0x3f0 [ 1588.367097] lowmem_reserve[]: [ 1588.371650] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1588.399824] 0 [ 1588.403772] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1588.403786] ? __mutex_unlock_slowpath+0x75/0x770 [ 1588.406858] 0 [ 1588.411682] alloc_pages_current+0x155/0x260 [ 1588.413469] 0 [ 1588.418885] ion_page_pool_alloc+0x118/0x1b0 [ 1588.423708] 0 [ 1588.425478] ion_system_heap_allocate+0x133/0x8c0 [ 1588.429852] 0 [ 1588.431633] ? _raw_spin_unlock+0x29/0x40 [ 1588.437793] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1588.442618] Node 0 [ 1588.444389] ? ion_system_contig_heap_create+0x130/0x130 [ 1588.448506] DMA: [ 1588.453409] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1588.453419] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1588.453429] ion_alloc+0x27a/0x810 [ 1588.455639] 6*4kB [ 1588.461067] ? ion_dma_buf_release+0x40/0x40 [ 1588.463121] (UME) [ 1588.468191] ? __might_fault+0x177/0x1b0 [ 1588.473026] 33*8kB [ 1588.476533] ion_ioctl+0xea/0x1f0 [ 1588.478652] (UME) [ 1588.483037] ? ion_query_heaps+0x360/0x360 [ 1588.483048] ? ion_query_heaps+0x360/0x360 [ 1588.483059] do_vfs_ioctl+0x75a/0xff0 [ 1588.485182] 24*16kB [ 1588.489319] ? ioctl_preallocate+0x1a0/0x1a0 [ 1588.491530] (UM) [ 1588.494958] ? lock_downgrade+0x740/0x740 [ 1588.494971] ? __fget+0x225/0x360 [ 1588.494980] ? do_vfs_ioctl+0xff0/0xff0 [ 1588.497100] 32*32kB [ 1588.501311] ? security_file_ioctl+0x83/0xb0 [ 1588.505528] (UME) [ 1588.509293] SyS_ioctl+0x7f/0xb0 [ 1588.511589] 7*64kB [ 1588.515973] ? do_vfs_ioctl+0xff0/0xff0 [ 1588.515985] do_syscall_64+0x1d5/0x640 [ 1588.515998] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1588.518028] (UME) [ 1588.522161] RIP: 0033:0x4665f9 [ 1588.525599] 3*128kB [ 1588.529535] RSP: 002b:00007fd613a46188 EFLAGS: 00000246 [ 1588.531831] (UME) [ 1588.536208] ORIG_RAX: 0000000000000010 [ 1588.536214] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1588.536220] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1588.536224] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1588.536231] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1588.538354] 3*256kB [ 1588.541695] R13: 00007ffce81deb9f R14: 00007fd613a46300 R15: 0000000000022000 [ 1588.543927] (ME) [ 1588.632642] Mem-Info: [ 1588.637297] active_anon:14787 inactive_anon:18181 isolated_anon:0 [ 1588.637297] active_file:31 inactive_file:757 isolated_file:0 [ 1588.637297] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1588.637297] slab_reclaimable:12968 slab_unreclaimable:117303 [ 1588.637297] mapped:53437 shmem:19220 pagetables:825 bounce:0 [ 1588.637297] free:217964 free_pcp:296 free_cma:0 [ 1588.637773] Mem-Info: [ 1588.684113] 1*512kB (E) 3*1024kB (UME) 2*2048kB (UE) 0*4096kB = 10976kB [ 1588.696026] Node 0 DMA32: 237*4kB (UE) 436*8kB (UME) 77*16kB (ME) 266*32kB (UME) 2446*64kB (UME) 113*128kB (U) 1*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 185444kB [ 1588.729906] active_anon:14787 inactive_anon:18181 isolated_anon:0 [ 1588.729906] active_file:31 inactive_file:1407 isolated_file:0 [ 1588.729906] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1588.729906] slab_reclaimable:12968 slab_unreclaimable:117643 [ 1588.729906] mapped:54037 shmem:19220 pagetables:825 bounce:0 [ 1588.729906] free:239119 free_pcp:230 free_cma:0 [ 1588.732397] Node 0 active_anon:58336kB inactive_anon:53264kB active_file:36kB inactive_file:4628kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:202644kB dirty:0kB writeback:0kB shmem:57340kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1588.791568] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1588.791616] Node 1 Normal: 7*4kB (UME) 2*8kB (E) 4*16kB (UE) 4*32kB (UME) 2334*64kB (UM) 117*128kB (UME) 56*256kB (UME) 21*512kB (UM) 328*1024kB (U) 23*2048kB (U) 16*4096kB (U) = 638188kB [ 1588.791691] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1588.791698] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1588.791704] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1588.791710] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1588.791714] 20716 total pagecache pages [ 1588.791724] 0 pages in swap cache [ 1588.791729] Swap cache stats: add 0, delete 0, find 0/0 [ 1588.791733] Free swap = 0kB [ 1588.791736] Total swap = 0kB [ 1588.791742] 2097051 pages RAM [ 1588.791746] 0 pages HighMem/MovableOnly [ 1588.791749] 363849 pages reserved [ 1588.791752] 0 pages cma reserved [ 1588.867703] Node 0 active_anon:58536kB inactive_anon:53264kB active_file:36kB inactive_file:5628kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:202944kB dirty:0kB writeback:0kB shmem:57340kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1589.040628] Node 1 active_anon:832kB inactive_anon:19460kB active_file:44kB inactive_file:1148kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:13608kB dirty:0kB writeback:0kB shmem:19540kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1589.132372] Node 1 active_anon:832kB inactive_anon:19460kB active_file:44kB inactive_file:1148kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:13708kB dirty:0kB writeback:0kB shmem:19540kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1589.192339] Node 0 DMA free:11552kB min:204kB low:252kB high:300kB active_anon:12kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1589.221098] Node 0 DMA free:11552kB min:204kB low:252kB high:300kB active_anon:12kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1589.288618] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1589.322354] Node 0 DMA32 free:44040kB min:36200kB low:45248kB high:54296kB active_anon:58620kB inactive_anon:53264kB active_file:1364kB inactive_file:5748kB unevictable:0kB writepending:24kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7264kB pagetables:3064kB bounce:0kB free_pcp:672kB local_pcp:392kB free_cma:0kB [ 1589.342359] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1589.412337] Node 0 DMA32 free:43832kB min:36200kB low:45248kB high:54296kB active_anon:58620kB inactive_anon:53264kB active_file:1364kB inactive_file:5748kB unevictable:0kB writepending:24kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7264kB pagetables:3064kB bounce:0kB free_pcp:800kB local_pcp:280kB free_cma:0kB [ 1589.432307] lowmem_reserve[]: 0 0 0 0 0 [ 1589.482354] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1589.552342] lowmem_reserve[]: 0 0 0 0 0 [ 1589.556366] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1589.582102] syz-executor.4: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1589.612337] lowmem_reserve[]: 0 0 0 0 0 [ 1589.616335] Node 1 Normal free:26464kB min:53696kB low:67120kB high:80544kB active_anon:932kB inactive_anon:19460kB active_file:140kB inactive_file:380kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:576kB pagetables:272kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1589.617252] lowmem_reserve[]: [ 1589.645036] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 1589.655237] 0 0 0 0 0 [ 1589.656255] CPU: 0 PID: 28340 Comm: syz-executor.4 Not tainted 4.14.232-syzkaller #0 [ 1589.658379] Node 1 [ 1589.665841] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1589.665845] Call Trace: [ 1589.665861] dump_stack+0x1b2/0x281 [ 1589.665875] warn_alloc.cold+0x96/0x1cc [ 1589.665888] ? zone_watermark_ok_safe+0x220/0x220 [ 1589.665916] __alloc_pages_nodemask+0x2127/0x2720 [ 1589.671505] Normal free:26464kB min:53696kB low:67120kB high:80544kB active_anon:932kB inactive_anon:19460kB active_file:140kB inactive_file:380kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:576kB pagetables:272kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1589.677468] ? lock_acquire+0x170/0x3f0 [ 1589.677482] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1589.677498] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1589.677510] ? __mutex_unlock_slowpath+0x75/0x770 [ 1589.680061] lowmem_reserve[]: [ 1589.683672] alloc_pages_current+0x155/0x260 [ 1589.683685] ion_page_pool_alloc+0x118/0x1b0 [ 1589.683694] ion_system_heap_allocate+0x133/0x8c0 [ 1589.683704] ? ion_alloc+0x187/0x810 [ 1589.683713] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1589.683722] ? ion_system_contig_heap_create+0x130/0x130 [ 1589.683734] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1589.690953] 0 [ 1589.692499] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1589.692510] ion_alloc+0x204/0x810 [ 1589.692525] ? ion_dma_buf_release+0x40/0x40 [ 1589.697354] 0 [ 1589.725184] ? __might_fault+0x177/0x1b0 [ 1589.725195] ion_ioctl+0xea/0x1f0 [ 1589.725204] ? ion_query_heaps+0x360/0x360 [ 1589.725214] ? ion_query_heaps+0x360/0x360 [ 1589.725224] do_vfs_ioctl+0x75a/0xff0 [ 1589.725237] ? ioctl_preallocate+0x1a0/0x1a0 [ 1589.725245] ? lock_downgrade+0x740/0x740 [ 1589.725258] ? __fget+0x225/0x360 [ 1589.725267] ? do_vfs_ioctl+0xff0/0xff0 [ 1589.725278] ? security_file_ioctl+0x83/0xb0 [ 1589.725287] SyS_ioctl+0x7f/0xb0 [ 1589.725293] ? do_vfs_ioctl+0xff0/0xff0 [ 1589.725303] do_syscall_64+0x1d5/0x640 [ 1589.725317] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1589.732711] syz-executor.2: [ 1589.734081] RIP: 0033:0x4665f9 [ 1589.739501] page allocation failure: order:4 [ 1589.744314] RSP: 002b:00007fbffd9c3188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1589.744324] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1589.744329] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1589.744334] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1589.744338] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1589.744343] R13: 00007fff1427db3f R14: 00007fbffd9c3300 R15: 0000000000022000 [ 1589.745102] lowmem_reserve[]: [ 1589.756609] 0 [ 1589.761236] 0 [ 1589.780385] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1589.794065] 0 [ 1589.814077] 0 [ 1589.818965] 0 [ 1589.821539] 0 [ 1589.825696] 0 0 [ 1589.825706] Node 0 DMA: 4*4kB (ME) 7*8kB [ 1589.866352] warn_alloc_show_mem: 1 callbacks suppressed [ 1589.866355] Mem-Info: [ 1589.877490] (null) [ 1589.884407] active_anon:14891 inactive_anon:18181 isolated_anon:0 [ 1589.884407] active_file:42 inactive_file:25 isolated_file:0 [ 1589.884407] unevictable:0 dirty:6 writeback:0 unstable:0 [ 1589.884407] slab_reclaimable:12950 slab_unreclaimable:119618 [ 1589.884407] mapped:53137 shmem:19220 pagetables:834 bounce:0 [ 1589.884407] free:13781 free_pcp:0 free_cma:0 [ 1589.886904] Node 0 [ 1589.904844] Node 0 active_anon:58632kB inactive_anon:53264kB active_file:124kB inactive_file:52kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:199340kB dirty:24kB writeback:0kB shmem:57340kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1589.914324] syz-executor.2 cpuset= [ 1589.915490] syz-executor.3: [ 1589.931223] / [ 1589.934084] Node 1 active_anon:1052kB inactive_anon:19464kB active_file:28kB inactive_file:40kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:13068kB dirty:0kB writeback:0kB shmem:19544kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1589.937660] mems_allowed=0-1 [ 1589.941244] Node 0 [ 1589.952189] CPU: 1 PID: 28320 Comm: syz-executor.2 Not tainted 4.14.232-syzkaller #0 [ 1589.980808] (UME) [ 1589.981067] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1590.008908] page allocation failure: order:0 [ 1590.012398] Call Trace: [ 1590.012415] dump_stack+0x1b2/0x281 [ 1590.012429] warn_alloc.cold+0x96/0x1cc [ 1590.015414] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1590.017124] ? zone_watermark_ok_safe+0x220/0x220 [ 1590.044262] 24*16kB [ 1590.047338] __alloc_pages_nodemask+0x2127/0x2720 [ 1590.049532] (UM) [ 1590.057388] ? __schedule+0x893/0x1de0 [ 1590.057403] ? lock_acquire+0x170/0x3f0 [ 1590.057418] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1590.059535] 32*32kB [ 1590.068875] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1590.068888] ? __mutex_unlock_slowpath+0x75/0x770 [ 1590.073292] DMA free:10952kB min:204kB low:252kB high:300kB active_anon:12kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1590.075832] alloc_pages_current+0x155/0x260 [ 1590.079423] lowmem_reserve[]: [ 1590.083377] ion_page_pool_alloc+0x118/0x1b0 [ 1590.083386] ion_system_heap_allocate+0x133/0x8c0 [ 1590.083397] ? _raw_spin_unlock+0x29/0x40 [ 1590.090469] (null) [ 1590.095295] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1590.095304] ? ion_system_contig_heap_create+0x130/0x130 [ 1590.095313] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1590.095325] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1590.097619] syz-executor.3 cpuset= [ 1590.102436] ion_alloc+0x27a/0x810 [ 1590.102449] ? ion_dma_buf_release+0x40/0x40 [ 1590.102461] ? __might_fault+0x177/0x1b0 [ 1590.104500] (UME) [ 1590.108363] ion_ioctl+0xea/0x1f0 [ 1590.112325] / [ 1590.117139] ? ion_query_heaps+0x360/0x360 [ 1590.119435] mems_allowed=0-1 [ 1590.124862] ? ion_query_heaps+0x360/0x360 [ 1590.124871] do_vfs_ioctl+0x75a/0xff0 [ 1590.124882] ? ioctl_preallocate+0x1a0/0x1a0 [ 1590.129696] 0 [ 1590.155255] ? lock_downgrade+0x740/0x740 [ 1590.155268] ? __fget+0x225/0x360 [ 1590.155279] ? do_vfs_ioctl+0xff0/0xff0 [ 1590.159663] 24*64kB [ 1590.162742] ? security_file_ioctl+0x83/0xb0 [ 1590.162752] SyS_ioctl+0x7f/0xb0 [ 1590.162760] ? do_vfs_ioctl+0xff0/0xff0 [ 1590.167139] (UME) [ 1590.171960] do_syscall_64+0x1d5/0x640 [ 1590.182245] 4*128kB [ 1590.183110] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1590.188524] (UME) [ 1590.193517] RIP: 0033:0x4665f9 [ 1590.193523] RSP: 002b:00007f66397b6188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1590.193534] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1590.212243] 2717 [ 1590.213788] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1590.215912] 2718 [ 1590.219343] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1590.221032] 2718 [ 1590.225237] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1590.225242] R13: 00007fff59ca014f R14: 00007f66397b6300 R15: 0000000000022000 [ 1590.244887] DMA: [ 1590.249348] 3*256kB [ 1590.250727] 4*4kB [ 1590.254724] CPU: 0 PID: 28312 Comm: syz-executor.3 Not tainted 4.14.232-syzkaller #0 [ 1590.254731] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1590.254734] Call Trace: [ 1590.254751] dump_stack+0x1b2/0x281 [ 1590.254765] warn_alloc.cold+0x96/0x1cc [ 1590.254777] ? zone_watermark_ok_safe+0x220/0x220 [ 1590.254787] ? usleep_range+0x130/0x130 [ 1590.254797] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1590.269148] (ME) [ 1590.270922] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1590.279931] 7*8kB [ 1590.282252] ? run_timer_softirq+0x5a0/0x5a0 [ 1590.282271] __alloc_pages_nodemask+0x2127/0x2720 [ 1590.282288] ? lock_acquire+0x170/0x3f0 [ 1590.282304] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1590.282313] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1590.282329] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1590.291456] (UME) [ 1590.295313] ? alloc_pages_current+0xe3/0x260 [ 1590.295324] alloc_pages_current+0x155/0x260 [ 1590.295337] ion_page_pool_alloc+0x118/0x1b0 [ 1590.295346] ion_system_heap_allocate+0x133/0x8c0 [ 1590.295357] ? _raw_spin_unlock+0x29/0x40 [ 1590.295366] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1590.295376] ? ion_system_contig_heap_create+0x130/0x130 [ 1590.295385] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1590.295394] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1590.295403] ion_alloc+0x27a/0x810 [ 1590.295415] ? ion_dma_buf_release+0x40/0x40 [ 1590.314693] 24*16kB [ 1590.321279] ? __might_fault+0x177/0x1b0 [ 1590.331862] (UM) [ 1590.337818] ion_ioctl+0xea/0x1f0 [ 1590.337834] ? ion_query_heaps+0x360/0x360 [ 1590.337846] ? ion_query_heaps+0x360/0x360 [ 1590.337858] do_vfs_ioctl+0x75a/0xff0 [ 1590.352034] 2718 [ 1590.352193] ? ioctl_preallocate+0x1a0/0x1a0 [ 1590.362033] 32*32kB [ 1590.364083] ? lock_downgrade+0x740/0x740 [ 1590.364097] ? __fget+0x225/0x360 [ 1590.364107] ? do_vfs_ioctl+0xff0/0xff0 [ 1590.364119] ? security_file_ioctl+0x83/0xb0 [ 1590.364129] SyS_ioctl+0x7f/0xb0 [ 1590.364137] ? do_vfs_ioctl+0xff0/0xff0 [ 1590.364149] do_syscall_64+0x1d5/0x640 [ 1590.364169] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1590.364177] RIP: 0033:0x4665f9 [ 1590.364181] RSP: 002b:00007fd613a46188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1590.364192] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1590.364197] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1590.364202] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1590.364207] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1590.364211] R13: 00007ffce81deb9f R14: 00007fd613a46300 R15: 0000000000022000 [ 1590.376769] (ME) [ 1590.396092] 1*512kB [ 1590.399276] (UME) [ 1590.413448] (E) [ 1590.419202] Node 0 [ 1590.433320] 2*1024kB [ 1590.435639] 24*64kB [ 1590.438251] (ME) [ 1590.443098] (UME) 4*128kB (UME) 3*256kB (ME) 1*512kB (E) 2*1024kB (ME) 2*2048kB (UE) 0*4096kB = 10952kB [ 1590.443142] Node 0 DMA32: 1091*4kB (UME) 476*8kB (ME) 77*16kB (UME) 12*32kB (UME) 9*64kB (UME) 21*128kB (U) 9*256kB (U) 6*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 18428kB [ 1590.443208] Node 0 Normal: 0*4kB [ 1590.459643] 2*2048kB [ 1590.464519] DMA32 free:18428kB min:36200kB low:45248kB high:54296kB active_anon:58696kB inactive_anon:53260kB active_file:40kB inactive_file:28kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7264kB pagetables:3132kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1590.472186] (UE) [ 1590.475554] lowmem_reserve[]: 0 0 0 0 0 [ 1590.475577] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1590.475596] lowmem_reserve[]: 0 0 0 0 0 [ 1590.475618] Node 1 [ 1590.485733] 0*4096kB [ 1590.489654] 0*8kB [ 1590.491708] = 10952kB [ 1590.496000] Normal free:26756kB min:53696kB low:67120kB high:80544kB active_anon:1052kB inactive_anon:19464kB active_file:28kB inactive_file:40kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:576kB pagetables:300kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1590.496004] lowmem_reserve[]: 0 0 0 0 0 [ 1590.507856] Node 0 [ 1590.510355] 0*16kB [ 1590.521312] DMA32: [ 1590.531380] 1091*4kB [ 1590.531851] Node 0 [ 1590.544459] (UME) [ 1590.552238] 0*32kB [ 1590.570646] 476*8kB [ 1590.575592] 0*64kB [ 1590.585793] (ME) [ 1590.588827] 0*128kB [ 1590.590628] 77*16kB [ 1590.595285] 0*256kB [ 1590.609103] (UME) [ 1590.617987] 0*512kB [ 1590.634528] DMA: 4*4kB (ME) 7*8kB (UME) 24*16kB (UM) 32*32kB (UME) 24*64kB (UME) 4*128kB (UME) [ 1590.647321] 0*1024kB [ 1590.682238] 12*32kB [ 1590.798735] 3*256kB (ME) 1*512kB (E) 2*1024kB (ME) 2*2048kB (UE) 0*4096kB = 10952kB [ 1590.812618] Node 0 DMA32: 1091*4kB (UME) 476*8kB (ME) 77*16kB (UME) 12*32kB (UME) 27*64kB (UME) 23*128kB (U) 9*256kB (U) 6*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 19836kB [ 1590.836874] 0*2048kB 0*4096kB = 0kB [ 1590.842076] Node 1 [ 1590.842079] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1590.844984] Normal: [ 1590.855634] Node 1 [ 1590.859635] 3*4kB [ 1590.861039] Normal: [ 1590.862756] (ME) [ 1590.864156] 3*4kB (UE) 2*8kB (E) 4*16kB (ME) 2*32kB (E) 626*64kB (UM) 160*128kB (UME) 137*256kB (UE) 22*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 107036kB [ 1590.886576] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1590.896148] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1590.904927] 3*8kB (ME) 3*16kB (E) 2*32kB (E) 628*64kB (UM) 159*128kB (UE) 138*256kB (UME) 22*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 107284kB [ 1590.918413] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1590.927335] warn_alloc_show_mem: 1 callbacks suppressed [ 1590.927338] Mem-Info: [ 1590.952167] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1590.952228] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1590.952234] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1590.952240] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1590.952247] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1590.960840] 20784 total pagecache pages [ 1590.973098] active_anon:15160 inactive_anon:18181 isolated_anon:0 [ 1590.973098] active_file:172 inactive_file:1380 isolated_file:0 [ 1590.973098] unevictable:0 dirty:84 writeback:0 unstable:0 [ 1590.973098] slab_reclaimable:12938 slab_unreclaimable:119914 [ 1590.973098] mapped:54157 shmem:19220 pagetables:859 bounce:0 [ 1590.973098] free:31942 free_pcp:256 free_cma:0 [ 1591.005539] (UME) [ 1591.037016] 0 pages in swap cache [ 1591.042910] Swap cache stats: add 0, delete 0, find 0/0 [ 1591.048265] Free swap = 0kB [ 1591.051272] Total swap = 0kB [ 1591.052213] 20784 total pagecache pages [ 1591.058240] 0 pages in swap cache [ 1591.061679] Swap cache stats: add 0, delete 0, find 0/0 [ 1591.067075] 2097051 pages RAM [ 1591.067079] 0 pages HighMem/MovableOnly [ 1591.067082] 363849 pages reserved [ 1591.067087] 0 pages cma reserved [ 1591.091393] Free swap = 0kB [ 1591.098478] Total swap = 0kB [ 1591.101643] 2097051 pages RAM [ 1591.103866] 9*64kB (UME) 21*128kB (U) 9*256kB (U) 6*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 18428kB [ 1591.115686] 0 pages HighMem/MovableOnly [ 1591.138185] 363849 pages reserved [ 1591.141920] 0 pages cma reserved [ 1591.143372] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1591.151620] Out of memory (oom_kill_allocating_task): Kill process 27324 (syz-executor.4) score 0 or sacrifice child [ 1591.164517] Node 1 Normal: 79*4kB (UME) 54*8kB (UME) 32*16kB (UME) 23*32kB (UME) 9*64kB (UM) 55*128kB (UME) 137*256kB (UME) 18*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 53900kB [ 1591.182228] Node 0 active_anon:58708kB inactive_anon:53260kB active_file:36kB inactive_file:32kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:199244kB dirty:0kB writeback:0kB shmem:57336kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1591.219956] Killed process 28340 (syz-executor.4) total-vm:93516kB, anon-rss:160kB, file-rss:34556kB, shmem-rss:0kB [ 1591.239979] oom_reaper: reaped process 28319 (syz-executor.1), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1591.242194] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1591.260317] systemd-journal invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=0 [ 1591.298222] Node 1 active_anon:1932kB inactive_anon:19464kB active_file:136kB inactive_file:56kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:13284kB dirty:36kB writeback:0kB shmem:19544kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1591.300998] systemd-journal cpuset=/ mems_allowed=0-1 [ 1591.342186] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1591.348289] CPU: 1 PID: 26628 Comm: systemd-journal Not tainted 4.14.232-syzkaller #0 [ 1591.351478] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1591.359413] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1591.359416] Call Trace: [ 1591.359431] dump_stack+0x1b2/0x281 [ 1591.359442] dump_header+0x178/0x82f [ 1591.359453] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1591.359462] ? ___ratelimit+0x2cd/0x530 [ 1591.359472] oom_kill_process.cold+0x10/0xa40 [ 1591.359489] out_of_memory+0xe3e/0x1190 [ 1591.359502] ? oom_killer_disable+0x1c0/0x1c0 [ 1591.382970] Node 0 [ 1591.383820] ? mutex_trylock+0x152/0x1a0 [ 1591.387512] DMA free:10972kB min:204kB low:252kB high:300kB active_anon:12kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1591.392582] __alloc_pages_nodemask+0x23e1/0x2720 [ 1591.392603] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1591.403843] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1591.404970] ? debug_check_no_obj_freed+0x2c0/0x680 [ 1591.409428] 19271 total pagecache pages [ 1591.411645] ? cache_grow_begin+0x3f/0x700 [ 1591.423308] lowmem_reserve[]: [ 1591.441237] cache_grow_begin+0x91/0x700 [ 1591.441251] fallback_alloc+0x207/0x2c0 [ 1591.450528] 0 pages in swap cache [ 1591.450892] kmem_cache_alloc+0x1e5/0x3c0 [ 1591.465449] Swap cache stats: add 0, delete 0, find 0/0 [ 1591.468379] getname_flags+0xc8/0x550 [ 1591.472597] Free swap = 0kB [ 1591.475665] do_sys_open+0x1ce/0x410 [ 1591.479709] Total swap = 0kB [ 1591.483657] ? filp_open+0x60/0x60 [ 1591.483668] ? do_syscall_64+0x4c/0x640 [ 1591.483676] ? do_sys_open+0x410/0x410 [ 1591.487104] 0 [ 1591.491227] do_syscall_64+0x1d5/0x640 [ 1591.496574] 2717 [ 1591.500338] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1591.503342] 2097051 pages RAM [ 1591.507016] RIP: 0033:0x7fcf6b7fc840 [ 1591.510001] 0 pages HighMem/MovableOnly [ 1591.513510] RSP: 002b:00007ffdf7b50f58 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 1591.513518] RAX: ffffffffffffffda RBX: 00007ffdf7b51260 RCX: 00007fcf6b7fc840 [ 1591.513523] RDX: 00000000000001a0 RSI: 0000000000080042 RDI: 000056121888d810 [ 1591.513527] RBP: 000000000000000d R08: 000000000000c0ff R09: 00000000ffffffff [ 1591.513533] R10: 0000000000000069 R11: 0000000000000246 R12: 00000000ffffffff [ 1591.517482] 2718 [ 1591.521339] R13: 0000561218888040 R14: 00007ffdf7b51220 R15: 000056121888d350 [ 1591.523127] 2718 [ 1591.538443] Mem-Info: [ 1591.542166] syz-executor.4: [ 1591.548923] active_anon:15135 inactive_anon:18181 isolated_anon:0 [ 1591.548923] active_file:43 inactive_file:22 isolated_file:0 [ 1591.548923] unevictable:0 dirty:9 writeback:0 unstable:0 [ 1591.548923] slab_reclaimable:12938 slab_unreclaimable:120502 [ 1591.548923] mapped:53132 shmem:19220 pagetables:859 bounce:0 [ 1591.548923] free:13814 free_pcp:98 free_cma:0 [ 1591.554940] 363849 pages reserved [ 1591.570246] Node 0 active_anon:58608kB inactive_anon:53260kB active_file:36kB inactive_file:32kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:199244kB dirty:0kB writeback:0kB shmem:57336kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1591.581745] page allocation failure: order:0 [ 1591.591918] Node 1 active_anon:1932kB inactive_anon:19464kB active_file:136kB inactive_file:56kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:13284kB dirty:36kB writeback:0kB shmem:19544kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1591.595464] 2718 [ 1591.596051] Node 0 [ 1591.646468] DMA free:10972kB min:204kB low:252kB high:300kB active_anon:12kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1591.665332] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1591.682077] lowmem_reserve[]: [ 1591.697104] (null) [ 1591.711527] 0 pages cma reserved [ 1591.727074] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 1591.746415] 0 2717 2718 2718 2718 [ 1591.748147] Node 0 [ 1591.749963] Node 0 [ 1591.749982] DMA32 free:17964kB min:36200kB low:45248kB high:54296kB active_anon:58696kB inactive_anon:53260kB active_file:36kB inactive_file:32kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7264kB pagetables:3132kB bounce:0kB free_pcp:264kB local_pcp:0kB free_cma:0kB [ 1591.760868] DMA32 free:17964kB min:36200kB low:45248kB high:54296kB active_anon:58696kB inactive_anon:53260kB active_file:36kB inactive_file:32kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7264kB pagetables:3132kB bounce:0kB free_pcp:264kB local_pcp:264kB free_cma:0kB [ 1591.788372] CPU: 0 PID: 28340 Comm: syz-executor.4 Not tainted 4.14.232-syzkaller #0 [ 1591.819225] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1591.828564] Call Trace: [ 1591.831145] dump_stack+0x1b2/0x281 [ 1591.834764] warn_alloc.cold+0x96/0x1cc [ 1591.838735] ? zone_watermark_ok_safe+0x220/0x220 [ 1591.843577] ? usleep_range+0x130/0x130 [ 1591.847547] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1591.852652] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1591.857669] ? run_timer_softirq+0x5a0/0x5a0 [ 1591.862081] __alloc_pages_nodemask+0x2127/0x2720 [ 1591.866922] ? lock_acquire+0x170/0x3f0 [ 1591.870894] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1591.875727] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1591.880222] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1591.885692] alloc_pages_current+0x155/0x260 [ 1591.890096] ion_page_pool_alloc+0x118/0x1b0 [ 1591.894495] ion_system_heap_allocate+0x133/0x8c0 [ 1591.899330] ? ion_alloc+0x187/0x810 [ 1591.903037] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1591.908478] ? ion_system_contig_heap_create+0x130/0x130 [ 1591.913922] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1591.918933] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1591.923770] ion_alloc+0x204/0x810 [ 1591.927314] ? ion_dma_buf_release+0x40/0x40 [ 1591.931718] ? __might_fault+0x177/0x1b0 [ 1591.935777] ion_ioctl+0xea/0x1f0 [ 1591.939225] ? ion_query_heaps+0x360/0x360 [ 1591.943458] ? ion_query_heaps+0x360/0x360 [ 1591.947682] do_vfs_ioctl+0x75a/0xff0 [ 1591.951475] ? ioctl_preallocate+0x1a0/0x1a0 [ 1591.955876] ? lock_downgrade+0x740/0x740 [ 1591.960024] ? __fget+0x225/0x360 [ 1591.963471] ? do_vfs_ioctl+0xff0/0xff0 [ 1591.967441] ? security_file_ioctl+0x83/0xb0 [ 1591.971843] SyS_ioctl+0x7f/0xb0 [ 1591.975198] ? do_vfs_ioctl+0xff0/0xff0 [ 1591.979164] do_syscall_64+0x1d5/0x640 [ 1591.983046] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1591.985392] lowmem_reserve[]: [ 1591.988219] RIP: 0033:0x4665f9 [ 1591.988221] 0 0 [ 1591.991299] RSP: 002b:00007fbffd9c3188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1592.004134] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1592.011392] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1592.018657] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1592.025918] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1592.033173] R13: 00007fff1427db3f R14: 00007fbffd9c3300 R15: 0000000000022000 [ 1592.036852] 0 0 0 [ 1592.043631] lowmem_reserve[]: 0 0 0 0 0 [ 1592.052292] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1592.052451] Node 0 [ 1592.079072] lowmem_reserve[]: 0 0 0 0 0 [ 1592.112330] Node 1 Normal free:342336kB min:53696kB low:67120kB high:80544kB active_anon:1988kB inactive_anon:19464kB active_file:112kB inactive_file:4612kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:576kB pagetables:304kB bounce:0kB free_pcp:1260kB local_pcp:620kB free_cma:0kB 22:10:28 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) sendmsg$unix(r1, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x80000000, 0x6}) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) [ 1592.160075] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1592.187351] lowmem_reserve[]: 0 0 0 0 0 22:10:28 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x100000001, 0x22}) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$BTRFS_IOC_SYNC(r1, 0x9408, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r1, 0x80605414, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) [ 1592.202389] Node 0 DMA: 23*4kB (UME) 11*8kB (UE) 24*16kB (UM) 32*32kB (UME) 23*64kB (UME) 3*128kB (UME) 4*256kB (UME) 1*512kB (E) 2*1024kB (ME) 2*2048kB (UE) 0*4096kB = 11124kB [ 1592.219899] Node 0 DMA32: 4394*4kB (UME) 1700*8kB (UME) 3196*16kB (UME) 322*32kB (UME) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 92616kB [ 1592.263685] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1592.270004] lowmem_reserve[]: [ 1592.286142] Node 1 Normal: 739*4kB (UM) 1621*8kB (UME) 1235*16kB (UME) 360*32kB (UE) 237*64kB (UM) 755*128kB (UE) 190*256kB (UE) 105*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 261412kB 22:10:28 executing program 5: ioctl$BTRFS_IOC_FS_INFO(0xffffffffffffffff, 0x8400941f, &(0x7f0000000140)) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x7f, 0x22}) [ 1592.293333] 0 [ 1592.329434] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1592.362262] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1592.369104] 0 [ 1592.370844] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1592.370852] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1592.370856] 22181 total pagecache pages [ 1592.370865] 0 pages in swap cache [ 1592.380627] 0 [ 1592.428396] Swap cache stats: add 0, delete 0, find 0/0 [ 1592.436169] Free swap = 0kB [ 1592.439563] Total swap = 0kB [ 1592.444452] 2097051 pages RAM [ 1592.455502] 0 pages HighMem/MovableOnly [ 1592.459476] 363849 pages reserved [ 1592.464897] 0 pages cma reserved [ 1592.479587] 0 0 [ 1592.489309] Node 1 Normal free:156308kB min:53696kB low:67120kB high:80544kB active_anon:1988kB inactive_anon:19464kB active_file:2712kB inactive_file:3268kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:576kB pagetables:304kB bounce:0kB free_pcp:1376kB local_pcp:720kB free_cma:0kB [ 1592.545309] Mem-Info: [ 1592.557716] active_anon:15198 inactive_anon:18181 isolated_anon:0 [ 1592.557716] active_file:1186 inactive_file:2095 isolated_file:0 [ 1592.557716] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1592.557716] slab_reclaimable:12946 slab_unreclaimable:121163 [ 1592.557716] mapped:55416 shmem:19220 pagetables:844 bounce:0 [ 1592.557716] free:38794 free_pcp:426 free_cma:0 [ 1592.575312] syz-executor.3: [ 1592.593997] syz-executor.1: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1592.623278] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 1592.629584] page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1592.644551] CPU: 1 PID: 28319 Comm: syz-executor.1 Not tainted 4.14.232-syzkaller #0 [ 1592.652458] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1592.661803] Call Trace: [ 1592.664389] dump_stack+0x1b2/0x281 [ 1592.668014] warn_alloc.cold+0x96/0x1cc [ 1592.671984] ? zone_watermark_ok_safe+0x220/0x220 [ 1592.672096] lowmem_reserve[]: [ 1592.676826] __alloc_pages_nodemask+0x2127/0x2720 [ 1592.676842] ? lock_acquire+0x170/0x3f0 [ 1592.676856] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1592.676873] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1592.676885] ? __mutex_unlock_slowpath+0x75/0x770 [ 1592.676898] alloc_pages_current+0x155/0x260 [ 1592.676913] ion_page_pool_alloc+0x118/0x1b0 [ 1592.690029] 0 [ 1592.693611] ion_system_heap_allocate+0x133/0x8c0 [ 1592.693622] ? _raw_spin_unlock+0x29/0x40 [ 1592.693632] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1592.724395] 0 [ 1592.728307] ? ion_system_contig_heap_create+0x130/0x130 [ 1592.728309] 0 0 [ 1592.730099] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1592.742501] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1592.747344] ion_alloc+0x27a/0x810 [ 1592.750883] ? ion_dma_buf_release+0x40/0x40 [ 1592.751709] Node 0 active_anon:58704kB inactive_anon:53260kB active_file:92kB inactive_file:128kB unevictable:0kB isolated(anon):48kB isolated(file):0kB mapped:199244kB dirty:0kB writeback:0kB shmem:57336kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1592.755288] ? __might_fault+0x177/0x1b0 [ 1592.755300] ion_ioctl+0xea/0x1f0 [ 1592.755311] ? ion_query_heaps+0x360/0x360 [ 1592.783093] 0 [ 1592.787110] ? ion_query_heaps+0x360/0x360 [ 1592.794742] do_vfs_ioctl+0x75a/0xff0 [ 1592.794754] ? ioctl_preallocate+0x1a0/0x1a0 [ 1592.794763] ? lock_downgrade+0x740/0x740 [ 1592.794779] ? __fget+0x225/0x360 [ 1592.794788] ? do_vfs_ioctl+0xff0/0xff0 [ 1592.812096] Node 0 [ 1592.813194] ? security_file_ioctl+0x83/0xb0 [ 1592.816614] DMA: [ 1592.820568] SyS_ioctl+0x7f/0xb0 [ 1592.832083] 10*4kB (UME) [ 1592.832552] ? do_vfs_ioctl+0xff0/0xff0 [ 1592.832565] do_syscall_64+0x1d5/0x640 [ 1592.835294] 14*8kB [ 1592.839251] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1592.850491] RIP: 0033:0x4665f9 [ 1592.852096] Node 1 active_anon:1988kB inactive_anon:19464kB active_file:364kB inactive_file:544kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:13820kB dirty:0kB writeback:100kB shmem:19544kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1592.853676] RSP: 002b:00007ff71dccb188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1592.881105] (UME) [ 1592.888769] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1592.888775] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1592.888779] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1592.888785] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1592.888790] R13: 00007ffc9b58892f R14: 00007ff71dccb300 R15: 0000000000022000 [ 1592.897273] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 1592.938882] CPU: 1 PID: 28352 Comm: syz-executor.3 Not tainted 4.14.232-syzkaller #0 [ 1592.946750] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1592.956081] Call Trace: [ 1592.958651] dump_stack+0x1b2/0x281 [ 1592.962374] warn_alloc.cold+0x96/0x1cc [ 1592.966327] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1592.971320] ? zone_watermark_ok_safe+0x220/0x220 [ 1592.976149] __alloc_pages_nodemask+0x2127/0x2720 [ 1592.980967] ? _raw_spin_unlock_irq+0x5a/0x80 [ 1592.985441] ? finish_task_switch+0x178/0x610 [ 1592.989911] ? finish_task_switch+0x14d/0x610 [ 1592.994387] ? lock_acquire+0x170/0x3f0 [ 1592.998340] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1593.003166] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1593.008597] ? __mutex_unlock_slowpath+0x75/0x770 [ 1593.013419] ? alloc_pages_current+0xe3/0x260 [ 1593.017894] alloc_pages_current+0x155/0x260 [ 1593.022280] ion_page_pool_alloc+0x118/0x1b0 [ 1593.026668] ion_system_heap_allocate+0x133/0x8c0 [ 1593.031486] ? ion_alloc+0x187/0x810 [ 1593.035178] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1593.040607] ? ion_system_contig_heap_create+0x130/0x130 [ 1593.046034] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1593.051027] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1593.055848] ion_alloc+0x204/0x810 [ 1593.059368] ? ion_dma_buf_release+0x40/0x40 [ 1593.063757] ? __might_fault+0x177/0x1b0 [ 1593.067797] ion_ioctl+0xea/0x1f0 [ 1593.071226] ? ion_query_heaps+0x360/0x360 [ 1593.075439] ? ion_query_heaps+0x360/0x360 [ 1593.079649] do_vfs_ioctl+0x75a/0xff0 [ 1593.083428] ? ioctl_preallocate+0x1a0/0x1a0 [ 1593.087815] ? lock_downgrade+0x740/0x740 [ 1593.091942] ? __fget+0x225/0x360 [ 1593.095385] ? do_vfs_ioctl+0xff0/0xff0 [ 1593.099337] ? security_file_ioctl+0x83/0xb0 [ 1593.103725] SyS_ioctl+0x7f/0xb0 [ 1593.107069] ? do_vfs_ioctl+0xff0/0xff0 [ 1593.111023] do_syscall_64+0x1d5/0x640 [ 1593.114890] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1593.120057] RIP: 0033:0x4665f9 [ 1593.123223] RSP: 002b:00007fd613a46188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1593.130914] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1593.138160] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1593.145407] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1593.152654] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1593.159902] R13: 00007ffce81deb9f R14: 00007fd613a46300 R15: 0000000000022000 [ 1593.169919] Node 0 DMA free:10968kB min:204kB low:252kB high:300kB active_anon:12kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1593.180181] 24*16kB [ 1593.200251] lowmem_reserve[]: [ 1593.201354] (UM) [ 1593.203669] 0 [ 1593.205686] 32*32kB [ 1593.207723] 2717 [ 1593.209519] (UME) [ 1593.211817] 2718 [ 1593.217406] 21*64kB [ 1593.218592] 2718 [ 1593.219468] (UME) [ 1593.221761] 2718 [ 1593.223834] 3*128kB [ 1593.227998] (UME) [ 1593.230292] Node 0 [ 1593.230299] 4*256kB [ 1593.232509] DMA32 free:17896kB min:36200kB low:45248kB high:54296kB active_anon:58732kB inactive_anon:53260kB active_file:24kB inactive_file:28kB unevictable:0kB writepending:24kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7296kB pagetables:3028kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1593.232513] lowmem_reserve[]: [ 1593.238010] (UME) [ 1593.265101] 0 0 0 0 0 [ 1593.265119] Node 0 [ 1593.271512] 1*512kB (E) 2*1024kB (ME) 2*2048kB (UE) 0*4096kB = 10968kB [ 1593.281769] Node 0 DMA32: 899*4kB (ME) 385*8kB (ME) 52*16kB (ME) 321*32kB (UME) 2*64kB (U) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 17908kB [ 1593.282096] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1593.301201] Node 0 [ 1593.320676] lowmem_reserve[]: 0 0 0 0 0 [ 1593.327322] Node 1 Normal free:26964kB min:53696kB low:67120kB high:80544kB active_anon:1996kB inactive_anon:19464kB active_file:24kB inactive_file:372kB unevictable:0kB writepending:52kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:576kB pagetables:304kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1593.330137] Normal: [ 1593.356267] lowmem_reserve[]: 0 0 0 0 0 [ 1593.362729] Node 0 DMA: 10*4kB (UME) 14*8kB (UME) 24*16kB (UM) 32*32kB (UME) 21*64kB (UME) 3*128kB (UME) 4*256kB (UME) 1*512kB (E) 2*1024kB (ME) 2*2048kB (UE) 0*4096kB = 10968kB [ 1593.367869] 0*4kB [ 1593.380254] Node 0 DMA32: 899*4kB (ME) 385*8kB (ME) 52*16kB (ME) 321*32kB (UME) 2*64kB (U) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 17908kB [ 1593.382740] 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1593.398538] Node 0 [ 1593.405169] Node 1 [ 1593.406331] Normal: [ 1593.407398] Normal: [ 1593.409612] 0*4kB [ 1593.411911] 43*4kB [ 1593.416784] 0*8kB [ 1593.416998] (UM) [ 1593.419022] 0*16kB [ 1593.421139] 28*8kB [ 1593.424318] 0*32kB [ 1593.425416] (UM) [ 1593.427625] 0*64kB [ 1593.429835] 267*16kB [ 1593.431871] 0*128kB [ 1593.434117] (UM) 634*32kB (UM) 20*64kB (UM) 3*128kB [ 1593.438754] 0*256kB [ 1593.438842] (M) [ 1593.445282] 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1593.451779] 2*256kB (M) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 27132kB [ 1593.455782] Node 1 [ 1593.460439] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1593.460441] Normal: 27*4kB [ 1593.462724] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1593.462730] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1593.462735] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1593.462738] 19294 total pagecache pages [ 1593.462750] 0 pages in swap cache [ 1593.472034] (UM) [ 1593.474711] Swap cache stats: add 0, delete 0, find 0/0 [ 1593.487231] 25*8kB [ 1593.491921] Free swap = 0kB [ 1593.500672] (M) [ 1593.508633] Total swap = 0kB [ 1593.509957] 226*16kB [ 1593.515345] 2097051 pages RAM [ 1593.517570] (UM) [ 1593.520531] 0 pages HighMem/MovableOnly [ 1593.522511] 634*32kB (UM) 20*64kB (UM) 3*128kB (M) 2*256kB (M) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 26388kB [ 1593.528828] 363849 pages reserved [ 1593.531017] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1593.533589] 0 pages cma reserved [ 1593.537159] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1593.550215] Out of memory (oom_kill_allocating_task): Kill process 26628 (systemd-journal) score 0 or sacrifice child [ 1593.550380] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1593.570793] Killed process 26628 (systemd-journal) total-vm:46096kB, anon-rss:484kB, file-rss:0kB, shmem-rss:3416kB [ 1593.571251] syz-executor.2: [ 1593.582090] syz-executor.1: [ 1593.591042] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1593.616674] page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1593.627105] 19294 total pagecache pages [ 1593.631069] 0 pages in swap cache [ 1593.634541] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 1593.636905] oom_reaper: reaped process 28340 (syz-executor.4), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1593.639649] CPU: 0 PID: 28320 Comm: syz-executor.2 Not tainted 4.14.232-syzkaller #0 [ 1593.654560] page allocation failure: order:0 [ 1593.657529] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1593.657539] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1593.661918] Call Trace: [ 1593.679605] oom_reaper: reaped process 26628 (systemd-journal), now anon-rss:0kB, file-rss:0kB, shmem-rss:3416kB [ 1593.681083] dump_stack+0x1b2/0x281 [ 1593.691873] (null) [ 1593.695076] warn_alloc.cold+0x96/0x1cc [ 1593.695088] ? zone_watermark_ok_safe+0x220/0x220 [ 1593.695098] ? usleep_range+0x130/0x130 [ 1593.695110] ? _find_next_bit+0xdb/0x100 [ 1593.695121] ? run_timer_softirq+0x5a0/0x5a0 [ 1593.695138] __alloc_pages_nodemask+0x2127/0x2720 [ 1593.700572] syz-executor.1 cpuset= [ 1593.701238] ? lock_acquire+0x170/0x3f0 [ 1593.706332] / [ 1593.710010] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1593.717371] mems_allowed=0-1 [ 1593.718423] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1593.744747] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1593.750182] alloc_pages_current+0x155/0x260 [ 1593.754577] ion_page_pool_alloc+0x118/0x1b0 [ 1593.758969] ion_system_heap_allocate+0x133/0x8c0 [ 1593.763806] ? _raw_spin_unlock+0x29/0x40 [ 1593.768033] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1593.771573] oom_reaper: reaped process 28318 (syz-executor.0), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1593.773083] ? ion_system_contig_heap_create+0x130/0x130 [ 1593.773093] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1593.773104] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1593.773114] ion_alloc+0x27a/0x810 [ 1593.773127] ? ion_dma_buf_release+0x40/0x40 [ 1593.773139] ? __might_fault+0x177/0x1b0 [ 1593.773149] ion_ioctl+0xea/0x1f0 [ 1593.773157] ? ion_query_heaps+0x360/0x360 [ 1593.773168] ? ion_query_heaps+0x360/0x360 [ 1593.773177] do_vfs_ioctl+0x75a/0xff0 [ 1593.773189] ? ioctl_preallocate+0x1a0/0x1a0 [ 1593.773197] ? lock_downgrade+0x740/0x740 [ 1593.773209] ? __fget+0x225/0x360 [ 1593.837959] ? do_vfs_ioctl+0xff0/0xff0 [ 1593.841925] ? security_file_ioctl+0x83/0xb0 [ 1593.846320] SyS_ioctl+0x7f/0xb0 [ 1593.849662] ? do_vfs_ioctl+0xff0/0xff0 [ 1593.853625] do_syscall_64+0x1d5/0x640 [ 1593.857500] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1593.862678] RIP: 0033:0x4665f9 [ 1593.865858] RSP: 002b:00007f66397b6188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1593.873547] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1593.880800] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1593.888051] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1593.895310] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1593.902571] R13: 00007fff59ca014f R14: 00007f66397b6300 R15: 0000000000022000 [ 1593.909838] CPU: 1 PID: 28319 Comm: syz-executor.1 Not tainted 4.14.232-syzkaller #0 [ 1593.913964] Swap cache stats: add 0, delete 0, find 0/0 [ 1593.917713] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1593.923071] Free swap = 0kB [ 1593.932378] Call Trace: [ 1593.932392] dump_stack+0x1b2/0x281 [ 1593.932406] warn_alloc.cold+0x96/0x1cc [ 1593.935391] Total swap = 0kB [ 1593.937955] ? zone_watermark_ok_safe+0x220/0x220 [ 1593.941561] 2097051 pages RAM [ 1593.945509] ? usleep_range+0x130/0x130 [ 1593.945518] ? queue_work_on+0x10d/0x1d0 [ 1593.945529] ? _find_next_bit+0xdb/0x100 [ 1593.948519] 0 pages HighMem/MovableOnly [ 1593.953337] ? run_timer_softirq+0x5a0/0x5a0 [ 1593.953354] __alloc_pages_nodemask+0x2127/0x2720 [ 1593.956430] 363849 pages reserved [ 1593.960394] ? lock_acquire+0x170/0x3f0 [ 1593.964440] 0 pages cma reserved [ 1593.968466] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1593.997164] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1594.001655] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1594.007122] alloc_pages_current+0x155/0x260 [ 1594.011526] ion_page_pool_alloc+0x118/0x1b0 [ 1594.015925] ion_system_heap_allocate+0x133/0x8c0 [ 1594.020759] ? _raw_spin_unlock+0x29/0x40 [ 1594.024905] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1594.029847] ? ion_system_contig_heap_create+0x130/0x130 [ 1594.034010] warn_alloc_show_mem: 2 callbacks suppressed [ 1594.034013] Mem-Info: [ 1594.035291] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1594.040802] active_anon:15060 inactive_anon:18181 isolated_anon:0 [ 1594.040802] active_file:31 inactive_file:16 isolated_file:16 [ 1594.040802] unevictable:0 dirty:19 writeback:0 unstable:0 [ 1594.040802] slab_reclaimable:12978 slab_unreclaimable:121103 [ 1594.040802] mapped:53118 shmem:19220 pagetables:833 bounce:0 [ 1594.040802] free:15540 free_pcp:370 free_cma:0 [ 1594.043020] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1594.043030] ion_alloc+0x27a/0x810 [ 1594.043044] ? ion_dma_buf_release+0x40/0x40 [ 1594.048047] Node 0 active_anon:58544kB inactive_anon:53260kB active_file:24kB inactive_file:28kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:199244kB dirty:24kB writeback:0kB shmem:57336kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1594.081428] ? __might_fault+0x177/0x1b0 [ 1594.081438] ion_ioctl+0xea/0x1f0 [ 1594.081446] ? ion_query_heaps+0x360/0x360 [ 1594.086279] Node 1 active_anon:1696kB inactive_anon:19464kB active_file:100kB inactive_file:36kB unevictable:0kB isolated(anon):0kB isolated(file):64kB mapped:13228kB dirty:52kB writeback:0kB shmem:19544kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1594.089775] ? ion_query_heaps+0x360/0x360 [ 1594.094163] Node 0 [ 1594.121891] do_vfs_ioctl+0x75a/0xff0 [ 1594.121904] ? ioctl_preallocate+0x1a0/0x1a0 [ 1594.121913] ? lock_downgrade+0x740/0x740 [ 1594.121925] ? __fget+0x225/0x360 [ 1594.125985] DMA free:10968kB min:204kB low:252kB high:300kB active_anon:12kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1594.129397] ? do_vfs_ioctl+0xff0/0xff0 [ 1594.133611] lowmem_reserve[]: [ 1594.160989] ? security_file_ioctl+0x83/0xb0 [ 1594.160999] SyS_ioctl+0x7f/0xb0 [ 1594.161007] ? do_vfs_ioctl+0xff0/0xff0 [ 1594.165226] 0 [ 1594.167437] do_syscall_64+0x1d5/0x640 [ 1594.171214] 2717 [ 1594.175617] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1594.175627] RIP: 0033:0x4665f9 [ 1594.179762] 2718 [ 1594.183186] RSP: 002b:00007ff71dccb188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1594.183196] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1594.183201] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1594.183209] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1594.208781] 2718 [ 1594.212723] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1594.212728] R13: 00007ffc9b58892f R14: 00007ff71dccb300 R15: 0000000000022000 [ 1594.445072] systemd[1]: systemd-journald.service: Failed with result 'signal'. [ 1594.491216] systemd[1]: systemd-journald.service: Service has no hold-off time, scheduling restart. [ 1594.564621] systemd[1]: Stopped Journal Service. [ 1594.608200] 2718 [ 1594.614545] oom_reaper: reaped process 28352 (syz-executor.3), now anon-rss:0kB, file-rss:12kB, shmem-rss:0kB [ 1594.628140] Node 0 DMA32 free:17488kB min:36200kB low:45248kB high:54296kB active_anon:58440kB inactive_anon:53260kB active_file:16kB inactive_file:28kB unevictable:0kB writepending:24kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7200kB pagetables:2880kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB [ 1594.663494] lowmem_reserve[]: 0 0 0 0 0 [ 1594.666149] systemd invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1594.667632] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1594.701054] systemd cpuset=/ mems_allowed=0-1 [ 1594.707437] lowmem_reserve[]: 0 0 0 0 0 [ 1594.715091] Node 1 Normal free:27420kB min:53696kB low:67120kB high:80544kB active_anon:1800kB inactive_anon:19464kB active_file:204kB inactive_file:456kB unevictable:0kB writepending:44kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:576kB pagetables:452kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1594.722900] CPU: 0 PID: 1 Comm: systemd Not tainted 4.14.232-syzkaller #0 [ 1594.750753] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1594.760093] Call Trace: [ 1594.762690] dump_stack+0x1b2/0x281 [ 1594.763881] lowmem_reserve[]: 0 [ 1594.766305] dump_header+0x178/0x82f [ 1594.766317] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1594.769572] 0 [ 1594.773274] ? ___ratelimit+0x2cd/0x530 [ 1594.773286] oom_kill_process.cold+0x10/0xa40 [ 1594.773298] ? lock_downgrade+0x740/0x740 [ 1594.773312] out_of_memory+0x2dc/0x1190 [ 1594.796676] ? oom_killer_disable+0x1c0/0x1c0 [ 1594.801169] ? mutex_trylock+0x152/0x1a0 [ 1594.805232] __alloc_pages_nodemask+0x23e1/0x2720 [ 1594.810089] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1594.814938] alloc_pages_current+0x155/0x260 [ 1594.819341] filemap_fault+0x11a1/0x1ad0 [ 1594.823401] ext4_filemap_fault+0x84/0xb0 [ 1594.823712] 0 0 [ 1594.827533] __do_fault+0xfa/0x380 [ 1594.827542] __handle_mm_fault+0x2497/0x4620 [ 1594.829491] 0 [ 1594.833007] ? vm_insert_page+0x7c0/0x7c0 [ 1594.833018] ? lock_downgrade+0x740/0x740 [ 1594.833029] ? mark_held_locks+0xa6/0xf0 [ 1594.833041] handle_mm_fault+0x455/0x9c0 [ 1594.855549] __do_page_fault+0x549/0xad0 [ 1594.859605] ? spurious_fault+0x640/0x640 [ 1594.863744] ? do_page_fault+0x60/0x500 [ 1594.867706] ? page_fault+0x2f/0x50 [ 1594.871314] page_fault+0x45/0x50 [ 1594.871316] Node 0 DMA: [ 1594.874758] RIP: 0000:0x3f8 [ 1594.874762] RSP: a51525a0:0000000000000000 EFLAGS: 5586a51525a0 [ 1594.880340] syz-executor.4: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1594.901434] 5*4kB (UME) 7*8kB (UME) 24*16kB (UM) 32*32kB (UME) 22*64kB (UME) 3*128kB (UME) 4*256kB (UME) 1*512kB (E) 2*1024kB (ME) 2*2048kB (UE) 0*4096kB = 10956kB [ 1594.904483] syz-executor.4 cpuset= [ 1594.920034] syz-executor.3: [ 1594.922132] / mems_allowed=0-1 [ 1594.928752] page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1594.929776] CPU: 0 PID: 28340 Comm: syz-executor.4 Not tainted 4.14.232-syzkaller #0 [ 1594.942054] syz-executor.0: [ 1594.948004] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1594.948011] page allocation failure: order:0 [ 1594.951001] Call Trace: [ 1594.964009] syz-executor.3 cpuset= [ 1594.964757] dump_stack+0x1b2/0x281 [ 1594.967307] / [ 1594.970831] warn_alloc.cold+0x96/0x1cc [ 1594.974458] Node 0 [ 1594.976123] ? zone_watermark_ok_safe+0x220/0x220 [ 1594.980066] DMA32: [ 1594.982292] __alloc_pages_nodemask+0x2127/0x2720 [ 1594.982308] ? lock_acquire+0x170/0x3f0 [ 1594.982323] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1594.982337] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1594.982350] ? __mutex_unlock_slowpath+0x75/0x770 [ 1594.990222] 885*4kB [ 1594.994205] alloc_pages_current+0x155/0x260 [ 1594.994227] ion_page_pool_alloc+0x118/0x1b0 [ 1594.994235] ion_system_heap_allocate+0x133/0x8c0 [ 1594.994244] ? _raw_spin_unlock+0x29/0x40 [ 1594.994269] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1594.998386] mems_allowed=0-1 [ 1595.003034] ? ion_system_contig_heap_create+0x130/0x130 [ 1595.003044] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1595.003054] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1595.003063] ion_alloc+0x27a/0x810 [ 1595.003075] ? ion_dma_buf_release+0x40/0x40 [ 1595.010173] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1595.013409] ? __might_fault+0x177/0x1b0 [ 1595.013420] ion_ioctl+0xea/0x1f0 [ 1595.013429] ? ion_query_heaps+0x360/0x360 [ 1595.013439] ? ion_query_heaps+0x360/0x360 [ 1595.013447] do_vfs_ioctl+0x75a/0xff0 [ 1595.013458] ? ioctl_preallocate+0x1a0/0x1a0 [ 1595.023804] (null) [ 1595.024617] ? lock_downgrade+0x740/0x740 [ 1595.029435] syz-executor.0 cpuset= [ 1595.033579] ? __fget+0x225/0x360 [ 1595.033589] ? do_vfs_ioctl+0xff0/0xff0 [ 1595.033600] ? security_file_ioctl+0x83/0xb0 [ 1595.033612] SyS_ioctl+0x7f/0xb0 [ 1595.033619] ? do_vfs_ioctl+0xff0/0xff0 [ 1595.033630] do_syscall_64+0x1d5/0x640 [ 1595.040404] (UME) [ 1595.041619] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1595.063706] 415*8kB [ 1595.064737] RIP: 0033:0x4665f9 [ 1595.071806] (UME) [ 1595.075838] RSP: 002b:00007fbffd9c3188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1595.075848] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1595.075853] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1595.075858] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1595.075863] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1595.075869] R13: 00007fff1427db3f R14: 00007fbffd9c3300 R15: 0000000000022000 [ 1595.083723] / [ 1595.089654] CPU: 1 PID: 28352 Comm: syz-executor.3 Not tainted 4.14.232-syzkaller #0 [ 1595.091555] mems_allowed=0-1 [ 1595.095933] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1595.095937] Call Trace: [ 1595.095952] dump_stack+0x1b2/0x281 [ 1595.095965] warn_alloc.cold+0x96/0x1cc [ 1595.095975] ? zone_watermark_ok_safe+0x220/0x220 [ 1595.095986] ? usleep_range+0x130/0x130 [ 1595.131923] Mem-Info: [ 1595.135894] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1595.135905] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1595.138206] active_anon:15015 inactive_anon:18181 isolated_anon:0 [ 1595.138206] active_file:36 inactive_file:25 isolated_file:0 [ 1595.138206] unevictable:0 dirty:30 writeback:12 unstable:0 [ 1595.138206] slab_reclaimable:13013 slab_unreclaimable:121115 [ 1595.138206] mapped:52248 shmem:19220 pagetables:796 bounce:0 [ 1595.138206] free:14011 free_pcp:4 free_cma:0 [ 1595.141370] ? run_timer_softirq+0x5a0/0x5a0 [ 1595.151930] Node 0 active_anon:58376kB inactive_anon:53256kB active_file:24kB inactive_file:24kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:199244kB dirty:0kB writeback:16kB shmem:57332kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1595.158423] __alloc_pages_nodemask+0x2127/0x2720 [ 1595.181927] Node 1 active_anon:1684kB inactive_anon:19468kB active_file:120kB inactive_file:76kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:9748kB dirty:120kB writeback:32kB shmem:19548kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1595.187397] ? lock_acquire+0x170/0x3f0 [ 1595.189077] Node 0 [ 1595.196938] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1595.196946] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1595.196961] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1595.200038] warn_alloc_show_mem: 1 callbacks suppressed [ 1595.200041] Mem-Info: [ 1595.209368] ? retint_kernel+0x2d/0x2d [ 1595.209384] alloc_pages_current+0x155/0x260 [ 1595.221930] active_anon:15015 inactive_anon:18181 isolated_anon:0 [ 1595.221930] active_file:36 inactive_file:25 isolated_file:0 [ 1595.221930] unevictable:0 dirty:30 writeback:12 unstable:0 [ 1595.221930] slab_reclaimable:13013 slab_unreclaimable:121115 [ 1595.221930] mapped:52248 shmem:19220 pagetables:796 bounce:0 [ 1595.221930] free:14011 free_pcp:4 free_cma:0 [ 1595.224314] ion_page_pool_alloc+0x118/0x1b0 [ 1595.228265] Node 0 active_anon:58376kB inactive_anon:53256kB active_file:24kB inactive_file:24kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:199244kB dirty:0kB writeback:16kB shmem:57332kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1595.230645] ion_system_heap_allocate+0x133/0x8c0 [ 1595.241926] DMA free:10956kB min:204kB low:252kB high:300kB active_anon:12kB inactive_anon:0kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1595.273930] ? ion_alloc+0x187/0x810 [ 1595.273940] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1595.273950] ? ion_system_contig_heap_create+0x130/0x130 [ 1595.291924] Node 1 active_anon:1684kB inactive_anon:19468kB active_file:120kB inactive_file:76kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:9748kB dirty:120kB writeback:32kB shmem:19548kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1595.306064] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1595.306074] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1595.306084] ion_alloc+0x204/0x810 [ 1595.321922] Node 0 [ 1595.338309] ? ion_dma_buf_release+0x40/0x40 [ 1595.338321] ? __might_fault+0x177/0x1b0 [ 1595.351907] lowmem_reserve[]: [ 1595.353764] ion_ioctl+0xea/0x1f0 [ 1595.359197] 0 [ 1595.364535] ? ion_query_heaps+0x360/0x360 [ 1595.364547] ? ion_query_heaps+0x360/0x360 [ 1595.364557] do_vfs_ioctl+0x75a/0xff0 [ 1595.381917] DMA free:10956kB min:204kB low:252kB high:300kB active_anon:12kB inactive_anon:0kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1595.408390] ? ioctl_preallocate+0x1a0/0x1a0 [ 1595.408398] ? lock_downgrade+0x740/0x740 [ 1595.408410] ? __fget+0x225/0x360 [ 1595.421902] 2717 [ 1595.440525] ? do_vfs_ioctl+0xff0/0xff0 [ 1595.440536] ? security_file_ioctl+0x83/0xb0 [ 1595.440545] SyS_ioctl+0x7f/0xb0 [ 1595.461900] 2718 [ 1595.470924] ? do_vfs_ioctl+0xff0/0xff0 [ 1595.481897] lowmem_reserve[]: [ 1595.485463] do_syscall_64+0x1d5/0x640 [ 1595.521894] 2718 [ 1595.522733] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1595.526238] 2718 [ 1595.528450] RIP: 0033:0x4665f9 [ 1595.543370] RSP: 002b:00007fd613a46188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1595.545153] Node 0 [ 1595.549362] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1595.561894] 0 [ 1595.582899] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1595.582905] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1595.582910] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1595.582918] R13: 00007ffce81deb9f R14: 00007fd613a46300 R15: 0000000000022000 [ 1595.587314] DMA32 free:17804kB min:36200kB low:45248kB high:54296kB active_anon:58364kB inactive_anon:53256kB active_file:20kB inactive_file:24kB unevictable:0kB writepending:16kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7200kB pagetables:2880kB bounce:0kB free_pcp:16kB local_pcp:0kB free_cma:0kB [ 1595.595890] 51*16kB [ 1595.618701] lowmem_reserve[]: [ 1595.623934] CPU: 1 PID: 28318 Comm: syz-executor.0 Not tainted 4.14.232-syzkaller #0 [ 1595.631050] 0 [ 1595.631321] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1595.634519] 0 [ 1595.642187] Call Trace: [ 1595.642205] dump_stack+0x1b2/0x281 [ 1595.642221] warn_alloc.cold+0x96/0x1cc [ 1595.644440] 2717 [ 1595.651686] ? zone_watermark_ok_safe+0x220/0x220 [ 1595.653491] 0 [ 1595.660724] ? usleep_range+0x130/0x130 [ 1595.668000] 2718 [ 1595.675232] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1595.675243] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1595.675253] ? run_timer_softirq+0x5a0/0x5a0 [ 1595.682525] 0 [ 1595.710595] __alloc_pages_nodemask+0x2127/0x2720 [ 1595.710610] ? lock_acquire+0x170/0x3f0 [ 1595.712917] 2718 [ 1595.715991] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1595.723973] 2718 [ 1595.725746] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1595.735105] 0 [ 1595.736868] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1595.743030] alloc_pages_current+0x155/0x260 [ 1595.743041] ion_page_pool_alloc+0x118/0x1b0 [ 1595.743051] ion_system_heap_allocate+0x133/0x8c0 [ 1595.749040] ? ion_alloc+0x187/0x810 [ 1595.753869] Node 0 [ 1595.755634] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1595.759594] DMA32 free:17804kB min:36200kB low:45248kB high:54296kB active_anon:58364kB inactive_anon:53256kB active_file:20kB inactive_file:24kB unevictable:0kB writepending:16kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7200kB pagetables:2880kB bounce:0kB free_pcp:16kB local_pcp:0kB free_cma:0kB [ 1595.761627] ? ion_system_contig_heap_create+0x130/0x130 [ 1595.766718] Node 0 [ 1595.771697] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1595.776089] lowmem_reserve[]: [ 1595.777857] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1595.782693] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1595.786624] ion_alloc+0x204/0x810 [ 1595.788656] lowmem_reserve[]: [ 1595.793477] ? ion_dma_buf_release+0x40/0x40 [ 1595.793489] ? __might_fault+0x177/0x1b0 [ 1595.795525] 0 [ 1595.799997] ion_ioctl+0xea/0x1f0 [ 1595.801783] 0 [ 1595.807312] ? ion_query_heaps+0x360/0x360 [ 1595.807325] ? ion_query_heaps+0x360/0x360 [ 1595.807338] do_vfs_ioctl+0x75a/0xff0 [ 1595.811729] 0 [ 1595.816113] ? ioctl_preallocate+0x1a0/0x1a0 [ 1595.816122] ? lock_downgrade+0x740/0x740 [ 1595.816135] ? __fget+0x225/0x360 [ 1595.820948] 0 [ 1595.824647] ? do_vfs_ioctl+0xff0/0xff0 [ 1595.824658] ? security_file_ioctl+0x83/0xb0 [ 1595.824668] SyS_ioctl+0x7f/0xb0 [ 1595.826880] 0 [ 1595.832300] ? do_vfs_ioctl+0xff0/0xff0 [ 1595.832311] do_syscall_64+0x1d5/0x640 [ 1595.832325] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1595.860419] 0 [ 1595.865831] RIP: 0033:0x4665f9 [ 1595.865837] RSP: 002b:00007f185bab8188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1595.868056] 0 [ 1595.873048] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1595.873053] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1595.873058] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1595.873062] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1595.873069] R13: 00007ffd775bd83f R14: 00007f185bab8300 R15: 0000000000022000 [ 1595.876148] 0 [ 1595.883542] (ME) [ 1595.918859] 0 [ 1595.921023] 305*32kB [ 1595.928400] 0 [ 1595.932284] (UME) 0*64kB 3*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 17820kB [ 1595.946526] Node 0 [ 1595.950648] Node 0 [ 1595.954099] Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1595.954147] Node 1 Normal: 7*4kB (ME) 8*8kB (UME) [ 1595.964629] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1595.967703] 7*16kB [ 1595.969482] lowmem_reserve[]: [ 1595.973454] (UM) 8*32kB (UM) 7*64kB (M) 7*128kB (UME) 4*256kB (UME) 46*512kB (UM) 1*1024kB (M) 0*2048kB 0*4096kB = 27404kB [ 1595.973517] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1595.973523] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1595.973529] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1595.973534] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1595.973537] 19271 total pagecache pages [ 1595.973546] 0 pages in swap cache [ 1595.973551] Swap cache stats: add 0, delete 0, find 0/0 [ 1595.973554] Free swap = 0kB [ 1595.973559] Total swap = 0kB [ 1595.995334] 2097051 pages RAM [ 1595.995338] 0 pages HighMem/MovableOnly [ 1595.995342] 363849 pages reserved [ 1595.995345] 0 pages cma reserved [ 1596.142998] 0 [ 1596.149745] Node 1 [ 1596.170739] 0 [ 1596.171602] Normal free:215792kB min:53696kB low:67120kB high:80544kB active_anon:1692kB inactive_anon:19464kB active_file:76kB inactive_file:4000kB unevictable:0kB writepending:72kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:544kB pagetables:212kB bounce:0kB free_pcp:156kB local_pcp:0kB free_cma:0kB [ 1596.183414] 0 [ 1596.184229] lowmem_reserve[]: [ 1596.189716] 0 [ 1596.216508] 0 0 0 0 0 [ 1596.216527] Node 0 DMA: 5*4kB (UME) 7*8kB (UME) 24*16kB (UM) 32*32kB (UME) 22*64kB (UME) 3*128kB (UME) 4*256kB (UME) 1*512kB (E) 2*1024kB (ME) 2*2048kB (UE) 0*4096kB = 10956kB [ 1596.241610] Node 0 DMA32: 358*4kB (UME) 412*8kB (UME) 51*16kB (ME) 305*32kB (UME) 2632*64kB (U) 947*128kB (U) 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (U) 0*4096kB = 308040kB [ 1596.257176] 0 [ 1596.258977] Node 1 Normal free:215792kB min:53696kB low:67120kB high:80544kB active_anon:1692kB inactive_anon:19464kB active_file:76kB inactive_file:4000kB unevictable:0kB writepending:72kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:544kB pagetables:212kB bounce:0kB free_pcp:156kB local_pcp:0kB free_cma:0kB [ 1596.287931] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1596.298667] Node 1 Normal: 2*4kB (UE) 3*8kB (UE) 1*16kB (U) 0*32kB 1386*64kB (UM) 1*128kB (E) 2*256kB (UE) 44*512kB (UM) 132*1024kB (U) 6*2048kB (U) 11*4096kB (U) = 304432kB [ 1596.314429] lowmem_reserve[]: 0 0 0 0 0 [ 1596.318417] Node 0 DMA: 5*4kB (UME) 7*8kB (UME) 24*16kB (UM) 32*32kB (UME) 24*64kB (UME) 5*128kB (UME) 4*256kB (UME) 2*512kB (UE) 2*1024kB (ME) 2*2048kB (UE) 0*4096kB = 11852kB [ 1596.334657] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1596.343610] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1596.352227] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1596.361051] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1596.361876] Node 0 DMA32: 296*4kB (UME) 412*8kB [ 1596.369661] 20751 total pagecache pages [ 1596.378421] 0 pages in swap cache [ 1596.381899] Swap cache stats: add 0, delete 0, find 0/0 [ 1596.381956] (UME) [ 1596.387244] Free swap = 0kB [ 1596.387250] 51*16kB [ 1596.389373] Total swap = 0kB [ 1596.397748] Mem-Info: [ 1596.400164] active_anon:14994 inactive_anon:18180 isolated_anon:0 [ 1596.400164] active_file:20 inactive_file:1526 isolated_file:0 [ 1596.400164] unevictable:0 dirty:18 writeback:0 unstable:0 [ 1596.400164] slab_reclaimable:13023 slab_unreclaimable:121116 [ 1596.400164] mapped:53325 shmem:19220 pagetables:783 bounce:0 [ 1596.400164] free:245427 free_pcp:83 free_cma:0 [ 1596.402355] (ME) [ 1596.433721] 2097051 pages RAM [ 1596.433724] 0 pages HighMem/MovableOnly [ 1596.433727] 363849 pages reserved [ 1596.433730] 0 pages cma reserved [ 1596.433737] Out of memory: Kill process 7959 (syz-fuzzer) score 6 or sacrifice child [ 1596.433793] Killed process 27786 (syz-executor.0) total-vm:84924kB, anon-rss:64kB, file-rss:0kB, shmem-rss:0kB [ 1596.467783] Node 0 active_anon:58284kB inactive_anon:53256kB active_file:4kB inactive_file:2104kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:200540kB dirty:0kB writeback:0kB shmem:57332kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1596.495594] 305*32kB (UME) 4187*64kB (U) 1241*128kB (U) 191*256kB (U) 15*512kB (U) 1*1024kB (U) 1*2048kB (U) 0*4096kB = 501520kB [ 1596.507488] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1596.518265] Node 1 Normal: 2*4kB (UE) 3*8kB (UE) 1*16kB (U) 0*32kB 4533*64kB (UM) 361*128kB (UE) 36*256kB (UE) 44*512kB (UM) 132*1024kB (U) 6*2048kB (U) 11*4096kB (U) = 560624kB [ 1596.542378] Node 1 active_anon:1692kB inactive_anon:19464kB active_file:76kB inactive_file:4000kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:12760kB dirty:72kB writeback:0kB shmem:19548kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1596.579317] Node 0 DMA free:11976kB min:204kB low:252kB high:300kB active_anon:12kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1596.582069] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1596.606691] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1596.623580] Node 0 DMA32 free:601180kB min:36200kB low:45248kB high:54296kB active_anon:58172kB inactive_anon:53256kB active_file:4kB inactive_file:3804kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7168kB pagetables:2772kB bounce:0kB free_pcp:1092kB local_pcp:428kB free_cma:0kB [ 1596.644945] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1596.667498] lowmem_reserve[]: 0 0 0 0 0 [ 1596.680879] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1596.681863] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1596.713835] lowmem_reserve[]: 0 0 0 0 0 [ 1596.726129] Node 1 Normal free:457720kB min:53696kB low:67120kB high:80544kB active_anon:1692kB inactive_anon:19464kB active_file:76kB inactive_file:4000kB unevictable:0kB writepending:72kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:512kB pagetables:212kB bounce:0kB free_pcp:724kB local_pcp:8kB free_cma:0kB [ 1596.751858] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1596.771881] 21787 total pagecache pages [ 1596.776008] 0 pages in swap cache [ 1596.779527] Swap cache stats: add 0, delete 0, find 0/0 [ 1596.779658] systemd[1]: Starting Journal Service... [ 1596.801859] Free swap = 0kB [ 1596.804765] lowmem_reserve[]: 0 0 0 0 0 [ 1596.805413] Total swap = 0kB [ 1596.809454] Node 0 DMA: 20*4kB (UME) 7*8kB (UME) 24*16kB (UM) 32*32kB (UME) 25*64kB (UME) 5*128kB (UME) 4*256kB (UME) 2*512kB (UE) 2*1024kB (ME) 2*2048kB (UE) 0*4096kB = 11976kB [ 1596.821948] 2097051 pages RAM [ 1596.834847] Node 0 DMA32: 4212*4kB (UME) 2010*8kB (UME) 1695*16kB (UME) 1047*32kB (UE) 1574*64kB (U) 1358*128kB (UM) 206*256kB (UM) 14*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 428016kB [ 1596.834921] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1596.867747] Node 1 Normal: 1072*4kB (UME) 1897*8kB (UME) 1209*16kB (UM) 19*32kB (UM) 4550*64kB (UM) 361*128kB (UE) 36*256kB (UE) 44*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 408568kB [ 1596.881852] 0 pages HighMem/MovableOnly [ 1596.888401] 363849 pages reserved [ 1596.889025] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1596.891902] 0 pages cma reserved [ 1596.928423] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1596.937607] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1596.950199] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1596.966541] 22512 total pagecache pages [ 1596.970619] 0 pages in swap cache [ 1596.974298] Swap cache stats: add 0, delete 0, find 0/0 [ 1596.979770] Free swap = 0kB [ 1596.983855] Total swap = 0kB [ 1596.990126] 2097051 pages RAM [ 1596.993796] 0 pages HighMem/MovableOnly [ 1596.998339] 363849 pages reserved [ 1597.002723] 0 pages cma reserved [ 1597.077711] systemd-journald[28366]: File /run/log/journal/04d8c135ee6b410280ba31a58c89679d/system.journal corrupted or uncleanly shut down, renaming and replacing. [ 1597.864429] systemd[1]: Started Journal Service. [ 1598.140617] syz-executor.0: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1598.161027] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 1598.167111] CPU: 1 PID: 28318 Comm: syz-executor.0 Not tainted 4.14.232-syzkaller #0 [ 1598.174999] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1598.184345] Call Trace: [ 1598.186931] dump_stack+0x1b2/0x281 [ 1598.190562] warn_alloc.cold+0x96/0x1cc [ 1598.194531] ? zone_watermark_ok_safe+0x220/0x220 [ 1598.199514] __alloc_pages_nodemask+0x2127/0x2720 [ 1598.204355] ? lock_acquire+0x170/0x3f0 [ 1598.208330] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1598.213173] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1598.218616] ? __mutex_unlock_slowpath+0x75/0x770 [ 1598.223451] ? retint_kernel+0x2d/0x2d [ 1598.227334] alloc_pages_current+0x155/0x260 [ 1598.231739] ion_page_pool_alloc+0x118/0x1b0 [ 1598.236140] ion_system_heap_allocate+0x133/0x8c0 [ 1598.240978] ? _raw_spin_unlock+0x29/0x40 [ 1598.245120] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1598.250046] ? ion_system_contig_heap_create+0x130/0x130 [ 1598.255489] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1598.260497] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1598.265335] ion_alloc+0x27a/0x810 [ 1598.268874] ? ion_dma_buf_release+0x40/0x40 [ 1598.273279] ? __might_fault+0x177/0x1b0 [ 1598.277332] ion_ioctl+0xea/0x1f0 [ 1598.280775] ? ion_query_heaps+0x360/0x360 [ 1598.285004] ? ion_query_heaps+0x360/0x360 [ 1598.289232] do_vfs_ioctl+0x75a/0xff0 [ 1598.293024] ? ioctl_preallocate+0x1a0/0x1a0 [ 1598.297422] ? lock_downgrade+0x740/0x740 [ 1598.301565] ? __fget+0x225/0x360 [ 1598.305011] ? do_vfs_ioctl+0xff0/0xff0 [ 1598.308977] ? security_file_ioctl+0x83/0xb0 [ 1598.313376] SyS_ioctl+0x7f/0xb0 [ 1598.316730] ? do_vfs_ioctl+0xff0/0xff0 [ 1598.320694] do_syscall_64+0x1d5/0x640 [ 1598.324582] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1598.329760] RIP: 0033:0x4665f9 [ 1598.332939] RSP: 002b:00007f185bab8188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1598.340640] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1598.347900] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1598.355159] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1598.362417] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1598.369677] R13: 00007ffd775bd83f R14: 00007f185bab8300 R15: 0000000000022000 [ 1598.479647] syz-executor.3: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1598.520575] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 1598.525339] warn_alloc_show_mem: 1 callbacks suppressed [ 1598.525341] Mem-Info: [ 1598.526253] CPU: 1 PID: 28352 Comm: syz-executor.3 Not tainted 4.14.232-syzkaller #0 [ 1598.531065] active_anon:15112 inactive_anon:20213 isolated_anon:0 [ 1598.531065] active_file:1332 inactive_file:1279 isolated_file:0 [ 1598.531065] unevictable:0 dirty:12 writeback:0 unstable:0 [ 1598.531065] slab_reclaimable:12971 slab_unreclaimable:124323 [ 1598.531065] mapped:45669 shmem:21268 pagetables:710 bounce:0 [ 1598.531065] free:153767 free_pcp:221 free_cma:0 [ 1598.533439] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1598.533443] Call Trace: [ 1598.533460] dump_stack+0x1b2/0x281 [ 1598.533474] warn_alloc.cold+0x96/0x1cc [ 1598.533486] ? zone_watermark_ok_safe+0x220/0x220 [ 1598.533507] __alloc_pages_nodemask+0x2127/0x2720 [ 1598.533525] ? _raw_spin_unlock_irq+0x24/0x80 [ 1598.541726] Node 0 active_anon:58756kB inactive_anon:53704kB active_file:5304kB inactive_file:5140kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:177208kB dirty:40kB writeback:0kB shmem:57780kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1598.575121] ? lock_acquire+0x170/0x3f0 [ 1598.575136] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1598.584718] Node 1 active_anon:1692kB inactive_anon:27148kB active_file:24kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:5468kB dirty:8kB writeback:0kB shmem:27292kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1598.587038] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1598.590626] Node 0 [ 1598.594579] ? __mutex_unlock_slowpath+0x75/0x770 [ 1598.594592] alloc_pages_current+0x155/0x260 [ 1598.594606] ion_page_pool_alloc+0x118/0x1b0 [ 1598.599424] DMA free:11004kB min:204kB low:252kB high:300kB active_anon:12kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1598.604245] ion_system_heap_allocate+0x133/0x8c0 [ 1598.604256] ? _raw_spin_unlock+0x29/0x40 [ 1598.604266] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1598.608733] lowmem_reserve[]: [ 1598.636748] ? ion_system_contig_heap_create+0x130/0x130 [ 1598.636759] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1598.636770] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1598.636780] ion_alloc+0x27a/0x810 [ 1598.640731] 0 [ 1598.645562] ? ion_dma_buf_release+0x40/0x40 [ 1598.645578] ? __might_fault+0x177/0x1b0 [ 1598.672554] 2717 [ 1598.677967] ion_ioctl+0xea/0x1f0 [ 1598.680168] 2718 [ 1598.684988] ? ion_query_heaps+0x360/0x360 [ 1598.684999] ? ion_query_heaps+0x360/0x360 [ 1598.685012] do_vfs_ioctl+0x75a/0xff0 [ 1598.689392] 2718 [ 1598.693778] ? ioctl_preallocate+0x1a0/0x1a0 [ 1598.693786] ? lock_downgrade+0x740/0x740 [ 1598.693799] ? __fget+0x225/0x360 [ 1598.719369] 2718 [ 1598.724191] ? do_vfs_ioctl+0xff0/0xff0 [ 1598.724204] ? security_file_ioctl+0x83/0xb0 [ 1598.724214] SyS_ioctl+0x7f/0xb0 [ 1598.724224] ? do_vfs_ioctl+0xff0/0xff0 [ 1598.733260] do_syscall_64+0x1d5/0x640 [ 1598.733275] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1598.733284] RIP: 0033:0x4665f9 [ 1598.736362] Node 0 [ 1598.741785] RSP: 002b:00007fd613a46188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1598.741795] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1598.741800] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1598.741805] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1598.741812] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1598.746816] DMA32 free:530356kB min:36200kB low:45248kB high:54296kB active_anon:58744kB inactive_anon:53704kB active_file:5064kB inactive_file:5180kB unevictable:0kB writepending:40kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7200kB pagetables:2740kB bounce:0kB free_pcp:292kB local_pcp:292kB free_cma:0kB [ 1598.751624] R13: 00007ffce81deb9f R14: 00007fd613a46300 R15: 0000000000022000 [ 1598.905525] lowmem_reserve[]: 0 0 0 0 0 [ 1598.909645] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1598.935722] lowmem_reserve[]: 0 0 0 0 0 [ 1598.940855] Node 1 Normal free:74136kB min:53696kB low:67120kB high:80544kB active_anon:1692kB inactive_anon:27148kB active_file:308kB inactive_file:44kB unevictable:0kB writepending:12kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:480kB pagetables:100kB bounce:0kB free_pcp:716kB local_pcp:712kB free_cma:0kB [ 1598.970574] lowmem_reserve[]: 0 0 0 0 0 [ 1598.974621] Node 0 DMA: 25*4kB (UME) 39*8kB (UME) 34*16kB (UM) 30*32kB (UME) 6*64kB (UME) 2*128kB (ME) 3*256kB (ME) 1*512kB (E) 3*1024kB (UME) 2*2048kB (UE) 0*4096kB = 11004kB [ 1598.990695] Node 0 DMA32: 0*4kB 145*8kB (UE) 7241*16kB (UME) 7538*32kB (UME) 17*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 359320kB [ 1599.004770] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1599.015643] Node 1 Normal: 882*4kB (UM) 1689*8kB (UM) 1463*16kB (UM) 1040*32kB (U) 5*64kB (UM) 2*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 74304kB [ 1599.030281] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1599.039508] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1599.048148] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1599.057191] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1599.065821] 24394 total pagecache pages [ 1599.069920] 0 pages in swap cache [ 1599.073469] Swap cache stats: add 0, delete 0, find 0/0 [ 1599.078944] Free swap = 0kB [ 1599.082004] Total swap = 0kB [ 1599.085010] 2097051 pages RAM [ 1599.088325] 0 pages HighMem/MovableOnly [ 1599.092827] 363849 pages reserved [ 1599.096282] 0 pages cma reserved [ 1599.353720] syz-executor.0 invoked oom-killer: gfp_mask=0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null), order=0, oom_score_adj=1000 [ 1599.368037] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 1599.378695] CPU: 1 PID: 28318 Comm: syz-executor.0 Not tainted 4.14.232-syzkaller #0 [ 1599.386586] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1599.396034] Call Trace: [ 1599.398604] dump_stack+0x1b2/0x281 [ 1599.402220] dump_header+0x178/0x82f [ 1599.405914] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1599.411006] ? ___ratelimit+0x2cd/0x530 [ 1599.414962] oom_kill_process.cold+0x10/0xa40 [ 1599.419440] out_of_memory+0xe3e/0x1190 [ 1599.423397] ? oom_killer_disable+0x1c0/0x1c0 [ 1599.427868] ? mutex_trylock+0x152/0x1a0 [ 1599.431911] __alloc_pages_nodemask+0x23e1/0x2720 [ 1599.436738] ? lock_acquire+0x170/0x3f0 [ 1599.440693] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1599.445516] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1599.449994] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1599.455424] ? __sanitizer_cov_trace_pc+0x23/0x50 [ 1599.460256] alloc_pages_current+0x155/0x260 [ 1599.464643] ion_page_pool_alloc+0x118/0x1b0 [ 1599.469029] ion_system_heap_allocate+0x133/0x8c0 [ 1599.473850] ? _raw_spin_unlock+0x29/0x40 [ 1599.477978] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1599.482883] ? ion_system_contig_heap_create+0x130/0x130 [ 1599.488313] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1599.493307] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1599.498131] ion_alloc+0x27a/0x810 [ 1599.501650] ? ion_dma_buf_release+0x40/0x40 [ 1599.506037] ? __might_fault+0x177/0x1b0 [ 1599.510074] ion_ioctl+0xea/0x1f0 [ 1599.513507] ? ion_query_heaps+0x360/0x360 [ 1599.517720] ? ion_query_heaps+0x360/0x360 [ 1599.521933] do_vfs_ioctl+0x75a/0xff0 [ 1599.525709] ? ioctl_preallocate+0x1a0/0x1a0 [ 1599.530095] ? lock_downgrade+0x740/0x740 [ 1599.534237] ? __fget+0x225/0x360 [ 1599.537668] ? do_vfs_ioctl+0xff0/0xff0 [ 1599.541625] ? security_file_ioctl+0x83/0xb0 [ 1599.546014] SyS_ioctl+0x7f/0xb0 [ 1599.549369] ? do_vfs_ioctl+0xff0/0xff0 [ 1599.553320] do_syscall_64+0x1d5/0x640 [ 1599.557186] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1599.562352] RIP: 0033:0x4665f9 [ 1599.565518] RSP: 002b:00007f185bab8188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1599.573202] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1599.580446] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1599.587692] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1599.594936] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1599.602191] R13: 00007ffd775bd83f R14: 00007f185bab8300 R15: 0000000000022000 [ 1599.616821] Mem-Info: [ 1599.619251] active_anon:15115 inactive_anon:20213 isolated_anon:0 [ 1599.619251] active_file:42 inactive_file:4 isolated_file:0 [ 1599.619251] unevictable:0 dirty:9 writeback:0 unstable:0 [ 1599.619251] slab_reclaimable:12968 slab_unreclaimable:123681 [ 1599.619251] mapped:43997 shmem:21268 pagetables:710 bounce:0 [ 1599.619251] free:13862 free_pcp:30 free_cma:0 [ 1599.656333] Node 0 active_anon:58768kB inactive_anon:53704kB active_file:160kB inactive_file:12kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:170500kB dirty:32kB writeback:0kB shmem:57780kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1599.687679] Node 1 active_anon:1692kB inactive_anon:27148kB active_file:8kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:5488kB dirty:4kB writeback:0kB shmem:27292kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1599.691788] syz-executor.3: [ 1599.718510] Node 0 [ 1599.721100] page allocation failure: order:0 [ 1599.721531] DMA free:10972kB min:204kB low:252kB high:300kB active_anon:12kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1599.723842] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1599.728196] lowmem_reserve[]: [ 1599.761643] (null) [ 1599.762119] 0 [ 1599.764743] syz-executor.3 cpuset= [ 1599.766866] 2717 2718 [ 1599.768649] / [ 1599.775749] 2718 2718 [ 1599.778436] mems_allowed=0-1 [ 1599.779942] Node 0 DMA32 free:17688kB min:36200kB low:45248kB high:54296kB active_anon:58756kB inactive_anon:53704kB active_file:252kB inactive_file:404kB unevictable:0kB writepending:32kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7200kB pagetables:2740kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1599.783073] CPU: 0 PID: 28352 Comm: syz-executor.3 Not tainted 4.14.232-syzkaller #0 [ 1599.783081] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1599.815336] lowmem_reserve[]: [ 1599.819729] Call Trace: [ 1599.829094] 0 [ 1599.832154] dump_stack+0x1b2/0x281 [ 1599.832167] warn_alloc.cold+0x96/0x1cc [ 1599.832179] ? zone_watermark_ok_safe+0x220/0x220 [ 1599.832189] ? usleep_range+0x130/0x130 [ 1599.832198] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1599.832210] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1599.832220] ? run_timer_softirq+0x5a0/0x5a0 [ 1599.832237] __alloc_pages_nodemask+0x2127/0x2720 [ 1599.832252] ? lock_acquire+0x170/0x3f0 [ 1599.832267] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1599.832276] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1599.832291] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1599.832310] alloc_pages_current+0x155/0x260 [ 1599.832322] ion_page_pool_alloc+0x118/0x1b0 [ 1599.832332] ion_system_heap_allocate+0x133/0x8c0 [ 1599.832343] ? _raw_spin_unlock+0x29/0x40 [ 1599.832353] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1599.841703] 0 [ 1599.844272] ? ion_system_contig_heap_create+0x130/0x130 [ 1599.849083] 0 [ 1599.853033] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1599.853045] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1599.853056] ion_alloc+0x27a/0x810 [ 1599.853069] ? ion_dma_buf_release+0x40/0x40 [ 1599.863304] 0 [ 1599.867524] ? __might_fault+0x177/0x1b0 [ 1599.874027] 0 [ 1599.876288] ion_ioctl+0xea/0x1f0 [ 1599.885580] ? ion_query_heaps+0x360/0x360 [ 1599.885593] ? ion_query_heaps+0x360/0x360 [ 1599.885603] do_vfs_ioctl+0x75a/0xff0 [ 1599.885615] ? ioctl_preallocate+0x1a0/0x1a0 [ 1599.885624] ? lock_downgrade+0x740/0x740 [ 1599.885637] ? __fget+0x225/0x360 [ 1599.894878] Node 0 [ 1599.895445] ? do_vfs_ioctl+0xff0/0xff0 [ 1599.899832] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1599.904643] ? security_file_ioctl+0x83/0xb0 [ 1599.904653] SyS_ioctl+0x7f/0xb0 [ 1599.904661] ? do_vfs_ioctl+0xff0/0xff0 [ 1599.904671] do_syscall_64+0x1d5/0x640 [ 1599.908786] lowmem_reserve[]: [ 1599.913698] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1599.913706] RIP: 0033:0x4665f9 [ 1599.913711] RSP: 002b:00007fd613a46188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1599.913721] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1599.913726] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1599.913731] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1599.913736] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1599.913742] R13: 00007ffce81deb9f R14: 00007fd613a46300 R15: 0000000000022000 [ 1599.917637] warn_alloc_show_mem: 1 callbacks suppressed [ 1599.917640] Mem-Info: [ 1599.921654] 0 [ 1599.922819] active_anon:15115 inactive_anon:20213 isolated_anon:0 [ 1599.922819] active_file:17 inactive_file:15 isolated_file:0 [ 1599.922819] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1599.922819] slab_reclaimable:12968 slab_unreclaimable:123671 [ 1599.922819] mapped:43956 shmem:21268 pagetables:710 bounce:0 [ 1599.922819] free:13952 free_pcp:0 free_cma:0 [ 1599.927770] 0 [ 1599.936264] Node 0 active_anon:58768kB inactive_anon:53704kB active_file:60kB inactive_file:56kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:170336kB dirty:0kB writeback:0kB shmem:57780kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1599.943863] 0 [ 1599.946398] Node 1 active_anon:1692kB inactive_anon:27148kB active_file:8kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:5488kB dirty:0kB writeback:0kB shmem:27292kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1599.948172] 0 [ 1599.955225] Node 0 [ 1599.956411] 0 [ 1599.960078] DMA free:10972kB min:204kB low:252kB high:300kB active_anon:12kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1599.968262] lowmem_reserve[]: [ 1599.972989] Node 1 [ 1599.979547] 0 [ 1599.984883] Normal free:26828kB min:53696kB low:67120kB high:80544kB active_anon:1692kB inactive_anon:27148kB active_file:8kB inactive_file:4kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:480kB pagetables:100kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1600.010725] 2717 [ 1600.014727] lowmem_reserve[]: [ 1600.014769] 2718 [ 1600.018695] 0 [ 1600.026194] 2718 [ 1600.031319] 0 [ 1600.034039] 2718 [ 1600.034046] Node 0 DMA32 free:18008kB min:36200kB low:45248kB high:54296kB active_anon:58756kB inactive_anon:53704kB active_file:60kB inactive_file:56kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7200kB pagetables:2740kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1600.034067] lowmem_reserve[]: 0 0 0 [ 1600.045185] 0 [ 1600.052769] 0 [ 1600.056359] 0 [ 1600.067147] 0 [ 1600.071633] 0 [ 1600.091356] Node 0 [ 1600.124450] Node 0 [ 1600.153970] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1600.183092] DMA: [ 1600.186854] lowmem_reserve[]: [ 1600.213884] 11*4kB [ 1600.219515] 0 [ 1600.252272] (UME) [ 1600.259640] 0 [ 1600.260229] 40*8kB [ 1600.290686] 0 [ 1600.301240] (UME) [ 1600.301503] 0 [ 1600.303851] 33*16kB (UM) [ 1600.307836] 0 [ 1600.342197] 31*32kB [ 1600.346372] (UME) [ 1600.348148] Node 1 [ 1600.350269] 6*64kB [ 1600.352082] Normal free:26828kB min:53696kB low:67120kB high:80544kB active_anon:1692kB inactive_anon:27148kB active_file:8kB inactive_file:4kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:480kB pagetables:100kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1600.352086] lowmem_reserve[]: 0 0 0 0 0 [ 1600.352106] Node 0 DMA: 11*4kB (UME) 40*8kB (UME) 33*16kB (UM) 31*32kB (UME) [ 1600.363467] (UME) [ 1600.367344] 6*64kB [ 1600.400350] 2*128kB [ 1600.408018] (UME) [ 1600.408791] (ME) [ 1600.411090] 2*128kB (ME) 3*256kB (ME) 1*512kB (E) 3*1024kB (UME) 2*2048kB (UE) 0*4096kB = 10972kB [ 1600.420223] 3*256kB (ME) 1*512kB (E) 3*1024kB (UME) 2*2048kB (UE) 0*4096kB = 10972kB [ 1600.427967] Node 0 DMA32: 836*4kB (ME) 445*8kB (ME) 76*16kB (UME) 243*32kB (UME) 23*64kB (UM) 3*128kB (M) 1*256kB (M) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18008kB [ 1600.439115] Node 0 DMA32: 836*4kB (ME) 445*8kB (ME) 76*16kB (UME) 243*32kB (UME) 23*64kB (UM) 3*128kB (M) 1*256kB (M) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18008kB [ 1600.450681] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1600.469242] Node 0 [ 1600.476734] Node 1 Normal: 9*4kB (UM) 3*8kB (M) 7*16kB (UM) 725*32kB (UM) 24*64kB (UM) 5*128kB (U) 3*256kB (U) 1*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 26828kB [ 1600.479464] Normal: [ 1600.497626] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1600.500814] 0*4kB [ 1600.508777] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1600.508785] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1600.510907] 0*8kB [ 1600.523015] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1600.535589] 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1600.542724] 21300 total pagecache pages [ 1600.549163] Node 1 Normal: [ 1600.551323] 0 pages in swap cache [ 1600.551325] 9*4kB (UM) [ 1600.557876] Swap cache stats: add 0, delete 0, find 0/0 [ 1600.565034] 3*8kB (M) 7*16kB (UM) 725*32kB (UM) 24*64kB [ 1600.565822] Free swap = 0kB [ 1600.565827] Total swap = 0kB [ 1600.571250] (UM) [ 1600.577948] 2097051 pages RAM [ 1600.580648] 5*128kB [ 1600.583105] 0 pages HighMem/MovableOnly [ 1600.583109] 363849 pages reserved [ 1600.583112] 0 pages cma reserved [ 1600.631628] (U) 3*256kB (U) 1*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 26828kB [ 1600.638869] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1600.681586] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1600.690171] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1600.711586] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1600.720189] 21522 total pagecache pages [ 1600.742111] 0 pages in swap cache [ 1600.745567] Swap cache stats: add 0, delete 0, find 0/0 [ 1600.750915] Free swap = 0kB [ 1600.761576] Total swap = 0kB [ 1600.764593] 2097051 pages RAM [ 1600.767683] 0 pages HighMem/MovableOnly [ 1600.791606] 363849 pages reserved [ 1600.795170] 0 pages cma reserved [ 1600.798516] Out of memory (oom_kill_allocating_task): Kill process 28318 (syz-executor.0) score 0 or sacrifice child [ 1600.851600] Killed process 28318 (syz-executor.0) total-vm:93384kB, anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1600.872900] syz-executor.0: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1600.899429] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 1600.916551] CPU: 1 PID: 28318 Comm: syz-executor.0 Not tainted 4.14.232-syzkaller #0 [ 1600.924444] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1600.933788] Call Trace: [ 1600.936372] dump_stack+0x1b2/0x281 [ 1600.939993] warn_alloc.cold+0x96/0x1cc [ 1600.944047] ? lock_downgrade+0x740/0x740 [ 1600.948190] ? zone_watermark_ok_safe+0x220/0x220 [ 1600.953032] ? wake_up_q+0x82/0xd0 [ 1600.956573] ? wait_for_completion_io+0x10/0x10 [ 1600.961241] __alloc_pages_nodemask+0x2127/0x2720 [ 1600.966082] ? lock_acquire+0x170/0x3f0 [ 1600.970054] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1600.974900] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1600.979394] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1600.984854] ? __sanitizer_cov_trace_pc+0x23/0x50 [ 1600.989696] alloc_pages_current+0x155/0x260 [ 1600.994116] ion_page_pool_alloc+0x118/0x1b0 [ 1600.998518] ion_system_heap_allocate+0x133/0x8c0 [ 1601.003354] ? _raw_spin_unlock+0x29/0x40 [ 1601.007488] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1601.012407] ? ion_system_contig_heap_create+0x130/0x130 [ 1601.017953] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1601.022976] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1601.027810] ion_alloc+0x27a/0x810 [ 1601.031341] ? ion_dma_buf_release+0x40/0x40 [ 1601.035741] ? __might_fault+0x177/0x1b0 [ 1601.039794] ion_ioctl+0xea/0x1f0 [ 1601.043237] ? ion_query_heaps+0x360/0x360 [ 1601.047466] ? ion_query_heaps+0x360/0x360 [ 1601.051691] do_vfs_ioctl+0x75a/0xff0 [ 1601.055485] ? ioctl_preallocate+0x1a0/0x1a0 [ 1601.059883] ? lock_downgrade+0x740/0x740 [ 1601.064022] ? __fget+0x225/0x360 [ 1601.067468] ? do_vfs_ioctl+0xff0/0xff0 [ 1601.071430] ? security_file_ioctl+0x83/0xb0 [ 1601.075826] SyS_ioctl+0x7f/0xb0 [ 1601.079186] ? do_vfs_ioctl+0xff0/0xff0 [ 1601.083159] do_syscall_64+0x1d5/0x640 [ 1601.087043] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1601.092221] RIP: 0033:0x4665f9 [ 1601.095399] RSP: 002b:00007f185bab8188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1601.103097] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1601.110355] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1601.117613] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1601.124981] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1601.132243] R13: 00007ffd775bd83f R14: 00007f185bab8300 R15: 0000000000022000 [ 1601.161661] Mem-Info: [ 1601.164101] active_anon:15115 inactive_anon:20213 isolated_anon:0 [ 1601.164101] active_file:41 inactive_file:1016 isolated_file:0 [ 1601.164101] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1601.164101] slab_reclaimable:12968 slab_unreclaimable:123543 [ 1601.164101] mapped:44623 shmem:21268 pagetables:684 bounce:0 [ 1601.164101] free:509725 free_pcp:670 free_cma:0 [ 1601.201714] Node 0 active_anon:58768kB inactive_anon:53704kB active_file:660kB inactive_file:2548kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:172376kB dirty:0kB writeback:0kB shmem:57780kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1601.245379] Node 1 active_anon:1692kB inactive_anon:27148kB active_file:304kB inactive_file:436kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:6116kB dirty:0kB writeback:0kB shmem:27292kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1601.273885] Node 0 DMA free:11996kB min:204kB low:252kB high:300kB active_anon:12kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1601.300654] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1601.306197] Node 0 DMA32 free:952484kB min:36200kB low:45248kB high:54296kB active_anon:58756kB inactive_anon:53704kB active_file:760kB inactive_file:3560kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7168kB pagetables:2636kB bounce:0kB free_pcp:1060kB local_pcp:592kB free_cma:0kB [ 1601.335762] lowmem_reserve[]: 0 0 0 0 0 [ 1601.339853] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1601.365555] lowmem_reserve[]: 0 0 0 0 0 [ 1601.369638] Node 1 Normal free:1073720kB min:53696kB low:67120kB high:80544kB active_anon:1692kB inactive_anon:27148kB active_file:304kB inactive_file:436kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:480kB pagetables:100kB bounce:0kB free_pcp:1364kB local_pcp:624kB free_cma:0kB [ 1601.398981] lowmem_reserve[]: 0 0 0 0 0 [ 1601.403680] Node 0 DMA: 18*4kB (UME) 40*8kB (UME) 33*16kB (UM) 31*32kB (UME) 22*64kB (UME) 2*128kB (ME) 3*256kB (ME) 1*512kB (E) 3*1024kB (UME) 2*2048kB (UE) 0*4096kB = 12024kB [ 1601.419817] Node 0 DMA32: 8973*4kB (UE) 10554*8kB (UE) 11115*16kB (UME) 2669*32kB (UME) 4984*64kB (UM) 1453*128kB (UM) 214*256kB (UM) 9*512kB (U) 1*1024kB (U) 1*2048kB (U) 0*4096kB = 950996kB [ 1601.437226] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1601.448149] Node 1 Normal: 618*4kB (UM) 640*8kB (UM) 333*16kB (U) 808*32kB (UM) 7789*64kB (UM) 1624*128kB (U) 392*256kB (U) 72*512kB (UM) 131*1024kB (U) 6*2048kB (U) 11*4096kB (U) = 1073848kB [ 1601.465471] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1601.474485] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1601.483112] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1601.492097] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1601.500750] 22981 total pagecache pages [ 1601.504782] 0 pages in swap cache [ 1601.508357] Swap cache stats: add 0, delete 0, find 0/0 [ 1601.513774] Free swap = 0kB [ 1601.516896] Total swap = 0kB [ 1601.519908] 2097051 pages RAM [ 1601.523051] 0 pages HighMem/MovableOnly [ 1601.527196] 363849 pages reserved [ 1601.530640] 0 pages cma reserved 22:10:38 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) sendmsg$unix(r1, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x80000000, 0x6}) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000280)=ANY=[@ANYBLOB="40000000d05dfd0cf6aadfcd1c2c8204548f7ad25fb20c9fc1b948acee1bf738a8e2f89ba8ad644647776e1929696b34254e5dffa31fab7db2587004efe13e6e76fca3797168ba0ca323227067252996e8b160c2bec95a5f9f90491af03c1f501e1720021bfe4f682947ba1614a12e86a754", @ANYRES16=0x0, @ANYBLOB="000328bd7000ffdbdf2502000000080011000000000006000200010000000c0010000000000001000000050014001f00000008000b0000000000"], 0x40}, 0x1, 0x0, 0x0, 0xc000}, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) 22:10:38 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100), 0x101041, 0x0) fcntl$getownex(r0, 0x10, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r0, 0x4018f50b, &(0x7f0000000040)={0x0, 0x3, 0xffffffffffffffff}) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000300)={0x34, 0x0, &(0x7f00000002c0)}) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r3, 0x721c4010853ab497}, 0x14}}, 0x0) sendmsg$L2TP_CMD_NOOP(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r3, 0x2, 0x70bd29, 0x25dfdbfc, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x4}]}, 0x1c}}, 0x20000000) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000000)={0x100000001, 0x22}) 22:10:38 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$unix(0x1, 0x2, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x80000000, 0x6}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000280)=ANY=[@ANYBLOB="40000000d05dfd0cf6aadfcd1c2c8204548f7ad25fb20c9fc1b948acee1bf738a8e2f89ba8ad644647776e1929696b34254e5dffa31fab7db2587004efe13e6e76fca3797168ba0ca323227067252996e8b160c2bec95a5f9f90491af03c1f501e1720021bfe4f682947ba1614a12e86a754", @ANYRES16=0x0, @ANYBLOB="000328bd7000ffdbdf2502000000080011000000000006000200010000000c0010000000000001000000050014001f00000008000b0000000000"], 0x40}, 0x1, 0x0, 0x0, 0xc000}, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) 22:10:38 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) sendmsg$unix(r1, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x80000000, 0x6}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) 22:10:38 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x80000000, 0x6}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000280)=ANY=[@ANYBLOB="40000000d05dfd0cf6aadfcd1c2c8204548f7ad25fb20c9fc1b948acee1bf738a8e2f89ba8ad644647776e1929696b34254e5dffa31fab7db2587004efe13e6e76fca3797168ba0ca323227067252996e8b160c2bec95a5f9f90491af03c1f501e1720021bfe4f682947ba1614a12e86a754", @ANYRES16=0x0, @ANYBLOB="000328bd7000ffdbdf2502000000080011000000000006000200010000000c0010000000000001000000050014001f00000008000b0000000000"], 0x40}, 0x1, 0x0, 0x0, 0xc000}, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) 22:10:38 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) sendmsg$unix(r1, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x80000000, 0x6}) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) 22:10:38 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100), 0x490300, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x0, 0x17}) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000080)={0x34, 0x0, &(0x7f0000000040)}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000340)={'syztnl2\x00', &(0x7f00000002c0)={'ip6_vti0\x00', 0x0, 0x0, 0x3, 0xf8, 0x13f, 0x29, @private2, @private1, 0x7, 0x80, 0x1, 0x7e}}) pselect6(0x40, &(0x7f00000000c0)={0xfff, 0x288, 0x4, 0xffffffff, 0x2, 0x8010, 0x1, 0x7}, &(0x7f0000000140)={0x90f, 0x9, 0x8, 0x2, 0x3, 0x4, 0x1, 0x1}, &(0x7f0000000180)={0x6, 0x2, 0x20, 0x2b0, 0x71, 0x4, 0x200, 0x1}, &(0x7f00000001c0), &(0x7f0000000240)={&(0x7f0000000200)={[0x1]}, 0x8}) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000280)={0xffffffffffffffff}, 0x4) 22:10:38 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100), 0x101041, 0x0) fcntl$getownex(r1, 0x10, 0x0) perf_event_open$cgroup(&(0x7f0000000140)={0x5, 0x80, 0x5, 0xfb, 0x5, 0x9, 0x0, 0x3, 0x2, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x8, 0x4, @perf_bp={&(0x7f0000000000), 0x4}, 0x10210, 0x7, 0x1, 0x1, 0x2, 0x2, 0xb46d, 0x0, 0x3, 0x0, 0x200}, 0xffffffffffffffff, 0xd, 0xffffffffffffffff, 0x1) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100), 0x101041, 0x0) fcntl$getownex(r2, 0x10, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(r1, 0xf505, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x420801, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x100000001, 0x20}) 22:10:38 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100), 0x102, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100), 0x101041, 0x0) fcntl$getownex(r1, 0x10, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x5, 0x2}) openat$ion(0xffffffffffffff9c, &(0x7f0000000040), 0x4002, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000140)) [ 1602.084743] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1602.097659] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1602.130050] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1602.166101] batman_adv: batadv0: Removing interface: batadv_slave_1 22:10:38 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100), 0x179400, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x100000001, 0x22}) r1 = syz_open_dev$video(&(0x7f0000000040), 0xfc00000000000000, 0x101041) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x14, r3, 0x5}, 0x14}}, 0x0) sendmsg$IPVS_CMD_SET_SERVICE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x64, r3, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_DAEMON={0x24, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x5}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0x64}, 0x1, 0x0, 0x0, 0x20044840}, 0x4085) ioctl$FIONCLEX(r1, 0x5450) [ 1602.215423] device bridge_slave_1 left promiscuous mode [ 1602.250212] bridge0: port 2(bridge_slave_1) entered disabled state 22:10:38 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$BTRFS_IOC_SYNC(r1, 0x9408, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r1, 0x40045402, &(0x7f0000000300)=0x1) ioctl$BTRFS_IOC_QUOTA_CTL(r0, 0xc0109428, &(0x7f0000000080)={0x2, 0x2}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x100000001, 0x33, 0x0, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, &(0x7f0000000040)) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = dup2(r2, r0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000340)={0x9, 0x2, 0x1}) vmsplice(r3, &(0x7f00000000c0)=[{&(0x7f0000000140)="3f556d8414b3d3eb3ff6b3f52929ca9e4420cb23ad3807674688abff055c82eaca35ce648795f0baae74294932796f25cbef13016c5a5ed4d4962c7e4b11776eac063fd45e897db9e94670d479d82d033c994dda2dee8990811d1cfb6fe1028c2da7c6ac66a36580c30fae218ec7feb909aa5c7ef7703897cc0483cc4f15aa73b11a81868bcd99c72a0a7e3cb0e41824061b7ff36d10c01be4ebe4dc78a1fa995f01ebeddd7a53de96880577c2e1c972a3e3915339bbfebf6171ab9fe26f555edee47bc97625", 0xc6}, {&(0x7f0000000240)="48854d06449bfc6841cef65fc1578944ebec90ad6a0f73a5c523244a8c02fa02ded57b08354ea1a6cbb36e6e3622f2c94a28c083b6c125dcd140502e1d03718ce5f27d7adb043707a3ec3417aaaffb13549dc9a673039779e5f39d3ab6b66c628fa5a0cb9ae4e450145cfb8b2ab3a358fda90ae3969af8155bf7afc265d0a6cdf17740bd592c803a1c2915d5ea426505882d97097a899b8843ad8b05e6508297dd5b72305dd3ddc01c42f93a5da3c915fe", 0xb1}], 0x2, 0x8) [ 1602.281184] device bridge_slave_0 left promiscuous mode [ 1602.308742] bridge0: port 1(bridge_slave_0) entered disabled state [ 1602.348731] device veth1_macvtap left promiscuous mode 22:10:38 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x100000001, 0x22}) recvfrom$l2tp(0xffffffffffffffff, &(0x7f0000000040)=""/131, 0x83, 0x2040, 0x0, 0x0) [ 1602.381585] device veth0_macvtap left promiscuous mode [ 1602.401637] device veth1_vlan left promiscuous mode [ 1602.420579] device veth0_vlan left promiscuous mode [ 1602.574591] syz-executor.2: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1602.577013] syz-executor.3: [ 1602.603363] syz-executor.4: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1602.643078] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 1602.652760] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 1602.658011] CPU: 0 PID: 28383 Comm: syz-executor.2 Not tainted 4.14.232-syzkaller #0 [ 1602.665170] page allocation failure: order:4 [ 1602.665874] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1602.665878] Call Trace: [ 1602.665892] dump_stack+0x1b2/0x281 [ 1602.665922] warn_alloc.cold+0x96/0x1cc [ 1602.689874] ? zone_watermark_ok_safe+0x220/0x220 [ 1602.694726] __alloc_pages_nodemask+0x2127/0x2720 [ 1602.696606] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1602.699566] ? lock_acquire+0x170/0x3f0 [ 1602.699593] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1602.699610] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1602.720609] (null) [ 1602.720910] ? __mutex_unlock_slowpath+0x75/0x770 [ 1602.723172] syz-executor.3 cpuset= [ 1602.727880] alloc_pages_current+0x155/0x260 [ 1602.727893] ion_page_pool_alloc+0x118/0x1b0 [ 1602.727903] ion_system_heap_allocate+0x133/0x8c0 [ 1602.733353] / [ 1602.735801] ? ion_alloc+0x187/0x810 [ 1602.741344] mems_allowed=0-1 [ 1602.745010] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1602.745020] ? ion_system_contig_heap_create+0x130/0x130 [ 1602.745030] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1602.745041] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1602.745052] ion_alloc+0x204/0x810 [ 1602.745064] ? ion_dma_buf_release+0x40/0x40 [ 1602.745076] ? __might_fault+0x177/0x1b0 [ 1602.786134] ion_ioctl+0xea/0x1f0 [ 1602.789564] ? ion_query_heaps+0x360/0x360 [ 1602.793778] ? ion_query_heaps+0x360/0x360 [ 1602.797997] do_vfs_ioctl+0x75a/0xff0 [ 1602.801781] ? ioctl_preallocate+0x1a0/0x1a0 [ 1602.806182] ? lock_downgrade+0x740/0x740 [ 1602.810331] ? __fget+0x225/0x360 [ 1602.813767] ? do_vfs_ioctl+0xff0/0xff0 [ 1602.817722] ? security_file_ioctl+0x83/0xb0 [ 1602.822115] SyS_ioctl+0x7f/0xb0 [ 1602.825460] ? do_vfs_ioctl+0xff0/0xff0 [ 1602.829417] do_syscall_64+0x1d5/0x640 [ 1602.833285] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1602.838544] RIP: 0033:0x4665f9 [ 1602.841709] RSP: 002b:00007f66397b6188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1602.849395] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1602.856643] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1602.863892] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1602.871156] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1602.878420] R13: 00007fff59ca014f R14: 00007f66397b6300 R15: 0000000000022000 [ 1602.885694] CPU: 1 PID: 28388 Comm: syz-executor.3 Not tainted 4.14.232-syzkaller #0 [ 1602.893572] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1602.895878] Mem-Info: [ 1602.902913] Call Trace: [ 1602.902928] dump_stack+0x1b2/0x281 [ 1602.902943] warn_alloc.cold+0x96/0x1cc [ 1602.902953] ? zone_watermark_ok_safe+0x220/0x220 [ 1602.902974] __alloc_pages_nodemask+0x2127/0x2720 [ 1602.902990] ? lock_acquire+0x170/0x3f0 [ 1602.903007] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1602.905433] active_anon:15256 inactive_anon:20212 isolated_anon:24 [ 1602.905433] active_file:2261 inactive_file:4553 isolated_file:24 [ 1602.905433] unevictable:0 dirty:16 writeback:10 unstable:0 [ 1602.905433] slab_reclaimable:12936 slab_unreclaimable:123845 [ 1602.905433] mapped:48630 shmem:21265 pagetables:813 bounce:0 [ 1602.905433] free:154692 free_pcp:74 free_cma:0 [ 1602.907988] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1602.908000] ? __mutex_unlock_slowpath+0x75/0x770 [ 1602.911660] Node 0 active_anon:59376kB inactive_anon:53700kB active_file:9028kB inactive_file:18220kB unevictable:0kB isolated(anon):0kB isolated(file):96kB mapped:188884kB dirty:60kB writeback:36kB shmem:57768kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1602.915554] alloc_pages_current+0x155/0x260 [ 1602.915567] ion_page_pool_alloc+0x118/0x1b0 [ 1602.920401] Node 1 active_anon:1648kB inactive_anon:27148kB active_file:16kB inactive_file:0kB unevictable:0kB isolated(anon):96kB isolated(file):0kB mapped:5636kB dirty:4kB writeback:4kB shmem:27292kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1602.925197] ion_system_heap_allocate+0x133/0x8c0 [ 1602.925207] ? ion_alloc+0x187/0x810 [ 1602.925216] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1602.925225] ? ion_system_contig_heap_create+0x130/0x130 [ 1602.929199] Node 0 [ 1602.934003] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1602.934013] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1602.934035] ion_alloc+0x204/0x810 [ 1602.967979] DMA free:11092kB min:204kB low:252kB high:300kB active_anon:12kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1602.973366] ? ion_dma_buf_release+0x40/0x40 [ 1602.973378] ? __might_fault+0x177/0x1b0 [ 1602.973390] ion_ioctl+0xea/0x1f0 [ 1602.978225] lowmem_reserve[]: [ 1603.006478] ? ion_query_heaps+0x360/0x360 [ 1603.006490] ? ion_query_heaps+0x360/0x360 [ 1603.006499] do_vfs_ioctl+0x75a/0xff0 [ 1603.006510] ? ioctl_preallocate+0x1a0/0x1a0 [ 1603.010909] 0 [ 1603.015277] ? lock_downgrade+0x740/0x740 [ 1603.015291] ? __fget+0x225/0x360 [ 1603.015300] ? do_vfs_ioctl+0xff0/0xff0 [ 1603.015311] ? security_file_ioctl+0x83/0xb0 [ 1603.043007] 2717 [ 1603.047177] SyS_ioctl+0x7f/0xb0 [ 1603.047185] ? do_vfs_ioctl+0xff0/0xff0 [ 1603.047196] do_syscall_64+0x1d5/0x640 [ 1603.050901] 2718 [ 1603.056317] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1603.056325] RIP: 0033:0x4665f9 [ 1603.056330] RSP: 002b:00007fd613a46188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1603.056339] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1603.056346] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1603.061828] 2718 [ 1603.064003] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1603.064008] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1603.064014] R13: 00007ffce81deb9f R14: 00007fd613a46300 R15: 0000000000022000 [ 1603.081912] CPU: 1 PID: 28387 Comm: syz-executor.4 Not tainted 4.14.232-syzkaller #0 [ 1603.130919] 2718 [ 1603.134701] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1603.134705] Call Trace: [ 1603.134720] dump_stack+0x1b2/0x281 [ 1603.134734] warn_alloc.cold+0x96/0x1cc [ 1603.134744] ? zone_watermark_ok_safe+0x220/0x220 [ 1603.134764] __alloc_pages_nodemask+0x2127/0x2720 [ 1603.140668] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1603.140681] ? lock_acquire+0x170/0x3f0 [ 1603.140695] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1603.140711] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1603.147730] Node 0 [ 1603.148089] ? __mutex_unlock_slowpath+0x75/0x770 [ 1603.148106] alloc_pages_current+0x155/0x260 [ 1603.148120] ion_page_pool_alloc+0x118/0x1b0 [ 1603.154010] DMA32 free:529044kB min:36200kB low:45248kB high:54296kB active_anon:59348kB inactive_anon:53700kB active_file:8968kB inactive_file:18404kB unevictable:0kB writepending:68kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7264kB pagetables:3036kB bounce:0kB free_pcp:352kB local_pcp:196kB free_cma:0kB [ 1603.154551] ion_system_heap_allocate+0x133/0x8c0 [ 1603.157988] lowmem_reserve[]: [ 1603.161846] ? ion_alloc+0x187/0x810 [ 1603.161856] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1603.161867] ? ion_system_contig_heap_create+0x130/0x130 [ 1603.161890] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1603.161902] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1603.161911] ion_alloc+0x204/0x810 [ 1603.161924] ? ion_dma_buf_release+0x40/0x40 [ 1603.170161] 0 [ 1603.173036] ? __might_fault+0x177/0x1b0 [ 1603.173049] ion_ioctl+0xea/0x1f0 [ 1603.173058] ? ion_query_heaps+0x360/0x360 [ 1603.173071] ? ion_query_heaps+0x360/0x360 [ 1603.173081] do_vfs_ioctl+0x75a/0xff0 [ 1603.173093] ? ioctl_preallocate+0x1a0/0x1a0 [ 1603.178589] 0 [ 1603.183960] ? lock_downgrade+0x740/0x740 [ 1603.183974] ? __fget+0x225/0x360 [ 1603.183983] ? do_vfs_ioctl+0xff0/0xff0 [ 1603.183994] ? security_file_ioctl+0x83/0xb0 [ 1603.184004] SyS_ioctl+0x7f/0xb0 [ 1603.184009] ? do_vfs_ioctl+0xff0/0xff0 [ 1603.184020] do_syscall_64+0x1d5/0x640 [ 1603.193913] 0 [ 1603.198523] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1603.198532] RIP: 0033:0x4665f9 [ 1603.198537] RSP: 002b:00007fbffd9c3188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1603.198546] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1603.198553] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1603.200660] 0 [ 1603.207944] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1603.207962] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1603.207967] R13: 00007fff1427db3f R14: 00007fbffd9c3300 R15: 0000000000022000 [ 1603.481149] syz-executor.1: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1603.484607] 0 [ 1603.504532] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1603.524833] syz-executor.1 cpuset= [ 1603.544999] lowmem_reserve[]: 0 0 0 0 0 [ 1603.551533] / mems_allowed=0-1 [ 1603.557217] Node 1 Normal free:71936kB min:53696kB low:67120kB high:80544kB active_anon:1648kB inactive_anon:27148kB active_file:4kB inactive_file:4kB unevictable:0kB writepending:4kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:480kB pagetables:100kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1603.569192] CPU: 1 PID: 28385 Comm: syz-executor.1 Not tainted 4.14.232-syzkaller #0 [ 1603.594065] lowmem_reserve[]: [ 1603.595293] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1603.595300] 0 [ 1603.598376] Call Trace: [ 1603.607721] 0 [ 1603.609494] dump_stack+0x1b2/0x281 [ 1603.612052] 0 [ 1603.613826] warn_alloc.cold+0x96/0x1cc [ 1603.617416] 0 [ 1603.619201] ? zone_watermark_ok_safe+0x220/0x220 [ 1603.623152] 0 [ 1603.624950] __alloc_pages_nodemask+0x2127/0x2720 [ 1603.629759] Node 0 [ 1603.631561] ? lock_acquire+0x170/0x3f0 [ 1603.631577] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1603.636395] DMA: [ 1603.638623] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1603.647818] 25*4kB [ 1603.649427] ? __mutex_unlock_slowpath+0x75/0x770 [ 1603.654856] (UME) [ 1603.657060] alloc_pages_current+0x155/0x260 [ 1603.661881] 40*8kB [ 1603.664002] ion_page_pool_alloc+0x118/0x1b0 [ 1603.668373] (UME) [ 1603.670587] ion_system_heap_allocate+0x133/0x8c0 [ 1603.674985] 33*16kB [ 1603.677101] ? ion_alloc+0x187/0x810 [ 1603.681925] (UM) [ 1603.684224] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1603.687906] 31*32kB [ 1603.689948] ? ion_system_contig_heap_create+0x130/0x130 [ 1603.695376] (UME) [ 1603.697668] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1603.703101] 7*64kB [ 1603.705213] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1603.710192] (UME) [ 1603.712426] ion_alloc+0x204/0x810 [ 1603.712441] ? ion_dma_buf_release+0x40/0x40 [ 1603.717252] 2*128kB [ 1603.719381] ? __might_fault+0x177/0x1b0 [ 1603.730370] (ME) [ 1603.733625] ion_ioctl+0xea/0x1f0 [ 1603.733634] ? ion_query_heaps+0x360/0x360 [ 1603.733645] ? ion_query_heaps+0x360/0x360 [ 1603.735680] 3*256kB [ 1603.739113] do_vfs_ioctl+0x75a/0xff0 [ 1603.745232] (ME) [ 1603.747530] ? ioctl_preallocate+0x1a0/0x1a0 [ 1603.749825] 1*512kB [ 1603.753603] ? lock_downgrade+0x740/0x740 [ 1603.753617] ? __fget+0x225/0x360 [ 1603.753626] ? do_vfs_ioctl+0xff0/0xff0 [ 1603.755675] (E) [ 1603.760060] ? security_file_ioctl+0x83/0xb0 [ 1603.764865] 3*1024kB [ 1603.766490] SyS_ioctl+0x7f/0xb0 [ 1603.769913] (UME) [ 1603.773862] ? do_vfs_ioctl+0xff0/0xff0 [ 1603.773874] do_syscall_64+0x1d5/0x640 [ 1603.773888] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1603.775831] 2*2048kB [ 1603.780217] RIP: 0033:0x4665f9 [ 1603.785229] (UE) [ 1603.785952] RSP: 002b:00007ff71dccb188 EFLAGS: 00000246 [ 1603.788075] 0*4096kB [ 1603.792017] ORIG_RAX: 0000000000000010 [ 1603.792023] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1603.792028] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1603.792033] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1603.792038] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1603.792045] R13: 00007ffc9b58892f R14: 00007ff71dccb300 R15: 0000000000022000 [ 1603.795905] = 11092kB [ 1603.876784] Node 0 DMA32: 0*4kB 151*8kB (ME) 34*16kB (ME) 6475*32kB (UE) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 208952kB [ 1603.917482] device hsr_slave_1 left promiscuous mode [ 1603.922648] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1603.942633] device hsr_slave_0 left promiscuous mode [ 1603.949840] Node 1 Normal: 822*4kB (UM) 1570*8kB (UM) 1369*16kB (UM) 1069*32kB (UM) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 71960kB [ 1603.976325] team0 (unregistering): Port device team_slave_1 removed [ 1603.986466] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1603.999466] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1604.002030] team0 (unregistering): Port device team_slave_0 removed [ 1604.012482] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1604.028539] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1604.038030] 28052 total pagecache pages [ 1604.046431] 0 pages in swap cache [ 1604.049974] Swap cache stats: add 0, delete 0, find 0/0 [ 1604.055377] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 1604.066340] Free swap = 0kB [ 1604.069445] Total swap = 0kB [ 1604.070238] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 1604.073420] 2097051 pages RAM [ 1604.087229] 0 pages HighMem/MovableOnly [ 1604.091235] 363849 pages reserved [ 1604.095533] 0 pages cma reserved [ 1604.149876] bond0 (unregistering): Released all slaves [ 1604.271364] warn_alloc_show_mem: 2 callbacks suppressed [ 1604.271368] Mem-Info: [ 1604.279181] active_anon:15343 inactive_anon:20212 isolated_anon:0 [ 1604.279181] active_file:289 inactive_file:294 isolated_file:52 [ 1604.279181] unevictable:0 dirty:41 writeback:0 unstable:0 [ 1604.279181] slab_reclaimable:12935 slab_unreclaimable:123888 [ 1604.279181] mapped:53265 shmem:21265 pagetables:828 bounce:0 [ 1604.279181] free:25260 free_pcp:282 free_cma:0 [ 1604.361812] Node 0 active_anon:59724kB inactive_anon:53700kB active_file:188kB inactive_file:236kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:205332kB dirty:56kB writeback:100kB shmem:57768kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1604.585449] Node 1 active_anon:1648kB inactive_anon:27148kB active_file:8kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:5728kB dirty:8kB writeback:0kB shmem:27292kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1604.653962] oom_reaper: reaped process 28383 (syz-executor.2), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1604.771163] oom_reaper: reaped process 28388 (syz-executor.3), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1604.801380] Node 0 DMA free:10976kB min:204kB low:252kB high:300kB active_anon:12kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1604.803262] syz-fuzzer invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1604.901332] syz-executor.2: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1604.917493] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 1604.922646] CPU: 0 PID: 28383 Comm: syz-executor.2 Not tainted 4.14.232-syzkaller #0 [ 1604.926503] lowmem_reserve[]: [ 1604.930511] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1604.930517] 0 [ 1604.933592] Call Trace: [ 1604.933610] dump_stack+0x1b2/0x281 [ 1604.933624] warn_alloc.cold+0x96/0x1cc [ 1604.933636] ? zone_watermark_ok_safe+0x220/0x220 [ 1604.933646] ? usleep_range+0x130/0x130 [ 1604.933655] ? try_to_free_pages+0x23f/0x6e0 [ 1604.933664] ? _find_next_bit+0xdb/0x100 [ 1604.933675] ? run_timer_softirq+0x5a0/0x5a0 [ 1604.976519] __alloc_pages_nodemask+0x2127/0x2720 [ 1604.981370] ? lock_acquire+0x170/0x3f0 [ 1604.985341] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1604.990174] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1604.994666] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1605.000117] alloc_pages_current+0x155/0x260 [ 1605.004519] ion_page_pool_alloc+0x118/0x1b0 [ 1605.008933] ion_system_heap_allocate+0x133/0x8c0 [ 1605.013762] ? ion_alloc+0x187/0x810 [ 1605.017463] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1605.018588] 2717 [ 1605.022903] ? ion_system_contig_heap_create+0x130/0x130 [ 1605.022912] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1605.022923] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1605.022934] ion_alloc+0x204/0x810 [ 1605.022948] ? ion_dma_buf_release+0x40/0x40 [ 1605.022959] ? __might_fault+0x177/0x1b0 [ 1605.022970] ion_ioctl+0xea/0x1f0 [ 1605.055624] ? ion_query_heaps+0x360/0x360 [ 1605.059854] ? ion_query_heaps+0x360/0x360 [ 1605.064077] do_vfs_ioctl+0x75a/0xff0 [ 1605.065134] 2718 2718 [ 1605.067865] ? ioctl_preallocate+0x1a0/0x1a0 [ 1605.067870] 2718 [ 1605.070347] ? lock_downgrade+0x740/0x740 [ 1605.080924] ? __fget+0x225/0x360 [ 1605.084367] ? do_vfs_ioctl+0xff0/0xff0 [ 1605.088332] ? security_file_ioctl+0x83/0xb0 [ 1605.092730] SyS_ioctl+0x7f/0xb0 [ 1605.096085] ? do_vfs_ioctl+0xff0/0xff0 [ 1605.100063] do_syscall_64+0x1d5/0x640 [ 1605.103944] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1605.109122] RIP: 0033:0x4665f9 [ 1605.112294] RSP: 002b:00007f66397b6188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1605.112304] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1605.112309] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1605.112315] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1605.112319] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1605.112325] R13: 00007fff59ca014f R14: 00007f66397b6300 R15: 0000000000022000 [ 1605.121382] syz-executor.3: [ 1605.162891] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 1605.170677] CPU: 0 PID: 7960 Comm: syz-fuzzer Not tainted 4.14.232-syzkaller #0 [ 1605.178115] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1605.187454] Call Trace: [ 1605.190036] dump_stack+0x1b2/0x281 [ 1605.193657] dump_header+0x178/0x82f [ 1605.197362] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1605.202458] ? ___ratelimit+0x2cd/0x530 [ 1605.206448] oom_kill_process.cold+0x10/0xa40 [ 1605.210945] out_of_memory+0xe3e/0x1190 [ 1605.214918] ? oom_killer_disable+0x1c0/0x1c0 [ 1605.219400] ? mutex_trylock+0x152/0x1a0 [ 1605.223454] __alloc_pages_nodemask+0x23e1/0x2720 [ 1605.228303] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1605.233153] alloc_pages_current+0x155/0x260 [ 1605.237555] filemap_fault+0x11a1/0x1ad0 [ 1605.241615] ext4_filemap_fault+0x84/0xb0 [ 1605.245753] __do_fault+0xfa/0x380 [ 1605.249282] __handle_mm_fault+0x2497/0x4620 [ 1605.253682] ? vm_insert_page+0x7c0/0x7c0 [ 1605.257843] ? free_object+0xe4/0x240 [ 1605.261649] ? mark_held_locks+0xa6/0xf0 [ 1605.265713] handle_mm_fault+0x455/0x9c0 [ 1605.269765] __do_page_fault+0x549/0xad0 [ 1605.273817] ? spurious_fault+0x640/0x640 [ 1605.277955] ? do_page_fault+0x60/0x500 [ 1605.281916] ? page_fault+0x2f/0x50 [ 1605.285530] page_fault+0x45/0x50 [ 1605.288970] RIP: 0000:0x947a7c [ 1605.292144] RSP: 4e20:000000c00003df28 EFLAGS: 0043b6a0 [ 1605.306397] page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1605.330341] Node 0 DMA32 free:17988kB min:36200kB low:45248kB high:54296kB active_anon:59600kB inactive_anon:53700kB active_file:116kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7296kB pagetables:3212kB bounce:0kB free_pcp:316kB local_pcp:196kB free_cma:0kB [ 1605.344226] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 1605.375883] CPU: 0 PID: 28388 Comm: syz-executor.3 Not tainted 4.14.232-syzkaller #0 [ 1605.383751] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1605.393092] Call Trace: [ 1605.395673] dump_stack+0x1b2/0x281 [ 1605.399295] warn_alloc.cold+0x96/0x1cc [ 1605.403262] ? zone_watermark_ok_safe+0x220/0x220 [ 1605.408095] ? usleep_range+0x130/0x130 [ 1605.412059] ? try_to_free_pages+0x23f/0x6e0 [ 1605.416461] ? _find_next_bit+0xdb/0x100 [ 1605.420514] ? run_timer_softirq+0x5a0/0x5a0 [ 1605.424921] __alloc_pages_nodemask+0x2127/0x2720 [ 1605.429770] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1605.434614] ? migrate_swap_stop+0x880/0x880 [ 1605.439013] ? lock_acquire+0x170/0x3f0 [ 1605.442994] alloc_pages_current+0x155/0x260 [ 1605.447398] ion_page_pool_alloc+0x118/0x1b0 [ 1605.451802] ion_system_heap_allocate+0x133/0x8c0 [ 1605.456635] ? ion_alloc+0x187/0x810 [ 1605.460343] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1605.465784] ? ion_system_contig_heap_create+0x130/0x130 [ 1605.471234] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1605.476239] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1605.481074] ion_alloc+0x204/0x810 [ 1605.484625] ? ion_dma_buf_release+0x40/0x40 [ 1605.489025] ? __might_fault+0x177/0x1b0 [ 1605.493078] ion_ioctl+0xea/0x1f0 [ 1605.496525] ? ion_query_heaps+0x360/0x360 [ 1605.500751] ? ion_query_heaps+0x360/0x360 [ 1605.504974] do_vfs_ioctl+0x75a/0xff0 [ 1605.508767] ? ioctl_preallocate+0x1a0/0x1a0 [ 1605.513161] ? lock_downgrade+0x740/0x740 [ 1605.517298] ? __fget+0x225/0x360 [ 1605.520758] ? do_vfs_ioctl+0xff0/0xff0 [ 1605.524718] ? security_file_ioctl+0x83/0xb0 [ 1605.529118] SyS_ioctl+0x7f/0xb0 [ 1605.532472] ? do_vfs_ioctl+0xff0/0xff0 [ 1605.536440] do_syscall_64+0x1d5/0x640 [ 1605.540325] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1605.545502] RIP: 0033:0x4665f9 [ 1605.548680] RSP: 002b:00007fd613a46188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1605.556378] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1605.563638] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1605.570896] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1605.578152] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1605.585408] R13: 00007ffce81deb9f R14: 00007fd613a46300 R15: 0000000000022000 [ 1605.606363] Mem-Info: [ 1605.608782] active_anon:15315 inactive_anon:20212 isolated_anon:0 [ 1605.608782] active_file:27 inactive_file:0 isolated_file:0 [ 1605.608782] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1605.608782] slab_reclaimable:12922 slab_unreclaimable:123908 [ 1605.608782] mapped:52722 shmem:21265 pagetables:828 bounce:0 [ 1605.608782] free:13925 free_pcp:132 free_cma:0 [ 1605.618411] lowmem_reserve[]: [ 1605.650353] Node 0 active_anon:59612kB inactive_anon:53700kB active_file:4kB inactive_file:64kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:205152kB dirty:0kB writeback:0kB shmem:57768kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1605.689449] Mem-Info: [ 1605.695301] active_anon:15315 inactive_anon:20212 isolated_anon:0 [ 1605.695301] active_file:2 inactive_file:17 isolated_file:0 [ 1605.695301] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1605.695301] slab_reclaimable:12922 slab_unreclaimable:123908 [ 1605.695301] mapped:52722 shmem:21265 pagetables:828 bounce:0 [ 1605.695301] free:13925 free_pcp:132 free_cma:0 [ 1605.740180] Node 1 active_anon:1648kB inactive_anon:27148kB active_file:4kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:5736kB dirty:0kB writeback:0kB shmem:27292kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1605.778777] Node 0 DMA free:10964kB min:204kB low:252kB high:300kB active_anon:12kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1605.816934] Node 0 active_anon:59612kB inactive_anon:53700kB active_file:4kB inactive_file:64kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:205152kB dirty:0kB writeback:0kB shmem:57768kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1605.830044] 0 [ 1605.855693] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1605.867956] Node 1 active_anon:1648kB inactive_anon:27148kB active_file:4kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:5736kB dirty:0kB writeback:0kB shmem:27292kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1605.906634] Node 0 DMA32 free:17988kB min:36200kB low:45248kB high:54296kB active_anon:59600kB inactive_anon:53700kB active_file:4kB inactive_file:64kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7296kB pagetables:3212kB bounce:0kB free_pcp:316kB local_pcp:120kB free_cma:0kB [ 1605.930485] 0 [ 1605.948065] Node 0 DMA free:10964kB min:204kB low:252kB high:300kB active_anon:12kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1605.969837] 0 [ 1605.987742] lowmem_reserve[]: 0 0 0 0 0 [ 1606.004398] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1606.011421] 0 [ 1606.036017] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1606.043507] lowmem_reserve[]: 0 0 0 0 0 [ 1606.047494] Node 1 Normal free:83300kB min:53696kB low:67120kB high:80544kB active_anon:1648kB inactive_anon:27148kB active_file:4kB inactive_file:4kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:480kB pagetables:100kB bounce:0kB free_pcp:212kB local_pcp:120kB free_cma:0kB [ 1606.111371] Node 0 [ 1606.111489] 0 [ 1606.115660] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1606.231587] DMA32 free:276364kB min:36200kB low:45248kB high:54296kB active_anon:59600kB inactive_anon:53700kB active_file:100kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7296kB pagetables:3212kB bounce:0kB free_pcp:576kB local_pcp:700kB free_cma:0kB [ 1606.253960] lowmem_reserve[]: 0 0 0 0 0 [ 1606.313227] lowmem_reserve[]: 0 0 0 0 0 [ 1606.318064] Node 0 DMA: 5*4kB (UME) 32*8kB (UME) 32*16kB (UM) 30*32kB (UME) 21*64kB (UME) 3*128kB (UME) 4*256kB (UME) 1*512kB (E) 3*1024kB (UME) 2*2048kB (UE) 0*4096kB = 12180kB [ 1606.359666] Node 1 Normal free:471812kB min:53696kB low:67120kB high:80544kB active_anon:1648kB inactive_anon:27148kB active_file:4kB inactive_file:4kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:480kB pagetables:100kB bounce:0kB free_pcp:212kB local_pcp:92kB free_cma:0kB [ 1606.364945] lowmem_reserve[]: [ 1606.421248] Node 0 DMA32: 166*4kB (UE) 1320*8kB (UME) 5490*16kB (UME) 1359*32kB (UME) 2040*64kB (UM) 225*128kB (UM) 41*256kB (UM) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 312408kB [ 1606.466615] lowmem_reserve[]: 0 0 0 0 0 [ 1606.497955] Node 0 DMA: 5*4kB (UME) 32*8kB (UME) 32*16kB (UM) 30*32kB (UME) 21*64kB (UME) 3*128kB (UME) 4*256kB (UME) 1*512kB (E) 3*1024kB (UME) 2*2048kB (UE) 0*4096kB = 12180kB [ 1606.507219] Node 0 [ 1606.520680] 0 0 0 0 0 [ 1606.533463] Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1606.555525] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1606.584377] Node 0 DMA32: 71*4kB (E) 151*8kB (UME) 5207*16kB (UME) 1600*32kB (UME) 2040*64kB (UM) 226*128kB (UM) 41*256kB (UM) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 305988kB [ 1606.597926] Node 1 Normal: 221*4kB (UM) 86*8kB (UM) 7*16kB (UM) 834*32kB (UM) 4086*64kB (UM) 607*128kB (U) 29*256kB (U) 2*512kB (U) 1*1024kB (U) 1*2048kB (U) 3*4096kB (U) = 391380kB [ 1606.641794] lowmem_reserve[]: 0 0 0 0 0 [ 1606.645812] Node 1 Normal free:376020kB min:53696kB low:67120kB high:80544kB active_anon:1648kB inactive_anon:27148kB active_file:4kB inactive_file:4kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:480kB pagetables:100kB bounce:0kB free_pcp:860kB local_pcp:120kB free_cma:0kB [ 1606.675820] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1606.684272] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1606.691707] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1606.704710] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1606.715034] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1606.724280] lowmem_reserve[]: 0 0 0 0 0 [ 1606.728272] Node 0 DMA: 6*4kB (UME) 32*8kB (UME) 32*16kB (UM) 30*32kB (UME) 21*64kB (UME) 3*128kB (UME) 4*256kB (UME) 1*512kB (E) 2*1024kB (ME) 2*2048kB (UE) 0*4096kB = 11160kB [ 1606.744090] Node 1 Normal: 221*4kB (UM) 86*8kB (UM) 7*16kB (UM) 834*32kB (UM) 4086*64kB (UM) 607*128kB (U) 29*256kB (U) 2*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 376020kB [ 1606.751533] 23060 total pagecache pages [ 1606.781272] Node 0 DMA32: 78*4kB (ME) 157*8kB (ME) 2039*16kB (UME) 1608*32kB (UME) 35*64kB (M) 103*128kB (UM) 41*256kB (UM) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 111568kB [ 1606.792386] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1606.796706] 0 pages in swap cache [ 1606.821230] Swap cache stats: add 0, delete 0, find 0/0 [ 1606.826602] Free swap = 0kB [ 1606.829614] Total swap = 0kB [ 1606.834062] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1606.844112] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1606.851228] 2097051 pages RAM [ 1606.856430] 0 pages HighMem/MovableOnly [ 1606.860385] 363849 pages reserved [ 1606.871227] Node 1 Normal: 221*4kB (UM) 86*8kB (UM) 7*16kB (UM) 834*32kB (UM) 3201*64kB (UM) 607*128kB (U) 29*256kB (U) 2*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 319380kB [ 1606.884011] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1606.892071] 0 pages cma reserved [ 1606.909034] Out of memory (oom_kill_allocating_task): Kill process 7960 (syz-fuzzer) score 0 or sacrifice child [ 1606.919421] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1606.922048] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1606.951191] 23682 total pagecache pages [ 1606.955382] 0 pages in swap cache [ 1606.956567] Killed process 26685 (syz-executor.1) total-vm:84924kB, anon-rss:64kB, file-rss:0kB, shmem-rss:0kB [ 1606.959540] Swap cache stats: add 0, delete 0, find 0/0 [ 1606.979870] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1606.995808] oom_reaper: reaped process 26685 (syz-executor.1), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1607.021191] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1607.031907] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1607.040806] Free swap = 0kB [ 1607.043894] Total swap = 0kB [ 1607.046903] 2097051 pages RAM [ 1607.049992] 0 pages HighMem/MovableOnly [ 1607.071189] 23422 total pagecache pages [ 1607.075173] 0 pages in swap cache [ 1607.078608] Swap cache stats: add 0, delete 0, find 0/0 [ 1607.081210] 363849 pages reserved [ 1607.090577] 0 pages cma reserved [ 1607.107008] Free swap = 0kB [ 1607.110043] Total swap = 0kB [ 1607.131177] 2097051 pages RAM [ 1607.134285] 0 pages HighMem/MovableOnly [ 1607.138971] 363849 pages reserved [ 1607.157676] 0 pages cma reserved [ 1607.449994] IPVS: ftp: loaded support on port[0] = 21 [ 1607.583981] syz-executor.2: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1607.604917] syz-executor.3: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1607.605053] syz-executor.0 invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask= [ 1607.621798] syz-executor.3 cpuset= [ 1607.630451] (null), order=0, oom_score_adj=0 [ 1607.641300] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 1607.643936] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 1607.648506] CPU: 0 PID: 28383 Comm: syz-executor.2 Not tainted 4.14.232-syzkaller #0 [ 1607.661428] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1607.670852] Call Trace: [ 1607.673421] dump_stack+0x1b2/0x281 [ 1607.677028] warn_alloc.cold+0x96/0x1cc [ 1607.680981] ? zone_watermark_ok_safe+0x220/0x220 [ 1607.685810] __alloc_pages_nodemask+0x2127/0x2720 [ 1607.690632] ? check_preemption_disabled+0x35/0x240 [ 1607.695719] ? lock_acquire+0x170/0x3f0 [ 1607.699678] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1607.704507] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1607.709937] ? __mutex_unlock_slowpath+0x75/0x770 [ 1607.714765] alloc_pages_current+0x155/0x260 [ 1607.719155] ion_page_pool_alloc+0x118/0x1b0 [ 1607.723543] ion_system_heap_allocate+0x133/0x8c0 [ 1607.728365] ? _raw_spin_unlock+0x29/0x40 [ 1607.732493] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1607.737406] ? ion_system_contig_heap_create+0x130/0x130 [ 1607.742835] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1607.747832] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1607.752659] ion_alloc+0x27a/0x810 [ 1607.756184] ? ion_dma_buf_release+0x40/0x40 [ 1607.760573] ? __might_fault+0x177/0x1b0 [ 1607.764614] ion_ioctl+0xea/0x1f0 [ 1607.768045] ? ion_query_heaps+0x360/0x360 [ 1607.772265] ? ion_query_heaps+0x360/0x360 [ 1607.776485] do_vfs_ioctl+0x75a/0xff0 [ 1607.780265] ? ioctl_preallocate+0x1a0/0x1a0 [ 1607.784660] ? lock_downgrade+0x740/0x740 [ 1607.788787] ? __fget+0x225/0x360 [ 1607.792237] ? do_vfs_ioctl+0xff0/0xff0 [ 1607.796215] ? security_file_ioctl+0x83/0xb0 [ 1607.800807] SyS_ioctl+0x7f/0xb0 [ 1607.804178] ? do_vfs_ioctl+0xff0/0xff0 [ 1607.808136] do_syscall_64+0x1d5/0x640 [ 1607.812012] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1607.812939] / [ 1607.817185] RIP: 0033:0x4665f9 [ 1607.817188] mems_allowed=0-1 [ 1607.825128] RSP: 002b:00007f66397b6188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1607.832817] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1607.840069] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1607.847316] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1607.854563] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1607.861813] R13: 00007fff59ca014f R14: 00007f66397b6300 R15: 0000000000022000 [ 1607.869079] CPU: 1 PID: 28388 Comm: syz-executor.3 Not tainted 4.14.232-syzkaller #0 [ 1607.876955] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1607.886293] Call Trace: [ 1607.888862] dump_stack+0x1b2/0x281 [ 1607.892470] warn_alloc.cold+0x96/0x1cc [ 1607.896424] ? zone_watermark_ok_safe+0x220/0x220 [ 1607.901107] warn_alloc_show_mem: 1 callbacks suppressed [ 1607.901109] Mem-Info: [ 1607.901262] __alloc_pages_nodemask+0x2127/0x2720 [ 1607.906611] active_anon:15312 inactive_anon:20215 isolated_anon:0 [ 1607.906611] active_file:41 inactive_file:19 isolated_file:0 [ 1607.906611] unevictable:0 dirty:3 writeback:0 unstable:0 [ 1607.906611] slab_reclaimable:12902 slab_unreclaimable:124813 [ 1607.906611] mapped:52786 shmem:21269 pagetables:805 bounce:0 [ 1607.906611] free:18581 free_pcp:0 free_cma:0 [ 1607.908990] ? lock_acquire+0x170/0x3f0 [ 1607.913829] Node 0 active_anon:59592kB inactive_anon:53712kB active_file:68kB inactive_file:32kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:205252kB dirty:8kB writeback:0kB shmem:57784kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1607.946844] ? lock_acquire+0x170/0x3f0 [ 1607.946859] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1607.946875] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1607.991110] Node 1 active_anon:1656kB inactive_anon:27148kB active_file:96kB inactive_file:44kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:5892kB dirty:4kB writeback:0kB shmem:27292kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1607.992732] ? __mutex_unlock_slowpath+0x75/0x770 [ 1608.024601] alloc_pages_current+0x155/0x260 [ 1608.028990] ion_page_pool_alloc+0x118/0x1b0 [ 1608.033375] ion_system_heap_allocate+0x133/0x8c0 [ 1608.038197] ? _raw_spin_unlock+0x29/0x40 [ 1608.042327] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1608.047236] ? ion_system_contig_heap_create+0x130/0x130 [ 1608.051091] Node 0 [ 1608.052663] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1608.052680] DMA free:11020kB min:204kB low:252kB high:300kB active_anon:12kB inactive_anon:0kB active_file:0kB inactive_file:8kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1608.054884] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1608.059869] lowmem_reserve[]: [ 1608.085437] ion_alloc+0x27a/0x810 [ 1608.085450] ? ion_dma_buf_release+0x40/0x40 [ 1608.085462] ? __might_fault+0x177/0x1b0 [ 1608.105353] ion_ioctl+0xea/0x1f0 [ 1608.108783] ? ion_query_heaps+0x360/0x360 [ 1608.112995] ? ion_query_heaps+0x360/0x360 [ 1608.117208] do_vfs_ioctl+0x75a/0xff0 [ 1608.120989] ? ioctl_preallocate+0x1a0/0x1a0 [ 1608.125372] ? lock_downgrade+0x740/0x740 [ 1608.129502] ? __fget+0x225/0x360 [ 1608.131084] 0 2717 [ 1608.132932] ? do_vfs_ioctl+0xff0/0xff0 [ 1608.132945] ? security_file_ioctl+0x83/0xb0 [ 1608.135150] 2718 [ 1608.139096] SyS_ioctl+0x7f/0xb0 [ 1608.148845] ? do_vfs_ioctl+0xff0/0xff0 [ 1608.151082] 2718 2718 [ 1608.152800] do_syscall_64+0x1d5/0x640 [ 1608.152814] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1608.159140] RIP: 0033:0x4665f9 [ 1608.167489] RSP: 002b:00007fd613a46188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1608.175179] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1608.181082] Node 0 [ 1608.182437] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1608.182444] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1608.184678] DMA32 free:35816kB min:36200kB low:45248kB high:54296kB active_anon:59580kB inactive_anon:53712kB active_file:80kB inactive_file:48kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7168kB pagetables:3120kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1608.191912] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1608.191918] R13: 00007ffce81deb9f R14: 00007fd613a46300 R15: 0000000000022000 [ 1608.209511] CPU: 1 PID: 28426 Comm: syz-executor.0 Not tainted 4.14.232-syzkaller #0 [ 1608.249466] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1608.258808] Call Trace: [ 1608.261401] dump_stack+0x1b2/0x281 [ 1608.265023] dump_header+0x178/0x82f [ 1608.268727] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1608.273832] ? ___ratelimit+0x2cd/0x530 [ 1608.276726] lowmem_reserve[]: 0 [ 1608.277794] oom_kill_process.cold+0x10/0xa40 [ 1608.277812] out_of_memory+0xe3e/0x1190 [ 1608.281168] 0 [ 1608.285633] ? oom_killer_disable+0x1c0/0x1c0 [ 1608.289573] 0 [ 1608.291351] ? mutex_trylock+0x152/0x1a0 [ 1608.291363] __alloc_pages_nodemask+0x23e1/0x2720 [ 1608.291383] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1608.311318] alloc_pages_current+0x155/0x260 [ 1608.311577] 0 0 [ 1608.315712] filemap_fault+0x11a1/0x1ad0 [ 1608.315730] ext4_filemap_fault+0x84/0xb0 [ 1608.321710] __do_fault+0xfa/0x380 [ 1608.321720] __handle_mm_fault+0x2497/0x4620 [ 1608.321730] ? vm_insert_page+0x7c0/0x7c0 [ 1608.325849] Node 0 [ 1608.329369] ? do_dup2+0x1d7/0x3d0 [ 1608.333775] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1608.337885] ? __tun_chr_ioctl.isra.0+0x3430/0x3430 [ 1608.340086] lowmem_reserve[]: [ 1608.343627] ? mark_held_locks+0xa6/0xf0 [ 1608.343638] handle_mm_fault+0x455/0x9c0 [ 1608.368516] 0 [ 1608.373499] __do_page_fault+0x549/0xad0 [ 1608.373511] ? spurious_fault+0x640/0x640 [ 1608.376587] 0 [ 1608.380646] ? do_page_fault+0x60/0x500 [ 1608.384697] 0 [ 1608.386466] ? page_fault+0x2f/0x50 [ 1608.390495] 0 [ 1608.394619] page_fault+0x45/0x50 [ 1608.394625] RIP: 6dc60540: (null) [ 1608.394629] RSP: 6dc610e8:00007ffd6dc60a70 EFLAGS: 7ffd6dc60a70 [ 1608.398948] Mem-Info: [ 1608.400365] 0 [ 1608.402202] active_anon:15313 inactive_anon:20215 isolated_anon:0 [ 1608.402202] active_file:15 inactive_file:15 isolated_file:0 [ 1608.402202] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1608.402202] slab_reclaimable:12898 slab_unreclaimable:124819 [ 1608.402202] mapped:52746 shmem:21269 pagetables:784 bounce:0 [ 1608.402202] free:13867 free_pcp:60 free_cma:0 [ 1608.402215] Node 0 active_anon:59596kB inactive_anon:53712kB active_file:56kB inactive_file:56kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:205152kB dirty:0kB writeback:0kB shmem:57784kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1608.402227] Node 1 active_anon:1656kB inactive_anon:27148kB active_file:4kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:5832kB dirty:0kB writeback:0kB shmem:27292kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1608.402230] Node 0 DMA free:10956kB min:204kB low:252kB high:300kB active_anon:12kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1608.402246] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1608.402265] Node 0 DMA32 free:17668kB min:36200kB low:45248kB high:54296kB active_anon:59584kB inactive_anon:53712kB active_file:56kB inactive_file:56kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7264kB pagetables:3036kB bounce:0kB free_pcp:120kB local_pcp:0kB free_cma:0kB [ 1608.402281] lowmem_reserve[]: 0 0 0 0 0 [ 1608.402298] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1608.402312] lowmem_reserve[]: 0 0 0 0 0 [ 1608.402344] Node 1 Normal free:26844kB min:53696kB low:67120kB high:80544kB active_anon:1656kB inactive_anon:27148kB active_file:4kB inactive_file:4kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:480kB pagetables:100kB bounce:0kB free_pcp:120kB local_pcp:0kB free_cma:0kB [ 1608.402360] lowmem_reserve[]: 0 0 0 0 0 [ 1608.402393] Node 0 DMA: 5*4kB (UME) 31*8kB (UME) 32*16kB (UM) 30*32kB (UME) 18*64kB (UME) 3*128kB (UME) 4*256kB (UME) 1*512kB (E) 2*1024kB (ME) 2*2048kB (UE) 0*4096kB = 10956kB [ 1608.402458] Node 0 DMA32: 887*4kB (UME) 431*8kB (ME) 64*16kB (UME) 302*32kB (UME) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 17684kB [ 1608.402512] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1608.402556] Node 1 Normal: 5*4kB (UM) 839*8kB (UM) 851*16kB (U) 203*32kB (UM) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 26844kB [ 1608.402615] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1608.402620] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1608.402625] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1608.402630] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1608.402634] 21299 total pagecache pages [ 1608.402643] 0 pages in swap cache [ 1608.402648] Swap cache stats: add 0, delete 0, find 0/0 [ 1608.402651] Free swap = 0kB [ 1608.402654] Total swap = 0kB [ 1608.402660] 2097051 pages RAM [ 1608.402663] 0 pages HighMem/MovableOnly [ 1608.402666] 363849 pages reserved [ 1608.402669] 0 pages cma reserved [ 1608.402676] Out of memory (oom_kill_allocating_task): Kill process 28426 (syz-executor.0) score 0 or sacrifice child [ 1608.402696] Killed process 28426 (syz-executor.0) total-vm:93120kB, anon-rss:84kB, file-rss:34600kB, shmem-rss:0kB [ 1608.410351] oom_reaper: reaped process 28426 (syz-executor.0), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1608.411603] syz-executor.3: [ 1608.459132] oom_reaper: reaped process 28387 (syz-executor.4), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1608.486933] Bluetooth: hci3 command 0x0409 tx timeout [ 1608.542589] systemd-journal invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask= [ 1608.551989] page allocation failure: order:0 [ 1608.574021] syz-executor.0: [ 1608.581070] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1608.612304] syz-executor.4: [ 1608.639381] Node 1 [ 1608.649256] page allocation failure: order:0 [ 1608.659190] Normal free:26844kB min:53696kB low:67120kB high:80544kB active_anon:1656kB inactive_anon:27148kB active_file:4kB inactive_file:4kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:480kB pagetables:100kB bounce:0kB free_pcp:132kB local_pcp:120kB free_cma:0kB [ 1608.673843] page allocation failure: order:0 [ 1608.688745] lowmem_reserve[]: [ 1608.697289] (null) [ 1608.710697] (null) [ 1608.714882] , order=0, oom_score_adj=0 [ 1608.720103] syz-executor.3 cpuset= [ 1608.728696] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1608.728704] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 1608.728724] CPU: 1 PID: 28387 Comm: syz-executor.4 Not tainted 4.14.232-syzkaller #0 [ 1608.728733] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1608.740673] 0 [ 1608.741446] Call Trace: [ 1608.741463] dump_stack+0x1b2/0x281 [ 1608.741476] warn_alloc.cold+0x96/0x1cc [ 1608.744461] 0 [ 1608.747458] ? zone_watermark_ok_safe+0x220/0x220 [ 1608.750530] 0 [ 1608.754480] ? usleep_range+0x130/0x130 [ 1608.754489] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1608.754501] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1608.757928] / [ 1608.761268] ? run_timer_softirq+0x5a0/0x5a0 [ 1608.771920] 0 [ 1608.782373] __alloc_pages_nodemask+0x2127/0x2720 [ 1608.782388] ? lock_acquire+0x170/0x3f0 [ 1608.792334] mems_allowed=0-1 [ 1608.795319] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1608.811045] 0 [ 1608.820538] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1608.844562] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1608.901042] Node 0 [ 1608.904352] alloc_pages_current+0x155/0x260 [ 1608.921033] DMA: [ 1608.921539] ion_page_pool_alloc+0x118/0x1b0 [ 1608.923306] 5*4kB [ 1608.925869] ion_system_heap_allocate+0x133/0x8c0 [ 1608.929463] (UME) [ 1608.933416] ? ion_alloc+0x187/0x810 [ 1608.933426] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1608.933436] ? ion_system_contig_heap_create+0x130/0x130 [ 1608.951034] 31*8kB [ 1608.955800] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1608.957484] (UME) [ 1608.961871] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1608.961881] ion_alloc+0x204/0x810 [ 1608.961894] ? ion_dma_buf_release+0x40/0x40 [ 1608.981031] 32*16kB [ 1608.982101] ? __might_fault+0x177/0x1b0 [ 1608.986579] (UM) [ 1608.992007] ion_ioctl+0xea/0x1f0 [ 1608.992015] ? ion_query_heaps+0x360/0x360 [ 1608.992027] ? ion_query_heaps+0x360/0x360 [ 1609.001030] 30*32kB [ 1609.005023] do_vfs_ioctl+0x75a/0xff0 [ 1609.007139] (UME) [ 1609.012071] ? ioctl_preallocate+0x1a0/0x1a0 [ 1609.012079] ? lock_downgrade+0x740/0x740 [ 1609.012092] ? __fget+0x225/0x360 [ 1609.031028] 18*64kB [ 1609.035933] ? do_vfs_ioctl+0xff0/0xff0 [ 1609.038051] (UME) [ 1609.042871] ? security_file_ioctl+0x83/0xb0 [ 1609.042880] SyS_ioctl+0x7f/0xb0 [ 1609.042888] ? do_vfs_ioctl+0xff0/0xff0 [ 1609.061026] 3*128kB [ 1609.062561] do_syscall_64+0x1d5/0x640 [ 1609.066780] (UME) [ 1609.070995] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1609.091024] 4*256kB [ 1609.091236] RIP: 0033:0x4665f9 [ 1609.093529] (UME) [ 1609.097478] RSP: 002b:00007fbffd9c3188 EFLAGS: 00000246 [ 1609.099599] 1*512kB [ 1609.103974] ORIG_RAX: 0000000000000010 [ 1609.103980] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1609.103985] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1609.103990] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1609.103997] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1609.121019] (E) [ 1609.124758] R13: 00007fff1427db3f R14: 00007fbffd9c3300 R15: 0000000000022000 [ 1609.127051] 2*1024kB [ 1609.133229] , mode:0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask= [ 1609.150408] CPU: 0 PID: 28388 Comm: syz-executor.3 Not tainted 4.14.232-syzkaller #0 [ 1609.153278] systemd-journal cpuset= [ 1609.158749] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1609.166033] (null) [ 1609.173240] Call Trace: [ 1609.173257] dump_stack+0x1b2/0x281 [ 1609.173271] warn_alloc.cold+0x96/0x1cc [ 1609.173283] ? zone_watermark_ok_safe+0x220/0x220 [ 1609.177075] / [ 1609.182484] ? usleep_range+0x130/0x130 [ 1609.185024] syz-executor.0 cpuset= [ 1609.191766] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1609.191778] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1609.191789] ? run_timer_softirq+0x5a0/0x5a0 [ 1609.191805] __alloc_pages_nodemask+0x2127/0x2720 [ 1609.191822] ? lock_acquire+0x170/0x3f0 [ 1609.191838] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1609.200900] mems_allowed=0-1 [ 1609.203386] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1609.203401] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1609.203421] alloc_pages_current+0x155/0x260 [ 1609.212820] / [ 1609.214886] ion_page_pool_alloc+0x118/0x1b0 [ 1609.214898] ion_system_heap_allocate+0x133/0x8c0 [ 1609.214909] ? _raw_spin_unlock+0x29/0x40 [ 1609.217528] mems_allowed=0-1 [ 1609.221128] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1609.221138] ? ion_system_contig_heap_create+0x130/0x130 [ 1609.221147] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1609.221156] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1609.221166] ion_alloc+0x27a/0x810 [ 1609.326153] ? ion_dma_buf_release+0x40/0x40 [ 1609.330542] ? __might_fault+0x177/0x1b0 [ 1609.334583] ion_ioctl+0xea/0x1f0 [ 1609.338012] ? ion_query_heaps+0x360/0x360 [ 1609.342234] ? ion_query_heaps+0x360/0x360 [ 1609.346462] do_vfs_ioctl+0x75a/0xff0 [ 1609.350260] ? ioctl_preallocate+0x1a0/0x1a0 [ 1609.354644] ? lock_downgrade+0x740/0x740 [ 1609.358775] ? __fget+0x225/0x360 [ 1609.362210] ? do_vfs_ioctl+0xff0/0xff0 [ 1609.366167] ? security_file_ioctl+0x83/0xb0 [ 1609.370555] SyS_ioctl+0x7f/0xb0 [ 1609.373898] ? do_vfs_ioctl+0xff0/0xff0 [ 1609.377859] do_syscall_64+0x1d5/0x640 [ 1609.381734] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1609.386907] RIP: 0033:0x4665f9 [ 1609.390072] RSP: 002b:00007fd613a46188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1609.397758] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1609.405022] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1609.412274] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1609.419520] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1609.426767] R13: 00007ffce81deb9f R14: 00007fd613a46300 R15: 0000000000022000 [ 1609.434027] CPU: 1 PID: 28366 Comm: systemd-journal Not tainted 4.14.232-syzkaller #0 [ 1609.441994] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1609.446084] (ME) [ 1609.451333] Call Trace: [ 1609.451349] dump_stack+0x1b2/0x281 [ 1609.451362] dump_header+0x178/0x82f [ 1609.453404] 2*2048kB [ 1609.455966] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1609.459561] (UE) [ 1609.463250] ? ___ratelimit+0x2cd/0x530 [ 1609.463260] oom_kill_process.cold+0x10/0xa40 [ 1609.463277] out_of_memory+0xe3e/0x1190 [ 1609.465655] 0*4096kB [ 1609.470736] ? oom_killer_disable+0x1c0/0x1c0 [ 1609.472781] = 10956kB [ 1609.476718] ? mutex_trylock+0x152/0x1a0 [ 1609.481195] Node 0 [ 1609.485131] __alloc_pages_nodemask+0x23e1/0x2720 [ 1609.487508] DMA32: [ 1609.492002] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1609.492025] alloc_pages_current+0x155/0x260 [ 1609.494397] 887*4kB [ 1609.498432] filemap_fault+0x11a1/0x1ad0 [ 1609.500638] (UME) [ 1609.505465] ext4_filemap_fault+0x84/0xb0 [ 1609.505474] __do_fault+0xfa/0x380 [ 1609.507682] 433*8kB [ 1609.512498] __handle_mm_fault+0x2497/0x4620 [ 1609.512509] ? vm_insert_page+0x7c0/0x7c0 [ 1609.512519] ? __fsnotify_inode_delete+0x20/0x20 [ 1609.516897] (UME) [ 1609.519199] ? __fsnotify_update_child_dentry_flags.part.0+0x2e0/0x2e0 [ 1609.523241] 64*16kB [ 1609.525358] ? mark_held_locks+0xa6/0xf0 [ 1609.529469] (UME) [ 1609.532985] handle_mm_fault+0x455/0x9c0 [ 1609.532996] __do_page_fault+0x549/0xad0 [ 1609.533008] ? spurious_fault+0x640/0x640 [ 1609.535301] 302*32kB [ 1609.539681] ? do_page_fault+0x60/0x500 [ 1609.543813] (UME) [ 1609.548531] ? page_fault+0x2f/0x50 [ 1609.550651] 0*64kB [ 1609.557288] page_fault+0x45/0x50 [ 1609.557296] RIP: 0037:0x55f86efd5958 [ 1609.557303] RSP: 8fe15678:00007fff8fe15678 EFLAGS: 7fff8fe14e58 [ 1609.559602] 0*128kB [ 1609.566127] CPU: 1 PID: 28426 Comm: syz-executor.0 Not tainted 4.14.232-syzkaller #0 [ 1609.569911] 0*256kB [ 1609.573968] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1609.573971] Call Trace: [ 1609.573983] dump_stack+0x1b2/0x281 [ 1609.573992] warn_alloc.cold+0x96/0x1cc [ 1609.574000] ? zone_watermark_ok_safe+0x220/0x220 [ 1609.574007] ? usleep_range+0x130/0x130 [ 1609.574013] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1609.574022] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1609.574029] ? run_timer_softirq+0x5a0/0x5a0 [ 1609.574042] __alloc_pages_nodemask+0x2127/0x2720 [ 1609.574078] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1609.574105] alloc_pages_current+0x155/0x260 [ 1609.574117] filemap_fault+0x11a1/0x1ad0 [ 1609.574133] ext4_filemap_fault+0x84/0xb0 [ 1609.574142] __do_fault+0xfa/0x380 [ 1609.574151] __handle_mm_fault+0x2497/0x4620 [ 1609.574161] ? vm_insert_page+0x7c0/0x7c0 [ 1609.574167] ? do_dup2+0x1d7/0x3d0 [ 1609.574175] ? __tun_chr_ioctl.isra.0+0x3430/0x3430 [ 1609.574192] ? mark_held_locks+0xa6/0xf0 [ 1609.590489] 0*512kB [ 1609.592594] handle_mm_fault+0x455/0x9c0 [ 1609.592606] __do_page_fault+0x549/0xad0 [ 1609.592618] ? spurious_fault+0x640/0x640 [ 1609.596043] 0*1024kB [ 1609.599732] ? do_page_fault+0x60/0x500 [ 1609.605775] 0*2048kB [ 1609.608059] ? page_fault+0x2f/0x50 [ 1609.615924] 0*4096kB [ 1609.618212] page_fault+0x45/0x50 [ 1609.627556] = 17700kB [ 1609.630107] RIP: 6dc60540: (null) [ 1609.633829] Node 0 [ 1609.637848] RSP: 6dc610e8:00007ffd6dc60a70 EFLAGS: 7ffd6dc60a70 [ 1609.639752] warn_alloc_show_mem: 1 callbacks suppressed [ 1609.639755] Mem-Info: [ 1609.658340] Normal: [ 1609.662910] active_anon:15288 inactive_anon:20215 isolated_anon:0 [ 1609.662910] active_file:15 inactive_file:15 isolated_file:0 [ 1609.662910] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1609.662910] slab_reclaimable:12898 slab_unreclaimable:124819 [ 1609.662910] mapped:52746 shmem:21269 pagetables:784 bounce:0 [ 1609.662910] free:13867 free_pcp:110 free_cma:0 [ 1609.674658] 0*4kB [ 1609.675486] Node 0 active_anon:59496kB inactive_anon:53712kB active_file:56kB inactive_file:56kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:205152kB dirty:0kB writeback:0kB shmem:57784kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1609.679428] 0*8kB [ 1609.685367] Node 1 active_anon:1656kB inactive_anon:27148kB active_file:4kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:5832kB dirty:0kB writeback:0kB shmem:27292kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1609.697881] 0*16kB [ 1609.699775] Node 0 [ 1609.704316] 0*32kB 0*64kB [ 1609.712449] DMA free:10956kB min:204kB low:252kB high:300kB active_anon:12kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1609.721574] 0*128kB [ 1609.725754] Mem-Info: [ 1609.729195] 0*256kB 0*512kB [ 1609.733311] lowmem_reserve[]: [ 1609.742316] 0*1024kB [ 1609.746416] active_anon:15288 inactive_anon:20215 isolated_anon:0 [ 1609.746416] active_file:15 inactive_file:15 isolated_file:0 [ 1609.746416] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1609.746416] slab_reclaimable:12898 slab_unreclaimable:124819 [ 1609.746416] mapped:52746 shmem:21269 pagetables:784 bounce:0 [ 1609.746416] free:13867 free_pcp:110 free_cma:0 [ 1609.747777] 0*2048kB [ 1609.750000] Node 0 active_anon:59496kB inactive_anon:53712kB active_file:56kB inactive_file:56kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:205152kB dirty:0kB writeback:0kB shmem:57784kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1609.759404] 0*4096kB [ 1609.765843] 0 [ 1609.769377] = 0kB [ 1609.809401] Node 1 active_anon:1656kB inactive_anon:27148kB active_file:4kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:5832kB dirty:0kB writeback:0kB shmem:27292kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1609.851011] Node 1 [ 1609.893967] 2717 [ 1609.970174] Normal: [ 1610.000993] Node 0 DMA free:11720kB min:204kB low:252kB high:300kB active_anon:12kB inactive_anon:0kB active_file:4kB inactive_file:256kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1610.080979] 5*4kB (UM) 839*8kB (UM) 851*16kB (U) 203*32kB (UM) 4490*64kB (U) 499*128kB (U) 13*256kB (U) 2*512kB (U) 150*1024kB (U) 7*2048kB (U) 7*4096kB (U) = 579036kB [ 1610.084013] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1610.116558] Node 0 DMA32 free:225552kB min:36200kB low:45248kB high:54296kB active_anon:59440kB inactive_anon:53712kB active_file:128kB inactive_file:3140kB unevictable:0kB writepending:148kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7264kB pagetables:3036kB bounce:0kB free_pcp:416kB local_pcp:248kB free_cma:0kB [ 1610.130974] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1610.164352] 2718 2718 2718 [ 1610.167303] Node 0 DMA32 free:286096kB min:36200kB low:45248kB high:54296kB active_anon:59440kB inactive_anon:53712kB active_file:128kB inactive_file:3140kB unevictable:0kB writepending:148kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7264kB pagetables:3036kB bounce:0kB free_pcp:412kB local_pcp:248kB free_cma:0kB [ 1610.200999] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1610.209619] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1610.220973] lowmem_reserve[]: 0 0 0 0 0 [ 1610.224981] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1610.250320] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1610.271087] 22142 total pagecache pages [ 1610.273784] lowmem_reserve[]: 0 0 [ 1610.275074] 0 pages in swap cache [ 1610.275081] Swap cache stats: add 0, delete 0, find 0/0 [ 1610.278511] 0 0 0 [ 1610.303140] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1610.310960] Free swap = 0kB [ 1610.331486] lowmem_reserve[]: 0 0 0 0 0 [ 1610.335646] Node 1 Normal free:841372kB min:53696kB low:67120kB high:80544kB active_anon:1644kB inactive_anon:27148kB active_file:4kB inactive_file:4kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:480kB pagetables:100kB bounce:0kB free_pcp:132kB local_pcp:12kB free_cma:0kB [ 1610.370994] lowmem_reserve[]: 0 0 0 0 0 [ 1610.375015] Node 1 Normal free:849244kB min:53696kB low:67120kB high:80544kB active_anon:1644kB inactive_anon:27148kB active_file:4kB inactive_file:4kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:480kB pagetables:100kB bounce:0kB free_pcp:132kB local_pcp:12kB free_cma:0kB [ 1610.380954] Total swap = 0kB [ 1610.406972] lowmem_reserve[]: 0 0 0 0 0 [ 1610.423243] Node 0 DMA: 2*4kB (UE) 28*8kB (UE) 30*16kB (UM) 28*32kB (UME) 21*64kB (UME) 5*128kB (UME) 4*256kB (UME) 2*512kB (UE) 2*1024kB (ME) 2*2048kB (UE) 0*4096kB = 11784kB [ 1610.450957] 2097051 pages RAM [ 1610.454069] 0 pages HighMem/MovableOnly [ 1610.458034] 363849 pages reserved [ 1610.463969] Node 0 DMA32: 78*4kB (UE) 419*8kB (UME) 64*16kB (UME) 302*32kB (UME) 4879*64kB (U) 584*128kB (U) 49*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 413904kB [ 1610.479319] lowmem_reserve[]: 0 0 0 0 0 [ 1610.481312] 0 pages cma reserved [ 1610.490962] Node 0 DMA: 2*4kB (UE) 28*8kB (UE) 30*16kB (UM) 28*32kB (UME) 25*64kB (UME) 5*128kB (UME) 4*256kB (UME) 2*512kB (UE) 2*1024kB (ME) 2*2048kB (UE) 0*4096kB = 12040kB [ 1610.523887] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1610.543325] Node 0 DMA32: 3070*4kB (UME) 3092*8kB (UME) 69*16kB (UME) 691*32kB (UME) 2687*64kB (U) 587*128kB (U) 49*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 319880kB [ 1610.560074] Bluetooth: hci3 command 0x041b tx timeout [ 1610.584120] Node 1 Normal: 5*4kB (UM) 839*8kB (UM) 851*16kB (U) 203*32kB (UM) 8736*64kB (U) 1864*128kB (U) 476*256kB (U) 80*512kB (U) 16*1024kB (U) 0*2048kB 0*4096kB = 1003740kB [ 1610.600308] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1610.620962] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1610.629803] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1610.652315] Node 1 Normal: 590*4kB (UM) 1025*8kB (UM) 852*16kB (U) 203*32kB (UM) 8736*64kB (U) 1864*128kB (U) 476*256kB (U) 80*512kB (U) 16*1024kB (U) 0*2048kB 0*4096kB = 1007584kB [ 1610.682196] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1610.702165] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1610.710740] 22142 total pagecache pages [ 1610.726903] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1610.747690] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1610.757817] 0 pages in swap cache [ 1610.772840] Swap cache stats: add 0, delete 0, find 0/0 [ 1610.778202] Free swap = 0kB [ 1610.782299] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1610.801947] Total swap = 0kB [ 1610.805004] 2097051 pages RAM [ 1610.808104] 0 pages HighMem/MovableOnly [ 1610.822320] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1610.832444] 363849 pages reserved [ 1610.835906] 0 pages cma reserved [ 1610.839269] Out of memory (oom_kill_allocating_task): Kill process 28366 (systemd-journal) score 0 or sacrifice child [ 1610.860951] 22142 total pagecache pages [ 1610.864962] 0 pages in swap cache [ 1610.868407] Swap cache stats: add 0, delete 0, find 0/0 [ 1610.890935] Free swap = 0kB [ 1610.893963] Total swap = 0kB [ 1610.897010] 2097051 pages RAM [ 1610.900120] 0 pages HighMem/MovableOnly [ 1610.904194] Killed process 28366 (systemd-journal) total-vm:46096kB, anon-rss:468kB, file-rss:0kB, shmem-rss:2088kB [ 1610.924642] 363849 pages reserved [ 1610.928199] 0 pages cma reserved [ 1610.945975] syz-executor.0 invoked oom-killer: gfp_mask=0x0(), nodemask=(null), order=0, oom_score_adj=0 [ 1610.991432] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 1610.996574] CPU: 1 PID: 28426 Comm: syz-executor.0 Not tainted 4.14.232-syzkaller #0 [ 1611.004451] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1611.013802] Call Trace: [ 1611.016415] dump_stack+0x1b2/0x281 [ 1611.020034] dump_header+0x178/0x82f [ 1611.023749] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1611.028893] ? ___ratelimit+0x2cd/0x530 [ 1611.032871] oom_kill_process.cold+0x10/0xa40 [ 1611.037374] out_of_memory+0xe3e/0x1190 [ 1611.041353] ? pagefault_out_of_memory+0xaa/0xd0 [ 1611.046107] ? oom_killer_disable+0x1c0/0x1c0 [ 1611.050586] ? mutex_trylock+0x152/0x1a0 [ 1611.054633] ? pagefault_out_of_memory+0xaa/0xd0 [ 1611.059382] pagefault_out_of_memory+0xbb/0xd0 [ 1611.063958] ? out_of_memory+0x1190/0x1190 [ 1611.068189] ? lock_downgrade+0x740/0x740 [ 1611.072326] mm_fault_error+0xad/0x2c0 [ 1611.076207] __do_page_fault+0x93c/0xad0 [ 1611.080246] ? spurious_fault+0x640/0x640 [ 1611.084382] ? do_page_fault+0x60/0x500 [ 1611.088345] ? page_fault+0x2f/0x50 [ 1611.091957] page_fault+0x45/0x50 [ 1611.095395] RIP: 6dc60540: (null) [ 1611.099612] RSP: 6dc610e8:00007ffd6dc60a70 EFLAGS: 7ffd6dc60a70 [ 1611.111151] systemd[1]: systemd-journald.service: Failed with result 'signal'. [ 1611.145671] systemd[1]: systemd-journald.service: Service has no hold-off time, scheduling restart. [ 1611.162418] systemd[1]: Stopped Journal Service. [ 1611.188208] systemd[1]: Starting Journal Service... [ 1611.290913] Mem-Info: [ 1611.293366] active_anon:15252 inactive_anon:20215 isolated_anon:0 [ 1611.293366] active_file:889 inactive_file:2285 isolated_file:0 [ 1611.293366] unevictable:0 dirty:42 writeback:0 unstable:0 [ 1611.293366] slab_reclaimable:12892 slab_unreclaimable:124042 [ 1611.293366] mapped:54163 shmem:21269 pagetables:795 bounce:0 [ 1611.293366] free:99962 free_pcp:296 free_cma:0 [ 1611.362605] systemd-journald[28458]: File /run/log/journal/04d8c135ee6b410280ba31a58c89679d/system.journal corrupted or uncleanly shut down, renaming and replacing. [ 1611.390974] Node 0 active_anon:58864kB inactive_anon:53712kB active_file:2648kB inactive_file:6440kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:211320kB dirty:164kB writeback:0kB shmem:57784kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1611.473890] Node 1 active_anon:2144kB inactive_anon:35248kB active_file:1008kB inactive_file:2900kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:6732kB dirty:4kB writeback:0kB shmem:35392kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1611.530883] Node 0 DMA free:11108kB min:204kB low:252kB high:300kB active_anon:12kB inactive_anon:0kB active_file:152kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1611.623755] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1611.628810] Node 0 DMA32 free:31328kB min:36200kB low:45248kB high:54296kB active_anon:58852kB inactive_anon:53712kB active_file:816kB inactive_file:828kB unevictable:0kB writepending:164kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7200kB pagetables:2932kB bounce:0kB free_pcp:848kB local_pcp:136kB free_cma:0kB [ 1611.677919] lowmem_reserve[]: 0 0 0 0 0 [ 1611.691379] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1611.730158] lowmem_reserve[]: 0 0 0 0 0 [ 1611.736426] Node 1 Normal free:26772kB min:53696kB low:67120kB high:80544kB active_anon:2144kB inactive_anon:35248kB active_file:592kB inactive_file:504kB unevictable:0kB writepending:4kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:512kB pagetables:248kB bounce:0kB free_pcp:120kB local_pcp:0kB free_cma:0kB [ 1611.768067] lowmem_reserve[]: 0 0 0 0 0 [ 1611.772123] Node 0 DMA: 5*4kB (UME) 6*8kB (UME) 28*16kB (UM) 31*32kB (UME) 10*64kB (UME) 5*128kB (UME) 4*256kB (UME) 2*512kB (UE) 2*1024kB (ME) 2*2048kB (UE) 0*4096kB = 10980kB [ 1611.790209] Node 0 DMA32: 899*4kB (UME) 456*8kB (ME) 65*16kB (UME) 319*32kB (UME) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18492kB [ 1611.807053] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1611.810940] syz-executor.2: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1611.817794] Node 1 Normal: 33*4kB (UM) 22*8kB (UM) 25*16kB (UM) 18*32kB (UM) 11*64kB (UM) 9*128kB (UM) 2*256kB (UM) 38*512kB (UM) 4*1024kB (U) 0*2048kB 0*4096kB = 27204kB [ 1611.838738] syz-executor.2 cpuset= [ 1611.849245] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1611.849251] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1611.849256] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1611.849260] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1611.849263] 23381 total pagecache pages [ 1611.849271] 0 pages in swap cache [ 1611.849276] Swap cache stats: add 0, delete 0, find 0/0 [ 1611.849281] Free swap = 0kB [ 1611.860863] / [ 1611.865300] Total swap = 0kB [ 1611.870219] mems_allowed=0-1 [ 1611.879055] 2097051 pages RAM [ 1611.879059] 0 pages HighMem/MovableOnly [ 1611.879062] 363849 pages reserved [ 1611.879065] 0 pages cma reserved [ 1611.879072] Out of memory (oom_kill_allocating_task): Kill process 28426 (syz-executor.0) score 0 or sacrifice child [ 1611.879090] Killed process 28426 (syz-executor.0) total-vm:93120kB, anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1611.890616] systemd-journal invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask= [ 1611.895017] CPU: 0 PID: 28383 Comm: syz-executor.2 Not tainted 4.14.232-syzkaller #0 [ 1611.898302] (null) [ 1611.900476] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1611.975050] Call Trace: [ 1611.977627] dump_stack+0x1b2/0x281 [ 1611.981235] warn_alloc.cold+0x96/0x1cc [ 1611.985189] ? zone_watermark_ok_safe+0x220/0x220 [ 1611.990008] ? usleep_range+0x130/0x130 [ 1611.993960] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1611.999040] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1612.004035] ? run_timer_softirq+0x5a0/0x5a0 [ 1612.008426] __alloc_pages_nodemask+0x2127/0x2720 [ 1612.013249] ? lock_acquire+0x170/0x3f0 [ 1612.017203] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1612.022024] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1612.026500] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1612.031928] ? check_preemption_disabled+0x35/0x240 [ 1612.036927] alloc_pages_current+0x155/0x260 [ 1612.041314] ion_page_pool_alloc+0x118/0x1b0 [ 1612.045717] ion_system_heap_allocate+0x133/0x8c0 [ 1612.050551] ? _raw_spin_unlock+0x29/0x40 [ 1612.054677] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1612.059582] ? ion_system_contig_heap_create+0x130/0x130 [ 1612.065032] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1612.070023] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1612.074841] ion_alloc+0x27a/0x810 [ 1612.078378] ? ion_dma_buf_release+0x40/0x40 [ 1612.082787] ? __might_fault+0x177/0x1b0 [ 1612.086836] ion_ioctl+0xea/0x1f0 [ 1612.090264] ? ion_query_heaps+0x360/0x360 [ 1612.094477] ? ion_query_heaps+0x360/0x360 [ 1612.098688] do_vfs_ioctl+0x75a/0xff0 [ 1612.102468] ? ioctl_preallocate+0x1a0/0x1a0 [ 1612.106851] ? lock_downgrade+0x740/0x740 [ 1612.110980] ? __fget+0x225/0x360 [ 1612.114415] ? do_vfs_ioctl+0xff0/0xff0 [ 1612.118367] ? security_file_ioctl+0x83/0xb0 [ 1612.122753] SyS_ioctl+0x7f/0xb0 [ 1612.126094] ? do_vfs_ioctl+0xff0/0xff0 [ 1612.130045] do_syscall_64+0x1d5/0x640 [ 1612.133912] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1612.139076] RIP: 0033:0x4665f9 [ 1612.142244] RSP: 002b:00007f66397b6188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1612.149929] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1612.157176] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1612.164423] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1612.171668] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1612.178911] R13: 00007fff59ca014f R14: 00007f66397b6300 R15: 0000000000022000 [ 1612.190979] warn_alloc_show_mem: 2 callbacks suppressed [ 1612.190982] Mem-Info: [ 1612.191459] , order=0, oom_score_adj=0 [ 1612.196443] active_anon:15294 inactive_anon:22246 isolated_anon:0 [ 1612.196443] active_file:17 inactive_file:17 isolated_file:0 [ 1612.196443] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1612.196443] slab_reclaimable:12883 slab_unreclaimable:124002 [ 1612.196443] mapped:52531 shmem:23317 pagetables:756 bounce:0 [ 1612.196443] free:14169 free_pcp:12 free_cma:0 [ 1612.198826] systemd-journal cpuset= [ 1612.206822] Node 0 active_anon:58892kB inactive_anon:53644kB active_file:40kB inactive_file:40kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:204704kB dirty:0kB writeback:0kB shmem:57784kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1612.239216] / [ 1612.245118] Node 1 active_anon:2284kB inactive_anon:35340kB active_file:28kB inactive_file:28kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:5420kB dirty:0kB writeback:0kB shmem:35484kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1612.270314] mems_allowed=0-1 [ 1612.302680] CPU: 1 PID: 28458 Comm: systemd-journal Not tainted 4.14.232-syzkaller #0 [ 1612.303629] Node 0 [ 1612.310636] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1612.310653] DMA free:10980kB min:204kB low:252kB high:300kB active_anon:12kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1612.312848] Call Trace: [ 1612.312865] dump_stack+0x1b2/0x281 [ 1612.312876] dump_header+0x178/0x82f [ 1612.322212] lowmem_reserve[]: [ 1612.347778] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1612.347787] ? ___ratelimit+0x2cd/0x530 [ 1612.347797] oom_kill_process.cold+0x10/0xa40 [ 1612.350457] 0 [ 1612.354292] out_of_memory+0xe3e/0x1190 [ 1612.354305] ? oom_killer_disable+0x1c0/0x1c0 [ 1612.357984] 2717 [ 1612.361068] ? mutex_trylock+0x152/0x1a0 [ 1612.361082] __alloc_pages_nodemask+0x23e1/0x2720 [ 1612.366152] 2718 [ 1612.370111] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1612.374581] 2718 [ 1612.376361] alloc_pages_current+0x155/0x260 [ 1612.380292] 2718 [ 1612.384765] filemap_fault+0x11a1/0x1ad0 [ 1612.384783] ext4_filemap_fault+0x84/0xb0 [ 1612.390851] __do_fault+0xfa/0x380 [ 1612.390860] __handle_mm_fault+0x2497/0x4620 [ 1612.390870] ? vm_insert_page+0x7c0/0x7c0 [ 1612.395679] Node 0 [ 1612.397732] ? lock_downgrade+0x740/0x740 [ 1612.402574] DMA32 free:18492kB min:36200kB low:45248kB high:54296kB active_anon:58880kB inactive_anon:53644kB active_file:40kB inactive_file:40kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7200kB pagetables:2832kB bounce:0kB free_pcp:156kB local_pcp:0kB free_cma:0kB [ 1612.404594] ? mark_held_locks+0xa6/0xf0 [ 1612.408964] lowmem_reserve[]: [ 1612.411009] handle_mm_fault+0x455/0x9c0 [ 1612.411019] __do_page_fault+0x549/0xad0 [ 1612.411031] ? spurious_fault+0x640/0x640 [ 1612.415065] 0 [ 1612.419189] ? do_page_fault+0x60/0x500 [ 1612.422711] 0 [ 1612.427085] ? page_fault+0x2f/0x50 [ 1612.431213] 0 [ 1612.433416] page_fault+0x45/0x50 [ 1612.437531] 0 [ 1612.465608] RIP: 0001:0x7ffc839a3174 [ 1612.465612] RSP: 2ad851e0:00007ffc839a3340 EFLAGS: 55642ad85680 [ 1612.469652] Mem-Info: [ 1612.469677] 0 [ 1612.479087] active_anon:15294 inactive_anon:22246 isolated_anon:0 [ 1612.479087] active_file:17 inactive_file:17 isolated_file:0 [ 1612.479087] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1612.479087] slab_reclaimable:12883 slab_unreclaimable:124002 [ 1612.479087] mapped:52531 shmem:23317 pagetables:756 bounce:0 [ 1612.479087] free:14169 free_pcp:39 free_cma:0 [ 1612.498234] Node 0 active_anon:58892kB inactive_anon:53644kB active_file:40kB inactive_file:40kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:204704kB dirty:0kB writeback:0kB shmem:57784kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1612.499228] Node 0 [ 1612.510296] Node 1 active_anon:2284kB inactive_anon:35340kB active_file:28kB inactive_file:28kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:5420kB dirty:0kB writeback:0kB shmem:35484kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1612.522923] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1612.563438] Node 0 [ 1612.588614] lowmem_reserve[]: [ 1612.613994] DMA free:10980kB min:204kB low:252kB high:300kB active_anon:12kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1612.649579] 0 [ 1612.670675] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1612.677537] Node 0 DMA32 free:18492kB min:36200kB low:45248kB high:54296kB active_anon:58880kB inactive_anon:53644kB active_file:40kB inactive_file:40kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7200kB pagetables:2832kB bounce:0kB free_pcp:156kB local_pcp:156kB free_cma:0kB [ 1612.681835] 0 0 0 0 [ 1612.725026] lowmem_reserve[]: 0 0 0 0 0 [ 1612.728086] Node 1 [ 1612.729132] Node 0 [ 1612.729145] Normal free:27204kB min:53696kB low:67120kB high:80544kB active_anon:2284kB inactive_anon:35340kB active_file:28kB inactive_file:28kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:512kB pagetables:192kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1612.729149] lowmem_reserve[]: [ 1612.755933] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1612.781606] 0 0 0 0 0 [ 1612.804363] Node 0 DMA: 5*4kB (UME) 6*8kB (UME) 28*16kB (UM) 31*32kB (UME) 10*64kB (UME) 5*128kB (UME) 4*256kB (UME) 2*512kB (UE) 2*1024kB (ME) 2*2048kB (UE) 0*4096kB = 10980kB [ 1612.828351] Node 0 DMA32: 899*4kB (UME) 458*8kB (UME) 66*16kB (UME) 320*32kB (UME) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18556kB [ 1612.858463] lowmem_reserve[]: 0 0 0 0 0 [ 1612.863514] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1612.868275] Node 1 [ 1612.886480] Node 1 Normal: 33*4kB (UM) 22*8kB (UM) 25*16kB (UM) 18*32kB (UM) 11*64kB (UM) 9*128kB (UM) 2*256kB (UM) 38*512kB (UM) 4*1024kB (U) 0*2048kB 0*4096kB = 27204kB [ 1612.890256] Normal free:27204kB min:53696kB low:67120kB high:80544kB active_anon:2284kB inactive_anon:35340kB active_file:28kB inactive_file:28kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:512kB pagetables:192kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1612.914284] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1612.937358] lowmem_reserve[]: 0 0 0 0 0 [ 1612.945015] Node 0 DMA: 5*4kB (UME) 6*8kB (UME) 28*16kB (UM) 31*32kB (UME) 10*64kB (UME) 5*128kB (UME) 4*256kB (UME) 2*512kB (UE) 2*1024kB (ME) 2*2048kB (UE) 0*4096kB = 10980kB [ 1612.959464] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1612.969635] Node 0 DMA32: 899*4kB (UME) 458*8kB (UME) 66*16kB (UME) 320*32kB (UME) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18556kB [ 1612.989717] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1613.013173] Node 1 Normal: 33*4kB (UM) 22*8kB (UM) 25*16kB (UM) 18*32kB (UM) 11*64kB (UM) 9*128kB (UM) 2*256kB (UM) 38*512kB (UM) 4*1024kB (U) 0*2048kB 0*4096kB = 27204kB [ 1613.014567] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1613.039156] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1613.050105] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1613.052112] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1613.069244] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1613.095083] 23351 total pagecache pages [ 1613.095962] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1613.099060] 0 pages in swap cache [ 1613.125795] 23351 total pagecache pages [ 1613.126894] Swap cache stats: add 0, delete 0, find 0/0 [ 1613.129770] 0 pages in swap cache [ 1613.148831] Free swap = 0kB [ 1613.155093] Swap cache stats: add 0, delete 0, find 0/0 [ 1613.157688] Total swap = 0kB [ 1613.160446] Free swap = 0kB [ 1613.177035] 2097051 pages RAM [ 1613.180138] 0 pages HighMem/MovableOnly [ 1613.180482] Total swap = 0kB [ 1613.205112] 2097051 pages RAM [ 1613.205260] 363849 pages reserved [ 1613.208215] 0 pages HighMem/MovableOnly [ 1613.218931] 0 pages cma reserved [ 1613.248107] 363849 pages reserved [ 1613.257539] 0 pages cma reserved [ 1613.267973] Out of memory (oom_kill_allocating_task): Kill process 28458 (systemd-journal) score 0 or sacrifice child [ 1613.298180] Killed process 28458 (systemd-journal) total-vm:46096kB, anon-rss:452kB, file-rss:0kB, shmem-rss:1048kB [ 1613.365528] oom_reaper: reaped process 28458 (systemd-journal), now anon-rss:0kB, file-rss:0kB, shmem-rss:1048kB [ 1613.413060] systemd[1]: Starting Load/Save RF Kill Switch Status... [ 1613.450265] systemd[1]: systemd-journald.service: Main process exited, code=killed, status=9/KILL [ 1613.504623] systemd[1]: Failed to start Journal Service. [ 1613.520411] systemd[1]: systemd-journald.service: Unit entered failed state. [ 1613.564160] systemd[1]: systemd-journald.service: Failed with result 'signal'. [ 1613.572482] systemd[1]: Started Load/Save RF Kill Switch Status. [ 1613.793088] systemd-journald[28472]: File /run/log/journal/04d8c135ee6b410280ba31a58c89679d/system.journal corrupted or uncleanly shut down, renaming and replacing. [ 1615.453089] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1615.459833] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1615.470904] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1615.477603] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1615.488460] device bridge_slave_1 left promiscuous mode [ 1615.494308] bridge0: port 2(bridge_slave_1) entered disabled state [ 1615.504932] device bridge_slave_0 left promiscuous mode [ 1615.510427] bridge0: port 1(bridge_slave_0) entered disabled state [ 1615.519770] device veth1_macvtap left promiscuous mode [ 1615.528100] device veth0_macvtap left promiscuous mode [ 1615.533574] device veth1_vlan left promiscuous mode [ 1615.538645] device veth0_vlan left promiscuous mode [ 1615.654149] device hsr_slave_1 left promiscuous mode [ 1615.667224] device hsr_slave_0 left promiscuous mode [ 1615.686109] team0 (unregistering): Port device team_slave_1 removed [ 1615.696219] team0 (unregistering): Port device team_slave_0 removed [ 1615.709901] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 1615.720354] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 1615.759828] bond0 (unregistering): Released all slaves [ 1616.547065] IPVS: ftp: loaded support on port[0] = 21 [ 1616.693734] chnl_net:caif_netlink_parms(): no params data found [ 1616.800324] bridge0: port 1(bridge_slave_0) entered blocking state [ 1616.810805] bridge0: port 1(bridge_slave_0) entered disabled state [ 1616.817999] device bridge_slave_0 entered promiscuous mode [ 1616.828704] bridge0: port 2(bridge_slave_1) entered blocking state [ 1616.835339] bridge0: port 2(bridge_slave_1) entered disabled state [ 1616.845836] device bridge_slave_1 entered promiscuous mode [ 1616.872879] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 1616.885355] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1616.912421] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 1616.919662] team0: Port device team_slave_0 added [ 1616.928429] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 1616.935741] team0: Port device team_slave_1 added [ 1616.954723] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1616.961138] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1616.986475] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1616.997304] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1617.003886] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1617.029092] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1617.040116] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 1617.047585] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 1617.067813] device hsr_slave_0 entered promiscuous mode [ 1617.073437] device hsr_slave_1 entered promiscuous mode [ 1617.079822] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 1617.086858] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 1617.150441] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 1617.177914] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1617.185514] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 1617.195227] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 1617.201938] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1617.208763] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1617.217864] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 1617.224215] 8021q: adding VLAN 0 to HW filter on device team0 [ 1617.232814] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 1617.239855] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1617.248181] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1617.255870] bridge0: port 1(bridge_slave_0) entered blocking state [ 1617.262266] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1617.269530] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1617.277966] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 1617.285131] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1617.292951] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1617.300436] bridge0: port 2(bridge_slave_1) entered blocking state [ 1617.306799] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1617.315049] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 1617.322710] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1617.332078] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 1617.338872] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1617.349900] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 1617.356817] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1617.364428] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1617.372623] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1617.380894] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 1617.387683] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1617.395405] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1617.405251] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 1617.412642] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1617.420012] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1617.429315] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 1617.436262] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1617.443870] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1617.453848] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 1617.459924] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1617.472000] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 1617.479041] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 1617.485731] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1617.492673] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1617.502529] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1617.551623] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 1617.560713] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1617.592673] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 1617.599542] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 1617.606183] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 1617.615737] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1617.623601] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1617.630345] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1617.638859] device veth0_vlan entered promiscuous mode [ 1617.647654] device veth1_vlan entered promiscuous mode [ 1617.653810] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 1617.662108] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 1617.673386] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 1617.682293] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1617.689401] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1617.697029] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1617.705946] device veth0_macvtap entered promiscuous mode [ 1617.712849] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 1617.720707] device veth1_macvtap entered promiscuous mode [ 1617.728759] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 1617.737652] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 1617.746048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1617.756190] Bluetooth: hci5 command 0x0406 tx timeout [ 1617.761626] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1617.770771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1617.780679] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1617.789765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1617.799720] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1617.808901] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1617.818635] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1617.828439] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 1617.835686] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1617.843054] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1617.851153] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1617.858696] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1617.868411] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1617.878263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1617.887462] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1617.897214] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1617.906374] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1617.916352] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1617.925689] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1617.935437] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1617.945241] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 1617.952252] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1617.959226] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1617.967147] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1617.990883] Bluetooth: hci2 command 0x0409 tx timeout 22:10:54 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) sendmsg$unix(r1, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x80000000, 0x6}) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) 22:10:54 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) sendmsg$unix(r1, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x80000000, 0x6}) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000280)=ANY=[@ANYBLOB="40000000d05dfd0cf6aadfcd1c2c8204548f7ad25fb20c9fc1b948acee1bf738a8e2f89ba8ad644647776e1929696b34254e5dffa31fab7db2587004efe13e6e76fca3797168ba0ca323227067252996e8b160c2bec95a5f9f90491af03c1f501e1720021bfe4f682947ba1614a12e86a754", @ANYRES16=0x0, @ANYBLOB="000328bd7000ffdbdf2502000000080011000000000006000200010000000c0010000000000001000000050014001f00000008000b0000000000"], 0x40}, 0x1, 0x0, 0x0, 0xc000}, 0x8000) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) 22:10:54 executing program 4: r0 = socket$unix(0x1, 0x2, 0x0) sendmsg$unix(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000000)={0x80000000, 0x6}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000280)=ANY=[@ANYBLOB="40000000d05dfd0cf6aadfcd1c2c8204548f7ad25fb20c9fc1b948acee1bf738a8e2f89ba8ad644647776e1929696b34254e5dffa31fab7db2587004efe13e6e76fca3797168ba0ca323227067252996e8b160c2bec95a5f9f90491af03c1f501e1720021bfe4f682947ba1614a12e86a754", @ANYRES16=0x0, @ANYBLOB="000328bd7000ffdbdf2502000000080011000000000006000200010000000c0010000000000001000000050014001f00000008000b0000000000"], 0x40}, 0x1, 0x0, 0x0, 0xc000}, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) 22:10:54 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) sendmsg$unix(r1, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x80000000, 0x6}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) 22:10:54 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$unix(0x1, 0x2, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x80000000, 0x6}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000280)=ANY=[@ANYBLOB="40000000d05dfd0cf6aadfcd1c2c8204548f7ad25fb20c9fc1b948acee1bf738a8e2f89ba8ad644647776e1929696b34254e5dffa31fab7db2587004efe13e6e76fca3797168ba0ca323227067252996e8b160c2bec95a5f9f90491af03c1f501e1720021bfe4f682947ba1614a12e86a754", @ANYRES16=0x0, @ANYBLOB="000328bd7000ffdbdf2502000000080011000000000006000200010000000c0010000000000001000000050014001f00000008000b0000000000"], 0x40}, 0x1, 0x0, 0x0, 0xc000}, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) 22:10:54 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x80000000, 0x6}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000280)=ANY=[@ANYBLOB="40000000d05dfd0cf6aadfcd1c2c8204548f7ad25fb20c9fc1b948acee1bf738a8e2f89ba8ad644647776e1929696b34254e5dffa31fab7db2587004efe13e6e76fca3797168ba0ca323227067252996e8b160c2bec95a5f9f90491af03c1f501e1720021bfe4f682947ba1614a12e86a754", @ANYRES16=0x0, @ANYBLOB="000328bd7000ffdbdf2502000000080011000000000006000200010000000c0010000000000001000000050014001f00000008000b0000000000"], 0x40}, 0x1, 0x0, 0x0, 0xc000}, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) 22:10:54 executing program 4: r0 = socket$unix(0x1, 0x2, 0x0) sendmsg$unix(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000000)={0x80000000, 0x6}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000280)=ANY=[@ANYBLOB="40000000d05dfd0cf6aadfcd1c2c8204548f7ad25fb20c9fc1b948acee1bf738a8e2f89ba8ad644647776e1929696b34254e5dffa31fab7db2587004efe13e6e76fca3797168ba0ca323227067252996e8b160c2bec95a5f9f90491af03c1f501e1720021bfe4f682947ba1614a12e86a754", @ANYRES16=0x0, @ANYBLOB="000328bd7000ffdbdf2502000000080011000000000006000200010000000c0010000000000001000000050014001f00000008000b0000000000"], 0x40}, 0x1, 0x0, 0x0, 0xc000}, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) 22:10:54 executing program 4: r0 = socket$unix(0x1, 0x2, 0x0) sendmsg$unix(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000000)={0x80000000, 0x6}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000280)=ANY=[@ANYBLOB="40000000d05dfd0cf6aadfcd1c2c8204548f7ad25fb20c9fc1b948acee1bf738a8e2f89ba8ad644647776e1929696b34254e5dffa31fab7db2587004efe13e6e76fca3797168ba0ca323227067252996e8b160c2bec95a5f9f90491af03c1f501e1720021bfe4f682947ba1614a12e86a754", @ANYRES16=0x0, @ANYBLOB="000328bd7000ffdbdf2502000000080011000000000006000200010000000c0010000000000001000000050014001f00000008000b0000000000"], 0x40}, 0x1, 0x0, 0x0, 0xc000}, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) 22:10:54 executing program 4: r0 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) sendmsg$unix(r1, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x80000000, 0x6}) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_DELETE(r2, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000280)=ANY=[@ANYBLOB="40000000d05dfd0cf6aadfcd1c2c8204548f7ad25fb20c9fc1b948acee1bf738a8e2f89ba8ad644647776e1929696b34254e5dffa31fab7db2587004efe13e6e76fca3797168ba0ca323227067252996e8b160c2bec95a5f9f90491af03c1f501e1720021bfe4f682947ba1614a12e86a754", @ANYRES16=0x0, @ANYBLOB="000328bd7000ffdbdf2502000000080011000000000006000200010000000c0010000000000001000000050014001f00000008000b0000000000"], 0x40}, 0x1, 0x0, 0x0, 0xc000}, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) 22:10:54 executing program 4: r0 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) sendmsg$unix(r1, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x80000000, 0x6}) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_DELETE(r2, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000280)=ANY=[@ANYBLOB="40000000d05dfd0cf6aadfcd1c2c8204548f7ad25fb20c9fc1b948acee1bf738a8e2f89ba8ad644647776e1929696b34254e5dffa31fab7db2587004efe13e6e76fca3797168ba0ca323227067252996e8b160c2bec95a5f9f90491af03c1f501e1720021bfe4f682947ba1614a12e86a754", @ANYRES16=0x0, @ANYBLOB="000328bd7000ffdbdf2502000000080011000000000006000200010000000c0010000000000001000000050014001f00000008000b0000000000"], 0x40}, 0x1, 0x0, 0x0, 0xc000}, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) 22:10:55 executing program 4: r0 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) sendmsg$unix(r1, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x80000000, 0x6}) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_DELETE(r2, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000280)=ANY=[@ANYBLOB="40000000d05dfd0cf6aadfcd1c2c8204548f7ad25fb20c9fc1b948acee1bf738a8e2f89ba8ad644647776e1929696b34254e5dffa31fab7db2587004efe13e6e76fca3797168ba0ca323227067252996e8b160c2bec95a5f9f90491af03c1f501e1720021bfe4f682947ba1614a12e86a754", @ANYRES16=0x0, @ANYBLOB="000328bd7000ffdbdf2502000000080011000000000006000200010000000c0010000000000001000000050014001f00000008000b0000000000"], 0x40}, 0x1, 0x0, 0x0, 0xc000}, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) 22:10:55 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = socket$unix(0x1, 0x0, 0x0) sendmsg$unix(r1, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x80000000, 0x6}) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_DELETE(r2, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000280)=ANY=[@ANYBLOB="40000000d05dfd0cf6aadfcd1c2c8204548f7ad25fb20c9fc1b948acee1bf738a8e2f89ba8ad644647776e1929696b34254e5dffa31fab7db2587004efe13e6e76fca3797168ba0ca323227067252996e8b160c2bec95a5f9f90491af03c1f501e1720021bfe4f682947ba1614a12e86a754", @ANYRES16=0x0, @ANYBLOB="000328bd7000ffdbdf2502000000080011000000000006000200010000000c0010000000000001000000050014001f00000008000b0000000000"], 0x40}, 0x1, 0x0, 0x0, 0xc000}, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) [ 1618.994156] syz-executor.2: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1619.035185] syz-executor.0: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1619.045905] syz-executor.4: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1619.056082] syz-executor.5: [ 1619.073785] syz-executor.2 cpuset= [ 1619.075583] syz-executor.0 cpuset= [ 1619.083439] / [ 1619.083804] page allocation failure: order:4 [ 1619.098170] mems_allowed=0-1 [ 1619.101276] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1619.104533] syz-executor.4 cpuset= [ 1619.105760] / [ 1619.112937] CPU: 0 PID: 28728 Comm: syz-executor.2 Not tainted 4.14.232-syzkaller #0 [ 1619.123607] (null) [ 1619.125895] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1619.125899] Call Trace: [ 1619.125917] dump_stack+0x1b2/0x281 [ 1619.125930] warn_alloc.cold+0x96/0x1cc [ 1619.134471] syz-executor.5 cpuset= [ 1619.137398] ? zone_watermark_ok_safe+0x220/0x220 [ 1619.137421] __alloc_pages_nodemask+0x2127/0x2720 [ 1619.147548] / [ 1619.147592] ? lock_acquire+0x170/0x3f0 [ 1619.156938] mems_allowed=0-1 [ 1619.157062] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1619.163052] mems_allowed=0-1 [ 1619.163580] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1619.183925] ? __mutex_unlock_slowpath+0x75/0x770 [ 1619.188763] alloc_pages_current+0x155/0x260 [ 1619.193171] ion_page_pool_alloc+0x118/0x1b0 [ 1619.197571] ion_system_heap_allocate+0x133/0x8c0 [ 1619.202395] ? ion_alloc+0x187/0x810 [ 1619.206091] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1619.211545] ? ion_system_contig_heap_create+0x130/0x130 [ 1619.216986] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1619.221997] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1619.226828] ion_alloc+0x204/0x810 [ 1619.230352] ? ion_dma_buf_release+0x40/0x40 [ 1619.234748] ? __might_fault+0x177/0x1b0 [ 1619.238789] ion_ioctl+0xea/0x1f0 [ 1619.242229] ? ion_query_heaps+0x360/0x360 [ 1619.246457] ? ion_query_heaps+0x360/0x360 [ 1619.250674] do_vfs_ioctl+0x75a/0xff0 [ 1619.254458] ? ioctl_preallocate+0x1a0/0x1a0 [ 1619.258843] ? lock_downgrade+0x740/0x740 [ 1619.263097] ? __fget+0x225/0x360 [ 1619.266527] ? do_vfs_ioctl+0xff0/0xff0 [ 1619.270487] ? security_file_ioctl+0x83/0xb0 [ 1619.274891] SyS_ioctl+0x7f/0xb0 [ 1619.278246] ? do_vfs_ioctl+0xff0/0xff0 [ 1619.280636] / [ 1619.282221] do_syscall_64+0x1d5/0x640 [ 1619.287711] mems_allowed=0-1 [ 1619.287807] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1619.287816] RIP: 0033:0x4665f9 [ 1619.299236] RSP: 002b:00007f66397b6188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1619.306929] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1619.314184] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1619.321436] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1619.328685] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1619.335937] R13: 00007fff59ca014f R14: 00007f66397b6300 R15: 0000000000022000 [ 1619.343200] CPU: 1 PID: 28750 Comm: syz-executor.4 Not tainted 4.14.232-syzkaller #0 [ 1619.351076] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1619.360419] Call Trace: [ 1619.362998] dump_stack+0x1b2/0x281 [ 1619.366622] warn_alloc.cold+0x96/0x1cc [ 1619.370608] ? zone_watermark_ok_safe+0x220/0x220 [ 1619.375460] __alloc_pages_nodemask+0x2127/0x2720 [ 1619.380311] ? lock_acquire+0x170/0x3f0 [ 1619.384293] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1619.389142] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1619.394594] ? __mutex_unlock_slowpath+0x75/0x770 [ 1619.399436] alloc_pages_current+0x155/0x260 [ 1619.403837] ion_page_pool_alloc+0x118/0x1b0 [ 1619.408236] ion_system_heap_allocate+0x133/0x8c0 [ 1619.413071] ? ion_alloc+0x187/0x810 [ 1619.416779] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1619.422225] ? ion_system_contig_heap_create+0x130/0x130 [ 1619.427674] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1619.432684] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1619.437521] ion_alloc+0x204/0x810 [ 1619.441060] ? ion_dma_buf_release+0x40/0x40 [ 1619.445463] ? __might_fault+0x177/0x1b0 [ 1619.449521] ion_ioctl+0xea/0x1f0 [ 1619.452964] ? ion_query_heaps+0x360/0x360 [ 1619.457190] ? ion_query_heaps+0x360/0x360 [ 1619.461418] do_vfs_ioctl+0x75a/0xff0 [ 1619.465211] ? ioctl_preallocate+0x1a0/0x1a0 [ 1619.469609] ? lock_downgrade+0x740/0x740 [ 1619.473753] ? __fget+0x225/0x360 [ 1619.477202] ? do_vfs_ioctl+0xff0/0xff0 [ 1619.481167] ? security_file_ioctl+0x83/0xb0 [ 1619.485567] SyS_ioctl+0x7f/0xb0 [ 1619.488948] ? do_vfs_ioctl+0xff0/0xff0 [ 1619.492928] do_syscall_64+0x1d5/0x640 [ 1619.496812] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1619.501993] RIP: 0033:0x4665f9 [ 1619.505174] RSP: 002b:00007fbffd9c3188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1619.512870] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1619.520129] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1619.527390] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1619.534649] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1619.541930] R13: 00007fff1427db3f R14: 00007fbffd9c3300 R15: 0000000000022000 [ 1619.552281] CPU: 1 PID: 28726 Comm: syz-executor.0 Not tainted 4.14.232-syzkaller #0 [ 1619.560167] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1619.569519] Call Trace: [ 1619.572110] dump_stack+0x1b2/0x281 [ 1619.575753] warn_alloc.cold+0x96/0x1cc [ 1619.579726] ? zone_watermark_ok_safe+0x220/0x220 [ 1619.587455] __alloc_pages_nodemask+0x2127/0x2720 [ 1619.592310] ? lock_acquire+0x170/0x3f0 [ 1619.596284] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1619.601129] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1619.606580] ? __mutex_unlock_slowpath+0x75/0x770 [ 1619.611428] ? __sanitizer_cov_trace_pc+0x28/0x50 [ 1619.616278] alloc_pages_current+0x155/0x260 [ 1619.620683] ion_page_pool_alloc+0x118/0x1b0 [ 1619.625095] ion_system_heap_allocate+0x133/0x8c0 [ 1619.629941] ? ion_alloc+0x187/0x810 [ 1619.633650] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1619.639107] ? ion_system_contig_heap_create+0x130/0x130 [ 1619.644555] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1619.649567] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1619.654403] ion_alloc+0x204/0x810 [ 1619.657942] ? ion_dma_buf_release+0x40/0x40 [ 1619.662360] ? __might_fault+0x177/0x1b0 [ 1619.666426] ion_ioctl+0xea/0x1f0 [ 1619.669879] ? ion_query_heaps+0x360/0x360 [ 1619.674110] ? ion_query_heaps+0x360/0x360 [ 1619.678339] do_vfs_ioctl+0x75a/0xff0 [ 1619.682142] ? ioctl_preallocate+0x1a0/0x1a0 [ 1619.686561] ? lock_downgrade+0x740/0x740 [ 1619.690720] ? __fget+0x225/0x360 [ 1619.694176] ? do_vfs_ioctl+0xff0/0xff0 [ 1619.698142] ? security_file_ioctl+0x83/0xb0 [ 1619.702639] SyS_ioctl+0x7f/0xb0 [ 1619.706004] ? do_vfs_ioctl+0xff0/0xff0 [ 1619.709983] do_syscall_64+0x1d5/0x640 [ 1619.713868] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1619.719061] RIP: 0033:0x4665f9 [ 1619.722248] RSP: 002b:00007fc8c6af5188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1619.729954] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1619.737215] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1619.744475] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1619.751747] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1619.759011] R13: 00007ffdd42e705f R14: 00007fc8c6af5300 R15: 0000000000022000 [ 1619.769547] CPU: 1 PID: 28736 Comm: syz-executor.5 Not tainted 4.14.232-syzkaller #0 [ 1619.777441] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1619.786786] Call Trace: [ 1619.789370] dump_stack+0x1b2/0x281 [ 1619.792997] warn_alloc.cold+0x96/0x1cc [ 1619.796968] ? zone_watermark_ok_safe+0x220/0x220 [ 1619.801880] __alloc_pages_nodemask+0x2127/0x2720 [ 1619.806718] ? __schedule+0x893/0x1de0 [ 1619.810607] ? lock_acquire+0x170/0x3f0 [ 1619.814590] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1619.819435] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1619.824890] ? __mutex_unlock_slowpath+0x75/0x770 [ 1619.829737] alloc_pages_current+0x155/0x260 [ 1619.834279] ion_page_pool_alloc+0x118/0x1b0 [ 1619.838694] ion_system_heap_allocate+0x133/0x8c0 [ 1619.843543] ? ion_alloc+0x187/0x810 [ 1619.847251] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1619.852696] ? ion_system_contig_heap_create+0x130/0x130 [ 1619.858150] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1619.863167] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1619.868009] ion_alloc+0x204/0x810 [ 1619.871552] ? ion_dma_buf_release+0x40/0x40 [ 1619.876085] ? __might_fault+0x177/0x1b0 [ 1619.880147] ion_ioctl+0xea/0x1f0 [ 1619.883605] ? ion_query_heaps+0x360/0x360 [ 1619.886094] Mem-Info: [ 1619.887834] ? ion_query_heaps+0x360/0x360 [ 1619.887846] do_vfs_ioctl+0x75a/0xff0 [ 1619.887858] ? ioctl_preallocate+0x1a0/0x1a0 [ 1619.887867] ? lock_downgrade+0x740/0x740 [ 1619.887880] ? __fget+0x225/0x360 [ 1619.910244] ? do_vfs_ioctl+0xff0/0xff0 [ 1619.910614] active_anon:15785 inactive_anon:24276 isolated_anon:36 [ 1619.910614] active_file:2122 inactive_file:5228 isolated_file:21 [ 1619.910614] unevictable:0 dirty:94 writeback:0 unstable:0 [ 1619.910614] slab_reclaimable:12801 slab_unreclaimable:123202 [ 1619.910614] mapped:57461 shmem:25361 pagetables:809 bounce:0 [ 1619.910614] free:159579 free_pcp:382 free_cma:0 [ 1619.914205] ? security_file_ioctl+0x83/0xb0 [ 1619.914217] SyS_ioctl+0x7f/0xb0 [ 1619.914225] ? do_vfs_ioctl+0xff0/0xff0 [ 1619.914238] do_syscall_64+0x1d5/0x640 [ 1619.914259] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1619.968892] RIP: 0033:0x4665f9 [ 1619.972074] RSP: 002b:00007f87ada6b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1619.979776] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1619.987037] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1619.994302] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1620.001581] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1620.008851] R13: 00007fff979d8a6f R14: 00007f87ada6b300 R15: 0000000000022000 [ 1620.032359] syz-executor.3: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1620.059743] Node 0 active_anon:61556kB inactive_anon:61828kB active_file:6168kB inactive_file:18332kB unevictable:0kB isolated(anon):0kB isolated(file):72kB mapped:222360kB dirty:424kB writeback:0kB shmem:65960kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 14336kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1620.059753] syz-executor.3 cpuset= [ 1620.088190] Bluetooth: hci2 command 0x041b tx timeout [ 1620.095021] Node 1 active_anon:1652kB inactive_anon:35276kB active_file:3020kB inactive_file:1012kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:7884kB dirty:8kB writeback:0kB shmem:35484kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1620.110464] / [ 1620.131478] Node 0 DMA free:11096kB min:204kB low:252kB high:300kB active_anon:2060kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1620.149258] mems_allowed=0-1 [ 1620.166007] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1620.177050] Node 0 DMA32 free:599128kB min:36200kB low:45248kB high:54296kB active_anon:59496kB inactive_anon:61828kB active_file:5968kB inactive_file:18372kB unevictable:0kB writepending:424kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7392kB pagetables:3320kB bounce:0kB free_pcp:628kB local_pcp:624kB free_cma:0kB [ 1620.190194] CPU: 1 PID: 28732 Comm: syz-executor.3 Not tainted 4.14.232-syzkaller #0 [ 1620.214522] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1620.223872] Call Trace: [ 1620.226457] dump_stack+0x1b2/0x281 [ 1620.230086] warn_alloc.cold+0x96/0x1cc [ 1620.234058] ? zone_watermark_ok_safe+0x220/0x220 [ 1620.238890] __alloc_pages_nodemask+0x2127/0x2720 [ 1620.243710] ? switch_mm_irqs_off+0x601/0xeb0 [ 1620.248187] ? lock_acquire+0x170/0x3f0 [ 1620.252160] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1620.256987] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1620.262419] ? __mutex_unlock_slowpath+0x75/0x770 [ 1620.267251] ? __alloc_pages_nodemask+0x278/0x2720 [ 1620.272173] alloc_pages_current+0x155/0x260 [ 1620.276564] ion_page_pool_alloc+0x118/0x1b0 [ 1620.280963] ion_system_heap_allocate+0x133/0x8c0 [ 1620.285783] ? ion_alloc+0x187/0x810 [ 1620.289475] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1620.294905] ? ion_system_contig_heap_create+0x130/0x130 [ 1620.300334] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1620.305332] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1620.310153] ion_alloc+0x204/0x810 [ 1620.313673] ? ion_dma_buf_release+0x40/0x40 [ 1620.318063] ? __might_fault+0x177/0x1b0 [ 1620.322103] ion_ioctl+0xea/0x1f0 [ 1620.325533] ? ion_query_heaps+0x360/0x360 [ 1620.329747] ? ion_query_heaps+0x360/0x360 [ 1620.333972] do_vfs_ioctl+0x75a/0xff0 [ 1620.337754] ? ioctl_preallocate+0x1a0/0x1a0 [ 1620.342136] ? lock_downgrade+0x740/0x740 [ 1620.346263] ? __fget+0x225/0x360 [ 1620.349702] ? do_vfs_ioctl+0xff0/0xff0 [ 1620.353655] ? security_file_ioctl+0x83/0xb0 [ 1620.358040] SyS_ioctl+0x7f/0xb0 [ 1620.361386] ? do_vfs_ioctl+0xff0/0xff0 [ 1620.365355] do_syscall_64+0x1d5/0x640 [ 1620.369223] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1620.374391] RIP: 0033:0x4665f9 [ 1620.377559] RSP: 002b:00007fd613a46188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1620.385256] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1620.392502] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1620.399750] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1620.406996] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1620.414242] R13: 00007ffce81deb9f R14: 00007fd613a46300 R15: 0000000000022000 [ 1620.449019] lowmem_reserve[]: 0 0 0 0 0 [ 1620.456483] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1620.486500] lowmem_reserve[]: 0 0 0 0 0 [ 1620.491665] Node 1 Normal free:71424kB min:53696kB low:67120kB high:80544kB active_anon:1652kB inactive_anon:35276kB active_file:2464kB inactive_file:1400kB unevictable:0kB writepending:8kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:480kB pagetables:92kB bounce:0kB free_pcp:556kB local_pcp:556kB free_cma:0kB [ 1620.524465] lowmem_reserve[]: 0 0 0 0 0 [ 1620.528551] Node 0 DMA: 22*4kB (UME) 38*8kB (UME) 29*16kB (UM) 30*32kB (UME) 21*64kB (UME) 4*128kB (UME) 3*256kB (ME) 1*512kB (E) 2*1024kB (ME) 2*2048kB (ME) 0*4096kB = 11096kB [ 1620.550137] Node 0 DMA32: 25*4kB (UE) 3054*8kB (UME) 12872*16kB (UME) 7552*32kB (UME) 13*64kB (U) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 472980kB [ 1620.568481] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1620.583442] Node 1 Normal: 824*4kB (UM) 1564*8kB (UM) 1350*16kB (UM) 1061*32kB (UM) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 71360kB [ 1620.597550] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1620.610506] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1620.619174] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1620.631511] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1620.640165] 32176 total pagecache pages [ 1620.647225] 0 pages in swap cache [ 1620.652556] Swap cache stats: add 0, delete 0, find 0/0 [ 1620.659079] Free swap = 0kB [ 1620.668111] Total swap = 0kB [ 1620.675083] 2097051 pages RAM [ 1620.683871] 0 pages HighMem/MovableOnly [ 1620.694197] 363849 pages reserved [ 1620.703710] 0 pages cma reserved [ 1620.848783] warn_alloc_show_mem: 3 callbacks suppressed [ 1620.848787] Mem-Info: [ 1620.856824] active_anon:15802 inactive_anon:24276 isolated_anon:0 [ 1620.856824] active_file:1578 inactive_file:4599 isolated_file:18 [ 1620.856824] unevictable:0 dirty:8 writeback:0 unstable:0 [ 1620.856824] slab_reclaimable:12801 slab_unreclaimable:123063 [ 1620.856824] mapped:56661 shmem:25361 pagetables:853 bounce:0 [ 1620.856824] free:54956 free_pcp:215 free_cma:0 [ 1620.907598] Node 0 active_anon:61556kB inactive_anon:61828kB active_file:6312kB inactive_file:19492kB unevictable:0kB isolated(anon):0kB isolated(file):72kB mapped:223164kB dirty:24kB writeback:0kB shmem:65960kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 14336kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1621.063202] Node 1 active_anon:1668kB inactive_anon:35276kB active_file:116kB inactive_file:44kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:4252kB dirty:0kB writeback:0kB shmem:35484kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1621.151100] Node 0 DMA free:11040kB min:204kB low:252kB high:300kB active_anon:2060kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1621.213241] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1621.218664] Node 0 DMA32 free:36308kB min:36200kB low:45248kB high:54296kB active_anon:59524kB inactive_anon:61828kB active_file:1584kB inactive_file:1620kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7392kB pagetables:3320kB bounce:0kB free_pcp:712kB local_pcp:180kB free_cma:0kB [ 1621.265891] lowmem_reserve[]: 0 0 0 0 0 [ 1621.277593] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1621.308540] lowmem_reserve[]: 0 0 0 0 0 [ 1621.312961] Node 1 Normal free:53696kB min:53696kB low:67120kB high:80544kB active_anon:1668kB inactive_anon:35276kB active_file:116kB inactive_file:44kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:480kB pagetables:92kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1621.344659] lowmem_reserve[]: 0 0 0 0 0 [ 1621.348732] Node 0 DMA: 8*4kB (UME) 38*8kB (UME) 29*16kB (UM) 30*32kB (UME) 21*64kB (UME) 4*128kB (UME) 3*256kB (ME) 1*512kB (E) 2*1024kB (ME) 2*2048kB (ME) 0*4096kB = 11040kB [ 1621.368116] Node 0 DMA32: 618*4kB (UME) 533*8kB (UME) 94*16kB (UME) 828*32kB (UME) 24*64kB (UM) 3*128kB (M) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36656kB [ 1621.393511] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1621.407597] Node 1 Normal: 53*4kB (UM) 36*8kB (UM) 1017*16kB (UM) 1073*32kB (UM) 20*64kB (UM) 8*128kB (UM) 2*256kB (UM) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 53924kB [ 1621.425548] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1621.434557] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1621.448039] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1621.457068] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1621.469763] 25652 total pagecache pages [ 1621.473971] 0 pages in swap cache [ 1621.477524] Swap cache stats: add 0, delete 0, find 0/0 [ 1621.486361] Free swap = 0kB [ 1621.489491] Total swap = 0kB [ 1621.492655] 2097051 pages RAM [ 1621.495877] 0 pages HighMem/MovableOnly [ 1621.499992] 363849 pages reserved [ 1621.519907] 0 pages cma reserved [ 1621.577232] oom_reaper: reaped process 28732 (syz-executor.3), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1621.637634] syz-executor.1 invoked oom-killer: gfp_mask=0x14200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=0 [ 1621.679563] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 1621.700050] CPU: 0 PID: 28753 Comm: syz-executor.1 Not tainted 4.14.232-syzkaller #0 [ 1621.707942] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1621.717284] Call Trace: [ 1621.719873] dump_stack+0x1b2/0x281 [ 1621.723511] dump_header+0x178/0x82f [ 1621.727220] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1621.732317] ? ___ratelimit+0x2cd/0x530 [ 1621.736282] oom_kill_process.cold+0x10/0xa40 [ 1621.740781] out_of_memory+0xe3e/0x1190 [ 1621.744753] ? oom_killer_disable+0x1c0/0x1c0 [ 1621.749242] ? mutex_trylock+0x152/0x1a0 [ 1621.753300] __alloc_pages_nodemask+0x23e1/0x2720 [ 1621.758145] ? __schedule+0x893/0x1de0 [ 1621.762023] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1621.766859] ? lock_acquire+0x170/0x3f0 [ 1621.770823] ? reacquire_held_locks+0xb5/0x3f0 [ 1621.775395] ? alloc_set_pte+0xd57/0x1610 [ 1621.779539] alloc_pages_vma+0xd2/0x6d0 [ 1621.783462] syz-executor.4: page allocation failure: order:0 [ 1621.783502] wp_page_copy+0x1f5/0x25c0 [ 1621.783511] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1621.789285] ? tlb_flush_mmu_free+0x1a0/0x1a0 [ 1621.804750] ? __lock_acquire+0x5fc/0x3f20 [ 1621.807939] syz-executor.3: page allocation failure: order:0 [ 1621.808974] do_wp_page+0x245/0x1db0 [ 1621.808984] ? __handle_mm_fault+0x129c/0x4620 [ 1621.823024] ? finish_mkwrite_fault+0x5e0/0x5e0 [ 1621.827686] __handle_mm_fault+0x234f/0x4620 [ 1621.828666] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1621.832080] ? vm_insert_page+0x7c0/0x7c0 [ 1621.832087] ? do_raw_spin_unlock+0x164/0x220 [ 1621.832096] ? userfaultfd_unmap_complete+0x225/0x320 [ 1621.832112] ? mark_held_locks+0xa6/0xf0 [ 1621.832123] handle_mm_fault+0x455/0x9c0 [ 1621.832135] __do_page_fault+0x549/0xad0 [ 1621.832146] ? spurious_fault+0x640/0x640 [ 1621.854531] (null) [ 1621.857031] ? do_page_fault+0x60/0x500 [ 1621.875305] ? page_fault+0x2f/0x50 [ 1621.876364] (null) [ 1621.878919] page_fault+0x45/0x50 [ 1621.884479] RIP: 31f1400:0x7ffc4e285b20 [ 1621.888437] RSP: 546f60:0000000000000000 EFLAGS: 0000001f [ 1621.889831] syz-executor.4 cpuset= [ 1621.918735] syz-executor.3 cpuset= [ 1621.920211] Mem-Info: [ 1621.928203] active_anon:15756 inactive_anon:24275 isolated_anon:0 [ 1621.928203] active_file:16 inactive_file:16 isolated_file:0 [ 1621.928203] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1621.928203] slab_reclaimable:12801 slab_unreclaimable:122138 [ 1621.928203] mapped:52664 shmem:25360 pagetables:844 bounce:0 [ 1621.928203] free:13948 free_pcp:30 free_cma:0 [ 1621.937641] / [ 1621.986450] Node 0 active_anon:61300kB inactive_anon:61824kB active_file:160kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:206456kB dirty:0kB writeback:0kB shmem:65956kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 14336kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1621.987831] / [ 1621.988191] Node 1 active_anon:1724kB inactive_anon:35276kB active_file:4kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:4200kB dirty:0kB writeback:0kB shmem:35484kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1622.026259] mems_allowed=0-1 [ 1622.060734] mems_allowed=0-1 [ 1622.063848] CPU: 1 PID: 28750 Comm: syz-executor.4 Not tainted 4.14.232-syzkaller #0 [ 1622.071716] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1622.071957] Node 0 [ 1622.081051] Call Trace: [ 1622.081070] dump_stack+0x1b2/0x281 [ 1622.081083] warn_alloc.cold+0x96/0x1cc [ 1622.083301] DMA free:10956kB min:204kB low:252kB high:300kB active_anon:2060kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1622.085857] ? zone_watermark_ok_safe+0x220/0x220 [ 1622.089451] lowmem_reserve[]: [ 1622.093422] ? usleep_range+0x130/0x130 [ 1622.093432] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1622.093446] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1622.119196] 0 [ 1622.124002] ? run_timer_softirq+0x5a0/0x5a0 [ 1622.124021] __alloc_pages_nodemask+0x2127/0x2720 [ 1622.127115] 2717 [ 1622.131074] ? lock_acquire+0x170/0x3f0 [ 1622.131088] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1622.136180] 2718 [ 1622.141172] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1622.141186] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1622.141205] alloc_pages_current+0x155/0x260 [ 1622.142971] 2718 [ 1622.147357] ion_page_pool_alloc+0x118/0x1b0 [ 1622.152186] 2718 [ 1622.154220] ion_system_heap_allocate+0x133/0x8c0 [ 1622.158165] Node 0 [ 1622.162984] ? ion_alloc+0x187/0x810 [ 1622.162994] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1622.163003] ? ion_system_contig_heap_create+0x130/0x130 [ 1622.165136] DMA32 free:17844kB min:36200kB low:45248kB high:54296kB active_anon:59240kB inactive_anon:61824kB active_file:124kB inactive_file:48kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7392kB pagetables:3260kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1622.169603] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1622.175049] lowmem_reserve[]: [ 1622.179421] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1622.181466] 0 [ 1622.185844] ion_alloc+0x204/0x810 [ 1622.187877] 0 [ 1622.192699] ? ion_dma_buf_release+0x40/0x40 [ 1622.192713] ? __might_fault+0x177/0x1b0 [ 1622.194922] 0 [ 1622.198617] ion_ioctl+0xea/0x1f0 [ 1622.210198] 0 [ 1622.237487] ? ion_query_heaps+0x360/0x360 [ 1622.237499] ? ion_query_heaps+0x360/0x360 [ 1622.242527] 0 [ 1622.245599] do_vfs_ioctl+0x75a/0xff0 [ 1622.252195] ? ioctl_preallocate+0x1a0/0x1a0 [ 1622.255705] Node 0 [ 1622.257487] ? lock_downgrade+0x740/0x740 [ 1622.261889] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1622.265908] ? __fget+0x225/0x360 [ 1622.267678] lowmem_reserve[]: [ 1622.271108] ? do_vfs_ioctl+0xff0/0xff0 [ 1622.271120] ? security_file_ioctl+0x83/0xb0 [ 1622.271130] SyS_ioctl+0x7f/0xb0 [ 1622.272905] 0 [ 1622.277116] ? do_vfs_ioctl+0xff0/0xff0 [ 1622.281345] 0 [ 1622.283115] do_syscall_64+0x1d5/0x640 [ 1622.286881] 0 [ 1622.291273] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1622.291282] RIP: 0033:0x4665f9 [ 1622.293490] 0 [ 1622.297613] RSP: 002b:00007fbffd9c3188 EFLAGS: 00000246 [ 1622.322493] 0 [ 1622.325907] ORIG_RAX: 0000000000000010 [ 1622.332928] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1622.332934] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1622.332939] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1622.332944] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1622.332951] R13: 00007fff1427db3f R14: 00007fbffd9c3300 R15: 0000000000022000 [ 1622.337439] Node 1 [ 1622.341347] Bluetooth: hci2 command 0x040f tx timeout [ 1622.342818] Normal free:26992kB min:53696kB low:67120kB high:80544kB active_anon:1724kB inactive_anon:35276kB active_file:4kB inactive_file:4kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:480kB pagetables:116kB bounce:0kB free_pcp:120kB local_pcp:0kB free_cma:0kB [ 1622.357580] CPU: 1 PID: 28732 Comm: syz-executor.3 Not tainted 4.14.232-syzkaller #0 [ 1622.383594] lowmem_reserve[]: [ 1622.390443] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1622.390447] Call Trace: [ 1622.390462] dump_stack+0x1b2/0x281 [ 1622.390475] warn_alloc.cold+0x96/0x1cc [ 1622.397717] 0 [ 1622.404969] ? zone_watermark_ok_safe+0x220/0x220 [ 1622.404979] ? usleep_range+0x130/0x130 [ 1622.404990] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1622.412247] 0 [ 1622.414454] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1622.419608] 0 [ 1622.447346] ? run_timer_softirq+0x5a0/0x5a0 [ 1622.447365] __alloc_pages_nodemask+0x2127/0x2720 [ 1622.455247] 0 [ 1622.458333] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1622.467662] 0 [ 1622.470216] ? migrate_swap_stop+0x880/0x880 [ 1622.470226] ? lock_acquire+0x170/0x3f0 [ 1622.477777] ? __alloc_pages_nodemask+0x278/0x2720 [ 1622.479553] Node 0 [ 1622.484376] alloc_pages_current+0x155/0x260 [ 1622.484387] ion_page_pool_alloc+0x118/0x1b0 [ 1622.484397] ion_system_heap_allocate+0x133/0x8c0 [ 1622.488339] DMA: [ 1622.493422] ? ion_alloc+0x187/0x810 [ 1622.493431] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1622.493441] ? ion_system_contig_heap_create+0x130/0x130 [ 1622.495260] 5*4kB [ 1622.500208] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1622.500218] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1622.500228] ion_alloc+0x204/0x810 [ 1622.502012] (UME) [ 1622.506401] ? ion_dma_buf_release+0x40/0x40 [ 1622.511227] 29*8kB [ 1622.512996] ? __might_fault+0x177/0x1b0 [ 1622.517804] (UME) [ 1622.519587] ion_ioctl+0xea/0x1f0 [ 1622.523988] 29*16kB [ 1622.527926] ? ion_query_heaps+0x360/0x360 [ 1622.532838] (UM) [ 1622.535044] ? ion_query_heaps+0x360/0x360 [ 1622.539420] 30*32kB [ 1622.543805] do_vfs_ioctl+0x75a/0xff0 [ 1622.543816] ? ioctl_preallocate+0x1a0/0x1a0 [ 1622.543826] ? lock_downgrade+0x740/0x740 [ 1622.548636] (UME) [ 1622.550679] ? __fget+0x225/0x360 [ 1622.550687] ? do_vfs_ioctl+0xff0/0xff0 [ 1622.550697] ? security_file_ioctl+0x83/0xb0 [ 1622.554381] 21*64kB [ 1622.559834] SyS_ioctl+0x7f/0xb0 [ 1622.565270] (UME) [ 1622.567382] ? do_vfs_ioctl+0xff0/0xff0 [ 1622.572381] 4*128kB [ 1622.577191] do_syscall_64+0x1d5/0x640 [ 1622.580711] (UME) [ 1622.582844] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1622.587235] 3*256kB (ME) [ 1622.589455] RIP: 0033:0x4665f9 [ 1622.593499] 1*512kB [ 1622.595630] RSP: 002b:00007fd613a46188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1622.599069] (E) [ 1622.601370] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1622.601375] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1622.601380] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1622.601384] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1622.601389] R13: 00007ffce81deb9f R14: 00007fd613a46300 R15: 0000000000022000 [ 1622.612792] Mem-Info: [ 1622.639604] 2*1024kB [ 1622.651434] active_anon:15756 inactive_anon:24275 isolated_anon:0 [ 1622.651434] active_file:32 inactive_file:13 isolated_file:0 [ 1622.651434] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1622.651434] slab_reclaimable:12801 slab_unreclaimable:122138 [ 1622.651434] mapped:52664 shmem:25360 pagetables:844 bounce:0 [ 1622.651434] free:13948 free_pcp:30 free_cma:0 [ 1622.701523] (ME) [ 1622.707487] Node 0 active_anon:61300kB inactive_anon:61824kB active_file:124kB inactive_file:48kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:206456kB dirty:0kB writeback:0kB shmem:65956kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 14336kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1622.825335] 2*2048kB (ME) 0*4096kB = 10956kB [ 1622.829832] Node 0 DMA32: 899*4kB (UME) 506*8kB (UME) 88*16kB (ME) 201*32kB (UME) 55*64kB (UM) 4*128kB (M) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 19516kB [ 1622.898679] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1622.948966] Node 1 Normal: 1*4kB (U) 1*8kB (U) 1*16kB (M) 1*32kB (U) 1127*64kB (UM) 347*128kB (UM) 24*256kB (UM) 50*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 148348kB [ 1622.965973] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1623.009002] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1623.018711] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1623.082139] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1623.090488] Node 1 active_anon:2320kB inactive_anon:35276kB active_file:3352kB inactive_file:6396kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:10644kB dirty:80kB writeback:0kB shmem:35484kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1623.093775] 27878 total pagecache pages [ 1623.123245] 0 pages in swap cache [ 1623.129852] Swap cache stats: add 0, delete 0, find 0/0 [ 1623.155465] Free swap = 0kB [ 1623.182161] Total swap = 0kB [ 1623.195498] 2097051 pages RAM [ 1623.216041] Node 0 DMA free:11024kB min:204kB low:252kB high:300kB active_anon:2060kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1623.221024] 0 pages HighMem/MovableOnly [ 1623.245350] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1623.294667] Node 0 DMA32 free:23212kB min:36200kB low:45248kB high:54296kB active_anon:59040kB inactive_anon:61824kB active_file:60kB inactive_file:60kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7360kB pagetables:3260kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1623.323359] 363849 pages reserved [ 1623.326836] 0 pages cma reserved [ 1623.342357] lowmem_reserve[]: 0 0 0 0 0 [ 1623.346362] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1623.346809] Out of memory (oom_kill_allocating_task): Kill process 28753 (syz-executor.1) score 0 or sacrifice child [ 1623.381055] lowmem_reserve[]: 0 0 0 0 0 [ 1623.386770] Node 1 Normal free:28972kB min:53696kB low:67120kB high:80544kB active_anon:2320kB inactive_anon:35276kB active_file:892kB inactive_file:1096kB unevictable:0kB writepending:80kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:512kB pagetables:292kB bounce:0kB free_pcp:864kB local_pcp:732kB free_cma:0kB [ 1623.421313] lowmem_reserve[]: 0 0 0 0 0 [ 1623.425310] Node 0 DMA: 6*4kB (UME) 29*8kB (UME) 29*16kB (UM) 30*32kB (UME) 22*64kB (UME) 4*128kB (UME) 3*256kB (ME) 1*512kB (E) 2*1024kB (ME) 2*2048kB (ME) 0*4096kB = 11024kB [ 1623.425682] Killed process 28753 (syz-executor.1) total-vm:84924kB, anon-rss:68kB, file-rss:34268kB, shmem-rss:0kB [ 1623.441541] Node 0 DMA32: 964*4kB (UME) 522*8kB (UME) 93*16kB (UME) 434*32kB (UME) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 23408kB [ 1623.475219] oom_reaper: reaped process 28750 (syz-executor.4), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1623.485468] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1623.496277] Node 1 Normal: 150*4kB (UM) 98*8kB (UM) 87*16kB (UME) 63*32kB (UME) 55*64kB (UM) 10*128kB (UM) 2*256kB (M) 40*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 30584kB [ 1623.512804] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1623.521679] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1623.548676] oom_reaper: reaped process 28728 (syz-executor.2), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1623.558689] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1623.567721] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1623.576350] 25451 total pagecache pages [ 1623.588233] oom_reaper: reaped process 28726 (syz-executor.0), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1623.598496] 0 pages in swap cache [ 1623.602013] Swap cache stats: add 0, delete 0, find 0/0 [ 1623.607375] Free swap = 0kB [ 1623.610424] Total swap = 0kB [ 1623.613442] 2097051 pages RAM [ 1623.616537] 0 pages HighMem/MovableOnly [ 1623.620554] 363849 pages reserved [ 1623.624000] 0 pages cma reserved [ 1623.882172] systemd-journal invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=0 [ 1623.897430] systemd-journal cpuset=/ mems_allowed=0-1 [ 1623.902732] CPU: 0 PID: 28472 Comm: systemd-journal Not tainted 4.14.232-syzkaller #0 [ 1623.910687] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1623.920017] Call Trace: [ 1623.922589] dump_stack+0x1b2/0x281 [ 1623.926198] dump_header+0x178/0x82f [ 1623.929889] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1623.935104] ? ___ratelimit+0x2cd/0x530 [ 1623.939064] oom_kill_process.cold+0x10/0xa40 [ 1623.943550] out_of_memory+0xe3e/0x1190 [ 1623.947524] ? oom_killer_disable+0x1c0/0x1c0 [ 1623.951996] ? mutex_trylock+0x152/0x1a0 [ 1623.956034] __alloc_pages_nodemask+0x23e1/0x2720 [ 1623.960861] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1623.965679] ? entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1623.971029] ? cache_grow_begin+0x3f/0x700 [ 1623.975240] cache_grow_begin+0x91/0x700 [ 1623.979282] fallback_alloc+0x207/0x2c0 [ 1623.983237] kmem_cache_alloc+0x1e5/0x3c0 [ 1623.987366] getname_flags+0xc8/0x550 [ 1623.991160] user_path_at_empty+0x2a/0x50 [ 1623.995287] SyS_faccessat+0x21b/0x680 [ 1623.999156] ? SyS_fallocate+0x80/0x80 [ 1624.003022] ? do_syscall_64+0x4c/0x640 [ 1624.006969] ? SyS_faccessat+0x680/0x680 [ 1624.011008] do_syscall_64+0x1d5/0x640 [ 1624.014873] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1624.020036] RIP: 0033:0x7fa9121239c7 [ 1624.023725] RSP: 002b:00007ffe4116f658 EFLAGS: 00000246 ORIG_RAX: 0000000000000015 [ 1624.031409] RAX: ffffffffffffffda RBX: 00007ffe41172570 RCX: 00007fa9121239c7 [ 1624.038657] RDX: 00007fa912b94a00 RSI: 0000000000000000 RDI: 000055e3b10ca9a3 [ 1624.045903] RBP: 00007ffe4116f690 R08: 0000000000000000 R09: 0000000000000000 [ 1624.053151] R10: 0000000000000069 R11: 0000000000000246 R12: 0000000000000000 [ 1624.060397] R13: 0000000000000000 R14: 00007ffe41172570 R15: 00007ffe4116fb80 [ 1624.068450] syz-executor.3: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1624.080235] syz-executor.4: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1624.080417] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 1624.097267] CPU: 1 PID: 28732 Comm: syz-executor.3 Not tainted 4.14.232-syzkaller #0 [ 1624.105137] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1624.114479] Call Trace: [ 1624.116283] Mem-Info: [ 1624.117057] dump_stack+0x1b2/0x281 [ 1624.119454] active_anon:15247 inactive_anon:24277 isolated_anon:0 [ 1624.119454] active_file:16 inactive_file:16 isolated_file:0 [ 1624.119454] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1624.119454] slab_reclaimable:12776 slab_unreclaimable:123040 [ 1624.119454] mapped:52692 shmem:25363 pagetables:831 bounce:0 [ 1624.119454] free:13906 free_pcp:30 free_cma:0 [ 1624.123066] warn_alloc.cold+0x96/0x1cc [ 1624.123078] ? zone_watermark_ok_safe+0x220/0x220 [ 1624.123121] __alloc_pages_nodemask+0x2127/0x2720 [ 1624.169862] ? lock_acquire+0x170/0x3f0 [ 1624.172029] syz-executor.4 cpuset=/ [ 1624.173829] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1624.173843] mems_allowed=0-1 [ 1624.177449] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1624.190782] ? __mutex_unlock_slowpath+0x75/0x770 [ 1624.195617] ? retint_kernel+0x2d/0x2d [ 1624.199498] alloc_pages_current+0x155/0x260 [ 1624.203898] ion_page_pool_alloc+0x118/0x1b0 [ 1624.208293] ion_system_heap_allocate+0x133/0x8c0 [ 1624.213121] ? _raw_spin_unlock+0x29/0x40 [ 1624.217260] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1624.222175] ? ion_system_contig_heap_create+0x130/0x130 [ 1624.227605] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1624.232606] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1624.237440] ion_alloc+0x27a/0x810 [ 1624.240975] ? ion_dma_buf_release+0x40/0x40 [ 1624.245374] ? __might_fault+0x177/0x1b0 [ 1624.249429] ion_ioctl+0xea/0x1f0 [ 1624.252866] ? ion_query_heaps+0x360/0x360 [ 1624.257082] ? ion_query_heaps+0x360/0x360 [ 1624.260076] Node 0 active_anon:58596kB inactive_anon:61824kB active_file:32kB inactive_file:32kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:206568kB dirty:0kB writeback:0kB shmem:65956kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1624.261299] do_vfs_ioctl+0x75a/0xff0 [ 1624.292724] ? ioctl_preallocate+0x1a0/0x1a0 [ 1624.297139] ? lock_downgrade+0x740/0x740 [ 1624.301270] ? __fget+0x225/0x360 [ 1624.304700] ? do_vfs_ioctl+0xff0/0xff0 [ 1624.308653] ? security_file_ioctl+0x83/0xb0 [ 1624.313043] SyS_ioctl+0x7f/0xb0 [ 1624.316390] ? do_vfs_ioctl+0xff0/0xff0 [ 1624.320063] Node 1 active_anon:2392kB inactive_anon:35284kB active_file:32kB inactive_file:32kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:4200kB dirty:0kB writeback:0kB shmem:35496kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1624.320347] do_syscall_64+0x1d5/0x640 [ 1624.351254] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1624.356419] RIP: 0033:0x4665f9 [ 1624.359586] RSP: 002b:00007fd613a46188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1624.367272] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1624.374520] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1624.380054] Node 0 [ 1624.381769] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1624.381779] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1624.384002] DMA free:10976kB min:204kB low:252kB high:300kB active_anon:12kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1624.391238] R13: 00007ffce81deb9f R14: 00007fd613a46300 R15: 0000000000022000 [ 1624.392275] CPU: 1 PID: 28750 Comm: syz-executor.4 Not tainted 4.14.232-syzkaller #0 [ 1624.398507] lowmem_reserve[]: [ 1624.424070] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1624.424073] Call Trace: [ 1624.424088] dump_stack+0x1b2/0x281 [ 1624.424101] warn_alloc.cold+0x96/0x1cc [ 1624.424112] ? zone_watermark_ok_safe+0x220/0x220 [ 1624.424134] __alloc_pages_nodemask+0x2127/0x2720 [ 1624.424145] ? lock_acquire+0x170/0x3f0 [ 1624.424157] ? lock_acquire+0x170/0x3f0 [ 1624.424171] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1624.424188] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1624.424199] ? __mutex_unlock_slowpath+0x75/0x770 [ 1624.424213] alloc_pages_current+0x155/0x260 [ 1624.424226] ion_page_pool_alloc+0x118/0x1b0 [ 1624.424235] ion_system_heap_allocate+0x133/0x8c0 [ 1624.424245] ? _raw_spin_unlock+0x29/0x40 [ 1624.424253] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1624.424261] ? ion_system_contig_heap_create+0x130/0x130 [ 1624.424271] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1624.424280] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1624.424291] ion_alloc+0x27a/0x810 [ 1624.424303] ? ion_dma_buf_release+0x40/0x40 [ 1624.424314] ? __might_fault+0x177/0x1b0 [ 1624.424324] ion_ioctl+0xea/0x1f0 [ 1624.424332] ? ion_query_heaps+0x360/0x360 [ 1624.424344] ? ion_query_heaps+0x360/0x360 [ 1624.424354] do_vfs_ioctl+0x75a/0xff0 [ 1624.424366] ? ioctl_preallocate+0x1a0/0x1a0 [ 1624.424373] ? lock_downgrade+0x740/0x740 [ 1624.424386] ? __fget+0x225/0x360 [ 1624.424394] ? do_vfs_ioctl+0xff0/0xff0 [ 1624.424404] ? security_file_ioctl+0x83/0xb0 [ 1624.424415] SyS_ioctl+0x7f/0xb0 [ 1624.424421] ? do_vfs_ioctl+0xff0/0xff0 [ 1624.424432] do_syscall_64+0x1d5/0x640 [ 1624.424445] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1624.424452] RIP: 0033:0x4665f9 [ 1624.424456] RSP: 002b:00007fbffd9c3188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1624.424466] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1624.424471] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1624.424478] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1624.431798] Bluetooth: hci2 command 0x0419 tx timeout [ 1624.439591] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1624.439597] R13: 00007fff1427db3f R14: 00007fbffd9c3300 R15: 0000000000022000 [ 1624.446294] syz-executor.2: [ 1624.452089] warn_alloc_show_mem: 1 callbacks suppressed [ 1624.452092] Mem-Info: [ 1624.454624] syz-executor.0: [ 1624.458227] active_anon:15247 inactive_anon:24277 isolated_anon:0 [ 1624.458227] active_file:16 inactive_file:16 isolated_file:0 [ 1624.458227] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1624.458227] slab_reclaimable:12776 slab_unreclaimable:123040 [ 1624.458227] mapped:52692 shmem:25363 pagetables:831 bounce:0 [ 1624.458227] free:13906 free_pcp:30 free_cma:0 [ 1624.481820] page allocation failure: order:0 [ 1624.488248] page allocation failure: order:0 [ 1624.501655] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1624.507340] 0 [ 1624.508622] (null) [ 1624.512849] 2717 [ 1624.537447] syz-executor.0 cpuset= [ 1624.543241] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1624.558990] / [ 1624.562917] Node 0 active_anon:58596kB inactive_anon:61824kB active_file:32kB inactive_file:32kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:206568kB dirty:0kB writeback:0kB shmem:65956kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1624.579574] mems_allowed=0-1 [ 1624.583203] (null) [ 1624.593748] CPU: 0 PID: 28726 Comm: syz-executor.0 Not tainted 4.14.232-syzkaller #0 [ 1624.597908] 2718 [ 1624.601072] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1624.601076] Call Trace: [ 1624.601093] dump_stack+0x1b2/0x281 [ 1624.601107] warn_alloc.cold+0x96/0x1cc [ 1624.601121] ? zone_watermark_ok_safe+0x220/0x220 [ 1624.609926] Node 1 active_anon:2392kB inactive_anon:35284kB active_file:32kB inactive_file:32kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:4200kB dirty:0kB writeback:0kB shmem:35496kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1624.616050] ? usleep_range+0x130/0x130 [ 1624.616060] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1624.616072] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1624.616083] ? run_timer_softirq+0x5a0/0x5a0 [ 1624.623706] 2718 [ 1624.630596] __alloc_pages_nodemask+0x2127/0x2720 [ 1624.630614] ? lock_acquire+0x170/0x3f0 [ 1624.630627] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1624.630639] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1624.636277] syz-executor.2 cpuset= [ 1624.643092] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1624.643112] alloc_pages_current+0x155/0x260 [ 1624.643125] ion_page_pool_alloc+0x118/0x1b0 [ 1624.652178] Node 0 [ 1624.653388] ion_system_heap_allocate+0x133/0x8c0 [ 1624.658733] DMA free:10976kB min:204kB low:252kB high:300kB active_anon:12kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1624.661113] ? ion_alloc+0x187/0x810 [ 1624.661124] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1624.661133] ? ion_system_contig_heap_create+0x130/0x130 [ 1624.661141] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1624.661154] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1624.664151] 2718 [ 1624.697290] ion_alloc+0x204/0x810 [ 1624.697305] ? ion_dma_buf_release+0x40/0x40 [ 1624.697316] ? __might_fault+0x177/0x1b0 [ 1624.697327] ion_ioctl+0xea/0x1f0 [ 1624.697335] ? ion_query_heaps+0x360/0x360 [ 1624.697345] ? ion_query_heaps+0x360/0x360 [ 1624.697356] do_vfs_ioctl+0x75a/0xff0 [ 1624.697367] ? ioctl_preallocate+0x1a0/0x1a0 [ 1624.704023] / [ 1624.706145] ? lock_downgrade+0x740/0x740 [ 1624.713279] lowmem_reserve[]: [ 1624.715010] ? __fget+0x225/0x360 [ 1624.717125] 0 [ 1624.719168] ? do_vfs_ioctl+0xff0/0xff0 [ 1624.724466] mems_allowed=0-1 [ 1624.729759] ? security_file_ioctl+0x83/0xb0 [ 1624.731494] 2717 [ 1624.759126] SyS_ioctl+0x7f/0xb0 [ 1624.759136] ? do_vfs_ioctl+0xff0/0xff0 [ 1624.759146] do_syscall_64+0x1d5/0x640 [ 1624.759161] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1624.759168] RIP: 0033:0x4665f9 [ 1624.759173] RSP: 002b:00007fc8c6af5188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1624.759182] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1624.759187] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1624.759196] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1624.783656] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1624.786219] Node 0 [ 1624.789819] R13: 00007ffdd42e705f R14: 00007fc8c6af5300 R15: 0000000000022000 [ 1624.800192] CPU: 0 PID: 28728 Comm: syz-executor.2 Not tainted 4.14.232-syzkaller #0 [ 1624.827599] syz-executor.3: [ 1624.829675] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1624.838690] 2718 [ 1624.839741] Call Trace: [ 1624.845938] page allocation failure: order:0 [ 1624.846177] dump_stack+0x1b2/0x281 [ 1624.854457] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1624.854947] warn_alloc.cold+0x96/0x1cc [ 1624.859755] (null) [ 1624.864230] ? zone_watermark_ok_safe+0x220/0x220 [ 1624.864239] ? usleep_range+0x130/0x130 [ 1624.864247] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1624.864259] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1624.864269] ? run_timer_softirq+0x5a0/0x5a0 [ 1624.864284] __alloc_pages_nodemask+0x2127/0x2720 [ 1624.869640] 2718 [ 1624.873226] ? lock_acquire+0x170/0x3f0 [ 1624.873241] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1624.873251] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1624.873265] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1624.873285] alloc_pages_current+0x155/0x260 [ 1624.873295] ion_page_pool_alloc+0x118/0x1b0 [ 1624.873304] ion_system_heap_allocate+0x133/0x8c0 [ 1624.873315] ? ion_alloc+0x187/0x810 [ 1624.883680] 2718 [ 1624.884316] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1624.914695] ? ion_system_contig_heap_create+0x130/0x130 [ 1624.914704] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1624.914714] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1624.914724] ion_alloc+0x204/0x810 [ 1624.914737] ? ion_dma_buf_release+0x40/0x40 [ 1624.914750] ? __might_fault+0x177/0x1b0 [ 1624.914761] ion_ioctl+0xea/0x1f0 [ 1624.914769] ? ion_query_heaps+0x360/0x360 [ 1624.914780] ? ion_query_heaps+0x360/0x360 [ 1624.914789] do_vfs_ioctl+0x75a/0xff0 [ 1624.914800] ? ioctl_preallocate+0x1a0/0x1a0 [ 1624.923815] syz-executor.3 cpuset= [ 1624.923922] ? lock_downgrade+0x740/0x740 [ 1624.929339] / [ 1624.934336] ? __fget+0x225/0x360 [ 1624.939186] mems_allowed=0-1 [ 1624.941188] ? do_vfs_ioctl+0xff0/0xff0 [ 1624.941199] ? security_file_ioctl+0x83/0xb0 [ 1624.941208] SyS_ioctl+0x7f/0xb0 [ 1624.941216] ? do_vfs_ioctl+0xff0/0xff0 [ 1624.941227] do_syscall_64+0x1d5/0x640 [ 1624.941241] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1624.941251] RIP: 0033:0x4665f9 [ 1624.950054] DMA32 free:18160kB min:36200kB low:45248kB high:54296kB active_anon:58584kB inactive_anon:61824kB active_file:32kB inactive_file:32kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7360kB pagetables:3144kB bounce:0kB free_pcp:120kB local_pcp:216kB free_cma:0kB [ 1624.953187] RSP: 002b:00007f66397b6188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1624.956620] lowmem_reserve[]: [ 1624.960831] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1624.960836] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1624.960841] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1624.960846] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1624.960851] R13: 00007fff59ca014f R14: 00007f66397b6300 R15: 0000000000022000 [ 1625.102307] CPU: 0 PID: 28732 Comm: syz-executor.3 Not tainted 4.14.232-syzkaller #0 [ 1625.103233] Node 0 [ 1625.109711] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1625.113742] DMA32 free:53968kB min:36200kB low:45248kB high:54296kB active_anon:58584kB inactive_anon:61824kB active_file:332kB inactive_file:1232kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7360kB pagetables:3144kB bounce:0kB free_pcp:416kB local_pcp:224kB free_cma:0kB [ 1625.115787] Call Trace: [ 1625.130019] lowmem_reserve[]: [ 1625.134651] dump_stack+0x1b2/0x281 [ 1625.139043] 0 [ 1625.143870] warn_alloc.cold+0x96/0x1cc [ 1625.143883] ? zone_watermark_ok_safe+0x220/0x220 [ 1625.143892] ? usleep_range+0x130/0x130 [ 1625.143903] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1625.160011] 0 [ 1625.164644] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1625.169019] 0 [ 1625.173417] ? run_timer_softirq+0x5a0/0x5a0 [ 1625.173436] __alloc_pages_nodemask+0x2127/0x2720 [ 1625.173451] ? lock_acquire+0x170/0x3f0 [ 1625.173466] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1625.190048] 0 [ 1625.194992] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1625.210022] 0 [ 1625.212723] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1625.220184] ? retint_kernel+0x2d/0x2d [ 1625.220198] alloc_pages_current+0x155/0x260 [ 1625.220212] ion_page_pool_alloc+0x118/0x1b0 [ 1625.240015] Node 0 [ 1625.240335] ion_system_heap_allocate+0x133/0x8c0 [ 1625.244464] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1625.246154] ? _raw_spin_unlock+0x29/0x40 [ 1625.249586] lowmem_reserve[]: [ 1625.252668] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1625.252676] ? ion_system_contig_heap_create+0x130/0x130 [ 1625.252686] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1625.252697] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1625.252710] ion_alloc+0x27a/0x810 [ 1625.280003] 0 [ 1625.280577] ? ion_dma_buf_release+0x40/0x40 [ 1625.330000] 0 [ 1625.334109] ? __might_fault+0x177/0x1b0 [ 1625.360508] 0 [ 1625.363728] ion_ioctl+0xea/0x1f0 [ 1625.365934] 0 [ 1625.375271] ? ion_query_heaps+0x360/0x360 [ 1625.375284] ? ion_query_heaps+0x360/0x360 [ 1625.375293] do_vfs_ioctl+0x75a/0xff0 [ 1625.375304] ? ioctl_preallocate+0x1a0/0x1a0 [ 1625.375317] ? lock_downgrade+0x740/0x740 [ 1625.410010] 0 [ 1625.413085] ? __fget+0x225/0x360 [ 1625.414856] 0 0 [ 1625.418812] ? do_vfs_ioctl+0xff0/0xff0 [ 1625.439998] 0 [ 1625.441229] ? security_file_ioctl+0x83/0xb0 [ 1625.445604] 0 [ 1625.450426] SyS_ioctl+0x7f/0xb0 [ 1625.450435] ? do_vfs_ioctl+0xff0/0xff0 [ 1625.450446] do_syscall_64+0x1d5/0x640 [ 1625.450460] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1625.480937] RIP: 0033:0x4665f9 [ 1625.485320] Node 0 [ 1625.487531] RSP: 002b:00007fd613a46188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1625.500016] 0 [ 1625.517225] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1625.517230] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1625.517235] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1625.517240] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1625.517245] R13: 00007ffce81deb9f R14: 00007fd613a46300 R15: 0000000000022000 [ 1625.689992] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1625.729987] lowmem_reserve[]: 0 0 0 0 0 [ 1625.734020] Node 1 Normal free:578724kB min:53696kB low:67120kB high:80544kB active_anon:1792kB inactive_anon:35284kB active_file:32kB inactive_file:732kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:512kB pagetables:180kB bounce:0kB free_pcp:752kB local_pcp:12kB free_cma:0kB [ 1625.800576] lowmem_reserve[]: 0 0 0 0 0 [ 1625.804609] Node 0 DMA: 3*4kB (UE) 21*8kB (UME) 27*16kB (UM) 30*32kB (UME) 7*64kB (UME) 5*128kB (UME) 3*256kB (ME) 1*512kB (E) 3*1024kB (UME) 2*2048kB (UE) 0*4096kB = 11108kB [ 1625.840010] Node 0 DMA32: 6512*4kB (UE) 2537*8kB (UME) 322*16kB (UME) 411*32kB (UME) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 64648kB [ 1625.869976] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1625.889985] Node 1 Normal: 7*4kB (UM) 5*8kB (U) 8*16kB (UME) 13*32kB (UME) 68*64kB (UM) 1060*128kB (UM) 185*256kB (UM) 72*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 224868kB [ 1625.920012] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1625.928882] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1625.960010] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1625.968862] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1625.989971] 26405 total pagecache pages [ 1625.993960] 0 pages in swap cache [ 1625.997396] Swap cache stats: add 0, delete 0, find 0/0 [ 1626.019982] Free swap = 0kB [ 1626.023005] Total swap = 0kB [ 1626.026013] 2097051 pages RAM [ 1626.029099] 0 pages HighMem/MovableOnly [ 1626.033129] Node 1 Normal free:29752kB min:53696kB low:67120kB high:80544kB active_anon:1756kB inactive_anon:35284kB active_file:32kB inactive_file:908kB unevictable:0kB writepending:4kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:512kB pagetables:180kB bounce:0kB free_pcp:704kB local_pcp:12kB free_cma:0kB [ 1626.069960] 363849 pages reserved [ 1626.073525] 0 pages cma reserved [ 1626.076880] Out of memory (oom_kill_allocating_task): Kill process 28472 (systemd-journal) score 0 or sacrifice child [ 1626.109980] Killed process 28472 (systemd-journal) total-vm:46096kB, anon-rss:472kB, file-rss:0kB, shmem-rss:1760kB [ 1626.120593] lowmem_reserve[]: 0 0 0 0 0 [ 1626.124580] Node 0 DMA: 10*4kB (UE) 21*8kB (UME) 27*16kB (UM) 30*32kB (UME) 5*64kB (UME) 5*128kB (UME) 3*256kB (ME) 1*512kB (E) 3*1024kB (UME) 2*2048kB (UE) 0*4096kB = 11008kB [ 1626.150798] oom_reaper: reaped process 28472 (systemd-journal), now anon-rss:0kB, file-rss:0kB, shmem-rss:1760kB [ 1626.172746] Node 0 DMA32: 11370*4kB (UME) 8046*8kB (UME) 6777*16kB (UME) 4381*32kB (UME) 1151*64kB (U) 163*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 453000kB [ 1626.173728] warn_alloc_show_mem: 3 callbacks suppressed [ 1626.173731] Mem-Info: [ 1626.200001] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1626.227536] Node 1 Normal: 1073*4kB (UM) 1190*8kB (UM) 525*16kB (UME) 597*32kB (UME) 979*64kB (UM) 12*128kB (UM) 2*256kB (M) 47*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 130084kB [ 1626.244501] active_anon:15148 inactive_anon:24277 isolated_anon:0 [ 1626.244501] active_file:132 inactive_file:1227 isolated_file:0 [ 1626.244501] unevictable:0 dirty:31 writeback:0 unstable:0 [ 1626.244501] slab_reclaimable:12776 slab_unreclaimable:122919 [ 1626.244501] mapped:53016 shmem:25363 pagetables:831 bounce:0 [ 1626.244501] free:152672 free_pcp:685 free_cma:0 [ 1626.260013] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1626.296871] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1626.320905] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1626.330176] systemd[1]: systemd-journald.service: Failed with result 'signal'. [ 1626.354147] systemd[1]: systemd-journald.service: Service has no hold-off time, scheduling restart. [ 1626.366392] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1626.375272] Node 0 active_anon:58836kB inactive_anon:61824kB active_file:596kB inactive_file:6100kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:208836kB dirty:120kB writeback:0kB shmem:65956kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1626.390103] 27367 total pagecache pages [ 1626.408354] systemd[1]: Stopped Journal Service. [ 1626.416983] syz-executor.0: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1626.426874] systemd[1]: Starting Journal Service... [ 1626.434436] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 1626.441696] 0 pages in swap cache [ 1626.449005] CPU: 0 PID: 28726 Comm: syz-executor.0 Not tainted 4.14.232-syzkaller #0 [ 1626.456886] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1626.460003] Swap cache stats: add 0, delete 0, find 0/0 [ 1626.466229] Call Trace: [ 1626.474150] dump_stack+0x1b2/0x281 [ 1626.477775] warn_alloc.cold+0x96/0x1cc [ 1626.479950] Free swap = 0kB [ 1626.481741] ? zone_watermark_ok_safe+0x220/0x220 [ 1626.484737] Total swap = 0kB [ 1626.489567] __alloc_pages_nodemask+0x2127/0x2720 [ 1626.497387] ? lock_acquire+0x170/0x3f0 [ 1626.501360] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1626.506201] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1626.509948] 2097051 pages RAM [ 1626.511645] ? __mutex_unlock_slowpath+0x75/0x770 [ 1626.514721] 0 pages HighMem/MovableOnly [ 1626.519540] ? retint_kernel+0x2d/0x2d [ 1626.527364] alloc_pages_current+0x155/0x260 [ 1626.529988] 363849 pages reserved [ 1626.531763] ion_page_pool_alloc+0x118/0x1b0 [ 1626.535187] 0 pages cma reserved [ 1626.539574] ion_system_heap_allocate+0x133/0x8c0 [ 1626.547743] ? _raw_spin_unlock+0x29/0x40 [ 1626.551886] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1626.556811] ? ion_system_contig_heap_create+0x130/0x130 [ 1626.562256] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1626.567265] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1626.572102] ion_alloc+0x27a/0x810 [ 1626.575635] ? ion_dma_buf_release+0x40/0x40 [ 1626.580040] ? __might_fault+0x177/0x1b0 [ 1626.584112] ion_ioctl+0xea/0x1f0 [ 1626.587554] ? ion_query_heaps+0x360/0x360 [ 1626.589968] syz-executor.2: page allocation failure: order:4 [ 1626.591779] ? ion_query_heaps+0x360/0x360 [ 1626.591789] do_vfs_ioctl+0x75a/0xff0 [ 1626.597567] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1626.601780] ? ioctl_preallocate+0x1a0/0x1a0 [ 1626.601789] ? lock_downgrade+0x740/0x740 [ 1626.601802] ? __fget+0x225/0x360 [ 1626.601813] ? do_vfs_ioctl+0xff0/0xff0 [ 1626.628580] ? security_file_ioctl+0x83/0xb0 [ 1626.629949] (null) [ 1626.632985] SyS_ioctl+0x7f/0xb0 [ 1626.635116] syz-executor.2 cpuset= [ 1626.638464] ? do_vfs_ioctl+0xff0/0xff0 [ 1626.638465] / mems_allowed=0-1 [ 1626.641989] do_syscall_64+0x1d5/0x640 [ 1626.642004] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1626.642012] RIP: 0033:0x4665f9 [ 1626.642017] RSP: 002b:00007fc8c6af5188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1626.669055] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1626.676327] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1626.683585] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1626.690840] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1626.698102] R13: 00007ffdd42e705f R14: 00007fc8c6af5300 R15: 0000000000022000 [ 1626.707039] CPU: 1 PID: 28728 Comm: syz-executor.2 Not tainted 4.14.232-syzkaller #0 [ 1626.713721] Node 1 active_anon:1756kB inactive_anon:35284kB active_file:132kB inactive_file:716kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:4828kB dirty:4kB writeback:0kB shmem:35496kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1626.714923] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1626.742078] Node 0 [ 1626.751379] Call Trace: [ 1626.751396] dump_stack+0x1b2/0x281 [ 1626.751409] warn_alloc.cold+0x96/0x1cc [ 1626.751421] ? zone_watermark_ok_safe+0x220/0x220 [ 1626.754432] DMA free:11008kB min:204kB low:252kB high:300kB active_anon:12kB inactive_anon:0kB active_file:0kB inactive_file:60kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1626.756207] __alloc_pages_nodemask+0x2127/0x2720 [ 1626.759811] lowmem_reserve[]: [ 1626.763772] ? lock_acquire+0x170/0x3f0 [ 1626.763788] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1626.763806] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1626.769237] 0 [ 1626.794358] ? __mutex_unlock_slowpath+0x75/0x770 [ 1626.794376] alloc_pages_current+0x155/0x260 [ 1626.799200] 2717 [ 1626.802303] ion_page_pool_alloc+0x118/0x1b0 [ 1626.802313] ion_system_heap_allocate+0x133/0x8c0 [ 1626.802324] ? _raw_spin_unlock+0x29/0x40 [ 1626.802334] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1626.807046] 2718 [ 1626.811105] ? ion_system_contig_heap_create+0x130/0x130 [ 1626.811116] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1626.811129] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1626.816545] 2718 [ 1626.818329] ion_alloc+0x27a/0x810 [ 1626.823368] 2718 [ 1626.827538] ? ion_dma_buf_release+0x40/0x40 [ 1626.833958] ? __might_fault+0x177/0x1b0 [ 1626.833969] ion_ioctl+0xea/0x1f0 [ 1626.833979] ? ion_query_heaps+0x360/0x360 [ 1626.838795] Node 0 [ 1626.842922] ? ion_query_heaps+0x360/0x360 [ 1626.842933] do_vfs_ioctl+0x75a/0xff0 [ 1626.842944] ? ioctl_preallocate+0x1a0/0x1a0 [ 1626.848775] DMA32 free:262376kB min:36200kB low:45248kB high:54296kB active_anon:59224kB inactive_anon:61824kB active_file:1696kB inactive_file:6052kB unevictable:0kB writepending:120kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7520kB pagetables:3144kB bounce:0kB free_pcp:172kB local_pcp:76kB free_cma:0kB [ 1626.849994] ? lock_downgrade+0x740/0x740 [ 1626.850007] ? __fget+0x225/0x360 [ 1626.850017] ? do_vfs_ioctl+0xff0/0xff0 [ 1626.855436] lowmem_reserve[]: [ 1626.860431] ? security_file_ioctl+0x83/0xb0 [ 1626.860442] SyS_ioctl+0x7f/0xb0 [ 1626.860449] ? do_vfs_ioctl+0xff0/0xff0 [ 1626.860460] do_syscall_64+0x1d5/0x640 [ 1626.866091] 0 [ 1626.867322] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1626.870844] 0 [ 1626.872873] RIP: 0033:0x4665f9 [ 1626.877250] 0 [ 1626.881283] RSP: 002b:00007f66397b6188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1626.881293] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1626.881298] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1626.881305] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1626.884748] 0 [ 1626.888955] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1626.891513] 0 [ 1626.895393] R13: 00007fff59ca014f R14: 00007f66397b6300 R15: 0000000000022000 [ 1627.049970] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1627.129064] lowmem_reserve[]: 0 0 0 0 0 [ 1627.157225] Node 1 Normal free:57720kB min:53696kB low:67120kB high:80544kB active_anon:1756kB inactive_anon:35284kB active_file:132kB inactive_file:152kB unevictable:0kB writepending:4kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:512kB pagetables:180kB bounce:0kB free_pcp:200kB local_pcp:192kB free_cma:0kB [ 1627.198700] oom_reaper: reaped process 28736 (syz-executor.5), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1627.249617] syz-fuzzer invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1627.303218] lowmem_reserve[]: 0 0 0 0 0 [ 1627.304491] syz-fuzzer cpuset= [ 1627.307247] Node 0 [ 1627.307254] / [ 1627.312540] DMA: [ 1627.312837] mems_allowed=0-1 [ 1627.314457] 6*4kB [ 1627.316513] CPU: 0 PID: 7960 Comm: syz-fuzzer Not tainted 4.14.232-syzkaller #0 [ 1627.319595] (UME) 29*8kB [ 1627.321741] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1627.321745] Call Trace: [ 1627.321761] dump_stack+0x1b2/0x281 [ 1627.321772] dump_header+0x178/0x82f [ 1627.321783] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1627.321791] ? ___ratelimit+0x2cd/0x530 [ 1627.321801] oom_kill_process.cold+0x10/0xa40 [ 1627.321818] out_of_memory+0xe3e/0x1190 [ 1627.321829] ? oom_killer_disable+0x1c0/0x1c0 [ 1627.321837] ? mutex_trylock+0x152/0x1a0 [ 1627.321848] __alloc_pages_nodemask+0x23e1/0x2720 [ 1627.321869] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1627.321894] alloc_pages_current+0x155/0x260 [ 1627.321904] filemap_fault+0x11a1/0x1ad0 [ 1627.321923] ext4_filemap_fault+0x84/0xb0 [ 1627.321934] __do_fault+0xfa/0x380 [ 1627.332310] (UME) [ 1627.341487] __handle_mm_fault+0x2497/0x4620 [ 1627.341498] ? vm_insert_page+0x7c0/0x7c0 [ 1627.341507] ? lock_downgrade+0x740/0x740 [ 1627.341520] ? mark_held_locks+0xa6/0xf0 [ 1627.341530] handle_mm_fault+0x455/0x9c0 [ 1627.346441] 29*16kB [ 1627.347724] __do_page_fault+0x549/0xad0 [ 1627.353422] (UM) [ 1627.356612] ? spurious_fault+0x640/0x640 [ 1627.373182] 30*32kB [ 1627.373501] ? do_page_fault+0x60/0x500 [ 1627.377542] (UME) [ 1627.382370] ? page_fault+0x2f/0x50 [ 1627.382377] page_fault+0x45/0x50 [ 1627.382385] RIP: 0000:0x947a7c [ 1627.382389] RSP: 2e000:000000c00003dec8 EFLAGS: 0043b6a0 [ 1627.420355] Mem-Info: [ 1627.429983] 5*64kB [ 1627.436922] active_anon:15184 inactive_anon:24276 isolated_anon:0 [ 1627.436922] active_file:28 inactive_file:24 isolated_file:0 [ 1627.436922] unevictable:0 dirty:41 writeback:0 unstable:0 [ 1627.436922] slab_reclaimable:12776 slab_unreclaimable:122508 [ 1627.436922] mapped:52245 shmem:25363 pagetables:861 bounce:0 [ 1627.436922] free:13933 free_pcp:30 free_cma:0 [ 1627.439599] (UME) 4*128kB [ 1627.441974] Node 0 active_anon:58980kB inactive_anon:61820kB active_file:112kB inactive_file:20kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:204752kB dirty:160kB writeback:0kB shmem:65956kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1627.441987] Node 1 active_anon:1756kB inactive_anon:35284kB active_file:0kB inactive_file:76kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:4228kB dirty:4kB writeback:0kB shmem:35496kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1627.441991] Node 0 DMA free:10956kB min:204kB low:252kB high:300kB active_anon:12kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1627.442007] lowmem_reserve[]: 0 [ 1627.452957] (UME) [ 1627.458920] 2717 [ 1627.466798] 3*256kB [ 1627.468600] 2718 [ 1627.514147] (ME) [ 1627.538330] 2718 [ 1627.566478] 1*512kB [ 1627.589930] 2718 [ 1627.598770] (E) [ 1627.604645] 3*1024kB [ 1627.606696] Node 0 [ 1627.608656] (UME) [ 1627.611103] DMA32 free:17968kB min:36200kB low:45248kB high:54296kB active_anon:59068kB inactive_anon:61820kB active_file:76kB inactive_file:20kB unevictable:0kB writepending:160kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7520kB pagetables:3264kB bounce:0kB free_pcp:120kB local_pcp:0kB free_cma:0kB [ 1627.611107] lowmem_reserve[]: 0 0 0 0 0 [ 1627.611127] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1627.611143] lowmem_reserve[]: 0 0 [ 1627.625622] 2*2048kB [ 1627.649453] 0 [ 1627.675480] (UE) 0*4096kB = 10960kB [ 1627.684992] Node 0 DMA32: 721*4kB (UME) 468*8kB (UME) 63*16kB (UME) 335*32kB (UME) 1*64kB (M) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18420kB [ 1627.685733] 0 [ 1627.701309] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1627.707836] 0 [ 1627.713873] Node 1 [ 1627.715665] Node 1 [ 1627.715668] Normal: 20*4kB [ 1627.717904] Normal free:26808kB min:53696kB low:67120kB high:80544kB active_anon:1756kB inactive_anon:35284kB active_file:0kB inactive_file:12kB unevictable:0kB writepending:4kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:512kB pagetables:180kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1627.725382] (UM) [ 1627.759526] lowmem_reserve[]: 0 0 0 0 0 [ 1627.765269] 8*8kB (UM) [ 1627.765732] Node 0 DMA: [ 1627.768312] 8*16kB (UME) [ 1627.773490] 6*4kB [ 1627.774313] 777*32kB [ 1627.776255] (UME) [ 1627.778395] (UME) [ 1627.780828] 29*8kB (UME) 29*16kB (UM) 30*32kB (UME) 5*64kB (UME) 4*128kB (UME) 3*256kB (ME) 1*512kB (E) 3*1024kB (UME) 2*2048kB (UE) 0*4096kB = 10960kB [ 1627.780886] Node 0 DMA32: 721*4kB [ 1627.786579] 25*64kB [ 1627.801160] (UME) 468*8kB (UME) 63*16kB (UME) 335*32kB (UME) 1*64kB (M) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18420kB [ 1627.809478] (U) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 26736kB [ 1627.819153] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1627.832210] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1627.837275] Node 1 Normal: 20*4kB (UM) [ 1627.846548] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1627.847284] 8*8kB [ 1627.852948] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1627.859855] (UM) [ 1627.865284] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1627.876784] 8*16kB [ 1627.883362] 25469 total pagecache pages [ 1627.889581] 0 pages in swap cache [ 1627.892053] (UME) 777*32kB (UME) 25*64kB (U) 0*128kB 0*256kB 0*512kB 0*1024kB [ 1627.893064] Swap cache stats: add 0, delete 0, find 0/0 [ 1627.893070] 0*2048kB [ 1627.902341] Free swap = 0kB [ 1627.911361] Total swap = 0kB [ 1627.914387] 2097051 pages RAM [ 1627.917486] 0 pages HighMem/MovableOnly [ 1627.923214] 0*4096kB = 26736kB [ 1627.923707] 363849 pages reserved [ 1627.926419] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1627.929882] 0 pages cma reserved [ 1627.945996] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1627.955839] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1627.970181] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1627.979780] 25837 total pagecache pages [ 1628.025540] 0 pages in swap cache [ 1628.029087] Swap cache stats: add 0, delete 0, find 0/0 [ 1628.050902] systemd[1]: systemd-journald.service: Main process exited, code=exited, status=203/EXEC [ 1628.077231] Free swap = 0kB [ 1628.084898] Total swap = 0kB [ 1628.107841] systemd[1]: Failed to start Journal Service. [ 1628.113398] 2097051 pages RAM [ 1628.116574] 0 pages HighMem/MovableOnly [ 1628.129861] 363849 pages reserved [ 1628.133341] 0 pages cma reserved [ 1628.136710] Out of memory (oom_kill_allocating_task): Kill process 7960 (syz-fuzzer) score 0 or sacrifice child [ 1628.164848] systemd[1]: systemd-journald.service: Unit entered failed state. [ 1628.178324] systemd[1]: systemd-journald.service: Failed with result 'exit-code'. [ 1628.188702] Killed process 27323 (syz-executor.4) total-vm:84924kB, anon-rss:60kB, file-rss:0kB, shmem-rss:0kB [ 1628.238613] systemd[1]: systemd-journald.service: Service has no hold-off time, scheduling restart. [ 1628.268120] oom_reaper: reaped process 27323 (syz-executor.4), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1628.292140] systemd[1]: Stopped Journal Service. [ 1628.746873] syz-executor.0 invoked oom-killer: gfp_mask=0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null), order=0, oom_score_adj=1000 [ 1628.777674] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 1628.786260] CPU: 0 PID: 28726 Comm: syz-executor.0 Not tainted 4.14.232-syzkaller #0 [ 1628.794152] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1628.803508] Call Trace: [ 1628.806108] dump_stack+0x1b2/0x281 [ 1628.809739] dump_header+0x178/0x82f [ 1628.813456] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1628.818573] ? ___ratelimit+0x2cd/0x530 [ 1628.822556] oom_kill_process.cold+0x10/0xa40 [ 1628.827063] out_of_memory+0xe3e/0x1190 [ 1628.831158] ? oom_killer_disable+0x1c0/0x1c0 [ 1628.835664] ? mutex_trylock+0x152/0x1a0 [ 1628.839852] __alloc_pages_nodemask+0x23e1/0x2720 [ 1628.844703] ? lock_acquire+0x170/0x3f0 [ 1628.848797] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1628.853641] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1628.858149] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1628.863604] ? retint_kernel+0x2d/0x2d [ 1628.867498] alloc_pages_current+0x155/0x260 [ 1628.871920] ion_page_pool_alloc+0x118/0x1b0 [ 1628.876334] ion_system_heap_allocate+0x133/0x8c0 [ 1628.881282] ? _raw_spin_unlock+0x29/0x40 [ 1628.885438] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1628.890375] ? ion_system_contig_heap_create+0x130/0x130 [ 1628.895924] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1628.900928] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1628.905761] ion_alloc+0x27a/0x810 [ 1628.909293] ? ion_dma_buf_release+0x40/0x40 [ 1628.913692] ? __might_fault+0x177/0x1b0 [ 1628.917818] ion_ioctl+0xea/0x1f0 [ 1628.921262] ? ion_query_heaps+0x360/0x360 [ 1628.925485] ? ion_query_heaps+0x360/0x360 [ 1628.929752] do_vfs_ioctl+0x75a/0xff0 [ 1628.933542] ? ioctl_preallocate+0x1a0/0x1a0 [ 1628.937938] ? lock_downgrade+0x740/0x740 [ 1628.942077] ? __fget+0x225/0x360 [ 1628.945517] ? do_vfs_ioctl+0xff0/0xff0 [ 1628.949478] ? security_file_ioctl+0x83/0xb0 [ 1628.953876] SyS_ioctl+0x7f/0xb0 [ 1628.957228] ? do_vfs_ioctl+0xff0/0xff0 [ 1628.961191] do_syscall_64+0x1d5/0x640 [ 1628.965072] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1628.970248] RIP: 0033:0x4665f9 [ 1628.973514] RSP: 002b:00007fc8c6af5188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1628.981210] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1628.988470] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1628.995726] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1629.002986] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1629.010244] R13: 00007ffdd42e705f R14: 00007fc8c6af5300 R15: 0000000000022000 [ 1629.020120] syz-executor.4: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1629.020147] syz-executor.4 cpuset= [ 1629.031976] syz-executor.2: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1629.038743] Mem-Info: [ 1629.047403] syz-executor.5: [ 1629.053141] active_anon:15064 inactive_anon:24276 isolated_anon:0 [ 1629.053141] active_file:18 inactive_file:5 isolated_file:0 [ 1629.053141] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1629.053141] slab_reclaimable:12774 slab_unreclaimable:121988 [ 1629.053141] mapped:43537 shmem:25363 pagetables:736 bounce:0 [ 1629.053141] free:13926 free_pcp:38 free_cma:0 [ 1629.060695] page allocation failure: order:0 [ 1629.092654] / mems_allowed=0-1 [ 1629.099923] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 1629.102393] CPU: 0 PID: 28750 Comm: syz-executor.4 Not tainted 4.14.232-syzkaller #0 [ 1629.115270] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1629.119781] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1629.124616] Call Trace: [ 1629.124622] (null) [ 1629.131713] dump_stack+0x1b2/0x281 [ 1629.131727] warn_alloc.cold+0x96/0x1cc [ 1629.143990] ? zone_watermark_ok_safe+0x220/0x220 [ 1629.148824] ? usleep_range+0x130/0x130 [ 1629.149745] syz-executor.5 cpuset= [ 1629.152788] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1629.152800] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1629.156319] / [ 1629.161411] ? run_timer_softirq+0x5a0/0x5a0 [ 1629.172646] __alloc_pages_nodemask+0x2127/0x2720 [ 1629.177599] ? lock_acquire+0x170/0x3f0 [ 1629.181569] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1629.186409] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1629.189738] mems_allowed=0-1 [ 1629.190897] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1629.199418] ? retint_kernel+0x2d/0x2d [ 1629.203316] alloc_pages_current+0x155/0x260 [ 1629.207732] ion_page_pool_alloc+0x118/0x1b0 [ 1629.212146] ion_system_heap_allocate+0x133/0x8c0 [ 1629.216976] ? _raw_spin_unlock+0x29/0x40 [ 1629.221111] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1629.226026] ? ion_system_contig_heap_create+0x130/0x130 [ 1629.231466] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1629.236473] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1629.241302] ion_alloc+0x27a/0x810 [ 1629.244835] ? ion_dma_buf_release+0x40/0x40 [ 1629.249230] ? __might_fault+0x177/0x1b0 [ 1629.253278] ion_ioctl+0xea/0x1f0 [ 1629.256721] ? ion_query_heaps+0x360/0x360 [ 1629.260947] ? ion_query_heaps+0x360/0x360 [ 1629.265218] do_vfs_ioctl+0x75a/0xff0 [ 1629.269006] ? ioctl_preallocate+0x1a0/0x1a0 [ 1629.273400] ? lock_downgrade+0x740/0x740 [ 1629.277536] ? __fget+0x225/0x360 [ 1629.280977] ? do_vfs_ioctl+0xff0/0xff0 [ 1629.284938] ? security_file_ioctl+0x83/0xb0 [ 1629.289333] SyS_ioctl+0x7f/0xb0 [ 1629.292697] ? do_vfs_ioctl+0xff0/0xff0 [ 1629.296667] do_syscall_64+0x1d5/0x640 [ 1629.300545] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1629.305723] RIP: 0033:0x4665f9 [ 1629.308898] RSP: 002b:00007fbffd9c3188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1629.316598] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1629.323860] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1629.331116] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1629.338372] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1629.345631] R13: 00007fff1427db3f R14: 00007fbffd9c3300 R15: 0000000000022000 [ 1629.352901] CPU: 1 PID: 28728 Comm: syz-executor.2 Not tainted 4.14.232-syzkaller #0 [ 1629.360796] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1629.363964] Node 0 active_anon:58804kB inactive_anon:61820kB active_file:44kB inactive_file:44kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:169884kB dirty:0kB writeback:0kB shmem:65956kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1629.370143] Call Trace: [ 1629.370160] dump_stack+0x1b2/0x281 [ 1629.370174] warn_alloc.cold+0x96/0x1cc [ 1629.370184] ? zone_watermark_ok_safe+0x220/0x220 [ 1629.370193] ? usleep_range+0x130/0x130 [ 1629.370201] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1629.370214] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1629.402647] Node 1 active_anon:1452kB inactive_anon:35284kB active_file:20kB inactive_file:16kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:4200kB dirty:0kB writeback:0kB shmem:35496kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1629.404076] ? run_timer_softirq+0x5a0/0x5a0 [ 1629.408031] Node 0 [ 1629.412870] __alloc_pages_nodemask+0x2127/0x2720 [ 1629.412887] ? lock_acquire+0x170/0x3f0 [ 1629.412901] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1629.412910] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1629.412926] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1629.412945] alloc_pages_current+0x155/0x260 [ 1629.416949] DMA free:11004kB min:204kB low:252kB high:300kB active_anon:112kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1629.421989] ion_page_pool_alloc+0x118/0x1b0 [ 1629.422000] ion_system_heap_allocate+0x133/0x8c0 [ 1629.422010] ? _raw_spin_unlock+0x29/0x40 [ 1629.422018] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1629.422027] ? ion_system_contig_heap_create+0x130/0x130 [ 1629.422036] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1629.422047] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1629.422056] ion_alloc+0x27a/0x810 [ 1629.422069] ? ion_dma_buf_release+0x40/0x40 [ 1629.431541] lowmem_reserve[]: [ 1629.454130] ? __might_fault+0x177/0x1b0 [ 1629.454144] ion_ioctl+0xea/0x1f0 [ 1629.454153] ? ion_query_heaps+0x360/0x360 [ 1629.454163] ? ion_query_heaps+0x360/0x360 [ 1629.454173] do_vfs_ioctl+0x75a/0xff0 [ 1629.454185] ? ioctl_preallocate+0x1a0/0x1a0 [ 1629.454193] ? lock_downgrade+0x740/0x740 [ 1629.454204] ? __fget+0x225/0x360 [ 1629.454213] ? do_vfs_ioctl+0xff0/0xff0 [ 1629.454224] ? security_file_ioctl+0x83/0xb0 [ 1629.454234] SyS_ioctl+0x7f/0xb0 [ 1629.454243] ? do_vfs_ioctl+0xff0/0xff0 [ 1629.462889] 0 [ 1629.465743] do_syscall_64+0x1d5/0x640 [ 1629.469697] 2717 [ 1629.474539] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1629.479006] 2718 [ 1629.484442] RIP: 0033:0x4665f9 [ 1629.484447] RSP: 002b:00007f66397b6188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1629.484457] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1629.484462] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1629.484466] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1629.484470] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1629.484475] R13: 00007fff59ca014f R14: 00007f66397b6300 R15: 0000000000022000 [ 1629.496806] CPU: 1 PID: 28736 Comm: syz-executor.5 Not tainted 4.14.232-syzkaller #0 [ 1629.514720] 2718 [ 1629.519014] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1629.523870] 2718 [ 1629.527972] Call Trace: [ 1629.538332] dump_stack+0x1b2/0x281 [ 1629.543357] Node 0 [ 1629.548161] warn_alloc.cold+0x96/0x1cc [ 1629.551774] DMA32 free:18052kB min:36200kB low:45248kB high:54296kB active_anon:58692kB inactive_anon:61820kB active_file:44kB inactive_file:44kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7456kB pagetables:2764kB bounce:0kB free_pcp:152kB local_pcp:152kB free_cma:0kB [ 1629.556136] ? zone_watermark_ok_safe+0x220/0x220 [ 1629.559218] lowmem_reserve[]: [ 1629.563268] ? usleep_range+0x130/0x130 [ 1629.563278] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1629.563290] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1629.563299] ? run_timer_softirq+0x5a0/0x5a0 [ 1629.563316] __alloc_pages_nodemask+0x2127/0x2720 [ 1629.566768] 0 [ 1629.570980] ? lock_acquire+0x170/0x3f0 [ 1629.570996] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1629.571004] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1629.571019] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1629.575238] 0 [ 1629.579046] alloc_pages_current+0x155/0x260 [ 1629.583471] 0 [ 1629.587576] ion_page_pool_alloc+0x118/0x1b0 [ 1629.591209] 0 [ 1629.595145] ion_system_heap_allocate+0x133/0x8c0 [ 1629.599530] 0 [ 1629.602894] ? ion_alloc+0x187/0x810 [ 1629.602909] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1629.602919] ? ion_system_contig_heap_create+0x130/0x130 [ 1629.602927] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1629.602940] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1629.608696] ion_alloc+0x204/0x810 [ 1629.612621] Node 0 [ 1629.614623] ? ion_dma_buf_release+0x40/0x40 [ 1629.619840] warn_alloc_show_mem: 2 callbacks suppressed [ 1629.619843] Mem-Info: [ 1629.621854] ? __might_fault+0x177/0x1b0 [ 1629.625035] active_anon:15064 inactive_anon:24276 isolated_anon:0 [ 1629.625035] active_file:16 inactive_file:15 isolated_file:0 [ 1629.625035] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1629.625035] slab_reclaimable:12774 slab_unreclaimable:121963 [ 1629.625035] mapped:43521 shmem:25363 pagetables:736 bounce:0 [ 1629.625035] free:13958 free_pcp:40 free_cma:0 [ 1629.632746] ion_ioctl+0xea/0x1f0 [ 1629.632755] ? ion_query_heaps+0x360/0x360 [ 1629.632766] ? ion_query_heaps+0x360/0x360 [ 1629.632776] do_vfs_ioctl+0x75a/0xff0 [ 1629.632788] ? ioctl_preallocate+0x1a0/0x1a0 [ 1629.640110] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1629.647323] ? lock_downgrade+0x740/0x740 [ 1629.654616] lowmem_reserve[]: [ 1629.661900] ? __fget+0x225/0x360 [ 1629.661911] ? do_vfs_ioctl+0xff0/0xff0 [ 1629.661921] ? security_file_ioctl+0x83/0xb0 [ 1629.661931] SyS_ioctl+0x7f/0xb0 [ 1629.669209] Node 0 active_anon:58804kB inactive_anon:61820kB active_file:44kB inactive_file:44kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:169884kB dirty:0kB writeback:0kB shmem:65956kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1629.677061] ? do_vfs_ioctl+0xff0/0xff0 [ 1629.677073] do_syscall_64+0x1d5/0x640 [ 1629.677087] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1629.677094] RIP: 0033:0x4665f9 [ 1629.677101] RSP: 002b:00007f87ada6b188 EFLAGS: 00000246 [ 1629.679165] Node 1 active_anon:1452kB inactive_anon:35284kB active_file:20kB inactive_file:16kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:4200kB dirty:0kB writeback:0kB shmem:35496kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1629.688495] ORIG_RAX: 0000000000000010 [ 1629.688501] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1629.688506] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1629.688510] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1629.688515] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1629.688520] R13: 00007fff979d8a6f R14: 00007f87ada6b300 R15: 0000000000022000 [ 1629.826299] 0 [ 1629.831274] Node 0 [ 1629.841336] 0 [ 1629.847348] DMA free:11004kB min:204kB low:252kB high:300kB active_anon:112kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1629.869707] 0 [ 1629.887170] lowmem_reserve[]: [ 1629.929705] 0 [ 1629.932937] 0 [ 1629.942812] 0 [ 1629.943751] 2717 [ 1629.983176] 2718 [ 1630.012495] Node 1 [ 1630.031871] 2718 [ 1630.075333] Normal free:380724kB min:53696kB low:67120kB high:80544kB active_anon:1452kB inactive_anon:35284kB active_file:16kB inactive_file:1696kB unevictable:0kB writepending:4kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:480kB pagetables:180kB bounce:0kB free_pcp:192kB local_pcp:108kB free_cma:0kB [ 1630.081481] 2718 [ 1630.151099] lowmem_reserve[]: 0 0 0 0 0 [ 1630.157159] Node 0 DMA: 11*4kB (UME) 10*8kB (ME) 12*16kB (UM) 8*32kB (UME) 18*64kB (UME) 4*128kB (UME) 1*256kB (E) 1*512kB (E) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (U) = 11196kB [ 1630.173509] Node 0 DMA32 free:115380kB min:36200kB low:45248kB high:54296kB active_anon:58692kB inactive_anon:61820kB active_file:44kB inactive_file:1500kB unevictable:0kB writepending:160kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7456kB pagetables:2764kB bounce:0kB free_pcp:328kB local_pcp:204kB free_cma:0kB [ 1630.202938] Node 0 DMA32: 313*4kB (UME) 496*8kB (UME) 69*16kB (UME) 16*32kB (UME) 1440*64kB (UM) 102*128kB (U) 13*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 115380kB [ 1630.218791] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1630.229576] lowmem_reserve[]: 0 0 0 0 0 [ 1630.233892] Node 1 Normal: 552*4kB (UM) 5*8kB (U) 70*16kB (UME) 9*32kB (UME) 5180*64kB (UM) 974*128kB (UM) 338*256kB (U) 73*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 583752kB [ 1630.249971] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1630.276066] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1630.285117] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1630.294077] lowmem_reserve[]: 0 0 0 0 0 [ 1630.298096] Node 1 Normal free:586192kB min:53696kB low:67120kB high:80544kB active_anon:1452kB inactive_anon:35284kB active_file:16kB inactive_file:1696kB unevictable:0kB writepending:4kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:480kB pagetables:180kB bounce:0kB free_pcp:828kB local_pcp:84kB free_cma:0kB [ 1630.327370] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1630.336283] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1630.345182] 26177 total pagecache pages [ 1630.349180] 0 pages in swap cache [ 1630.352888] Swap cache stats: add 0, delete 0, find 0/0 [ 1630.358255] Free swap = 0kB [ 1630.361548] lowmem_reserve[]: 0 0 0 0 0 [ 1630.365558] Node 0 DMA: 23*4kB (UME) 17*8kB (UME) 12*16kB (UM) 8*32kB (UME) 14*64kB (UME) 5*128kB (UME) 1*256kB (E) 1*512kB (E) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (U) = 11172kB [ 1630.381874] Total swap = 0kB [ 1630.384911] 2097051 pages RAM [ 1630.388021] 0 pages HighMem/MovableOnly [ 1630.393622] 363849 pages reserved [ 1630.397089] 0 pages cma reserved [ 1630.400707] Node 0 DMA32: 419*4kB (UME) 568*8kB (UME) 142*16kB (UME) 718*32kB (UME) 47*64kB (UM) 81*128kB (U) 13*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 48172kB [ 1630.415947] Out of memory (oom_kill_allocating_task): Kill process 28726 (syz-executor.0) score 0 or sacrifice child [ 1630.426938] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1630.438023] Killed process 28726 (syz-executor.0) total-vm:93384kB, anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1630.448418] Node 1 Normal: 833*4kB (UM) 301*8kB (U) 543*16kB (UME) 528*32kB (UME) 1871*64kB (UM) 1187*128kB (UM) 356*256kB (U) 73*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 431516kB [ 1630.465134] syz-executor.0: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1630.477385] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 1630.482680] CPU: 0 PID: 28726 Comm: syz-executor.0 Not tainted 4.14.232-syzkaller #0 [ 1630.490568] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1630.500053] Call Trace: [ 1630.502656] dump_stack+0x1b2/0x281 [ 1630.506302] warn_alloc.cold+0x96/0x1cc [ 1630.510285] ? lock_downgrade+0x740/0x740 [ 1630.514441] ? zone_watermark_ok_safe+0x220/0x220 [ 1630.519288] ? wake_up_q+0x82/0xd0 [ 1630.522855] ? wait_for_completion_io+0x10/0x10 [ 1630.527545] __alloc_pages_nodemask+0x2127/0x2720 [ 1630.532405] ? lock_acquire+0x170/0x3f0 [ 1630.536387] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1630.541236] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1630.545753] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1630.551220] ? retint_kernel+0x2d/0x2d [ 1630.555133] alloc_pages_current+0x155/0x260 [ 1630.559671] ion_page_pool_alloc+0x118/0x1b0 [ 1630.564183] ion_system_heap_allocate+0x133/0x8c0 [ 1630.569047] ? _raw_spin_unlock+0x29/0x40 [ 1630.573204] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1630.578139] ? ion_system_contig_heap_create+0x130/0x130 [ 1630.583601] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1630.588635] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1630.593488] ion_alloc+0x27a/0x810 [ 1630.597035] ? ion_dma_buf_release+0x40/0x40 [ 1630.601452] ? __might_fault+0x177/0x1b0 [ 1630.605532] ion_ioctl+0xea/0x1f0 [ 1630.608997] ? ion_query_heaps+0x360/0x360 [ 1630.613246] ? ion_query_heaps+0x360/0x360 [ 1630.617483] do_vfs_ioctl+0x75a/0xff0 [ 1630.621293] ? ioctl_preallocate+0x1a0/0x1a0 [ 1630.625724] ? lock_downgrade+0x740/0x740 [ 1630.629989] ? __fget+0x225/0x360 [ 1630.633652] ? do_vfs_ioctl+0xff0/0xff0 [ 1630.637630] ? security_file_ioctl+0x83/0xb0 [ 1630.642051] SyS_ioctl+0x7f/0xb0 [ 1630.645563] ? do_vfs_ioctl+0xff0/0xff0 [ 1630.649668] do_syscall_64+0x1d5/0x640 [ 1630.653580] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1630.658777] RIP: 0033:0x4665f9 [ 1630.661977] RSP: 002b:00007fc8c6af5188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1630.669702] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1630.676972] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1630.684418] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1630.691708] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1630.699230] R13: 00007ffdd42e705f R14: 00007fc8c6af5300 R15: 0000000000022000 [ 1630.707582] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1630.717074] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1630.726392] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1630.735979] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1630.747544] 26621 total pagecache pages [ 1630.753168] 0 pages in swap cache [ 1630.757288] Swap cache stats: add 0, delete 0, find 0/0 [ 1630.766301] Free swap = 0kB [ 1630.770452] Total swap = 0kB [ 1630.773893] 2097051 pages RAM [ 1630.777425] 0 pages HighMem/MovableOnly [ 1630.782167] 363849 pages reserved [ 1630.785995] 0 pages cma reserved [ 1630.849840] warn_alloc_show_mem: 2 callbacks suppressed [ 1630.849844] Mem-Info: [ 1630.857882] active_anon:15064 inactive_anon:24276 isolated_anon:0 [ 1630.857882] active_file:140 inactive_file:1824 isolated_file:0 [ 1630.857882] unevictable:0 dirty:29 writeback:0 unstable:0 [ 1630.857882] slab_reclaimable:12771 slab_unreclaimable:121940 [ 1630.857882] mapped:44788 shmem:25363 pagetables:699 bounce:0 [ 1630.857882] free:68223 free_pcp:373 free_cma:0 [ 1630.917278] Node 0 active_anon:58872kB inactive_anon:61820kB active_file:552kB inactive_file:6132kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:174144kB dirty:116kB writeback:0kB shmem:65956kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1630.945882] Node 1 active_anon:1452kB inactive_anon:35284kB active_file:16kB inactive_file:1832kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:5616kB dirty:4kB writeback:0kB shmem:35496kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1630.948627] syz-executor.5: [ 1630.979254] Node 0 DMA free:11004kB min:204kB low:252kB high:300kB active_anon:112kB inactive_anon:0kB active_file:0kB inactive_file:64kB unevictable:0kB writepending:4kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1630.999637] page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1631.010431] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1631.026088] Node 0 DMA32 free:264228kB min:36200kB low:45248kB high:54296kB active_anon:58844kB inactive_anon:61820kB active_file:600kB inactive_file:7196kB unevictable:0kB writepending:168kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7424kB pagetables:2640kB bounce:0kB free_pcp:1136kB local_pcp:420kB free_cma:0kB [ 1631.049639] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 1631.057773] lowmem_reserve[]: 0 0 0 0 0 [ 1631.066042] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1631.079648] CPU: 1 PID: 28736 Comm: syz-executor.5 Not tainted 4.14.232-syzkaller #0 [ 1631.092406] lowmem_reserve[]: [ 1631.099448] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1631.099458] 0 [ 1631.102548] Call Trace: [ 1631.102565] dump_stack+0x1b2/0x281 [ 1631.102579] warn_alloc.cold+0x96/0x1cc [ 1631.102589] ? zone_watermark_ok_safe+0x220/0x220 [ 1631.102611] __alloc_pages_nodemask+0x2127/0x2720 [ 1631.102627] ? lock_acquire+0x170/0x3f0 [ 1631.102643] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1631.102661] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1631.102674] ? __mutex_unlock_slowpath+0x75/0x770 [ 1631.102684] ? alloc_pages_current+0xe3/0x260 [ 1631.102696] alloc_pages_current+0x155/0x260 [ 1631.102708] ion_page_pool_alloc+0x118/0x1b0 [ 1631.102717] ion_system_heap_allocate+0x133/0x8c0 [ 1631.102728] ? _raw_spin_unlock+0x29/0x40 [ 1631.112144] 0 [ 1631.113868] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1631.116434] 0 [ 1631.120051] ? ion_system_contig_heap_create+0x130/0x130 [ 1631.120061] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1631.120071] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1631.120081] ion_alloc+0x27a/0x810 [ 1631.120094] ? ion_dma_buf_release+0x40/0x40 [ 1631.120108] ? __might_fault+0x177/0x1b0 [ 1631.126507] 0 [ 1631.129028] ion_ioctl+0xea/0x1f0 [ 1631.133916] 0 [ 1631.137856] ? ion_query_heaps+0x360/0x360 [ 1631.148122] ? ion_query_heaps+0x360/0x360 [ 1631.153010] Node 1 [ 1631.157437] do_vfs_ioctl+0x75a/0xff0 [ 1631.161869] Normal free:99812kB min:53696kB low:67120kB high:80544kB active_anon:1452kB inactive_anon:35284kB active_file:20kB inactive_file:1828kB unevictable:0kB writepending:12kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:480kB pagetables:180kB bounce:0kB free_pcp:760kB local_pcp:68kB free_cma:0kB [ 1631.166236] ? ioctl_preallocate+0x1a0/0x1a0 [ 1631.171207] lowmem_reserve[]: [ 1631.175288] ? lock_downgrade+0x740/0x740 [ 1631.177068] 0 [ 1631.181987] ? __fget+0x225/0x360 [ 1631.181996] ? do_vfs_ioctl+0xff0/0xff0 [ 1631.182007] ? security_file_ioctl+0x83/0xb0 [ 1631.182016] SyS_ioctl+0x7f/0xb0 [ 1631.182023] ? do_vfs_ioctl+0xff0/0xff0 [ 1631.182034] do_syscall_64+0x1d5/0x640 [ 1631.182049] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1631.189673] 0 [ 1631.194280] RIP: 0033:0x4665f9 [ 1631.199103] 0 [ 1631.202628] RSP: 002b:00007f87ada6b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1631.202638] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1631.202643] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1631.202648] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1631.202652] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1631.202657] R13: 00007fff979d8a6f R14: 00007f87ada6b300 R15: 0000000000022000 [ 1631.354172] 0 0 [ 1631.356152] Node 0 DMA: 23*4kB (UE) 19*8kB (UME) 14*16kB (UM) 9*32kB (UME) 11*64kB (UME) 5*128kB (UME) 1*256kB (E) 1*512kB (E) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (U) = 11060kB [ 1631.372302] Node 0 DMA32: 9114*4kB (UME) 10486*8kB (UME) 7329*16kB (UME) 2697*32kB (UE) 213*64kB (U) 147*128kB (UM) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 356360kB [ 1631.387926] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1631.411940] Node 1 Normal: 1137*4kB (UM) 1703*8kB (UM) 1512*16kB (UME) 1233*32kB (UME) 821*64kB (U) 55*128kB (U) 17*256kB (U) 2*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 146780kB [ 1631.428310] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1631.438173] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1631.446882] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1631.456278] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1631.464917] 28033 total pagecache pages [ 1631.468901] 0 pages in swap cache [ 1631.472660] Swap cache stats: add 0, delete 0, find 0/0 [ 1631.478030] Free swap = 0kB [ 1631.481314] Total swap = 0kB [ 1631.484339] 2097051 pages RAM [ 1631.487448] 0 pages HighMem/MovableOnly [ 1631.491681] 363849 pages reserved [ 1631.495146] 0 pages cma reserved 22:11:08 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) sendmsg$unix(r1, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x80000000, 0x6}) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) 22:11:08 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) sendmsg$unix(r1, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x80000000, 0x6}) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000280)=ANY=[@ANYBLOB="40000000d05dfd0cf6aadfcd1c2c8204548f7ad25fb20c9fc1b948acee1bf738a8e2f89ba8ad644647776e1929696b34254e5dffa31fab7db2587004efe13e6e76fca3797168ba0ca323227067252996e8b160c2bec95a5f9f90491af03c1f501e1720021bfe4f682947ba1614a12e86a754", @ANYRES16=0x0, @ANYBLOB="000328bd7000ffdbdf2502000000080011000000000006000200010000000c0010000000000001000000050014001f00000008000b0000000000"], 0x40}, 0x1, 0x0, 0x0, 0xc000}, 0x8000) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) 22:11:08 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) sendmsg$unix(r1, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x80000000, 0x6}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) 22:11:08 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) sendmsg$unix(r1, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x80000000, 0x6}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) [ 1631.713833] systemd[1]: Starting Load/Save RF Kill Switch Status... 22:11:08 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$unix(0x1, 0x2, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x80000000, 0x6}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000280)=ANY=[@ANYBLOB="40000000d05dfd0cf6aadfcd1c2c8204548f7ad25fb20c9fc1b948acee1bf738a8e2f89ba8ad644647776e1929696b34254e5dffa31fab7db2587004efe13e6e76fca3797168ba0ca323227067252996e8b160c2bec95a5f9f90491af03c1f501e1720021bfe4f682947ba1614a12e86a754", @ANYRES16=0x0, @ANYBLOB="000328bd7000ffdbdf2502000000080011000000000006000200010000000c0010000000000001000000050014001f00000008000b0000000000"], 0x40}, 0x1, 0x0, 0x0, 0xc000}, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) [ 1631.907627] systemd[1]: Started Load/Save RF Kill Switch Status. [ 1632.012387] syz-executor.0: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1632.012477] syz-executor.5: [ 1632.024139] (null) [ 1632.033364] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 1632.037615] syz-executor.3: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1632.038790] syz-executor.2: [ 1632.051228] CPU: 0 PID: 28780 Comm: syz-executor.0 Not tainted 4.14.232-syzkaller #0 [ 1632.062153] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1632.071645] Call Trace: [ 1632.074278] dump_stack+0x1b2/0x281 [ 1632.077929] warn_alloc.cold+0x96/0x1cc [ 1632.081904] ? zone_watermark_ok_safe+0x220/0x220 [ 1632.086773] __alloc_pages_nodemask+0x2127/0x2720 [ 1632.091641] ? _raw_spin_unlock_irq+0x5a/0x80 [ 1632.096154] ? finish_task_switch+0x178/0x610 [ 1632.100787] ? finish_task_switch+0x14d/0x610 [ 1632.105310] ? lock_acquire+0x170/0x3f0 [ 1632.109287] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1632.114211] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1632.119716] ? __mutex_unlock_slowpath+0x75/0x770 [ 1632.124594] ? alloc_pages_current+0x37/0x260 [ 1632.129155] alloc_pages_current+0x155/0x260 [ 1632.133580] ion_page_pool_alloc+0x118/0x1b0 [ 1632.138005] ion_system_heap_allocate+0x133/0x8c0 [ 1632.142884] ? ion_alloc+0x187/0x810 [ 1632.146629] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1632.152118] ? ion_system_contig_heap_create+0x130/0x130 [ 1632.157595] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1632.162635] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1632.167516] ion_alloc+0x204/0x810 [ 1632.171077] ? ion_dma_buf_release+0x40/0x40 [ 1632.175540] ? __might_fault+0x177/0x1b0 [ 1632.179598] ion_ioctl+0xea/0x1f0 [ 1632.183054] ? ion_query_heaps+0x360/0x360 [ 1632.187329] ? ion_query_heaps+0x360/0x360 [ 1632.191595] do_vfs_ioctl+0x75a/0xff0 [ 1632.195394] ? ioctl_preallocate+0x1a0/0x1a0 [ 1632.199905] ? lock_downgrade+0x740/0x740 [ 1632.204051] ? __fget+0x225/0x360 [ 1632.207541] ? do_vfs_ioctl+0xff0/0xff0 [ 1632.211556] ? security_file_ioctl+0x83/0xb0 [ 1632.215974] SyS_ioctl+0x7f/0xb0 [ 1632.219351] ? do_vfs_ioctl+0xff0/0xff0 [ 1632.223368] do_syscall_64+0x1d5/0x640 [ 1632.227248] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1632.232427] RIP: 0033:0x4665f9 [ 1632.235618] RSP: 002b:00007fc8c6af5188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1632.243338] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1632.250614] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1632.257896] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1632.265205] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1632.272481] R13: 00007ffdd42e705f R14: 00007fc8c6af5300 R15: 0000000000022000 [ 1632.283448] page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1632.294408] page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1632.305682] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 1632.305982] syz-executor.3 cpuset= [ 1632.312750] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 1632.324253] CPU: 0 PID: 28778 Comm: syz-executor.5 Not tainted 4.14.232-syzkaller #0 [ 1632.332144] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1632.336153] / [ 1632.341517] Call Trace: [ 1632.346087] dump_stack+0x1b2/0x281 [ 1632.349775] warn_alloc.cold+0x96/0x1cc [ 1632.352418] mems_allowed=0-1 [ 1632.353784] ? zone_watermark_ok_safe+0x220/0x220 [ 1632.353808] ? ath6kl_htc_tx_from_queue+0x1520/0x21d0 [ 1632.353865] __alloc_pages_nodemask+0x2127/0x2720 [ 1632.372037] ? __schedule+0x893/0x1de0 [ 1632.375962] ? lock_acquire+0x170/0x3f0 [ 1632.380026] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1632.384952] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1632.390439] ? __mutex_unlock_slowpath+0x75/0x770 [ 1632.395305] alloc_pages_current+0x155/0x260 [ 1632.399768] ion_page_pool_alloc+0x118/0x1b0 [ 1632.404191] ion_system_heap_allocate+0x133/0x8c0 [ 1632.409070] ? ion_alloc+0x187/0x810 [ 1632.412791] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1632.418285] ? ion_system_contig_heap_create+0x130/0x130 [ 1632.423757] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1632.428786] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1632.433635] ion_alloc+0x204/0x810 [ 1632.437398] ? ion_dma_buf_release+0x40/0x40 [ 1632.441813] ? __might_fault+0x177/0x1b0 [ 1632.445890] ion_ioctl+0xea/0x1f0 [ 1632.449357] ? ion_query_heaps+0x360/0x360 [ 1632.453609] ? ion_query_heaps+0x360/0x360 [ 1632.457844] do_vfs_ioctl+0x75a/0xff0 [ 1632.461646] ? ioctl_preallocate+0x1a0/0x1a0 [ 1632.466059] ? lock_downgrade+0x740/0x740 [ 1632.470238] ? __fget+0x225/0x360 [ 1632.473721] ? do_vfs_ioctl+0xff0/0xff0 [ 1632.477703] ? security_file_ioctl+0x83/0xb0 [ 1632.482126] SyS_ioctl+0x7f/0xb0 [ 1632.485504] ? do_vfs_ioctl+0xff0/0xff0 [ 1632.489537] do_syscall_64+0x1d5/0x640 [ 1632.493485] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1632.498682] RIP: 0033:0x4665f9 [ 1632.501882] RSP: 002b:00007f87ada6b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1632.509609] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1632.516890] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1632.524185] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1632.531600] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1632.538884] R13: 00007fff979d8a6f R14: 00007f87ada6b300 R15: 0000000000022000 [ 1632.546179] CPU: 1 PID: 28776 Comm: syz-executor.3 Not tainted 4.14.232-syzkaller #0 [ 1632.554096] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1632.563469] Call Trace: [ 1632.566077] dump_stack+0x1b2/0x281 [ 1632.569720] warn_alloc.cold+0x96/0x1cc [ 1632.573716] ? zone_watermark_ok_safe+0x220/0x220 [ 1632.578579] __alloc_pages_nodemask+0x2127/0x2720 [ 1632.583439] ? _raw_spin_unlock_irq+0x24/0x80 [ 1632.587945] ? lock_acquire+0x170/0x3f0 [ 1632.591936] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1632.596887] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1632.602352] ? __mutex_unlock_slowpath+0x75/0x770 [ 1632.607204] alloc_pages_current+0x155/0x260 [ 1632.611615] ion_page_pool_alloc+0x118/0x1b0 [ 1632.616019] ion_system_heap_allocate+0x133/0x8c0 [ 1632.620866] ? ion_alloc+0x187/0x810 [ 1632.624590] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1632.630177] ? ion_system_contig_heap_create+0x130/0x130 [ 1632.635814] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1632.640890] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1632.645849] ion_alloc+0x204/0x810 [ 1632.649405] ? ion_dma_buf_release+0x40/0x40 [ 1632.653817] ? __might_fault+0x177/0x1b0 [ 1632.657892] ion_ioctl+0xea/0x1f0 [ 1632.661362] ? ion_query_heaps+0x360/0x360 [ 1632.665605] ? ion_query_heaps+0x360/0x360 [ 1632.669858] do_vfs_ioctl+0x75a/0xff0 [ 1632.673679] ? ioctl_preallocate+0x1a0/0x1a0 [ 1632.678103] ? lock_downgrade+0x740/0x740 [ 1632.682405] ? __fget+0x225/0x360 [ 1632.685899] ? do_vfs_ioctl+0xff0/0xff0 [ 1632.689918] ? security_file_ioctl+0x83/0xb0 [ 1632.694340] SyS_ioctl+0x7f/0xb0 [ 1632.697804] ? do_vfs_ioctl+0xff0/0xff0 [ 1632.701796] do_syscall_64+0x1d5/0x640 [ 1632.705692] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1632.710887] RIP: 0033:0x4665f9 [ 1632.714180] RSP: 002b:00007fd613a46188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1632.721931] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1632.729335] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1632.736603] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1632.743887] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1632.751165] R13: 00007ffce81deb9f R14: 00007fd613a46300 R15: 0000000000022000 [ 1632.758470] CPU: 0 PID: 28777 Comm: syz-executor.2 Not tainted 4.14.232-syzkaller #0 [ 1632.766369] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1632.775760] Call Trace: [ 1632.778419] dump_stack+0x1b2/0x281 [ 1632.782297] warn_alloc.cold+0x96/0x1cc [ 1632.786452] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1632.791494] ? zone_watermark_ok_safe+0x220/0x220 [ 1632.796406] __alloc_pages_nodemask+0x2127/0x2720 [ 1632.801683] ? lock_acquire+0x170/0x3f0 [ 1632.805694] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1632.810570] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1632.816047] ? __mutex_unlock_slowpath+0x75/0x770 [ 1632.820933] alloc_pages_current+0x155/0x260 [ 1632.825376] ion_page_pool_alloc+0x118/0x1b0 [ 1632.829903] ion_system_heap_allocate+0x133/0x8c0 [ 1632.834815] ? ion_alloc+0x187/0x810 [ 1632.838566] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1632.844172] ? ion_system_contig_heap_create+0x130/0x130 [ 1632.849646] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1632.854682] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1632.859536] ion_alloc+0x204/0x810 [ 1632.863109] ? ion_dma_buf_release+0x40/0x40 [ 1632.867555] ? __might_fault+0x177/0x1b0 [ 1632.871634] ion_ioctl+0xea/0x1f0 [ 1632.875104] ? ion_query_heaps+0x360/0x360 [ 1632.879355] ? ion_query_heaps+0x360/0x360 [ 1632.883657] do_vfs_ioctl+0x75a/0xff0 [ 1632.887481] ? ioctl_preallocate+0x1a0/0x1a0 [ 1632.891908] ? lock_downgrade+0x740/0x740 [ 1632.896074] ? __fget+0x225/0x360 [ 1632.899539] ? do_vfs_ioctl+0xff0/0xff0 [ 1632.903532] ? security_file_ioctl+0x83/0xb0 [ 1632.907956] SyS_ioctl+0x7f/0xb0 [ 1632.911342] ? do_vfs_ioctl+0xff0/0xff0 [ 1632.915331] do_syscall_64+0x1d5/0x640 [ 1632.919239] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1632.924438] RIP: 0033:0x4665f9 [ 1632.927641] RSP: 002b:00007f66397b6188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1632.935360] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1632.942806] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1632.950092] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1632.957383] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1632.964656] R13: 00007fff59ca014f R14: 00007f66397b6300 R15: 0000000000022000 [ 1632.974763] warn_alloc_show_mem: 1 callbacks suppressed [ 1632.974766] Mem-Info: [ 1632.982901] active_anon:15199 inactive_anon:24275 isolated_anon:12 [ 1632.982901] active_file:1541 inactive_file:5120 isolated_file:14 [ 1632.982901] unevictable:0 dirty:105 writeback:0 unstable:0 [ 1632.982901] slab_reclaimable:12797 slab_unreclaimable:121632 [ 1632.982901] mapped:39405 shmem:25361 pagetables:737 bounce:0 [ 1632.982901] free:317943 free_pcp:191 free_cma:0 [ 1633.046946] Node 0 active_anon:59456kB inactive_anon:61820kB active_file:5964kB inactive_file:18948kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:151824kB dirty:408kB writeback:0kB shmem:65956kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1633.075402] Node 1 active_anon:1340kB inactive_anon:35280kB active_file:248kB inactive_file:1600kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:5892kB dirty:16kB writeback:0kB shmem:35488kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1633.163647] Node 0 DMA free:11572kB min:204kB low:252kB high:300kB active_anon:112kB inactive_anon:0kB active_file:64kB inactive_file:0kB unevictable:0kB writepending:4kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1633.231776] systemd-journald[28768]: File /run/log/journal/04d8c135ee6b410280ba31a58c89679d/system.journal corrupted or uncleanly shut down, renaming and replacing. [ 1633.259043] lowmem_reserve[]: 0 2717 2718 2718 2718 22:11:09 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$unix(0x1, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x80000000, 0x6}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000280)=ANY=[@ANYBLOB="40000000d05dfd0cf6aadfcd1c2c8204548f7ad25fb20c9fc1b948acee1bf738a8e2f89ba8ad644647776e1929696b34254e5dffa31fab7db2587004efe13e6e76fca3797168ba0ca323227067252996e8b160c2bec95a5f9f90491af03c1f501e1720021bfe4f682947ba1614a12e86a754", @ANYRES16=0x0, @ANYBLOB="000328bd7000ffdbdf2502000000080011000000000006000200010000000c0010000000000001000000050014001f00000008000b0000000000"], 0x40}, 0x1, 0x0, 0x0, 0xc000}, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) [ 1633.269097] Node 0 DMA32 free:586440kB min:36200kB low:45248kB high:54296kB active_anon:59544kB inactive_anon:61820kB active_file:6576kB inactive_file:18236kB unevictable:0kB writepending:404kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7456kB pagetables:2916kB bounce:0kB free_pcp:756kB local_pcp:536kB free_cma:0kB [ 1633.350229] lowmem_reserve[]: 0 0 0 0 0 [ 1633.354769] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1633.424559] lowmem_reserve[]: 0 0 0 0 0 [ 1633.436342] Node 1 Normal free:832060kB min:53696kB low:67120kB high:80544kB active_anon:1340kB inactive_anon:35280kB active_file:248kB inactive_file:1600kB unevictable:0kB writepending:16kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:480kB pagetables:180kB bounce:0kB free_pcp:724kB local_pcp:0kB free_cma:0kB [ 1633.477052] lowmem_reserve[]: 0 0 0 0 0 [ 1633.482575] Node 0 DMA: 23*4kB (UE) 19*8kB (UME) 14*16kB (UM) 9*32kB (UME) 19*64kB (UME) 5*128kB (UME) 1*256kB (E) 1*512kB (E) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (U) = 11572kB [ 1633.508078] Node 0 DMA32: 1*4kB (E) 94*8kB (UME) 6682*16kB (UME) 5435*32kB (UME) 1886*64kB (U) 185*128kB (UM) 3*256kB (UM) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 426740kB [ 1633.546288] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1633.595546] Node 1 Normal: 1298*4kB (UM) 1853*8kB (U) 1758*16kB (UE) 1706*32kB (UE) 5036*64kB (U) 1810*128kB (UM) 493*256kB (U) 96*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 832080kB [ 1633.626184] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1633.679493] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1633.688272] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1633.719483] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1633.728164] 34251 total pagecache pages [ 1633.749506] 0 pages in swap cache [ 1633.752992] Swap cache stats: add 0, delete 0, find 0/0 [ 1633.758372] Free swap = 0kB [ 1633.779404] Total swap = 0kB [ 1633.789490] 2097051 pages RAM [ 1633.792648] 0 pages HighMem/MovableOnly [ 1633.796618] 363849 pages reserved [ 1633.816830] 0 pages cma reserved [ 1633.906136] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1633.923900] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1633.954665] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1633.979044] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1634.010467] device bridge_slave_1 left promiscuous mode [ 1634.033063] bridge0: port 2(bridge_slave_1) entered disabled state [ 1634.059095] device bridge_slave_0 left promiscuous mode [ 1634.085399] bridge0: port 1(bridge_slave_0) entered disabled state [ 1634.128235] device veth1_macvtap left promiscuous mode [ 1634.151919] device veth0_macvtap left promiscuous mode [ 1634.168205] device veth1_vlan left promiscuous mode [ 1634.178808] device veth0_vlan left promiscuous mode [ 1634.530943] device hsr_slave_1 left promiscuous mode [ 1634.552715] device hsr_slave_0 left promiscuous mode [ 1634.634663] team0 (unregistering): Port device team_slave_1 removed [ 1634.684665] team0 (unregistering): Port device team_slave_0 removed [ 1634.746076] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 1634.866537] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 1634.967020] bond0 (unregistering): Released all slaves [ 1635.120846] kworker/u4:7 invoked oom-killer: gfp_mask=0x15080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null), order=3, oom_score_adj=0 [ 1635.219075] kworker/u4:7 cpuset=/ mems_allowed=0-1 [ 1635.276247] CPU: 1 PID: 26936 Comm: kworker/u4:7 Not tainted 4.14.232-syzkaller #0 [ 1635.283984] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1635.293361] Workqueue: events_unbound call_usermodehelper_exec_work [ 1635.299765] Call Trace: [ 1635.302360] dump_stack+0x1b2/0x281 [ 1635.305991] dump_header+0x178/0x82f [ 1635.309706] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1635.314809] ? ___ratelimit+0x2cd/0x530 [ 1635.318786] oom_kill_process.cold+0x10/0xa40 [ 1635.323287] ? lock_downgrade+0x740/0x740 [ 1635.327443] out_of_memory+0x2dc/0x1190 [ 1635.331425] ? oom_killer_disable+0x1c0/0x1c0 [ 1635.335922] ? mutex_trylock+0x152/0x1a0 [ 1635.339985] __alloc_pages_nodemask+0x23e1/0x2720 [ 1635.344939] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1635.350614] ? fs_reclaim_release+0xd0/0x110 [ 1635.355036] ? kmem_cache_alloc_node+0x38b/0x410 [ 1635.359962] copy_process.part.0+0x265/0x71c0 [ 1635.364463] ? __lock_acquire+0x5fc/0x3f20 [ 1635.368709] ? trace_hardirqs_on+0x10/0x10 [ 1635.372944] ? static_obj+0x50/0x50 [ 1635.376579] ? call_usermodehelper_exec_work+0x2a0/0x2a0 [ 1635.382030] ? __cleanup_sighand+0x40/0x40 [ 1635.386284] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1635.391389] ? call_usermodehelper_exec_work+0x2a0/0x2a0 [ 1635.396844] _do_fork+0x184/0xc80 [ 1635.400517] ? fork_idle+0x270/0x270 [ 1635.404386] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1635.409587] ? process_one_work+0x6c4/0x14a0 [ 1635.413994] ? call_usermodehelper_exec_work+0x2a0/0x2a0 [ 1635.419464] kernel_thread+0x2f/0x40 [ 1635.423290] call_usermodehelper_exec_work+0x1ac/0x2a0 [ 1635.428676] ? call_usermodehelper+0x80/0x80 [ 1635.433091] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1635.438550] process_one_work+0x793/0x14a0 [ 1635.442797] ? work_busy+0x320/0x320 [ 1635.446519] ? worker_thread+0x158/0xff0 [ 1635.450589] ? _raw_spin_unlock_irq+0x24/0x80 [ 1635.455175] worker_thread+0x5cc/0xff0 [ 1635.459076] ? rescuer_thread+0xc80/0xc80 [ 1635.463229] kthread+0x30d/0x420 [ 1635.466598] ? kthread_create_on_node+0xd0/0xd0 [ 1635.471271] ret_from_fork+0x24/0x30 [ 1636.973834] Mem-Info: [ 1636.976442] active_anon:15292 inactive_anon:26304 isolated_anon:0 [ 1636.976442] active_file:49 inactive_file:0 isolated_file:0 [ 1636.976442] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1636.976442] slab_reclaimable:12809 slab_unreclaimable:119785 [ 1636.976442] mapped:52612 shmem:27404 pagetables:824 bounce:0 [ 1636.976442] free:25207 free_pcp:54 free_cma:0 [ 1637.018858] Node 0 active_anon:59728kB inactive_anon:69940kB active_file:44kB inactive_file:16kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:171432kB dirty:0kB writeback:0kB shmem:74132kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1637.057305] Node 1 active_anon:1440kB inactive_anon:35276kB active_file:52kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:39016kB dirty:0kB writeback:0kB shmem:35484kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1637.349672] Node 0 DMA free:11044kB min:204kB low:252kB high:300kB active_anon:124kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1637.561720] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1637.566794] Node 0 DMA32 free:36200kB min:36200kB low:45248kB high:54296kB active_anon:59604kB inactive_anon:69940kB active_file:52kB inactive_file:8kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7424kB pagetables:2940kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1637.837135] lowmem_reserve[]: 0 0 0 0 0 [ 1637.867429] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1637.912872] lowmem_reserve[]: 0 0 0 0 0 [ 1637.916875] Node 1 Normal free:53728kB min:53696kB low:67120kB high:80544kB active_anon:1440kB inactive_anon:35276kB active_file:4kB inactive_file:8kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:544kB pagetables:356kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1637.946996] lowmem_reserve[]: 0 0 0 0 0 [ 1637.951053] Node 0 DMA: 9*4kB (ME) 10*8kB (UME) 11*16kB (M) 8*32kB (UME) 14*64kB (UME) 5*128kB (UME) 1*256kB (E) 1*512kB (E) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (U) = 11044kB [ 1637.966992] Node 0 DMA32: 771*4kB (UME) 488*8kB (UME) 78*16kB (UME) 25*32kB (UME) 47*64kB (UM) 184*128kB (UM) 2*256kB (M) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36108kB [ 1637.982710] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1637.993741] Node 1 Normal: 1*4kB (M) 8*8kB (UM) 10*16kB (ME) 4*32kB (UME) 10*64kB (UM) 3*128kB (M) 12*256kB (U) 96*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 53604kB [ 1638.008630] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1638.017479] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1638.026074] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1638.055704] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1638.064498] 27428 total pagecache pages [ 1638.068464] 0 pages in swap cache [ 1638.072516] Swap cache stats: add 0, delete 0, find 0/0 [ 1638.077872] Free swap = 0kB [ 1638.080924] Total swap = 0kB [ 1638.083949] 2097051 pages RAM [ 1638.087041] 0 pages HighMem/MovableOnly [ 1638.091055] 363849 pages reserved [ 1638.094491] 0 pages cma reserved [ 1638.097847] Out of memory: Kill process 28779 (syz-executor.0) score 1004 or sacrifice child [ 1638.106536] Killed process 28780 (syz-executor.0) total-vm:93384kB, anon-rss:160kB, file-rss:34820kB, shmem-rss:0kB [ 1638.135732] oom_reaper: reaped process 28780 (syz-executor.0), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1638.155357] systemd invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1638.168720] systemd cpuset=/ mems_allowed=0-1 [ 1638.176146] CPU: 0 PID: 1 Comm: systemd Not tainted 4.14.232-syzkaller #0 [ 1638.183068] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1638.192526] Call Trace: [ 1638.195108] dump_stack+0x1b2/0x281 [ 1638.198732] dump_header+0x178/0x82f [ 1638.202440] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1638.209963] ? ___ratelimit+0x2cd/0x530 [ 1638.213915] oom_kill_process.cold+0x10/0xa40 [ 1638.218388] ? lock_downgrade+0x740/0x740 [ 1638.222517] out_of_memory+0x2dc/0x1190 [ 1638.226472] ? oom_killer_disable+0x1c0/0x1c0 [ 1638.230946] ? mutex_trylock+0x152/0x1a0 [ 1638.234986] __alloc_pages_nodemask+0x23e1/0x2720 [ 1638.239836] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1638.244661] alloc_pages_current+0x155/0x260 [ 1638.249152] filemap_fault+0x11a1/0x1ad0 [ 1638.253204] ext4_filemap_fault+0x84/0xb0 [ 1638.257328] __do_fault+0xfa/0x380 [ 1638.260845] __handle_mm_fault+0x2497/0x4620 [ 1638.265231] ? vm_insert_page+0x7c0/0x7c0 [ 1638.269392] ? mark_held_locks+0xa6/0xf0 [ 1638.273429] handle_mm_fault+0x455/0x9c0 [ 1638.277482] __do_page_fault+0x549/0xad0 [ 1638.281532] ? spurious_fault+0x640/0x640 [ 1638.285655] ? do_page_fault+0x60/0x500 [ 1638.289604] ? page_fault+0x2f/0x50 [ 1638.293233] page_fault+0x45/0x50 [ 1638.296659] RIP: 0001:0xffffffffffffffff [ 1638.300708] RSP: a513ef50:00007ffd36bb7a60 EFLAGS: 7ffd36bb7780 [ 1638.368988] Mem-Info: [ 1638.377509] active_anon:15266 inactive_anon:26304 isolated_anon:0 [ 1638.377509] active_file:24 inactive_file:0 isolated_file:0 [ 1638.377509] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1638.377509] slab_reclaimable:12789 slab_unreclaimable:119626 [ 1638.377509] mapped:52612 shmem:27404 pagetables:824 bounce:0 [ 1638.377509] free:13917 free_pcp:60 free_cma:0 [ 1638.412566] syz-executor.0: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1638.412612] Node 0 active_anon:59628kB inactive_anon:69940kB active_file:96kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:171432kB dirty:0kB writeback:0kB shmem:74132kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1638.424397] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 1638.424418] CPU: 0 PID: 28780 Comm: syz-executor.0 Not tainted 4.14.232-syzkaller #0 [ 1638.424423] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1638.424427] Call Trace: [ 1638.424446] dump_stack+0x1b2/0x281 [ 1638.424460] warn_alloc.cold+0x96/0x1cc [ 1638.424471] ? zone_watermark_ok_safe+0x220/0x220 [ 1638.424481] ? usleep_range+0x130/0x130 [ 1638.424491] ? try_to_free_pages+0x23f/0x6e0 [ 1638.424501] ? _find_next_bit+0xdb/0x100 [ 1638.424511] ? run_timer_softirq+0x5a0/0x5a0 [ 1638.424527] __alloc_pages_nodemask+0x2127/0x2720 [ 1638.424542] ? lock_acquire+0x170/0x3f0 [ 1638.424557] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1638.475559] Node 1 active_anon:1436kB inactive_anon:35276kB active_file:4kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:39016kB dirty:0kB writeback:0kB shmem:35484kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1638.475565] Node 0 [ 1638.478133] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1638.481761] DMA free:10964kB min:204kB low:252kB high:300kB active_anon:124kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1638.485700] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1638.490526] lowmem_reserve[]: [ 1638.494480] alloc_pages_current+0x155/0x260 [ 1638.498851] 0 [ 1638.502894] ion_page_pool_alloc+0x118/0x1b0 [ 1638.502903] ion_system_heap_allocate+0x133/0x8c0 [ 1638.502912] ? ion_alloc+0x187/0x810 [ 1638.507291] 2717 [ 1638.512239] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1638.512250] ? ion_system_contig_heap_create+0x130/0x130 [ 1638.512260] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1638.516212] 2718 [ 1638.521034] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1638.521046] ion_alloc+0x204/0x810 [ 1638.521059] ? ion_dma_buf_release+0x40/0x40 [ 1638.548020] 2718 [ 1638.550231] ? __might_fault+0x177/0x1b0 [ 1638.550243] ion_ioctl+0xea/0x1f0 [ 1638.554710] 2718 [ 1638.580377] ? ion_query_heaps+0x360/0x360 [ 1638.580389] ? ion_query_heaps+0x360/0x360 [ 1638.580401] do_vfs_ioctl+0x75a/0xff0 [ 1638.588908] ? ioctl_preallocate+0x1a0/0x1a0 [ 1638.593302] Node 0 [ 1638.595075] ? lock_downgrade+0x740/0x740 [ 1638.599495] DMA32 free:17892kB min:36200kB low:45248kB high:54296kB active_anon:59504kB inactive_anon:69940kB active_file:96kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7552kB pagetables:2940kB bounce:0kB free_pcp:120kB local_pcp:0kB free_cma:0kB [ 1638.604310] ? __fget+0x225/0x360 [ 1638.607992] lowmem_reserve[]: [ 1638.610037] ? do_vfs_ioctl+0xff0/0xff0 [ 1638.610048] ? security_file_ioctl+0x83/0xb0 [ 1638.610058] SyS_ioctl+0x7f/0xb0 [ 1638.615478] 0 [ 1638.620905] ? do_vfs_ioctl+0xff0/0xff0 [ 1638.620917] do_syscall_64+0x1d5/0x640 [ 1638.620931] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1638.625912] 0 [ 1638.627968] RIP: 0033:0x4665f9 [ 1638.632821] 0 [ 1638.636401] RSP: 002b:00007fc8c6af5188 EFLAGS: 00000246 [ 1638.640800] 0 [ 1638.642841] ORIG_RAX: 0000000000000010 [ 1638.646876] 0 [ 1638.650307] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1638.650312] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1638.650317] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1638.650322] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1638.650327] R13: 00007ffdd42e705f R14: 00007fc8c6af5300 R15: 0000000000022000 [ 1638.652290] warn_alloc_show_mem: 3 callbacks suppressed [ 1638.652293] Mem-Info: [ 1638.656601] active_anon:15266 inactive_anon:26304 isolated_anon:0 [ 1638.656601] active_file:25 inactive_file:0 isolated_file:0 [ 1638.656601] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1638.656601] slab_reclaimable:12789 slab_unreclaimable:119626 [ 1638.656601] mapped:52612 shmem:27404 pagetables:824 bounce:0 [ 1638.656601] free:13917 free_pcp:60 free_cma:0 [ 1638.686410] Node 0 [ 1638.705362] Node 0 active_anon:59628kB inactive_anon:69940kB active_file:96kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:171432kB dirty:0kB writeback:0kB shmem:74132kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1638.731849] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1638.738770] Node 1 active_anon:1436kB inactive_anon:35276kB active_file:4kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:39016kB dirty:0kB writeback:0kB shmem:35484kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1638.738839] lowmem_reserve[]: [ 1638.742050] Node 0 DMA free:10964kB min:204kB low:252kB high:300kB active_anon:124kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1638.742070] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1638.742092] Node 0 DMA32 free:17768kB min:36200kB low:45248kB high:54296kB active_anon:59504kB inactive_anon:69940kB active_file:0kB inactive_file:88kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7552kB pagetables:2940kB bounce:0kB free_pcp:240kB local_pcp:120kB free_cma:0kB [ 1638.742112] lowmem_reserve[]: 0 0 0 0 0 [ 1638.742132] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1638.742156] lowmem_reserve[]: 0 0 0 0 0 [ 1638.742176] Node 1 Normal free:26812kB min:53696kB low:67120kB high:80544kB active_anon:1436kB inactive_anon:35276kB active_file:4kB inactive_file:8kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:544kB pagetables:356kB bounce:0kB free_pcp:120kB local_pcp:120kB free_cma:0kB [ 1638.766377] 0 [ 1638.773174] lowmem_reserve[]: [ 1638.786225] 0 [ 1638.802319] 0 [ 1638.850529] 0 [ 1638.873005] 0 [ 1638.905830] 0 [ 1638.925483] 0 [ 1638.961856] 0 [ 1638.998005] 0 [ 1639.069950] Node 1 Normal free:26812kB min:53696kB low:67120kB high:80544kB active_anon:1436kB inactive_anon:35276kB active_file:4kB inactive_file:8kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:544kB pagetables:356kB bounce:0kB free_pcp:120kB local_pcp:0kB free_cma:0kB [ 1639.077313] 0 [ 1639.106373] lowmem_reserve[]: 0 0 0 0 0 [ 1639.112216] Node 0 DMA: 9*4kB (ME) 10*8kB (UME) 12*16kB (UM) 7*32kB (ME) 13*64kB (UME) 5*128kB (UME) 1*256kB (E) 1*512kB (E) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (U) = 10964kB [ 1639.138591] Node 0 DMA32: 772*4kB (UME) 495*8kB (UME) 78*16kB (ME) 26*32kB (UME) 7*64kB (UM) 61*128kB (UM) 2*256kB (M) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 17896kB [ 1639.144819] Node 0 [ 1639.164748] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1639.174119] DMA: 9*4kB (ME) 10*8kB (UME) 12*16kB (UM) 7*32kB (ME) 13*64kB (UME) 5*128kB (UME) 1*256kB (E) 1*512kB (E) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (U) = 10964kB [ 1639.182473] Node 1 Normal: 21*4kB (UM) 13*8kB (UM) 12*16kB (UME) 3*32kB (ME) 6*64kB (UM) 3*128kB (M) 0*256kB 50*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 26844kB [ 1639.214093] Node 0 DMA32: 772*4kB (UME) 495*8kB (UME) 78*16kB (ME) 26*32kB (UME) 7*64kB (UM) 61*128kB (UM) 2*256kB (M) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 17896kB [ 1639.222726] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1639.253612] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1639.255460] Node 0 [ 1639.268279] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1639.278393] Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1639.289298] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1639.314232] Node 1 Normal: 21*4kB (UM) 13*8kB (UM) 12*16kB (UME) 3*32kB (ME) 6*64kB (UM) 3*128kB (M) 0*256kB 50*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 26844kB [ 1639.315490] 27428 total pagecache pages [ 1639.343530] 0 pages in swap cache [ 1639.345735] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1639.346978] Swap cache stats: add 0, delete 0, find 0/0 [ 1639.372617] Free swap = 0kB [ 1639.374446] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1639.375633] Total swap = 0kB [ 1639.398036] 2097051 pages RAM [ 1639.401182] 0 pages HighMem/MovableOnly [ 1639.404821] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1639.405143] 363849 pages reserved [ 1639.428092] 0 pages cma reserved [ 1639.431487] Out of memory: Kill process 28775 (syz-executor.2) score 1004 or sacrifice child [ 1639.434279] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1639.449852] Killed process 28777 (syz-executor.2) total-vm:93384kB, anon-rss:160kB, file-rss:34816kB, shmem-rss:0kB [ 1639.462897] 27428 total pagecache pages [ 1639.466979] 0 pages in swap cache [ 1639.478492] Swap cache stats: add 0, delete 0, find 0/0 [ 1639.512761] systemd-rfkill invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1639.533695] Free swap = 0kB [ 1639.536714] Total swap = 0kB [ 1639.545887] 2097051 pages RAM [ 1639.557683] systemd-rfkill cpuset=/ mems_allowed=0-1 [ 1639.565380] 0 pages HighMem/MovableOnly [ 1639.576505] CPU: 1 PID: 28788 Comm: systemd-rfkill Not tainted 4.14.232-syzkaller #0 [ 1639.580813] 363849 pages reserved [ 1639.584521] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1639.587953] 0 pages cma reserved [ 1639.597278] Call Trace: [ 1639.597296] dump_stack+0x1b2/0x281 [ 1639.597307] dump_header+0x178/0x82f [ 1639.597318] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1639.597327] ? ___ratelimit+0x2cd/0x530 [ 1639.597337] oom_kill_process.cold+0x10/0xa40 [ 1639.597353] out_of_memory+0xe3e/0x1190 [ 1639.628140] ? oom_killer_disable+0x1c0/0x1c0 [ 1639.632633] ? mutex_trylock+0x152/0x1a0 [ 1639.636689] __alloc_pages_nodemask+0x23e1/0x2720 [ 1639.641538] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1639.646390] alloc_pages_current+0x155/0x260 [ 1639.650796] filemap_fault+0x11a1/0x1ad0 [ 1639.654860] ext4_filemap_fault+0x84/0xb0 [ 1639.659001] __do_fault+0xfa/0x380 [ 1639.662578] __handle_mm_fault+0x2497/0x4620 [ 1639.666978] ? vm_insert_page+0x7c0/0x7c0 [ 1639.671120] ? compat_poll_select_copy_remaining+0x2c0/0x2c0 [ 1639.676914] ? ktime_get_ts64+0x261/0x3a0 [ 1639.681060] ? mark_held_locks+0xa6/0xf0 [ 1639.685116] handle_mm_fault+0x455/0x9c0 [ 1639.689276] __do_page_fault+0x549/0xad0 [ 1639.693330] ? spurious_fault+0x640/0x640 [ 1639.697467] ? do_page_fault+0x60/0x500 [ 1639.701434] ? page_fault+0x2f/0x50 [ 1639.705054] page_fault+0x45/0x50 [ 1639.708498] RIP: bd76a730:0x1 [ 1639.711594] RSP: e690040:00007ffebd76a738 EFLAGS: 0000000b [ 1639.717442] syz-executor.2: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1639.759623] Mem-Info: [ 1639.786045] active_anon:15266 inactive_anon:26304 isolated_anon:0 [ 1639.786045] active_file:32 inactive_file:1732 isolated_file:0 [ 1639.786045] unevictable:0 dirty:25 writeback:0 unstable:0 [ 1639.786045] slab_reclaimable:12789 slab_unreclaimable:119399 [ 1639.786045] mapped:53887 shmem:27404 pagetables:824 bounce:0 [ 1639.786045] free:73897 free_pcp:412 free_cma:0 [ 1639.822801] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 1639.828515] CPU: 1 PID: 28777 Comm: syz-executor.2 Not tainted 4.14.232-syzkaller #0 [ 1639.836413] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1639.845762] Call Trace: [ 1639.848346] dump_stack+0x1b2/0x281 [ 1639.851972] warn_alloc.cold+0x96/0x1cc [ 1639.855941] ? zone_watermark_ok_safe+0x220/0x220 [ 1639.860776] ? usleep_range+0x130/0x130 [ 1639.864748] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1639.869849] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1639.874884] ? run_timer_softirq+0x5a0/0x5a0 [ 1639.879295] __alloc_pages_nodemask+0x2127/0x2720 [ 1639.884136] ? lock_acquire+0x170/0x3f0 [ 1639.888108] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1639.892950] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1639.897448] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1639.902897] ? retint_kernel+0x2d/0x2d [ 1639.906782] alloc_pages_current+0x155/0x260 [ 1639.911187] ion_page_pool_alloc+0x118/0x1b0 [ 1639.915590] ion_system_heap_allocate+0x133/0x8c0 [ 1639.920427] ? ion_alloc+0x187/0x810 [ 1639.924134] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1639.929580] ? ion_system_contig_heap_create+0x130/0x130 [ 1639.935029] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1639.940047] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1639.944883] ion_alloc+0x204/0x810 [ 1639.948437] ? ion_dma_buf_release+0x40/0x40 [ 1639.952843] ? __might_fault+0x177/0x1b0 [ 1639.956898] ion_ioctl+0xea/0x1f0 [ 1639.960352] ? ion_query_heaps+0x360/0x360 [ 1639.964596] ? ion_query_heaps+0x360/0x360 [ 1639.968836] do_vfs_ioctl+0x75a/0xff0 [ 1639.972650] ? ioctl_preallocate+0x1a0/0x1a0 [ 1639.977055] ? lock_downgrade+0x740/0x740 [ 1639.981203] ? __fget+0x225/0x360 [ 1639.984648] ? do_vfs_ioctl+0xff0/0xff0 [ 1639.988615] ? security_file_ioctl+0x83/0xb0 [ 1639.993020] SyS_ioctl+0x7f/0xb0 [ 1639.996383] ? do_vfs_ioctl+0xff0/0xff0 [ 1640.000362] do_syscall_64+0x1d5/0x640 [ 1640.004255] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1640.009437] RIP: 0033:0x4665f9 [ 1640.012620] RSP: 002b:00007f66397b6188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1640.020332] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1640.027617] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1640.034896] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1640.042187] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1640.049449] R13: 00007fff59ca014f R14: 00007f66397b6300 R15: 0000000000022000 [ 1640.062066] Node 0 active_anon:59696kB inactive_anon:69940kB active_file:1304kB inactive_file:5716kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:176624kB dirty:100kB writeback:0kB shmem:74132kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1640.114822] Node 1 active_anon:1592kB inactive_anon:35276kB active_file:212kB inactive_file:264kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:39216kB dirty:4kB writeback:0kB shmem:35484kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1640.178401] Node 0 DMA free:11028kB min:204kB low:252kB high:300kB active_anon:124kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1640.289223] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1640.294291] Node 0 DMA32 free:18996kB min:36200kB low:45248kB high:54296kB active_anon:59572kB inactive_anon:69940kB active_file:600kB inactive_file:1036kB unevictable:0kB writepending:100kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7424kB pagetables:2940kB bounce:0kB free_pcp:188kB local_pcp:0kB free_cma:0kB [ 1640.328518] lowmem_reserve[]: 0 0 0 0 0 [ 1640.333197] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1640.344708] Mem-Info: [ 1640.363824] active_anon:15472 inactive_anon:26304 isolated_anon:0 [ 1640.363824] active_file:17 inactive_file:63 isolated_file:8 [ 1640.363824] unevictable:0 dirty:1 writeback:25 unstable:0 [ 1640.363824] slab_reclaimable:12761 slab_unreclaimable:119689 [ 1640.363824] mapped:52660 shmem:27404 pagetables:935 bounce:0 [ 1640.363824] free:14314 free_pcp:0 free_cma:0 [ 1640.369038] lowmem_reserve[]: 0 0 0 0 0 [ 1640.404590] Node 0 active_anon:59696kB inactive_anon:69940kB active_file:64kB inactive_file:48kB unevictable:0kB isolated(anon):0kB isolated(file):32kB mapped:171624kB dirty:0kB writeback:100kB shmem:74132kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1640.409279] Node 1 [ 1640.432705] syz-executor.0: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1640.435187] Node 1 active_anon:2192kB inactive_anon:35276kB active_file:4kB inactive_file:100kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:39016kB dirty:4kB writeback:0kB shmem:35484kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1640.457933] syz-executor.0 cpuset= [ 1640.478074] Node 0 [ 1640.480591] Normal free:26784kB min:53696kB low:67120kB high:80544kB active_anon:2192kB inactive_anon:35276kB active_file:212kB inactive_file:208kB unevictable:0kB writepending:4kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:704kB pagetables:800kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1640.482772] DMA free:10972kB min:204kB low:252kB high:300kB active_anon:124kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1640.483835] lowmem_reserve[]: [ 1640.514294] lowmem_reserve[]: [ 1640.537672] / mems_allowed=0-1 [ 1640.537699] CPU: 1 PID: 28780 Comm: syz-executor.0 Not tainted 4.14.232-syzkaller #0 [ 1640.537705] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1640.537708] Call Trace: [ 1640.537726] dump_stack+0x1b2/0x281 [ 1640.537740] warn_alloc.cold+0x96/0x1cc [ 1640.545600] 0 [ 1640.547114] ? zone_watermark_ok_safe+0x220/0x220 [ 1640.555087] 2717 [ 1640.564404] __alloc_pages_nodemask+0x2127/0x2720 [ 1640.564420] ? lock_acquire+0x170/0x3f0 [ 1640.564435] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1640.564452] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1640.569295] 2718 [ 1640.570637] ? __mutex_unlock_slowpath+0x75/0x770 [ 1640.574580] 2718 [ 1640.576373] alloc_pages_current+0x155/0x260 [ 1640.582912] 2718 [ 1640.583261] ion_page_pool_alloc+0x118/0x1b0 [ 1640.592035] ion_system_heap_allocate+0x133/0x8c0 [ 1640.592047] ? _raw_spin_unlock+0x29/0x40 [ 1640.592056] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1640.592072] ? ion_system_contig_heap_create+0x130/0x130 [ 1640.592082] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1640.592093] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1640.592108] ion_alloc+0x27a/0x810 [ 1640.597829] Node 0 [ 1640.602381] ? ion_dma_buf_release+0x40/0x40 [ 1640.602395] ? __might_fault+0x177/0x1b0 [ 1640.602406] ion_ioctl+0xea/0x1f0 [ 1640.602415] ? ion_query_heaps+0x360/0x360 [ 1640.602426] ? ion_query_heaps+0x360/0x360 [ 1640.602437] do_vfs_ioctl+0x75a/0xff0 [ 1640.602446] ? ioctl_preallocate+0x1a0/0x1a0 [ 1640.602455] ? lock_downgrade+0x740/0x740 [ 1640.602469] ? __fget+0x225/0x360 [ 1640.606416] DMA32 free:17716kB min:36200kB low:45248kB high:54296kB active_anon:59572kB inactive_anon:69940kB active_file:96kB inactive_file:20kB unevictable:0kB writepending:100kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7424kB pagetables:2940kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1640.609443] ? do_vfs_ioctl+0xff0/0xff0 [ 1640.609455] ? security_file_ioctl+0x83/0xb0 [ 1640.609465] SyS_ioctl+0x7f/0xb0 [ 1640.609473] ? do_vfs_ioctl+0xff0/0xff0 [ 1640.609484] do_syscall_64+0x1d5/0x640 [ 1640.609497] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1640.609506] RIP: 0033:0x4665f9 [ 1640.612149] lowmem_reserve[]: [ 1640.615947] RSP: 002b:00007fc8c6af5188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1640.618006] 0 [ 1640.622388] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1640.622393] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1640.622398] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1640.622403] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1640.622409] R13: 00007ffdd42e705f R14: 00007fc8c6af5300 R15: 0000000000022000 [ 1640.693919] 0 [ 1640.722437] 0 [ 1640.739064] 0 [ 1640.741562] 0 [ 1640.746736] 0 [ 1640.749991] 0 0 [ 1640.750001] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1640.750021] lowmem_reserve[]: 0 0 0 0 0 [ 1640.750040] Node 1 Normal free:26784kB min:53696kB low:67120kB high:80544kB active_anon:2192kB inactive_anon:35276kB active_file:0kB inactive_file:80kB unevictable:0kB writepending:4kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:704kB pagetables:800kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1640.750058] lowmem_reserve[]: 0 0 0 0 0 [ 1640.750074] Node 0 DMA: 9*4kB (ME) 9*8kB (ME) 11*16kB (M) 8*32kB (UME) 13*64kB (UME) 5*128kB (UME) 1*256kB (E) 1*512kB (E) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (U) = 10972kB [ 1640.750154] Node 0 DMA32: 787*4kB (UME) 480*8kB [ 1640.769038] 0 [ 1640.770178] (UME) [ 1640.777421] 0 [ 1640.784706] 78*16kB (UME) 24*32kB (UME) 14*64kB (UME) 58*128kB (UM) 2*256kB (M) 0*512kB 0*1024kB [ 1640.810265] 0*2048kB [ 1640.838041] Node 0 [ 1640.840307] 0*4096kB [ 1640.870656] DMA: [ 1640.872089] = 17836kB [ 1640.906034] 9*4kB [ 1640.907085] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1640.929520] (ME) 9*8kB (ME) 11*16kB (M) 8*32kB (UME) 13*64kB (UME) [ 1640.931504] Node 1 [ 1640.931507] 5*128kB (UME) [ 1640.937887] Normal: 28*4kB (M) 18*8kB (UM) 14*16kB (ME) 9*32kB (UME) 7*64kB (M) 0*128kB 1*256kB (M) 50*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 27072kB [ 1640.957082] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1640.957672] 1*256kB [ 1640.966888] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1640.983089] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1640.988613] (E) [ 1640.992994] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1640.999492] 1*512kB (E) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (U) = 10972kB [ 1641.007159] 27444 total pagecache pages [ 1641.029034] 0 pages in swap cache [ 1641.032489] Swap cache stats: add 0, delete 0, find 0/0 [ 1641.036560] Node 0 DMA32: 789*4kB (UME) 480*8kB (UME) 78*16kB (UME) [ 1641.037877] Free swap = 0kB [ 1641.037882] Total swap = 0kB [ 1641.073082] 24*32kB (UME) 14*64kB (UME) 58*128kB (UM) 2*256kB (M) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 17844kB [ 1641.073200] 2097051 pages RAM [ 1641.106215] 0 pages HighMem/MovableOnly [ 1641.118631] 363849 pages reserved [ 1641.118888] Node 0 [ 1641.122113] 0 pages cma reserved [ 1641.142762] IPVS: ftp: loaded support on port[0] = 21 [ 1641.151904] Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1641.219064] Node 1 Normal: 1*4kB (M) 2*8kB (UM) 2*16kB (UE) 1*32kB (E) 1392*64kB (UM) 5*128kB (U) 2*256kB (UM) 49*512kB (UM) 14*1024kB (U) 0*2048kB 0*4096kB = 129748kB [ 1641.291638] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1641.344237] IPVS: ftp: loaded support on port[0] = 21 [ 1641.351883] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1641.392043] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1641.435169] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1641.444670] 29010 total pagecache pages [ 1641.448653] 0 pages in swap cache [ 1641.471422] Swap cache stats: add 0, delete 0, find 0/0 [ 1641.476796] Free swap = 0kB [ 1641.482184] Total swap = 0kB [ 1641.486285] 2097051 pages RAM [ 1641.503382] 0 pages HighMem/MovableOnly [ 1641.507358] 363849 pages reserved [ 1641.528974] 0 pages cma reserved [ 1641.532352] Out of memory (oom_kill_allocating_task): Kill process 28788 (systemd-rfkill) score 0 or sacrifice child [ 1641.609003] Killed process 28788 (systemd-rfkill) total-vm:37800kB, anon-rss:372kB, file-rss:0kB, shmem-rss:0kB [ 1641.676604] oom_reaper: reaped process 28777 (syz-executor.2), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1641.719321] chnl_net:caif_netlink_parms(): no params data found [ 1641.751951] systemd[1]: systemd-rfkill.service: Main process exited, code=killed, status=9/KILL [ 1641.757551] oom_reaper: reaped process 28778 (syz-executor.5), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1641.792708] systemd[1]: systemd-rfkill.service: Unit entered failed state. [ 1641.829260] Bluetooth: hci4 command 0x0409 tx timeout [ 1641.849079] systemd[1]: systemd-rfkill.service: Failed with result 'signal'. [ 1641.925471] systemd[1]: Starting Load/Save RF Kill Switch Status... [ 1642.117893] chnl_net:caif_netlink_parms(): no params data found [ 1642.142818] systemd[1]: Started Load/Save RF Kill Switch Status. [ 1642.159212] Bluetooth: hci3 command 0x0409 tx timeout [ 1642.289395] bridge0: port 1(bridge_slave_0) entered blocking state [ 1642.295826] bridge0: port 1(bridge_slave_0) entered disabled state [ 1642.322882] device bridge_slave_0 entered promiscuous mode [ 1642.350955] bridge0: port 2(bridge_slave_1) entered blocking state [ 1642.357400] bridge0: port 2(bridge_slave_1) entered disabled state [ 1642.402989] device bridge_slave_1 entered promiscuous mode [ 1642.446074] systemd[1]: Started Journal Service. [ 1642.506172] bridge0: port 1(bridge_slave_0) entered blocking state [ 1642.513027] bridge0: port 1(bridge_slave_0) entered disabled state [ 1642.551915] in:imuxsock invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1642.598950] in:imuxsock cpuset=/ mems_allowed=0-1 [ 1642.603832] CPU: 0 PID: 28344 Comm: in:imuxsock Not tainted 4.14.232-syzkaller #0 [ 1642.611545] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1642.620894] Call Trace: [ 1642.623480] dump_stack+0x1b2/0x281 [ 1642.627088] dump_header+0x178/0x82f [ 1642.630793] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1642.635888] ? ___ratelimit+0x2cd/0x530 [ 1642.639847] oom_kill_process.cold+0x10/0xa40 [ 1642.644331] out_of_memory+0xe3e/0x1190 [ 1642.648309] ? oom_killer_disable+0x1c0/0x1c0 [ 1642.652784] ? mutex_trylock+0x152/0x1a0 [ 1642.656842] __alloc_pages_nodemask+0x23e1/0x2720 [ 1642.661673] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1642.666505] alloc_pages_current+0x155/0x260 [ 1642.670894] filemap_fault+0x11a1/0x1ad0 [ 1642.674940] ext4_filemap_fault+0x84/0xb0 [ 1642.679068] __do_fault+0xfa/0x380 [ 1642.682590] __handle_mm_fault+0x2497/0x4620 [ 1642.686979] ? vm_insert_page+0x7c0/0x7c0 [ 1642.691105] ? __fdget+0x196/0x1f0 [ 1642.694645] ? mark_held_locks+0xa6/0xf0 [ 1642.698700] handle_mm_fault+0x455/0x9c0 [ 1642.702742] __do_page_fault+0x549/0xad0 [ 1642.706786] ? spurious_fault+0x640/0x640 [ 1642.710914] ? do_page_fault+0x60/0x500 [ 1642.714867] ? page_fault+0x2f/0x50 [ 1642.718470] page_fault+0x45/0x50 [ 1642.721902] RIP: c3ca3880:0x7efdc3ca379c [ 1642.725936] RSP: 45e59730:00007efdc3ca37f0 EFLAGS: 7efdc3ca37b8 [ 1642.775929] Mem-Info: [ 1642.786287] active_anon:15234 inactive_anon:26309 isolated_anon:0 [ 1642.786287] active_file:20 inactive_file:21 isolated_file:1 [ 1642.786287] unevictable:0 dirty:14 writeback:0 unstable:0 [ 1642.786287] slab_reclaimable:12759 slab_unreclaimable:119581 [ 1642.786287] mapped:52778 shmem:27411 pagetables:824 bounce:0 [ 1642.786287] free:14311 free_pcp:121 free_cma:0 [ 1642.821428] Node 0 active_anon:59348kB inactive_anon:69948kB active_file:28kB inactive_file:28kB unevictable:0kB isolated(anon):0kB isolated(file):4kB mapped:172052kB dirty:52kB writeback:0kB shmem:74140kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1642.855323] Node 1 active_anon:1588kB inactive_anon:35288kB active_file:52kB inactive_file:56kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:39060kB dirty:4kB writeback:0kB shmem:35504kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1642.896380] Node 0 DMA free:10972kB min:204kB low:252kB high:300kB active_anon:124kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1642.923156] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1642.928239] Node 0 DMA32 free:18152kB min:36200kB low:45248kB high:54296kB active_anon:59272kB inactive_anon:69948kB active_file:228kB inactive_file:20kB unevictable:0kB writepending:48kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7520kB pagetables:2984kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1642.972288] syz-executor.2: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1642.974970] lowmem_reserve[]: [ 1642.988893] syz-executor.0: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1642.998866] 0 0 0 0 0 [ 1643.006456] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1643.008882] syz-executor.2 cpuset= [ 1643.035441] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 1643.044120] CPU: 0 PID: 28780 Comm: syz-executor.0 Not tainted 4.14.232-syzkaller #0 [ 1643.044471] lowmem_reserve[]: [ 1643.051983] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1643.051987] Call Trace: [ 1643.052004] dump_stack+0x1b2/0x281 [ 1643.052020] warn_alloc.cold+0x96/0x1cc [ 1643.055100] 0 [ 1643.064436] ? zone_watermark_ok_safe+0x220/0x220 [ 1643.064446] ? usleep_range+0x130/0x130 [ 1643.064455] ? try_to_free_pages+0x23f/0x6e0 [ 1643.067012] 0 [ 1643.070628] ? _find_next_bit+0xdb/0x100 [ 1643.070638] ? run_timer_softirq+0x5a0/0x5a0 [ 1643.070654] __alloc_pages_nodemask+0x2127/0x2720 [ 1643.074592] 0 [ 1643.076382] ? lock_acquire+0x170/0x3f0 [ 1643.081206] 0 [ 1643.085152] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1643.089550] 0 [ 1643.091322] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1643.099832] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1643.099851] alloc_pages_current+0x155/0x260 [ 1643.104724] Node 1 [ 1643.106528] ion_page_pool_alloc+0x118/0x1b0 [ 1643.110499] Normal free:26692kB min:53696kB low:67120kB high:80544kB active_anon:1560kB inactive_anon:35280kB active_file:52kB inactive_file:52kB unevictable:0kB writepending:4kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:544kB pagetables:356kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1643.112259] ion_system_heap_allocate+0x133/0x8c0 [ 1643.117070] lowmem_reserve[]: [ 1643.118855] ? _raw_spin_unlock+0x29/0x40 [ 1643.118865] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1643.118874] ? ion_system_contig_heap_create+0x130/0x130 [ 1643.123339] 0 [ 1643.128769] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1643.133161] 0 [ 1643.135364] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1643.139755] 0 [ 1643.167479] ion_alloc+0x27a/0x810 [ 1643.167492] ? ion_dma_buf_release+0x40/0x40 [ 1643.167503] ? __might_fault+0x177/0x1b0 [ 1643.172332] 0 [ 1643.175407] ion_ioctl+0xea/0x1f0 [ 1643.179626] 0 [ 1643.184521] ? ion_query_heaps+0x360/0x360 [ 1643.191730] ? ion_query_heaps+0x360/0x360 [ 1643.196713] Node 0 [ 1643.198624] do_vfs_ioctl+0x75a/0xff0 [ 1643.203467] DMA: [ 1643.205343] ? ioctl_preallocate+0x1a0/0x1a0 [ 1643.208869] 9*4kB [ 1643.213243] ? lock_downgrade+0x740/0x740 [ 1643.217270] (ME) [ 1643.219056] ? __fget+0x225/0x360 [ 1643.219065] ? do_vfs_ioctl+0xff0/0xff0 [ 1643.219075] ? security_file_ioctl+0x83/0xb0 [ 1643.222500] 9*8kB [ 1643.224281] SyS_ioctl+0x7f/0xb0 [ 1643.224289] ? do_vfs_ioctl+0xff0/0xff0 [ 1643.228511] (ME) [ 1643.232725] do_syscall_64+0x1d5/0x640 [ 1643.232739] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1643.232747] RIP: 0033:0x4665f9 [ 1643.234959] 11*16kB [ 1643.238732] RSP: 002b:00007fc8c6af5188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1643.241313] (M) [ 1643.245700] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1643.247822] 8*32kB [ 1643.251944] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1643.251950] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1643.251955] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1643.251960] R13: 00007ffdd42e705f R14: 00007fc8c6af5300 R15: 0000000000022000 [ 1643.259426] / [ 1643.279971] (UME) [ 1643.284704] mems_allowed=0-1 [ 1643.286325] 13*64kB [ 1643.289529] CPU: 0 PID: 28777 Comm: syz-executor.2 Not tainted 4.14.232-syzkaller #0 [ 1643.289536] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1643.289539] Call Trace: [ 1643.289555] dump_stack+0x1b2/0x281 [ 1643.289569] warn_alloc.cold+0x96/0x1cc [ 1643.289580] ? zone_watermark_ok_safe+0x220/0x220 [ 1643.289604] __alloc_pages_nodemask+0x2127/0x2720 [ 1643.289622] ? lock_acquire+0x170/0x3f0 [ 1643.289637] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1643.289654] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1643.289666] ? __mutex_unlock_slowpath+0x75/0x770 [ 1643.289680] alloc_pages_current+0x155/0x260 [ 1643.306790] (UME) [ 1643.308881] ion_page_pool_alloc+0x118/0x1b0 [ 1643.308893] ion_system_heap_allocate+0x133/0x8c0 [ 1643.311122] 5*128kB [ 1643.318376] ? _raw_spin_unlock+0x29/0x40 [ 1643.325639] (UME) [ 1643.332889] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1643.332898] ? ion_system_contig_heap_create+0x130/0x130 [ 1643.332910] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1643.340178] 1*256kB [ 1643.341867] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1643.344089] (E) [ 1643.347176] ion_alloc+0x27a/0x810 [ 1643.349488] 1*512kB [ 1643.357338] ? ion_dma_buf_release+0x40/0x40 [ 1643.366676] (E) [ 1643.369232] ? __might_fault+0x177/0x1b0 [ 1643.369244] ion_ioctl+0xea/0x1f0 [ 1643.372842] 2*1024kB [ 1643.376796] ? ion_query_heaps+0x360/0x360 [ 1643.381626] (ME) [ 1643.386435] ? ion_query_heaps+0x360/0x360 [ 1643.390395] 1*2048kB [ 1643.395203] do_vfs_ioctl+0x75a/0xff0 [ 1643.400638] (E) [ 1643.405447] ? ioctl_preallocate+0x1a0/0x1a0 [ 1643.409839] 1*4096kB [ 1643.411957] ? lock_downgrade+0x740/0x740 [ 1643.416334] (U) [ 1643.421161] ? __fget+0x225/0x360 [ 1643.421169] ? do_vfs_ioctl+0xff0/0xff0 [ 1643.421180] ? security_file_ioctl+0x83/0xb0 [ 1643.423476] = 10972kB [ 1643.427603] SyS_ioctl+0x7f/0xb0 [ 1643.429742] Node 0 [ 1643.434638] ? do_vfs_ioctl+0xff0/0xff0 [ 1643.440163] DMA32: [ 1643.445146] do_syscall_64+0x1d5/0x640 [ 1643.447439] 707*4kB [ 1643.452267] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1643.452276] RIP: 0033:0x4665f9 [ 1643.452283] RSP: 002b:00007f66397b6188 EFLAGS: 00000246 [ 1643.454845] (UME) [ 1643.458358] ORIG_RAX: 0000000000000010 [ 1643.460690] 429*8kB [ 1643.465062] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1643.467011] (ME) [ 1643.471047] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1643.471052] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1643.471058] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1643.471063] R13: 00007fff59ca014f R14: 00007f66397b6300 R15: 0000000000022000 [ 1643.475011] warn_alloc_show_mem: 1 callbacks suppressed [ 1643.475014] Mem-Info: [ 1643.476893] 63*16kB [ 1643.481160] active_anon:15240 inactive_anon:26309 isolated_anon:0 [ 1643.481160] active_file:16 inactive_file:27 isolated_file:0 [ 1643.481160] unevictable:0 dirty:11 writeback:0 unstable:0 [ 1643.481160] slab_reclaimable:12772 slab_unreclaimable:119576 [ 1643.481160] mapped:52733 shmem:27413 pagetables:826 bounce:0 [ 1643.481160] free:13922 free_pcp:0 free_cma:0 [ 1643.481175] Node 0 active_anon:59400kB inactive_anon:69956kB active_file:12kB inactive_file:56kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:171916kB dirty:40kB writeback:0kB shmem:74148kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1643.481188] Node 1 active_anon:1560kB inactive_anon:35280kB active_file:52kB inactive_file:52kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:39016kB dirty:4kB writeback:0kB shmem:35504kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1643.481192] Node 0 DMA free:10972kB min:204kB low:252kB high:300kB active_anon:124kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1643.481210] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1643.481229] Node 0 DMA32 free:18024kB min:36200kB low:45248kB high:54296kB active_anon:59276kB inactive_anon:69956kB active_file:12kB inactive_file:56kB unevictable:0kB writepending:40kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7488kB pagetables:2948kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1643.481247] lowmem_reserve[]: 0 0 0 0 0 [ 1643.481266] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1643.481284] lowmem_reserve[]: 0 0 0 0 0 [ 1643.481303] Node 1 Normal free:26692kB min:53696kB low:67120kB high:80544kB active_anon:1560kB inactive_anon:35280kB active_file:52kB inactive_file:52kB unevictable:0kB writepending:4kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:544kB pagetables:356kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1643.481322] lowmem_reserve[]: 0 0 0 0 0 [ 1643.481340] Node 0 DMA: 9*4kB [ 1643.498561] (UME) [ 1643.503784] (ME) [ 1643.512349] 338*32kB [ 1643.516149] 9*8kB [ 1643.553033] (UMEH) [ 1643.556792] (ME) [ 1643.557162] 1*64kB [ 1643.561910] 11*16kB [ 1643.595869] (H) [ 1643.607784] (M) [ 1643.658829] 0*128kB [ 1643.680375] 8*32kB [ 1643.790922] device bridge_slave_0 entered promiscuous mode [ 1643.798641] (UME) [ 1643.863840] 0*256kB [ 1643.864833] 13*64kB [ 1643.868480] 0*512kB [ 1643.869451] (UME) 5*128kB (UME) 1*256kB (E) 1*512kB (E) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (U) = 10972kB [ 1643.878867] 0*1024kB 0*2048kB 0*4096kB = 18148kB [ 1643.892740] Node 0 DMA32: 428*4kB (UME) 429*8kB (ME) 63*16kB (UME) 10*32kB (MEH) 445*64kB (UH) 80*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 45192kB [ 1643.908923] Bluetooth: hci4 command 0x041b tx timeout [ 1643.922942] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1643.928811] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1643.937068] Node 1 Normal: 2*4kB (UM) 1*8kB (M) 1*16kB (E) 1*32kB (E) 18*64kB (U) 214*128kB (UM) 70*256kB (U) 47*512kB (UM) 4*1024kB (U) 0*2048kB 0*4096kB = 74688kB [ 1643.951154] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 1644.010679] Node 1 Normal: 17*4kB (UM) 12*8kB (UM) 26*16kB (UME) 13*32kB (UME) 2*64kB (M) 96*128kB (U) 70*256kB (U) 46*512kB (U) 4*1024kB (U) 0*2048kB 0*4096kB = 58980kB [ 1644.026224] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1644.039785] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1644.049242] bridge0: port 2(bridge_slave_1) entered blocking state [ 1644.055592] bridge0: port 2(bridge_slave_1) entered disabled state [ 1644.061992] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1644.078880] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1644.080264] device bridge_slave_1 entered promiscuous mode [ 1644.099398] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1644.107972] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1644.107992] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1644.139125] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1644.143491] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1644.147703] 27543 total pagecache pages [ 1644.178867] 0 pages in swap cache [ 1644.182324] Swap cache stats: add 0, delete 0, find 0/0 [ 1644.187676] Free swap = 0kB [ 1644.193570] Total swap = 0kB [ 1644.196584] 2097051 pages RAM [ 1644.199897] 0 pages HighMem/MovableOnly [ 1644.203857] 363849 pages reserved [ 1644.207294] 0 pages cma reserved [ 1644.210833] syz-executor.5: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1644.213371] 27493 total pagecache pages [ 1644.225092] Out of memory (oom_kill_allocating_task): Kill process 28344 (in:imuxsock) score 0 or sacrifice child [ 1644.235615] 0 pages in swap cache [ 1644.238474] Bluetooth: hci3 command 0x041b tx timeout [ 1644.240529] Swap cache stats: add 0, delete 0, find 0/0 [ 1644.248480] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 1644.263780] Killed process 28342 (rsyslogd) total-vm:254332kB, anon-rss:1488kB, file-rss:0kB, shmem-rss:0kB [ 1644.277186] CPU: 1 PID: 28778 Comm: syz-executor.5 Not tainted 4.14.232-syzkaller #0 [ 1644.285061] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1644.294404] Call Trace: [ 1644.296987] dump_stack+0x1b2/0x281 [ 1644.300612] warn_alloc.cold+0x96/0x1cc [ 1644.304582] ? zone_watermark_ok_safe+0x220/0x220 [ 1644.309417] ? usleep_range+0x130/0x130 [ 1644.313385] ? try_to_free_pages+0x23f/0x6e0 [ 1644.314371] Free swap = 0kB [ 1644.317784] ? _find_next_bit+0xdb/0x100 [ 1644.324830] ? run_timer_softirq+0x5a0/0x5a0 [ 1644.329239] __alloc_pages_nodemask+0x2127/0x2720 [ 1644.334081] ? lock_acquire+0x170/0x3f0 [ 1644.336649] Total swap = 0kB [ 1644.338051] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1644.345864] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1644.350358] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1644.353709] 2097051 pages RAM [ 1644.355803] alloc_pages_current+0x155/0x260 [ 1644.363271] ion_page_pool_alloc+0x118/0x1b0 [ 1644.367672] ion_system_heap_allocate+0x133/0x8c0 [ 1644.372508] ? ion_alloc+0x187/0x810 [ 1644.372868] 0 pages HighMem/MovableOnly [ 1644.376211] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1644.385614] ? ion_system_contig_heap_create+0x130/0x130 [ 1644.391294] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1644.394321] 363849 pages reserved [ 1644.396311] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1644.404569] ion_alloc+0x204/0x810 [ 1644.404906] 0 pages cma reserved [ 1644.408101] ? ion_dma_buf_release+0x40/0x40 [ 1644.411579] in:imklog: page allocation failure: order:0 [ 1644.416004] ? __might_fault+0x177/0x1b0 [ 1644.416016] ion_ioctl+0xea/0x1f0 [ 1644.428835] ? ion_query_heaps+0x360/0x360 [ 1644.433065] ? ion_query_heaps+0x360/0x360 [ 1644.434914] , mode:0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null) [ 1644.437306] do_vfs_ioctl+0x75a/0xff0 [ 1644.437322] ? ioctl_preallocate+0x1a0/0x1a0 [ 1644.452823] ? lock_downgrade+0x740/0x740 [ 1644.456970] ? __fget+0x225/0x360 [ 1644.460416] ? do_vfs_ioctl+0xff0/0xff0 [ 1644.464386] ? security_file_ioctl+0x83/0xb0 [ 1644.466212] in:imklog cpuset= [ 1644.468785] SyS_ioctl+0x7f/0xb0 [ 1644.468794] ? do_vfs_ioctl+0xff0/0xff0 [ 1644.468804] do_syscall_64+0x1d5/0x640 [ 1644.468816] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1644.468822] RIP: 0033:0x4665f9 [ 1644.468826] RSP: 002b:00007f87ada6b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1644.468835] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1644.468841] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1644.468846] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1644.468851] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1644.468856] R13: 00007fff979d8a6f R14: 00007f87ada6b300 R15: 0000000000022000 [ 1644.537644] oom_reaper: reaped process 28342 (rsyslogd), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1644.630944] syz-executor.4 invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1644.645520] warn_alloc_show_mem: 1 callbacks suppressed [ 1644.645523] Mem-Info: [ 1644.655560] / mems_allowed=0-1 [ 1644.667172] active_anon:14866 inactive_anon:26309 isolated_anon:0 [ 1644.667172] active_file:13 inactive_file:34 isolated_file:0 [ 1644.667172] unevictable:0 dirty:19 writeback:0 unstable:0 [ 1644.667172] slab_reclaimable:12772 slab_unreclaimable:119710 [ 1644.667172] mapped:52773 shmem:27413 pagetables:789 bounce:0 [ 1644.667172] free:13872 free_pcp:337 free_cma:0 [ 1644.667212] syz-executor.4 cpuset= [ 1644.700755] in:imuxsock: [ 1644.702467] CPU: 0 PID: 28345 Comm: in:imklog Not tainted 4.14.232-syzkaller #0 [ 1644.704284] page allocation failure: order:0 [ 1644.707021] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1644.728192] Call Trace: [ 1644.728549] Node 0 active_anon:58400kB inactive_anon:69956kB active_file:52kB inactive_file:88kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:171984kB dirty:4kB writeback:0kB shmem:74148kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1644.730772] dump_stack+0x1b2/0x281 [ 1644.730788] warn_alloc.cold+0x96/0x1cc [ 1644.759084] , mode:0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask= [ 1644.762667] ? zone_watermark_ok_safe+0x220/0x220 [ 1644.766622] (null) [ 1644.773438] ? usleep_range+0x130/0x130 [ 1644.773445] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1644.773456] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1644.773465] ? run_timer_softirq+0x5a0/0x5a0 [ 1644.778285] in:imuxsock cpuset= [ 1644.780434] __alloc_pages_nodemask+0x2127/0x2720 [ 1644.780454] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1644.792174] Node 1 active_anon:1064kB inactive_anon:35280kB active_file:0kB inactive_file:48kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:39108kB dirty:72kB writeback:0kB shmem:35504kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1644.797256] alloc_pages_current+0x155/0x260 [ 1644.802285] / [ 1644.806650] filemap_fault+0x11a1/0x1ad0 [ 1644.809927] Node 0 [ 1644.814756] ext4_filemap_fault+0x84/0xb0 [ 1644.819585] mems_allowed=0-1 [ 1644.846806] __do_fault+0xfa/0x380 [ 1644.846816] __handle_mm_fault+0x2497/0x4620 [ 1644.846826] ? vm_insert_page+0x7c0/0x7c0 [ 1644.851372] DMA free:10972kB min:204kB low:252kB high:300kB active_anon:124kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1644.853037] ? lock_downgrade+0x740/0x740 [ 1644.857069] lowmem_reserve[]: [ 1644.859293] ? mark_held_locks+0xa6/0xf0 [ 1644.859304] handle_mm_fault+0x455/0x9c0 [ 1644.859316] __do_page_fault+0x549/0xad0 [ 1644.863437] 0 [ 1644.866525] ? spurious_fault+0x640/0x640 [ 1644.870058] 2717 [ 1644.874428] ? do_page_fault+0x60/0x500 [ 1644.878937] 2718 [ 1644.904675] ? page_fault+0x2f/0x50 [ 1644.904682] page_fault+0x45/0x50 [ 1644.904689] RIP: 1fa0:0x1f9f [ 1644.904693] RSP: 0000:0000557245e5d9d0 EFLAGS: 7efdc3885da0 [ 1644.928756] syz-executor.2: [ 1644.947363] CPU: 1 PID: 28344 Comm: in:imuxsock Not tainted 4.14.232-syzkaller #0 [ 1644.955768] page allocation failure: order:0 [ 1644.955840] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1644.958880] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1644.966444] Call Trace: [ 1644.970884] in:imklog: [ 1644.980172] dump_stack+0x1b2/0x281 [ 1644.980185] warn_alloc.cold+0x96/0x1cc [ 1644.980196] ? zone_watermark_ok_safe+0x220/0x220 [ 1644.988971] (null) [ 1644.989835] ? usleep_range+0x130/0x130 [ 1644.992392] syz-executor.2 cpuset= [ 1644.996085] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1644.996096] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1645.000089] page allocation failure: order:0 [ 1645.004866] ? run_timer_softirq+0x5a0/0x5a0 [ 1645.007006] , mode:0x14280ca(GFP_HIGHUSER_MOVABLE|__GFP_ZERO), nodemask= [ 1645.011074] __alloc_pages_nodemask+0x2127/0x2720 [ 1645.011109] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1645.011130] alloc_pages_current+0x155/0x260 [ 1645.011141] filemap_fault+0x11a1/0x1ad0 [ 1645.011158] ext4_filemap_fault+0x84/0xb0 [ 1645.016379] / [ 1645.019764] __do_fault+0xfa/0x380 [ 1645.024804] mems_allowed=0-1 [ 1645.029156] __handle_mm_fault+0x2497/0x4620 [ 1645.029167] ? vm_insert_page+0x7c0/0x7c0 [ 1645.029176] ? __fdget+0x196/0x1f0 [ 1645.029190] ? mark_held_locks+0xa6/0xf0 [ 1645.029199] handle_mm_fault+0x455/0x9c0 [ 1645.029222] __do_page_fault+0x549/0xad0 [ 1645.029233] ? spurious_fault+0x640/0x640 [ 1645.035457] (null) [ 1645.040469] ? do_page_fault+0x60/0x500 [ 1645.040477] ? page_fault+0x2f/0x50 [ 1645.040484] page_fault+0x45/0x50 [ 1645.040492] RIP: c3ca3880:0x7efdc3ca379c [ 1645.040496] RSP: 45e59730:00007efdc3ca37f0 EFLAGS: 7efdc3ca37b8 [ 1645.057755] 2718 [ 1645.060461] CPU: 0 PID: 28777 Comm: syz-executor.2 Not tainted 4.14.232-syzkaller #0 [ 1645.071757] 2718 [ 1645.085309] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1645.085313] Call Trace: [ 1645.085328] dump_stack+0x1b2/0x281 [ 1645.085341] warn_alloc.cold+0x96/0x1cc [ 1645.093002] ? zone_watermark_ok_safe+0x220/0x220 [ 1645.097030] Node 0 [ 1645.101068] ? usleep_range+0x130/0x130 [ 1645.101077] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1645.101089] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1645.105136] DMA32 free:18028kB min:36200kB low:45248kB high:54296kB active_anon:58228kB inactive_anon:69956kB active_file:16kB inactive_file:16kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7424kB pagetables:2844kB bounce:0kB free_pcp:828kB local_pcp:684kB free_cma:0kB [ 1645.109254] ? run_timer_softirq+0x5a0/0x5a0 [ 1645.109271] __alloc_pages_nodemask+0x2127/0x2720 [ 1645.112562] lowmem_reserve[]: [ 1645.115351] ? lock_acquire+0x170/0x3f0 [ 1645.119645] 0 [ 1645.122400] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1645.126428] 0 [ 1645.132463] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1645.132479] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1645.132498] alloc_pages_current+0x155/0x260 [ 1645.134526] 0 [ 1645.142384] ion_page_pool_alloc+0x118/0x1b0 [ 1645.142393] ion_system_heap_allocate+0x133/0x8c0 [ 1645.142404] ? _raw_spin_unlock+0x29/0x40 [ 1645.144439] 0 [ 1645.153769] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1645.153778] ? ion_system_contig_heap_create+0x130/0x130 [ 1645.153789] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1645.156361] 0 [ 1645.159974] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1645.159986] ion_alloc+0x27a/0x810 [ 1645.160001] ? ion_dma_buf_release+0x40/0x40 [ 1645.168802] ? __might_fault+0x177/0x1b0 [ 1645.168813] ion_ioctl+0xea/0x1f0 [ 1645.168822] ? ion_query_heaps+0x360/0x360 [ 1645.171043] Node 0 [ 1645.175013] ? ion_query_heaps+0x360/0x360 [ 1645.180500] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1645.185466] do_vfs_ioctl+0x75a/0xff0 [ 1645.218730] lowmem_reserve[]: [ 1645.222958] ? ioctl_preallocate+0x1a0/0x1a0 [ 1645.226134] 0 [ 1645.230085] ? lock_downgrade+0x740/0x740 [ 1645.230099] ? __fget+0x225/0x360 [ 1645.230109] ? do_vfs_ioctl+0xff0/0xff0 [ 1645.231884] 0 [ 1645.236711] ? security_file_ioctl+0x83/0xb0 [ 1645.238483] 0 [ 1645.242975] SyS_ioctl+0x7f/0xb0 [ 1645.242984] ? do_vfs_ioctl+0xff0/0xff0 [ 1645.242996] do_syscall_64+0x1d5/0x640 [ 1645.248417] 0 [ 1645.253246] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1645.253254] RIP: 0033:0x4665f9 [ 1645.253260] RSP: 002b:00007f66397b6188 EFLAGS: 00000246 [ 1645.255039] 0 [ 1645.259419] ORIG_RAX: 0000000000000010 [ 1645.259426] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1645.259432] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1645.259437] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1645.259444] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1645.268380] R13: 00007fff59ca014f R14: 00007f66397b6300 R15: 0000000000022000 [ 1645.270968] in:imklog cpuset= [ 1645.280498] in:imuxsock: [ 1645.281494] / [ 1645.286411] page allocation failure: order:0, mode:0x14280ca(GFP_HIGHUSER_MOVABLE|__GFP_ZERO), nodemask=(null) [ 1645.286426] in:imuxsock cpuset=/ mems_allowed=0-1 [ 1645.468488] CPU: 1 PID: 28344 Comm: in:imuxsock Not tainted 4.14.232-syzkaller #0 [ 1645.475399] mems_allowed=0-1 [ 1645.476092] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1645.484584] Node 1 [ 1645.488523] Call Trace: [ 1645.488542] Normal free:26752kB min:53696kB low:67120kB high:80544kB active_anon:1016kB inactive_anon:35280kB active_file:44kB inactive_file:44kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:512kB pagetables:356kB bounce:0kB free_pcp:672kB local_pcp:124kB free_cma:0kB [ 1645.490755] dump_stack+0x1b2/0x281 [ 1645.490768] warn_alloc.cold+0x96/0x1cc [ 1645.490779] ? zone_watermark_ok_safe+0x220/0x220 [ 1645.490788] ? usleep_range+0x130/0x130 [ 1645.490796] ? try_to_free_pages+0x23f/0x6e0 [ 1645.490806] ? _find_next_bit+0xdb/0x100 [ 1645.490816] ? run_timer_softirq+0x5a0/0x5a0 [ 1645.550695] __alloc_pages_nodemask+0x2127/0x2720 [ 1645.555547] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1645.560386] ? __lock_acquire+0x5fc/0x3f20 [ 1645.564645] ? __handle_mm_fault+0x2095/0x4620 [ 1645.569229] ? __lock_acquire+0x5fc/0x3f20 [ 1645.573587] alloc_pages_vma+0xd2/0x6d0 [ 1645.577559] __handle_mm_fault+0x25fa/0x4620 [ 1645.578756] lowmem_reserve[]: 0 [ 1645.581959] ? vm_insert_page+0x7c0/0x7c0 [ 1645.581964] 0 [ 1645.585227] ? mark_held_locks+0xa6/0xf0 [ 1645.595171] handle_mm_fault+0x455/0x9c0 [ 1645.599222] __do_page_fault+0x549/0xad0 [ 1645.603280] ? spurious_fault+0x640/0x640 [ 1645.607422] ? do_page_fault+0x60/0x500 [ 1645.608750] / mems_allowed=0-1 [ 1645.611389] page_fault+0x25/0x50 [ 1645.611399] RIP: 0010:__put_user_4+0x1c/0x30 [ 1645.622390] RSP: 0000:ffff88820893fb08 EFLAGS: 00010293 [ 1645.627747] RAX: 0000000000000000 RBX: 00007fffffffeffd RCX: 00007efdc3ca79d0 [ 1645.635173] RDX: 1ffff110133f556f RSI: 0000000000000001 RDI: 00007efdc3ca79d0 [ 1645.642436] RBP: ffff888099faa5c0 R08: ffffffff8b994ac0 R09: 0000000000000000 [ 1645.648752] 0 [ 1645.649705] R10: 0000000000000000 R11: ffff888099faa5c0 R12: ffff888099faab78 [ 1645.649712] R13: ffff888058ea2180 R14: 0000000000000001 R15: ffff88808df90000 [ 1645.651494] 0 [ 1645.658756] mm_release+0x239/0x2d0 [ 1645.658766] do_exit+0x56f/0x2850 [ 1645.658777] ? mm_update_next_owner+0x5b0/0x5b0 [ 1645.658788] ? get_signal+0x323/0x1ca0 [ 1645.683393] ? lock_acquire+0x170/0x3f0 [ 1645.687474] ? lock_downgrade+0x740/0x740 [ 1645.691619] do_group_exit+0x100/0x2e0 [ 1645.695495] get_signal+0x38d/0x1ca0 [ 1645.699188] ? up_read+0x17/0x30 [ 1645.702538] do_signal+0x7c/0x1550 [ 1645.706058] ? vm_insert_page+0x7c0/0x7c0 [ 1645.710297] ? setup_sigcontext+0x820/0x820 [ 1645.714608] ? pagefault_out_of_memory+0x77/0xd0 [ 1645.719349] ? out_of_memory+0x1190/0x1190 [ 1645.723580] ? lock_downgrade+0x740/0x740 [ 1645.727724] ? mm_fault_error+0xad/0x2c0 [ 1645.731783] ? __do_page_fault+0x159/0xad0 [ 1645.736114] ? exit_to_usermode_loop+0x41/0x200 [ 1645.740779] exit_to_usermode_loop+0x160/0x200 [ 1645.745353] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1645.748971] 0 [ 1645.750183] prepare_exit_to_usermode+0x1af/0x210 [ 1645.750194] ? page_fault+0x2f/0x50 [ 1645.751979] Node 0 [ 1645.756798] retint_user+0x8/0x18 [ 1645.766063] RIP: 0033:0x557244cb1f20 [ 1645.769760] RSP: 002b:00007efdc3ca3738 EFLAGS: 00010206 [ 1645.775100] RAX: 00007efdb4002084 RBX: 0000557245e59730 RCX: 0000000000000000 [ 1645.782348] RDX: 00007efdc3ca379c RSI: 00007efdc3ca37b8 RDI: 00007efdc3ca37f0 [ 1645.789602] RBP: 00007efdc3ca37f0 R08: 0000000000000003 R09: 0000000000000080 [ 1645.796967] R10: 2ce33e6c02ce33e7 R11: 00007efdc3ca36e0 R12: 00007efdc3ca37b8 [ 1645.804234] R13: 00007efdc3ca3880 R14: 00007efdc3ca379c R15: 000000000000001c [ 1645.814356] CPU: 0 PID: 28345 Comm: in:imklog Not tainted 4.14.232-syzkaller #0 [ 1645.818743] warn_alloc_show_mem: 3 callbacks suppressed [ 1645.818746] Mem-Info: [ 1645.821805] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1645.827156] active_anon:14842 inactive_anon:26309 isolated_anon:0 [ 1645.827156] active_file:15 inactive_file:240 isolated_file:0 [ 1645.827156] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1645.827156] slab_reclaimable:12772 slab_unreclaimable:119717 [ 1645.827156] mapped:52813 shmem:27413 pagetables:800 bounce:0 [ 1645.827156] free:159161 free_pcp:339 free_cma:0 [ 1645.829537] Call Trace: [ 1645.829552] dump_stack+0x1b2/0x281 [ 1645.829569] warn_alloc.cold+0x96/0x1cc [ 1645.878699] Node 0 active_anon:58352kB inactive_anon:69956kB active_file:16kB inactive_file:916kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:172236kB dirty:0kB writeback:0kB shmem:74148kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1645.882451] ? zone_watermark_ok_safe+0x220/0x220 [ 1645.915030] ? usleep_range+0x130/0x130 [ 1645.918999] ? try_to_free_pages+0x23f/0x6e0 [ 1645.923404] ? _find_next_bit+0xdb/0x100 [ 1645.927460] ? run_timer_softirq+0x5a0/0x5a0 [ 1645.931865] __alloc_pages_nodemask+0x2127/0x2720 [ 1645.936712] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1645.941555] ? vmpressure+0x1f6/0x2c0 [ 1645.945354] ? __lock_acquire+0x5fc/0x3f20 [ 1645.949586] alloc_pages_vma+0xd2/0x6d0 [ 1645.953560] __handle_mm_fault+0x25fa/0x4620 [ 1645.957960] ? lock_downgrade+0x740/0x740 [ 1645.958691] Node 1 active_anon:1016kB inactive_anon:35280kB active_file:44kB inactive_file:44kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:39016kB dirty:0kB writeback:0kB shmem:35504kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1645.962096] ? vm_insert_page+0x7c0/0x7c0 [ 1645.993466] ? do_raw_spin_unlock+0x164/0x220 [ 1645.997960] ? mark_held_locks+0xa6/0xf0 [ 1646.002021] handle_mm_fault+0x455/0x9c0 [ 1646.006075] __get_user_pages+0x4e9/0x1270 [ 1646.010315] ? follow_page_mask+0x18a0/0x18a0 [ 1646.014805] ? lock_acquire+0x170/0x3f0 [ 1646.018677] Node 0 [ 1646.018765] ? get_user_pages_unlocked+0xb4/0x2e0 [ 1646.018775] DMA free:11036kB min:204kB low:252kB high:300kB active_anon:124kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1646.018779] lowmem_reserve[]: [ 1646.020996] get_user_pages_unlocked+0x1df/0x2e0 [ 1646.025915] 0 [ 1646.053135] ? get_user_pages_locked+0x3e0/0x3e0 [ 1646.053144] ? get_user_pages_fast+0x170/0x2b0 [ 1646.053153] get_user_pages_fast+0x21d/0x2b0 [ 1646.053160] ? __get_user_pages_fast+0x2d0/0x2d0 [ 1646.053168] ? should_fail+0x327/0x3f0 [ 1646.053178] get_futex_key+0x1d2/0x1160 [ 1646.053188] ? futex_lock_pi_atomic+0x2e0/0x2e0 [ 1646.053197] futex_wake+0xc6/0x3c0 [ 1646.053207] ? get_futex_key+0x1160/0x1160 [ 1646.088672] 2717 [ 1646.089065] ? cmp_ex_search+0x71/0x90 [ 1646.093706] 2718 [ 1646.097224] ? cmp_ex_sort+0xb0/0xb0 [ 1646.113090] do_futex+0x281/0x1570 [ 1646.116627] ? ex_handler_default+0x14/0x90 [ 1646.118666] 2718 [ 1646.120931] ? phys_mem_access_encrypted+0x10/0x10 [ 1646.120936] 2718 [ 1646.122999] ? fixup_exception+0x93/0xd0 [ 1646.129954] ? no_context+0x9c/0x7c0 [ 1646.129964] ? futex_exit_release+0x220/0x220 [ 1646.129973] ? force_sig_info_fault.constprop.0+0x260/0x260 [ 1646.147872] ? lock_downgrade+0x740/0x740 [ 1646.148665] Node 0 DMA32 free:296940kB min:36200kB low:45248kB high:54296kB active_anon:58228kB inactive_anon:69956kB active_file:316kB inactive_file:480kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7424kB pagetables:2844kB bounce:0kB free_pcp:528kB local_pcp:284kB free_cma:0kB [ 1646.152020] ? mm_fault_error+0x25c/0x2c0 [ 1646.152030] ? __do_page_fault+0x159/0xad0 [ 1646.189503] ? retint_kernel+0x2d/0x2d [ 1646.193388] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1646.198396] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1646.203147] SyS_futex+0x1da/0x290 [ 1646.206681] ? do_futex+0x1570/0x1570 [ 1646.208659] lowmem_reserve[]: 0 0 [ 1646.210470] mm_release+0x250/0x2d0 [ 1646.210480] do_exit+0x56f/0x2850 [ 1646.213906] 0 [ 1646.217518] ? mm_update_next_owner+0x5b0/0x5b0 [ 1646.227378] ? get_signal+0x323/0x1ca0 [ 1646.231259] ? lock_acquire+0x170/0x3f0 [ 1646.235220] ? lock_downgrade+0x740/0x740 [ 1646.238672] 0 0 [ 1646.239354] do_group_exit+0x100/0x2e0 [ 1646.239366] get_signal+0x38d/0x1ca0 [ 1646.245202] ? up_read+0x17/0x30 [ 1646.252247] do_signal+0x7c/0x1550 [ 1646.255809] ? vm_insert_page+0x7c0/0x7c0 [ 1646.258660] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1646.259955] ? setup_sigcontext+0x820/0x820 [ 1646.259968] ? pagefault_out_of_memory+0x77/0xd0 [ 1646.294489] ? out_of_memory+0x1190/0x1190 [ 1646.298722] ? lock_downgrade+0x740/0x740 [ 1646.302864] ? mm_fault_error+0xad/0x2c0 [ 1646.306919] ? __do_page_fault+0x159/0xad0 [ 1646.308655] lowmem_reserve[]: [ 1646.311575] ? exit_to_usermode_loop+0x41/0x200 [ 1646.311577] 0 0 [ 1646.314665] exit_to_usermode_loop+0x160/0x200 [ 1646.325867] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1646.328652] 0 0 [ 1646.330697] prepare_exit_to_usermode+0x1af/0x210 [ 1646.330707] ? page_fault+0x2f/0x50 [ 1646.332657] 0 [ 1646.337476] retint_user+0x8/0x18 [ 1646.346394] RIP: 0033:0x7efdc5ee8ed0 [ 1646.350092] RSP: 002b:00007efdc3885578 EFLAGS: 00010293 [ 1646.355446] RAX: 0000000000000116 RBX: 0000000000000000 RCX: 00007efdc5ee922d [ 1646.362700] RDX: 0000000000000116 RSI: 00007efdc3885da0 RDI: 0000000000000000 [ 1646.362706] RBP: 0000557245e5d9d0 R08: 0000000000000000 R09: 0000000000000000 [ 1646.377210] R10: 2ce33e6c02ce33e7 R11: 0000000000000293 R12: 00007efdc3885da0 [ 1646.378652] Node 1 [ 1646.384466] R13: 0000000000001fa0 R14: 0000000000001f9f R15: 00007efdc3885ea2 [ 1646.389727] DMA: 9*4kB (ME) 9*8kB (ME) 11*16kB (M) 8*32kB (UME) 14*64kB (UME) 5*128kB (UME) 1*256kB (E) 1*512kB (E) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (U) = 11036kB [ 1646.399060] Bluetooth: hci4 command 0x040f tx timeout [ 1646.409780] Node 0 DMA32: 463*4kB (UME) 438*8kB (ME) 64*16kB (ME) 11*32kB (UME) 703*64kB (UME) 807*128kB (UM) 70*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 172940kB [ 1646.428662] CPU: 1 PID: 28801 Comm: syz-executor.4 Not tainted 4.14.232-syzkaller #0 [ 1646.432761] Node 0 [ 1646.438188] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1646.438195] Normal: [ 1646.440424] Call Trace: [ 1646.440440] dump_stack+0x1b2/0x281 [ 1646.440452] dump_header+0x178/0x82f [ 1646.440462] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1646.440470] ? ___ratelimit+0x2cd/0x530 [ 1646.440480] oom_kill_process.cold+0x10/0xa40 [ 1646.440497] out_of_memory+0xe3e/0x1190 [ 1646.440509] ? oom_killer_disable+0x1c0/0x1c0 [ 1646.440517] ? mutex_trylock+0x152/0x1a0 [ 1646.440529] __alloc_pages_nodemask+0x23e1/0x2720 [ 1646.440550] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1646.440575] alloc_pages_current+0x155/0x260 [ 1646.450000] 0*4kB [ 1646.452216] filemap_fault+0x11a1/0x1ad0 [ 1646.454769] 0*8kB [ 1646.458382] ext4_filemap_fault+0x84/0xb0 [ 1646.462144] 0*16kB [ 1646.467147] __do_fault+0xfa/0x380 [ 1646.471157] 0*32kB [ 1646.475597] __handle_mm_fault+0x2497/0x4620 [ 1646.475611] ? vm_insert_page+0x7c0/0x7c0 [ 1646.479597] 0*64kB [ 1646.484044] ? mark_held_locks+0xa6/0xf0 [ 1646.488071] 0*128kB [ 1646.492893] handle_mm_fault+0x455/0x9c0 [ 1646.492905] __do_page_fault+0x549/0xad0 [ 1646.492916] ? spurious_fault+0x640/0x640 [ 1646.492925] ? do_page_fault+0x60/0x500 [ 1646.492933] ? page_fault+0x2f/0x50 [ 1646.492941] page_fault+0x45/0x50 [ 1646.497787] 0*256kB [ 1646.502233] RIP: 4c7e77:0x7ffcf1a8e150 [ 1646.502237] RSP: f1a8e1e0:0000000000000003 EFLAGS: 014a4320 [ 1646.507635] Bluetooth: hci3 command 0x040f tx timeout [ 1646.512274] 0*512kB [ 1646.528371] Normal free:467328kB min:53696kB low:67120kB high:80544kB active_anon:1016kB inactive_anon:35280kB active_file:44kB inactive_file:44kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:512kB pagetables:356kB bounce:0kB free_pcp:672kB local_pcp:548kB free_cma:0kB [ 1646.564155] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 1646.608635] lowmem_reserve[]: [ 1646.619586] 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1646.633751] Node 1 Normal: 10*4kB (M) 25*8kB (M) 21*16kB (ME) 12*32kB (UME) 5020*64kB (UM) 584*128kB (UM) 87*256kB (U) 52*512kB (UM) 21*1024kB (UM) 0*2048kB 0*4096kB = 467392kB [ 1646.634019] 0 [ 1646.667804] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1646.673157] 0 0 0 0 22:11:23 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) sendmsg$unix(r1, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x80000000, 0x6}) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000280)=ANY=[@ANYBLOB="40000000d05dfd0cf6aadfcd1c2c8204548f7ad25fb20c9fc1b948acee1bf738a8e2f89ba8ad644647776e1929696b34254e5dffa31fab7db2587004efe13e6e76fca3797168ba0ca323227067252996e8b160c2bec95a5f9f90491af03c1f501e1720021bfe4f682947ba1614a12e86a754", @ANYRES16=0x0, @ANYBLOB="000328bd7000ffdbdf2502000000080011000000000006000200010000000c0010000000000001000000050014001f00000008000b0000000000"], 0x40}, 0x1, 0x0, 0x0, 0xc000}, 0x8000) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) [ 1646.690513] Node 0 DMA: 9*4kB (ME) 9*8kB (ME) 11*16kB (M) 8*32kB (UME) 14*64kB (UME) 5*128kB (UME) 1*256kB (E) 1*512kB (E) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (U) = 11036kB [ 1646.706205] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1646.706213] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1646.706220] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1646.731611] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1646.757079] Node 0 DMA32: 79*4kB (UE) 127*8kB (UME) 30*16kB (UE) 6*32kB (UE) 3*64kB (E) 199*128kB (U) 65*256kB (UM) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 44308kB [ 1646.758840] Mem-Info: [ 1646.788866] active_anon:14842 inactive_anon:26309 isolated_anon:0 [ 1646.788866] active_file:166 inactive_file:2173 isolated_file:0 [ 1646.788866] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1646.788866] slab_reclaimable:12772 slab_unreclaimable:119843 [ 1646.788866] mapped:54601 shmem:27413 pagetables:837 bounce:0 [ 1646.788866] free:110130 free_pcp:132 free_cma:0 [ 1646.823275] 29794 total pagecache pages [ 1646.823751] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 1646.827251] 0 pages in swap cache [ 1646.827257] Swap cache stats: add 0, delete 0, find 0/0 [ 1646.827261] Free swap = 0kB [ 1646.827264] Total swap = 0kB [ 1646.827273] 2097051 pages RAM [ 1646.841045] Node 0 [ 1646.868644] 0 pages HighMem/MovableOnly [ 1646.874845] 363849 pages reserved [ 1646.877296] Normal: [ 1646.878278] 0 pages cma reserved [ 1646.878285] 0*4kB [ 1646.889329] Node 0 active_anon:58352kB inactive_anon:69956kB active_file:620kB inactive_file:8548kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:179288kB dirty:0kB writeback:0kB shmem:74148kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1646.895031] team0: Port device team_slave_0 added [ 1646.924833] 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1646.952809] Node 1 Normal: 1*4kB (M) 13*8kB (M) 21*16kB (ME) 12*32kB (UME) 2372*64kB (UM) 584*128kB (UM) 87*256kB (U) 52*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 276284kB [ 1646.991045] Node 1 active_anon:1016kB inactive_anon:35280kB active_file:44kB inactive_file:144kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:39116kB dirty:0kB writeback:0kB shmem:35504kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1646.999670] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1647.029850] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 1647.052387] team0: Port device team_slave_1 added [ 1647.091123] Node 0 DMA free:11036kB min:204kB low:252kB high:300kB active_anon:124kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1647.113752] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1647.128350] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1647.154741] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1647.187775] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1647.217627] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1647.222353] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1647.241917] 30053 total pagecache pages [ 1647.255025] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active 22:11:23 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) sendmsg$unix(r1, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x80000000, 0x6}) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) [ 1647.258667] Node 0 DMA32 free:37060kB min:36200kB low:45248kB high:54296kB active_anon:58228kB inactive_anon:69956kB active_file:620kB inactive_file:8548kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7488kB pagetables:2992kB bounce:0kB free_pcp:940kB local_pcp:620kB free_cma:0kB [ 1647.264925] 0 pages in swap cache [ 1647.310703] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1647.328806] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1647.366976] Swap cache stats: add 0, delete 0, find 0/0 [ 1647.381674] Free swap = 0kB [ 1647.393691] Total swap = 0kB [ 1647.400150] 2097051 pages RAM [ 1647.412789] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1647.425528] 0 pages HighMem/MovableOnly [ 1647.442939] 363849 pages reserved [ 1647.448872] lowmem_reserve[]: 0 0 0 0 0 [ 1647.452884] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1647.458643] 0 pages cma reserved [ 1647.503115] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 1647.540182] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 1647.578755] lowmem_reserve[]: 0 0 0 0 0 [ 1647.582789] Node 1 Normal free:90732kB min:53696kB low:67120kB high:80544kB active_anon:1016kB inactive_anon:35280kB active_file:44kB inactive_file:1244kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:512kB pagetables:356kB bounce:0kB free_pcp:1368kB local_pcp:732kB free_cma:0kB [ 1647.618171] device hsr_slave_0 entered promiscuous mode [ 1647.653123] device hsr_slave_1 entered promiscuous mode [ 1647.690613] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 1647.708637] lowmem_reserve[]: 0 0 0 0 0 [ 1647.712647] Node 0 DMA: 78*4kB (UME) 15*8kB (UE) 10*16kB (UM) 16*32kB (UME) 7*64kB (UME) 5*128kB (UME) 1*256kB (E) 1*512kB (E) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (U) = 11152kB [ 1647.720861] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 1647.784708] Node 0 DMA32: 6965*4kB (UME) 7017*8kB (UME) 5891*16kB (UME) 1342*32kB (UE) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 221196kB [ 1647.828579] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1647.859448] Node 1 Normal: 3431*4kB (UM) 1093*8kB (UM) 930*16kB (UME) 1016*32kB (UME) 393*64kB (U) 56*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 102180kB [ 1647.908708] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1647.928606] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1647.937248] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1647.973044] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1647.998965] 30460 total pagecache pages [ 1648.002964] 0 pages in swap cache [ 1648.006406] Swap cache stats: add 0, delete 0, find 0/0 [ 1648.028584] Free swap = 0kB [ 1648.033877] Total swap = 0kB [ 1648.037179] 2097051 pages RAM [ 1648.056371] 0 pages HighMem/MovableOnly [ 1648.060533] 363849 pages reserved [ 1648.064003] 0 pages cma reserved [ 1648.083321] Out of memory (oom_kill_allocating_task): Kill process 28801 (syz-executor.4) score 0 or sacrifice child [ 1648.108593] Killed process 28801 (syz-executor.4) total-vm:93120kB, anon-rss:84kB, file-rss:34032kB, shmem-rss:0kB 22:11:24 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) sendmsg$unix(r1, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x80000000, 0x6}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) [ 1648.133414] oom_reaper: reaped process 28801 (syz-executor.4), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1648.174891] Mem-Info: [ 1648.177344] active_anon:14890 inactive_anon:26305 isolated_anon:0 [ 1648.177344] active_file:396 inactive_file:2762 isolated_file:0 [ 1648.177344] unevictable:0 dirty:31 writeback:0 unstable:0 [ 1648.177344] slab_reclaimable:12740 slab_unreclaimable:119932 [ 1648.177344] mapped:55095 shmem:27413 pagetables:834 bounce:0 [ 1648.177344] free:154809 free_pcp:717 free_cma:0 [ 1648.257792] syz-executor.5: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1648.262376] syz-executor.2: [ 1648.287745] syz-executor.3: [ 1648.289471] Node 0 active_anon:58644kB inactive_anon:69940kB active_file:2732kB inactive_file:9648kB unevictable:0kB isolated(anon):96kB isolated(file):0kB mapped:181176kB dirty:92kB writeback:0kB shmem:74148kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1648.304583] page allocation failure: order:4 [ 1648.323573] syz-executor.0: [ 1648.324446] page allocation failure: order:4 [ 1648.328052] page allocation failure: order:4 [ 1648.338671] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1648.347485] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1648.355251] (null) [ 1648.364917] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 1648.372247] (null) [ 1648.374432] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 1648.381791] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 1648.390222] CPU: 0 PID: 29139 Comm: syz-executor.2 Not tainted 4.14.232-syzkaller #0 [ 1648.398117] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1648.407458] Call Trace: [ 1648.410047] dump_stack+0x1b2/0x281 [ 1648.413674] warn_alloc.cold+0x96/0x1cc [ 1648.417640] ? zone_watermark_ok_safe+0x220/0x220 [ 1648.418947] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 1648.422487] __alloc_pages_nodemask+0x2127/0x2720 [ 1648.422503] ? lock_acquire+0x170/0x3f0 [ 1648.437500] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1648.442339] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1648.447781] ? __mutex_unlock_slowpath+0x75/0x770 [ 1648.452616] alloc_pages_current+0x155/0x260 [ 1648.457018] ion_page_pool_alloc+0x118/0x1b0 [ 1648.461422] ion_system_heap_allocate+0x133/0x8c0 [ 1648.466264] ? ion_alloc+0x187/0x810 [ 1648.469973] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1648.475412] ? ion_system_contig_heap_create+0x130/0x130 [ 1648.480854] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1648.485867] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1648.490708] ion_alloc+0x204/0x810 [ 1648.494250] ? ion_dma_buf_release+0x40/0x40 [ 1648.498657] ? __might_fault+0x177/0x1b0 [ 1648.502714] ion_ioctl+0xea/0x1f0 [ 1648.506162] ? ion_query_heaps+0x360/0x360 [ 1648.510392] ? ion_query_heaps+0x360/0x360 [ 1648.514619] do_vfs_ioctl+0x75a/0xff0 [ 1648.518414] ? ioctl_preallocate+0x1a0/0x1a0 [ 1648.522812] ? lock_downgrade+0x740/0x740 [ 1648.526955] ? __fget+0x225/0x360 [ 1648.530401] ? do_vfs_ioctl+0xff0/0xff0 [ 1648.534364] ? security_file_ioctl+0x83/0xb0 [ 1648.538757] SyS_ioctl+0x7f/0xb0 [ 1648.542106] ? do_vfs_ioctl+0xff0/0xff0 [ 1648.546070] do_syscall_64+0x1d5/0x640 [ 1648.549954] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1648.555129] RIP: 0033:0x4665f9 [ 1648.558306] RSP: 002b:00007f66397b6188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1648.563892] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1648.565996] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1648.566002] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1648.566008] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1648.566014] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1648.566020] R13: 00007fff59ca014f R14: 00007f66397b6300 R15: 0000000000022000 [ 1648.567404] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1648.578533] Bluetooth: hci3 command 0x0419 tx timeout [ 1648.586895] Node 1 active_anon:1016kB inactive_anon:35280kB active_file:152kB inactive_file:1240kB unevictable:0kB isolated(anon):96kB isolated(file):0kB mapped:39904kB dirty:32kB writeback:0kB shmem:35504kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1648.601643] CPU: 1 PID: 29080 Comm: syz-executor.0 Not tainted 4.14.232-syzkaller #0 [ 1648.618547] (null) [ 1648.620549] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1648.620553] Call Trace: [ 1648.620568] dump_stack+0x1b2/0x281 [ 1648.620581] warn_alloc.cold+0x96/0x1cc [ 1648.652472] Node 0 [ 1648.655930] ? zone_watermark_ok_safe+0x220/0x220 [ 1648.655952] __alloc_pages_nodemask+0x2127/0x2720 [ 1648.661343] DMA free:11048kB min:204kB low:252kB high:300kB active_anon:136kB inactive_anon:0kB active_file:0kB inactive_file:112kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1648.667442] ? lock_acquire+0x170/0x3f0 [ 1648.667458] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1648.678672] lowmem_reserve[]: [ 1648.679824] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1648.679835] ? __mutex_unlock_slowpath+0x75/0x770 [ 1648.685747] 0 [ 1648.689495] alloc_pages_current+0x155/0x260 [ 1648.689508] ion_page_pool_alloc+0x118/0x1b0 [ 1648.689518] ion_system_heap_allocate+0x133/0x8c0 [ 1648.689527] ? ion_alloc+0x187/0x810 [ 1648.689536] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1648.689546] ? ion_system_contig_heap_create+0x130/0x130 [ 1648.689557] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1648.722988] syz-executor.3 cpuset= [ 1648.724158] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1648.724170] ion_alloc+0x204/0x810 [ 1648.728343] / [ 1648.732681] ? ion_dma_buf_release+0x40/0x40 [ 1648.749112] mems_allowed=0-1 [ 1648.752870] ? __might_fault+0x177/0x1b0 [ 1648.752883] ion_ioctl+0xea/0x1f0 [ 1648.752892] ? ion_query_heaps+0x360/0x360 [ 1648.783493] 2717 [ 1648.784705] ? ion_query_heaps+0x360/0x360 [ 1648.784716] do_vfs_ioctl+0x75a/0xff0 [ 1648.789126] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 1648.790842] ? ioctl_preallocate+0x1a0/0x1a0 [ 1648.790856] ? lock_downgrade+0x740/0x740 [ 1648.790869] ? __fget+0x225/0x360 [ 1648.790878] ? do_vfs_ioctl+0xff0/0xff0 [ 1648.790889] ? security_file_ioctl+0x83/0xb0 [ 1648.790898] SyS_ioctl+0x7f/0xb0 [ 1648.790905] ? do_vfs_ioctl+0xff0/0xff0 [ 1648.790917] do_syscall_64+0x1d5/0x640 [ 1648.796216] 2718 [ 1648.798071] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1648.798081] RIP: 0033:0x4665f9 [ 1648.811273] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 1648.811988] RSP: 002b:00007fc8c6af5188 EFLAGS: 00000246 [ 1648.821272] 2718 [ 1648.821801] ORIG_RAX: 0000000000000010 [ 1648.821813] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1648.841659] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 1648.842090] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1648.852372] 2718 [ 1648.853264] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1648.863648] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1648.874091] 8021q: adding VLAN 0 to HW filter on device team0 [ 1648.875019] R13: 00007ffdd42e705f R14: 00007fc8c6af5300 R15: 0000000000022000 [ 1648.891966] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 1648.904142] CPU: 1 PID: 28778 Comm: syz-executor.5 Not tainted 4.14.232-syzkaller #0 [ 1648.919016] Node 0 [ 1648.924191] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1648.924194] Call Trace: [ 1648.924215] dump_stack+0x1b2/0x281 [ 1648.963942] warn_alloc.cold+0x96/0x1cc [ 1648.967905] ? zone_watermark_ok_safe+0x220/0x220 [ 1648.972757] __alloc_pages_nodemask+0x2127/0x2720 [ 1648.977593] ? lock_acquire+0x170/0x3f0 [ 1648.981563] DMA32 free:624804kB min:36200kB low:45248kB high:54296kB active_anon:58484kB inactive_anon:69940kB active_file:3280kB inactive_file:8888kB unevictable:0kB writepending:108kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7488kB pagetables:2852kB bounce:0kB free_pcp:1244kB local_pcp:680kB free_cma:0kB [ 1648.981570] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1648.981588] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1649.020796] ? __mutex_unlock_slowpath+0x75/0x770 [ 1649.025634] alloc_pages_current+0x155/0x260 [ 1649.030039] ion_page_pool_alloc+0x118/0x1b0 [ 1649.034451] ion_system_heap_allocate+0x133/0x8c0 [ 1649.039282] ? _raw_spin_unlock+0x29/0x40 [ 1649.043423] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1649.048341] ? ion_system_contig_heap_create+0x130/0x130 [ 1649.053771] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1649.058778] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1649.063613] ion_alloc+0x27a/0x810 [ 1649.067133] ? ion_dma_buf_release+0x40/0x40 [ 1649.071527] ? __might_fault+0x177/0x1b0 [ 1649.075581] ion_ioctl+0xea/0x1f0 [ 1649.079026] ? ion_query_heaps+0x360/0x360 [ 1649.083252] ? ion_query_heaps+0x360/0x360 [ 1649.087475] do_vfs_ioctl+0x75a/0xff0 [ 1649.091268] ? ioctl_preallocate+0x1a0/0x1a0 [ 1649.095667] ? lock_downgrade+0x740/0x740 [ 1649.099796] ? __fget+0x225/0x360 [ 1649.103226] ? do_vfs_ioctl+0xff0/0xff0 [ 1649.107190] ? security_file_ioctl+0x83/0xb0 [ 1649.111585] SyS_ioctl+0x7f/0xb0 [ 1649.111819] lowmem_reserve[]: [ 1649.114935] ? do_vfs_ioctl+0xff0/0xff0 [ 1649.114937] 0 0 [ 1649.118037] do_syscall_64+0x1d5/0x640 [ 1649.127825] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1649.133004] RIP: 0033:0x4665f9 [ 1649.136186] RSP: 002b:00007f87ada6b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1649.143879] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1649.151130] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1649.151901] 0 [ 1649.158406] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1649.158413] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1649.174703] R13: 00007fff979d8a6f R14: 00007f87ada6b300 R15: 0000000000022000 [ 1649.178493] 0 0 [ 1649.188396] Bluetooth: hci4 command 0x0419 tx timeout [ 1649.188653] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1649.200144] CPU: 0 PID: 29099 Comm: syz-executor.3 Not tainted 4.14.232-syzkaller #0 [ 1649.208016] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1649.217358] Call Trace: [ 1649.219942] dump_stack+0x1b2/0x281 [ 1649.223568] warn_alloc.cold+0x96/0x1cc [ 1649.227541] ? zone_watermark_ok_safe+0x220/0x220 [ 1649.232507] __alloc_pages_nodemask+0x2127/0x2720 [ 1649.237353] ? lock_acquire+0x170/0x3f0 [ 1649.241330] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1649.246175] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1649.251623] ? __mutex_unlock_slowpath+0x75/0x770 [ 1649.256482] alloc_pages_current+0x155/0x260 [ 1649.260888] ion_page_pool_alloc+0x118/0x1b0 [ 1649.265378] ion_system_heap_allocate+0x133/0x8c0 [ 1649.270218] ? ion_alloc+0x187/0x810 [ 1649.273926] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1649.279369] ? ion_system_contig_heap_create+0x130/0x130 [ 1649.284816] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1649.289829] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1649.292931] Mem-Info: [ 1649.294664] ion_alloc+0x204/0x810 [ 1649.294680] ? ion_dma_buf_release+0x40/0x40 [ 1649.294690] ? __might_fault+0x177/0x1b0 [ 1649.294700] ion_ioctl+0xea/0x1f0 [ 1649.294708] ? ion_query_heaps+0x360/0x360 [ 1649.294719] ? ion_query_heaps+0x360/0x360 [ 1649.294729] do_vfs_ioctl+0x75a/0xff0 [ 1649.294738] ? ioctl_preallocate+0x1a0/0x1a0 [ 1649.294747] ? lock_downgrade+0x740/0x740 [ 1649.294760] ? __fget+0x225/0x360 [ 1649.297445] active_anon:14883 inactive_anon:26309 isolated_anon:0 [ 1649.297445] active_file:959 inactive_file:2477 isolated_file:0 [ 1649.297445] unevictable:0 dirty:41 writeback:0 unstable:0 [ 1649.297445] slab_reclaimable:12727 slab_unreclaimable:121399 [ 1649.297445] mapped:55325 shmem:27413 pagetables:804 bounce:0 [ 1649.297445] free:279730 free_pcp:704 free_cma:0 [ 1649.300672] ? do_vfs_ioctl+0xff0/0xff0 [ 1649.300685] ? security_file_ioctl+0x83/0xb0 [ 1649.300695] SyS_ioctl+0x7f/0xb0 [ 1649.300702] ? do_vfs_ioctl+0xff0/0xff0 [ 1649.300714] do_syscall_64+0x1d5/0x640 [ 1649.300729] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1649.305184] Node 0 active_anon:58628kB inactive_anon:69956kB active_file:3672kB inactive_file:8668kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:181380kB dirty:128kB writeback:0kB shmem:74148kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1649.309146] RIP: 0033:0x4665f9 [ 1649.309152] RSP: 002b:00007fd613a46188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1649.309162] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1649.309168] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1649.309173] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1649.309178] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1649.309183] R13: 00007ffce81deb9f R14: 00007fd613a46300 R15: 0000000000022000 [ 1649.318497] Node 0 [ 1649.341813] Node 1 active_anon:904kB inactive_anon:35280kB active_file:164kB inactive_file:1240kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:39920kB dirty:36kB writeback:0kB shmem:35504kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1649.388717] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1649.449609] Node 0 [ 1649.538499] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1649.590343] DMA free:11092kB min:204kB low:252kB high:300kB active_anon:136kB inactive_anon:0kB active_file:0kB inactive_file:112kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1649.610090] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1649.649640] lowmem_reserve[]: 0 0 0 0 0 [ 1649.653739] Node 1 Normal free:589884kB min:53696kB low:67120kB high:80544kB active_anon:904kB inactive_anon:35280kB active_file:164kB inactive_file:1240kB unevictable:0kB writepending:36kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:480kB pagetables:276kB bounce:0kB free_pcp:1276kB local_pcp:644kB free_cma:0kB [ 1649.671583] lowmem_reserve[]: [ 1649.688746] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1649.721604] 0 2717 2718 2718 2718 [ 1649.722301] bridge0: port 1(bridge_slave_0) entered blocking state [ 1649.731541] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1649.735809] Node 0 DMA32 free:368448kB min:36200kB low:45248kB high:54296kB active_anon:58492kB inactive_anon:69956kB active_file:3872kB inactive_file:8756kB unevictable:0kB writepending:128kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7520kB pagetables:2940kB bounce:0kB free_pcp:288kB local_pcp:148kB free_cma:0kB [ 1649.764119] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 1649.785111] lowmem_reserve[]: 0 0 0 0 0 [ 1649.802345] Node 0 DMA: 23*4kB (UME) 28*8kB (UE) 34*16kB (UM) 34*32kB (UME) 7*64kB (UME) 2*128kB (ME) 1*256kB (E) 2*512kB (UE) 3*1024kB (UME) 2*2048kB (UE) 0*4096kB = 11100kB [ 1649.822314] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1649.829677] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1649.849083] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1649.862407] Node 0 DMA32: 3*4kB (ME) 127*8kB (E) 2124*16kB (UME) 6308*32kB (UME) 1158*64kB (U) 96*128kB (U) 1*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 323524kB [ 1649.882349] lowmem_reserve[]: 0 0 0 0 0 [ 1649.888687] bridge0: port 2(bridge_slave_1) entered blocking state [ 1649.895051] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1649.900042] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1649.928467] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1649.947190] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 1649.968656] lowmem_reserve[]: 0 0 0 0 0 [ 1649.968920] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1649.972709] Node 1 Normal free:687004kB min:53696kB low:67120kB high:80544kB active_anon:904kB inactive_anon:35280kB active_file:164kB inactive_file:1240kB unevictable:0kB writepending:36kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:480kB pagetables:276kB bounce:0kB free_pcp:1252kB local_pcp:632kB free_cma:0kB [ 1650.004507] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 1650.018504] Node 1 Normal: 4758*4kB (UM) 2492*8kB (UM) 2330*16kB (UE) 2218*32kB (UE) 4827*64kB (U) 1188*128kB (U) 222*256kB (U) 53*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 692184kB [ 1650.048889] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1650.059810] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 1650.080736] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1650.090202] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 1650.097030] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1650.101661] lowmem_reserve[]: [ 1650.104345] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1650.111776] 0 0 0 0 0 [ 1650.129272] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1650.131204] Node 0 [ 1650.136885] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1650.143155] DMA: 23*4kB (UME) 26*8kB (UE) 32*16kB (UM) 34*32kB (UME) 9*64kB (UME) 2*128kB (ME) 1*256kB (E) 2*512kB (UE) 3*1024kB (UME) 2*2048kB (UE) 0*4096kB = 11180kB [ 1650.168460] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1650.178244] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1650.209093] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1650.217015] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1650.219535] Node 0 [ 1650.228819] 30985 total pagecache pages [ 1650.235014] 0 pages in swap cache [ 1650.238462] DMA32: 3*4kB (ME) 128*8kB (UE) 39*16kB (ME) 244*32kB (UME) 1244*64kB (U) 96*128kB (U) 1*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 101628kB [ 1650.238524] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1650.238573] Node 1 Normal: 4585*4kB (UM) 2282*8kB (UM) 1966*16kB (UE) 1872*32kB (UE) 5485*64kB (U) 1364*128kB (U) 233*256kB (U) 56*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 741908kB [ 1650.238646] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1650.238652] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1650.238659] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1650.238664] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1650.238668] 30985 total pagecache pages [ 1650.238677] 0 pages in swap cache [ 1650.238681] Swap cache stats: add 0, delete 0, find 0/0 [ 1650.238684] Free swap = 0kB [ 1650.238687] Total swap = 0kB [ 1650.238693] 2097051 pages RAM [ 1650.238697] 0 pages HighMem/MovableOnly [ 1650.238700] 363849 pages reserved [ 1650.238705] 0 pages cma reserved [ 1650.272059] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 1650.382344] Swap cache stats: add 0, delete 0, find 0/0 [ 1650.387724] Free swap = 0kB [ 1650.393314] Total swap = 0kB [ 1650.396470] 2097051 pages RAM [ 1650.421970] 0 pages HighMem/MovableOnly [ 1650.425963] 363849 pages reserved [ 1650.434812] 0 pages cma reserved [ 1650.498307] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1650.521136] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1650.561797] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 1650.579184] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1650.587215] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1650.642855] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 1650.652517] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1650.703879] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 1650.753333] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 1650.765724] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1650.779512] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1650.812648] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1651.155095] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 1651.165353] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 1651.198690] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1651.209231] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1651.405650] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 1651.422500] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 1651.449167] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 1651.471526] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 1651.478106] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1651.511358] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1651.540048] device veth0_vlan entered promiscuous mode [ 1651.589012] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1651.596127] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1651.642508] device veth1_vlan entered promiscuous mode [ 1651.663461] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 1651.703549] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 1651.754492] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 1651.781157] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 1651.788005] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1651.798818] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1651.805946] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1651.836950] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1651.859222] device veth0_macvtap entered promiscuous mode [ 1651.865632] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 1652.022239] syz-executor.1 invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1652.053204] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 1652.069895] CPU: 0 PID: 28799 Comm: syz-executor.1 Not tainted 4.14.232-syzkaller #0 [ 1652.077881] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1652.087211] Call Trace: [ 1652.089784] dump_stack+0x1b2/0x281 [ 1652.093389] dump_header+0x178/0x82f [ 1652.097079] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1652.102158] ? ___ratelimit+0x2cd/0x530 [ 1652.106109] oom_kill_process.cold+0x10/0xa40 [ 1652.110585] out_of_memory+0xe3e/0x1190 [ 1652.114549] ? oom_killer_disable+0x1c0/0x1c0 [ 1652.119021] ? mutex_trylock+0x152/0x1a0 [ 1652.123061] __alloc_pages_nodemask+0x23e1/0x2720 [ 1652.127888] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1652.132718] alloc_pages_current+0x155/0x260 [ 1652.137124] filemap_fault+0x11a1/0x1ad0 [ 1652.141168] ext4_filemap_fault+0x84/0xb0 [ 1652.145293] __do_fault+0xfa/0x380 [ 1652.148824] __handle_mm_fault+0x2497/0x4620 [ 1652.153243] ? vm_insert_page+0x7c0/0x7c0 [ 1652.157381] ? mark_held_locks+0xa6/0xf0 [ 1652.161422] handle_mm_fault+0x455/0x9c0 [ 1652.165463] __do_page_fault+0x549/0xad0 [ 1652.169590] ? spurious_fault+0x640/0x640 [ 1652.173714] ? do_page_fault+0x60/0x500 [ 1652.177664] ? page_fault+0x2f/0x50 [ 1652.181265] page_fault+0x45/0x50 [ 1652.184710] RIP: 4bf950:0x7ffc6d398010 [ 1652.188573] RSP: 0000:00007ffc6d397ec0 EFLAGS: 7ffc6d397ed0 [ 1652.218908] Mem-Info: [ 1652.227052] active_anon:15094 inactive_anon:26307 isolated_anon:0 [ 1652.227052] active_file:11 inactive_file:45 isolated_file:0 [ 1652.227052] unevictable:0 dirty:0 writeback:22 unstable:0 [ 1652.227052] slab_reclaimable:12672 slab_unreclaimable:121426 [ 1652.227052] mapped:44169 shmem:27409 pagetables:781 bounce:0 [ 1652.227052] free:13762 free_pcp:0 free_cma:0 [ 1652.238427] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1652.266566] Node 0 active_anon:58324kB inactive_anon:69952kB active_file:32kB inactive_file:72kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:172420kB dirty:0kB writeback:8kB shmem:74144kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1652.298502] Node 1 active_anon:2052kB inactive_anon:35276kB active_file:12kB inactive_file:108kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:4256kB dirty:0kB writeback:80kB shmem:35492kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1652.336233] Node 0 DMA free:10956kB min:204kB low:252kB high:300kB active_anon:136kB inactive_anon:0kB active_file:8kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1652.399734] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1652.404789] Node 0 DMA32 free:17560kB min:36200kB low:45248kB high:54296kB active_anon:58188kB inactive_anon:69952kB active_file:400kB inactive_file:300kB unevictable:0kB writepending:8kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7520kB pagetables:2864kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1652.435667] syz-executor.5: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1652.447532] lowmem_reserve[]: 0 0 0 0 0 [ 1652.453581] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1652.481988] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 1652.487113] CPU: 1 PID: 28778 Comm: syz-executor.5 Not tainted 4.14.232-syzkaller #0 [ 1652.494983] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1652.504329] Call Trace: [ 1652.506912] dump_stack+0x1b2/0x281 [ 1652.510535] warn_alloc.cold+0x96/0x1cc [ 1652.514504] ? zone_watermark_ok_safe+0x220/0x220 [ 1652.519340] ? usleep_range+0x130/0x130 [ 1652.523304] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1652.528410] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1652.533416] ? run_timer_softirq+0x5a0/0x5a0 [ 1652.537830] __alloc_pages_nodemask+0x2127/0x2720 [ 1652.542679] ? lock_acquire+0x170/0x3f0 [ 1652.546648] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1652.551488] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1652.556002] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1652.561457] alloc_pages_current+0x155/0x260 [ 1652.565859] ion_page_pool_alloc+0x118/0x1b0 [ 1652.570287] ion_system_heap_allocate+0x133/0x8c0 [ 1652.575137] ? _raw_spin_unlock+0x29/0x40 [ 1652.579284] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1652.584230] ? ion_system_contig_heap_create+0x130/0x130 [ 1652.589681] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1652.594714] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1652.597008] lowmem_reserve[]: [ 1652.599561] ion_alloc+0x27a/0x810 [ 1652.599575] ? ion_dma_buf_release+0x40/0x40 [ 1652.599588] ? __might_fault+0x177/0x1b0 [ 1652.599598] ion_ioctl+0xea/0x1f0 [ 1652.599607] ? ion_query_heaps+0x360/0x360 [ 1652.599620] ? ion_query_heaps+0x360/0x360 [ 1652.599630] do_vfs_ioctl+0x75a/0xff0 [ 1652.599642] ? ioctl_preallocate+0x1a0/0x1a0 [ 1652.599652] ? lock_downgrade+0x740/0x740 [ 1652.599664] ? __fget+0x225/0x360 [ 1652.599672] ? do_vfs_ioctl+0xff0/0xff0 [ 1652.599682] ? security_file_ioctl+0x83/0xb0 [ 1652.599692] SyS_ioctl+0x7f/0xb0 [ 1652.599699] ? do_vfs_ioctl+0xff0/0xff0 [ 1652.599711] do_syscall_64+0x1d5/0x640 [ 1652.599724] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1652.599732] RIP: 0033:0x4665f9 [ 1652.599737] RSP: 002b:00007f87ada6b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1652.599746] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1652.599751] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1652.599756] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1652.599761] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1652.599767] R13: 00007fff979d8a6f R14: 00007f87ada6b300 R15: 0000000000022000 [ 1652.606445] warn_alloc_show_mem: 3 callbacks suppressed [ 1652.606448] Mem-Info: [ 1652.619524] 0 [ 1652.632106] active_anon:15094 inactive_anon:26307 isolated_anon:0 [ 1652.632106] active_file:11 inactive_file:45 isolated_file:0 [ 1652.632106] unevictable:0 dirty:0 writeback:22 unstable:0 [ 1652.632106] slab_reclaimable:12672 slab_unreclaimable:120984 [ 1652.632106] mapped:44169 shmem:27409 pagetables:781 bounce:0 [ 1652.632106] free:14140 free_pcp:0 free_cma:0 [ 1652.644357] 0 [ 1652.653295] Node 0 active_anon:58324kB inactive_anon:69952kB active_file:32kB inactive_file:72kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:172420kB dirty:0kB writeback:8kB shmem:74144kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1652.657165] 0 [ 1652.664273] Node 1 active_anon:2052kB inactive_anon:35276kB active_file:12kB inactive_file:108kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:4256kB dirty:0kB writeback:80kB shmem:35492kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1652.678971] 0 [ 1652.687491] Node 0 [ 1652.713456] 0 [ 1652.725856] DMA free:10956kB min:204kB low:252kB high:300kB active_anon:136kB inactive_anon:0kB active_file:8kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1652.826541] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1652.861352] Node 1 [ 1652.864579] Node 0 [ 1652.864598] Normal free:26532kB min:53696kB low:67120kB high:80544kB active_anon:2052kB inactive_anon:35276kB active_file:48kB inactive_file:0kB unevictable:0kB writepending:180kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:448kB pagetables:260kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1652.866809] DMA32 free:19072kB min:36200kB low:45248kB high:54296kB active_anon:58188kB inactive_anon:69952kB active_file:104kB inactive_file:48kB unevictable:0kB writepending:8kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7520kB pagetables:2864kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1652.883912] lowmem_reserve[]: [ 1652.902201] lowmem_reserve[]: 0 0 0 0 0 [ 1652.940922] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1652.942331] 0 0 0 0 0 [ 1652.978758] lowmem_reserve[]: 0 0 0 0 0 [ 1652.980144] Node 0 [ 1652.984068] Node 1 [ 1652.984071] DMA: 10*4kB [ 1652.986299] Normal free:26968kB min:53696kB low:67120kB high:80544kB active_anon:2052kB inactive_anon:35276kB active_file:40kB inactive_file:44kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:448kB pagetables:260kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1652.997334] (ME) [ 1653.030874] lowmem_reserve[]: [ 1653.032138] 10*8kB [ 1653.032946] 0 [ 1653.036237] (UME) [ 1653.045982] 0 0 0 0 [ 1653.054546] Node 0 DMA: 10*4kB (ME) 10*8kB (UME) 30*16kB (UM) 34*32kB (UME) 9*64kB (UME) 2*128kB (ME) 1*256kB (E) 2*512kB (UE) 3*1024kB (UME) 2*2048kB (UE) 0*4096kB = 10968kB [ 1653.067226] 30*16kB (UM) 34*32kB (UME) 9*64kB (UME) 2*128kB (ME) 1*256kB (E) 2*512kB (UE) 3*1024kB (UME) 2*2048kB (UE) 0*4096kB = 10968kB [ 1653.080776] Node 0 DMA32: 972*4kB (UME) 579*8kB (UME) 150*16kB (UME) 19*32kB (ME) 9*64kB (M) 58*128kB (U) 1*256kB (M) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 19784kB [ 1653.095187] Node 0 DMA32: 972*4kB (UME) 579*8kB (UME) 150*16kB (UME) 19*32kB (ME) 9*64kB (M) 58*128kB (U) 1*256kB (M) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 19784kB [ 1653.110201] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1653.126803] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1653.138555] Node 1 Normal: 52*4kB (UM) 33*8kB (UM) 20*16kB (ME) 10*32kB (ME) 4*64kB (UM) 2*128kB (UM) 1*256kB (M) 49*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 26968kB [ 1653.148699] Node 1 Normal: 52*4kB (UM) [ 1653.154261] device bridge_slave_1 left promiscuous mode [ 1653.164284] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1653.172014] bridge0: port 2(bridge_slave_1) entered disabled state [ 1653.176526] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1653.188140] 33*8kB (UM) 20*16kB (ME) 10*32kB (ME) 4*64kB (UM) 2*128kB (UM) 1*256kB [ 1653.195961] device bridge_slave_0 left promiscuous mode [ 1653.199463] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1653.219429] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1653.225385] (M) [ 1653.227997] 27441 total pagecache pages [ 1653.228004] 49*512kB [ 1653.236056] bridge0: port 1(bridge_slave_0) entered disabled state [ 1653.239183] 0 pages in swap cache [ 1653.254938] (U) 0*1024kB 0*2048kB 0*4096kB = 26968kB [ 1653.258844] Swap cache stats: add 0, delete 0, find 0/0 [ 1653.262030] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1653.265408] Free swap = 0kB [ 1653.284814] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1653.288667] Total swap = 0kB [ 1653.296388] 2097051 pages RAM [ 1653.297696] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1653.309890] 0 pages HighMem/MovableOnly [ 1653.313857] 363849 pages reserved [ 1653.317298] 0 pages cma reserved [ 1653.319291] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1653.349040] 27552 total pagecache pages [ 1653.353785] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 1653.378704] 0 pages in swap cache [ 1653.382347] Swap cache stats: add 0, delete 0, find 0/0 [ 1653.408680] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 1653.415743] Free swap = 0kB [ 1653.422436] Total swap = 0kB [ 1653.425461] 2097051 pages RAM [ 1653.458226] 0 pages HighMem/MovableOnly [ 1653.462208] 363849 pages reserved [ 1653.465645] 0 pages cma reserved [ 1653.489858] Out of memory (oom_kill_allocating_task): Kill process 28799 (syz-executor.1) score 0 or sacrifice child [ 1653.517923] bond0 (unregistering): Released all slaves [ 1653.534060] Killed process 28799 (syz-executor.1) total-vm:93120kB, anon-rss:84kB, file-rss:33964kB, shmem-rss:0kB [ 1653.571694] oom_reaper: reaped process 28799 (syz-executor.1), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1653.999885] syz-executor.1 invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1654.052201] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 1654.057444] CPU: 0 PID: 28798 Comm: syz-executor.1 Not tainted 4.14.232-syzkaller #0 [ 1654.065310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1654.074646] Call Trace: [ 1654.077224] dump_stack+0x1b2/0x281 [ 1654.080840] dump_header+0x178/0x82f [ 1654.084542] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1654.089635] ? ___ratelimit+0x2cd/0x530 [ 1654.093598] oom_kill_process.cold+0x10/0xa40 [ 1654.098108] out_of_memory+0xe3e/0x1190 [ 1654.102073] ? oom_killer_disable+0x1c0/0x1c0 [ 1654.106553] ? mutex_trylock+0x152/0x1a0 [ 1654.110601] __alloc_pages_nodemask+0x23e1/0x2720 [ 1654.115530] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1654.120381] alloc_pages_current+0x155/0x260 [ 1654.124781] filemap_fault+0x11a1/0x1ad0 [ 1654.128863] ext4_filemap_fault+0x84/0xb0 [ 1654.132996] __do_fault+0xfa/0x380 [ 1654.136521] __handle_mm_fault+0x2497/0x4620 [ 1654.140917] ? vm_insert_page+0x7c0/0x7c0 [ 1654.145051] ? lock_downgrade+0x740/0x740 [ 1654.149208] ? mark_held_locks+0xa6/0xf0 [ 1654.153255] handle_mm_fault+0x455/0x9c0 [ 1654.157302] __do_page_fault+0x549/0xad0 [ 1654.161351] ? spurious_fault+0x640/0x640 [ 1654.165495] ? do_page_fault+0x60/0x500 [ 1654.169452] ? page_fault+0x2f/0x50 [ 1654.173062] page_fault+0x45/0x50 [ 1654.176500] RIP: 001a:0x549060 [ 1654.179673] RSP: 546f60:0000000000000000 EFLAGS: 0000001a [ 1654.192521] Mem-Info: [ 1654.262888] active_anon:15029 inactive_anon:26305 isolated_anon:0 [ 1654.262888] active_file:36 inactive_file:11 isolated_file:0 [ 1654.262888] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1654.262888] slab_reclaimable:12672 slab_unreclaimable:119402 [ 1654.262888] mapped:44185 shmem:27405 pagetables:734 bounce:0 [ 1654.262888] free:25120 free_pcp:0 free_cma:0 [ 1654.424809] Node 0 active_anon:58208kB inactive_anon:69944kB active_file:56kB inactive_file:80kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:172536kB dirty:0kB writeback:0kB shmem:74136kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1654.494606] Node 1 active_anon:1908kB inactive_anon:35276kB active_file:80kB inactive_file:44kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:4204kB dirty:0kB writeback:0kB shmem:35484kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1654.631782] Node 0 DMA free:11068kB min:204kB low:252kB high:300kB active_anon:124kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1654.745472] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1654.773796] Node 0 DMA32 free:36132kB min:36200kB low:45248kB high:54296kB active_anon:58084kB inactive_anon:69944kB active_file:120kB inactive_file:4kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7424kB pagetables:2676kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1654.873771] lowmem_reserve[]: 0 0 0 0 0 [ 1654.913432] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1655.068209] lowmem_reserve[]: 0 0 0 0 0 [ 1655.072221] Node 1 Normal free:53048kB min:53696kB low:67120kB high:80544kB active_anon:1908kB inactive_anon:35276kB active_file:104kB inactive_file:0kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:448kB pagetables:260kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1655.174576] lowmem_reserve[]: 0 0 0 0 0 [ 1655.178630] Node 0 DMA: 11*4kB (ME) 10*8kB (ME) 10*16kB (M) 19*32kB (UME) 15*64kB (UME) 6*128kB (UME) 1*256kB (E) 2*512kB (UE) 3*1024kB (UME) 2*2048kB (UE) 0*4096kB = 11068kB [ 1655.231741] Node 0 DMA32: 951*4kB (ME) 490*8kB (UME) 77*16kB (UME) 19*32kB (UME) 292*64kB (UM) 62*128kB (U) 1*256kB (M) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36444kB [ 1655.298490] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1655.352135] Node 1 Normal: 52*4kB (M) 39*8kB (UM) 21*16kB (ME) 13*32kB (UME) 11*64kB (UM) 207*128kB (UM) 18*256kB (UM) 39*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 53048kB [ 1655.375064] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1655.383934] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1655.437696] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1655.487179] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1655.539925] 27452 total pagecache pages [ 1655.544001] 0 pages in swap cache [ 1655.547436] Swap cache stats: add 0, delete 0, find 0/0 [ 1655.638365] Free swap = 0kB [ 1655.641402] Total swap = 0kB [ 1655.644408] 2097051 pages RAM [ 1655.647501] 0 pages HighMem/MovableOnly [ 1655.708568] 363849 pages reserved [ 1655.712033] 0 pages cma reserved [ 1655.715387] Out of memory (oom_kill_allocating_task): Kill process 28798 (syz-executor.1) score 0 or sacrifice child [ 1655.815788] Killed process 28798 (syz-executor.1) total-vm:84924kB, anon-rss:64kB, file-rss:0kB, shmem-rss:0kB [ 1655.891183] oom_reaper: reaped process 28798 (syz-executor.1), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1655.983778] syz-fuzzer invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1656.062181] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 1656.066975] CPU: 0 PID: 7965 Comm: syz-fuzzer Not tainted 4.14.232-syzkaller #0 [ 1656.074404] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1656.083733] Call Trace: [ 1656.086299] dump_stack+0x1b2/0x281 [ 1656.089909] dump_header+0x178/0x82f [ 1656.093601] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1656.098697] ? ___ratelimit+0x2cd/0x530 [ 1656.102648] oom_kill_process.cold+0x10/0xa40 [ 1656.107128] out_of_memory+0xe3e/0x1190 [ 1656.111091] ? oom_killer_disable+0x1c0/0x1c0 [ 1656.115560] ? mutex_trylock+0x152/0x1a0 [ 1656.119600] __alloc_pages_nodemask+0x23e1/0x2720 [ 1656.124428] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1656.129258] alloc_pages_current+0x155/0x260 [ 1656.133646] filemap_fault+0x11a1/0x1ad0 [ 1656.137691] ext4_filemap_fault+0x84/0xb0 [ 1656.141815] __do_fault+0xfa/0x380 [ 1656.145331] __handle_mm_fault+0x2497/0x4620 [ 1656.149719] ? vm_insert_page+0x7c0/0x7c0 [ 1656.153844] ? free_object+0xe4/0x240 [ 1656.157631] ? mark_held_locks+0xa6/0xf0 [ 1656.161670] handle_mm_fault+0x455/0x9c0 [ 1656.165712] __do_page_fault+0x549/0xad0 [ 1656.169755] ? spurious_fault+0x640/0x640 [ 1656.173877] ? do_page_fault+0x60/0x500 [ 1656.177825] ? page_fault+0x2f/0x50 [ 1656.181427] page_fault+0x45/0x50 [ 1656.184864] RIP: 0040:0x947867 [ 1656.188028] RSP: 42e400:000000c00049db68 EFLAGS: 00000040 [ 1656.291992] Mem-Info: [ 1656.303817] active_anon:15009 inactive_anon:26305 isolated_anon:0 [ 1656.303817] active_file:235 inactive_file:338 isolated_file:32 [ 1656.303817] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1656.303817] slab_reclaimable:12659 slab_unreclaimable:119250 [ 1656.303817] mapped:35960 shmem:27405 pagetables:734 bounce:0 [ 1656.303817] free:25234 free_pcp:59 free_cma:0 [ 1656.341990] Node 0 active_anon:58128kB inactive_anon:69944kB active_file:900kB inactive_file:1104kB unevictable:0kB isolated(anon):0kB isolated(file):256kB mapped:139540kB dirty:0kB writeback:0kB shmem:74136kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1656.373158] Node 1 active_anon:1908kB inactive_anon:35276kB active_file:40kB inactive_file:36kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:4200kB dirty:0kB writeback:0kB shmem:35484kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1656.405779] Node 0 DMA free:11068kB min:204kB low:252kB high:300kB active_anon:124kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1656.437193] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1656.442813] Node 0 DMA32 free:36320kB min:36200kB low:45248kB high:54296kB active_anon:58004kB inactive_anon:69944kB active_file:1016kB inactive_file:888kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7424kB pagetables:2676kB bounce:0kB free_pcp:240kB local_pcp:240kB free_cma:0kB [ 1656.480811] lowmem_reserve[]: 0 0 0 0 0 [ 1656.487428] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1656.517118] lowmem_reserve[]: 0 0 0 0 0 [ 1656.521943] Node 1 Normal free:53048kB min:53696kB low:67120kB high:80544kB active_anon:1908kB inactive_anon:35276kB active_file:40kB inactive_file:36kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:448kB pagetables:260kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1656.554564] lowmem_reserve[]: 0 0 0 0 0 [ 1656.582106] Node 0 DMA: 11*4kB (ME) 10*8kB (ME) 10*16kB (M) 19*32kB (UME) 15*64kB (UME) 6*128kB (UME) 1*256kB (E) 2*512kB (UE) 3*1024kB (UME) 2*2048kB (UE) 0*4096kB = 11068kB [ 1656.668029] Node 0 DMA32: 950*4kB (ME) 490*8kB (UME) 77*16kB (UME) 31*32kB (UME) 291*64kB (UM) 62*128kB (U) 1*256kB (M) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36760kB [ 1656.714439] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1656.763687] Node 1 Normal: 57*4kB (UM) 42*8kB (UM) 22*16kB (UME) 13*32kB (UME) 11*64kB (UM) 207*128kB (UM) 18*256kB (UM) 39*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 53108kB [ 1656.841630] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1656.879226] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1656.887835] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1656.904197] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1656.912817] 27454 total pagecache pages [ 1656.916786] 0 pages in swap cache [ 1656.927587] Swap cache stats: add 0, delete 0, find 0/0 [ 1656.937042] Free swap = 0kB [ 1656.947401] Total swap = 0kB [ 1656.954915] 2097051 pages RAM [ 1656.965671] 0 pages HighMem/MovableOnly [ 1656.973375] 363849 pages reserved [ 1656.976826] 0 pages cma reserved [ 1657.018032] Out of memory (oom_kill_allocating_task): Kill process 7965 (syz-fuzzer) score 0 or sacrifice child [ 1657.036435] Killed process 27787 (syz-executor.2) total-vm:84924kB, anon-rss:64kB, file-rss:0kB, shmem-rss:0kB 22:11:33 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) sendmsg$unix(r1, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x80000000, 0x6}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) [ 1657.072378] oom_reaper: reaped process 27787 (syz-executor.2), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1657.361291] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1657.385307] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1657.419446] device bridge_slave_1 left promiscuous mode [ 1657.455524] bridge0: port 2(bridge_slave_1) entered disabled state [ 1657.476565] device bridge_slave_0 left promiscuous mode [ 1657.495235] bridge0: port 1(bridge_slave_0) entered disabled state [ 1657.504717] device veth0_macvtap left promiscuous mode [ 1657.518376] device veth1_vlan left promiscuous mode [ 1657.523482] device veth0_vlan left promiscuous mode [ 1657.794480] device hsr_slave_1 left promiscuous mode [ 1657.830935] device hsr_slave_0 left promiscuous mode [ 1657.876259] team0 (unregistering): Port device team_slave_1 removed [ 1657.909473] team0 (unregistering): Port device team_slave_0 removed [ 1657.931351] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 1657.954217] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 1658.035140] bond0 (unregistering): Released all slaves 22:11:34 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) sendmsg$unix(r1, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x80000000, 0x6}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) [ 1658.791400] syz-executor.0: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1658.957460] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 1658.962904] CPU: 0 PID: 29201 Comm: syz-executor.0 Not tainted 4.14.232-syzkaller #0 [ 1658.970778] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1658.980120] Call Trace: [ 1658.982702] dump_stack+0x1b2/0x281 [ 1658.986334] warn_alloc.cold+0x96/0x1cc [ 1658.990308] ? zone_watermark_ok_safe+0x220/0x220 [ 1658.995162] __alloc_pages_nodemask+0x2127/0x2720 [ 1658.999998] ? _raw_spin_unlock_irq+0x5a/0x80 [ 1659.004480] ? finish_task_switch+0x178/0x610 [ 1659.008960] ? finish_task_switch+0x14d/0x610 [ 1659.013451] ? lock_acquire+0x170/0x3f0 [ 1659.017428] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1659.022273] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1659.027717] ? __mutex_unlock_slowpath+0x75/0x770 [ 1659.032550] ? alloc_pages_current+0x73/0x260 [ 1659.037039] alloc_pages_current+0x155/0x260 [ 1659.041442] ion_page_pool_alloc+0x118/0x1b0 [ 1659.045838] ion_system_heap_allocate+0x133/0x8c0 [ 1659.050671] ? ion_alloc+0x187/0x810 [ 1659.054474] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1659.059918] ? ion_system_contig_heap_create+0x130/0x130 [ 1659.065367] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1659.070379] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1659.075213] ion_alloc+0x204/0x810 [ 1659.078746] ? ion_dma_buf_release+0x40/0x40 [ 1659.083149] ? __might_fault+0x177/0x1b0 [ 1659.087207] ion_ioctl+0xea/0x1f0 [ 1659.090652] ? ion_query_heaps+0x360/0x360 [ 1659.094879] ? ion_query_heaps+0x360/0x360 [ 1659.099108] do_vfs_ioctl+0x75a/0xff0 [ 1659.102902] ? ioctl_preallocate+0x1a0/0x1a0 [ 1659.107308] ? lock_downgrade+0x740/0x740 [ 1659.111459] ? __fget+0x225/0x360 [ 1659.114905] ? do_vfs_ioctl+0xff0/0xff0 [ 1659.118874] ? security_file_ioctl+0x83/0xb0 [ 1659.123391] SyS_ioctl+0x7f/0xb0 [ 1659.126746] ? do_vfs_ioctl+0xff0/0xff0 [ 1659.130713] do_syscall_64+0x1d5/0x640 [ 1659.134596] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1659.139772] RIP: 0033:0x4665f9 [ 1659.142954] RSP: 002b:00007fc8c6af5188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1659.150671] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1659.157932] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1659.165190] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1659.172447] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1659.179710] R13: 00007ffdd42e705f R14: 00007fc8c6af5300 R15: 0000000000022000 [ 1659.345633] syz-executor.5: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1659.365382] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 1659.370727] CPU: 0 PID: 29197 Comm: syz-executor.5 Not tainted 4.14.232-syzkaller #0 [ 1659.378602] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1659.387945] Call Trace: [ 1659.390527] dump_stack+0x1b2/0x281 [ 1659.394146] warn_alloc.cold+0x96/0x1cc [ 1659.398115] ? zone_watermark_ok_safe+0x220/0x220 [ 1659.402967] __alloc_pages_nodemask+0x2127/0x2720 [ 1659.407809] ? lock_acquire+0x170/0x3f0 [ 1659.411776] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1659.416645] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1659.422087] ? __mutex_unlock_slowpath+0x75/0x770 [ 1659.426933] ? alloc_pages_current+0x21c/0x260 [ 1659.431511] alloc_pages_current+0x155/0x260 [ 1659.435913] ion_page_pool_alloc+0x118/0x1b0 [ 1659.440313] ion_system_heap_allocate+0x133/0x8c0 [ 1659.445145] ? ion_alloc+0x187/0x810 [ 1659.448852] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1659.454293] ? ion_system_contig_heap_create+0x130/0x130 [ 1659.459737] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1659.464744] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1659.469582] ion_alloc+0x204/0x810 [ 1659.473112] ? ion_dma_buf_release+0x40/0x40 [ 1659.477510] ? __might_fault+0x177/0x1b0 [ 1659.481568] ion_ioctl+0xea/0x1f0 [ 1659.485014] ? ion_query_heaps+0x360/0x360 [ 1659.489244] ? ion_query_heaps+0x360/0x360 [ 1659.493467] do_vfs_ioctl+0x75a/0xff0 [ 1659.497261] ? ioctl_preallocate+0x1a0/0x1a0 [ 1659.501657] ? lock_downgrade+0x740/0x740 [ 1659.505798] ? __fget+0x225/0x360 [ 1659.509247] ? do_vfs_ioctl+0xff0/0xff0 [ 1659.513212] ? security_file_ioctl+0x83/0xb0 [ 1659.517610] SyS_ioctl+0x7f/0xb0 [ 1659.520967] ? do_vfs_ioctl+0xff0/0xff0 [ 1659.524932] do_syscall_64+0x1d5/0x640 [ 1659.528814] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1659.533990] RIP: 0033:0x4665f9 [ 1659.537180] RSP: 002b:00007f87ada6b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1659.544875] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1659.552135] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1659.559397] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1659.566653] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1659.573912] R13: 00007fff979d8a6f R14: 00007f87ada6b300 R15: 0000000000022000 [ 1659.735053] Mem-Info: [ 1659.747105] active_anon:15118 inactive_anon:26308 isolated_anon:0 [ 1659.747105] active_file:303 inactive_file:323 isolated_file:0 [ 1659.747105] unevictable:0 dirty:4 writeback:0 unstable:0 [ 1659.747105] slab_reclaimable:12656 slab_unreclaimable:118264 [ 1659.747105] mapped:53501 shmem:27409 pagetables:782 bounce:0 [ 1659.747105] free:26284 free_pcp:266 free_cma:0 [ 1659.796457] Node 0 active_anon:57812kB inactive_anon:69940kB active_file:1040kB inactive_file:1024kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:177324kB dirty:0kB writeback:0kB shmem:74132kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1659.866171] Node 1 active_anon:2660kB inactive_anon:35292kB active_file:48kB inactive_file:44kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:36380kB dirty:16kB writeback:0kB shmem:35504kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1659.932496] Node 0 DMA free:11068kB min:204kB low:252kB high:300kB active_anon:124kB inactive_anon:0kB active_file:24kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1659.997724] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1660.012359] Node 0 DMA32 free:36416kB min:36200kB low:45248kB high:54296kB active_anon:57688kB inactive_anon:69940kB active_file:932kB inactive_file:464kB unevictable:0kB writepending:28kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7392kB pagetables:2488kB bounce:0kB free_pcp:364kB local_pcp:144kB free_cma:0kB [ 1660.060207] lowmem_reserve[]: 0 0 0 0 0 [ 1660.090315] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1660.164801] lowmem_reserve[]: 0 0 0 0 0 [ 1660.181272] Node 1 Normal free:54764kB min:53696kB low:67120kB high:80544kB active_anon:2660kB inactive_anon:35292kB active_file:60kB inactive_file:1856kB unevictable:0kB writepending:4kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:544kB pagetables:640kB bounce:0kB free_pcp:164kB local_pcp:144kB free_cma:0kB [ 1660.277780] lowmem_reserve[]: 0 0 0 0 0 [ 1660.281796] Node 0 DMA: 12*4kB (UME) 10*8kB (ME) 10*16kB (M) 7*32kB (ME) 15*64kB (UME) 5*128kB (UME) 1*256kB (E) 1*512kB (E) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (U) = 11072kB [ 1660.317794] Node 0 DMA32: 141*4kB (UME) 375*8kB (UME) 59*16kB (UME) 10*32kB (UME) 441*64kB (U) 21*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 35740kB [ 1660.347785] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1660.387790] Node 1 Normal: 57*4kB (M) 68*8kB (M) 31*16kB (ME) 41*32kB (UME) 179*64kB (UM) 35*128kB (UM) 30*256kB (UM) 11*512kB (M) 5*1024kB (UM) 1*2048kB (M) 6*4096kB (U) = 63572kB [ 1660.444178] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1660.477319] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1660.502728] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1660.514718] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1660.524321] 27981 total pagecache pages [ 1660.532135] 0 pages in swap cache [ 1660.536201] Swap cache stats: add 0, delete 0, find 0/0 [ 1660.542176] Free swap = 0kB [ 1660.545631] Total swap = 0kB [ 1660.553812] 2097051 pages RAM [ 1660.556973] 0 pages HighMem/MovableOnly [ 1660.561849] 363849 pages reserved [ 1660.565361] 0 pages cma reserved [ 1660.710749] Bluetooth: hci3 command 0x0409 tx timeout [ 1660.876012] syz-executor.0 invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1660.897280] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 1660.918761] CPU: 1 PID: 28477 Comm: syz-executor.0 Not tainted 4.14.232-syzkaller #0 [ 1660.926634] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1660.935961] Call Trace: [ 1660.938536] dump_stack+0x1b2/0x281 [ 1660.942152] dump_header+0x178/0x82f [ 1660.945839] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1660.950929] ? ___ratelimit+0x2cd/0x530 [ 1660.954894] oom_kill_process.cold+0x10/0xa40 [ 1660.959389] out_of_memory+0xe3e/0x1190 [ 1660.963354] ? oom_killer_disable+0x1c0/0x1c0 [ 1660.967829] ? mutex_trylock+0x152/0x1a0 [ 1660.971881] __alloc_pages_nodemask+0x23e1/0x2720 [ 1660.976732] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1660.981559] alloc_pages_current+0x155/0x260 [ 1660.985943] filemap_fault+0x11a1/0x1ad0 [ 1660.989998] ext4_filemap_fault+0x84/0xb0 [ 1660.994147] __do_fault+0xfa/0x380 [ 1660.997667] __handle_mm_fault+0x2497/0x4620 [ 1661.002055] ? vm_insert_page+0x7c0/0x7c0 [ 1661.006175] ? hrtimer_nanosleep+0x1ff/0x4b0 [ 1661.010566] ? nanosleep_copyout+0x100/0x100 [ 1661.014960] ? mark_held_locks+0xa6/0xf0 [ 1661.019006] handle_mm_fault+0x455/0x9c0 [ 1661.023052] __do_page_fault+0x549/0xad0 [ 1661.027088] ? spurious_fault+0x640/0x640 [ 1661.031220] ? do_page_fault+0x60/0x500 [ 1661.035188] ? page_fault+0x2f/0x50 [ 1661.038806] page_fault+0x45/0x50 [ 1661.042240] RIP: 1951f7:0x6 [ 1661.045142] RSP: 000f:00007ffdd42e731c EFLAGS: 00000032 [ 1661.052552] Mem-Info: [ 1661.062542] active_anon:15119 inactive_anon:26308 isolated_anon:0 [ 1661.062542] active_file:20 inactive_file:0 isolated_file:0 [ 1661.062542] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1661.062542] slab_reclaimable:12647 slab_unreclaimable:118251 [ 1661.062542] mapped:52893 shmem:27409 pagetables:782 bounce:0 [ 1661.062542] free:25057 free_pcp:0 free_cma:0 [ 1661.102045] Node 0 active_anon:57812kB inactive_anon:69940kB active_file:0kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:175120kB dirty:0kB writeback:0kB shmem:74132kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1661.136088] Node 1 active_anon:2664kB inactive_anon:35292kB active_file:100kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:36452kB dirty:0kB writeback:0kB shmem:35504kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1661.165473] Node 0 DMA free:11068kB min:204kB low:252kB high:300kB active_anon:124kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1661.202679] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1661.212140] Node 0 DMA32 free:35888kB min:36200kB low:45248kB high:54296kB active_anon:57692kB inactive_anon:69940kB active_file:12kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7392kB pagetables:2488kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 1661.251985] lowmem_reserve[]: 0 0 0 0 0 [ 1661.255992] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1661.286272] lowmem_reserve[]: 0 0 0 0 0 [ 1661.290303] Node 1 Normal free:52960kB min:53696kB low:67120kB high:80544kB active_anon:2664kB inactive_anon:35292kB active_file:84kB inactive_file:12kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:544kB pagetables:640kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1661.320899] lowmem_reserve[]: 0 0 0 0 0 [ 1661.324878] Node 0 DMA: 11*4kB (ME) 10*8kB (ME) 10*16kB (M) 7*32kB (ME) 15*64kB (UME) 5*128kB (UME) 1*256kB (E) 1*512kB (E) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (U) = 11068kB [ 1661.342738] Node 0 DMA32: 934*4kB (UME) 451*8kB (UME) 62*16kB (UME) 11*32kB (UME) 203*64kB (U) 109*128kB (U) 1*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 35888kB [ 1661.359583] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1661.377255] Node 1 Normal: 106*4kB (UM) 81*8kB (UM) 57*16kB (UME) 45*32kB (UME) 56*64kB (UM) 31*128kB (UM) 20*256kB (M) 12*512kB (UM) 4*1024kB (M) 1*2048kB (M) 6*4096kB (U) = 52960kB [ 1661.398235] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1661.407069] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1661.415671] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1661.424544] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1661.433143] 27440 total pagecache pages [ 1661.437110] 0 pages in swap cache [ 1661.445175] Swap cache stats: add 0, delete 0, find 0/0 [ 1661.457642] Free swap = 0kB [ 1661.464937] Total swap = 0kB [ 1661.473286] 2097051 pages RAM [ 1661.476381] 0 pages HighMem/MovableOnly [ 1661.484857] 363849 pages reserved [ 1661.495451] 0 pages cma reserved [ 1661.501094] Out of memory (oom_kill_allocating_task): Kill process 28477 (syz-executor.0) score 0 or sacrifice child [ 1661.515258] Killed process 29201 (syz-executor.0) total-vm:93384kB, anon-rss:160kB, file-rss:34820kB, shmem-rss:0kB [ 1661.595738] oom_reaper: reaped process 29201 (syz-executor.0), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1661.639829] systemd-journal invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1661.659513] systemd-journal cpuset=/ mems_allowed=0-1 [ 1661.664721] CPU: 0 PID: 28768 Comm: systemd-journal Not tainted 4.14.232-syzkaller #0 [ 1661.672677] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1661.682027] Call Trace: [ 1661.684596] dump_stack+0x1b2/0x281 [ 1661.688203] dump_header+0x178/0x82f [ 1661.691900] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1661.696985] ? ___ratelimit+0x2cd/0x530 [ 1661.700934] oom_kill_process.cold+0x10/0xa40 [ 1661.705408] out_of_memory+0xe3e/0x1190 [ 1661.709360] ? oom_killer_disable+0x1c0/0x1c0 [ 1661.713828] ? mutex_trylock+0x152/0x1a0 [ 1661.717864] __alloc_pages_nodemask+0x23e1/0x2720 [ 1661.722688] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1661.727523] alloc_pages_current+0x155/0x260 [ 1661.731944] filemap_fault+0x11a1/0x1ad0 [ 1661.736024] ext4_filemap_fault+0x84/0xb0 [ 1661.740148] __do_fault+0xfa/0x380 [ 1661.743677] __handle_mm_fault+0x2497/0x4620 [ 1661.748065] ? vm_insert_page+0x7c0/0x7c0 [ 1661.752196] ? mark_held_locks+0xa6/0xf0 [ 1661.756282] handle_mm_fault+0x455/0x9c0 [ 1661.760320] __do_page_fault+0x549/0xad0 [ 1661.764373] ? spurious_fault+0x640/0x640 [ 1661.768513] ? do_page_fault+0x60/0x500 [ 1661.772464] ? page_fault+0x2f/0x50 [ 1661.776064] page_fault+0x45/0x50 [ 1661.779494] RIP: 0001:0xffffffffffffffff [ 1661.783529] RSP: d596a1e0:00007ffe7c0d8200 EFLAGS: 7ffe7c0d8010 [ 1661.789024] Mem-Info: [ 1661.797484] active_anon:15095 inactive_anon:26308 isolated_anon:0 [ 1661.797484] active_file:29 inactive_file:2 isolated_file:0 [ 1661.797484] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1661.797484] slab_reclaimable:12647 slab_unreclaimable:118251 [ 1661.797484] mapped:52896 shmem:27409 pagetables:782 bounce:0 [ 1661.797484] free:13949 free_pcp:87 free_cma:0 [ 1661.807273] syz-executor.0: [ 1661.835014] Node 0 active_anon:57796kB inactive_anon:69940kB active_file:8kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:175132kB dirty:0kB writeback:0kB shmem:74132kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1661.848528] page allocation failure: order:0 [ 1661.870061] Node 1 active_anon:2584kB inactive_anon:35292kB active_file:108kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:36452kB dirty:0kB writeback:0kB shmem:35504kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1661.883036] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1661.906109] Node 0 [ 1661.915228] (null) [ 1661.921815] DMA free:10968kB min:204kB low:252kB high:300kB active_anon:124kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1661.929658] syz-executor.0 cpuset= [ 1661.958884] lowmem_reserve[]: [ 1661.960262] / [ 1661.962419] 0 [ 1661.965509] mems_allowed=0-1 [ 1661.967196] 2717 [ 1661.976938] CPU: 1 PID: 29201 Comm: syz-executor.0 Not tainted 4.14.232-syzkaller #0 [ 1661.982287] 2718 [ 1661.986868] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1661.986874] 2718 [ 1661.988907] Call Trace: [ 1661.988927] dump_stack+0x1b2/0x281 [ 1661.988942] warn_alloc.cold+0x96/0x1cc [ 1661.988954] ? zone_watermark_ok_safe+0x220/0x220 [ 1661.988963] ? usleep_range+0x130/0x130 [ 1661.988971] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1661.988984] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1662.008026] 2718 [ 1662.010475] ? run_timer_softirq+0x5a0/0x5a0 [ 1662.019264] __alloc_pages_nodemask+0x2127/0x2720 [ 1662.019281] ? lock_acquire+0x170/0x3f0 [ 1662.019297] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1662.019307] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1662.019323] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1662.019337] ? policy_node+0x98/0x110 [ 1662.019348] alloc_pages_current+0x155/0x260 [ 1662.033841] Node 0 [ 1662.035954] ion_page_pool_alloc+0x118/0x1b0 [ 1662.043049] DMA32 free:18032kB min:36200kB low:45248kB high:54296kB active_anon:57672kB inactive_anon:69940kB active_file:16kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7392kB pagetables:2488kB bounce:0kB free_pcp:204kB local_pcp:28kB free_cma:0kB [ 1662.044721] ion_system_heap_allocate+0x133/0x8c0 [ 1662.056717] lowmem_reserve[]: [ 1662.059437] ? ion_alloc+0x187/0x810 [ 1662.059447] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1662.059456] ? ion_system_contig_heap_create+0x130/0x130 [ 1662.059466] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1662.059477] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1662.059488] ion_alloc+0x204/0x810 [ 1662.059501] ? ion_dma_buf_release+0x40/0x40 [ 1662.059512] ? __might_fault+0x177/0x1b0 [ 1662.065462] 0 [ 1662.067681] ion_ioctl+0xea/0x1f0 [ 1662.067690] ? ion_query_heaps+0x360/0x360 [ 1662.067706] ? ion_query_heaps+0x360/0x360 [ 1662.067716] do_vfs_ioctl+0x75a/0xff0 [ 1662.067728] ? ioctl_preallocate+0x1a0/0x1a0 [ 1662.067737] ? lock_downgrade+0x740/0x740 [ 1662.067751] ? __fget+0x225/0x360 [ 1662.067760] ? do_vfs_ioctl+0xff0/0xff0 [ 1662.067772] ? security_file_ioctl+0x83/0xb0 [ 1662.080080] 0 [ 1662.102456] SyS_ioctl+0x7f/0xb0 [ 1662.102465] ? do_vfs_ioctl+0xff0/0xff0 [ 1662.102476] do_syscall_64+0x1d5/0x640 [ 1662.102492] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1662.102500] RIP: 0033:0x4665f9 [ 1662.102505] RSP: 002b:00007fc8c6af5188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1662.102515] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1662.102520] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1662.102525] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1662.102531] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1662.102536] R13: 00007ffdd42e705f R14: 00007fc8c6af5300 R15: 0000000000022000 [ 1662.116247] warn_alloc_show_mem: 1 callbacks suppressed [ 1662.116249] Mem-Info: [ 1662.126793] 0 [ 1662.143169] active_anon:15095 inactive_anon:26308 isolated_anon:0 [ 1662.143169] active_file:9 inactive_file:22 isolated_file:0 [ 1662.143169] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1662.143169] slab_reclaimable:12647 slab_unreclaimable:118226 [ 1662.143169] mapped:52896 shmem:27409 pagetables:782 bounce:0 [ 1662.143169] free:13949 free_pcp:102 free_cma:0 [ 1662.153219] 0 [ 1662.163141] Node 0 active_anon:57796kB inactive_anon:69940kB active_file:16kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:175132kB dirty:0kB writeback:0kB shmem:74132kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1662.165740] 0 [ 1662.178204] Node 1 active_anon:2584kB inactive_anon:35292kB active_file:20kB inactive_file:92kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:36452kB dirty:0kB writeback:0kB shmem:35504kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1662.203067] Node 0 [ 1662.210048] Node 0 [ 1662.221954] DMA free:10968kB min:204kB low:252kB high:300kB active_anon:124kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1662.235772] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1662.247417] lowmem_reserve[]: [ 1662.257673] lowmem_reserve[]: [ 1662.271282] 0 [ 1662.300360] 0 [ 1662.324470] 2717 [ 1662.345802] 0 [ 1662.353505] 2718 [ 1662.374576] 0 [ 1662.384178] 2718 2718 [ 1662.426476] 0 [ 1662.428950] Node 0 DMA32 free:18032kB min:36200kB low:45248kB high:54296kB active_anon:57672kB inactive_anon:69940kB active_file:16kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7392kB pagetables:2488kB bounce:0kB free_pcp:208kB local_pcp:180kB free_cma:0kB [ 1662.428971] lowmem_reserve[]: 0 0 0 0 0 [ 1662.428993] Node 0 [ 1662.454902] 0 [ 1662.463131] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1662.496752] lowmem_reserve[]: 0 0 0 0 0 [ 1662.500767] Node 1 Normal free:26796kB min:53696kB low:67120kB high:80544kB active_anon:2584kB inactive_anon:35292kB active_file:120kB inactive_file:0kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:544kB pagetables:640kB bounce:0kB free_pcp:200kB local_pcp:120kB free_cma:0kB [ 1662.513993] Node 1 [ 1662.538725] lowmem_reserve[]: 0 0 0 0 0 [ 1662.543973] Normal free:26796kB min:53696kB low:67120kB high:80544kB active_anon:2584kB inactive_anon:35292kB active_file:120kB inactive_file:0kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:544kB pagetables:640kB bounce:0kB free_pcp:200kB local_pcp:80kB free_cma:0kB [ 1662.544934] Node 0 DMA: 12*4kB (UME) 11*8kB (UME) 11*16kB (UM) 7*32kB (ME) 13*64kB (UME) 5*128kB (UME) 1*256kB (E) 1*512kB (E) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (U) = 10968kB [ 1662.590867] lowmem_reserve[]: 0 0 0 0 0 [ 1662.609653] Node 0 DMA32: 930*4kB (UME) 449*8kB (UME) 61*16kB (UME) 10*32kB (UME) 0*64kB 72*128kB (U) 1*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18080kB [ 1662.612271] Node 0 DMA: 12*4kB (UME) 11*8kB (UME) 11*16kB (UM) 7*32kB (ME) 13*64kB (UME) 5*128kB (UME) 1*256kB (E) 1*512kB (E) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (U) = 10968kB [ 1662.636950] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1662.666385] Node 0 [ 1662.676046] Node 1 [ 1662.676518] DMA32: [ 1662.682215] Normal: 105*4kB (UM) 79*8kB (M) 57*16kB (UME) 44*32kB (ME) 56*64kB (UM) 31*128kB (UM) 20*256kB (M) 11*512kB (M) 5*1024kB (UM) 0*2048kB 0*4096kB = 26796kB [ 1662.694069] 930*4kB (UME) 449*8kB (UME) 61*16kB (UME) 10*32kB (UME) 0*64kB 72*128kB (U) 1*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18080kB [ 1662.707359] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1662.732169] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1662.734118] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1662.756889] Node 1 Normal: 105*4kB (UM) 79*8kB (M) 57*16kB (UME) 44*32kB (ME) 56*64kB (UM) 31*128kB (UM) 20*256kB (M) 11*512kB (M) 5*1024kB (UM) 0*2048kB 0*4096kB = 26796kB [ 1662.759661] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1662.786270] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1662.789375] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1662.803857] Bluetooth: hci3 command 0x041b tx timeout [ 1662.810555] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1662.816958] 27440 total pagecache pages [ 1662.823118] 0 pages in swap cache [ 1662.826558] Swap cache stats: add 0, delete 0, find 0/0 [ 1662.832233] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1662.839147] Free swap = 0kB [ 1662.844054] Total swap = 0kB [ 1662.847061] 2097051 pages RAM [ 1662.855334] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1662.858260] 0 pages HighMem/MovableOnly [ 1662.876601] 363849 pages reserved [ 1662.880086] 0 pages cma reserved [ 1662.897886] 27440 total pagecache pages [ 1662.925644] IPVS: ftp: loaded support on port[0] = 21 [ 1662.948745] 0 pages in swap cache [ 1662.952209] Swap cache stats: add 0, delete 0, find 0/0 [ 1662.957558] Free swap = 0kB [ 1662.969191] Total swap = 0kB [ 1662.975706] 2097051 pages RAM [ 1663.000180] 0 pages HighMem/MovableOnly [ 1663.004161] 363849 pages reserved [ 1663.016977] 0 pages cma reserved [ 1663.029815] Out of memory (oom_kill_allocating_task): Kill process 28768 (systemd-journal) score 0 or sacrifice child [ 1663.099644] Killed process 28768 (systemd-journal) total-vm:46096kB, anon-rss:476kB, file-rss:0kB, shmem-rss:2684kB [ 1663.128018] oom_reaper: reaped process 28768 (systemd-journal), now anon-rss:0kB, file-rss:0kB, shmem-rss:2684kB [ 1663.212171] systemd[1]: systemd-journald.service: Failed with result 'signal'. [ 1663.248758] systemd[1]: systemd-journald.service: Service has no hold-off time, scheduling restart. [ 1663.326522] oom_reaper: reaped process 29099 (syz-executor.3), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1663.348889] syz-fuzzer invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1663.361500] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 1663.366254] CPU: 0 PID: 7960 Comm: syz-fuzzer Not tainted 4.14.232-syzkaller #0 [ 1663.373675] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1663.383004] Call Trace: [ 1663.385568] dump_stack+0x1b2/0x281 [ 1663.389172] dump_header+0x178/0x82f [ 1663.392860] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1663.397938] ? ___ratelimit+0x2cd/0x530 [ 1663.401885] oom_kill_process.cold+0x10/0xa40 [ 1663.406358] out_of_memory+0xe3e/0x1190 [ 1663.410308] ? oom_killer_disable+0x1c0/0x1c0 [ 1663.414779] ? mutex_trylock+0x152/0x1a0 [ 1663.418815] __alloc_pages_nodemask+0x23e1/0x2720 [ 1663.423643] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1663.428468] alloc_pages_current+0x155/0x260 [ 1663.432851] filemap_fault+0x11a1/0x1ad0 [ 1663.436911] ext4_filemap_fault+0x84/0xb0 [ 1663.441034] __do_fault+0xfa/0x380 [ 1663.444549] __handle_mm_fault+0x2497/0x4620 [ 1663.448933] ? vm_insert_page+0x7c0/0x7c0 [ 1663.453054] ? free_object+0xe4/0x240 [ 1663.456841] ? mark_held_locks+0xa6/0xf0 [ 1663.460876] handle_mm_fault+0x455/0x9c0 [ 1663.464915] __do_page_fault+0x549/0xad0 [ 1663.468956] ? spurious_fault+0x640/0x640 [ 1663.473077] ? do_page_fault+0x60/0x500 [ 1663.477027] ? page_fault+0x2f/0x50 [ 1663.480626] page_fault+0x45/0x50 [ 1663.484053] RIP: 0000:0x947a7c [ 1663.487216] RSP: 2e000:000000c00003dfa0 EFLAGS: 0043b6a0 [ 1663.488848] Mem-Info: [ 1663.496704] active_anon:14967 inactive_anon:26307 isolated_anon:0 [ 1663.496704] active_file:20 inactive_file:0 isolated_file:0 [ 1663.496704] unevictable:0 dirty:0 writeback:2 unstable:0 [ 1663.496704] slab_reclaimable:12633 slab_unreclaimable:118198 [ 1663.496704] mapped:52230 shmem:27409 pagetables:759 bounce:0 [ 1663.496704] free:14051 free_pcp:0 free_cma:0 [ 1663.504752] syz-executor.0: [ 1663.536137] Node 0 active_anon:57488kB inactive_anon:69936kB active_file:0kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:172448kB dirty:0kB writeback:0kB shmem:74132kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1663.557843] page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1663.572121] Node 1 active_anon:2380kB inactive_anon:35292kB active_file:84kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:36472kB dirty:0kB writeback:8kB shmem:35504kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1663.580636] syz-executor.3: [ 1663.608241] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 1663.616357] CPU: 1 PID: 29201 Comm: syz-executor.0 Not tainted 4.14.232-syzkaller #0 [ 1663.622498] Node 0 [ 1663.624222] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1663.624228] Call Trace: [ 1663.626454] DMA free:10976kB min:204kB low:252kB high:300kB active_anon:12kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1663.635789] dump_stack+0x1b2/0x281 [ 1663.635803] warn_alloc.cold+0x96/0x1cc [ 1663.635814] ? zone_watermark_ok_safe+0x220/0x220 [ 1663.635838] __alloc_pages_nodemask+0x2127/0x2720 [ 1663.635854] ? lock_acquire+0x170/0x3f0 [ 1663.635869] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1663.635886] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1663.635898] ? __mutex_unlock_slowpath+0x75/0x770 [ 1663.654324] lowmem_reserve[]: [ 1663.664031] ? retint_kernel+0x2d/0x2d [ 1663.664046] alloc_pages_current+0x155/0x260 [ 1663.664060] ion_page_pool_alloc+0x118/0x1b0 [ 1663.664071] ion_system_heap_allocate+0x133/0x8c0 [ 1663.664083] ? _raw_spin_unlock+0x29/0x40 [ 1663.664092] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1663.664102] ? ion_system_contig_heap_create+0x130/0x130 [ 1663.664111] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1663.664122] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1663.683818] page allocation failure: order:0 [ 1663.685282] ion_alloc+0x27a/0x810 [ 1663.706081] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1663.707320] ? ion_dma_buf_release+0x40/0x40 [ 1663.733082] 0 [ 1663.735397] ? __might_fault+0x177/0x1b0 [ 1663.757127] (null) [ 1663.760196] ion_ioctl+0xea/0x1f0 [ 1663.760206] ? ion_query_heaps+0x360/0x360 [ 1663.760218] ? ion_query_heaps+0x360/0x360 [ 1663.760229] do_vfs_ioctl+0x75a/0xff0 [ 1663.760240] ? ioctl_preallocate+0x1a0/0x1a0 [ 1663.760251] ? lock_downgrade+0x740/0x740 [ 1663.782609] syz-executor.3 cpuset= [ 1663.784452] ? __fget+0x225/0x360 [ 1663.803802] ? do_vfs_ioctl+0xff0/0xff0 [ 1663.804443] 2717 [ 1663.807767] ? security_file_ioctl+0x83/0xb0 [ 1663.807777] SyS_ioctl+0x7f/0xb0 [ 1663.807786] ? do_vfs_ioctl+0xff0/0xff0 [ 1663.807797] do_syscall_64+0x1d5/0x640 [ 1663.807813] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1663.807822] RIP: 0033:0x4665f9 [ 1663.807827] RSP: 002b:00007fc8c6af5188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1663.807837] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1663.807842] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1663.807847] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1663.807851] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1663.807859] R13: 00007ffdd42e705f R14: 00007fc8c6af5300 R15: 0000000000022000 [ 1663.817461] / [ 1663.821846] 2718 [ 1663.840999] mems_allowed=0-1 [ 1663.847368] Bluetooth: hci0 command 0x0406 tx timeout [ 1663.862511] CPU: 0 PID: 29099 Comm: syz-executor.3 Not tainted 4.14.232-syzkaller #0 [ 1663.871120] 2718 [ 1663.877907] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1663.877912] Call Trace: [ 1663.877927] dump_stack+0x1b2/0x281 [ 1663.877940] warn_alloc.cold+0x96/0x1cc [ 1663.879630] 2718 [ 1663.881672] ? zone_watermark_ok_safe+0x220/0x220 [ 1663.889908] ? usleep_range+0x130/0x130 [ 1663.889920] ? _find_next_bit+0xdb/0x100 [ 1663.889929] ? run_timer_softirq+0x5a0/0x5a0 [ 1663.897795] Node 0 [ 1663.899832] __alloc_pages_nodemask+0x2127/0x2720 [ 1663.909181] DMA32 free:17652kB min:36200kB low:45248kB high:54296kB active_anon:57476kB inactive_anon:69936kB active_file:0kB inactive_file:8kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7360kB pagetables:2480kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1663.911723] ? lock_acquire+0x170/0x3f0 [ 1663.915311] lowmem_reserve[]: [ 1663.919267] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1663.919278] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1663.921320] Mem-Info: [ 1663.926137] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1663.930108] 0 [ 1663.934140] alloc_pages_current+0x155/0x260 [ 1663.938542] active_anon:14967 inactive_anon:26307 isolated_anon:0 [ 1663.938542] active_file:42 inactive_file:0 isolated_file:0 [ 1663.938542] unevictable:0 dirty:0 writeback:2 unstable:0 [ 1663.938542] slab_reclaimable:12633 slab_unreclaimable:118198 [ 1663.938542] mapped:52230 shmem:27409 pagetables:759 bounce:0 [ 1663.938542] free:13795 free_pcp:0 free_cma:0 [ 1663.940731] ion_page_pool_alloc+0x118/0x1b0 [ 1663.945638] Node 0 active_anon:57488kB inactive_anon:69936kB active_file:0kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:172448kB dirty:0kB writeback:0kB shmem:74132kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1663.973365] ion_system_heap_allocate+0x133/0x8c0 [ 1663.973375] ? ion_alloc+0x187/0x810 [ 1663.973384] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1663.973394] ? ion_system_contig_heap_create+0x130/0x130 [ 1663.977342] 0 [ 1663.980421] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1663.980431] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1663.980441] ion_alloc+0x204/0x810 [ 1663.985249] 0 [ 1663.989726] ? ion_dma_buf_release+0x40/0x40 [ 1663.989739] ? __might_fault+0x177/0x1b0 [ 1663.992119] 0 [ 1663.997549] ion_ioctl+0xea/0x1f0 [ 1663.997558] ? ion_query_heaps+0x360/0x360 [ 1663.997569] ? ion_query_heaps+0x360/0x360 [ 1663.999341] 0 [ 1664.003750] do_vfs_ioctl+0x75a/0xff0 [ 1664.036936] Node 1 active_anon:2380kB inactive_anon:35292kB active_file:172kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:36472kB dirty:0kB writeback:8kB shmem:35504kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1664.041175] ? ioctl_preallocate+0x1a0/0x1a0 [ 1664.041183] ? lock_downgrade+0x740/0x740 [ 1664.041196] ? __fget+0x225/0x360 [ 1664.073485] ? do_vfs_ioctl+0xff0/0xff0 [ 1664.077168] Node 0 [ 1664.082607] ? security_file_ioctl+0x83/0xb0 [ 1664.082616] SyS_ioctl+0x7f/0xb0 [ 1664.082625] ? do_vfs_ioctl+0xff0/0xff0 [ 1664.088064] Node 0 [ 1664.089833] do_syscall_64+0x1d5/0x640 [ 1664.094827] DMA free:10976kB min:204kB low:252kB high:300kB active_anon:12kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1664.099641] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1664.099650] RIP: 0033:0x4665f9 [ 1664.103173] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1664.104937] RSP: 002b:00007fd613a46188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1664.109337] lowmem_reserve[]: [ 1664.113361] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1664.115137] 0 [ 1664.118562] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1664.118567] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1664.118573] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1664.118577] R13: 00007ffce81deb9f R14: 00007fd613a46300 R15: 0000000000022000 [ 1664.207579] lowmem_reserve[]: [ 1664.226064] 0 [ 1664.277813] systemd[1]: Stopped Journal Service. [ 1664.282298] 0 0 0 [ 1664.330527] chnl_net:caif_netlink_parms(): no params data found [ 1664.335875] systemd[1]: Starting Journal Service... [ 1664.346059] Node 1 Normal free:110700kB min:53696kB low:67120kB high:80544kB active_anon:2280kB inactive_anon:35292kB active_file:68kB inactive_file:64kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:608kB pagetables:556kB bounce:0kB free_pcp:180kB local_pcp:8kB free_cma:0kB [ 1664.388228] 0 2717 2718 2718 2718 [ 1664.391875] Node 0 DMA32 free:74892kB min:36200kB low:45248kB high:54296kB active_anon:58076kB inactive_anon:69936kB active_file:600kB inactive_file:8104kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7584kB pagetables:2924kB bounce:0kB free_pcp:412kB local_pcp:200kB free_cma:0kB [ 1664.395763] lowmem_reserve[]: 0 0 0 0 0 [ 1664.452794] Node 0 DMA: 6*4kB (UME) 5*8kB (ME) 4*16kB (UM) 5*32kB (UME) 19*64kB (UME) 5*128kB (UME) 3*256kB (ME) 1*512kB (E) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (U) = 11616kB [ 1664.522958] Node 0 DMA32: 92*4kB (UME) 134*8kB (E) 33*16kB (ME) 7*32kB (UE) 723*64kB (UME) 107*128kB (U) 37*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 71632kB [ 1664.540762] systemd[1]: Starting Load/Save RF Kill Switch Status... [ 1664.547277] lowmem_reserve[]: 0 0 0 0 0 [ 1664.570634] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1664.577525] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1664.625943] Node 1 Normal: 93*4kB (UM) 67*8kB (M) 46*16kB (UME) 40*32kB (UME) 2877*64kB (UM) 414*128kB (UM) 94*256kB (UM) 16*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 272300kB [ 1664.644324] lowmem_reserve[]: 0 0 0 0 0 [ 1664.646160] systemd-journald[29317]: File /run/log/journal/04d8c135ee6b410280ba31a58c89679d/system.journal corrupted or uncleanly shut down, renaming and replacing. [ 1664.654927] Node 1 Normal free:281012kB min:53696kB low:67120kB high:80544kB active_anon:1580kB inactive_anon:35292kB active_file:68kB inactive_file:64kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:544kB pagetables:556kB bounce:0kB free_pcp:956kB local_pcp:700kB free_cma:0kB [ 1664.687495] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1664.727527] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1664.729941] lowmem_reserve[]: [ 1664.736105] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1664.736111] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1664.736115] 31932 total pagecache pages [ 1664.736124] 0 pages in swap cache [ 1664.736129] Swap cache stats: add 0, delete 0, find 0/0 [ 1664.736132] Free swap = 0kB [ 1664.736135] Total swap = 0kB [ 1664.736147] 2097051 pages RAM [ 1664.736151] 0 pages HighMem/MovableOnly [ 1664.736154] 363849 pages reserved [ 1664.736158] 0 pages cma reserved [ 1664.736164] Out of memory (oom_kill_allocating_task): Kill process 7960 (syz-fuzzer) score 0 or sacrifice child [ 1664.736219] Killed process 29203 (syz-executor.1) total-vm:84924kB, anon-rss:68kB, file-rss:0kB, shmem-rss:0kB [ 1664.742466] 0 [ 1664.811390] systemd[1]: Started Load/Save RF Kill Switch Status. [ 1664.815531] oom_reaper: reaped process 29203 (syz-executor.1), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1664.867523] Bluetooth: hci3 command 0x040f tx timeout [ 1664.918077] bridge0: port 1(bridge_slave_0) entered blocking state [ 1664.924495] bridge0: port 1(bridge_slave_0) entered disabled state [ 1664.927522] 0 0 0 0 [ 1664.933368] Node 0 DMA: 6*4kB (UME) 5*8kB (ME) 4*16kB (UM) 5*32kB (UME) 24*64kB (UME) 5*128kB (UME) 3*256kB (ME) 1*512kB (E) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (U) = 11936kB [ 1664.962271] device bridge_slave_0 entered promiscuous mode [ 1664.967530] Node 0 DMA32: 76*4kB (E) 136*8kB (UME) 34*16kB (ME) 10*32kB (UME) 839*64kB (UE) 152*128kB (UM) 6*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 76944kB [ 1664.983462] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1664.991616] bridge0: port 2(bridge_slave_1) entered blocking state [ 1664.994366] Node 1 [ 1665.020819] bridge0: port 2(bridge_slave_1) entered disabled state [ 1665.027727] Normal: 954*4kB (UM) 547*8kB (UM) 527*16kB (UME) 503*32kB (UME) 3321*64kB (UM) 645*128kB (UM) 106*256kB (UM) 15*512kB (UM) 1*1024kB (M) 0*2048kB 0*4096kB = 363664kB [ 1665.038331] device bridge_slave_1 entered promiscuous mode [ 1665.067498] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1665.076340] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1665.115875] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 1665.117478] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1665.141218] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1665.147509] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1665.157318] 32268 total pagecache pages [ 1665.177776] 0 pages in swap cache [ 1665.181236] Swap cache stats: add 0, delete 0, find 0/0 [ 1665.186584] Free swap = 0kB [ 1665.217538] Total swap = 0kB [ 1665.220583] 2097051 pages RAM [ 1665.223678] 0 pages HighMem/MovableOnly [ 1665.228017] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 1665.228165] 363849 pages reserved [ 1665.243285] team0: Port device team_slave_0 added [ 1665.247871] 0 pages cma reserved [ 1665.257662] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 1665.264933] team0: Port device team_slave_1 added [ 1665.333814] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1665.350729] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1665.407522] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1665.419074] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1665.425315] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1665.459350] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1665.471166] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 1665.491220] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 1665.535442] device hsr_slave_0 entered promiscuous mode [ 1665.550710] device hsr_slave_1 entered promiscuous mode [ 1665.557034] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 1665.578920] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 1665.814210] systemd[1]: Started Journal Service. 22:11:42 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) sendmsg$unix(r1, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x80000000, 0x6}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) [ 1665.920582] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 1666.010371] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1666.038408] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 1666.050147] syz-executor.3: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1666.080709] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 1666.086906] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 1666.094871] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1666.103663] CPU: 0 PID: 29099 Comm: syz-executor.3 Not tainted 4.14.232-syzkaller #0 [ 1666.111547] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1666.120890] Call Trace: [ 1666.123475] dump_stack+0x1b2/0x281 [ 1666.127100] warn_alloc.cold+0x96/0x1cc [ 1666.131068] ? zone_watermark_ok_safe+0x220/0x220 [ 1666.135924] __alloc_pages_nodemask+0x2127/0x2720 [ 1666.140848] ? put_task_stack+0xa0/0x1c0 [ 1666.144910] ? finish_task_switch+0x42c/0x610 [ 1666.149437] ? lock_acquire+0x170/0x3f0 [ 1666.153413] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1666.158262] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1666.163711] ? __mutex_unlock_slowpath+0x75/0x770 [ 1666.168550] ? alloc_pages_current+0xe3/0x260 [ 1666.173044] alloc_pages_current+0x155/0x260 [ 1666.177452] ion_page_pool_alloc+0x118/0x1b0 [ 1666.181861] ion_system_heap_allocate+0x133/0x8c0 [ 1666.186702] ? _raw_spin_unlock+0x29/0x40 [ 1666.190853] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1666.195777] ? ion_system_contig_heap_create+0x130/0x130 [ 1666.201222] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1666.206235] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1666.211076] ion_alloc+0x27a/0x810 [ 1666.214643] ? ion_dma_buf_release+0x40/0x40 [ 1666.219049] ? __might_fault+0x177/0x1b0 [ 1666.223107] ion_ioctl+0xea/0x1f0 [ 1666.226569] ? ion_query_heaps+0x360/0x360 [ 1666.230802] ? ion_query_heaps+0x360/0x360 [ 1666.235031] do_vfs_ioctl+0x75a/0xff0 [ 1666.238829] ? ioctl_preallocate+0x1a0/0x1a0 [ 1666.243237] ? lock_downgrade+0x740/0x740 [ 1666.247386] ? __fget+0x225/0x360 [ 1666.250918] ? do_vfs_ioctl+0xff0/0xff0 [ 1666.254890] ? security_file_ioctl+0x83/0xb0 [ 1666.259293] SyS_ioctl+0x7f/0xb0 [ 1666.262653] ? do_vfs_ioctl+0xff0/0xff0 [ 1666.266621] do_syscall_64+0x1d5/0x640 [ 1666.270515] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1666.275696] RIP: 0033:0x4665f9 [ 1666.278887] RSP: 002b:00007fd613a46188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1666.286587] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1666.293851] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1666.301111] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1666.308370] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1666.315632] R13: 00007ffce81deb9f R14: 00007fd613a46300 R15: 0000000000022000 [ 1666.357948] kworker/0:6 invoked oom-killer: gfp_mask=0x14142c0(GFP_KERNEL|__GFP_NOWARN|__GFP_COMP|__GFP_NOMEMALLOC), nodemask=(null), order=1, oom_score_adj=0 [ 1666.401096] kworker/0:6 cpuset=/ mems_allowed=0-1 [ 1666.407687] CPU: 0 PID: 28473 Comm: kworker/0:6 Not tainted 4.14.232-syzkaller #0 [ 1666.415302] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1666.424651] Workqueue: events linkwatch_event [ 1666.429135] Call Trace: [ 1666.431718] dump_stack+0x1b2/0x281 [ 1666.435337] dump_header+0x178/0x82f [ 1666.439038] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1666.443373] warn_alloc_show_mem: 1 callbacks suppressed [ 1666.443376] Mem-Info: [ 1666.444126] ? ___ratelimit+0x2cd/0x530 [ 1666.449499] active_anon:15009 inactive_anon:28337 isolated_anon:0 [ 1666.449499] active_file:1 inactive_file:43 isolated_file:0 [ 1666.449499] unevictable:0 dirty:6 writeback:0 unstable:0 [ 1666.449499] slab_reclaimable:12646 slab_unreclaimable:120571 [ 1666.449499] mapped:35217 shmem:29452 pagetables:712 bounce:0 [ 1666.449499] free:13856 free_pcp:425 free_cma:0 [ 1666.451860] oom_kill_process.cold+0x10/0xa40 [ 1666.455820] Node 0 active_anon:58736kB inactive_anon:78060kB active_file:12kB inactive_file:48kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:134864kB dirty:16kB writeback:0kB shmem:82308kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1666.488941] ? lock_downgrade+0x740/0x740 [ 1666.488955] out_of_memory+0x2dc/0x1190 [ 1666.488968] ? oom_killer_disable+0x1c0/0x1c0 [ 1666.493445] Node 1 active_anon:1300kB inactive_anon:35288kB active_file:0kB inactive_file:124kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:6004kB dirty:8kB writeback:0kB shmem:35500kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1666.521169] ? mutex_trylock+0x152/0x1a0 [ 1666.521180] __alloc_pages_nodemask+0x23e1/0x2720 [ 1666.521200] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1666.525308] Node 0 [ 1666.529259] ? worker_thread+0x5cc/0xff0 [ 1666.529266] ? kthread+0x30d/0x420 [ 1666.529271] ? ret_from_fork+0x24/0x30 [ 1666.529286] ? mark_held_locks+0xa6/0xf0 [ 1666.533758] DMA free:10968kB min:204kB low:252kB high:300kB active_anon:12kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1666.560698] ? cache_grow_begin+0x3f/0x700 [ 1666.560709] cache_grow_begin+0x91/0x700 [ 1666.560721] fallback_alloc+0x207/0x2c0 [ 1666.564749] lowmem_reserve[]: [ 1666.569585] kmem_cache_alloc_node_trace+0xed/0x400 [ 1666.569599] __kmalloc_node_track_caller+0x38/0x70 [ 1666.574410] 0 [ 1666.576627] __alloc_skb+0x96/0x510 [ 1666.580670] 2717 [ 1666.584177] rtmsg_ifinfo_build_skb+0x65/0x130 [ 1666.588046] 2718 [ 1666.592074] rtmsg_ifinfo+0x68/0x100 [ 1666.617646] 2718 [ 1666.621847] netdev_state_change+0xde/0xf0 [ 1666.625877] 2718 [ 1666.629886] ? netdev_upper_dev_unlink+0x200/0x200 [ 1666.629894] ? rfc2863_policy+0x110/0x1b0 [ 1666.629903] linkwatch_do_dev+0x8a/0xf0 [ 1666.629912] __linkwatch_run_queue+0x260/0x480 [ 1666.637999] ? linkwatch_fire_event+0x1a0/0x1a0 [ 1666.638010] linkwatch_event+0x3c/0x50 [ 1666.638025] process_one_work+0x793/0x14a0 [ 1666.642920] Node 0 [ 1666.644702] ? work_busy+0x320/0x320 [ 1666.648321] DMA32 free:17796kB min:36200kB low:45248kB high:54296kB active_anon:58724kB inactive_anon:78060kB active_file:344kB inactive_file:304kB unevictable:0kB writepending:116kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7360kB pagetables:2540kB bounce:0kB free_pcp:792kB local_pcp:660kB free_cma:0kB [ 1666.650425] ? worker_thread+0x158/0xff0 [ 1666.654972] lowmem_reserve[]: [ 1666.657050] ? _raw_spin_unlock_irq+0x24/0x80 [ 1666.660746] 0 [ 1666.662775] worker_thread+0x5cc/0xff0 [ 1666.666976] 0 [ 1666.669042] ? rescuer_thread+0xc80/0xc80 [ 1666.669051] kthread+0x30d/0x420 [ 1666.673949] 0 [ 1666.678071] ? kthread_create_on_node+0xd0/0xd0 [ 1666.678080] ret_from_fork+0x24/0x30 [ 1666.705369] Mem-Info: [ 1666.705604] syz-executor.0: [ 1666.741481] active_anon:15009 inactive_anon:28337 isolated_anon:0 [ 1666.741481] active_file:1 inactive_file:43 isolated_file:0 [ 1666.741481] unevictable:0 dirty:6 writeback:0 unstable:0 [ 1666.741481] slab_reclaimable:12646 slab_unreclaimable:120571 [ 1666.741481] mapped:35217 shmem:29452 pagetables:712 bounce:0 [ 1666.741481] free:13856 free_pcp:425 free_cma:0 [ 1666.753544] 0 0 [ 1666.753554] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1666.753571] lowmem_reserve[]: 0 0 0 0 0 [ 1666.753588] Node 1 Normal free:26660kB min:53696kB low:67120kB high:80544kB active_anon:1400kB inactive_anon:35288kB active_file:32kB inactive_file:0kB unevictable:0kB writepending:8kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:480kB pagetables:308kB bounce:0kB free_pcp:908kB local_pcp:196kB free_cma:0kB [ 1666.753607] lowmem_reserve[]: 0 0 0 0 0 [ 1666.753626] Node 0 [ 1666.775514] Node 0 active_anon:58736kB inactive_anon:78060kB active_file:112kB inactive_file:48kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:134864kB dirty:16kB writeback:0kB shmem:82308kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1666.783595] DMA: [ 1666.819788] Node 1 active_anon:1300kB inactive_anon:35288kB active_file:0kB inactive_file:124kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:6004kB dirty:8kB writeback:0kB shmem:35500kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1666.840907] page allocation failure: order:0 [ 1666.851046] Node 0 [ 1666.875602] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1666.888068] DMA free:10968kB min:204kB low:252kB high:300kB active_anon:12kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1666.915991] (null) [ 1666.941894] 8*4kB [ 1666.951405] syz-executor.0 cpuset= [ 1666.979873] lowmem_reserve[]: [ 1666.980807] Bluetooth: hci3 command 0x0419 tx timeout [ 1666.984309] 0 [ 1666.992605] (UME) 5*8kB (ME) 3*16kB (M) 5*32kB (UME) 9*64kB (UME) 5*128kB (UME) 3*256kB (ME) 1*512kB (E) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (U) = 10968kB [ 1666.996996] / [ 1667.012505] 2717 2718 2718 2718 [ 1667.017608] Node 0 DMA32 free:18292kB min:36200kB low:45248kB high:54296kB active_anon:58708kB inactive_anon:78060kB active_file:116kB inactive_file:0kB unevictable:0kB writepending:32kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7360kB pagetables:2540kB bounce:0kB free_pcp:796kB local_pcp:132kB free_cma:0kB [ 1667.018734] mems_allowed=0-1 [ 1667.050187] Node 0 DMA32: 811*4kB (UME) 417*8kB (UME) 61*16kB (UME) 345*32kB (UME) 2*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18724kB [ 1667.059946] CPU: 1 PID: 29201 Comm: syz-executor.0 Not tainted 4.14.232-syzkaller #0 [ 1667.064338] Node 0 [ 1667.072169] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1667.072173] Call Trace: [ 1667.072191] dump_stack+0x1b2/0x281 [ 1667.072205] warn_alloc.cold+0x96/0x1cc [ 1667.072218] ? zone_watermark_ok_safe+0x220/0x220 [ 1667.077876] Normal: [ 1667.083767] ? usleep_range+0x130/0x130 [ 1667.086322] 0*4kB [ 1667.089924] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1667.089937] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1667.089947] ? run_timer_softirq+0x5a0/0x5a0 [ 1667.089964] __alloc_pages_nodemask+0x2127/0x2720 [ 1667.095616] lowmem_reserve[]: [ 1667.098736] ? lock_acquire+0x170/0x3f0 [ 1667.098751] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1667.098761] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1667.098775] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1667.098786] ? retint_kernel+0x2d/0x2d [ 1667.098798] alloc_pages_current+0x155/0x260 [ 1667.102756] 0 [ 1667.105046] ion_page_pool_alloc+0x118/0x1b0 [ 1667.107165] 0 [ 1667.112246] ion_system_heap_allocate+0x133/0x8c0 [ 1667.112257] ? _raw_spin_unlock+0x29/0x40 [ 1667.112265] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1667.112272] ? ion_system_contig_heap_create+0x130/0x130 [ 1667.112281] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1667.112291] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1667.112301] ion_alloc+0x27a/0x810 [ 1667.112331] ? ion_dma_buf_release+0x40/0x40 [ 1667.112342] ? __might_fault+0x177/0x1b0 [ 1667.112353] ion_ioctl+0xea/0x1f0 [ 1667.112360] ? ion_query_heaps+0x360/0x360 [ 1667.112370] ? ion_query_heaps+0x360/0x360 [ 1667.112379] do_vfs_ioctl+0x75a/0xff0 [ 1667.112390] ? ioctl_preallocate+0x1a0/0x1a0 [ 1667.112397] ? lock_downgrade+0x740/0x740 [ 1667.112410] ? __fget+0x225/0x360 [ 1667.112418] ? do_vfs_ioctl+0xff0/0xff0 [ 1667.112429] ? security_file_ioctl+0x83/0xb0 [ 1667.112439] SyS_ioctl+0x7f/0xb0 [ 1667.112446] ? do_vfs_ioctl+0xff0/0xff0 [ 1667.112457] do_syscall_64+0x1d5/0x640 [ 1667.112470] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1667.112477] RIP: 0033:0x4665f9 [ 1667.112482] RSP: 002b:00007fc8c6af5188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1667.112491] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1667.112497] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1667.112520] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1667.112526] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1667.112532] R13: 00007ffdd42e705f R14: 00007fc8c6af5300 R15: 0000000000022000 [ 1667.189773] 0*8kB [ 1667.194875] 0 [ 1667.222814] 0*16kB [ 1667.255574] 0 [ 1667.303388] 0*32kB [ 1667.312633] 0 [ 1667.322688] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1667.337325] 0*64kB [ 1667.358473] lowmem_reserve[]: [ 1667.358487] 0*128kB [ 1667.360701] 0 0 0 0 0 [ 1667.360719] Node 1 Normal free:260736kB min:53696kB low:67120kB high:80544kB active_anon:1288kB inactive_anon:35288kB active_file:64kB inactive_file:4884kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:480kB pagetables:308kB bounce:0kB free_pcp:984kB local_pcp:824kB free_cma:0kB [ 1667.363857] 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1667.363879] Node 1 Normal: 880*4kB (UM) 604*8kB (U) 54*16kB (UE) 796*32kB (UME) 1242*64kB (U) [ 1667.366699] lowmem_reserve[]: [ 1667.387321] 221*128kB [ 1667.397994] 0 [ 1667.406778] (UM) [ 1667.435946] 0 [ 1667.437334] 20*256kB [ 1667.438281] 0 [ 1667.439897] (U) [ 1667.444012] 0 [ 1667.444084] 1*512kB [ 1667.445973] 0 [ 1667.445981] Node 0 DMA: 8*4kB (UME) 5*8kB (ME) 3*16kB (M) 5*32kB (UME) 10*64kB (UME) 5*128kB (UME) 3*256kB (ME) 1*512kB (E) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (U) = 11032kB [ 1667.463253] (M) [ 1667.468942] Node 0 DMA32: 931*4kB (UM) 681*8kB (UME) 79*16kB (UME) 355*32kB (UME) 197*64kB (UM) 97*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 46820kB [ 1667.486848] 44*1024kB (U) 23*2048kB (U) 5*4096kB (U) = 260736kB [ 1667.487419] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1667.504218] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1667.516122] Node 1 Normal: 4398*4kB (UM) 2133*8kB (UM) 237*16kB (UME) 871*32kB (UE) 1271*64kB (UM) 221*128kB (UM) 21*256kB (UM) 0*512kB 44*1024kB (U) 23*2048kB (U) 5*4096kB (U) = 293968kB [ 1667.516274] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1667.557561] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1667.567319] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1667.576231] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1667.587370] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1667.595954] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1667.604842] 31247 total pagecache pages [ 1667.611852] 0 pages in swap cache [ 1667.615306] Swap cache stats: add 0, delete 0, find 0/0 [ 1667.620715] Free swap = 0kB [ 1667.623731] Total swap = 0kB [ 1667.626823] 2097051 pages RAM [ 1667.633130] 0 pages HighMem/MovableOnly [ 1667.637103] 363849 pages reserved [ 1667.640606] 0 pages cma reserved [ 1667.647341] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1667.655924] 31247 total pagecache pages [ 1667.687338] 0 pages in swap cache [ 1667.690800] Swap cache stats: add 0, delete 0, find 0/0 [ 1667.696149] Free swap = 0kB [ 1667.707352] Total swap = 0kB [ 1667.710525] 2097051 pages RAM [ 1667.713613] 0 pages HighMem/MovableOnly 22:11:44 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) sendmsg$unix(r1, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x80000000, 0x6}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) [ 1667.737339] 363849 pages reserved [ 1667.740796] 0 pages cma reserved [ 1667.744189] Out of memory: Kill process 29196 (syz-executor.5) score 1004 or sacrifice child [ 1667.762823] Killed process 29197 (syz-executor.5) total-vm:93384kB, anon-rss:156kB, file-rss:34820kB, shmem-rss:0kB [ 1667.787750] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1667.809720] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 1667.815793] 8021q: adding VLAN 0 to HW filter on device team0 [ 1667.831233] oom_reaper: reaped process 29197 (syz-executor.5), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1667.856952] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 1667.882508] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 1667.894124] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1667.902978] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready 22:11:44 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) sendmsg$unix(r1, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x80000000, 0x6}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) [ 1667.930590] bridge0: port 1(bridge_slave_0) entered blocking state [ 1667.937132] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1667.976988] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1668.018045] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1668.026235] bridge0: port 2(bridge_slave_1) entered blocking state [ 1668.032682] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1668.089108] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1668.125154] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 1668.136595] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1668.159214] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 1668.191150] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1668.217180] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 1668.251654] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1668.268263] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1668.336208] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 1668.369265] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1668.383419] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1668.443281] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1668.477689] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 1668.500227] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1668.514581] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1668.548435] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1668.573145] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1668.624069] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1668.656080] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1668.692210] device bridge_slave_1 left promiscuous mode [ 1668.713507] bridge0: port 2(bridge_slave_1) entered disabled state [ 1668.762031] device bridge_slave_0 left promiscuous mode [ 1668.782757] bridge0: port 1(bridge_slave_0) entered disabled state [ 1668.809644] device veth1_macvtap left promiscuous mode [ 1668.824122] device veth0_macvtap left promiscuous mode [ 1668.835377] device veth1_vlan left promiscuous mode [ 1668.869101] device veth0_vlan left promiscuous mode [ 1669.283295] device hsr_slave_1 left promiscuous mode [ 1669.313844] device hsr_slave_0 left promiscuous mode [ 1669.357150] team0 (unregistering): Port device team_slave_1 removed [ 1669.385552] team0 (unregistering): Port device team_slave_0 removed [ 1669.409863] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 1669.443578] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 1669.526540] bond0 (unregistering): Released all slaves [ 1669.596100] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 1669.623814] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1669.633770] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1669.738566] syz-executor.0: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1669.758520] syz-executor.4 invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1669.773138] syz-executor.5: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1669.797171] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 1669.802337] CPU: 1 PID: 29434 Comm: syz-executor.0 Not tainted 4.14.232-syzkaller #0 [ 1669.810213] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1669.819559] Call Trace: [ 1669.822140] dump_stack+0x1b2/0x281 [ 1669.825759] warn_alloc.cold+0x96/0x1cc [ 1669.829729] ? zone_watermark_ok_safe+0x220/0x220 [ 1669.834580] __alloc_pages_nodemask+0x2127/0x2720 [ 1669.839420] ? _raw_spin_unlock_irq+0x24/0x80 [ 1669.843931] ? lock_acquire+0x170/0x3f0 [ 1669.847190] syz-executor.4 cpuset=/ [ 1669.847898] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1669.847905] mems_allowed=0-1 [ 1669.851514] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1669.857175] syz-executor.5 cpuset= [ 1669.859423] ? __mutex_unlock_slowpath+0x75/0x770 [ 1669.864840] / [ 1669.868376] ? retint_kernel+0x2d/0x2d [ 1669.878764] alloc_pages_current+0x155/0x260 [ 1669.883165] ion_page_pool_alloc+0x118/0x1b0 [ 1669.887565] ion_system_heap_allocate+0x133/0x8c0 [ 1669.892399] ? ion_alloc+0x187/0x810 [ 1669.896100] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1669.901529] ? ion_system_contig_heap_create+0x130/0x130 [ 1669.906958] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1669.911963] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1669.916802] ion_alloc+0x204/0x810 [ 1669.919117] mems_allowed=0-1 [ 1669.920331] ? ion_dma_buf_release+0x40/0x40 [ 1669.927805] ? __might_fault+0x177/0x1b0 [ 1669.931860] ion_ioctl+0xea/0x1f0 [ 1669.935301] ? ion_query_heaps+0x360/0x360 [ 1669.939529] ? ion_query_heaps+0x360/0x360 [ 1669.943752] do_vfs_ioctl+0x75a/0xff0 [ 1669.947539] ? ioctl_preallocate+0x1a0/0x1a0 [ 1669.951932] ? lock_downgrade+0x740/0x740 [ 1669.956148] ? __fget+0x225/0x360 [ 1669.959585] ? do_vfs_ioctl+0xff0/0xff0 [ 1669.963565] ? security_file_ioctl+0x83/0xb0 [ 1669.967966] SyS_ioctl+0x7f/0xb0 [ 1669.971317] ? do_vfs_ioctl+0xff0/0xff0 [ 1669.975274] do_syscall_64+0x1d5/0x640 [ 1669.979152] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1669.984334] RIP: 0033:0x4665f9 [ 1669.987507] RSP: 002b:00007fc8c6af5188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1669.995204] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1670.002460] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1670.009722] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1670.017072] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1670.017173] syz-executor.3: [ 1670.024331] R13: 00007ffdd42e705f R14: 00007fc8c6af5300 R15: 0000000000022000 [ 1670.024338] page allocation failure: order:0 [ 1670.049402] CPU: 0 PID: 29199 Comm: syz-executor.4 Not tainted 4.14.232-syzkaller #0 [ 1670.061666] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1670.071007] Call Trace: [ 1670.073588] dump_stack+0x1b2/0x281 [ 1670.077211] dump_header+0x178/0x82f [ 1670.080919] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1670.086012] ? ___ratelimit+0x2cd/0x530 [ 1670.089977] oom_kill_process.cold+0x10/0xa40 [ 1670.094474] out_of_memory+0xe3e/0x1190 [ 1670.098450] ? oom_killer_disable+0x1c0/0x1c0 [ 1670.102933] ? mutex_trylock+0x152/0x1a0 [ 1670.106986] __alloc_pages_nodemask+0x23e1/0x2720 [ 1670.111832] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1670.116682] alloc_pages_current+0x155/0x260 [ 1670.121084] filemap_fault+0x11a1/0x1ad0 [ 1670.125143] ext4_filemap_fault+0x84/0xb0 [ 1670.127445] warn_alloc_show_mem: 1 callbacks suppressed [ 1670.127448] Mem-Info: [ 1670.129281] __do_fault+0xfa/0x380 [ 1670.134632] active_anon:15106 inactive_anon:28338 isolated_anon:0 [ 1670.134632] active_file:13 inactive_file:13 isolated_file:0 [ 1670.134632] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1670.134632] slab_reclaimable:12610 slab_unreclaimable:119519 [ 1670.134632] mapped:43919 shmem:29453 pagetables:756 bounce:0 [ 1670.134632] free:53816 free_pcp:417 free_cma:0 [ 1670.137012] __handle_mm_fault+0x2497/0x4620 [ 1670.140555] Node 0 active_anon:58768kB inactive_anon:78064kB active_file:20kB inactive_file:24kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:169772kB dirty:0kB writeback:0kB shmem:82312kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1670.173828] ? vm_insert_page+0x7c0/0x7c0 [ 1670.173848] ? mark_held_locks+0xa6/0xf0 [ 1670.178251] Node 1 active_anon:1656kB inactive_anon:35288kB active_file:32kB inactive_file:28kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:5904kB dirty:0kB writeback:0kB shmem:35500kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1670.205794] handle_mm_fault+0x455/0x9c0 [ 1670.205805] __do_page_fault+0x549/0xad0 [ 1670.205817] ? spurious_fault+0x640/0x640 [ 1670.209959] Node 0 [ 1670.213988] ? do_page_fault+0x60/0x500 [ 1670.241053] DMA free:11036kB min:204kB low:252kB high:300kB active_anon:12kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1670.245059] ? page_fault+0x2f/0x50 [ 1670.249106] lowmem_reserve[]: [ 1670.253237] page_fault+0x45/0x50 [ 1670.255447] 0 [ 1670.259393] RIP: 4bf950:0x7ffd61b4b700 [ 1670.259398] RSP: 0000:00007ffd61b4b5b0 EFLAGS: 7ffd61b4b5c0 [ 1670.275816] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1670.294238] 2717 [ 1670.296802] CPU: 0 PID: 29438 Comm: syz-executor.5 Not tainted 4.14.232-syzkaller #0 [ 1670.299760] 2718 [ 1670.301124] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1670.306805] 2718 [ 1670.313875] Call Trace: [ 1670.313890] dump_stack+0x1b2/0x281 [ 1670.313907] warn_alloc.cold+0x96/0x1cc [ 1670.315939] 2718 [ 1670.323798] ? zone_watermark_ok_safe+0x220/0x220 [ 1670.323821] __alloc_pages_nodemask+0x2127/0x2720 [ 1670.335200] ? _raw_spin_unlock_irq+0x24/0x80 [ 1670.335214] ? lock_acquire+0x170/0x3f0 [ 1670.335229] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1670.337272] Node 0 [ 1670.339828] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1670.343446] DMA32 free:56816kB min:36200kB low:45248kB high:54296kB active_anon:58756kB inactive_anon:78064kB active_file:20kB inactive_file:2856kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7392kB pagetables:2812kB bounce:0kB free_pcp:860kB local_pcp:728kB free_cma:0kB [ 1670.347390] ? __mutex_unlock_slowpath+0x75/0x770 [ 1670.347407] alloc_pages_current+0x155/0x260 [ 1670.349438] lowmem_reserve[]: [ 1670.354261] ion_page_pool_alloc+0x118/0x1b0 [ 1670.359086] 0 [ 1670.363548] ion_system_heap_allocate+0x133/0x8c0 [ 1670.367502] 0 [ 1670.372310] ? ion_alloc+0x187/0x810 [ 1670.374516] 0 [ 1670.379956] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1670.379965] ? ion_system_contig_heap_create+0x130/0x130 [ 1670.379976] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1670.408410] 0 [ 1670.413230] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1670.417619] 0 [ 1670.420694] ion_alloc+0x204/0x810 [ 1670.426857] ? ion_dma_buf_release+0x40/0x40 [ 1670.431681] Node 0 [ 1670.433454] ? __might_fault+0x177/0x1b0 [ 1670.437158] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1670.438918] ion_ioctl+0xea/0x1f0 [ 1670.444358] lowmem_reserve[]: [ 1670.449785] ? ion_query_heaps+0x360/0x360 [ 1670.449797] ? ion_query_heaps+0x360/0x360 [ 1670.449807] do_vfs_ioctl+0x75a/0xff0 [ 1670.454789] 0 [ 1670.456571] ? ioctl_preallocate+0x1a0/0x1a0 [ 1670.461393] 0 [ 1670.463172] ? lock_downgrade+0x740/0x740 [ 1670.466679] 0 [ 1670.471067] ? __fget+0x225/0x360 [ 1670.471079] ? do_vfs_ioctl+0xff0/0xff0 [ 1670.473288] 0 [ 1670.477328] ? security_file_ioctl+0x83/0xb0 [ 1670.477337] SyS_ioctl+0x7f/0xb0 [ 1670.477346] ? do_vfs_ioctl+0xff0/0xff0 [ 1670.502220] 0 [ 1670.505642] do_syscall_64+0x1d5/0x640 [ 1670.512950] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1670.517163] Node 1 [ 1670.520928] RIP: 0033:0x4665f9 [ 1670.522718] Normal free:144252kB min:53696kB low:67120kB high:80544kB active_anon:1656kB inactive_anon:35288kB active_file:32kB inactive_file:28kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:512kB pagetables:212kB bounce:0kB free_pcp:760kB local_pcp:640kB free_cma:0kB [ 1670.527093] RSP: 002b:00007f87ada6b188 EFLAGS: 00000246 [ 1670.528877] lowmem_reserve[]: [ 1670.532986] ORIG_RAX: 0000000000000010 [ 1670.534763] 0 [ 1670.538188] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1670.538193] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1670.538199] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1670.538203] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1670.538210] R13: 00007fff979d8a6f R14: 00007f87ada6b300 R15: 0000000000022000 [ 1670.542156] 0 [ 1670.672761] (null) [ 1670.694952] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 1670.712472] CPU: 1 PID: 29099 Comm: syz-executor.3 Not tainted 4.14.232-syzkaller #0 [ 1670.720359] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1670.729700] Call Trace: [ 1670.732280] dump_stack+0x1b2/0x281 [ 1670.735900] warn_alloc.cold+0x96/0x1cc [ 1670.739873] ? zone_watermark_ok_safe+0x220/0x220 [ 1670.744711] ? usleep_range+0x130/0x130 [ 1670.748677] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1670.753776] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1670.758787] ? run_timer_softirq+0x5a0/0x5a0 [ 1670.763199] __alloc_pages_nodemask+0x2127/0x2720 [ 1670.768047] ? lock_acquire+0x170/0x3f0 [ 1670.772026] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1670.776867] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1670.781379] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1670.786843] ? __sanitizer_cov_trace_pc+0x9/0x50 [ 1670.791596] alloc_pages_current+0x155/0x260 [ 1670.796005] ion_page_pool_alloc+0x118/0x1b0 [ 1670.800411] ion_system_heap_allocate+0x133/0x8c0 [ 1670.805261] ? _raw_spin_unlock+0x29/0x40 [ 1670.809405] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1670.814328] ? ion_system_contig_heap_create+0x130/0x130 [ 1670.819774] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1670.824785] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1670.829629] ion_alloc+0x27a/0x810 [ 1670.833167] ? ion_dma_buf_release+0x40/0x40 [ 1670.837574] ? __might_fault+0x177/0x1b0 [ 1670.841631] ion_ioctl+0xea/0x1f0 [ 1670.845078] ? ion_query_heaps+0x360/0x360 [ 1670.849323] ? ion_query_heaps+0x360/0x360 [ 1670.853552] do_vfs_ioctl+0x75a/0xff0 [ 1670.857353] ? ioctl_preallocate+0x1a0/0x1a0 [ 1670.861750] ? lock_downgrade+0x740/0x740 [ 1670.862042] Mem-Info: [ 1670.865892] ? __fget+0x225/0x360 [ 1670.865901] ? do_vfs_ioctl+0xff0/0xff0 [ 1670.865912] ? security_file_ioctl+0x83/0xb0 [ 1670.874884] active_anon:15156 inactive_anon:28338 isolated_anon:0 [ 1670.874884] active_file:63 inactive_file:1932 isolated_file:0 [ 1670.874884] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1670.874884] slab_reclaimable:12585 slab_unreclaimable:120617 [ 1670.874884] mapped:45394 shmem:29453 pagetables:793 bounce:0 [ 1670.874884] free:50467 free_pcp:469 free_cma:0 [ 1670.875693] SyS_ioctl+0x7f/0xb0 [ 1670.888833] Node 0 active_anon:59068kB inactive_anon:78064kB active_file:220kB inactive_file:7600kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:175672kB dirty:0kB writeback:0kB shmem:82312kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1670.913482] ? do_vfs_ioctl+0xff0/0xff0 [ 1670.913494] do_syscall_64+0x1d5/0x640 [ 1670.913510] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1670.913517] RIP: 0033:0x4665f9 [ 1670.913522] RSP: 002b:00007fd613a46188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1670.913532] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1670.913537] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1670.913544] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1670.946338] Node 1 active_anon:1556kB inactive_anon:35288kB active_file:32kB inactive_file:128kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:5904kB dirty:0kB writeback:0kB shmem:35500kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1670.948669] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1670.948675] R13: 00007ffce81deb9f R14: 00007fd613a46300 R15: 0000000000022000 [ 1671.044238] Bluetooth: hci1 command 0x0409 tx timeout [ 1671.097481] 0 0 0 [ 1671.099656] Node 0 DMA: 20*4kB (UME) 14*8kB (UME) 5*16kB (UM) 5*32kB (UME) 7*64kB (UME) 6*128kB (UME) 3*256kB (ME) 1*512kB (E) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (U) = 11120kB [ 1671.167113] Node 0 DMA32: 5989*4kB (UME) 145*8kB (UME) 375*16kB (UME) 88*32kB (UME) 50*64kB (UME) 0*128kB 0*256kB 1*512kB (M) 1*1024kB (M) 3*2048kB (U) 0*4096kB = 44812kB [ 1671.167202] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1671.167247] Node 1 Normal: 8321*4kB (U) 2713*8kB (UM) 578*16kB (UME) 200*32kB (UME) 468*64kB (UM) 23*128kB (UM) [ 1671.186128] Node 0 [ 1671.217100] 5*256kB (UM) 0*512kB 2*1024kB (UM) 1*2048kB (U) 4*4096kB (U) = 125292kB [ 1671.228416] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1671.237860] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1671.247784] DMA free:11112kB min:204kB low:252kB high:300kB active_anon:12kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1671.267118] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1671.307119] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1671.309323] lowmem_reserve[]: [ 1671.315703] 31509 total pagecache pages [ 1671.315710] 0 2717 2718 2718 2718 [ 1671.340648] Node 0 DMA32 free:44868kB min:36200kB low:45248kB high:54296kB active_anon:58832kB inactive_anon:78076kB active_file:1900kB inactive_file:6132kB unevictable:0kB writepending:60kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7392kB pagetables:2916kB bounce:0kB free_pcp:872kB local_pcp:656kB free_cma:0kB [ 1671.347129] 0 pages in swap cache [ 1671.417091] Swap cache stats: add 0, delete 0, find 0/0 [ 1671.417099] lowmem_reserve[]: [ 1671.422448] Free swap = 0kB [ 1671.422454] 0 [ 1671.425532] Total swap = 0kB [ 1671.447096] 2097051 pages RAM [ 1671.449309] 0 [ 1671.450198] 0 pages HighMem/MovableOnly [ 1671.450203] 0 [ 1671.451976] 363849 pages reserved [ 1671.451981] 0 pages cma reserved [ 1671.455939] 0 0 [ 1671.491616] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1671.597640] lowmem_reserve[]: 0 0 0 0 0 [ 1671.601656] Node 1 Normal free:143300kB min:53696kB low:67120kB high:80544kB active_anon:1496kB inactive_anon:35288kB active_file:32kB inactive_file:288kB unevictable:0kB writepending:4kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:480kB pagetables:212kB bounce:0kB free_pcp:424kB local_pcp:152kB free_cma:0kB [ 1671.688065] lowmem_reserve[]: 0 0 0 0 0 [ 1671.709509] Node 0 DMA: 20*4kB (UME) 14*8kB (UME) 5*16kB (UM) 5*32kB (UME) 20*64kB (UME) 6*128kB (UME) 3*256kB (ME) 1*512kB (E) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (U) = 11952kB [ 1671.761202] Node 0 DMA32: 51*4kB (E) 135*8kB (UME) 266*16kB (UE) 93*32kB (UE) 1189*64kB (UE) 168*128kB (UME) 7*256kB (UM) 0*512kB 1*1024kB (M) 2*2048kB (U) 0*4096kB = 113028kB [ 1671.797135] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1671.817529] Node 1 Normal: 1*4kB (U) 24*8kB (UM) 360*16kB (UME) 200*32kB (UME) 3195*64kB (UM) 82*128kB (UM) 6*256kB (UM) 0*512kB 3*1024kB (UM) 1*2048kB (U) 4*4096kB (U) = 250372kB [ 1671.847055] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1671.855905] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1671.864291] IPVS: ftp: loaded support on port[0] = 21 [ 1671.907117] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1671.925113] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1671.947252] 32193 total pagecache pages [ 1671.951307] 0 pages in swap cache [ 1671.954756] Swap cache stats: add 0, delete 0, find 0/0 [ 1671.977263] Free swap = 0kB [ 1671.980292] Total swap = 0kB [ 1671.983306] 2097051 pages RAM [ 1671.986398] 0 pages HighMem/MovableOnly [ 1672.007583] 363849 pages reserved [ 1672.011058] 0 pages cma reserved [ 1672.019883] Out of memory (oom_kill_allocating_task): Kill process 29199 (syz-executor.4) score 0 or sacrifice child [ 1672.047173] Killed process 29199 (syz-executor.4) total-vm:93120kB, anon-rss:80kB, file-rss:32764kB, shmem-rss:0kB 22:11:48 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) sendmsg$unix(r1, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x80000000, 0x6}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) [ 1672.106813] oom_reaper: reaped process 29199 (syz-executor.4), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1672.164434] chnl_net:caif_netlink_parms(): no params data found [ 1672.337063] syz-executor.3: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1672.375677] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 1672.399568] CPU: 1 PID: 29554 Comm: syz-executor.3 Not tainted 4.14.232-syzkaller #0 [ 1672.407457] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1672.416789] Call Trace: [ 1672.419363] dump_stack+0x1b2/0x281 [ 1672.422970] warn_alloc.cold+0x96/0x1cc [ 1672.426923] ? zone_watermark_ok_safe+0x220/0x220 [ 1672.431752] __alloc_pages_nodemask+0x2127/0x2720 [ 1672.436576] ? _raw_spin_unlock_irq+0x24/0x80 [ 1672.441050] ? lock_acquire+0x170/0x3f0 [ 1672.445012] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1672.449841] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1672.455378] ? __mutex_unlock_slowpath+0x75/0x770 [ 1672.460213] alloc_pages_current+0x155/0x260 [ 1672.464601] ion_page_pool_alloc+0x118/0x1b0 [ 1672.468987] ion_system_heap_allocate+0x133/0x8c0 [ 1672.473805] ? ion_alloc+0x187/0x810 [ 1672.477497] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1672.482923] ? ion_system_contig_heap_create+0x130/0x130 [ 1672.488350] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1672.493343] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1672.498163] ion_alloc+0x204/0x810 [ 1672.501683] ? ion_dma_buf_release+0x40/0x40 [ 1672.506068] ? __might_fault+0x177/0x1b0 [ 1672.510108] ion_ioctl+0xea/0x1f0 [ 1672.513537] ? ion_query_heaps+0x360/0x360 [ 1672.517751] ? ion_query_heaps+0x360/0x360 [ 1672.521962] do_vfs_ioctl+0x75a/0xff0 [ 1672.525740] ? ioctl_preallocate+0x1a0/0x1a0 [ 1672.530124] ? lock_downgrade+0x740/0x740 [ 1672.534267] ? __fget+0x225/0x360 [ 1672.537698] ? do_vfs_ioctl+0xff0/0xff0 [ 1672.541650] ? security_file_ioctl+0x83/0xb0 [ 1672.546037] SyS_ioctl+0x7f/0xb0 [ 1672.549380] ? do_vfs_ioctl+0xff0/0xff0 [ 1672.553331] do_syscall_64+0x1d5/0x640 [ 1672.557198] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1672.562363] RIP: 0033:0x4665f9 [ 1672.565529] RSP: 002b:00007fd613a46188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1672.573257] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1672.580504] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1672.587749] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1672.594994] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1672.602240] R13: 00007ffce81deb9f R14: 00007fd613a46300 R15: 0000000000022000 [ 1672.654529] warn_alloc_show_mem: 2 callbacks suppressed [ 1672.654532] Mem-Info: [ 1672.665369] active_anon:15629 inactive_anon:28341 isolated_anon:0 [ 1672.665369] active_file:343 inactive_file:365 isolated_file:0 [ 1672.665369] unevictable:0 dirty:12 writeback:0 unstable:0 [ 1672.665369] slab_reclaimable:12578 slab_unreclaimable:120136 [ 1672.665369] mapped:44579 shmem:29457 pagetables:776 bounce:0 [ 1672.665369] free:25294 free_pcp:0 free_cma:0 [ 1672.702857] syz-executor.1 invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1672.716030] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 1672.721243] CPU: 1 PID: 29432 Comm: syz-executor.1 Not tainted 4.14.232-syzkaller #0 [ 1672.729130] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1672.738461] Call Trace: [ 1672.741027] dump_stack+0x1b2/0x281 [ 1672.744634] dump_header+0x178/0x82f [ 1672.748326] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1672.753407] ? ___ratelimit+0x2cd/0x530 [ 1672.757363] oom_kill_process.cold+0x10/0xa40 [ 1672.761850] out_of_memory+0xe3e/0x1190 [ 1672.765802] ? oom_killer_disable+0x1c0/0x1c0 [ 1672.770273] ? mutex_trylock+0x152/0x1a0 [ 1672.774314] __alloc_pages_nodemask+0x23e1/0x2720 [ 1672.779141] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1672.783970] alloc_pages_current+0x155/0x260 [ 1672.788371] filemap_fault+0x11a1/0x1ad0 [ 1672.792416] ext4_filemap_fault+0x84/0xb0 [ 1672.796558] __do_fault+0xfa/0x380 [ 1672.800079] __handle_mm_fault+0x2497/0x4620 [ 1672.804466] ? vm_insert_page+0x7c0/0x7c0 [ 1672.808597] ? mark_held_locks+0xa6/0xf0 [ 1672.812639] handle_mm_fault+0x455/0x9c0 [ 1672.816677] __do_page_fault+0x549/0xad0 [ 1672.820729] ? spurious_fault+0x640/0x640 [ 1672.824852] ? do_page_fault+0x60/0x500 [ 1672.828802] ? page_fault+0x2f/0x50 [ 1672.832405] page_fault+0x45/0x50 [ 1672.835835] RIP: 4e4d54:0x4e56f8 [ 1672.839175] RSP: 4cd893:00007ffd0a9decc0 EFLAGS: 00000000 [ 1672.854593] Node 0 active_anon:60872kB inactive_anon:78076kB active_file:224kB inactive_file:320kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:157624kB dirty:16kB writeback:0kB shmem:82328kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1672.888782] Node 1 active_anon:1572kB inactive_anon:35276kB active_file:40kB inactive_file:24kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:18784kB dirty:64kB writeback:0kB shmem:35484kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1672.916231] Node 0 DMA free:11052kB min:204kB low:252kB high:300kB active_anon:12kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1672.937539] Mem-Info: [ 1672.942948] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1672.945435] active_anon:15589 inactive_anon:28338 isolated_anon:0 [ 1672.945435] active_file:83 inactive_file:120 isolated_file:0 [ 1672.945435] unevictable:0 dirty:19 writeback:0 unstable:0 [ 1672.945435] slab_reclaimable:12578 slab_unreclaimable:120152 [ 1672.945435] mapped:44100 shmem:29453 pagetables:734 bounce:0 [ 1672.945435] free:25309 free_pcp:3 free_cma:0 [ 1672.949939] Node 0 DMA32 free:36972kB min:36200kB low:45248kB high:54296kB active_anon:60672kB inactive_anon:78076kB active_file:412kB inactive_file:384kB unevictable:0kB writepending:40kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7456kB pagetables:2660kB bounce:0kB free_pcp:12kB local_pcp:0kB free_cma:0kB [ 1672.949959] lowmem_reserve[]: 0 0 0 0 0 [ 1672.949978] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1672.949995] lowmem_reserve[]: 0 0 0 0 0 [ 1672.950014] Node 1 Normal free:53212kB min:53696kB low:67120kB high:80544kB active_anon:1472kB inactive_anon:35276kB active_file:60kB inactive_file:200kB unevictable:0kB writepending:8kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:608kB pagetables:276kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1672.950033] lowmem_reserve[]: 0 0 0 0 0 [ 1672.950053] Node 0 DMA: 5*4kB (ME) 5*8kB (ME) 3*16kB (M) 4*32kB (ME) 9*64kB (UME) 6*128kB (UME) 3*256kB (ME) 1*512kB (E) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (U) = 11052kB [ 1672.950134] Node 0 DMA32: 789*4kB (UME) 434*8kB (UME) 68*16kB (ME) 24*32kB (ME) 34*64kB (UME) 174*128kB (UME) 8*256kB (UM) 4*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 37028kB [ 1672.950201] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1673.110060] Bluetooth: hci1 command 0x041b tx timeout [ 1673.155253] Node 1 Normal: 54*4kB (M) 38*8kB (M) 38*16kB (UME) 27*32kB (UME) 23*64kB (M) 23*128kB (UM) 126*256kB (UM) 29*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 53512kB [ 1673.166323] Node 0 active_anon:60868kB inactive_anon:78076kB active_file:72kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):44kB mapped:157080kB dirty:4kB writeback:0kB shmem:82328kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 14336kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1673.170640] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1673.205382] Node 1 active_anon:1624kB inactive_anon:35276kB active_file:36kB inactive_file:36kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:18760kB dirty:0kB writeback:0kB shmem:35484kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1673.207076] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1673.237480] Node 0 DMA free:11052kB min:204kB low:252kB high:300kB active_anon:12kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1673.243087] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1673.273548] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1673.282966] Node 0 DMA32 free:35968kB min:36200kB low:45248kB high:54296kB active_anon:60856kB inactive_anon:78076kB active_file:256kB inactive_file:12kB unevictable:0kB writepending:4kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7392kB pagetables:2704kB bounce:0kB free_pcp:124kB local_pcp:0kB free_cma:0kB [ 1673.308194] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1673.316814] lowmem_reserve[]: 0 0 0 0 0 [ 1673.321650] 29488 total pagecache pages [ 1673.324962] Node 0 [ 1673.328964] 0 pages in swap cache [ 1673.328969] Swap cache stats: add 0, delete 0, find 0/0 [ 1673.328973] Free swap = 0kB [ 1673.328978] Total swap = 0kB [ 1673.334020] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1673.334730] 2097051 pages RAM [ 1673.340090] lowmem_reserve[]: 0 0 0 0 0 [ 1673.340109] Node 1 Normal free:53472kB min:53696kB low:67120kB high:80544kB active_anon:1624kB inactive_anon:35276kB active_file:36kB inactive_file:36kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:576kB pagetables:320kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1673.340129] lowmem_reserve[]: [ 1673.343124] 0 pages HighMem/MovableOnly [ 1673.346113] 0 [ 1673.371049] 363849 pages reserved [ 1673.371053] 0 pages cma reserved [ 1673.426388] 0 0 0 0 [ 1673.429502] Node 0 DMA: 5*4kB (ME) 5*8kB (ME) 3*16kB (M) 4*32kB (ME) 9*64kB (UME) 6*128kB (UME) 3*256kB (ME) 1*512kB (E) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (U) = 11052kB [ 1673.449025] Node 0 DMA32: 855*4kB (UME) 446*8kB (UME) 67*16kB (ME) 20*32kB (UME) 28*64kB (ME) 168*128kB (UME) 7*256kB (UM) 3*512kB (M) 1*1024kB (M) 0*2048kB 0*4096kB = 36348kB [ 1673.466201] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1673.480562] Node 1 Normal: 52*4kB (UM) 41*8kB (UM) 39*16kB (UME) 28*32kB (UME) 22*64kB (M) 22*128kB (UM) 125*256kB (UM) 28*512kB (UM) 1*1024kB (M) 0*2048kB 0*4096kB = 53640kB [ 1673.496424] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1673.506983] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1673.515568] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1673.528010] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1673.536587] 29488 total pagecache pages [ 1673.556958] 0 pages in swap cache [ 1673.560422] Swap cache stats: add 0, delete 0, find 0/0 [ 1673.565773] Free swap = 0kB [ 1673.570833] Total swap = 0kB [ 1673.586954] 2097051 pages RAM [ 1673.590059] 0 pages HighMem/MovableOnly [ 1673.594018] 363849 pages reserved [ 1673.597857] 0 pages cma reserved [ 1673.603597] Out of memory (oom_kill_allocating_task): Kill process 29432 (syz-executor.1) score 0 or sacrifice child [ 1673.614569] Killed process 29432 (syz-executor.1) total-vm:93120kB, anon-rss:84kB, file-rss:34524kB, shmem-rss:0kB [ 1673.633808] oom_reaper: reaped process 29432 (syz-executor.1), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1673.730675] syz-executor.3 invoked oom-killer: gfp_mask=0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null), order=0, oom_score_adj=1000 [ 1673.835237] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 1673.881165] CPU: 0 PID: 29554 Comm: syz-executor.3 Not tainted 4.14.232-syzkaller #0 [ 1673.889066] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1673.898408] Call Trace: [ 1673.900994] dump_stack+0x1b2/0x281 [ 1673.904618] dump_header+0x178/0x82f [ 1673.908332] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1673.913427] ? ___ratelimit+0x2cd/0x530 [ 1673.917395] oom_kill_process.cold+0x10/0xa40 [ 1673.921892] out_of_memory+0xe3e/0x1190 [ 1673.925862] ? oom_killer_disable+0x1c0/0x1c0 [ 1673.930350] ? mutex_trylock+0x152/0x1a0 [ 1673.934404] __alloc_pages_nodemask+0x23e1/0x2720 [ 1673.939247] ? lock_acquire+0x170/0x3f0 [ 1673.943220] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1673.948054] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1673.952547] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1673.957996] alloc_pages_current+0x155/0x260 [ 1673.962396] ion_page_pool_alloc+0x118/0x1b0 [ 1673.966793] ion_system_heap_allocate+0x133/0x8c0 [ 1673.971627] ? ion_alloc+0x187/0x810 [ 1673.975335] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1673.980775] ? ion_system_contig_heap_create+0x130/0x130 [ 1673.986236] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1673.991258] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1673.996096] ion_alloc+0x204/0x810 [ 1673.999671] ? ion_dma_buf_release+0x40/0x40 [ 1674.004071] ? __might_fault+0x177/0x1b0 [ 1674.008145] ion_ioctl+0xea/0x1f0 [ 1674.011602] ? ion_query_heaps+0x360/0x360 [ 1674.015816] ? ion_query_heaps+0x360/0x360 [ 1674.020031] do_vfs_ioctl+0x75a/0xff0 [ 1674.023812] ? ioctl_preallocate+0x1a0/0x1a0 [ 1674.028196] ? lock_downgrade+0x740/0x740 [ 1674.032326] ? __fget+0x225/0x360 [ 1674.035773] ? do_vfs_ioctl+0xff0/0xff0 [ 1674.039728] ? security_file_ioctl+0x83/0xb0 [ 1674.044114] SyS_ioctl+0x7f/0xb0 [ 1674.047455] ? do_vfs_ioctl+0xff0/0xff0 [ 1674.051406] do_syscall_64+0x1d5/0x640 [ 1674.055274] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1674.060441] RIP: 0033:0x4665f9 [ 1674.063606] RSP: 002b:00007fd613a46188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1674.071289] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1674.078535] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1674.085778] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1674.093022] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1674.100267] R13: 00007ffce81deb9f R14: 00007fd613a46300 R15: 0000000000022000 [ 1674.114640] Mem-Info: [ 1674.117148] active_anon:15602 inactive_anon:28338 isolated_anon:0 [ 1674.117148] active_file:23 inactive_file:0 isolated_file:11 [ 1674.117148] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1674.117148] slab_reclaimable:12570 slab_unreclaimable:119740 [ 1674.117148] mapped:43952 shmem:29453 pagetables:712 bounce:0 [ 1674.117148] free:25008 free_pcp:0 free_cma:0 [ 1674.150326] Node 0 active_anon:60828kB inactive_anon:78076kB active_file:32kB inactive_file:28kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:157056kB dirty:0kB writeback:0kB shmem:82328kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 14336kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1674.178055] Node 1 active_anon:1580kB inactive_anon:35276kB active_file:24kB inactive_file:24kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:18752kB dirty:0kB writeback:0kB shmem:35484kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1674.205286] Node 0 DMA free:11052kB min:204kB low:252kB high:300kB active_anon:12kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1674.256920] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1674.262001] Node 0 DMA32 free:35680kB min:36200kB low:45248kB high:54296kB active_anon:60816kB inactive_anon:78076kB active_file:32kB inactive_file:28kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7392kB pagetables:2616kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1674.305018] lowmem_reserve[]: 0 0 0 0 0 [ 1674.309780] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1674.355747] lowmem_reserve[]: 0 0 0 0 0 [ 1674.365885] Node 1 Normal free:53656kB min:53696kB low:67120kB high:80544kB active_anon:1580kB inactive_anon:35276kB active_file:24kB inactive_file:24kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:576kB pagetables:232kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1674.622916] lowmem_reserve[]: 0 0 0 0 0 [ 1674.642910] Node 0 DMA: 5*4kB (ME) 5*8kB (ME) 3*16kB (M) 4*32kB (ME) 9*64kB (UME) 6*128kB (UME) 3*256kB (ME) 1*512kB (E) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (U) = 11052kB [ 1674.815226] Node 0 DMA32: 902*4kB (UME) 449*8kB (UME) 68*16kB (UME) 20*32kB (UME) 30*64kB (UME) 160*128kB (UME) 7*256kB (UM) 3*512kB (M) 1*1024kB (M) 0*2048kB 0*4096kB = 35680kB [ 1674.975800] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1675.081851] Node 1 Normal: 50*4kB (UM) 40*8kB (UM) 37*16kB (UME) 28*32kB (UME) 21*64kB (M) 23*128kB (UM) 125*256kB (UM) 28*512kB (UM) 1*1024kB (M) 0*2048kB 0*4096kB = 53656kB [ 1675.248946] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1675.329989] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1675.405528] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1675.475375] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1675.552376] 29480 total pagecache pages [ 1675.556367] 0 pages in swap cache [ 1675.623024] Swap cache stats: add 0, delete 0, find 0/0 [ 1675.691083] Free swap = 0kB [ 1675.694121] Total swap = 0kB [ 1675.753273] 2097051 pages RAM [ 1675.756388] 0 pages HighMem/MovableOnly [ 1675.853353] 363849 pages reserved [ 1675.884210] 0 pages cma reserved [ 1675.912823] Out of memory (oom_kill_allocating_task): Kill process 29554 (syz-executor.3) score 0 or sacrifice child [ 1675.924160] Killed process 29547 (syz-executor.3) total-vm:93384kB, anon-rss:2196kB, file-rss:34584kB, shmem-rss:0kB [ 1675.960529] oom_reaper: reaped process 29547 (syz-executor.3), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1676.027300] systemd-udevd invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=-1000 [ 1676.045975] systemd-udevd cpuset=/ mems_allowed=0-1 [ 1676.051066] CPU: 0 PID: 4632 Comm: systemd-udevd Not tainted 4.14.232-syzkaller #0 [ 1676.058764] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1676.068106] Call Trace: [ 1676.070686] dump_stack+0x1b2/0x281 [ 1676.074312] dump_header+0x178/0x82f [ 1676.078026] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1676.083129] ? ___ratelimit+0x2cd/0x530 [ 1676.087114] oom_kill_process.cold+0x10/0xa40 [ 1676.091601] ? lock_downgrade+0x740/0x740 [ 1676.095755] out_of_memory+0x2dc/0x1190 [ 1676.099734] ? oom_killer_disable+0x1c0/0x1c0 [ 1676.104219] ? mutex_trylock+0x152/0x1a0 [ 1676.108259] __alloc_pages_nodemask+0x23e1/0x2720 [ 1676.113086] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1676.117916] alloc_pages_current+0x155/0x260 [ 1676.122316] filemap_fault+0x11a1/0x1ad0 [ 1676.126368] ext4_filemap_fault+0x84/0xb0 [ 1676.130494] __do_fault+0xfa/0x380 [ 1676.134010] __handle_mm_fault+0x2497/0x4620 [ 1676.138398] ? vm_insert_page+0x7c0/0x7c0 [ 1676.142526] ? mark_held_locks+0xa6/0xf0 [ 1676.146566] handle_mm_fault+0x455/0x9c0 [ 1676.150608] __do_page_fault+0x549/0xad0 [ 1676.154646] ? spurious_fault+0x640/0x640 [ 1676.158770] ? do_page_fault+0x60/0x500 [ 1676.162806] ? page_fault+0x2f/0x50 [ 1676.166406] page_fault+0x45/0x50 [ 1676.169839] RIP: 0001:0xffffffffffffffff [ 1676.173874] RSP: 58d09600:00007fff42497680 EFLAGS: 7fff42497510 [ 1676.206799] syz-executor.3: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1676.238886] syz-executor.3: page allocation failure: order:0, mode:0x14280ca(GFP_HIGHUSER_MOVABLE|__GFP_ZERO), nodemask=(null) [ 1676.275717] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 1676.281692] Mem-Info: [ 1676.284113] active_anon:15087 inactive_anon:28338 isolated_anon:0 [ 1676.284113] active_file:12 inactive_file:15 isolated_file:0 [ 1676.284113] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1676.284113] slab_reclaimable:12554 slab_unreclaimable:119293 [ 1676.284113] mapped:43952 shmem:29453 pagetables:712 bounce:0 [ 1676.284113] free:13861 free_pcp:0 free_cma:0 [ 1676.286115] syz-executor.3 cpuset= [ 1676.329411] CPU: 0 PID: 29547 Comm: syz-executor.3 Not tainted 4.14.232-syzkaller #0 [ 1676.340815] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1676.342938] Node 0 active_anon:58768kB inactive_anon:78076kB active_file:20kB inactive_file:28kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:157056kB dirty:0kB writeback:0kB shmem:82328kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 14336kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1676.350253] Call Trace: [ 1676.350269] dump_stack+0x1b2/0x281 [ 1676.350281] warn_alloc.cold+0x96/0x1cc [ 1676.377960] Node 1 active_anon:1580kB inactive_anon:35276kB active_file:16kB inactive_file:16kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:18752kB dirty:0kB writeback:0kB shmem:35484kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1676.380498] ? zone_watermark_ok_safe+0x220/0x220 [ 1676.384094] Node 0 [ 1676.388043] ? usleep_range+0x130/0x130 [ 1676.388050] ? try_to_free_pages+0x23f/0x6e0 [ 1676.388058] ? _find_next_bit+0xdb/0x100 [ 1676.388068] ? run_timer_softirq+0x5a0/0x5a0 [ 1676.415342] DMA free:10972kB min:204kB low:252kB high:300kB active_anon:12kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1676.420134] __alloc_pages_nodemask+0x2127/0x2720 [ 1676.420151] ? check_preemption_disabled+0x35/0x240 [ 1676.422363] lowmem_reserve[]: [ 1676.426318] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1676.430717] 0 [ 1676.434730] ? __lock_acquire+0x5fc/0x3f20 [ 1676.434740] ? __handle_mm_fault+0x2095/0x4620 [ 1676.439138] 2717 [ 1676.464692] ? __lock_acquire+0x5fc/0x3f20 [ 1676.464707] alloc_pages_vma+0xd2/0x6d0 [ 1676.464718] __handle_mm_fault+0x25fa/0x4620 [ 1676.469545] 2718 [ 1676.474529] ? vm_insert_page+0x7c0/0x7c0 [ 1676.477620] 2718 [ 1676.482429] ? mark_held_locks+0xa6/0xf0 [ 1676.484197] 2718 [ 1676.488411] handle_mm_fault+0x455/0x9c0 [ 1676.488422] __do_page_fault+0x549/0xad0 [ 1676.488433] ? spurious_fault+0x640/0x640 [ 1676.495026] ? do_page_fault+0x60/0x500 [ 1676.499248] Node 0 [ 1676.503181] page_fault+0x25/0x50 [ 1676.507584] DMA32 free:18192kB min:36200kB low:45248kB high:54296kB active_anon:58756kB inactive_anon:78076kB active_file:24kB inactive_file:36kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7392kB pagetables:2616kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1676.509599] RIP: 0010:__put_user_4+0x1c/0x30 [ 1676.513712] lowmem_reserve[]: [ 1676.515751] RSP: 0000:ffff88803550fb08 EFLAGS: 00010293 [ 1676.519802] 0 [ 1676.525855] 0 [ 1676.529889] RAX: 0000000000000000 RBX: 00007fffffffeffd RCX: 00000000020176d0 [ 1676.529894] RDX: 1ffff11006aa0cef RSI: 0000000000000001 RDI: 00000000020176d0 [ 1676.529898] RBP: ffff8880355061c0 R08: ffffffff8b994ac0 R09: 0000000000000000 [ 1676.529903] R10: 0000000000000000 R11: ffff8880355061c0 R12: ffff888035506778 [ 1676.529909] R13: ffff8880a7f77300 R14: 0000000000000000 R15: ffff88808f7cf900 [ 1676.534028] 0 [ 1676.537989] mm_release+0x239/0x2d0 [ 1676.538000] do_exit+0x56f/0x2850 [ 1676.540211] 0 [ 1676.543642] ? file_write_and_wait_range+0x90/0xd0 [ 1676.571558] 0 [ 1676.575943] ? mm_update_next_owner+0x5b0/0x5b0 [ 1676.584357] ? get_signal+0x323/0x1ca0 [ 1676.586127] Node 0 [ 1676.587908] ? lock_acquire+0x170/0x3f0 [ 1676.587917] ? lock_downgrade+0x740/0x740 [ 1676.587926] do_group_exit+0x100/0x2e0 [ 1676.595177] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1676.602420] get_signal+0x38d/0x1ca0 [ 1676.602429] ? up_read+0x17/0x30 [ 1676.602443] do_signal+0x7c/0x1550 [ 1676.609696] lowmem_reserve[]: [ 1676.616933] ? vm_insert_page+0x7c0/0x7c0 [ 1676.616941] ? lock_acquire+0x170/0x3f0 [ 1676.616950] ? setup_sigcontext+0x820/0x820 [ 1676.624192] 0 [ 1676.626019] ? mark_held_locks+0xa6/0xf0 [ 1676.629690] 0 [ 1676.633100] ? handle_mm_fault+0x52b/0x9c0 [ 1676.634868] 0 [ 1676.639777] ? __do_page_fault+0x159/0xad0 [ 1676.639786] ? exit_to_usermode_loop+0x41/0x200 [ 1676.639796] exit_to_usermode_loop+0x160/0x200 [ 1676.641570] 0 [ 1676.646212] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1676.650091] 0 [ 1676.652289] prepare_exit_to_usermode+0x1af/0x210 [ 1676.660354] ? page_fault+0x2f/0x50 [ 1676.660360] retint_user+0x8/0x18 [ 1676.660367] RIP: 0033:0x403f60 [ 1676.660372] RSP: 002b:00007ffce81dede8 EFLAGS: 00010246 [ 1676.664235] Node 1 [ 1676.689108] RAX: 00000000ffffffff RBX: 000000000000001e RCX: 000000000041940b [ 1676.689113] RDX: ffffffffffffffbc RSI: ffffffff86fd4695 RDI: 0000000000000000 [ 1676.689117] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000001b2d525d44 [ 1676.689121] R10: 00055da91400deec R11: 0000000000000000 R12: 0000000000000001 [ 1676.689125] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffce81deec0 [ 1676.689142] ? radix_tree_clear_tags+0x45/0xa0 [ 1676.700134] / [ 1676.727072] Normal free:26280kB min:53696kB low:67120kB high:80544kB active_anon:1580kB inactive_anon:35276kB active_file:0kB inactive_file:124kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:544kB pagetables:232kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1676.737866] mems_allowed=0-1 [ 1676.756819] lowmem_reserve[]: [ 1676.772855] CPU: 0 PID: 29554 Comm: syz-executor.3 Not tainted 4.14.232-syzkaller #0 [ 1676.792449] 0 [ 1676.795494] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1676.802782] 0 [ 1676.809995] Call Trace: [ 1676.810017] dump_stack+0x1b2/0x281 [ 1676.810031] warn_alloc.cold+0x96/0x1cc [ 1676.814586] 0 [ 1676.816285] ? zone_watermark_ok_safe+0x220/0x220 [ 1676.844043] 0 [ 1676.847112] ? usleep_range+0x130/0x130 [ 1676.847122] ? try_to_free_pages+0x23f/0x6e0 [ 1676.850200] 0 [ 1676.858064] ? _find_next_bit+0xdb/0x100 [ 1676.858076] ? run_timer_softirq+0x5a0/0x5a0 [ 1676.858092] __alloc_pages_nodemask+0x2127/0x2720 [ 1676.869201] ? lock_acquire+0x170/0x3f0 [ 1676.869217] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1676.870989] Node 0 [ 1676.873555] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1676.877168] DMA: [ 1676.881114] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1676.882884] 5*4kB [ 1676.887708] ? alloc_pages_current+0x16/0x260 [ 1676.887719] alloc_pages_current+0x155/0x260 [ 1676.887730] ion_page_pool_alloc+0x118/0x1b0 [ 1676.889523] (ME) [ 1676.893474] ion_system_heap_allocate+0x133/0x8c0 [ 1676.897870] 5*8kB [ 1676.899637] ? ion_alloc+0x187/0x810 [ 1676.903663] (ME) [ 1676.908051] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1676.908061] ? ion_system_contig_heap_create+0x130/0x130 [ 1676.908072] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1676.912885] 4*16kB [ 1676.916839] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1676.916850] ion_alloc+0x204/0x810 [ 1676.916863] ? ion_dma_buf_release+0x40/0x40 [ 1676.921675] (UM) [ 1676.923891] ? __might_fault+0x177/0x1b0 [ 1676.928372] 5*32kB [ 1676.930399] ion_ioctl+0xea/0x1f0 [ 1676.935815] (UME) [ 1676.937946] ? ion_query_heaps+0x360/0x360 [ 1676.937958] ? ion_query_heaps+0x360/0x360 [ 1676.937967] do_vfs_ioctl+0x75a/0xff0 [ 1676.942433] 7*64kB [ 1676.946821] ? ioctl_preallocate+0x1a0/0x1a0 [ 1676.946829] ? lock_downgrade+0x740/0x740 [ 1676.946842] ? __fget+0x225/0x360 [ 1676.951216] (UME) [ 1676.953257] ? do_vfs_ioctl+0xff0/0xff0 [ 1676.958086] 6*128kB [ 1676.960215] ? security_file_ioctl+0x83/0xb0 [ 1676.963894] (UME) [ 1676.965938] SyS_ioctl+0x7f/0xb0 [ 1676.971371] 3*256kB [ 1676.976783] ? do_vfs_ioctl+0xff0/0xff0 [ 1676.976794] do_syscall_64+0x1d5/0x640 [ 1676.976808] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1676.981788] (ME) [ 1676.984008] RIP: 0033:0x4665f9 [ 1676.988835] 1*512kB [ 1676.992332] RSP: 002b:00007fd613a46188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1676.996733] (E) [ 1676.998763] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1677.002793] 2*1024kB [ 1677.005002] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1677.005008] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1677.008456] (ME) [ 1677.010568] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1677.014771] 1*2048kB [ 1677.018977] R13: 00007ffce81deb9f R14: 00007fd613a46300 R15: 0000000000022000 [ 1677.032640] Mem-Info: [ 1677.058972] (E) [ 1677.072280] active_anon:15067 inactive_anon:28338 isolated_anon:0 [ 1677.072280] active_file:14 inactive_file:13 isolated_file:0 [ 1677.072280] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1677.072280] slab_reclaimable:12554 slab_unreclaimable:119277 [ 1677.072280] mapped:43952 shmem:29453 pagetables:711 bounce:0 [ 1677.072280] free:13922 free_pcp:7 free_cma:0 [ 1677.090485] 1*4096kB [ 1677.107681] Node 0 active_anon:58764kB inactive_anon:78076kB active_file:32kB inactive_file:28kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:157056kB dirty:0kB writeback:0kB shmem:82328kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1677.144937] (U) [ 1677.172884] Node 1 active_anon:1504kB inactive_anon:35276kB active_file:24kB inactive_file:24kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:18752kB dirty:0kB writeback:0kB shmem:35484kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1677.230597] = 10972kB [ 1677.232353] Node 0 [ 1677.233003] Node 0 [ 1677.233022] DMA free:10972kB min:204kB low:252kB high:300kB active_anon:12kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1677.235222] DMA32: [ 1677.237484] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1677.237507] Node 0 DMA32 free:18136kB min:36200kB low:45248kB high:54296kB active_anon:58752kB inactive_anon:78076kB active_file:32kB inactive_file:28kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7360kB pagetables:2616kB bounce:0kB free_pcp:152kB local_pcp:0kB free_cma:0kB [ 1677.237527] lowmem_reserve[]: 0 0 0 0 0 [ 1677.237546] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1677.237564] lowmem_reserve[]: 0 0 0 0 0 [ 1677.237584] Node 1 Normal free:26480kB min:53696kB low:67120kB high:80544kB active_anon:1504kB inactive_anon:35276kB active_file:24kB inactive_file:24kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:544kB pagetables:228kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1677.237603] lowmem_reserve[]: 0 0 0 0 0 [ 1677.237623] Node 0 DMA: 5*4kB (ME) 5*8kB (ME) 4*16kB (UM) 5*32kB (UME) 7*64kB (UME) 6*128kB [ 1677.297333] 850*4kB [ 1677.303014] (UME) [ 1677.303519] (ME) [ 1677.332429] 3*256kB [ 1677.362852] 452*8kB [ 1677.369008] (ME) 1*512kB (E) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (U) = 10972kB [ 1677.396741] Node 0 DMA32: 850*4kB (ME) 452*8kB (UME) 67*16kB (ME) 21*32kB (UME) 29*64kB (UME) 9*128kB (UME) 7*256kB (UM) 3*512kB (M) 1*1024kB (M) 1*2048kB (M) 0*4096kB = 18168kB [ 1677.414893] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1677.425089] (UME) 67*16kB (ME) 21*32kB (UME) 29*64kB (UME) 9*128kB (UME) 7*256kB (UM) 3*512kB (M) 1*1024kB (M) 1*2048kB (M) 0*4096kB = 18168kB [ 1677.429228] Node 1 Normal: 48*4kB (M) 38*8kB (M) 32*16kB (UME) 26*32kB (UME) 19*64kB (M) 13*128kB (UM) 23*256kB (UM) 27*512kB (UM) 2*1024kB (M) 0*2048kB 0*4096kB = 26480kB [ 1677.458521] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1677.469545] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1677.480288] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1677.491209] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1677.495410] Node 0 [ 1677.505941] 29480 total pagecache pages [ 1677.514549] 0 pages in swap cache [ 1677.524148] Swap cache stats: add 0, delete 0, find 0/0 [ 1677.531607] Free swap = 0kB [ 1677.534619] Total swap = 0kB [ 1677.536164] Normal: [ 1677.543735] 2097051 pages RAM [ 1677.551291] 0 pages HighMem/MovableOnly [ 1677.555254] 363849 pages reserved [ 1677.564888] 0 pages cma reserved [ 1677.570998] 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1677.628079] Node 1 Normal: 0*4kB 1*8kB (M) 1*16kB (E) 4*32kB (UME) 233*64kB (U) 422*128kB (U) 48*256kB (UM) 27*512kB (UM) 5*1024kB (UM) 1*2048kB (U) 4*4096kB (U) = 118744kB [ 1677.645337] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1677.709617] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1677.725477] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1677.746599] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1677.764856] 29522 total pagecache pages [ 1677.778109] 0 pages in swap cache [ 1677.781616] Swap cache stats: add 0, delete 0, find 0/0 [ 1677.790961] Free swap = 0kB [ 1677.804271] Total swap = 0kB [ 1677.813607] 2097051 pages RAM [ 1677.821624] 0 pages HighMem/MovableOnly [ 1677.825602] 363849 pages reserved [ 1677.834725] 0 pages cma reserved [ 1677.842891] Out of memory: Kill process 29433 (syz-executor.0) score 1004 or sacrifice child [ 1677.863389] Killed process 29434 (syz-executor.0) total-vm:93384kB, anon-rss:160kB, file-rss:34820kB, shmem-rss:0kB [ 1677.891921] syz-executor.3: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1677.910714] syz-fuzzer invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1677.954646] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 1677.974658] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 1677.981555] CPU: 0 PID: 29554 Comm: syz-executor.3 Not tainted 4.14.232-syzkaller #0 [ 1677.989421] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1677.998752] Call Trace: [ 1678.001322] dump_stack+0x1b2/0x281 [ 1678.004930] warn_alloc.cold+0x96/0x1cc [ 1678.008887] ? zone_watermark_ok_safe+0x220/0x220 [ 1678.013716] __alloc_pages_nodemask+0x2127/0x2720 [ 1678.018541] ? ___preempt_schedule+0x16/0x18 [ 1678.022933] ? lock_acquire+0x170/0x3f0 [ 1678.026888] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1678.031717] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1678.037149] ? __mutex_unlock_slowpath+0x75/0x770 [ 1678.041972] alloc_pages_current+0x155/0x260 [ 1678.046365] ion_page_pool_alloc+0x118/0x1b0 [ 1678.050752] ion_system_heap_allocate+0x133/0x8c0 [ 1678.055585] ? _raw_spin_unlock+0x29/0x40 [ 1678.059724] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1678.064630] ? ion_system_contig_heap_create+0x130/0x130 [ 1678.070063] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1678.075055] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1678.079875] ion_alloc+0x27a/0x810 [ 1678.083397] ? ion_dma_buf_release+0x40/0x40 [ 1678.087786] ? __might_fault+0x177/0x1b0 [ 1678.091825] ion_ioctl+0xea/0x1f0 [ 1678.095255] ? ion_query_heaps+0x360/0x360 [ 1678.099469] ? ion_query_heaps+0x360/0x360 [ 1678.103684] do_vfs_ioctl+0x75a/0xff0 [ 1678.107464] ? ioctl_preallocate+0x1a0/0x1a0 [ 1678.111853] ? lock_downgrade+0x740/0x740 [ 1678.115980] ? __fget+0x225/0x360 [ 1678.119413] ? do_vfs_ioctl+0xff0/0xff0 [ 1678.123367] ? security_file_ioctl+0x83/0xb0 [ 1678.127752] SyS_ioctl+0x7f/0xb0 [ 1678.131094] ? do_vfs_ioctl+0xff0/0xff0 [ 1678.135046] do_syscall_64+0x1d5/0x640 [ 1678.138914] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1678.144079] RIP: 0033:0x4665f9 [ 1678.147249] RSP: 002b:00007fd613a46188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1678.154934] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1678.162183] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1678.169427] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1678.176674] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1678.183921] R13: 00007ffce81deb9f R14: 00007fd613a46300 R15: 0000000000022000 [ 1678.191181] CPU: 1 PID: 27811 Comm: syz-fuzzer Not tainted 4.14.232-syzkaller #0 [ 1678.198710] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1678.200834] warn_alloc_show_mem: 1 callbacks suppressed [ 1678.200837] Mem-Info: [ 1678.208046] Call Trace: [ 1678.208061] dump_stack+0x1b2/0x281 [ 1678.208073] dump_header+0x178/0x82f [ 1678.208083] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1678.208092] ? ___ratelimit+0x2cd/0x530 [ 1678.208101] oom_kill_process.cold+0x10/0xa40 [ 1678.208119] out_of_memory+0xe3e/0x1190 [ 1678.221195] active_anon:15071 inactive_anon:28338 isolated_anon:0 [ 1678.221195] active_file:12 inactive_file:12 isolated_file:0 [ 1678.221195] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1678.221195] slab_reclaimable:12554 slab_unreclaimable:118932 [ 1678.221195] mapped:43956 shmem:29453 pagetables:711 bounce:0 [ 1678.221195] free:13846 free_pcp:63 free_cma:0 [ 1678.222013] ? oom_killer_disable+0x1c0/0x1c0 [ 1678.225704] Node 0 active_anon:58764kB inactive_anon:78076kB active_file:28kB inactive_file:28kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:157072kB dirty:0kB writeback:0kB shmem:82328kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1678.230774] ? mutex_trylock+0x152/0x1a0 [ 1678.230785] __alloc_pages_nodemask+0x23e1/0x2720 [ 1678.230804] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1678.230829] alloc_pages_current+0x155/0x260 [ 1678.245601] Node 1 active_anon:1520kB inactive_anon:35276kB active_file:20kB inactive_file:20kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:18752kB dirty:0kB writeback:0kB shmem:35484kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1678.276352] filemap_fault+0x11a1/0x1ad0 [ 1678.276371] ext4_filemap_fault+0x84/0xb0 [ 1678.276381] __do_fault+0xfa/0x380 [ 1678.276391] __handle_mm_fault+0x2497/0x4620 [ 1678.276402] ? vm_insert_page+0x7c0/0x7c0 [ 1678.276414] ? setup_sigcontext+0x820/0x820 [ 1678.276428] ? mark_held_locks+0xa6/0xf0 [ 1678.276439] handle_mm_fault+0x455/0x9c0 [ 1678.290877] Node 0 [ 1678.308564] __do_page_fault+0x549/0xad0 [ 1678.308576] ? spurious_fault+0x640/0x640 [ 1678.308585] ? do_page_fault+0x60/0x500 [ 1678.308593] ? page_fault+0x2f/0x50 [ 1678.308599] page_fault+0x45/0x50 [ 1678.308606] RIP: 0000:0x94786a [ 1678.308610] RSP: 20000:000000c00064fab0 EFLAGS: 00000018 [ 1678.320287] syz-executor.0: [ 1678.329234] DMA free:10972kB min:204kB low:252kB high:300kB active_anon:12kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1678.365897] page allocation failure: order:0 [ 1678.372746] lowmem_reserve[]: [ 1678.377866] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1678.378804] 0 [ 1678.382819] (null) [ 1678.393775] 2717 [ 1678.411911] syz-executor.0 cpuset= [ 1678.418619] 2718 [ 1678.428270] / [ 1678.452833] 2718 [ 1678.464667] mems_allowed=0-1 [ 1678.473364] 2718 [ 1678.480729] CPU: 1 PID: 29434 Comm: syz-executor.0 Not tainted 4.14.232-syzkaller #0 [ 1678.481282] Node 0 [ 1678.489135] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1678.489139] Call Trace: [ 1678.489156] dump_stack+0x1b2/0x281 [ 1678.489170] warn_alloc.cold+0x96/0x1cc [ 1678.489183] ? zone_watermark_ok_safe+0x220/0x220 [ 1678.489192] ? usleep_range+0x130/0x130 [ 1678.489203] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1678.498222] DMA32 free:18044kB min:36200kB low:45248kB high:54296kB active_anon:58752kB inactive_anon:78076kB active_file:28kB inactive_file:28kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7328kB pagetables:2616kB bounce:0kB free_pcp:124kB local_pcp:12kB free_cma:0kB [ 1678.500755] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1678.503307] lowmem_reserve[]: [ 1678.506911] ? run_timer_softirq+0x5a0/0x5a0 [ 1678.506929] __alloc_pages_nodemask+0x2127/0x2720 [ 1678.506946] ? lock_acquire+0x170/0x3f0 [ 1678.506966] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1678.516021] Mem-Info: [ 1678.519787] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1678.519804] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1678.519824] alloc_pages_current+0x155/0x260 [ 1678.519833] ion_page_pool_alloc+0x118/0x1b0 [ 1678.519843] ion_system_heap_allocate+0x133/0x8c0 [ 1678.526015] active_anon:15071 inactive_anon:28338 isolated_anon:0 [ 1678.526015] active_file:12 inactive_file:12 isolated_file:0 [ 1678.526015] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1678.526015] slab_reclaimable:12554 slab_unreclaimable:118932 [ 1678.526015] mapped:43956 shmem:29453 pagetables:711 bounce:0 [ 1678.526015] free:13846 free_pcp:61 free_cma:0 [ 1678.553090] ? ion_alloc+0x187/0x810 [ 1678.553101] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1678.553109] ? ion_system_contig_heap_create+0x130/0x130 [ 1678.553118] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1678.553130] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1678.553141] ion_alloc+0x204/0x810 [ 1678.553154] ? ion_dma_buf_release+0x40/0x40 [ 1678.563502] 0 [ 1678.565620] ? __might_fault+0x177/0x1b0 [ 1678.570830] 0 [ 1678.574392] ion_ioctl+0xea/0x1f0 [ 1678.584424] 0 [ 1678.586077] ? ion_query_heaps+0x360/0x360 [ 1678.593216] 0 [ 1678.595891] ? ion_query_heaps+0x360/0x360 [ 1678.605406] 0 [ 1678.638224] do_vfs_ioctl+0x75a/0xff0 [ 1678.638237] ? ioctl_preallocate+0x1a0/0x1a0 [ 1678.638247] ? lock_downgrade+0x740/0x740 [ 1678.638260] ? __fget+0x225/0x360 [ 1678.638268] ? do_vfs_ioctl+0xff0/0xff0 [ 1678.638279] ? security_file_ioctl+0x83/0xb0 [ 1678.638288] SyS_ioctl+0x7f/0xb0 [ 1678.638295] ? do_vfs_ioctl+0xff0/0xff0 [ 1678.638305] do_syscall_64+0x1d5/0x640 [ 1678.638321] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1678.638329] RIP: 0033:0x4665f9 [ 1678.638333] RSP: 002b:00007fc8c6af5188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1678.649101] Node 0 active_anon:58764kB inactive_anon:78076kB active_file:28kB inactive_file:28kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:157072kB dirty:0kB writeback:0kB shmem:82328kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1678.652892] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1678.652900] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1678.661303] Node 1 active_anon:1520kB inactive_anon:35276kB active_file:20kB inactive_file:20kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:18752kB dirty:0kB writeback:0kB shmem:35484kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1678.662709] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1678.662716] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1678.666229] Node 0 [ 1678.670610] R13: 00007ffdd42e705f R14: 00007fc8c6af5300 R15: 0000000000022000 [ 1678.803132] DMA free:10972kB min:204kB low:252kB high:300kB active_anon:12kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1678.869489] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1678.879927] Node 0 DMA32 free:67376kB min:36200kB low:45248kB high:54296kB active_anon:58680kB inactive_anon:78076kB active_file:36kB inactive_file:720kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7296kB pagetables:2528kB bounce:0kB free_pcp:692kB local_pcp:596kB free_cma:0kB [ 1678.909898] lowmem_reserve[]: 0 0 0 0 0 [ 1678.923769] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1678.949980] lowmem_reserve[]: 0 0 0 0 0 [ 1678.954292] Node 1 Normal free:231568kB min:53696kB low:67120kB high:80544kB active_anon:1520kB inactive_anon:35276kB active_file:20kB inactive_file:4116kB unevictable:0kB writepending:4kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:576kB pagetables:228kB bounce:0kB free_pcp:260kB local_pcp:20kB free_cma:0kB [ 1678.983797] lowmem_reserve[]: 0 0 0 0 0 [ 1678.988465] Node 0 DMA: 5*4kB (ME) 5*8kB (ME) 4*16kB (UM) 5*32kB (UME) 7*64kB (UME) 6*128kB (UME) 3*256kB (ME) 1*512kB (E) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (U) = 10972kB [ 1679.023116] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1679.052697] Node 0 DMA32: 265*4kB (UMEH) 1369*8kB (UMEH) 449*16kB (UMEH) 111*32kB (UMEH) 483*64kB (UMEH) 7*128kB (UME) 1*256kB (M) 4*512kB (UM) 2*1024kB (UM) 0*2048kB 0*4096kB = 58908kB [ 1679.119242] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1679.139543] lowmem_reserve[]: 0 0 0 0 0 [ 1679.145175] Node 1 Normal: 2*4kB (UM) 1*8kB (U) 2*16kB (UE) 2*32kB (UE) 1366*64kB (U) 168*128kB (UM) 47*256kB (UM) 65*512kB (UM) 134*1024kB (U) 23*2048kB (U) 5*4096kB (U) = 359152kB [ 1679.163848] Node 1 Normal free:339728kB min:53696kB low:67120kB high:80544kB active_anon:1420kB inactive_anon:35276kB active_file:1320kB inactive_file:2816kB unevictable:0kB writepending:4kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:544kB pagetables:80kB bounce:0kB free_pcp:424kB local_pcp:300kB free_cma:0kB [ 1679.186592] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1679.217695] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1679.226401] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1679.256670] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1679.265279] 31243 total pagecache pages [ 1679.279808] lowmem_reserve[]: 0 0 0 0 0 [ 1679.287267] 0 pages in swap cache [ 1679.290740] Swap cache stats: add 0, delete 0, find 0/0 [ 1679.291134] Node 0 [ 1679.296107] Free swap = 0kB [ 1679.299497] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1679.308042] Total swap = 0kB [ 1679.311186] 2097051 pages RAM [ 1679.314299] 0 pages HighMem/MovableOnly [ 1679.321230] DMA: 5*4kB (ME) 5*8kB (ME) 4*16kB (UM) 5*32kB (UME) 7*64kB (UME) 6*128kB (UME) 3*256kB (ME) 1*512kB (E) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (U) = 10972kB [ 1679.326618] 363849 pages reserved [ 1679.341223] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1679.376736] device bridge_slave_1 left promiscuous mode [ 1679.379786] 0 pages cma reserved [ 1679.382165] Node 0 [ 1679.385475] Out of memory (oom_kill_allocating_task): Kill process 27811 (syz-fuzzer) score 0 or sacrifice child [ 1679.385481] DMA32: [ 1679.387948] Killed process 29450 (syz-executor.2) total-vm:84924kB, anon-rss:68kB, file-rss:0kB, shmem-rss:0kB [ 1679.417265] bridge0: port 2(bridge_slave_1) entered disabled state [ 1679.434852] device bridge_slave_0 left promiscuous mode [ 1679.436575] 89*4kB (UMEH) 437*8kB (MEH) 69*16kB (MEH) 19*32kB (UMEH) 594*64kB (UMEH) 8*128kB (UME) 1*256kB (M) 4*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 46908kB [ 1679.449526] bridge0: port 1(bridge_slave_0) entered disabled state [ 1679.478688] oom_reaper: reaped process 29434 (syz-executor.0), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB 22:11:56 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$unix(0x1, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x80000000, 0x6}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000280)=ANY=[@ANYBLOB="40000000d05dfd0cf6aadfcd1c2c8204548f7ad25fb20c9fc1b948acee1bf738a8e2f89ba8ad644647776e1929696b34254e5dffa31fab7db2587004efe13e6e76fca3797168ba0ca323227067252996e8b160c2bec95a5f9f90491af03c1f501e1720021bfe4f682947ba1614a12e86a754", @ANYRES16=0x0, @ANYBLOB="000328bd7000ffdbdf2502000000080011000000000006000200010000000c0010000000000001000000050014001f00000008000b0000000000"], 0x40}, 0x1, 0x0, 0x0, 0xc000}, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) [ 1679.506579] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1679.533125] oom_reaper: reaped process 29450 (syz-executor.2), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1679.561819] Node 1 Normal: 1*4kB (U) 129*8kB (UM) 92*16kB (UE) 17*32kB (UME) 2996*64kB (U) 526*128kB (UM) 171*256kB (UM) 90*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 351980kB [ 1679.596587] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1679.605444] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1679.636577] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1679.656583] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1679.670248] device hsr_slave_1 left promiscuous mode [ 1679.671088] 32834 total pagecache pages [ 1679.696618] 0 pages in swap cache [ 1679.700107] Swap cache stats: add 0, delete 0, find 0/0 [ 1679.700133] device hsr_slave_0 left promiscuous mode [ 1679.705450] Free swap = 0kB [ 1679.705455] Total swap = 0kB [ 1679.750481] 2097051 pages RAM [ 1679.759806] team0 (unregistering): Port device team_slave_1 removed [ 1679.760650] 0 pages HighMem/MovableOnly [ 1679.786610] 363849 pages reserved [ 1679.790354] 0 pages cma reserved [ 1679.799139] team0 (unregistering): Port device team_slave_0 removed [ 1679.819280] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 1679.851395] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 1679.916055] bond0 (unregistering): Released all slaves [ 1680.049137] syz-executor.0: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1680.061098] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 1680.066212] CPU: 1 PID: 29434 Comm: syz-executor.0 Not tainted 4.14.232-syzkaller #0 [ 1680.074082] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1680.083429] Call Trace: [ 1680.086013] dump_stack+0x1b2/0x281 [ 1680.089637] warn_alloc.cold+0x96/0x1cc [ 1680.093620] ? zone_watermark_ok_safe+0x220/0x220 [ 1680.098498] __alloc_pages_nodemask+0x2127/0x2720 [ 1680.103338] ? io_schedule_timeout+0x140/0x140 [ 1680.107920] ? lock_acquire+0x170/0x3f0 [ 1680.111893] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1680.116738] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1680.122179] ? __mutex_unlock_slowpath+0x75/0x770 [ 1680.127015] alloc_pages_current+0x155/0x260 [ 1680.131418] ion_page_pool_alloc+0x118/0x1b0 [ 1680.135821] ion_system_heap_allocate+0x133/0x8c0 [ 1680.140663] ? _raw_spin_unlock+0x29/0x40 [ 1680.144811] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1680.149731] ? ion_system_contig_heap_create+0x130/0x130 [ 1680.155170] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1680.160180] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1680.165015] ion_alloc+0x27a/0x810 [ 1680.168553] ? ion_dma_buf_release+0x40/0x40 [ 1680.172959] ? __might_fault+0x177/0x1b0 [ 1680.177014] ion_ioctl+0xea/0x1f0 [ 1680.180461] ? ion_query_heaps+0x360/0x360 [ 1680.184690] ? ion_query_heaps+0x360/0x360 [ 1680.188914] do_vfs_ioctl+0x75a/0xff0 [ 1680.192710] ? ioctl_preallocate+0x1a0/0x1a0 [ 1680.197113] ? lock_downgrade+0x740/0x740 [ 1680.201257] ? __fget+0x225/0x360 [ 1680.204697] ? do_vfs_ioctl+0xff0/0xff0 [ 1680.208660] ? security_file_ioctl+0x83/0xb0 [ 1680.213066] SyS_ioctl+0x7f/0xb0 [ 1680.216421] ? do_vfs_ioctl+0xff0/0xff0 [ 1680.220390] do_syscall_64+0x1d5/0x640 [ 1680.224273] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1680.229453] RIP: 0033:0x4665f9 [ 1680.232643] RSP: 002b:00007fc8c6af5188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1680.240345] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1680.247605] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1680.254865] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1680.262126] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1680.269390] R13: 00007ffdd42e705f R14: 00007fc8c6af5300 R15: 0000000000022000 [ 1680.503836] warn_alloc_show_mem: 1 callbacks suppressed [ 1680.503840] Mem-Info: [ 1680.511687] active_anon:15005 inactive_anon:28336 isolated_anon:0 [ 1680.511687] active_file:553 inactive_file:5207 isolated_file:0 [ 1680.511687] unevictable:0 dirty:40 writeback:0 unstable:0 [ 1680.511687] slab_reclaimable:12540 slab_unreclaimable:119179 [ 1680.511687] mapped:30869 shmem:29451 pagetables:641 bounce:0 [ 1680.511687] free:62127 free_pcp:200 free_cma:0 [ 1680.594868] Node 0 active_anon:58680kB inactive_anon:78072kB active_file:688kB inactive_file:15116kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:117132kB dirty:144kB writeback:0kB shmem:82324kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1680.645488] Node 1 active_anon:1340kB inactive_anon:35272kB active_file:1524kB inactive_file:5712kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:6344kB dirty:16kB writeback:0kB shmem:35480kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1680.706214] Node 0 DMA free:11116kB min:204kB low:252kB high:300kB active_anon:12kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1680.756499] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1680.767169] Node 0 DMA32 free:55552kB min:36200kB low:45248kB high:54296kB active_anon:58668kB inactive_anon:78072kB active_file:688kB inactive_file:15116kB unevictable:0kB writepending:144kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7264kB pagetables:2480kB bounce:0kB free_pcp:280kB local_pcp:208kB free_cma:0kB [ 1680.796699] lowmem_reserve[]: 0 0 0 0 0 [ 1680.800728] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1680.828399] lowmem_reserve[]: 0 0 0 0 0 [ 1680.832448] Node 1 Normal free:278788kB min:53696kB low:67120kB high:80544kB active_anon:1340kB inactive_anon:35272kB active_file:1524kB inactive_file:5712kB unevictable:0kB writepending:16kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:512kB pagetables:84kB bounce:0kB free_pcp:720kB local_pcp:0kB free_cma:0kB [ 1680.862580] lowmem_reserve[]: 0 0 0 0 0 [ 1680.867559] Node 0 DMA: 7*4kB (UME) 16*8kB (UME) 11*16kB (UM) 7*32kB (UME) 5*64kB (UME) 6*128kB (UME) 3*256kB (ME) 1*512kB (E) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (U) = 11116kB [ 1680.900812] Node 0 DMA32: 114*4kB (MEH) 181*8kB (UMEH) 41*16kB (UMEH) 725*32kB (UME) 283*64kB (UMH) 8*128kB (UH) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 44896kB [ 1680.931173] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1680.951417] Node 1 Normal: 9248*4kB (UM) 9608*8kB (U) 3240*16kB (UE) 1994*32kB (UE) 899*64kB (U) 75*128kB (U) 6*256kB (U) 2*512kB (U) 1*1024kB (U) 0*2048kB 0*4096kB = 300224kB [ 1680.991919] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1681.002058] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1681.022310] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1681.042584] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1681.057078] 35228 total pagecache pages [ 1681.061061] 0 pages in swap cache [ 1681.072948] Swap cache stats: add 0, delete 0, find 0/0 [ 1681.078353] Free swap = 0kB [ 1681.081358] Total swap = 0kB [ 1681.093215] 2097051 pages RAM [ 1681.096324] 0 pages HighMem/MovableOnly [ 1681.113457] 363849 pages reserved [ 1681.116997] 0 pages cma reserved [ 1681.815310] bond0 (unregistering): Released all slaves [ 1684.505208] IPVS: ftp: loaded support on port[0] = 21 [ 1684.586916] IPVS: ftp: loaded support on port[0] = 21 [ 1684.745686] chnl_net:caif_netlink_parms(): no params data found [ 1684.797910] IPVS: ftp: loaded support on port[0] = 21 [ 1684.931806] chnl_net:caif_netlink_parms(): no params data found [ 1685.081054] chnl_net:caif_netlink_parms(): no params data found [ 1685.128148] bridge0: port 1(bridge_slave_0) entered blocking state [ 1685.134557] bridge0: port 1(bridge_slave_0) entered disabled state [ 1685.143049] device bridge_slave_0 entered promiscuous mode [ 1685.155298] bridge0: port 2(bridge_slave_1) entered blocking state [ 1685.165560] bridge0: port 2(bridge_slave_1) entered disabled state [ 1685.174310] device bridge_slave_1 entered promiscuous mode [ 1685.219586] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 1685.227296] bridge0: port 1(bridge_slave_0) entered blocking state [ 1685.233629] bridge0: port 1(bridge_slave_0) entered disabled state [ 1685.241569] device bridge_slave_0 entered promiscuous mode [ 1685.250422] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1685.258424] bridge0: port 2(bridge_slave_1) entered blocking state [ 1685.264806] bridge0: port 2(bridge_slave_1) entered disabled state [ 1685.272140] device bridge_slave_1 entered promiscuous mode [ 1685.310515] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 1685.318046] team0: Port device team_slave_0 added [ 1685.324207] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 1685.332130] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 1685.341517] team0: Port device team_slave_1 added [ 1685.365730] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1685.381578] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1685.388017] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1685.414495] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1685.433002] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1685.439411] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1685.465602] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1685.476365] bridge0: port 1(bridge_slave_0) entered blocking state [ 1685.482703] bridge0: port 1(bridge_slave_0) entered disabled state [ 1685.491000] device bridge_slave_0 entered promiscuous mode [ 1685.502796] bridge0: port 2(bridge_slave_1) entered blocking state [ 1685.510461] bridge0: port 2(bridge_slave_1) entered disabled state [ 1685.517760] device bridge_slave_1 entered promiscuous mode [ 1685.524109] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 1685.531488] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 1685.540226] team0: Port device team_slave_0 added [ 1685.552205] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 1685.559472] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 1685.567674] team0: Port device team_slave_1 added [ 1685.595217] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 1685.610512] device hsr_slave_0 entered promiscuous mode [ 1685.617550] device hsr_slave_1 entered promiscuous mode [ 1685.631020] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1685.638848] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 1685.652638] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1685.660049] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1685.688008] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1685.698627] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 1685.705781] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1685.712070] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1685.737289] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1685.759771] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 1685.767090] team0: Port device team_slave_0 added [ 1685.773865] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 1685.781610] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 1685.789540] team0: Port device team_slave_1 added [ 1685.811553] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 1685.843500] device hsr_slave_0 entered promiscuous mode [ 1685.849686] device hsr_slave_1 entered promiscuous mode [ 1685.855832] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1685.862605] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1685.887883] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1685.901514] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1685.908340] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1685.933956] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1685.944456] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 1685.952256] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 1685.962473] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 1685.975069] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 1686.022259] device hsr_slave_0 entered promiscuous mode [ 1686.028637] device hsr_slave_1 entered promiscuous mode [ 1686.045121] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 1686.055022] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 1686.133777] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 1686.163366] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 1686.212310] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1686.221365] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 1686.233083] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 1686.242680] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1686.249910] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1686.259174] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 1686.268945] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 1686.275012] 8021q: adding VLAN 0 to HW filter on device team0 [ 1686.295758] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 1686.308724] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1686.317311] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1686.324839] bridge0: port 1(bridge_slave_0) entered blocking state [ 1686.331205] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1686.344566] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 1686.353317] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1686.360537] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1686.368330] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1686.375811] bridge0: port 2(bridge_slave_1) entered blocking state [ 1686.382204] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1686.390930] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 1686.402053] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1686.411877] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1686.419084] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 1686.431703] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1686.443985] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 1686.451814] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 1686.461173] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1686.468098] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1686.475707] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1686.485554] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 1686.494675] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 1686.501372] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1686.508861] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1686.517050] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1686.524503] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1686.531835] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1686.540445] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 1686.546220] Bluetooth: hci1 command 0x0409 tx timeout [ 1686.548825] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 1686.560416] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 1686.566702] 8021q: adding VLAN 0 to HW filter on device team0 [ 1686.572737] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1686.580627] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1686.590168] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 1686.599915] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 1686.607431] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1686.615044] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1686.622613] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1686.626492] Bluetooth: hci3 command 0x0409 tx timeout [ 1686.629969] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1686.643105] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 1686.649752] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1686.659900] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 1686.672266] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 1686.678523] 8021q: adding VLAN 0 to HW filter on device team0 [ 1686.684547] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1686.693430] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1686.701581] bridge0: port 1(bridge_slave_0) entered blocking state [ 1686.707964] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1686.715128] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1686.722543] Bluetooth: hci4 command 0x0409 tx timeout [ 1686.728030] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 1686.739441] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 1686.748053] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 1686.755303] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1686.763704] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1686.771508] bridge0: port 2(bridge_slave_1) entered blocking state [ 1686.777886] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1686.784706] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1686.791682] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1686.799929] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 1686.808385] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1686.817856] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1686.825349] bridge0: port 1(bridge_slave_0) entered blocking state [ 1686.831710] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1686.840442] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 1686.849972] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 1686.857424] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1686.864388] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1686.872530] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1686.882273] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 1686.890423] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1686.898398] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1686.905899] bridge0: port 2(bridge_slave_1) entered blocking state [ 1686.912264] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1686.921472] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1686.929489] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 1686.937953] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 1686.944768] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1686.953521] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1686.961249] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1686.970533] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1686.980972] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 1686.989854] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 1687.000728] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1687.008334] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1687.015753] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1687.026542] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 1687.034555] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1687.042506] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1687.051685] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 1687.063068] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 1687.070667] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1687.079152] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1687.087277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1687.094687] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1687.102679] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1687.112212] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 1687.121497] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1687.129640] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1687.138651] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 1687.144648] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1687.154135] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 1687.162154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1687.170336] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1687.183815] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 1687.192646] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1687.203117] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 1687.209194] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1687.218333] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1687.225786] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1687.236003] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 1687.244065] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 1687.254301] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 1687.263820] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 1687.270937] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1687.280279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1687.288440] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1687.295065] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1687.307752] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 1687.315645] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1687.327731] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 1687.334114] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1687.345683] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1687.360844] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1687.374510] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 1687.381984] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 1687.389112] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 1687.399170] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 1687.405861] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1687.414431] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1687.422419] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1687.430099] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1687.442253] device veth0_vlan entered promiscuous mode [ 1687.453715] device veth1_vlan entered promiscuous mode [ 1687.460269] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 1687.469412] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 1687.478265] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 1687.489320] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 1687.497589] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1687.497959] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1687.517657] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1687.525425] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1687.536897] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 1687.553038] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 1687.560098] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1687.568414] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1687.577895] device veth0_macvtap entered promiscuous mode [ 1687.583947] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 1687.598106] device veth1_macvtap entered promiscuous mode [ 1687.604300] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 1687.614974] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 1687.626846] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 1687.638467] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 1687.646899] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 1687.655671] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 1687.664280] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 1687.671309] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 1687.679526] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1687.687389] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1687.694320] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1687.703976] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1687.715307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1687.726281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1687.735379] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1687.745663] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1687.755522] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1687.765614] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1687.776341] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 1687.783244] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1687.791645] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 1687.799877] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1687.808283] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1687.816682] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1687.823925] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1687.832468] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1687.839856] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1687.850867] device veth0_vlan entered promiscuous mode [ 1687.860352] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1687.870278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1687.879894] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1687.889819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1687.898986] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1687.909554] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1687.920471] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 1687.927659] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1687.935695] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 1687.943616] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 1687.950953] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 1687.983690] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1687.991940] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1688.010072] device veth1_vlan entered promiscuous mode [ 1688.020365] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 1688.029269] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1688.040409] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1688.048254] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1688.055049] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1688.062895] device veth0_vlan entered promiscuous mode [ 1688.085790] device veth1_vlan entered promiscuous mode [ 1688.092511] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 1688.103420] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 1688.121147] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 1688.129244] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 1688.142571] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 1688.153905] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 1688.162756] device veth0_macvtap entered promiscuous mode [ 1688.169070] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 1688.175567] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1688.184506] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1688.191934] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1688.199780] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1688.207614] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1688.215089] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1688.223169] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1688.233156] device veth0_macvtap entered promiscuous mode [ 1688.243320] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 1688.254684] device veth1_macvtap entered promiscuous mode [ 1688.261243] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 1688.268273] device veth1_macvtap entered promiscuous mode [ 1688.274351] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 1688.283942] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 1688.293681] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 1688.305720] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 1688.317168] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 1688.328258] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1688.338339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1688.348511] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1688.358892] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1688.368072] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1688.378060] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1688.387538] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1688.397664] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1688.408652] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 1688.415652] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1688.423866] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1688.433899] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1688.444187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1688.454282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1688.463823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1688.473907] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1688.483067] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1688.492808] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1688.501944] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1688.511673] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1688.522248] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 1688.529693] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1688.537519] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1688.544633] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1688.553819] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1688.561306] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1688.569348] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1688.577376] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1688.584939] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1688.594278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1688.604428] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1688.613800] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1688.624238] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1688.626092] Bluetooth: hci1 command 0x041b tx timeout [ 1688.633721] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1688.648270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1688.657776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1688.667559] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1688.681294] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 1688.688362] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1688.700896] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1688.711158] Bluetooth: hci3 command 0x041b tx timeout [ 1688.722599] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1688.732254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1688.745103] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1688.754476] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1688.767646] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1688.778918] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1688.788840] Bluetooth: hci4 command 0x041b tx timeout [ 1688.798619] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1688.807810] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1688.821108] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1688.831497] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 1688.841483] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1688.848464] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1688.859745] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1688.869992] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1688.881654] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1689.890116] syz-executor.4: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1689.902229] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 1689.910467] CPU: 0 PID: 30261 Comm: syz-executor.4 Not tainted 4.14.232-syzkaller #0 [ 1689.918355] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1689.927698] Call Trace: [ 1689.930284] dump_stack+0x1b2/0x281 [ 1689.933911] warn_alloc.cold+0x96/0x1cc [ 1689.937883] ? zone_watermark_ok_safe+0x220/0x220 [ 1689.942737] __alloc_pages_nodemask+0x2127/0x2720 [ 1689.947584] ? lock_acquire+0x170/0x3f0 [ 1689.951559] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1689.956403] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1689.960964] syz-executor.2: [ 1689.961853] ? __mutex_unlock_slowpath+0x75/0x770 [ 1689.961868] alloc_pages_current+0x155/0x260 [ 1689.961880] ion_page_pool_alloc+0x118/0x1b0 [ 1689.964932] syz-executor.1: [ 1689.969702] ion_system_heap_allocate+0x133/0x8c0 [ 1689.969712] ? ion_alloc+0x187/0x810 [ 1689.969721] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1689.969730] ? ion_system_contig_heap_create+0x130/0x130 [ 1689.969740] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1689.969750] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1689.969761] ion_alloc+0x204/0x810 [ 1689.969773] ? ion_dma_buf_release+0x40/0x40 [ 1689.977643] page allocation failure: order:4 [ 1689.978545] ? __might_fault+0x177/0x1b0 [ 1689.978558] ion_ioctl+0xea/0x1f0 [ 1689.984880] page allocation failure: order:4 [ 1689.986375] ? ion_query_heaps+0x360/0x360 [ 1689.986388] ? ion_query_heaps+0x360/0x360 [ 1689.986399] do_vfs_ioctl+0x75a/0xff0 [ 1689.986411] ? ioctl_preallocate+0x1a0/0x1a0 [ 1689.986424] ? lock_downgrade+0x740/0x740 [ 1689.993914] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1689.995548] ? __fget+0x225/0x360 [ 1689.995558] ? do_vfs_ioctl+0xff0/0xff0 [ 1689.995570] ? security_file_ioctl+0x83/0xb0 [ 1690.003236] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1690.005997] SyS_ioctl+0x7f/0xb0 [ 1690.006005] ? do_vfs_ioctl+0xff0/0xff0 [ 1690.006021] do_syscall_64+0x1d5/0x640 [ 1690.006037] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1690.017535] (null) [ 1690.018759] RIP: 0033:0x4665f9 [ 1690.018765] RSP: 002b:00007f631d70d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1690.026126] syz-executor.1 cpuset= [ 1690.027218] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1690.027224] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1690.027229] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1690.027236] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1690.030815] (null) [ 1690.035048] R13: 00007ffd7ec795cf R14: 00007f631d70d300 R15: 0000000000022000 [ 1690.065319] Mem-Info: [ 1690.076267] / mems_allowed=0-1 [ 1690.076290] CPU: 1 PID: 30308 Comm: syz-executor.1 Not tainted 4.14.232-syzkaller #0 [ 1690.092032] active_anon:14963 inactive_anon:28343 isolated_anon:36 [ 1690.092032] active_file:1008 inactive_file:5914 isolated_file:0 [ 1690.092032] unevictable:0 dirty:100 writeback:0 unstable:0 [ 1690.092032] slab_reclaimable:12537 slab_unreclaimable:114756 [ 1690.092032] mapped:57422 shmem:29460 pagetables:785 bounce:0 [ 1690.092032] free:149085 free_pcp:208 free_cma:0 [ 1690.094541] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1690.094546] Call Trace: [ 1690.094562] dump_stack+0x1b2/0x281 [ 1690.094575] warn_alloc.cold+0x96/0x1cc [ 1690.102104] Node 0 active_anon:58628kB inactive_anon:78104kB active_file:2336kB inactive_file:16992kB unevictable:0kB isolated(anon):48kB isolated(file):0kB mapped:123068kB dirty:320kB writeback:0kB shmem:82364kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1690.105065] ? zone_watermark_ok_safe+0x220/0x220 [ 1690.105088] __alloc_pages_nodemask+0x2127/0x2720 [ 1690.120020] Node 1 active_anon:1224kB inactive_anon:35268kB active_file:1696kB inactive_file:6664kB unevictable:0kB isolated(anon):96kB isolated(file):0kB mapped:106620kB dirty:80kB writeback:0kB shmem:35476kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1690.123554] ? lock_acquire+0x170/0x3f0 [ 1690.123571] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1690.130894] Node 0 [ 1690.138082] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1690.138095] ? __mutex_unlock_slowpath+0x75/0x770 [ 1690.138110] alloc_pages_current+0x155/0x260 [ 1690.138123] ion_page_pool_alloc+0x118/0x1b0 [ 1690.138133] ion_system_heap_allocate+0x133/0x8c0 [ 1690.138142] ? ion_alloc+0x187/0x810 [ 1690.138152] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1690.138161] ? ion_system_contig_heap_create+0x130/0x130 [ 1690.138173] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1690.153195] syz-executor.2 cpuset= [ 1690.154812] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1690.154826] ion_alloc+0x204/0x810 [ 1690.157296] DMA free:11120kB min:204kB low:252kB high:300kB active_anon:12kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1690.160388] ? ion_dma_buf_release+0x40/0x40 [ 1690.160401] ? __might_fault+0x177/0x1b0 [ 1690.160412] ion_ioctl+0xea/0x1f0 [ 1690.174323] / [ 1690.202282] ? ion_query_heaps+0x360/0x360 [ 1690.216246] lowmem_reserve[]: [ 1690.217794] ? ion_query_heaps+0x360/0x360 [ 1690.217805] do_vfs_ioctl+0x75a/0xff0 [ 1690.217816] ? ioctl_preallocate+0x1a0/0x1a0 [ 1690.221797] 0 [ 1690.250022] ? lock_downgrade+0x740/0x740 [ 1690.250036] ? __fget+0x225/0x360 [ 1690.250045] ? do_vfs_ioctl+0xff0/0xff0 [ 1690.250056] ? security_file_ioctl+0x83/0xb0 [ 1690.250066] SyS_ioctl+0x7f/0xb0 [ 1690.250074] ? do_vfs_ioctl+0xff0/0xff0 [ 1690.250085] do_syscall_64+0x1d5/0x640 [ 1690.250098] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1690.250105] RIP: 0033:0x4665f9 [ 1690.250109] RSP: 002b:00007fd699bc5188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1690.250119] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1690.250124] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1690.250129] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1690.250135] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1690.250140] R13: 00007ffcaf60874f R14: 00007fd699bc5300 R15: 0000000000022000 [ 1690.329009] mems_allowed=0-1 [ 1690.336630] 2717 [ 1690.347873] CPU: 1 PID: 30305 Comm: syz-executor.2 Not tainted 4.14.232-syzkaller #0 [ 1690.354390] 2718 [ 1690.354852] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1690.382483] 2718 [ 1690.384797] Call Trace: [ 1690.384815] dump_stack+0x1b2/0x281 [ 1690.384828] warn_alloc.cold+0x96/0x1cc [ 1690.389282] 2718 [ 1690.392297] ? zone_watermark_ok_safe+0x220/0x220 [ 1690.392321] __alloc_pages_nodemask+0x2127/0x2720 [ 1690.398248] ? lock_acquire+0x170/0x3f0 [ 1690.398262] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1690.398280] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1690.398293] ? __mutex_unlock_slowpath+0x75/0x770 [ 1690.398301] ? retint_kernel+0x2d/0x2d [ 1690.398314] alloc_pages_current+0x155/0x260 [ 1690.398326] ion_page_pool_alloc+0x118/0x1b0 [ 1690.398335] ion_system_heap_allocate+0x133/0x8c0 [ 1690.398345] ? ion_alloc+0x187/0x810 [ 1690.398356] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1690.398365] ? ion_system_contig_heap_create+0x130/0x130 [ 1690.398374] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1690.398383] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1690.398393] ion_alloc+0x204/0x810 [ 1690.398407] ? ion_dma_buf_release+0x40/0x40 [ 1690.398419] ? __might_fault+0x177/0x1b0 [ 1690.398430] ion_ioctl+0xea/0x1f0 [ 1690.398437] ? ion_query_heaps+0x360/0x360 [ 1690.398448] ? ion_query_heaps+0x360/0x360 [ 1690.398456] do_vfs_ioctl+0x75a/0xff0 [ 1690.398465] ? ioctl_preallocate+0x1a0/0x1a0 [ 1690.398471] ? lock_downgrade+0x740/0x740 [ 1690.398489] ? __fget+0x225/0x360 [ 1690.398499] ? do_vfs_ioctl+0xff0/0xff0 [ 1690.398510] ? security_file_ioctl+0x83/0xb0 [ 1690.398520] SyS_ioctl+0x7f/0xb0 [ 1690.398526] ? do_vfs_ioctl+0xff0/0xff0 [ 1690.398536] do_syscall_64+0x1d5/0x640 [ 1690.398548] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1690.398555] RIP: 0033:0x4665f9 [ 1690.398560] RSP: 002b:00007fc1ab256188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1690.398569] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1690.398574] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1690.398579] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1690.398584] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1690.398589] R13: 00007ffd84742d3f R14: 00007fc1ab256300 R15: 0000000000022000 [ 1690.719297] Bluetooth: hci1 command 0x040f tx timeout [ 1690.725762] Node 0 DMA32 free:529976kB min:36200kB low:45248kB high:54296kB active_anon:58616kB inactive_anon:78104kB active_file:3244kB inactive_file:16388kB unevictable:0kB writepending:320kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7456kB pagetables:2456kB bounce:0kB free_pcp:876kB local_pcp:240kB free_cma:0kB [ 1690.759762] lowmem_reserve[]: 0 0 0 0 0 [ 1690.763825] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1690.794265] Bluetooth: hci3 command 0x040f tx timeout [ 1690.804046] lowmem_reserve[]: 0 0 0 0 0 [ 1690.812636] Node 1 Normal free:367664kB min:53696kB low:67120kB high:80544kB active_anon:1224kB inactive_anon:35268kB active_file:1796kB inactive_file:6564kB unevictable:0kB writepending:80kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:640kB pagetables:684kB bounce:0kB free_pcp:672kB local_pcp:0kB free_cma:0kB [ 1690.847061] lowmem_reserve[]: 0 0 0 0 0 [ 1690.851113] Node 0 DMA: 37*4kB (UME) 39*8kB (UME) 13*16kB (UM) 27*32kB (UME) 10*64kB (UME) 3*128kB (UME) 4*256kB (UME) 2*512kB (UE) 3*1024kB (UME) 2*2048kB (UE) 0*4096kB = 11772kB [ 1690.873483] Bluetooth: hci4 command 0x040f tx timeout [ 1690.880792] Node 0 DMA32: 13556*4kB (UMEH) 9603*8kB (UEH) 11107*16kB (UEH) 5923*32kB (UMEH) 840*64kB (UMH) 18*128kB (UH) 1*256kB (H) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 554616kB [ 1690.901316] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1690.912574] Node 1 Normal: 11170*4kB (UM) 4046*8kB (U) 3790*16kB (UE) 3834*32kB (UE) 1785*64kB (U) 93*128kB (U) 33*256kB (U) 1*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 395480kB [ 1690.932852] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1690.942250] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1690.957133] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1690.970114] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1690.979576] 36422 total pagecache pages [ 1690.983598] 0 pages in swap cache [ 1690.991677] Swap cache stats: add 0, delete 0, find 0/0 [ 1690.997523] Free swap = 0kB [ 1691.000809] Total swap = 0kB [ 1691.005179] 2097051 pages RAM [ 1691.014740] 0 pages HighMem/MovableOnly [ 1691.019535] 363849 pages reserved [ 1691.030854] 0 pages cma reserved [ 1692.444808] oom_reaper: reaped process 30308 (syz-executor.1), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1692.478573] in:imklog invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1692.497479] in:imklog cpuset=/ mems_allowed=0-1 [ 1692.502262] CPU: 1 PID: 29164 Comm: in:imklog Not tainted 4.14.232-syzkaller #0 [ 1692.509699] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1692.519058] Call Trace: [ 1692.521648] dump_stack+0x1b2/0x281 [ 1692.525273] dump_header+0x178/0x82f [ 1692.529076] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1692.534174] ? ___ratelimit+0x2cd/0x530 [ 1692.538147] oom_kill_process.cold+0x10/0xa40 [ 1692.542649] out_of_memory+0xe3e/0x1190 [ 1692.546627] ? oom_killer_disable+0x1c0/0x1c0 [ 1692.551117] ? mutex_trylock+0x152/0x1a0 [ 1692.555181] __alloc_pages_nodemask+0x23e1/0x2720 [ 1692.560051] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1692.564917] alloc_pages_current+0x155/0x260 [ 1692.569331] filemap_fault+0x11a1/0x1ad0 [ 1692.573400] ext4_filemap_fault+0x84/0xb0 [ 1692.577556] __do_fault+0xfa/0x380 [ 1692.581107] __handle_mm_fault+0x2497/0x4620 [ 1692.585677] ? vm_insert_page+0x7c0/0x7c0 [ 1692.589810] ? lock_downgrade+0x740/0x740 [ 1692.593951] ? mark_held_locks+0xa6/0xf0 [ 1692.597994] handle_mm_fault+0x455/0x9c0 [ 1692.602038] __do_page_fault+0x549/0xad0 [ 1692.606082] ? spurious_fault+0x640/0x640 [ 1692.610214] ? do_page_fault+0x60/0x500 [ 1692.614167] ? page_fault+0x2f/0x50 [ 1692.617775] page_fault+0x45/0x50 [ 1692.621209] RIP: 1fa0:0x1f9f [ 1692.624206] RSP: 0000:000055e9109159d0 EFLAGS: 7f29e7c4fda0 [ 1692.628441] Mem-Info: [ 1692.632064] syz-executor.1: [ 1692.634179] active_anon:15028 inactive_anon:28343 isolated_anon:0 [ 1692.634179] active_file:29 inactive_file:1 isolated_file:0 [ 1692.634179] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1692.634179] slab_reclaimable:12471 slab_unreclaimable:115234 [ 1692.634179] mapped:52814 shmem:29460 pagetables:755 bounce:0 [ 1692.634179] free:13824 free_pcp:83 free_cma:0 [ 1692.636614] syz-executor.2: [ 1692.639641] Node 0 active_anon:58632kB inactive_anon:78104kB active_file:104kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:111464kB dirty:0kB writeback:0kB shmem:82364kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1692.682616] page allocation failure: order:0 [ 1692.708346] Node 1 active_anon:1480kB inactive_anon:35268kB active_file:12kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:99792kB dirty:0kB writeback:0kB shmem:35476kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1692.717131] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1692.741950] Node 0 DMA free:10960kB min:204kB low:252kB high:300kB active_anon:12kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1692.750396] (null) [ 1692.777612] page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1692.787817] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 1692.788381] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 1692.793695] CPU: 0 PID: 30308 Comm: syz-executor.1 Not tainted 4.14.232-syzkaller #0 [ 1692.806157] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1692.815499] Call Trace: [ 1692.817498] lowmem_reserve[]: 0 [ 1692.818080] dump_stack+0x1b2/0x281 [ 1692.818086] 2717 [ 1692.821355] warn_alloc.cold+0x96/0x1cc [ 1692.824961] 2718 [ 1692.827013] ? zone_watermark_ok_safe+0x220/0x220 [ 1692.827022] ? usleep_range+0x130/0x130 [ 1692.827031] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1692.827042] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1692.827052] ? run_timer_softirq+0x5a0/0x5a0 [ 1692.837471] 2718 [ 1692.837882] __alloc_pages_nodemask+0x2127/0x2720 [ 1692.841827] 2718 [ 1692.846923] ? lock_acquire+0x170/0x3f0 [ 1692.846937] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1692.846946] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1692.846962] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1692.878535] ? __sanitizer_cov_trace_pc+0x29/0x50 [ 1692.883961] Node 0 [ 1692.888789] alloc_pages_current+0x155/0x260 [ 1692.888803] ion_page_pool_alloc+0x118/0x1b0 [ 1692.888812] ion_system_heap_allocate+0x133/0x8c0 [ 1692.888820] ? ion_alloc+0x187/0x810 [ 1692.888829] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1692.888840] ? ion_system_contig_heap_create+0x130/0x130 [ 1692.906210] DMA32 free:17244kB min:36200kB low:45248kB high:54296kB active_anon:58524kB inactive_anon:78104kB active_file:48kB inactive_file:36kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7328kB pagetables:2336kB bounce:0kB free_pcp:236kB local_pcp:120kB free_cma:0kB [ 1692.908456] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1692.913882] lowmem_reserve[]: [ 1692.919318] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1692.919331] ion_alloc+0x204/0x810 [ 1692.919345] ? ion_dma_buf_release+0x40/0x40 [ 1692.919358] ? __might_fault+0x177/0x1b0 [ 1692.972471] ion_ioctl+0xea/0x1f0 [ 1692.975912] ? ion_query_heaps+0x360/0x360 [ 1692.980133] ? ion_query_heaps+0x360/0x360 [ 1692.984350] do_vfs_ioctl+0x75a/0xff0 [ 1692.988137] ? ioctl_preallocate+0x1a0/0x1a0 [ 1692.992529] ? lock_downgrade+0x740/0x740 [ 1692.995709] 0 0 [ 1692.996666] ? __fget+0x225/0x360 [ 1692.996671] 0 [ 1692.998632] ? do_vfs_ioctl+0xff0/0xff0 [ 1693.002069] 0 [ 1693.003858] ? security_file_ioctl+0x83/0xb0 [ 1693.013981] SyS_ioctl+0x7f/0xb0 [ 1693.015713] 0 [ 1693.017331] ? do_vfs_ioctl+0xff0/0xff0 [ 1693.019124] do_syscall_64+0x1d5/0x640 [ 1693.023101] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1693.026987] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1693.026995] RIP: 0033:0x4665f9 [ 1693.026999] RSP: 002b:00007fd699bc5188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1693.027007] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1693.027012] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1693.027017] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1693.027021] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1693.027026] R13: 00007ffcaf60874f R14: 00007fd699bc5300 R15: 0000000000022000 [ 1693.035720] Bluetooth: hci1 command 0x0419 tx timeout [ 1693.056114] CPU: 1 PID: 30305 Comm: syz-executor.2 Not tainted 4.14.232-syzkaller #0 [ 1693.072333] Bluetooth: hci3 command 0x0419 tx timeout [ 1693.076672] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1693.076676] Call Trace: [ 1693.076692] dump_stack+0x1b2/0x281 [ 1693.076706] warn_alloc.cold+0x96/0x1cc [ 1693.084016] Bluetooth: hci4 command 0x0419 tx timeout [ 1693.091222] ? zone_watermark_ok_safe+0x220/0x220 [ 1693.091232] ? usleep_range+0x130/0x130 [ 1693.091242] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1693.098609] warn_alloc_show_mem: 2 callbacks suppressed [ 1693.098612] Mem-Info: [ 1693.105756] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1693.105767] ? run_timer_softirq+0x5a0/0x5a0 [ 1693.105783] __alloc_pages_nodemask+0x2127/0x2720 [ 1693.110955] active_anon:15004 inactive_anon:28343 isolated_anon:0 [ 1693.110955] active_file:14 inactive_file:14 isolated_file:0 [ 1693.110955] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1693.110955] slab_reclaimable:12471 slab_unreclaimable:115247 [ 1693.110955] mapped:52796 shmem:29460 pagetables:755 bounce:0 [ 1693.110955] free:13790 free_pcp:89 free_cma:0 [ 1693.118812] ? lock_acquire+0x170/0x3f0 [ 1693.118828] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1693.124005] Node 0 active_anon:58536kB inactive_anon:78104kB active_file:44kB inactive_file:40kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:111388kB dirty:0kB writeback:0kB shmem:82364kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1693.133330] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1693.133345] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1693.133364] alloc_pages_current+0x155/0x260 [ 1693.135944] Node 1 active_anon:1480kB inactive_anon:35268kB active_file:12kB inactive_file:16kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:99796kB dirty:0kB writeback:0kB shmem:35476kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1693.139534] ion_page_pool_alloc+0x118/0x1b0 [ 1693.143509] Node 0 [ 1693.148685] ion_system_heap_allocate+0x133/0x8c0 [ 1693.148694] ? ion_alloc+0x187/0x810 [ 1693.148705] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1693.153587] DMA free:10960kB min:204kB low:252kB high:300kB active_anon:12kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1693.157482] ? ion_system_contig_heap_create+0x130/0x130 [ 1693.157491] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1693.157500] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1693.157509] ion_alloc+0x204/0x810 [ 1693.157520] ? ion_dma_buf_release+0x40/0x40 [ 1693.157532] ? __might_fault+0x177/0x1b0 [ 1693.157543] ion_ioctl+0xea/0x1f0 [ 1693.157552] ? ion_query_heaps+0x360/0x360 [ 1693.157566] ? ion_query_heaps+0x360/0x360 [ 1693.162647] lowmem_reserve[]: [ 1693.167992] do_vfs_ioctl+0x75a/0xff0 [ 1693.168003] ? ioctl_preallocate+0x1a0/0x1a0 [ 1693.168011] ? lock_downgrade+0x740/0x740 [ 1693.168023] ? __fget+0x225/0x360 [ 1693.170660] 0 [ 1693.175411] ? do_vfs_ioctl+0xff0/0xff0 [ 1693.179812] 2717 [ 1693.184635] ? security_file_ioctl+0x83/0xb0 [ 1693.217851] 2718 [ 1693.221803] SyS_ioctl+0x7f/0xb0 [ 1693.226634] 2718 [ 1693.254382] ? do_vfs_ioctl+0xff0/0xff0 [ 1693.254394] do_syscall_64+0x1d5/0x640 [ 1693.254408] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1693.259141] 2718 [ 1693.264312] RIP: 0033:0x4665f9 [ 1693.295999] RSP: 002b:00007fc1ab256188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1693.296009] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1693.296015] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1693.296021] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1693.300414] Node 0 [ 1693.302641] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1693.307488] DMA32 free:17244kB min:36200kB low:45248kB high:54296kB active_anon:58524kB inactive_anon:78104kB active_file:44kB inactive_file:40kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7328kB pagetables:2336kB bounce:0kB free_pcp:236kB local_pcp:116kB free_cma:0kB [ 1693.311240] R13: 00007ffd84742d3f R14: 00007fc1ab256300 R15: 0000000000022000 [ 1693.316921] lowmem_reserve[]: [ 1693.346865] lowmem_reserve[]: [ 1693.362719] 0 [ 1693.365700] 0 [ 1693.374827] 0 [ 1693.379128] 0 [ 1693.386827] 0 [ 1693.388500] 0 [ 1693.392861] 0 [ 1693.398788] 0 [ 1693.410728] 0 [ 1693.412773] 0 [ 1693.425436] Node 0 [ 1693.428238] Node 1 [ 1693.439215] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1693.448164] Normal free:26956kB min:53696kB low:67120kB high:80544kB active_anon:1480kB inactive_anon:35268kB active_file:12kB inactive_file:16kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:640kB pagetables:684kB bounce:0kB free_pcp:120kB local_pcp:0kB free_cma:0kB [ 1693.462917] lowmem_reserve[]: [ 1693.470507] lowmem_reserve[]: [ 1693.476082] 0 [ 1693.478594] 0 [ 1693.516604] 0 [ 1693.518951] 0 [ 1693.520143] 0 [ 1693.521912] 0 [ 1693.523695] 0 [ 1693.525477] 0 [ 1693.537534] 0 [ 1693.539867] 0 [ 1693.579265] Node 1 [ 1693.597264] Node 0 [ 1693.609427] Normal free:26956kB min:53696kB low:67120kB high:80544kB active_anon:1480kB inactive_anon:35268kB active_file:12kB inactive_file:16kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:640kB pagetables:684kB bounce:0kB free_pcp:120kB local_pcp:120kB free_cma:0kB [ 1693.611629] DMA: [ 1693.613012] lowmem_reserve[]: [ 1693.614796] 6*4kB [ 1693.621844] 0 [ 1693.623567] (UME) [ 1693.624700] 0 [ 1693.653616] 5*8kB [ 1693.665143] 0 [ 1693.667749] (ME) 3*16kB (M) 19*32kB (UME) 10*64kB (UME) 3*128kB (UME) 4*256kB (UME) 2*512kB (UE) 3*1024kB (UME) 2*2048kB (UE) 0*4096kB = 10960kB [ 1693.670724] 0 [ 1693.683361] Node 0 DMA32: 947*4kB (ME) 529*8kB (UME) 89*16kB (ME) 29*32kB (UME) 24*64kB (ME) 28*128kB (UME) 3*256kB (UM) 2*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 17284kB [ 1693.693148] 0 [ 1693.715825] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1693.731125] Node 1 Normal: 1*4kB (M) 0*8kB 1*16kB (E) 17*32kB (ME) 29*64kB (UM) 102*128kB (UM) 106*256kB (UM) 48*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 67188kB [ 1693.733311] Node 0 DMA: 6*4kB (UME) 5*8kB (ME) 3*16kB (M) 19*32kB (UME) 10*64kB (UME) 3*128kB (UME) 4*256kB (UME) 2*512kB (UE) 3*1024kB (UME) 2*2048kB (UE) 0*4096kB = 10960kB [ 1693.765683] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1693.815680] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1693.819059] Node 0 [ 1693.824370] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1693.824373] DMA32: 854*4kB [ 1693.835672] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1693.835736] (ME) [ 1693.838606] 29821 total pagecache pages [ 1693.869535] 570*8kB (UME) 89*16kB (ME) 29*32kB (UME) 801*64kB (UME) 126*128kB (UME) 3*256kB (UM) 2*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 79512kB [ 1693.876158] 0 pages in swap cache [ 1693.882873] Node 0 [ 1693.895675] Swap cache stats: add 0, delete 0, find 0/0 [ 1693.895712] Normal: [ 1693.897919] Free swap = 0kB [ 1693.903354] 0*4kB [ 1693.915661] Total swap = 0kB [ 1693.920822] 2097051 pages RAM [ 1693.923914] 0 pages HighMem/MovableOnly [ 1693.925654] 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1693.945663] 363849 pages reserved [ 1693.945671] Node 1 [ 1693.949113] 0 pages cma reserved [ 1693.949119] Normal: [ 1693.951338] Out of memory (oom_kill_allocating_task): Kill process 29164 (in:imklog) score 0 or sacrifice child [ 1693.954687] 161*4kB [ 1693.965714] Killed process 29151 (rsyslogd) total-vm:254332kB, anon-rss:868kB, file-rss:0kB, shmem-rss:0kB [ 1693.995680] (UM) 154*8kB (UM) 164*16kB (UME) 212*32kB (UME) 1706*64kB (UM) 257*128kB (UM) 138*256kB (UM) 70*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 224532kB [ 1694.001288] oom_reaper: reaped process 30305 (syz-executor.2), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1694.013289] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1694.065664] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1694.074834] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1694.084215] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1694.093439] 30020 total pagecache pages [ 1694.098124] 0 pages in swap cache [ 1694.101981] Swap cache stats: add 0, delete 0, find 0/0 [ 1694.107836] Free swap = 0kB [ 1694.111347] Total swap = 0kB [ 1694.114375] 2097051 pages RAM [ 1694.118146] 0 pages HighMem/MovableOnly [ 1694.122179] 363849 pages reserved [ 1694.135695] 0 pages cma reserved [ 1696.290943] syz-executor.1: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1696.303196] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 1696.307715] syz-executor.2: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1696.308994] CPU: 1 PID: 30308 Comm: syz-executor.1 Not tainted 4.14.232-syzkaller #0 [ 1696.328015] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1696.337365] Call Trace: [ 1696.339958] dump_stack+0x1b2/0x281 [ 1696.343592] warn_alloc.cold+0x96/0x1cc [ 1696.347568] ? zone_watermark_ok_safe+0x220/0x220 [ 1696.349042] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 1696.352418] __alloc_pages_nodemask+0x2127/0x2720 [ 1696.362354] ? lock_acquire+0x170/0x3f0 [ 1696.366339] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1696.371183] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1696.376628] ? __mutex_unlock_slowpath+0x75/0x770 [ 1696.381470] ? alloc_pages_current+0x123/0x260 [ 1696.386055] alloc_pages_current+0x155/0x260 [ 1696.390457] ion_page_pool_alloc+0x118/0x1b0 [ 1696.394850] ion_system_heap_allocate+0x133/0x8c0 [ 1696.399680] ? _raw_spin_unlock+0x29/0x40 [ 1696.403935] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1696.408867] ? ion_system_contig_heap_create+0x130/0x130 [ 1696.414331] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1696.419359] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1696.424212] ion_alloc+0x27a/0x810 [ 1696.427763] ? ion_dma_buf_release+0x40/0x40 [ 1696.432169] ? __might_fault+0x177/0x1b0 [ 1696.436221] ion_ioctl+0xea/0x1f0 [ 1696.439663] ? ion_query_heaps+0x360/0x360 [ 1696.443885] ? ion_query_heaps+0x360/0x360 [ 1696.448114] do_vfs_ioctl+0x75a/0xff0 [ 1696.451922] ? ioctl_preallocate+0x1a0/0x1a0 [ 1696.456331] ? lock_downgrade+0x740/0x740 [ 1696.460486] ? __fget+0x225/0x360 [ 1696.463946] ? do_vfs_ioctl+0xff0/0xff0 [ 1696.467924] ? security_file_ioctl+0x83/0xb0 [ 1696.472326] SyS_ioctl+0x7f/0xb0 [ 1696.475680] ? do_vfs_ioctl+0xff0/0xff0 [ 1696.479640] do_syscall_64+0x1d5/0x640 [ 1696.483517] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1696.488692] RIP: 0033:0x4665f9 [ 1696.491877] RSP: 002b:00007fd699bc5188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1696.499571] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1696.506825] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1696.514087] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1696.521339] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1696.528596] R13: 00007ffcaf60874f R14: 00007fd699bc5300 R15: 0000000000022000 [ 1696.537386] warn_alloc_show_mem: 1 callbacks suppressed [ 1696.537390] Mem-Info: [ 1696.545176] active_anon:14937 inactive_anon:28343 isolated_anon:0 [ 1696.545176] active_file:1010 inactive_file:2131 isolated_file:0 [ 1696.545176] unevictable:0 dirty:22 writeback:0 unstable:0 [ 1696.545176] slab_reclaimable:12455 slab_unreclaimable:116549 [ 1696.545176] mapped:54777 shmem:29460 pagetables:756 bounce:0 [ 1696.545176] free:345013 free_pcp:143 free_cma:0 [ 1696.546603] CPU: 0 PID: 30305 Comm: syz-executor.2 Not tainted 4.14.232-syzkaller #0 [ 1696.579447] Node 0 active_anon:58844kB inactive_anon:78104kB active_file:3788kB inactive_file:7784kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:118388kB dirty:84kB writeback:0kB shmem:82364kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1696.586811] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1696.586815] Call Trace: [ 1696.586831] dump_stack+0x1b2/0x281 [ 1696.586844] warn_alloc.cold+0x96/0x1cc [ 1696.586857] ? zone_watermark_ok_safe+0x220/0x220 [ 1696.615342] Node 1 active_anon:904kB inactive_anon:35268kB active_file:252kB inactive_file:740kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:100720kB dirty:4kB writeback:0kB shmem:35476kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1696.624428] __alloc_pages_nodemask+0x2127/0x2720 [ 1696.624446] ? lock_acquire+0x170/0x3f0 [ 1696.624463] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1696.627277] Node 0 [ 1696.630680] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1696.634641] DMA free:11036kB min:204kB low:252kB high:300kB active_anon:12kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1696.639463] ? __mutex_unlock_slowpath+0x75/0x770 [ 1696.639478] alloc_pages_current+0x155/0x260 [ 1696.639491] ion_page_pool_alloc+0x118/0x1b0 [ 1696.639499] ion_system_heap_allocate+0x133/0x8c0 [ 1696.639511] ? _raw_spin_unlock+0x29/0x40 [ 1696.667024] lowmem_reserve[]: [ 1696.671569] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1696.675679] 0 [ 1696.680356] ? ion_system_contig_heap_create+0x130/0x130 [ 1696.682571] 2717 [ 1696.688005] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1696.688016] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1696.688028] ion_alloc+0x27a/0x810 [ 1696.713619] 2718 [ 1696.718434] ? ion_dma_buf_release+0x40/0x40 [ 1696.718447] ? __might_fault+0x177/0x1b0 [ 1696.718458] ion_ioctl+0xea/0x1f0 [ 1696.723810] 2718 [ 1696.727237] ? ion_query_heaps+0x360/0x360 [ 1696.727249] ? ion_query_heaps+0x360/0x360 [ 1696.727259] do_vfs_ioctl+0x75a/0xff0 [ 1696.727270] ? ioctl_preallocate+0x1a0/0x1a0 [ 1696.732160] 2718 [ 1696.736228] ? lock_downgrade+0x740/0x740 [ 1696.736242] ? __fget+0x225/0x360 [ 1696.736251] ? do_vfs_ioctl+0xff0/0xff0 [ 1696.744263] ? security_file_ioctl+0x83/0xb0 [ 1696.747282] Node 0 [ 1696.751574] SyS_ioctl+0x7f/0xb0 [ 1696.753642] DMA32 free:950360kB min:36200kB low:45248kB high:54296kB active_anon:58832kB inactive_anon:78104kB active_file:3796kB inactive_file:7784kB unevictable:0kB writepending:84kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7360kB pagetables:2364kB bounce:0kB free_pcp:488kB local_pcp:92kB free_cma:0kB [ 1696.758632] ? do_vfs_ioctl+0xff0/0xff0 [ 1696.758644] do_syscall_64+0x1d5/0x640 [ 1696.758658] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1696.758667] RIP: 0033:0x4665f9 [ 1696.763488] lowmem_reserve[]: [ 1696.767010] RSP: 002b:00007fc1ab256188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1696.767020] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1696.767025] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1696.767029] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1696.767034] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1696.767039] R13: 00007ffd84742d3f R14: 00007fc1ab256300 R15: 0000000000022000 [ 1696.917056] 0 0 0 0 0 [ 1696.919588] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1696.946625] lowmem_reserve[]: 0 0 0 0 0 [ 1696.950638] Node 1 Normal free:420044kB min:53696kB low:67120kB high:80544kB active_anon:904kB inactive_anon:35268kB active_file:344kB inactive_file:740kB unevictable:0kB writepending:4kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:608kB pagetables:660kB bounce:0kB free_pcp:68kB local_pcp:0kB free_cma:0kB [ 1696.979459] lowmem_reserve[]: 0 0 0 0 0 [ 1696.983459] Node 0 DMA: 22*4kB (UME) 47*8kB (UME) 40*16kB (UM) 31*32kB (UME) 8*64kB (UME) 4*128kB (UME) 3*256kB (ME) 2*512kB (UE) 2*1024kB (ME) 2*2048kB (UE) 0*4096kB = 11056kB [ 1696.999601] Node 0 DMA32: 25162*4kB (UM) 19306*8kB (UME) 17570*16kB (UE) 10278*32kB (UME) 178*64kB (U) 1*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 876632kB [ 1697.015168] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1697.026192] Node 1 Normal: 18819*4kB (UM) 10036*8kB (UM) 5934*16kB (UME) 5242*32kB (UME) 14*64kB (U) 7*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 420044kB [ 1697.041820] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1697.051506] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1697.060317] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1697.069590] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1697.078404] 32650 total pagecache pages [ 1697.082389] 0 pages in swap cache [ 1697.086108] Swap cache stats: add 0, delete 0, find 0/0 [ 1697.091466] Free swap = 0kB [ 1697.094475] Total swap = 0kB [ 1697.097894] 2097051 pages RAM [ 1697.101002] 0 pages HighMem/MovableOnly [ 1697.104968] 363849 pages reserved [ 1697.108756] 0 pages cma reserved 22:12:14 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$unix(0x1, 0x2, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x80000000, 0x6}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000280)=ANY=[@ANYBLOB="40000000d05dfd0cf6aadfcd1c2c8204548f7ad25fb20c9fc1b948acee1bf738a8e2f89ba8ad644647776e1929696b34254e5dffa31fab7db2587004efe13e6e76fca3797168ba0ca323227067252996e8b160c2bec95a5f9f90491af03c1f501e1720021bfe4f682947ba1614a12e86a754", @ANYRES16=0x0, @ANYBLOB="000328bd7000ffdbdf2502000000080011000000000006000200010000000c0010000000000001000000050014001f00000008000b0000000000"], 0x40}, 0x1, 0x0, 0x0, 0xc000}, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) 22:12:14 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) sendmsg$unix(r1, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x80000000, 0x6}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) 22:12:14 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) sendmsg$unix(r1, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x80000000, 0x6}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) 22:12:14 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) sendmsg$unix(r1, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x80000000, 0x6}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) 22:12:14 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$unix(0x1, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x80000000, 0x6}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000280)=ANY=[@ANYBLOB="40000000d05dfd0cf6aadfcd1c2c8204548f7ad25fb20c9fc1b948acee1bf738a8e2f89ba8ad644647776e1929696b34254e5dffa31fab7db2587004efe13e6e76fca3797168ba0ca323227067252996e8b160c2bec95a5f9f90491af03c1f501e1720021bfe4f682947ba1614a12e86a754", @ANYRES16=0x0, @ANYBLOB="000328bd7000ffdbdf2502000000080011000000000006000200010000000c0010000000000001000000050014001f00000008000b0000000000"], 0x40}, 0x1, 0x0, 0x0, 0xc000}, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) [ 1698.900611] syz-executor.0: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1698.901720] syz-executor.3: [ 1698.921602] syz-executor.4: [ 1698.922490] syz-executor.1: [ 1698.928426] page allocation failure: order:4 [ 1698.934369] page allocation failure: order:4 [ 1698.934955] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1698.946696] page allocation failure: order:4 [ 1698.947276] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1698.956025] (null) [ 1698.964363] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 1698.973140] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1698.979415] CPU: 1 PID: 30325 Comm: syz-executor.0 Not tainted 4.14.232-syzkaller #0 [ 1698.986202] syz-executor.4 cpuset= [ 1698.989457] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1698.989462] Call Trace: [ 1698.989479] dump_stack+0x1b2/0x281 [ 1698.989494] warn_alloc.cold+0x96/0x1cc [ 1698.989506] ? zone_watermark_ok_safe+0x220/0x220 [ 1698.989528] __alloc_pages_nodemask+0x2127/0x2720 [ 1699.000446] / [ 1699.002385] ? lock_acquire+0x170/0x3f0 [ 1699.006206] syz-executor.3 cpuset= [ 1699.008557] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1699.008577] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1699.008591] ? __mutex_unlock_slowpath+0x75/0x770 [ 1699.008610] alloc_pages_current+0x155/0x260 [ 1699.014883] / [ 1699.017379] ion_page_pool_alloc+0x118/0x1b0 [ 1699.026129] mems_allowed=0-1 [ 1699.027846] ion_system_heap_allocate+0x133/0x8c0 [ 1699.027857] ? ion_alloc+0x187/0x810 [ 1699.027868] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1699.027878] ? ion_system_contig_heap_create+0x130/0x130 [ 1699.027887] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1699.027899] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1699.043045] mems_allowed=0-1 [ 1699.046507] ion_alloc+0x204/0x810 [ 1699.046523] ? ion_dma_buf_release+0x40/0x40 [ 1699.046537] ? __might_fault+0x177/0x1b0 [ 1699.046549] ion_ioctl+0xea/0x1f0 [ 1699.046557] ? ion_query_heaps+0x360/0x360 [ 1699.046568] ? ion_query_heaps+0x360/0x360 [ 1699.046578] do_vfs_ioctl+0x75a/0xff0 [ 1699.046597] ? ioctl_preallocate+0x1a0/0x1a0 [ 1699.124483] ? lock_downgrade+0x740/0x740 [ 1699.128620] ? __fget+0x225/0x360 [ 1699.132058] ? do_vfs_ioctl+0xff0/0xff0 [ 1699.136017] ? security_file_ioctl+0x83/0xb0 [ 1699.140412] SyS_ioctl+0x7f/0xb0 [ 1699.143770] ? do_vfs_ioctl+0xff0/0xff0 [ 1699.147735] do_syscall_64+0x1d5/0x640 [ 1699.151614] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1699.156783] RIP: 0033:0x4665f9 [ 1699.159954] RSP: 002b:00007fc8c6af5188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1699.167750] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1699.175006] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1699.182261] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1699.189526] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1699.196781] R13: 00007ffdd42e705f R14: 00007fc8c6af5300 R15: 0000000000022000 [ 1699.210284] CPU: 0 PID: 30329 Comm: syz-executor.3 Not tainted 4.14.232-syzkaller #0 [ 1699.213742] (null) [ 1699.218173] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1699.218177] Call Trace: [ 1699.218195] dump_stack+0x1b2/0x281 [ 1699.218209] warn_alloc.cold+0x96/0x1cc [ 1699.218222] ? zone_watermark_ok_safe+0x220/0x220 [ 1699.224753] syz-executor.1 cpuset= [ 1699.229731] __alloc_pages_nodemask+0x2127/0x2720 [ 1699.229743] ? _raw_spin_unlock_irq+0x24/0x80 [ 1699.229759] ? lock_acquire+0x170/0x3f0 [ 1699.229774] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1699.229789] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1699.239138] / [ 1699.239913] ? __mutex_unlock_slowpath+0x75/0x770 [ 1699.250255] mems_allowed=0-1 [ 1699.253085] alloc_pages_current+0x155/0x260 [ 1699.253100] ion_page_pool_alloc+0x118/0x1b0 [ 1699.290151] ion_system_heap_allocate+0x133/0x8c0 [ 1699.294980] ? ion_alloc+0x187/0x810 [ 1699.298684] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1699.304123] ? ion_system_contig_heap_create+0x130/0x130 [ 1699.309564] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1699.314574] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1699.319413] ion_alloc+0x204/0x810 [ 1699.322947] ? ion_dma_buf_release+0x40/0x40 [ 1699.327341] ? __might_fault+0x177/0x1b0 [ 1699.331412] ion_ioctl+0xea/0x1f0 [ 1699.334856] ? ion_query_heaps+0x360/0x360 [ 1699.339092] ? ion_query_heaps+0x360/0x360 [ 1699.343318] do_vfs_ioctl+0x75a/0xff0 [ 1699.347119] ? ioctl_preallocate+0x1a0/0x1a0 [ 1699.351520] ? lock_downgrade+0x740/0x740 [ 1699.355662] ? __fget+0x225/0x360 [ 1699.359101] ? do_vfs_ioctl+0xff0/0xff0 [ 1699.363064] ? security_file_ioctl+0x83/0xb0 [ 1699.367470] SyS_ioctl+0x7f/0xb0 [ 1699.370823] ? do_vfs_ioctl+0xff0/0xff0 [ 1699.374783] do_syscall_64+0x1d5/0x640 [ 1699.378665] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1699.383847] RIP: 0033:0x4665f9 [ 1699.387023] RSP: 002b:00007fd613a46188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1699.394721] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1699.402064] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1699.409331] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1699.416595] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1699.423944] R13: 00007ffce81deb9f R14: 00007fd613a46300 R15: 0000000000022000 [ 1699.432077] CPU: 1 PID: 30322 Comm: syz-executor.1 Not tainted 4.14.232-syzkaller #0 [ 1699.439969] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1699.449313] Call Trace: [ 1699.451895] dump_stack+0x1b2/0x281 [ 1699.455526] warn_alloc.cold+0x96/0x1cc [ 1699.459498] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1699.464507] ? zone_watermark_ok_safe+0x220/0x220 [ 1699.469352] __alloc_pages_nodemask+0x2127/0x2720 [ 1699.474197] ? lock_acquire+0x170/0x3f0 [ 1699.478168] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1699.483005] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1699.488535] ? __mutex_unlock_slowpath+0x75/0x770 [ 1699.493383] alloc_pages_current+0x155/0x260 [ 1699.497783] ion_page_pool_alloc+0x118/0x1b0 [ 1699.502181] ion_system_heap_allocate+0x133/0x8c0 [ 1699.507014] ? ion_alloc+0x187/0x810 [ 1699.510719] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1699.516158] ? ion_system_contig_heap_create+0x130/0x130 [ 1699.521592] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1699.526593] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1699.531414] ion_alloc+0x204/0x810 [ 1699.534939] ? ion_dma_buf_release+0x40/0x40 [ 1699.539330] ? __might_fault+0x177/0x1b0 [ 1699.543371] ion_ioctl+0xea/0x1f0 [ 1699.546805] ? ion_query_heaps+0x360/0x360 [ 1699.551022] ? ion_query_heaps+0x360/0x360 [ 1699.555238] do_vfs_ioctl+0x75a/0xff0 [ 1699.559033] ? ioctl_preallocate+0x1a0/0x1a0 [ 1699.563431] ? lock_downgrade+0x740/0x740 [ 1699.567569] ? __fget+0x225/0x360 [ 1699.571005] ? do_vfs_ioctl+0xff0/0xff0 [ 1699.574966] ? security_file_ioctl+0x83/0xb0 [ 1699.579366] SyS_ioctl+0x7f/0xb0 [ 1699.582724] ? do_vfs_ioctl+0xff0/0xff0 [ 1699.586680] do_syscall_64+0x1d5/0x640 [ 1699.590550] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1699.595722] RIP: 0033:0x4665f9 [ 1699.598892] RSP: 002b:00007fd699bc5188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1699.606584] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1699.613834] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1699.621134] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1699.628391] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1699.635645] R13: 00007ffcaf60874f R14: 00007fd699bc5300 R15: 0000000000022000 [ 1699.642915] CPU: 0 PID: 30327 Comm: syz-executor.4 Not tainted 4.14.232-syzkaller #0 [ 1699.650804] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1699.660150] Call Trace: [ 1699.662735] dump_stack+0x1b2/0x281 [ 1699.666361] warn_alloc.cold+0x96/0x1cc [ 1699.670333] ? zone_watermark_ok_safe+0x220/0x220 [ 1699.675186] __alloc_pages_nodemask+0x2127/0x2720 [ 1699.680031] ? lock_acquire+0x170/0x3f0 [ 1699.684010] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1699.688852] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1699.694299] ? __mutex_unlock_slowpath+0x75/0x770 [ 1699.699141] alloc_pages_current+0x155/0x260 [ 1699.703544] ion_page_pool_alloc+0x118/0x1b0 [ 1699.707951] ion_system_heap_allocate+0x133/0x8c0 [ 1699.712785] ? ion_alloc+0x187/0x810 [ 1699.716497] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1699.721940] ? ion_system_contig_heap_create+0x130/0x130 [ 1699.727385] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1699.732507] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1699.737344] ion_alloc+0x204/0x810 [ 1699.740883] ? ion_dma_buf_release+0x40/0x40 [ 1699.745287] ? __might_fault+0x177/0x1b0 [ 1699.749348] ion_ioctl+0xea/0x1f0 [ 1699.752794] ? ion_query_heaps+0x360/0x360 [ 1699.757022] ? ion_query_heaps+0x360/0x360 [ 1699.761251] do_vfs_ioctl+0x75a/0xff0 [ 1699.765050] ? ioctl_preallocate+0x1a0/0x1a0 [ 1699.769451] ? lock_downgrade+0x740/0x740 [ 1699.773594] ? __fget+0x225/0x360 [ 1699.777042] ? do_vfs_ioctl+0xff0/0xff0 [ 1699.781018] ? security_file_ioctl+0x83/0xb0 [ 1699.785421] SyS_ioctl+0x7f/0xb0 [ 1699.788776] ? do_vfs_ioctl+0xff0/0xff0 [ 1699.792748] do_syscall_64+0x1d5/0x640 [ 1699.796637] entry_SYSCALL_64_after_hwframe+0x46/0xbb 22:12:16 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) sendmsg$unix(r1, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x80000000, 0x6}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) [ 1699.801814] RIP: 0033:0x4665f9 [ 1699.804991] RSP: 002b:00007f631d70d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1699.812688] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1699.819949] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1699.827206] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1699.834499] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1699.841760] R13: 00007ffd7ec795cf R14: 00007f631d70d300 R15: 0000000000022000 [ 1699.913044] warn_alloc_show_mem: 1 callbacks suppressed [ 1699.913048] Mem-Info: [ 1699.921537] active_anon:15103 inactive_anon:28343 isolated_anon:0 [ 1699.921537] active_file:1024 inactive_file:2547 isolated_file:0 [ 1699.921537] unevictable:0 dirty:97 writeback:0 unstable:0 [ 1699.921537] slab_reclaimable:12454 slab_unreclaimable:117694 [ 1699.921537] mapped:55374 shmem:29460 pagetables:861 bounce:0 [ 1699.921537] free:426279 free_pcp:333 free_cma:0 [ 1699.956882] Node 0 active_anon:59512kB inactive_anon:78104kB active_file:4092kB inactive_file:10184kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:121700kB dirty:380kB writeback:0kB shmem:82364kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1700.022175] Node 1 active_anon:900kB inactive_anon:35268kB active_file:4kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:99796kB dirty:8kB writeback:0kB shmem:35476kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1700.091129] Node 0 DMA free:11164kB min:204kB low:252kB high:300kB active_anon:12kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1700.154528] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1700.169177] Node 0 DMA32 free:617412kB min:36200kB low:45248kB high:54296kB active_anon:59500kB inactive_anon:78104kB active_file:4092kB inactive_file:10184kB unevictable:0kB writepending:380kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7616kB pagetables:2888kB bounce:0kB free_pcp:1120kB local_pcp:676kB free_cma:0kB [ 1700.243311] lowmem_reserve[]: 0 0 0 0 0 [ 1700.251840] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1700.314258] lowmem_reserve[]: 0 0 0 0 0 [ 1700.326892] Node 1 Normal free:608104kB min:53696kB low:67120kB high:80544kB active_anon:900kB inactive_anon:35268kB active_file:4kB inactive_file:4kB unevictable:0kB writepending:8kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:544kB pagetables:556kB bounce:0kB free_pcp:1308kB local_pcp:688kB free_cma:0kB [ 1700.403265] lowmem_reserve[]: 0 0 0 0 0 [ 1700.420584] Node 0 DMA: 5*4kB (ME) 45*8kB (UME) 40*16kB (UM) 31*32kB (UME) 11*64kB (UME) 10*128kB (UME) 6*256kB (UME) 3*512kB (UE) 2*1024kB (ME) 1*2048kB (E) 0*4096kB = 11164kB [ 1700.481171] Node 0 DMA32: 1*4kB (U) 142*8kB (UE) 15053*16kB (UE) 6395*32kB (UE) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 446628kB [ 1700.532037] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1700.573703] Node 1 Normal: 18995*4kB (UM) 10183*8kB (UM) 6086*16kB (UME) 3881*32kB (UME) 11*64kB (UM) 630*128kB (UM) 173*256kB (UM) 19*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 514372kB [ 1700.636684] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1700.671211] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1700.703724] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1700.741093] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1700.773862] 33037 total pagecache pages [ 1700.804892] 0 pages in swap cache [ 1700.812815] syz-executor.2: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1700.832541] Swap cache stats: add 0, delete 0, find 0/0 [ 1700.841472] Free swap = 0kB [ 1700.850236] Total swap = 0kB [ 1700.859868] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 1700.876315] 2097051 pages RAM [ 1700.882764] CPU: 0 PID: 30338 Comm: syz-executor.2 Not tainted 4.14.232-syzkaller #0 [ 1700.890645] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1700.899989] Call Trace: [ 1700.902573] dump_stack+0x1b2/0x281 [ 1700.906198] warn_alloc.cold+0x96/0x1cc [ 1700.910170] ? zone_watermark_ok_safe+0x220/0x220 [ 1700.915022] __alloc_pages_nodemask+0x2127/0x2720 [ 1700.919874] ? lock_acquire+0x170/0x3f0 [ 1700.923853] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1700.928701] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1700.934158] ? __mutex_unlock_slowpath+0x75/0x770 [ 1700.938995] ? __alloc_pages_nodemask+0x277/0x2720 [ 1700.943923] alloc_pages_current+0x155/0x260 [ 1700.948331] ion_page_pool_alloc+0x118/0x1b0 [ 1700.952735] ion_system_heap_allocate+0x133/0x8c0 [ 1700.957575] ? ion_alloc+0x187/0x810 [ 1700.961284] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1700.966728] ? ion_system_contig_heap_create+0x130/0x130 [ 1700.972171] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1700.977184] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1700.982021] ion_alloc+0x204/0x810 [ 1700.985560] ? ion_dma_buf_release+0x40/0x40 [ 1700.989965] ? __might_fault+0x177/0x1b0 [ 1700.994025] ion_ioctl+0xea/0x1f0 [ 1700.997470] ? ion_query_heaps+0x360/0x360 [ 1701.001708] ? ion_query_heaps+0x360/0x360 [ 1701.005937] do_vfs_ioctl+0x75a/0xff0 [ 1701.009735] ? ioctl_preallocate+0x1a0/0x1a0 [ 1701.014145] ? lock_downgrade+0x740/0x740 [ 1701.018286] ? __fget+0x225/0x360 [ 1701.021731] ? do_vfs_ioctl+0xff0/0xff0 [ 1701.025711] ? security_file_ioctl+0x83/0xb0 [ 1701.030115] SyS_ioctl+0x7f/0xb0 [ 1701.033476] ? do_vfs_ioctl+0xff0/0xff0 [ 1701.037447] do_syscall_64+0x1d5/0x640 [ 1701.041334] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1701.046516] RIP: 0033:0x4665f9 [ 1701.049716] RSP: 002b:00007fc1ab256188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1701.057419] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1701.064680] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1701.071940] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1701.079199] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1701.086474] R13: 00007ffd84742d3f R14: 00007fc1ab256300 R15: 0000000000022000 [ 1701.108788] 0 pages HighMem/MovableOnly [ 1701.120435] 363849 pages reserved [ 1701.134807] 0 pages cma reserved [ 1701.173130] warn_alloc_show_mem: 3 callbacks suppressed [ 1701.173134] Mem-Info: [ 1701.190497] active_anon:15105 inactive_anon:28343 isolated_anon:0 [ 1701.190497] active_file:1369 inactive_file:2037 isolated_file:0 [ 1701.190497] unevictable:0 dirty:102 writeback:0 unstable:0 [ 1701.190497] slab_reclaimable:12454 slab_unreclaimable:117274 [ 1701.190497] mapped:55272 shmem:29460 pagetables:861 bounce:0 [ 1701.190497] free:150557 free_pcp:66 free_cma:0 [ 1701.261003] Node 0 active_anon:59520kB inactive_anon:78104kB active_file:5472kB inactive_file:8144kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:121292kB dirty:400kB writeback:0kB shmem:82364kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1701.314126] Node 1 active_anon:900kB inactive_anon:35268kB active_file:4kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:99796kB dirty:8kB writeback:0kB shmem:35476kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1701.355260] Node 0 DMA free:11120kB min:204kB low:252kB high:300kB active_anon:12kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1701.391040] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1701.414125] Node 0 DMA32 free:85564kB min:36200kB low:45248kB high:54296kB active_anon:59508kB inactive_anon:78104kB active_file:5472kB inactive_file:8144kB unevictable:0kB writepending:400kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7552kB pagetables:2888kB bounce:0kB free_pcp:208kB local_pcp:204kB free_cma:0kB [ 1701.461257] lowmem_reserve[]: 0 0 0 0 0 [ 1701.465540] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1701.558779] lowmem_reserve[]: 0 0 0 0 0 [ 1701.571755] Node 1 Normal free:412236kB min:53696kB low:67120kB high:80544kB active_anon:900kB inactive_anon:35268kB active_file:4kB inactive_file:4kB unevictable:0kB writepending:8kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:544kB pagetables:556kB bounce:0kB free_pcp:148kB local_pcp:76kB free_cma:0kB [ 1701.602872] lowmem_reserve[]: 0 0 0 0 0 [ 1701.607381] Node 0 DMA: 22*4kB (UME) 47*8kB (UME) 40*16kB (UM) 31*32kB (UME) 9*64kB (UME) 10*128kB (UME) 6*256kB (UME) 3*512kB (UE) 2*1024kB (ME) 1*2048kB (E) 0*4096kB = 11120kB [ 1701.645186] syz-executor.5: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1701.672748] Node 0 DMA32: 1874*4kB (UME) 171*8kB (ME) 50*16kB (UME) 21*32kB (ME) 136*64kB (UM) 135*128kB (UM) 4*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 37344kB [ 1701.675202] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 1701.730354] CPU: 1 PID: 30326 Comm: syz-executor.5 Not tainted 4.14.232-syzkaller #0 [ 1701.738238] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1701.740152] Node 0 [ 1701.747668] Call Trace: [ 1701.747687] dump_stack+0x1b2/0x281 [ 1701.747703] warn_alloc.cold+0x96/0x1cc [ 1701.747714] ? zone_watermark_ok_safe+0x220/0x220 [ 1701.747736] __alloc_pages_nodemask+0x2127/0x2720 [ 1701.747745] ? finish_task_switch+0x178/0x610 [ 1701.747755] ? switch_mm_irqs_off+0x601/0xeb0 [ 1701.747768] ? lock_acquire+0x170/0x3f0 [ 1701.782648] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1701.787474] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1701.792923] ? __mutex_unlock_slowpath+0x75/0x770 [ 1701.797756] alloc_pages_current+0x155/0x260 [ 1701.802149] ion_page_pool_alloc+0x118/0x1b0 [ 1701.806540] ion_system_heap_allocate+0x133/0x8c0 [ 1701.811368] ? ion_alloc+0x187/0x810 [ 1701.815064] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1701.820494] ? ion_system_contig_heap_create+0x130/0x130 [ 1701.825923] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1701.830917] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1701.835749] ion_alloc+0x204/0x810 [ 1701.839272] ? ion_dma_buf_release+0x40/0x40 [ 1701.843659] ? __might_fault+0x177/0x1b0 [ 1701.847702] ion_ioctl+0xea/0x1f0 [ 1701.851132] ? ion_query_heaps+0x360/0x360 [ 1701.855349] ? ion_query_heaps+0x360/0x360 [ 1701.859567] do_vfs_ioctl+0x75a/0xff0 [ 1701.863347] ? ioctl_preallocate+0x1a0/0x1a0 [ 1701.867737] ? lock_downgrade+0x740/0x740 [ 1701.871869] ? __fget+0x225/0x360 [ 1701.875301] ? do_vfs_ioctl+0xff0/0xff0 [ 1701.879265] ? security_file_ioctl+0x83/0xb0 [ 1701.883652] SyS_ioctl+0x7f/0xb0 [ 1701.886994] ? do_vfs_ioctl+0xff0/0xff0 [ 1701.890945] do_syscall_64+0x1d5/0x640 [ 1701.894813] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1701.899993] RIP: 0033:0x4665f9 [ 1701.903159] RSP: 002b:00007f87ada6b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1701.910846] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1701.918095] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1701.925343] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1701.932602] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1701.939936] R13: 00007fff979d8a6f R14: 00007f87ada6b300 R15: 0000000000022000 [ 1701.948674] Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1701.960873] Node 1 Normal: 2*4kB (UM) 4128*8kB (U) 5867*16kB (UE) 5182*32kB (UE) 1*64kB (U) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 292792kB [ 1701.975699] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1701.984584] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1701.993489] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1702.015257] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1702.025366] 31589 total pagecache pages [ 1702.029341] 0 pages in swap cache [ 1702.032779] Swap cache stats: add 0, delete 0, find 0/0 [ 1702.041970] Free swap = 0kB [ 1702.066208] Total swap = 0kB [ 1702.069258] 2097051 pages RAM [ 1702.072438] 0 pages HighMem/MovableOnly [ 1702.092522] 363849 pages reserved [ 1702.096134] 0 pages cma reserved [ 1702.186977] Mem-Info: [ 1702.189462] active_anon:15108 inactive_anon:28343 isolated_anon:0 [ 1702.189462] active_file:388 inactive_file:389 isolated_file:57 [ 1702.189462] unevictable:0 dirty:108 writeback:0 unstable:0 [ 1702.189462] slab_reclaimable:12446 slab_unreclaimable:117765 [ 1702.189462] mapped:53534 shmem:29460 pagetables:861 bounce:0 [ 1702.189462] free:25298 free_pcp:462 free_cma:0 [ 1702.230010] Node 0 active_anon:59520kB inactive_anon:78104kB active_file:1032kB inactive_file:1212kB unevictable:0kB isolated(anon):0kB isolated(file):72kB mapped:113340kB dirty:424kB writeback:0kB shmem:82364kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1702.270818] Node 1 active_anon:912kB inactive_anon:35268kB active_file:4kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:99796kB dirty:8kB writeback:0kB shmem:35476kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1702.299713] Node 0 DMA free:11064kB min:204kB low:252kB high:300kB active_anon:12kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1702.331874] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1702.339255] Node 0 DMA32 free:35984kB min:36200kB low:45248kB high:54296kB active_anon:59508kB inactive_anon:78104kB active_file:220kB inactive_file:344kB unevictable:0kB writepending:424kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7552kB pagetables:2888kB bounce:0kB free_pcp:152kB local_pcp:152kB free_cma:0kB [ 1702.369176] lowmem_reserve[]: 0 0 0 0 0 [ 1702.373164] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1702.399048] lowmem_reserve[]: 0 0 0 0 0 [ 1702.403034] Node 1 Normal free:53620kB min:53696kB low:67120kB high:80544kB active_anon:916kB inactive_anon:35268kB active_file:4kB inactive_file:16kB unevictable:0kB writepending:20kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:544kB pagetables:556kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1702.435153] lowmem_reserve[]: 0 0 0 0 0 [ 1702.439147] Node 0 DMA: 8*4kB (UME) 47*8kB (UME) 40*16kB (UM) 31*32kB (UME) 9*64kB (UME) 10*128kB (UME) 6*256kB (UME) 3*512kB (UE) 2*1024kB (ME) 1*2048kB (E) 0*4096kB = 11064kB [ 1702.458363] Node 0 DMA32: 947*4kB (UME) 503*8kB (UME) 81*16kB (UME) 22*32kB (UME) 99*64kB (UM) 142*128kB (UM) 8*256kB (UM) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36372kB [ 1702.473688] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1702.484461] Node 1 Normal: 3*4kB (UM) 15*8kB (UM) 3*16kB (ME) 1669*32kB (UME) 1*64kB (M) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 53652kB [ 1702.498710] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1702.507584] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1702.516703] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1702.525555] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1702.534111] 29505 total pagecache pages [ 1702.538081] 0 pages in swap cache [ 1702.541507] Swap cache stats: add 0, delete 0, find 0/0 [ 1702.546881] Free swap = 0kB [ 1702.549881] Total swap = 0kB [ 1702.552910] 2097051 pages RAM [ 1702.556026] 0 pages HighMem/MovableOnly [ 1702.559980] 363849 pages reserved [ 1702.563421] 0 pages cma reserved [ 1702.604475] oom_reaper: reaped process 30322 (syz-executor.1), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1702.651274] oom_reaper: reaped process 30329 (syz-executor.3), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1702.665447] syz-fuzzer invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1702.677888] syz-executor.3: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1702.679853] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 1702.694925] CPU: 1 PID: 7960 Comm: syz-fuzzer Not tainted 4.14.232-syzkaller #0 [ 1702.702358] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1702.708152] syz-executor.1: [ 1702.711708] Call Trace: [ 1702.711715] page allocation failure: order:0 [ 1702.714733] dump_stack+0x1b2/0x281 [ 1702.725295] dump_header+0x178/0x82f [ 1702.729107] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1702.733271] syz-executor.3 cpuset= [ 1702.734209] ? ___ratelimit+0x2cd/0x530 [ 1702.734211] / mems_allowed=0-1 [ 1702.737733] oom_kill_process.cold+0x10/0xa40 [ 1702.737752] out_of_memory+0xe3e/0x1190 [ 1702.737765] ? oom_killer_disable+0x1c0/0x1c0 [ 1702.737774] ? mutex_trylock+0x152/0x1a0 [ 1702.737790] __alloc_pages_nodemask+0x23e1/0x2720 [ 1702.737810] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1702.737833] alloc_pages_current+0x155/0x260 [ 1702.760315] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1702.761903] filemap_fault+0x11a1/0x1ad0 [ 1702.787046] ext4_filemap_fault+0x84/0xb0 [ 1702.791187] __do_fault+0xfa/0x380 [ 1702.794720] __handle_mm_fault+0x2497/0x4620 [ 1702.799116] ? vm_insert_page+0x7c0/0x7c0 [ 1702.803248] ? lock_downgrade+0x740/0x740 [ 1702.807385] ? mark_held_locks+0xa6/0xf0 [ 1702.811541] handle_mm_fault+0x455/0x9c0 [ 1702.813105] (null) [ 1702.815598] __do_page_fault+0x549/0xad0 [ 1702.815610] ? spurious_fault+0x640/0x640 [ 1702.815618] ? do_page_fault+0x60/0x500 [ 1702.815627] ? page_fault+0x2f/0x50 [ 1702.815635] page_fault+0x45/0x50 [ 1702.815642] RIP: 0000:0x947a7c [ 1702.815647] RSP: 2e000:000000c00003dec8 EFLAGS: 0043b6a0 [ 1702.826080] Mem-Info: [ 1702.840834] CPU: 0 PID: 30329 Comm: syz-executor.3 Not tainted 4.14.232-syzkaller #0 [ 1702.854784] active_anon:15086 inactive_anon:28343 isolated_anon:0 [ 1702.854784] active_file:15 inactive_file:16 isolated_file:0 [ 1702.854784] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1702.854784] slab_reclaimable:12445 slab_unreclaimable:117809 [ 1702.854784] mapped:52865 shmem:29460 pagetables:861 bounce:0 [ 1702.854784] free:13893 free_pcp:0 free_cma:0 [ 1702.856001] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1702.856005] Call Trace: [ 1702.856023] dump_stack+0x1b2/0x281 [ 1702.856036] warn_alloc.cold+0x96/0x1cc [ 1702.856047] ? zone_watermark_ok_safe+0x220/0x220 [ 1702.856055] ? usleep_range+0x130/0x130 [ 1702.856064] ? try_to_free_pages+0x23f/0x6e0 [ 1702.856074] ? _find_next_bit+0xdb/0x100 [ 1702.856085] ? run_timer_softirq+0x5a0/0x5a0 [ 1702.856102] __alloc_pages_nodemask+0x2127/0x2720 [ 1702.856118] ? lock_acquire+0x170/0x3f0 [ 1702.856134] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1702.856145] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1702.856161] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1702.856175] ? alloc_pages_current+0xe3/0x260 [ 1702.856194] alloc_pages_current+0x155/0x260 [ 1702.889267] Node 0 active_anon:59424kB inactive_anon:78104kB active_file:56kB inactive_file:60kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:111664kB dirty:0kB writeback:0kB shmem:82364kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1702.898575] ion_page_pool_alloc+0x118/0x1b0 [ 1702.898585] ion_system_heap_allocate+0x133/0x8c0 [ 1702.898595] ? ion_alloc+0x187/0x810 [ 1702.901164] Node 1 active_anon:920kB inactive_anon:35268kB active_file:4kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:99796kB dirty:0kB writeback:0kB shmem:35476kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1702.904767] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1702.908728] Node 0 [ 1702.913542] ? ion_system_contig_heap_create+0x130/0x130 [ 1702.917513] DMA free:10952kB min:204kB low:252kB high:300kB active_anon:12kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1702.921876] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1702.925925] lowmem_reserve[]: [ 1702.930299] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1702.935131] 0 [ 1702.939069] ion_alloc+0x204/0x810 [ 1702.943887] 2717 [ 1702.948373] ? ion_dma_buf_release+0x40/0x40 [ 1702.948385] ? __might_fault+0x177/0x1b0 [ 1702.948400] ion_ioctl+0xea/0x1f0 [ 1702.953828] 2718 [ 1702.958299] ? ion_query_heaps+0x360/0x360 [ 1702.958311] ? ion_query_heaps+0x360/0x360 [ 1702.958322] do_vfs_ioctl+0x75a/0xff0 [ 1702.962700] 2718 [ 1702.990353] ? ioctl_preallocate+0x1a0/0x1a0 [ 1702.990363] ? lock_downgrade+0x740/0x740 [ 1702.990376] ? __fget+0x225/0x360 [ 1702.994757] 2718 [ 1702.999586] ? do_vfs_ioctl+0xff0/0xff0 [ 1702.999597] ? security_file_ioctl+0x83/0xb0 [ 1702.999606] SyS_ioctl+0x7f/0xb0 [ 1703.030193] ? do_vfs_ioctl+0xff0/0xff0 [ 1703.030205] do_syscall_64+0x1d5/0x640 [ 1703.030218] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1703.030225] RIP: 0033:0x4665f9 [ 1703.030229] RSP: 002b:00007fd613a46188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1703.030237] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1703.030241] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1703.030246] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1703.030250] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1703.030254] R13: 00007ffce81deb9f R14: 00007fd613a46300 R15: 0000000000022000 [ 1703.175923] syz-executor.1 cpuset= [ 1703.183730] Node 0 DMA32 free:17836kB min:36200kB low:45248kB high:54296kB active_anon:59332kB inactive_anon:78104kB active_file:60kB inactive_file:56kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7552kB pagetables:2888kB bounce:0kB free_pcp:132kB local_pcp:12kB free_cma:0kB [ 1703.273894] / mems_allowed=0-1 [ 1703.290774] CPU: 0 PID: 30322 Comm: syz-executor.1 Not tainted 4.14.232-syzkaller #0 [ 1703.298676] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1703.308027] Call Trace: [ 1703.310619] dump_stack+0x1b2/0x281 [ 1703.314242] warn_alloc.cold+0x96/0x1cc [ 1703.318216] ? zone_watermark_ok_safe+0x220/0x220 [ 1703.323069] ? usleep_range+0x130/0x130 [ 1703.327043] ? try_to_free_pages+0x23f/0x6e0 [ 1703.331445] ? _find_next_bit+0xdb/0x100 [ 1703.333364] syz-executor.3: [ 1703.335614] ? run_timer_softirq+0x5a0/0x5a0 [ 1703.335632] __alloc_pages_nodemask+0x2127/0x2720 [ 1703.335646] ? retint_kernel+0x2d/0x2d [ 1703.342064] lowmem_reserve[]: [ 1703.343043] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1703.347890] 0 [ 1703.351741] ? retint_kernel+0x2d/0x2d [ 1703.354834] 0 [ 1703.359664] ? __sanitizer_cov_trace_pc+0x3d/0x50 [ 1703.359678] alloc_pages_current+0x155/0x260 [ 1703.361456] page allocation failure: order:4 [ 1703.365315] ion_page_pool_alloc+0x118/0x1b0 [ 1703.365324] ion_system_heap_allocate+0x133/0x8c0 [ 1703.365337] ? ion_alloc+0x187/0x810 [ 1703.367115] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1703.371935] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1703.376336] 0 [ 1703.380709] ? ion_system_contig_heap_create+0x130/0x130 [ 1703.385103] (null) [ 1703.389907] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1703.393588] syz-executor.3 cpuset= [ 1703.400663] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1703.400674] ion_alloc+0x204/0x810 [ 1703.400687] ? ion_dma_buf_release+0x40/0x40 [ 1703.406124] 0 [ 1703.407892] ? __might_fault+0x177/0x1b0 [ 1703.413320] 0 [ 1703.415452] ion_ioctl+0xea/0x1f0 [ 1703.415462] ? ion_query_heaps+0x360/0x360 [ 1703.415473] ? ion_query_heaps+0x360/0x360 [ 1703.420465] / [ 1703.423979] do_vfs_ioctl+0x75a/0xff0 [ 1703.432315] ? ioctl_preallocate+0x1a0/0x1a0 [ 1703.436715] mems_allowed=0-1 [ 1703.438502] ? lock_downgrade+0x740/0x740 [ 1703.445050] Node 0 [ 1703.447744] ? __fget+0x225/0x360 [ 1703.451954] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1703.456168] ? do_vfs_ioctl+0xff0/0xff0 [ 1703.456180] ? security_file_ioctl+0x83/0xb0 [ 1703.456190] SyS_ioctl+0x7f/0xb0 [ 1703.465045] lowmem_reserve[]: [ 1703.466042] ? do_vfs_ioctl+0xff0/0xff0 [ 1703.469119] 0 [ 1703.473247] do_syscall_64+0x1d5/0x640 [ 1703.485044] 0 [ 1703.503755] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1703.503764] RIP: 0033:0x4665f9 [ 1703.535039] 0 [ 1703.538209] RSP: 002b:00007fd699bc5188 EFLAGS: 00000246 [ 1703.538214] 0 [ 1703.539992] ORIG_RAX: 0000000000000010 [ 1703.551052] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1703.555039] 0 [ 1703.558299] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1703.558305] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1703.567334] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1703.567340] R13: 00007ffcaf60874f R14: 00007fd699bc5300 R15: 0000000000022000 [ 1703.591714] warn_alloc_show_mem: 1 callbacks suppressed [ 1703.591717] Mem-Info: [ 1703.603489] CPU: 1 PID: 30329 Comm: syz-executor.3 Not tainted 4.14.232-syzkaller #0 [ 1703.609138] active_anon:15061 inactive_anon:28343 isolated_anon:0 [ 1703.609138] active_file:207 inactive_file:208 isolated_file:27 [ 1703.609138] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1703.609138] slab_reclaimable:12445 slab_unreclaimable:117913 [ 1703.609138] mapped:53265 shmem:29460 pagetables:861 bounce:0 [ 1703.609138] free:14632 free_pcp:27 free_cma:0 [ 1703.611380] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1703.649776] Node 0 active_anon:59344kB inactive_anon:78104kB active_file:60kB inactive_file:56kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:111664kB dirty:0kB writeback:0kB shmem:82364kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1703.654204] Call Trace: [ 1703.684429] dump_stack+0x1b2/0x281 [ 1703.685546] Node 1 active_anon:900kB inactive_anon:35268kB active_file:768kB inactive_file:776kB unevictable:0kB isolated(anon):0kB isolated(file):108kB mapped:101396kB dirty:0kB writeback:0kB shmem:35476kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1703.688049] warn_alloc.cold+0x96/0x1cc [ 1703.719393] ? zone_watermark_ok_safe+0x220/0x220 [ 1703.724232] __alloc_pages_nodemask+0x2127/0x2720 [ 1703.729058] ? lock_acquire+0x170/0x3f0 [ 1703.733027] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1703.737865] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1703.743299] ? __mutex_unlock_slowpath+0x75/0x770 [ 1703.748228] alloc_pages_current+0x155/0x260 [ 1703.752620] ion_page_pool_alloc+0x118/0x1b0 [ 1703.757008] ion_system_heap_allocate+0x133/0x8c0 [ 1703.761832] ? _raw_spin_unlock+0x29/0x40 [ 1703.765958] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1703.770868] ? ion_system_contig_heap_create+0x130/0x130 [ 1703.776311] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1703.781319] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1703.786142] ion_alloc+0x27a/0x810 [ 1703.789663] ? ion_dma_buf_release+0x40/0x40 [ 1703.794056] ? __might_fault+0x177/0x1b0 [ 1703.798110] ion_ioctl+0xea/0x1f0 [ 1703.801545] ? ion_query_heaps+0x360/0x360 [ 1703.805763] ? ion_query_heaps+0x360/0x360 [ 1703.809977] do_vfs_ioctl+0x75a/0xff0 [ 1703.813758] ? ioctl_preallocate+0x1a0/0x1a0 [ 1703.818158] ? lock_downgrade+0x740/0x740 [ 1703.822287] ? __fget+0x225/0x360 [ 1703.825719] ? do_vfs_ioctl+0xff0/0xff0 [ 1703.829685] ? security_file_ioctl+0x83/0xb0 [ 1703.834073] SyS_ioctl+0x7f/0xb0 [ 1703.837417] ? do_vfs_ioctl+0xff0/0xff0 [ 1703.841373] do_syscall_64+0x1d5/0x640 [ 1703.845241] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1703.850407] RIP: 0033:0x4665f9 [ 1703.853577] RSP: 002b:00007fd613a46188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1703.861263] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1703.868511] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1703.875760] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1703.883007] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1703.890255] R13: 00007ffce81deb9f R14: 00007fd613a46300 R15: 0000000000022000 [ 1703.901923] Node 1 Normal free:29356kB min:53696kB low:67120kB high:80544kB active_anon:900kB inactive_anon:35268kB active_file:1436kB inactive_file:856kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:544kB pagetables:556kB bounce:0kB free_pcp:108kB local_pcp:0kB free_cma:0kB [ 1703.903023] Node 0 [ 1703.931824] lowmem_reserve[]: 0 0 0 0 0 [ 1703.936587] DMA free:10952kB min:204kB low:252kB high:300kB active_anon:12kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1703.938078] Node 0 DMA: 6*4kB (UME) 34*8kB (UME) 40*16kB (UM) 31*32kB (UME) 9*64kB (UME) 10*128kB (UME) 6*256kB (UME) 3*512kB (UE) 2*1024kB (ME) 1*2048kB (E) 0*4096kB = 10952kB [ 1703.967097] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1703.980824] Node 0 [ 1703.984729] Node 0 [ 1703.984736] DMA32: [ 1703.987389] DMA32 free:18240kB min:36200kB low:45248kB high:54296kB active_anon:59332kB inactive_anon:78104kB active_file:60kB inactive_file:56kB unevictable:0kB writepending:4kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7552kB pagetables:2888kB bounce:0kB free_pcp:24kB local_pcp:24kB free_cma:0kB [ 1703.991817] 956*4kB [ 1704.023440] lowmem_reserve[]: [ 1704.024088] (UME) [ 1704.025791] 0 0 0 0 0 [ 1704.025811] Node 0 [ 1704.029374] 573*8kB [ 1704.031034] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1704.031036] lowmem_reserve[]: 0 0 0 0 0 [ 1704.031054] Node 1 Normal free:29816kB min:53696kB low:67120kB high:80544kB active_anon:900kB inactive_anon:35268kB active_file:1180kB inactive_file:772kB unevictable:0kB writepending:8kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:544kB pagetables:556kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1704.031073] lowmem_reserve[]: [ 1704.033625] (UME) [ 1704.035820] 0 0 0 0 0 [ 1704.035837] Node 0 DMA: 6*4kB (UME) 34*8kB [ 1704.042909] 82*16kB [ 1704.063371] (UME) [ 1704.070640] (UME) [ 1704.105054] 40*16kB [ 1704.111445] 23*32kB [ 1704.112280] (UM) [ 1704.114403] (UME) 27*64kB (UM) 30*128kB (UM) 7*256kB (UM) 1*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 18328kB [ 1704.124739] 31*32kB (UME) 9*64kB (UME) 10*128kB (UME) 6*256kB (UME) 3*512kB (UE) 2*1024kB (ME) 1*2048kB (E) 0*4096kB = 10952kB [ 1704.135558] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1704.145294] Node 0 DMA32: 961*4kB (UME) 574*8kB (UME) 82*16kB (UME) 23*32kB (UME) 27*64kB (UM) 30*128kB (UM) 7*256kB (UM) 1*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 18356kB [ 1704.160505] Node 1 Normal: 8*4kB (UM) 14*8kB (UM) 8*16kB (UE) 10*32kB (UE) 207*64kB (U) 83*128kB (U) 28*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 31632kB [ 1704.183900] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1704.188286] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1704.200095] Node 1 Normal: 8*4kB (UM) 14*8kB (UM) 8*16kB (UE) 10*32kB (UE) 207*64kB (U) 83*128kB (U) 28*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 31632kB [ 1704.211672] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1704.219972] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1704.234167] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1704.244442] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1704.253841] 29520 total pagecache pages [ 1704.257838] 0 pages in swap cache [ 1704.261275] Swap cache stats: add 0, delete 0, find 0/0 [ 1704.266697] syz-executor.3: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1704.278543] Free swap = 0kB [ 1704.281547] Total swap = 0kB [ 1704.284550] 2097051 pages RAM [ 1704.287673] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 1704.292784] CPU: 1 PID: 30329 Comm: syz-executor.3 Not tainted 4.14.232-syzkaller #0 [ 1704.294409] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1704.300645] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1704.300649] Call Trace: [ 1704.300666] dump_stack+0x1b2/0x281 [ 1704.300680] warn_alloc.cold+0x96/0x1cc [ 1704.300693] ? zone_watermark_ok_safe+0x220/0x220 [ 1704.300702] ? usleep_range+0x130/0x130 [ 1704.300712] ? try_to_free_pages+0x23f/0x6e0 [ 1704.300722] ? _find_next_bit+0xdb/0x100 [ 1704.300733] ? run_timer_softirq+0x5a0/0x5a0 [ 1704.300748] __alloc_pages_nodemask+0x2127/0x2720 [ 1704.300765] ? lock_acquire+0x170/0x3f0 [ 1704.334096] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1704.337645] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1704.337655] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1704.337673] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1704.337693] alloc_pages_current+0x155/0x260 [ 1704.337705] ion_page_pool_alloc+0x118/0x1b0 [ 1704.337715] ion_system_heap_allocate+0x133/0x8c0 [ 1704.337725] ? _raw_spin_unlock+0x29/0x40 [ 1704.337734] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1704.359617] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1704.368139] ? ion_system_contig_heap_create+0x130/0x130 [ 1704.368155] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1704.368168] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1704.368180] ion_alloc+0x27a/0x810 [ 1704.368194] ? ion_dma_buf_release+0x40/0x40 [ 1704.368207] ? __might_fault+0x177/0x1b0 [ 1704.368219] ion_ioctl+0xea/0x1f0 [ 1704.368230] ? ion_query_heaps+0x360/0x360 [ 1704.389077] 29520 total pagecache pages [ 1704.391722] ? ion_query_heaps+0x360/0x360 [ 1704.414286] 0 pages in swap cache [ 1704.419659] do_vfs_ioctl+0x75a/0xff0 [ 1704.419671] ? ioctl_preallocate+0x1a0/0x1a0 [ 1704.419682] ? lock_downgrade+0x740/0x740 [ 1704.419695] ? __fget+0x225/0x360 [ 1704.419703] ? do_vfs_ioctl+0xff0/0xff0 [ 1704.419715] ? security_file_ioctl+0x83/0xb0 [ 1704.441560] Swap cache stats: add 0, delete 0, find 0/0 [ 1704.444901] SyS_ioctl+0x7f/0xb0 [ 1704.468449] Free swap = 0kB [ 1704.468867] ? do_vfs_ioctl+0xff0/0xff0 [ 1704.472994] Total swap = 0kB [ 1704.473003] 2097051 pages RAM [ 1704.476440] do_syscall_64+0x1d5/0x640 [ 1704.476457] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1704.476464] RIP: 0033:0x4665f9 [ 1704.476469] RSP: 002b:00007fd613a46188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1704.476479] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1704.476484] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1704.476490] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1704.476495] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1704.476501] R13: 00007ffce81deb9f R14: 00007fd613a46300 R15: 0000000000022000 [ 1704.482307] 0 pages HighMem/MovableOnly [ 1704.493917] 0 pages HighMem/MovableOnly [ 1704.501872] 363849 pages reserved [ 1704.503598] 363849 pages reserved [ 1704.506700] 0 pages cma reserved [ 1704.506708] Out of memory (oom_kill_allocating_task): Kill process 7960 (syz-fuzzer) score 0 or sacrifice child [ 1704.506766] Killed process 29584 (syz-executor.4) total-vm:84924kB, anon-rss:68kB, file-rss:0kB, shmem-rss:0kB [ 1704.612720] warn_alloc_show_mem: 1 callbacks suppressed [ 1704.612723] Mem-Info: [ 1704.621538] oom_reaper: reaped process 29584 (syz-executor.4), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1704.622506] active_anon:15061 inactive_anon:28343 isolated_anon:0 [ 1704.622506] active_file:54 inactive_file:0 isolated_file:0 [ 1704.622506] unevictable:0 dirty:0 writeback:6 unstable:0 [ 1704.622506] slab_reclaimable:12445 slab_unreclaimable:117889 [ 1704.622506] mapped:52879 shmem:29460 pagetables:861 bounce:0 [ 1704.622506] free:13771 free_pcp:72 free_cma:0 [ 1704.642753] 0 pages cma reserved [ 1704.670628] Node 0 active_anon:59344kB inactive_anon:78104kB active_file:160kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:111664kB dirty:0kB writeback:4kB shmem:82364kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1704.729506] Node 1 active_anon:900kB inactive_anon:35268kB active_file:56kB inactive_file:16kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:99852kB dirty:0kB writeback:20kB shmem:35476kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1704.794469] Node 0 DMA free:11076kB min:204kB low:252kB high:300kB active_anon:12kB inactive_anon:0kB active_file:0kB inactive_file:80kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1704.908750] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1704.913818] Node 0 DMA32 free:44052kB min:36200kB low:45248kB high:54296kB active_anon:59284kB inactive_anon:78104kB active_file:1552kB inactive_file:3632kB unevictable:0kB writepending:4kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7520kB pagetables:2860kB bounce:0kB free_pcp:672kB local_pcp:340kB free_cma:0kB [ 1705.074959] lowmem_reserve[]: 0 0 0 0 0 [ 1705.078987] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1705.155558] lowmem_reserve[]: 0 0 0 0 0 [ 1705.159570] Node 1 Normal free:53620kB min:53696kB low:67120kB high:80544kB active_anon:900kB inactive_anon:35268kB active_file:4kB inactive_file:392kB unevictable:0kB writepending:4kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:544kB pagetables:404kB bounce:0kB free_pcp:536kB local_pcp:168kB free_cma:0kB [ 1705.236758] lowmem_reserve[]: 0 0 0 0 0 [ 1705.242636] Node 0 DMA: 6*4kB (ME) 5*8kB (UME) 1*16kB (U) 29*32kB (UME) 9*64kB (UME) 10*128kB (UME) 6*256kB (UME) 3*512kB (UE) 3*1024kB (UME) 1*2048kB (E) 0*4096kB = 11056kB [ 1705.317275] Node 0 DMA32: 849*4kB (UME) 443*8kB (UME) 79*16kB (UME) 23*32kB (UME) 168*64kB (UM) 108*128kB (UM) 8*256kB (UM) 1*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 36076kB [ 1705.333505] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1705.344331] Node 1 Normal: 12*4kB (UM) 7*8kB (UM) 7*16kB (UE) 215*32kB (UE) 147*64kB (UM) 169*128kB (U) 43*256kB (U) 1*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 49656kB [ 1705.380072] oom_reaper: reaped process 30326 (syz-executor.5), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1705.402977] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1705.403872] syz-executor.1: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1705.420622] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1705.425704] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 1705.432476] syz-executor.5: [ 1705.437487] CPU: 0 PID: 30322 Comm: syz-executor.1 Not tainted 4.14.232-syzkaller #0 [ 1705.444534] syz-executor.4: [ 1705.448348] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1705.448352] Call Trace: [ 1705.448369] dump_stack+0x1b2/0x281 [ 1705.448383] warn_alloc.cold+0x96/0x1cc [ 1705.453101] systemd-journal invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask= [ 1705.460711] ? zone_watermark_ok_safe+0x220/0x220 [ 1705.460735] __alloc_pages_nodemask+0x2127/0x2720 [ 1705.467339] page allocation failure: order:0 [ 1705.470855] ? lock_acquire+0x170/0x3f0 [ 1705.480990] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1705.485789] ? lock_acquire+0x170/0x3f0 [ 1705.485805] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1705.490623] page allocation failure: order:0 [ 1705.495009] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1705.495023] ? __mutex_unlock_slowpath+0x75/0x770 [ 1705.498970] (null) [ 1705.507784] alloc_pages_current+0x155/0x260 [ 1705.507796] ion_page_pool_alloc+0x118/0x1b0 [ 1705.507806] ion_system_heap_allocate+0x133/0x8c0 [ 1705.511761] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1705.516573] ? _raw_spin_unlock+0x29/0x40 [ 1705.516582] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1705.516593] ? ion_system_contig_heap_create+0x130/0x130 [ 1705.520979] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1705.526398] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1705.526408] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1705.526418] ion_alloc+0x27a/0x810 [ 1705.531237] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1705.533364] ? ion_dma_buf_release+0x40/0x40 [ 1705.537760] , order=0, oom_score_adj=0 [ 1705.542140] ? __might_fault+0x177/0x1b0 [ 1705.546975] 29554 total pagecache pages [ 1705.555511] ion_ioctl+0xea/0x1f0 [ 1705.555522] ? ion_query_heaps+0x360/0x360 [ 1705.555533] ? ion_query_heaps+0x360/0x360 [ 1705.559653] (null) [ 1705.564561] do_vfs_ioctl+0x75a/0xff0 [ 1705.570000] (null) [ 1705.577061] ? ioctl_preallocate+0x1a0/0x1a0 [ 1705.577074] ? lock_downgrade+0x740/0x740 [ 1705.577087] ? __fget+0x225/0x360 [ 1705.582073] systemd-journal cpuset= [ 1705.586887] ? do_vfs_ioctl+0xff0/0xff0 [ 1705.586898] ? security_file_ioctl+0x83/0xb0 [ 1705.586908] SyS_ioctl+0x7f/0xb0 [ 1705.590425] syz-executor.4 cpuset= [ 1705.597492] ? do_vfs_ioctl+0xff0/0xff0 [ 1705.597504] do_syscall_64+0x1d5/0x640 [ 1705.597518] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1705.601903] 0 pages in swap cache [ 1705.605844] RIP: 0033:0x4665f9 [ 1705.605850] RSP: 002b:00007fd699bc5188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1705.605862] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1705.609898] syz-executor.5 cpuset= [ 1705.613838] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1705.613845] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1705.617292] / [ 1705.621480] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1705.621487] R13: 00007ffcaf60874f R14: 00007fd699bc5300 R15: 0000000000022000 [ 1705.625750] Swap cache stats: add 0, delete 0, find 0/0 [ 1705.630012] mems_allowed=0-1 [ 1705.631628] Free swap = 0kB [ 1705.633760] CPU: 0 PID: 29317 Comm: systemd-journal Not tainted 4.14.232-syzkaller #0 [ 1705.646021] / [ 1705.649309] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1705.653259] mems_allowed=0-1 [ 1705.657637] Call Trace: [ 1705.657653] dump_stack+0x1b2/0x281 [ 1705.657665] dump_header+0x178/0x82f [ 1705.661011] / [ 1705.664546] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1705.668504] mems_allowed=0-1 [ 1705.672352] ? ___ratelimit+0x2cd/0x530 [ 1705.677534] Total swap = 0kB [ 1705.680952] oom_kill_process.cold+0x10/0xa40 [ 1705.684111] 2097051 pages RAM [ 1705.691803] out_of_memory+0xe3e/0x1190 [ 1705.691816] ? oom_killer_disable+0x1c0/0x1c0 [ 1705.744908] 0 pages HighMem/MovableOnly [ 1705.752740] ? mutex_trylock+0x152/0x1a0 [ 1705.754428] 363849 pages reserved [ 1705.763766] __alloc_pages_nodemask+0x23e1/0x2720 [ 1705.763788] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1705.804911] 0 pages cma reserved [ 1705.805005] alloc_pages_current+0x155/0x260 [ 1705.838224] filemap_fault+0x11a1/0x1ad0 [ 1705.842287] ext4_filemap_fault+0x84/0xb0 [ 1705.846416] __do_fault+0xfa/0x380 [ 1705.849933] __handle_mm_fault+0x2497/0x4620 [ 1705.854321] ? vm_insert_page+0x7c0/0x7c0 [ 1705.858469] ? mark_held_locks+0xa6/0xf0 [ 1705.862509] ? sync_mm_rss+0xf2/0x160 [ 1705.866289] handle_mm_fault+0x455/0x9c0 [ 1705.870334] __do_page_fault+0x549/0xad0 [ 1705.874375] ? spurious_fault+0x640/0x640 [ 1705.878501] ? do_page_fault+0x60/0x500 [ 1705.882456] ? page_fault+0x2f/0x50 [ 1705.886059] page_fault+0x45/0x50 [ 1705.889499] RIP: 0001:0xffffffffffffffff [ 1705.893534] RSP: fea331e0:00007ffc9f854890 EFLAGS: 7ffc9f8546a0 [ 1705.893554] CPU: 1 PID: 30327 Comm: syz-executor.4 Not tainted 4.14.232-syzkaller #0 [ 1705.905975] Mem-Info: [ 1705.907476] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1705.909875] active_anon:15019 inactive_anon:28343 isolated_anon:0 [ 1705.909875] active_file:8 inactive_file:22 isolated_file:0 [ 1705.909875] unevictable:0 dirty:1 writeback:23 unstable:0 [ 1705.909875] slab_reclaimable:12398 slab_unreclaimable:118201 [ 1705.909875] mapped:52917 shmem:29460 pagetables:816 bounce:0 [ 1705.909875] free:25275 free_pcp:112 free_cma:0 [ 1705.919190] Call Trace: [ 1705.919207] dump_stack+0x1b2/0x281 [ 1705.919220] warn_alloc.cold+0x96/0x1cc [ 1705.919230] ? zone_watermark_ok_safe+0x220/0x220 [ 1705.919258] ? wait_for_completion_io+0x10/0x10 [ 1705.972071] __alloc_pages_nodemask+0x2127/0x2720 [ 1705.976925] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1705.981766] ? migrate_swap_stop+0x880/0x880 [ 1705.986168] ? lock_acquire+0x170/0x3f0 [ 1705.990145] alloc_pages_current+0x155/0x260 [ 1705.994547] ion_page_pool_alloc+0x118/0x1b0 [ 1705.994946] Node 0 active_anon:59192kB inactive_anon:78104kB active_file:36kB inactive_file:32kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:111872kB dirty:0kB writeback:88kB shmem:82364kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1705.998946] ion_system_heap_allocate+0x133/0x8c0 [ 1706.031540] ? ion_alloc+0x187/0x810 [ 1706.035260] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1706.040704] ? ion_system_contig_heap_create+0x130/0x130 [ 1706.046148] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1706.051156] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1706.055994] ion_alloc+0x204/0x810 [ 1706.059532] ? ion_dma_buf_release+0x40/0x40 [ 1706.063934] ? __might_fault+0x177/0x1b0 [ 1706.064919] Node 1 active_anon:884kB inactive_anon:35268kB active_file:0kB inactive_file:56kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:99796kB dirty:4kB writeback:4kB shmem:35476kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1706.067988] ion_ioctl+0xea/0x1f0 [ 1706.095025] Mem-Info: [ 1706.098375] ? ion_query_heaps+0x360/0x360 [ 1706.100765] active_anon:15019 inactive_anon:28343 isolated_anon:0 [ 1706.100765] active_file:8 inactive_file:22 isolated_file:0 [ 1706.100765] unevictable:0 dirty:1 writeback:23 unstable:0 [ 1706.100765] slab_reclaimable:12398 slab_unreclaimable:118201 [ 1706.100765] mapped:52917 shmem:29460 pagetables:816 bounce:0 [ 1706.100765] free:25103 free_pcp:217 free_cma:0 [ 1706.104971] ? ion_query_heaps+0x360/0x360 [ 1706.104981] do_vfs_ioctl+0x75a/0xff0 [ 1706.104992] ? ioctl_preallocate+0x1a0/0x1a0 [ 1706.105001] ? lock_downgrade+0x740/0x740 [ 1706.105020] ? __fget+0x225/0x360 [ 1706.157104] Node 0 DMA free:10960kB min:204kB low:252kB high:300kB active_anon:12kB inactive_anon:0kB active_file:12kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1706.158195] ? do_vfs_ioctl+0xff0/0xff0 [ 1706.158208] ? security_file_ioctl+0x83/0xb0 [ 1706.186456] Node 0 active_anon:59192kB inactive_anon:78104kB active_file:36kB inactive_file:32kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:111872kB dirty:0kB writeback:88kB shmem:82364kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1706.188430] SyS_ioctl+0x7f/0xb0 [ 1706.192834] Node 1 active_anon:884kB inactive_anon:35268kB active_file:0kB inactive_file:56kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:99796kB dirty:4kB writeback:4kB shmem:35476kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1706.220671] ? do_vfs_ioctl+0xff0/0xff0 [ 1706.220685] do_syscall_64+0x1d5/0x640 [ 1706.220700] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1706.220708] RIP: 0033:0x4665f9 [ 1706.220713] RSP: 002b:00007f631d70d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1706.220722] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1706.220728] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1706.220732] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1706.220737] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1706.220742] R13: 00007ffd7ec795cf R14: 00007f631d70d300 R15: 0000000000022000 [ 1706.232214] CPU: 1 PID: 30326 Comm: syz-executor.5 Not tainted 4.14.232-syzkaller #0 [ 1706.253041] lowmem_reserve[]: [ 1706.255048] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1706.255051] Call Trace: [ 1706.255069] dump_stack+0x1b2/0x281 [ 1706.255083] warn_alloc.cold+0x96/0x1cc [ 1706.255097] ? zone_watermark_ok_safe+0x220/0x220 [ 1706.258955] 0 [ 1706.264125] ? usleep_range+0x130/0x130 [ 1706.269175] 2717 [ 1706.274975] ? try_to_free_pages+0x23f/0x6e0 [ 1706.274985] ? _find_next_bit+0xdb/0x100 [ 1706.274995] ? run_timer_softirq+0x5a0/0x5a0 [ 1706.275012] __alloc_pages_nodemask+0x2127/0x2720 [ 1706.282250] 2718 [ 1706.289508] ? lock_acquire+0x170/0x3f0 [ 1706.289524] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1706.289534] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1706.289548] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1706.289562] ? alloc_pages_current+0x16/0x260 [ 1706.298696] 2718 [ 1706.304061] alloc_pages_current+0x155/0x260 [ 1706.311367] Node 0 [ 1706.319170] ion_page_pool_alloc+0x118/0x1b0 [ 1706.319181] ion_system_heap_allocate+0x133/0x8c0 [ 1706.319190] ? ion_alloc+0x187/0x810 [ 1706.319202] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1706.324240] 2718 [ 1706.331617] ? ion_system_contig_heap_create+0x130/0x130 [ 1706.331626] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1706.331637] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1706.331647] ion_alloc+0x204/0x810 [ 1706.331668] ? ion_dma_buf_release+0x40/0x40 [ 1706.334269] DMA free:10960kB min:204kB low:252kB high:300kB active_anon:12kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1706.337877] ? __might_fault+0x177/0x1b0 [ 1706.337888] ion_ioctl+0xea/0x1f0 [ 1706.337898] ? ion_query_heaps+0x360/0x360 [ 1706.337908] ? ion_query_heaps+0x360/0x360 [ 1706.337918] do_vfs_ioctl+0x75a/0xff0 [ 1706.346699] ? ioctl_preallocate+0x1a0/0x1a0 [ 1706.346709] ? lock_downgrade+0x740/0x740 [ 1706.346721] ? __fget+0x225/0x360 [ 1706.346729] ? do_vfs_ioctl+0xff0/0xff0 [ 1706.346741] ? security_file_ioctl+0x83/0xb0 [ 1706.348513] Node 0 [ 1706.352469] SyS_ioctl+0x7f/0xb0 [ 1706.354530] DMA32 free:19304kB min:36200kB low:45248kB high:54296kB active_anon:59180kB inactive_anon:78104kB active_file:56kB inactive_file:52kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7520kB pagetables:2860kB bounce:0kB free_pcp:732kB local_pcp:648kB free_cma:0kB [ 1706.358903] ? do_vfs_ioctl+0xff0/0xff0 [ 1706.358915] do_syscall_64+0x1d5/0x640 [ 1706.358929] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1706.358940] RIP: 0033:0x4665f9 [ 1706.364141] lowmem_reserve[]: [ 1706.367354] RSP: 002b:00007f87ada6b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1706.367364] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1706.367370] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1706.367374] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1706.367379] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1706.367385] R13: 00007fff979d8a6f R14: 00007f87ada6b300 R15: 0000000000022000 [ 1706.615172] lowmem_reserve[]: 0 0 0 0 0 [ 1706.619784] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1706.646453] lowmem_reserve[]: 0 0 0 0 0 [ 1706.651023] Node 1 Normal free:169124kB min:53696kB low:67120kB high:80544kB active_anon:884kB inactive_anon:35268kB active_file:504kB inactive_file:1400kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:544kB pagetables:404kB bounce:0kB free_pcp:396kB local_pcp:176kB free_cma:0kB [ 1706.684922] lowmem_reserve[]: 0 0 0 0 0 [ 1706.695087] Node 0 DMA: 6*4kB (UME) 5*8kB (ME) 3*16kB (M) 27*32kB (UME) 9*64kB (UME) 10*128kB (UME) 6*256kB (UME) 3*512kB (UE) 3*1024kB (UME) 1*2048kB (E) 0*4096kB = 11024kB [ 1706.734883] Node 0 DMA32: 928*4kB (ME) 498*8kB (UME) 77*16kB (ME) 24*32kB (UME) 333*64kB (UM) 75*128kB (UM) 16*256kB (UM) 1*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 45216kB [ 1706.760927] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1706.786551] Node 1 Normal: 1*4kB (M) 0*8kB 10*16kB (UME) 6*32kB (UE) 3*64kB (M) 258*128kB (UM) 78*256kB (UM) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 53540kB [ 1706.802632] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1706.811647] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1706.822253] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1706.831181] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1706.837729] syz-executor.5: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1706.841644] 29515 total pagecache pages [ 1706.854584] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 1706.860765] CPU: 1 PID: 30326 Comm: syz-executor.5 Not tainted 4.14.232-syzkaller #0 [ 1706.865069] 0 pages in swap cache [ 1706.868633] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1706.872060] Swap cache stats: add 0, delete 0, find 0/0 [ 1706.881385] Call Trace: [ 1706.881403] dump_stack+0x1b2/0x281 [ 1706.881418] warn_alloc.cold+0x96/0x1cc [ 1706.881430] ? zone_watermark_ok_safe+0x220/0x220 [ 1706.881454] __alloc_pages_nodemask+0x2127/0x2720 [ 1706.881464] ? lock_acquire+0x170/0x3f0 [ 1706.881479] ? lock_acquire+0x170/0x3f0 [ 1706.893728] Free swap = 0kB [ 1706.896944] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1706.896962] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1706.896973] ? __mutex_unlock_slowpath+0x75/0x770 [ 1706.896988] alloc_pages_current+0x155/0x260 [ 1706.901798] Total swap = 0kB [ 1706.906638] ion_page_pool_alloc+0x118/0x1b0 [ 1706.906649] ion_system_heap_allocate+0x133/0x8c0 [ 1706.906660] ? _raw_spin_unlock+0x29/0x40 [ 1706.906668] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1706.906677] ? ion_system_contig_heap_create+0x130/0x130 [ 1706.906687] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1706.906697] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1706.906707] ion_alloc+0x27a/0x810 [ 1706.906719] ? ion_dma_buf_release+0x40/0x40 [ 1706.917928] 2097051 pages RAM [ 1706.922450] ? __might_fault+0x177/0x1b0 [ 1706.930847] 0 pages HighMem/MovableOnly [ 1706.932692] ion_ioctl+0xea/0x1f0 [ 1706.941061] 363849 pages reserved [ 1706.944454] ? ion_query_heaps+0x360/0x360 [ 1706.952356] 0 pages cma reserved [ 1706.953401] ? ion_query_heaps+0x360/0x360 [ 1706.962310] 0 [ 1706.963744] do_vfs_ioctl+0x75a/0xff0 [ 1706.979421] 2717 [ 1706.981464] ? ioctl_preallocate+0x1a0/0x1a0 [ 1706.984538] 2718 [ 1706.988577] ? lock_downgrade+0x740/0x740 [ 1706.988591] ? __fget+0x225/0x360 [ 1706.988600] ? do_vfs_ioctl+0xff0/0xff0 [ 1706.988617] ? security_file_ioctl+0x83/0xb0 [ 1706.988626] SyS_ioctl+0x7f/0xb0 [ 1706.988635] ? do_vfs_ioctl+0xff0/0xff0 [ 1707.009680] 2718 [ 1707.011214] do_syscall_64+0x1d5/0x640 [ 1707.012986] 2718 [ 1707.016774] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1707.016782] RIP: 0033:0x4665f9 [ 1707.016786] RSP: 002b:00007f87ada6b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1707.016797] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1707.016803] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1707.016808] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1707.016813] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1707.016819] R13: 00007fff979d8a6f R14: 00007f87ada6b300 R15: 0000000000022000 [ 1707.037209] warn_alloc_show_mem: 1 callbacks suppressed [ 1707.037212] Mem-Info: [ 1707.083625] active_anon:15021 inactive_anon:28343 isolated_anon:0 [ 1707.083625] active_file:29 inactive_file:17 isolated_file:0 [ 1707.083625] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1707.083625] slab_reclaimable:12384 slab_unreclaimable:118188 [ 1707.083625] mapped:52927 shmem:29460 pagetables:816 bounce:0 [ 1707.083625] free:13859 free_pcp:0 free_cma:0 [ 1707.089229] Node 0 [ 1707.094835] Node 0 active_anon:59192kB inactive_anon:78104kB active_file:72kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:111856kB dirty:0kB writeback:0kB shmem:82364kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1707.101994] syz-executor.1: [ 1707.117780] Node 1 active_anon:892kB inactive_anon:35268kB active_file:44kB inactive_file:64kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:99852kB dirty:0kB writeback:0kB shmem:35476kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1707.153683] DMA32 free:18088kB min:36200kB low:45248kB high:54296kB active_anon:59180kB inactive_anon:78104kB active_file:56kB inactive_file:32kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7520kB pagetables:2860kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1707.184103] Node 0 [ 1707.219162] page allocation failure: order:0 [ 1707.250927] lowmem_reserve[]: 0 0 0 0 0 [ 1707.263574] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1707.283216] DMA free:10968kB min:204kB low:252kB high:300kB active_anon:12kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1707.294471] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1707.320118] syz-executor.5: [ 1707.321040] (null) [ 1707.332396] lowmem_reserve[]: 0 0 0 0 0 [ 1707.332652] page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1707.342257] syz-executor.1 cpuset= [ 1707.350819] Node 1 Normal free:26380kB min:53696kB low:67120kB high:80544kB active_anon:892kB inactive_anon:35268kB active_file:8kB inactive_file:80kB unevictable:0kB writepending:16kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:544kB pagetables:404kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1707.356106] syz-executor.5 cpuset= [ 1707.388746] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1707.392462] / mems_allowed=0-1 [ 1707.399447] Node 0 DMA32 free:18088kB min:36200kB low:45248kB high:54296kB active_anon:59180kB inactive_anon:78104kB active_file:156kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7520kB pagetables:2860kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1707.402576] CPU: 0 PID: 30322 Comm: syz-executor.1 Not tainted 4.14.232-syzkaller #0 [ 1707.402584] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1707.431122] / [ 1707.438951] Call Trace: [ 1707.448308] mems_allowed=0-1 [ 1707.449991] dump_stack+0x1b2/0x281 [ 1707.459246] warn_alloc.cold+0x96/0x1cc [ 1707.463211] ? zone_watermark_ok_safe+0x220/0x220 [ 1707.464796] lowmem_reserve[]: [ 1707.468049] ? usleep_range+0x130/0x130 [ 1707.468051] 0 0 [ 1707.471139] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1707.482124] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1707.484792] 0 0 [ 1707.487118] ? run_timer_softirq+0x5a0/0x5a0 [ 1707.487134] __alloc_pages_nodemask+0x2127/0x2720 [ 1707.489078] 0 [ 1707.493480] ? lock_acquire+0x170/0x3f0 [ 1707.504012] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1707.508830] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1707.508832] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1707.513346] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1707.544332] alloc_pages_current+0x155/0x260 [ 1707.548721] ion_page_pool_alloc+0x118/0x1b0 [ 1707.553106] ion_system_heap_allocate+0x133/0x8c0 [ 1707.557937] ? _raw_spin_unlock+0x29/0x40 [ 1707.562066] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1707.566972] ? ion_system_contig_heap_create+0x130/0x130 [ 1707.572398] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1707.574784] lowmem_reserve[]: [ 1707.577410] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1707.577412] 0 0 [ 1707.580523] ion_alloc+0x27a/0x810 [ 1707.590802] ? ion_dma_buf_release+0x40/0x40 [ 1707.594802] 0 0 [ 1707.595190] ? __might_fault+0x177/0x1b0 [ 1707.595195] 0 [ 1707.597149] ion_ioctl+0xea/0x1f0 [ 1707.602968] ? ion_query_heaps+0x360/0x360 [ 1707.610619] ? ion_query_heaps+0x360/0x360 [ 1707.614834] do_vfs_ioctl+0x75a/0xff0 [ 1707.618615] ? ioctl_preallocate+0x1a0/0x1a0 [ 1707.622997] ? lock_downgrade+0x740/0x740 [ 1707.624785] Node 1 Normal free:26380kB min:53696kB low:67120kB high:80544kB active_anon:892kB inactive_anon:35268kB active_file:8kB inactive_file:80kB unevictable:0kB writepending:16kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:544kB pagetables:404kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1707.627135] ? __fget+0x225/0x360 [ 1707.627144] ? do_vfs_ioctl+0xff0/0xff0 [ 1707.662769] ? security_file_ioctl+0x83/0xb0 [ 1707.667176] SyS_ioctl+0x7f/0xb0 [ 1707.670523] ? do_vfs_ioctl+0xff0/0xff0 [ 1707.674475] do_syscall_64+0x1d5/0x640 [ 1707.678346] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1707.683515] RIP: 0033:0x4665f9 [ 1707.684782] lowmem_reserve[]: [ 1707.686682] RSP: 002b:00007fd699bc5188 EFLAGS: 00000246 [ 1707.686688] 0 [ 1707.689762] ORIG_RAX: 0000000000000010 [ 1707.700827] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1707.704779] 0 [ 1707.708072] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1707.708077] 0 [ 1707.709853] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1707.724775] 0 [ 1707.726117] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1707.726122] 0 [ 1707.727898] R13: 00007ffcaf60874f R14: 00007fd699bc5300 R15: 0000000000022000 [ 1707.737064] lowmem_reserve[]: 0 0 0 0 0 [ 1707.752992] CPU: 1 PID: 30326 Comm: syz-executor.5 Not tainted 4.14.232-syzkaller #0 [ 1707.754736] Node 0 [ 1707.760875] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1707.760879] Call Trace: [ 1707.760897] dump_stack+0x1b2/0x281 [ 1707.760911] warn_alloc.cold+0x96/0x1cc [ 1707.760924] ? zone_watermark_ok_safe+0x220/0x220 [ 1707.760933] ? usleep_range+0x130/0x130 [ 1707.760944] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1707.772122] DMA: [ 1707.772510] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1707.775088] 6*4kB [ 1707.778669] ? run_timer_softirq+0x5a0/0x5a0 [ 1707.782610] (UME) [ 1707.787442] __alloc_pages_nodemask+0x2127/0x2720 [ 1707.787458] ? lock_acquire+0x170/0x3f0 [ 1707.787475] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1707.787485] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1707.787501] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1707.787520] alloc_pages_current+0x155/0x260 [ 1707.800573] 6*8kB [ 1707.803592] ion_page_pool_alloc+0x118/0x1b0 [ 1707.807610] (UME) [ 1707.810107] ion_system_heap_allocate+0x133/0x8c0 [ 1707.812227] 3*16kB [ 1707.817049] ? _raw_spin_unlock+0x29/0x40 [ 1707.817058] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1707.817067] ? ion_system_contig_heap_create+0x130/0x130 [ 1707.817077] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1707.817089] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1707.817100] ion_alloc+0x27a/0x810 [ 1707.817112] ? ion_dma_buf_release+0x40/0x40 [ 1707.817124] ? __might_fault+0x177/0x1b0 [ 1707.829969] (M) [ 1707.830371] ion_ioctl+0xea/0x1f0 [ 1707.837536] 25*32kB [ 1707.840184] ? ion_query_heaps+0x360/0x360 [ 1707.842305] (UME) [ 1707.846692] ? ion_query_heaps+0x360/0x360 [ 1707.846703] do_vfs_ioctl+0x75a/0xff0 [ 1707.846715] ? ioctl_preallocate+0x1a0/0x1a0 [ 1707.846723] ? lock_downgrade+0x740/0x740 [ 1707.846738] ? __fget+0x225/0x360 [ 1707.846746] ? do_vfs_ioctl+0xff0/0xff0 [ 1707.846756] ? security_file_ioctl+0x83/0xb0 [ 1707.846768] SyS_ioctl+0x7f/0xb0 [ 1707.857881] 9*64kB [ 1707.860093] ? do_vfs_ioctl+0xff0/0xff0 [ 1707.868604] (UME) [ 1707.870421] do_syscall_64+0x1d5/0x640 [ 1707.880655] 10*128kB [ 1707.883751] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1707.891653] (UME) [ 1707.892166] RIP: 0033:0x4665f9 [ 1707.894115] 6*256kB [ 1707.897537] RSP: 002b:00007f87ada6b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1707.897546] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1707.897569] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1707.897574] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1707.897579] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1707.897584] R13: 00007fff979d8a6f R14: 00007f87ada6b300 R15: 0000000000022000 [ 1707.916543] (UME) [ 1707.925903] Node 0 [ 1707.930174] 3*512kB [ 1707.930569] DMA: [ 1707.936854] (UE) [ 1707.946700] 6*4kB [ 1707.950289] 3*1024kB [ 1707.950595] (UME) [ 1707.952980] (UME) [ 1707.966722] 6*8kB [ 1707.979150] 1*2048kB [ 1707.988042] (UME) [ 1707.988211] (E) [ 1708.003666] 3*16kB [ 1708.015393] 0*4096kB [ 1708.025155] (M) [ 1708.028936] = 10968kB [ 1708.029647] 25*32kB [ 1708.031643] Node 0 [ 1708.034026] (UME) [ 1708.037866] DMA32: [ 1708.047070] 9*64kB [ 1708.050941] 960*4kB [ 1708.051747] (UME) [ 1708.053888] (ME) [ 1708.057953] 10*128kB [ 1708.063409] 505*8kB [ 1708.068556] (UME) 6*256kB (UME) 3*512kB (UE) 3*1024kB (UME) 1*2048kB (E) 0*4096kB = 10968kB [ 1708.071268] (UME) [ 1708.081527] Node 0 DMA32: 960*4kB (ME) 505*8kB (UME) 81*16kB (UME) 25*32kB (UME) 26*64kB (M) 15*128kB (UM) 16*256kB (UM) 1*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 18168kB [ 1708.088506] 81*16kB (UME) 25*32kB (UME) 26*64kB (M) 15*128kB (UM) 16*256kB (UM) 1*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 18168kB [ 1708.105006] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1708.125611] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB [ 1708.132792] warn_alloc_show_mem: 1 callbacks suppressed [ 1708.132796] Mem-Info: [ 1708.148868] 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1708.153169] Node 1 [ 1708.153974] Node 1 [ 1708.153980] Normal: 13*4kB (UM) 3*8kB (UM) 3*16kB (UME) 8*32kB (UME) 11*64kB (UM) 43*128kB (UM) 78*256kB (UM) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 26556kB [ 1708.160975] Normal: [ 1708.172502] active_anon:15025 inactive_anon:28343 isolated_anon:0 [ 1708.172502] active_file:15 inactive_file:14 isolated_file:0 [ 1708.172502] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1708.172502] slab_reclaimable:12380 slab_unreclaimable:118209 [ 1708.172502] mapped:52910 shmem:29460 pagetables:816 bounce:0 [ 1708.172502] free:13903 free_pcp:5 free_cma:0 [ 1708.172517] Node 0 active_anon:59192kB inactive_anon:78104kB active_file:56kB inactive_file:52kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:111844kB dirty:0kB writeback:0kB shmem:82364kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1708.172530] Node 1 active_anon:908kB inactive_anon:35268kB active_file:4kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:99796kB dirty:0kB writeback:0kB shmem:35476kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1708.172534] Node 0 DMA free:10968kB min:204kB low:252kB high:300kB active_anon:12kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1708.172552] lowmem_reserve[]: [ 1708.183916] 13*4kB [ 1708.213511] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1708.246755] (UM) [ 1708.268262] 0 [ 1708.297874] 3*8kB [ 1708.308902] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1708.313473] (UM) [ 1708.326683] 2717 2718 2718 2718 [ 1708.340827] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1708.350343] 3*16kB (UME) 8*32kB (UME) 11*64kB (UM) 43*128kB (UM) 78*256kB (UM) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 26556kB [ 1708.353410] Node 0 [ 1708.374765] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1708.394903] DMA32 free:36196kB min:36200kB low:45248kB high:54296kB active_anon:59180kB inactive_anon:78104kB active_file:28kB inactive_file:236kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7520kB pagetables:2860kB bounce:0kB free_pcp:660kB local_pcp:0kB free_cma:0kB [ 1708.436312] 29524 total pagecache pages [ 1708.440289] 0 pages in swap cache [ 1708.443730] Swap cache stats: add 0, delete 0, find 0/0 [ 1708.456015] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1708.494383] Free swap = 0kB [ 1708.495149] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1708.511994] Total swap = 0kB [ 1708.524902] 2097051 pages RAM [ 1708.527999] 0 pages HighMem/MovableOnly [ 1708.531956] 363849 pages reserved [ 1708.536700] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1708.540320] lowmem_reserve[]: [ 1708.559204] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1708.560346] 0 [ 1708.562306] 29524 total pagecache pages [ 1708.599299] 0 pages cma reserved [ 1708.604900] 0 pages in swap cache [ 1708.608350] Swap cache stats: add 0, delete 0, find 0/0 [ 1708.608907] 0 [ 1708.613688] Free swap = 0kB [ 1708.613694] 0 [ 1708.615513] Total swap = 0kB [ 1708.634746] 0 0 [ 1708.656750] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1708.668074] 2097051 pages RAM [ 1708.682362] lowmem_reserve[]: 0 0 0 0 0 [ 1708.724739] Node 1 Normal free:248156kB min:53696kB low:67120kB high:80544kB active_anon:908kB inactive_anon:35268kB active_file:0kB inactive_file:76kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:544kB pagetables:404kB bounce:0kB free_pcp:40kB local_pcp:40kB free_cma:0kB [ 1708.728088] 0 pages HighMem/MovableOnly [ 1708.774742] lowmem_reserve[]: 0 0 0 0 0 [ 1708.784906] 363849 pages reserved [ 1708.788355] 0 pages cma reserved [ 1708.791717] Out of memory (oom_kill_allocating_task): Kill process 29317 (systemd-journal) score 0 or sacrifice child [ 1708.794738] Node 0 DMA: 6*4kB (UME) 6*8kB (UME) 3*16kB (M) 25*32kB (UME) 17*64kB (UME) 10*128kB (UME) 6*256kB (UME) [ 1708.802514] Killed process 29317 (systemd-journal) total-vm:46096kB, anon-rss:476kB, file-rss:4kB, shmem-rss:2744kB [ 1708.802516] 3*512kB (UE) [ 1708.819690] oom_reaper: reaped process 30327 (syz-executor.4), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1708.837452] oom_reaper: reaped process 29317 (systemd-journal), now anon-rss:0kB, file-rss:0kB, shmem-rss:2744kB [ 1708.878080] 3*1024kB (UME) 1*2048kB (E) 0*4096kB = 11480kB [ 1708.884522] Node 0 DMA32: 1836*4kB (UME) 2469*8kB (UME) 5783*16kB (UME) 1138*32kB (UME) 373*64kB (UME) 160*128kB (UM) 16*256kB (UM) 2*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 205512kB [ 1708.935277] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1708.965444] Node 1 Normal: 4432*4kB (UM) 2*8kB (UM) 3*16kB (UME) 3*32kB (UME) 2944*64kB (UM) 264*128kB (UM) 93*256kB (UM) 0*512kB 2*1024kB (U) 0*2048kB 0*4096kB = 265952kB [ 1708.982427] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1708.994925] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1709.027925] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1709.054819] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1709.074112] 31135 total pagecache pages 22:12:25 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$unix(0x1, 0x2, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x80000000, 0x6}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000280)=ANY=[@ANYBLOB="40000000d05dfd0cf6aadfcd1c2c8204548f7ad25fb20c9fc1b948acee1bf738a8e2f89ba8ad644647776e1929696b34254e5dffa31fab7db2587004efe13e6e76fca3797168ba0ca323227067252996e8b160c2bec95a5f9f90491af03c1f501e1720021bfe4f682947ba1614a12e86a754", @ANYRES16=0x0, @ANYBLOB="000328bd7000ffdbdf2502000000080011000000000006000200010000000c0010000000000001000000050014001f00000008000b0000000000"], 0x40}, 0x1, 0x0, 0x0, 0xc000}, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) 22:12:25 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$unix(0x1, 0x2, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x80000000, 0x6}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000280)=ANY=[@ANYBLOB="40000000d05dfd0cf6aadfcd1c2c8204548f7ad25fb20c9fc1b948acee1bf738a8e2f89ba8ad644647776e1929696b34254e5dffa31fab7db2587004efe13e6e76fca3797168ba0ca323227067252996e8b160c2bec95a5f9f90491af03c1f501e1720021bfe4f682947ba1614a12e86a754", @ANYRES16=0x0, @ANYBLOB="000328bd7000ffdbdf2502000000080011000000000006000200010000000c0010000000000001000000050014001f00000008000b0000000000"], 0x40}, 0x1, 0x0, 0x0, 0xc000}, 0x8000) [ 1709.078239] 0 pages in swap cache [ 1709.094348] Swap cache stats: add 0, delete 0, find 0/0 [ 1709.112802] Free swap = 0kB [ 1709.116736] Total swap = 0kB 22:12:25 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) sendmsg$unix(r1, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x80000000, 0x6}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) [ 1709.134914] 2097051 pages RAM [ 1709.149324] 0 pages HighMem/MovableOnly [ 1709.159549] 363849 pages reserved [ 1709.163324] 0 pages cma reserved [ 1709.213521] systemd[1]: systemd-journald.service: Failed with result 'signal'. [ 1709.233100] systemd[1]: systemd-journald.service: Service has no hold-off time, scheduling restart. [ 1709.296761] systemd[1]: Stopped Journal Service. [ 1709.379598] systemd[1]: Starting Journal Service... [ 1709.390529] syz-executor.4: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1709.411825] syz-executor.1: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1709.411871] syz-executor.5: [ 1709.434719] syz-executor.3: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1709.446215] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 1709.450900] syz-executor.4 cpuset= [ 1709.458399] page allocation failure: order:4 [ 1709.463491] / [ 1709.467497] CPU: 1 PID: 30346 Comm: syz-executor.1 Not tainted 4.14.232-syzkaller #0 [ 1709.477465] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1709.486796] Call Trace: [ 1709.489366] dump_stack+0x1b2/0x281 [ 1709.492984] warn_alloc.cold+0x96/0x1cc [ 1709.496938] ? zone_watermark_ok_safe+0x220/0x220 [ 1709.501767] __alloc_pages_nodemask+0x2127/0x2720 [ 1709.506713] ? lock_acquire+0x170/0x3f0 [ 1709.510672] ? lock_acquire+0x170/0x3f0 [ 1709.514638] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1709.519467] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1709.524925] ? __mutex_unlock_slowpath+0x75/0x770 [ 1709.529750] alloc_pages_current+0x155/0x260 [ 1709.534137] ion_page_pool_alloc+0x118/0x1b0 [ 1709.538525] ion_system_heap_allocate+0x133/0x8c0 [ 1709.543342] ? ion_alloc+0x187/0x810 [ 1709.547042] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1709.552468] ? ion_system_contig_heap_create+0x130/0x130 [ 1709.557894] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1709.562896] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1709.567717] ion_alloc+0x204/0x810 [ 1709.571235] ? ion_dma_buf_release+0x40/0x40 [ 1709.575625] ? __might_fault+0x177/0x1b0 [ 1709.579663] ion_ioctl+0xea/0x1f0 [ 1709.583092] ? ion_query_heaps+0x360/0x360 [ 1709.587425] ? ion_query_heaps+0x360/0x360 [ 1709.591637] do_vfs_ioctl+0x75a/0xff0 [ 1709.595416] ? ioctl_preallocate+0x1a0/0x1a0 [ 1709.599798] ? lock_downgrade+0x740/0x740 [ 1709.603923] ? __fget+0x225/0x360 [ 1709.607352] ? do_vfs_ioctl+0xff0/0xff0 [ 1709.611302] ? security_file_ioctl+0x83/0xb0 [ 1709.615689] SyS_ioctl+0x7f/0xb0 [ 1709.619032] ? do_vfs_ioctl+0xff0/0xff0 [ 1709.622986] do_syscall_64+0x1d5/0x640 [ 1709.626853] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1709.632019] RIP: 0033:0x4665f9 [ 1709.635185] RSP: 002b:00007fd699bc5188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1709.642867] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1709.650125] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1709.657370] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1709.664612] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1709.671859] R13: 00007ffcaf60874f R14: 00007fd699bc5300 R15: 0000000000022000 [ 1709.684684] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 1709.689809] CPU: 0 PID: 30345 Comm: syz-executor.3 Not tainted 4.14.232-syzkaller #0 [ 1709.697679] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1709.707021] Call Trace: [ 1709.709607] dump_stack+0x1b2/0x281 [ 1709.713238] warn_alloc.cold+0x96/0x1cc [ 1709.717213] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1709.722227] ? zone_watermark_ok_safe+0x220/0x220 [ 1709.727078] __alloc_pages_nodemask+0x2127/0x2720 [ 1709.731923] ? lock_acquire+0x170/0x3f0 [ 1709.735898] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1709.740759] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1709.746215] ? __mutex_unlock_slowpath+0x75/0x770 [ 1709.751051] ? retint_kernel+0x2d/0x2d [ 1709.754935] alloc_pages_current+0x155/0x260 [ 1709.759342] ion_page_pool_alloc+0x118/0x1b0 [ 1709.763735] ion_system_heap_allocate+0x133/0x8c0 [ 1709.768555] ? ion_alloc+0x187/0x810 [ 1709.772246] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1709.777675] ? ion_system_contig_heap_create+0x130/0x130 [ 1709.783105] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1709.788100] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1709.792945] ion_alloc+0x204/0x810 [ 1709.796465] ? ion_dma_buf_release+0x40/0x40 [ 1709.800853] ? __might_fault+0x177/0x1b0 [ 1709.804891] ion_ioctl+0xea/0x1f0 [ 1709.808334] ? ion_query_heaps+0x360/0x360 [ 1709.812547] ? ion_query_heaps+0x360/0x360 [ 1709.816762] do_vfs_ioctl+0x75a/0xff0 [ 1709.820541] ? ioctl_preallocate+0x1a0/0x1a0 [ 1709.824938] ? lock_downgrade+0x740/0x740 [ 1709.829063] ? __fget+0x225/0x360 [ 1709.832491] ? do_vfs_ioctl+0xff0/0xff0 [ 1709.836443] ? security_file_ioctl+0x83/0xb0 [ 1709.840827] SyS_ioctl+0x7f/0xb0 [ 1709.844169] ? do_vfs_ioctl+0xff0/0xff0 [ 1709.848120] do_syscall_64+0x1d5/0x640 [ 1709.851986] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1709.857166] RIP: 0033:0x4665f9 [ 1709.860328] RSP: 002b:00007fd613a46188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1709.868024] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1709.875268] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1709.882512] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1709.889759] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1709.897009] R13: 00007ffce81deb9f R14: 00007fd613a46300 R15: 0000000000022000 [ 1709.915430] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1709.923363] mems_allowed=0-1 [ 1709.934277] CPU: 0 PID: 30327 Comm: syz-executor.4 Not tainted 4.14.232-syzkaller #0 [ 1709.942155] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1709.951496] Call Trace: [ 1709.954082] dump_stack+0x1b2/0x281 [ 1709.957708] warn_alloc.cold+0x96/0x1cc [ 1709.961681] ? zone_watermark_ok_safe+0x220/0x220 [ 1709.966533] __alloc_pages_nodemask+0x2127/0x2720 [ 1709.971376] ? lock_acquire+0x170/0x3f0 [ 1709.975348] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1709.980192] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1709.985659] ? __mutex_unlock_slowpath+0x75/0x770 [ 1709.990504] alloc_pages_current+0x155/0x260 [ 1709.994910] ion_page_pool_alloc+0x118/0x1b0 [ 1709.999317] ion_system_heap_allocate+0x133/0x8c0 [ 1710.004154] ? _raw_spin_unlock+0x29/0x40 [ 1710.008293] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1710.013214] ? ion_system_contig_heap_create+0x130/0x130 [ 1710.018658] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1710.023677] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1710.028514] ion_alloc+0x27a/0x810 [ 1710.032052] ? ion_dma_buf_release+0x40/0x40 [ 1710.036456] ? __might_fault+0x177/0x1b0 [ 1710.040505] ion_ioctl+0xea/0x1f0 [ 1710.043938] ? ion_query_heaps+0x360/0x360 [ 1710.048151] ? ion_query_heaps+0x360/0x360 [ 1710.052364] do_vfs_ioctl+0x75a/0xff0 [ 1710.056143] ? ioctl_preallocate+0x1a0/0x1a0 [ 1710.060529] ? lock_downgrade+0x740/0x740 [ 1710.064657] ? __fget+0x225/0x360 [ 1710.068090] ? do_vfs_ioctl+0xff0/0xff0 [ 1710.072041] ? security_file_ioctl+0x83/0xb0 [ 1710.076428] SyS_ioctl+0x7f/0xb0 [ 1710.079771] ? do_vfs_ioctl+0xff0/0xff0 [ 1710.083721] do_syscall_64+0x1d5/0x640 [ 1710.087604] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1710.092771] RIP: 0033:0x4665f9 [ 1710.095948] RSP: 002b:00007f631d70d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1710.103633] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1710.110898] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1710.118145] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1710.125393] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1710.132766] R13: 00007ffd7ec795cf R14: 00007f631d70d300 R15: 0000000000022000 [ 1710.151508] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 1710.152375] warn_alloc_show_mem: 1 callbacks suppressed [ 1710.152378] Mem-Info: [ 1710.157197] CPU: 0 PID: 30347 Comm: syz-executor.5 Not tainted 4.14.232-syzkaller #0 [ 1710.163479] active_anon:15056 inactive_anon:28342 isolated_anon:0 [ 1710.163479] active_file:118 inactive_file:109 isolated_file:18 [ 1710.163479] unevictable:0 dirty:66 writeback:0 unstable:0 [ 1710.163479] slab_reclaimable:12390 slab_unreclaimable:117264 [ 1710.163479] mapped:43664 shmem:29460 pagetables:843 bounce:0 [ 1710.163479] free:25085 free_pcp:0 free_cma:0 [ 1710.164622] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1710.164626] Call Trace: [ 1710.164641] dump_stack+0x1b2/0x281 [ 1710.164655] warn_alloc.cold+0x96/0x1cc [ 1710.164671] ? zone_watermark_ok_safe+0x220/0x220 [ 1710.164695] __alloc_pages_nodemask+0x2127/0x2720 [ 1710.164711] ? lock_acquire+0x170/0x3f0 [ 1710.164727] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1710.164745] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1710.164757] ? __mutex_unlock_slowpath+0x75/0x770 [ 1710.164767] ? cache_alloc_refill+0x1da/0x350 [ 1710.164782] alloc_pages_current+0x155/0x260 [ 1710.173145] Node 0 active_anon:59344kB inactive_anon:78100kB active_file:448kB inactive_file:436kB unevictable:0kB isolated(anon):0kB isolated(file):72kB mapped:106460kB dirty:256kB writeback:0kB shmem:82364kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1710.206121] ion_page_pool_alloc+0x118/0x1b0 [ 1710.206132] ion_system_heap_allocate+0x133/0x8c0 [ 1710.206141] ? ion_alloc+0x187/0x810 [ 1710.206151] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1710.206166] ? ion_system_contig_heap_create+0x130/0x130 [ 1710.215568] Node 1 active_anon:880kB inactive_anon:35268kB active_file:24kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:68196kB dirty:8kB writeback:0kB shmem:35476kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1710.218067] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1710.218079] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1710.218090] ion_alloc+0x204/0x810 [ 1710.221730] Node 0 [ 1710.225662] ? ion_dma_buf_release+0x40/0x40 [ 1710.225675] ? __might_fault+0x177/0x1b0 [ 1710.225686] ion_ioctl+0xea/0x1f0 [ 1710.225695] ? ion_query_heaps+0x360/0x360 [ 1710.230563] DMA free:11032kB min:204kB low:252kB high:300kB active_anon:12kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1710.235332] ? ion_query_heaps+0x360/0x360 [ 1710.235343] do_vfs_ioctl+0x75a/0xff0 [ 1710.235354] ? ioctl_preallocate+0x1a0/0x1a0 [ 1710.235364] ? lock_downgrade+0x740/0x740 [ 1710.239340] lowmem_reserve[]: [ 1710.244139] ? __fget+0x225/0x360 [ 1710.244148] ? do_vfs_ioctl+0xff0/0xff0 [ 1710.244159] ? security_file_ioctl+0x83/0xb0 [ 1710.244169] SyS_ioctl+0x7f/0xb0 [ 1710.250487] 0 [ 1710.254414] ? do_vfs_ioctl+0xff0/0xff0 [ 1710.254427] do_syscall_64+0x1d5/0x640 [ 1710.254441] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1710.258949] 2717 [ 1710.263290] RIP: 0033:0x4665f9 [ 1710.263295] RSP: 002b:00007f87ada6b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1710.263305] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1710.263314] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1710.292202] 2718 [ 1710.295697] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1710.295702] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1710.295707] R13: 00007fff979d8a6f R14: 00007f87ada6b300 R15: 0000000000022000 [ 1710.385600] oom_reaper: reaped process 30338 (syz-executor.2), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1710.400635] 2718 [ 1710.509358] rs:main Q:Reg invoked oom-killer: gfp_mask=0x1c200ca(GFP_HIGHUSER_MOVABLE|__GFP_WRITE), nodemask= [ 1710.511593] 2718 [ 1710.513446] (null) [ 1710.523509] Node 0 DMA32 free:17872kB min:36200kB low:45248kB high:54296kB active_anon:59228kB inactive_anon:78100kB active_file:512kB inactive_file:132kB unevictable:0kB writepending:96kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7744kB pagetables:2968kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1710.529076] , order=0, oom_score_adj=0 [ 1710.557139] lowmem_reserve[]: 0 0 0 0 0 [ 1710.557161] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1710.557179] lowmem_reserve[]: 0 0 0 0 0 [ 1710.557198] Node 1 Normal free:26348kB min:53696kB low:67120kB high:80544kB active_anon:880kB inactive_anon:35268kB active_file:16kB inactive_file:0kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:544kB pagetables:404kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1710.557217] lowmem_reserve[]: 0 0 0 0 0 [ 1710.557235] Node 0 DMA: 6*4kB (UME) 5*8kB (ME) 4*16kB (UM) 23*32kB (UME) 10*64kB (UME) 10*128kB (UME) 6*256kB (UME) 3*512kB (UE) 3*1024kB (UME) 1*2048kB (E) 0*4096kB = 10976kB [ 1710.557305] Node 0 DMA32: 920*4kB (UME) 462*8kB (ME) 66*16kB (UME) 194*32kB (UME) 31*64kB (UM) 10*128kB (UM) 2*256kB (M) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18416kB [ 1710.557389] Node 0 Normal: 0*4kB 0*8kB 0*16kB [ 1710.589725] rs:main Q:Reg cpuset= [ 1710.590960] 0*32kB [ 1710.602933] / [ 1710.623051] 0*64kB [ 1710.648592] mems_allowed=0-1 [ 1710.690781] 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1710.704335] Node 1 Normal: 31*4kB (UM) 1*8kB (M) 1102*16kB (UE) 273*32kB (UE) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 26500kB [ 1710.767188] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1710.798593] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1710.832518] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1710.854258] syz-executor.4: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1710.886379] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1710.894041] CPU: 0 PID: 30318 Comm: rs:main Q:Reg Not tainted 4.14.232-syzkaller #0 [ 1710.900157] 29513 total pagecache pages [ 1710.902733] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1710.906712] 0 pages in swap cache [ 1710.916011] Call Trace: [ 1710.916030] dump_stack+0x1b2/0x281 [ 1710.916043] dump_header+0x178/0x82f [ 1710.919464] Swap cache stats: add 0, delete 0, find 0/0 [ 1710.919469] Free swap = 0kB [ 1710.922033] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1710.925642] Total swap = 0kB [ 1710.929320] ? ___ratelimit+0x2cd/0x530 [ 1710.934667] 2097051 pages RAM [ 1710.937649] oom_kill_process.cold+0x10/0xa40 [ 1710.942721] 0 pages HighMem/MovableOnly [ 1710.945725] out_of_memory+0xe3e/0x1190 [ 1710.945738] ? oom_killer_disable+0x1c0/0x1c0 [ 1710.949680] 363849 pages reserved [ 1710.952762] ? mutex_trylock+0x152/0x1a0 [ 1710.957241] 0 pages cma reserved [ 1710.961179] __alloc_pages_nodemask+0x23e1/0x2720 [ 1710.967250] syz-executor.4 cpuset= [ 1710.969603] ? trace_hardirqs_on+0x10/0x10 [ 1710.973026] / [ 1710.977068] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1710.980428] mems_allowed=0-1 [ 1710.985221] ? __radix_tree_lookup+0x1b5/0x2e0 [ 1710.985243] alloc_pages_current+0x155/0x260 [ 1711.011475] pagecache_get_page+0x3f5/0xab0 [ 1711.015776] grab_cache_page_write_begin+0x63/0x90 [ 1711.020684] ext4_da_write_begin+0x249/0xe70 [ 1711.025070] ? __ext4_journal_stop+0xe7/0x1b0 [ 1711.029549] ? ext4_write_begin+0x1260/0x1260 [ 1711.034037] ? balance_dirty_pages_ratelimited+0x87a/0x1800 [ 1711.039728] generic_perform_write+0x1c9/0x420 [ 1711.044288] ? __mnt_drop_write_file+0x5f/0x90 [ 1711.048859] ? filemap_page_mkwrite+0x2d0/0x2d0 [ 1711.053501] ? current_time+0xb0/0xb0 [ 1711.057276] ? ext4_file_write_iter+0x1cc/0xd20 [ 1711.061923] __generic_file_write_iter+0x227/0x590 [ 1711.066832] ext4_file_write_iter+0x276/0xd20 [ 1711.071306] ? aa_file_perm+0x304/0xab0 [ 1711.075257] ? trace_hardirqs_on+0x10/0x10 [ 1711.079469] ? ext4_file_read_iter+0x330/0x330 [ 1711.084036] ? trace_hardirqs_on+0x10/0x10 [ 1711.088245] ? iov_iter_init+0xa6/0x1c0 [ 1711.092194] __vfs_write+0x44c/0x630 [ 1711.095884] ? kernel_read+0x110/0x110 [ 1711.099754] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1711.104749] vfs_write+0x17f/0x4d0 [ 1711.108265] SyS_write+0xf2/0x210 [ 1711.111695] ? SyS_read+0x210/0x210 [ 1711.115298] ? __do_page_fault+0x159/0xad0 [ 1711.119509] ? do_syscall_64+0x4c/0x640 [ 1711.123455] ? SyS_read+0x210/0x210 [ 1711.127058] do_syscall_64+0x1d5/0x640 [ 1711.130923] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1711.136098] RIP: 0033:0x7f8a2c2091cd [ 1711.139784] RSP: 002b:00007f8a297c4590 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 1711.147467] RAX: ffffffffffffffda RBX: 00007f8a20026f50 RCX: 00007f8a2c2091cd [ 1711.154713] RDX: 0000000000000f65 RSI: 00007f8a20026f50 RDI: 0000000000000008 [ 1711.161960] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1711.169219] R10: 0000000000000000 R11: 0000000000000293 R12: 00007f8a20026cd0 [ 1711.176487] R13: 00007f8a297c45b0 R14: 000055ee9ab00800 R15: 0000000000000f65 [ 1711.183748] CPU: 1 PID: 30327 Comm: syz-executor.4 Not tainted 4.14.232-syzkaller #0 [ 1711.191625] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1711.200976] Call Trace: [ 1711.202963] Mem-Info: [ 1711.203549] dump_stack+0x1b2/0x281 [ 1711.209554] warn_alloc.cold+0x96/0x1cc [ 1711.213527] ? zone_watermark_ok_safe+0x220/0x220 [ 1711.216324] syz-executor.2: [ 1711.218354] ? usleep_range+0x130/0x130 [ 1711.218356] page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1711.221357] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1711.240336] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1711.241943] active_anon:15033 inactive_anon:28342 isolated_anon:0 [ 1711.241943] active_file:15 inactive_file:17 isolated_file:0 [ 1711.241943] unevictable:0 dirty:2 writeback:0 unstable:0 [ 1711.241943] slab_reclaimable:12390 slab_unreclaimable:117243 [ 1711.241943] mapped:43521 shmem:29460 pagetables:844 bounce:0 [ 1711.241943] free:13989 free_pcp:0 free_cma:0 [ 1711.245339] ? run_timer_softirq+0x5a0/0x5a0 [ 1711.245357] __alloc_pages_nodemask+0x2127/0x2720 [ 1711.245373] ? lock_acquire+0x170/0x3f0 [ 1711.245390] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1711.245400] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1711.245427] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1711.300578] (null) [ 1711.301008] ? retint_kernel+0x2d/0x2d [ 1711.312442] alloc_pages_current+0x155/0x260 [ 1711.316845] ion_page_pool_alloc+0x118/0x1b0 [ 1711.321246] ion_system_heap_allocate+0x133/0x8c0 [ 1711.322700] syz-executor.2 cpuset= [ 1711.326079] ? _raw_spin_unlock+0x29/0x40 [ 1711.326088] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1711.326097] ? ion_system_contig_heap_create+0x130/0x130 [ 1711.326107] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1711.326118] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1711.326127] ion_alloc+0x27a/0x810 [ 1711.326138] ? ion_dma_buf_release+0x40/0x40 [ 1711.349660] / [ 1711.353932] ? __might_fault+0x177/0x1b0 [ 1711.367583] ion_ioctl+0xea/0x1f0 [ 1711.371035] ? ion_query_heaps+0x360/0x360 [ 1711.373852] mems_allowed=0-1 [ 1711.375257] ? ion_query_heaps+0x360/0x360 [ 1711.375267] do_vfs_ioctl+0x75a/0xff0 [ 1711.375279] ? ioctl_preallocate+0x1a0/0x1a0 [ 1711.375288] ? lock_downgrade+0x740/0x740 [ 1711.375301] ? __fget+0x225/0x360 [ 1711.375310] ? do_vfs_ioctl+0xff0/0xff0 [ 1711.402293] ? security_file_ioctl+0x83/0xb0 [ 1711.406715] SyS_ioctl+0x7f/0xb0 [ 1711.410072] ? do_vfs_ioctl+0xff0/0xff0 [ 1711.414037] do_syscall_64+0x1d5/0x640 [ 1711.417919] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1711.423093] RIP: 0033:0x4665f9 [ 1711.426263] RSP: 002b:00007f631d70d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1711.433960] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1711.441244] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1711.448500] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1711.455758] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1711.463014] R13: 00007ffd7ec795cf R14: 00007f631d70d300 R15: 0000000000022000 [ 1711.473978] Node 0 active_anon:59244kB inactive_anon:78100kB active_file:52kB inactive_file:68kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:105892kB dirty:0kB writeback:0kB shmem:82364kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1711.500008] warn_alloc_show_mem: 3 callbacks suppressed [ 1711.500012] Mem-Info: [ 1711.533351] CPU: 0 PID: 30338 Comm: syz-executor.2 Not tainted 4.14.232-syzkaller #0 [ 1711.535138] active_anon:15033 inactive_anon:28342 isolated_anon:0 [ 1711.535138] active_file:15 inactive_file:17 isolated_file:0 [ 1711.535138] unevictable:0 dirty:2 writeback:0 unstable:0 [ 1711.535138] slab_reclaimable:12390 slab_unreclaimable:117243 [ 1711.535138] mapped:43521 shmem:29460 pagetables:844 bounce:0 [ 1711.535138] free:13958 free_pcp:30 free_cma:0 [ 1711.541240] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1711.574382] Node 0 active_anon:59244kB inactive_anon:78100kB active_file:52kB inactive_file:68kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:105892kB dirty:0kB writeback:0kB shmem:82364kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1711.583681] Call Trace: [ 1711.583697] dump_stack+0x1b2/0x281 [ 1711.583711] warn_alloc.cold+0x96/0x1cc [ 1711.611458] Node 1 active_anon:888kB inactive_anon:35268kB active_file:8kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:68192kB dirty:8kB writeback:0kB shmem:35476kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1711.614005] ? zone_watermark_ok_safe+0x220/0x220 [ 1711.617611] Node 0 [ 1711.621549] ? usleep_range+0x130/0x130 [ 1711.621561] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1711.648530] DMA free:10976kB min:204kB low:252kB high:300kB active_anon:12kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1711.653329] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1711.655550] lowmem_reserve[]: [ 1711.659487] ? run_timer_softirq+0x5a0/0x5a0 [ 1711.664571] 0 [ 1711.690131] __alloc_pages_nodemask+0x2127/0x2720 [ 1711.690147] ? lock_acquire+0x170/0x3f0 [ 1711.695139] 2717 [ 1711.698216] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1711.702587] 2718 [ 1711.704369] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1711.709190] 2718 [ 1711.713134] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1711.715174] 2718 [ 1711.719984] ? retint_kernel+0x2d/0x2d [ 1711.726494] alloc_pages_current+0x155/0x260 [ 1711.726506] ion_page_pool_alloc+0x118/0x1b0 [ 1711.728559] Node 0 [ 1711.733988] ion_system_heap_allocate+0x133/0x8c0 [ 1711.736048] DMA32 free:18356kB min:36200kB low:45248kB high:54296kB active_anon:59232kB inactive_anon:78100kB active_file:52kB inactive_file:68kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7744kB pagetables:2968kB bounce:0kB free_pcp:120kB local_pcp:120kB free_cma:0kB [ 1711.739894] ? ion_alloc+0x187/0x810 [ 1711.744283] lowmem_reserve[]: [ 1711.748669] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1711.748678] ? ion_system_contig_heap_create+0x130/0x130 [ 1711.748689] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1711.750909] 0 [ 1711.755738] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1711.755748] ion_alloc+0x204/0x810 [ 1711.755761] ? ion_dma_buf_release+0x40/0x40 [ 1711.784019] 0 [ 1711.787706] ? __might_fault+0x177/0x1b0 [ 1711.787718] ion_ioctl+0xea/0x1f0 [ 1711.790807] 0 [ 1711.796241] ? ion_query_heaps+0x360/0x360 [ 1711.796253] ? ion_query_heaps+0x360/0x360 [ 1711.796263] do_vfs_ioctl+0x75a/0xff0 [ 1711.801685] 0 [ 1711.806698] ? ioctl_preallocate+0x1a0/0x1a0 [ 1711.806706] ? lock_downgrade+0x740/0x740 [ 1711.806718] ? __fget+0x225/0x360 [ 1711.808492] 0 [ 1711.813310] ? do_vfs_ioctl+0xff0/0xff0 [ 1711.821207] ? security_file_ioctl+0x83/0xb0 [ 1711.822979] Node 0 [ 1711.827018] SyS_ioctl+0x7f/0xb0 [ 1711.827033] ? do_vfs_ioctl+0xff0/0xff0 [ 1711.830467] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1711.832240] do_syscall_64+0x1d5/0x640 [ 1711.836455] lowmem_reserve[]: [ 1711.840660] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1711.844427] 0 [ 1711.846209] RIP: 0033:0x4665f9 [ 1711.846214] RSP: 002b:00007fc1ab256188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1711.846225] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1711.850621] 0 [ 1711.854742] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1711.854747] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1711.854752] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1711.854761] R13: 00007ffd84742d3f R14: 00007fc1ab256300 R15: 0000000000022000 [ 1711.858187] 0 [ 1711.869477] Node 1 active_anon:888kB inactive_anon:35268kB active_file:8kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:68192kB dirty:8kB writeback:0kB shmem:35476kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1711.896840] 0 [ 1711.916189] Node 0 [ 1711.942433] 0 [ 1711.953597] DMA free:10976kB min:204kB low:252kB high:300kB active_anon:12kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1712.008000] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1712.042873] Node 0 DMA32 free:18356kB min:36200kB low:45248kB high:54296kB active_anon:59232kB inactive_anon:78100kB active_file:156kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7744kB pagetables:2968kB bounce:0kB free_pcp:144kB local_pcp:24kB free_cma:0kB [ 1712.054121] Node 1 [ 1712.082719] lowmem_reserve[]: 0 0 0 0 0 [ 1712.089026] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1712.101261] Normal free:26500kB min:53696kB low:67120kB high:80544kB active_anon:888kB inactive_anon:35268kB active_file:4kB inactive_file:4kB unevictable:0kB writepending:8kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:544kB pagetables:408kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1712.123674] lowmem_reserve[]: [ 1712.163983] lowmem_reserve[]: [ 1712.181439] 0 [ 1712.191269] 0 0 0 0 0 [ 1712.193150] 0 [ 1712.210525] Node 0 DMA: 6*4kB (UME) 5*8kB (ME) 4*16kB (UM) 23*32kB (UME) 10*64kB (UME) 10*128kB (UME) 6*256kB (UME) 3*512kB (UE) 3*1024kB (UME) 1*2048kB (E) 0*4096kB = 10976kB [ 1712.243531] Node 0 DMA32: 915*4kB (ME) 460*8kB (UME) 67*16kB (UME) 187*32kB (UME) 30*64kB (UM) 12*128kB (UM) 2*256kB (M) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18364kB [ 1712.253068] 0 [ 1712.273106] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1712.310053] Node 1 Normal: 31*4kB (UM) 1*8kB (M) 1102*16kB (UE) 273*32kB (UE) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 26500kB [ 1712.324298] 0 0 [ 1712.332053] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1712.342818] Node 1 Normal free:26500kB min:53696kB low:67120kB high:80544kB active_anon:888kB inactive_anon:35268kB active_file:4kB inactive_file:4kB unevictable:0kB writepending:8kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:544kB pagetables:408kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1712.351879] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1712.403923] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1712.404347] lowmem_reserve[]: [ 1712.423784] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1712.447076] 29492 total pagecache pages [ 1712.451055] 0 pages in swap cache [ 1712.461122] Swap cache stats: add 0, delete 0, find 0/0 [ 1712.470809] Free swap = 0kB [ 1712.473836] Total swap = 0kB [ 1712.483585] 2097051 pages RAM [ 1712.501670] 0 pages HighMem/MovableOnly [ 1712.505436] 0 0 0 0 0 [ 1712.508145] Node 0 DMA: 6*4kB (UME) 5*8kB (ME) 4*16kB (UM) 23*32kB (UME) 10*64kB (UME) 10*128kB (UME) 6*256kB (UME) 3*512kB (UE) 3*1024kB (UME) 1*2048kB (E) 0*4096kB = 10976kB [ 1712.511258] 363849 pages reserved [ 1712.539877] Node 0 DMA32: 915*4kB (ME) 460*8kB (UME) 67*16kB (UME) 187*32kB (UME) 30*64kB (UM) 12*128kB (UM) 2*256kB (M) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18364kB [ 1712.542252] Mem-Info: [ 1712.571889] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1712.600235] Node 1 Normal: 31*4kB (UM) 1*8kB (M) 1102*16kB (UE) 273*32kB (UE) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 26500kB [ 1712.604673] 0 pages cma reserved [ 1712.634174] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1712.636088] active_anon:15033 inactive_anon:28342 isolated_anon:0 [ 1712.636088] active_file:49 inactive_file:0 isolated_file:0 [ 1712.636088] unevictable:0 dirty:2 writeback:0 unstable:0 [ 1712.636088] slab_reclaimable:12390 slab_unreclaimable:117244 [ 1712.636088] mapped:43521 shmem:29460 pagetables:844 bounce:0 [ 1712.636088] free:13958 free_pcp:34 free_cma:0 [ 1712.661144] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1712.753871] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1712.771495] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1712.775241] Node 0 active_anon:59244kB inactive_anon:78100kB active_file:192kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:105892kB dirty:0kB writeback:0kB shmem:82364kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1712.832634] 31003 total pagecache pages [ 1712.850407] Node 1 active_anon:988kB inactive_anon:35268kB active_file:2472kB inactive_file:2132kB unevictable:0kB isolated(anon):0kB isolated(file):296kB mapped:72492kB dirty:8kB writeback:0kB shmem:35476kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1712.861548] 0 pages in swap cache [ 1712.879391] Node 0 DMA free:11096kB min:204kB low:252kB high:300kB active_anon:12kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1712.908446] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1712.913566] Node 0 DMA32 free:22432kB min:36200kB low:45248kB high:54296kB active_anon:59232kB inactive_anon:78100kB active_file:128kB inactive_file:32kB unevictable:0kB writepending:4kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7552kB pagetables:2968kB bounce:0kB free_pcp:24kB local_pcp:24kB free_cma:0kB [ 1712.926206] Swap cache stats: add 0, delete 0, find 0/0 [ 1712.943048] lowmem_reserve[]: 0 0 0 0 0 [ 1712.954552] Free swap = 0kB [ 1712.959920] Total swap = 0kB [ 1712.962993] 2097051 pages RAM [ 1712.966126] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1712.966146] lowmem_reserve[]: 0 0 0 0 0 [ 1712.966165] Node 1 Normal free:56576kB min:53696kB low:67120kB high:80544kB active_anon:1052kB inactive_anon:35268kB active_file:576kB inactive_file:544kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:544kB pagetables:412kB bounce:0kB free_pcp:1336kB local_pcp:628kB free_cma:0kB [ 1712.966185] lowmem_reserve[]: 0 0 0 0 0 [ 1712.966204] Node 0 DMA: 3*4kB (ME) 6*8kB (UME) 3*16kB (M) 22*32kB (UME) 13*64kB (UME) 10*128kB (UME) 6*256kB (UME) 3*512kB (UE) 3*1024kB (UME) 1*2048kB (E) [ 1712.998979] 0 pages HighMem/MovableOnly [ 1713.025538] 0*4096kB [ 1713.035611] 363849 pages reserved [ 1713.043570] = 11116kB [ 1713.059284] Node 0 DMA32: 1181*4kB (UME) 465*8kB (UME) 73*16kB (UME) 225*32kB (UME) 35*64kB (UME) 14*128kB (UM) 7*256kB (UM) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 22636kB [ 1713.060825] 0 pages cma reserved [ 1713.074694] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1713.094517] Out of memory (oom_kill_allocating_task): Kill process 30318 (rs:main Q:Reg) score 0 or sacrifice child [ 1713.094902] Node 1 [ 1713.105248] Killed process 30315 (rsyslogd) total-vm:254332kB, anon-rss:808kB, file-rss:0kB, shmem-rss:0kB [ 1713.121300] oom_reaper: reaped process 30315 (rsyslogd), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1713.124457] Normal: 34*4kB (UM) 6*8kB (UM) 6*16kB (U) 12*32kB (U) 693*64kB (U) 70*128kB (UM) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 53976kB [ 1713.150072] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1713.159248] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1713.172200] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1713.181110] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1713.193476] 29506 total pagecache pages [ 1713.198182] 0 pages in swap cache [ 1713.201644] Swap cache stats: add 0, delete 0, find 0/0 [ 1713.211443] Free swap = 0kB [ 1713.214524] Total swap = 0kB [ 1713.217559] 2097051 pages RAM [ 1713.220654] 0 pages HighMem/MovableOnly [ 1713.225268] 363849 pages reserved [ 1713.228709] 0 pages cma reserved 22:12:30 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = socket$unix(0x1, 0x0, 0x0) sendmsg$unix(r1, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x80000000, 0x6}) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_DELETE(r2, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000280)=ANY=[@ANYBLOB="40000000d05dfd0cf6aadfcd1c2c8204548f7ad25fb20c9fc1b948acee1bf738a8e2f89ba8ad644647776e1929696b34254e5dffa31fab7db2587004efe13e6e76fca3797168ba0ca323227067252996e8b160c2bec95a5f9f90491af03c1f501e1720021bfe4f682947ba1614a12e86a754", @ANYRES16=0x0, @ANYBLOB="000328bd7000ffdbdf2502000000080011000000000006000200010000000c0010000000000001000000050014001f00000008000b0000000000"], 0x40}, 0x1, 0x0, 0x0, 0xc000}, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) [ 1714.203908] systemd[1]: rsyslog.service: Main process exited, code=killed, status=9/KILL [ 1714.246642] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1714.253365] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1714.273878] systemd[1]: rsyslog.service: Unit entered failed state. [ 1714.318257] systemd[1]: rsyslog.service: Failed with result 'signal'. [ 1714.325661] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1714.332476] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1714.375380] device bridge_slave_1 left promiscuous mode [ 1714.380887] bridge0: port 2(bridge_slave_1) entered disabled state [ 1714.418173] device bridge_slave_0 left promiscuous mode [ 1714.419321] systemd[1]: Starting Load/Save RF Kill Switch Status... [ 1714.464647] bridge0: port 1(bridge_slave_0) entered disabled state [ 1714.473992] device veth1_macvtap left promiscuous mode [ 1714.478080] systemd[1]: rsyslog.service: Service hold-off time over, scheduling restart. [ 1714.497966] device veth0_macvtap left promiscuous mode [ 1714.503370] device veth1_vlan left promiscuous mode [ 1714.529792] systemd-journald[30355]: File /run/log/journal/04d8c135ee6b410280ba31a58c89679d/system.journal corrupted or uncleanly shut down, renaming and replacing. [ 1714.534411] device veth0_vlan left promiscuous mode [ 1714.546356] systemd[1]: Stopped System Logging Service. [ 1714.613001] systemd[1]: Starting System Logging Service... [ 1714.645092] systemd[1]: Started Load/Save RF Kill Switch Status. [ 1715.000388] device hsr_slave_1 left promiscuous mode [ 1715.039139] device hsr_slave_0 left promiscuous mode [ 1715.128563] team0 (unregistering): Port device team_slave_1 removed [ 1715.129508] systemd[1]: Started System Logging Service. [ 1715.168877] team0 (unregistering): Port device team_slave_0 removed [ 1715.217963] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 1715.280125] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 1715.314080] oom_reaper: reaped process 30346 (syz-executor.1), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1715.436573] systemd-journal invoked oom-killer: gfp_mask=0x14280ca(GFP_HIGHUSER_MOVABLE|__GFP_ZERO), nodemask=(null), order=0, oom_score_adj=0 [ 1715.461062] bond0 (unregistering): Released all slaves [ 1715.479988] systemd-journal cpuset=/ mems_allowed=0-1 [ 1715.499599] CPU: 1 PID: 30355 Comm: systemd-journal Not tainted 4.14.232-syzkaller #0 [ 1715.507566] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1715.516910] Call Trace: [ 1715.519490] dump_stack+0x1b2/0x281 [ 1715.523109] dump_header+0x178/0x82f [ 1715.524328] syz-executor.0: [ 1715.526807] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1715.526810] page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1715.529810] ? ___ratelimit+0x2cd/0x530 [ 1715.548721] oom_kill_process.cold+0x10/0xa40 [ 1715.553221] out_of_memory+0xe3e/0x1190 [ 1715.557191] ? oom_killer_disable+0x1c0/0x1c0 [ 1715.557675] (null) [ 1715.561679] ? mutex_trylock+0x152/0x1a0 [ 1715.563808] syz-executor.0 cpuset= [ 1715.567846] __alloc_pages_nodemask+0x23e1/0x2720 [ 1715.567866] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1715.567880] ? __lock_acquire+0x5fc/0x3f20 [ 1715.567895] alloc_pages_vma+0xd2/0x6d0 [ 1715.585422] / mems_allowed=0-1 [ 1715.589226] __handle_mm_fault+0x25fa/0x4620 [ 1715.589237] ? vm_insert_page+0x7c0/0x7c0 [ 1715.600931] ? __fsnotify_inode_delete+0x20/0x20 [ 1715.604311] syz-executor.1: page allocation failure: order:0 [ 1715.605672] ? __fsnotify_update_child_dentry_flags.part.0+0x2e0/0x2e0 [ 1715.605686] ? mark_held_locks+0xa6/0xf0 [ 1715.611558] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1715.618201] handle_mm_fault+0x455/0x9c0 [ 1715.618219] __do_page_fault+0x549/0xad0 [ 1715.618230] ? spurious_fault+0x640/0x640 [ 1715.618239] ? do_page_fault+0x60/0x500 [ 1715.618248] ? page_fault+0x2f/0x50 [ 1715.636042] (null) [ 1715.637523] page_fault+0x45/0x50 [ 1715.641641] syz-executor.1 cpuset= [ 1715.645590] RIP: fa21ffc8:0x7ffde14784e8 [ 1715.645595] RSP: fa9718a0:00007ffde14783a0 EFLAGS: 7ffde1478610 [ 1715.656030] syz-executor.2: [ 1715.664661] CPU: 0 PID: 30325 Comm: syz-executor.0 Not tainted 4.14.232-syzkaller #0 [ 1715.675031] page allocation failure: order:4 [ 1715.679411] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1715.679420] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1715.683794] Call Trace: [ 1715.693145] (null) [ 1715.700205] dump_stack+0x1b2/0x281 [ 1715.700222] warn_alloc.cold+0x96/0x1cc [ 1715.702778] syz-executor.2 cpuset= [ 1715.704909] ? zone_watermark_ok_safe+0x220/0x220 [ 1715.704918] ? usleep_range+0x130/0x130 [ 1715.704929] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1715.708527] / [ 1715.712478] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1715.716004] mems_allowed=0-1 [ 1715.720805] ? run_timer_softirq+0x5a0/0x5a0 [ 1715.743960] __alloc_pages_nodemask+0x2127/0x2720 [ 1715.748782] ? lock_acquire+0x170/0x3f0 [ 1715.752736] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1715.757555] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1715.762031] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1715.767465] alloc_pages_current+0x155/0x260 [ 1715.771862] ion_page_pool_alloc+0x118/0x1b0 [ 1715.776247] ion_system_heap_allocate+0x133/0x8c0 [ 1715.781065] ? ion_alloc+0x187/0x810 [ 1715.784770] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1715.790229] ? ion_system_contig_heap_create+0x130/0x130 [ 1715.795692] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1715.800692] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1715.805522] ion_alloc+0x204/0x810 [ 1715.809068] ? ion_dma_buf_release+0x40/0x40 [ 1715.813457] ? __might_fault+0x177/0x1b0 [ 1715.814276] Mem-Info: [ 1715.817500] ion_ioctl+0xea/0x1f0 [ 1715.819894] active_anon:15010 inactive_anon:30372 isolated_anon:0 [ 1715.819894] active_file:46 inactive_file:3 isolated_file:0 [ 1715.819894] unevictable:0 dirty:16 writeback:0 unstable:0 [ 1715.819894] slab_reclaimable:12442 slab_unreclaimable:115059 [ 1715.819894] mapped:52602 shmem:31504 pagetables:838 bounce:0 [ 1715.819894] free:13866 free_pcp:20 free_cma:0 [ 1715.823323] ? ion_query_heaps+0x360/0x360 [ 1715.860751] ? ion_query_heaps+0x360/0x360 [ 1715.864963] do_vfs_ioctl+0x75a/0xff0 [ 1715.868742] ? ioctl_preallocate+0x1a0/0x1a0 [ 1715.873126] ? lock_downgrade+0x740/0x740 [ 1715.877255] ? __fget+0x225/0x360 [ 1715.880694] ? do_vfs_ioctl+0xff0/0xff0 [ 1715.884647] ? security_file_ioctl+0x83/0xb0 [ 1715.889031] SyS_ioctl+0x7f/0xb0 [ 1715.892372] ? do_vfs_ioctl+0xff0/0xff0 [ 1715.896325] do_syscall_64+0x1d5/0x640 [ 1715.900191] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1715.904277] Node 0 active_anon:58400kB inactive_anon:78028kB active_file:44kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:107000kB dirty:60kB writeback:0kB shmem:82348kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1715.905359] RIP: 0033:0x4665f9 [ 1715.936079] RSP: 002b:00007fc8c6af5188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1715.943764] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1715.951022] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1715.954274] Node 1 active_anon:1640kB inactive_anon:43460kB active_file:140kB inactive_file:48kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:103408kB dirty:4kB writeback:0kB shmem:43668kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1715.958271] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1715.992810] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1716.000157] R13: 00007ffdd42e705f R14: 00007fc8c6af5300 R15: 0000000000022000 [ 1716.007417] CPU: 1 PID: 30338 Comm: syz-executor.2 Not tainted 4.14.232-syzkaller #0 [ 1716.015287] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1716.024629] Call Trace: [ 1716.027208] dump_stack+0x1b2/0x281 [ 1716.030828] warn_alloc.cold+0x96/0x1cc [ 1716.031815] / [ 1716.034813] ? zone_watermark_ok_safe+0x220/0x220 [ 1716.034833] mems_allowed=0-1 [ 1716.036523] __alloc_pages_nodemask+0x2127/0x2720 [ 1716.049249] ? lock_acquire+0x170/0x3f0 [ 1716.053212] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1716.058036] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1716.063466] ? __mutex_unlock_slowpath+0x75/0x770 [ 1716.068299] alloc_pages_current+0x155/0x260 [ 1716.072697] ion_page_pool_alloc+0x118/0x1b0 [ 1716.077086] ion_system_heap_allocate+0x133/0x8c0 [ 1716.081909] ? _raw_spin_unlock+0x29/0x40 [ 1716.086040] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1716.090961] ? ion_system_contig_heap_create+0x130/0x130 [ 1716.096398] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1716.101394] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1716.106222] ion_alloc+0x27a/0x810 [ 1716.109758] ? ion_dma_buf_release+0x40/0x40 [ 1716.114151] ? __might_fault+0x177/0x1b0 [ 1716.118200] ion_ioctl+0xea/0x1f0 [ 1716.121634] ? ion_query_heaps+0x360/0x360 [ 1716.125856] ? ion_query_heaps+0x360/0x360 [ 1716.130081] do_vfs_ioctl+0x75a/0xff0 [ 1716.133866] ? ioctl_preallocate+0x1a0/0x1a0 [ 1716.138255] ? lock_downgrade+0x740/0x740 [ 1716.142394] ? __fget+0x225/0x360 [ 1716.145835] ? do_vfs_ioctl+0xff0/0xff0 [ 1716.149802] ? security_file_ioctl+0x83/0xb0 [ 1716.152176] Node 0 DMA free:10964kB min:204kB low:252kB high:300kB active_anon:12kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1716.154212] SyS_ioctl+0x7f/0xb0 [ 1716.154221] ? do_vfs_ioctl+0xff0/0xff0 [ 1716.187698] do_syscall_64+0x1d5/0x640 [ 1716.191572] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1716.196743] RIP: 0033:0x4665f9 [ 1716.199919] RSP: 002b:00007fc1ab256188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1716.207610] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1716.214867] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1716.222121] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1716.229376] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1716.236638] R13: 00007ffd84742d3f R14: 00007fc1ab256300 R15: 0000000000022000 [ 1716.239584] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1716.264185] Mem-Info: [ 1716.269013] active_anon:15020 inactive_anon:30372 isolated_anon:0 [ 1716.269013] active_file:15 inactive_file:16 isolated_file:0 [ 1716.269013] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1716.269013] slab_reclaimable:12447 slab_unreclaimable:115054 [ 1716.269013] mapped:52531 shmem:31504 pagetables:854 bounce:0 [ 1716.269013] free:13993 free_pcp:24 free_cma:0 [ 1716.281501] CPU: 0 PID: 30346 Comm: syz-executor.1 Not tainted 4.14.232-syzkaller #0 [ 1716.309204] Node 0 active_anon:58340kB inactive_anon:78024kB active_file:36kB inactive_file:36kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:106876kB dirty:0kB writeback:0kB shmem:82344kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1716.310024] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1716.337693] Node 1 active_anon:1740kB inactive_anon:43464kB active_file:24kB inactive_file:28kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:103248kB dirty:0kB writeback:0kB shmem:43672kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1716.346995] Call Trace: [ 1716.347012] dump_stack+0x1b2/0x281 [ 1716.347025] warn_alloc.cold+0x96/0x1cc [ 1716.374242] Node 0 [ 1716.376798] ? zone_watermark_ok_safe+0x220/0x220 [ 1716.380400] DMA free:10964kB min:204kB low:252kB high:300kB active_anon:12kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1716.384341] ? usleep_range+0x130/0x130 [ 1716.384350] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1716.384362] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1716.386564] lowmem_reserve[]: [ 1716.391386] ? run_timer_softirq+0x5a0/0x5a0 [ 1716.416955] 0 [ 1716.420900] __alloc_pages_nodemask+0x2127/0x2720 [ 1716.425978] 2717 [ 1716.430964] ? lock_acquire+0x170/0x3f0 [ 1716.434033] 2718 [ 1716.438423] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1716.438434] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1716.440215] 2718 [ 1716.445040] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1716.445060] alloc_pages_current+0x155/0x260 [ 1716.447085] 2718 [ 1716.451035] ion_page_pool_alloc+0x118/0x1b0 [ 1716.457886] ion_system_heap_allocate+0x133/0x8c0 [ 1716.457895] ? ion_alloc+0x187/0x810 [ 1716.457906] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1716.462370] Node 0 [ 1716.464410] ? ion_system_contig_heap_create+0x130/0x130 [ 1716.464419] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1716.464431] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1716.469859] DMA32 free:18092kB min:36200kB low:45248kB high:54296kB active_anon:58328kB inactive_anon:78024kB active_file:36kB inactive_file:36kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7392kB pagetables:2716kB bounce:0kB free_pcp:96kB local_pcp:96kB free_cma:0kB [ 1716.474234] ion_alloc+0x204/0x810 [ 1716.474246] ? ion_dma_buf_release+0x40/0x40 [ 1716.474258] ? __might_fault+0x177/0x1b0 [ 1716.476289] lowmem_reserve[]: [ 1716.480678] ion_ioctl+0xea/0x1f0 [ 1716.485503] 0 [ 1716.489182] ? ion_query_heaps+0x360/0x360 [ 1716.494612] 0 [ 1716.496821] ? ion_query_heaps+0x360/0x360 [ 1716.502237] 0 [ 1716.507247] do_vfs_ioctl+0x75a/0xff0 [ 1716.507258] ? ioctl_preallocate+0x1a0/0x1a0 [ 1716.507267] ? lock_downgrade+0x740/0x740 [ 1716.512078] 0 [ 1716.540171] ? __fget+0x225/0x360 [ 1716.540180] ? do_vfs_ioctl+0xff0/0xff0 [ 1716.540191] ? security_file_ioctl+0x83/0xb0 [ 1716.543699] 0 [ 1716.548085] SyS_ioctl+0x7f/0xb0 [ 1716.548093] ? do_vfs_ioctl+0xff0/0xff0 [ 1716.548103] do_syscall_64+0x1d5/0x640 [ 1716.555221] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1716.555231] RIP: 0033:0x4665f9 [ 1716.558654] Node 0 [ 1716.560433] RSP: 002b:00007fd699bc5188 EFLAGS: 00000246 [ 1716.564661] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1716.566414] ORIG_RAX: 0000000000000010 [ 1716.570618] lowmem_reserve[]: [ 1716.572398] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1716.576179] 0 [ 1716.580552] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1716.584682] 0 [ 1716.586450] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1716.589872] 0 [ 1716.593817] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1716.593824] R13: 00007ffcaf60874f R14: 00007fd699bc5300 R15: 0000000000022000 [ 1716.598217] 0 [ 1716.737082] Node 0 DMA32 free:40096kB min:36200kB low:45248kB high:54296kB active_anon:58328kB inactive_anon:78024kB active_file:36kB inactive_file:236kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7392kB pagetables:2716kB bounce:0kB free_pcp:352kB local_pcp:212kB free_cma:0kB [ 1716.884553] lowmem_reserve[]: 0 0 0 0 0 [ 1716.888571] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1716.977258] lowmem_reserve[]: 0 0 0 0 0 [ 1716.981274] Node 1 Normal free:201496kB min:53696kB low:67120kB high:80544kB active_anon:2100kB inactive_anon:43468kB active_file:2016kB inactive_file:4584kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:704kB pagetables:684kB bounce:0kB free_pcp:776kB local_pcp:36kB free_cma:0kB [ 1717.064221] 0 [ 1717.066061] Node 1 Normal free:249256kB min:53696kB low:67120kB high:80544kB active_anon:2100kB inactive_anon:43468kB active_file:2016kB inactive_file:4584kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:704kB pagetables:684kB bounce:0kB free_pcp:776kB local_pcp:36kB free_cma:0kB [ 1717.094214] lowmem_reserve[]: 0 0 0 0 0 [ 1717.107508] Node 0 DMA: 6*4kB (UME) 6*8kB (UME) 34*16kB (UM) 20*32kB (UME) 19*64kB (UME) 10*128kB (UME) 5*256kB (UME) 2*512kB (UE) 3*1024kB (UME) 1*2048kB (E) 0*4096kB = 11176kB [ 1717.134240] Node 0 DMA32: 1450*4kB (UME) 502*8kB (UME) 93*16kB (UME) 369*32kB (UME) 773*64kB (UME) 98*128kB (UME) 12*256kB (UM) 1*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 88712kB [ 1717.144196] lowmem_reserve[]: 0 0 0 0 0 [ 1717.153156] Node 0 Normal: 0*4kB 0*8kB 0*16kB [ 1717.164218] Node 0 DMA: 6*4kB (UME) 6*8kB (UME) 34*16kB (UM) 20*32kB (UME) 19*64kB (UME) 10*128kB (UME) 5*256kB (UME) 2*512kB (UE) 3*1024kB (UME) 1*2048kB (E) 0*4096kB = 11176kB [ 1717.194214] 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1717.201955] Node 1 Normal: 2882*4kB (UM) 10*8kB (UM) 3*16kB (U) 5*32kB (UM) 2678*64kB (UM) 240*128kB (U) 108*256kB (U) 15*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 249256kB [ 1717.234770] Node 0 DMA32: 865*4kB (UME) 488*8kB (ME) 79*16kB (UME) 411*32kB (UME) 819*64kB (UME) 98*128kB (UME) 12*256kB (UM) 1*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 90324kB [ 1717.264200] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1717.284329] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1717.286950] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1717.314423] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1717.323255] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1717.324186] Node 1 Normal: 3152*4kB (UM) 102*8kB (UM) [ 1717.332210] 33362 total pagecache pages [ 1717.364207] 0 pages in swap cache [ 1717.367659] Swap cache stats: add 0, delete 0, find 0/0 [ 1717.373004] Free swap = 0kB [ 1717.376071] Total swap = 0kB [ 1717.384208] 89*16kB (UM) 126*32kB (UM) 2794*64kB (UM) 245*128kB (U) [ 1717.384241] 2097051 pages RAM [ 1717.384243] 108*256kB (U) [ 1717.390825] 0 pages HighMem/MovableOnly [ 1717.393910] 15*512kB (U) [ 1717.396782] 363849 pages reserved [ 1717.396788] 0 pages cma reserved [ 1717.417641] 0*1024kB 0*2048kB 0*4096kB = 264384kB [ 1717.422503] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1717.444211] Out of memory (oom_kill_allocating_task): Kill process 30355 (systemd-journal) score 0 or sacrifice child [ 1717.474200] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1717.482791] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1717.492039] Killed process 30355 (systemd-journal) total-vm:46096kB, anon-rss:448kB, file-rss:4kB, shmem-rss:1048kB [ 1717.514214] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1717.522795] 33362 total pagecache pages [ 1717.565086] systemd[1]: systemd-journald.service: Main process exited, code=killed, status=9/KILL [ 1717.569668] oom_reaper: reaped process 30325 (syz-executor.0), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1717.574342] 0 pages in swap cache [ 1717.623291] systemd[1]: Failed to start Journal Service. [ 1717.652460] Swap cache stats: add 0, delete 0, find 0/0 [ 1717.676875] Free swap = 0kB [ 1717.679971] Total swap = 0kB [ 1717.683038] 2097051 pages RAM [ 1717.738031] 0 pages HighMem/MovableOnly [ 1717.742065] 363849 pages reserved [ 1717.751831] in:imklog invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1717.814232] 0 pages cma reserved [ 1717.817949] in:imklog cpuset=/ mems_allowed=0-1 [ 1717.822632] CPU: 0 PID: 30370 Comm: in:imklog Not tainted 4.14.232-syzkaller #0 [ 1717.830062] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1717.839399] Call Trace: [ 1717.841976] dump_stack+0x1b2/0x281 [ 1717.845594] dump_header+0x178/0x82f [ 1717.849296] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1717.854388] ? ___ratelimit+0x2cd/0x530 [ 1717.858350] oom_kill_process.cold+0x10/0xa40 [ 1717.862840] out_of_memory+0xe3e/0x1190 [ 1717.866805] ? oom_killer_disable+0x1c0/0x1c0 [ 1717.871284] ? mutex_trylock+0x152/0x1a0 [ 1717.875334] __alloc_pages_nodemask+0x23e1/0x2720 [ 1717.880175] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1717.885021] alloc_pages_current+0x155/0x260 [ 1717.889418] filemap_fault+0x11a1/0x1ad0 [ 1717.893473] ext4_filemap_fault+0x84/0xb0 [ 1717.897610] __do_fault+0xfa/0x380 [ 1717.901138] __handle_mm_fault+0x2497/0x4620 [ 1717.905539] ? vm_insert_page+0x7c0/0x7c0 [ 1717.909682] ? lock_downgrade+0x740/0x740 [ 1717.913823] ? mark_held_locks+0xa6/0xf0 [ 1717.917882] handle_mm_fault+0x455/0x9c0 [ 1717.921934] __do_page_fault+0x549/0xad0 [ 1717.925987] ? spurious_fault+0x640/0x640 [ 1717.930120] ? do_page_fault+0x60/0x500 [ 1717.934080] ? page_fault+0x2f/0x50 [ 1717.937691] page_fault+0x45/0x50 [ 1717.941128] RIP: 1fa0:0x1f9f [ 1717.944127] RSP: 0000:0000563f3d4039d0 EFLAGS: 7f416c46bda0 [ 1718.174237] Mem-Info: [ 1718.182365] active_anon:15007 inactive_anon:30374 isolated_anon:0 [ 1718.182365] active_file:22 inactive_file:9 isolated_file:0 [ 1718.182365] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1718.182365] slab_reclaimable:12449 slab_unreclaimable:115026 [ 1718.182365] mapped:52215 shmem:31508 pagetables:865 bounce:0 [ 1718.182365] free:29426 free_pcp:381 free_cma:0 [ 1718.376365] syz-executor.1: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1718.408605] Node 0 active_anon:58032kB inactive_anon:78024kB active_file:40kB inactive_file:68kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:106992kB dirty:0kB writeback:0kB shmem:82344kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1718.454947] syz-executor.0: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1718.463527] Node 1 active_anon:1996kB inactive_anon:43472kB active_file:164kB inactive_file:60kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:102068kB dirty:0kB writeback:0kB shmem:43688kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1718.468615] syz-executor.1 cpuset= [ 1718.501610] Node 0 DMA free:10976kB min:204kB low:252kB high:300kB active_anon:12kB inactive_anon:0kB active_file:16kB inactive_file:8kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1718.523564] / [ 1718.535796] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 1718.542607] CPU: 0 PID: 30325 Comm: syz-executor.0 Not tainted 4.14.232-syzkaller #0 [ 1718.545640] mems_allowed=0-1 [ 1718.550475] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1718.562894] Call Trace: [ 1718.565471] dump_stack+0x1b2/0x281 [ 1718.569080] warn_alloc.cold+0x96/0x1cc [ 1718.573034] ? zone_watermark_ok_safe+0x220/0x220 [ 1718.577876] __alloc_pages_nodemask+0x2127/0x2720 [ 1718.582712] ? check_preemption_disabled+0x35/0x240 [ 1718.587716] ? lock_acquire+0x170/0x3f0 [ 1718.591672] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1718.596501] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1718.601929] ? __mutex_unlock_slowpath+0x75/0x770 [ 1718.606752] alloc_pages_current+0x155/0x260 [ 1718.611141] ion_page_pool_alloc+0x118/0x1b0 [ 1718.615526] ion_system_heap_allocate+0x133/0x8c0 [ 1718.620349] ? _raw_spin_unlock+0x29/0x40 [ 1718.624581] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1718.629500] ? ion_system_contig_heap_create+0x130/0x130 [ 1718.634935] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1718.639929] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1718.644750] ion_alloc+0x27a/0x810 [ 1718.648274] ? ion_dma_buf_release+0x40/0x40 [ 1718.652662] ? __might_fault+0x177/0x1b0 [ 1718.656704] ion_ioctl+0xea/0x1f0 [ 1718.660139] ? ion_query_heaps+0x360/0x360 [ 1718.664354] ? ion_query_heaps+0x360/0x360 [ 1718.668570] do_vfs_ioctl+0x75a/0xff0 [ 1718.672368] ? ioctl_preallocate+0x1a0/0x1a0 [ 1718.676756] ? lock_downgrade+0x740/0x740 [ 1718.680884] ? __fget+0x225/0x360 [ 1718.684318] ? do_vfs_ioctl+0xff0/0xff0 [ 1718.688274] ? security_file_ioctl+0x83/0xb0 [ 1718.692661] SyS_ioctl+0x7f/0xb0 [ 1718.696007] ? do_vfs_ioctl+0xff0/0xff0 [ 1718.699961] do_syscall_64+0x1d5/0x640 [ 1718.703836] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1718.709018] RIP: 0033:0x4665f9 [ 1718.712195] RSP: 002b:00007fc8c6af5188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1718.719882] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1718.727131] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1718.734384] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1718.741638] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1718.748891] R13: 00007ffdd42e705f R14: 00007fc8c6af5300 R15: 0000000000022000 [ 1718.756153] CPU: 1 PID: 30346 Comm: syz-executor.1 Not tainted 4.14.232-syzkaller #0 [ 1718.760705] lowmem_reserve[]: [ 1718.764030] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1718.764037] 0 [ 1718.767113] Call Trace: [ 1718.767129] dump_stack+0x1b2/0x281 [ 1718.767143] warn_alloc.cold+0x96/0x1cc [ 1718.767153] ? zone_watermark_ok_safe+0x220/0x220 [ 1718.767175] __alloc_pages_nodemask+0x2127/0x2720 [ 1718.780150] 2717 [ 1718.780872] ? lock_acquire+0x170/0x3f0 [ 1718.784486] 2718 [ 1718.788421] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1718.793228] 2718 [ 1718.798057] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1718.798070] ? __mutex_unlock_slowpath+0x75/0x770 [ 1718.798085] alloc_pages_current+0x155/0x260 [ 1718.798099] ion_page_pool_alloc+0x118/0x1b0 [ 1718.798108] ion_system_heap_allocate+0x133/0x8c0 [ 1718.798122] ? _raw_spin_unlock+0x29/0x40 [ 1718.798132] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1718.803709] 2718 [ 1718.804130] ? ion_system_contig_heap_create+0x130/0x130 [ 1718.804140] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1718.804150] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1718.804161] ion_alloc+0x27a/0x810 [ 1718.811035] ? ion_dma_buf_release+0x40/0x40 [ 1718.813064] Node 0 [ 1718.818498] ? __might_fault+0x177/0x1b0 [ 1718.818511] ion_ioctl+0xea/0x1f0 [ 1718.818520] ? ion_query_heaps+0x360/0x360 [ 1718.818533] ? ion_query_heaps+0x360/0x360 [ 1718.818543] do_vfs_ioctl+0x75a/0xff0 [ 1718.818554] ? ioctl_preallocate+0x1a0/0x1a0 [ 1718.818564] ? lock_downgrade+0x740/0x740 [ 1718.826492] DMA32 free:17736kB min:36200kB low:45248kB high:54296kB active_anon:58020kB inactive_anon:78024kB active_file:44kB inactive_file:32kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7360kB pagetables:2764kB bounce:0kB free_pcp:120kB local_pcp:0kB free_cma:0kB [ 1718.827769] ? __fget+0x225/0x360 [ 1718.832144] lowmem_reserve[]: [ 1718.836965] ? do_vfs_ioctl+0xff0/0xff0 [ 1718.836975] ? security_file_ioctl+0x83/0xb0 [ 1718.836985] SyS_ioctl+0x7f/0xb0 [ 1718.836992] ? do_vfs_ioctl+0xff0/0xff0 [ 1718.837004] do_syscall_64+0x1d5/0x640 [ 1718.841648] 0 [ 1718.846037] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1718.846046] RIP: 0033:0x4665f9 [ 1718.846051] RSP: 002b:00007fd699bc5188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1718.846061] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1718.846066] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1718.846073] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1718.849984] 0 [ 1718.853538] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1718.853545] R13: 00007ffcaf60874f R14: 00007fd699bc5300 R15: 0000000000022000 [ 1718.860309] 0 [ 1718.874576] syz-executor.2: [ 1718.877655] Bluetooth: hci1 command 0x0409 tx timeout [ 1718.881016] page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1718.888962] 0 [ 1718.914088] (null) [ 1718.933620] 0 [ 1718.982469] syz-executor.2 cpuset= [ 1719.005118] / [ 1719.012019] warn_alloc_show_mem: 2 callbacks suppressed [ 1719.012023] Mem-Info: [ 1719.012441] mems_allowed=0-1 [ 1719.014268] active_anon:15013 inactive_anon:30374 isolated_anon:0 [ 1719.014268] active_file:9 inactive_file:10 isolated_file:0 [ 1719.014268] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1719.014268] slab_reclaimable:12448 slab_unreclaimable:114602 [ 1719.014268] mapped:52225 shmem:31508 pagetables:866 bounce:0 [ 1719.014268] free:14112 free_pcp:64 free_cma:0 [ 1719.014284] Node 0 active_anon:58056kB inactive_anon:78024kB active_file:32kB inactive_file:32kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:106872kB dirty:0kB writeback:0kB shmem:82344kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1719.014299] Node 1 active_anon:1996kB inactive_anon:43472kB active_file:4kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:102028kB dirty:0kB writeback:0kB shmem:43688kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1719.014303] Node 0 DMA free:11004kB min:204kB low:252kB high:300kB active_anon:12kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1719.014324] lowmem_reserve[]: [ 1719.025373] CPU: 1 PID: 30338 Comm: syz-executor.2 Not tainted 4.14.232-syzkaller #0 [ 1719.037740] Node 0 [ 1719.038032] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1719.038037] Call Trace: [ 1719.041562] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1719.043258] dump_stack+0x1b2/0x281 [ 1719.048647] lowmem_reserve[]: [ 1719.050979] warn_alloc.cold+0x96/0x1cc [ 1719.059229] 0 [ 1719.087105] ? zone_watermark_ok_safe+0x220/0x220 [ 1719.087117] ? usleep_range+0x130/0x130 [ 1719.087125] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1719.087137] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1719.087148] ? run_timer_softirq+0x5a0/0x5a0 [ 1719.087164] __alloc_pages_nodemask+0x2127/0x2720 [ 1719.087178] ? lock_acquire+0x170/0x3f0 [ 1719.120333] 0 [ 1719.141888] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1719.141898] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1719.141914] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1719.141934] alloc_pages_current+0x155/0x260 [ 1719.141946] ion_page_pool_alloc+0x118/0x1b0 [ 1719.141955] ion_system_heap_allocate+0x133/0x8c0 [ 1719.141969] ? _raw_spin_unlock+0x29/0x40 [ 1719.173361] 0 [ 1719.179087] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1719.179101] ? ion_system_contig_heap_create+0x130/0x130 [ 1719.179111] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1719.179121] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1719.179131] ion_alloc+0x27a/0x810 [ 1719.181355] 0 [ 1719.190684] ? ion_dma_buf_release+0x40/0x40 [ 1719.190697] ? __might_fault+0x177/0x1b0 [ 1719.190709] ion_ioctl+0xea/0x1f0 [ 1719.190718] ? ion_query_heaps+0x360/0x360 [ 1719.190730] ? ion_query_heaps+0x360/0x360 [ 1719.190739] do_vfs_ioctl+0x75a/0xff0 [ 1719.190750] ? ioctl_preallocate+0x1a0/0x1a0 [ 1719.198464] 2717 [ 1719.218186] ? lock_downgrade+0x740/0x740 [ 1719.218200] ? __fget+0x225/0x360 [ 1719.218211] ? do_vfs_ioctl+0xff0/0xff0 [ 1719.218223] ? security_file_ioctl+0x83/0xb0 [ 1719.218234] SyS_ioctl+0x7f/0xb0 [ 1719.218242] ? do_vfs_ioctl+0xff0/0xff0 [ 1719.218253] do_syscall_64+0x1d5/0x640 [ 1719.226998] 0 [ 1719.228902] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1719.230671] 0 [ 1719.235503] RIP: 0033:0x4665f9 [ 1719.235508] RSP: 002b:00007fc1ab256188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1719.235518] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1719.235523] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1719.235527] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1719.235532] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1719.235538] R13: 00007ffd84742d3f R14: 00007fc1ab256300 R15: 0000000000022000 [ 1719.276944] syz-executor.1: [ 1719.281414] IPVS: ftp: loaded support on port[0] = 21 [ 1719.283772] page allocation failure: order:0 [ 1719.288384] 2718 [ 1719.322006] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1719.325928] 2718 [ 1719.346451] (null) [ 1719.346457] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 1719.346479] CPU: 1 PID: 30346 Comm: syz-executor.1 Not tainted 4.14.232-syzkaller #0 [ 1719.346485] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1719.346488] Call Trace: [ 1719.346503] dump_stack+0x1b2/0x281 [ 1719.346517] warn_alloc.cold+0x96/0x1cc [ 1719.346528] ? zone_watermark_ok_safe+0x220/0x220 [ 1719.346538] ? usleep_range+0x130/0x130 [ 1719.346546] ? try_to_free_pages+0x23f/0x6e0 [ 1719.346555] ? _find_next_bit+0xdb/0x100 [ 1719.346566] ? run_timer_softirq+0x5a0/0x5a0 [ 1719.354754] __alloc_pages_nodemask+0x2127/0x2720 [ 1719.354771] ? lock_acquire+0x170/0x3f0 [ 1719.354786] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1719.354796] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1719.354843] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1719.354892] alloc_pages_current+0x155/0x260 [ 1719.357220] Node 1 [ 1719.361024] ion_page_pool_alloc+0x118/0x1b0 [ 1719.364498] 2718 [ 1719.368402] ion_system_heap_allocate+0x133/0x8c0 [ 1719.372781] Node 0 [ 1719.376129] ? _raw_spin_unlock+0x29/0x40 [ 1719.376137] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1719.376146] ? ion_system_contig_heap_create+0x130/0x130 [ 1719.376155] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1719.376167] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1719.380126] Normal free:30492kB min:53696kB low:67120kB high:80544kB active_anon:1996kB inactive_anon:43472kB active_file:4kB inactive_file:8kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:704kB pagetables:696kB bounce:0kB free_pcp:120kB local_pcp:0kB free_cma:0kB [ 1719.383979] ion_alloc+0x27a/0x810 [ 1719.385834] lowmem_reserve[]: [ 1719.390926] ? ion_dma_buf_release+0x40/0x40 [ 1719.392695] 0 0 [ 1719.395879] ? __might_fault+0x177/0x1b0 [ 1719.395891] ion_ioctl+0xea/0x1f0 [ 1719.395901] ? ion_query_heaps+0x360/0x360 [ 1719.395912] ? ion_query_heaps+0x360/0x360 [ 1719.403609] DMA32 free:76064kB min:36200kB low:45248kB high:54296kB active_anon:58044kB inactive_anon:78024kB active_file:32kB inactive_file:2032kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7360kB pagetables:2768kB bounce:0kB free_pcp:384kB local_pcp:208kB free_cma:0kB [ 1719.410845] do_vfs_ioctl+0x75a/0xff0 [ 1719.410857] ? ioctl_preallocate+0x1a0/0x1a0 [ 1719.410865] ? lock_downgrade+0x740/0x740 [ 1719.410879] ? __fget+0x225/0x360 [ 1719.418166] 0 [ 1719.425377] ? do_vfs_ioctl+0xff0/0xff0 [ 1719.425389] ? security_file_ioctl+0x83/0xb0 [ 1719.425398] SyS_ioctl+0x7f/0xb0 [ 1719.425404] ? do_vfs_ioctl+0xff0/0xff0 [ 1719.425415] do_syscall_64+0x1d5/0x640 [ 1719.425429] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1719.432675] lowmem_reserve[]: [ 1719.439921] RIP: 0033:0x4665f9 [ 1719.439926] RSP: 002b:00007fd699bc5188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1719.439936] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1719.439942] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1719.439947] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1719.439952] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1719.439957] R13: 00007ffcaf60874f R14: 00007fd699bc5300 R15: 0000000000022000 [ 1719.664047] 0 [ 1719.682124] 0 [ 1719.704581] 0 [ 1719.708169] 0 [ 1719.713204] 0 [ 1719.744064] Node 0 [ 1719.750435] 0 [ 1719.753743] DMA: [ 1719.770578] 0 [ 1719.800489] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1719.824036] 15*4kB (UME) 5*8kB (ME) 31*16kB (UM) 20*32kB (UME) 21*64kB (UME) 9*128kB (UME) 4*256kB (UME) 1*512kB (E) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (U) = 13460kB [ 1719.860617] lowmem_reserve[]: 0 0 0 0 0 [ 1719.871688] Node 1 Normal free:415004kB min:53696kB low:67120kB high:80544kB active_anon:1996kB inactive_anon:43472kB active_file:4kB inactive_file:8kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:704kB pagetables:696kB bounce:0kB free_pcp:120kB local_pcp:0kB free_cma:0kB [ 1719.884035] Node 0 DMA32: 79*4kB (ME) 110*8kB (UME) 16*16kB (UE) 3*32kB (E) 1652*64kB (U) 185*128kB (UM) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 130956kB [ 1719.917746] lowmem_reserve[]: [ 1719.944120] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1719.974607] Node 1 Normal: 21*4kB (UM) 622*8kB (UM) 249*16kB (UM) 542*32kB (UM) 5133*64kB (U) 973*128kB (U) 188*256kB (U) 0*512kB 2*1024kB (U) 1*2048kB (U) 0*4096kB = 531668kB [ 1719.978011] 0 0 0 0 0 [ 1720.020252] Node 0 DMA: 15*4kB (UME) 5*8kB (ME) 31*16kB (UM) 20*32kB (UME) 22*64kB (UME) 9*128kB (UME) 4*256kB (UME) 1*512kB (E) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (U) = 13524kB [ 1720.024687] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1720.065198] Node 0 DMA32: 78*4kB (E) 108*8kB (E) 16*16kB (UE) 7*32kB (UME) 1353*64kB (U) 408*128kB (UM) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 140472kB [ 1720.104230] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1720.125716] systemd-journald[30382]: File /run/log/journal/04d8c135ee6b410280ba31a58c89679d/system.journal corrupted or uncleanly shut down, renaming and replacing. [ 1720.136271] Node 1 Normal: 21*4kB (UM) 888*8kB (UM) 252*16kB (UM) 545*32kB (UM) 6046*64kB (U) 1362*128kB (U) 243*256kB (U) 8*512kB (U) 2*1024kB (U) 1*2048kB (U) 0*4096kB = 660340kB [ 1720.140652] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1720.184417] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1720.193262] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1720.215998] chnl_net:caif_netlink_parms(): no params data found [ 1720.227121] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1720.234034] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1720.247383] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1720.266842] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1720.274047] 36469 total pagecache pages [ 1720.282184] systemd-journald[30382]: /dev/kmsg buffer overrun, some messages lost. [ 1720.285432] 36469 total pagecache pages [ 1720.293856] 0 pages in swap cache [ 1720.297382] 0 pages in swap cache [ 1720.300832] Swap cache stats: add 0, delete 0, find 0/0 [ 1720.316184] Swap cache stats: add 0, delete 0, find 0/0 [ 1720.321763] Free swap = 0kB [ 1720.331317] Free swap = 0kB [ 1720.344044] Total swap = 0kB [ 1720.347690] Total swap = 0kB [ 1720.350716] 2097051 pages RAM [ 1720.353811] 0 pages HighMem/MovableOnly [ 1720.354058] 2097051 pages RAM [ 1720.358307] 363849 pages reserved [ 1720.374019] 0 pages cma reserved [ 1720.374037] 0 pages HighMem/MovableOnly [ 1720.377478] Out of memory (oom_kill_allocating_task): Kill process 30370 (in:imklog) score 0 or sacrifice child [ 1720.393646] 363849 pages reserved [ 1720.404006] 0 pages cma reserved [ 1720.447815] Killed process 30367 (rsyslogd) total-vm:254332kB, anon-rss:544kB, file-rss:0kB, shmem-rss:0kB [ 1720.471204] oom_reaper: reaped process 30367 (rsyslogd), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1720.532111] systemd[1]: rsyslog.service: Main process exited, code=killed, status=9/KILL [ 1720.600779] bridge0: port 1(bridge_slave_0) entered blocking state [ 1720.615649] systemd[1]: rsyslog.service: Unit entered failed state. 22:12:37 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$unix(0x1, 0x2, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x80000000, 0x6}) socket$nl_generic(0x10, 0x3, 0x10) 22:12:37 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$unix(0x1, 0x2, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x80000000, 0x6}) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) [ 1720.652041] bridge0: port 1(bridge_slave_0) entered disabled state [ 1720.670406] systemd[1]: rsyslog.service: Failed with result 'signal'. [ 1720.688975] device bridge_slave_0 entered promiscuous mode [ 1720.735580] bridge0: port 2(bridge_slave_1) entered blocking state [ 1720.742124] bridge0: port 2(bridge_slave_1) entered disabled state [ 1720.792912] device bridge_slave_1 entered promiscuous mode [ 1720.919271] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 1720.929361] systemd[1]: rsyslog.service: Service hold-off time over, scheduling restart. [ 1720.944083] Bluetooth: hci1 command 0x041b tx timeout [ 1720.982065] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1720.992637] systemd[1]: Stopped System Logging Service. [ 1721.048317] syz-executor.1: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1721.097903] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 1721.132675] oom_reaper: reaped process 30347 (syz-executor.5), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1721.135979] CPU: 0 PID: 30512 Comm: syz-executor.1 Not tainted 4.14.232-syzkaller #0 [ 1721.150516] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1721.159862] Call Trace: [ 1721.162446] dump_stack+0x1b2/0x281 [ 1721.166070] warn_alloc.cold+0x96/0x1cc [ 1721.170038] ? zone_watermark_ok_safe+0x220/0x220 [ 1721.174888] __alloc_pages_nodemask+0x2127/0x2720 [ 1721.179720] ? io_schedule_timeout+0x140/0x140 [ 1721.184330] ? lock_acquire+0x170/0x3f0 [ 1721.188308] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1721.193148] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1721.198592] ? __mutex_unlock_slowpath+0x75/0x770 [ 1721.203427] alloc_pages_current+0x155/0x260 [ 1721.207829] ion_page_pool_alloc+0x118/0x1b0 [ 1721.212228] ion_system_heap_allocate+0x133/0x8c0 [ 1721.217059] ? ion_alloc+0x187/0x810 [ 1721.220764] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1721.226203] ? ion_system_contig_heap_create+0x130/0x130 [ 1721.229904] syz-executor.0 invoked oom-killer: gfp_mask=0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1721.231640] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1721.231645] (null) [ 1721.241934] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1721.241945] ion_alloc+0x204/0x810 [ 1721.241959] ? ion_dma_buf_release+0x40/0x40 [ 1721.241973] ? __might_fault+0x177/0x1b0 [ 1721.255418] , order=0, oom_score_adj=1000 [ 1721.257438] ion_ioctl+0xea/0x1f0 [ 1721.261900] syz-executor.0 cpuset= [ 1721.265937] ? ion_query_heaps+0x360/0x360 [ 1721.265949] ? ion_query_heaps+0x360/0x360 [ 1721.265959] do_vfs_ioctl+0x75a/0xff0 [ 1721.270160] / [ 1721.273590] ? ioctl_preallocate+0x1a0/0x1a0 [ 1721.273598] ? lock_downgrade+0x740/0x740 [ 1721.277219] mems_allowed=0-1 [ 1721.281413] ? __fget+0x225/0x360 [ 1721.306065] ? do_vfs_ioctl+0xff0/0xff0 [ 1721.310030] ? security_file_ioctl+0x83/0xb0 [ 1721.314416] SyS_ioctl+0x7f/0xb0 [ 1721.317758] ? do_vfs_ioctl+0xff0/0xff0 [ 1721.321721] do_syscall_64+0x1d5/0x640 [ 1721.325603] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1721.330768] RIP: 0033:0x4665f9 [ 1721.333934] RSP: 002b:00007fd699bc5188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1721.341618] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1721.348863] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1721.356117] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1721.363365] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1721.370613] R13: 00007ffcaf60874f R14: 00007fd699bc5300 R15: 0000000000022000 [ 1721.377873] CPU: 1 PID: 30325 Comm: syz-executor.0 Not tainted 4.14.232-syzkaller #0 [ 1721.385863] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1721.395210] Call Trace: [ 1721.397791] dump_stack+0x1b2/0x281 [ 1721.401412] dump_header+0x178/0x82f [ 1721.405118] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1721.410213] ? ___ratelimit+0x2cd/0x530 [ 1721.414180] oom_kill_process.cold+0x10/0xa40 [ 1721.418678] out_of_memory+0xe3e/0x1190 [ 1721.422646] ? oom_killer_disable+0x1c0/0x1c0 [ 1721.427134] ? mutex_trylock+0x152/0x1a0 [ 1721.429312] warn_alloc_show_mem: 3 callbacks suppressed [ 1721.429314] Mem-Info: [ 1721.431186] __alloc_pages_nodemask+0x23e1/0x2720 [ 1721.441744] active_anon:14936 inactive_anon:32407 isolated_anon:0 [ 1721.441744] active_file:55 inactive_file:15 isolated_file:0 [ 1721.441744] unevictable:0 dirty:22 writeback:0 unstable:0 [ 1721.441744] slab_reclaimable:12457 slab_unreclaimable:115527 [ 1721.441744] mapped:52597 shmem:33556 pagetables:824 bounce:0 [ 1721.441744] free:13854 free_pcp:33 free_cma:0 [ 1721.443754] ? lock_acquire+0x170/0x3f0 [ 1721.480929] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1721.485759] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1721.489168] Node 0 active_anon:58236kB inactive_anon:86208kB active_file:76kB inactive_file:28kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:108232kB dirty:0kB writeback:0kB shmem:90528kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1721.490259] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1721.523343] alloc_pages_current+0x155/0x260 [ 1721.527748] ion_page_pool_alloc+0x118/0x1b0 [ 1721.530113] Node 1 active_anon:1508kB inactive_anon:43420kB active_file:144kB inactive_file:32kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:102156kB dirty:88kB writeback:0kB shmem:43696kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1721.532157] ion_system_heap_allocate+0x133/0x8c0 [ 1721.564366] ? _raw_spin_unlock+0x29/0x40 [ 1721.568505] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1721.571576] Node 0 [ 1721.573420] ? ion_system_contig_heap_create+0x130/0x130 [ 1721.573431] DMA free:10960kB min:204kB low:252kB high:300kB active_anon:12kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1721.573435] lowmem_reserve[]: [ 1721.575651] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1721.575662] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1721.575673] ion_alloc+0x27a/0x810 [ 1721.575687] ? ion_dma_buf_release+0x40/0x40 [ 1721.575699] ? __might_fault+0x177/0x1b0 [ 1721.575710] ion_ioctl+0xea/0x1f0 [ 1721.593525] 0 [ 1721.606709] ? ion_query_heaps+0x360/0x360 [ 1721.606721] ? ion_query_heaps+0x360/0x360 [ 1721.606730] do_vfs_ioctl+0x75a/0xff0 [ 1721.606741] ? ioctl_preallocate+0x1a0/0x1a0 [ 1721.606750] ? lock_downgrade+0x740/0x740 [ 1721.606763] ? __fget+0x225/0x360 [ 1721.606772] ? do_vfs_ioctl+0xff0/0xff0 [ 1721.606783] ? security_file_ioctl+0x83/0xb0 [ 1721.606794] SyS_ioctl+0x7f/0xb0 [ 1721.606802] ? do_vfs_ioctl+0xff0/0xff0 [ 1721.606815] do_syscall_64+0x1d5/0x640 [ 1721.622200] 2717 [ 1721.623245] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1721.629597] 2718 [ 1721.631672] RIP: 0033:0x4665f9 [ 1721.647277] 2718 [ 1721.649084] RSP: 002b:00007fc8c6af5188 EFLAGS: 00000246 [ 1721.653465] 2718 [ 1721.657685] ORIG_RAX: 0000000000000010 [ 1721.657691] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1721.657696] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1721.657702] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1721.657707] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1721.657713] R13: 00007ffdd42e705f R14: 00007fc8c6af5300 R15: 0000000000022000 [ 1721.676526] syz-executor.5: [ 1721.692812] syz-executor.2: [ 1721.693195] Node 0 [ 1721.702010] page allocation failure: order:4 [ 1721.716074] DMA32 free:17956kB min:36200kB low:45248kB high:54296kB active_anon:58224kB inactive_anon:86208kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7328kB pagetables:2512kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1721.737536] page allocation failure: order:0 [ 1721.756280] lowmem_reserve[]: [ 1721.796222] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1721.809120] 0 0 0 0 0 [ 1721.811646] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1721.815749] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 1721.862029] lowmem_reserve[]: 0 0 0 0 0 [ 1721.873254] CPU: 1 PID: 30513 Comm: syz-executor.2 Not tainted 4.14.232-syzkaller #0 [ 1721.884584] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1721.892216] Node 1 [ 1721.893922] Call Trace: [ 1721.893941] dump_stack+0x1b2/0x281 [ 1721.893956] warn_alloc.cold+0x96/0x1cc [ 1721.893968] ? zone_watermark_ok_safe+0x220/0x220 [ 1721.893991] __alloc_pages_nodemask+0x2127/0x2720 [ 1721.903376] Normal free:26724kB min:53696kB low:67120kB high:80544kB active_anon:1508kB inactive_anon:43420kB active_file:136kB inactive_file:4kB unevictable:0kB writepending:88kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:768kB pagetables:784kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1721.906340] ? retint_kernel+0x2d/0x2d [ 1721.906348] ? ion_page_pool_alloc+0x28/0x1b0 [ 1721.906362] ? lock_acquire+0x170/0x3f0 [ 1721.906376] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1721.906392] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1721.906416] ? __mutex_unlock_slowpath+0x75/0x770 [ 1721.906429] alloc_pages_current+0x155/0x260 [ 1721.906440] ion_page_pool_alloc+0x118/0x1b0 [ 1721.906448] ion_system_heap_allocate+0x133/0x8c0 [ 1721.906456] ? ion_alloc+0x187/0x810 [ 1721.906464] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1721.906473] ? ion_system_contig_heap_create+0x130/0x130 [ 1721.928763] lowmem_reserve[]: [ 1721.944044] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1721.944056] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1721.944068] ion_alloc+0x204/0x810 [ 1721.944083] ? ion_dma_buf_release+0x40/0x40 [ 1721.944097] ? __might_fault+0x177/0x1b0 [ 1721.944108] ion_ioctl+0xea/0x1f0 [ 1721.944117] ? ion_query_heaps+0x360/0x360 [ 1721.944129] ? ion_query_heaps+0x360/0x360 [ 1721.944140] do_vfs_ioctl+0x75a/0xff0 [ 1721.963495] 0 [ 1721.966699] ? ioctl_preallocate+0x1a0/0x1a0 [ 1721.966708] ? lock_downgrade+0x740/0x740 [ 1721.966722] ? __fget+0x225/0x360 [ 1721.966731] ? do_vfs_ioctl+0xff0/0xff0 [ 1721.966744] ? security_file_ioctl+0x83/0xb0 [ 1721.986587] 0 [ 1721.988963] SyS_ioctl+0x7f/0xb0 [ 1722.009271] 0 [ 1722.012713] ? do_vfs_ioctl+0xff0/0xff0 [ 1722.019696] 0 [ 1722.020631] do_syscall_64+0x1d5/0x640 [ 1722.040246] 0 [ 1722.040314] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1722.046462] RIP: 0033:0x4665f9 [ 1722.046467] RSP: 002b:00007fc1ab256188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1722.046477] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1722.046483] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1722.046488] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1722.046493] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1722.046499] R13: 00007ffd84742d3f R14: 00007fc1ab256300 R15: 0000000000022000 [ 1722.061776] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1722.078214] Node 0 [ 1722.091181] (null) [ 1722.112563] DMA: [ 1722.131110] syz-executor.5 cpuset= [ 1722.149566] 6*4kB (UME) 5*8kB (ME) 3*16kB (M) 5*32kB (UME) 5*64kB (UME) 5*128kB (UME) 4*256kB (UME) 1*512kB (E) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (U) = 10960kB [ 1722.159609] / mems_allowed=0-1 [ 1722.189450] Node 0 DMA32: 712*4kB (UME) 414*8kB (UME) 42*16kB (UME) 6*32kB (UME) 3*64kB (UE) 77*128kB (UME) 4*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18096kB [ 1722.191118] CPU: 1 PID: 30347 Comm: syz-executor.5 Not tainted 4.14.232-syzkaller #0 [ 1722.212232] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1722.219976] Node 0 [ 1722.221570] Call Trace: [ 1722.221582] Normal: [ 1722.223801] dump_stack+0x1b2/0x281 [ 1722.232272] warn_alloc.cold+0x96/0x1cc [ 1722.236243] ? zone_watermark_ok_safe+0x220/0x220 [ 1722.241074] ? usleep_range+0x130/0x130 [ 1722.241998] 0*4kB [ 1722.245033] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1722.245044] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1722.245054] ? run_timer_softirq+0x5a0/0x5a0 [ 1722.245071] __alloc_pages_nodemask+0x2127/0x2720 [ 1722.245087] ? lock_acquire+0x170/0x3f0 [ 1722.245105] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1722.262714] 0*8kB [ 1722.266526] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1722.266542] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1722.266559] ? alloc_pages_current+0x135/0x260 [ 1722.266571] alloc_pages_current+0x155/0x260 [ 1722.266582] ion_page_pool_alloc+0x118/0x1b0 [ 1722.266592] ion_system_heap_allocate+0x133/0x8c0 [ 1722.287531] 0*16kB [ 1722.287844] ? ion_alloc+0x187/0x810 [ 1722.292394] 0*32kB [ 1722.296777] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1722.296787] ? ion_system_contig_heap_create+0x130/0x130 [ 1722.296797] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1722.296808] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1722.296819] ion_alloc+0x204/0x810 [ 1722.296833] ? ion_dma_buf_release+0x40/0x40 [ 1722.296846] ? __might_fault+0x177/0x1b0 [ 1722.316399] 0*64kB [ 1722.319683] ion_ioctl+0xea/0x1f0 [ 1722.333799] 0*128kB [ 1722.334919] ? ion_query_heaps+0x360/0x360 [ 1722.334931] ? ion_query_heaps+0x360/0x360 [ 1722.334942] do_vfs_ioctl+0x75a/0xff0 [ 1722.334954] ? ioctl_preallocate+0x1a0/0x1a0 [ 1722.334963] ? lock_downgrade+0x740/0x740 [ 1722.334976] ? __fget+0x225/0x360 [ 1722.357860] 0*256kB [ 1722.359096] ? do_vfs_ioctl+0xff0/0xff0 [ 1722.363301] 0*512kB [ 1722.367080] ? security_file_ioctl+0x83/0xb0 [ 1722.367091] SyS_ioctl+0x7f/0xb0 [ 1722.367098] ? do_vfs_ioctl+0xff0/0xff0 [ 1722.367110] do_syscall_64+0x1d5/0x640 [ 1722.367125] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1722.367133] RIP: 0033:0x4665f9 [ 1722.367143] RSP: 002b:00007f87ada6b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1722.367166] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1722.387073] 0*1024kB [ 1722.387689] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1722.392070] 0*2048kB [ 1722.395406] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1722.395411] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1722.395417] R13: 00007fff979d8a6f R14: 00007f87ada6b300 R15: 0000000000022000 [ 1722.410387] Mem-Info: [ 1722.427290] 0*4096kB [ 1722.443026] active_anon:14911 inactive_anon:32407 isolated_anon:0 [ 1722.443026] active_file:41 inactive_file:0 isolated_file:0 [ 1722.443026] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1722.443026] slab_reclaimable:12457 slab_unreclaimable:115550 [ 1722.443026] mapped:52539 shmem:33556 pagetables:824 bounce:0 [ 1722.443026] free:14056 free_pcp:0 free_cma:0 [ 1722.461704] = 0kB [ 1722.477073] Node 0 active_anon:58140kB inactive_anon:86208kB active_file:8kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:108128kB dirty:0kB writeback:0kB shmem:90528kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1722.517996] Node 1 [ 1722.549280] warn_alloc_show_mem: 1 callbacks suppressed [ 1722.549283] Mem-Info: [ 1722.551026] Normal: [ 1722.551550] active_anon:14911 inactive_anon:32407 isolated_anon:0 [ 1722.551550] active_file:38 inactive_file:16 isolated_file:0 [ 1722.551550] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1722.551550] slab_reclaimable:12457 slab_unreclaimable:115550 [ 1722.551550] mapped:52539 shmem:33556 pagetables:824 bounce:0 [ 1722.551550] free:14056 free_pcp:0 free_cma:0 [ 1722.572483] 58*4kB [ 1722.600966] Node 1 active_anon:1504kB inactive_anon:43420kB active_file:16kB inactive_file:56kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:102028kB dirty:0kB writeback:0kB shmem:43696kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1722.640796] Node 0 active_anon:58140kB inactive_anon:86208kB active_file:8kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:108128kB dirty:0kB writeback:0kB shmem:90528kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1722.643316] (M) [ 1722.681320] Node 0 DMA free:10960kB min:204kB low:252kB high:300kB active_anon:12kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1722.693005] 27*8kB [ 1722.729262] Node 1 active_anon:1504kB inactive_anon:43420kB active_file:64kB inactive_file:36kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:102028kB dirty:0kB writeback:0kB shmem:43696kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1722.733361] (M) [ 1722.779121] lowmem_reserve[]: [ 1722.781062] 24*16kB [ 1722.781097] 0 [ 1722.802528] Node 0 [ 1722.804969] 2717 2718 2718 2718 [ 1722.810559] Node 0 DMA32 free:18096kB min:36200kB low:45248kB high:54296kB active_anon:58128kB inactive_anon:86208kB active_file:8kB inactive_file:8kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7328kB pagetables:2512kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1722.811542] (M) [ 1722.849488] DMA free:10960kB min:204kB low:252kB high:300kB active_anon:12kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1722.888224] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1722.893262] Node 0 DMA32 free:18408kB min:36200kB low:45248kB high:54296kB active_anon:58128kB inactive_anon:86208kB active_file:8kB inactive_file:8kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7328kB pagetables:2512kB bounce:0kB free_pcp:24kB local_pcp:24kB free_cma:0kB [ 1722.932352] lowmem_reserve[]: 0 0 0 0 0 [ 1722.936961] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1722.973481] lowmem_reserve[]: 0 0 0 0 0 [ 1722.977627] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1722.993679] 19*32kB [ 1723.013660] lowmem_reserve[]: 0 0 0 0 0 [ 1723.020090] Node 1 Normal free:27168kB min:53696kB low:67120kB high:80544kB active_anon:1504kB inactive_anon:43420kB active_file:128kB inactive_file:0kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:864kB pagetables:784kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1723.025415] Bluetooth: hci1 command 0x040f tx timeout [ 1723.057850] lowmem_reserve[]: 0 0 0 0 0 [ 1723.061952] Node 1 Normal free:27168kB min:53696kB low:67120kB high:80544kB active_anon:1504kB inactive_anon:43420kB active_file:96kB inactive_file:0kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:864kB pagetables:784kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1723.082252] (UM) [ 1723.109484] lowmem_reserve[]: 0 0 0 0 0 [ 1723.112041] 22*64kB [ 1723.132035] Node 0 [ 1723.133712] (UM) [ 1723.140259] DMA: 6*4kB (UME) 5*8kB (ME) 3*16kB (M) 5*32kB (UME) 5*64kB (UME) 5*128kB (UME) 4*256kB (UME) 1*512kB (E) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (U) = 10960kB [ 1723.142469] 14*128kB (UM) 32*256kB (UM) 26*512kB (UM) 1*1024kB (M) 0*2048kB 0*4096kB = 27168kB [ 1723.183246] Node 0 [ 1723.209947] lowmem_reserve[]: 0 0 0 0 0 [ 1723.223772] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1723.224375] DMA32: 712*4kB (UME) 415*8kB (UME) 45*16kB (UME) 6*32kB (UME) 3*64kB (UE) 79*128kB (UME) 4*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18408kB [ 1723.249086] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1723.258421] Node 0 DMA: 6*4kB (UME) 5*8kB (ME) 3*16kB (M) 5*32kB (UME) 5*64kB (UME) 5*128kB (UME) 4*256kB (UME) 1*512kB (E) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (U) = 10960kB [ 1723.273427] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1723.289016] Node 0 DMA32: 712*4kB (UME) 415*8kB (UME) 45*16kB (UME) 6*32kB (UME) 3*64kB (UE) 79*128kB (UME) 4*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18408kB [ 1723.298228] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1723.314808] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1723.331577] 33588 total pagecache pages [ 1723.335199] Node 1 Normal: 58*4kB (M) 27*8kB (M) 24*16kB (M) [ 1723.339441] Node 0 [ 1723.342090] 0 pages in swap cache [ 1723.363609] 19*32kB (UM) 22*64kB (UM) 14*128kB (UM) 32*256kB (UM) 26*512kB (UM) 1*1024kB (M) 0*2048kB 0*4096kB = 27168kB [ 1723.368812] Swap cache stats: add 0, delete 0, find 0/0 [ 1723.386624] Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1723.402564] Free swap = 0kB [ 1723.405851] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1723.428433] Node 1 Normal: 58*4kB (M) 27*8kB (M) 24*16kB (M) 19*32kB (UM) 22*64kB (UM) 14*128kB (UM) 32*256kB (UM) 26*512kB (UM) 1*1024kB (M) 0*2048kB 0*4096kB = 27168kB [ 1723.441963] Total swap = 0kB [ 1723.459911] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1723.469876] 2097051 pages RAM [ 1723.472972] 0 pages HighMem/MovableOnly [ 1723.475667] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1723.498311] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1723.503433] 363849 pages reserved [ 1723.520865] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1723.533597] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1723.533749] 0 pages cma reserved [ 1723.549912] 33588 total pagecache pages [ 1723.560226] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1723.583526] 0 pages in swap cache [ 1723.591127] Swap cache stats: add 0, delete 0, find 0/0 [ 1723.611031] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1723.636358] Free swap = 0kB [ 1723.639478] Total swap = 0kB [ 1723.642484] 2097051 pages RAM [ 1723.660667] 33588 total pagecache pages [ 1723.670639] 0 pages HighMem/MovableOnly [ 1723.682901] 0 pages in swap cache [ 1723.692340] 363849 pages reserved [ 1723.710257] Swap cache stats: add 0, delete 0, find 0/0 [ 1723.722059] 0 pages cma reserved [ 1723.740317] Free swap = 0kB [ 1723.743339] Total swap = 0kB [ 1723.752873] Out of memory (oom_kill_allocating_task): Kill process 30325 (syz-executor.0) score 0 or sacrifice child [ 1723.771685] 2097051 pages RAM [ 1723.780984] 0 pages HighMem/MovableOnly [ 1723.800175] Killed process 30325 (syz-executor.0) total-vm:93384kB, anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1723.827166] 363849 pages reserved [ 1723.830615] 0 pages cma reserved [ 1723.857766] syz-executor.0: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1723.882951] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 1723.902286] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 1723.932226] CPU: 1 PID: 30325 Comm: syz-executor.0 Not tainted 4.14.232-syzkaller #0 [ 1723.940114] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1723.949461] Call Trace: [ 1723.952046] dump_stack+0x1b2/0x281 [ 1723.955680] warn_alloc.cold+0x96/0x1cc [ 1723.959646] ? zone_watermark_ok_safe+0x220/0x220 [ 1723.964493] ? wait_for_completion_io+0x10/0x10 [ 1723.969157] __alloc_pages_nodemask+0x2127/0x2720 [ 1723.973997] ? lock_acquire+0x170/0x3f0 [ 1723.977974] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1723.982808] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1723.987306] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1723.992756] alloc_pages_current+0x155/0x260 [ 1723.997158] ion_page_pool_alloc+0x118/0x1b0 [ 1723.997619] team0: Port device team_slave_0 added [ 1724.001553] ion_system_heap_allocate+0x133/0x8c0 [ 1724.011206] ? _raw_spin_unlock+0x29/0x40 [ 1724.015360] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1724.020282] ? ion_system_contig_heap_create+0x130/0x130 [ 1724.025724] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1724.030737] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1724.035573] ion_alloc+0x27a/0x810 [ 1724.039111] ? ion_dma_buf_release+0x40/0x40 [ 1724.043513] ? __might_fault+0x177/0x1b0 [ 1724.047572] ion_ioctl+0xea/0x1f0 [ 1724.051026] ? ion_query_heaps+0x360/0x360 [ 1724.055254] ? ion_query_heaps+0x360/0x360 [ 1724.059479] do_vfs_ioctl+0x75a/0xff0 [ 1724.063269] ? ioctl_preallocate+0x1a0/0x1a0 [ 1724.067667] ? lock_downgrade+0x740/0x740 [ 1724.071812] ? __fget+0x225/0x360 [ 1724.075255] ? do_vfs_ioctl+0xff0/0xff0 [ 1724.079220] ? security_file_ioctl+0x83/0xb0 [ 1724.083617] SyS_ioctl+0x7f/0xb0 [ 1724.086970] ? do_vfs_ioctl+0xff0/0xff0 [ 1724.090951] do_syscall_64+0x1d5/0x640 [ 1724.094833] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1724.100010] RIP: 0033:0x4665f9 [ 1724.103194] RSP: 002b:00007fc8c6af5188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1724.110893] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1724.118149] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1724.125427] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1724.132685] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1724.139943] R13: 00007ffdd42e705f R14: 00007fc8c6af5300 R15: 0000000000022000 [ 1724.172702] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 1724.188946] team0: Port device team_slave_1 added [ 1724.229622] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1724.240291] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1724.296258] systemd[1]: Starting System Logging Service... [ 1724.319407] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1724.353458] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1724.375110] Mem-Info: [ 1724.376597] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1724.398224] active_anon:14837 inactive_anon:32407 isolated_anon:0 [ 1724.398224] active_file:560 inactive_file:1107 isolated_file:0 [ 1724.398224] unevictable:0 dirty:4 writeback:0 unstable:0 [ 1724.398224] slab_reclaimable:12458 slab_unreclaimable:115516 [ 1724.398224] mapped:53649 shmem:33556 pagetables:824 bounce:0 [ 1724.398224] free:39656 free_pcp:426 free_cma:0 [ 1724.433808] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1724.490876] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 1724.538266] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 1724.610574] Node 0 active_anon:57940kB inactive_anon:86208kB active_file:3940kB inactive_file:3852kB unevictable:0kB isolated(anon):0kB isolated(file):128kB mapped:113300kB dirty:12kB writeback:0kB shmem:90528kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1724.656189] device hsr_slave_0 entered promiscuous mode [ 1724.694553] device hsr_slave_1 entered promiscuous mode [ 1724.749773] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 1724.757683] Node 1 active_anon:1508kB inactive_anon:43420kB active_file:116kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:101996kB dirty:4kB writeback:0kB shmem:43696kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1724.781140] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 1724.870444] Node 0 DMA free:10996kB min:204kB low:252kB high:300kB active_anon:12kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1724.925295] systemd[1]: Started System Logging Service. [ 1724.968024] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1724.995012] Node 0 DMA32 free:36112kB min:36200kB low:45248kB high:54296kB active_anon:58416kB inactive_anon:86208kB active_file:2384kB inactive_file:2096kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7424kB pagetables:2524kB bounce:0kB free_pcp:1236kB local_pcp:664kB free_cma:0kB [ 1725.094305] lowmem_reserve[]: 0 0 0 0 0 [ 1725.098327] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1725.183781] Bluetooth: hci1 command 0x0419 tx timeout [ 1725.194282] lowmem_reserve[]: 0 0 0 0 0 [ 1725.198292] Node 1 Normal free:246904kB min:53696kB low:67120kB high:80544kB active_anon:1756kB inactive_anon:43420kB active_file:1368kB inactive_file:3040kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:704kB pagetables:804kB bounce:0kB free_pcp:1236kB local_pcp:628kB free_cma:0kB [ 1725.308600] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 1725.313877] lowmem_reserve[]: 0 0 0 0 0 [ 1725.318856] Node 0 DMA: 11*4kB (UME) 9*8kB (UME) 6*16kB (UM) 6*32kB (UME) 8*64kB (UME) 5*128kB (UME) 4*256kB (UME) 1*512kB (E) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (U) = 11284kB [ 1725.393719] Node 0 DMA32: 8411*4kB (UME) 2363*8kB (UME) 1095*16kB (UME) 200*32kB (UME) 391*64kB (UE) 228*128kB (U) 10*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 133236kB [ 1725.419962] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1725.442238] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 1725.463710] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1725.478828] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 1725.494240] Node 1 Normal: 3513*4kB (UM) 1179*8kB (UM) 673*16kB (UM) 160*32kB (UM) 2030*64kB (UM) 413*128kB (UM) 74*256kB (UM) 26*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 254412kB [ 1725.505607] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1725.545493] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1725.553789] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1725.554960] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 1725.562629] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1725.613705] 8021q: adding VLAN 0 to HW filter on device team0 [ 1725.625961] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 1725.633776] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1725.642615] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1725.653875] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1725.661699] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1725.694043] bridge0: port 1(bridge_slave_0) entered blocking state [ 1725.700406] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1725.723750] 36000 total pagecache pages [ 1725.727880] 0 pages in swap cache [ 1725.731325] Swap cache stats: add 0, delete 0, find 0/0 [ 1725.744152] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1725.750849] Free swap = 0kB [ 1725.777251] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 1725.788442] Total swap = 0kB [ 1725.791552] 2097051 pages RAM [ 1725.794962] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1725.803061] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1725.816010] 0 pages HighMem/MovableOnly [ 1725.819990] 363849 pages reserved [ 1725.823434] 0 pages cma reserved [ 1725.854084] bridge0: port 2(bridge_slave_1) entered blocking state [ 1725.860453] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1725.906383] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 1725.913968] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1725.924563] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 1725.933599] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 1725.941035] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1725.950991] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1725.958760] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1725.986377] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 1725.994021] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1726.000999] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1726.009106] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1726.031973] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 1726.042776] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1726.078709] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1726.107251] syz-executor.5: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1726.123509] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 1726.141649] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1726.151766] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 1726.161136] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1726.173810] CPU: 0 PID: 30347 Comm: syz-executor.5 Not tainted 4.14.232-syzkaller #0 [ 1726.181698] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1726.185943] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 1726.191041] Call Trace: [ 1726.199567] dump_stack+0x1b2/0x281 [ 1726.203194] warn_alloc.cold+0x96/0x1cc [ 1726.203821] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1726.207158] ? zone_watermark_ok_safe+0x220/0x220 [ 1726.218369] ? __alloc_pages_direct_compact+0x15b/0x330 [ 1726.223729] __alloc_pages_nodemask+0x2127/0x2720 [ 1726.228567] ? check_preemption_disabled+0x35/0x240 [ 1726.233587] ? lock_acquire+0x170/0x3f0 [ 1726.237560] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1726.242411] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1726.244582] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 1726.247855] ? __mutex_unlock_slowpath+0x75/0x770 [ 1726.255255] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 1726.258803] alloc_pages_current+0x155/0x260 [ 1726.269318] ion_page_pool_alloc+0x118/0x1b0 [ 1726.273723] ion_system_heap_allocate+0x133/0x8c0 [ 1726.273742] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1726.278575] ? _raw_spin_unlock+0x29/0x40 [ 1726.289275] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1726.293807] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1726.294197] ? ion_system_contig_heap_create+0x130/0x130 [ 1726.306182] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1726.311193] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1726.316035] ion_alloc+0x27a/0x810 [ 1726.319570] ? ion_dma_buf_release+0x40/0x40 [ 1726.323993] ? __might_fault+0x177/0x1b0 [ 1726.328046] ion_ioctl+0xea/0x1f0 [ 1726.331491] ? ion_query_heaps+0x360/0x360 [ 1726.335721] ? ion_query_heaps+0x360/0x360 [ 1726.339948] do_vfs_ioctl+0x75a/0xff0 [ 1726.343745] ? ioctl_preallocate+0x1a0/0x1a0 [ 1726.348144] ? lock_downgrade+0x740/0x740 [ 1726.352377] ? __fget+0x225/0x360 [ 1726.355828] ? do_vfs_ioctl+0xff0/0xff0 [ 1726.359797] ? security_file_ioctl+0x83/0xb0 [ 1726.364200] SyS_ioctl+0x7f/0xb0 [ 1726.367574] ? do_vfs_ioctl+0xff0/0xff0 [ 1726.371540] do_syscall_64+0x1d5/0x640 [ 1726.375441] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1726.380623] RIP: 0033:0x4665f9 [ 1726.383800] RSP: 002b:00007f87ada6b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1726.391506] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1726.398774] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1726.406035] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1726.413295] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1726.420558] R13: 00007fff979d8a6f R14: 00007f87ada6b300 R15: 0000000000022000 22:12:42 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$unix(0x1, 0x2, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x80000000, 0x6}) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000280)=ANY=[@ANYBLOB="40000000d05dfd0cf6aadfcd1c2c8204548f7ad25fb20c9fc1b948acee1bf738a8e2f89ba8ad644647776e1929696b34254e5dffa31fab7db2587004efe13e6e76fca3797168ba0ca323227067252996e8b160c2bec95a5f9f90491af03c1f501e1720021bfe4f682947ba1614a12e86a754", @ANYRES16=0x0, @ANYBLOB="000328bd7000ffdbdf2502000000080011000000000006000200010000000c0010000000000001000000050014001f00000008000b0000000000"], 0x40}, 0x1, 0x0, 0x0, 0xc000}, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) 22:12:43 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$unix(0x1, 0x2, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x80000000, 0x6}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000280)=ANY=[@ANYBLOB="40000000d05dfd0cf6aadfcd1c2c8204548f7ad25fb20c9fc1b948acee1bf738a8e2f89ba8ad644647776e1929696b34254e5dffa31fab7db2587004efe13e6e76fca3797168ba0ca323227067252996e8b160c2bec95a5f9f90491af03c1f501e1720021bfe4f682947ba1614a12e86a754", @ANYRES16=0x0, @ANYBLOB="000328bd7000ffdbdf2502000000080011000000000006000200010000000c0010000000000001000000050014001f00000008000b0000000000"], 0x40}, 0x1, 0x0, 0x0, 0xc000}, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) [ 1726.490345] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1726.955456] Mem-Info: [ 1726.958296] active_anon:14957 inactive_anon:32407 isolated_anon:0 [ 1726.958296] active_file:274 inactive_file:235 isolated_file:32 [ 1726.958296] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1726.958296] slab_reclaimable:12525 slab_unreclaimable:117792 [ 1726.958296] mapped:53138 shmem:33556 pagetables:738 bounce:0 [ 1726.958296] free:25363 free_pcp:0 free_cma:0 [ 1727.033619] Node 0 active_anon:57908kB inactive_anon:86208kB active_file:900kB inactive_file:904kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:110344kB dirty:0kB writeback:0kB shmem:90528kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1727.124162] Node 1 active_anon:1920kB inactive_anon:43420kB active_file:1396kB inactive_file:1436kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:103708kB dirty:0kB writeback:0kB shmem:43696kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1727.126409] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 1727.226983] Node 0 DMA free:11100kB min:204kB low:252kB high:300kB active_anon:12kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1727.296971] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 1727.313838] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1727.318895] Node 0 DMA32 free:44752kB min:36200kB low:45248kB high:54296kB active_anon:57896kB inactive_anon:86208kB active_file:580kB inactive_file:2924kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7328kB pagetables:2136kB bounce:0kB free_pcp:252kB local_pcp:132kB free_cma:0kB [ 1727.348519] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1727.357004] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1727.413603] lowmem_reserve[]: 0 0 0 0 0 [ 1727.417625] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1727.483778] lowmem_reserve[]: 0 0 0 0 0 [ 1727.487792] Node 1 Normal free:55684kB min:53696kB low:67120kB high:80544kB active_anon:1920kB inactive_anon:43420kB active_file:48kB inactive_file:128kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:704kB pagetables:816kB bounce:0kB free_pcp:1316kB local_pcp:648kB free_cma:0kB [ 1727.565612] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 1727.572359] lowmem_reserve[]: 0 0 0 0 0 [ 1727.582334] Node 0 DMA: 5*4kB (ME) 12*8kB (UME) 20*16kB (UM) 6*32kB (UME) 5*64kB (UME) 3*128kB (UME) 4*256kB (UME) 1*512kB (E) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (U) = 11060kB [ 1727.613620] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 1727.620502] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 1727.650214] Node 0 DMA32: 356*4kB (UME) 151*8kB (UME) 70*16kB (UME) 11*32kB (UME) 448*64kB (UM) 35*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 37256kB [ 1727.671361] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 1727.687425] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1727.708067] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1727.715220] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1727.736318] device veth0_vlan entered promiscuous mode [ 1727.744249] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1727.751157] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1727.763839] Node 1 Normal: 1070*4kB (UM) 525*8kB (UM) 85*16kB (UM) 29*32kB (UM) 417*64kB (UM) 89*128kB (UM) 6*256kB (UM) 23*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 62160kB [ 1727.786978] device veth1_vlan entered promiscuous mode [ 1727.792982] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 1727.823591] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1727.826804] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 1727.833816] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1727.858144] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1727.875221] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 1727.893744] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1727.902323] 34722 total pagecache pages [ 1727.909943] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 1727.924205] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1727.931394] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1727.938880] 0 pages in swap cache [ 1727.942350] Swap cache stats: add 0, delete 0, find 0/0 [ 1727.954122] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1727.964449] Free swap = 0kB [ 1727.967466] Total swap = 0kB [ 1727.970471] 2097051 pages RAM [ 1727.989838] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1728.004797] 0 pages HighMem/MovableOnly [ 1728.008769] 363849 pages reserved [ 1728.012219] 0 pages cma reserved [ 1728.025654] device veth0_macvtap entered promiscuous mode [ 1728.032052] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 1728.056685] systemd[1]: Started Journal Service. [ 1728.061868] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1728.077762] device veth1_macvtap entered promiscuous mode [ 1728.108009] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 1728.147141] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 1728.178088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1728.213516] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1728.222713] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1728.263562] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1728.272691] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1728.309832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1728.357139] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1728.379054] oom_reaper: reaped process 30512 (syz-executor.1), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1728.391903] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1728.427371] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1728.437240] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1728.468295] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 1728.488322] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1728.508058] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1728.516991] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1728.535447] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1728.567474] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1728.607146] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1728.617134] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1728.647010] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1728.670192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1728.697388] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1728.717356] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1728.739966] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1728.752413] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1728.767395] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 1728.778773] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1728.790107] systemd-journal invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=0 [ 1728.802658] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1728.812410] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1728.814772] systemd-journal cpuset=/ mems_allowed=0-1 [ 1728.833548] CPU: 0 PID: 30382 Comm: systemd-journal Not tainted 4.14.232-syzkaller #0 [ 1728.841522] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1728.850865] Call Trace: [ 1728.853458] dump_stack+0x1b2/0x281 [ 1728.857084] dump_header+0x178/0x82f [ 1728.860797] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1728.865995] ? ___ratelimit+0x2cd/0x530 [ 1728.869946] oom_kill_process.cold+0x10/0xa40 [ 1728.874430] out_of_memory+0xe3e/0x1190 [ 1728.878396] ? oom_killer_disable+0x1c0/0x1c0 [ 1728.882866] ? mutex_trylock+0x152/0x1a0 [ 1728.886911] __alloc_pages_nodemask+0x23e1/0x2720 [ 1728.891737] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1728.896556] ? entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1728.901901] ? cache_grow_begin+0x3f/0x700 [ 1728.906111] cache_grow_begin+0x91/0x700 [ 1728.910147] fallback_alloc+0x207/0x2c0 [ 1728.914100] kmem_cache_alloc+0x1e5/0x3c0 [ 1728.918227] getname_flags+0xc8/0x550 [ 1728.922005] user_path_at_empty+0x2a/0x50 [ 1728.926215] SyS_faccessat+0x21b/0x680 [ 1728.930080] ? SyS_fallocate+0x80/0x80 [ 1728.933947] ? do_syscall_64+0x4c/0x640 [ 1728.937893] ? SyS_faccessat+0x680/0x680 [ 1728.941929] do_syscall_64+0x1d5/0x640 [ 1728.945796] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1728.950960] RIP: 0033:0x7f3009dff9c7 [ 1728.954651] RSP: 002b:00007ffd732f7dd8 EFLAGS: 00000246 ORIG_RAX: 0000000000000015 [ 1728.962335] RAX: ffffffffffffffda RBX: 00007ffd732facf0 RCX: 00007f3009dff9c7 [ 1728.969585] RDX: 00007f300a870a00 RSI: 0000000000000000 RDI: 000055f2e84af9a3 [ 1728.976832] RBP: 00007ffd732f7e10 R08: 0000000000000000 R09: 0000000000000000 [ 1728.984178] R10: 0000000000000069 R11: 0000000000000246 R12: 0000000000000000 [ 1728.991424] R13: 0000000000000000 R14: 00007ffd732facf0 R15: 00007ffd732f8300 [ 1729.021940] Mem-Info: [ 1729.028699] active_anon:14938 inactive_anon:32407 isolated_anon:0 [ 1729.028699] active_file:17 inactive_file:17 isolated_file:0 [ 1729.028699] unevictable:0 dirty:0 writeback:1 unstable:0 [ 1729.028699] slab_reclaimable:12487 slab_unreclaimable:122424 [ 1729.028699] mapped:52784 shmem:33556 pagetables:735 bounce:0 [ 1729.028699] free:13823 free_pcp:0 free_cma:0 [ 1729.064008] syz-executor.1: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1729.094528] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 1729.096855] Node 0 active_anon:57956kB inactive_anon:86208kB active_file:60kB inactive_file:52kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:109108kB dirty:0kB writeback:0kB shmem:90528kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1729.099650] CPU: 1 PID: 30512 Comm: syz-executor.1 Not tainted 4.14.232-syzkaller #0 [ 1729.135156] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1729.144499] Call Trace: [ 1729.147083] dump_stack+0x1b2/0x281 [ 1729.150704] warn_alloc.cold+0x96/0x1cc [ 1729.153502] syz-executor.5: page allocation failure: order:0 [ 1729.154670] ? zone_watermark_ok_safe+0x220/0x220 [ 1729.154680] ? usleep_range+0x130/0x130 [ 1729.160452] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1729.165268] ? queue_work_on+0x10d/0x1d0 [ 1729.165279] ? _find_next_bit+0xdb/0x100 [ 1729.165288] ? run_timer_softirq+0x5a0/0x5a0 [ 1729.165304] __alloc_pages_nodemask+0x2127/0x2720 [ 1729.165320] ? lock_acquire+0x170/0x3f0 [ 1729.165335] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1729.176541] Node 1 active_anon:1796kB inactive_anon:43420kB active_file:8kB inactive_file:16kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:102028kB dirty:0kB writeback:4kB shmem:43696kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1729.180400] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1729.223072] (null) [ 1729.229461] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1729.229477] ? alloc_pages_current+0xe3/0x260 [ 1729.229490] alloc_pages_current+0x155/0x260 [ 1729.229504] ion_page_pool_alloc+0x118/0x1b0 [ 1729.229515] ion_system_heap_allocate+0x133/0x8c0 [ 1729.229525] ? ion_alloc+0x187/0x810 [ 1729.229534] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1729.229545] ? ion_system_contig_heap_create+0x130/0x130 [ 1729.274319] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1729.279332] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1729.284168] ion_alloc+0x204/0x810 [ 1729.287704] ? ion_dma_buf_release+0x40/0x40 [ 1729.292108] ? __might_fault+0x177/0x1b0 [ 1729.296164] ion_ioctl+0xea/0x1f0 [ 1729.299606] ? ion_query_heaps+0x360/0x360 [ 1729.303833] ? ion_query_heaps+0x360/0x360 [ 1729.308066] do_vfs_ioctl+0x75a/0xff0 [ 1729.311976] ? ioctl_preallocate+0x1a0/0x1a0 [ 1729.316377] ? lock_downgrade+0x740/0x740 [ 1729.320518] ? __fget+0x225/0x360 [ 1729.321371] Node 0 [ 1729.323956] ? do_vfs_ioctl+0xff0/0xff0 [ 1729.323969] ? security_file_ioctl+0x83/0xb0 [ 1729.323979] SyS_ioctl+0x7f/0xb0 [ 1729.323988] ? do_vfs_ioctl+0xff0/0xff0 [ 1729.324000] do_syscall_64+0x1d5/0x640 [ 1729.324015] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1729.324023] RIP: 0033:0x4665f9 [ 1729.324029] RSP: 002b:00007fd699bc5188 EFLAGS: 00000246 [ 1729.351921] DMA free:10964kB min:204kB low:252kB high:300kB active_anon:12kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1729.354101] ORIG_RAX: 0000000000000010 [ 1729.354107] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1729.354121] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1729.354126] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1729.354131] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1729.354136] R13: 00007ffcaf60874f R14: 00007fd699bc5300 R15: 0000000000022000 [ 1729.388104] Mem-Info: [ 1729.407162] syz-executor.5 cpuset= [ 1729.426436] active_anon:14938 inactive_anon:32407 isolated_anon:0 [ 1729.426436] active_file:17 inactive_file:17 isolated_file:0 [ 1729.426436] unevictable:0 dirty:0 writeback:1 unstable:0 [ 1729.426436] slab_reclaimable:12487 slab_unreclaimable:122424 [ 1729.426436] mapped:52784 shmem:33556 pagetables:735 bounce:0 [ 1729.426436] free:13823 free_pcp:0 free_cma:0 [ 1729.450035] / [ 1729.476791] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1729.487830] Node 0 DMA32 free:17792kB min:36200kB low:45248kB high:54296kB active_anon:57944kB inactive_anon:86208kB active_file:60kB inactive_file:52kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7328kB pagetables:2132kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1729.492641] Node 0 active_anon:57956kB inactive_anon:86208kB active_file:60kB inactive_file:52kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:109108kB dirty:0kB writeback:0kB shmem:90528kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1729.518536] mems_allowed=0-1 [ 1729.552320] Node 1 active_anon:1796kB inactive_anon:43420kB active_file:8kB inactive_file:16kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:102028kB dirty:0kB writeback:4kB shmem:43696kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1729.553534] CPU: 0 PID: 30347 Comm: syz-executor.5 Not tainted 4.14.232-syzkaller #0 [ 1729.579520] Node 0 [ 1729.587326] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1729.587330] Call Trace: [ 1729.587346] dump_stack+0x1b2/0x281 [ 1729.587359] warn_alloc.cold+0x96/0x1cc [ 1729.589575] DMA free:10964kB min:204kB low:252kB high:300kB active_anon:12kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1729.598899] ? zone_watermark_ok_safe+0x220/0x220 [ 1729.598908] ? usleep_range+0x130/0x130 [ 1729.598919] ? _find_next_bit+0xdb/0x100 [ 1729.601591] lowmem_reserve[]: [ 1729.605203] ? run_timer_softirq+0x5a0/0x5a0 [ 1729.605229] __alloc_pages_nodemask+0x2127/0x2720 [ 1729.609177] 0 [ 1729.634883] ? lock_acquire+0x170/0x3f0 [ 1729.634902] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1729.639722] 2717 [ 1729.643668] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1729.643682] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1729.643701] alloc_pages_current+0x155/0x260 [ 1729.647724] 2718 [ 1729.650810] ion_page_pool_alloc+0x118/0x1b0 [ 1729.655215] 2718 [ 1729.660022] ion_system_heap_allocate+0x133/0x8c0 [ 1729.661801] 2718 [ 1729.665753] ? _raw_spin_unlock+0x29/0x40 [ 1729.665761] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1729.665771] ? ion_system_contig_heap_create+0x130/0x130 [ 1729.672627] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1729.677106] Node 0 [ 1729.682518] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1729.686923] DMA32 free:17792kB min:36200kB low:45248kB high:54296kB active_anon:57944kB inactive_anon:86208kB active_file:60kB inactive_file:52kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7328kB pagetables:2132kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1729.688941] ion_alloc+0x27a/0x810 [ 1729.693316] lowmem_reserve[]: [ 1729.695358] ? ion_dma_buf_release+0x40/0x40 [ 1729.695370] ? __might_fault+0x177/0x1b0 [ 1729.700192] 0 [ 1729.702232] ion_ioctl+0xea/0x1f0 [ 1729.706361] 0 [ 1729.711254] ? ion_query_heaps+0x360/0x360 [ 1729.716698] 0 [ 1729.721677] ? ion_query_heaps+0x360/0x360 [ 1729.723914] 0 [ 1729.728722] do_vfs_ioctl+0x75a/0xff0 [ 1729.756757] 0 [ 1729.760257] ? ioctl_preallocate+0x1a0/0x1a0 [ 1729.767716] ? lock_downgrade+0x740/0x740 [ 1729.767728] ? __fget+0x225/0x360 [ 1729.767738] ? do_vfs_ioctl+0xff0/0xff0 [ 1729.771775] Node 0 [ 1729.773559] ? security_file_ioctl+0x83/0xb0 [ 1729.773568] SyS_ioctl+0x7f/0xb0 [ 1729.773577] ? do_vfs_ioctl+0xff0/0xff0 [ 1729.777024] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1729.778797] do_syscall_64+0x1d5/0x640 [ 1729.782996] lowmem_reserve[]: [ 1729.784788] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1729.784796] RIP: 0033:0x4665f9 [ 1729.784802] RSP: 002b:00007f87ada6b188 EFLAGS: 00000246 [ 1729.789077] 0 [ 1729.790860] ORIG_RAX: 0000000000000010 [ 1729.794675] 0 [ 1729.796426] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1729.800804] 0 [ 1729.804925] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1729.804930] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1729.804935] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1729.804941] R13: 00007fff979d8a6f R14: 00007f87ada6b300 R15: 0000000000022000 [ 1729.812896] lowmem_reserve[]: [ 1729.829472] 0 [ 1729.886183] 0 [ 1729.905742] 0 [ 1729.926731] 0 0 0 0 [ 1729.930864] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1729.971144] Node 1 Normal free:26544kB min:53696kB low:67120kB high:80544kB active_anon:1796kB inactive_anon:43420kB active_file:12kB inactive_file:8kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:672kB pagetables:808kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1729.992304] lowmem_reserve[]: [ 1730.015772] lowmem_reserve[]: 0 0 0 0 0 [ 1730.022856] Node 0 DMA: 5*4kB (ME) 6*8kB (UME) 3*16kB (M) 9*32kB (UME) 7*64kB (UME) 3*128kB (UME) 4*256kB (UME) 1*512kB (E) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (U) = 10964kB [ 1730.032784] 0 [ 1730.052785] Node 0 DMA32: 712*4kB (UMEH) 421*8kB (ME) 59*16kB (UME) 17*32kB (UME) 2*64kB (MH) 75*128kB (UM) 2*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 17944kB [ 1730.073282] 0 [ 1730.088424] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1730.101669] 0 0 0 [ 1730.109386] Node 1 Normal: 120*4kB (UM) 46*8kB (UM) 38*16kB (UM) 30*32kB (UM) 39*64kB (UM) 47*128kB (UM) 15*256kB (UM) 23*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 26544kB [ 1730.132044] Node 1 Normal free:26544kB min:53696kB low:67120kB high:80544kB active_anon:1796kB inactive_anon:43420kB active_file:12kB inactive_file:8kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:672kB pagetables:808kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1730.138038] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1730.185700] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1730.202321] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1730.217237] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1730.263937] 34255 total pagecache pages [ 1730.294039] 0 pages in swap cache [ 1730.308791] Swap cache stats: add 0, delete 0, find 0/0 [ 1730.353396] lowmem_reserve[]: 0 0 0 0 0 [ 1730.357412] Node 0 DMA: 5*4kB (ME) 6*8kB (UME) 3*16kB (M) 9*32kB (UME) 9*64kB (UME) 3*128kB (UME) 4*256kB (UME) 1*512kB (E) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (U) = 11092kB [ 1730.363402] Free swap = 0kB [ 1730.443398] Total swap = 0kB [ 1730.446431] 2097051 pages RAM [ 1730.449534] 0 pages HighMem/MovableOnly [ 1730.469797] 363849 pages reserved [ 1730.473257] 0 pages cma reserved [ 1730.475554] Node 0 DMA32: 7565*4kB (UEH) 549*8kB (UMEH) 295*16kB (UMEH) 276*32kB (UMEH) 1245*64kB (UMEH) 433*128kB (UMH) 34*256kB (UM) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 192012kB [ 1730.518692] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1730.539690] Node 1 Normal: 120*4kB (UM) 46*8kB (UM) 38*16kB (UM) 30*32kB (UM) 4550*64kB (UM) 932*128kB (UM) 175*256kB (UM) 26*512kB (UM) 3*1024kB (U) 0*2048kB 0*4096kB = 474096kB [ 1730.567306] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1730.576346] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1730.590188] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1730.645649] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1730.683423] 37215 total pagecache pages [ 1730.687495] 0 pages in swap cache [ 1730.690943] Swap cache stats: add 0, delete 0, find 0/0 [ 1730.703138] Free swap = 0kB [ 1730.710086] Total swap = 0kB [ 1730.726357] 2097051 pages RAM [ 1730.730893] 0 pages HighMem/MovableOnly [ 1730.763460] 363849 pages reserved [ 1730.766928] 0 pages cma reserved [ 1730.770281] Out of memory (oom_kill_allocating_task): Kill process 30382 (systemd-journal) score 0 or sacrifice child [ 1730.788507] Killed process 30382 (systemd-journal) total-vm:46096kB, anon-rss:464kB, file-rss:0kB, shmem-rss:2152kB 22:12:47 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) sendmsg$unix(r1, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x80000000, 0x6}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) [ 1730.834081] oom_reaper: reaped process 30382 (systemd-journal), now anon-rss:0kB, file-rss:0kB, shmem-rss:2152kB [ 1731.562104] syz-executor.5: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1731.563562] syz-executor.4: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1731.589944] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 1731.598959] CPU: 0 PID: 30649 Comm: syz-executor.4 Not tainted 4.14.232-syzkaller #0 [ 1731.606837] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1731.616183] Call Trace: [ 1731.618766] dump_stack+0x1b2/0x281 [ 1731.622395] warn_alloc.cold+0x96/0x1cc [ 1731.626371] ? zone_watermark_ok_safe+0x220/0x220 [ 1731.627590] syz-executor.5 cpuset= [ 1731.631226] __alloc_pages_nodemask+0x2127/0x2720 [ 1731.631238] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1731.631249] ? lock_acquire+0x170/0x3f0 [ 1731.648549] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1731.653395] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1731.658930] ? __mutex_unlock_slowpath+0x75/0x770 [ 1731.663769] alloc_pages_current+0x155/0x260 [ 1731.666789] / [ 1731.668169] ion_page_pool_alloc+0x118/0x1b0 [ 1731.672657] mems_allowed=0-1 [ 1731.674266] ion_system_heap_allocate+0x133/0x8c0 [ 1731.674277] ? ion_alloc+0x187/0x810 [ 1731.674288] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1731.674298] ? ion_system_contig_heap_create+0x130/0x130 [ 1731.674306] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1731.674317] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1731.706614] ion_alloc+0x204/0x810 [ 1731.710145] ? ion_dma_buf_release+0x40/0x40 [ 1731.714545] ? __might_fault+0x177/0x1b0 [ 1731.718601] ion_ioctl+0xea/0x1f0 [ 1731.722040] ? ion_query_heaps+0x360/0x360 [ 1731.726266] ? ion_query_heaps+0x360/0x360 [ 1731.730491] do_vfs_ioctl+0x75a/0xff0 [ 1731.734285] ? ioctl_preallocate+0x1a0/0x1a0 [ 1731.738683] ? lock_downgrade+0x740/0x740 [ 1731.742825] ? __fget+0x225/0x360 [ 1731.746265] ? do_vfs_ioctl+0xff0/0xff0 [ 1731.750231] ? security_file_ioctl+0x83/0xb0 [ 1731.754626] SyS_ioctl+0x7f/0xb0 [ 1731.757982] ? do_vfs_ioctl+0xff0/0xff0 [ 1731.761952] do_syscall_64+0x1d5/0x640 [ 1731.765843] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1731.771025] RIP: 0033:0x4665f9 [ 1731.774203] RSP: 002b:00007fac81df9188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1731.781907] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1731.789169] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1731.796430] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1731.803691] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1731.810951] R13: 00007fff1579bf3f R14: 00007fac81df9300 R15: 0000000000022000 [ 1731.818223] CPU: 1 PID: 30644 Comm: syz-executor.5 Not tainted 4.14.232-syzkaller #0 [ 1731.820269] warn_alloc_show_mem: 1 callbacks suppressed [ 1731.820272] Mem-Info: [ 1731.826094] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1731.826097] Call Trace: [ 1731.826113] dump_stack+0x1b2/0x281 [ 1731.826126] warn_alloc.cold+0x96/0x1cc [ 1731.826136] ? zone_watermark_ok_safe+0x220/0x220 [ 1731.826159] __alloc_pages_nodemask+0x2127/0x2720 [ 1731.826176] ? lock_acquire+0x170/0x3f0 [ 1731.826191] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1731.826207] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1731.826220] ? __mutex_unlock_slowpath+0x75/0x770 [ 1731.826234] alloc_pages_current+0x155/0x260 [ 1731.826247] ion_page_pool_alloc+0x118/0x1b0 [ 1731.826257] ion_system_heap_allocate+0x133/0x8c0 [ 1731.826267] ? ion_alloc+0x187/0x810 [ 1731.826277] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1731.826286] ? ion_system_contig_heap_create+0x130/0x130 [ 1731.826295] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1731.826305] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1731.826316] ion_alloc+0x204/0x810 [ 1731.826329] ? ion_dma_buf_release+0x40/0x40 [ 1731.826340] ? __might_fault+0x177/0x1b0 [ 1731.826350] ion_ioctl+0xea/0x1f0 [ 1731.826364] ? ion_query_heaps+0x360/0x360 [ 1731.826377] ? ion_query_heaps+0x360/0x360 [ 1731.826387] do_vfs_ioctl+0x75a/0xff0 [ 1731.826399] ? ioctl_preallocate+0x1a0/0x1a0 [ 1731.826406] ? lock_downgrade+0x740/0x740 [ 1731.826418] ? __fget+0x225/0x360 [ 1731.826428] ? do_vfs_ioctl+0xff0/0xff0 [ 1731.831781] active_anon:15274 inactive_anon:32401 isolated_anon:24 [ 1731.831781] active_file:1568 inactive_file:3728 isolated_file:0 [ 1731.831781] unevictable:0 dirty:17 writeback:25 unstable:0 [ 1731.831781] slab_reclaimable:12488 slab_unreclaimable:122277 [ 1731.831781] mapped:38691 shmem:33548 pagetables:705 bounce:0 [ 1731.831781] free:175776 free_pcp:389 free_cma:0 [ 1731.834179] ? security_file_ioctl+0x83/0xb0 [ 1731.834189] SyS_ioctl+0x7f/0xb0 [ 1731.834196] ? do_vfs_ioctl+0xff0/0xff0 [ 1731.834207] do_syscall_64+0x1d5/0x640 [ 1731.834219] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1731.834228] RIP: 0033:0x4665f9 [ 1731.843896] Node 0 active_anon:59456kB inactive_anon:86184kB active_file:6252kB inactive_file:14864kB unevictable:0kB isolated(anon):48kB isolated(file):0kB mapped:52736kB dirty:60kB writeback:100kB shmem:90496kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 14336kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1731.846116] RSP: 002b:00007f87ada6b188 EFLAGS: 00000246 [ 1731.849740] Node 1 active_anon:1640kB inactive_anon:43420kB active_file:20kB inactive_file:48kB unevictable:0kB isolated(anon):48kB isolated(file):0kB mapped:102028kB dirty:8kB writeback:0kB shmem:43696kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1731.853674] ORIG_RAX: 0000000000000010 [ 1731.853680] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1731.853685] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1731.853690] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1731.853695] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1731.853701] R13: 00007fff979d8a6f R14: 00007f87ada6b300 R15: 0000000000022000 [ 1732.086858] systemd[1]: systemd-journald.service: Failed with result 'signal'. [ 1732.091493] Node 0 [ 1732.142583] systemd[1]: systemd-journald.service: Service has no hold-off time, scheduling restart. [ 1732.157998] syz-executor.1: [ 1732.186951] DMA free:11012kB min:204kB low:252kB high:300kB active_anon:2060kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1732.187283] systemd[1]: Stopped Journal Service. [ 1732.189978] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1732.190002] Node 0 DMA32 free:339996kB min:36200kB low:45248kB high:54296kB active_anon:57436kB inactive_anon:86184kB active_file:7292kB inactive_file:15040kB unevictable:0kB writepending:60kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7232kB pagetables:1968kB bounce:0kB free_pcp:264kB local_pcp:144kB free_cma:0kB [ 1732.234572] page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1732.330640] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 1732.333580] systemd[1]: Starting Journal Service... [ 1732.356935] CPU: 0 PID: 30512 Comm: syz-executor.1 Not tainted 4.14.232-syzkaller #0 [ 1732.364850] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1732.367277] systemd[1]: Starting Load/Save RF Kill Switch Status... [ 1732.374193] Call Trace: [ 1732.374212] dump_stack+0x1b2/0x281 [ 1732.374226] warn_alloc.cold+0x96/0x1cc [ 1732.374238] ? zone_watermark_ok_safe+0x220/0x220 [ 1732.374258] __alloc_pages_nodemask+0x2127/0x2720 [ 1732.400436] ? lock_acquire+0x170/0x3f0 [ 1732.404411] ? lock_acquire+0x170/0x3f0 [ 1732.408387] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1732.413234] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1732.418686] ? __mutex_unlock_slowpath+0x75/0x770 [ 1732.423532] alloc_pages_current+0x155/0x260 [ 1732.427951] ion_page_pool_alloc+0x118/0x1b0 [ 1732.432358] ion_system_heap_allocate+0x133/0x8c0 [ 1732.437199] ? _raw_spin_unlock+0x29/0x40 [ 1732.441339] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1732.446262] ? ion_system_contig_heap_create+0x130/0x130 [ 1732.451707] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1732.456724] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1732.461565] ion_alloc+0x27a/0x810 [ 1732.465105] ? ion_dma_buf_release+0x40/0x40 [ 1732.469526] ? __might_fault+0x177/0x1b0 [ 1732.473582] ion_ioctl+0xea/0x1f0 [ 1732.477044] ? ion_query_heaps+0x360/0x360 [ 1732.481274] ? ion_query_heaps+0x360/0x360 [ 1732.485502] do_vfs_ioctl+0x75a/0xff0 [ 1732.489296] ? ioctl_preallocate+0x1a0/0x1a0 [ 1732.493696] ? lock_downgrade+0x740/0x740 [ 1732.497841] ? __fget+0x225/0x360 [ 1732.501287] ? do_vfs_ioctl+0xff0/0xff0 [ 1732.505257] ? security_file_ioctl+0x83/0xb0 [ 1732.509659] SyS_ioctl+0x7f/0xb0 [ 1732.513019] ? do_vfs_ioctl+0xff0/0xff0 [ 1732.516989] do_syscall_64+0x1d5/0x640 [ 1732.520874] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1732.526052] RIP: 0033:0x4665f9 [ 1732.529230] RSP: 002b:00007fd699bc5188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1732.536928] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1732.544190] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1732.551453] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1732.558717] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1732.565975] R13: 00007ffcaf60874f R14: 00007fd699bc5300 R15: 0000000000022000 [ 1732.586397] lowmem_reserve[]: 0 0 0 0 0 [ 1732.603307] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1732.639991] lowmem_reserve[]: 0 0 0 0 0 [ 1732.665269] systemd[1]: Started Load/Save RF Kill Switch Status. [ 1732.666713] Node 1 Normal free:192500kB min:53696kB low:67120kB high:80544kB active_anon:2012kB inactive_anon:43420kB active_file:620kB inactive_file:548kB unevictable:0kB writepending:4kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:672kB pagetables:956kB bounce:0kB free_pcp:240kB local_pcp:116kB free_cma:0kB [ 1732.737272] lowmem_reserve[]: 0 0 0 0 0 [ 1732.747570] Node 0 DMA: 97*4kB (UME) 38*8kB (UME) 41*16kB (UM) 24*32kB (UME) 7*64kB (UME) 6*128kB (UME) 4*256kB (UME) 1*512kB (E) 2*1024kB (ME) 2*2048kB (ME) 0*4096kB = 11012kB [ 1732.766476] systemd-journald[30656]: File /run/log/journal/04d8c135ee6b410280ba31a58c89679d/system.journal corrupted or uncleanly shut down, renaming and replacing. [ 1732.790434] Node 0 DMA32: 34*4kB (MEH) 117*8kB (UMEH) 30*16kB (UEH) 1326*32kB (UEH) 3*64kB (H) 2*128kB (H) 1*256kB (H) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 44688kB [ 1732.831883] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1732.876549] Node 1 Normal: 2*4kB (UM) 2*8kB (UM) 0*16kB 2012*32kB (U) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 64408kB [ 1732.896170] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1732.908535] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1732.970461] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1732.984848] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1732.998105] warn_alloc_show_mem: 1 callbacks suppressed [ 1732.998108] Mem-Info: [ 1733.003320] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1733.022344] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1733.027680] active_anon:15601 inactive_anon:34434 isolated_anon:0 [ 1733.027680] active_file:1560 inactive_file:1207 isolated_file:0 [ 1733.027680] unevictable:0 dirty:31 writeback:8 unstable:0 [ 1733.027680] slab_reclaimable:12521 slab_unreclaimable:122167 [ 1733.027680] mapped:54912 shmem:35596 pagetables:828 bounce:0 [ 1733.027680] free:33108 free_pcp:347 free_cma:0 [ 1733.034580] device bridge_slave_1 left promiscuous mode [ 1733.088315] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1733.121258] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB 22:12:49 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$unix(0x1, 0x2, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x80000000, 0x6}) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) [ 1733.150290] 37719 total pagecache pages [ 1733.155899] Node 0 active_anon:60048kB inactive_anon:86124kB active_file:3488kB inactive_file:2436kB unevictable:0kB isolated(anon):0kB isolated(file):128kB mapped:112828kB dirty:112kB writeback:24kB shmem:90496kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 14336kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1733.160384] 0 pages in swap cache [ 1733.193897] bridge0: port 2(bridge_slave_1) entered disabled state [ 1733.220267] device bridge_slave_0 left promiscuous mode [ 1733.235965] bridge0: port 1(bridge_slave_0) entered disabled state [ 1733.255983] Node 1 active_anon:2356kB inactive_anon:51612kB active_file:1100kB inactive_file:2928kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:105820kB dirty:12kB writeback:8kB shmem:51888kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1733.266108] Swap cache stats: add 0, delete 0, find 0/0 [ 1733.295353] device veth1_macvtap left promiscuous mode [ 1733.309401] device veth0_macvtap left promiscuous mode [ 1733.329521] device veth1_vlan left promiscuous mode [ 1733.343030] Node 0 DMA free:11012kB min:204kB low:252kB high:300kB active_anon:2060kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1733.351106] device veth0_vlan left promiscuous mode [ 1733.378495] Free swap = 0kB [ 1733.386005] Total swap = 0kB [ 1733.403525] 2097051 pages RAM [ 1733.418564] 0 pages HighMem/MovableOnly [ 1733.436431] 363849 pages reserved [ 1733.451803] 0 pages cma reserved [ 1733.498322] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1733.524393] Node 0 DMA32 free:89524kB min:36200kB low:45248kB high:54296kB active_anon:58292kB inactive_anon:86124kB active_file:3056kB inactive_file:2916kB unevictable:0kB writepending:136kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7520kB pagetables:2396kB bounce:0kB free_pcp:1292kB local_pcp:728kB free_cma:0kB [ 1733.618301] lowmem_reserve[]: 0 0 0 0 0 [ 1733.636381] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1733.728392] lowmem_reserve[]: 0 0 0 0 0 [ 1733.751230] Node 1 Normal free:108032kB min:53696kB low:67120kB high:80544kB active_anon:2356kB inactive_anon:51612kB active_file:1072kB inactive_file:948kB unevictable:0kB writepending:20kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:640kB pagetables:852kB bounce:0kB free_pcp:732kB local_pcp:728kB free_cma:0kB [ 1733.900070] lowmem_reserve[]: 0 0 0 0 0 [ 1733.920477] Node 0 DMA: 97*4kB (UME) 40*8kB (UME) 41*16kB (UM) 24*32kB (UME) 7*64kB (UME) 6*128kB (UME) 4*256kB (UME) 1*512kB (E) 2*1024kB (ME) 2*2048kB (ME) 0*4096kB = 11028kB [ 1733.951554] device hsr_slave_1 left promiscuous mode [ 1733.973601] Node 0 DMA32: 164*4kB (UMEH) 154*8kB (MEH) 2670*16kB (UMEH) 1538*32kB (UEH) 3*64kB (H) 2*128kB (H) 1*256kB (H) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 94528kB [ 1733.980848] syz-executor.2: [ 1734.003806] device hsr_slave_0 left promiscuous mode [ 1734.024752] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1734.025539] page allocation failure: order:4 [ 1734.050145] team0 (unregistering): Port device team_slave_1 removed [ 1734.057789] Node 1 [ 1734.073244] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1734.080948] Normal: [ 1734.088586] team0 (unregistering): Port device team_slave_0 removed [ 1734.095830] 13000*4kB [ 1734.098051] systemd[1]: Started Journal Service. [ 1734.100840] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 1734.115034] (UM) 1810*8kB (U) 1321*16kB (U) 2496*32kB (U) 92*64kB (U) 0*128kB 0*256kB [ 1734.122944] CPU: 0 PID: 30661 Comm: syz-executor.2 Not tainted 4.14.232-syzkaller #0 [ 1734.122958] 0*512kB [ 1734.131095] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1734.131099] Call Trace: [ 1734.131116] dump_stack+0x1b2/0x281 [ 1734.131129] warn_alloc.cold+0x96/0x1cc [ 1734.131142] ? zone_watermark_ok_safe+0x220/0x220 [ 1734.139048] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 1734.141318] __alloc_pages_nodemask+0x2127/0x2720 [ 1734.141334] ? lock_acquire+0x170/0x3f0 [ 1734.166980] 0*1024kB [ 1734.172601] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1734.172619] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1734.188331] 0*2048kB [ 1734.188602] ? __mutex_unlock_slowpath+0x75/0x770 [ 1734.199499] 0*4096kB [ 1734.201234] ? retint_kernel+0x2d/0x2d [ 1734.201249] alloc_pages_current+0x155/0x260 [ 1734.207983] = 173376kB [ 1734.211891] ion_page_pool_alloc+0x118/0x1b0 [ 1734.211901] ion_system_heap_allocate+0x133/0x8c0 [ 1734.220897] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1734.223585] ? ion_alloc+0x187/0x810 [ 1734.223596] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1734.223608] ? ion_system_contig_heap_create+0x130/0x130 [ 1734.242479] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1734.246970] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1734.246983] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1734.246995] ion_alloc+0x204/0x810 [ 1734.262107] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1734.265492] ? ion_dma_buf_release+0x40/0x40 [ 1734.265505] ? __might_fault+0x177/0x1b0 [ 1734.265516] ion_ioctl+0xea/0x1f0 [ 1734.283134] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1734.286273] ? ion_query_heaps+0x360/0x360 [ 1734.289700] 36662 total pagecache pages [ 1734.298254] ? ion_query_heaps+0x360/0x360 [ 1734.298264] do_vfs_ioctl+0x75a/0xff0 [ 1734.298276] ? ioctl_preallocate+0x1a0/0x1a0 [ 1734.313148] 0 pages in swap cache [ 1734.314429] ? lock_downgrade+0x740/0x740 [ 1734.318807] Swap cache stats: add 0, delete 0, find 0/0 [ 1734.322236] ? __fget+0x225/0x360 [ 1734.335151] ? do_vfs_ioctl+0xff0/0xff0 [ 1734.339118] ? security_file_ioctl+0x83/0xb0 [ 1734.343130] Free swap = 0kB [ 1734.343513] SyS_ioctl+0x7f/0xb0 [ 1734.346502] Total swap = 0kB [ 1734.349840] ? do_vfs_ioctl+0xff0/0xff0 [ 1734.352829] 2097051 pages RAM [ 1734.356778] do_syscall_64+0x1d5/0x640 [ 1734.356791] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1734.356800] RIP: 0033:0x4665f9 [ 1734.372109] RSP: 002b:00007fc1ab256188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1734.373126] 0 pages HighMem/MovableOnly [ 1734.379803] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1734.391022] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1734.393161] 363849 pages reserved [ 1734.398283] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1734.401713] 0 pages cma reserved [ 1734.408958] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1734.408964] R13: 00007ffd84742d3f R14: 00007fc1ab256300 R15: 0000000000022000 [ 1734.438506] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 1734.531739] bond0 (unregistering): Released all slaves [ 1734.841711] Mem-Info: [ 1734.852371] active_anon:15646 inactive_anon:34440 isolated_anon:24 [ 1734.852371] active_file:481 inactive_file:941 isolated_file:0 [ 1734.852371] unevictable:0 dirty:4 writeback:0 unstable:0 [ 1734.852371] slab_reclaimable:12526 slab_unreclaimable:123614 [ 1734.852371] mapped:53563 shmem:35604 pagetables:828 bounce:0 [ 1734.852371] free:79602 free_pcp:360 free_cma:0 [ 1734.973111] Node 0 active_anon:60224kB inactive_anon:86148kB active_file:1968kB inactive_file:3788kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:110856kB dirty:52kB writeback:0kB shmem:90532kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 14336kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1735.062627] Node 1 active_anon:2380kB inactive_anon:51612kB active_file:12kB inactive_file:12kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:103512kB dirty:4kB writeback:0kB shmem:51888kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1735.156281] Node 0 DMA free:11112kB min:204kB low:252kB high:300kB active_anon:2060kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1735.216262] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1735.230069] Node 0 DMA32 free:56212kB min:36200kB low:45248kB high:54296kB active_anon:58164kB inactive_anon:86148kB active_file:1968kB inactive_file:3788kB unevictable:0kB writepending:52kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7424kB pagetables:2344kB bounce:0kB free_pcp:704kB local_pcp:656kB free_cma:0kB [ 1735.318922] lowmem_reserve[]: 0 0 0 0 0 [ 1735.330647] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1735.423102] Bluetooth: hci2 command 0x0409 tx timeout [ 1735.428348] lowmem_reserve[]: 0 0 0 0 0 [ 1735.432338] Node 1 Normal free:152204kB min:53696kB low:67120kB high:80544kB active_anon:2380kB inactive_anon:51612kB active_file:12kB inactive_file:12kB unevictable:0kB writepending:4kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:640kB pagetables:968kB bounce:0kB free_pcp:612kB local_pcp:120kB free_cma:0kB [ 1735.503087] lowmem_reserve[]: 0 0 0 0 0 [ 1735.503278] Bluetooth: hci5 command 0x0409 tx timeout [ 1735.507091] Node 0 DMA: 12*4kB (UME) 24*8kB (UME) 45*16kB (UM) 24*32kB (UME) 9*64kB (UME) 9*128kB (UME) 4*256kB (UME) 1*512kB (E) 2*1024kB (ME) 2*2048kB (ME) 0*4096kB = 11136kB [ 1735.553074] Node 0 DMA32: 37*4kB (UMEH) 60*8kB (UMEH) 51*16kB (UMEH) 24*32kB (UMEH) 757*64kB (UMH) 15*128kB (UH) 1*256kB (H) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 52836kB [ 1735.583507] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1735.600855] Node 1 Normal: 6*4kB (UM) 0*8kB 1*16kB (U) 832*32kB (UM) 1462*64kB (U) 254*128kB (U) 41*256kB (UM) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 163240kB [ 1735.630488] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1735.649290] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1735.672281] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1735.694271] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1735.702850] 37068 total pagecache pages [ 1735.726028] 0 pages in swap cache [ 1735.729487] Swap cache stats: add 0, delete 0, find 0/0 [ 1735.743830] Free swap = 0kB [ 1735.756661] Total swap = 0kB [ 1735.759797] 2097051 pages RAM [ 1735.762910] 0 pages HighMem/MovableOnly [ 1735.785979] 363849 pages reserved [ 1735.789540] 0 pages cma reserved [ 1736.133297] oom_reaper: reaped process 30649 (syz-executor.4), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1736.342079] oom_reaper: reaped process 30661 (syz-executor.2), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1736.473562] syz-executor.1 invoked oom-killer: gfp_mask=0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null), order=0, oom_score_adj=1000 [ 1736.493050] syz-executor.4: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1736.495117] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 1736.510396] CPU: 1 PID: 30512 Comm: syz-executor.1 Not tainted 4.14.232-syzkaller #0 [ 1736.518267] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1736.523488] syz-executor.4 cpuset= [ 1736.527606] Call Trace: [ 1736.527612] / [ 1736.531134] dump_stack+0x1b2/0x281 [ 1736.539125] dump_header+0x178/0x82f [ 1736.542836] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1736.547934] ? ___ratelimit+0x2cd/0x530 [ 1736.551907] oom_kill_process.cold+0x10/0xa40 [ 1736.553009] mems_allowed=0-1 [ 1736.556401] out_of_memory+0xe3e/0x1190 [ 1736.563444] ? oom_killer_disable+0x1c0/0x1c0 [ 1736.567936] ? mutex_trylock+0x152/0x1a0 [ 1736.571993] __alloc_pages_nodemask+0x23e1/0x2720 [ 1736.576835] ? lock_acquire+0x170/0x3f0 [ 1736.580808] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1736.585639] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1736.590116] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1736.595552] ? __sanitizer_cov_trace_pc+0xe/0x50 [ 1736.600303] alloc_pages_current+0x155/0x260 [ 1736.604711] ion_page_pool_alloc+0x118/0x1b0 [ 1736.609110] ion_system_heap_allocate+0x133/0x8c0 [ 1736.613943] ? _raw_spin_unlock+0x29/0x40 [ 1736.618069] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1736.622989] ? ion_system_contig_heap_create+0x130/0x130 [ 1736.628434] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1736.633447] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1736.638287] ion_alloc+0x27a/0x810 [ 1736.641826] ? ion_dma_buf_release+0x40/0x40 [ 1736.646221] ? __might_fault+0x177/0x1b0 [ 1736.650258] ion_ioctl+0xea/0x1f0 [ 1736.653693] ? ion_query_heaps+0x360/0x360 [ 1736.657921] ? ion_query_heaps+0x360/0x360 [ 1736.662148] do_vfs_ioctl+0x75a/0xff0 [ 1736.665955] ? ioctl_preallocate+0x1a0/0x1a0 [ 1736.670354] ? lock_downgrade+0x740/0x740 [ 1736.674489] ? __fget+0x225/0x360 [ 1736.677939] ? do_vfs_ioctl+0xff0/0xff0 [ 1736.681892] ? security_file_ioctl+0x83/0xb0 [ 1736.686290] SyS_ioctl+0x7f/0xb0 [ 1736.689675] ? do_vfs_ioctl+0xff0/0xff0 [ 1736.693643] do_syscall_64+0x1d5/0x640 [ 1736.697530] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1736.702713] RIP: 0033:0x4665f9 [ 1736.705887] RSP: 002b:00007fd699bc5188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1736.713576] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1736.720833] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1736.728086] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1736.735339] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1736.742599] R13: 00007ffcaf60874f R14: 00007fd699bc5300 R15: 0000000000022000 [ 1736.836196] CPU: 0 PID: 30649 Comm: syz-executor.4 Not tainted 4.14.232-syzkaller #0 [ 1736.844102] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1736.853451] Call Trace: [ 1736.856034] dump_stack+0x1b2/0x281 [ 1736.859655] warn_alloc.cold+0x96/0x1cc [ 1736.863621] ? zone_watermark_ok_safe+0x220/0x220 [ 1736.868455] ? usleep_range+0x130/0x130 [ 1736.872425] ? try_to_free_pages+0x23f/0x6e0 [ 1736.876825] ? _find_next_bit+0xdb/0x100 [ 1736.880877] ? run_timer_softirq+0x5a0/0x5a0 [ 1736.885283] __alloc_pages_nodemask+0x2127/0x2720 [ 1736.890128] ? lock_acquire+0x170/0x3f0 [ 1736.894100] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1736.898934] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1736.902224] Mem-Info: [ 1736.903428] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1736.903442] ? alloc_pages_current+0xe3/0x260 [ 1736.905839] active_anon:15626 inactive_anon:34440 isolated_anon:0 [ 1736.905839] active_file:53 inactive_file:0 isolated_file:0 [ 1736.905839] unevictable:0 dirty:17 writeback:0 unstable:0 [ 1736.905839] slab_reclaimable:12511 slab_unreclaimable:123384 [ 1736.905839] mapped:52596 shmem:35605 pagetables:828 bounce:0 [ 1736.905839] free:22194 free_pcp:0 free_cma:0 [ 1736.911258] alloc_pages_current+0x155/0x260 [ 1736.922996] Node 0 active_anon:60124kB inactive_anon:86148kB active_file:100kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:106856kB dirty:52kB writeback:0kB shmem:90532kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 14336kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1736.948772] ion_page_pool_alloc+0x118/0x1b0 [ 1736.948783] ion_system_heap_allocate+0x133/0x8c0 [ 1736.953208] Node 1 active_anon:2380kB inactive_anon:51612kB active_file:112kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:103528kB dirty:16kB writeback:0kB shmem:51888kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1736.980916] ? ion_alloc+0x187/0x810 [ 1736.980928] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1736.980939] ? ion_system_contig_heap_create+0x130/0x130 [ 1736.985333] Node 0 [ 1736.990143] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1737.017464] DMA free:10980kB min:204kB low:252kB high:300kB active_anon:2060kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1737.021129] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1737.026560] lowmem_reserve[]: [ 1737.031974] ion_alloc+0x204/0x810 [ 1737.034194] 0 [ 1737.039176] ? ion_dma_buf_release+0x40/0x40 [ 1737.064926] 2717 [ 1737.069728] ? __might_fault+0x177/0x1b0 [ 1737.072810] 2718 [ 1737.076330] ion_ioctl+0xea/0x1f0 [ 1737.076339] ? ion_query_heaps+0x360/0x360 [ 1737.076351] ? ion_query_heaps+0x360/0x360 [ 1737.078123] 2718 [ 1737.082507] do_vfs_ioctl+0x75a/0xff0 [ 1737.084555] 2718 [ 1737.088579] ? ioctl_preallocate+0x1a0/0x1a0 [ 1737.094037] ? lock_downgrade+0x740/0x740 [ 1737.094050] ? __fget+0x225/0x360 [ 1737.094059] ? do_vfs_ioctl+0xff0/0xff0 [ 1737.098263] Node 0 [ 1737.102474] ? security_file_ioctl+0x83/0xb0 [ 1737.104533] DMA32 free:24100kB min:36200kB low:45248kB high:54296kB active_anon:58164kB inactive_anon:86148kB active_file:72kB inactive_file:28kB unevictable:0kB writepending:52kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7424kB pagetables:2344kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1737.108283] SyS_ioctl+0x7f/0xb0 [ 1737.110313] lowmem_reserve[]: [ 1737.114696] ? do_vfs_ioctl+0xff0/0xff0 [ 1737.114708] do_syscall_64+0x1d5/0x640 [ 1737.114733] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1737.118847] 0 [ 1737.122275] RIP: 0033:0x4665f9 [ 1737.126231] 0 [ 1737.128426] RSP: 002b:00007fac81df9188 EFLAGS: 00000246 [ 1737.132800] 0 0 [ 1737.160794] ORIG_RAX: 0000000000000010 [ 1737.160801] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1737.160805] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1737.160810] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1737.160815] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1737.160822] R13: 00007fff1579bf3f R14: 00007fac81df9300 R15: 0000000000022000 [ 1737.164173] 0 [ 1737.328978] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1737.366671] lowmem_reserve[]: 0 0 0 0 0 [ 1737.380968] Node 1 Normal free:31748kB min:53696kB low:67120kB high:80544kB active_anon:2348kB inactive_anon:51612kB active_file:12kB inactive_file:0kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:640kB pagetables:968kB bounce:0kB free_pcp:92kB local_pcp:0kB free_cma:0kB [ 1737.422078] lowmem_reserve[]: 0 0 0 0 0 [ 1737.432424] Node 0 DMA: 9*4kB (UME) 5*8kB (ME) 41*16kB (UM) 24*32kB (UME) 10*64kB (UME) 9*128kB (UME) 4*256kB (UME) 1*512kB (E) 2*1024kB (ME) 2*2048kB (ME) 0*4096kB = 10972kB [ 1737.450761] Mem-Info: [ 1737.455344] active_anon:15602 inactive_anon:34441 isolated_anon:0 [ 1737.455344] active_file:37 inactive_file:7 isolated_file:0 [ 1737.455344] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1737.455344] slab_reclaimable:12505 slab_unreclaimable:123256 [ 1737.455344] mapped:52601 shmem:35605 pagetables:828 bounce:0 [ 1737.455344] free:13939 free_pcp:68 free_cma:0 [ 1737.459319] Node 0 [ 1737.488619] syz-executor.2: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1737.498640] DMA32: 369*4kB (ME) 177*8kB (UME) 31*16kB (ME) 9*32kB (UME) 160*64kB (UM) 30*128kB (U) 1*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18012kB [ 1737.510052] Bluetooth: hci2 command 0x041b tx timeout [ 1737.521968] Node 0 active_anon:60060kB inactive_anon:86152kB active_file:136kB inactive_file:36kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:106876kB dirty:0kB writeback:0kB shmem:90532kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 14336kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1737.531178] Node 0 Normal: [ 1737.553895] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 1737.561935] CPU: 0 PID: 30661 Comm: syz-executor.2 Not tainted 4.14.232-syzkaller #0 [ 1737.567796] 0*4kB [ 1737.569798] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1737.569806] 0*8kB [ 1737.571948] Call Trace: [ 1737.581332] 0*16kB [ 1737.583418] dump_stack+0x1b2/0x281 [ 1737.583432] warn_alloc.cold+0x96/0x1cc [ 1737.585987] 0*32kB [ 1737.588204] ? zone_watermark_ok_safe+0x220/0x220 [ 1737.591801] 0*64kB [ 1737.595751] ? usleep_range+0x130/0x130 [ 1737.595759] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1737.595771] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1737.595781] ? run_timer_softirq+0x5a0/0x5a0 [ 1737.597989] 0*128kB [ 1737.602821] __alloc_pages_nodemask+0x2127/0x2720 [ 1737.605040] 0*256kB [ 1737.608980] ? lock_acquire+0x170/0x3f0 [ 1737.614063] 0*512kB [ 1737.619050] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1737.623441] 0*1024kB [ 1737.625731] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1737.630540] 0*2048kB [ 1737.632847] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1737.636805] 0*4096kB [ 1737.639101] alloc_pages_current+0x155/0x260 [ 1737.643920] = 0kB [ 1737.646297] ion_page_pool_alloc+0x118/0x1b0 [ 1737.650771] Node 1 [ 1737.653159] ion_system_heap_allocate+0x133/0x8c0 [ 1737.653170] ? ion_alloc+0x187/0x810 [ 1737.653181] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1737.658609] Normal: [ 1737.660996] ? ion_system_contig_heap_create+0x130/0x130 [ 1737.661007] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1737.665401] 10*4kB [ 1737.667428] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1737.671802] (UM) [ 1737.674020] ion_alloc+0x204/0x810 [ 1737.674036] ? ion_dma_buf_release+0x40/0x40 [ 1737.678849] 0*8kB [ 1737.682539] ? __might_fault+0x177/0x1b0 [ 1737.687971] 0*16kB [ 1737.690259] ion_ioctl+0xea/0x1f0 [ 1737.695691] 0*32kB [ 1737.700671] ? ion_query_heaps+0x360/0x360 [ 1737.702879] 0*64kB [ 1737.707702] ? ion_query_heaps+0x360/0x360 [ 1737.707711] do_vfs_ioctl+0x75a/0xff0 [ 1737.707722] ? ioctl_preallocate+0x1a0/0x1a0 [ 1737.709756] 147*128kB [ 1737.713271] ? lock_downgrade+0x740/0x740 [ 1737.713284] ? __fget+0x225/0x360 [ 1737.713294] ? do_vfs_ioctl+0xff0/0xff0 [ 1737.717689] (UM) [ 1737.719820] ? security_file_ioctl+0x83/0xb0 [ 1737.723863] 31*256kB [ 1737.726066] SyS_ioctl+0x7f/0xb0 [ 1737.729483] (UM) 0*512kB 0*1024kB [ 1737.731705] ? do_vfs_ioctl+0xff0/0xff0 [ 1737.735924] 0*2048kB [ 1737.738130] do_syscall_64+0x1d5/0x640 [ 1737.742332] 0*4096kB [ 1737.746127] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1737.746136] RIP: 0033:0x4665f9 [ 1737.746140] RSP: 002b:00007fc1ab256188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1737.746153] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1737.750540] = 26792kB [ 1737.753010] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1737.753015] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1737.753020] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1737.753025] R13: 00007ffd84742d3f R14: 00007fc1ab256300 R15: 0000000000022000 [ 1737.756941] Bluetooth: hci5 command 0x041b tx timeout [ 1737.757220] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1737.760689] Node 1 active_anon:2348kB inactive_anon:51612kB active_file:12kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:103528kB dirty:0kB writeback:0kB shmem:51888kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1737.776790] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1737.783521] Node 0 [ 1737.792014] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1737.797692] DMA free:10972kB min:204kB low:252kB high:300kB active_anon:2060kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1737.802207] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1737.811072] lowmem_reserve[]: [ 1737.829131] 35650 total pagecache pages [ 1737.838613] 0 [ 1737.858514] 0 pages in swap cache [ 1737.862294] 2717 [ 1737.905568] Swap cache stats: add 0, delete 0, find 0/0 [ 1737.914088] 2718 [ 1737.950591] Free swap = 0kB [ 1737.956101] 2718 [ 1737.964923] Total swap = 0kB [ 1737.965537] 2718 [ 1737.968519] 2097051 pages RAM [ 1737.970556] Node 0 DMA32 free:17996kB min:36200kB low:45248kB high:54296kB active_anon:58000kB inactive_anon:86152kB active_file:156kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7424kB pagetables:2344kB bounce:0kB free_pcp:280kB local_pcp:184kB free_cma:0kB [ 1737.988592] 0 pages HighMem/MovableOnly [ 1738.015866] lowmem_reserve[]: 0 0 0 0 0 [ 1738.020149] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1738.031356] 363849 pages reserved [ 1738.049551] lowmem_reserve[]: 0 0 0 0 0 [ 1738.053587] Node 1 Normal free:26788kB min:53696kB low:67120kB high:80544kB active_anon:2348kB inactive_anon:51612kB active_file:12kB inactive_file:0kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:640kB pagetables:968kB bounce:0kB free_pcp:120kB local_pcp:120kB free_cma:0kB [ 1738.063069] 0 pages cma reserved [ 1738.135168] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1738.141065] Out of memory (oom_kill_allocating_task): Kill process 30512 (syz-executor.1) score 0 or sacrifice child [ 1738.152927] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1738.162238] Killed process 30512 (syz-executor.1) total-vm:93384kB, anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1738.162662] lowmem_reserve[]: [ 1738.196349] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1738.203009] syz-executor.1: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1738.215689] 0 0 0 0 0 [ 1738.220397] Node 0 DMA: 9*4kB (UME) 5*8kB (ME) 41*16kB (UM) 24*32kB (UME) 10*64kB (UME) 9*128kB (UME) 4*256kB (UME) 1*512kB (E) 2*1024kB (ME) 2*2048kB (ME) 0*4096kB = 10972kB [ 1738.242948] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1738.264542] device bridge_slave_1 left promiscuous mode [ 1738.270045] bridge0: port 2(bridge_slave_1) entered disabled state [ 1738.273192] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 1738.279465] Node 0 DMA32: 510*4kB (UME) 435*8kB (UME) 31*16kB (ME) 9*32kB (UME) 357*64kB (UM) 47*128kB (U) 10*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 37728kB [ 1738.282050] CPU: 1 PID: 30512 Comm: syz-executor.1 Not tainted 4.14.232-syzkaller #0 [ 1738.304215] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1738.313555] Call Trace: [ 1738.316137] dump_stack+0x1b2/0x281 [ 1738.319757] warn_alloc.cold+0x96/0x1cc [ 1738.323724] ? zone_watermark_ok_safe+0x220/0x220 [ 1738.328565] ? wait_for_completion_io+0x10/0x10 [ 1738.333229] __alloc_pages_nodemask+0x2127/0x2720 [ 1738.338071] ? lock_acquire+0x170/0x3f0 [ 1738.342041] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1738.346872] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1738.351366] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1738.352896] Node 0 Normal: 0*4kB [ 1738.356811] ? __sanitizer_cov_trace_pc+0xe/0x50 [ 1738.356824] alloc_pages_current+0x155/0x260 [ 1738.360251] 0*8kB [ 1738.364985] ion_page_pool_alloc+0x118/0x1b0 [ 1738.364995] ion_system_heap_allocate+0x133/0x8c0 [ 1738.365007] ? _raw_spin_unlock+0x29/0x40 [ 1738.365015] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1738.365025] ? ion_system_contig_heap_create+0x130/0x130 [ 1738.365036] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1738.365045] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1738.365056] ion_alloc+0x27a/0x810 [ 1738.405816] 0*16kB 0*32kB 0*64kB [ 1738.408588] ? ion_dma_buf_release+0x40/0x40 [ 1738.408601] ? __might_fault+0x177/0x1b0 [ 1738.412040] 0*128kB [ 1738.416440] ion_ioctl+0xea/0x1f0 [ 1738.416450] ? ion_query_heaps+0x360/0x360 [ 1738.416462] ? ion_query_heaps+0x360/0x360 [ 1738.416472] do_vfs_ioctl+0x75a/0xff0 [ 1738.416485] ? ioctl_preallocate+0x1a0/0x1a0 [ 1738.442886] ? lock_downgrade+0x740/0x740 [ 1738.447035] ? __fget+0x225/0x360 [ 1738.450480] ? do_vfs_ioctl+0xff0/0xff0 [ 1738.452894] 0*256kB 0*512kB [ 1738.454445] ? security_file_ioctl+0x83/0xb0 [ 1738.454455] SyS_ioctl+0x7f/0xb0 [ 1738.457450] 0*1024kB [ 1738.461834] ? do_vfs_ioctl+0xff0/0xff0 [ 1738.471520] do_syscall_64+0x1d5/0x640 [ 1738.475410] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1738.480610] RIP: 0033:0x4665f9 [ 1738.483798] RSP: 002b:00007fd699bc5188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1738.491496] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1738.492913] 0*2048kB [ 1738.498752] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1738.498758] 0*4096kB [ 1738.501143] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1738.518050] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1738.525318] R13: 00007ffcaf60874f R14: 00007fd699bc5300 R15: 0000000000022000 [ 1738.537202] device bridge_slave_0 left promiscuous mode [ 1738.542893] bridge0: port 1(bridge_slave_0) entered disabled state [ 1738.578425] = 0kB [ 1738.581147] Node 1 Normal: 5964*4kB (UME) 106*8kB (UME) 15*16kB (UME) 6*32kB (UME) 1*64kB (U) 933*128kB (U) 97*256kB (UME) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 169456kB [ 1738.605987] device veth1_macvtap left promiscuous mode [ 1738.612144] device veth0_macvtap left promiscuous mode [ 1738.625674] device veth1_vlan left promiscuous mode [ 1738.653293] device veth0_vlan left promiscuous mode [ 1738.658886] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1738.691507] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1738.742882] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1738.751857] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1738.778049] warn_alloc_show_mem: 1 callbacks suppressed [ 1738.778052] Mem-Info: [ 1738.789561] active_anon:15527 inactive_anon:34441 isolated_anon:0 [ 1738.789561] active_file:233 inactive_file:247 isolated_file:24 [ 1738.789561] unevictable:0 dirty:0 writeback:25 unstable:0 [ 1738.789561] slab_reclaimable:12505 slab_unreclaimable:123568 [ 1738.789561] mapped:53101 shmem:35605 pagetables:828 bounce:0 [ 1738.789561] free:18595 free_pcp:234 free_cma:0 [ 1738.794700] 36034 total pagecache pages [ 1738.847149] Node 0 active_anon:60060kB inactive_anon:86152kB active_file:32kB inactive_file:60kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:106876kB dirty:0kB writeback:0kB shmem:90532kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 14336kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1738.852532] 0 pages in swap cache [ 1738.879305] Swap cache stats: add 0, delete 0, find 0/0 [ 1738.886872] in:imklog invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1738.887367] syz-executor.2: [ 1738.912862] Free swap = 0kB [ 1738.925799] Total swap = 0kB [ 1738.928821] 2097051 pages RAM [ 1738.931914] 0 pages HighMem/MovableOnly [ 1738.937165] page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1738.952750] 363849 pages reserved [ 1738.965450] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 1738.970576] CPU: 0 PID: 30661 Comm: syz-executor.2 Not tainted 4.14.232-syzkaller #0 [ 1738.978441] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1738.987781] Call Trace: [ 1738.990365] dump_stack+0x1b2/0x281 [ 1738.994019] warn_alloc.cold+0x96/0x1cc [ 1738.997984] ? zone_watermark_ok_safe+0x220/0x220 [ 1739.002829] __alloc_pages_nodemask+0x2127/0x2720 [ 1739.007670] ? lock_acquire+0x170/0x3f0 [ 1739.011645] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1739.016491] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1739.021576] Node 1 active_anon:1996kB inactive_anon:51612kB active_file:36kB inactive_file:16kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:103628kB dirty:0kB writeback:0kB shmem:51888kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1739.021954] ? __mutex_unlock_slowpath+0x75/0x770 [ 1739.054007] alloc_pages_current+0x155/0x260 [ 1739.058411] ion_page_pool_alloc+0x118/0x1b0 [ 1739.062809] ion_system_heap_allocate+0x133/0x8c0 [ 1739.067026] Node 0 DMA free:11004kB min:204kB low:252kB high:300kB active_anon:2060kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1739.067650] ? _raw_spin_unlock+0x29/0x40 [ 1739.067660] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1739.094021] lowmem_reserve[]: [ 1739.098129] ? ion_system_contig_heap_create+0x130/0x130 [ 1739.103042] 0 [ 1739.106111] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1739.111526] 2717 [ 1739.113308] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1739.113319] ion_alloc+0x27a/0x810 [ 1739.113332] ? ion_dma_buf_release+0x40/0x40 [ 1739.118315] 2718 [ 1739.120357] ? __might_fault+0x177/0x1b0 [ 1739.125183] 2718 [ 1739.128690] ion_ioctl+0xea/0x1f0 [ 1739.133080] 2718 [ 1739.135109] ? ion_query_heaps+0x360/0x360 [ 1739.141180] ? ion_query_heaps+0x360/0x360 [ 1739.144617] Node 0 [ 1739.146659] do_vfs_ioctl+0x75a/0xff0 [ 1739.150873] DMA32 free:36196kB min:36200kB low:45248kB high:54296kB active_anon:58008kB inactive_anon:86152kB active_file:32kB inactive_file:52kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7392kB pagetables:2372kB bounce:0kB free_pcp:128kB local_pcp:4kB free_cma:0kB [ 1739.155076] ? ioctl_preallocate+0x1a0/0x1a0 [ 1739.155084] ? lock_downgrade+0x740/0x740 [ 1739.155097] ? __fget+0x225/0x360 [ 1739.157301] lowmem_reserve[]: [ 1739.161080] ? do_vfs_ioctl+0xff0/0xff0 [ 1739.189169] 0 [ 1739.193541] ? security_file_ioctl+0x83/0xb0 [ 1739.193550] SyS_ioctl+0x7f/0xb0 [ 1739.193559] ? do_vfs_ioctl+0xff0/0xff0 [ 1739.197679] 0 [ 1739.201112] do_syscall_64+0x1d5/0x640 [ 1739.204199] 0 [ 1739.208141] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1739.209908] 0 [ 1739.214293] RIP: 0033:0x4665f9 [ 1739.214298] RSP: 002b:00007fc1ab256188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1739.214309] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1739.217647] 0 [ 1739.221596] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1739.227236] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1739.229009] Node 0 [ 1739.234171] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1739.234176] R13: 00007ffd84742d3f R14: 00007fc1ab256300 R15: 0000000000022000 [ 1739.252401] 0 pages cma reserved [ 1739.297520] in:imklog cpuset=/ mems_allowed=0-1 [ 1739.303800] device hsr_slave_1 left promiscuous mode [ 1739.335983] CPU: 1 PID: 30553 Comm: in:imklog Not tainted 4.14.232-syzkaller #0 [ 1739.343444] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1739.352790] Call Trace: [ 1739.355374] dump_stack+0x1b2/0x281 [ 1739.358993] dump_header+0x178/0x82f [ 1739.362702] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1739.367799] ? ___ratelimit+0x2cd/0x530 [ 1739.371768] oom_kill_process.cold+0x10/0xa40 [ 1739.376269] out_of_memory+0xe3e/0x1190 [ 1739.380239] ? oom_killer_disable+0x1c0/0x1c0 [ 1739.384734] ? mutex_trylock+0x152/0x1a0 [ 1739.388793] __alloc_pages_nodemask+0x23e1/0x2720 [ 1739.393643] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1739.398493] alloc_pages_current+0x155/0x260 [ 1739.402895] filemap_fault+0x11a1/0x1ad0 [ 1739.406959] ext4_filemap_fault+0x84/0xb0 [ 1739.411099] __do_fault+0xfa/0x380 [ 1739.414630] __handle_mm_fault+0x2497/0x4620 [ 1739.419028] ? vm_insert_page+0x7c0/0x7c0 [ 1739.423176] ? lock_downgrade+0x740/0x740 [ 1739.427349] ? mark_held_locks+0xa6/0xf0 [ 1739.431405] handle_mm_fault+0x455/0x9c0 [ 1739.435459] __do_page_fault+0x549/0xad0 [ 1739.439514] ? spurious_fault+0x640/0x640 [ 1739.443659] ? do_page_fault+0x60/0x500 [ 1739.447627] ? page_fault+0x2f/0x50 [ 1739.451244] page_fault+0x45/0x50 [ 1739.454683] RIP: 1fa0:0x1f9f [ 1739.457701] RSP: 0000:000055b44d1bc9d0 EFLAGS: 7f4811f16da0 [ 1739.457788] device hsr_slave_0 left promiscuous mode [ 1739.476301] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1739.512722] lowmem_reserve[]: 0 0 0 0 0 [ 1739.513565] team0 (unregistering): Port device team_slave_1 removed [ 1739.517961] Node 1 Normal free:286324kB min:53696kB low:67120kB high:80544kB active_anon:1996kB inactive_anon:51612kB active_file:136kB inactive_file:408kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:640kB pagetables:880kB bounce:0kB free_pcp:256kB local_pcp:0kB free_cma:0kB [ 1739.552570] team0 (unregistering): Port device team_slave_0 removed [ 1739.583435] lowmem_reserve[]: 0 0 0 0 0 [ 1739.587441] Node 0 DMA: 1*4kB (M) 3*8kB (UE) 32*16kB (U) 22*32kB (UME) 17*64kB (UME) 9*128kB (UME) 4*256kB (UME) 1*512kB (E) 2*1024kB (ME) 2*2048kB (ME) 0*4096kB = 11164kB [ 1739.591313] Bluetooth: hci2 command 0x040f tx timeout [ 1739.603038] Node 0 DMA32: 27106*4kB (UME) 3398*8kB (UE) 1331*16kB (UE) 43*32kB (UE) 298*64kB (U) 12*128kB (UM) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 178888kB [ 1739.603102] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1739.603148] Node 1 Normal: 237*4kB (U) 62*8kB (U) 47*16kB (U) [ 1739.646076] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 1739.665989] Mem-Info: [ 1739.668420] active_anon:15516 inactive_anon:34441 isolated_anon:0 [ 1739.668420] active_file:162 inactive_file:672 isolated_file:0 [ 1739.668420] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1739.668420] slab_reclaimable:12495 slab_unreclaimable:123078 [ 1739.668420] mapped:53226 shmem:35605 pagetables:813 bounce:0 [ 1739.668420] free:127084 free_pcp:395 free_cma:0 [ 1739.702046] 45*32kB (UM) 3270*64kB (UM) 328*128kB (U) 123*256kB (UM) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 286388kB [ 1739.712620] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 1739.732922] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1739.754233] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1739.770724] Node 0 active_anon:60068kB inactive_anon:86152kB active_file:612kB inactive_file:3180kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:109376kB dirty:0kB writeback:0kB shmem:90532kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 14336kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1739.792033] bond0 (unregistering): Released all slaves [ 1739.823918] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1739.824455] Bluetooth: hci5 command 0x040f tx timeout [ 1739.832814] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1739.832820] 36736 total pagecache pages [ 1739.853416] 0 pages in swap cache [ 1739.856883] Swap cache stats: add 0, delete 0, find 0/0 [ 1739.879785] Node 1 active_anon:1996kB inactive_anon:51612kB active_file:136kB inactive_file:408kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:104028kB dirty:0kB writeback:0kB shmem:51888kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1739.922814] Free swap = 0kB [ 1739.925836] Total swap = 0kB [ 1739.928854] 2097051 pages RAM [ 1739.931955] 0 pages HighMem/MovableOnly [ 1739.942825] 363849 pages reserved [ 1739.952837] 0 pages cma reserved [ 1739.956642] Node 0 DMA free:11244kB min:204kB low:252kB high:300kB active_anon:2060kB inactive_anon:0kB active_file:124kB inactive_file:208kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1740.062979] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1740.068151] Node 0 DMA32 free:339808kB min:36200kB low:45248kB high:54296kB active_anon:57960kB inactive_anon:86148kB active_file:528kB inactive_file:2980kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7360kB pagetables:2344kB bounce:0kB free_pcp:1360kB local_pcp:624kB free_cma:0kB [ 1740.112848] lowmem_reserve[]: 0 0 0 0 0 [ 1740.116853] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1740.162846] lowmem_reserve[]: 0 0 0 0 0 [ 1740.166844] Node 1 Normal free:388480kB min:53696kB low:67120kB high:80544kB active_anon:1992kB inactive_anon:51612kB active_file:148kB inactive_file:404kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:640kB pagetables:880kB bounce:0kB free_pcp:1328kB local_pcp:684kB free_cma:0kB [ 1740.222808] lowmem_reserve[]: 0 0 0 0 0 [ 1740.232838] Node 0 DMA: 31*4kB (UM) 11*8kB (UME) 32*16kB (U) 22*32kB (UME) 19*64kB (UME) 9*128kB (UME) 4*256kB (UME) 1*512kB (E) 2*1024kB (ME) 2*2048kB (ME) 0*4096kB = 11476kB [ 1740.302793] Node 0 DMA32: 39754*4kB (UME) 10625*8kB (UME) 4694*16kB (UME) 1213*32kB (UE) 628*64kB (U) 27*128kB (UM) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 401584kB [ 1740.318228] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1740.392796] Node 1 Normal: 15438*4kB (UM) 1235*8kB (UM) 908*16kB (U) 875*32kB (U) 3060*64kB (UM) 416*128kB (U) 123*256kB (UM) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 394736kB [ 1740.473452] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1740.482335] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1740.492868] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1740.492874] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1740.492877] 36677 total pagecache pages [ 1740.492886] 0 pages in swap cache [ 1740.492890] Swap cache stats: add 0, delete 0, find 0/0 [ 1740.492894] Free swap = 0kB [ 1740.492896] Total swap = 0kB [ 1740.492902] 2097051 pages RAM [ 1740.492905] 0 pages HighMem/MovableOnly [ 1740.492908] 363849 pages reserved [ 1740.492911] 0 pages cma reserved [ 1740.492918] Out of memory (oom_kill_allocating_task): Kill process 30553 (in:imklog) score 0 or sacrifice child [ 1740.492957] Killed process 30532 (rsyslogd) total-vm:254332kB, anon-rss:792kB, file-rss:0kB, shmem-rss:0kB [ 1740.503138] oom_reaper: reaped process 30532 (rsyslogd), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1740.755669] syz-executor.4: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1740.793335] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 1740.798993] CPU: 1 PID: 30649 Comm: syz-executor.4 Not tainted 4.14.232-syzkaller #0 [ 1740.806875] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1740.816220] Call Trace: [ 1740.818800] dump_stack+0x1b2/0x281 [ 1740.822420] warn_alloc.cold+0x96/0x1cc [ 1740.826385] ? zone_watermark_ok_safe+0x220/0x220 [ 1740.831232] __alloc_pages_nodemask+0x2127/0x2720 [ 1740.836066] ? _raw_spin_unlock_irq+0x5a/0x80 [ 1740.840549] ? finish_task_switch+0x178/0x610 [ 1740.845030] ? finish_task_switch+0x14d/0x610 [ 1740.849519] ? lock_acquire+0x170/0x3f0 [ 1740.853489] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1740.858327] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1740.863772] ? __mutex_unlock_slowpath+0x75/0x770 [ 1740.868610] ? alloc_pages_current+0x37/0x260 [ 1740.873095] alloc_pages_current+0x155/0x260 [ 1740.877497] ion_page_pool_alloc+0x118/0x1b0 [ 1740.881895] ion_system_heap_allocate+0x133/0x8c0 [ 1740.886729] ? _raw_spin_unlock+0x29/0x40 [ 1740.890866] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1740.895784] ? ion_system_contig_heap_create+0x130/0x130 [ 1740.901221] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1740.906230] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1740.911062] ion_alloc+0x27a/0x810 [ 1740.914599] ? ion_dma_buf_release+0x40/0x40 [ 1740.919017] ? __might_fault+0x177/0x1b0 [ 1740.923072] ion_ioctl+0xea/0x1f0 [ 1740.926511] ? ion_query_heaps+0x360/0x360 [ 1740.930737] ? ion_query_heaps+0x360/0x360 [ 1740.934959] do_vfs_ioctl+0x75a/0xff0 [ 1740.938751] ? ioctl_preallocate+0x1a0/0x1a0 [ 1740.943153] ? lock_downgrade+0x740/0x740 [ 1740.947296] ? __fget+0x225/0x360 [ 1740.950743] ? do_vfs_ioctl+0xff0/0xff0 [ 1740.954709] ? security_file_ioctl+0x83/0xb0 [ 1740.959106] SyS_ioctl+0x7f/0xb0 [ 1740.962462] ? do_vfs_ioctl+0xff0/0xff0 [ 1740.966439] do_syscall_64+0x1d5/0x640 [ 1740.970330] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1740.975514] RIP: 0033:0x4665f9 [ 1740.978806] RSP: 002b:00007fac81df9188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1740.986508] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1740.993764] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1741.001019] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1741.008276] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1741.015535] R13: 00007fff1579bf3f R14: 00007fac81df9300 R15: 0000000000022000 [ 1741.122769] warn_alloc_show_mem: 1 callbacks suppressed [ 1741.122773] Mem-Info: [ 1741.122810] active_anon:15293 inactive_anon:34440 isolated_anon:0 [ 1741.122810] active_file:682 inactive_file:1472 isolated_file:0 [ 1741.122810] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1741.122810] slab_reclaimable:12473 slab_unreclaimable:122532 [ 1741.122810] mapped:54075 shmem:35604 pagetables:750 bounce:0 [ 1741.122810] free:162333 free_pcp:182 free_cma:0 [ 1741.122825] Node 0 active_anon:59668kB inactive_anon:86148kB active_file:2672kB inactive_file:5812kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:112516kB dirty:0kB writeback:0kB shmem:90528kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 14336kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1741.122840] Node 1 active_anon:1504kB inactive_anon:51612kB active_file:56kB inactive_file:76kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:103784kB dirty:0kB writeback:0kB shmem:51888kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no 22:12:57 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$unix(0x1, 0x2, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x80000000, 0x6}) socket$nl_generic(0x10, 0x3, 0x10) [ 1741.122843] Node 0 DMA free:10992kB min:204kB low:252kB high:300kB active_anon:2060kB inactive_anon:0kB active_file:124kB inactive_file:188kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1741.122861] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1741.122880] Node 0 DMA32 free:424452kB min:36200kB low:45248kB high:54296kB active_anon:57608kB inactive_anon:86148kB active_file:2448kB inactive_file:5724kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7296kB pagetables:2248kB bounce:0kB free_pcp:404kB local_pcp:220kB free_cma:0kB [ 1741.329567] lowmem_reserve[]: 0 0 0 0 0 [ 1741.340402] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1741.382748] lowmem_reserve[]: 0 0 0 0 0 [ 1741.386760] Node 1 Normal free:213988kB min:53696kB low:67120kB high:80544kB active_anon:1504kB inactive_anon:51612kB active_file:56kB inactive_file:76kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:576kB pagetables:752kB bounce:0kB free_pcp:52kB local_pcp:20kB free_cma:0kB [ 1741.429974] syz-executor.1: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1741.479612] lowmem_reserve[]: 0 0 0 0 0 [ 1741.480200] syz-executor.1 cpuset= [ 1741.488082] Node 0 [ 1741.491459] / [ 1741.495873] DMA: [ 1741.498294] mems_allowed=0-1 [ 1741.499789] 53*4kB [ 1741.504751] CPU: 0 PID: 30683 Comm: syz-executor.1 Not tainted 4.14.232-syzkaller #0 [ 1741.510129] (UM) [ 1741.514840] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1741.514845] Call Trace: [ 1741.514861] dump_stack+0x1b2/0x281 [ 1741.514877] warn_alloc.cold+0x96/0x1cc [ 1741.522318] 17*8kB [ 1741.526253] ? zone_watermark_ok_safe+0x220/0x220 [ 1741.526277] __alloc_pages_nodemask+0x2127/0x2720 [ 1741.526293] ? lock_acquire+0x170/0x3f0 [ 1741.535381] (UE) [ 1741.536415] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1741.541877] 33*16kB [ 1741.543451] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1741.543463] ? __mutex_unlock_slowpath+0x75/0x770 [ 1741.543476] alloc_pages_current+0x155/0x260 [ 1741.550462] (UM) [ 1741.552250] ion_page_pool_alloc+0x118/0x1b0 [ 1741.552260] ion_system_heap_allocate+0x133/0x8c0 [ 1741.561251] 22*32kB [ 1741.561457] ? ion_alloc+0x187/0x810 [ 1741.573401] (UME) [ 1741.576087] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1741.576101] ? ion_system_contig_heap_create+0x130/0x130 [ 1741.581384] 9*64kB [ 1741.582527] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1741.582537] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1741.582548] ion_alloc+0x204/0x810 [ 1741.595991] (UME) [ 1741.600929] ? ion_dma_buf_release+0x40/0x40 [ 1741.600941] ? __might_fault+0x177/0x1b0 [ 1741.618072] 8*128kB [ 1741.618407] ion_ioctl+0xea/0x1f0 [ 1741.625232] (UME) [ 1741.628550] ? ion_query_heaps+0x360/0x360 [ 1741.628562] ? ion_query_heaps+0x360/0x360 [ 1741.637502] 5*256kB [ 1741.638345] do_vfs_ioctl+0x75a/0xff0 [ 1741.643755] (UME) [ 1741.644687] ? ioctl_preallocate+0x1a0/0x1a0 [ 1741.654321] 1*512kB [ 1741.654982] ? lock_downgrade+0x740/0x740 [ 1741.660365] (E) [ 1741.661496] ? __fget+0x225/0x360 [ 1741.661505] ? do_vfs_ioctl+0xff0/0xff0 [ 1741.667083] 2*1024kB [ 1741.667937] ? security_file_ioctl+0x83/0xb0 [ 1741.675958] (ME) [ 1741.677303] SyS_ioctl+0x7f/0xb0 [ 1741.677310] ? do_vfs_ioctl+0xff0/0xff0 [ 1741.677321] do_syscall_64+0x1d5/0x640 [ 1741.680812] 2*2048kB [ 1741.684112] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1741.684120] RIP: 0033:0x4665f9 [ 1741.684125] RSP: 002b:00007fd699bc5188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1741.684135] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1741.684143] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1741.692392] (ME) [ 1741.693481] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1741.693487] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1741.693492] R13: 00007ffcaf60874f R14: 00007fd699bc5300 R15: 0000000000022000 [ 1741.693987] Bluetooth: hci2 command 0x0419 tx timeout [ 1741.711951] 0*4096kB = 11116kB [ 1741.815352] Node 0 DMA32: 0*4kB 0*8kB 6*16kB (E) 1973*32kB (UE) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 63232kB [ 1741.839272] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1741.876377] Node 1 Normal: 13092*4kB (U) 3815*8kB (U) 1786*16kB (U) 2183*32kB (U) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 181320kB [ 1741.893574] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1741.902736] Bluetooth: hci5 command 0x0419 tx timeout [ 1741.907356] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1741.935490] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1741.960114] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1741.982057] 39397 total pagecache pages [ 1741.990591] 0 pages in swap cache [ 1741.998568] Swap cache stats: add 0, delete 0, find 0/0 [ 1742.009429] Free swap = 0kB [ 1742.016828] Total swap = 0kB [ 1742.023151] 2097051 pages RAM [ 1742.029572] 0 pages HighMem/MovableOnly [ 1742.037997] 363849 pages reserved [ 1742.047286] 0 pages cma reserved [ 1742.193574] IPVS: ftp: loaded support on port[0] = 21 [ 1742.209614] oom_reaper: reaped process 30644 (syz-executor.5), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1742.337991] rsyslogd invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1742.417538] rsyslogd cpuset=/ mems_allowed=0-1 [ 1742.422163] CPU: 0 PID: 30680 Comm: rsyslogd Not tainted 4.14.232-syzkaller #0 [ 1742.429510] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1742.438852] Call Trace: [ 1742.441431] dump_stack+0x1b2/0x281 [ 1742.445054] dump_header+0x178/0x82f [ 1742.448767] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1742.453867] ? ___ratelimit+0x2cd/0x530 [ 1742.457836] oom_kill_process.cold+0x10/0xa40 [ 1742.462334] out_of_memory+0xe3e/0x1190 [ 1742.466316] ? oom_killer_disable+0x1c0/0x1c0 [ 1742.470815] ? mutex_trylock+0x152/0x1a0 [ 1742.474870] __alloc_pages_nodemask+0x23e1/0x2720 [ 1742.479715] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1742.484547] alloc_pages_current+0x155/0x260 [ 1742.488931] filemap_fault+0x11a1/0x1ad0 [ 1742.492979] ext4_filemap_fault+0x84/0xb0 [ 1742.497101] __do_fault+0xfa/0x380 [ 1742.500618] __handle_mm_fault+0x2497/0x4620 [ 1742.505003] ? vm_insert_page+0x7c0/0x7c0 [ 1742.509127] ? vm_mmap_pgoff+0x168/0x1a0 [ 1742.513168] ? mark_held_locks+0xa6/0xf0 [ 1742.517205] handle_mm_fault+0x455/0x9c0 [ 1742.521245] __do_page_fault+0x549/0xad0 [ 1742.525303] ? spurious_fault+0x640/0x640 [ 1742.529428] ? do_page_fault+0x60/0x500 [ 1742.533378] ? page_fault+0x2f/0x50 [ 1742.536984] page_fault+0x45/0x50 [ 1742.540413] RIP: 0000:0x802 [ 1742.543318] RSP: 987b9b00:0000000000008030 EFLAGS: 00000001 [ 1742.554117] Mem-Info: [ 1742.554690] syz-executor.4: [ 1742.559833] active_anon:14858 inactive_anon:34440 isolated_anon:0 [ 1742.559833] active_file:16 inactive_file:16 isolated_file:0 [ 1742.559833] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1742.559833] slab_reclaimable:12470 slab_unreclaimable:122436 [ 1742.559833] mapped:52669 shmem:35604 pagetables:800 bounce:0 [ 1742.559833] free:13761 free_pcp:1 free_cma:0 [ 1742.562215] page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1742.574614] Node 0 active_anon:57780kB inactive_anon:86152kB active_file:60kB inactive_file:60kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:106876kB dirty:0kB writeback:0kB shmem:90532kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1742.598449] syz-executor.2: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1742.598471] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 1742.598492] CPU: 1 PID: 30661 Comm: syz-executor.2 Not tainted 4.14.232-syzkaller #0 [ 1742.617723] Node 1 active_anon:1652kB inactive_anon:51608kB active_file:4kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:103800kB dirty:0kB writeback:0kB shmem:51884kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1742.635996] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1742.636001] Call Trace: [ 1742.636018] dump_stack+0x1b2/0x281 [ 1742.636031] warn_alloc.cold+0x96/0x1cc [ 1742.636049] ? zone_watermark_ok_safe+0x220/0x220 [ 1742.636059] ? usleep_range+0x130/0x130 [ 1742.636068] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1742.636080] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1742.636091] ? run_timer_softirq+0x5a0/0x5a0 [ 1742.636107] __alloc_pages_nodemask+0x2127/0x2720 [ 1742.636122] ? lock_acquire+0x170/0x3f0 [ 1742.657163] Node 0 [ 1742.660837] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1742.706172] DMA free:10960kB min:204kB low:252kB high:300kB active_anon:12kB inactive_anon:0kB active_file:32kB inactive_file:28kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1742.707349] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1742.712162] lowmem_reserve[]: [ 1742.716122] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1742.716141] alloc_pages_current+0x155/0x260 [ 1742.716153] ion_page_pool_alloc+0x118/0x1b0 [ 1742.716163] ion_system_heap_allocate+0x133/0x8c0 [ 1742.716174] ? _raw_spin_unlock+0x29/0x40 [ 1742.716182] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1742.716192] ? ion_system_contig_heap_create+0x130/0x130 [ 1742.716201] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1742.716213] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1742.752372] 0 [ 1742.772241] ion_alloc+0x27a/0x810 [ 1742.772256] ? ion_dma_buf_release+0x40/0x40 [ 1742.772268] ? __might_fault+0x177/0x1b0 [ 1742.772279] ion_ioctl+0xea/0x1f0 [ 1742.772288] ? ion_query_heaps+0x360/0x360 [ 1742.772299] ? ion_query_heaps+0x360/0x360 [ 1742.772309] do_vfs_ioctl+0x75a/0xff0 [ 1742.772322] ? ioctl_preallocate+0x1a0/0x1a0 [ 1742.772332] ? lock_downgrade+0x740/0x740 [ 1742.772345] ? __fget+0x225/0x360 [ 1742.772354] ? do_vfs_ioctl+0xff0/0xff0 [ 1742.772366] ? security_file_ioctl+0x83/0xb0 [ 1742.772376] SyS_ioctl+0x7f/0xb0 [ 1742.772383] ? do_vfs_ioctl+0xff0/0xff0 [ 1742.772393] do_syscall_64+0x1d5/0x640 [ 1742.772406] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1742.772416] RIP: 0033:0x4665f9 [ 1742.801635] 2717 [ 1742.803138] RSP: 002b:00007fc1ab256188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1742.803148] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1742.803153] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1742.803158] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1742.803163] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1742.803169] R13: 00007ffd84742d3f R14: 00007fc1ab256300 R15: 0000000000022000 [ 1742.822629] warn_alloc_show_mem: 1 callbacks suppressed [ 1742.822632] Mem-Info: [ 1742.827172] syz-executor.5: [ 1742.828800] active_anon:14858 inactive_anon:34440 isolated_anon:0 [ 1742.828800] active_file:16 inactive_file:16 isolated_file:0 [ 1742.828800] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1742.828800] slab_reclaimable:12470 slab_unreclaimable:122436 [ 1742.828800] mapped:52669 shmem:35604 pagetables:800 bounce:0 [ 1742.828800] free:13761 free_pcp:1 free_cma:0 [ 1742.838408] page allocation failure: order:0 [ 1742.844287] Node 0 active_anon:57780kB inactive_anon:86152kB active_file:60kB inactive_file:60kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:106876kB dirty:0kB writeback:0kB shmem:90532kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1742.848613] (null) [ 1742.849162] Node 1 active_anon:1652kB inactive_anon:51608kB active_file:4kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:103800kB dirty:0kB writeback:0kB shmem:51884kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1742.858154] syz-executor.4 cpuset= [ 1742.864503] Node 0 [ 1742.868637] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1742.868927] DMA free:10960kB min:204kB low:252kB high:300kB active_anon:12kB inactive_anon:0kB active_file:52kB inactive_file:8kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1742.875106] (null) [ 1742.889142] lowmem_reserve[]: [ 1742.894720] / [ 1742.902721] 0 [ 1742.903750] 2718 [ 1742.910254] 2717 [ 1742.921152] syz-executor.5 cpuset= [ 1742.932298] 2718 [ 1742.944970] mems_allowed=0-1 [ 1742.955229] 2718 [ 1742.988789] 2718 [ 1743.023019] / [ 1743.051066] CPU: 0 PID: 30649 Comm: syz-executor.4 Not tainted 4.14.232-syzkaller #0 [ 1743.068132] mems_allowed=0-1 [ 1743.083191] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1743.083195] Call Trace: [ 1743.083212] dump_stack+0x1b2/0x281 [ 1743.083226] warn_alloc.cold+0x96/0x1cc [ 1743.085358] 2718 [ 1743.088452] ? zone_watermark_ok_safe+0x220/0x220 [ 1743.091927] ? usleep_range+0x130/0x130 [ 1743.102576] Node 0 [ 1743.104621] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1743.106665] DMA32 free:17904kB min:36200kB low:45248kB high:54296kB active_anon:57768kB inactive_anon:86152kB active_file:28kB inactive_file:36kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7328kB pagetables:2412kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB [ 1743.108701] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1743.110383] lowmem_reserve[]: [ 1743.118243] ? run_timer_softirq+0x5a0/0x5a0 [ 1743.118262] __alloc_pages_nodemask+0x2127/0x2720 [ 1743.142573] 0 [ 1743.142931] ? lock_acquire+0x170/0x3f0 [ 1743.147745] 0 [ 1743.151701] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1743.162574] 0 [ 1743.186893] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1743.186909] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1743.186927] alloc_pages_current+0x155/0x260 [ 1743.222567] 0 [ 1743.222829] ion_page_pool_alloc+0x118/0x1b0 [ 1743.228254] 0 [ 1743.232644] ion_system_heap_allocate+0x133/0x8c0 [ 1743.232654] ? _raw_spin_unlock+0x29/0x40 [ 1743.232664] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1743.245410] ? ion_system_contig_heap_create+0x130/0x130 [ 1743.249525] Node 0 [ 1743.254431] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1743.254440] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1743.254451] ion_alloc+0x27a/0x810 [ 1743.275408] ? ion_dma_buf_release+0x40/0x40 [ 1743.279795] ? __might_fault+0x177/0x1b0 [ 1743.282575] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1743.283835] ion_ioctl+0xea/0x1f0 [ 1743.312132] ? ion_query_heaps+0x360/0x360 [ 1743.316347] ? ion_query_heaps+0x360/0x360 [ 1743.320560] do_vfs_ioctl+0x75a/0xff0 [ 1743.324340] ? ioctl_preallocate+0x1a0/0x1a0 [ 1743.328723] ? lock_downgrade+0x740/0x740 [ 1743.332560] lowmem_reserve[]: 0 0 [ 1743.332852] ? __fget+0x225/0x360 [ 1743.332861] ? do_vfs_ioctl+0xff0/0xff0 [ 1743.336286] 0 [ 1743.339731] ? security_file_ioctl+0x83/0xb0 [ 1743.349838] SyS_ioctl+0x7f/0xb0 [ 1743.352561] 0 [ 1743.353182] ? do_vfs_ioctl+0xff0/0xff0 [ 1743.353184] 0 [ 1743.354968] do_syscall_64+0x1d5/0x640 [ 1743.358909] Node 1 [ 1743.360694] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1743.371919] RIP: 0033:0x4665f9 [ 1743.375085] RSP: 002b:00007fac81df9188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1743.382571] Normal free:26324kB min:53696kB low:67120kB high:80544kB active_anon:1652kB inactive_anon:51608kB active_file:4kB inactive_file:4kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:576kB pagetables:788kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1743.382787] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1743.417605] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1743.424853] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1743.432100] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1743.432554] lowmem_reserve[]: [ 1743.439348] R13: 00007fff1579bf3f R14: 00007fac81df9300 R15: 0000000000022000 [ 1743.439354] 0 [ 1743.448227] 2718 [ 1743.453557] Node 0 DMA32 free:17904kB min:36200kB low:45248kB high:54296kB active_anon:57768kB inactive_anon:86152kB active_file:28kB inactive_file:36kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7328kB pagetables:2412kB bounce:0kB free_pcp:4kB local_pcp:0kB free_cma:0kB [ 1743.458402] CPU: 1 PID: 30644 Comm: syz-executor.5 Not tainted 4.14.232-syzkaller #0 [ 1743.487592] lowmem_reserve[]: [ 1743.489962] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1743.489969] 0 [ 1743.493043] Call Trace: [ 1743.493060] dump_stack+0x1b2/0x281 [ 1743.493074] warn_alloc.cold+0x96/0x1cc [ 1743.493086] ? zone_watermark_ok_safe+0x220/0x220 [ 1743.493097] ? usleep_range+0x130/0x130 [ 1743.507971] 0 [ 1743.510481] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1743.514479] 0 [ 1743.519248] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1743.528550] 0 [ 1743.530057] ? run_timer_softirq+0x5a0/0x5a0 [ 1743.531831] 0 [ 1743.536832] __alloc_pages_nodemask+0x2127/0x2720 [ 1743.536849] ? lock_acquire+0x170/0x3f0 [ 1743.536871] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1743.543028] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1743.543045] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1743.543060] ? policy_node+0xb8/0x110 [ 1743.543072] alloc_pages_current+0x155/0x260 [ 1743.543083] ion_page_pool_alloc+0x118/0x1b0 [ 1743.550243] Node 0 [ 1743.553637] ion_system_heap_allocate+0x133/0x8c0 [ 1743.553647] ? ion_alloc+0x187/0x810 [ 1743.553657] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1743.553666] ? ion_system_contig_heap_create+0x130/0x130 [ 1743.553674] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1743.553683] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1743.553693] ion_alloc+0x204/0x810 [ 1743.558535] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1743.562988] ? ion_dma_buf_release+0x40/0x40 [ 1743.563001] ? __might_fault+0x177/0x1b0 [ 1743.563014] ion_ioctl+0xea/0x1f0 [ 1743.563023] ? ion_query_heaps+0x360/0x360 [ 1743.563034] ? ion_query_heaps+0x360/0x360 [ 1743.563044] do_vfs_ioctl+0x75a/0xff0 [ 1743.573237] lowmem_reserve[]: [ 1743.576634] ? ioctl_preallocate+0x1a0/0x1a0 [ 1743.581008] 0 [ 1743.583222] ? lock_downgrade+0x740/0x740 [ 1743.583236] ? __fget+0x225/0x360 [ 1743.583245] ? do_vfs_ioctl+0xff0/0xff0 [ 1743.583254] ? security_file_ioctl+0x83/0xb0 [ 1743.583264] SyS_ioctl+0x7f/0xb0 [ 1743.590727] 0 [ 1743.591773] ? do_vfs_ioctl+0xff0/0xff0 [ 1743.598985] 0 [ 1743.602624] do_syscall_64+0x1d5/0x640 [ 1743.602639] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1743.602648] RIP: 0033:0x4665f9 [ 1743.602653] RSP: 002b:00007f87ada6b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1743.602665] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1743.610585] 0 [ 1743.612474] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1743.618538] 0 [ 1743.640866] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1743.640871] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1743.640876] R13: 00007fff979d8a6f R14: 00007f87ada6b300 R15: 0000000000022000 [ 1743.652980] 0 [ 1743.661363] 0 0 [ 1743.665412] Node 1 Normal free:26324kB min:53696kB low:67120kB high:80544kB active_anon:1652kB inactive_anon:51608kB active_file:4kB inactive_file:4kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:576kB pagetables:788kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1743.665431] lowmem_reserve[]: 0 0 0 0 0 [ 1743.665450] Node 0 DMA: 2*4kB (M) 5*8kB (ME) 4*16kB (UM) 5*32kB (UME) 5*64kB (UME) 3*128kB (UME) 5*256kB (UME) 1*512kB (E) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 10960kB [ 1743.665527] Node 0 DMA32: 438*4kB (UME) 193*8kB (UME) 23*16kB (UME) 427*32kB (UE) 5*64kB (U) 2*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 17904kB [ 1743.665598] Node 0 Normal: 0*4kB [ 1743.678750] 0 [ 1743.680194] 0*8kB [ 1743.687233] 0*16kB [ 1743.696760] Node 0 [ 1743.700075] 0*32kB [ 1743.701854] DMA: [ 1743.707565] 0*64kB [ 1743.717788] 2*4kB [ 1743.721945] 0*128kB [ 1743.735764] (M) [ 1743.740109] 0*256kB [ 1743.758615] 5*8kB [ 1743.763806] 0*512kB 0*1024kB [ 1743.772903] (ME) [ 1743.795756] 0*2048kB [ 1743.809439] 4*16kB [ 1743.815278] 0*4096kB [ 1743.833303] (UM) [ 1743.846211] = 0kB [ 1743.850678] 5*32kB [ 1743.854457] Node 1 [ 1743.858977] (UME) [ 1743.860191] Normal: [ 1743.862228] 5*64kB [ 1743.868130] 3*4kB [ 1743.872758] (UME) [ 1743.875147] (M) [ 1743.875575] 3*128kB [ 1743.877786] 15*8kB [ 1743.879909] (UME) [ 1743.882204] (M) [ 1743.890766] 5*256kB [ 1743.898194] 1*16kB [ 1743.899308] (UME) [ 1743.901607] (U) [ 1743.907854] 1*512kB (E) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 10960kB [ 1743.911587] 818*32kB [ 1743.916806] Node 0 DMA32: 438*4kB (UME) 197*8kB (UME) 23*16kB (UME) 427*32kB (UE) 5*64kB (U) 2*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 17936kB [ 1743.928652] (U) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 26324kB [ 1743.937822] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1743.951210] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1743.957896] Mem-Info: [ 1743.965689] active_anon:14858 inactive_anon:34440 isolated_anon:0 [ 1743.965689] active_file:42 inactive_file:0 isolated_file:0 [ 1743.965689] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1743.965689] slab_reclaimable:12470 slab_unreclaimable:122436 [ 1743.965689] mapped:52669 shmem:35604 pagetables:800 bounce:0 [ 1743.965689] free:13797 free_pcp:15 free_cma:0 [ 1743.972765] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1744.002566] Node 1 Normal: 3*4kB (M) 15*8kB (M) 1*16kB (U) 818*32kB (U) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 26324kB [ 1744.032799] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1744.052194] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1744.061929] Node 0 active_anon:57780kB inactive_anon:86152kB active_file:164kB inactive_file:464kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:106876kB dirty:0kB writeback:0kB shmem:90532kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1744.084761] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1744.101009] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1744.114622] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1744.133738] 36193 total pagecache pages [ 1744.134837] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1744.137716] 0 pages in swap cache [ 1744.137722] Swap cache stats: add 0, delete 0, find 0/0 [ 1744.137728] Free swap = 0kB [ 1744.162721] Node 1 active_anon:1652kB inactive_anon:51608kB active_file:4kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:103800kB dirty:0kB writeback:0kB shmem:51884kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1744.175725] 36193 total pagecache pages [ 1744.214764] IPVS: ftp: loaded support on port[0] = 21 [ 1744.225171] 0 pages in swap cache [ 1744.229000] Swap cache stats: add 0, delete 0, find 0/0 [ 1744.238010] Free swap = 0kB [ 1744.250279] Total swap = 0kB [ 1744.252587] Total swap = 0kB [ 1744.256665] 2097051 pages RAM [ 1744.256836] 2097051 pages RAM [ 1744.259886] 0 pages HighMem/MovableOnly [ 1744.263761] Node 0 [ 1744.272557] 363849 pages reserved [ 1744.278254] 0 pages cma reserved [ 1744.281610] Out of memory (oom_kill_allocating_task): Kill process 30680 (rsyslogd) score 0 or sacrifice child [ 1744.285865] 0 pages HighMem/MovableOnly [ 1744.296706] DMA free:11536kB min:204kB low:252kB high:300kB active_anon:12kB inactive_anon:0kB active_file:72kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1744.314958] Killed process 30680 (rsyslogd) total-vm:40432kB, anon-rss:404kB, file-rss:4kB, shmem-rss:0kB [ 1744.323655] 363849 pages reserved [ 1744.336019] 0 pages cma reserved [ 1744.348806] lowmem_reserve[]: 0 2717 2718 2718 2718 22:13:00 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = socket$unix(0x1, 0x0, 0x0) sendmsg$unix(r1, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x80000000, 0x6}) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_DELETE(r2, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000280)=ANY=[@ANYBLOB="40000000d05dfd0cf6aadfcd1c2c8204548f7ad25fb20c9fc1b948acee1bf738a8e2f89ba8ad644647776e1929696b34254e5dffa31fab7db2587004efe13e6e76fca3797168ba0ca323227067252996e8b160c2bec95a5f9f90491af03c1f501e1720021bfe4f682947ba1614a12e86a754", @ANYRES16=0x0, @ANYBLOB="000328bd7000ffdbdf2502000000080011000000000006000200010000000c0010000000000001000000050014001f00000008000b0000000000"], 0x40}, 0x1, 0x0, 0x0, 0xc000}, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) [ 1744.365592] Node 0 DMA32 free:79324kB min:36200kB low:45248kB high:54296kB active_anon:57768kB inactive_anon:86152kB active_file:944kB inactive_file:5952kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7424kB pagetables:2412kB bounce:0kB free_pcp:648kB local_pcp:560kB free_cma:0kB [ 1744.459008] lowmem_reserve[]: 0 0 0 0 0 [ 1744.467867] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1744.562247] lowmem_reserve[]: 0 0 0 0 0 [ 1744.566444] chnl_net:caif_netlink_parms(): no params data found [ 1744.577630] Node 1 Normal free:330716kB min:53696kB low:67120kB high:80544kB active_anon:1552kB inactive_anon:51608kB active_file:4kB inactive_file:304kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:576kB pagetables:788kB bounce:0kB free_pcp:1360kB local_pcp:620kB free_cma:0kB [ 1744.675668] lowmem_reserve[]: 0 0 0 0 0 [ 1744.682875] Node 0 DMA: 2*4kB (MH) 4*8kB (UME) 4*16kB (UM) 4*32kB (ME) 8*64kB (UMEH) 2*128kB (ME) 5*256kB (UME) 1*512kB (E) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 10984kB [ 1744.737289] Node 0 DMA32: 90*4kB (UE) 274*8kB (UE) 25*16kB (UMEH) 8*32kB (EH) 626*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 43272kB [ 1744.774098] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1744.801699] Node 1 Normal: 84*4kB (UM) 34*8kB (U) 32*16kB (UM) 1293*32kB (U) 1*64kB (M) 2*128kB (UM) 95*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 67136kB [ 1744.833287] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1744.842149] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1744.853870] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1744.887270] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1744.897571] 39488 total pagecache pages [ 1744.901565] 0 pages in swap cache [ 1744.940951] Swap cache stats: add 0, delete 0, find 0/0 [ 1744.948215] chnl_net:caif_netlink_parms(): no params data found [ 1744.986055] Free swap = 0kB [ 1744.989242] Total swap = 0kB [ 1745.006137] 2097051 pages RAM [ 1745.009246] 0 pages HighMem/MovableOnly [ 1745.017153] syz-executor.3: page allocation failure: order:5, mode:0x1084020(GFP_ATOMIC|__GFP_COMP), nodemask=(null) [ 1745.027840] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 1745.029423] 363849 pages reserved [ 1745.033175] CPU: 0 PID: 30655 Comm: syz-executor.3 Not tainted 4.14.232-syzkaller #0 [ 1745.033180] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1745.033183] Call Trace: [ 1745.033197] dump_stack+0x1b2/0x281 [ 1745.033209] warn_alloc.cold+0x96/0x1cc [ 1745.036636] 0 pages cma reserved [ 1745.044499] ? zone_watermark_ok_safe+0x220/0x220 [ 1745.044511] ? wake_all_kswapds+0x175/0x360 [ 1745.044524] __alloc_pages_nodemask+0x2127/0x2720 [ 1745.081274] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1745.086385] ? __alloc_pages_nodemask+0x1a6e/0x2720 [ 1745.091400] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1745.096256] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1745.101085] ? entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1745.106448] ? cache_alloc_refill+0x2fa/0x350 [ 1745.110929] ? ____cache_alloc_node+0x156/0x1d0 [ 1745.115589] cache_grow_begin+0x91/0x700 [ 1745.119642] fallback_alloc+0x207/0x2c0 [ 1745.123609] __kmalloc+0x213/0x400 [ 1745.127135] ? batadv_hash_new+0xaa/0x270 [ 1745.131270] batadv_hash_new+0xaa/0x270 [ 1745.135237] ? queue_delayed_work_on+0xfc/0x1d0 [ 1745.139894] batadv_tt_init+0x260/0x390 [ 1745.143856] batadv_mesh_init+0x478/0x630 [ 1745.147993] batadv_softif_init_late+0xa26/0xc90 [ 1745.152739] ? batadv_get_strings+0x40/0x40 [ 1745.157065] ? dev_valid_name+0x1a0/0x1a0 [ 1745.161210] ? batadv_get_strings+0x40/0x40 [ 1745.165525] register_netdevice+0x291/0xe40 [ 1745.169840] ? netdev_change_features+0xa0/0xa0 [ 1745.174502] ? rtnl_create_link+0x129/0x890 [ 1745.178816] rtnl_newlink+0x14ff/0x1860 [ 1745.182781] ? rtnl_newlink+0x43d/0x1860 [ 1745.186831] ? __lock_acquire+0x5fc/0x3f20 [ 1745.191065] ? trace_hardirqs_on+0x10/0x10 [ 1745.195290] ? rtnl_dellink+0x6a0/0x6a0 [ 1745.199254] ? trace_hardirqs_on+0x10/0x10 [ 1745.203480] ? __read_once_size_nocheck.constprop.0+0x10/0x10 [ 1745.209356] ? deref_stack_reg+0x124/0x1a0 [ 1745.213615] ? lock_acquire+0x170/0x3f0 [ 1745.217578] ? lock_downgrade+0x740/0x740 [ 1745.221725] ? rtnl_dellink+0x6a0/0x6a0 [ 1745.225693] rtnetlink_rcv_msg+0x3be/0xb10 [ 1745.229923] ? rtnl_calcit.isra.0+0x3a0/0x3a0 [ 1745.234411] ? __netlink_lookup+0x345/0x5d0 [ 1745.238734] netlink_rcv_skb+0x125/0x390 [ 1745.242787] ? rtnl_calcit.isra.0+0x3a0/0x3a0 [ 1745.247272] ? netlink_ack+0x9a0/0x9a0 [ 1745.251164] netlink_unicast+0x437/0x610 [ 1745.255223] ? netlink_sendskb+0xd0/0xd0 [ 1745.259273] ? __check_object_size+0x179/0x230 [ 1745.263849] netlink_sendmsg+0x62e/0xb80 [ 1745.267903] ? nlmsg_notify+0x170/0x170 [ 1745.271877] ? security_socket_sendmsg+0x83/0xb0 [ 1745.276731] ? nlmsg_notify+0x170/0x170 [ 1745.280697] sock_sendmsg+0xb5/0x100 [ 1745.284408] SyS_sendto+0x1c7/0x2c0 [ 1745.288029] ? SyS_getpeername+0x220/0x220 [ 1745.292251] ? vm_insert_page+0x7c0/0x7c0 [ 1745.296407] ? up_read+0x17/0x30 [ 1745.299764] ? __do_page_fault+0x159/0xad0 [ 1745.303998] ? do_syscall_64+0x4c/0x640 [ 1745.307965] ? SyS_getpeername+0x220/0x220 [ 1745.312188] do_syscall_64+0x1d5/0x640 [ 1745.316068] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1745.321252] RIP: 0033:0x41958c [ 1745.324434] RSP: 002b:00007ffc52f35170 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 1745.332132] RAX: ffffffffffffffda RBX: 00000000014a4320 RCX: 000000000041958c [ 1745.339389] RDX: 000000000000003c RSI: 00000000014a4370 RDI: 0000000000000003 [ 1745.346646] RBP: 0000000000000000 R08: 00007ffc52f351c4 R09: 000000000000000c [ 1745.353903] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1745.361163] R13: 00000000014a4370 R14: 0000000000000003 R15: 0000000000000000 [ 1745.368498] warn_alloc_show_mem: 1 callbacks suppressed [ 1745.368501] Mem-Info: [ 1745.376258] active_anon:14852 inactive_anon:34440 isolated_anon:0 [ 1745.376258] active_file:1071 inactive_file:2712 isolated_file:0 [ 1745.376258] unevictable:0 dirty:18 writeback:0 unstable:0 [ 1745.376258] slab_reclaimable:12490 slab_unreclaimable:122069 [ 1745.376258] mapped:55153 shmem:35604 pagetables:793 bounce:0 [ 1745.376258] free:73134 free_pcp:710 free_cma:0 [ 1745.378304] syz-executor.5: [ 1745.409927] Node 0 active_anon:57500kB inactive_anon:86152kB active_file:3908kB inactive_file:9288kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:115984kB dirty:68kB writeback:0kB shmem:90532kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1745.409940] Node 1 active_anon:1908kB inactive_anon:51608kB active_file:376kB inactive_file:1560kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:104628kB dirty:4kB writeback:0kB shmem:51884kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1745.409944] Node 0 DMA free:10984kB min:204kB low:252kB high:300kB active_anon:12kB inactive_anon:0kB active_file:64kB inactive_file:20kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1745.409971] lowmem_reserve[]: [ 1745.412994] page allocation failure: order:4 [ 1745.440983] 0 2717 2718 2718 2718 [ 1745.440997] Node 0 DMA32 free:142984kB min:36200kB low:45248kB high:54296kB active_anon:57488kB inactive_anon:86152kB active_file:3744kB inactive_file:9600kB unevictable:0kB writepending:68kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7360kB pagetables:2352kB bounce:0kB free_pcp:1444kB local_pcp:724kB free_cma:0kB [ 1745.441014] lowmem_reserve[]: 0 0 0 [ 1745.468459] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1745.494782] 0 0 [ 1745.494790] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1745.494808] lowmem_reserve[]: [ 1745.497892] (null) [ 1745.502267] 0 0 [ 1745.505805] syz-executor.5 cpuset= [ 1745.535253] 0 0 0 [ 1745.535263] Node 1 Normal free:141592kB min:53696kB low:67120kB high:80544kB active_anon:1908kB inactive_anon:51608kB active_file:376kB inactive_file:1560kB unevictable:0kB writepending:4kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:672kB pagetables:820kB bounce:0kB free_pcp:1372kB local_pcp:664kB free_cma:0kB [ 1745.535282] lowmem_reserve[]: [ 1745.538884] / [ 1745.545955] 0 0 [ 1745.547932] mems_allowed=0-1 [ 1745.573383] 0 0 0 [ 1745.573393] Node 0 DMA: 8*4kB (UMH) 4*8kB [ 1745.576490] CPU: 1 PID: 30644 Comm: syz-executor.5 Not tainted 4.14.232-syzkaller #0 [ 1745.578621] (UME) [ 1745.580572] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1745.584082] 4*16kB [ 1745.586209] Call Trace: [ 1745.615328] (UM) [ 1745.618420] dump_stack+0x1b2/0x281 [ 1745.620097] 4*32kB [ 1745.622069] warn_alloc.cold+0x96/0x1cc [ 1745.625148] (ME) 8*64kB [ 1745.627303] ? zone_watermark_ok_safe+0x220/0x220 [ 1745.631502] (UMEH) [ 1745.639379] __alloc_pages_nodemask+0x2127/0x2720 [ 1745.641491] 2*128kB [ 1745.650829] ? lock_acquire+0x170/0x3f0 [ 1745.653032] (ME) [ 1745.655599] ? lock_acquire+0x170/0x3f0 [ 1745.657627] 5*256kB [ 1745.661238] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1745.663440] (UME) [ 1745.667401] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1745.670037] 1*512kB [ 1745.674860] ? __mutex_unlock_slowpath+0x75/0x770 [ 1745.677063] (E) [ 1745.681882] ? retint_kernel+0x2d/0x2d [ 1745.684173] 2*1024kB [ 1745.688126] alloc_pages_current+0x155/0x260 [ 1745.690157] (ME) [ 1745.694114] ion_page_pool_alloc+0x118/0x1b0 [ 1745.696404] 1*2048kB [ 1745.701225] ion_system_heap_allocate+0x133/0x8c0 [ 1745.703341] (E) [ 1745.708771] ? _raw_spin_unlock+0x29/0x40 [ 1745.711061] 1*4096kB [ 1745.715881] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1745.717826] (M) [ 1745.721695] ? ion_system_contig_heap_create+0x130/0x130 [ 1745.724070] = 11008kB [ 1745.728456] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1745.730485] Node 0 [ 1745.734872] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1745.737251] DMA32: [ 1745.742071] ion_alloc+0x27a/0x810 [ 1745.744016] 20270*4kB [ 1745.748149] ? ion_dma_buf_release+0x40/0x40 [ 1745.750526] (UMEH) [ 1745.755435] ? __might_fault+0x177/0x1b0 [ 1745.757378] 3684*8kB [ 1745.762805] ion_ioctl+0xea/0x1f0 [ 1745.765193] (UMEH) 1049*16kB [ 1745.770191] ? ion_query_heaps+0x360/0x360 [ 1745.770204] ? ion_query_heaps+0x360/0x360 [ 1745.772408] (UMEH) [ 1745.777230] do_vfs_ioctl+0x75a/0xff0 [ 1745.779447] 500*32kB [ 1745.782969] ? ioctl_preallocate+0x1a0/0x1a0 [ 1745.785455] (UME) [ 1745.789853] ? lock_downgrade+0x740/0x740 [ 1745.792061] 0*64kB 0*128kB [ 1745.796115] ? __fget+0x225/0x360 [ 1745.798490] 0*256kB [ 1745.801927] ? do_vfs_ioctl+0xff0/0xff0 [ 1745.805002] 0*512kB [ 1745.809226] ? security_file_ioctl+0x83/0xb0 [ 1745.813449] 0*1024kB [ 1745.815665] SyS_ioctl+0x7f/0xb0 [ 1745.819435] 0*2048kB [ 1745.821823] ? do_vfs_ioctl+0xff0/0xff0 [ 1745.826203] 0*4096kB [ 1745.828333] do_syscall_64+0x1d5/0x640 [ 1745.832444] = 143336kB [ 1745.832449] Node 0 [ 1745.835368] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1745.838785] Normal: [ 1745.841084] RIP: 0033:0x4665f9 [ 1745.845028] 0*4kB [ 1745.847327] RSP: 002b:00007f87ada6b188 EFLAGS: 00000246 [ 1745.851705] 0*8kB [ 1745.854090] ORIG_RAX: 0000000000000010 [ 1745.857440] 0*16kB [ 1745.859823] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1745.863762] 0*32kB 0*64kB [ 1745.866147] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1745.866153] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1745.870018] 0*128kB [ 1745.872509] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1745.874717] 0*256kB [ 1745.879881] R13: 00007fff979d8a6f R14: 00007f87ada6b300 R15: 0000000000022000 [ 1745.882172] 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1745.949918] Node 1 Normal: 12450*4kB (UM) 1868*8kB (U) 1067*16kB (U) 1869*32kB (U) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 141624kB [ 1745.963672] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1745.972495] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1745.981054] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1745.989873] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1745.998443] 39408 total pagecache pages [ 1746.002407] 0 pages in swap cache [ 1746.005841] Swap cache stats: add 0, delete 0, find 0/0 [ 1746.011188] Free swap = 0kB [ 1746.014189] Total swap = 0kB [ 1746.017347] 2097051 pages RAM [ 1746.020435] 0 pages HighMem/MovableOnly [ 1746.024392] 363849 pages reserved [ 1746.027827] 0 pages cma reserved [ 1746.172429] syz-executor.4: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1746.196688] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 1746.201827] CPU: 0 PID: 30785 Comm: syz-executor.4 Not tainted 4.14.232-syzkaller #0 [ 1746.209697] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1746.219043] Call Trace: [ 1746.221626] dump_stack+0x1b2/0x281 [ 1746.225251] warn_alloc.cold+0x96/0x1cc [ 1746.229219] ? zone_watermark_ok_safe+0x220/0x220 [ 1746.234104] __alloc_pages_nodemask+0x2127/0x2720 [ 1746.238948] ? lock_acquire+0x170/0x3f0 [ 1746.242946] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1746.247788] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1746.253236] ? __mutex_unlock_slowpath+0x75/0x770 [ 1746.258069] ? retint_kernel+0x2d/0x2d [ 1746.261953] alloc_pages_current+0x155/0x260 [ 1746.266357] ion_page_pool_alloc+0x118/0x1b0 [ 1746.270762] ion_system_heap_allocate+0x133/0x8c0 [ 1746.275601] ? ion_alloc+0x187/0x810 [ 1746.279312] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1746.284755] ? ion_system_contig_heap_create+0x130/0x130 [ 1746.290203] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1746.295220] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1746.300066] ion_alloc+0x204/0x810 [ 1746.303603] ? ion_dma_buf_release+0x40/0x40 [ 1746.308008] ? __might_fault+0x177/0x1b0 [ 1746.312066] ion_ioctl+0xea/0x1f0 [ 1746.315512] ? ion_query_heaps+0x360/0x360 [ 1746.319740] ? ion_query_heaps+0x360/0x360 [ 1746.323968] do_vfs_ioctl+0x75a/0xff0 [ 1746.327762] ? ioctl_preallocate+0x1a0/0x1a0 [ 1746.332160] ? lock_downgrade+0x740/0x740 [ 1746.336305] ? __fget+0x225/0x360 [ 1746.339750] ? do_vfs_ioctl+0xff0/0xff0 [ 1746.343717] ? security_file_ioctl+0x83/0xb0 [ 1746.348121] SyS_ioctl+0x7f/0xb0 [ 1746.351480] ? do_vfs_ioctl+0xff0/0xff0 [ 1746.355448] do_syscall_64+0x1d5/0x640 [ 1746.359332] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1746.364510] RIP: 0033:0x4665f9 [ 1746.367686] RSP: 002b:00007fac81df9188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1746.375382] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1746.382644] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1746.389906] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1746.397164] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1746.404423] R13: 00007fff1579bf3f R14: 00007fac81df9300 R15: 0000000000022000 [ 1746.431027] warn_alloc_show_mem: 1 callbacks suppressed [ 1746.431030] Mem-Info: [ 1746.438850] active_anon:15032 inactive_anon:34440 isolated_anon:0 [ 1746.438850] active_file:1341 inactive_file:2496 isolated_file:12 [ 1746.438850] unevictable:0 dirty:68 writeback:0 unstable:0 [ 1746.438850] slab_reclaimable:12490 slab_unreclaimable:122518 [ 1746.438850] mapped:55249 shmem:35604 pagetables:794 bounce:0 [ 1746.438850] free:84766 free_pcp:278 free_cma:0 [ 1746.477360] Node 0 active_anon:58220kB inactive_anon:86152kB active_file:4940kB inactive_file:8804kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:116256kB dirty:268kB writeback:0kB shmem:90532kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1746.510240] Node 1 active_anon:1908kB inactive_anon:51608kB active_file:424kB inactive_file:1180kB unevictable:0kB isolated(anon):0kB isolated(file):48kB mapped:104740kB dirty:4kB writeback:0kB shmem:51884kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1746.541511] Node 0 DMA free:11008kB min:204kB low:252kB high:300kB active_anon:12kB inactive_anon:0kB active_file:64kB inactive_file:20kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1746.571869] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1746.577571] Node 0 DMA32 free:112360kB min:36200kB low:45248kB high:54296kB active_anon:58012kB inactive_anon:86152kB active_file:4884kB inactive_file:8812kB unevictable:0kB writepending:392kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7392kB pagetables:2356kB bounce:0kB free_pcp:404kB local_pcp:164kB free_cma:0kB [ 1746.610998] lowmem_reserve[]: 0 0 0 0 0 22:13:03 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$unix(0x1, 0x2, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x80000000, 0x6}) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) [ 1746.616790] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1746.646544] lowmem_reserve[]: 0 0 0 0 0 [ 1746.651116] Node 1 Normal free:173348kB min:53696kB low:67120kB high:80544kB active_anon:1908kB inactive_anon:51608kB active_file:424kB inactive_file:1480kB unevictable:0kB writepending:4kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:672kB pagetables:820kB bounce:0kB free_pcp:720kB local_pcp:0kB free_cma:0kB [ 1746.685754] lowmem_reserve[]: 0 0 0 0 0 [ 1746.696401] Node 0 DMA: 8*4kB (UMH) 4*8kB (UME) 4*16kB (UM) 4*32kB (ME) 8*64kB (UMEH) 2*128kB (ME) 5*256kB (UME) 1*512kB (E) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 11008kB [ 1746.715998] Node 0 DMA32: 23*4kB (UMH) 121*8kB (UEH) 676*16kB (UMEH) 902*32kB (UME) 61*64kB (U) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 44644kB [ 1746.730954] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1746.749262] Node 1 Normal: 8747*4kB (UM) 2297*8kB (U) 1538*16kB (UM) 2102*32kB (U) 1*64kB (M) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 145300kB [ 1746.771467] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1746.780582] syz-executor.2: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1746.799468] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 1746.805606] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1746.815970] CPU: 0 PID: 30907 Comm: syz-executor.2 Not tainted 4.14.232-syzkaller #0 [ 1746.823854] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1746.833199] Call Trace: [ 1746.835783] dump_stack+0x1b2/0x281 [ 1746.839411] warn_alloc.cold+0x96/0x1cc [ 1746.843382] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1746.848390] ? zone_watermark_ok_safe+0x220/0x220 [ 1746.853244] __alloc_pages_nodemask+0x2127/0x2720 [ 1746.858109] ? lock_acquire+0x170/0x3f0 [ 1746.862084] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1746.866933] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1746.872383] ? __mutex_unlock_slowpath+0x75/0x770 [ 1746.877225] alloc_pages_current+0x155/0x260 [ 1746.881630] ion_page_pool_alloc+0x118/0x1b0 [ 1746.886036] ion_system_heap_allocate+0x133/0x8c0 [ 1746.890873] ? ion_alloc+0x187/0x810 [ 1746.894601] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1746.900030] ? ion_system_contig_heap_create+0x130/0x130 [ 1746.905469] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1746.910464] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1746.915283] ion_alloc+0x204/0x810 [ 1746.918818] ? ion_dma_buf_release+0x40/0x40 [ 1746.923209] ? __might_fault+0x177/0x1b0 [ 1746.927264] ion_ioctl+0xea/0x1f0 [ 1746.930695] ? ion_query_heaps+0x360/0x360 [ 1746.934910] ? ion_query_heaps+0x360/0x360 [ 1746.939124] do_vfs_ioctl+0x75a/0xff0 [ 1746.942905] ? ioctl_preallocate+0x1a0/0x1a0 [ 1746.947292] ? lock_downgrade+0x740/0x740 [ 1746.951421] ? __fget+0x225/0x360 [ 1746.954851] ? do_vfs_ioctl+0xff0/0xff0 [ 1746.958803] ? security_file_ioctl+0x83/0xb0 [ 1746.963190] SyS_ioctl+0x7f/0xb0 [ 1746.966532] ? do_vfs_ioctl+0xff0/0xff0 [ 1746.970487] do_syscall_64+0x1d5/0x640 [ 1746.974358] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1746.979522] RIP: 0033:0x4665f9 [ 1746.982689] RSP: 002b:00007fc1ab256188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1746.990386] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1746.997634] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1747.004895] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1747.012142] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1747.019391] R13: 00007ffd84742d3f R14: 00007fc1ab256300 R15: 0000000000022000 [ 1747.031393] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1747.048705] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1747.059930] 37760 total pagecache pages [ 1747.066083] 0 pages in swap cache [ 1747.069615] Swap cache stats: add 0, delete 0, find 0/0 [ 1747.076903] Free swap = 0kB [ 1747.079997] Total swap = 0kB [ 1747.087470] 2097051 pages RAM [ 1747.090913] 0 pages HighMem/MovableOnly [ 1747.097028] 363849 pages reserved [ 1747.100578] 0 pages cma reserved [ 1747.168908] oom_reaper: reaped process 30785 (syz-executor.4), now anon-rss:0kB, file-rss:4kB, shmem-rss:0kB [ 1747.204210] ODEBUG: assert_init not available (active state 0) object type: timer_list hint: (null) [ 1747.214398] ------------[ cut here ]------------ [ 1747.219140] WARNING: CPU: 0 PID: 30655 at lib/debugobjects.c:287 debug_print_object.cold+0xa7/0xdb [ 1747.228210] Kernel panic - not syncing: panic_on_warn set ... [ 1747.228210] [ 1747.235551] CPU: 0 PID: 30655 Comm: syz-executor.3 Not tainted 4.14.232-syzkaller #0 [ 1747.243404] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1747.252734] Call Trace: [ 1747.255301] dump_stack+0x1b2/0x281 [ 1747.258905] panic+0x1f9/0x42d [ 1747.262084] ? add_taint.cold+0x16/0x16 [ 1747.266036] ? debug_print_object.cold+0xa7/0xdb [ 1747.270767] ? debug_print_object.cold+0xa7/0xdb [ 1747.275496] __warn.cold+0x20/0x44 [ 1747.279012] ? ist_end_non_atomic+0x10/0x10 [ 1747.283308] ? debug_print_object.cold+0xa7/0xdb [ 1747.288039] report_bug+0x208/0x250 [ 1747.291645] do_error_trap+0x195/0x2d0 [ 1747.295508] ? math_error+0x2d0/0x2d0 [ 1747.299292] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1747.304112] invalid_op+0x1b/0x40 [ 1747.307571] RIP: 0010:debug_print_object.cold+0xa7/0xdb [ 1747.312906] RSP: 0018:ffff888072d77248 EFLAGS: 00010086 [ 1747.318244] RAX: 0000000000000061 RBX: 0000000000000005 RCX: 0000000000000000 [ 1747.325510] RDX: 0000000000000000 RSI: ffffffff878bbbc0 RDI: ffffed100e5aee3f [ 1747.332754] RBP: ffffffff878b6e80 R08: 0000000000000061 R09: 0000000000000001 [ 1747.340009] R10: 0000000000000000 R11: ffff88808bd18200 R12: 0000000000000000 [ 1747.347254] R13: 0000000000000000 R14: ffff88804c78ec70 R15: 1ffff1100e5aee52 [ 1747.354508] ? debug_print_object.cold+0xa7/0xdb [ 1747.359243] debug_object_assert_init+0x1d3/0x2d0 [ 1747.364064] ? debug_object_active_state+0x330/0x330 [ 1747.369141] ? rtnl_newlink+0x14ff/0x1860 [ 1747.373262] ? rtnetlink_rcv_msg+0x3be/0xb10 [ 1747.377645] ? netlink_rcv_skb+0x125/0x390 [ 1747.381859] ? entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1747.387212] del_timer+0x5d/0xe0 [ 1747.390557] ? process_timeout+0x20/0x20 [ 1747.394609] try_to_grab_pending+0x243/0x610 [ 1747.398995] __cancel_work_timer+0x90/0x460 [ 1747.403293] ? work_on_cpu_safe+0x70/0x70 [ 1747.407420] ? batadv_tvlv_handler_get+0x1db/0x2b0 [ 1747.412345] batadv_nc_mesh_free+0x41/0x120 [ 1747.416664] batadv_mesh_free+0x70/0x150 [ 1747.420702] batadv_mesh_init+0x561/0x630 [ 1747.424830] batadv_softif_init_late+0xa26/0xc90 [ 1747.429563] ? batadv_get_strings+0x40/0x40 [ 1747.433861] ? dev_valid_name+0x1a0/0x1a0 [ 1747.437987] ? batadv_get_strings+0x40/0x40 [ 1747.442393] register_netdevice+0x291/0xe40 [ 1747.446695] ? netdev_change_features+0xa0/0xa0 [ 1747.451341] ? rtnl_create_link+0x129/0x890 [ 1747.455642] rtnl_newlink+0x14ff/0x1860 [ 1747.459593] ? rtnl_newlink+0x43d/0x1860 [ 1747.463633] ? __lock_acquire+0x5fc/0x3f20 [ 1747.467848] ? trace_hardirqs_on+0x10/0x10 [ 1747.472064] ? rtnl_dellink+0x6a0/0x6a0 [ 1747.476014] ? trace_hardirqs_on+0x10/0x10 [ 1747.480227] ? __read_once_size_nocheck.constprop.0+0x10/0x10 [ 1747.486102] ? deref_stack_reg+0x124/0x1a0 [ 1747.490332] ? lock_acquire+0x170/0x3f0 [ 1747.494283] ? lock_downgrade+0x740/0x740 [ 1747.498407] ? rtnl_dellink+0x6a0/0x6a0 [ 1747.502356] rtnetlink_rcv_msg+0x3be/0xb10 [ 1747.506568] ? rtnl_calcit.isra.0+0x3a0/0x3a0 [ 1747.511040] ? __netlink_lookup+0x345/0x5d0 [ 1747.515348] netlink_rcv_skb+0x125/0x390 [ 1747.519382] ? rtnl_calcit.isra.0+0x3a0/0x3a0 [ 1747.523854] ? netlink_ack+0x9a0/0x9a0 [ 1747.527720] netlink_unicast+0x437/0x610 [ 1747.531756] ? netlink_sendskb+0xd0/0xd0 [ 1747.535794] ? __check_object_size+0x179/0x230 [ 1747.540353] netlink_sendmsg+0x62e/0xb80 [ 1747.544393] ? nlmsg_notify+0x170/0x170 [ 1747.548345] ? security_socket_sendmsg+0x83/0xb0 [ 1747.553078] ? nlmsg_notify+0x170/0x170 [ 1747.557027] sock_sendmsg+0xb5/0x100 [ 1747.560817] SyS_sendto+0x1c7/0x2c0 [ 1747.564417] ? SyS_getpeername+0x220/0x220 [ 1747.568629] ? vm_insert_page+0x7c0/0x7c0 [ 1747.572765] ? up_read+0x17/0x30 [ 1747.576107] ? __do_page_fault+0x159/0xad0 [ 1747.580316] ? do_syscall_64+0x4c/0x640 [ 1747.584264] ? SyS_getpeername+0x220/0x220 [ 1747.588475] do_syscall_64+0x1d5/0x640 [ 1747.592344] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1747.597507] RIP: 0033:0x41958c [ 1747.600680] RSP: 002b:00007ffc52f35170 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 1747.608362] RAX: ffffffffffffffda RBX: 00000000014a4320 RCX: 000000000041958c [ 1747.615609] RDX: 000000000000003c RSI: 00000000014a4370 RDI: 0000000000000003 [ 1747.622882] RBP: 0000000000000000 R08: 00007ffc52f351c4 R09: 000000000000000c [ 1747.630133] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1747.637397] R13: 00000000014a4370 R14: 0000000000000003 R15: 0000000000000000 [ 1747.645721] Kernel Offset: disabled [ 1747.649336] Rebooting in 86400 seconds..