[....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 34.309062] random: sshd: uninitialized urandom read (32 bytes read) [ 34.554544] kauditd_printk_skb: 10 callbacks suppressed [ 34.554552] audit: type=1400 audit(1578319152.673:35): avc: denied { map } for pid=7162 comm="bash" path="/bin/bash" dev="sda1" ino=1457 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 34.596074] random: sshd: uninitialized urandom read (32 bytes read) [ 35.206979] random: sshd: uninitialized urandom read (32 bytes read) [ 940.556926] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.1.59' (ECDSA) to the list of known hosts. [ 946.078807] random: sshd: uninitialized urandom read (32 bytes read) [ 946.264688] audit: type=1400 audit(1578320064.383:36): avc: denied { map } for pid=7176 comm="syz-execprog" path="/root/syz-execprog" dev="sda1" ino=16481 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 2020/01/06 14:14:24 parsed 1 programs [ 947.010748] random: cc1: uninitialized urandom read (8 bytes read) [ 948.004312] audit: type=1400 audit(1578320066.123:37): avc: denied { map } for pid=7176 comm="syz-execprog" path="/sys/kernel/debug/kcov" dev="debugfs" ino=15816 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:debugfs_t:s0 tclass=file permissive=1 2020/01/06 14:14:26 executed programs: 0 [ 948.045635] audit: type=1400 audit(1578320066.163:38): avc: denied { map } for pid=7176 comm="syz-execprog" path="/root/syzkaller-shm584560419" dev="sda1" ino=2233 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:file_t:s0 tclass=file permissive=1 [ 948.381052] IPVS: ftp: loaded support on port[0] = 21 [ 949.239003] IPVS: ftp: loaded support on port[0] = 21 [ 949.296850] chnl_net:caif_netlink_parms(): no params data found [ 949.314590] IPVS: ftp: loaded support on port[0] = 21 [ 949.379619] chnl_net:caif_netlink_parms(): no params data found [ 949.421812] bridge0: port 1(bridge_slave_0) entered blocking state [ 949.428170] bridge0: port 1(bridge_slave_0) entered disabled state [ 949.436040] device bridge_slave_0 entered promiscuous mode [ 949.447131] bridge0: port 2(bridge_slave_1) entered blocking state [ 949.454019] bridge0: port 2(bridge_slave_1) entered disabled state [ 949.461159] device bridge_slave_1 entered promiscuous mode [ 949.472896] IPVS: ftp: loaded support on port[0] = 21 [ 949.492461] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 949.508492] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 949.523731] bridge0: port 1(bridge_slave_0) entered blocking state [ 949.530330] bridge0: port 1(bridge_slave_0) entered disabled state [ 949.537154] device bridge_slave_0 entered promiscuous mode [ 949.544325] bridge0: port 2(bridge_slave_1) entered blocking state [ 949.550725] bridge0: port 2(bridge_slave_1) entered disabled state [ 949.557681] device bridge_slave_1 entered promiscuous mode [ 949.589525] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 949.596989] team0: Port device team_slave_0 added [ 949.611957] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 949.619984] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 949.627213] team0: Port device team_slave_1 added [ 949.634843] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 949.643950] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 949.652509] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 949.718598] IPVS: ftp: loaded support on port[0] = 21 [ 949.728095] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 949.735584] team0: Port device team_slave_0 added [ 949.802048] device hsr_slave_0 entered promiscuous mode [ 949.840258] device hsr_slave_1 entered promiscuous mode [ 949.882552] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 949.889290] chnl_net:caif_netlink_parms(): no params data found [ 949.897925] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 949.905250] team0: Port device team_slave_1 added [ 949.913029] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 949.920822] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 949.940447] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 950.052111] device hsr_slave_0 entered promiscuous mode [ 950.090334] device hsr_slave_1 entered promiscuous mode [ 950.157818] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 950.186191] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 950.199214] bridge0: port 1(bridge_slave_0) entered blocking state [ 950.206450] bridge0: port 1(bridge_slave_0) entered disabled state [ 950.214026] device bridge_slave_0 entered promiscuous mode [ 950.214282] IPVS: ftp: loaded support on port[0] = 21 [ 950.224931] chnl_net:caif_netlink_parms(): no params data found [ 950.246147] bridge0: port 2(bridge_slave_1) entered blocking state [ 950.253143] bridge0: port 2(bridge_slave_1) entered disabled state [ 950.260461] device bridge_slave_1 entered promiscuous mode [ 950.285360] bridge0: port 2(bridge_slave_1) entered blocking state [ 950.291854] bridge0: port 2(bridge_slave_1) entered forwarding state [ 950.298635] bridge0: port 1(bridge_slave_0) entered blocking state [ 950.305013] bridge0: port 1(bridge_slave_0) entered forwarding state [ 950.325413] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 950.338517] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 950.360898] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 950.367917] team0: Port device team_slave_0 added [ 950.376301] bridge0: port 1(bridge_slave_0) entered disabled state [ 950.393485] bridge0: port 2(bridge_slave_1) entered disabled state [ 950.442595] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 950.449617] team0: Port device team_slave_1 added [ 950.482623] chnl_net:caif_netlink_parms(): no params data found [ 950.493865] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 950.502356] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 950.529793] bridge0: port 1(bridge_slave_0) entered blocking state [ 950.536339] bridge0: port 1(bridge_slave_0) entered disabled state [ 950.543509] device bridge_slave_0 entered promiscuous mode [ 950.574340] bridge0: port 2(bridge_slave_1) entered blocking state [ 950.581100] bridge0: port 2(bridge_slave_1) entered disabled state [ 950.587944] device bridge_slave_1 entered promiscuous mode [ 950.642510] device hsr_slave_0 entered promiscuous mode [ 950.690372] device hsr_slave_1 entered promiscuous mode [ 950.733270] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 950.745767] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 950.755665] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 950.765191] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 950.805910] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 950.828377] bridge0: port 1(bridge_slave_0) entered blocking state [ 950.835460] bridge0: port 1(bridge_slave_0) entered disabled state [ 950.842881] device bridge_slave_0 entered promiscuous mode [ 950.849604] bridge0: port 2(bridge_slave_1) entered blocking state [ 950.856231] bridge0: port 2(bridge_slave_1) entered disabled state [ 950.863240] device bridge_slave_1 entered promiscuous mode [ 950.869358] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 950.877400] team0: Port device team_slave_0 added [ 950.884736] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 950.893116] team0: Port device team_slave_1 added [ 950.900196] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 950.907702] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 950.960466] 8021q: adding VLAN 0 to HW filter on device bond0 [ 950.985301] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 951.062121] device hsr_slave_0 entered promiscuous mode [ 951.100312] device hsr_slave_1 entered promiscuous mode [ 951.151522] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 951.159325] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 951.166660] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 951.177969] chnl_net:caif_netlink_parms(): no params data found [ 951.194585] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 951.203526] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 951.217786] 8021q: adding VLAN 0 to HW filter on device bond0 [ 951.230922] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 951.238266] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 951.264841] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 951.272797] 8021q: adding VLAN 0 to HW filter on device team0 [ 951.279463] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 951.287998] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 951.294965] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 951.302386] team0: Port device team_slave_0 added [ 951.327587] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 951.334846] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 951.342118] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 951.348861] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 951.356910] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 951.364668] bridge0: port 1(bridge_slave_0) entered blocking state [ 951.371057] bridge0: port 1(bridge_slave_0) entered forwarding state [ 951.383186] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 951.393245] team0: Port device team_slave_1 added [ 951.403291] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 951.409603] bridge0: port 1(bridge_slave_0) entered blocking state [ 951.416108] bridge0: port 1(bridge_slave_0) entered disabled state [ 951.423013] device bridge_slave_0 entered promiscuous mode [ 951.429616] bridge0: port 2(bridge_slave_1) entered blocking state [ 951.436968] bridge0: port 2(bridge_slave_1) entered disabled state [ 951.443888] device bridge_slave_1 entered promiscuous mode [ 951.450424] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 951.458498] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 951.464721] 8021q: adding VLAN 0 to HW filter on device team0 [ 951.474271] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 951.484559] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 951.499413] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 951.511098] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 951.523625] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 951.531590] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 951.539242] bridge0: port 2(bridge_slave_1) entered blocking state [ 951.545666] bridge0: port 2(bridge_slave_1) entered forwarding state [ 951.552888] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 951.560940] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 951.568401] bridge0: port 1(bridge_slave_0) entered blocking state [ 951.574759] bridge0: port 1(bridge_slave_0) entered forwarding state [ 951.586942] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 951.615632] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 951.623743] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 951.639544] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 951.647915] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 951.656741] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 951.665331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 951.675356] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 951.683253] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 951.690910] bridge0: port 2(bridge_slave_1) entered blocking state [ 951.697239] bridge0: port 2(bridge_slave_1) entered forwarding state [ 951.752465] device hsr_slave_0 entered promiscuous mode [ 951.790534] device hsr_slave_1 entered promiscuous mode [ 951.833120] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 951.853957] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 951.862052] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 951.869204] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 951.887217] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 951.894496] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 951.903875] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 951.911411] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 951.918513] team0: Port device team_slave_0 added [ 951.926826] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 951.933979] team0: Port device team_slave_1 added [ 951.941511] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 951.948948] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 951.956740] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 951.965140] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 951.972726] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 951.980533] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 951.987977] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 951.997340] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 952.005315] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 952.034012] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 952.042865] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 952.050507] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 952.059843] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 952.124407] device hsr_slave_0 entered promiscuous mode [ 952.160415] device hsr_slave_1 entered promiscuous mode [ 952.201216] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 952.215375] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 952.223250] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 952.231708] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 952.239997] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 952.249123] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 952.256159] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 952.274618] 8021q: adding VLAN 0 to HW filter on device bond0 [ 952.281185] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 952.288706] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 952.298330] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 952.319431] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 952.326476] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 952.334028] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 952.346786] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 952.355046] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 952.372200] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 952.383856] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 952.391936] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 952.403851] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 952.411446] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 952.418831] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 952.425701] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 952.436880] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 952.448618] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 952.459172] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 952.474578] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 952.482131] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 952.488838] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 952.497014] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 952.509770] 8021q: adding VLAN 0 to HW filter on device bond0 [ 952.518952] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 952.533820] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 952.539823] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 952.547940] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 952.554388] 8021q: adding VLAN 0 to HW filter on device team0 [ 952.563704] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 952.592124] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 952.598943] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 952.609156] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 952.619747] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 952.626500] 8021q: adding VLAN 0 to HW filter on device team0 [ 952.637598] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 952.646923] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 952.654661] bridge0: port 1(bridge_slave_0) entered blocking state [ 952.661034] bridge0: port 1(bridge_slave_0) entered forwarding state [ 952.667958] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 952.677537] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 952.688312] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 952.697020] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 952.708359] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 952.716906] bridge0: port 2(bridge_slave_1) entered blocking state [ 952.723276] bridge0: port 2(bridge_slave_1) entered forwarding state [ 952.741936] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 952.750722] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 952.757968] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 952.765984] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 952.773678] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 952.781543] bridge0: port 1(bridge_slave_0) entered blocking state [ 952.787882] bridge0: port 1(bridge_slave_0) entered forwarding state [ 952.795108] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 952.809152] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 952.819902] 8021q: adding VLAN 0 to HW filter on device bond0 [ 952.827357] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 952.837682] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 952.845853] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 952.852412] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 952.860230] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 952.867711] bridge0: port 2(bridge_slave_1) entered blocking state [ 952.874087] bridge0: port 2(bridge_slave_1) entered forwarding state [ 952.880967] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 952.888479] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 952.896079] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 952.903958] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 952.913122] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 952.923093] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 952.932105] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 952.940755] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 952.948163] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 952.956585] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 952.963169] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 952.971245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 952.978002] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 952.984973] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 952.992864] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 953.000510] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 953.007163] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 953.017186] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 953.026187] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 953.038720] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 953.050868] 8021q: adding VLAN 0 to HW filter on device team0 [ 953.058416] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 953.066916] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 953.076462] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 953.084312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 953.092464] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 953.099823] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 953.109091] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 953.121566] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 953.132461] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 953.149614] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 953.157359] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 953.165410] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 953.173155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 953.181143] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 953.188611] bridge0: port 1(bridge_slave_0) entered blocking state [ 953.194989] bridge0: port 1(bridge_slave_0) entered forwarding state [ 953.202155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 953.209534] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 953.217268] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 953.224174] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 953.234234] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 953.245562] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 953.253238] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 953.261148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 953.271251] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 953.280628] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 953.293162] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 953.303847] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 953.312012] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 953.319634] bridge0: port 2(bridge_slave_1) entered blocking state [ 953.326002] bridge0: port 2(bridge_slave_1) entered forwarding state [ 953.333970] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 953.343363] 8021q: adding VLAN 0 to HW filter on device bond0 [ 953.352667] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 953.364618] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 953.374338] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 953.383447] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 953.392104] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 953.399663] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 953.407234] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 953.414743] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 953.422726] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 953.431212] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 953.439595] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 953.447760] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 953.454831] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 953.461557] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 953.469840] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 953.478162] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 953.487352] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 953.494950] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 953.502336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 953.509099] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 953.516640] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 953.525626] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 953.532510] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 953.540389] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 953.551022] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 953.558291] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 953.564771] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 953.575602] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 953.584168] device veth0_vlan entered promiscuous mode [ 953.590263] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 953.597495] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 953.606022] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 953.613744] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 953.621983] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 953.628777] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 953.636539] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 953.642770] 8021q: adding VLAN 0 to HW filter on device team0 [ 953.651157] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 953.658589] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 953.670484] device veth1_vlan entered promiscuous mode [ 953.676183] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 953.692464] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 953.700293] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 953.707407] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 953.717296] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 953.724971] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 953.732914] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 953.740636] bridge0: port 1(bridge_slave_0) entered blocking state [ 953.746976] bridge0: port 1(bridge_slave_0) entered forwarding state [ 953.753805] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 953.761802] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 953.769676] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 953.778217] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 953.789143] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 953.798427] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 953.811082] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 953.818177] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 953.826307] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 953.834192] bridge0: port 2(bridge_slave_1) entered blocking state [ 953.840599] bridge0: port 2(bridge_slave_1) entered forwarding state [ 953.854754] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 953.862839] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 953.868830] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 953.886991] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 953.897586] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 953.907469] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 953.917628] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 953.925791] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 953.937526] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 953.948594] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 953.958010] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 953.966702] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 953.975355] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 953.986245] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 953.993900] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 954.007297] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 954.015430] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 954.023521] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 954.032609] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 954.042921] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 954.051505] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 954.066719] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 954.076861] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 954.086138] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 954.094031] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 954.103715] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 954.117956] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 954.125310] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 954.132933] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 954.146579] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 954.158466] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 954.180245] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 954.188695] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 954.201348] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 954.216193] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 954.225275] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 954.248644] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 954.264863] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 954.283728] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 954.294836] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 954.307177] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 954.316815] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 954.328254] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 954.339802] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 954.347509] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 954.360679] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 954.366729] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 954.379164] device veth0_vlan entered promiscuous mode [ 954.390764] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 954.399049] device veth0_vlan entered promiscuous mode [ 954.417394] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 954.425243] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 954.436100] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 954.444253] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 954.462931] device veth1_vlan entered promiscuous mode [ 954.468790] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 954.483722] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 954.496144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 954.503835] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 954.515123] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 954.525884] device veth1_vlan entered promiscuous mode [ 954.541644] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 954.551356] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 954.558042] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 954.602096] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 954.609093] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 954.640368] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 954.661088] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 954.673573] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 954.706275] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 954.728491] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 954.766517] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 954.779920] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 954.846146] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 954.871796] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 954.908657] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 954.938094] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 954.969399] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 954.980685] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 954.999829] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 955.018980] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 955.047704] device veth0_vlan entered promiscuous mode [ 955.062280] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 955.069344] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 955.098145] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 955.120945] device veth1_vlan entered promiscuous mode [ 955.137464] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 955.167823] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 955.185482] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 955.195726] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 955.215584] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 955.251340] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 955.261676] device veth0_vlan entered promiscuous mode [ 955.284948] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 955.307506] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 955.322314] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 955.348246] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 955.386996] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 955.405131] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 955.418840] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 955.454729] device veth1_vlan entered promiscuous mode [ 955.465777] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 955.495727] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 955.521031] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 955.528273] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 955.669042] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 955.686280] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 955.711469] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 955.755943] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 955.796257] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 955.811516] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 955.857190] device veth0_vlan entered promiscuous mode [ 955.885095] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 955.918137] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 955.978106] device veth1_vlan entered promiscuous mode [ 956.008060] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 956.065458] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 956.532580] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 956.539982] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 958.300656] syz-executor.1: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 958.317164] syz-executor.1: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 958.336881] syz-executor.3: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 958.337000] syz-executor.5: [ 958.349210] syz-executor.5: [ 958.352718] syz-executor.4: [ 958.356644] syz-executor.0: [ 958.356824] syz-executor.4: [ 958.359970] syz-executor.3: [ 958.365968] syz-executor.2: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 958.375259] page allocation failure: order:4 [ 958.386361] page allocation failure: order:4 [ 958.386418] page allocation failure: order:4 [ 958.390864] page allocation failure: order:4 [ 958.398570] page allocation failure: order:4 [ 958.401791] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 958.408539] syz-executor.1 cpuset= [ 958.415460] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 958.416695] page allocation failure: order:4 [ 958.420250] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 958.426435] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 958.433528] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 958.440094] syz-executor.1 cpuset= [ 958.449377] syz-executor.3 cpuset= [ 958.452566] (null) [ 958.456447] (null) [ 958.459631] syz-executor.4 cpuset= [ 958.467928] (null) [ 958.468508] syz3 [ 958.471538] syz-executor.2 cpuset= [ 958.475724] syz4 [ 958.479306] syz1 [ 958.481132] syz-executor.3 cpuset= [ 958.487613] syz2 [ 958.491257] syz-executor.4 cpuset=syz4 mems_allowed=0-1 [ 958.498699] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 958.499844] syz3 [ 958.506480] mems_allowed=0-1 [ 958.506482] (null) [ 958.506487] syz-executor.5 cpuset= [ 958.508495] CPU: 1 PID: 7385 Comm: syz-executor.4 Not tainted 4.14.162-syzkaller #0 [ 958.511646] mems_allowed=0-1 [ 958.513707] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 958.513772] Call Trace: [ 958.513908] dump_stack+0x142/0x197 [ 958.525164] (null) [ 958.528277] warn_alloc.cold+0x96/0x1af [ 958.528287] ? zone_watermark_ok_safe+0x2b0/0x2b0 [ 958.548480] syz5 [ 958.549935] ? __alloc_pages_direct_compact+0xbc/0x380 [ 958.558741] mems_allowed=0-1 [ 958.561988] __alloc_pages_slowpath+0x23c6/0x2930 [ 958.562094] ? save_trace+0x290/0x290 [ 958.562108] ? warn_alloc+0xf0/0xf0 [ 958.562161] ? __might_sleep+0x93/0xb0 [ 958.562172] __alloc_pages_nodemask+0x62c/0x7a0 [ 958.562180] ? lock_downgrade+0x740/0x740 [ 958.562189] ? __alloc_pages_slowpath+0x2930/0x2930 [ 958.562199] ? save_trace+0x290/0x290 [ 958.562256] alloc_pages_current+0xec/0x1e0 [ 958.562315] ion_page_pool_alloc+0x11f/0x1c0 [ 958.582091] mems_allowed=0-1 [ 958.586108] ion_system_heap_allocate+0x138/0x910 [ 958.586169] ? ion_alloc+0x19b/0x860 [ 958.586231] ? rcu_read_lock_sched_held+0x110/0x130 [ 958.606796] syz-executor.0 cpuset= [ 958.607805] ? ion_system_heap_free+0x250/0x250 [ 958.628479] syz0 [ 958.632635] ion_alloc+0x222/0x860 [ 958.638145] ? ion_dma_buf_release+0x50/0x50 [ 958.642613] ? kasan_check_write+0x14/0x20 [ 958.647009] ? _copy_from_user+0x99/0x110 [ 958.651166] ion_ioctl+0x105/0x217 [ 958.653484] mems_allowed=0-1 [ 958.654701] ? ion_alloc.cold+0x40/0x40 [ 958.654716] ? ion_alloc.cold+0x40/0x40 [ 958.654767] do_vfs_ioctl+0x7ae/0x1060 [ 958.669700] ? selinux_file_mprotect+0x5d0/0x5d0 [ 958.674453] ? lock_downgrade+0x740/0x740 [ 958.678609] ? ioctl_preallocate+0x1c0/0x1c0 [ 958.683025] ? __fget+0x237/0x370 [ 958.686507] ? security_file_ioctl+0x7d/0xb0 [ 958.690900] ? security_file_ioctl+0x89/0xb0 [ 958.695294] SyS_ioctl+0x8f/0xc0 [ 958.698652] ? do_vfs_ioctl+0x1060/0x1060 [ 958.702866] do_syscall_64+0x1e8/0x640 [ 958.706751] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 958.711625] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 958.716819] RIP: 0033:0x45af49 [ 958.720004] RSP: 002b:00007f361d0eac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 958.727703] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045af49 [ 958.734955] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 958.742219] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 958.749493] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f361d0eb6d4 [ 958.756755] R13: 00000000004c41b2 R14: 00000000004da748 R15: 00000000ffffffff [ 958.766369] mems_allowed=0-1 [ 958.768280] CPU: 0 PID: 7376 Comm: syz-executor.0 Not tainted 4.14.162-syzkaller #0 [ 958.769531] mems_allowed=0-1 [ 958.777267] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 958.777271] Call Trace: [ 958.777286] dump_stack+0x142/0x197 [ 958.777300] warn_alloc.cold+0x96/0x1af [ 958.777309] ? zone_watermark_ok_safe+0x2b0/0x2b0 [ 958.777325] ? __alloc_pages_direct_compact+0xbc/0x380 [ 958.781551] syz1 [ 958.789762] __alloc_pages_slowpath+0x23c6/0x2930 [ 958.798978] syz-executor.5 cpuset= [ 958.799906] ? save_trace+0x290/0x290 [ 958.816705] syz5 [ 958.816779] ? warn_alloc+0xf0/0xf0 [ 958.823628] mems_allowed=0-1 [ 958.824109] ? __might_sleep+0x93/0xb0 [ 958.834765] mems_allowed=0-1 [ 958.836620] __alloc_pages_nodemask+0x62c/0x7a0 [ 958.836629] ? lock_downgrade+0x740/0x740 [ 958.836638] ? __alloc_pages_slowpath+0x2930/0x2930 [ 958.853500] ? save_trace+0x290/0x290 [ 958.857287] alloc_pages_current+0xec/0x1e0 [ 958.861592] ion_page_pool_alloc+0x11f/0x1c0 [ 958.866005] ion_system_heap_allocate+0x138/0x910 [ 958.870845] ? ion_alloc+0x19b/0x860 [ 958.874543] ? rcu_read_lock_sched_held+0x110/0x130 [ 958.879542] ? ion_system_heap_free+0x250/0x250 [ 958.884196] ion_alloc+0x222/0x860 [ 958.887724] ? ion_dma_buf_release+0x50/0x50 [ 958.892121] ? kasan_check_write+0x14/0x20 [ 958.896339] ? _copy_from_user+0x99/0x110 [ 958.900472] ion_ioctl+0x105/0x217 [ 958.903996] ? ion_alloc.cold+0x40/0x40 [ 958.907958] ? ion_alloc.cold+0x40/0x40 [ 958.911916] do_vfs_ioctl+0x7ae/0x1060 [ 958.915787] ? selinux_file_mprotect+0x5d0/0x5d0 [ 958.920524] ? lock_downgrade+0x740/0x740 [ 958.924655] ? ioctl_preallocate+0x1c0/0x1c0 [ 958.929050] ? __fget+0x237/0x370 [ 958.932497] ? security_file_ioctl+0x7d/0xb0 [ 958.936886] ? security_file_ioctl+0x89/0xb0 [ 958.941295] SyS_ioctl+0x8f/0xc0 [ 958.944642] ? do_vfs_ioctl+0x1060/0x1060 [ 958.948782] do_syscall_64+0x1e8/0x640 [ 958.952653] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 958.957483] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 958.962668] RIP: 0033:0x45af49 [ 958.965860] RSP: 002b:00007f2399ab6c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 958.973563] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045af49 [ 958.980831] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 958.988081] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 958.995334] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2399ab76d4 [ 959.002686] R13: 00000000004c41b2 R14: 00000000004da748 R15: 00000000ffffffff [ 959.009954] CPU: 1 PID: 7367 Comm: syz-executor.1 Not tainted 4.14.162-syzkaller #0 [ 959.017752] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 959.027101] Call Trace: [ 959.029691] dump_stack+0x142/0x197 [ 959.033322] warn_alloc.cold+0x96/0x1af [ 959.037291] ? zone_watermark_ok_safe+0x2b0/0x2b0 [ 959.042125] ? __alloc_pages_direct_compact+0xbc/0x380 [ 959.047400] __alloc_pages_slowpath+0x23c6/0x2930 [ 959.052255] ? save_trace+0x290/0x290 [ 959.056185] ? warn_alloc+0xf0/0xf0 [ 959.059810] ? __might_sleep+0x93/0xb0 [ 959.063697] __alloc_pages_nodemask+0x62c/0x7a0 [ 959.068365] ? lock_downgrade+0x740/0x740 [ 959.072513] ? __alloc_pages_slowpath+0x2930/0x2930 [ 959.077520] ? save_trace+0x290/0x290 [ 959.081365] alloc_pages_current+0xec/0x1e0 [ 959.085685] ion_page_pool_alloc+0x11f/0x1c0 [ 959.090096] ion_system_heap_allocate+0x138/0x910 [ 959.094931] ? ion_alloc+0x19b/0x860 [ 959.098636] ? rcu_read_lock_sched_held+0x110/0x130 [ 959.103653] ? ion_system_heap_free+0x250/0x250 [ 959.108329] ion_alloc+0x222/0x860 [ 959.111861] ? ion_dma_buf_release+0x50/0x50 [ 959.116265] ? kasan_check_write+0x14/0x20 [ 959.120498] ? _copy_from_user+0x99/0x110 [ 959.124823] ion_ioctl+0x105/0x217 [ 959.128357] ? ion_alloc.cold+0x40/0x40 [ 959.132327] ? ion_alloc.cold+0x40/0x40 [ 959.136303] do_vfs_ioctl+0x7ae/0x1060 [ 959.140205] ? selinux_file_mprotect+0x5d0/0x5d0 [ 959.144958] ? lock_downgrade+0x740/0x740 [ 959.149108] ? ioctl_preallocate+0x1c0/0x1c0 [ 959.153509] ? __fget+0x237/0x370 [ 959.156988] ? security_file_ioctl+0x7d/0xb0 [ 959.161391] ? security_file_ioctl+0x89/0xb0 [ 959.165805] SyS_ioctl+0x8f/0xc0 [ 959.169162] ? do_vfs_ioctl+0x1060/0x1060 [ 959.173304] do_syscall_64+0x1e8/0x640 [ 959.177194] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 959.182036] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 959.187216] RIP: 0033:0x45af49 [ 959.190399] RSP: 002b:00007f34ee4c3c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 959.198223] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045af49 [ 959.205505] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 959.212803] RBP: 000000000075c070 R08: 0000000000000000 R09: 0000000000000000 [ 959.220197] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f34ee4c46d4 [ 959.227473] R13: 00000000004c41b2 R14: 00000000004da748 R15: 00000000ffffffff [ 959.234756] CPU: 0 PID: 7298 Comm: syz-executor.3 Not tainted 4.14.162-syzkaller #0 [ 959.242569] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 959.251915] Call Trace: [ 959.254507] dump_stack+0x142/0x197 [ 959.258152] warn_alloc.cold+0x96/0x1af [ 959.262250] ? zone_watermark_ok_safe+0x2b0/0x2b0 [ 959.267095] ? __alloc_pages_direct_compact+0xbc/0x380 [ 959.272540] __alloc_pages_slowpath+0x23c6/0x2930 [ 959.277382] ? save_trace+0x290/0x290 [ 959.281200] ? warn_alloc+0xf0/0xf0 [ 959.284829] ? __might_sleep+0x93/0xb0 [ 959.288708] __alloc_pages_nodemask+0x62c/0x7a0 [ 959.293375] ? lock_downgrade+0x740/0x740 [ 959.297509] ? __alloc_pages_slowpath+0x2930/0x2930 [ 959.302518] alloc_pages_current+0xec/0x1e0 [ 959.306855] ion_page_pool_alloc+0x11f/0x1c0 [ 959.311379] ion_system_heap_allocate+0x138/0x910 [ 959.316243] ? ion_alloc+0x19b/0x860 [ 959.319964] ? rcu_read_lock_sched_held+0x110/0x130 [ 959.324976] ? ion_system_heap_free+0x250/0x250 [ 959.329649] ion_alloc+0x222/0x860 [ 959.333181] ? ion_dma_buf_release+0x50/0x50 [ 959.337580] ? kasan_check_write+0x14/0x20 [ 959.341802] ? _copy_from_user+0x99/0x110 [ 959.345969] ion_ioctl+0x105/0x217 [ 959.349503] ? ion_alloc.cold+0x40/0x40 [ 959.353505] ? ion_alloc.cold+0x40/0x40 [ 959.357524] do_vfs_ioctl+0x7ae/0x1060 [ 959.361420] ? selinux_file_mprotect+0x5d0/0x5d0 [ 959.366177] ? lock_downgrade+0x740/0x740 [ 959.370311] ? ioctl_preallocate+0x1c0/0x1c0 [ 959.374709] ? __fget+0x237/0x370 [ 959.378151] ? security_file_ioctl+0x7d/0xb0 [ 959.382541] ? security_file_ioctl+0x89/0xb0 [ 959.386937] SyS_ioctl+0x8f/0xc0 [ 959.390290] ? do_vfs_ioctl+0x1060/0x1060 [ 959.394434] do_syscall_64+0x1e8/0x640 [ 959.398307] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 959.403159] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 959.408341] RIP: 0033:0x45af49 [ 959.411522] RSP: 002b:00007fcab280dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 959.419227] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045af49 [ 959.426497] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 959.433762] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 959.441025] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fcab280e6d4 [ 959.448287] R13: 00000000004c41b2 R14: 00000000004da748 R15: 00000000ffffffff [ 959.455660] CPU: 1 PID: 7364 Comm: syz-executor.2 Not tainted 4.14.162-syzkaller #0 [ 959.463462] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 959.472810] Call Trace: [ 959.475393] dump_stack+0x142/0x197 [ 959.479085] warn_alloc.cold+0x96/0x1af [ 959.483062] ? zone_watermark_ok_safe+0x2b0/0x2b0 [ 959.487911] ? __alloc_pages_direct_compact+0xbc/0x380 [ 959.493191] __alloc_pages_slowpath+0x23c6/0x2930 [ 959.498043] ? save_trace+0x290/0x290 [ 959.501832] ? warn_alloc+0xf0/0xf0 [ 959.505450] ? __might_sleep+0x93/0xb0 [ 959.509320] __alloc_pages_nodemask+0x62c/0x7a0 [ 959.513971] ? lock_downgrade+0x740/0x740 [ 959.518130] ? __alloc_pages_slowpath+0x2930/0x2930 [ 959.523134] ? save_trace+0x290/0x290 [ 959.526918] ? lock_downgrade+0x740/0x740 [ 959.531050] alloc_pages_current+0xec/0x1e0 [ 959.535368] ion_page_pool_alloc+0x11f/0x1c0 [ 959.539804] ion_system_heap_allocate+0x138/0x910 [ 959.544642] ? ion_alloc+0x19b/0x860 [ 959.548343] ? rcu_read_lock_sched_held+0x110/0x130 [ 959.553344] ? ion_system_heap_free+0x250/0x250 [ 959.557998] ion_alloc+0x222/0x860 [ 959.561523] ? ion_dma_buf_release+0x50/0x50 [ 959.565918] ? kasan_check_write+0x14/0x20 [ 959.570148] ? _copy_from_user+0x99/0x110 [ 959.574291] ion_ioctl+0x105/0x217 [ 959.577836] ? ion_alloc.cold+0x40/0x40 [ 959.581824] ? ion_alloc.cold+0x40/0x40 [ 959.585805] do_vfs_ioctl+0x7ae/0x1060 [ 959.589695] ? selinux_file_mprotect+0x5d0/0x5d0 [ 959.594444] ? lock_downgrade+0x740/0x740 [ 959.598581] ? ioctl_preallocate+0x1c0/0x1c0 [ 959.602980] ? __fget+0x237/0x370 [ 959.606449] ? security_file_ioctl+0x7d/0xb0 [ 959.610840] ? security_file_ioctl+0x89/0xb0 [ 959.615234] SyS_ioctl+0x8f/0xc0 [ 959.618595] ? do_vfs_ioctl+0x1060/0x1060 [ 959.622729] do_syscall_64+0x1e8/0x640 [ 959.626600] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 959.631429] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 959.636605] RIP: 0033:0x45af49 [ 959.639775] RSP: 002b:00007fa8249eec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 959.647469] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045af49 [ 959.654721] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 959.661970] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 959.669223] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fa8249ef6d4 [ 959.676573] R13: 00000000004c41b2 R14: 00000000004da748 R15: 00000000ffffffff [ 959.684890] CPU: 0 PID: 7354 Comm: syz-executor.3 Not tainted 4.14.162-syzkaller #0 [ 959.692705] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 959.702046] Call Trace: [ 959.704618] dump_stack+0x142/0x197 [ 959.708230] warn_alloc.cold+0x96/0x1af [ 959.712198] ? zone_watermark_ok_safe+0x2b0/0x2b0 [ 959.717030] ? __alloc_pages_direct_compact+0xbc/0x380 [ 959.722289] __alloc_pages_slowpath+0x23c6/0x2930 [ 959.727145] ? save_trace+0x290/0x290 [ 959.730931] ? warn_alloc+0xf0/0xf0 [ 959.734569] ? __might_sleep+0x93/0xb0 [ 959.738442] __alloc_pages_nodemask+0x62c/0x7a0 [ 959.743094] ? lock_downgrade+0x740/0x740 [ 959.747225] ? __alloc_pages_slowpath+0x2930/0x2930 [ 959.752237] ? save_trace+0x290/0x290 [ 959.756023] alloc_pages_current+0xec/0x1e0 [ 959.760331] ion_page_pool_alloc+0x11f/0x1c0 [ 959.764734] ion_system_heap_allocate+0x138/0x910 [ 959.769561] ? ion_alloc+0x19b/0x860 [ 959.773280] ? rcu_read_lock_sched_held+0x110/0x130 [ 959.778278] ? ion_system_heap_free+0x250/0x250 [ 959.782931] ion_alloc+0x222/0x860 [ 959.786459] ? ion_dma_buf_release+0x50/0x50 [ 959.790854] ? kasan_check_write+0x14/0x20 [ 959.795075] ? _copy_from_user+0x99/0x110 [ 959.799207] ion_ioctl+0x105/0x217 [ 959.802730] ? ion_alloc.cold+0x40/0x40 [ 959.806690] ? ion_alloc.cold+0x40/0x40 [ 959.810666] do_vfs_ioctl+0x7ae/0x1060 [ 959.814559] ? selinux_file_mprotect+0x5d0/0x5d0 [ 959.819313] ? lock_downgrade+0x740/0x740 [ 959.823450] ? ioctl_preallocate+0x1c0/0x1c0 [ 959.827860] ? __fget+0x237/0x370 [ 959.831301] ? security_file_ioctl+0x7d/0xb0 [ 959.835693] ? security_file_ioctl+0x89/0xb0 [ 959.840090] SyS_ioctl+0x8f/0xc0 [ 959.843464] ? do_vfs_ioctl+0x1060/0x1060 [ 959.847610] do_syscall_64+0x1e8/0x640 [ 959.851482] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 959.856315] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 959.861496] RIP: 0033:0x45af49 [ 959.864670] RSP: 002b:00007fcab27cbc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 959.872362] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045af49 [ 959.879613] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 959.886869] RBP: 000000000075c070 R08: 0000000000000000 R09: 0000000000000000 [ 959.894128] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fcab27cc6d4 [ 959.901395] R13: 00000000004c41b2 R14: 00000000004da748 R15: 00000000ffffffff [ 959.908663] CPU: 1 PID: 7334 Comm: syz-executor.1 Not tainted 4.14.162-syzkaller #0 [ 959.916472] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 959.925826] Call Trace: [ 959.928419] dump_stack+0x142/0x197 [ 959.932043] warn_alloc.cold+0x96/0x1af [ 959.936004] ? zone_watermark_ok_safe+0x2b0/0x2b0 [ 959.940835] ? __alloc_pages_direct_compact+0xbc/0x380 [ 959.946094] __alloc_pages_slowpath+0x23c6/0x2930 [ 959.950924] ? save_trace+0x290/0x290 [ 959.954709] ? warn_alloc+0xf0/0xf0 [ 959.958322] ? __might_sleep+0x93/0xb0 [ 959.962194] __alloc_pages_nodemask+0x62c/0x7a0 [ 959.966857] ? lock_downgrade+0x740/0x740 [ 959.970986] ? __alloc_pages_slowpath+0x2930/0x2930 [ 959.975989] alloc_pages_current+0xec/0x1e0 [ 959.980422] ion_page_pool_alloc+0x11f/0x1c0 [ 959.984819] ion_system_heap_allocate+0x138/0x910 [ 959.989651] ? ion_alloc+0x19b/0x860 [ 959.993354] ? rcu_read_lock_sched_held+0x110/0x130 [ 959.998357] ? ion_system_heap_free+0x250/0x250 [ 960.003014] ion_alloc+0x222/0x860 [ 960.006541] ? ion_dma_buf_release+0x50/0x50 [ 960.010935] ? kasan_check_write+0x14/0x20 [ 960.015155] ? _copy_from_user+0x99/0x110 [ 960.019287] ion_ioctl+0x105/0x217 [ 960.022809] ? ion_alloc.cold+0x40/0x40 [ 960.026772] ? ion_alloc.cold+0x40/0x40 [ 960.030730] do_vfs_ioctl+0x7ae/0x1060 [ 960.034600] ? selinux_file_mprotect+0x5d0/0x5d0 [ 960.039337] ? lock_downgrade+0x740/0x740 [ 960.043468] ? ioctl_preallocate+0x1c0/0x1c0 [ 960.047859] ? __fget+0x237/0x370 [ 960.051300] ? security_file_ioctl+0x7d/0xb0 [ 960.055688] ? security_file_ioctl+0x89/0xb0 [ 960.060078] SyS_ioctl+0x8f/0xc0 [ 960.063427] ? do_vfs_ioctl+0x1060/0x1060 [ 960.067567] do_syscall_64+0x1e8/0x640 [ 960.071435] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 960.076271] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 960.081441] RIP: 0033:0x45af49 [ 960.084613] RSP: 002b:00007f34ee505c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 960.092312] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045af49 [ 960.099569] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 960.106823] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 960.114078] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f34ee5066d4 [ 960.121348] R13: 00000000004c41b2 R14: 00000000004da748 R15: 00000000ffffffff [ 960.131019] CPU: 1 PID: 7348 Comm: syz-executor.5 Not tainted 4.14.162-syzkaller #0 [ 960.138827] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 960.148284] Call Trace: [ 960.150870] dump_stack+0x142/0x197 [ 960.154498] warn_alloc.cold+0x96/0x1af [ 960.158551] ? zone_watermark_ok_safe+0x2b0/0x2b0 [ 960.163387] ? __alloc_pages_direct_compact+0xbc/0x380 [ 960.169783] __alloc_pages_slowpath+0x23c6/0x2930 [ 960.174613] ? save_trace+0x290/0x290 [ 960.178402] ? warn_alloc+0xf0/0xf0 [ 960.182035] ? __might_sleep+0x93/0xb0 [ 960.185932] __alloc_pages_nodemask+0x62c/0x7a0 [ 960.190595] ? lock_downgrade+0x740/0x740 [ 960.194734] ? __alloc_pages_slowpath+0x2930/0x2930 [ 960.199734] ? save_trace+0x290/0x290 [ 960.203521] alloc_pages_current+0xec/0x1e0 [ 960.207916] ion_page_pool_alloc+0x11f/0x1c0 [ 960.212314] ion_system_heap_allocate+0x138/0x910 [ 960.217161] ? ion_alloc+0x19b/0x860 [ 960.220873] ? rcu_read_lock_sched_held+0x110/0x130 [ 960.225894] ? ion_system_heap_free+0x250/0x250 [ 960.230561] ion_alloc+0x222/0x860 [ 960.234100] ? ion_dma_buf_release+0x50/0x50 [ 960.238499] ? kasan_check_write+0x14/0x20 [ 960.242737] ? _copy_from_user+0x99/0x110 [ 960.246888] ion_ioctl+0x105/0x217 [ 960.250419] ? ion_alloc.cold+0x40/0x40 [ 960.254586] ? ion_alloc.cold+0x40/0x40 [ 960.258548] do_vfs_ioctl+0x7ae/0x1060 [ 960.262423] ? selinux_file_mprotect+0x5d0/0x5d0 [ 960.267166] ? lock_downgrade+0x740/0x740 [ 960.271307] ? ioctl_preallocate+0x1c0/0x1c0 [ 960.275708] ? __fget+0x237/0x370 [ 960.279152] ? security_file_ioctl+0x7d/0xb0 [ 960.283547] ? security_file_ioctl+0x89/0xb0 [ 960.287943] SyS_ioctl+0x8f/0xc0 [ 960.291298] ? do_vfs_ioctl+0x1060/0x1060 [ 960.295437] do_syscall_64+0x1e8/0x640 [ 960.299326] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 960.304155] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 960.309325] RIP: 0033:0x45af49 [ 960.312499] RSP: 002b:00007f7f21a93c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 960.320201] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045af49 [ 960.327482] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 960.334746] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 960.342000] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7f21a946d4 [ 960.349255] R13: 00000000004c41b2 R14: 00000000004da748 R15: 00000000ffffffff [ 960.356522] CPU: 0 PID: 7372 Comm: syz-executor.5 Not tainted 4.14.162-syzkaller #0 [ 960.364339] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 960.373678] Call Trace: [ 960.376255] dump_stack+0x142/0x197 [ 960.379867] warn_alloc.cold+0x96/0x1af [ 960.383822] ? zone_watermark_ok_safe+0x2b0/0x2b0 [ 960.388651] ? __alloc_pages_direct_compact+0xbc/0x380 [ 960.393912] __alloc_pages_slowpath+0x23c6/0x2930 [ 960.398742] ? save_trace+0x290/0x290 [ 960.402526] ? warn_alloc+0xf0/0xf0 [ 960.406140] ? __might_sleep+0x93/0xb0 [ 960.410014] __alloc_pages_nodemask+0x62c/0x7a0 [ 960.414673] ? lock_downgrade+0x740/0x740 [ 960.418822] ? __alloc_pages_slowpath+0x2930/0x2930 [ 960.423860] ? save_trace+0x290/0x290 [ 960.427670] alloc_pages_current+0xec/0x1e0 [ 960.431994] ion_page_pool_alloc+0x11f/0x1c0 [ 960.436393] ion_system_heap_allocate+0x138/0x910 [ 960.441221] ? ion_alloc+0x19b/0x860 [ 960.444938] ? rcu_read_lock_sched_held+0x110/0x130 [ 960.449953] ? ion_system_heap_free+0x250/0x250 [ 960.450200] Mem-Info: [ 960.454621] ion_alloc+0x222/0x860 [ 960.457026] active_anon:8332 inactive_anon:188 isolated_anon:0 [ 960.457026] active_file:3304 inactive_file:3336 isolated_file:38 [ 960.457026] unevictable:0 dirty:24 writeback:0 unstable:0 [ 960.457026] slab_reclaimable:11418 slab_unreclaimable:105860 [ 960.457026] mapped:6397 shmem:242 pagetables:461 bounce:0 [ 960.457026] free:25118 free_pcp:59 free_cma:0 [ 960.460546] ? ion_dma_buf_release+0x50/0x50 [ 960.460558] ? kasan_check_write+0x14/0x20 [ 960.460567] ? _copy_from_user+0x99/0x110 [ 960.460585] ion_ioctl+0x105/0x217 [ 960.510056] ? ion_alloc.cold+0x40/0x40 [ 960.514017] ? ion_alloc.cold+0x40/0x40 [ 960.517974] do_vfs_ioctl+0x7ae/0x1060 [ 960.521846] ? selinux_file_mprotect+0x5d0/0x5d0 [ 960.526599] ? lock_downgrade+0x740/0x740 [ 960.530731] ? ioctl_preallocate+0x1c0/0x1c0 [ 960.535137] ? __fget+0x237/0x370 [ 960.538578] ? security_file_ioctl+0x7d/0xb0 [ 960.542967] ? security_file_ioctl+0x89/0xb0 [ 960.547358] SyS_ioctl+0x8f/0xc0 [ 960.550706] ? do_vfs_ioctl+0x1060/0x1060 [ 960.554844] do_syscall_64+0x1e8/0x640 [ 960.558711] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 960.563541] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 960.568710] RIP: 0033:0x45af49 [ 960.571879] RSP: 002b:00007f7f21a51c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 960.579570] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045af49 [ 960.586844] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 960.594094] RBP: 000000000075c070 R08: 0000000000000000 R09: 0000000000000000 [ 960.601346] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7f21a526d4 [ 960.608596] R13: 00000000004c41b2 R14: 00000000004da748 R15: 00000000ffffffff [ 960.615884] CPU: 1 PID: 7387 Comm: syz-executor.4 Not tainted 4.14.162-syzkaller #0 [ 960.623689] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 960.633042] Call Trace: [ 960.635636] dump_stack+0x142/0x197 [ 960.639267] warn_alloc.cold+0x96/0x1af [ 960.643241] ? zone_watermark_ok_safe+0x2b0/0x2b0 [ 960.648197] ? __alloc_pages_direct_compact+0xbc/0x380 [ 960.653485] __alloc_pages_slowpath+0x23c6/0x2930 [ 960.658338] ? save_trace+0x290/0x290 [ 960.662146] ? warn_alloc+0xf0/0xf0 [ 960.665782] ? __might_sleep+0x93/0xb0 [ 960.669672] __alloc_pages_nodemask+0x62c/0x7a0 [ 960.674344] ? lock_downgrade+0x740/0x740 [ 960.678577] ? __alloc_pages_slowpath+0x2930/0x2930 [ 960.683595] ? save_trace+0x290/0x290 [ 960.687398] alloc_pages_current+0xec/0x1e0 [ 960.691835] ion_page_pool_alloc+0x11f/0x1c0 [ 960.696246] ion_system_heap_allocate+0x138/0x910 [ 960.701084] ? ion_alloc+0x19b/0x860 [ 960.704794] ? rcu_read_lock_sched_held+0x110/0x130 [ 960.709809] ? ion_system_heap_free+0x250/0x250 [ 960.714483] ion_alloc+0x222/0x860 [ 960.718027] ? ion_dma_buf_release+0x50/0x50 [ 960.722437] ? kasan_check_write+0x14/0x20 [ 960.726677] ? _copy_from_user+0x99/0x110 [ 960.730825] ion_ioctl+0x105/0x217 [ 960.734365] ? ion_alloc.cold+0x40/0x40 [ 960.738343] ? ion_alloc.cold+0x40/0x40 [ 960.742317] do_vfs_ioctl+0x7ae/0x1060 [ 960.746209] ? selinux_file_mprotect+0x5d0/0x5d0 [ 960.750966] ? lock_downgrade+0x740/0x740 [ 960.755116] ? ioctl_preallocate+0x1c0/0x1c0 [ 960.759524] ? __fget+0x237/0x370 [ 960.763331] ? security_file_ioctl+0x7d/0xb0 [ 960.767734] ? security_file_ioctl+0x89/0xb0 [ 960.772145] SyS_ioctl+0x8f/0xc0 [ 960.775510] ? do_vfs_ioctl+0x1060/0x1060 [ 960.779662] do_syscall_64+0x1e8/0x640 [ 960.783549] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 960.788392] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 960.793573] RIP: 0033:0x45af49 [ 960.796754] RSP: 002b:00007f361d0a8c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 960.804461] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045af49 [ 960.811725] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 960.818989] RBP: 000000000075c070 R08: 0000000000000000 R09: 0000000000000000 [ 960.826253] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f361d0a96d4 [ 960.833522] R13: 00000000004c41b2 R14: 00000000004da748 R15: 00000000ffffffff [ 960.849300] Node 0 active_anon:33328kB inactive_anon:752kB active_file:3212kB inactive_file:3160kB unevictable:0kB isolated(anon):0kB isolated(file):208kB mapped:6388kB dirty:96kB writeback:0kB shmem:968kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 960.881986] Node 1 active_anon:0kB inactive_anon:0kB active_file:4kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 960.911454] oom_reaper: reaped process 7376 (syz-executor.0), now anon-rss:0kB, file-rss:4kB, shmem-rss:0kB [ 960.915144] Node 0 DMA free:10476kB min:216kB low:268kB high:320kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 960.957645] lowmem_reserve[]: 0 2569 2569 2569 2569 [ 960.958618] oom_reaper: reaped process 7367 (syz-executor.1), now anon-rss:0kB, file-rss:4kB, shmem-rss:0kB [ 960.964137] Node 0 DMA32 free:21328kB min:36380kB low:45472kB high:54564kB active_anon:31152kB inactive_anon:752kB active_file:1064kB inactive_file:1024kB unevictable:0kB writepending:96kB present:3129332kB managed:2634320kB mlocked:0kB kernel_stack:7392kB pagetables:1844kB bounce:0kB free_pcp:236kB local_pcp:0kB free_cma:0kB [ 961.023496] rs:main Q:Reg invoked oom-killer: gfp_mask=0x1c200ca(GFP_HIGHUSER_MOVABLE|__GFP_WRITE), nodemask=(null), order=0, oom_score_adj=0 [ 961.063272] rs:main Q:Reg cpuset=/ mems_allowed=0-1 [ 961.068653] CPU: 0 PID: 7026 Comm: rs:main Q:Reg Not tainted 4.14.162-syzkaller #0 [ 961.076359] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 961.085708] Call Trace: [ 961.088305] dump_stack+0x142/0x197 [ 961.090082] lowmem_reserve[]: 0 [ 961.092014] dump_header+0x177/0x6cd [ 961.095290] 0 0 [ 961.099001] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 961.099043] ? ___ratelimit+0x55/0x537 [ 961.109944] oom_kill_process.cold+0x10/0xadd [ 961.110047] 0 [ 961.114429] ? oom_unkillable_task+0x294/0x390 [ 961.114434] 0 [ 961.116223] ? lock_downgrade+0x740/0x740 [ 961.126716] out_of_memory+0x2ee/0x1180 [ 961.130703] ? lock_acquire+0x16f/0x430 [ 961.130710] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 961.134690] ? oom_killer_disable+0x1d0/0x1d0 [ 961.134700] ? __alloc_pages_slowpath+0xca4/0x2930 [ 961.169355] __alloc_pages_slowpath+0x2251/0x2930 [ 961.174210] ? warn_alloc+0xf0/0xf0 [ 961.177842] ? __might_sleep+0x93/0xb0 [ 961.181731] __alloc_pages_nodemask+0x62c/0x7a0 [ 961.186395] ? find_get_entry+0x214/0x680 [ 961.190045] lowmem_reserve[]: 0 [ 961.190538] ? __alloc_pages_slowpath+0x2930/0x2930 [ 961.190553] ? lock_downgrade+0x740/0x740 [ 961.193827] 0 [ 961.198832] alloc_pages_current+0xec/0x1e0 [ 961.209058] __page_cache_alloc+0x248/0x3e0 [ 961.213076] 0 0 [ 961.213376] pagecache_get_page+0x17c/0x9e0 [ 961.213377] 0 [ 961.215370] grab_cache_page_write_begin+0x74/0xa0 [ 961.219673] Node 1 [ 961.221526] ext4_da_write_begin+0x24c/0xea0 [ 961.221540] ? ext4_write_begin+0x1290/0x1290 [ 961.226454] Normal free:26892kB min:53508kB low:66884kB high:80260kB active_anon:0kB inactive_anon:0kB active_file:4kB inactive_file:4kB unevictable:0kB writepending:0kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 961.228668] ? rcu_lockdep_current_cpu_online+0x8a/0x140 [ 961.233068] lowmem_reserve[]: [ 961.237535] generic_perform_write+0x1f8/0x480 [ 961.264997] 0 [ 961.269604] ? __mnt_drop_write+0x54/0x70 [ 961.272703] 0 [ 961.277263] ? page_endio+0x530/0x530 [ 961.279046] 0 [ 961.283191] ? current_time+0xb0/0xb0 [ 961.283267] ? ext4_file_write_iter+0x1f4/0xe90 [ 961.283279] __generic_file_write_iter+0x239/0x5b0 [ 961.285082] 0 [ 961.288869] ext4_file_write_iter+0x2ac/0xe90 [ 961.290667] 0 [ 961.294440] ? ext4_file_mmap+0x2c0/0x2c0 [ 961.304031] ? trace_hardirqs_on+0x10/0x10 [ 961.304041] ? save_trace+0x290/0x290 [ 961.304051] ? iov_iter_init+0xaf/0x1d0 [ 961.305833] Node 0 [ 961.310367] __vfs_write+0x4a7/0x6b0 [ 961.310378] ? kernel_read+0x120/0x120 [ 961.312158] DMA: [ 961.316305] ? check_preemption_disabled+0x3c/0x250 [ 961.320534] 0*4kB [ 961.324305] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 961.328267] 1*8kB [ 961.330491] ? rcu_sync_lockdep_assert+0x6d/0xb0 [ 961.330501] ? __sb_start_write+0x153/0x2f0 [ 961.330510] vfs_write+0x198/0x500 [ 961.334201] (U) [ 961.338075] SyS_write+0xfd/0x230 [ 961.340129] 0*16kB [ 961.345140] ? SyS_read+0x230/0x230 [ 961.347268] 0*32kB [ 961.352699] ? do_syscall_64+0x53/0x640 [ 961.352706] ? SyS_read+0x230/0x230 [ 961.352715] do_syscall_64+0x1e8/0x640 [ 961.352725] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 961.354851] 0*64kB [ 961.359595] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 961.363915] 1*128kB [ 961.367424] RIP: 0033:0x7f10eac4619d [ 961.369375] (U) 0*256kB [ 961.372809] RSP: 002b:00007f10e91e7000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 961.372819] RAX: ffffffffffffffda RBX: 00000000000000ea RCX: 00007f10eac4619d [ 961.372823] RDX: 00000000000000ea RSI: 000000000160cce0 RDI: 0000000000000007 [ 961.372828] RBP: 000000000160cce0 R08: 000000000160cdba R09: 00007f10ea5c33f7 [ 961.372834] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 961.375049] 0*512kB [ 961.378665] R13: 00007f10e91e7480 R14: 0000000000000002 R15: 000000000160cae0 [ 961.398954] warn_alloc_show_mem: 8 callbacks suppressed [ 961.398958] Mem-Info: [ 961.469022] active_anon:7781 inactive_anon:188 isolated_anon:0 [ 961.469022] active_file:116 inactive_file:78 isolated_file:0 [ 961.469022] unevictable:0 dirty:10 writeback:0 unstable:0 [ 961.469022] slab_reclaimable:11420 slab_unreclaimable:105597 [ 961.469022] mapped:179 shmem:242 pagetables:460 bounce:0 [ 961.469022] free:13762 free_pcp:64 free_cma:0 [ 961.516449] Node 0 active_anon:31124kB inactive_anon:752kB active_file:252kB inactive_file:24kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:116kB dirty:40kB writeback:0kB shmem:968kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 961.550256] 0*1024kB 1*2048kB (M) 2*4096kB (M) = 10376kB [ 961.555513] Node 1 active_anon:0kB inactive_anon:0kB active_file:4kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 961.555771] Node 0 DMA32: 768*4kB (UME) 1005*8kB (UMEH) 279*16kB (UMEH) 124*32kB (UME) 55*64kB (UM) 5*128kB (UM) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 23704kB [ 961.586695] Node 0 DMA free:10376kB min:216kB low:268kB high:320kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 961.596615] Mem-Info: [ 961.625390] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 961.627122] lowmem_reserve[]: 0 2569 2569 2569 2569 [ 961.636565] Node 1 Normal: 2*4kB (ME) 3*8kB (UME) 4*16kB (UE) 4*32kB (UME) 3*64kB (UME) 2*128kB (ME) 2*256kB (ME) 2*512kB (UE) 2*1024kB (ME) 3*2048kB (M) 4*4096kB (M) = 26784kB [ 961.644950] Node 0 DMA32 free:24008kB min:36380kB low:45472kB high:54564kB active_anon:31124kB inactive_anon:752kB active_file:144kB inactive_file:24kB unevictable:0kB writepending:40kB present:3129332kB managed:2634320kB mlocked:0kB kernel_stack:7392kB pagetables:1840kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 961.658222] active_anon:7781 inactive_anon:188 isolated_anon:0 [ 961.658222] active_file:37 inactive_file:7 isolated_file:26 [ 961.658222] unevictable:0 dirty:10 writeback:0 unstable:0 [ 961.658222] slab_reclaimable:11420 slab_unreclaimable:104274 [ 961.658222] mapped:29 shmem:242 pagetables:460 bounce:0 [ 961.658222] free:15261 free_pcp:0 free_cma:0 [ 961.707197] lowmem_reserve[]: [ 961.718531] Node 0 active_anon:31124kB inactive_anon:752kB active_file:144kB inactive_file:24kB unevictable:0kB isolated(anon):0kB isolated(file):104kB mapped:116kB dirty:40kB writeback:0kB shmem:968kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 961.718545] Node 1 active_anon:0kB inactive_anon:0kB active_file:4kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 961.731206] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 961.749050] Node 0 DMA free:10376kB min:216kB low:268kB high:320kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 961.749071] lowmem_reserve[]: 0 [ 961.799830] 0 [ 961.810229] 2569 2569 2569 2569 [ 961.818358] Node 0 DMA32 free:17960kB min:36380kB low:45472kB high:54564kB active_anon:31124kB inactive_anon:752kB active_file:144kB inactive_file:24kB unevictable:0kB writepending:40kB present:3129332kB managed:2634320kB mlocked:0kB kernel_stack:7392kB pagetables:1840kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 961.824283] 0 0 0 0 [ 961.850767] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 961.853256] lowmem_reserve[]: [ 961.880297] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 961.881259] 0 [ 961.883407] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 961.895066] 0 [ 961.902640] lowmem_reserve[]: 0 0 0 0 0 [ 961.905043] 0 [ 961.908409] Node 1 [ 961.908411] 0 0 [ 961.910234] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 961.910238] 308 total pagecache pages [ 961.910249] 0 pages in swap cache [ 961.910259] Swap cache stats: add 0, delete 0, find 0/0 [ 961.910262] Free swap = 0kB [ 961.910266] Total swap = 0kB [ 961.910453] 1965979 pages RAM [ 961.923111] Normal free:26660kB min:53508kB low:66884kB high:80260kB active_anon:0kB inactive_anon:0kB active_file:4kB inactive_file:4kB unevictable:0kB writepending:0kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 961.923116] lowmem_reserve[]: [ 961.927507] Node 0 [ 961.931482] 0 [ 961.938767] Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 961.938779] 0 [ 961.941815] lowmem_reserve[]: 0 0 0 0 0 [ 961.941838] Node 1 Normal free:26660kB min:53508kB low:66884kB high:80260kB active_anon:0kB inactive_anon:0kB active_file:4kB inactive_file:4kB unevictable:0kB writepending:0kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 961.941854] lowmem_reserve[]: [ 961.947498] 0 pages HighMem/MovableOnly [ 961.976618] 0 [ 961.977583] 0 [ 961.978831] 0 [ 962.003631] 335874 pages reserved [ 962.003636] 0 pages cma reserved [ 962.011320] 0 [ 962.036667] 0 0 [ 962.036678] Node 0 DMA: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 1*128kB (U) 0*256kB 0*512kB 0*1024kB 1*2048kB (M) 2*4096kB (M) = 10376kB [ 962.036736] Node 0 DMA32: 710*4kB (ME) 405*8kB (UMEH) 242*16kB (ME) 121*32kB (ME) 50*64kB (M) 6*128kB (UM) 1*256kB (M) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18048kB [ 962.036797] Node 0 Normal: [ 962.047977] 0 [ 962.049252] 0*4kB [ 962.052740] 0 [ 962.052747] Node 0 DMA: [ 962.057183] 0*8kB [ 962.057895] 0*4kB [ 962.059843] 0*16kB [ 962.078464] 1*8kB [ 962.087787] 0*32kB [ 962.089821] (U) [ 962.091617] 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 962.091643] Node 1 Normal: 2*4kB (ME) 3*8kB (UME) 4*16kB (UE) 4*32kB (UME) 3*64kB (UME) 2*128kB (ME) 2*256kB (ME) 2*512kB (UE) 2*1024kB (ME) [ 962.098564] 0*16kB [ 962.101015] 3*2048kB [ 962.102595] 0*32kB [ 962.104815] (M) [ 962.106949] 0*64kB [ 962.109164] 4*4096kB [ 962.114868] 1*128kB [ 962.118237] (M) = 26784kB [ 962.135032] (U) [ 962.135729] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 962.137963] 0*256kB [ 962.139932] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 962.139939] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 962.142194] 0*512kB [ 962.144675] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 962.146976] 0*1024kB [ 962.149714] 292 total pagecache pages [ 962.156876] 1*2048kB [ 962.160563] 0 pages in swap cache [ 962.163015] (M) [ 962.172516] Swap cache stats: add 0, delete 0, find 0/0 [ 962.188649] 2*4096kB [ 962.191266] Free swap = 0kB [ 962.191271] Total swap = 0kB [ 962.191277] 1965979 pages RAM [ 962.191281] 0 pages HighMem/MovableOnly [ 962.191284] 335874 pages reserved [ 962.191287] 0 pages cma reserved [ 962.233246] (M) = 10376kB [ 962.236003] Node 0 DMA32: 683*4kB (UME) 403*8kB (UMEH) 244*16kB (UMEH) 120*32kB (UME) 49*64kB (UM) 6*128kB (M) 1*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 17860kB [ 962.251355] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 962.262128] Node 1 Normal: 2*4kB (ME) 3*8kB (UME) 4*16kB (UE) 4*32kB (UME) 3*64kB (UME) 3*128kB (UME) 3*256kB (UME) 1*512kB (E) 2*1024kB (ME) 3*2048kB (M) 4*4096kB (M) = 26656kB [ 962.278442] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 962.287378] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 962.296007] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 962.307584] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 962.316209] 276 total pagecache pages [ 962.331114] 0 pages in swap cache [ 962.334581] Swap cache stats: add 0, delete 0, find 0/0 [ 962.339941] Free swap = 0kB [ 962.354433] Total swap = 0kB [ 962.357561] 1965979 pages RAM [ 962.366321] 0 pages HighMem/MovableOnly [ 962.375917] 335874 pages reserved [ 962.379437] 0 pages cma reserved [ 962.388390] Out of memory: Kill process 7297 (syz-executor.3) score 1000 or sacrifice child [ 962.414612] Killed process 7298 (syz-executor.3) total-vm:38040kB, anon-rss:2168kB, file-rss:0kB, shmem-rss:0kB [ 962.581394] oom_reaper: reaped process 7298 (syz-executor.3), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 962.622371] oom_reaper: reaped process 7385 (syz-executor.4), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 962.662282] rsyslogd invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 962.676938] rsyslogd cpuset=/ mems_allowed=0-1 [ 962.681828] CPU: 0 PID: 7028 Comm: rsyslogd Not tainted 4.14.162-syzkaller #0 [ 962.689080] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 962.698414] Call Trace: [ 962.700991] dump_stack+0x142/0x197 [ 962.704687] dump_header+0x177/0x6cd [ 962.708383] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 962.713466] ? ___ratelimit+0x55/0x537 [ 962.717374] oom_kill_process.cold+0x10/0xadd [ 962.721883] ? oom_unkillable_task+0x294/0x390 [ 962.726447] ? lock_downgrade+0x740/0x740 [ 962.730579] out_of_memory+0x2ee/0x1180 [ 962.734530] ? lock_acquire+0x16f/0x430 [ 962.738484] ? oom_killer_disable+0x1d0/0x1d0 [ 962.742958] ? __alloc_pages_slowpath+0xca4/0x2930 [ 962.747883] __alloc_pages_slowpath+0x2251/0x2930 [ 962.752723] ? __alloc_pages_nodemask+0x639/0x7a0 [ 962.757564] ? warn_alloc+0xf0/0xf0 [ 962.761177] ? __might_sleep+0x93/0xb0 [ 962.765045] __alloc_pages_nodemask+0x62c/0x7a0 [ 962.769812] ? __alloc_pages_slowpath+0x2930/0x2930 [ 962.774868] ? lock_downgrade+0x740/0x740 [ 962.779034] alloc_pages_current+0xec/0x1e0 [ 962.783390] __page_cache_alloc+0x248/0x3e0 [ 962.787696] filemap_fault+0xcef/0x1de0 [ 962.791653] ? radix_tree_next_chunk+0x43e/0x9a0 [ 962.796392] ? __lock_page_or_retry+0x8d0/0x8d0 [ 962.801043] ? lock_acquire+0x16f/0x430 [ 962.804997] ? ext4_filemap_fault+0x7b/0xb0 [ 962.809304] ext4_filemap_fault+0x83/0xb0 [ 962.813526] __do_fault+0x104/0x390 [ 962.817159] __handle_mm_fault+0x23bd/0x33d0 [ 962.821549] ? copy_page_range+0x1de0/0x1de0 [ 962.825938] ? find_held_lock+0x35/0x130 [ 962.829982] ? handle_mm_fault+0x1b6/0x7c0 [ 962.834208] handle_mm_fault+0x293/0x7c0 [ 962.838308] __do_page_fault+0x4c1/0xb80 [ 962.842371] ? vmalloc_fault+0xe30/0xe30 [ 962.846426] ? page_fault+0x2f/0x50 [ 962.850040] do_page_fault+0x71/0x511 [ 962.853843] ? page_fault+0x2f/0x50 [ 962.857449] page_fault+0x45/0x50 [ 962.860882] RIP: 0033:0x7f10eac45cb0 [ 962.864583] RSP: 002b:00007f10e81e5e28 EFLAGS: 00010293 [ 962.869923] RAX: 0000000000000178 RBX: 0000000001623650 RCX: 00007f10eac461fd [ 962.877172] RDX: 0000000000000178 RSI: 00007f10e9a1a5a0 RDI: 0000000000000000 [ 962.884428] RBP: 0000000000000000 R08: 000000000160e260 R09: 0000000000000000 [ 962.891690] R10: 5f65657266203236 R11: 0000000000000293 R12: 000000000065e420 [ 962.898939] R13: 00007f10e81e69c0 R14: 00007f10eb28b040 R15: 0000000000000003 [ 962.910430] Mem-Info: [ 962.912888] active_anon:7227 inactive_anon:188 isolated_anon:0 [ 962.912888] active_file:31 inactive_file:0 isolated_file:0 [ 962.912888] unevictable:0 dirty:10 writeback:0 unstable:0 [ 962.912888] slab_reclaimable:11419 slab_unreclaimable:103827 [ 962.912888] mapped:2 shmem:242 pagetables:459 bounce:0 [ 962.912888] free:13917 free_pcp:28 free_cma:0 [ 962.960081] Node 0 active_anon:28908kB inactive_anon:752kB active_file:112kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:8kB dirty:40kB writeback:0kB shmem:968kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 963.010085] Node 1 active_anon:0kB inactive_anon:0kB active_file:12kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 963.102640] Node 0 DMA free:10508kB min:216kB low:268kB high:320kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 963.191889] lowmem_reserve[]: 0 2569 2569 2569 2569 [ 963.196975] Node 0 DMA32 free:17904kB min:36380kB low:45472kB high:54564kB active_anon:28908kB inactive_anon:752kB active_file:56kB inactive_file:52kB unevictable:0kB writepending:0kB present:3129332kB managed:2634320kB mlocked:0kB kernel_stack:7264kB pagetables:1836kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 963.264030] lowmem_reserve[]: 0 0 0 0 0 [ 963.268080] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 963.300656] lowmem_reserve[]: 0 0 0 0 0 [ 963.304689] Node 1 Normal free:69680kB min:53508kB low:66884kB high:80260kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:0kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:0kB pagetables:4kB bounce:0kB free_pcp:40kB local_pcp:0kB free_cma:0kB [ 963.333101] warn_alloc: 21 callbacks suppressed [ 963.333105] syz-executor.4: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 963.380056] lowmem_reserve[]: 0 0 0 0 0 [ 963.384089] Node 0 DMA: 0*4kB 1*8kB (U) 1*16kB (U) 1*32kB (U) 1*64kB (U) 0*128kB 0*256kB 0*512kB 0*1024kB 1*2048kB (M) 2*4096kB (M) [ 963.384217] syz-executor.4 cpuset= [ 963.384221] = 10360kB [ 963.435585] syz4 mems_allowed=0-1 [ 963.436671] Node 0 [ 963.439089] CPU: 1 PID: 7387 Comm: syz-executor.4 Not tainted 4.14.162-syzkaller #0 [ 963.439094] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 963.439098] Call Trace: [ 963.439112] dump_stack+0x142/0x197 [ 963.439126] warn_alloc.cold+0x96/0x1af [ 963.439134] ? zone_watermark_ok_safe+0x2b0/0x2b0 [ 963.439206] ? call_timer_fn+0x670/0x670 [ 963.460067] DMA32: [ 963.461134] __alloc_pages_slowpath+0x23c6/0x2930 [ 963.464736] 603*4kB [ 963.468707] ? warn_alloc+0xf0/0xf0 [ 963.490564] ? __might_sleep+0x93/0xb0 [ 963.494450] __alloc_pages_nodemask+0x62c/0x7a0 [ 963.499120] ? lock_downgrade+0x740/0x740 [ 963.500053] (ME) 363*8kB [ 963.503261] ? __alloc_pages_slowpath+0x2930/0x2930 [ 963.503278] alloc_pages_current+0xec/0x1e0 [ 963.506109] (UME) [ 963.511114] ion_page_pool_alloc+0x11f/0x1c0 [ 963.511123] ion_system_heap_allocate+0x138/0x910 [ 963.511134] ? ion_system_heap_free+0x250/0x250 [ 963.511148] ion_alloc+0x68c/0x860 [ 963.535004] ? ion_dma_buf_release+0x50/0x50 [ 963.539416] ? kasan_check_write+0x14/0x20 [ 963.543663] ? _copy_from_user+0x99/0x110 [ 963.547815] ion_ioctl+0x105/0x217 [ 963.550062] 226*16kB (ME) [ 963.551366] ? ion_alloc.cold+0x40/0x40 [ 963.551379] ? ion_alloc.cold+0x40/0x40 [ 963.554212] 112*32kB [ 963.558173] do_vfs_ioctl+0x7ae/0x1060 [ 963.568402] ? selinux_file_mprotect+0x5d0/0x5d0 [ 963.573160] ? lock_downgrade+0x740/0x740 [ 963.577308] ? ioctl_preallocate+0x1c0/0x1c0 [ 963.581720] ? __fget+0x237/0x370 [ 963.585177] ? security_file_ioctl+0x7d/0xb0 [ 963.589582] ? security_file_ioctl+0x89/0xb0 [ 963.590056] (UME) 54*64kB [ 963.593985] SyS_ioctl+0x8f/0xc0 [ 963.593994] ? do_vfs_ioctl+0x1060/0x1060 [ 963.596831] (UM) [ 963.600196] do_syscall_64+0x1e8/0x640 [ 963.600204] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 963.600218] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 963.600225] RIP: 0033:0x45af49 [ 963.600232] RSP: 002b:00007f361d0a8c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 963.630073] 31*128kB [ 963.631191] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045af49 [ 963.631198] (UM) [ 963.633584] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 963.633590] RBP: 000000000075c070 R08: 0000000000000000 R09: 0000000000000000 [ 963.657422] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f361d0a96d4 [ 963.660070] 9*256kB [ 963.664683] R13: 00000000004c41b2 R14: 00000000004da748 R15: 00000000ffffffff [ 963.710107] (UM) 20*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 32484kB [ 963.716613] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 963.736407] Node 1 Normal: 5*4kB (UM) 4*8kB (UME) 6*16kB (UME) 6*32kB (UME) 4*64kB (UME) 4*128kB (UME) 4*256kB (UME) 2*512kB (ME) 39*1024kB (UME) 3*2048kB (UM) 1*4096kB (M) = 53332kB [ 963.738017] Mem-Info: [ 963.757518] active_anon:7227 inactive_anon:188 isolated_anon:0 [ 963.757518] active_file:43 inactive_file:31 isolated_file:0 [ 963.757518] unevictable:0 dirty:0 writeback:0 unstable:0 [ 963.757518] slab_reclaimable:11419 slab_unreclaimable:103848 [ 963.757518] mapped:34 shmem:242 pagetables:460 bounce:0 [ 963.757518] free:24070 free_pcp:0 free_cma:0 [ 963.760578] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 963.791774] Node 0 active_anon:28908kB inactive_anon:752kB active_file:80kB inactive_file:32kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:36kB dirty:0kB writeback:0kB shmem:968kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 963.805683] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 963.827469] Node 1 active_anon:0kB inactive_anon:0kB active_file:92kB inactive_file:92kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:100kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 963.842136] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 963.872401] Node 0 DMA free:10424kB min:216kB low:268kB high:320kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 963.875922] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 963.901863] lowmem_reserve[]: 0 2569 2569 2569 2569 [ 963.913957] 305 total pagecache pages [ 963.915725] Node 0 DMA32 free:32784kB min:36380kB low:45472kB high:54564kB active_anon:28908kB inactive_anon:752kB active_file:80kB inactive_file:48kB unevictable:0kB writepending:0kB present:3129332kB managed:2634320kB mlocked:0kB kernel_stack:7264kB pagetables:1836kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 963.917784] 0 pages in swap cache [ 963.917791] Swap cache stats: add 0, delete 0, find 0/0 [ 963.949360] lowmem_reserve[]: [ 963.956458] Free swap = 0kB [ 963.956898] 0 [ 963.959587] Total swap = 0kB [ 963.959693] 1965979 pages RAM [ 963.965898] 0 [ 963.967488] 0 pages HighMem/MovableOnly [ 963.972229] 0 0 0 [ 963.978326] 335874 pages reserved [ 963.978628] Node 0 [ 963.982108] 0 pages cma reserved [ 963.982117] Out of memory: Kill process 7363 (syz-executor.2) score 1000 or sacrifice child [ 963.982291] Killed process 7364 (syz-executor.2) total-vm:38040kB, anon-rss:2164kB, file-rss:0kB, shmem-rss:0kB [ 963.987669] Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 964.074623] oom_reaper: reaped process 7364 (syz-executor.2), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 964.090472] lowmem_reserve[]: 0 0 0 0 0 [ 964.094477] Node 1 Normal free:27820kB min:53508kB low:66884kB high:80260kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:0kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:156kB local_pcp:72kB free_cma:0kB [ 964.103106] oom_reaper: reaped process 7348 (syz-executor.5), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 964.179519] lowmem_reserve[]: 0 0 0 0 0 [ 964.210109] Node 0 DMA: 0*4kB 0*8kB 1*16kB (U) 0*32kB 2*64kB (U) 0*128kB 0*256kB 0*512kB 0*1024kB 1*2048kB (M) 2*4096kB (M) = 10384kB [ 964.270075] Node 0 DMA32: 286*4kB (UME) 143*8kB (E) 152*16kB (MEH) 112*32kB (UME) 46*64kB (UM) 8*128kB (MH) 3*256kB (UM) 2*512kB (UM) 1*1024kB (U) 2*2048kB (M) 31*4096kB (U) = 146160kB [ 964.322679] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 964.333982] Node 1 Normal: 1*4kB (M) 3*8kB (UME) 3*16kB (E) 3*32kB (ME) 2*64kB (ME) 3*128kB (UME) 2*256kB (ME) 2*512kB (UE) 13*1024kB (UME) 4*2048kB (UM) 1*4096kB (M) = 27820kB [ 964.420083] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 964.428969] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB 2020/01/06 14:14:42 executed programs: 6 [ 964.503309] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 964.530795] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 964.539407] 2376 total pagecache pages [ 964.580705] 0 pages in swap cache [ 964.584261] Swap cache stats: add 0, delete 0, find 0/0 [ 964.595149] Free swap = 0kB [ 964.607083] Total swap = 0kB [ 964.619010] 1965979 pages RAM [ 964.636292] 0 pages HighMem/MovableOnly [ 964.654731] 335874 pages reserved [ 964.671613] 0 pages cma reserved [ 964.813589] syz-executor.0: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 964.826464] syz-executor.1: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 964.842818] syz-executor.4: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 964.873426] syz-executor.1 cpuset=syz1 mems_allowed=0-1 [ 964.874719] syz-executor.0 cpuset= [ 964.883281] syz-executor.4 cpuset= [ 964.884796] syz0 [ 964.894623] CPU: 0 PID: 7392 Comm: syz-executor.1 Not tainted 4.14.162-syzkaller #0 [ 964.904395] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 964.913750] Call Trace: [ 964.916342] dump_stack+0x142/0x197 [ 964.919973] warn_alloc.cold+0x96/0x1af [ 964.920752] mems_allowed=0-1 [ 964.923941] ? zone_watermark_ok_safe+0x2b0/0x2b0 [ 964.923959] ? __alloc_pages_direct_compact+0xbc/0x380 [ 964.923971] __alloc_pages_slowpath+0x23c6/0x2930 [ 964.923986] ? save_trace+0x290/0x290 [ 964.923998] ? warn_alloc+0xf0/0xf0 [ 964.949439] ? __might_sleep+0x93/0xb0 [ 964.953321] __alloc_pages_nodemask+0x62c/0x7a0 [ 964.957992] ? lock_downgrade+0x740/0x740 [ 964.962129] ? __alloc_pages_slowpath+0x2930/0x2930 [ 964.967138] ? save_trace+0x290/0x290 [ 964.970936] alloc_pages_current+0xec/0x1e0 [ 964.975249] ion_page_pool_alloc+0x11f/0x1c0 [ 964.979643] ion_system_heap_allocate+0x138/0x910 [ 964.984470] ? ion_alloc+0x19b/0x860 [ 964.988171] ? rcu_read_lock_sched_held+0x110/0x130 [ 964.993175] ? ion_system_heap_free+0x250/0x250 [ 964.997839] ion_alloc+0x222/0x860 [ 965.001376] ? ion_dma_buf_release+0x50/0x50 [ 965.005782] ? kasan_check_write+0x14/0x20 [ 965.010025] ? _copy_from_user+0x99/0x110 [ 965.014191] ion_ioctl+0x105/0x217 [ 965.017735] ? ion_alloc.cold+0x40/0x40 [ 965.021712] ? ion_alloc.cold+0x40/0x40 [ 965.025690] do_vfs_ioctl+0x7ae/0x1060 [ 965.029589] ? selinux_file_mprotect+0x5d0/0x5d0 [ 965.034344] ? lock_downgrade+0x740/0x740 [ 965.038499] ? ioctl_preallocate+0x1c0/0x1c0 [ 965.042902] ? __fget+0x237/0x370 [ 965.046353] ? security_file_ioctl+0x7d/0xb0 [ 965.050761] ? security_file_ioctl+0x89/0xb0 [ 965.055164] SyS_ioctl+0x8f/0xc0 [ 965.058608] ? do_vfs_ioctl+0x1060/0x1060 [ 965.062753] do_syscall_64+0x1e8/0x640 [ 965.066644] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 965.071478] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 965.076700] RIP: 0033:0x45af49 [ 965.079889] RSP: 002b:00007f34ee505c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 965.087607] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045af49 [ 965.094872] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 965.102126] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 965.109387] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f34ee5066d4 [ 965.116649] R13: 00000000004c41b2 R14: 00000000004da748 R15: 00000000ffffffff [ 965.124268] ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb [ 965.130603] ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb [ 965.131069] ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb [ 965.137551] ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb [ 965.144353] ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb [ 965.155783] CPU: 1 PID: 7393 Comm: syz-executor.0 Not tainted 4.14.162-syzkaller #0 [ 965.157052] ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb [ 965.164802] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 965.164806] Call Trace: [ 965.164821] dump_stack+0x142/0x197 [ 965.164836] warn_alloc.cold+0x96/0x1af [ 965.171363] ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb [ 965.180652] ? zone_watermark_ok_safe+0x2b0/0x2b0 [ 965.180668] ? __alloc_pages_direct_compact+0xbc/0x380 [ 965.180679] __alloc_pages_slowpath+0x23c6/0x2930 [ 965.183298] ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb [ 965.186870] ? save_trace+0x290/0x290 [ 965.194649] rs:main Q:Reg invoked oom-killer: gfp_mask=0x1c200ca(GFP_HIGHUSER_MOVABLE|__GFP_WRITE), nodemask= [ 965.197331] ? warn_alloc+0xf0/0xf0 [ 965.202276] (null) [ 965.207436] ? __might_sleep+0x93/0xb0 [ 965.207449] __alloc_pages_nodemask+0x62c/0x7a0 [ 965.207461] ? lock_downgrade+0x740/0x740 [ 965.214564] syz4 [ 965.218859] ? __alloc_pages_slowpath+0x2930/0x2930 [ 965.240367] mems_allowed=0-1 [ 965.242421] ? save_trace+0x290/0x290 [ 965.242438] alloc_pages_current+0xec/0x1e0 [ 965.248226] , order=0, oom_score_adj=0 [ 965.251235] ion_page_pool_alloc+0x11f/0x1c0 [ 965.251245] ion_system_heap_allocate+0x138/0x910 [ 965.251253] ? ion_alloc+0x19b/0x860 [ 965.251263] ? rcu_read_lock_sched_held+0x110/0x130 [ 965.251272] ? ion_system_heap_free+0x250/0x250 [ 965.251284] ion_alloc+0x222/0x860 [ 965.251298] ? ion_dma_buf_release+0x50/0x50 [ 965.251310] ? kasan_check_write+0x14/0x20 [ 965.251321] ? _copy_from_user+0x99/0x110 [ 965.262028] rs:main Q:Reg cpuset= [ 965.265184] ion_ioctl+0x105/0x217 [ 965.265196] ? ion_alloc.cold+0x40/0x40 [ 965.265216] ? ion_alloc.cold+0x40/0x40 [ 965.280493] / [ 965.282728] do_vfs_ioctl+0x7ae/0x1060 [ 965.282741] ? selinux_file_mprotect+0x5d0/0x5d0 [ 965.304056] mems_allowed=0-1 [ 965.304270] ? lock_downgrade+0x740/0x740 [ 965.345113] ? ioctl_preallocate+0x1c0/0x1c0 [ 965.349525] ? __fget+0x237/0x370 [ 965.352988] ? security_file_ioctl+0x7d/0xb0 [ 965.357397] ? security_file_ioctl+0x89/0xb0 [ 965.361808] SyS_ioctl+0x8f/0xc0 [ 965.365173] ? do_vfs_ioctl+0x1060/0x1060 [ 965.369317] do_syscall_64+0x1e8/0x640 [ 965.373198] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 965.378033] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 965.383239] RIP: 0033:0x45af49 [ 965.386420] RSP: 002b:00007f2399ab6c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 965.394116] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045af49 [ 965.401375] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 965.408643] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 965.415902] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2399ab76d4 [ 965.423167] R13: 00000000004c41b2 R14: 00000000004da748 R15: 00000000ffffffff [ 965.430680] CPU: 0 PID: 7026 Comm: rs:main Q:Reg Not tainted 4.14.162-syzkaller #0 [ 965.438405] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 965.447764] Call Trace: [ 965.450368] dump_stack+0x142/0x197 [ 965.454017] dump_header+0x177/0x6cd [ 965.457752] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 965.462879] ? ___ratelimit+0x55/0x537 [ 965.466784] oom_kill_process.cold+0x10/0xadd [ 965.471296] ? oom_unkillable_task+0x294/0x390 [ 965.475899] ? lock_downgrade+0x740/0x740 [ 965.480056] out_of_memory+0x2ee/0x1180 [ 965.484045] ? lock_acquire+0x16f/0x430 [ 965.488043] ? oom_killer_disable+0x1d0/0x1d0 [ 965.492545] ? __alloc_pages_slowpath+0xca4/0x2930 [ 965.497471] __alloc_pages_slowpath+0x2251/0x2930 [ 965.502306] ? warn_alloc+0xf0/0xf0 [ 965.505920] ? __might_sleep+0x93/0xb0 [ 965.509791] __alloc_pages_nodemask+0x62c/0x7a0 [ 965.514441] ? find_get_entry+0x214/0x680 [ 965.518575] ? __alloc_pages_slowpath+0x2930/0x2930 [ 965.523578] ? lock_downgrade+0x740/0x740 [ 965.527728] alloc_pages_current+0xec/0x1e0 [ 965.532050] __page_cache_alloc+0x248/0x3e0 [ 965.536357] pagecache_get_page+0x17c/0x9e0 [ 965.540661] grab_cache_page_write_begin+0x74/0xa0 [ 965.545575] ext4_da_write_begin+0x24c/0xea0 [ 965.549967] ? ext4_write_begin+0x1290/0x1290 [ 965.554443] ? balance_dirty_pages_ratelimited+0x125/0x17f0 [ 965.560141] generic_perform_write+0x1f8/0x480 [ 965.564723] ? page_endio+0x530/0x530 [ 965.568508] ? current_time+0xb0/0xb0 [ 965.572292] ? ext4_file_write_iter+0x1f4/0xe90 [ 965.576951] __generic_file_write_iter+0x239/0x5b0 [ 965.581869] ext4_file_write_iter+0x2ac/0xe90 [ 965.586348] ? ext4_file_mmap+0x2c0/0x2c0 [ 965.590476] ? trace_hardirqs_on+0x10/0x10 [ 965.594691] ? save_trace+0x290/0x290 [ 965.598470] ? iov_iter_init+0xaf/0x1d0 [ 965.602426] __vfs_write+0x4a7/0x6b0 [ 965.606121] ? kernel_read+0x120/0x120 [ 965.609986] ? check_preemption_disabled+0x3c/0x250 [ 965.614990] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 965.620442] ? rcu_sync_lockdep_assert+0x6d/0xb0 [ 965.625180] ? __sb_start_write+0x153/0x2f0 [ 965.629484] vfs_write+0x198/0x500 [ 965.633013] SyS_write+0xfd/0x230 [ 965.636445] ? SyS_read+0x230/0x230 [ 965.640051] ? do_syscall_64+0x53/0x640 [ 965.644009] ? SyS_read+0x230/0x230 [ 965.647618] do_syscall_64+0x1e8/0x640 [ 965.651488] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 965.656319] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 965.661501] RIP: 0033:0x7f10eac4619d [ 965.665191] RSP: 002b:00007f10e91e7000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 965.672882] RAX: ffffffffffffffda RBX: 0000000000000231 RCX: 00007f10eac4619d [ 965.680131] RDX: 0000000000000231 RSI: 0000000001602a90 RDI: 0000000000000005 [ 965.687393] RBP: 0000000001602a90 R08: 0000000001602cb1 R09: 00007f10ea5c3157 [ 965.694641] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 965.701890] R13: 00007f10e91e7480 R14: 0000000000000020 R15: 0000000001602890 [ 965.716382] CPU: 0 PID: 7396 Comm: syz-executor.4 Not tainted 4.14.162-syzkaller #0 [ 965.724195] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 965.733540] Call Trace: [ 965.736119] dump_stack+0x142/0x197 [ 965.739753] warn_alloc.cold+0x96/0x1af [ 965.743714] ? zone_watermark_ok_safe+0x2b0/0x2b0 [ 965.748554] ? __alloc_pages_direct_compact+0xbc/0x380 [ 965.753815] __alloc_pages_slowpath+0x23c6/0x2930 [ 965.758645] ? save_trace+0x290/0x290 [ 965.762429] ? warn_alloc+0xf0/0xf0 [ 965.766045] ? __might_sleep+0x93/0xb0 [ 965.769915] __alloc_pages_nodemask+0x62c/0x7a0 [ 965.774567] ? lock_downgrade+0x740/0x740 [ 965.778701] ? __alloc_pages_slowpath+0x2930/0x2930 [ 965.783706] ? save_trace+0x290/0x290 [ 965.787498] alloc_pages_current+0xec/0x1e0 [ 965.791807] ion_page_pool_alloc+0x11f/0x1c0 [ 965.796212] ion_system_heap_allocate+0x138/0x910 [ 965.801038] ? ion_alloc+0x19b/0x860 [ 965.804737] ? rcu_read_lock_sched_held+0x110/0x130 [ 965.809734] ? ion_system_heap_free+0x250/0x250 [ 965.814392] ion_alloc+0x222/0x860 [ 965.817918] ? ion_dma_buf_release+0x50/0x50 [ 965.822326] ? kasan_check_write+0x14/0x20 [ 965.826544] ? _copy_from_user+0x99/0x110 [ 965.830701] ion_ioctl+0x105/0x217 [ 965.834224] ? ion_alloc.cold+0x40/0x40 [ 965.838182] ? ion_alloc.cold+0x40/0x40 [ 965.842138] do_vfs_ioctl+0x7ae/0x1060 [ 965.846019] ? selinux_file_mprotect+0x5d0/0x5d0 [ 965.850770] ? lock_downgrade+0x740/0x740 [ 965.854904] ? ioctl_preallocate+0x1c0/0x1c0 [ 965.859294] ? __fget+0x237/0x370 [ 965.862734] ? security_file_ioctl+0x7d/0xb0 [ 965.867122] ? security_file_ioctl+0x89/0xb0 [ 965.871513] SyS_ioctl+0x8f/0xc0 [ 965.874861] ? do_vfs_ioctl+0x1060/0x1060 [ 965.879005] do_syscall_64+0x1e8/0x640 [ 965.882873] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 965.887700] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 965.892871] RIP: 0033:0x45af49 [ 965.896043] RSP: 002b:00007f361d0eac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 965.903744] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045af49 [ 965.910999] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 965.918250] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 965.925500] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f361d0eb6d4 [ 965.932750] R13: 00000000004c41b2 R14: 00000000004da748 R15: 00000000ffffffff [ 966.099725] Mem-Info: [ 966.134432] active_anon:7767 inactive_anon:188 isolated_anon:0 [ 966.134432] active_file:478 inactive_file:545 isolated_file:0 [ 966.134432] unevictable:0 dirty:0 writeback:0 unstable:0 [ 966.134432] slab_reclaimable:11487 slab_unreclaimable:102766 [ 966.134432] mapped:1008 shmem:242 pagetables:449 bounce:0 [ 966.134432] free:28435 free_pcp:541 free_cma:0 [ 966.292960] syz-executor.4: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 966.292996] syz-executor.1: [ 966.305012] Node 0 active_anon:31012kB inactive_anon:752kB active_file:1276kB inactive_file:1224kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:2188kB dirty:0kB writeback:0kB shmem:968kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 966.323117] syz-executor.4 cpuset= [ 966.335717] page allocation failure: order:4 [ 966.336783] syz4 mems_allowed=0-1 [ 966.351312] CPU: 0 PID: 7403 Comm: syz-executor.4 Not tainted 4.14.162-syzkaller #0 [ 966.359106] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 966.368454] Call Trace: [ 966.371044] dump_stack+0x142/0x197 [ 966.374676] warn_alloc.cold+0x96/0x1af [ 966.378648] ? zone_watermark_ok_safe+0x2b0/0x2b0 [ 966.381310] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 966.383516] ? __alloc_pages_direct_compact+0xbc/0x380 [ 966.383529] __alloc_pages_slowpath+0x23c6/0x2930 [ 966.400724] ? save_trace+0x290/0x290 [ 966.404550] ? warn_alloc+0xf0/0xf0 [ 966.405044] (null) [ 966.408206] ? __might_sleep+0x93/0xb0 [ 966.408216] __alloc_pages_nodemask+0x62c/0x7a0 [ 966.408226] ? lock_downgrade+0x740/0x740 [ 966.423011] ? __alloc_pages_slowpath+0x2930/0x2930 [ 966.432012] alloc_pages_current+0xec/0x1e0 [ 966.436316] ion_page_pool_alloc+0x11f/0x1c0 [ 966.440706] ion_system_heap_allocate+0x138/0x910 [ 966.445531] ? ion_alloc+0x19b/0x860 [ 966.449229] ? rcu_read_lock_sched_held+0x110/0x130 [ 966.454227] ? ion_system_heap_free+0x250/0x250 [ 966.458880] ion_alloc+0x222/0x860 [ 966.462404] ? ion_dma_buf_release+0x50/0x50 [ 966.466809] ? kasan_check_write+0x14/0x20 [ 966.471026] ? _copy_from_user+0x99/0x110 [ 966.475159] ion_ioctl+0x105/0x217 [ 966.478682] ? ion_alloc.cold+0x40/0x40 [ 966.482644] ? ion_alloc.cold+0x40/0x40 [ 966.486601] do_vfs_ioctl+0x7ae/0x1060 [ 966.490474] ? selinux_file_mprotect+0x5d0/0x5d0 [ 966.495214] ? lock_downgrade+0x740/0x740 [ 966.499344] ? ioctl_preallocate+0x1c0/0x1c0 [ 966.503737] ? __fget+0x237/0x370 [ 966.507175] ? security_file_ioctl+0x7d/0xb0 [ 966.511579] ? security_file_ioctl+0x89/0xb0 [ 966.515974] SyS_ioctl+0x8f/0xc0 [ 966.519584] ? do_vfs_ioctl+0x1060/0x1060 [ 966.523723] do_syscall_64+0x1e8/0x640 [ 966.527590] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 966.532416] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 966.537585] RIP: 0033:0x45af49 [ 966.540755] RSP: 002b:00007f361d0a8c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 966.548445] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045af49 [ 966.555698] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 966.562963] RBP: 000000000075c070 R08: 0000000000000000 R09: 0000000000000000 [ 966.570212] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f361d0a96d4 [ 966.577464] R13: 00000000004c41b2 R14: 00000000004da748 R15: 00000000ffffffff [ 966.585114] syz-executor.1 cpuset=syz1 mems_allowed=0-1 [ 966.594379] CPU: 1 PID: 7399 Comm: syz-executor.1 Not tainted 4.14.162-syzkaller #0 [ 966.601894] Mem-Info: [ 966.602186] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 966.604642] active_anon:7767 inactive_anon:188 isolated_anon:0 [ 966.604642] active_file:127 inactive_file:142 isolated_file:37 [ 966.604642] unevictable:0 dirty:0 writeback:0 unstable:0 [ 966.604642] slab_reclaimable:11487 slab_unreclaimable:102766 [ 966.604642] mapped:233 shmem:242 pagetables:449 bounce:0 [ 966.604642] free:13796 free_pcp:30 free_cma:0 [ 966.613924] Call Trace: [ 966.613941] dump_stack+0x142/0x197 [ 966.613954] warn_alloc.cold+0x96/0x1af [ 966.613961] ? zone_watermark_ok_safe+0x2b0/0x2b0 [ 966.613982] ? __alloc_pages_direct_compact+0xbc/0x380 [ 966.613992] __alloc_pages_slowpath+0x23c6/0x2930 [ 966.614009] ? save_trace+0x290/0x290 [ 966.614023] ? warn_alloc+0xf0/0xf0 [ 966.614041] ? __might_sleep+0x93/0xb0 [ 966.614050] __alloc_pages_nodemask+0x62c/0x7a0 [ 966.614067] ? lock_downgrade+0x740/0x740 [ 966.650712] Node 0 active_anon:31012kB inactive_anon:752kB active_file:484kB inactive_file:544kB unevictable:0kB isolated(anon):0kB isolated(file):148kB mapped:888kB dirty:0kB writeback:0kB shmem:968kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 966.653060] ? __alloc_pages_slowpath+0x2930/0x2930 [ 966.653071] ? save_trace+0x290/0x290 [ 966.653084] alloc_pages_current+0xec/0x1e0 [ 966.657085] Node 1 active_anon:56kB inactive_anon:0kB active_file:24kB inactive_file:24kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:44kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 966.661880] ion_page_pool_alloc+0x11f/0x1c0 [ 966.661888] ion_system_heap_allocate+0x138/0x910 [ 966.661897] ? ion_alloc+0x19b/0x860 [ 966.661906] ? rcu_read_lock_sched_held+0x110/0x130 [ 966.661915] ? ion_system_heap_free+0x250/0x250 [ 966.661928] ion_alloc+0x222/0x860 [ 966.661942] ? ion_dma_buf_release+0x50/0x50 [ 966.661955] ? kasan_check_write+0x14/0x20 [ 966.669674] Node 0 [ 966.672040] ? _copy_from_user+0x99/0x110 [ 966.672051] ion_ioctl+0x105/0x217 [ 966.672061] ? ion_alloc.cold+0x40/0x40 [ 966.672074] ? ion_alloc.cold+0x40/0x40 [ 966.672084] do_vfs_ioctl+0x7ae/0x1060 [ 966.672095] ? selinux_file_mprotect+0x5d0/0x5d0 [ 966.672103] ? lock_downgrade+0x740/0x740 [ 966.672111] ? ioctl_preallocate+0x1c0/0x1c0 [ 966.672122] ? __fget+0x237/0x370 [ 966.677199] DMA free:10376kB min:216kB low:268kB high:320kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 966.679523] ? security_file_ioctl+0x7d/0xb0 [ 966.679530] ? security_file_ioctl+0x89/0xb0 [ 966.679541] SyS_ioctl+0x8f/0xc0 [ 966.685942] lowmem_reserve[]: [ 966.688059] ? do_vfs_ioctl+0x1060/0x1060 [ 966.688070] do_syscall_64+0x1e8/0x640 [ 966.688079] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 966.693555] 0 [ 966.719615] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 966.719622] RIP: 0033:0x45af49 [ 966.719627] RSP: 002b:00007f34ee4c3c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 966.719636] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045af49 [ 966.719640] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 966.719645] RBP: 000000000075c070 R08: 0000000000000000 R09: 0000000000000000 [ 966.719649] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f34ee4c46d4 [ 966.719654] R13: 00000000004c41b2 R14: 00000000004da748 R15: 00000000ffffffff [ 966.722404] Node 1 active_anon:56kB inactive_anon:0kB active_file:24kB inactive_file:24kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:44kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 966.729569] 2569 [ 966.734569] Node 0 [ 966.764825] 2569 [ 966.769065] DMA free:10376kB min:216kB low:268kB high:320kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 966.769068] lowmem_reserve[]: 0 2569 2569 2569 2569 [ 966.769091] Node 0 [ 966.773471] 2569 [ 966.777978] DMA32 free:18152kB min:36380kB low:45472kB high:54564kB active_anon:31012kB inactive_anon:752kB active_file:484kB inactive_file:544kB unevictable:0kB writepending:0kB present:3129332kB managed:2634320kB mlocked:0kB kernel_stack:7264kB pagetables:1796kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 966.786359] 2569 [ 966.790521] lowmem_reserve[]: 0 0 0 0 0 [ 966.790541] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 966.797043] lowmem_reserve[]: 0 0 0 0 0 [ 966.797065] Node 1 Normal free:26756kB min:53508kB low:66884kB high:80260kB active_anon:56kB inactive_anon:0kB active_file:24kB inactive_file:24kB unevictable:0kB writepending:0kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:32kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 966.797084] lowmem_reserve[]: 0 0 [ 966.805785] Node 0 [ 966.808906] 0 [ 966.812904] DMA32 free:18152kB min:36380kB low:45472kB high:54564kB active_anon:31012kB inactive_anon:752kB active_file:484kB inactive_file:544kB unevictable:0kB writepending:0kB present:3129332kB managed:2634320kB mlocked:0kB kernel_stack:7264kB pagetables:1796kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 966.816702] 0 0 [ 966.816712] Node 0 DMA: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 1*128kB (U) [ 966.825297] lowmem_reserve[]: [ 966.825738] 0*256kB [ 966.830189] 0 [ 966.833534] 0*512kB 0*1024kB 1*2048kB (M) 2*4096kB (M) = 10376kB [ 966.833558] Node 0 DMA32: 555*4kB (UME) [ 966.863697] 0 [ 966.870591] 342*8kB [ 966.872108] 0 [ 966.874461] (ME) 224*16kB (UMEH) 116*32kB (UMEH) 32*64kB (M) 7*128kB (M) 2*256kB (M) 1*512kB (M) 0*1024kB 1*2048kB [ 966.878714] 0 [ 966.883125] ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb [ 966.883162] ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb [ 966.884429] (U) [ 966.893355] 0 [ 966.895828] 0*4096kB [ 966.908100] = 18268kB [ 966.939338] Node 0 [ 966.971889] Node 0 [ 967.012542] Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 967.157877] Normal: [ 967.163897] lowmem_reserve[]: [ 967.167717] 0*4kB [ 967.168054] 0 [ 967.169840] 0*8kB 0*16kB [ 967.180559] 0 [ 967.186957] 0*32kB [ 967.188806] 0 [ 967.195318] 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB [ 967.197300] 0 [ 967.199082] 0*2048kB 0*4096kB [ 967.201508] 0 [ 967.201517] Node 1 Normal free:26948kB min:53508kB low:66884kB high:80260kB active_anon:56kB inactive_anon:0kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:0kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:32kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 967.201536] lowmem_reserve[]: 0 0 0 0 0 [ 967.201558] Node 0 DMA: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB [ 967.207679] = 0kB [ 967.208433] 1*128kB [ 967.240139] Node 1 [ 967.240830] (U) [ 967.242589] Normal: [ 967.245327] 0*256kB [ 967.247109] 1*4kB [ 967.249324] 0*512kB [ 967.256089] (M) [ 967.256230] 0*1024kB [ 967.258021] 3*8kB (ME) [ 967.261271] 1*2048kB (M) [ 967.270052] 5*16kB [ 967.291912] 2*4096kB [ 967.294648] syz-executor.2: [ 967.300552] (M) [ 967.318157] page allocation failure: order:0 [ 967.319176] = 10376kB [ 967.321273] syz-executor.2: [ 967.322592] Node 0 [ 967.325155] page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 967.327899] DMA32: [ 967.330155] syz-executor.5: page allocation failure: order:0 [ 967.332581] 586*4kB [ 967.335566] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 967.337538] (ME) [ 967.345914] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 967.347354] 388*8kB [ 967.349573] (null) [ 967.349578] syz-executor.2 cpuset= [ 967.359472] (MEH) 228*16kB (MEH) 114*32kB (UME) 38*64kB (UM) 8*128kB (UM) 3*256kB [ 967.365748] (null) [ 967.367551] (UM) [ 967.369857] syz-executor.2 cpuset= [ 967.377031] 2*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 17992kB [ 967.377054] Node 0 [ 967.379281] (null) [ 967.386209] Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 967.386256] Node 1 Normal: 1*4kB (M) 3*8kB (ME) 5*16kB (ME) 7*32kB (UME) 6*64kB (UME) 1*128kB [ 967.390039] syz-executor.5: [ 967.393048] (E) [ 967.394265] page allocation failure: order:0 [ 967.401989] syz-executor.5 cpuset=syz5 mems_allowed=0-1 [ 967.402010] CPU: 0 PID: 7348 Comm: syz-executor.5 Not tainted 4.14.162-syzkaller #0 [ 967.402015] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 967.402018] Call Trace: [ 967.402036] dump_stack+0x142/0x197 [ 967.405191] (ME) [ 967.406214] warn_alloc.cold+0x96/0x1af [ 967.409748] 7*32kB [ 967.415615] ? zone_watermark_ok_safe+0x2b0/0x2b0 [ 967.415626] ? call_timer_fn+0x670/0x670 [ 967.415643] __alloc_pages_slowpath+0x23c6/0x2930 [ 967.417866] syz2 [ 967.420003] ? warn_alloc+0xf0/0xf0 [ 967.430050] syz2 [ 967.438770] ? __might_sleep+0x93/0xb0 [ 967.441780] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 967.443716] __alloc_pages_nodemask+0x62c/0x7a0 [ 967.448098] (null) [ 967.453457] ? __alloc_pages_slowpath+0x2930/0x2930 [ 967.453477] alloc_pages_current+0xec/0x1e0 [ 967.461265] (UME) [ 967.470590] ion_page_pool_alloc+0x11f/0x1c0 [ 967.470598] ion_system_heap_allocate+0x138/0x910 [ 967.470607] ? ion_alloc+0x19b/0x860 [ 967.473177] mems_allowed=0-1 [ 967.476780] ? rcu_read_lock_sched_held+0x110/0x130 [ 967.480032] mems_allowed=0-1 [ 967.482773] ? ion_system_heap_free+0x250/0x250 [ 967.500029] 6*64kB [ 967.500613] ion_alloc+0x222/0x860 [ 967.504226] (UME) [ 967.506202] ? ion_dma_buf_release+0x50/0x50 [ 967.510112] syz-executor.5 cpuset= [ 967.517161] ? kasan_check_write+0x14/0x20 [ 967.550041] 1*128kB [ 967.551330] ? _copy_from_user+0x99/0x110 [ 967.556321] (E) [ 967.559427] ion_ioctl+0x105/0x217 [ 967.564118] syz5 [ 967.566311] ? ion_alloc.cold+0x40/0x40 [ 967.569829] mems_allowed=0-1 [ 967.571964] ? ion_alloc.cold+0x40/0x40 [ 967.571974] do_vfs_ioctl+0x7ae/0x1060 [ 967.571986] ? selinux_file_mprotect+0x5d0/0x5d0 [ 967.600031] 2*256kB [ 967.601916] ? lock_downgrade+0x740/0x740 [ 967.604994] (UE) [ 967.608953] ? ioctl_preallocate+0x1c0/0x1c0 [ 967.630415] ? __fget+0x237/0x370 [ 967.633852] ? security_file_ioctl+0x7d/0xb0 [ 967.638242] ? security_file_ioctl+0x89/0xb0 [ 967.642634] SyS_ioctl+0x8f/0xc0 [ 967.645981] ? do_vfs_ioctl+0x1060/0x1060 [ 967.650068] 1*512kB (E) [ 967.650125] do_syscall_64+0x1e8/0x640 [ 967.650132] 2*1024kB [ 967.652796] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 967.656680] (ME) [ 967.659083] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 967.671172] RIP: 0033:0x45af49 [ 967.674358] RSP: 002b:00007f7f21a93c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 967.682050] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045af49 [ 967.689305] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 967.696558] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 967.703809] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7f21a946d4 [ 967.710034] 7*2048kB [ 967.711063] R13: 00000000004c41b2 R14: 00000000004da748 R15: 00000000ffffffff [ 967.718978] CPU: 0 PID: 7372 Comm: syz-executor.5 Not tainted 4.14.162-syzkaller #0 [ 967.728514] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 967.737870] Call Trace: [ 967.740452] dump_stack+0x142/0x197 [ 967.744101] warn_alloc.cold+0x96/0x1af [ 967.748068] ? zone_watermark_ok_safe+0x2b0/0x2b0 [ 967.752904] ? call_timer_fn+0x670/0x670 [ 967.756952] __alloc_pages_slowpath+0x23c6/0x2930 [ 967.760034] (UM) 2*4096kB (UM) = 26444kB [ 967.761792] ? warn_alloc+0xf0/0xf0 [ 967.765842] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 967.769456] ? __might_sleep+0x93/0xb0 [ 967.782150] __alloc_pages_nodemask+0x62c/0x7a0 [ 967.786816] ? lock_downgrade+0x740/0x740 [ 967.790951] ? __alloc_pages_slowpath+0x2930/0x2930 [ 967.795955] ? retint_kernel+0x2d/0x2d [ 967.799829] alloc_pages_current+0xec/0x1e0 [ 967.804138] ion_page_pool_alloc+0x11f/0x1c0 [ 967.808542] ion_system_heap_allocate+0x138/0x910 [ 967.813390] ? ion_alloc+0x19b/0x860 [ 967.817086] ? rcu_read_lock_sched_held+0x110/0x130 [ 967.820033] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 967.822088] ? ion_system_heap_free+0x250/0x250 [ 967.835299] ion_alloc+0x222/0x860 [ 967.838825] ? ion_dma_buf_release+0x50/0x50 [ 967.843220] ? kasan_check_write+0x14/0x20 [ 967.847436] ? _copy_from_user+0x99/0x110 [ 967.850032] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 967.851567] ion_ioctl+0x105/0x217 [ 967.864039] ? ion_alloc.cold+0x40/0x40 [ 967.868006] ? ion_alloc.cold+0x40/0x40 [ 967.871976] do_vfs_ioctl+0x7ae/0x1060 [ 967.875870] ? selinux_file_mprotect+0x5d0/0x5d0 [ 967.880074] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 967.880617] ? lock_downgrade+0x740/0x740 [ 967.889172] 273 total pagecache pages [ 967.893306] ? ioctl_preallocate+0x1c0/0x1c0 [ 967.893317] ? __fget+0x237/0x370 [ 967.893332] ? security_file_ioctl+0x7d/0xb0 [ 967.909311] ? security_file_ioctl+0x89/0xb0 [ 967.913705] SyS_ioctl+0x8f/0xc0 [ 967.917055] ? do_vfs_ioctl+0x1060/0x1060 [ 967.921199] do_syscall_64+0x1e8/0x640 [ 967.925069] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 967.929901] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 967.930044] 0 pages in swap cache [ 967.935075] RIP: 0033:0x45af49 [ 967.938506] Swap cache stats: add 0, delete 0, find 0/0 [ 967.941677] RSP: 002b:00007f7f21a51c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 967.941686] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045af49 [ 967.941691] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 967.941695] RBP: 000000000075c070 R08: 0000000000000000 R09: 0000000000000000 [ 967.941699] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7f21a526d4 [ 967.941706] R13: 00000000004c41b2 R14: 00000000004da748 R15: 00000000ffffffff [ 967.980029] Free swap = 0kB [ 967.987269] 2*256kB (UE) 1*512kB (E) 2*1024kB (ME) 7*2048kB (UM) 2*4096kB (UM) = 26444kB [ 967.999568] CPU: 1 PID: 7364 Comm: syz-executor.2 Not tainted 4.14.162-syzkaller #0 [ 968.002535] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 968.010256] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 968.010260] Call Trace: [ 968.010276] dump_stack+0x142/0x197 [ 968.010288] warn_alloc.cold+0x96/0x1af [ 968.010299] ? zone_watermark_ok_safe+0x2b0/0x2b0 [ 968.019120] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 968.028456] ? call_timer_fn+0x670/0x670 [ 968.028474] __alloc_pages_slowpath+0x23c6/0x2930 [ 968.028495] ? warn_alloc+0xf0/0xf0 [ 968.031088] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 968.034676] ? __might_sleep+0x93/0xb0 [ 968.038619] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 968.043444] __alloc_pages_nodemask+0x62c/0x7a0 [ 968.043453] ? lock_downgrade+0x740/0x740 [ 968.043462] ? __alloc_pages_slowpath+0x2930/0x2930 [ 968.043480] alloc_pages_current+0xec/0x1e0 [ 968.052064] 273 total pagecache pages [ 968.056075] ion_page_pool_alloc+0x11f/0x1c0 [ 968.060923] 0 pages in swap cache [ 968.064501] ion_system_heap_allocate+0x138/0x910 [ 968.073344] Swap cache stats: add 0, delete 0, find 0/0 [ 968.077205] ? ion_alloc+0x19b/0x860 [ 968.086414] Free swap = 0kB [ 968.090494] ? rcu_read_lock_sched_held+0x110/0x130 [ 968.090506] ? ion_system_heap_free+0x250/0x250 [ 968.090519] ion_alloc+0x222/0x860 [ 968.090532] ? ion_dma_buf_release+0x50/0x50 [ 968.090544] ? kasan_check_write+0x14/0x20 [ 968.094679] Total swap = 0kB [ 968.099679] ? _copy_from_user+0x99/0x110 [ 968.107925] 1965979 pages RAM [ 968.112178] ion_ioctl+0x105/0x217 [ 968.112189] ? ion_alloc.cold+0x40/0x40 [ 968.112202] ? ion_alloc.cold+0x40/0x40 [ 968.112211] do_vfs_ioctl+0x7ae/0x1060 [ 968.112222] ? selinux_file_mprotect+0x5d0/0x5d0 [ 968.112230] ? lock_downgrade+0x740/0x740 [ 968.112240] ? ioctl_preallocate+0x1c0/0x1c0 [ 968.116222] 0 pages HighMem/MovableOnly [ 968.120507] ? __fget+0x237/0x370 [ 968.120522] ? security_file_ioctl+0x7d/0xb0 [ 968.120529] ? security_file_ioctl+0x89/0xb0 [ 968.120540] SyS_ioctl+0x8f/0xc0 [ 968.120547] ? do_vfs_ioctl+0x1060/0x1060 [ 968.120559] do_syscall_64+0x1e8/0x640 [ 968.126928] 335874 pages reserved [ 968.129621] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 968.132680] 0 pages cma reserved [ 968.137711] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 968.142389] Out of memory: Kill process 7390 (syz-executor.0) score 1000 or sacrifice child [ 968.145877] RIP: 0033:0x45af49 [ 968.150393] Killed process 7393 (syz-executor.0) total-vm:38168kB, anon-rss:2188kB, file-rss:0kB, shmem-rss:0kB [ 968.154499] RSP: 002b:00007fa8249eec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 968.158189] warn_alloc_show_mem: 4 callbacks suppressed [ 968.158192] Mem-Info: [ 968.161631] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045af49 [ 968.161636] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 968.161641] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 968.161645] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fa8249ef6d4 [ 968.161649] R13: 00000000004c41b2 R14: 00000000004da748 R15: 00000000ffffffff [ 968.181145] CPU: 1 PID: 7378 Comm: syz-executor.2 Not tainted 4.14.162-syzkaller #0 [ 968.190607] oom_reaper: reaped process 7393 (syz-executor.0), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 968.193989] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 968.198575] rs:main Q:Reg invoked oom-killer: gfp_mask=0x1c200ca(GFP_HIGHUSER_MOVABLE|__GFP_WRITE), nodemask= [ 968.201398] Call Trace: [ 968.201414] dump_stack+0x142/0x197 [ 968.201427] warn_alloc.cold+0x96/0x1af [ 968.201437] ? zone_watermark_ok_safe+0x2b0/0x2b0 [ 968.205849] (null) [ 968.210221] ? call_timer_fn+0x670/0x670 [ 968.210239] __alloc_pages_slowpath+0x23c6/0x2930 [ 968.210260] ? warn_alloc+0xf0/0xf0 [ 968.213615] active_anon:7243 inactive_anon:188 isolated_anon:0 [ 968.213615] active_file:13 inactive_file:13 isolated_file:0 [ 968.213615] unevictable:0 dirty:0 writeback:0 unstable:0 [ 968.213615] slab_reclaimable:11487 slab_unreclaimable:102775 [ 968.213615] mapped:2 shmem:242 pagetables:449 bounce:0 [ 968.213615] free:14242 free_pcp:25 free_cma:0 [ 968.217734] ? __might_sleep+0x93/0xb0 [ 968.223875] , order=0, oom_score_adj=0 [ 968.225032] __alloc_pages_nodemask+0x62c/0x7a0 [ 968.229853] rs:main Q:Reg cpuset= [ 968.233208] ? lock_downgrade+0x740/0x740 [ 968.233217] ? __alloc_pages_slowpath+0x2930/0x2930 [ 968.233234] alloc_pages_current+0xec/0x1e0 [ 968.233245] ion_page_pool_alloc+0x11f/0x1c0 [ 968.238431] Node 0 active_anon:28916kB inactive_anon:752kB active_file:48kB inactive_file:52kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:8kB dirty:0kB writeback:0kB shmem:968kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 968.246910] ion_system_heap_allocate+0x138/0x910 [ 968.246918] ? ion_alloc+0x19b/0x860 [ 968.246929] ? rcu_read_lock_sched_held+0x110/0x130 [ 968.246937] ? ion_system_heap_free+0x250/0x250 [ 968.246949] ion_alloc+0x222/0x860 [ 968.246960] ? ion_dma_buf_release+0x50/0x50 [ 968.246971] ? kasan_check_write+0x14/0x20 [ 968.246981] ? _copy_from_user+0x99/0x110 [ 968.246990] ion_ioctl+0x105/0x217 [ 968.246999] ? ion_alloc.cold+0x40/0x40 [ 968.247013] ? ion_alloc.cold+0x40/0x40 [ 968.247023] do_vfs_ioctl+0x7ae/0x1060 [ 968.247033] ? selinux_file_mprotect+0x5d0/0x5d0 [ 968.247041] ? lock_downgrade+0x740/0x740 [ 968.247049] ? ioctl_preallocate+0x1c0/0x1c0 [ 968.247061] ? __fget+0x237/0x370 [ 968.257196] / [ 968.260458] ? security_file_ioctl+0x7d/0xb0 [ 968.268217] Node 1 active_anon:56kB inactive_anon:0kB active_file:4kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 968.273488] ? security_file_ioctl+0x89/0xb0 [ 968.273501] SyS_ioctl+0x8f/0xc0 [ 968.273510] ? do_vfs_ioctl+0x1060/0x1060 [ 968.273521] do_syscall_64+0x1e8/0x640 [ 968.273529] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 968.273544] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 968.273551] RIP: 0033:0x45af49 [ 968.273555] RSP: 002b:00007fa8249acc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 968.273564] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045af49 [ 968.273570] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 968.309366] Node 0 [ 968.312258] RBP: 000000000075c070 R08: 0000000000000000 R09: 0000000000000000 [ 968.312262] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fa8249ad6d4 [ 968.312267] R13: 00000000004c41b2 R14: 00000000004da748 R15: 00000000ffffffff [ 968.325261] Total swap = 0kB [ 968.333961] mems_allowed=0-1 [ 968.355553] 1965979 pages RAM [ 968.406347] DMA free:11400kB min:216kB low:268kB high:320kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 968.490107] CPU: 0 PID: 7026 Comm: rs:main Q:Reg Not tainted 4.14.162-syzkaller #0 [ 968.512438] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 968.550050] 0 pages HighMem/MovableOnly [ 968.572792] Call Trace: [ 968.572811] dump_stack+0x142/0x197 [ 968.572824] dump_header+0x177/0x6cd [ 968.600882] 335874 pages reserved [ 968.601783] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 968.609473] 0 pages cma reserved [ 968.616733] ? ___ratelimit+0x55/0x537 [ 968.616746] oom_kill_process.cold+0x10/0xadd [ 968.616753] ? oom_unkillable_task+0x294/0x390 [ 968.616765] ? lock_downgrade+0x740/0x740 [ 968.616776] out_of_memory+0x2ee/0x1180 [ 968.616785] ? lock_acquire+0x16f/0x430 [ 968.750650] ? oom_killer_disable+0x1d0/0x1d0 [ 968.755139] ? __alloc_pages_slowpath+0xca4/0x2930 [ 968.760065] __alloc_pages_slowpath+0x2251/0x2930 [ 968.764939] ? warn_alloc+0xf0/0xf0 [ 968.768573] ? __might_sleep+0x93/0xb0 [ 968.772463] __alloc_pages_nodemask+0x62c/0x7a0 [ 968.777219] ? find_get_entry+0x214/0x680 [ 968.781364] ? __alloc_pages_slowpath+0x2930/0x2930 [ 968.786379] ? lock_downgrade+0x740/0x740 [ 968.790528] alloc_pages_current+0xec/0x1e0 [ 968.794849] __page_cache_alloc+0x248/0x3e0 [ 968.799165] pagecache_get_page+0x17c/0x9e0 [ 968.803485] grab_cache_page_write_begin+0x74/0xa0 [ 968.808409] ext4_da_write_begin+0x24c/0xea0 [ 968.812820] ? ext4_write_begin+0x1290/0x1290 [ 968.817314] ? balance_dirty_pages_ratelimited+0x125/0x17f0 [ 968.823028] generic_perform_write+0x1f8/0x480 [ 968.827609] ? page_endio+0x530/0x530 [ 968.831403] ? current_time+0xb0/0xb0 [ 968.835203] ? ext4_file_write_iter+0x1f4/0xe90 [ 968.839870] __generic_file_write_iter+0x239/0x5b0 [ 968.844798] ext4_file_write_iter+0x2ac/0xe90 [ 968.849294] ? ext4_file_mmap+0x2c0/0x2c0 [ 968.853441] ? trace_hardirqs_on+0x10/0x10 [ 968.857670] ? save_trace+0x290/0x290 [ 968.861463] ? iov_iter_init+0xaf/0x1d0 [ 968.865431] __vfs_write+0x4a7/0x6b0 [ 968.869139] ? kernel_read+0x120/0x120 [ 968.873026] ? check_preemption_disabled+0x3c/0x250 [ 968.878052] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 968.883507] ? rcu_sync_lockdep_assert+0x6d/0xb0 [ 968.888257] ? __sb_start_write+0x153/0x2f0 [ 968.892579] vfs_write+0x198/0x500 [ 968.896114] SyS_write+0xfd/0x230 [ 968.899559] ? SyS_read+0x230/0x230 [ 968.903182] ? do_syscall_64+0x53/0x640 [ 968.907150] ? SyS_read+0x230/0x230 [ 968.910770] do_syscall_64+0x1e8/0x640 [ 968.914647] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 968.919485] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 968.924697] RIP: 0033:0x7f10eac4619d [ 968.928401] RSP: 002b:00007f10e91e7000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 968.936113] RAX: ffffffffffffffda RBX: 0000000000000231 RCX: 00007f10eac4619d [ 968.943382] RDX: 0000000000000231 RSI: 0000000001602a90 RDI: 0000000000000005 [ 968.950653] RBP: 0000000001602a90 R08: 0000000001602cb1 R09: 00007f10ea5c3157 [ 968.957914] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 968.965187] R13: 00007f10e91e7480 R14: 0000000000000020 R15: 0000000001602890 [ 969.080927] lowmem_reserve[]: 0 2569 2569 2569 2569 [ 969.125786] Node 0 DMA32 free:138972kB min:36380kB low:45472kB high:54564kB active_anon:28948kB inactive_anon:744kB active_file:920kB inactive_file:6800kB unevictable:0kB writepending:32kB present:3129332kB managed:2634320kB mlocked:0kB kernel_stack:7328kB pagetables:1808kB bounce:0kB free_pcp:320kB local_pcp:148kB free_cma:0kB [ 969.159733] lowmem_reserve[]: 0 0 0 0 0 [ 969.163832] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 969.193683] lowmem_reserve[]: 0 0 0 0 0 [ 969.197715] Node 1 Normal free:1148236kB min:53508kB low:66884kB high:80260kB active_anon:20kB inactive_anon:0kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:4kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:32kB pagetables:0kB bounce:0kB free_pcp:36kB local_pcp:36kB free_cma:0kB [ 969.300111] lowmem_reserve[]: 0 0 0 0 0 [ 969.330050] Node 0 DMA: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 1*128kB (U) 0*256kB 0*512kB 2*1024kB (U) 1*2048kB (M) 2*4096kB (M) = 12424kB [ 969.370058] Node 0 DMA32: 1025*4kB (UME) 324*8kB (UME) 215*16kB (UEH) 209*32kB (UME) 410*64kB (UMH) 39*128kB (UM) 35*256kB (UM) 12*512kB (UM) 107*1024kB (U) 13*2048kB (UM) 0*4096kB = 199348kB [ 969.410067] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 969.430124] Node 1 Normal: 1277*4kB (U) 9*8kB (UME) 7*16kB (UME) 8*32kB (UME) 35*64kB (UME) 17*128kB (UME) 9*256kB (UE) 2*512kB (UE) 949*1024kB (UME) 69*2048kB (UM) 8*4096kB (UM) = 1159148kB [ 969.451165] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 969.451171] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 969.451176] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 969.451181] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 969.451187] 2244 total pagecache pages [ 969.451196] 0 pages in swap cache [ 969.451200] Swap cache stats: add 0, delete 0, find 0/0 [ 969.451203] Free swap = 0kB [ 969.560060] Total swap = 0kB [ 969.563118] 1965979 pages RAM [ 969.566211] 0 pages HighMem/MovableOnly [ 969.590067] 335874 pages reserved [ 969.593575] 0 pages cma reserved [ 969.959290] Mem-Info: [ 969.971619] active_anon:7242 inactive_anon:186 isolated_anon:0 [ 969.971619] active_file:726 inactive_file:697 isolated_file:88 [ 969.971619] unevictable:0 dirty:9 writeback:0 unstable:0 [ 969.971619] slab_reclaimable:11519 slab_unreclaimable:102999 [ 969.971619] mapped:1236 shmem:242 pagetables:452 bounce:0 [ 969.971619] free:13957 free_pcp:182 free_cma:0 [ 970.010420] Node 0 active_anon:28948kB inactive_anon:744kB active_file:1412kB inactive_file:1292kB unevictable:0kB isolated(anon):0kB isolated(file):224kB mapped:2544kB dirty:32kB writeback:0kB shmem:968kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 970.070098] Node 1 active_anon:20kB inactive_anon:0kB active_file:4kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 970.110208] Node 0 DMA free:10380kB min:216kB low:268kB high:320kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 970.166594] lowmem_reserve[]: 0 2569 2569 2569 2569 [ 970.174559] Node 0 DMA32 free:19688kB min:36380kB low:45472kB high:54564kB active_anon:28912kB inactive_anon:752kB active_file:664kB inactive_file:816kB unevictable:0kB writepending:36kB present:3129332kB managed:2634320kB mlocked:0kB kernel_stack:7264kB pagetables:1792kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 970.208065] lowmem_reserve[]: 0 0 0 0 0 [ 970.212155] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 970.237518] lowmem_reserve[]: 0 0 0 0 0 [ 970.241638] Node 1 Normal free:26732kB min:53508kB low:66884kB high:80260kB active_anon:20kB inactive_anon:0kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:4kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:32kB pagetables:0kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB [ 970.269284] lowmem_reserve[]: 0 0 0 0 0 [ 970.273680] Node 0 DMA: 1*4kB (U) 1*8kB (U) 0*16kB 0*32kB 0*64kB 1*128kB (U) 0*256kB 0*512kB 0*1024kB 1*2048kB (M) 2*4096kB (M) = 10380kB [ 970.288796] syz-executor.2: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 970.305072] Node 0 DMA32: 257*4kB (UME) 413*8kB (UME) 376*16kB (UME) 241*32kB (UME) 2*64kB (H) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18188kB [ 970.307033] syz-executor.2 cpuset= [ 970.322383] syz-executor.2: [ 970.325929] syz-executor.5: [ 970.325946] page allocation failure: order:4 [ 970.328958] page allocation failure: order:4 [ 970.336596] syz-executor.5: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 970.344081] syz2 [ 970.356184] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 970.363852] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 970.380054] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 970.394586] syz-executor.2 cpuset=syz2 mems_allowed=0-1 [ 970.395752] mems_allowed=0-1 [ 970.399964] CPU: 0 PID: 7378 Comm: syz-executor.2 Not tainted 4.14.162-syzkaller #0 [ 970.408514] syz-executor.5 cpuset= [ 970.410841] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 970.410845] Call Trace: [ 970.410861] dump_stack+0x142/0x197 [ 970.410874] warn_alloc.cold+0x96/0x1af [ 970.414407] syz5 [ 970.423748] ? zone_watermark_ok_safe+0x2b0/0x2b0 [ 970.440033] mems_allowed=0-1 [ 970.440666] ? __alloc_pages_direct_compact+0xbc/0x380 [ 970.449018] __alloc_pages_slowpath+0x23c6/0x2930 [ 970.453874] ? save_trace+0x290/0x290 [ 970.457661] ? warn_alloc+0xf0/0xf0 [ 970.461279] ? __might_sleep+0x93/0xb0 [ 970.465157] __alloc_pages_nodemask+0x62c/0x7a0 [ 970.469818] ? lock_downgrade+0x740/0x740 [ 970.473953] ? __alloc_pages_slowpath+0x2930/0x2930 [ 970.478958] alloc_pages_current+0xec/0x1e0 [ 970.483264] ion_page_pool_alloc+0x11f/0x1c0 [ 970.487654] ion_system_heap_allocate+0x138/0x910 [ 970.492484] ? ion_system_heap_free+0x250/0x250 [ 970.497137] ion_alloc+0x68c/0x860 [ 970.500670] ? ion_dma_buf_release+0x50/0x50 [ 970.505067] ? kasan_check_write+0x14/0x20 [ 970.509283] ? _copy_from_user+0x99/0x110 [ 970.513414] ion_ioctl+0x105/0x217 [ 970.516937] ? ion_alloc.cold+0x40/0x40 [ 970.520895] ? ion_alloc.cold+0x40/0x40 [ 970.524850] do_vfs_ioctl+0x7ae/0x1060 [ 970.528722] ? selinux_file_mprotect+0x5d0/0x5d0 [ 970.533461] ? lock_downgrade+0x740/0x740 [ 970.537593] ? ioctl_preallocate+0x1c0/0x1c0 [ 970.541999] ? __fget+0x237/0x370 [ 970.545437] ? security_file_ioctl+0x7d/0xb0 [ 970.549845] ? security_file_ioctl+0x89/0xb0 [ 970.554235] SyS_ioctl+0x8f/0xc0 [ 970.557584] ? do_vfs_ioctl+0x1060/0x1060 [ 970.561715] do_syscall_64+0x1e8/0x640 [ 970.565584] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 970.571281] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 970.576474] RIP: 0033:0x45af49 [ 970.579645] RSP: 002b:00007fa8249acc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 970.587340] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045af49 [ 970.594593] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 970.601846] RBP: 000000000075c070 R08: 0000000000000000 R09: 0000000000000000 [ 970.609098] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fa8249ad6d4 [ 970.616363] R13: 00000000004c41b2 R14: 00000000004da748 R15: 00000000ffffffff [ 970.623642] CPU: 1 PID: 7348 Comm: syz-executor.5 Not tainted 4.14.162-syzkaller #0 [ 970.627734] syz-executor.5 cpuset= [ 970.631444] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 970.631448] Call Trace: [ 970.631464] dump_stack+0x142/0x197 [ 970.631476] warn_alloc.cold+0x96/0x1af [ 970.631484] ? zone_watermark_ok_safe+0x2b0/0x2b0 [ 970.631499] ? __alloc_pages_direct_compact+0xbc/0x380 [ 970.631510] __alloc_pages_slowpath+0x23c6/0x2930 [ 970.645014] syz5 [ 970.646974] ? save_trace+0x290/0x290 [ 970.652407] Node 1 [ 970.654635] ? warn_alloc+0xf0/0xf0 [ 970.659451] Normal: [ 970.664721] ? __might_sleep+0x93/0xb0 [ 970.664731] __alloc_pages_nodemask+0x62c/0x7a0 [ 970.664741] ? lock_downgrade+0x740/0x740 [ 970.664750] ? __alloc_pages_slowpath+0x2930/0x2930 [ 970.664768] alloc_pages_current+0xec/0x1e0 [ 970.664778] ion_page_pool_alloc+0x11f/0x1c0 [ 970.664786] ion_system_heap_allocate+0x138/0x910 [ 970.664797] ? ion_system_heap_free+0x250/0x250 [ 970.675367] mems_allowed=0-1 [ 970.690089] syz-executor.0: [ 970.692263] ion_alloc+0x68c/0x860 [ 970.696387] page allocation failure: order:0 [ 970.701392] ? ion_dma_buf_release+0x50/0x50 [ 970.701404] ? kasan_check_write+0x14/0x20 [ 970.701415] ? _copy_from_user+0x99/0x110 [ 970.701425] ion_ioctl+0x105/0x217 [ 970.709012] 111*4kB [ 970.710119] ? ion_alloc.cold+0x40/0x40 [ 970.710132] ? ion_alloc.cold+0x40/0x40 [ 970.710141] do_vfs_ioctl+0x7ae/0x1060 [ 970.710151] ? selinux_file_mprotect+0x5d0/0x5d0 [ 970.710161] ? lock_downgrade+0x740/0x740 [ 970.714985] (U) [ 970.719638] ? ioctl_preallocate+0x1c0/0x1c0 [ 970.722808] net_ratelimit: 76 callbacks suppressed [ 970.722812] ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb [ 970.725745] ? __fget+0x237/0x370 [ 970.740058] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 970.742256] ? security_file_ioctl+0x7d/0xb0 [ 970.746389] (null) [ 970.749912] ? security_file_ioctl+0x89/0xb0 [ 970.749925] SyS_ioctl+0x8f/0xc0 [ 970.773312] 8*8kB [ 970.774825] ? do_vfs_ioctl+0x1060/0x1060 [ 970.779210] (UME) [ 970.784125] do_syscall_64+0x1e8/0x640 [ 970.784133] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 970.784148] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 970.784156] RIP: 0033:0x45af49 [ 970.793954] syz-executor.0 cpuset= [ 970.794066] RSP: 002b:00007f7f21a93c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 970.813306] syz0 [ 970.815401] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045af49 [ 970.817536] mems_allowed=0-1 [ 970.821746] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 970.821751] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 970.821755] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7f21a946d4 [ 970.821760] R13: 00000000004c41b2 R14: 00000000004da748 R15: 00000000ffffffff [ 970.843334] CPU: 1 PID: 7364 Comm: syz-executor.2 Not tainted 4.14.162-syzkaller #0 [ 970.863466] 9*16kB [ 970.864609] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 970.884016] (UME) [ 970.886410] Call Trace: [ 970.903350] 62*32kB [ 970.903681] dump_stack+0x142/0x197 [ 970.923623] warn_alloc.cold+0x96/0x1af [ 970.927585] ? zone_watermark_ok_safe+0x2b0/0x2b0 [ 970.932414] ? __alloc_pages_direct_compact+0xbc/0x380 [ 970.937686] __alloc_pages_slowpath+0x23c6/0x2930 [ 970.942640] ? save_trace+0x290/0x290 [ 970.943317] (UME) 3*64kB (ME) [ 970.946438] ? warn_alloc+0xf0/0xf0 [ 970.946455] ? __might_sleep+0x93/0xb0 [ 970.949639] 4*128kB (UME) [ 970.953255] __alloc_pages_nodemask+0x62c/0x7a0 [ 970.953264] ? lock_downgrade+0x740/0x740 [ 970.953273] ? __alloc_pages_slowpath+0x2930/0x2930 [ 970.953290] alloc_pages_current+0xec/0x1e0 [ 970.953302] ion_page_pool_alloc+0x11f/0x1c0 [ 970.953311] ion_system_heap_allocate+0x138/0x910 [ 970.953325] ? ion_system_heap_free+0x250/0x250 [ 970.990039] 12*256kB (UE) 18*512kB [ 970.992029] ion_alloc+0x68c/0x860 [ 970.992042] ? ion_dma_buf_release+0x50/0x50 [ 970.995649] (UE) [ 970.999177] ? kasan_check_write+0x14/0x20 [ 971.009819] ? _copy_from_user+0x99/0x110 [ 971.013950] ion_ioctl+0x105/0x217 [ 971.017471] ? ion_alloc.cold+0x40/0x40 [ 971.021437] ? ion_alloc.cold+0x40/0x40 [ 971.025398] do_vfs_ioctl+0x7ae/0x1060 [ 971.029268] ? selinux_file_mprotect+0x5d0/0x5d0 [ 971.034005] ? lock_downgrade+0x740/0x740 [ 971.038146] ? ioctl_preallocate+0x1c0/0x1c0 [ 971.042546] ? __fget+0x237/0x370 [ 971.046000] ? security_file_ioctl+0x7d/0xb0 [ 971.050057] 7*1024kB [ 971.050403] ? security_file_ioctl+0x89/0xb0 [ 971.050415] SyS_ioctl+0x8f/0xc0 [ 971.052806] (UME) [ 971.057196] ? do_vfs_ioctl+0x1060/0x1060 [ 971.066853] do_syscall_64+0x1e8/0x640 [ 971.070727] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 971.075560] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 971.080738] RIP: 0033:0x45af49 [ 971.083356] 2*2048kB [ 971.083917] RSP: 002b:00007fa8249eec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 971.086331] (M) [ 971.094018] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045af49 [ 971.094024] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 971.094028] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 971.094032] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fa8249ef6d4 [ 971.094037] R13: 00000000004c41b2 R14: 00000000004da748 R15: 00000000ffffffff [ 971.117338] warn_alloc_show_mem: 3 callbacks suppressed [ 971.117341] Mem-Info: [ 971.120793] CPU: 0 PID: 7393 Comm: syz-executor.0 Not tainted 4.14.162-syzkaller #0 [ 971.136613] active_anon:7233 inactive_anon:188 isolated_anon:0 [ 971.136613] active_file:18 inactive_file:15 isolated_file:0 [ 971.136613] unevictable:0 dirty:0 writeback:0 unstable:0 [ 971.136613] slab_reclaimable:11526 slab_unreclaimable:103026 [ 971.136613] mapped:2 shmem:242 pagetables:448 bounce:0 [ 971.136613] free:13903 free_pcp:0 free_cma:0 [ 971.137824] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 971.137828] Call Trace: [ 971.140259] Node 0 active_anon:28912kB inactive_anon:752kB active_file:64kB inactive_file:64kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:8kB dirty:0kB writeback:0kB shmem:968kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 971.148022] dump_stack+0x142/0x197 [ 971.180392] Node 1 active_anon:20kB inactive_anon:0kB active_file:8kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 971.189702] warn_alloc.cold+0x96/0x1af [ 971.205214] Node 0 [ 971.219098] ? zone_watermark_ok_safe+0x2b0/0x2b0 [ 971.219109] ? trace_hardirqs_on_caller+0x400/0x590 [ 971.219118] ? call_timer_fn+0x670/0x670 [ 971.238207] DMA free:10380kB min:216kB low:268kB high:320kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 971.248513] __alloc_pages_slowpath+0x23c6/0x2930 [ 971.248533] ? warn_alloc+0xf0/0xf0 [ 971.252528] lowmem_reserve[]: [ 971.254744] ? __might_sleep+0x93/0xb0 [ 971.259564] 0 [ 971.264584] __alloc_pages_nodemask+0x62c/0x7a0 [ 971.264595] ? lock_downgrade+0x740/0x740 [ 971.264606] ? __alloc_pages_slowpath+0x2930/0x2930 [ 971.268653] 2569 [ 971.294281] alloc_pages_current+0xec/0x1e0 [ 971.294294] ion_page_pool_alloc+0x11f/0x1c0 [ 971.294302] ion_system_heap_allocate+0x138/0x910 [ 971.294312] ? ion_alloc+0x19b/0x860 [ 971.299140] 2569 [ 971.302754] ? rcu_read_lock_sched_held+0x110/0x130 [ 971.302763] ? ion_system_heap_free+0x250/0x250 [ 971.302775] ion_alloc+0x222/0x860 [ 971.302788] ? ion_dma_buf_release+0x50/0x50 [ 971.305865] 2569 [ 971.309756] ? kasan_check_write+0x14/0x20 [ 971.311550] 2569 [ 971.316190] ? _copy_from_user+0x99/0x110 [ 971.325344] ion_ioctl+0x105/0x217 [ 971.327384] Node 0 [ 971.331702] ? ion_alloc.cold+0x40/0x40 [ 971.331715] ? ion_alloc.cold+0x40/0x40 [ 971.331724] do_vfs_ioctl+0x7ae/0x1060 [ 971.336124] DMA32 free:18092kB min:36380kB low:45472kB high:54564kB active_anon:28912kB inactive_anon:752kB active_file:64kB inactive_file:64kB unevictable:0kB writepending:0kB present:3129332kB managed:2634320kB mlocked:0kB kernel_stack:7264kB pagetables:1792kB bounce:0kB free_pcp:120kB local_pcp:120kB free_cma:0kB [ 971.340936] ? selinux_file_mprotect+0x5d0/0x5d0 [ 971.340944] ? lock_downgrade+0x740/0x740 [ 971.340954] ? ioctl_preallocate+0x1c0/0x1c0 [ 971.344642] lowmem_reserve[]: [ 971.346705] ? __fget+0x237/0x370 [ 971.351717] 0 [ 971.356362] ? security_file_ioctl+0x7d/0xb0 [ 971.359873] 0 [ 971.364264] ? security_file_ioctl+0x89/0xb0 [ 971.364275] SyS_ioctl+0x8f/0xc0 [ 971.364283] ? do_vfs_ioctl+0x1060/0x1060 [ 971.364293] do_syscall_64+0x1e8/0x640 [ 971.366329] 0 [ 971.370544] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 971.370558] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 971.370566] RIP: 0033:0x45af49 [ 971.372604] 0 0 [ 971.376738] RSP: 002b:00007f2399ab6c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 971.382479] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045af49 [ 971.386440] Node 0 [ 971.390391] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 971.390396] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 971.390401] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2399ab76d4 [ 971.390406] R13: 00000000004c41b2 R14: 00000000004da748 R15: 00000000ffffffff [ 971.393514] CPU: 0 PID: 7372 Comm: syz-executor.5 Not tainted 4.14.162-syzkaller #0 [ 971.394299] Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 971.422376] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 971.422379] Call Trace: [ 971.422394] dump_stack+0x142/0x197 [ 971.422407] warn_alloc.cold+0x96/0x1af [ 971.422414] ? zone_watermark_ok_safe+0x2b0/0x2b0 [ 971.422429] ? __alloc_pages_direct_compact+0xbc/0x380 [ 971.422441] __alloc_pages_slowpath+0x23c6/0x2930 [ 971.422457] ? save_trace+0x290/0x290 [ 971.422470] ? warn_alloc+0xf0/0xf0 [ 971.422488] ? __might_sleep+0x93/0xb0 [ 971.422498] __alloc_pages_nodemask+0x62c/0x7a0 [ 971.422507] ? lock_downgrade+0x740/0x740 [ 971.422516] ? __alloc_pages_slowpath+0x2930/0x2930 [ 971.422535] alloc_pages_current+0xec/0x1e0 [ 971.422546] ion_page_pool_alloc+0x11f/0x1c0 [ 971.422553] ion_system_heap_allocate+0x138/0x910 [ 971.422564] ? ion_system_heap_free+0x250/0x250 [ 971.422576] ion_alloc+0x68c/0x860 [ 971.422589] ? ion_dma_buf_release+0x50/0x50 [ 971.422602] ? kasan_check_write+0x14/0x20 [ 971.422616] ? _copy_from_user+0x99/0x110 [ 971.422626] ion_ioctl+0x105/0x217 [ 971.422635] ? ion_alloc.cold+0x40/0x40 [ 971.422649] ? ion_alloc.cold+0x40/0x40 [ 971.422657] do_vfs_ioctl+0x7ae/0x1060 [ 971.422667] ? selinux_file_mprotect+0x5d0/0x5d0 [ 971.422675] ? lock_downgrade+0x740/0x740 [ 971.422683] ? ioctl_preallocate+0x1c0/0x1c0 [ 971.422694] ? __fget+0x237/0x370 [ 971.422707] ? security_file_ioctl+0x7d/0xb0 [ 971.422714] ? security_file_ioctl+0x89/0xb0 [ 971.422724] SyS_ioctl+0x8f/0xc0 [ 971.422733] ? do_vfs_ioctl+0x1060/0x1060 [ 971.430049] syz-executor.2: [ 971.431620] do_syscall_64+0x1e8/0x640 [ 971.435996] page allocation failure: order:0 [ 971.439083] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 971.453847] lowmem_reserve[]: [ 971.454873] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 971.458234] 0 [ 971.462380] RIP: 0033:0x45af49 [ 971.462384] RSP: 002b:00007f7f21a51c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 971.462393] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045af49 [ 971.462397] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 971.462403] RBP: 000000000075c070 R08: 0000000000000000 R09: 0000000000000000 [ 971.470234] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 971.472886] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7f21a526d4 [ 971.478054] (null) [ 971.481224] R13: 00000000004c41b2 R14: 00000000004da748 R15: 00000000ffffffff [ 971.484652] 0*4096kB [ 971.506206] 0 [ 971.510501] = 26892kB [ 971.523730] 0 [ 971.532447] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 971.550768] syz-executor.2 cpuset= [ 971.565444] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 971.586679] 0 [ 971.622212] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 971.643464] syz2 [ 971.685988] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 971.704989] 0 [ 971.705334] syz-executor.5: [ 971.716152] page allocation failure: order:0 [ 971.728511] Node 1 [ 971.729891] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 971.738706] Normal free:26644kB min:53508kB low:66884kB high:80260kB active_anon:20kB inactive_anon:0kB active_file:8kB inactive_file:0kB unevictable:0kB writepending:0kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:32kB pagetables:0kB bounce:0kB free_pcp:120kB local_pcp:120kB free_cma:0kB [ 971.742645] syz-executor.2: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 971.742664] syz-executor.2 cpuset=syz2 mems_allowed=0-1 [ 971.742687] CPU: 0 PID: 7378 Comm: syz-executor.2 Not tainted 4.14.162-syzkaller #0 [ 971.756337] lowmem_reserve[]: [ 971.757215] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 971.766207] 0 [ 971.771557] Call Trace: [ 971.771587] dump_stack+0x142/0x197 [ 971.771600] warn_alloc.cold+0x96/0x1af [ 971.778855] mems_allowed=0-1 [ 971.780982] ? zone_watermark_ok_safe+0x2b0/0x2b0 [ 971.780992] ? trace_hardirqs_on_caller+0x400/0x590 [ 971.780999] ? call_timer_fn+0x670/0x670 [ 971.781016] __alloc_pages_slowpath+0x23c6/0x2930 [ 971.800031] 0 [ 971.805408] ? warn_alloc+0xf0/0xf0 [ 971.808914] 0 [ 971.817493] ? __might_sleep+0x93/0xb0 [ 971.817505] __alloc_pages_nodemask+0x62c/0x7a0 [ 971.830032] 0 [ 971.830056] ? lock_downgrade+0x740/0x740 [ 971.838601] 0 [ 971.840408] ? __alloc_pages_slowpath+0x2930/0x2930 [ 971.840426] alloc_pages_current+0xec/0x1e0 [ 971.840438] ion_page_pool_alloc+0x11f/0x1c0 [ 971.884248] ion_system_heap_allocate+0x138/0x910 [ 971.884263] ? ion_system_heap_free+0x250/0x250 [ 971.930061] Node 0 [ 971.933509] ion_alloc+0x68c/0x860 [ 971.936590] DMA: [ 971.941435] ? ion_dma_buf_release+0x50/0x50 [ 971.941450] ? kasan_check_write+0x14/0x20 [ 971.941463] ? _copy_from_user+0x99/0x110 [ 971.970048] 1*4kB [ 971.970995] ion_ioctl+0x105/0x217 [ 971.972780] (U) [ 971.976914] ? ion_alloc.cold+0x40/0x40 [ 971.978694] 1*8kB [ 971.983707] ? ion_alloc.cold+0x40/0x40 [ 971.983717] do_vfs_ioctl+0x7ae/0x1060 [ 971.983728] ? selinux_file_mprotect+0x5d0/0x5d0 [ 971.983738] ? lock_downgrade+0x740/0x740 [ 972.000034] (U) [ 972.001906] ? ioctl_preallocate+0x1c0/0x1c0 [ 972.004119] 0*16kB [ 972.007648] ? __fget+0x237/0x370 [ 972.009686] 0*32kB [ 972.014081] ? security_file_ioctl+0x7d/0xb0 [ 972.014088] ? security_file_ioctl+0x89/0xb0 [ 972.014099] SyS_ioctl+0x8f/0xc0 [ 972.040037] 0*64kB [ 972.040113] ? do_vfs_ioctl+0x1060/0x1060 [ 972.043995] 1*128kB [ 972.048739] do_syscall_64+0x1e8/0x640 [ 972.060063] (U) [ 972.061473] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 972.064904] 0*256kB [ 972.067132] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 972.100042] 0*512kB [ 972.100832] RIP: 0033:0x45af49 [ 972.106004] 0*1024kB 1*2048kB [ 972.108311] RSP: 002b:00007fa8249acc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 972.122377] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045af49 [ 972.129644] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 972.130057] (M) [ 972.136904] RBP: 000000000075c070 R08: 0000000000000000 R09: 0000000000000000 [ 972.136911] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fa8249ad6d4 [ 972.138878] 2*4096kB [ 972.146271] R13: 00000000004c41b2 R14: 00000000004da748 R15: 00000000ffffffff [ 972.161173] 275 total pagecache pages [ 972.167570] 0 pages in swap cache [ 972.180069] Swap cache stats: add 0, delete 0, find 0/0 [ 972.195907] Free swap = 0kB [ 972.208800] (null) [ 972.211008] syz-executor.5 cpuset=syz5 mems_allowed=0-1 [ 972.216385] CPU: 0 PID: 7372 Comm: syz-executor.5 Not tainted 4.14.162-syzkaller #0 [ 972.224174] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 972.233611] Call Trace: [ 972.236201] dump_stack+0x142/0x197 [ 972.239826] warn_alloc.cold+0x96/0x1af [ 972.243794] ? zone_watermark_ok_safe+0x2b0/0x2b0 [ 972.248742] ? trace_hardirqs_on_caller+0x400/0x590 [ 972.253760] ? call_timer_fn+0x670/0x670 [ 972.257829] __alloc_pages_slowpath+0x23c6/0x2930 [ 972.262685] ? warn_alloc+0xf0/0xf0 [ 972.266324] ? __might_sleep+0x93/0xb0 [ 972.270389] __alloc_pages_nodemask+0x62c/0x7a0 [ 972.275313] ? lock_downgrade+0x740/0x740 [ 972.279451] ? __alloc_pages_slowpath+0x2930/0x2930 [ 972.284475] alloc_pages_current+0xec/0x1e0 [ 972.288798] ion_page_pool_alloc+0x11f/0x1c0 [ 972.293205] ion_system_heap_allocate+0x138/0x910 [ 972.298069] ? ion_system_heap_free+0x250/0x250 [ 972.302739] ion_alloc+0x68c/0x860 [ 972.306284] ? ion_dma_buf_release+0x50/0x50 [ 972.310698] ? kasan_check_write+0x14/0x20 [ 972.314932] ? _copy_from_user+0x99/0x110 [ 972.319071] ion_ioctl+0x105/0x217 [ 972.322603] ? ion_alloc.cold+0x40/0x40 [ 972.326581] ? ion_alloc.cold+0x40/0x40 [ 972.330562] do_vfs_ioctl+0x7ae/0x1060 [ 972.334454] ? selinux_file_mprotect+0x5d0/0x5d0 [ 972.339211] ? lock_downgrade+0x740/0x740 [ 972.343484] ? ioctl_preallocate+0x1c0/0x1c0 [ 972.347902] ? __fget+0x237/0x370 [ 972.351369] ? security_file_ioctl+0x7d/0xb0 [ 972.355780] ? security_file_ioctl+0x89/0xb0 [ 972.360184] SyS_ioctl+0x8f/0xc0 [ 972.363542] ? do_vfs_ioctl+0x1060/0x1060 [ 972.367673] do_syscall_64+0x1e8/0x640 [ 972.371561] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 972.376407] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 972.381589] RIP: 0033:0x45af49 [ 972.384769] RSP: 002b:00007f7f21a51c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 972.392475] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045af49 [ 972.399743] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 972.400071] (M) [ 972.407003] RBP: 000000000075c070 R08: 0000000000000000 R09: 0000000000000000 [ 972.407009] = 10380kB [ 972.408964] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7f21a526d4 [ 972.425869] R13: 00000000004c41b2 R14: 00000000004da748 R15: 00000000ffffffff [ 972.446173] Total swap = 0kB [ 972.449225] 1965979 pages RAM [ 972.454283] 0 pages HighMem/MovableOnly [ 972.458281] 335874 pages reserved [ 972.479582] CPU: 1 PID: 7364 Comm: syz-executor.2 Not tainted 4.14.162-syzkaller #0 [ 972.479697] 0 pages cma reserved [ 972.487391] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 972.487394] Call Trace: [ 972.487411] dump_stack+0x142/0x197 [ 972.487424] warn_alloc.cold+0x96/0x1af [ 972.487432] ? zone_watermark_ok_safe+0x2b0/0x2b0 [ 972.502733] Out of memory: Kill process 7391 (syz-executor.1) score 1000 or sacrifice child [ 972.506332] ? trace_hardirqs_on_caller+0x400/0x590 [ 972.523284] Killed process 7392 (syz-executor.1) total-vm:38036kB, anon-rss:2172kB, file-rss:0kB, shmem-rss:0kB [ 972.523589] ? call_timer_fn+0x670/0x670 [ 972.542865] __alloc_pages_slowpath+0x23c6/0x2930 [ 972.547721] ? warn_alloc+0xf0/0xf0 [ 972.551353] ? __might_sleep+0x93/0xb0 [ 972.555248] __alloc_pages_nodemask+0x62c/0x7a0 [ 972.559916] ? lock_downgrade+0x740/0x740 [ 972.564067] ? __alloc_pages_slowpath+0x2930/0x2930 [ 972.569231] alloc_pages_current+0xec/0x1e0 [ 972.571270] oom_reaper: reaped process 7392 (syz-executor.1), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 972.573558] ion_page_pool_alloc+0x11f/0x1c0 [ 972.587844] ion_system_heap_allocate+0x138/0x910 [ 972.592688] ? ion_system_heap_free+0x250/0x250 [ 972.597359] ion_alloc+0x68c/0x860 [ 972.600903] ? ion_dma_buf_release+0x50/0x50 [ 972.605312] ? kasan_check_write+0x14/0x20 [ 972.609545] ? _copy_from_user+0x99/0x110 [ 972.613696] ion_ioctl+0x105/0x217 [ 972.615653] oom_reaper: reaped process 7403 (syz-executor.4), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 972.617230] ? ion_alloc.cold+0x40/0x40 [ 972.631070] ? ion_alloc.cold+0x40/0x40 [ 972.635042] do_vfs_ioctl+0x7ae/0x1060 [ 972.638934] ? selinux_file_mprotect+0x5d0/0x5d0 [ 972.643684] ? lock_downgrade+0x740/0x740 [ 972.647829] ? ioctl_preallocate+0x1c0/0x1c0 [ 972.652255] ? __fget+0x237/0x370 [ 972.655715] ? security_file_ioctl+0x7d/0xb0 [ 972.660142] ? security_file_ioctl+0x89/0xb0 [ 972.664552] SyS_ioctl+0x8f/0xc0 [ 972.667913] ? do_vfs_ioctl+0x1060/0x1060 [ 972.672058] do_syscall_64+0x1e8/0x640 [ 972.675941] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 972.680799] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 972.685981] RIP: 0033:0x45af49 [ 972.689162] RSP: 002b:00007fa8249eec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 972.691922] rs:main Q:Reg invoked oom-killer: gfp_mask=0x1c200ca(GFP_HIGHUSER_MOVABLE|__GFP_WRITE), nodemask= [ 972.696873] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045af49 [ 972.696880] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 972.721545] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 972.728809] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fa8249ef6d4 [ 972.736071] R13: 00000000004c41b2 R14: 00000000004da748 R15: 00000000ffffffff [ 972.737862] (null), order=0, oom_score_adj=0 [ 972.748380] Node 0 [ 972.749768] rs:main Q:Reg cpuset= [ 972.749770] DMA32: 269*4kB [ 972.752066] syz-executor.4: [ 972.755464] (UME) [ 972.758378] page allocation failure: order:0 [ 972.763597] syz-executor.1: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 972.776998] 226*8kB (UME) 80*16kB (UME) 29*32kB (UME) 7*64kB (UME) 3*128kB (ME) 1*256kB (M) 2*512kB (UM) 1*1024kB (M) 5*2048kB (UM) 0*4096kB = 18468kB [ 972.800293] / mems_allowed=0-1 [ 972.804042] CPU: 0 PID: 7026 Comm: rs:main Q:Reg Not tainted 4.14.162-syzkaller #0 [ 972.811753] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 972.820049] Node 0 [ 972.821097] Call Trace: [ 972.821114] dump_stack+0x142/0x197 [ 972.823332] Normal: 0*4kB [ 972.825910] dump_header+0x177/0x6cd [ 972.829510] 0*8kB [ 972.832340] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 972.832348] ? ___ratelimit+0x55/0x537 [ 972.832359] oom_kill_process.cold+0x10/0xadd [ 972.832368] ? oom_unkillable_task+0x294/0x390 [ 972.850049] 0*16kB [ 972.851660] ? lock_downgrade+0x740/0x740 [ 972.856219] 0*32kB [ 972.858447] out_of_memory+0x2ee/0x1180 [ 972.868845] ? lock_acquire+0x16f/0x430 [ 972.872828] ? oom_killer_disable+0x1d0/0x1d0 [ 972.877327] ? __alloc_pages_slowpath+0xca4/0x2930 [ 972.880053] 0*64kB 0*128kB [ 972.882271] __alloc_pages_slowpath+0x2251/0x2930 [ 972.882290] ? warn_alloc+0xf0/0xf0 [ 972.885206] 0*256kB [ 972.890037] ? __might_sleep+0x93/0xb0 [ 972.890047] __alloc_pages_nodemask+0x62c/0x7a0 [ 972.890056] ? find_get_entry+0x214/0x680 [ 972.900060] 0*512kB [ 972.904519] ? __alloc_pages_slowpath+0x2930/0x2930 [ 972.908644] 0*1024kB [ 972.910954] ? lock_downgrade+0x740/0x740 [ 972.910965] alloc_pages_current+0xec/0x1e0 [ 972.910976] __page_cache_alloc+0x248/0x3e0 [ 972.931117] pagecache_get_page+0x17c/0x9e0 [ 972.935440] grab_cache_page_write_begin+0x74/0xa0 [ 972.940067] 0*2048kB 0*4096kB [ 972.940364] ext4_da_write_begin+0x24c/0xea0 [ 972.940377] ? ext4_write_begin+0x1290/0x1290 [ 972.943569] = 0kB [ 972.947972] ? balance_dirty_pages_ratelimited+0x125/0x17f0 [ 972.947985] generic_perform_write+0x1f8/0x480 [ 972.952481] Node 1 [ 972.954510] ? page_endio+0x530/0x530 [ 972.960211] Normal: [ 972.964760] ? current_time+0xb0/0xb0 [ 972.966970] 36*4kB [ 972.970751] ? ext4_file_write_iter+0x1f4/0xe90 [ 972.970762] __generic_file_write_iter+0x239/0x5b0 [ 972.970774] ext4_file_write_iter+0x2ac/0xe90 [ 972.973074] (U) [ 972.976877] ? ext4_file_mmap+0x2c0/0x2c0 [ 972.979089] 32*8kB [ 972.983741] ? trace_hardirqs_on+0x10/0x10 [ 972.983750] ? save_trace+0x290/0x290 [ 972.983761] ? iov_iter_init+0xaf/0x1d0 [ 972.988666] (UME) [ 972.993159] __vfs_write+0x4a7/0x6b0 [ 972.993171] ? kernel_read+0x120/0x120 [ 972.993180] ? check_preemption_disabled+0x3c/0x250 [ 972.993193] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 972.995158] 8*16kB [ 972.999301] ? rcu_sync_lockdep_assert+0x6d/0xb0 [ 973.001550] (UME) [ 973.005759] ? __sb_start_write+0x153/0x2f0 [ 973.009537] 6*32kB [ 973.013496] vfs_write+0x198/0x500 [ 973.013506] SyS_write+0xfd/0x230 [ 973.013513] ? SyS_read+0x230/0x230 [ 973.013527] ? do_syscall_64+0x53/0x640 [ 973.013535] ? SyS_read+0x230/0x230 [ 973.013544] do_syscall_64+0x1e8/0x640 [ 973.015678] (UME) [ 973.019373] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 973.023256] 372*64kB [ 973.028245] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 973.033703] (UME) [ 973.035911] RIP: 0033:0x7f10eac4619d [ 973.040662] 188*128kB [ 973.042770] RSP: 002b:00007f10e91e7000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 973.047076] (UME) 162*256kB [ 973.049299] RAX: ffffffffffffffda RBX: 0000000000000231 RCX: 00007f10eac4619d [ 973.052841] (UE) [ 973.056251] RDX: 0000000000000231 RSI: 0000000001602a90 RDI: 0000000000000005 [ 973.056258] RBP: 0000000001602a90 R08: 0000000001602cb1 R09: 00007f10ea5c3157 [ 973.059860] 38*512kB (UE) [ 973.063835] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 973.063840] R13: 00007f10e91e7480 R14: 0000000000000020 R15: 0000000001602890 [ 973.065253] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 973.067478] 99*1024kB (UME) 2*2048kB (M) 0*4096kB = 214992kB [ 973.067500] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 973.067505] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 973.067511] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 973.067516] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 973.067519] 349 total pagecache pages [ 973.067529] 0 pages in swap cache [ 973.067533] Swap cache stats: add 0, delete 0, find 0/0 [ 973.067536] Free swap = 0kB [ 973.067542] Total swap = 0kB [ 973.071856] (null) [ 973.078179] 1965979 pages RAM [ 973.079057] syz-executor.4 cpuset= [ 973.081132] 0 pages HighMem/MovableOnly [ 973.081135] 335874 pages reserved [ 973.081138] 0 pages cma reserved [ 973.081158] syz-executor.1 cpuset=syz1 mems_allowed=0-1 [ 973.081177] CPU: 1 PID: 7399 Comm: syz-executor.1 Not tainted 4.14.162-syzkaller #0 [ 973.086703] syz4 [ 973.088485] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 973.092644] mems_allowed=0-1 [ 973.094661] Call Trace: [ 973.094676] dump_stack+0x142/0x197 [ 973.094689] warn_alloc.cold+0x96/0x1af [ 973.094697] ? zone_watermark_ok_safe+0x2b0/0x2b0 [ 973.094708] ? trace_hardirqs_on_caller+0x400/0x590 [ 973.094719] ? call_timer_fn+0x670/0x670 [ 973.200127] warn_alloc_show_mem: 4 callbacks suppressed [ 973.200130] Mem-Info: [ 973.201503] __alloc_pages_slowpath+0x23c6/0x2930 [ 973.206849] active_anon:6213 inactive_anon:188 isolated_anon:0 [ 973.206849] active_file:22 inactive_file:345 isolated_file:0 [ 973.206849] unevictable:0 dirty:0 writeback:0 unstable:0 [ 973.206849] slab_reclaimable:11534 slab_unreclaimable:103027 [ 973.206849] mapped:211 shmem:242 pagetables:440 bounce:0 [ 973.206849] free:99908 free_pcp:301 free_cma:0 [ 973.209874] ? warn_alloc+0xf0/0xf0 [ 973.230060] Node 0 active_anon:24852kB inactive_anon:752kB active_file:84kB inactive_file:1380kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:844kB dirty:0kB writeback:0kB shmem:968kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 4096kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 973.232342] ? __might_sleep+0x93/0xb0 [ 973.237687] Node 1 active_anon:0kB inactive_anon:0kB active_file:4kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 973.245459] __alloc_pages_nodemask+0x62c/0x7a0 [ 973.245476] ? lock_downgrade+0x740/0x740 [ 973.245485] ? __alloc_pages_slowpath+0x2930/0x2930 [ 973.245502] alloc_pages_current+0xec/0x1e0 [ 973.245513] ion_page_pool_alloc+0x11f/0x1c0 [ 973.260093] Node 0 [ 973.262476] ion_system_heap_allocate+0x138/0x910 [ 973.266124] DMA free:12236kB min:216kB low:268kB high:320kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 973.270090] ? ion_alloc+0x19b/0x860 [ 973.270102] ? rcu_read_lock_sched_held+0x110/0x130 [ 973.270111] ? ion_system_heap_free+0x250/0x250 [ 973.270123] ion_alloc+0x222/0x860 [ 973.270136] ? ion_dma_buf_release+0x50/0x50 [ 973.290079] lowmem_reserve[]: [ 973.291785] ? kasan_check_write+0x14/0x20 [ 973.296701] 0 [ 973.329416] ? _copy_from_user+0x99/0x110 [ 973.329429] ion_ioctl+0x105/0x217 [ 973.329438] ? ion_alloc.cold+0x40/0x40 [ 973.329449] ? ion_alloc.cold+0x40/0x40 [ 973.329458] do_vfs_ioctl+0x7ae/0x1060 [ 973.329474] ? selinux_file_mprotect+0x5d0/0x5d0 [ 973.329483] ? lock_downgrade+0x740/0x740 [ 973.329491] ? ioctl_preallocate+0x1c0/0x1c0 [ 973.329500] ? __fget+0x237/0x370 [ 973.329516] ? security_file_ioctl+0x7d/0xb0 [ 973.380084] 2569 [ 973.389834] ? security_file_ioctl+0x89/0xb0 [ 973.410087] 2569 [ 973.412316] SyS_ioctl+0x8f/0xc0 [ 973.414528] 2569 [ 973.419367] ? do_vfs_ioctl+0x1060/0x1060 [ 973.480060] 2569 [ 973.482835] do_syscall_64+0x1e8/0x640 [ 973.490737] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 973.490751] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 973.490757] RIP: 0033:0x45af49 [ 973.490763] RSP: 002b:00007f34ee4c3c78 EFLAGS: 00000246 [ 973.500355] Mem-Info: [ 973.503494] ORIG_RAX: 0000000000000010 [ 973.503501] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045af49 [ 973.507899] active_anon:6213 inactive_anon:188 isolated_anon:0 [ 973.507899] active_file:22 inactive_file:345 isolated_file:0 [ 973.507899] unevictable:0 dirty:0 writeback:0 unstable:0 [ 973.507899] slab_reclaimable:11534 slab_unreclaimable:103027 [ 973.507899] mapped:211 shmem:242 pagetables:440 bounce:0 [ 973.507899] free:99908 free_pcp:294 free_cma:0 [ 973.511329] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 973.511334] RBP: 000000000075c070 R08: 0000000000000000 R09: 0000000000000000 [ 973.511338] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f34ee4c46d4 [ 973.511342] R13: 00000000004c41b2 R14: 00000000004da748 R15: 00000000ffffffff [ 973.518794] CPU: 1 PID: 7396 Comm: syz-executor.4 Not tainted 4.14.162-syzkaller #0 [ 973.523320] Node 0 [ 973.524401] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 973.527760] DMA32 free:171840kB min:36380kB low:45472kB high:54564kB active_anon:24852kB inactive_anon:752kB active_file:84kB inactive_file:1580kB unevictable:0kB writepending:0kB present:3129332kB managed:2634320kB mlocked:0kB kernel_stack:7264kB pagetables:1760kB bounce:0kB free_pcp:1264kB local_pcp:348kB free_cma:0kB [ 973.529793] Call Trace: [ 973.534490] lowmem_reserve[]: [ 973.535974] dump_stack+0x142/0x197 [ 973.539825] 0 [ 973.544656] warn_alloc.cold+0x96/0x1af [ 973.544664] ? zone_watermark_ok_safe+0x2b0/0x2b0 [ 973.544675] ? trace_hardirqs_on_caller+0x400/0x590 [ 973.544684] ? call_timer_fn+0x670/0x670 [ 973.544699] __alloc_pages_slowpath+0x23c6/0x2930 [ 973.544720] ? warn_alloc+0xf0/0xf0 [ 973.550274] Node 0 active_anon:24852kB inactive_anon:752kB active_file:84kB inactive_file:1580kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:844kB dirty:0kB writeback:0kB shmem:968kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 4096kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 973.553154] ? __might_sleep+0x93/0xb0 [ 973.558494] Node 1 active_anon:0kB inactive_anon:0kB active_file:4kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 973.560880] __alloc_pages_nodemask+0x62c/0x7a0 [ 973.560890] ? lock_downgrade+0x740/0x740 [ 973.560899] ? __alloc_pages_slowpath+0x2930/0x2930 [ 973.560917] alloc_pages_current+0xec/0x1e0 [ 973.560928] ion_page_pool_alloc+0x11f/0x1c0 [ 973.565060] 0 [ 973.572131] ion_system_heap_allocate+0x138/0x910 [ 973.572139] ? ion_alloc+0x19b/0x860 [ 973.572148] ? rcu_read_lock_sched_held+0x110/0x130 [ 973.572157] ? ion_system_heap_free+0x250/0x250 [ 973.572176] ion_alloc+0x222/0x860 [ 973.605782] Node 0 [ 973.612401] ? ion_dma_buf_release+0x50/0x50 [ 973.612419] ? kasan_check_write+0x14/0x20 [ 973.612430] ? _copy_from_user+0x99/0x110 [ 973.612441] ion_ioctl+0x105/0x217 [ 973.620061] DMA free:12236kB min:216kB low:268kB high:320kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 973.626968] ? ion_alloc.cold+0x40/0x40 [ 973.634398] lowmem_reserve[]: [ 973.642025] ? ion_alloc.cold+0x40/0x40 [ 973.642037] do_vfs_ioctl+0x7ae/0x1060 [ 973.642048] ? selinux_file_mprotect+0x5d0/0x5d0 [ 973.642059] ? lock_downgrade+0x740/0x740 [ 973.644288] 0 [ 973.653618] ? ioctl_preallocate+0x1c0/0x1c0 [ 973.653629] ? __fget+0x237/0x370 [ 973.653642] ? security_file_ioctl+0x7d/0xb0 [ 973.653649] ? security_file_ioctl+0x89/0xb0 [ 973.653659] SyS_ioctl+0x8f/0xc0 [ 973.653670] ? do_vfs_ioctl+0x1060/0x1060 [ 973.682543] 0 [ 973.684706] do_syscall_64+0x1e8/0x640 [ 973.687779] 2569 [ 973.691386] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 973.691401] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 973.691408] RIP: 0033:0x45af49 [ 973.691412] RSP: 002b:00007f361d0eac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 973.691422] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045af49 [ 973.693215] 2569 [ 973.697165] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 973.697172] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 973.702273] 2569 [ 973.706988] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f361d0eb6d4 [ 973.706994] R13: 00000000004c41b2 R14: 00000000004da748 R15: 00000000ffffffff [ 973.711080] 2569 [ 973.990802] 0 0 [ 973.994848] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 974.030138] lowmem_reserve[]: 0 0 0 0 0 [ 974.034592] Node 1 Normal free:912336kB min:53508kB low:66884kB high:80260kB active_anon:0kB inactive_anon:0kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:32kB pagetables:0kB bounce:0kB free_pcp:260kB local_pcp:140kB free_cma:0kB [ 974.063586] lowmem_reserve[]: 0 0 0 0 0 [ 974.067622] Node 0 DMA: 1*4kB (U) 1*8kB (U) 0*16kB 0*32kB 5*64kB (U) 2*128kB (U) 0*256kB 1*512kB (U) 1*1024kB (U) 1*2048kB (M) 2*4096kB (M) = 12364kB [ 974.081999] Node 0 DMA32: 192*4kB (UME) 359*8kB (UME) 63*16kB (UME) 32*32kB (UME) 599*64kB (UME) 79*128kB (UME) 62*256kB (UM) 31*512kB (UM) 147*1024kB (UM) 21*2048kB (UM) 1*4096kB (U) = 283496kB [ 974.099594] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 974.111110] Node 1 Normal: 36*4kB (U) 32*8kB (UME) 8*16kB (UME) 6*32kB (UME) 405*64kB (UME) 188*128kB (UME) 163*256kB (UE) 46*512kB (UE) 728*1024kB (UME) 97*2048kB (UM) 0*4096kB = 1060112kB [ 974.128264] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 974.137230] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 974.145837] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 974.160193] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 974.168782] 785 total pagecache pages [ 974.200131] 0 pages in swap cache [ 974.203606] Swap cache stats: add 0, delete 0, find 0/0 [ 974.230054] Free swap = 0kB [ 974.233103] Total swap = 0kB [ 974.236113] 1965979 pages RAM [ 974.239212] 0 pages HighMem/MovableOnly [ 974.260113] Node 0 DMA32 free:323752kB min:36380kB low:45472kB high:54564kB active_anon:24944kB inactive_anon:752kB active_file:384kB inactive_file:1552kB unevictable:0kB writepending:0kB present:3129332kB managed:2634320kB mlocked:0kB kernel_stack:7232kB pagetables:1760kB bounce:0kB free_pcp:896kB local_pcp:632kB free_cma:0kB [ 974.261793] 335874 pages reserved [ 974.289432] lowmem_reserve[]: 0 0 0 [ 974.330073] 0 pages cma reserved [ 974.333834] 0 0 [ 974.339055] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 974.444298] lowmem_reserve[]: 0 0 0 0 0 [ 974.448339] Node 1 Normal free:1207616kB min:53508kB low:66884kB high:80260kB active_anon:0kB inactive_anon:0kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:32kB pagetables:0kB bounce:0kB free_pcp:1184kB local_pcp:504kB free_cma:0kB [ 974.570074] lowmem_reserve[]: 0 0 0 0 0 [ 974.574124] Node 0 DMA: 5*4kB (U) 1*8kB (U) 0*16kB 0*32kB 5*64kB (U) 2*128kB (U) 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (M) = 11356kB [ 974.620087] Node 0 DMA32: 8032*4kB (UME) 598*8kB (UME) 355*16kB (UME) 219*32kB (UME) 642*64kB (UME) 99*128kB (UME) 74*256kB (U) 45*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 145344kB [ 974.636453] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 974.647457] Node 1 Normal: 5522*4kB (UM) 139*8kB (UME) 13*16kB (UE) 12*32kB (UME) 232*64kB (UME) 185*128kB (UME) 165*256kB (UME) 54*512kB (UE) 379*1024kB (UME) 138*2048kB (UM) 6*4096kB (U) = 827504kB [ 974.700123] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 974.720055] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 974.730288] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 974.739407] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 974.800072] 760 total pagecache pages [ 974.803910] 0 pages in swap cache [ 974.807367] Swap cache stats: add 0, delete 0, find 0/0 [ 974.850079] Free swap = 0kB [ 974.853142] Total swap = 0kB [ 974.856161] 1965979 pages RAM [ 974.859258] 0 pages HighMem/MovableOnly [ 974.912948] 335874 pages reserved [ 974.916466] 0 pages cma reserved [ 974.919841] Out of memory: Kill process 7176 (syz-execprog) score 1 or sacrifice child [ 974.990177] Killed process 7190 (syz-executor.2) total-vm:37644kB, anon-rss:60kB, file-rss:0kB, shmem-rss:0kB [ 975.043287] syz-executor.3 invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=0, oom_score_adj=0 [ 975.076606] syz-executor.3 cpuset=syz3 mems_allowed=0-1 [ 975.086528] CPU: 0 PID: 7197 Comm: syz-executor.3 Not tainted 4.14.162-syzkaller #0 [ 975.094330] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 975.103678] Call Trace: [ 975.106251] dump_stack+0x142/0x197 [ 975.109899] dump_header+0x177/0x6cd [ 975.113594] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 975.118700] ? ___ratelimit+0x55/0x537 [ 975.122603] oom_kill_process.cold+0x10/0xadd [ 975.127087] ? oom_unkillable_task+0x294/0x390 [ 975.131662] ? lock_downgrade+0x740/0x740 [ 975.135792] out_of_memory+0x2ee/0x1180 [ 975.139742] ? lock_acquire+0x16f/0x430 [ 975.143712] ? oom_killer_disable+0x1d0/0x1d0 [ 975.148197] ? __alloc_pages_slowpath+0xca4/0x2930 [ 975.153540] __alloc_pages_slowpath+0x2251/0x2930 [ 975.158376] ? warn_alloc+0xf0/0xf0 [ 975.161996] ? __might_sleep+0x93/0xb0 [ 975.165876] __alloc_pages_nodemask+0x62c/0x7a0 [ 975.170528] ? __alloc_pages_slowpath+0x2930/0x2930 [ 975.175527] ? cache_grow_begin+0x335/0x400 [ 975.179832] cache_grow_begin+0x80/0x400 [ 975.183954] ? __cpuset_node_allowed+0xff/0x450 [ 975.188605] fallback_alloc+0x1fd/0x2c0 [ 975.192573] ____cache_alloc_node+0x1be/0x1d0 [ 975.197046] kmem_cache_alloc_node+0xe3/0x780 [ 975.201571] __alloc_skb+0x9c/0x500 [ 975.205179] ? skb_trim+0x180/0x180 [ 975.208808] ? if_nlmsg_size+0x38f/0x810 [ 975.212850] rtmsg_ifinfo_build_skb+0x72/0x140 [ 975.217426] rtmsg_ifinfo_event.part.0+0x35/0xc0 [ 975.222162] rtmsg_ifinfo+0x6f/0x90 [ 975.225793] dev_close_many+0x2b5/0x5f0 [ 975.229744] ? netdev_master_upper_dev_link+0x40/0x40 [ 975.234923] ? do_raw_spin_unlock+0x16b/0x260 [ 975.239406] rollback_registered_many+0x379/0xb60 [ 975.244225] ? netdev_info+0xf0/0xf0 [ 975.247980] ? queue_delayed_work_on+0xc3/0x1e0 [ 975.252650] ? trace_hardirqs_on_caller+0x400/0x590 [ 975.257651] rollback_registered+0xdd/0x180 [ 975.261955] ? rollback_registered_many+0xb60/0xb60 [ 975.267027] ? linkwatch_schedule_work+0xf8/0x130 [ 975.271896] unregister_netdevice_queue+0x1ae/0x230 [ 975.276986] __tun_detach+0xa8c/0xce0 [ 975.280827] ? fsnotify+0x11e0/0x11e0 [ 975.284654] ? locks_remove_file+0x2d0/0x420 [ 975.289052] ? __tun_detach+0xce0/0xce0 [ 975.293003] tun_chr_close+0x46/0x60 [ 975.296696] __fput+0x275/0x7a0 [ 975.299963] ____fput+0x16/0x20 [ 975.303232] task_work_run+0x114/0x190 [ 975.307136] do_exit+0x7be/0x2c80 [ 975.310569] ? rw_verify_area+0xea/0x2b0 [ 975.314622] ? mm_update_next_owner+0x5d0/0x5d0 [ 975.319273] ? vfs_write+0x104/0x500 [ 975.322981] ? SyS_write+0x15e/0x230 [ 975.326692] do_group_exit+0x111/0x330 [ 975.330566] SyS_exit_group+0x1d/0x20 [ 975.334393] ? do_group_exit+0x330/0x330 [ 975.338438] do_syscall_64+0x1e8/0x640 [ 975.342306] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 975.347132] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 975.352303] RIP: 0033:0x45af49 [ 975.355512] RSP: 002b:00007ffe2ca01c48 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 975.363201] RAX: ffffffffffffffda RBX: 000000000000000c RCX: 000000000045af49 [ 975.370449] RDX: 0000000000414a00 RSI: 0000000000a770d0 RDI: 0000000000000043 [ 975.377700] RBP: 00000000004c0a04 R08: 000000000000000c R09: 0000000000000000 [ 975.384950] R10: 0000000000c5b940 R11: 0000000000000246 R12: 0000000000000001 [ 975.392197] R13: 00007ffe2ca01d90 R14: 0000000000000000 R15: 00007ffe2ca01da0 [ 975.401661] warn_alloc: 3 callbacks suppressed [ 975.401665] syz-executor.0: [ 975.404764] Mem-Info: [ 975.406255] page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 975.409274] active_anon:6211 inactive_anon:188 isolated_anon:0 [ 975.409274] active_file:17 inactive_file:16 isolated_file:0 [ 975.409274] unevictable:0 dirty:0 writeback:0 unstable:0 [ 975.409274] slab_reclaimable:11532 slab_unreclaimable:102625 [ 975.409274] mapped:2 shmem:242 pagetables:418 bounce:0 [ 975.409274] free:13833 free_pcp:144 free_cma:0 [ 975.411694] syz-executor.1: [ 975.425223] Node 0 active_anon:24844kB inactive_anon:752kB active_file:64kB inactive_file:64kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:8kB dirty:0kB writeback:0kB shmem:968kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 4096kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 975.455785] syz-executor.4: [ 975.460995] Node 1 active_anon:0kB inactive_anon:0kB active_file:4kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 975.484585] syz-executor.4: [ 975.490772] Node 0 [ 975.522233] syz-executor.1: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 975.535917] page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 975.539975] DMA free:10380kB min:216kB low:268kB high:320kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 975.547440] syz-executor.5: [ 975.573482] (null) [ 975.578640] syz-executor.0 cpuset=syz0 mems_allowed=0-1 [ 975.584055] syz-executor.1 cpuset=syz1 mems_allowed=0-1 [ 975.586512] syz-executor.4 cpuset= [ 975.589422] CPU: 0 PID: 7399 Comm: syz-executor.1 Not tainted 4.14.162-syzkaller #0 [ 975.589430] syz4 mems_allowed=0-1 [ 975.592951] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 975.592955] Call Trace: [ 975.592970] dump_stack+0x142/0x197 [ 975.592982] warn_alloc.cold+0x96/0x1af [ 975.592990] ? zone_watermark_ok_safe+0x2b0/0x2b0 [ 975.593005] ? __alloc_pages_direct_compact+0xbc/0x380 [ 975.593017] __alloc_pages_slowpath+0x23c6/0x2930 [ 975.600826] page allocation failure: order:0 [ 975.604246] ? save_trace+0x290/0x290 [ 975.630038] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 975.633786] ? warn_alloc+0xf0/0xf0 [ 975.638609] (null) [ 975.643031] ? __might_sleep+0x93/0xb0 [ 975.643040] __alloc_pages_nodemask+0x62c/0x7a0 [ 975.643050] ? lock_downgrade+0x740/0x740 [ 975.660034] syz-executor.5 cpuset= [ 975.663582] ? __alloc_pages_slowpath+0x2930/0x2930 [ 975.668230] syz5 [ 975.672371] alloc_pages_current+0xec/0x1e0 [ 975.687669] ion_page_pool_alloc+0x11f/0x1c0 [ 975.690068] mems_allowed=0-1 [ 975.692151] ion_system_heap_allocate+0x138/0x910 [ 975.700066] ? ion_system_heap_free+0x250/0x250 [ 975.704720] ion_alloc+0x68c/0x860 [ 975.708248] ? ion_dma_buf_release+0x50/0x50 [ 975.712644] ? kasan_check_write+0x14/0x20 [ 975.717731] ? _copy_from_user+0x99/0x110 [ 975.721866] ion_ioctl+0x105/0x217 [ 975.725394] ? ion_alloc.cold+0x40/0x40 [ 975.729355] ? ion_alloc.cold+0x40/0x40 [ 975.733319] do_vfs_ioctl+0x7ae/0x1060 [ 975.737190] ? selinux_file_mprotect+0x5d0/0x5d0 [ 975.741935] ? lock_downgrade+0x740/0x740 [ 975.746063] ? ioctl_preallocate+0x1c0/0x1c0 [ 975.750462] ? __fget+0x237/0x370 [ 975.753901] ? security_file_ioctl+0x7d/0xb0 [ 975.758291] ? security_file_ioctl+0x89/0xb0 [ 975.762688] SyS_ioctl+0x8f/0xc0 [ 975.766059] ? do_vfs_ioctl+0x1060/0x1060 [ 975.770200] do_syscall_64+0x1e8/0x640 [ 975.774086] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 975.778932] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 975.784105] RIP: 0033:0x45af49 [ 975.787276] RSP: 002b:00007f34ee4c3c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 975.794968] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045af49 [ 975.802220] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 975.809480] RBP: 000000000075c070 R08: 0000000000000000 R09: 0000000000000000 [ 975.816731] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f34ee4c46d4 [ 975.823981] R13: 00000000004c41b2 R14: 00000000004da748 R15: 00000000ffffffff [ 975.831256] CPU: 1 PID: 7348 Comm: syz-executor.5 Not tainted 4.14.162-syzkaller #0 [ 975.839062] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 975.840065] page allocation failure: order:0 [ 975.848398] Call Trace: [ 975.848406] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 975.852800] dump_stack+0x142/0x197 [ 975.852821] warn_alloc.cold+0x96/0x1af [ 975.870008] ? zone_watermark_ok_safe+0x2b0/0x2b0 [ 975.870040] lowmem_reserve[]: 0 [ 975.874842] ? call_timer_fn+0x670/0x670 [ 975.874858] __alloc_pages_slowpath+0x23c6/0x2930 [ 975.878105] 2569 [ 975.882159] ? warn_alloc+0xf0/0xf0 [ 975.882176] ? __might_sleep+0x93/0xb0 [ 975.882186] __alloc_pages_nodemask+0x62c/0x7a0 [ 975.887007] page allocation failure: order:0 [ 975.889049] ? lock_downgrade+0x740/0x740 [ 975.900035] (null) [ 975.901158] ? __alloc_pages_slowpath+0x2930/0x2930 [ 975.905538] syz-executor.4 cpuset= [ 975.909674] alloc_pages_current+0xec/0x1e0 [ 975.911824] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 975.916797] ion_page_pool_alloc+0x11f/0x1c0 [ 975.930043] 2569 [ 975.931695] ion_system_heap_allocate+0x138/0x910 [ 975.936079] 2569 [ 975.938166] ? ion_system_heap_free+0x250/0x250 [ 975.943018] syz4 [ 975.945032] ion_alloc+0x68c/0x860 [ 975.949674] mems_allowed=0-1 [ 975.951644] ? ion_dma_buf_release+0x50/0x50 [ 975.951658] ? kasan_check_write+0x14/0x20 [ 975.951669] ? _copy_from_user+0x99/0x110 [ 975.955185] (null) [ 975.959924] ion_ioctl+0x105/0x217 [ 975.978307] ? ion_alloc.cold+0x40/0x40 [ 975.980039] syz-executor.1 cpuset=syz1 [ 975.982268] ? ion_alloc.cold+0x40/0x40 [ 975.982278] do_vfs_ioctl+0x7ae/0x1060 [ 975.986150] mems_allowed=0-1 [ 975.990108] ? selinux_file_mprotect+0x5d0/0x5d0 [ 975.990117] ? lock_downgrade+0x740/0x740 [ 975.990125] ? ioctl_preallocate+0x1c0/0x1c0 [ 975.990136] ? __fget+0x237/0x370 [ 975.990151] ? security_file_ioctl+0x7d/0xb0 [ 976.000038] 2569 [ 976.001825] ? security_file_ioctl+0x89/0xb0 [ 976.010335] SyS_ioctl+0x8f/0xc0 [ 976.010344] ? do_vfs_ioctl+0x1060/0x1060 [ 976.010354] do_syscall_64+0x1e8/0x640 [ 976.010362] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 976.040773] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 976.045952] RIP: 0033:0x45af49 [ 976.049135] RSP: 002b:00007f7f21a93c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 976.050087] Node 0 [ 976.056834] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045af49 [ 976.056841] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 976.059073] DMA32 free:17596kB min:36380kB low:45472kB high:54564kB active_anon:24844kB inactive_anon:752kB active_file:64kB inactive_file:64kB unevictable:0kB writepending:0kB present:3129332kB managed:2634320kB mlocked:0kB kernel_stack:7136kB pagetables:1672kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 976.066320] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 976.066326] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7f21a946d4 [ 976.066330] R13: 00000000004c41b2 R14: 00000000004da748 R15: 00000000ffffffff [ 976.082875] CPU: 1 PID: 7403 Comm: syz-executor.4 Not tainted 4.14.162-syzkaller #0 [ 976.130987] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 976.140348] Call Trace: [ 976.142928] dump_stack+0x142/0x197 [ 976.146555] warn_alloc.cold+0x96/0x1af [ 976.150521] ? zone_watermark_ok_safe+0x2b0/0x2b0 [ 976.155370] ? __alloc_pages_direct_compact+0xbc/0x380 [ 976.160647] __alloc_pages_slowpath+0x23c6/0x2930 [ 976.165488] ? save_trace+0x290/0x290 [ 976.169302] ? warn_alloc+0xf0/0xf0 [ 976.172924] ? __might_sleep+0x93/0xb0 [ 976.176797] __alloc_pages_nodemask+0x62c/0x7a0 [ 976.181450] ? lock_downgrade+0x740/0x740 [ 976.185602] ? __alloc_pages_slowpath+0x2930/0x2930 [ 976.190620] alloc_pages_current+0xec/0x1e0 [ 976.194932] ion_page_pool_alloc+0x11f/0x1c0 [ 976.199323] ion_system_heap_allocate+0x138/0x910 [ 976.204165] ? ion_system_heap_free+0x250/0x250 [ 976.208824] ion_alloc+0x68c/0x860 [ 976.210053] lowmem_reserve[]: 0 0 0 [ 976.212373] ? ion_dma_buf_release+0x50/0x50 [ 976.212386] ? kasan_check_write+0x14/0x20 [ 976.215997] 0 [ 976.220402] ? _copy_from_user+0x99/0x110 [ 976.220412] ion_ioctl+0x105/0x217 [ 976.220420] ? ion_alloc.cold+0x40/0x40 [ 976.220433] ? ion_alloc.cold+0x40/0x40 [ 976.220444] do_vfs_ioctl+0x7ae/0x1060 [ 976.245849] ? selinux_file_mprotect+0x5d0/0x5d0 [ 976.250075] 0 [ 976.250593] ? lock_downgrade+0x740/0x740 [ 976.252385] ? ioctl_preallocate+0x1c0/0x1c0 [ 976.256512] Node 0 [ 976.260905] ? __fget+0x237/0x370 [ 976.260920] ? security_file_ioctl+0x7d/0xb0 [ 976.260927] ? security_file_ioctl+0x89/0xb0 [ 976.260938] SyS_ioctl+0x8f/0xc0 [ 976.278791] ? do_vfs_ioctl+0x1060/0x1060 [ 976.282925] do_syscall_64+0x1e8/0x640 [ 976.286795] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 976.290059] Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 976.291629] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 976.321497] RIP: 0033:0x45af49 [ 976.324669] RSP: 002b:00007f361d0a8c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 976.332357] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045af49 [ 976.339607] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 976.346855] RBP: 000000000075c070 R08: 0000000000000000 R09: 0000000000000000 [ 976.354103] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f361d0a96d4 [ 976.360602] lowmem_reserve[]: [ 976.361364] R13: 00000000004c41b2 R14: 00000000004da748 R15: 00000000ffffffff [ 976.371778] CPU: 0 PID: 7393 Comm: syz-executor.0 Not tainted 4.14.162-syzkaller #0 [ 976.379571] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 976.388923] Call Trace: [ 976.391499] dump_stack+0x142/0x197 [ 976.395110] warn_alloc.cold+0x96/0x1af [ 976.399067] ? zone_watermark_ok_safe+0x2b0/0x2b0 [ 976.403891] ? trace_hardirqs_on_caller+0x400/0x590 [ 976.408888] ? call_timer_fn+0x670/0x670 [ 976.412938] __alloc_pages_slowpath+0x23c6/0x2930 [ 976.417772] ? warn_alloc+0xf0/0xf0 [ 976.421394] ? __might_sleep+0x93/0xb0 [ 976.425276] __alloc_pages_nodemask+0x62c/0x7a0 [ 976.429937] ? lock_downgrade+0x740/0x740 [ 976.434087] ? __alloc_pages_slowpath+0x2930/0x2930 [ 976.439095] alloc_pages_current+0xec/0x1e0 [ 976.443405] ion_page_pool_alloc+0x11f/0x1c0 [ 976.447797] ion_system_heap_allocate+0x138/0x910 [ 976.452624] ? ion_system_heap_free+0x250/0x250 [ 976.457282] ion_alloc+0x68c/0x860 [ 976.460809] ? ion_dma_buf_release+0x50/0x50 [ 976.465206] ? kasan_check_write+0x14/0x20 [ 976.469423] ? _copy_from_user+0x99/0x110 [ 976.473553] ion_ioctl+0x105/0x217 [ 976.477075] ? ion_alloc.cold+0x40/0x40 [ 976.481033] ? ion_alloc.cold+0x40/0x40 [ 976.484986] do_vfs_ioctl+0x7ae/0x1060 [ 976.488853] ? selinux_file_mprotect+0x5d0/0x5d0 [ 976.493591] ? lock_downgrade+0x740/0x740 [ 976.497726] ? ioctl_preallocate+0x1c0/0x1c0 [ 976.502118] ? __fget+0x237/0x370 [ 976.505555] ? security_file_ioctl+0x7d/0xb0 [ 976.509945] ? security_file_ioctl+0x89/0xb0 [ 976.514335] SyS_ioctl+0x8f/0xc0 [ 976.517681] ? do_vfs_ioctl+0x1060/0x1060 [ 976.521898] do_syscall_64+0x1e8/0x640 [ 976.525765] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 976.530592] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 976.535761] RIP: 0033:0x45af49 [ 976.538930] RSP: 002b:00007f2399ab6c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 976.546619] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045af49 [ 976.553869] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 976.561119] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 976.568369] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2399ab76d4 [ 976.575618] R13: 00000000004c41b2 R14: 00000000004da748 R15: 00000000ffffffff [ 976.582884] CPU: 1 PID: 7392 Comm: syz-executor.1 Not tainted 4.14.162-syzkaller #0 [ 976.583925] 0 [ 976.590678] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 976.590681] Call Trace: [ 976.590695] dump_stack+0x142/0x197 [ 976.590708] warn_alloc.cold+0x96/0x1af [ 976.590717] ? zone_watermark_ok_safe+0x2b0/0x2b0 [ 976.610064] 0 [ 976.612396] ? trace_hardirqs_on_caller+0x400/0x590 [ 976.617209] 0 [ 976.619006] ? call_timer_fn+0x670/0x670 [ 976.629845] __alloc_pages_slowpath+0x23c6/0x2930 [ 976.630040] 0 0 [ 976.634688] ? warn_alloc+0xf0/0xf0 [ 976.636642] Node 1 [ 976.640266] ? __might_sleep+0x93/0xb0 [ 976.640276] __alloc_pages_nodemask+0x62c/0x7a0 [ 976.640285] ? lock_downgrade+0x740/0x740 [ 976.640294] ? __alloc_pages_slowpath+0x2930/0x2930 [ 976.660055] Normal free:26728kB min:53508kB low:66884kB high:80260kB active_anon:0kB inactive_anon:0kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:32kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 976.660140] alloc_pages_current+0xec/0x1e0 [ 976.691426] ion_page_pool_alloc+0x11f/0x1c0 [ 976.695827] ion_system_heap_allocate+0x138/0x910 [ 976.700656] ? ion_alloc+0x19b/0x860 [ 976.704354] ? rcu_read_lock_sched_held+0x110/0x130 [ 976.709353] ? ion_system_heap_free+0x250/0x250 [ 976.710616] lowmem_reserve[]: 0 [ 976.714008] ion_alloc+0x222/0x860 [ 976.714013] 0 [ 976.717275] ? ion_dma_buf_release+0x50/0x50 [ 976.726962] ? kasan_check_write+0x14/0x20 [ 976.730051] warn_alloc_show_mem: 4 callbacks suppressed [ 976.730053] Mem-Info: [ 976.731184] ? _copy_from_user+0x99/0x110 [ 976.736544] active_anon:6211 inactive_anon:188 isolated_anon:0 [ 976.736544] active_file:13 inactive_file:20 isolated_file:0 [ 976.736544] unevictable:0 dirty:0 writeback:0 unstable:0 [ 976.736544] slab_reclaimable:11532 slab_unreclaimable:102626 [ 976.736544] mapped:2 shmem:242 pagetables:418 bounce:0 [ 976.736544] free:13775 free_pcp:0 free_cma:0 [ 976.738928] ion_ioctl+0x105/0x217 [ 976.743085] 0 [ 976.775329] ? ion_alloc.cold+0x40/0x40 [ 976.775343] ? ion_alloc.cold+0x40/0x40 [ 976.775352] do_vfs_ioctl+0x7ae/0x1060 [ 976.775362] ? selinux_file_mprotect+0x5d0/0x5d0 [ 976.775372] ? lock_downgrade+0x740/0x740 [ 976.775380] ? ioctl_preallocate+0x1c0/0x1c0 [ 976.775390] ? __fget+0x237/0x370 [ 976.790048] Node 0 active_anon:24844kB inactive_anon:752kB active_file:48kB inactive_file:80kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:8kB dirty:0kB writeback:0kB shmem:968kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 4096kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 976.792474] ? security_file_ioctl+0x7d/0xb0 [ 976.797207] Node 1 active_anon:0kB inactive_anon:0kB active_file:4kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 976.801326] ? security_file_ioctl+0x89/0xb0 [ 976.801338] SyS_ioctl+0x8f/0xc0 [ 976.801346] ? do_vfs_ioctl+0x1060/0x1060 [ 976.801356] do_syscall_64+0x1e8/0x640 [ 976.801364] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 976.801379] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 976.820037] Node 0 [ 976.835971] RIP: 0033:0x45af49 [ 976.835976] RSP: 002b:00007f34ee505c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 976.835984] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045af49 [ 976.835988] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 976.835993] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 976.835997] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f34ee5066d4 [ 976.836001] R13: 00000000004c41b2 R14: 00000000004da748 R15: 00000000ffffffff [ 976.860057] CPU: 1 PID: 7396 Comm: syz-executor.4 Not tainted 4.14.162-syzkaller #0 [ 976.867200] 0 [ 976.871004] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 976.871008] Call Trace: [ 976.871027] dump_stack+0x142/0x197 [ 976.871040] warn_alloc.cold+0x96/0x1af [ 976.871050] ? zone_watermark_ok_safe+0x2b0/0x2b0 [ 976.874394] 0 [ 976.878527] ? trace_hardirqs_on_caller+0x400/0x590 [ 976.887222] ? call_timer_fn+0x670/0x670 [ 976.892424] Node 0 [ 976.894614] __alloc_pages_slowpath+0x23c6/0x2930 [ 976.897775] DMA: [ 976.905491] ? warn_alloc+0xf0/0xf0 [ 976.905508] ? __might_sleep+0x93/0xb0 [ 976.905518] __alloc_pages_nodemask+0x62c/0x7a0 [ 976.912858] DMA free:10380kB min:216kB low:268kB high:320kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 976.920030] ? lock_downgrade+0x740/0x740 [ 976.920040] ? __alloc_pages_slowpath+0x2930/0x2930 [ 976.920057] alloc_pages_current+0xec/0x1e0 [ 976.920069] ion_page_pool_alloc+0x11f/0x1c0 [ 976.927358] 1*4kB [ 976.934573] ion_system_heap_allocate+0x138/0x910 [ 976.934585] ? ion_system_heap_free+0x250/0x250 [ 976.934599] ion_alloc+0x68c/0x860 [ 976.934612] ? ion_dma_buf_release+0x50/0x50 [ 976.941885] lowmem_reserve[]: [ 976.949642] ? kasan_check_write+0x14/0x20 [ 976.951450] 0 [ 976.960767] ? _copy_from_user+0x99/0x110 [ 976.960782] ion_ioctl+0x105/0x217 [ 976.960791] ? ion_alloc.cold+0x40/0x40 [ 976.960804] ? ion_alloc.cold+0x40/0x40 [ 976.963430] (U) [ 976.966976] do_vfs_ioctl+0x7ae/0x1060 [ 976.980123] 1*8kB [ 976.982571] ? selinux_file_mprotect+0x5d0/0x5d0 [ 976.986603] (U) [ 976.988912] ? lock_downgrade+0x740/0x740 [ 977.000081] 2569 [ 977.003275] ? ioctl_preallocate+0x1c0/0x1c0 [ 977.007918] 2569 [ 977.033528] ? __fget+0x237/0x370 [ 977.033544] ? security_file_ioctl+0x7d/0xb0 [ 977.033550] ? security_file_ioctl+0x89/0xb0 [ 977.033561] SyS_ioctl+0x8f/0xc0 [ 977.033569] ? do_vfs_ioctl+0x1060/0x1060 [ 977.033579] do_syscall_64+0x1e8/0x640 [ 977.033587] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 977.033600] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 977.050114] 0*16kB [ 977.051462] RIP: 0033:0x45af49 [ 977.053607] 0*32kB [ 977.058433] RSP: 002b:00007f361d0eac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 977.080074] 0*64kB [ 977.080118] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045af49 [ 977.084251] 1*128kB [ 977.087776] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 977.100064] 2569 [ 977.101727] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 977.101734] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f361d0eb6d4 [ 977.103865] 2569 [ 977.108606] R13: 00000000004c41b2 R14: 00000000004da748 R15: 00000000ffffffff [ 977.230074] (U) 0*256kB 0*512kB 0*1024kB 1*2048kB (M) 2*4096kB (M) = 10380kB [ 977.237352] Node 0 DMA32: 183*4kB (E) 145*8kB (UE) 47*16kB (ME) 12*32kB (UE) 4*64kB (UME) 4*128kB (UME) 3*256kB (M) 21*512kB (UM) 61*1024kB (U) 0*2048kB 0*4096kB = 77780kB [ 977.281089] Node 0 DMA32 free:77532kB min:36380kB low:45472kB high:54564kB active_anon:24844kB inactive_anon:752kB active_file:64kB inactive_file:2464kB unevictable:0kB writepending:0kB present:3129332kB managed:2634320kB mlocked:0kB kernel_stack:7104kB pagetables:1672kB bounce:0kB free_pcp:636kB local_pcp:344kB free_cma:0kB [ 977.310044] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 977.330707] lowmem_reserve[]: 0 0 0 0 0 [ 977.344473] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 977.380095] Node 1 Normal: 508*4kB (U) 189*8kB (UE) 61*16kB (UE) 58*32kB (UE) 0*64kB 1*128kB (U) 1*256kB (U) 37*512kB (U) 115*1024kB (U) 2*2048kB (U) 0*4096kB = 147560kB [ 977.394698] lowmem_reserve[]: 0 0 0 0 0 [ 977.410351] Node 1 Normal free:147560kB min:53508kB low:66884kB high:80260kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:0kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:32kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 977.413679] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 977.437959] lowmem_reserve[]: 0 0 0 0 0 [ 977.450664] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 977.470308] Node 0 DMA: 1*4kB (U) 1*8kB (U) 0*16kB 0*32kB 0*64kB 1*128kB (U) 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 2*4096kB (M) = 11404kB [ 977.473690] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 977.483288] Node 0 DMA32: 184*4kB (ME) 144*8kB (UE) 48*16kB (UME) 12*32kB (UME) 2*64kB (UE) 2*128kB (UE) 0*256kB 21*512kB (UM) 61*1024kB (U) 0*2048kB 0*4096kB = 76640kB [ 977.520066] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 977.528655] 1126 total pagecache pages [ 977.530044] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 977.560298] Node 1 Normal: 508*4kB (U) 189*8kB (UE) 61*16kB (UE) 58*32kB (UE) 0*64kB 1*128kB (U) 1*256kB (U) 37*512kB (U) 115*1024kB (U) 2*2048kB (U) 0*4096kB = 147560kB [ 977.580130] 0 pages in swap cache [ 977.583594] Swap cache stats: add 0, delete 0, find 0/0 [ 977.588946] Free swap = 0kB [ 977.610067] Total swap = 0kB [ 977.613210] 1965979 pages RAM [ 977.616306] 0 pages HighMem/MovableOnly [ 977.630080] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 977.630084] 335874 pages reserved [ 977.630089] 0 pages cma reserved [ 977.638930] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 977.642454] Out of memory: Kill process 7176 (syz-execprog) score 1 or sacrifice child [ 977.663062] Killed process 7202 (syz-executor.0) total-vm:37644kB, anon-rss:64kB, file-rss:0kB, shmem-rss:0kB [ 977.663760] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 977.686791] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 977.699770] 1126 total pagecache pages [ 977.708154] 0 pages in swap cache [ 977.711678] Swap cache stats: add 0, delete 0, find 0/0 [ 977.717045] Free swap = 0kB [ 977.724557] Total swap = 0kB [ 977.727616] 1965979 pages RAM [ 977.730999] 0 pages HighMem/MovableOnly [ 977.734968] 335874 pages reserved [ 977.738493] 0 pages cma reserved [ 977.996412] syz-executor.1: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 978.003891] syz-execprog invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask= [ 978.015719] syz-executor.1 cpuset= [ 978.018250] (null) [ 978.040062] syz1 [ 978.042158] , order=0, oom_score_adj=0 [ 978.042221] mems_allowed=0-1 [ 978.044180] syz-execprog cpuset= [ 978.048151] CPU: 0 PID: 7392 Comm: syz-executor.1 Not tainted 4.14.162-syzkaller #0 [ 978.061933] / [ 978.062343] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 978.062349] Call Trace: [ 978.062365] dump_stack+0x142/0x197 [ 978.064168] mems_allowed=0-1 [ 978.074037] warn_alloc.cold+0x96/0x1af [ 978.074045] ? zone_watermark_ok_safe+0x2b0/0x2b0 [ 978.074061] ? __alloc_pages_direct_compact+0xbc/0x380 [ 978.097339] __alloc_pages_slowpath+0x23c6/0x2930 [ 978.102169] ? save_trace+0x290/0x290 [ 978.105954] ? warn_alloc+0xf0/0xf0 [ 978.109571] ? __might_sleep+0x93/0xb0 [ 978.113440] __alloc_pages_nodemask+0x62c/0x7a0 [ 978.118106] ? lock_downgrade+0x740/0x740 [ 978.122245] ? __alloc_pages_slowpath+0x2930/0x2930 [ 978.127250] alloc_pages_current+0xec/0x1e0 [ 978.131555] ion_page_pool_alloc+0x11f/0x1c0 [ 978.135944] ion_system_heap_allocate+0x138/0x910 [ 978.140770] ? ion_system_heap_free+0x250/0x250 [ 978.145432] ion_alloc+0x68c/0x860 [ 978.150085] ? ion_dma_buf_release+0x50/0x50 [ 978.154476] ? kasan_check_write+0x14/0x20 [ 978.158694] ? _copy_from_user+0x99/0x110 [ 978.162826] ion_ioctl+0x105/0x217 [ 978.166345] ? ion_alloc.cold+0x40/0x40 [ 978.170303] ? ion_alloc.cold+0x40/0x40 [ 978.174256] do_vfs_ioctl+0x7ae/0x1060 [ 978.178126] ? selinux_file_mprotect+0x5d0/0x5d0 [ 978.182867] ? lock_downgrade+0x740/0x740 [ 978.186997] ? ioctl_preallocate+0x1c0/0x1c0 [ 978.191389] ? __fget+0x237/0x370 [ 978.194829] ? security_file_ioctl+0x7d/0xb0 [ 978.199229] ? security_file_ioctl+0x89/0xb0 [ 978.203627] SyS_ioctl+0x8f/0xc0 [ 978.206974] ? do_vfs_ioctl+0x1060/0x1060 [ 978.211104] do_syscall_64+0x1e8/0x640 [ 978.214997] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 978.219825] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 978.224994] RIP: 0033:0x45af49 [ 978.228186] RSP: 002b:00007f34ee505c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 978.235892] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045af49 [ 978.243159] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 978.250411] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 978.257674] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f34ee5066d4 [ 978.264931] R13: 00000000004c41b2 R14: 00000000004da748 R15: 00000000ffffffff [ 978.272213] CPU: 1 PID: 7177 Comm: syz-execprog Not tainted 4.14.162-syzkaller #0 [ 978.279936] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 978.289281] Call Trace: [ 978.291871] dump_stack+0x142/0x197 [ 978.295501] dump_header+0x177/0x6cd [ 978.299214] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 978.304318] ? ___ratelimit+0x55/0x537 [ 978.308199] oom_kill_process.cold+0x10/0xadd [ 978.312798] ? oom_unkillable_task+0x294/0x390 [ 978.317389] ? lock_downgrade+0x740/0x740 [ 978.321534] out_of_memory+0x2ee/0x1180 [ 978.325516] ? lock_acquire+0x16f/0x430 [ 978.329478] ? oom_killer_disable+0x1d0/0x1d0 [ 978.333956] ? __alloc_pages_slowpath+0xca4/0x2930 [ 978.338868] __alloc_pages_slowpath+0x2251/0x2930 [ 978.343703] ? __alloc_pages_nodemask+0x639/0x7a0 [ 978.348541] ? warn_alloc+0xf0/0xf0 [ 978.352335] ? __might_sleep+0x93/0xb0 [ 978.356211] __alloc_pages_nodemask+0x62c/0x7a0 [ 978.360867] ? __alloc_pages_slowpath+0x2930/0x2930 [ 978.365873] ? lock_downgrade+0x740/0x740 [ 978.370011] alloc_pages_current+0xec/0x1e0 [ 978.374324] __page_cache_alloc+0x248/0x3e0 [ 978.378630] filemap_fault+0xcef/0x1de0 [ 978.382593] ? __lock_page_or_retry+0x8d0/0x8d0 [ 978.387240] ? lock_acquire+0x16f/0x430 [ 978.391202] ? ext4_filemap_fault+0x7b/0xb0 [ 978.395517] ext4_filemap_fault+0x83/0xb0 [ 978.399647] __do_fault+0x104/0x390 [ 978.403541] __handle_mm_fault+0x23bd/0x33d0 [ 978.407931] ? copy_page_range+0x1de0/0x1de0 [ 978.412331] ? find_held_lock+0x35/0x130 [ 978.416381] ? handle_mm_fault+0x1b6/0x7c0 [ 978.420605] handle_mm_fault+0x293/0x7c0 [ 978.424649] __do_page_fault+0x4c1/0xb80 [ 978.428693] ? vmalloc_fault+0xe30/0xe30 [ 978.432735] ? page_fault+0x2f/0x50 [ 978.436352] do_page_fault+0x71/0x511 [ 978.440147] ? page_fault+0x2f/0x50 [ 978.443770] page_fault+0x45/0x50 [ 978.447210] RIP: 0033:0x455b33 [ 978.450382] RSP: 002b:000000c420041f08 EFLAGS: 00010202 [ 978.455726] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000455b33 [ 978.463063] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 978.470312] RBP: 000000c420041f18 R08: 000000c420041f08 R09: 0000000000000000 [ 978.477563] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000042d2f0 [ 978.484816] R13: 00000000000000f1 R14: 0000000000000011 R15: 0000000000000000 [ 978.599003] Mem-Info: [ 978.618844] warn_alloc_show_mem: 5 callbacks suppressed [ 978.618847] Mem-Info: [ 978.650494] active_anon:6108 inactive_anon:186 isolated_anon:0 [ 978.650494] active_file:9 inactive_file:36 isolated_file:0 [ 978.650494] unevictable:0 dirty:0 writeback:0 unstable:0 [ 978.650494] slab_reclaimable:11562 slab_unreclaimable:102398 [ 978.650494] mapped:2 shmem:242 pagetables:391 bounce:0 [ 978.650494] free:17555 free_pcp:0 free_cma:0 [ 978.662320] active_anon:6108 inactive_anon:186 isolated_anon:0 [ 978.662320] active_file:9 inactive_file:36 isolated_file:0 [ 978.662320] unevictable:0 dirty:0 writeback:0 unstable:0 [ 978.662320] slab_reclaimable:11562 slab_unreclaimable:102398 [ 978.662320] mapped:2 shmem:242 pagetables:391 bounce:0 [ 978.662320] free:17555 free_pcp:0 free_cma:0 [ 978.759072] Node 0 active_anon:24412kB inactive_anon:744kB active_file:32kB inactive_file:48kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:8kB dirty:0kB writeback:0kB shmem:968kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 4096kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 978.796051] Node 1 active_anon:20kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 978.801047] Node 0 active_anon:24412kB inactive_anon:744kB active_file:32kB inactive_file:48kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:8kB dirty:0kB writeback:0kB shmem:968kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 4096kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 978.822478] syz-executor.1: [ 978.848818] syz-executor.4: [ 978.850157] Node 0 DMA free:10384kB min:216kB low:268kB high:320kB active_anon:12kB inactive_anon:0kB active_file:20kB inactive_file:4kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 978.856317] page allocation failure: order:0 [ 978.882789] page allocation failure: order:0 [ 978.885915] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 978.887196] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 978.891619] (null) [ 978.891624] syz-executor.4 cpuset=syz4 mems_allowed=0-1 [ 978.898725] lowmem_reserve[]: [ 978.910383] Node 1 active_anon:20kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 978.915234] (null) [ 978.916454] Node 0 [ 978.943568] 0 2569 2569 2569 2569 [ 978.949236] CPU: 1 PID: 7403 Comm: syz-executor.4 Not tainted 4.14.162-syzkaller #0 [ 978.950312] Node 0 [ 978.958054] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 978.958059] Call Trace: [ 978.961792] DMA32 free:18164kB min:36380kB low:45472kB high:54564kB active_anon:24400kB inactive_anon:744kB active_file:32kB inactive_file:48kB unevictable:0kB writepending:0kB present:3129332kB managed:2634320kB mlocked:0kB kernel_stack:7008kB pagetables:1548kB bounce:0kB free_pcp:120kB local_pcp:0kB free_cma:0kB [ 978.969634] dump_stack+0x142/0x197 [ 978.972242] syz-executor.1 cpuset= [ 979.000131] warn_alloc.cold+0x96/0x1af [ 979.000139] ? zone_watermark_ok_safe+0x2b0/0x2b0 [ 979.000150] ? trace_hardirqs_on_caller+0x400/0x590 [ 979.000158] ? call_timer_fn+0x670/0x670 [ 979.000173] __alloc_pages_slowpath+0x23c6/0x2930 [ 979.000195] ? warn_alloc+0xf0/0xf0 [ 979.000267] ? __next_zones_zonelist+0x28/0x190 [ 979.000278] __alloc_pages_nodemask+0x62c/0x7a0 [ 979.005318] lowmem_reserve[]: [ 979.007416] ? lock_downgrade+0x740/0x740 [ 979.011405] 0 [ 979.016193] ? __alloc_pages_slowpath+0x2930/0x2930 [ 979.022565] 0 [ 979.025232] ? retint_kernel+0x2d/0x2d [ 979.030092] syz1 [ 979.033674] alloc_pages_current+0xec/0x1e0 [ 979.038402] mems_allowed=0-1 [ 979.043056] ion_page_pool_alloc+0x11f/0x1c0 [ 979.043065] ion_system_heap_allocate+0x138/0x910 [ 979.043076] ? ion_system_heap_free+0x250/0x250 [ 979.043087] ion_alloc+0x68c/0x860 [ 979.043097] ? ion_dma_buf_release+0x50/0x50 [ 979.043109] ? kasan_check_write+0x14/0x20 [ 979.043118] ? _copy_from_user+0x99/0x110 [ 979.043127] ion_ioctl+0x105/0x217 [ 979.043134] ? ion_alloc.cold+0x40/0x40 [ 979.043145] ? ion_alloc.cold+0x40/0x40 [ 979.043154] do_vfs_ioctl+0x7ae/0x1060 [ 979.043164] ? selinux_file_mprotect+0x5d0/0x5d0 [ 979.043172] ? lock_downgrade+0x740/0x740 [ 979.043182] ? ioctl_preallocate+0x1c0/0x1c0 [ 979.043192] ? __fget+0x237/0x370 [ 979.043206] ? security_file_ioctl+0x7d/0xb0 [ 979.043212] ? security_file_ioctl+0x89/0xb0 [ 979.043222] SyS_ioctl+0x8f/0xc0 [ 979.043229] ? do_vfs_ioctl+0x1060/0x1060 [ 979.043239] do_syscall_64+0x1e8/0x640 [ 979.043246] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 979.043258] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 979.043264] RIP: 0033:0x45af49 [ 979.043267] RSP: 002b:00007f361d0a8c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 979.043275] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045af49 [ 979.043279] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 979.043284] RBP: 000000000075c070 R08: 0000000000000000 R09: 0000000000000000 [ 979.043288] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f361d0a96d4 [ 979.043293] R13: 00000000004c41b2 R14: 00000000004da748 R15: 00000000ffffffff [ 979.048888] DMA free:10384kB min:216kB low:268kB high:320kB active_anon:12kB inactive_anon:0kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 979.052610] 0 [ 979.057588] lowmem_reserve[]: [ 979.059349] 0 0 [ 979.067763] 0 [ 979.069527] CPU: 0 PID: 7399 Comm: syz-executor.1 Not tainted 4.14.162-syzkaller #0 [ 979.072623] 2569 [ 979.076993] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 979.081855] 2569 [ 979.086477] Call Trace: [ 979.089995] 2569 [ 979.094395] dump_stack+0x142/0x197 [ 979.094408] warn_alloc.cold+0x96/0x1af [ 979.098621] 2569 [ 979.102752] ? zone_watermark_ok_safe+0x2b0/0x2b0 [ 979.102762] ? trace_hardirqs_on_caller+0x400/0x590 [ 979.102769] ? call_timer_fn+0x670/0x670 [ 979.102786] __alloc_pages_slowpath+0x23c6/0x2930 [ 979.110282] ? warn_alloc+0xf0/0xf0 [ 979.110299] ? __might_sleep+0x93/0xb0 [ 979.114255] Node 0 [ 979.118121] __alloc_pages_nodemask+0x62c/0x7a0 [ 979.122887] DMA32 free:18060kB min:36380kB low:45472kB high:54564kB active_anon:24400kB inactive_anon:744kB active_file:32kB inactive_file:48kB unevictable:0kB writepending:0kB present:3129332kB managed:2634320kB mlocked:0kB kernel_stack:7008kB pagetables:1548kB bounce:0kB free_pcp:236kB local_pcp:116kB free_cma:0kB [ 979.126984] ? lock_downgrade+0x740/0x740 [ 979.131408] lowmem_reserve[]: [ 979.134820] ? __alloc_pages_slowpath+0x2930/0x2930 [ 979.139198] 0 [ 979.143594] ? ion_page_pool_alloc+0x2d/0x1c0 [ 979.143606] alloc_pages_current+0xec/0x1e0 [ 979.143616] ion_page_pool_alloc+0x11f/0x1c0 [ 979.160053] 0 [ 979.164973] ion_system_heap_allocate+0x138/0x910 [ 979.168145] 0 [ 979.175843] ? ion_system_heap_free+0x250/0x250 [ 979.175856] ion_alloc+0x68c/0x860 [ 979.175871] ? ion_dma_buf_release+0x50/0x50 [ 979.210057] 0 [ 979.212366] ? kasan_check_write+0x14/0x20 [ 979.260052] 0 [ 979.265754] ? _copy_from_user+0x99/0x110 [ 979.270362] ion_ioctl+0x105/0x217 [ 979.270373] ? ion_alloc.cold+0x40/0x40 [ 979.270386] ? ion_alloc.cold+0x40/0x40 [ 979.290050] Node 0 [ 979.293781] do_vfs_ioctl+0x7ae/0x1060 [ 979.297829] Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 979.302651] ? selinux_file_mprotect+0x5d0/0x5d0 [ 979.302661] ? lock_downgrade+0x740/0x740 [ 979.302671] ? ioctl_preallocate+0x1c0/0x1c0 [ 979.320051] lowmem_reserve[]: [ 979.345115] ? __fget+0x237/0x370 [ 979.345131] ? security_file_ioctl+0x7d/0xb0 [ 979.380067] 0 [ 979.380873] ? security_file_ioctl+0x89/0xb0 [ 979.385528] 0 [ 979.389068] SyS_ioctl+0x8f/0xc0 [ 979.410056] 0 [ 979.412853] ? do_vfs_ioctl+0x1060/0x1060 [ 979.416801] 0 [ 979.419025] do_syscall_64+0x1e8/0x640 [ 979.430044] 0 [ 979.447947] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 979.447967] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 979.467752] RIP: 0033:0x45af49 [ 979.472167] Node 1 [ 979.473925] RSP: 002b:00007f34ee4c3c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 979.478328] Normal free:26696kB min:53508kB low:66884kB high:80260kB active_anon:20kB inactive_anon:0kB active_file:68kB inactive_file:8kB unevictable:0kB writepending:0kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:32kB pagetables:16kB bounce:0kB free_pcp:200kB local_pcp:80kB free_cma:0kB [ 979.480099] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045af49 [ 979.480104] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 979.480108] RBP: 000000000075c070 R08: 0000000000000000 R09: 0000000000000000 [ 979.480113] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f34ee4c46d4 [ 979.480117] R13: 00000000004c41b2 R14: 00000000004da748 R15: 00000000ffffffff [ 979.483496] lowmem_reserve[]: [ 979.485257] Node 0 [ 979.489380] 0 [ 979.491254] Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 979.491257] lowmem_reserve[]: 0 0 0 0 0 [ 979.491276] Node 1 Normal free:26696kB min:53508kB low:66884kB high:80260kB active_anon:20kB inactive_anon:0kB active_file:68kB inactive_file:8kB unevictable:0kB writepending:0kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:32kB pagetables:16kB bounce:0kB free_pcp:200kB local_pcp:120kB free_cma:0kB [ 979.491292] lowmem_reserve[]: 0 0 0 0 0 [ 979.491311] Node 0 DMA: 10*4kB (UME) 9*8kB (UM) 7*16kB (ME) 6*32kB (ME) 8*64kB (UME) 4*128kB (UME) 1*256kB (E) 1*512kB (E) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 10400kB [ 979.491380] Node 0 DMA32: 467*4kB (UME) 568*8kB (UME) 196*16kB [ 979.500123] 0 [ 979.503279] (UME) [ 979.507087] 0 [ 979.510260] 90*32kB (UE) 4*64kB (UM) 4*128kB (U) 3*256kB (U) 2*512kB (U) 3*1024kB (U) 0*2048kB 0*4096kB = 18060kB [ 979.510307] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 979.510352] Node 1 Normal: 2750*4kB (UM) 230*8kB (UM) 86*16kB (UME) [ 979.517061] 0 [ 979.521805] 78*32kB [ 979.553490] 0 [ 979.556300] (UME) [ 979.569633] 20*64kB [ 979.576941] Node 0 DMA: 10*4kB (UME) 9*8kB (UM) 7*16kB (ME) 6*32kB [ 979.585580] (UME) [ 979.592060] (ME) [ 979.624529] 4*128kB [ 979.648853] 8*64kB [ 979.657507] (UME) [ 979.668493] (UME) [ 979.679197] 2*256kB [ 979.679672] 4*128kB [ 979.696869] (UM) [ 979.701655] (UME) [ 979.708033] 9*512kB (UME) [ 979.709818] 1*256kB [ 979.718249] 3*1024kB [ 979.718393] (E) [ 979.724815] (U) 0*2048kB [ 979.726977] 1*512kB [ 979.728995] 0*4096kB = 26696kB [ 979.731422] (E) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 10400kB [ 979.731448] Node 0 DMA32: 467*4kB (UME) 567*8kB (UME) 196*16kB (UMEH) 90*32kB (UEH) 4*64kB (UMH) 4*128kB (UH) 3*256kB (UH) 2*512kB (UH) 3*1024kB (U) 0*2048kB 0*4096kB = 18052kB [ 979.731526] Node 0 Normal: 0*4kB 0*8kB [ 979.739527] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 979.740411] 0*16kB [ 979.743247] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 979.744753] 0*32kB [ 979.746885] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 979.749705] 0*64kB [ 979.757819] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 979.766601] 0*128kB [ 979.768896] 276 total pagecache pages [ 979.772102] 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 979.772125] Node 1 Normal: 2750*4kB (UM) 230*8kB (UM) 86*16kB (UME) 78*32kB (UME) 20*64kB (UME) 4*128kB (UME) 2*256kB (UM) 9*512kB (UME) 3*1024kB (U) 0*2048kB 0*4096kB = 26696kB [ 979.772207] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 979.772213] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 979.784163] 0 pages in swap cache [ 979.794371] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 979.794381] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 979.799783] Swap cache stats: add 0, delete 0, find 0/0 [ 979.807216] 276 total pagecache pages [ 979.807228] 0 pages in swap cache [ 979.807232] Swap cache stats: add 0, delete 0, find 0/0 [ 979.807235] Free swap = 0kB [ 979.807239] Total swap = 0kB [ 979.807246] 1965979 pages RAM [ 979.807249] 0 pages HighMem/MovableOnly [ 979.807253] 335874 pages reserved [ 979.807256] 0 pages cma reserved [ 979.807263] Out of memory: Kill process 7176 (syz-execprog) score 1 or sacrifice child [ 979.807644] Killed process 7200 (syz-executor.1) total-vm:37644kB, anon-rss:60kB, file-rss:0kB, shmem-rss:0kB [ 979.968268] Free swap = 0kB [ 979.971363] Total swap = 0kB [ 979.974385] 1965979 pages RAM [ 979.977479] 0 pages HighMem/MovableOnly [ 979.991406] oom_reaper: reaped process 7200 (syz-executor.1), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB 2020/01/06 14:14:55 executed programs: 10 2020/01/06 14:14:55 result: hanged=false err=executor 3: exit status 67 clone failed (errno 12) loop exited with status 67 clone failed (errno 12) loop exited with status 67 [ 980.020630] 335874 pages reserved [ 980.024112] 0 pages cma reserved [ 980.031993] warn_alloc_show_mem: 1 callbacks suppressed [ 980.031996] Mem-Info: [ 980.038008] active_anon:6083 inactive_anon:186 isolated_anon:0 [ 980.038008] active_file:32 inactive_file:1411 isolated_file:0 [ 980.038008] unevictable:0 dirty:25 writeback:0 unstable:0 [ 980.038008] slab_reclaimable:11562 slab_unreclaimable:102474 [ 980.038008] mapped:1027 shmem:242 pagetables:391 bounce:0 [ 980.038008] free:64860 free_pcp:206 free_cma:0 [ 980.079617] Node 0 active_anon:24312kB inactive_anon:744kB active_file:232kB inactive_file:6348kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:4708kB dirty:100kB writeback:0kB shmem:968kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 4096kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no 2020/01/06 14:14:58 result: hanged=false err=executor 2: failed to write control pipe: write |1: broken pipe [ 980.115279] Node 1 active_anon:20kB inactive_anon:0kB active_file:28kB inactive_file:28kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 980.151236] Node 0 DMA free:11424kB min:216kB low:268kB high:320kB active_anon:12kB inactive_anon:0kB active_file:12kB inactive_file:8kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 980.234458] lowmem_reserve[]: 0 2569 2569 2569 2569 [ 980.239680] Node 0 DMA32 free:38848kB min:36380kB low:45472kB high:54564kB active_anon:24428kB inactive_anon:740kB active_file:2000kB inactive_file:8532kB unevictable:0kB writepending:172kB present:3129332kB managed:2634320kB mlocked:0kB kernel_stack:7104kB pagetables:1656kB bounce:0kB free_pcp:1008kB local_pcp:656kB free_cma:0kB [ 980.259299] syz-executor.4: [ 980.275565] lowmem_reserve[]: [ 980.278144] page allocation failure: order:4 [ 980.282034] 0 [ 980.285058] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 980.286641] 0 [ 980.290452] (null) [ 980.304813] syz-executor.4 cpuset=syz4 mems_allowed=0-1 [ 980.305117] 0 0 0 [ 980.317130] CPU: 1 PID: 7414 Comm: syz-executor.4 Not tainted 4.14.162-syzkaller #0 [ 980.317501] Node 0 [ 980.324922] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 980.324926] Call Trace: [ 980.324942] dump_stack+0x142/0x197 [ 980.324955] warn_alloc.cold+0x96/0x1af [ 980.324963] ? zone_watermark_ok_safe+0x2b0/0x2b0 [ 980.324978] ? __alloc_pages_direct_compact+0xbc/0x380 [ 980.324989] __alloc_pages_slowpath+0x23c6/0x2930 [ 980.325002] ? save_trace+0x290/0x290 [ 980.325013] ? warn_alloc+0xf0/0xf0 [ 980.325030] ? __might_sleep+0x93/0xb0 [ 980.325039] __alloc_pages_nodemask+0x62c/0x7a0 [ 980.325046] ? lock_downgrade+0x740/0x740 [ 980.325056] ? __alloc_pages_slowpath+0x2930/0x2930 [ 980.325067] ? save_trace+0x290/0x290 [ 980.325081] alloc_pages_current+0xec/0x1e0 [ 980.325093] ion_page_pool_alloc+0x11f/0x1c0 [ 980.325102] ion_system_heap_allocate+0x138/0x910 [ 980.325110] ? ion_alloc+0x19b/0x860 [ 980.325119] ? rcu_read_lock_sched_held+0x110/0x130 [ 980.325128] ? ion_system_heap_free+0x250/0x250 [ 980.325139] ion_alloc+0x222/0x860 [ 980.325150] ? ion_dma_buf_release+0x50/0x50 [ 980.325161] ? kasan_check_write+0x14/0x20 [ 980.325171] ? _copy_from_user+0x99/0x110 [ 980.325182] ion_ioctl+0x105/0x217 [ 980.325189] ? ion_alloc.cold+0x40/0x40 [ 980.325214] ? ion_alloc.cold+0x40/0x40 [ 980.325224] do_vfs_ioctl+0x7ae/0x1060 [ 980.325234] ? selinux_file_mprotect+0x5d0/0x5d0 [ 980.325240] ? lock_downgrade+0x740/0x740 [ 980.325248] ? ioctl_preallocate+0x1c0/0x1c0 [ 980.325257] ? __fget+0x237/0x370 [ 980.325270] ? security_file_ioctl+0x7d/0xb0 [ 980.325278] ? security_file_ioctl+0x89/0xb0 [ 980.325287] SyS_ioctl+0x8f/0xc0 [ 980.325294] ? do_vfs_ioctl+0x1060/0x1060 [ 980.325305] do_syscall_64+0x1e8/0x640 [ 980.325312] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 980.325326] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 980.325332] RIP: 0033:0x45af49 [ 980.325336] RSP: 002b:00007f361d0eac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 980.325344] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045af49 [ 980.325349] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 980.325354] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 980.325358] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f361d0eb6d4 [ 980.325363] R13: 00000000004c41b2 R14: 00000000004da748 R15: 00000000ffffffff [ 980.539856] syz-executor.4 invoked oom-killer: gfp_mask=0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 980.546990] Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 980.550073] syz-executor.5: [ 980.557373] lowmem_reserve[]: 0 0 0 0 0 [ 980.585702] (null) [ 980.589036] Node 1 Normal free:53348kB min:53508kB low:66884kB high:80260kB active_anon:20kB inactive_anon:0kB active_file:28kB inactive_file:28kB unevictable:0kB writepending:4kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:32kB pagetables:16kB bounce:0kB free_pcp:120kB local_pcp:0kB free_cma:0kB [ 980.589057] lowmem_reserve[]: 0 0 0 0 0 [ 980.589079] Node 0 DMA: 5*4kB (ME) 5*8kB (UM) [ 980.594023] , order=0, oom_score_adj=1000 [ 980.627897] page allocation failure: order:4 [ 980.633400] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 980.637900] 5*16kB (ME) 5*32kB (ME) 5*64kB (ME) 5*128kB (ME) 2*256kB (UE) 1*512kB (E) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 10476kB [ 980.658315] syz-executor.4 cpuset= [ 980.659633] Node 0 [ 980.660731] syz4 [ 980.663226] DMA32: 176*4kB (UME) 339*8kB (UMEH) 292*16kB (UME) 172*32kB (UMEH) 52*64kB (UMH) 32*128kB (UMH) 18*256kB (UMH) 8*512kB (UMH) 8*1024kB (U) 0*2048kB 0*4096kB = 37912kB [ 980.668474] mems_allowed=0-1 [ 980.687797] (null) [ 980.690113] syz-executor.5 cpuset=syz5 mems_allowed=0-1 [ 980.695953] CPU: 1 PID: 7410 Comm: syz-executor.5 Not tainted 4.14.162-syzkaller #0 [ 980.697141] Node 0 [ 980.703750] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 980.703754] Call Trace: [ 980.703769] dump_stack+0x142/0x197 [ 980.703782] warn_alloc.cold+0x96/0x1af [ 980.703790] ? zone_watermark_ok_safe+0x2b0/0x2b0 [ 980.703806] ? __alloc_pages_direct_compact+0xbc/0x380 [ 980.703817] __alloc_pages_slowpath+0x23c6/0x2930 [ 980.703834] ? save_trace+0x290/0x290 [ 980.703847] ? warn_alloc+0xf0/0xf0 [ 980.709963] Normal: [ 980.715426] ? __might_sleep+0x93/0xb0 [ 980.715437] __alloc_pages_nodemask+0x62c/0x7a0 [ 980.715448] ? lock_downgrade+0x740/0x740 [ 980.715457] ? __alloc_pages_slowpath+0x2930/0x2930 [ 980.715468] ? save_trace+0x290/0x290 [ 980.715481] alloc_pages_current+0xec/0x1e0 [ 980.715492] ion_page_pool_alloc+0x11f/0x1c0 [ 980.715501] ion_system_heap_allocate+0x138/0x910 [ 980.718735] 0*4kB [ 980.721677] ? ion_alloc+0x19b/0x860 [ 980.721688] ? rcu_read_lock_sched_held+0x110/0x130 [ 980.721697] ? ion_system_heap_free+0x250/0x250 [ 980.721710] ion_alloc+0x222/0x860 [ 980.721723] ? ion_dma_buf_release+0x50/0x50 [ 980.721735] ? kasan_check_write+0x14/0x20 [ 980.721744] ? _copy_from_user+0x99/0x110 [ 980.721754] ion_ioctl+0x105/0x217 [ 980.721762] ? ion_alloc.cold+0x40/0x40 [ 980.721775] ? ion_alloc.cold+0x40/0x40 [ 980.721785] do_vfs_ioctl+0x7ae/0x1060 [ 980.721794] ? selinux_file_mprotect+0x5d0/0x5d0 [ 980.721800] ? lock_downgrade+0x740/0x740 [ 980.721810] ? ioctl_preallocate+0x1c0/0x1c0 [ 980.721821] ? __fget+0x237/0x370 [ 980.721837] ? security_file_ioctl+0x7d/0xb0 [ 980.721844] ? security_file_ioctl+0x89/0xb0 [ 980.721855] SyS_ioctl+0x8f/0xc0 [ 980.721864] ? do_vfs_ioctl+0x1060/0x1060 [ 980.721874] do_syscall_64+0x1e8/0x640 [ 980.721884] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 980.729101] 0*8kB [ 980.730670] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 980.730677] RIP: 0033:0x45af49 [ 980.730682] RSP: 002b:00007f7f21a93c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 980.730691] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045af49 [ 980.730696] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 980.730700] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 980.730705] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7f21a946d4 [ 980.730710] R13: 00000000004c41b2 R14: 00000000004da748 R15: 00000000ffffffff [ 980.731031] CPU: 1 PID: 7414 Comm: syz-executor.4 Not tainted 4.14.162-syzkaller #0 [ 980.936352] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 980.945684] Call Trace: [ 980.948258] dump_stack+0x142/0x197 [ 980.951872] dump_header+0x177/0x6cd [ 980.955566] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 980.960659] ? ___ratelimit+0x55/0x537 [ 980.964538] oom_kill_process.cold+0x10/0xadd [ 980.969012] ? oom_unkillable_task+0x294/0x390 [ 980.973585] ? lock_downgrade+0x740/0x740 [ 980.977718] out_of_memory+0x2ee/0x1180 [ 980.981670] ? lock_acquire+0x16f/0x430 [ 980.985628] ? oom_killer_disable+0x1d0/0x1d0 [ 980.990122] ? __alloc_pages_slowpath+0xca4/0x2930 [ 980.995041] __alloc_pages_slowpath+0x2251/0x2930 [ 980.999871] ? warn_alloc+0xf0/0xf0 [ 981.003487] ? __might_sleep+0x93/0xb0 [ 981.007353] __alloc_pages_nodemask+0x62c/0x7a0 [ 981.012002] ? lock_downgrade+0x740/0x740 [ 981.016129] ? __alloc_pages_slowpath+0x2930/0x2930 [ 981.021129] alloc_pages_current+0xec/0x1e0 [ 981.025432] ion_page_pool_alloc+0x11f/0x1c0 [ 981.029819] ion_system_heap_allocate+0x138/0x910 [ 981.034641] ? ion_alloc+0x19b/0x860 [ 981.038344] ? rcu_read_lock_sched_held+0x110/0x130 [ 981.043348] ? ion_system_heap_free+0x250/0x250 [ 981.047999] ion_alloc+0x222/0x860 [ 981.051524] ? ion_dma_buf_release+0x50/0x50 [ 981.055915] ? kasan_check_write+0x14/0x20 [ 981.060130] ? _copy_from_user+0x99/0x110 [ 981.064259] ion_ioctl+0x105/0x217 [ 981.067778] ? ion_alloc.cold+0x40/0x40 [ 981.071735] ? ion_alloc.cold+0x40/0x40 [ 981.075689] do_vfs_ioctl+0x7ae/0x1060 [ 981.079565] ? selinux_file_mprotect+0x5d0/0x5d0 [ 981.084298] ? lock_downgrade+0x740/0x740 [ 981.088424] ? ioctl_preallocate+0x1c0/0x1c0 [ 981.092813] ? __fget+0x237/0x370 [ 981.096264] ? security_file_ioctl+0x7d/0xb0 [ 981.100669] ? security_file_ioctl+0x89/0xb0 [ 981.105071] SyS_ioctl+0x8f/0xc0 [ 981.108423] ? do_vfs_ioctl+0x1060/0x1060 [ 981.112554] do_syscall_64+0x1e8/0x640 [ 981.116420] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 981.121246] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 981.126421] RIP: 0033:0x45af49 [ 981.129597] RSP: 002b:00007f361d0eac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 981.137293] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045af49 [ 981.144544] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 981.151797] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 981.159059] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f361d0eb6d4 [ 981.166309] R13: 00000000004c41b2 R14: 00000000004da748 R15: 00000000ffffffff [ 981.175271] 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 981.183126] warn_alloc_show_mem: 1 callbacks suppressed [ 981.183129] Mem-Info: [ 981.184301] Node 1 [ 981.190077] active_anon:6129 inactive_anon:188 isolated_anon:0 [ 981.190077] active_file:2 inactive_file:122 isolated_file:8 [ 981.190077] unevictable:0 dirty:5 writeback:1 unstable:0 [ 981.190077] slab_reclaimable:11611 slab_unreclaimable:102175 [ 981.190077] mapped:2 shmem:242 pagetables:404 bounce:0 [ 981.190077] free:25378 free_pcp:62 free_cma:0 [ 981.192245] Normal: [ 981.194435] Node 0 active_anon:24496kB inactive_anon:752kB active_file:4kB inactive_file:684kB unevictable:0kB isolated(anon):0kB isolated(file):32kB mapped:208kB dirty:12kB writeback:4kB shmem:968kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 4096kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 981.226709] 2771*4kB [ 981.232889] Node 1 active_anon:20kB inactive_anon:0kB active_file:4kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:8kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 981.256469] (UM) [ 981.262530] Node 0 [ 981.285915] 230*8kB [ 981.292368] DMA free:10476kB min:216kB low:268kB high:320kB active_anon:12kB inactive_anon:0kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:4kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 981.322915] (UM) 82*16kB (UME) 81*32kB (UME) 443*64kB (UME) 15*128kB (UME) 5*256kB (UM) 10*512kB (UME) 0*1024kB 0*2048kB 0*4096kB = 53500kB [ 981.324449] lowmem_reserve[]: 0 2569 2569 2569 2569 [ 981.336177] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 981.344561] Node 0 DMA32 free:37024kB min:36380kB low:45472kB high:54564kB active_anon:24484kB inactive_anon:752kB active_file:244kB inactive_file:800kB unevictable:0kB writepending:12kB present:3129332kB managed:2634320kB mlocked:0kB kernel_stack:7104kB pagetables:1600kB bounce:0kB free_pcp:52kB local_pcp:0kB free_cma:0kB [ 981.350454] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 981.378635] lowmem_reserve[]: 0 0 0 0 0 [ 981.391553] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 981.416898] lowmem_reserve[]: 0 0 0 0 0 [ 981.420932] Node 1 Normal free:53500kB min:53508kB low:66884kB high:80260kB active_anon:20kB inactive_anon:0kB active_file:4kB inactive_file:4kB unevictable:0kB writepending:8kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:32kB pagetables:16kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 981.448561] lowmem_reserve[]: 0 0 0 0 0 [ 981.452583] Node 0 DMA: 5*4kB (ME) 5*8kB (UM) 5*16kB (ME) 5*32kB (ME) 5*64kB (ME) 5*128kB (ME) 2*256kB (UE) 1*512kB (E) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 10476kB [ 981.459095] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 981.468006] Node 0 DMA32: 153*4kB (E) 288*8kB (UMEH) 267*16kB (UME) 148*32kB (UEH) 41*64kB (UMH) 28*128kB (UMH) 16*256kB (UMH) 12*512kB (UMH) 8*1024kB (U) 0*2048kB 0*4096kB = 36564kB [ 981.493383] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 981.504209] Node 1 Normal: 2771*4kB (UM) 230*8kB (UM) 82*16kB (UME) 81*32kB (UME) 443*64kB (UME) 15*128kB (UME) 5*256kB (UM) 10*512kB (UME) 0*1024kB 0*2048kB 0*4096kB = 53500kB [ 981.505617] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 981.520320] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 981.520328] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 981.520333] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 981.520337] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 981.520341] 559 total pagecache pages [ 981.520351] 0 pages in swap cache [ 981.520355] Swap cache stats: add 0, delete 0, find 0/0 [ 981.520359] Free swap = 0kB [ 981.520362] Total swap = 0kB [ 981.520369] 1965979 pages RAM [ 981.520372] 0 pages HighMem/MovableOnly [ 981.520375] 335874 pages reserved [ 981.520378] 0 pages cma reserved [ 981.520629] Mem-Info: [ 981.569231] 384 total pagecache pages [ 981.573304] active_anon:6129 inactive_anon:188 isolated_anon:0 [ 981.573304] active_file:25 inactive_file:22 isolated_file:8 [ 981.573304] unevictable:0 dirty:5 writeback:1 unstable:0 [ 981.573304] slab_reclaimable:11611 slab_unreclaimable:102175 [ 981.573304] mapped:27 shmem:242 pagetables:404 bounce:0 [ 981.573304] free:25323 free_pcp:184 free_cma:0 [ 981.581896] 0 pages in swap cache [ 981.584255] Node 0 active_anon:24496kB inactive_anon:752kB active_file:96kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):32kB mapped:108kB dirty:12kB writeback:4kB shmem:968kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 4096kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 981.587113] Swap cache stats: add 0, delete 0, find 0/0 [ 981.591301] Node 1 active_anon:20kB inactive_anon:0kB active_file:4kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:8kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 981.597628] Free swap = 0kB [ 981.599899] Node 0 DMA free:10476kB min:216kB low:268kB high:320kB active_anon:12kB inactive_anon:0kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:4kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 981.599918] lowmem_reserve[]: 0 2569 2569 [ 981.605668] Total swap = 0kB [ 981.643922] 2569 [ 981.669626] 1965979 pages RAM [ 981.678724] 2569 [ 981.701079] 0 pages HighMem/MovableOnly [ 981.731171] 335874 pages reserved [ 981.739780] Node 0 [ 981.743207] 0 pages cma reserved [ 981.744907] DMA32 free:37452kB min:36380kB low:45472kB high:54564kB active_anon:24484kB inactive_anon:752kB active_file:96kB inactive_file:148kB unevictable:0kB writepending:12kB present:3129332kB managed:2634320kB mlocked:0kB kernel_stack:7104kB pagetables:1600kB bounce:0kB free_pcp:480kB local_pcp:368kB free_cma:0kB [ 981.790825] lowmem_reserve[]: 0 0 0 0 0 [ 981.794892] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 981.824925] lowmem_reserve[]: 0 0 0 0 0 [ 981.829071] Node 1 Normal free:53500kB min:53508kB low:66884kB high:80260kB active_anon:20kB inactive_anon:0kB active_file:4kB inactive_file:4kB unevictable:0kB writepending:8kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:32kB pagetables:16kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 981.862915] lowmem_reserve[]: 0 0 0 0 0 [ 981.866941] Node 0 DMA: 5*4kB (ME) 5*8kB (UM) 5*16kB (ME) 5*32kB (ME) 5*64kB (ME) 5*128kB (ME) 2*256kB (UE) 1*512kB (E) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 10476kB [ 981.886549] Node 0 DMA32: 153*4kB (E) 255*8kB (UMEH) 266*16kB (UE) 163*32kB (UMEH) 41*64kB (UMH) 26*128kB (UMH) 16*256kB (UMH) 11*512kB (UMH) 11*1024kB (UM) 0*2048kB 0*4096kB = 39068kB [ 981.907438] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 981.919166] Node 1 Normal: 2771*4kB (UM) 230*8kB (UM) 82*16kB (UME) 81*32kB (UME) 443*64kB (UME) 15*128kB (UME) 5*256kB (UM) 10*512kB (UME) 107*1024kB (U) 11*2048kB (U) 3*4096kB (U) = 197884kB [ 981.936718] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 981.948223] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 981.957657] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 981.967692] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 982.000104] 797 total pagecache pages [ 982.003951] 0 pages in swap cache [ 982.007407] Swap cache stats: add 0, delete 0, find 0/0 [ 982.030363] Free swap = 0kB [ 982.033445] Total swap = 0kB [ 982.036482] 1965979 pages RAM [ 982.050061] 0 pages HighMem/MovableOnly [ 982.054090] 335874 pages reserved [ 982.057552] 0 pages cma reserved [ 982.070068] Out of memory: Kill process 7409 (syz-executor.5) score 999 or sacrifice child [ 982.078756] Killed process 7410 (syz-executor.5) total-vm:38036kB, anon-rss:128kB, file-rss:736kB, shmem-rss:0kB [ 982.123434] oom_reaper: reaped process 7410 (syz-executor.5), now anon-rss:0kB, file-rss:4kB, shmem-rss:0kB [ 982.148560] syz-executor.5: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 982.156708] syz-executor.4: [ 982.161958] syz-executor.5 cpuset= [ 982.170751] page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 982.186702] syz5 mems_allowed=0-1 [ 982.200085] CPU: 0 PID: 7417 Comm: syz-executor.5 Not tainted 4.14.162-syzkaller #0 [ 982.206156] syz-executor.4 cpuset= [ 982.207905] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 982.207911] Call Trace: [ 982.211559] syz4 [ 982.220877] dump_stack+0x142/0x197 [ 982.223436] mems_allowed=0-1 [ 982.225383] warn_alloc.cold+0x96/0x1af [ 982.236007] ? zone_watermark_ok_safe+0x2b0/0x2b0 [ 982.240840] ? __alloc_pages_direct_compact+0xbc/0x380 [ 982.246101] __alloc_pages_slowpath+0x23c6/0x2930 [ 982.250953] ? save_trace+0x290/0x290 [ 982.254868] ? warn_alloc+0xf0/0xf0 [ 982.258510] ? __might_sleep+0x93/0xb0 [ 982.262386] __alloc_pages_nodemask+0x62c/0x7a0 [ 982.267044] ? lock_downgrade+0x740/0x740 [ 982.271186] ? __alloc_pages_slowpath+0x2930/0x2930 [ 982.276217] ? save_trace+0x290/0x290 [ 982.280070] alloc_pages_current+0xec/0x1e0 [ 982.284395] ion_page_pool_alloc+0x11f/0x1c0 [ 982.288792] ion_system_heap_allocate+0x138/0x910 [ 982.293630] ? ion_alloc+0x19b/0x860 [ 982.297351] ? rcu_read_lock_sched_held+0x110/0x130 [ 982.302352] ? ion_system_heap_free+0x250/0x250 [ 982.307024] ion_alloc+0x222/0x860 [ 982.310576] ? ion_dma_buf_release+0x50/0x50 [ 982.314971] ? kasan_check_write+0x14/0x20 [ 982.319211] ? _copy_from_user+0x99/0x110 [ 982.323345] ion_ioctl+0x105/0x217 [ 982.326869] ? ion_alloc.cold+0x40/0x40 [ 982.330828] ? ion_alloc.cold+0x40/0x40 [ 982.334803] do_vfs_ioctl+0x7ae/0x1060 [ 982.338690] ? selinux_file_mprotect+0x5d0/0x5d0 [ 982.343432] ? lock_downgrade+0x740/0x740 [ 982.347570] ? ioctl_preallocate+0x1c0/0x1c0 [ 982.351963] ? __fget+0x237/0x370 [ 982.355414] ? security_file_ioctl+0x7d/0xb0 [ 982.359821] ? security_file_ioctl+0x89/0xb0 [ 982.364278] SyS_ioctl+0x8f/0xc0 [ 982.367661] ? do_vfs_ioctl+0x1060/0x1060 [ 982.371810] do_syscall_64+0x1e8/0x640 [ 982.375683] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 982.380520] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 982.385718] RIP: 0033:0x45af49 [ 982.388911] RSP: 002b:00007f7f21a51c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 982.396613] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045af49 [ 982.403866] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 982.411113] RBP: 000000000075c070 R08: 0000000000000000 R09: 0000000000000000 [ 982.418365] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7f21a526d4 [ 982.425616] R13: 00000000004c41b2 R14: 00000000004da748 R15: 00000000ffffffff [ 982.432881] CPU: 1 PID: 7418 Comm: syz-executor.4 Not tainted 4.14.162-syzkaller #0 [ 982.437845] syz-execprog invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask= [ 982.440678] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 982.440682] Call Trace: [ 982.440696] dump_stack+0x142/0x197 [ 982.440708] warn_alloc.cold+0x96/0x1af [ 982.440715] ? zone_watermark_ok_safe+0x2b0/0x2b0 [ 982.440730] ? __alloc_pages_direct_compact+0xbc/0x380 [ 982.440745] __alloc_pages_slowpath+0x23c6/0x2930 [ 982.440762] ? save_trace+0x290/0x290 [ 982.440776] ? warn_alloc+0xf0/0xf0 [ 982.440795] ? __might_sleep+0x93/0xb0 [ 982.440805] __alloc_pages_nodemask+0x62c/0x7a0 [ 982.440814] ? lock_downgrade+0x740/0x740 [ 982.440823] ? __alloc_pages_slowpath+0x2930/0x2930 [ 982.440840] alloc_pages_current+0xec/0x1e0 [ 982.460054] ion_page_pool_alloc+0x11f/0x1c0 [ 982.460063] ion_system_heap_allocate+0x138/0x910 [ 982.460071] ? ion_alloc+0x19b/0x860 [ 982.460081] ? rcu_read_lock_sched_held+0x110/0x130 [ 982.460088] ? ion_system_heap_free+0x250/0x250 [ 982.460099] ion_alloc+0x222/0x860 [ 982.460112] ? ion_dma_buf_release+0x50/0x50 [ 982.460126] ? kasan_check_write+0x14/0x20 [ 982.460135] ? _copy_from_user+0x99/0x110 [ 982.460144] ion_ioctl+0x105/0x217 [ 982.460152] ? ion_alloc.cold+0x40/0x40 [ 982.460164] ? ion_alloc.cold+0x40/0x40 [ 982.465705] (null) [ 982.466366] do_vfs_ioctl+0x7ae/0x1060 [ 982.491957] , order=0, oom_score_adj=0 [ 982.492678] ? selinux_file_mprotect+0x5d0/0x5d0 [ 982.492689] ? lock_downgrade+0x740/0x740 [ 982.492700] ? ioctl_preallocate+0x1c0/0x1c0 [ 982.492712] ? __fget+0x237/0x370 [ 982.492728] ? security_file_ioctl+0x7d/0xb0 [ 982.492735] ? security_file_ioctl+0x89/0xb0 [ 982.492745] SyS_ioctl+0x8f/0xc0 [ 982.492754] ? do_vfs_ioctl+0x1060/0x1060 [ 982.498819] syz-execprog cpuset= [ 982.501313] do_syscall_64+0x1e8/0x640 [ 982.501347] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 982.501362] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 982.501368] RIP: 0033:0x45af49 [ 982.501372] RSP: 002b:00007f361d0a8c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 982.501381] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045af49 [ 982.501385] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 982.501390] RBP: 000000000075c070 R08: 0000000000000000 R09: 0000000000000000 [ 982.501395] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f361d0a96d4 [ 982.501399] R13: 00000000004c41b2 R14: 00000000004da748 R15: 00000000ffffffff [ 982.525441] Mem-Info: [ 982.538518] / [ 982.570103] active_anon:6155 inactive_anon:188 isolated_anon:0 [ 982.570103] active_file:31 inactive_file:129 isolated_file:9 [ 982.570103] unevictable:0 dirty:3 writeback:0 unstable:0 [ 982.570103] slab_reclaimable:11618 slab_unreclaimable:101964 [ 982.570103] mapped:65 shmem:242 pagetables:406 bounce:0 [ 982.570103] free:31483 free_pcp:351 free_cma:0 [ 982.620144] mems_allowed=0-1 [ 982.723154] CPU: 0 PID: 7176 Comm: syz-execprog Not tainted 4.14.162-syzkaller #0 [ 982.730789] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 982.737894] Node 0 active_anon:24600kB inactive_anon:752kB active_file:320kB inactive_file:692kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:660kB dirty:12kB writeback:0kB shmem:968kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 4096kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 982.740147] Call Trace: [ 982.740166] dump_stack+0x142/0x197 [ 982.740187] dump_header+0x177/0x6cd [ 982.740198] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 982.782563] ? ___ratelimit+0x55/0x537 [ 982.786455] oom_kill_process.cold+0x10/0xadd [ 982.790952] ? oom_unkillable_task+0x294/0x390 [ 982.795538] ? lock_downgrade+0x740/0x740 [ 982.799687] out_of_memory+0x2ee/0x1180 [ 982.803661] ? lock_acquire+0x16f/0x430 [ 982.807637] ? oom_killer_disable+0x1d0/0x1d0 [ 982.812130] ? __alloc_pages_slowpath+0xca4/0x2930 [ 982.817060] __alloc_pages_slowpath+0x2251/0x2930 [ 982.821908] ? __alloc_pages_nodemask+0x639/0x7a0 [ 982.826752] ? warn_alloc+0xf0/0xf0 [ 982.828987] Node 1 active_anon:20kB inactive_anon:0kB active_file:4kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 982.830382] ? __might_sleep+0x93/0xb0 [ 982.830393] __alloc_pages_nodemask+0x62c/0x7a0 [ 982.830405] ? __alloc_pages_slowpath+0x2930/0x2930 [ 982.830415] ? lock_downgrade+0x740/0x740 [ 982.873860] alloc_pages_current+0xec/0x1e0 [ 982.878188] __page_cache_alloc+0x248/0x3e0 [ 982.882491] filemap_fault+0xcef/0x1de0 [ 982.886447] ? radix_tree_next_chunk+0x43e/0x9a0 [ 982.891200] ? __lock_page_or_retry+0x8d0/0x8d0 [ 982.895865] ? lock_acquire+0x16f/0x430 [ 982.899831] ? ext4_filemap_fault+0x7b/0xb0 [ 982.904140] ext4_filemap_fault+0x83/0xb0 [ 982.908272] __do_fault+0x104/0x390 [ 982.911894] __handle_mm_fault+0x23bd/0x33d0 [ 982.916284] ? copy_page_range+0x1de0/0x1de0 [ 982.920675] ? find_held_lock+0x35/0x130 [ 982.924714] ? handle_mm_fault+0x1b6/0x7c0 [ 982.928934] handle_mm_fault+0x293/0x7c0 [ 982.932996] __do_page_fault+0x4c1/0xb80 [ 982.937041] ? vmalloc_fault+0xe30/0xe30 [ 982.941083] ? page_fault+0x2f/0x50 [ 982.944697] do_page_fault+0x71/0x511 [ 982.948479] ? page_fault+0x2f/0x50 [ 982.952097] page_fault+0x45/0x50 [ 982.955532] RIP: 0033:0x4945ed [ 982.958701] RSP: 002b:000000c42002c638 EFLAGS: 00010206 [ 982.964044] RAX: 0000000000000000 RBX: 000000000042a97a RCX: 0000000000000000 [ 982.971304] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 000000c4202ef230 [ 982.978556] RBP: 000000c42002c678 R08: 0000000000000000 R09: 0000010824e6dc88 [ 982.985822] R10: 000405aed6800000 R11: 0000000000000001 R12: 000000c4202e2f50 [ 982.993087] R13: 0000000000000001 R14: 000000c42017cc60 R15: 0000000000000001 [ 983.024797] Node 0 DMA free:10616kB min:216kB low:268kB high:320kB active_anon:12kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 983.082755] lowmem_reserve[]: 0 2569 2569 2569 2569 [ 983.093557] Node 0 DMA32 free:38900kB min:36380kB low:45472kB high:54564kB active_anon:24504kB inactive_anon:752kB active_file:456kB inactive_file:2468kB unevictable:0kB writepending:0kB present:3129332kB managed:2634320kB mlocked:0kB kernel_stack:7040kB pagetables:1608kB bounce:0kB free_pcp:480kB local_pcp:224kB free_cma:0kB [ 983.131600] lowmem_reserve[]: 0 0 0 0 0 [ 983.143111] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 983.168680] lowmem_reserve[]: 0 0 0 0 0 [ 983.172797] Node 1 Normal free:51732kB min:53508kB low:66884kB high:80260kB active_anon:20kB inactive_anon:0kB active_file:4kB inactive_file:4kB unevictable:0kB writepending:0kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:32kB pagetables:16kB bounce:0kB free_pcp:36kB local_pcp:0kB free_cma:0kB [ 983.201981] lowmem_reserve[]: 0 0 0 0 0 [ 983.206453] Node 0 DMA: 6*4kB (UME) 4*8kB (M) 6*16kB (UME) 5*32kB (ME) 5*64kB (ME) 6*128kB (UME) 1*256kB (E) 1*512kB (E) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 10360kB [ 983.234555] Node 0 DMA32: 152*4kB (UME) 158*8kB (UEH) 58*16kB (UMEH) 137*32kB (UME) 113*64kB (UH) 26*128kB (UMH) 1*256kB (H) 1*512kB (H) 0*1024kB 0*2048kB 0*4096kB = 18512kB [ 983.234736] Mem-Info: [ 983.251407] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 983.257398] active_anon:6135 inactive_anon:188 isolated_anon:0 [ 983.257398] active_file:93 inactive_file:91 isolated_file:12 [ 983.257398] unevictable:0 dirty:1 writeback:0 unstable:0 [ 983.257398] slab_reclaimable:11636 slab_unreclaimable:101873 [ 983.257398] mapped:183 shmem:242 pagetables:397 bounce:0 [ 983.257398] free:13928 free_pcp:180 free_cma:0 [ 983.263847] Node 1 [ 983.297702] Node 0 active_anon:24520kB inactive_anon:752kB active_file:368kB inactive_file:360kB unevictable:0kB isolated(anon):0kB isolated(file):48kB mapped:732kB dirty:4kB writeback:0kB shmem:968kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 4096kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 983.301014] Normal: [ 983.328269] Node 1 active_anon:20kB inactive_anon:0kB active_file:4kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 983.328274] Node 0 DMA free:10376kB min:216kB low:268kB high:320kB active_anon:12kB inactive_anon:0kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 983.328299] lowmem_reserve[]: 0 2569 2569 2569 2569 [ 983.328320] Node 0 DMA32 free:19088kB min:36380kB low:45472kB high:54564kB active_anon:24508kB inactive_anon:752kB active_file:364kB inactive_file:360kB unevictable:0kB writepending:4kB present:3129332kB managed:2634320kB mlocked:0kB kernel_stack:7040kB pagetables:1572kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 983.328337] lowmem_reserve[]: 0 [ 983.330763] 2*4kB [ 983.363068] 0 [ 983.383251] (U) [ 983.390391] 0 [ 983.416568] 2*8kB [ 983.425391] 0 [ 983.425794] (U) [ 983.427592] 0 [ 983.429736] 4*16kB [ 983.433625] (UE) [ 983.435420] Node 0 [ 983.437656] 308*32kB [ 983.439725] Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 983.441985] (UE) 155*64kB (U) 23*128kB (U) 8*256kB (U) 4*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 26904kB [ 983.442030] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 983.442036] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 983.442041] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 983.442046] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 983.442051] 477 total pagecache pages [ 983.448543] lowmem_reserve[]: [ 983.469147] 0 pages in swap cache [ 983.469153] Swap cache stats: add 0, delete 0, find 0/0 [ 983.469157] Free swap = 0kB [ 983.469160] Total swap = 0kB [ 983.469168] 1965979 pages RAM [ 983.469174] 0 pages HighMem/MovableOnly [ 983.483659] 0 [ 983.487673] 335874 pages reserved [ 983.496995] 0 [ 983.505325] 0 pages cma reserved [ 983.514440] 0 [ 983.530425] ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb [ 983.533459] 0 [ 983.536299] ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb [ 983.539370] 0 [ 983.543393] ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb [ 983.557104] Node 1 [ 983.562148] ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb [ 983.570470] Normal free:26756kB min:53508kB low:66884kB high:80260kB active_anon:20kB inactive_anon:0kB active_file:4kB inactive_file:4kB unevictable:0kB writepending:0kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:32kB pagetables:16kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 983.572291] ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb [ 983.578693] lowmem_reserve[]: [ 983.580981] ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb [ 983.600257] 0 [ 983.614415] ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb [ 983.614598] ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb [ 983.668192] 0 0 0 0 [ 983.672669] Node 0 DMA: 6*4kB (UME) 4*8kB (M) 6*16kB (UME) 5*32kB (ME) 5*64kB (ME) 6*128kB (UME) 1*256kB (E) 1*512kB (E) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 10360kB [ 983.693387] Node 0 DMA32: 131*4kB (UME) 144*8kB (UE) 50*16kB (UMEH) 131*32kB (UME) 115*64kB (UH) 26*128kB (UMH) 1*256kB (H) 1*512kB (H) 0*1024kB 0*2048kB 0*4096kB = 18124kB [ 983.716279] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 983.727223] Node 1 Normal: 0*4kB 1*8kB (U) 3*16kB (UE) 305*32kB (UE) 155*64kB (U) 23*128kB (U) 8*256kB (U) 4*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 26776kB [ 983.744948] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 983.758183] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 983.768810] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 983.777875] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 983.788305] 274 total pagecache pages [ 983.793144] 0 pages in swap cache [ 983.796596] Swap cache stats: add 0, delete 0, find 0/0 [ 983.803803] Free swap = 0kB [ 983.806820] Total swap = 0kB [ 983.809832] 1965979 pages RAM [ 983.814823] 0 pages HighMem/MovableOnly [ 983.818826] 335874 pages reserved [ 983.825886] 0 pages cma reserved [ 983.829282] Out of memory: Kill process 7411 (syz-executor.4) score 999 or sacrifice child [ 983.839593] Killed process 7414 (syz-executor.4) total-vm:38036kB, anon-rss:124kB, file-rss:0kB, shmem-rss:0kB [ 983.877272] oom_reaper: reaped process 7414 (syz-executor.4), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 983.904915] ion_system_heap invoked oom-killer: gfp_mask=0x14080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null), order=0, oom_score_adj=0 [ 983.917391] ion_system_heap cpuset=/ mems_allowed=0-1 [ 983.922824] syz-executor.5: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 983.930090] syz-executor.5: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 983.939303] syz-executor.5 cpuset=syz5 mems_allowed=0-1 [ 983.957274] CPU: 1 PID: 7410 Comm: syz-executor.5 Not tainted 4.14.162-syzkaller #0 [ 983.959913] syz-executor.4: [ 983.965068] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 983.965072] Call Trace: [ 983.965086] dump_stack+0x142/0x197 [ 983.965100] warn_alloc.cold+0x96/0x1af [ 983.965108] ? zone_watermark_ok_safe+0x2b0/0x2b0 [ 983.965117] ? trace_hardirqs_on_caller+0x400/0x590 [ 983.965139] ? call_timer_fn+0x670/0x670 [ 983.968668] page allocation failure: order:0 [ 983.977485] __alloc_pages_slowpath+0x23c6/0x2930 [ 983.977507] ? warn_alloc+0xf0/0xf0 [ 983.980083] syz-executor.5 cpuset= [ 983.983684] ? __might_sleep+0x93/0xb0 [ 983.987644] syz5 [ 983.992491] __alloc_pages_nodemask+0x62c/0x7a0 [ 983.997515] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 984.001547] ? lock_downgrade+0x740/0x740 [ 984.001557] ? __alloc_pages_slowpath+0x2930/0x2930 [ 984.001567] ? save_trace+0x290/0x290 [ 984.005950] (null) [ 984.010799] alloc_pages_current+0xec/0x1e0 [ 984.010810] ion_page_pool_alloc+0x11f/0x1c0 [ 984.010819] ion_system_heap_allocate+0x138/0x910 [ 984.014428] mems_allowed=0-1 [ 984.017945] ? ion_alloc+0x19b/0x860 [ 984.021831] syz-executor.4 cpuset= [ 984.023772] ? rcu_read_lock_sched_held+0x110/0x130 [ 984.028426] syz4 [ 984.035520] ? ion_system_heap_free+0x250/0x250 [ 984.060058] mems_allowed=0-1 [ 984.064198] ion_alloc+0x222/0x860 [ 984.092704] ? ion_dma_buf_release+0x50/0x50 [ 984.097101] ? kasan_check_write+0x14/0x20 [ 984.101322] ? _copy_from_user+0x99/0x110 [ 984.105540] ion_ioctl+0x105/0x217 [ 984.109082] ? ion_alloc.cold+0x40/0x40 [ 984.113048] ? ion_alloc.cold+0x40/0x40 [ 984.117007] do_vfs_ioctl+0x7ae/0x1060 [ 984.120877] ? selinux_file_mprotect+0x5d0/0x5d0 [ 984.125614] ? lock_downgrade+0x740/0x740 [ 984.129748] ? ioctl_preallocate+0x1c0/0x1c0 [ 984.134143] ? __fget+0x237/0x370 [ 984.137589] ? security_file_ioctl+0x7d/0xb0 [ 984.141990] ? security_file_ioctl+0x89/0xb0 [ 984.146400] SyS_ioctl+0x8f/0xc0 [ 984.149751] ? do_vfs_ioctl+0x1060/0x1060 [ 984.153883] do_syscall_64+0x1e8/0x640 [ 984.157755] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 984.162584] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 984.167755] RIP: 0033:0x45af49 [ 984.170928] RSP: 002b:00007f7f21a93c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 984.178616] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045af49 [ 984.185867] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 984.193120] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 984.200371] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7f21a946d4 [ 984.207629] R13: 00000000004c41b2 R14: 00000000004da748 R15: 00000000ffffffff [ 984.214896] CPU: 0 PID: 7417 Comm: syz-executor.5 Not tainted 4.14.162-syzkaller #0 [ 984.215846] ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb [ 984.222687] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 984.222691] Call Trace: [ 984.222705] dump_stack+0x142/0x197 [ 984.222717] warn_alloc.cold+0x96/0x1af [ 984.222726] ? zone_watermark_ok_safe+0x2b0/0x2b0 [ 984.229241] ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb [ 984.238558] ? trace_hardirqs_on_caller+0x400/0x590 [ 984.238567] ? call_timer_fn+0x670/0x670 [ 984.238585] __alloc_pages_slowpath+0x23c6/0x2930 [ 984.260092] warn_alloc_show_mem: 1 callbacks suppressed [ 984.260095] Mem-Info: [ 984.265071] ? warn_alloc+0xf0/0xf0 [ 984.269115] active_anon:6113 inactive_anon:188 isolated_anon:0 [ 984.269115] active_file:8 inactive_file:9 isolated_file:15 [ 984.269115] unevictable:0 dirty:6 writeback:0 unstable:0 [ 984.269115] slab_reclaimable:11638 slab_unreclaimable:101868 [ 984.269115] mapped:2 shmem:242 pagetables:397 bounce:0 [ 984.269115] free:13781 free_pcp:50 free_cma:0 [ 984.273940] ? __might_sleep+0x93/0xb0 [ 984.273950] __alloc_pages_nodemask+0x62c/0x7a0 [ 984.273960] ? lock_downgrade+0x740/0x740 [ 984.273969] ? __alloc_pages_slowpath+0x2930/0x2930 [ 984.273986] alloc_pages_current+0xec/0x1e0 [ 984.273998] ion_page_pool_alloc+0x11f/0x1c0 [ 984.274005] ion_system_heap_allocate+0x138/0x910 [ 984.274012] ? ion_alloc+0x19b/0x860 [ 984.274023] ? rcu_read_lock_sched_held+0x110/0x130 [ 984.290095] Node 0 active_anon:24432kB inactive_anon:752kB active_file:28kB inactive_file:32kB unevictable:0kB isolated(anon):0kB isolated(file):60kB mapped:8kB dirty:16kB writeback:0kB shmem:968kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 4096kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 984.318073] ? ion_system_heap_free+0x250/0x250 [ 984.318087] ion_alloc+0x222/0x860 [ 984.318100] ? ion_dma_buf_release+0x50/0x50 [ 984.318113] ? kasan_check_write+0x14/0x20 [ 984.318123] ? _copy_from_user+0x99/0x110 [ 984.318132] ion_ioctl+0x105/0x217 [ 984.318140] ? ion_alloc.cold+0x40/0x40 [ 984.318152] ? ion_alloc.cold+0x40/0x40 [ 984.318160] do_vfs_ioctl+0x7ae/0x1060 [ 984.318170] ? selinux_file_mprotect+0x5d0/0x5d0 [ 984.318178] ? lock_downgrade+0x740/0x740 [ 984.318188] ? ioctl_preallocate+0x1c0/0x1c0 [ 984.363897] Node 1 active_anon:20kB inactive_anon:0kB active_file:4kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:8kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 984.384907] ? __fget+0x237/0x370 [ 984.384923] ? security_file_ioctl+0x7d/0xb0 [ 984.384930] ? security_file_ioctl+0x89/0xb0 [ 984.384941] SyS_ioctl+0x8f/0xc0 [ 984.384949] ? do_vfs_ioctl+0x1060/0x1060 [ 984.384960] do_syscall_64+0x1e8/0x640 [ 984.384967] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 984.384981] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 984.384987] RIP: 0033:0x45af49 [ 984.384994] RSP: 002b:00007f7f21a51c78 EFLAGS: 00000246 [ 984.410049] Node 0 [ 984.413347] ORIG_RAX: 0000000000000010 [ 984.417314] DMA free:10360kB min:216kB low:268kB high:320kB active_anon:12kB inactive_anon:0kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:4kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 984.421172] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045af49 [ 984.421177] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 984.421181] RBP: 000000000075c070 R08: 0000000000000000 R09: 0000000000000000 [ 984.421185] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7f21a526d4 [ 984.421190] R13: 00000000004c41b2 R14: 00000000004da748 R15: 00000000ffffffff [ 984.535115] CPU: 0 PID: 7418 Comm: syz-executor.4 Not tainted 4.14.162-syzkaller #0 [ 984.578919] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 984.588274] Call Trace: [ 984.590864] dump_stack+0x142/0x197 [ 984.594490] warn_alloc.cold+0x96/0x1af [ 984.598460] ? zone_watermark_ok_safe+0x2b0/0x2b0 [ 984.603246] lowmem_reserve[]: [ 984.603295] ? trace_hardirqs_on_caller+0x400/0x590 [ 984.603297] 0 2569 [ 984.606386] ? call_timer_fn+0x670/0x670 [ 984.611431] 2569 [ 984.613628] __alloc_pages_slowpath+0x23c6/0x2930 [ 984.617668] 2569 [ 984.619729] ? warn_alloc+0xf0/0xf0 [ 984.624557] 2569 [ 984.626593] ? __might_sleep+0x93/0xb0 [ 984.632239] __alloc_pages_nodemask+0x62c/0x7a0 [ 984.636115] Node 0 [ 984.640768] ? lock_downgrade+0x740/0x740 [ 984.640778] ? __alloc_pages_slowpath+0x2930/0x2930 [ 984.640797] alloc_pages_current+0xec/0x1e0 [ 984.643017] DMA32 free:18024kB min:36380kB low:45472kB high:54564kB active_anon:24420kB inactive_anon:752kB active_file:28kB inactive_file:32kB unevictable:0kB writepending:8kB present:3129332kB managed:2634320kB mlocked:0kB kernel_stack:7040kB pagetables:1572kB bounce:0kB free_pcp:792kB local_pcp:120kB free_cma:0kB [ 984.647153] ion_page_pool_alloc+0x11f/0x1c0 [ 984.652191] lowmem_reserve[]: [ 984.656451] ion_system_heap_allocate+0x138/0x910 [ 984.684884] 0 [ 984.688932] ? ion_alloc+0x19b/0x860 [ 984.692034] 0 [ 984.696845] ? rcu_read_lock_sched_held+0x110/0x130 [ 984.698618] 0 [ 984.702330] ? ion_system_heap_free+0x250/0x250 [ 984.702343] ion_alloc+0x222/0x860 [ 984.702357] ? ion_dma_buf_release+0x50/0x50 [ 984.702370] ? kasan_check_write+0x14/0x20 [ 984.702379] ? _copy_from_user+0x99/0x110 [ 984.702389] ion_ioctl+0x105/0x217 [ 984.702397] ? ion_alloc.cold+0x40/0x40 [ 984.702409] ? ion_alloc.cold+0x40/0x40 [ 984.705154] 0 [ 984.709212] do_vfs_ioctl+0x7ae/0x1060 [ 984.711029] 0 [ 984.715657] ? selinux_file_mprotect+0x5d0/0x5d0 [ 984.723587] ? lock_downgrade+0x740/0x740 [ 984.723598] ? ioctl_preallocate+0x1c0/0x1c0 [ 984.723609] ? __fget+0x237/0x370 [ 984.723621] ? security_file_ioctl+0x7d/0xb0 [ 984.723629] ? security_file_ioctl+0x89/0xb0 [ 984.723639] SyS_ioctl+0x8f/0xc0 [ 984.723647] ? do_vfs_ioctl+0x1060/0x1060 [ 984.723658] do_syscall_64+0x1e8/0x640 [ 984.723665] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 984.723678] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 984.723684] RIP: 0033:0x45af49 [ 984.723688] RSP: 002b:00007f361d0a8c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 984.723696] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045af49 [ 984.723701] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 984.723705] RBP: 000000000075c070 R08: 0000000000000000 R09: 0000000000000000 [ 984.723710] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f361d0a96d4 [ 984.723714] R13: 00000000004c41b2 R14: 00000000004da748 R15: 00000000ffffffff [ 984.744417] CPU: 0 PID: 3203 Comm: ion_system_heap Not tainted 4.14.162-syzkaller #0 [ 984.745768] Node 0 [ 984.749385] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 984.751323] Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 984.755906] Call Trace: [ 984.760092] lowmem_reserve[]: [ 984.764434] dump_stack+0x142/0x197 [ 984.767853] 0 [ 984.772264] dump_header+0x177/0x6cd [ 984.772274] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 984.772282] ? ___ratelimit+0x55/0x537 [ 984.772294] oom_kill_process.cold+0x10/0xadd [ 984.776674] 0 [ 984.780030] ? oom_unkillable_task+0x294/0x390 [ 984.780042] ? lock_downgrade+0x740/0x740 [ 984.780054] out_of_memory+0x2ee/0x1180 [ 984.780061] ? lock_acquire+0x16f/0x430 [ 984.780074] ? oom_killer_disable+0x1d0/0x1d0 [ 984.780083] ? __alloc_pages_slowpath+0xca4/0x2930 [ 984.784206] 0 [ 984.788076] __alloc_pages_slowpath+0x2251/0x2930 [ 984.792940] 0 [ 984.798120] ? warn_alloc+0xf0/0xf0 [ 984.802792] 0 [ 984.809008] ? __might_sleep+0x93/0xb0 [ 984.823540] __alloc_pages_nodemask+0x62c/0x7a0 [ 984.823551] ? __alloc_pages_slowpath+0x2930/0x2930 [ 984.823569] alloc_pages_current+0xec/0x1e0 [ 984.823578] __get_free_pages+0xf/0x40 [ 984.823640] pte_alloc_one_kernel+0x15/0x20 [ 984.823650] __pte_alloc_kernel+0x23/0x210 [ 984.831156] Node 1 [ 984.838173] vmap_page_range_noflush+0x677/0x850 [ 984.845506] Normal free:26668kB min:53508kB low:66884kB high:80260kB active_anon:20kB inactive_anon:0kB active_file:4kB inactive_file:4kB unevictable:0kB writepending:8kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:32kB pagetables:16kB bounce:0kB free_pcp:792kB local_pcp:120kB free_cma:0kB [ 984.853301] ? free_vmap_block+0x100/0x100 [ 984.853310] ? do_raw_spin_unlock+0x16b/0x260 [ 984.853320] vm_map_ram+0x2d0/0xb10 [ 984.855532] lowmem_reserve[]: [ 984.864882] ion_heap_clear_pages+0x2b/0x70 [ 984.864892] ion_heap_sglist_zero+0x188/0x240 [ 984.864902] ? ion_heap_deferred_free+0x4f0/0x4f0 [ 984.864912] ? trace_hardirqs_on+0x10/0x10 [ 984.864937] ? ion_heap_deferred_free+0x25b/0x4f0 [ 984.889752] 0 [ 984.892252] ? find_held_lock+0x35/0x130 [ 984.892267] ion_heap_buffer_zero+0xc1/0x110 [ 984.892276] ion_system_heap_free+0x1d0/0x250 [ 984.895359] 0 [ 984.898983] ? lock_downgrade+0x740/0x740 [ 984.900823] 0 [ 984.904482] ion_buffer_destroy+0x13a/0x190 [ 984.909555] 0 [ 984.913440] ion_heap_deferred_free+0x263/0x4f0 [ 984.913452] ? __schedule+0x757/0x1cd0 [ 984.913462] ? ion_heap_shrink_scan+0x1b0/0x1b0 [ 984.913469] ? __kthread_parkme+0x117/0x1c0 [ 984.913478] ? finish_wait+0x260/0x260 [ 984.917949] 0 [ 984.919746] kthread+0x319/0x430 [ 984.928460] ? ion_heap_shrink_scan+0x1b0/0x1b0 [ 984.932428] Node 0 [ 984.936366] ? kthread_create_on_node+0xd0/0xd0 [ 984.940869] DMA: [ 984.945755] ret_from_fork+0x24/0x30 [ 984.947533] 22*4kB [ 984.972689] Mem-Info: [ 984.975007] (UME) [ 984.977547] active_anon:6113 inactive_anon:188 isolated_anon:0 [ 984.977547] active_file:8 inactive_file:9 isolated_file:15 [ 984.977547] unevictable:0 dirty:6 writeback:0 unstable:0 [ 984.977547] slab_reclaimable:11638 slab_unreclaimable:101872 [ 984.977547] mapped:2 shmem:242 pagetables:397 bounce:0 [ 984.977547] free:13764 free_pcp:58 free_cma:0 [ 984.981421] 5*8kB (UM) 7*16kB (UME) 5*32kB (ME) 6*64kB (UME) 5*128kB (ME) 1*256kB (E) 1*512kB (E) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 10384kB [ 984.981481] Node 0 DMA32: 133*4kB (UME) 152*8kB (UEH) 166*16kB (UMEH) 430*32kB (UMEH) 1*64kB (U) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB [ 984.989472] Node 0 active_anon:24432kB inactive_anon:752kB active_file:28kB inactive_file:32kB unevictable:0kB isolated(anon):0kB isolated(file):60kB mapped:8kB dirty:16kB writeback:0kB shmem:968kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 4096kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 984.990109] = 18228kB [ 984.992357] Node 1 active_anon:20kB inactive_anon:0kB active_file:4kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:8kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 984.997067] Node 0 [ 985.028078] Node 0 [ 985.028793] Normal: [ 985.033302] DMA free:10384kB min:216kB low:268kB high:320kB active_anon:12kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 985.036916] 0*4kB [ 985.039995] lowmem_reserve[]: 0 [ 985.044791] 0*8kB [ 985.052533] 2569 [ 985.053816] 0*16kB [ 985.057967] 2569 [ 985.062810] 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 985.062845] Node 1 [ 985.068214] 2569 [ 985.068673] Normal: 0*4kB [ 985.073153] 2569 [ 985.077595] 0*8kB 656*16kB [ 985.083582] (UE) 507*32kB (UE) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 26720kB [ 985.083623] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 985.083630] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 985.083635] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 985.083641] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 985.083645] 274 total pagecache pages [ 985.083655] 0 pages in swap cache [ 985.083660] Swap cache stats: add 0, delete 0, find 0/0 [ 985.083669] Free swap = 0kB [ 985.083672] Total swap = 0kB [ 985.083679] 1965979 pages RAM [ 985.083682] 0 pages HighMem/MovableOnly [ 985.083685] 335874 pages reserved [ 985.083688] 0 pages cma reserved [ 985.088674] syz-executor.5: [ 985.091690] syz-executor.4: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 985.091713] syz-executor.4 cpuset= [ 985.110558] page allocation failure: order:4 [ 985.120169] syz4 [ 985.132628] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 985.136389] syz-executor.5: [ 985.145297] (null) [ 985.187862] mems_allowed=0-1 [ 985.217086] syz-executor.5 cpuset= [ 985.245089] Node 0 [ 985.257767] syz-executor.4: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 985.257788] syz-executor.4 cpuset=syz4 mems_allowed=0-1 [ 985.257810] CPU: 1 PID: 7414 Comm: syz-executor.4 Not tainted 4.14.162-syzkaller #0 [ 985.257815] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 985.257818] Call Trace: [ 985.257834] dump_stack+0x142/0x197 [ 985.257847] warn_alloc.cold+0x96/0x1af [ 985.257855] ? zone_watermark_ok_safe+0x2b0/0x2b0 [ 985.257864] ? trace_hardirqs_on_caller+0x400/0x590 [ 985.257874] ? call_timer_fn+0x670/0x670 [ 985.276368] page allocation failure: order:4 [ 985.290245] __alloc_pages_slowpath+0x23c6/0x2930 [ 985.290266] ? warn_alloc+0xf0/0xf0 [ 985.292410] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 985.295683] ? __might_sleep+0x93/0xb0 [ 985.297797] (null) [ 985.299859] __alloc_pages_nodemask+0x62c/0x7a0 [ 985.310034] syz-executor.5 cpuset= [ 985.311815] ? lock_downgrade+0x740/0x740 [ 985.314025] syz5 [ 985.316088] ? __alloc_pages_slowpath+0x2930/0x2930 [ 985.318908] mems_allowed=0-1 [ 985.552131] ? policy_node+0xa5/0x110 [ 985.555918] alloc_pages_current+0xec/0x1e0 [ 985.560226] ion_page_pool_alloc+0x11f/0x1c0 [ 985.564613] ion_system_heap_allocate+0x138/0x910 [ 985.569441] ? ion_alloc+0x19b/0x860 [ 985.573137] ? rcu_read_lock_sched_held+0x110/0x130 [ 985.578137] ? ion_system_heap_free+0x250/0x250 [ 985.582792] ion_alloc+0x222/0x860 [ 985.586318] ? ion_dma_buf_release+0x50/0x50 [ 985.590711] ? kasan_check_write+0x14/0x20 [ 985.594927] ? _copy_from_user+0x99/0x110 [ 985.599057] ion_ioctl+0x105/0x217 [ 985.602580] ? ion_alloc.cold+0x40/0x40 [ 985.606538] ? ion_alloc.cold+0x40/0x40 [ 985.610497] do_vfs_ioctl+0x7ae/0x1060 [ 985.614379] ? selinux_file_mprotect+0x5d0/0x5d0 [ 985.619118] ? lock_downgrade+0x740/0x740 [ 985.623253] ? ioctl_preallocate+0x1c0/0x1c0 [ 985.627648] ? __fget+0x237/0x370 [ 985.631088] ? security_file_ioctl+0x7d/0xb0 [ 985.635476] ? security_file_ioctl+0x89/0xb0 [ 985.639868] SyS_ioctl+0x8f/0xc0 [ 985.643217] ? do_vfs_ioctl+0x1060/0x1060 [ 985.647348] do_syscall_64+0x1e8/0x640 [ 985.651230] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 985.656060] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 985.661238] RIP: 0033:0x45af49 [ 985.664409] RSP: 002b:00007f361d0eac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 985.672098] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045af49 [ 985.679350] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 985.686600] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 985.693854] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f361d0eb6d4 [ 985.701105] R13: 00000000004c41b2 R14: 00000000004da748 R15: 00000000ffffffff [ 985.708372] CPU: 0 PID: 7418 Comm: syz-executor.4 Not tainted 4.14.162-syzkaller #0 [ 985.710937] syz5 [ 985.716170] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 985.716180] mems_allowed=0-1 [ 985.718142] Call Trace: [ 985.733195] dump_stack+0x142/0x197 [ 985.736816] warn_alloc.cold+0x96/0x1af [ 985.740789] ? zone_watermark_ok_safe+0x2b0/0x2b0 [ 985.745622] ? __alloc_pages_direct_compact+0xbc/0x380 [ 985.750896] __alloc_pages_slowpath+0x23c6/0x2930 [ 985.755737] ? save_trace+0x290/0x290 [ 985.759527] ? warn_alloc+0xf0/0xf0 [ 985.763151] ? __might_sleep+0x93/0xb0 [ 985.767043] __alloc_pages_nodemask+0x62c/0x7a0 [ 985.771719] ? lock_downgrade+0x740/0x740 [ 985.775952] ? __alloc_pages_slowpath+0x2930/0x2930 [ 985.780961] alloc_pages_current+0xec/0x1e0 [ 985.785270] ion_page_pool_alloc+0x11f/0x1c0 [ 985.789661] ion_system_heap_allocate+0x138/0x910 [ 985.794506] ? ion_system_heap_free+0x250/0x250 [ 985.799164] ion_alloc+0x68c/0x860 [ 985.802693] ? ion_dma_buf_release+0x50/0x50 [ 985.807089] ? kasan_check_write+0x14/0x20 [ 985.811315] ? _copy_from_user+0x99/0x110 [ 985.815455] ion_ioctl+0x105/0x217 [ 985.818981] ? ion_alloc.cold+0x40/0x40 [ 985.822950] ? ion_alloc.cold+0x40/0x40 [ 985.826906] do_vfs_ioctl+0x7ae/0x1060 [ 985.830783] ? selinux_file_mprotect+0x5d0/0x5d0 [ 985.835544] ? lock_downgrade+0x740/0x740 [ 985.839679] ? ioctl_preallocate+0x1c0/0x1c0 [ 985.844072] ? __fget+0x237/0x370 [ 985.847511] ? security_file_ioctl+0x7d/0xb0 [ 985.851903] ? security_file_ioctl+0x89/0xb0 [ 985.856308] SyS_ioctl+0x8f/0xc0 [ 985.859657] ? do_vfs_ioctl+0x1060/0x1060 [ 985.863807] do_syscall_64+0x1e8/0x640 [ 985.867676] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 985.872613] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 985.877783] RIP: 0033:0x45af49 [ 985.880954] RSP: 002b:00007f361d0a8c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 985.888643] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045af49 [ 985.895895] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 985.903147] RBP: 000000000075c070 R08: 0000000000000000 R09: 0000000000000000 [ 985.910406] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f361d0a96d4 [ 985.917662] R13: 00000000004c41b2 R14: 00000000004da748 R15: 00000000ffffffff [ 985.925229] CPU: 1 PID: 7410 Comm: syz-executor.5 Not tainted 4.14.162-syzkaller #0 [ 985.933031] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 985.942380] Call Trace: [ 985.944962] dump_stack+0x142/0x197 [ 985.948574] warn_alloc.cold+0x96/0x1af [ 985.952532] ? zone_watermark_ok_safe+0x2b0/0x2b0 [ 985.957379] ? __alloc_pages_direct_compact+0xbc/0x380 [ 985.962652] __alloc_pages_slowpath+0x23c6/0x2930 [ 985.967484] ? save_trace+0x290/0x290 [ 985.971274] ? warn_alloc+0xf0/0xf0 [ 985.974908] ? __might_sleep+0x93/0xb0 [ 985.978784] __alloc_pages_nodemask+0x62c/0x7a0 [ 985.983443] ? lock_downgrade+0x740/0x740 [ 985.987593] ? __alloc_pages_slowpath+0x2930/0x2930 [ 985.992610] alloc_pages_current+0xec/0x1e0 [ 985.996923] ion_page_pool_alloc+0x11f/0x1c0 [ 986.001318] ion_system_heap_allocate+0x138/0x910 [ 986.006147] ? ion_system_heap_free+0x250/0x250 [ 986.010802] ion_alloc+0x68c/0x860 [ 986.014327] ? ion_dma_buf_release+0x50/0x50 [ 986.018719] ? kasan_check_write+0x14/0x20 [ 986.022939] ? _copy_from_user+0x99/0x110 [ 986.027085] ion_ioctl+0x105/0x217 [ 986.030615] ? ion_alloc.cold+0x40/0x40 [ 986.034575] ? ion_alloc.cold+0x40/0x40 [ 986.038532] do_vfs_ioctl+0x7ae/0x1060 [ 986.042400] ? selinux_file_mprotect+0x5d0/0x5d0 [ 986.047153] ? lock_downgrade+0x740/0x740 [ 986.051285] ? ioctl_preallocate+0x1c0/0x1c0 [ 986.055678] ? __fget+0x237/0x370 [ 986.059119] ? security_file_ioctl+0x7d/0xb0 [ 986.063508] ? security_file_ioctl+0x89/0xb0 [ 986.067899] SyS_ioctl+0x8f/0xc0 [ 986.071262] ? do_vfs_ioctl+0x1060/0x1060 [ 986.075401] do_syscall_64+0x1e8/0x640 [ 986.079269] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 986.084100] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 986.089303] RIP: 0033:0x45af49 [ 986.092481] RSP: 002b:00007f7f21a93c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 986.100175] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045af49 [ 986.107443] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 986.114709] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 986.121979] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7f21a946d4 [ 986.129246] R13: 00000000004c41b2 R14: 00000000004da748 R15: 00000000ffffffff [ 986.136516] CPU: 0 PID: 7417 Comm: syz-executor.5 Not tainted 4.14.162-syzkaller #0 [ 986.144313] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 986.148050] warn_alloc_show_mem: 2 callbacks suppressed [ 986.148053] Mem-Info: [ 986.153660] Call Trace: [ 986.153677] dump_stack+0x142/0x197 [ 986.153690] warn_alloc.cold+0x96/0x1af [ 986.153698] ? zone_watermark_ok_safe+0x2b0/0x2b0 [ 986.153714] ? __alloc_pages_direct_compact+0xbc/0x380 [ 986.153724] __alloc_pages_slowpath+0x23c6/0x2930 [ 986.159097] active_anon:6113 inactive_anon:188 isolated_anon:0 [ 986.159097] active_file:24 inactive_file:8 isolated_file:0 [ 986.159097] unevictable:0 dirty:4 writeback:0 unstable:0 [ 986.159097] slab_reclaimable:11637 slab_unreclaimable:101876 [ 986.159097] mapped:2 shmem:242 pagetables:397 bounce:0 [ 986.159097] free:13860 free_pcp:0 free_cma:0 [ 986.161496] ? save_trace+0x290/0x290 [ 986.161509] ? warn_alloc+0xf0/0xf0 [ 986.161526] ? __might_sleep+0x93/0xb0 [ 986.161537] __alloc_pages_nodemask+0x62c/0x7a0 [ 986.161546] ? lock_downgrade+0x740/0x740 [ 986.190107] Node 0 active_anon:24432kB inactive_anon:752kB active_file:92kB inactive_file:28kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:8kB dirty:8kB writeback:0kB shmem:968kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 4096kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 986.218824] ? __alloc_pages_slowpath+0x2930/0x2930 [ 986.218842] alloc_pages_current+0xec/0x1e0 [ 986.218854] ion_page_pool_alloc+0x11f/0x1c0 [ 986.218863] ion_system_heap_allocate+0x138/0x910 [ 986.218875] ? ion_system_heap_free+0x250/0x250 [ 986.218888] ion_alloc+0x68c/0x860 [ 986.280083] Node 1 active_anon:20kB inactive_anon:0kB active_file:4kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:8kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 986.284180] ? ion_dma_buf_release+0x50/0x50 [ 986.288824] Node 0 [ 986.292358] ? kasan_check_write+0x14/0x20 [ 986.292369] ? _copy_from_user+0x99/0x110 [ 986.292378] ion_ioctl+0x105/0x217 [ 986.292387] ? ion_alloc.cold+0x40/0x40 [ 986.292398] ? ion_alloc.cold+0x40/0x40 [ 986.292409] do_vfs_ioctl+0x7ae/0x1060 [ 986.348454] ? selinux_file_mprotect+0x5d0/0x5d0 [ 986.353210] ? lock_downgrade+0x740/0x740 [ 986.357357] ? ioctl_preallocate+0x1c0/0x1c0 [ 986.361765] ? __fget+0x237/0x370 [ 986.365221] ? security_file_ioctl+0x7d/0xb0 [ 986.369620] ? security_file_ioctl+0x89/0xb0 [ 986.374031] SyS_ioctl+0x8f/0xc0 [ 986.377393] ? do_vfs_ioctl+0x1060/0x1060 [ 986.380101] DMA free:10384kB min:216kB low:268kB high:320kB active_anon:12kB inactive_anon:0kB active_file:0kB inactive_file:12kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 986.381535] do_syscall_64+0x1e8/0x640 [ 986.411091] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 986.415945] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 986.421133] RIP: 0033:0x45af49 [ 986.424313] RSP: 002b:00007f7f21a51c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 986.432118] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045af49 [ 986.439385] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 986.446651] RBP: 000000000075c070 R08: 0000000000000000 R09: 0000000000000000 [ 986.453938] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7f21a526d4 [ 986.461202] R13: 00000000004c41b2 R14: 00000000004da748 R15: 00000000ffffffff [ 986.475996] lowmem_reserve[]: 0 2569 2569 2569 2569 [ 986.477906] DMA32 free:130964kB min:36380kB low:45472kB high:54564kB active_anon:24420kB inactive_anon:752kB active_file:64kB inactive_file:1196kB unevictable:0kB writepending:8kB present:3129332kB managed:2634320kB mlocked:0kB kernel_stack:7040kB pagetables:1572kB bounce:0kB free_pcp:140kB local_pcp:256kB free_cma:0kB [ 986.510107] Node 0 DMA32 free:140264kB min:36380kB low:45472kB high:54564kB active_anon:24420kB inactive_anon:752kB active_file:64kB inactive_file:1196kB unevictable:0kB writepending:8kB present:3129332kB managed:2634320kB mlocked:0kB kernel_stack:7040kB pagetables:1572kB bounce:0kB free_pcp:876kB local_pcp:620kB free_cma:0kB [ 986.556678] lowmem_reserve[]: 0 0 0 0 0 2020/01/06 14:15:04 executed programs: 15 [ 986.569659] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 986.614576] lowmem_reserve[]: 0 0 0 0 0 2020/01/06 14:15:04 result: hanged=false err=executor 0: failed to write control pipe: write |1: broken pipe [ 986.618683] Node 1 Normal free:110888kB min:53508kB low:66884kB high:80260kB active_anon:20kB inactive_anon:0kB active_file:4kB inactive_file:4kB unevictable:0kB writepending:0kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:32kB pagetables:16kB bounce:0kB free_pcp:1328kB local_pcp:620kB free_cma:0kB [ 986.651765] lowmem_reserve[]: 0 0 0 0 0 [ 986.656381] Node 0 DMA: 22*4kB (UME) 5*8kB (UM) 7*16kB (UME) 5*32kB (ME) 6*64kB (UME) 5*128kB (ME) 1*256kB (E) 1*512kB (E) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 10384kB [ 986.676955] Node 0 DMA32: 3247*4kB (UME) 1053*8kB (UME) 699*16kB (UME) 982*32kB (UE) 476*64kB (U) 39*128kB (UM) 13*256kB (UM) 3*512kB (U) 46*1024kB (U) 0*2048kB 0*4096kB = 151444kB [ 986.699551] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 986.716241] Node 1 Normal: 3268*4kB (U) 271*8kB (U) 753*16kB (UE) 618*32kB (UE) 89*64kB (U) 28*128kB (U) 21*256kB (U) 8*512kB (U) 51*1024kB (U) 0*2048kB 0*4096kB = 118040kB [ 986.738894] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 986.748541] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 986.763835] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 986.773761] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 986.786011] 2749 total pagecache pages [ 986.791112] 0 pages in swap cache [ 986.794568] Swap cache stats: add 0, delete 0, find 0/0 [ 986.799918] Free swap = 0kB [ 986.807032] Total swap = 0kB [ 986.810828] 1965979 pages RAM [ 986.813925] 0 pages HighMem/MovableOnly [ 986.817890] 335874 pages reserved [ 986.830161] lowmem_reserve[]: 0 0 0 0 0 [ 986.830733] 0 pages cma reserved [ 986.834185] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 986.890138] lowmem_reserve[]: 0 0 0 0 0 [ 986.920061] Node 1 Normal free:123688kB min:53508kB low:66884kB high:80260kB active_anon:20kB inactive_anon:0kB active_file:4kB inactive_file:4kB unevictable:0kB writepending:0kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:32kB pagetables:16kB bounce:0kB free_pcp:1300kB local_pcp:680kB free_cma:0kB [ 986.980144] lowmem_reserve[]: 0 0 0 0 0 [ 987.000230] Node 0 DMA: 23*4kB (UME) 6*8kB (UM) 8*16kB (UME) 5*32kB (ME) 6*64kB (UME) 5*128kB (ME) 1*256kB (E) 1*512kB (E) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 10412kB 2020/01/06 14:15:05 result: hanged=false err=executor 1: failed to write control pipe: write |1: broken pipe [ 987.026916] Node 0 DMA32: 7620*4kB (UME) 1374*8kB (UME) 854*16kB (UME) 1114*32kB (UME) 574*64kB (U) 50*128kB (U) 26*256kB (U) 8*512kB (U) 45*1024kB (U) 0*2048kB 0*4096kB = 190752kB [ 987.140148] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 987.213469] device bridge_slave_1 left promiscuous mode [ 987.219133] bridge0: port 2(bridge_slave_1) entered disabled state [ 987.286118] device bridge_slave_0 left promiscuous mode [ 987.324301] bridge0: port 1(bridge_slave_0) entered disabled state [ 987.438653] Node 1 Normal: 0*4kB 1*8kB (U) 3*16kB (UE) 2*32kB (UE) 0*64kB 0*128kB 0*256kB 0*512kB 26*1024kB (U) 0*2048kB 0*4096kB = 26744kB [ 987.455660] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 987.464805] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 987.476584] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 987.487343] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 987.501051] 336 total pagecache pages [ 987.504895] 0 pages in swap cache [ 987.508358] Swap cache stats: add 0, delete 0, find 0/0 [ 987.517136] Free swap = 0kB [ 987.522477] Total swap = 0kB [ 987.525526] 1965979 pages RAM [ 987.528635] 0 pages HighMem/MovableOnly [ 987.550334] syz-executor.4: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 987.569176] 335874 pages reserved [ 987.599862] syz-executor.4 cpuset=syz4 mems_allowed=0-1 [ 987.617561] CPU: 0 PID: 7418 Comm: syz-executor.4 Not tainted 4.14.162-syzkaller #0 [ 987.623722] syz-executor.4: [ 987.625369] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 987.625377] page allocation failure: order:0 [ 987.628375] Call Trace: [ 987.644090] , mode:0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null) [ 987.644690] dump_stack+0x142/0x197 [ 987.644704] warn_alloc.cold+0x96/0x1af [ 987.651239] syz-executor.4 cpuset= [ 987.654792] ? zone_watermark_ok_safe+0x2b0/0x2b0 [ 987.658739] syz4 [ 987.662266] ? call_timer_fn+0x670/0x670 [ 987.667177] syz-executor.5: [ 987.669051] __alloc_pages_slowpath+0x23c6/0x2930 [ 987.676721] page allocation failure: order:0 [ 987.680941] ? warn_alloc+0xf0/0xf0 [ 987.680958] ? __might_sleep+0x93/0xb0 [ 987.680968] __alloc_pages_nodemask+0x62c/0x7a0 [ 987.685362] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 987.688973] ? lock_downgrade+0x740/0x740 [ 987.696498] mems_allowed=0-1 [ 987.697495] ? __alloc_pages_slowpath+0x2930/0x2930 [ 987.716874] ? retint_kernel+0x2d/0x2d [ 987.720046] (null) [ 987.720746] alloc_pages_current+0xec/0x1e0 [ 987.722872] syz-executor.5 cpuset=syz5 [ 987.727179] ion_page_pool_alloc+0x11f/0x1c0 [ 987.727188] ion_system_heap_allocate+0x138/0x910 [ 987.740264] ? ion_system_heap_free+0x250/0x250 [ 987.744915] ion_alloc+0x68c/0x860 [ 987.748440] ? ion_dma_buf_release+0x50/0x50 [ 987.752841] ? kasan_check_write+0x14/0x20 [ 987.753922] mems_allowed=0-1 [ 987.757065] ? _copy_from_user+0x99/0x110 [ 987.764282] ion_ioctl+0x105/0x217 [ 987.767820] ? ion_alloc.cold+0x40/0x40 [ 987.771785] ? ion_alloc.cold+0x40/0x40 [ 987.775747] do_vfs_ioctl+0x7ae/0x1060 [ 987.779618] ? selinux_file_mprotect+0x5d0/0x5d0 [ 987.784363] ? lock_downgrade+0x740/0x740 [ 987.788512] ? ioctl_preallocate+0x1c0/0x1c0 [ 987.792913] ? __fget+0x237/0x370 [ 987.796444] ? security_file_ioctl+0x7d/0xb0 [ 987.800836] ? security_file_ioctl+0x89/0xb0 [ 987.805257] SyS_ioctl+0x8f/0xc0 [ 987.808609] ? do_vfs_ioctl+0x1060/0x1060 [ 987.812749] do_syscall_64+0x1e8/0x640 [ 987.816631] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 987.821479] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 987.826652] RIP: 0033:0x45af49 [ 987.829824] RSP: 002b:00007f361d0a8c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 987.837518] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045af49 [ 987.844771] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 987.852030] RBP: 000000000075c070 R08: 0000000000000000 R09: 0000000000000000 [ 987.859288] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f361d0a96d4 [ 987.866539] R13: 00000000004c41b2 R14: 00000000004da748 R15: 00000000ffffffff [ 987.873805] CPU: 1 PID: 7410 Comm: syz-executor.5 Not tainted 4.14.162-syzkaller #0 [ 987.881604] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 987.881701] warn_alloc_show_mem: 3 callbacks suppressed [ 987.881703] Mem-Info: [ 987.890957] Call Trace: [ 987.890976] dump_stack+0x142/0x197 [ 987.890988] warn_alloc.cold+0x96/0x1af [ 987.890996] ? zone_watermark_ok_safe+0x2b0/0x2b0 [ 987.891008] ? trace_hardirqs_on_caller+0x400/0x590 [ 987.896390] active_anon:6137 inactive_anon:188 isolated_anon:0 [ 987.896390] active_file:20 inactive_file:0 isolated_file:0 [ 987.896390] unevictable:0 dirty:27 writeback:0 unstable:0 [ 987.896390] slab_reclaimable:11675 slab_unreclaimable:101750 [ 987.896390] mapped:21 shmem:242 pagetables:407 bounce:0 [ 987.896390] free:13804 free_pcp:60 free_cma:0 [ 987.898799] ? call_timer_fn+0x670/0x670 [ 987.901522] Node 0 active_anon:24528kB inactive_anon:752kB active_file:76kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:84kB dirty:108kB writeback:0kB shmem:968kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 4096kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 987.905098] __alloc_pages_slowpath+0x23c6/0x2930 [ 987.909044] Node 1 active_anon:20kB inactive_anon:0kB active_file:4kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 987.913888] ? warn_alloc+0xf0/0xf0 [ 987.913909] ? __might_sleep+0x93/0xb0 [ 987.918915] Node 0 [ 987.951373] __alloc_pages_nodemask+0x62c/0x7a0 [ 987.951384] ? lock_downgrade+0x740/0x740 [ 987.951392] ? __alloc_pages_slowpath+0x2930/0x2930 [ 987.951409] alloc_pages_current+0xec/0x1e0 [ 987.955459] DMA free:10384kB min:216kB low:268kB high:320kB active_anon:12kB inactive_anon:0kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 987.982326] ion_page_pool_alloc+0x11f/0x1c0 [ 987.982335] ion_system_heap_allocate+0x138/0x910 [ 987.982345] ? ion_system_heap_free+0x250/0x250 [ 987.982358] ion_alloc+0x68c/0x860 [ 987.987179] lowmem_reserve[]: [ 988.012930] ? ion_dma_buf_release+0x50/0x50 [ 988.012941] ? kasan_check_write+0x14/0x20 [ 988.012952] ? _copy_from_user+0x99/0x110 [ 988.016559] 0 [ 988.020430] ion_ioctl+0x105/0x217 [ 988.020439] ? ion_alloc.cold+0x40/0x40 [ 988.020452] ? ion_alloc.cold+0x40/0x40 [ 988.022675] 2569 [ 988.027326] do_vfs_ioctl+0x7ae/0x1060 [ 988.031467] 2569 [ 988.036468] ? selinux_file_mprotect+0x5d0/0x5d0 [ 988.040841] 2569 [ 988.066398] ? lock_downgrade+0x740/0x740 [ 988.066410] ? ioctl_preallocate+0x1c0/0x1c0 [ 988.066421] ? __fget+0x237/0x370 [ 988.070824] 2569 [ 988.075642] ? security_file_ioctl+0x7d/0xb0 [ 988.083885] ? security_file_ioctl+0x89/0xb0 [ 988.086987] Node 0 [ 988.091386] SyS_ioctl+0x8f/0xc0 [ 988.091395] ? do_vfs_ioctl+0x1060/0x1060 [ 988.091407] do_syscall_64+0x1e8/0x640 [ 988.095632] DMA32 free:18120kB min:36380kB low:45472kB high:54564kB active_anon:24516kB inactive_anon:752kB active_file:76kB inactive_file:0kB unevictable:0kB writepending:8kB present:3129332kB managed:2634320kB mlocked:0kB kernel_stack:7136kB pagetables:1612kB bounce:0kB free_pcp:120kB local_pcp:120kB free_cma:0kB [ 988.099754] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 988.101572] lowmem_reserve[]: [ 988.105083] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 988.109043] 0 [ 988.113013] RIP: 0033:0x45af49 [ 988.113018] RSP: 002b:00007f7f21a93c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 988.113026] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045af49 [ 988.113030] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 988.113034] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 988.113039] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7f21a946d4 [ 988.113043] R13: 00000000004c41b2 R14: 00000000004da748 R15: 00000000ffffffff [ 988.119474] CPU: 1 PID: 7414 Comm: syz-executor.4 Not tainted 4.14.162-syzkaller #0 [ 988.121330] syz-executor.5: [ 988.125761] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 988.125766] Call Trace: [ 988.127812] page allocation failure: order:0 [ 988.131958] dump_stack+0x142/0x197 [ 988.131978] warn_alloc.cold+0x96/0x1af [ 988.141949] 0 [ 988.146269] ? zone_watermark_ok_safe+0x2b0/0x2b0 [ 988.150688] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 988.152883] ? trace_hardirqs_on_caller+0x400/0x590 [ 988.156223] (null) [ 988.160363] __alloc_pages_slowpath+0x23c6/0x2930 [ 988.160384] ? warn_alloc+0xf0/0xf0 [ 988.164253] 0 [ 988.192267] ? __might_sleep+0x93/0xb0 [ 988.192277] __alloc_pages_nodemask+0x62c/0x7a0 [ 988.192288] ? __alloc_pages_slowpath+0x2930/0x2930 [ 988.197205] syz-executor.5 cpuset= [ 988.200290] ? cache_grow_begin+0x335/0x400 [ 988.200301] cache_grow_begin+0x80/0x400 [ 988.200311] ? __cpuset_node_allowed+0xff/0x450 [ 988.205475] syz5 [ 988.207259] fallback_alloc+0x1fd/0x2c0 [ 988.210466] mems_allowed=0-1 [ 988.218140] ____cache_alloc_node+0x1be/0x1d0 [ 988.225406] 0 [ 988.232646] kmem_cache_alloc_node_trace+0xec/0x770 [ 988.232656] ? lock_downgrade+0x740/0x740 [ 988.232668] vm_map_ram+0x46f/0xb10 [ 988.260042] 0 [ 988.262205] ? free_vmap_block+0xc4/0x100 [ 988.274578] ion_heap_clear_pages+0x2b/0x70 [ 988.274588] ion_heap_sglist_zero+0x188/0x240 [ 988.274599] ? ion_heap_deferred_free+0x4f0/0x4f0 [ 988.300043] Node 0 [ 988.302898] ? __lock_acquire+0x5f7/0x4620 [ 988.307910] Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 988.310050] ? find_held_lock+0x35/0x130 [ 988.310076] ? _ion_heap_freelist_drain+0x2a8/0x420 [ 988.310085] ? find_held_lock+0x35/0x130 [ 988.330044] lowmem_reserve[]: [ 988.333934] ion_heap_buffer_zero+0xc1/0x110 [ 988.337452] 0 [ 988.341762] ion_system_heap_free+0x1d0/0x250 [ 988.341773] ? lock_downgrade+0x740/0x740 [ 988.341787] ion_buffer_destroy+0x13a/0x190 [ 988.360041] 0 [ 988.361698] _ion_heap_freelist_drain+0x2b0/0x420 [ 988.364788] 0 [ 988.370227] ion_heap_freelist_drain+0x20/0x30 [ 988.370235] ion_alloc+0x652/0x860 [ 988.370248] ? ion_dma_buf_release+0x50/0x50 [ 988.380034] 0 [ 988.381167] ? kasan_check_write+0x14/0x20 [ 988.384766] 0 [ 988.386557] ? _copy_from_user+0x99/0x110 [ 988.404300] ion_ioctl+0x105/0x217 [ 988.406510] Node 1 [ 988.410727] ? ion_alloc.cold+0x40/0x40 [ 988.410741] ? ion_alloc.cold+0x40/0x40 [ 988.410751] do_vfs_ioctl+0x7ae/0x1060 [ 988.470044] Normal free:26732kB min:53508kB low:66884kB high:80260kB active_anon:20kB inactive_anon:0kB active_file:4kB inactive_file:4kB unevictable:0kB writepending:8kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:0kB pagetables:16kB bounce:0kB free_pcp:120kB local_pcp:120kB free_cma:0kB [ 988.470590] ? selinux_file_mprotect+0x5d0/0x5d0 [ 988.472367] lowmem_reserve[]: [ 988.477192] ? lock_downgrade+0x740/0x740 [ 988.478966] 0 [ 988.483532] ? ioctl_preallocate+0x1c0/0x1c0 [ 988.483543] ? __fget+0x237/0x370 [ 988.483558] ? security_file_ioctl+0x7d/0xb0 [ 988.510033] 0 [ 988.513020] ? security_file_ioctl+0x89/0xb0 [ 988.516967] 0 [ 988.520842] SyS_ioctl+0x8f/0xc0 [ 988.520850] ? do_vfs_ioctl+0x1060/0x1060 [ 988.520861] do_syscall_64+0x1e8/0x640 [ 988.580046] 0 [ 988.580158] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 988.581943] 0 [ 988.585301] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 988.593297] RIP: 0033:0x45af49 [ 988.593301] RSP: 002b:00007f361d0eac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 988.593310] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045af49 [ 988.593314] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 988.593318] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 988.593325] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f361d0eb6d4 [ 988.620039] Node 0 [ 988.625019] R13: 00000000004c41b2 R14: 00000000004da748 R15: 00000000ffffffff [ 988.656557] net_ratelimit: 42 callbacks suppressed [ 988.656562] ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb [ 988.670836] CPU: 0 PID: 7417 Comm: syz-executor.5 Not tainted 4.14.162-syzkaller #0 [ 988.678656] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 988.688006] Call Trace: [ 988.690591] dump_stack+0x142/0x197 [ 988.694236] warn_alloc.cold+0x96/0x1af [ 988.698203] ? zone_watermark_ok_safe+0x2b0/0x2b0 [ 988.703036] ? trace_hardirqs_on_caller+0x400/0x590 [ 988.708034] ? call_timer_fn+0x670/0x670 [ 988.712082] __alloc_pages_slowpath+0x23c6/0x2930 [ 988.716917] ? warn_alloc+0xf0/0xf0 [ 988.720529] ? __might_sleep+0x93/0xb0 [ 988.724399] __alloc_pages_nodemask+0x62c/0x7a0 [ 988.729050] ? lock_downgrade+0x740/0x740 [ 988.733184] ? __alloc_pages_slowpath+0x2930/0x2930 [ 988.738187] alloc_pages_current+0xec/0x1e0 [ 988.742492] ion_page_pool_alloc+0x11f/0x1c0 [ 988.746880] ion_system_heap_allocate+0x138/0x910 [ 988.751709] ? ion_system_heap_free+0x250/0x250 [ 988.756364] ion_alloc+0x68c/0x860 [ 988.759895] ? ion_dma_buf_release+0x50/0x50 [ 988.764292] ? kasan_check_write+0x14/0x20 [ 988.768509] ? _copy_from_user+0x99/0x110 [ 988.772639] ion_ioctl+0x105/0x217 [ 988.776160] ? ion_alloc.cold+0x40/0x40 [ 988.780121] ? ion_alloc.cold+0x40/0x40 [ 988.784080] do_vfs_ioctl+0x7ae/0x1060 [ 988.787949] ? selinux_file_mprotect+0x5d0/0x5d0 [ 988.792687] ? lock_downgrade+0x740/0x740 [ 988.796819] ? ioctl_preallocate+0x1c0/0x1c0 [ 988.801209] ? __fget+0x237/0x370 [ 988.804779] ? security_file_ioctl+0x7d/0xb0 [ 988.809172] ? security_file_ioctl+0x89/0xb0 [ 988.813568] SyS_ioctl+0x8f/0xc0 [ 988.816922] ? do_vfs_ioctl+0x1060/0x1060 [ 988.821055] do_syscall_64+0x1e8/0x640 [ 988.824932] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 988.829767] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 988.834955] RIP: 0033:0x45af49 [ 988.838130] RSP: 002b:00007f7f21a51c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 988.845822] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045af49 [ 988.853079] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 988.860332] RBP: 000000000075c070 R08: 0000000000000000 R09: 0000000000000000 [ 988.867586] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7f21a526d4 [ 988.874841] R13: 00000000004c41b2 R14: 00000000004da748 R15: 00000000ffffffff [ 988.883886] DMA: 13*4kB (UME) 6*8kB (UM) 8*16kB (UME) 5*32kB (ME) 6*64kB (UME) 5*128kB (ME) 1*256kB (E) 1*512kB (E) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 10372kB [ 988.909723] device veth1_vlan left promiscuous mode [ 988.915261] device veth0_vlan left promiscuous mode [ 988.930104] Node 0 DMA32: 111*4kB (ME) 159*8kB (ME) 64*16kB (UME) 20*32kB (ME) 7*64kB (UM) 4*128kB (M) 3*256kB (M) 3*512kB (M) 15*1024kB (UM) 0*2048kB 0*4096kB = 22004kB [ 988.960073] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 988.980514] Node 1 Normal: 0*4kB 1*8kB (E) 2*16kB (UM) 2*32kB (UM) 2*64kB (UE) 1*128kB (U) 2*256kB (UE) 2*512kB (ME) 246*1024kB (U) 0*2048kB 0*4096kB = 253800kB [ 988.988131] warn_alloc_show_mem: 1 callbacks suppressed [ 988.988134] Mem-Info: [ 988.995351] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 988.995358] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 988.995364] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 988.995369] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 988.995373] 599 total pagecache pages [ 988.995393] 0 pages in swap cache [ 989.013107] Swap cache stats: add 0, delete 0, find 0/0 [ 989.044149] active_anon:6163 inactive_anon:188 isolated_anon:0 [ 989.044149] active_file:13 inactive_file:311 isolated_file:0 [ 989.044149] unevictable:0 dirty:25 writeback:6 unstable:0 [ 989.044149] slab_reclaimable:11695 slab_unreclaimable:101963 [ 989.044149] mapped:202 shmem:242 pagetables:417 bounce:0 [ 989.044149] free:87345 free_pcp:236 free_cma:0 [ 989.046390] Free swap = 0kB [ 989.086998] Node 0 active_anon:24632kB inactive_anon:752kB active_file:48kB inactive_file:40kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:8kB dirty:0kB writeback:16kB shmem:968kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 4096kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 989.087802] Total swap = 0kB [ 989.123602] 1965979 pages RAM [ 989.126730] 0 pages HighMem/MovableOnly [ 989.133595] 335874 pages reserved [ 989.137059] 0 pages cma reserved [ 989.152666] Node 1 active_anon:20kB inactive_anon:0kB active_file:4kB inactive_file:1292kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:872kB dirty:108kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 989.220110] Node 0 DMA free:11268kB min:216kB low:268kB high:320kB active_anon:12kB inactive_anon:0kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 989.256241] lowmem_reserve[]: 0 2569 2569 2569 2569 [ 989.262345] Node 0 DMA32 free:156532kB min:36380kB low:45472kB high:54564kB active_anon:24620kB inactive_anon:752kB active_file:48kB inactive_file:36kB unevictable:0kB writepending:4kB present:3129332kB managed:2634320kB mlocked:0kB kernel_stack:7104kB pagetables:1652kB bounce:0kB free_pcp:496kB local_pcp:212kB free_cma:0kB [ 989.294516] device hsr_slave_1 left promiscuous mode [ 989.299663] lowmem_reserve[]: 0 0 0 0 0 [ 989.303737] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 989.354096] device hsr_slave_0 left promiscuous mode [ 989.370078] lowmem_reserve[]: 0 0 0 0 0 [ 989.374129] Node 1 Normal free:629504kB min:53508kB low:66884kB high:80260kB active_anon:20kB inactive_anon:0kB active_file:4kB inactive_file:1292kB unevictable:0kB writepending:108kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:0kB pagetables:16kB bounce:0kB free_pcp:1320kB local_pcp:672kB free_cma:0kB [ 989.415215] team0 (unregistering): Port device team_slave_1 removed [ 989.441772] lowmem_reserve[]: 0 0 0 0 0 [ 989.445800] Node 0 [ 989.445811] DMA: 16*4kB (UME) 6*8kB (UM) 8*16kB (UME) 5*32kB (ME) 8*64kB (UME) [ 989.448082] 7*128kB (UME) 2*256kB (UE) 2*512kB (UE) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 11536kB [ 989.470122] Node 0 DMA32: 2175*4kB (UME) 461*8kB (UME) 114*16kB (UME) 59*32kB (UME) 811*64kB (UM) 106*128kB (UM) 52*256kB (UM) 51*512kB (UM) 113*1024kB (UM) 4*2048kB (UM) 0*4096kB = 244900kB [ 989.497022] team0 (unregistering): Port device team_slave_0 removed [ 989.507501] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 989.525243] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 989.533370] Node 1 Normal: 4057*4kB (UME) 133*8kB (UME) 103*16kB (UME) 91*32kB (UME) 468*64kB (UME) 247*128kB (UE) 163*256kB (UE) 39*512kB (UME) 390*1024kB (U) 71*2048kB (U) 6*4096kB (U) = 714460kB [ 989.556444] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 989.566225] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 989.584961] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 989.596073] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 989.605288] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 989.618037] 632 total pagecache pages [ 989.622190] 0 pages in swap cache [ 989.625641] Swap cache stats: add 0, delete 0, find 0/0 [ 989.656817] Free swap = 0kB [ 989.659872] Total swap = 0kB [ 989.663153] 1965979 pages RAM [ 989.666257] 0 pages HighMem/MovableOnly [ 989.696420] 335874 pages reserved [ 989.699916] 0 pages cma reserved [ 989.736975] bond0 (unregistering): Released all slaves [ 989.890066] 0 pages cma reserved [ 989.906916] Out of memory: Kill process 7176 (syz-execprog) score 1 or sacrifice child [ 990.699176] Killed process 7421 (syz-executor.1) total-vm:37644kB, anon-rss:64kB, file-rss:0kB, shmem-rss:0kB [ 991.838926] syz-executor.5: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 991.839673] syz-executor.4: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 991.868151] syz-executor.5 cpuset=syz5 mems_allowed=0-1 [ 991.881924] CPU: 1 PID: 7427 Comm: syz-executor.5 Not tainted 4.14.162-syzkaller #0 [ 991.881946] syz-executor.4 cpuset= [ 991.889753] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 991.889759] syz4 [ 991.893276] Call Trace: [ 991.893294] dump_stack+0x142/0x197 [ 991.910196] syz-executor.5: page allocation failure: order:4 [ 991.910806] warn_alloc.cold+0x96/0x1af [ 991.910814] ? zone_watermark_ok_safe+0x2b0/0x2b0 [ 991.916605] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 991.920565] ? __alloc_pages_direct_compact+0xbc/0x380 [ 991.920577] __alloc_pages_slowpath+0x23c6/0x2930 [ 991.920592] ? save_trace+0x290/0x290 [ 991.920605] ? warn_alloc+0xf0/0xf0 [ 991.926486] (null) [ 991.932533] ? __might_sleep+0x93/0xb0 [ 991.932544] __alloc_pages_nodemask+0x62c/0x7a0 [ 991.932555] ? lock_downgrade+0x740/0x740 [ 991.937837] mems_allowed=0-1 [ 991.942654] ? __alloc_pages_slowpath+0x2930/0x2930 [ 991.942672] alloc_pages_current+0xec/0x1e0 [ 991.942683] ion_page_pool_alloc+0x11f/0x1c0 [ 991.942696] ion_system_heap_allocate+0x138/0x910 [ 991.960034] syz-executor.5 cpuset= [ 991.960737] ? ion_alloc+0x19b/0x860 [ 991.964873] syz5 [ 991.967963] ? rcu_read_lock_sched_held+0x110/0x130 [ 991.980033] mems_allowed=0-1 [ 991.981643] ? ion_system_heap_free+0x250/0x250 [ 992.008354] ion_alloc+0x222/0x860 [ 992.011879] ? ion_dma_buf_release+0x50/0x50 [ 992.016289] ? kasan_check_write+0x14/0x20 [ 992.020503] ? _copy_from_user+0x99/0x110 [ 992.024633] ion_ioctl+0x105/0x217 [ 992.028157] ? ion_alloc.cold+0x40/0x40 [ 992.032119] ? ion_alloc.cold+0x40/0x40 [ 992.036077] do_vfs_ioctl+0x7ae/0x1060 [ 992.039946] ? selinux_file_mprotect+0x5d0/0x5d0 [ 992.044685] ? lock_downgrade+0x740/0x740 [ 992.048816] ? ioctl_preallocate+0x1c0/0x1c0 [ 992.053206] ? __fget+0x237/0x370 [ 992.056676] ? security_file_ioctl+0x7d/0xb0 [ 992.061074] ? security_file_ioctl+0x89/0xb0 [ 992.065574] SyS_ioctl+0x8f/0xc0 [ 992.068921] ? do_vfs_ioctl+0x1060/0x1060 [ 992.073052] do_syscall_64+0x1e8/0x640 [ 992.076922] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 992.081749] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 992.086940] RIP: 0033:0x45af49 [ 992.090117] RSP: 002b:00007f7f21a93c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 992.097808] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045af49 [ 992.105064] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 992.112333] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 992.119590] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7f21a946d4 [ 992.126847] R13: 00000000004c41b2 R14: 00000000004da748 R15: 00000000ffffffff [ 992.134113] CPU: 0 PID: 7431 Comm: syz-executor.4 Not tainted 4.14.162-syzkaller #0 [ 992.141923] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 992.151277] Call Trace: [ 992.153902] dump_stack+0x142/0x197 [ 992.157535] warn_alloc.cold+0x96/0x1af [ 992.161515] ? zone_watermark_ok_safe+0x2b0/0x2b0 [ 992.166373] ? __alloc_pages_direct_compact+0xbc/0x380 [ 992.171785] __alloc_pages_slowpath+0x23c6/0x2930 [ 992.176638] ? save_trace+0x290/0x290 [ 992.180446] ? warn_alloc+0xf0/0xf0 [ 992.184080] ? __might_sleep+0x93/0xb0 [ 992.187968] __alloc_pages_nodemask+0x62c/0x7a0 [ 992.192640] ? lock_downgrade+0x740/0x740 [ 992.196801] ? __alloc_pages_slowpath+0x2930/0x2930 [ 992.201828] alloc_pages_current+0xec/0x1e0 [ 992.206161] ion_page_pool_alloc+0x11f/0x1c0 [ 992.210576] ion_system_heap_allocate+0x138/0x910 [ 992.215418] ? ion_alloc+0x19b/0x860 [ 992.219134] ? rcu_read_lock_sched_held+0x110/0x130 [ 992.224160] ? ion_system_heap_free+0x250/0x250 [ 992.228835] ion_alloc+0x222/0x860 [ 992.232379] ? ion_dma_buf_release+0x50/0x50 [ 992.236793] ? kasan_check_write+0x14/0x20 [ 992.241026] ? _copy_from_user+0x99/0x110 [ 992.245191] ion_ioctl+0x105/0x217 [ 992.248741] ? ion_alloc.cold+0x40/0x40 [ 992.252717] ? ion_alloc.cold+0x40/0x40 [ 992.256702] do_vfs_ioctl+0x7ae/0x1060 [ 992.260598] ? selinux_file_mprotect+0x5d0/0x5d0 [ 992.265354] ? lock_downgrade+0x740/0x740 [ 992.269510] ? ioctl_preallocate+0x1c0/0x1c0 [ 992.273920] ? __fget+0x237/0x370 [ 992.277389] ? security_file_ioctl+0x7d/0xb0 [ 992.281803] ? security_file_ioctl+0x89/0xb0 [ 992.286214] SyS_ioctl+0x8f/0xc0 [ 992.289583] ? do_vfs_ioctl+0x1060/0x1060 [ 992.293734] do_syscall_64+0x1e8/0x640 [ 992.297624] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 992.302473] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 992.307661] RIP: 0033:0x45af49 [ 992.310856] RSP: 002b:00007f361d0c9c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 992.318560] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045af49 [ 992.325827] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 992.333128] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 992.340397] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f361d0ca6d4 [ 992.347663] R13: 00000000004c41b2 R14: 00000000004da748 R15: 00000000ffffffff [ 992.357393] CPU: 0 PID: 7430 Comm: syz-executor.5 Not tainted 4.14.162-syzkaller #0 [ 992.365213] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 992.374589] Call Trace: [ 992.377188] dump_stack+0x142/0x197 [ 992.380819] warn_alloc.cold+0x96/0x1af [ 992.384793] ? zone_watermark_ok_safe+0x2b0/0x2b0 [ 992.389645] ? __alloc_pages_direct_compact+0xbc/0x380 [ 992.394928] __alloc_pages_slowpath+0x23c6/0x2930 [ 992.399782] ? save_trace+0x290/0x290 [ 992.403584] ? warn_alloc+0xf0/0xf0 [ 992.407219] ? __might_sleep+0x93/0xb0 [ 992.411117] __alloc_pages_nodemask+0x62c/0x7a0 [ 992.415792] ? lock_downgrade+0x740/0x740 [ 992.419942] ? __alloc_pages_slowpath+0x2930/0x2930 [ 992.424968] alloc_pages_current+0xec/0x1e0 [ 992.429294] ion_page_pool_alloc+0x11f/0x1c0 [ 992.433700] ion_system_heap_allocate+0x138/0x910 [ 992.438558] ? ion_alloc+0x19b/0x860 [ 992.442270] ? rcu_read_lock_sched_held+0x110/0x130 [ 992.447286] ? ion_system_heap_free+0x250/0x250 [ 992.451968] ion_alloc+0x222/0x860 [ 992.455371] warn_alloc_show_mem: 1 callbacks suppressed [ 992.455374] Mem-Info: [ 992.455503] ? ion_dma_buf_release+0x50/0x50 [ 992.466434] active_anon:7200 inactive_anon:188 isolated_anon:0 [ 992.466434] active_file:558 inactive_file:1730 isolated_file:0 [ 992.466434] unevictable:0 dirty:177 writeback:0 unstable:0 [ 992.466434] slab_reclaimable:11760 slab_unreclaimable:100853 [ 992.466434] mapped:1406 shmem:242 pagetables:407 bounce:0 [ 992.466434] free:379648 free_pcp:45 free_cma:0 [ 992.467653] ? kasan_check_write+0x14/0x20 [ 992.467666] ? _copy_from_user+0x99/0x110 [ 992.467685] ion_ioctl+0x105/0x217 [ 992.512703] ? ion_alloc.cold+0x40/0x40 [ 992.516685] ? ion_alloc.cold+0x40/0x40 [ 992.520665] do_vfs_ioctl+0x7ae/0x1060 [ 992.524553] ? selinux_file_mprotect+0x5d0/0x5d0 [ 992.529308] ? lock_downgrade+0x740/0x740 [ 992.533456] ? ioctl_preallocate+0x1c0/0x1c0 [ 992.538039] ? __fget+0x237/0x370 [ 992.541500] ? security_file_ioctl+0x7d/0xb0 [ 992.545903] ? security_file_ioctl+0x89/0xb0 [ 992.546462] Node 0 active_anon:28784kB inactive_anon:752kB active_file:1680kB inactive_file:6148kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:4552kB dirty:596kB writeback:0kB shmem:968kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 992.550321] SyS_ioctl+0x8f/0xc0 [ 992.550331] ? do_vfs_ioctl+0x1060/0x1060 [ 992.550342] do_syscall_64+0x1e8/0x640 [ 992.550350] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 992.550364] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 992.550370] RIP: 0033:0x45af49 [ 992.550375] RSP: 002b:00007f7f21a51c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 992.610121] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045af49 [ 992.617397] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 992.617943] Node 1 active_anon:16kB inactive_anon:0kB active_file:552kB inactive_file:772kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:1072kB dirty:112kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 992.624667] RBP: 000000000075c070 R08: 0000000000000000 R09: 0000000000000000 [ 992.624672] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7f21a526d4 [ 992.624677] R13: 00000000004c41b2 R14: 00000000004da748 R15: 00000000ffffffff [ 992.671157] IPVS: ftp: loaded support on port[0] = 21 2020/01/06 14:15:10 result: hanged=false err=executor 1: EOF 2020/01/06 14:15:10 executed programs: 21 [ 992.700374] Node 0 DMA free:10512kB min:216kB low:268kB high:320kB active_anon:12kB inactive_anon:0kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 992.729162] lowmem_reserve[]: 0 2569 2569 2569 2569 [ 992.738195] Node 0 DMA32 free:422228kB min:36380kB low:45472kB high:54564kB active_anon:28772kB inactive_anon:752kB active_file:2080kB inactive_file:7604kB unevictable:0kB writepending:4kB present:3129332kB managed:2634320kB mlocked:0kB kernel_stack:7040kB pagetables:1612kB bounce:0kB free_pcp:700kB local_pcp:540kB free_cma:0kB [ 992.781837] lowmem_reserve[]: 0 0 0 0 0 [ 992.786168] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 992.817619] lowmem_reserve[]: 0 0 0 0 0 [ 992.821800] Node 1 Normal free:1223876kB min:53508kB low:66884kB high:80260kB active_anon:16kB inactive_anon:0kB active_file:652kB inactive_file:608kB unevictable:0kB writepending:0kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:0kB pagetables:16kB bounce:0kB free_pcp:716kB local_pcp:716kB free_cma:0kB [ 992.854373] lowmem_reserve[]: 0 0 0 0 0 [ 992.858477] Node 0 DMA: 10*4kB (UME) 7*8kB (UM) 9*16kB (UME) 9*32kB (UME) 6*64kB (UME) 5*128kB (ME) 5*256kB (UE) 3*512kB (UE) 2*1024kB (ME) 2*2048kB (UE) 0*4096kB = 10512kB [ 992.877822] Node 0 DMA32: 1*4kB (U) 122*8kB (UME) 47*16kB (UE) 10*32kB (E) 461*64kB (U) 246*128kB (U) 134*256kB (U) 5*512kB (U) 152*1024kB (U) 14*2048kB (UM) 0*4096kB = 284228kB [ 992.897292] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 992.908741] Node 1 Normal: 328*4kB (UME) 497*8kB (UE) 548*16kB (UE) 315*32kB (UME) 341*64kB (UME) 85*128kB (UE) 5*256kB (UE) 3*512kB (UME) 769*1024kB (U) 162*2048kB (U) 11*4096kB (U) = 1223944kB [ 992.930610] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 992.953392] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 992.964582] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 992.987279] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 993.009795] 2978 total pagecache pages [ 993.018580] 0 pages in swap cache [ 993.028985] Swap cache stats: add 0, delete 0, find 0/0 [ 993.050087] Free swap = 0kB [ 993.056473] Total swap = 0kB [ 993.062817] 1965979 pages RAM [ 993.069288] 0 pages HighMem/MovableOnly [ 993.077876] 335874 pages reserved [ 993.085908] 0 pages cma reserved [ 993.548878] IPVS: ftp: loaded support on port[0] = 21 [ 993.777225] chnl_net:caif_netlink_parms(): no params data found [ 993.859308] IPVS: ftp: loaded support on port[0] = 21 [ 994.076358] chnl_net:caif_netlink_parms(): no params data found [ 994.152961] bridge0: port 1(bridge_slave_0) entered blocking state [ 994.159488] bridge0: port 1(bridge_slave_0) entered disabled state [ 994.167151] device bridge_slave_0 entered promiscuous mode [ 994.192289] bridge0: port 2(bridge_slave_1) entered blocking state [ 994.198693] bridge0: port 2(bridge_slave_1) entered disabled state [ 994.231304] device bridge_slave_1 entered promiscuous mode [ 994.642416] bridge0: port 1(bridge_slave_0) entered blocking state [ 994.648791] bridge0: port 1(bridge_slave_0) entered disabled state [ 994.675516] device bridge_slave_0 entered promiscuous mode [ 994.750726] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 994.758448] bridge0: port 2(bridge_slave_1) entered blocking state [ 994.775140] bridge0: port 2(bridge_slave_1) entered disabled state [ 994.795907] device bridge_slave_1 entered promiscuous mode [ 994.822456] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 994.849100] chnl_net:caif_netlink_parms(): no params data found [ 994.891918] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 994.916738] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 994.989616] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 995.006406] team0: Port device team_slave_0 added [ 995.016613] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 995.029214] team0: Port device team_slave_0 added [ 995.047110] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 995.066219] team0: Port device team_slave_1 added [ 995.078182] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 995.087969] team0: Port device team_slave_1 added [ 995.100418] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 995.119062] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 995.127976] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 995.168519] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 995.273502] device hsr_slave_0 entered promiscuous mode [ 995.310349] device hsr_slave_1 entered promiscuous mode [ 995.362215] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 995.369475] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 995.448712] device hsr_slave_0 entered promiscuous mode [ 995.505557] device hsr_slave_1 entered promiscuous mode [ 995.574893] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 995.619569] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 995.634022] bridge0: port 1(bridge_slave_0) entered blocking state [ 995.650155] bridge0: port 1(bridge_slave_0) entered disabled state [ 995.657295] device bridge_slave_0 entered promiscuous mode [ 995.704566] bridge0: port 2(bridge_slave_1) entered blocking state [ 995.711399] bridge0: port 2(bridge_slave_1) entered disabled state [ 995.718548] device bridge_slave_1 entered promiscuous mode [ 995.836207] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 995.861824] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 995.899156] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 995.930657] team0: Port device team_slave_0 added [ 995.937400] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 995.953852] team0: Port device team_slave_1 added [ 995.962010] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 995.969445] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 996.033539] device hsr_slave_0 entered promiscuous mode [ 996.090345] device hsr_slave_1 entered promiscuous mode [ 996.138987] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 996.153520] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 996.177924] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 996.390719] syz-executor.4: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 996.410388] syz-executor.4 cpuset=syz4 mems_allowed=0-1 [ 996.415818] CPU: 1 PID: 7448 Comm: syz-executor.4 Not tainted 4.14.162-syzkaller #0 [ 996.423608] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 996.432957] Call Trace: [ 996.435547] dump_stack+0x142/0x197 [ 996.439171] warn_alloc.cold+0x96/0x1af [ 996.443143] ? zone_watermark_ok_safe+0x2b0/0x2b0 [ 996.447990] ? __alloc_pages_direct_compact+0xbc/0x380 [ 996.453272] __alloc_pages_slowpath+0x23c6/0x2930 [ 996.458120] ? save_trace+0x290/0x290 [ 996.461927] ? warn_alloc+0xf0/0xf0 [ 996.465558] ? __might_sleep+0x93/0xb0 [ 996.469446] __alloc_pages_nodemask+0x62c/0x7a0 [ 996.474112] ? lock_downgrade+0x740/0x740 [ 996.478261] ? __alloc_pages_slowpath+0x2930/0x2930 [ 996.483281] ? save_trace+0x290/0x290 [ 996.487082] alloc_pages_current+0xec/0x1e0 [ 996.491408] ion_page_pool_alloc+0x11f/0x1c0 [ 996.495814] ion_system_heap_allocate+0x138/0x910 [ 996.500653] ? ion_alloc+0x19b/0x860 [ 996.504365] ? rcu_read_lock_sched_held+0x110/0x130 [ 996.509379] ? ion_system_heap_free+0x250/0x250 [ 996.514059] ion_alloc+0x222/0x860 [ 996.517601] ? ion_dma_buf_release+0x50/0x50 [ 996.522011] ? kasan_check_write+0x14/0x20 [ 996.526243] ? _copy_from_user+0x99/0x110 [ 996.530394] ion_ioctl+0x105/0x217 [ 996.533930] ? ion_alloc.cold+0x40/0x40 [ 996.537908] ? ion_alloc.cold+0x40/0x40 [ 996.541882] do_vfs_ioctl+0x7ae/0x1060 [ 996.545771] ? selinux_file_mprotect+0x5d0/0x5d0 [ 996.550535] ? lock_downgrade+0x740/0x740 [ 996.554697] ? ioctl_preallocate+0x1c0/0x1c0 [ 996.559103] ? __fget+0x237/0x370 [ 996.562557] ? security_file_ioctl+0x7d/0xb0 [ 996.566959] ? security_file_ioctl+0x89/0xb0 [ 996.571366] SyS_ioctl+0x8f/0xc0 [ 996.574736] ? do_vfs_ioctl+0x1060/0x1060 [ 996.578882] do_syscall_64+0x1e8/0x640 [ 996.582763] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 996.587608] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 996.592792] RIP: 0033:0x45af49 [ 996.595974] RSP: 002b:00007f361d0eac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 996.603677] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045af49 [ 996.610949] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 996.618221] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 996.625490] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f361d0eb6d4 [ 996.632755] R13: 00000000004c41b2 R14: 00000000004da748 R15: 00000000ffffffff [ 996.640891] oom_reaper: reaped process 7430 (syz-executor.5), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 996.657175] ion_system_heap invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=0, oom_score_adj=0 [ 996.669463] ion_system_heap cpuset=/ mems_allowed=0-1 [ 996.676693] CPU: 1 PID: 3203 Comm: ion_system_heap Not tainted 4.14.162-syzkaller #0 [ 996.684583] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 996.693930] Call Trace: [ 996.696519] dump_stack+0x142/0x197 [ 996.699993] warn_alloc_show_mem: 2 callbacks suppressed [ 996.699996] Mem-Info: [ 996.700146] dump_header+0x177/0x6cd [ 996.700156] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 996.700165] ? ___ratelimit+0x55/0x537 [ 996.705529] active_anon:6693 inactive_anon:188 isolated_anon:0 [ 996.705529] active_file:13 inactive_file:7 isolated_file:0 [ 996.705529] unevictable:0 dirty:11 writeback:0 unstable:0 [ 996.705529] slab_reclaimable:11955 slab_unreclaimable:104058 [ 996.705529] mapped:62 shmem:242 pagetables:419 bounce:0 [ 996.705529] free:13705 free_pcp:60 free_cma:0 [ 996.707916] oom_kill_process.cold+0x10/0xadd [ 996.711628] Node 0 active_anon:26684kB inactive_anon:744kB active_file:20kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:164kB dirty:16kB writeback:0kB shmem:960kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 996.716689] ? rcu_read_unlock_special+0x639/0xd40 [ 996.720577] Node 1 active_anon:88kB inactive_anon:8kB active_file:32kB inactive_file:28kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:84kB dirty:28kB writeback:0kB shmem:8kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 996.752997] ? lock_downgrade+0x740/0x740 [ 996.753010] out_of_memory+0x2ee/0x1180 [ 996.753019] ? lock_acquire+0x16f/0x430 [ 996.757492] Node 0 [ 996.784367] ? oom_killer_disable+0x1d0/0x1d0 [ 996.784375] ? __alloc_pages_slowpath+0xca4/0x2930 [ 996.784384] __alloc_pages_slowpath+0x2251/0x2930 [ 996.784405] ? warn_alloc+0xf0/0xf0 [ 996.789320] DMA free:10372kB min:216kB low:268kB high:320kB active_anon:12kB inactive_anon:0kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 996.815521] ? __might_sleep+0x93/0xb0 [ 996.815534] __alloc_pages_nodemask+0x62c/0x7a0 [ 996.815545] ? __alloc_pages_slowpath+0x2930/0x2930 [ 996.815556] ? ____cache_alloc_node+0x1be/0x1d0 [ 996.819779] lowmem_reserve[]: [ 996.823754] ? cache_grow_begin+0x335/0x400 [ 996.823765] cache_grow_begin+0x80/0x400 [ 996.823775] ? __cpuset_node_allowed+0xff/0x450 [ 996.823784] fallback_alloc+0x1fd/0x2c0 [ 996.828444] 0 [ 996.830672] ____cache_alloc_node+0x1be/0x1d0 [ 996.830683] kmem_cache_alloc_node_trace+0xec/0x770 [ 996.830693] ? lock_downgrade+0x740/0x740 [ 996.835167] 2569 [ 996.840092] vm_map_ram+0x46f/0xb10 [ 996.840099] ? free_vmap_block+0xc4/0x100 [ 996.840114] ion_heap_clear_pages+0x2b/0x70 [ 996.844961] 2569 [ 996.849965] ion_heap_sglist_zero+0x188/0x240 [ 996.875570] 2569 [ 996.879427] ? ion_heap_deferred_free+0x4f0/0x4f0 [ 996.884106] 2569 [ 996.889098] ? trace_hardirqs_on+0x10/0x10 [ 996.896863] ? ion_heap_deferred_free+0x25b/0x4f0 [ 996.901166] Node 0 [ 996.905280] ? find_held_lock+0x35/0x130 [ 996.909937] DMA32 free:18096kB min:36380kB low:45472kB high:54564kB active_anon:26672kB inactive_anon:744kB active_file:16kB inactive_file:0kB unevictable:0kB writepending:20kB present:3129332kB managed:2634320kB mlocked:0kB kernel_stack:7008kB pagetables:1624kB bounce:0kB free_pcp:120kB local_pcp:120kB free_cma:0kB [ 996.913888] ion_heap_buffer_zero+0xc1/0x110 [ 996.913899] ion_system_heap_free+0x1d0/0x250 [ 996.913908] ? lock_downgrade+0x740/0x740 [ 996.915688] lowmem_reserve[]: [ 996.920168] ion_buffer_destroy+0x13a/0x190 [ 996.920178] ion_heap_deferred_free+0x263/0x4f0 [ 996.920188] ? __schedule+0x757/0x1cd0 [ 996.925177] 0 [ 996.929314] ? ion_heap_shrink_scan+0x1b0/0x1b0 [ 996.931371] 0 [ 996.934972] ? __kthread_parkme+0x117/0x1c0 [ 996.939091] 0 [ 996.943394] ? finish_wait+0x260/0x260 [ 996.943407] kthread+0x319/0x430 [ 996.943416] ? ion_heap_shrink_scan+0x1b0/0x1b0 [ 996.945453] 0 [ 996.949935] ? kthread_create_on_node+0xd0/0xd0 [ 996.949945] ret_from_fork+0x24/0x30 [ 996.952002] 0 [ 996.958666] Mem-Info: [ 996.963195] active_anon:6693 inactive_anon:188 isolated_anon:0 [ 996.963195] active_file:13 inactive_file:7 isolated_file:0 [ 996.963195] unevictable:0 dirty:11 writeback:0 unstable:0 [ 996.963195] slab_reclaimable:11955 slab_unreclaimable:104058 [ 996.963195] mapped:62 shmem:242 pagetables:419 bounce:0 [ 996.963195] free:13705 free_pcp:60 free_cma:0 [ 996.963210] Node 0 active_anon:26684kB inactive_anon:744kB active_file:20kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:164kB dirty:16kB writeback:0kB shmem:960kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 996.963223] Node 1 active_anon:88kB inactive_anon:8kB active_file:32kB inactive_file:28kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:84kB dirty:28kB writeback:0kB shmem:8kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 996.963226] Node 0 DMA free:10372kB min:216kB low:268kB high:320kB active_anon:12kB inactive_anon:0kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 996.963243] lowmem_reserve[]: 0 2569 2569 2569 2569 [ 996.963261] Node 0 DMA32 free:18096kB min:36380kB low:45472kB high:54564kB active_anon:26672kB inactive_anon:744kB active_file:16kB inactive_file:0kB unevictable:0kB writepending:20kB present:3129332kB managed:2634320kB mlocked:0kB kernel_stack:7008kB pagetables:1624kB bounce:0kB free_pcp:120kB local_pcp:0kB free_cma:0kB [ 996.963279] lowmem_reserve[]: 0 0 0 0 0 [ 996.963297] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 996.963313] lowmem_reserve[]: 0 0 0 0 0 [ 996.963332] Node 1 Normal free:26352kB min:53508kB low:66884kB high:80260kB active_anon:88kB inactive_anon:8kB active_file:484kB inactive_file:372kB unevictable:0kB writepending:328kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:192kB pagetables:52kB bounce:0kB free_pcp:120kB local_pcp:0kB free_cma:0kB [ 996.963349] lowmem_reserve[]: 0 0 0 0 0 [ 996.963373] Node 0 DMA: 5*4kB (ME) 4*8kB (M) 5*16kB (ME) 6*32kB (UME) 5*64kB (ME) 6*128kB (UME) 1*256kB (E) 3*512kB (UE) 3*1024kB (UME) 2*2048kB (UE) 0*4096kB = 10372kB [ 996.963445] Node 0 DMA32: 45*4kB (UME) 75*8kB (UME) 72*16kB (ME) 30*32kB (ME) 13*64kB (UM) 11*128kB (UM) 9*256kB (M) 1*512kB (U) 4*1024kB (UM) 3*2048kB (M) 0*4096kB = 18188kB [ 996.963515] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB [ 996.971585] syz-executor.5: [ 996.976280] 0*128kB [ 997.014703] Node 0 [ 997.017602] 0*256kB [ 997.019072] Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 997.023407] 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 997.023424] Node 1 Normal: 16*4kB (UME) 17*8kB (ME) 19*16kB (ME) 19*32kB (ME) 16*64kB (UME) 13*128kB (ME) 5*256kB (ME) 4*512kB (ME) [ 997.036101] lowmem_reserve[]: [ 997.042383] 1*1024kB [ 997.047912] 0 [ 997.050418] (E) 1*2048kB (U) 4*4096kB (UM) = 26584kB [ 997.050444] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 997.050450] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 997.050455] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 997.050461] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 997.050464] 292 total pagecache pages [ 997.050477] 0 pages in swap cache [ 997.059149] 0 [ 997.061989] Swap cache stats: add 0, delete 0, find 0/0 [ 997.068772] 0 [ 997.074186] Free swap = 0kB [ 997.107491] 0 [ 997.141335] page allocation failure: order:0 [ 997.161374] 0 [ 997.194896] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 997.234655] (null) [ 997.250157] Node 1 [ 997.262211] syz-executor.5 cpuset= [ 997.286276] Normal free:26584kB min:53508kB low:66884kB high:80260kB active_anon:116kB inactive_anon:8kB active_file:28kB inactive_file:32kB unevictable:0kB writepending:0kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:160kB pagetables:52kB bounce:0kB free_pcp:120kB local_pcp:120kB free_cma:0kB [ 997.310424] syz5 [ 997.320078] lowmem_reserve[]: [ 997.332751] mems_allowed=0-1 [ 997.336174] 0 [ 997.367696] CPU: 1 PID: 7430 Comm: syz-executor.5 Not tainted 4.14.162-syzkaller #0 [ 997.378369] 0 [ 997.380679] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 997.380683] Call Trace: [ 997.380698] dump_stack+0x142/0x197 [ 997.380713] warn_alloc.cold+0x96/0x1af [ 997.382497] 0 [ 997.387590] ? zone_watermark_ok_safe+0x2b0/0x2b0 [ 997.396436] 0 [ 997.404997] ? trace_hardirqs_on_caller+0x400/0x590 [ 997.405006] ? call_timer_fn+0x670/0x670 [ 997.405022] __alloc_pages_slowpath+0x23c6/0x2930 [ 997.413880] 0 [ 997.422470] ? warn_alloc+0xf0/0xf0 [ 997.422488] ? __might_sleep+0x93/0xb0 [ 997.429702] __alloc_pages_nodemask+0x62c/0x7a0 [ 997.431507] Node 0 [ 997.436847] ? lock_downgrade+0x740/0x740 [ 997.438631] DMA: [ 997.441662] ? __alloc_pages_slowpath+0x2930/0x2930 [ 997.441729] ? __sanitizer_cov_trace_pc+0x9/0x60 [ 997.441742] alloc_pages_current+0xec/0x1e0 [ 997.443525] 5*4kB [ 997.447921] ion_page_pool_alloc+0x11f/0x1c0 [ 997.449706] (ME) [ 997.456828] ion_system_heap_allocate+0x138/0x910 [ 997.456836] ? ion_alloc+0x19b/0x860 [ 997.456846] ? rcu_read_lock_sched_held+0x110/0x130 [ 997.456857] ? ion_system_heap_free+0x250/0x250 [ 997.458990] 4*8kB [ 997.461231] ion_alloc+0x222/0x860 [ 997.461243] ? ion_dma_buf_release+0x50/0x50 [ 997.461255] ? kasan_check_write+0x14/0x20 [ 997.464805] (M) [ 997.492855] ? _copy_from_user+0x99/0x110 [ 997.492868] ion_ioctl+0x105/0x217 [ 997.492880] ? ion_alloc.cold+0x40/0x40 [ 997.494851] 5*16kB [ 997.497954] ? ion_alloc.cold+0x40/0x40 [ 997.501062] (ME) [ 997.502842] do_vfs_ioctl+0x7ae/0x1060 [ 997.510634] 6*32kB [ 997.512414] ? selinux_file_mprotect+0x5d0/0x5d0 [ 997.521780] (UME) [ 997.524356] ? lock_downgrade+0x740/0x740 [ 997.527960] 5*64kB [ 997.531927] ? ioctl_preallocate+0x1c0/0x1c0 [ 997.531955] ? __fget+0x237/0x370 [ 997.533734] (ME) [ 997.538604] ? security_file_ioctl+0x7d/0xb0 [ 997.540406] 6*128kB [ 997.545394] ? security_file_ioctl+0x89/0xb0 [ 997.545406] SyS_ioctl+0x8f/0xc0 [ 997.549447] (UME) [ 997.554279] ? do_vfs_ioctl+0x1060/0x1060 [ 997.554291] do_syscall_64+0x1e8/0x640 [ 997.554298] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 997.554312] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 997.556131] 1*256kB [ 997.559751] RIP: 0033:0x45af49 [ 997.563642] (E) [ 997.568326] RSP: 002b:00007f7f21a51c78 EFLAGS: 00000246 [ 997.570606] 3*512kB [ 997.574724] ORIG_RAX: 0000000000000010 [ 997.576776] (UE) [ 997.581783] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045af49 [ 997.581788] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 997.581797] RBP: 000000000075c070 R08: 0000000000000000 R09: 0000000000000000 [ 997.581802] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7f21a526d4 [ 997.581806] R13: 00000000004c41b2 R14: 00000000004da748 R15: 00000000ffffffff [ 997.622629] 3*1024kB [ 997.649202] (UME) [ 997.686226] 2*2048kB [ 997.720979] (UE) [ 997.726639] 0*4096kB [ 997.741252] = 10372kB [ 997.764832] Node 0 [ 997.797896] DMA32: 2*4kB (ME) 22*8kB (ME) 47*16kB (ME) 12*32kB (UME) 558*64kB (UM) 32*128kB (UM) 20*256kB (UM) 11*512kB (U) 57*1024kB (UM) 23*2048kB (UM) 3*4096kB (U) = 169640kB [ 997.820786] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 997.837542] Node 1 Normal: 2*4kB (ME) 3*8kB (ME) 3*16kB (ME) 5*32kB (ME) 495*64kB (UME) 36*128kB (UME) 54*256kB (UME) 49*512kB (UME) 33*1024kB (UE) 2*2048kB (U) 4*4096kB (UM) = 129712kB [ 997.865441] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 997.877685] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 997.896475] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 997.906299] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 997.921653] 972 total pagecache pages [ 997.925478] 0 pages in swap cache [ 997.929441] Swap cache stats: add 0, delete 0, find 0/0 [ 997.944941] Free swap = 0kB [ 997.948193] Total swap = 0kB [ 997.959085] 1965979 pages RAM [ 997.966720] 0 pages HighMem/MovableOnly [ 997.984168] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 998.000113] 335874 pages reserved [ 998.003599] 0 pages cma reserved [ 998.030189] Total swap = 0kB [ 998.058635] 1965979 pages RAM [ 998.061868] 0 pages HighMem/MovableOnly [ 998.061871] 335874 pages reserved [ 998.061874] 0 pages cma reserved [ 998.061880] Out of memory: Kill process 7447 (syz-executor.4) score 1000 or sacrifice child [ 998.061902] Killed process 7447 (syz-executor.4) total-vm:37772kB, anon-rss:2132kB, file-rss:0kB, shmem-rss:0kB [ 998.110999] oom_reaper: reaped process 7447 (syz-executor.4), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 998.174708] 8021q: adding VLAN 0 to HW filter on device bond0 [ 998.186146] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 998.203185] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 998.225962] 8021q: adding VLAN 0 to HW filter on device bond0 [ 998.242876] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 998.262434] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 998.269838] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 998.330782] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 998.342117] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 998.348212] 8021q: adding VLAN 0 to HW filter on device team0 [ 998.368302] 8021q: adding VLAN 0 to HW filter on device bond0 [ 998.383303] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 998.394087] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 998.405135] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 998.418459] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 998.425919] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 998.440684] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 998.448315] bridge0: port 1(bridge_slave_0) entered blocking state [ 998.454806] bridge0: port 1(bridge_slave_0) entered forwarding state [ 998.471184] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 998.479689] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 998.495260] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 998.505387] 8021q: adding VLAN 0 to HW filter on device team0 [ 998.516443] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 998.535138] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 998.547135] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 998.558148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 998.569055] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 998.579304] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 998.592896] bridge0: port 2(bridge_slave_1) entered blocking state [ 998.599274] bridge0: port 2(bridge_slave_1) entered forwarding state [ 998.611535] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 998.617639] 8021q: adding VLAN 0 to HW filter on device team0 [ 998.632171] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 998.649980] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 998.671516] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 998.687077] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 998.695175] bridge0: port 1(bridge_slave_0) entered blocking state [ 998.701765] bridge0: port 1(bridge_slave_0) entered forwarding state [ 998.730730] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 998.741300] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 998.751187] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 998.760715] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 998.787604] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 998.798874] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 998.814174] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 998.830362] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 998.837587] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 998.851394] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 998.859001] bridge0: port 1(bridge_slave_0) entered blocking state [ 998.865531] bridge0: port 1(bridge_slave_0) entered forwarding state [ 998.878627] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 998.888628] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 998.925591] bridge0: port 2(bridge_slave_1) entered blocking state [ 998.932009] bridge0: port 2(bridge_slave_1) entered forwarding state [ 998.948387] rsyslogd invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 998.976292] rsyslogd cpuset=/ mems_allowed=0-1 [ 998.986166] CPU: 0 PID: 7028 Comm: rsyslogd Not tainted 4.14.162-syzkaller #0 [ 998.993464] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 999.003344] Call Trace: [ 999.005930] dump_stack+0x142/0x197 [ 999.009586] dump_header+0x177/0x6cd [ 999.013295] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 999.018515] ? ___ratelimit+0x55/0x537 [ 999.022399] oom_kill_process.cold+0x10/0xadd [ 999.026885] ? oom_unkillable_task+0x294/0x390 [ 999.031461] ? lock_downgrade+0x740/0x740 [ 999.035605] out_of_memory+0x2ee/0x1180 [ 999.039568] ? lock_acquire+0x16f/0x430 [ 999.043598] ? oom_killer_disable+0x1d0/0x1d0 [ 999.048095] ? __alloc_pages_slowpath+0xca4/0x2930 [ 999.053019] __alloc_pages_slowpath+0x2251/0x2930 [ 999.058001] ? __alloc_pages_nodemask+0x639/0x7a0 [ 999.062841] ? warn_alloc+0xf0/0xf0 [ 999.066465] ? __might_sleep+0x93/0xb0 [ 999.070358] __alloc_pages_nodemask+0x62c/0x7a0 [ 999.075020] ? __alloc_pages_slowpath+0x2930/0x2930 [ 999.080029] ? lock_downgrade+0x740/0x740 [ 999.084178] alloc_pages_current+0xec/0x1e0 [ 999.088499] __page_cache_alloc+0x248/0x3e0 [ 999.092816] filemap_fault+0xcef/0x1de0 [ 999.096787] ? __lock_page_or_retry+0x8d0/0x8d0 [ 999.101447] ? lock_acquire+0x16f/0x430 [ 999.105411] ? ext4_filemap_fault+0x7b/0xb0 [ 999.109796] ext4_filemap_fault+0x83/0xb0 [ 999.113936] __do_fault+0x104/0x390 [ 999.117587] __handle_mm_fault+0x23bd/0x33d0 [ 999.121989] ? copy_page_range+0x1de0/0x1de0 [ 999.126388] ? find_held_lock+0x35/0x130 [ 999.130442] ? handle_mm_fault+0x1b6/0x7c0 [ 999.134674] handle_mm_fault+0x293/0x7c0 [ 999.138735] __do_page_fault+0x4c1/0xb80 [ 999.142796] ? vmalloc_fault+0xe30/0xe30 [ 999.146888] ? page_fault+0x2f/0x50 [ 999.150596] do_page_fault+0x71/0x511 [ 999.154391] ? page_fault+0x2f/0x50 [ 999.158008] page_fault+0x45/0x50 [ 999.161492] RIP: 0033:0x7f10e9816db4 [ 999.165205] RSP: 002b:00007f10e81e5e40 EFLAGS: 00010207 [ 999.170558] RAX: 0000000000000094 RBX: 0000000001623650 RCX: 00007f10eac461fd [ 999.177817] RDX: 0000000000000094 RSI: 00007f10e9a1a5a0 RDI: 0000000000000000 [ 999.185243] RBP: 0000000000000000 R08: 000000000160e260 R09: 0000000000000000 [ 999.192651] R10: 0000000000000013 R11: 0000000000000000 R12: 000000000065e420 [ 999.200103] R13: 00007f10e81e69c0 R14: 00007f10eb28b040 R15: 0000000000000003 [ 999.228103] Mem-Info: [ 999.237113] active_anon:6164 inactive_anon:188 isolated_anon:0 [ 999.237113] active_file:52 inactive_file:69 isolated_file:14 [ 999.237113] unevictable:0 dirty:18 writeback:26 unstable:0 [ 999.237113] slab_reclaimable:12033 slab_unreclaimable:104152 [ 999.237113] mapped:32 shmem:242 pagetables:418 bounce:0 [ 999.237113] free:25277 free_pcp:30 free_cma:0 [ 999.271499] Node 0 active_anon:24592kB inactive_anon:744kB active_file:40kB inactive_file:204kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:52kB dirty:40kB writeback:40kB shmem:960kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 4096kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 999.299436] Node 1 active_anon:64kB inactive_anon:8kB active_file:24kB inactive_file:28kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:8kB writeback:0kB shmem:8kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 999.325675] Node 0 DMA free:10436kB min:216kB low:268kB high:320kB active_anon:12kB inactive_anon:0kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:4kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 999.354038] lowmem_reserve[]: 0 2569 2569 2569 2569 [ 999.354400] syz-executor.5: [ 999.359241] Node 0 DMA32 free:36748kB min:36380kB low:45472kB high:54564kB active_anon:24580kB inactive_anon:744kB active_file:120kB inactive_file:32kB unevictable:0kB writepending:28kB present:3129332kB managed:2634320kB mlocked:0kB kernel_stack:7008kB pagetables:1624kB bounce:0kB free_pcp:656kB local_pcp:0kB free_cma:0kB [ 999.368988] page allocation failure: order:4 [ 999.391895] lowmem_reserve[]: 0 0 0 0 0 [ 999.397753] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 999.400482] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 999.408586] syz-executor.5 cpuset= [ 999.433665] lowmem_reserve[]: 0 0 0 0 0 [ 999.433691] Node 1 Normal free:53364kB min:53508kB low:66884kB high:80260kB active_anon:64kB inactive_anon:8kB active_file:24kB inactive_file:28kB unevictable:0kB writepending:8kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:128kB pagetables:48kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 999.433711] lowmem_reserve[]: 0 0 0 0 0 [ 999.433731] Node 0 DMA: 5*4kB (ME) 4*8kB (M) [ 999.443424] syz5 [ 999.472220] 5*16kB [ 999.479111] mems_allowed=0-1 [ 999.480762] (ME) [ 999.482886] CPU: 1 PID: 7430 Comm: syz-executor.5 Not tainted 4.14.162-syzkaller #0 [ 999.485549] 6*32kB [ 999.487545] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 999.487549] Call Trace: [ 999.495357] (UME) [ 999.497573] dump_stack+0x142/0x197 [ 999.506927] 6*64kB [ 999.509492] warn_alloc.cold+0x96/0x1af [ 999.511649] (UME) [ 999.515261] ? zone_watermark_ok_safe+0x2b0/0x2b0 [ 999.517484] 6*128kB [ 999.521459] ? __alloc_pages_direct_compact+0xbc/0x380 [ 999.521472] __alloc_pages_slowpath+0x23c6/0x2930 [ 999.523607] (UME) [ 999.528451] ? save_trace+0x290/0x290 [ 999.530858] 1*256kB [ 999.536115] ? warn_alloc+0xf0/0xf0 [ 999.540952] (E) [ 999.543163] ? __might_sleep+0x93/0xb0 [ 999.547028] 3*512kB [ 999.549381] __alloc_pages_nodemask+0x62c/0x7a0 [ 999.553114] (UE) [ 999.555071] ? lock_downgrade+0x740/0x740 [ 999.559068] 3*1024kB [ 999.561576] ? __alloc_pages_slowpath+0x2930/0x2930 [ 999.561594] alloc_pages_current+0xec/0x1e0 [ 999.561605] ion_page_pool_alloc+0x11f/0x1c0 [ 999.566321] (UME) [ 999.568468] ion_system_heap_allocate+0x138/0x910 [ 999.572622] 2*2048kB [ 999.575010] ? ion_system_heap_free+0x250/0x250 [ 999.580028] (UE) [ 999.584401] ion_alloc+0x68c/0x860 [ 999.588790] 0*4096kB [ 999.590941] ? ion_dma_buf_release+0x50/0x50 [ 999.590954] ? kasan_check_write+0x14/0x20 [ 999.590965] ? _copy_from_user+0x99/0x110 [ 999.596004] = 10436kB [ 999.598419] ion_ioctl+0x105/0x217 [ 999.603251] Node 0 [ 999.605409] ? ion_alloc.cold+0x40/0x40 [ 999.609104] DMA32: [ 999.611525] ? ion_alloc.cold+0x40/0x40 [ 999.611536] do_vfs_ioctl+0x7ae/0x1060 [ 999.611547] ? selinux_file_mprotect+0x5d0/0x5d0 [ 999.611558] ? lock_downgrade+0x740/0x740 [ 999.615955] 207*4kB [ 999.620244] ? ioctl_preallocate+0x1c0/0x1c0 [ 999.620255] ? __fget+0x237/0x370 [ 999.620270] ? security_file_ioctl+0x7d/0xb0 [ 999.624701] (UME) [ 999.627111] ? security_file_ioctl+0x89/0xb0 [ 999.630730] 47*8kB [ 999.632945] SyS_ioctl+0x8f/0xc0 [ 999.636906] (UMEH) [ 999.639143] ? do_vfs_ioctl+0x1060/0x1060 [ 999.643134] 60*16kB [ 999.646993] do_syscall_64+0x1e8/0x640 [ 999.651906] (UEH) [ 999.656119] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 999.658429] 1065*32kB [ 999.662841] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 999.662848] RIP: 0033:0x45af49 [ 999.662855] RSP: 002b:00007f7f21a51c78 EFLAGS: 00000246 [ 999.666297] (UMEH) [ 999.670693] ORIG_RAX: 0000000000000010 [ 999.670698] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045af49 [ 999.670703] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 999.670707] RBP: 000000000075c070 R08: 0000000000000000 R09: 0000000000000000 [ 999.670712] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7f21a526d4 [ 999.670716] R13: 00000000004c41b2 R14: 00000000004da748 R15: 00000000ffffffff [ 999.680088] warn_alloc_show_mem: 1 callbacks suppressed [ 999.680092] Mem-Info: [ 999.686597] 3*64kB [ 999.690181] active_anon:6164 inactive_anon:188 isolated_anon:0 [ 999.690181] active_file:113 inactive_file:67 isolated_file:32 [ 999.690181] unevictable:0 dirty:12 writeback:10 unstable:0 [ 999.690181] slab_reclaimable:12031 slab_unreclaimable:104140 [ 999.690181] mapped:134 shmem:242 pagetables:418 bounce:0 [ 999.690181] free:25045 free_pcp:72 free_cma:0 [ 999.696820] (UM) [ 999.698432] Node 0 active_anon:24592kB inactive_anon:744kB active_file:428kB inactive_file:240kB unevictable:0kB isolated(anon):0kB isolated(file):128kB mapped:536kB dirty:40kB writeback:40kB shmem:960kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 4096kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 999.703005] 0*128kB 0*256kB 0*512kB [ 999.705517] Node 1 active_anon:64kB inactive_anon:8kB active_file:24kB inactive_file:28kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:8kB writeback:0kB shmem:8kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 999.710740] 0*1024kB 0*2048kB 0*4096kB = 36436kB [ 999.713971] Node 0 [ 999.719301] Node 0 [ 999.721572] DMA free:10436kB min:216kB low:268kB high:320kB active_anon:12kB inactive_anon:0kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:4kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 999.721575] lowmem_reserve[]: 0 2569 2569 2569 2569 [ 999.721595] Node 0 DMA32 free:36380kB min:36380kB low:45472kB high:54564kB active_anon:24580kB inactive_anon:744kB active_file:372kB inactive_file:240kB unevictable:0kB writepending:28kB present:3129332kB managed:2634320kB mlocked:0kB kernel_stack:7008kB pagetables:1624kB bounce:0kB free_pcp:288kB local_pcp:288kB free_cma:0kB [ 999.721614] lowmem_reserve[]: 0 0 0 0 0 [ 999.721631] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 999.721648] lowmem_reserve[]: 0 0 0 0 0 [ 999.721665] Node 1 Normal free:53364kB min:53508kB low:66884kB high:80260kB active_anon:64kB inactive_anon:8kB active_file:24kB inactive_file:28kB unevictable:0kB writepending:8kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:128kB pagetables:48kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 999.721679] lowmem_reserve[]: 0 0 0 0 [ 999.730067] Normal: [ 999.733012] 0 [ 999.745204] 0*4kB [ 999.754830] 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB [ 999.767044] Node 0 [ 999.767701] = 0kB [ 999.770145] DMA: [ 999.772370] Node 1 [ 999.811134] 5*4kB [ 999.837155] Normal: [ 999.844485] (ME) [ 999.865722] 6810*4kB [ 999.875352] 4*8kB [ 999.900752] (UME) 508*8kB (UME) 483*16kB (UE) 448*32kB (UE) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 53368kB [ 999.900808] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 999.900815] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 999.910082] (M) [ 999.935247] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 999.956266] 5*16kB [ 999.967252] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 999.969010] (ME) [ 1000.003872] 276 total pagecache pages [ 1000.010242] 6*32kB [ 1000.015615] 0 pages in swap cache [ 1000.019473] (UME) [ 1000.019772] Swap cache stats: add 0, delete 0, find 0/0 [ 1000.027030] 6*64kB [ 1000.030101] Free swap = 0kB [ 1000.030775] (UME) [ 1000.033130] Total swap = 0kB [ 1000.033137] 1965979 pages RAM [ 1000.035378] 6*128kB [ 1000.048411] 0 pages HighMem/MovableOnly [ 1000.060923] (UME) [ 1000.064625] 335874 pages reserved [ 1000.066588] 1*256kB (E) [ 1000.075489] 0 pages cma reserved [ 1000.075496] Out of memory: Kill process 7176 (syz-execprog) score 1 or sacrifice child [ 1000.075565] Killed process 7433 (syz-executor.1) total-vm:37644kB, anon-rss:64kB, file-rss:0kB, shmem-rss:0kB [ 1000.161290] kworker/0:1 invoked oom-killer: gfp_mask=0x14142c0(GFP_KERNEL|__GFP_NOWARN|__GFP_COMP|__GFP_NOMEMALLOC), nodemask=(null), order=1, oom_score_adj=0 [ 1000.177310] kworker/0:1 cpuset=/ mems_allowed=0-1 [ 1000.183289] CPU: 0 PID: 24 Comm: kworker/0:1 Not tainted 4.14.162-syzkaller #0 [ 1000.190853] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1000.200238] Workqueue: events linkwatch_event [ 1000.204745] Call Trace: [ 1000.207369] dump_stack+0x142/0x197 [ 1000.211096] dump_header+0x177/0x6cd [ 1000.214820] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1000.219932] ? ___ratelimit+0x55/0x537 [ 1000.223837] oom_kill_process.cold+0x10/0xadd [ 1000.228341] ? oom_unkillable_task+0x294/0x390 [ 1000.232939] ? lock_downgrade+0x740/0x740 [ 1000.237095] out_of_memory+0x2ee/0x1180 [ 1000.241080] ? lock_acquire+0x16f/0x430 [ 1000.245068] ? oom_killer_disable+0x1d0/0x1d0 [ 1000.249588] ? __alloc_pages_slowpath+0xca4/0x2930 [ 1000.255093] __alloc_pages_slowpath+0x2251/0x2930 [ 1000.259961] ? warn_alloc+0xf0/0xf0 [ 1000.260318] 3*512kB (UE) 3*1024kB [ 1000.263810] ? __might_sleep+0x93/0xb0 [ 1000.267352] (UME) [ 1000.271235] __alloc_pages_nodemask+0x62c/0x7a0 [ 1000.271246] ? __alloc_pages_slowpath+0x2930/0x2930 [ 1000.271257] ? cache_grow_begin+0x335/0x400 [ 1000.271267] cache_grow_begin+0x80/0x400 [ 1000.271275] ? __cpuset_node_allowed+0xff/0x450 [ 1000.271284] fallback_alloc+0x1fd/0x2c0 [ 1000.271296] ____cache_alloc_node+0x1be/0x1d0 [ 1000.271308] kmem_cache_alloc_node_trace+0xec/0x770 [ 1000.271323] __kmalloc_node_track_caller+0x3d/0x80 [ 1000.271390] __kmalloc_reserve.isra.0+0x40/0xe0 [ 1000.271400] __alloc_skb+0xcf/0x500 [ 1000.294926] 2*2048kB [ 1000.296247] ? skb_trim+0x180/0x180 [ 1000.315386] (UE) [ 1000.319305] ? if_nlmsg_size+0x38f/0x810 [ 1000.334962] 0*4096kB = 10436kB [ 1000.335275] rtmsg_ifinfo_build_skb+0x72/0x140 [ 1000.338455] Node 0 [ 1000.343033] rtmsg_ifinfo_event.part.0+0x35/0xc0 [ 1000.343042] rtmsg_ifinfo+0x6f/0x90 [ 1000.343062] netdev_state_change+0xd3/0xe0 [ 1000.343070] ? dev_valid_name+0x1b0/0x1b0 [ 1000.343081] linkwatch_do_dev+0x8d/0xf0 [ 1000.343089] __linkwatch_run_queue+0x271/0x4b0 [ 1000.354927] DMA32: [ 1000.357925] ? linkwatch_schedule_work+0x130/0x130 [ 1000.375235] 207*4kB (UME) 44*8kB [ 1000.377820] linkwatch_event+0x40/0x60 [ 1000.377830] process_one_work+0x863/0x1600 [ 1000.389398] ? pwq_dec_nr_in_flight+0x2e0/0x2e0 [ 1000.394088] worker_thread+0x5d9/0x1050 [ 1000.395044] (UEH) 76*16kB (UEH) 1110*32kB [ 1000.398078] kthread+0x319/0x430 [ 1000.398087] ? process_one_work+0x1600/0x1600 [ 1000.410174] ? kthread_create_on_node+0xd0/0xd0 [ 1000.414854] ret_from_fork+0x24/0x30 [ 1000.414938] (UMEH) 11*64kB (U) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 38620kB [ 1000.423611] Mem-Info: [ 1000.436541] active_anon:6155 inactive_anon:188 isolated_anon:0 [ 1000.436541] active_file:9 inactive_file:306 isolated_file:0 [ 1000.436541] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1000.436541] slab_reclaimable:12036 slab_unreclaimable:104143 [ 1000.436541] mapped:178 shmem:242 pagetables:412 bounce:0 [ 1000.436541] free:177924 free_pcp:287 free_cma:0 [ 1000.440137] Node 0 [ 1000.477611] Node 0 active_anon:24556kB inactive_anon:744kB active_file:12kB inactive_file:1000kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:712kB dirty:0kB writeback:0kB shmem:960kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 4096kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1000.500061] Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1000.517282] Node 1 Normal: 5763*4kB (UME) 818*8kB (UME) 770*16kB (UME) 670*32kB (UE) 147*64kB (UM) 8*128kB (U) 3*256kB (U) 2*512kB (UM) 241*1024kB (U) 128*2048kB (U) 15*4096kB (U) = 645948kB [ 1000.534734] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1000.543621] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1000.552282] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1000.561407] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1000.563133] Node 1 active_anon:64kB inactive_anon:8kB active_file:24kB inactive_file:324kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:200kB dirty:0kB writeback:0kB shmem:8kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1000.569978] 657 total pagecache pages [ 1000.601810] Node 0 DMA free:10436kB min:216kB low:268kB high:320kB active_anon:12kB inactive_anon:0kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1000.610105] 0 pages in swap cache [ 1000.633400] lowmem_reserve[]: 0 2569 2569 2569 2569 [ 1000.638453] Node 0 DMA32 free:115284kB min:36380kB low:45472kB high:54564kB active_anon:24544kB inactive_anon:744kB active_file:12kB inactive_file:1200kB unevictable:0kB writepending:0kB present:3129332kB managed:2634320kB mlocked:0kB kernel_stack:6976kB pagetables:1600kB bounce:0kB free_pcp:940kB local_pcp:300kB free_cma:0kB [ 1000.650119] Swap cache stats: add 0, delete 0, find 0/0 [ 1000.672859] lowmem_reserve[]: 0 0 0 0 0 [ 1000.677320] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1000.690083] Free swap = 0kB [ 1000.707706] lowmem_reserve[]: 0 0 0 0 0 [ 1000.711754] Node 1 Normal free:796628kB min:53508kB low:66884kB high:80260kB active_anon:64kB inactive_anon:8kB active_file:24kB inactive_file:324kB unevictable:0kB writepending:0kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:96kB pagetables:48kB bounce:0kB free_pcp:1340kB local_pcp:688kB free_cma:0kB [ 1000.730069] Total swap = 0kB [ 1000.743350] 1965979 pages RAM [ 1000.746564] 0 pages HighMem/MovableOnly [ 1000.750588] 335874 pages reserved [ 1000.754042] 0 pages cma reserved [ 1000.765112] lowmem_reserve[]: 0 0 0 0 0 [ 1000.770305] Node 0 DMA: 5*4kB (ME) 4*8kB (M) 5*16kB (ME) 6*32kB (UME) 6*64kB (UME) 6*128kB (UME) 1*256kB (E) 3*512kB (UE) 3*1024kB (UME) 2*2048kB (UE) 0*4096kB = 10436kB [ 1000.804339] Node 0 DMA32: 0*4kB 3*8kB (UEH) 49*16kB (UMEH) 343*32kB (UMEH) 707*64kB (UH) 53*128kB (U) 3*256kB (U) 5*512kB (U) 3*1024kB (U) 0*2048kB 0*4096kB = 70216kB [ 1000.841341] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1000.870119] Node 1 Normal: 3*4kB (ME) 975*8kB (UME) 2365*16kB (UME) 2212*32kB (UE) 1640*64kB (UM) 120*128kB (U) 65*256kB (U) 39*512kB (UM) 252*1024kB (U) 132*2048kB (U) 17*4096kB (U) = 871380kB [ 1000.910085] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1000.918962] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1000.940077] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1000.948959] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1000.980068] 657 total pagecache pages [ 1000.983919] 0 pages in swap cache [ 1000.987520] Swap cache stats: add 0, delete 0, find 0/0 [ 1001.000061] Free swap = 0kB [ 1001.003108] Total swap = 0kB [ 1001.006285] 1965979 pages RAM [ 1001.009392] 0 pages HighMem/MovableOnly [ 1001.013407] 335874 pages reserved [ 1001.016963] 0 pages cma reserved [ 1001.020457] Out of memory: Kill process 7176 (syz-execprog) score 1 or sacrifice child [ 1001.029107] Killed process 7419 (syz-executor.0) total-vm:37644kB, anon-rss:60kB, file-rss:0kB, shmem-rss:0kB [ 1001.060583] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1001.068430] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1001.090699] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1001.098409] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1001.120694] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1001.128675] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1001.150403] bridge0: port 2(bridge_slave_1) entered blocking state [ 1001.157030] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1001.166552] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1001.178062] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1001.247858] device bridge_slave_1 left promiscuous mode [ 1001.265879] bridge0: port 2(bridge_slave_1) entered disabled state [ 1001.337529] device bridge_slave_0 left promiscuous mode [ 1001.355806] bridge0: port 1(bridge_slave_0) entered disabled state [ 1001.417778] device bridge_slave_1 left promiscuous mode [ 1001.430246] bridge0: port 2(bridge_slave_1) entered disabled state [ 1001.470843] device bridge_slave_0 left promiscuous mode [ 1001.476365] bridge0: port 1(bridge_slave_0) entered disabled state [ 1001.532453] device bridge_slave_1 left promiscuous mode [ 1001.538192] bridge0: port 2(bridge_slave_1) entered disabled state [ 1001.580933] device bridge_slave_0 left promiscuous mode [ 1001.586425] bridge0: port 1(bridge_slave_0) entered disabled state [ 1001.664562] device veth1_vlan left promiscuous mode [ 1001.669686] device veth0_vlan left promiscuous mode [ 1001.687465] device veth1_vlan left promiscuous mode [ 1001.697133] device veth0_vlan left promiscuous mode [ 1001.703314] device veth1_vlan left promiscuous mode [ 1001.709431] device veth0_vlan left promiscuous mode 2020/01/06 14:15:19 executed programs: 23 2020/01/06 14:15:19 result: hanged=false err=executor 1: EOF [ 1002.008523] device hsr_slave_1 left promiscuous mode [ 1002.048855] device hsr_slave_0 left promiscuous mode [ 1002.094324] team0 (unregistering): Port device team_slave_1 removed [ 1002.112927] team0 (unregistering): Port device team_slave_0 removed [ 1002.123770] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 1002.162216] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 1002.248287] bond0 (unregistering): Released all slaves [ 1002.392947] device hsr_slave_1 left promiscuous mode [ 1002.433908] device hsr_slave_0 left promiscuous mode [ 1002.454858] team0 (unregistering): Port device team_slave_1 removed [ 1002.472767] team0 (unregistering): Port device team_slave_0 removed [ 1002.493460] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 1002.554601] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 1002.649092] bond0 (unregistering): Released all slaves [ 1002.751226] device hsr_slave_1 left promiscuous mode [ 1002.804760] device hsr_slave_0 left promiscuous mode [ 1002.863885] team0 (unregistering): Port device team_slave_1 removed [ 1002.876276] team0 (unregistering): Port device team_slave_0 removed [ 1002.888208] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 1002.948660] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 1003.037765] bond0 (unregistering): Released all slaves [ 1003.095768] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 1003.107415] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1003.115542] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1003.124459] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 1003.134071] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready 2020/01/06 14:15:21 result: hanged=false err=executor 0: EOF [ 1003.141476] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1003.149212] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1003.157207] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1003.165124] syz-executor.0 (7420) used greatest stack depth: 23792 bytes left [ 1003.175137] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 1003.188139] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1003.196968] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1003.205299] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1003.214864] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 1003.224195] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 1003.238239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1003.246273] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1003.257761] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1003.266157] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1003.279358] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 1003.289181] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1003.301741] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1003.312316] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 1003.318771] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1003.342524] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 1003.352836] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 1003.363903] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 1003.373288] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1003.390782] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1003.397722] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1003.406315] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1003.418811] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1003.428526] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 1003.439132] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1003.462163] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 1003.471431] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 1003.478000] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1003.478136] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1003.503955] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1003.729847] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 1003.744021] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 1003.753815] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1003.762807] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1003.806218] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 1003.820134] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 1003.827685] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1003.838077] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1003.901668] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 1003.908829] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 1003.926700] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 1003.939463] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 1003.946696] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1003.954694] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1003.964659] device veth0_vlan entered promiscuous mode [ 1003.974738] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1003.983771] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1003.996548] device veth1_vlan entered promiscuous mode [ 1004.005620] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 1004.017657] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 1004.027069] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 1004.036911] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 1004.048835] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 1004.062968] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 1004.069540] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1004.079677] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1004.089889] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1004.099834] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1004.114444] device veth0_vlan entered promiscuous mode [ 1004.128521] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1004.136134] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1004.151050] device veth1_vlan entered promiscuous mode 2020/01/06 14:15:25 executed programs: 27 [ 1007.714048] device bridge_slave_1 left promiscuous mode [ 1007.719609] bridge0: port 2(bridge_slave_1) entered disabled state [ 1007.770932] device bridge_slave_0 left promiscuous mode [ 1007.776520] bridge0: port 1(bridge_slave_0) entered disabled state [ 1007.963383] device hsr_slave_1 left promiscuous mode [ 1008.003712] device hsr_slave_0 left promiscuous mode [ 1008.043968] team0 (unregistering): Port device team_slave_1 removed [ 1008.072601] team0 (unregistering): Port device team_slave_0 removed [ 1008.087858] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 1008.117555] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 1008.277172] bond0 (unregistering): Released all slaves [ 1008.368920] syz-executor.2: [ 1008.373317] page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1008.373332] syz-executor.2 cpuset=syz2 mems_allowed=0-1 [ 1008.373353] CPU: 1 PID: 7505 Comm: syz-executor.2 Not tainted 4.14.162-syzkaller #0 [ 1008.373358] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1008.373362] Call Trace: [ 1008.373377] dump_stack+0x142/0x197 [ 1008.373391] warn_alloc.cold+0x96/0x1af [ 1008.385502] syz-executor.5: [ 1008.389131] ? zone_watermark_ok_safe+0x2b0/0x2b0 [ 1008.389150] ? __alloc_pages_direct_compact+0x290/0x380 [ 1008.389163] __alloc_pages_slowpath+0x23c6/0x2930 [ 1008.389181] ? save_trace+0x290/0x290 [ 1008.397920] syz-executor.3: [ 1008.406307] ? warn_alloc+0xf0/0xf0 [ 1008.406327] ? __might_sleep+0x93/0xb0 [ 1008.406338] __alloc_pages_nodemask+0x62c/0x7a0 [ 1008.406348] ? lock_downgrade+0x740/0x740 [ 1008.406356] ? __alloc_pages_slowpath+0x2930/0x2930 [ 1008.406366] ? save_trace+0x290/0x290 [ 1008.406379] alloc_pages_current+0xec/0x1e0 [ 1008.409150] syz-executor.4: [ 1008.412558] ion_page_pool_alloc+0x11f/0x1c0 [ 1008.412567] ion_system_heap_allocate+0x138/0x910 [ 1008.412575] ? ion_alloc+0x19b/0x860 [ 1008.412586] ? rcu_read_lock_sched_held+0x110/0x130 [ 1008.412596] ? ion_system_heap_free+0x250/0x250 [ 1008.412610] ion_alloc+0x222/0x860 [ 1008.412623] ? ion_dma_buf_release+0x50/0x50 [ 1008.412636] ? kasan_check_write+0x14/0x20 [ 1008.418841] page allocation failure: order:4 [ 1008.419608] ? _copy_from_user+0x99/0x110 [ 1008.419621] ion_ioctl+0x105/0x217 [ 1008.419631] ? ion_alloc.cold+0x40/0x40 [ 1008.419645] ? ion_alloc.cold+0x40/0x40 [ 1008.419656] do_vfs_ioctl+0x7ae/0x1060 [ 1008.429827] ? selinux_file_mprotect+0x5d0/0x5d0 [ 1008.429835] ? lock_downgrade+0x740/0x740 [ 1008.429846] ? ioctl_preallocate+0x1c0/0x1c0 [ 1008.429858] ? __fget+0x237/0x370 [ 1008.429874] ? security_file_ioctl+0x7d/0xb0 [ 1008.429882] ? security_file_ioctl+0x89/0xb0 [ 1008.435224] page allocation failure: order:4 [ 1008.438509] SyS_ioctl+0x8f/0xc0 [ 1008.438519] ? do_vfs_ioctl+0x1060/0x1060 [ 1008.438532] do_syscall_64+0x1e8/0x640 [ 1008.438540] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1008.438555] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1008.438563] RIP: 0033:0x45af49 [ 1008.441674] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1008.445171] RSP: 002b:00007f0d58822c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1008.445185] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045af49 [ 1008.445190] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1008.445195] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1008.445200] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f0d588236d4 [ 1008.445205] R13: 00000000004c41b2 R14: 00000000004da748 R15: 00000000ffffffff [ 1008.514297] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1008.515937] page allocation failure: order:4 [ 1008.526555] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1008.526564] syz-executor.5 cpuset=syz5 mems_allowed=0-1 [ 1008.526583] CPU: 0 PID: 7511 Comm: syz-executor.5 Not tainted 4.14.162-syzkaller #0 [ 1008.526589] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1008.533933] (null) [ 1008.534422] Call Trace: [ 1008.547703] dump_stack+0x142/0x197 [ 1008.547717] warn_alloc.cold+0x96/0x1af [ 1008.547726] ? zone_watermark_ok_safe+0x2b0/0x2b0 [ 1008.547750] ? __alloc_pages_direct_compact+0x290/0x380 [ 1008.547762] __alloc_pages_slowpath+0x23c6/0x2930 [ 1008.547778] ? save_trace+0x290/0x290 [ 1008.547791] ? warn_alloc+0xf0/0xf0 [ 1008.553665] syz-executor.3 cpuset= [ 1008.555647] ? __might_sleep+0x93/0xb0 [ 1008.555660] __alloc_pages_nodemask+0x62c/0x7a0 [ 1008.555671] ? lock_downgrade+0x740/0x740 [ 1008.555681] ? __alloc_pages_slowpath+0x2930/0x2930 [ 1008.555693] ? save_trace+0x290/0x290 [ 1008.555706] alloc_pages_current+0xec/0x1e0 [ 1008.555717] ion_page_pool_alloc+0x11f/0x1c0 [ 1008.572005] ion_system_heap_allocate+0x138/0x910 [ 1008.572016] ? ion_alloc+0x19b/0x860 [ 1008.572029] ? rcu_read_lock_sched_held+0x110/0x130 [ 1008.572039] ? ion_system_heap_free+0x250/0x250 [ 1008.572051] ion_alloc+0x222/0x860 [ 1008.572065] ? ion_dma_buf_release+0x50/0x50 [ 1008.572079] ? kasan_check_write+0x14/0x20 [ 1008.572089] ? _copy_from_user+0x99/0x110 [ 1008.572098] ion_ioctl+0x105/0x217 [ 1008.572106] ? ion_alloc.cold+0x40/0x40 [ 1008.572119] ? ion_alloc.cold+0x40/0x40 [ 1008.572129] do_vfs_ioctl+0x7ae/0x1060 [ 1008.583794] syz3 [ 1008.586012] ? selinux_file_mprotect+0x5d0/0x5d0 [ 1008.596270] ? lock_downgrade+0x740/0x740 [ 1008.596284] ? ioctl_preallocate+0x1c0/0x1c0 [ 1008.596295] ? __fget+0x237/0x370 [ 1008.596311] ? security_file_ioctl+0x7d/0xb0 [ 1008.596319] ? security_file_ioctl+0x89/0xb0 [ 1008.596330] SyS_ioctl+0x8f/0xc0 [ 1008.596341] ? do_vfs_ioctl+0x1060/0x1060 [ 1008.613991] mems_allowed=0-1 [ 1008.618576] do_syscall_64+0x1e8/0x640 [ 1008.618586] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1008.618602] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1008.618610] RIP: 0033:0x45af49 [ 1008.618615] RSP: 002b:00007f7f21a93c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1008.618624] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045af49 [ 1008.618631] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1008.630524] Mem-Info: [ 1008.633143] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1008.633148] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7f21a946d4 [ 1008.633154] R13: 00000000004c41b2 R14: 00000000004da748 R15: 00000000ffffffff [ 1008.634004] (null) [ 1008.656493] syz-executor.4 cpuset= [ 1008.663095] active_anon:7231 inactive_anon:186 isolated_anon:12 [ 1008.663095] active_file:1139 inactive_file:2440 isolated_file:11 [ 1008.663095] unevictable:0 dirty:583 writeback:0 unstable:0 [ 1008.663095] slab_reclaimable:12317 slab_unreclaimable:98548 [ 1008.663095] mapped:1854 shmem:242 pagetables:432 bounce:0 [ 1008.663095] free:156416 free_pcp:145 free_cma:0 [ 1008.665652] syz4 [ 1008.674196] CPU: 1 PID: 7512 Comm: syz-executor.3 Not tainted 4.14.162-syzkaller #0 [ 1008.685789] mems_allowed=0-1 [ 1008.687041] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1008.687045] Call Trace: [ 1008.687060] dump_stack+0x142/0x197 [ 1008.687074] warn_alloc.cold+0x96/0x1af [ 1008.687083] ? zone_watermark_ok_safe+0x2b0/0x2b0 [ 1008.687098] ? __alloc_pages_direct_compact+0x290/0x380 [ 1008.983912] __alloc_pages_slowpath+0x23c6/0x2930 [ 1008.988775] ? save_trace+0x290/0x290 [ 1008.992583] ? warn_alloc+0xf0/0xf0 [ 1008.996220] ? __might_sleep+0x93/0xb0 [ 1009.000116] __alloc_pages_nodemask+0x62c/0x7a0 [ 1009.004788] ? lock_downgrade+0x740/0x740 [ 1009.008934] ? __alloc_pages_slowpath+0x2930/0x2930 [ 1009.013954] alloc_pages_current+0xec/0x1e0 [ 1009.018264] ion_page_pool_alloc+0x11f/0x1c0 [ 1009.022679] ion_system_heap_allocate+0x138/0x910 [ 1009.027513] ? ion_alloc+0x19b/0x860 [ 1009.031225] ? rcu_read_lock_sched_held+0x110/0x130 [ 1009.036228] ? ion_system_heap_free+0x250/0x250 [ 1009.040901] ion_alloc+0x222/0x860 [ 1009.044430] ? ion_dma_buf_release+0x50/0x50 [ 1009.048829] ? kasan_check_write+0x14/0x20 [ 1009.053050] ? _copy_from_user+0x99/0x110 [ 1009.057182] ion_ioctl+0x105/0x217 [ 1009.060713] ? ion_alloc.cold+0x40/0x40 [ 1009.064683] ? ion_alloc.cold+0x40/0x40 [ 1009.068641] do_vfs_ioctl+0x7ae/0x1060 [ 1009.072514] ? selinux_file_mprotect+0x5d0/0x5d0 [ 1009.077250] ? lock_downgrade+0x740/0x740 [ 1009.081377] ? ioctl_preallocate+0x1c0/0x1c0 [ 1009.085791] ? __fget+0x237/0x370 [ 1009.089244] ? security_file_ioctl+0x7d/0xb0 [ 1009.093638] ? security_file_ioctl+0x89/0xb0 [ 1009.098035] SyS_ioctl+0x8f/0xc0 [ 1009.101386] ? do_vfs_ioctl+0x1060/0x1060 [ 1009.105521] do_syscall_64+0x1e8/0x640 [ 1009.109389] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1009.114215] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1009.119385] RIP: 0033:0x45af49 [ 1009.122554] RSP: 002b:00007fdadbcc4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1009.130243] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045af49 [ 1009.137504] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1009.144756] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1009.152008] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fdadbcc56d4 [ 1009.159260] R13: 00000000004c41b2 R14: 00000000004da748 R15: 00000000ffffffff [ 1009.175267] CPU: 0 PID: 7506 Comm: syz-executor.4 Not tainted 4.14.162-syzkaller #0 [ 1009.183082] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1009.183087] Call Trace: [ 1009.183101] dump_stack+0x142/0x197 [ 1009.183114] warn_alloc.cold+0x96/0x1af [ 1009.183122] ? zone_watermark_ok_safe+0x2b0/0x2b0 [ 1009.183138] ? __alloc_pages_direct_compact+0x290/0x380 [ 1009.183148] __alloc_pages_slowpath+0x23c6/0x2930 [ 1009.183163] ? save_trace+0x290/0x290 [ 1009.210108] Node 0 active_anon:29064kB inactive_anon:748kB active_file:1916kB inactive_file:5136kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:3292kB dirty:1340kB writeback:0kB shmem:964kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1009.212836] ? warn_alloc+0xf0/0xf0 [ 1009.217674] Node 1 active_anon:16kB inactive_anon:4kB active_file:2652kB inactive_file:4704kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:4208kB dirty:1112kB writeback:0kB shmem:4kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1009.221475] ? __might_sleep+0x93/0xb0 [ 1009.221488] __alloc_pages_nodemask+0x62c/0x7a0 [ 1009.221498] ? lock_downgrade+0x740/0x740 [ 1009.221506] ? __alloc_pages_slowpath+0x2930/0x2930 [ 1009.221518] ? policy_node+0xe2/0x110 [ 1009.221530] alloc_pages_current+0xec/0x1e0 [ 1009.221542] ion_page_pool_alloc+0x11f/0x1c0 [ 1009.221550] ion_system_heap_allocate+0x138/0x910 [ 1009.221559] ? ion_alloc+0x19b/0x860 [ 1009.221572] ? rcu_read_lock_sched_held+0x110/0x130 [ 1009.279505] ? ion_system_heap_free+0x250/0x250 [ 1009.279519] ion_alloc+0x222/0x860 [ 1009.279532] ? ion_dma_buf_release+0x50/0x50 [ 1009.279546] ? kasan_check_write+0x14/0x20 [ 1009.279557] ? _copy_from_user+0x99/0x110 [ 1009.279567] ion_ioctl+0x105/0x217 [ 1009.279576] ? ion_alloc.cold+0x40/0x40 [ 1009.279589] ? ion_alloc.cold+0x40/0x40 [ 1009.279599] do_vfs_ioctl+0x7ae/0x1060 [ 1009.279612] ? selinux_file_mprotect+0x5d0/0x5d0 [ 1009.351809] ? lock_downgrade+0x740/0x740 [ 1009.359631] ? ioctl_preallocate+0x1c0/0x1c0 [ 1009.372923] ? __fget+0x237/0x370 [ 1009.376391] ? security_file_ioctl+0x7d/0xb0 [ 1009.380798] ? security_file_ioctl+0x89/0xb0 [ 1009.385212] SyS_ioctl+0x8f/0xc0 [ 1009.388587] ? do_vfs_ioctl+0x1060/0x1060 [ 1009.390064] Node 0 DMA free:10540kB min:216kB low:268kB high:320kB active_anon:12kB inactive_anon:0kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1009.392747] do_syscall_64+0x1e8/0x640 [ 1009.392756] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1009.422950] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1009.432935] RIP: 0033:0x45af49 [ 1009.432940] RSP: 002b:00007f361d0eac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1009.432948] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045af49 [ 1009.432953] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1009.432957] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1009.432961] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f361d0eb6d4 [ 1009.432966] R13: 00000000004c41b2 R14: 00000000004da748 R15: 00000000ffffffff [ 1009.550071] lowmem_reserve[]: 0 2569 2569 2569 2569 [ 1009.555157] Node 0 DMA32 free:45464kB min:36380kB low:45472kB high:54564kB active_anon:29052kB inactive_anon:748kB active_file:1912kB inactive_file:5136kB unevictable:0kB writepending:1340kB present:3129332kB managed:2634320kB mlocked:0kB kernel_stack:7136kB pagetables:1724kB bounce:0kB free_pcp:672kB local_pcp:388kB free_cma:0kB [ 1009.670142] lowmem_reserve[]: 0 0 0 0 0 [ 1009.674196] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1009.716830] syz-executor.4: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1009.751649] syz-executor.4 cpuset=syz4 mems_allowed=0-1 [ 1009.762504] CPU: 0 PID: 7516 Comm: syz-executor.4 Not tainted 4.14.162-syzkaller #0 [ 1009.770077] lowmem_reserve[]: [ 1009.770314] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1009.770321] 0 [ 1009.773406] Call Trace: [ 1009.787123] dump_stack+0x142/0x197 [ 1009.790775] warn_alloc.cold+0x96/0x1af [ 1009.794761] ? zone_watermark_ok_safe+0x2b0/0x2b0 [ 1009.799620] ? __alloc_pages_direct_compact+0xbc/0x380 [ 1009.804916] __alloc_pages_slowpath+0x23c6/0x2930 [ 1009.809765] ? save_trace+0x290/0x290 [ 1009.813568] ? warn_alloc+0xf0/0xf0 [ 1009.817213] ? __might_sleep+0x93/0xb0 [ 1009.821196] __alloc_pages_nodemask+0x62c/0x7a0 [ 1009.825863] ? lock_downgrade+0x740/0x740 [ 1009.830011] ? __alloc_pages_slowpath+0x2930/0x2930 [ 1009.830071] 0 0 [ 1009.835023] ? retint_kernel+0x2d/0x2d [ 1009.835028] 0 [ 1009.836991] alloc_pages_current+0xec/0x1e0 [ 1009.846967] ion_page_pool_alloc+0x11f/0x1c0 [ 1009.851380] ion_system_heap_allocate+0x138/0x910 [ 1009.856235] ? ion_alloc+0x19b/0x860 [ 1009.859962] ? rcu_read_lock_sched_held+0x110/0x130 [ 1009.862570] 0 [ 1009.865093] ? ion_system_heap_free+0x250/0x250 [ 1009.865101] Node 1 [ 1009.866902] ion_alloc+0x222/0x860 [ 1009.877336] ? ion_dma_buf_release+0x50/0x50 [ 1009.881753] ? kasan_check_write+0x14/0x20 [ 1009.885996] ? _copy_from_user+0x99/0x110 [ 1009.890105] Normal free:99904kB min:53508kB low:66884kB high:80260kB active_anon:16kB inactive_anon:4kB active_file:3156kB inactive_file:3656kB unevictable:0kB writepending:360kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:96kB pagetables:16kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1009.890152] ion_ioctl+0x105/0x217 [ 1009.921273] ? ion_alloc.cold+0x40/0x40 [ 1009.925255] ? ion_alloc.cold+0x40/0x40 [ 1009.929236] do_vfs_ioctl+0x7ae/0x1060 [ 1009.933143] ? selinux_file_mprotect+0x5d0/0x5d0 [ 1009.937917] ? lock_downgrade+0x740/0x740 [ 1009.942076] ? ioctl_preallocate+0x1c0/0x1c0 [ 1009.946485] ? __fget+0x237/0x370 [ 1009.949942] ? security_file_ioctl+0x7d/0xb0 [ 1009.954351] ? security_file_ioctl+0x89/0xb0 [ 1009.958769] SyS_ioctl+0x8f/0xc0 [ 1009.962145] ? do_vfs_ioctl+0x1060/0x1060 [ 1009.966312] do_syscall_64+0x1e8/0x640 [ 1009.970208] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1009.975051] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1009.980234] RIP: 0033:0x45af49 [ 1009.980692] lowmem_reserve[]: [ 1009.983412] RSP: 002b:00007f361d0a8c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1009.986535] 0 [ 1009.994219] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045af49 [ 1009.994224] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1009.994228] RBP: 000000000075c070 R08: 0000000000000000 R09: 0000000000000000 [ 1009.994232] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f361d0a96d4 [ 1009.994236] R13: 00000000004c41b2 R14: 00000000004da748 R15: 00000000ffffffff [ 1010.159011] 0 0 0 0 [ 1010.172779] Node 0 DMA: 5*4kB (ME) 4*8kB (M) 6*16kB (UME) 5*32kB (ME) 5*64kB (ME) 5*128kB (ME) 4*256kB (UE) 2*512kB (UE) 3*1024kB (UME) 2*2048kB (UE) 0*4096kB = 10484kB [ 1010.243036] Node 0 DMA32: 64*4kB (UME) 40*8kB (UMEH) 35*16kB (UMEH) 21*32kB (MEH) 13*64kB (UMH) 5*128kB (MH) 41*256kB (UMH) 38*512kB (UMH) 4*1024kB (U) 0*2048kB 0*4096kB = 37328kB [ 1010.294099] syz-executor.5: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1010.294866] syz-executor.3: [ 1010.311926] warn_alloc_show_mem: 1 callbacks suppressed [ 1010.311959] Mem-Info: [ 1010.322608] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1010.342752] syz-executor.5 cpuset=syz5 mems_allowed=0-1 [ 1010.345040] page allocation failure: order:4 [ 1010.348150] CPU: 1 PID: 7523 Comm: syz-executor.5 Not tainted 4.14.162-syzkaller #0 [ 1010.348156] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1010.348159] Call Trace: [ 1010.348176] dump_stack+0x142/0x197 [ 1010.348191] warn_alloc.cold+0x96/0x1af [ 1010.353824] active_anon:7286 inactive_anon:188 isolated_anon:0 [ 1010.353824] active_file:216 inactive_file:183 isolated_file:0 [ 1010.353824] unevictable:0 dirty:16 writeback:0 unstable:0 [ 1010.353824] slab_reclaimable:12342 slab_unreclaimable:98218 [ 1010.353824] mapped:379 shmem:242 pagetables:436 bounce:0 [ 1010.353824] free:40321 free_pcp:91 free_cma:0 [ 1010.360361] ? zone_watermark_ok_safe+0x2b0/0x2b0 [ 1010.360379] ? __alloc_pages_direct_compact+0xbc/0x380 [ 1010.360392] __alloc_pages_slowpath+0x23c6/0x2930 [ 1010.360407] ? save_trace+0x290/0x290 [ 1010.360420] ? warn_alloc+0xf0/0xf0 [ 1010.360442] ? __might_sleep+0x93/0xb0 [ 1010.384280] Node 0 active_anon:29128kB inactive_anon:748kB active_file:348kB inactive_file:268kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:752kB dirty:44kB writeback:0kB shmem:964kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1010.412652] __alloc_pages_nodemask+0x62c/0x7a0 [ 1010.412665] ? lock_downgrade+0x740/0x740 [ 1010.412674] ? __alloc_pages_slowpath+0x2930/0x2930 [ 1010.412690] alloc_pages_current+0xec/0x1e0 [ 1010.412702] ion_page_pool_alloc+0x11f/0x1c0 [ 1010.418704] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1010.422794] ion_system_heap_allocate+0x138/0x910 [ 1010.422803] ? ion_alloc+0x19b/0x860 [ 1010.422813] ? rcu_read_lock_sched_held+0x110/0x130 [ 1010.422823] ? ion_system_heap_free+0x250/0x250 [ 1010.422835] ion_alloc+0x222/0x860 [ 1010.422848] ? ion_dma_buf_release+0x50/0x50 [ 1010.437705] (null) [ 1010.438953] ? kasan_check_write+0x14/0x20 [ 1010.438964] ? _copy_from_user+0x99/0x110 [ 1010.438976] ion_ioctl+0x105/0x217 [ 1010.438986] ? ion_alloc.cold+0x40/0x40 [ 1010.516276] Node 1 active_anon:16kB inactive_anon:4kB active_file:516kB inactive_file:464kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:764kB dirty:20kB writeback:0kB shmem:4kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1010.517808] ? ion_alloc.cold+0x40/0x40 [ 1010.517820] do_vfs_ioctl+0x7ae/0x1060 [ 1010.517834] ? selinux_file_mprotect+0x5d0/0x5d0 [ 1010.532353] syz-executor.3 cpuset= [ 1010.532711] ? lock_downgrade+0x740/0x740 [ 1010.532722] ? ioctl_preallocate+0x1c0/0x1c0 [ 1010.538570] Node 0 [ 1010.540203] ? __fget+0x237/0x370 [ 1010.540220] ? security_file_ioctl+0x7d/0xb0 [ 1010.540227] ? security_file_ioctl+0x89/0xb0 [ 1010.540238] SyS_ioctl+0x8f/0xc0 [ 1010.540246] ? do_vfs_ioctl+0x1060/0x1060 [ 1010.540257] do_syscall_64+0x1e8/0x640 [ 1010.573252] syz3 [ 1010.574359] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1010.591417] mems_allowed=0-1 [ 1010.593379] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1010.593388] RIP: 0033:0x45af49 [ 1010.593393] RSP: 002b:00007f7f21a30c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1010.593401] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045af49 [ 1010.593406] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1010.593412] RBP: 000000000075c118 R08: 0000000000000000 R09: 0000000000000000 [ 1010.665055] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7f21a316d4 [ 1010.672314] R13: 00000000004c41b2 R14: 00000000004da748 R15: 00000000ffffffff [ 1010.679829] CPU: 0 PID: 7525 Comm: syz-executor.3 Not tainted 4.14.162-syzkaller #0 [ 1010.687626] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1010.697839] Call Trace: [ 1010.700418] dump_stack+0x142/0x197 [ 1010.704033] warn_alloc.cold+0x96/0x1af [ 1010.707990] ? zone_watermark_ok_safe+0x2b0/0x2b0 [ 1010.712823] ? __alloc_pages_direct_compact+0xbc/0x380 [ 1010.718084] __alloc_pages_slowpath+0x23c6/0x2930 [ 1010.722920] ? save_trace+0x290/0x290 [ 1010.726705] ? warn_alloc+0xf0/0xf0 [ 1010.730320] ? __might_sleep+0x93/0xb0 [ 1010.734189] __alloc_pages_nodemask+0x62c/0x7a0 [ 1010.738856] ? lock_downgrade+0x740/0x740 [ 1010.742986] ? __alloc_pages_slowpath+0x2930/0x2930 [ 1010.747983] ? save_trace+0x290/0x290 [ 1010.751769] alloc_pages_current+0xec/0x1e0 [ 1010.756083] ion_page_pool_alloc+0x11f/0x1c0 [ 1010.760472] ion_system_heap_allocate+0x138/0x910 [ 1010.765295] ? ion_alloc+0x19b/0x860 [ 1010.768991] ? rcu_read_lock_sched_held+0x110/0x130 [ 1010.773987] ? ion_system_heap_free+0x250/0x250 [ 1010.778636] ion_alloc+0x222/0x860 [ 1010.782161] ? ion_dma_buf_release+0x50/0x50 [ 1010.786554] ? kasan_check_write+0x14/0x20 [ 1010.790771] ? _copy_from_user+0x99/0x110 [ 1010.794900] ion_ioctl+0x105/0x217 [ 1010.798418] ? ion_alloc.cold+0x40/0x40 [ 1010.802375] ? ion_alloc.cold+0x40/0x40 [ 1010.806329] do_vfs_ioctl+0x7ae/0x1060 [ 1010.810205] ? selinux_file_mprotect+0x5d0/0x5d0 [ 1010.814940] ? lock_downgrade+0x740/0x740 [ 1010.819067] ? ioctl_preallocate+0x1c0/0x1c0 [ 1010.823455] ? __fget+0x237/0x370 [ 1010.826893] ? security_file_ioctl+0x7d/0xb0 [ 1010.831279] ? security_file_ioctl+0x89/0xb0 [ 1010.835670] SyS_ioctl+0x8f/0xc0 [ 1010.839015] ? do_vfs_ioctl+0x1060/0x1060 [ 1010.843145] do_syscall_64+0x1e8/0x640 [ 1010.847011] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1010.852012] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1010.857179] RIP: 0033:0x45af49 [ 1010.860348] RSP: 002b:00007fdadbc82c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1010.868035] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045af49 [ 1010.875283] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1010.882537] RBP: 000000000075c070 R08: 0000000000000000 R09: 0000000000000000 [ 1010.889785] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fdadbc836d4 [ 1010.897037] R13: 00000000004c41b2 R14: 00000000004da748 R15: 00000000ffffffff [ 1010.910103] Node 1 Normal: 13*4kB (ME) 15*8kB (UME) 13*16kB (UME) 13*32kB (UME) 7*64kB (M) 8*128kB (M) 10*256kB (UM) 72*512kB (UM) 11*1024kB (UM) 0*2048kB 0*4096kB = 52956kB [ 1010.914845] DMA free:10484kB min:216kB low:268kB high:320kB active_anon:12kB inactive_anon:0kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1010.942903] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1010.985153] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1011.003081] lowmem_reserve[]: 0 2569 2569 2569 2569 [ 1011.006319] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1011.022339] Node 0 DMA32 free:218700kB min:36380kB low:45472kB high:54564kB active_anon:29116kB inactive_anon:748kB active_file:516kB inactive_file:268kB unevictable:0kB writepending:44kB present:3129332kB managed:2634320kB mlocked:0kB kernel_stack:7072kB pagetables:1728kB bounce:0kB free_pcp:404kB local_pcp:172kB free_cma:0kB [ 1011.031604] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1011.097272] 649 total pagecache pages [ 1011.108609] 0 pages in swap cache [ 1011.115557] Swap cache stats: add 0, delete 0, find 0/0 [ 1011.129526] Free swap = 0kB [ 1011.136084] Total swap = 0kB [ 1011.144004] lowmem_reserve[]: 0 0 0 0 0 [ 1011.145026] 1965979 pages RAM [ 1011.157899] 0 pages HighMem/MovableOnly [ 1011.161156] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1011.168920] 335874 pages reserved [ 1011.219499] 0 pages cma reserved [ 1011.260432] lowmem_reserve[]: 0 0 0 0 0 [ 1011.280080] Node 1 Normal free:438492kB min:53508kB low:66884kB high:80260kB active_anon:24kB inactive_anon:4kB active_file:280kB inactive_file:340kB unevictable:0kB writepending:0kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:96kB pagetables:16kB bounce:0kB free_pcp:240kB local_pcp:240kB free_cma:0kB [ 1011.350099] warn_alloc_show_mem: 1 callbacks suppressed [ 1011.350103] Mem-Info: [ 1011.357922] active_anon:7288 inactive_anon:188 isolated_anon:0 [ 1011.357922] active_file:230 inactive_file:180 isolated_file:1 [ 1011.357922] unevictable:0 dirty:5 writeback:0 unstable:0 [ 1011.357922] slab_reclaimable:12343 slab_unreclaimable:98212 [ 1011.357922] mapped:359 shmem:242 pagetables:436 bounce:0 [ 1011.357922] free:194501 free_pcp:111 free_cma:0 [ 1011.380063] lowmem_reserve[]: 0 0 0 0 0 [ 1011.434118] Node 0 DMA: 5*4kB (ME) 4*8kB (M) 6*16kB (UME) 5*32kB (ME) 13*64kB (UME) 8*128kB (UME) 4*256kB (UE) 2*512kB (UE) 3*1024kB (UME) 2*2048kB (UE) 0*4096kB = 11380kB [ 1011.500078] Node 0 active_anon:29128kB inactive_anon:748kB active_file:540kB inactive_file:380kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:864kB dirty:20kB writeback:0kB shmem:964kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1011.500080] Node 0 DMA32: 8*4kB (ME) 7*8kB (MEH) 7*16kB (UMEH) 20*32kB (UMEH) 13*64kB (UMH) 4*128kB (MH) 9*256kB (UMEH) 34*512kB (UMH) 23*1024kB (U) 0*2048kB 0*4096kB = 45448kB [ 1011.616204] Node 1 active_anon:24kB inactive_anon:4kB active_file:168kB inactive_file:340kB unevictable:0kB isolated(anon):0kB isolated(file):4kB mapped:472kB dirty:0kB writeback:0kB shmem:4kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1011.650174] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1011.690076] Node 1 Normal: 14*4kB (UME) 15*8kB (UME) 13*16kB (UME) 13*32kB (UME) 2321*64kB (UM) 1406*128kB (UM) 536*256kB (UM) 374*512kB (UM) 203*1024kB (UM) 4*2048kB (U) 0*4096kB = 874080kB [ 1011.710149] Node 0 DMA free:10540kB min:216kB low:268kB high:320kB active_anon:12kB inactive_anon:0kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1011.790103] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1011.792523] lowmem_reserve[]: [ 1011.798979] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1011.798981] 0 2569 2569 2569 2569 [ 1011.843635] Node 0 DMA32 free:45156kB min:36380kB low:45472kB high:54564kB active_anon:29116kB inactive_anon:748kB active_file:540kB inactive_file:376kB unevictable:0kB writepending:20kB present:3129332kB managed:2634320kB mlocked:0kB kernel_stack:7072kB pagetables:1728kB bounce:0kB free_pcp:936kB local_pcp:684kB free_cma:0kB [ 1011.850048] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1011.970704] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1011.979321] 684 total pagecache pages [ 1011.980047] lowmem_reserve[]: 0 0 0 0 0 [ 1012.000105] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1012.020053] 0 pages in swap cache [ 1012.028973] Swap cache stats: add 0, delete 0, find 0/0 [ 1012.060124] Free swap = 0kB [ 1012.100083] lowmem_reserve[]: 0 0 0 0 0 [ 1012.100602] Total swap = 0kB [ 1012.104122] Node 1 Normal free:512108kB min:53508kB low:66884kB high:80260kB active_anon:44kB inactive_anon:4kB active_file:320kB inactive_file:316kB unevictable:0kB writepending:8kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:96kB pagetables:24kB bounce:0kB free_pcp:288kB local_pcp:184kB free_cma:0kB [ 1012.107138] 1965979 pages RAM [ 1012.107144] 0 pages HighMem/MovableOnly [ 1012.190100] 335874 pages reserved [ 1012.193595] 0 pages cma reserved [ 1012.242327] lowmem_reserve[]: 0 0 0 0 0 [ 1012.246526] Node 0 DMA: 5*4kB (ME) 5*8kB (UM) 5*16kB (ME) 5*32kB (ME) 6*64kB (UME) 5*128kB (ME) 4*256kB (UE) 2*512kB (UE) 3*1024kB (UME) 2*2048kB (UE) 0*4096kB = 10540kB [ 1012.290138] Node 0 DMA32: 1*4kB (U) 3*8kB (MEH) 2*16kB (UH) 19*32kB (MEH) 11*64kB (MH) 4*128kB (MH) 9*256kB (UMEH) 34*512kB (UMH) 23*1024kB (U) 0*2048kB 0*4096kB = 45148kB [ 1012.370102] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1012.402618] Node 1 Normal: 2*4kB (ME) 4*8kB (ME) 12*16kB (ME) 13*32kB (UME) 8*64kB (UM) 9*128kB (UM) 5*256kB (M) 3*512kB (M) 211*1024kB (UM) 6*2048kB (U) 0*4096kB = 233480kB [ 1012.450058] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1012.458939] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1012.550064] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1012.558956] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1012.620136] 641 total pagecache pages [ 1012.625022] 0 pages in swap cache [ 1012.628468] Swap cache stats: add 0, delete 0, find 0/0 [ 1012.652016] Free swap = 0kB [ 1012.655069] Total swap = 0kB [ 1012.658082] 1965979 pages RAM [ 1012.690098] 0 pages HighMem/MovableOnly [ 1012.694195] 335874 pages reserved [ 1012.697641] 0 pages cma reserved [ 1013.831381] IPVS: ftp: loaded support on port[0] = 21 [ 1014.176174] oom_reaper: reaped process 7512 (syz-executor.3), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1014.211237] rsyslogd invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1014.253152] rsyslogd cpuset=/ mems_allowed=0-1 [ 1014.257777] CPU: 0 PID: 7028 Comm: rsyslogd Not tainted 4.14.162-syzkaller #0 [ 1014.265122] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1014.274456] Call Trace: [ 1014.277040] dump_stack+0x142/0x197 [ 1014.280670] dump_header+0x177/0x6cd [ 1014.284364] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1014.289445] ? ___ratelimit+0x55/0x537 [ 1014.293312] oom_kill_process.cold+0x10/0xadd [ 1014.297822] ? oom_unkillable_task+0x294/0x390 [ 1014.302385] ? lock_downgrade+0x740/0x740 [ 1014.306511] out_of_memory+0x2ee/0x1180 [ 1014.310464] ? lock_acquire+0x16f/0x430 [ 1014.314419] ? oom_killer_disable+0x1d0/0x1d0 [ 1014.318890] ? __alloc_pages_slowpath+0xca4/0x2930 [ 1014.323814] __alloc_pages_slowpath+0x2251/0x2930 [ 1014.328645] ? __alloc_pages_nodemask+0x639/0x7a0 [ 1014.333478] ? warn_alloc+0xf0/0xf0 [ 1014.337095] ? __might_sleep+0x93/0xb0 [ 1014.340959] __alloc_pages_nodemask+0x62c/0x7a0 [ 1014.345607] ? __alloc_pages_slowpath+0x2930/0x2930 [ 1014.350600] ? lock_downgrade+0x740/0x740 [ 1014.354729] alloc_pages_current+0xec/0x1e0 [ 1014.359039] __page_cache_alloc+0x248/0x3e0 [ 1014.363344] filemap_fault+0xcef/0x1de0 [ 1014.367299] ? radix_tree_next_chunk+0x43e/0x9a0 [ 1014.372038] ? __lock_page_or_retry+0x8d0/0x8d0 [ 1014.376685] ? lock_acquire+0x16f/0x430 [ 1014.380648] ? ext4_filemap_fault+0x7b/0xb0 [ 1014.384958] ext4_filemap_fault+0x83/0xb0 [ 1014.389084] __do_fault+0x104/0x390 [ 1014.392691] __handle_mm_fault+0x23bd/0x33d0 [ 1014.397077] ? copy_page_range+0x1de0/0x1de0 [ 1014.401461] ? find_held_lock+0x35/0x130 [ 1014.405520] ? handle_mm_fault+0x1b6/0x7c0 [ 1014.409739] handle_mm_fault+0x293/0x7c0 [ 1014.413797] __do_page_fault+0x4c1/0xb80 [ 1014.417836] ? vmalloc_fault+0xe30/0xe30 [ 1014.421888] ? page_fault+0x2f/0x50 [ 1014.425494] do_page_fault+0x71/0x511 [ 1014.429287] ? page_fault+0x2f/0x50 [ 1014.432889] page_fault+0x45/0x50 [ 1014.436320] RIP: 0033:0x7f10eac461fd [ 1014.440021] RSP: 002b:00007f10e81e5e30 EFLAGS: 00010293 [ 1014.445380] RAX: 0000000000000072 RBX: 0000000001623650 RCX: 00007f10eac461fd [ 1014.452628] RDX: 0000000000000fff RSI: 00007f10e9a1a5a0 RDI: 0000000000000004 [ 1014.459875] RBP: 0000000000000000 R08: 000000000160e260 R09: 0000000000000000 [ 1014.467125] R10: 6b205d3339343337 R11: 0000000000000293 R12: 000000000065e420 [ 1014.474375] R13: 00007f10e81e69c0 R14: 00007f10eb28b040 R15: 0000000000000003 [ 1014.483579] syz-executor.3: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1014.486801] Mem-Info: [ 1014.497862] active_anon:7285 inactive_anon:188 isolated_anon:0 [ 1014.497862] active_file:7 inactive_file:16 isolated_file:0 [ 1014.497862] unevictable:0 dirty:3 writeback:24 unstable:0 [ 1014.497862] slab_reclaimable:12355 slab_unreclaimable:98084 [ 1014.497862] mapped:7 shmem:242 pagetables:438 bounce:0 [ 1014.497862] free:13614 free_pcp:30 free_cma:0 [ 1014.504325] syz-executor.3: [ 1014.532029] Node 0 active_anon:29084kB inactive_anon:748kB active_file:40kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:28kB dirty:8kB writeback:72kB shmem:964kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1014.540787] syz-executor.3 cpuset= [ 1014.563750] Node 1 active_anon:56kB inactive_anon:4kB active_file:0kB inactive_file:68kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:24kB shmem:4kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1014.573421] page allocation failure: order:0 [ 1014.595134] Node 0 DMA free:10384kB min:216kB low:268kB high:320kB active_anon:12kB inactive_anon:0kB active_file:0kB inactive_file:16kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1014.603543] syz3 [ 1014.631229] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1014.634226] lowmem_reserve[]: 0 2569 2569 2569 2569 [ 1014.644304] mems_allowed=0-1 [ 1014.649070] Node 0 [ 1014.653974] syz-executor.3 cpuset=syz3 mems_allowed=0-1 [ 1014.656736] DMA32 free:18096kB min:36380kB low:45472kB high:54564kB active_anon:29072kB inactive_anon:748kB active_file:32kB inactive_file:0kB unevictable:0kB writepending:80kB present:3129332kB managed:2634320kB mlocked:0kB kernel_stack:7072kB pagetables:1728kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1014.664635] CPU: 1 PID: 7525 Comm: syz-executor.3 Not tainted 4.14.162-syzkaller #0 [ 1014.696655] lowmem_reserve[]: [ 1014.697155] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1014.697159] 0 0 [ 1014.700293] Call Trace: [ 1014.700312] dump_stack+0x142/0x197 [ 1014.700324] warn_alloc.cold+0x96/0x1af [ 1014.700333] ? zone_watermark_ok_safe+0x2b0/0x2b0 [ 1014.709669] 0 [ 1014.711632] ? call_timer_fn+0x670/0x670 [ 1014.711649] __alloc_pages_slowpath+0x23c6/0x2930 [ 1014.711670] ? warn_alloc+0xf0/0xf0 [ 1014.711688] ? __might_sleep+0x93/0xb0 [ 1014.711698] __alloc_pages_nodemask+0x62c/0x7a0 [ 1014.711709] ? lock_downgrade+0x740/0x740 [ 1014.711720] ? __alloc_pages_slowpath+0x2930/0x2930 [ 1014.721326] 0 [ 1014.721957] alloc_pages_current+0xec/0x1e0 [ 1014.726766] 0 [ 1014.728552] ion_page_pool_alloc+0x11f/0x1c0 [ 1014.737446] ion_system_heap_allocate+0x138/0x910 [ 1014.744091] Node 0 [ 1014.744930] ? ion_alloc+0x19b/0x860 [ 1014.749583] Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1014.753710] ? rcu_read_lock_sched_held+0x110/0x130 [ 1014.753720] ? ion_system_heap_free+0x250/0x250 [ 1014.753732] ion_alloc+0x222/0x860 [ 1014.753746] ? ion_dma_buf_release+0x50/0x50 [ 1014.753759] ? kasan_check_write+0x14/0x20 [ 1014.753769] ? _copy_from_user+0x99/0x110 [ 1014.753779] ion_ioctl+0x105/0x217 [ 1014.753787] ? ion_alloc.cold+0x40/0x40 [ 1014.753799] ? ion_alloc.cold+0x40/0x40 [ 1014.753808] do_vfs_ioctl+0x7ae/0x1060 [ 1014.753819] ? selinux_file_mprotect+0x5d0/0x5d0 [ 1014.753829] ? lock_downgrade+0x740/0x740 [ 1014.765957] lowmem_reserve[]: [ 1014.766883] ? ioctl_preallocate+0x1c0/0x1c0 [ 1014.771307] 0 [ 1014.776096] ? __fget+0x237/0x370 [ 1014.778310] 0 [ 1014.782012] ? security_file_ioctl+0x7d/0xb0 [ 1014.782020] ? security_file_ioctl+0x89/0xb0 [ 1014.782030] SyS_ioctl+0x8f/0xc0 [ 1014.782038] ? do_vfs_ioctl+0x1060/0x1060 [ 1014.782050] do_syscall_64+0x1e8/0x640 [ 1014.782058] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1014.782073] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1014.782080] RIP: 0033:0x45af49 [ 1014.782086] RSP: 002b:00007fdadbc82c78 EFLAGS: 00000246 [ 1014.812626] 0 [ 1014.816356] ORIG_RAX: 0000000000000010 [ 1014.819878] 0 [ 1014.824264] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045af49 [ 1014.824269] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1014.824273] RBP: 000000000075c070 R08: 0000000000000000 R09: 0000000000000000 [ 1014.824277] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fdadbc836d4 [ 1014.824281] R13: 00000000004c41b2 R14: 00000000004da748 R15: 00000000ffffffff [ 1014.829011] CPU: 1 PID: 7512 Comm: syz-executor.3 Not tainted 4.14.162-syzkaller #0 [ 1014.839722] 0 [ 1014.840186] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1014.840189] Call Trace: [ 1014.840204] dump_stack+0x142/0x197 [ 1014.840217] warn_alloc.cold+0x96/0x1af [ 1014.840224] ? zone_watermark_ok_safe+0x2b0/0x2b0 [ 1014.840234] ? call_timer_fn+0x670/0x670 [ 1014.848060] __alloc_pages_slowpath+0x23c6/0x2930 [ 1014.859774] Node 1 [ 1014.860023] ? warn_alloc+0xf0/0xf0 [ 1014.864446] Normal free:25976kB min:53508kB low:66884kB high:80260kB active_anon:56kB inactive_anon:4kB active_file:0kB inactive_file:68kB unevictable:0kB writepending:28kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:96kB pagetables:24kB bounce:0kB free_pcp:120kB local_pcp:120kB free_cma:0kB [ 1014.866198] ? __might_sleep+0x93/0xb0 [ 1014.869623] lowmem_reserve[]: [ 1014.871411] __alloc_pages_nodemask+0x62c/0x7a0 [ 1014.871421] ? lock_downgrade+0x740/0x740 [ 1014.871430] ? __alloc_pages_slowpath+0x2930/0x2930 [ 1014.871449] alloc_pages_current+0xec/0x1e0 [ 1014.871462] ion_page_pool_alloc+0x11f/0x1c0 [ 1014.871470] ion_system_heap_allocate+0x138/0x910 [ 1014.871479] ? ion_alloc+0x19b/0x860 [ 1014.871489] ? rcu_read_lock_sched_held+0x110/0x130 [ 1014.871498] ? ion_system_heap_free+0x250/0x250 [ 1014.871511] ion_alloc+0x222/0x860 [ 1014.880114] ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb [ 1014.880290] ? ion_dma_buf_release+0x50/0x50 [ 1014.883660] ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb [ 1014.887768] ? kasan_check_write+0x14/0x20 [ 1014.891974] ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb [ 1014.896460] ? _copy_from_user+0x99/0x110 [ 1014.901679] ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb [ 1014.904803] ion_ioctl+0x105/0x217 [ 1014.917836] 0 [ 1014.924920] ? ion_alloc.cold+0x40/0x40 [ 1014.924934] ? ion_alloc.cold+0x40/0x40 [ 1014.924944] do_vfs_ioctl+0x7ae/0x1060 [ 1014.924954] ? selinux_file_mprotect+0x5d0/0x5d0 [ 1014.924965] ? lock_downgrade+0x740/0x740 [ 1014.939509] 0 [ 1014.946744] ? ioctl_preallocate+0x1c0/0x1c0 [ 1014.946756] ? __fget+0x237/0x370 [ 1014.946770] ? security_file_ioctl+0x7d/0xb0 [ 1014.946779] ? security_file_ioctl+0x89/0xb0 [ 1014.961690] 0 [ 1014.962386] SyS_ioctl+0x8f/0xc0 [ 1014.964161] 0 [ 1014.973499] ? do_vfs_ioctl+0x1060/0x1060 [ 1014.973510] do_syscall_64+0x1e8/0x640 [ 1014.973518] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1014.973532] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1014.973539] RIP: 0033:0x45af49 [ 1014.973543] RSP: 002b:00007fdadbcc4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1014.973552] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045af49 [ 1014.973557] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1014.973562] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1014.973567] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fdadbcc56d4 [ 1014.973571] R13: 00000000004c41b2 R14: 00000000004da748 R15: 00000000ffffffff [ 1014.981414] warn_alloc_show_mem: 2 callbacks suppressed [ 1014.981417] Mem-Info: [ 1014.988265] 0 [ 1014.988564] active_anon:7285 inactive_anon:188 isolated_anon:0 [ 1014.988564] active_file:7 inactive_file:16 isolated_file:0 [ 1014.988564] unevictable:0 dirty:3 writeback:24 unstable:0 [ 1014.988564] slab_reclaimable:12355 slab_unreclaimable:98084 [ 1014.988564] mapped:7 shmem:242 pagetables:438 bounce:0 [ 1014.988564] free:13555 free_pcp:90 free_cma:0 [ 1014.992670] Node 0 DMA: 6*4kB (UME) 5*8kB [ 1015.002010] Node 0 active_anon:29084kB inactive_anon:748kB active_file:40kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:28kB dirty:8kB writeback:72kB shmem:964kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1015.008030] (UM) [ 1015.034394] Node 1 active_anon:56kB inactive_anon:4kB active_file:0kB inactive_file:68kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:24kB shmem:4kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1015.042556] 6*16kB (UME) 5*32kB (ME) 5*64kB (ME) 6*128kB (UME) 1*256kB (E) 1*512kB (E) 2*1024kB (ME) 1*2048kB (E) 1*4096kB [ 1015.047328] Node 0 [ 1015.056327] (U) [ 1015.061265] DMA free:10384kB min:216kB low:268kB high:320kB active_anon:12kB inactive_anon:0kB active_file:0kB inactive_file:12kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1015.068957] = 10368kB [ 1015.069683] lowmem_reserve[]: [ 1015.078874] Node 0 [ 1015.082500] 0 [ 1015.084468] DMA32: [ 1015.089399] 2569 2569 [ 1015.099306] 45*4kB [ 1015.104855] 2569 [ 1015.118197] (ME) [ 1015.126308] 2569 [ 1015.127593] 43*8kB [ 1015.131204] Node 0 DMA32 free:17964kB min:36380kB low:45472kB high:54564kB active_anon:29072kB inactive_anon:748kB active_file:4kB inactive_file:36kB unevictable:0kB writepending:0kB present:3129332kB managed:2634320kB mlocked:0kB kernel_stack:7072kB pagetables:1728kB bounce:0kB free_pcp:396kB local_pcp:248kB free_cma:0kB [ 1015.131224] lowmem_reserve[]: 0 0 0 0 0 [ 1015.131243] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1015.131261] lowmem_reserve[]: [ 1015.142378] (UME) [ 1015.148334] 0 [ 1015.154256] 20*16kB [ 1015.154605] 0 [ 1015.158040] (ME) [ 1015.166949] 0 [ 1015.175649] 21*32kB [ 1015.177975] 0 [ 1015.182563] (ME) [ 1015.191496] 0 [ 1015.197852] 9*64kB [ 1015.217404] (UM) [ 1015.217491] Node 1 [ 1015.250064] 6*128kB [ 1015.444775] Normal free:53436kB min:53508kB low:66884kB high:80260kB active_anon:56kB inactive_anon:4kB active_file:24kB inactive_file:24kB unevictable:0kB writepending:0kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:96kB pagetables:24kB bounce:0kB free_pcp:120kB local_pcp:120kB free_cma:0kB [ 1015.469230] (UM) [ 1015.500666] lowmem_reserve[]: [ 1015.532516] 9*256kB (UME) 1*512kB (M) 0*1024kB 0*2048kB 3*4096kB (U) = 17964kB [ 1015.546023] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1015.556789] Node 1 Normal: 90*4kB (UME) 87*8kB (UME) 85*16kB (UME) 85*32kB (UME) 120*64kB (UM) 42*128kB (UM) 12*256kB (UM) 5*512kB (UM) 6*1024kB (UM) 4*2048kB (U) 6*4096kB (U) = 62736kB [ 1015.576335] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1015.585443] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1015.600071] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1015.608927] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1015.630065] 0 0 0 0 0 [ 1015.631976] 413 total pagecache pages [ 1015.632602] Node 0 DMA: [ 1015.636391] 0 pages in swap cache [ 1015.636393] 6*4kB (UME) [ 1015.639043] Swap cache stats: add 0, delete 0, find 0/0 [ 1015.639048] Free swap = 0kB [ 1015.660099] 5*8kB (UM) 6*16kB (UME) 5*32kB (ME) 5*64kB (ME) 6*128kB (UME) 1*256kB (E) 1*512kB (E) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (U) = 10368kB [ 1015.690060] Node 0 DMA32: 0*4kB 2*8kB (UE) 2*16kB (UE) 148*32kB (UME) 160*64kB (UM) 34*128kB (UM) 43*256kB (UME) 13*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 37040kB [ 1015.710119] Total swap = 0kB [ 1015.713173] 1965979 pages RAM [ 1015.716271] 0 pages HighMem/MovableOnly [ 1015.740058] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1015.755419] 335874 pages reserved [ 1015.758906] 0 pages cma reserved [ 1015.765197] Out of memory: Kill process 7503 (syz-executor.2) score 1000 or sacrifice child [ 1015.773846] Node 1 Normal: 520*4kB (UME) 560*8kB (UME) 547*16kB (UME) 549*32kB (UME) 7*64kB (M) 6*128kB (UM) 5*256kB (UM) 5*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 37936kB [ 1015.779805] Killed process 7505 (syz-executor.2) total-vm:38300kB, anon-rss:2188kB, file-rss:0kB, shmem-rss:0kB [ 1015.803245] syz-executor.3: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1015.817026] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1015.825921] syz-executor.3 cpuset=syz3 mems_allowed=0-1 [ 1015.831347] syz-executor.2: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1015.833018] syz-executor.4: [ 1015.843205] CPU: 1 PID: 7512 Comm: syz-executor.3 Not tainted 4.14.162-syzkaller #0 [ 1015.843211] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1015.849081] syz-executor.5: [ 1015.854567] Call Trace: [ 1015.854586] dump_stack+0x142/0x197 [ 1015.854599] warn_alloc.cold+0x96/0x1af [ 1015.854606] ? zone_watermark_ok_safe+0x2b0/0x2b0 [ 1015.854621] ? __alloc_pages_direct_compact+0xbc/0x380 [ 1015.865524] syz-executor.4: [ 1015.866970] __alloc_pages_slowpath+0x23c6/0x2930 [ 1015.869529] page allocation failure: order:0 [ 1015.873148] ? save_trace+0x290/0x290 [ 1015.873161] ? warn_alloc+0xf0/0xf0 [ 1015.873177] ? __might_sleep+0x93/0xb0 [ 1015.873186] __alloc_pages_nodemask+0x62c/0x7a0 [ 1015.873196] ? lock_downgrade+0x740/0x740 [ 1015.878671] syz-executor.5: [ 1015.881982] ? __alloc_pages_slowpath+0x2930/0x2930 [ 1015.882000] alloc_pages_current+0xec/0x1e0 [ 1015.882011] ion_page_pool_alloc+0x11f/0x1c0 [ 1015.882020] ion_system_heap_allocate+0x138/0x910 [ 1015.890388] oom_reaper: reaped process 7505 (syz-executor.2), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1015.895123] ? ion_system_heap_free+0x250/0x250 [ 1015.899641] oom_reaper: reaped process 7511 (syz-executor.5), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1015.903296] ion_alloc+0x68c/0x860 [ 1015.903309] ? ion_dma_buf_release+0x50/0x50 [ 1015.903321] ? kasan_check_write+0x14/0x20 [ 1015.903331] ? _copy_from_user+0x99/0x110 [ 1015.903341] ion_ioctl+0x105/0x217 [ 1015.903350] ? ion_alloc.cold+0x40/0x40 [ 1015.903363] ? ion_alloc.cold+0x40/0x40 [ 1015.924080] page allocation failure: order:0 [ 1015.927618] do_vfs_ioctl+0x7ae/0x1060 [ 1015.932087] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1015.936427] ? selinux_file_mprotect+0x5d0/0x5d0 [ 1015.946029] oom_reaper: reaped process 7516 (syz-executor.4), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1015.951107] ? lock_downgrade+0x740/0x740 [ 1015.951119] ? ioctl_preallocate+0x1c0/0x1c0 [ 1015.951129] ? __fget+0x237/0x370 [ 1015.951144] ? security_file_ioctl+0x7d/0xb0 [ 1015.951152] ? security_file_ioctl+0x89/0xb0 [ 1015.955816] page allocation failure: order:0 [ 1015.965668] SyS_ioctl+0x8f/0xc0 [ 1015.965676] ? do_vfs_ioctl+0x1060/0x1060 [ 1015.965687] do_syscall_64+0x1e8/0x640 [ 1015.965695] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1015.965709] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1015.965715] RIP: 0033:0x45af49 [ 1015.965719] RSP: 002b:00007fdadbcc4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1015.965729] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045af49 [ 1015.965733] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1015.965738] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1015.965746] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fdadbcc56d4 [ 1015.980671] page allocation failure: order:0 [ 1015.982008] R13: 00000000004c41b2 R14: 00000000004da748 R15: 00000000ffffffff [ 1015.985527] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1015.989746] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1015.996921] (null) [ 1015.997875] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1016.013510] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1016.013674] syz-executor.2 cpuset= [ 1016.024174] syz-executor.4 cpuset= [ 1016.027743] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1016.033990] rsyslogd invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask= [ 1016.035639] (null) [ 1016.050247] (null) [ 1016.052261] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1016.056342] syz-executor.5 cpuset= [ 1016.060250] (null), order=0, oom_score_adj=0 [ 1016.060261] rsyslogd cpuset=/ mems_allowed=0-1 [ 1016.067504] syz4 [ 1016.204487] syz2 [ 1016.206938] (null) [ 1016.207293] 265 total pagecache pages [ 1016.208921] syz-executor.4 cpuset= [ 1016.211139] CPU: 1 PID: 7028 Comm: rsyslogd Not tainted 4.14.162-syzkaller #0 [ 1016.225966] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1016.232555] syz5 [ 1016.235311] Call Trace: [ 1016.235321] mems_allowed=0-1 [ 1016.237284] dump_stack+0x142/0x197 [ 1016.240736] syz4 [ 1016.243642] dump_header+0x177/0x6cd [ 1016.247253] mems_allowed=0-1 [ 1016.249232] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1016.261235] ? ___ratelimit+0x55/0x537 [ 1016.265125] oom_kill_process.cold+0x10/0xadd [ 1016.269615] ? oom_unkillable_task+0x294/0x390 [ 1016.274191] ? lock_downgrade+0x740/0x740 [ 1016.278323] out_of_memory+0x2ee/0x1180 [ 1016.282279] ? lock_acquire+0x16f/0x430 [ 1016.286238] ? oom_killer_disable+0x1d0/0x1d0 [ 1016.290722] ? __alloc_pages_slowpath+0xca4/0x2930 [ 1016.292469] syz-executor.5 cpuset= [ 1016.295641] __alloc_pages_slowpath+0x2251/0x2930 [ 1016.295643] syz5 mems_allowed=0-1 [ 1016.299170] ? __alloc_pages_nodemask+0x639/0x7a0 [ 1016.312465] ? warn_alloc+0xf0/0xf0 [ 1016.316096] ? __might_sleep+0x93/0xb0 [ 1016.319980] __alloc_pages_nodemask+0x62c/0x7a0 [ 1016.324643] ? __alloc_pages_slowpath+0x2930/0x2930 [ 1016.329646] ? lock_downgrade+0x740/0x740 [ 1016.333784] alloc_pages_current+0xec/0x1e0 [ 1016.338087] __page_cache_alloc+0x248/0x3e0 [ 1016.342391] filemap_fault+0xcef/0x1de0 [ 1016.346354] ? radix_tree_next_chunk+0x43e/0x9a0 [ 1016.351105] ? __lock_page_or_retry+0x8d0/0x8d0 [ 1016.355772] ? lock_acquire+0x16f/0x430 [ 1016.359740] ? ext4_filemap_fault+0x7b/0xb0 [ 1016.364053] ext4_filemap_fault+0x83/0xb0 [ 1016.368184] __do_fault+0x104/0x390 [ 1016.371799] __handle_mm_fault+0x23bd/0x33d0 [ 1016.376198] ? copy_page_range+0x1de0/0x1de0 [ 1016.380598] ? find_held_lock+0x35/0x130 [ 1016.384666] ? handle_mm_fault+0x1b6/0x7c0 [ 1016.388906] handle_mm_fault+0x293/0x7c0 [ 1016.392958] __do_page_fault+0x4c1/0xb80 [ 1016.397003] ? vmalloc_fault+0xe30/0xe30 [ 1016.401058] ? page_fault+0x2f/0x50 [ 1016.404666] do_page_fault+0x71/0x511 [ 1016.408445] ? page_fault+0x2f/0x50 [ 1016.412058] page_fault+0x45/0x50 [ 1016.415497] RIP: 0033:0x7f10eac461fd [ 1016.419199] RSP: 002b:00007f10e81e5e30 EFLAGS: 00010293 [ 1016.424552] RAX: 0000000000000072 RBX: 0000000001623650 RCX: 00007f10eac461fd [ 1016.431805] RDX: 0000000000000fff RSI: 00007f10e9a1a5a0 RDI: 0000000000000004 [ 1016.439076] RBP: 0000000000000000 R08: 000000000160e260 R09: 0000000000000000 [ 1016.446334] R10: 6b205d3339343337 R11: 0000000000000293 R12: 000000000065e420 [ 1016.453586] R13: 00007f10e81e69c0 R14: 00007f10eb28b040 R15: 0000000000000003 [ 1016.464796] 0 pages in swap cache [ 1016.468243] Swap cache stats: add 0, delete 0, find 0/0 [ 1016.472517] CPU: 0 PID: 7511 Comm: syz-executor.5 Not tainted 4.14.162-syzkaller #0 [ 1016.473618] Free swap = 0kB [ 1016.481373] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1016.481377] Call Trace: [ 1016.481393] dump_stack+0x142/0x197 [ 1016.481406] warn_alloc.cold+0x96/0x1af [ 1016.484400] Total swap = 0kB [ 1016.493738] ? zone_watermark_ok_safe+0x2b0/0x2b0 [ 1016.493752] ? wait_for_completion+0x420/0x420 [ 1016.493765] __alloc_pages_slowpath+0x23c6/0x2930 [ 1016.496325] 1965979 pages RAM [ 1016.499938] ? warn_alloc+0xf0/0xf0 [ 1016.503894] 0 pages HighMem/MovableOnly [ 1016.506889] ? __might_sleep+0x93/0xb0 [ 1016.511715] 335874 pages reserved [ 1016.516263] __alloc_pages_nodemask+0x62c/0x7a0 [ 1016.521093] 0 pages cma reserved [ 1016.524179] ? __alloc_pages_slowpath+0x2930/0x2930 [ 1016.552054] alloc_pages_current+0xec/0x1e0 [ 1016.556374] ion_page_pool_alloc+0x11f/0x1c0 [ 1016.560777] ion_system_heap_allocate+0x138/0x910 [ 1016.565614] ? ion_alloc+0x19b/0x860 [ 1016.569321] ? rcu_read_lock_sched_held+0x110/0x130 [ 1016.574330] ? ion_system_heap_free+0x250/0x250 [ 1016.578996] ion_alloc+0x222/0x860 [ 1016.582544] ? ion_dma_buf_release+0x50/0x50 [ 1016.586973] ? kasan_check_write+0x14/0x20 [ 1016.590051] warn_alloc_show_mem: 1 callbacks suppressed [ 1016.590054] Mem-Info: [ 1016.591212] ? _copy_from_user+0x99/0x110 [ 1016.596582] active_anon:6188 inactive_anon:188 isolated_anon:0 [ 1016.596582] active_file:11 inactive_file:12 isolated_file:0 [ 1016.596582] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1016.596582] slab_reclaimable:12356 slab_unreclaimable:98038 [ 1016.596582] mapped:2 shmem:242 pagetables:436 bounce:0 [ 1016.596582] free:14878 free_pcp:385 free_cma:0 [ 1016.598977] ion_ioctl+0x105/0x217 [ 1016.610044] mems_allowed=0-1 [ 1016.635463] ? ion_alloc.cold+0x40/0x40 [ 1016.635476] ? ion_alloc.cold+0x40/0x40 [ 1016.635487] do_vfs_ioctl+0x7ae/0x1060 [ 1016.639030] Node 0 active_anon:24700kB inactive_anon:748kB active_file:20kB inactive_file:24kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:8kB dirty:0kB writeback:0kB shmem:964kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 4096kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1016.642100] ? selinux_file_mprotect+0x5d0/0x5d0 [ 1016.642109] ? lock_downgrade+0x740/0x740 [ 1016.642118] ? ioctl_preallocate+0x1c0/0x1c0 [ 1016.660061] Node 1 active_anon:52kB inactive_anon:4kB active_file:24kB inactive_file:24kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:4kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1016.680605] ? __fget+0x237/0x370 [ 1016.680622] ? security_file_ioctl+0x7d/0xb0 [ 1016.680631] ? security_file_ioctl+0x89/0xb0 [ 1016.720062] Node 0 [ 1016.720092] SyS_ioctl+0x8f/0xc0 [ 1016.723526] DMA free:10368kB min:216kB low:268kB high:320kB active_anon:12kB inactive_anon:0kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1016.723531] lowmem_reserve[]: [ 1016.727924] ? do_vfs_ioctl+0x1060/0x1060 [ 1016.760044] 0 [ 1016.763458] do_syscall_64+0x1e8/0x640 [ 1016.766539] 2569 [ 1016.770670] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1016.770685] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1016.770692] RIP: 0033:0x45af49 [ 1016.790041] 2569 [ 1016.791533] RSP: 002b:00007f7f21a93c78 EFLAGS: 00000246 [ 1016.791538] 2569 [ 1016.793588] ORIG_RAX: 0000000000000010 [ 1016.798947] 2569 [ 1016.800990] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045af49 [ 1016.800995] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1016.801000] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1016.801004] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7f21a946d4 [ 1016.801009] R13: 00000000004c41b2 R14: 00000000004da748 R15: 00000000ffffffff [ 1016.808794] CPU: 0 PID: 7523 Comm: syz-executor.5 Not tainted 4.14.162-syzkaller #0 [ 1016.851081] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1016.860425] Call Trace: [ 1016.860432] Node 0 DMA32 free:18132kB min:36380kB low:45472kB high:54564kB active_anon:24688kB inactive_anon:748kB active_file:20kB inactive_file:20kB unevictable:0kB writepending:0kB present:3129332kB managed:2634320kB mlocked:0kB kernel_stack:7072kB pagetables:1720kB bounce:0kB free_pcp:1284kB local_pcp:628kB free_cma:0kB [ 1016.863014] dump_stack+0x142/0x197 [ 1016.863027] warn_alloc.cold+0x96/0x1af [ 1016.899664] ? zone_watermark_ok_safe+0x2b0/0x2b0 [ 1016.904506] ? wait_for_completion+0x420/0x420 [ 1016.909088] __alloc_pages_slowpath+0x23c6/0x2930 [ 1016.913925] ? preempt_schedule_common+0x4f/0xe0 [ 1016.918665] ? warn_alloc+0xf0/0xf0 [ 1016.922286] ? __might_sleep+0x93/0xb0 [ 1016.926167] __alloc_pages_nodemask+0x62c/0x7a0 [ 1016.930837] ? __alloc_pages_slowpath+0x2930/0x2930 [ 1016.935857] alloc_pages_current+0xec/0x1e0 [ 1016.940169] ion_page_pool_alloc+0x11f/0x1c0 [ 1016.944574] ion_system_heap_allocate+0x138/0x910 [ 1016.949410] ? ion_alloc+0x19b/0x860 [ 1016.953116] ? rcu_read_lock_sched_held+0x110/0x130 [ 1016.958110] ? ion_system_heap_free+0x250/0x250 [ 1016.960033] lowmem_reserve[]: 0 [ 1016.962763] ion_alloc+0x222/0x860 [ 1016.962768] 0 [ 1016.966031] ? ion_dma_buf_release+0x50/0x50 [ 1016.969546] 0 0 [ 1016.971341] ? kasan_check_write+0x14/0x20 [ 1016.971350] ? _copy_from_user+0x99/0x110 [ 1016.971360] ion_ioctl+0x105/0x217 [ 1016.989575] ? ion_alloc.cold+0x40/0x40 [ 1016.990049] Mem-Info: [ 1016.993542] ? ion_alloc.cold+0x40/0x40 [ 1016.995945] active_anon:6188 inactive_anon:188 isolated_anon:0 [ 1016.995945] active_file:11 inactive_file:12 isolated_file:0 [ 1016.995945] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1016.995945] slab_reclaimable:12356 slab_unreclaimable:98038 [ 1016.995945] mapped:2 shmem:242 pagetables:436 bounce:0 [ 1016.995945] free:57565 free_pcp:516 free_cma:0 [ 1016.999899] do_vfs_ioctl+0x7ae/0x1060 [ 1017.036105] ? selinux_file_mprotect+0x5d0/0x5d0 [ 1017.040850] ? lock_downgrade+0x740/0x740 [ 1017.044995] ? ioctl_preallocate+0x1c0/0x1c0 [ 1017.049400] ? __fget+0x237/0x370 [ 1017.052859] ? security_file_ioctl+0x7d/0xb0 [ 1017.057248] ? security_file_ioctl+0x89/0xb0 [ 1017.060067] 0 [ 1017.061725] SyS_ioctl+0x8f/0xc0 [ 1017.061735] ? do_vfs_ioctl+0x1060/0x1060 [ 1017.063522] Node 0 [ 1017.066884] do_syscall_64+0x1e8/0x640 [ 1017.071053] mems_allowed=0-1 [ 1017.073243] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1017.085048] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1017.090220] RIP: 0033:0x45af49 [ 1017.093393] RSP: 002b:00007f7f21a30c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1017.100053] Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1017.101087] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045af49 [ 1017.132967] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1017.140232] RBP: 000000000075c118 R08: 0000000000000000 R09: 0000000000000000 [ 1017.147484] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7f21a316d4 [ 1017.154734] R13: 00000000004c41b2 R14: 00000000004da748 R15: 00000000ffffffff [ 1017.165209] CPU: 1 PID: 7505 Comm: syz-executor.2 Not tainted 4.14.162-syzkaller #0 [ 1017.173087] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1017.182424] Call Trace: [ 1017.185004] dump_stack+0x142/0x197 [ 1017.188618] warn_alloc.cold+0x96/0x1af [ 1017.192583] ? zone_watermark_ok_safe+0x2b0/0x2b0 [ 1017.197422] ? call_timer_fn+0x670/0x670 [ 1017.201494] __alloc_pages_slowpath+0x23c6/0x2930 [ 1017.206334] ? warn_alloc+0xf0/0xf0 [ 1017.209947] ? __might_sleep+0x93/0xb0 [ 1017.213814] __alloc_pages_nodemask+0x62c/0x7a0 [ 1017.218464] ? lock_downgrade+0x740/0x740 [ 1017.222599] ? __alloc_pages_slowpath+0x2930/0x2930 [ 1017.227622] alloc_pages_current+0xec/0x1e0 [ 1017.231935] ion_page_pool_alloc+0x11f/0x1c0 [ 1017.236325] ion_system_heap_allocate+0x138/0x910 [ 1017.241165] ? ion_alloc+0x19b/0x860 [ 1017.244868] ? rcu_read_lock_sched_held+0x110/0x130 [ 1017.249898] ? ion_system_heap_free+0x250/0x250 [ 1017.254563] ion_alloc+0x222/0x860 [ 1017.258113] ? ion_dma_buf_release+0x50/0x50 [ 1017.262517] ? kasan_check_write+0x14/0x20 [ 1017.266754] ? _copy_from_user+0x99/0x110 [ 1017.270887] ion_ioctl+0x105/0x217 [ 1017.274408] ? ion_alloc.cold+0x40/0x40 [ 1017.278368] ? ion_alloc.cold+0x40/0x40 [ 1017.282329] do_vfs_ioctl+0x7ae/0x1060 [ 1017.286212] ? selinux_file_mprotect+0x5d0/0x5d0 [ 1017.290959] ? lock_downgrade+0x740/0x740 [ 1017.295095] ? ioctl_preallocate+0x1c0/0x1c0 [ 1017.299497] ? __fget+0x237/0x370 [ 1017.302939] ? security_file_ioctl+0x7d/0xb0 [ 1017.307331] ? security_file_ioctl+0x89/0xb0 [ 1017.311735] SyS_ioctl+0x8f/0xc0 [ 1017.315110] ? do_vfs_ioctl+0x1060/0x1060 [ 1017.319344] do_syscall_64+0x1e8/0x640 [ 1017.323233] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1017.328080] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1017.333253] RIP: 0033:0x45af49 [ 1017.336426] RSP: 002b:00007f0d58822c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1017.344130] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045af49 [ 1017.351394] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1017.358648] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1017.365897] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f0d588236d4 [ 1017.373157] R13: 00000000004c41b2 R14: 00000000004da748 R15: 00000000ffffffff [ 1017.385878] CPU: 0 PID: 7506 Comm: syz-executor.4 Not tainted 4.14.162-syzkaller #0 [ 1017.390066] Node 0 active_anon:24700kB inactive_anon:748kB active_file:20kB inactive_file:568kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:356kB dirty:0kB writeback:0kB shmem:964kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 4096kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1017.393691] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1017.420690] lowmem_reserve[]: [ 1017.429992] Call Trace: [ 1017.429997] 0 [ 1017.433089] dump_stack+0x142/0x197 [ 1017.433102] warn_alloc.cold+0x96/0x1af [ 1017.445075] ? zone_watermark_ok_safe+0x2b0/0x2b0 [ 1017.449923] ? wait_for_completion+0x420/0x420 [ 1017.454507] __alloc_pages_slowpath+0x23c6/0x2930 [ 1017.459358] ? warn_alloc+0xf0/0xf0 [ 1017.460042] 0 0 0 0 [ 1017.462985] ? __might_sleep+0x93/0xb0 [ 1017.462995] __alloc_pages_nodemask+0x62c/0x7a0 [ 1017.469259] ? __alloc_pages_slowpath+0x2930/0x2930 [ 1017.478912] alloc_pages_current+0xec/0x1e0 [ 1017.480050] Node 1 active_anon:52kB inactive_anon:4kB active_file:24kB inactive_file:28kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:4kB dirty:0kB writeback:0kB shmem:4kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1017.483227] ion_page_pool_alloc+0x11f/0x1c0 [ 1017.509167] Node 1 [ 1017.513534] ion_system_heap_allocate+0x138/0x910 [ 1017.513543] ? ion_alloc+0x19b/0x860 [ 1017.513554] ? rcu_read_lock_sched_held+0x110/0x130 [ 1017.529283] ? ion_system_heap_free+0x250/0x250 [ 1017.530051] Normal free:347444kB min:53508kB low:66884kB high:80260kB active_anon:52kB inactive_anon:4kB active_file:24kB inactive_file:28kB unevictable:0kB writepending:0kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:96kB pagetables:24kB bounce:0kB free_pcp:1448kB local_pcp:732kB free_cma:0kB [ 1017.533947] ion_alloc+0x222/0x860 [ 1017.565071] ? ion_dma_buf_release+0x50/0x50 [ 1017.569482] ? kasan_check_write+0x14/0x20 [ 1017.573717] ? _copy_from_user+0x99/0x110 [ 1017.577862] ion_ioctl+0x105/0x217 [ 1017.580052] Node 0 DMA free:10388kB min:216kB low:268kB high:320kB active_anon:12kB inactive_anon:0kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1017.581403] ? ion_alloc.cold+0x40/0x40 [ 1017.581416] ? ion_alloc.cold+0x40/0x40 [ 1017.615607] do_vfs_ioctl+0x7ae/0x1060 [ 1017.619491] ? selinux_file_mprotect+0x5d0/0x5d0 [ 1017.620042] lowmem_reserve[]: [ 1017.624233] ? lock_downgrade+0x740/0x740 [ 1017.624243] ? ioctl_preallocate+0x1c0/0x1c0 [ 1017.627345] 0 [ 1017.631497] ? __fget+0x237/0x370 [ 1017.631511] ? security_file_ioctl+0x7d/0xb0 [ 1017.631520] ? security_file_ioctl+0x89/0xb0 [ 1017.649949] SyS_ioctl+0x8f/0xc0 [ 1017.650043] 0 [ 1017.653311] ? do_vfs_ioctl+0x1060/0x1060 [ 1017.653313] 0 0 [ 1017.655101] do_syscall_64+0x1e8/0x640 [ 1017.659220] 0 [ 1017.661181] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1017.661196] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1017.661203] RIP: 0033:0x45af49 [ 1017.665070] lowmem_reserve[]: [ 1017.666841] RSP: 002b:00007f361d0eac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1017.671686] 0 [ 1017.676835] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045af49 [ 1017.680005] 2569 [ 1017.690046] Node 0 [ 1017.690810] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1017.692592] DMA: [ 1017.699838] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1017.699844] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f361d0eb6d4 [ 1017.704104] R13: 00000000004c41b2 R14: 00000000004da748 R15: 00000000ffffffff [ 1017.708728] CPU: 0 PID: 7516 Comm: syz-executor.4 Not tainted 4.14.162-syzkaller #0 [ 1017.730064] 2569 [ 1017.735394] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1017.735408] Call Trace: [ 1017.743254] 25*4kB [ 1017.745261] dump_stack+0x142/0x197 [ 1017.760050] 2569 2569 [ 1017.763577] warn_alloc.cold+0x96/0x1af [ 1017.763585] ? zone_watermark_ok_safe+0x2b0/0x2b0 [ 1017.766063] Node 0 [ 1017.770033] ? wait_for_completion+0x420/0x420 [ 1017.770046] __alloc_pages_slowpath+0x23c6/0x2930 [ 1017.770057] ? trace_hardirqs_on_caller+0x400/0x590 [ 1017.774886] (UME) [ 1017.777109] ? warn_alloc+0xf0/0xf0 [ 1017.790053] 5*8kB [ 1017.791523] ? __might_sleep+0x93/0xb0 [ 1017.793639] (UM) [ 1017.797250] __alloc_pages_nodemask+0x62c/0x7a0 [ 1017.799369] 6*16kB [ 1017.803250] ? __alloc_pages_slowpath+0x2930/0x2930 [ 1017.803266] alloc_pages_current+0xec/0x1e0 [ 1017.803278] ion_page_pool_alloc+0x11f/0x1c0 [ 1017.820069] DMA32 free:45520kB min:36380kB low:45472kB high:54564kB active_anon:24688kB inactive_anon:748kB active_file:20kB inactive_file:564kB unevictable:0kB writepending:0kB present:3129332kB managed:2634320kB mlocked:0kB kernel_stack:7072kB pagetables:1720kB bounce:0kB free_pcp:1288kB local_pcp:652kB free_cma:0kB [ 1017.821539] ion_system_heap_allocate+0x138/0x910 [ 1017.827232] lowmem_reserve[]: [ 1017.855589] ? ion_alloc+0x19b/0x860 [ 1017.855600] ? rcu_read_lock_sched_held+0x110/0x130 [ 1017.855608] ? ion_system_heap_free+0x250/0x250 [ 1017.855620] ion_alloc+0x222/0x860 [ 1017.860469] (UME) [ 1017.863544] ? ion_dma_buf_release+0x50/0x50 [ 1017.867239] 5*32kB [ 1017.872240] ? kasan_check_write+0x14/0x20 [ 1017.872250] ? _copy_from_user+0x99/0x110 [ 1017.872260] ion_ioctl+0x105/0x217 [ 1017.895664] (ME) [ 1017.898145] ? ion_alloc.cold+0x40/0x40 [ 1017.902311] 5*64kB [ 1017.905817] ? ion_alloc.cold+0x40/0x40 [ 1017.907863] (ME) [ 1017.911832] do_vfs_ioctl+0x7ae/0x1060 [ 1017.911843] ? selinux_file_mprotect+0x5d0/0x5d0 [ 1017.911854] ? lock_downgrade+0x740/0x740 [ 1017.914072] 0 [ 1017.918020] ? ioctl_preallocate+0x1c0/0x1c0 [ 1017.920087] 6*128kB [ 1017.924803] ? __fget+0x237/0x370 [ 1017.929541] (UME) [ 1017.933693] ? security_file_ioctl+0x7d/0xb0 [ 1017.933701] ? security_file_ioctl+0x89/0xb0 [ 1017.933712] SyS_ioctl+0x8f/0xc0 [ 1017.933721] ? do_vfs_ioctl+0x1060/0x1060 [ 1017.935517] 0 [ 1017.939927] do_syscall_64+0x1e8/0x640 [ 1017.942278] 0 [ 1017.945685] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1017.947816] 0 [ 1017.952220] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1017.952227] RIP: 0033:0x45af49 [ 1017.952231] RSP: 002b:00007f361d0a8c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1017.952239] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045af49 [ 1017.952245] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1017.956649] 1*256kB [ 1017.959981] RBP: 000000000075c070 R08: 0000000000000000 R09: 0000000000000000 [ 1017.959987] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f361d0a96d4 [ 1017.964142] (E) [ 1017.965905] R13: 00000000004c41b2 R14: 00000000004da748 R15: 00000000ffffffff [ 1018.036299] syz-executor.3: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1018.048214] 0 [ 1018.050570] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1018.075877] Mem-Info: [ 1018.078299] active_anon:6188 inactive_anon:188 isolated_anon:0 [ 1018.078299] active_file:11 inactive_file:149 isolated_file:0 [ 1018.078299] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1018.078299] slab_reclaimable:12357 slab_unreclaimable:98049 [ 1018.078299] mapped:90 shmem:242 pagetables:436 bounce:0 [ 1018.078299] free:52893 free_pcp:0 free_cma:0 [ 1018.111503] lowmem_reserve[]: 0 0 0 0 0 [ 1018.115515] Node 1 Normal free:168536kB min:53508kB low:66884kB high:80260kB active_anon:52kB inactive_anon:4kB active_file:36kB inactive_file:12kB unevictable:0kB writepending:0kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:96kB pagetables:24kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1018.146550] syz-executor.3 cpuset=syz3 mems_allowed=0-1 [ 1018.152402] CPU: 1 PID: 7525 Comm: syz-executor.3 Not tainted 4.14.162-syzkaller #0 [ 1018.152408] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1018.152414] Call Trace: [ 1018.152427] dump_stack+0x142/0x197 [ 1018.152438] warn_alloc.cold+0x96/0x1af [ 1018.152444] ? zone_watermark_ok_safe+0x2b0/0x2b0 [ 1018.152456] ? __alloc_pages_direct_compact+0xbc/0x380 [ 1018.152465] __alloc_pages_slowpath+0x23c6/0x2930 [ 1018.152478] ? save_trace+0x290/0x290 [ 1018.169731] ? warn_alloc+0xf0/0xf0 [ 1018.175907] ? __might_sleep+0x93/0xb0 [ 1018.184677] __alloc_pages_nodemask+0x62c/0x7a0 [ 1018.184687] ? lock_downgrade+0x740/0x740 [ 1018.184696] ? __alloc_pages_slowpath+0x2930/0x2930 [ 1018.184713] alloc_pages_current+0xec/0x1e0 [ 1018.184725] ion_page_pool_alloc+0x11f/0x1c0 [ 1018.184733] ion_system_heap_allocate+0x138/0x910 [ 1018.184743] ? ion_system_heap_free+0x250/0x250 [ 1018.184755] ion_alloc+0x68c/0x860 [ 1018.184768] ? ion_dma_buf_release+0x50/0x50 [ 1018.194883] ? kasan_check_write+0x14/0x20 [ 1018.202273] ? _copy_from_user+0x99/0x110 [ 1018.202284] ion_ioctl+0x105/0x217 [ 1018.202292] ? ion_alloc.cold+0x40/0x40 [ 1018.202304] ? ion_alloc.cold+0x40/0x40 [ 1018.202313] do_vfs_ioctl+0x7ae/0x1060 [ 1018.202323] ? selinux_file_mprotect+0x5d0/0x5d0 [ 1018.202332] ? lock_downgrade+0x740/0x740 [ 1018.202341] ? ioctl_preallocate+0x1c0/0x1c0 [ 1018.210881] ? __fget+0x237/0x370 [ 1018.210896] ? security_file_ioctl+0x7d/0xb0 [ 1018.210903] ? security_file_ioctl+0x89/0xb0 [ 1018.210911] SyS_ioctl+0x8f/0xc0 [ 1018.210918] ? do_vfs_ioctl+0x1060/0x1060 [ 1018.210928] do_syscall_64+0x1e8/0x640 [ 1018.210935] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1018.210950] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1018.210956] RIP: 0033:0x45af49 [ 1018.210961] RSP: 002b:00007fdadbc82c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1018.210969] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045af49 [ 1018.210973] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1018.210977] RBP: 000000000075c070 R08: 0000000000000000 R09: 0000000000000000 [ 1018.210981] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fdadbc836d4 [ 1018.210985] R13: 00000000004c41b2 R14: 00000000004da748 R15: 00000000ffffffff [ 1018.213905] Node 0 active_anon:24700kB inactive_anon:748kB active_file:0kB inactive_file:32kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:56kB dirty:0kB writeback:0kB shmem:964kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 4096kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1018.220763] Node 1 active_anon:52kB inactive_anon:4kB active_file:36kB inactive_file:212kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:100kB dirty:0kB writeback:0kB shmem:4kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1018.228928] Node 0 [ 1018.240559] DMA free:10428kB min:216kB low:268kB high:320kB active_anon:12kB inactive_anon:0kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1018.247601] lowmem_reserve[]: [ 1018.256214] lowmem_reserve[]: [ 1018.263713] 0 [ 1018.286570] 0 [ 1018.291970] 1*512kB [ 1018.323410] 0 [ 1018.336270] 2569 [ 1018.420770] 0 [ 1018.465848] (E) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (U) = 10444kB [ 1018.474121] Node 0 DMA32: 615*4kB (UM) 447*8kB (UM) 456*16kB (UME) 591*32kB (UME) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 32244kB [ 1018.504262] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1018.522777] 0 0 [ 1018.524867] Node 0 DMA: 25*4kB (UME) 5*8kB (UM) 6*16kB (UME) 5*32kB (ME) 5*64kB (ME) 6*128kB (UME) 1*256kB (E) 1*512kB (E) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (U) = 10444kB [ 1018.560100] Node 1 Normal: 2130*4kB (U) 2426*8kB (UE) 2861*16kB (UE) 2909*32kB (UE) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 166792kB [ 1018.580100] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1018.600064] Node 0 DMA32: 615*4kB (UM) 447*8kB (UM) 456*16kB (UME) 591*32kB (UME) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 32244kB [ 1018.620065] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1018.628642] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1018.637700] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1018.648479] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1018.657763] Node 1 Normal: 2130*4kB (U) 2422*8kB (UE) 2861*16kB (UE) 2909*32kB (UE) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 166760kB [ 1018.690068] 528 total pagecache pages [ 1018.690076] 2569 2569 2569 [ 1018.693894] 0 pages in swap cache [ 1018.693900] Swap cache stats: add 0, delete 0, find 0/0 [ 1018.700324] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1018.700331] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1018.740151] Free swap = 0kB [ 1018.743200] Total swap = 0kB [ 1018.746218] 1965979 pages RAM [ 1018.749307] 0 pages HighMem/MovableOnly [ 1018.753334] Node 0 DMA32 free:33484kB min:36380kB low:45472kB high:54564kB active_anon:24688kB inactive_anon:748kB active_file:0kB inactive_file:32kB unevictable:0kB writepending:0kB present:3129332kB managed:2634320kB mlocked:0kB kernel_stack:7072kB pagetables:1720kB bounce:0kB free_pcp:948kB local_pcp:712kB free_cma:0kB [ 1018.770039] 335874 pages reserved [ 1018.800098] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1018.809099] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1018.809107] 528 total pagecache pages [ 1018.840125] 0 pages cma reserved [ 1018.842733] lowmem_reserve[]: 0 0 0 0 0 [ 1018.847517] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1018.860051] 0 pages in swap cache [ 1018.892245] Swap cache stats: add 0, delete 0, find 0/0 [ 1018.893296] lowmem_reserve[]: 0 0 0 0 0 [ 1018.900049] Free swap = 0kB [ 1018.910155] Total swap = 0kB [ 1018.913186] 1965979 pages RAM [ 1018.916275] 0 pages HighMem/MovableOnly [ 1018.921826] IPVS: ftp: loaded support on port[0] = 21 [ 1018.929429] 335874 pages reserved [ 1018.942589] Node 1 Normal free:165776kB min:53508kB low:66884kB high:80260kB active_anon:52kB inactive_anon:4kB active_file:36kB inactive_file:1212kB unevictable:0kB writepending:0kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:96kB pagetables:24kB bounce:0kB free_pcp:344kB local_pcp:60kB free_cma:0kB [ 1018.960092] 0 pages cma reserved [ 1018.971556] lowmem_reserve[]: [ 1018.974366] Out of memory: Kill process 7176 (syz-execprog) score 1 or sacrifice child [ 1018.988607] Killed process 7507 (syz-executor.1) total-vm:37644kB, anon-rss:68kB, file-rss:0kB, shmem-rss:0kB [ 1019.010700] 0 0 0 0 0 [ 1019.013245] Node 0 DMA: 25*4kB (UME) 5*8kB (UM) 6*16kB (UME) 5*32kB (ME) 5*64kB (ME) 6*128kB (UME) 1*256kB (E) 1*512kB (E) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (U) = 10444kB [ 1019.030626] Node 0 DMA32: 658*4kB (UMEH) 1104*8kB (UMEH) 460*16kB (UMEH) 593*32kB (UMEH) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 37800kB [ 1019.065988] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB [ 1019.066025] 0*64kB [ 1019.110216] 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1019.116772] Node 1 Normal: 3872*4kB (UME) 2560*8kB (UME) 3097*16kB (UME) 3149*32kB (UE) 415*64kB (UM) 22*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 215664kB [ 1019.140113] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1019.160099] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1019.168687] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1019.190106] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1019.230119] 1060 total pagecache pages [ 1019.234055] 0 pages in swap cache [ 1019.237514] Swap cache stats: add 0, delete 0, find 0/0 [ 1019.250097] Free swap = 0kB [ 1019.253145] Total swap = 0kB [ 1019.256161] 1965979 pages RAM [ 1019.259326] 0 pages HighMem/MovableOnly [ 1019.263532] 335874 pages reserved [ 1019.266986] 0 pages cma reserved [ 1019.462438] syz-executor.4: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1019.490325] syz-executor.4 cpuset=syz4 mems_allowed=0-1 [ 1019.492646] syz-executor.5: page allocation failure: order:4 [ 1019.495761] CPU: 1 PID: 7506 Comm: syz-executor.4 Not tainted 4.14.162-syzkaller #0 [ 1019.495767] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1019.518706] Call Trace: [ 1019.521298] dump_stack+0x142/0x197 [ 1019.524924] warn_alloc.cold+0x96/0x1af [ 1019.528891] ? zone_watermark_ok_safe+0x2b0/0x2b0 [ 1019.530089] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1019.533904] ? __alloc_pages_direct_compact+0xbc/0x380 [ 1019.546780] __alloc_pages_slowpath+0x23c6/0x2930 [ 1019.551634] ? save_trace+0x290/0x290 [ 1019.555432] ? warn_alloc+0xf0/0xf0 [ 1019.559064] ? __might_sleep+0x93/0xb0 [ 1019.560092] syz-executor.5 cpuset= [ 1019.562941] __alloc_pages_nodemask+0x62c/0x7a0 [ 1019.562943] syz5 mems_allowed=0-1 [ 1019.566470] ? lock_downgrade+0x740/0x740 [ 1019.578698] ? __alloc_pages_slowpath+0x2930/0x2930 [ 1019.583722] alloc_pages_current+0xec/0x1e0 [ 1019.588042] ion_page_pool_alloc+0x11f/0x1c0 [ 1019.592439] ion_system_heap_allocate+0x138/0x910 [ 1019.597264] ? ion_system_heap_free+0x250/0x250 [ 1019.601923] ion_alloc+0x68c/0x860 [ 1019.605462] ? ion_dma_buf_release+0x50/0x50 [ 1019.609870] ? kasan_check_write+0x14/0x20 [ 1019.614104] ? _copy_from_user+0x99/0x110 [ 1019.618248] ion_ioctl+0x105/0x217 [ 1019.621782] ? ion_alloc.cold+0x40/0x40 [ 1019.625743] ? ion_alloc.cold+0x40/0x40 [ 1019.629702] do_vfs_ioctl+0x7ae/0x1060 [ 1019.633579] ? selinux_file_mprotect+0x5d0/0x5d0 [ 1019.638327] ? lock_downgrade+0x740/0x740 [ 1019.642476] ? ioctl_preallocate+0x1c0/0x1c0 [ 1019.646880] ? __fget+0x237/0x370 [ 1019.650336] ? security_file_ioctl+0x7d/0xb0 [ 1019.654724] ? security_file_ioctl+0x89/0xb0 [ 1019.659115] SyS_ioctl+0x8f/0xc0 [ 1019.662468] ? do_vfs_ioctl+0x1060/0x1060 [ 1019.666611] do_syscall_64+0x1e8/0x640 [ 1019.670487] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1019.675319] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1019.680490] RIP: 0033:0x45af49 [ 1019.683668] RSP: 002b:00007f361d0eac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1019.691368] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045af49 [ 1019.698631] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1019.705888] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1019.713151] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f361d0eb6d4 [ 1019.720408] R13: 00000000004c41b2 R14: 00000000004da748 R15: 00000000ffffffff [ 1019.730064] CPU: 0 PID: 7523 Comm: syz-executor.5 Not tainted 4.14.162-syzkaller #0 [ 1019.737870] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1019.747220] Call Trace: [ 1019.749814] dump_stack+0x142/0x197 [ 1019.753440] warn_alloc.cold+0x96/0x1af [ 1019.757409] ? zone_watermark_ok_safe+0x2b0/0x2b0 [ 1019.763038] ? __alloc_pages_direct_compact+0xbc/0x380 [ 1019.768319] __alloc_pages_slowpath+0x23c6/0x2930 [ 1019.773163] ? save_trace+0x290/0x290 [ 1019.776962] ? warn_alloc+0xf0/0xf0 [ 1019.780593] ? __might_sleep+0x93/0xb0 [ 1019.784476] __alloc_pages_nodemask+0x62c/0x7a0 [ 1019.789139] ? lock_downgrade+0x740/0x740 [ 1019.793289] ? __alloc_pages_slowpath+0x2930/0x2930 [ 1019.798747] alloc_pages_current+0xec/0x1e0 [ 1019.803065] ion_page_pool_alloc+0x11f/0x1c0 [ 1019.807464] ion_system_heap_allocate+0x138/0x910 [ 1019.812305] ? ion_system_heap_free+0x250/0x250 [ 1019.816972] ion_alloc+0x68c/0x860 [ 1019.820508] ? ion_dma_buf_release+0x50/0x50 [ 1019.824911] ? kasan_check_write+0x14/0x20 [ 1019.829136] ? _copy_from_user+0x99/0x110 [ 1019.833278] ion_ioctl+0x105/0x217 [ 1019.836817] ? ion_alloc.cold+0x40/0x40 [ 1019.840787] ? ion_alloc.cold+0x40/0x40 [ 1019.844765] do_vfs_ioctl+0x7ae/0x1060 [ 1019.848647] ? selinux_file_mprotect+0x5d0/0x5d0 [ 1019.853393] ? lock_downgrade+0x740/0x740 [ 1019.857548] ? ioctl_preallocate+0x1c0/0x1c0 [ 1019.861956] ? __fget+0x237/0x370 [ 1019.865414] ? security_file_ioctl+0x7d/0xb0 [ 1019.869827] ? security_file_ioctl+0x89/0xb0 [ 1019.874238] SyS_ioctl+0x8f/0xc0 [ 1019.877600] ? do_vfs_ioctl+0x1060/0x1060 [ 1019.881754] do_syscall_64+0x1e8/0x640 [ 1019.885639] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1019.890490] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1019.895673] RIP: 0033:0x45af49 [ 1019.898854] RSP: 002b:00007f7f21a30c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1019.906559] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045af49 [ 1019.913828] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1019.921092] RBP: 000000000075c118 R08: 0000000000000000 R09: 0000000000000000 [ 1019.928362] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7f21a316d4 [ 1019.935626] R13: 00000000004c41b2 R14: 00000000004da748 R15: 00000000ffffffff [ 1019.970122] warn_alloc_show_mem: 5 callbacks suppressed [ 1019.970125] Mem-Info: [ 1019.977963] active_anon:6171 inactive_anon:188 isolated_anon:0 [ 1019.977963] active_file:7 inactive_file:847 isolated_file:0 [ 1019.977963] unevictable:0 dirty:75 writeback:0 unstable:0 [ 1019.977963] slab_reclaimable:12370 slab_unreclaimable:98126 [ 1019.977963] mapped:358 shmem:242 pagetables:431 bounce:0 [ 1019.977963] free:119281 free_pcp:342 free_cma:0 [ 1020.030125] Node 0 active_anon:24652kB inactive_anon:748kB active_file:0kB inactive_file:1188kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:656kB dirty:300kB writeback:0kB shmem:964kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 4096kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1020.070121] Node 1 active_anon:32kB inactive_anon:4kB active_file:28kB inactive_file:2200kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:776kB dirty:0kB writeback:0kB shmem:4kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1020.114669] Node 0 DMA free:10424kB min:216kB low:268kB high:320kB active_anon:12kB inactive_anon:0kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1020.122380] syz-executor.2: [ 1020.143749] lowmem_reserve[]: 0 2569 2569 2569 2569 [ 1020.149275] Node 0 DMA32 free:102064kB min:36380kB low:45472kB high:54564kB active_anon:24608kB inactive_anon:748kB active_file:4kB inactive_file:1204kB unevictable:0kB writepending:332kB present:3129332kB managed:2634320kB mlocked:0kB kernel_stack:7040kB pagetables:1684kB bounce:0kB free_pcp:120kB local_pcp:120kB free_cma:0kB [ 1020.190744] lowmem_reserve[]: 0 0 0 0 0 [ 1020.194770] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1020.242761] page allocation failure: order:4 [ 1020.247211] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1020.254913] lowmem_reserve[]: 0 0 0 0 0 [ 1020.258925] Node 1 Normal free:294600kB min:53508kB low:66884kB high:80260kB active_anon:32kB inactive_anon:4kB active_file:28kB inactive_file:2276kB unevictable:0kB writepending:0kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:96kB pagetables:20kB bounce:0kB free_pcp:664kB local_pcp:0kB free_cma:0kB [ 1020.312882] syz-executor.2 cpuset=syz2 mems_allowed=0-1 [ 1020.318299] CPU: 0 PID: 7505 Comm: syz-executor.2 Not tainted 4.14.162-syzkaller #0 [ 1020.326091] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1020.335429] Call Trace: [ 1020.335445] dump_stack+0x142/0x197 [ 1020.335457] warn_alloc.cold+0x96/0x1af [ 1020.335465] ? zone_watermark_ok_safe+0x2b0/0x2b0 [ 1020.335480] ? __alloc_pages_direct_compact+0xbc/0x380 [ 1020.355745] __alloc_pages_slowpath+0x23c6/0x2930 [ 1020.360600] ? save_trace+0x290/0x290 [ 1020.364403] ? warn_alloc+0xf0/0xf0 [ 1020.368033] ? __might_sleep+0x93/0xb0 [ 1020.371923] __alloc_pages_nodemask+0x62c/0x7a0 [ 1020.376592] ? lock_downgrade+0x740/0x740 [ 1020.380746] ? __alloc_pages_slowpath+0x2930/0x2930 [ 1020.385774] alloc_pages_current+0xec/0x1e0 [ 1020.390095] ion_page_pool_alloc+0x11f/0x1c0 [ 1020.394498] ion_system_heap_allocate+0x138/0x910 [ 1020.399335] ? ion_system_heap_free+0x250/0x250 [ 1020.404011] ion_alloc+0x68c/0x860 [ 1020.407549] ? ion_dma_buf_release+0x50/0x50 [ 1020.411949] ? kasan_check_write+0x14/0x20 [ 1020.416170] ? _copy_from_user+0x99/0x110 [ 1020.420305] ion_ioctl+0x105/0x217 [ 1020.420314] ? ion_alloc.cold+0x40/0x40 [ 1020.420326] ? ion_alloc.cold+0x40/0x40 [ 1020.420335] do_vfs_ioctl+0x7ae/0x1060 [ 1020.420345] ? selinux_file_mprotect+0x5d0/0x5d0 [ 1020.420356] ? lock_downgrade+0x740/0x740 [ 1020.444552] ? ioctl_preallocate+0x1c0/0x1c0 [ 1020.448954] ? __fget+0x237/0x370 [ 1020.452412] ? security_file_ioctl+0x7d/0xb0 [ 1020.456814] ? security_file_ioctl+0x89/0xb0 [ 1020.461216] SyS_ioctl+0x8f/0xc0 [ 1020.464567] ? do_vfs_ioctl+0x1060/0x1060 [ 1020.468706] do_syscall_64+0x1e8/0x640 [ 1020.472591] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1020.477435] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1020.482633] RIP: 0033:0x45af49 [ 1020.485815] RSP: 002b:00007f0d58822c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1020.493521] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045af49 [ 1020.500781] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1020.508050] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1020.508058] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f0d588236d4 [ 1020.522624] R13: 00000000004c41b2 R14: 00000000004da748 R15: 00000000ffffffff [ 1020.534061] lowmem_reserve[]: 0 0 0 0 0 [ 1020.538065] Node 0 DMA: 36*4kB (UME) 8*8kB (UM) 9*16kB (UME) 11*32kB (UME) 13*64kB (UME) 8*128kB (UME) 2*256kB (UE) 2*512kB (UE) 3*1024kB (UME) 2*2048kB (UE) 0*4096kB = 11264kB [ 1020.582740] Node 0 DMA32: 11776*4kB (UMH) 1815*8kB (UH) 702*16kB (UEH) 1195*32kB (UE) 80*64kB (U) 111*128kB (U) 41*256kB (U) 4*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 142968kB [ 1020.598703] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1020.632904] Node 1 Normal: 23841*4kB (UE) 4876*8kB (UE) 4286*16kB (UE) 4020*32kB (UE) 1049*64kB (U) 158*128kB (U) 4*256kB (U) 2*512kB (U) 8*1024kB (U) 0*2048kB 1*4096kB (U) = 433284kB [ 1020.672795] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1020.703104] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1020.720325] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1020.729175] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1020.738142] 1141 total pagecache pages [ 1020.760107] 0 pages in swap cache [ 1020.763587] Swap cache stats: add 0, delete 0, find 0/0 [ 1020.768932] Free swap = 0kB [ 1020.772313] Total swap = 0kB [ 1020.780320] 1965979 pages RAM [ 1020.783427] 0 pages HighMem/MovableOnly [ 1020.787389] 335874 pages reserved [ 1020.810080] 0 pages cma reserved [ 1020.929006] chnl_net:caif_netlink_parms(): no params data found [ 1020.970572] syz-executor.5: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1020.990051] syz-executor.5 cpuset=syz5 mems_allowed=0-1 [ 1020.995538] CPU: 0 PID: 7511 Comm: syz-executor.5 Not tainted 4.14.162-syzkaller #0 [ 1021.003324] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1021.012670] Call Trace: [ 1021.015266] dump_stack+0x142/0x197 [ 1021.018892] warn_alloc.cold+0x96/0x1af [ 1021.022858] ? zone_watermark_ok_safe+0x2b0/0x2b0 [ 1021.027694] ? __alloc_pages_direct_compact+0xbc/0x380 [ 1021.032957] __alloc_pages_slowpath+0x23c6/0x2930 [ 1021.032972] ? save_trace+0x290/0x290 [ 1021.032984] ? warn_alloc+0xf0/0xf0 [ 1021.033001] ? __might_sleep+0x93/0xb0 [ 1021.049107] __alloc_pages_nodemask+0x62c/0x7a0 [ 1021.053775] ? lock_downgrade+0x740/0x740 [ 1021.057918] ? __alloc_pages_slowpath+0x2930/0x2930 [ 1021.062947] alloc_pages_current+0xec/0x1e0 [ 1021.067267] ion_page_pool_alloc+0x11f/0x1c0 [ 1021.071658] ion_system_heap_allocate+0x138/0x910 [ 1021.071670] ? ion_system_heap_free+0x250/0x250 [ 1021.071684] ion_alloc+0x68c/0x860 [ 1021.084703] ? ion_dma_buf_release+0x50/0x50 [ 1021.089110] ? kasan_check_write+0x14/0x20 [ 1021.093331] ? _copy_from_user+0x99/0x110 [ 1021.097472] ion_ioctl+0x105/0x217 [ 1021.100998] ? ion_alloc.cold+0x40/0x40 [ 1021.101012] ? ion_alloc.cold+0x40/0x40 [ 1021.101022] do_vfs_ioctl+0x7ae/0x1060 [ 1021.113511] ? selinux_file_mprotect+0x5d0/0x5d0 [ 1021.118263] ? lock_downgrade+0x740/0x740 [ 1021.122414] ? ioctl_preallocate+0x1c0/0x1c0 [ 1021.126828] ? __fget+0x237/0x370 [ 1021.130276] ? security_file_ioctl+0x7d/0xb0 [ 1021.130284] ? security_file_ioctl+0x89/0xb0 [ 1021.130295] SyS_ioctl+0x8f/0xc0 [ 1021.130305] ? do_vfs_ioctl+0x1060/0x1060 [ 1021.146609] do_syscall_64+0x1e8/0x640 [ 1021.150508] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1021.155343] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1021.160527] RIP: 0033:0x45af49 [ 1021.160532] RSP: 002b:00007f7f21a93c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1021.160540] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045af49 [ 1021.160545] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1021.160549] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1021.160555] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7f21a946d4 [ 1021.185962] R13: 00000000004c41b2 R14: 00000000004da748 R15: 00000000ffffffff [ 1021.325579] syz-executor.4: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1021.370102] syz-executor.4 cpuset=syz4 mems_allowed=0-1 [ 1021.371299] warn_alloc_show_mem: 2 callbacks suppressed [ 1021.371302] Mem-Info: [ 1021.375590] CPU: 0 PID: 7516 Comm: syz-executor.4 Not tainted 4.14.162-syzkaller #0 [ 1021.381582] active_anon:6163 inactive_anon:188 isolated_anon:0 [ 1021.381582] active_file:433 inactive_file:855 isolated_file:0 [ 1021.381582] unevictable:0 dirty:128 writeback:0 unstable:0 [ 1021.381582] slab_reclaimable:12382 slab_unreclaimable:98566 [ 1021.381582] mapped:836 shmem:242 pagetables:426 bounce:0 [ 1021.381582] free:62057 free_pcp:153 free_cma:0 [ 1021.383264] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1021.391098] Node 0 active_anon:24620kB inactive_anon:748kB active_file:4kB inactive_file:1432kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:840kB dirty:512kB writeback:0kB shmem:964kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 4096kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1021.423927] Call Trace: [ 1021.423945] dump_stack+0x142/0x197 [ 1021.423957] warn_alloc.cold+0x96/0x1af [ 1021.423965] ? zone_watermark_ok_safe+0x2b0/0x2b0 [ 1021.423981] ? __alloc_pages_direct_compact+0xbc/0x380 [ 1021.433389] Node 1 active_anon:32kB inactive_anon:4kB active_file:1728kB inactive_file:1988kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:2504kB dirty:0kB writeback:0kB shmem:4kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1021.460473] __alloc_pages_slowpath+0x23c6/0x2930 [ 1021.460489] ? save_trace+0x290/0x290 [ 1021.460503] ? warn_alloc+0xf0/0xf0 [ 1021.463100] Node 0 [ 1021.466692] ? __might_sleep+0x93/0xb0 [ 1021.470673] DMA free:10432kB min:216kB low:268kB high:320kB active_anon:12kB inactive_anon:0kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1021.475474] __alloc_pages_nodemask+0x62c/0x7a0 [ 1021.475484] ? lock_downgrade+0x740/0x740 [ 1021.475493] ? __alloc_pages_slowpath+0x2930/0x2930 [ 1021.480800] lowmem_reserve[]: [ 1021.507202] ? retint_kernel+0x2d/0x2d [ 1021.507215] alloc_pages_current+0xec/0x1e0 [ 1021.507227] ion_page_pool_alloc+0x11f/0x1c0 [ 1021.507239] ion_system_heap_allocate+0x138/0x910 [ 1021.512111] 0 [ 1021.515847] ? ion_system_heap_free+0x250/0x250 [ 1021.519444] 2569 [ 1021.521665] ion_alloc+0x68c/0x860 [ 1021.521680] ? ion_dma_buf_release+0x50/0x50 [ 1021.525583] 2569 [ 1021.551118] ? kasan_check_write+0x14/0x20 [ 1021.551129] ? _copy_from_user+0x99/0x110 [ 1021.551138] ion_ioctl+0x105/0x217 [ 1021.551147] ? ion_alloc.cold+0x40/0x40 [ 1021.555819] 2569 [ 1021.559929] ? ion_alloc.cold+0x40/0x40 [ 1021.564929] 2569 [ 1021.568001] do_vfs_ioctl+0x7ae/0x1060 [ 1021.568011] ? selinux_file_mprotect+0x5d0/0x5d0 [ 1021.568021] ? lock_downgrade+0x740/0x740 [ 1021.576240] ? ioctl_preallocate+0x1c0/0x1c0 [ 1021.580682] Node 0 [ 1021.585476] ? __fget+0x237/0x370 [ 1021.585494] ? security_file_ioctl+0x7d/0xb0 [ 1021.587325] DMA32 free:44868kB min:36380kB low:45472kB high:54564kB active_anon:24608kB inactive_anon:748kB active_file:4kB inactive_file:1428kB unevictable:0kB writepending:512kB present:3129332kB managed:2634320kB mlocked:0kB kernel_stack:7040kB pagetables:1684kB bounce:0kB free_pcp:288kB local_pcp:168kB free_cma:0kB [ 1021.591921] ? security_file_ioctl+0x89/0xb0 [ 1021.591934] SyS_ioctl+0x8f/0xc0 [ 1021.591944] ? do_vfs_ioctl+0x1060/0x1060 [ 1021.593983] lowmem_reserve[]: [ 1021.597508] do_syscall_64+0x1e8/0x640 [ 1021.597516] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1021.597529] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1021.601963] 0 [ 1021.603961] RIP: 0033:0x45af49 [ 1021.603967] RSP: 002b:00007f361d0a8c78 EFLAGS: 00000246 [ 1021.608187] 0 [ 1021.612311] ORIG_RAX: 0000000000000010 [ 1021.612316] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045af49 [ 1021.612320] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1021.612324] RBP: 000000000075c070 R08: 0000000000000000 R09: 0000000000000000 [ 1021.612328] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f361d0a96d4 [ 1021.612333] R13: 00000000004c41b2 R14: 00000000004da748 R15: 00000000ffffffff [ 1021.887524] 0 0 0 [ 1021.889911] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1021.915310] lowmem_reserve[]: 0 0 0 0 0 [ 1021.918604] rsyslogd invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask= [ 1021.919302] Node 1 [ 1021.919304] (null), order=0, oom_score_adj=0 [ 1021.930330] Normal free:26904kB min:53508kB low:66884kB high:80260kB active_anon:32kB inactive_anon:4kB active_file:328kB inactive_file:0kB unevictable:0kB writepending:4kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:96kB pagetables:20kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1021.936839] rsyslogd cpuset= [ 1021.967011] lowmem_reserve[]: [ 1021.968814] / [ 1021.970062] 0 [ 1021.973463] mems_allowed=0-1 [ 1021.974829] 0 0 [ 1021.976621] CPU: 0 PID: 7028 Comm: rsyslogd Not tainted 4.14.162-syzkaller #0 [ 1021.979697] 0 [ 1021.981653] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1021.981657] Call Trace: [ 1021.981671] dump_stack+0x142/0x197 [ 1021.981685] dump_header+0x177/0x6cd [ 1021.981694] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1021.981703] ? ___ratelimit+0x55/0x537 [ 1021.988970] 0 [ 1021.990776] oom_kill_process.cold+0x10/0xadd [ 1021.990785] ? oom_unkillable_task+0x294/0x390 [ 1021.990797] ? lock_downgrade+0x740/0x740 [ 1021.990810] out_of_memory+0x2ee/0x1180 [ 1022.002832] ? lock_acquire+0x16f/0x430 [ 1022.006429] Node 0 [ 1022.010130] ? oom_killer_disable+0x1d0/0x1d0 [ 1022.010139] ? __alloc_pages_slowpath+0xca4/0x2930 [ 1022.010149] __alloc_pages_slowpath+0x2251/0x2930 [ 1022.015224] DMA: [ 1022.019105] ? __alloc_pages_nodemask+0x639/0x7a0 [ 1022.020914] 15*4kB [ 1022.025380] ? warn_alloc+0xf0/0xf0 [ 1022.029935] (UME) [ 1022.034088] ? __might_sleep+0x93/0xb0 [ 1022.034098] __alloc_pages_nodemask+0x62c/0x7a0 [ 1022.034109] ? __alloc_pages_slowpath+0x2930/0x2930 [ 1022.038060] 7*8kB [ 1022.042017] ? lock_downgrade+0x740/0x740 [ 1022.042033] alloc_pages_current+0xec/0x1e0 [ 1022.042043] __page_cache_alloc+0x248/0x3e0 [ 1022.044256] (UM) [ 1022.048738] filemap_fault+0xcef/0x1de0 [ 1022.053684] 8*16kB [ 1022.058518] ? radix_tree_next_chunk+0x43e/0x9a0 [ 1022.060570] (UME) [ 1022.065406] ? __lock_page_or_retry+0x8d0/0x8d0 [ 1022.067623] 10*32kB (UME) [ 1022.071237] ? lock_acquire+0x16f/0x430 [ 1022.071245] ? ext4_filemap_fault+0x7b/0xb0 [ 1022.071260] ext4_filemap_fault+0x83/0xb0 [ 1022.073388] 5*64kB [ 1022.077258] __do_fault+0x104/0x390 [ 1022.082001] (UME) [ 1022.086988] __handle_mm_fault+0x23bd/0x33d0 [ 1022.089111] 4*128kB [ 1022.093246] ? copy_page_range+0x1de0/0x1de0 [ 1022.093255] ? find_held_lock+0x35/0x130 [ 1022.093263] ? handle_mm_fault+0x1b6/0x7c0 [ 1022.097560] (ME) [ 1022.101877] handle_mm_fault+0x293/0x7c0 [ 1022.101887] __do_page_fault+0x4c1/0xb80 [ 1022.103924] 3*256kB [ 1022.107880] ? vmalloc_fault+0xe30/0xe30 [ 1022.110124] (UME) [ 1022.114848] ? page_fault+0x2f/0x50 [ 1022.116973] 2*512kB [ 1022.121719] do_page_fault+0x71/0x511 [ 1022.121727] ? page_fault+0x2f/0x50 [ 1022.121736] page_fault+0x45/0x50 [ 1022.124554] (UE) [ 1022.128509] RIP: 0033:0x7f10eac461fd [ 1022.132822] 3*1024kB [ 1022.136970] RSP: 002b:00007f10e81e5e30 EFLAGS: 00010293 [ 1022.139192] (UME) [ 1022.142797] RAX: 000000000000013c RBX: 0000000001623650 RCX: 00007f10eac461fd [ 1022.142802] RDX: 0000000000000fff RSI: 00007f10e9a1a5a0 RDI: 0000000000000004 [ 1022.142807] RBP: 0000000000000000 R08: 000000000160e260 R09: 0000000000000000 [ 1022.142811] R10: 0000000000000013 R11: 0000000000000293 R12: 000000000065e420 [ 1022.142818] R13: 00007f10e81e69c0 R14: 00007f10eb28b040 R15: 0000000000000003 [ 1022.144943] 2*2048kB [ 1022.153531] Mem-Info: [ 1022.181794] (UE) [ 1022.183445] active_anon:6189 inactive_anon:188 isolated_anon:0 [ 1022.183445] active_file:17 inactive_file:17 isolated_file:0 [ 1022.183445] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1022.183445] slab_reclaimable:12409 slab_unreclaimable:98612 [ 1022.183445] mapped:2 shmem:242 pagetables:435 bounce:0 [ 1022.183445] free:13616 free_pcp:30 free_cma:0 [ 1022.186994] 0*4096kB [ 1022.189320] Node 0 active_anon:24620kB inactive_anon:748kB active_file:8kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:8kB dirty:0kB writeback:0kB shmem:964kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 4096kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1022.193282] syz-executor.5: [ 1022.196828] Node 1 active_anon:136kB inactive_anon:4kB active_file:60kB inactive_file:60kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:4kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1022.200324] syz-executor.2: [ 1022.202375] Node 0 [ 1022.206046] page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1022.208465] DMA free:10356kB min:216kB low:268kB high:320kB active_anon:12kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1022.214381] syz-executor.3: [ 1022.216494] lowmem_reserve[]: [ 1022.223895] syz-executor.3: [ 1022.231188] 0 2569 [ 1022.238466] syz-executor.4: [ 1022.245754] 2569 2569 2569 [ 1022.245767] Node 0 DMA32 free:17808kB min:36380kB low:45472kB high:54564kB active_anon:24608kB inactive_anon:748kB active_file:8kB inactive_file:8kB unevictable:0kB writepending:0kB present:3129332kB managed:2634320kB mlocked:0kB kernel_stack:7040kB pagetables:1684kB bounce:0kB free_pcp:120kB local_pcp:0kB free_cma:0kB [ 1022.245785] lowmem_reserve[]: 0 0 0 0 [ 1022.253191] syz-executor.4: [ 1022.255486] 0 [ 1022.257897] page allocation failure: order:0 [ 1022.309424] = 10356kB [ 1022.323814] page allocation failure: order:0 [ 1022.329239] Node 0 [ 1022.356813] page allocation failure: order:0 [ 1022.367604] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1022.399391] (null) [ 1022.402611] page allocation failure: order:0 [ 1022.403162] syz-executor.2 cpuset= [ 1022.406252] page allocation failure: order:0 [ 1022.419227] syz2 [ 1022.437600] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1022.448857] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1022.452015] (null) [ 1022.453435] Node 0 [ 1022.457294] syz-executor.4 cpuset= [ 1022.459547] Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1022.463967] DMA32: 29*4kB (MEH) 13*8kB (MH) 13*16kB (UMEH) 541*32kB (UME) 1*64kB (M) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 17804kB [ 1022.464028] Node 0 Normal: 0*4kB 0*8kB 0*16kB [ 1022.478600] (null) [ 1022.482774] syz4 [ 1022.485635] syz-executor.5 cpuset= [ 1022.487592] mems_allowed=0-1 [ 1022.502172] mems_allowed=0-1 [ 1022.505602] (null) [ 1022.506240] CPU: 0 PID: 7505 Comm: syz-executor.2 Not tainted 4.14.162-syzkaller #0 [ 1022.534365] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1022.534370] Call Trace: [ 1022.534386] dump_stack+0x142/0x197 [ 1022.534399] warn_alloc.cold+0x96/0x1af [ 1022.534409] ? zone_watermark_ok_safe+0x2b0/0x2b0 [ 1022.547627] syz-executor.4 cpuset= [ 1022.552142] ? call_timer_fn+0x670/0x670 [ 1022.552160] __alloc_pages_slowpath+0x23c6/0x2930 [ 1022.552181] ? warn_alloc+0xf0/0xf0 [ 1022.554308] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1022.556268] ? __might_sleep+0x93/0xb0 [ 1022.559775] (null) [ 1022.562865] __alloc_pages_nodemask+0x62c/0x7a0 [ 1022.562875] ? lock_downgrade+0x740/0x740 [ 1022.562884] ? __alloc_pages_slowpath+0x2930/0x2930 [ 1022.562902] alloc_pages_current+0xec/0x1e0 [ 1022.565984] 0*32kB [ 1022.568121] ion_page_pool_alloc+0x11f/0x1c0 [ 1022.575917] syz4 [ 1022.585238] ion_system_heap_allocate+0x138/0x910 [ 1022.587828] 0*64kB [ 1022.591410] ? ion_system_heap_free+0x250/0x250 [ 1022.591423] ion_alloc+0x68c/0x860 [ 1022.591437] ? ion_dma_buf_release+0x50/0x50 [ 1022.595394] syz-executor.3 cpuset= [ 1022.600214] ? kasan_check_write+0x14/0x20 [ 1022.600224] ? _copy_from_user+0x99/0x110 [ 1022.600235] ion_ioctl+0x105/0x217 [ 1022.610039] mems_allowed=0-1 [ 1022.612631] ? ion_alloc.cold+0x40/0x40 [ 1022.620035] 0*128kB [ 1022.623316] ? ion_alloc.cold+0x40/0x40 [ 1022.627173] 0*256kB [ 1022.629307] do_vfs_ioctl+0x7ae/0x1060 [ 1022.640066] syz3 [ 1022.643131] ? selinux_file_mprotect+0x5d0/0x5d0 [ 1022.647443] mems_allowed=0-1 [ 1022.649672] ? lock_downgrade+0x740/0x740 [ 1022.671213] ? ioctl_preallocate+0x1c0/0x1c0 [ 1022.679127] ? __fget+0x237/0x370 [ 1022.690041] 0*512kB [ 1022.690990] ? security_file_ioctl+0x7d/0xb0 [ 1022.694065] 0*1024kB [ 1022.698036] ? security_file_ioctl+0x89/0xb0 [ 1022.732154] SyS_ioctl+0x8f/0xc0 [ 1022.738841] ? do_vfs_ioctl+0x1060/0x1060 [ 1022.741258] 0*2048kB [ 1022.745622] do_syscall_64+0x1e8/0x640 [ 1022.748962] 0*4096kB [ 1022.753090] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1022.753105] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1022.753117] RIP: 0033:0x45af49 [ 1022.774896] RSP: 002b:00007f0d58822c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1022.782588] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045af49 [ 1022.791488] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1022.791495] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1022.806022] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f0d588236d4 [ 1022.806027] R13: 00000000004c41b2 R14: 00000000004da748 R15: 00000000ffffffff [ 1022.815247] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1022.822536] CPU: 1 PID: 7516 Comm: syz-executor.4 Not tainted 4.14.162-syzkaller #0 [ 1022.836348] syz5 [ 1022.837903] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1022.837909] Call Trace: [ 1022.839888] mems_allowed=0-1 [ 1022.849242] dump_stack+0x142/0x197 [ 1022.849256] warn_alloc.cold+0x96/0x1af [ 1022.849263] ? zone_watermark_ok_safe+0x2b0/0x2b0 [ 1022.849274] ? call_timer_fn+0x670/0x670 [ 1022.849290] __alloc_pages_slowpath+0x23c6/0x2930 [ 1022.849310] ? warn_alloc+0xf0/0xf0 [ 1022.859419] lowmem_reserve[]: [ 1022.862540] ? __might_sleep+0x93/0xb0 [ 1022.862551] __alloc_pages_nodemask+0x62c/0x7a0 [ 1022.862562] ? lock_downgrade+0x740/0x740 [ 1022.862572] ? __alloc_pages_slowpath+0x2930/0x2930 [ 1022.862586] ? retint_kernel+0x2d/0x2d [ 1022.862598] alloc_pages_current+0xec/0x1e0 [ 1022.867585] 0 [ 1022.871468] ion_page_pool_alloc+0x11f/0x1c0 [ 1022.871477] ion_system_heap_allocate+0x138/0x910 [ 1022.871489] ? ion_system_heap_free+0x250/0x250 [ 1022.871502] ion_alloc+0x68c/0x860 [ 1022.871517] ? ion_dma_buf_release+0x50/0x50 [ 1022.871530] ? kasan_check_write+0x14/0x20 [ 1022.871540] ? _copy_from_user+0x99/0x110 [ 1022.871551] ion_ioctl+0x105/0x217 [ 1022.871560] ? ion_alloc.cold+0x40/0x40 [ 1022.871573] ? ion_alloc.cold+0x40/0x40 [ 1022.883768] syz-executor.3 cpuset= [ 1022.886964] do_vfs_ioctl+0x7ae/0x1060 [ 1022.893463] 0 [ 1022.895765] ? selinux_file_mprotect+0x5d0/0x5d0 [ 1022.905299] syz3 [ 1022.908959] ? lock_downgrade+0x740/0x740 [ 1022.913847] 0 [ 1022.915393] ? ioctl_preallocate+0x1c0/0x1c0 [ 1022.933678] mems_allowed=0-1 [ 1022.936988] ? __fget+0x237/0x370 [ 1022.953079] 0 [ 1022.956133] ? security_file_ioctl+0x7d/0xb0 [ 1022.959991] 0 [ 1022.961777] ? security_file_ioctl+0x89/0xb0 [ 1022.961790] SyS_ioctl+0x8f/0xc0 [ 1022.961798] ? do_vfs_ioctl+0x1060/0x1060 [ 1022.961810] do_syscall_64+0x1e8/0x640 [ 1022.961818] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1022.961833] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1022.961840] RIP: 0033:0x45af49 [ 1022.961844] RSP: 002b:00007f361d0a8c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1022.961853] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045af49 [ 1022.961858] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1022.961863] RBP: 000000000075c070 R08: 0000000000000000 R09: 0000000000000000 [ 1022.961871] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f361d0a96d4 [ 1022.995524] R13: 00000000004c41b2 R14: 00000000004da748 R15: 00000000ffffffff [ 1022.997304] CPU: 1 PID: 7506 Comm: syz-executor.4 Not tainted 4.14.162-syzkaller #0 [ 1023.002489] Node 1 [ 1023.005069] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1023.005073] Call Trace: [ 1023.009232] Normal free:26300kB min:53508kB low:66884kB high:80260kB active_anon:136kB inactive_anon:4kB active_file:60kB inactive_file:60kB unevictable:0kB writepending:0kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:128kB pagetables:56kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1023.013098] dump_stack+0x142/0x197 [ 1023.013111] warn_alloc.cold+0x96/0x1af [ 1023.013119] ? zone_watermark_ok_safe+0x2b0/0x2b0 [ 1023.013129] ? call_timer_fn+0x670/0x670 [ 1023.013146] __alloc_pages_slowpath+0x23c6/0x2930 [ 1023.013169] ? warn_alloc+0xf0/0xf0 [ 1023.013187] ? __might_sleep+0x93/0xb0 [ 1023.052094] lowmem_reserve[]: [ 1023.055981] __alloc_pages_nodemask+0x62c/0x7a0 [ 1023.092649] ? lock_downgrade+0x740/0x740 [ 1023.150087] 0 [ 1023.151696] ? __alloc_pages_slowpath+0x2930/0x2930 [ 1023.156357] 0 [ 1023.160499] alloc_pages_current+0xec/0x1e0 [ 1023.160513] ion_page_pool_alloc+0x11f/0x1c0 [ 1023.160521] ion_system_heap_allocate+0x138/0x910 [ 1023.160533] ? ion_system_heap_free+0x250/0x250 [ 1023.160553] ion_alloc+0x68c/0x860 [ 1023.160567] ? ion_dma_buf_release+0x50/0x50 [ 1023.160580] ? kasan_check_write+0x14/0x20 [ 1023.160589] ? _copy_from_user+0x99/0x110 [ 1023.160599] ion_ioctl+0x105/0x217 [ 1023.200100] ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb [ 1023.203572] ? ion_alloc.cold+0x40/0x40 [ 1023.217541] ? ion_alloc.cold+0x40/0x40 [ 1023.221507] do_vfs_ioctl+0x7ae/0x1060 [ 1023.221591] 0 0 [ 1023.225390] ? selinux_file_mprotect+0x5d0/0x5d0 [ 1023.225401] ? lock_downgrade+0x740/0x740 [ 1023.227360] 0 [ 1023.232098] ? ioctl_preallocate+0x1c0/0x1c0 [ 1023.232109] ? __fget+0x237/0x370 [ 1023.232124] ? security_file_ioctl+0x7d/0xb0 [ 1023.232131] ? security_file_ioctl+0x89/0xb0 [ 1023.232141] SyS_ioctl+0x8f/0xc0 [ 1023.232149] ? do_vfs_ioctl+0x1060/0x1060 [ 1023.232161] do_syscall_64+0x1e8/0x640 [ 1023.232169] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1023.232184] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1023.232191] RIP: 0033:0x45af49 [ 1023.232195] RSP: 002b:00007f361d0eac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1023.232206] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045af49 [ 1023.254899] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1023.254907] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1023.262402] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f361d0eb6d4 [ 1023.262406] R13: 00000000004c41b2 R14: 00000000004da748 R15: 00000000ffffffff [ 1023.269340] = 0kB [ 1023.279461] CPU: 1 PID: 7512 Comm: syz-executor.3 Not tainted 4.14.162-syzkaller #0 [ 1023.279607] Node 0 [ 1023.287295] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1023.287299] Call Trace: [ 1023.287316] dump_stack+0x142/0x197 [ 1023.287328] warn_alloc.cold+0x96/0x1af [ 1023.287336] ? zone_watermark_ok_safe+0x2b0/0x2b0 [ 1023.287347] ? call_timer_fn+0x670/0x670 [ 1023.287363] __alloc_pages_slowpath+0x23c6/0x2930 [ 1023.287378] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1023.287390] ? warn_alloc+0xf0/0xf0 [ 1023.333481] ? __might_sleep+0x93/0xb0 [ 1023.345028] __alloc_pages_nodemask+0x62c/0x7a0 [ 1023.345067] ? lock_downgrade+0x740/0x740 [ 1023.360081] DMA: [ 1023.364057] ? __alloc_pages_slowpath+0x2930/0x2930 [ 1023.368884] 15*4kB [ 1023.373645] ? policy_node+0x38/0x110 [ 1023.373657] alloc_pages_current+0xec/0x1e0 [ 1023.373670] ion_page_pool_alloc+0x11f/0x1c0 [ 1023.373678] ion_system_heap_allocate+0x138/0x910 [ 1023.373690] ? ion_system_heap_free+0x250/0x250 [ 1023.373704] ion_alloc+0x68c/0x860 [ 1023.373718] ? ion_dma_buf_release+0x50/0x50 [ 1023.402965] ? kasan_check_write+0x14/0x20 [ 1023.411651] ? _copy_from_user+0x99/0x110 [ 1023.411662] ion_ioctl+0x105/0x217 [ 1023.411672] ? ion_alloc.cold+0x40/0x40 [ 1023.411685] ? ion_alloc.cold+0x40/0x40 [ 1023.411694] do_vfs_ioctl+0x7ae/0x1060 [ 1023.411707] ? selinux_file_mprotect+0x5d0/0x5d0 [ 1023.420037] (UME) [ 1023.421194] ? lock_downgrade+0x740/0x740 [ 1023.421204] ? ioctl_preallocate+0x1c0/0x1c0 [ 1023.424720] 7*8kB [ 1023.429111] ? __fget+0x237/0x370 [ 1023.452766] ? security_file_ioctl+0x7d/0xb0 [ 1023.459671] ? security_file_ioctl+0x89/0xb0 [ 1023.480051] (UM) 8*16kB [ 1023.482510] SyS_ioctl+0x8f/0xc0 [ 1023.482515] (UME) [ 1023.485173] ? do_vfs_ioctl+0x1060/0x1060 [ 1023.488520] 10*32kB [ 1023.490657] do_syscall_64+0x1e8/0x640 [ 1023.490665] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1023.490680] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1023.490687] RIP: 0033:0x45af49 [ 1023.490691] RSP: 002b:00007fdadbcc4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1023.490702] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045af49 [ 1023.510996] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1023.511002] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1023.521858] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fdadbcc56d4 [ 1023.521863] R13: 00000000004c41b2 R14: 00000000004da748 R15: 00000000ffffffff [ 1023.530086] Node 1 [ 1023.536479] CPU: 0 PID: 7525 Comm: syz-executor.3 Not tainted 4.14.162-syzkaller #0 [ 1023.547802] Normal: [ 1023.550931] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1023.550935] Call Trace: [ 1023.550952] dump_stack+0x142/0x197 [ 1023.550964] warn_alloc.cold+0x96/0x1af [ 1023.558218] 9*4kB [ 1023.560440] ? zone_watermark_ok_safe+0x2b0/0x2b0 [ 1023.560451] ? call_timer_fn+0x670/0x670 [ 1023.560468] __alloc_pages_slowpath+0x23c6/0x2930 [ 1023.568244] (UME) [ 1023.570570] ? warn_alloc+0xf0/0xf0 [ 1023.570587] ? __might_sleep+0x93/0xb0 [ 1023.579914] 38*8kB [ 1023.582487] __alloc_pages_nodemask+0x62c/0x7a0 [ 1023.582496] ? lock_downgrade+0x740/0x740 [ 1023.582506] ? __alloc_pages_slowpath+0x2930/0x2930 [ 1023.586108] (UM) [ 1023.590074] alloc_pages_current+0xec/0x1e0 [ 1023.590085] ion_page_pool_alloc+0x11f/0x1c0 [ 1023.592211] 8*16kB [ 1023.597036] ion_system_heap_allocate+0x138/0x910 [ 1023.601554] (UE) [ 1023.606371] ? ion_system_heap_free+0x250/0x250 [ 1023.608495] 811*32kB [ 1023.612109] ion_alloc+0x68c/0x860 [ 1023.612122] ? ion_dma_buf_release+0x50/0x50 [ 1023.615984] (UE) [ 1023.618227] ? kasan_check_write+0x14/0x20 [ 1023.622886] 0*64kB [ 1023.627004] ? _copy_from_user+0x99/0x110 [ 1023.632704] 0*128kB [ 1023.634736] ion_ioctl+0x105/0x217 [ 1023.639032] 0*256kB [ 1023.643438] ? ion_alloc.cold+0x40/0x40 [ 1023.643451] ? ion_alloc.cold+0x40/0x40 [ 1023.643461] do_vfs_ioctl+0x7ae/0x1060 [ 1023.645673] 0*512kB [ 1023.650496] ? selinux_file_mprotect+0x5d0/0x5d0 [ 1023.650504] ? lock_downgrade+0x740/0x740 [ 1023.650514] ? ioctl_preallocate+0x1c0/0x1c0 [ 1023.652554] 0*1024kB [ 1023.657205] ? __fget+0x237/0x370 [ 1023.659603] 0*2048kB [ 1023.663216] ? security_file_ioctl+0x7d/0xb0 [ 1023.663223] ? security_file_ioctl+0x89/0xb0 [ 1023.663234] SyS_ioctl+0x8f/0xc0 [ 1023.667618] 0*4096kB [ 1023.669662] ? do_vfs_ioctl+0x1060/0x1060 [ 1023.673992] = 26420kB [ 1023.676199] do_syscall_64+0x1e8/0x640 [ 1023.680342] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1023.682806] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1023.686338] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1023.688662] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1023.692631] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1023.696567] RIP: 0033:0x45af49 [ 1023.700487] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1023.702765] RSP: 002b:00007fdadbc82c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1023.707526] 276 total pagecache pages [ 1023.711658] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045af49 [ 1023.711663] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1023.711667] RBP: 000000000075c070 R08: 0000000000000000 R09: 0000000000000000 [ 1023.711670] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fdadbc836d4 [ 1023.711674] R13: 00000000004c41b2 R14: 00000000004da748 R15: 00000000ffffffff [ 1023.712381] (UME) [ 1023.716124] warn_alloc_show_mem: 1 callbacks suppressed [ 1023.716128] Mem-Info: [ 1023.718510] 5*64kB [ 1023.731198] active_anon:6189 inactive_anon:188 isolated_anon:0 [ 1023.731198] active_file:17 inactive_file:17 isolated_file:0 [ 1023.731198] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1023.731198] slab_reclaimable:12409 slab_unreclaimable:98539 [ 1023.731198] mapped:2 shmem:242 pagetables:435 bounce:0 [ 1023.731198] free:13640 free_pcp:123 free_cma:0 [ 1023.733207] CPU: 0 PID: 7523 Comm: syz-executor.5 Not tainted 4.14.162-syzkaller #0 [ 1023.736525] Node 0 active_anon:24620kB inactive_anon:748kB active_file:8kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:8kB dirty:0kB writeback:0kB shmem:964kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 4096kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1023.738910] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1023.743101] 0 pages in swap cache [ 1023.745429] Call Trace: [ 1023.749295] Swap cache stats: add 0, delete 0, find 0/0 [ 1023.758130] dump_stack+0x142/0x197 [ 1023.758144] warn_alloc.cold+0x96/0x1af [ 1023.763005] Node 1 active_anon:136kB inactive_anon:4kB active_file:60kB inactive_file:60kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:4kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1023.771530] ? zone_watermark_ok_safe+0x2b0/0x2b0 [ 1023.771540] ? call_timer_fn+0x670/0x670 [ 1023.771557] __alloc_pages_slowpath+0x23c6/0x2930 [ 1023.785652] ? warn_alloc+0xf0/0xf0 [ 1023.785669] ? __might_sleep+0x93/0xb0 [ 1023.785679] __alloc_pages_nodemask+0x62c/0x7a0 [ 1023.785689] ? lock_downgrade+0x740/0x740 [ 1023.788884] Node 0 [ 1023.797416] ? __alloc_pages_slowpath+0x2930/0x2930 [ 1023.797434] alloc_pages_current+0xec/0x1e0 [ 1023.797445] ion_page_pool_alloc+0x11f/0x1c0 [ 1023.805147] Free swap = 0kB [ 1023.808924] ion_system_heap_allocate+0x138/0x910 [ 1023.823434] ? ion_system_heap_free+0x250/0x250 [ 1023.823446] ion_alloc+0x68c/0x860 [ 1023.823459] ? ion_dma_buf_release+0x50/0x50 [ 1023.830744] Total swap = 0kB [ 1023.837982] ? kasan_check_write+0x14/0x20 [ 1023.846526] DMA free:10356kB min:216kB low:268kB high:320kB active_anon:12kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1023.847494] ? _copy_from_user+0x99/0x110 [ 1023.853577] lowmem_reserve[]: [ 1023.855233] ion_ioctl+0x105/0x217 [ 1023.857448] 0 [ 1023.889791] ? ion_alloc.cold+0x40/0x40 [ 1023.889804] ? ion_alloc.cold+0x40/0x40 [ 1023.889812] do_vfs_ioctl+0x7ae/0x1060 [ 1023.889824] ? selinux_file_mprotect+0x5d0/0x5d0 [ 1023.897622] 1965979 pages RAM [ 1023.924213] ? lock_downgrade+0x740/0x740 [ 1023.924224] ? ioctl_preallocate+0x1c0/0x1c0 [ 1023.924235] ? __fget+0x237/0x370 [ 1023.970072] 0 pages HighMem/MovableOnly [ 1023.978525] ? security_file_ioctl+0x7d/0xb0 [ 1023.983378] 2569 [ 1023.987394] ? security_file_ioctl+0x89/0xb0 [ 1024.010064] 335874 pages reserved [ 1024.010717] SyS_ioctl+0x8f/0xc0 [ 1024.015706] 0 pages cma reserved [ 1024.020014] ? do_vfs_ioctl+0x1060/0x1060 [ 1024.024421] 2569 [ 1024.027399] do_syscall_64+0x1e8/0x640 [ 1024.050060] 2569 [ 1024.052017] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1024.150059] 2569 [ 1024.150905] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1024.156816] RIP: 0033:0x45af49 [ 1024.158859] Node 0 [ 1024.163682] RSP: 002b:00007f7f21a30c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1024.163690] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045af49 [ 1024.163695] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1024.163699] RBP: 000000000075c118 R08: 0000000000000000 R09: 0000000000000000 [ 1024.163703] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7f21a316d4 [ 1024.163707] R13: 00000000004c41b2 R14: 00000000004da748 R15: 00000000ffffffff [ 1024.163895] ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb [ 1024.170194] ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb [ 1024.171699] (UME) [ 1024.191461] 4*128kB [ 1024.206497] (ME) 3*256kB (UME) 2*512kB (UE) 3*1024kB (UME) 2*2048kB (UE) 0*4096kB = 10356kB [ 1024.248152] Node 0 DMA32: 30*4kB (UMEH) 39*8kB (UMH) 13*16kB (UMEH) 537*32kB (UME) 22*64kB (UM) 0*128kB 0*256kB 0*512kB 1*1024kB (U) 0*2048kB 3*4096kB (U) = 32544kB [ 1024.263367] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1024.274219] Node 1 Normal: 2*4kB (UE) 3*8kB (U) 8*16kB (UE) 812*32kB (UME) 575*64kB (UM) 45*128kB (UM) 15*256kB (U) 8*512kB (UM) 33*1024kB (U) 5*2048kB (UM) 5*4096kB (U) = 141152kB [ 1024.290068] DMA32 free:74528kB min:36380kB low:45472kB high:54564kB active_anon:24608kB inactive_anon:748kB active_file:8kB inactive_file:108kB unevictable:0kB writepending:0kB present:3129332kB managed:2634320kB mlocked:0kB kernel_stack:7040kB pagetables:1684kB bounce:0kB free_pcp:492kB local_pcp:172kB free_cma:0kB [ 1024.290698] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1024.335923] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1024.349288] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1024.403344] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1024.410050] lowmem_reserve[]: 0 0 0 0 0 [ 1024.417084] 868 total pagecache pages [ 1024.418015] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB 2020/01/06 14:15:42 result: hanged=false err=executor 1: EOF 2020/01/06 14:15:42 executed programs: 29 [ 1024.460087] 0 pages in swap cache [ 1024.463674] Swap cache stats: add 0, delete 0, find 0/0 [ 1024.469068] Free swap = 0kB [ 1024.497510] Total swap = 0kB [ 1024.515060] 1965979 pages RAM [ 1024.518291] 0 pages HighMem/MovableOnly [ 1024.530089] 335874 pages reserved [ 1024.533544] 0 pages cma reserved [ 1024.536896] Out of memory: Kill process 7176 (syz-execprog) score 1 or sacrifice child [ 1024.570122] Killed process 7510 (syz-executor.0) total-vm:37644kB, anon-rss:68kB, file-rss:0kB, shmem-rss:0kB [ 1024.620111] lowmem_reserve[]: 0 0 0 0 0 [ 1024.624149] Node 1 Normal free:447464kB min:53508kB low:66884kB high:80260kB active_anon:136kB inactive_anon:4kB active_file:60kB inactive_file:1060kB unevictable:0kB writepending:0kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:128kB pagetables:56kB bounce:0kB free_pcp:464kB local_pcp:232kB free_cma:0kB [ 1024.738715] lowmem_reserve[]: 0 0 0 0 0 [ 1024.750772] warn_alloc_show_mem: 4 callbacks suppressed [ 1024.750774] Mem-Info: [ 1024.754028] Node 0 [ 1024.780116] active_anon:6694 inactive_anon:188 isolated_anon:0 [ 1024.780116] active_file:92 inactive_file:2267 isolated_file:0 [ 1024.780116] unevictable:0 dirty:50 writeback:0 unstable:0 [ 1024.780116] slab_reclaimable:12422 slab_unreclaimable:97978 [ 1024.780116] mapped:1602 shmem:242 pagetables:435 bounce:0 [ 1024.780116] free:219359 free_pcp:535 free_cma:0 [ 1024.782412] DMA: [ 1024.828328] Node 0 active_anon:26640kB inactive_anon:748kB active_file:308kB inactive_file:8008kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:5608kB dirty:200kB writeback:0kB shmem:964kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 4096kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1024.865946] 15*4kB (UME) 7*8kB (UM) 8*16kB (UME) 10*32kB (UME) 8*64kB (UME) 7*128kB (UME) 3*256kB (UME) 2*512kB (UE) 3*1024kB (UME) 2*2048kB (UE) 0*4096kB = 10932kB [ 1024.902728] Node 1 active_anon:136kB inactive_anon:4kB active_file:60kB inactive_file:1060kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:900kB dirty:0kB writeback:0kB shmem:4kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1024.927888] Node 0 DMA32: 4359*4kB (UMEH) 506*8kB (UMEH) 37*16kB (UEH) 546*32kB (UE) 618*64kB (UMH) 175*128kB (UH) 113*256kB (UEH) 36*512kB (UH) 0*1024kB 0*2048kB 0*4096kB = 148860kB [ 1024.935746] Node 0 [ 1024.974152] DMA free:11192kB min:216kB low:268kB high:320kB active_anon:12kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1024.982249] Node 0 [ 1025.037272] Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1025.064223] Node 1 Normal: 4635*4kB (UME) 1031*8kB (UM) 109*16kB (UME) 869*32kB (UME) 5317*64kB (UM) 576*128kB (U) 81*256kB (UM) 32*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 507476kB [ 1025.104543] lowmem_reserve[]: 0 2569 2569 2569 2569 [ 1025.112610] Node 0 DMA32 free:61200kB min:36380kB low:45472kB high:54564kB active_anon:26764kB inactive_anon:740kB active_file:1416kB inactive_file:7872kB unevictable:0kB writepending:328kB present:3129332kB managed:2634320kB mlocked:0kB kernel_stack:7072kB pagetables:1708kB bounce:0kB free_pcp:1252kB local_pcp:632kB free_cma:0kB [ 1025.149961] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1025.190205] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1025.220162] lowmem_reserve[]: 0 0 0 0 0 [ 1025.225534] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1025.253379] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1025.258636] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1025.371932] lowmem_reserve[]: 0 0 0 0 0 [ 1025.381074] 2866 total pagecache pages [ 1025.398662] Node 1 Normal free:364956kB min:53508kB low:66884kB high:80260kB active_anon:116kB inactive_anon:4kB active_file:60kB inactive_file:1220kB unevictable:0kB writepending:4kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:128kB pagetables:52kB bounce:0kB free_pcp:1240kB local_pcp:620kB free_cma:0kB [ 1025.399697] 0 pages in swap cache [ 1025.502230] lowmem_reserve[]: 0 0 0 0 0 [ 1025.512836] Node 0 DMA: 80*4kB (UME) 6*8kB (UM) 9*16kB (UME) 10*32kB (UME) 4*64kB (ME) 4*128kB (ME) 3*256kB (UME) 2*512kB (UE) 3*1024kB (UME) 2*2048kB (UE) 0*4096kB = 10560kB [ 1025.560073] Swap cache stats: add 0, delete 0, find 0/0 [ 1025.565477] Free swap = 0kB [ 1025.567218] Node 0 [ 1025.568487] Total swap = 0kB [ 1025.568495] 1965979 pages RAM [ 1025.568498] 0 pages HighMem/MovableOnly [ 1025.568501] 335874 pages reserved [ 1025.568506] 0 pages cma reserved [ 1025.580916] syz-executor.2: page allocation failure: order:4 [ 1025.593743] syz-executor.2: [ 1025.599598] DMA32: 15305*4kB (UMH) 1913*8kB (UEH) 304*16kB (UEH) 784*32kB (UE) 1*64kB (H) 2*128kB (H) 3*256kB (H) 1*512kB (H) 0*1024kB 0*2048kB 0*4096kB = 108076kB [ 1025.634187] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1025.649556] page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1025.663701] syz-executor.2 cpuset=syz2 mems_allowed=0-1 [ 1025.669125] syz-executor.2 cpuset=syz2 mems_allowed=0-1 [ 1025.695384] CPU: 0 PID: 7530 Comm: syz-executor.2 Not tainted 4.14.162-syzkaller #0 [ 1025.703196] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1025.712557] Call Trace: [ 1025.715145] dump_stack+0x142/0x197 [ 1025.718772] warn_alloc.cold+0x96/0x1af [ 1025.722742] ? zone_watermark_ok_safe+0x2b0/0x2b0 [ 1025.727590] ? __alloc_pages_direct_compact+0xbc/0x380 [ 1025.732864] __alloc_pages_slowpath+0x23c6/0x2930 [ 1025.737715] ? save_trace+0x290/0x290 [ 1025.741517] ? warn_alloc+0xf0/0xf0 [ 1025.745151] ? __might_sleep+0x93/0xb0 [ 1025.749041] __alloc_pages_nodemask+0x62c/0x7a0 [ 1025.753968] ? lock_downgrade+0x740/0x740 [ 1025.758111] ? __alloc_pages_slowpath+0x2930/0x2930 [ 1025.763133] ? retint_kernel+0x2d/0x2d [ 1025.767017] alloc_pages_current+0xec/0x1e0 [ 1025.771336] ion_page_pool_alloc+0x11f/0x1c0 [ 1025.775734] ion_system_heap_allocate+0x138/0x910 [ 1025.780567] ? ion_alloc+0x19b/0x860 [ 1025.784276] ? rcu_read_lock_sched_held+0x110/0x130 [ 1025.789288] ? ion_system_heap_free+0x250/0x250 [ 1025.794043] ion_alloc+0x222/0x860 [ 1025.797580] ? ion_dma_buf_release+0x50/0x50 [ 1025.801990] ? kasan_check_write+0x14/0x20 [ 1025.806218] ? _copy_from_user+0x99/0x110 [ 1025.810360] ion_ioctl+0x105/0x217 [ 1025.813899] ? ion_alloc.cold+0x40/0x40 [ 1025.817868] ? ion_alloc.cold+0x40/0x40 [ 1025.821926] do_vfs_ioctl+0x7ae/0x1060 [ 1025.825954] ? selinux_file_mprotect+0x5d0/0x5d0 [ 1025.830708] ? lock_downgrade+0x740/0x740 [ 1025.834850] ? ioctl_preallocate+0x1c0/0x1c0 [ 1025.839372] ? __fget+0x237/0x370 [ 1025.842837] ? security_file_ioctl+0x7d/0xb0 [ 1025.847246] ? security_file_ioctl+0x89/0xb0 [ 1025.851655] SyS_ioctl+0x8f/0xc0 [ 1025.855034] ? do_vfs_ioctl+0x1060/0x1060 [ 1025.859178] do_syscall_64+0x1e8/0x640 [ 1025.863062] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1025.867913] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1025.873099] RIP: 0033:0x45af49 [ 1025.876305] RSP: 002b:00007f0d58822c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1025.884014] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045af49 [ 1025.891286] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1025.898549] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1025.905811] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f0d588236d4 [ 1025.913075] R13: 00000000004c41b2 R14: 00000000004da748 R15: 00000000ffffffff [ 1025.937990] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1025.957977] CPU: 0 PID: 7534 Comm: syz-executor.2 Not tainted 4.14.162-syzkaller #0 [ 1025.965813] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1025.975162] Call Trace: [ 1025.977766] dump_stack+0x142/0x197 [ 1025.981396] warn_alloc.cold+0x96/0x1af [ 1025.985369] ? zone_watermark_ok_safe+0x2b0/0x2b0 [ 1025.990223] ? __alloc_pages_direct_compact+0xbc/0x380 [ 1025.995501] __alloc_pages_slowpath+0x23c6/0x2930 [ 1026.000354] ? save_trace+0x290/0x290 [ 1026.004162] ? warn_alloc+0xf0/0xf0 [ 1026.007799] ? __might_sleep+0x93/0xb0 [ 1026.011710] __alloc_pages_nodemask+0x62c/0x7a0 [ 1026.016470] ? lock_downgrade+0x740/0x740 [ 1026.020624] ? __alloc_pages_slowpath+0x2930/0x2930 [ 1026.025643] ? save_trace+0x290/0x290 [ 1026.029446] alloc_pages_current+0xec/0x1e0 [ 1026.033770] ion_page_pool_alloc+0x11f/0x1c0 [ 1026.038176] ion_system_heap_allocate+0x138/0x910 [ 1026.043017] ? ion_alloc+0x19b/0x860 [ 1026.046731] ? rcu_read_lock_sched_held+0x110/0x130 [ 1026.051750] ? ion_system_heap_free+0x250/0x250 [ 1026.056421] ion_alloc+0x222/0x860 [ 1026.059966] ? ion_dma_buf_release+0x50/0x50 [ 1026.064380] ? kasan_check_write+0x14/0x20 [ 1026.068615] ? _copy_from_user+0x99/0x110 [ 1026.072762] ion_ioctl+0x105/0x217 [ 1026.076305] ? ion_alloc.cold+0x40/0x40 [ 1026.080289] ? ion_alloc.cold+0x40/0x40 [ 1026.084264] do_vfs_ioctl+0x7ae/0x1060 [ 1026.088152] ? selinux_file_mprotect+0x5d0/0x5d0 [ 1026.092909] ? lock_downgrade+0x740/0x740 [ 1026.097060] ? ioctl_preallocate+0x1c0/0x1c0 [ 1026.101470] ? __fget+0x237/0x370 [ 1026.104926] ? security_file_ioctl+0x7d/0xb0 [ 1026.109330] ? security_file_ioctl+0x89/0xb0 [ 1026.113742] SyS_ioctl+0x8f/0xc0 [ 1026.117110] ? do_vfs_ioctl+0x1060/0x1060 [ 1026.121261] do_syscall_64+0x1e8/0x640 [ 1026.125149] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1026.130101] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1026.135288] RIP: 0033:0x45af49 [ 1026.138472] RSP: 002b:00007f0d587e0c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1026.146181] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045af49 [ 1026.153454] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1026.160720] RBP: 000000000075c070 R08: 0000000000000000 R09: 0000000000000000 [ 1026.167991] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f0d587e16d4 [ 1026.175256] R13: 00000000004c41b2 R14: 00000000004da748 R15: 00000000ffffffff [ 1026.197295] Node 1 Normal: 25628*4kB (UE) 2517*8kB (U) 1551*16kB (UE) 1101*32kB (UE) 1572*64kB (U) 0*128kB 0*256kB 0*512kB 83*1024kB (U) 25*2048kB (U) 0*4096kB = 419496kB [ 1026.216392] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1026.225740] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1026.237644] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1026.247008] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1026.258984] 3007 total pagecache pages [ 1026.263202] 0 pages in swap cache [ 1026.266761] Swap cache stats: add 0, delete 0, find 0/0 [ 1026.275639] Free swap = 0kB [ 1026.278832] Total swap = 0kB [ 1026.282135] 1965979 pages RAM [ 1026.285343] 0 pages HighMem/MovableOnly [ 1026.289406] 335874 pages reserved [ 1026.296530] 0 pages cma reserved [ 1026.300288] Mem-Info: [ 1026.302811] active_anon:6747 inactive_anon:186 isolated_anon:0 [ 1026.302811] active_file:609 inactive_file:2153 isolated_file:0 [ 1026.302811] unevictable:0 dirty:100 writeback:0 unstable:0 [ 1026.302811] slab_reclaimable:12475 slab_unreclaimable:97990 [ 1026.302811] mapped:1738 shmem:242 pagetables:441 bounce:0 [ 1026.302811] free:203571 free_pcp:695 free_cma:0 [ 1026.447995] Node 0 active_anon:26872kB inactive_anon:744kB active_file:2376kB inactive_file:7392kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:5916kB dirty:396kB writeback:0kB shmem:968kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 6144kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1026.569609] Node 1 active_anon:116kB inactive_anon:0kB active_file:60kB inactive_file:1220kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:1036kB dirty:4kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1026.685586] Node 0 DMA free:10592kB min:216kB low:268kB high:320kB active_anon:12kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1026.799997] syz-executor.3: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1026.800860] syz-executor.3: [ 1026.816120] syz-executor.5: [ 1026.816524] syz-executor.4: [ 1026.823399] lowmem_reserve[]: [ 1026.827523] syz-executor.4: [ 1026.831472] page allocation failure: order:4 [ 1026.836326] 0 [ 1026.840782] page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1026.840797] syz-executor.4 cpuset=syz4 [ 1026.847110] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1026.859781] page allocation failure: order:4 [ 1026.866370] 2569 [ 1026.871560] syz-executor.3 cpuset= [ 1026.876886] (null) [ 1026.879122] page allocation failure: order:4 [ 1026.882758] syz3 [ 1026.888076] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1026.890160] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1026.891643] 2569 [ 1026.899582] (null) [ 1026.907842] syz-executor.5 cpuset=syz5 mems_allowed=0-1 [ 1026.915408] mems_allowed=0-1 [ 1026.916405] mems_allowed=0-1 [ 1026.929545] (null) [ 1026.931828] syz-executor.3 cpuset=syz3 mems_allowed=0-1 [ 1026.936377] CPU: 0 PID: 7546 Comm: syz-executor.3 Not tainted 4.14.162-syzkaller #0 [ 1026.940588] syz-executor.4 cpuset= [ 1026.944979] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1026.944983] Call Trace: [ 1026.945000] dump_stack+0x142/0x197 [ 1026.945012] warn_alloc.cold+0x96/0x1af [ 1026.945021] ? zone_watermark_ok_safe+0x2b0/0x2b0 [ 1026.958479] syz4 [ 1026.960472] ? __alloc_pages_direct_compact+0x290/0x380 [ 1026.980176] __alloc_pages_slowpath+0x23c6/0x2930 [ 1026.980681] mems_allowed=0-1 [ 1026.985020] ? save_trace+0x290/0x290 [ 1026.985035] ? warn_alloc+0xf0/0xf0 [ 1026.985051] ? __might_sleep+0x93/0xb0 [ 1026.999379] __alloc_pages_nodemask+0x62c/0x7a0 [ 1027.004034] ? lock_downgrade+0x740/0x740 [ 1027.008181] ? __alloc_pages_slowpath+0x2930/0x2930 [ 1027.013194] ? save_trace+0x290/0x290 [ 1027.016996] alloc_pages_current+0xec/0x1e0 [ 1027.021329] ion_page_pool_alloc+0x11f/0x1c0 [ 1027.025730] ion_system_heap_allocate+0x138/0x910 [ 1027.030561] ? ion_alloc+0x19b/0x860 [ 1027.034256] ? rcu_read_lock_sched_held+0x110/0x130 [ 1027.039272] ? ion_system_heap_free+0x250/0x250 [ 1027.043927] ion_alloc+0x222/0x860 [ 1027.047452] ? ion_dma_buf_release+0x50/0x50 [ 1027.051857] ? kasan_check_write+0x14/0x20 [ 1027.056079] ? _copy_from_user+0x99/0x110 [ 1027.060219] ion_ioctl+0x105/0x217 [ 1027.063741] ? ion_alloc.cold+0x40/0x40 [ 1027.067701] ? ion_alloc.cold+0x40/0x40 [ 1027.071662] do_vfs_ioctl+0x7ae/0x1060 [ 1027.075559] ? selinux_file_mprotect+0x5d0/0x5d0 [ 1027.080310] ? lock_downgrade+0x740/0x740 [ 1027.084447] ? ioctl_preallocate+0x1c0/0x1c0 [ 1027.088845] ? __fget+0x237/0x370 [ 1027.092283] ? security_file_ioctl+0x7d/0xb0 [ 1027.096674] ? security_file_ioctl+0x89/0xb0 [ 1027.101069] SyS_ioctl+0x8f/0xc0 [ 1027.104415] ? do_vfs_ioctl+0x1060/0x1060 [ 1027.108552] do_syscall_64+0x1e8/0x640 [ 1027.112428] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1027.117263] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1027.122433] RIP: 0033:0x45af49 [ 1027.125605] RSP: 002b:00007fdadbc82c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1027.133295] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045af49 [ 1027.140547] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1027.147798] RBP: 000000000075c070 R08: 0000000000000000 R09: 0000000000000000 [ 1027.155051] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fdadbc836d4 [ 1027.162337] R13: 00000000004c41b2 R14: 00000000004da748 R15: 00000000ffffffff [ 1027.169608] CPU: 1 PID: 7547 Comm: syz-executor.4 Not tainted 4.14.162-syzkaller #0 [ 1027.177407] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1027.186754] Call Trace: [ 1027.189345] dump_stack+0x142/0x197 [ 1027.192972] warn_alloc.cold+0x96/0x1af [ 1027.196945] ? zone_watermark_ok_safe+0x2b0/0x2b0 [ 1027.197340] 2569 [ 1027.201787] ? __alloc_pages_direct_compact+0xbc/0x380 [ 1027.201799] __alloc_pages_slowpath+0x23c6/0x2930 [ 1027.201814] ? save_trace+0x290/0x290 [ 1027.201827] ? warn_alloc+0xf0/0xf0 [ 1027.221370] ? __might_sleep+0x93/0xb0 [ 1027.224752] 2569 [ 1027.225266] __alloc_pages_nodemask+0x62c/0x7a0 [ 1027.231974] ? lock_downgrade+0x740/0x740 [ 1027.236128] ? __alloc_pages_slowpath+0x2930/0x2930 [ 1027.240579] Node 0 DMA32 free:174264kB min:36380kB low:45472kB high:54564kB active_anon:26956kB inactive_anon:752kB active_file:2452kB inactive_file:7620kB unevictable:0kB writepending:404kB present:3129332kB managed:2634320kB mlocked:0kB kernel_stack:7136kB pagetables:1676kB bounce:0kB free_pcp:1372kB local_pcp:644kB free_cma:0kB [ 1027.241150] ? save_trace+0x290/0x290 [ 1027.241165] alloc_pages_current+0xec/0x1e0 [ 1027.278700] ion_page_pool_alloc+0x11f/0x1c0 [ 1027.283117] ion_system_heap_allocate+0x138/0x910 [ 1027.287965] ? ion_alloc+0x19b/0x860 [ 1027.291679] ? rcu_read_lock_sched_held+0x110/0x130 [ 1027.296689] ? ion_system_heap_free+0x250/0x250 [ 1027.301360] ion_alloc+0x222/0x860 [ 1027.304904] ? ion_dma_buf_release+0x50/0x50 [ 1027.309312] ? kasan_check_write+0x14/0x20 [ 1027.313667] ? _copy_from_user+0x99/0x110 [ 1027.317818] ion_ioctl+0x105/0x217 [ 1027.321354] ? ion_alloc.cold+0x40/0x40 [ 1027.325325] ? ion_alloc.cold+0x40/0x40 [ 1027.329291] do_vfs_ioctl+0x7ae/0x1060 [ 1027.333175] ? selinux_file_mprotect+0x5d0/0x5d0 [ 1027.337938] ? lock_downgrade+0x740/0x740 [ 1027.342079] ? ioctl_preallocate+0x1c0/0x1c0 [ 1027.346480] ? __fget+0x237/0x370 [ 1027.349940] ? security_file_ioctl+0x7d/0xb0 [ 1027.354344] ? security_file_ioctl+0x89/0xb0 [ 1027.358757] SyS_ioctl+0x8f/0xc0 [ 1027.362125] ? do_vfs_ioctl+0x1060/0x1060 [ 1027.366279] do_syscall_64+0x1e8/0x640 [ 1027.370166] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1027.375012] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1027.380199] RIP: 0033:0x45af49 [ 1027.381232] lowmem_reserve[]: [ 1027.383369] RSP: 002b:00007f361d0a8c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1027.383379] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045af49 [ 1027.383383] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1027.383389] RBP: 000000000075c070 R08: 0000000000000000 R09: 0000000000000000 [ 1027.390852] 0 [ 1027.394192] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f361d0a96d4 [ 1027.394197] R13: 00000000004c41b2 R14: 00000000004da748 R15: 00000000ffffffff [ 1027.401630] CPU: 1 PID: 7540 Comm: syz-executor.4 Not tainted 4.14.162-syzkaller #0 [ 1027.440164] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1027.449511] Call Trace: [ 1027.452092] dump_stack+0x142/0x197 [ 1027.455716] warn_alloc.cold+0x96/0x1af [ 1027.455776] 0 [ 1027.459682] ? zone_watermark_ok_safe+0x2b0/0x2b0 [ 1027.459699] ? __alloc_pages_direct_compact+0xbc/0x380 [ 1027.471598] __alloc_pages_slowpath+0x23c6/0x2930 [ 1027.472551] 0 [ 1027.476436] ? save_trace+0x290/0x290 [ 1027.476449] ? warn_alloc+0xf0/0xf0 [ 1027.485636] ? __might_sleep+0x93/0xb0 [ 1027.486942] 0 [ 1027.489518] __alloc_pages_nodemask+0x62c/0x7a0 [ 1027.489526] ? lock_downgrade+0x740/0x740 [ 1027.489535] ? __alloc_pages_slowpath+0x2930/0x2930 [ 1027.503155] 0 [ 1027.505313] alloc_pages_current+0xec/0x1e0 [ 1027.505325] ion_page_pool_alloc+0x11f/0x1c0 [ 1027.516036] ion_system_heap_allocate+0x138/0x910 [ 1027.516046] ? ion_alloc+0x19b/0x860 [ 1027.516060] ? rcu_read_lock_sched_held+0x110/0x130 [ 1027.529604] ? ion_system_heap_free+0x250/0x250 [ 1027.534285] ion_alloc+0x222/0x860 [ 1027.537822] ? ion_dma_buf_release+0x50/0x50 [ 1027.538549] Node 0 [ 1027.542222] ? kasan_check_write+0x14/0x20 [ 1027.542232] ? _copy_from_user+0x99/0x110 [ 1027.542241] ion_ioctl+0x105/0x217 [ 1027.542249] ? ion_alloc.cold+0x40/0x40 [ 1027.542261] ? ion_alloc.cold+0x40/0x40 [ 1027.542269] do_vfs_ioctl+0x7ae/0x1060 [ 1027.542285] ? selinux_file_mprotect+0x5d0/0x5d0 [ 1027.542294] ? lock_downgrade+0x740/0x740 [ 1027.542303] ? ioctl_preallocate+0x1c0/0x1c0 [ 1027.542314] ? __fget+0x237/0x370 [ 1027.552276] Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1027.552912] ? security_file_ioctl+0x7d/0xb0 [ 1027.565297] lowmem_reserve[]: [ 1027.568208] ? security_file_ioctl+0x89/0xb0 [ 1027.568222] SyS_ioctl+0x8f/0xc0 [ 1027.589313] 0 [ 1027.609785] ? do_vfs_ioctl+0x1060/0x1060 [ 1027.609797] do_syscall_64+0x1e8/0x640 [ 1027.609805] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1027.609820] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1027.609826] RIP: 0033:0x45af49 [ 1027.609831] RSP: 002b:00007f361d0eac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1027.609840] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045af49 [ 1027.609844] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1027.609848] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1027.609853] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f361d0eb6d4 [ 1027.609857] R13: 00000000004c41b2 R14: 00000000004da748 R15: 00000000ffffffff [ 1027.611237] CPU: 1 PID: 7539 Comm: syz-executor.3 Not tainted 4.14.162-syzkaller #0 [ 1027.679687] 0 [ 1027.684839] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1027.684843] Call Trace: [ 1027.684862] dump_stack+0x142/0x197 [ 1027.684875] warn_alloc.cold+0x96/0x1af [ 1027.684882] ? zone_watermark_ok_safe+0x2b0/0x2b0 [ 1027.684897] ? __alloc_pages_direct_compact+0x290/0x380 [ 1027.684908] __alloc_pages_slowpath+0x23c6/0x2930 [ 1027.684925] ? save_trace+0x290/0x290 [ 1027.684937] ? warn_alloc+0xf0/0xf0 [ 1027.684954] ? __might_sleep+0x93/0xb0 [ 1027.684962] __alloc_pages_nodemask+0x62c/0x7a0 [ 1027.684969] ? lock_downgrade+0x740/0x740 [ 1027.684977] ? __alloc_pages_slowpath+0x2930/0x2930 [ 1027.684992] alloc_pages_current+0xec/0x1e0 [ 1027.685003] ion_page_pool_alloc+0x11f/0x1c0 [ 1027.685011] ion_system_heap_allocate+0x138/0x910 [ 1027.685020] ? ion_alloc+0x19b/0x860 [ 1027.685029] ? rcu_read_lock_sched_held+0x110/0x130 [ 1027.685038] ? ion_system_heap_free+0x250/0x250 [ 1027.685050] ion_alloc+0x222/0x860 [ 1027.725200] 0 [ 1027.726625] ? ion_dma_buf_release+0x50/0x50 [ 1027.726639] ? kasan_check_write+0x14/0x20 [ 1027.749268] 0 [ 1027.752731] ? _copy_from_user+0x99/0x110 [ 1027.752743] ion_ioctl+0x105/0x217 [ 1027.752753] ? ion_alloc.cold+0x40/0x40 [ 1027.752765] ? ion_alloc.cold+0x40/0x40 [ 1027.752775] do_vfs_ioctl+0x7ae/0x1060 [ 1027.752786] ? selinux_file_mprotect+0x5d0/0x5d0 [ 1027.752796] ? lock_downgrade+0x740/0x740 [ 1027.752805] ? ioctl_preallocate+0x1c0/0x1c0 [ 1027.752816] ? __fget+0x237/0x370 [ 1027.752830] ? security_file_ioctl+0x7d/0xb0 [ 1027.768048] 0 [ 1027.770675] ? security_file_ioctl+0x89/0xb0 [ 1027.770689] SyS_ioctl+0x8f/0xc0 [ 1027.770697] ? do_vfs_ioctl+0x1060/0x1060 [ 1027.770708] do_syscall_64+0x1e8/0x640 [ 1027.770716] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1027.770731] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1027.770738] RIP: 0033:0x45af49 [ 1027.770741] RSP: 002b:00007fdadbcc4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1027.770752] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045af49 [ 1027.788930] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1027.788935] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1027.788940] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fdadbcc56d4 [ 1027.788944] R13: 00000000004c41b2 R14: 00000000004da748 R15: 00000000ffffffff [ 1027.930964] CPU: 1 PID: 7543 Comm: syz-executor.5 Not tainted 4.14.162-syzkaller #0 [ 1027.938796] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1027.948149] Call Trace: [ 1027.950741] dump_stack+0x142/0x197 [ 1027.954372] warn_alloc.cold+0x96/0x1af [ 1027.958374] ? zone_watermark_ok_safe+0x2b0/0x2b0 [ 1027.963235] ? __alloc_pages_direct_compact+0xbc/0x380 [ 1027.968735] __alloc_pages_slowpath+0x23c6/0x2930 [ 1027.973600] ? save_trace+0x290/0x290 [ 1027.977416] ? warn_alloc+0xf0/0xf0 [ 1027.981049] ? __might_sleep+0x93/0xb0 [ 1027.984934] __alloc_pages_nodemask+0x62c/0x7a0 [ 1027.989603] ? lock_downgrade+0x740/0x740 [ 1027.993759] ? __alloc_pages_slowpath+0x2930/0x2930 [ 1027.998790] ? save_trace+0x290/0x290 [ 1028.002594] alloc_pages_current+0xec/0x1e0 [ 1028.006915] ion_page_pool_alloc+0x11f/0x1c0 [ 1028.011321] ion_system_heap_allocate+0x138/0x910 [ 1028.015050] warn_alloc_show_mem: 1 callbacks suppressed [ 1028.015052] Mem-Info: [ 1028.016158] ? ion_alloc+0x19b/0x860 [ 1028.016169] ? rcu_read_lock_sched_held+0x110/0x130 [ 1028.016179] ? ion_system_heap_free+0x250/0x250 [ 1028.016191] ion_alloc+0x222/0x860 [ 1028.028243] active_anon:6772 inactive_anon:188 isolated_anon:0 [ 1028.028243] active_file:655 inactive_file:2144 isolated_file:0 [ 1028.028243] unevictable:0 dirty:108 writeback:0 unstable:0 [ 1028.028243] slab_reclaimable:12485 slab_unreclaimable:97794 [ 1028.028243] mapped:1764 shmem:242 pagetables:436 bounce:0 [ 1028.028243] free:79292 free_pcp:487 free_cma:0 [ 1028.032642] ? ion_dma_buf_release+0x50/0x50 [ 1028.032656] ? kasan_check_write+0x14/0x20 [ 1028.032666] ? _copy_from_user+0x99/0x110 [ 1028.032675] ion_ioctl+0x105/0x217 [ 1028.032683] ? ion_alloc.cold+0x40/0x40 [ 1028.032695] ? ion_alloc.cold+0x40/0x40 [ 1028.032704] do_vfs_ioctl+0x7ae/0x1060 [ 1028.032714] ? selinux_file_mprotect+0x5d0/0x5d0 [ 1028.032723] ? lock_downgrade+0x740/0x740 [ 1028.032732] ? ioctl_preallocate+0x1c0/0x1c0 [ 1028.032742] ? __fget+0x237/0x370 [ 1028.032756] ? security_file_ioctl+0x7d/0xb0 [ 1028.041884] Node 0 active_anon:26980kB inactive_anon:752kB active_file:2560kB inactive_file:7356kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:6020kB dirty:428kB writeback:0kB shmem:968kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 6144kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1028.073994] ? security_file_ioctl+0x89/0xb0 [ 1028.074010] SyS_ioctl+0x8f/0xc0 [ 1028.074018] ? do_vfs_ioctl+0x1060/0x1060 [ 1028.074029] do_syscall_64+0x1e8/0x640 [ 1028.074036] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1028.074050] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1028.074057] RIP: 0033:0x45af49 [ 1028.074061] RSP: 002b:00007f7f21a93c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1028.074070] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045af49 [ 1028.074074] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1028.074078] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1028.074082] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7f21a946d4 [ 1028.074086] R13: 00000000004c41b2 R14: 00000000004da748 R15: 00000000ffffffff [ 1028.225549] Node 1 Normal free:142892kB min:53508kB low:66884kB high:80260kB active_anon:12kB inactive_anon:0kB active_file:104kB inactive_file:1128kB unevictable:0kB writepending:4kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:64kB pagetables:16kB bounce:0kB free_pcp:300kB local_pcp:172kB free_cma:0kB 2020/01/06 14:15:46 result: hanged=false err=executor 0: EOF [ 1028.255420] lowmem_reserve[]: 0 0 0 0 0 [ 1028.260112] Node 0 DMA: 272*4kB (UME) 12*8kB (UM) 9*16kB (UME) 10*32kB (UME) 5*64kB (UME) 5*128kB (UME) 3*256kB (UME) 2*512kB (UE) 2*1024kB (ME) 2*2048kB (UE) 0*4096kB = 10544kB [ 1028.278289] Node 0 DMA32: 49*4kB (MEH) 31*8kB (MEH) 6*16kB (EH) 836*32kB (UME) 188*64kB (UMEH) 26*128kB (UEH) 7*256kB (UH) 2*512kB (EH) 0*1024kB 0*2048kB 0*4096kB = 45468kB [ 1028.296978] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1028.320420] Node 1 Normal: 2*4kB (ME) 2*8kB (UM) 3*16kB (UME) 1968*32kB (UE) 221*64kB (U) 4*128kB (U) 1*256kB (M) 1*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 78472kB [ 1028.377156] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1028.399769] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1028.417815] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1028.427538] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1028.439042] 2013 total pagecache pages [ 1028.443985] 0 pages in swap cache [ 1028.447548] Swap cache stats: add 0, delete 0, find 0/0 [ 1028.455832] Node 1 active_anon:112kB inactive_anon:0kB active_file:60kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:36kB dirty:4kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1028.486174] Free swap = 0kB [ 1028.491970] Total swap = 0kB [ 1028.496368] 1965979 pages RAM [ 1028.499569] 0 pages HighMem/MovableOnly [ 1028.507187] 335874 pages reserved [ 1028.510730] 0 pages cma reserved [ 1028.516333] Node 0 DMA free:10484kB min:216kB low:268kB high:320kB active_anon:12kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1028.547268] lowmem_reserve[]: 0 2569 2569 2569 2569 [ 1028.555226] Node 0 DMA32 free:36276kB min:36380kB low:45472kB high:54564kB active_anon:27040kB inactive_anon:752kB active_file:1244kB inactive_file:1272kB unevictable:0kB writepending:36kB present:3129332kB managed:2634320kB mlocked:0kB kernel_stack:7072kB pagetables:1696kB bounce:0kB free_pcp:392kB local_pcp:120kB free_cma:0kB [ 1028.588722] lowmem_reserve[]: 0 0 0 0 0 [ 1028.592945] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1028.623778] lowmem_reserve[]: 0 0 0 0 0 [ 1028.627909] Node 1 Normal free:53076kB min:53508kB low:66884kB high:80260kB active_anon:12kB inactive_anon:0kB active_file:104kB inactive_file:216kB unevictable:0kB writepending:4kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:128kB pagetables:16kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1028.660724] lowmem_reserve[]: 0 0 0 0 0 [ 1028.664834] Node 0 DMA: 261*4kB (UME) 12*8kB (UM) 8*16kB (UME) 10*32kB (UME) 5*64kB (UME) 5*128kB (UME) 3*256kB (UME) 2*512kB (UE) 2*1024kB (ME) 2*2048kB (UE) 0*4096kB = 10484kB [ 1028.692955] oom_reaper: reaped process 7547 (syz-executor.4), now anon-rss:0kB, file-rss:4kB, shmem-rss:0kB [ 1028.694392] Node 0 DMA32: 184*4kB (MEH) 97*8kB (MEH) 56*16kB (MEH) 183*32kB (UMEH) 212*64kB (UMEH) 38*128kB (UMEH) 13*256kB (UMH) 4*512kB (MEH) 0*1024kB 0*2048kB 0*4096kB = 32072kB [ 1028.730584] oom_reaper: reaped process 7530 (syz-executor.2), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1028.768888] oom_reaper: reaped process 7543 (syz-executor.5), now anon-rss:0kB, file-rss:4kB, shmem-rss:0kB [ 1028.793680] oom_reaper: reaped process 7539 (syz-executor.3), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1028.794838] Node 0 [ 1028.803793] syz-executor.2: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1028.817437] Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1028.820068] syz-executor.5: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1028.831467] syz-executor.2: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1028.860110] syz-executor.2 cpuset=syz2 mems_allowed=0-1 [ 1028.865520] CPU: 1 PID: 7534 Comm: syz-executor.2 Not tainted 4.14.162-syzkaller #0 [ 1028.873314] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1028.880609] Node 1 [ 1028.882681] Call Trace: [ 1028.882687] Normal: [ 1028.884909] dump_stack+0x142/0x197 [ 1028.887473] 27*4kB [ 1028.889783] warn_alloc.cold+0x96/0x1af [ 1028.899563] ? zone_watermark_ok_safe+0x2b0/0x2b0 [ 1028.901532] syz-executor.2 cpuset= [ 1028.904396] ? call_timer_fn+0x670/0x670 [ 1028.904398] syz2 mems_allowed=0-1 [ 1028.908647] __alloc_pages_slowpath+0x23c6/0x2930 [ 1028.920959] ? warn_alloc+0xf0/0xf0 [ 1028.924591] ? __might_sleep+0x93/0xb0 [ 1028.928474] __alloc_pages_nodemask+0x62c/0x7a0 [ 1028.931391] (UM) [ 1028.933130] ? lock_downgrade+0x740/0x740 [ 1028.933132] 28*8kB (UM) [ 1028.935181] ? __alloc_pages_slowpath+0x2930/0x2930 [ 1028.939306] 29*16kB (UME) [ 1028.941975] alloc_pages_current+0xec/0x1e0 [ 1028.941987] ion_page_pool_alloc+0x11f/0x1c0 [ 1028.941995] ion_system_heap_allocate+0x138/0x910 [ 1028.942004] ? ion_alloc+0x19b/0x860 [ 1028.960244] ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb [ 1028.963324] ? rcu_read_lock_sched_held+0x110/0x130 [ 1028.978499] ? ion_system_heap_free+0x250/0x250 [ 1028.983165] ion_alloc+0x222/0x860 [ 1028.986707] ? ion_dma_buf_release+0x50/0x50 [ 1028.991105] ? kasan_check_write+0x14/0x20 [ 1028.995318] ? _copy_from_user+0x99/0x110 [ 1028.999445] ion_ioctl+0x105/0x217 [ 1029.001275] 449*32kB (UME) [ 1029.002966] ? ion_alloc.cold+0x40/0x40 [ 1029.002979] ? ion_alloc.cold+0x40/0x40 [ 1029.005887] 162*64kB [ 1029.009844] do_vfs_ioctl+0x7ae/0x1060 [ 1029.020049] ? selinux_file_mprotect+0x5d0/0x5d0 [ 1029.024798] ? lock_downgrade+0x740/0x740 [ 1029.028940] ? ioctl_preallocate+0x1c0/0x1c0 [ 1029.030465] (U) 4*128kB [ 1029.033362] ? __fget+0x237/0x370 [ 1029.033377] ? security_file_ioctl+0x7d/0xb0 [ 1029.036032] (UE) [ 1029.039478] ? security_file_ioctl+0x89/0xb0 [ 1029.050294] SyS_ioctl+0x8f/0xc0 [ 1029.053658] ? do_vfs_ioctl+0x1060/0x1060 [ 1029.057804] do_syscall_64+0x1e8/0x640 [ 1029.061684] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1029.066520] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1029.070078] 1*256kB [ 1029.071693] RIP: 0033:0x45af49 [ 1029.071698] (M) [ 1029.073997] RSP: 002b:00007f0d587e0c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1029.077184] 1*512kB [ 1029.079140] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045af49 [ 1029.096406] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1029.103665] RBP: 000000000075c070 R08: 0000000000000000 R09: 0000000000000000 [ 1029.110918] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f0d587e16d4 [ 1029.118171] R13: 00000000004c41b2 R14: 00000000004da748 R15: 00000000ffffffff [ 1029.132090] (E) 0*1024kB 0*2048kB 0*4096kB = 26812kB [ 1029.137230] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1029.160132] CPU: 0 PID: 7530 Comm: syz-executor.2 Not tainted 4.14.162-syzkaller #0 [ 1029.167944] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1029.177294] Call Trace: [ 1029.179887] dump_stack+0x142/0x197 [ 1029.183509] warn_alloc.cold+0x96/0x1af [ 1029.187475] ? zone_watermark_ok_safe+0x2b0/0x2b0 [ 1029.192316] ? call_timer_fn+0x670/0x670 [ 1029.196383] __alloc_pages_slowpath+0x23c6/0x2930 [ 1029.201587] ? warn_alloc+0xf0/0xf0 [ 1029.205214] ? __might_sleep+0x93/0xb0 [ 1029.209096] __alloc_pages_nodemask+0x62c/0x7a0 [ 1029.213776] ? lock_downgrade+0x740/0x740 [ 1029.217930] ? __alloc_pages_slowpath+0x2930/0x2930 [ 1029.222975] alloc_pages_current+0xec/0x1e0 [ 1029.227295] ion_page_pool_alloc+0x11f/0x1c0 [ 1029.231702] ion_system_heap_allocate+0x138/0x910 [ 1029.236539] ? ion_alloc+0x19b/0x860 [ 1029.240250] ? rcu_read_lock_sched_held+0x110/0x130 [ 1029.245276] ? ion_system_heap_free+0x250/0x250 [ 1029.249927] ion_alloc+0x222/0x860 [ 1029.253453] ? ion_dma_buf_release+0x50/0x50 [ 1029.257843] ? kasan_check_write+0x14/0x20 [ 1029.262059] ? _copy_from_user+0x99/0x110 [ 1029.266191] ion_ioctl+0x105/0x217 [ 1029.269711] ? ion_alloc.cold+0x40/0x40 [ 1029.273684] ? ion_alloc.cold+0x40/0x40 [ 1029.277638] do_vfs_ioctl+0x7ae/0x1060 [ 1029.281509] ? selinux_file_mprotect+0x5d0/0x5d0 [ 1029.286243] ? lock_downgrade+0x740/0x740 [ 1029.290383] ? ioctl_preallocate+0x1c0/0x1c0 [ 1029.294773] ? __fget+0x237/0x370 [ 1029.299253] ? security_file_ioctl+0x7d/0xb0 [ 1029.303641] ? security_file_ioctl+0x89/0xb0 [ 1029.308030] SyS_ioctl+0x8f/0xc0 [ 1029.311377] ? do_vfs_ioctl+0x1060/0x1060 [ 1029.315507] do_syscall_64+0x1e8/0x640 [ 1029.319384] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1029.324211] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1029.329379] RIP: 0033:0x45af49 [ 1029.332548] RSP: 002b:00007f0d58822c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1029.340236] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045af49 [ 1029.347920] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1029.355181] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1029.362431] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f0d588236d4 [ 1029.369698] R13: 00000000004c41b2 R14: 00000000004da748 R15: 00000000ffffffff [ 1029.382543] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1029.383700] syz-executor.5 cpuset=syz5 mems_allowed=0-1 [ 1029.411527] CPU: 1 PID: 7543 Comm: syz-executor.5 Not tainted 4.14.162-syzkaller #0 [ 1029.412839] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1029.419349] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1029.419353] Call Trace: [ 1029.419370] dump_stack+0x142/0x197 [ 1029.419386] warn_alloc.cold+0x96/0x1af [ 1029.439619] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1029.445983] ? zone_watermark_ok_safe+0x2b0/0x2b0 [ 1029.445994] ? call_timer_fn+0x670/0x670 [ 1029.446012] __alloc_pages_slowpath+0x23c6/0x2930 [ 1029.446033] ? warn_alloc+0xf0/0xf0 [ 1029.446052] ? __might_sleep+0x93/0xb0 [ 1029.449744] 301 total pagecache pages [ 1029.453649] __alloc_pages_nodemask+0x62c/0x7a0 [ 1029.453660] ? lock_downgrade+0x740/0x740 [ 1029.453668] ? __alloc_pages_slowpath+0x2930/0x2930 [ 1029.453687] alloc_pages_current+0xec/0x1e0 [ 1029.453699] ion_page_pool_alloc+0x11f/0x1c0 [ 1029.453707] ion_system_heap_allocate+0x138/0x910 [ 1029.453715] ? ion_alloc+0x19b/0x860 [ 1029.462443] 0 pages in swap cache [ 1029.467113] ? rcu_read_lock_sched_held+0x110/0x130 [ 1029.467124] ? ion_system_heap_free+0x250/0x250 [ 1029.467137] ion_alloc+0x222/0x860 [ 1029.467150] ? ion_dma_buf_release+0x50/0x50 [ 1029.471264] Swap cache stats: add 0, delete 0, find 0/0 [ 1029.476015] ? kasan_check_write+0x14/0x20 [ 1029.476025] ? _copy_from_user+0x99/0x110 [ 1029.476036] ion_ioctl+0x105/0x217 [ 1029.476045] ? ion_alloc.cold+0x40/0x40 [ 1029.479695] Free swap = 0kB [ 1029.483524] ? ion_alloc.cold+0x40/0x40 [ 1029.483533] do_vfs_ioctl+0x7ae/0x1060 [ 1029.483544] ? selinux_file_mprotect+0x5d0/0x5d0 [ 1029.483552] ? lock_downgrade+0x740/0x740 [ 1029.483562] ? ioctl_preallocate+0x1c0/0x1c0 [ 1029.483571] ? __fget+0x237/0x370 [ 1029.483585] ? security_file_ioctl+0x7d/0xb0 [ 1029.483593] ? security_file_ioctl+0x89/0xb0 [ 1029.487423] Total swap = 0kB [ 1029.492024] SyS_ioctl+0x8f/0xc0 [ 1029.492033] ? do_vfs_ioctl+0x1060/0x1060 [ 1029.492044] do_syscall_64+0x1e8/0x640 [ 1029.492052] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1029.492066] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1029.492073] RIP: 0033:0x45af49 [ 1029.492079] RSP: 002b:00007f7f21a93c78 EFLAGS: 00000246 [ 1029.496835] 1965979 pages RAM [ 1029.501233] ORIG_RAX: 0000000000000010 [ 1029.501238] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045af49 [ 1029.501243] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1029.501248] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1029.501253] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7f21a946d4 [ 1029.501258] R13: 00000000004c41b2 R14: 00000000004da748 R15: 00000000ffffffff [ 1029.501782] warn_alloc_show_mem: 4 callbacks suppressed [ 1029.501785] Mem-Info: [ 1029.522380] 0 pages HighMem/MovableOnly [ 1029.527325] active_anon:6188 inactive_anon:188 isolated_anon:0 [ 1029.527325] active_file:25 inactive_file:82 isolated_file:0 [ 1029.527325] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1029.527325] slab_reclaimable:12495 slab_unreclaimable:98000 [ 1029.527325] mapped:27 shmem:242 pagetables:437 bounce:0 [ 1029.527325] free:33729 free_pcp:76 free_cma:0 [ 1029.527340] Node 0 active_anon:24636kB inactive_anon:752kB active_file:44kB inactive_file:44kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:8kB dirty:0kB writeback:0kB shmem:968kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 4096kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1029.527353] Node 1 active_anon:116kB inactive_anon:0kB active_file:56kB inactive_file:284kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:100kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1029.527357] Node 0 DMA free:10428kB min:216kB low:268kB high:320kB active_anon:12kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1029.527375] lowmem_reserve[]: 0 2569 2569 2569 2569 [ 1029.574403] 335874 pages reserved [ 1029.577766] Node 0 [ 1029.599304] 0 pages cma reserved [ 1029.601738] DMA32 free:17972kB min:36380kB low:45472kB high:54564kB active_anon:24624kB inactive_anon:752kB active_file:44kB inactive_file:44kB unevictable:0kB writepending:0kB present:3129332kB managed:2634320kB mlocked:0kB kernel_stack:7072kB pagetables:1692kB bounce:0kB free_pcp:236kB local_pcp:0kB free_cma:0kB [ 1029.718178] syz-executor.3 invoked oom-killer: gfp_mask=0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1029.940064] lowmem_reserve[]: [ 1029.951174] IPVS: ftp: loaded support on port[0] = 21 [ 1029.966094] 0 0 0 0 0 [ 1029.968628] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1029.999527] (null), order=0, oom_score_adj=1000 [ 1030.060089] syz-executor.3 cpuset=syz3 mems_allowed=0-1 [ 1030.065516] CPU: 0 PID: 7546 Comm: syz-executor.3 Not tainted 4.14.162-syzkaller #0 [ 1030.070051] lowmem_reserve[]: [ 1030.073298] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1030.073303] 0 [ 1030.076402] Call Trace: [ 1030.090171] dump_stack+0x142/0x197 [ 1030.093800] dump_header+0x177/0x6cd [ 1030.097511] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1030.102737] ? ___ratelimit+0x55/0x537 [ 1030.106644] oom_kill_process.cold+0x10/0xadd [ 1030.110080] 0 [ 1030.111142] ? oom_unkillable_task+0x294/0x390 [ 1030.111144] 0 0 [ 1030.112937] ? lock_downgrade+0x740/0x740 [ 1030.117499] 0 [ 1030.119460] out_of_memory+0x2ee/0x1180 [ 1030.129330] ? lock_acquire+0x16f/0x430 [ 1030.133304] ? oom_killer_disable+0x1d0/0x1d0 [ 1030.137794] ? __alloc_pages_slowpath+0xca4/0x2930 [ 1030.142722] __alloc_pages_slowpath+0x2251/0x2930 [ 1030.147594] ? warn_alloc+0xf0/0xf0 [ 1030.151231] ? __might_sleep+0x93/0xb0 [ 1030.155126] __alloc_pages_nodemask+0x62c/0x7a0 [ 1030.159812] ? lock_downgrade+0x740/0x740 [ 1030.163963] ? __alloc_pages_slowpath+0x2930/0x2930 [ 1030.168981] alloc_pages_current+0xec/0x1e0 [ 1030.173292] ion_page_pool_alloc+0x11f/0x1c0 [ 1030.173294] Node 1 Normal free:357900kB min:53508kB low:66884kB high:80260kB active_anon:116kB inactive_anon:0kB active_file:0kB inactive_file:148kB unevictable:0kB writepending:0kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:128kB pagetables:56kB bounce:0kB free_pcp:1288kB local_pcp:644kB free_cma:0kB [ 1030.177688] ion_system_heap_allocate+0x138/0x910 [ 1030.210887] ? ion_alloc+0x19b/0x860 [ 1030.214614] ? rcu_read_lock_sched_held+0x110/0x130 [ 1030.219640] ? ion_system_heap_free+0x250/0x250 [ 1030.224318] ion_alloc+0x222/0x860 [ 1030.227860] ? ion_dma_buf_release+0x50/0x50 [ 1030.232266] ? kasan_check_write+0x14/0x20 [ 1030.236495] ? _copy_from_user+0x99/0x110 [ 1030.240643] ion_ioctl+0x105/0x217 [ 1030.244198] ? ion_alloc.cold+0x40/0x40 [ 1030.248197] ? ion_alloc.cold+0x40/0x40 [ 1030.252178] do_vfs_ioctl+0x7ae/0x1060 [ 1030.256067] ? selinux_file_mprotect+0x5d0/0x5d0 [ 1030.260856] ? lock_downgrade+0x740/0x740 [ 1030.265017] ? ioctl_preallocate+0x1c0/0x1c0 [ 1030.269443] ? __fget+0x237/0x370 [ 1030.272914] ? security_file_ioctl+0x7d/0xb0 [ 1030.277499] ? security_file_ioctl+0x89/0xb0 [ 1030.281916] SyS_ioctl+0x8f/0xc0 [ 1030.285274] ? do_vfs_ioctl+0x1060/0x1060 [ 1030.289419] do_syscall_64+0x1e8/0x640 [ 1030.293304] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1030.298160] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1030.303535] RIP: 0033:0x45af49 [ 1030.306727] RSP: 002b:00007fdadbc82c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1030.314439] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045af49 [ 1030.320048] lowmem_reserve[]: [ 1030.321695] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1030.321702] RBP: 000000000075c070 R08: 0000000000000000 R09: 0000000000000000 [ 1030.324797] 0 [ 1030.332045] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fdadbc836d4 [ 1030.332049] R13: 00000000004c41b2 R14: 00000000004da748 R15: 00000000ffffffff [ 1030.365629] Mem-Info: [ 1030.380090] active_anon:6188 inactive_anon:188 isolated_anon:0 [ 1030.380090] active_file:12 inactive_file:463 isolated_file:0 [ 1030.380090] unevictable:0 dirty:1 writeback:0 unstable:0 [ 1030.380090] slab_reclaimable:12511 slab_unreclaimable:98091 [ 1030.380090] mapped:296 shmem:242 pagetables:437 bounce:0 [ 1030.380090] free:37935 free_pcp:675 free_cma:0 [ 1030.380134] 0 0 0 0 [ 1030.415201] Node 0 DMA: 224*4kB (UME) 11*8kB (UM) 7*16kB (UME) 10*32kB (UME) 5*64kB (UME) 4*128kB (ME) 2*256kB (ME) 1*512kB (E) 3*1024kB (UME) 2*2048kB (UE) 0*4096kB = 10440kB [ 1030.500099] Node 0 active_anon:24636kB inactive_anon:752kB active_file:44kB inactive_file:1832kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:1184kB dirty:4kB writeback:0kB shmem:968kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 4096kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1030.510080] Node 0 [ 1030.560146] Node 1 active_anon:116kB inactive_anon:0kB active_file:4kB inactive_file:20kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1030.560147] DMA32: 8183*4kB [ 1030.562398] Node 0 [ 1030.620068] DMA free:10500kB min:216kB low:268kB high:320kB active_anon:12kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1030.645774] lowmem_reserve[]: 0 2569 2569 2569 2569 [ 1030.680096] Node 0 DMA32 free:188576kB min:36380kB low:45472kB high:54564kB active_anon:24624kB inactive_anon:752kB active_file:44kB inactive_file:1832kB unevictable:0kB writepending:4kB present:3129332kB managed:2634320kB mlocked:0kB kernel_stack:7040kB pagetables:1692kB bounce:0kB free_pcp:1280kB local_pcp:620kB free_cma:0kB [ 1030.700060] (UM) 1476*8kB (UME) 510*16kB (UME) 807*32kB (U) 316*64kB (UM) 95*128kB (U) 33*256kB (U) 14*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 126524kB [ 1030.770063] lowmem_reserve[]: 0 0 0 0 0 [ 1030.774095] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1030.780049] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1030.863202] lowmem_reserve[]: 0 0 0 0 0 [ 1030.870066] Node 1 Normal free:387924kB min:53508kB low:66884kB high:80260kB active_anon:116kB inactive_anon:0kB active_file:4kB inactive_file:20kB unevictable:0kB writepending:0kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:128kB pagetables:56kB bounce:0kB free_pcp:1380kB local_pcp:664kB free_cma:0kB [ 1030.890047] Node 1 Normal: 38359*4kB (UM) 7780*8kB (UM) 3612*16kB (U) 3577*32kB (UE) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 387932kB [ 1030.980112] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1030.982718] lowmem_reserve[]: [ 1030.988981] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1030.988987] 0 [ 1031.021675] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1031.022897] 0 [ 1031.023512] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1031.032465] 0 [ 1031.050118] 715 total pagecache pages [ 1031.060182] 0 pages in swap cache [ 1031.063650] Swap cache stats: add 0, delete 0, find 0/0 [ 1031.069022] Free swap = 0kB [ 1031.081345] 0 0 [ 1031.081996] warn_alloc: 6 callbacks suppressed [ 1031.081999] syz-executor.2: [ 1031.083364] Node 0 [ 1031.087938] page allocation failure: order:4 [ 1031.093363] Total swap = 0kB [ 1031.100163] syz-executor.2: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1031.110151] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1031.120368] 1965979 pages RAM [ 1031.120456] DMA: [ 1031.123460] 0 pages HighMem/MovableOnly [ 1031.123467] 255*4kB [ 1031.125506] 335874 pages reserved [ 1031.125511] 0 pages cma reserved [ 1031.129467] (UME) [ 1031.131895] syz-executor.2 cpuset= [ 1031.145079] syz-executor.2 cpuset=syz2 mems_allowed=0-1 [ 1031.154037] syz2 mems_allowed=0-1 [ 1031.154065] CPU: 1 PID: 7530 Comm: syz-executor.2 Not tainted 4.14.162-syzkaller #0 [ 1031.154070] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1031.154073] Call Trace: [ 1031.154086] dump_stack+0x142/0x197 [ 1031.154099] warn_alloc.cold+0x96/0x1af [ 1031.172590] 5*8kB [ 1031.174680] ? zone_watermark_ok_safe+0x2b0/0x2b0 [ 1031.177330] (UM) [ 1031.180944] ? __alloc_pages_direct_compact+0xbc/0x380 [ 1031.180956] __alloc_pages_slowpath+0x23c6/0x2930 [ 1031.180976] ? save_trace+0x290/0x290 [ 1031.180989] ? warn_alloc+0xf0/0xf0 [ 1031.181007] ? __might_sleep+0x93/0xb0 [ 1031.181017] __alloc_pages_nodemask+0x62c/0x7a0 [ 1031.212488] 7*16kB [ 1031.215329] ? lock_downgrade+0x740/0x740 [ 1031.219978] (UME) [ 1031.222201] ? __alloc_pages_slowpath+0x2930/0x2930 [ 1031.222218] alloc_pages_current+0xec/0x1e0 [ 1031.222230] ion_page_pool_alloc+0x11f/0x1c0 [ 1031.222238] ion_system_heap_allocate+0x138/0x910 [ 1031.222250] ? ion_system_heap_free+0x250/0x250 [ 1031.222262] ion_alloc+0x68c/0x860 [ 1031.222275] ? ion_dma_buf_release+0x50/0x50 [ 1031.252568] 10*32kB [ 1031.255246] ? kasan_check_write+0x14/0x20 [ 1031.259624] (UME) [ 1031.261935] ? _copy_from_user+0x99/0x110 [ 1031.261948] ion_ioctl+0x105/0x217 [ 1031.261957] ? ion_alloc.cold+0x40/0x40 [ 1031.261969] ? ion_alloc.cold+0x40/0x40 [ 1031.261983] do_vfs_ioctl+0x7ae/0x1060 [ 1031.261994] ? selinux_file_mprotect+0x5d0/0x5d0 [ 1031.262003] ? lock_downgrade+0x740/0x740 [ 1031.262011] ? ioctl_preallocate+0x1c0/0x1c0 [ 1031.262022] ? __fget+0x237/0x370 [ 1031.262037] ? security_file_ioctl+0x7d/0xb0 [ 1031.292512] 4*64kB [ 1031.292631] ? security_file_ioctl+0x89/0xb0 [ 1031.296766] (ME) 4*128kB [ 1031.301169] SyS_ioctl+0x8f/0xc0 [ 1031.301178] ? do_vfs_ioctl+0x1060/0x1060 [ 1031.301189] do_syscall_64+0x1e8/0x640 [ 1031.301197] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1031.301211] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1031.301218] RIP: 0033:0x45af49 [ 1031.301221] RSP: 002b:00007f0d58822c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1031.301230] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045af49 [ 1031.301235] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1031.301241] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1031.320719] (ME) [ 1031.321760] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f0d588236d4 [ 1031.321767] R13: 00000000004c41b2 R14: 00000000004da748 R15: 00000000ffffffff [ 1031.325900] 2*256kB [ 1031.337102] CPU: 0 PID: 7534 Comm: syz-executor.2 Not tainted 4.14.162-syzkaller #0 [ 1031.365206] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1031.389386] Call Trace: [ 1031.408851] dump_stack+0x142/0x197 [ 1031.416433] warn_alloc.cold+0x96/0x1af [ 1031.420529] ? zone_watermark_ok_safe+0x2b0/0x2b0 [ 1031.425386] ? __alloc_pages_direct_compact+0xbc/0x380 [ 1031.430667] __alloc_pages_slowpath+0x23c6/0x2930 [ 1031.430683] ? save_trace+0x290/0x290 [ 1031.439290] ? warn_alloc+0xf0/0xf0 [ 1031.442999] ? __might_sleep+0x93/0xb0 [ 1031.443009] __alloc_pages_nodemask+0x62c/0x7a0 [ 1031.443020] ? __alloc_pages_slowpath+0x2930/0x2930 [ 1031.443037] alloc_pages_current+0xec/0x1e0 [ 1031.460891] ion_page_pool_alloc+0x11f/0x1c0 [ 1031.460900] ion_system_heap_allocate+0x138/0x910 [ 1031.460910] ? ion_system_heap_free+0x250/0x250 [ 1031.470135] ion_alloc+0x68c/0x860 [ 1031.470149] ? ion_dma_buf_release+0x50/0x50 [ 1031.470161] ? kasan_check_write+0x14/0x20 [ 1031.470172] ? _copy_from_user+0x99/0x110 [ 1031.478343] ion_ioctl+0x105/0x217 [ 1031.486963] ? ion_alloc.cold+0x40/0x40 [ 1031.494642] ? ion_alloc.cold+0x40/0x40 [ 1031.502556] do_vfs_ioctl+0x7ae/0x1060 [ 1031.502567] ? selinux_file_mprotect+0x5d0/0x5d0 [ 1031.502577] ? lock_downgrade+0x740/0x740 [ 1031.502585] ? ioctl_preallocate+0x1c0/0x1c0 [ 1031.502598] ? __fget+0x237/0x370 [ 1031.511209] ? security_file_ioctl+0x7d/0xb0 [ 1031.511217] ? security_file_ioctl+0x89/0xb0 [ 1031.511228] SyS_ioctl+0x8f/0xc0 [ 1031.519756] ? do_vfs_ioctl+0x1060/0x1060 [ 1031.527578] do_syscall_64+0x1e8/0x640 [ 1031.535311] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1031.543306] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1031.543314] RIP: 0033:0x45af49 [ 1031.543318] RSP: 002b:00007f0d587e0c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1031.543327] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045af49 [ 1031.543334] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1031.553319] RBP: 000000000075c070 R08: 0000000000000000 R09: 0000000000000000 [ 1031.553324] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f0d587e16d4 [ 1031.553329] R13: 00000000004c41b2 R14: 00000000004da748 R15: 00000000ffffffff [ 1031.580111] (ME) [ 1031.606743] syz-executor.5: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1031.610065] 1*512kB (E) 3*1024kB (UME) 2*2048kB (UE) 0*4096kB = 10452kB [ 1031.619059] syz-executor.5 cpuset= [ 1031.631378] warn_alloc_show_mem: 2 callbacks suppressed [ 1031.631381] Mem-Info: [ 1031.640071] Node 0 DMA32: 21282*4kB (UE) 3470*8kB (UME) 1207*16kB (UME) 1698*32kB (UME) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 186536kB [ 1031.657275] syz5 mems_allowed=0-1 [ 1031.663947] active_anon:6188 inactive_anon:188 isolated_anon:0 [ 1031.663947] active_file:212 inactive_file:211 isolated_file:0 [ 1031.663947] unevictable:0 dirty:26 writeback:0 unstable:0 [ 1031.663947] slab_reclaimable:12511 slab_unreclaimable:97780 [ 1031.663947] mapped:321 shmem:242 pagetables:437 bounce:0 [ 1031.663947] free:158010 free_pcp:86 free_cma:0 [ 1031.670056] Node 0 [ 1031.700289] CPU: 1 PID: 7543 Comm: syz-executor.5 Not tainted 4.14.162-syzkaller #0 [ 1031.710322] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1031.719672] Call Trace: [ 1031.722261] dump_stack+0x142/0x197 [ 1031.725889] warn_alloc.cold+0x96/0x1af [ 1031.729857] ? zone_watermark_ok_safe+0x2b0/0x2b0 [ 1031.730056] Normal: 0*4kB 0*8kB [ 1031.734705] ? __alloc_pages_direct_compact+0xbc/0x380 [ 1031.734715] __alloc_pages_slowpath+0x23c6/0x2930 [ 1031.738242] 0*16kB [ 1031.743504] ? save_trace+0x290/0x290 [ 1031.743515] ? warn_alloc+0xf0/0xf0 [ 1031.743532] ? __might_sleep+0x93/0xb0 [ 1031.743542] __alloc_pages_nodemask+0x62c/0x7a0 [ 1031.743549] ? lock_downgrade+0x740/0x740 [ 1031.743557] ? __alloc_pages_slowpath+0x2930/0x2930 [ 1031.743575] alloc_pages_current+0xec/0x1e0 [ 1031.760059] 0*32kB [ 1031.761900] ion_page_pool_alloc+0x11f/0x1c0 [ 1031.766543] 0*64kB [ 1031.770686] ion_system_heap_allocate+0x138/0x910 [ 1031.770698] ? ion_system_heap_free+0x250/0x250 [ 1031.770711] ion_alloc+0x68c/0x860 [ 1031.770723] ? ion_dma_buf_release+0x50/0x50 [ 1031.770738] ? kasan_check_write+0x14/0x20 [ 1031.790071] 0*128kB [ 1031.793969] ? _copy_from_user+0x99/0x110 [ 1031.798614] 0*256kB [ 1031.802152] ion_ioctl+0x105/0x217 [ 1031.802163] ? ion_alloc.cold+0x40/0x40 [ 1031.802175] ? ion_alloc.cold+0x40/0x40 [ 1031.802185] do_vfs_ioctl+0x7ae/0x1060 [ 1031.802196] ? selinux_file_mprotect+0x5d0/0x5d0 [ 1031.830058] 0*512kB [ 1031.831538] ? lock_downgrade+0x740/0x740 [ 1031.835404] 0*1024kB [ 1031.840145] ? ioctl_preallocate+0x1c0/0x1c0 [ 1031.840156] ? __fget+0x237/0x370 [ 1031.840170] ? security_file_ioctl+0x7d/0xb0 [ 1031.840178] ? security_file_ioctl+0x89/0xb0 [ 1031.850064] 0*2048kB [ 1031.853414] SyS_ioctl+0x8f/0xc0 [ 1031.856841] 0*4096kB [ 1031.861837] ? do_vfs_ioctl+0x1060/0x1060 [ 1031.861847] do_syscall_64+0x1e8/0x640 [ 1031.861855] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1031.861868] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1031.861876] RIP: 0033:0x45af49 [ 1031.880071] = 0kB [ 1031.882427] RSP: 002b:00007f7f21a93c78 EFLAGS: 00000246 [ 1031.887253] Node 1 [ 1031.892417] ORIG_RAX: 0000000000000010 [ 1031.892422] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045af49 [ 1031.892427] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1031.892431] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1031.892436] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7f21a946d4 [ 1031.892440] R13: 00000000004c41b2 R14: 00000000004da748 R15: 00000000ffffffff [ 1031.920064] Normal: [ 1031.940063] 40185*4kB (UM) 6459*8kB (UM) 4237*16kB (U) 4528*32kB (UE) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 425100kB [ 1031.949018] Node 0 active_anon:24636kB inactive_anon:752kB active_file:844kB inactive_file:824kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:1284kB dirty:104kB writeback:0kB shmem:968kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 4096kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1031.990054] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1031.998904] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1031.998913] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1032.016481] Node 1 active_anon:116kB inactive_anon:0kB active_file:4kB inactive_file:20kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1032.060090] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1032.080132] 709 total pagecache pages [ 1032.083970] 0 pages in swap cache [ 1032.087425] Swap cache stats: add 0, delete 0, find 0/0 [ 1032.100249] Node 0 DMA free:10452kB min:216kB low:268kB high:320kB active_anon:12kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1032.113388] Free swap = 0kB [ 1032.165357] Total swap = 0kB [ 1032.168405] 1965979 pages RAM [ 1032.180115] 0 pages HighMem/MovableOnly [ 1032.184099] 335874 pages reserved [ 1032.187533] 0 pages cma reserved [ 1032.191316] lowmem_reserve[]: 0 2569 2569 2569 2569 [ 1032.196371] Node 0 DMA32 free:45464kB min:36380kB low:45472kB high:54564kB active_anon:24624kB inactive_anon:752kB active_file:856kB inactive_file:1084kB unevictable:0kB writepending:4kB present:3129332kB managed:2634320kB mlocked:0kB kernel_stack:7040kB pagetables:1692kB bounce:0kB free_pcp:496kB local_pcp:324kB free_cma:0kB [ 1032.200259] Out of memory: Kill process 7176 (syz-execprog) score 1 or sacrifice child [ 1032.238912] IPVS: ftp: loaded support on port[0] = 21 [ 1032.281154] syz-executor.0: page allocation failure: order:4, mode:0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null) [ 1032.290407] Killed process 7412 (syz-executor.2) total-vm:37644kB, anon-rss:60kB, file-rss:0kB, shmem-rss:0kB [ 1032.310179] syz-executor.3: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1032.310292] oom_reaper: reaped process 7412 (syz-executor.2), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1032.335751] lowmem_reserve[]: 0 0 0 0 0 [ 1032.339766] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1032.360661] syz-executor.3 cpuset=syz3 mems_allowed=0-1 [ 1032.370790] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 1032.376271] CPU: 1 PID: 7553 Comm: syz-executor.0 Not tainted 4.14.162-syzkaller #0 [ 1032.384059] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1032.393410] Call Trace: [ 1032.396001] dump_stack+0x142/0x197 [ 1032.399630] warn_alloc.cold+0x96/0x1af [ 1032.403604] ? zone_watermark_ok_safe+0x2b0/0x2b0 [ 1032.408435] ? __alloc_pages_direct_compact+0x290/0x380 [ 1032.413793] __alloc_pages_slowpath+0x23c6/0x2930 [ 1032.418903] ? save_trace+0x290/0x290 [ 1032.422704] ? warn_alloc+0xf0/0xf0 [ 1032.426335] ? __might_sleep+0x93/0xb0 [ 1032.430218] __alloc_pages_nodemask+0x62c/0x7a0 [ 1032.434883] ? __alloc_pages_slowpath+0x2930/0x2930 [ 1032.439900] ? cache_grow_begin+0x335/0x400 [ 1032.444210] cache_grow_begin+0x80/0x400 [ 1032.448254] ? __cpuset_node_allowed+0xff/0x450 [ 1032.452928] fallback_alloc+0x1fd/0x2c0 [ 1032.456929] ____cache_alloc_node+0x1be/0x1d0 [ 1032.461421] kmem_cache_alloc_trace+0x213/0x790 [ 1032.466076] ? __lockdep_init_map+0x10c/0x570 [ 1032.470641] ? ebt_register_table+0x714/0xbc0 [ 1032.475185] ? canfd_rcv+0x170/0x170 [ 1032.478904] can_pernet_init+0x70/0x420 [ 1032.482886] ops_init+0xa9/0x3d0 [ 1032.486256] setup_net+0x237/0x530 [ 1032.489790] ? ops_init+0x3d0/0x3d0 [ 1032.493416] copy_net_ns+0x19f/0x440 [ 1032.497132] create_new_namespaces+0x37b/0x720 [ 1032.501719] unshare_nsproxy_namespaces+0xab/0x1e0 [ 1032.506646] ? unshare_userns+0x26/0xe0 [ 1032.510621] SyS_unshare+0x2f3/0x7e0 [ 1032.514594] ? walk_process_tree+0x2b0/0x2b0 [ 1032.518995] ? task_work_run+0x155/0x190 [ 1032.523064] ? do_syscall_64+0x53/0x640 [ 1032.527120] ? walk_process_tree+0x2b0/0x2b0 [ 1032.531526] do_syscall_64+0x1e8/0x640 [ 1032.535404] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1032.540255] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1032.545436] RIP: 0033:0x45da17 [ 1032.548619] RSP: 002b:00007ffdef7629e8 EFLAGS: 00000202 ORIG_RAX: 0000000000000110 [ 1032.556334] RAX: ffffffffffffffda RBX: 00007ffdef762a30 RCX: 000000000045da17 [ 1032.563594] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 1032.570858] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000005 [ 1032.578122] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000416a50 [ 1032.585386] R13: 00007ffdef762c58 R14: 0000000000000000 R15: 0000000000000000 [ 1032.592659] CPU: 0 PID: 7546 Comm: syz-executor.3 Not tainted 4.14.162-syzkaller #0 [ 1032.600466] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1032.600633] lowmem_reserve[]: [ 1032.609805] Call Trace: [ 1032.609811] 0 [ 1032.612900] dump_stack+0x142/0x197 [ 1032.612913] warn_alloc.cold+0x96/0x1af [ 1032.612921] ? zone_watermark_ok_safe+0x2b0/0x2b0 [ 1032.612934] ? wait_for_completion+0x420/0x420 [ 1032.616647] 0 [ 1032.617306] __alloc_pages_slowpath+0x23c6/0x2930 [ 1032.621832] 0 [ 1032.625665] ? warn_alloc+0xf0/0xf0 [ 1032.630492] 0 [ 1032.635060] ? __might_sleep+0x93/0xb0 [ 1032.636837] 0 [ 1032.641695] __alloc_pages_nodemask+0x62c/0x7a0 [ 1032.641708] ? lock_downgrade+0x740/0x740 [ 1032.641716] ? __alloc_pages_slowpath+0x2930/0x2930 [ 1032.641732] alloc_pages_current+0xec/0x1e0 [ 1032.647138] ion_page_pool_alloc+0x11f/0x1c0 [ 1032.648936] Node 1 [ 1032.652805] ion_system_heap_allocate+0x138/0x910 [ 1032.652814] ? ion_alloc+0x19b/0x860 [ 1032.652825] ? rcu_read_lock_sched_held+0x110/0x130 [ 1032.652833] ? ion_system_heap_free+0x250/0x250 [ 1032.652843] ion_alloc+0x222/0x860 [ 1032.652855] ? ion_dma_buf_release+0x50/0x50 [ 1032.652868] ? kasan_check_write+0x14/0x20 [ 1032.654836] Normal free:40508kB min:53508kB low:66884kB high:80260kB active_anon:108kB inactive_anon:0kB active_file:16kB inactive_file:276kB unevictable:0kB writepending:0kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:128kB pagetables:56kB bounce:0kB free_pcp:260kB local_pcp:236kB free_cma:0kB [ 1032.659305] ? _copy_from_user+0x99/0x110 [ 1032.663462] lowmem_reserve[]: [ 1032.668445] ion_ioctl+0x105/0x217 [ 1032.672839] 0 [ 1032.677134] ? ion_alloc.cold+0x40/0x40 [ 1032.679344] 0 [ 1032.684172] ? ion_alloc.cold+0x40/0x40 [ 1032.684181] do_vfs_ioctl+0x7ae/0x1060 [ 1032.684191] ? selinux_file_mprotect+0x5d0/0x5d0 [ 1032.687889] 0 [ 1032.692888] ? lock_downgrade+0x740/0x740 [ 1032.692898] ? ioctl_preallocate+0x1c0/0x1c0 [ 1032.692908] ? __fget+0x237/0x370 [ 1032.692923] ? security_file_ioctl+0x7d/0xb0 [ 1032.697660] 0 [ 1032.701274] ? security_file_ioctl+0x89/0xb0 [ 1032.701286] SyS_ioctl+0x8f/0xc0 [ 1032.701296] ? do_vfs_ioctl+0x1060/0x1060 [ 1032.705678] 0 [ 1032.709899] do_syscall_64+0x1e8/0x640 [ 1032.741674] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1032.741688] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1032.741695] RIP: 0033:0x45af49 [ 1032.744776] Node 0 [ 1032.748294] RSP: 002b:00007fdadbc82c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1032.750180] DMA: [ 1032.754035] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045af49 [ 1032.755813] 235*4kB [ 1032.759765] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1032.763657] (UME) [ 1032.768376] RBP: 000000000075c070 R08: 0000000000000000 R09: 0000000000000000 [ 1032.768383] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fdadbc836d4 [ 1032.770182] 5*8kB [ 1032.774290] R13: 00000000004c41b2 R14: 00000000004da748 R15: 00000000ffffffff [ 1032.931368] warn_alloc_show_mem: 2 callbacks suppressed [ 1032.931371] Mem-Info: [ 1032.939187] active_anon:6186 inactive_anon:188 isolated_anon:0 [ 1032.939187] active_file:227 inactive_file:563 isolated_file:0 [ 1032.939187] unevictable:0 dirty:1 writeback:0 unstable:0 [ 1032.939187] slab_reclaimable:12520 slab_unreclaimable:97870 [ 1032.939187] mapped:487 shmem:242 pagetables:437 bounce:0 [ 1032.939187] free:47984 free_pcp:216 free_cma:0 [ 1033.070365] Node 0 active_anon:24588kB inactive_anon:752kB active_file:860kB inactive_file:1340kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:1604kB dirty:4kB writeback:28kB shmem:968kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 4096kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1033.102165] chnl_net:caif_netlink_parms(): no params data found [ 1033.162004] Node 1 active_anon:112kB inactive_anon:0kB active_file:8kB inactive_file:1008kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:556kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1033.192499] (UM) 7*16kB (UME) 10*32kB (UME) 4*64kB (ME) 4*128kB (ME) 2*256kB (ME) 1*512kB (E) 3*1024kB (UME) 2*2048kB (UE) 0*4096kB = 10372kB [ 1033.221563] Node 0 DMA32: 1*4kB (M) 0*8kB 3*16kB (MEH) 2*32kB (ME) 101*64kB (UH) 23*128kB (UME) 171*256kB (UE) 25*512kB (UE) 10*1024kB (U) 0*2048kB 0*4096kB = 76340kB [ 1033.275595] Node 0 DMA free:10436kB min:216kB low:268kB high:320kB active_anon:12kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1033.307066] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1033.364465] Node 1 Normal: 1*4kB (M) 1*8kB (U) 0*16kB 3*32kB (UME) 2314*64kB (U) 460*128kB (UM) 65*256kB (UM) 5*512kB (UM) 68*1024kB (UM) 9*2048kB (U) 0*4096kB = 314348kB [ 1033.404032] lowmem_reserve[]: 0 2569 2569 2569 2569 [ 1033.420576] Node 0 DMA32 free:142208kB min:36380kB low:45472kB high:54564kB active_anon:24492kB inactive_anon:752kB active_file:1868kB inactive_file:1844kB unevictable:0kB writepending:4kB present:3129332kB managed:2634320kB mlocked:0kB kernel_stack:7008kB pagetables:1612kB bounce:0kB free_pcp:408kB local_pcp:96kB free_cma:0kB [ 1033.450367] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1033.459394] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1033.471994] bridge0: port 1(bridge_slave_0) entered blocking state [ 1033.480238] bridge0: port 1(bridge_slave_0) entered disabled state [ 1033.487394] device bridge_slave_0 entered promiscuous mode [ 1033.510104] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1033.518989] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1033.529326] bridge0: port 2(bridge_slave_1) entered blocking state [ 1033.540119] bridge0: port 2(bridge_slave_1) entered disabled state [ 1033.547278] device bridge_slave_1 entered promiscuous mode [ 1033.553066] lowmem_reserve[]: 0 0 0 0 0 [ 1033.557077] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1033.590067] 1590 total pagecache pages [ 1033.593986] 0 pages in swap cache [ 1033.597428] Swap cache stats: add 0, delete 0, find 0/0 [ 1033.630072] Free swap = 0kB [ 1033.633125] Total swap = 0kB [ 1033.636138] 1965979 pages RAM [ 1033.639238] 0 pages HighMem/MovableOnly [ 1033.649143] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 1033.670106] lowmem_reserve[]: 0 0 0 0 0 [ 1033.674143] Node 1 Normal free:261844kB min:53508kB low:66884kB high:80260kB active_anon:112kB inactive_anon:0kB active_file:8kB inactive_file:1008kB unevictable:0kB writepending:0kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:128kB pagetables:56kB bounce:0kB free_pcp:236kB local_pcp:144kB free_cma:0kB [ 1033.707107] 335874 pages reserved [ 1033.720237] 0 pages cma reserved [ 1033.732105] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1033.754358] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 1033.790137] lowmem_reserve[]: 0 0 0 0 0 [ 1033.794181] Node 0 DMA: 233*4kB (UME) 4*8kB (UM) 6*16kB (UME) 10*32kB (UME) 5*64kB (UME) 5*128kB (UME) 2*256kB (ME) 1*512kB (E) 3*1024kB (UME) 2*2048kB (UE) 0*4096kB = 10532kB [ 1033.820658] team0: Port device team_slave_0 added [ 1033.854040] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 1033.874612] team0: Port device team_slave_1 added [ 1033.893967] Node 0 DMA32: 0*4kB 2*8kB (UM) 2*16kB (EH) 2*32kB (ME) 22*64kB (UMH) 134*128kB (UEH) 38*256kB (UMEH) 66*512kB (UME) 0*1024kB 0*2048kB 0*4096kB = 62192kB [ 1033.909290] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 1033.934181] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 1033.950160] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1034.023955] Node 1 Normal: 0*4kB 0*8kB 0*16kB 1*32kB (E) 5*64kB (UM) 317*128kB (U) 141*256kB (U) 28*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 91360kB [ 1034.064138] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1034.093435] device hsr_slave_0 entered promiscuous mode [ 1034.103553] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1034.112242] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1034.160113] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1034.168725] 1346 total pagecache pages [ 1034.180405] device hsr_slave_1 entered promiscuous mode [ 1034.226437] rs:main Q:Reg invoked oom-killer: gfp_mask=0x1c200ca(GFP_HIGHUSER_MOVABLE|__GFP_WRITE), nodemask=(null), order=0, oom_score_adj=0 [ 1034.240696] 0 pages in swap cache [ 1034.250476] Swap cache stats: add 0, delete 0, find 0/0 [ 1034.258002] rs:main Q:Reg cpuset=/ mems_allowed=0-1 [ 1034.263095] Free swap = 0kB [ 1034.266109] Total swap = 0kB [ 1034.269262] 1965979 pages RAM [ 1034.273960] CPU: 1 PID: 7026 Comm: rs:main Q:Reg Not tainted 4.14.162-syzkaller #0 [ 1034.281672] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1034.291031] Call Trace: [ 1034.293648] dump_stack+0x142/0x197 [ 1034.295886] 0 pages HighMem/MovableOnly [ 1034.297279] dump_header+0x177/0x6cd [ 1034.304939] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1034.304965] 335874 pages reserved [ 1034.310030] ? ___ratelimit+0x55/0x537 [ 1034.310044] oom_kill_process.cold+0x10/0xadd [ 1034.310052] ? oom_unkillable_task+0x294/0x390 [ 1034.310064] ? lock_downgrade+0x740/0x740 [ 1034.310077] out_of_memory+0x2ee/0x1180 [ 1034.310083] ? lock_acquire+0x16f/0x430 [ 1034.310098] ? oom_killer_disable+0x1d0/0x1d0 [ 1034.313567] 0 pages cma reserved [ 1034.317409] ? __alloc_pages_slowpath+0xca4/0x2930 [ 1034.351286] __alloc_pages_slowpath+0x2251/0x2930 [ 1034.356146] ? warn_alloc+0xf0/0xf0 [ 1034.359780] ? __might_sleep+0x93/0xb0 [ 1034.363665] __alloc_pages_nodemask+0x62c/0x7a0 [ 1034.368330] ? find_get_entry+0x214/0x680 [ 1034.372473] ? __alloc_pages_slowpath+0x2930/0x2930 [ 1034.377487] ? lock_downgrade+0x740/0x740 [ 1034.381630] alloc_pages_current+0xec/0x1e0 [ 1034.385950] __page_cache_alloc+0x248/0x3e0 [ 1034.390273] pagecache_get_page+0x17c/0x9e0 [ 1034.394591] grab_cache_page_write_begin+0x74/0xa0 [ 1034.399515] ext4_da_write_begin+0x24c/0xea0 [ 1034.403923] ? ext4_write_begin+0x1290/0x1290 [ 1034.408413] ? rcu_lockdep_current_cpu_online+0x8a/0x140 [ 1034.413863] generic_perform_write+0x1f8/0x480 [ 1034.418452] ? __mnt_drop_write+0x54/0x70 [ 1034.422595] ? page_endio+0x530/0x530 [ 1034.426388] ? current_time+0xb0/0xb0 [ 1034.430204] ? ext4_file_write_iter+0x1f4/0xe90 [ 1034.434867] __generic_file_write_iter+0x239/0x5b0 [ 1034.439798] ext4_file_write_iter+0x2ac/0xe90 [ 1034.444296] ? ext4_file_mmap+0x2c0/0x2c0 [ 1034.448438] ? trace_hardirqs_on+0x10/0x10 [ 1034.450115] syz-executor.2: page allocation failure: order:0 [ 1034.452665] ? save_trace+0x290/0x290 [ 1034.452674] ? iov_iter_init+0xaf/0x1d0 [ 1034.458461] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1034.462245] __vfs_write+0x4a7/0x6b0 [ 1034.462261] ? kernel_read+0x120/0x120 [ 1034.462270] ? check_preemption_disabled+0x3c/0x250 [ 1034.462282] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 1034.462295] ? rcu_sync_lockdep_assert+0x6d/0xb0 [ 1034.462303] ? __sb_start_write+0x153/0x2f0 [ 1034.462312] vfs_write+0x198/0x500 [ 1034.474304] (null) [ 1034.477048] SyS_write+0xfd/0x230 [ 1034.484760] syz-executor.2 cpuset= [ 1034.485909] ? SyS_read+0x230/0x230 [ 1034.494416] syz2 [ 1034.496082] ? do_syscall_64+0x53/0x640 [ 1034.506071] mems_allowed=0-1 [ 1034.507854] ? SyS_read+0x230/0x230 [ 1034.531017] do_syscall_64+0x1e8/0x640 [ 1034.534892] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1034.540333] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1034.545507] RIP: 0033:0x7f10eac4619d [ 1034.549197] RSP: 002b:00007f10e91e6f90 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 1034.556901] RAX: ffffffffffffffda RBX: 0000000000000400 RCX: 00007f10eac4619d [ 1034.564155] RDX: 0000000000000400 RSI: 0000000001602a90 RDI: 0000000000000005 [ 1034.571408] RBP: 0000000001602a90 R08: 2030353a35313a34 R09: 656c6c616b7a7973 [ 1034.578664] R10: 6c656e72656b2072 R11: 0000000000000293 R12: 0000000000000000 [ 1034.585912] R13: 00007f10e91e7410 R14: 0000000001627e90 R15: 0000000001602890 [ 1034.593177] CPU: 0 PID: 7534 Comm: syz-executor.2 Not tainted 4.14.162-syzkaller #0 [ 1034.600979] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1034.610322] Call Trace: [ 1034.612906] dump_stack+0x142/0x197 [ 1034.616529] warn_alloc.cold+0x96/0x1af [ 1034.620758] ? zone_watermark_ok_safe+0x2b0/0x2b0 [ 1034.625593] ? trace_hardirqs_on_caller+0x400/0x590 [ 1034.630603] ? call_timer_fn+0x670/0x670 [ 1034.634668] __alloc_pages_slowpath+0x23c6/0x2930 [ 1034.639519] ? warn_alloc+0xf0/0xf0 [ 1034.643148] ? __might_sleep+0x93/0xb0 [ 1034.647030] __alloc_pages_nodemask+0x62c/0x7a0 [ 1034.651693] ? lock_downgrade+0x740/0x740 [ 1034.655836] ? __alloc_pages_slowpath+0x2930/0x2930 [ 1034.660856] alloc_pages_current+0xec/0x1e0 [ 1034.665178] ion_page_pool_alloc+0x11f/0x1c0 [ 1034.669583] ion_system_heap_allocate+0x138/0x910 [ 1034.674422] ? ion_system_heap_free+0x250/0x250 [ 1034.679088] ion_alloc+0x68c/0x860 [ 1034.682629] ? ion_dma_buf_release+0x50/0x50 [ 1034.683906] Mem-Info: [ 1034.687030] ? kasan_check_write+0x14/0x20 [ 1034.689433] active_anon:6154 inactive_anon:188 isolated_anon:0 [ 1034.689433] active_file:15 inactive_file:10 isolated_file:1 [ 1034.689433] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1034.689433] slab_reclaimable:12572 slab_unreclaimable:98405 [ 1034.689433] mapped:11 shmem:242 pagetables:417 bounce:0 [ 1034.689433] free:13697 free_pcp:60 free_cma:0 [ 1034.693640] ? _copy_from_user+0x99/0x110 [ 1034.693651] ion_ioctl+0x105/0x217 [ 1034.693658] ? ion_alloc.cold+0x40/0x40 [ 1034.693677] ? ion_alloc.cold+0x40/0x40 [ 1034.726036] Node 0 active_anon:24504kB inactive_anon:752kB active_file:48kB inactive_file:32kB unevictable:0kB isolated(anon):0kB isolated(file):4kB mapped:28kB dirty:0kB writeback:0kB shmem:968kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 4096kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1034.730142] do_vfs_ioctl+0x7ae/0x1060 [ 1034.730152] ? selinux_file_mprotect+0x5d0/0x5d0 [ 1034.730162] ? lock_downgrade+0x740/0x740 [ 1034.733682] Node 1 active_anon:112kB inactive_anon:0kB active_file:12kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:16kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1034.737630] ? ioctl_preallocate+0x1c0/0x1c0 [ 1034.741596] Node 0 [ 1034.768503] ? __fget+0x237/0x370 [ 1034.768518] ? security_file_ioctl+0x7d/0xb0 [ 1034.768524] ? security_file_ioctl+0x89/0xb0 [ 1034.768535] SyS_ioctl+0x8f/0xc0 [ 1034.772429] DMA free:10360kB min:216kB low:268kB high:320kB active_anon:12kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1034.777157] ? do_vfs_ioctl+0x1060/0x1060 [ 1034.781314] lowmem_reserve[]: [ 1034.807302] do_syscall_64+0x1e8/0x640 [ 1034.807311] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1034.807326] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1034.811730] 0 [ 1034.813930] RIP: 0033:0x45af49 [ 1034.817355] 2569 [ 1034.821828] RSP: 002b:00007f0d587e0c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1034.821836] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045af49 [ 1034.821841] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1034.821845] RBP: 000000000075c070 R08: 0000000000000000 R09: 0000000000000000 [ 1034.821850] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f0d587e16d4 [ 1034.821856] R13: 00000000004c41b2 R14: 00000000004da748 R15: 00000000ffffffff [ 1034.826243] 2569 [ 1034.830377] ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb [ 1034.855440] ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb [ 1034.859375] ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb [ 1034.862491] ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb [ 1034.866351] ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb [ 1034.871212] ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb [ 1034.877047] syz-executor.3: [ 1034.878224] syz-executor.5: [ 1034.881333] page allocation failure: order:4 [ 1034.883375] page allocation failure: order:0 [ 1034.891869] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1034.898350] syz-executor.3: [ 1034.905641] (null) [ 1034.912922] syz-executor.2: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1034.920240] syz-executor.3 cpuset= [ 1034.938254] 2569 [ 1034.961104] syz3 [ 1034.969135] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1034.977289] mems_allowed=0-1 [ 1034.979319] syz-executor.2 cpuset= [ 1034.985524] CPU: 0 PID: 7546 Comm: syz-executor.3 Not tainted 4.14.162-syzkaller #0 [ 1034.995693] page allocation failure: order:0 [ 1034.996015] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1035.007831] (null) [ 1035.011313] Call Trace: [ 1035.011333] dump_stack+0x142/0x197 [ 1035.011347] warn_alloc.cold+0x96/0x1af [ 1035.013390] syz-executor.5 cpuset= [ 1035.015347] ? zone_watermark_ok_safe+0x2b0/0x2b0 [ 1035.022463] syz2 [ 1035.025537] ? __alloc_pages_direct_compact+0xbc/0x380 [ 1035.029056] mems_allowed=0-1 [ 1035.036831] __alloc_pages_slowpath+0x23c6/0x2930 [ 1035.036845] ? save_trace+0x290/0x290 [ 1035.036858] ? warn_alloc+0xf0/0xf0 [ 1035.041279] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1035.050600] ? __might_sleep+0x93/0xb0 [ 1035.050611] __alloc_pages_nodemask+0x62c/0x7a0 [ 1035.052749] syz5 [ 1035.055401] ? lock_downgrade+0x740/0x740 [ 1035.058999] mems_allowed=0-1 [ 1035.062956] ? __alloc_pages_slowpath+0x2930/0x2930 [ 1035.062973] alloc_pages_current+0xec/0x1e0 [ 1035.062985] ion_page_pool_alloc+0x11f/0x1c0 [ 1035.066519] 2569 [ 1035.071335] ion_system_heap_allocate+0x138/0x910 [ 1035.071347] ? ion_system_heap_free+0x250/0x250 [ 1035.071360] ion_alloc+0x68c/0x860 [ 1035.073318] (null) [ 1035.078589] ? ion_dma_buf_release+0x50/0x50 [ 1035.086500] ? kasan_check_write+0x14/0x20 [ 1035.110046] syz-executor.3 cpuset= [ 1035.111464] ? _copy_from_user+0x99/0x110 [ 1035.115592] syz3 [ 1035.118683] ion_ioctl+0x105/0x217 [ 1035.123787] Node 0 [ 1035.128063] ? ion_alloc.cold+0x40/0x40 [ 1035.150033] mems_allowed=0-1 [ 1035.153977] ? ion_alloc.cold+0x40/0x40 [ 1035.160043] DMA32 free:18100kB min:36380kB low:45472kB high:54564kB active_anon:24492kB inactive_anon:752kB active_file:68kB inactive_file:60kB unevictable:0kB writepending:0kB present:3129332kB managed:2634320kB mlocked:0kB kernel_stack:7008kB pagetables:1612kB bounce:0kB free_pcp:228kB local_pcp:120kB free_cma:0kB [ 1035.161730] do_vfs_ioctl+0x7ae/0x1060 [ 1035.165843] lowmem_reserve[]: [ 1035.167821] ? selinux_file_mprotect+0x5d0/0x5d0 [ 1035.210043] 0 [ 1035.212917] ? lock_downgrade+0x740/0x740 [ 1035.216779] 0 [ 1035.219880] ? ioctl_preallocate+0x1c0/0x1c0 [ 1035.237463] ? __fget+0x237/0x370 [ 1035.240900] ? security_file_ioctl+0x7d/0xb0 [ 1035.245299] ? security_file_ioctl+0x89/0xb0 [ 1035.249690] SyS_ioctl+0x8f/0xc0 [ 1035.253060] ? do_vfs_ioctl+0x1060/0x1060 [ 1035.257196] do_syscall_64+0x1e8/0x640 [ 1035.260069] 0 [ 1035.261067] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1035.261073] 0 [ 1035.262876] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1035.267802] 0 [ 1035.269588] RIP: 0033:0x45af49 [ 1035.279713] RSP: 002b:00007fdadbc82c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1035.287415] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045af49 [ 1035.294665] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1035.301914] RBP: 000000000075c070 R08: 0000000000000000 R09: 0000000000000000 [ 1035.309163] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fdadbc836d4 [ 1035.316411] R13: 00000000004c41b2 R14: 00000000004da748 R15: 00000000ffffffff [ 1035.323688] CPU: 1 PID: 7539 Comm: syz-executor.3 Not tainted 4.14.162-syzkaller #0 [ 1035.331482] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1035.332776] warn_alloc_show_mem: 1 callbacks suppressed [ 1035.332779] Mem-Info: [ 1035.340824] Call Trace: [ 1035.340843] dump_stack+0x142/0x197 [ 1035.340856] warn_alloc.cold+0x96/0x1af [ 1035.340863] ? zone_watermark_ok_safe+0x2b0/0x2b0 [ 1035.340874] ? trace_hardirqs_on_caller+0x400/0x590 [ 1035.340884] ? call_timer_fn+0x670/0x670 [ 1035.340906] __alloc_pages_slowpath+0x23c6/0x2930 [ 1035.340928] ? warn_alloc+0xf0/0xf0 [ 1035.340945] ? __might_sleep+0x93/0xb0 [ 1035.340954] __alloc_pages_nodemask+0x62c/0x7a0 [ 1035.351659] active_anon:6154 inactive_anon:188 isolated_anon:0 [ 1035.351659] active_file:15 inactive_file:10 isolated_file:1 [ 1035.351659] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1035.351659] slab_reclaimable:12572 slab_unreclaimable:98408 [ 1035.351659] mapped:11 shmem:242 pagetables:417 bounce:0 [ 1035.351659] free:13697 free_pcp:61 free_cma:0 [ 1035.354897] ? lock_downgrade+0x740/0x740 [ 1035.358839] Node 0 active_anon:24504kB inactive_anon:752kB active_file:48kB inactive_file:32kB unevictable:0kB isolated(anon):0kB isolated(file):4kB mapped:28kB dirty:0kB writeback:0kB shmem:968kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 4096kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1035.363654] ? __alloc_pages_slowpath+0x2930/0x2930 [ 1035.363668] ? retint_kernel+0x2d/0x2d [ 1035.363680] alloc_pages_current+0xec/0x1e0 [ 1035.363692] ion_page_pool_alloc+0x11f/0x1c0 [ 1035.363700] ion_system_heap_allocate+0x138/0x910 [ 1035.363710] ? ion_system_heap_free+0x250/0x250 [ 1035.363723] ion_alloc+0x68c/0x860 [ 1035.363735] ? ion_dma_buf_release+0x50/0x50 [ 1035.363747] ? kasan_check_write+0x14/0x20 [ 1035.363750] ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb [ 1035.363758] ? _copy_from_user+0x99/0x110 [ 1035.363768] ion_ioctl+0x105/0x217 [ 1035.363777] ? ion_alloc.cold+0x40/0x40 [ 1035.363787] ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb [ 1035.363793] ? ion_alloc.cold+0x40/0x40 [ 1035.363803] do_vfs_ioctl+0x7ae/0x1060 [ 1035.363814] ? selinux_file_mprotect+0x5d0/0x5d0 [ 1035.363821] ? lock_downgrade+0x740/0x740 [ 1035.363823] ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb [ 1035.363831] ? ioctl_preallocate+0x1c0/0x1c0 [ 1035.363840] ? __fget+0x237/0x370 [ 1035.363854] ? security_file_ioctl+0x7d/0xb0 [ 1035.363862] ? security_file_ioctl+0x89/0xb0 [ 1035.363864] ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb [ 1035.363873] SyS_ioctl+0x8f/0xc0 [ 1035.363880] ? do_vfs_ioctl+0x1060/0x1060 [ 1035.363897] do_syscall_64+0x1e8/0x640 [ 1035.363905] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1035.363918] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1035.363925] RIP: 0033:0x45af49 [ 1035.363930] RSP: 002b:00007fdadbcc4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1035.363939] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045af49 [ 1035.363944] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1035.363949] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1035.363953] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fdadbcc56d4 [ 1035.363958] R13: 00000000004c41b2 R14: 00000000004da748 R15: 00000000ffffffff [ 1035.374747] CPU: 0 PID: 7530 Comm: syz-executor.2 Not tainted 4.14.162-syzkaller #0 [ 1035.377846] Node 0 [ 1035.381453] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1035.381456] Call Trace: [ 1035.381473] dump_stack+0x142/0x197 [ 1035.381485] warn_alloc.cold+0x96/0x1af [ 1035.381494] ? zone_watermark_ok_safe+0x2b0/0x2b0 [ 1035.410046] Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1035.422827] ? trace_hardirqs_on_caller+0x400/0x590 [ 1035.422837] ? call_timer_fn+0x670/0x670 [ 1035.422857] __alloc_pages_slowpath+0x23c6/0x2930 [ 1035.440067] lowmem_reserve[]: [ 1035.454240] ? warn_alloc+0xf0/0xf0 [ 1035.454258] ? __might_sleep+0x93/0xb0 [ 1035.490036] 0 [ 1035.493385] __alloc_pages_nodemask+0x62c/0x7a0 [ 1035.499852] 0 [ 1035.503984] ? lock_downgrade+0x740/0x740 [ 1035.503994] ? __alloc_pages_slowpath+0x2930/0x2930 [ 1035.504012] alloc_pages_current+0xec/0x1e0 [ 1035.550038] 0 [ 1035.553331] ion_page_pool_alloc+0x11f/0x1c0 [ 1035.557715] 0 [ 1035.564188] ion_system_heap_allocate+0x138/0x910 [ 1035.564204] ? ion_system_heap_free+0x250/0x250 [ 1035.564218] ion_alloc+0x68c/0x860 [ 1035.590035] 0 [ 1035.596419] ? ion_dma_buf_release+0x50/0x50 [ 1035.640475] ? kasan_check_write+0x14/0x20 [ 1035.642695] Node 1 [ 1035.652027] ? _copy_from_user+0x99/0x110 [ 1035.652039] ion_ioctl+0x105/0x217 [ 1035.652049] ? ion_alloc.cold+0x40/0x40 [ 1035.680050] Normal free:25984kB min:53508kB low:66884kB high:80260kB active_anon:112kB inactive_anon:0kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:0kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:128kB pagetables:56kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 1035.691608] ? ion_alloc.cold+0x40/0x40 [ 1035.691620] do_vfs_ioctl+0x7ae/0x1060 [ 1035.730034] lowmem_reserve[]: [ 1035.733359] ? selinux_file_mprotect+0x5d0/0x5d0 [ 1035.737657] 0 [ 1035.739440] ? lock_downgrade+0x740/0x740 [ 1035.739451] ? ioctl_preallocate+0x1c0/0x1c0 [ 1035.770037] 0 [ 1035.771215] ? __fget+0x237/0x370 [ 1035.775335] 0 [ 1035.778861] ? security_file_ioctl+0x7d/0xb0 [ 1035.810042] 0 [ 1035.813839] ? security_file_ioctl+0x89/0xb0 [ 1035.817716] 0 [ 1035.820808] SyS_ioctl+0x8f/0xc0 [ 1035.820817] ? do_vfs_ioctl+0x1060/0x1060 [ 1035.820829] do_syscall_64+0x1e8/0x640 [ 1035.853451] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1035.855235] Node 0 [ 1035.858599] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1035.878804] RIP: 0033:0x45af49 [ 1035.881986] RSP: 002b:00007f0d58822c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1035.889680] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045af49 [ 1035.896938] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1035.900050] DMA: [ 1035.904219] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1035.904226] 158*4kB [ 1035.906265] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f0d588236d4 [ 1035.906271] R13: 00000000004c41b2 R14: 00000000004da748 R15: 00000000ffffffff [ 1035.930381] CPU: 1 PID: 7543 Comm: syz-executor.5 Not tainted 4.14.162-syzkaller #0 [ 1035.931615] Node 1 active_anon:112kB inactive_anon:0kB active_file:0kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1035.938436] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1035.938440] Call Trace: [ 1035.938455] dump_stack+0x142/0x197 [ 1035.938467] warn_alloc.cold+0x96/0x1af [ 1035.938475] ? zone_watermark_ok_safe+0x2b0/0x2b0 [ 1035.938485] ? trace_hardirqs_on_caller+0x400/0x590 [ 1035.938494] ? call_timer_fn+0x670/0x670 [ 1035.938508] __alloc_pages_slowpath+0x23c6/0x2930 [ 1035.938528] ? warn_alloc+0xf0/0xf0 [ 1035.964898] Node 0 [ 1035.973736] ? __might_sleep+0x93/0xb0 [ 1035.973748] __alloc_pages_nodemask+0x62c/0x7a0 [ 1035.973756] ? lock_downgrade+0x740/0x740 [ 1035.973764] ? __alloc_pages_slowpath+0x2930/0x2930 [ 1035.973781] alloc_pages_current+0xec/0x1e0 [ 1035.973792] ion_page_pool_alloc+0x11f/0x1c0 [ 1035.973801] ion_system_heap_allocate+0x138/0x910 [ 1035.973811] ? ion_system_heap_free+0x250/0x250 [ 1035.973824] ion_alloc+0x68c/0x860 [ 1035.973840] ? ion_dma_buf_release+0x50/0x50 [ 1035.976715] DMA free:10360kB min:216kB low:268kB high:320kB active_anon:12kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1035.980038] ? kasan_check_write+0x14/0x20 [ 1035.980049] ? _copy_from_user+0x99/0x110 [ 1035.980059] ion_ioctl+0x105/0x217 [ 1035.980068] ? ion_alloc.cold+0x40/0x40 [ 1035.980080] ? ion_alloc.cold+0x40/0x40 [ 1035.980089] do_vfs_ioctl+0x7ae/0x1060 [ 1035.980100] ? selinux_file_mprotect+0x5d0/0x5d0 [ 1035.980109] ? lock_downgrade+0x740/0x740 [ 1035.980117] ? ioctl_preallocate+0x1c0/0x1c0 [ 1035.980130] ? __fget+0x237/0x370 [ 1035.984500] lowmem_reserve[]: [ 1035.988924] ? security_file_ioctl+0x7d/0xb0 [ 1035.988932] ? security_file_ioctl+0x89/0xb0 [ 1035.988944] SyS_ioctl+0x8f/0xc0 [ 1035.988952] ? do_vfs_ioctl+0x1060/0x1060 [ 1035.988963] do_syscall_64+0x1e8/0x640 [ 1035.988971] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1035.988986] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1035.988994] RIP: 0033:0x45af49 [ 1035.994565] 0 [ 1035.998053] RSP: 002b:00007f7f21a93c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1035.998062] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045af49 [ 1035.998067] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1035.998071] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1035.998075] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7f21a946d4 [ 1035.998080] R13: 00000000004c41b2 R14: 00000000004da748 R15: 00000000ffffffff [ 1036.004753] (UME) [ 1036.007914] 2569 [ 1036.013297] 4*8kB [ 1036.014355] 2569 [ 1036.019610] (UM) [ 1036.023317] 2569 [ 1036.037998] 6*16kB [ 1036.042692] 2569 [ 1036.056080] (UME) [ 1036.132779] 10*32kB [ 1036.205251] Node 0 2020/01/06 14:15:54 executed programs: 35 [ 1036.229141] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 1036.240727] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 1036.287069] DMA32 free:194800kB min:36380kB low:45472kB high:54564kB active_anon:24492kB inactive_anon:752kB active_file:564kB inactive_file:7452kB unevictable:0kB writepending:0kB present:3129332kB managed:2634320kB mlocked:0kB kernel_stack:7104kB pagetables:1612kB bounce:0kB free_pcp:500kB local_pcp:232kB free_cma:0kB [ 1036.316732] lowmem_reserve[]: 0 0 0 0 0 [ 1036.350795] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1036.405393] (UME) 7*64kB (UME) 5*128kB (UME) 2*256kB (ME) 1*512kB (E) 3*1024kB (UME) 2*2048kB (UE) 0*4096kB = 10360kB [ 1036.416480] lowmem_reserve[]: 0 0 0 0 0 [ 1036.440206] Node 1 Normal free:259776kB min:53508kB low:66884kB high:80260kB active_anon:112kB inactive_anon:0kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:0kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:128kB pagetables:56kB bounce:0kB free_pcp:24kB local_pcp:0kB free_cma:0kB [ 1036.447715] Node 0 [ 1036.531842] lowmem_reserve[]: 0 0 0 0 0 [ 1036.535887] Node 0 DMA: 158*4kB (UME) 4*8kB (UM) 6*16kB (UME) 10*32kB (UME) 7*64kB (UME) 5*128kB (UME) 2*256kB (ME) 1*512kB (E) 3*1024kB (UME) 2*2048kB (UE) 0*4096kB = 10360kB [ 1036.565616] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 1036.588741] DMA32: 266*4kB (UME) 191*8kB (UME) 149*16kB (UE) 196*32kB (UME) 2*64kB (M) 269*128kB (UE) 40*256kB (UE) 25*512kB (UE) 0*1024kB 0*2048kB 0*4096kB = 68848kB [ 1036.608457] Node 0 DMA32: 277*4kB (UME) 184*8kB (UME) 152*16kB (UE) 198*32kB (UME) 14*64kB (UM) 86*128kB (UE) 40*256kB (UE) 25*512kB (UE) 0*1024kB 0*2048kB 0*4096kB = 46292kB [ 1036.666938] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1036.668758] Node 0 [ 1036.694381] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1036.710444] Node 1 Normal: 1024*4kB (U) 60*8kB (U) 56*16kB (U) 51*32kB (UME) 2344*64kB (UM) 222*128kB (U) 31*256kB (U) 36*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 211904kB [ 1036.710680] Normal: [ 1036.746716] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 1036.771946] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1036.777472] 0*4kB [ 1036.781559] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 1036.789945] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1036.797820] 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1036.800446] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1036.813352] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1036.828764] Node 1 Normal: 1113*4kB (U) 140*8kB (U) 499*16kB (U) 409*32kB (UME) 838*64kB (UM) 223*128kB (U) 31*256kB (U) 36*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 135188kB [ 1036.830370] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1036.856439] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 1036.862988] 8021q: adding VLAN 0 to HW filter on device team0 [ 1036.876374] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 1036.886394] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1036.899420] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1036.900684] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1036.914398] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1036.933969] 2618 total pagecache pages [ 1036.937898] 0 pages in swap cache [ 1036.942161] bridge0: port 1(bridge_slave_0) entered blocking state [ 1036.946601] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1036.948513] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1036.968253] Swap cache stats: add 0, delete 0, find 0/0 [ 1036.973740] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1036.973749] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1037.002297] Free swap = 0kB [ 1037.006664] Total swap = 0kB [ 1037.009693] 1965979 pages RAM [ 1037.022460] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 1037.036995] 0 pages HighMem/MovableOnly [ 1037.041677] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1037.044753] 2618 total pagecache pages [ 1037.048766] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1037.060872] 335874 pages reserved [ 1037.064333] 0 pages cma reserved [ 1037.075093] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1037.081186] 0 pages in swap cache [ 1037.082833] bridge0: port 2(bridge_slave_1) entered blocking state [ 1037.088090] Swap cache stats: add 0, delete 0, find 0/0 [ 1037.092237] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1037.116330] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 1037.123675] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1037.139421] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 1037.146750] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1037.163298] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 1037.185403] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1037.191112] Free swap = 0kB [ 1037.201223] Total swap = 0kB [ 1037.204281] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1037.206854] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 1037.228075] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1037.235592] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1037.245586] 1965979 pages RAM [ 1037.262313] 0 pages HighMem/MovableOnly [ 1037.270391] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1037.287267] 335874 pages reserved [ 1037.294864] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 1037.297409] 0 pages cma reserved [ 1037.309380] Out of memory: Kill process 7176 (syz-execprog) score 1 or sacrifice child [ 1037.324226] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1037.342400] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1037.363901] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 1037.370268] Killed process 7196 (syz-executor.4) total-vm:37644kB, anon-rss:60kB, file-rss:0kB, shmem-rss:0kB [ 1037.436206] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1037.488839] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1037.506853] warn_alloc_show_mem: 3 callbacks suppressed [ 1037.506856] Mem-Info: [ 1037.557177] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 1037.564823] active_anon:6580 inactive_anon:188 isolated_anon:0 [ 1037.564823] active_file:822 inactive_file:1765 isolated_file:0 [ 1037.564823] unevictable:0 dirty:88 writeback:0 unstable:0 [ 1037.564823] slab_reclaimable:12645 slab_unreclaimable:98714 [ 1037.564823] mapped:1619 shmem:242 pagetables:537 bounce:0 [ 1037.564823] free:47674 free_pcp:568 free_cma:0 [ 1037.610639] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1037.624006] Node 0 active_anon:25804kB inactive_anon:752kB active_file:3388kB inactive_file:6956kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:6476kB dirty:248kB writeback:0kB shmem:968kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 4096kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1037.814885] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 1037.835578] Node 1 active_anon:916kB inactive_anon:0kB active_file:0kB inactive_file:104kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:104kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1037.871891] chnl_net:caif_netlink_parms(): no params data found [ 1037.918010] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 1037.936420] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1037.944405] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1037.983888] syz-executor.0: page allocation failure: order:5, mode:0x1084020(GFP_ATOMIC|__GFP_COMP), nodemask=(null) [ 1037.994793] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 1038.000289] CPU: 1 PID: 7553 Comm: syz-executor.0 Not tainted 4.14.162-syzkaller #0 [ 1038.008079] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1038.017433] Call Trace: [ 1038.020027] dump_stack+0x142/0x197 [ 1038.023662] warn_alloc.cold+0x96/0x1af [ 1038.027639] ? zone_watermark_ok_safe+0x2b0/0x2b0 [ 1038.032483] ? wakeup_kswapd+0x19b/0x4e0 [ 1038.036545] ? wake_all_kswapds+0x189/0x3c0 [ 1038.040870] ? lock_downgrade+0x740/0x740 [ 1038.045036] __alloc_pages_slowpath+0x23c6/0x2930 [ 1038.049897] ? warn_alloc+0xf0/0xf0 [ 1038.053534] ? trace_hardirqs_on+0x10/0x10 [ 1038.057774] __alloc_pages_nodemask+0x62c/0x7a0 [ 1038.062450] ? __alloc_pages_slowpath+0x2930/0x2930 [ 1038.067478] ? ____cache_alloc_node+0x1be/0x1d0 [ 1038.070152] Node 0 DMA free:10484kB min:216kB low:268kB high:320kB active_anon:12kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1038.072158] cache_grow_begin+0x80/0x400 [ 1038.072169] ? __cpuset_node_allowed+0xff/0x450 [ 1038.107114] fallback_alloc+0x1fd/0x2c0 [ 1038.111098] ____cache_alloc_node+0x1be/0x1d0 [ 1038.115599] __kmalloc+0x21a/0x7a0 [ 1038.119143] ? kmem_cache_alloc_trace+0x623/0x790 [ 1038.123988] ? lockdep_init_map+0x9/0x10 [ 1038.128119] ? batadv_hash_new+0xae/0x280 [ 1038.132274] batadv_hash_new+0xae/0x280 [ 1038.136288] ? batadv_v_ogm_packet_recv+0xc80/0xc80 [ 1038.141309] batadv_originator_init+0x5e/0x2b0 [ 1038.145890] batadv_mesh_init+0x494/0x670 [ 1038.150076] batadv_softif_init_late+0xa33/0xca0 [ 1038.154838] ? batadv_interface_stats+0x190/0x190 [ 1038.159683] ? __lockdep_init_map+0x10c/0x570 [ 1038.164180] ? batadv_interface_stats+0x190/0x190 [ 1038.169027] register_netdevice+0x28e/0xca0 [ 1038.173348] ? netdev_change_features+0x80/0x80 [ 1038.178139] ? rtnl_create_link+0x12c/0x850 [ 1038.182531] ? __netlink_ns_capable+0xe2/0x130 [ 1038.187122] rtnl_newlink+0x1441/0x1700 [ 1038.191102] ? rtnl_newlink+0x3f5/0x1700 [ 1038.195177] ? rtnl_link_unregister+0x200/0x200 [ 1038.199850] ? finish_task_switch+0x178/0x650 [ 1038.204346] ? finish_task_switch+0x14d/0x650 [ 1038.208856] ? lock_downgrade+0x740/0x740 [ 1038.213046] ? rtnl_link_unregister+0x200/0x200 [ 1038.217719] rtnetlink_rcv_msg+0x3da/0xb70 [ 1038.221967] ? rtnl_bridge_getlink+0x7a0/0x7a0 [ 1038.226551] ? netlink_deliver_tap+0x93/0x8f0 [ 1038.231057] netlink_rcv_skb+0x14f/0x3c0 [ 1038.235122] ? rtnl_bridge_getlink+0x7a0/0x7a0 [ 1038.239711] ? lock_downgrade+0x740/0x740 [ 1038.243870] ? netlink_ack+0x9a0/0x9a0 [ 1038.247763] ? netlink_deliver_tap+0xba/0x8f0 [ 1038.252288] rtnetlink_rcv+0x1d/0x30 [ 1038.256001] netlink_unicast+0x44d/0x650 [ 1038.260064] ? netlink_attachskb+0x6a0/0x6a0 [ 1038.264470] ? security_netlink_send+0x81/0xb0 [ 1038.269052] netlink_sendmsg+0x7c4/0xc60 [ 1038.273118] ? netlink_unicast+0x650/0x650 [ 1038.277359] ? security_socket_sendmsg+0x89/0xb0 [ 1038.282116] ? netlink_unicast+0x650/0x650 [ 1038.286375] sock_sendmsg+0xce/0x110 [ 1038.290088] SYSC_sendto+0x206/0x310 [ 1038.293811] ? SYSC_connect+0x2d0/0x2d0 [ 1038.293839] lowmem_reserve[]: 0 2569 [ 1038.297788] ? finish_task_switch+0x178/0x650 [ 1038.297796] ? finish_task_switch+0x14d/0x650 [ 1038.310502] ? switch_mm_irqs_off+0x5e1/0xec0 [ 1038.315004] ? __schedule+0x7c0/0x1cd0 [ 1038.318895] ? firmware_map_remove+0x196/0x196 [ 1038.323486] SyS_sendto+0x40/0x50 [ 1038.326944] ? SyS_getpeername+0x30/0x30 [ 1038.331009] do_syscall_64+0x1e8/0x640 [ 1038.333751] 2569 [ 1038.334886] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1038.334891] 2569 [ 1038.336941] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1038.349001] RIP: 0033:0x414c43 [ 1038.352190] RSP: 002b:00007ffdef7624a8 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1038.359903] RAX: ffffffffffffffda RBX: 0000000000a72200 RCX: 0000000000414c43 [ 1038.367180] RDX: 000000000000003c RSI: 0000000000a72250 RDI: 0000000000000003 [ 1038.374453] RBP: 0000000000000000 R08: 00007ffdef7624b0 R09: 000000000000000c [ 1038.381818] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1038.389190] R13: 0000000000000000 R14: 0000000000a72250 R15: 0000000000000003 [ 1038.393955] 2569 [ 1038.398521] Node 0 DMA32 free:44756kB min:36380kB low:45472kB high:54564kB active_anon:32492kB inactive_anon:752kB active_file:3696kB inactive_file:7080kB unevictable:0kB writepending:352kB present:3129332kB managed:2634320kB mlocked:0kB kernel_stack:8032kB pagetables:3248kB bounce:0kB free_pcp:1244kB local_pcp:536kB free_cma:0kB [ 1038.750088] lowmem_reserve[]: 0 0 0 0 0 [ 1038.752862] syz-executor.4: page allocation failure: order:4 [ 1038.754135] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1038.759935] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1038.791257] syz-executor.5: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1038.814401] syz-executor.4: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1038.827077] syz-executor.5: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1038.876873] syz-executor.5 cpuset=syz5 mems_allowed=0-1 [ 1038.889944] syz-executor.5 cpuset=syz5 mems_allowed=0-1 [ 1038.901687] syz-executor.4 cpuset=syz4 mems_allowed=0-1 [ 1038.918700] CPU: 0 PID: 7625 Comm: syz-executor.5 Not tainted 4.14.162-syzkaller #0 [ 1038.926516] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1038.935954] Call Trace: [ 1038.938542] dump_stack+0x142/0x197 [ 1038.942164] warn_alloc.cold+0x96/0x1af [ 1038.946137] ? zone_watermark_ok_safe+0x2b0/0x2b0 [ 1038.950989] ? __alloc_pages_direct_compact+0xbc/0x380 [ 1038.956269] __alloc_pages_slowpath+0x23c6/0x2930 [ 1038.961119] ? save_trace+0x290/0x290 [ 1038.964928] ? warn_alloc+0xf0/0xf0 [ 1038.968567] ? __might_sleep+0x93/0xb0 [ 1038.972457] __alloc_pages_nodemask+0x62c/0x7a0 [ 1038.977123] ? lock_downgrade+0x740/0x740 [ 1038.981267] ? __alloc_pages_slowpath+0x2930/0x2930 [ 1038.986293] alloc_pages_current+0xec/0x1e0 [ 1038.988451] (null) [ 1038.990619] ion_page_pool_alloc+0x11f/0x1c0 [ 1038.990628] ion_system_heap_allocate+0x138/0x910 [ 1038.990636] ? ion_alloc+0x19b/0x860 [ 1038.990646] ? rcu_read_lock_sched_held+0x110/0x130 [ 1039.006978] syz-executor.4 cpuset= [ 1039.010714] ? ion_system_heap_free+0x250/0x250 [ 1039.010729] ion_alloc+0x222/0x860 [ 1039.010742] ? ion_dma_buf_release+0x50/0x50 [ 1039.026866] ? kasan_check_write+0x14/0x20 [ 1039.031134] ? _copy_from_user+0x99/0x110 [ 1039.032845] syz4 [ 1039.035282] ion_ioctl+0x105/0x217 [ 1039.035317] mems_allowed=0-1 [ 1039.037252] ? ion_alloc.cold+0x40/0x40 [ 1039.037264] ? ion_alloc.cold+0x40/0x40 [ 1039.037275] do_vfs_ioctl+0x7ae/0x1060 [ 1039.055711] ? selinux_file_mprotect+0x5d0/0x5d0 [ 1039.060468] ? lock_downgrade+0x740/0x740 [ 1039.064617] ? ioctl_preallocate+0x1c0/0x1c0 [ 1039.069130] ? __fget+0x237/0x370 [ 1039.072596] ? security_file_ioctl+0x7d/0xb0 [ 1039.077057] ? security_file_ioctl+0x89/0xb0 [ 1039.081470] SyS_ioctl+0x8f/0xc0 [ 1039.084833] ? do_vfs_ioctl+0x1060/0x1060 [ 1039.088985] do_syscall_64+0x1e8/0x640 [ 1039.092871] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1039.097715] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1039.102983] RIP: 0033:0x45af49 [ 1039.106160] RSP: 002b:00007f7f21a0fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1039.113868] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045af49 [ 1039.121134] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1039.128399] RBP: 000000000075c1c0 R08: 0000000000000000 R09: 0000000000000000 [ 1039.135666] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7f21a106d4 [ 1039.142934] R13: 00000000004c41b2 R14: 00000000004da748 R15: 00000000ffffffff [ 1039.150212] CPU: 1 PID: 7560 Comm: syz-executor.4 Not tainted 4.14.162-syzkaller #0 [ 1039.158013] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1039.167365] Call Trace: [ 1039.169959] dump_stack+0x142/0x197 [ 1039.173601] warn_alloc.cold+0x96/0x1af [ 1039.177577] ? zone_watermark_ok_safe+0x2b0/0x2b0 [ 1039.182409] ? __alloc_pages_direct_compact+0xbc/0x380 [ 1039.187678] __alloc_pages_slowpath+0x23c6/0x2930 [ 1039.192507] ? save_trace+0x290/0x290 [ 1039.196293] ? warn_alloc+0xf0/0xf0 [ 1039.199925] ? __might_sleep+0x93/0xb0 [ 1039.203796] __alloc_pages_nodemask+0x62c/0x7a0 [ 1039.208448] ? lock_downgrade+0x740/0x740 [ 1039.212593] ? __alloc_pages_slowpath+0x2930/0x2930 [ 1039.217597] alloc_pages_current+0xec/0x1e0 [ 1039.221903] ion_page_pool_alloc+0x11f/0x1c0 [ 1039.226302] ion_system_heap_allocate+0x138/0x910 [ 1039.231127] ? ion_alloc+0x19b/0x860 [ 1039.234843] ? rcu_read_lock_sched_held+0x110/0x130 [ 1039.239859] ? ion_system_heap_free+0x250/0x250 [ 1039.244532] ion_alloc+0x222/0x860 [ 1039.248075] ? ion_dma_buf_release+0x50/0x50 [ 1039.252473] ? kasan_check_write+0x14/0x20 [ 1039.256693] ? _copy_from_user+0x99/0x110 [ 1039.260827] ion_ioctl+0x105/0x217 [ 1039.264367] ? ion_alloc.cold+0x40/0x40 [ 1039.268343] ? ion_alloc.cold+0x40/0x40 [ 1039.272306] do_vfs_ioctl+0x7ae/0x1060 [ 1039.276184] ? selinux_file_mprotect+0x5d0/0x5d0 [ 1039.280937] ? lock_downgrade+0x740/0x740 [ 1039.285069] ? ioctl_preallocate+0x1c0/0x1c0 [ 1039.289460] ? __fget+0x237/0x370 [ 1039.292900] ? security_file_ioctl+0x7d/0xb0 [ 1039.297373] ? security_file_ioctl+0x89/0xb0 [ 1039.301777] SyS_ioctl+0x8f/0xc0 [ 1039.305138] ? do_vfs_ioctl+0x1060/0x1060 [ 1039.309285] do_syscall_64+0x1e8/0x640 [ 1039.313154] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1039.317981] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1039.323155] RIP: 0033:0x45af49 [ 1039.326327] RSP: 002b:00007f361d0eac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1039.334019] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045af49 [ 1039.341271] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1039.348524] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1039.355776] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f361d0eb6d4 [ 1039.363042] R13: 00000000004c41b2 R14: 00000000004da748 R15: 00000000ffffffff [ 1039.382809] CPU: 0 PID: 7569 Comm: syz-executor.5 Not tainted 4.14.162-syzkaller #0 [ 1039.390645] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1039.400008] Call Trace: [ 1039.402607] dump_stack+0x142/0x197 [ 1039.406243] warn_alloc.cold+0x96/0x1af [ 1039.410227] ? zone_watermark_ok_safe+0x2b0/0x2b0 [ 1039.415083] ? __alloc_pages_direct_compact+0xbc/0x380 [ 1039.420365] __alloc_pages_slowpath+0x23c6/0x2930 [ 1039.425214] ? save_trace+0x290/0x290 [ 1039.429024] ? warn_alloc+0xf0/0xf0 [ 1039.432669] ? __might_sleep+0x93/0xb0 [ 1039.436567] __alloc_pages_nodemask+0x62c/0x7a0 [ 1039.441262] ? lock_downgrade+0x740/0x740 [ 1039.445539] ? __alloc_pages_slowpath+0x2930/0x2930 [ 1039.450577] ? save_trace+0x290/0x290 [ 1039.454407] alloc_pages_current+0xec/0x1e0 [ 1039.458734] ion_page_pool_alloc+0x11f/0x1c0 [ 1039.463142] ion_system_heap_allocate+0x138/0x910 [ 1039.467996] ? ion_alloc+0x19b/0x860 [ 1039.471717] ? rcu_read_lock_sched_held+0x110/0x130 [ 1039.476738] ? ion_system_heap_free+0x250/0x250 [ 1039.481420] ion_alloc+0x222/0x860 [ 1039.484977] ? ion_dma_buf_release+0x50/0x50 [ 1039.489391] ? kasan_check_write+0x14/0x20 [ 1039.493634] ? _copy_from_user+0x99/0x110 [ 1039.497801] ion_ioctl+0x105/0x217 [ 1039.501346] ? ion_alloc.cold+0x40/0x40 [ 1039.505328] ? ion_alloc.cold+0x40/0x40 [ 1039.509310] do_vfs_ioctl+0x7ae/0x1060 [ 1039.513213] ? selinux_file_mprotect+0x5d0/0x5d0 [ 1039.517979] ? lock_downgrade+0x740/0x740 [ 1039.522134] ? ioctl_preallocate+0x1c0/0x1c0 [ 1039.526561] ? __fget+0x237/0x370 [ 1039.530031] ? security_file_ioctl+0x7d/0xb0 [ 1039.534449] ? security_file_ioctl+0x89/0xb0 [ 1039.538880] SyS_ioctl+0x8f/0xc0 [ 1039.542255] ? do_vfs_ioctl+0x1060/0x1060 [ 1039.546408] do_syscall_64+0x1e8/0x640 [ 1039.550300] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1039.555151] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1039.560356] RIP: 0033:0x45af49 [ 1039.563552] RSP: 002b:00007f7f21a93c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1039.571267] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045af49 [ 1039.578584] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1039.585853] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1039.593123] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7f21a946d4 [ 1039.600391] R13: 00000000004c41b2 R14: 00000000004da748 R15: 00000000ffffffff [ 1039.607701] CPU: 1 PID: 7562 Comm: syz-executor.4 Not tainted 4.14.162-syzkaller #0 [ 1039.615516] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1039.623820] lowmem_reserve[]: [ 1039.624876] Call Trace: [ 1039.624893] dump_stack+0x142/0x197 [ 1039.624906] warn_alloc.cold+0x96/0x1af [ 1039.628065] 0 [ 1039.630654] ? zone_watermark_ok_safe+0x2b0/0x2b0 [ 1039.630669] ? __alloc_pages_direct_compact+0xbc/0x380 [ 1039.630679] __alloc_pages_slowpath+0x23c6/0x2930 [ 1039.630694] ? save_trace+0x290/0x290 [ 1039.630707] ? warn_alloc+0xf0/0xf0 [ 1039.634351] 0 [ 1039.638298] ? __might_sleep+0x93/0xb0 [ 1039.638309] __alloc_pages_nodemask+0x62c/0x7a0 [ 1039.640227] 0 [ 1039.644933] ? lock_downgrade+0x740/0x740 [ 1039.644943] ? __alloc_pages_slowpath+0x2930/0x2930 [ 1039.644961] alloc_pages_current+0xec/0x1e0 [ 1039.650278] 0 [ 1039.655073] ion_page_pool_alloc+0x11f/0x1c0 [ 1039.655080] ion_system_heap_allocate+0x138/0x910 [ 1039.655089] ? ion_alloc+0x19b/0x860 [ 1039.659107] 0 [ 1039.662845] ? rcu_read_lock_sched_held+0x110/0x130 [ 1039.662855] ? ion_system_heap_free+0x250/0x250 [ 1039.662867] ion_alloc+0x222/0x860 [ 1039.662881] ? ion_dma_buf_release+0x50/0x50 [ 1039.662894] ? kasan_check_write+0x14/0x20 [ 1039.662905] ? _copy_from_user+0x99/0x110 [ 1039.662914] ion_ioctl+0x105/0x217 [ 1039.668731] ? ion_alloc.cold+0x40/0x40 [ 1039.668745] ? ion_alloc.cold+0x40/0x40 [ 1039.668758] do_vfs_ioctl+0x7ae/0x1060 [ 1039.674241] Node 1 [ 1039.675299] ? selinux_file_mprotect+0x5d0/0x5d0 [ 1039.675310] ? lock_downgrade+0x740/0x740 [ 1039.675323] ? ioctl_preallocate+0x1c0/0x1c0 [ 1039.679646] Normal free:161756kB min:53508kB low:66884kB high:80260kB active_anon:832kB inactive_anon:0kB active_file:4kB inactive_file:252kB unevictable:0kB writepending:224kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:416kB pagetables:336kB bounce:0kB free_pcp:468kB local_pcp:104kB free_cma:0kB [ 1039.684601] ? __fget+0x237/0x370 [ 1039.684617] ? security_file_ioctl+0x7d/0xb0 [ 1039.684624] ? security_file_ioctl+0x89/0xb0 [ 1039.684646] SyS_ioctl+0x8f/0xc0 [ 1039.684654] ? do_vfs_ioctl+0x1060/0x1060 [ 1039.684666] do_syscall_64+0x1e8/0x640 [ 1039.684672] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1039.684686] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1039.689258] lowmem_reserve[]: [ 1039.690978] RIP: 0033:0x45af49 [ 1039.690982] RSP: 002b:00007f361d0a8c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1039.690991] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045af49 [ 1039.690996] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1039.691000] RBP: 000000000075c070 R08: 0000000000000000 R09: 0000000000000000 [ 1039.691004] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f361d0a96d4 [ 1039.691009] R13: 00000000004c41b2 R14: 00000000004da748 R15: 00000000ffffffff [ 1039.713507] warn_alloc_show_mem: 1 callbacks suppressed [ 1039.713510] Mem-Info: [ 1039.721385] 0 [ 1039.742154] active_anon:7827 inactive_anon:187 isolated_anon:0 [ 1039.742154] active_file:1156 inactive_file:1640 isolated_file:0 [ 1039.742154] unevictable:0 dirty:143 writeback:25 unstable:0 [ 1039.742154] slab_reclaimable:12800 slab_unreclaimable:105876 [ 1039.742154] mapped:1655 shmem:242 pagetables:749 bounce:0 [ 1039.742154] free:54700 free_pcp:453 free_cma:0 [ 1039.745915] 0 [ 1039.748538] Node 0 active_anon:30476kB inactive_anon:748kB active_file:4620kB inactive_file:6308kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:6620kB dirty:348kB writeback:100kB shmem:968kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 4096kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1039.749710] 0 [ 1039.771886] Node 1 active_anon:832kB inactive_anon:0kB active_file:4kB inactive_file:252kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:224kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1039.792694] 0 [ 1039.825972] Node 0 [ 1039.829349] 0 [ 1039.839016] DMA free:11040kB min:216kB low:268kB high:320kB active_anon:12kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1039.849809] lowmem_reserve[]: [ 1039.855011] Node 0 [ 1039.881793] 0 [ 1039.885614] DMA: [ 1039.894836] 2569 [ 1040.001504] 69*4kB [ 1040.017685] ODEBUG: assert_init not available (active state 0) object type: timer_list hint: (null) [ 1040.034817] ------------[ cut here ]------------ [ 1040.039705] WARNING: CPU: 1 PID: 7553 at lib/debugobjects.c:287 debug_print_object.cold+0xa7/0xdb [ 1040.049020] Kernel panic - not syncing: panic_on_warn set ... [ 1040.049020] [ 1040.056397] CPU: 1 PID: 7553 Comm: syz-executor.0 Not tainted 4.14.162-syzkaller #0 [ 1040.060124] (UME) [ 1040.064196] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1040.064199] Call Trace: [ 1040.064216] dump_stack+0x142/0x197 [ 1040.064228] panic+0x1f9/0x42d [ 1040.082952] 3*8kB [ 1040.085513] ? add_taint.cold+0x16/0x16 [ 1040.085525] ? debug_print_object.cold+0xa7/0xdb [ 1040.096504] ? debug_print_object.cold+0xa7/0xdb [ 1040.098590] (M) [ 1040.101387] __warn.cold+0x2f/0x2f [ 1040.101473] ? ist_end_non_atomic+0x10/0x10 [ 1040.101484] ? debug_print_object.cold+0xa7/0xdb [ 1040.115444] 4*16kB (ME) [ 1040.116074] report_bug+0x216/0x254 [ 1040.116087] do_error_trap+0x1bb/0x310 [ 1040.126417] ? math_error+0x360/0x360 [ 1040.130232] ? vprintk_emit+0x171/0x600 [ 1040.132056] 10*32kB [ 1040.134391] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1040.134415] do_invalid_op+0x1b/0x20 [ 1040.145894] invalid_op+0x1b/0x40 [ 1040.148429] (UME) [ 1040.149352] RIP: 0010:debug_print_object.cold+0xa7/0xdb [ 1040.149359] 8*64kB [ 1040.151492] RSP: 0018:ffff888166b87148 EFLAGS: 00010086 [ 1040.151501] RAX: 0000000000000061 RBX: 0000000000000005 RCX: 0000000000000000 [ 1040.151505] RDX: 0000000000000000 RSI: ffffffff87049200 RDI: ffffed102cd70e1f [ 1040.151509] RBP: ffff888166b87170 R08: 0000000000000061 R09: 0000000000000001 [ 1040.151514] R10: 0000000000000000 R11: ffff88808c7602c0 R12: ffffffff86cbf760 [ 1040.151518] R13: 0000000000000000 R14: 0000000000000000 R15: ffff88809355e4b0 [ 1040.151535] ? debug_print_object.cold+0xa7/0xdb [ 1040.151545] debug_object_assert_init+0x22f/0x300 [ 1040.151554] ? debug_object_init_on_stack+0x20/0x20 [ 1040.151562] ? batadv_v_mesh_free+0x16/0x20 [ 1040.151569] ? batadv_mesh_free+0x6d/0x160 [ 1040.151582] ? trace_hardirqs_on+0x10/0x10 [ 1040.182261] (UME) [ 1040.186476] del_timer+0x67/0xf0 [ 1040.186486] ? trigger_dyntick_cpu.isra.0+0x190/0x190 [ 1040.235336] 7*128kB [ 1040.239343] ? batadv_tvlv_handler_get+0x1c5/0x2d0 [ 1040.239356] try_to_grab_pending+0x263/0x620 [ 1040.251301] __cancel_work_timer+0xb4/0x480 [ 1040.255637] ? cancel_delayed_work+0x20/0x20 [ 1040.260146] ? batadv_tvlv_handler_get+0x1ec/0x2d0 [ 1040.265090] ? trace_hardirqs_on+0xd/0x10 [ 1040.269237] (UME) 3*256kB [ 1040.269253] cancel_delayed_work_sync+0x1b/0x20 [ 1040.269263] batadv_nc_mesh_free+0x46/0x11e [ 1040.281095] batadv_mesh_free+0x75/0x160 [ 1040.283072] (UME) [ 1040.285270] batadv_mesh_init+0x59a/0x670 [ 1040.285281] batadv_softif_init_late+0xa33/0xca0 [ 1040.285290] ? batadv_interface_stats+0x190/0x190 [ 1040.299544] 1*512kB [ 1040.302128] ? __lockdep_init_map+0x10c/0x570 [ 1040.302140] ? batadv_interface_stats+0x190/0x190 [ 1040.302151] register_netdevice+0x28e/0xca0 [ 1040.302161] ? netdev_change_features+0x80/0x80 [ 1040.302169] ? rtnl_create_link+0x12c/0x850 [ 1040.302177] ? __netlink_ns_capable+0xe2/0x130 [ 1040.302187] rtnl_newlink+0x1441/0x1700 [ 1040.302193] ? rtnl_newlink+0x3f5/0x1700 [ 1040.302208] ? rtnl_link_unregister+0x200/0x200 [ 1040.315539] (E) [ 1040.318551] ? finish_task_switch+0x178/0x650 [ 1040.318558] ? finish_task_switch+0x14d/0x650 [ 1040.318577] ? lock_downgrade+0x740/0x740 [ 1040.353802] 3*1024kB [ 1040.357875] ? rtnl_link_unregister+0x200/0x200 [ 1040.373690] rtnetlink_rcv_msg+0x3da/0xb70 [ 1040.377940] ? rtnl_bridge_getlink+0x7a0/0x7a0 [ 1040.382538] ? netlink_deliver_tap+0x93/0x8f0 [ 1040.387047] netlink_rcv_skb+0x14f/0x3c0 [ 1040.391208] ? rtnl_bridge_getlink+0x7a0/0x7a0 [ 1040.395806] ? lock_downgrade+0x740/0x740 [ 1040.398306] (UME) [ 1040.399956] ? netlink_ack+0x9a0/0x9a0 [ 1040.399969] ? netlink_deliver_tap+0xba/0x8f0 [ 1040.410513] rtnetlink_rcv+0x1d/0x30 [ 1040.414351] netlink_unicast+0x44d/0x650 [ 1040.418426] ? netlink_attachskb+0x6a0/0x6a0 [ 1040.419608] 2*2048kB [ 1040.422838] ? security_netlink_send+0x81/0xb0 [ 1040.422847] netlink_sendmsg+0x7c4/0xc60 [ 1040.422860] ? netlink_unicast+0x650/0x650 [ 1040.422869] ? security_socket_sendmsg+0x89/0xb0 [ 1040.422877] ? netlink_unicast+0x650/0x650 [ 1040.422885] sock_sendmsg+0xce/0x110 [ 1040.422892] SYSC_sendto+0x206/0x310 [ 1040.422900] ? SYSC_connect+0x2d0/0x2d0 [ 1040.422917] ? finish_task_switch+0x178/0x650 [ 1040.439595] (UE) [ 1040.443244] ? finish_task_switch+0x14d/0x650 [ 1040.443253] ? switch_mm_irqs_off+0x5e1/0xec0 [ 1040.443269] ? __schedule+0x7c0/0x1cd0 [ 1040.443282] ? firmware_map_remove+0x196/0x196 [ 1040.443293] SyS_sendto+0x40/0x50 [ 1040.443300] ? SyS_getpeername+0x30/0x30 [ 1040.460595] 0*4096kB [ 1040.463415] do_syscall_64+0x1e8/0x640 [ 1040.463424] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1040.479648] = 10540kB [ 1040.482951] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1040.482959] RIP: 0033:0x414c43 [ 1040.482963] RSP: 002b:00007ffdef7624a8 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1040.482972] RAX: ffffffffffffffda RBX: 0000000000a72200 RCX: 0000000000414c43 [ 1040.482976] RDX: 000000000000003c RSI: 0000000000a72250 RDI: 0000000000000003 [ 1040.482980] RBP: 0000000000000000 R08: 00007ffdef7624b0 R09: 000000000000000c [ 1040.482984] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1040.482988] R13: 0000000000000000 R14: 0000000000a72250 R15: 0000000000000003 [ 1040.487495] Kernel Offset: disabled [ 1040.561893] Rebooting in 86400 seconds..