246.237974] ? SyS_getpeername+0x220/0x220 [ 2246.237982] ? ion_query_heaps+0x360/0x360 [ 2246.237992] do_vfs_ioctl+0x75a/0xff0 [ 2246.238003] ? ioctl_preallocate+0x1a0/0x1a0 [ 2246.238011] ? lock_downgrade+0x740/0x740 [ 2246.238024] ? __fget+0x225/0x360 [ 2246.238033] ? do_vfs_ioctl+0xff0/0xff0 [ 2246.238045] ? security_file_ioctl+0x83/0xb0 [ 2246.238055] SyS_ioctl+0x7f/0xb0 [ 2246.264477] Node 1 active_anon:1716kB inactive_anon:33352kB active_file:0kB inactive_file:88kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:34816kB dirty:0kB writeback:0kB shmem:33700kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2246.266777] ? do_vfs_ioctl+0xff0/0xff0 [ 2246.266792] do_syscall_64+0x1d5/0x640 [ 2246.266807] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2246.266816] RIP: 0033:0x466459 [ 2246.266821] RSP: 002b:00007f782969a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2246.266831] RAX: ffffffffffffffda RBX: 000000000056c008 RCX: 0000000000466459 [ 2246.266837] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000005 [ 2246.266843] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2246.266855] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c008 [ 2246.266861] R13: 00007ffd4f3c2b7f R14: 00007f782969a300 R15: 0000000000022000 [ 2246.281398] oom_reaper: reaped process 30710 (syz-executor.2), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 2246.306003] Node 0 [ 2246.436677] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 2246.733305] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2246.752471] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 2246.771402] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 2246.777646] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2246.788656] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2246.815078] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 2246.824816] 8021q: adding VLAN 0 to HW filter on device team0 [ 2246.861081] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 2246.908230] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2246.916205] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2246.960226] DMA free:11080kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2246.998551] bridge0: port 1(bridge_slave_0) entered blocking state [ 2247.004973] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2247.039045] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2247.069146] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2247.074253] Node 0 DMA32 free:35440kB min:36200kB low:45248kB high:54296kB active_anon:57272kB inactive_anon:188688kB active_file:156kB inactive_file:6844kB unevictable:0kB writepending:152kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:7520kB pagetables:3368kB bounce:0kB free_pcp:1392kB local_pcp:680kB free_cma:0kB [ 2247.088579] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 2247.128326] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2247.178131] lowmem_reserve[]: 0 0 0 0 0 [ 2247.178808] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2247.182214] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2247.208495] bridge0: port 2(bridge_slave_1) entered blocking state [ 2247.237641] lowmem_reserve[]: [ 2247.240059] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2247.241736] 0 [ 2247.288391] Bluetooth: hci1 command 0x040f tx timeout [ 2247.292194] 0 0 0 0 [ 2247.297878] Node 1 Normal free:172068kB min:53696kB low:67120kB high:80544kB active_anon:1412kB inactive_anon:33352kB active_file:516kB inactive_file:1508kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:256kB pagetables:316kB bounce:0kB free_pcp:1412kB local_pcp:692kB free_cma:0kB [ 2247.298293] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 2247.352239] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 2247.359735] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2247.388035] lowmem_reserve[]: 0 0 0 0 0 [ 2247.398090] Node 0 DMA: 6*4kB (ME) 6*8kB (UME) 4*16kB (M) 6*32kB (ME) 9*64kB (UME) 3*128kB (ME) 2*256kB (ME) 4*512kB (UME) 1*1024kB (E) 1*2048kB (M) 1*4096kB (U) = 11016kB [ 2247.399817] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2247.416952] Node 0 DMA32: 2514*4kB (UE) 664*8kB (UME) 2699*16kB (UE) 310*32kB (UME) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 68472kB [ 2247.439016] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2247.446216] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 2247.468175] Node 1 Normal: 2769*4kB (UM) 1121*8kB (UM) 1783*16kB (UE) 1737*32kB (UE) 189*64kB (U) 1*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 116380kB [ 2247.483235] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2247.508699] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2247.509481] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2247.517327] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2247.544822] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2247.588111] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2247.588925] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2247.598157] 58349 total pagecache pages [ 2247.607423] 0 pages in swap cache [ 2247.628075] Swap cache stats: add 0, delete 0, find 0/0 [ 2247.635841] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 2247.648133] Free swap = 0kB [ 2247.648524] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2247.651219] Total swap = 0kB [ 2247.664493] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2247.688158] 2097051 pages RAM [ 2247.691412] 0 pages HighMem/MovableOnly [ 2247.695390] 363848 pages reserved [ 2247.695644] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 2247.706277] 0 pages cma reserved [ 2247.729309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2247.748622] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2247.814729] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 2247.822855] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2247.848993] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2247.869918] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 2247.876121] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2247.950108] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 2247.978993] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 2247.988802] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2247.995656] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2248.047771] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2248.469385] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 2248.484748] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 2248.492173] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2248.506020] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2248.636735] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 2248.649280] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 2248.656153] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 2248.743430] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 2248.759523] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2248.798654] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2248.807051] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2248.848773] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2248.870827] device veth0_vlan entered promiscuous mode [ 2248.911037] device veth1_vlan entered promiscuous mode [ 2248.940437] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 2248.951620] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 2248.961512] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2248.970868] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2249.001061] device veth0_macvtap entered promiscuous mode [ 2249.007658] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 2249.054372] device veth1_macvtap entered promiscuous mode [ 2249.069514] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 2249.091437] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 2249.153705] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 2249.203256] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2249.242471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2249.262605] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2249.318249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2249.327419] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2249.378014] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2249.387170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2249.399044] Bluetooth: hci1 command 0x0419 tx timeout [ 2249.448809] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2249.459968] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2249.531598] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2249.579707] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 2249.587716] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2249.629164] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2249.636918] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2249.688964] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2249.731747] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2249.751085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2249.762005] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2249.772586] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2249.784691] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2249.794899] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2249.818249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2249.848047] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2249.857788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2249.948064] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2249.957831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2250.021243] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 2250.038950] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2250.047464] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2250.079105] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 15:00:05 executing program 1: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/btrfs-control\x00', 0x0, 0x0) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000340)={0x0, @can, @can, @can}) syz_genetlink_get_family_id$batadv(&(0x7f0000000000)='batadv\x00', r0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000140)={0x0}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000740)={'wpan3\x00'}) sendmsg$IEEE802154_SET_MACPARAMS(r3, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="100029bd7000fddbdf25230000000500250009000000"], 0x1c}, 0x1, 0x0, 0x0, 0x890}, 0xa5befbe170ef012f) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r1, 0xc0709411, &(0x7f00000003c0)={{r2, 0x100000001, 0x3, 0x9, 0x8000, 0x0, 0x5, 0xff, 0x7fffffff, 0x6, 0x400, 0x9, 0x8, 0x1, 0x875}, 0x8, [0x0]}) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x80000000, 0xe}) r4 = socket(0x18, 0xa, 0x5) ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f00000000c0)={r4}) 15:00:05 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000980)={'team0\x00'}) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f00000000c0)={{0x0, 0x4, 0xb495, 0x51b, 0x40, 0xfffffffffffffff8, 0xd6, 0x1000, 0x0, 0x1ff, 0x1000, 0x6, 0x0, 0xe4, 0x806}}) ioctl$BTRFS_IOC_TREE_SEARCH(r1, 0xd0009411, &(0x7f00000010c0)={{r2, 0x0, 0x51, 0x40, 0x918d, 0x8, 0x0, 0x7fffffff, 0x60, 0x4, 0xbc, 0x100000001, 0x3, 0xb65b, 0x2}}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000080)='gtp\x00', 0xffffffffffffffff) sendmsg$GTP_CMD_NEWPDP(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r4, 0x221, 0x0, 0x0, {}, [@GTPA_VERSION={0x8}]}, 0x1c}}, 0x0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000002140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000002100)={&(0x7f00000020c0)={0x20, r4, 0x300, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_TID={0xc}]}, 0x20}}, 0x2400c000) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x80000000, 0xe}) [ 2251.433381] syz-executor.4: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2251.438351] syz-executor.2: [ 2251.448203] syz-executor.0: [ 2251.449387] syz-executor.3: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2251.459561] page allocation failure: order:4 [ 2251.481040] page allocation failure: order:4 [ 2251.508098] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 2251.508172] syz-executor.4 cpuset= [ 2251.516094] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 2251.527588] syz-executor.3 cpuset= [ 2251.538247] (null) [ 2251.545673] / mems_allowed=0-1 [ 2251.545912] (null) [ 2251.550165] / mems_allowed=0-1 [ 2251.557775] CPU: 0 PID: 30724 Comm: syz-executor.4 Not tainted 4.14.229-syzkaller #0 [ 2251.562364] syz-executor.2 cpuset= [ 2251.565677] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2251.565682] Call Trace: [ 2251.565714] dump_stack+0x1b2/0x281 [ 2251.565730] warn_alloc.cold+0x96/0x1cc [ 2251.570734] syz-executor.0 cpuset= [ 2251.578784] ? zone_watermark_ok_safe+0x220/0x220 [ 2251.578810] __alloc_pages_nodemask+0x2127/0x2720 [ 2251.578819] ? __schedule+0x893/0x1de0 [ 2251.578834] ? lock_acquire+0x170/0x3f0 [ 2251.578848] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2251.578864] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2251.578875] ? __mutex_unlock_slowpath+0x75/0x770 [ 2251.578890] alloc_pages_current+0x155/0x260 [ 2251.578904] ion_page_pool_alloc+0x118/0x1b0 [ 2251.601220] syz-executor.1: [ 2251.602303] ion_system_heap_allocate+0x133/0x8c0 [ 2251.602318] ? _raw_spin_unlock+0x29/0x40 [ 2251.602327] ? _ion_heap_freelist_drain+0x6e/0x410 [ 2251.602341] ? ion_system_contig_heap_create+0x130/0x130 [ 2251.610779] page allocation failure: order:4 [ 2251.615044] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2251.615061] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2251.615073] ion_alloc+0x27a/0x810 [ 2251.615087] ? ion_dma_buf_release+0x40/0x40 [ 2251.621829] / [ 2251.625371] ? __might_fault+0x177/0x1b0 [ 2251.631068] / [ 2251.634166] ion_ioctl+0xea/0x1f0 [ 2251.653795] mems_allowed=0-1 [ 2251.656555] ? ion_query_heaps+0x360/0x360 [ 2251.656568] ? SyS_getpeername+0x220/0x220 [ 2251.656578] ? ion_query_heaps+0x360/0x360 [ 2251.656589] do_vfs_ioctl+0x75a/0xff0 [ 2251.656602] ? ioctl_preallocate+0x1a0/0x1a0 [ 2251.661289] mems_allowed=0-1 [ 2251.666069] ? lock_downgrade+0x740/0x740 [ 2251.666085] ? __fget+0x225/0x360 [ 2251.666096] ? do_vfs_ioctl+0xff0/0xff0 [ 2251.666108] ? security_file_ioctl+0x83/0xb0 [ 2251.666119] SyS_ioctl+0x7f/0xb0 [ 2251.676799] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 2251.678941] ? do_vfs_ioctl+0xff0/0xff0 [ 2251.678956] do_syscall_64+0x1d5/0x640 [ 2251.678970] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2251.678978] RIP: 0033:0x466459 [ 2251.678983] RSP: 002b:00007fb6cdc12188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2251.678992] RAX: ffffffffffffffda RBX: 000000000056c008 RCX: 0000000000466459 [ 2251.678997] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000005 [ 2251.679002] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2251.679007] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c008 [ 2251.679011] R13: 00007ffef01b8b7f R14: 00007fb6cdc12300 R15: 0000000000022000 [ 2251.683607] CPU: 0 PID: 30700 Comm: syz-executor.3 Not tainted 4.14.229-syzkaller #0 [ 2251.733373] (null) [ 2251.733710] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2251.765946] syz-executor.1 cpuset= [ 2251.768230] Call Trace: [ 2251.768252] dump_stack+0x1b2/0x281 [ 2251.768265] warn_alloc.cold+0x96/0x1cc [ 2251.768276] ? zone_watermark_ok_safe+0x220/0x220 [ 2251.768298] __alloc_pages_nodemask+0x2127/0x2720 [ 2251.768315] ? lock_acquire+0x170/0x3f0 [ 2251.768336] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2251.799780] / [ 2251.805445] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2251.864140] mems_allowed=0-1 [ 2251.864309] ? __mutex_unlock_slowpath+0x75/0x770 [ 2251.872261] alloc_pages_current+0x155/0x260 [ 2251.876685] ion_page_pool_alloc+0x118/0x1b0 [ 2251.881103] ion_system_heap_allocate+0x133/0x8c0 [ 2251.885957] ? _raw_spin_unlock+0x29/0x40 [ 2251.890141] ? _ion_heap_freelist_drain+0x6e/0x410 [ 2251.895124] ? ion_system_contig_heap_create+0x130/0x130 [ 2251.900615] ? kmem_cache_alloc_trace+0x324/0x3d0 [ 2251.905563] ion_alloc+0x27a/0x810 [ 2251.909126] ? ion_dma_buf_release+0x40/0x40 [ 2251.913578] ? __might_fault+0x177/0x1b0 [ 2251.917679] ion_ioctl+0xea/0x1f0 [ 2251.921138] ? ion_query_heaps+0x360/0x360 [ 2251.925383] ? ion_query_heaps+0x360/0x360 [ 2251.929625] do_vfs_ioctl+0x75a/0xff0 [ 2251.933463] ? ioctl_preallocate+0x1a0/0x1a0 [ 2251.937899] ? lock_downgrade+0x740/0x740 [ 2251.942053] ? __fget+0x225/0x360 [ 2251.945507] ? do_vfs_ioctl+0xff0/0xff0 [ 2251.949484] ? security_file_ioctl+0x83/0xb0 [ 2251.953894] SyS_ioctl+0x7f/0xb0 [ 2251.957268] ? do_vfs_ioctl+0xff0/0xff0 [ 2251.961265] do_syscall_64+0x1d5/0x640 [ 2251.965189] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2251.970384] RIP: 0033:0x466459 [ 2251.973580] RSP: 002b:00007fb2f6ce7188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2251.981295] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 2251.988572] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2251.995846] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2252.003118] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2252.010566] R13: 00007ffde948695f R14: 00007fb2f6ce7300 R15: 0000000000022000 [ 2252.017861] CPU: 1 PID: 30710 Comm: syz-executor.2 Not tainted 4.14.229-syzkaller #0 [ 2252.025767] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2252.035129] Call Trace: [ 2252.037741] dump_stack+0x1b2/0x281 [ 2252.042004] warn_alloc.cold+0x96/0x1cc [ 2252.046000] ? zone_watermark_ok_safe+0x220/0x220 [ 2252.050874] __alloc_pages_nodemask+0x2127/0x2720 [ 2252.055748] ? lock_acquire+0x170/0x3f0 [ 2252.059829] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2252.064688] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2252.070155] ? __mutex_unlock_slowpath+0x75/0x770 [ 2252.075012] alloc_pages_current+0x155/0x260 [ 2252.079455] ion_page_pool_alloc+0x118/0x1b0 [ 2252.083877] ion_system_heap_allocate+0x133/0x8c0 [ 2252.088735] ? _raw_spin_unlock+0x29/0x40 [ 2252.092894] ? _ion_heap_freelist_drain+0x6e/0x410 [ 2252.097837] ? ion_system_contig_heap_create+0x130/0x130 [ 2252.103297] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2252.108353] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2252.113294] ion_alloc+0x27a/0x810 [ 2252.116931] ? ion_dma_buf_release+0x40/0x40 [ 2252.121444] ? __might_fault+0x177/0x1b0 [ 2252.125515] ion_ioctl+0xea/0x1f0 [ 2252.128975] ? ion_query_heaps+0x360/0x360 [ 2252.133216] ? ion_query_heaps+0x360/0x360 [ 2252.137463] do_vfs_ioctl+0x75a/0xff0 [ 2252.141272] ? ioctl_preallocate+0x1a0/0x1a0 [ 2252.145689] ? lock_downgrade+0x740/0x740 [ 2252.149858] ? __fget+0x225/0x360 [ 2252.153320] ? do_vfs_ioctl+0xff0/0xff0 [ 2252.157318] ? security_file_ioctl+0x83/0xb0 [ 2252.161747] SyS_ioctl+0x7f/0xb0 [ 2252.165124] ? do_vfs_ioctl+0xff0/0xff0 [ 2252.169110] do_syscall_64+0x1d5/0x640 [ 2252.173010] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2252.178205] RIP: 0033:0x466459 [ 2252.181394] RSP: 002b:00007effc187a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2252.189131] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 2252.196411] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000005 [ 2252.203696] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2252.211245] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2252.218524] R13: 00007ffc8c893f1f R14: 00007effc187a300 R15: 0000000000022000 [ 2252.238247] CPU: 1 PID: 30716 Comm: syz-executor.0 Not tainted 4.14.229-syzkaller #0 [ 2252.246161] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2252.255529] Call Trace: [ 2252.258156] dump_stack+0x1b2/0x281 [ 2252.261810] warn_alloc.cold+0x96/0x1cc [ 2252.265807] ? zone_watermark_ok_safe+0x220/0x220 [ 2252.270688] __alloc_pages_nodemask+0x2127/0x2720 [ 2252.275559] ? lock_acquire+0x170/0x3f0 [ 2252.279557] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2252.284445] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2252.289950] ? __mutex_unlock_slowpath+0x75/0x770 [ 2252.294823] ? retint_kernel+0x2d/0x2d [ 2252.298739] alloc_pages_current+0x155/0x260 [ 2252.303177] ion_page_pool_alloc+0x118/0x1b0 [ 2252.307606] ion_system_heap_allocate+0x133/0x8c0 [ 2252.312575] ? _raw_spin_unlock+0x29/0x40 [ 2252.316838] ? _ion_heap_freelist_drain+0x6e/0x410 [ 2252.321814] ? ion_system_contig_heap_create+0x130/0x130 [ 2252.327284] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2252.332353] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2252.337377] ion_alloc+0x27a/0x810 [ 2252.340944] ? ion_dma_buf_release+0x40/0x40 [ 2252.345555] ? __might_fault+0x177/0x1b0 [ 2252.349642] ion_ioctl+0xea/0x1f0 [ 2252.353122] ? ion_query_heaps+0x360/0x360 [ 2252.357379] ? SyS_getpeername+0x220/0x220 [ 2252.361660] ? ion_query_heaps+0x360/0x360 [ 2252.365926] do_vfs_ioctl+0x75a/0xff0 [ 2252.369756] ? ioctl_preallocate+0x1a0/0x1a0 [ 2252.374184] ? lock_downgrade+0x740/0x740 [ 2252.378343] ? __fget+0x225/0x360 [ 2252.381830] ? do_vfs_ioctl+0xff0/0xff0 [ 2252.385824] ? security_file_ioctl+0x83/0xb0 [ 2252.390243] SyS_ioctl+0x7f/0xb0 [ 2252.393617] ? do_vfs_ioctl+0xff0/0xff0 [ 2252.397721] do_syscall_64+0x1d5/0x640 [ 2252.401624] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2252.406825] RIP: 0033:0x466459 [ 2252.410026] RSP: 002b:00007f782969a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2252.417748] RAX: ffffffffffffffda RBX: 000000000056c008 RCX: 0000000000466459 [ 2252.425039] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000005 [ 2252.432344] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2252.439621] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c008 [ 2252.446912] R13: 00007ffd4f3c2b7f R14: 00007f782969a300 R15: 0000000000022000 [ 2252.454219] CPU: 0 PID: 30988 Comm: syz-executor.1 Not tainted 4.14.229-syzkaller #0 [ 2252.462169] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2252.471643] Call Trace: [ 2252.474267] dump_stack+0x1b2/0x281 [ 2252.477910] warn_alloc.cold+0x96/0x1cc [ 2252.481917] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2252.486952] ? zone_watermark_ok_safe+0x220/0x220 [ 2252.491833] __alloc_pages_nodemask+0x2127/0x2720 [ 2252.496701] ? lock_acquire+0x170/0x3f0 [ 2252.500703] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2252.505564] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2252.506644] warn_alloc_show_mem: 3 callbacks suppressed [ 2252.506648] Mem-Info: [ 2252.511038] ? __mutex_unlock_slowpath+0x75/0x770 [ 2252.511060] alloc_pages_current+0x155/0x260 [ 2252.511074] ion_page_pool_alloc+0x118/0x1b0 [ 2252.511083] ion_system_heap_allocate+0x133/0x8c0 [ 2252.511101] ? ion_alloc+0x187/0x810 [ 2252.511112] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2252.511121] ? ion_system_contig_heap_create+0x130/0x130 [ 2252.511131] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2252.511145] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2252.532373] active_anon:14823 inactive_anon:55509 isolated_anon:0 [ 2252.532373] active_file:1916 inactive_file:1764 isolated_file:0 [ 2252.532373] unevictable:0 dirty:9 writeback:0 unstable:0 [ 2252.532373] slab_reclaimable:12164 slab_unreclaimable:118028 [ 2252.532373] mapped:55621 shmem:56083 pagetables:929 bounce:0 [ 2252.532373] free:417997 free_pcp:113 free_cma:0 [ 2252.534413] ion_alloc+0x204/0x810 [ 2252.549075] Node 0 active_anon:58108kB inactive_anon:188688kB active_file:6936kB inactive_file:5840kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:186856kB dirty:36kB writeback:0kB shmem:190636kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2252.553877] ? ion_dma_buf_release+0x40/0x40 [ 2252.569035] Node 1 active_anon:1184kB inactive_anon:33348kB active_file:728kB inactive_file:1216kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:35628kB dirty:0kB writeback:0kB shmem:33696kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2252.598297] ? __might_fault+0x177/0x1b0 [ 2252.598312] ion_ioctl+0xea/0x1f0 [ 2252.598322] ? ion_query_heaps+0x360/0x360 [ 2252.598340] ? ion_query_heaps+0x360/0x360 [ 2252.598350] do_vfs_ioctl+0x75a/0xff0 [ 2252.598361] ? ioctl_preallocate+0x1a0/0x1a0 [ 2252.598370] ? lock_downgrade+0x740/0x740 [ 2252.598383] ? __fget+0x225/0x360 [ 2252.598392] ? do_vfs_ioctl+0xff0/0xff0 [ 2252.598404] ? security_file_ioctl+0x83/0xb0 [ 2252.598413] SyS_ioctl+0x7f/0xb0 [ 2252.598425] ? do_vfs_ioctl+0xff0/0xff0 [ 2252.598437] do_syscall_64+0x1d5/0x640 [ 2252.598451] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2252.598460] RIP: 0033:0x466459 [ 2252.598465] RSP: 002b:00007f431c6b2188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2252.598477] RAX: ffffffffffffffda RBX: 000000000056c008 RCX: 0000000000466459 [ 2252.598481] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000004 [ 2252.598486] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2252.598492] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c008 [ 2252.598498] R13: 00007ffd8dc7798f R14: 00007f431c6b2300 R15: 0000000000022000 [ 2253.381894] Node 0 DMA free:11140kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2253.451765] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2253.456852] Node 0 DMA32 free:363064kB min:36200kB low:45248kB high:54296kB active_anon:58204kB inactive_anon:188688kB active_file:7144kB inactive_file:6372kB unevictable:0kB writepending:96kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:7552kB pagetables:3496kB bounce:0kB free_pcp:252kB local_pcp:160kB free_cma:0kB [ 2253.571191] lowmem_reserve[]: 0 0 0 0 0 [ 2253.575260] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2253.618259] syz-executor.1: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2253.623107] lowmem_reserve[]: [ 2253.631489] syz-executor.5: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2253.658103] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 2253.662196] 0 0 0 0 0 [ 2253.663434] CPU: 0 PID: 30992 Comm: syz-executor.1 Not tainted 4.14.229-syzkaller #0 [ 2253.665831] Node 1 [ 2253.673703] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2253.673708] Call Trace: [ 2253.673732] dump_stack+0x1b2/0x281 [ 2253.673745] warn_alloc.cold+0x96/0x1cc [ 2253.673756] ? zone_watermark_ok_safe+0x220/0x220 [ 2253.673778] __alloc_pages_nodemask+0x2127/0x2720 [ 2253.673794] ? lock_acquire+0x170/0x3f0 [ 2253.673808] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2253.673826] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2253.673839] ? __mutex_unlock_slowpath+0x75/0x770 [ 2253.688061] syz-executor.5 cpuset= [ 2253.691667] alloc_pages_current+0x155/0x260 [ 2253.695733] / [ 2253.700581] ion_page_pool_alloc+0x118/0x1b0 [ 2253.709908] Normal free:144912kB min:53696kB low:67120kB high:80544kB active_anon:1184kB inactive_anon:33348kB active_file:728kB inactive_file:704kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:256kB pagetables:252kB bounce:0kB free_pcp:4kB local_pcp:0kB free_cma:0kB [ 2253.714379] ion_system_heap_allocate+0x133/0x8c0 [ 2253.739983] lowmem_reserve[]: [ 2253.766698] ? ion_alloc+0x187/0x810 [ 2253.766710] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2253.766719] ? ion_system_contig_heap_create+0x130/0x130 [ 2253.766728] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2253.766739] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2253.766749] ion_alloc+0x204/0x810 [ 2253.766761] ? ion_dma_buf_release+0x40/0x40 [ 2253.766773] ? __might_fault+0x177/0x1b0 [ 2253.766785] ion_ioctl+0xea/0x1f0 [ 2253.766794] ? ion_query_heaps+0x360/0x360 [ 2253.766808] ? _raw_spin_unlock+0x29/0x40 [ 2253.766815] ? ion_query_heaps+0x360/0x360 [ 2253.766824] do_vfs_ioctl+0x75a/0xff0 [ 2253.766836] ? ioctl_preallocate+0x1a0/0x1a0 [ 2253.766850] ? lock_downgrade+0x740/0x740 [ 2253.778623] mems_allowed=0-1 [ 2253.784123] ? __fget+0x225/0x360 [ 2253.846744] ? do_vfs_ioctl+0xff0/0xff0 [ 2253.850726] ? security_file_ioctl+0x83/0xb0 [ 2253.855145] SyS_ioctl+0x7f/0xb0 [ 2253.858079] 0 0 [ 2253.858641] ? do_vfs_ioctl+0xff0/0xff0 [ 2253.858655] do_syscall_64+0x1d5/0x640 [ 2253.860621] 0 [ 2253.864599] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2253.875448] RIP: 0033:0x466459 [ 2253.878637] RSP: 002b:00007f431c670188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2253.886369] RAX: ffffffffffffffda RBX: 000000000056c158 RCX: 0000000000466459 [ 2253.893643] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000004 [ 2253.898059] 0 [ 2253.900923] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2253.900934] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c158 [ 2253.902823] 0 [ 2253.910094] R13: 00007ffd8dc7798f R14: 00007f431c670300 R15: 0000000000022000 [ 2253.958056] CPU: 1 PID: 30987 Comm: syz-executor.5 Not tainted 4.14.229-syzkaller #0 [ 2253.966010] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2253.975468] Call Trace: [ 2253.978075] dump_stack+0x1b2/0x281 [ 2253.981721] warn_alloc.cold+0x96/0x1cc [ 2253.985720] ? zone_watermark_ok_safe+0x220/0x220 [ 2253.990597] __alloc_pages_nodemask+0x2127/0x2720 [ 2253.995464] ? _raw_spin_unlock_irq+0x24/0x80 [ 2253.999992] ? lock_acquire+0x170/0x3f0 [ 2254.003992] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2254.008858] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2254.014333] ? __mutex_unlock_slowpath+0x75/0x770 [ 2254.019208] alloc_pages_current+0x155/0x260 [ 2254.023631] ion_page_pool_alloc+0x118/0x1b0 [ 2254.028065] ion_system_heap_allocate+0x133/0x8c0 [ 2254.032928] ? ion_alloc+0x187/0x810 [ 2254.036656] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2254.042228] ? ion_system_contig_heap_create+0x130/0x130 [ 2254.047695] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2254.052736] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2254.057597] ion_alloc+0x204/0x810 [ 2254.061159] ? ion_dma_buf_release+0x40/0x40 [ 2254.065584] ? __might_fault+0x177/0x1b0 [ 2254.069661] ion_ioctl+0xea/0x1f0 [ 2254.073166] ? ion_query_heaps+0x360/0x360 [ 2254.077419] ? ion_query_heaps+0x360/0x360 [ 2254.081667] do_vfs_ioctl+0x75a/0xff0 [ 2254.085505] ? ioctl_preallocate+0x1a0/0x1a0 [ 2254.089926] ? lock_downgrade+0x740/0x740 [ 2254.094095] ? __fget+0x225/0x360 [ 2254.097565] ? do_vfs_ioctl+0xff0/0xff0 [ 2254.101556] ? security_file_ioctl+0x83/0xb0 [ 2254.105979] SyS_ioctl+0x7f/0xb0 [ 2254.109965] ? do_vfs_ioctl+0xff0/0xff0 [ 2254.113954] do_syscall_64+0x1d5/0x640 [ 2254.117863] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2254.123068] RIP: 0033:0x466459 [ 2254.126291] RSP: 002b:00007f17b5648188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2254.134053] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 2254.141337] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2254.148637] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2254.156787] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2254.164084] R13: 00007fff4326a6cf R14: 00007f17b5648300 R15: 0000000000022000 [ 2254.198031] Node 0 DMA: 15*4kB (UME) 15*8kB (UME) 7*16kB (UM) 9*32kB (UME) 6*64kB (UME) 3*128kB (ME) 2*256kB (ME) 4*512kB (UME) 1*1024kB (E) 1*2048kB (M) 1*4096kB (U) = 11076kB [ 2254.228034] Node 0 DMA32: 275*4kB (UME) 76*8kB (UME) 18*16kB (UME) 645*32kB (UME) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 22636kB [ 2254.259000] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2254.298833] Node 1 Normal: 329*4kB (UM) 3*8kB (M) 1*16kB (U) 741*32kB (U) 6*64kB (U) 1*128kB (U) 1*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 25836kB [ 2254.320599] oom_reaper: reaped process 30988 (syz-executor.1), now anon-rss:0kB, file-rss:16kB, shmem-rss:0kB [ 2254.371583] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2254.374517] warn_alloc_show_mem: 4 callbacks suppressed [ 2254.374522] Mem-Info: [ 2254.382685] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2254.402385] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2254.411682] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2254.412959] active_anon:14807 inactive_anon:55509 isolated_anon:0 [ 2254.412959] active_file:32 inactive_file:35 isolated_file:42 [ 2254.412959] unevictable:0 dirty:3 writeback:0 unstable:0 [ 2254.412959] slab_reclaimable:12160 slab_unreclaimable:118163 [ 2254.412959] mapped:53087 shmem:56083 pagetables:930 bounce:0 [ 2254.412959] free:13831 free_pcp:79 free_cma:0 [ 2254.425857] 56164 total pagecache pages [ 2254.462746] 0 pages in swap cache [ 2254.468677] Swap cache stats: add 0, delete 0, find 0/0 [ 2254.470688] systemd-journal invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=0 [ 2254.474154] Free swap = 0kB [ 2254.496087] Total swap = 0kB [ 2254.498158] systemd-journal cpuset=/ mems_allowed=0-1 [ 2254.501162] 2097051 pages RAM [ 2254.504377] CPU: 0 PID: 29263 Comm: systemd-journal Not tainted 4.14.229-syzkaller #0 [ 2254.507472] 0 pages HighMem/MovableOnly [ 2254.515434] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2254.515439] Call Trace: [ 2254.515473] dump_stack+0x1b2/0x281 [ 2254.515486] dump_header+0x178/0x82f [ 2254.515496] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2254.515504] ? ___ratelimit+0x2cd/0x530 [ 2254.515513] oom_kill_process.cold+0x10/0xa40 [ 2254.515530] out_of_memory+0xe3e/0x1190 [ 2254.515543] ? oom_killer_disable+0x1c0/0x1c0 [ 2254.515551] ? mutex_trylock+0x152/0x1a0 [ 2254.515561] __alloc_pages_nodemask+0x23e1/0x2720 [ 2254.515580] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2254.515588] ? entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2254.515607] ? cache_grow_begin+0x3f/0x700 [ 2254.523517] 363848 pages reserved [ 2254.528952] cache_grow_begin+0x91/0x700 [ 2254.528967] fallback_alloc+0x207/0x2c0 [ 2254.528978] kmem_cache_alloc+0x1e5/0x3c0 [ 2254.528989] getname_flags+0xc8/0x550 [ 2254.528999] user_path_at_empty+0x2a/0x50 [ 2254.529009] SyS_faccessat+0x21b/0x680 [ 2254.529018] ? SyS_fallocate+0x80/0x80 [ 2254.529026] ? do_syscall_64+0x4c/0x640 [ 2254.529032] ? SyS_faccessat+0x680/0x680 [ 2254.529040] do_syscall_64+0x1d5/0x640 [ 2254.529054] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2254.531631] 0 pages cma reserved [ 2254.535254] RIP: 0033:0x7f07c70679c7 [ 2254.563340] Node 0 active_anon:58044kB inactive_anon:188688kB active_file:88kB inactive_file:88kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:177404kB dirty:12kB writeback:0kB shmem:190636kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2254.565043] RSP: 002b:00007fff841a2d88 EFLAGS: 00000246 [ 2254.570000] Node 1 active_anon:1184kB inactive_anon:33348kB active_file:40kB inactive_file:52kB unevictable:0kB isolated(anon):0kB isolated(file):56kB mapped:34844kB dirty:0kB writeback:0kB shmem:33696kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2254.574719] ORIG_RAX: 0000000000000015 [ 2254.585971] Node 0 [ 2254.587767] RAX: ffffffffffffffda RBX: 00007fff841a5ca0 RCX: 00007f07c70679c7 [ 2254.594061] DMA free:10964kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2254.595802] RDX: 00007f07c7ad8a00 RSI: 0000000000000000 RDI: 00005587d384c9a3 [ 2254.595813] RBP: 00007fff841a2dc0 R08: 0000000000000000 R09: 0000000000000000 [ 2254.604155] lowmem_reserve[]: [ 2254.608202] R10: 0000000000000069 R11: 0000000000000246 R12: 0000000000000000 [ 2254.608208] R13: 0000000000000000 R14: 00007fff841a5ca0 R15: 00007fff841a32b0 [ 2254.636715] Mem-Info: [ 2254.661682] 0 [ 2254.683717] active_anon:14807 inactive_anon:55509 isolated_anon:0 [ 2254.683717] active_file:32 inactive_file:35 isolated_file:14 [ 2254.683717] unevictable:0 dirty:3 writeback:0 unstable:0 [ 2254.683717] slab_reclaimable:12160 slab_unreclaimable:118163 [ 2254.683717] mapped:53062 shmem:56083 pagetables:930 bounce:0 [ 2254.683717] free:13830 free_pcp:0 free_cma:0 [ 2254.710321] 2717 [ 2254.718037] Node 0 active_anon:58044kB inactive_anon:188688kB active_file:88kB inactive_file:88kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:177404kB dirty:12kB writeback:0kB shmem:190636kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2254.745808] 2718 [ 2254.769293] Node 1 active_anon:1184kB inactive_anon:33348kB active_file:40kB inactive_file:52kB unevictable:0kB isolated(anon):0kB isolated(file):56kB mapped:34844kB dirty:0kB writeback:0kB shmem:33696kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2254.784421] 2718 [ 2254.824863] Node 0 [ 2254.850588] 2718 [ 2254.904905] Node 0 DMA32 free:18024kB min:36200kB low:45248kB high:54296kB active_anon:58144kB inactive_anon:188688kB active_file:180kB inactive_file:60kB unevictable:0kB writepending:0kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:7552kB pagetables:3468kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2254.911315] DMA free:10964kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2254.943012] lowmem_reserve[]: [ 2254.959286] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2254.959312] Node 0 DMA32 free:18024kB min:36200kB low:45248kB high:54296kB active_anon:58144kB inactive_anon:188688kB active_file:180kB inactive_file:60kB unevictable:0kB writepending:0kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:7552kB pagetables:3468kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2254.959331] lowmem_reserve[]: 0 0 0 0 0 [ 2254.959347] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2254.966286] 0 [ 2254.967499] lowmem_reserve[]: [ 2255.008994] 0 0 0 0 [ 2255.039720] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2255.047062] 0 [ 2255.067589] syz-executor.3: [ 2255.068041] syz-executor.2: [ 2255.069510] page allocation failure: order:0 [ 2255.072460] page allocation failure: order:0 [ 2255.075468] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 2255.085062] syz-executor.4: [ 2255.085538] lowmem_reserve[]: [ 2255.095349] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2255.102669] 0 0 [ 2255.106289] syz-executor.2 cpuset=/ [ 2255.108549] 0 [ 2255.110491] page allocation failure: order:0 [ 2255.112189] 0 [ 2255.114014] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2255.118846] mems_allowed=0-1 [ 2255.120346] 0 [ 2255.130270] (null) [ 2255.134964] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 2255.140212] 0 0 0 [ 2255.142374] Node 1 Normal free:26028kB min:53696kB low:67120kB high:80544kB active_anon:1184kB inactive_anon:33348kB active_file:4kB inactive_file:8kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:256kB pagetables:252kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2255.146278] syz-executor.4 cpuset= [ 2255.173623] CPU: 1 PID: 30710 Comm: syz-executor.2 Not tainted 4.14.229-syzkaller #0 [ 2255.185056] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2255.188023] 0 [ 2255.194415] Call Trace: [ 2255.196227] dump_stack+0x1b2/0x281 [ 2255.202429] warn_alloc.cold+0x96/0x1cc [ 2255.204726] Node 1 Normal free:26028kB min:53696kB low:67120kB high:80544kB active_anon:1184kB inactive_anon:33348kB active_file:4kB inactive_file:8kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:256kB pagetables:252kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2255.206424] ? zone_watermark_ok_safe+0x220/0x220 [ 2255.206437] ? usleep_range+0x130/0x130 [ 2255.234701] / [ 2255.239479] ? queue_work_on+0x10d/0x1d0 [ 2255.243494] mems_allowed=0-1 [ 2255.245137] ? _find_next_bit+0xdb/0x100 [ 2255.256314] ? run_timer_softirq+0x5a0/0x5a0 [ 2255.258021] lowmem_reserve[]: 0 [ 2255.260733] __alloc_pages_nodemask+0x2127/0x2720 [ 2255.260735] 0 0 [ 2255.264014] ? lock_acquire+0x170/0x3f0 [ 2255.274797] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2255.279646] ? ion_page_pool_alloc+0x9e/0x1b0 [ 2255.284148] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2255.288026] 0 0 [ 2255.289608] alloc_pages_current+0x155/0x260 [ 2255.291565] Node 0 DMA: [ 2255.296055] ion_page_pool_alloc+0x118/0x1b0 [ 2255.296066] ion_system_heap_allocate+0x133/0x8c0 [ 2255.308054] 7*4kB (ME) 5*8kB [ 2255.309733] ? _raw_spin_unlock+0x29/0x40 [ 2255.309746] ? _ion_heap_freelist_drain+0x6e/0x410 [ 2255.312844] (ME) [ 2255.317007] ? ion_system_contig_heap_create+0x130/0x130 [ 2255.329439] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2255.334467] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2255.338064] 7*16kB (UM) [ 2255.339437] ion_alloc+0x27a/0x810 [ 2255.339453] ? ion_dma_buf_release+0x40/0x40 [ 2255.342145] 9*32kB [ 2255.345700] ? __might_fault+0x177/0x1b0 [ 2255.356497] ion_ioctl+0xea/0x1f0 [ 2255.358060] (UME) 6*64kB [ 2255.360095] ? ion_query_heaps+0x360/0x360 [ 2255.360108] ? ion_query_heaps+0x360/0x360 [ 2255.362863] (UME) [ 2255.367105] do_vfs_ioctl+0x75a/0xff0 [ 2255.377259] ? ioctl_preallocate+0x1a0/0x1a0 [ 2255.381686] ? lock_downgrade+0x740/0x740 [ 2255.385845] ? __fget+0x225/0x360 [ 2255.388034] 3*128kB [ 2255.389307] ? do_vfs_ioctl+0xff0/0xff0 [ 2255.389309] (ME) 2*256kB [ 2255.391629] ? security_file_ioctl+0x83/0xb0 [ 2255.395605] (ME) [ 2255.398360] SyS_ioctl+0x7f/0xb0 [ 2255.398370] ? do_vfs_ioctl+0xff0/0xff0 [ 2255.398381] do_syscall_64+0x1d5/0x640 [ 2255.398395] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2255.398403] RIP: 0033:0x466459 [ 2255.398411] RSP: 002b:00007effc187a188 EFLAGS: 00000246 [ 2255.418050] 4*512kB [ 2255.421271] ORIG_RAX: 0000000000000010 [ 2255.421282] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 2255.424478] (UME) [ 2255.429850] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000005 [ 2255.429855] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2255.429860] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2255.429865] R13: 00007ffc8c893f1f R14: 00007effc187a300 R15: 0000000000022000 [ 2255.437249] CPU: 1 PID: 30700 Comm: syz-executor.3 Not tainted 4.14.229-syzkaller #0 [ 2255.483382] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2255.492746] Call Trace: [ 2255.495352] dump_stack+0x1b2/0x281 [ 2255.498997] warn_alloc.cold+0x96/0x1cc [ 2255.502982] ? zone_watermark_ok_safe+0x220/0x220 [ 2255.507835] ? usleep_range+0x130/0x130 [ 2255.511851] ? try_to_free_pages+0x23f/0x6e0 [ 2255.516277] ? _find_next_bit+0xdb/0x100 [ 2255.520358] ? run_timer_softirq+0x5a0/0x5a0 [ 2255.524788] __alloc_pages_nodemask+0x2127/0x2720 [ 2255.529650] ? lock_acquire+0x170/0x3f0 [ 2255.533645] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2255.538496] ? ion_page_pool_alloc+0x9e/0x1b0 [ 2255.543031] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2255.548509] ? alloc_pages_current+0x73/0x260 [ 2255.553024] alloc_pages_current+0x155/0x260 [ 2255.557445] ion_page_pool_alloc+0x118/0x1b0 [ 2255.561876] ion_system_heap_allocate+0x133/0x8c0 [ 2255.566735] ? _raw_spin_unlock+0x29/0x40 [ 2255.568036] 1*1024kB [ 2255.570895] ? _ion_heap_freelist_drain+0x6e/0x410 [ 2255.570908] ? ion_system_contig_heap_create+0x130/0x130 [ 2255.573318] (E) [ 2255.578271] ? kmem_cache_alloc_trace+0x324/0x3d0 [ 2255.578284] ion_alloc+0x27a/0x810 [ 2255.578297] ? ion_dma_buf_release+0x40/0x40 [ 2255.578310] ? __might_fault+0x177/0x1b0 [ 2255.578321] ion_ioctl+0xea/0x1f0 [ 2255.606389] ? ion_query_heaps+0x360/0x360 [ 2255.612227] ? ion_query_heaps+0x360/0x360 [ 2255.616566] do_vfs_ioctl+0x75a/0xff0 [ 2255.620393] ? ioctl_preallocate+0x1a0/0x1a0 [ 2255.624810] ? lock_downgrade+0x740/0x740 [ 2255.628971] ? __fget+0x225/0x360 [ 2255.633057] ? do_vfs_ioctl+0xff0/0xff0 [ 2255.637128] ? security_file_ioctl+0x83/0xb0 [ 2255.641556] SyS_ioctl+0x7f/0xb0 [ 2255.644939] ? do_vfs_ioctl+0xff0/0xff0 [ 2255.648038] 1*2048kB (M) [ 2255.648914] do_syscall_64+0x1d5/0x640 [ 2255.648930] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2255.651676] 1*4096kB [ 2255.655557] RIP: 0033:0x466459 [ 2255.666330] RSP: 002b:00007fb2f6ce7188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2255.674101] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 2255.682102] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2255.690707] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2255.698101] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2255.705482] R13: 00007ffde948695f R14: 00007fb2f6ce7300 R15: 0000000000022000 [ 2255.715023] (U) = 10964kB [ 2255.717816] Node 0 DMA32: 1460*4kB (UME) 3188*8kB (UME) 4732*16kB (UME) 995*32kB (UME) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 138896kB [ 2255.725305] lowmem_reserve[]: 0 0 0 0 0 [ 2255.752290] Node 0 DMA: 7*4kB (ME) 5*8kB (ME) 7*16kB (UM) 9*32kB (UME) 6*64kB (UME) 3*128kB (ME) 2*256kB (ME) 4*512kB (UME) 1*1024kB (E) 1*2048kB (M) 1*4096kB (U) = 10964kB [ 2255.758280] CPU: 0 PID: 30724 Comm: syz-executor.4 Not tainted 4.14.229-syzkaller #0 [ 2255.776828] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2255.786319] Call Trace: [ 2255.789006] dump_stack+0x1b2/0x281 [ 2255.792642] warn_alloc.cold+0x96/0x1cc [ 2255.796886] ? zone_watermark_ok_safe+0x220/0x220 [ 2255.801745] ? usleep_range+0x130/0x130 [ 2255.805739] ? try_to_free_pages+0x23f/0x6e0 [ 2255.810768] ? _find_next_bit+0xdb/0x100 [ 2255.814843] ? run_timer_softirq+0x5a0/0x5a0 [ 2255.819942] __alloc_pages_nodemask+0x2127/0x2720 [ 2255.824987] ? lock_acquire+0x170/0x3f0 [ 2255.829424] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2255.834282] ? ion_page_pool_alloc+0x9e/0x1b0 [ 2255.838794] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2255.844697] alloc_pages_current+0x155/0x260 [ 2255.848085] Node 0 DMA32: [ 2255.849164] ion_page_pool_alloc+0x118/0x1b0 [ 2255.849172] 3310*4kB [ 2255.852001] ion_system_heap_allocate+0x133/0x8c0 [ 2255.856394] (UE) [ 2255.858802] ? _raw_spin_unlock+0x29/0x40 [ 2255.858812] ? _ion_heap_freelist_drain+0x6e/0x410 [ 2255.858820] ? ion_system_contig_heap_create+0x130/0x130 [ 2255.858830] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2255.858841] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2255.858851] ion_alloc+0x27a/0x810 [ 2255.858863] ? ion_dma_buf_release+0x40/0x40 [ 2255.858875] ? __might_fault+0x177/0x1b0 [ 2255.858887] ion_ioctl+0xea/0x1f0 [ 2255.888143] 3135*8kB [ 2255.890630] ? ion_query_heaps+0x360/0x360 [ 2255.895021] (UE) [ 2255.899441] ? SyS_getpeername+0x220/0x220 [ 2255.899451] ? ion_query_heaps+0x360/0x360 [ 2255.899461] do_vfs_ioctl+0x75a/0xff0 [ 2255.899479] ? ioctl_preallocate+0x1a0/0x1a0 [ 2255.899488] ? lock_downgrade+0x740/0x740 [ 2255.899500] ? __fget+0x225/0x360 [ 2255.899508] ? do_vfs_ioctl+0xff0/0xff0 [ 2255.899520] ? security_file_ioctl+0x83/0xb0 [ 2255.899532] SyS_ioctl+0x7f/0xb0 [ 2255.951748] ? do_vfs_ioctl+0xff0/0xff0 [ 2255.956013] do_syscall_64+0x1d5/0x640 [ 2255.960488] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2255.965685] RIP: 0033:0x466459 [ 2255.968884] RSP: 002b:00007fb6cdc12188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2255.976599] RAX: ffffffffffffffda RBX: 000000000056c008 RCX: 0000000000466459 [ 2255.984228] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000005 [ 2255.988144] 4724*16kB [ 2255.991772] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2255.991781] (UME) [ 2255.994267] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c008 [ 2256.010965] R13: 00007ffef01b8b7f R14: 00007fb6cdc12300 R15: 0000000000022000 [ 2256.026916] 1184*32kB (UME) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 151792kB [ 2256.034338] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2256.058750] Node 1 Normal: 361*4kB (UM) 35*8kB (UM) 27*16kB (U) 1032*32kB (U) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 35180kB [ 2256.079154] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2256.090521] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2256.109663] Node 1 Normal: 365*4kB [ 2256.116235] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2256.118419] (UM) [ 2256.131868] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2256.141676] 41*8kB (UM) 33*16kB (U) 1048*32kB (U) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 35852kB [ 2256.169424] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2256.178508] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2256.192603] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2256.199546] 56883 total pagecache pages [ 2256.207542] 0 pages in swap cache [ 2256.210095] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2256.218241] Swap cache stats: add 0, delete 0, find 0/0 [ 2256.226639] Free swap = 0kB [ 2256.231010] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2256.233917] Total swap = 0kB [ 2256.240544] 56883 total pagecache pages [ 2256.251033] 2097051 pages RAM [ 2256.254184] 0 pages HighMem/MovableOnly [ 2256.258446] 0 pages in swap cache [ 2256.261995] Swap cache stats: add 0, delete 0, find 0/0 [ 2256.268534] 363848 pages reserved [ 2256.272004] 0 pages cma reserved [ 2256.272918] Free swap = 0kB [ 2256.275366] Out of memory (oom_kill_allocating_task): Kill process 29263 (systemd-journal) score 0 or sacrifice child [ 2256.275397] Killed process 29263 (systemd-journal) total-vm:46096kB, anon-rss:472kB, file-rss:4kB, shmem-rss:3012kB [ 2256.284062] Total swap = 0kB [ 2256.320996] 2097051 pages RAM [ 2256.327590] 0 pages HighMem/MovableOnly [ 2256.343450] 363848 pages reserved [ 2256.358043] 0 pages cma reserved [ 2256.368654] warn_alloc_show_mem: 1 callbacks suppressed [ 2256.369046] Mem-Info: [ 2256.396415] active_anon:14705 inactive_anon:55509 isolated_anon:0 [ 2256.396415] active_file:161 inactive_file:1642 isolated_file:0 [ 2256.396415] unevictable:0 dirty:23 writeback:0 unstable:0 [ 2256.396415] slab_reclaimable:12156 slab_unreclaimable:118130 [ 2256.396415] mapped:53303 shmem:56083 pagetables:893 bounce:0 [ 2256.396415] free:27335 free_pcp:236 free_cma:0 15:00:10 executing program 0: openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/btrfs-control\x00', 0x0, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000980)={'team0\x00', 0x0}) getsockopt$sock_timeval(r2, 0x1, 0x43, &(0x7f0000000080), &(0x7f00000000c0)=0x10) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_udp_SIOCOUTQ(r4, 0x5411, &(0x7f0000000000)) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000800)={'team0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000100)={@ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x39}}, @dev={0xfe, 0x80, [], 0x14}, @empty, 0xdd0b, 0x8, 0x7, 0x0, 0x0, 0x4040308, r3}) getsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f00000003c0)={@remote, 0x0}, &(0x7f0000000400)=0x14) r8 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, &(0x7f0000000800)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r8, 0x89f3, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000000)={'sit0\x00', r9, 0x0, 0x0, 0x0, 0x0, 0x22, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private2}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f00000004c0)={'sit0\x00', &(0x7f0000000440)={'ip6gre0\x00', r6, 0x4, 0x6, 0x20, 0x0, 0x20, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1, 0x80, 0x10, 0xc9, 0x6}}) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000340)={0x0, @can, @can={0x1d, r7}, @can={0x1d, r7}}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x8, 0xe, 0x1}) connect(r0, &(0x7f0000000240)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e20, @multicast1}, 0x1, 0x2, 0x1, 0x4}}, 0x80) [ 2256.455040] Node 0 active_anon:57736kB inactive_anon:188688kB active_file:740kB inactive_file:9760kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:181096kB dirty:92kB writeback:0kB shmem:190636kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2256.479610] systemd[1]: systemd-journald.service: Failed with result 'signal'. [ 2256.542168] Node 1 active_anon:1184kB inactive_anon:33348kB active_file:4kB inactive_file:508kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:35016kB dirty:0kB writeback:0kB shmem:33696kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2256.550280] systemd[1]: systemd-journald.service: Service has no hold-off time, scheduling restart. 15:00:11 executing program 0: openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/btrfs-control\x00', 0x0, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000980)={'team0\x00', 0x0}) getsockopt$sock_timeval(r2, 0x1, 0x43, &(0x7f0000000080), &(0x7f00000000c0)=0x10) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_udp_SIOCOUTQ(r4, 0x5411, &(0x7f0000000000)) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000800)={'team0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000100)={@ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x39}}, @dev={0xfe, 0x80, [], 0x14}, @empty, 0xdd0b, 0x8, 0x7, 0x0, 0x0, 0x4040308, r3}) getsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f00000003c0)={@remote, 0x0}, &(0x7f0000000400)=0x14) r8 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, &(0x7f0000000800)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r8, 0x89f3, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000000)={'sit0\x00', r9, 0x0, 0x0, 0x0, 0x0, 0x22, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private2}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f00000004c0)={'sit0\x00', &(0x7f0000000440)={'ip6gre0\x00', r6, 0x4, 0x6, 0x20, 0x0, 0x20, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1, 0x80, 0x10, 0xc9, 0x6}}) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000340)={0x0, @can, @can={0x1d, r7}, @can={0x1d, r7}}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x8, 0xe, 0x1}) connect(r0, &(0x7f0000000240)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e20, @multicast1}, 0x1, 0x2, 0x1, 0x4}}, 0x80) [ 2256.648588] Node 0 DMA free:11100kB min:204kB low:252kB high:300kB active_anon:28kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2256.680942] systemd[1]: Stopped Journal Service. [ 2256.744320] systemd[1]: Starting Journal Service... 15:00:11 executing program 0: openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/btrfs-control\x00', 0x0, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000980)={'team0\x00', 0x0}) getsockopt$sock_timeval(r2, 0x1, 0x43, &(0x7f0000000080), &(0x7f00000000c0)=0x10) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_udp_SIOCOUTQ(r4, 0x5411, &(0x7f0000000000)) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000800)={'team0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000100)={@ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x39}}, @dev={0xfe, 0x80, [], 0x14}, @empty, 0xdd0b, 0x8, 0x7, 0x0, 0x0, 0x4040308, r3}) getsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f00000003c0)={@remote, 0x0}, &(0x7f0000000400)=0x14) r8 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, &(0x7f0000000800)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r8, 0x89f3, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000000)={'sit0\x00', r9, 0x0, 0x0, 0x0, 0x0, 0x22, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private2}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f00000004c0)={'sit0\x00', &(0x7f0000000440)={'ip6gre0\x00', r6, 0x4, 0x6, 0x20, 0x0, 0x20, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1, 0x80, 0x10, 0xc9, 0x6}}) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000340)={0x0, @can, @can={0x1d, r7}, @can={0x1d, r7}}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x8, 0xe, 0x1}) connect(r0, &(0x7f0000000240)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e20, @multicast1}, 0x1, 0x2, 0x1, 0x4}}, 0x80) [ 2256.790391] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2256.840403] Node 0 DMA32 free:47132kB min:36200kB low:45248kB high:54296kB active_anon:57636kB inactive_anon:188688kB active_file:4268kB inactive_file:8672kB unevictable:0kB writepending:92kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:7520kB pagetables:3320kB bounce:0kB free_pcp:1068kB local_pcp:636kB free_cma:0kB 15:00:11 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x7ffffffe, 0x40}) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0xd000943e, &(0x7f00000000c0)={0x0, 0x0, "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", "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"}) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f00000010c0)) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000000)={@none, 0xc}) [ 2256.944797] lowmem_reserve[]: 0 0 0 0 0 15:00:11 executing program 0: openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/btrfs-control\x00', 0x0, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000980)={'team0\x00', 0x0}) getsockopt$sock_timeval(r2, 0x1, 0x43, &(0x7f0000000080), &(0x7f00000000c0)=0x10) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_udp_SIOCOUTQ(r4, 0x5411, &(0x7f0000000000)) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000800)={'team0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000100)={@ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x39}}, @dev={0xfe, 0x80, [], 0x14}, @empty, 0xdd0b, 0x8, 0x7, 0x0, 0x0, 0x4040308, r3}) getsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f00000003c0)={@remote, 0x0}, &(0x7f0000000400)=0x14) r8 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, &(0x7f0000000800)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r8, 0x89f3, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000000)={'sit0\x00', r9, 0x0, 0x0, 0x0, 0x0, 0x22, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private2}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f00000004c0)={'sit0\x00', &(0x7f0000000440)={'ip6gre0\x00', r6, 0x4, 0x6, 0x20, 0x0, 0x20, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1, 0x80, 0x10, 0xc9, 0x6}}) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000340)={0x0, @can, @can={0x1d, r7}, @can={0x1d, r7}}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x8, 0xe, 0x1}) connect(r0, &(0x7f0000000240)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e20, @multicast1}, 0x1, 0x2, 0x1, 0x4}}, 0x80) [ 2256.972905] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2257.004861] systemd-journald[31007]: File /run/log/journal/04d8c135ee6b410280ba31a58c89679d/system.journal corrupted or uncleanly shut down, renaming and replacing. 15:00:11 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x80000000, 0xe}) ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000000)={'sit0\x00', &(0x7f00000000c0)={'ip6_vti0\x00', 0x0, 0x29, 0x4, 0x6, 0x7, 0x0, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x1, 0x40, 0x5, 0x7}}) [ 2257.057777] lowmem_reserve[]: 0 0 0 0 0 15:00:11 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x20440, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x80000000, 0xe}) [ 2257.082328] Node 1 Normal free:540028kB min:53696kB low:67120kB high:80544kB active_anon:1248kB inactive_anon:37936kB active_file:268kB inactive_file:1652kB unevictable:0kB writepending:4kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:320kB pagetables:300kB bounce:0kB free_pcp:504kB local_pcp:324kB free_cma:0kB [ 2257.240087] lowmem_reserve[]: 0 0 0 0 0 [ 2257.244146] Node 0 DMA: 3*4kB (UME) 4*8kB (ME) 5*16kB (UM) 7*32kB (UME) 6*64kB (UME) 3*128kB (ME) 3*256kB (UME) 2*512kB (ME) 2*1024kB (UE) 1*2048kB (M) 1*4096kB (U) = 11100kB [ 2257.341419] Node 0 DMA32: 80*4kB (UME) 57*8kB (UME) 12*16kB (UME) 4*32kB (UE) 679*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 44552kB [ 2257.408029] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2257.461519] Node 1 Normal: 0*4kB 1*8kB (U) 0*16kB 1*32kB (U) 1*64kB (U) 0*128kB 69*256kB (U) 70*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 53608kB [ 2257.558086] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2257.567002] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2257.601262] oom_reaper: reaped process 30987 (syz-executor.5), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 2257.608903] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2257.632703] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2257.644785] 58223 total pagecache pages [ 2257.659734] 0 pages in swap cache [ 2257.666161] Swap cache stats: add 0, delete 0, find 0/0 [ 2257.668406] warn_alloc: 3 callbacks suppressed [ 2257.668410] syz-executor.3: [ 2257.672188] syz-executor.4: [ 2257.676383] page allocation failure: order:4 [ 2257.682643] page allocation failure: order:4 [ 2257.685651] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 2257.689498] Free swap = 0kB [ 2257.698140] (null) [ 2257.701078] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 2257.701779] syz-executor.3 cpuset= [ 2257.705820] (null) [ 2257.715320] / [ 2257.715989] Total swap = 0kB [ 2257.718341] mems_allowed=0-1 [ 2257.718368] CPU: 1 PID: 31022 Comm: syz-executor.3 Not tainted 4.14.229-syzkaller #0 [ 2257.718374] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2257.718378] Call Trace: [ 2257.718399] dump_stack+0x1b2/0x281 [ 2257.724595] syz-executor.4 cpuset= [ 2257.726244] warn_alloc.cold+0x96/0x1cc [ 2257.726263] ? zone_watermark_ok_safe+0x220/0x220 [ 2257.726286] __alloc_pages_nodemask+0x2127/0x2720 [ 2257.734314] 2097051 pages RAM [ 2257.743545] ? lock_acquire+0x170/0x3f0 [ 2257.743564] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2257.743581] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2257.743593] ? __mutex_unlock_slowpath+0x75/0x770 [ 2257.743607] alloc_pages_current+0x155/0x260 [ 2257.743621] ion_page_pool_alloc+0x118/0x1b0 [ 2257.746310] / [ 2257.749854] ion_system_heap_allocate+0x133/0x8c0 [ 2257.753540] 0 pages HighMem/MovableOnly [ 2257.757350] ? ion_alloc+0x187/0x810 [ 2257.757362] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2257.757372] ? ion_system_contig_heap_create+0x130/0x130 [ 2257.757383] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2257.757397] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2257.762365] mems_allowed=0-1 [ 2257.767112] ion_alloc+0x204/0x810 [ 2257.767129] ? ion_dma_buf_release+0x40/0x40 [ 2257.767141] ? __might_fault+0x177/0x1b0 [ 2257.767153] ion_ioctl+0xea/0x1f0 [ 2257.770381] 363848 pages reserved [ 2257.774249] ? ion_query_heaps+0x360/0x360 [ 2257.774261] ? ion_query_heaps+0x360/0x360 [ 2257.774272] do_vfs_ioctl+0x75a/0xff0 [ 2257.774288] ? ioctl_preallocate+0x1a0/0x1a0 [ 2257.784746] 0 pages cma reserved [ 2257.789493] ? lock_downgrade+0x740/0x740 [ 2257.789508] ? __fget+0x225/0x360 [ 2257.789519] ? do_vfs_ioctl+0xff0/0xff0 [ 2257.789530] ? security_file_ioctl+0x83/0xb0 [ 2257.789540] SyS_ioctl+0x7f/0xb0 [ 2257.789548] ? do_vfs_ioctl+0xff0/0xff0 [ 2257.789561] do_syscall_64+0x1d5/0x640 [ 2257.902514] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2257.907719] RIP: 0033:0x466459 [ 2257.910901] RSP: 002b:00007fb2f6ce7188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2257.918631] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 2257.925902] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2257.933184] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2257.940888] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2257.948154] R13: 00007ffde948695f R14: 00007fb2f6ce7300 R15: 0000000000022000 [ 2257.955593] CPU: 0 PID: 31027 Comm: syz-executor.4 Not tainted 4.14.229-syzkaller #0 [ 2257.963500] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2257.968180] warn_alloc_show_mem: 2 callbacks suppressed [ 2257.968185] Mem-Info: [ 2257.972870] Call Trace: [ 2257.983236] dump_stack+0x1b2/0x281 [ 2257.986882] warn_alloc.cold+0x96/0x1cc [ 2257.988098] active_anon:14913 inactive_anon:57514 isolated_anon:0 [ 2257.988098] active_file:21 inactive_file:5 isolated_file:1 [ 2257.988098] unevictable:0 dirty:10 writeback:0 unstable:0 [ 2257.988098] slab_reclaimable:12195 slab_unreclaimable:118296 [ 2257.988098] mapped:52554 shmem:58104 pagetables:937 bounce:0 [ 2257.988098] free:33099 free_pcp:0 free_cma:0 [ 2257.990892] ? zone_watermark_ok_safe+0x220/0x220 [ 2258.028926] __alloc_pages_nodemask+0x2127/0x2720 [ 2258.033920] ? __schedule+0x893/0x1de0 [ 2258.037913] ? lock_acquire+0x170/0x3f0 [ 2258.041951] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2258.046827] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2258.052303] ? __mutex_unlock_slowpath+0x75/0x770 [ 2258.056535] Node 0 active_anon:58108kB inactive_anon:191020kB active_file:72kB inactive_file:28kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:175328kB dirty:24kB writeback:0kB shmem:193032kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2258.057161] alloc_pages_current+0x155/0x260 [ 2258.089524] ion_page_pool_alloc+0x118/0x1b0 [ 2258.093955] ion_system_heap_allocate+0x133/0x8c0 [ 2258.098825] ? ion_alloc+0x187/0x810 [ 2258.102577] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2258.108045] ? ion_system_contig_heap_create+0x130/0x130 [ 2258.113523] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2258.118096] Node 1 active_anon:1428kB inactive_anon:39036kB active_file:0kB inactive_file:52kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:34832kB dirty:4kB writeback:0kB shmem:39384kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2258.118553] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2258.151260] ion_alloc+0x204/0x810 [ 2258.154828] ? ion_dma_buf_release+0x40/0x40 [ 2258.159255] ? __might_fault+0x177/0x1b0 [ 2258.163339] ion_ioctl+0xea/0x1f0 [ 2258.166808] ? ion_query_heaps+0x360/0x360 [ 2258.171059] ? ion_query_heaps+0x360/0x360 [ 2258.175306] do_vfs_ioctl+0x75a/0xff0 [ 2258.178063] Node 0 DMA free:10960kB min:204kB low:252kB high:300kB active_anon:24kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2258.179132] ? ioctl_preallocate+0x1a0/0x1a0 [ 2258.179145] ? lock_downgrade+0x740/0x740 [ 2258.214026] ? __fget+0x225/0x360 [ 2258.217520] ? do_vfs_ioctl+0xff0/0xff0 [ 2258.221516] ? security_file_ioctl+0x83/0xb0 [ 2258.225942] SyS_ioctl+0x7f/0xb0 [ 2258.229318] ? do_vfs_ioctl+0xff0/0xff0 [ 2258.231056] lowmem_reserve[]: [ 2258.233315] do_syscall_64+0x1d5/0x640 [ 2258.233331] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2258.233339] RIP: 0033:0x466459 [ 2258.233343] RSP: 002b:00007fb6cdc33188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2258.233353] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 2258.233359] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2258.233365] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2258.233370] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2258.233376] R13: 00007ffef01b8b7f R14: 00007fb6cdc33300 R15: 0000000000022000 15:00:12 executing program 0: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/btrfs-control\x00', 0x0, 0x0) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000340)={0x0, @can, @can, @can}) sendto$packet(r0, &(0x7f0000000400)="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", 0x1000, 0x4, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x9}, 0x14) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00'}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) 15:00:12 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x80000000, 0xe}) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x8080, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000800)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000000)={'sit0\x00', r3, 0x0, 0x0, 0x0, 0x0, 0x22, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private2}}) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r1, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)={0x160, 0x0, 0x20, 0x70bd2a, 0x25dfdbfe, {}, [@HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}]}]}, 0x160}, 0x1, 0x0, 0x0, 0x20000080}, 0x40810) 15:00:12 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x101000, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$TIOCMGET(r0, 0x5415, &(0x7f0000000100)) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x80000000, 0xe, 0x0, 0xffffffffffffffff}) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x5, 0xe0003) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000180)=0x3) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000980)={'team0\x00'}) ioctl$BTRFS_IOC_TREE_SEARCH(r4, 0xd0009411, &(0x7f00000009c0)={{0x0, 0x2, 0x79f7832d, 0x8, 0x800, 0x3, 0x7, 0xccb, 0x6, 0x6, 0x200, 0x4, 0x1, 0x9, 0x1a2}}) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000980)={'team0\x00'}) ioctl$sock_bt_cmtp_CMTPCONNADD(0xffffffffffffffff, 0x400443c8, &(0x7f0000000140)={r3, 0xffff8001}) [ 2258.566103] 0 2717 2718 2718 2718 [ 2258.595003] Node 0 DMA32 free:45184kB min:36200kB low:45248kB high:54296kB active_anon:58272kB inactive_anon:191080kB active_file:1572kB inactive_file:8796kB unevictable:0kB writepending:304kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:7552kB pagetables:3340kB bounce:0kB free_pcp:292kB local_pcp:140kB free_cma:0kB [ 2258.772886] lowmem_reserve[]: 0 0 0 0 0 [ 2258.790395] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2258.816803] syz-executor.0: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2258.880705] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 2258.907772] oom_reaper: reaped process 31027 (syz-executor.4), now anon-rss:0kB, file-rss:4kB, shmem-rss:0kB [ 2258.913053] CPU: 0 PID: 31033 Comm: syz-executor.0 Not tainted 4.14.229-syzkaller #0 [ 2258.925683] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2258.935055] Call Trace: [ 2258.937655] dump_stack+0x1b2/0x281 [ 2258.941313] warn_alloc.cold+0x96/0x1cc [ 2258.945299] ? zone_watermark_ok_safe+0x220/0x220 [ 2258.950187] __alloc_pages_nodemask+0x2127/0x2720 [ 2258.955048] ? lock_acquire+0x170/0x3f0 [ 2258.959054] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2258.963912] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2258.969375] ? __mutex_unlock_slowpath+0x75/0x770 [ 2258.974229] ? alloc_pages_current+0x21c/0x260 [ 2258.978819] alloc_pages_current+0x155/0x260 [ 2258.983324] ion_page_pool_alloc+0x118/0x1b0 [ 2258.987738] ion_system_heap_allocate+0x133/0x8c0 [ 2258.992622] ? ion_alloc+0x187/0x810 [ 2258.996364] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2259.001820] ? ion_system_contig_heap_create+0x130/0x130 [ 2259.007277] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2259.012306] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2259.017179] ion_alloc+0x204/0x810 [ 2259.020736] ? ion_dma_buf_release+0x40/0x40 [ 2259.025153] ? __might_fault+0x177/0x1b0 [ 2259.029253] ion_ioctl+0xea/0x1f0 [ 2259.032708] ? ion_query_heaps+0x360/0x360 [ 2259.036957] ? ion_query_heaps+0x360/0x360 [ 2259.041229] do_vfs_ioctl+0x75a/0xff0 [ 2259.045050] ? ioctl_preallocate+0x1a0/0x1a0 [ 2259.049465] ? lock_downgrade+0x740/0x740 [ 2259.053628] ? __fget+0x225/0x360 [ 2259.057091] ? do_vfs_ioctl+0xff0/0xff0 [ 2259.061079] ? security_file_ioctl+0x83/0xb0 [ 2259.065495] SyS_ioctl+0x7f/0xb0 [ 2259.068866] ? do_vfs_ioctl+0xff0/0xff0 [ 2259.072844] do_syscall_64+0x1d5/0x640 [ 2259.076746] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2259.081939] RIP: 0033:0x466459 [ 2259.085126] RSP: 002b:00007f78296bb188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2259.092844] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 2259.100138] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000005 [ 2259.107438] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2259.114781] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2259.122080] R13: 00007ffd4f3c2b7f R14: 00007f78296bb300 R15: 0000000000022000 [ 2259.176984] lowmem_reserve[]: 0 0 0 0 0 [ 2259.187054] Node 1 Normal free:26568kB min:53696kB low:67120kB high:80544kB active_anon:1416kB inactive_anon:39084kB active_file:88kB inactive_file:84kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:416kB pagetables:412kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2259.194193] warn_alloc_show_mem: 1 callbacks suppressed [ 2259.194198] Mem-Info: [ 2259.237180] active_anon:14931 inactive_anon:57541 isolated_anon:0 [ 2259.237180] active_file:64 inactive_file:40 isolated_file:8 [ 2259.237180] unevictable:0 dirty:58 writeback:2 unstable:0 [ 2259.237180] slab_reclaimable:12235 slab_unreclaimable:118238 [ 2259.237180] mapped:52572 shmem:58131 pagetables:942 bounce:0 [ 2259.237180] free:14134 free_pcp:3 free_cma:0 [ 2259.268437] syz-executor.2: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2259.275795] syz-executor.4 invoked oom-killer: gfp_mask=0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null), order=0, oom_score_adj=1000 [ 2259.286388] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 2259.306594] lowmem_reserve[]: 0 0 0 0 0 [ 2259.307262] syz-executor.4 cpuset= [ 2259.310953] syz-executor.1: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2259.321894] CPU: 1 PID: 31031 Comm: syz-executor.2 Not tainted 4.14.229-syzkaller #0 [ 2259.326549] syz-executor.5: [ 2259.334369] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2259.334374] Call Trace: [ 2259.334396] dump_stack+0x1b2/0x281 [ 2259.334410] warn_alloc.cold+0x96/0x1cc [ 2259.334421] ? zone_watermark_ok_safe+0x220/0x220 [ 2259.334442] __alloc_pages_nodemask+0x2127/0x2720 [ 2259.346236] / [ 2259.346837] ? _raw_spin_unlock_irq+0x24/0x80 [ 2259.349501] page allocation failure: order:0 [ 2259.353068] ? lock_acquire+0x170/0x3f0 [ 2259.357022] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 2259.361988] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2259.362006] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2259.362018] ? __mutex_unlock_slowpath+0x75/0x770 [ 2259.362034] alloc_pages_current+0x155/0x260 [ 2259.366905] mems_allowed=0-1 [ 2259.368599] ion_page_pool_alloc+0x118/0x1b0 [ 2259.368609] ion_system_heap_allocate+0x133/0x8c0 [ 2259.368619] ? ion_alloc+0x187/0x810 [ 2259.368629] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2259.368641] ? ion_system_contig_heap_create+0x130/0x130 [ 2259.378038] syz-executor.1 cpuset= [ 2259.381517] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2259.398048] Node 0 active_anon:58308kB inactive_anon:191080kB active_file:168kB inactive_file:76kB unevictable:0kB isolated(anon):0kB isolated(file):32kB mapped:175352kB dirty:128kB writeback:16kB shmem:193092kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2259.398884] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2259.403714] Node 1 active_anon:1416kB inactive_anon:39084kB active_file:88kB inactive_file:84kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:34936kB dirty:4kB writeback:0kB shmem:39432kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2259.408113] ion_alloc+0x204/0x810 [ 2259.408128] ? ion_dma_buf_release+0x40/0x40 [ 2259.408140] ? __might_fault+0x177/0x1b0 [ 2259.408152] ion_ioctl+0xea/0x1f0 [ 2259.408162] ? ion_query_heaps+0x360/0x360 [ 2259.411278] / [ 2259.415672] ? ion_query_heaps+0x360/0x360 [ 2259.420591] (null) [ 2259.424240] do_vfs_ioctl+0x75a/0xff0 [ 2259.438047] mems_allowed=0-1 [ 2259.438672] ? ioctl_preallocate+0x1a0/0x1a0 [ 2259.448060] Node 0 [ 2259.472079] ? lock_downgrade+0x740/0x740 [ 2259.472093] ? __fget+0x225/0x360 [ 2259.472103] ? do_vfs_ioctl+0xff0/0xff0 [ 2259.472115] ? security_file_ioctl+0x83/0xb0 [ 2259.472127] SyS_ioctl+0x7f/0xb0 [ 2259.476998] syz-executor.5 cpuset= [ 2259.504133] ? do_vfs_ioctl+0xff0/0xff0 [ 2259.504147] do_syscall_64+0x1d5/0x640 [ 2259.504161] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2259.504170] RIP: 0033:0x466459 [ 2259.504179] RSP: 002b:00007effc187a188 EFLAGS: 00000246 [ 2259.568048] DMA free:10960kB min:204kB low:252kB high:300kB active_anon:24kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2259.568532] ORIG_RAX: 0000000000000010 [ 2259.568541] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 2259.572539] lowmem_reserve[]: [ 2259.576425] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2259.581686] / [ 2259.584804] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2259.608043] mems_allowed=0-1 [ 2259.615816] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2259.628029] 0 [ 2259.630145] R13: 00007ffc8c893f1f R14: 00007effc187a300 R15: 0000000000022000 [ 2259.637421] 2717 [ 2259.650726] Node 0 [ 2259.668282] CPU: 0 PID: 30988 Comm: syz-executor.1 Not tainted 4.14.229-syzkaller #0 [ 2259.672241] DMA: [ 2259.678525] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2259.678530] Call Trace: [ 2259.678553] dump_stack+0x1b2/0x281 [ 2259.678566] warn_alloc.cold+0x96/0x1cc [ 2259.678577] ? zone_watermark_ok_safe+0x220/0x220 [ 2259.678587] ? usleep_range+0x130/0x130 [ 2259.678599] ? _find_next_bit+0xdb/0x100 [ 2259.678609] ? run_timer_softirq+0x5a0/0x5a0 [ 2259.678625] __alloc_pages_nodemask+0x2127/0x2720 [ 2259.680704] 2*4kB [ 2259.690163] ? lock_acquire+0x170/0x3f0 [ 2259.690181] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2259.690190] ? ion_page_pool_alloc+0x9e/0x1b0 [ 2259.690206] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2259.690224] alloc_pages_current+0x155/0x260 [ 2259.690235] ion_page_pool_alloc+0x118/0x1b0 [ 2259.690244] ion_system_heap_allocate+0x133/0x8c0 [ 2259.690256] ? _raw_spin_unlock+0x29/0x40 [ 2259.690265] ? _ion_heap_freelist_drain+0x6e/0x410 [ 2259.690274] ? ion_system_contig_heap_create+0x130/0x130 [ 2259.690290] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2259.696721] (ME) [ 2259.700505] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2259.700517] ion_alloc+0x27a/0x810 [ 2259.700530] ? ion_dma_buf_release+0x40/0x40 [ 2259.700542] ? __might_fault+0x177/0x1b0 [ 2259.700552] ion_ioctl+0xea/0x1f0 [ 2259.700561] ? ion_query_heaps+0x360/0x360 [ 2259.700572] ? ion_query_heaps+0x360/0x360 [ 2259.700584] do_vfs_ioctl+0x75a/0xff0 [ 2259.705424] 5*8kB [ 2259.709406] ? ioctl_preallocate+0x1a0/0x1a0 [ 2259.709416] ? lock_downgrade+0x740/0x740 [ 2259.709428] ? __fget+0x225/0x360 [ 2259.709436] ? do_vfs_ioctl+0xff0/0xff0 [ 2259.709447] ? security_file_ioctl+0x83/0xb0 [ 2259.709457] SyS_ioctl+0x7f/0xb0 [ 2259.709464] ? do_vfs_ioctl+0xff0/0xff0 [ 2259.709475] do_syscall_64+0x1d5/0x640 [ 2259.709490] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2259.709498] RIP: 0033:0x466459 [ 2259.709503] RSP: 002b:00007f431c6b2188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2259.709512] RAX: ffffffffffffffda RBX: 000000000056c008 RCX: 0000000000466459 [ 2259.709522] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000004 [ 2259.717459] (UME) [ 2259.718058] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2259.718063] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c008 [ 2259.718068] R13: 00007ffd8dc7798f R14: 00007f431c6b2300 R15: 0000000000022000 [ 2259.718210] syz-executor.1: [ 2259.722979] 4*16kB [ 2259.725125] page allocation failure: order:0 [ 2259.733048] (M) [ 2259.734102] CPU: 0 PID: 31027 Comm: syz-executor.4 Not tainted 4.14.229-syzkaller #0 [ 2259.738605] 7*32kB [ 2259.743966] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2259.752273] (UME) [ 2259.752768] Call Trace: [ 2259.757696] 6*64kB [ 2259.761959] dump_stack+0x1b2/0x281 [ 2259.761972] dump_header+0x178/0x82f [ 2259.761984] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2259.761994] ? ___ratelimit+0x2cd/0x530 [ 2259.762005] oom_kill_process.cold+0x10/0xa40 [ 2259.762025] out_of_memory+0xe3e/0x1190 [ 2259.762038] ? oom_killer_disable+0x1c0/0x1c0 [ 2259.762047] ? mutex_trylock+0x152/0x1a0 [ 2259.762060] __alloc_pages_nodemask+0x23e1/0x2720 [ 2259.762081] ? lock_acquire+0x170/0x3f0 [ 2259.767239] (UME) [ 2259.772650] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2259.772660] ? ion_page_pool_alloc+0x9e/0x1b0 [ 2259.772675] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2259.772694] alloc_pages_current+0x155/0x260 [ 2259.772706] ion_page_pool_alloc+0x118/0x1b0 [ 2259.772714] ion_system_heap_allocate+0x133/0x8c0 [ 2259.772724] ? ion_alloc+0x187/0x810 [ 2259.772736] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2259.772745] ? ion_system_contig_heap_create+0x130/0x130 [ 2259.772755] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2259.772766] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2259.772776] ion_alloc+0x204/0x810 [ 2259.772788] ? ion_dma_buf_release+0x40/0x40 [ 2259.772799] ? __might_fault+0x177/0x1b0 [ 2259.772810] ion_ioctl+0xea/0x1f0 [ 2259.772822] ? ion_query_heaps+0x360/0x360 [ 2259.795747] 4*128kB [ 2259.796845] ? ion_query_heaps+0x360/0x360 [ 2259.804188] (UME) [ 2259.804517] do_vfs_ioctl+0x75a/0xff0 [ 2259.822019] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 2259.823189] ? ioctl_preallocate+0x1a0/0x1a0 [ 2259.826647] (null) [ 2259.830616] ? lock_downgrade+0x740/0x740 [ 2259.830631] ? __fget+0x225/0x360 [ 2259.830640] ? do_vfs_ioctl+0xff0/0xff0 [ 2259.830651] ? security_file_ioctl+0x83/0xb0 [ 2259.830661] SyS_ioctl+0x7f/0xb0 [ 2259.830668] ? do_vfs_ioctl+0xff0/0xff0 [ 2259.830680] do_syscall_64+0x1d5/0x640 [ 2259.830700] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2259.835112] 2*256kB [ 2259.838540] RIP: 0033:0x466459 [ 2259.838545] RSP: 002b:00007fb6cdc33188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2259.838554] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 2259.838559] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2259.838563] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2259.838568] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2259.838573] R13: 00007ffef01b8b7f R14: 00007fb6cdc33300 R15: 0000000000022000 [ 2259.844953] 2718 [ 2259.846528] (ME) [ 2259.851784] 2718 2718 [ 2259.851795] Node 0 DMA32 free:17752kB min:36200kB low:45248kB high:54296kB active_anon:58284kB inactive_anon:191080kB active_file:728kB inactive_file:320kB unevictable:0kB writepending:292kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:7552kB pagetables:3356kB bounce:0kB free_pcp:56kB local_pcp:56kB free_cma:0kB [ 2259.851818] lowmem_reserve[]: 0 0 0 0 0 [ 2259.851839] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2259.851861] lowmem_reserve[]: 0 0 0 0 0 [ 2259.851883] Node 1 Normal free:26568kB min:53696kB low:67120kB high:80544kB active_anon:1416kB inactive_anon:39084kB active_file:88kB inactive_file:84kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:416kB pagetables:412kB bounce:0kB free_pcp:12kB local_pcp:12kB free_cma:0kB [ 2259.851909] lowmem_reserve[]: [ 2259.855190] CPU: 1 PID: 30987 Comm: syz-executor.5 Not tainted 4.14.229-syzkaller #0 [ 2259.862932] syz-executor.1 cpuset= [ 2259.870138] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2259.870143] Call Trace: [ 2259.870165] dump_stack+0x1b2/0x281 [ 2259.870179] warn_alloc.cold+0x96/0x1cc [ 2259.870194] ? zone_watermark_ok_safe+0x220/0x220 [ 2259.878217] 0 [ 2259.880313] ? usleep_range+0x130/0x130 [ 2259.880326] ? _find_next_bit+0xdb/0x100 [ 2259.887585] 0 [ 2259.894883] ? run_timer_softirq+0x5a0/0x5a0 [ 2259.894900] __alloc_pages_nodemask+0x2127/0x2720 [ 2259.894917] ? lock_acquire+0x170/0x3f0 [ 2259.894931] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2259.902275] / [ 2259.905242] ? ion_page_pool_alloc+0x9e/0x1b0 [ 2259.907475] mems_allowed=0-1 [ 2259.911911] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2259.911930] alloc_pages_current+0x155/0x260 [ 2259.911945] ion_page_pool_alloc+0x118/0x1b0 [ 2259.911956] ion_system_heap_allocate+0x133/0x8c0 [ 2259.938031] 0 [ 2259.938200] ? ion_alloc+0x187/0x810 [ 2259.940415] 0 [ 2259.944054] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2259.947744] 0 [ 2259.952842] ? ion_system_contig_heap_create+0x130/0x130 [ 2259.952853] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2259.952865] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2259.952876] ion_alloc+0x204/0x810 [ 2259.952889] ? ion_dma_buf_release+0x40/0x40 [ 2259.999791] ? __might_fault+0x177/0x1b0 [ 2260.004198] Node 0 [ 2260.008605] ion_ioctl+0xea/0x1f0 [ 2260.008615] ? ion_query_heaps+0x360/0x360 [ 2260.008626] ? ion_query_heaps+0x360/0x360 [ 2260.008637] do_vfs_ioctl+0x75a/0xff0 [ 2260.008648] ? ioctl_preallocate+0x1a0/0x1a0 [ 2260.038031] DMA: [ 2260.038153] ? lock_downgrade+0x740/0x740 [ 2260.041708] 2*4kB [ 2260.046124] ? __fget+0x225/0x360 [ 2260.078043] (ME) [ 2260.081824] ? do_vfs_ioctl+0xff0/0xff0 [ 2260.083964] 5*8kB [ 2260.088253] ? security_file_ioctl+0x83/0xb0 [ 2260.088266] SyS_ioctl+0x7f/0xb0 [ 2260.088274] ? do_vfs_ioctl+0xff0/0xff0 [ 2260.088285] do_syscall_64+0x1d5/0x640 [ 2260.088300] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2260.088312] RIP: 0033:0x466459 [ 2260.091782] Mem-Info: [ 2260.095819] RSP: 002b:00007f17b5648188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2260.128062] active_anon:14931 inactive_anon:57541 isolated_anon:0 [ 2260.128062] active_file:64 inactive_file:40 isolated_file:8 [ 2260.128062] unevictable:0 dirty:8 writeback:2 unstable:0 [ 2260.128062] slab_reclaimable:12235 slab_unreclaimable:118238 [ 2260.128062] mapped:52572 shmem:58131 pagetables:942 bounce:0 [ 2260.128062] free:13820 free_pcp:17 free_cma:0 [ 2260.129977] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 2260.137273] Node 0 active_anon:58308kB inactive_anon:191080kB active_file:168kB inactive_file:76kB unevictable:0kB isolated(anon):0kB isolated(file):32kB mapped:175352kB dirty:28kB writeback:16kB shmem:193092kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2260.144525] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2260.144532] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2260.144537] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2260.144541] R13: 00007fff4326a6cf R14: 00007f17b5648300 R15: 0000000000022000 [ 2260.168048] 2*512kB [ 2260.266208] (UME) [ 2260.332111] CPU: 1 PID: 30992 Comm: syz-executor.1 Not tainted 4.14.229-syzkaller #0 [ 2260.345650] 4*16kB [ 2260.350190] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2260.350195] Call Trace: [ 2260.350217] dump_stack+0x1b2/0x281 [ 2260.350230] warn_alloc.cold+0x96/0x1cc [ 2260.350245] ? zone_watermark_ok_safe+0x220/0x220 [ 2260.354684] (M) [ 2260.359094] ? usleep_range+0x130/0x130 [ 2260.359106] ? _find_next_bit+0xdb/0x100 [ 2260.359116] ? run_timer_softirq+0x5a0/0x5a0 [ 2260.359134] __alloc_pages_nodemask+0x2127/0x2720 [ 2260.359150] ? lock_acquire+0x170/0x3f0 [ 2260.363977] 7*32kB [ 2260.365785] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2260.369508] (UME) [ 2260.371263] ? ion_page_pool_alloc+0x9e/0x1b0 [ 2260.376800] 6*64kB [ 2260.378605] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2260.378624] alloc_pages_current+0x155/0x260 [ 2260.378641] ion_page_pool_alloc+0x118/0x1b0 [ 2260.384073] (UME) [ 2260.389102] ion_system_heap_allocate+0x133/0x8c0 [ 2260.389113] ? ion_alloc+0x187/0x810 [ 2260.389124] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2260.389133] ? ion_system_contig_heap_create+0x130/0x130 [ 2260.389143] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2260.389159] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2260.393992] 4*128kB [ 2260.397527] ion_alloc+0x204/0x810 [ 2260.401953] (UME) [ 2260.405987] ? ion_dma_buf_release+0x40/0x40 [ 2260.408244] 2*256kB [ 2260.411649] ? __might_fault+0x177/0x1b0 [ 2260.415857] (ME) [ 2260.420224] ion_ioctl+0xea/0x1f0 [ 2260.420235] ? ion_query_heaps+0x360/0x360 [ 2260.420248] ? _raw_spin_unlock+0x29/0x40 [ 2260.420257] ? ion_query_heaps+0x360/0x360 [ 2260.420273] do_vfs_ioctl+0x75a/0xff0 [ 2260.424070] 2*512kB [ 2260.428493] ? ioctl_preallocate+0x1a0/0x1a0 [ 2260.428503] ? lock_downgrade+0x740/0x740 [ 2260.428516] ? __fget+0x225/0x360 [ 2260.428525] ? do_vfs_ioctl+0xff0/0xff0 [ 2260.428540] ? security_file_ioctl+0x83/0xb0 [ 2260.430580] (ME) [ 2260.434721] SyS_ioctl+0x7f/0xb0 [ 2260.436845] 2*1024kB [ 2260.440285] ? do_vfs_ioctl+0xff0/0xff0 [ 2260.440297] do_syscall_64+0x1d5/0x640 [ 2260.440311] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2260.440319] RIP: 0033:0x466459 [ 2260.440324] RSP: 002b:00007f431c670188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2260.442380] (UE) [ 2260.446341] RAX: ffffffffffffffda RBX: 000000000056c158 RCX: 0000000000466459 [ 2260.448601] 1*2048kB [ 2260.452961] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000004 [ 2260.456309] (M) [ 2260.460293] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2260.460299] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c158 [ 2260.460303] R13: 00007ffd8dc7798f R14: 00007f431c670300 R15: 0000000000022000 [ 2260.688096] (ME) [ 2260.798063] Node 1 active_anon:1368kB inactive_anon:39084kB active_file:28kB inactive_file:28kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:34840kB dirty:0kB writeback:0kB shmem:39432kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2260.918093] warn_alloc_show_mem: 1 callbacks suppressed [ 2260.918097] Mem-Info: [ 2260.926013] active_anon:14942 inactive_anon:57541 isolated_anon:0 [ 2260.926013] active_file:15 inactive_file:15 isolated_file:0 [ 2260.926013] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2260.926013] slab_reclaimable:12245 slab_unreclaimable:118246 [ 2260.926013] mapped:52531 shmem:58131 pagetables:928 bounce:0 [ 2260.926013] free:256558 free_pcp:666 free_cma:0 [ 2260.996445] 2*1024kB (UE) 1*2048kB (M) 1*4096kB (U) = 10960kB [ 2261.018104] Node 0 DMA32: 10254*4kB (UME) 10605*8kB (UME) 7340*16kB (UME) 1661*32kB (UME) 1793*64kB (UM) 339*128kB (UM) 5*256kB (U) 1*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 456384kB [ 2261.039718] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2261.051225] Node 0 active_anon:58400kB inactive_anon:191080kB active_file:32kB inactive_file:232kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:175284kB dirty:0kB writeback:0kB shmem:193092kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2261.061988] Node 0 [ 2261.080834] Node 1 Normal: 1581*4kB (UM) 703*8kB (UM) 1158*16kB (UM) 1100*32kB (UM) 5482*64kB (UM) 1269*128kB (UM) 145*256kB (UM) 106*512kB (U) 12*1024kB (U) 10*2048kB (U) 1*4096kB (U) = 707212kB [ 2261.087089] DMA free:11268kB min:204kB low:252kB high:300kB active_anon:24kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2261.106477] Node 1 active_anon:1368kB inactive_anon:39084kB active_file:28kB inactive_file:28kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:34840kB dirty:0kB writeback:0kB shmem:39432kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2261.166033] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2261.185816] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2261.208126] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2261.227797] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2261.228442] Node 0 DMA32 free:456628kB min:36200kB low:45248kB high:54296kB active_anon:58376kB inactive_anon:191080kB active_file:276kB inactive_file:6152kB unevictable:0kB writepending:148kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:7520kB pagetables:3300kB bounce:0kB free_pcp:1388kB local_pcp:548kB free_cma:0kB [ 2261.271938] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2261.370473] Node 0 DMA free:11268kB min:204kB low:252kB high:300kB active_anon:24kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2261.373073] lowmem_reserve[]: [ 2261.413138] 59893 total pagecache pages [ 2261.439562] 0 pages in swap cache [ 2261.454826] Swap cache stats: add 0, delete 0, find 0/0 [ 2261.460911] 0 0 0 0 0 [ 2261.472647] Free swap = 0kB [ 2261.478278] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2261.479137] Node 0 [ 2261.487834] Total swap = 0kB [ 2261.487837] 1*4096kB (U) [ 2261.496892] 2097051 pages RAM [ 2261.502991] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2261.504382] Node 0 [ 2261.534307] = 10960kB [ 2261.534310] 0 pages HighMem/MovableOnly [ 2261.534317] 363848 pages reserved [ 2261.544428] Node 0 DMA32: 9822*4kB (UE) 9673*8kB (UE) 7357*16kB (UE) 1668*32kB (UE) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 287760kB [ 2261.568196] 0 pages cma reserved [ 2261.613991] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2261.617300] DMA32 free:286160kB min:36200kB low:45248kB high:54296kB active_anon:58476kB inactive_anon:191080kB active_file:1976kB inactive_file:5552kB unevictable:0kB writepending:148kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:7456kB pagetables:3300kB bounce:0kB free_pcp:1328kB local_pcp:636kB free_cma:0kB [ 2261.636141] lowmem_reserve[]: [ 2261.663616] Node 1 Normal: 1581*4kB (UM) 703*8kB (UM) 1158*16kB (UM) 1103*32kB (UM) 3315*64kB (UM) 1269*128kB (UM) 145*256kB (UM) 106*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 531756kB [ 2261.720609] 0 0 0 0 0 [ 2261.732709] Node 1 Normal free:485548kB min:53696kB low:67120kB high:80544kB active_anon:1368kB inactive_anon:39084kB active_file:28kB inactive_file:28kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:320kB pagetables:412kB bounce:0kB free_pcp:1268kB local_pcp:644kB free_cma:0kB [ 2261.751425] lowmem_reserve[]: [ 2261.777767] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2261.783266] 0 0 0 0 0 [ 2261.821445] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2261.822855] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2261.894922] lowmem_reserve[]: 0 0 0 0 0 [ 2261.909042] Node 0 DMA: 11*4kB (UME) 17*8kB (UME) 5*16kB (UM) 6*32kB (ME) 5*64kB (ME) 3*128kB (ME) 3*256kB (UME) 2*512kB (ME) 2*1024kB (UE) 1*2048kB (M) 1*4096kB (U) = 11140kB [ 2261.923602] lowmem_reserve[]: 0 0 0 0 0 [ 2261.946859] Node 1 Normal free:282284kB min:53696kB low:67120kB high:80544kB active_anon:1368kB inactive_anon:39084kB active_file:28kB inactive_file:28kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:320kB pagetables:412kB bounce:0kB free_pcp:1268kB local_pcp:624kB free_cma:0kB [ 2261.947340] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2262.008044] Node 0 DMA32: 9458*4kB (UE) 8956*8kB (UE) 7446*16kB (UE) 1691*32kB (UE) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 282728kB [ 2262.066885] lowmem_reserve[]: 0 0 0 0 0 [ 2262.068055] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2262.084728] Node 0 DMA: 11*4kB (UME) 17*8kB (UME) 5*16kB (UM) 6*32kB (ME) 5*64kB (ME) 3*128kB (ME) 3*256kB (UME) 2*512kB (ME) 2*1024kB (UE) 1*2048kB (M) 1*4096kB (U) = 11140kB [ 2262.118204] Node 1 Normal: 1581*4kB (UM) 703*8kB (UM) 1158*16kB (UM) 1103*32kB (UM) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 65772kB [ 2262.133575] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2262.154111] Node 0 DMA32: 9691*4kB (UME) 9010*8kB (UE) 8412*16kB (UE) 1713*32kB (UE) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 300252kB [ 2262.157431] 60260 total pagecache pages [ 2262.174149] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2262.189705] Node 0 [ 2262.215446] 0 pages in swap cache [ 2262.224402] Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2262.225539] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2262.239277] Node 1 Normal: 1650*4kB (UM) 734*8kB (UM) 1195*16kB (U) 1142*32kB (U) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 68136kB [ 2262.247322] Swap cache stats: add 0, delete 0, find 0/0 [ 2262.285918] Free swap = 0kB [ 2262.294686] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2262.296275] Total swap = 0kB [ 2262.309004] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2262.331491] 2097051 pages RAM [ 2262.343756] 0 pages HighMem/MovableOnly [ 2262.350365] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2262.362446] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2262.362723] 363848 pages reserved [ 2262.376982] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2262.382563] 60260 total pagecache pages [ 2262.394541] 0 pages cma reserved [ 2262.401419] 0 pages in swap cache [ 2262.422473] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2262.423648] Swap cache stats: add 0, delete 0, find 0/0 [ 2262.431304] 60260 total pagecache pages [ 2262.431315] 0 pages in swap cache [ 2262.431321] Swap cache stats: add 0, delete 0, find 0/0 [ 2262.431325] Free swap = 0kB [ 2262.431329] Total swap = 0kB [ 2262.431336] 2097051 pages RAM [ 2262.431340] 0 pages HighMem/MovableOnly [ 2262.431344] 363848 pages reserved [ 2262.431347] 0 pages cma reserved [ 2262.575508] Free swap = 0kB [ 2262.598250] syz-executor.5: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2262.598274] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 2262.598299] CPU: 1 PID: 30987 Comm: syz-executor.5 Not tainted 4.14.229-syzkaller #0 [ 2262.614661] Total swap = 0kB [ 2262.615828] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2262.615837] Call Trace: [ 2262.638703] dump_stack+0x1b2/0x281 [ 2262.642346] warn_alloc.cold+0x96/0x1cc [ 2262.646342] ? zone_watermark_ok_safe+0x220/0x220 [ 2262.648044] 2097051 pages RAM [ 2262.651319] __alloc_pages_nodemask+0x2127/0x2720 [ 2262.654600] 0 pages HighMem/MovableOnly [ 2262.660416] ? _raw_spin_unlock_irq+0x24/0x80 [ 2262.660434] ? lock_acquire+0x170/0x3f0 [ 2262.660449] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2262.660466] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2262.684450] ? __mutex_unlock_slowpath+0x75/0x770 [ 2262.688043] 363848 pages reserved [ 2262.689707] alloc_pages_current+0x155/0x260 [ 2262.693168] 0 pages cma reserved [ 2262.697792] ion_page_pool_alloc+0x118/0x1b0 [ 2262.705579] ion_system_heap_allocate+0x133/0x8c0 [ 2262.710445] ? _raw_spin_unlock+0x29/0x40 [ 2262.714610] ? _ion_heap_freelist_drain+0x6e/0x410 [ 2262.719687] ? ion_system_contig_heap_create+0x130/0x130 [ 2262.725156] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2262.728046] Out of memory (oom_kill_allocating_task): Kill process 31027 (syz-executor.4) score 0 or sacrifice child [ 2262.730192] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2262.746002] ion_alloc+0x27a/0x810 [ 2262.749569] ? ion_dma_buf_release+0x40/0x40 [ 2262.754267] ? __might_fault+0x177/0x1b0 [ 2262.758357] ion_ioctl+0xea/0x1f0 [ 2262.761848] ? ion_query_heaps+0x360/0x360 [ 2262.766148] ? ion_query_heaps+0x360/0x360 [ 2262.768074] Killed process 31027 (syz-executor.4) total-vm:93252kB, anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 2262.770420] do_vfs_ioctl+0x75a/0xff0 [ 2262.784512] ? ioctl_preallocate+0x1a0/0x1a0 [ 2262.789063] ? lock_downgrade+0x740/0x740 [ 2262.793280] ? __fget+0x225/0x360 [ 2262.796767] ? do_vfs_ioctl+0xff0/0xff0 [ 2262.798293] syz-executor.4: [ 2262.800861] ? security_file_ioctl+0x83/0xb0 [ 2262.800866] page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 2262.803978] SyS_ioctl+0x7f/0xb0 [ 2262.818047] (null) [ 2262.818891] ? do_vfs_ioctl+0xff0/0xff0 [ 2262.822262] syz-executor.4 cpuset= [ 2262.824422] do_syscall_64+0x1d5/0x640 [ 2262.835844] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2262.838055] / [ 2262.841085] RIP: 0033:0x466459 [ 2262.841092] mems_allowed=0-1 [ 2262.849082] RSP: 002b:00007f17b5648188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2262.856923] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 2262.864220] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2262.871503] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2262.878784] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2262.886078] R13: 00007fff4326a6cf R14: 00007f17b5648300 R15: 0000000000022000 [ 2262.896199] syz-executor.1: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2262.898291] systemd[1]: Started Journal Service. [ 2262.933653] CPU: 0 PID: 31027 Comm: syz-executor.4 Not tainted 4.14.229-syzkaller #0 [ 2262.941577] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2262.950964] Call Trace: [ 2262.953568] dump_stack+0x1b2/0x281 [ 2262.957507] warn_alloc.cold+0x96/0x1cc [ 2262.961502] ? zone_watermark_ok_safe+0x220/0x220 [ 2262.966378] ? wait_for_completion_io+0x10/0x10 [ 2262.971072] __alloc_pages_nodemask+0x2127/0x2720 [ 2262.975953] ? lock_acquire+0x170/0x3f0 [ 2262.980075] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2262.984985] ? ion_page_pool_alloc+0x9e/0x1b0 [ 2262.989509] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2262.994987] alloc_pages_current+0x155/0x260 [ 2262.999427] ion_page_pool_alloc+0x118/0x1b0 [ 2263.003859] ion_system_heap_allocate+0x133/0x8c0 [ 2263.008812] ? ion_alloc+0x187/0x810 [ 2263.012542] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2263.018970] ? ion_system_contig_heap_create+0x130/0x130 [ 2263.024438] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2263.028453] syz-executor.1 cpuset= [ 2263.029577] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2263.029578] / mems_allowed=0-1 [ 2263.033136] ion_alloc+0x204/0x810 [ 2263.044776] ? ion_dma_buf_release+0x40/0x40 [ 2263.049213] ? __might_fault+0x177/0x1b0 [ 2263.053313] ion_ioctl+0xea/0x1f0 [ 2263.056776] ? ion_query_heaps+0x360/0x360 [ 2263.061045] ? ion_query_heaps+0x360/0x360 [ 2263.065300] do_vfs_ioctl+0x75a/0xff0 [ 2263.069123] ? ioctl_preallocate+0x1a0/0x1a0 [ 2263.073550] ? lock_downgrade+0x740/0x740 [ 2263.077729] ? __fget+0x225/0x360 [ 2263.081206] ? do_vfs_ioctl+0xff0/0xff0 [ 2263.085191] ? security_file_ioctl+0x83/0xb0 [ 2263.089639] SyS_ioctl+0x7f/0xb0 [ 2263.093016] ? do_vfs_ioctl+0xff0/0xff0 [ 2263.097023] do_syscall_64+0x1d5/0x640 [ 2263.100941] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2263.106147] RIP: 0033:0x466459 [ 2263.109337] RSP: 002b:00007fb6cdc33188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2263.117049] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 2263.124323] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2263.131613] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2263.138890] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2263.146167] R13: 00007ffef01b8b7f R14: 00007fb6cdc33300 R15: 0000000000022000 [ 2263.171958] CPU: 1 PID: 30992 Comm: syz-executor.1 Not tainted 4.14.229-syzkaller #0 [ 2263.179884] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2263.189251] Call Trace: [ 2263.191857] dump_stack+0x1b2/0x281 [ 2263.195508] warn_alloc.cold+0x96/0x1cc [ 2263.199510] ? zone_watermark_ok_safe+0x220/0x220 [ 2263.204478] __alloc_pages_nodemask+0x2127/0x2720 [ 2263.209345] ? lock_acquire+0x170/0x3f0 [ 2263.213358] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2263.218321] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2263.223793] ? __mutex_unlock_slowpath+0x75/0x770 [ 2263.228643] ? __sanitizer_cov_trace_pc+0x28/0x50 [ 2263.233510] alloc_pages_current+0x155/0x260 [ 2263.237937] ion_page_pool_alloc+0x118/0x1b0 [ 2263.242367] ion_system_heap_allocate+0x133/0x8c0 [ 2263.247276] ? _raw_spin_unlock+0x29/0x40 [ 2263.251439] ? _ion_heap_freelist_drain+0x6e/0x410 [ 2263.256494] ? ion_system_contig_heap_create+0x130/0x130 [ 2263.261959] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2263.267000] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2263.271852] ion_alloc+0x27a/0x810 [ 2263.275408] ? ion_dma_buf_release+0x40/0x40 [ 2263.279836] ? __might_fault+0x177/0x1b0 [ 2263.284061] ion_ioctl+0xea/0x1f0 [ 2263.287797] ? ion_query_heaps+0x360/0x360 [ 2263.292073] ? _raw_spin_unlock+0x29/0x40 [ 2263.296237] ? ion_query_heaps+0x360/0x360 [ 2263.300577] do_vfs_ioctl+0x75a/0xff0 [ 2263.304407] ? ioctl_preallocate+0x1a0/0x1a0 [ 2263.308838] ? lock_downgrade+0x740/0x740 [ 2263.313014] ? __fget+0x225/0x360 [ 2263.316482] ? do_vfs_ioctl+0xff0/0xff0 [ 2263.320502] ? security_file_ioctl+0x83/0xb0 [ 2263.324929] SyS_ioctl+0x7f/0xb0 [ 2263.328311] ? do_vfs_ioctl+0xff0/0xff0 [ 2263.332336] do_syscall_64+0x1d5/0x640 [ 2263.336258] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2263.341487] RIP: 0033:0x466459 [ 2263.344730] RSP: 002b:00007f431c670188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2263.352716] RAX: ffffffffffffffda RBX: 000000000056c158 RCX: 0000000000466459 [ 2263.360002] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000004 [ 2263.367302] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2263.374604] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c158 [ 2263.381902] R13: 00007ffd8dc7798f R14: 00007f431c670300 R15: 0000000000022000 [ 2263.404991] warn_alloc_show_mem: 2 callbacks suppressed [ 2263.404995] Mem-Info: [ 2263.410690] oom_reaper: reaped process 31022 (syz-executor.3), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 2263.430784] systemd-journal invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 2263.432495] active_anon:14951 inactive_anon:57541 isolated_anon:0 [ 2263.432495] active_file:19 inactive_file:25 isolated_file:0 [ 2263.432495] unevictable:0 dirty:48 writeback:0 unstable:0 [ 2263.432495] slab_reclaimable:12192 slab_unreclaimable:121917 [ 2263.432495] mapped:52656 shmem:58131 pagetables:928 bounce:0 [ 2263.432495] free:22057 free_pcp:0 free_cma:0 [ 2263.468053] systemd-journal cpuset=/ mems_allowed=0-1 [ 2263.515864] Node 0 active_anon:58436kB inactive_anon:191080kB active_file:140kB inactive_file:144kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:175368kB dirty:192kB writeback:0kB shmem:193092kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2263.519795] CPU: 0 PID: 31007 Comm: systemd-journal Not tainted 4.14.229-syzkaller #0 [ 2263.552106] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2263.553832] Node 1 active_anon:1368kB inactive_anon:39084kB active_file:8kB inactive_file:20kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:35256kB dirty:0kB writeback:0kB shmem:39432kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2263.561475] Call Trace: [ 2263.561499] dump_stack+0x1b2/0x281 [ 2263.561511] dump_header+0x178/0x82f [ 2263.561521] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2263.561530] ? ___ratelimit+0x2cd/0x530 [ 2263.561539] oom_kill_process.cold+0x10/0xa40 [ 2263.561556] out_of_memory+0xe3e/0x1190 [ 2263.561567] ? oom_killer_disable+0x1c0/0x1c0 [ 2263.561575] ? mutex_trylock+0x152/0x1a0 [ 2263.561585] __alloc_pages_nodemask+0x23e1/0x2720 [ 2263.561604] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2263.561628] alloc_pages_current+0x155/0x260 [ 2263.561641] filemap_fault+0x11a1/0x1ad0 [ 2263.597366] Node 0 [ 2263.598636] ext4_filemap_fault+0x84/0xb0 [ 2263.598647] __do_fault+0xfa/0x380 [ 2263.598656] __handle_mm_fault+0x2497/0x4620 [ 2263.598666] ? vm_insert_page+0x7c0/0x7c0 [ 2263.598673] ? __fd_install+0x227/0x5c0 [ 2263.598690] ? mark_held_locks+0xa6/0xf0 [ 2263.603803] DMA free:10952kB min:204kB low:252kB high:300kB active_anon:24kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2263.607770] handle_mm_fault+0x455/0x9c0 [ 2263.624012] lowmem_reserve[]: [ 2263.624839] __do_page_fault+0x549/0xad0 [ 2263.635484] 0 [ 2263.638929] ? spurious_fault+0x640/0x640 [ 2263.638938] ? do_page_fault+0x60/0x500 [ 2263.638946] ? page_fault+0x2f/0x50 [ 2263.638953] page_fault+0x45/0x50 [ 2263.638960] RIP: 0001:0x7fff7b6ea7e0 [ 2263.638964] RSP: 7f3b34b0:0000000000000008 EFLAGS: 7f2f8bd0e633 [ 2263.688043] Mem-Info: [ 2263.809826] 2717 2718 2718 2718 [ 2263.813255] Node 0 DMA32 free:17500kB min:36200kB low:45248kB high:54296kB active_anon:58412kB inactive_anon:191080kB active_file:256kB inactive_file:124kB unevictable:0kB writepending:44kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:7456kB pagetables:3300kB bounce:0kB free_pcp:120kB local_pcp:120kB free_cma:0kB [ 2263.813652] active_anon:14951 inactive_anon:57541 isolated_anon:0 [ 2263.813652] active_file:15 inactive_file:10 isolated_file:0 [ 2263.813652] unevictable:0 dirty:23 writeback:0 unstable:0 [ 2263.813652] slab_reclaimable:12192 slab_unreclaimable:121917 [ 2263.813652] mapped:52656 shmem:58131 pagetables:928 bounce:0 [ 2263.813652] free:13825 free_pcp:30 free_cma:0 [ 2263.855273] lowmem_reserve[]: [ 2263.881896] syz-executor.1: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2263.888317] syz-executor.4: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2263.901124] 0 0 0 0 0 [ 2263.914630] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2263.942737] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 2263.947899] CPU: 0 PID: 31027 Comm: syz-executor.4 Not tainted 4.14.229-syzkaller #0 [ 2263.949405] syz-executor.1 cpuset= [ 2263.956741] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2263.956751] / [ 2263.960312] Call Trace: [ 2263.974253] dump_stack+0x1b2/0x281 [ 2263.978388] warn_alloc.cold+0x96/0x1cc [ 2263.983358] ? zone_watermark_ok_safe+0x220/0x220 [ 2263.988330] __alloc_pages_nodemask+0x2127/0x2720 [ 2263.993335] ? lock_acquire+0x170/0x3f0 [ 2263.997683] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2264.002726] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2264.008224] ? __mutex_unlock_slowpath+0x75/0x770 [ 2264.013076] ? retint_kernel+0x2d/0x2d [ 2264.016103] mems_allowed=0-1 [ 2264.016993] alloc_pages_current+0x155/0x260 [ 2264.024539] ion_page_pool_alloc+0x118/0x1b0 [ 2264.028962] ion_system_heap_allocate+0x133/0x8c0 [ 2264.033825] ? _raw_spin_unlock+0x29/0x40 [ 2264.034113] lowmem_reserve[]: [ 2264.037987] ? _ion_heap_freelist_drain+0x6e/0x410 [ 2264.037998] ? ion_system_contig_heap_create+0x130/0x130 [ 2264.038008] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2264.038019] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2264.038030] ion_alloc+0x27a/0x810 [ 2264.038044] ? ion_dma_buf_release+0x40/0x40 [ 2264.038055] ? __might_fault+0x177/0x1b0 [ 2264.038066] ion_ioctl+0xea/0x1f0 [ 2264.038075] ? ion_query_heaps+0x360/0x360 [ 2264.038089] ? ion_query_heaps+0x360/0x360 [ 2264.041234] syz-executor.0: [ 2264.046157] do_vfs_ioctl+0x75a/0xff0 [ 2264.073895] 0 [ 2264.073958] ? ioctl_preallocate+0x1a0/0x1a0 [ 2264.077418] 0 [ 2264.081648] ? lock_downgrade+0x740/0x740 [ 2264.081663] ? __fget+0x225/0x360 [ 2264.081672] ? do_vfs_ioctl+0xff0/0xff0 [ 2264.081683] ? security_file_ioctl+0x83/0xb0 [ 2264.081693] SyS_ioctl+0x7f/0xb0 [ 2264.081701] ? do_vfs_ioctl+0xff0/0xff0 [ 2264.081713] do_syscall_64+0x1d5/0x640 [ 2264.081727] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2264.081735] RIP: 0033:0x466459 [ 2264.081740] RSP: 002b:00007fb6cdc33188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2264.081750] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 2264.081756] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2264.081761] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2264.081767] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2264.081773] R13: 00007ffef01b8b7f R14: 00007fb6cdc33300 R15: 0000000000022000 [ 2264.082079] syz-executor.3: [ 2264.086031] CPU: 1 PID: 30992 Comm: syz-executor.1 Not tainted 4.14.229-syzkaller #0 [ 2264.104148] Node 0 active_anon:58420kB inactive_anon:191080kB active_file:64kB inactive_file:64kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:175284kB dirty:0kB writeback:0kB shmem:193092kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2264.104953] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2264.108480] page allocation failure: order:0 [ 2264.112370] Call Trace: [ 2264.116767] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 2264.120139] dump_stack+0x1b2/0x281 [ 2264.120153] warn_alloc.cold+0x96/0x1cc [ 2264.120164] ? zone_watermark_ok_safe+0x220/0x220 [ 2264.120175] ? usleep_range+0x130/0x130 [ 2264.120188] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 2264.124191] Node 1 active_anon:1284kB inactive_anon:39084kB active_file:0kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:35256kB dirty:0kB writeback:0kB shmem:39432kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2264.128041] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 2264.128051] ? run_timer_softirq+0x5a0/0x5a0 [ 2264.128068] __alloc_pages_nodemask+0x2127/0x2720 [ 2264.128084] ? lock_acquire+0x170/0x3f0 [ 2264.133277] Node 0 [ 2264.136493] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2264.144265] (null) [ 2264.151468] ? ion_page_pool_alloc+0x9e/0x1b0 [ 2264.151486] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2264.151501] ? __sanitizer_cov_trace_pc+0x28/0x50 [ 2264.158844] DMA free:10952kB min:204kB low:252kB high:300kB active_anon:24kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2264.166096] alloc_pages_current+0x155/0x260 [ 2264.173431] syz-executor.3 cpuset= [ 2264.180751] ion_page_pool_alloc+0x118/0x1b0 [ 2264.180762] ion_system_heap_allocate+0x133/0x8c0 [ 2264.180774] ? _raw_spin_unlock+0x29/0x40 [ 2264.180783] ? _ion_heap_freelist_drain+0x6e/0x410 [ 2264.180797] ? ion_system_contig_heap_create+0x130/0x130 [ 2264.183835] lowmem_reserve[]: [ 2264.191709] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2264.191724] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2264.191735] ion_alloc+0x27a/0x810 [ 2264.191750] ? ion_dma_buf_release+0x40/0x40 [ 2264.191766] ? __might_fault+0x177/0x1b0 [ 2264.219702] / [ 2264.229009] ion_ioctl+0xea/0x1f0 [ 2264.233469] mems_allowed=0-1 [ 2264.236051] ? ion_query_heaps+0x360/0x360 [ 2264.258040] 0 [ 2264.259523] ? _raw_spin_unlock+0x29/0x40 [ 2264.264640] 2717 [ 2264.291717] ? ion_query_heaps+0x360/0x360 [ 2264.291730] do_vfs_ioctl+0x75a/0xff0 [ 2264.291742] ? ioctl_preallocate+0x1a0/0x1a0 [ 2264.291751] ? lock_downgrade+0x740/0x740 [ 2264.291767] ? __fget+0x225/0x360 [ 2264.338043] 2718 [ 2264.359615] ? do_vfs_ioctl+0xff0/0xff0 [ 2264.359628] ? security_file_ioctl+0x83/0xb0 [ 2264.359638] SyS_ioctl+0x7f/0xb0 [ 2264.359654] ? do_vfs_ioctl+0xff0/0xff0 [ 2264.388051] 2718 [ 2264.391509] do_syscall_64+0x1d5/0x640 [ 2264.394608] 2718 [ 2264.399679] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2264.399688] RIP: 0033:0x466459 [ 2264.399692] RSP: 002b:00007f431c670188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2264.399702] RAX: ffffffffffffffda RBX: 000000000056c158 RCX: 0000000000466459 [ 2264.399707] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000004 [ 2264.399712] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2264.399717] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c158 [ 2264.399728] R13: 00007ffd8dc7798f R14: 00007f431c670300 R15: 0000000000022000 [ 2264.434870] page allocation failure: order:0 [ 2264.436647] Node 0 [ 2264.437325] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2264.442599] syz-executor.4: [ 2264.445461] 0 [ 2264.459209] DMA32 free:17688kB min:36200kB low:45248kB high:54296kB active_anon:58396kB inactive_anon:191080kB active_file:64kB inactive_file:64kB unevictable:0kB writepending:0kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:7456kB pagetables:3300kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2264.463982] syz-executor.0 cpuset= [ 2264.467937] lowmem_reserve[]: [ 2264.471429] / mems_allowed=0-1 [ 2264.471453] CPU: 1 PID: 31033 Comm: syz-executor.0 Not tainted 4.14.229-syzkaller #0 [ 2264.471459] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2264.471463] Call Trace: [ 2264.471486] dump_stack+0x1b2/0x281 [ 2264.471501] warn_alloc.cold+0x96/0x1cc [ 2264.483963] page allocation failure: order:0 [ 2264.488716] ? zone_watermark_ok_safe+0x220/0x220 [ 2264.488727] ? usleep_range+0x130/0x130 [ 2264.488737] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 2264.488751] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 2264.508053] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 2264.514242] ? run_timer_softirq+0x5a0/0x5a0 [ 2264.521598] 0 [ 2264.528814] __alloc_pages_nodemask+0x2127/0x2720 [ 2264.528834] ? lock_acquire+0x170/0x3f0 [ 2264.528853] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2264.548048] (null) [ 2264.550389] ? ion_page_pool_alloc+0x9e/0x1b0 [ 2264.553388] syz-executor.4 cpuset= [ 2264.555188] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2264.583353] 0 [ 2264.586842] alloc_pages_current+0x155/0x260 [ 2264.598048] 0 [ 2264.600986] ion_page_pool_alloc+0x118/0x1b0 [ 2264.628047] 0 [ 2264.629763] ion_system_heap_allocate+0x133/0x8c0 [ 2264.633722] 0 [ 2264.639166] ? ion_alloc+0x187/0x810 [ 2264.639178] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2264.639187] ? ion_system_contig_heap_create+0x130/0x130 [ 2264.639197] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2264.639210] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2264.639221] ion_alloc+0x204/0x810 [ 2264.648043] / [ 2264.651341] ? ion_dma_buf_release+0x40/0x40 [ 2264.655744] mems_allowed=0-1 [ 2264.657543] ? __might_fault+0x177/0x1b0 [ 2264.671172] ion_ioctl+0xea/0x1f0 [ 2264.673307] Node 0 [ 2264.677805] ? ion_query_heaps+0x360/0x360 [ 2264.708067] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2264.711364] ? ion_query_heaps+0x360/0x360 [ 2264.716807] lowmem_reserve[]: [ 2264.722279] do_vfs_ioctl+0x75a/0xff0 [ 2264.722293] ? ioctl_preallocate+0x1a0/0x1a0 [ 2264.722302] ? lock_downgrade+0x740/0x740 [ 2264.722314] ? __fget+0x225/0x360 [ 2264.722323] ? do_vfs_ioctl+0xff0/0xff0 [ 2264.722337] ? security_file_ioctl+0x83/0xb0 [ 2264.768115] 0 [ 2264.784241] SyS_ioctl+0x7f/0xb0 [ 2264.784252] ? do_vfs_ioctl+0xff0/0xff0 [ 2264.784264] do_syscall_64+0x1d5/0x640 [ 2264.784280] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2264.828094] 0 [ 2264.829106] RIP: 0033:0x466459 [ 2264.834277] 0 0 [ 2264.836202] RSP: 002b:00007f78296bb188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2264.849182] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 2264.856461] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000005 [ 2264.858042] 0 [ 2264.863733] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2264.863743] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2264.872816] R13: 00007ffd4f3c2b7f R14: 00007f78296bb300 R15: 0000000000022000 [ 2264.890916] 0 0 [ 2264.892940] Node 1 Normal free:26744kB min:53696kB low:67120kB high:80544kB active_anon:1284kB inactive_anon:39084kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:320kB pagetables:412kB bounce:0kB free_pcp:120kB local_pcp:0kB free_cma:0kB [ 2264.894057] CPU: 0 PID: 31027 Comm: syz-executor.4 Not tainted 4.14.229-syzkaller #0 [ 2264.929332] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2264.930155] lowmem_reserve[]: [ 2264.938691] Call Trace: [ 2264.938715] dump_stack+0x1b2/0x281 [ 2264.938728] warn_alloc.cold+0x96/0x1cc [ 2264.938739] ? zone_watermark_ok_safe+0x220/0x220 [ 2264.938748] ? usleep_range+0x130/0x130 [ 2264.938757] ? try_to_free_pages+0x23f/0x6e0 [ 2264.938767] ? _find_next_bit+0xdb/0x100 [ 2264.938777] ? run_timer_softirq+0x5a0/0x5a0 [ 2264.938794] __alloc_pages_nodemask+0x2127/0x2720 [ 2264.938810] ? lock_acquire+0x170/0x3f0 [ 2264.938824] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2264.938834] ? ion_page_pool_alloc+0x9e/0x1b0 [ 2264.938848] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2264.938860] ? retint_kernel+0x2d/0x2d [ 2264.947676] 0 [ 2264.948157] alloc_pages_current+0x155/0x260 [ 2264.948171] ion_page_pool_alloc+0x118/0x1b0 [ 2264.948181] ion_system_heap_allocate+0x133/0x8c0 [ 2264.948193] ? _raw_spin_unlock+0x29/0x40 [ 2264.948201] ? _ion_heap_freelist_drain+0x6e/0x410 [ 2264.948209] ? ion_system_contig_heap_create+0x130/0x130 [ 2264.948220] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2264.948231] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2264.948241] ion_alloc+0x27a/0x810 [ 2264.948254] ? ion_dma_buf_release+0x40/0x40 [ 2264.954816] 0 [ 2264.957098] ? __might_fault+0x177/0x1b0 [ 2264.966929] 0 [ 2264.969540] ion_ioctl+0xea/0x1f0 [ 2264.969551] ? ion_query_heaps+0x360/0x360 [ 2264.969562] ? ion_query_heaps+0x360/0x360 [ 2264.969572] do_vfs_ioctl+0x75a/0xff0 [ 2264.969583] ? ioctl_preallocate+0x1a0/0x1a0 [ 2264.969593] ? lock_downgrade+0x740/0x740 [ 2264.969606] ? __fget+0x225/0x360 [ 2264.969615] ? do_vfs_ioctl+0xff0/0xff0 [ 2264.969627] ? security_file_ioctl+0x83/0xb0 [ 2264.969638] SyS_ioctl+0x7f/0xb0 [ 2264.976599] 0 [ 2264.978900] ? do_vfs_ioctl+0xff0/0xff0 [ 2264.978914] do_syscall_64+0x1d5/0x640 [ 2264.978927] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2264.978936] RIP: 0033:0x466459 [ 2264.978945] RSP: 002b:00007fb6cdc33188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2264.978954] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 2264.978959] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2264.978965] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2264.978970] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2264.978976] R13: 00007ffef01b8b7f R14: 00007fb6cdc33300 R15: 0000000000022000 [ 2264.983671] CPU: 0 PID: 31022 Comm: syz-executor.3 Not tainted 4.14.229-syzkaller #0 [ 2264.992610] 0 [ 2264.997884] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2265.007983] Call Trace: [ 2265.008006] dump_stack+0x1b2/0x281 [ 2265.008020] warn_alloc.cold+0x96/0x1cc [ 2265.008032] ? zone_watermark_ok_safe+0x220/0x220 [ 2265.008041] ? usleep_range+0x130/0x130 [ 2265.008051] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 2265.008064] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 2265.008075] ? run_timer_softirq+0x5a0/0x5a0 [ 2265.016358] Node 0 [ 2265.017330] __alloc_pages_nodemask+0x2127/0x2720 [ 2265.026370] DMA: [ 2265.031855] ? lock_acquire+0x170/0x3f0 [ 2265.031872] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2265.031882] ? ion_page_pool_alloc+0x9e/0x1b0 [ 2265.031898] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2265.031917] alloc_pages_current+0x155/0x260 [ 2265.031929] ion_page_pool_alloc+0x118/0x1b0 [ 2265.044159] 2*4kB [ 2265.045458] ion_system_heap_allocate+0x133/0x8c0 [ 2265.051538] (ME) [ 2265.051663] ? ion_alloc+0x187/0x810 [ 2265.055710] 14*8kB [ 2265.057518] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2265.057530] ? ion_system_contig_heap_create+0x130/0x130 [ 2265.057539] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2265.057550] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2265.057561] ion_alloc+0x204/0x810 [ 2265.057578] ? ion_dma_buf_release+0x40/0x40 [ 2265.067524] (UME) [ 2265.069487] ? __might_fault+0x177/0x1b0 [ 2265.069501] ion_ioctl+0xea/0x1f0 [ 2265.069511] ? ion_query_heaps+0x360/0x360 [ 2265.069522] ? ion_query_heaps+0x360/0x360 [ 2265.069533] do_vfs_ioctl+0x75a/0xff0 [ 2265.069543] ? ioctl_preallocate+0x1a0/0x1a0 [ 2265.069553] ? lock_downgrade+0x740/0x740 [ 2265.069565] ? __fget+0x225/0x360 [ 2265.069577] ? do_vfs_ioctl+0xff0/0xff0 [ 2265.075910] 5*16kB [ 2265.077926] ? security_file_ioctl+0x83/0xb0 [ 2265.090643] (UM) [ 2265.093895] SyS_ioctl+0x7f/0xb0 [ 2265.097270] 6*32kB [ 2265.099070] ? do_vfs_ioctl+0xff0/0xff0 [ 2265.099084] do_syscall_64+0x1d5/0x640 [ 2265.099098] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2265.099106] RIP: 0033:0x466459 [ 2265.099111] RSP: 002b:00007fb2f6ce7188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2265.099120] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 2265.099125] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2265.099129] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2265.099134] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2265.099139] R13: 00007ffde948695f R14: 00007fb2f6ce7300 R15: 0000000000022000 [ 2265.110475] Node 1 [ 2265.115406] (ME) [ 2265.116836] Normal free:26744kB min:53696kB low:67120kB high:80544kB active_anon:1284kB inactive_anon:39084kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:320kB pagetables:412kB bounce:0kB free_pcp:120kB local_pcp:120kB free_cma:0kB [ 2265.123969] 5*64kB (ME) 4*128kB (UME) 2*256kB (ME) 2*512kB (ME) 2*1024kB (UE) 1*2048kB (M) 1*4096kB (U) = 10952kB [ 2265.124026] Node 0 [ 2265.164870] lowmem_reserve[]: [ 2265.171646] DMA32: [ 2265.189056] 0 [ 2265.195300] 1029*4kB [ 2265.195776] 0 [ 2265.199838] (UME) 273*8kB (UME) 87*16kB (UME) 33*32kB (UME) 149*64kB (UM) [ 2265.212412] 0 [ 2265.218471] 2*128kB [ 2265.225437] 0 [ 2265.228347] (U) [ 2265.237546] warn_alloc_show_mem: 3 callbacks suppressed [ 2265.237549] Mem-Info: [ 2265.250752] 0*256kB [ 2265.255947] 0 [ 2265.263872] 0*512kB [ 2265.266451] 0*1024kB [ 2265.276535] active_anon:14926 inactive_anon:57541 isolated_anon:0 [ 2265.276535] active_file:16 inactive_file:17 isolated_file:0 [ 2265.276535] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2265.276535] slab_reclaimable:12192 slab_unreclaimable:121722 [ 2265.276535] mapped:52635 shmem:58131 pagetables:928 bounce:0 [ 2265.276535] free:14044 free_pcp:7 free_cma:0 [ 2265.285899] 0*2048kB [ 2265.287431] Node 0 [ 2265.291122] 0*4096kB = 18540kB [ 2265.291130] Node 0 Normal: [ 2265.299601] Node 0 active_anon:58420kB inactive_anon:191080kB active_file:64kB inactive_file:64kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:175284kB dirty:0kB writeback:0kB shmem:193092kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2265.306277] 0*4kB [ 2265.317151] DMA: [ 2265.348382] 0*8kB [ 2265.363212] Node 1 active_anon:1284kB inactive_anon:39084kB active_file:0kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:35256kB dirty:0kB writeback:0kB shmem:39432kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2265.385045] 0*16kB [ 2265.438078] 2*4kB [ 2265.518318] 0*32kB [ 2265.540563] Node 0 [ 2265.578086] 0*64kB [ 2265.650010] DMA free:10952kB min:204kB low:252kB high:300kB active_anon:24kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2265.658088] 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2265.735271] Node 1 Normal: 0*4kB 0*8kB 1*16kB (M) 262*32kB (U) 5114*64kB (UM) 502*128kB (UM) 67*256kB (UM) 71*512kB (UM) 93*1024kB (U) 6*2048kB (U) 0*4096kB = 560976kB [ 2265.738055] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2265.783554] Node 0 DMA32 free:48372kB min:36200kB low:45248kB high:54296kB active_anon:58396kB inactive_anon:191080kB active_file:64kB inactive_file:1564kB unevictable:0kB writepending:0kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:7456kB pagetables:3300kB bounce:0kB free_pcp:264kB local_pcp:236kB free_cma:0kB [ 2265.808107] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2265.819665] (ME) 14*8kB (UME) 5*16kB (UM) 6*32kB (ME) 5*64kB (ME) 4*128kB (UME) 2*256kB (ME) 2*512kB (ME) 2*1024kB (UE) 1*2048kB (M) 1*4096kB (U) = 10952kB [ 2265.842189] Node 0 DMA32: 563*4kB (UME) 251*8kB (UME) 85*16kB (UME) 30*32kB (UME) 917*64kB (UM) 176*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 87796kB [ 2265.868142] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2265.872075] lowmem_reserve[]: [ 2265.876860] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2265.876863] 0 0 [ 2265.888105] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2265.892939] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2265.914676] 0 0 0 [ 2265.916865] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2265.938165] 58941 total pagecache pages [ 2265.959493] Node 1 Normal: 0*4kB 0*8kB 1*16kB (M) 262*32kB (U) 6167*64kB (UM) 805*128kB (UM) 154*256kB (UM) 81*512kB (UM) 106*1024kB (U) 10*2048kB (U) 1*4096kB (U) = 720144kB [ 2265.968114] 0 pages in swap cache [ 2265.978133] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2265.991922] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2265.998068] Swap cache stats: add 0, delete 0, find 0/0 [ 2266.008073] Free swap = 0kB [ 2266.011115] Total swap = 0kB [ 2266.011979] lowmem_reserve[]: 0 [ 2266.014158] 2097051 pages RAM [ 2266.014166] 0 pages HighMem/MovableOnly [ 2266.017450] 0 [ 2266.025598] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2266.041238] 0 0 0 [ 2266.043436] Node 1 Normal free:746256kB min:53696kB low:67120kB high:80544kB active_anon:1284kB inactive_anon:39084kB active_file:4kB inactive_file:1620kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:320kB pagetables:412kB bounce:0kB free_pcp:180kB local_pcp:92kB free_cma:0kB [ 2266.078174] 363848 pages reserved [ 2266.088076] 0 pages cma reserved [ 2266.088095] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2266.104218] 58983 total pagecache pages [ 2266.108340] 0 pages in swap cache [ 2266.111801] Swap cache stats: add 0, delete 0, find 0/0 [ 2266.117161] Free swap = 0kB [ 2266.131123] lowmem_reserve[]: 0 0 0 0 0 [ 2266.135212] Node 0 DMA: 2*4kB (ME) 14*8kB (UME) 5*16kB (UM) 6*32kB (ME) 10*64kB (UME) 3*128kB (ME) 3*256kB (UME) 2*512kB (ME) 2*1024kB (UE) 1*2048kB (M) 1*4096kB (U) = 11400kB [ 2266.181129] Total swap = 0kB [ 2266.184220] 2097051 pages RAM [ 2266.187343] 0 pages HighMem/MovableOnly [ 2266.194811] 363848 pages reserved [ 2266.198346] 0 pages cma reserved [ 2266.201723] Out of memory (oom_kill_allocating_task): Kill process 31007 (systemd-journal) score 0 or sacrifice child [ 2266.217268] Node 0 DMA32: 2551*4kB (UME) 1427*8kB (UME) 85*16kB (UME) 30*32kB (UME) 93*64kB (UM) 191*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 54340kB [ 2266.248086] Killed process 31007 (systemd-journal) total-vm:46096kB, anon-rss:460kB, file-rss:0kB, shmem-rss:1480kB [ 2266.262920] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2266.285410] oom_reaper: reaped process 31033 (syz-executor.0), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 2266.295884] Node 1 Normal: 15*4kB (UM) 15*8kB (UM) 15*16kB (UM) 272*32kB (U) 5072*64kB (UM) 1076*128kB (UM) 209*256kB (UM) 100*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 576164kB [ 2266.316833] oom_reaper: reaped process 31007 (systemd-journal), now anon-rss:0kB, file-rss:0kB, shmem-rss:1644kB [ 2266.327274] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2266.341695] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2266.355933] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2266.372435] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2266.387844] 59649 total pagecache pages [ 2266.395738] 0 pages in swap cache [ 2266.405088] Swap cache stats: add 0, delete 0, find 0/0 [ 2266.417044] Free swap = 0kB [ 2266.426401] Total swap = 0kB [ 2266.432518] 2097051 pages RAM [ 2266.436693] 0 pages HighMem/MovableOnly [ 2266.460328] 363848 pages reserved [ 2266.466571] 0 pages cma reserved [ 2266.474588] systemd[1]: systemd-journald.service: Failed with result 'signal'. 15:00:20 executing program 4: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/btrfs-control\x00', 0x0, 0x0) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000340)={0x0, @can, @can, @can}) syz_genetlink_get_family_id$batadv(&(0x7f0000000000)='batadv\x00', r0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000140)={0x0}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000740)={'wpan3\x00'}) sendmsg$IEEE802154_SET_MACPARAMS(r3, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="100029bd7000fddbdf25230000000500250009000000"], 0x1c}, 0x1, 0x0, 0x0, 0x890}, 0xa5befbe170ef012f) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r1, 0xc0709411, &(0x7f00000003c0)={{r2, 0x100000001, 0x3, 0x9, 0x8000, 0x0, 0x5, 0xff, 0x7fffffff, 0x6, 0x400, 0x9, 0x8, 0x1, 0x875}, 0x8, [0x0]}) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x80000000, 0xe}) r4 = socket(0x18, 0xa, 0x5) ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f00000000c0)={r4}) [ 2266.532094] systemd[1]: systemd-journald.service: Service has no hold-off time, scheduling restart. [ 2266.572750] systemd[1]: Stopped Journal Service. [ 2266.607773] systemd[1]: Starting Journal Service... [ 2266.878106] syz-executor.4: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2266.943337] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 2266.962706] oom_reaper: reaped process 31031 (syz-executor.2), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 2266.974886] CPU: 1 PID: 31049 Comm: syz-executor.4 Not tainted 4.14.229-syzkaller #0 [ 2266.982825] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2266.992209] Call Trace: [ 2266.994818] dump_stack+0x1b2/0x281 [ 2266.998464] warn_alloc.cold+0x96/0x1cc [ 2267.002454] ? zone_watermark_ok_safe+0x220/0x220 [ 2267.007327] __alloc_pages_nodemask+0x2127/0x2720 [ 2267.012189] ? lock_acquire+0x170/0x3f0 [ 2267.016175] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2267.021039] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2267.026508] ? __mutex_unlock_slowpath+0x75/0x770 [ 2267.031367] alloc_pages_current+0x155/0x260 [ 2267.035824] ion_page_pool_alloc+0x118/0x1b0 [ 2267.040277] ion_system_heap_allocate+0x133/0x8c0 [ 2267.045133] ? ion_alloc+0x187/0x810 [ 2267.048854] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2267.054327] ? ion_system_contig_heap_create+0x130/0x130 [ 2267.059963] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2267.064994] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2267.069845] ion_alloc+0x204/0x810 [ 2267.073396] ? ion_dma_buf_release+0x40/0x40 [ 2267.077810] ? __might_fault+0x177/0x1b0 [ 2267.081968] ion_ioctl+0xea/0x1f0 [ 2267.085427] ? ion_query_heaps+0x360/0x360 [ 2267.089672] ? ion_query_heaps+0x360/0x360 [ 2267.093921] do_vfs_ioctl+0x75a/0xff0 [ 2267.097729] ? ioctl_preallocate+0x1a0/0x1a0 [ 2267.102142] ? lock_downgrade+0x740/0x740 [ 2267.106302] ? __fget+0x225/0x360 [ 2267.109753] ? do_vfs_ioctl+0xff0/0xff0 [ 2267.113733] ? security_file_ioctl+0x83/0xb0 [ 2267.118146] SyS_ioctl+0x7f/0xb0 [ 2267.121779] ? do_vfs_ioctl+0xff0/0xff0 [ 2267.125761] do_syscall_64+0x1d5/0x640 [ 2267.129651] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2267.134858] RIP: 0033:0x466459 [ 2267.138041] RSP: 002b:00007fb6cdc12188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2267.145752] RAX: ffffffffffffffda RBX: 000000000056c008 RCX: 0000000000466459 [ 2267.153020] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000004 [ 2267.160287] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2267.167572] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c008 [ 2267.174850] R13: 00007ffef01b8b7f R14: 00007fb6cdc12300 R15: 0000000000022000 [ 2267.215824] warn_alloc_show_mem: 3 callbacks suppressed [ 2267.215829] Mem-Info: [ 2267.246351] active_anon:14935 inactive_anon:57540 isolated_anon:0 [ 2267.246351] active_file:63 inactive_file:62 isolated_file:14 [ 2267.246351] unevictable:0 dirty:39 writeback:0 unstable:0 [ 2267.246351] slab_reclaimable:12230 slab_unreclaimable:121965 [ 2267.246351] mapped:52319 shmem:58131 pagetables:901 bounce:0 [ 2267.246351] free:14013 free_pcp:24 free_cma:0 [ 2267.283525] Node 0 active_anon:58176kB inactive_anon:191076kB active_file:68kB inactive_file:120kB unevictable:0kB isolated(anon):0kB isolated(file):4kB mapped:174172kB dirty:144kB writeback:12kB shmem:193092kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2267.313041] Node 1 active_anon:1564kB inactive_anon:39084kB active_file:28kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:34880kB dirty:0kB writeback:4kB shmem:39432kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2267.345610] systemd-journal invoked oom-killer: gfp_mask=0x14280ca(GFP_HIGHUSER_MOVABLE|__GFP_ZERO), nodemask=(null), order=0, oom_score_adj=0 [ 2267.364472] syz-executor.0: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2267.365408] syz-executor.3: [ 2267.376558] Node 0 [ 2267.380326] syz-executor.2: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2267.380349] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 2267.380372] CPU: 0 PID: 31031 Comm: syz-executor.2 Not tainted 4.14.229-syzkaller #0 [ 2267.380378] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2267.380382] Call Trace: [ 2267.380403] dump_stack+0x1b2/0x281 [ 2267.380418] warn_alloc.cold+0x96/0x1cc [ 2267.380430] ? zone_watermark_ok_safe+0x220/0x220 [ 2267.380440] ? usleep_range+0x130/0x130 [ 2267.380450] ? try_to_free_pages+0x23f/0x6e0 [ 2267.380460] ? _find_next_bit+0xdb/0x100 [ 2267.380470] ? run_timer_softirq+0x5a0/0x5a0 [ 2267.380487] __alloc_pages_nodemask+0x2127/0x2720 [ 2267.380505] ? lock_acquire+0x170/0x3f0 [ 2267.380520] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2267.380531] ? ion_page_pool_alloc+0x9e/0x1b0 [ 2267.380548] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2267.380569] alloc_pages_current+0x155/0x260 [ 2267.380579] ion_page_pool_alloc+0x118/0x1b0 [ 2267.380593] ion_system_heap_allocate+0x133/0x8c0 [ 2267.383038] DMA free:10960kB min:204kB low:252kB high:300kB active_anon:24kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2267.394922] ? ion_alloc+0x187/0x810 [ 2267.394934] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2267.394943] ? ion_system_contig_heap_create+0x130/0x130 [ 2267.394952] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2267.394963] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2267.394973] ion_alloc+0x204/0x810 [ 2267.394986] ? ion_dma_buf_release+0x40/0x40 [ 2267.394998] ? __might_fault+0x177/0x1b0 [ 2267.408067] page allocation failure: order:4 [ 2267.408184] ion_ioctl+0xea/0x1f0 [ 2267.417622] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 2267.420214] ? ion_query_heaps+0x360/0x360 [ 2267.420226] ? ion_query_heaps+0x360/0x360 [ 2267.420236] do_vfs_ioctl+0x75a/0xff0 [ 2267.420248] ? ioctl_preallocate+0x1a0/0x1a0 [ 2267.420257] ? lock_downgrade+0x740/0x740 [ 2267.420269] ? __fget+0x225/0x360 [ 2267.420278] ? do_vfs_ioctl+0xff0/0xff0 [ 2267.420289] ? security_file_ioctl+0x83/0xb0 [ 2267.420300] SyS_ioctl+0x7f/0xb0 [ 2267.420308] ? do_vfs_ioctl+0xff0/0xff0 [ 2267.420319] do_syscall_64+0x1d5/0x640 [ 2267.420333] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2267.420341] RIP: 0033:0x466459 [ 2267.420346] RSP: 002b:00007effc187a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2267.420357] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 2267.420366] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2267.424078] systemd-journal cpuset= [ 2267.428019] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2267.428025] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2267.428030] R13: 00007ffc8c893f1f R14: 00007effc187a300 R15: 0000000000022000 [ 2267.469327] syz-executor.0 cpuset= [ 2267.474945] (null) [ 2267.518079] / [ 2267.527626] lowmem_reserve[]: [ 2267.548072] mems_allowed=0-1 [ 2267.548088] CPU: 0 PID: 31033 Comm: syz-executor.0 Not tainted 4.14.229-syzkaller #0 [ 2267.548093] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2267.548097] Call Trace: [ 2267.548123] dump_stack+0x1b2/0x281 [ 2267.621889] 0 [ 2267.628625] warn_alloc.cold+0x96/0x1cc [ 2267.628638] ? zone_watermark_ok_safe+0x220/0x220 [ 2267.628659] __alloc_pages_nodemask+0x2127/0x2720 [ 2267.628670] ? _raw_spin_unlock_irq+0x5a/0x80 [ 2267.628680] ? finish_task_switch+0x178/0x610 [ 2267.628688] ? finish_task_switch+0x14d/0x610 [ 2267.628702] ? lock_acquire+0x170/0x3f0 [ 2267.628716] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2267.662133] 2717 [ 2267.669582] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2267.669595] ? __mutex_unlock_slowpath+0x75/0x770 [ 2267.669606] ? alloc_pages_current+0x73/0x260 [ 2267.669617] alloc_pages_current+0x155/0x260 [ 2267.669631] ion_page_pool_alloc+0x118/0x1b0 [ 2267.669641] ion_system_heap_allocate+0x133/0x8c0 [ 2267.669651] ? _raw_spin_unlock+0x29/0x40 [ 2267.669660] ? _ion_heap_freelist_drain+0x6e/0x410 [ 2267.669668] ? ion_system_contig_heap_create+0x130/0x130 [ 2267.669678] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2267.669694] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2267.681894] / [ 2267.683289] ion_alloc+0x27a/0x810 [ 2267.702008] syz-executor.3 cpuset= [ 2267.704444] ? ion_dma_buf_release+0x40/0x40 [ 2267.708178] 2718 [ 2267.709878] ? __might_fault+0x177/0x1b0 [ 2267.713829] 2718 2718 [ 2267.718710] ion_ioctl+0xea/0x1f0 [ 2267.718721] ? ion_query_heaps+0x360/0x360 [ 2267.718731] ? ion_query_heaps+0x360/0x360 [ 2267.718742] do_vfs_ioctl+0x75a/0xff0 [ 2267.718753] ? ioctl_preallocate+0x1a0/0x1a0 [ 2267.718762] ? lock_downgrade+0x740/0x740 [ 2267.718774] ? __fget+0x225/0x360 [ 2267.718782] ? do_vfs_ioctl+0xff0/0xff0 [ 2267.718793] ? security_file_ioctl+0x83/0xb0 [ 2267.718804] SyS_ioctl+0x7f/0xb0 [ 2267.718811] ? do_vfs_ioctl+0xff0/0xff0 [ 2267.718823] do_syscall_64+0x1d5/0x640 [ 2267.718836] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2267.718849] RIP: 0033:0x466459 [ 2267.738164] / [ 2267.738246] RSP: 002b:00007f78296bb188 EFLAGS: 00000246 [ 2267.742242] mems_allowed=0-1 [ 2267.747507] ORIG_RAX: 0000000000000010 [ 2267.747519] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 2267.749803] mems_allowed=0-1 [ 2267.756609] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000005 [ 2267.756620] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2267.766048] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2267.788114] Node 0 [ 2267.789327] R13: 00007ffd4f3c2b7f R14: 00007f78296bb300 R15: 0000000000022000 [ 2267.952455] CPU: 1 PID: 31048 Comm: systemd-journal Not tainted 4.14.229-syzkaller #0 [ 2267.960468] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2267.969830] Call Trace: [ 2267.972433] dump_stack+0x1b2/0x281 [ 2267.976419] dump_header+0x178/0x82f [ 2267.980138] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2267.985253] ? ___ratelimit+0x2cd/0x530 [ 2267.989258] oom_kill_process.cold+0x10/0xa40 [ 2267.993769] out_of_memory+0xe3e/0x1190 [ 2267.997776] ? oom_killer_disable+0x1c0/0x1c0 [ 2268.002282] ? mutex_trylock+0x152/0x1a0 [ 2268.006353] __alloc_pages_nodemask+0x23e1/0x2720 [ 2268.011227] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2268.016093] ? __might_fault+0x104/0x1b0 [ 2268.020171] ? __lock_acquire+0x5fc/0x3f20 [ 2268.024426] alloc_pages_vma+0xd2/0x6d0 [ 2268.028415] __handle_mm_fault+0x25fa/0x4620 [ 2268.032834] ? vm_insert_page+0x7c0/0x7c0 [ 2268.036991] ? vfs_statx_fd+0x6d/0xd0 [ 2268.040811] ? mark_held_locks+0xa6/0xf0 [ 2268.044894] handle_mm_fault+0x455/0x9c0 [ 2268.048974] __do_page_fault+0x549/0xad0 [ 2268.053047] ? spurious_fault+0x640/0x640 [ 2268.057201] ? do_page_fault+0x60/0x500 [ 2268.061192] ? page_fault+0x2f/0x50 [ 2268.064836] page_fault+0x45/0x50 [ 2268.068376] RIP: 28000078:0x7f5328002d20 [ 2268.072437] RSP: 28000078:000000000000270f EFLAGS: 00008040 [ 2268.076941] CPU: 1 PID: 31022 Comm: syz-executor.3 Not tainted 4.14.229-syzkaller #0 [ 2268.090562] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2268.099965] Call Trace: [ 2268.102584] dump_stack+0x1b2/0x281 [ 2268.106220] warn_alloc.cold+0x96/0x1cc [ 2268.111083] ? zone_watermark_ok_safe+0x220/0x220 [ 2268.115955] __alloc_pages_nodemask+0x2127/0x2720 [ 2268.120850] ? __schedule+0x893/0x1de0 [ 2268.124759] ? lock_acquire+0x170/0x3f0 [ 2268.128755] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2268.135180] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2268.140661] ? __mutex_unlock_slowpath+0x75/0x770 [ 2268.145623] alloc_pages_current+0x155/0x260 [ 2268.150044] ion_page_pool_alloc+0x118/0x1b0 [ 2268.154486] ion_system_heap_allocate+0x133/0x8c0 [ 2268.159349] ? _raw_spin_unlock+0x29/0x40 [ 2268.163515] ? _ion_heap_freelist_drain+0x6e/0x410 [ 2268.168560] ? ion_system_contig_heap_create+0x130/0x130 [ 2268.174512] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2268.181378] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2268.187039] ion_alloc+0x27a/0x810 [ 2268.190734] ? ion_dma_buf_release+0x40/0x40 [ 2268.195595] ? __might_fault+0x177/0x1b0 [ 2268.200286] ion_ioctl+0xea/0x1f0 [ 2268.203755] ? ion_query_heaps+0x360/0x360 [ 2268.208101] ? ion_query_heaps+0x360/0x360 [ 2268.212443] do_vfs_ioctl+0x75a/0xff0 [ 2268.216257] ? ioctl_preallocate+0x1a0/0x1a0 [ 2268.220825] ? lock_downgrade+0x740/0x740 [ 2268.224995] ? __fget+0x225/0x360 [ 2268.228532] ? do_vfs_ioctl+0xff0/0xff0 [ 2268.232525] ? security_file_ioctl+0x83/0xb0 [ 2268.236961] SyS_ioctl+0x7f/0xb0 [ 2268.240344] ? do_vfs_ioctl+0xff0/0xff0 [ 2268.244335] do_syscall_64+0x1d5/0x640 [ 2268.248255] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2268.253460] RIP: 0033:0x466459 [ 2268.256668] RSP: 002b:00007fb2f6ce7188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2268.264407] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 2268.271711] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2268.279131] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2268.286413] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2268.293718] R13: 00007ffde948695f R14: 00007fb2f6ce7300 R15: 0000000000022000 [ 2268.315048] DMA32 free:234148kB min:36200kB low:45248kB high:54296kB active_anon:58152kB inactive_anon:191076kB active_file:12kB inactive_file:52kB unevictable:0kB writepending:0kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:7520kB pagetables:3248kB bounce:0kB free_pcp:620kB local_pcp:624kB free_cma:0kB [ 2268.348281] Mem-Info: [ 2268.350748] active_anon:14935 inactive_anon:57540 isolated_anon:0 [ 2268.350748] active_file:9 inactive_file:20 isolated_file:0 [ 2268.350748] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2268.350748] slab_reclaimable:12230 slab_unreclaimable:121954 [ 2268.350748] mapped:52225 shmem:58131 pagetables:901 bounce:0 [ 2268.350748] free:170478 free_pcp:722 free_cma:0 [ 2268.392101] lowmem_reserve[]: 0 0 0 0 0 [ 2268.396330] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2268.458161] Node 0 active_anon:58176kB inactive_anon:191076kB active_file:12kB inactive_file:52kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:174084kB dirty:0kB writeback:0kB shmem:193092kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2268.528061] warn_alloc_show_mem: 2 callbacks suppressed [ 2268.528065] Mem-Info: [ 2268.535913] active_anon:14935 inactive_anon:57540 isolated_anon:0 [ 2268.535913] active_file:9 inactive_file:20 isolated_file:0 [ 2268.535913] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2268.535913] slab_reclaimable:12230 slab_unreclaimable:121954 [ 2268.535913] mapped:52225 shmem:58131 pagetables:901 bounce:0 [ 2268.535913] free:211352 free_pcp:654 free_cma:0 [ 2268.538086] lowmem_reserve[]: [ 2268.608143] Node 1 active_anon:1564kB inactive_anon:39084kB active_file:24kB inactive_file:28kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:34816kB dirty:0kB writeback:0kB shmem:39432kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2268.671452] 0 0 0 0 0 [ 2268.674028] Node 1 Normal free:429124kB min:53696kB low:67120kB high:80544kB active_anon:1564kB inactive_anon:39084kB active_file:24kB inactive_file:28kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:320kB pagetables:356kB bounce:0kB free_pcp:1292kB local_pcp:624kB free_cma:0kB [ 2268.688070] Node 0 active_anon:58176kB inactive_anon:191076kB active_file:12kB inactive_file:52kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:174084kB dirty:0kB writeback:0kB shmem:193092kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2268.738071] Node 0 DMA free:11160kB min:204kB low:252kB high:300kB active_anon:24kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2268.778130] lowmem_reserve[]: 0 0 0 0 0 [ 2268.782297] Node 0 DMA: 52*4kB (UME) 11*8kB (UME) 7*16kB (UM) 6*32kB (ME) 5*64kB (ME) 4*128kB (UME) 2*256kB (ME) 2*512kB (ME) 2*1024kB (UE) 1*2048kB (M) 1*4096kB (U) = 11160kB [ 2268.798073] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2268.804630] Node 0 DMA32 free:451464kB min:36200kB low:45248kB high:54296kB active_anon:58152kB inactive_anon:191076kB active_file:12kB inactive_file:52kB unevictable:0kB writepending:0kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:7520kB pagetables:3248kB bounce:0kB free_pcp:1408kB local_pcp:664kB free_cma:0kB [ 2268.871283] Node 0 DMA32: 23992*4kB (UME) 15833*8kB (UME) 8461*16kB (UME) 3537*32kB (UME) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 471192kB [ 2268.878077] Node 1 active_anon:1564kB inactive_anon:39084kB active_file:24kB inactive_file:28kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:34816kB dirty:0kB writeback:0kB shmem:39432kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2268.938100] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2268.938161] Node 1 Normal: 10571*4kB (UM) 2545*8kB (UM) 1483*16kB (UM) 1204*32kB (UM) 68*64kB (UM) 719*128kB (UM) 103*256kB (U) 75*512kB (UM) [ 2268.968273] lowmem_reserve[]: [ 2268.972190] 0*1024kB 0*2048kB 0*4096kB = 286052kB [ 2269.003003] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2269.018095] Node 0 DMA free:11152kB min:204kB low:252kB high:300kB active_anon:24kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2269.021924] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2269.044453] 0 0 0 0 0 [ 2269.044537] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2269.044555] lowmem_reserve[]: 0 0 0 0 0 [ 2269.044573] Node 1 Normal free:231588kB min:53696kB low:67120kB high:80544kB active_anon:1564kB inactive_anon:39084kB active_file:24kB inactive_file:28kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:320kB pagetables:356kB bounce:0kB free_pcp:1408kB local_pcp:684kB free_cma:0kB [ 2269.044589] lowmem_reserve[]: 0 0 0 0 0 [ 2269.128603] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2269.133695] Node 0 DMA32 free:571316kB min:36200kB low:45248kB high:54296kB active_anon:58152kB inactive_anon:191076kB active_file:12kB inactive_file:52kB unevictable:0kB writepending:0kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:7520kB pagetables:3248kB bounce:0kB free_pcp:1360kB local_pcp:656kB free_cma:0kB [ 2269.135721] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2269.165177] lowmem_reserve[]: 0 0 0 0 0 [ 2269.178121] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2269.178396] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2269.223017] Node 0 DMA: 58*4kB (UME) 13*8kB (UME) 6*16kB (UM) 7*32kB (UME) 6*64kB (UME) 4*128kB (UME) 3*256kB (UME) 3*512kB (UME) 1*1024kB (E) 1*2048kB (M) 1*4096kB (U) = 11024kB [ 2269.283729] Node 0 DMA32: 31154*4kB (UME) 21110*8kB (UME) 11621*16kB (UME) 4389*32kB (UME) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 619880kB [ 2269.311629] lowmem_reserve[]: 0 0 0 0 0 [ 2269.314476] 58294 total pagecache pages [ 2269.317371] Node 1 [ 2269.322433] Node 0 [ 2269.327519] warn_alloc: 1 callbacks suppressed [ 2269.327525] syz-executor.2: [ 2269.336391] Normal free:136592kB min:53696kB low:67120kB high:80544kB active_anon:1564kB inactive_anon:39084kB active_file:24kB inactive_file:28kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:320kB pagetables:356kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2269.348821] page allocation failure: order:4 [ 2269.372550] 0 pages in swap cache [ 2269.374664] Normal: [ 2269.382752] Swap cache stats: add 0, delete 0, find 0/0 [ 2269.397632] 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2269.405575] Free swap = 0kB [ 2269.413235] Node 1 Normal: 9945*4kB (UM) 2411*8kB (UM) 1702*16kB (UM) 1585*32kB (U) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 137020kB [ 2269.416543] Total swap = 0kB [ 2269.428920] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2269.430540] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 2269.443264] lowmem_reserve[]: [ 2269.448101] (null) [ 2269.450737] 0 0 0 0 0 [ 2269.457065] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 2269.462597] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2269.465931] 2097051 pages RAM [ 2269.473372] Node 0 DMA: 58*4kB (UME) 13*8kB (UME) 6*16kB (UM) 7*32kB (UME) 6*64kB (UME) 4*128kB (UME) 3*256kB (UME) 3*512kB (UME) 1*1024kB (E) 1*2048kB (M) 1*4096kB (U) = 11024kB [ 2269.481058] CPU: 1 PID: 31031 Comm: syz-executor.2 Not tainted 4.14.229-syzkaller #0 [ 2269.497522] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2269.500640] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2269.500647] Call Trace: [ 2269.500670] dump_stack+0x1b2/0x281 [ 2269.500683] warn_alloc.cold+0x96/0x1cc [ 2269.500704] ? zone_watermark_ok_safe+0x220/0x220 [ 2269.509935] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2269.519266] __alloc_pages_nodemask+0x2127/0x2720 [ 2269.519286] ? lock_acquire+0x170/0x3f0 [ 2269.519300] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2269.519318] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2269.519330] ? __mutex_unlock_slowpath+0x75/0x770 [ 2269.519345] alloc_pages_current+0x155/0x260 [ 2269.523692] Node 0 [ 2269.525683] ion_page_pool_alloc+0x118/0x1b0 [ 2269.529702] DMA32: [ 2269.534674] ion_system_heap_allocate+0x133/0x8c0 [ 2269.543474] 59083 total pagecache pages [ 2269.548276] ? _raw_spin_unlock+0x29/0x40 [ 2269.548287] ? _ion_heap_freelist_drain+0x6e/0x410 [ 2269.548296] ? ion_system_contig_heap_create+0x130/0x130 [ 2269.548308] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2269.552296] 0 pages in swap cache [ 2269.557237] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2269.564652] 19340*4kB [ 2269.568943] ion_alloc+0x27a/0x810 [ 2269.568958] ? ion_dma_buf_release+0x40/0x40 [ 2269.568971] ? __might_fault+0x177/0x1b0 [ 2269.568982] ion_ioctl+0xea/0x1f0 [ 2269.573483] (UE) [ 2269.575739] ? ion_query_heaps+0x360/0x360 [ 2269.580661] Swap cache stats: add 0, delete 0, find 0/0 [ 2269.582482] ? ion_query_heaps+0x360/0x360 [ 2269.587321] Free swap = 0kB [ 2269.591294] do_vfs_ioctl+0x75a/0xff0 [ 2269.591307] ? ioctl_preallocate+0x1a0/0x1a0 [ 2269.591317] ? lock_downgrade+0x740/0x740 [ 2269.591329] ? __fget+0x225/0x360 [ 2269.591337] ? do_vfs_ioctl+0xff0/0xff0 [ 2269.591348] ? security_file_ioctl+0x83/0xb0 [ 2269.591414] SyS_ioctl+0x7f/0xb0 [ 2269.596870] 20928*8kB [ 2269.600493] ? do_vfs_ioctl+0xff0/0xff0 [ 2269.600514] do_syscall_64+0x1d5/0x640 [ 2269.600528] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2269.600537] RIP: 0033:0x466459 [ 2269.600546] RSP: 002b:00007effc187a188 EFLAGS: 00000246 [ 2269.606029] (UE) [ 2269.611046] ORIG_RAX: 0000000000000010 [ 2269.611052] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 2269.611057] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2269.611061] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2269.611066] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2269.611071] R13: 00007ffc8c893f1f R14: 00007effc187a300 R15: 0000000000022000 [ 2269.614616] 0 pages HighMem/MovableOnly [ 2269.624686] Total swap = 0kB [ 2269.630559] 363848 pages reserved [ 2269.634105] 2097051 pages RAM [ 2269.634110] 0 pages HighMem/MovableOnly [ 2269.634113] 363848 pages reserved [ 2269.634116] 0 pages cma reserved [ 2269.634127] Out of memory (oom_kill_allocating_task): Kill process 31048 (systemd-journal) score 0 or sacrifice child [ 2269.641925] 0 pages cma reserved [ 2269.647882] Killed process 31048 (systemd-journal) total-vm:103300kB, anon-rss:396kB, file-rss:0kB, shmem-rss:0kB [ 2269.801110] 11556*16kB (UME) 4379*32kB (UME) 5*64kB (M) 2*128kB (M) 1*256kB (M) 1*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 571152kB [ 2269.813074] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2269.823870] Node 1 Normal: 9945*4kB (UM) 2411*8kB (UM) 1702*16kB (UM) 1585*32kB (U) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 137020kB [ 2269.838464] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2269.847321] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2269.856339] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2269.865303] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2269.874336] 59083 total pagecache pages [ 2269.878391] 0 pages in swap cache [ 2269.881847] Swap cache stats: add 0, delete 0, find 0/0 [ 2269.881935] Mem-Info: [ 2269.887210] Free swap = 0kB [ 2269.887214] Total swap = 0kB [ 2269.887222] 2097051 pages RAM [ 2269.887225] 0 pages HighMem/MovableOnly [ 2269.887228] 363848 pages reserved [ 2269.887231] 0 pages cma reserved [ 2269.975059] active_anon:14860 inactive_anon:57540 isolated_anon:12 [ 2269.975059] active_file:152 inactive_file:1276 isolated_file:0 [ 2269.975059] unevictable:0 dirty:25 writeback:0 unstable:0 [ 2269.975059] slab_reclaimable:12230 slab_unreclaimable:121501 [ 2269.975059] mapped:53050 shmem:58131 pagetables:827 bounce:0 [ 2269.975059] free:113075 free_pcp:218 free_cma:0 15:00:24 executing program 0: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/btrfs-control\x00', 0x0, 0x0) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000340)={0x0, @can, @can, @can}) syz_genetlink_get_family_id$batadv(&(0x7f0000000000)='batadv\x00', r0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000140)={0x0}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000740)={'wpan3\x00'}) sendmsg$IEEE802154_SET_MACPARAMS(r3, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="100029bd7000fddbdf25230000000500250009000000"], 0x1c}, 0x1, 0x0, 0x0, 0x890}, 0xa5befbe170ef012f) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r1, 0xc0709411, &(0x7f00000003c0)={{r2, 0x100000001, 0x3, 0x9, 0x8000, 0x0, 0x5, 0xff, 0x7fffffff, 0x6, 0x400, 0x9, 0x8, 0x1, 0x875}, 0x8, [0x0]}) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x80000000, 0xe}) r4 = socket(0x18, 0xa, 0x5) ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f00000000c0)={r4}) [ 2270.032793] systemd[1]: systemd-journald.service: Main process exited, code=killed, status=9/KILL 15:00:24 executing program 1: openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000980)={'team0\x00'}) r1 = socket$packet(0x11, 0x3, 0x300) sendmmsg(0xffffffffffffffff, &(0x7f0000003a40)=[{{&(0x7f0000000080)=@hci={0x1f, 0x4, 0x3}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000100)="32aca8ab848e2818832016b59324e63d61d8b4024f921067941f39c738be0bd9a908d1192dc597c55cc1ab3b52b221aa7041740af6516460b86831d43d942269f662ddcfcb03c19e317e11190157b418d3a0035899d75f2048dcce454c2ed35c3711d4b94648de50c5f8d4ede01018dc7ff44dd6bb40ef355ba09578338a579f6cdb2e43362c6e569425a69a59b494c115e853343bbc5b030c68f2ae5ae0c5fa23da9ec8562fe37c21cef2bd03b63ebd3125", 0xb2}], 0x1}}, {{&(0x7f00000001c0)=@in={0x2, 0x4e21, @loopback}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000240)="a85e4c585c43492732d8182def05bffd65db0674e51c5ac79e9c21422df379d09028cd8f515e0197fb7665a70ccb11a3bdd4224f9801dc2b28026372f8d92c316e3cea354c6acdba04e78a4ba1f68abb5dba66bb2aa39d4a165be15a29f88e445f7fc0142627c3a6d18d3928ca974c5fa8", 0x71}, {&(0x7f00000002c0)="ea4325f84188b5f46f65dbfa371aad9a15da0da58bb0b8c6c1b12e2a72cbb6897d7b9040aece6141c3765144c0c4e7d9968e8b17896f690171d494096270eb18db7d185763d13a38f2462bea7e94df945577be917e294d227b36331f120d6ba95424b880a7387fa6d4158bb8cb016814107d25375e2481a8d945070cda9095e0c0b03589d19ae21b135abe58519bc473c8f2606ac609b75fd028cc63790e57ff2b6ae261ba26367b8b9a7b318afe8e867df402f41a2b9ec42a4c51ff03e5e5e548502bd49d520055f7b6297db4b5669e7364e857eafbf3888d70881ea4166f0010891c47e14e98d4f2ccc93c8a1914ee1861fc", 0xf3}], 0x2}}, {{&(0x7f0000000400)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x0, 0x0, 0x3, 0x0, {0xa, 0x4e24, 0x3, @dev={0xfe, 0x80, [], 0x25}, 0x10000}}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000480)="ae5ab86c53ce8b5e887c145381719af379f939505ec2631dea22f25a", 0x1c}], 0x1, &(0x7f0000000500)=[{0x10, 0x10a, 0x3}, {0xe8, 0x6, 0x200, "5e0ec1b5392d7d1c8c03b1d62ab67ebfdc1fcfd500fba6b368c8984c15c12472640784539cfd6e313bfe027c02f4f519f3b3f85058071b2ed5b77e37b4e178a18e10852849dd728a3deb7c03326efd6f139a844a83cb8868bca39fe6a851abc31ba7c916af4981cda946d3c425f474fde26e8c41a551e0bcb23f605296345be35852fe24094cd67e1c7f0958ebe01be6be57db19c0d4247f0dc7b00e942700fc7e3bde39b72ac7643de9e9df3e5e10c8d880a185c1ef4abf2bcbea76b7c66c4f54804faab79eedceff472513659efcccc8b4"}, {0xc0, 0x10a, 0x3, "66809d8ceea4190047dc3602b04cd342f58fed5978643630fa976ffa1c321f54a27594575571b1f053e24c97809b0daabd4d01730676faf1c2a9efdd2959047a999cf90413745fdc2e1bc984531149779061b43eb3061b112b77ddc0e0b55499d56da89eaf01d8bbf3976f86a8f8ad7edbd405d272fa6ca7cab47fd7faf19965e0e3a8ec1181e56dd0061741bbd55b4b02075c255d60028fc365c9d0ee5cee78e96f0e5c8e8404d843"}], 0x1b8}}, {{&(0x7f00000006c0)=@xdp={0x2c, 0xf, 0x0, 0x10}, 0x80, &(0x7f00000009c0)=[{&(0x7f0000000740)="4c76d2b8a67a83530d906f30bc462e5d0615ab2a8a26962a73670dbeaf9f0bf17d6977e625aa57f2d37fdd05bbb9909ce671e2d9091b80d1a6b79adc81c2a86ff6edac61980c9b503d3e6a040a0583859015764af77e183ea2147fae10287b2b9ca1a1a703fe3fb0407f66f51b752c49dd20e8496736", 0x76}, {&(0x7f00000007c0)="160191169f1c625c30f8e5620215b14c85850f525527541ae316746761b2540fe59d81f6ee9a4fa7663a4096a682d29bb79bcf6c61f9bd83b54cb6be37cca664e034afa5d448d10cdaabc8c41b5ea3850ce057e66977b97f0a5321700c2779c12de2b49e8c329604cff1d9f06ddf88011086d45ce05ededf6a105a4e20c17c17a77510f1c951aa0b92df5161b841dd422798c3be21054d32f016b960f826476eb55a86df05c7fb074ce96f4f7f9b940de1f44f630080c8a4bdc9c97d5a053b4a257e020f078f0eb9657b3ac5e936", 0xce}, {&(0x7f00000008c0)="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", 0xfe}], 0x3, &(0x7f0000000a00)=[{0x1010, 0x10e, 0x5, "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"}, {0xc8, 0x113, 0x20, "04fb7ea31a6a7540f68448780fee1d51ef00318fc821c16a67b7d4bcd46e10003a1905ba2824af4aef61a5c6557b2644364619764a016df0f45bca122ab15fc94e653b32a1cb9595bfa93c0fe630f0b0bd4412b59777095ed7b59e0b38b4ab78c24ee826c696c75c2cf21c58bba31d40b3d55db18659edd4bc2985b68c5b9ded9febf2e7093ff3156a5f3f195ca75bdf77df1be404a031024291df074efa4b2d5503f6bcdf461d24a195a48f8e4c14b94182a9"}], 0x10d8}}, {{&(0x7f0000001b00)=@l2tp={0x2, 0x0, @loopback, 0x2}, 0x80, &(0x7f0000001c40)=[{&(0x7f0000001b80)="fdd71ca025400497110a76e44034e79c033b199a748dae2412400d4a34f16fe68b5a6cd717fc0bb2a41d0e478c510ca6f42252ed7fe25505fd697727f3428d7e3a25bd1418cbf6d4504e029dc892b5fdce2289b6809e4162ffdc2a345a08fd6fb73d57660b8a4eb7aeafa24c0a41872430fccb1be13df5d798100569378ee3de312b118335ff21a507c287332078d3fa56d60e9dbdbb0a8b8a9c6798fd07eccc68c4253a17968992fc", 0xa9}], 0x1}}, {{&(0x7f0000001c80)=@sco={0x1f, @none}, 0x80, &(0x7f00000020c0)=[{&(0x7f0000001d00)="c4d5ca595a5d8462a80ebaa0e4f328c10dbe742a1e95380dd336326e6b76e1d1fc5b2c42bdc6bd302e5a59d0a5277d", 0x2f}, {&(0x7f0000001d40)="f155d4be109e45de3adce6e735996555e64aadf705547c59c4702881febe0c39c22b2d55a41022a2c41e03d823d2ad811e6569c16e7d6b055519165e1131844fa1cffad6aa26ce115f0b959e586b290a91629ed08be31b2cc70ace00bbffef0ca61b9d3a824636ea5140563c0d33be2a5077c338786ad255b56b637f40b341845fe533b8c9a3cdd656c7e6b4176b855ae1326ccffebc347eb7f9eb0ca188ae53f1ac1c7b207da87ddf2da30e9556ee62e004eea06518e72474529d714184deb4405304998a85eaed081e5c30e6e6a57e4e5e4ed070088770059bc3a2a5617ab436", 0xe1}, {&(0x7f0000001e40)="d8aaa6de55d4172ef496b202193f3c484798d7229c6ea10d417767bb056851a4f6aee0ec9f6b853c9f87a8129690600c72bc17082c2302ac7dfdf5924803a2699a22952f2e2221aedaec92c96348e1b9b142fec28db7050d1817e817e15e7fc568ca5ce2e470fe1aff4334c7e180d648d1f554231555c775e4768fcba036f22c1d9f9c5caf705912e704fbc22ac1e69725bd792a934f1772dc3273c2c162823a1db99eb9f2b8a67c1ab440efa97225", 0xaf}, {&(0x7f0000001f00)="953dbde121538c2f67900c864f7a168a0e4125ab1b3df9206a0359ef1694a213c035fb19536123ae21e5373053f13e2dab9c2242742727c2231f163f2f2fcee48de75cc05bb496f170f335fc0df11c7a4a0f9435988ebe879f6f8ccf8026180f398abd86ff28b22a95d4a72001c47c6710ab1cf244b0abfe3272478f04b93df4b5ccb90730aa77b71d32a492935893a8a8ad11a6a4b5dc42d2bfeba26026cb42314fd012154a70e7aa07f381de19c785783030f92de7df147214599e253cf59724b5b389987c643a24251cb53ee6e716d48efffb3cfd0f4acb76164d2df78199f961ccd7f158d0f43dbeed57178aa7485f3d4897283b458ab492282a23", 0xfd}, {&(0x7f0000002000)="bef4d30817b8ad9e04e2bea348d067d10ff448537f7abeb63af9f3aa57db5d32b7d54bf3acd73de92d111ff62998dad8fd127552556194e1d9725dfa69cc5b1083610886c1b4da6946830449f8f9d29cbbe3ae4375731f1c4b5225a2cc0cad51f90108804139176cda901ca94aa0a4c18d18b86195957fa18c76d895c166dd648c84fdba64853489", 0x88}], 0x5, &(0x7f0000002140)=[{0x48, 0x113, 0x23fa, "6b90f36203611a19ad48d4494a1756f7082f0c5138d172218623e8410ae122eac34630ca25b29fa7159ed1076e5e47d0787dab421cea"}, {0x60, 0x104, 0x7, "bab67dc2b1a3ff1e00b102a8bafa04dc1379b9b7c81a16c92883ee86cc4463bda006cf11c8cda60aedf54ea440522ea195f0a7f08cbb146ba264d12217fbe166e56395ec19c5bbf4244910c9"}, {0x78, 0x119, 0xfec, "46a50693db38ac57d2058d4f55540291618dc4329408a39ad4df348685f9ca7619af03db691b59f0f52a8afaf767d979c5d09602a387ad58d9751de396bc921eac24be3b5a8170347f323dedb465f689310bc2b844a187c4a62c8700948801aec672e18c4758"}, {0x1010, 0x111, 0xffffffff, "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"}, {0x78, 0x10a, 0x6, "589614f8a47f25773a3f350b84cb70fa7da3593b339b88d75dd82ba17ab1b81f27d37a7bef259affcf157757d094e68c2810f1422a791f3d2d43b5aa4d2d84b5096f13554268b9d1757f68f61a55e921a8587c5a06ca0398f20123daf2222903ad2e9c009173654d"}, {0x28, 0x159, 0xfffffffd, "4b3a370afbfc0b766fabae7c09154ca073c0"}, {0xa8, 0x10f, 0x7f, "3fbd73aff7b8d2ae949de261e6081bca3f7d254377304778948bf4bbb0626e5c38fa9bb1986387f6a4fefac05a001e7b6335cf477a5c8e07d5f492c06fe20078ebd6198f1d7bd5498e0e73fbbb926d2d5074b5eb44e41682749665485077bd46cb8f239af7e51ff9543994ed2437ed41d4a6e6a70cbee6a3a09f549547ac34e7e09428572df12b486780d253adbdd20cd77effde12ec"}], 0x1278}}, {{&(0x7f00000033c0)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x17}}, 0x0, 0x2, 0x1, 0x3}}, 0x80, &(0x7f00000034c0)=[{&(0x7f0000003440)="560cf021024523f6e3d779a974dc419301da5269860864485941c22f16f24efacbd1fa00889980009f69430f6f3333e9c7a6b392bc037af92383162cdeb8812dc2050ddf9553ac45", 0x48}], 0x1, &(0x7f0000003500)=[{0xa8, 0x110, 0x1ff, "b7d7f6589c7755cb2a15d4cddf8a753075aaadbf12f1c41546cc90b1703a9d65eb63be94f076619c2e198f099d2c62d6580474c99c647e8019378f8dbe2191b98994497be6fbede3ad79a2b8443573af843395e8837f3657fd0f363f3c5236b649012dd613c3f16227a8ce21fcc7642390e88876c771c0a3b4da92de2392d42b54d0fb14d5fb4c2936fd0ccb5741ad94a997b64353"}, {0xc8, 0x88, 0x72, "79787f7570aa195731a8396d7dc85d4faa316cd45ead6683c3d1fc15bc0115386d3aa80e90010552844404cb89c336a8fd038ef0b4ccfcbd0e211363ba590fff68968499f991db8b6522ac7e9554f57c1dfe763856e166b0c9c3968144e2ffd99749d1cfc7654e69bff04a87b40093e16d2f09a3d6ae60c727214b3c8b38f13a8af64e33d3de7627e4e1f61f53a80b5081a37b089f6d1a6edcae2debfe136af22344f1efdfdcafc891cc1b8279d2f328e6"}, {0xb0, 0x117, 0x3, "b3049073cdff97cab8caf993e605e42bd1fdc218b6c1ed03efa3e16d377036dd95f783f790bd38fc2cb3b5a4b9374e29436be24be89a9c8a3870f33148305245604566e481eb6c5d2afb692a89d6dd54ce21c97029985a0ca7cd9e9b459f99290bc02b852f5c82b06bb37099c823f87a7921a9dc5a7e09f894f26404c485bdc8746c826cb1bec1a7913b51f5b8921a7d601d2b9d7cfa12963336ad6948913717"}, {0x88, 0x119, 0x1, "062abcbdbae499c667d9e2b111f346ab08f84f43115ad08f1948ed23305f1f9625a92c982222d3d60b3991a4ce05be6606c73ece9873b222cea22ed497cf5ac0219adc74ea8dc23eab588e74c75ff157d0f65ad6e86aaa590f8acb1e3e68bc6d63be663f71fd2a2835051d7bbeaabc7ce0405f77b65465"}, {0x50, 0x110, 0x0, "0f87c779d409f7cedcfb0487d460aa33cedc49c50d4ad4256ce0311682862654a0aaebe9967bd3f4ea1816d4efdc61536739bf161aa704d71271566e6ecf99"}, {0xe8, 0x107, 0xffffff64, "4a212c5625735a011c0d4d4cfdad5593def3e01c9b01d151150a21012c0368011504fdde84336d0da6ff2412dd16f47a8707de50049af1cba49565db5d7eb8da1501b0de8aed8db9cfa19adca0471d591f8348b15a7d9448dde494c6c145f0b22113eb92e2b74dac86dd2ce50ba1272868ff4f42922c607b170907184ac02d4ad0263c27d1649f0b6bd2a43d84f0d845962656a539b64b21701faaedf1f7fa27e13f6acd2ae6888aad88631a709013caf17d9af30724416dd5a80e7ab42f1ff05e7de76baeec36f465d31d62c0ff40f577b43c"}, {0x60, 0x117, 0x0, "52ac762d1a1a77bf44c88b9c9b0c46c2e9b0e18cbad6f43a6c1eeae718691d8ed45e5a5e11b00667367af1568d74667479a6b3fffed6d10f5dc2834588ef99349849e0cb4ee61164cb5317b15b71"}, {0x28, 0x0, 0x401, "c1dbc8c8953b7570002155a57995a4341a"}, {0xd8, 0x29, 0x2, "724aa6ade60833f14a77361e5015ed11e84c76e03b5dbd496600787f0798435c64e04b75d2cb0ca309ca6206b3bd5c9eacb88b246378189516db9eb800d04e482c66e38f1f84a532397e203501cb8c422f4ff57dc7a6f1ff38f3da14275a47776414fac308aa5d83949cab145e198858846131d5bdb420f876b1a988c7ef4b1f9f824823d6c3b6a37e75f034c69fe7ce8433b4d249130fa196a7946c9015329b7dd9defeb5c5b6c5d112643ea85a9e089a1654b1227350577b179a032b3cd4af51c08d2eb04ffb4e"}], 0x540}}], 0x7, 0x4040000) [ 2270.090122] systemd[1]: Failed to start Journal Service. [ 2270.097684] Node 0 active_anon:58328kB inactive_anon:191076kB active_file:992kB inactive_file:11600kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:182624kB dirty:168kB writeback:0kB shmem:193092kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no 15:00:24 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0)='nl802154\x00', 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_DEV(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000090}, 0x14005) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, r1, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0xc0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x80000000, 0xe}) [ 2270.137264] systemd[1]: systemd-journald.service: Unit entered failed state. [ 2270.145594] Node 1 active_anon:1352kB inactive_anon:39084kB active_file:28kB inactive_file:24kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:34816kB dirty:0kB writeback:0kB shmem:39432kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2270.176373] systemd[1]: systemd-journald.service: Failed with result 'signal'. [ 2270.189763] systemd[1]: systemd-journald.service: Service has no hold-off time, scheduling restart. [ 2270.212784] systemd[1]: Stopped Journal Service. [ 2270.227670] Node 0 DMA free:11024kB min:204kB low:252kB high:300kB active_anon:24kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB 15:00:24 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x80000000, 0xe}) syz_genetlink_get_family_id$batadv(&(0x7f00000000c0)='batadv\x00', 0xffffffffffffffff) syz_init_net_socket$netrom(0x6, 0x5, 0x0) [ 2270.358111] syz-executor.5: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2270.360826] systemd[1]: Starting Journal Service... [ 2270.377841] syz-executor.0: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2270.403376] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2270.417818] Node 0 DMA32 free:77864kB min:36200kB low:45248kB high:54296kB active_anon:58704kB inactive_anon:191076kB active_file:6032kB inactive_file:9224kB unevictable:0kB writepending:316kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:7584kB pagetables:3348kB bounce:0kB free_pcp:564kB local_pcp:244kB free_cma:0kB [ 2270.436960] syz-executor.0 cpuset= [ 2270.455876] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 2270.493231] CPU: 0 PID: 31058 Comm: syz-executor.5 Not tainted 4.14.229-syzkaller #0 [ 2270.494527] syz-executor.1: [ 2270.501155] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2270.501160] Call Trace: [ 2270.501183] dump_stack+0x1b2/0x281 [ 2270.501198] warn_alloc.cold+0x96/0x1cc [ 2270.501210] ? zone_watermark_ok_safe+0x220/0x220 [ 2270.501232] __alloc_pages_nodemask+0x2127/0x2720 [ 2270.501247] ? lock_acquire+0x170/0x3f0 [ 2270.501261] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2270.501277] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2270.501289] ? __mutex_unlock_slowpath+0x75/0x770 [ 2270.501304] alloc_pages_current+0x155/0x260 [ 2270.501316] ion_page_pool_alloc+0x118/0x1b0 [ 2270.501325] ion_system_heap_allocate+0x133/0x8c0 [ 2270.501334] ? ion_alloc+0x187/0x810 [ 2270.501344] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2270.501352] ? ion_system_contig_heap_create+0x130/0x130 [ 2270.501362] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2270.501371] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2270.501379] ion_alloc+0x204/0x810 [ 2270.501390] ? ion_dma_buf_release+0x40/0x40 [ 2270.501402] ? __might_fault+0x177/0x1b0 [ 2270.501415] ion_ioctl+0xea/0x1f0 [ 2270.501424] ? ion_query_heaps+0x360/0x360 [ 2270.501436] ? ion_query_heaps+0x360/0x360 [ 2270.501447] do_vfs_ioctl+0x75a/0xff0 [ 2270.501459] ? ioctl_preallocate+0x1a0/0x1a0 [ 2270.501467] ? lock_downgrade+0x740/0x740 [ 2270.501480] ? __fget+0x225/0x360 [ 2270.501490] ? do_vfs_ioctl+0xff0/0xff0 [ 2270.501501] ? security_file_ioctl+0x83/0xb0 [ 2270.501510] SyS_ioctl+0x7f/0xb0 [ 2270.501516] ? do_vfs_ioctl+0xff0/0xff0 [ 2270.501529] do_syscall_64+0x1d5/0x640 [ 2270.501542] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2270.501550] RIP: 0033:0x466459 [ 2270.501555] RSP: 002b:00007f17b5648188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2270.501565] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 2270.501571] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2270.501577] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2270.501582] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2270.501587] R13: 00007fff4326a6cf R14: 00007f17b5648300 R15: 0000000000022000 [ 2270.501804] / mems_allowed=0-1 [ 2270.501838] CPU: 0 PID: 31061 Comm: syz-executor.0 Not tainted 4.14.229-syzkaller #0 [ 2270.501844] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2270.501847] Call Trace: [ 2270.501858] dump_stack+0x1b2/0x281 [ 2270.501872] warn_alloc.cold+0x96/0x1cc [ 2270.501882] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2270.501892] ? zone_watermark_ok_safe+0x220/0x220 [ 2270.501917] __alloc_pages_nodemask+0x2127/0x2720 [ 2270.501930] ? lock_acquire+0x170/0x3f0 [ 2270.501942] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2270.501957] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2270.501971] ? __mutex_unlock_slowpath+0x75/0x770 [ 2270.501987] alloc_pages_current+0x155/0x260 [ 2270.501999] ion_page_pool_alloc+0x118/0x1b0 [ 2270.502009] ion_system_heap_allocate+0x133/0x8c0 [ 2270.502019] ? ion_alloc+0x187/0x810 [ 2270.502029] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2270.502039] ? ion_system_contig_heap_create+0x130/0x130 [ 2270.502049] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2270.502059] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2270.502070] ion_alloc+0x204/0x810 [ 2270.502083] ? ion_dma_buf_release+0x40/0x40 [ 2270.502093] ? __might_fault+0x177/0x1b0 [ 2270.502102] ion_ioctl+0xea/0x1f0 [ 2270.502112] ? ion_query_heaps+0x360/0x360 [ 2270.502125] ? ion_query_heaps+0x360/0x360 [ 2270.502135] do_vfs_ioctl+0x75a/0xff0 [ 2270.502148] ? ioctl_preallocate+0x1a0/0x1a0 [ 2270.502157] ? lock_downgrade+0x740/0x740 [ 2270.502170] ? __fget+0x225/0x360 [ 2270.502181] ? do_vfs_ioctl+0xff0/0xff0 [ 2270.502191] ? security_file_ioctl+0x83/0xb0 [ 2270.502203] SyS_ioctl+0x7f/0xb0 [ 2270.502210] ? do_vfs_ioctl+0xff0/0xff0 [ 2270.502221] do_syscall_64+0x1d5/0x640 [ 2270.502235] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2270.502242] RIP: 0033:0x466459 [ 2270.502247] RSP: 002b:00007f782969a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2270.502257] RAX: ffffffffffffffda RBX: 000000000056c008 RCX: 0000000000466459 [ 2270.502262] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000004 [ 2270.502267] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2270.502272] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c008 [ 2270.502277] R13: 00007ffd4f3c2b7f R14: 00007f782969a300 R15: 0000000000022000 [ 2270.696900] lowmem_reserve[]: [ 2270.766341] page allocation failure: order:4 [ 2270.964977] syz-executor.5 invoked oom-killer: gfp_mask=0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 2270.977327] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2270.990304] (null) [ 2270.996662] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 2271.008999] CPU: 1 PID: 31066 Comm: syz-executor.1 Not tainted 4.14.229-syzkaller #0 [ 2271.016904] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2271.026569] Call Trace: [ 2271.029177] dump_stack+0x1b2/0x281 [ 2271.032959] warn_alloc.cold+0x96/0x1cc [ 2271.036937] ? zone_watermark_ok_safe+0x220/0x220 [ 2271.041808] __alloc_pages_nodemask+0x2127/0x2720 [ 2271.046673] ? lock_acquire+0x170/0x3f0 [ 2271.051514] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2271.057114] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2271.062603] ? __mutex_unlock_slowpath+0x75/0x770 [ 2271.067553] alloc_pages_current+0x155/0x260 [ 2271.073688] ion_page_pool_alloc+0x118/0x1b0 [ 2271.078130] ion_system_heap_allocate+0x133/0x8c0 [ 2271.083172] ? ion_alloc+0x187/0x810 [ 2271.086905] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2271.093242] ? ion_system_contig_heap_create+0x130/0x130 [ 2271.099074] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2271.104189] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2271.109053] ion_alloc+0x204/0x810 [ 2271.112697] ? ion_dma_buf_release+0x40/0x40 [ 2271.117223] ? __might_fault+0x177/0x1b0 [ 2271.121287] ion_ioctl+0xea/0x1f0 [ 2271.124741] ? ion_query_heaps+0x360/0x360 [ 2271.128990] ? ion_query_heaps+0x360/0x360 [ 2271.133227] do_vfs_ioctl+0x75a/0xff0 [ 2271.137039] ? ioctl_preallocate+0x1a0/0x1a0 [ 2271.141458] ? lock_downgrade+0x740/0x740 [ 2271.145632] ? __fget+0x225/0x360 [ 2271.149111] ? do_vfs_ioctl+0xff0/0xff0 [ 2271.153264] ? security_file_ioctl+0x83/0xb0 [ 2271.157675] SyS_ioctl+0x7f/0xb0 [ 2271.161049] ? do_vfs_ioctl+0xff0/0xff0 [ 2271.165121] do_syscall_64+0x1d5/0x640 [ 2271.169029] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2271.174313] RIP: 0033:0x466459 [ 2271.177945] RSP: 002b:00007f431c6d3188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2271.186044] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 2271.195088] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2271.202369] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2271.209646] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2271.216942] R13: 00007ffd8dc7798f R14: 00007f431c6d3300 R15: 0000000000022000 [ 2271.239723] , order=0, oom_score_adj=1000 [ 2271.244172] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 2271.252448] CPU: 1 PID: 31058 Comm: syz-executor.5 Not tainted 4.14.229-syzkaller #0 [ 2271.260354] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2271.263720] 0 [ 2271.269717] Call Trace: [ 2271.269741] dump_stack+0x1b2/0x281 [ 2271.269754] dump_header+0x178/0x82f [ 2271.269766] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2271.269780] ? ___ratelimit+0x2cd/0x530 [ 2271.271581] 0 [ 2271.274157] oom_kill_process.cold+0x10/0xa40 [ 2271.277758] 0 [ 2271.281480] out_of_memory+0xe3e/0x1190 [ 2271.281494] ? oom_killer_disable+0x1c0/0x1c0 [ 2271.281503] ? mutex_trylock+0x152/0x1a0 [ 2271.281516] __alloc_pages_nodemask+0x23e1/0x2720 [ 2271.281531] ? lock_acquire+0x170/0x3f0 [ 2271.281546] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2271.286727] 0 [ 2271.290691] ? ion_page_pool_alloc+0x9e/0x1b0 [ 2271.290712] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2271.290732] alloc_pages_current+0x155/0x260 [ 2271.290744] ion_page_pool_alloc+0x118/0x1b0 [ 2271.292580] 0 [ 2271.297071] ion_system_heap_allocate+0x133/0x8c0 [ 2271.302823] ? ion_alloc+0x187/0x810 [ 2271.307328] Node 0 [ 2271.311418] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2271.311430] ? ion_system_contig_heap_create+0x130/0x130 [ 2271.311439] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2271.311451] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2271.311463] ion_alloc+0x204/0x810 [ 2271.317974] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2271.321943] ? ion_dma_buf_release+0x40/0x40 [ 2271.321956] ? __might_fault+0x177/0x1b0 [ 2271.321967] ion_ioctl+0xea/0x1f0 [ 2271.321981] ? ion_query_heaps+0x360/0x360 [ 2271.326828] lowmem_reserve[]: [ 2271.328638] ? ion_query_heaps+0x360/0x360 [ 2271.328650] do_vfs_ioctl+0x75a/0xff0 [ 2271.328662] ? ioctl_preallocate+0x1a0/0x1a0 [ 2271.328672] ? lock_downgrade+0x740/0x740 [ 2271.328686] ? __fget+0x225/0x360 [ 2271.333174] 0 [ 2271.338717] ? do_vfs_ioctl+0xff0/0xff0 [ 2271.338729] ? security_file_ioctl+0x83/0xb0 [ 2271.338739] SyS_ioctl+0x7f/0xb0 [ 2271.338747] ? do_vfs_ioctl+0xff0/0xff0 [ 2271.338761] do_syscall_64+0x1d5/0x640 [ 2271.343164] 0 [ 2271.347595] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2271.349423] 0 [ 2271.354222] RIP: 0033:0x466459 [ 2271.357917] 0 [ 2271.360158] RSP: 002b:00007f17b5648188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2271.360168] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 2271.360173] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2271.360177] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2271.360182] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2271.360186] R13: 00007fff4326a6cf R14: 00007f17b5648300 R15: 0000000000022000 [ 2271.367084] Mem-Info: [ 2271.373105] 0 [ 2271.376440] active_anon:15093 inactive_anon:57540 isolated_anon:0 [ 2271.376440] active_file:290 inactive_file:245 isolated_file:32 [ 2271.376440] unevictable:0 dirty:1 writeback:0 unstable:0 [ 2271.376440] slab_reclaimable:12346 slab_unreclaimable:121311 [ 2271.376440] mapped:52756 shmem:58131 pagetables:927 bounce:0 [ 2271.376440] free:13926 free_pcp:30 free_cma:0 [ 2271.381239] Node 1 Normal free:26820kB min:53696kB low:67120kB high:80544kB active_anon:1612kB inactive_anon:39084kB active_file:8kB inactive_file:8kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:288kB pagetables:344kB bounce:0kB free_pcp:120kB local_pcp:120kB free_cma:0kB [ 2271.381262] lowmem_reserve[]: 0 0 0 0 0 [ 2271.381280] Node 0 DMA: 44*4kB (UME) 13*8kB (UME) 6*16kB (UM) 7*32kB (UME) 6*64kB (UME) 4*128kB (UME) 3*256kB (UME) 3*512kB (UME) 1*1024kB (E) 1*2048kB (M) 1*4096kB (U) = 10968kB [ 2271.381364] Node 0 DMA32: 689*4kB (UME) 177*8kB (UME) 75*16kB (ME) 402*32kB (UM) 4*64kB (M) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18492kB [ 2271.381432] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2271.381480] Node 1 Normal: 15*4kB (M) 9*8kB (UM) 2*16kB (UM) 833*32kB [ 2271.390070] Node 0 active_anon:58760kB inactive_anon:191076kB active_file:1152kB inactive_file:972kB unevictable:0kB isolated(anon):0kB isolated(file):128kB mapped:176208kB dirty:4kB writeback:0kB shmem:193092kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2271.410791] (U) [ 2271.418738] Node 1 active_anon:1612kB inactive_anon:39084kB active_file:8kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:34816kB dirty:0kB writeback:0kB shmem:39432kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2271.422049] 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 26820kB [ 2271.422086] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2271.422095] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2271.426466] Node 0 [ 2271.429491] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2271.429498] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2271.429502] 58684 total pagecache pages [ 2271.429512] 0 pages in swap cache [ 2271.429518] Swap cache stats: add 0, delete 0, find 0/0 [ 2271.429521] Free swap = 0kB [ 2271.429524] Total swap = 0kB [ 2271.429531] 2097051 pages RAM [ 2271.429534] 0 pages HighMem/MovableOnly [ 2271.429537] 363848 pages reserved [ 2271.429540] 0 pages cma reserved [ 2271.538136] syz-executor.3: [ 2271.569053] DMA free:10968kB min:204kB low:252kB high:300kB active_anon:24kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2271.650050] syz-executor.2: [ 2271.686775] lowmem_reserve[]: [ 2271.737202] warn_alloc_show_mem: 2 callbacks suppressed [ 2271.737207] Mem-Info: [ 2271.748542] 0 [ 2271.763349] page allocation failure: order:0 [ 2271.782996] 2717 [ 2271.799205] active_anon:15093 inactive_anon:57540 isolated_anon:0 [ 2271.799205] active_file:18 inactive_file:0 isolated_file:0 [ 2271.799205] unevictable:0 dirty:1 writeback:0 unstable:0 [ 2271.799205] slab_reclaimable:12346 slab_unreclaimable:121311 [ 2271.799205] mapped:52256 shmem:58131 pagetables:927 bounce:0 [ 2271.799205] free:13847 free_pcp:0 free_cma:0 [ 2271.866631] 2718 2718 2718 [ 2271.873885] page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2271.887512] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2271.901903] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 2271.907084] CPU: 0 PID: 31031 Comm: syz-executor.2 Not tainted 4.14.229-syzkaller #0 [ 2271.914975] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2271.924338] Call Trace: [ 2271.926939] dump_stack+0x1b2/0x281 [ 2271.930605] warn_alloc.cold+0x96/0x1cc [ 2271.934596] ? zone_watermark_ok_safe+0x220/0x220 [ 2271.935904] Node 0 [ 2271.939443] ? usleep_range+0x130/0x130 [ 2271.939454] ? try_to_free_pages+0x23f/0x6e0 [ 2271.939464] ? _find_next_bit+0xdb/0x100 [ 2271.939473] ? run_timer_softirq+0x5a0/0x5a0 [ 2271.939490] __alloc_pages_nodemask+0x2127/0x2720 [ 2271.939507] ? lock_acquire+0x170/0x3f0 [ 2271.939523] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2271.939533] ? ion_page_pool_alloc+0x9e/0x1b0 [ 2271.939549] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2271.939569] alloc_pages_current+0x155/0x260 [ 2271.939580] ion_page_pool_alloc+0x118/0x1b0 [ 2271.939591] ion_system_heap_allocate+0x133/0x8c0 [ 2271.965084] DMA32 free:17504kB min:36200kB low:45248kB high:54296kB active_anon:58736kB inactive_anon:191076kB active_file:64kB inactive_file:44kB unevictable:0kB writepending:4kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:7680kB pagetables:3364kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2271.967564] ? _raw_spin_unlock+0x29/0x40 [ 2272.028093] ? _ion_heap_freelist_drain+0x6e/0x410 [ 2272.033034] ? ion_system_contig_heap_create+0x130/0x130 [ 2272.035020] lowmem_reserve[]: [ 2272.038495] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2272.038508] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2272.038520] ion_alloc+0x27a/0x810 [ 2272.038533] ? ion_dma_buf_release+0x40/0x40 [ 2272.038545] ? __might_fault+0x177/0x1b0 [ 2272.038555] ion_ioctl+0xea/0x1f0 [ 2272.038565] ? ion_query_heaps+0x360/0x360 [ 2272.038578] ? ion_query_heaps+0x360/0x360 [ 2272.038588] do_vfs_ioctl+0x75a/0xff0 [ 2272.038600] ? ioctl_preallocate+0x1a0/0x1a0 [ 2272.038610] ? lock_downgrade+0x740/0x740 [ 2272.038626] ? __fget+0x225/0x360 [ 2272.085740] 0 [ 2272.087771] ? do_vfs_ioctl+0xff0/0xff0 [ 2272.096968] ? security_file_ioctl+0x83/0xb0 [ 2272.101388] SyS_ioctl+0x7f/0xb0 [ 2272.104766] ? do_vfs_ioctl+0xff0/0xff0 [ 2272.108759] do_syscall_64+0x1d5/0x640 [ 2272.112664] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2272.117795] 0 [ 2272.118235] RIP: 0033:0x466459 [ 2272.118240] RSP: 002b:00007effc187a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2272.118249] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 2272.118254] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2272.118259] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2272.118263] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2272.118268] R13: 00007ffc8c893f1f R14: 00007effc187a300 R15: 0000000000022000 [ 2272.125366] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 2272.177517] 0 [ 2272.180260] Node 0 active_anon:58760kB inactive_anon:191076kB active_file:88kB inactive_file:44kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:174124kB dirty:4kB writeback:0kB shmem:193092kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2272.180277] Node 1 active_anon:1612kB inactive_anon:39084kB active_file:16kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:34816kB dirty:0kB writeback:0kB shmem:39432kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2272.180282] Node 0 DMA free:10968kB min:204kB low:252kB high:300kB active_anon:24kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2272.237596] 0 [ 2272.270730] CPU: 0 PID: 31022 Comm: syz-executor.3 Not tainted 4.14.229-syzkaller #0 [ 2272.280461] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2272.289818] Call Trace: [ 2272.292423] dump_stack+0x1b2/0x281 [ 2272.296062] warn_alloc.cold+0x96/0x1cc [ 2272.300050] ? zone_watermark_ok_safe+0x220/0x220 [ 2272.304916] ? usleep_range+0x130/0x130 [ 2272.308912] ? try_to_free_pages+0x23f/0x6e0 [ 2272.313327] ? _find_next_bit+0xdb/0x100 [ 2272.316581] 0 [ 2272.317397] ? run_timer_softirq+0x5a0/0x5a0 [ 2272.317415] __alloc_pages_nodemask+0x2127/0x2720 [ 2272.328461] ? lock_acquire+0x170/0x3f0 [ 2272.332621] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2272.337493] ? ion_page_pool_alloc+0x9e/0x1b0 [ 2272.342002] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2272.345410] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2272.347497] ? __alloc_pages_nodemask+0x27a/0x2720 [ 2272.347511] alloc_pages_current+0x155/0x260 [ 2272.382503] ion_page_pool_alloc+0x118/0x1b0 [ 2272.387540] ion_system_heap_allocate+0x133/0x8c0 [ 2272.392414] ? _raw_spin_unlock+0x29/0x40 [ 2272.396585] ? _ion_heap_freelist_drain+0x6e/0x410 [ 2272.401534] ? ion_system_contig_heap_create+0x130/0x130 [ 2272.407005] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2272.412046] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2272.416926] ion_alloc+0x27a/0x810 [ 2272.420510] ? ion_dma_buf_release+0x40/0x40 [ 2272.424936] ? __might_fault+0x177/0x1b0 [ 2272.429038] ion_ioctl+0xea/0x1f0 [ 2272.432499] ? ion_query_heaps+0x360/0x360 [ 2272.436743] ? ion_query_heaps+0x360/0x360 [ 2272.441056] do_vfs_ioctl+0x75a/0xff0 [ 2272.445071] ? ioctl_preallocate+0x1a0/0x1a0 [ 2272.449518] ? lock_downgrade+0x740/0x740 [ 2272.453678] ? __fget+0x225/0x360 [ 2272.453686] lowmem_reserve[]: [ 2272.457133] ? do_vfs_ioctl+0xff0/0xff0 [ 2272.457135] 0 0 [ 2272.460261] ? security_file_ioctl+0x83/0xb0 [ 2272.460271] SyS_ioctl+0x7f/0xb0 [ 2272.460280] ? do_vfs_ioctl+0xff0/0xff0 [ 2272.460290] do_syscall_64+0x1d5/0x640 [ 2272.460304] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2272.460312] RIP: 0033:0x466459 [ 2272.460317] RSP: 002b:00007fb2f6ce7188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2272.460326] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 2272.460331] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2272.460336] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2272.460342] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2272.460347] R13: 00007ffde948695f R14: 00007fb2f6ce7300 R15: 0000000000022000 [ 2272.469325] lowmem_reserve[]: [ 2272.497918] 0 [ 2272.518065] 0 [ 2272.544452] 0 0 [ 2272.553355] 2717 2718 2718 2718 [ 2272.556842] Node 0 DMA32 free:17924kB min:36200kB low:45248kB high:54296kB active_anon:58736kB inactive_anon:191076kB active_file:88kB inactive_file:4kB unevictable:0kB writepending:0kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:7680kB pagetables:3364kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2272.601329] lowmem_reserve[]: 0 0 0 0 0 [ 2272.602539] Node 1 [ 2272.605366] Node 0 [ 2272.605392] Normal free:26916kB min:53696kB low:67120kB high:80544kB active_anon:1612kB inactive_anon:39084kB active_file:16kB inactive_file:0kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:288kB pagetables:344kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2272.607604] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2272.636152] lowmem_reserve[]: [ 2272.684919] lowmem_reserve[]: 0 0 0 0 0 [ 2272.715494] 0 0 0 0 0 [ 2272.732661] Node 0 DMA: 44*4kB (UME) 13*8kB (UME) 6*16kB (UM) 7*32kB (UME) 7*64kB (UME) 4*128kB (UME) 3*256kB (UME) 3*512kB (UME) 1*1024kB (E) 1*2048kB (M) 1*4096kB (U) = 11032kB [ 2272.733489] Node 1 Normal free:74480kB min:53696kB low:67120kB high:80544kB active_anon:1612kB inactive_anon:39084kB active_file:16kB inactive_file:1300kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:288kB pagetables:344kB bounce:0kB free_pcp:320kB local_pcp:100kB free_cma:0kB [ 2272.789311] lowmem_reserve[]: 0 0 0 0 0 [ 2272.812791] Node 0 DMA: 44*4kB (UME) 13*8kB (UME) 6*16kB (UM) 7*32kB (UME) 7*64kB (UME) 4*128kB (UME) 3*256kB (UME) 3*512kB (UME) 1*1024kB (E) 1*2048kB (M) 1*4096kB (U) = 11032kB [ 2272.832157] Node 0 DMA32: 271*4kB (UE) 64*8kB (UE) 13*16kB (ME) 12*32kB (UM) 853*64kB (UM) 3*128kB (UM) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 57164kB [ 2272.841459] Node 0 DMA32: 272*4kB (UME) 63*8kB (E) 13*16kB (UE) 0*32kB 775*64kB (UM) 3*128kB (UM) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 51784kB [ 2272.893043] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2272.905643] Node 1 Normal: 0*4kB 0*8kB 1*16kB (U) 709*32kB (U) 1879*64kB (UM) 93*128kB (U) 1*256kB (U) 1*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 155632kB [ 2272.919170] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2272.949543] systemd-journald[31065]: File /run/log/journal/04d8c135ee6b410280ba31a58c89679d/system.journal corrupted or uncleanly shut down, renaming and replacing. [ 2272.971984] Node 1 Normal: 0*4kB 0*8kB 0*16kB 477*32kB (U) 1271*64kB (UM) 93*128kB (U) 1*256kB (U) 1*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 109280kB [ 2272.996009] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2273.038723] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2273.042603] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2273.101880] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2273.102146] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2273.112540] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2273.134466] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2273.146091] 60547 total pagecache pages [ 2273.155399] 0 pages in swap cache [ 2273.158933] Swap cache stats: add 0, delete 0, find 0/0 [ 2273.164377] Free swap = 0kB [ 2273.167409] Total swap = 0kB [ 2273.174629] 2097051 pages RAM [ 2273.177767] 0 pages HighMem/MovableOnly [ 2273.181810] 363848 pages reserved [ 2273.185272] 0 pages cma reserved [ 2273.195663] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2273.222580] 59934 total pagecache pages [ 2273.235453] 0 pages in swap cache [ 2273.242017] syz-executor.1: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2273.254752] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 2273.264250] CPU: 0 PID: 31069 Comm: syz-executor.1 Not tainted 4.14.229-syzkaller #0 [ 2273.272164] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2273.281521] Call Trace: [ 2273.284242] dump_stack+0x1b2/0x281 [ 2273.287908] warn_alloc.cold+0x96/0x1cc [ 2273.292105] ? zone_watermark_ok_safe+0x220/0x220 [ 2273.296982] __alloc_pages_nodemask+0x2127/0x2720 [ 2273.301848] ? lock_acquire+0x170/0x3f0 [ 2273.305846] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2273.310709] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2273.316694] ? __mutex_unlock_slowpath+0x75/0x770 [ 2273.321543] ? retint_kernel+0x2d/0x2d [ 2273.325441] alloc_pages_current+0x155/0x260 [ 2273.329885] ion_page_pool_alloc+0x118/0x1b0 [ 2273.334324] ion_system_heap_allocate+0x133/0x8c0 [ 2273.339213] ? ion_alloc+0x187/0x810 [ 2273.342946] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2273.348559] ? ion_system_contig_heap_create+0x130/0x130 [ 2273.354019] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2273.359049] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2273.363939] ion_alloc+0x204/0x810 [ 2273.367496] ? ion_dma_buf_release+0x40/0x40 [ 2273.371921] ? __might_fault+0x177/0x1b0 [ 2273.376009] ion_ioctl+0xea/0x1f0 [ 2273.379474] ? ion_query_heaps+0x360/0x360 [ 2273.383851] ? ion_query_heaps+0x360/0x360 [ 2273.388128] do_vfs_ioctl+0x75a/0xff0 [ 2273.391942] ? ioctl_preallocate+0x1a0/0x1a0 [ 2273.396359] ? lock_downgrade+0x740/0x740 [ 2273.400525] ? __fget+0x225/0x360 [ 2273.403992] ? do_vfs_ioctl+0xff0/0xff0 [ 2273.407977] ? security_file_ioctl+0x83/0xb0 [ 2273.412399] SyS_ioctl+0x7f/0xb0 [ 2273.415776] ? do_vfs_ioctl+0xff0/0xff0 [ 2273.419755] do_syscall_64+0x1d5/0x640 [ 2273.423685] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2273.428881] RIP: 0033:0x466459 [ 2273.432073] RSP: 002b:00007f431c6b2188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2273.439807] RAX: ffffffffffffffda RBX: 000000000056c008 RCX: 0000000000466459 [ 2273.447083] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2273.454358] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2273.462357] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c008 [ 2273.469634] R13: 00007ffd8dc7798f R14: 00007f431c6b2300 R15: 0000000000022000 [ 2273.494862] Swap cache stats: add 0, delete 0, find 0/0 [ 2273.504597] Free swap = 0kB [ 2273.507674] Total swap = 0kB [ 2273.507852] syz-executor.5: [ 2273.510768] 2097051 pages RAM [ 2273.510772] 0 pages HighMem/MovableOnly [ 2273.510776] 363848 pages reserved [ 2273.510779] 0 pages cma reserved [ 2273.510788] Out of memory (oom_kill_allocating_task): Kill process 31058 (syz-executor.5) score 0 or sacrifice child [ 2273.510893] Killed process 31058 (syz-executor.5) total-vm:93516kB, anon-rss:164kB, file-rss:34820kB, shmem-rss:0kB [ 2273.568341] oom_reaper: reaped process 31058 (syz-executor.5), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 2273.657078] page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2273.714461] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 2273.724174] systemd-journald[31065]: /dev/kmsg buffer overrun, some messages lost. [ 2273.742295] CPU: 1 PID: 31072 Comm: syz-executor.5 Not tainted 4.14.229-syzkaller #0 [ 2273.750309] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2273.759673] Call Trace: [ 2273.762327] dump_stack+0x1b2/0x281 [ 2273.765995] warn_alloc.cold+0x96/0x1cc [ 2273.769991] ? zone_watermark_ok_safe+0x220/0x220 [ 2273.774868] __alloc_pages_nodemask+0x2127/0x2720 [ 2273.779756] ? ___preempt_schedule+0x16/0x18 [ 2273.784215] ? lock_acquire+0x170/0x3f0 [ 2273.788229] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2273.793106] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2273.798931] ? __mutex_unlock_slowpath+0x75/0x770 [ 2273.803796] alloc_pages_current+0x155/0x260 [ 2273.808226] ion_page_pool_alloc+0x118/0x1b0 [ 2273.812656] ion_system_heap_allocate+0x133/0x8c0 [ 2273.817524] ? ion_alloc+0x187/0x810 [ 2273.821285] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2273.826766] ? ion_system_contig_heap_create+0x130/0x130 [ 2273.832240] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2273.837279] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2273.842151] ion_alloc+0x204/0x810 [ 2273.845718] ? ion_dma_buf_release+0x40/0x40 [ 2273.850145] ? __might_fault+0x177/0x1b0 [ 2273.854231] ion_ioctl+0xea/0x1f0 [ 2273.857696] ? ion_query_heaps+0x360/0x360 [ 2273.861945] ? ion_query_heaps+0x360/0x360 [ 2273.866285] do_vfs_ioctl+0x75a/0xff0 [ 2273.870132] ? ioctl_preallocate+0x1a0/0x1a0 [ 2273.874551] ? lock_downgrade+0x740/0x740 [ 2273.878717] ? __fget+0x225/0x360 [ 2273.882188] ? do_vfs_ioctl+0xff0/0xff0 [ 2273.886180] ? security_file_ioctl+0x83/0xb0 [ 2273.890606] SyS_ioctl+0x7f/0xb0 [ 2273.893983] ? do_vfs_ioctl+0xff0/0xff0 [ 2273.898073] do_syscall_64+0x1d5/0x640 [ 2273.901986] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2273.907188] RIP: 0033:0x466459 15:00:28 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x80000000, 0xe}) ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000000)={'sit0\x00', &(0x7f00000000c0)={'ip6_vti0\x00', 0x0, 0x29, 0x4, 0x6, 0x7, 0x0, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x1, 0x40, 0x5, 0x7}}) [ 2273.910421] RSP: 002b:00007f17b5606188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2273.918141] RAX: ffffffffffffffda RBX: 000000000056c0b0 RCX: 0000000000466459 [ 2273.925427] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2273.932706] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2273.939990] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c0b0 [ 2273.947285] R13: 00007fff4326a6cf R14: 00007f17b5606300 R15: 0000000000022000 [ 2274.402242] warn_alloc_show_mem: 2 callbacks suppressed [ 2274.402247] Mem-Info: [ 2274.441927] active_anon:15102 inactive_anon:59573 isolated_anon:0 [ 2274.441927] active_file:114 inactive_file:99 isolated_file:0 [ 2274.441927] unevictable:0 dirty:10 writeback:0 unstable:0 [ 2274.441927] slab_reclaimable:12413 slab_unreclaimable:121173 [ 2274.441927] mapped:52662 shmem:60179 pagetables:899 bounce:0 [ 2274.441927] free:29989 free_pcp:238 free_cma:0 [ 2274.498992] syz-executor.3: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2274.533596] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 2274.558135] CPU: 1 PID: 31074 Comm: syz-executor.3 Not tainted 4.14.229-syzkaller #0 [ 2274.566063] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2274.575425] Call Trace: [ 2274.578023] dump_stack+0x1b2/0x281 [ 2274.581785] warn_alloc.cold+0x96/0x1cc [ 2274.585818] ? zone_watermark_ok_safe+0x220/0x220 [ 2274.590691] __alloc_pages_nodemask+0x2127/0x2720 [ 2274.595550] ? _raw_spin_unlock_irq+0x5a/0x80 [ 2274.600087] ? finish_task_switch+0x178/0x610 [ 2274.604599] ? finish_task_switch+0x14d/0x610 [ 2274.609130] ? lock_acquire+0x170/0x3f0 [ 2274.613125] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2274.618011] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2274.623523] ? __mutex_unlock_slowpath+0x75/0x770 [ 2274.628390] ? alloc_pages_current+0x21c/0x260 [ 2274.633025] alloc_pages_current+0x155/0x260 [ 2274.637449] ion_page_pool_alloc+0x118/0x1b0 [ 2274.641881] ion_system_heap_allocate+0x133/0x8c0 [ 2274.646742] ? ion_alloc+0x187/0x810 [ 2274.650465] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2274.655936] ? ion_system_contig_heap_create+0x130/0x130 [ 2274.661409] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2274.666447] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2274.671419] ion_alloc+0x204/0x810 [ 2274.674999] ? ion_dma_buf_release+0x40/0x40 [ 2274.679421] ? __might_fault+0x177/0x1b0 [ 2274.683495] ion_ioctl+0xea/0x1f0 [ 2274.686961] ? ion_query_heaps+0x360/0x360 [ 2274.691409] ? ion_query_heaps+0x360/0x360 [ 2274.696024] do_vfs_ioctl+0x75a/0xff0 [ 2274.699850] ? ioctl_preallocate+0x1a0/0x1a0 [ 2274.704296] ? lock_downgrade+0x740/0x740 [ 2274.708457] ? __fget+0x225/0x360 [ 2274.711918] ? do_vfs_ioctl+0xff0/0xff0 [ 2274.715905] ? security_file_ioctl+0x83/0xb0 [ 2274.720329] SyS_ioctl+0x7f/0xb0 [ 2274.723711] ? do_vfs_ioctl+0xff0/0xff0 [ 2274.727704] do_syscall_64+0x1d5/0x640 [ 2274.731610] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2274.736809] RIP: 0033:0x466459 [ 2274.740005] RSP: 002b:00007fb2f6ce7188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2274.747738] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 2274.755019] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2274.762384] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2274.766348] syz-executor.1: [ 2274.769692] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2274.769698] R13: 00007ffde948695f R14: 00007fb2f6ce7300 R15: 0000000000022000 [ 2274.811912] oom_reaper: reaped process 31066 (syz-executor.1), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 2274.825296] Node 0 active_anon:58684kB inactive_anon:193912kB active_file:32kB inactive_file:32kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:174396kB dirty:4kB writeback:0kB shmem:195988kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2274.918094] Node 1 active_anon:1624kB inactive_anon:44380kB active_file:684kB inactive_file:2320kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:37852kB dirty:36kB writeback:0kB shmem:44728kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2274.928066] page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2275.004296] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 2275.007358] Node 0 DMA free:11032kB min:204kB low:252kB high:300kB active_anon:24kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2275.058202] CPU: 0 PID: 31066 Comm: syz-executor.1 Not tainted 4.14.229-syzkaller #0 [ 2275.066122] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2275.075492] Call Trace: [ 2275.078090] dump_stack+0x1b2/0x281 [ 2275.081738] warn_alloc.cold+0x96/0x1cc [ 2275.085744] ? zone_watermark_ok_safe+0x220/0x220 [ 2275.090607] ? unreserve_highatomic_pageblock+0x336/0x460 [ 2275.096431] ? wait_for_completion_io+0x10/0x10 [ 2275.103091] __alloc_pages_nodemask+0x2127/0x2720 [ 2275.107997] ? lock_acquire+0x170/0x3f0 [ 2275.112000] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2275.116855] ? ion_page_pool_alloc+0x9e/0x1b0 [ 2275.121372] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2275.127027] alloc_pages_current+0x155/0x260 [ 2275.131456] ion_page_pool_alloc+0x118/0x1b0 [ 2275.132647] lowmem_reserve[]: [ 2275.135896] ion_system_heap_allocate+0x133/0x8c0 [ 2275.135908] ? ion_alloc+0x187/0x810 [ 2275.135922] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2275.153414] ? ion_system_contig_heap_create+0x130/0x130 [ 2275.159138] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2275.159300] 0 [ 2275.164193] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2275.164206] ion_alloc+0x204/0x810 [ 2275.164220] ? ion_dma_buf_release+0x40/0x40 [ 2275.178939] ? __might_fault+0x177/0x1b0 [ 2275.182768] 2717 2718 [ 2275.183187] ion_ioctl+0xea/0x1f0 [ 2275.183189] 2718 2718 [ 2275.185764] ? ion_query_heaps+0x360/0x360 [ 2275.185786] ? ion_query_heaps+0x360/0x360 [ 2275.185798] do_vfs_ioctl+0x75a/0xff0 [ 2275.185814] ? ioctl_preallocate+0x1a0/0x1a0 [ 2275.208448] ? lock_downgrade+0x740/0x740 [ 2275.212614] ? __fget+0x225/0x360 [ 2275.212630] ? do_vfs_ioctl+0xff0/0xff0 [ 2275.220060] ? security_file_ioctl+0x83/0xb0 [ 2275.224488] SyS_ioctl+0x7f/0xb0 [ 2275.226119] Node 0 [ 2275.227877] ? do_vfs_ioctl+0xff0/0xff0 [ 2275.227891] do_syscall_64+0x1d5/0x640 [ 2275.238005] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2275.243202] RIP: 0033:0x466459 [ 2275.243439] DMA32 free:159888kB min:36200kB low:45248kB high:54296kB active_anon:58656kB inactive_anon:193912kB active_file:28kB inactive_file:832kB unevictable:0kB writepending:8kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:7488kB pagetables:3172kB bounce:0kB free_pcp:524kB local_pcp:240kB free_cma:0kB [ 2275.246397] RSP: 002b:00007f431c6d3188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2275.246408] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 2275.246413] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2275.246419] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2275.246429] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2275.313396] R13: 00007ffd8dc7798f R14: 00007f431c6d3300 R15: 0000000000022000 [ 2275.360060] lowmem_reserve[]: 0 0 0 0 0 [ 2275.373038] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2275.453791] warn_alloc_show_mem: 1 callbacks suppressed [ 2275.453795] Mem-Info: [ 2275.480940] lowmem_reserve[]: 0 0 0 0 0 [ 2275.502600] Node 1 Normal free:239896kB min:53696kB low:67120kB high:80544kB active_anon:1724kB inactive_anon:44380kB active_file:824kB inactive_file:2580kB unevictable:0kB writepending:44kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:320kB pagetables:440kB bounce:0kB free_pcp:280kB local_pcp:192kB free_cma:0kB [ 2275.508105] active_anon:15101 inactive_anon:59573 isolated_anon:0 [ 2275.508105] active_file:213 inactive_file:1028 isolated_file:0 [ 2275.508105] unevictable:0 dirty:13 writeback:0 unstable:0 [ 2275.508105] slab_reclaimable:12427 slab_unreclaimable:121890 [ 2275.508105] mapped:53540 shmem:60179 pagetables:903 bounce:0 [ 2275.508105] free:76573 free_pcp:174 free_cma:0 [ 2275.625063] lowmem_reserve[]: 0 0 0 0 0 [ 2275.643164] Node 0 DMA: 3*4kB (UME) 5*8kB (UME) 5*16kB (UM) 7*32kB (UME) 6*64kB (UME) 3*128kB (ME) 5*256kB (UME) 3*512kB (UME) 1*1024kB (E) 1*2048kB (M) 1*4096kB (U) = 11108kB [ 2275.704436] Node 0 DMA32: 198*4kB (ME) 191*8kB (ME) 77*16kB (UME) 24*32kB (UM) 35*64kB (UM) 3*128kB (UME) 126*256kB (UM) 4*512kB (U) 1*1024kB (U) 0*2048kB 0*4096kB = 42272kB [ 2275.781967] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2275.798192] Node 0 active_anon:58680kB inactive_anon:193912kB active_file:28kB inactive_file:1532kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:175604kB dirty:8kB writeback:0kB shmem:195988kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2275.837548] Node 1 Normal: 1*4kB (M) 1*8kB (M) 2*16kB (UM) 2*32kB (UM) 607*64kB (U) 657*128kB (UM) 103*256kB (UM) 77*512kB (UM) 24*1024kB (UM) 11*2048kB (UM) 0*4096kB = 235948kB [ 2275.913759] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2275.932870] Node 1 active_anon:1724kB inactive_anon:44380kB active_file:824kB inactive_file:2580kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:38656kB dirty:44kB writeback:0kB shmem:44728kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2275.953669] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2276.027648] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2276.071989] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2276.092111] Node 0 DMA free:11120kB min:204kB low:252kB high:300kB active_anon:24kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2276.108118] 61478 total pagecache pages [ 2276.152334] 0 pages in swap cache [ 2276.163610] Swap cache stats: add 0, delete 0, find 0/0 [ 2276.197984] Free swap = 0kB [ 2276.207769] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2276.209950] Total swap = 0kB [ 2276.228204] 2097051 pages RAM [ 2276.234763] 0 pages HighMem/MovableOnly [ 2276.259128] Node 0 DMA32 free:41596kB min:36200kB low:45248kB high:54296kB active_anon:58656kB inactive_anon:193912kB active_file:28kB inactive_file:1664kB unevictable:0kB writepending:24kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:7488kB pagetables:3172kB bounce:0kB free_pcp:952kB local_pcp:256kB free_cma:0kB [ 2276.275811] 363848 pages reserved [ 2276.330586] 0 pages cma reserved [ 2276.388085] lowmem_reserve[]: 0 0 0 0 0 [ 2276.428089] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2276.558109] lowmem_reserve[]: 0 0 0 0 0 [ 2276.562158] Node 1 Normal free:104000kB min:53696kB low:67120kB high:80544kB active_anon:1724kB inactive_anon:44380kB active_file:824kB inactive_file:2628kB unevictable:0kB writepending:60kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:320kB pagetables:440kB bounce:0kB free_pcp:308kB local_pcp:108kB free_cma:0kB [ 2276.693206] lowmem_reserve[]: 0 0 0 0 0 [ 2276.697264] Node 0 DMA: 3*4kB (UME) 5*8kB (UME) 4*16kB (M) 6*32kB (ME) 6*64kB (UME) 3*128kB (ME) 5*256kB (UME) 3*512kB (UME) 1*1024kB (E) 1*2048kB (M) 1*4096kB (U) = 11060kB [ 2276.727049] systemd-journal invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=0 [ 2276.756264] systemd-journal cpuset=/ mems_allowed=0-1 [ 2276.776396] Node 0 DMA32: 653*4kB (ME) 223*8kB (ME) 76*16kB (ME) 24*32kB (UM) 18*64kB (UM) 2*128kB (ME) 28*256kB (UM) 4*512kB (U) 1*1024kB (U) 0*2048kB 0*4096kB = 18028kB [ 2276.807101] CPU: 0 PID: 31065 Comm: systemd-journal Not tainted 4.14.229-syzkaller #0 [ 2276.815109] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2276.824484] Call Trace: [ 2276.827097] dump_stack+0x1b2/0x281 [ 2276.830748] dump_header+0x178/0x82f [ 2276.834512] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2276.839635] ? ___ratelimit+0x2cd/0x530 [ 2276.843629] oom_kill_process.cold+0x10/0xa40 [ 2276.848151] out_of_memory+0xe3e/0x1190 [ 2276.852150] ? oom_killer_disable+0x1c0/0x1c0 [ 2276.856691] ? mutex_trylock+0x152/0x1a0 [ 2276.860775] __alloc_pages_nodemask+0x23e1/0x2720 [ 2276.865651] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2276.870516] ? entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2276.875896] ? debug_check_no_obj_freed+0x2c0/0x680 [ 2276.880931] ? cache_grow_begin+0x3f/0x700 [ 2276.885187] cache_grow_begin+0x91/0x700 [ 2276.889269] fallback_alloc+0x207/0x2c0 [ 2276.893345] kmem_cache_alloc+0x1e5/0x3c0 [ 2276.897510] getname_flags+0xc8/0x550 [ 2276.901317] user_path_at_empty+0x2a/0x50 [ 2276.905483] SyS_faccessat+0x21b/0x680 [ 2276.909411] ? SyS_fallocate+0x80/0x80 [ 2276.913320] ? do_syscall_64+0x4c/0x640 [ 2276.917310] ? SyS_faccessat+0x680/0x680 [ 2276.921474] do_syscall_64+0x1d5/0x640 [ 2276.925385] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2276.930587] RIP: 0033:0x7f86e44d39c7 [ 2276.934308] RSP: 002b:00007ffe17829198 EFLAGS: 00000246 ORIG_RAX: 0000000000000015 [ 2276.942030] RAX: ffffffffffffffda RBX: 00007ffe1782c1c0 RCX: 00007f86e44d39c7 [ 2276.949314] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000055f4e0e639a3 [ 2276.956596] RBP: 00007ffe178292e0 R08: 000055f4e0e593e5 R09: 0000000000000018 [ 2276.957323] syz-executor.5: [ 2276.963893] R10: 0000000000000069 R11: 0000000000000246 R12: 0000000000000000 [ 2276.963899] R13: 0000000000000000 R14: 000055f4e15e7300 R15: 00007ffe178297d0 [ 2276.994024] syz-executor.5: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2277.000309] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2277.026183] Node 1 Normal: 33*4kB (M) 22*8kB (M) 23*16kB (M) 17*32kB (M) 19*64kB (UM) 5*128kB (M) 3*256kB (UM) 3*512kB (UM) 1*1024kB (M) 10*2048kB (UM) 0*4096kB = 26884kB [ 2277.040439] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 2277.047276] CPU: 1 PID: 31058 Comm: syz-executor.5 Not tainted 4.14.229-syzkaller #0 [ 2277.050349] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2277.055738] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2277.065679] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2277.074998] Call Trace: [ 2277.075024] dump_stack+0x1b2/0x281 [ 2277.075037] warn_alloc.cold+0x96/0x1cc [ 2277.075049] ? zone_watermark_ok_safe+0x220/0x220 [ 2277.075064] ? usleep_range+0x130/0x130 [ 2277.083836] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2277.086477] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 2277.090439] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2277.094559] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 2277.099510] 60232 total pagecache pages [ 2277.103647] ? run_timer_softirq+0x5a0/0x5a0 [ 2277.112679] 0 pages in swap cache [ 2277.117738] __alloc_pages_nodemask+0x2127/0x2720 [ 2277.126909] Swap cache stats: add 0, delete 0, find 0/0 [ 2277.132056] ? lock_acquire+0x170/0x3f0 [ 2277.132074] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2277.132089] ? ion_page_pool_alloc+0x9e/0x1b0 [ 2277.136057] Free swap = 0kB [ 2277.140469] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2277.140490] alloc_pages_current+0x155/0x260 [ 2277.140503] ion_page_pool_alloc+0x118/0x1b0 [ 2277.143949] Total swap = 0kB [ 2277.148885] ion_system_heap_allocate+0x133/0x8c0 [ 2277.148896] ? ion_alloc+0x187/0x810 [ 2277.148907] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2277.148915] ? ion_system_contig_heap_create+0x130/0x130 [ 2277.148925] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2277.148938] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2277.148950] ion_alloc+0x204/0x810 [ 2277.154329] 2097051 pages RAM [ 2277.158328] ? ion_dma_buf_release+0x40/0x40 [ 2277.158342] ? __might_fault+0x177/0x1b0 [ 2277.158353] ion_ioctl+0xea/0x1f0 [ 2277.158368] ? ion_query_heaps+0x360/0x360 [ 2277.158380] ? ion_query_heaps+0x360/0x360 [ 2277.163239] 0 pages HighMem/MovableOnly [ 2277.167997] do_vfs_ioctl+0x75a/0xff0 [ 2277.171070] Mem-Info: [ 2277.177005] ? ioctl_preallocate+0x1a0/0x1a0 [ 2277.181563] 363848 pages reserved [ 2277.185911] ? lock_downgrade+0x740/0x740 [ 2277.189000] active_anon:15101 inactive_anon:59573 isolated_anon:0 [ 2277.189000] active_file:18 inactive_file:0 isolated_file:0 [ 2277.189000] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2277.189000] slab_reclaimable:12405 slab_unreclaimable:124163 [ 2277.189000] mapped:52673 shmem:60179 pagetables:903 bounce:0 [ 2277.189000] free:13881 free_pcp:6 free_cma:0 [ 2277.193774] ? __fget+0x225/0x360 [ 2277.198689] 0 pages cma reserved [ 2277.204081] ? do_vfs_ioctl+0xff0/0xff0 [ 2277.209608] Node 0 active_anon:58680kB inactive_anon:193912kB active_file:32kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:174872kB dirty:0kB writeback:0kB shmem:195988kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2277.214558] ? security_file_ioctl+0x83/0xb0 [ 2277.228090] Node 1 active_anon:1724kB inactive_anon:44380kB active_file:40kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:35820kB dirty:0kB writeback:0kB shmem:44728kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2277.231205] SyS_ioctl+0x7f/0xb0 [ 2277.235252] Node 0 [ 2277.238708] ? do_vfs_ioctl+0xff0/0xff0 [ 2277.238721] do_syscall_64+0x1d5/0x640 [ 2277.238735] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2277.238743] RIP: 0033:0x466459 [ 2277.238749] RSP: 002b:00007f17b5648188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2277.258086] DMA free:10956kB min:204kB low:252kB high:300kB active_anon:24kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2277.258402] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 2277.262803] lowmem_reserve[]: [ 2277.266244] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2277.266252] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2277.288072] 0 [ 2277.303832] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2277.303838] R13: 00007fff4326a6cf R14: 00007f17b5648300 R15: 0000000000022000 [ 2277.511320] syz-executor.1: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2277.512158] page allocation failure: order:0 [ 2277.537685] syz-executor.1 cpuset= [ 2277.540936] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2277.548354] / mems_allowed=0-1 [ 2277.570614] CPU: 0 PID: 31066 Comm: syz-executor.1 Not tainted 4.14.229-syzkaller #0 [ 2277.582313] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2277.583586] syz-executor.5 cpuset= [ 2277.591769] Call Trace: [ 2277.591796] dump_stack+0x1b2/0x281 [ 2277.591814] warn_alloc.cold+0x96/0x1cc [ 2277.591825] ? zone_watermark_ok_safe+0x220/0x220 [ 2277.591847] __alloc_pages_nodemask+0x2127/0x2720 [ 2277.591857] ? lock_acquire+0x170/0x3f0 [ 2277.591871] ? lock_acquire+0x170/0x3f0 [ 2277.591887] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2277.591905] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2277.634341] ? __mutex_unlock_slowpath+0x75/0x770 [ 2277.639334] alloc_pages_current+0x155/0x260 [ 2277.643763] ion_page_pool_alloc+0x118/0x1b0 [ 2277.648191] ion_system_heap_allocate+0x133/0x8c0 [ 2277.653093] ? _raw_spin_unlock+0x29/0x40 [ 2277.657259] ? _ion_heap_freelist_drain+0x6e/0x410 [ 2277.662214] ? ion_system_contig_heap_create+0x130/0x130 [ 2277.662258] / [ 2277.667683] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2277.667696] mems_allowed=0-1 [ 2277.669399] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2277.669412] ion_alloc+0x27a/0x810 [ 2277.669425] ? ion_dma_buf_release+0x40/0x40 [ 2277.669436] ? __might_fault+0x177/0x1b0 [ 2277.669447] ion_ioctl+0xea/0x1f0 [ 2277.669463] ? ion_query_heaps+0x360/0x360 [ 2277.669475] ? ion_query_heaps+0x360/0x360 [ 2277.706562] do_vfs_ioctl+0x75a/0xff0 [ 2277.710373] ? ioctl_preallocate+0x1a0/0x1a0 [ 2277.714791] ? lock_downgrade+0x740/0x740 [ 2277.718953] ? __fget+0x225/0x360 [ 2277.722416] ? do_vfs_ioctl+0xff0/0xff0 [ 2277.726405] ? security_file_ioctl+0x83/0xb0 [ 2277.730834] SyS_ioctl+0x7f/0xb0 [ 2277.734205] ? do_vfs_ioctl+0xff0/0xff0 [ 2277.738192] do_syscall_64+0x1d5/0x640 [ 2277.742093] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2277.747460] RIP: 0033:0x466459 [ 2277.750653] RSP: 002b:00007f431c6d3188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2277.758392] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 2277.765671] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2277.772952] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2277.780230] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2277.787945] R13: 00007ffd8dc7798f R14: 00007f431c6d3300 R15: 0000000000022000 [ 2277.798295] 2717 2718 2718 2718 [ 2277.801628] CPU: 1 PID: 31072 Comm: syz-executor.5 Not tainted 4.14.229-syzkaller #0 [ 2277.801744] Node 0 [ 2277.809610] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2277.809614] Call Trace: [ 2277.809634] dump_stack+0x1b2/0x281 [ 2277.809647] warn_alloc.cold+0x96/0x1cc [ 2277.809659] ? zone_watermark_ok_safe+0x220/0x220 [ 2277.809673] ? usleep_range+0x130/0x130 [ 2277.811911] DMA32 free:17544kB min:36200kB low:45248kB high:54296kB active_anon:58656kB inactive_anon:193912kB active_file:424kB inactive_file:16kB unevictable:0kB writepending:0kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:7488kB pagetables:3172kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2277.821262] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 2277.821276] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 2277.821285] ? run_timer_softirq+0x5a0/0x5a0 [ 2277.821305] __alloc_pages_nodemask+0x2127/0x2720 [ 2277.823874] lowmem_reserve[]: [ 2277.827517] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2277.831522] 0 [ 2277.836310] ? migrate_swap_stop+0x880/0x880 [ 2277.840305] 0 [ 2277.868375] ? lock_acquire+0x170/0x3f0 [ 2277.868396] ? alloc_pages_current+0x73/0x260 [ 2277.868406] alloc_pages_current+0x155/0x260 [ 2277.868423] ion_page_pool_alloc+0x118/0x1b0 [ 2277.873554] warn_alloc_show_mem: 1 callbacks suppressed [ 2277.873558] Mem-Info: [ 2277.878548] ion_system_heap_allocate+0x133/0x8c0 [ 2277.878559] ? ion_alloc+0x187/0x810 [ 2277.878569] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2277.878578] ? ion_system_contig_heap_create+0x130/0x130 [ 2277.878592] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2277.883005] active_anon:15101 inactive_anon:59573 isolated_anon:0 [ 2277.883005] active_file:30 inactive_file:10 isolated_file:0 [ 2277.883005] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2277.883005] slab_reclaimable:12390 slab_unreclaimable:124177 [ 2277.883005] mapped:52651 shmem:60179 pagetables:903 bounce:0 [ 2277.883005] free:15052 free_pcp:0 free_cma:0 [ 2277.887856] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2277.891006] 0 [ 2277.895781] ion_alloc+0x204/0x810 [ 2277.897565] 0 [ 2277.901979] ? ion_dma_buf_release+0x40/0x40 [ 2277.901992] ? __might_fault+0x177/0x1b0 [ 2277.902003] ion_ioctl+0xea/0x1f0 [ 2277.902015] ? ion_query_heaps+0x360/0x360 [ 2277.903833] Node 0 active_anon:58680kB inactive_anon:193912kB active_file:88kB inactive_file:16kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:174876kB dirty:0kB writeback:0kB shmem:195988kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2277.907770] ? ion_query_heaps+0x360/0x360 [ 2277.912316] 0 [ 2277.916658] do_vfs_ioctl+0x75a/0xff0 [ 2277.921125] Node 1 active_anon:1724kB inactive_anon:44380kB active_file:32kB inactive_file:24kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:35728kB dirty:0kB writeback:0kB shmem:44728kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2277.926418] ? ioctl_preallocate+0x1a0/0x1a0 [ 2277.933665] ? lock_downgrade+0x740/0x740 [ 2277.937356] Node 0 [ 2277.942831] ? __fget+0x225/0x360 [ 2277.942842] ? do_vfs_ioctl+0xff0/0xff0 [ 2277.942853] ? security_file_ioctl+0x83/0xb0 [ 2277.942862] SyS_ioctl+0x7f/0xb0 [ 2277.942871] ? do_vfs_ioctl+0xff0/0xff0 [ 2277.942884] do_syscall_64+0x1d5/0x640 [ 2277.948394] Node 0 [ 2277.953385] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2277.986628] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2277.991392] RIP: 0033:0x466459 [ 2277.991398] RSP: 002b:00007f17b5606188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2277.991407] RAX: ffffffffffffffda RBX: 000000000056c0b0 RCX: 0000000000466459 [ 2277.991412] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2277.991417] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2277.991422] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c0b0 [ 2277.991432] R13: 00007fff4326a6cf R14: 00007f17b5606300 R15: 0000000000022000 [ 2277.993226] lowmem_reserve[]: 0 0 0 0 0 [ 2278.205290] Node 1 Normal free:60024kB min:53696kB low:67120kB high:80544kB active_anon:1728kB inactive_anon:44380kB active_file:4kB inactive_file:4156kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:320kB pagetables:440kB bounce:0kB free_pcp:764kB local_pcp:120kB free_cma:0kB [ 2278.248190] lowmem_reserve[]: 0 0 0 0 0 [ 2278.252199] DMA free:10952kB min:204kB low:252kB high:300kB active_anon:24kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2278.252220] Node 0 DMA: 2*4kB (ME) 4*8kB (ME) 4*16kB (M) 7*32kB (UME) 6*64kB (UME) 4*128kB (UME) 4*256kB (UME) 3*512kB (UME) 1*1024kB (E) 1*2048kB (M) 1*4096kB (U) = 10952kB [ 2278.282491] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2278.348087] Node 0 DMA32: 2316*4kB (UME) 297*8kB (UME) 133*16kB (UME) 160*32kB (UM) 58*64kB (UM) 23*128kB (UME) 20*256kB (UM) 4*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 32712kB [ 2278.354338] Node 0 [ 2278.378113] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2278.394380] Node 1 Normal: 3158*4kB (UM) 912*8kB (UM) 536*16kB (U) 716*32kB (UM) [ 2278.402125] DMA32 free:32624kB min:36200kB low:45248kB high:54296kB active_anon:58656kB inactive_anon:193912kB active_file:0kB inactive_file:48kB unevictable:0kB writepending:0kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:7488kB pagetables:3172kB bounce:0kB free_pcp:1320kB local_pcp:632kB free_cma:0kB [ 2278.448727] lowmem_reserve[]: 0 0 0 0 0 [ 2278.488066] 363*64kB (UM) 22*128kB (U) 2*256kB (U) 1*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 78488kB [ 2278.488107] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2278.488117] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2278.513207] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2278.568767] lowmem_reserve[]: 0 0 0 0 0 [ 2278.572814] Node 1 Normal free:36032kB min:53696kB low:67120kB high:80544kB active_anon:1728kB inactive_anon:44380kB active_file:1156kB inactive_file:992kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:320kB pagetables:440kB bounce:0kB free_pcp:688kB local_pcp:0kB free_cma:0kB [ 2278.604711] lowmem_reserve[]: 0 0 0 0 0 [ 2278.608812] Node 0 DMA: 2*4kB (ME) 4*8kB (ME) 4*16kB (M) 7*32kB (UME) 6*64kB (UME) 4*128kB (UME) 4*256kB (UME) 3*512kB (UME) 1*1024kB (E) 1*2048kB (M) 1*4096kB (U) = 10952kB [ 2278.614113] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2278.624643] Node 0 DMA32: 2073*4kB (UME) 299*8kB (UME) 137*16kB (UME) 159*32kB (UM) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 17964kB [ 2278.647677] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2278.650174] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2278.658512] Node 1 Normal: 45*4kB (UM) 25*8kB (M) 78*16kB (UM) 778*32kB (UM) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 26524kB [ 2278.668110] 60227 total pagecache pages [ 2278.682071] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2278.688241] 0 pages in swap cache [ 2278.695384] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2278.698471] syz-executor.5: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2278.707067] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2278.728321] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2278.733929] Swap cache stats: add 0, delete 0, find 0/0 [ 2278.736934] 60227 total pagecache pages [ 2278.746383] 0 pages in swap cache [ 2278.748067] Free swap = 0kB [ 2278.752861] Total swap = 0kB [ 2278.755927] 2097051 pages RAM [ 2278.758172] Swap cache stats: add 0, delete 0, find 0/0 [ 2278.764475] Free swap = 0kB [ 2278.765010] 0 pages HighMem/MovableOnly [ 2278.767518] Total swap = 0kB [ 2278.771591] 363848 pages reserved [ 2278.776836] 2097051 pages RAM [ 2278.781351] 0 pages HighMem/MovableOnly [ 2278.782368] syz-executor.5 cpuset= [ 2278.785428] 363848 pages reserved [ 2278.785438] / [ 2278.789062] 0 pages cma reserved [ 2278.792563] 0 pages cma reserved [ 2278.796072] mems_allowed=0-1 [ 2278.797545] Out of memory (oom_kill_allocating_task): Kill process 31065 (systemd-journal) score 0 or sacrifice child [ 2278.801765] CPU: 1 PID: 31058 Comm: syz-executor.5 Not tainted 4.14.229-syzkaller #0 [ 2278.807941] Killed process 31065 (systemd-journal) total-vm:46096kB, anon-rss:464kB, file-rss:4kB, shmem-rss:1384kB [ 2278.815252] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2278.815257] Call Trace: [ 2278.815280] dump_stack+0x1b2/0x281 [ 2278.815293] warn_alloc.cold+0x96/0x1cc [ 2278.815305] ? zone_watermark_ok_safe+0x220/0x220 [ 2278.815326] __alloc_pages_nodemask+0x2127/0x2720 [ 2278.864547] ? lock_acquire+0x170/0x3f0 [ 2278.868546] ? lock_acquire+0x170/0x3f0 [ 2278.872528] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2278.877376] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2278.882835] ? __mutex_unlock_slowpath+0x75/0x770 [ 2278.887684] alloc_pages_current+0x155/0x260 [ 2278.892117] ion_page_pool_alloc+0x118/0x1b0 [ 2278.896538] ion_system_heap_allocate+0x133/0x8c0 [ 2278.901418] ? _raw_spin_unlock+0x29/0x40 [ 2278.905583] ? _ion_heap_freelist_drain+0x6e/0x410 [ 2278.910536] ? ion_system_contig_heap_create+0x130/0x130 [ 2278.915990] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2278.921040] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2278.925890] ion_alloc+0x27a/0x810 [ 2278.929467] ? ion_dma_buf_release+0x40/0x40 [ 2278.933887] ? __might_fault+0x177/0x1b0 [ 2278.937959] ion_ioctl+0xea/0x1f0 [ 2278.941420] ? ion_query_heaps+0x360/0x360 [ 2278.945659] ? ion_query_heaps+0x360/0x360 [ 2278.949954] do_vfs_ioctl+0x75a/0xff0 [ 2278.953771] ? ioctl_preallocate+0x1a0/0x1a0 [ 2278.958176] ? lock_downgrade+0x740/0x740 [ 2278.962325] ? __fget+0x225/0x360 [ 2278.965785] ? do_vfs_ioctl+0xff0/0xff0 [ 2278.969758] ? security_file_ioctl+0x83/0xb0 [ 2278.974185] SyS_ioctl+0x7f/0xb0 [ 2278.977650] ? do_vfs_ioctl+0xff0/0xff0 [ 2278.981715] do_syscall_64+0x1d5/0x640 [ 2278.985623] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2278.990831] RIP: 0033:0x466459 [ 2278.994026] RSP: 002b:00007f17b5648188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2279.001739] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 2279.009111] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2279.016472] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2279.023743] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2279.031016] R13: 00007fff4326a6cf R14: 00007f17b5648300 R15: 0000000000022000 [ 2279.040266] oom_reaper: reaped process 31065 (systemd-journal), now anon-rss:0kB, file-rss:0kB, shmem-rss:1384kB [ 2279.053139] rs:main Q:Reg invoked oom-killer: gfp_mask=0x1c200ca(GFP_HIGHUSER_MOVABLE|__GFP_WRITE), nodemask=(null), order=0, oom_score_adj=0 [ 2279.066554] rs:main Q:Reg cpuset=/ mems_allowed=0-1 [ 2279.071725] CPU: 1 PID: 30445 Comm: rs:main Q:Reg Not tainted 4.14.229-syzkaller #0 [ 2279.078269] syz-executor.5: [ 2279.079524] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2279.079536] page allocation failure: order:4 [ 2279.082568] Call Trace: [ 2279.098961] dump_stack+0x1b2/0x281 [ 2279.102622] dump_header+0x178/0x82f [ 2279.106348] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2279.111468] ? ___ratelimit+0x2cd/0x530 [ 2279.115458] oom_kill_process.cold+0x10/0xa40 [ 2279.119979] out_of_memory+0xe3e/0x1190 [ 2279.123973] ? oom_killer_disable+0x1c0/0x1c0 [ 2279.128479] ? mutex_trylock+0x152/0x1a0 [ 2279.132575] __alloc_pages_nodemask+0x23e1/0x2720 [ 2279.137437] ? trace_hardirqs_on+0x10/0x10 [ 2279.138510] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2279.141713] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2279.141725] ? trace_hardirqs_on+0x10/0x10 [ 2279.152913] syz-executor.5 cpuset= [ 2279.154212] ? __radix_tree_lookup+0x1b5/0x2e0 [ 2279.158482] / [ 2279.161983] alloc_pages_current+0x155/0x260 [ 2279.166561] mems_allowed=0-1 [ 2279.168277] pagecache_get_page+0x3f5/0xab0 [ 2279.168289] grab_cache_page_write_begin+0x63/0x90 [ 2279.168300] ext4_da_write_begin+0x249/0xe70 [ 2279.168311] ? __ext4_journal_stop+0xe7/0x1b0 [ 2279.168322] ? ext4_write_begin+0x1260/0x1260 [ 2279.198483] ? balance_dirty_pages_ratelimited+0x8c6/0x1800 [ 2279.204206] generic_perform_write+0x1c9/0x420 [ 2279.208810] ? __mnt_drop_write_file+0x5f/0x90 [ 2279.213403] ? filemap_page_mkwrite+0x2d0/0x2d0 [ 2279.218097] ? current_time+0xb0/0xb0 [ 2279.221907] ? ext4_file_write_iter+0x1cc/0xd20 [ 2279.226625] __generic_file_write_iter+0x227/0x590 [ 2279.231566] ext4_file_write_iter+0x276/0xd20 [ 2279.236068] ? aa_file_perm+0x304/0xab0 [ 2279.240042] ? ext4_file_read_iter+0x330/0x330 [ 2279.244632] ? trace_hardirqs_on+0x10/0x10 [ 2279.248879] ? iov_iter_init+0xa6/0x1c0 [ 2279.252864] __vfs_write+0x44c/0x630 [ 2279.256582] ? kernel_read+0x110/0x110 [ 2279.260481] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2279.265518] vfs_write+0x17f/0x4d0 [ 2279.269060] SyS_write+0xf2/0x210 [ 2279.272513] ? SyS_read+0x210/0x210 [ 2279.276141] ? __do_page_fault+0x159/0xad0 [ 2279.280378] ? do_syscall_64+0x4c/0x640 [ 2279.284352] ? SyS_read+0x210/0x210 [ 2279.287989] do_syscall_64+0x1d5/0x640 [ 2279.291890] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2279.297282] RIP: 0033:0x7f5d1cf2e1cd [ 2279.300992] RSP: 002b:00007f5d1a4e9580 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 2279.308716] RAX: ffffffffffffffda RBX: 00007f5d10002a60 RCX: 00007f5d1cf2e1cd [ 2279.315991] RDX: 0000000000001000 RSI: 00007f5d10002a60 RDI: 0000000000000006 [ 2279.323264] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2279.330561] R10: 0000000000000000 R11: 0000000000000293 R12: 00007f5d100027a0 [ 2279.337834] R13: 00007f5d1a4e95a0 R14: 0000000000000050 R15: 0000000000001000 [ 2279.345246] CPU: 0 PID: 31072 Comm: syz-executor.5 Not tainted 4.14.229-syzkaller #0 [ 2279.352083] Mem-Info: [ 2279.353167] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2279.355581] active_anon:14987 inactive_anon:59573 isolated_anon:0 [ 2279.355581] active_file:13 inactive_file:13 isolated_file:0 [ 2279.355581] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2279.355581] slab_reclaimable:12374 slab_unreclaimable:124039 [ 2279.355581] mapped:52627 shmem:60179 pagetables:903 bounce:0 [ 2279.355581] free:13704 free_pcp:60 free_cma:0 [ 2279.364943] Call Trace: [ 2279.364968] dump_stack+0x1b2/0x281 [ 2279.364981] warn_alloc.cold+0x96/0x1cc [ 2279.364992] ? zone_watermark_ok_safe+0x220/0x220 [ 2279.365016] __alloc_pages_nodemask+0x2127/0x2720 [ 2279.365027] ? lock_acquire+0x170/0x3f0 [ 2279.365039] ? lock_acquire+0x170/0x3f0 [ 2279.365053] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2279.365069] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2279.365100] ? __mutex_unlock_slowpath+0x75/0x770 [ 2279.402905] Node 0 active_anon:58552kB inactive_anon:193912kB active_file:20kB inactive_file:24kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:174780kB dirty:0kB writeback:0kB shmem:195988kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2279.404576] alloc_pages_current+0x155/0x260 [ 2279.408636] Node 1 active_anon:1396kB inactive_anon:44380kB active_file:32kB inactive_file:28kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:35728kB dirty:0kB writeback:0kB shmem:44728kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2279.413493] ion_page_pool_alloc+0x118/0x1b0 [ 2279.423476] Node 0 [ 2279.427041] ion_system_heap_allocate+0x133/0x8c0 [ 2279.431946] DMA free:10952kB min:204kB low:252kB high:300kB active_anon:24kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2279.437416] ? _raw_spin_unlock+0x29/0x40 [ 2279.446692] lowmem_reserve[]: [ 2279.470106] ? _ion_heap_freelist_drain+0x6e/0x410 [ 2279.470116] ? ion_system_contig_heap_create+0x130/0x130 [ 2279.470127] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2279.470137] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2279.470147] ion_alloc+0x27a/0x810 [ 2279.470161] ? ion_dma_buf_release+0x40/0x40 [ 2279.470173] ? __might_fault+0x177/0x1b0 [ 2279.470183] ion_ioctl+0xea/0x1f0 [ 2279.470191] ? ion_query_heaps+0x360/0x360 [ 2279.470202] ? ion_query_heaps+0x360/0x360 [ 2279.470211] do_vfs_ioctl+0x75a/0xff0 [ 2279.470221] ? ioctl_preallocate+0x1a0/0x1a0 [ 2279.470236] ? lock_downgrade+0x740/0x740 [ 2279.470250] ? __fget+0x225/0x360 [ 2279.470260] ? do_vfs_ioctl+0xff0/0xff0 [ 2279.470273] ? security_file_ioctl+0x83/0xb0 [ 2279.470282] SyS_ioctl+0x7f/0xb0 [ 2279.470289] ? do_vfs_ioctl+0xff0/0xff0 [ 2279.470302] do_syscall_64+0x1d5/0x640 [ 2279.470316] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2279.470324] RIP: 0033:0x466459 [ 2279.470330] RSP: 002b:00007f17b5606188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2279.470341] RAX: ffffffffffffffda RBX: 000000000056c0b0 RCX: 0000000000466459 [ 2279.470346] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2279.470350] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2279.470355] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c0b0 [ 2279.470360] R13: 00007fff4326a6cf R14: 00007f17b5606300 R15: 0000000000022000 [ 2279.488698] warn_alloc_show_mem: 2 callbacks suppressed [ 2279.488702] Mem-Info: [ 2279.513809] syz-executor.1: [ 2279.519426] active_anon:14987 inactive_anon:59573 isolated_anon:0 [ 2279.519426] active_file:13 inactive_file:13 isolated_file:0 [ 2279.519426] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2279.519426] slab_reclaimable:12374 slab_unreclaimable:124039 [ 2279.519426] mapped:52627 shmem:60179 pagetables:903 bounce:0 [ 2279.519426] free:13704 free_pcp:61 free_cma:0 [ 2279.541267] systemd-journal: page allocation failure: order:0, mode:0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null) [ 2279.541290] systemd-journal cpuset=/ mems_allowed=0-1 [ 2279.541315] CPU: 1 PID: 31065 Comm: systemd-journal Not tainted 4.14.229-syzkaller #0 [ 2279.548089] Node 0 active_anon:58552kB inactive_anon:193912kB active_file:20kB inactive_file:24kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:174780kB dirty:0kB writeback:0kB shmem:195988kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2279.548581] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2279.553529] Node 1 active_anon:1396kB inactive_anon:44380kB active_file:32kB inactive_file:28kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:35728kB dirty:0kB writeback:0kB shmem:44728kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2279.560358] Call Trace: [ 2279.560383] dump_stack+0x1b2/0x281 [ 2279.560394] warn_alloc.cold+0x96/0x1cc [ 2279.560404] ? zone_watermark_ok_safe+0x220/0x220 [ 2279.560412] ? usleep_range+0x130/0x130 [ 2279.560426] ? queue_work_on+0x10d/0x1d0 [ 2279.566744] Node 0 [ 2279.570280] ? _find_next_bit+0xdb/0x100 [ 2279.570290] ? run_timer_softirq+0x5a0/0x5a0 [ 2279.570305] __alloc_pages_nodemask+0x2127/0x2720 [ 2279.570327] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2279.573959] DMA free:10952kB min:204kB low:252kB high:300kB active_anon:24kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2279.578401] alloc_pages_current+0x155/0x260 [ 2279.578415] filemap_fault+0x11a1/0x1ad0 [ 2279.578439] ext4_filemap_fault+0x84/0xb0 [ 2279.585628] lowmem_reserve[]: [ 2279.589093] __do_fault+0xfa/0x380 [ 2279.589102] __handle_mm_fault+0x2497/0x4620 [ 2279.589112] ? vm_insert_page+0x7c0/0x7c0 [ 2279.589129] ? mark_held_locks+0xa6/0xf0 [ 2279.589140] handle_mm_fault+0x455/0x9c0 [ 2279.593370] 0 [ 2279.597621] __do_page_fault+0x549/0xad0 [ 2279.601453] 2717 [ 2279.605824] ? spurious_fault+0x640/0x640 [ 2279.609996] 2718 [ 2279.613416] ? do_page_fault+0x60/0x500 [ 2279.617374] 2718 [ 2279.621781] page_fault+0x25/0x50 [ 2279.621795] RIP: 0010:strncpy_from_user+0x18c/0x2c0 [ 2279.621799] RSP: 0018:ffff8880542d7da8 EFLAGS: 00010246 [ 2279.621806] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 000000000000000c [ 2279.621810] RDX: 0000000000000000 RSI: 0000000000000fe4 RDI: ffff888063333598 [ 2279.621814] RBP: 000055f4e0e639a3 R08: 0000000000000fe4 R09: ffff888012b0c2c0 [ 2279.621823] R10: ffff888012b0d2bf R11: 0000000000000000 R12: 0000000000000fe4 [ 2279.625193] 2718 [ 2279.629161] R13: ffff888012b0c2dc R14: 000055f4e0e64987 R15: dffffc0000000000 [ 2279.629191] ? strncpy_from_user+0x18a/0x2c0 [ 2279.629203] getname_flags+0x10d/0x550 [ 2279.629213] user_path_at_empty+0x2a/0x50 [ 2279.629225] SyS_faccessat+0x21b/0x680 [ 2279.638345] ? SyS_fallocate+0x80/0x80 [ 2279.638356] ? do_syscall_64+0x4c/0x640 [ 2279.638362] ? SyS_faccessat+0x680/0x680 [ 2279.638369] do_syscall_64+0x1d5/0x640 [ 2279.638382] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2279.638390] RIP: 0033:0x7f86e44d39c7 [ 2279.638399] RSP: 002b:00007ffe17829198 EFLAGS: 00000246 [ 2279.641721] Node 0 [ 2279.649424] ORIG_RAX: 0000000000000015 [ 2279.649430] RAX: ffffffffffffffda RBX: 00007ffe1782c1c0 RCX: 00007f86e44d39c7 [ 2279.649434] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000055f4e0e639a3 [ 2279.649438] RBP: 00007ffe178292e0 R08: 000055f4e0e593e5 R09: 0000000000000018 [ 2279.649442] R10: 0000000000000069 R11: 0000000000000246 R12: 0000000000000000 [ 2279.649446] R13: 0000000000000000 R14: 000055f4e15e7300 R15: 00007ffe178297d0 [ 2279.649540] syz-executor.1: [ 2279.656802] DMA32 free:17500kB min:36200kB low:45248kB high:54296kB active_anon:58528kB inactive_anon:193912kB active_file:20kB inactive_file:24kB unevictable:0kB writepending:0kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:7488kB pagetables:3172kB bounce:0kB free_pcp:124kB local_pcp:120kB free_cma:0kB [ 2279.681459] page allocation failure: order:0 [ 2279.697952] lowmem_reserve[]: [ 2279.747426] syz-executor.5: [ 2279.749894] page allocation failure: order:0 [ 2279.777735] page allocation failure: order:0 [ 2279.786431] 0 [ 2279.817033] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 2279.823629] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 2279.843625] (null) [ 2279.846173] 0 [ 2279.846368] syz-executor.5 cpuset=/ [ 2279.850828] 0 [ 2279.872458] mems_allowed=0-1 [ 2279.901959] 2717 [ 2279.918641] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 2279.926104] (null) [ 2279.942897] (null) [ 2279.951408] 2718 [ 2279.967570] syz-executor.1 cpuset= [ 2279.979930] syz-executor.1 cpuset= [ 2279.996678] CPU: 1 PID: 31058 Comm: syz-executor.5 Not tainted 4.14.229-syzkaller #0 [ 2280.002385] / [ 2280.006673] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2280.013089] mems_allowed=0-1 [ 2280.015397] Call Trace: [ 2280.022909] 2718 [ 2280.023540] dump_stack+0x1b2/0x281 [ 2280.027488] 2718 [ 2280.031472] warn_alloc.cold+0x96/0x1cc [ 2280.031485] ? zone_watermark_ok_safe+0x220/0x220 [ 2280.031494] ? usleep_range+0x130/0x130 [ 2280.031503] ? try_to_free_pages+0x23f/0x6e0 [ 2280.031517] ? _find_next_bit+0xdb/0x100 [ 2280.035619] 0 [ 2280.039491] ? run_timer_softirq+0x5a0/0x5a0 [ 2280.039509] __alloc_pages_nodemask+0x2127/0x2720 [ 2280.039526] ? lock_acquire+0x170/0x3f0 [ 2280.039541] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2280.044722] 0 [ 2280.048459] ? ion_page_pool_alloc+0x9e/0x1b0 [ 2280.048481] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2280.048506] alloc_pages_current+0x155/0x260 [ 2280.075023] ion_page_pool_alloc+0x118/0x1b0 [ 2280.088069] 0 [ 2280.089858] ion_system_heap_allocate+0x133/0x8c0 [ 2280.101559] ? _raw_spin_unlock+0x29/0x40 [ 2280.101571] ? _ion_heap_freelist_drain+0x6e/0x410 [ 2280.101580] ? ion_system_contig_heap_create+0x130/0x130 [ 2280.101591] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2280.101607] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2280.138101] Node 0 [ 2280.140628] ion_alloc+0x27a/0x810 [ 2280.143768] DMA32 free:17500kB min:36200kB low:45248kB high:54296kB active_anon:58528kB inactive_anon:193912kB active_file:20kB inactive_file:24kB unevictable:0kB writepending:0kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:7488kB pagetables:3172kB bounce:0kB free_pcp:124kB local_pcp:120kB free_cma:0kB [ 2280.148280] ? ion_dma_buf_release+0x40/0x40 [ 2280.148293] ? __might_fault+0x177/0x1b0 [ 2280.148304] ion_ioctl+0xea/0x1f0 [ 2280.148313] ? ion_query_heaps+0x360/0x360 [ 2280.148325] ? ion_query_heaps+0x360/0x360 [ 2280.168065] lowmem_reserve[]: [ 2280.172758] do_vfs_ioctl+0x75a/0xff0 [ 2280.174893] 0 [ 2280.176689] ? ioctl_preallocate+0x1a0/0x1a0 [ 2280.198074] 0 [ 2280.199957] ? lock_downgrade+0x740/0x740 [ 2280.202017] 0 [ 2280.205571] ? __fget+0x225/0x360 [ 2280.218075] Node 0 [ 2280.218698] ? do_vfs_ioctl+0xff0/0xff0 [ 2280.228097] 0 [ 2280.231189] ? security_file_ioctl+0x83/0xb0 [ 2280.234212] 0 [ 2280.236293] SyS_ioctl+0x7f/0xb0 [ 2280.248091] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2280.250735] ? do_vfs_ioctl+0xff0/0xff0 [ 2280.254877] lowmem_reserve[]: [ 2280.259313] do_syscall_64+0x1d5/0x640 [ 2280.259328] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2280.259337] RIP: 0033:0x466459 [ 2280.259341] RSP: 002b:00007f17b5648188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2280.259355] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 2280.265213] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2280.265221] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2280.278083] Node 0 [ 2280.278789] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2280.283843] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2280.285631] R13: 00007fff4326a6cf R14: 00007f17b5648300 R15: 0000000000022000 [ 2280.298090] 0 [ 2280.325678] / [ 2280.328601] systemd-journal: [ 2280.351350] mems_allowed=0-1 [ 2280.376487] 0 [ 2280.392703] lowmem_reserve[]: [ 2280.401391] CPU: 0 PID: 31066 Comm: syz-executor.1 Not tainted 4.14.229-syzkaller #0 [ 2280.432581] 0 [ 2280.433281] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2280.436653] 0 0 [ 2280.461852] Call Trace: [ 2280.461877] dump_stack+0x1b2/0x281 [ 2280.461897] warn_alloc.cold+0x96/0x1cc [ 2280.461909] ? zone_watermark_ok_safe+0x220/0x220 [ 2280.461919] ? usleep_range+0x130/0x130 [ 2280.461927] ? try_to_free_pages+0x23f/0x6e0 [ 2280.461944] ? _find_next_bit+0xdb/0x100 [ 2280.461961] ? run_timer_softirq+0x5a0/0x5a0 [ 2280.461977] __alloc_pages_nodemask+0x2127/0x2720 [ 2280.461994] ? lock_acquire+0x170/0x3f0 [ 2280.462008] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2280.462019] ? ion_page_pool_alloc+0x9e/0x1b0 [ 2280.462035] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2280.462054] alloc_pages_current+0x155/0x260 [ 2280.462078] ion_page_pool_alloc+0x118/0x1b0 [ 2280.462088] ion_system_heap_allocate+0x133/0x8c0 [ 2280.462101] ? _raw_spin_unlock+0x29/0x40 [ 2280.536721] 0 [ 2280.545712] ? _ion_heap_freelist_drain+0x6e/0x410 [ 2280.545723] ? ion_system_contig_heap_create+0x130/0x130 [ 2280.545733] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2280.545744] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2280.545754] ion_alloc+0x27a/0x810 [ 2280.545768] ? ion_dma_buf_release+0x40/0x40 [ 2280.545779] ? __might_fault+0x177/0x1b0 [ 2280.545790] ion_ioctl+0xea/0x1f0 [ 2280.545798] ? ion_query_heaps+0x360/0x360 [ 2280.545809] ? ion_query_heaps+0x360/0x360 [ 2280.545819] do_vfs_ioctl+0x75a/0xff0 [ 2280.545831] ? ioctl_preallocate+0x1a0/0x1a0 [ 2280.545845] ? lock_downgrade+0x740/0x740 [ 2280.604498] 0 [ 2280.607631] ? __fget+0x225/0x360 [ 2280.634139] ? do_vfs_ioctl+0xff0/0xff0 [ 2280.664461] Node 1 [ 2280.668895] ? security_file_ioctl+0x83/0xb0 [ 2280.668906] SyS_ioctl+0x7f/0xb0 [ 2280.668915] ? do_vfs_ioctl+0xff0/0xff0 [ 2280.668926] do_syscall_64+0x1d5/0x640 [ 2280.668940] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2280.668948] RIP: 0033:0x466459 [ 2280.668953] RSP: 002b:00007f431c6d3188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2280.668963] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 2280.668968] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2280.668973] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2280.668978] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2280.668988] R13: 00007ffd8dc7798f R14: 00007f431c6d3300 R15: 0000000000022000 [ 2280.677963] Normal free:26700kB min:53696kB low:67120kB high:80544kB active_anon:1396kB inactive_anon:44380kB active_file:32kB inactive_file:28kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:320kB pagetables:440kB bounce:0kB free_pcp:120kB local_pcp:0kB free_cma:0kB [ 2280.700618] 0 [ 2280.712739] CPU: 1 PID: 31069 Comm: syz-executor.1 Not tainted 4.14.229-syzkaller #0 [ 2280.723305] page allocation failure: order:0 [ 2280.726582] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2280.730616] 0 [ 2280.732779] Call Trace: [ 2280.737238] 0 [ 2280.740611] dump_stack+0x1b2/0x281 [ 2280.740625] warn_alloc.cold+0x96/0x1cc [ 2280.740636] ? zone_watermark_ok_safe+0x220/0x220 [ 2280.740647] ? usleep_range+0x130/0x130 [ 2280.740659] ? try_to_free_pages+0x23f/0x6e0 [ 2280.744648] , mode:0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask= [ 2280.748509] ? _find_next_bit+0xdb/0x100 [ 2280.748520] ? run_timer_softirq+0x5a0/0x5a0 [ 2280.748537] __alloc_pages_nodemask+0x2127/0x2720 [ 2280.748554] ? lock_acquire+0x170/0x3f0 [ 2280.753730] (null) [ 2280.756932] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2280.771899] ? ion_page_pool_alloc+0x9e/0x1b0 [ 2280.771916] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2280.771935] alloc_pages_current+0x155/0x260 [ 2280.771948] ion_page_pool_alloc+0x118/0x1b0 [ 2280.779439] systemd-journal cpuset= [ 2280.786885] ion_system_heap_allocate+0x133/0x8c0 [ 2280.794237] Node 1 [ 2280.801445] ? ion_alloc+0x187/0x810 [ 2280.801457] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2280.801467] ? ion_system_contig_heap_create+0x130/0x130 [ 2280.801477] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2280.801494] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2280.829481] / [ 2280.831226] ion_alloc+0x204/0x810 [ 2280.839150] mems_allowed=0-1 [ 2280.843508] ? ion_dma_buf_release+0x40/0x40 [ 2280.858084] Normal free:26700kB min:53696kB low:67120kB high:80544kB active_anon:1396kB inactive_anon:44380kB active_file:32kB inactive_file:28kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:320kB pagetables:440kB bounce:0kB free_pcp:120kB local_pcp:120kB free_cma:0kB [ 2280.859025] ? __might_fault+0x177/0x1b0 [ 2280.862643] lowmem_reserve[]: [ 2280.866621] ion_ioctl+0xea/0x1f0 [ 2280.888070] 0 [ 2280.888122] ? ion_query_heaps+0x360/0x360 [ 2280.892184] 0 [ 2280.896598] ? ion_query_heaps+0x360/0x360 [ 2280.918071] 0 [ 2280.922392] do_vfs_ioctl+0x75a/0xff0 [ 2280.926783] 0 [ 2280.931213] ? ioctl_preallocate+0x1a0/0x1a0 [ 2280.931222] ? lock_downgrade+0x740/0x740 [ 2280.931235] ? __fget+0x225/0x360 [ 2280.931249] ? do_vfs_ioctl+0xff0/0xff0 [ 2280.948068] 0 [ 2280.953553] ? security_file_ioctl+0x83/0xb0 [ 2280.981676] SyS_ioctl+0x7f/0xb0 [ 2281.038073] Node 0 [ 2281.039788] ? do_vfs_ioctl+0xff0/0xff0 [ 2281.044183] DMA: [ 2281.048332] do_syscall_64+0x1d5/0x640 [ 2281.048347] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2281.048356] RIP: 0033:0x466459 [ 2281.048360] RSP: 002b:00007f431c6b2188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2281.068066] 2*4kB [ 2281.071523] RAX: ffffffffffffffda RBX: 000000000056c008 RCX: 0000000000466459 [ 2281.073573] (ME) [ 2281.077448] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2281.077457] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2281.098076] 4*8kB [ 2281.102951] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c008 [ 2281.105045] (ME) [ 2281.112306] R13: 00007ffd8dc7798f R14: 00007f431c6b2300 R15: 0000000000022000 [ 2281.121235] lowmem_reserve[]: [ 2281.133841] CPU: 0 PID: 31065 Comm: systemd-journal Not tainted 4.14.229-syzkaller #0 [ 2281.146421] 0 [ 2281.150328] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2281.150332] Call Trace: [ 2281.150353] dump_stack+0x1b2/0x281 [ 2281.150365] warn_alloc.cold+0x96/0x1cc [ 2281.150375] ? zone_watermark_ok_safe+0x220/0x220 [ 2281.150383] ? usleep_range+0x130/0x130 [ 2281.150390] ? try_to_free_pages+0x23f/0x6e0 [ 2281.150399] ? _find_next_bit+0xdb/0x100 [ 2281.150407] ? run_timer_softirq+0x5a0/0x5a0 [ 2281.150422] __alloc_pages_nodemask+0x2127/0x2720 [ 2281.152216] 0 [ 2281.161687] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2281.161709] alloc_pages_current+0x155/0x260 [ 2281.161721] filemap_fault+0x11a1/0x1ad0 [ 2281.161739] ext4_filemap_fault+0x84/0xb0 [ 2281.161748] __do_fault+0xfa/0x380 [ 2281.161758] __handle_mm_fault+0x2497/0x4620 [ 2281.161769] ? vm_insert_page+0x7c0/0x7c0 [ 2281.161781] ? ex_handler_default+0x14/0x90 [ 2281.161788] ? phys_mem_access_encrypted+0x10/0x10 [ 2281.161807] ? mark_held_locks+0xa6/0xf0 [ 2281.173347] 0 [ 2281.176844] handle_mm_fault+0x455/0x9c0 [ 2281.181034] 0 [ 2281.186011] __do_page_fault+0x549/0xad0 [ 2281.199556] 0 [ 2281.201110] ? spurious_fault+0x640/0x640 [ 2281.210384] ? do_page_fault+0x60/0x500 [ 2281.210395] page_fault+0x25/0x50 [ 2281.210406] RIP: 0010:strncpy_from_user+0x1f3/0x2c0 [ 2281.210410] RSP: 0018:ffff8880542d7da8 EFLAGS: 00010246 [ 2281.210417] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 000000000000000c [ 2281.210421] RDX: 0000000000000000 RSI: 0000000000000fe4 RDI: ffff888063333598 [ 2281.210426] RBP: 000055f4e0e639a3 R08: 0000000000000fe4 R09: ffff888012b0c2c0 [ 2281.210429] R10: ffff888012b0d2bf R11: 0000000000000000 R12: 0000000000000fe4 [ 2281.210433] R13: ffff888012b0c2dc R14: 0000000000000000 R15: 0000000000000000 [ 2281.210449] ? strncpy_from_user+0x1f1/0x2c0 [ 2281.210462] getname_flags+0x10d/0x550 [ 2281.210472] user_path_at_empty+0x2a/0x50 [ 2281.210482] SyS_faccessat+0x21b/0x680 [ 2281.210491] ? SyS_fallocate+0x80/0x80 [ 2281.210500] ? do_syscall_64+0x4c/0x640 [ 2281.210509] ? SyS_faccessat+0x680/0x680 [ 2281.225193] Node 0 [ 2281.226741] do_syscall_64+0x1d5/0x640 [ 2281.231303] DMA: [ 2281.235217] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2281.250939] 2*4kB [ 2281.251791] RIP: 0033:0x7f86e44d39c7 [ 2281.255837] (ME) [ 2281.257622] RSP: 002b:00007ffe17829198 EFLAGS: 00000246 [ 2281.272424] 4*8kB [ 2281.274145] ORIG_RAX: 0000000000000015 [ 2281.283877] (ME) [ 2281.286765] RAX: ffffffffffffffda RBX: 00007ffe1782c1c0 RCX: 00007f86e44d39c7 [ 2281.304787] 4*16kB [ 2281.308680] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000055f4e0e639a3 [ 2281.308686] RBP: 00007ffe178292e0 R08: 000055f4e0e593e5 R09: 0000000000000018 [ 2281.308690] R10: 0000000000000069 R11: 0000000000000246 R12: 0000000000000000 [ 2281.308693] R13: 0000000000000000 R14: 000055f4e15e7300 R15: 00007ffe178297d0 [ 2281.321683] 4*16kB [ 2281.336291] (M) [ 2281.349101] (M) [ 2281.363334] 7*32kB [ 2281.374597] 7*32kB [ 2281.392265] (UME) [ 2281.410518] (UME) [ 2281.425816] 6*64kB (UME) 4*128kB (UME) 4*256kB (UME) 3*512kB (UME) 1*1024kB (E) 1*2048kB (M) 1*4096kB (U) = 10952kB [ 2281.443823] 6*64kB [ 2281.454954] warn_alloc_show_mem: 2 callbacks suppressed [ 2281.454957] Mem-Info: [ 2281.463438] (UME) 4*128kB (UME) 4*256kB (UME) 3*512kB (UME) 1*1024kB (E) 1*2048kB (M) 1*4096kB (U) = 10952kB [ 2281.471614] Node 0 DMA32: 1946*4kB (UME) 313*8kB (UME) 137*16kB (UME) 161*32kB (UM) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 17632kB [ 2281.489330] Node 0 DMA32: 1946*4kB (UME) 313*8kB (UME) 137*16kB (UME) 161*32kB (UM) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 17632kB [ 2281.495229] active_anon:14987 inactive_anon:59573 isolated_anon:0 [ 2281.495229] active_file:14 inactive_file:12 isolated_file:0 [ 2281.495229] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2281.495229] slab_reclaimable:12374 slab_unreclaimable:123688 [ 2281.495229] mapped:52627 shmem:60179 pagetables:903 bounce:0 [ 2281.495229] free:14096 free_pcp:115 free_cma:0 [ 2281.517590] Node 0 [ 2281.538091] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2281.551168] Node 1 Normal: 0*4kB 25*8kB (UM) 91*16kB (UM) 813*32kB (UM) 5*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 27992kB [ 2281.561244] Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2281.564495] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2281.584040] Node 0 active_anon:58552kB inactive_anon:193912kB active_file:24kB inactive_file:20kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:174780kB dirty:0kB writeback:0kB shmem:195988kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2281.596896] Node 1 [ 2281.612575] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2281.612583] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2281.612588] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2281.612593] 60205 total pagecache pages [ 2281.612603] 0 pages in swap cache [ 2281.612608] Swap cache stats: add 0, delete 0, find 0/0 [ 2281.612612] Free swap = 0kB [ 2281.612615] Total swap = 0kB [ 2281.612623] 2097051 pages RAM [ 2281.612626] 0 pages HighMem/MovableOnly [ 2281.612630] 363848 pages reserved [ 2281.612633] 0 pages cma reserved [ 2281.612641] Out of memory (oom_kill_allocating_task): Kill process 30445 (rs:main Q:Reg) score 0 or sacrifice child [ 2281.612684] Killed process 30442 (rsyslogd) total-vm:254332kB, anon-rss:1028kB, file-rss:0kB, shmem-rss:0kB [ 2281.707838] Normal: 27*4kB (M) 32*8kB (UM) 96*16kB (UM) 813*32kB (UM) 5*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 28236kB [ 2281.738240] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2281.741665] Node 1 active_anon:1396kB inactive_anon:44380kB active_file:32kB inactive_file:28kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:35728kB dirty:0kB writeback:0kB shmem:44728kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2281.747128] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2281.790899] Node 0 DMA free:10952kB min:204kB low:252kB high:300kB active_anon:24kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2281.792330] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2281.829841] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2281.835452] Node 0 DMA32 free:17808kB min:36200kB low:45248kB high:54296kB active_anon:58528kB inactive_anon:193912kB active_file:24kB inactive_file:20kB unevictable:0kB writepending:0kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:7392kB pagetables:3172kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2281.852901] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2281.872798] systemd invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 2281.875928] 60205 total pagecache pages [ 2281.892354] lowmem_reserve[]: 0 0 0 0 0 [ 2281.896389] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2281.916806] 0 pages in swap cache [ 2281.938811] Swap cache stats: add 0, delete 0, find 0/0 [ 2281.944217] Free swap = 0kB [ 2281.947270] Total swap = 0kB [ 2281.961818] systemd cpuset=/ mems_allowed=0-1 [ 2281.964206] lowmem_reserve[]: 0 [ 2281.966594] CPU: 0 PID: 1 Comm: systemd Not tainted 4.14.229-syzkaller #0 [ 2281.966603] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2281.987646] Call Trace: [ 2281.990249] dump_stack+0x1b2/0x281 [ 2281.993906] dump_header+0x178/0x82f [ 2281.997724] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2282.002875] ? ___ratelimit+0x2cd/0x530 [ 2282.004286] 0 [ 2282.007050] oom_kill_process.cold+0x10/0xa40 [ 2282.007063] ? lock_downgrade+0x740/0x740 [ 2282.007078] out_of_memory+0x2dc/0x1190 [ 2282.007090] ? oom_killer_disable+0x1c0/0x1c0 [ 2282.007100] ? mutex_trylock+0x152/0x1a0 [ 2282.007110] __alloc_pages_nodemask+0x23e1/0x2720 [ 2282.007129] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2282.020837] 0 [ 2282.021736] alloc_pages_current+0x155/0x260 [ 2282.042540] 0 0 [ 2282.046216] filemap_fault+0x11a1/0x1ad0 [ 2282.046236] ext4_filemap_fault+0x84/0xb0 [ 2282.056510] __do_fault+0xfa/0x380 [ 2282.060060] __handle_mm_fault+0x2497/0x4620 [ 2282.064567] ? vm_insert_page+0x7c0/0x7c0 [ 2282.068726] ? mark_held_locks+0xa6/0xf0 [ 2282.068739] handle_mm_fault+0x455/0x9c0 [ 2282.068751] __do_page_fault+0x549/0xad0 [ 2282.068762] ? spurious_fault+0x640/0x640 [ 2282.068769] ? do_page_fault+0x60/0x500 [ 2282.068778] ? page_fault+0x2f/0x50 [ 2282.068785] page_fault+0x45/0x50 [ 2282.068792] RIP: 0001:0xffffffffffffffff [ 2282.068797] RSP: 1ec7df50:00007ffd82fd5880 EFLAGS: 7ffd82fd55c0 [ 2282.100048] 2097051 pages RAM [ 2282.118128] 0 pages HighMem/MovableOnly [ 2282.129390] 363848 pages reserved [ 2282.132900] 0 pages cma reserved [ 2282.144677] Mem-Info: [ 2282.147134] active_anon:14706 inactive_anon:59572 isolated_anon:0 [ 2282.147134] active_file:40 inactive_file:895 isolated_file:0 [ 2282.147134] unevictable:0 dirty:0 writeback:2 unstable:0 [ 2282.147134] slab_reclaimable:12370 slab_unreclaimable:123239 [ 2282.147134] mapped:52816 shmem:60179 pagetables:848 bounce:0 [ 2282.147134] free:42292 free_pcp:131 free_cma:0 15:00:36 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/btrfs-control\x00', 0x0, 0x0) ioctl$sock_SIOCDELRT(r1, 0x890c, &(0x7f0000000340)={0x0, @can, @can, @can}) sendmsg$ETHTOOL_MSG_WOL_GET(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x0, 0x300, 0x70bd2c, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4080}, 0x80) syz_genetlink_get_family_id$gtp(&(0x7f0000000180)='gtp\x00', r1) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x80000000, 0xe}) [ 2282.194004] Node 0 active_anon:57548kB inactive_anon:193908kB active_file:32kB inactive_file:20kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:174084kB dirty:0kB writeback:4kB shmem:195988kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2282.212150] Node 1 [ 2282.255425] Node 1 active_anon:1276kB inactive_anon:44380kB active_file:228kB inactive_file:7260kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:39980kB dirty:0kB writeback:4kB shmem:44728kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2282.273080] Normal free:183604kB min:53696kB low:67120kB high:80544kB active_anon:1276kB inactive_anon:44380kB active_file:228kB inactive_file:7268kB unevictable:0kB writepending:4kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:384kB pagetables:312kB bounce:0kB free_pcp:172kB local_pcp:76kB free_cma:0kB [ 2282.329991] Node 0 DMA free:10952kB min:204kB low:252kB high:300kB active_anon:24kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2282.388172] lowmem_reserve[]: 0 0 0 0 0 [ 2282.392652] Node 0 DMA: 2*4kB (ME) 4*8kB (ME) 4*16kB (M) 7*32kB (UME) 8*64kB (UME) 4*128kB (UME) 4*256kB (UME) 3*512kB (UME) 1*1024kB (E) 1*2048kB (M) 1*4096kB (U) = 11080kB [ 2282.426866] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2282.438202] Node 0 DMA32: 2144*4kB (UME) 301*8kB (UME) 135*16kB (UME) 168*32kB (UM) 329*64kB (UM) 7*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 40472kB [ 2282.453346] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2282.458276] Node 0 [ 2282.502547] Node 1 Normal: 19*4kB (M) 10*8kB (UM) 6*16kB (UM) 4*32kB (UM) 1*64kB (U) 563*128kB (U) 128*256kB (UM) 52*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 131900kB [ 2282.506891] DMA32 free:40376kB min:36200kB low:45248kB high:54296kB active_anon:57524kB inactive_anon:193908kB active_file:32kB inactive_file:20kB unevictable:0kB writepending:4kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:7328kB pagetables:3080kB bounce:0kB free_pcp:240kB local_pcp:240kB free_cma:0kB [ 2282.559253] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2282.588959] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2282.635046] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2282.674413] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2282.705108] 61680 total pagecache pages [ 2282.713609] 0 pages in swap cache [ 2282.748972] Swap cache stats: add 0, delete 0, find 0/0 [ 2282.776197] lowmem_reserve[]: 0 0 0 0 0 [ 2282.780824] Free swap = 0kB [ 2282.788086] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2282.796565] Total swap = 0kB [ 2282.828438] lowmem_reserve[]: 0 0 0 0 0 [ 2282.860388] syz-executor.2: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2282.870476] 2097051 pages RAM [ 2282.875369] 0 pages HighMem/MovableOnly [ 2282.883214] syz-executor.1: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2282.890627] Node 1 Normal free:26580kB min:53696kB low:67120kB high:80544kB active_anon:1476kB inactive_anon:44380kB active_file:848kB inactive_file:856kB unevictable:0kB writepending:4kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:416kB pagetables:460kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2282.897463] 363848 pages reserved [ 2282.930368] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 2282.935533] CPU: 1 PID: 31069 Comm: syz-executor.1 Not tainted 4.14.229-syzkaller #0 [ 2282.943427] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2282.952966] Call Trace: [ 2282.955584] dump_stack+0x1b2/0x281 [ 2282.959265] warn_alloc.cold+0x96/0x1cc [ 2282.963333] ? zone_watermark_ok_safe+0x220/0x220 [ 2282.968204] __alloc_pages_nodemask+0x2127/0x2720 [ 2282.973058] ? lock_acquire+0x170/0x3f0 [ 2282.977046] ? lock_acquire+0x170/0x3f0 [ 2282.978651] lowmem_reserve[]: [ 2282.981042] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2282.981051] 0 [ 2282.984147] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2282.992137] 0 0 [ 2282.996240] ? __mutex_unlock_slowpath+0x75/0x770 [ 2282.996256] alloc_pages_current+0x155/0x260 [ 2282.998266] 0 [ 2283.003067] ion_page_pool_alloc+0x118/0x1b0 [ 2283.007470] 0 [ 2283.009270] ion_system_heap_allocate+0x133/0x8c0 [ 2283.009283] ? _raw_spin_unlock+0x29/0x40 [ 2283.009291] ? _ion_heap_freelist_drain+0x6e/0x410 [ 2283.009300] ? ion_system_contig_heap_create+0x130/0x130 [ 2283.009314] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2283.015508] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2283.020391] Node 0 [ 2283.024491] ion_alloc+0x27a/0x810 [ 2283.029659] DMA: [ 2283.035071] ? ion_dma_buf_release+0x40/0x40 [ 2283.040121] 2*4kB [ 2283.044917] ? __might_fault+0x177/0x1b0 [ 2283.047150] (ME) [ 2283.050690] ion_ioctl+0xea/0x1f0 [ 2283.050701] ? ion_query_heaps+0x360/0x360 [ 2283.050712] ? ion_query_heaps+0x360/0x360 [ 2283.050723] do_vfs_ioctl+0x75a/0xff0 [ 2283.050735] ? ioctl_preallocate+0x1a0/0x1a0 [ 2283.052793] 5*8kB [ 2283.057219] ? lock_downgrade+0x740/0x740 [ 2283.059482] (UME) [ 2283.063524] ? __fget+0x225/0x360 [ 2283.065571] 4*16kB [ 2283.069058] ? do_vfs_ioctl+0xff0/0xff0 [ 2283.069077] ? security_file_ioctl+0x83/0xb0 [ 2283.069087] SyS_ioctl+0x7f/0xb0 [ 2283.069096] ? do_vfs_ioctl+0xff0/0xff0 [ 2283.069111] do_syscall_64+0x1d5/0x640 [ 2283.073347] (M) [ 2283.077588] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2283.081535] 7*32kB [ 2283.085782] RIP: 0033:0x466459 [ 2283.087911] (UME) [ 2283.092045] RSP: 002b:00007f431c6b2188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2283.092055] RAX: ffffffffffffffda RBX: 000000000056c008 RCX: 0000000000466459 [ 2283.092060] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2283.092065] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2283.092069] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c008 [ 2283.092074] R13: 00007ffd8dc7798f R14: 00007f431c6b2300 R15: 0000000000022000 [ 2283.101876] 0 pages cma reserved [ 2283.124332] syz-executor.5: [ 2283.136682] warn_alloc_show_mem: 3 callbacks suppressed [ 2283.136687] Mem-Info: [ 2283.163942] syz-executor.2 cpuset= [ 2283.171306] active_anon:14801 inactive_anon:59572 isolated_anon:0 [ 2283.171306] active_file:14 inactive_file:17 isolated_file:0 [ 2283.171306] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2283.171306] slab_reclaimable:12370 slab_unreclaimable:123309 [ 2283.171306] mapped:52225 shmem:60179 pagetables:905 bounce:0 [ 2283.171306] free:14303 free_pcp:67 free_cma:0 [ 2283.194866] 6*64kB [ 2283.204006] Node 0 active_anon:57560kB inactive_anon:193908kB active_file:4kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:174084kB dirty:0kB writeback:0kB shmem:195988kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2283.237044] / [ 2283.267903] page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2283.277944] Node 1 active_anon:1644kB inactive_anon:44380kB active_file:52kB inactive_file:64kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:34816kB dirty:0kB writeback:0kB shmem:44728kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2283.287164] syz-executor.5 cpuset= [ 2283.319266] mems_allowed=0-1 [ 2283.326020] CPU: 0 PID: 31079 Comm: syz-executor.2 Not tainted 4.14.229-syzkaller #0 [ 2283.333939] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2283.336061] Node 0 [ 2283.343309] Call Trace: [ 2283.343335] dump_stack+0x1b2/0x281 [ 2283.343348] warn_alloc.cold+0x96/0x1cc [ 2283.343359] ? zone_watermark_ok_safe+0x220/0x220 [ 2283.343386] __alloc_pages_nodemask+0x2127/0x2720 [ 2283.343395] ? io_schedule_timeout+0x140/0x140 [ 2283.343411] ? lock_acquire+0x170/0x3f0 [ 2283.343427] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2283.343443] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2283.343455] ? __mutex_unlock_slowpath+0x75/0x770 [ 2283.343472] ? alloc_pages_current+0x84/0x260 [ 2283.361921] DMA free:10960kB min:204kB low:252kB high:300kB active_anon:24kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2283.365839] alloc_pages_current+0x155/0x260 [ 2283.385502] lowmem_reserve[]: [ 2283.389629] ion_page_pool_alloc+0x118/0x1b0 [ 2283.389640] ion_system_heap_allocate+0x133/0x8c0 [ 2283.389649] ? ion_alloc+0x187/0x810 [ 2283.389660] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2283.389669] ? ion_system_contig_heap_create+0x130/0x130 [ 2283.389678] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2283.389690] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2283.389700] ion_alloc+0x204/0x810 [ 2283.389714] ? ion_dma_buf_release+0x40/0x40 [ 2283.389726] ? __might_fault+0x177/0x1b0 [ 2283.389737] ion_ioctl+0xea/0x1f0 [ 2283.389745] ? ion_query_heaps+0x360/0x360 [ 2283.389756] ? vm_insert_page+0x7c0/0x7c0 [ 2283.389768] ? ion_query_heaps+0x360/0x360 [ 2283.410466] 0 [ 2283.419908] do_vfs_ioctl+0x75a/0xff0 [ 2283.419922] ? ioctl_preallocate+0x1a0/0x1a0 [ 2283.419932] ? lock_downgrade+0x740/0x740 [ 2283.419944] ? __fget+0x225/0x360 [ 2283.419953] ? do_vfs_ioctl+0xff0/0xff0 [ 2283.419964] ? security_file_ioctl+0x83/0xb0 [ 2283.419974] SyS_ioctl+0x7f/0xb0 [ 2283.419981] ? do_vfs_ioctl+0xff0/0xff0 [ 2283.419991] do_syscall_64+0x1d5/0x640 [ 2283.420006] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2283.420014] RIP: 0033:0x466459 [ 2283.420020] RSP: 002b:00007effc187a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2283.420030] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 2283.420036] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2283.420041] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2283.420047] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2283.420053] R13: 00007ffc8c893f1f R14: 00007effc187a300 R15: 0000000000022000 [ 2283.429531] (UME) [ 2283.447067] 2717 [ 2283.460074] / [ 2283.476483] 2718 [ 2283.485605] mems_allowed=0-1 [ 2283.502353] 2718 [ 2283.513077] 4*128kB [ 2283.531281] 2718 [ 2283.541249] CPU: 0 PID: 31072 Comm: syz-executor.5 Not tainted 4.14.229-syzkaller #0 [ 2283.558346] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2283.558351] Call Trace: [ 2283.558375] dump_stack+0x1b2/0x281 [ 2283.558389] warn_alloc.cold+0x96/0x1cc [ 2283.558400] ? zone_watermark_ok_safe+0x220/0x220 [ 2283.558411] ? usleep_range+0x130/0x130 [ 2283.558424] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 2283.565713] Node 0 [ 2283.573093] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 2283.573104] ? run_timer_softirq+0x5a0/0x5a0 [ 2283.573120] __alloc_pages_nodemask+0x2127/0x2720 [ 2283.573136] ? lock_acquire+0x170/0x3f0 [ 2283.573149] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2283.573158] ? ion_page_pool_alloc+0x9e/0x1b0 [ 2283.573176] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2283.573195] alloc_pages_current+0x155/0x260 [ 2283.573207] ion_page_pool_alloc+0x118/0x1b0 [ 2283.573216] ion_system_heap_allocate+0x133/0x8c0 [ 2283.573227] ? _raw_spin_unlock+0x29/0x40 [ 2283.573236] ? _ion_heap_freelist_drain+0x6e/0x410 [ 2283.573246] ? ion_system_contig_heap_create+0x130/0x130 [ 2283.573256] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2283.573265] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2283.573280] ion_alloc+0x27a/0x810 [ 2283.573292] ? ion_dma_buf_release+0x40/0x40 [ 2283.573304] ? __might_fault+0x177/0x1b0 [ 2283.573315] ion_ioctl+0xea/0x1f0 [ 2283.595455] DMA32 free:19188kB min:36200kB low:45248kB high:54296kB active_anon:57536kB inactive_anon:193908kB active_file:4kB inactive_file:4kB unevictable:0kB writepending:0kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:7328kB pagetables:3084kB bounce:0kB free_pcp:264kB local_pcp:252kB free_cma:0kB [ 2283.595988] ? ion_query_heaps+0x360/0x360 [ 2283.605388] lowmem_reserve[]: [ 2283.606036] ? ion_query_heaps+0x360/0x360 [ 2283.632401] 0 [ 2283.634389] do_vfs_ioctl+0x75a/0xff0 [ 2283.654347] 0 [ 2283.656093] ? ioctl_preallocate+0x1a0/0x1a0 [ 2283.675044] 0 [ 2283.679250] ? lock_downgrade+0x740/0x740 [ 2283.679266] ? __fget+0x225/0x360 [ 2283.679276] ? do_vfs_ioctl+0xff0/0xff0 [ 2283.679288] ? security_file_ioctl+0x83/0xb0 [ 2283.679297] SyS_ioctl+0x7f/0xb0 [ 2283.679306] ? do_vfs_ioctl+0xff0/0xff0 [ 2283.679317] do_syscall_64+0x1d5/0x640 [ 2283.679331] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2283.679340] RIP: 0033:0x466459 [ 2283.679345] RSP: 002b:00007f17b5606188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2283.679355] RAX: ffffffffffffffda RBX: 000000000056c0b0 RCX: 0000000000466459 [ 2283.679361] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2283.679366] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2283.679372] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c0b0 [ 2283.679377] R13: 00007fff4326a6cf R14: 00007f17b5606300 R15: 0000000000022000 [ 2283.688720] (UME) [ 2283.706723] 0 [ 2283.717053] 4*256kB [ 2283.728798] 0 [ 2283.737515] (UME) [ 2283.786078] 3*512kB [ 2283.799111] Node 0 [ 2283.823421] (UME) [ 2283.840213] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2283.858846] 1*1024kB (E) 1*2048kB (M) 1*4096kB (U) [ 2283.885080] lowmem_reserve[]: 0 0 0 0 0 [ 2283.930910] Node 1 Normal free:27064kB min:53696kB low:67120kB high:80544kB active_anon:1644kB inactive_anon:44380kB active_file:152kB inactive_file:0kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:416kB pagetables:536kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB [ 2283.972978] = 10960kB [ 2284.001760] Node 0 DMA32: 840*4kB (UME) 377*8kB (UME) 90*16kB (UME) 191*32kB (UM) 199*64kB (UM) 41*128kB (U) 19*256kB (U) 0*512kB 1*1024kB (U) 0*2048kB 0*4096kB = 37800kB [ 2284.010726] lowmem_reserve[]: 0 0 0 0 0 [ 2284.018554] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2284.083295] Node 0 DMA: 2*4kB (ME) 5*8kB (UME) 4*16kB (M) 7*32kB (UME) 6*64kB (UME) 4*128kB (UME) 4*256kB (UME) 3*512kB (UME) 1*1024kB (E) 1*2048kB (M) 1*4096kB (U) = 10960kB [ 2284.086197] Node 1 Normal: 55*4kB (UM) 41*8kB (M) 23*16kB (UM) 5*32kB (UM) 2*64kB (M) 12*128kB (UM) 16*256kB (UM) 44*512kB (UM) 2*1024kB (U) 11*2048kB (U) 0*4096kB = 53940kB [ 2284.178078] Node 0 DMA32: 707*4kB (UME) 236*8kB (UME) 104*16kB (UME) 34*32kB (UM) 225*64kB (UM) 48*128kB (UE) 30*256kB (U) 4*512kB (U) 1*1024kB (U) 0*2048kB 0*4096kB = 38764kB [ 2284.194601] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2284.195188] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2284.215489] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2284.228092] Node 1 Normal: 1153*4kB (UM) 214*8kB (UM) 43*16kB (UM) 16*32kB (UM) 2*64kB (M) 12*128kB (UM) 16*256kB (UM) 44*512kB (UM) 2*1024kB (U) 11*2048kB (U) 0*4096kB = 60388kB [ 2284.259952] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2284.320489] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2284.357131] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2284.372307] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2284.415508] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2284.416480] 60261 total pagecache pages [ 2284.452799] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2284.482758] 60261 total pagecache pages [ 2284.485555] 0 pages in swap cache [ 2284.486787] 0 pages in swap cache [ 2284.498952] Swap cache stats: add 0, delete 0, find 0/0 [ 2284.504339] Free swap = 0kB [ 2284.507355] Total swap = 0kB [ 2284.524609] Swap cache stats: add 0, delete 0, find 0/0 [ 2284.551677] Free swap = 0kB [ 2284.552868] 2097051 pages RAM [ 2284.554723] Total swap = 0kB [ 2284.557834] 0 pages HighMem/MovableOnly [ 2284.602684] 2097051 pages RAM [ 2284.605823] 0 pages HighMem/MovableOnly [ 2284.618568] 363848 pages reserved [ 2284.622049] 0 pages cma reserved [ 2284.625527] Out of memory: Kill process 31043 (syz-executor.4) score 1004 or sacrifice child [ 2284.636101] 363848 pages reserved [ 2284.651357] 0 pages cma reserved [ 2284.690400] Killed process 31049 (syz-executor.4) total-vm:93516kB, anon-rss:164kB, file-rss:34820kB, shmem-rss:0kB [ 2284.756099] systemd-cgroups invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 2284.795949] systemd-cgroups cpuset=/ mems_allowed=0-1 [ 2284.817799] CPU: 1 PID: 31077 Comm: systemd-cgroups Not tainted 4.14.229-syzkaller #0 [ 2284.825833] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2284.835198] Call Trace: [ 2284.837798] dump_stack+0x1b2/0x281 [ 2284.841435] dump_header+0x178/0x82f [ 2284.845158] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2284.850266] ? ___ratelimit+0x2cd/0x530 [ 2284.854251] oom_kill_process.cold+0x10/0xa40 [ 2284.858766] out_of_memory+0xe3e/0x1190 [ 2284.862744] ? oom_killer_disable+0x1c0/0x1c0 [ 2284.867234] ? mutex_trylock+0x152/0x1a0 [ 2284.871291] __alloc_pages_nodemask+0x23e1/0x2720 [ 2284.876237] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2284.881092] alloc_pages_current+0x155/0x260 [ 2284.885505] filemap_fault+0x11a1/0x1ad0 [ 2284.889570] ext4_filemap_fault+0x84/0xb0 [ 2284.893736] __do_fault+0xfa/0x380 [ 2284.897270] __handle_mm_fault+0x2497/0x4620 [ 2284.901680] ? change_protection+0xa0/0xa0 [ 2284.906601] ? vm_insert_page+0x7c0/0x7c0 [ 2284.910745] ? do_mprotect_pkey+0x691/0x7e0 [ 2284.915095] ? mark_held_locks+0xa6/0xf0 [ 2284.919152] handle_mm_fault+0x455/0x9c0 [ 2284.923219] __do_page_fault+0x549/0xad0 [ 2284.927298] ? spurious_fault+0x640/0x640 [ 2284.931456] ? do_page_fault+0x60/0x500 [ 2284.935437] ? page_fault+0x2f/0x50 [ 2284.939065] page_fault+0x45/0x50 [ 2284.942526] RIP: 0001:0x1e00000001 [ 2284.946528] RSP: 39c292d0:00007ffc456f9b90 EFLAGS: 7fa93a03a000 [ 2284.948889] syz-executor.4: [ 2284.949289] Mem-Info: [ 2284.954976] page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 2284.958016] active_anon:14881 inactive_anon:59572 isolated_anon:0 [ 2284.958016] active_file:14 inactive_file:29 isolated_file:0 [ 2284.958016] unevictable:0 dirty:3 writeback:0 unstable:0 [ 2284.958016] slab_reclaimable:12357 slab_unreclaimable:123296 [ 2284.958016] mapped:52234 shmem:60179 pagetables:906 bounce:0 [ 2284.958016] free:13957 free_pcp:99 free_cma:0 [ 2284.990568] (null) [ 2285.006999] Node 0 active_anon:57712kB inactive_anon:193908kB active_file:0kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:174044kB dirty:0kB writeback:0kB shmem:195988kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2285.035330] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 2285.037531] Node 1 active_anon:1928kB inactive_anon:44380kB active_file:96kB inactive_file:80kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:34840kB dirty:0kB writeback:0kB shmem:44728kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2285.058403] CPU: 0 PID: 31049 Comm: syz-executor.4 Not tainted 4.14.229-syzkaller #0 [ 2285.070550] Node 0 [ 2285.075686] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2285.075712] DMA free:10968kB min:204kB low:252kB high:300kB active_anon:24kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2285.077927] Call Trace: [ 2285.094372] lowmem_reserve[]: [ 2285.113449] dump_stack+0x1b2/0x281 [ 2285.113464] warn_alloc.cold+0x96/0x1cc [ 2285.113476] ? zone_watermark_ok_safe+0x220/0x220 [ 2285.113485] ? usleep_range+0x130/0x130 [ 2285.113494] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 2285.113505] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 2285.113515] ? run_timer_softirq+0x5a0/0x5a0 [ 2285.113531] __alloc_pages_nodemask+0x2127/0x2720 [ 2285.113545] ? lock_acquire+0x170/0x3f0 [ 2285.113560] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2285.113570] ? ion_page_pool_alloc+0x9e/0x1b0 [ 2285.113585] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2285.120850] 0 [ 2285.122946] alloc_pages_current+0x155/0x260 [ 2285.126883] 2717 [ 2285.131726] ion_page_pool_alloc+0x118/0x1b0 [ 2285.131737] ion_system_heap_allocate+0x133/0x8c0 [ 2285.131746] ? ion_alloc+0x187/0x810 [ 2285.131756] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2285.131764] ? ion_system_contig_heap_create+0x130/0x130 [ 2285.131774] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2285.131785] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2285.131795] ion_alloc+0x204/0x810 [ 2285.131808] ? ion_dma_buf_release+0x40/0x40 [ 2285.131820] ? __might_fault+0x177/0x1b0 [ 2285.135794] 2718 [ 2285.140902] ion_ioctl+0xea/0x1f0 [ 2285.140913] ? ion_query_heaps+0x360/0x360 [ 2285.140924] ? ion_query_heaps+0x360/0x360 [ 2285.140934] do_vfs_ioctl+0x75a/0xff0 [ 2285.140950] ? ioctl_preallocate+0x1a0/0x1a0 [ 2285.140959] ? lock_downgrade+0x740/0x740 [ 2285.140972] ? __fget+0x225/0x360 [ 2285.140982] ? do_vfs_ioctl+0xff0/0xff0 [ 2285.140996] ? security_file_ioctl+0x83/0xb0 [ 2285.149935] 2718 [ 2285.150533] SyS_ioctl+0x7f/0xb0 [ 2285.155363] 2718 [ 2285.159338] ? do_vfs_ioctl+0xff0/0xff0 [ 2285.159351] do_syscall_64+0x1d5/0x640 [ 2285.159365] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2285.159373] RIP: 0033:0x466459 [ 2285.159378] RSP: 002b:00007fb6cdc12188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2285.159388] RAX: ffffffffffffffda RBX: 000000000056c008 RCX: 0000000000466459 [ 2285.159393] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000004 [ 2285.159398] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2285.159403] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c008 [ 2285.159412] R13: 00007ffef01b8b7f R14: 00007fb6cdc12300 R15: 0000000000022000 [ 2285.173278] syz-executor.1: [ 2285.176518] Node 0 [ 2285.196402] page allocation failure: order:0 [ 2285.206032] DMA32 free:18016kB min:36200kB low:45248kB high:54296kB active_anon:57696kB inactive_anon:193908kB active_file:4kB inactive_file:4kB unevictable:0kB writepending:0kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:7296kB pagetables:3096kB bounce:0kB free_pcp:156kB local_pcp:36kB free_cma:0kB [ 2285.222504] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 2285.230606] lowmem_reserve[]: [ 2285.246563] (null) [ 2285.247847] 0 [ 2285.261425] syz-executor.1 cpuset= [ 2285.268729] 0 [ 2285.285528] / [ 2285.294359] 0 [ 2285.318111] mems_allowed=0-1 [ 2285.327161] 0 [ 2285.340963] CPU: 0 PID: 31069 Comm: syz-executor.1 Not tainted 4.14.229-syzkaller #0 [ 2285.353814] 0 [ 2285.376363] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2285.376369] Call Trace: [ 2285.376393] dump_stack+0x1b2/0x281 [ 2285.376405] warn_alloc.cold+0x96/0x1cc [ 2285.376417] ? zone_watermark_ok_safe+0x220/0x220 [ 2285.376426] ? usleep_range+0x130/0x130 [ 2285.376435] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 2285.376445] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 2285.376455] ? run_timer_softirq+0x5a0/0x5a0 [ 2285.376470] __alloc_pages_nodemask+0x2127/0x2720 [ 2285.376486] ? lock_acquire+0x170/0x3f0 [ 2285.376502] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2285.376512] ? ion_page_pool_alloc+0x9e/0x1b0 [ 2285.376527] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2285.376546] alloc_pages_current+0x155/0x260 [ 2285.376559] ion_page_pool_alloc+0x118/0x1b0 [ 2285.402849] ion_system_heap_allocate+0x133/0x8c0 [ 2285.404661] Node 0 [ 2285.412636] ? _raw_spin_unlock+0x29/0x40 [ 2285.412647] ? _ion_heap_freelist_drain+0x6e/0x410 [ 2285.412655] ? ion_system_contig_heap_create+0x130/0x130 [ 2285.412666] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2285.412678] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2285.412687] ion_alloc+0x27a/0x810 [ 2285.412699] ? ion_dma_buf_release+0x40/0x40 [ 2285.412710] ? __might_fault+0x177/0x1b0 [ 2285.412721] ion_ioctl+0xea/0x1f0 [ 2285.412730] ? ion_query_heaps+0x360/0x360 [ 2285.412743] ? ion_query_heaps+0x360/0x360 [ 2285.412753] do_vfs_ioctl+0x75a/0xff0 [ 2285.412764] ? ioctl_preallocate+0x1a0/0x1a0 [ 2285.412773] ? lock_downgrade+0x740/0x740 [ 2285.412794] ? __fget+0x225/0x360 [ 2285.425557] warn_alloc_show_mem: 2 callbacks suppressed [ 2285.425562] Mem-Info: [ 2285.426631] ? do_vfs_ioctl+0xff0/0xff0 [ 2285.430359] active_anon:14919 inactive_anon:59572 isolated_anon:0 [ 2285.430359] active_file:16 inactive_file:15 isolated_file:0 [ 2285.430359] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2285.430359] slab_reclaimable:12357 slab_unreclaimable:123328 [ 2285.430359] mapped:52225 shmem:60179 pagetables:916 bounce:0 [ 2285.430359] free:13957 free_pcp:106 free_cma:0 [ 2285.434218] ? security_file_ioctl+0x83/0xb0 [ 2285.450127] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2285.453307] SyS_ioctl+0x7f/0xb0 [ 2285.457703] lowmem_reserve[]: [ 2285.462549] ? do_vfs_ioctl+0xff0/0xff0 [ 2285.462563] do_syscall_64+0x1d5/0x640 [ 2285.462577] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2285.462585] RIP: 0033:0x466459 [ 2285.462590] RSP: 002b:00007f431c6b2188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2285.462599] RAX: ffffffffffffffda RBX: 000000000056c008 RCX: 0000000000466459 [ 2285.462604] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2285.462609] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2285.462614] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c008 [ 2285.462619] R13: 00007ffd8dc7798f R14: 00007f431c6b2300 R15: 0000000000022000 [ 2285.623888] Node 0 active_anon:57720kB inactive_anon:193908kB active_file:36kB inactive_file:200kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:174084kB dirty:0kB writeback:0kB shmem:195988kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2285.650115] 0 [ 2285.701311] Node 1 active_anon:1956kB inactive_anon:44380kB active_file:56kB inactive_file:48kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:34816kB dirty:0kB writeback:0kB shmem:44728kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2285.707980] 0 [ 2285.714891] Node 0 [ 2285.746839] 0 0 0 [ 2285.794559] Node 1 Normal free:53528kB min:53696kB low:67120kB high:80544kB active_anon:1956kB inactive_anon:44380kB active_file:200kB inactive_file:88kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:384kB pagetables:568kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2285.876505] DMA free:11032kB min:204kB low:252kB high:300kB active_anon:24kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2285.888937] lowmem_reserve[]: [ 2285.902469] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2285.910653] Node 0 DMA32 free:35948kB min:36200kB low:45248kB high:54296kB active_anon:57696kB inactive_anon:193908kB active_file:304kB inactive_file:180kB unevictable:0kB writepending:0kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:7296kB pagetables:3096kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2285.924038] 0 [ 2285.940096] lowmem_reserve[]: 0 0 0 0 0 [ 2285.943840] 0 [ 2285.945912] Node 0 [ 2285.945923] 0 [ 2285.947723] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2285.949993] 0 0 [ 2285.954545] lowmem_reserve[]: [ 2285.984140] Node 0 DMA: 2*4kB (ME) 4*8kB (ME) 5*16kB (UM) 7*32kB (UME) 7*64kB (UME) 4*128kB (UME) 4*256kB (UME) 3*512kB (UME) 1*1024kB (E) 1*2048kB (M) 1*4096kB (U) = 11032kB [ 2285.988700] 0 [ 2286.057021] Node 0 DMA32: 786*4kB (UME) 138*8kB (ME) 59*16kB (ME) 11*32kB (M) 293*64kB (UM) 9*128kB (UE) 30*256kB (U) 4*512kB (U) 1*1024kB (U) 0*2048kB 0*4096kB = 36200kB [ 2286.066771] 0 0 0 0 [ 2286.131403] Node 1 Normal free:53544kB min:53696kB low:67120kB high:80544kB active_anon:1956kB inactive_anon:44380kB active_file:28kB inactive_file:88kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:384kB pagetables:568kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2286.175469] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2286.193181] Node 1 Normal: 90*4kB (M) 72*8kB (M) 50*16kB (M) 37*32kB (M) 11*64kB (UM) 10*128kB (M) 76*256kB (UM) 19*512kB (UM) 1*1024kB (U) 9*2048kB (U) 0*4096kB = 53544kB [ 2286.252344] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2286.292755] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2286.321584] lowmem_reserve[]: 0 0 0 0 0 [ 2286.325622] Node 0 DMA: 2*4kB (ME) 4*8kB (ME) 5*16kB (UM) 7*32kB (UME) 7*64kB (UME) 4*128kB (UME) 4*256kB (UME) 3*512kB (UME) 1*1024kB (E) 1*2048kB (M) 1*4096kB (U) = 11032kB [ 2286.355211] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2286.406218] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2286.435377] 60210 total pagecache pages [ 2286.436162] Node 0 [ 2286.443643] 0 pages in swap cache [ 2286.488100] DMA32: 786*4kB (UME) 138*8kB (ME) 59*16kB (ME) 11*32kB (M) 293*64kB (UM) 9*128kB (UE) 30*256kB (U) 4*512kB (U) 1*1024kB (U) 0*2048kB 0*4096kB = 36200kB [ 2286.491902] Swap cache stats: add 0, delete 0, find 0/0 [ 2286.543848] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2286.595774] Free swap = 0kB [ 2286.609486] Node 1 Normal: 90*4kB (M) 72*8kB (M) 50*16kB (M) 37*32kB (M) 11*64kB (UM) 10*128kB (M) 76*256kB (UM) 19*512kB (UM) 1*1024kB (U) 9*2048kB (U) 0*4096kB = 53544kB [ 2286.613618] Total swap = 0kB [ 2286.691634] 2097051 pages RAM [ 2286.694786] 0 pages HighMem/MovableOnly [ 2286.696840] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2286.746074] 363848 pages reserved [ 2286.764423] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2286.771131] 0 pages cma reserved [ 2286.776441] Out of memory (oom_kill_allocating_task): Kill process 31077 (systemd-cgroups) score 0 or sacrifice child [ 2286.826363] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2286.866196] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2286.882847] Killed process 31077 (systemd-cgroups) total-vm:37668kB, anon-rss:292kB, file-rss:0kB, shmem-rss:0kB [ 2286.926132] 60210 total pagecache pages [ 2286.943765] 0 pages in swap cache [ 2286.950520] oom_reaper: reaped process 31049 (syz-executor.4), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 2286.983983] Swap cache stats: add 0, delete 0, find 0/0 [ 2287.023908] Free swap = 0kB [ 2287.026959] Total swap = 0kB [ 2287.057698] oom_reaper: reaped process 31077 (systemd-cgroups), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 2287.069363] 2097051 pages RAM [ 2287.072483] 0 pages HighMem/MovableOnly [ 2287.082341] 363848 pages reserved [ 2287.085830] 0 pages cma reserved 15:00:42 executing program 1: socket$inet6(0xa, 0xa, 0x884) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x80000000, 0xe}) 15:00:42 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x80000000, 0xe}) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f00000000c0)={{0x0, 0x5, 0x1ff, 0x200, 0xfffffffffffffc4e, 0x400, 0x800, 0x595, 0x5, 0x7fff, 0x9, 0x2, 0x1ff, 0xe0}}) [ 2287.911400] systemd[1]: rsyslog.service: Main process exited, code=killed, status=9/KILL [ 2287.955923] systemd[1]: rsyslog.service: Unit entered failed state. [ 2287.994897] systemd[1]: rsyslog.service: Failed with result 'signal'. [ 2288.027185] systemd[1]: systemd-journald.service: Main process exited, code=killed, status=9/KILL [ 2288.104889] systemd[1]: Failed to start Journal Service. [ 2288.122941] systemd[1]: systemd-journald.service: Unit entered failed state. [ 2288.148399] systemd[1]: systemd-journald.service: Failed with result 'signal'. [ 2288.180203] systemd[1]: rsyslog.service: Service hold-off time over, scheduling restart. [ 2288.222812] systemd[1]: systemd-journald.service: Service has no hold-off time, scheduling restart. [ 2288.235683] systemd[1]: Stopped Journal Service. [ 2288.557169] syz-executor.1: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2288.558506] syz-executor.4: [ 2288.580068] syz-executor.5: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2288.597333] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 2288.604170] page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2288.605756] syz-executor.5 cpuset= [ 2288.621205] CPU: 0 PID: 31085 Comm: syz-executor.1 Not tainted 4.14.229-syzkaller #0 [ 2288.632679] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2288.642040] Call Trace: [ 2288.644641] dump_stack+0x1b2/0x281 [ 2288.648284] warn_alloc.cold+0x96/0x1cc [ 2288.652300] syz-executor.4 cpuset=/ [ 2288.652441] ? zone_watermark_ok_safe+0x220/0x220 [ 2288.652463] __alloc_pages_nodemask+0x2127/0x2720 [ 2288.665756] ? __schedule+0x893/0x1de0 [ 2288.669925] ? lock_acquire+0x170/0x3f0 [ 2288.673916] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2288.676140] mems_allowed=0-1 [ 2288.678797] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2288.678809] ? __mutex_unlock_slowpath+0x75/0x770 [ 2288.678831] alloc_pages_current+0x155/0x260 [ 2288.678845] ion_page_pool_alloc+0x118/0x1b0 [ 2288.678854] ion_system_heap_allocate+0x133/0x8c0 [ 2288.678864] ? ion_alloc+0x187/0x810 [ 2288.678878] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2288.715058] ? ion_system_contig_heap_create+0x130/0x130 [ 2288.720527] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2288.725563] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2288.730434] ion_alloc+0x204/0x810 [ 2288.733988] ? ion_dma_buf_release+0x40/0x40 [ 2288.738410] ? __might_fault+0x177/0x1b0 [ 2288.742489] ion_ioctl+0xea/0x1f0 [ 2288.745955] ? ion_query_heaps+0x360/0x360 [ 2288.750233] ? ion_query_heaps+0x360/0x360 [ 2288.754479] do_vfs_ioctl+0x75a/0xff0 [ 2288.758293] ? ioctl_preallocate+0x1a0/0x1a0 [ 2288.763667] ? lock_downgrade+0x740/0x740 [ 2288.767845] ? __fget+0x225/0x360 [ 2288.771303] ? do_vfs_ioctl+0xff0/0xff0 [ 2288.775298] ? security_file_ioctl+0x83/0xb0 [ 2288.779717] SyS_ioctl+0x7f/0xb0 [ 2288.783090] ? do_vfs_ioctl+0xff0/0xff0 [ 2288.787094] do_syscall_64+0x1d5/0x640 [ 2288.791014] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2288.796210] RIP: 0033:0x466459 [ 2288.799400] RSP: 002b:00007f431c6d3188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2288.807128] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 2288.814427] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2288.821715] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2288.829164] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2288.836448] R13: 00007ffd8dc7798f R14: 00007f431c6d3300 R15: 0000000000022000 [ 2288.844753] CPU: 1 PID: 31049 Comm: syz-executor.4 Not tainted 4.14.229-syzkaller #0 [ 2288.852765] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2288.863269] Call Trace: [ 2288.865868] dump_stack+0x1b2/0x281 [ 2288.869590] warn_alloc.cold+0x96/0x1cc [ 2288.872309] / [ 2288.873588] ? zone_watermark_ok_safe+0x220/0x220 [ 2288.874720] mems_allowed=0-1 [ 2288.875531] __alloc_pages_nodemask+0x2127/0x2720 [ 2288.888329] ? check_preemption_disabled+0x35/0x240 [ 2288.893365] ? lock_acquire+0x170/0x3f0 [ 2288.897349] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2288.902203] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2288.907657] ? __mutex_unlock_slowpath+0x75/0x770 [ 2288.912509] alloc_pages_current+0x155/0x260 [ 2288.916968] ion_page_pool_alloc+0x118/0x1b0 [ 2288.921393] ion_system_heap_allocate+0x133/0x8c0 [ 2288.926239] ? _raw_spin_unlock+0x29/0x40 [ 2288.930384] ? _ion_heap_freelist_drain+0x6e/0x410 [ 2288.936286] ? ion_system_contig_heap_create+0x130/0x130 [ 2288.941741] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2288.946763] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2288.951615] ion_alloc+0x27a/0x810 [ 2288.955192] ? ion_dma_buf_release+0x40/0x40 [ 2288.959618] ? __might_fault+0x177/0x1b0 [ 2288.963684] ion_ioctl+0xea/0x1f0 [ 2288.967139] ? ion_query_heaps+0x360/0x360 [ 2288.971409] ? ion_query_heaps+0x360/0x360 [ 2288.976432] do_vfs_ioctl+0x75a/0xff0 [ 2288.980856] ? ioctl_preallocate+0x1a0/0x1a0 [ 2288.985276] ? lock_downgrade+0x740/0x740 [ 2288.989455] ? __fget+0x225/0x360 [ 2288.992947] ? do_vfs_ioctl+0xff0/0xff0 [ 2288.996929] ? security_file_ioctl+0x83/0xb0 [ 2289.001547] SyS_ioctl+0x7f/0xb0 [ 2289.005022] ? do_vfs_ioctl+0xff0/0xff0 [ 2289.009100] do_syscall_64+0x1d5/0x640 [ 2289.013105] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2289.018293] RIP: 0033:0x466459 [ 2289.021498] RSP: 002b:00007fb6cdc12188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2289.029817] RAX: ffffffffffffffda RBX: 000000000056c008 RCX: 0000000000466459 [ 2289.037094] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000004 [ 2289.044453] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2289.053035] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c008 [ 2289.060309] R13: 00007ffef01b8b7f R14: 00007fb6cdc12300 R15: 0000000000022000 [ 2289.068146] CPU: 0 PID: 31084 Comm: syz-executor.5 Not tainted 4.14.229-syzkaller #0 [ 2289.076818] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2289.086185] Call Trace: [ 2289.088799] dump_stack+0x1b2/0x281 [ 2289.092450] warn_alloc.cold+0x96/0x1cc [ 2289.096628] ? zone_watermark_ok_safe+0x220/0x220 [ 2289.101507] __alloc_pages_nodemask+0x2127/0x2720 [ 2289.106368] ? _raw_spin_unlock_irq+0x24/0x80 [ 2289.110879] ? lock_acquire+0x170/0x3f0 [ 2289.114875] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2289.119738] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2289.125202] ? __mutex_unlock_slowpath+0x75/0x770 [ 2289.130076] alloc_pages_current+0x155/0x260 [ 2289.134495] ion_page_pool_alloc+0x118/0x1b0 [ 2289.138912] ion_system_heap_allocate+0x133/0x8c0 [ 2289.143820] ? ion_alloc+0x187/0x810 [ 2289.147545] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2289.153005] ? ion_system_contig_heap_create+0x130/0x130 [ 2289.158546] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2289.163596] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2289.168451] ion_alloc+0x204/0x810 [ 2289.172105] ? ion_dma_buf_release+0x40/0x40 [ 2289.176519] ? __might_fault+0x177/0x1b0 [ 2289.180581] ion_ioctl+0xea/0x1f0 [ 2289.184029] ? ion_query_heaps+0x360/0x360 [ 2289.188267] ? ion_query_heaps+0x360/0x360 [ 2289.192504] do_vfs_ioctl+0x75a/0xff0 [ 2289.196743] ? ioctl_preallocate+0x1a0/0x1a0 [ 2289.201242] ? lock_downgrade+0x740/0x740 [ 2289.205413] ? __fget+0x225/0x360 [ 2289.208872] ? do_vfs_ioctl+0xff0/0xff0 [ 2289.212850] ? security_file_ioctl+0x83/0xb0 [ 2289.217286] SyS_ioctl+0x7f/0xb0 [ 2289.220660] ? do_vfs_ioctl+0xff0/0xff0 [ 2289.224637] do_syscall_64+0x1d5/0x640 [ 2289.228533] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2289.233907] RIP: 0033:0x466459 [ 2289.237090] RSP: 002b:00007f17b5648188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2289.244998] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 2289.252269] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2289.259624] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2289.266898] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2289.275039] R13: 00007fff4326a6cf R14: 00007f17b5648300 R15: 0000000000022000 [ 2289.318167] warn_alloc_show_mem: 1 callbacks suppressed [ 2289.318171] Mem-Info: [ 2289.326167] active_anon:15026 inactive_anon:59572 isolated_anon:0 [ 2289.326167] active_file:195 inactive_file:156 isolated_file:50 [ 2289.326167] unevictable:0 dirty:3 writeback:0 unstable:0 [ 2289.326167] slab_reclaimable:12348 slab_unreclaimable:122499 [ 2289.326167] mapped:52586 shmem:60179 pagetables:917 bounce:0 [ 2289.326167] free:25114 free_pcp:176 free_cma:0 [ 2289.365356] Node 0 active_anon:58772kB inactive_anon:193908kB active_file:88kB inactive_file:128kB unevictable:0kB isolated(anon):0kB isolated(file):80kB mapped:174152kB dirty:12kB writeback:0kB shmem:195988kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2289.403744] Node 1 active_anon:1332kB inactive_anon:44380kB active_file:4kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:34792kB dirty:0kB writeback:0kB shmem:44728kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2289.441087] Node 0 DMA free:11012kB min:204kB low:252kB high:300kB active_anon:24kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2289.470737] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2289.475915] Node 0 DMA32 free:36056kB min:36200kB low:45248kB high:54296kB active_anon:58748kB inactive_anon:193908kB active_file:632kB inactive_file:0kB unevictable:0kB writepending:12kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:7392kB pagetables:3244kB bounce:0kB free_pcp:56kB local_pcp:0kB free_cma:0kB [ 2289.505252] lowmem_reserve[]: 0 0 0 0 0 [ 2289.509339] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2289.535098] lowmem_reserve[]: 0 0 0 0 0 [ 2289.539165] Node 1 Normal free:53416kB min:53696kB low:67120kB high:80544kB active_anon:1332kB inactive_anon:44380kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:288kB pagetables:424kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2289.569747] lowmem_reserve[]: 0 0 0 0 0 [ 2289.573788] Node 0 DMA: 21*4kB (UME) 20*8kB (UME) 13*16kB (UM) 12*32kB (UME) 11*64kB (UME) 6*128kB (UME) 4*256kB (UME) 3*512kB (UME) 2*1024kB (UE) 2*2048kB (UM) 0*4096kB = 11012kB [ 2289.593733] Node 0 DMA32: 752*4kB (UME) 125*8kB (UME) 77*16kB (M) 837*32kB (UM) 29*64kB (UM) 5*128kB (UM) 3*256kB (UM) 2*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 36312kB [ 2289.609902] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2289.620687] Node 1 Normal: 11*4kB (UM) 1*8kB (U) 220*16kB (UM) 1554*32kB (UM) 3*64kB (UM) 2*128kB (UM) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 53748kB [ 2289.635067] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2289.643997] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2289.652756] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2289.662055] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2289.670777] 60211 total pagecache pages [ 2289.674780] 0 pages in swap cache [ 2289.682099] Swap cache stats: add 0, delete 0, find 0/0 [ 2289.687882] Free swap = 0kB [ 2289.701438] Total swap = 0kB [ 2289.705229] 2097051 pages RAM [ 2289.718114] 0 pages HighMem/MovableOnly [ 2289.722122] 363848 pages reserved [ 2289.725586] 0 pages cma reserved [ 2289.801204] rsyslogd invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 2289.817554] rsyslogd cpuset=/ mems_allowed=0-1 [ 2289.823720] CPU: 1 PID: 31090 Comm: rsyslogd Not tainted 4.14.229-syzkaller #0 [ 2289.831197] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2289.840569] Call Trace: [ 2289.843194] dump_stack+0x1b2/0x281 [ 2289.846832] dump_header+0x178/0x82f [ 2289.850555] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2289.855663] ? ___ratelimit+0x2cd/0x530 [ 2289.860870] oom_kill_process.cold+0x10/0xa40 [ 2289.865388] out_of_memory+0xe3e/0x1190 [ 2289.869389] ? oom_killer_disable+0x1c0/0x1c0 [ 2289.873886] ? mutex_trylock+0x152/0x1a0 [ 2289.877953] __alloc_pages_nodemask+0x23e1/0x2720 [ 2289.882814] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2289.887695] alloc_pages_current+0x155/0x260 [ 2289.892107] filemap_fault+0x11a1/0x1ad0 [ 2289.896181] ext4_filemap_fault+0x84/0xb0 [ 2289.900326] __do_fault+0xfa/0x380 [ 2289.903955] __handle_mm_fault+0x2497/0x4620 [ 2289.908367] ? poll_select_set_timeout+0xb9/0x120 [ 2289.913206] ? vm_insert_page+0x7c0/0x7c0 [ 2289.917372] ? lock_downgrade+0x740/0x740 [ 2289.921535] ? mark_held_locks+0xa6/0xf0 [ 2289.925608] handle_mm_fault+0x455/0x9c0 [ 2289.929676] __do_page_fault+0x549/0xad0 [ 2289.933744] ? spurious_fault+0x640/0x640 [ 2289.937893] ? do_page_fault+0x60/0x500 [ 2289.941871] ? page_fault+0x2f/0x50 [ 2289.945500] page_fault+0x45/0x50 [ 2289.948946] RIP: 0000:0x16fccfb8 [ 2289.952298] RSP: 0001:000000000000002b EFLAGS: 00000000 [ 2289.978498] Mem-Info: [ 2289.986329] active_anon:15026 inactive_anon:59572 isolated_anon:0 [ 2289.986329] active_file:29 inactive_file:0 isolated_file:0 [ 2289.986329] unevictable:0 dirty:3 writeback:0 unstable:0 [ 2289.986329] slab_reclaimable:12340 slab_unreclaimable:122490 [ 2289.986329] mapped:52225 shmem:60179 pagetables:917 bounce:0 [ 2289.986329] free:13969 free_pcp:0 free_cma:0 [ 2290.032799] syz-executor.4: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2290.035489] Node 0 active_anon:58772kB inactive_anon:193908kB active_file:164kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:174084kB dirty:12kB writeback:0kB shmem:195988kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2290.065924] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 2290.090615] Node 1 active_anon:1332kB inactive_anon:44380kB active_file:8kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:34816kB dirty:0kB writeback:0kB shmem:44728kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2290.094521] CPU: 1 PID: 31049 Comm: syz-executor.4 Not tainted 4.14.229-syzkaller #0 [ 2290.125453] Node 0 [ 2290.129381] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2290.129386] Call Trace: [ 2290.129409] dump_stack+0x1b2/0x281 [ 2290.129423] warn_alloc.cold+0x96/0x1cc [ 2290.129438] ? zone_watermark_ok_safe+0x220/0x220 [ 2290.131686] DMA free:10956kB min:204kB low:252kB high:300kB active_anon:24kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2290.141043] ? usleep_range+0x130/0x130 [ 2290.141054] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 2290.141065] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 2290.141075] ? run_timer_softirq+0x5a0/0x5a0 [ 2290.141092] __alloc_pages_nodemask+0x2127/0x2720 [ 2290.143661] lowmem_reserve[]: [ 2290.147300] ? lock_acquire+0x170/0x3f0 [ 2290.151320] 0 [ 2290.156206] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2290.182719] 2717 [ 2290.186761] ? ion_page_pool_alloc+0x9e/0x1b0 [ 2290.192234] 2718 [ 2290.197216] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2290.201730] 2718 [ 2290.206536] alloc_pages_current+0x155/0x260 [ 2290.209654] 2718 [ 2290.213585] ion_page_pool_alloc+0x118/0x1b0 [ 2290.220218] ion_system_heap_allocate+0x133/0x8c0 [ 2290.220232] ? _raw_spin_unlock+0x29/0x40 [ 2290.220240] ? _ion_heap_freelist_drain+0x6e/0x410 [ 2290.220249] ? ion_system_contig_heap_create+0x130/0x130 [ 2290.220263] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2290.222326] Node 0 [ 2290.226817] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2290.228931] DMA32 free:18192kB min:36200kB low:45248kB high:54296kB active_anon:58748kB inactive_anon:193908kB active_file:64kB inactive_file:56kB unevictable:0kB writepending:0kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:7392kB pagetables:3244kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2290.234305] ion_alloc+0x27a/0x810 [ 2290.236343] lowmem_reserve[]: [ 2290.240766] ? ion_dma_buf_release+0x40/0x40 [ 2290.240779] ? __might_fault+0x177/0x1b0 [ 2290.240789] ion_ioctl+0xea/0x1f0 [ 2290.240798] ? ion_query_heaps+0x360/0x360 [ 2290.240809] ? ion_query_heaps+0x360/0x360 [ 2290.242988] 0 [ 2290.247404] do_vfs_ioctl+0x75a/0xff0 [ 2290.252361] 0 [ 2290.256466] ? ioctl_preallocate+0x1a0/0x1a0 [ 2290.261452] 0 [ 2290.266861] ? lock_downgrade+0x740/0x740 [ 2290.271919] 0 [ 2290.274104] ? __fget+0x225/0x360 [ 2290.278979] 0 [ 2290.308990] ? do_vfs_ioctl+0xff0/0xff0 [ 2290.309003] ? security_file_ioctl+0x83/0xb0 [ 2290.309013] SyS_ioctl+0x7f/0xb0 [ 2290.309024] ? do_vfs_ioctl+0xff0/0xff0 [ 2290.309037] do_syscall_64+0x1d5/0x640 [ 2290.315800] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2290.320263] Node 0 [ 2290.324296] RIP: 0033:0x466459 [ 2290.327934] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2290.332560] RSP: 002b:00007fb6cdc12188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2290.332572] RAX: ffffffffffffffda RBX: 000000000056c008 RCX: 0000000000466459 [ 2290.332577] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000004 [ 2290.332582] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2290.332586] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c008 [ 2290.332591] R13: 00007ffef01b8b7f R14: 00007fb6cdc12300 R15: 0000000000022000 [ 2290.339854] warn_alloc_show_mem: 2 callbacks suppressed [ 2290.339859] Mem-Info: [ 2290.373270] lowmem_reserve[]: [ 2290.384261] active_anon:15026 inactive_anon:59572 isolated_anon:0 [ 2290.384261] active_file:43 inactive_file:0 isolated_file:0 [ 2290.384261] unevictable:0 dirty:3 writeback:0 unstable:0 [ 2290.384261] slab_reclaimable:12340 slab_unreclaimable:122490 [ 2290.384261] mapped:52225 shmem:60179 pagetables:917 bounce:0 [ 2290.384261] free:14004 free_pcp:0 free_cma:0 [ 2290.407660] 0 [ 2290.428393] Node 0 active_anon:58772kB inactive_anon:193908kB active_file:164kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:174084kB dirty:12kB writeback:0kB shmem:195988kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2290.448343] 0 [ 2290.458265] Node 1 active_anon:1332kB inactive_anon:44380kB active_file:8kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:34816kB dirty:0kB writeback:0kB shmem:44728kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2290.477848] 0 [ 2290.484694] Node 0 [ 2290.535425] 0 [ 2290.551003] DMA free:10956kB min:204kB low:252kB high:300kB active_anon:24kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2290.592845] 0 [ 2290.614501] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2290.622510] Node 1 Normal free:26868kB min:53696kB low:67120kB high:80544kB active_anon:1332kB inactive_anon:44380kB active_file:8kB inactive_file:8kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:288kB pagetables:424kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2290.623819] Node 0 DMA32 free:18192kB min:36200kB low:45248kB high:54296kB active_anon:58748kB inactive_anon:193908kB active_file:128kB inactive_file:24kB unevictable:0kB writepending:0kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:7392kB pagetables:3244kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2290.678107] lowmem_reserve[]: [ 2290.703744] lowmem_reserve[]: 0 0 0 0 0 [ 2290.712032] 0 0 0 0 0 [ 2290.713250] Node 0 [ 2290.714567] Node 0 [ 2290.714588] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2290.714593] lowmem_reserve[]: [ 2290.716812] DMA: [ 2290.725756] 0 0 0 0 0 [ 2290.761612] Node 1 Normal free:26868kB min:53696kB low:67120kB high:80544kB active_anon:1332kB inactive_anon:44380kB active_file:8kB inactive_file:8kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:288kB pagetables:424kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2290.765055] 7*4kB [ 2290.799523] lowmem_reserve[]: 0 0 0 0 0 [ 2290.805705] Node 0 DMA: 7*4kB (UME) 20*8kB (UME) 13*16kB (UM) 12*32kB (UME) 11*64kB (UME) 6*128kB (UME) 4*256kB (UME) 3*512kB (UME) 2*1024kB (UE) 2*2048kB (UM) 0*4096kB = 10956kB [ 2290.808496] (UME) 20*8kB (UME) 13*16kB (UM) 12*32kB (UME) 11*64kB (UME) 6*128kB (UME) 4*256kB (UME) 3*512kB (UME) 2*1024kB (UE) 2*2048kB (UM) 0*4096kB = 10956kB [ 2290.843456] Node 0 [ 2290.861231] Node 0 DMA32: 752*4kB (UME) 228*8kB (UME) 127*16kB (UM) 274*32kB (UM) 27*64kB (UM) 7*128kB (UM) 3*256kB (UM) 2*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 20048kB [ 2290.865113] DMA32: [ 2290.891342] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2290.895406] 752*4kB [ 2290.915925] Node 1 Normal: 4*4kB (UM) 1*8kB (U) 1*16kB (M) 831*32kB (UM) 3*64kB (UM) 2*128kB (UM) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 27080kB [ 2290.923501] (UME) [ 2290.935011] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2290.935018] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2290.935023] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2290.935028] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2290.935032] 60222 total pagecache pages [ 2290.935041] 0 pages in swap cache [ 2290.935046] Swap cache stats: add 0, delete 0, find 0/0 [ 2290.935049] Free swap = 0kB [ 2290.935053] Total swap = 0kB [ 2290.935060] 2097051 pages RAM [ 2290.935068] 0 pages HighMem/MovableOnly [ 2290.952567] 228*8kB [ 2290.966114] 363848 pages reserved [ 2290.983670] (UME) [ 2291.000935] 0 pages cma reserved [ 2291.012190] 127*16kB (UM) 274*32kB (UM) 27*64kB (UM) 7*128kB (UM) 3*256kB (UM) 2*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 20048kB [ 2291.021550] Out of memory (oom_kill_allocating_task): Kill process 31090 (rsyslogd) score 0 or sacrifice child [ 2291.036273] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2291.060186] Node 1 Normal: 4*4kB (UM) 11*8kB (U) 1*16kB (M) 831*32kB (UM) 4*64kB (UM) 2*128kB (UM) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 27224kB [ 2291.062549] Killed process 31090 (rsyslogd) total-vm:29964kB, anon-rss:284kB, file-rss:0kB, shmem-rss:0kB [ 2291.085241] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2291.096297] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2291.109706] kworker/u4:2 invoked oom-killer: gfp_mask=0x15080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null), order=3, oom_score_adj=0 [ 2291.133548] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2291.145574] kworker/u4:2 cpuset=/ mems_allowed=0-1 [ 2291.147390] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2291.166722] CPU: 0 PID: 5319 Comm: kworker/u4:2 Not tainted 4.14.229-syzkaller #0 [ 2291.171357] 60213 total pagecache pages [ 2291.174470] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2291.185306] 0 pages in swap cache [ 2291.187894] Workqueue: events_unbound call_usermodehelper_exec_work [ 2291.195873] Swap cache stats: add 0, delete 0, find 0/0 [ 2291.198092] Call Trace: [ 2291.198115] dump_stack+0x1b2/0x281 [ 2291.198126] dump_header+0x178/0x82f [ 2291.198136] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2291.198145] ? ___ratelimit+0x2cd/0x530 [ 2291.198153] oom_kill_process.cold+0x10/0xa40 [ 2291.198165] ? lock_downgrade+0x740/0x740 [ 2291.198180] out_of_memory+0x2dc/0x1190 [ 2291.198193] ? oom_killer_disable+0x1c0/0x1c0 [ 2291.198200] ? mutex_trylock+0x152/0x1a0 [ 2291.198210] __alloc_pages_nodemask+0x23e1/0x2720 [ 2291.198224] ? ____cache_alloc_node+0xf4/0x1d0 [ 2291.198238] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2291.215045] Free swap = 0kB [ 2291.218890] ? do_raw_spin_unlock+0x164/0x220 [ 2291.218904] ? _raw_spin_unlock+0x29/0x40 [ 2291.218913] ? ____cache_alloc_node+0xf4/0x1d0 [ 2291.218927] ? kmem_cache_alloc_node+0x38b/0x410 [ 2291.218938] copy_process.part.0+0x265/0x71c0 [ 2291.218951] ? __lock_acquire+0x5fc/0x3f20 [ 2291.218959] ? cpuacct_charge+0x1ca/0x350 [ 2291.218968] ? static_obj+0x50/0x50 [ 2291.218977] ? lock_downgrade+0x740/0x740 [ 2291.218986] ? call_usermodehelper_exec_work+0x2a0/0x2a0 [ 2291.218999] ? __cleanup_sighand+0x40/0x40 [ 2291.219010] ? call_usermodehelper_exec_work+0x2a0/0x2a0 [ 2291.219017] _do_fork+0x184/0xc80 [ 2291.219027] ? fork_idle+0x270/0x270 [ 2291.219038] ? lock_downgrade+0x740/0x740 [ 2291.225535] Total swap = 0kB [ 2291.227510] ? lock_downgrade+0x740/0x740 [ 2291.242839] 2097051 pages RAM [ 2291.244451] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2291.253867] 0 pages HighMem/MovableOnly [ 2291.253954] ? process_one_work+0x6c4/0x14a0 [ 2291.265613] 363848 pages reserved [ 2291.266858] ? call_usermodehelper_exec_work+0x2a0/0x2a0 [ 2291.275908] 0 pages cma reserved [ 2291.275957] kernel_thread+0x2f/0x40 [ 2291.369551] call_usermodehelper_exec_work+0x1ac/0x2a0 [ 2291.374876] ? call_usermodehelper+0x80/0x80 [ 2291.379292] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2291.384764] process_one_work+0x793/0x14a0 [ 2291.389023] ? work_busy+0x320/0x320 [ 2291.392754] ? worker_thread+0x158/0xff0 [ 2291.396826] ? _raw_spin_unlock_irq+0x24/0x80 [ 2291.401330] worker_thread+0x5cc/0xff0 [ 2291.405493] ? rescuer_thread+0xc80/0xc80 [ 2291.409669] kthread+0x30d/0x420 [ 2291.413060] ? kthread_create_on_node+0xd0/0xd0 [ 2291.417730] ret_from_fork+0x24/0x30 [ 2291.841564] Mem-Info: [ 2291.844047] active_anon:14976 inactive_anon:59572 isolated_anon:0 [ 2291.844047] active_file:8 inactive_file:22 isolated_file:0 [ 2291.844047] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2291.844047] slab_reclaimable:12340 slab_unreclaimable:122013 [ 2291.844047] mapped:52225 shmem:60179 pagetables:917 bounce:0 [ 2291.844047] free:25202 free_pcp:0 free_cma:0 [ 2292.022846] Node 0 active_anon:58504kB inactive_anon:193908kB active_file:32kB inactive_file:36kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:174084kB dirty:0kB writeback:0kB shmem:195988kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2292.055072] Node 1 active_anon:1312kB inactive_anon:44380kB active_file:0kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):8kB mapped:34816kB dirty:0kB writeback:0kB shmem:44728kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2292.089616] Node 0 DMA free:11076kB min:204kB low:252kB high:300kB active_anon:24kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2292.121300] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2292.126397] Node 0 DMA32 free:36080kB min:36200kB low:45248kB high:54296kB active_anon:58480kB inactive_anon:193908kB active_file:32kB inactive_file:36kB unevictable:0kB writepending:0kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:7328kB pagetables:3172kB bounce:0kB free_pcp:140kB local_pcp:20kB free_cma:0kB [ 2292.167170] lowmem_reserve[]: 0 0 0 0 0 [ 2292.172738] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2292.203564] lowmem_reserve[]: 0 0 0 0 0 [ 2292.207602] Node 1 Normal free:53624kB min:53696kB low:67120kB high:80544kB active_anon:1312kB inactive_anon:44380kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:288kB pagetables:416kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2292.240686] lowmem_reserve[]: 0 0 0 0 0 [ 2292.244711] Node 0 DMA: 21*4kB (UME) 20*8kB (UME) 13*16kB (UM) 12*32kB (UME) 12*64kB (UME) 6*128kB (UME) 4*256kB (UME) 3*512kB (UME) 2*1024kB (UE) 2*2048kB (UM) 0*4096kB = 11076kB [ 2292.266809] Node 0 DMA32: 769*4kB (UME) 128*8kB (UME) 79*16kB (UME) 826*32kB (UM) 31*64kB (UM) 7*128kB (UM) 3*256kB (UM) 2*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 36468kB [ 2292.289703] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2292.304804] Node 1 Normal: 4*4kB (U) 4*8kB (U) 220*16kB (UM) 1532*32kB (UM) 14*64kB (UM) 2*128kB (UM) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 53744kB [ 2292.323338] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2292.332394] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2292.345883] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2292.355241] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2292.368779] 60199 total pagecache pages [ 2292.372811] 0 pages in swap cache [ 2292.376362] Swap cache stats: add 0, delete 0, find 0/0 [ 2292.385325] Free swap = 0kB [ 2292.389956] Total swap = 0kB [ 2292.393021] 2097051 pages RAM [ 2292.396126] 0 pages HighMem/MovableOnly [ 2292.405624] 363848 pages reserved [ 2292.412715] 0 pages cma reserved [ 2292.416106] Out of memory: Kill process 31078 (syz-executor.2) score 1004 or sacrifice child [ 2292.429672] Killed process 31079 (syz-executor.2) total-vm:93516kB, anon-rss:168kB, file-rss:34820kB, shmem-rss:0kB [ 2292.486838] oom_reaper: reaped process 31079 (syz-executor.2), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 2292.618520] systemd invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 2292.637457] systemd cpuset=/ mems_allowed=0-1 [ 2292.642518] CPU: 1 PID: 1 Comm: systemd Not tainted 4.14.229-syzkaller #0 [ 2292.649770] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2292.659245] Call Trace: [ 2292.661846] dump_stack+0x1b2/0x281 [ 2292.665481] dump_header+0x178/0x82f [ 2292.669212] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2292.674333] ? ___ratelimit+0x2cd/0x530 [ 2292.678414] oom_kill_process.cold+0x10/0xa40 [ 2292.682953] ? lock_downgrade+0x740/0x740 [ 2292.687241] out_of_memory+0x2dc/0x1190 [ 2292.693714] ? oom_killer_disable+0x1c0/0x1c0 [ 2292.698524] ? mutex_trylock+0x152/0x1a0 [ 2292.702869] __alloc_pages_nodemask+0x23e1/0x2720 [ 2292.707734] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2292.712628] alloc_pages_current+0x155/0x260 [ 2292.717066] filemap_fault+0x11a1/0x1ad0 [ 2292.721142] ext4_filemap_fault+0x84/0xb0 [ 2292.725298] __do_fault+0xfa/0x380 [ 2292.728844] __handle_mm_fault+0x2497/0x4620 [ 2292.733279] ? vm_insert_page+0x7c0/0x7c0 [ 2292.737450] ? mark_held_locks+0xa6/0xf0 [ 2292.741521] handle_mm_fault+0x455/0x9c0 [ 2292.745838] __do_page_fault+0x549/0xad0 [ 2292.750136] ? spurious_fault+0x640/0x640 [ 2292.755109] ? do_page_fault+0x60/0x500 [ 2292.759093] ? page_fault+0x2f/0x50 [ 2292.762824] page_fault+0x45/0x50 [ 2292.767875] RIP: 0001:0xffffffffffffffff [ 2292.773772] RSP: 1ec7df50:00007ffd82fd5880 EFLAGS: 7ffd82fd55c0 [ 2292.781052] Mem-Info: [ 2292.797290] active_anon:14954 inactive_anon:59572 isolated_anon:0 [ 2292.797290] active_file:7 inactive_file:1 isolated_file:2 [ 2292.797290] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2292.797290] slab_reclaimable:12340 slab_unreclaimable:121588 [ 2292.797290] mapped:52240 shmem:60179 pagetables:860 bounce:0 [ 2292.797290] free:13770 free_pcp:0 free_cma:0 [ 2292.836724] Node 0 active_anon:58504kB inactive_anon:193908kB active_file:32kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:174144kB dirty:0kB writeback:0kB shmem:195988kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2292.865015] Node 1 active_anon:1312kB inactive_anon:44380kB active_file:0kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):8kB mapped:34816kB dirty:0kB writeback:0kB shmem:44728kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2292.892950] Node 0 DMA free:10964kB min:204kB low:252kB high:300kB active_anon:24kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2292.920753] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2292.925825] Node 0 DMA32 free:17772kB min:36200kB low:45248kB high:54296kB active_anon:58480kB inactive_anon:193908kB active_file:32kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:7296kB pagetables:3024kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2292.958577] lowmem_reserve[]: 0 0 0 0 0 [ 2292.962962] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2292.989349] lowmem_reserve[]: 0 0 0 0 0 [ 2292.993364] Node 1 Normal free:26564kB min:53696kB low:67120kB high:80544kB active_anon:1220kB inactive_anon:44380kB active_file:0kB inactive_file:20kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:288kB pagetables:412kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2293.022248] lowmem_reserve[]: 0 0 0 0 0 [ 2293.026483] Node 0 DMA: 3*4kB (UME) 15*8kB (UME) 13*16kB (UM) 12*32kB (UME) 12*64kB (UME) 6*128kB (UME) 4*256kB (UME) 3*512kB (UME) 2*1024kB (UE) 2*2048kB (UM) 0*4096kB = 10964kB [ 2293.043096] Node 0 DMA32: 765*4kB (ME) 127*8kB (UME) 77*16kB (ME) 254*32kB (UM) 32*64kB (UM) 7*128kB (UM) 3*256kB (UM) 2*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 18172kB [ 2293.058940] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2293.070193] Node 1 Normal: 9*4kB (M) 3*8kB (M) 2*16kB (M) 795*32kB (UM) 14*64kB (UM) 2*128kB (UM) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 26684kB [ 2293.084219] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2293.095435] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2293.106733] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2293.121496] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2293.130183] 60199 total pagecache pages [ 2293.134175] 0 pages in swap cache [ 2293.137633] Swap cache stats: add 0, delete 0, find 0/0 [ 2293.147954] Free swap = 0kB [ 2293.151066] Total swap = 0kB [ 2293.154093] 2097051 pages RAM [ 2293.157194] 0 pages HighMem/MovableOnly [ 2293.165689] 363848 pages reserved [ 2293.169221] 0 pages cma reserved [ 2293.172638] Out of memory: Kill process 31082 (syz-executor.5) score 1004 or sacrifice child [ 2293.186515] Killed process 31084 (syz-executor.5) total-vm:93648kB, anon-rss:168kB, file-rss:34816kB, shmem-rss:0kB [ 2293.222503] syz-executor.4 invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 2293.266905] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 2293.296229] CPU: 1 PID: 29636 Comm: syz-executor.4 Not tainted 4.14.229-syzkaller #0 [ 2293.304267] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2293.313639] Call Trace: [ 2293.316247] dump_stack+0x1b2/0x281 [ 2293.319923] dump_header+0x178/0x82f [ 2293.323652] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2293.328777] ? ___ratelimit+0x2cd/0x530 [ 2293.332780] oom_kill_process.cold+0x10/0xa40 [ 2293.337308] out_of_memory+0xe3e/0x1190 [ 2293.341318] ? oom_killer_disable+0x1c0/0x1c0 [ 2293.346109] ? mutex_trylock+0x152/0x1a0 [ 2293.350208] __alloc_pages_nodemask+0x23e1/0x2720 [ 2293.355074] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2293.359944] alloc_pages_current+0x155/0x260 [ 2293.364379] filemap_fault+0x11a1/0x1ad0 [ 2293.368478] ext4_filemap_fault+0x84/0xb0 [ 2293.372652] __do_fault+0xfa/0x380 [ 2293.376238] __handle_mm_fault+0x2497/0x4620 [ 2293.380661] ? vm_insert_page+0x7c0/0x7c0 [ 2293.385078] ? lock_acquire+0x170/0x3f0 [ 2293.389067] ? mark_held_locks+0xa6/0xf0 [ 2293.393136] handle_mm_fault+0x455/0x9c0 [ 2293.397211] __do_page_fault+0x549/0xad0 [ 2293.401287] ? spurious_fault+0x640/0x640 [ 2293.405447] ? do_page_fault+0x60/0x500 [ 2293.409425] ? page_fault+0x2f/0x50 [ 2293.413066] page_fault+0x45/0x50 [ 2293.416710] RIP: 1da886b:0xc [ 2293.419734] RSP: 0016:00007ffef01b8e3c EFLAGS: 01da8810 [ 2293.434742] syz-executor.5: [ 2293.440348] syz-executor.2: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2293.447162] Mem-Info: [ 2293.467006] page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2293.476877] active_anon:14924 inactive_anon:59572 isolated_anon:0 [ 2293.476877] active_file:10 inactive_file:10 isolated_file:0 [ 2293.476877] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2293.476877] slab_reclaimable:12340 slab_unreclaimable:121578 [ 2293.476877] mapped:52225 shmem:60179 pagetables:870 bounce:0 [ 2293.476877] free:13921 free_pcp:30 free_cma:0 [ 2293.480308] syz-executor.2 cpuset= [ 2293.519853] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 2293.535367] CPU: 0 PID: 31084 Comm: syz-executor.5 Not tainted 4.14.229-syzkaller #0 [ 2293.536907] Node 0 active_anon:58476kB inactive_anon:193908kB active_file:32kB inactive_file:36kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:174084kB dirty:0kB writeback:0kB shmem:195988kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2293.543274] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2293.543280] Call Trace: [ 2293.543303] dump_stack+0x1b2/0x281 [ 2293.543316] warn_alloc.cold+0x96/0x1cc [ 2293.543328] ? zone_watermark_ok_safe+0x220/0x220 [ 2293.543338] ? usleep_range+0x130/0x130 [ 2293.543346] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 2293.543358] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 2293.543367] ? run_timer_softirq+0x5a0/0x5a0 [ 2293.543384] __alloc_pages_nodemask+0x2127/0x2720 [ 2293.543398] ? lock_acquire+0x170/0x3f0 [ 2293.543410] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2293.543419] ? ion_page_pool_alloc+0x9e/0x1b0 [ 2293.543434] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2293.543455] alloc_pages_current+0x155/0x260 [ 2293.543467] ion_page_pool_alloc+0x118/0x1b0 [ 2293.543476] ion_system_heap_allocate+0x133/0x8c0 [ 2293.543486] ? ion_alloc+0x187/0x810 [ 2293.543504] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2293.543514] ? ion_system_contig_heap_create+0x130/0x130 [ 2293.543525] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2293.543534] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2293.543543] ion_alloc+0x204/0x810 [ 2293.543555] ? ion_dma_buf_release+0x40/0x40 [ 2293.543566] ? __might_fault+0x177/0x1b0 [ 2293.543577] ion_ioctl+0xea/0x1f0 [ 2293.543586] ? ion_query_heaps+0x360/0x360 [ 2293.543598] ? ion_query_heaps+0x360/0x360 [ 2293.543609] do_vfs_ioctl+0x75a/0xff0 [ 2293.543620] ? ioctl_preallocate+0x1a0/0x1a0 [ 2293.543627] ? lock_downgrade+0x740/0x740 [ 2293.543641] ? __fget+0x225/0x360 [ 2293.543651] ? do_vfs_ioctl+0xff0/0xff0 [ 2293.543664] ? security_file_ioctl+0x83/0xb0 [ 2293.543674] SyS_ioctl+0x7f/0xb0 [ 2293.543683] ? do_vfs_ioctl+0xff0/0xff0 [ 2293.543695] do_syscall_64+0x1d5/0x640 [ 2293.543711] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2293.543720] RIP: 0033:0x466459 [ 2293.543738] RSP: 002b:00007f17b5648188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2293.543746] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 2293.543750] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2293.543755] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2293.543760] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2293.543765] R13: 00007fff4326a6cf R14: 00007f17b5648300 R15: 0000000000022000 [ 2293.546397] Mem-Info: [ 2293.596519] Node 1 active_anon:1220kB inactive_anon:44380kB active_file:8kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:34816kB dirty:0kB writeback:0kB shmem:44728kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2293.605144] / [ 2293.624660] Node 0 [ 2293.638132] mems_allowed=0-1 [ 2293.662738] DMA free:10964kB min:204kB low:252kB high:300kB active_anon:24kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2293.678283] active_anon:14924 inactive_anon:59572 isolated_anon:0 [ 2293.678283] active_file:10 inactive_file:10 isolated_file:0 [ 2293.678283] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2293.678283] slab_reclaimable:12340 slab_unreclaimable:121578 [ 2293.678283] mapped:52225 shmem:60179 pagetables:870 bounce:0 [ 2293.678283] free:13921 free_pcp:30 free_cma:0 [ 2293.687205] lowmem_reserve[]: [ 2293.709170] CPU: 0 PID: 31079 Comm: syz-executor.2 Not tainted 4.14.229-syzkaller #0 [ 2293.719958] 0 [ 2293.723544] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2293.727963] 2717 [ 2293.731322] Call Trace: [ 2293.731345] dump_stack+0x1b2/0x281 [ 2293.731358] warn_alloc.cold+0x96/0x1cc [ 2293.731369] ? zone_watermark_ok_safe+0x220/0x220 [ 2293.731378] ? usleep_range+0x130/0x130 [ 2293.731388] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 2293.731400] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 2293.731408] ? run_timer_softirq+0x5a0/0x5a0 [ 2293.731426] __alloc_pages_nodemask+0x2127/0x2720 [ 2293.731444] ? lock_acquire+0x170/0x3f0 [ 2293.744039] 2718 [ 2293.744518] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2293.747687] 2718 [ 2293.755396] ? ion_page_pool_alloc+0x9e/0x1b0 [ 2293.755413] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2293.755430] alloc_pages_current+0x155/0x260 [ 2293.755442] ion_page_pool_alloc+0x118/0x1b0 [ 2293.755451] ion_system_heap_allocate+0x133/0x8c0 [ 2293.755460] ? ion_alloc+0x187/0x810 [ 2293.755474] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2293.771287] 2718 [ 2293.777328] ? ion_system_contig_heap_create+0x130/0x130 [ 2293.794281] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2293.830366] Node 0 [ 2293.854563] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2293.854576] ion_alloc+0x204/0x810 [ 2293.854589] ? ion_dma_buf_release+0x40/0x40 [ 2293.854601] ? __might_fault+0x177/0x1b0 [ 2293.854611] ion_ioctl+0xea/0x1f0 [ 2293.854620] ? ion_query_heaps+0x360/0x360 [ 2293.854630] ? vm_insert_page+0x7c0/0x7c0 [ 2293.854638] ? ion_query_heaps+0x360/0x360 [ 2293.854648] do_vfs_ioctl+0x75a/0xff0 [ 2293.854659] ? ioctl_preallocate+0x1a0/0x1a0 [ 2293.854669] ? lock_downgrade+0x740/0x740 [ 2293.854682] ? __fget+0x225/0x360 [ 2293.854709] ? do_vfs_ioctl+0xff0/0xff0 [ 2293.898610] DMA32 free:18036kB min:36200kB low:45248kB high:54296kB active_anon:58452kB inactive_anon:193908kB active_file:32kB inactive_file:36kB unevictable:0kB writepending:0kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:7296kB pagetables:3068kB bounce:0kB free_pcp:120kB local_pcp:0kB free_cma:0kB [ 2293.900930] ? security_file_ioctl+0x83/0xb0 [ 2293.902721] lowmem_reserve[]: [ 2293.912094] SyS_ioctl+0x7f/0xb0 [ 2293.912105] ? do_vfs_ioctl+0xff0/0xff0 [ 2293.912116] do_syscall_64+0x1d5/0x640 [ 2293.912130] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2293.912138] RIP: 0033:0x466459 [ 2293.912143] RSP: 002b:00007effc187a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2293.912152] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 2293.912157] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2293.912162] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2293.912167] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2293.912173] R13: 00007ffc8c893f1f R14: 00007effc187a300 R15: 0000000000022000 [ 2293.936450] Node 0 active_anon:58476kB inactive_anon:193908kB active_file:32kB inactive_file:36kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:174084kB dirty:0kB writeback:0kB shmem:195988kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2293.945043] 0 [ 2293.968575] Node 1 active_anon:1220kB inactive_anon:44380kB active_file:8kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:34816kB dirty:0kB writeback:0kB shmem:44728kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2293.977005] 0 [ 2294.001518] Node 0 [ 2294.013898] 0 [ 2294.033512] DMA free:10964kB min:204kB low:252kB high:300kB active_anon:24kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2294.046954] 0 [ 2294.060285] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2294.060308] Node 0 DMA32 free:18280kB min:36200kB low:45248kB high:54296kB active_anon:58452kB inactive_anon:193908kB active_file:32kB inactive_file:36kB unevictable:0kB writepending:0kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:7296kB pagetables:3068kB bounce:0kB free_pcp:308kB local_pcp:308kB free_cma:0kB [ 2294.060330] lowmem_reserve[]: 0 0 0 0 0 [ 2294.060348] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2294.060366] lowmem_reserve[]: 0 0 0 0 0 [ 2294.060386] Node 1 Normal free:26684kB min:53696kB low:67120kB high:80544kB active_anon:1220kB inactive_anon:44380kB active_file:8kB inactive_file:4kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:288kB pagetables:412kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2294.060408] lowmem_reserve[]: 0 0 0 0 0 [ 2294.060428] Node 0 DMA: 3*4kB (UME) 15*8kB (UME) 13*16kB [ 2294.076364] 0 [ 2294.104782] (UM) [ 2294.133274] 12*32kB [ 2294.151215] Node 0 [ 2294.168121] (UME) [ 2294.183200] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2294.211755] 12*64kB [ 2294.237878] lowmem_reserve[]: [ 2294.272295] (UME) [ 2294.306930] 0 [ 2294.440328] 6*128kB [ 2294.444482] 0 0 0 0 [ 2294.451396] (UME) 4*256kB (UME) 3*512kB (UME) 2*1024kB (UE) 2*2048kB (UM) 0*4096kB = 10964kB [ 2294.477266] Node 1 Normal free:101452kB min:53696kB low:67120kB high:80544kB active_anon:1220kB inactive_anon:44380kB active_file:208kB inactive_file:4504kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:320kB pagetables:412kB bounce:0kB free_pcp:332kB local_pcp:212kB free_cma:0kB [ 2294.495715] Node 0 [ 2294.508525] lowmem_reserve[]: 0 0 0 0 0 [ 2294.538374] systemd[1]: rsyslog.service: Main process exited, code=killed, status=9/KILL [ 2294.551517] Node 0 DMA: 3*4kB (UME) 13*8kB (UME) 13*16kB (UM) 12*32kB (UME) 14*64kB (UME) 6*128kB (UME) 4*256kB (UME) 3*512kB (UME) 2*1024kB (UE) 2*2048kB (UM) 0*4096kB = 11076kB [ 2294.552359] DMA32: [ 2294.607207] systemd[1]: Failed to start System Logging Service. [ 2294.617035] Node 0 DMA32: 766*4kB (UME) 197*8kB (UME) 86*16kB (UME) 261*32kB (UM) 313*64kB (UM) 9*128kB (UM) 3*256kB (UM) 2*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 37344kB [ 2294.641922] 766*4kB (UME) 195*8kB (UME) 86*16kB (UME) 261*32kB (UM) 313*64kB (UM) 9*128kB (UM) 3*256kB (UM) 2*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 37328kB [ 2294.650536] systemd[1]: rsyslog.service: Unit entered failed state. [ 2294.681300] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2294.688115] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2294.710389] systemd[1]: rsyslog.service: Failed with result 'signal'. [ 2294.729063] Node 1 Normal: 0*4kB 2*8kB (UM) 0*16kB 0*32kB 1653*64kB (UM) 181*128kB (U) 111*256kB (UM) 13*512kB (UM) 19*1024kB (U) 0*2048kB 0*4096kB = 183504kB [ 2294.748162] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2294.772422] Node 1 Normal: 0*4kB 0*8kB 1*16kB (M) 1*32kB (U) 2210*64kB (UM) 185*128kB (U) 110*256kB (U) 13*512kB (UM) 19*1024kB (U) 0*2048kB 0*4096kB = 219440kB [ 2294.798169] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2294.806786] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2294.818662] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2294.848125] 62345 total pagecache pages [ 2294.848144] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2294.852132] 0 pages in swap cache [ 2294.878168] Swap cache stats: add 0, delete 0, find 0/0 [ 2294.883744] Free swap = 0kB [ 2294.886759] Total swap = 0kB [ 2294.887576] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2294.889950] 2097051 pages RAM [ 2294.901688] 0 pages HighMem/MovableOnly [ 2294.902488] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2294.918118] 363848 pages reserved [ 2294.921608] 0 pages cma reserved [ 2294.928124] Out of memory (oom_kill_allocating_task): Kill process 29636 (syz-executor.4) score 0 or sacrifice child [ 2294.928695] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2294.946663] systemd[1]: rsyslog.service: Service hold-off time over, scheduling restart. [ 2294.978305] 62345 total pagecache pages [ 2294.979168] Killed process 29636 (syz-executor.4) total-vm:93120kB, anon-rss:104kB, file-rss:32928kB, shmem-rss:0kB [ 2294.982298] 0 pages in swap cache [ 2294.982304] Swap cache stats: add 0, delete 0, find 0/0 [ 2294.982307] Free swap = 0kB [ 2294.982310] Total swap = 0kB [ 2294.982317] 2097051 pages RAM [ 2294.982320] 0 pages HighMem/MovableOnly [ 2294.982323] 363848 pages reserved [ 2294.982326] 0 pages cma reserved [ 2295.024477] systemd[1]: Stopped System Logging Service. [ 2295.041179] systemd[1]: Starting System Logging Service... [ 2295.120914] oom_reaper: reaped process 31084 (syz-executor.5), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 2295.192117] rsyslogd invoked oom-killer: gfp_mask=0x15080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null), order=0, oom_score_adj=0 [ 2295.262629] syz-executor.2: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2295.285292] rsyslogd cpuset=/ mems_allowed=0-1 [ 2295.293874] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 2295.300735] CPU: 1 PID: 31079 Comm: syz-executor.2 Not tainted 4.14.229-syzkaller #0 [ 2295.308623] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2295.318088] Call Trace: [ 2295.320698] dump_stack+0x1b2/0x281 [ 2295.324335] warn_alloc.cold+0x96/0x1cc [ 2295.328343] ? zone_watermark_ok_safe+0x220/0x220 [ 2295.333221] __alloc_pages_nodemask+0x2127/0x2720 [ 2295.338084] ? lock_acquire+0x170/0x3f0 [ 2295.342088] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2295.346949] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2295.352416] ? __mutex_unlock_slowpath+0x75/0x770 [ 2295.357295] alloc_pages_current+0x155/0x260 [ 2295.361737] ion_page_pool_alloc+0x118/0x1b0 [ 2295.366260] ion_system_heap_allocate+0x133/0x8c0 [ 2295.371104] ? _raw_spin_unlock+0x29/0x40 [ 2295.375259] ? _ion_heap_freelist_drain+0x6e/0x410 [ 2295.380197] ? ion_system_contig_heap_create+0x130/0x130 [ 2295.385655] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2295.390682] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2295.395539] ion_alloc+0x27a/0x810 [ 2295.399082] ? ion_dma_buf_release+0x40/0x40 [ 2295.403520] ? __might_fault+0x177/0x1b0 [ 2295.407579] ion_ioctl+0xea/0x1f0 [ 2295.411029] ? ion_query_heaps+0x360/0x360 [ 2295.415266] ? vm_insert_page+0x7c0/0x7c0 [ 2295.419416] ? ion_query_heaps+0x360/0x360 [ 2295.423654] do_vfs_ioctl+0x75a/0xff0 [ 2295.427461] ? ioctl_preallocate+0x1a0/0x1a0 [ 2295.431871] ? lock_downgrade+0x740/0x740 [ 2295.436020] ? __fget+0x225/0x360 [ 2295.439469] ? do_vfs_ioctl+0xff0/0xff0 [ 2295.443442] ? security_file_ioctl+0x83/0xb0 [ 2295.447854] SyS_ioctl+0x7f/0xb0 [ 2295.451248] ? do_vfs_ioctl+0xff0/0xff0 [ 2295.455223] do_syscall_64+0x1d5/0x640 [ 2295.459237] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2295.464429] RIP: 0033:0x466459 [ 2295.467615] RSP: 002b:00007effc187a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2295.475350] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 2295.482658] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2295.489935] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2295.497222] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2295.504506] R13: 00007ffc8c893f1f R14: 00007effc187a300 R15: 0000000000022000 [ 2295.511802] CPU: 0 PID: 31097 Comm: rsyslogd Not tainted 4.14.229-syzkaller #0 [ 2295.519188] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2295.528548] Call Trace: [ 2295.531235] dump_stack+0x1b2/0x281 [ 2295.534875] dump_header+0x178/0x82f [ 2295.538631] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2295.543742] ? ___ratelimit+0x2cd/0x530 [ 2295.547737] oom_kill_process.cold+0x10/0xa40 [ 2295.552270] out_of_memory+0xe3e/0x1190 [ 2295.556280] ? oom_killer_disable+0x1c0/0x1c0 [ 2295.560774] ? mutex_trylock+0x152/0x1a0 [ 2295.564850] __alloc_pages_nodemask+0x23e1/0x2720 [ 2295.569716] ? _find_next_bit+0xdb/0x100 [ 2295.573785] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2295.578634] ? lock_acquire+0x170/0x3f0 [ 2295.582608] ? do_raw_spin_unlock+0x164/0x220 [ 2295.587119] alloc_pages_current+0x155/0x260 [ 2295.591533] __pmd_alloc+0x37/0x3f0 [ 2295.595162] move_page_tables+0xf00/0x17d0 [ 2295.599419] ? vmacache_update+0xbb/0x130 [ 2295.603606] shift_arg_pages+0x17c/0x3e0 [ 2295.607686] ? put_arg_page+0x1c0/0x1c0 [ 2295.611656] ? change_protection+0xa0/0xa0 [ 2295.615881] ? lock_downgrade+0x740/0x740 [ 2295.620029] ? lock_acquire+0x170/0x3f0 [ 2295.624000] ? setup_arg_pages+0x242/0x6f0 [ 2295.628238] setup_arg_pages+0x584/0x6f0 [ 2295.632332] ? shift_arg_pages+0x3e0/0x3e0 [ 2295.636574] ? get_random_u64+0xd4/0x1c0 [ 2295.640653] load_elf_binary+0xa01/0x4750 [ 2295.644830] ? elf_core_dump+0x4410/0x4410 [ 2295.649090] search_binary_handler.part.0+0xd5/0x640 [ 2295.654294] do_execveat_common+0x1099/0x1f30 [ 2295.658805] ? copy_strings_kernel+0x110/0x110 [ 2295.663396] ? strncpy_from_user+0x210/0x2c0 [ 2295.667816] ? getname_flags+0x22e/0x550 [ 2295.671884] SyS_execve+0x3b/0x50 [ 2295.675345] ? setup_new_exec+0x770/0x770 [ 2295.679529] do_syscall_64+0x1d5/0x640 [ 2295.683431] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2295.688744] RIP: 0033:0x7f24bf7e9647 [ 2295.692598] RSP: 002b:00007ffd82fd5248 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 2295.700334] RAX: ffffffffffffffda RBX: 000055891edb7330 RCX: 00007f24bf7e9647 [ 2295.707704] RDX: 000055891ecea8a0 RSI: 000055891ece6a00 RDI: 000055891ecc70a0 [ 2295.714983] RBP: 00007ffd82fd53b0 R08: 000000000000fcfe R09: 0000000000000010 [ 2295.722256] R10: 000055891ecc6700 R11: 0000000000000246 R12: 000055891ecc62a8 [ 2295.729527] R13: 0000000000000000 R14: 000055891ece6a00 R15: 00007ffd82fd5490 [ 2295.750355] syz-executor.5: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2295.778125] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 2295.783351] CPU: 0 PID: 31084 Comm: syz-executor.5 Not tainted 4.14.229-syzkaller #0 [ 2295.791256] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2295.800769] Call Trace: [ 2295.803381] dump_stack+0x1b2/0x281 [ 2295.807018] warn_alloc.cold+0x96/0x1cc [ 2295.811009] ? zone_watermark_ok_safe+0x220/0x220 [ 2295.815871] __alloc_pages_nodemask+0x2127/0x2720 [ 2295.820723] ? lock_acquire+0x170/0x3f0 [ 2295.824832] ? lock_acquire+0x170/0x3f0 [ 2295.828956] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2295.833816] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2295.839303] ? __mutex_unlock_slowpath+0x75/0x770 [ 2295.844298] alloc_pages_current+0x155/0x260 [ 2295.848722] ion_page_pool_alloc+0x118/0x1b0 [ 2295.853156] ion_system_heap_allocate+0x133/0x8c0 [ 2295.858008] ? _raw_spin_unlock+0x29/0x40 [ 2295.862181] ? _ion_heap_freelist_drain+0x6e/0x410 [ 2295.867114] ? ion_system_contig_heap_create+0x130/0x130 [ 2295.872568] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2295.877616] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2295.882906] ion_alloc+0x27a/0x810 [ 2295.886460] ? ion_dma_buf_release+0x40/0x40 [ 2295.890907] ? __might_fault+0x177/0x1b0 [ 2295.894993] ion_ioctl+0xea/0x1f0 [ 2295.898462] ? ion_query_heaps+0x360/0x360 [ 2295.902719] ? ion_query_heaps+0x360/0x360 [ 2295.907050] do_vfs_ioctl+0x75a/0xff0 [ 2295.910875] ? ioctl_preallocate+0x1a0/0x1a0 [ 2295.915289] ? lock_downgrade+0x740/0x740 [ 2295.919460] ? __fget+0x225/0x360 [ 2295.922916] ? do_vfs_ioctl+0xff0/0xff0 [ 2295.926906] ? security_file_ioctl+0x83/0xb0 [ 2295.931317] SyS_ioctl+0x7f/0xb0 [ 2295.934695] ? do_vfs_ioctl+0xff0/0xff0 [ 2295.938671] do_syscall_64+0x1d5/0x640 [ 2295.942563] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2295.947812] RIP: 0033:0x466459 [ 2295.951001] RSP: 002b:00007f17b5648188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2295.958779] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 2295.966058] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2295.973427] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2295.980705] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2295.988243] R13: 00007fff4326a6cf R14: 00007f17b5648300 R15: 0000000000022000 [ 2296.003280] warn_alloc_show_mem: 1 callbacks suppressed [ 2296.003285] Mem-Info: [ 2296.011249] active_anon:14901 inactive_anon:59572 isolated_anon:0 [ 2296.011249] active_file:30 inactive_file:0 isolated_file:1 [ 2296.011249] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2296.011249] slab_reclaimable:12327 slab_unreclaimable:120607 [ 2296.011249] mapped:52250 shmem:60179 pagetables:907 bounce:0 [ 2296.011249] free:13904 free_pcp:0 free_cma:0 [ 2296.014562] Mem-Info: [ 2296.044690] Node 0 active_anon:58280kB inactive_anon:193908kB active_file:28kB inactive_file:24kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:174084kB dirty:0kB writeback:0kB shmem:195988kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2296.051727] active_anon:14887 inactive_anon:59572 isolated_anon:0 [ 2296.051727] active_file:17 inactive_file:17 isolated_file:0 [ 2296.051727] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2296.051727] slab_reclaimable:12332 slab_unreclaimable:120648 [ 2296.051727] mapped:52225 shmem:60179 pagetables:848 bounce:0 [ 2296.051727] free:14030 free_pcp:0 free_cma:0 [ 2296.075095] Node 1 active_anon:1264kB inactive_anon:44380kB active_file:40kB inactive_file:40kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:34816kB dirty:0kB writeback:0kB shmem:44728kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2296.112391] Node 0 active_anon:58284kB inactive_anon:193908kB active_file:28kB inactive_file:28kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:174084kB dirty:0kB writeback:0kB shmem:195988kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2296.149312] Node 0 DMA free:10976kB min:204kB low:252kB high:300kB active_anon:24kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2296.195381] Node 1 active_anon:1264kB inactive_anon:44380kB active_file:40kB inactive_file:40kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:34816kB dirty:0kB writeback:0kB shmem:44728kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2296.203892] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2296.236759] Node 0 DMA32 free:18364kB min:36200kB low:45248kB high:54296kB active_anon:58260kB inactive_anon:193908kB active_file:28kB inactive_file:28kB unevictable:0kB writepending:0kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:7328kB pagetables:2980kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2296.256635] Node 0 [ 2296.272370] lowmem_reserve[]: 0 0 0 0 0 [ 2296.280939] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2296.295322] DMA free:10976kB min:204kB low:252kB high:300kB active_anon:24kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2296.309081] lowmem_reserve[]: 0 0 0 0 0 [ 2296.338987] Node 1 Normal free:26780kB min:53696kB low:67120kB high:80544kB active_anon:1264kB inactive_anon:44380kB active_file:40kB inactive_file:40kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:288kB pagetables:412kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2296.372392] lowmem_reserve[]: 0 0 0 0 0 [ 2296.376540] Node 0 DMA: 2*4kB (ME) 9*8kB (UME) 13*16kB (UM) 12*32kB (UME) 13*64kB (UME) 6*128kB (UME) 4*256kB (UME) 3*512kB (UME) 2*1024kB (UE) 2*2048kB (UM) 0*4096kB = 10976kB [ 2296.399560] Node 0 DMA32: 778*4kB (ME) 128*8kB (UME) 75*16kB (UME) 34*32kB (UM) 117*64kB (UM) 16*128kB (UM) 4*256kB (UM) 2*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 18008kB [ 2296.423942] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2296.434813] Node 1 Normal: 59*4kB (UM) 34*8kB (UM) 24*16kB (UM) 19*32kB (UM) 23*64kB (M) 8*128kB (UM) 33*256kB (UM) 24*512kB (UM) 2*1024kB (M) 0*2048kB 0*4096kB = 26780kB [ 2296.457179] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2296.497887] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2296.502699] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2296.527514] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2296.594303] Node 0 DMA32 free:18008kB min:36200kB low:45248kB high:54296kB active_anon:58260kB inactive_anon:193908kB active_file:28kB inactive_file:28kB unevictable:0kB writepending:0kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:7328kB pagetables:2980kB bounce:0kB free_pcp:120kB local_pcp:120kB free_cma:0kB [ 2296.641588] syz-executor.5: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2296.659686] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2296.675574] 60213 total pagecache pages [ 2296.681902] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 2296.687217] CPU: 0 PID: 31084 Comm: syz-executor.5 Not tainted 4.14.229-syzkaller #0 [ 2296.695111] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2296.704477] Call Trace: [ 2296.707081] dump_stack+0x1b2/0x281 [ 2296.710722] warn_alloc.cold+0x96/0x1cc [ 2296.714821] ? zone_watermark_ok_safe+0x220/0x220 [ 2296.719670] ? usleep_range+0x130/0x130 [ 2296.723653] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 2296.728767] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 2296.733790] ? run_timer_softirq+0x5a0/0x5a0 [ 2296.738209] __alloc_pages_nodemask+0x2127/0x2720 [ 2296.743072] ? lock_acquire+0x170/0x3f0 [ 2296.747060] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2296.751917] ? ion_page_pool_alloc+0x9e/0x1b0 [ 2296.756431] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2296.761920] alloc_pages_current+0x155/0x260 [ 2296.766481] ion_page_pool_alloc+0x118/0x1b0 [ 2296.770925] ion_system_heap_allocate+0x133/0x8c0 [ 2296.775800] ? _raw_spin_unlock+0x29/0x40 [ 2296.780110] ? _ion_heap_freelist_drain+0x6e/0x410 [ 2296.785177] ? ion_system_contig_heap_create+0x130/0x130 [ 2296.790650] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2296.795688] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2296.800591] ion_alloc+0x27a/0x810 [ 2296.804178] ? ion_dma_buf_release+0x40/0x40 [ 2296.808629] ? __might_fault+0x177/0x1b0 [ 2296.812702] ion_ioctl+0xea/0x1f0 [ 2296.816163] ? ion_query_heaps+0x360/0x360 [ 2296.820417] ? ion_query_heaps+0x360/0x360 [ 2296.824686] do_vfs_ioctl+0x75a/0xff0 [ 2296.828507] ? ioctl_preallocate+0x1a0/0x1a0 [ 2296.832928] ? lock_downgrade+0x740/0x740 [ 2296.837090] ? __fget+0x225/0x360 [ 2296.840561] ? do_vfs_ioctl+0xff0/0xff0 [ 2296.844549] ? security_file_ioctl+0x83/0xb0 [ 2296.849020] SyS_ioctl+0x7f/0xb0 [ 2296.852412] ? do_vfs_ioctl+0xff0/0xff0 [ 2296.856408] do_syscall_64+0x1d5/0x640 [ 2296.860307] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2296.865499] RIP: 0033:0x466459 [ 2296.868688] RSP: 002b:00007f17b5648188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2296.876414] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 2296.883702] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2296.890984] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2296.898267] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2296.905543] R13: 00007fff4326a6cf R14: 00007f17b5648300 R15: 0000000000022000 [ 2296.935787] 0 pages in swap cache [ 2296.939376] Swap cache stats: add 0, delete 0, find 0/0 [ 2296.944748] Free swap = 0kB [ 2296.947826] Total swap = 0kB [ 2296.955460] 2097051 pages RAM [ 2296.958649] lowmem_reserve[]: 0 0 0 0 0 [ 2296.962653] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2296.992748] 0 pages HighMem/MovableOnly [ 2296.996737] 363848 pages reserved [ 2297.004461] 0 pages cma reserved [ 2297.035616] lowmem_reserve[]: 0 0 0 0 0 [ 2297.057036] Node 1 Normal free:26780kB min:53696kB low:67120kB high:80544kB active_anon:1264kB inactive_anon:44380kB active_file:60kB inactive_file:20kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:288kB pagetables:412kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2297.261513] lowmem_reserve[]: 0 0 0 0 0 [ 2297.265581] Node 0 DMA: 2*4kB (ME) 9*8kB (UME) 13*16kB (UM) 12*32kB (UME) 13*64kB (UME) 6*128kB (UME) 4*256kB (UME) 3*512kB (UME) 2*1024kB (UE) 2*2048kB (UM) 0*4096kB = 10976kB [ 2297.288109] syz-executor.2: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2297.309472] Node 0 DMA32: 778*4kB (ME) 128*8kB (UME) 75*16kB (UME) 34*32kB (UM) 117*64kB (UM) 16*128kB (UM) 4*256kB (UM) 2*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 18008kB [ 2297.331574] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 2297.336760] CPU: 0 PID: 31079 Comm: syz-executor.2 Not tainted 4.14.229-syzkaller #0 [ 2297.344674] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2297.354045] Call Trace: [ 2297.356655] dump_stack+0x1b2/0x281 [ 2297.360314] warn_alloc.cold+0x96/0x1cc [ 2297.364320] ? zone_watermark_ok_safe+0x220/0x220 [ 2297.369446] ? usleep_range+0x130/0x130 [ 2297.373434] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 2297.378645] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 2297.383673] ? run_timer_softirq+0x5a0/0x5a0 [ 2297.388097] __alloc_pages_nodemask+0x2127/0x2720 [ 2297.392966] ? lock_acquire+0x170/0x3f0 [ 2297.396962] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2297.401840] ? ion_page_pool_alloc+0x9e/0x1b0 [ 2297.406390] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2297.411863] alloc_pages_current+0x155/0x260 [ 2297.416287] ion_page_pool_alloc+0x118/0x1b0 [ 2297.420711] ion_system_heap_allocate+0x133/0x8c0 [ 2297.425572] ? _raw_spin_unlock+0x29/0x40 [ 2297.429760] ? _ion_heap_freelist_drain+0x6e/0x410 [ 2297.434702] ? ion_system_contig_heap_create+0x130/0x130 [ 2297.440270] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2297.445298] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2297.450784] ion_alloc+0x27a/0x810 [ 2297.454334] ? ion_dma_buf_release+0x40/0x40 [ 2297.458756] ? __might_fault+0x177/0x1b0 [ 2297.462832] ion_ioctl+0xea/0x1f0 [ 2297.466329] ? ion_query_heaps+0x360/0x360 [ 2297.470581] ? vm_insert_page+0x7c0/0x7c0 [ 2297.474828] ? ion_query_heaps+0x360/0x360 [ 2297.479078] do_vfs_ioctl+0x75a/0xff0 [ 2297.482895] ? ioctl_preallocate+0x1a0/0x1a0 [ 2297.487317] ? lock_downgrade+0x740/0x740 [ 2297.491480] ? __fget+0x225/0x360 [ 2297.494950] ? do_vfs_ioctl+0xff0/0xff0 [ 2297.498940] ? security_file_ioctl+0x83/0xb0 [ 2297.503365] SyS_ioctl+0x7f/0xb0 [ 2297.506740] ? do_vfs_ioctl+0xff0/0xff0 [ 2297.510737] do_syscall_64+0x1d5/0x640 [ 2297.514645] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2297.519845] RIP: 0033:0x466459 [ 2297.523067] RSP: 002b:00007effc187a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2297.526437] warn_alloc_show_mem: 1 callbacks suppressed [ 2297.526441] Mem-Info: [ 2297.530818] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 2297.530824] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2297.530829] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2297.530834] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2297.530839] R13: 00007ffc8c893f1f R14: 00007effc187a300 R15: 0000000000022000 [ 2297.540330] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2297.595648] Node 1 Normal: 59*4kB (UM) 34*8kB (UM) 24*16kB (UM) 19*32kB (UM) 23*64kB (M) 8*128kB (UM) 33*256kB (UM) 24*512kB (UM) 2*1024kB (M) 0*2048kB 0*4096kB = 26780kB [ 2297.620358] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2297.627783] active_anon:14887 inactive_anon:59572 isolated_anon:0 [ 2297.627783] active_file:32 inactive_file:0 isolated_file:0 [ 2297.627783] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2297.627783] slab_reclaimable:12332 slab_unreclaimable:120644 [ 2297.627783] mapped:52225 shmem:60179 pagetables:848 bounce:0 [ 2297.627783] free:13941 free_pcp:33 free_cma:0 [ 2297.633482] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2297.674526] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2297.683442] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2297.694403] 60213 total pagecache pages [ 2297.698444] 0 pages in swap cache [ 2297.701898] Swap cache stats: add 0, delete 0, find 0/0 [ 2297.707273] Free swap = 0kB [ 2297.712631] Total swap = 0kB [ 2297.715661] 2097051 pages RAM [ 2297.718805] 0 pages HighMem/MovableOnly [ 2297.722802] 363848 pages reserved [ 2297.726243] 0 pages cma reserved [ 2297.731948] Out of memory (oom_kill_allocating_task): Kill process 31097 (rsyslogd) score 0 or sacrifice child [ 2297.742315] Killed process 31097 (rsyslogd) total-vm:4kB, anon-rss:4kB, file-rss:0kB, shmem-rss:0kB [ 2297.755994] syz-fuzzer invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 2297.806175] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 2297.813247] rsyslogd: page allocation failure: order:0, mode:0x15080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null) [ 2297.816648] Node 0 active_anon:58284kB inactive_anon:193908kB active_file:44kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:174084kB dirty:0kB writeback:0kB shmem:195988kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2297.832830] CPU: 0 PID: 20454 Comm: syz-fuzzer Not tainted 4.14.229-syzkaller #0 [ 2297.859784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2297.869145] Call Trace: [ 2297.871746] dump_stack+0x1b2/0x281 [ 2297.875386] dump_header+0x178/0x82f [ 2297.879116] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2297.884230] ? ___ratelimit+0x2cd/0x530 [ 2297.888221] oom_kill_process.cold+0x10/0xa40 [ 2297.892740] out_of_memory+0xe3e/0x1190 [ 2297.896740] ? oom_killer_disable+0x1c0/0x1c0 [ 2297.901249] ? mutex_trylock+0x152/0x1a0 [ 2297.905322] __alloc_pages_nodemask+0x23e1/0x2720 [ 2297.910200] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2297.915102] alloc_pages_current+0x155/0x260 [ 2297.917929] Node 1 active_anon:1264kB inactive_anon:44380kB active_file:84kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:34816kB dirty:0kB writeback:0kB shmem:44728kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2297.919520] filemap_fault+0x11a1/0x1ad0 [ 2297.919538] ext4_filemap_fault+0x84/0xb0 [ 2297.919547] __do_fault+0xfa/0x380 [ 2297.919556] __handle_mm_fault+0x2497/0x4620 [ 2297.919566] ? vm_insert_page+0x7c0/0x7c0 [ 2297.919583] ? mark_held_locks+0xa6/0xf0 [ 2297.919594] handle_mm_fault+0x455/0x9c0 [ 2297.919607] __do_page_fault+0x549/0xad0 [ 2297.919618] ? spurious_fault+0x640/0x640 [ 2297.919629] ? do_page_fault+0x60/0x500 [ 2297.967650] Node 0 [ 2297.968838] ? page_fault+0x2f/0x50 [ 2297.968845] page_fault+0x45/0x50 [ 2297.968853] RIP: 334a80:0xc001126c60 [ 2297.968857] RSP: 03e7:000000c000783e40 EFLAGS: 00000003 [ 2297.982050] rsyslogd cpuset=/ mems_allowed=0-1 [ 2298.024353] CPU: 0 PID: 31097 Comm: rsyslogd Not tainted 4.14.229-syzkaller #0 [ 2298.031787] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2298.041144] Call Trace: [ 2298.043745] dump_stack+0x1b2/0x281 [ 2298.047382] warn_alloc.cold+0x96/0x1cc [ 2298.051366] ? zone_watermark_ok_safe+0x220/0x220 [ 2298.056215] ? usleep_range+0x130/0x130 [ 2298.060282] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 2298.065434] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 2298.070465] ? run_timer_softirq+0x5a0/0x5a0 [ 2298.074894] __alloc_pages_nodemask+0x2127/0x2720 [ 2298.079783] ? _find_next_bit+0xdb/0x100 [ 2298.083851] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2298.088720] ? lock_acquire+0x170/0x3f0 [ 2298.092703] ? do_raw_spin_unlock+0x164/0x220 [ 2298.097206] alloc_pages_current+0x155/0x260 [ 2298.101624] __pmd_alloc+0x37/0x3f0 [ 2298.105256] move_page_tables+0xf00/0x17d0 [ 2298.109510] ? vmacache_update+0xbb/0x130 [ 2298.113672] shift_arg_pages+0x17c/0x3e0 [ 2298.117746] ? put_arg_page+0x1c0/0x1c0 [ 2298.121731] ? change_protection+0xa0/0xa0 [ 2298.125977] ? lock_downgrade+0x740/0x740 [ 2298.130138] ? lock_acquire+0x170/0x3f0 [ 2298.134116] ? setup_arg_pages+0x242/0x6f0 [ 2298.138362] setup_arg_pages+0x584/0x6f0 [ 2298.142443] ? shift_arg_pages+0x3e0/0x3e0 [ 2298.146716] ? get_random_u64+0xd4/0x1c0 [ 2298.150790] load_elf_binary+0xa01/0x4750 [ 2298.154976] ? elf_core_dump+0x4410/0x4410 [ 2298.159230] search_binary_handler.part.0+0xd5/0x640 [ 2298.164349] do_execveat_common+0x1099/0x1f30 [ 2298.168867] ? copy_strings_kernel+0x110/0x110 [ 2298.173468] ? strncpy_from_user+0x210/0x2c0 [ 2298.177983] ? getname_flags+0x22e/0x550 [ 2298.182062] SyS_execve+0x3b/0x50 [ 2298.185529] ? setup_new_exec+0x770/0x770 [ 2298.189691] do_syscall_64+0x1d5/0x640 [ 2298.193598] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2298.198803] RIP: 0033:0x7f24bf7e9647 [ 2298.202516] RSP: 002b:00007ffd82fd5248 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 2298.210233] RAX: ffffffffffffffda RBX: 000055891edb7330 RCX: 00007f24bf7e9647 [ 2298.217524] RDX: 000055891ecea8a0 RSI: 000055891ece6a00 RDI: 000055891ecc70a0 [ 2298.224805] RBP: 00007ffd82fd53b0 R08: 000000000000fcfe R09: 0000000000000010 [ 2298.232182] R10: 000055891ecc6700 R11: 0000000000000246 R12: 000055891ecc62a8 [ 2298.239487] R13: 0000000000000000 R14: 000055891ece6a00 R15: 00007ffd82fd5490 [ 2298.264418] systemd-journald[31089]: File /run/log/journal/04d8c135ee6b410280ba31a58c89679d/system.journal corrupted or uncleanly shut down, renaming and replacing. [ 2298.291418] systemd[1]: Starting Load/Save RF Kill Switch Status... [ 2298.308149] DMA free:11040kB min:204kB low:252kB high:300kB active_anon:24kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2298.408269] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2298.416173] Node 0 DMA32 free:36052kB min:36200kB low:45248kB high:54296kB active_anon:58260kB inactive_anon:193908kB active_file:28kB inactive_file:28kB unevictable:0kB writepending:0kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:7424kB pagetables:2980kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2298.449891] lowmem_reserve[]: 0 0 0 0 0 [ 2298.459442] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2298.485237] Mem-Info: [ 2298.493632] active_anon:14912 inactive_anon:60622 isolated_anon:0 [ 2298.493632] active_file:27 inactive_file:13 isolated_file:0 [ 2298.493632] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2298.493632] slab_reclaimable:12331 slab_unreclaimable:120121 [ 2298.493632] mapped:52250 shmem:61254 pagetables:885 bounce:0 [ 2298.493632] free:25174 free_pcp:30 free_cma:0 [ 2298.521502] lowmem_reserve[]: 0 0 0 0 0 [ 2298.570356] Node 1 Normal free:53604kB min:53696kB low:67120kB high:80544kB active_anon:1564kB inactive_anon:48412kB active_file:292kB inactive_file:360kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:416kB pagetables:560kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2298.644119] Node 0 active_anon:58084kB inactive_anon:193908kB active_file:28kB inactive_file:28kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:174084kB dirty:0kB writeback:0kB shmem:195988kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2298.671002] lowmem_reserve[]: 0 0 0 0 0 [ 2298.676714] Node 0 DMA: 2*4kB (ME) 9*8kB (UME) 13*16kB (UM) 12*32kB (UME) 14*64kB (UME) 6*128kB (UME) 4*256kB (UME) 3*512kB (UME) 2*1024kB (UE) 2*2048kB (UM) 0*4096kB = 11040kB [ 2298.683450] Node 1 active_anon:1564kB inactive_anon:48580kB active_file:80kB inactive_file:24kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:34916kB dirty:0kB writeback:0kB shmem:49028kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2298.791664] Node 0 DMA free:11040kB min:204kB low:252kB high:300kB active_anon:24kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2298.800329] Node 0 DMA32: 807*4kB (UME) 133*8kB (UME) 76*16kB (UME) 32*32kB (UM) 391*64kB (UM) 21*128kB (UM) 4*256kB (UM) 2*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 36292kB [ 2298.847918] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2298.865500] Node 1 Normal: 5*4kB (UME) 16*8kB (UME) 66*16kB (UME) 46*32kB (UME) 17*64kB (UME) 23*128kB (UE) 142*256kB (UE) 21*512kB (UE) 0*1024kB 0*2048kB 0*4096kB = 53812kB [ 2298.887908] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2298.897093] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2298.912736] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2298.921699] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2298.936886] 61285 total pagecache pages [ 2298.940990] 0 pages in swap cache [ 2298.944538] Swap cache stats: add 0, delete 0, find 0/0 [ 2298.956717] Free swap = 0kB [ 2298.959823] Total swap = 0kB [ 2298.962455] lowmem_reserve[]: 0 [ 2298.962839] 2097051 pages RAM [ 2298.962845] 0 pages HighMem/MovableOnly [ 2298.966124] 2717 [ 2298.975917] 363848 pages reserved [ 2298.981958] 0 pages cma reserved [ 2299.018593] 2718 2718 2718 [ 2299.057293] Node 0 DMA32 free:92504kB min:36200kB low:45248kB high:54296kB active_anon:58260kB inactive_anon:193908kB active_file:56kB inactive_file:396kB unevictable:0kB writepending:0kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:7360kB pagetables:2980kB bounce:0kB free_pcp:412kB local_pcp:292kB free_cma:0kB [ 2299.202626] lowmem_reserve[]: 0 0 0 0 0 [ 2299.233287] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2299.262965] lowmem_reserve[]: 0 0 0 0 0 [ 2299.280045] Node 1 Normal free:315048kB min:53696kB low:67120kB high:80544kB active_anon:1604kB inactive_anon:48764kB active_file:244kB inactive_file:1248kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:352kB pagetables:416kB bounce:0kB free_pcp:180kB local_pcp:176kB free_cma:0kB [ 2299.363967] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2299.371109] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2299.379465] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2299.386229] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2299.394593] device bridge_slave_1 left promiscuous mode [ 2299.400296] bridge0: port 2(bridge_slave_1) entered disabled state [ 2299.407944] device bridge_slave_0 left promiscuous mode [ 2299.414016] bridge0: port 1(bridge_slave_0) entered disabled state [ 2299.424049] device veth1_macvtap left promiscuous mode [ 2299.429542] device veth0_macvtap left promiscuous mode [ 2299.434885] device veth1_vlan left promiscuous mode [ 2299.440092] device veth0_vlan left promiscuous mode [ 2299.497864] systemd[1]: Started Load/Save RF Kill Switch Status. [ 2299.512912] lowmem_reserve[]: 0 0 0 0 0 [ 2299.517089] Node 0 DMA: 1*4kB (E) 4*8kB (UME) 5*16kB (UM) 6*32kB (ME) 5*64kB (ME) 6*128kB (UME) 4*256kB (UME) 3*512kB (UME) 1*1024kB (E) 1*2048kB (M) 1*4096kB (U) = 11124kB [ 2299.558362] Node 0 DMA32: 673*4kB (UME) 48*8kB (UE) 45*16kB (UME) 1*32kB (M) 322*64kB (UM) 134*128kB (UE) 9*256kB (UM) 1*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 44404kB [ 2299.588128] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2299.599120] device hsr_slave_1 left promiscuous mode [ 2299.608428] Node 1 Normal: 2*4kB (E) 2*8kB (E) 2*16kB (ME) 3*32kB (ME) 5*64kB (UE) 2*128kB (ME) 218*256kB (UE) 33*512kB (UME) 44*1024kB (UM) 9*2048kB (U) 0*4096kB = 136920kB [ 2299.624286] device hsr_slave_0 left promiscuous mode [ 2299.643203] team0 (unregistering): Port device team_slave_1 removed [ 2299.654921] team0 (unregistering): Port device team_slave_0 removed [ 2299.658117] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2299.670290] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 2299.687220] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2299.696023] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 2299.722665] bond0 (unregistering): Released all slaves [ 2299.740271] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2299.778365] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2299.787019] 64207 total pagecache pages [ 2299.808196] 0 pages in swap cache [ 2299.818159] Swap cache stats: add 0, delete 0, find 0/0 [ 2299.823740] Free swap = 0kB [ 2299.826939] Total swap = 0kB [ 2299.853653] 2097051 pages RAM [ 2299.856805] 0 pages HighMem/MovableOnly [ 2299.920985] 363848 pages reserved [ 2299.924495] 0 pages cma reserved [ 2299.927865] Out of memory (oom_kill_allocating_task): Kill process 20454 (syz-fuzzer) score 0 or sacrifice child [ 2300.039723] Killed process 30732 (syz-executor.5) total-vm:84924kB, anon-rss:68kB, file-rss:0kB, shmem-rss:0kB [ 2300.085543] oom_reaper: reaped process 31097 (rsyslogd), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 2300.247641] oom_reaper: reaped process 30732 (syz-executor.5), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 2300.274797] syz-fuzzer invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 2300.307557] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 2300.335131] CPU: 0 PID: 20454 Comm: syz-fuzzer Not tainted 4.14.229-syzkaller #0 [ 2300.342728] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2300.352093] Call Trace: [ 2300.354693] dump_stack+0x1b2/0x281 [ 2300.358359] dump_header+0x178/0x82f [ 2300.362077] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2300.367183] ? ___ratelimit+0x2cd/0x530 [ 2300.371196] oom_kill_process.cold+0x10/0xa40 [ 2300.375712] out_of_memory+0xe3e/0x1190 [ 2300.379730] ? oom_killer_disable+0x1c0/0x1c0 [ 2300.384236] ? mutex_trylock+0x152/0x1a0 [ 2300.388302] __alloc_pages_nodemask+0x23e1/0x2720 [ 2300.393165] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2300.398028] alloc_pages_current+0x155/0x260 [ 2300.402442] filemap_fault+0x11a1/0x1ad0 [ 2300.407503] ext4_filemap_fault+0x84/0xb0 [ 2300.411656] __do_fault+0xfa/0x380 [ 2300.415195] __handle_mm_fault+0x2497/0x4620 [ 2300.419606] ? vm_insert_page+0x7c0/0x7c0 [ 2300.423771] ? mark_held_locks+0xa6/0xf0 [ 2300.427996] handle_mm_fault+0x455/0x9c0 [ 2300.432076] __do_page_fault+0x549/0xad0 [ 2300.436151] ? spurious_fault+0x640/0x640 [ 2300.440344] ? do_page_fault+0x60/0x500 [ 2300.444323] ? page_fault+0x2f/0x50 [ 2300.447947] page_fault+0x45/0x50 [ 2300.451401] RIP: 334a80:0xc001126c60 [ 2300.455108] RSP: 03e7:000000c000783e40 EFLAGS: 00000003 [ 2300.486590] Mem-Info: [ 2300.578210] active_anon:14989 inactive_anon:61602 isolated_anon:0 [ 2300.578210] active_file:17 inactive_file:17 isolated_file:0 [ 2300.578210] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2300.578210] slab_reclaimable:12396 slab_unreclaimable:118039 [ 2300.578210] mapped:43863 shmem:62223 pagetables:812 bounce:0 [ 2300.578210] free:25159 free_pcp:0 free_cma:0 [ 2300.713387] Node 0 active_anon:58036kB inactive_anon:197644kB active_file:32kB inactive_file:28kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:139272kB dirty:0kB writeback:0kB shmem:199724kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2300.848124] Node 1 active_anon:1920kB inactive_anon:48764kB active_file:36kB inactive_file:40kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:36180kB dirty:0kB writeback:0kB shmem:49168kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2300.890158] Node 0 DMA free:11068kB min:204kB low:252kB high:300kB active_anon:24kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2300.949746] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2300.954840] Node 0 DMA32 free:36180kB min:36200kB low:45248kB high:54296kB active_anon:58012kB inactive_anon:197644kB active_file:32kB inactive_file:28kB unevictable:0kB writepending:0kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:7232kB pagetables:2936kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2300.998452] lowmem_reserve[]: 0 0 0 0 0 [ 2301.002493] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2301.033342] lowmem_reserve[]: 0 0 0 0 0 [ 2301.037396] Node 1 Normal free:53456kB min:53696kB low:67120kB high:80544kB active_anon:1916kB inactive_anon:48764kB active_file:60kB inactive_file:16kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:320kB pagetables:356kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2301.070680] lowmem_reserve[]: 0 0 0 0 0 [ 2301.074810] Node 0 DMA: 3*4kB (UME) 4*8kB (ME) 5*16kB (UM) 6*32kB (ME) 6*64kB (UME) 5*128kB (UME) 4*256kB (UME) 3*512kB (UME) 1*1024kB (E) 1*2048kB (M) 1*4096kB (U) = 11068kB [ 2301.095482] Node 0 DMA32: 631*4kB (UME) 40*8kB (UME) 12*16kB (UME) 7*32kB (M) 181*64kB (UM) 139*128kB (UME) 10*256kB (UM) 1*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 35708kB [ 2301.115736] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2301.126554] Node 1 Normal: 24*4kB (UME) 23*8kB (UME) 69*16kB (UME) 36*32kB (UME) 18*64kB (UME) 1*128kB (E) 2*256kB (UE) 2*512kB (UE) 27*1024kB (U) 10*2048kB (UM) 0*4096kB = 53480kB [ 2301.150148] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2301.162078] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2301.173056] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2301.184230] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2301.195181] 62257 total pagecache pages [ 2301.201606] 0 pages in swap cache [ 2301.205070] Swap cache stats: add 0, delete 0, find 0/0 [ 2301.212868] Free swap = 0kB [ 2301.215902] Total swap = 0kB [ 2301.222055] 2097051 pages RAM [ 2301.225181] 0 pages HighMem/MovableOnly [ 2301.231559] 363848 pages reserved [ 2301.235062] 0 pages cma reserved [ 2301.240780] Out of memory (oom_kill_allocating_task): Kill process 20454 (syz-fuzzer) score 0 or sacrifice child [ 2301.254059] Killed process 29333 (syz-executor.2) total-vm:84924kB, anon-rss:64kB, file-rss:0kB, shmem-rss:0kB [ 2301.270646] syz-fuzzer invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 2301.367690] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 2301.383544] CPU: 0 PID: 7965 Comm: syz-fuzzer Not tainted 4.14.229-syzkaller #0 [ 2301.391030] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2301.400410] Call Trace: [ 2301.403007] dump_stack+0x1b2/0x281 [ 2301.406638] dump_header+0x178/0x82f [ 2301.410375] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2301.415500] ? ___ratelimit+0x2cd/0x530 [ 2301.419502] oom_kill_process.cold+0x10/0xa40 [ 2301.424017] out_of_memory+0xe3e/0x1190 [ 2301.427995] ? oom_killer_disable+0x1c0/0x1c0 [ 2301.432514] ? mutex_trylock+0x152/0x1a0 [ 2301.436575] __alloc_pages_nodemask+0x23e1/0x2720 [ 2301.441524] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2301.446388] alloc_pages_current+0x155/0x260 [ 2301.450918] filemap_fault+0x11a1/0x1ad0 [ 2301.454985] ext4_filemap_fault+0x84/0xb0 [ 2301.459152] __do_fault+0xfa/0x380 [ 2301.462687] __handle_mm_fault+0x2497/0x4620 [ 2301.467125] ? vm_insert_page+0x7c0/0x7c0 [ 2301.471283] ? lock_downgrade+0x740/0x740 [ 2301.476430] ? mark_held_locks+0xa6/0xf0 [ 2301.480499] handle_mm_fault+0x455/0x9c0 [ 2301.484586] __do_page_fault+0x549/0xad0 [ 2301.488657] ? spurious_fault+0x640/0x640 [ 2301.492973] ? do_page_fault+0x60/0x500 [ 2301.496955] ? page_fault+0x2f/0x50 [ 2301.500868] page_fault+0x45/0x50 [ 2301.504321] RIP: 0000:0x940aec [ 2301.507652] RSP: 2e000:000000c00003dec8 EFLAGS: 0043b6a0 [ 2301.535198] memory commitment underflow [ 2301.541155] ------------[ cut here ]------------ [ 2301.549892] WARNING: CPU: 0 PID: 31109 at mm/util.c:622 __vm_enough_memory.cold+0x18/0x59 [ 2301.558296] Kernel panic - not syncing: panic_on_warn set ... [ 2301.558296] [ 2301.565758] CPU: 0 PID: 31109 Comm: kworker/u4:4 Not tainted 4.14.229-syzkaller #0 [ 2301.573487] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2301.582857] Call Trace: [ 2301.585458] dump_stack+0x1b2/0x281 [ 2301.589093] panic+0x1f9/0x42d [ 2301.592291] ? add_taint.cold+0x16/0x16 [ 2301.596434] ? __vm_enough_memory.cold+0x18/0x59 [ 2301.601203] ? __vm_enough_memory.cold+0x18/0x59 [ 2301.605974] __warn.cold+0x20/0x44 [ 2301.609599] ? ist_end_non_atomic+0x10/0x10 [ 2301.613934] ? __vm_enough_memory.cold+0x18/0x59 [ 2301.618706] report_bug+0x208/0x250 [ 2301.622347] do_error_trap+0x195/0x2d0 [ 2301.626242] ? math_error+0x2d0/0x2d0 [ 2301.630052] ? ___preempt_schedule+0x16/0x18 [ 2301.634478] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2301.639348] invalid_op+0x1b/0x40 [ 2301.642808] RIP: 0010:__vm_enough_memory.cold+0x18/0x59 [ 2301.648169] RSP: 0000:ffff88800f41fd70 EFLAGS: 00010286 [ 2301.653536] RAX: 000000000000001b RBX: 0000000000000001 RCX: 0000000000000000 [ 2301.660814] RDX: 0000000000000000 RSI: ffffffff878bbbc0 RDI: ffffed1001e83fa4 [ 2301.668114] RBP: 0000000000000001 R08: 000000000000001b R09: 0000000000000000 [ 2301.675391] R10: 0000000000000000 R11: 0000000000000000 R12: ffff8880934a0cc0 [ 2301.682684] R13: ffffffff88feaee0 R14: ffffffffffcb4809 R15: 0000000000000d36 [ 2301.689998] insert_vm_struct+0x25e/0x300 [ 2301.694170] do_execveat_common+0xbf8/0x1f30 [ 2301.698600] ? copy_strings_kernel+0x110/0x110 [ 2301.703202] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2301.708674] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2301.713715] do_execve+0x33/0x50 [ 2301.717105] call_usermodehelper_exec_async+0x2ed/0x510 [ 2301.722853] ? call_usermodehelper_exec_work+0x2a0/0x2a0 [ 2301.728337] ret_from_fork+0x24/0x30 [ 2301.732924] Kernel Offset: disabled [ 2301.736675] Rebooting in 86400 seconds..