:0kB mapped:208900kB dirty:0kB writeback:0kB shmem:27712kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 14336kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 339.222611] Node 1 active_anon:720kB inactive_anon:12kB active_file:52kB inactive_file:52kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:20kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 339.245018] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 339.269083] Node 0 DMA free:10972kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 339.273532] syz-executor.5 cpuset= [ 339.300639] syz-executor.3: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 339.312493] / mems_allowed=0-1 [ 339.319410] CPU: 1 PID: 14902 Comm: syz-executor.5 Not tainted 4.14.232-syzkaller #0 [ 339.320925] lowmem_reserve[]: [ 339.327565] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 339.327581] 0 [ 339.330672] Call Trace: [ 339.330696] dump_stack+0x1b2/0x281 [ 339.330709] warn_alloc.cold+0x96/0x1cc [ 339.330721] ? zone_watermark_ok_safe+0x220/0x220 [ 339.330730] ? usleep_range+0x130/0x130 [ 339.330739] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 339.330751] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 339.330760] ? run_timer_softirq+0x5a0/0x5a0 [ 339.330775] __alloc_pages_nodemask+0x2127/0x2720 [ 339.330791] ? lock_acquire+0x170/0x3f0 [ 339.330805] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 339.342940] syz-executor.3 cpuset= [ 339.344542] ? ion_page_pool_alloc+0x9e/0x1b0 [ 339.348143] / [ 339.352131] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 339.357031] 2717 [ 339.360931] ? retint_kernel+0x2d/0x2d [ 339.360952] alloc_pages_current+0x155/0x260 [ 339.360966] ion_page_pool_alloc+0x118/0x1b0 [ 339.360975] ion_system_heap_allocate+0x133/0x8c0 [ 339.360984] ? ion_alloc+0x187/0x810 [ 339.360994] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 339.361003] ? ion_system_contig_heap_create+0x130/0x130 [ 339.361015] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 339.368601] 2718 [ 339.371137] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 339.371149] ion_alloc+0x204/0x810 [ 339.371162] ? ion_dma_buf_release+0x40/0x40 [ 339.371174] ? __might_fault+0x177/0x1b0 [ 339.371185] ion_ioctl+0xea/0x1f0 [ 339.375624] 2718 [ 339.380536] ? ion_query_heaps+0x360/0x360 [ 339.386533] mems_allowed=0-1 [ 339.389341] ? ion_query_heaps+0x360/0x360 [ 339.393565] 2718 [ 339.397389] do_vfs_ioctl+0x75a/0xff0 [ 339.404584] ? ioctl_preallocate+0x1a0/0x1a0 [ 339.404595] ? lock_downgrade+0x740/0x740 [ 339.404607] ? __fget+0x225/0x360 [ 339.404616] ? do_vfs_ioctl+0xff0/0xff0 [ 339.404626] ? security_file_ioctl+0x83/0xb0 [ 339.404636] SyS_ioctl+0x7f/0xb0 [ 339.404643] ? do_vfs_ioctl+0xff0/0xff0 [ 339.404654] do_syscall_64+0x1d5/0x640 [ 339.404669] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 339.433015] Node 0 [ 339.433792] RIP: 0033:0x4665f9 [ 339.439273] DMA32 free:18032kB min:36200kB low:45248kB high:54296kB active_anon:51332kB inactive_anon:26896kB active_file:16kB inactive_file:12kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7904kB pagetables:3024kB bounce:0kB free_pcp:264kB local_pcp:120kB free_cma:0kB [ 339.444373] RSP: 002b:00007f8cc58ff188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 339.444384] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 339.444389] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000005 [ 339.444394] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 339.444398] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 339.444403] R13: 00007ffdcc2738ff R14: 00007f8cc58ff300 R15: 0000000000022000 [ 339.477397] warn_alloc_show_mem: 2 callbacks suppressed [ 339.477402] Mem-Info: [ 339.485159] CPU: 0 PID: 14901 Comm: syz-executor.3 Not tainted 4.14.232-syzkaller #0 [ 339.499219] active_anon:13013 inactive_anon:6727 isolated_anon:0 [ 339.499219] active_file:16 inactive_file:16 isolated_file:0 [ 339.499219] unevictable:0 dirty:0 writeback:0 unstable:0 [ 339.499219] slab_reclaimable:18710 slab_unreclaimable:105180 [ 339.499219] mapped:52225 shmem:6933 pagetables:781 bounce:0 [ 339.499219] free:13960 free_pcp:126 free_cma:0 [ 339.502741] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 339.502746] Call Trace: [ 339.502768] dump_stack+0x1b2/0x281 [ 339.502781] warn_alloc.cold+0x96/0x1cc [ 339.502793] ? zone_watermark_ok_safe+0x220/0x220 [ 339.502805] ? usleep_range+0x130/0x130 [ 339.507224] Node 0 active_anon:51332kB inactive_anon:26896kB active_file:16kB inactive_file:12kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:208900kB dirty:0kB writeback:0kB shmem:27712kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 14336kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 339.510771] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 339.510785] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 339.510794] ? run_timer_softirq+0x5a0/0x5a0 [ 339.510816] __alloc_pages_nodemask+0x2127/0x2720 [ 339.516072] Node 1 active_anon:720kB inactive_anon:12kB active_file:48kB inactive_file:52kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:20kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 339.518675] ? lock_acquire+0x170/0x3f0 [ 339.523884] Node 0 [ 339.526812] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 339.530087] DMA free:10972kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 339.561162] ? ion_page_pool_alloc+0x9e/0x1b0 [ 339.561179] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 339.561186] ? retint_kernel+0x2d/0x2d [ 339.561193] ? ion_page_pool_alloc+0x28/0x1b0 [ 339.561210] ? ion_page_pool_alloc+0x28/0x1b0 [ 339.568932] lowmem_reserve[]: [ 339.576244] alloc_pages_current+0x155/0x260 [ 339.576260] ion_page_pool_alloc+0x118/0x1b0 [ 339.576269] ion_system_heap_allocate+0x133/0x8c0 [ 339.576283] ? _raw_spin_unlock+0x29/0x40 [ 339.583610] 0 [ 339.590872] ? _ion_heap_freelist_drain+0x6e/0x410 [ 339.590882] ? ion_system_contig_heap_create+0x130/0x130 [ 339.590892] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 339.590904] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 339.590917] ion_alloc+0x27a/0x810 [ 339.598204] 2717 [ 339.605502] ? ion_dma_buf_release+0x40/0x40 [ 339.605515] ? __might_fault+0x177/0x1b0 [ 339.605526] ion_ioctl+0xea/0x1f0 [ 339.605538] ? ion_query_heaps+0x360/0x360 [ 339.610938] 2718 [ 339.613319] ? ion_query_heaps+0x360/0x360 [ 339.623740] 2718 [ 339.657144] do_vfs_ioctl+0x75a/0xff0 [ 339.657158] ? ioctl_preallocate+0x1a0/0x1a0 [ 339.657167] ? lock_downgrade+0x740/0x740 [ 339.657182] ? __fget+0x225/0x360 [ 339.666579] 2718 [ 339.669148] ? do_vfs_ioctl+0xff0/0xff0 [ 339.676819] ? security_file_ioctl+0x83/0xb0 [ 339.682809] Node 0 [ 339.686739] SyS_ioctl+0x7f/0xb0 [ 339.714822] DMA32 free:18032kB min:36200kB low:45248kB high:54296kB active_anon:51332kB inactive_anon:26896kB active_file:16kB inactive_file:12kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7904kB pagetables:3024kB bounce:0kB free_pcp:264kB local_pcp:144kB free_cma:0kB [ 339.719906] ? do_vfs_ioctl+0xff0/0xff0 [ 339.724972] lowmem_reserve[]: [ 339.729341] do_syscall_64+0x1d5/0x640 [ 339.734222] 0 [ 339.760585] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 339.760595] RIP: 0033:0x4665f9 [ 339.760599] RSP: 002b:00007f7215804188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 339.760613] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 339.764620] 0 [ 339.766821] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000005 [ 339.771682] 0 [ 339.797845] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 339.797852] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 339.797857] R13: 00007ffdb21b4b4f R14: 00007f7215804300 R15: 0000000000022000 [ 339.802773] Bluetooth: hci2 command 0x041b tx timeout [ 339.806048] lowmem_reserve[]: [ 339.826207] 0 [ 339.850322] 0 [ 340.002725] 0 [ 340.008568] 0 0 0 0 [ 340.045446] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 340.045997] chnl_net:caif_netlink_parms(): no params data found [ 340.078441] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 340.115713] lowmem_reserve[]: 0 0 0 0 0 [ 340.120214] Node 1 Normal free:587236kB min:53696kB low:67120kB high:80544kB active_anon:720kB inactive_anon:12kB active_file:52kB inactive_file:844kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:128kB pagetables:96kB bounce:0kB free_pcp:356kB local_pcp:228kB free_cma:0kB [ 340.180073] lowmem_reserve[]: 0 0 0 0 0 [ 340.180701] lowmem_reserve[]: 0 0 0 0 0 [ 340.185999] Node 0 DMA: 1*4kB (E) 1*8kB (U) 1*16kB (E) 2*32kB (UE) 8*64kB (UE) 4*128kB (UE) 1*256kB (E) 2*512kB [ 340.188270] Node 1 [ 340.188466] systemd[1]: systemd-journald.service: Failed with result 'signal'. [ 340.213548] (UE) 1*1024kB (E) 2*2048kB (ME) 1*4096kB (U) = 11612kB [ 340.220458] Node 0 DMA32: 480*4kB (ME) 460*8kB (UE) 190*16kB (ME) 75*32kB (UME) 1415*64kB (UM) 181*128kB (U) 38*256kB (UM) 13*512kB (UM) 16*1024kB (UM) 10*2048kB (U) 0*4096kB = 178016kB [ 340.240757] Normal free:910436kB min:53696kB low:67120kB high:80544kB active_anon:720kB inactive_anon:12kB active_file:52kB inactive_file:844kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:128kB pagetables:96kB bounce:0kB free_pcp:356kB local_pcp:128kB free_cma:0kB [ 340.243929] Node 0 [ 340.273203] systemd[1]: systemd-journald.service: Service has no hold-off time, scheduling restart. [ 340.295738] Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 340.320973] lowmem_reserve[]: 0 0 0 0 0 [ 340.323069] Node 1 [ 340.325023] Node 0 [ 340.325026] Normal: 1*4kB [ 340.327279] DMA: [ 340.329536] (M) [ 340.338015] systemd[1]: Stopped Flush Journal to Persistent Storage. [ 340.352354] 4*8kB (UME) 4*16kB (ME) 29*32kB (UME) 1162*64kB (UME) 324*128kB (UME) 162*256kB (UM) 54*512kB (UM) 414*1024kB (U) 112*2048kB (U) 21*4096kB (U) = 925316kB [ 340.355094] 1*4kB [ 340.369067] systemd[1]: Stopping Flush Journal to Persistent Storage... [ 340.379608] (E) 1*8kB (U) 1*16kB (E) 2*32kB (UE) 7*64kB (UE) 3*128kB (UE) 2*256kB (UE) 2*512kB (UE) 1*1024kB (E) 2*2048kB (ME) 1*4096kB (U) = 11676kB [ 340.379800] systemd[1]: Stopped Journal Service. [ 340.398647] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 340.429118] systemd[1]: Starting Journal Service... [ 340.429600] Node 0 [ 340.434279] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 340.434287] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 340.434294] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 340.434298] 8916 total pagecache pages [ 340.434308] 0 pages in swap cache [ 340.434312] Swap cache stats: add 0, delete 0, find 0/0 [ 340.434315] Free swap = 0kB [ 340.434319] Total swap = 0kB [ 340.434325] 2097051 pages RAM [ 340.434329] 0 pages HighMem/MovableOnly [ 340.434332] 363849 pages reserved [ 340.434336] 0 pages cma reserved [ 340.434343] Out of memory (oom_kill_allocating_task): Kill process 6072 (systemd-timesyn) score 0 or sacrifice child [ 340.434383] Killed process 6072 (systemd-timesyn) total-vm:123076kB, anon-rss:456kB, file-rss:0kB, shmem-rss:0kB [ 340.555640] oom_reaper: reaped process 14902 (syz-executor.5), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 340.605970] systemd[1]: systemd-timesyncd.service: Main process exited, code=killed, status=9/KILL [ 340.640941] DMA32: 469*4kB (UE) 304*8kB (E) 102*16kB (E) 17*32kB (E) 1*64kB (M) 1*128kB (M) 2*256kB (UM) 6*512kB (U) 17*1024kB (U) 10*2048kB (U) 0*4096kB = 48148kB [ 340.672592] systemd[1]: systemd-timesyncd.service: Unit entered failed state. [ 340.680281] systemd[1]: systemd-timesyncd.service: Failed with result 'signal'. [ 340.703798] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 340.739045] Node 1 Normal: 1*4kB (U) 3*8kB (ME) 4*16kB (ME) 3*32kB (UE) 838*64kB (UME) 324*128kB (UME) 162*256kB (UM) 54*512kB (UM) 414*1024kB (U) 112*2048kB (U) 21*4096kB (U) = 903740kB [ 340.745819] systemd[1]: systemd-timesyncd.service: Service has no hold-off time, scheduling restart. [ 340.773928] bridge0: port 1(bridge_slave_0) entered blocking state [ 340.776479] systemd-journald[15048]: File /run/log/journal/04d8c135ee6b410280ba31a58c89679d/system.journal corrupted or uncleanly shut down, renaming and replacing. [ 340.785536] bridge0: port 1(bridge_slave_0) entered disabled state [ 340.811172] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 340.820286] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 340.850747] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 340.850851] device bridge_slave_0 entered promiscuous mode [ 340.859725] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 340.909446] bridge0: port 2(bridge_slave_1) entered blocking state [ 340.922325] 12458 total pagecache pages [ 340.926351] 0 pages in swap cache [ 340.929832] Swap cache stats: add 0, delete 0, find 0/0 [ 340.935604] bridge0: port 2(bridge_slave_1) entered disabled state [ 340.960744] Free swap = 0kB [ 340.963802] Total swap = 0kB [ 340.965578] device bridge_slave_1 entered promiscuous mode [ 340.966884] 2097051 pages RAM [ 341.004523] 0 pages HighMem/MovableOnly [ 341.008536] 363849 pages reserved [ 341.026380] 0 pages cma reserved [ 341.046355] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 341.073058] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 341.172155] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 341.205166] team0: Port device team_slave_0 added [ 341.212289] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 341.251154] team0: Port device team_slave_1 added [ 341.326716] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 341.346073] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 341.415184] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 341.461369] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 341.467650] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 341.530766] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 341.552485] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 341.560202] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 341.686293] device hsr_slave_0 entered promiscuous mode [ 341.712265] device hsr_slave_1 entered promiscuous mode [ 341.731579] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 341.738981] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 341.870810] Bluetooth: hci2 command 0x040f tx timeout [ 342.107171] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready 11:44:57 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x10001, 0x400) r1 = syz_open_dev$vcsn(&(0x7f0000000140), 0x7, 0x24c042) ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r0, 0x7a9, &(0x7f0000000040)={{@my=0x0, 0x7f}, 0x40, 0x3, 0x0, 0x6, 0xf1, 0x5, 0x39, 0x3}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(0xffffffffffffffff, 0x7a8, &(0x7f0000000080)={{@host, 0x20000}, @hyper, 0x4, 0x9, 0x0, 0x5, 0x6, 0xd350}) socketpair(0x6, 0x80000, 0x10001, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNAPSHOT_ATOMIC_RESTORE(r1, 0x3304) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x44, 0x0, 0x400, 0x70bd25, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3023d3782c859c3d}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}]}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0), 0x20000, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000100)={0x80000001, 0x27}) 11:44:57 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendto(r0, &(0x7f0000000380)="f6a0", 0x2, 0x8000, 0x0, 0x0) 11:44:57 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x10001, 0x400) syz_open_dev$vcsn(&(0x7f0000000140), 0x7, 0x24c042) ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r0, 0x7a9, &(0x7f0000000040)={{@my=0x0, 0x7f}, 0x40, 0x3, 0x0, 0x6, 0xf1, 0x5, 0x39, 0x3}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(0xffffffffffffffff, 0x7a8, &(0x7f0000000080)={{@host, 0x20000}, @hyper, 0x4, 0x9, 0x0, 0x5, 0x6, 0xd350}) socketpair(0x6, 0x80000, 0x10001, &(0x7f0000000180)) r1 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0), 0x20000, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000100)={0x80000001, 0x27}) 11:44:57 executing program 2: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x10001, 0x400) r1 = syz_open_dev$vcsn(&(0x7f0000000140), 0x7, 0x24c042) ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r0, 0x7a9, &(0x7f0000000040)={{@my=0x0, 0x7f}, 0x40, 0x3, 0x0, 0x6, 0xf1, 0x5, 0x39, 0x3}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(0xffffffffffffffff, 0x7a8, &(0x7f0000000080)={{@host, 0x20000}, @hyper, 0x4, 0x9, 0x0, 0x5, 0x6, 0xd350}) socketpair(0x6, 0x80000, 0x10001, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNAPSHOT_ATOMIC_RESTORE(r1, 0x3304) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x44, 0x0, 0x400, 0x70bd25, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3023d3782c859c3d}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}]}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0), 0x20000, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000100)={0x80000001, 0x27}) [ 342.347722] 8021q: adding VLAN 0 to HW filter on device bond0 [ 342.401128] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 342.448914] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 342.479671] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 342.490426] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 342.528001] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 342.548694] 8021q: adding VLAN 0 to HW filter on device team0 [ 342.594151] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 342.618192] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 342.629708] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 342.650382] bridge0: port 1(bridge_slave_0) entered blocking state [ 342.656876] bridge0: port 1(bridge_slave_0) entered forwarding state [ 342.690991] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 342.708189] syz-executor.2: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 342.708456] syz-executor.5: [ 342.728764] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 342.739940] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 342.750187] page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 342.759421] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 342.774972] bridge0: port 2(bridge_slave_1) entered blocking state [ 342.781451] bridge0: port 2(bridge_slave_1) entered forwarding state [ 342.790426] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 342.796568] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 342.808545] CPU: 1 PID: 15154 Comm: syz-executor.5 Not tainted 4.14.232-syzkaller #0 [ 342.816467] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 342.826636] Call Trace: [ 342.827723] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 342.829229] dump_stack+0x1b2/0x281 [ 342.839637] warn_alloc.cold+0x96/0x1cc [ 342.843624] ? zone_watermark_ok_safe+0x220/0x220 [ 342.848509] __alloc_pages_nodemask+0x2127/0x2720 [ 342.853366] ? lock_acquire+0x170/0x3f0 [ 342.857366] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 342.862252] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 342.868438] ? __mutex_unlock_slowpath+0x75/0x770 [ 342.873322] alloc_pages_current+0x155/0x260 [ 342.877799] ion_page_pool_alloc+0x118/0x1b0 [ 342.877920] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 342.882769] ion_system_heap_allocate+0x133/0x8c0 [ 342.882780] ? ion_alloc+0x187/0x810 [ 342.882792] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 342.882800] ? ion_system_contig_heap_create+0x130/0x130 [ 342.882810] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 342.882821] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 342.882830] ion_alloc+0x204/0x810 [ 342.882842] ? ion_dma_buf_release+0x40/0x40 [ 342.882853] ? __might_fault+0x177/0x1b0 [ 342.882864] ion_ioctl+0xea/0x1f0 [ 342.882873] ? ion_query_heaps+0x360/0x360 [ 342.882894] ? ion_query_heaps+0x360/0x360 [ 342.882904] do_vfs_ioctl+0x75a/0xff0 [ 342.882915] ? ioctl_preallocate+0x1a0/0x1a0 [ 342.928176] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 342.930987] ? lock_downgrade+0x740/0x740 [ 342.931004] ? __fget+0x225/0x360 [ 342.931014] ? do_vfs_ioctl+0xff0/0xff0 [ 342.931025] ? security_file_ioctl+0x83/0xb0 [ 342.931034] SyS_ioctl+0x7f/0xb0 [ 342.931042] ? do_vfs_ioctl+0xff0/0xff0 [ 342.931053] do_syscall_64+0x1d5/0x640 [ 342.931067] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 342.931075] RIP: 0033:0x4665f9 [ 342.931080] RSP: 002b:00007f8cc58ff188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 342.931090] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 342.931096] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000005 [ 342.931101] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 342.931109] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 342.967351] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 342.969926] R13: 00007ffdcc2738ff R14: 00007f8cc58ff300 R15: 0000000000022000 [ 343.044936] CPU: 1 PID: 15155 Comm: syz-executor.2 Not tainted 4.14.232-syzkaller #0 [ 343.054429] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 343.063794] Call Trace: [ 343.066411] dump_stack+0x1b2/0x281 [ 343.070063] warn_alloc.cold+0x96/0x1cc [ 343.074066] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 343.079096] ? zone_watermark_ok_safe+0x220/0x220 [ 343.083978] __alloc_pages_nodemask+0x2127/0x2720 [ 343.088838] ? lock_acquire+0x170/0x3f0 [ 343.092825] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 343.097705] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 343.103184] ? __mutex_unlock_slowpath+0x75/0x770 [ 343.108045] ? retint_kernel+0x2d/0x2d [ 343.112060] alloc_pages_current+0x155/0x260 [ 343.116575] ion_page_pool_alloc+0x118/0x1b0 [ 343.121020] ion_system_heap_allocate+0x133/0x8c0 [ 343.125873] ? ion_alloc+0x187/0x810 [ 343.129595] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 343.135091] ? ion_system_contig_heap_create+0x130/0x130 [ 343.140560] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 343.145727] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 343.150603] ion_alloc+0x204/0x810 [ 343.154178] ? ion_dma_buf_release+0x40/0x40 [ 343.158591] ? __might_fault+0x177/0x1b0 [ 343.162671] ion_ioctl+0xea/0x1f0 [ 343.166122] ? ion_query_heaps+0x360/0x360 [ 343.170811] ? ion_query_heaps+0x360/0x360 [ 343.175050] do_vfs_ioctl+0x75a/0xff0 [ 343.178864] ? ioctl_preallocate+0x1a0/0x1a0 [ 343.183308] ? lock_downgrade+0x740/0x740 [ 343.187597] ? __fget+0x225/0x360 [ 343.191063] ? do_vfs_ioctl+0xff0/0xff0 [ 343.195062] ? security_file_ioctl+0x83/0xb0 [ 343.199500] SyS_ioctl+0x7f/0xb0 [ 343.202887] ? do_vfs_ioctl+0xff0/0xff0 [ 343.206875] do_syscall_64+0x1d5/0x640 [ 343.210781] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 343.215986] RIP: 0033:0x4665f9 [ 343.219184] RSP: 002b:00007ff3638e3188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 343.226931] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 343.234342] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000005 [ 343.241718] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 343.249093] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 343.256376] R13: 00007ffe909c1c6f R14: 00007ff3638e3300 R15: 0000000000022000 [ 343.275070] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 343.282757] warn_alloc_show_mem: 1 callbacks suppressed [ 343.282760] Mem-Info: [ 343.291324] active_anon:12051 inactive_anon:8760 isolated_anon:0 [ 343.291324] active_file:2192 inactive_file:2256 isolated_file:0 [ 343.291324] unevictable:0 dirty:112 writeback:0 unstable:0 [ 343.291324] slab_reclaimable:14002 slab_unreclaimable:116870 [ 343.291324] mapped:55715 shmem:8980 pagetables:758 bounce:0 [ 343.291324] free:152220 free_pcp:348 free_cma:0 [ 343.312502] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 343.325559] Node 0 active_anon:46988kB inactive_anon:26828kB active_file:7820kB inactive_file:7292kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:219476kB dirty:396kB writeback:0kB shmem:27700kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 343.361505] Node 1 active_anon:1216kB inactive_anon:8212kB active_file:948kB inactive_file:1732kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:3384kB dirty:52kB writeback:0kB shmem:8220kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 343.389733] Node 0 DMA free:11248kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:4kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 343.417854] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 343.418110] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 343.443828] Node 0 DMA32 free:275172kB min:36200kB low:45248kB high:54296kB active_anon:46988kB inactive_anon:26824kB active_file:7820kB inactive_file:7292kB unevictable:0kB writepending:396kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7872kB pagetables:2812kB bounce:0kB free_pcp:736kB local_pcp:116kB free_cma:0kB [ 343.455271] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 343.507504] lowmem_reserve[]: 0 0 0 0 0 [ 343.518740] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 343.551592] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 343.585066] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 343.603906] lowmem_reserve[]: 0 0 0 0 0 [ 343.607604] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 343.623242] Node 1 Normal free:664140kB min:53696kB low:67120kB high:80544kB active_anon:1216kB inactive_anon:8212kB active_file:948kB inactive_file:1732kB unevictable:0kB writepending:52kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:128kB pagetables:220kB bounce:0kB free_pcp:640kB local_pcp:0kB free_cma:0kB [ 343.657444] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 343.685780] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 343.691459] lowmem_reserve[]: 0 0 0 0 0 [ 343.705564] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 343.712287] Node 0 DMA: 94*4kB (UME) 14*8kB (UM) 12*16kB (UME) 8*32kB (UME) 2*64kB (ME) 3*128kB (UME) 2*256kB (ME) 2*512kB (ME) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (U) = 11176kB [ 343.747580] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 343.764827] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 343.768393] Node 0 [ 343.772908] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 343.779895] DMA32: 1447*4kB (MEH) 924*8kB (UMEH) 5981*16kB (UMEH) 4142*32kB (UMEH) 135*64kB (U) 19*128kB (U) 1*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 252748kB [ 343.813345] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 343.819463] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 343.846543] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 343.881599] Node 1 Normal: 516*4kB (UM) 783*8kB (UME) 775*16kB (UME) 557*32kB (UME) 429*64kB (UME) 4*128kB (UE) 1*256kB (U) 2*512kB (U) 362*1024kB (U) 136*2048kB (U) 20*4096kB (U) = 798936kB [ 343.891429] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 343.937715] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 343.946993] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 343.960873] Bluetooth: hci2 command 0x0419 tx timeout [ 343.966483] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 343.974272] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 343.984781] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 344.006048] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 344.009339] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 344.035510] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 344.071017] 13435 total pagecache pages [ 344.075122] 0 pages in swap cache [ 344.078595] Swap cache stats: add 0, delete 0, find 0/0 [ 344.111451] Free swap = 0kB [ 344.114519] Total swap = 0kB [ 344.117546] 2097051 pages RAM [ 344.120693] 0 pages HighMem/MovableOnly [ 344.150801] 363849 pages reserved [ 344.154401] 0 pages cma reserved [ 344.427049] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 344.472413] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 344.479544] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 344.496274] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 344.708020] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 344.725947] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 344.752666] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 344.780372] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 344.823484] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 344.844542] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 344.871320] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 344.889501] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 344.911615] device veth0_vlan entered promiscuous mode [ 344.938560] device veth1_vlan entered promiscuous mode [ 344.981660] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 345.017829] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 345.074412] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 345.107942] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 345.141068] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 345.148443] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 345.157172] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 345.171785] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 345.197496] device veth0_macvtap entered promiscuous mode [ 345.214021] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 345.250209] device veth1_macvtap entered promiscuous mode [ 345.268949] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 345.305514] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 345.319252] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 345.332303] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 345.343875] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 345.367342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 345.383440] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 345.420888] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 345.430729] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 345.461109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 345.471384] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 345.480501] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 345.492046] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 345.501278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 345.513462] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 345.552644] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 345.559787] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 345.587121] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 345.605248] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 345.627358] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 345.651151] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 345.660309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 345.694691] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 345.730882] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 345.740627] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 345.774027] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 345.800842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 345.830931] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 345.840691] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 345.883091] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 345.890025] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 345.922107] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 345.930583] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 347.233984] syz-executor.1: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 347.318251] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 347.342052] CPU: 0 PID: 15200 Comm: syz-executor.1 Not tainted 4.14.232-syzkaller #0 [ 347.349994] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 347.359350] Call Trace: [ 347.361961] dump_stack+0x1b2/0x281 [ 347.365706] warn_alloc.cold+0x96/0x1cc [ 347.369708] ? zone_watermark_ok_safe+0x220/0x220 [ 347.374742] __alloc_pages_nodemask+0x2127/0x2720 [ 347.379591] ? io_schedule_timeout+0x140/0x140 [ 347.384291] ? lock_acquire+0x170/0x3f0 [ 347.388273] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 347.393131] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 347.398599] ? __mutex_unlock_slowpath+0x75/0x770 [ 347.399178] syz-executor.1 invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask= [ 347.403462] alloc_pages_current+0x155/0x260 [ 347.403479] ion_page_pool_alloc+0x118/0x1b0 [ 347.403488] ion_system_heap_allocate+0x133/0x8c0 [ 347.403497] ? ion_alloc+0x187/0x810 [ 347.403512] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 347.429386] (null) [ 347.431073] ? ion_system_contig_heap_create+0x130/0x130 [ 347.431084] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 347.431096] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 347.431107] ion_alloc+0x204/0x810 [ 347.436639] , order=0, oom_score_adj=0 [ 347.438805] ? ion_dma_buf_release+0x40/0x40 [ 347.444280] syz-executor.1 cpuset= [ 347.449329] ? __might_fault+0x177/0x1b0 [ 347.454218] / [ 347.457735] ion_ioctl+0xea/0x1f0 [ 347.461747] mems_allowed=0-1 [ 347.466248] ? ion_query_heaps+0x360/0x360 [ 347.487449] ? ion_query_heaps+0x360/0x360 [ 347.491706] do_vfs_ioctl+0x75a/0xff0 [ 347.495517] ? ioctl_preallocate+0x1a0/0x1a0 [ 347.499931] ? lock_downgrade+0x740/0x740 [ 347.504092] ? __fget+0x225/0x360 [ 347.507554] ? do_vfs_ioctl+0xff0/0xff0 [ 347.511587] ? security_file_ioctl+0x83/0xb0 [ 347.516259] SyS_ioctl+0x7f/0xb0 [ 347.519641] ? do_vfs_ioctl+0xff0/0xff0 [ 347.523669] do_syscall_64+0x1d5/0x640 [ 347.527570] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 347.532761] RIP: 0033:0x4665f9 [ 347.536036] RSP: 002b:00007f6d4d90d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 347.543744] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 347.551018] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000005 [ 347.558291] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 347.565562] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 347.573533] R13: 00007ffd577b487f R14: 00007f6d4d90d300 R15: 0000000000022000 [ 347.580939] CPU: 1 PID: 14930 Comm: syz-executor.1 Not tainted 4.14.232-syzkaller #0 [ 347.588933] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 347.598644] Call Trace: [ 347.601251] dump_stack+0x1b2/0x281 [ 347.604892] dump_header+0x178/0x82f [ 347.608815] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 347.613941] ? ___ratelimit+0x2cd/0x530 [ 347.618020] oom_kill_process.cold+0x10/0xa40 [ 347.622567] out_of_memory+0xe3e/0x1190 [ 347.626750] ? oom_killer_disable+0x1c0/0x1c0 [ 347.628827] warn_alloc_show_mem: 1 callbacks suppressed [ 347.628831] Mem-Info: [ 347.631277] ? mutex_trylock+0x152/0x1a0 [ 347.631290] __alloc_pages_nodemask+0x23e1/0x2720 [ 347.631310] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 347.631333] alloc_pages_current+0x155/0x260 [ 347.631345] filemap_fault+0x11a1/0x1ad0 [ 347.631366] ext4_filemap_fault+0x84/0xb0 [ 347.637471] active_anon:12573 inactive_anon:8760 isolated_anon:0 [ 347.637471] active_file:11 inactive_file:12 isolated_file:0 [ 347.637471] unevictable:0 dirty:30 writeback:0 unstable:0 [ 347.637471] slab_reclaimable:13851 slab_unreclaimable:115587 [ 347.637471] mapped:52672 shmem:8980 pagetables:760 bounce:0 [ 347.637471] free:25258 free_pcp:59 free_cma:0 [ 347.639230] __do_fault+0xfa/0x380 [ 347.643833] Node 0 active_anon:48984kB inactive_anon:26824kB active_file:16kB inactive_file:12kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:208916kB dirty:32kB writeback:0kB shmem:27696kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 347.648119] __handle_mm_fault+0x2497/0x4620 [ 347.653042] Node 1 active_anon:1308kB inactive_anon:8216kB active_file:28kB inactive_file:36kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:1772kB dirty:88kB writeback:0kB shmem:8224kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 347.657352] ? vm_insert_page+0x7c0/0x7c0 [ 347.661461] Node 0 [ 347.665538] ? hrtimer_nanosleep+0x1ff/0x4b0 [ 347.665563] ? nanosleep_copyout+0x100/0x100 [ 347.699147] DMA free:11072kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:4kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 347.702878] ? mark_held_locks+0xa6/0xf0 [ 347.702891] handle_mm_fault+0x455/0x9c0 [ 347.702906] __do_page_fault+0x549/0xad0 [ 347.702918] ? spurious_fault+0x640/0x640 [ 347.731836] lowmem_reserve[]: [ 347.735535] ? do_page_fault+0x60/0x500 [ 347.763063] 0 [ 347.767101] ? page_fault+0x2f/0x50 [ 347.769341] 2717 [ 347.775438] page_fault+0x45/0x50 [ 347.775450] RIP: 549a7:0x7 [ 347.775458] RSP: 0003:00007ffd577b4b3c EFLAGS: 00000032 [ 347.779867] 2718 [ 347.817714] Mem-Info: [ 347.907664] active_anon:12573 inactive_anon:8760 isolated_anon:0 [ 347.907664] active_file:11 inactive_file:37 isolated_file:0 [ 347.907664] unevictable:0 dirty:30 writeback:0 unstable:0 [ 347.907664] slab_reclaimable:13851 slab_unreclaimable:115587 [ 347.907664] mapped:52672 shmem:8980 pagetables:760 bounce:0 [ 347.907664] free:25216 free_pcp:59 free_cma:0 [ 347.930952] 2718 2718 [ 347.989696] Node 0 DMA32 free:36192kB min:36200kB low:45248kB high:54296kB active_anon:48984kB inactive_anon:26820kB active_file:16kB inactive_file:112kB unevictable:0kB writepending:32kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7808kB pagetables:2728kB bounce:0kB free_pcp:236kB local_pcp:116kB free_cma:0kB [ 348.032987] lowmem_reserve[]: 0 0 0 0 0 [ 348.037447] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 348.040249] Node 0 active_anon:48984kB inactive_anon:26824kB active_file:24kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):28kB mapped:208904kB dirty:0kB writeback:0kB shmem:27696kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 348.083473] lowmem_reserve[]: 0 0 0 0 0 [ 348.095880] Node 1 Normal free:53632kB min:53696kB low:67120kB high:80544kB active_anon:1308kB inactive_anon:8216kB active_file:20kB inactive_file:124kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:160kB pagetables:312kB bounce:0kB free_pcp:372kB local_pcp:248kB free_cma:0kB [ 348.096129] Node 1 active_anon:1308kB inactive_anon:8216kB active_file:20kB inactive_file:124kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:1656kB dirty:0kB writeback:0kB shmem:8224kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 348.125160] lowmem_reserve[]: 0 0 0 0 0 [ 348.158579] Node 0 DMA free:11072kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:4kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 348.172526] Node 0 DMA: 2*4kB (ME) 1*8kB (M) 3*16kB (UME) 2*32kB (ME) 5*64kB (UME) 5*128kB (UME) 5*256kB (UME) 3*512kB (UME) 3*1024kB (UME) 2*2048kB (UE) 0*4096kB = 11072kB [ 348.190544] lowmem_reserve[]: [ 348.206697] Node 0 DMA32: 2039*4kB (ME) 1106*8kB (UME) 319*16kB (UME) 116*32kB (ME) 25*64kB (UME) 14*128kB (ME) 5*256kB (UME) 3*512kB (UM) 2*1024kB (UM) 1*2048kB (U) 0*4096kB = 36124kB [ 348.210318] 0 2717 2718 2718 2718 [ 348.230527] Node 0 DMA32 free:36092kB min:36200kB low:45248kB high:54296kB active_anon:48984kB inactive_anon:26820kB active_file:24kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7808kB pagetables:2728kB bounce:0kB free_pcp:120kB local_pcp:0kB free_cma:0kB [ 348.230688] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 348.263938] lowmem_reserve[]: [ 348.271108] Node 1 Normal: 79*4kB (UM) 71*8kB (UME) 48*16kB (UME) 24*32kB (UME) 16*64kB (UME) 13*128kB (UME) 5*256kB (UM) 61*512kB (UM) 14*1024kB (UM) 1*2048kB (M) 0*4096kB = 54004kB [ 348.271201] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 348.271208] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 348.271213] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 348.271220] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 348.271224] 9017 total pagecache pages [ 348.271234] 0 pages in swap cache [ 348.271239] Swap cache stats: add 0, delete 0, find 0/0 [ 348.271241] Free swap = 0kB [ 348.271245] Total swap = 0kB [ 348.271251] 2097051 pages RAM [ 348.271254] 0 pages HighMem/MovableOnly [ 348.271257] 363849 pages reserved [ 348.271260] 0 pages cma reserved [ 348.365469] 0 0 0 0 0 [ 348.368020] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 348.397922] lowmem_reserve[]: 0 0 0 0 0 [ 348.402202] Node 1 Normal free:53632kB min:53696kB low:67120kB high:80544kB active_anon:1308kB inactive_anon:8216kB active_file:20kB inactive_file:124kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:160kB pagetables:312kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 348.431412] lowmem_reserve[]: 0 0 0 0 0 [ 348.435457] Node 0 DMA: 2*4kB (ME) 1*8kB (M) 3*16kB (UME) 2*32kB (ME) 5*64kB (UME) 5*128kB (UME) 5*256kB (UME) 3*512kB (UME) 3*1024kB (UME) 2*2048kB (UE) 0*4096kB = 11072kB [ 348.451166] Node 0 DMA32: 2041*4kB (UME) 1108*8kB (UME) 321*16kB (UME) 118*32kB (UME) 25*64kB (UME) 15*128kB (UME) 4*256kB (ME) 3*512kB (UM) 2*1024kB (UM) 1*2048kB (U) 0*4096kB = 36116kB [ 348.468137] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 348.478964] Node 1 Normal: 79*4kB (UM) 71*8kB (UME) 48*16kB (UME) 24*32kB (UME) 16*64kB (UME) 13*128kB (UME) 5*256kB (UM) 61*512kB (UM) 14*1024kB (UM) 1*2048kB (M) 0*4096kB = 54004kB [ 348.495603] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 348.504506] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 348.513208] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 348.522098] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 348.530688] 9017 total pagecache pages [ 348.534660] 0 pages in swap cache [ 348.538116] Swap cache stats: add 0, delete 0, find 0/0 [ 348.543536] Free swap = 0kB [ 348.546554] Total swap = 0kB [ 348.549571] 2097051 pages RAM [ 348.552768] 0 pages HighMem/MovableOnly [ 348.556742] 363849 pages reserved [ 348.560191] 0 pages cma reserved [ 348.563613] Out of memory (oom_kill_allocating_task): Kill process 14930 (syz-executor.1) score 0 or sacrifice child [ 348.574375] Killed process 15199 (syz-executor.1) total-vm:93252kB, anon-rss:2148kB, file-rss:33564kB, shmem-rss:0kB [ 348.597842] oom_reaper: reaped process 15199 (syz-executor.1), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 348.675859] systemd-journal invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 348.726028] systemd-journal cpuset=/ mems_allowed=0-1 [ 348.739324] CPU: 0 PID: 15048 Comm: systemd-journal Not tainted 4.14.232-syzkaller #0 [ 348.747419] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 348.756871] Call Trace: [ 348.759739] dump_stack+0x1b2/0x281 [ 348.763412] dump_header+0x178/0x82f [ 348.767354] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 348.772550] ? ___ratelimit+0x2cd/0x530 [ 348.776556] oom_kill_process.cold+0x10/0xa40 [ 348.781162] out_of_memory+0xe3e/0x1190 [ 348.785141] ? oom_killer_disable+0x1c0/0x1c0 [ 348.789639] ? mutex_trylock+0x152/0x1a0 [ 348.793962] __alloc_pages_nodemask+0x23e1/0x2720 [ 348.798819] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 348.803687] alloc_pages_current+0x155/0x260 [ 348.808114] filemap_fault+0x11a1/0x1ad0 [ 348.812188] ext4_filemap_fault+0x84/0xb0 [ 348.816344] __do_fault+0xfa/0x380 [ 348.819892] __handle_mm_fault+0x2497/0x4620 [ 348.824307] ? vm_insert_page+0x7c0/0x7c0 [ 348.828485] ? mark_held_locks+0xa6/0xf0 [ 348.832725] handle_mm_fault+0x455/0x9c0 [ 348.836792] __do_page_fault+0x549/0xad0 [ 348.840858] ? spurious_fault+0x640/0x640 [ 348.845005] ? do_page_fault+0x60/0x500 [ 348.848977] ? page_fault+0x2f/0x50 [ 348.852598] page_fault+0x45/0x50 [ 348.856049] RIP: 0001:0xffffffffffffffff [ 348.860100] RSP: de0f1e0:00007ffead83bf30 EFLAGS: 7ffead83bd40 [ 348.863610] Mem-Info: [ 348.865263] syz-executor.1: [ 348.869640] active_anon:12038 inactive_anon:8760 isolated_anon:0 [ 348.869640] active_file:5 inactive_file:19 isolated_file:0 [ 348.869640] unevictable:0 dirty:0 writeback:0 unstable:0 [ 348.869640] slab_reclaimable:13848 slab_unreclaimable:115603 [ 348.869640] mapped:52639 shmem:8980 pagetables:759 bounce:0 [ 348.869640] free:13897 free_pcp:30 free_cma:0 [ 348.886557] page allocation failure: order:0 [ 348.910682] Node 0 active_anon:46904kB inactive_anon:26824kB active_file:24kB inactive_file:28kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:208904kB dirty:0kB writeback:0kB shmem:27696kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 348.924153] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 348.945781] Node 1 active_anon:1248kB inactive_anon:8216kB active_file:0kB inactive_file:48kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:1652kB dirty:0kB writeback:0kB shmem:8224kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 348.959023] (null) [ 348.986653] Node 0 DMA free:10960kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:4kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 349.000957] syz-executor.1 cpuset= [ 349.020823] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 349.025319] / [ 349.029502] Node 0 [ 349.029508] mems_allowed=0-1 [ 349.029523] CPU: 1 PID: 15200 Comm: syz-executor.1 Not tainted 4.14.232-syzkaller #0 [ 349.037668] DMA32 free:17808kB min:36200kB low:45248kB high:54296kB active_anon:46904kB inactive_anon:26820kB active_file:20kB inactive_file:32kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7808kB pagetables:2724kB bounce:0kB free_pcp:120kB local_pcp:0kB free_cma:0kB [ 349.044410] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 349.044415] Call Trace: [ 349.044438] dump_stack+0x1b2/0x281 [ 349.044451] warn_alloc.cold+0x96/0x1cc [ 349.044463] ? zone_watermark_ok_safe+0x220/0x220 [ 349.044472] ? usleep_range+0x130/0x130 [ 349.044481] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 349.044495] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 349.079549] lowmem_reserve[]: [ 349.082159] ? run_timer_softirq+0x5a0/0x5a0 [ 349.082178] __alloc_pages_nodemask+0x2127/0x2720 [ 349.082195] ? lock_acquire+0x170/0x3f0 [ 349.082210] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 349.084796] 0 [ 349.088417] ? ion_page_pool_alloc+0x9e/0x1b0 [ 349.098844] 0 [ 349.101172] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 349.101192] alloc_pages_current+0x155/0x260 [ 349.101208] ion_page_pool_alloc+0x118/0x1b0 [ 349.106396] 0 [ 349.111442] ion_system_heap_allocate+0x133/0x8c0 [ 349.111452] ? ion_alloc+0x187/0x810 [ 349.111462] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 349.111470] ? ion_system_contig_heap_create+0x130/0x130 [ 349.111479] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 349.111491] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 349.111500] ion_alloc+0x204/0x810 [ 349.111513] ? ion_dma_buf_release+0x40/0x40 [ 349.111526] ? __might_fault+0x177/0x1b0 [ 349.111536] ion_ioctl+0xea/0x1f0 [ 349.111547] ? ion_query_heaps+0x360/0x360 [ 349.111558] ? ion_query_heaps+0x360/0x360 [ 349.111568] do_vfs_ioctl+0x75a/0xff0 [ 349.111585] ? ioctl_preallocate+0x1a0/0x1a0 [ 349.121103] 0 [ 349.123940] ? lock_downgrade+0x740/0x740 [ 349.127901] 0 [ 349.132750] ? __fget+0x225/0x360 [ 349.132760] ? do_vfs_ioctl+0xff0/0xff0 [ 349.132772] ? security_file_ioctl+0x83/0xb0 [ 349.132781] SyS_ioctl+0x7f/0xb0 [ 349.132790] ? do_vfs_ioctl+0xff0/0xff0 [ 349.132811] do_syscall_64+0x1d5/0x640 [ 349.132827] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 349.132835] RIP: 0033:0x4665f9 [ 349.132840] RSP: 002b:00007f6d4d90d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 349.132850] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 349.132855] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000005 [ 349.132863] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 349.139134] Node 0 [ 349.140933] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 349.140939] R13: 00007ffd577b487f R14: 00007f6d4d90d300 R15: 0000000000022000 [ 349.151518] Mem-Info: [ 349.151542] active_anon:12038 inactive_anon:8760 isolated_anon:0 [ 349.151542] active_file:11 inactive_file:13 isolated_file:0 [ 349.151542] unevictable:0 dirty:0 writeback:0 unstable:0 [ 349.151542] slab_reclaimable:13848 slab_unreclaimable:115603 [ 349.151542] mapped:52640 shmem:8980 pagetables:759 bounce:0 [ 349.151542] free:13861 free_pcp:90 free_cma:0 [ 349.151561] Node 0 active_anon:46904kB inactive_anon:26824kB active_file:24kB inactive_file:28kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:208904kB dirty:0kB writeback:0kB shmem:27696kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 349.163335] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 349.176487] Node 1 active_anon:1248kB inactive_anon:8216kB active_file:20kB inactive_file:24kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:1656kB dirty:0kB writeback:0kB shmem:8224kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 349.179994] lowmem_reserve[]: [ 349.188957] Node 0 [ 349.198387] 0 [ 349.203027] DMA free:10960kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:4kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 349.204425] 0 [ 349.209205] lowmem_reserve[]: [ 349.217724] 0 [ 349.229292] 0 [ 349.230357] 0 [ 349.237318] 2717 [ 349.242774] 0 [ 349.254686] 2718 [ 349.272760] 2718 [ 349.280853] Node 1 [ 349.297397] 2718 [ 349.306265] Normal free:26896kB min:53696kB low:67120kB high:80544kB active_anon:1248kB inactive_anon:8216kB active_file:20kB inactive_file:24kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:128kB pagetables:312kB bounce:0kB free_pcp:120kB local_pcp:0kB free_cma:0kB [ 349.350742] lowmem_reserve[]: [ 349.385704] Node 0 [ 349.410544] 0 [ 349.432884] DMA32 free:17588kB min:36200kB low:45248kB high:54296kB active_anon:46904kB inactive_anon:26820kB active_file:24kB inactive_file:28kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7808kB pagetables:2724kB bounce:0kB free_pcp:236kB local_pcp:120kB free_cma:0kB [ 349.445191] 0 [ 349.465551] lowmem_reserve[]: [ 349.476726] 0 [ 349.479124] 0 [ 349.480060] 0 [ 349.486815] 0 [ 349.520563] 0 [ 349.552332] 0 0 0 [ 349.563790] Node 0 DMA: 2*4kB (ME) 1*8kB (M) 2*16kB (ME) 3*32kB (UME) 3*64kB (UME) 5*128kB (UME) 5*256kB (UME) 3*512kB (UME) 3*1024kB (UME) 2*2048kB (UE) 0*4096kB = 10960kB [ 349.566775] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 349.591006] Node 0 [ 349.618516] lowmem_reserve[]: 0 0 0 0 0 [ 349.622955] DMA32: 1237*4kB (MEH) 734*8kB (MEH) 180*16kB (UMEH) 61*32kB (UMH) 2*64kB (U) 0*128kB 1*256kB [ 349.624813] Node 1 [ 349.624821] (U) [ 349.640952] Normal free:26896kB min:53696kB low:67120kB high:80544kB active_anon:1248kB inactive_anon:8216kB active_file:20kB inactive_file:24kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:128kB pagetables:312kB bounce:0kB free_pcp:120kB local_pcp:120kB free_cma:0kB [ 349.647929] 1*512kB [ 349.677421] lowmem_reserve[]: 0 0 0 0 0 [ 349.681802] (U) 1*1024kB (U) 0*2048kB 0*4096kB = 17572kB [ 349.683859] Node 0 DMA: 2*4kB (ME) 1*8kB (M) 2*16kB (ME) 3*32kB (UME) 3*64kB (UME) 5*128kB (UME) 5*256kB (UME) [ 349.689354] Node 0 Normal: [ 349.706344] 3*512kB (UME) 3*1024kB (UME) 2*2048kB (UE) 0*4096kB = 10960kB [ 349.710428] 0*4kB [ 349.716469] Node 0 DMA32: 1237*4kB (MEH) 734*8kB (MEH) 180*16kB (UMEH) 61*32kB (UMH) 2*64kB (U) 0*128kB 1*256kB (U) 1*512kB (U) 1*1024kB (U) 0*2048kB 0*4096kB = 17572kB [ 349.719221] 0*8kB [ 349.740405] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 349.744798] 0*16kB [ 349.760036] Node 1 [ 349.760123] 0*32kB [ 349.762862] Normal: 76*4kB (UM) 70*8kB (UME) 45*16kB (ME) 23*32kB (ME) 14*64kB (UME) 11*128kB (ME) 5*256kB (M) 9*512kB (UM) 14*1024kB (UM) 1*2048kB (M) 0*4096kB = 26896kB [ 349.769624] 0*64kB [ 349.789222] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 349.794320] 0*128kB [ 349.800394] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 349.800404] 0*256kB [ 349.809079] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 349.822469] 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 349.828281] Node 1 Normal: 76*4kB (UM) 70*8kB (UME) 45*16kB (ME) 23*32kB (ME) 14*64kB (UME) 11*128kB (ME) 5*256kB (M) 9*512kB (UM) 14*1024kB (UM) 1*2048kB (M) 0*4096kB = 26896kB [ 349.829199] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 349.849181] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 349.865685] 9004 total pagecache pages [ 349.866529] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 349.869598] 0 pages in swap cache [ 349.878860] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 349.895147] Swap cache stats: add 0, delete 0, find 0/0 [ 349.895352] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 349.900536] Free swap = 0kB [ 349.909168] 9004 total pagecache pages [ 349.909179] 0 pages in swap cache [ 349.909183] Swap cache stats: add 0, delete 0, find 0/0 [ 349.909186] Free swap = 0kB [ 349.909189] Total swap = 0kB [ 349.909196] 2097051 pages RAM [ 349.909199] 0 pages HighMem/MovableOnly [ 349.909202] 363849 pages reserved [ 349.909206] 0 pages cma reserved [ 349.909214] Out of memory (oom_kill_allocating_task): Kill process 15048 (systemd-journal) score 0 or sacrifice child [ 349.909243] Killed process 15048 (systemd-journal) total-vm:46096kB, anon-rss:472kB, file-rss:0kB, shmem-rss:1648kB [ 349.910031] oom_reaper: reaped process 15048 (systemd-journal), now anon-rss:0kB, file-rss:0kB, shmem-rss:1648kB [ 349.924747] Total swap = 0kB [ 349.938268] syz-fuzzer invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask= [ 349.942980] 2097051 pages RAM [ 349.970679] (null) [ 349.990351] 0 pages HighMem/MovableOnly [ 350.002368] , order=0, oom_score_adj=0 [ 350.005236] 363849 pages reserved [ 350.006472] syz-fuzzer cpuset= [ 350.009921] 0 pages cma reserved [ 350.009929] / [ 350.106723] systemd[1]: systemd-journald.service: Failed with result 'signal'. [ 350.120580] mems_allowed=0-1 [ 350.136941] CPU: 0 PID: 7997 Comm: syz-fuzzer Not tainted 4.14.232-syzkaller #0 [ 350.144598] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 350.154308] Call Trace: [ 350.156905] dump_stack+0x1b2/0x281 [ 350.160573] dump_header+0x178/0x82f [ 350.164399] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 350.169509] ? ___ratelimit+0x2cd/0x530 [ 350.173503] oom_kill_process.cold+0x10/0xa40 [ 350.178033] out_of_memory+0xe3e/0x1190 [ 350.182035] ? oom_killer_disable+0x1c0/0x1c0 [ 350.186804] ? mutex_trylock+0x152/0x1a0 [ 350.190881] __alloc_pages_nodemask+0x23e1/0x2720 [ 350.195744] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 350.200621] alloc_pages_current+0x155/0x260 [ 350.205043] filemap_fault+0x11a1/0x1ad0 [ 350.209163] ext4_filemap_fault+0x84/0xb0 [ 350.213500] __do_fault+0xfa/0x380 [ 350.216051] syz-executor.1: page allocation failure: order:4 [ 350.217060] __handle_mm_fault+0x2497/0x4620 [ 350.217071] ? vm_insert_page+0x7c0/0x7c0 [ 350.222927] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 350.227462] ? lock_downgrade+0x740/0x740 [ 350.231668] (null) [ 350.238697] ? mark_held_locks+0xa6/0xf0 [ 350.243832] syz-executor.1 cpuset= [ 350.245931] handle_mm_fault+0x455/0x9c0 [ 350.249966] / [ 350.253507] __do_page_fault+0x549/0xad0 [ 350.257619] mems_allowed=0-1 [ 350.259272] ? spurious_fault+0x640/0x640 [ 350.270926] ? do_page_fault+0x60/0x500 [ 350.275137] ? page_fault+0x2f/0x50 [ 350.278851] page_fault+0x45/0x50 [ 350.282832] RIP: 0000:0x947a14 [ 350.286016] RSP: 2e000:000000c00003dec8 EFLAGS: 0043b6a0 [ 350.286043] CPU: 1 PID: 15200 Comm: syz-executor.1 Not tainted 4.14.232-syzkaller #0 [ 350.299495] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 350.309411] Call Trace: [ 350.312080] dump_stack+0x1b2/0x281 [ 350.316183] warn_alloc.cold+0x96/0x1cc [ 350.320186] ? zone_watermark_ok_safe+0x220/0x220 [ 350.325100] __alloc_pages_nodemask+0x2127/0x2720 [ 350.330091] ? check_preemption_disabled+0x35/0x240 [ 350.335118] ? lock_acquire+0x170/0x3f0 [ 350.339221] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 350.344336] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 350.349799] ? __mutex_unlock_slowpath+0x75/0x770 [ 350.354672] ? __list_del_entry_valid+0xb3/0xf0 [ 350.358317] Mem-Info: [ 350.359347] alloc_pages_current+0x155/0x260 [ 350.361823] active_anon:11946 inactive_anon:8759 isolated_anon:0 [ 350.361823] active_file:58 inactive_file:26 isolated_file:9 [ 350.361823] unevictable:0 dirty:25 writeback:0 unstable:0 [ 350.361823] slab_reclaimable:13848 slab_unreclaimable:115321 [ 350.361823] mapped:52225 shmem:8980 pagetables:735 bounce:0 [ 350.361823] free:13930 free_pcp:196 free_cma:0 [ 350.366165] ion_page_pool_alloc+0x118/0x1b0 [ 350.403047] Node 0 active_anon:46896kB inactive_anon:26824kB active_file:28kB inactive_file:24kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:208900kB dirty:0kB writeback:0kB shmem:27696kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 350.404672] ion_system_heap_allocate+0x133/0x8c0 [ 350.437291] Node 1 active_anon:888kB inactive_anon:8212kB active_file:204kB inactive_file:80kB unevictable:0kB isolated(anon):0kB isolated(file):36kB mapped:0kB dirty:100kB writeback:0kB shmem:8224kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 350.439132] ? _raw_spin_unlock+0x29/0x40 [ 350.472251] Node 0 DMA free:10960kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:4kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 350.472457] ? _ion_heap_freelist_drain+0x6e/0x410 [ 350.472469] ? ion_system_contig_heap_create+0x130/0x130 [ 350.501124] lowmem_reserve[]: [ 350.503596] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 350.509023] 0 [ 350.512168] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 350.512180] ion_alloc+0x27a/0x810 [ 350.512194] ? ion_dma_buf_release+0x40/0x40 [ 350.512205] ? __might_fault+0x177/0x1b0 [ 350.512215] ion_ioctl+0xea/0x1f0 [ 350.512223] ? ion_query_heaps+0x360/0x360 [ 350.512234] ? ion_query_heaps+0x360/0x360 [ 350.512243] do_vfs_ioctl+0x75a/0xff0 [ 350.512253] ? ioctl_preallocate+0x1a0/0x1a0 [ 350.512261] ? lock_downgrade+0x740/0x740 [ 350.512274] ? __fget+0x225/0x360 [ 350.512283] ? do_vfs_ioctl+0xff0/0xff0 [ 350.512293] ? security_file_ioctl+0x83/0xb0 [ 350.512302] SyS_ioctl+0x7f/0xb0 [ 350.512309] ? do_vfs_ioctl+0xff0/0xff0 [ 350.512320] do_syscall_64+0x1d5/0x640 [ 350.512333] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 350.512342] RIP: 0033:0x4665f9 [ 350.512347] RSP: 002b:00007f6d4d90d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 350.512357] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 350.512362] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000005 [ 350.512366] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 350.512372] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 350.512378] R13: 00007ffd577b487f R14: 00007f6d4d90d300 R15: 0000000000022000 [ 350.523183] Mem-Info: [ 350.526692] 2717 [ 350.527778] active_anon:11946 inactive_anon:8759 isolated_anon:0 [ 350.527778] active_file:58 inactive_file:26 isolated_file:9 [ 350.527778] unevictable:0 dirty:25 writeback:0 unstable:0 [ 350.527778] slab_reclaimable:13848 slab_unreclaimable:115321 [ 350.527778] mapped:52225 shmem:8980 pagetables:735 bounce:0 [ 350.527778] free:13930 free_pcp:195 free_cma:0 [ 350.532217] 2718 2718 2718 [ 350.532231] Node 0 DMA32 free:17888kB min:36200kB low:45248kB high:54296kB active_anon:46896kB inactive_anon:26820kB active_file:28kB inactive_file:24kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7776kB pagetables:2724kB bounce:0kB free_pcp:32kB local_pcp:0kB free_cma:0kB [ 350.532251] lowmem_reserve[]: 0 0 0 0 0 [ 350.532269] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 350.532284] lowmem_reserve[]: 0 0 0 0 0 [ 350.532301] Node 1 Normal free:26872kB min:53696kB low:67120kB high:80544kB active_anon:888kB inactive_anon:8212kB active_file:108kB inactive_file:20kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:160kB pagetables:216kB bounce:0kB free_pcp:748kB local_pcp:16kB free_cma:0kB [ 350.532319] lowmem_reserve[]: 0 0 0 0 0 [ 350.532336] Node 0 DMA: 2*4kB (ME) 1*8kB (M) 2*16kB (ME) 3*32kB (UME) 3*64kB (UME) 5*128kB (UME) 5*256kB (UME) 3*512kB (UME) 3*1024kB (UME) 2*2048kB (UE) 0*4096kB = 10960kB [ 350.532415] Node 0 DMA32: 1283*4kB (UME) 950*8kB (UMEH) [ 350.541804] Node 0 active_anon:46896kB inactive_anon:26824kB active_file:28kB inactive_file:24kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:208900kB dirty:0kB writeback:0kB shmem:27696kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 350.546517] 181*16kB [ 350.548572] Node 1 active_anon:888kB inactive_anon:8212kB active_file:204kB inactive_file:80kB unevictable:0kB isolated(anon):0kB isolated(file):36kB mapped:0kB dirty:100kB writeback:0kB shmem:8224kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 350.552462] (UME) 62*32kB (UM) 1*64kB (U) 0*128kB 1*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 17932kB [ 350.552507] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 350.552564] Node 1 Normal: 83*4kB (UM) [ 350.561195] Node 0 [ 350.564296] 89*8kB [ 350.565064] DMA free:10960kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:4kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 350.569017] (UME) [ 350.576856] lowmem_reserve[]: 0 [ 350.580822] 65*16kB [ 350.584998] 2717 2718 2718 2718 [ 350.585015] Node 0 DMA32 free:17888kB min:36200kB low:45248kB high:54296kB active_anon:46896kB inactive_anon:26820kB active_file:28kB inactive_file:24kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7776kB pagetables:2724kB bounce:0kB free_pcp:32kB local_pcp:32kB free_cma:0kB [ 350.585037] lowmem_reserve[]: 0 0 0 0 0 [ 350.585059] Node 0 [ 350.592859] (UME) [ 350.597554] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 350.602456] 31*32kB [ 350.608982] lowmem_reserve[]: [ 350.616322] (UME) 10*64kB (UME) 145*128kB (UE) 7*256kB (UM) 4*512kB (UM) 1*1024kB (U) 0*2048kB 0*4096kB = 27140kB [ 350.616373] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 350.616378] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 350.616384] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 350.616394] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 350.627557] 0 [ 350.633451] 9041 total pagecache pages [ 350.638761] 0 [ 350.641837] 0 pages in swap cache [ 350.641845] Swap cache stats: add 0, delete 0, find 0/0 [ 350.647697] 0 [ 350.693945] Free swap = 0kB [ 350.713909] 0 [ 350.759374] Total swap = 0kB [ 350.778346] 0 [ 350.808674] 2097051 pages RAM [ 350.855513] 0 pages HighMem/MovableOnly [ 350.872849] Node 1 [ 350.892789] 363849 pages reserved [ 350.916332] Normal free:27844kB min:53696kB low:67120kB high:80544kB active_anon:888kB inactive_anon:8212kB active_file:108kB inactive_file:80kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:160kB pagetables:216kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 350.918167] 0 pages cma reserved [ 350.923403] lowmem_reserve[]: [ 350.961022] Out of memory (oom_kill_allocating_task): Kill process 7997 (syz-fuzzer) score 0 or sacrifice child [ 350.990365] 0 [ 351.016827] Killed process 8011 (syz-executor.5) total-vm:84924kB, anon-rss:64kB, file-rss:0kB, shmem-rss:0kB [ 351.029700] 0 [ 351.043101] oom_reaper: reaped process 8011 (syz-executor.5), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 351.052938] 0 [ 351.113515] systemd invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask= [ 351.127036] 0 0 [ 351.166002] Node 0 DMA: 2*4kB (ME) 1*8kB (M) 2*16kB (ME) 3*32kB (UME) 3*64kB (UME) 5*128kB (UME) 5*256kB (UME) 3*512kB (UME) 3*1024kB (UME) 2*2048kB (UE) 0*4096kB = 10960kB [ 351.188246] (null), order=0, oom_score_adj=0 [ 351.188387] Node 0 DMA32: 1329*4kB (UME) 953*8kB (UMEH) 184*16kB (UME) 68*32kB (UM) 1*64kB (U) 0*128kB 1*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18380kB [ 351.199560] systemd cpuset=/ mems_allowed=0-1 [ 351.228284] CPU: 0 PID: 1 Comm: systemd Not tainted 4.14.232-syzkaller #0 [ 351.230488] Node 0 [ 351.235223] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 351.235228] Call Trace: [ 351.235248] dump_stack+0x1b2/0x281 [ 351.235260] dump_header+0x178/0x82f [ 351.235270] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 351.235278] ? ___ratelimit+0x2cd/0x530 [ 351.235287] oom_kill_process.cold+0x10/0xa40 [ 351.235298] ? lock_downgrade+0x740/0x740 [ 351.235313] out_of_memory+0x2dc/0x1190 [ 351.235326] ? oom_killer_disable+0x1c0/0x1c0 [ 351.235334] ? mutex_trylock+0x152/0x1a0 [ 351.235345] __alloc_pages_nodemask+0x23e1/0x2720 [ 351.235367] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 351.235394] alloc_pages_current+0x155/0x260 [ 351.235403] filemap_fault+0x11a1/0x1ad0 [ 351.235422] ext4_filemap_fault+0x84/0xb0 [ 351.237651] Normal: [ 351.247992] __do_fault+0xfa/0x380 [ 351.248003] __handle_mm_fault+0x2497/0x4620 [ 351.248013] ? vm_insert_page+0x7c0/0x7c0 [ 351.248034] ? mark_held_locks+0xa6/0xf0 [ 351.250868] 0*4kB [ 351.254522] handle_mm_fault+0x455/0x9c0 [ 351.254537] __do_page_fault+0x549/0xad0 [ 351.254549] ? spurious_fault+0x640/0x640 [ 351.258350] 0*8kB [ 351.263556] ? do_page_fault+0x60/0x500 [ 351.263565] ? page_fault+0x2f/0x50 [ 351.263572] page_fault+0x45/0x50 [ 351.263584] RIP: 94cbdce0:0x1c [ 351.267541] 0*16kB [ 351.272029] RSP: 94cbdde0:0000000000000000 EFLAGS: 7fff94cbdd60 [ 351.281991] Mem-Info: [ 351.295106] 0*32kB [ 351.305259] active_anon:11927 inactive_anon:8759 isolated_anon:0 [ 351.305259] active_file:41 inactive_file:5 isolated_file:0 [ 351.305259] unevictable:0 dirty:27 writeback:0 unstable:0 [ 351.305259] slab_reclaimable:13836 slab_unreclaimable:115320 [ 351.305259] mapped:52225 shmem:8980 pagetables:716 bounce:0 [ 351.305259] free:14234 free_pcp:22 free_cma:0 [ 351.317297] 0*64kB [ 351.330109] Node 0 active_anon:46808kB inactive_anon:26824kB active_file:4kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:208900kB dirty:0kB writeback:0kB shmem:27696kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 351.338994] 0*128kB [ 351.353409] Node 1 active_anon:900kB inactive_anon:8212kB active_file:144kB inactive_file:48kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:108kB writeback:0kB shmem:8224kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 351.367285] 0*256kB [ 351.384700] Node 0 [ 351.427147] 0*512kB [ 351.447412] DMA free:10960kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:4kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 351.483490] 0*1024kB [ 351.509899] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 351.515713] 0*2048kB [ 351.517391] Node 0 [ 351.517394] 0*4096kB = 0kB [ 351.519804] DMA32 free:18200kB min:36200kB low:45248kB high:54296kB active_anon:46808kB inactive_anon:26820kB active_file:4kB inactive_file:8kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7584kB pagetables:2624kB bounce:0kB free_pcp:88kB local_pcp:88kB free_cma:0kB [ 351.526672] Node 1 [ 351.556163] lowmem_reserve[]: 0 0 0 0 0 [ 351.562520] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 351.565283] Normal: [ 351.591214] lowmem_reserve[]: 0 0 0 0 0 [ 351.597550] Node 1 Normal free:27776kB min:53696kB low:67120kB high:80544kB active_anon:900kB inactive_anon:8212kB active_file:184kB inactive_file:20kB unevictable:0kB writepending:108kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:160kB pagetables:240kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 351.605634] 90*4kB [ 351.627366] lowmem_reserve[]: 0 0 0 0 0 [ 351.633661] Node 0 DMA: 2*4kB (ME) 1*8kB (M) 2*16kB (ME) 3*32kB (UME) 3*64kB (UME) 5*128kB (UME) 5*256kB (UME) 3*512kB (UME) 3*1024kB (UME) 2*2048kB (UE) 0*4096kB = 10960kB [ 351.644573] (UM) 85*8kB (UME) 55*16kB (UME) 40*32kB (UME) 18*64kB (UME) 146*128kB (UME) 7*256kB (UM) 4*512kB (UM) 1*1024kB (U) 0*2048kB 0*4096kB = 27904kB [ 351.651916] Node 0 DMA32: 1329*4kB (UME) 953*8kB (UMEH) 184*16kB (UME) 68*32kB (UM) 1*64kB (U) 0*128kB 1*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18380kB [ 351.680725] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 351.683397] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 351.694295] Node 1 Normal: 90*4kB (UM) 85*8kB (UME) 55*16kB (UME) 40*32kB (UME) 18*64kB (UME) 146*128kB (UME) 7*256kB (UM) 4*512kB (UM) 1*1024kB (U) 0*2048kB 0*4096kB = 27904kB [ 351.718178] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 351.725124] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 351.738001] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 351.743852] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 351.752526] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 351.767118] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 351.772420] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 351.778167] 9041 total pagecache pages [ 351.795571] 0 pages in swap cache [ 351.799150] Swap cache stats: add 0, delete 0, find 0/0 [ 351.799744] 9041 total pagecache pages [ 351.806808] Free swap = 0kB [ 351.810972] 0 pages in swap cache [ 351.814976] Swap cache stats: add 0, delete 0, find 0/0 [ 351.816019] Total swap = 0kB [ 351.820614] Free swap = 0kB [ 351.826064] 2097051 pages RAM [ 351.830115] 0 pages HighMem/MovableOnly [ 351.838882] 363849 pages reserved [ 351.839377] Total swap = 0kB [ 351.844591] 0 pages cma reserved [ 351.849370] Out of memory: Kill process 15149 (syz-executor.5) score 1004 or sacrifice child [ 351.849993] 2097051 pages RAM [ 351.869988] 0 pages HighMem/MovableOnly [ 351.870192] Killed process 15154 (syz-executor.5) total-vm:93252kB, anon-rss:152kB, file-rss:34820kB, shmem-rss:0kB [ 351.874118] 363849 pages reserved [ 351.874123] 0 pages cma reserved [ 351.923326] syz-executor.1 invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 351.959217] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 351.975347] CPU: 1 PID: 14930 Comm: syz-executor.1 Not tainted 4.14.232-syzkaller #0 [ 351.983303] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 351.992663] Call Trace: [ 351.995263] dump_stack+0x1b2/0x281 [ 351.998903] dump_header+0x178/0x82f [ 352.002624] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 352.007746] ? ___ratelimit+0x2cd/0x530 [ 352.011734] oom_kill_process.cold+0x10/0xa40 [ 352.016252] out_of_memory+0xe3e/0x1190 [ 352.020242] ? oom_killer_disable+0x1c0/0x1c0 [ 352.024746] ? mutex_trylock+0x152/0x1a0 [ 352.028845] __alloc_pages_nodemask+0x23e1/0x2720 [ 352.033711] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 352.038579] alloc_pages_current+0x155/0x260 [ 352.043006] filemap_fault+0x11a1/0x1ad0 [ 352.047088] ext4_filemap_fault+0x84/0xb0 [ 352.051261] __do_fault+0xfa/0x380 [ 352.054803] __handle_mm_fault+0x2497/0x4620 [ 352.059215] ? vm_insert_page+0x7c0/0x7c0 [ 352.063360] ? hrtimer_nanosleep+0x1ff/0x4b0 [ 352.067770] ? nanosleep_copyout+0x100/0x100 [ 352.072186] ? mark_held_locks+0xa6/0xf0 [ 352.076253] handle_mm_fault+0x455/0x9c0 [ 352.080320] __do_page_fault+0x549/0xad0 [ 352.084393] ? spurious_fault+0x640/0x640 [ 352.088564] ? do_page_fault+0x60/0x500 [ 352.092555] ? page_fault+0x2f/0x50 [ 352.096210] page_fault+0x45/0x50 [ 352.099661] RIP: 549a7:0x7 [ 352.102514] RSP: 0003:00007ffd577b4b3c EFLAGS: 00000032 [ 352.153285] Mem-Info: [ 352.168204] active_anon:11926 inactive_anon:8759 isolated_anon:0 [ 352.168204] active_file:37 inactive_file:16 isolated_file:0 [ 352.168204] unevictable:0 dirty:27 writeback:0 unstable:0 [ 352.168204] slab_reclaimable:13836 slab_unreclaimable:115172 [ 352.168204] mapped:52225 shmem:8980 pagetables:696 bounce:0 [ 352.168204] free:13931 free_pcp:78 free_cma:0 [ 352.201792] Node 0 active_anon:46804kB inactive_anon:26824kB active_file:4kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:208900kB dirty:0kB writeback:0kB shmem:27696kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 352.229716] Node 1 active_anon:900kB inactive_anon:8212kB active_file:144kB inactive_file:56kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:108kB writeback:0kB shmem:8224kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 352.256866] Node 0 DMA free:10960kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:4kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 352.291990] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 352.297062] Node 0 DMA32 free:18080kB min:36200kB low:45248kB high:54296kB active_anon:46804kB inactive_anon:26820kB active_file:4kB inactive_file:8kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7584kB pagetables:2544kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 352.370118] lowmem_reserve[]: 0 0 0 0 0 [ 352.374213] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 352.402302] lowmem_reserve[]: 0 0 0 0 0 [ 352.406330] Node 1 Normal free:26784kB min:53696kB low:67120kB high:80544kB active_anon:900kB inactive_anon:8212kB active_file:180kB inactive_file:40kB unevictable:0kB writepending:108kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:160kB pagetables:240kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 352.411029] syz-executor.1: [ 352.437532] lowmem_reserve[]: 0 0 0 0 0 [ 352.444858] Node 0 DMA: 2*4kB (ME) 1*8kB (M) 2*16kB (ME) 3*32kB (UME) 3*64kB (UME) 5*128kB (UME) 5*256kB (UME) 3*512kB (UME) 3*1024kB (UME) 2*2048kB (UE) 0*4096kB = 10960kB [ 352.461910] Node 0 DMA32: 1261*4kB (UME) 1151*8kB (UME) 199*16kB (UME) 69*32kB (UM) 1*64kB (U) 0*128kB 1*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 19964kB [ 352.476507] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 352.478098] page allocation failure: order:0 [ 352.487319] Node 1 Normal: 70*4kB (UM) 72*8kB (ME) 50*16kB (ME) 31*32kB (ME) 17*64kB (UME) 143*128kB (UME) 7*256kB (UM) 4*512kB (UM) 1*1024kB (U) 0*2048kB 0*4096kB = 26904kB [ 352.498139] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 352.508233] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 352.522954] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 352.524977] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 352.530066] CPU: 0 PID: 15200 Comm: syz-executor.1 Not tainted 4.14.232-syzkaller #0 [ 352.538698] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 352.546547] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 352.546555] Call Trace: [ 352.546579] dump_stack+0x1b2/0x281 [ 352.546597] warn_alloc.cold+0x96/0x1cc [ 352.555469] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 352.564808] ? zone_watermark_ok_safe+0x220/0x220 [ 352.564819] ? usleep_range+0x130/0x130 [ 352.564831] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 352.564846] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 352.567420] 9041 total pagecache pages [ 352.571083] ? run_timer_softirq+0x5a0/0x5a0 [ 352.571101] __alloc_pages_nodemask+0x2127/0x2720 [ 352.571124] ? lock_acquire+0x170/0x3f0 [ 352.575112] 0 pages in swap cache [ 352.583713] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 352.583724] ? ion_page_pool_alloc+0x9e/0x1b0 [ 352.583741] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 352.583757] ? __list_del_entry_valid+0xb3/0xf0 [ 352.588605] Swap cache stats: add 0, delete 0, find 0/0 [ 352.592595] alloc_pages_current+0x155/0x260 [ 352.592610] ion_page_pool_alloc+0x118/0x1b0 [ 352.592620] ion_system_heap_allocate+0x133/0x8c0 [ 352.592633] ? _raw_spin_unlock+0x29/0x40 [ 352.592645] ? _ion_heap_freelist_drain+0x6e/0x410 [ 352.597745] Free swap = 0kB [ 352.602783] ? ion_system_contig_heap_create+0x130/0x130 [ 352.602795] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 352.602806] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 352.602817] ion_alloc+0x27a/0x810 [ 352.602830] ? ion_dma_buf_release+0x40/0x40 [ 352.606708] Total swap = 0kB [ 352.611232] ? __might_fault+0x177/0x1b0 [ 352.611245] ion_ioctl+0xea/0x1f0 [ 352.611255] ? ion_query_heaps+0x360/0x360 [ 352.611269] ? ion_query_heaps+0x360/0x360 [ 352.616109] 2097051 pages RAM [ 352.620088] do_vfs_ioctl+0x75a/0xff0 [ 352.623567] 0 pages HighMem/MovableOnly [ 352.628391] ? ioctl_preallocate+0x1a0/0x1a0 [ 352.632908] 363849 pages reserved [ 352.638335] ? lock_downgrade+0x740/0x740 [ 352.643041] 0 pages cma reserved [ 352.648354] ? __fget+0x225/0x360 [ 352.652800] Out of memory (oom_kill_allocating_task): Kill process 14930 (syz-executor.1) score 0 or sacrifice child [ 352.657185] ? do_vfs_ioctl+0xff0/0xff0 [ 352.662103] Killed process 14930 (syz-executor.1) total-vm:93120kB, anon-rss:100kB, file-rss:34576kB, shmem-rss:0kB [ 352.666205] ? security_file_ioctl+0x83/0xb0 [ 352.681372] oom_reaper: reaped process 15154 (syz-executor.5), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 352.684583] SyS_ioctl+0x7f/0xb0 [ 352.789443] ? do_vfs_ioctl+0xff0/0xff0 [ 352.793422] do_syscall_64+0x1d5/0x640 [ 352.797312] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 352.802510] RIP: 0033:0x4665f9 [ 352.806472] RSP: 002b:00007f6d4d90d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 352.814203] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 352.821508] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000005 [ 352.828815] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 352.836091] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 352.843360] R13: 00007ffd577b487f R14: 00007f6d4d90d300 R15: 0000000000022000 [ 352.851930] Mem-Info: [ 352.854381] active_anon:11876 inactive_anon:8759 isolated_anon:0 [ 352.854381] active_file:49 inactive_file:14 isolated_file:9 [ 352.854381] unevictable:0 dirty:27 writeback:0 unstable:0 [ 352.854381] slab_reclaimable:13836 slab_unreclaimable:114730 [ 352.854381] mapped:43525 shmem:8980 pagetables:696 bounce:0 [ 352.854381] free:14397 free_pcp:87 free_cma:0 [ 352.884854] oom_reaper: reaped process 15155 (syz-executor.2), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 352.901071] Node 0 active_anon:46504kB inactive_anon:26824kB active_file:4kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:174100kB dirty:0kB writeback:0kB shmem:27696kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 352.928791] Node 1 active_anon:900kB inactive_anon:8212kB active_file:192kB inactive_file:48kB unevictable:0kB isolated(anon):0kB isolated(file):36kB mapped:0kB dirty:108kB writeback:0kB shmem:8224kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 352.955858] Node 0 DMA free:10960kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:4kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 352.982759] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 352.987811] Node 0 DMA32 free:18232kB min:36200kB low:45248kB high:54296kB active_anon:46504kB inactive_anon:26820kB active_file:4kB inactive_file:8kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7584kB pagetables:2544kB bounce:0kB free_pcp:120kB local_pcp:0kB free_cma:0kB [ 353.016558] lowmem_reserve[]: 0 0 0 0 0 [ 353.020653] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 353.046497] lowmem_reserve[]: 0 0 0 0 0 [ 353.050501] Node 1 Normal free:26820kB min:53696kB low:67120kB high:80544kB active_anon:880kB inactive_anon:8212kB active_file:160kB inactive_file:0kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:160kB pagetables:236kB bounce:0kB free_pcp:112kB local_pcp:0kB free_cma:0kB [ 353.079152] lowmem_reserve[]: 0 0 0 0 0 [ 353.083188] Node 0 DMA: 2*4kB (ME) 1*8kB (M) 2*16kB (ME) 3*32kB (UME) 3*64kB (UME) 5*128kB (UME) 5*256kB (UME) 3*512kB (UME) 3*1024kB (UME) 2*2048kB (UE) 0*4096kB = 10960kB [ 353.099344] Node 0 DMA32: 1251*4kB (UME) 890*8kB (UME) 208*16kB (UME) 69*32kB (UM) 1*64kB (U) 0*128kB 1*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 17980kB [ 353.114194] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 353.124372] syz-executor.5 invoked oom-killer: gfp_mask=0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null), order=0, oom_score_adj=1000 [ 353.125080] Node 1 Normal: 66*4kB (M) 69*8kB (ME) 52*16kB (UME) 33*32kB (UME) 17*64kB (UME) 138*128kB (UME) 7*256kB (UM) 4*512kB (UM) 1*1024kB (U) 0*2048kB 0*4096kB = 26320kB [ 353.154662] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 353.161202] syz-executor.2: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 353.163627] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 353.184087] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 353.192997] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 353.194818] syz-executor.5 cpuset= [ 353.201639] 9013 total pagecache pages [ 353.201650] 0 pages in swap cache [ 353.201656] Swap cache stats: add 0, delete 0, find 0/0 [ 353.201660] Free swap = 0kB [ 353.201663] Total swap = 0kB [ 353.201671] 2097051 pages RAM [ 353.201674] 0 pages HighMem/MovableOnly [ 353.201678] 363849 pages reserved [ 353.201680] 0 pages cma reserved [ 353.260643] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 353.283877] CPU: 0 PID: 15155 Comm: syz-executor.2 Not tainted 4.14.232-syzkaller #0 [ 353.291780] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 353.301149] Call Trace: [ 353.303781] dump_stack+0x1b2/0x281 [ 353.307423] warn_alloc.cold+0x96/0x1cc [ 353.311409] ? zone_watermark_ok_safe+0x220/0x220 [ 353.316261] ? usleep_range+0x130/0x130 [ 353.320261] ? queue_work_on+0x10d/0x1d0 [ 353.324326] ? _find_next_bit+0xdb/0x100 [ 353.328401] ? run_timer_softirq+0x5a0/0x5a0 [ 353.331058] / [ 353.332814] __alloc_pages_nodemask+0x2127/0x2720 [ 353.332834] ? lock_acquire+0x170/0x3f0 [ 353.334644] mems_allowed=0-1 [ 353.339484] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 353.356002] ? ion_page_pool_alloc+0x9e/0x1b0 [ 353.360513] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 353.365983] ? alloc_pages_current+0x37/0x260 [ 353.370517] alloc_pages_current+0x155/0x260 [ 353.374943] ion_page_pool_alloc+0x118/0x1b0 [ 353.379377] ion_system_heap_allocate+0x133/0x8c0 [ 353.384224] ? ion_alloc+0x187/0x810 [ 353.387941] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 353.393417] ? ion_system_contig_heap_create+0x130/0x130 [ 353.399058] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 353.404092] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 353.408942] ion_alloc+0x204/0x810 [ 353.412511] ? ion_dma_buf_release+0x40/0x40 [ 353.416944] ? __might_fault+0x177/0x1b0 [ 353.421019] ion_ioctl+0xea/0x1f0 [ 353.424481] ? ion_query_heaps+0x360/0x360 [ 353.428729] ? ion_query_heaps+0x360/0x360 [ 353.432969] do_vfs_ioctl+0x75a/0xff0 [ 353.436780] ? ioctl_preallocate+0x1a0/0x1a0 [ 353.441206] ? lock_downgrade+0x740/0x740 [ 353.445372] ? __fget+0x225/0x360 [ 353.448843] ? do_vfs_ioctl+0xff0/0xff0 [ 353.453089] ? security_file_ioctl+0x83/0xb0 [ 353.457514] SyS_ioctl+0x7f/0xb0 [ 353.460986] ? do_vfs_ioctl+0xff0/0xff0 [ 353.464987] do_syscall_64+0x1d5/0x640 [ 353.468892] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 353.474098] RIP: 0033:0x4665f9 [ 353.477395] RSP: 002b:00007ff3638e3188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 353.485110] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 353.492381] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000005 [ 353.499656] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 353.506963] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 353.514284] R13: 00007ffe909c1c6f R14: 00007ff3638e3300 R15: 0000000000022000 [ 353.521596] CPU: 1 PID: 15154 Comm: syz-executor.5 Not tainted 4.14.232-syzkaller #0 [ 353.529495] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 353.538861] Call Trace: [ 353.541456] dump_stack+0x1b2/0x281 [ 353.545104] dump_header+0x178/0x82f [ 353.548824] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 353.553943] ? ___ratelimit+0x2cd/0x530 [ 353.557930] oom_kill_process.cold+0x10/0xa40 [ 353.562465] out_of_memory+0xe3e/0x1190 [ 353.566462] ? oom_killer_disable+0x1c0/0x1c0 [ 353.570970] ? mutex_trylock+0x152/0x1a0 [ 353.575085] __alloc_pages_nodemask+0x23e1/0x2720 [ 353.579951] ? lock_acquire+0x170/0x3f0 [ 353.583951] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 353.588799] ? ion_page_pool_alloc+0x9e/0x1b0 [ 353.593311] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 353.598780] alloc_pages_current+0x155/0x260 [ 353.603197] ion_page_pool_alloc+0x118/0x1b0 [ 353.610224] ion_system_heap_allocate+0x133/0x8c0 [ 353.615075] ? ion_alloc+0x187/0x810 [ 353.618791] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 353.624244] ? ion_system_contig_heap_create+0x130/0x130 [ 353.629695] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 353.634723] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 353.639575] ion_alloc+0x204/0x810 [ 353.643127] ? ion_dma_buf_release+0x40/0x40 [ 353.647569] ? __might_fault+0x177/0x1b0 [ 353.651655] ion_ioctl+0xea/0x1f0 [ 353.655112] ? ion_query_heaps+0x360/0x360 [ 353.659356] ? ion_query_heaps+0x360/0x360 [ 353.663603] do_vfs_ioctl+0x75a/0xff0 [ 353.667417] ? ioctl_preallocate+0x1a0/0x1a0 [ 353.671829] ? lock_downgrade+0x740/0x740 [ 353.675988] ? __fget+0x225/0x360 [ 353.679532] ? do_vfs_ioctl+0xff0/0xff0 [ 353.683511] ? security_file_ioctl+0x83/0xb0 [ 353.687922] SyS_ioctl+0x7f/0xb0 [ 353.691290] ? do_vfs_ioctl+0xff0/0xff0 [ 353.695295] do_syscall_64+0x1d5/0x640 [ 353.699194] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 353.704413] RIP: 0033:0x4665f9 [ 353.707615] RSP: 002b:00007f8cc58ff188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 353.715333] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 353.724174] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000005 [ 353.731458] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 353.738730] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 353.746357] R13: 00007ffdcc2738ff R14: 00007f8cc58ff300 R15: 0000000000022000 [ 353.754775] Mem-Info: [ 353.757504] active_anon:11844 inactive_anon:8759 isolated_anon:0 [ 353.757504] active_file:467 inactive_file:495 isolated_file:0 [ 353.757504] unevictable:0 dirty:0 writeback:0 unstable:0 [ 353.757504] slab_reclaimable:13825 slab_unreclaimable:114704 [ 353.757504] mapped:44246 shmem:8980 pagetables:673 bounce:0 [ 353.757504] free:226775 free_pcp:225 free_cma:0 [ 353.791922] Node 0 active_anon:46496kB inactive_anon:26824kB active_file:12kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:174084kB dirty:0kB writeback:0kB shmem:27696kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 353.820309] Node 1 active_anon:880kB inactive_anon:8212kB active_file:1956kB inactive_file:2072kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:3100kB dirty:0kB writeback:0kB shmem:8224kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 353.848308] Node 0 DMA free:10960kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:4kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 353.874972] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 353.880185] Node 0 DMA32 free:26684kB min:36200kB low:45248kB high:54296kB active_anon:46496kB inactive_anon:26820kB active_file:12kB inactive_file:8kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7584kB pagetables:2456kB bounce:0kB free_pcp:432kB local_pcp:376kB free_cma:0kB [ 353.909628] lowmem_reserve[]: 0 0 0 0 0 [ 353.913860] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 353.939923] lowmem_reserve[]: 0 0 0 0 0 [ 353.944050] Node 1 Normal free:446204kB min:53696kB low:67120kB high:80544kB active_anon:780kB inactive_anon:8212kB active_file:2156kB inactive_file:3072kB unevictable:0kB writepending:148kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:160kB pagetables:236kB bounce:0kB free_pcp:560kB local_pcp:484kB free_cma:0kB [ 353.973834] lowmem_reserve[]: 0 0 0 0 0 [ 353.978052] Node 0 DMA: 2*4kB (ME) 1*8kB (M) 2*16kB (ME) 3*32kB (UME) 3*64kB (UME) 5*128kB (UME) 5*256kB (UME) 3*512kB (UME) 3*1024kB (UME) 2*2048kB (UE) 0*4096kB = 10960kB [ 353.994466] systemd[1]: systemd-journald.service: Service has no hold-off time, scheduling restart. [ 353.994564] Node 0 DMA32: 1251*4kB (UME) 889*8kB (UME) 208*16kB (UME) 69*32kB (UM) 2*64kB (U) 0*128kB 1*256kB (U) 1*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 18548kB [ 354.018865] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 354.025661] systemd[1]: Stopped Flush Journal to Persistent Storage. [ 354.029754] Node 1 Normal: 1*4kB (U) 11*8kB (UME) 9*16kB (UE) 7*32kB (UE) 33*64kB (UE) 939*128kB (UME) 554*256kB (UM) 45*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 287628kB [ 354.055388] systemd[1]: Stopping Flush Journal to Persistent Storage... [ 354.061165] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 354.071206] systemd[1]: Stopped Journal Service. [ 354.084510] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 354.091447] systemd[1]: Starting Journal Service... [ 354.098502] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 354.120581] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 354.129486] 10673 total pagecache pages [ 354.138978] 0 pages in swap cache [ 354.142590] Swap cache stats: add 0, delete 0, find 0/0 [ 354.147969] Free swap = 0kB [ 354.165844] Total swap = 0kB [ 354.169598] 2097051 pages RAM [ 354.185953] 0 pages HighMem/MovableOnly [ 354.189954] 363849 pages reserved [ 354.215280] 0 pages cma reserved [ 354.219136] Out of memory (oom_kill_allocating_task): Kill process 15154 (syz-executor.5) score 0 or sacrifice child [ 354.254940] Killed process 15154 (syz-executor.5) total-vm:93252kB, anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 354.278056] syz-executor.5: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 354.341050] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 354.346223] CPU: 0 PID: 15154 Comm: syz-executor.5 Not tainted 4.14.232-syzkaller #0 [ 354.354151] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 354.363688] Call Trace: [ 354.366289] dump_stack+0x1b2/0x281 [ 354.369938] warn_alloc.cold+0x96/0x1cc [ 354.373926] ? lock_downgrade+0x740/0x740 [ 354.378088] ? zone_watermark_ok_safe+0x220/0x220 [ 354.382967] ? wake_up_q+0x82/0xd0 [ 354.386526] ? wait_for_completion_io+0x10/0x10 [ 354.391236] __alloc_pages_nodemask+0x2127/0x2720 [ 354.396109] ? lock_acquire+0x170/0x3f0 [ 354.400123] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 354.404974] ? ion_page_pool_alloc+0x9e/0x1b0 [ 354.409491] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 354.414981] alloc_pages_current+0x155/0x260 [ 354.419403] ion_page_pool_alloc+0x118/0x1b0 [ 354.423830] ion_system_heap_allocate+0x133/0x8c0 [ 354.428826] ? ion_alloc+0x187/0x810 [ 354.432548] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 354.438037] ? ion_system_contig_heap_create+0x130/0x130 [ 354.443493] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 354.448533] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 354.453393] ion_alloc+0x204/0x810 [ 354.457036] ? ion_dma_buf_release+0x40/0x40 [ 354.461457] ? __might_fault+0x177/0x1b0 [ 354.465719] ion_ioctl+0xea/0x1f0 [ 354.469192] ? ion_query_heaps+0x360/0x360 [ 354.473433] ? ion_query_heaps+0x360/0x360 [ 354.477684] do_vfs_ioctl+0x75a/0xff0 [ 354.481516] ? ioctl_preallocate+0x1a0/0x1a0 [ 354.485925] ? lock_downgrade+0x740/0x740 [ 354.490087] ? __fget+0x225/0x360 [ 354.493542] ? do_vfs_ioctl+0xff0/0xff0 [ 354.497527] ? security_file_ioctl+0x83/0xb0 [ 354.501946] SyS_ioctl+0x7f/0xb0 [ 354.505325] ? do_vfs_ioctl+0xff0/0xff0 [ 354.509316] do_syscall_64+0x1d5/0x640 [ 354.513218] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 354.518414] RIP: 0033:0x4665f9 [ 354.521693] RSP: 002b:00007f8cc58ff188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 354.529409] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 354.536683] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000005 [ 354.543955] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 354.547698] systemd-journald[15204]: File /run/log/journal/04d8c135ee6b410280ba31a58c89679d/system.journal corrupted or uncleanly shut down, renaming and replacing. [ 354.551252] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 354.551258] R13: 00007ffdcc2738ff R14: 00007f8cc58ff300 R15: 0000000000022000 [ 354.685794] warn_alloc_show_mem: 1 callbacks suppressed [ 354.685799] Mem-Info: [ 354.711062] active_anon:11929 inactive_anon:10784 isolated_anon:0 [ 354.711062] active_file:1051 inactive_file:1367 isolated_file:0 [ 354.711062] unevictable:0 dirty:46 writeback:0 unstable:0 [ 354.711062] slab_reclaimable:13825 slab_unreclaimable:114843 [ 354.711062] mapped:45279 shmem:11005 pagetables:749 bounce:0 [ 354.711062] free:206741 free_pcp:643 free_cma:0 [ 354.749445] Node 0 active_anon:46740kB inactive_anon:34924kB active_file:508kB inactive_file:2212kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:175884kB dirty:4kB writeback:0kB shmem:35796kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 354.783161] Node 1 active_anon:976kB inactive_anon:8212kB active_file:3696kB inactive_file:3256kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:5232kB dirty:180kB writeback:0kB shmem:8224kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 354.885323] Node 0 DMA free:11760kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:4kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 354.951561] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 354.956663] Node 0 DMA32 free:412020kB min:36200kB low:45248kB high:54296kB active_anon:46740kB inactive_anon:34920kB active_file:508kB inactive_file:2212kB unevictable:0kB writepending:4kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7584kB pagetables:2604kB bounce:0kB free_pcp:1416kB local_pcp:684kB free_cma:0kB [ 354.993651] lowmem_reserve[]: 0 0 0 0 0 [ 354.997681] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 355.027935] lowmem_reserve[]: 0 0 0 0 0 [ 355.032059] Node 1 Normal free:663324kB min:53696kB low:67120kB high:80544kB active_anon:1012kB inactive_anon:8152kB active_file:3704kB inactive_file:3232kB unevictable:0kB writepending:180kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:160kB pagetables:364kB bounce:0kB free_pcp:1340kB local_pcp:644kB free_cma:0kB [ 355.080776] systemd[1]: Starting Load/Save RF Kill Switch Status... [ 355.125617] syz-executor.1 (14930) used greatest stack depth: 24952 bytes left 11:45:10 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x10001, 0x400) syz_open_dev$vcsn(&(0x7f0000000140), 0x7, 0x24c042) ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r0, 0x7a9, &(0x7f0000000040)={{@my=0x0, 0x7f}, 0x40, 0x3, 0x0, 0x6, 0xf1, 0x5, 0x39, 0x3}) r1 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0), 0x20000, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000100)={0x80000001, 0x27}) 11:45:10 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendto(r0, &(0x7f0000000380)="f6a0", 0x2, 0x8000, 0x0, 0x0) 11:45:10 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x10001, 0x400) r1 = syz_open_dev$vcsn(&(0x7f0000000140), 0x7, 0x24c042) ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r0, 0x7a9, &(0x7f0000000040)={{@my=0x0, 0x7f}, 0x40, 0x3, 0x0, 0x6, 0xf1, 0x5, 0x39, 0x3}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(0xffffffffffffffff, 0x7a8, &(0x7f0000000080)={{@host, 0x20000}, @hyper, 0x4, 0x9, 0x0, 0x5, 0x6, 0xd350}) socketpair(0x6, 0x80000, 0x10001, &(0x7f0000000180)) ioctl$SNAPSHOT_ATOMIC_RESTORE(r1, 0x3304) r2 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0), 0x20000, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000100)={0x80000001, 0x27}) 11:45:10 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x10001, 0x400) r1 = syz_open_dev$vcsn(&(0x7f0000000140), 0x7, 0x24c042) ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r0, 0x7a9, &(0x7f0000000040)={{@my=0x0, 0x7f}, 0x40, 0x3, 0x0, 0x6, 0xf1, 0x5, 0x39, 0x3}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(0xffffffffffffffff, 0x7a8, &(0x7f0000000080)={{@host, 0x20000}, @hyper, 0x4, 0x9, 0x0, 0x5, 0x6, 0xd350}) socketpair(0x6, 0x80000, 0x10001, &(0x7f0000000180)) ioctl$SNAPSHOT_ATOMIC_RESTORE(r1, 0x3304) socket$nl_route(0x10, 0x3, 0x0) r2 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0), 0x20000, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000100)={0x80000001, 0x27}) [ 355.216385] lowmem_reserve[]: 0 0 0 0 0 [ 355.224702] Node 0 DMA: 119*4kB (UME) 6*8kB (UM) 4*16kB (UME) 7*32kB (UME) 2*64kB (ME) 2*128kB (ME) 5*256kB (UME) 3*512kB (UME) 3*1024kB (UME) 2*2048kB (UE) 0*4096kB = 11180kB [ 355.242814] systemd[1]: Started Load/Save RF Kill Switch Status. [ 355.278940] Node 0 DMA32: 3575*4kB (UME) 5262*8kB (UME) 4271*16kB (UE) 3699*32kB (UME) 1*64kB (M) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 243164kB 11:45:10 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendto(r0, &(0x7f0000000380)="f6a0", 0x2, 0x8000, 0x0, 0x0) [ 355.353239] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB 11:45:10 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendto(r0, &(0x7f0000000380)="f6a073b72742b506f3a504992931", 0xe, 0x8000, 0x0, 0x0) [ 355.409986] Node 1 Normal: 2128*4kB (UM) 2349*8kB (UME) 2136*16kB (UME) 2332*32kB (UME) 8*64kB (ME) 841*128kB (UE) 261*256kB (U) 131*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 378152kB 11:45:10 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendto(r0, &(0x7f0000000380)="f6a073b72742b506f3a504992931", 0xe, 0x8000, 0x0, 0x0) [ 355.508420] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 355.524266] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB 11:45:10 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendto(r0, &(0x7f0000000380)="f6a073b72742b506f3a504992931", 0xe, 0x8000, 0x0, 0x0) [ 355.590844] syz-executor.2: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 355.632241] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 355.642158] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 355.647579] CPU: 1 PID: 15155 Comm: syz-executor.2 Not tainted 4.14.232-syzkaller #0 [ 355.655503] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 355.664894] Call Trace: [ 355.667501] dump_stack+0x1b2/0x281 [ 355.671141] warn_alloc.cold+0x96/0x1cc [ 355.675125] ? zone_watermark_ok_safe+0x220/0x220 [ 355.679924] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 355.680679] __alloc_pages_nodemask+0x2127/0x2720 [ 355.694105] ? _raw_spin_unlock_irq+0x24/0x80 [ 355.698638] ? lock_acquire+0x170/0x3f0 [ 355.702916] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 355.707803] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 355.710226] 17287 total pagecache pages [ 355.713439] ? __mutex_unlock_slowpath+0x75/0x770 [ 355.713454] alloc_pages_current+0x155/0x260 [ 355.713468] ion_page_pool_alloc+0x118/0x1b0 [ 355.713478] ion_system_heap_allocate+0x133/0x8c0 [ 355.713488] ? _raw_spin_unlock+0x29/0x40 [ 355.713496] ? _ion_heap_freelist_drain+0x6e/0x410 [ 355.713505] ? ion_system_contig_heap_create+0x130/0x130 [ 355.713516] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 355.713526] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 355.713536] ion_alloc+0x27a/0x810 [ 355.713548] ? ion_dma_buf_release+0x40/0x40 [ 355.726087] 0 pages in swap cache [ 355.726763] ? __might_fault+0x177/0x1b0 [ 355.745947] Swap cache stats: add 0, delete 0, find 0/0 [ 355.750690] ion_ioctl+0xea/0x1f0 [ 355.750703] ? ion_query_heaps+0x360/0x360 [ 355.750714] ? ion_query_heaps+0x360/0x360 [ 355.790614] Free swap = 0kB [ 355.791602] do_vfs_ioctl+0x75a/0xff0 [ 355.791615] ? ioctl_preallocate+0x1a0/0x1a0 [ 355.791625] ? lock_downgrade+0x740/0x740 [ 355.791637] ? __fget+0x225/0x360 [ 355.791646] ? do_vfs_ioctl+0xff0/0xff0 [ 355.791659] ? security_file_ioctl+0x83/0xb0 [ 355.791669] SyS_ioctl+0x7f/0xb0 [ 355.791677] ? do_vfs_ioctl+0xff0/0xff0 [ 355.791688] do_syscall_64+0x1d5/0x640 [ 355.791703] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 355.800736] Total swap = 0kB [ 355.802731] RIP: 0033:0x4665f9 [ 355.802736] RSP: 002b:00007ff3638e3188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 355.802744] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 355.802750] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000005 [ 355.802755] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 355.802760] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 355.802764] R13: 00007ffe909c1c6f R14: 00007ff3638e3300 R15: 0000000000022000 [ 355.973702] syz-executor.3: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 355.974027] syz-executor.4: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 356.003288] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 356.007077] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 356.014169] CPU: 1 PID: 15218 Comm: syz-executor.3 Not tainted 4.14.232-syzkaller #0 [ 356.022064] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 356.031431] Call Trace: [ 356.034046] dump_stack+0x1b2/0x281 [ 356.037669] warn_alloc.cold+0x96/0x1cc [ 356.041645] ? zone_watermark_ok_safe+0x220/0x220 [ 356.046496] __alloc_pages_nodemask+0x2127/0x2720 [ 356.051354] ? lock_acquire+0x170/0x3f0 [ 356.055325] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 356.060167] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 356.065645] ? __mutex_unlock_slowpath+0x75/0x770 [ 356.066015] 2097051 pages RAM [ 356.070491] alloc_pages_current+0x155/0x260 [ 356.070507] ion_page_pool_alloc+0x118/0x1b0 [ 356.070517] ion_system_heap_allocate+0x133/0x8c0 [ 356.070527] ? ion_alloc+0x187/0x810 [ 356.080339] Mem-Info: [ 356.082407] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 356.082419] ? ion_system_contig_heap_create+0x130/0x130 [ 356.082429] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 356.082441] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 356.082458] ion_alloc+0x204/0x810 [ 356.082472] ? ion_dma_buf_release+0x40/0x40 [ 356.082484] ? __might_fault+0x177/0x1b0 [ 356.082496] ion_ioctl+0xea/0x1f0 [ 356.082505] ? ion_query_heaps+0x360/0x360 [ 356.082516] ? ion_query_heaps+0x360/0x360 [ 356.082526] do_vfs_ioctl+0x75a/0xff0 [ 356.082537] ? ioctl_preallocate+0x1a0/0x1a0 [ 356.082550] ? lock_downgrade+0x740/0x740 [ 356.096673] 0 pages HighMem/MovableOnly [ 356.099239] ? __fget+0x225/0x360 [ 356.099252] ? do_vfs_ioctl+0xff0/0xff0 [ 356.099265] ? security_file_ioctl+0x83/0xb0 [ 356.099277] SyS_ioctl+0x7f/0xb0 [ 356.114117] active_anon:12007 inactive_anon:10786 isolated_anon:0 [ 356.114117] active_file:1880 inactive_file:3802 isolated_file:30 [ 356.114117] unevictable:0 dirty:45 writeback:24 unstable:0 [ 356.114117] slab_reclaimable:13822 slab_unreclaimable:117809 [ 356.114117] mapped:39566 shmem:11026 pagetables:733 bounce:0 [ 356.114117] free:92689 free_pcp:227 free_cma:0 [ 356.114612] ? do_vfs_ioctl+0xff0/0xff0 [ 356.125999] Node 0 active_anon:47156kB inactive_anon:34996kB active_file:4460kB inactive_file:13164kB unevictable:0kB isolated(anon):0kB isolated(file):48kB mapped:153268kB dirty:104kB writeback:92kB shmem:35888kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 356.126581] do_syscall_64+0x1d5/0x640 [ 356.134549] 363849 pages reserved [ 356.138485] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 356.138496] RIP: 0033:0x4665f9 [ 356.138501] RSP: 002b:00007f7215804188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 356.146896] Node 1 active_anon:872kB inactive_anon:8148kB active_file:3060kB inactive_file:2044kB unevictable:0kB isolated(anon):0kB isolated(file):72kB mapped:4996kB dirty:76kB writeback:4kB shmem:8216kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 356.150855] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 356.150861] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000005 [ 356.150866] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 356.150872] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 356.150877] R13: 00007ffdb21b4b4f R14: 00007f7215804300 R15: 0000000000022000 [ 356.241983] CPU: 1 PID: 15220 Comm: syz-executor.4 Not tainted 4.14.232-syzkaller #0 [ 356.243570] Node 0 [ 356.245698] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 356.245703] Call Trace: [ 356.245722] dump_stack+0x1b2/0x281 [ 356.245735] warn_alloc.cold+0x96/0x1cc [ 356.250990] DMA free:10988kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:4kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 356.261846] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 356.291079] 0 pages cma reserved [ 356.297139] ? zone_watermark_ok_safe+0x220/0x220 [ 356.297164] __alloc_pages_nodemask+0x2127/0x2720 [ 356.310152] systemd[1]: Started Journal Service. [ 356.311706] ? __schedule+0x893/0x1de0 [ 356.311724] ? lock_acquire+0x170/0x3f0 [ 356.311741] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 356.311756] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 356.311770] ? __mutex_unlock_slowpath+0x75/0x770 [ 356.354411] lowmem_reserve[]: [ 356.356971] alloc_pages_current+0x155/0x260 [ 356.356986] ion_page_pool_alloc+0x118/0x1b0 [ 356.413140] 0 [ 356.413436] ion_system_heap_allocate+0x133/0x8c0 [ 356.423788] 2717 [ 356.428567] ? ion_alloc+0x187/0x810 [ 356.428579] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 356.428591] ? ion_system_contig_heap_create+0x130/0x130 [ 356.439453] 2718 [ 356.440499] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 356.445668] 2718 [ 356.447482] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 356.447495] ion_alloc+0x204/0x810 [ 356.451606] 2718 [ 356.453255] ? ion_dma_buf_release+0x40/0x40 [ 356.453269] ? __might_fault+0x177/0x1b0 [ 356.464160] ion_ioctl+0xea/0x1f0 [ 356.464170] ? ion_query_heaps+0x360/0x360 [ 356.471349] Node 0 [ 356.471837] ? ion_query_heaps+0x360/0x360 [ 356.473958] DMA32 free:217500kB min:36200kB low:45248kB high:54296kB active_anon:47416kB inactive_anon:35008kB active_file:4496kB inactive_file:13184kB unevictable:0kB writepending:92kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7584kB pagetables:2896kB bounce:0kB free_pcp:816kB local_pcp:196kB free_cma:0kB [ 356.478733] do_vfs_ioctl+0x75a/0xff0 [ 356.478746] ? ioctl_preallocate+0x1a0/0x1a0 [ 356.478759] ? lock_downgrade+0x740/0x740 [ 356.492353] lowmem_reserve[]: [ 356.492879] ? __fget+0x225/0x360 [ 356.499635] 0 [ 356.500564] ? do_vfs_ioctl+0xff0/0xff0 [ 356.506130] 0 [ 356.507009] ? security_file_ioctl+0x83/0xb0 [ 356.566868] SyS_ioctl+0x7f/0xb0 [ 356.567726] 0 [ 356.570246] ? do_vfs_ioctl+0xff0/0xff0 [ 356.570260] do_syscall_64+0x1d5/0x640 [ 356.570275] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 356.577606] 0 [ 356.580026] RIP: 0033:0x4665f9 [ 356.580031] RSP: 002b:00007f9108899188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 356.593014] 0 [ 356.598084] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 356.598091] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000006 [ 356.598095] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 356.598100] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 356.598105] R13: 00007fffb2c94dcf R14: 00007f9108899300 R15: 0000000000022000 [ 356.640199] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 356.663878] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 356.671091] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 356.693769] lowmem_reserve[]: 0 0 0 0 0 [ 356.727445] Node 1 Normal free:136368kB min:53696kB low:67120kB high:80544kB active_anon:788kB inactive_anon:8144kB active_file:3752kB inactive_file:1408kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:160kB pagetables:124kB bounce:0kB free_pcp:164kB local_pcp:52kB free_cma:0kB [ 356.786827] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 356.798295] lowmem_reserve[]: 0 0 0 0 0 [ 356.804408] Node 0 DMA: 119*4kB (UME) 6*8kB (UM) 4*16kB (UME) 7*32kB (UME) 3*64kB (UME) 2*128kB (ME) 4*256kB (UME) 3*512kB (UME) 3*1024kB (UME) 2*2048kB (UE) 0*4096kB = 10988kB [ 356.823161] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 356.832700] Node 0 DMA32: 1*4kB (U) 855*8kB (UE) 4438*16kB (UE) 3729*32kB (UE) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 197180kB [ 356.861289] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 356.871377] device bridge_slave_1 left promiscuous mode [ 356.872372] Node 1 [ 356.877700] bridge0: port 2(bridge_slave_1) entered disabled state [ 356.878417] Normal: [ 356.902007] device bridge_slave_0 left promiscuous mode [ 356.910182] bridge0: port 1(bridge_slave_0) entered disabled state [ 356.921817] 2114*4kB (UM) 2365*8kB (UM) 2136*16kB (UM) 2332*32kB (U) 1*64kB (M) 1*128kB (M) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 136368kB [ 356.935678] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 356.945568] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 356.954977] device veth1_macvtap left promiscuous mode [ 356.959254] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 356.960300] device veth0_macvtap left promiscuous mode [ 356.971242] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 356.996566] 17327 total pagecache pages [ 357.011926] 0 pages in swap cache [ 357.018815] Swap cache stats: add 0, delete 0, find 0/0 [ 357.029253] device veth1_vlan left promiscuous mode [ 357.038496] device veth0_vlan left promiscuous mode [ 357.039171] Free swap = 0kB [ 357.048184] Total swap = 0kB [ 357.061923] 2097051 pages RAM [ 357.065147] 0 pages HighMem/MovableOnly [ 357.074866] 363849 pages reserved [ 357.083022] 0 pages cma reserved [ 357.279634] device hsr_slave_1 left promiscuous mode [ 357.308869] device hsr_slave_0 left promiscuous mode [ 357.352101] team0 (unregistering): Port device team_slave_1 removed [ 357.370020] team0 (unregistering): Port device team_slave_0 removed [ 357.380043] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 357.421818] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 357.484366] bond0 (unregistering): Released all slaves [ 357.535645] syz-executor.5: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 357.580695] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 357.604017] CPU: 0 PID: 15154 Comm: syz-executor.5 Not tainted 4.14.232-syzkaller #0 [ 357.611964] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 357.622053] Call Trace: [ 357.624717] dump_stack+0x1b2/0x281 [ 357.628370] warn_alloc.cold+0x96/0x1cc [ 357.632363] ? zone_watermark_ok_safe+0x220/0x220 [ 357.637268] __alloc_pages_nodemask+0x2127/0x2720 [ 357.642161] ? lock_acquire+0x170/0x3f0 [ 357.646159] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 357.651027] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 357.656597] ? __mutex_unlock_slowpath+0x75/0x770 [ 357.661454] ? retint_kernel+0x2d/0x2d [ 357.665375] alloc_pages_current+0x155/0x260 [ 357.669806] ion_page_pool_alloc+0x118/0x1b0 [ 357.674219] ion_system_heap_allocate+0x133/0x8c0 [ 357.679142] ? _raw_spin_unlock+0x29/0x40 [ 357.683294] ? _ion_heap_freelist_drain+0x6e/0x410 [ 357.688240] ? ion_system_contig_heap_create+0x130/0x130 [ 357.694099] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 357.699265] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 357.704947] ion_alloc+0x27a/0x810 [ 357.708536] ? ion_dma_buf_release+0x40/0x40 [ 357.712958] ? __might_fault+0x177/0x1b0 [ 357.717114] ion_ioctl+0xea/0x1f0 [ 357.720671] ? ion_query_heaps+0x360/0x360 [ 357.724939] ? ion_query_heaps+0x360/0x360 [ 357.729186] do_vfs_ioctl+0x75a/0xff0 [ 357.732989] ? ioctl_preallocate+0x1a0/0x1a0 [ 357.737414] ? lock_downgrade+0x740/0x740 [ 357.742171] ? __fget+0x225/0x360 [ 357.745621] ? do_vfs_ioctl+0xff0/0xff0 [ 357.749597] ? security_file_ioctl+0x83/0xb0 [ 357.754006] SyS_ioctl+0x7f/0xb0 [ 357.757364] ? do_vfs_ioctl+0xff0/0xff0 [ 357.761334] do_syscall_64+0x1d5/0x640 [ 357.765223] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 357.770410] RIP: 0033:0x4665f9 [ 357.773590] RSP: 002b:00007f8cc58ff188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 357.781297] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 357.788664] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000005 [ 357.799166] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 357.806466] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 357.813739] R13: 00007ffdcc2738ff R14: 00007f8cc58ff300 R15: 0000000000022000 [ 357.979109] oom_reaper: reaped process 15220 (syz-executor.4), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 358.029081] systemd-rfkill invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 358.068381] systemd-rfkill cpuset=/ mems_allowed=0-1 [ 358.073691] CPU: 1 PID: 15207 Comm: systemd-rfkill Not tainted 4.14.232-syzkaller #0 [ 358.080473] warn_alloc_show_mem: 2 callbacks suppressed [ 358.080477] Mem-Info: [ 358.081576] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 358.081581] Call Trace: [ 358.081602] dump_stack+0x1b2/0x281 [ 358.081614] dump_header+0x178/0x82f [ 358.081624] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 358.081632] ? ___ratelimit+0x2cd/0x530 [ 358.081642] oom_kill_process.cold+0x10/0xa40 [ 358.081661] out_of_memory+0xe3e/0x1190 [ 358.081674] ? oom_killer_disable+0x1c0/0x1c0 [ 358.081681] ? mutex_trylock+0x152/0x1a0 [ 358.081692] __alloc_pages_nodemask+0x23e1/0x2720 [ 358.081711] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 358.101110] syz-executor.2: [ 358.101445] alloc_pages_current+0x155/0x260 [ 358.105044] page allocation failure: order:0 [ 358.108758] filemap_fault+0x11a1/0x1ad0 [ 358.130152] active_anon:12040 inactive_anon:10790 isolated_anon:0 [ 358.130152] active_file:12 inactive_file:13 isolated_file:0 [ 358.130152] unevictable:0 dirty:0 writeback:0 unstable:0 [ 358.130152] slab_reclaimable:13745 slab_unreclaimable:118297 [ 358.130152] mapped:43959 shmem:11025 pagetables:762 bounce:0 [ 358.130152] free:13748 free_pcp:34 free_cma:0 [ 358.130826] ext4_filemap_fault+0x84/0xb0 [ 358.159340] Node 0 active_anon:47424kB inactive_anon:35016kB active_file:48kB inactive_file:48kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:175836kB dirty:0kB writeback:0kB shmem:35892kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 358.160574] __do_fault+0xfa/0x380 [ 358.220262] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 358.225609] __handle_mm_fault+0x2497/0x4620 [ 358.225619] ? vm_insert_page+0x7c0/0x7c0 [ 358.225628] ? compat_poll_select_copy_remaining+0x2c0/0x2c0 [ 358.225638] ? ktime_get_ts64+0x261/0x3a0 [ 358.225651] ? mark_held_locks+0xa6/0xf0 [ 358.225661] handle_mm_fault+0x455/0x9c0 [ 358.225672] __do_page_fault+0x549/0xad0 [ 358.225683] ? spurious_fault+0x640/0x640 [ 358.225692] ? do_page_fault+0x60/0x500 [ 358.225701] ? page_fault+0x2f/0x50 [ 358.225708] page_fault+0x45/0x50 [ 358.225716] RIP: c5edb6d0:0x1 [ 358.225720] RSP: ad970040:00007ffec5edb6d8 EFLAGS: 0000000b [ 358.226264] syz-executor.4: [ 358.241146] (null) [ 358.289681] page allocation failure: order:0 [ 358.297006] Node 1 active_anon:736kB inactive_anon:8144kB active_file:0kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:8208kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 358.309011] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 358.334159] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 358.348694] CPU: 0 PID: 15155 Comm: syz-executor.2 Not tainted 4.14.232-syzkaller #0 [ 358.356576] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 358.366019] Call Trace: [ 358.368618] dump_stack+0x1b2/0x281 [ 358.371081] (null) [ 358.372243] warn_alloc.cold+0x96/0x1cc [ 358.374383] syz-executor.4 cpuset= [ 358.378351] ? zone_watermark_ok_safe+0x220/0x220 [ 358.378353] / mems_allowed=0-1 [ 358.381885] ? usleep_range+0x130/0x130 [ 358.381895] ? try_to_free_pages+0x23f/0x6e0 [ 358.381905] ? _find_next_bit+0xdb/0x100 [ 358.381914] ? run_timer_softirq+0x5a0/0x5a0 [ 358.381930] __alloc_pages_nodemask+0x2127/0x2720 [ 358.381947] ? lock_acquire+0x170/0x3f0 [ 358.415857] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 358.420705] ? ion_page_pool_alloc+0x9e/0x1b0 [ 358.425213] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 358.430695] alloc_pages_current+0x155/0x260 [ 358.435123] ion_page_pool_alloc+0x118/0x1b0 [ 358.439548] ion_system_heap_allocate+0x133/0x8c0 [ 358.444409] ? _raw_spin_unlock+0x29/0x40 [ 358.448583] ? _ion_heap_freelist_drain+0x6e/0x410 [ 358.453521] ? ion_system_contig_heap_create+0x130/0x130 [ 358.459000] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 358.464032] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 358.468885] ion_alloc+0x27a/0x810 [ 358.472443] ? ion_dma_buf_release+0x40/0x40 [ 358.476850] ? __might_fault+0x177/0x1b0 [ 358.480906] ion_ioctl+0xea/0x1f0 [ 358.484361] ? ion_query_heaps+0x360/0x360 [ 358.488613] ? ion_query_heaps+0x360/0x360 [ 358.492850] do_vfs_ioctl+0x75a/0xff0 [ 358.496668] ? ioctl_preallocate+0x1a0/0x1a0 [ 358.501072] ? lock_downgrade+0x740/0x740 [ 358.505225] ? __fget+0x225/0x360 [ 358.508678] ? do_vfs_ioctl+0xff0/0xff0 [ 358.512694] ? security_file_ioctl+0x83/0xb0 [ 358.517106] SyS_ioctl+0x7f/0xb0 [ 358.520470] ? do_vfs_ioctl+0xff0/0xff0 [ 358.524443] do_syscall_64+0x1d5/0x640 [ 358.528333] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 358.533516] RIP: 0033:0x4665f9 [ 358.536717] RSP: 002b:00007ff3638e3188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 358.544441] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 358.552412] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000005 [ 358.559686] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 358.567141] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 358.574442] R13: 00007ffe909c1c6f R14: 00007ff3638e3300 R15: 0000000000022000 [ 358.591559] Node 0 DMA free:10960kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:4kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 358.611866] CPU: 1 PID: 15220 Comm: syz-executor.4 Not tainted 4.14.232-syzkaller #0 [ 358.623448] lowmem_reserve[]: [ 358.625891] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 358.625901] 0 [ 358.629003] Call Trace: [ 358.643363] dump_stack+0x1b2/0x281 [ 358.644471] 2717 2718 2718 [ 358.647016] warn_alloc.cold+0x96/0x1cc [ 358.647029] ? zone_watermark_ok_safe+0x220/0x220 [ 358.649944] 2718 [ 358.654002] ? usleep_range+0x130/0x130 [ 358.654012] ? try_to_free_pages+0x23f/0x6e0 [ 358.654022] ? _find_next_bit+0xdb/0x100 [ 358.654031] ? run_timer_softirq+0x5a0/0x5a0 [ 358.654047] __alloc_pages_nodemask+0x2127/0x2720 [ 358.654064] ? lock_acquire+0x170/0x3f0 [ 358.654078] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 358.654087] ? ion_page_pool_alloc+0x9e/0x1b0 [ 358.654101] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 358.654118] alloc_pages_current+0x155/0x260 [ 358.654129] ion_page_pool_alloc+0x118/0x1b0 [ 358.654141] ion_system_heap_allocate+0x133/0x8c0 [ 358.661043] ? ion_alloc+0x187/0x810 [ 358.661055] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 358.661064] ? ion_system_contig_heap_create+0x130/0x130 [ 358.661073] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 358.661084] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 358.661094] ion_alloc+0x204/0x810 [ 358.661107] ? ion_dma_buf_release+0x40/0x40 [ 358.661119] ? __might_fault+0x177/0x1b0 [ 358.661133] ion_ioctl+0xea/0x1f0 [ 358.667382] Node 0 [ 358.669528] ? ion_query_heaps+0x360/0x360 [ 358.677067] DMA32 free:17896kB min:36200kB low:45248kB high:54296kB active_anon:47424kB inactive_anon:35012kB active_file:48kB inactive_file:48kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7616kB pagetables:2924kB bounce:0kB free_pcp:136kB local_pcp:16kB free_cma:0kB [ 358.678244] ? ion_query_heaps+0x360/0x360 [ 358.685314] Mem-Info: [ 358.687032] do_vfs_ioctl+0x75a/0xff0 [ 358.695090] lowmem_reserve[]: [ 358.696347] ? ioctl_preallocate+0x1a0/0x1a0 [ 358.704154] active_anon:12040 inactive_anon:10790 isolated_anon:0 [ 358.704154] active_file:12 inactive_file:13 isolated_file:0 [ 358.704154] unevictable:0 dirty:0 writeback:0 unstable:0 [ 358.704154] slab_reclaimable:13745 slab_unreclaimable:118297 [ 358.704154] mapped:43959 shmem:11025 pagetables:762 bounce:0 [ 358.704154] free:13748 free_pcp:34 free_cma:0 [ 358.706300] ? lock_downgrade+0x740/0x740 [ 358.717595] 0 [ 358.718742] ? __fget+0x225/0x360 [ 358.724881] Node 0 active_anon:47424kB inactive_anon:35016kB active_file:48kB inactive_file:48kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:175836kB dirty:0kB writeback:0kB shmem:35892kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 358.727998] ? do_vfs_ioctl+0xff0/0xff0 [ 358.736976] 0 [ 358.738654] ? security_file_ioctl+0x83/0xb0 [ 358.746309] 0 [ 358.747633] SyS_ioctl+0x7f/0xb0 [ 358.755503] Node 1 active_anon:736kB inactive_anon:8144kB active_file:0kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:8208kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 358.756465] ? do_vfs_ioctl+0xff0/0xff0 [ 358.759899] Node 0 [ 358.762141] do_syscall_64+0x1d5/0x640 [ 358.762157] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 358.762165] RIP: 0033:0x4665f9 [ 358.762169] RSP: 002b:00007f9108899188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 358.762178] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 358.762183] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000006 [ 358.762188] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 358.762193] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 358.762197] R13: 00007fffb2c94dcf R14: 00007f9108899300 R15: 0000000000022000 [ 358.999461] 0 0 [ 359.001552] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 359.030817] lowmem_reserve[]: 0 0 0 0 0 [ 359.034903] Node 1 Normal free:26136kB min:53696kB low:67120kB high:80544kB active_anon:736kB inactive_anon:8144kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:128kB pagetables:124kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 359.066567] lowmem_reserve[]: 0 0 0 0 0 [ 359.070584] Node 0 DMA: 112*4kB (UME) 6*8kB (UM) 4*16kB (UME) 7*32kB (UME) 3*64kB (UME) 2*128kB (ME) 4*256kB (UME) 3*512kB (UME) 3*1024kB (UME) 2*2048kB (UE) 0*4096kB = 10960kB [ 359.090245] Node 0 DMA32: 1312*4kB (UME) 413*8kB (ME) 88*16kB (ME) 196*32kB (UME) 6*64kB (UM) 2*128kB (M) 2*256kB (M) 1*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 17896kB [ 359.110802] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 359.126818] Node 1 Normal: 66*4kB (UM) 62*8kB (UM) 36*16kB (UM) 709*32kB (UM) 23*64kB (UM) 5*128kB (M) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 26136kB [ 359.144592] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 359.153531] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 359.165757] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 359.175298] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 359.187546] Mem-Info: [ 359.189988] active_anon:12040 inactive_anon:10790 isolated_anon:0 [ 359.189988] active_file:12 inactive_file:13 isolated_file:0 [ 359.189988] unevictable:0 dirty:0 writeback:0 unstable:0 [ 359.189988] slab_reclaimable:13745 slab_unreclaimable:118287 [ 359.189988] mapped:43959 shmem:11025 pagetables:762 bounce:0 [ 359.189988] free:13748 free_pcp:34 free_cma:0 [ 359.227165] 11050 total pagecache pages [ 359.231218] 0 pages in swap cache [ 359.234675] Swap cache stats: add 0, delete 0, find 0/0 [ 359.240032] Free swap = 0kB [ 359.246486] Total swap = 0kB [ 359.249523] 2097051 pages RAM [ 359.253252] 0 pages HighMem/MovableOnly [ 359.257230] 363849 pages reserved [ 359.260715] 0 pages cma reserved [ 359.264698] Node 0 active_anon:47424kB inactive_anon:35016kB active_file:48kB inactive_file:48kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:175836kB dirty:0kB writeback:0kB shmem:35892kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 359.315267] Node 1 active_anon:736kB inactive_anon:8144kB active_file:100kB inactive_file:5004kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:3400kB dirty:0kB writeback:0kB shmem:8208kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 359.351225] DMA free:10960kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:4kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 359.419795] Node 0 DMA free:10960kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:4kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 359.483854] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 359.493439] Node 0 DMA32 free:23792kB min:36200kB low:45248kB high:54296kB active_anon:47424kB inactive_anon:35012kB active_file:48kB inactive_file:48kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7616kB pagetables:2924kB bounce:0kB free_pcp:168kB local_pcp:32kB free_cma:0kB [ 359.561103] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 359.566188] Node 0 DMA32 free:26184kB min:36200kB low:45248kB high:54296kB active_anon:47324kB inactive_anon:35012kB active_file:48kB inactive_file:48kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7616kB pagetables:2924kB bounce:0kB free_pcp:324kB local_pcp:188kB free_cma:0kB [ 359.621112] lowmem_reserve[]: 0 0 0 0 0 [ 359.625170] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 359.691099] lowmem_reserve[]: 0 0 0 0 0 [ 359.695237] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 359.732860] lowmem_reserve[]: 0 0 0 0 0 [ 359.736890] Node 1 Normal free:108668kB min:53696kB low:67120kB high:80544kB active_anon:1036kB inactive_anon:8144kB active_file:2700kB inactive_file:3964kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:128kB pagetables:124kB bounce:0kB free_pcp:1072kB local_pcp:356kB free_cma:0kB [ 359.791126] lowmem_reserve[]: 0 0 0 0 0 [ 359.795159] Node 1 Normal free:115064kB min:53696kB low:67120kB high:80544kB active_anon:1036kB inactive_anon:8144kB active_file:2700kB inactive_file:3964kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:128kB pagetables:124kB bounce:0kB free_pcp:1076kB local_pcp:356kB free_cma:0kB [ 359.826399] lowmem_reserve[]: 0 0 0 0 0 [ 359.834396] Node 0 DMA: 112*4kB (UME) 6*8kB (UM) 4*16kB (UME) 7*32kB (UME) 3*64kB (UME) 2*128kB (ME) 4*256kB (UME) 3*512kB (UME) 3*1024kB (UME) 2*2048kB (UE) 0*4096kB = 10960kB [ 359.881111] Node 0 DMA32: 970*4kB (ME) 420*8kB (UME) 163*16kB (UME) 256*32kB (UME) 237*64kB (UM) 15*128kB (UM) 2*256kB (M) 1*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 36152kB [ 359.896842] lowmem_reserve[]: 0 0 0 0 0 [ 359.900871] Node 0 DMA: 112*4kB (UME) 6*8kB (UM) 4*16kB (UME) 7*32kB (UME) 3*64kB (UME) 2*128kB (ME) 4*256kB (UME) 3*512kB (UME) 3*1024kB (UME) 2*2048kB (UE) 0*4096kB = 10960kB [ 359.961151] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 359.992870] Node 0 DMA32: 1325*4kB (UME) 417*8kB (UME) 88*16kB (UME) 226*32kB (UME) 1*64kB (U) 1*128kB (U) 1*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 17724kB [ 360.014157] Node 1 Normal: 85*4kB (UM) 77*8kB (UM) 49*16kB (UM) 30*32kB (UM) 26*64kB (M) 9*128kB (M) 20*256kB (UM) 33*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 27532kB [ 360.029462] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 360.043897] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 360.052827] Node 1 Normal: 85*4kB (UM) 77*8kB (UM) 49*16kB (UM) 30*32kB (UM) 26*64kB (M) 9*128kB (M) 20*256kB (UM) 33*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 27532kB [ 360.068018] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 360.070794] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 360.085870] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 360.085877] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 360.085882] 11080 total pagecache pages [ 360.085892] 0 pages in swap cache [ 360.085896] Swap cache stats: add 0, delete 0, find 0/0 [ 360.085900] Free swap = 0kB [ 360.085903] Total swap = 0kB [ 360.085910] 2097051 pages RAM [ 360.085913] 0 pages HighMem/MovableOnly [ 360.085917] 363849 pages reserved [ 360.085920] 0 pages cma reserved [ 360.085927] Out of memory (oom_kill_allocating_task): Kill process 15207 (systemd-rfkill) score 0 or sacrifice child [ 360.085954] Killed process 15207 (systemd-rfkill) total-vm:37800kB, anon-rss:376kB, file-rss:0kB, shmem-rss:0kB [ 360.097175] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 360.130216] syz-executor.4: [ 360.138195] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 360.152154] rs:main Q:Reg invoked oom-killer: gfp_mask=0x1c200ca(GFP_HIGHUSER_MOVABLE|__GFP_WRITE), nodemask= [ 360.163287] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 360.208861] (null), order=0, oom_score_adj=0 [ 360.220655] rs:main Q:Reg cpuset=/ mems_allowed=0-1 [ 360.237831] CPU: 0 PID: 14877 Comm: rs:main Q:Reg Not tainted 4.14.232-syzkaller #0 [ 360.245119] page allocation failure: order:4 [ 360.245659] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 360.245671] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 360.250056] Call Trace: [ 360.259539] (null) [ 360.266528] dump_stack+0x1b2/0x281 [ 360.266541] dump_header+0x178/0x82f [ 360.266556] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 360.270085] syz-executor.4 cpuset= [ 360.272245] ? ___ratelimit+0x2cd/0x530 [ 360.272256] oom_kill_process.cold+0x10/0xa40 [ 360.272275] out_of_memory+0xe3e/0x1190 [ 360.272288] ? oom_killer_disable+0x1c0/0x1c0 [ 360.275890] / [ 360.279619] ? mutex_trylock+0x152/0x1a0 [ 360.284741] mems_allowed=0-1 [ 360.288234] __alloc_pages_nodemask+0x23e1/0x2720 [ 360.318767] ? trace_hardirqs_on+0x10/0x10 [ 360.323064] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 360.327907] ? __radix_tree_lookup+0x1b5/0x2e0 [ 360.332497] alloc_pages_current+0x155/0x260 [ 360.336910] pagecache_get_page+0x3f5/0xab0 [ 360.341242] grab_cache_page_write_begin+0x63/0x90 [ 360.346210] ext4_da_write_begin+0x249/0xe70 [ 360.350621] ? __ext4_journal_stop+0xe7/0x1b0 [ 360.355116] ? ext4_write_begin+0x1260/0x1260 [ 360.359597] ? balance_dirty_pages_ratelimited+0x8ac/0x1800 [ 360.365305] generic_perform_write+0x1c9/0x420 [ 360.369884] ? __mnt_drop_write_file+0x5f/0x90 [ 360.374456] ? filemap_page_mkwrite+0x2d0/0x2d0 [ 360.379115] ? current_time+0xb0/0xb0 [ 360.382907] ? ext4_file_write_iter+0x1cc/0xd20 [ 360.387605] __generic_file_write_iter+0x227/0x590 [ 360.392530] ext4_file_write_iter+0x276/0xd20 [ 360.397128] ? aa_file_perm+0x304/0xab0 [ 360.401106] ? ext4_file_read_iter+0x330/0x330 [ 360.405696] ? trace_hardirqs_on+0x10/0x10 [ 360.409944] ? iov_iter_init+0xa6/0x1c0 [ 360.413921] __vfs_write+0x44c/0x630 [ 360.417665] ? kernel_read+0x110/0x110 [ 360.422512] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 360.427562] vfs_write+0x17f/0x4d0 [ 360.431105] SyS_write+0xf2/0x210 [ 360.434563] ? SyS_read+0x210/0x210 [ 360.438271] ? __do_page_fault+0x159/0xad0 [ 360.442498] ? do_syscall_64+0x4c/0x640 [ 360.446594] ? SyS_read+0x210/0x210 [ 360.450213] do_syscall_64+0x1d5/0x640 [ 360.454106] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 360.459293] RIP: 0033:0x7ffafea751cd [ 360.463007] RSP: 002b:00007ffaf7ffe590 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 360.473869] RAX: ffffffffffffffda RBX: 00007ffaec003d50 RCX: 00007ffafea751cd [ 360.481146] RDX: 00000000000001f4 RSI: 00007ffaec003d50 RDI: 0000000000000007 [ 360.488417] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 360.496468] R10: 0000000000000000 R11: 0000000000000293 R12: 00007ffaec003a90 [ 360.503732] R13: 00007ffaf7ffe5b0 R14: 000055a5a15c2480 R15: 00000000000001f4 [ 360.511020] CPU: 1 PID: 15220 Comm: syz-executor.4 Not tainted 4.14.232-syzkaller #0 [ 360.518933] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 360.527760] 11080 total pagecache pages [ 360.528302] Call Trace: [ 360.534882] dump_stack+0x1b2/0x281 [ 360.538517] warn_alloc.cold+0x96/0x1cc [ 360.541158] 0 pages in swap cache [ 360.542495] ? zone_watermark_ok_safe+0x220/0x220 [ 360.545953] Swap cache stats: add 0, delete 0, find 0/0 [ 360.550815] __alloc_pages_nodemask+0x2127/0x2720 [ 360.561035] ? lock_acquire+0x170/0x3f0 [ 360.561121] syz-executor.5: page allocation failure: order:0 [ 360.565012] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 360.565029] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 360.570944] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 360.575794] ? __mutex_unlock_slowpath+0x75/0x770 [ 360.575810] alloc_pages_current+0x155/0x260 [ 360.575823] ion_page_pool_alloc+0x118/0x1b0 [ 360.575832] ion_system_heap_allocate+0x133/0x8c0 [ 360.575843] ? _raw_spin_unlock+0x29/0x40 [ 360.575851] ? _ion_heap_freelist_drain+0x6e/0x410 [ 360.575859] ? ion_system_contig_heap_create+0x130/0x130 [ 360.575869] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 360.575886] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 360.575900] ion_alloc+0x27a/0x810 [ 360.586439] Free swap = 0kB [ 360.588541] ? ion_dma_buf_release+0x40/0x40 [ 360.594796] Total swap = 0kB [ 360.597802] ? __might_fault+0x177/0x1b0 [ 360.607692] (null) [ 360.611155] ion_ioctl+0xea/0x1f0 [ 360.611166] ? ion_query_heaps+0x360/0x360 [ 360.611184] ? ion_query_heaps+0x360/0x360 [ 360.611195] do_vfs_ioctl+0x75a/0xff0 [ 360.611207] ? ioctl_preallocate+0x1a0/0x1a0 [ 360.616121] syz-executor.5 cpuset= [ 360.621561] ? lock_downgrade+0x740/0x740 [ 360.621575] ? __fget+0x225/0x360 [ 360.621584] ? do_vfs_ioctl+0xff0/0xff0 [ 360.621595] ? security_file_ioctl+0x83/0xb0 [ 360.621605] SyS_ioctl+0x7f/0xb0 [ 360.621613] ? do_vfs_ioctl+0xff0/0xff0 [ 360.621623] do_syscall_64+0x1d5/0x640 [ 360.621639] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 360.621647] RIP: 0033:0x4665f9 [ 360.621652] RSP: 002b:00007f9108899188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 360.621662] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 360.621667] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000006 [ 360.621675] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 360.631490] 2097051 pages RAM [ 360.631509] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 360.635031] 0 pages HighMem/MovableOnly [ 360.638027] R13: 00007fffb2c94dcf R14: 00007f9108899300 R15: 0000000000022000 [ 360.649997] warn_alloc_show_mem: 1 callbacks suppressed [ 360.650001] Mem-Info: [ 360.655432] / [ 360.660938] active_anon:11959 inactive_anon:10793 isolated_anon:0 [ 360.660938] active_file:20 inactive_file:0 isolated_file:0 [ 360.660938] unevictable:0 dirty:18 writeback:0 unstable:0 [ 360.660938] slab_reclaimable:13723 slab_unreclaimable:118282 [ 360.660938] mapped:43983 shmem:11029 pagetables:762 bounce:0 [ 360.660938] free:13870 free_pcp:31 free_cma:0 [ 360.664003] 363849 pages reserved [ 360.679246] Node 0 active_anon:46976kB inactive_anon:35016kB active_file:32kB inactive_file:32kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:175932kB dirty:0kB writeback:0kB shmem:35892kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 360.681100] mems_allowed=0-1 [ 360.683432] Node 1 active_anon:860kB inactive_anon:8156kB active_file:48kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:72kB writeback:0kB shmem:8224kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 360.687350] CPU: 0 PID: 15154 Comm: syz-executor.5 Not tainted 4.14.232-syzkaller #0 [ 360.693159] Node 0 [ 360.695114] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 360.699099] DMA free:10960kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:4kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 360.702953] Call Trace: [ 360.702977] dump_stack+0x1b2/0x281 [ 360.702990] warn_alloc.cold+0x96/0x1cc [ 360.703001] ? zone_watermark_ok_safe+0x220/0x220 [ 360.703011] ? usleep_range+0x130/0x130 [ 360.703024] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 360.708197] lowmem_reserve[]: [ 360.711399] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 360.711409] ? run_timer_softirq+0x5a0/0x5a0 [ 360.711425] __alloc_pages_nodemask+0x2127/0x2720 [ 360.711441] ? lock_acquire+0x170/0x3f0 [ 360.719753] 0 [ 360.727479] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 360.727490] ? ion_page_pool_alloc+0x9e/0x1b0 [ 360.727506] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 360.727525] ? alloc_pages_current+0x84/0x260 [ 360.734833] 2717 [ 360.742074] alloc_pages_current+0x155/0x260 [ 360.742089] ion_page_pool_alloc+0x118/0x1b0 [ 360.742098] ion_system_heap_allocate+0x133/0x8c0 [ 360.742111] ? _raw_spin_unlock+0x29/0x40 [ 360.745204] 2718 [ 360.752470] ? _ion_heap_freelist_drain+0x6e/0x410 [ 360.752479] ? ion_system_contig_heap_create+0x130/0x130 [ 360.752489] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 360.752499] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 360.752512] ion_alloc+0x27a/0x810 [ 360.756479] 2718 [ 360.763747] ? ion_dma_buf_release+0x40/0x40 [ 360.763760] ? __might_fault+0x177/0x1b0 [ 360.763770] ion_ioctl+0xea/0x1f0 [ 360.763780] ? ion_query_heaps+0x360/0x360 [ 360.769131] 2718 [ 360.771624] ? ion_query_heaps+0x360/0x360 [ 360.771634] do_vfs_ioctl+0x75a/0xff0 [ 360.771646] ? ioctl_preallocate+0x1a0/0x1a0 [ 360.771656] ? lock_downgrade+0x740/0x740 [ 360.771669] ? __fget+0x225/0x360 [ 360.806546] ? do_vfs_ioctl+0xff0/0xff0 [ 360.806559] ? security_file_ioctl+0x83/0xb0 [ 360.806567] SyS_ioctl+0x7f/0xb0 [ 360.806575] ? do_vfs_ioctl+0xff0/0xff0 [ 360.806586] do_syscall_64+0x1d5/0x640 [ 360.806600] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 360.810048] Node 0 [ 360.837818] RIP: 0033:0x4665f9 [ 360.837823] RSP: 002b:00007f8cc58ff188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 360.837832] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 360.837837] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000005 [ 360.837841] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 360.837846] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 360.837850] R13: 00007ffdcc2738ff R14: 00007f8cc58ff300 R15: 0000000000022000 [ 360.842605] 0 pages cma reserved [ 360.897104] DMA32 free:18012kB min:36200kB low:45248kB high:54296kB active_anon:47376kB inactive_anon:35012kB active_file:32kB inactive_file:32kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7616kB pagetables:2924kB bounce:0kB free_pcp:116kB local_pcp:0kB free_cma:0kB [ 361.311298] Bluetooth: hci2 command 0x0409 tx timeout [ 361.371101] Mem-Info: [ 361.373560] active_anon:12132 inactive_anon:10793 isolated_anon:0 [ 361.373560] active_file:173 inactive_file:1778 isolated_file:0 [ 361.373560] unevictable:0 dirty:18 writeback:0 unstable:0 [ 361.373560] slab_reclaimable:13703 slab_unreclaimable:118316 [ 361.373560] mapped:45207 shmem:11029 pagetables:777 bounce:0 [ 361.373560] free:117857 free_pcp:141 free_cma:0 [ 361.470579] Node 0 active_anon:46868kB inactive_anon:35016kB active_file:32kB inactive_file:32kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:175948kB dirty:0kB writeback:0kB shmem:35892kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 361.526838] IPVS: ftp: loaded support on port[0] = 21 [ 361.575036] Node 1 active_anon:1460kB inactive_anon:8156kB active_file:2560kB inactive_file:6080kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:5280kB dirty:72kB writeback:0kB shmem:8224kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 361.600202] lowmem_reserve[]: 0 0 0 0 0 [ 361.608919] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 361.640809] lowmem_reserve[]: 0 0 0 0 0 [ 361.646297] Node 1 Normal free:722464kB min:53696kB low:67120kB high:80544kB active_anon:1460kB inactive_anon:8156kB active_file:2560kB inactive_file:6580kB unevictable:0kB writepending:72kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:224kB pagetables:272kB bounce:0kB free_pcp:248kB local_pcp:168kB free_cma:0kB [ 361.677437] lowmem_reserve[]: 0 0 0 0 0 [ 361.682794] Node 0 DMA: 112*4kB (UME) 6*8kB (UM) 4*16kB (UME) 7*32kB (UME) 3*64kB (UME) 2*128kB (ME) 4*256kB (UME) 3*512kB (UME) 3*1024kB (UME) 2*2048kB (UE) 0*4096kB = 10960kB [ 361.691161] Node 0 DMA free:10960kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:4kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 361.701767] Node 0 DMA32: 1328*4kB (UME) 1575*8kB (UME) 196*16kB (UME) 252*32kB (UME) 5*64kB (U) 3*128kB (U) 1*256kB (U) 0*512kB 4*1024kB (U) 2*2048kB (U) 0*4096kB = 38264kB [ 361.771466] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 361.798320] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 361.802227] Node 1 Normal: 0*4kB 1*8kB (U) 1*16kB (M) 7*32kB (UM) 31*64kB (UM) 10*128kB (U) 7*256kB (U) 6*512kB (U) 471*1024kB (UM) 132*2048kB (U) 23*4096kB (U) = 855224kB [ 361.821170] Node 0 DMA32 free:59268kB min:36200kB low:45248kB high:54296kB active_anon:46868kB inactive_anon:35012kB active_file:32kB inactive_file:32kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7616kB pagetables:2836kB bounce:0kB free_pcp:348kB local_pcp:80kB free_cma:0kB [ 361.848443] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 361.883699] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 361.900693] chnl_net:caif_netlink_parms(): no params data found [ 361.907982] lowmem_reserve[]: 0 0 0 0 0 [ 361.909111] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 361.923615] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 361.938146] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 361.969235] 13490 total pagecache pages [ 361.976408] 0 pages in swap cache [ 361.979928] Swap cache stats: add 0, delete 0, find 0/0 [ 361.988069] Free swap = 0kB [ 362.001157] lowmem_reserve[]: 0 0 0 0 0 [ 362.002445] Total swap = 0kB [ 362.005208] Node 1 Normal free:1057064kB min:53696kB low:67120kB high:80544kB active_anon:1460kB inactive_anon:8156kB active_file:2560kB inactive_file:6980kB unevictable:0kB writepending:72kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:224kB pagetables:272kB bounce:0kB free_pcp:168kB local_pcp:44kB free_cma:0kB [ 362.008239] 2097051 pages RAM [ 362.008245] 0 pages HighMem/MovableOnly [ 362.074921] lowmem_reserve[]: 0 0 0 0 0 [ 362.081627] Node 0 DMA: 112*4kB (UME) 6*8kB (UM) 4*16kB (UME) 7*32kB (UME) 3*64kB (UME) 2*128kB (ME) 4*256kB (UME) 3*512kB (UME) 3*1024kB (UME) 2*2048kB (UE) 0*4096kB = 10960kB [ 362.105567] 363849 pages reserved [ 362.121207] Node 0 DMA32: 1265*4kB (ME) 416*8kB (UMEH) 91*16kB (UME) 12*32kB (MEH) 1317*64kB (UEH) 39*128kB (UH) 5*256kB (UH) 4*512kB (U) 4*1024kB (U) 2*2048kB (U) 0*4096kB = 111028kB [ 362.125221] 0 pages cma reserved [ 362.161738] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 362.181993] Node 1 Normal: 0*4kB 24*8kB (UM) 15*16kB (UM) 12*32kB (UM) 13*64kB (UM) 949*128kB (U) 510*256kB (UM) 16*512kB (UM) 473*1024kB (U) 135*2048kB (U) 23*4096kB (U) = 1116912kB [ 362.221310] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 362.230221] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 362.261681] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 362.270555] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 362.275139] bridge0: port 1(bridge_slave_0) entered blocking state [ 362.305143] 13519 total pagecache pages [ 362.309132] 0 pages in swap cache [ 362.321354] bridge0: port 1(bridge_slave_0) entered disabled state [ 362.325386] Swap cache stats: add 0, delete 0, find 0/0 [ 362.329081] device bridge_slave_0 entered promiscuous mode [ 362.351167] Free swap = 0kB [ 362.354224] Total swap = 0kB [ 362.357233] 2097051 pages RAM [ 362.360328] 0 pages HighMem/MovableOnly [ 362.372718] bridge0: port 2(bridge_slave_1) entered blocking state [ 362.385837] bridge0: port 2(bridge_slave_1) entered disabled state [ 362.405789] 363849 pages reserved [ 362.409273] 0 pages cma reserved [ 362.414827] device bridge_slave_1 entered promiscuous mode [ 362.431366] Out of memory (oom_kill_allocating_task): Kill process 14877 (rs:main Q:Reg) score 0 or sacrifice child [ 362.478758] Killed process 14863 (rsyslogd) total-vm:254332kB, anon-rss:900kB, file-rss:0kB, shmem-rss:0kB [ 362.518057] oom_reaper: reaped process 14863 (rsyslogd), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 362.518631] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 362.592101] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 362.647142] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 362.671979] team0: Port device team_slave_0 added [ 362.677692] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 362.722048] team0: Port device team_slave_1 added [ 362.775455] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 362.782180] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 362.813314] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 362.834892] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 362.851674] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 362.901163] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 362.922467] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 362.930075] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 362.997972] device hsr_slave_0 entered promiscuous mode [ 363.021624] device hsr_slave_1 entered promiscuous mode [ 363.027871] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 363.051884] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 363.190760] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 363.240952] 8021q: adding VLAN 0 to HW filter on device bond0 [ 363.255493] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 363.268976] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 363.278466] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 363.290284] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 363.315216] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 363.324966] 8021q: adding VLAN 0 to HW filter on device team0 [ 363.348123] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 363.365353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 363.385638] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 363.405285] bridge0: port 1(bridge_slave_0) entered blocking state [ 363.411739] bridge0: port 1(bridge_slave_0) entered forwarding state [ 363.447051] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 363.454995] Bluetooth: hci2 command 0x041b tx timeout [ 363.460608] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 363.472491] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 363.480471] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 363.493270] bridge0: port 2(bridge_slave_1) entered blocking state [ 363.499655] bridge0: port 2(bridge_slave_1) entered forwarding state [ 363.512630] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 363.527569] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 363.534655] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 363.548076] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 363.559495] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 363.585374] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 363.593703] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 363.627849] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 363.635893] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 363.648230] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 363.665729] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 363.689126] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 363.725208] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 363.745920] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 363.761928] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 363.769671] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 363.788558] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 363.811600] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 363.823107] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 363.831887] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 363.838626] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 363.851713] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 363.943912] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 363.959556] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 363.968333] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 364.000349] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 364.082715] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 364.089888] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 364.121957] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 364.133977] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 364.140582] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 364.151720] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 364.159277] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 364.182185] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 364.202996] device veth0_vlan entered promiscuous mode [ 364.223539] device veth1_vlan entered promiscuous mode [ 364.229775] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 364.240442] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 364.254936] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 364.265280] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 364.274192] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 364.282773] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 364.290103] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 364.299169] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 364.328018] device veth0_macvtap entered promiscuous mode [ 364.334806] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 364.353581] device veth1_macvtap entered promiscuous mode [ 364.372828] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 364.408465] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 364.427694] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 364.438094] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 364.453144] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 364.464488] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 364.477436] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 364.489195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 364.501762] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 364.510891] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 364.526291] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 364.536153] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 364.550720] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 364.566375] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 364.573595] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 364.580844] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 364.604016] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 364.622993] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 364.643103] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 364.665112] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 364.681934] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 364.691055] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 364.721183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 364.730533] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 364.761195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 364.770355] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 364.781189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 364.790330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 364.821138] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 364.851823] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 364.858750] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 364.882959] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 364.890757] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 11:45:20 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendto(r0, &(0x7f0000000380)="f6a073b72742b506f3a504992931b451b0a42c6b", 0x14, 0x8000, 0x0, 0x0) 11:45:20 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x10001, 0x400) syz_open_dev$vcsn(&(0x7f0000000140), 0x7, 0x24c042) ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r0, 0x7a9, &(0x7f0000000040)={{@my=0x0, 0x7f}, 0x40, 0x3, 0x0, 0x6, 0xf1, 0x5, 0x39, 0x3}) r1 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0), 0x20000, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000100)={0x80000001, 0x27}) 11:45:20 executing program 2: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x10001, 0x400) r1 = syz_open_dev$vcsn(&(0x7f0000000140), 0x7, 0x24c042) ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r0, 0x7a9, &(0x7f0000000040)={{@my=0x0, 0x7f}, 0x40, 0x3, 0x0, 0x6, 0xf1, 0x5, 0x39, 0x3}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(0xffffffffffffffff, 0x7a8, &(0x7f0000000080)={{@host, 0x20000}, @hyper, 0x4, 0x9, 0x0, 0x5, 0x6, 0xd350}) socketpair(0x6, 0x80000, 0x10001, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNAPSHOT_ATOMIC_RESTORE(r1, 0x3304) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x44, 0x0, 0x400, 0x70bd25, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3023d3782c859c3d}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}]}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0), 0x20000, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000100)={0x80000001, 0x27}) 11:45:20 executing program 3: syz_open_dev$vcsn(&(0x7f0000000000), 0x10001, 0x400) syz_open_dev$vcsn(&(0x7f0000000140), 0x7, 0x24c042) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0), 0x20000, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000100)={0x80000001, 0x27}) 11:45:20 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendto(r0, &(0x7f0000000380)="f6a073b72742b506f3a504992931", 0xe, 0x8000, 0x0, 0x0) [ 365.471224] Bluetooth: hci2 command 0x040f tx timeout [ 365.843538] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 365.850299] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 365.886301] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 365.911213] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 365.940290] device bridge_slave_1 left promiscuous mode [ 365.958304] bridge0: port 2(bridge_slave_1) entered disabled state [ 365.980747] device bridge_slave_0 left promiscuous mode [ 366.013205] bridge0: port 1(bridge_slave_0) entered disabled state [ 366.060565] device veth1_macvtap left promiscuous mode [ 366.070448] device veth0_macvtap left promiscuous mode [ 366.088169] device veth1_vlan left promiscuous mode [ 366.106840] device veth0_vlan left promiscuous mode [ 366.471798] syz-executor.1: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 366.497515] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 366.510001] CPU: 0 PID: 15499 Comm: syz-executor.1 Not tainted 4.14.232-syzkaller #0 [ 366.518078] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 366.527454] Call Trace: [ 366.530052] dump_stack+0x1b2/0x281 [ 366.533679] warn_alloc.cold+0x96/0x1cc [ 366.537665] ? zone_watermark_ok_safe+0x220/0x220 [ 366.542516] __alloc_pages_nodemask+0x2127/0x2720 [ 366.547354] ? io_schedule_timeout+0x140/0x140 [ 366.551965] ? lock_acquire+0x170/0x3f0 [ 366.555966] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 366.560817] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 366.567438] ? __mutex_unlock_slowpath+0x75/0x770 [ 366.572284] alloc_pages_current+0x155/0x260 [ 366.576694] ion_page_pool_alloc+0x118/0x1b0 [ 366.581106] ion_system_heap_allocate+0x133/0x8c0 [ 366.585957] ? ion_alloc+0x187/0x810 [ 366.589669] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 366.595133] ? ion_system_contig_heap_create+0x130/0x130 [ 366.600610] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 366.606516] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 366.611367] ion_alloc+0x204/0x810 [ 366.614916] ? ion_dma_buf_release+0x40/0x40 [ 366.619324] ? __might_fault+0x177/0x1b0 [ 366.623415] ion_ioctl+0xea/0x1f0 [ 366.626883] ? ion_query_heaps+0x360/0x360 [ 366.631119] ? ion_query_heaps+0x360/0x360 [ 366.635354] do_vfs_ioctl+0x75a/0xff0 [ 366.639154] ? ioctl_preallocate+0x1a0/0x1a0 [ 366.643561] ? lock_downgrade+0x740/0x740 [ 366.648837] ? __fget+0x225/0x360 [ 366.652286] ? do_vfs_ioctl+0xff0/0xff0 [ 366.656260] ? security_file_ioctl+0x83/0xb0 [ 366.660659] SyS_ioctl+0x7f/0xb0 [ 366.664016] ? do_vfs_ioctl+0xff0/0xff0 [ 366.668035] do_syscall_64+0x1d5/0x640 [ 366.671938] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 366.677205] RIP: 0033:0x4665f9 [ 366.680382] RSP: 002b:00007fc5c5007188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 366.688087] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 366.695355] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000005 [ 366.702709] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 366.709984] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 366.717252] R13: 00007ffcb35352ff R14: 00007fc5c5007300 R15: 0000000000022000 [ 366.737796] syz-executor.3: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 366.770400] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 366.789051] CPU: 1 PID: 15502 Comm: syz-executor.3 Not tainted 4.14.232-syzkaller #0 [ 366.796984] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 366.806426] Call Trace: [ 366.809018] dump_stack+0x1b2/0x281 [ 366.812650] warn_alloc.cold+0x96/0x1cc [ 366.816641] ? zone_watermark_ok_safe+0x220/0x220 [ 366.821502] __alloc_pages_nodemask+0x2127/0x2720 [ 366.826356] ? lock_acquire+0x170/0x3f0 [ 366.830331] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 366.835180] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 366.840633] ? __mutex_unlock_slowpath+0x75/0x770 [ 366.845510] ? __sanitizer_cov_trace_pc+0x23/0x50 [ 366.850355] alloc_pages_current+0x155/0x260 [ 366.854770] ion_page_pool_alloc+0x118/0x1b0 [ 366.859183] ion_system_heap_allocate+0x133/0x8c0 [ 366.864031] ? ion_alloc+0x187/0x810 [ 366.867746] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 366.873370] ? ion_system_contig_heap_create+0x130/0x130 [ 366.878825] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 366.883845] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 366.888690] ion_alloc+0x204/0x810 [ 366.892233] ? ion_dma_buf_release+0x40/0x40 [ 366.896643] ? __might_fault+0x177/0x1b0 [ 366.900703] ion_ioctl+0xea/0x1f0 [ 366.904155] ? ion_query_heaps+0x360/0x360 [ 366.908408] ? ion_query_heaps+0x360/0x360 [ 366.912640] do_vfs_ioctl+0x75a/0xff0 [ 366.916457] ? ioctl_preallocate+0x1a0/0x1a0 [ 366.920873] ? lock_downgrade+0x740/0x740 [ 366.925029] ? __fget+0x225/0x360 [ 366.928491] ? do_vfs_ioctl+0xff0/0xff0 [ 366.932468] ? security_file_ioctl+0x83/0xb0 [ 366.936917] SyS_ioctl+0x7f/0xb0 [ 366.940294] ? do_vfs_ioctl+0xff0/0xff0 [ 366.944362] do_syscall_64+0x1d5/0x640 [ 366.948256] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 366.953444] RIP: 0033:0x4665f9 [ 366.956632] RSP: 002b:00007f7215804188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 366.964356] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 366.968613] warn_alloc_show_mem: 1 callbacks suppressed [ 366.968617] Mem-Info: [ 366.971640] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000005 [ 366.971646] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 366.971652] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 366.971658] R13: 00007ffdb21b4b4f R14: 00007f7215804300 R15: 0000000000022000 [ 367.073528] device hsr_slave_1 left promiscuous mode [ 367.103004] device hsr_slave_0 left promiscuous mode [ 367.111904] active_anon:12541 inactive_anon:10790 isolated_anon:0 [ 367.111904] active_file:68 inactive_file:2296 isolated_file:2 [ 367.111904] unevictable:0 dirty:10 writeback:0 unstable:0 [ 367.111904] slab_reclaimable:13612 slab_unreclaimable:116376 [ 367.111904] mapped:46220 shmem:11025 pagetables:739 bounce:0 [ 367.111904] free:119759 free_pcp:351 free_cma:0 [ 367.162970] team0 (unregistering): Port device team_slave_1 removed [ 367.187106] team0 (unregistering): Port device team_slave_0 removed [ 367.209541] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 367.234212] Node 0 active_anon:48668kB inactive_anon:35008kB active_file:252kB inactive_file:9172kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:209368kB dirty:40kB writeback:0kB shmem:35876kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 367.263215] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 367.320990] Node 1 active_anon:1496kB inactive_anon:8152kB active_file:20kB inactive_file:12kB unevictable:0kB isolated(anon):0kB isolated(file):8kB mapped:12kB dirty:0kB writeback:0kB shmem:8224kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 367.337715] bond0 (unregistering): Released all slaves [ 367.386309] Node 0 DMA free:12408kB min:204kB low:252kB high:300kB active_anon:4kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 367.425544] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 367.430762] Node 0 DMA32 free:186456kB min:36200kB low:45248kB high:54296kB active_anon:48664kB inactive_anon:35008kB active_file:252kB inactive_file:9172kB unevictable:0kB writepending:40kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7488kB pagetables:2696kB bounce:0kB free_pcp:128kB local_pcp:124kB free_cma:0kB [ 367.464221] lowmem_reserve[]: 0 0 0 0 0 [ 367.468303] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 367.498107] lowmem_reserve[]: 0 0 0 0 0 [ 367.502520] Node 1 Normal free:365536kB min:53696kB low:67120kB high:80544kB active_anon:1496kB inactive_anon:8152kB active_file:20kB inactive_file:12kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:288kB pagetables:408kB bounce:0kB free_pcp:656kB local_pcp:4kB free_cma:0kB [ 367.535376] lowmem_reserve[]: 0 0 0 0 0 [ 367.539460] Node 0 DMA: 150*4kB (UME) 57*8kB (UM) 8*16kB (UME) 9*32kB (UME) 5*64kB (UME) 5*128kB (UME) 5*256kB (UME) 3*512kB (UME) 3*1024kB (UME) 2*2048kB (UE) 0*4096kB = 12416kB [ 367.551619] Bluetooth: hci2 command 0x0419 tx timeout [ 367.561296] Node 0 DMA32: 1038*4kB (MEH) 383*8kB (UMEH) 101*16kB (MEH) 1591*32kB (UMEH) 1044*64kB (UH) 204*128kB (UMH) 16*256kB (UH) 1*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 157280kB [ 367.583074] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 367.596393] Node 1 Normal: 17666*4kB (UM) 1237*8kB (UME) 1287*16kB (UME) 1171*32kB (UME) 3195*64kB (UME) 163*128kB (UME) 31*256kB (UM) 9*512kB (UM) 3*1024kB (M) 16*2048kB (UM) 0*4096kB = 412352kB [ 367.638168] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 367.660874] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 367.683069] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 367.705425] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 367.727651] 13418 total pagecache pages [ 367.739589] 0 pages in swap cache [ 367.747871] Swap cache stats: add 0, delete 0, find 0/0 [ 367.764087] Free swap = 0kB [ 367.770459] Total swap = 0kB [ 367.780354] 2097051 pages RAM [ 367.788717] 0 pages HighMem/MovableOnly [ 367.802580] 363849 pages reserved [ 367.809402] 0 pages cma reserved [ 369.351475] syz-executor.2: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 369.389787] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 369.401360] CPU: 1 PID: 15508 Comm: syz-executor.2 Not tainted 4.14.232-syzkaller #0 [ 369.409275] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 369.418640] Call Trace: [ 369.421238] dump_stack+0x1b2/0x281 [ 369.424883] warn_alloc.cold+0x96/0x1cc [ 369.428858] ? zone_watermark_ok_safe+0x220/0x220 [ 369.433709] __alloc_pages_nodemask+0x2127/0x2720 [ 369.438586] ? lock_acquire+0x170/0x3f0 [ 369.442573] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 369.447436] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 369.452897] ? __mutex_unlock_slowpath+0x75/0x770 [ 369.457759] alloc_pages_current+0x155/0x260 [ 369.462195] ion_page_pool_alloc+0x118/0x1b0 [ 369.466605] ion_system_heap_allocate+0x133/0x8c0 [ 369.471447] ? ion_alloc+0x187/0x810 [ 369.475172] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 369.480624] ? ion_system_contig_heap_create+0x130/0x130 [ 369.486087] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 369.491099] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 369.495966] ion_alloc+0x204/0x810 [ 369.499525] ? ion_dma_buf_release+0x40/0x40 [ 369.503954] ? __might_fault+0x177/0x1b0 [ 369.508101] ion_ioctl+0xea/0x1f0 [ 369.511553] ? ion_query_heaps+0x360/0x360 [ 369.515783] ? ion_query_heaps+0x360/0x360 [ 369.520008] do_vfs_ioctl+0x75a/0xff0 [ 369.523827] ? ioctl_preallocate+0x1a0/0x1a0 [ 369.528225] ? lock_downgrade+0x740/0x740 [ 369.532369] ? __fget+0x225/0x360 [ 369.535818] ? do_vfs_ioctl+0xff0/0xff0 [ 369.539791] ? security_file_ioctl+0x83/0xb0 [ 369.544284] SyS_ioctl+0x7f/0xb0 [ 369.547655] ? do_vfs_ioctl+0xff0/0xff0 [ 369.551628] do_syscall_64+0x1d5/0x640 [ 369.555750] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 369.561023] RIP: 0033:0x4665f9 [ 369.564201] RSP: 002b:00007ff3638e3188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 369.572443] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 369.579924] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000005 [ 369.587192] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 369.594467] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 369.601756] R13: 00007ffe909c1c6f R14: 00007ff3638e3300 R15: 0000000000022000 [ 369.619561] warn_alloc_show_mem: 1 callbacks suppressed [ 369.619565] Mem-Info: [ 369.627528] active_anon:12568 inactive_anon:10790 isolated_anon:0 [ 369.627528] active_file:182 inactive_file:215 isolated_file:31 [ 369.627528] unevictable:0 dirty:27 writeback:0 unstable:0 [ 369.627528] slab_reclaimable:13604 slab_unreclaimable:115014 [ 369.627528] mapped:53114 shmem:11025 pagetables:783 bounce:0 [ 369.627528] free:25462 free_pcp:0 free_cma:0 [ 369.662739] Node 0 active_anon:48776kB inactive_anon:35008kB active_file:92kB inactive_file:108kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:211044kB dirty:108kB writeback:0kB shmem:35876kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 369.691725] Node 1 active_anon:1496kB inactive_anon:8152kB active_file:24kB inactive_file:12kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:12kB dirty:0kB writeback:0kB shmem:8224kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 369.720768] Node 0 DMA free:11056kB min:204kB low:252kB high:300kB active_anon:4kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 369.759810] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 369.788141] Node 0 DMA32 free:36196kB min:36200kB low:45248kB high:54296kB active_anon:48772kB inactive_anon:35008kB active_file:132kB inactive_file:256kB unevictable:0kB writepending:108kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7456kB pagetables:2724kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 369.822342] lowmem_reserve[]: 0 0 0 0 0 [ 369.826371] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 369.846140] in:imklog invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 369.856087] lowmem_reserve[]: [ 369.892353] in:imklog cpuset=/ mems_allowed=0-1 [ 369.900185] CPU: 1 PID: 15405 Comm: in:imklog Not tainted 4.14.232-syzkaller #0 [ 369.905615] 0 [ 369.907712] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 369.907720] 0 [ 369.909511] Call Trace: [ 369.923285] dump_stack+0x1b2/0x281 [ 369.926919] dump_header+0x178/0x82f [ 369.930636] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 369.935750] ? ___ratelimit+0x2cd/0x530 [ 369.939797] oom_kill_process.cold+0x10/0xa40 [ 369.944312] out_of_memory+0xe3e/0x1190 [ 369.948318] ? oom_killer_disable+0x1c0/0x1c0 [ 369.952958] ? mutex_trylock+0x152/0x1a0 [ 369.957204] __alloc_pages_nodemask+0x23e1/0x2720 [ 369.962078] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 369.966950] alloc_pages_current+0x155/0x260 [ 369.971386] filemap_fault+0x11a1/0x1ad0 [ 369.973549] 0 0 0 [ 369.975466] ext4_filemap_fault+0x84/0xb0 [ 369.975478] __do_fault+0xfa/0x380 [ 369.977626] Node 1 [ 369.981776] __handle_mm_fault+0x2497/0x4620 [ 369.981786] ? vm_insert_page+0x7c0/0x7c0 [ 369.981796] ? lock_downgrade+0x740/0x740 [ 369.981808] ? mark_held_locks+0xa6/0xf0 [ 369.981815] ? sync_mm_rss+0xf2/0x160 [ 369.981823] handle_mm_fault+0x455/0x9c0 [ 369.981834] __do_page_fault+0x549/0xad0 [ 369.981844] ? spurious_fault+0x640/0x640 [ 369.981853] ? do_page_fault+0x60/0x500 [ 369.981861] ? page_fault+0x2f/0x50 [ 369.981869] page_fault+0x45/0x50 [ 369.981877] RIP: fffff7e7:0x1f9f [ 369.981881] RSP: f9c4a4a0:00007fb3f9c4a4ac EFLAGS: 7fb3f9c4ada0 [ 370.039050] Normal free:53772kB min:53696kB low:67120kB high:80544kB active_anon:1500kB inactive_anon:8152kB active_file:0kB inactive_file:8kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:288kB pagetables:408kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 370.133354] Mem-Info: [ 370.135831] active_anon:12579 inactive_anon:10790 isolated_anon:0 [ 370.135831] active_file:33 inactive_file:0 isolated_file:37 [ 370.135831] unevictable:0 dirty:0 writeback:0 unstable:0 [ 370.135831] slab_reclaimable:13604 slab_unreclaimable:115001 [ 370.135831] mapped:52766 shmem:11025 pagetables:783 bounce:0 [ 370.135831] free:25150 free_pcp:50 free_cma:0 [ 370.141552] lowmem_reserve[]: [ 370.169258] Node 0 active_anon:48788kB inactive_anon:35008kB active_file:128kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):148kB mapped:211064kB dirty:0kB writeback:0kB shmem:35876kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 370.177453] 0 [ 370.205503] Node 1 active_anon:1528kB inactive_anon:8152kB active_file:4kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:8224kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 370.209108] 0 [ 370.234739] Node 0 DMA free:11056kB min:204kB low:252kB high:300kB active_anon:4kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 370.234761] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 370.234780] Node 0 DMA32 free:35944kB min:36200kB low:45248kB high:54296kB active_anon:48784kB inactive_anon:35008kB active_file:48kB inactive_file:180kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7456kB pagetables:2724kB bounce:0kB free_pcp:240kB local_pcp:120kB free_cma:0kB [ 370.234803] lowmem_reserve[]: [ 370.239947] 0 [ 370.268593] 0 [ 370.281303] 0 [ 370.305249] 0 0 0 0 [ 370.309674] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 370.310080] 0 [ 370.335854] lowmem_reserve[]: 0 0 0 0 0 [ 370.341709] Node 1 [ 370.341712] Node 0 DMA: [ 370.343948] Normal free:53600kB min:53696kB low:67120kB high:80544kB active_anon:1528kB inactive_anon:8152kB active_file:4kB inactive_file:4kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:288kB pagetables:408kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 370.343955] 2*4kB [ 370.346608] lowmem_reserve[]: 0 0 0 0 0 [ 370.377852] (ME) [ 370.380708] Node 0 [ 370.380712] 1*8kB (M) 2*16kB (ME) 2*32kB (ME) 5*64kB (UME) 5*128kB (UME) 5*256kB (UME) 3*512kB (UME) 3*1024kB (UME) 2*2048kB (UE) 0*4096kB = 11056kB [ 370.391230] DMA: 2*4kB (ME) 1*8kB (M) 2*16kB (ME) 2*32kB (ME) 5*64kB (UME) 5*128kB (UME) 5*256kB (UME) 3*512kB (UME) 3*1024kB (UME) 2*2048kB (UE) 0*4096kB = 11056kB [ 370.401997] Node 0 DMA32: 1595*4kB (ME) 568*8kB (UME) 164*16kB (UME) 33*32kB (ME) 17*64kB (UM) 70*128kB (UM) 36*256kB (UM) 4*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 35916kB [ 370.429598] Node 0 DMA32: 1595*4kB (ME) 568*8kB (UME) 164*16kB (UME) 33*32kB (ME) 17*64kB (UM) 70*128kB (UM) 36*256kB (UM) 4*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 35916kB [ 370.438620] Node 0 Normal: [ 370.447191] Node 0 Normal: [ 370.450128] 0*4kB [ 370.450131] 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 370.456896] 0*8kB 0*16kB [ 370.466501] Node 1 Normal: [ 370.469268] 0*32kB [ 370.469276] 113*4kB (M) 103*8kB (UME) 78*16kB (ME) 60*32kB (ME) 54*64kB (UME) 28*128kB (UME) 9*256kB (UM) 6*512kB (UM) 4*1024kB (UM) 16*2048kB (UM) 0*4096kB = 53724kB [ 370.475451] 0*64kB 0*128kB [ 370.489944] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 370.489953] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 370.496114] 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 370.519471] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 370.520185] Node 1 Normal: 113*4kB [ 370.528406] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 370.528413] 11071 total pagecache pages [ 370.535254] (M) 103*8kB (UME) 78*16kB (ME) 60*32kB (ME) 54*64kB (UME) 28*128kB (UME) 9*256kB (UM) 6*512kB (UM) 4*1024kB (UM) 16*2048kB (UM) 0*4096kB = 53724kB [ 370.551449] 0 pages in swap cache [ 370.562961] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 370.567869] Swap cache stats: add 0, delete 0, find 0/0 [ 370.574583] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 370.577863] Free swap = 0kB [ 370.587507] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 370.589225] Total swap = 0kB [ 370.600296] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 370.601349] 2097051 pages RAM [ 370.611281] 11071 total pagecache pages [ 370.613156] 0 pages HighMem/MovableOnly [ 370.617174] 0 pages in swap cache [ 370.627749] Swap cache stats: add 0, delete 0, find 0/0 [ 370.631205] 363849 pages reserved [ 370.633215] Free swap = 0kB [ 370.636592] 0 pages cma reserved [ 370.639609] Total swap = 0kB [ 370.649594] 2097051 pages RAM [ 370.649740] Out of memory (oom_kill_allocating_task): Kill process 15405 (in:imklog) score 0 or sacrifice child [ 370.652761] 0 pages HighMem/MovableOnly [ 370.664676] Killed process 15391 (rsyslogd) total-vm:254332kB, anon-rss:516kB, file-rss:0kB, shmem-rss:0kB [ 370.670194] 363849 pages reserved [ 370.678294] oom_reaper: reaped process 15391 (rsyslogd), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 370.684954] 0 pages cma reserved [ 370.742089] syz-fuzzer invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 370.755625] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 370.760420] CPU: 1 PID: 7999 Comm: syz-fuzzer Not tainted 4.14.232-syzkaller #0 [ 370.767873] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 370.777229] Call Trace: [ 370.779834] dump_stack+0x1b2/0x281 [ 370.783455] dump_header+0x178/0x82f [ 370.787164] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 370.792280] ? ___ratelimit+0x2cd/0x530 [ 370.796262] oom_kill_process.cold+0x10/0xa40 [ 370.800757] out_of_memory+0xe3e/0x1190 [ 370.804751] ? oom_killer_disable+0x1c0/0x1c0 [ 370.809237] ? mutex_trylock+0x152/0x1a0 [ 370.813308] __alloc_pages_nodemask+0x23e1/0x2720 [ 370.818158] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 370.823010] alloc_pages_current+0x155/0x260 [ 370.827427] filemap_fault+0x11a1/0x1ad0 [ 370.831497] ext4_filemap_fault+0x84/0xb0 [ 370.835635] __do_fault+0xfa/0x380 [ 370.839163] __handle_mm_fault+0x2497/0x4620 [ 370.843619] ? vm_insert_page+0x7c0/0x7c0 [ 370.847772] ? mark_held_locks+0xa6/0xf0 [ 370.851825] handle_mm_fault+0x455/0x9c0 [ 370.855878] __do_page_fault+0x549/0xad0 [ 370.859933] ? spurious_fault+0x640/0x640 [ 370.864092] ? do_page_fault+0x60/0x500 [ 370.868079] ? page_fault+0x2f/0x50 [ 370.871699] page_fault+0x45/0x50 [ 370.875146] RIP: 0f00:0x7f [ 370.878004] RSP: 03e7:000000c000039e40 EFLAGS: 00000003 [ 370.892644] Mem-Info: [ 370.900479] active_anon:12399 inactive_anon:10790 isolated_anon:0 [ 370.900479] active_file:15 inactive_file:15 isolated_file:0 [ 370.900479] unevictable:0 dirty:0 writeback:0 unstable:0 [ 370.900479] slab_reclaimable:13602 slab_unreclaimable:115002 [ 370.900479] mapped:52750 shmem:11025 pagetables:783 bounce:0 [ 370.900479] free:25093 free_pcp:0 free_cma:0 [ 370.948956] Node 0 active_anon:48152kB inactive_anon:35008kB active_file:56kB inactive_file:56kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:211000kB dirty:0kB writeback:0kB shmem:35876kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 370.996098] Node 1 active_anon:1444kB inactive_anon:8152kB active_file:4kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:8224kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 371.121283] Node 0 DMA free:11060kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 371.231561] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 371.236661] Node 0 DMA32 free:36644kB min:36200kB low:45248kB high:54296kB active_anon:48152kB inactive_anon:35008kB active_file:56kB inactive_file:56kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7360kB pagetables:2724kB bounce:0kB free_pcp:236kB local_pcp:64kB free_cma:0kB [ 371.329858] IPVS: ftp: loaded support on port[0] = 21 [ 371.351379] lowmem_reserve[]: 0 0 0 0 0 [ 371.355391] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 371.441654] lowmem_reserve[]: 0 0 0 0 0 [ 371.445689] Node 1 Normal free:578212kB min:53696kB low:67120kB high:80544kB active_anon:1656kB inactive_anon:8152kB active_file:2308kB inactive_file:3948kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:288kB pagetables:408kB bounce:0kB free_pcp:620kB local_pcp:84kB free_cma:0kB [ 371.581219] lowmem_reserve[]: 0 0 0 0 0 [ 371.585276] Node 0 DMA: 1*4kB (E) 0*8kB 1*16kB (E) 1*32kB (E) 4*64kB (UE) 4*128kB (UE) 4*256kB (UE) 2*512kB (UE) 2*1024kB (UE) 3*2048kB (UME) 0*4096kB = 11060kB [ 371.651353] Node 0 DMA32: 1605*4kB (ME) 597*8kB (ME) 170*16kB (UME) 35*32kB (ME) 17*64kB (UM) 7*128kB (M) 3*256kB (M) 3*512kB (UM) 8*1024kB (U) 85*2048kB (U) 54*4096kB (U) = 422780kB [ 371.701480] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 371.731832] Node 1 Normal: 1*4kB (U) 3*8kB (UE) 4*16kB (UE) 2*32kB (E) 6*64kB (UME) 27*128kB (ME) 9*256kB (M) 7*512kB (UM) 347*1024kB (UM) 93*2048kB (UM) 33*4096kB (U) = 690844kB [ 371.781672] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 371.790549] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 371.861856] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 371.881298] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 371.907707] chnl_net:caif_netlink_parms(): no params data found [ 371.914273] 12853 total pagecache pages [ 371.918277] 0 pages in swap cache [ 371.952174] Swap cache stats: add 0, delete 0, find 0/0 [ 371.957577] Free swap = 0kB [ 371.960599] Total swap = 0kB [ 371.991220] 2097051 pages RAM [ 371.994356] 0 pages HighMem/MovableOnly [ 371.998324] 363849 pages reserved [ 372.021228] 0 pages cma reserved [ 372.024646] Out of memory (oom_kill_allocating_task): Kill process 7999 (syz-fuzzer) score 0 or sacrifice child [ 372.051395] Killed process 15235 (syz-executor.1) total-vm:84924kB, anon-rss:64kB, file-rss:0kB, shmem-rss:0kB [ 372.083197] oom_reaper: reaped process 15235 (syz-executor.1), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 372.278682] bridge0: port 1(bridge_slave_0) entered blocking state [ 372.306012] bridge0: port 1(bridge_slave_0) entered disabled state [ 372.329798] device bridge_slave_0 entered promiscuous mode [ 372.373176] bridge0: port 2(bridge_slave_1) entered blocking state [ 372.379643] bridge0: port 2(bridge_slave_1) entered disabled state [ 372.432216] device bridge_slave_1 entered promiscuous mode [ 372.520239] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 372.563239] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 372.638062] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 372.656311] team0: Port device team_slave_0 added [ 372.675360] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 372.683128] team0: Port device team_slave_1 added [ 372.776699] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 372.795225] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 372.851277] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 372.888392] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 372.908276] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 372.955999] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 373.001920] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 373.009639] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 373.056350] device hsr_slave_0 entered promiscuous mode [ 373.062979] device hsr_slave_1 entered promiscuous mode [ 373.069475] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 373.077004] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 373.161415] Bluetooth: hci5 command 0x0409 tx timeout [ 373.206898] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 373.260278] 8021q: adding VLAN 0 to HW filter on device bond0 [ 373.275357] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 373.289263] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 373.297511] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 373.310278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 373.334861] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 373.340958] 8021q: adding VLAN 0 to HW filter on device team0 [ 373.365658] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 373.392131] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 373.400088] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 373.421871] bridge0: port 1(bridge_slave_0) entered blocking state [ 373.428303] bridge0: port 1(bridge_slave_0) entered forwarding state [ 373.464120] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 373.471575] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 373.478782] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 373.534018] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 373.554886] bridge0: port 2(bridge_slave_1) entered blocking state [ 373.561319] bridge0: port 2(bridge_slave_1) entered forwarding state 11:45:29 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendto(r0, &(0x7f0000000380)="f6a073b72742b506f3a504992931", 0xe, 0x8000, 0x0, 0x0) 11:45:29 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x10001, 0x400) r1 = syz_open_dev$vcsn(&(0x7f0000000140), 0x7, 0x24c042) ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r0, 0x7a9, &(0x7f0000000040)={{@my=0x0, 0x7f}, 0x40, 0x3, 0x0, 0x6, 0xf1, 0x5, 0x39, 0x3}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(0xffffffffffffffff, 0x7a8, &(0x7f0000000080)={{@host, 0x20000}, @hyper, 0x4, 0x9, 0x0, 0x5, 0x6, 0xd350}) socketpair(0x6, 0x80000, 0x10001, &(0x7f0000000180)) ioctl$SNAPSHOT_ATOMIC_RESTORE(r1, 0x3304) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000100)={0x80000001, 0x27}) 11:45:29 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x10001, 0x400) r1 = syz_open_dev$vcsn(&(0x7f0000000140), 0x7, 0x24c042) ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r0, 0x7a9, &(0x7f0000000040)={{@my=0x0, 0x7f}, 0x40, 0x3, 0x0, 0x6, 0xf1, 0x5, 0x39, 0x3}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(0xffffffffffffffff, 0x7a8, &(0x7f0000000080)={{@host, 0x20000}, @hyper, 0x4, 0x9, 0x0, 0x5, 0x6, 0xd350}) socketpair(0x6, 0x80000, 0x10001, &(0x7f0000000180)) ioctl$SNAPSHOT_ATOMIC_RESTORE(r1, 0x3304) socket$nl_route(0x10, 0x3, 0x0) r2 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0), 0x20000, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000100)={0x80000001, 0x27}) 11:45:29 executing program 3: syz_open_dev$vcsn(&(0x7f0000000000), 0x10001, 0x400) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0), 0x20000, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000100)={0x80000001, 0x27}) 11:45:29 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendto(r0, &(0x7f0000000380)="f6a073b72742b506f3a504992931", 0xe, 0x8000, 0x0, 0x0) 11:45:29 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendto(r0, &(0x7f0000000380)="f6a073b72742b506f3a504992931b451b0", 0x11, 0x8000, 0x0, 0x0) 11:45:29 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendto(r0, &(0x7f0000000380)="f6a073b72742b506f3a504992931", 0xe, 0x8000, 0x0, 0x0) [ 374.150927] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 374.171763] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 374.217101] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 374.249006] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 374.275601] device bridge_slave_1 left promiscuous mode [ 374.287777] bridge0: port 2(bridge_slave_1) entered disabled state [ 374.318690] device bridge_slave_0 left promiscuous mode 11:45:29 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendto(r0, &(0x7f0000000380)="f6a073b72742b506f3a504992931", 0xe, 0x8000, 0x0, 0x0) [ 374.364638] bridge0: port 1(bridge_slave_0) entered disabled state [ 374.418728] device veth1_macvtap left promiscuous mode [ 374.449475] device veth0_macvtap left promiscuous mode [ 374.492896] device veth1_vlan left promiscuous mode [ 374.529578] device veth0_vlan left promiscuous mode [ 374.691993] syz-executor.3: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 374.708494] syz-executor.4: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 374.741319] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 374.746532] CPU: 0 PID: 15730 Comm: syz-executor.3 Not tainted 4.14.232-syzkaller #0 [ 374.754422] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 374.763957] Call Trace: [ 374.766617] dump_stack+0x1b2/0x281 [ 374.770535] warn_alloc.cold+0x96/0x1cc [ 374.774517] ? zone_watermark_ok_safe+0x220/0x220 [ 374.775386] syz-executor.4 cpuset= [ 374.779376] __alloc_pages_nodemask+0x2127/0x2720 [ 374.779397] ? lock_acquire+0x170/0x3f0 [ 374.791832] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 374.796686] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 374.802033] / mems_allowed=0-1 [ 374.802141] ? __mutex_unlock_slowpath+0x75/0x770 [ 374.802156] alloc_pages_current+0x155/0x260 [ 374.814579] ion_page_pool_alloc+0x118/0x1b0 [ 374.818993] ion_system_heap_allocate+0x133/0x8c0 [ 374.823841] ? ion_alloc+0x187/0x810 [ 374.827994] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 374.833454] ? ion_system_contig_heap_create+0x130/0x130 [ 374.838907] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 374.843927] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 374.848776] ion_alloc+0x204/0x810 [ 374.852334] ? ion_dma_buf_release+0x40/0x40 [ 374.856748] ? __might_fault+0x177/0x1b0 [ 374.860817] ion_ioctl+0xea/0x1f0 [ 374.864263] ? ion_query_heaps+0x360/0x360 [ 374.868496] ? ion_query_heaps+0x360/0x360 [ 374.872731] do_vfs_ioctl+0x75a/0xff0 [ 374.876534] ? ioctl_preallocate+0x1a0/0x1a0 [ 374.880938] ? lock_downgrade+0x740/0x740 [ 374.885086] ? __fget+0x225/0x360 [ 374.888533] ? do_vfs_ioctl+0xff0/0xff0 [ 374.892504] ? security_file_ioctl+0x83/0xb0 [ 374.896908] SyS_ioctl+0x7f/0xb0 [ 374.900353] ? do_vfs_ioctl+0xff0/0xff0 [ 374.904326] do_syscall_64+0x1d5/0x640 [ 374.908211] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 374.913414] RIP: 0033:0x4665f9 [ 374.916597] RSP: 002b:00007f7215804188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 374.924299] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 374.931558] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000004 [ 374.938822] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 374.946084] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 374.953432] R13: 00007ffdb21b4b4f R14: 00007f7215804300 R15: 0000000000022000 [ 374.961848] Mem-Info: [ 374.964642] active_anon:13561 inactive_anon:10790 isolated_anon:12 [ 374.964642] active_file:405 inactive_file:390 isolated_file:25 [ 374.964642] unevictable:0 dirty:31 writeback:0 unstable:0 [ 374.964642] slab_reclaimable:13548 slab_unreclaimable:115623 [ 374.964642] mapped:44819 shmem:11025 pagetables:792 bounce:0 [ 374.964642] free:26096 free_pcp:321 free_cma:0 [ 374.985725] CPU: 1 PID: 15732 Comm: syz-executor.4 Not tainted 4.14.232-syzkaller #0 [ 375.000547] Node 0 active_anon:51700kB inactive_anon:35004kB active_file:1516kB inactive_file:1584kB unevictable:0kB isolated(anon):48kB isolated(file):100kB mapped:179220kB dirty:36kB writeback:0kB shmem:35872kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 16384kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 375.006222] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 375.006226] Call Trace: [ 375.006247] dump_stack+0x1b2/0x281 [ 375.006260] warn_alloc.cold+0x96/0x1cc [ 375.006272] ? zone_watermark_ok_safe+0x220/0x220 [ 375.006294] __alloc_pages_nodemask+0x2127/0x2720 [ 375.006308] ? _raw_spin_unlock_irq+0x24/0x80 [ 375.035515] Node 1 active_anon:2544kB inactive_anon:8156kB active_file:104kB inactive_file:176kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:56kB dirty:88kB writeback:0kB shmem:8228kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 375.044827] ? lock_acquire+0x170/0x3f0 [ 375.044845] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 375.044862] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 375.047516] Node 0 [ 375.051141] ? __mutex_unlock_slowpath+0x75/0x770 [ 375.055181] DMA free:11044kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 375.059973] alloc_pages_current+0x155/0x260 [ 375.064853] lowmem_reserve[]: [ 375.069328] ion_page_pool_alloc+0x118/0x1b0 [ 375.100277] 0 [ 375.104136] ion_system_heap_allocate+0x133/0x8c0 [ 375.104146] ? ion_alloc+0x187/0x810 [ 375.104162] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 375.109623] 2717 [ 375.114459] ? ion_system_contig_heap_create+0x130/0x130 [ 375.114470] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 375.114482] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 375.114492] ion_alloc+0x204/0x810 [ 375.114507] ? ion_dma_buf_release+0x40/0x40 [ 375.116776] 2718 [ 375.121589] ? __might_fault+0x177/0x1b0 [ 375.121603] ion_ioctl+0xea/0x1f0 [ 375.121612] ? ion_query_heaps+0x360/0x360 [ 375.121623] ? ion_query_heaps+0x360/0x360 [ 375.121634] do_vfs_ioctl+0x75a/0xff0 [ 375.121645] ? ioctl_preallocate+0x1a0/0x1a0 [ 375.147237] 2718 [ 375.151579] ? lock_downgrade+0x740/0x740 [ 375.151594] ? __fget+0x225/0x360 [ 375.151604] ? do_vfs_ioctl+0xff0/0xff0 [ 375.151615] ? security_file_ioctl+0x83/0xb0 [ 375.151628] SyS_ioctl+0x7f/0xb0 [ 375.154800] 2718 [ 375.159162] ? do_vfs_ioctl+0xff0/0xff0 [ 375.159175] do_syscall_64+0x1d5/0x640 [ 375.159190] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 375.165902] RIP: 0033:0x4665f9 [ 375.165908] RSP: 002b:00007f9108899188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 375.165918] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 375.165922] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000006 [ 375.165927] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 375.165931] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 375.165936] R13: 00007fffb2c94dcf R14: 00007f9108899300 R15: 0000000000022000 [ 375.312995] Bluetooth: hci5 command 0x041b tx timeout [ 375.318789] Node 0 DMA32 free:51536kB min:36200kB low:45248kB high:54296kB active_anon:51788kB inactive_anon:35000kB active_file:24kB inactive_file:240kB unevictable:0kB writepending:28kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7360kB pagetables:2392kB bounce:0kB free_pcp:212kB local_pcp:120kB free_cma:0kB [ 375.348251] device hsr_slave_1 left promiscuous mode [ 375.348253] lowmem_reserve[]: 0 0 0 0 0 [ 375.357865] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 375.392452] device hsr_slave_0 left promiscuous mode [ 375.447344] team0 (unregistering): Port device team_slave_1 removed [ 375.503030] team0 (unregistering): Port device team_slave_0 removed [ 375.506652] lowmem_reserve[]: 0 0 0 0 0 [ 375.534369] Node 1 Normal free:63464kB min:53696kB low:67120kB high:80544kB active_anon:2588kB inactive_anon:8156kB active_file:328kB inactive_file:2332kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:448kB pagetables:632kB bounce:0kB free_pcp:840kB local_pcp:140kB free_cma:0kB [ 375.564264] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 375.571457] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 375.658680] lowmem_reserve[]: 0 0 0 0 0 [ 375.662972] Node 0 DMA: 2*4kB (UE) 0*8kB 1*16kB (E) 5*32kB (UE) 1*64kB (E) 1*128kB (E) 2*256kB (UE) 2*512kB (UE) 3*1024kB (UE) 3*2048kB (UME) 0*4096kB = 11128kB [ 375.667875] bond0 (unregistering): Released all slaves [ 375.678655] Node 0 DMA32: 1344*4kB (MEH) 539*8kB (MEH) 118*16kB (MEH) 506*32kB (UME) 146*64kB (U) 1*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 37240kB [ 375.699334] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 375.712092] Node 1 Normal: 2824*4kB (UM) 113*8kB (UME) 79*16kB (UME) 69*32kB (UME) 78*64kB (UME) 28*128kB (UME) 8*256kB (UM) 7*512kB (UM) 3*1024kB (M) 1*2048kB (M) 8*4096kB (U) = 67768kB [ 375.739689] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 375.845104] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 375.889606] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 375.927411] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 375.953874] 11418 total pagecache pages [ 375.966779] 0 pages in swap cache [ 375.978998] Swap cache stats: add 0, delete 0, find 0/0 [ 376.000649] Free swap = 0kB [ 376.025230] Total swap = 0kB [ 376.040636] 2097051 pages RAM [ 376.055166] 0 pages HighMem/MovableOnly [ 376.075469] 363849 pages reserved [ 376.091279] 0 pages cma reserved [ 376.303176] oom_reaper: reaped process 15732 (syz-executor.4), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 376.527587] syz-executor.3 invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 376.616635] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 376.639868] CPU: 0 PID: 14586 Comm: syz-executor.3 Not tainted 4.14.232-syzkaller #0 [ 376.647863] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 376.657216] Call Trace: [ 376.659817] dump_stack+0x1b2/0x281 [ 376.663466] dump_header+0x178/0x82f [ 376.667368] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 376.672915] ? ___ratelimit+0x2cd/0x530 [ 376.676908] oom_kill_process.cold+0x10/0xa40 [ 376.681413] out_of_memory+0xe3e/0x1190 [ 376.685389] ? oom_killer_disable+0x1c0/0x1c0 [ 376.689882] ? mutex_trylock+0x152/0x1a0 [ 376.693945] __alloc_pages_nodemask+0x23e1/0x2720 [ 376.698802] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 376.703760] alloc_pages_current+0x155/0x260 [ 376.708180] filemap_fault+0x11a1/0x1ad0 [ 376.712271] ext4_filemap_fault+0x84/0xb0 [ 376.716428] __do_fault+0xfa/0x380 [ 376.719986] __handle_mm_fault+0x2497/0x4620 [ 376.724396] ? vm_insert_page+0x7c0/0x7c0 [ 376.730041] ? hrtimer_nanosleep+0x1ff/0x4b0 [ 376.734447] ? nanosleep_copyout+0x100/0x100 [ 376.738871] ? mark_held_locks+0xa6/0xf0 [ 376.742934] handle_mm_fault+0x455/0x9c0 [ 376.747784] __do_page_fault+0x549/0xad0 [ 376.751847] ? spurious_fault+0x640/0x640 [ 376.755993] ? do_page_fault+0x60/0x500 [ 376.759959] ? page_fault+0x2f/0x50 [ 376.763614] page_fault+0x45/0x50 [ 376.767079] RIP: 5b7a2:0x3 [ 376.769915] RSP: 000d:00007ffdb21b4e0c EFLAGS: 00000032 [ 377.114664] Mem-Info: [ 377.134914] active_anon:13008 inactive_anon:10790 isolated_anon:0 [ 377.134914] active_file:267 inactive_file:342 isolated_file:0 [ 377.134914] unevictable:0 dirty:16 writeback:1 unstable:0 [ 377.134914] slab_reclaimable:13450 slab_unreclaimable:114723 [ 377.134914] mapped:53298 shmem:11025 pagetables:768 bounce:0 [ 377.134914] free:29236 free_pcp:616 free_cma:0 [ 377.251256] Node 0 active_anon:49592kB inactive_anon:35000kB active_file:96kB inactive_file:52kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:198200kB dirty:64kB writeback:0kB shmem:35868kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 14336kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 377.331293] Node 1 active_anon:2440kB inactive_anon:8160kB active_file:20kB inactive_file:2988kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:15492kB dirty:0kB writeback:4kB shmem:8232kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 377.391514] Bluetooth: hci5 command 0x040f tx timeout [ 377.411287] Node 0 DMA free:11072kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:8kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 377.511250] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 377.516339] Node 0 DMA32 free:36092kB min:36200kB low:45248kB high:54296kB active_anon:49592kB inactive_anon:35000kB active_file:416kB inactive_file:396kB unevictable:0kB writepending:64kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7328kB pagetables:2356kB bounce:0kB free_pcp:1036kB local_pcp:676kB free_cma:0kB [ 377.611243] lowmem_reserve[]: 0 0 0 0 0 [ 377.615291] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 377.656034] lowmem_reserve[]: 0 0 0 0 0 [ 377.671484] Node 1 Normal free:72296kB min:53696kB low:67120kB high:80544kB active_anon:2440kB inactive_anon:8160kB active_file:612kB inactive_file:2884kB unevictable:0kB writepending:4kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:416kB pagetables:716kB bounce:0kB free_pcp:332kB local_pcp:212kB free_cma:0kB [ 377.761245] lowmem_reserve[]: 0 0 0 0 0 [ 377.765400] Node 0 DMA: 4*4kB (UE) 1*8kB (U) 1*16kB (E) 1*32kB (E) 2*64kB (UE) 1*128kB (E) 2*256kB (UE) 2*512kB (UE) 3*1024kB (UE) 3*2048kB (UME) 0*4096kB = 11080kB [ 377.821459] Node 0 DMA32: 1657*4kB (UME) 779*8kB (UME) 147*16kB (UME) 18*32kB (UME) 8*64kB (UM) 6*128kB (UMH) 5*256kB (UMH) 3*512kB (UMH) 3*1024kB (UM) 6*2048kB (UM) 0*4096kB = 35244kB [ 377.881248] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 377.921254] Node 1 Normal: 0*4kB 3*8kB (UE) 4*16kB (ME) 3*32kB (ME) 55*64kB (ME) 18*128kB (UME) 5*256kB (M) 7*512kB (UM) 74*1024kB (UM) 2*2048kB (UM) 9*4096kB (U) = 127608kB [ 377.961300] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 377.970186] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 378.011363] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 378.020240] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 378.051266] 12064 total pagecache pages [ 378.055395] 0 pages in swap cache [ 378.058846] Swap cache stats: add 0, delete 0, find 0/0 [ 378.101309] Free swap = 0kB [ 378.104380] Total swap = 0kB [ 378.107399] 2097051 pages RAM [ 378.110498] 0 pages HighMem/MovableOnly [ 378.141269] 363849 pages reserved [ 378.144762] 0 pages cma reserved [ 378.148149] Out of memory (oom_kill_allocating_task): Kill process 14586 (syz-executor.3) score 0 or sacrifice child [ 378.183855] Killed process 15730 (syz-executor.3) total-vm:93252kB, anon-rss:2192kB, file-rss:34820kB, shmem-rss:0kB [ 378.220151] oom_reaper: reaped process 15730 (syz-executor.3), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 379.471361] Bluetooth: hci5 command 0x0419 tx timeout [ 379.819862] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 379.834274] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 379.846450] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 379.861596] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 379.878019] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 379.892764] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 379.900648] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 379.924547] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 379.931856] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 379.938950] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 379.962276] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 379.972446] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 379.983005] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 380.012213] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 380.025215] syz-executor.5 invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=0, oom_score_adj=0 [ 380.041413] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 380.046562] CPU: 0 PID: 15512 Comm: syz-executor.5 Not tainted 4.14.232-syzkaller #0 [ 380.054443] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 380.063806] Call Trace: [ 380.066400] dump_stack+0x1b2/0x281 [ 380.070029] dump_header+0x178/0x82f [ 380.073761] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 380.078860] ? ___ratelimit+0x2cd/0x530 [ 380.082844] oom_kill_process.cold+0x10/0xa40 [ 380.087444] out_of_memory+0xe3e/0x1190 [ 380.091426] ? oom_killer_disable+0x1c0/0x1c0 [ 380.095916] ? mutex_trylock+0x152/0x1a0 [ 380.099975] __alloc_pages_nodemask+0x23e1/0x2720 [ 380.104834] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 380.109672] ? sock_alloc+0x3c/0x270 [ 380.113406] ? cache_grow_begin+0x3f/0x700 [ 380.117636] cache_grow_begin+0x91/0x700 [ 380.121695] fallback_alloc+0x207/0x2c0 [ 380.125668] kmem_cache_alloc+0x1e5/0x3c0 [ 380.129812] sk_prot_alloc+0x5f/0x290 [ 380.133606] sk_alloc+0x36/0xcd0 [ 380.136971] unix_create1+0x78/0x4f0 [ 380.141807] unix_create+0xdd/0x1c0 [ 380.145448] __sock_create+0x303/0x620 [ 380.149331] SyS_socket+0xd1/0x1b0 [ 380.152862] ? move_addr_to_kernel+0x60/0x60 [ 380.157263] ? do_syscall_64+0x4c/0x640 [ 380.161226] ? move_addr_to_kernel+0x60/0x60 [ 380.165632] do_syscall_64+0x1d5/0x640 [ 380.169531] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 380.174737] RIP: 0033:0x467c67 [ 380.177935] RSP: 002b:00007fffad4287d8 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 380.185635] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000000467c67 [ 380.192898] RDX: 0000000000000000 RSI: 0000000000080002 RDI: 0000000000000001 [ 380.200175] RBP: 00000000004bf800 R08: 0000000000000003 R09: 007273685f6f745f [ 380.208150] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fffad428840 [ 380.215419] R13: 00000000004bf800 R14: 0000000000000003 R15: 0000000000000000 [ 380.234424] Mem-Info: [ 380.236890] active_anon:12393 inactive_anon:10789 isolated_anon:0 [ 380.236890] active_file:77 inactive_file:63 isolated_file:1 [ 380.236890] unevictable:0 dirty:9 writeback:0 unstable:0 [ 380.236890] slab_reclaimable:13440 slab_unreclaimable:113830 [ 380.236890] mapped:52927 shmem:11024 pagetables:730 bounce:0 [ 380.236890] free:14018 free_pcp:3 free_cma:0 [ 380.275217] Node 0 active_anon:47592kB inactive_anon:35000kB active_file:44kB inactive_file:48kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:198224kB dirty:8kB writeback:0kB shmem:35868kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 380.306540] Node 1 active_anon:1980kB inactive_anon:8156kB active_file:32kB inactive_file:64kB unevictable:0kB isolated(anon):0kB isolated(file):4kB mapped:13084kB dirty:28kB writeback:0kB shmem:8228kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 380.337262] Node 0 DMA free:10964kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 380.370670] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 380.371291] syz-executor.3: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 380.375798] Node 0 DMA32 free:17596kB min:36200kB low:45248kB high:54296kB active_anon:47592kB inactive_anon:35000kB active_file:44kB inactive_file:48kB unevictable:0kB writepending:8kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7328kB pagetables:2356kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 380.416820] syz-executor.4: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 380.419300] syz-executor.3 cpuset= [ 380.435258] lowmem_reserve[]: [ 380.437527] / [ 380.438812] 0 [ 380.442042] mems_allowed=0-1 [ 380.443674] 0 [ 380.445467] CPU: 1 PID: 15730 Comm: syz-executor.3 Not tainted 4.14.232-syzkaller #0 [ 380.448552] 0 [ 380.450343] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 380.459102] 0 [ 380.460821] Call Trace: [ 380.470213] 0 [ 380.471987] dump_stack+0x1b2/0x281 [ 380.472002] warn_alloc.cold+0x96/0x1cc [ 380.476394] ? zone_watermark_ok_safe+0x220/0x220 [ 380.480165] Node 0 [ 380.484139] ? usleep_range+0x130/0x130 [ 380.484149] ? try_to_free_pages+0x23f/0x6e0 [ 380.484158] ? _find_next_bit+0xdb/0x100 [ 380.484168] ? run_timer_softirq+0x5a0/0x5a0 [ 380.484184] __alloc_pages_nodemask+0x2127/0x2720 [ 380.489028] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 380.491284] ? lock_acquire+0x170/0x3f0 [ 380.491301] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 380.491314] ? ion_page_pool_alloc+0x9e/0x1b0 [ 380.495372] lowmem_reserve[]: [ 380.499787] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 380.503862] 0 [ 380.508231] alloc_pages_current+0x155/0x260 [ 380.513072] 0 [ 380.538142] ion_page_pool_alloc+0x118/0x1b0 [ 380.538154] ion_system_heap_allocate+0x133/0x8c0 [ 380.538162] ? ion_alloc+0x187/0x810 [ 380.538173] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 380.538187] ? ion_system_contig_heap_create+0x130/0x130 [ 380.542198] 0 [ 380.547019] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 380.551546] 0 [ 380.554605] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 380.560029] 0 [ 380.561836] ion_alloc+0x204/0x810 [ 380.561850] ? ion_dma_buf_release+0x40/0x40 [ 380.561862] ? __might_fault+0x177/0x1b0 [ 380.561874] ion_ioctl+0xea/0x1f0 [ 380.568064] ? ion_query_heaps+0x360/0x360 [ 380.572509] Node 1 [ 380.577329] ? ion_query_heaps+0x360/0x360 [ 380.581054] Normal free:26308kB min:53696kB low:67120kB high:80544kB active_anon:1980kB inactive_anon:8156kB active_file:528kB inactive_file:64kB unevictable:0kB writepending:28kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:384kB pagetables:564kB bounce:0kB free_pcp:120kB local_pcp:120kB free_cma:0kB [ 380.586838] do_vfs_ioctl+0x75a/0xff0 [ 380.586853] ? ioctl_preallocate+0x1a0/0x1a0 [ 380.586862] ? lock_downgrade+0x740/0x740 [ 380.586878] ? __fget+0x225/0x360 [ 380.592384] lowmem_reserve[]: [ 380.594149] ? do_vfs_ioctl+0xff0/0xff0 [ 380.599140] 0 [ 380.600961] ? security_file_ioctl+0x83/0xb0 [ 380.606389] 0 [ 380.608147] SyS_ioctl+0x7f/0xb0 [ 380.611699] 0 [ 380.616069] ? do_vfs_ioctl+0xff0/0xff0 [ 380.620126] 0 [ 380.623753] do_syscall_64+0x1d5/0x640 [ 380.623768] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 380.623777] RIP: 0033:0x4665f9 [ 380.623785] RSP: 002b:00007f7215804188 EFLAGS: 00000246 [ 380.628294] 0 [ 380.630520] ORIG_RAX: 0000000000000010 [ 380.630527] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 380.662935] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000004 [ 380.662942] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 380.662946] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 380.662951] R13: 00007ffdb21b4b4f R14: 00007f7215804300 R15: 0000000000022000 [ 380.670086] syz-executor.4 cpuset= [ 380.676815] Node 0 [ 380.679874] / [ 380.683068] DMA: [ 380.692745] mems_allowed=0-1 [ 380.697761] 1*4kB [ 380.698933] CPU: 1 PID: 15732 Comm: syz-executor.4 Not tainted 4.14.232-syzkaller #0 [ 380.701397] (E) [ 380.705378] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 380.707723] 0*8kB [ 380.711680] Call Trace: [ 380.711704] dump_stack+0x1b2/0x281 [ 380.711717] warn_alloc.cold+0x96/0x1cc [ 380.711730] ? zone_watermark_ok_safe+0x220/0x220 [ 380.711742] ? usleep_range+0x130/0x130 [ 380.717112] 1*16kB [ 380.720479] ? try_to_free_pages+0x23f/0x6e0 [ 380.725954] (E) [ 380.727772] ? _find_next_bit+0xdb/0x100 [ 380.731750] 2*32kB [ 380.739000] ? run_timer_softirq+0x5a0/0x5a0 [ 380.746406] (UE) [ 380.753998] __alloc_pages_nodemask+0x2127/0x2720 [ 380.754016] ? lock_acquire+0x170/0x3f0 [ 380.754030] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 380.761329] 2*64kB [ 380.768694] ? ion_page_pool_alloc+0x9e/0x1b0 [ 380.772323] (UE) [ 380.774511] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 380.776190] 2*128kB [ 380.778250] alloc_pages_current+0x155/0x260 [ 380.781356] (UE) [ 380.783460] ion_page_pool_alloc+0x118/0x1b0 [ 380.791369] 1*256kB [ 380.793306] ion_system_heap_allocate+0x133/0x8c0 [ 380.802676] (E) [ 380.804784] ? ion_alloc+0x187/0x810 [ 380.807618] 2*512kB [ 380.811243] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 380.811253] ? ion_system_contig_heap_create+0x130/0x130 [ 380.811262] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 380.811274] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 380.811285] ion_alloc+0x204/0x810 [ 380.815246] (UE) [ 380.820173] ? ion_dma_buf_release+0x40/0x40 [ 380.824342] 3*1024kB [ 380.826533] ? __might_fault+0x177/0x1b0 [ 380.835081] (UE) [ 380.837029] ion_ioctl+0xea/0x1f0 [ 380.839240] 3*2048kB [ 380.843659] ? ion_query_heaps+0x360/0x360 [ 380.843670] ? ion_query_heaps+0x360/0x360 [ 380.843681] do_vfs_ioctl+0x75a/0xff0 [ 380.843694] ? ioctl_preallocate+0x1a0/0x1a0 [ 380.845742] (UME) [ 380.850579] ? lock_downgrade+0x740/0x740 [ 380.854585] 0*4096kB [ 380.859383] ? __fget+0x225/0x360 [ 380.861625] = 10964kB [ 380.866082] ? do_vfs_ioctl+0xff0/0xff0 [ 380.868118] Node 0 [ 380.873652] ? security_file_ioctl+0x83/0xb0 [ 380.873663] SyS_ioctl+0x7f/0xb0 [ 380.873671] ? do_vfs_ioctl+0xff0/0xff0 [ 380.873682] do_syscall_64+0x1d5/0x640 [ 380.873697] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 380.875996] DMA32: [ 380.880385] RIP: 0033:0x4665f9 [ 380.882449] 1642*4kB [ 380.886806] RSP: 002b:00007f9108899188 EFLAGS: 00000246 [ 380.889104] (ME) [ 380.893920] ORIG_RAX: 0000000000000010 [ 380.893926] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 380.893931] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000006 [ 380.893935] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 380.893940] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 380.893945] R13: 00007fffb2c94dcf R14: 00007f9108899300 R15: 0000000000022000 [ 380.910884] warn_alloc_show_mem: 1 callbacks suppressed [ 380.910888] Mem-Info: [ 380.952583] 589*8kB [ 380.981781] active_anon:12393 inactive_anon:10789 isolated_anon:0 [ 380.981781] active_file:19 inactive_file:1028 isolated_file:1 [ 380.981781] unevictable:0 dirty:9 writeback:0 unstable:0 [ 380.981781] slab_reclaimable:13440 slab_unreclaimable:113830 [ 380.981781] mapped:53402 shmem:11024 pagetables:730 bounce:0 [ 380.981781] free:25672 free_pcp:151 free_cma:0 [ 381.049377] (MEH) [ 381.057325] Node 0 active_anon:47592kB inactive_anon:35000kB active_file:8kB inactive_file:16kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:198216kB dirty:12kB writeback:0kB shmem:35868kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 381.103720] 134*16kB [ 381.109146] Node 1 active_anon:2024kB inactive_anon:8156kB active_file:56kB inactive_file:6308kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:17440kB dirty:60kB writeback:0kB shmem:8228kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 381.123920] (UMEH) [ 381.139015] Node 0 DMA free:10964kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 381.191148] 11*32kB (UME) 2*64kB (MH) 1*128kB (M) 2*256kB (MH) 2*512kB (MH) 2*1024kB (UM) 0*2048kB 0*4096kB = 17616kB [ 381.254702] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 381.272159] Node 1 Normal: 61*4kB (U) 61*8kB (UE) 67*16kB (UME) 198*32kB (UME) 601*64kB (UME) 262*128kB (UME) 191*256kB (UM) 75*512kB (UM) 167*1024kB (UM) 3*2048kB (UM) 1*4096kB (U) = 348684kB [ 381.304970] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 381.315188] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 381.331611] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 381.336109] Node 0 [ 381.340288] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 381.340294] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 381.340297] 13588 total pagecache pages [ 381.340305] 0 pages in swap cache [ 381.340310] Swap cache stats: add 0, delete 0, find 0/0 [ 381.340312] Free swap = 0kB [ 381.340315] Total swap = 0kB [ 381.340321] 2097051 pages RAM [ 381.340324] 0 pages HighMem/MovableOnly [ 381.340327] 363849 pages reserved [ 381.340329] 0 pages cma reserved [ 381.340336] Out of memory (oom_kill_allocating_task): Kill process 15512 (syz-executor.5) score 0 or sacrifice child [ 381.340358] Killed process 15512 (syz-executor.5) total-vm:93120kB, anon-rss:84kB, file-rss:34460kB, shmem-rss:0kB [ 381.416357] DMA32 free:74304kB min:36200kB low:45248kB high:54296kB active_anon:47892kB inactive_anon:35000kB active_file:416kB inactive_file:2608kB unevictable:0kB writepending:4kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7360kB pagetables:2356kB bounce:0kB free_pcp:1188kB local_pcp:664kB free_cma:0kB [ 381.445889] lowmem_reserve[]: 0 0 0 0 0 [ 381.450569] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 381.476950] lowmem_reserve[]: 0 0 0 0 0 [ 381.482364] Node 1 Normal free:413884kB min:53696kB low:67120kB high:80544kB active_anon:1924kB inactive_anon:8156kB active_file:1556kB inactive_file:5608kB unevictable:0kB writepending:60kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:384kB pagetables:564kB bounce:0kB free_pcp:1340kB local_pcp:620kB free_cma:0kB [ 381.512784] lowmem_reserve[]: 0 0 0 0 0 [ 381.518950] Node 0 DMA: 1*4kB (E) 0*8kB 1*16kB (E) 2*32kB (UE) 2*64kB (UE) 2*128kB (UE) 1*256kB (E) 2*512kB (UE) 3*1024kB (UE) 3*2048kB (UME) 0*4096kB = 10964kB [ 381.551706] Node 0 DMA32: 1350*4kB (UME) 832*8kB (UE) 325*16kB (UMEH) 196*32kB (UME) 673*64kB (UMEH) 117*128kB (UME) 68*256kB (UMEH) 22*512kB (UMH) 5*1024kB (UM) 0*2048kB 0*4096kB = 115368kB [ 381.572233] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 381.607210] Node 1 Normal: 410*4kB (UM) 383*8kB (UME) 371*16kB (UME) 476*32kB (UME) 935*64kB (UME) 337*128kB (UME) 214*256kB (UM) 86*512kB (UM) 80*1024kB (UM) 3*2048kB (UM) 1*4096kB (U) = 319824kB [ 381.631843] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 381.641907] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 381.652743] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 381.662560] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 381.671172] 14106 total pagecache pages [ 381.680173] 0 pages in swap cache [ 381.684485] Swap cache stats: add 0, delete 0, find 0/0 [ 381.694162] Free swap = 0kB [ 381.700281] Total swap = 0kB [ 381.704203] 2097051 pages RAM [ 381.707983] 0 pages HighMem/MovableOnly [ 381.714494] 363849 pages reserved [ 381.719255] 0 pages cma reserved [ 381.919928] syz-executor.3: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 381.941771] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 381.946924] CPU: 0 PID: 15730 Comm: syz-executor.3 Not tainted 4.14.232-syzkaller #0 [ 381.956276] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 381.966148] Call Trace: [ 381.968762] dump_stack+0x1b2/0x281 [ 381.972391] warn_alloc.cold+0x96/0x1cc [ 381.976382] ? zone_watermark_ok_safe+0x220/0x220 [ 381.981231] __alloc_pages_nodemask+0x2127/0x2720 [ 381.986101] ? lock_acquire+0x170/0x3f0 [ 381.990090] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 381.994935] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 382.000393] ? __mutex_unlock_slowpath+0x75/0x770 [ 382.005243] alloc_pages_current+0x155/0x260 [ 382.010258] ion_page_pool_alloc+0x118/0x1b0 [ 382.014664] ion_system_heap_allocate+0x133/0x8c0 [ 382.019507] ? _raw_spin_unlock+0x29/0x40 [ 382.023658] ? _ion_heap_freelist_drain+0x6e/0x410 [ 382.028581] ? ion_system_contig_heap_create+0x130/0x130 [ 382.034029] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 382.039046] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 382.043889] ion_alloc+0x27a/0x810 [ 382.047431] ? ion_dma_buf_release+0x40/0x40 [ 382.051837] ? __might_fault+0x177/0x1b0 [ 382.055922] ion_ioctl+0xea/0x1f0 [ 382.059477] ? ion_query_heaps+0x360/0x360 [ 382.067215] ? ion_query_heaps+0x360/0x360 [ 382.071451] do_vfs_ioctl+0x75a/0xff0 [ 382.075252] ? ioctl_preallocate+0x1a0/0x1a0 [ 382.079744] ? lock_downgrade+0x740/0x740 [ 382.083897] ? __fget+0x225/0x360 [ 382.087348] ? do_vfs_ioctl+0xff0/0xff0 [ 382.091319] ? security_file_ioctl+0x83/0xb0 [ 382.095724] SyS_ioctl+0x7f/0xb0 [ 382.099082] ? do_vfs_ioctl+0xff0/0xff0 [ 382.103051] do_syscall_64+0x1d5/0x640 [ 382.106951] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 382.112178] RIP: 0033:0x4665f9 [ 382.115379] RSP: 002b:00007f7215804188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 382.123097] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 382.130452] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000004 [ 382.137721] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 382.147074] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 382.154359] R13: 00007ffdb21b4b4f R14: 00007f7215804300 R15: 0000000000022000 [ 382.164222] warn_alloc_show_mem: 1 callbacks suppressed [ 382.164225] Mem-Info: [ 382.181364] active_anon:12502 inactive_anon:10791 isolated_anon:0 [ 382.181364] active_file:733 inactive_file:785 isolated_file:0 [ 382.181364] unevictable:0 dirty:4 writeback:0 unstable:0 [ 382.181364] slab_reclaimable:13427 slab_unreclaimable:113985 [ 382.181364] mapped:54230 shmem:11028 pagetables:731 bounce:0 [ 382.181364] free:75591 free_pcp:565 free_cma:0 [ 382.221339] Node 0 active_anon:48240kB inactive_anon:35008kB active_file:32kB inactive_file:48kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:198216kB dirty:16kB writeback:0kB shmem:35884kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 382.251345] Node 1 active_anon:1768kB inactive_anon:8156kB active_file:2900kB inactive_file:3092kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:18704kB dirty:0kB writeback:0kB shmem:8228kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 382.281331] Node 0 DMA free:10984kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 382.351324] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 382.356409] Node 0 DMA32 free:46168kB min:36200kB low:45248kB high:54296kB active_anon:48240kB inactive_anon:35008kB active_file:32kB inactive_file:48kB unevictable:0kB writepending:16kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7360kB pagetables:2360kB bounce:0kB free_pcp:876kB local_pcp:240kB free_cma:0kB [ 382.390033] lowmem_reserve[]: 0 0 0 0 0 [ 382.397428] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 382.430711] lowmem_reserve[]: 0 0 0 0 0 [ 382.436118] Node 1 Normal free:170796kB min:53696kB low:67120kB high:80544kB active_anon:1768kB inactive_anon:8156kB active_file:2900kB inactive_file:2908kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:512kB pagetables:564kB bounce:0kB free_pcp:1372kB local_pcp:724kB free_cma:0kB [ 382.443576] IPVS: ftp: loaded support on port[0] = 21 [ 382.473439] lowmem_reserve[]: 0 0 0 0 0 [ 382.477462] Node 0 DMA: 6*4kB (UE) 0*8kB 1*16kB (E) 2*32kB (UE) 2*64kB (UE) 2*128kB (UE) 1*256kB (E) 2*512kB (UE) 3*1024kB (UE) 3*2048kB (UME) 0*4096kB = 10984kB [ 382.493403] Node 0 DMA32: 1711*4kB (UMEH) 1519*8kB (UMEH) 734*16kB (UMEH) 440*32kB (UMEH) 8*64kB (UMH) 1*128kB (U) 3*256kB (UH) 2*512kB (UH) 0*1024kB 0*2048kB 0*4096kB = 47252kB [ 382.521890] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 382.553641] Node 1 Normal: 2991*4kB (UM) 2954*8kB (U) 2961*16kB (UM) 2756*32kB (UM) 216*64kB (U) 8*128kB (U) 9*256kB (U) 4*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 190364kB [ 382.598839] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 382.640925] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 382.676401] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 382.730664] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 382.756338] 15889 total pagecache pages [ 382.785362] 0 pages in swap cache [ 382.796593] Swap cache stats: add 0, delete 0, find 0/0 [ 382.810780] Free swap = 0kB [ 382.816460] Total swap = 0kB [ 382.819512] 2097051 pages RAM [ 382.824777] 0 pages HighMem/MovableOnly [ 382.829191] 363849 pages reserved [ 382.834223] 0 pages cma reserved [ 382.969365] chnl_net:caif_netlink_parms(): no params data found [ 383.231355] Bluetooth: hci2 command 0x0409 tx timeout [ 383.256285] bridge0: port 1(bridge_slave_0) entered blocking state [ 383.275042] bridge0: port 1(bridge_slave_0) entered disabled state [ 383.295767] device bridge_slave_0 entered promiscuous mode [ 383.316263] bridge0: port 2(bridge_slave_1) entered blocking state [ 383.334853] bridge0: port 2(bridge_slave_1) entered disabled state [ 383.355114] device bridge_slave_1 entered promiscuous mode [ 383.417563] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 383.457231] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 383.497049] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 383.513264] team0: Port device team_slave_0 added [ 383.519026] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 383.547073] team0: Port device team_slave_1 added [ 383.608098] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 383.622339] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 383.691438] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 383.717349] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 383.735398] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 383.804936] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 383.823361] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 383.831097] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 383.892208] device hsr_slave_0 entered promiscuous mode [ 383.911654] device hsr_slave_1 entered promiscuous mode [ 383.918189] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 383.942052] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 384.153672] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 384.249633] 8021q: adding VLAN 0 to HW filter on device bond0 [ 384.267747] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 384.308081] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 384.315316] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 384.345685] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 384.355808] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 384.366095] 8021q: adding VLAN 0 to HW filter on device team0 [ 384.388263] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 384.411741] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 384.431725] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 384.446067] bridge0: port 1(bridge_slave_0) entered blocking state [ 384.452492] bridge0: port 1(bridge_slave_0) entered forwarding state [ 384.486186] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 384.507201] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 384.526503] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 384.542106] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 384.549884] bridge0: port 2(bridge_slave_1) entered blocking state [ 384.557696] bridge0: port 2(bridge_slave_1) entered forwarding state [ 384.594902] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 384.611961] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 384.632603] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 384.639831] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 384.666651] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 384.694154] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 384.714505] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 384.723979] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 384.743165] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 384.763187] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 384.783738] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 384.805578] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 384.823362] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 384.832455] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 384.842669] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 384.862441] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 384.882515] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 384.906098] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 384.921353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 384.929398] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 384.961100] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 384.975625] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 384.982682] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 384.989416] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 385.009380] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 385.270869] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 385.289343] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 385.299745] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 385.310872] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 385.321359] Bluetooth: hci2 command 0x041b tx timeout [ 385.440524] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 385.450740] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 385.465028] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 385.480599] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 385.490508] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 385.501128] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 385.515969] device veth0_vlan entered promiscuous mode [ 385.529472] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 385.540408] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 385.555568] device veth1_vlan entered promiscuous mode [ 385.578556] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 385.595630] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 385.607548] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 385.616985] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 385.632456] device veth0_macvtap entered promiscuous mode [ 385.638768] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 385.655176] device veth1_macvtap entered promiscuous mode [ 385.665932] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 385.676243] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 385.692725] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 385.705998] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 385.717435] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 385.731015] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 385.746388] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 385.756506] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 385.771986] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 385.781116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 385.796648] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 385.807208] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 385.820194] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 385.828976] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 385.841997] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 385.849311] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 385.862514] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 385.879232] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 385.890034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 385.904991] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 385.914791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 385.929450] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 385.940043] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 385.955031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 385.966191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 385.979575] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 385.989447] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 386.000491] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 386.010284] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 386.366417] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 386.375134] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 386.383571] device bridge_slave_1 left promiscuous mode [ 386.389130] bridge0: port 2(bridge_slave_1) entered disabled state [ 386.398102] device bridge_slave_0 left promiscuous mode [ 386.403811] bridge0: port 1(bridge_slave_0) entered disabled state [ 386.477761] device hsr_slave_1 left promiscuous mode [ 386.486373] device hsr_slave_0 left promiscuous mode [ 386.500866] team0 (unregistering): Port device team_slave_1 removed [ 386.512692] team0 (unregistering): Port device team_slave_0 removed [ 386.524721] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 386.537943] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 386.570197] bond0 (unregistering): Released all slaves [ 387.295422] IPVS: ftp: loaded support on port[0] = 21 [ 387.391581] Bluetooth: hci2 command 0x040f tx timeout [ 387.405255] chnl_net:caif_netlink_parms(): no params data found [ 387.461234] bridge0: port 1(bridge_slave_0) entered blocking state [ 387.467754] bridge0: port 1(bridge_slave_0) entered disabled state [ 387.475697] device bridge_slave_0 entered promiscuous mode [ 387.483646] bridge0: port 2(bridge_slave_1) entered blocking state [ 387.490057] bridge0: port 2(bridge_slave_1) entered disabled state [ 387.497457] device bridge_slave_1 entered promiscuous mode [ 387.518304] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 387.527393] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 387.548121] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 387.555569] team0: Port device team_slave_0 added [ 387.560967] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 387.568397] team0: Port device team_slave_1 added [ 387.586553] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 387.592943] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 387.618257] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 387.630749] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 387.637693] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 387.663258] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 387.676228] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 387.683988] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 387.706050] device hsr_slave_0 entered promiscuous mode [ 387.711903] device hsr_slave_1 entered promiscuous mode [ 387.718490] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 387.725709] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 387.799235] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 387.829647] 8021q: adding VLAN 0 to HW filter on device bond0 [ 387.837820] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 387.847457] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 387.854627] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 387.862902] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 387.872183] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 387.878327] 8021q: adding VLAN 0 to HW filter on device team0 [ 387.886756] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 387.894216] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 387.902429] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 387.909967] bridge0: port 1(bridge_slave_0) entered blocking state [ 387.916356] bridge0: port 1(bridge_slave_0) entered forwarding state [ 387.923844] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 387.933770] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 387.940911] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 387.949512] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 387.958044] bridge0: port 2(bridge_slave_1) entered blocking state [ 387.964472] bridge0: port 2(bridge_slave_1) entered forwarding state [ 387.974781] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 387.982729] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 387.994549] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 388.001727] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 388.011188] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 388.019371] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 388.027362] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 388.035634] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 388.045771] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 388.052857] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 388.060648] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 388.073687] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 388.085367] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 388.095901] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 388.103157] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 388.110276] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 388.124959] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 388.134011] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 388.140247] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 388.147796] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 388.158147] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 388.213982] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 388.224818] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 388.257765] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 388.265482] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 388.273741] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 388.284107] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 388.291724] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 388.298581] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 388.307320] device veth0_vlan entered promiscuous mode [ 388.316043] device veth1_vlan entered promiscuous mode [ 388.322389] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 388.332044] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 388.344651] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 388.354611] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 388.362469] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 388.369828] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 388.379671] device veth0_macvtap entered promiscuous mode [ 388.387374] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 388.395974] device veth1_macvtap entered promiscuous mode [ 388.405869] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 388.415163] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 388.424493] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 388.434970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 388.444690] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 388.454507] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 388.463805] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 388.473564] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 388.482843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 388.492602] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 388.501783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 388.511986] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 388.522640] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 388.529833] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 388.538254] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 388.546447] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 388.554695] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 388.564619] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 388.574965] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 388.584781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 388.595553] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 388.604786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 388.614755] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 388.623930] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 388.633844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 388.643710] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 388.653519] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 388.663907] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 388.670776] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 388.679340] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 388.687313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 388.831974] Bluetooth: hci5 command 0x0409 tx timeout 11:45:44 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendto(r0, &(0x7f0000000380)="f6a073b72742b506f3a504992931", 0xe, 0x8000, 0x0, 0x0) 11:45:44 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0), 0x20000, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000100)={0x80000001, 0x27}) 11:45:44 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x10001, 0x400) r1 = syz_open_dev$vcsn(&(0x7f0000000140), 0x7, 0x24c042) ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r0, 0x7a9, &(0x7f0000000040)={{@my=0x0, 0x7f}, 0x40, 0x3, 0x0, 0x6, 0xf1, 0x5, 0x39, 0x3}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(0xffffffffffffffff, 0x7a8, &(0x7f0000000080)={{@host, 0x20000}, @hyper, 0x4, 0x9, 0x0, 0x5, 0x6, 0xd350}) socketpair(0x6, 0x80000, 0x10001, &(0x7f0000000180)) ioctl$SNAPSHOT_ATOMIC_RESTORE(r1, 0x3304) socket$nl_route(0x10, 0x3, 0x0) r2 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0), 0x20000, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000100)={0x80000001, 0x27}) 11:45:44 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x10001, 0x400) syz_open_dev$vcsn(&(0x7f0000000140), 0x7, 0x24c042) ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r0, 0x7a9, &(0x7f0000000040)={{@my=0x0, 0x7f}, 0x40, 0x3, 0x0, 0x6, 0xf1, 0x5, 0x39, 0x3}) r1 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0), 0x20000, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000100)={0x80000001, 0x27}) 11:45:44 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x10001, 0x400) r1 = syz_open_dev$vcsn(&(0x7f0000000140), 0x7, 0x24c042) ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r0, 0x7a9, &(0x7f0000000040)={{@my=0x0, 0x7f}, 0x40, 0x3, 0x0, 0x6, 0xf1, 0x5, 0x39, 0x3}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(0xffffffffffffffff, 0x7a8, &(0x7f0000000080)={{@host, 0x20000}, @hyper, 0x4, 0x9, 0x0, 0x5, 0x6, 0xd350}) socketpair(0x6, 0x80000, 0x10001, &(0x7f0000000180)) ioctl$SNAPSHOT_ATOMIC_RESTORE(r1, 0x3304) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000100)={0x80000001, 0x27}) 11:45:44 executing program 2: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x10001, 0x400) r1 = syz_open_dev$vcsn(&(0x7f0000000140), 0x7, 0x24c042) ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r0, 0x7a9, &(0x7f0000000040)={{@my=0x0, 0x7f}, 0x40, 0x3, 0x0, 0x6, 0xf1, 0x5, 0x39, 0x3}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(0xffffffffffffffff, 0x7a8, &(0x7f0000000080)={{@host, 0x20000}, @hyper, 0x4, 0x9, 0x0, 0x5, 0x6, 0xd350}) socketpair(0x6, 0x80000, 0x10001, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNAPSHOT_ATOMIC_RESTORE(r1, 0x3304) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x44, 0x0, 0x400, 0x70bd25, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3023d3782c859c3d}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}]}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000100)={0x80000001, 0x27}) 11:45:44 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x10001, 0x400) r1 = syz_open_dev$vcsn(&(0x7f0000000140), 0x7, 0x24c042) ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r0, 0x7a9, &(0x7f0000000040)={{@my=0x0, 0x7f}, 0x40, 0x3, 0x0, 0x6, 0xf1, 0x5, 0x39, 0x3}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(0xffffffffffffffff, 0x7a8, &(0x7f0000000080)={{@host, 0x20000}, @hyper, 0x4, 0x9, 0x0, 0x5, 0x6, 0xd350}) socketpair(0x6, 0x80000, 0x10001, &(0x7f0000000180)) ioctl$SNAPSHOT_ATOMIC_RESTORE(r1, 0x3304) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000100)={0x80000001, 0x27}) 11:45:44 executing program 2: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x10001, 0x400) r1 = syz_open_dev$vcsn(&(0x7f0000000140), 0x7, 0x24c042) ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r0, 0x7a9, &(0x7f0000000040)={{@my=0x0, 0x7f}, 0x40, 0x3, 0x0, 0x6, 0xf1, 0x5, 0x39, 0x3}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(0xffffffffffffffff, 0x7a8, &(0x7f0000000080)={{@host, 0x20000}, @hyper, 0x4, 0x9, 0x0, 0x5, 0x6, 0xd350}) socketpair(0x6, 0x80000, 0x10001, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNAPSHOT_ATOMIC_RESTORE(r1, 0x3304) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x44, 0x0, 0x400, 0x70bd25, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3023d3782c859c3d}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}]}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000100)={0x80000001, 0x27}) 11:45:44 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendto(r0, &(0x7f0000000380)="f6a073b72742b506f3a504992931b451", 0x10, 0x8000, 0x0, 0x0) 11:45:44 executing program 2: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x10001, 0x400) r1 = syz_open_dev$vcsn(&(0x7f0000000140), 0x7, 0x24c042) ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r0, 0x7a9, &(0x7f0000000040)={{@my=0x0, 0x7f}, 0x40, 0x3, 0x0, 0x6, 0xf1, 0x5, 0x39, 0x3}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(0xffffffffffffffff, 0x7a8, &(0x7f0000000080)={{@host, 0x20000}, @hyper, 0x4, 0x9, 0x0, 0x5, 0x6, 0xd350}) socketpair(0x6, 0x80000, 0x10001, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNAPSHOT_ATOMIC_RESTORE(r1, 0x3304) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x44, 0x0, 0x400, 0x70bd25, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3023d3782c859c3d}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}]}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000100)={0x80000001, 0x27}) 11:45:44 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x10001, 0x400) syz_open_dev$vcsn(&(0x7f0000000140), 0x7, 0x24c042) ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r0, 0x7a9, &(0x7f0000000040)={{@my=0x0, 0x7f}, 0x40, 0x3, 0x0, 0x6, 0xf1, 0x5, 0x39, 0x3}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(0xffffffffffffffff, 0x7a8, &(0x7f0000000080)={{@host, 0x20000}, @hyper, 0x4, 0x9, 0x0, 0x5, 0x6, 0xd350}) socketpair(0x6, 0x80000, 0x10001, &(0x7f0000000180)) r1 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0), 0x20000, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000100)={0x80000001, 0x27}) 11:45:44 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendto(r0, &(0x7f0000000380)="f6a073b72742b506f3a504992931b4", 0xf, 0x8000, 0x0, 0x0) [ 389.472010] Bluetooth: hci2 command 0x0419 tx timeout [ 390.776620] syz-executor.5: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 390.776719] syz-executor.1: [ 390.799675] syz-executor.5 cpuset= [ 390.811745] page allocation failure: order:4 [ 390.816660] / [ 390.821480] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 390.826974] mems_allowed=0-1 [ 390.829843] (null) [ 390.845325] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 390.849810] CPU: 1 PID: 16262 Comm: syz-executor.5 Not tainted 4.14.232-syzkaller #0 [ 390.858973] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 390.868331] Call Trace: [ 390.870956] dump_stack+0x1b2/0x281 [ 390.874620] warn_alloc.cold+0x96/0x1cc [ 390.878627] ? zone_watermark_ok_safe+0x220/0x220 [ 390.883693] __alloc_pages_nodemask+0x2127/0x2720 [ 390.888547] ? _raw_spin_unlock_irq+0x5a/0x80 [ 390.893139] ? finish_task_switch+0x178/0x610 [ 390.897923] ? finish_task_switch+0x14d/0x610 [ 390.902493] ? lock_acquire+0x170/0x3f0 [ 390.906484] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 390.911440] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 390.916993] ? __mutex_unlock_slowpath+0x75/0x770 [ 390.923517] ? alloc_pages_current+0x16/0x260 [ 390.928021] alloc_pages_current+0x155/0x260 [ 390.932441] ion_page_pool_alloc+0x118/0x1b0 [ 390.937035] ion_system_heap_allocate+0x133/0x8c0 [ 390.941892] ? ion_alloc+0x187/0x810 [ 390.945618] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 390.951111] ? ion_system_contig_heap_create+0x130/0x130 [ 390.956571] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 390.961788] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 390.966657] ion_alloc+0x204/0x810 [ 390.970230] ? ion_dma_buf_release+0x40/0x40 [ 390.974670] ? __might_fault+0x177/0x1b0 [ 390.978768] ion_ioctl+0xea/0x1f0 [ 390.982242] ? ion_query_heaps+0x360/0x360 [ 390.986484] ? ion_query_heaps+0x360/0x360 [ 390.990735] do_vfs_ioctl+0x75a/0xff0 [ 390.994658] ? ioctl_preallocate+0x1a0/0x1a0 [ 390.999180] ? lock_downgrade+0x740/0x740 [ 391.003945] ? __fget+0x225/0x360 [ 391.007408] ? do_vfs_ioctl+0xff0/0xff0 [ 391.011389] ? security_file_ioctl+0x83/0xb0 [ 391.015834] SyS_ioctl+0x7f/0xb0 [ 391.019233] ? do_vfs_ioctl+0xff0/0xff0 [ 391.023221] do_syscall_64+0x1d5/0x640 [ 391.027135] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 391.032420] RIP: 0033:0x4665f9 [ 391.035781] RSP: 002b:00007f97bed79188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 391.043545] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 391.050906] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000005 [ 391.058177] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 391.066516] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 391.073789] R13: 00007ffe0c744e6f R14: 00007f97bed79300 R15: 0000000000022000 [ 391.081080] CPU: 0 PID: 16280 Comm: syz-executor.1 Not tainted 4.14.232-syzkaller #0 [ 391.088982] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 391.091628] Bluetooth: hci5 command 0x041b tx timeout [ 391.098349] Call Trace: [ 391.106156] dump_stack+0x1b2/0x281 [ 391.109790] warn_alloc.cold+0x96/0x1cc [ 391.113774] ? zone_watermark_ok_safe+0x220/0x220 [ 391.118652] __alloc_pages_nodemask+0x2127/0x2720 [ 391.123524] ? lock_acquire+0x170/0x3f0 [ 391.127520] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 391.132401] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 391.137893] ? __mutex_unlock_slowpath+0x75/0x770 [ 391.142755] alloc_pages_current+0x155/0x260 [ 391.147178] ion_page_pool_alloc+0x118/0x1b0 [ 391.151602] ion_system_heap_allocate+0x133/0x8c0 [ 391.156482] ? ion_alloc+0x187/0x810 [ 391.160227] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 391.165697] ? ion_system_contig_heap_create+0x130/0x130 [ 391.166678] Mem-Info: [ 391.171162] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 391.171176] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 391.171188] ion_alloc+0x204/0x810 [ 391.171202] ? ion_dma_buf_release+0x40/0x40 [ 391.171214] ? __might_fault+0x177/0x1b0 [ 391.173849] active_anon:13115 inactive_anon:10793 isolated_anon:2 [ 391.173849] active_file:1621 inactive_file:4737 isolated_file:0 [ 391.173849] unevictable:0 dirty:100 writeback:0 unstable:0 [ 391.173849] slab_reclaimable:13316 slab_unreclaimable:113391 [ 391.173849] mapped:57288 shmem:11029 pagetables:810 bounce:0 [ 391.173849] free:221218 free_pcp:181 free_cma:0 [ 391.178693] ion_ioctl+0xea/0x1f0 [ 391.178704] ? ion_query_heaps+0x360/0x360 [ 391.178717] ? ion_query_heaps+0x360/0x360 [ 391.178728] do_vfs_ioctl+0x75a/0xff0 [ 391.178739] ? ioctl_preallocate+0x1a0/0x1a0 [ 391.194649] Node 0 active_anon:50812kB inactive_anon:35036kB active_file:3056kB inactive_file:16092kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:210096kB dirty:396kB writeback:0kB shmem:35916kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 14336kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 391.195595] ? lock_downgrade+0x740/0x740 [ 391.235152] Node 1 active_anon:1648kB inactive_anon:8136kB active_file:3428kB inactive_file:2856kB unevictable:0kB isolated(anon):8kB isolated(file):0kB mapped:19056kB dirty:4kB writeback:0kB shmem:8200kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 391.237266] ? __fget+0x225/0x360 [ 391.237277] ? do_vfs_ioctl+0xff0/0xff0 [ 391.237289] ? security_file_ioctl+0x83/0xb0 [ 391.237299] SyS_ioctl+0x7f/0xb0 [ 391.237312] ? do_vfs_ioctl+0xff0/0xff0 [ 391.243228] Node 0 [ 391.245387] do_syscall_64+0x1d5/0x640 [ 391.245407] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 391.245416] RIP: 0033:0x4665f9 [ 391.245425] RSP: 002b:00007f77b7c6c188 EFLAGS: 00000246 [ 391.250124] DMA free:11124kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 391.278339] ORIG_RAX: 0000000000000010 [ 391.278346] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 391.278351] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000005 [ 391.278356] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 391.278360] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 391.278364] R13: 00007ffe9143fedf R14: 00007f77b7c6c300 R15: 0000000000022000 [ 391.297557] syz-executor.4: [ 391.325674] lowmem_reserve[]: [ 391.327227] page allocation failure: order:4 [ 391.337954] 0 [ 391.376133] syz-executor.3: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 391.376162] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 391.376185] CPU: 0 PID: 16254 Comm: syz-executor.3 Not tainted 4.14.232-syzkaller #0 [ 391.376190] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 391.376193] Call Trace: [ 391.376214] dump_stack+0x1b2/0x281 [ 391.376228] warn_alloc.cold+0x96/0x1cc [ 391.376240] ? zone_watermark_ok_safe+0x220/0x220 [ 391.376261] __alloc_pages_nodemask+0x2127/0x2720 [ 391.388554] 2717 [ 391.394790] ? lock_acquire+0x170/0x3f0 [ 391.394810] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 391.394828] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 391.394839] ? __mutex_unlock_slowpath+0x75/0x770 [ 391.394853] alloc_pages_current+0x155/0x260 [ 391.394865] ion_page_pool_alloc+0x118/0x1b0 [ 391.394874] ion_system_heap_allocate+0x133/0x8c0 [ 391.394884] ? ion_alloc+0x187/0x810 [ 391.394894] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 391.394904] ? ion_system_contig_heap_create+0x130/0x130 [ 391.394914] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 391.394924] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 391.394933] ion_alloc+0x204/0x810 [ 391.394953] ? ion_dma_buf_release+0x40/0x40 [ 391.409023] 2718 [ 391.409537] ? __might_fault+0x177/0x1b0 [ 391.427566] 2718 [ 391.429121] ion_ioctl+0xea/0x1f0 [ 391.429132] ? ion_query_heaps+0x360/0x360 [ 391.429145] ? ion_query_heaps+0x360/0x360 [ 391.429157] do_vfs_ioctl+0x75a/0xff0 [ 391.454786] 2718 [ 391.463545] ? ioctl_preallocate+0x1a0/0x1a0 [ 391.463556] ? lock_downgrade+0x740/0x740 [ 391.463570] ? __fget+0x225/0x360 [ 391.463579] ? do_vfs_ioctl+0xff0/0xff0 [ 391.463590] ? security_file_ioctl+0x83/0xb0 [ 391.463599] SyS_ioctl+0x7f/0xb0 [ 391.463606] ? do_vfs_ioctl+0xff0/0xff0 [ 391.463617] do_syscall_64+0x1d5/0x640 [ 391.463631] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 391.463640] RIP: 0033:0x4665f9 [ 391.463644] RSP: 002b:00007f7215804188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 391.463654] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 391.463660] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000003 [ 391.463665] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 391.463670] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 391.463676] R13: 00007ffdb21b4b4f R14: 00007f7215804300 R15: 0000000000022000 [ 391.471237] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 391.506195] (null) [ 391.506204] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 391.515705] Node 0 DMA32 free:724884kB min:36200kB low:45248kB high:54296kB active_anon:50812kB inactive_anon:35036kB active_file:3056kB inactive_file:16092kB unevictable:0kB writepending:396kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7520kB pagetables:2872kB bounce:0kB free_pcp:200kB local_pcp:108kB free_cma:0kB [ 391.515733] lowmem_reserve[]: 0 0 0 0 0 [ 391.515755] Node 0 [ 391.522437] CPU: 0 PID: 16258 Comm: syz-executor.4 Not tainted 4.14.232-syzkaller #0 [ 391.525245] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 391.529844] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 391.529849] Call Trace: [ 391.529869] dump_stack+0x1b2/0x281 [ 391.529883] warn_alloc.cold+0x96/0x1cc [ 391.529896] ? zone_watermark_ok_safe+0x220/0x220 [ 391.529917] __alloc_pages_nodemask+0x2127/0x2720 [ 391.542284] lowmem_reserve[]: [ 391.542398] ? __schedule+0x893/0x1de0 [ 391.547406] 0 [ 391.550787] ? lock_acquire+0x170/0x3f0 [ 391.550807] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 391.550824] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 391.550836] ? __mutex_unlock_slowpath+0x75/0x770 [ 391.564671] 0 [ 391.567294] alloc_pages_current+0x155/0x260 [ 391.567310] ion_page_pool_alloc+0x118/0x1b0 [ 391.567321] ion_system_heap_allocate+0x133/0x8c0 [ 391.585803] 0 [ 391.586689] ? ion_alloc+0x187/0x810 [ 391.600294] 0 [ 391.602825] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 391.602836] ? ion_system_contig_heap_create+0x130/0x130 [ 391.602846] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 391.602859] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 391.602871] ion_alloc+0x204/0x810 [ 391.602885] ? ion_dma_buf_release+0x40/0x40 [ 391.602897] ? __might_fault+0x177/0x1b0 [ 391.602907] ion_ioctl+0xea/0x1f0 [ 391.602916] ? ion_query_heaps+0x360/0x360 [ 391.602927] ? ion_query_heaps+0x360/0x360 [ 391.602937] do_vfs_ioctl+0x75a/0xff0 [ 391.602952] ? ioctl_preallocate+0x1a0/0x1a0 [ 391.609783] 0 [ 391.610462] ? lock_downgrade+0x740/0x740 [ 391.630664] ? __fget+0x225/0x360 [ 391.630676] ? do_vfs_ioctl+0xff0/0xff0 [ 391.630689] ? security_file_ioctl+0x83/0xb0 [ 391.630699] SyS_ioctl+0x7f/0xb0 [ 391.630708] ? do_vfs_ioctl+0xff0/0xff0 [ 391.630722] do_syscall_64+0x1d5/0x640 [ 391.660646] Node 1 [ 391.667987] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 391.667997] RIP: 0033:0x4665f9 [ 391.668001] RSP: 002b:00007f9108899188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 391.668010] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 391.668014] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000006 [ 391.668019] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 391.668024] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 391.668028] R13: 00007fffb2c94dcf R14: 00007f9108899300 R15: 0000000000022000 [ 391.992158] Normal free:97748kB min:53696kB low:67120kB high:80544kB active_anon:1656kB inactive_anon:8136kB active_file:3308kB inactive_file:2736kB unevictable:0kB writepending:4kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:320kB pagetables:368kB bounce:0kB free_pcp:100kB local_pcp:0kB free_cma:0kB [ 392.037995] lowmem_reserve[]: 0 0 0 0 0 [ 392.061305] Node 0 DMA: 13*4kB (UE) 62*8kB (U) 52*16kB (UE) 27*32kB (UE) 15*64kB (UE) 2*128kB (UE) 2*256kB (UE) 2*512kB (UE) 2*1024kB (UE) 2*2048kB (ME) 0*4096kB = 11140kB [ 392.091335] Node 0 DMA32: 1156*4kB (UE) 474*8kB (UEH) 3268*16kB (UMEH) 8343*32kB (UMEH) 9*64kB (UH) 0*128kB 1*256kB (H) 1*512kB (H) 1*1024kB (H) 0*2048kB 0*4096kB = 330048kB [ 392.121339] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 392.150292] Node 1 Normal: 1635*4kB (U) 1784*8kB (U) 1700*16kB (U) 1545*32kB (U) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 97452kB [ 392.181066] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 392.203624] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 392.216800] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 392.225896] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 392.251312] 17662 total pagecache pages [ 392.255347] 0 pages in swap cache [ 392.258806] Swap cache stats: add 0, delete 0, find 0/0 [ 392.271241] Free swap = 0kB [ 392.274967] Total swap = 0kB [ 392.281502] 2097051 pages RAM [ 392.284639] 0 pages HighMem/MovableOnly [ 392.288630] 363849 pages reserved [ 392.306678] 0 pages cma reserved [ 392.781735] oom_reaper: reaped process 16280 (syz-executor.1), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 392.915744] oom_reaper: reaped process 16258 (syz-executor.4), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 392.937988] syz-executor.1 invoked oom-killer: gfp_mask=0x14200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=0 [ 392.955856] syz-executor.1: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 392.956942] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 392.974238] syz-executor.4: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 392.976250] syz-executor.1 cpuset= [ 392.990386] CPU: 1 PID: 15750 Comm: syz-executor.1 Not tainted 4.14.232-syzkaller #0 [ 392.994691] / [ 393.001875] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 393.001932] mems_allowed=0-1 [ 393.003591] Call Trace: [ 393.018700] dump_stack+0x1b2/0x281 [ 393.022345] dump_header+0x178/0x82f [ 393.026065] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 393.032364] ? ___ratelimit+0x2cd/0x530 [ 393.036355] oom_kill_process.cold+0x10/0xa40 [ 393.040857] out_of_memory+0xe3e/0x1190 [ 393.044842] ? oom_killer_disable+0x1c0/0x1c0 [ 393.049330] ? mutex_trylock+0x152/0x1a0 [ 393.053393] __alloc_pages_nodemask+0x23e1/0x2720 [ 393.058256] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 393.063452] ? __lock_acquire+0x5fc/0x3f20 [ 393.067702] alloc_pages_vma+0xd2/0x6d0 [ 393.071693] wp_page_copy+0x1f5/0x25c0 [ 393.075585] ? tlb_flush_mmu_free+0x1a0/0x1a0 [ 393.080080] ? __lock_acquire+0x5fc/0x3f20 [ 393.084322] do_wp_page+0x245/0x1db0 [ 393.088061] ? __handle_mm_fault+0x129c/0x4620 [ 393.092647] ? finish_mkwrite_fault+0x5e0/0x5e0 [ 393.097367] __handle_mm_fault+0x234f/0x4620 [ 393.101832] ? vm_insert_page+0x7c0/0x7c0 [ 393.105986] ? vfs_statx_fd+0x6d/0xd0 [ 393.109790] ? mark_held_locks+0xa6/0xf0 [ 393.113883] handle_mm_fault+0x455/0x9c0 [ 393.117973] __do_page_fault+0x549/0xad0 [ 393.122038] ? spurious_fault+0x640/0x640 [ 393.126214] ? do_page_fault+0x60/0x500 [ 393.130198] ? page_fault+0x2f/0x50 [ 393.133828] page_fault+0x45/0x50 [ 393.137907] RIP: 8040:0x804 [ 393.140836] RSP: 5475c0:0000000000008030 EFLAGS: 00000802 [ 393.140864] CPU: 0 PID: 16280 Comm: syz-executor.1 Not tainted 4.14.232-syzkaller #0 [ 393.147612] syz-executor.4 cpuset= [ 393.154333] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 393.154338] Call Trace: [ 393.154362] dump_stack+0x1b2/0x281 [ 393.154375] warn_alloc.cold+0x96/0x1cc [ 393.154387] ? zone_watermark_ok_safe+0x220/0x220 [ 393.154396] ? usleep_range+0x130/0x130 [ 393.154405] ? try_to_free_pages+0x23f/0x6e0 [ 393.154415] ? _find_next_bit+0xdb/0x100 [ 393.154425] ? run_timer_softirq+0x5a0/0x5a0 [ 393.154447] __alloc_pages_nodemask+0x2127/0x2720 [ 393.154463] ? lock_acquire+0x170/0x3f0 [ 393.154478] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 393.154488] ? ion_page_pool_alloc+0x9e/0x1b0 [ 393.154505] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 393.154520] ? alloc_pages_current+0x73/0x260 [ 393.154531] alloc_pages_current+0x155/0x260 [ 393.154541] ion_page_pool_alloc+0x118/0x1b0 [ 393.154550] ion_system_heap_allocate+0x133/0x8c0 [ 393.154560] ? ion_alloc+0x187/0x810 [ 393.154570] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 393.154578] ? ion_system_contig_heap_create+0x130/0x130 [ 393.154587] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 393.154596] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 393.154606] ion_alloc+0x204/0x810 [ 393.154618] ? ion_dma_buf_release+0x40/0x40 [ 393.154629] ? __might_fault+0x177/0x1b0 [ 393.154640] ion_ioctl+0xea/0x1f0 [ 393.154648] ? ion_query_heaps+0x360/0x360 [ 393.154661] ? ion_query_heaps+0x360/0x360 [ 393.154671] do_vfs_ioctl+0x75a/0xff0 [ 393.154684] ? ioctl_preallocate+0x1a0/0x1a0 [ 393.154692] ? lock_downgrade+0x740/0x740 [ 393.154706] ? __fget+0x225/0x360 [ 393.154715] ? do_vfs_ioctl+0xff0/0xff0 [ 393.154727] ? security_file_ioctl+0x83/0xb0 [ 393.154738] SyS_ioctl+0x7f/0xb0 [ 393.154745] ? do_vfs_ioctl+0xff0/0xff0 [ 393.154760] do_syscall_64+0x1d5/0x640 [ 393.154775] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 393.154782] RIP: 0033:0x4665f9 [ 393.154787] RSP: 002b:00007f77b7c6c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 393.154797] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 393.154802] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000005 [ 393.154807] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 393.154812] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 393.154817] R13: 00007ffe9143fedf R14: 00007f77b7c6c300 R15: 0000000000022000 [ 393.168050] warn_alloc_show_mem: 3 callbacks suppressed [ 393.168054] Mem-Info: [ 393.170397] Bluetooth: hci5 command 0x040f tx timeout [ 393.187413] active_anon:12998 inactive_anon:10792 isolated_anon:0 [ 393.187413] active_file:13 inactive_file:13 isolated_file:0 [ 393.187413] unevictable:0 dirty:0 writeback:0 unstable:0 [ 393.187413] slab_reclaimable:13299 slab_unreclaimable:112602 [ 393.187413] mapped:52887 shmem:11028 pagetables:787 bounce:0 [ 393.187413] free:13929 free_pcp:117 free_cma:0 [ 393.188198] / [ 393.196220] Node 0 active_anon:50348kB inactive_anon:35032kB active_file:48kB inactive_file:52kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:198548kB dirty:0kB writeback:0kB shmem:35912kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 14336kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 393.196926] mems_allowed=0-1 [ 393.201096] Node 1 active_anon:1644kB inactive_anon:8136kB active_file:4kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:13000kB dirty:0kB writeback:0kB shmem:8200kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 393.207277] CPU: 1 PID: 16258 Comm: syz-executor.4 Not tainted 4.14.232-syzkaller #0 [ 393.207284] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 393.207288] Call Trace: [ 393.207310] dump_stack+0x1b2/0x281 [ 393.207324] warn_alloc.cold+0x96/0x1cc [ 393.207337] ? zone_watermark_ok_safe+0x220/0x220 [ 393.207347] ? usleep_range+0x130/0x130 [ 393.207359] ? try_to_free_pages+0x23f/0x6e0 [ 393.228222] Node 0 [ 393.230805] ? _find_next_bit+0xdb/0x100 [ 393.235263] DMA free:10976kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 393.240226] ? run_timer_softirq+0x5a0/0x5a0 [ 393.245105] lowmem_reserve[]: [ 393.248795] __alloc_pages_nodemask+0x2127/0x2720 [ 393.254275] 0 [ 393.261092] ? lock_acquire+0x170/0x3f0 [ 393.266128] 2717 [ 393.270932] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 393.274494] 2718 [ 393.278858] ? ion_page_pool_alloc+0x9e/0x1b0 [ 393.282953] 2718 [ 393.286363] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 393.290574] 2718 [ 393.294811] ? check_preemption_disabled+0x35/0x240 [ 393.294833] alloc_pages_current+0x155/0x260 [ 393.294851] ion_page_pool_alloc+0x118/0x1b0 [ 393.303071] ion_system_heap_allocate+0x133/0x8c0 [ 393.303081] ? ion_alloc+0x187/0x810 [ 393.303091] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 393.303100] ? ion_system_contig_heap_create+0x130/0x130 [ 393.303114] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 393.307263] Node 0 [ 393.310715] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 393.314748] DMA32 free:17904kB min:36200kB low:45248kB high:54296kB active_anon:50348kB inactive_anon:35032kB active_file:48kB inactive_file:52kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7488kB pagetables:2780kB bounce:0kB free_pcp:320kB local_pcp:200kB free_cma:0kB [ 393.319202] ion_alloc+0x204/0x810 [ 393.322599] lowmem_reserve[]: [ 393.326627] ? ion_dma_buf_release+0x40/0x40 [ 393.330487] 0 [ 393.335689] ? __might_fault+0x177/0x1b0 [ 393.335702] ion_ioctl+0xea/0x1f0 [ 393.335711] ? ion_query_heaps+0x360/0x360 [ 393.335723] ? ion_query_heaps+0x360/0x360 [ 393.335734] do_vfs_ioctl+0x75a/0xff0 [ 393.338914] 0 [ 393.346649] ? ioctl_preallocate+0x1a0/0x1a0 [ 393.346659] ? lock_downgrade+0x740/0x740 [ 393.346672] ? __fget+0x225/0x360 [ 393.346684] ? do_vfs_ioctl+0xff0/0xff0 [ 393.353994] 0 [ 393.361244] ? security_file_ioctl+0x83/0xb0 [ 393.368564] 0 [ 393.375787] SyS_ioctl+0x7f/0xb0 [ 393.375797] ? do_vfs_ioctl+0xff0/0xff0 [ 393.375809] do_syscall_64+0x1d5/0x640 [ 393.375823] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 393.383131] 0 [ 393.396639] RIP: 0033:0x4665f9 [ 393.396645] RSP: 002b:00007f9108899188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 393.396653] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 393.396658] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000006 [ 393.396662] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 393.396667] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 393.396672] R13: 00007fffb2c94dcf R14: 00007f9108899300 R15: 0000000000022000 [ 393.397468] Mem-Info: [ 393.438152] active_anon:12998 inactive_anon:10792 isolated_anon:0 [ 393.438152] active_file:13 inactive_file:13 isolated_file:0 [ 393.438152] unevictable:0 dirty:0 writeback:0 unstable:0 [ 393.438152] slab_reclaimable:13299 slab_unreclaimable:112602 [ 393.438152] mapped:52887 shmem:11028 pagetables:787 bounce:0 [ 393.438152] free:13929 free_pcp:114 free_cma:0 [ 393.440709] Node 0 [ 393.467785] Node 0 active_anon:50348kB inactive_anon:35032kB active_file:48kB inactive_file:52kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:198548kB dirty:0kB writeback:0kB shmem:35912kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 14336kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 393.487445] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 393.498099] Node 1 active_anon:1644kB inactive_anon:8136kB active_file:4kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:13000kB dirty:0kB writeback:0kB shmem:8200kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 393.498105] Node 0 DMA free:10976kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 393.498122] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 393.527907] lowmem_reserve[]: [ 393.543871] 0 [ 393.545929] Node 0 [ 393.612052] 0 [ 393.681355] DMA32 free:89996kB min:36200kB low:45248kB high:54296kB active_anon:50348kB inactive_anon:35032kB active_file:48kB inactive_file:252kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7488kB pagetables:2780kB bounce:0kB free_pcp:304kB local_pcp:240kB free_cma:0kB [ 393.889722] 0 [ 393.927591] lowmem_reserve[]: 0 0 0 0 0 [ 394.019417] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 394.046563] lowmem_reserve[]: 0 0 0 0 0 [ 394.051876] Node 1 Normal free:71508kB min:53696kB low:67120kB high:80544kB active_anon:1644kB inactive_anon:8136kB active_file:8kB inactive_file:0kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:320kB pagetables:368kB bounce:0kB free_pcp:148kB local_pcp:8kB free_cma:0kB [ 394.091912] lowmem_reserve[]: 0 0 0 0 0 [ 394.097832] Node 0 DMA: 2*4kB (UE) 47*8kB (U) 52*16kB (UE) 27*32kB (UE) 15*64kB (UE) 2*128kB (UE) 2*256kB (UE) 2*512kB (UE) 2*1024kB (UE) 2*2048kB (ME) 0*4096kB = 10976kB [ 394.114236] 0 0 [ 394.116232] Node 1 Normal free:29600kB min:53696kB low:67120kB high:80544kB active_anon:1644kB inactive_anon:8136kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:320kB pagetables:368kB bounce:0kB free_pcp:744kB local_pcp:736kB free_cma:0kB [ 394.161781] Node 0 DMA32: 1835*4kB (UME) 7329*8kB (UMEH) 5570*16kB (UEH) 2099*32kB (UEH) 2*64kB (H) 0*128kB 1*256kB (H) 1*512kB (H) 1*1024kB (H) 0*2048kB 0*4096kB = 224180kB [ 394.178418] syz-executor.4: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 394.201342] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 394.211334] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 394.217492] CPU: 0 PID: 16258 Comm: syz-executor.4 Not tainted 4.14.232-syzkaller #0 [ 394.227242] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 394.237248] Call Trace: [ 394.239996] dump_stack+0x1b2/0x281 [ 394.241366] Node 1 Normal: [ 394.244884] warn_alloc.cold+0x96/0x1cc [ 394.244899] ? zone_watermark_ok_safe+0x220/0x220 [ 394.247844] 723*4kB [ 394.251853] __alloc_pages_nodemask+0x2127/0x2720 [ 394.251868] ? _raw_spin_unlock_irq+0x24/0x80 [ 394.251883] ? lock_acquire+0x170/0x3f0 [ 394.251897] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 394.251912] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 394.251924] ? __mutex_unlock_slowpath+0x75/0x770 [ 394.251938] alloc_pages_current+0x155/0x260 [ 394.281370] (U) [ 394.284420] ion_page_pool_alloc+0x118/0x1b0 [ 394.291214] 864*8kB [ 394.295632] ion_system_heap_allocate+0x133/0x8c0 [ 394.295646] ? _raw_spin_unlock+0x29/0x40 [ 394.295654] ? _ion_heap_freelist_drain+0x6e/0x410 [ 394.295663] ? ion_system_contig_heap_create+0x130/0x130 [ 394.295673] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 394.295685] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 394.295695] ion_alloc+0x27a/0x810 [ 394.295708] ? ion_dma_buf_release+0x40/0x40 [ 394.295721] ? __might_fault+0x177/0x1b0 [ 394.331389] (UE) [ 394.333692] ion_ioctl+0xea/0x1f0 [ 394.337218] 327*16kB [ 394.341626] ? ion_query_heaps+0x360/0x360 [ 394.341638] ? ion_query_heaps+0x360/0x360 [ 394.341648] do_vfs_ioctl+0x75a/0xff0 [ 394.341658] ? ioctl_preallocate+0x1a0/0x1a0 [ 394.341668] ? lock_downgrade+0x740/0x740 [ 394.341680] ? __fget+0x225/0x360 [ 394.380240] ? do_vfs_ioctl+0xff0/0xff0 [ 394.384248] ? security_file_ioctl+0x83/0xb0 [ 394.388705] SyS_ioctl+0x7f/0xb0 [ 394.391376] (U) 1218*32kB [ 394.392178] ? do_vfs_ioctl+0xff0/0xff0 [ 394.392192] do_syscall_64+0x1d5/0x640 [ 394.395124] (U) [ 394.399116] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 394.410151] RIP: 0033:0x4665f9 [ 394.413345] RSP: 002b:00007f9108899188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 394.421165] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 394.428552] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000006 [ 394.431419] 0*64kB [ 394.435874] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 394.435885] 0*128kB [ 394.438128] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 394.438137] R13: 00007fffb2c94dcf R14: 00007f9108899300 R15: 0000000000022000 [ 394.471352] 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 54012kB [ 394.471378] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 394.471384] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 394.471390] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 394.471395] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 394.471399] 12694 total pagecache pages [ 394.471409] 0 pages in swap cache [ 394.471413] Swap cache stats: add 0, delete 0, find 0/0 [ 394.471417] Free swap = 0kB [ 394.471420] Total swap = 0kB [ 394.471476] 2097051 pages RAM [ 394.479212] lowmem_reserve[]: 0 0 0 0 0 [ 394.542889] 0 pages HighMem/MovableOnly [ 394.543836] Node 0 [ 394.547768] 363849 pages reserved [ 394.547777] DMA: [ 394.550017] 0 pages cma reserved [ 394.553923] 2*4kB (UE) 47*8kB (U) 52*16kB (UE) 27*32kB (UE) 15*64kB (UE) 2*128kB (UE) 2*256kB (UE) 2*512kB (UE) 2*1024kB (UE) 2*2048kB (ME) 0*4096kB = 10976kB [ 394.577572] Node 0 DMA32: 1392*4kB (UME) 527*8kB (MEH) 150*16kB (UMEH) 710*32kB (UEH) 2*64kB (H) 0*128kB 1*256kB (H) 1*512kB (H) 1*1024kB (H) 0*2048kB 0*4096kB = 36824kB [ 394.601216] Out of memory (oom_kill_allocating_task): Kill process 15750 (syz-executor.1) score 0 or sacrifice child [ 394.611346] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 394.641250] Killed process 15750 (syz-executor.1) total-vm:93120kB, anon-rss:88kB, file-rss:34704kB, shmem-rss:0kB [ 394.641368] Node 1 Normal: 692*4kB (U) 849*8kB (UE) 327*16kB (U) 1218*32kB (U) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 53768kB [ 394.718063] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 394.735791] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 394.762228] systemd-journal invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=0 [ 394.777465] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 394.786458] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 394.795151] systemd-journal cpuset=/ mems_allowed=0-1 [ 394.800474] CPU: 0 PID: 15204 Comm: systemd-journal Not tainted 4.14.232-syzkaller #0 [ 394.808446] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 394.817806] Call Trace: [ 394.820404] dump_stack+0x1b2/0x281 [ 394.824061] dump_header+0x178/0x82f [ 394.827792] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 394.832905] ? ___ratelimit+0x2cd/0x530 [ 394.836897] oom_kill_process.cold+0x10/0xa40 [ 394.841412] out_of_memory+0xe3e/0x1190 [ 394.845402] ? oom_killer_disable+0x1c0/0x1c0 [ 394.849902] ? mutex_trylock+0x152/0x1a0 [ 394.853974] __alloc_pages_nodemask+0x23e1/0x2720 [ 394.858839] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 394.863744] ? cache_grow_begin+0x3f/0x700 [ 394.868013] cache_grow_begin+0x91/0x700 [ 394.872096] fallback_alloc+0x207/0x2c0 [ 394.876084] kmem_cache_alloc+0x1e5/0x3c0 [ 394.880254] getname_flags+0xc8/0x550 [ 394.884073] do_sys_open+0x1ce/0x410 [ 394.887837] ? filp_open+0x60/0x60 [ 394.891387] ? do_syscall_64+0x4c/0x640 [ 394.895378] ? do_sys_open+0x410/0x410 [ 394.899269] do_syscall_64+0x1d5/0x640 [ 394.903167] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 394.908370] RIP: 0033:0x7fbbdd7c0840 [ 394.912084] RSP: 002b:00007ffcb805ced8 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 394.919922] RAX: ffffffffffffffda RBX: 00007ffcb805d1e0 RCX: 00007fbbdd7c0840 [ 394.927203] RDX: 00000000000001a0 RSI: 0000000000080042 RDI: 0000559bdac04830 [ 394.934666] RBP: 000000000000000d R08: 000000000000c0c1 R09: 00000000ffffffff [ 394.941966] R10: 0000000000000069 R11: 0000000000000246 R12: 00000000ffffffff [ 394.949238] R13: 0000559bdabff040 R14: 00007ffcb805d1a0 R15: 0000559bdac04350 [ 394.965657] 11069 total pagecache pages [ 394.969660] 0 pages in swap cache [ 394.988847] Swap cache stats: add 0, delete 0, find 0/0 [ 395.005569] Free swap = 0kB [ 395.008617] Total swap = 0kB [ 395.041342] 2097051 pages RAM [ 395.044505] 0 pages HighMem/MovableOnly [ 395.048483] 363849 pages reserved [ 395.056433] 0 pages cma reserved [ 395.161516] warn_alloc_show_mem: 1 callbacks suppressed [ 395.161520] Mem-Info: [ 395.169307] active_anon:12983 inactive_anon:10792 isolated_anon:0 [ 395.169307] active_file:14 inactive_file:11 isolated_file:0 [ 395.169307] unevictable:0 dirty:0 writeback:0 unstable:0 [ 395.169307] slab_reclaimable:13297 slab_unreclaimable:112626 [ 395.169307] mapped:52913 shmem:11028 pagetables:764 bounce:0 [ 395.169307] free:153520 free_pcp:227 free_cma:0 [ 395.231428] Bluetooth: hci5 command 0x0419 tx timeout [ 395.281372] Node 0 active_anon:50292kB inactive_anon:35032kB active_file:48kB inactive_file:48kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:198652kB dirty:0kB writeback:0kB shmem:35912kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 14336kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 395.325608] Mem-Info: [ 395.328643] active_anon:12983 inactive_anon:10792 isolated_anon:0 [ 395.328643] active_file:14 inactive_file:36 isolated_file:0 [ 395.328643] unevictable:0 dirty:0 writeback:0 unstable:0 [ 395.328643] slab_reclaimable:13297 slab_unreclaimable:112626 [ 395.328643] mapped:52913 shmem:11028 pagetables:764 bounce:0 [ 395.328643] free:157669 free_pcp:678 free_cma:0 [ 395.376163] Node 1 active_anon:1640kB inactive_anon:8136kB active_file:8kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:13000kB dirty:0kB writeback:0kB shmem:8200kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 395.441339] Node 0 DMA free:11056kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 395.471355] Node 0 active_anon:50292kB inactive_anon:35032kB active_file:48kB inactive_file:2184kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:200252kB dirty:0kB writeback:0kB shmem:35912kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 14336kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 395.501935] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 395.507648] Node 0 DMA32 free:84392kB min:36200kB low:45248kB high:54296kB active_anon:50292kB inactive_anon:35032kB active_file:48kB inactive_file:2184kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7488kB pagetables:2776kB bounce:0kB free_pcp:972kB local_pcp:244kB free_cma:0kB [ 395.532765] Node 1 active_anon:1640kB inactive_anon:8136kB active_file:8kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:13000kB dirty:0kB writeback:0kB shmem:8200kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 395.611332] lowmem_reserve[]: 0 0 0 0 0 [ 395.615380] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 395.649304] Node 0 DMA free:10992kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 395.680907] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 395.699556] lowmem_reserve[]: 0 0 0 0 0 [ 395.703626] Node 0 DMA32 free:36068kB min:36200kB low:45248kB high:54296kB active_anon:50292kB inactive_anon:35032kB active_file:552kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7488kB pagetables:2776kB bounce:0kB free_pcp:120kB local_pcp:0kB free_cma:0kB [ 395.703647] lowmem_reserve[]: 0 0 0 0 0 [ 395.703664] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 395.703679] lowmem_reserve[]: 0 0 0 0 0 [ 395.703695] Node 1 Normal free:49052kB min:53696kB low:67120kB high:80544kB active_anon:1640kB inactive_anon:8136kB active_file:8kB inactive_file:0kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:320kB pagetables:280kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 395.703713] lowmem_reserve[]: 0 0 0 0 0 [ 395.703731] Node 0 DMA: 1*4kB (E) 58*8kB (U) 52*16kB (UE) 27*32kB (UE) 14*64kB (UE) 2*128kB (UE) 2*256kB (UE) 2*512kB (UE) 2*1024kB (UE) 2*2048kB (ME) 0*4096kB [ 395.737805] syz-executor.1: [ 395.798981] = 10996kB [ 395.867671] Node 0 DMA32: 1812*4kB (UME) 633*8kB (UME) 183*16kB (UME) 662*32kB (UME) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36424kB [ 395.932322] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 395.967729] Node 1 Normal: 0*4kB 4*8kB (U) 5*16kB (U) 1532*32kB (U) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 49136kB [ 395.972277] Node 1 Normal free:49052kB min:53696kB low:67120kB high:80544kB active_anon:1640kB inactive_anon:8136kB active_file:8kB inactive_file:0kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:320kB pagetables:280kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 396.018113] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 396.033091] page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 396.040807] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 396.043789] syz-executor.1 cpuset= [ 396.052477] lowmem_reserve[]: 0 0 0 0 0 [ 396.056285] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 396.060008] Node 0 [ 396.068911] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 396.068913] / mems_allowed=0-1 [ 396.071142] 11059 total pagecache pages [ 396.079805] CPU: 0 PID: 16280 Comm: syz-executor.1 Not tainted 4.14.232-syzkaller #0 [ 396.079814] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 396.086854] DMA: [ 396.086980] Call Trace: [ 396.094936] 0 pages in swap cache [ 396.104231] dump_stack+0x1b2/0x281 [ 396.104246] warn_alloc.cold+0x96/0x1cc [ 396.104258] ? zone_watermark_ok_safe+0x220/0x220 [ 396.104278] __alloc_pages_nodemask+0x2127/0x2720 [ 396.104286] ? retint_kernel+0x2d/0x2d [ 396.104303] ? lock_acquire+0x170/0x3f0 [ 396.104318] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 396.104334] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 396.104347] ? __mutex_unlock_slowpath+0x75/0x770 [ 396.104361] alloc_pages_current+0x155/0x260 [ 396.110210] 1*4kB [ 396.112425] ion_page_pool_alloc+0x118/0x1b0 [ 396.112435] ion_system_heap_allocate+0x133/0x8c0 [ 396.112447] ? _raw_spin_unlock+0x29/0x40 [ 396.112455] ? _ion_heap_freelist_drain+0x6e/0x410 [ 396.112464] ? ion_system_contig_heap_create+0x130/0x130 [ 396.112474] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 396.112486] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 396.112496] ion_alloc+0x27a/0x810 [ 396.117441] (E) [ 396.120091] ? ion_dma_buf_release+0x40/0x40 [ 396.128922] Swap cache stats: add 0, delete 0, find 0/0 [ 396.130236] ? __might_fault+0x177/0x1b0 [ 396.130250] ion_ioctl+0xea/0x1f0 [ 396.130260] ? ion_query_heaps+0x360/0x360 [ 396.130271] ? ion_query_heaps+0x360/0x360 [ 396.130280] do_vfs_ioctl+0x75a/0xff0 [ 396.130295] ? ioctl_preallocate+0x1a0/0x1a0 [ 396.134335] Free swap = 0kB [ 396.138151] ? lock_downgrade+0x740/0x740 [ 396.147025] 58*8kB [ 396.148534] ? __fget+0x225/0x360 [ 396.154193] (U) [ 396.157777] ? do_vfs_ioctl+0xff0/0xff0 [ 396.159905] 52*16kB [ 396.164319] ? security_file_ioctl+0x83/0xb0 [ 396.164330] SyS_ioctl+0x7f/0xb0 [ 396.164339] ? do_vfs_ioctl+0xff0/0xff0 [ 396.164349] do_syscall_64+0x1d5/0x640 [ 396.164363] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 396.164371] RIP: 0033:0x4665f9 [ 396.164376] RSP: 002b:00007f77b7c6c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 396.164385] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 396.164390] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000005 [ 396.164395] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 396.164400] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 396.164406] R13: 00007ffe9143fedf R14: 00007f77b7c6c300 R15: 0000000000022000 [ 396.188063] Mem-Info: [ 396.190482] Total swap = 0kB [ 396.198216] active_anon:12983 inactive_anon:10792 isolated_anon:0 [ 396.198216] active_file:16 inactive_file:0 isolated_file:15 [ 396.198216] unevictable:0 dirty:6 writeback:0 unstable:0 [ 396.198216] slab_reclaimable:13272 slab_unreclaimable:112630 [ 396.198216] mapped:52913 shmem:11028 pagetables:764 bounce:0 [ 396.198216] free:24071 free_pcp:38 free_cma:0 [ 396.199465] 2097051 pages RAM [ 396.203933] Node 0 active_anon:50292kB inactive_anon:35032kB active_file:60kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):60kB mapped:198652kB dirty:24kB writeback:0kB shmem:35912kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 14336kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 396.203950] Node 1 active_anon:1640kB inactive_anon:8136kB active_file:4kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:13000kB dirty:0kB writeback:0kB shmem:8200kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 396.209370] 0 pages HighMem/MovableOnly [ 396.217598] Node 0 [ 396.221091] 363849 pages reserved [ 396.225504] DMA free:10996kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 396.229230] (UE) [ 396.237555] lowmem_reserve[]: [ 396.240866] 27*32kB [ 396.243132] 0 2717 2718 2718 2718 [ 396.243151] Node 0 DMA32 free:36152kB min:36200kB low:45248kB high:54296kB active_anon:50292kB inactive_anon:35032kB active_file:60kB inactive_file:0kB unevictable:0kB writepending:24kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7488kB pagetables:2776kB bounce:0kB free_pcp:152kB local_pcp:152kB free_cma:0kB [ 396.243178] lowmem_reserve[]: [ 396.246626] (UE) [ 396.248588] 0 [ 396.252595] 14*64kB (UE) 2*128kB (UE) 2*256kB (UE) 2*512kB (UE) 2*1024kB (UE) 2*2048kB (ME) 0*4096kB = 10996kB [ 396.252640] Node 0 DMA32: 1799*4kB (ME) 628*8kB (ME) 183*16kB (UME) [ 396.258779] 0 pages cma reserved [ 396.259401] 657*32kB [ 396.262810] Out of memory (oom_kill_allocating_task): Kill process 15204 (systemd-journal) score 0 or sacrifice child [ 396.262839] Killed process 15204 (systemd-journal) total-vm:46096kB, anon-rss:476kB, file-rss:0kB, shmem-rss:2652kB [ 396.266801] (UME) [ 396.270820] 0 [ 396.277873] 0*64kB [ 396.283842] oom_reaper: reaped process 15204 (systemd-journal), now anon-rss:0kB, file-rss:0kB, shmem-rss:2652kB [ 396.287118] 0*128kB [ 396.312437] 0 [ 396.317541] 0*256kB [ 396.337504] 0 [ 396.370146] 0*512kB [ 396.413325] 0 [ 396.422591] 0*1024kB [ 396.457907] 0*2048kB [ 396.473872] Node 0 [ 396.502403] 0*4096kB [ 396.516983] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 396.551357] = 36172kB [ 396.567577] oom_reaper: reaped process 16254 (syz-executor.3), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 396.581375] Node 0 [ 396.587522] lowmem_reserve[]: [ 396.613877] Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 396.640755] oom_reaper: reaped process 16262 (syz-executor.5), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 396.640778] 0 0 0 0 0 [ 396.660812] Node 1 Normal free:26824kB min:53696kB low:67120kB high:80544kB active_anon:1640kB inactive_anon:8136kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:288kB pagetables:280kB bounce:0kB free_pcp:120kB local_pcp:120kB free_cma:0kB [ 396.661616] in:imklog invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask= [ 396.691377] Node 1 [ 396.699439] lowmem_reserve[]: [ 396.701715] Normal: [ 396.705246] 0 [ 396.707038] 1*4kB [ 396.709343] 0 0 [ 396.711142] (U) [ 396.715913] (null) [ 396.717107] 0 [ 396.717887] , order=0, oom_score_adj=0 [ 396.720124] 0 [ 396.721987] in:imklog cpuset=/ mems_allowed=0-1 [ 396.722011] CPU: 1 PID: 15672 Comm: in:imklog Not tainted 4.14.232-syzkaller #0 [ 396.722020] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 396.727769] Call Trace: [ 396.732465] Node 0 [ 396.739972] dump_stack+0x1b2/0x281 [ 396.749358] DMA: [ 396.751895] dump_header+0x178/0x82f [ 396.751908] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 396.754126] 2*4kB [ 396.757745] ? ___ratelimit+0x2cd/0x530 [ 396.759791] (UE) [ 396.763496] oom_kill_process.cold+0x10/0xa40 [ 396.763516] out_of_memory+0xe3e/0x1190 [ 396.763528] ? oom_killer_disable+0x1c0/0x1c0 [ 396.763539] ? mutex_trylock+0x152/0x1a0 [ 396.768821] 54*8kB [ 396.770978] __alloc_pages_nodemask+0x23e1/0x2720 [ 396.775196] (U) [ 396.777165] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 396.781657] 52*16kB [ 396.785605] alloc_pages_current+0x155/0x260 [ 396.790078] (UE) [ 396.794150] filemap_fault+0x11a1/0x1ad0 [ 396.794168] ext4_filemap_fault+0x84/0xb0 [ 396.794178] __do_fault+0xfa/0x380 [ 396.794188] __handle_mm_fault+0x2497/0x4620 [ 396.796408] 27*32kB [ 396.801249] ? vm_insert_page+0x7c0/0x7c0 [ 396.803248] (UE) [ 396.808045] ? lock_downgrade+0x740/0x740 [ 396.810345] 14*64kB [ 396.814763] ? mark_held_locks+0xa6/0xf0 [ 396.814775] handle_mm_fault+0x455/0x9c0 [ 396.814788] __do_page_fault+0x549/0xad0 [ 396.814800] ? spurious_fault+0x640/0x640 [ 396.816850] (UE) [ 396.820906] ? do_page_fault+0x60/0x500 [ 396.825081] 2*128kB [ 396.828573] ? page_fault+0x2f/0x50 [ 396.833021] (UE) [ 396.835287] page_fault+0x45/0x50 [ 396.839430] 2*256kB [ 396.841485] RIP: fffff7e7:0x1f9f [ 396.841489] RSP: 73dfc4a0:00007f9173dfc4ac EFLAGS: 7f9173dfcda0 [ 396.842748] 1*8kB [ 396.846457] (UE) [ 396.849402] (U) [ 396.871325] 2*512kB [ 396.872826] 1*16kB [ 396.877803] (UE) [ 396.878352] (U) [ 396.891330] 2*1024kB [ 396.893728] 838*32kB [ 396.895797] (UE) [ 396.897843] (U) 0*64kB [ 396.899807] 2*2048kB [ 396.902162] 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 26844kB [ 396.902192] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 396.902199] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 396.902205] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 396.902211] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 396.902215] 11059 total pagecache pages [ 396.902225] 0 pages in swap cache [ 396.912291] (ME) [ 396.914612] Swap cache stats: add 0, delete 0, find 0/0 [ 396.915299] 0*4096kB [ 396.917863] Free swap = 0kB [ 396.920272] = 10968kB [ 396.927150] Total swap = 0kB [ 396.927158] 2097051 pages RAM [ 396.927161] 0 pages HighMem/MovableOnly [ 396.927164] 363849 pages reserved [ 396.927168] 0 pages cma reserved [ 396.932598] Mem-Info: [ 396.936075] Node 0 [ 396.947469] active_anon:12308 inactive_anon:10792 isolated_anon:0 [ 396.947469] active_file:16 inactive_file:0 isolated_file:15 [ 396.947469] unevictable:0 dirty:6 writeback:0 unstable:0 [ 396.947469] slab_reclaimable:13272 slab_unreclaimable:112266 [ 396.947469] mapped:52238 shmem:11028 pagetables:764 bounce:0 [ 396.947469] free:13966 free_pcp:30 free_cma:0 [ 396.953739] DMA32: 1837*4kB (UME) 674*8kB (UME) 187*16kB (UME) 23*32kB (UME) 2*64kB [ 396.967028] Node 0 active_anon:47592kB inactive_anon:35032kB active_file:60kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):60kB mapped:195952kB dirty:24kB writeback:0kB shmem:35912kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 14336kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 396.981591] (M) [ 396.988957] Node 1 active_anon:1640kB inactive_anon:8136kB active_file:4kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:13000kB dirty:0kB writeback:0kB shmem:8200kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 396.991219] 0*128kB [ 396.995331] Node 0 DMA free:10968kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 396.995350] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 396.995371] Node 0 DMA32 free:18196kB min:36200kB low:45248kB high:54296kB active_anon:47692kB inactive_anon:35032kB active_file:56kB inactive_file:72kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7488kB pagetables:2776kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 396.995389] lowmem_reserve[]: 0 0 0 0 0 [ 396.995409] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 396.995427] lowmem_reserve[]: 0 0 0 0 0 [ 396.995447] Node 1 Normal free:26812kB min:53696kB low:67120kB high:80544kB active_anon:1640kB inactive_anon:8136kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:288kB pagetables:280kB bounce:0kB free_pcp:120kB local_pcp:120kB free_cma:0kB [ 396.995465] lowmem_reserve[]: 0 0 0 0 0 [ 396.995485] Node 0 DMA: 2*4kB (UE) 54*8kB (U) 52*16kB (UE) 27*32kB (UE) 14*64kB (UE) 2*128kB (UE) 2*256kB (UE) 2*512kB (UE) 2*1024kB (UE) 2*2048kB (ME) [ 397.004852] 1*256kB [ 397.009038] 0*4096kB [ 397.040543] syz-executor.5: [ 397.078908] = 10968kB [ 397.081624] (U) [ 397.127921] Node 0 [ 397.140307] page allocation failure: order:0 [ 397.143284] DMA32: [ 397.173465] 1*512kB [ 397.175784] 1826*4kB [ 397.203811] (U) [ 397.232757] ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb [ 397.251163] (UME) [ 397.258217] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 397.277466] 673*8kB [ 397.283836] (null) [ 397.286582] (UME) [ 397.288612] syz-executor.5 cpuset= [ 397.297940] 185*16kB [ 397.302108] 1*1024kB [ 397.302469] (UME) [ 397.305955] (U) [ 397.308474] 24*32kB [ 397.311053] 0*2048kB [ 397.315389] (UME) 3*64kB (UM) 1*128kB (U) 0*256kB 0*512kB 1*1024kB (U) 0*2048kB 0*4096kB = 17760kB [ 397.321320] / mems_allowed=0-1 [ 397.329188] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 397.336074] 0*4096kB [ 397.345447] CPU: 0 PID: 16262 Comm: syz-executor.5 Not tainted 4.14.232-syzkaller #0 [ 397.345449] Node 1 Normal: [ 397.347873] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 397.347880] Call Trace: [ 397.358283] 0*4kB [ 397.358767] dump_stack+0x1b2/0x281 [ 397.368252] 0*8kB [ 397.370775] warn_alloc.cold+0x96/0x1cc [ 397.381353] 0*16kB 838*32kB [ 397.382625] ? zone_watermark_ok_safe+0x220/0x220 [ 397.382632] (U) [ 397.385645] ? usleep_range+0x130/0x130 [ 397.390572] 0*64kB [ 397.392565] ? try_to_free_pages+0x23f/0x6e0 [ 397.392576] ? _find_next_bit+0xdb/0x100 [ 397.392585] ? run_timer_softirq+0x5a0/0x5a0 [ 397.392601] __alloc_pages_nodemask+0x2127/0x2720 [ 397.392617] ? lock_acquire+0x170/0x3f0 [ 397.392631] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 397.392640] ? ion_page_pool_alloc+0x9e/0x1b0 [ 397.392659] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 397.406921] 0*128kB [ 397.409397] alloc_pages_current+0x155/0x260 [ 397.413879] 0*256kB [ 397.418713] ion_page_pool_alloc+0x118/0x1b0 [ 397.424841] = 18388kB [ 397.427495] ion_system_heap_allocate+0x133/0x8c0 [ 397.432138] Node 0 [ 397.437501] ? ion_alloc+0x187/0x810 [ 397.439817] Normal: [ 397.444223] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 397.444234] ? ion_system_contig_heap_create+0x130/0x130 [ 397.444243] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 397.444254] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 397.444264] ion_alloc+0x204/0x810 [ 397.444277] ? ion_dma_buf_release+0x40/0x40 [ 397.444287] ? __might_fault+0x177/0x1b0 [ 397.444298] ion_ioctl+0xea/0x1f0 [ 397.448849] 0*512kB [ 397.451029] ? ion_query_heaps+0x360/0x360 [ 397.453587] 0*1024kB [ 397.458259] ? ion_query_heaps+0x360/0x360 [ 397.460473] 0*2048kB [ 397.464182] do_vfs_ioctl+0x75a/0xff0 [ 397.464195] ? ioctl_preallocate+0x1a0/0x1a0 [ 397.464204] ? lock_downgrade+0x740/0x740 [ 397.464216] ? __fget+0x225/0x360 [ 397.464225] ? do_vfs_ioctl+0xff0/0xff0 [ 397.464236] ? security_file_ioctl+0x83/0xb0 [ 397.464245] SyS_ioctl+0x7f/0xb0 [ 397.464251] ? do_vfs_ioctl+0xff0/0xff0 [ 397.464262] do_syscall_64+0x1d5/0x640 [ 397.464276] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 397.468845] 0*4kB [ 397.472025] RIP: 0033:0x4665f9 [ 397.472030] RSP: 002b:00007f97bed79188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 397.472039] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 397.472044] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000005 [ 397.472048] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 397.472053] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 397.472059] R13: 00007ffe0c744e6f R14: 00007f97bed79300 R15: 0000000000022000 [ 397.480303] Mem-Info: [ 397.493526] 0*4096kB [ 397.499277] active_anon:12306 inactive_anon:10791 isolated_anon:0 [ 397.499277] active_file:11 inactive_file:11 isolated_file:3 [ 397.499277] unevictable:0 dirty:0 writeback:0 unstable:0 [ 397.499277] slab_reclaimable:13260 slab_unreclaimable:112269 [ 397.499277] mapped:52225 shmem:11028 pagetables:737 bounce:0 [ 397.499277] free:13881 free_pcp:30 free_cma:0 [ 397.499458] = 26816kB [ 397.502997] Node 0 active_anon:47584kB inactive_anon:35028kB active_file:44kB inactive_file:40kB unevictable:0kB isolated(anon):0kB isolated(file):12kB mapped:195900kB dirty:0kB writeback:0kB shmem:35912kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 397.505288] syz-executor.3: [ 397.509542] Node 1 active_anon:1640kB inactive_anon:8136kB active_file:0kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:13000kB dirty:0kB writeback:0kB shmem:8200kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 397.520014] page allocation failure: order:0 [ 397.526330] Node 0 [ 397.526929] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 397.531078] DMA free:10968kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 397.536783] 0*8kB [ 397.538533] lowmem_reserve[]: [ 397.543421] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 397.543428] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 397.543434] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 397.543440] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 397.543444] 11053 total pagecache pages [ 397.543456] 0 pages in swap cache [ 397.550591] 0 [ 397.550802] Swap cache stats: add 0, delete 0, find 0/0 [ 397.554748] 2717 2718 2718 2718 [ 397.554765] Node 0 DMA32 free:17764kB min:36200kB low:45248kB high:54296kB active_anon:47584kB inactive_anon:35028kB active_file:44kB inactive_file:40kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7520kB pagetables:2668kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 397.554791] lowmem_reserve[]: [ 397.561341] 0*16kB [ 397.566012] 0 [ 397.574241] (null) [ 397.580389] 0 [ 397.587792] Free swap = 0kB [ 397.618600] 0 [ 397.649127] 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 397.649161] Node 1 Normal: 0*4kB 1*8kB (U) 1*16kB (U) 837*32kB (U) 0*64kB 0*128kB 0*256kB 0*512kB [ 397.661022] 0 [ 397.679410] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 397.679437] CPU: 1 PID: 16254 Comm: syz-executor.3 Not tainted 4.14.232-syzkaller #0 [ 397.679442] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 397.679445] Call Trace: [ 397.679466] dump_stack+0x1b2/0x281 [ 397.679480] warn_alloc.cold+0x96/0x1cc [ 397.688498] 0 [ 397.709404] ? zone_watermark_ok_safe+0x220/0x220 [ 397.709414] ? usleep_range+0x130/0x130 [ 397.709423] ? queue_work_on+0x10d/0x1d0 [ 397.709434] ? _find_next_bit+0xdb/0x100 [ 397.709447] ? run_timer_softirq+0x5a0/0x5a0 [ 397.716097] __alloc_pages_nodemask+0x2127/0x2720 [ 397.723749] Node 0 [ 397.749239] ? lock_acquire+0x170/0x3f0 [ 397.749256] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 397.749270] ? ion_page_pool_alloc+0x9e/0x1b0 [ 397.751444] Total swap = 0kB [ 397.754518] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 397.763397] 2097051 pages RAM [ 397.771945] alloc_pages_current+0x155/0x260 [ 397.771960] ion_page_pool_alloc+0x118/0x1b0 [ 397.771972] ion_system_heap_allocate+0x133/0x8c0 [ 397.780840] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 397.789421] ? ion_alloc+0x187/0x810 [ 397.789433] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 397.789443] ? ion_system_contig_heap_create+0x130/0x130 [ 397.789453] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 397.789468] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 397.794700] 0 pages HighMem/MovableOnly [ 397.799248] ion_alloc+0x204/0x810 [ 397.801023] 363849 pages reserved [ 397.806384] ? ion_dma_buf_release+0x40/0x40 [ 397.806397] ? __might_fault+0x177/0x1b0 [ 397.806408] ion_ioctl+0xea/0x1f0 [ 397.806419] ? ion_query_heaps+0x360/0x360 [ 397.809786] lowmem_reserve[]: [ 397.839055] ? ion_query_heaps+0x360/0x360 [ 397.839067] do_vfs_ioctl+0x75a/0xff0 [ 397.839080] ? ioctl_preallocate+0x1a0/0x1a0 [ 397.839090] ? lock_downgrade+0x740/0x740 [ 397.839102] ? __fget+0x225/0x360 [ 397.842287] 0 pages cma reserved [ 397.844467] ? do_vfs_ioctl+0xff0/0xff0 [ 397.846262] Out of memory (oom_kill_allocating_task): Kill process 15672 (in:imklog) score 0 or sacrifice child [ 397.848420] ? security_file_ioctl+0x83/0xb0 [ 397.850267] Killed process 15644 (rsyslogd) total-vm:254332kB, anon-rss:2788kB, file-rss:0kB, shmem-rss:0kB [ 397.853204] SyS_ioctl+0x7f/0xb0 [ 397.853214] ? do_vfs_ioctl+0xff0/0xff0 [ 397.853224] do_syscall_64+0x1d5/0x640 [ 397.853239] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 397.853249] RIP: 0033:0x4665f9 [ 397.857137] oom_reaper: reaped process 15644 (rsyslogd), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 397.862785] RSP: 002b:00007f7215804188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 397.862797] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 397.862801] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000003 [ 397.862806] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 397.862810] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 397.862815] R13: 00007ffdb21b4b4f R14: 00007f7215804300 R15: 0000000000022000 [ 397.863363] 0*1024kB [ 397.913195] 0 [ 397.914517] 0*2048kB [ 397.918172] 0 [ 397.922372] 0*4096kB = 26808kB [ 397.922386] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 397.932377] 0 [ 397.935958] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 397.937973] 0 [ 397.942059] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 397.952086] 0 [ 397.954412] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 397.963039] 11053 total pagecache pages [ 397.963050] 0 pages in swap cache [ 397.963056] Swap cache stats: add 0, delete 0, find 0/0 [ 397.963060] Free swap = 0kB [ 397.963066] Total swap = 0kB [ 397.971222] Node 1 [ 397.971921] 2097051 pages RAM [ 397.984271] Normal free:26728kB min:53696kB low:67120kB high:80544kB active_anon:840kB inactive_anon:8136kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:192kB pagetables:280kB bounce:0kB free_pcp:232kB local_pcp:232kB free_cma:0kB [ 398.001895] 0 pages HighMem/MovableOnly [ 398.012816] lowmem_reserve[]: [ 398.016723] 363849 pages reserved [ 398.057191] 0 0 0 0 0 [ 398.109672] 0 pages cma reserved [ 398.364240] Node 0 DMA: 2*4kB (UE) 54*8kB (U) 52*16kB (UE) 27*32kB (UE) 14*64kB (UE) 2*128kB (UE) 2*256kB (UE) 2*512kB (UE) 2*1024kB (UE) 2*2048kB (ME) 0*4096kB = 10968kB [ 398.401446] Node 0 DMA32: 6736*4kB (UME) 711*8kB (UME) 203*16kB (UME) 24*32kB (UME) 3965*64kB (UM) 626*128kB (U) 84*256kB (U) 20*512kB (U) 2*1024kB (U) 0*2048kB 0*4096kB = 404328kB [ 398.441585] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 398.452432] Node 1 Normal: 11*4kB (UM) 7*8kB (UM) 6*16kB (UM) 829*32kB (UM) 4904*64kB (U) 1206*128kB (U) 279*256kB (U) 136*512kB (U) 56*1024kB (U) 1*2048kB (U) 0*4096kB = 695396kB [ 398.531358] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 398.540355] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 398.561360] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 398.570306] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 398.595333] 11057 total pagecache pages [ 398.599360] 0 pages in swap cache [ 398.661348] Swap cache stats: add 0, delete 0, find 0/0 [ 398.666765] Free swap = 0kB [ 398.669775] Total swap = 0kB [ 398.678660] 2097051 pages RAM [ 398.682450] 0 pages HighMem/MovableOnly [ 398.686421] 363849 pages reserved [ 398.689862] 0 pages cma reserved [ 399.253899] systemd[1]: systemd-journald.service: Failed with result 'signal'. [ 399.276609] systemd[1]: rsyslog.service: Main process exited, code=killed, status=9/KILL [ 399.342056] systemd[1]: rsyslog.service: Unit entered failed state. [ 399.348786] systemd[1]: rsyslog.service: Failed with result 'signal'. [ 399.374936] systemd[1]: systemd-journald.service: Service has no hold-off time, scheduling restart. [ 399.408091] systemd[1]: Stopped Flush Journal to Persistent Storage. [ 399.456481] systemd[1]: Stopping Flush Journal to Persistent Storage... [ 399.477870] systemd[1]: Stopped Journal Service. [ 399.511021] systemd[1]: Starting Journal Service... [ 399.559948] systemd[1]: rsyslog.service: Service hold-off time over, scheduling restart. [ 399.810480] systemd-journald[16287]: File /run/log/journal/04d8c135ee6b410280ba31a58c89679d/system.journal corrupted or uncleanly shut down, renaming and replacing. [ 399.811400] syz-executor.3: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 399.861385] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 399.868721] CPU: 1 PID: 16254 Comm: syz-executor.3 Not tainted 4.14.232-syzkaller #0 [ 399.876642] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 399.886008] Call Trace: [ 399.888616] dump_stack+0x1b2/0x281 [ 399.892270] warn_alloc.cold+0x96/0x1cc [ 399.896270] ? zone_watermark_ok_safe+0x220/0x220 [ 399.901150] __alloc_pages_nodemask+0x2127/0x2720 [ 399.906008] ? retint_kernel+0x2d/0x2d [ 399.909917] ? lock_acquire+0x170/0x3f0 [ 399.913907] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 399.918773] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 399.924242] ? __mutex_unlock_slowpath+0x75/0x770 [ 399.929107] alloc_pages_current+0x155/0x260 [ 399.933545] ion_page_pool_alloc+0x118/0x1b0 [ 399.937987] ion_system_heap_allocate+0x133/0x8c0 [ 399.942844] ? _raw_spin_unlock+0x29/0x40 [ 399.947006] ? _ion_heap_freelist_drain+0x6e/0x410 [ 399.951946] ? ion_system_contig_heap_create+0x130/0x130 [ 399.957406] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 399.962460] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 399.967325] ion_alloc+0x27a/0x810 [ 399.971059] ? ion_dma_buf_release+0x40/0x40 [ 399.975492] ? __might_fault+0x177/0x1b0 [ 399.979577] ion_ioctl+0xea/0x1f0 [ 399.983039] ? ion_query_heaps+0x360/0x360 [ 399.987281] ? ion_query_heaps+0x360/0x360 [ 399.991528] do_vfs_ioctl+0x75a/0xff0 [ 399.995428] ? ioctl_preallocate+0x1a0/0x1a0 [ 399.999840] ? lock_downgrade+0x740/0x740 [ 400.003997] ? __fget+0x225/0x360 [ 400.007451] ? do_vfs_ioctl+0xff0/0xff0 [ 400.011436] ? security_file_ioctl+0x83/0xb0 [ 400.015853] SyS_ioctl+0x7f/0xb0 [ 400.019214] ? do_vfs_ioctl+0xff0/0xff0 [ 400.023194] do_syscall_64+0x1d5/0x640 [ 400.026717] syz-executor.1 invoked oom-killer: gfp_mask=0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null), order=0, oom_score_adj=1000 [ 400.027088] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 400.027098] RIP: 0033:0x4665f9 [ 400.040613] syz-executor.1 cpuset= [ 400.045744] RSP: 002b:00007f7215804188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 400.045754] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 400.045758] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000003 [ 400.045763] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 400.045768] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 400.045772] R13: 00007ffdb21b4b4f R14: 00007f7215804300 R15: 0000000000022000 [ 400.059145] warn_alloc_show_mem: 1 callbacks suppressed [ 400.059150] Mem-Info: [ 400.105151] syz-executor.4: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 400.117276] / mems_allowed=0-1 [ 400.119075] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 400.125688] CPU: 1 PID: 16258 Comm: syz-executor.4 Not tainted 4.14.232-syzkaller #0 [ 400.133574] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 400.136729] syz-executor.5: [ 400.143544] Call Trace: [ 400.143567] dump_stack+0x1b2/0x281 [ 400.143581] warn_alloc.cold+0x96/0x1cc [ 400.143596] ? zone_watermark_ok_safe+0x220/0x220 [ 400.161349] page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 400.161625] ? usleep_range+0x130/0x130 [ 400.161638] ? try_to_free_pages+0x23f/0x6e0 [ 400.180096] ? _find_next_bit+0xdb/0x100 [ 400.181347] (null) [ 400.184173] ? run_timer_softirq+0x5a0/0x5a0 [ 400.186329] syz-executor.5 cpuset= [ 400.190833] __alloc_pages_nodemask+0x2127/0x2720 [ 400.190835] / mems_allowed=0-1 [ 400.194408] ? lock_acquire+0x170/0x3f0 [ 400.194426] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 400.194435] ? ion_page_pool_alloc+0x9e/0x1b0 [ 400.194450] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 400.225505] alloc_pages_current+0x155/0x260 [ 400.230560] ion_page_pool_alloc+0x118/0x1b0 [ 400.234985] ion_system_heap_allocate+0x133/0x8c0 [ 400.239927] ? _raw_spin_unlock+0x29/0x40 [ 400.244090] ? _ion_heap_freelist_drain+0x6e/0x410 [ 400.249045] ? ion_system_contig_heap_create+0x130/0x130 [ 400.254527] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 400.259556] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 400.264410] ion_alloc+0x27a/0x810 [ 400.267988] ? ion_dma_buf_release+0x40/0x40 [ 400.272403] ? __might_fault+0x177/0x1b0 [ 400.276817] ion_ioctl+0xea/0x1f0 [ 400.280276] ? ion_query_heaps+0x360/0x360 [ 400.284577] ? ion_query_heaps+0x360/0x360 [ 400.288814] do_vfs_ioctl+0x75a/0xff0 [ 400.292615] ? ioctl_preallocate+0x1a0/0x1a0 [ 400.297027] ? lock_downgrade+0x740/0x740 [ 400.301194] ? __fget+0x225/0x360 [ 400.304645] ? do_vfs_ioctl+0xff0/0xff0 [ 400.308673] ? security_file_ioctl+0x83/0xb0 [ 400.313089] SyS_ioctl+0x7f/0xb0 [ 400.316804] ? do_vfs_ioctl+0xff0/0xff0 [ 400.320780] do_syscall_64+0x1d5/0x640 [ 400.324683] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 400.329875] RIP: 0033:0x4665f9 [ 400.333060] RSP: 002b:00007f9108899188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 400.340766] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 400.348056] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000006 [ 400.355846] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 400.363212] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 400.370482] R13: 00007fffb2c94dcf R14: 00007f9108899300 R15: 0000000000022000 [ 400.377771] CPU: 0 PID: 16262 Comm: syz-executor.5 Not tainted 4.14.232-syzkaller #0 [ 400.380308] active_anon:11725 inactive_anon:10776 isolated_anon:0 [ 400.380308] active_file:15 inactive_file:18 isolated_file:0 [ 400.380308] unevictable:0 dirty:0 writeback:0 unstable:0 [ 400.380308] slab_reclaimable:13253 slab_unreclaimable:112745 [ 400.380308] mapped:52228 shmem:11028 pagetables:738 bounce:0 [ 400.380308] free:13819 free_pcp:30 free_cma:0 [ 400.385667] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 400.385672] Call Trace: [ 400.385695] dump_stack+0x1b2/0x281 [ 400.385708] warn_alloc.cold+0x96/0x1cc [ 400.385720] ? zone_watermark_ok_safe+0x220/0x220 [ 400.385729] ? usleep_range+0x130/0x130 [ 400.385738] ? try_to_free_pages+0x23f/0x6e0 [ 400.385767] ? _find_next_bit+0xdb/0x100 [ 400.421239] Node 0 active_anon:46068kB inactive_anon:34968kB active_file:52kB inactive_file:56kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:195900kB dirty:0kB writeback:0kB shmem:35912kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 400.428547] ? run_timer_softirq+0x5a0/0x5a0 [ 400.428565] __alloc_pages_nodemask+0x2127/0x2720 [ 400.428583] ? lock_acquire+0x170/0x3f0 [ 400.428597] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 400.428610] ? ion_page_pool_alloc+0x9e/0x1b0 [ 400.440722] Node 1 active_anon:832kB inactive_anon:8136kB active_file:8kB inactive_file:16kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:13012kB dirty:0kB writeback:0kB shmem:8200kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 400.444259] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 400.444278] alloc_pages_current+0x155/0x260 [ 400.444292] ion_page_pool_alloc+0x118/0x1b0 [ 400.444306] ion_system_heap_allocate+0x133/0x8c0 [ 400.449153] Node 0 [ 400.453139] ? _raw_spin_unlock+0x29/0x40 [ 400.453150] ? _ion_heap_freelist_drain+0x6e/0x410 [ 400.453159] ? ion_system_contig_heap_create+0x130/0x130 [ 400.453169] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 400.453182] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 400.453191] ion_alloc+0x27a/0x810 [ 400.453203] ? ion_dma_buf_release+0x40/0x40 [ 400.453214] ? __might_fault+0x177/0x1b0 [ 400.453225] ion_ioctl+0xea/0x1f0 [ 400.453234] ? ion_query_heaps+0x360/0x360 [ 400.453246] ? ion_query_heaps+0x360/0x360 [ 400.459338] DMA free:10956kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 400.461987] do_vfs_ioctl+0x75a/0xff0 [ 400.462000] ? ioctl_preallocate+0x1a0/0x1a0 [ 400.462009] ? lock_downgrade+0x740/0x740 [ 400.462021] ? __fget+0x225/0x360 [ 400.462031] ? do_vfs_ioctl+0xff0/0xff0 [ 400.462042] ? security_file_ioctl+0x83/0xb0 [ 400.462053] SyS_ioctl+0x7f/0xb0 [ 400.490819] lowmem_reserve[]: [ 400.494140] ? do_vfs_ioctl+0xff0/0xff0 [ 400.494154] do_syscall_64+0x1d5/0x640 [ 400.494169] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 400.494177] RIP: 0033:0x4665f9 [ 400.494181] RSP: 002b:00007f97bed79188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 400.494191] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 400.494201] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000005 [ 400.499038] 0 [ 400.503022] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 400.503028] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 400.503032] R13: 00007ffe0c744e6f R14: 00007f97bed79300 R15: 0000000000022000 [ 400.510470] CPU: 0 PID: 16280 Comm: syz-executor.1 Not tainted 4.14.232-syzkaller #0 [ 400.520302] 2717 [ 400.539478] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 400.539484] Call Trace: [ 400.539507] dump_stack+0x1b2/0x281 [ 400.539520] dump_header+0x178/0x82f [ 400.539531] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 400.539541] ? ___ratelimit+0x2cd/0x530 [ 400.539552] oom_kill_process.cold+0x10/0xa40 [ 400.539571] out_of_memory+0xe3e/0x1190 [ 400.539585] ? oom_killer_disable+0x1c0/0x1c0 [ 400.539594] ? mutex_trylock+0x152/0x1a0 [ 400.539606] __alloc_pages_nodemask+0x23e1/0x2720 [ 400.539624] ? lock_acquire+0x170/0x3f0 [ 400.539638] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 400.539651] ? ion_page_pool_alloc+0x9e/0x1b0 [ 400.551076] 2718 [ 400.554108] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 400.554128] alloc_pages_current+0x155/0x260 [ 400.554142] ion_page_pool_alloc+0x118/0x1b0 [ 400.554152] ion_system_heap_allocate+0x133/0x8c0 [ 400.554169] ? _raw_spin_unlock+0x29/0x40 [ 400.554178] ? _ion_heap_freelist_drain+0x6e/0x410 [ 400.554190] ? ion_system_contig_heap_create+0x130/0x130 [ 400.559028] 2718 [ 400.561267] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 400.571565] 2718 [ 400.575755] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 400.585585] ion_alloc+0x27a/0x810 [ 400.585600] ? ion_dma_buf_release+0x40/0x40 [ 400.585612] ? __might_fault+0x177/0x1b0 [ 400.585622] ion_ioctl+0xea/0x1f0 [ 400.585630] ? ion_query_heaps+0x360/0x360 [ 400.585641] ? ion_query_heaps+0x360/0x360 [ 400.585650] do_vfs_ioctl+0x75a/0xff0 [ 400.585661] ? ioctl_preallocate+0x1a0/0x1a0 [ 400.585671] ? lock_downgrade+0x740/0x740 [ 400.585684] ? __fget+0x225/0x360 [ 400.585694] ? do_vfs_ioctl+0xff0/0xff0 [ 400.585709] ? security_file_ioctl+0x83/0xb0 [ 400.595372] Node 0 [ 400.597786] SyS_ioctl+0x7f/0xb0 [ 400.601231] DMA32 free:17760kB min:36200kB low:45248kB high:54296kB active_anon:46068kB inactive_anon:34968kB active_file:52kB inactive_file:56kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7552kB pagetables:2780kB bounce:0kB free_pcp:120kB local_pcp:0kB free_cma:0kB [ 400.605442] ? do_vfs_ioctl+0xff0/0xff0 [ 400.605456] do_syscall_64+0x1d5/0x640 [ 400.605469] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 400.605477] RIP: 0033:0x4665f9 [ 400.605481] RSP: 002b:00007f77b7c6c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 400.605490] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 400.605495] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000005 [ 400.605500] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 400.605504] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 400.605509] R13: 00007ffe9143fedf R14: 00007f77b7c6c300 R15: 0000000000022000 [ 400.613978] Mem-Info: [ 400.641595] lowmem_reserve[]: [ 400.650547] active_anon:11725 inactive_anon:10776 isolated_anon:0 [ 400.650547] active_file:15 inactive_file:18 isolated_file:0 [ 400.650547] unevictable:0 dirty:0 writeback:0 unstable:0 [ 400.650547] slab_reclaimable:13253 slab_unreclaimable:112745 [ 400.650547] mapped:52228 shmem:11028 pagetables:738 bounce:0 [ 400.650547] free:13819 free_pcp:30 free_cma:0 [ 400.651745] 0 [ 400.659534] Node 0 active_anon:46068kB inactive_anon:34968kB active_file:52kB inactive_file:56kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:195900kB dirty:0kB writeback:0kB shmem:35912kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 400.660120] 0 [ 400.669696] Node 1 active_anon:832kB inactive_anon:8136kB active_file:8kB inactive_file:16kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:13012kB dirty:0kB writeback:0kB shmem:8200kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 400.671364] 0 [ 400.686187] Node 0 [ 400.731387] 0 [ 400.743129] DMA free:10956kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 400.791395] 0 [ 400.799724] lowmem_reserve[]: [ 400.805824] 0 [ 400.851387] Node 0 [ 400.860189] 2717 [ 400.881391] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 400.889110] 2718 [ 400.892886] lowmem_reserve[]: [ 400.896714] 2718 [ 400.900133] 0 [ 400.908411] 2718 [ 400.921403] 0 [ 401.001376] 0 [ 401.007643] Node 0 [ 401.081383] 0 [ 401.107449] DMA32 free:142688kB min:36200kB low:45248kB high:54296kB active_anon:46140kB inactive_anon:43116kB active_file:60kB inactive_file:3780kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7552kB pagetables:2804kB bounce:0kB free_pcp:432kB local_pcp:132kB free_cma:0kB [ 401.225914] lowmem_reserve[]: 0 0 0 0 0 [ 401.230933] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 401.231430] 0 [ 401.260926] lowmem_reserve[]: 0 0 0 0 0 [ 401.267031] Node 1 Normal free:598788kB min:53696kB low:67120kB high:80544kB active_anon:832kB inactive_anon:8136kB active_file:4kB inactive_file:8kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:160kB pagetables:172kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 401.301729] Node 1 Normal free:649092kB min:53696kB low:67120kB high:80544kB active_anon:832kB inactive_anon:8136kB active_file:4kB inactive_file:8kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:160kB pagetables:172kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 401.330760] lowmem_reserve[]: 0 0 0 0 0 [ 401.339154] Node 0 DMA: 1*4kB (E) 61*8kB (U) 52*16kB (UE) 27*32kB (UE) 14*64kB (UE) 2*128kB (UE) 2*256kB (UE) 2*512kB (UE) 2*1024kB (UE) 2*2048kB (ME) 0*4096kB = 11020kB [ 401.361359] lowmem_reserve[]: 0 0 0 0 0 [ 401.365387] Node 0 DMA: 1*4kB (E) 61*8kB (U) 52*16kB (UE) 27*32kB (UE) 14*64kB (UE) 2*128kB (UE) 2*256kB (UE) 2*512kB (UE) 2*1024kB (UE) 2*2048kB (ME) 0*4096kB = 11020kB [ 401.380884] Node 0 DMA32: 976*4kB (ME) 436*8kB (UE) 130*16kB (UE) 74*32kB (UME) 1997*64kB (UME) 572*128kB (UM) 200*256kB (UME) 73*512kB (U) 13*1024kB (U) 2*2048kB (U) 0*4096kB = 318848kB [ 401.401347] Node 0 DMA32: 976*4kB (ME) 436*8kB (UE) 130*16kB (UE) 74*32kB (UME) 1997*64kB (UME) 572*128kB (UM) 200*256kB (UME) 73*512kB (U) 13*1024kB (U) 2*2048kB (U) 0*4096kB = 318848kB [ 401.411355] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 401.441389] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 401.463569] Node 1 Normal: 35*4kB (UM) 11*8kB (UME) 10*16kB (UME) 826*32kB (UME) 5520*64kB (UE) 1434*128kB (UE) 437*256kB (U) 126*512kB (U) 5*1024kB (U) 0*2048kB 0*4096kB = 745156kB [ 401.465230] Node 1 Normal: 35*4kB (UM) 11*8kB (UME) 10*16kB (UME) 826*32kB (UME) 5563*64kB (UE) 1517*128kB (UE) 468*256kB (U) 130*512kB (U) 5*1024kB (U) 0*2048kB 0*4096kB = 768516kB [ 401.501426] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 401.531361] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 401.540109] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 401.540389] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 401.569430] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 401.578698] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 401.601862] 14605 total pagecache pages [ 401.607481] 0 pages in swap cache [ 401.612905] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 401.621425] Swap cache stats: add 0, delete 0, find 0/0 [ 401.627344] Free swap = 0kB [ 401.630845] Total swap = 0kB [ 401.631373] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 401.635256] 2097051 pages RAM [ 401.665212] 14642 total pagecache pages [ 401.667342] 0 pages HighMem/MovableOnly [ 401.669232] 0 pages in swap cache [ 401.669239] Swap cache stats: add 0, delete 0, find 0/0 [ 401.669243] Free swap = 0kB [ 401.669246] Total swap = 0kB [ 401.669254] 2097051 pages RAM [ 401.669258] 0 pages HighMem/MovableOnly [ 401.669261] 363849 pages reserved [ 401.669265] 0 pages cma reserved [ 401.669274] Out of memory (oom_kill_allocating_task): Kill process 16280 (syz-executor.1) score 0 or sacrifice child [ 401.669297] Killed process 16280 (syz-executor.1) total-vm:93252kB, anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 401.681409] 363849 pages reserved [ 401.703718] syz-executor.1: [ 401.761416] 0 pages cma reserved [ 401.763266] page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 401.813415] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 401.818605] CPU: 0 PID: 16280 Comm: syz-executor.1 Not tainted 4.14.232-syzkaller #0 [ 401.826484] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 401.836551] Call Trace: [ 401.840107] dump_stack+0x1b2/0x281 [ 401.843741] warn_alloc.cold+0x96/0x1cc [ 401.847853] ? lock_downgrade+0x740/0x740 [ 401.852009] ? zone_watermark_ok_safe+0x220/0x220 [ 401.856942] ? wake_up_q+0x82/0xd0 [ 401.860485] ? wait_for_completion_io+0x10/0x10 [ 401.865194] __alloc_pages_nodemask+0x2127/0x2720 [ 401.870079] ? lock_acquire+0x170/0x3f0 [ 401.874071] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 401.878940] ? ion_page_pool_alloc+0x9e/0x1b0 [ 401.883449] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 401.888923] alloc_pages_current+0x155/0x260 [ 401.893347] ion_page_pool_alloc+0x118/0x1b0 [ 401.897767] ion_system_heap_allocate+0x133/0x8c0 [ 401.902646] ? _raw_spin_unlock+0x29/0x40 [ 401.906798] ? _ion_heap_freelist_drain+0x6e/0x410 [ 401.911769] ? ion_system_contig_heap_create+0x130/0x130 [ 401.917237] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 401.922265] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 401.927118] ion_alloc+0x27a/0x810 [ 401.930696] ? ion_dma_buf_release+0x40/0x40 [ 401.935127] ? __might_fault+0x177/0x1b0 [ 401.939196] ion_ioctl+0xea/0x1f0 [ 401.942917] ? ion_query_heaps+0x360/0x360 [ 401.947163] ? ion_query_heaps+0x360/0x360 [ 401.951400] do_vfs_ioctl+0x75a/0xff0 [ 401.955335] ? ioctl_preallocate+0x1a0/0x1a0 [ 401.959836] ? lock_downgrade+0x740/0x740 [ 401.964080] ? __fget+0x225/0x360 [ 401.967566] ? do_vfs_ioctl+0xff0/0xff0 [ 401.971573] ? security_file_ioctl+0x83/0xb0 [ 401.975985] SyS_ioctl+0x7f/0xb0 [ 401.979351] ? do_vfs_ioctl+0xff0/0xff0 [ 401.983416] do_syscall_64+0x1d5/0x640 [ 401.987313] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 401.992504] RIP: 0033:0x4665f9 [ 401.995699] RSP: 002b:00007f77b7c6c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 402.003420] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 402.010705] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000005 [ 402.017981] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 402.025277] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 402.032559] R13: 00007ffe9143fedf R14: 00007f77b7c6c300 R15: 0000000000022000 [ 402.058222] warn_alloc_show_mem: 2 callbacks suppressed [ 402.058226] Mem-Info: [ 402.066632] active_anon:12003 inactive_anon:12824 isolated_anon:0 [ 402.066632] active_file:534 inactive_file:2005 isolated_file:0 [ 402.066632] unevictable:0 dirty:75 writeback:0 unstable:0 [ 402.066632] slab_reclaimable:13226 slab_unreclaimable:113882 [ 402.066632] mapped:54341 shmem:13076 pagetables:749 bounce:0 [ 402.066632] free:328568 free_pcp:432 free_cma:0 [ 402.101689] Node 0 active_anon:46880kB inactive_anon:43164kB active_file:4028kB inactive_file:7016kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:204664kB dirty:300kB writeback:0kB shmem:44108kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 402.131751] Node 1 active_anon:832kB inactive_anon:8132kB active_file:8kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:13000kB dirty:0kB writeback:0kB shmem:8196kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes 11:45:57 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x10001, 0x400) syz_open_dev$vcsn(&(0x7f0000000140), 0x7, 0x24c042) ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r0, 0x7a9, &(0x7f0000000040)={{@my=0x0, 0x7f}, 0x40, 0x3, 0x0, 0x6, 0xf1, 0x5, 0x39, 0x3}) r1 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0), 0x20000, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000100)={0x80000001, 0x27}) 11:45:57 executing program 2: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x10001, 0x400) r1 = syz_open_dev$vcsn(&(0x7f0000000140), 0x7, 0x24c042) ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r0, 0x7a9, &(0x7f0000000040)={{@my=0x0, 0x7f}, 0x40, 0x3, 0x0, 0x6, 0xf1, 0x5, 0x39, 0x3}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(0xffffffffffffffff, 0x7a8, &(0x7f0000000080)={{@host, 0x20000}, @hyper, 0x4, 0x9, 0x0, 0x5, 0x6, 0xd350}) socketpair(0x6, 0x80000, 0x10001, &(0x7f0000000180)) ioctl$SNAPSHOT_ATOMIC_RESTORE(r1, 0x3304) r2 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0), 0x20000, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000100)={0x80000001, 0x27}) [ 402.159289] Node 0 DMA free:11212kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 402.191025] lowmem_reserve[]: 0 2717 2718 2718 2718 11:45:57 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendto(r0, &(0x7f0000000380)="f6a073b72742b506f3a504992931b4", 0xf, 0x8000, 0x0, 0x0) 11:45:57 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x10001, 0x400) syz_open_dev$vcsn(&(0x7f0000000140), 0x7, 0x24c042) ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r0, 0x7a9, &(0x7f0000000040)={{@my=0x0, 0x7f}, 0x40, 0x3, 0x0, 0x6, 0xf1, 0x5, 0x39, 0x3}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(0xffffffffffffffff, 0x7a8, &(0x7f0000000080)={{@host, 0x20000}, @hyper, 0x4, 0x9, 0x0, 0x5, 0x6, 0xd350}) socketpair(0x6, 0x80000, 0x10001, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x44, 0x0, 0x400, 0x70bd25, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3023d3782c859c3d}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}]}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0), 0x20000, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000100)={0x80000001, 0x27}) [ 402.196874] Node 0 DMA32 free:395452kB min:36200kB low:45248kB high:54296kB active_anon:46880kB inactive_anon:43164kB active_file:4128kB inactive_file:10216kB unevictable:0kB writepending:300kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7616kB pagetables:2676kB bounce:0kB free_pcp:776kB local_pcp:436kB free_cma:0kB [ 402.231519] lowmem_reserve[]: 0 0 0 0 0 [ 402.236776] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 402.264313] lowmem_reserve[]: 0 0 0 0 0 [ 402.269182] Node 1 Normal free:870560kB min:53696kB low:67120kB high:80544kB active_anon:832kB inactive_anon:8132kB active_file:8kB inactive_file:4kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:160kB pagetables:172kB bounce:0kB free_pcp:916kB local_pcp:740kB free_cma:0kB [ 402.356825] lowmem_reserve[]: 0 0 0 0 0 [ 402.365495] Node 0 DMA: 1*4kB (E) 61*8kB (U) 52*16kB (UE) 27*32kB (UE) 17*64kB (UE) 2*128kB (UE) 2*256kB (UE) 2*512kB (UE) 2*1024kB (UE) 2*2048kB (ME) 0*4096kB = 11212kB [ 402.425208] Node 0 DMA32: 1120*4kB (UME) 436*8kB (UE) 130*16kB (ME) 11*32kB (E) 1*64kB (E) 1*128kB (E) 1*256kB (E) 67*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 45152kB [ 402.476560] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 402.513976] Node 1 Normal: 46*4kB (UM) 11*8kB (ME) 16*16kB (ME) 775*32kB (UME) 2305*64kB (UME) 1618*128kB (UME) 599*256kB (U) 172*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 621360kB [ 402.565945] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 402.600624] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 402.649441] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 402.680067] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 402.715073] 17014 total pagecache pages [ 402.729945] 0 pages in swap cache [ 402.745531] Swap cache stats: add 0, delete 0, find 0/0 [ 402.781471] syz-executor.4: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 402.784233] syz-executor.5: [ 402.796137] Free swap = 0kB [ 402.802813] syz-executor.2: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 402.824222] Total swap = 0kB [ 402.835097] 2097051 pages RAM [ 402.836180] page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 402.840803] syz-executor.4 cpuset= [ 402.854692] 0 pages HighMem/MovableOnly [ 402.874735] / mems_allowed=0-1 [ 402.882691] 363849 pages reserved [ 402.889790] CPU: 1 PID: 16303 Comm: syz-executor.4 Not tainted 4.14.232-syzkaller #0 [ 402.889811] syz-executor.2 cpuset= [ 402.897689] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 402.897695] Call Trace: [ 402.897717] dump_stack+0x1b2/0x281 [ 402.897731] warn_alloc.cold+0x96/0x1cc [ 402.897745] ? zone_watermark_ok_safe+0x220/0x220 [ 402.925628] __alloc_pages_nodemask+0x2127/0x2720 [ 402.930475] ? _raw_spin_unlock_irq+0x5a/0x80 [ 402.934968] ? finish_task_switch+0x178/0x610 [ 402.939456] ? finish_task_switch+0x14d/0x610 [ 402.943974] ? lock_acquire+0x170/0x3f0 [ 402.947966] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 402.952905] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 402.958357] ? __mutex_unlock_slowpath+0x75/0x770 [ 402.963199] ? alloc_pages_current+0x21c/0x260 [ 402.967784] alloc_pages_current+0x155/0x260 [ 402.973676] ion_page_pool_alloc+0x118/0x1b0 [ 402.978091] ion_system_heap_allocate+0x133/0x8c0 [ 402.982932] ? ion_alloc+0x187/0x810 [ 402.986659] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 402.992110] ? ion_system_contig_heap_create+0x130/0x130 [ 402.997569] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 403.002609] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 403.007544] ion_alloc+0x204/0x810 [ 403.011110] ? ion_dma_buf_release+0x40/0x40 [ 403.015524] ? __might_fault+0x177/0x1b0 [ 403.019586] ion_ioctl+0xea/0x1f0 [ 403.023031] ? ion_query_heaps+0x360/0x360 [ 403.027268] ? ion_query_heaps+0x360/0x360 [ 403.031497] do_vfs_ioctl+0x75a/0xff0 [ 403.035295] ? ioctl_preallocate+0x1a0/0x1a0 [ 403.039699] ? lock_downgrade+0x740/0x740 [ 403.043869] ? __fget+0x225/0x360 [ 403.047335] ? do_vfs_ioctl+0xff0/0xff0 [ 403.051325] ? security_file_ioctl+0x83/0xb0 [ 403.055737] SyS_ioctl+0x7f/0xb0 [ 403.060082] ? do_vfs_ioctl+0xff0/0xff0 [ 403.064609] do_syscall_64+0x1d5/0x640 [ 403.068508] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 403.073698] RIP: 0033:0x4665f9 [ 403.076906] RSP: 002b:00007f9108899188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 403.084619] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 403.091894] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000006 [ 403.099164] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 403.106435] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 403.113718] R13: 00007fffb2c94dcf R14: 00007f9108899300 R15: 0000000000022000 [ 403.124281] / mems_allowed=0-1 [ 403.129490] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 403.136939] CPU: 0 PID: 16300 Comm: syz-executor.2 Not tainted 4.14.232-syzkaller #0 [ 403.145019] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 403.154378] Call Trace: [ 403.157849] dump_stack+0x1b2/0x281 [ 403.161486] warn_alloc.cold+0x96/0x1cc [ 403.165470] ? zone_watermark_ok_safe+0x220/0x220 [ 403.170340] __alloc_pages_nodemask+0x2127/0x2720 [ 403.175233] ? _raw_spin_unlock_irq+0x24/0x80 [ 403.179738] ? lock_acquire+0x170/0x3f0 [ 403.183746] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 403.188610] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 403.194078] ? __mutex_unlock_slowpath+0x75/0x770 [ 403.198943] alloc_pages_current+0x155/0x260 [ 403.203568] ion_page_pool_alloc+0x118/0x1b0 [ 403.208008] ion_system_heap_allocate+0x133/0x8c0 [ 403.212896] ? ion_alloc+0x187/0x810 [ 403.216644] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 403.222111] ? ion_system_contig_heap_create+0x130/0x130 [ 403.227723] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 403.232763] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 403.237625] ion_alloc+0x204/0x810 [ 403.241186] ? ion_dma_buf_release+0x40/0x40 [ 403.245617] ? __might_fault+0x177/0x1b0 [ 403.249696] ion_ioctl+0xea/0x1f0 [ 403.253161] ? ion_query_heaps+0x360/0x360 [ 403.257416] ? ion_query_heaps+0x360/0x360 [ 403.261691] do_vfs_ioctl+0x75a/0xff0 [ 403.265617] ? ioctl_preallocate+0x1a0/0x1a0 [ 403.270034] ? lock_downgrade+0x740/0x740 [ 403.274213] ? __fget+0x225/0x360 [ 403.277697] ? do_vfs_ioctl+0xff0/0xff0 [ 403.281681] ? security_file_ioctl+0x83/0xb0 [ 403.286117] SyS_ioctl+0x7f/0xb0 [ 403.289515] ? do_vfs_ioctl+0xff0/0xff0 [ 403.293926] do_syscall_64+0x1d5/0x640 [ 403.297825] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 403.303017] RIP: 0033:0x4665f9 [ 403.306217] RSP: 002b:00007ff3638e3188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 403.313927] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 403.321204] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000005 [ 403.328494] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 403.338112] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 403.345394] R13: 00007ffe909c1c6f R14: 00007ff3638e3300 R15: 0000000000022000 [ 403.355283] 0 pages cma reserved [ 403.373298] CPU: 0 PID: 16297 Comm: syz-executor.5 Not tainted 4.14.232-syzkaller #0 [ 403.381221] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 403.390620] Call Trace: [ 403.393263] dump_stack+0x1b2/0x281 [ 403.396906] warn_alloc.cold+0x96/0x1cc [ 403.400890] ? zone_watermark_ok_safe+0x220/0x220 [ 403.405766] __alloc_pages_nodemask+0x2127/0x2720 [ 403.410906] ? _raw_spin_unlock_irq+0x24/0x80 [ 403.415439] ? lock_acquire+0x170/0x3f0 [ 403.419431] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 403.424463] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 403.429927] ? __mutex_unlock_slowpath+0x75/0x770 [ 403.435773] alloc_pages_current+0x155/0x260 [ 403.440216] ion_page_pool_alloc+0x118/0x1b0 [ 403.444645] ion_system_heap_allocate+0x133/0x8c0 [ 403.449505] ? ion_alloc+0x187/0x810 [ 403.453245] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 403.458974] ? ion_system_contig_heap_create+0x130/0x130 [ 403.464438] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 403.474161] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 403.479125] ion_alloc+0x204/0x810 [ 403.482682] ? ion_dma_buf_release+0x40/0x40 [ 403.487104] ? __might_fault+0x177/0x1b0 [ 403.491203] ion_ioctl+0xea/0x1f0 [ 403.494661] ? ion_query_heaps+0x360/0x360 [ 403.498957] ? ion_query_heaps+0x360/0x360 [ 403.503224] do_vfs_ioctl+0x75a/0xff0 [ 403.507035] ? ioctl_preallocate+0x1a0/0x1a0 [ 403.511456] ? lock_downgrade+0x740/0x740 [ 403.515619] ? __fget+0x225/0x360 [ 403.519132] ? do_vfs_ioctl+0xff0/0xff0 [ 403.523124] ? security_file_ioctl+0x83/0xb0 [ 403.527663] SyS_ioctl+0x7f/0xb0 [ 403.534626] ? do_vfs_ioctl+0xff0/0xff0 [ 403.538611] do_syscall_64+0x1d5/0x640 [ 403.542775] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 403.547978] RIP: 0033:0x4665f9 [ 403.551175] RSP: 002b:00007f97bed79188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 403.559041] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 403.566362] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000005 [ 403.574186] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 403.581466] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 403.588745] R13: 00007ffe0c744e6f R14: 00007f97bed79300 R15: 0000000000022000 [ 403.679040] Mem-Info: [ 403.686490] active_anon:12021 inactive_anon:12825 isolated_anon:0 [ 403.686490] active_file:602 inactive_file:674 isolated_file:64 [ 403.686490] unevictable:0 dirty:4 writeback:0 unstable:0 [ 403.686490] slab_reclaimable:13226 slab_unreclaimable:114715 [ 403.686490] mapped:53863 shmem:13077 pagetables:792 bounce:0 [ 403.686490] free:178836 free_pcp:366 free_cma:0 [ 403.732122] Node 0 active_anon:46984kB inactive_anon:43164kB active_file:1460kB inactive_file:2360kB unevictable:0kB isolated(anon):0kB isolated(file):256kB mapped:201352kB dirty:16kB writeback:0kB shmem:44108kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 403.777177] Node 1 active_anon:1100kB inactive_anon:8136kB active_file:208kB inactive_file:196kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:13300kB dirty:0kB writeback:0kB shmem:8200kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 403.813189] Node 0 DMA free:11116kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 403.865273] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 403.889317] Node 0 DMA32 free:206408kB min:36200kB low:45248kB high:54296kB active_anon:46984kB inactive_anon:43164kB active_file:1240kB inactive_file:2300kB unevictable:0kB writepending:16kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7776kB pagetables:2976kB bounce:0kB free_pcp:268kB local_pcp:112kB free_cma:0kB [ 403.931248] lowmem_reserve[]: 0 0 0 0 0 [ 403.952252] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 403.979088] lowmem_reserve[]: 0 0 0 0 0 [ 404.025491] Node 1 Normal free:470148kB min:53696kB low:67120kB high:80544kB active_anon:1100kB inactive_anon:8136kB active_file:8kB inactive_file:12kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:192kB pagetables:192kB bounce:0kB free_pcp:136kB local_pcp:96kB free_cma:0kB [ 404.160815] lowmem_reserve[]: 0 0 0 0 0 [ 404.182807] Node 0 DMA: 1*4kB (E) 38*8kB (U) 52*16kB (UE) 28*32kB (UE) 18*64kB (UE) 2*128kB (UE) 2*256kB (UE) 2*512kB (UE) 2*1024kB (UE) 2*2048kB (ME) 0*4096kB = 11124kB [ 404.275059] Node 0 DMA32: 1206*4kB (UE) 481*8kB (UE) 131*16kB (E) 24*32kB (UME) 38*64kB (UME) 20*128kB (UME) 6*256kB (UME) 31*512kB (UM) 9*1024kB (U) 1*2048kB (U) 0*4096kB = 45200kB [ 404.358099] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 404.378500] Node 1 Normal: 0*4kB 3*8kB (ME) 5*16kB (UME) 3*32kB (UE) 3246*64kB (UE) 752*128kB (UME) 126*256kB (UM) 98*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 386632kB [ 404.397994] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 404.408334] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 404.419449] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 404.437948] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 404.446786] 16407 total pagecache pages [ 404.450842] 0 pages in swap cache [ 404.456060] Swap cache stats: add 0, delete 0, find 0/0 [ 404.463144] Free swap = 0kB [ 404.466642] Total swap = 0kB [ 404.471090] 2097051 pages RAM [ 404.488568] 0 pages HighMem/MovableOnly [ 404.498741] 363849 pages reserved [ 404.506935] 0 pages cma reserved [ 404.698075] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 404.716438] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 404.755573] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 404.778751] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 404.798136] device bridge_slave_1 left promiscuous mode [ 404.809383] bridge0: port 2(bridge_slave_1) entered disabled state [ 404.826705] device bridge_slave_0 left promiscuous mode [ 404.845629] syz-executor.5 invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 404.885529] bridge0: port 1(bridge_slave_0) entered disabled state [ 404.902317] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 404.907507] CPU: 1 PID: 15938 Comm: syz-executor.5 Not tainted 4.14.232-syzkaller #0 [ 404.915401] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 404.924777] Call Trace: [ 404.927416] dump_stack+0x1b2/0x281 [ 404.931068] dump_header+0x178/0x82f [ 404.934921] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 404.940499] ? ___ratelimit+0x2cd/0x530 [ 404.944481] oom_kill_process.cold+0x10/0xa40 [ 404.948986] out_of_memory+0xe3e/0x1190 [ 404.953221] ? oom_killer_disable+0x1c0/0x1c0 [ 404.957710] ? mutex_trylock+0x152/0x1a0 [ 404.961769] __alloc_pages_nodemask+0x23e1/0x2720 [ 404.966623] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 404.972260] alloc_pages_current+0x155/0x260 [ 404.976686] filemap_fault+0x11a1/0x1ad0 [ 404.980752] ext4_filemap_fault+0x84/0xb0 [ 404.984898] __do_fault+0xfa/0x380 [ 404.988454] __handle_mm_fault+0x2497/0x4620 [ 404.992890] ? vm_insert_page+0x7c0/0x7c0 [ 404.997035] ? hrtimer_nanosleep+0x1ff/0x4b0 [ 405.001468] ? nanosleep_copyout+0x100/0x100 [ 405.005886] ? mark_held_locks+0xa6/0xf0 [ 405.009955] handle_mm_fault+0x455/0x9c0 [ 405.014037] __do_page_fault+0x549/0xad0 [ 405.018111] ? spurious_fault+0x640/0x640 [ 405.022263] ? do_page_fault+0x60/0x500 [ 405.026249] ? page_fault+0x2f/0x50 [ 405.030155] page_fault+0x45/0x50 [ 405.033611] RIP: 628b3:0x5 [ 405.036455] RSP: 0007:00007ffe0c74512c EFLAGS: 00000032 [ 405.039428] device veth1_macvtap left promiscuous mode [ 405.080335] device veth0_macvtap left promiscuous mode [ 405.080995] Mem-Info: [ 405.089968] device veth1_vlan left promiscuous mode [ 405.102035] device veth0_vlan left promiscuous mode [ 405.103503] active_anon:12093 inactive_anon:12823 isolated_anon:0 [ 405.103503] active_file:7 inactive_file:24 isolated_file:0 [ 405.103503] unevictable:0 dirty:0 writeback:0 unstable:0 [ 405.103503] slab_reclaimable:13219 slab_unreclaimable:114944 [ 405.103503] mapped:43950 shmem:13073 pagetables:761 bounce:0 [ 405.103503] free:19052 free_pcp:61 free_cma:0 [ 405.149019] Node 0 active_anon:47096kB inactive_anon:43160kB active_file:12kB inactive_file:48kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:175800kB dirty:0kB writeback:0kB shmem:44096kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 405.185685] Node 1 active_anon:1276kB inactive_anon:8132kB active_file:16kB inactive_file:48kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:8196kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 405.220599] Node 0 DMA free:10960kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 405.255240] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 405.260334] Node 0 DMA32 free:19028kB min:36200kB low:45248kB high:54296kB active_anon:47096kB inactive_anon:43160kB active_file:12kB inactive_file:48kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7648kB pagetables:2864kB bounce:0kB free_pcp:244kB local_pcp:244kB free_cma:0kB [ 405.298120] lowmem_reserve[]: 0 0 0 0 0 [ 405.308613] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 405.341168] lowmem_reserve[]: 0 0 0 0 0 [ 405.359848] Node 1 Normal free:46220kB min:53696kB low:67120kB high:80544kB active_anon:1276kB inactive_anon:8132kB active_file:0kB inactive_file:64kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:128kB pagetables:180kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 405.398028] lowmem_reserve[]: 0 0 0 0 0 [ 405.407742] Node 0 DMA: 2*4kB (UE) 1*8kB (U) 52*16kB (UE) 30*32kB (UE) 19*64kB (UE) 2*128kB (UE) 2*256kB (UE) 2*512kB (UE) 2*1024kB (UE) 2*2048kB (ME) 0*4096kB = 10960kB [ 405.430435] Node 0 DMA32: 1761*4kB (UME) 632*8kB (ME) 151*16kB (ME) 25*32kB (UME) 22*64kB (UME) 10*128kB (ME) 2*256kB (M) 1*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 19028kB [ 405.458956] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 405.469959] Node 1 Normal: 27*4kB (M) 10*8kB (ME) 13*16kB (UME) 20*32kB (ME) 14*64kB (ME) 2*128kB (UE) 2*256kB (UM) 85*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 46220kB [ 405.489359] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 405.515062] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 405.530574] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 405.544068] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 405.559368] 13104 total pagecache pages [ 405.567826] 0 pages in swap cache [ 405.577908] Swap cache stats: add 0, delete 0, find 0/0 [ 405.587948] Free swap = 0kB [ 405.590999] Total swap = 0kB [ 405.600738] 2097051 pages RAM [ 405.608402] 0 pages HighMem/MovableOnly [ 405.618964] 363849 pages reserved [ 405.627519] 0 pages cma reserved [ 405.630909] Out of memory (oom_kill_allocating_task): Kill process 15938 (syz-executor.5) score 0 or sacrifice child [ 405.651201] Killed process 16297 (syz-executor.5) total-vm:93252kB, anon-rss:152kB, file-rss:34816kB, shmem-rss:0kB [ 405.689955] oom_reaper: reaped process 16297 (syz-executor.5), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 405.743639] rs:main Q:Reg invoked oom-killer: gfp_mask=0x1c200ca(GFP_HIGHUSER_MOVABLE|__GFP_WRITE), nodemask=(null), order=0, oom_score_adj=0 [ 405.775274] syz-executor.5: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 405.814195] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 405.819574] CPU: 0 PID: 16297 Comm: syz-executor.5 Not tainted 4.14.232-syzkaller #0 [ 405.827471] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 405.836860] Call Trace: [ 405.839470] dump_stack+0x1b2/0x281 [ 405.843130] warn_alloc.cold+0x96/0x1cc [ 405.847140] ? zone_watermark_ok_safe+0x220/0x220 [ 405.852013] ? usleep_range+0x130/0x130 [ 405.856007] ? try_to_free_pages+0x23f/0x6e0 [ 405.860436] ? _find_next_bit+0xdb/0x100 [ 405.864524] ? run_timer_softirq+0x5a0/0x5a0 [ 405.868962] __alloc_pages_nodemask+0x2127/0x2720 [ 405.873830] ? lock_acquire+0x170/0x3f0 [ 405.877858] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 405.882714] ? ion_page_pool_alloc+0x9e/0x1b0 [ 405.887224] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 405.892711] alloc_pages_current+0x155/0x260 [ 405.897139] ion_page_pool_alloc+0x118/0x1b0 [ 405.901566] ion_system_heap_allocate+0x133/0x8c0 [ 405.906449] ? ion_alloc+0x187/0x810 [ 405.910177] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 405.915645] ? ion_system_contig_heap_create+0x130/0x130 [ 405.921114] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 405.926175] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 405.931043] ion_alloc+0x204/0x810 [ 405.934599] ? ion_dma_buf_release+0x40/0x40 [ 405.939031] ? __might_fault+0x177/0x1b0 [ 405.943111] ion_ioctl+0xea/0x1f0 [ 405.946581] ? ion_query_heaps+0x360/0x360 [ 405.950862] ? ion_query_heaps+0x360/0x360 [ 405.955112] do_vfs_ioctl+0x75a/0xff0 [ 405.962415] ? ioctl_preallocate+0x1a0/0x1a0 [ 405.966842] ? lock_downgrade+0x740/0x740 [ 405.971010] ? __fget+0x225/0x360 [ 405.974521] ? do_vfs_ioctl+0xff0/0xff0 [ 405.978511] ? security_file_ioctl+0x83/0xb0 [ 405.982941] SyS_ioctl+0x7f/0xb0 [ 405.986322] ? do_vfs_ioctl+0xff0/0xff0 [ 405.990325] do_syscall_64+0x1d5/0x640 [ 405.994244] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 405.999454] RIP: 0033:0x4665f9 [ 406.002654] RSP: 002b:00007f97bed79188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 406.010866] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 406.018143] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000005 [ 406.025523] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 406.032803] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 406.040240] R13: 00007ffe0c744e6f R14: 00007f97bed79300 R15: 0000000000022000 [ 406.060673] rs:main Q:Reg cpuset=/ mems_allowed=0-1 [ 406.067735] CPU: 0 PID: 16291 Comm: rs:main Q:Reg Not tainted 4.14.232-syzkaller #0 [ 406.075809] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 406.085273] Call Trace: [ 406.087928] dump_stack+0x1b2/0x281 [ 406.092183] dump_header+0x178/0x82f [ 406.096276] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 406.101682] ? ___ratelimit+0x2cd/0x530 [ 406.105785] oom_kill_process.cold+0x10/0xa40 [ 406.110585] out_of_memory+0xe3e/0x1190 [ 406.114646] ? oom_killer_disable+0x1c0/0x1c0 [ 406.119239] ? mutex_trylock+0x152/0x1a0 [ 406.123710] __alloc_pages_nodemask+0x23e1/0x2720 [ 406.129022] ? trace_hardirqs_on+0x10/0x10 [ 406.133289] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 406.138345] ? __radix_tree_lookup+0x1b5/0x2e0 [ 406.143265] alloc_pages_current+0x155/0x260 [ 406.148108] pagecache_get_page+0x3f5/0xab0 [ 406.152496] grab_cache_page_write_begin+0x63/0x90 [ 406.157456] ext4_da_write_begin+0x249/0xe70 [ 406.161898] ? ext4_write_begin+0x1260/0x1260 [ 406.166421] generic_perform_write+0x1c9/0x420 [ 406.171054] ? __mnt_drop_write_file+0x5f/0x90 [ 406.175761] ? filemap_page_mkwrite+0x2d0/0x2d0 [ 406.181694] ? current_time+0xb0/0xb0 [ 406.185517] ? ext4_file_write_iter+0x1cc/0xd20 [ 406.190208] __generic_file_write_iter+0x227/0x590 [ 406.195420] ext4_file_write_iter+0x276/0xd20 [ 406.199935] ? aa_file_perm+0x304/0xab0 [ 406.203924] ? ext4_file_read_iter+0x330/0x330 [ 406.208553] ? trace_hardirqs_on+0x10/0x10 [ 406.212809] ? iov_iter_init+0xa6/0x1c0 [ 406.216797] __vfs_write+0x44c/0x630 [ 406.220527] ? kernel_read+0x110/0x110 [ 406.224440] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 406.229471] vfs_write+0x17f/0x4d0 [ 406.233043] SyS_write+0xf2/0x210 [ 406.236522] ? SyS_read+0x210/0x210 [ 406.240182] ? __do_page_fault+0x159/0xad0 [ 406.244433] ? do_syscall_64+0x4c/0x640 [ 406.248462] ? SyS_read+0x210/0x210 [ 406.252120] do_syscall_64+0x1d5/0x640 [ 406.256032] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 406.261354] RIP: 0033:0x7fdc6fa701cd [ 406.265157] RSP: 002b:00007fdc6d02b590 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 406.272874] RAX: ffffffffffffffda RBX: 00007fdc640258a0 RCX: 00007fdc6fa701cd [ 406.280696] RDX: 0000000000000069 RSI: 00007fdc640258a0 RDI: 0000000000000006 [ 406.287976] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 406.295260] R10: 0000000000000000 R11: 0000000000000293 R12: 00007fdc64025620 [ 406.302540] R13: 00007fdc6d02b5b0 R14: 0000562d77b343a0 R15: 0000000000000069 [ 406.352545] warn_alloc_show_mem: 2 callbacks suppressed [ 406.352549] Mem-Info: [ 406.365266] active_anon:12069 inactive_anon:12823 isolated_anon:0 [ 406.365266] active_file:848 inactive_file:956 isolated_file:0 [ 406.365266] unevictable:0 dirty:1 writeback:0 unstable:0 [ 406.365266] slab_reclaimable:13216 slab_unreclaimable:115488 [ 406.365266] mapped:45397 shmem:13073 pagetables:736 bounce:0 [ 406.365266] free:100477 free_pcp:238 free_cma:0 [ 406.399396] Mem-Info: [ 406.406608] active_anon:12069 inactive_anon:12823 isolated_anon:0 [ 406.406608] active_file:898 inactive_file:981 isolated_file:0 [ 406.406608] unevictable:0 dirty:1 writeback:0 unstable:0 [ 406.406608] slab_reclaimable:13216 slab_unreclaimable:115513 [ 406.406608] mapped:45397 shmem:13073 pagetables:736 bounce:0 [ 406.406608] free:103992 free_pcp:255 free_cma:0 [ 406.448196] Node 0 active_anon:47000kB inactive_anon:43160kB active_file:808kB inactive_file:640kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:176400kB dirty:0kB writeback:0kB shmem:44096kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 406.477334] Node 0 active_anon:47000kB inactive_anon:43160kB active_file:808kB inactive_file:640kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:176400kB dirty:0kB writeback:0kB shmem:44096kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 406.507632] Node 1 active_anon:1276kB inactive_anon:8132kB active_file:2884kB inactive_file:3284kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:5188kB dirty:4kB writeback:0kB shmem:8196kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 406.540847] Node 1 active_anon:1276kB inactive_anon:8132kB active_file:2884kB inactive_file:3284kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:5188kB dirty:4kB writeback:0kB shmem:8196kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 406.574520] Node 0 DMA free:11176kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 406.621410] Node 0 DMA free:11176kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 406.661413] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 406.666519] Node 0 DMA32 free:158572kB min:36200kB low:45248kB high:54296kB active_anon:47000kB inactive_anon:43160kB active_file:1008kB inactive_file:640kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7616kB pagetables:2764kB bounce:0kB free_pcp:388kB local_pcp:268kB free_cma:0kB [ 406.698203] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 406.705050] Node 0 DMA32 free:138504kB min:36200kB low:45248kB high:54296kB active_anon:47000kB inactive_anon:43160kB active_file:1008kB inactive_file:640kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7616kB pagetables:2764kB bounce:0kB free_pcp:336kB local_pcp:268kB free_cma:0kB [ 406.751442] lowmem_reserve[]: 0 0 0 0 0 [ 406.755492] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 406.801363] lowmem_reserve[]: 0 0 0 0 0 [ 406.805403] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 406.832104] lowmem_reserve[]: 0 0 0 0 0 [ 406.836135] Node 1 Normal free:590852kB min:53696kB low:67120kB high:80544kB active_anon:1276kB inactive_anon:8132kB active_file:2884kB inactive_file:3284kB unevictable:0kB writepending:4kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:128kB pagetables:180kB bounce:0kB free_pcp:756kB local_pcp:644kB free_cma:0kB [ 406.867810] lowmem_reserve[]: 0 0 0 0 0 [ 406.876549] Node 1 Normal free:590852kB min:53696kB low:67120kB high:80544kB active_anon:1276kB inactive_anon:8132kB active_file:2884kB inactive_file:3284kB unevictable:0kB writepending:4kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:128kB pagetables:180kB bounce:0kB free_pcp:756kB local_pcp:644kB free_cma:0kB [ 406.910517] lowmem_reserve[]: 0 0 0 0 0 [ 406.916107] Node 0 DMA: 2*4kB (UE) 11*8kB (U) 52*16kB (UE) 29*32kB (UE) 21*64kB (UE) 3*128kB (UE) 2*256kB (UE) 2*512kB (UE) 2*1024kB (UE) 2*2048kB (ME) 0*4096kB = 11264kB [ 406.955340] lowmem_reserve[]: 0 0 0 0 0 [ 406.959355] Node 0 DMA: 2*4kB (UE) 11*8kB (U) 52*16kB (UE) 29*32kB (UE) 21*64kB (UE) 3*128kB (UE) 2*256kB (UE) 2*512kB (UE) 2*1024kB (UE) 2*2048kB (ME) 0*4096kB = 11264kB [ 406.980211] Node 0 DMA32: 1508*4kB (UME) 627*8kB (ME) 583*16kB (UME) 171*32kB (UME) 21*64kB (UME) 9*128kB (UME) 105*256kB (UM) 5*512kB (UM) 8*1024kB (U) 1*2048kB (U) 0*4096kB = 68024kB [ 407.021365] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 407.031383] Node 0 DMA32: 1513*4kB (UME) 636*8kB (UME) 157*16kB (UME) 461*32kB (UME) 21*64kB (UME) 9*128kB (UME) 105*256kB (UM) [ 407.032187] Node 1 Normal: 266*4kB (UM) 11*8kB (UME) 6*16kB (UME) 4*32kB (UE) 3180*64kB (UME) 1044*128kB (UE) 296*256kB (UM) 175*512kB (UM) 84*1024kB (U) 1*2048kB (U) 0*4096kB = 591968kB [ 407.092800] 5*512kB (UM) 8*1024kB (U) 1*2048kB (U) 0*4096kB = 70580kB [ 407.093977] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 407.099458] Node 0 [ 407.123387] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 407.151430] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 407.160303] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 407.170070] Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 407.195437] Node 1 Normal: 14*4kB (UM) 12*8kB (ME) 7*16kB (UME) 2*32kB (E) 2898*64kB (UME) 1044*128kB (UE) 296*256kB (UM) 175*512kB (UM) 84*1024kB (U) 1*2048kB (U) 0*4096kB = 572872kB [ 407.216055] 15050 total pagecache pages [ 407.220045] 0 pages in swap cache [ 407.235284] Swap cache stats: add 0, delete 0, find 0/0 [ 407.240698] Free swap = 0kB [ 407.251342] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 407.260213] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 407.270578] Total swap = 0kB [ 407.278156] 2097051 pages RAM [ 407.281868] 0 pages HighMem/MovableOnly [ 407.285937] 363849 pages reserved [ 407.289390] 0 pages cma reserved [ 407.301303] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 407.325426] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 407.365242] 15050 total pagecache pages [ 407.369266] 0 pages in swap cache [ 407.385898] Swap cache stats: add 0, delete 0, find 0/0 [ 407.411260] Free swap = 0kB [ 407.414302] Total swap = 0kB [ 407.417313] 2097051 pages RAM [ 407.420420] 0 pages HighMem/MovableOnly [ 407.451266] 363849 pages reserved [ 407.454749] 0 pages cma reserved [ 407.458113] Out of memory (oom_kill_allocating_task): Kill process 16291 (rs:main Q:Reg) score 0 or sacrifice child [ 407.482382] Killed process 16288 (rsyslogd) total-vm:254332kB, anon-rss:784kB, file-rss:0kB, shmem-rss:0kB [ 407.526790] oom_reaper: reaped process 16288 (rsyslogd), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 408.254693] oom_reaper: reaped process 16303 (syz-executor.4), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 408.311245] in:imklog invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 408.351423] in:imklog cpuset=/ mems_allowed=0-1 [ 408.356158] CPU: 1 PID: 16321 Comm: in:imklog Not tainted 4.14.232-syzkaller #0 [ 408.363734] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 408.373086] Call Trace: [ 408.375683] dump_stack+0x1b2/0x281 [ 408.379458] dump_header+0x178/0x82f [ 408.383183] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 408.388307] ? ___ratelimit+0x2cd/0x530 [ 408.392276] oom_kill_process.cold+0x10/0xa40 [ 408.396866] out_of_memory+0xe3e/0x1190 [ 408.400838] ? oom_killer_disable+0x1c0/0x1c0 [ 408.405801] ? mutex_trylock+0x152/0x1a0 [ 408.409852] __alloc_pages_nodemask+0x23e1/0x2720 [ 408.414704] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 408.419568] alloc_pages_current+0x155/0x260 [ 408.424951] filemap_fault+0x11a1/0x1ad0 [ 408.429065] ext4_filemap_fault+0x84/0xb0 [ 408.433219] __do_fault+0xfa/0x380 [ 408.436764] __handle_mm_fault+0x2497/0x4620 [ 408.441166] ? vm_insert_page+0x7c0/0x7c0 [ 408.445325] ? lock_downgrade+0x740/0x740 [ 408.449464] ? mark_held_locks+0xa6/0xf0 [ 408.453610] handle_mm_fault+0x455/0x9c0 [ 408.457678] __do_page_fault+0x549/0xad0 [ 408.461748] ? spurious_fault+0x640/0x640 [ 408.465906] ? do_page_fault+0x60/0x500 [ 408.469864] ? page_fault+0x2f/0x50 [ 408.473486] page_fault+0x45/0x50 [ 408.476927] RIP: 1fa0:0x1f9f [ 408.479920] RSP: 0000:0000564a747a09d0 EFLAGS: 7f71d2afbda0 [ 408.485672] Mem-Info: [ 408.495091] active_anon:11952 inactive_anon:12822 isolated_anon:0 [ 408.495091] active_file:48 inactive_file:36 isolated_file:11 [ 408.495091] unevictable:0 dirty:0 writeback:6 unstable:0 [ 408.495091] slab_reclaimable:13218 slab_unreclaimable:115302 [ 408.495091] mapped:44008 shmem:13073 pagetables:736 bounce:0 [ 408.495091] free:13863 free_pcp:138 free_cma:0 [ 408.529688] device hsr_slave_1 left promiscuous mode [ 408.535034] Node 0 active_anon:46672kB inactive_anon:43156kB active_file:92kB inactive_file:96kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:175992kB dirty:0kB writeback:8kB shmem:44096kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 408.537020] syz-executor.5: [ 408.563228] Node 1 active_anon:1136kB inactive_anon:8132kB active_file:100kB inactive_file:48kB unevictable:0kB isolated(anon):0kB isolated(file):44kB mapped:40kB dirty:0kB writeback:16kB shmem:8196kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 408.563234] Node 0 DMA free:10976kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 408.563252] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 408.563273] Node 0 DMA32 free:18160kB min:36200kB low:45248kB high:54296kB active_anon:46672kB inactive_anon:43156kB active_file:484kB inactive_file:212kB unevictable:0kB writepending:8kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7520kB pagetables:2760kB bounce:0kB free_pcp:116kB local_pcp:0kB free_cma:0kB [ 408.563292] lowmem_reserve[]: 0 0 0 0 0 [ 408.563312] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 408.563333] lowmem_reserve[]: [ 408.573694] page allocation failure: order:4 [ 408.597503] 0 [ 408.622172] device hsr_slave_0 left promiscuous mode [ 408.633012] 0 [ 408.676848] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 408.687227] 0 [ 408.700354] (null) [ 408.711232] 0 0 [ 408.713219] Node 1 Normal free:26808kB min:53696kB low:67120kB high:80544kB active_anon:1136kB inactive_anon:8132kB active_file:8kB inactive_file:0kB unevictable:0kB writepending:4kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:224kB pagetables:184kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 408.713760] team0 (unregistering): Port device team_slave_1 removed [ 408.751322] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 408.756460] CPU: 0 PID: 16297 Comm: syz-executor.5 Not tainted 4.14.232-syzkaller #0 [ 408.764336] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 408.768875] lowmem_reserve[]: [ 408.773859] Call Trace: [ 408.773883] dump_stack+0x1b2/0x281 [ 408.773896] warn_alloc.cold+0x96/0x1cc [ 408.773908] ? zone_watermark_ok_safe+0x220/0x220 [ 408.773929] __alloc_pages_nodemask+0x2127/0x2720 [ 408.777026] 0 [ 408.779612] ? lock_acquire+0x170/0x3f0 [ 408.787095] 0 [ 408.787183] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 408.792065] 0 [ 408.796851] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 408.798620] 0 [ 408.803378] ? __mutex_unlock_slowpath+0x75/0x770 [ 408.803387] ? __sanitizer_cov_trace_pc+0x23/0x50 [ 408.803400] alloc_pages_current+0x155/0x260 [ 408.803415] ion_page_pool_alloc+0x118/0x1b0 [ 408.803424] ion_system_heap_allocate+0x133/0x8c0 [ 408.803434] ? _raw_spin_unlock+0x29/0x40 [ 408.803443] ? _ion_heap_freelist_drain+0x6e/0x410 [ 408.803453] ? ion_system_contig_heap_create+0x130/0x130 [ 408.803463] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 408.803473] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 408.803483] ion_alloc+0x27a/0x810 [ 408.803496] ? ion_dma_buf_release+0x40/0x40 [ 408.803508] ? __might_fault+0x177/0x1b0 [ 408.809100] 0 [ 408.810141] ion_ioctl+0xea/0x1f0 [ 408.817368] ? ion_query_heaps+0x360/0x360 [ 408.819152] Node 0 [ 408.823996] ? ion_query_heaps+0x360/0x360 [ 408.824007] do_vfs_ioctl+0x75a/0xff0 [ 408.824018] ? ioctl_preallocate+0x1a0/0x1a0 [ 408.824027] ? lock_downgrade+0x740/0x740 [ 408.824039] ? __fget+0x225/0x360 [ 408.824047] ? do_vfs_ioctl+0xff0/0xff0 [ 408.824057] ? security_file_ioctl+0x83/0xb0 [ 408.824068] SyS_ioctl+0x7f/0xb0 [ 408.824075] ? do_vfs_ioctl+0xff0/0xff0 [ 408.824086] do_syscall_64+0x1d5/0x640 [ 408.824101] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 408.824110] RIP: 0033:0x4665f9 [ 408.824117] RSP: 002b:00007f97bed79188 EFLAGS: 00000246 [ 408.836582] DMA: [ 408.837765] ORIG_RAX: 0000000000000010 [ 408.844594] 2*4kB [ 408.846746] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 408.853640] (UE) [ 408.857098] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000005 [ 408.866199] 1*8kB [ 408.866943] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 408.870476] (U) [ 408.874962] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 408.874973] R13: 00007ffe0c744e6f R14: 00007f97bed79300 R15: 0000000000022000 [ 408.878305] Mem-Info: [ 408.879701] team0 (unregistering): Port device team_slave_0 removed [ 408.880922] active_anon:11952 inactive_anon:12822 isolated_anon:0 [ 408.880922] active_file:48 inactive_file:36 isolated_file:11 [ 408.880922] unevictable:0 dirty:0 writeback:6 unstable:0 [ 408.880922] slab_reclaimable:13218 slab_unreclaimable:115227 [ 408.880922] mapped:44008 shmem:13073 pagetables:736 bounce:0 [ 408.880922] free:14013 free_pcp:0 free_cma:0 [ 408.910310] 49*16kB [ 408.916125] Node 0 active_anon:46672kB inactive_anon:43156kB active_file:92kB inactive_file:96kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:175992kB dirty:0kB writeback:8kB shmem:44096kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 408.919614] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 408.923186] Node 1 active_anon:1136kB inactive_anon:8132kB active_file:100kB inactive_file:48kB unevictable:0kB isolated(anon):0kB isolated(file):44kB mapped:40kB dirty:0kB writeback:16kB shmem:8196kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 408.923192] Node 0 DMA free:10976kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 408.923212] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 408.931096] (UE) 30*32kB (UE) 18*64kB (UE) [ 408.936331] Node 0 [ 408.939477] 3*128kB [ 408.944881] DMA32 free:18040kB min:36200kB low:45248kB high:54296kB active_anon:46672kB inactive_anon:43156kB active_file:52kB inactive_file:44kB unevictable:0kB writepending:8kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7520kB pagetables:2760kB bounce:0kB free_pcp:120kB local_pcp:0kB free_cma:0kB [ 408.944884] lowmem_reserve[]: 0 0 0 0 0 [ 408.944939] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 408.944961] lowmem_reserve[]: [ 408.952765] (UE) [ 408.953194] 0 [ 408.960481] 2*256kB [ 408.962664] 0 0 0 0 [ 408.962680] Node 1 Normal free:26808kB min:53696kB low:67120kB high:80544kB active_anon:1136kB inactive_anon:8132kB active_file:8kB inactive_file:0kB unevictable:0kB writepending:4kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:224kB pagetables:184kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 408.962702] lowmem_reserve[]: 0 0 0 0 0 [ 408.962720] Node 0 DMA: 2*4kB (UE) 1*8kB (U) 49*16kB [ 408.970065] (UE) [ 408.972232] (UE) [ 408.979715] 2*512kB [ 408.981816] 30*32kB (UE) 18*64kB (UE) 3*128kB (UE) 2*256kB (UE) 2*512kB (UE) 2*1024kB (UE) 2*2048kB (ME) 0*4096kB = 10976kB [ 408.993396] (UE) [ 408.999075] Node 0 [ 409.009452] 2*1024kB [ 409.041980] DMA32: [ 409.075096] (UE) [ 409.079689] 1598*4kB [ 409.206673] 2*2048kB [ 409.209919] (ME) [ 409.226084] syz-executor.4: [ 409.248630] 597*8kB (ME) 131*16kB (UME) 147*32kB (UE) 2*64kB (U) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18096kB [ 409.248683] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 409.267595] (ME) [ 409.278923] Node 1 Normal: 45*4kB (UM) 85*8kB (UME) 71*16kB (UME) 40*32kB (UME) 26*64kB (UME) 8*128kB (UME) 5*256kB (M) 34*512kB (UM) 2*1024kB (M) 0*2048kB 0*4096kB = 26700kB [ 409.279012] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 409.279022] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 409.295727] 0*4096kB [ 409.297757] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 409.300857] = 10976kB [ 409.312349] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 409.312356] 13101 total pagecache pages [ 409.312366] 0 pages in swap cache [ 409.312371] Swap cache stats: add 0, delete 0, find 0/0 [ 409.312374] Free swap = 0kB [ 409.312378] Total swap = 0kB [ 409.312385] 2097051 pages RAM [ 409.312388] 0 pages HighMem/MovableOnly [ 409.312392] 363849 pages reserved [ 409.312395] 0 pages cma reserved [ 409.365664] page allocation failure: order:0 [ 409.377359] Node 0 [ 409.386820] syz-executor.5: [ 409.399062] DMA32: [ 409.402706] page allocation failure: order:0 [ 409.405733] 1598*4kB [ 409.406696] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 409.410756] (ME) [ 409.422663] (null) [ 409.430773] 597*8kB [ 409.440437] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 409.458145] (ME) 131*16kB [ 409.458701] syz-executor.4 cpuset=/ [ 409.464054] (UME) [ 409.467220] syz-executor.5 cpuset= [ 409.467700] 147*32kB [ 409.469852] / [ 409.476741] mems_allowed=0-1 [ 409.484121] (UE) 2*64kB (U) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18096kB [ 409.487861] CPU: 0 PID: 16303 Comm: syz-executor.4 Not tainted 4.14.232-syzkaller #0 [ 409.499048] Node 0 [ 409.501166] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 409.501171] Call Trace: [ 409.501195] dump_stack+0x1b2/0x281 [ 409.501208] warn_alloc.cold+0x96/0x1cc [ 409.501220] ? zone_watermark_ok_safe+0x220/0x220 [ 409.501229] ? usleep_range+0x130/0x130 [ 409.501238] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 409.501249] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 409.501259] ? run_timer_softirq+0x5a0/0x5a0 [ 409.501276] __alloc_pages_nodemask+0x2127/0x2720 [ 409.501292] ? lock_acquire+0x170/0x3f0 [ 409.501306] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 409.507700] Normal: [ 409.512894] ? ion_page_pool_alloc+0x9e/0x1b0 [ 409.512910] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 409.512925] ? alloc_pages_current+0x16/0x260 [ 409.512935] alloc_pages_current+0x155/0x260 [ 409.512947] ion_page_pool_alloc+0x118/0x1b0 [ 409.512956] ion_system_heap_allocate+0x133/0x8c0 [ 409.512966] ? ion_alloc+0x187/0x810 [ 409.512977] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 409.512985] ? ion_system_contig_heap_create+0x130/0x130 [ 409.512995] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 409.513005] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 409.513016] ion_alloc+0x204/0x810 [ 409.526389] 0*4kB [ 409.528032] ? ion_dma_buf_release+0x40/0x40 [ 409.534285] 0*8kB [ 409.537099] ? __might_fault+0x177/0x1b0 [ 409.553515] 0*16kB [ 409.555435] ion_ioctl+0xea/0x1f0 [ 409.560408] 0*32kB [ 409.562733] ? ion_query_heaps+0x360/0x360 [ 409.562745] ? ion_query_heaps+0x360/0x360 [ 409.562756] do_vfs_ioctl+0x75a/0xff0 [ 409.562767] ? ioctl_preallocate+0x1a0/0x1a0 [ 409.562776] ? lock_downgrade+0x740/0x740 [ 409.562788] ? __fget+0x225/0x360 [ 409.562796] ? do_vfs_ioctl+0xff0/0xff0 [ 409.562807] ? security_file_ioctl+0x83/0xb0 [ 409.562818] SyS_ioctl+0x7f/0xb0 [ 409.562825] ? do_vfs_ioctl+0xff0/0xff0 [ 409.562836] do_syscall_64+0x1d5/0x640 [ 409.562851] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 409.577474] 0*64kB [ 409.581670] RIP: 0033:0x4665f9 [ 409.581676] RSP: 002b:00007f9108899188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 409.581685] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 409.581690] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000006 [ 409.581694] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 409.581699] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 409.581704] R13: 00007fffb2c94dcf R14: 00007f9108899300 R15: 0000000000022000 [ 409.589730] mems_allowed=0-1 [ 409.600453] 0*128kB [ 409.608494] CPU: 0 PID: 16297 Comm: syz-executor.5 Not tainted 4.14.232-syzkaller #0 [ 409.625373] 0*256kB [ 409.625753] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 409.627891] 0*512kB [ 409.631933] Call Trace: [ 409.631957] dump_stack+0x1b2/0x281 [ 409.631970] warn_alloc.cold+0x96/0x1cc [ 409.631982] ? zone_watermark_ok_safe+0x220/0x220 [ 409.631991] ? usleep_range+0x130/0x130 [ 409.632000] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 409.632012] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 409.632022] ? run_timer_softirq+0x5a0/0x5a0 [ 409.632038] __alloc_pages_nodemask+0x2127/0x2720 [ 409.632054] ? lock_acquire+0x170/0x3f0 [ 409.632069] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 409.632078] ? ion_page_pool_alloc+0x9e/0x1b0 [ 409.632094] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 409.632106] ? __sanitizer_cov_trace_pc+0x23/0x50 [ 409.648685] 0*1024kB [ 409.652242] alloc_pages_current+0x155/0x260 [ 409.652257] ion_page_pool_alloc+0x118/0x1b0 [ 409.652266] ion_system_heap_allocate+0x133/0x8c0 [ 409.652279] ? _raw_spin_unlock+0x29/0x40 [ 409.652287] ? _ion_heap_freelist_drain+0x6e/0x410 [ 409.652296] ? ion_system_contig_heap_create+0x130/0x130 [ 409.652307] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 409.652317] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 409.652327] ion_alloc+0x27a/0x810 [ 409.652338] ? ion_dma_buf_release+0x40/0x40 [ 409.652350] ? __might_fault+0x177/0x1b0 [ 409.652364] ion_ioctl+0xea/0x1f0 [ 409.670774] 0*2048kB [ 409.672847] ? ion_query_heaps+0x360/0x360 [ 409.672859] ? ion_query_heaps+0x360/0x360 [ 409.672870] do_vfs_ioctl+0x75a/0xff0 [ 409.672881] ? ioctl_preallocate+0x1a0/0x1a0 [ 409.672891] ? lock_downgrade+0x740/0x740 [ 409.672903] ? __fget+0x225/0x360 [ 409.672912] ? do_vfs_ioctl+0xff0/0xff0 [ 409.672926] ? security_file_ioctl+0x83/0xb0 [ 409.679012] 0*4096kB [ 409.680260] SyS_ioctl+0x7f/0xb0 [ 409.698559] = 0kB [ 409.702438] ? do_vfs_ioctl+0xff0/0xff0 [ 409.702453] do_syscall_64+0x1d5/0x640 [ 409.702467] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 409.702476] RIP: 0033:0x4665f9 [ 409.702480] RSP: 002b:00007f97bed79188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 409.702489] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 409.702494] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000005 [ 409.702499] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 409.702504] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 409.702509] R13: 00007ffe0c744e6f R14: 00007f97bed79300 R15: 0000000000022000 [ 409.991029] warn_alloc_show_mem: 1 callbacks suppressed [ 409.991034] Mem-Info: 11:46:05 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendto(r0, &(0x7f0000000380)="f6a073b72742b506f3a504992931b4", 0xf, 0x8000, 0x0, 0x0) 11:46:05 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x10001, 0x400) syz_open_dev$vcsn(&(0x7f0000000140), 0x7, 0x24c042) ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r0, 0x7a9, &(0x7f0000000040)={{@my=0x0, 0x7f}, 0x40, 0x3, 0x0, 0x6, 0xf1, 0x5, 0x39, 0x3}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(0xffffffffffffffff, 0x7a8, &(0x7f0000000080)={{@host, 0x20000}, @hyper, 0x4, 0x9, 0x0, 0x5, 0x6, 0xd350}) socketpair(0x6, 0x80000, 0x10001, &(0x7f0000000180)) r1 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0), 0x20000, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000100)={0x80000001, 0x27}) 11:46:05 executing program 3: r0 = openat$ion(0xffffffffffffff9c, 0x0, 0x20000, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000100)={0x80000001, 0x27}) [ 410.042890] active_anon:11942 inactive_anon:12823 isolated_anon:0 [ 410.042890] active_file:157 inactive_file:2683 isolated_file:0 [ 410.042890] unevictable:0 dirty:2 writeback:0 unstable:0 [ 410.042890] slab_reclaimable:13212 slab_unreclaimable:115145 [ 410.042890] mapped:45824 shmem:13073 pagetables:735 bounce:0 [ 410.042890] free:208312 free_pcp:209 free_cma:0 11:46:05 executing program 3: r0 = openat$ion(0xffffffffffffff9c, 0x0, 0x20000, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000100)={0x80000001, 0x27}) 11:46:05 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendto(r0, &(0x7f0000000380)="f6a073b72742b506f3a504992931b451", 0x10, 0x0, 0x0, 0x0) 11:46:05 executing program 3: r0 = openat$ion(0xffffffffffffff9c, 0x0, 0x20000, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000100)={0x80000001, 0x27}) [ 410.214740] Node 0 active_anon:46660kB inactive_anon:43156kB active_file:2712kB inactive_file:18928kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:188372kB dirty:104kB writeback:0kB shmem:44092kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes 11:46:05 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0), 0x20000, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000100)={0x80000001, 0x27}) [ 410.315958] Node 1 active_anon:1008kB inactive_anon:8136kB active_file:516kB inactive_file:704kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:1024kB dirty:4kB writeback:0kB shmem:8200kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no 11:46:05 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000100)={0x80000001, 0x27}) [ 410.364815] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 410.399107] Node 0 DMA free:11168kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 410.480966] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 410.486163] Node 0 DMA32 free:138756kB min:36200kB low:45248kB high:54296kB active_anon:46460kB inactive_anon:43156kB active_file:4812kB inactive_file:19836kB unevictable:0kB writepending:152kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7680kB pagetables:2952kB bounce:0kB free_pcp:1228kB local_pcp:540kB free_cma:0kB [ 410.507645] bond0 (unregistering): Released all slaves [ 410.554464] Node 1 Normal: 1*4kB (U) 56*8kB (UE) 29*16kB (UE) 23*32kB (UME) 4752*64kB (UME) 1801*128kB (UME) 611*256kB (UM) 215*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 802804kB [ 410.576356] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 410.585506] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 410.610980] lowmem_reserve[]: 0 0 0 0 0 [ 410.615023] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 410.621022] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 410.710897] lowmem_reserve[]: 0 0 0 0 0 [ 410.714188] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 410.714936] Node 1 [ 410.750147] 19501 total pagecache pages [ 410.750902] Normal free:414284kB min:53696kB low:67120kB high:80544kB active_anon:908kB inactive_anon:8136kB active_file:716kB inactive_file:604kB unevictable:0kB writepending:4kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:192kB pagetables:136kB bounce:0kB free_pcp:544kB local_pcp:220kB free_cma:0kB [ 410.762326] 0 pages in swap cache [ 410.850391] Swap cache stats: add 0, delete 0, find 0/0 [ 410.850875] lowmem_reserve[]: 0 0 0 0 0 [ 410.859807] Node 0 DMA: 1*4kB (E) 14*8kB (U) 46*16kB (UE) 29*32kB (UE) 18*64kB (UE) 4*128kB (UE) 2*256kB (UE) 2*512kB (UE) 2*1024kB (UE) 2*2048kB (ME) 0*4096kB = 11124kB [ 410.876469] Free swap = 0kB [ 410.886315] Total swap = 0kB [ 410.899755] 2097051 pages RAM [ 410.909798] 0 pages HighMem/MovableOnly [ 410.917795] Node 0 DMA32: 944*4kB (ME) 413*8kB (UME) 171*16kB (UME) 21*32kB (UME) 2*64kB (UE) 1*128kB (E) 11*256kB (UME) 61*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 44792kB [ 410.928147] 363849 pages reserved [ 410.958112] 0 pages cma reserved [ 410.974068] Out of memory (oom_kill_allocating_task): Kill process 16321 (in:imklog) score 0 or sacrifice child [ 410.974102] syz-executor.3: [ 410.990641] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 411.014575] page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 411.017787] Killed process 16319 (rsyslogd) total-vm:254332kB, anon-rss:408kB, file-rss:0kB, shmem-rss:0kB [ 411.036020] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 411.045703] Node 1 Normal: 55*4kB (UM) 48*8kB (UME) 26*16kB (UME) 14*32kB (UME) 20*64kB (UME) 7*128kB (UME) 5*256kB (M) 95*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 53564kB [ 411.086969] oom_reaper: reaped process 16319 (rsyslogd), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 411.102374] CPU: 0 PID: 16344 Comm: syz-executor.3 Not tainted 4.14.232-syzkaller #0 [ 411.110277] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 411.119722] Call Trace: [ 411.122345] dump_stack+0x1b2/0x281 [ 411.125992] warn_alloc.cold+0x96/0x1cc [ 411.129968] ? zone_watermark_ok_safe+0x220/0x220 [ 411.134827] __alloc_pages_nodemask+0x2127/0x2720 [ 411.139702] ? __schedule+0x893/0x1de0 [ 411.143599] ? lock_acquire+0x170/0x3f0 [ 411.147585] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 411.152457] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 411.157951] ? __mutex_unlock_slowpath+0x75/0x770 [ 411.162812] alloc_pages_current+0x155/0x260 [ 411.167242] ion_page_pool_alloc+0x118/0x1b0 [ 411.171664] ion_system_heap_allocate+0x133/0x8c0 [ 411.176525] ? ion_alloc+0x187/0x810 [ 411.180248] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 411.185979] ? ion_system_contig_heap_create+0x130/0x130 [ 411.191450] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 411.196583] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 411.201449] ion_alloc+0x204/0x810 [ 411.204987] ? ion_dma_buf_release+0x40/0x40 [ 411.209390] ? __might_fault+0x177/0x1b0 [ 411.213446] ion_ioctl+0xea/0x1f0 [ 411.216907] ? ion_query_heaps+0x360/0x360 [ 411.221500] ? ion_query_heaps+0x360/0x360 [ 411.225728] do_vfs_ioctl+0x75a/0xff0 [ 411.229528] ? ioctl_preallocate+0x1a0/0x1a0 [ 411.233938] ? lock_downgrade+0x740/0x740 [ 411.238105] ? __fget+0x225/0x360 [ 411.241588] ? do_vfs_ioctl+0xff0/0xff0 [ 411.246255] ? security_file_ioctl+0x83/0xb0 [ 411.250662] SyS_ioctl+0x7f/0xb0 [ 411.254041] ? do_vfs_ioctl+0xff0/0xff0 [ 411.258103] do_syscall_64+0x1d5/0x640 [ 411.262009] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 411.267210] RIP: 0033:0x4665f9 [ 411.270392] RSP: 002b:00007f7215804188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 411.278097] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 411.285380] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000003 [ 411.292647] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 411.300364] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 411.307718] R13: 00007ffdb21b4b4f R14: 00007f7215804300 R15: 0000000000022000 [ 411.346876] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 411.390488] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 411.410957] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 411.440257] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 411.453024] 13657 total pagecache pages [ 411.457026] 0 pages in swap cache [ 411.460483] Swap cache stats: add 0, delete 0, find 0/0 [ 411.462541] syz-executor.0: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 411.503179] Free swap = 0kB [ 411.506884] Total swap = 0kB [ 411.509914] 2097051 pages RAM [ 411.524946] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 411.527152] 0 pages HighMem/MovableOnly [ 411.543186] 363849 pages reserved [ 411.546677] 0 pages cma reserved [ 411.551927] CPU: 1 PID: 16342 Comm: syz-executor.0 Not tainted 4.14.232-syzkaller #0 [ 411.559940] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 411.569381] Call Trace: [ 411.572011] dump_stack+0x1b2/0x281 [ 411.575636] warn_alloc.cold+0x96/0x1cc [ 411.579608] ? zone_watermark_ok_safe+0x220/0x220 [ 411.584472] __alloc_pages_nodemask+0x2127/0x2720 [ 411.589351] ? lock_acquire+0x170/0x3f0 [ 411.593334] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 411.598188] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 411.603644] ? __mutex_unlock_slowpath+0x75/0x770 [ 411.608484] ? retint_kernel+0x2d/0x2d [ 411.612380] alloc_pages_current+0x155/0x260 [ 411.617146] ion_page_pool_alloc+0x118/0x1b0 [ 411.621699] ion_system_heap_allocate+0x133/0x8c0 [ 411.626549] ? ion_alloc+0x187/0x810 [ 411.630276] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 411.636005] ? ion_system_contig_heap_create+0x130/0x130 [ 411.641455] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 411.646477] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 411.651327] ion_alloc+0x204/0x810 [ 411.654881] ? ion_dma_buf_release+0x40/0x40 [ 411.659291] ? __might_fault+0x177/0x1b0 [ 411.663352] ion_ioctl+0xea/0x1f0 [ 411.666802] ? ion_query_heaps+0x360/0x360 [ 411.671045] ? ion_query_heaps+0x360/0x360 [ 411.675371] do_vfs_ioctl+0x75a/0xff0 [ 411.679274] ? ioctl_preallocate+0x1a0/0x1a0 [ 411.683680] ? lock_downgrade+0x740/0x740 [ 411.687829] ? __fget+0x225/0x360 [ 411.691289] ? do_vfs_ioctl+0xff0/0xff0 [ 411.695263] ? security_file_ioctl+0x83/0xb0 [ 411.699675] SyS_ioctl+0x7f/0xb0 [ 411.703043] ? do_vfs_ioctl+0xff0/0xff0 [ 411.707031] do_syscall_64+0x1d5/0x640 [ 411.711036] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 411.716251] RIP: 0033:0x4665f9 [ 411.719440] RSP: 002b:00007f78e5f89188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 411.727169] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 411.734709] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000003 [ 411.742242] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 411.750994] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 411.758270] R13: 00007ffd4957c29f R14: 00007f78e5f89300 R15: 0000000000022000 [ 411.821439] Mem-Info: [ 411.824498] active_anon:11718 inactive_anon:12822 isolated_anon:0 [ 411.824498] active_file:152 inactive_file:183 isolated_file:5 [ 411.824498] unevictable:0 dirty:3 writeback:4 unstable:0 [ 411.824498] slab_reclaimable:13212 slab_unreclaimable:116106 [ 411.824498] mapped:44314 shmem:13072 pagetables:767 bounce:0 [ 411.824498] free:92391 free_pcp:91 free_cma:0 [ 411.872803] Node 0 active_anon:46016kB inactive_anon:43148kB active_file:532kB inactive_file:764kB unevictable:0kB isolated(anon):0kB isolated(file):20kB mapped:177212kB dirty:0kB writeback:16kB shmem:44084kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 411.952830] Node 1 active_anon:856kB inactive_anon:8140kB active_file:76kB inactive_file:68kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:44kB dirty:12kB writeback:0kB shmem:8204kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 412.031357] Node 0 DMA free:11068kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 412.067570] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 412.091279] Node 0 DMA32 free:202688kB min:36200kB low:45248kB high:54296kB active_anon:46160kB inactive_anon:43148kB active_file:904kB inactive_file:2820kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7520kB pagetables:2792kB bounce:0kB free_pcp:1344kB local_pcp:724kB free_cma:0kB [ 412.122363] lowmem_reserve[]: 0 0 0 0 0 [ 412.153563] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 412.181426] lowmem_reserve[]: 0 0 0 0 0 [ 412.213193] Node 1 Normal free:336512kB min:53696kB low:67120kB high:80544kB active_anon:784kB inactive_anon:8140kB active_file:20kB inactive_file:8kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:96kB pagetables:116kB bounce:0kB free_pcp:1276kB local_pcp:628kB free_cma:0kB [ 412.251365] lowmem_reserve[]: 0 0 0 0 0 [ 412.265489] Node 0 DMA: 1*4kB (E) 7*8kB (U) 46*16kB (UE) 29*32kB (UE) 18*64kB (UE) 4*128kB (UE) 2*256kB (UE) 2*512kB (UE) 2*1024kB (UE) 2*2048kB (ME) 0*4096kB = 11068kB [ 412.304780] systemd-cgroups (16346) used greatest stack depth: 24752 bytes left [ 412.312811] Node 0 DMA32: 5460*4kB (UME) 3608*8kB (UME) 1768*16kB (UME) 1078*32kB (UME) 2338*64kB (UME) 369*128kB (UME) 77*256kB (UME) 30*512kB (UM) 4*1024kB (M) 0*2048kB 0*4096kB = 349520kB [ 412.341328] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 412.355325] Node 1 Normal: 1110*4kB (UM) 526*8kB (UME) 397*16kB (UME) 382*32kB (UME) 2879*64kB (UME) 363*128kB (UME) 102*256kB (UM) 117*512kB (UM) 1*1024kB (M) 0*2048kB 0*4096kB = 344984kB [ 412.376274] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 412.424368] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 412.483066] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 412.499543] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 412.510504] 14523 total pagecache pages [ 412.514575] 0 pages in swap cache [ 412.520767] Swap cache stats: add 0, delete 0, find 0/0 [ 412.544537] Free swap = 0kB [ 412.547613] Total swap = 0kB [ 412.551171] 2097051 pages RAM [ 412.570750] 0 pages HighMem/MovableOnly [ 412.574765] 363849 pages reserved [ 412.578224] 0 pages cma reserved 11:46:08 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x10001, 0x400) syz_open_dev$vcsn(&(0x7f0000000140), 0x7, 0x24c042) ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r0, 0x7a9, &(0x7f0000000040)={{@my=0x0, 0x7f}, 0x40, 0x3, 0x0, 0x6, 0xf1, 0x5, 0x39, 0x3}) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000100)={0x80000001, 0x27}) [ 413.669661] oom_reaper: reaped process 16344 (syz-executor.3), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 413.713474] syz-executor.3 invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 413.736851] syz-executor.4: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 413.764398] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 413.777827] CPU: 0 PID: 16303 Comm: syz-executor.4 Not tainted 4.14.232-syzkaller #0 [ 413.785749] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 413.795114] Call Trace: [ 413.797711] dump_stack+0x1b2/0x281 [ 413.801352] warn_alloc.cold+0x96/0x1cc [ 413.805454] ? zone_watermark_ok_safe+0x220/0x220 [ 413.810311] __alloc_pages_nodemask+0x2127/0x2720 [ 413.810619] syz-executor.0: [ 413.815176] ? _raw_spin_unlock_irq+0x24/0x80 [ 413.815185] page allocation failure: order:0 [ 413.818281] ? lock_acquire+0x170/0x3f0 [ 413.831251] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 413.836149] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 413.838799] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 413.841622] ? __mutex_unlock_slowpath+0x75/0x770 [ 413.841637] alloc_pages_current+0x155/0x260 [ 413.841651] ion_page_pool_alloc+0x118/0x1b0 [ 413.841660] ion_system_heap_allocate+0x133/0x8c0 [ 413.841671] ? _raw_spin_unlock+0x29/0x40 [ 413.841679] ? _ion_heap_freelist_drain+0x6e/0x410 [ 413.841688] ? ion_system_contig_heap_create+0x130/0x130 [ 413.841698] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 413.841711] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 413.856626] (null) [ 413.858100] ion_alloc+0x27a/0x810 [ 413.874890] syz-executor.0 cpuset= [ 413.876393] ? ion_dma_buf_release+0x40/0x40 [ 413.881947] syz-executor.3: [ 413.886926] ? __might_fault+0x177/0x1b0 [ 413.898385] syz-executor.3 cpuset= [ 413.900962] ion_ioctl+0xea/0x1f0 [ 413.900973] ? ion_query_heaps+0x360/0x360 [ 413.900984] ? ion_query_heaps+0x360/0x360 [ 413.900995] do_vfs_ioctl+0x75a/0xff0 [ 413.901009] ? ioctl_preallocate+0x1a0/0x1a0 [ 413.905409] / [ 413.908430] ? lock_downgrade+0x740/0x740 [ 413.918748] page allocation failure: order:0 [ 413.919442] ? __fget+0x225/0x360 [ 413.923740] / [ 413.927904] ? do_vfs_ioctl+0xff0/0xff0 [ 413.938008] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 413.941964] ? security_file_ioctl+0x83/0xb0 [ 413.941975] SyS_ioctl+0x7f/0xb0 [ 413.941984] ? do_vfs_ioctl+0xff0/0xff0 [ 413.941995] do_syscall_64+0x1d5/0x640 [ 413.942009] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 413.942016] RIP: 0033:0x4665f9 [ 413.942021] RSP: 002b:00007f9108899188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 413.946695] (null) [ 413.950163] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 413.958397] mems_allowed=0-1 [ 413.962942] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000006 [ 413.962948] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 413.962953] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 413.962957] R13: 00007fffb2c94dcf R14: 00007f9108899300 R15: 0000000000022000 [ 413.977527] warn_alloc_show_mem: 1 callbacks suppressed [ 413.977531] Mem-Info: [ 413.984369] mems_allowed=0-1 [ 413.991726] active_anon:11979 inactive_anon:12822 isolated_anon:0 [ 413.991726] active_file:36 inactive_file:18 isolated_file:0 [ 413.991726] unevictable:0 dirty:40 writeback:0 unstable:0 [ 413.991726] slab_reclaimable:13258 slab_unreclaimable:115837 [ 413.991726] mapped:52765 shmem:13072 pagetables:758 bounce:0 [ 413.991726] free:13854 free_pcp:0 free_cma:0 [ 413.996040] CPU: 1 PID: 16342 Comm: syz-executor.0 Not tainted 4.14.232-syzkaller #0 [ 413.997221] Node 0 active_anon:46332kB inactive_anon:43148kB active_file:56kB inactive_file:116kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:210944kB dirty:56kB writeback:0kB shmem:44084kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 414.004501] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 414.004506] Call Trace: [ 414.004528] dump_stack+0x1b2/0x281 [ 414.004541] warn_alloc.cold+0x96/0x1cc [ 414.004552] ? zone_watermark_ok_safe+0x220/0x220 [ 414.004561] ? usleep_range+0x130/0x130 [ 414.004569] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 414.004581] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 414.004592] ? run_timer_softirq+0x5a0/0x5a0 [ 414.004615] __alloc_pages_nodemask+0x2127/0x2720 [ 414.004629] ? lock_acquire+0x170/0x3f0 [ 414.013428] syz-executor.3 cpuset= [ 414.015294] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 414.022595] / [ 414.029833] ? ion_page_pool_alloc+0x9e/0x1b0 [ 414.037176] Node 1 active_anon:1584kB inactive_anon:8140kB active_file:88kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:116kB dirty:104kB writeback:0kB shmem:8204kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 414.042477] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 414.042499] alloc_pages_current+0x155/0x260 [ 414.042512] ion_page_pool_alloc+0x118/0x1b0 [ 414.045081] Node 0 [ 414.048207] ion_system_heap_allocate+0x133/0x8c0 [ 414.082441] mems_allowed=0-1 [ 414.090282] ? ion_alloc+0x187/0x810 [ 414.118286] DMA free:10976kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 414.127675] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 414.127687] ? ion_system_contig_heap_create+0x130/0x130 [ 414.127696] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 414.127708] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 414.127720] ion_alloc+0x204/0x810 [ 414.140531] lowmem_reserve[]: [ 414.142699] ? ion_dma_buf_release+0x40/0x40 [ 414.146654] 0 [ 414.151759] ? __might_fault+0x177/0x1b0 [ 414.151772] ion_ioctl+0xea/0x1f0 [ 414.151782] ? ion_query_heaps+0x360/0x360 [ 414.151794] ? ion_query_heaps+0x360/0x360 [ 414.180529] 2717 [ 414.184702] do_vfs_ioctl+0x75a/0xff0 [ 414.240524] 2718 [ 414.265733] ? ioctl_preallocate+0x1a0/0x1a0 [ 414.265744] ? lock_downgrade+0x740/0x740 [ 414.265757] ? __fget+0x225/0x360 [ 414.265771] ? do_vfs_ioctl+0xff0/0xff0 [ 414.300518] 2718 [ 414.303483] ? security_file_ioctl+0x83/0xb0 [ 414.306908] 2718 [ 414.311170] SyS_ioctl+0x7f/0xb0 [ 414.311180] ? do_vfs_ioctl+0xff0/0xff0 [ 414.311191] do_syscall_64+0x1d5/0x640 [ 414.311210] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 414.332399] RIP: 0033:0x4665f9 [ 414.335834] Node 0 [ 414.339797] RSP: 002b:00007f78e5f89188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 414.350561] DMA32 free:17600kB min:36200kB low:45248kB high:54296kB active_anon:46432kB inactive_anon:43148kB active_file:8kB inactive_file:8kB unevictable:0kB writepending:56kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7584kB pagetables:2916kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 414.351646] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 414.351655] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000003 [ 414.355627] lowmem_reserve[]: [ 414.359512] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 414.380520] 0 [ 414.405993] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 414.405999] R13: 00007ffd4957c29f R14: 00007f78e5f89300 R15: 0000000000022000 [ 414.423094] CPU: 1 PID: 14586 Comm: syz-executor.3 Not tainted 4.14.232-syzkaller #0 [ 414.455591] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 414.464954] Call Trace: [ 414.467569] dump_stack+0x1b2/0x281 [ 414.471201] dump_header+0x178/0x82f [ 414.474930] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 414.480032] ? ___ratelimit+0x2cd/0x530 [ 414.480511] 0 0 [ 414.484038] oom_kill_process.cold+0x10/0xa40 [ 414.484057] out_of_memory+0xe3e/0x1190 [ 414.486024] 0 [ 414.493146] ? oom_killer_disable+0x1c0/0x1c0 [ 414.493157] ? mutex_trylock+0x152/0x1a0 [ 414.493166] __alloc_pages_nodemask+0x23e1/0x2720 [ 414.493185] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 414.510501] 0 [ 414.512393] alloc_pages_current+0x155/0x260 [ 414.519019] filemap_fault+0x11a1/0x1ad0 [ 414.527493] ext4_filemap_fault+0x84/0xb0 [ 414.531645] __do_fault+0xfa/0x380 [ 414.535200] __handle_mm_fault+0x2497/0x4620 [ 414.539624] ? vm_insert_page+0x7c0/0x7c0 [ 414.540497] Node 0 [ 414.543778] ? hrtimer_nanosleep+0x1ff/0x4b0 [ 414.543787] ? nanosleep_copyout+0x100/0x100 [ 414.546031] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 414.550441] ? mark_held_locks+0xa6/0xf0 [ 414.570509] lowmem_reserve[]: [ 414.579966] handle_mm_fault+0x455/0x9c0 [ 414.591285] __do_page_fault+0x549/0xad0 [ 414.595368] ? spurious_fault+0x640/0x640 [ 414.599518] ? do_page_fault+0x60/0x500 [ 414.600506] 0 [ 414.603500] ? page_fault+0x2f/0x50 [ 414.603502] 0 0 [ 414.605322] page_fault+0x45/0x50 [ 414.608946] 0 [ 414.610912] RIP: 646ed:0x2 [ 414.610916] RSP: 0017:00007ffdb21b4e0c EFLAGS: 00000008 [ 414.619047] CPU: 0 PID: 16344 Comm: syz-executor.3 Not tainted 4.14.232-syzkaller #0 [ 414.630321] Mem-Info: [ 414.632271] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 414.632276] Call Trace: [ 414.632295] dump_stack+0x1b2/0x281 [ 414.632308] warn_alloc.cold+0x96/0x1cc [ 414.632320] ? zone_watermark_ok_safe+0x220/0x220 [ 414.632329] ? usleep_range+0x130/0x130 [ 414.632338] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 414.632351] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 414.632361] ? run_timer_softirq+0x5a0/0x5a0 [ 414.632376] __alloc_pages_nodemask+0x2127/0x2720 [ 414.632391] ? lock_acquire+0x170/0x3f0 [ 414.632405] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 414.654982] active_anon:11995 inactive_anon:12822 isolated_anon:0 [ 414.654982] active_file:17 inactive_file:16 isolated_file:0 [ 414.654982] unevictable:0 dirty:0 writeback:0 unstable:0 [ 414.654982] slab_reclaimable:13276 slab_unreclaimable:115683 [ 414.654982] mapped:52736 shmem:13072 pagetables:784 bounce:0 [ 414.654982] free:14140 free_pcp:12 free_cma:0 [ 414.659163] ? ion_page_pool_alloc+0x9e/0x1b0 [ 414.678821] Node 0 active_anon:46320kB inactive_anon:43148kB active_file:52kB inactive_file:48kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:210944kB dirty:0kB writeback:0kB shmem:44084kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 414.682484] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 414.682497] ? retint_kernel+0x2d/0x2d [ 414.682511] alloc_pages_current+0x155/0x260 [ 414.682525] ion_page_pool_alloc+0x118/0x1b0 [ 414.682534] ion_system_heap_allocate+0x133/0x8c0 [ 414.682544] ? ion_alloc+0x187/0x810 [ 414.682554] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 414.682564] ? ion_system_contig_heap_create+0x130/0x130 [ 414.682574] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 414.682584] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 414.682594] ion_alloc+0x204/0x810 [ 414.701733] Node 1 active_anon:1660kB inactive_anon:8140kB active_file:16kB inactive_file:16kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:8204kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 414.724710] ? ion_dma_buf_release+0x40/0x40 [ 414.724723] ? __might_fault+0x177/0x1b0 [ 414.724734] ion_ioctl+0xea/0x1f0 [ 414.724742] ? ion_query_heaps+0x360/0x360 [ 414.724753] ? ion_query_heaps+0x360/0x360 [ 414.724762] do_vfs_ioctl+0x75a/0xff0 [ 414.724774] ? ioctl_preallocate+0x1a0/0x1a0 [ 414.724784] ? lock_downgrade+0x740/0x740 [ 414.724802] ? __fget+0x225/0x360 [ 414.724810] ? do_vfs_ioctl+0xff0/0xff0 [ 414.724822] ? security_file_ioctl+0x83/0xb0 [ 414.724832] SyS_ioctl+0x7f/0xb0 [ 414.724839] ? do_vfs_ioctl+0xff0/0xff0 [ 414.724850] do_syscall_64+0x1d5/0x640 [ 414.724864] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 414.745609] Node 0 [ 414.757320] RIP: 0033:0x4665f9 [ 414.757326] RSP: 002b:00007f7215804188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 414.757335] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 414.757339] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000003 [ 414.757344] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 414.757348] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 414.757353] R13: 00007ffdb21b4b4f R14: 00007f7215804300 R15: 0000000000022000 [ 414.773110] 0 [ 414.788466] DMA free:10976kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 414.812933] lowmem_reserve[]: [ 414.851209] Node 1 [ 414.868473] 0 [ 414.874645] Normal free:27320kB min:53696kB low:67120kB high:80544kB active_anon:1660kB inactive_anon:8140kB active_file:16kB inactive_file:16kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:192kB pagetables:200kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 414.897576] 2717 [ 414.906482] lowmem_reserve[]: [ 414.926837] 2718 [ 414.940719] 0 [ 414.966068] 2718 [ 414.990174] Mem-Info: [ 415.038372] 2718 [ 415.043047] 0 0 0 0 [ 415.045417] Node 0 DMA: 6*4kB (UE) 19*8kB (U) 43*16kB (UE) 28*32kB (UE) 16*64kB (UE) 4*128kB (UE) 2*256kB (UE) 2*512kB (UE) 2*1024kB (UE) 2*2048kB (ME) 0*4096kB = 10976kB [ 415.058794] Node 0 [ 415.070111] Node 0 DMA32: 1638*4kB (UME) 647*8kB (UME) 148*16kB (UME) 61*32kB (UME) 27*64kB (UM) 4*128kB (UM) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18288kB [ 415.087027] DMA32 free:18264kB min:36200kB low:45248kB high:54296kB active_anon:46320kB inactive_anon:43148kB active_file:52kB inactive_file:48kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7584kB pagetables:2936kB bounce:0kB free_pcp:72kB local_pcp:60kB free_cma:0kB [ 415.094619] active_anon:11995 inactive_anon:12822 isolated_anon:0 [ 415.094619] active_file:17 inactive_file:16 isolated_file:0 [ 415.094619] unevictable:0 dirty:0 writeback:0 unstable:0 [ 415.094619] slab_reclaimable:13276 slab_unreclaimable:115683 [ 415.094619] mapped:52736 shmem:13072 pagetables:784 bounce:0 [ 415.094619] free:14140 free_pcp:18 free_cma:0 [ 415.155914] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 415.160595] lowmem_reserve[]: [ 415.202857] Node 1 Normal: 0*4kB 3*8kB (UE) 5*16kB (UME) 3*32kB (UE) 3*64kB (UE) 2*128kB (UE) 0*256kB 22*512kB (UM) 51*1024kB (U) 0*2048kB 0*4096kB = 64136kB [ 415.222924] 0 0 0 0 0 [ 415.230327] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 415.239311] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 415.239330] lowmem_reserve[]: 0 0 0 0 0 [ 415.239349] Node 1 Normal free:65160kB min:53696kB low:67120kB high:80544kB active_anon:1760kB inactive_anon:8140kB active_file:16kB inactive_file:6916kB unevictable:0kB writepending:148kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:256kB pagetables:348kB bounce:0kB free_pcp:288kB local_pcp:76kB free_cma:0kB [ 415.239368] lowmem_reserve[]: 0 0 0 0 0 [ 415.239389] Node 0 DMA: 6*4kB (UE) 19*8kB (U) 43*16kB (UE) 28*32kB (UE) 16*64kB (UE) 4*128kB (UE) 2*256kB (UE) 2*512kB (UE) 2*1024kB (UE) 2*2048kB (ME) 0*4096kB = 10976kB [ 415.239464] Node 0 DMA32: 1451*4kB (ME) 637*8kB (ME) 147*16kB (UME) 48*32kB (UME) 404*64kB (UM) 121*128kB (UM) 58*256kB [ 415.280600] Node 0 active_anon:46320kB inactive_anon:43148kB active_file:52kB inactive_file:348kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:211044kB dirty:0kB writeback:0kB shmem:44084kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 415.362978] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 415.371697] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 415.380673] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 415.389272] 15054 total pagecache pages [ 415.393353] 0 pages in swap cache [ 415.396802] Swap cache stats: add 0, delete 0, find 0/0 [ 415.402411] Free swap = 0kB [ 415.405427] Total swap = 0kB [ 415.408442] 2097051 pages RAM [ 415.411630] 0 pages HighMem/MovableOnly [ 415.415607] 363849 pages reserved [ 415.419052] 0 pages cma reserved [ 415.440456] Node 1 active_anon:1760kB inactive_anon:8140kB active_file:1416kB inactive_file:5516kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:5400kB dirty:100kB writeback:0kB shmem:8204kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 415.520832] Node 0 DMA free:10976kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 415.570470] (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 70980kB [ 415.576330] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 415.643130] Node 1 Normal: 35*4kB (UM) 24*8kB (UME) 17*16kB (ME) 13*32kB (ME) 44*64kB (UE) 297*128kB (UE) 3*256kB (U) 21*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 53372kB [ 415.665984] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 415.681401] Node 0 DMA32 free:18092kB min:36200kB low:45248kB high:54296kB active_anon:46220kB inactive_anon:43148kB active_file:352kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7616kB pagetables:2936kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 415.709803] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 415.713371] lowmem_reserve[]: 0 0 0 0 0 [ 415.724702] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 415.727476] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 415.751400] lowmem_reserve[]: 0 0 0 0 0 [ 415.763618] Node 1 Normal free:26592kB min:53696kB low:67120kB high:80544kB active_anon:1760kB inactive_anon:8140kB active_file:964kB inactive_file:540kB unevictable:0kB writepending:148kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:192kB pagetables:200kB bounce:0kB free_pcp:32kB local_pcp:0kB free_cma:0kB [ 415.763787] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 415.792969] lowmem_reserve[]: 0 0 0 0 0 [ 415.806150] Node 0 DMA: 6*4kB (UE) 20*8kB (U) 43*16kB (UE) 28*32kB (UE) 16*64kB (UE) 4*128kB (UE) 2*256kB (UE) 2*512kB (UE) 2*1024kB (UE) 2*2048kB (ME) 0*4096kB = 10984kB [ 415.806339] syz-executor.0: [ 415.822100] Node 0 [ 415.824846] page allocation failure: order:4 [ 415.825119] DMA32: [ 415.827366] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 415.839156] 1582*4kB (UME) 640*8kB (UME) 149*16kB (UME) 19*32kB (UME) 16*64kB (UM) 2*128kB (M) 10*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18280kB [ 415.849173] syz-executor.0 cpuset= [ 415.863246] syz-executor.4: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 415.867594] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 415.879029] Node 0 [ 415.888268] / mems_allowed=0-1 [ 415.891989] Normal: 0*4kB [ 415.893774] CPU: 1 PID: 16342 Comm: syz-executor.0 Not tainted 4.14.232-syzkaller #0 [ 415.893782] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 415.896635] 0*8kB [ 415.904606] Call Trace: [ 415.904629] dump_stack+0x1b2/0x281 [ 415.904642] warn_alloc.cold+0x96/0x1cc [ 415.904654] ? zone_watermark_ok_safe+0x220/0x220 [ 415.904675] __alloc_pages_nodemask+0x2127/0x2720 [ 415.904690] ? lock_acquire+0x170/0x3f0 [ 415.904705] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 415.914486] syz-executor.4 cpuset= [ 415.916231] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 415.918794] / [ 415.922418] ? __mutex_unlock_slowpath+0x75/0x770 [ 415.926422] mems_allowed=0-1 [ 415.931238] alloc_pages_current+0x155/0x260 [ 415.931253] ion_page_pool_alloc+0x118/0x1b0 [ 415.931267] ion_system_heap_allocate+0x133/0x8c0 [ 415.936121] 0*16kB [ 415.940087] ? _raw_spin_unlock+0x29/0x40 [ 415.960359] 0*32kB [ 415.960496] ? _ion_heap_freelist_drain+0x6e/0x410 [ 415.963622] 0*64kB [ 415.968048] ? ion_system_contig_heap_create+0x130/0x130 [ 415.980350] 0*128kB [ 415.984245] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 415.986481] 0*256kB [ 415.991406] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 415.991417] ion_alloc+0x27a/0x810 [ 415.991431] ? ion_dma_buf_release+0x40/0x40 [ 415.991444] ? __might_fault+0x177/0x1b0 [ 416.010352] 0*512kB [ 416.013559] ion_ioctl+0xea/0x1f0 [ 416.017116] 0*1024kB [ 416.021522] ? ion_query_heaps+0x360/0x360 [ 416.021533] ? ion_query_heaps+0x360/0x360 [ 416.021543] do_vfs_ioctl+0x75a/0xff0 [ 416.021554] ? ioctl_preallocate+0x1a0/0x1a0 [ 416.021567] ? lock_downgrade+0x740/0x740 [ 416.040354] 0*2048kB [ 416.042206] ? __fget+0x225/0x360 [ 416.046027] 0*4096kB [ 416.050447] ? do_vfs_ioctl+0xff0/0xff0 [ 416.050460] ? security_file_ioctl+0x83/0xb0 [ 416.050469] SyS_ioctl+0x7f/0xb0 [ 416.050478] ? do_vfs_ioctl+0xff0/0xff0 [ 416.050489] do_syscall_64+0x1d5/0x640 [ 416.050505] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 416.070364] = 0kB [ 416.071292] RIP: 0033:0x4665f9 [ 416.074648] Node 1 [ 416.078629] RSP: 002b:00007f78e5f89188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 416.090347] Normal: [ 416.093094] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 416.095345] 64*4kB [ 416.103069] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000003 [ 416.103075] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 416.103079] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 416.103084] R13: 00007ffd4957c29f R14: 00007f78e5f89300 R15: 0000000000022000 [ 416.104394] 13116 total pagecache pages [ 416.105495] CPU: 0 PID: 16303 Comm: syz-executor.4 Not tainted 4.14.232-syzkaller #0 [ 416.112922] 0 pages in swap cache [ 416.115695] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 416.124040] Swap cache stats: add 0, delete 0, find 0/0 [ 416.130282] Call Trace: [ 416.130306] dump_stack+0x1b2/0x281 [ 416.130319] warn_alloc.cold+0x96/0x1cc [ 416.130330] ? zone_watermark_ok_safe+0x220/0x220 [ 416.130340] ? usleep_range+0x130/0x130 [ 416.130349] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 416.130363] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 416.137813] Free swap = 0kB [ 416.144936] ? run_timer_softirq+0x5a0/0x5a0 [ 416.144954] __alloc_pages_nodemask+0x2127/0x2720 [ 416.144971] ? lock_acquire+0x170/0x3f0 [ 416.144990] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 416.144999] ? ion_page_pool_alloc+0x9e/0x1b0 [ 416.145016] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 416.145034] alloc_pages_current+0x155/0x260 [ 416.145047] ion_page_pool_alloc+0x118/0x1b0 [ 416.150115] Total swap = 0kB [ 416.156924] ion_system_heap_allocate+0x133/0x8c0 [ 416.156937] ? _raw_spin_unlock+0x29/0x40 [ 416.156946] ? _ion_heap_freelist_drain+0x6e/0x410 [ 416.156954] ? ion_system_contig_heap_create+0x130/0x130 [ 416.156964] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 416.156984] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 416.161548] 2097051 pages RAM [ 416.169890] ion_alloc+0x27a/0x810 [ 416.175337] 0 pages HighMem/MovableOnly [ 416.177851] ? ion_dma_buf_release+0x40/0x40 [ 416.182525] 363849 pages reserved [ 416.185439] ? __might_fault+0x177/0x1b0 [ 416.190268] 0 pages cma reserved [ 416.194845] ion_ioctl+0xea/0x1f0 [ 416.199951] Out of memory (oom_kill_allocating_task): Kill process 14586 (syz-executor.3) score 0 or sacrifice child [ 416.205055] ? ion_query_heaps+0x360/0x360 [ 416.205066] ? ion_query_heaps+0x360/0x360 [ 416.205076] do_vfs_ioctl+0x75a/0xff0 [ 416.205086] ? ioctl_preallocate+0x1a0/0x1a0 [ 416.205096] ? lock_downgrade+0x740/0x740 [ 416.205108] ? __fget+0x225/0x360 [ 416.205116] ? do_vfs_ioctl+0xff0/0xff0 [ 416.205127] ? security_file_ioctl+0x83/0xb0 [ 416.205137] SyS_ioctl+0x7f/0xb0 [ 416.205144] ? do_vfs_ioctl+0xff0/0xff0 [ 416.205155] do_syscall_64+0x1d5/0x640 [ 416.205169] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 416.205179] RIP: 0033:0x4665f9 [ 416.209296] Killed process 14586 (syz-executor.3) total-vm:93120kB, anon-rss:104kB, file-rss:34324kB, shmem-rss:0kB [ 416.212580] RSP: 002b:00007f9108899188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 416.212590] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 416.212595] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000006 [ 416.212599] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 416.212604] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 416.212608] R13: 00007fffb2c94dcf R14: 00007f9108899300 R15: 0000000000022000 [ 416.220129] (UM) [ 416.230193] warn_alloc_show_mem: 1 callbacks suppressed [ 416.230197] Mem-Info: [ 416.253343] 50*8kB (ME) 36*16kB (UME) 22*32kB (ME) 27*64kB (ME) 69*128kB (UME) 7*256kB (UM) 25*512kB (UM) [ 416.261457] active_anon:12045 inactive_anon:12825 isolated_anon:0 [ 416.261457] active_file:17 inactive_file:17 isolated_file:0 [ 416.261457] unevictable:0 dirty:0 writeback:0 unstable:0 [ 416.261457] slab_reclaimable:13281 slab_unreclaimable:116708 [ 416.261457] mapped:52746 shmem:13076 pagetables:800 bounce:0 [ 416.261457] free:14101 free_pcp:9 free_cma:0 [ 416.272932] 0*1024kB 0*2048kB 0*4096kB = 27088kB [ 416.272954] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 416.272960] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 416.272966] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 416.272971] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 416.272975] 13110 total pagecache pages [ 416.272991] 0 pages in swap cache [ 416.272997] Swap cache stats: add 0, delete 0, find 0/0 [ 416.273000] Free swap = 0kB [ 416.273003] Total swap = 0kB [ 416.273009] 2097051 pages RAM [ 416.273012] 0 pages HighMem/MovableOnly [ 416.273015] 363849 pages reserved [ 416.273018] 0 pages cma reserved [ 416.563611] syz-executor.3: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 416.575927] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 416.576192] oom_reaper: reaped process 16342 (syz-executor.0), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 416.581154] CPU: 1 PID: 16344 Comm: syz-executor.3 Not tainted 4.14.232-syzkaller #0 [ 416.581161] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 416.581165] Call Trace: [ 416.581186] dump_stack+0x1b2/0x281 [ 416.581201] warn_alloc.cold+0x96/0x1cc [ 416.581213] ? zone_watermark_ok_safe+0x220/0x220 [ 416.581236] __alloc_pages_nodemask+0x2127/0x2720 [ 416.628551] ? lock_acquire+0x170/0x3f0 [ 416.632540] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 416.637399] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 416.642882] ? __mutex_unlock_slowpath+0x75/0x770 [ 416.647732] alloc_pages_current+0x155/0x260 [ 416.652516] ion_page_pool_alloc+0x118/0x1b0 [ 416.656942] ion_system_heap_allocate+0x133/0x8c0 [ 416.661817] ? _raw_spin_unlock+0x29/0x40 [ 416.665984] ? _ion_heap_freelist_drain+0x6e/0x410 [ 416.670915] ? ion_system_contig_heap_create+0x130/0x130 [ 416.676375] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 416.681400] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 416.686449] ion_alloc+0x27a/0x810 [ 416.689999] ? ion_dma_buf_release+0x40/0x40 [ 416.694415] ? __might_fault+0x177/0x1b0 [ 416.698508] ion_ioctl+0xea/0x1f0 [ 416.702415] ? ion_query_heaps+0x360/0x360 [ 416.706756] ? ion_query_heaps+0x360/0x360 [ 416.711005] do_vfs_ioctl+0x75a/0xff0 [ 416.714844] ? ioctl_preallocate+0x1a0/0x1a0 [ 416.719265] ? lock_downgrade+0x740/0x740 [ 416.723422] ? __fget+0x225/0x360 [ 416.726904] ? do_vfs_ioctl+0xff0/0xff0 [ 416.730879] ? security_file_ioctl+0x83/0xb0 [ 416.735331] SyS_ioctl+0x7f/0xb0 [ 416.738705] ? do_vfs_ioctl+0xff0/0xff0 [ 416.742688] do_syscall_64+0x1d5/0x640 [ 416.746618] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 416.751818] RIP: 0033:0x4665f9 [ 416.755088] RSP: 002b:00007f7215804188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 416.762883] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 416.770156] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000003 [ 416.777442] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 416.784711] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 416.791976] R13: 00007ffdb21b4b4f R14: 00007f7215804300 R15: 0000000000022000 [ 416.847844] Node 0 active_anon:46276kB inactive_anon:43156kB active_file:264kB inactive_file:9064kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:217484kB dirty:0kB writeback:0kB shmem:44092kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 416.893840] Node 1 active_anon:1904kB inactive_anon:8144kB active_file:4kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:8212kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 416.954930] Node 0 DMA free:10984kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 416.992168] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 416.997560] Node 0 DMA32 free:147696kB min:36200kB low:45248kB high:54296kB active_anon:46436kB inactive_anon:43156kB active_file:800kB inactive_file:12496kB unevictable:0kB writepending:92kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7584kB pagetables:2792kB bounce:0kB free_pcp:424kB local_pcp:248kB free_cma:0kB [ 417.071145] lowmem_reserve[]: 0 0 0 0 0 [ 417.075219] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 417.106591] IPVS: ftp: loaded support on port[0] = 21 [ 417.130252] lowmem_reserve[]: 0 0 0 0 0 [ 417.134347] Node 1 Normal free:64132kB min:53696kB low:67120kB high:80544kB active_anon:1844kB inactive_anon:8144kB active_file:4kB inactive_file:4kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:192kB pagetables:256kB bounce:0kB free_pcp:680kB local_pcp:620kB free_cma:0kB 11:46:12 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x10001, 0x400) syz_open_dev$vcsn(&(0x7f0000000140), 0x7, 0x24c042) ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r0, 0x7a9, &(0x7f0000000040)={{@my=0x0, 0x7f}, 0x40, 0x3, 0x0, 0x6, 0xf1, 0x5, 0x39, 0x3}) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000100)={0x80000001, 0x27}) 11:46:12 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x10001, 0x400) syz_open_dev$vcsn(&(0x7f0000000140), 0x7, 0x24c042) ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r0, 0x7a9, &(0x7f0000000040)={{@my=0x0, 0x7f}, 0x40, 0x3, 0x0, 0x6, 0xf1, 0x5, 0x39, 0x3}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(0xffffffffffffffff, 0x7a8, &(0x7f0000000080)={{@host, 0x20000}, @hyper, 0x4, 0x9, 0x0, 0x5, 0x6, 0xd350}) socketpair(0x6, 0x80000, 0x10001, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x44, 0x0, 0x400, 0x70bd25, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3023d3782c859c3d}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}]}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0), 0x20000, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000100)={0x80000001, 0x27}) 11:46:12 executing program 2: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x10001, 0x400) r1 = syz_open_dev$vcsn(&(0x7f0000000140), 0x7, 0x24c042) ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r0, 0x7a9, &(0x7f0000000040)={{@my=0x0, 0x7f}, 0x40, 0x3, 0x0, 0x6, 0xf1, 0x5, 0x39, 0x3}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(0xffffffffffffffff, 0x7a8, &(0x7f0000000080)={{@host, 0x20000}, @hyper, 0x4, 0x9, 0x0, 0x5, 0x6, 0xd350}) socketpair(0x6, 0x80000, 0x10001, &(0x7f0000000180)) ioctl$SNAPSHOT_ATOMIC_RESTORE(r1, 0x3304) r2 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0), 0x20000, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000100)={0x80000001, 0x27}) [ 417.226765] lowmem_reserve[]: 0 0 0 0 0 [ 417.233320] Bluetooth: hci2 command 0x0409 tx timeout [ 417.239881] Node 0 DMA: 6*4kB (UE) 25*8kB (U) 47*16kB (UE) 28*32kB (UE) 16*64kB (UE) 4*128kB (UE) 2*256kB (UE) 2*512kB (UE) 2*1024kB (UE) 2*2048kB (ME) 0*4096kB = 11088kB 11:46:12 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x10001, 0x400) syz_open_dev$vcsn(&(0x7f0000000140), 0x7, 0x24c042) ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r0, 0x7a9, &(0x7f0000000040)={{@my=0x0, 0x7f}, 0x40, 0x3, 0x0, 0x6, 0xf1, 0x5, 0x39, 0x3}) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000100)={0x80000001, 0x27}) [ 417.333750] Node 0 DMA32: 1103*4kB (UME) 440*8kB (UME) 130*16kB (UME) 19*32kB (UME) 305*64kB (UM) 17*128kB (U) 0*256kB 0*512kB 4*1024kB (U) 0*2048kB 0*4096kB = 36412kB [ 417.394467] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 417.447765] Node 1 Normal: 754*4kB (UM) 1193*8kB (UME) 413*16kB (UME) 300*32kB (UME) 28*64kB (ME) 59*128kB (UME) 7*256kB (UM) 25*512kB (UM) 14*1024kB (U) 0*2048kB 0*4096kB = 67040kB 11:46:12 executing program 5: syz_open_dev$vcsn(&(0x7f0000000000), 0x10001, 0x400) syz_open_dev$vcsn(&(0x7f0000000140), 0x7, 0x24c042) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0), 0x20000, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000100)={0x80000001, 0x27}) [ 417.560288] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 417.607430] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 417.649277] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 417.688980] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 417.729675] 14132 total pagecache pages [ 417.744660] 0 pages in swap cache [ 417.759614] Swap cache stats: add 0, delete 0, find 0/0 [ 417.788141] Free swap = 0kB [ 417.800083] Total swap = 0kB [ 417.813600] 2097051 pages RAM [ 417.827080] 0 pages HighMem/MovableOnly [ 417.846063] 363849 pages reserved [ 417.865420] 0 pages cma reserved [ 417.885351] chnl_net:caif_netlink_parms(): no params data found [ 418.230505] syz-executor.4: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 418.269344] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 418.287729] CPU: 1 PID: 16391 Comm: syz-executor.4 Not tainted 4.14.232-syzkaller #0 [ 418.295836] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 418.305389] Call Trace: [ 418.308091] dump_stack+0x1b2/0x281 [ 418.311758] warn_alloc.cold+0x96/0x1cc [ 418.316190] ? zone_watermark_ok_safe+0x220/0x220 [ 418.321057] __alloc_pages_nodemask+0x2127/0x2720 [ 418.325994] ? _raw_spin_unlock_irq+0x5a/0x80 [ 418.330504] ? finish_task_switch+0x178/0x610 [ 418.335005] ? finish_task_switch+0x14d/0x610 [ 418.339518] ? lock_acquire+0x170/0x3f0 [ 418.343516] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 418.348994] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 418.354845] ? __mutex_unlock_slowpath+0x75/0x770 [ 418.359721] ? alloc_pages_current+0x123/0x260 [ 418.364420] alloc_pages_current+0x155/0x260 [ 418.368841] ion_page_pool_alloc+0x118/0x1b0 [ 418.373959] ion_system_heap_allocate+0x133/0x8c0 [ 418.378817] ? ion_alloc+0x187/0x810 [ 418.382561] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 418.388017] ? ion_system_contig_heap_create+0x130/0x130 [ 418.393481] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 418.398598] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 418.403453] ion_alloc+0x204/0x810 [ 418.407115] ? ion_dma_buf_release+0x40/0x40 [ 418.411534] ? __might_fault+0x177/0x1b0 [ 418.415637] ion_ioctl+0xea/0x1f0 [ 418.419120] ? ion_query_heaps+0x360/0x360 [ 418.423365] ? retint_kernel+0x2d/0x2d [ 418.427258] ? putname+0xcd/0x110 [ 418.430732] ? ion_query_heaps+0x360/0x360 [ 418.434974] do_vfs_ioctl+0x75a/0xff0 [ 418.438787] ? ioctl_preallocate+0x1a0/0x1a0 [ 418.443222] ? lock_downgrade+0x740/0x740 [ 418.447388] ? __fget+0x225/0x360 [ 418.450852] ? do_vfs_ioctl+0xff0/0xff0 [ 418.454860] ? security_file_ioctl+0x83/0xb0 [ 418.459285] SyS_ioctl+0x7f/0xb0 [ 418.462664] ? do_vfs_ioctl+0xff0/0xff0 [ 418.466647] do_syscall_64+0x1d5/0x640 [ 418.470619] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 418.475818] RIP: 0033:0x4665f9 [ 418.479017] RSP: 002b:00007f9108899188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 418.486744] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 418.494033] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000006 [ 418.501476] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 418.508763] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 418.516058] R13: 00007fffb2c94dcf R14: 00007f9108899300 R15: 0000000000022000 [ 418.877289] systemd-journal invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 418.910617] syz-executor.5: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 418.956973] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 418.974452] CPU: 0 PID: 16404 Comm: syz-executor.5 Not tainted 4.14.232-syzkaller #0 [ 418.982378] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 418.991738] Call Trace: [ 418.994360] dump_stack+0x1b2/0x281 [ 418.997995] warn_alloc.cold+0x96/0x1cc [ 419.001976] ? zone_watermark_ok_safe+0x220/0x220 [ 419.006836] __alloc_pages_nodemask+0x2127/0x2720 [ 419.011777] ? lock_acquire+0x170/0x3f0 [ 419.015761] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 419.020625] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 419.026960] ? __mutex_unlock_slowpath+0x75/0x770 [ 419.031952] alloc_pages_current+0x155/0x260 [ 419.036403] ion_page_pool_alloc+0x118/0x1b0 [ 419.040830] ion_system_heap_allocate+0x133/0x8c0 [ 419.045684] ? ion_alloc+0x187/0x810 [ 419.049401] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 419.054860] ? ion_system_contig_heap_create+0x130/0x130 [ 419.057294] systemd-journal cpuset= [ 419.060312] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 419.060326] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 419.060338] ion_alloc+0x204/0x810 [ 419.060351] ? ion_dma_buf_release+0x40/0x40 [ 419.060363] ? __might_fault+0x177/0x1b0 [ 419.060373] ion_ioctl+0xea/0x1f0 [ 419.060382] ? ion_query_heaps+0x360/0x360 [ 419.060393] ? vm_insert_page+0x7c0/0x7c0 [ 419.060401] ? ion_query_heaps+0x360/0x360 [ 419.060412] do_vfs_ioctl+0x75a/0xff0 [ 419.069917] / [ 419.074171] ? ioctl_preallocate+0x1a0/0x1a0 [ 419.112110] ? lock_downgrade+0x740/0x740 [ 419.116287] ? __fget+0x225/0x360 [ 419.119734] ? do_vfs_ioctl+0xff0/0xff0 [ 419.123700] ? security_file_ioctl+0x83/0xb0 [ 419.128105] SyS_ioctl+0x7f/0xb0 [ 419.131465] ? do_vfs_ioctl+0xff0/0xff0 [ 419.135448] do_syscall_64+0x1d5/0x640 [ 419.139336] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 419.144537] RIP: 0033:0x4665f9 [ 419.147728] RSP: 002b:00007f97bed79188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 419.155458] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 419.162731] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000005 [ 419.169995] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 419.177348] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 419.184610] R13: 00007ffe0c744e6f R14: 00007f97bed79300 R15: 0000000000022000 [ 419.197662] mems_allowed=0-1 [ 419.229209] CPU: 1 PID: 16287 Comm: systemd-journal Not tainted 4.14.232-syzkaller #0 [ 419.237208] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 419.246571] Call Trace: [ 419.249172] dump_stack+0x1b2/0x281 [ 419.252829] dump_header+0x178/0x82f [ 419.256628] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 419.261727] ? ___ratelimit+0x2cd/0x530 [ 419.265700] oom_kill_process.cold+0x10/0xa40 [ 419.270206] out_of_memory+0xe3e/0x1190 [ 419.274182] ? oom_killer_disable+0x1c0/0x1c0 [ 419.278672] ? mutex_trylock+0x152/0x1a0 [ 419.282733] __alloc_pages_nodemask+0x23e1/0x2720 [ 419.288546] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 419.293408] alloc_pages_current+0x155/0x260 [ 419.297820] filemap_fault+0x11a1/0x1ad0 [ 419.301915] ext4_filemap_fault+0x84/0xb0 [ 419.306067] __do_fault+0xfa/0x380 [ 419.309613] __handle_mm_fault+0x2497/0x4620 [ 419.310063] warn_alloc_show_mem: 2 callbacks suppressed [ 419.310067] Mem-Info: [ 419.314026] ? vm_insert_page+0x7c0/0x7c0 [ 419.319410] active_anon:12139 inactive_anon:12825 isolated_anon:0 [ 419.319410] active_file:38 inactive_file:55 isolated_file:0 [ 419.319410] unevictable:0 dirty:0 writeback:0 unstable:0 [ 419.319410] slab_reclaimable:13278 slab_unreclaimable:118019 [ 419.319410] mapped:52844 shmem:13077 pagetables:813 bounce:0 [ 419.319410] free:57218 free_pcp:446 free_cma:0 [ 419.321799] ? __fsnotify_inode_delete+0x20/0x20 [ 419.321809] ? __fsnotify_update_child_dentry_flags.part.0+0x2e0/0x2e0 [ 419.321823] ? mark_held_locks+0xa6/0xf0 [ 419.321833] handle_mm_fault+0x455/0x9c0 [ 419.321848] __do_page_fault+0x549/0xad0 [ 419.321859] ? spurious_fault+0x640/0x640 [ 419.350070] Node 0 active_anon:46556kB inactive_anon:43156kB active_file:148kB inactive_file:216kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:211372kB dirty:0kB writeback:0kB shmem:44092kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 419.359331] ? do_page_fault+0x60/0x500 [ 419.370059] Node 1 active_anon:2000kB inactive_anon:8144kB active_file:4kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:4kB dirty:0kB writeback:0kB shmem:8216kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 419.370829] ? page_fault+0x2f/0x50 [ 419.374880] Node 0 [ 419.378955] page_fault+0x45/0x50 [ 419.400068] DMA free:11104kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 419.414877] RIP: 3f9f:0x7ffcea4245a0 [ 419.414882] RSP: 80c551e0:0000000000000000 EFLAGS: 7ffcea4217b0 [ 419.415438] Bluetooth: hci2 command 0x041b tx timeout [ 419.441436] lowmem_reserve[]: [ 419.570074] Mem-Info: [ 419.589705] 0 2717 2718 2718 2718 [ 419.593414] active_anon:12139 inactive_anon:12825 isolated_anon:0 [ 419.593414] active_file:563 inactive_file:580 isolated_file:0 [ 419.593414] unevictable:0 dirty:0 writeback:0 unstable:0 [ 419.593414] slab_reclaimable:13278 slab_unreclaimable:118097 [ 419.593414] mapped:53319 shmem:13077 pagetables:813 bounce:0 [ 419.593414] free:73272 free_pcp:270 free_cma:0 [ 419.593432] Node 0 active_anon:46556kB inactive_anon:43156kB active_file:2248kB inactive_file:2316kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:213272kB dirty:0kB writeback:0kB shmem:44092kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 419.593446] Node 1 active_anon:2000kB inactive_anon:8144kB active_file:4kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:4kB dirty:0kB writeback:0kB shmem:8216kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 419.593450] Node 0 DMA free:11104kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 419.593468] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 419.593489] Node 0 DMA32 free:164772kB min:36200kB low:45248kB high:54296kB active_anon:46556kB inactive_anon:43156kB active_file:2328kB inactive_file:2368kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7648kB pagetables:2892kB bounce:0kB free_pcp:296kB local_pcp:248kB free_cma:0kB [ 419.593507] lowmem_reserve[]: 0 0 0 0 [ 419.727128] Node 0 [ 419.769060] 0 [ 419.794876] DMA32 free:110488kB min:36200kB low:45248kB high:54296kB active_anon:46656kB inactive_anon:43156kB active_file:2428kB inactive_file:2268kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7712kB pagetables:2892kB bounce:0kB free_pcp:368kB local_pcp:68kB free_cma:0kB [ 419.801500] Node 0 [ 419.851941] bridge0: port 1(bridge_slave_0) entered blocking state [ 419.867860] bridge0: port 1(bridge_slave_0) entered disabled state [ 419.883317] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 419.913965] device bridge_slave_0 entered promiscuous mode [ 419.928004] bridge0: port 2(bridge_slave_1) entered blocking state [ 419.930618] lowmem_reserve[]: [ 419.946101] bridge0: port 2(bridge_slave_1) entered disabled state [ 419.947628] 0 [ 419.956293] device bridge_slave_1 entered promiscuous mode [ 419.971175] lowmem_reserve[]: 0 0 0 0 0 [ 419.976147] Node 1 Normal free:184324kB min:53696kB low:67120kB high:80544kB active_anon:2000kB inactive_anon:8144kB active_file:4kB inactive_file:4kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:256kB pagetables:360kB bounce:0kB free_pcp:820kB local_pcp:124kB free_cma:0kB [ 419.982699] 0 [ 420.067504] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 420.090002] 0 0 0 [ 420.094807] lowmem_reserve[]: 0 0 0 0 0 [ 420.098822] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 420.098849] lowmem_reserve[]: [ 420.132406] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 420.203637] 0 0 0 0 0 [ 420.210349] Node 0 DMA: 1*4kB (E) 4*8kB (U) 44*16kB (UE) 22*32kB (UE) 19*64kB (UE) 4*128kB (UE) 3*256kB (UE) 2*512kB (UE) 2*1024kB (UE) 2*2048kB (ME) 0*4096kB = 11108kB [ 420.212823] Node 1 [ 420.234263] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 420.253122] Normal free:131440kB min:53696kB low:67120kB high:80544kB active_anon:2000kB inactive_anon:8144kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:256kB pagetables:360kB bounce:0kB free_pcp:188kB local_pcp:120kB free_cma:0kB [ 420.273077] team0: Port device team_slave_0 added [ 420.304918] Node 0 DMA32: 1026*4kB (UME) 467*8kB (UEH) 148*16kB (ME) 83*32kB (UE) 139*64kB (UMH) 35*128kB (UMH) 68*256kB (U) 2*512kB (UH) 3*1024kB (UM) 0*2048kB 0*4096kB = 47744kB [ 420.336065] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 420.337142] lowmem_reserve[]: 0 0 0 0 0 [ 420.368120] Node 0 DMA: 2*4kB (UE) 0*8kB 46*16kB (UE) 22*32kB (UE) 19*64kB (UE) 4*128kB (UE) 3*256kB (UE) 2*512kB (UE) 2*1024kB (UE) 2*2048kB (ME) 0*4096kB = 11112kB [ 420.370217] team0: Port device team_slave_1 added [ 420.392701] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 420.420834] Node 0 DMA32: 1021*4kB (E) 422*8kB (UEH) 146*16kB (UE) 23*32kB (UE) 138*64kB (UMH) 34*128kB (UMH) 68*256kB (U) 2*512kB (UH) 3*1024kB (UM) 0*2048kB 0*4096kB = 45220kB [ 420.426167] Node 1 Normal: 90*4kB (UM) 69*8kB (UME) 44*16kB (UME) 49*32kB (UME) 609*64kB (UME) 195*128kB (UME) 45*256kB (UM) 41*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 99632kB [ 420.478879] Node 0 [ 420.503023] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 420.523937] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 420.541818] Normal: [ 420.553720] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 420.565015] 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 420.578215] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 420.589232] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 420.596894] Node 1 [ 420.610025] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 420.610163] Normal: [ 420.614078] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 420.659963] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 420.668594] 14198 total pagecache pages [ 420.673653] 87*4kB (UM) 66*8kB (UME) 42*16kB (ME) 26*32kB (UME) 31*64kB (UME) 174*128kB (UME) 56*256kB (UM) 51*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 67084kB [ 420.699973] 0 pages in swap cache [ 420.703476] Swap cache stats: add 0, delete 0, find 0/0 [ 420.708875] Free swap = 0kB [ 420.719991] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 420.754427] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 420.763236] Total swap = 0kB [ 420.766325] 2097051 pages RAM [ 420.769427] 0 pages HighMem/MovableOnly [ 420.779971] 363849 pages reserved [ 420.783480] 0 pages cma reserved [ 420.786844] Out of memory (oom_kill_allocating_task): Kill process 16287 (systemd-journal) score 0 or sacrifice child [ 420.797772] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 420.809970] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 420.833005] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 420.849977] Killed process 16287 (systemd-journal) total-vm:46096kB, anon-rss:468kB, file-rss:0kB, shmem-rss:2248kB [ 420.868539] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 420.889996] 13148 total pagecache pages [ 420.894072] 0 pages in swap cache [ 420.897531] Swap cache stats: add 0, delete 0, find 0/0 [ 420.920013] Free swap = 0kB [ 420.923093] Total swap = 0kB [ 420.926150] 2097051 pages RAM [ 420.929257] 0 pages HighMem/MovableOnly [ 420.939984] 363849 pages reserved [ 420.943469] 0 pages cma reserved [ 421.109060] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 421.218139] oom_reaper: reaped process 16404 (syz-executor.5), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 421.283631] syz-executor.1 invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 421.328428] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 421.340975] syz-executor.2: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 421.343272] CPU: 0 PID: 16354 Comm: syz-executor.1 Not tainted 4.14.232-syzkaller #0 [ 421.360695] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 421.370080] Call Trace: [ 421.372697] dump_stack+0x1b2/0x281 [ 421.376358] dump_header+0x178/0x82f [ 421.380077] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 421.385160] syz-executor.2 cpuset= [ 421.385180] ? ___ratelimit+0x2cd/0x530 [ 421.385181] / mems_allowed=0-1 [ 421.388726] oom_kill_process.cold+0x10/0xa40 [ 421.400383] out_of_memory+0xe3e/0x1190 [ 421.404369] ? oom_killer_disable+0x1c0/0x1c0 [ 421.408871] ? mutex_trylock+0x152/0x1a0 [ 421.412957] __alloc_pages_nodemask+0x23e1/0x2720 [ 421.417831] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 421.422695] alloc_pages_current+0x155/0x260 [ 421.427117] filemap_fault+0x11a1/0x1ad0 [ 421.431199] ext4_filemap_fault+0x84/0xb0 [ 421.435358] __do_fault+0xfa/0x380 [ 421.438941] __handle_mm_fault+0x2497/0x4620 [ 421.443366] ? vm_insert_page+0x7c0/0x7c0 [ 421.447519] ? mark_held_locks+0xa6/0xf0 [ 421.451586] handle_mm_fault+0x455/0x9c0 [ 421.455661] __do_page_fault+0x549/0xad0 [ 421.459736] ? spurious_fault+0x640/0x640 [ 421.463892] ? do_page_fault+0x60/0x500 [ 421.467864] ? page_fault+0x2f/0x50 [ 421.471509] page_fault+0x45/0x50 [ 421.471948] Bluetooth: hci2 command 0x040f tx timeout [ 421.475509] RIP: 4bf922:0x3 [ 421.483701] RSP: 0000:00000000004bf922 EFLAGS: 00000000 [ 421.496908] CPU: 1 PID: 16392 Comm: syz-executor.2 Not tainted 4.14.232-syzkaller #0 [ 421.510181] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 421.519561] Call Trace: [ 421.522162] dump_stack+0x1b2/0x281 [ 421.525825] warn_alloc.cold+0x96/0x1cc [ 421.529806] ? zone_watermark_ok_safe+0x220/0x220 [ 421.534670] __alloc_pages_nodemask+0x2127/0x2720 [ 421.539552] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 421.545379] ? lock_acquire+0x170/0x3f0 [ 421.549362] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 421.554223] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 421.555394] Mem-Info: [ 421.559796] ? __mutex_unlock_slowpath+0x75/0x770 [ 421.562255] active_anon:12021 inactive_anon:12824 isolated_anon:0 [ 421.562255] active_file:38 inactive_file:20 isolated_file:0 [ 421.562255] unevictable:0 dirty:0 writeback:0 unstable:0 [ 421.562255] slab_reclaimable:13284 slab_unreclaimable:117875 [ 421.562255] mapped:52275 shmem:13077 pagetables:784 bounce:0 [ 421.562255] free:13798 free_pcp:42 free_cma:0 [ 421.567062] alloc_pages_current+0x155/0x260 [ 421.600268] Node 0 active_anon:46072kB inactive_anon:43152kB active_file:48kB inactive_file:28kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:209000kB dirty:0kB writeback:0kB shmem:44092kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 421.604636] ion_page_pool_alloc+0x118/0x1b0 [ 421.632529] Node 1 active_anon:2012kB inactive_anon:8144kB active_file:104kB inactive_file:52kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:100kB dirty:0kB writeback:0kB shmem:8216kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 421.636901] ion_system_heap_allocate+0x133/0x8c0 [ 421.663847] Node 0 DMA free:10968kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:48kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 421.668686] ? ion_alloc+0x187/0x810 [ 421.668700] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 421.698963] lowmem_reserve[]: [ 421.702904] ? ion_system_contig_heap_create+0x130/0x130 [ 421.702916] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 421.702928] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 421.702940] ion_alloc+0x204/0x810 [ 421.708409] 0 [ 421.711524] ? ion_dma_buf_release+0x40/0x40 [ 421.711537] ? __might_fault+0x177/0x1b0 [ 421.711547] ion_ioctl+0xea/0x1f0 [ 421.711558] ? ion_query_heaps+0x360/0x360 [ 421.717006] 2717 [ 421.722025] ? ion_query_heaps+0x360/0x360 [ 421.722036] do_vfs_ioctl+0x75a/0xff0 [ 421.722048] ? ioctl_preallocate+0x1a0/0x1a0 [ 421.722057] ? lock_downgrade+0x740/0x740 [ 421.722070] ? __fget+0x225/0x360 [ 421.726919] 2718 [ 421.730476] ? do_vfs_ioctl+0xff0/0xff0 [ 421.730489] ? security_file_ioctl+0x83/0xb0 [ 421.730499] SyS_ioctl+0x7f/0xb0 [ 421.730507] ? do_vfs_ioctl+0xff0/0xff0 [ 421.730518] do_syscall_64+0x1d5/0x640 [ 421.730532] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 421.730540] RIP: 0033:0x4665f9 [ 421.730548] RSP: 002b:00007ff3638e3188 EFLAGS: 00000246 [ 421.732349] 2718 [ 421.736743] ORIG_RAX: 0000000000000010 [ 421.736754] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 421.740864] 2718 [ 421.744276] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000005 [ 421.748508] Node 0 [ 421.750555] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 421.750561] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 421.750566] R13: 00007ffe909c1c6f R14: 00007ff3638e3300 R15: 0000000000022000 [ 421.757766] syz-executor.3: [ 421.759110] DMA32 free:17960kB min:36200kB low:45248kB high:54296kB active_anon:46072kB inactive_anon:43152kB active_file:52kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7584kB pagetables:2776kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 421.763181] page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 421.763199] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 421.763222] CPU: 1 PID: 16344 Comm: syz-executor.3 Not tainted 4.14.232-syzkaller #0 [ 421.763228] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 421.763231] Call Trace: [ 421.763249] dump_stack+0x1b2/0x281 [ 421.763264] warn_alloc.cold+0x96/0x1cc [ 421.763277] ? zone_watermark_ok_safe+0x220/0x220 [ 421.763287] ? usleep_range+0x130/0x130 [ 421.763303] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 421.763316] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 421.767475] syz-executor.5: [ 421.770945] ? run_timer_softirq+0x5a0/0x5a0 [ 421.770963] __alloc_pages_nodemask+0x2127/0x2720 [ 421.770983] ? lock_acquire+0x170/0x3f0 [ 421.773060] syz-executor.0: [ 421.777035] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 421.788216] lowmem_reserve[]: [ 421.788968] ? ion_page_pool_alloc+0x9e/0x1b0 [ 421.792910] page allocation failure: order:0 [ 421.798176] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 421.801407] page allocation failure: order:0 [ 421.807076] alloc_pages_current+0x155/0x260 [ 421.809309] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 421.813295] ion_page_pool_alloc+0x118/0x1b0 [ 421.813305] ion_system_heap_allocate+0x133/0x8c0 [ 421.813317] ? _raw_spin_unlock+0x29/0x40 [ 421.813325] ? _ion_heap_freelist_drain+0x6e/0x410 [ 421.813336] ? ion_system_contig_heap_create+0x130/0x130 [ 421.820645] 0 [ 421.826911] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 421.834222] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 421.836397] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 421.843694] 0 [ 421.850929] ion_alloc+0x27a/0x810 [ 421.850944] ? ion_dma_buf_release+0x40/0x40 [ 421.850960] ? __might_fault+0x177/0x1b0 [ 421.859460] (null) [ 421.862466] ion_ioctl+0xea/0x1f0 [ 421.862477] ? ion_query_heaps+0x360/0x360 [ 421.862488] ? ion_query_heaps+0x360/0x360 [ 421.862498] do_vfs_ioctl+0x75a/0xff0 [ 421.862509] ? ioctl_preallocate+0x1a0/0x1a0 [ 421.862523] ? lock_downgrade+0x740/0x740 [ 421.898678] (null) [ 421.901309] ? __fget+0x225/0x360 [ 421.901319] ? do_vfs_ioctl+0xff0/0xff0 [ 421.901332] ? security_file_ioctl+0x83/0xb0 [ 421.901343] SyS_ioctl+0x7f/0xb0 [ 421.906442] syz-executor.5 cpuset= [ 421.914356] ? do_vfs_ioctl+0xff0/0xff0 [ 421.914369] do_syscall_64+0x1d5/0x640 [ 421.914384] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 421.914395] RIP: 0033:0x4665f9 [ 421.923793] 0 [ 421.926312] RSP: 002b:00007f7215804188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 421.929969] 0 [ 421.933907] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 421.938739] 0 [ 421.942709] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000003 [ 421.942714] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 421.942719] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 421.942723] R13: 00007ffdb21b4b4f R14: 00007f7215804300 R15: 0000000000022000 [ 421.950274] warn_alloc_show_mem: 1 callbacks suppressed [ 421.950278] Mem-Info: [ 421.963402] / [ 421.971482] active_anon:12021 inactive_anon:12824 isolated_anon:0 [ 421.971482] active_file:38 inactive_file:20 isolated_file:0 [ 421.971482] unevictable:0 dirty:0 writeback:0 unstable:0 [ 421.971482] slab_reclaimable:13284 slab_unreclaimable:117875 [ 421.971482] mapped:52275 shmem:13077 pagetables:784 bounce:0 [ 421.971482] free:13798 free_pcp:42 free_cma:0 [ 421.978627] syz-executor.0 cpuset= [ 421.984332] Node 0 active_anon:46072kB inactive_anon:43152kB active_file:48kB inactive_file:28kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:209000kB dirty:0kB writeback:0kB shmem:44092kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 421.988696] / [ 421.992115] Node 1 active_anon:2012kB inactive_anon:8144kB active_file:104kB inactive_file:52kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:100kB dirty:0kB writeback:0kB shmem:8216kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 422.001598] mems_allowed=0-1 [ 422.008477] Node 0 [ 422.015745] mems_allowed=0-1 [ 422.024624] DMA free:10968kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:20kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 422.027127] CPU: 0 PID: 16404 Comm: syz-executor.5 Not tainted 4.14.232-syzkaller #0 [ 422.035872] lowmem_reserve[]: [ 422.037141] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 422.046451] 0 [ 422.049229] Call Trace: [ 422.064213] 2717 [ 422.067922] dump_stack+0x1b2/0x281 [ 422.073900] 2718 [ 422.077731] warn_alloc.cold+0x96/0x1cc [ 422.106028] 2718 [ 422.108262] ? zone_watermark_ok_safe+0x220/0x220 [ 422.135907] 2718 [ 422.141171] ? usleep_range+0x130/0x130 [ 422.141181] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 422.141193] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 422.141203] ? run_timer_softirq+0x5a0/0x5a0 [ 422.141219] __alloc_pages_nodemask+0x2127/0x2720 [ 422.141244] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 422.141255] ? migrate_swap_stop+0x880/0x880 [ 422.141263] ? lock_acquire+0x170/0x3f0 [ 422.141284] alloc_pages_current+0x155/0x260 [ 422.182821] ion_page_pool_alloc+0x118/0x1b0 [ 422.182832] ion_system_heap_allocate+0x133/0x8c0 [ 422.182841] ? ion_alloc+0x187/0x810 [ 422.182852] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 422.182860] ? ion_system_contig_heap_create+0x130/0x130 [ 422.182869] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 422.182881] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 422.182891] ion_alloc+0x204/0x810 [ 422.182904] ? ion_dma_buf_release+0x40/0x40 [ 422.182916] ? __might_fault+0x177/0x1b0 [ 422.182927] ion_ioctl+0xea/0x1f0 [ 422.221054] Node 0 [ 422.225597] ? ion_query_heaps+0x360/0x360 [ 422.229148] DMA32 free:18080kB min:36200kB low:45248kB high:54296kB active_anon:46072kB inactive_anon:43152kB active_file:16kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7584kB pagetables:2776kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 422.256831] ? vm_insert_page+0x7c0/0x7c0 [ 422.256842] ? ion_query_heaps+0x360/0x360 [ 422.256851] do_vfs_ioctl+0x75a/0xff0 [ 422.256863] ? ioctl_preallocate+0x1a0/0x1a0 [ 422.256872] ? lock_downgrade+0x740/0x740 [ 422.256884] ? __fget+0x225/0x360 [ 422.256892] ? do_vfs_ioctl+0xff0/0xff0 [ 422.256903] ? security_file_ioctl+0x83/0xb0 [ 422.256914] SyS_ioctl+0x7f/0xb0 [ 422.256921] ? do_vfs_ioctl+0xff0/0xff0 [ 422.256933] do_syscall_64+0x1d5/0x640 [ 422.256948] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 422.256963] RIP: 0033:0x4665f9 [ 422.256968] RSP: 002b:00007f97bed79188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 422.256978] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 422.256983] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000005 [ 422.256988] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 422.256993] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 422.257002] R13: 00007ffe0c744e6f R14: 00007f97bed79300 R15: 0000000000022000 [ 422.349328] lowmem_reserve[]: [ 422.374239] CPU: 1 PID: 16342 Comm: syz-executor.0 Not tainted 4.14.232-syzkaller #0 [ 422.388361] Node 0 [ 422.388520] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 422.393487] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 422.397838] Call Trace: [ 422.401851] lowmem_reserve[]: [ 422.406218] dump_stack+0x1b2/0x281 [ 422.410629] 0 [ 422.415448] warn_alloc.cold+0x96/0x1cc [ 422.419151] 0 [ 422.424687] ? zone_watermark_ok_safe+0x220/0x220 [ 422.424698] ? usleep_range+0x130/0x130 [ 422.424707] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 422.424719] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 422.424730] ? run_timer_softirq+0x5a0/0x5a0 [ 422.430208] 0 [ 422.435186] __alloc_pages_nodemask+0x2127/0x2720 [ 422.440034] 0 [ 422.443535] ? lock_acquire+0x170/0x3f0 [ 422.447911] 0 [ 422.451978] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 422.451988] ? ion_page_pool_alloc+0x9e/0x1b0 [ 422.452004] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 422.452023] alloc_pages_current+0x155/0x260 [ 422.457697] ion_page_pool_alloc+0x118/0x1b0 [ 422.461951] Node 1 [ 422.490289] ion_system_heap_allocate+0x133/0x8c0 [ 422.490303] ? _raw_spin_unlock+0x29/0x40 [ 422.490311] ? _ion_heap_freelist_drain+0x6e/0x410 [ 422.490323] ? ion_system_contig_heap_create+0x130/0x130 [ 422.494500] Normal free:26140kB min:53696kB low:67120kB high:80544kB active_anon:1936kB inactive_anon:8144kB active_file:12kB inactive_file:16kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:288kB pagetables:364kB bounce:0kB free_pcp:168kB local_pcp:120kB free_cma:0kB [ 422.498735] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 422.502551] lowmem_reserve[]: [ 422.507015] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 422.511175] 0 [ 422.514613] ion_alloc+0x27a/0x810 [ 422.518559] 0 [ 422.522968] ? ion_dma_buf_release+0x40/0x40 [ 422.522981] ? __might_fault+0x177/0x1b0 [ 422.522995] ion_ioctl+0xea/0x1f0 [ 422.526347] 0 [ 422.530324] ? ion_query_heaps+0x360/0x360 [ 422.530335] ? ion_query_heaps+0x360/0x360 [ 422.530345] do_vfs_ioctl+0x75a/0xff0 [ 422.530356] ? ioctl_preallocate+0x1a0/0x1a0 [ 422.534223] 0 [ 422.539426] ? lock_downgrade+0x740/0x740 [ 422.542643] 0 [ 422.550659] ? __fget+0x225/0x360 [ 422.550670] ? do_vfs_ioctl+0xff0/0xff0 [ 422.550681] ? security_file_ioctl+0x83/0xb0 [ 422.550692] SyS_ioctl+0x7f/0xb0 [ 422.565263] ? do_vfs_ioctl+0xff0/0xff0 [ 422.565276] do_syscall_64+0x1d5/0x640 [ 422.565290] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 422.565302] RIP: 0033:0x4665f9 [ 422.572607] Node 0 [ 422.579831] RSP: 002b:00007f78e5f89188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 422.579841] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 422.579846] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000003 [ 422.579850] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 422.579855] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 422.579860] R13: 00007ffd4957c29f R14: 00007f78e5f89300 R15: 0000000000022000 [ 422.592495] 0 [ 422.608659] DMA: [ 422.620681] 0 [ 422.644833] 1*4kB [ 422.655264] 0 [ 422.660738] (E) [ 422.664608] 0 [ 422.666455] 0*8kB [ 422.683229] 0 [ 422.693559] 36*16kB [ 422.702005] (UE) [ 422.713892] Node 0 [ 422.722608] 22*32kB [ 422.734958] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 422.744127] (UE) [ 422.775287] lowmem_reserve[]: [ 422.788307] 19*64kB [ 422.796072] 0 [ 422.820318] (UE) [ 422.965858] systemd[1]: systemd-journald.service: Failed with result 'signal'. [ 422.989970] systemd[1]: systemd-journald.service: Service has no hold-off time, scheduling restart. [ 422.996322] 0 0 0 0 [ 423.013761] Node 1 Normal free:106684kB min:53696kB low:67120kB high:80544kB active_anon:1952kB inactive_anon:8144kB active_file:2360kB inactive_file:4096kB unevictable:0kB writepending:100kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:288kB pagetables:368kB bounce:0kB free_pcp:756kB local_pcp:524kB free_cma:0kB [ 423.016086] systemd[1]: Stopped Flush Journal to Persistent Storage. [ 423.086433] systemd[1]: Stopping Flush Journal to Persistent Storage... [ 423.098568] systemd[1]: Stopped Journal Service. [ 423.145354] warn_alloc_show_mem: 2 callbacks suppressed [ 423.145358] Mem-Info: [ 423.183016] systemd[1]: Starting Journal Service... [ 423.183917] lowmem_reserve[]: 0 0 0 0 0 [ 423.190055] active_anon:11951 inactive_anon:12824 isolated_anon:0 [ 423.190055] active_file:769 inactive_file:618 isolated_file:32 [ 423.190055] unevictable:0 dirty:26 writeback:0 unstable:0 [ 423.190055] slab_reclaimable:13258 slab_unreclaimable:117818 [ 423.190055] mapped:53419 shmem:13077 pagetables:823 bounce:0 [ 423.190055] free:30876 free_pcp:401 free_cma:0 [ 423.231512] Node 0 DMA: 4*4kB (UE) 0*8kB 36*16kB (UE) 22*32kB (UE) 19*64kB (UE) 4*128kB (UE) 3*256kB (UE) 2*512kB (UE) 2*1024kB (UE) 2*2048kB (ME) 0*4096kB = 10960kB [ 423.292353] Node 0 DMA32: 1698*4kB (UME) 772*8kB (UME) 197*16kB (UME) 33*32kB (UME) 8*64kB (UM) 0*128kB 0*256kB 1*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 18200kB [ 423.318216] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 423.325798] Node 0 active_anon:45952kB inactive_anon:43152kB active_file:52kB inactive_file:36kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:208900kB dirty:4kB writeback:0kB shmem:44092kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 423.335686] Node 1 Normal: 74*4kB (UM) 77*8kB (UME) 61*16kB (UME) 41*32kB (UME) 27*64kB (ME) 35*128kB (UME) 11*256kB (UM) 34*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 29632kB [ 423.361976] 4*128kB (UE) 3*256kB (UE) 2*512kB (UE) 2*1024kB (UE) 2*2048kB (ME) 0*4096kB = 10948kB [ 423.384535] Node 1 active_anon:1952kB inactive_anon:8144kB active_file:96kB inactive_file:72kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:76kB dirty:100kB writeback:0kB shmem:8216kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 423.391363] Node 0 DMA32: 1732*4kB (UME) 772*8kB (UME) 197*16kB (UME) 33*32kB (UME) 8*64kB (UM) 0*128kB 0*256kB 1*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 18336kB [ 423.422125] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 423.449217] syz-executor.5: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 423.459131] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 423.485888] Node 0 DMA free:10952kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:12kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 423.488143] Node 0 [ 423.516616] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 423.528752] CPU: 0 PID: 16404 Comm: syz-executor.5 Not tainted 4.14.232-syzkaller #0 [ 423.529420] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 423.536644] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 423.536648] Call Trace: [ 423.536670] dump_stack+0x1b2/0x281 [ 423.536683] warn_alloc.cold+0x96/0x1cc [ 423.536694] ? zone_watermark_ok_safe+0x220/0x220 [ 423.536721] __alloc_pages_nodemask+0x2127/0x2720 [ 423.536733] ? lock_acquire+0x170/0x3f0 [ 423.536746] ? lock_acquire+0x170/0x3f0 [ 423.536760] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 423.536776] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 423.536788] ? __mutex_unlock_slowpath+0x75/0x770 [ 423.536803] alloc_pages_current+0x155/0x260 [ 423.564020] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 423.565409] ion_page_pool_alloc+0x118/0x1b0 [ 423.578879] 13189 total pagecache pages [ 423.579035] ion_system_heap_allocate+0x133/0x8c0 [ 423.589142] lowmem_reserve[]: [ 423.593273] ? _raw_spin_unlock+0x29/0x40 [ 423.593284] ? _ion_heap_freelist_drain+0x6e/0x410 [ 423.593294] ? ion_system_contig_heap_create+0x130/0x130 [ 423.593304] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 423.593317] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 423.593327] ion_alloc+0x27a/0x810 [ 423.593341] ? ion_dma_buf_release+0x40/0x40 [ 423.593352] ? __might_fault+0x177/0x1b0 [ 423.593363] ion_ioctl+0xea/0x1f0 [ 423.593371] ? ion_query_heaps+0x360/0x360 [ 423.593386] ? vm_insert_page+0x7c0/0x7c0 [ 423.615921] 0 pages in swap cache [ 423.618243] ? ion_query_heaps+0x360/0x360 [ 423.628795] Swap cache stats: add 0, delete 0, find 0/0 [ 423.630170] do_vfs_ioctl+0x75a/0xff0 [ 423.630184] ? ioctl_preallocate+0x1a0/0x1a0 [ 423.630194] ? lock_downgrade+0x740/0x740 [ 423.630207] ? __fget+0x225/0x360 [ 423.630216] ? do_vfs_ioctl+0xff0/0xff0 [ 423.630228] ? security_file_ioctl+0x83/0xb0 [ 423.630238] SyS_ioctl+0x7f/0xb0 [ 423.630245] ? do_vfs_ioctl+0xff0/0xff0 [ 423.630256] do_syscall_64+0x1d5/0x640 [ 423.630272] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 423.630280] RIP: 0033:0x4665f9 [ 423.630285] RSP: 002b:00007f97bed79188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 423.630296] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 423.630301] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000005 [ 423.630306] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 423.630311] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 423.630317] R13: 00007ffe0c744e6f R14: 00007f97bed79300 R15: 0000000000022000 [ 423.641816] Normal: [ 423.656995] 0 [ 423.670009] 0*4kB [ 423.681864] Free swap = 0kB [ 423.681869] Total swap = 0kB [ 423.681876] 2097051 pages RAM [ 423.681880] 0 pages HighMem/MovableOnly [ 423.681883] 363849 pages reserved [ 423.681887] 0 pages cma reserved [ 423.704203] 2717 [ 423.723769] 0*8kB [ 423.789901] Bluetooth: hci2 command 0x0419 tx timeout [ 423.813541] 2718 2718 2718 [ 423.889760] Node 0 DMA32 free:112024kB min:36200kB low:45248kB high:54296kB active_anon:46168kB inactive_anon:43152kB active_file:320kB inactive_file:5712kB unevictable:0kB writepending:4kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7712kB pagetables:2924kB bounce:0kB free_pcp:324kB local_pcp:80kB free_cma:0kB [ 424.009694] lowmem_reserve[]: 0 0 0 0 0 [ 424.009752] 0*16kB [ 424.013739] Node 0 [ 424.013742] 0*32kB 0*64kB [ 424.015984] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 424.018199] 0*128kB [ 424.063622] lowmem_reserve[]: 0 0 0 0 0 [ 424.089679] Node 1 Normal free:722200kB min:53696kB low:67120kB high:80544kB active_anon:1996kB inactive_anon:8144kB active_file:44kB inactive_file:1108kB unevictable:0kB writepending:12kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:384kB pagetables:380kB bounce:0kB free_pcp:1356kB local_pcp:708kB free_cma:0kB [ 424.129682] lowmem_reserve[]: 0 0 0 0 0 [ 424.139691] 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 424.143911] Node 0 [ 424.145537] Node 1 [ 424.145540] DMA: 6*4kB [ 424.147780] Normal: [ 424.150408] (UE) [ 424.152719] 4689*4kB [ 424.164139] 0*8kB 36*16kB (UE) 22*32kB (UE) 22*64kB (UE) 6*128kB (UE) 3*256kB (UE) 2*512kB (UE) 2*1024kB (UE) 2*2048kB (ME) 0*4096kB = 11416kB [ 424.199673] (UM) 214*8kB (UME) 800*16kB (UME) 384*32kB (UME) 4777*64kB (UME) 1385*128kB (UME) 373*256kB (UM) 163*512kB (UM) 38*1024kB (U) 0*2048kB 0*4096kB = 746420kB [ 424.253748] Node 0 DMA32: 7369*4kB (UME) 4723*8kB (UME) 1654*16kB (UME) 418*32kB (UME) 2784*64kB (UME) 708*128kB (UME) 119*256kB (UME) 39*512kB (UM) 7*1024kB (U) 0*2048kB 0*4096kB = 433500kB [ 424.259679] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 424.309739] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 424.313485] Node 0 [ 424.318956] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 424.318965] Normal: [ 424.321249] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 424.350255] 14962 total pagecache pages [ 424.353509] 0*4kB 0*8kB [ 424.354248] 0 pages in swap cache [ 424.354250] 0*16kB 0*32kB [ 424.356924] Swap cache stats: add 0, delete 0, find 0/0 [ 424.360935] 0*64kB [ 424.379681] Free swap = 0kB [ 424.384014] 0*128kB [ 424.384973] Total swap = 0kB [ 424.384981] 0*256kB [ 424.387283] 2097051 pages RAM [ 424.390666] 0*512kB [ 424.392736] 0 pages HighMem/MovableOnly [ 424.403832] 0*1024kB 0*2048kB 0*4096kB = 0kB [ 424.408363] Node 1 Normal: 6321*4kB (UM) 1264*8kB (UME) 1235*16kB (UME) 683*32kB (UME) 5085*64kB (UME) 1498*128kB (UME) 424*256kB (UM) 168*512kB (UM) 39*1024kB (U) 1*2048kB (U) 0*4096kB = 830740kB [ 424.429655] 363849 pages reserved [ 424.439685] 0 pages cma reserved [ 424.443098] Out of memory (oom_kill_allocating_task): Kill process 16354 (syz-executor.1) score 0 or sacrifice child [ 424.454031] Killed process 16354 (syz-executor.1) total-vm:93120kB, anon-rss:88kB, file-rss:33932kB, shmem-rss:0kB [ 424.454303] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 424.517729] oom_reaper: reaped process 16354 (syz-executor.1), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 424.541957] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 424.561873] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 424.610361] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 424.619097] 15182 total pagecache pages [ 424.630051] 0 pages in swap cache [ 424.633551] Swap cache stats: add 0, delete 0, find 0/0 [ 424.639264] Free swap = 0kB [ 424.639906] systemd[1]: Starting Load/Save RF Kill Switch Status... [ 424.649092] syz-executor.1 (16354) used greatest stack depth: 24552 bytes left [ 424.658185] Total swap = 0kB [ 424.712881] 2097051 pages RAM [ 424.716247] 0 pages HighMem/MovableOnly [ 424.749723] 363849 pages reserved [ 424.753213] 0 pages cma reserved [ 424.811997] systemd[1]: Started Load/Save RF Kill Switch Status. 11:46:20 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x10001, 0x400) syz_open_dev$vcsn(&(0x7f0000000140), 0x7, 0x24c042) ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r0, 0x7a9, &(0x7f0000000040)={{@my=0x0, 0x7f}, 0x40, 0x3, 0x0, 0x6, 0xf1, 0x5, 0x39, 0x3}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(0xffffffffffffffff, 0x7a8, &(0x7f0000000080)={{@host, 0x20000}, @hyper, 0x4, 0x9, 0x0, 0x5, 0x6, 0xd350}) socketpair(0x6, 0x80000, 0x10001, &(0x7f0000000180)) r1 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0), 0x20000, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000100)={0x80000001, 0x27}) [ 424.874547] systemd-journald[16536]: File /run/log/journal/04d8c135ee6b410280ba31a58c89679d/system.journal corrupted or uncleanly shut down, renaming and replacing. 11:46:20 executing program 3: openat$ion(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000100)={0x80000001, 0x27}) 11:46:20 executing program 3: openat$ion(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000100)={0x80000001, 0x27}) [ 425.370490] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 425.384021] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 425.427035] device bridge_slave_1 left promiscuous mode [ 425.440197] bridge0: port 2(bridge_slave_1) entered disabled state [ 425.449835] device bridge_slave_0 left promiscuous mode [ 425.455393] bridge0: port 1(bridge_slave_0) entered disabled state [ 425.477173] team0 (unregistering): Port device team_slave_1 removed [ 425.517502] team0 (unregistering): Port device team_slave_0 removed [ 425.553612] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 425.579620] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 425.690999] bond0 (unregistering): Released all slaves [ 425.732664] systemd[1]: Started Journal Service. 11:46:21 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0), 0x20000, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000100)={0x80000001, 0x27}) [ 426.432999] syz-executor.0: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 426.499672] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 426.524423] CPU: 0 PID: 16564 Comm: syz-executor.0 Not tainted 4.14.232-syzkaller #0 [ 426.532341] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 426.541703] Call Trace: [ 426.544304] dump_stack+0x1b2/0x281 [ 426.547941] warn_alloc.cold+0x96/0x1cc [ 426.551947] ? zone_watermark_ok_safe+0x220/0x220 [ 426.556817] __alloc_pages_nodemask+0x2127/0x2720 [ 426.561673] ? _raw_spin_unlock_irq+0x5a/0x80 [ 426.566183] ? finish_task_switch+0x178/0x610 [ 426.570709] ? finish_task_switch+0x14d/0x610 [ 426.575217] ? lock_acquire+0x170/0x3f0 [ 426.579206] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 426.584198] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 426.589664] ? __mutex_unlock_slowpath+0x75/0x770 [ 426.594516] ? alloc_pages_current+0x16/0x260 [ 426.599019] alloc_pages_current+0x155/0x260 [ 426.603447] ion_page_pool_alloc+0x118/0x1b0 [ 426.608035] ion_system_heap_allocate+0x133/0x8c0 [ 426.613007] ? ion_alloc+0x187/0x810 [ 426.616732] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 426.622540] ? ion_system_contig_heap_create+0x130/0x130 [ 426.627996] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 426.633033] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 426.637895] ion_alloc+0x204/0x810 [ 426.641444] ? ion_dma_buf_release+0x40/0x40 [ 426.645854] ? __might_fault+0x177/0x1b0 [ 426.649920] ion_ioctl+0xea/0x1f0 [ 426.653388] ? ion_query_heaps+0x360/0x360 [ 426.657623] ? ion_query_heaps+0x360/0x360 [ 426.661851] do_vfs_ioctl+0x75a/0xff0 [ 426.665648] ? ioctl_preallocate+0x1a0/0x1a0 [ 426.670046] ? lock_downgrade+0x740/0x740 [ 426.674189] ? __fget+0x225/0x360 [ 426.677632] ? do_vfs_ioctl+0xff0/0xff0 [ 426.681620] ? security_file_ioctl+0x83/0xb0 [ 426.686034] SyS_ioctl+0x7f/0xb0 [ 426.689394] ? do_vfs_ioctl+0xff0/0xff0 [ 426.693365] do_syscall_64+0x1d5/0x640 [ 426.697252] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 426.702442] RIP: 0033:0x4665f9 [ 426.705898] RSP: 002b:00007f78e5f89188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 426.713780] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 426.721047] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000003 [ 426.728312] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 426.735598] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 426.742954] R13: 00007ffd4957c29f R14: 00007f78e5f89300 R15: 0000000000022000 [ 426.808244] oom_reaper: reaped process 16392 (syz-executor.2), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 426.900224] oom_reaper: reaped process 16391 (syz-executor.4), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 426.919479] warn_alloc_show_mem: 1 callbacks suppressed [ 426.919483] Mem-Info: [ 426.927286] active_anon:12022 inactive_anon:14852 isolated_anon:0 [ 426.927286] active_file:71 inactive_file:46 isolated_file:20 [ 426.927286] unevictable:0 dirty:10 writeback:0 unstable:0 [ 426.927286] slab_reclaimable:13292 slab_unreclaimable:118374 [ 426.927286] mapped:43983 shmem:15117 pagetables:754 bounce:0 [ 426.927286] free:13738 free_pcp:25 free_cma:0 [ 426.960849] Node 0 active_anon:46264kB inactive_anon:51260kB active_file:240kB inactive_file:216kB unevictable:0kB isolated(anon):0kB isolated(file):80kB mapped:141128kB dirty:40kB writeback:0kB shmem:52256kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 427.004744] Node 1 active_anon:1824kB inactive_anon:8148kB active_file:8kB inactive_file:48kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:34872kB dirty:0kB writeback:0kB shmem:8212kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 427.044089] syz-executor.4 invoked oom-killer: gfp_mask=0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null), order=0, oom_score_adj=1000 [ 427.082485] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 427.087665] CPU: 0 PID: 16391 Comm: syz-executor.4 Not tainted 4.14.232-syzkaller #0 [ 427.095552] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 427.104937] Call Trace: [ 427.107535] dump_stack+0x1b2/0x281 [ 427.111167] dump_header+0x178/0x82f [ 427.114879] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 427.120010] ? ___ratelimit+0x2cd/0x530 [ 427.124009] oom_kill_process.cold+0x10/0xa40 [ 427.128526] out_of_memory+0xe3e/0x1190 [ 427.132527] ? oom_killer_disable+0x1c0/0x1c0 [ 427.137045] ? mutex_trylock+0x152/0x1a0 [ 427.141113] __alloc_pages_nodemask+0x23e1/0x2720 [ 427.145971] ? lock_acquire+0x170/0x3f0 [ 427.149950] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 427.154810] ? ion_page_pool_alloc+0x9e/0x1b0 [ 427.159318] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 427.164778] alloc_pages_current+0x155/0x260 [ 427.169198] ion_page_pool_alloc+0x118/0x1b0 [ 427.173606] ion_system_heap_allocate+0x133/0x8c0 [ 427.178450] ? ion_alloc+0x187/0x810 [ 427.182175] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 427.187654] ? ion_system_contig_heap_create+0x130/0x130 [ 427.193152] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 427.198204] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 427.203097] ion_alloc+0x204/0x810 [ 427.206664] ? ion_dma_buf_release+0x40/0x40 [ 427.211090] ? __might_fault+0x177/0x1b0 [ 427.215170] ion_ioctl+0xea/0x1f0 [ 427.218643] ? ion_query_heaps+0x360/0x360 [ 427.223396] ? retint_kernel+0x2d/0x2d [ 427.227303] ? putname+0xcd/0x110 [ 427.230768] ? ion_query_heaps+0x360/0x360 [ 427.235015] do_vfs_ioctl+0x75a/0xff0 [ 427.238839] ? ioctl_preallocate+0x1a0/0x1a0 [ 427.243294] ? lock_downgrade+0x740/0x740 [ 427.247464] ? __fget+0x225/0x360 [ 427.250923] ? do_vfs_ioctl+0xff0/0xff0 [ 427.254908] ? security_file_ioctl+0x83/0xb0 [ 427.260722] SyS_ioctl+0x7f/0xb0 [ 427.264095] ? do_vfs_ioctl+0xff0/0xff0 [ 427.268088] do_syscall_64+0x1d5/0x640 [ 427.271998] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 427.277208] RIP: 0033:0x4665f9 [ 427.280391] RSP: 002b:00007f9108899188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 427.288095] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 427.295361] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000006 [ 427.302685] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 427.310659] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 427.317945] R13: 00007fffb2c94dcf R14: 00007f9108899300 R15: 0000000000022000 [ 427.344557] Node 0 DMA free:10940kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 427.349496] syz-executor.5: [ 427.371112] syz-executor.2: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 427.383117] page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 427.408729] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 427.409412] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 427.415922] CPU: 1 PID: 16404 Comm: syz-executor.5 Not tainted 4.14.232-syzkaller #0 [ 427.426913] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 427.436278] Call Trace: [ 427.438890] dump_stack+0x1b2/0x281 [ 427.442523] warn_alloc.cold+0x96/0x1cc [ 427.446497] ? zone_watermark_ok_safe+0x220/0x220 [ 427.449424] lowmem_reserve[]: [ 427.451359] ? usleep_range+0x130/0x130 [ 427.451361] 0 2717 [ 427.454467] ? queue_work_on+0x10d/0x1d0 [ 427.458426] 2718 [ 427.460657] ? _find_next_bit+0xdb/0x100 [ 427.460667] ? run_timer_softirq+0x5a0/0x5a0 [ 427.460683] __alloc_pages_nodemask+0x2127/0x2720 [ 427.460700] ? lock_acquire+0x170/0x3f0 [ 427.484322] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 427.489173] ? ion_page_pool_alloc+0x9e/0x1b0 [ 427.489417] 2718 2718 [ 427.493671] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 427.493690] alloc_pages_current+0x155/0x260 [ 427.501614] ion_page_pool_alloc+0x118/0x1b0 [ 427.501624] ion_system_heap_allocate+0x133/0x8c0 [ 427.501636] ? _raw_spin_unlock+0x29/0x40 [ 427.501644] ? _ion_heap_freelist_drain+0x6e/0x410 [ 427.501657] ? ion_system_contig_heap_create+0x130/0x130 [ 427.529748] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 427.534766] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 427.539617] ion_alloc+0x27a/0x810 [ 427.543249] ? ion_dma_buf_release+0x40/0x40 [ 427.547662] ? __might_fault+0x177/0x1b0 [ 427.549422] Node 0 DMA32 free:17808kB min:36200kB low:45248kB high:54296kB active_anon:46176kB inactive_anon:51260kB active_file:44kB inactive_file:56kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7552kB pagetables:2492kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 427.551762] ion_ioctl+0xea/0x1f0 [ 427.551773] ? ion_query_heaps+0x360/0x360 [ 427.588835] ? vm_insert_page+0x7c0/0x7c0 [ 427.593108] ? ion_query_heaps+0x360/0x360 [ 427.597364] do_vfs_ioctl+0x75a/0xff0 [ 427.601179] ? ioctl_preallocate+0x1a0/0x1a0 [ 427.605760] ? lock_downgrade+0x740/0x740 [ 427.609922] ? __fget+0x225/0x360 [ 427.613387] ? do_vfs_ioctl+0xff0/0xff0 [ 427.617365] ? security_file_ioctl+0x83/0xb0 [ 427.621775] SyS_ioctl+0x7f/0xb0 [ 427.625138] ? do_vfs_ioctl+0xff0/0xff0 [ 427.629150] do_syscall_64+0x1d5/0x640 [ 427.633050] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 427.638763] RIP: 0033:0x4665f9 [ 427.639415] lowmem_reserve[]: [ 427.641944] RSP: 002b:00007f97bed79188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 427.645057] 0 [ 427.652764] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 427.652771] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000005 [ 427.652775] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 427.652779] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 427.652784] R13: 00007ffe0c744e6f R14: 00007f97bed79300 R15: 0000000000022000 [ 427.664564] CPU: 1 PID: 16392 Comm: syz-executor.2 Not tainted 4.14.232-syzkaller #0 [ 427.700027] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 427.709411] 0 [ 427.711378] Call Trace: [ 427.711380] 0 0 [ 427.713186] dump_stack+0x1b2/0x281 [ 427.715747] 0 [ 427.717721] warn_alloc.cold+0x96/0x1cc [ 427.727090] ? zone_watermark_ok_safe+0x220/0x220 [ 427.731936] ? usleep_range+0x130/0x130 [ 427.731939] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 427.736095] ? try_to_free_pages+0x23f/0x6e0 [ 427.766002] ? _find_next_bit+0xdb/0x100 [ 427.770072] ? run_timer_softirq+0x5a0/0x5a0 [ 427.774754] __alloc_pages_nodemask+0x2127/0x2720 [ 427.779608] ? lock_acquire+0x170/0x3f0 [ 427.783589] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 427.788451] ? ion_page_pool_alloc+0x9e/0x1b0 [ 427.789403] lowmem_reserve[]: 0 [ 427.792964] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 427.792979] ? alloc_pages_current+0x37/0x260 [ 427.796253] 0 [ 427.801714] alloc_pages_current+0x155/0x260 [ 427.801728] ion_page_pool_alloc+0x118/0x1b0 [ 427.801737] ion_system_heap_allocate+0x133/0x8c0 [ 427.801746] ? ion_alloc+0x187/0x810 [ 427.801759] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 427.823736] 0 [ 427.825329] ? ion_system_contig_heap_create+0x130/0x130 [ 427.831164] 0 [ 427.832555] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 427.832569] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 427.837998] 0 [ 427.839795] ion_alloc+0x204/0x810 [ 427.839808] ? ion_dma_buf_release+0x40/0x40 [ 427.839821] ? __might_fault+0x177/0x1b0 [ 427.839834] ion_ioctl+0xea/0x1f0 [ 427.849686] ? ion_query_heaps+0x360/0x360 [ 427.849697] ? ion_query_heaps+0x360/0x360 [ 427.849707] do_vfs_ioctl+0x75a/0xff0 [ 427.849722] ? ioctl_preallocate+0x1a0/0x1a0 [ 427.851507] Node 1 [ 427.855030] ? lock_downgrade+0x740/0x740 [ 427.859473] Normal free:26528kB min:53696kB low:67120kB high:80544kB active_anon:1824kB inactive_anon:8148kB active_file:4kB inactive_file:4kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:416kB pagetables:552kB bounce:0kB free_pcp:4kB local_pcp:0kB free_cma:0kB [ 427.863486] ? __fget+0x225/0x360 [ 427.866910] lowmem_reserve[]: [ 427.871140] ? do_vfs_ioctl+0xff0/0xff0 [ 427.871152] ? security_file_ioctl+0x83/0xb0 [ 427.871161] SyS_ioctl+0x7f/0xb0 [ 427.871169] ? do_vfs_ioctl+0xff0/0xff0 [ 427.871183] do_syscall_64+0x1d5/0x640 [ 427.875404] 0 [ 427.879193] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 427.883632] Mem-Info: [ 427.885804] RIP: 0033:0x4665f9 [ 427.889975] 0 [ 427.917416] RSP: 002b:00007ff3638e3188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 427.917426] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 427.917430] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000005 [ 427.917434] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 427.917439] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 427.917443] R13: 00007ffe909c1c6f R14: 00007ff3638e3300 R15: 0000000000022000 [ 427.929880] Mem-Info: [ 427.941545] active_anon:12000 inactive_anon:14852 isolated_anon:0 [ 427.941545] active_file:12 inactive_file:15 isolated_file:0 [ 427.941545] unevictable:0 dirty:0 writeback:0 unstable:0 [ 427.941545] slab_reclaimable:13296 slab_unreclaimable:118312 [ 427.941545] mapped:43913 shmem:15117 pagetables:761 bounce:0 [ 427.941545] free:13819 free_pcp:3 free_cma:0 [ 427.955986] active_anon:12000 inactive_anon:14852 isolated_anon:0 [ 427.955986] active_file:12 inactive_file:15 isolated_file:0 [ 427.955986] unevictable:0 dirty:0 writeback:0 unstable:0 [ 427.955986] slab_reclaimable:13296 slab_unreclaimable:118312 [ 427.955986] mapped:43913 shmem:15117 pagetables:761 bounce:0 [ 427.955986] free:13819 free_pcp:3 free_cma:0 [ 427.960908] Node 0 active_anon:46176kB inactive_anon:51260kB active_file:44kB inactive_file:56kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:140832kB dirty:0kB writeback:0kB shmem:52256kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 427.977533] Node 0 active_anon:46176kB inactive_anon:51260kB active_file:44kB inactive_file:56kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:140832kB dirty:0kB writeback:0kB shmem:52256kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 428.014588] Node 1 active_anon:1824kB inactive_anon:8148kB active_file:4kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:34820kB dirty:0kB writeback:0kB shmem:8212kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 428.055908] Node 1 active_anon:1824kB inactive_anon:8148kB active_file:0kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:34816kB dirty:0kB writeback:0kB shmem:8212kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 428.087737] 0 [ 428.117243] Node 0 [ 428.131074] 0 [ 428.176325] DMA free:10940kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 428.182568] Node 0 [ 428.204784] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 428.257451] Node 0 DMA32 free:17684kB min:36200kB low:45248kB high:54296kB active_anon:46176kB inactive_anon:51260kB active_file:44kB inactive_file:48kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7552kB pagetables:2492kB bounce:0kB free_pcp:24kB local_pcp:0kB free_cma:0kB [ 428.259379] DMA free:10940kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 428.305286] lowmem_reserve[]: [ 428.319361] 0 [ 428.324270] Node 0 DMA: 1*4kB (E) 1*8kB (U) 7*16kB (UE) 22*32kB (UE) 22*64kB (UE) 6*128kB (UE) 3*256kB (UE) 2*512kB (UE) 2*1024kB (UE) 2*2048kB (ME) 0*4096kB = 10940kB [ 428.333946] 0 0 0 0 0 [ 428.369388] Node 0 DMA32: 1673*4kB (UME) 648*8kB (UME) 193*16kB (UME) 37*32kB (UME) 24*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 17684kB [ 428.387490] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 428.399369] Node 0 [ 428.413285] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 428.429399] Node 0 DMA32 free:17684kB min:36200kB low:45248kB high:54296kB active_anon:46176kB inactive_anon:51260kB active_file:44kB inactive_file:48kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7552kB pagetables:2492kB bounce:0kB free_pcp:24kB local_pcp:24kB free_cma:0kB [ 428.458780] Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 428.474929] lowmem_reserve[]: 0 0 0 0 0 [ 428.485599] Node 1 Normal free:37924kB min:53696kB low:67120kB high:80544kB active_anon:1824kB inactive_anon:8148kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:416kB pagetables:552kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 428.487012] Node 1 Normal: 63*4kB (UME) 49*8kB (UME) 34*16kB (ME) 30*32kB (UME) 191*64kB (UME) 18*128kB (UME) 11*256kB (UM) 34*512kB (UM) 1*1024kB (U) 0*2048kB 0*4096kB = 37924kB [ 428.541648] lowmem_reserve[]: 0 0 0 0 0 [ 428.550521] Node 0 DMA: 1*4kB (E) 1*8kB (U) 7*16kB (UE) 22*32kB (UE) 22*64kB (UE) 6*128kB (UE) 3*256kB (UE) 2*512kB (UE) 2*1024kB (UE) 2*2048kB (ME) 0*4096kB = 10940kB [ 428.552578] lowmem_reserve[]: [ 428.580558] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 428.612503] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 428.625065] 0 0 0 0 0 [ 428.634507] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 428.674686] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 428.689383] Node 0 DMA32: 1452*4kB (UME) 1370*8kB (UE) 1500*16kB (UE) 180*32kB (UE) 431*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 74112kB [ 428.714803] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 428.733511] 16917 total pagecache pages [ 428.743853] lowmem_reserve[]: 0 0 0 0 0 [ 428.749412] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 428.752093] 0 pages in swap cache [ 428.773225] Node 1 Normal free:119924kB min:53696kB low:67120kB high:80544kB active_anon:1824kB inactive_anon:8148kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:416kB pagetables:552kB bounce:0kB free_pcp:1464kB local_pcp:736kB free_cma:0kB [ 428.789413] Node 1 [ 428.817512] Swap cache stats: add 0, delete 0, find 0/0 [ 428.840043] Normal: 417*4kB (UME) 360*8kB (UME) 975*16kB (UME) 635*32kB (UME) 804*64kB (UME) 69*128kB (UME) 19*256kB (UM) 45*512kB (UM) 1*1024kB (U) 0*2048kB 0*4096kB = 129684kB [ 428.842310] Free swap = 0kB [ 428.897026] Total swap = 0kB [ 428.903517] 2097051 pages RAM [ 428.906686] lowmem_reserve[]: 0 0 0 0 0 [ 428.917522] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 428.917525] 0 pages HighMem/MovableOnly [ 428.917531] 363849 pages reserved [ 428.934174] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 428.939425] Node 0 DMA: 15*4kB (UE) 2*8kB (U) 7*16kB (UE) 22*32kB (UE) 22*64kB (UE) 6*128kB (UE) 3*256kB (UE) 2*512kB (UE) 2*1024kB (UE) 2*2048kB (ME) 0*4096kB = 11004kB [ 428.977326] 0 pages cma reserved [ 428.985366] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 428.988632] Node 0 [ 429.008534] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 429.014270] DMA32: 7757*4kB (UME) 2759*8kB (UME) 1846*16kB (UME) 518*32kB (UE) 538*64kB (UM) 12*128kB (U) 36*256kB (UM) 3*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 145932kB [ 429.032829] 17108 total pagecache pages [ 429.049983] 0 pages in swap cache [ 429.059742] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 429.063564] Swap cache stats: add 0, delete 0, find 0/0 [ 429.080042] Free swap = 0kB [ 429.083147] Total swap = 0kB [ 429.084837] Node 1 Normal: 5584*4kB (UME) 1287*8kB (UME) 1104*16kB (UME) 664*32kB (UME) 810*64kB (UME) 99*128kB (UME) 19*256kB (UM) 48*512kB (UM) 1*1024kB (U) 0*2048kB 0*4096kB = 166520kB [ 429.109414] 2097051 pages RAM [ 429.113595] 0 pages HighMem/MovableOnly [ 429.121239] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 429.131207] 363849 pages reserved [ 429.135250] 0 pages cma reserved [ 429.162424] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 429.198220] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 429.219331] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 429.237964] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 429.246440] 17084 total pagecache pages [ 429.257694] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 429.279305] 0 pages in swap cache [ 429.282786] Swap cache stats: add 0, delete 0, find 0/0 [ 429.288169] Free swap = 0kB [ 429.311045] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 429.317872] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 429.326482] Total swap = 0kB [ 429.342854] 2097051 pages RAM [ 429.345991] 0 pages HighMem/MovableOnly [ 429.350882] 363849 pages reserved [ 429.354340] 0 pages cma reserved [ 429.357720] Out of memory (oom_kill_allocating_task): Kill process 16391 (syz-executor.4) score 0 or sacrifice child [ 429.381069] device bridge_slave_1 left promiscuous mode [ 429.387203] bridge0: port 2(bridge_slave_1) entered disabled state [ 429.421026] device bridge_slave_0 left promiscuous mode [ 429.426601] bridge0: port 1(bridge_slave_0) entered disabled state [ 429.437191] Killed process 16391 (syz-executor.4) total-vm:93252kB, anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 429.461179] syz-executor.4: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 429.492287] device veth1_macvtap left promiscuous mode [ 429.497750] device veth0_macvtap left promiscuous mode [ 429.511476] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 429.516653] CPU: 0 PID: 16391 Comm: syz-executor.4 Not tainted 4.14.232-syzkaller #0 [ 429.524544] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 429.534097] Call Trace: [ 429.536720] dump_stack+0x1b2/0x281 [ 429.541305] warn_alloc.cold+0x96/0x1cc [ 429.545434] ? zone_watermark_ok_safe+0x220/0x220 [ 429.551798] ? wait_for_completion_io+0x10/0x10 [ 429.556502] __alloc_pages_nodemask+0x2127/0x2720 [ 429.561401] ? lock_acquire+0x170/0x3f0 [ 429.565494] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 429.570365] ? ion_page_pool_alloc+0x9e/0x1b0 [ 429.574890] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 429.580459] alloc_pages_current+0x155/0x260 [ 429.584897] ion_page_pool_alloc+0x118/0x1b0 [ 429.589337] ion_system_heap_allocate+0x133/0x8c0 [ 429.594211] ? ion_alloc+0x187/0x810 [ 429.598071] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 429.603545] ? ion_system_contig_heap_create+0x130/0x130 [ 429.609028] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 429.614056] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 429.618903] ion_alloc+0x204/0x810 [ 429.622444] ? ion_dma_buf_release+0x40/0x40 [ 429.626848] ? __might_fault+0x177/0x1b0 [ 429.630905] ion_ioctl+0xea/0x1f0 [ 429.634353] ? ion_query_heaps+0x360/0x360 [ 429.638592] ? retint_kernel+0x2d/0x2d [ 429.642475] ? putname+0xcd/0x110 [ 429.645940] ? ion_query_heaps+0x360/0x360 [ 429.650182] do_vfs_ioctl+0x75a/0xff0 [ 429.654000] ? ioctl_preallocate+0x1a0/0x1a0 [ 429.658401] ? lock_downgrade+0x740/0x740 [ 429.662549] ? __fget+0x225/0x360 [ 429.665995] ? do_vfs_ioctl+0xff0/0xff0 [ 429.669969] ? security_file_ioctl+0x83/0xb0 [ 429.674380] SyS_ioctl+0x7f/0xb0 [ 429.677748] ? do_vfs_ioctl+0xff0/0xff0 [ 429.681715] do_syscall_64+0x1d5/0x640 [ 429.685603] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 429.690788] RIP: 0033:0x4665f9 [ 429.693968] RSP: 002b:00007f9108899188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 429.701684] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 429.709045] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000006 [ 429.716328] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 429.723683] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 429.730956] R13: 00007fffb2c94dcf R14: 00007f9108899300 R15: 0000000000022000 [ 429.738477] device veth1_vlan left promiscuous mode [ 429.745420] syz-executor.2: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 429.771707] warn_alloc_show_mem: 1 callbacks suppressed [ 429.771711] Mem-Info: [ 429.783470] active_anon:12050 inactive_anon:14852 isolated_anon:0 [ 429.783470] active_file:625 inactive_file:1308 isolated_file:12 [ 429.783470] unevictable:0 dirty:33 writeback:0 unstable:0 [ 429.783470] slab_reclaimable:13305 slab_unreclaimable:119517 [ 429.783470] mapped:54261 shmem:15117 pagetables:805 bounce:0 [ 429.783470] free:66223 free_pcp:206 free_cma:0 [ 429.799389] device veth0_vlan left promiscuous mode [ 429.824944] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 429.824997] Node 0 active_anon:46376kB inactive_anon:51260kB active_file:2500kB inactive_file:5228kB unevictable:0kB isolated(anon):0kB isolated(file):48kB mapped:182228kB dirty:132kB writeback:0kB shmem:52256kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 429.842236] CPU: 1 PID: 16392 Comm: syz-executor.2 Not tainted 4.14.232-syzkaller #0 [ 429.864287] Node 1 active_anon:1824kB inactive_anon:8148kB active_file:0kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:34816kB dirty:0kB writeback:0kB shmem:8212kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 429.866322] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 429.893175] Node 0 [ 429.902575] Call Trace: [ 429.902597] dump_stack+0x1b2/0x281 [ 429.902610] warn_alloc.cold+0x96/0x1cc [ 429.902622] ? zone_watermark_ok_safe+0x220/0x220 [ 429.902643] __alloc_pages_nodemask+0x2127/0x2720 [ 429.902656] ? lock_acquire+0x170/0x3f0 [ 429.908315] DMA free:11016kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 429.911068] ? lock_acquire+0x170/0x3f0 [ 429.911084] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 429.911102] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 429.911121] ? __mutex_unlock_slowpath+0x75/0x770 [ 429.911136] alloc_pages_current+0x155/0x260 [ 429.917404] lowmem_reserve[]: [ 429.920451] ion_page_pool_alloc+0x118/0x1b0 [ 429.920461] ion_system_heap_allocate+0x133/0x8c0 [ 429.920474] ? _raw_spin_unlock+0x29/0x40 [ 429.920482] ? _ion_heap_freelist_drain+0x6e/0x410 [ 429.920491] ? ion_system_contig_heap_create+0x130/0x130 [ 429.920505] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 429.927908] 0 [ 429.929299] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 429.929311] ion_alloc+0x27a/0x810 [ 429.929324] ? ion_dma_buf_release+0x40/0x40 [ 429.929336] ? __might_fault+0x177/0x1b0 [ 429.929347] ion_ioctl+0xea/0x1f0 [ 429.929357] ? ion_query_heaps+0x360/0x360 [ 429.958595] 2717 [ 429.958827] ? ion_query_heaps+0x360/0x360 [ 429.964508] 2718 [ 429.969091] do_vfs_ioctl+0x75a/0xff0 [ 429.973942] 2718 [ 429.978314] ? ioctl_preallocate+0x1a0/0x1a0 [ 429.981448] 2718 [ 429.985812] ? lock_downgrade+0x740/0x740 [ 429.994769] ? __fget+0x225/0x360 [ 429.999706] Node 0 [ 430.005116] ? do_vfs_ioctl+0xff0/0xff0 [ 430.010156] DMA32 free:175304kB min:36200kB low:45248kB high:54296kB active_anon:46376kB inactive_anon:51260kB active_file:2408kB inactive_file:5348kB unevictable:0kB writepending:180kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7616kB pagetables:2668kB bounce:0kB free_pcp:1388kB local_pcp:728kB free_cma:0kB [ 430.011898] ? security_file_ioctl+0x83/0xb0 [ 430.016728] lowmem_reserve[]: [ 430.020261] SyS_ioctl+0x7f/0xb0 [ 430.020270] ? do_vfs_ioctl+0xff0/0xff0 [ 430.020281] do_syscall_64+0x1d5/0x640 [ 430.020296] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 430.020304] RIP: 0033:0x4665f9 [ 430.020308] RSP: 002b:00007ff3638e3188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 430.020318] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 430.020326] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000005 [ 430.032072] 0 [ 430.032206] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 430.036445] 0 [ 430.038602] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 430.042870] 0 [ 430.044871] R13: 00007ffe909c1c6f R14: 00007ff3638e3300 R15: 0000000000022000 [ 430.049042] 0 0 [ 430.221244] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 430.259968] lowmem_reserve[]: 0 0 0 0 0 [ 430.270697] Node 1 Normal free:87080kB min:53696kB low:67120kB high:80544kB active_anon:1824kB inactive_anon:8148kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:416kB pagetables:552kB bounce:0kB free_pcp:672kB local_pcp:0kB free_cma:0kB [ 430.319272] lowmem_reserve[]: 0 0 0 0 0 [ 430.329795] Node 0 DMA: 32*4kB (UE) 5*8kB (U) 7*16kB (UE) 22*32kB (UE) 21*64kB (UE) 6*128kB (UE) 3*256kB (UE) 2*512kB (UE) 2*1024kB (UE) 2*2048kB (ME) 0*4096kB = 11032kB [ 430.355212] device hsr_slave_1 left promiscuous mode [ 430.365820] device hsr_slave_0 left promiscuous mode [ 430.373501] Node 0 DMA32: 17618*4kB (UE) 5297*8kB (UE) 2210*16kB (UE) 826*32kB (UE) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 174640kB [ 430.412279] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 430.423537] team0 (unregistering): Port device team_slave_1 removed [ 430.446105] team0 (unregistering): Port device team_slave_0 removed [ 430.449244] Node 1 Normal: 7734*4kB (U) 1362*8kB (U) 1194*16kB (U) 817*32kB (U) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 87080kB [ 430.466341] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 430.473482] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 430.499570] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB 11:46:25 executing program 5: syz_open_dev$vcsn(&(0x7f0000000000), 0x10001, 0x400) syz_open_dev$vcsn(&(0x7f0000000140), 0x7, 0x24c042) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0), 0x20000, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000100)={0x80000001, 0x27}) [ 430.512352] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 430.526273] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 430.554340] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 430.568480] 18661 total pagecache pages [ 430.574763] 0 pages in swap cache [ 430.579044] bond0 (unregistering): Released all slaves [ 430.595363] Swap cache stats: add 0, delete 0, find 0/0 [ 430.618972] Free swap = 0kB [ 430.629025] Total swap = 0kB [ 430.642629] 2097051 pages RAM [ 430.649132] 0 pages HighMem/MovableOnly [ 430.675134] 363849 pages reserved [ 430.682080] 0 pages cma reserved [ 430.745542] syz-executor.5: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 430.770322] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 430.777928] CPU: 0 PID: 16571 Comm: syz-executor.5 Not tainted 4.14.232-syzkaller #0 [ 430.785836] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 430.797448] Call Trace: [ 430.800046] dump_stack+0x1b2/0x281 [ 430.803677] warn_alloc.cold+0x96/0x1cc [ 430.807661] ? zone_watermark_ok_safe+0x220/0x220 [ 430.812563] __alloc_pages_nodemask+0x2127/0x2720 [ 430.817421] ? lock_acquire+0x170/0x3f0 [ 430.821518] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 430.826463] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 430.831944] ? __mutex_unlock_slowpath+0x75/0x770 [ 430.836817] alloc_pages_current+0x155/0x260 [ 430.841236] ion_page_pool_alloc+0x118/0x1b0 [ 430.849753] ion_system_heap_allocate+0x133/0x8c0 [ 430.854642] ? ion_alloc+0x187/0x810 [ 430.858362] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 430.863853] ? ion_system_contig_heap_create+0x130/0x130 [ 430.869871] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 430.874906] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 430.879767] ion_alloc+0x204/0x810 [ 430.883337] ? ion_dma_buf_release+0x40/0x40 [ 430.887758] ? __might_fault+0x177/0x1b0 [ 430.891834] ion_ioctl+0xea/0x1f0 [ 430.895485] ? ion_query_heaps+0x360/0x360 [ 430.899738] ? ion_query_heaps+0x360/0x360 [ 430.903982] do_vfs_ioctl+0x75a/0xff0 [ 430.907794] ? ioctl_preallocate+0x1a0/0x1a0 [ 430.912207] ? lock_downgrade+0x740/0x740 [ 430.916365] ? __fget+0x225/0x360 [ 430.919821] ? do_vfs_ioctl+0xff0/0xff0 [ 430.924150] ? security_file_ioctl+0x83/0xb0 [ 430.928585] SyS_ioctl+0x7f/0xb0 [ 430.932251] ? do_vfs_ioctl+0xff0/0xff0 [ 430.936232] do_syscall_64+0x1d5/0x640 [ 430.940132] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 430.945318] RIP: 0033:0x4665f9 [ 430.948501] RSP: 002b:00007f97bed79188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 430.956212] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 430.963485] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000005 [ 430.970769] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 430.978071] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 430.985375] R13: 00007ffe0c744e6f R14: 00007f97bed79300 R15: 0000000000022000 [ 431.017434] warn_alloc_show_mem: 1 callbacks suppressed [ 431.017439] Mem-Info: [ 431.028350] active_anon:12037 inactive_anon:14851 isolated_anon:12 [ 431.028350] active_file:1383 inactive_file:2350 isolated_file:12 [ 431.028350] unevictable:0 dirty:51 writeback:0 unstable:0 [ 431.028350] slab_reclaimable:13351 slab_unreclaimable:118611 [ 431.028350] mapped:55153 shmem:15116 pagetables:784 bounce:0 [ 431.028350] free:63310 free_pcp:369 free_cma:0 [ 431.067206] Node 0 active_anon:46324kB inactive_anon:51256kB active_file:5532kB inactive_file:9396kB unevictable:0kB isolated(anon):0kB isolated(file):48kB mapped:185796kB dirty:204kB writeback:0kB shmem:52252kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 431.204976] Node 1 active_anon:1824kB inactive_anon:8148kB active_file:0kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:34816kB dirty:0kB writeback:0kB shmem:8208kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 431.328538] Node 0 DMA free:11044kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 431.396905] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 431.407636] Node 0 DMA32 free:45132kB min:36200kB low:45248kB high:54296kB active_anon:46872kB inactive_anon:51260kB active_file:6560kB inactive_file:9120kB unevictable:0kB writepending:224kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7616kB pagetables:2852kB bounce:0kB free_pcp:440kB local_pcp:120kB free_cma:0kB 11:46:26 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0), 0x20000, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000100)={0x80000001, 0x27}) [ 431.514122] lowmem_reserve[]: 0 0 0 0 0 [ 431.528105] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 431.572579] lowmem_reserve[]: 0 0 0 0 0 [ 431.576831] Node 1 Normal free:118984kB min:53696kB low:67120kB high:80544kB active_anon:1824kB inactive_anon:8148kB active_file:0kB inactive_file:204kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:352kB pagetables:448kB bounce:0kB free_pcp:280kB local_pcp:172kB free_cma:0kB [ 431.652945] lowmem_reserve[]: 0 0 0 0 0 [ 431.662829] Node 0 DMA: 35*4kB (UE) 5*8kB (U) 7*16kB (UE) 22*32kB (UE) 21*64kB (UE) 6*128kB (UE) 3*256kB (UE) 2*512kB (UE) 2*1024kB (UE) 2*2048kB (ME) 0*4096kB = 11044kB [ 431.697646] syz-executor.0: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 431.704820] Node 0 DMA32: 176*4kB (UME) 402*8kB (UME) 507*16kB (UME) 1057*32kB (UME) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 45856kB [ 431.749150] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 431.750469] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 431.774233] CPU: 0 PID: 16594 Comm: syz-executor.0 Not tainted 4.14.232-syzkaller #0 [ 431.782397] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 431.791786] Call Trace: [ 431.794376] dump_stack+0x1b2/0x281 [ 431.798010] warn_alloc.cold+0x96/0x1cc [ 431.801988] ? zone_watermark_ok_safe+0x220/0x220 [ 431.806847] __alloc_pages_nodemask+0x2127/0x2720 [ 431.811741] ? lock_acquire+0x170/0x3f0 [ 431.815753] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 431.820615] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 431.826084] ? __mutex_unlock_slowpath+0x75/0x770 [ 431.830984] alloc_pages_current+0x155/0x260 [ 431.835422] ion_page_pool_alloc+0x118/0x1b0 [ 431.839838] ion_system_heap_allocate+0x133/0x8c0 [ 431.844728] ? ion_alloc+0x187/0x810 [ 431.848438] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 431.853911] ? ion_system_contig_heap_create+0x130/0x130 [ 431.859622] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 431.864661] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 431.869510] ion_alloc+0x204/0x810 [ 431.873059] ? ion_dma_buf_release+0x40/0x40 [ 431.877609] ? __might_fault+0x177/0x1b0 [ 431.881673] ion_ioctl+0xea/0x1f0 [ 431.885126] ? ion_query_heaps+0x360/0x360 [ 431.889378] ? ion_query_heaps+0x360/0x360 [ 431.893636] do_vfs_ioctl+0x75a/0xff0 [ 431.897438] ? ioctl_preallocate+0x1a0/0x1a0 [ 431.901858] ? lock_downgrade+0x740/0x740 [ 431.906006] ? __fget+0x225/0x360 [ 431.909458] ? do_vfs_ioctl+0xff0/0xff0 [ 431.913430] ? security_file_ioctl+0x83/0xb0 [ 431.917916] SyS_ioctl+0x7f/0xb0 [ 431.921291] ? do_vfs_ioctl+0xff0/0xff0 [ 431.925260] do_syscall_64+0x1d5/0x640 [ 431.929158] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 431.934335] RIP: 0033:0x4665f9 [ 431.937512] RSP: 002b:00007f78e5f89188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 431.945209] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 431.952475] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000003 [ 431.959734] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 431.967009] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 431.974292] R13: 00007ffd4957c29f R14: 00007f78e5f89300 R15: 0000000000022000 [ 432.019646] Node 1 Normal: 1*4kB (U) 1*8kB (U) 1194*16kB (U) 1498*32kB (U) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 67052kB [ 432.055218] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 432.088216] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 432.119279] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 432.148886] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 432.160536] systemd-journal invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=0 [ 432.184577] 16395 total pagecache pages [ 432.192324] systemd-journal cpuset=/ mems_allowed=0-1 [ 432.202252] 0 pages in swap cache [ 432.210347] Swap cache stats: add 0, delete 0, find 0/0 [ 432.215837] CPU: 0 PID: 16536 Comm: systemd-journal Not tainted 4.14.232-syzkaller #0 [ 432.223803] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 432.233146] Call Trace: [ 432.235738] dump_stack+0x1b2/0x281 [ 432.239683] dump_header+0x178/0x82f [ 432.243386] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 432.248485] ? ___ratelimit+0x2cd/0x530 [ 432.252455] oom_kill_process.cold+0x10/0xa40 [ 432.256960] out_of_memory+0xe3e/0x1190 [ 432.260948] ? oom_killer_disable+0x1c0/0x1c0 [ 432.265451] ? mutex_trylock+0x152/0x1a0 [ 432.269543] __alloc_pages_nodemask+0x23e1/0x2720 [ 432.274389] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 432.279250] ? cache_grow_begin+0x3f/0x700 [ 432.283476] cache_grow_begin+0x91/0x700 [ 432.287531] fallback_alloc+0x207/0x2c0 [ 432.294638] kmem_cache_alloc+0x1e5/0x3c0 [ 432.298784] getname_flags+0xc8/0x550 [ 432.302576] do_sys_open+0x1ce/0x410 [ 432.306301] ? filp_open+0x60/0x60 [ 432.310701] ? do_syscall_64+0x4c/0x640 [ 432.314664] ? do_sys_open+0x410/0x410 [ 432.318549] do_syscall_64+0x1d5/0x640 [ 432.322462] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 432.327664] RIP: 0033:0x7f513e122840 [ 432.331381] RSP: 002b:00007ffd4741b178 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 432.339080] RAX: ffffffffffffffda RBX: 00007ffd4741b480 RCX: 00007f513e122840 [ 432.346356] RDX: 00000000000001a0 RSI: 0000000000080042 RDI: 000056291a77e770 [ 432.353622] RBP: 000000000000000d R08: 000000000000ffc0 R09: 00000000ffffffff [ 432.360886] R10: 0000000000000069 R11: 0000000000000246 R12: 00000000ffffffff [ 432.368318] R13: 000056291a779040 R14: 00007ffd4741b440 R15: 000056291a77e0c0 [ 432.386935] Free swap = 0kB [ 432.395814] Total swap = 0kB [ 432.402272] 2097051 pages RAM [ 432.408796] 0 pages HighMem/MovableOnly [ 432.420222] 363849 pages reserved [ 432.433935] 0 pages cma reserved [ 432.503230] Mem-Info: [ 432.505711] active_anon:12148 inactive_anon:14856 isolated_anon:0 [ 432.505711] active_file:52 inactive_file:45 isolated_file:18 [ 432.505711] unevictable:0 dirty:23 writeback:0 unstable:0 [ 432.505711] slab_reclaimable:13367 slab_unreclaimable:119109 [ 432.505711] mapped:52690 shmem:15125 pagetables:805 bounce:0 [ 432.505711] free:14184 free_pcp:220 free_cma:0 [ 432.545319] Mem-Info: [ 432.547848] active_anon:12148 inactive_anon:14856 isolated_anon:0 [ 432.547848] active_file:52 inactive_file:45 isolated_file:18 [ 432.547848] unevictable:0 dirty:23 writeback:0 unstable:0 [ 432.547848] slab_reclaimable:13367 slab_unreclaimable:119109 [ 432.547848] mapped:52690 shmem:15125 pagetables:805 bounce:0 [ 432.547848] free:14184 free_pcp:220 free_cma:0 [ 432.593490] Node 0 active_anon:46660kB inactive_anon:51280kB active_file:168kB inactive_file:136kB unevictable:0kB isolated(anon):0kB isolated(file):72kB mapped:175920kB dirty:68kB writeback:0kB shmem:52292kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 432.645587] Node 1 active_anon:1932kB inactive_anon:8144kB active_file:40kB inactive_file:44kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:34840kB dirty:24kB writeback:0kB shmem:8208kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 432.675301] Node 0 active_anon:46660kB inactive_anon:51280kB active_file:168kB inactive_file:136kB unevictable:0kB isolated(anon):0kB isolated(file):72kB mapped:175920kB dirty:68kB writeback:0kB shmem:52292kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 432.724388] Node 0 DMA free:10968kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 432.769125] Node 1 active_anon:1932kB inactive_anon:8144kB active_file:40kB inactive_file:44kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:34840kB dirty:24kB writeback:0kB shmem:8208kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 432.810941] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 432.816027] Node 0 DMA32 free:17592kB min:36200kB low:45248kB high:54296kB active_anon:46660kB inactive_anon:51280kB active_file:384kB inactive_file:668kB unevictable:0kB writepending:268kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7616kB pagetables:2764kB bounce:0kB free_pcp:124kB local_pcp:4kB free_cma:0kB [ 432.849506] Node 0 DMA free:10968kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 432.880109] lowmem_reserve[]: 0 0 0 0 0 [ 432.884169] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 432.913142] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 432.918202] Node 0 DMA32 free:17592kB min:36200kB low:45248kB high:54296kB active_anon:46660kB inactive_anon:51280kB active_file:384kB inactive_file:668kB unevictable:0kB writepending:268kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7616kB pagetables:2764kB bounce:0kB free_pcp:124kB local_pcp:4kB free_cma:0kB [ 432.950581] lowmem_reserve[]: 0 0 0 0 0 [ 432.954610] Node 1 Normal free:26684kB min:53696kB low:67120kB high:80544kB active_anon:1932kB inactive_anon:8144kB active_file:40kB inactive_file:32kB unevictable:0kB writepending:24kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:416kB pagetables:456kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 432.991043] lowmem_reserve[]: 0 0 0 0 0 [ 432.995115] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 433.020873] lowmem_reserve[]: 0 0 0 0 0 [ 433.024892] Node 0 DMA: 14*4kB (UE) 6*8kB (U) 7*16kB (UE) 22*32kB (UE) 21*64kB (UE) 6*128kB (UE) 3*256kB (UE) 2*512kB (UE) 2*1024kB (UE) 2*2048kB (ME) 0*4096kB = 10968kB [ 433.040976] lowmem_reserve[]: 0 0 0 0 0 [ 433.044991] Node 1 Normal free:26824kB min:53696kB low:67120kB high:80544kB active_anon:1932kB inactive_anon:8144kB active_file:4kB inactive_file:24kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:416kB pagetables:456kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 433.074267] Node 0 DMA32: 1573*4kB (ME) 602*8kB (UME) 190*16kB (UME) 84*32kB (UME) 18*64kB (UM) 1*128kB (M) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18116kB [ 433.089085] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 433.099913] lowmem_reserve[]: 0 0 0 0 0 [ 433.103934] Node 0 DMA: 14*4kB (UE) 6*8kB (U) 7*16kB (UE) 22*32kB (UE) 21*64kB (UE) 6*128kB (UE) 3*256kB (UE) 2*512kB (UE) 2*1024kB (UE) 2*2048kB (ME) 0*4096kB = 10968kB [ 433.121702] Node 1 Normal: 26*4kB (UM) 3*8kB (UM) 6*16kB (UM) 830*32kB (U) 1*64kB (U) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 26848kB [ 433.135269] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 433.146557] Node 0 DMA32: 1576*4kB (UME) 602*8kB (UME) 190*16kB (UME) 84*32kB (UME) 18*64kB (UM) 1*128kB (M) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18128kB [ 433.165356] IPVS: ftp: loaded support on port[0] = 21 [ 433.170660] Bluetooth: hci2 command 0x0409 tx timeout [ 433.178939] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 433.187690] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 433.198562] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 433.207650] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 433.225782] Node 1 Normal: 26*4kB (UM) 3*8kB (UM) 6*16kB (UM) 830*32kB (U) 1*64kB (U) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 26848kB [ 433.246269] 15156 total pagecache pages [ 433.250364] 0 pages in swap cache [ 433.253821] Swap cache stats: add 0, delete 0, find 0/0 [ 433.265681] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 433.274655] Free swap = 0kB [ 433.277674] Total swap = 0kB [ 433.287666] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 433.296355] 2097051 pages RAM [ 433.307460] 0 pages HighMem/MovableOnly [ 433.311649] Bluetooth: hci4 command 0x0409 tx timeout [ 433.316981] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 433.332295] syz-executor.2: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 433.346735] 363849 pages reserved [ 433.354575] 0 pages cma reserved [ 433.361187] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 433.376567] 15156 total pagecache pages [ 433.378418] syz-executor.2 cpuset= [ 433.382809] 0 pages in swap cache [ 433.386250] / [ 433.386352] Swap cache stats: add 0, delete 0, find 0/0 [ 433.398691] mems_allowed=0-1 [ 433.405591] Free swap = 0kB [ 433.408619] Total swap = 0kB [ 433.418974] 2097051 pages RAM [ 433.425640] CPU: 1 PID: 16392 Comm: syz-executor.2 Not tainted 4.14.232-syzkaller #0 [ 433.426435] 0 pages HighMem/MovableOnly [ 433.433547] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 433.433553] Call Trace: [ 433.433576] dump_stack+0x1b2/0x281 [ 433.433589] warn_alloc.cold+0x96/0x1cc [ 433.433601] ? zone_watermark_ok_safe+0x220/0x220 [ 433.433610] ? usleep_range+0x130/0x130 [ 433.433619] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 433.433631] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 433.433642] ? run_timer_softirq+0x5a0/0x5a0 [ 433.433657] __alloc_pages_nodemask+0x2127/0x2720 [ 433.437627] 363849 pages reserved [ 433.447123] ? lock_acquire+0x170/0x3f0 [ 433.447141] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 433.447150] ? ion_page_pool_alloc+0x9e/0x1b0 [ 433.447167] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 433.447185] alloc_pages_current+0x155/0x260 [ 433.449786] 0 pages cma reserved [ 433.453423] ion_page_pool_alloc+0x118/0x1b0 [ 433.457371] Out of memory (oom_kill_allocating_task): Kill process 16536 (systemd-journal) score 0 or sacrifice child [ 433.462219] ion_system_heap_allocate+0x133/0x8c0 [ 433.462233] ? _raw_spin_unlock+0x29/0x40 [ 433.462241] ? _ion_heap_freelist_drain+0x6e/0x410 [ 433.462250] ? ion_system_contig_heap_create+0x130/0x130 [ 433.462261] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 433.462275] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 433.466268] Killed process 16536 (systemd-journal) total-vm:46096kB, anon-rss:476kB, file-rss:4kB, shmem-rss:1788kB [ 433.471357] ion_alloc+0x27a/0x810 [ 433.471373] ? ion_dma_buf_release+0x40/0x40 [ 433.471385] ? __might_fault+0x177/0x1b0 [ 433.471396] ion_ioctl+0xea/0x1f0 [ 433.471407] ? ion_query_heaps+0x360/0x360 [ 433.511379] systemd-journal: [ 433.512255] ? ion_query_heaps+0x360/0x360 [ 433.515589] page allocation failure: order:1 [ 433.519989] do_vfs_ioctl+0x75a/0xff0 [ 433.520002] ? ioctl_preallocate+0x1a0/0x1a0 [ 433.520012] ? lock_downgrade+0x740/0x740 [ 433.520024] ? __fget+0x225/0x360 [ 433.520034] ? do_vfs_ioctl+0xff0/0xff0 [ 433.530804] , mode:0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask= [ 433.535612] ? security_file_ioctl+0x83/0xb0 [ 433.539795] (null) [ 433.544686] SyS_ioctl+0x7f/0xb0 [ 433.550295] systemd-journal cpuset= [ 433.555256] ? do_vfs_ioctl+0xff0/0xff0 [ 433.560351] / [ 433.570847] do_syscall_64+0x1d5/0x640 [ 433.570865] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 433.570879] RIP: 0033:0x4665f9 [ 433.570884] RSP: 002b:00007ff3638e3188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 433.574602] mems_allowed=0-1 [ 433.579055] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 433.579061] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000005 [ 433.579066] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 433.579070] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 433.579075] R13: 00007ffe909c1c6f R14: 00007ff3638e3300 R15: 0000000000022000 [ 433.722378] oom_reaper: reaped process 16536 (systemd-journal), now anon-rss:0kB, file-rss:0kB, shmem-rss:1788kB [ 433.723812] Mem-Info: [ 433.751768] syz-fuzzer invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 433.782932] active_anon:12048 inactive_anon:14856 isolated_anon:0 [ 433.782932] active_file:4 inactive_file:7 isolated_file:0 [ 433.782932] unevictable:0 dirty:0 writeback:0 unstable:0 [ 433.782932] slab_reclaimable:13367 slab_unreclaimable:118774 [ 433.782932] mapped:52676 shmem:15125 pagetables:805 bounce:0 [ 433.782932] free:13975 free_pcp:120 free_cma:0 [ 433.803162] syz-fuzzer cpuset= [ 433.834935] Node 0 active_anon:46260kB inactive_anon:51280kB active_file:112kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:175888kB dirty:0kB writeback:0kB shmem:52292kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 433.843124] / [ 433.884243] Node 1 active_anon:1932kB inactive_anon:8144kB active_file:4kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:34816kB dirty:0kB writeback:0kB shmem:8208kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 433.919515] mems_allowed=0-1 [ 433.922669] CPU: 1 PID: 7996 Comm: syz-fuzzer Not tainted 4.14.232-syzkaller #0 [ 433.928339] Node 0 [ 433.930106] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 433.930109] Call Trace: [ 433.930126] dump_stack+0x1b2/0x281 [ 433.930138] dump_header+0x178/0x82f [ 433.930151] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 433.932392] DMA free:10968kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 433.941725] ? ___ratelimit+0x2cd/0x530 [ 433.941736] oom_kill_process.cold+0x10/0xa40 [ 433.941756] out_of_memory+0xe3e/0x1190 [ 433.941768] ? oom_killer_disable+0x1c0/0x1c0 [ 433.944333] lowmem_reserve[]: [ 433.947956] ? mutex_trylock+0x152/0x1a0 [ 433.951676] 0 [ 433.956739] __alloc_pages_nodemask+0x23e1/0x2720 [ 433.982609] 2717 [ 433.986557] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 433.991038] 2718 [ 433.994983] alloc_pages_current+0x155/0x260 [ 434.000756] 2718 [ 434.003844] filemap_fault+0x11a1/0x1ad0 [ 434.007996] 2718 [ 434.009795] ext4_filemap_fault+0x84/0xb0 [ 434.009804] __do_fault+0xfa/0x380 [ 434.009814] __handle_mm_fault+0x2497/0x4620 [ 434.009825] ? vm_insert_page+0x7c0/0x7c0 [ 434.016709] ? mark_held_locks+0xa6/0xf0 [ 434.021565] Node 0 [ 434.023578] handle_mm_fault+0x455/0x9c0 [ 434.027984] DMA32 free:19748kB min:36200kB low:45248kB high:54296kB active_anon:46260kB inactive_anon:51280kB active_file:112kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7616kB pagetables:2764kB bounce:0kB free_pcp:488kB local_pcp:0kB free_cma:0kB [ 434.030044] __do_page_fault+0x549/0xad0 [ 434.030056] ? spurious_fault+0x640/0x640 [ 434.030070] ? do_page_fault+0x60/0x500 [ 434.034126] lowmem_reserve[]: [ 434.036192] ? page_fault+0x2f/0x50 [ 434.040347] 0 [ 434.044708] page_fault+0x45/0x50 [ 434.049128] 0 [ 434.053231] RIP: 184f420:0x6ccbb7dfd9 [ 434.057269] 0 [ 434.059516] RSP: 036d:00007ffe61253b50 EFLAGS: 00000003 [ 434.105190] CPU: 1 PID: 16536 Comm: systemd-journal Not tainted 4.14.232-syzkaller #0 [ 434.129705] 0 [ 434.137112] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 434.137120] 0 [ 434.138906] Call Trace: [ 434.150071] dump_stack+0x1b2/0x281 [ 434.150087] warn_alloc.cold+0x96/0x1cc [ 434.152663] Node 0 [ 434.156360] ? zone_watermark_ok_safe+0x220/0x220 [ 434.160359] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 434.162537] ? unreserve_highatomic_pageblock+0x336/0x460 [ 434.167353] lowmem_reserve[]: [ 434.192252] ? wait_for_completion_io+0x10/0x10 [ 434.192267] __alloc_pages_nodemask+0x2127/0x2720 [ 434.192287] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 434.192307] ? cache_grow_begin+0x3f/0x700 [ 434.197835] 0 [ 434.200934] cache_grow_begin+0x91/0x700 [ 434.200947] fallback_alloc+0x207/0x2c0 [ 434.200963] kmem_cache_alloc+0x1e5/0x3c0 [ 434.205616] 0 [ 434.210897] getname_flags+0xc8/0x550 [ 434.210909] do_sys_open+0x1ce/0x410 [ 434.210918] ? filp_open+0x60/0x60 [ 434.210928] ? do_syscall_64+0x4c/0x640 [ 434.215869] 0 [ 434.220090] ? do_sys_open+0x410/0x410 [ 434.220100] do_syscall_64+0x1d5/0x640 [ 434.220114] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 434.220123] RIP: 0033:0x7f513e122840 [ 434.221927] 0 [ 434.225968] RSP: 002b:00007ffd4741b178 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 434.229974] 0 [ 434.234085] RAX: ffffffffffffffda RBX: 00007ffd4741b480 RCX: 00007f513e122840 [ 434.239732] RDX: 00000000000001a0 RSI: 0000000000080042 RDI: 000056291a77e770 [ 434.239736] RBP: 000000000000000d R08: 000000000000ffc0 R09: 00000000ffffffff [ 434.239740] R10: 0000000000000069 R11: 0000000000000246 R12: 00000000ffffffff [ 434.239744] R13: 000056291a779040 R14: 00007ffd4741b440 R15: 000056291a77e0c0 [ 434.333110] Mem-Info: [ 434.335552] active_anon:12029 inactive_anon:14856 isolated_anon:0 [ 434.335552] active_file:39 inactive_file:0 isolated_file:0 [ 434.335552] unevictable:0 dirty:0 writeback:0 unstable:0 [ 434.335552] slab_reclaimable:13367 slab_unreclaimable:118345 [ 434.335552] mapped:52676 shmem:15125 pagetables:805 bounce:0 [ 434.335552] free:14402 free_pcp:109 free_cma:0 [ 434.384024] Node 0 active_anon:46184kB inactive_anon:51280kB active_file:156kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:175888kB dirty:0kB writeback:0kB shmem:52292kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 434.427122] Node 1 active_anon:1932kB inactive_anon:8144kB active_file:0kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:34816kB dirty:0kB writeback:0kB shmem:8208kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 434.474974] Node 1 Normal free:26848kB min:53696kB low:67120kB high:80544kB active_anon:1932kB inactive_anon:8144kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:416kB pagetables:456kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 434.503237] Node 0 DMA free:10968kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 434.518445] lowmem_reserve[]: 0 0 0 0 0 [ 434.556964] Node 0 DMA: 14*4kB (UE) 6*8kB (U) 7*16kB (UE) 22*32kB (UE) 21*64kB (UE) 6*128kB (UE) 3*256kB (UE) 2*512kB (UE) 2*1024kB (UE) 2*2048kB (ME) 0*4096kB = 10968kB [ 434.588000] Node 0 DMA32: 1576*4kB (UME) 810*8kB (UME) 190*16kB (UME) 84*32kB (UME) 18*64kB (UM) 1*128kB (M) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 19792kB [ 434.593161] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 434.618427] Node 0 DMA32 free:19792kB min:36200kB low:45248kB high:54296kB active_anon:46184kB inactive_anon:51280kB active_file:128kB inactive_file:40kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7616kB pagetables:2764kB bounce:0kB free_pcp:252kB local_pcp:252kB free_cma:0kB [ 434.618976] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 434.693489] Node 1 Normal: 26*4kB (UM) 3*8kB (UM) 6*16kB (UM) 830*32kB (U) 1*64kB (U) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 26848kB [ 434.715618] lowmem_reserve[]: 0 0 0 0 0 [ 434.716319] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 434.719739] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 434.719759] lowmem_reserve[]: 0 0 0 0 [ 434.734507] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 434.785619] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 434.812786] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 434.813243] 0 [ 434.835038] 15155 total pagecache pages [ 434.841116] Node 1 Normal free:26848kB min:53696kB low:67120kB high:80544kB active_anon:1932kB inactive_anon:8144kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:416kB pagetables:456kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 434.847246] 0 pages in swap cache [ 434.886337] Swap cache stats: add 0, delete 0, find 0/0 [ 434.896881] Free swap = 0kB [ 434.908325] Total swap = 0kB [ 434.917154] 2097051 pages RAM [ 434.928741] 0 pages HighMem/MovableOnly [ 434.937424] lowmem_reserve[]: 0 0 0 0 0 [ 434.937844] 363849 pages reserved [ 434.942005] Node 0 DMA: 14*4kB (UE) 6*8kB (U) 7*16kB (UE) 22*32kB (UE) 21*64kB (UE) 6*128kB (UE) 3*256kB (UE) 2*512kB (UE) 2*1024kB (UE) 2*2048kB (ME) 0*4096kB = 10968kB [ 434.953756] 0 pages cma reserved [ 435.031531] Node 0 DMA32: 953*4kB (ME) 601*8kB (ME) 187*16kB (ME) 32*32kB (ME) 602*64kB (UM) 1*128kB (M) 0*256kB 0*512kB 2*1024kB (U) 0*2048kB 0*4096kB = 53340kB [ 435.081745] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 435.124542] Node 1 Normal: 26*4kB (UM) 3*8kB (UM) 6*16kB (UM) 831*32kB (U) 1*64kB (U) 0*128kB 0*256kB 0*512kB 15*1024kB (U) 0*2048kB 0*4096kB = 42240kB [ 435.168205] IPVS: ftp: loaded support on port[0] = 21 [ 435.195005] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 435.229018] Bluetooth: hci2 command 0x041b tx timeout [ 435.239062] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 435.247824] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 435.279403] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 435.288046] 15878 total pagecache pages [ 435.321818] 0 pages in swap cache [ 435.325307] Swap cache stats: add 0, delete 0, find 0/0 [ 435.349206] Free swap = 0kB [ 435.353416] Total swap = 0kB [ 435.357277] 2097051 pages RAM [ 435.379547] 0 pages HighMem/MovableOnly [ 435.383545] 363849 pages reserved [ 435.386986] 0 pages cma reserved [ 435.399837] Bluetooth: hci4 command 0x041b tx timeout [ 435.412118] Out of memory (oom_kill_allocating_task): Kill process 7996 (syz-fuzzer) score 0 or sacrifice child [ 435.449036] Killed process 15920 (syz-executor.5) total-vm:84924kB, anon-rss:64kB, file-rss:0kB, shmem-rss:0kB [ 435.481606] oom_reaper: reaped process 15920 (syz-executor.5), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 435.575495] systemd[1]: systemd-journald.service: Failed with result 'signal'. [ 435.578753] chnl_net:caif_netlink_parms(): no params data found [ 435.601751] systemd[1]: systemd-journald.service: Service has no hold-off time, scheduling restart. [ 435.676601] systemd[1]: Stopped Flush Journal to Persistent Storage. [ 435.719262] systemd[1]: Stopping Flush Journal to Persistent Storage... [ 435.726271] systemd[1]: Stopped Journal Service. [ 435.794910] systemd[1]: Starting Journal Service... [ 435.956668] chnl_net:caif_netlink_parms(): no params data found [ 435.996394] systemd-journald[16755]: File /run/log/journal/04d8c135ee6b410280ba31a58c89679d/system.journal corrupted or uncleanly shut down, renaming and replacing. 11:46:31 executing program 2: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x10001, 0x400) r1 = syz_open_dev$vcsn(&(0x7f0000000140), 0x7, 0x24c042) ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r0, 0x7a9, &(0x7f0000000040)={{@my=0x0, 0x7f}, 0x40, 0x3, 0x0, 0x6, 0xf1, 0x5, 0x39, 0x3}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(0xffffffffffffffff, 0x7a8, &(0x7f0000000080)={{@host, 0x20000}, @hyper, 0x4, 0x9, 0x0, 0x5, 0x6, 0xd350}) socketpair(0x6, 0x80000, 0x10001, &(0x7f0000000180)) ioctl$SNAPSHOT_ATOMIC_RESTORE(r1, 0x3304) r2 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0), 0x20000, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000100)={0x80000001, 0x27}) [ 436.141386] bridge0: port 1(bridge_slave_0) entered blocking state [ 436.193002] bridge0: port 1(bridge_slave_0) entered disabled state [ 436.197564] systemd-journald[16755]: /dev/kmsg buffer overrun, some messages lost. [ 436.200676] device bridge_slave_0 entered promiscuous mode [ 436.235639] bridge0: port 2(bridge_slave_1) entered blocking state [ 436.258748] bridge0: port 2(bridge_slave_1) entered disabled state [ 436.561531] syz-executor.2: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 436.664774] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 436.707304] CPU: 0 PID: 16831 Comm: syz-executor.2 Not tainted 4.14.232-syzkaller #0 [ 436.715345] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 436.725138] Call Trace: [ 436.727749] dump_stack+0x1b2/0x281 [ 436.731389] warn_alloc.cold+0x96/0x1cc [ 436.735476] ? zone_watermark_ok_safe+0x220/0x220 [ 436.740340] __alloc_pages_nodemask+0x2127/0x2720 [ 436.745278] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 436.750320] ? lock_acquire+0x170/0x3f0 [ 436.754312] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 436.759183] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 436.764650] ? __mutex_unlock_slowpath+0x75/0x770 [ 436.769510] alloc_pages_current+0x155/0x260 [ 436.773926] ion_page_pool_alloc+0x118/0x1b0 [ 436.778420] ion_system_heap_allocate+0x133/0x8c0 [ 436.783262] ? ion_alloc+0x187/0x810 [ 436.786980] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 436.792428] ? ion_system_contig_heap_create+0x130/0x130 [ 436.797881] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 436.802902] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 436.807735] ion_alloc+0x204/0x810 [ 436.811282] ? ion_dma_buf_release+0x40/0x40 [ 436.815691] ? __might_fault+0x177/0x1b0 [ 436.819746] ion_ioctl+0xea/0x1f0 [ 436.823186] ? ion_query_heaps+0x360/0x360 [ 436.827413] ? ion_query_heaps+0x360/0x360 [ 436.831637] do_vfs_ioctl+0x75a/0xff0 [ 436.835427] ? ioctl_preallocate+0x1a0/0x1a0 [ 436.839834] ? lock_downgrade+0x740/0x740 [ 436.843983] ? __fget+0x225/0x360 [ 436.847448] ? do_vfs_ioctl+0xff0/0xff0 [ 436.851421] ? security_file_ioctl+0x83/0xb0 [ 436.855878] SyS_ioctl+0x7f/0xb0 [ 436.859247] ? do_vfs_ioctl+0xff0/0xff0 [ 436.863216] do_syscall_64+0x1d5/0x640 [ 436.867097] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 436.872283] RIP: 0033:0x4665f9 [ 436.875475] RSP: 002b:00007ff3638e3188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 436.883173] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 436.890449] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000005 [ 436.897709] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 436.904971] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 436.912234] R13: 00007ffe909c1c6f R14: 00007ff3638e3300 R15: 0000000000022000 [ 436.952440] oom_reaper: reaped process 16594 (syz-executor.0), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 437.033608] systemd-rfkill invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 437.054899] systemd-rfkill cpuset=/ mems_allowed=0-1 [ 437.062385] CPU: 0 PID: 16578 Comm: systemd-rfkill Not tainted 4.14.232-syzkaller #0 [ 437.070272] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 437.079658] Call Trace: [ 437.082272] dump_stack+0x1b2/0x281 [ 437.085904] dump_header+0x178/0x82f [ 437.089618] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 437.094719] ? ___ratelimit+0x2cd/0x530 [ 437.098693] oom_kill_process.cold+0x10/0xa40 [ 437.103205] out_of_memory+0xe3e/0x1190 [ 437.107181] ? oom_killer_disable+0x1c0/0x1c0 [ 437.111695] ? mutex_trylock+0x152/0x1a0 [ 437.115756] __alloc_pages_nodemask+0x23e1/0x2720 [ 437.120614] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 437.125477] alloc_pages_current+0x155/0x260 [ 437.129886] filemap_fault+0x11a1/0x1ad0 [ 437.133962] ext4_filemap_fault+0x84/0xb0 [ 437.138129] __do_fault+0xfa/0x380 [ 437.141665] __handle_mm_fault+0x2497/0x4620 [ 437.146075] ? vm_insert_page+0x7c0/0x7c0 [ 437.150222] ? compat_poll_select_copy_remaining+0x2c0/0x2c0 [ 437.156104] ? ktime_get_ts64+0x261/0x3a0 [ 437.160262] ? mark_held_locks+0xa6/0xf0 [ 437.164324] handle_mm_fault+0x455/0x9c0 [ 437.168402] __do_page_fault+0x549/0xad0 [ 437.172468] ? spurious_fault+0x640/0x640 [ 437.176613] ? do_page_fault+0x60/0x500 [ 437.180591] ? page_fault+0x2f/0x50 [ 437.184218] page_fault+0x45/0x50 [ 437.187695] RIP: 22808c20: (null) [ 437.188910] syz-executor.0: [ 437.191915] RSP: 0000:00007f72228075d8 EFLAGS: 00000001 [ 437.194939] page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 437.210073] Mem-Info: [ 437.218294] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 437.229174] CPU: 1 PID: 16594 Comm: syz-executor.0 Not tainted 4.14.232-syzkaller #0 [ 437.229437] active_anon:12167 inactive_anon:16887 isolated_anon:0 [ 437.229437] active_file:17 inactive_file:7 isolated_file:2 [ 437.229437] unevictable:0 dirty:0 writeback:0 unstable:0 [ 437.229437] slab_reclaimable:13472 slab_unreclaimable:117386 [ 437.229437] mapped:52531 shmem:17173 pagetables:769 bounce:0 [ 437.229437] free:13923 free_pcp:266 free_cma:0 [ 437.237055] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 437.237081] Call Trace: [ 437.270570] warn_alloc_show_mem: 1 callbacks suppressed [ 437.270573] Mem-Info: [ 437.279698] dump_stack+0x1b2/0x281 [ 437.279713] warn_alloc.cold+0x96/0x1cc [ 437.279725] ? zone_watermark_ok_safe+0x220/0x220 [ 437.279735] ? usleep_range+0x130/0x130 [ 437.279747] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 437.282347] Node 0 active_anon:46712kB inactive_anon:51460kB active_file:52kB inactive_file:20kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:174088kB dirty:0kB writeback:0kB shmem:52540kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 437.288460] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 437.291258] active_anon:12167 inactive_anon:16887 isolated_anon:0 [ 437.291258] active_file:17 inactive_file:7 isolated_file:2 [ 437.291258] unevictable:0 dirty:0 writeback:0 unstable:0 [ 437.291258] slab_reclaimable:13472 slab_unreclaimable:117386 [ 437.291258] mapped:52531 shmem:17173 pagetables:769 bounce:0 [ 437.291258] free:13923 free_pcp:266 free_cma:0 [ 437.294805] ? run_timer_softirq+0x5a0/0x5a0 [ 437.298903] Node 1 active_anon:1956kB inactive_anon:16088kB active_file:16kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):8kB mapped:36036kB dirty:0kB writeback:0kB shmem:16152kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 437.303677] __alloc_pages_nodemask+0x2127/0x2720 [ 437.307618] Node 0 [ 437.312740] ? lock_acquire+0x170/0x3f0 [ 437.312756] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 437.312765] ? ion_page_pool_alloc+0x9e/0x1b0 [ 437.312782] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 437.340526] Node 0 active_anon:46712kB inactive_anon:51460kB active_file:52kB inactive_file:20kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:174088kB dirty:0kB writeback:0kB shmem:52540kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 437.345506] ? __sanitizer_cov_trace_pc+0x23/0x50 [ 437.378707] DMA free:10976kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 437.383042] alloc_pages_current+0x155/0x260 [ 437.383057] ion_page_pool_alloc+0x118/0x1b0 [ 437.383068] ion_system_heap_allocate+0x133/0x8c0 [ 437.383079] ? ion_alloc+0x187/0x810 [ 437.411589] Node 1 active_anon:1956kB inactive_anon:16088kB active_file:16kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):8kB mapped:36036kB dirty:0kB writeback:0kB shmem:16152kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 437.416360] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 437.418564] Node 0 DMA free:10976kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 437.422533] ? ion_system_contig_heap_create+0x130/0x130 [ 437.422543] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 437.422554] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 437.422570] ion_alloc+0x204/0x810 [ 437.422584] ? ion_dma_buf_release+0x40/0x40 [ 437.422596] ? __might_fault+0x177/0x1b0 [ 437.427431] lowmem_reserve[]: [ 437.431934] ion_ioctl+0xea/0x1f0 [ 437.431943] ? ion_query_heaps+0x360/0x360 [ 437.431954] ? ion_query_heaps+0x360/0x360 [ 437.431963] do_vfs_ioctl+0x75a/0xff0 [ 437.431975] ? ioctl_preallocate+0x1a0/0x1a0 [ 437.437422] 0 [ 437.466163] ? lock_downgrade+0x740/0x740 [ 437.466179] ? __fget+0x225/0x360 [ 437.466188] ? do_vfs_ioctl+0xff0/0xff0 [ 437.466199] ? security_file_ioctl+0x83/0xb0 [ 437.466211] SyS_ioctl+0x7f/0xb0 [ 437.471527] lowmem_reserve[]: [ 437.496992] ? do_vfs_ioctl+0xff0/0xff0 [ 437.497006] do_syscall_64+0x1d5/0x640 [ 437.497020] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 437.497028] RIP: 0033:0x4665f9 [ 437.497037] RSP: 002b:00007f78e5f89188 EFLAGS: 00000246 [ 437.501476] 2717 [ 437.505826] ORIG_RAX: 0000000000000010 [ 437.505835] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 437.510698] 0 [ 437.514363] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000003 [ 437.514372] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 437.541492] 2718 [ 437.546885] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 437.546895] R13: 00007ffd4957c29f R14: 00007f78e5f89300 R15: 0000000000022000 [ 437.573175] 2717 [ 437.588898] 2718 [ 437.604408] Bluetooth: hci2 command 0x040f tx timeout [ 437.628835] 2718 [ 437.684826] Bluetooth: hci4 command 0x040f tx timeout [ 437.701214] 2718 2718 2718 [ 437.701229] Node 0 DMA32 free:25872kB min:36200kB low:45248kB high:54296kB active_anon:46712kB inactive_anon:51460kB active_file:52kB inactive_file:20kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7616kB pagetables:2508kB bounce:0kB free_pcp:756kB local_pcp:92kB free_cma:0kB [ 437.858860] Node 0 DMA32 free:105616kB min:36200kB low:45248kB high:54296kB active_anon:46712kB inactive_anon:51460kB active_file:52kB inactive_file:420kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7616kB pagetables:2508kB bounce:0kB free_pcp:1016kB local_pcp:340kB free_cma:0kB [ 437.913033] lowmem_reserve[]: 0 0 0 0 0 [ 437.917929] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 437.954541] lowmem_reserve[]: 0 0 0 0 0 [ 437.963304] Node 1 Normal free:93424kB min:53696kB low:67120kB high:80544kB active_anon:1956kB inactive_anon:16088kB active_file:16kB inactive_file:1016kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:480kB pagetables:568kB bounce:0kB free_pcp:812kB local_pcp:736kB free_cma:0kB [ 437.998321] lowmem_reserve[]: 0 0 0 0 0 [ 438.018807] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 438.095020] lowmem_reserve[]: 0 0 0 0 0 [ 438.100455] Node 0 DMA: 14*4kB (UE) 5*8kB (U) 7*16kB (UE) 22*32kB (UE) 22*64kB (UE) 6*128kB (UE) 3*256kB (UE) 2*512kB (UE) 2*1024kB (UE) 2*2048kB (ME) 0*4096kB = 11024kB [ 438.115717] lowmem_reserve[]: 0 0 0 0 0 [ 438.134257] device bridge_slave_1 entered promiscuous mode [ 438.140054] Node 1 Normal free:113280kB min:53696kB low:67120kB high:80544kB active_anon:1956kB inactive_anon:16088kB active_file:528kB inactive_file:64kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:416kB pagetables:568kB bounce:0kB free_pcp:1356kB local_pcp:688kB free_cma:0kB [ 438.168795] Node 0 DMA32: 8315*4kB (UMEH) 667*8kB (UMEH) 1048*16kB (UMEH) 448*32kB (UMEH) 450*64kB (UME) 22*128kB (UM) 29*256kB (UM) 1*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 109252kB [ 438.236730] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 438.246924] lowmem_reserve[]: 0 0 0 0 0 [ 438.256935] Node 0 DMA: 14*4kB (UE) 5*8kB (U) 7*16kB (UE) 22*32kB (UE) 22*64kB (UE) 6*128kB (UE) 3*256kB (UE) 2*512kB (UE) 2*1024kB (UE) 2*2048kB (ME) 0*4096kB = 11024kB [ 438.272716] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 438.285343] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 438.323529] Node 0 DMA32: 5478*4kB (UEH) 699*8kB (UEH) 1011*16kB (UEH) 442*32kB (UEH) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 57824kB [ 438.342535] Node 1 Normal: 6795*4kB (UM) 119*8kB (UM) 105*16kB (UM) 255*32kB (UM) 37*64kB (UME) 42*128kB (UME) 8*256kB (UM) 65*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 81044kB [ 438.381508] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 438.412443] Node 1 Normal: 6802*4kB (UM) 119*8kB (UM) 105*16kB (UM) 258*32kB (UM) 22*64kB (UME) 8*128kB (UME) 3*256kB (UM) 51*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 67408kB [ 438.454799] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 438.476777] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 438.485516] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 438.486188] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 438.494422] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 438.494427] 18049 total pagecache pages [ 438.520332] 0 pages in swap cache [ 438.523804] Swap cache stats: add 0, delete 0, find 0/0 [ 438.531118] Free swap = 0kB [ 438.534178] Total swap = 0kB [ 438.537199] 2097051 pages RAM [ 438.542916] 0 pages HighMem/MovableOnly [ 438.546920] 363849 pages reserved [ 438.552951] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 438.572759] 0 pages cma reserved [ 438.576165] Out of memory (oom_kill_allocating_task): Kill process 16578 (systemd-rfkill) score 0 or sacrifice child [ 438.579379] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 438.628566] Killed process 16578 (systemd-rfkill) total-vm:37800kB, anon-rss:372kB, file-rss:0kB, shmem-rss:0kB [ 438.635036] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 438.662786] 17774 total pagecache pages [ 438.666887] 0 pages in swap cache [ 438.683603] Swap cache stats: add 0, delete 0, find 0/0 [ 438.689781] oom_reaper: reaped process 16578 (systemd-rfkill), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 438.708828] Free swap = 0kB [ 438.715472] Total swap = 0kB [ 438.728861] 2097051 pages RAM [ 438.749630] 0 pages HighMem/MovableOnly [ 438.774919] 363849 pages reserved [ 438.796376] systemd[1]: systemd-rfkill.service: Main process exited, code=killed, status=9/KILL [ 438.822155] 0 pages cma reserved [ 438.892618] systemd[1]: systemd-rfkill.service: Unit entered failed state. [ 438.937397] systemd[1]: systemd-rfkill.service: Failed with result 'signal'. [ 439.191228] syz-executor.0: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 439.203510] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 439.208806] CPU: 1 PID: 16594 Comm: syz-executor.0 Not tainted 4.14.232-syzkaller #0 [ 439.216722] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 439.226257] Call Trace: [ 439.228885] dump_stack+0x1b2/0x281 [ 439.232615] warn_alloc.cold+0x96/0x1cc [ 439.236608] ? zone_watermark_ok_safe+0x220/0x220 [ 439.241503] __alloc_pages_nodemask+0x2127/0x2720 [ 439.246370] ? lock_acquire+0x170/0x3f0 [ 439.250364] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 439.255323] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 439.261147] ? __mutex_unlock_slowpath+0x75/0x770 [ 439.266017] alloc_pages_current+0x155/0x260 [ 439.270441] ion_page_pool_alloc+0x118/0x1b0 [ 439.274856] ion_system_heap_allocate+0x133/0x8c0 [ 439.279705] ? _raw_spin_unlock+0x29/0x40 [ 439.283852] ? _ion_heap_freelist_drain+0x6e/0x410 [ 439.288783] ? ion_system_contig_heap_create+0x130/0x130 [ 439.294231] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 439.299255] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 439.304103] ion_alloc+0x27a/0x810 [ 439.307684] ? ion_dma_buf_release+0x40/0x40 [ 439.312210] ? __might_fault+0x177/0x1b0 [ 439.316276] ion_ioctl+0xea/0x1f0 [ 439.319819] ? ion_query_heaps+0x360/0x360 [ 439.324059] ? ion_query_heaps+0x360/0x360 [ 439.328405] do_vfs_ioctl+0x75a/0xff0 [ 439.332240] ? ioctl_preallocate+0x1a0/0x1a0 [ 439.336654] ? lock_downgrade+0x740/0x740 [ 439.340853] ? __fget+0x225/0x360 [ 439.344308] ? do_vfs_ioctl+0xff0/0xff0 [ 439.348365] ? security_file_ioctl+0x83/0xb0 [ 439.352781] SyS_ioctl+0x7f/0xb0 [ 439.356186] ? do_vfs_ioctl+0xff0/0xff0 [ 439.360152] do_syscall_64+0x1d5/0x640 [ 439.364034] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 439.369211] RIP: 0033:0x4665f9 [ 439.372389] RSP: 002b:00007f78e5f89188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 439.380088] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 439.387349] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000003 [ 439.394623] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 439.401880] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 439.409141] R13: 00007ffd4957c29f R14: 00007f78e5f89300 R15: 0000000000022000 [ 439.417839] systemd[1]: Started Journal Service. [ 439.475336] warn_alloc_show_mem: 1 callbacks suppressed [ 439.475340] Mem-Info: [ 439.486806] active_anon:12081 inactive_anon:16887 isolated_anon:12 [ 439.486806] active_file:1057 inactive_file:1001 isolated_file:0 [ 439.486806] unevictable:0 dirty:12 writeback:0 unstable:0 [ 439.486806] slab_reclaimable:13461 slab_unreclaimable:118880 [ 439.486806] mapped:53600 shmem:17173 pagetables:761 bounce:0 [ 439.486806] free:76590 free_pcp:275 free_cma:0 [ 439.521838] Node 0 active_anon:46268kB inactive_anon:51460kB active_file:4896kB inactive_file:3380kB unevictable:0kB isolated(anon):48kB isolated(file):0kB mapped:178260kB dirty:48kB writeback:0kB shmem:52540kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 439.539334] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 439.559396] Node 1 active_anon:1956kB inactive_anon:16088kB active_file:4kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:36240kB dirty:0kB writeback:0kB shmem:16152kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 439.569869] team0: Port device team_slave_0 added [ 439.587101] Node 0 [ 439.620498] bridge0: port 1(bridge_slave_0) entered blocking state [ 439.626889] DMA free:11020kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 439.630130] bridge0: port 1(bridge_slave_0) entered disabled state [ 439.689819] device bridge_slave_0 entered promiscuous mode [ 439.696938] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 439.710242] Bluetooth: hci2 command 0x0419 tx timeout [ 439.730112] team0: Port device team_slave_1 added [ 439.730294] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 439.735246] bridge0: port 2(bridge_slave_1) entered blocking state [ 439.749317] bridge0: port 2(bridge_slave_1) entered disabled state [ 439.762141] Node 0 DMA32 free:159568kB min:36200kB low:45248kB high:54296kB active_anon:46256kB inactive_anon:51460kB active_file:6448kB inactive_file:2680kB unevictable:0kB writepending:48kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7616kB pagetables:2476kB bounce:0kB free_pcp:640kB local_pcp:448kB free_cma:0kB [ 439.770018] device bridge_slave_1 entered promiscuous mode [ 439.791869] Bluetooth: hci4 command 0x0419 tx timeout [ 439.863553] lowmem_reserve[]: 0 0 0 0 0 [ 439.886735] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 439.907204] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 439.929940] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 439.931295] lowmem_reserve[]: [ 439.955860] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 439.958045] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 439.963780] 0 [ 439.972207] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 440.008727] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 440.012563] 0 [ 440.058711] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 440.082492] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 440.083233] 0 [ 440.090745] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 440.113057] 0 0 [ 440.115103] Node 1 Normal free:107960kB min:53696kB low:67120kB high:80544kB active_anon:1956kB inactive_anon:16088kB active_file:8kB inactive_file:0kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:416kB pagetables:568kB bounce:0kB free_pcp:732kB local_pcp:0kB free_cma:0kB [ 440.145743] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 440.149405] lowmem_reserve[]: 0 0 0 0 0 [ 440.168918] Node 0 DMA: 33*4kB (UE) 11*8kB (U) 7*16kB (UE) 22*32kB (UE) 20*64kB (UE) 6*128kB (UE) 3*256kB (UE) 2*512kB (UE) 2*1024kB (UE) 2*2048kB (ME) 0*4096kB = 11020kB [ 440.190033] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 440.190086] Node 0 DMA32: 216*4kB (UMEH) 423*8kB (UEH) 3089*16kB (UEH) 1465*32kB (UE) 1*64kB (U) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 100616kB [ 440.197433] team0: Port device team_slave_0 added [ 440.215437] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 440.257684] syz-executor.4: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 440.271024] Node 1 Normal: 15238*4kB (UM) 2304*8kB (UM) 868*16kB (UM) 746*32kB (UM) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 117144kB [ 440.279687] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 440.298719] CPU: 1 PID: 16391 Comm: syz-executor.4 Not tainted 4.14.232-syzkaller #0 [ 440.306643] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 440.316019] Call Trace: [ 440.318633] dump_stack+0x1b2/0x281 [ 440.322267] warn_alloc.cold+0x96/0x1cc [ 440.323948] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 440.326243] ? zone_watermark_ok_safe+0x220/0x220 [ 440.337392] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 440.339925] __alloc_pages_nodemask+0x2127/0x2720 [ 440.339943] ? lock_acquire+0x170/0x3f0 [ 440.339958] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 440.339977] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 440.347451] team0: Port device team_slave_1 added [ 440.351482] ? __mutex_unlock_slowpath+0x75/0x770 [ 440.351498] alloc_pages_current+0x155/0x260 [ 440.351511] ion_page_pool_alloc+0x118/0x1b0 [ 440.351521] ion_system_heap_allocate+0x133/0x8c0 [ 440.368824] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 440.370640] ? _raw_spin_unlock+0x29/0x40 [ 440.375493] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 440.379892] ? _ion_heap_freelist_drain+0x6e/0x410 [ 440.379901] ? ion_system_contig_heap_create+0x130/0x130 [ 440.379913] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 440.379922] ion_alloc+0x27a/0x810 [ 440.379935] ? ion_dma_buf_release+0x40/0x40 [ 440.379948] ? __might_fault+0x177/0x1b0 [ 440.398681] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 440.400263] ion_ioctl+0xea/0x1f0 [ 440.404409] 19385 total pagecache pages [ 440.413935] ? ion_query_heaps+0x360/0x360 [ 440.413946] ? retint_kernel+0x2d/0x2d [ 440.413955] ? putname+0xcd/0x110 [ 440.413962] ? ion_query_heaps+0x360/0x360 [ 440.413971] do_vfs_ioctl+0x75a/0xff0 [ 440.413992] ? ioctl_preallocate+0x1a0/0x1a0 [ 440.438681] 0 pages in swap cache [ 440.441178] ? lock_downgrade+0x740/0x740 [ 440.458946] Swap cache stats: add 0, delete 0, find 0/0 [ 440.461479] ? __fget+0x225/0x360 [ 440.465350] Free swap = 0kB [ 440.468792] ? do_vfs_ioctl+0xff0/0xff0 [ 440.468804] ? security_file_ioctl+0x83/0xb0 [ 440.468813] SyS_ioctl+0x7f/0xb0 [ 440.468821] ? do_vfs_ioctl+0xff0/0xff0 [ 440.468832] do_syscall_64+0x1d5/0x640 [ 440.468849] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 440.518661] Total swap = 0kB [ 440.520852] RIP: 0033:0x4665f9 [ 440.526466] 2097051 pages RAM [ 440.529467] RSP: 002b:00007f9108899188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 440.529477] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 440.529482] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000006 [ 440.529486] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 440.529491] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 440.529495] R13: 00007fffb2c94dcf R14: 00007f9108899300 R15: 0000000000022000 [ 440.558192] Mem-Info: [ 440.615978] active_anon:12040 inactive_anon:16887 isolated_anon:12 [ 440.615978] active_file:294 inactive_file:302 isolated_file:12 [ 440.615978] unevictable:0 dirty:19 writeback:0 unstable:0 [ 440.615978] slab_reclaimable:13449 slab_unreclaimable:118119 [ 440.615978] mapped:53161 shmem:17172 pagetables:739 bounce:0 [ 440.615978] free:25174 free_pcp:175 free_cma:0 [ 440.711634] Node 0 active_anon:46204kB inactive_anon:51460kB active_file:76kB inactive_file:12kB unevictable:0kB isolated(anon):48kB isolated(file):0kB mapped:174196kB dirty:76kB writeback:0kB shmem:52536kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 440.741511] 0 pages HighMem/MovableOnly [ 440.771676] systemd-journal invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=0 [ 440.784747] systemd-journal cpuset=/ mems_allowed=0-1 [ 440.790059] Node 1 active_anon:1956kB inactive_anon:16088kB active_file:8kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:36348kB dirty:0kB writeback:0kB shmem:16152kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 440.794371] 363849 pages reserved [ 440.823858] CPU: 1 PID: 16755 Comm: systemd-journal Not tainted 4.14.232-syzkaller #0 [ 440.831838] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 440.841201] Call Trace: [ 440.843791] dump_stack+0x1b2/0x281 [ 440.847420] dump_header+0x178/0x82f [ 440.851163] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 440.856268] ? ___ratelimit+0x2cd/0x530 [ 440.860242] oom_kill_process.cold+0x10/0xa40 [ 440.864743] out_of_memory+0xe3e/0x1190 [ 440.868747] ? oom_killer_disable+0x1c0/0x1c0 [ 440.870487] 0 pages cma reserved [ 440.873258] ? mutex_trylock+0x152/0x1a0 [ 440.880693] __alloc_pages_nodemask+0x23e1/0x2720 [ 440.885569] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 440.890412] ? __put_seccomp_filter+0x90/0x90 [ 440.894948] ? __seccomp_filter+0xbd/0xd60 [ 440.899186] ? cache_grow_begin+0x3f/0x700 [ 440.903424] cache_grow_begin+0x91/0x700 [ 440.907498] fallback_alloc+0x207/0x2c0 [ 440.911497] kmem_cache_alloc+0x1e5/0x3c0 [ 440.915645] getname_flags+0xc8/0x550 [ 440.919450] SyS_mkdirat+0x83/0x270 [ 440.923074] ? SyS_mknod+0x30/0x30 [ 440.926612] ? do_syscall_64+0x4c/0x640 [ 440.930585] ? SyS_mkdirat+0x270/0x270 [ 440.934474] do_syscall_64+0x1d5/0x640 [ 440.938377] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 440.943579] RIP: 0033:0x7f513148a687 [ 440.947299] RSP: 002b:00007ffe28700d28 EFLAGS: 00000293 ORIG_RAX: 0000000000000053 [ 440.955720] RAX: ffffffffffffffda RBX: 00007ffe28703c40 RCX: 00007f513148a687 [ 440.962992] RDX: 00007f5131efba00 RSI: 00000000000001ed RDI: 00005575a542d860 [ 440.970296] RBP: 00007ffe28700d60 R08: 0000000000000000 R09: 0000000000000000 [ 440.977598] R10: 0000000000000069 R11: 0000000000000293 R12: 0000000000000000 [ 440.984882] R13: 0000000000000000 R14: 00007ffe28703c40 R15: 00007ffe28701250 [ 441.001435] Node 0 DMA free:10964kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 441.004434] syz-executor.0: [ 441.032489] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 441.040633] Node 0 DMA32 free:18048kB min:36200kB low:45248kB high:54296kB active_anon:46204kB inactive_anon:51460kB active_file:16kB inactive_file:96kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7616kB pagetables:2388kB bounce:0kB free_pcp:140kB local_pcp:20kB free_cma:0kB [ 441.042515] page allocation failure: order:0 [ 441.073972] lowmem_reserve[]: 0 0 0 0 0 [ 441.082427] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 441.088572] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 441.112524] lowmem_reserve[]: [ 441.120623] (null) [ 441.121922] 0 [ 441.123743] syz-executor.0 cpuset= [ 441.125870] 0 0 [ 441.127658] / [ 441.142106] 0 [ 441.142688] mems_allowed=0-1 [ 441.143849] 0 [ 441.145649] CPU: 0 PID: 16594 Comm: syz-executor.0 Not tainted 4.14.232-syzkaller #0 [ 441.158654] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 441.158659] Call Trace: [ 441.158678] dump_stack+0x1b2/0x281 [ 441.158692] warn_alloc.cold+0x96/0x1cc [ 441.158704] ? zone_watermark_ok_safe+0x220/0x220 [ 441.158714] ? usleep_range+0x130/0x130 [ 441.158723] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 441.158735] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 441.158745] ? run_timer_softirq+0x5a0/0x5a0 [ 441.158761] __alloc_pages_nodemask+0x2127/0x2720 [ 441.174986] Node 1 [ 441.178271] ? lock_acquire+0x170/0x3f0 [ 441.186492] Normal free:26880kB min:53696kB low:67120kB high:80544kB active_anon:1956kB inactive_anon:16088kB active_file:4kB inactive_file:4kB unevictable:0kB writepending:4kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:416kB pagetables:568kB bounce:0kB free_pcp:124kB local_pcp:4kB free_cma:0kB [ 441.187080] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 441.202465] lowmem_reserve[]: [ 441.206394] ? ion_page_pool_alloc+0x9e/0x1b0 [ 441.224886] 0 [ 441.240332] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 441.240351] alloc_pages_current+0x155/0x260 [ 441.240365] ion_page_pool_alloc+0x118/0x1b0 [ 441.240374] ion_system_heap_allocate+0x133/0x8c0 [ 441.240385] ? _raw_spin_unlock+0x29/0x40 [ 441.240394] ? _ion_heap_freelist_drain+0x6e/0x410 [ 441.240403] ? ion_system_contig_heap_create+0x130/0x130 [ 441.240413] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 441.240424] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 441.240434] ion_alloc+0x27a/0x810 [ 441.240448] ? ion_dma_buf_release+0x40/0x40 [ 441.240460] ? __might_fault+0x177/0x1b0 [ 441.240471] ion_ioctl+0xea/0x1f0 [ 441.240480] ? ion_query_heaps+0x360/0x360 [ 441.240491] ? ion_query_heaps+0x360/0x360 [ 441.240501] do_vfs_ioctl+0x75a/0xff0 [ 441.240513] ? ioctl_preallocate+0x1a0/0x1a0 [ 441.255626] 0 [ 441.260271] ? lock_downgrade+0x740/0x740 [ 441.260286] ? __fget+0x225/0x360 [ 441.260295] ? do_vfs_ioctl+0xff0/0xff0 [ 441.260307] ? security_file_ioctl+0x83/0xb0 [ 441.260316] SyS_ioctl+0x7f/0xb0 [ 441.260324] ? do_vfs_ioctl+0xff0/0xff0 [ 441.260336] do_syscall_64+0x1d5/0x640 [ 441.260350] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 441.260358] RIP: 0033:0x4665f9 [ 441.260363] RSP: 002b:00007f78e5f89188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 441.260372] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 441.260381] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000003 [ 441.267344] 0 [ 441.269192] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 441.269197] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 441.269202] R13: 00007ffd4957c29f R14: 00007f78e5f89300 R15: 0000000000022000 [ 441.278221] Mem-Info: [ 441.286701] 0 [ 441.296960] active_anon:12040 inactive_anon:16887 isolated_anon:0 [ 441.296960] active_file:26 inactive_file:0 isolated_file:0 [ 441.296960] unevictable:0 dirty:3 writeback:0 unstable:0 [ 441.296960] slab_reclaimable:13449 slab_unreclaimable:118157 [ 441.296960] mapped:52611 shmem:17172 pagetables:739 bounce:0 [ 441.296960] free:13973 free_pcp:70 free_cma:0 [ 441.308649] 0 [ 441.319095] Node 0 active_anon:46204kB inactive_anon:51460kB active_file:100kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:174088kB dirty:8kB writeback:0kB shmem:52536kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 441.348615] Node 1 active_anon:1956kB inactive_anon:16088kB active_file:4kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:36356kB dirty:4kB writeback:0kB shmem:16152kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 441.352953] Node 0 [ 441.356321] Node 0 [ 441.360373] DMA: 19*4kB (UE) 11*8kB (U) [ 441.378626] DMA free:10964kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 441.478651] 7*16kB [ 441.657552] device hsr_slave_0 entered promiscuous mode [ 441.684973] device hsr_slave_1 entered promiscuous mode [ 441.700486] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 441.706198] (UE) 22*32kB (UE) 20*64kB (UE) 6*128kB (UE) 3*256kB (UE) 2*512kB (UE) 2*1024kB (UE) 2*2048kB (ME) 0*4096kB = 10964kB [ 441.718929] Node 0 DMA32 free:126516kB min:36200kB low:45248kB high:54296kB active_anon:46204kB inactive_anon:51460kB active_file:700kB inactive_file:3448kB unevictable:0kB writepending:8kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7680kB pagetables:2388kB bounce:0kB free_pcp:212kB local_pcp:152kB free_cma:0kB [ 441.749390] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 441.757093] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 441.769080] Node 0 DMA32: 804*4kB (UE) 426*8kB (UME) 129*16kB (ME) 31*32kB (UME) 224*64kB (UME) 137*128kB (UM) 106*256kB (UM) 42*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 90192kB [ 441.778745] lowmem_reserve[]: 0 0 0 0 0 [ 441.817080] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 441.833449] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 441.858659] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 441.888903] lowmem_reserve[]: 0 0 0 0 0 [ 441.892535] Node 1 Normal: 2*4kB (UM) 2*8kB (UM) 1*16kB (M) 622*32kB (UM) 4468*64kB (UME) 1336*128kB (UME) 423*256kB (U) 147*512kB (UM) 89*1024kB (U) 2*2048kB (U) 0*4096kB = 755688kB [ 441.893548] Node 1 [ 441.913609] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 441.928613] Normal free:739816kB min:53696kB low:67120kB high:80544kB active_anon:1956kB inactive_anon:16088kB active_file:204kB inactive_file:404kB unevictable:0kB writepending:4kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:416kB pagetables:568kB bounce:0kB free_pcp:236kB local_pcp:96kB free_cma:0kB [ 441.968609] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 441.991599] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 442.000785] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 442.018682] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 442.028825] lowmem_reserve[]: 0 0 0 0 0 [ 442.034194] Node 0 DMA: 23*4kB (UE) 11*8kB (U) 7*16kB (UE) 22*32kB (UE) 22*64kB (UE) 6*128kB (UE) 3*256kB (UE) 2*512kB (UE) 2*1024kB (UE) 2*2048kB (ME) 0*4096kB = 11108kB [ 442.048612] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 442.056859] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 442.064822] 19151 total pagecache pages [ 442.078646] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 442.098606] Node 0 DMA32: 803*4kB (E) 425*8kB (ME) 129*16kB (ME) 17*32kB (UME) 10*64kB (UME) 1*128kB (M) 53*256kB (UM) 42*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 45060kB [ 442.104075] 0 pages in swap cache [ 442.131510] Swap cache stats: add 0, delete 0, find 0/0 [ 442.136918] Free swap = 0kB [ 442.138599] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 442.148626] Total swap = 0kB [ 442.153982] 2097051 pages RAM [ 442.157100] 0 pages HighMem/MovableOnly [ 442.161186] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 442.168601] Node 1 Normal: 1*4kB (U) 1*8kB (U) 2*16kB (UM) 1*32kB (M) 2746*64kB (UME) 1336*128kB (UME) 423*256kB (U) 147*512kB (UM) 89*1024kB (U) 2*2048kB (U) 0*4096kB = 625612kB [ 442.190824] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 442.199170] 363849 pages reserved [ 442.202682] 0 pages cma reserved [ 442.224738] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 442.248608] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 442.257916] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 442.287813] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 442.318658] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 442.327294] 19595 total pagecache pages [ 442.337271] device hsr_slave_0 entered promiscuous mode [ 442.352837] 0 pages in swap cache [ 442.356340] Swap cache stats: add 0, delete 0, find 0/0 [ 442.372600] Free swap = 0kB [ 442.375656] Total swap = 0kB [ 442.382144] device hsr_slave_1 entered promiscuous mode [ 442.404269] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 442.411645] 2097051 pages RAM [ 442.414752] 0 pages HighMem/MovableOnly [ 442.420569] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 442.439110] 363849 pages reserved [ 442.442627] 0 pages cma reserved [ 442.446005] Out of memory (oom_kill_allocating_task): Kill process 16755 (systemd-journal) score 0 or sacrifice child 11:46:37 executing program 5: syz_open_dev$vcsn(&(0x7f0000000000), 0x10001, 0x400) syz_open_dev$vcsn(&(0x7f0000000140), 0x7, 0x24c042) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0), 0x20000, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000100)={0x80000001, 0x27}) [ 442.508915] Killed process 16755 (systemd-journal) total-vm:46096kB, anon-rss:472kB, file-rss:0kB, shmem-rss:1516kB [ 442.566682] oom_reaper: reaped process 16755 (systemd-journal), now anon-rss:0kB, file-rss:0kB, shmem-rss:1516kB 11:46:37 executing program 0: ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000100)={0x80000001, 0x27}) [ 442.672570] systemd[1]: systemd-journald.service: Failed with result 'signal'. [ 442.699395] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 442.728981] systemd[1]: Started Load/Save RF Kill Switch Status. [ 442.803280] systemd[1]: systemd-journald.service: Service has no hold-off time, scheduling restart. [ 442.932183] systemd[1]: Stopped Flush Journal to Persistent Storage. [ 442.971162] 8021q: adding VLAN 0 to HW filter on device bond0 [ 442.989133] systemd[1]: Stopping Flush Journal to Persistent Storage... [ 442.995990] systemd[1]: Stopped Journal Service. [ 443.011709] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 443.030702] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 443.036892] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 443.044900] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 443.060727] systemd[1]: Starting Journal Service... [ 443.083924] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 443.102976] 8021q: adding VLAN 0 to HW filter on device team0 [ 443.144450] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 443.167813] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 443.198682] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 443.222937] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 443.243190] bridge0: port 1(bridge_slave_0) entered blocking state [ 443.249625] bridge0: port 1(bridge_slave_0) entered forwarding state [ 443.289055] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 443.296161] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 443.309847] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 443.343271] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 443.357942] bridge0: port 2(bridge_slave_1) entered blocking state [ 443.364477] bridge0: port 2(bridge_slave_1) entered forwarding state [ 443.415565] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 443.424964] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 443.444779] systemd-journald[17000]: File /run/log/journal/04d8c135ee6b410280ba31a58c89679d/system.journal corrupted or uncleanly shut down, renaming and replacing. [ 443.461873] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 443.492616] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 443.504790] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 443.549111] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 443.563613] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 443.594571] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 443.597815] systemd-journald[17000]: /dev/kmsg buffer overrun, some messages lost. [ 443.608621] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 443.630579] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 443.648650] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 443.670360] device bridge_slave_1 left promiscuous mode [ 443.675935] bridge0: port 2(bridge_slave_1) entered disabled state [ 443.699381] device bridge_slave_0 left promiscuous mode [ 443.705079] bridge0: port 1(bridge_slave_0) entered disabled state [ 443.721414] device veth1_macvtap left promiscuous mode [ 443.726860] device veth0_macvtap left promiscuous mode [ 443.748761] device veth1_vlan left promiscuous mode [ 443.753855] device veth0_vlan left promiscuous mode [ 444.044196] device hsr_slave_1 left promiscuous mode [ 444.068986] device hsr_slave_0 left promiscuous mode [ 444.109688] team0 (unregistering): Port device team_slave_1 removed [ 444.138960] team0 (unregistering): Port device team_slave_0 removed [ 444.158829] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 444.182088] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 444.267412] bond0 (unregistering): Released all slaves [ 444.312406] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 444.348622] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 444.356249] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 444.393305] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 444.426858] 8021q: adding VLAN 0 to HW filter on device bond0 [ 444.465084] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 444.485561] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 444.493518] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 444.507885] systemd[1]: Started Journal Service. [ 444.529470] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 444.549878] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 444.569454] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 444.588867] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 444.620889] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 444.626977] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 444.637687] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 444.662576] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 444.670167] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 444.712527] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 444.742021] 8021q: adding VLAN 0 to HW filter on device team0 [ 444.755117] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 444.785269] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 444.803613] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 444.811869] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 444.838986] bridge0: port 1(bridge_slave_0) entered blocking state [ 444.845383] bridge0: port 1(bridge_slave_0) entered forwarding state [ 444.889257] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 444.902974] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 444.930493] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 444.961998] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 444.982474] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 445.002370] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 445.023203] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 445.042954] bridge0: port 2(bridge_slave_1) entered blocking state [ 445.049366] bridge0: port 2(bridge_slave_1) entered forwarding state [ 445.083502] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 445.114875] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 445.139054] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 445.154838] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 445.178606] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 445.201745] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 445.244081] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 445.255906] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 445.292691] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 445.311602] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 445.333011] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 445.359308] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 445.369613] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 445.380527] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 445.429169] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 445.436869] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 445.459340] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 445.467019] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 445.510049] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 445.516167] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 445.562175] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 445.591004] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 445.597353] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 445.609185] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 445.633481] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 445.722813] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 445.760711] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 445.767821] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 445.789389] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 445.950909] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 445.991552] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 446.009321] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 446.016163] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 446.048536] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 446.055882] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 446.069203] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 446.079290] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 446.087905] device veth0_vlan entered promiscuous mode [ 446.119504] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 446.128219] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 446.155611] device veth1_vlan entered promiscuous mode [ 446.171821] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 446.180626] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 446.204780] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 446.232510] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 446.255555] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 446.287933] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 446.319208] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 446.327335] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 446.349473] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 446.360057] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 446.369790] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 446.377083] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 446.399962] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 446.410630] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 446.429794] device veth0_vlan entered promiscuous mode [ 446.436102] device veth0_macvtap entered promiscuous mode [ 446.459346] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 446.479030] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 446.492958] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 446.514840] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 446.533496] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 446.553296] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 446.574866] device veth1_macvtap entered promiscuous mode [ 446.600666] device veth1_vlan entered promiscuous mode [ 446.621358] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 446.644112] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 446.687363] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 446.696896] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 446.711884] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 446.739360] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 446.771501] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 446.791827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 446.812185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 446.840371] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 446.847357] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 446.863419] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 446.874670] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 446.884402] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 446.896468] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 446.905296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 446.920203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 446.934322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 446.944838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 446.958780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 446.967905] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 446.981555] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 446.996779] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 447.007710] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 447.017598] device veth0_macvtap entered promiscuous mode [ 447.028063] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 447.041281] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 447.049775] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 447.057647] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 447.087611] device veth1_macvtap entered promiscuous mode [ 447.097763] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 447.149028] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 447.184998] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 447.211761] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 447.237018] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 447.259039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 447.279177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 447.299154] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 447.319143] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 447.339812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 447.359118] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 447.390017] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 447.397289] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 447.433025] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 447.459038] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 447.466933] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 447.495086] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 447.518922] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 447.528094] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 447.568366] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 447.577534] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 447.598522] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 447.607993] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 447.638342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 447.659417] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 447.666316] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 447.692008] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 447.709496] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 11:46:43 executing program 0: ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000100)={0x80000001, 0x27}) 11:46:43 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x10001, 0x400) syz_open_dev$vcsn(&(0x7f0000000140), 0x7, 0x24c042) ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r0, 0x7a9, &(0x7f0000000040)={{@my=0x0, 0x7f}, 0x40, 0x3, 0x0, 0x6, 0xf1, 0x5, 0x39, 0x3}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(0xffffffffffffffff, 0x7a8, &(0x7f0000000080)={{@host, 0x20000}, @hyper, 0x4, 0x9, 0x0, 0x5, 0x6, 0xd350}) socketpair(0x6, 0x80000, 0x10001, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x44, 0x0, 0x400, 0x70bd25, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3023d3782c859c3d}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}]}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0), 0x20000, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000100)={0x80000001, 0x27}) 11:46:43 executing program 2: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x10001, 0x400) syz_open_dev$vcsn(&(0x7f0000000140), 0x7, 0x24c042) ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r0, 0x7a9, &(0x7f0000000040)={{@my=0x0, 0x7f}, 0x40, 0x3, 0x0, 0x6, 0xf1, 0x5, 0x39, 0x3}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(0xffffffffffffffff, 0x7a8, &(0x7f0000000080)={{@host, 0x20000}, @hyper, 0x4, 0x9, 0x0, 0x5, 0x6, 0xd350}) socketpair(0x6, 0x80000, 0x10001, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x44, 0x0, 0x400, 0x70bd25, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3023d3782c859c3d}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}]}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r2 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0), 0x20000, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000100)={0x80000001, 0x27}) [ 448.681278] syz-executor.1: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 448.682465] syz-executor.2: [ 448.693860] syz-executor.4: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 448.710310] page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 448.711492] syz-executor.1 cpuset= [ 448.722726] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 448.732797] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 448.736518] / [ 448.737985] CPU: 1 PID: 17101 Comm: syz-executor.4 Not tainted 4.14.232-syzkaller #0 [ 448.739146] mems_allowed=0-1 [ 448.739712] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 448.760032] Call Trace: [ 448.762623] dump_stack+0x1b2/0x281 [ 448.766254] warn_alloc.cold+0x96/0x1cc [ 448.770248] ? zone_watermark_ok_safe+0x220/0x220 [ 448.775111] __alloc_pages_nodemask+0x2127/0x2720 [ 448.779984] ? lock_acquire+0x170/0x3f0 [ 448.783966] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 448.788820] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 448.794283] ? __mutex_unlock_slowpath+0x75/0x770 [ 448.799142] alloc_pages_current+0x155/0x260 [ 448.803657] ion_page_pool_alloc+0x118/0x1b0 [ 448.808064] ion_system_heap_allocate+0x133/0x8c0 [ 448.812902] ? ion_alloc+0x187/0x810 [ 448.816633] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 448.822099] ? ion_system_contig_heap_create+0x130/0x130 [ 448.827546] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 448.832586] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 448.837521] ion_alloc+0x204/0x810 [ 448.841090] ? ion_dma_buf_release+0x40/0x40 [ 448.845501] ? __might_fault+0x177/0x1b0 [ 448.849562] ion_ioctl+0xea/0x1f0 [ 448.853100] ? ion_query_heaps+0x360/0x360 [ 448.857332] ? ion_query_heaps+0x360/0x360 [ 448.861583] do_vfs_ioctl+0x75a/0xff0 [ 448.865405] ? ioctl_preallocate+0x1a0/0x1a0 [ 448.869815] ? lock_downgrade+0x740/0x740 [ 448.873988] ? __fget+0x225/0x360 [ 448.877439] ? do_vfs_ioctl+0xff0/0xff0 [ 448.881427] ? security_file_ioctl+0x83/0xb0 [ 448.885853] SyS_ioctl+0x7f/0xb0 [ 448.889216] ? do_vfs_ioctl+0xff0/0xff0 [ 448.893184] do_syscall_64+0x1d5/0x640 [ 448.897089] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 448.902270] RIP: 0033:0x4665f9 [ 448.905449] RSP: 002b:00007f9108899188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 448.913154] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 448.920429] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000006 [ 448.927697] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 448.934958] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 448.942228] R13: 00007fffb2c94dcf R14: 00007f9108899300 R15: 0000000000022000 [ 448.950424] CPU: 0 PID: 17078 Comm: syz-executor.1 Not tainted 4.14.232-syzkaller #0 [ 448.958333] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 448.967718] Call Trace: [ 448.970344] dump_stack+0x1b2/0x281 [ 448.974153] warn_alloc.cold+0x96/0x1cc [ 448.978135] ? zone_watermark_ok_safe+0x220/0x220 [ 448.982992] __alloc_pages_nodemask+0x2127/0x2720 [ 448.987861] ? lock_acquire+0x170/0x3f0 [ 448.991838] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 448.996700] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 449.002150] ? __mutex_unlock_slowpath+0x75/0x770 [ 449.006986] ? retint_kernel+0x2d/0x2d [ 449.010869] alloc_pages_current+0x155/0x260 [ 449.015290] ion_page_pool_alloc+0x118/0x1b0 [ 449.019690] ion_system_heap_allocate+0x133/0x8c0 [ 449.024550] ? ion_alloc+0x187/0x810 [ 449.028298] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 449.033761] ? ion_system_contig_heap_create+0x130/0x130 [ 449.039203] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 449.044212] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 449.049159] ion_alloc+0x204/0x810 [ 449.052783] ? ion_dma_buf_release+0x40/0x40 [ 449.057189] ? __might_fault+0x177/0x1b0 [ 449.061271] ion_ioctl+0xea/0x1f0 [ 449.064805] ? ion_query_heaps+0x360/0x360 [ 449.069036] ? ion_query_heaps+0x360/0x360 [ 449.073265] do_vfs_ioctl+0x75a/0xff0 [ 449.077062] ? ioctl_preallocate+0x1a0/0x1a0 [ 449.081467] ? lock_downgrade+0x740/0x740 [ 449.085615] ? __fget+0x225/0x360 [ 449.089060] ? do_vfs_ioctl+0xff0/0xff0 [ 449.093044] ? security_file_ioctl+0x83/0xb0 [ 449.097467] SyS_ioctl+0x7f/0xb0 [ 449.100832] ? do_vfs_ioctl+0xff0/0xff0 [ 449.104798] do_syscall_64+0x1d5/0x640 [ 449.108685] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 449.113881] RIP: 0033:0x4665f9 [ 449.117060] RSP: 002b:00007fbb4aee2188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 449.124760] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 449.132049] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000005 [ 449.139316] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 449.146579] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 449.153868] R13: 00007ffe2a62b8cf R14: 00007fbb4aee2300 R15: 0000000000022000 [ 449.161185] CPU: 1 PID: 17097 Comm: syz-executor.2 Not tainted 4.14.232-syzkaller #0 [ 449.169078] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 449.178435] Call Trace: [ 449.181036] dump_stack+0x1b2/0x281 [ 449.184699] warn_alloc.cold+0x96/0x1cc [ 449.188674] ? zone_watermark_ok_safe+0x220/0x220 [ 449.193532] __alloc_pages_nodemask+0x2127/0x2720 [ 449.198382] ? lock_acquire+0x170/0x3f0 [ 449.202373] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 449.207241] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 449.212713] ? __mutex_unlock_slowpath+0x75/0x770 [ 449.217561] alloc_pages_current+0x155/0x260 [ 449.222089] ion_page_pool_alloc+0x118/0x1b0 [ 449.226499] ion_system_heap_allocate+0x133/0x8c0 [ 449.231340] ? ion_alloc+0x187/0x810 [ 449.235053] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 449.240607] ? ion_system_contig_heap_create+0x130/0x130 [ 449.246081] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 449.251116] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 449.255990] ion_alloc+0x204/0x810 [ 449.259534] ? ion_dma_buf_release+0x40/0x40 [ 449.264013] ? __might_fault+0x177/0x1b0 [ 449.268081] ion_ioctl+0xea/0x1f0 [ 449.271554] ? ion_query_heaps+0x360/0x360 [ 449.275808] ? ion_query_heaps+0x360/0x360 [ 449.280038] do_vfs_ioctl+0x75a/0xff0 [ 449.284187] ? ioctl_preallocate+0x1a0/0x1a0 [ 449.288594] ? lock_downgrade+0x740/0x740 [ 449.292742] ? __fget+0x225/0x360 [ 449.296211] ? do_vfs_ioctl+0xff0/0xff0 [ 449.302355] ? security_file_ioctl+0x83/0xb0 [ 449.306760] SyS_ioctl+0x7f/0xb0 [ 449.310123] ? do_vfs_ioctl+0xff0/0xff0 [ 449.314096] do_syscall_64+0x1d5/0x640 [ 449.317994] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 449.323181] RIP: 0033:0x4665f9 [ 449.326362] RSP: 002b:00007ff3638e3188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 449.334069] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 449.341337] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000005 [ 449.348605] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 449.355870] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 449.363161] R13: 00007ffe909c1c6f R14: 00007ff3638e3300 R15: 0000000000022000 [ 449.403126] warn_alloc_show_mem: 1 callbacks suppressed [ 449.403131] Mem-Info: [ 449.411783] active_anon:12073 inactive_anon:18916 isolated_anon:0 [ 449.411783] active_file:2045 inactive_file:5455 isolated_file:0 [ 449.411783] unevictable:0 dirty:11 writeback:0 unstable:0 [ 449.411783] slab_reclaimable:13327 slab_unreclaimable:114531 [ 449.411783] mapped:57439 shmem:19216 pagetables:757 bounce:0 [ 449.411783] free:258265 free_pcp:387 free_cma:0 [ 449.447433] Node 0 active_anon:45560kB inactive_anon:59104kB active_file:4868kB inactive_file:17696kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:176848kB dirty:44kB writeback:0kB shmem:60176kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 449.482627] Node 1 active_anon:2732kB inactive_anon:16560kB active_file:3312kB inactive_file:4124kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:52908kB dirty:0kB writeback:0kB shmem:16688kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 449.513590] Node 0 DMA free:11352kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 449.544465] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 449.550973] Node 0 DMA32 free:478156kB min:36200kB low:45248kB high:54296kB active_anon:45560kB inactive_anon:59104kB active_file:4868kB inactive_file:17696kB unevictable:0kB writepending:44kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7648kB pagetables:2540kB bounce:0kB free_pcp:272kB local_pcp:152kB free_cma:0kB [ 449.585392] lowmem_reserve[]: 0 0 0 0 0 [ 449.590203] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 449.620146] lowmem_reserve[]: 0 0 0 0 0 [ 449.624191] Node 1 Normal free:651308kB min:53696kB low:67120kB high:80544kB active_anon:2732kB inactive_anon:16560kB active_file:3312kB inactive_file:4124kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:384kB pagetables:488kB bounce:0kB free_pcp:748kB local_pcp:4kB free_cma:0kB [ 449.671510] lowmem_reserve[]: 0 0 0 0 0 [ 449.675636] Node 0 DMA: 27*4kB (UE) 38*8kB (U) 30*16kB (UE) 27*32kB (UE) 12*64kB (UE) 7*128kB (UE) 3*256kB (UE) 2*512kB (UE) 2*1024kB (UE) 2*2048kB (ME) 0*4096kB = 11356kB [ 449.713159] Node 0 DMA32: 3639*4kB (UME) 13171*8kB (UME) 4415*16kB (UME) 2619*32kB (UME) 1320*64kB (UM) 254*128kB (UM) 10*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 393924kB [ 449.744691] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 449.778242] Node 1 Normal: 15671*4kB (UM) 8276*8kB (U) 5396*16kB (U) 4055*32kB (U) 3678*64kB (U) 1062*128kB (U) 120*256kB (U) 8*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 751132kB [ 449.811531] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 449.832131] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 449.858554] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 449.891534] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 449.911798] 26630 total pagecache pages [ 449.915813] 0 pages in swap cache [ 449.920442] Swap cache stats: add 0, delete 0, find 0/0 [ 449.925824] Free swap = 0kB [ 449.951496] Total swap = 0kB [ 449.954550] 2097051 pages RAM [ 449.957664] 0 pages HighMem/MovableOnly [ 449.971550] 363849 pages reserved [ 449.975052] 0 pages cma reserved [ 452.234637] IPVS: ftp: loaded support on port[0] = 21 11:46:47 executing program 3: openat$ion(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000100)={0x80000001, 0x27}) 11:46:47 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x10001, 0x400) r1 = syz_open_dev$vcsn(&(0x7f0000000140), 0x7, 0x24c042) ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r0, 0x7a9, &(0x7f0000000040)={{@my=0x0, 0x7f}, 0x40, 0x3, 0x0, 0x6, 0xf1, 0x5, 0x39, 0x3}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(0xffffffffffffffff, 0x7a8, &(0x7f0000000080)={{@host, 0x20000}, @hyper, 0x4, 0x9, 0x0, 0x5, 0x6, 0xd350}) ioctl$SNAPSHOT_ATOMIC_RESTORE(r1, 0x3304) r2 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0), 0x20000, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000100)={0x80000001, 0x27}) 11:46:47 executing program 0: ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000100)={0x80000001, 0x27}) 11:46:47 executing program 0: r0 = openat$ion(0xffffffffffffff9c, 0x0, 0x20000, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000100)={0x80000001, 0x27}) 11:46:47 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0) 11:46:47 executing program 0: r0 = openat$ion(0xffffffffffffff9c, 0x0, 0x20000, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000100)={0x80000001, 0x27}) 11:46:47 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0) [ 452.856082] chnl_net:caif_netlink_parms(): no params data found [ 453.066929] bridge0: port 1(bridge_slave_0) entered blocking state [ 453.086486] bridge0: port 1(bridge_slave_0) entered disabled state [ 453.106552] device bridge_slave_0 entered promiscuous mode [ 453.121579] bridge0: port 2(bridge_slave_1) entered blocking state [ 453.139919] bridge0: port 2(bridge_slave_1) entered disabled state [ 453.159274] device bridge_slave_1 entered promiscuous mode [ 453.273233] syz-executor.1: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 453.327770] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 453.335724] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 453.345894] CPU: 1 PID: 17112 Comm: syz-executor.1 Not tainted 4.14.232-syzkaller #0 [ 453.353794] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 453.363146] Call Trace: [ 453.365743] dump_stack+0x1b2/0x281 [ 453.369381] warn_alloc.cold+0x96/0x1cc [ 453.373358] ? zone_watermark_ok_safe+0x220/0x220 [ 453.375058] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 453.378224] __alloc_pages_nodemask+0x2127/0x2720 [ 453.378242] ? lock_acquire+0x170/0x3f0 [ 453.378257] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 453.399536] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 453.405020] ? __mutex_unlock_slowpath+0x75/0x770 [ 453.409882] alloc_pages_current+0x155/0x260 [ 453.414291] ion_page_pool_alloc+0x118/0x1b0 [ 453.418691] ion_system_heap_allocate+0x133/0x8c0 [ 453.423529] ? ion_alloc+0x187/0x810 [ 453.427245] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 453.432691] ? ion_system_contig_heap_create+0x130/0x130 [ 453.438135] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 453.443145] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 453.447979] ion_alloc+0x204/0x810 [ 453.451520] ? ion_dma_buf_release+0x40/0x40 [ 453.455923] ? __might_fault+0x177/0x1b0 [ 453.460006] ion_ioctl+0xea/0x1f0 [ 453.463584] ? ion_query_heaps+0x360/0x360 [ 453.467836] ? retint_kernel+0x2d/0x2d [ 453.471742] ? putname+0xcd/0x110 [ 453.475297] ? ion_query_heaps+0x360/0x360 [ 453.479617] do_vfs_ioctl+0x75a/0xff0 [ 453.483420] ? ioctl_preallocate+0x1a0/0x1a0 [ 453.487827] ? lock_downgrade+0x740/0x740 [ 453.491978] ? __fget+0x225/0x360 [ 453.495438] ? do_vfs_ioctl+0xff0/0xff0 [ 453.499408] ? security_file_ioctl+0x83/0xb0 [ 453.503817] SyS_ioctl+0x7f/0xb0 [ 453.507181] ? do_vfs_ioctl+0xff0/0xff0 [ 453.511166] do_syscall_64+0x1d5/0x640 [ 453.515057] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 453.520243] RIP: 0033:0x4665f9 [ 453.523421] RSP: 002b:00007fbb4aee2188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 453.531131] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 453.538411] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000005 [ 453.545858] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 453.553213] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 453.560497] R13: 00007ffe2a62b8cf R14: 00007fbb4aee2300 R15: 0000000000022000 [ 453.569636] warn_alloc_show_mem: 2 callbacks suppressed [ 453.569640] Mem-Info: [ 453.577428] active_anon:12720 inactive_anon:18919 isolated_anon:0 [ 453.577428] active_file:416 inactive_file:475 isolated_file:13 [ 453.577428] unevictable:0 dirty:28 writeback:0 unstable:0 [ 453.577428] slab_reclaimable:13311 slab_unreclaimable:114488 [ 453.577428] mapped:53425 shmem:19221 pagetables:779 bounce:0 [ 453.577428] free:25235 free_pcp:368 free_cma:0 [ 453.624617] Node 0 active_anon:47304kB inactive_anon:59096kB active_file:104kB inactive_file:24kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:162372kB dirty:56kB writeback:0kB shmem:60168kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 453.657375] Node 1 active_anon:3576kB inactive_anon:16580kB active_file:628kB inactive_file:208kB unevictable:0kB isolated(anon):0kB isolated(file):96kB mapped:49028kB dirty:56kB writeback:0kB shmem:16716kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 453.690715] Node 0 DMA free:11064kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 453.722545] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 453.728540] Node 0 DMA32 free:37796kB min:36200kB low:45248kB high:54296kB active_anon:47304kB inactive_anon:59096kB active_file:152kB inactive_file:232kB unevictable:0kB writepending:56kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7584kB pagetables:2440kB bounce:0kB free_pcp:448kB local_pcp:220kB free_cma:0kB [ 453.764463] lowmem_reserve[]: 0 0 0 0 0 [ 453.768786] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 453.799367] lowmem_reserve[]: 0 0 0 0 0 [ 453.803487] Node 1 Normal free:53588kB min:53696kB low:67120kB high:80544kB active_anon:3576kB inactive_anon:16580kB active_file:952kB inactive_file:40kB unevictable:0kB writepending:56kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:512kB pagetables:676kB bounce:0kB free_pcp:152kB local_pcp:0kB free_cma:0kB [ 453.836898] lowmem_reserve[]: 0 0 0 0 0 [ 453.841015] Node 0 DMA: 2*4kB (UE) 0*8kB 1*16kB (E) 1*32kB (E) 2*64kB (UE) 1*128kB (E) 2*256kB (UE) 2*512kB (UE) 3*1024kB (UE) 3*2048kB (UME) 0*4096kB = 11064kB [ 453.862290] Node 0 DMA32: 1377*4kB (ME) 935*8kB (UMEH) 235*16kB (ME) 70*32kB (UMEH) 34*64kB (M) 14*128kB (UM) 5*256kB (MH) 2*512kB (M) 0*1024kB 4*2048kB (UM) 1*4096kB (M) = 37548kB [ 453.882795] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 453.893885] Node 1 Normal: 185*4kB (UM) 105*8kB (UM) 72*16kB (M) 57*32kB (M) 48*64kB (M) 25*128kB (UM) 10*256kB (UM) 5*512kB (UM) 1*1024kB (U) 0*2048kB 9*4096kB (U) = 53836kB [ 453.913602] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 453.922519] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 453.934756] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 453.943723] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 453.955989] 19298 total pagecache pages [ 453.960768] 0 pages in swap cache [ 453.964244] Swap cache stats: add 0, delete 0, find 0/0 [ 453.973338] Free swap = 0kB [ 453.976565] Total swap = 0kB [ 453.980001] 2097051 pages RAM [ 453.983746] 0 pages HighMem/MovableOnly [ 453.987718] 363849 pages reserved [ 453.994823] 0 pages cma reserved [ 454.106285] ion_system_heap invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=0, oom_score_adj=0 [ 454.169198] ion_system_heap cpuset=/ mems_allowed=0-1 [ 454.174484] CPU: 1 PID: 4245 Comm: ion_system_heap Not tainted 4.14.232-syzkaller #0 [ 454.182382] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 454.191915] Call Trace: [ 454.195301] dump_stack+0x1b2/0x281 [ 454.199205] dump_header+0x178/0x82f [ 454.202936] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 454.208298] ? ___ratelimit+0x2cd/0x530 [ 454.212295] oom_kill_process.cold+0x10/0xa40 [ 454.216813] ? lock_downgrade+0x740/0x740 [ 454.221068] out_of_memory+0x2dc/0x1190 [ 454.225169] ? oom_killer_disable+0x1c0/0x1c0 [ 454.229680] ? mutex_trylock+0x152/0x1a0 [ 454.233788] __alloc_pages_nodemask+0x23e1/0x2720 [ 454.238842] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 454.243726] ? ion_heap_clear_pages+0x4c/0x70 [ 454.248240] ? lock_acquire+0x170/0x3f0 [ 454.252231] ? cache_grow_begin+0x3f/0x700 [ 454.256594] cache_grow_begin+0x91/0x700 [ 454.260683] fallback_alloc+0x207/0x2c0 [ 454.264683] kmem_cache_alloc_node_trace+0xed/0x400 [ 454.269718] __get_vm_area_node+0xed/0x340 [ 454.274054] vmap+0xd5/0x290 [ 454.277080] ? ion_heap_clear_pages+0x23/0x70 [ 454.281581] ? vunmap+0x50/0x50 [ 454.284870] ? __vunmap+0x21c/0x300 [ 454.288511] ion_heap_clear_pages+0x23/0x70 [ 454.292833] ion_heap_sglist_zero+0x165/0x220 [ 454.297334] ? ion_heap_clear_pages+0x70/0x70 [ 454.301834] ? finish_task_switch+0x178/0x610 [ 454.306349] ? pagerange_is_ram_callback+0x100/0x100 [ 454.311452] ? ion_heap_deferred_free+0x222/0x470 [ 454.316296] ion_system_heap_free+0x1d0/0x240 [ 454.320821] ion_buffer_destroy+0x132/0x190 [ 454.325246] ion_heap_deferred_free+0x22a/0x470 [ 454.329928] ? __schedule+0x807/0x1de0 [ 454.333998] ? ion_heap_shrink_scan+0x1a0/0x1a0 [ 454.339936] ? wait_woken+0x230/0x230 [ 454.343738] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 454.348842] ? ion_heap_shrink_scan+0x1a0/0x1a0 [ 454.353512] kthread+0x30d/0x420 [ 454.356977] ? kthread_create_on_node+0xd0/0xd0 [ 454.361851] ret_from_fork+0x24/0x30 [ 454.393990] Mem-Info: [ 454.396469] active_anon:12720 inactive_anon:18919 isolated_anon:0 [ 454.396469] active_file:39 inactive_file:0 isolated_file:0 [ 454.396469] unevictable:0 dirty:0 writeback:0 unstable:0 [ 454.396469] slab_reclaimable:13311 slab_unreclaimable:113924 [ 454.396469] mapped:52615 shmem:19221 pagetables:779 bounce:0 [ 454.396469] free:25174 free_pcp:60 free_cma:0 [ 454.448235] Bluetooth: hci5 command 0x0409 tx timeout [ 454.458086] Node 0 active_anon:47304kB inactive_anon:59096kB active_file:12kB inactive_file:12kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:162340kB dirty:0kB writeback:0kB shmem:60168kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 455.325670] Node 1 active_anon:3576kB inactive_anon:16580kB active_file:44kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:48120kB dirty:0kB writeback:0kB shmem:16716kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 455.379315] Node 0 DMA free:11064kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 455.542790] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 455.547887] Node 0 DMA32 free:35704kB min:36200kB low:45248kB high:54296kB active_anon:47304kB inactive_anon:59096kB active_file:0kB inactive_file:24kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7552kB pagetables:2440kB bounce:0kB free_pcp:120kB local_pcp:120kB free_cma:0kB [ 455.703903] lowmem_reserve[]: 0 0 0 0 0 [ 455.707946] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 455.955940] lowmem_reserve[]: 0 0 0 0 0 [ 456.118377] Node 1 Normal free:53608kB min:53696kB low:67120kB high:80544kB active_anon:3576kB inactive_anon:16580kB active_file:144kB inactive_file:0kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:480kB pagetables:676kB bounce:0kB free_pcp:124kB local_pcp:4kB free_cma:0kB [ 456.508112] Bluetooth: hci5 command 0x041b tx timeout [ 457.257672] lowmem_reserve[]: 0 0 0 0 0 [ 457.312366] Node 0 DMA: 2*4kB (UE) 0*8kB 1*16kB (E) 1*32kB (E) 2*64kB (UE) 1*128kB (E) 2*256kB (UE) 2*512kB (UE) 3*1024kB (UE) 3*2048kB (UME) 0*4096kB = 11064kB [ 457.585293] Node 0 DMA32: 1554*4kB (ME) 720*8kB (UME) 238*16kB (UME) 69*32kB (UME) 35*64kB (UM) 8*128kB (M) 4*256kB (M) 2*512kB (M) 0*1024kB 4*2048kB (UM) 1*4096kB (M) = 35592kB [ 457.752283] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 457.912548] Node 1 Normal: 146*4kB (M) 96*8kB (M) 68*16kB (M) 51*32kB (M) 46*64kB (M) 20*128kB (M) 12*256kB (UM) 6*512kB (UM) 1*1024kB (U) 0*2048kB 9*4096kB (U) = 53608kB [ 458.450247] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 458.547639] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 458.588048] Bluetooth: hci5 command 0x040f tx timeout [ 459.120820] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 459.136190] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 459.147322] 19250 total pagecache pages [ 459.156326] 0 pages in swap cache [ 459.166359] Swap cache stats: add 0, delete 0, find 0/0 [ 459.174587] Free swap = 0kB [ 459.177719] Total swap = 0kB [ 459.185120] 2097051 pages RAM [ 459.196769] 0 pages HighMem/MovableOnly [ 459.203282] 363849 pages reserved [ 459.206741] 0 pages cma reserved [ 459.214633] Out of memory: Kill process 17109 (syz-executor.1) score 1005 or sacrifice child [ 459.225480] Killed process 17112 (syz-executor.1) total-vm:93252kB, anon-rss:2192kB, file-rss:34820kB, shmem-rss:0kB [ 459.274551] oom_reaper: reaped process 17112 (syz-executor.1), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 459.292438] syz-fuzzer invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 459.305693] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 459.330942] CPU: 1 PID: 7997 Comm: syz-fuzzer Not tainted 4.14.232-syzkaller #0 [ 459.338424] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 459.347789] Call Trace: [ 459.350379] dump_stack+0x1b2/0x281 [ 459.354002] dump_header+0x178/0x82f [ 459.357725] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 459.362849] ? ___ratelimit+0x2cd/0x530 [ 459.366823] oom_kill_process.cold+0x10/0xa40 [ 459.371325] out_of_memory+0xe3e/0x1190 [ 459.375304] ? oom_killer_disable+0x1c0/0x1c0 [ 459.379794] ? mutex_trylock+0x152/0x1a0 [ 459.383870] __alloc_pages_nodemask+0x23e1/0x2720 [ 459.388714] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 459.393902] alloc_pages_current+0x155/0x260 [ 459.398295] filemap_fault+0x11a1/0x1ad0 [ 459.402339] ext4_filemap_fault+0x84/0xb0 [ 459.406478] __do_fault+0xfa/0x380 [ 459.409998] __handle_mm_fault+0x2497/0x4620 [ 459.414383] ? vm_insert_page+0x7c0/0x7c0 [ 459.418704] ? lock_downgrade+0x740/0x740 [ 459.422841] ? mark_held_locks+0xa6/0xf0 [ 459.426881] handle_mm_fault+0x455/0x9c0 [ 459.431105] __do_page_fault+0x549/0xad0 [ 459.435176] ? spurious_fault+0x640/0x640 [ 459.439301] ? do_page_fault+0x60/0x500 [ 459.443262] ? page_fault+0x2f/0x50 [ 459.446863] page_fault+0x45/0x50 [ 459.450305] RIP: 0000:0x947a14 [ 459.453488] RSP: 2e000:000000c00003df00 EFLAGS: 0043b6a0 [ 459.458062] syz-executor.1: [ 459.460042] Mem-Info: [ 459.463538] page allocation failure: order:0 [ 459.466642] active_anon:12205 inactive_anon:18919 isolated_anon:0 [ 459.466642] active_file:18 inactive_file:6 isolated_file:0 [ 459.466642] unevictable:0 dirty:0 writeback:0 unstable:0 [ 459.466642] slab_reclaimable:13237 slab_unreclaimable:113791 [ 459.466642] mapped:52615 shmem:19221 pagetables:779 bounce:0 [ 459.466642] free:13958 free_pcp:106 free_cma:0 [ 459.486331] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 459.513473] Node 0 active_anon:45244kB inactive_anon:59096kB active_file:28kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:162340kB dirty:0kB writeback:0kB shmem:60168kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 459.521555] (null) [ 459.554820] Node 1 active_anon:3576kB inactive_anon:16580kB active_file:40kB inactive_file:20kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:48120kB dirty:0kB writeback:0kB shmem:16716kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 459.565020] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 459.595597] Node 0 DMA free:10964kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 459.596937] CPU: 0 PID: 17112 Comm: syz-executor.1 Not tainted 4.14.232-syzkaller #0 [ 459.596946] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 459.635281] lowmem_reserve[]: [ 459.640392] Call Trace: [ 459.640417] dump_stack+0x1b2/0x281 [ 459.640430] warn_alloc.cold+0x96/0x1cc [ 459.640442] ? zone_watermark_ok_safe+0x220/0x220 [ 459.640451] ? usleep_range+0x130/0x130 [ 459.640459] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 459.640472] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 459.640481] ? run_timer_softirq+0x5a0/0x5a0 [ 459.640497] __alloc_pages_nodemask+0x2127/0x2720 [ 459.640512] ? lock_acquire+0x170/0x3f0 [ 459.640526] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 459.656008] 0 [ 459.658706] ? ion_page_pool_alloc+0x9e/0x1b0 [ 459.658723] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 459.658736] ? retint_kernel+0x2d/0x2d [ 459.658749] alloc_pages_current+0x155/0x260 [ 459.658761] ion_page_pool_alloc+0x118/0x1b0 [ 459.658771] ion_system_heap_allocate+0x133/0x8c0 [ 459.658780] ? ion_alloc+0x187/0x810 [ 459.658794] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 459.664973] 2717 [ 459.667858] ? ion_system_contig_heap_create+0x130/0x130 [ 459.667869] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 459.667881] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 459.667891] ion_alloc+0x204/0x810 [ 459.667905] ? ion_dma_buf_release+0x40/0x40 [ 459.667917] ? __might_fault+0x177/0x1b0 [ 459.667929] ion_ioctl+0xea/0x1f0 [ 459.667938] ? ion_query_heaps+0x360/0x360 [ 459.667949] ? retint_kernel+0x2d/0x2d [ 459.667959] ? putname+0xcd/0x110 [ 459.667967] ? ion_query_heaps+0x360/0x360 [ 459.667979] do_vfs_ioctl+0x75a/0xff0 [ 459.684446] 2718 [ 459.686179] ? ioctl_preallocate+0x1a0/0x1a0 [ 459.695305] 2718 [ 459.697279] ? lock_downgrade+0x740/0x740 [ 459.714904] 2718 [ 459.715511] ? __fget+0x225/0x360 [ 459.729503] ? do_vfs_ioctl+0xff0/0xff0 [ 459.729515] ? security_file_ioctl+0x83/0xb0 [ 459.729525] SyS_ioctl+0x7f/0xb0 [ 459.729534] ? do_vfs_ioctl+0xff0/0xff0 [ 459.729546] do_syscall_64+0x1d5/0x640 [ 459.729561] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 459.729570] RIP: 0033:0x4665f9 [ 459.729575] RSP: 002b:00007fbb4aee2188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 459.729586] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 459.729591] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000005 [ 459.729599] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 459.743655] Node 0 [ 459.747279] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 459.756150] DMA32 free:18052kB min:36200kB low:45248kB high:54296kB active_anon:45244kB inactive_anon:59096kB active_file:28kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7552kB pagetables:2440kB bounce:0kB free_pcp:220kB local_pcp:100kB free_cma:0kB [ 459.759236] R13: 00007ffe2a62b8cf R14: 00007fbb4aee2300 R15: 0000000000022000 [ 459.772311] Mem-Info: [ 459.784480] lowmem_reserve[]: [ 459.794212] active_anon:12205 inactive_anon:18919 isolated_anon:0 [ 459.794212] active_file:11 inactive_file:0 isolated_file:0 [ 459.794212] unevictable:0 dirty:0 writeback:0 unstable:0 [ 459.794212] slab_reclaimable:13237 slab_unreclaimable:113791 [ 459.794212] mapped:52615 shmem:19221 pagetables:779 bounce:0 [ 459.794212] free:13958 free_pcp:106 free_cma:0 [ 459.801949] 0 [ 459.807822] Node 0 active_anon:45244kB inactive_anon:59096kB active_file:28kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:162340kB dirty:0kB writeback:0kB shmem:60168kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 459.813283] 0 [ 459.824017] Node 1 active_anon:3576kB inactive_anon:16580kB active_file:16kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:48120kB dirty:0kB writeback:0kB shmem:16716kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 459.833107] 0 [ 459.843565] Node 0 [ 459.845087] 0 [ 459.862776] DMA free:10964kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 459.876184] 0 [ 459.909661] lowmem_reserve[]: [ 459.985920] 0 [ 460.010709] Node 0 [ 460.040191] 2717 2718 2718 2718 [ 460.046625] Node 0 DMA32 free:18052kB min:36200kB low:45248kB high:54296kB active_anon:45244kB inactive_anon:59096kB active_file:0kB inactive_file:32kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7552kB pagetables:2440kB bounce:0kB free_pcp:212kB local_pcp:116kB free_cma:0kB [ 460.054675] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 460.083076] lowmem_reserve[]: 0 0 0 0 0 [ 460.112137] lowmem_reserve[]: [ 460.116010] Node 0 [ 460.116020] 0 [ 460.125809] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 460.127707] 0 [ 460.163660] lowmem_reserve[]: [ 460.163741] 0 [ 460.165496] 0 [ 460.172979] 0 [ 460.174683] 0 [ 460.174828] 0 [ 460.176626] 0 0 0 [ 460.186947] Node 1 [ 460.186951] Node 1 Normal free:26816kB min:53696kB low:67120kB high:80544kB active_anon:3500kB inactive_anon:16580kB active_file:144kB inactive_file:0kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:480kB pagetables:672kB bounce:0kB free_pcp:204kB local_pcp:80kB free_cma:0kB [ 460.193618] Normal free:26816kB min:53696kB low:67120kB high:80544kB active_anon:3500kB inactive_anon:16580kB active_file:144kB inactive_file:0kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:480kB pagetables:672kB bounce:0kB free_pcp:204kB local_pcp:124kB free_cma:0kB [ 460.231800] lowmem_reserve[]: [ 460.250575] lowmem_reserve[]: 0 0 0 0 0 [ 460.257941] Node 0 DMA: 1*4kB (E) 0*8kB 1*16kB (E) 2*32kB (UE) 2*64kB (UE) 2*128kB (UE) 1*256kB (E) 2*512kB (UE) 3*1024kB (UE) 3*2048kB (UME) 0*4096kB = 10964kB [ 460.265900] 0 [ 460.275169] Node 0 DMA32: 1529*4kB (ME) 662*8kB (UME) 215*16kB (UME) 48*32kB (ME) 18*64kB (UM) 4*128kB (M) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18052kB [ 460.293798] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 460.295537] 0 [ 460.304586] Node 1 Normal: 176*4kB (M) 96*8kB (M) 68*16kB (M) 52*32kB (UM) 47*64kB (UM) 21*128kB (UM) 12*256kB (UM) 5*512kB (M) 1*1024kB (U) 1*2048kB (U) 2*4096kB (U) = 26816kB [ 460.324737] 0 [ 460.324745] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 460.324755] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 460.326900] 0 [ 460.337350] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 460.337357] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 460.337361] 19250 total pagecache pages [ 460.337370] 0 pages in swap cache [ 460.337376] Swap cache stats: add 0, delete 0, find 0/0 [ 460.337379] Free swap = 0kB [ 460.337383] Total swap = 0kB [ 460.337390] 2097051 pages RAM [ 460.337393] 0 pages HighMem/MovableOnly [ 460.337397] 363849 pages reserved [ 460.337400] 0 pages cma reserved [ 460.401057] syz-executor.1: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 460.415107] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 460.417105] 0 [ 460.420290] CPU: 0 PID: 17112 Comm: syz-executor.1 Not tainted 4.14.232-syzkaller #0 [ 460.420296] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 460.420300] Call Trace: [ 460.420323] dump_stack+0x1b2/0x281 [ 460.420337] warn_alloc.cold+0x96/0x1cc [ 460.420349] ? zone_watermark_ok_safe+0x220/0x220 [ 460.420371] __alloc_pages_nodemask+0x2127/0x2720 [ 460.445602] ? lock_acquire+0x170/0x3f0 [ 460.457798] Node 0 [ 460.459234] ? lock_acquire+0x170/0x3f0 [ 460.459252] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 460.459270] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 460.459283] ? __mutex_unlock_slowpath+0x75/0x770 [ 460.459297] alloc_pages_current+0x155/0x260 [ 460.459312] ion_page_pool_alloc+0x118/0x1b0 [ 460.459322] ion_system_heap_allocate+0x133/0x8c0 [ 460.459333] ? _raw_spin_unlock+0x29/0x40 [ 460.459341] ? _ion_heap_freelist_drain+0x6e/0x410 [ 460.459350] ? ion_system_contig_heap_create+0x130/0x130 [ 460.459360] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 460.459372] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 460.484511] DMA: [ 460.484626] ion_alloc+0x27a/0x810 [ 460.507404] 2*4kB [ 460.507969] ? ion_dma_buf_release+0x40/0x40 [ 460.507983] ? __might_fault+0x177/0x1b0 [ 460.507994] ion_ioctl+0xea/0x1f0 [ 460.508003] ? ion_query_heaps+0x360/0x360 [ 460.508013] ? retint_kernel+0x2d/0x2d [ 460.508024] ? putname+0xcd/0x110 [ 460.508032] ? ion_query_heaps+0x360/0x360 [ 460.508041] do_vfs_ioctl+0x75a/0xff0 [ 460.508053] ? ioctl_preallocate+0x1a0/0x1a0 [ 460.508062] ? lock_downgrade+0x740/0x740 [ 460.508075] ? __fget+0x225/0x360 [ 460.508085] ? do_vfs_ioctl+0xff0/0xff0 [ 460.531363] (UE) [ 460.531498] ? security_file_ioctl+0x83/0xb0 [ 460.536151] 0*8kB [ 460.540204] SyS_ioctl+0x7f/0xb0 [ 460.540213] ? do_vfs_ioctl+0xff0/0xff0 [ 460.540224] do_syscall_64+0x1d5/0x640 [ 460.540238] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 460.540246] RIP: 0033:0x4665f9 [ 460.540251] RSP: 002b:00007fbb4aee2188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 460.540260] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 460.540265] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000005 [ 460.540270] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 460.540275] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 460.540281] R13: 00007ffe2a62b8cf R14: 00007fbb4aee2300 R15: 0000000000022000 [ 460.617904] syz-executor.1: [ 460.619160] 1*16kB [ 460.626199] page allocation failure: order:0 [ 460.633535] (E) 1*32kB (E) 1*64kB (E) 1*128kB (E) 2*256kB (UE) 2*512kB (UE) 3*1024kB (UE) 3*2048kB (UME) 0*4096kB = 11000kB [ 460.633619] Node 0 [ 460.663992] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 460.665354] DMA32: [ 460.683030] Bluetooth: hci5 command 0x0419 tx timeout [ 460.686415] 1582*4kB (UME) 704*8kB (UME) 236*16kB (UME) 67*32kB (UME) 3*64kB (M) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18072kB [ 460.705328] (null) [ 460.707871] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 460.720660] Node 1 Normal: 178*4kB (UM) 98*8kB (UM) 70*16kB (UM) 52*32kB (UM) 46*64kB (M) 21*128kB (UM) 12*256kB (UM) 5*512kB (M) 1*1024kB (U) 1*2048kB (U) 2*4096kB (U) = 26808kB [ 460.730211] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 460.736900] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 460.750932] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 460.759576] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 460.762417] CPU: 0 PID: 17112 Comm: syz-executor.1 Not tainted 4.14.232-syzkaller #0 [ 460.768695] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 460.777486] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 460.786154] 19250 total pagecache pages [ 460.795418] Call Trace: [ 460.795441] dump_stack+0x1b2/0x281 [ 460.795453] warn_alloc.cold+0x96/0x1cc [ 460.795465] ? zone_watermark_ok_safe+0x220/0x220 [ 460.795474] ? usleep_range+0x130/0x130 [ 460.795482] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 460.795498] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 460.799573] 0 pages in swap cache [ 460.802034] ? run_timer_softirq+0x5a0/0x5a0 [ 460.805637] Swap cache stats: add 0, delete 0, find 0/0 [ 460.809614] __alloc_pages_nodemask+0x2127/0x2720 [ 460.809631] ? lock_acquire+0x170/0x3f0 [ 460.809645] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 460.809655] ? ion_page_pool_alloc+0x9e/0x1b0 [ 460.809671] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 460.814491] Free swap = 0kB [ 460.818905] alloc_pages_current+0x155/0x260 [ 460.818919] ion_page_pool_alloc+0x118/0x1b0 [ 460.818928] ion_system_heap_allocate+0x133/0x8c0 [ 460.818940] ? _raw_spin_unlock+0x29/0x40 [ 460.818948] ? _ion_heap_freelist_drain+0x6e/0x410 [ 460.818957] ? ion_system_contig_heap_create+0x130/0x130 [ 460.818966] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 460.818977] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 460.818989] ion_alloc+0x27a/0x810 [ 460.824080] Total swap = 0kB [ 460.829093] ? ion_dma_buf_release+0x40/0x40 [ 460.829105] ? __might_fault+0x177/0x1b0 [ 460.829115] ion_ioctl+0xea/0x1f0 [ 460.829123] ? ion_query_heaps+0x360/0x360 [ 460.829133] ? retint_kernel+0x2d/0x2d [ 460.829143] ? putname+0xcd/0x110 [ 460.829150] ? ion_query_heaps+0x360/0x360 [ 460.829159] do_vfs_ioctl+0x75a/0xff0 [ 460.829170] ? ioctl_preallocate+0x1a0/0x1a0 [ 460.829180] ? lock_downgrade+0x740/0x740 [ 460.829194] ? __fget+0x225/0x360 [ 460.829203] ? do_vfs_ioctl+0xff0/0xff0 [ 460.832660] 2097051 pages RAM [ 460.837064] ? security_file_ioctl+0x83/0xb0 [ 460.842523] 0 pages HighMem/MovableOnly [ 460.847239] SyS_ioctl+0x7f/0xb0 [ 460.851250] 363849 pages reserved [ 460.856019] ? do_vfs_ioctl+0xff0/0xff0 [ 460.860590] 0 pages cma reserved [ 460.866054] do_syscall_64+0x1d5/0x640 [ 460.869117] Out of memory (oom_kill_allocating_task): Kill process 7997 (syz-fuzzer) score 0 or sacrifice child [ 460.873455] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 460.877986] Killed process 17001 (syz-executor.5) total-vm:84924kB, anon-rss:64kB, file-rss:0kB, shmem-rss:0kB [ 460.882664] RIP: 0033:0x4665f9 [ 460.889347] syz-fuzzer invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask= [ 460.891813] RSP: 002b:00007fbb4aee2188 EFLAGS: 00000246 [ 460.897244] (null) [ 460.902443] ORIG_RAX: 0000000000000010 [ 460.902449] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 460.902454] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000005 [ 460.902458] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 460.902463] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 460.902468] R13: 00007ffe2a62b8cf R14: 00007fbb4aee2300 R15: 0000000000022000 [ 460.912512] warn_alloc_show_mem: 1 callbacks suppressed [ 460.912515] Mem-Info: [ 460.934620] , order=0, oom_score_adj=0 [ 460.941952] active_anon:12185 inactive_anon:18919 isolated_anon:0 [ 460.941952] active_file:13 inactive_file:14 isolated_file:0 [ 460.941952] unevictable:0 dirty:0 writeback:0 unstable:0 [ 460.941952] slab_reclaimable:13237 slab_unreclaimable:113794 [ 460.941952] mapped:52615 shmem:19221 pagetables:778 bounce:0 [ 460.941952] free:13929 free_pcp:391 free_cma:0 [ 460.962326] syz-fuzzer cpuset= [ 460.968535] Node 0 active_anon:45240kB inactive_anon:59096kB active_file:12kB inactive_file:12kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:162340kB dirty:0kB writeback:0kB shmem:60168kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 460.986496] / [ 460.990776] Node 1 active_anon:3500kB inactive_anon:16580kB active_file:40kB inactive_file:44kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:48120kB dirty:0kB writeback:0kB shmem:16716kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 461.012840] mems_allowed=0-1 [ 461.021363] Node 0 [ 461.038937] CPU: 1 PID: 7997 Comm: syz-fuzzer Not tainted 4.14.232-syzkaller #0 [ 461.054305] DMA free:10960kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 461.058116] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 461.058121] Call Trace: [ 461.058141] dump_stack+0x1b2/0x281 [ 461.058153] dump_header+0x178/0x82f [ 461.058166] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 461.065447] lowmem_reserve[]: [ 461.072718] ? ___ratelimit+0x2cd/0x530 [ 461.072730] oom_kill_process.cold+0x10/0xa40 [ 461.072748] out_of_memory+0xe3e/0x1190 [ 461.072761] ? oom_killer_disable+0x1c0/0x1c0 [ 461.080080] 0 [ 461.085421] ? mutex_trylock+0x152/0x1a0 [ 461.087834] 2717 [ 461.091791] __alloc_pages_nodemask+0x23e1/0x2720 [ 461.125041] 2718 [ 461.128210] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 461.128234] alloc_pages_current+0x155/0x260 [ 461.156396] 2718 [ 461.158087] filemap_fault+0x11a1/0x1ad0 [ 461.158107] ext4_filemap_fault+0x84/0xb0 [ 461.185286] 2718 [ 461.188355] __do_fault+0xfa/0x380 [ 461.188367] __handle_mm_fault+0x2497/0x4620 [ 461.198039] ? vm_insert_page+0x7c0/0x7c0 [ 461.198050] ? lock_downgrade+0x740/0x740 [ 461.198067] ? mark_held_locks+0xa6/0xf0 [ 461.223688] Node 0 [ 461.233028] handle_mm_fault+0x455/0x9c0 [ 461.233043] __do_page_fault+0x549/0xad0 [ 461.233056] ? spurious_fault+0x640/0x640 [ 461.235640] DMA32 free:17948kB min:36200kB low:45248kB high:54296kB active_anon:45240kB inactive_anon:59096kB active_file:12kB inactive_file:12kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7552kB pagetables:2440kB bounce:0kB free_pcp:860kB local_pcp:768kB free_cma:0kB [ 461.239258] ? do_page_fault+0x60/0x500 [ 461.239267] ? page_fault+0x2f/0x50 [ 461.239274] page_fault+0x45/0x50 [ 461.239283] RIP: 0000:0x947a14 [ 461.242976] lowmem_reserve[]: [ 461.248059] RSP: 2e000:000000c00003df00 EFLAGS: 0043b6a0 [ 461.257442] Mem-Info: [ 461.278469] 0 [ 461.289577] active_anon:12185 inactive_anon:18919 isolated_anon:0 [ 461.289577] active_file:26 inactive_file:3 isolated_file:0 [ 461.289577] unevictable:0 dirty:0 writeback:0 unstable:0 [ 461.289577] slab_reclaimable:13237 slab_unreclaimable:113798 [ 461.289577] mapped:52615 shmem:19221 pagetables:778 bounce:0 [ 461.289577] free:13954 free_pcp:363 free_cma:0 [ 461.304185] 0 [ 461.313136] Node 0 active_anon:45240kB inactive_anon:59096kB active_file:12kB inactive_file:12kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:162340kB dirty:0kB writeback:0kB shmem:60168kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 461.321560] 0 [ 461.327521] Node 1 active_anon:3500kB inactive_anon:16580kB active_file:92kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:48120kB dirty:0kB writeback:0kB shmem:16716kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 461.342109] 0 [ 461.383939] Node 0 [ 461.393379] 0 [ 461.406064] DMA free:10960kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 461.472594] lowmem_reserve[]: [ 461.501155] Node 0 [ 461.533856] 0 [ 461.536045] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 461.536161] 2717 [ 461.538195] lowmem_reserve[]: [ 461.574016] 2718 [ 461.576250] 0 [ 461.577136] 2718 [ 461.579243] 0 0 0 0 [ 461.579258] Node 1 Normal free:26808kB min:53696kB low:67120kB high:80544kB active_anon:3500kB inactive_anon:16580kB active_file:92kB inactive_file:0kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:480kB pagetables:672kB bounce:0kB free_pcp:704kB local_pcp:624kB free_cma:0kB [ 461.579280] lowmem_reserve[]: 0 0 0 [ 461.586040] 2718 [ 461.586072] 0 [ 461.625499] Node 0 DMA32 free:18048kB min:36200kB low:45248kB high:54296kB active_anon:45240kB inactive_anon:59096kB active_file:12kB inactive_file:12kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7552kB pagetables:2440kB bounce:0kB free_pcp:744kB local_pcp:88kB free_cma:0kB [ 461.632893] 0 [ 461.663329] lowmem_reserve[]: 0 0 0 0 0 [ 461.671412] Node 0 [ 461.671415] Node 0 DMA: [ 461.673657] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 461.673665] 2*4kB [ 461.676317] lowmem_reserve[]: 0 0 0 0 0 [ 461.714592] (UE) 1*8kB [ 461.716530] Node 1 Normal free:26808kB min:53696kB low:67120kB high:80544kB active_anon:3500kB inactive_anon:16580kB active_file:76kB inactive_file:0kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:480kB pagetables:672kB bounce:0kB free_pcp:704kB local_pcp:80kB free_cma:0kB [ 461.725102] (U) [ 461.757845] lowmem_reserve[]: 0 0 0 0 0 [ 461.760603] 2*16kB [ 461.763827] Node 0 [ 461.763836] (UE) [ 461.766045] DMA: 2*4kB [ 461.777460] 1*32kB [ 461.779437] (UE) 1*8kB (U) 2*16kB (UE) 1*32kB (E) 2*64kB (UE) 2*128kB (UE) 1*256kB (E) 2*512kB (UE) 3*1024kB (UE) 3*2048kB (UME) 0*4096kB = 10960kB [ 461.783470] (E) [ 461.804691] Node 0 DMA32: 1578*4kB (UME) 707*8kB (UME) 235*16kB (UME) 66*32kB (UME) 4*64kB (M) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18096kB [ 461.808478] 2*64kB [ 461.829923] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 461.833666] (UE) [ 461.851992] Node 1 Normal: 178*4kB (UM) 98*8kB (UM) 70*16kB (UM) 52*32kB (UM) 46*64kB (M) 21*128kB (UM) 12*256kB (UM) 5*512kB (M) 1*1024kB (U) 1*2048kB (U) 2*4096kB (U) = 26808kB [ 461.856153] 2*128kB (UE) 1*256kB (E) 2*512kB (UE) 3*1024kB (UE) 3*2048kB (UME) 0*4096kB = 10960kB [ 461.883443] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 461.894886] Node 0 DMA32: 1578*4kB (UME) 707*8kB (UME) 235*16kB (UME) 66*32kB (UME) 4*64kB (M) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18096kB [ 461.910591] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 461.920784] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 461.935498] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 461.941828] Node 1 Normal: 178*4kB (UM) 98*8kB (UM) 70*16kB (UM) 52*32kB (UM) 46*64kB (M) 21*128kB (UM) 12*256kB (UM) 5*512kB (M) 1*1024kB (U) 1*2048kB (U) 2*4096kB (U) = 26808kB [ 461.956763] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 461.972129] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 461.981750] 19250 total pagecache pages [ 461.985090] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 461.985737] 0 pages in swap cache [ 461.999929] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 462.011702] Swap cache stats: add 0, delete 0, find 0/0 [ 462.014928] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 462.017074] Free swap = 0kB [ 462.027766] 19250 total pagecache pages [ 462.033522] 0 pages in swap cache [ 462.036984] Swap cache stats: add 0, delete 0, find 0/0 [ 462.041133] Total swap = 0kB [ 462.045454] 2097051 pages RAM [ 462.050441] Free swap = 0kB [ 462.053464] Total swap = 0kB [ 462.056477] 2097051 pages RAM [ 462.057037] 0 pages HighMem/MovableOnly [ 462.064930] 0 pages HighMem/MovableOnly [ 462.071822] 363849 pages reserved [ 462.075277] 0 pages cma reserved [ 462.076248] 363849 pages reserved [ 462.107890] 0 pages cma reserved [ 462.111447] Out of memory (oom_kill_allocating_task): Kill process 7997 (syz-fuzzer) score 0 or sacrifice child [ 462.157891] Killed process 16565 (syz-executor.1) total-vm:84924kB, anon-rss:64kB, file-rss:0kB, shmem-rss:0kB [ 462.195479] oom_reaper: reaped process 17001 (syz-executor.5), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 462.243910] oom_reaper: reaped process 16565 (syz-executor.1), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 462.659499] syz-executor.1 (16566) used greatest stack depth: 24312 bytes left [ 462.729543] syz-executor.5 (17002) used greatest stack depth: 23304 bytes left [ 463.160506] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 463.167250] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 463.189570] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 463.196315] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 463.228374] device bridge_slave_1 left promiscuous mode [ 463.233965] bridge0: port 2(bridge_slave_1) entered disabled state [ 463.248762] device bridge_slave_0 left promiscuous mode [ 463.254351] bridge0: port 1(bridge_slave_0) entered disabled state [ 463.280757] device veth1_macvtap left promiscuous mode [ 463.286101] device veth0_macvtap left promiscuous mode [ 463.308249] device veth1_vlan left promiscuous mode [ 463.313785] device veth0_vlan left promiscuous mode [ 463.541823] device hsr_slave_1 left promiscuous mode [ 463.564090] device hsr_slave_0 left promiscuous mode [ 463.608290] team0 (unregistering): Port device team_slave_1 removed [ 463.623408] team0 (unregistering): Port device team_slave_0 removed [ 463.647921] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 463.670957] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 463.794535] bond0 (unregistering): Released all slaves [ 464.199156] oom_reaper: reaped process 17101 (syz-executor.4), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 464.279973] oom_reaper: reaped process 17097 (syz-executor.2), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 464.300063] in:imklog invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 464.319079] in:imklog cpuset=/ mems_allowed=0-1 [ 464.323800] CPU: 1 PID: 16356 Comm: in:imklog Not tainted 4.14.232-syzkaller #0 [ 464.331278] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 464.340639] Call Trace: [ 464.343231] dump_stack+0x1b2/0x281 [ 464.346861] dump_header+0x178/0x82f [ 464.350595] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 464.355704] ? ___ratelimit+0x2cd/0x530 [ 464.360144] oom_kill_process.cold+0x10/0xa40 [ 464.364684] out_of_memory+0xe3e/0x1190 [ 464.368670] ? oom_killer_disable+0x1c0/0x1c0 [ 464.373186] ? mutex_trylock+0x152/0x1a0 [ 464.377255] __alloc_pages_nodemask+0x23e1/0x2720 [ 464.382128] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 464.386987] alloc_pages_current+0x155/0x260 [ 464.391407] filemap_fault+0x11a1/0x1ad0 [ 464.395491] ext4_filemap_fault+0x84/0xb0 [ 464.399653] __do_fault+0xfa/0x380 [ 464.403199] __handle_mm_fault+0x2497/0x4620 [ 464.407617] ? vm_insert_page+0x7c0/0x7c0 [ 464.411777] ? lock_downgrade+0x740/0x740 [ 464.415931] ? mark_held_locks+0xa6/0xf0 [ 464.420002] handle_mm_fault+0x455/0x9c0 [ 464.424075] __do_page_fault+0x549/0xad0 [ 464.428146] ? spurious_fault+0x640/0x640 [ 464.432323] ? do_page_fault+0x60/0x500 [ 464.436294] ? page_fault+0x2f/0x50 [ 464.439937] page_fault+0x45/0x50 [ 464.443384] RIP: 1fa0:0x1f9f [ 464.446389] RSP: 0000:000055bc03fb79d0 EFLAGS: 7fe900ea7da0 [ 464.448012] syz-executor.4: [ 464.452979] Mem-Info: [ 464.453747] page allocation failure: order:0 [ 464.456778] active_anon:11996 inactive_anon:18915 isolated_anon:0 [ 464.456778] active_file:24 inactive_file:0 isolated_file:0 [ 464.456778] unevictable:0 dirty:0 writeback:0 unstable:0 [ 464.456778] slab_reclaimable:13081 slab_unreclaimable:112775 [ 464.456778] mapped:35265 shmem:19213 pagetables:665 bounce:0 [ 464.456778] free:13860 free_pcp:109 free_cma:0 [ 464.459241] syz-executor.2: page allocation failure: order:0 [ 464.463670] Node 0 active_anon:45464kB inactive_anon:59088kB active_file:8kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:141056kB dirty:0kB writeback:0kB shmem:60152kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 464.507756] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 464.539677] Node 1 active_anon:2520kB inactive_anon:16572kB active_file:88kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:4kB dirty:0kB writeback:0kB shmem:16700kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 464.567762] (null) [ 464.575673] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 464.579637] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 464.592841] Node 0 DMA free:10956kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 464.597766] CPU: 0 PID: 17101 Comm: syz-executor.4 Not tainted 4.14.232-syzkaller #0 [ 464.625249] syz-executor.2 cpuset= [ 464.627045] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 464.627054] / [ 464.630608] Call Trace: [ 464.644540] dump_stack+0x1b2/0x281 [ 464.646164] mems_allowed=0-1 [ 464.648172] warn_alloc.cold+0x96/0x1cc [ 464.648184] ? zone_watermark_ok_safe+0x220/0x220 [ 464.648194] ? usleep_range+0x130/0x130 [ 464.648203] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 464.648216] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 464.648227] ? run_timer_softirq+0x5a0/0x5a0 [ 464.663609] lowmem_reserve[]: [ 464.664080] __alloc_pages_nodemask+0x2127/0x2720 [ 464.669229] 0 [ 464.674546] ? lock_acquire+0x170/0x3f0 [ 464.693069] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 464.697933] ? ion_page_pool_alloc+0x9e/0x1b0 [ 464.702443] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 464.703667] 2717 [ 464.707921] alloc_pages_current+0x155/0x260 [ 464.707937] ion_page_pool_alloc+0x118/0x1b0 [ 464.707946] ion_system_heap_allocate+0x133/0x8c0 [ 464.707955] ? ion_alloc+0x187/0x810 [ 464.707966] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 464.708006] ? ion_system_contig_heap_create+0x130/0x130 [ 464.710057] 2718 [ 464.714464] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 464.743578] 2718 2718 [ 464.745829] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 464.745842] ion_alloc+0x204/0x810 [ 464.756733] ? ion_dma_buf_release+0x40/0x40 [ 464.761141] ? __might_fault+0x177/0x1b0 [ 464.765194] Node 0 [ 464.765204] ion_ioctl+0xea/0x1f0 [ 464.765214] ? ion_query_heaps+0x360/0x360 [ 464.767462] DMA32 free:17692kB min:36200kB low:45248kB high:54296kB active_anon:45464kB inactive_anon:59088kB active_file:8kB inactive_file:4kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7488kB pagetables:2280kB bounce:0kB free_pcp:296kB local_pcp:176kB free_cma:0kB [ 464.770914] ? ion_query_heaps+0x360/0x360 [ 464.770925] do_vfs_ioctl+0x75a/0xff0 [ 464.770936] ? ioctl_preallocate+0x1a0/0x1a0 [ 464.770945] ? lock_downgrade+0x740/0x740 [ 464.770958] ? __fget+0x225/0x360 [ 464.770966] ? do_vfs_ioctl+0xff0/0xff0 [ 464.770977] ? security_file_ioctl+0x83/0xb0 [ 464.770987] SyS_ioctl+0x7f/0xb0 [ 464.770995] ? do_vfs_ioctl+0xff0/0xff0 [ 464.771005] do_syscall_64+0x1d5/0x640 [ 464.771024] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 464.803604] lowmem_reserve[]: [ 464.807832] RIP: 0033:0x4665f9 [ 464.807837] RSP: 002b:00007f9108899188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 464.807847] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 464.807851] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000006 [ 464.807856] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 464.807861] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 464.807866] R13: 00007fffb2c94dcf R14: 00007f9108899300 R15: 0000000000022000 [ 464.909664] CPU: 1 PID: 17097 Comm: syz-executor.2 Not tainted 4.14.232-syzkaller #0 [ 464.917570] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 464.927879] Call Trace: [ 464.930492] dump_stack+0x1b2/0x281 [ 464.934135] warn_alloc.cold+0x96/0x1cc [ 464.938139] ? zone_watermark_ok_safe+0x220/0x220 [ 464.943077] ? usleep_range+0x130/0x130 [ 464.947045] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 464.952149] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 464.957176] ? run_timer_softirq+0x5a0/0x5a0 [ 464.961593] __alloc_pages_nodemask+0x2127/0x2720 [ 464.966466] ? lock_acquire+0x170/0x3f0 [ 464.970448] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 464.975291] ? ion_page_pool_alloc+0x9e/0x1b0 [ 464.979895] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 464.985363] ? alloc_pages_current+0x16/0x260 [ 464.989870] alloc_pages_current+0x155/0x260 [ 464.994297] ion_page_pool_alloc+0x118/0x1b0 [ 464.998703] ion_system_heap_allocate+0x133/0x8c0 [ 465.003555] ? ion_alloc+0x187/0x810 [ 465.007259] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 465.012706] ? ion_system_contig_heap_create+0x130/0x130 [ 465.018171] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 465.023184] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 465.028028] ion_alloc+0x204/0x810 [ 465.031570] ? ion_dma_buf_release+0x40/0x40 [ 465.035983] ? __might_fault+0x177/0x1b0 [ 465.037735] Mem-Info: [ 465.040050] ion_ioctl+0xea/0x1f0 [ 465.042464] active_anon:11996 inactive_anon:18915 isolated_anon:0 [ 465.042464] active_file:24 inactive_file:0 isolated_file:0 [ 465.042464] unevictable:0 dirty:0 writeback:0 unstable:0 [ 465.042464] slab_reclaimable:13081 slab_unreclaimable:112775 [ 465.042464] mapped:35265 shmem:19213 pagetables:665 bounce:0 [ 465.042464] free:13860 free_pcp:109 free_cma:0 [ 465.045903] ? ion_query_heaps+0x360/0x360 [ 465.083689] ? ion_query_heaps+0x360/0x360 [ 465.087927] do_vfs_ioctl+0x75a/0xff0 [ 465.091753] ? ioctl_preallocate+0x1a0/0x1a0 [ 465.096162] ? lock_downgrade+0x740/0x740 [ 465.100334] ? __fget+0x225/0x360 [ 465.103809] ? do_vfs_ioctl+0xff0/0xff0 [ 465.107804] ? security_file_ioctl+0x83/0xb0 [ 465.112211] SyS_ioctl+0x7f/0xb0 [ 465.115581] ? do_vfs_ioctl+0xff0/0xff0 [ 465.117751] Node 0 active_anon:45464kB inactive_anon:59088kB active_file:8kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:141056kB dirty:0kB writeback:0kB shmem:60152kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 465.119570] do_syscall_64+0x1d5/0x640 [ 465.151057] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 465.156246] RIP: 0033:0x4665f9 [ 465.159428] RSP: 002b:00007ff3638e3188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 465.167136] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 465.174401] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000005 [ 465.177745] Node 1 active_anon:2520kB inactive_anon:16572kB active_file:88kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:4kB dirty:0kB writeback:0kB shmem:16700kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 465.181668] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 465.215653] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 465.222942] R13: 00007ffe909c1c6f R14: 00007ff3638e3300 R15: 0000000000022000 [ 465.239382] 0 0 0 0 0 [ 465.241928] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 465.245581] Node 0 [ 465.275843] lowmem_reserve[]: 0 0 0 0 0 [ 465.282254] Node 1 Normal free:27320kB min:53696kB low:67120kB high:80544kB active_anon:2500kB inactive_anon:16572kB active_file:56kB inactive_file:56kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:352kB pagetables:380kB bounce:0kB free_pcp:144kB local_pcp:24kB free_cma:0kB [ 465.293789] DMA free:10956kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 465.314917] lowmem_reserve[]: 0 0 0 0 0 [ 465.344553] lowmem_reserve[]: 0 2717 2718 2718 [ 465.345121] Node 0 [ 465.345271] 2718 [ 465.349778] DMA: [ 465.354025] 1*4kB (E) 1*8kB (U) 2*16kB (UE) 1*32kB (E) 2*64kB (UE) 2*128kB (UE) 1*256kB (E) 2*512kB (UE) 3*1024kB (UE) 3*2048kB (UME) 0*4096kB = 10956kB [ 465.356363] Node 0 [ 465.374188] Node 0 DMA32: 1403*4kB (ME) 643*8kB (UME) 186*16kB (UME) 32*32kB (UME) 26*64kB (ME) 5*128kB (M) 3*256kB (UM) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 17828kB [ 465.378144] DMA32 free:17812kB min:36200kB low:45248kB high:54296kB active_anon:45388kB inactive_anon:59088kB active_file:8kB inactive_file:4kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7488kB pagetables:2280kB bounce:0kB free_pcp:324kB local_pcp:144kB free_cma:0kB [ 465.395490] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 465.427768] lowmem_reserve[]: 0 0 0 0 0 [ 465.435648] Node 1 Normal: 194*4kB (M) 127*8kB (UM) 91*16kB (UM) 57*32kB (M) 54*64kB (UM) 25*128kB (UM) 7*256kB (M) 7*512kB (UM) 2*1024kB (M) 2*2048kB (UM) 1*4096kB (M) = 27344kB [ 465.457811] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 465.464077] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 465.498864] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 465.507452] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 465.520709] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 465.535466] lowmem_reserve[]: 0 0 0 0 0 [ 465.547980] 19244 total pagecache pages [ 465.552533] Node 1 Normal free:95132kB min:53696kB low:67120kB high:80544kB active_anon:2500kB inactive_anon:16572kB active_file:56kB inactive_file:156kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:352kB pagetables:380kB bounce:0kB free_pcp:472kB local_pcp:236kB free_cma:0kB [ 465.558720] 0 pages in swap cache [ 465.607869] Swap cache stats: add 0, delete 0, find 0/0 [ 465.660345] lowmem_reserve[]: 0 0 0 0 0 [ 465.667730] Free swap = 0kB [ 465.670752] Total swap = 0kB [ 465.674453] 2097051 pages RAM [ 465.679273] 0 pages HighMem/MovableOnly [ 465.680946] Node 0 DMA: 1*4kB (E) 1*8kB (U) 2*16kB (UE) 1*32kB (E) 3*64kB (UE) 2*128kB (UE) 1*256kB (E) 2*512kB (UE) 3*1024kB (UE) 3*2048kB (UME) 0*4096kB = 11020kB [ 465.707732] 363849 pages reserved [ 465.711212] 0 pages cma reserved [ 465.714608] Out of memory (oom_kill_allocating_task): Kill process 16356 (in:imklog) score 0 or sacrifice child [ 465.725399] Killed process 16353 (rsyslogd) total-vm:254332kB, anon-rss:1032kB, file-rss:0kB, shmem-rss:0kB [ 465.748016] Node 0 DMA32: 11224*4kB (UME) 7690*8kB (UME) 246*16kB (UME) 33*32kB (UME) 47*64kB (UME) 7*128kB (UM) 3*256kB (UM) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 116080kB [ 465.797750] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 465.799566] oom_reaper: reaped process 16353 (rsyslogd), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 465.856627] Node 1 Normal: 1*4kB (U) 3*8kB (UM) 7*16kB (UM) 6*32kB (UM) 1091*64kB (UME) 193*128kB (UM) 80*256kB (UM) 13*512kB (UM) 2*1024kB (M) 2*2048kB (UM) 1*4096kB (M) = 132236kB [ 465.917738] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 465.926611] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 465.956472] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 465.965951] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 465.974714] 21797 total pagecache pages [ 465.978788] 0 pages in swap cache [ 465.982329] Swap cache stats: add 0, delete 0, find 0/0 [ 465.988123] Free swap = 0kB [ 465.991368] Total swap = 0kB [ 465.997935] 2097051 pages RAM [ 466.001073] 0 pages HighMem/MovableOnly [ 466.005055] 363849 pages reserved [ 466.032690] 0 pages cma reserved [ 466.388674] device bridge_slave_1 left promiscuous mode [ 466.394341] bridge0: port 2(bridge_slave_1) entered disabled state [ 466.411990] device bridge_slave_0 left promiscuous mode [ 466.431319] bridge0: port 1(bridge_slave_0) entered disabled state [ 466.444138] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 466.458573] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 466.526451] bond0 (unregistering): Released all slaves [ 467.318978] syz-executor.4: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 467.362545] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 467.372246] syz-executor.2: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 467.397749] CPU: 0 PID: 17101 Comm: syz-executor.4 Not tainted 4.14.232-syzkaller #0 [ 467.405669] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 467.415026] Call Trace: [ 467.417627] dump_stack+0x1b2/0x281 [ 467.421263] warn_alloc.cold+0x96/0x1cc [ 467.425266] ? zone_watermark_ok_safe+0x220/0x220 [ 467.430159] __alloc_pages_nodemask+0x2127/0x2720 [ 467.435042] ? lock_acquire+0x170/0x3f0 [ 467.439024] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 467.443959] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 467.449414] ? __mutex_unlock_slowpath+0x75/0x770 [ 467.454252] ? __mutex_lock+0x3aa/0x1310 [ 467.458313] alloc_pages_current+0x155/0x260 [ 467.462724] ion_page_pool_alloc+0x118/0x1b0 [ 467.467131] ion_system_heap_allocate+0x133/0x8c0 [ 467.471978] ? _raw_spin_unlock+0x29/0x40 [ 467.476125] ? _ion_heap_freelist_drain+0x6e/0x410 [ 467.481056] ? ion_system_contig_heap_create+0x130/0x130 [ 467.486507] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 467.491532] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 467.496381] ion_alloc+0x27a/0x810 [ 467.499928] ? ion_dma_buf_release+0x40/0x40 [ 467.504364] ? __might_fault+0x177/0x1b0 [ 467.507745] syz-executor.2 cpuset=/ [ 467.508441] ion_ioctl+0xea/0x1f0 [ 467.508451] ? ion_query_heaps+0x360/0x360 [ 467.512071] mems_allowed=0-1 [ 467.515515] ? ion_query_heaps+0x360/0x360 [ 467.527058] do_vfs_ioctl+0x75a/0xff0 [ 467.530863] ? ioctl_preallocate+0x1a0/0x1a0 [ 467.535271] ? lock_downgrade+0x740/0x740 [ 467.539428] ? __fget+0x225/0x360 [ 467.542905] ? do_vfs_ioctl+0xff0/0xff0 [ 467.546875] ? security_file_ioctl+0x83/0xb0 [ 467.551283] SyS_ioctl+0x7f/0xb0 [ 467.554653] ? do_vfs_ioctl+0xff0/0xff0 [ 467.558653] do_syscall_64+0x1d5/0x640 [ 467.562544] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 467.567731] RIP: 0033:0x4665f9 [ 467.570913] RSP: 002b:00007f9108899188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 467.578619] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 467.585891] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000006 [ 467.593168] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 467.602879] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 467.610166] R13: 00007fffb2c94dcf R14: 00007f9108899300 R15: 0000000000022000 [ 467.637748] CPU: 1 PID: 17097 Comm: syz-executor.2 Not tainted 4.14.232-syzkaller #0 [ 467.645666] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 467.655894] Call Trace: [ 467.658505] dump_stack+0x1b2/0x281 [ 467.662155] warn_alloc.cold+0x96/0x1cc [ 467.666149] ? zone_watermark_ok_safe+0x220/0x220 [ 467.671035] __alloc_pages_nodemask+0x2127/0x2720 [ 467.675877] ? _raw_spin_unlock_irq+0x24/0x80 [ 467.680377] ? lock_acquire+0x170/0x3f0 [ 467.684356] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 467.689202] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 467.694651] ? __mutex_unlock_slowpath+0x75/0x770 [ 467.699673] alloc_pages_current+0x155/0x260 [ 467.704256] ion_page_pool_alloc+0x118/0x1b0 [ 467.708857] ion_system_heap_allocate+0x133/0x8c0 [ 467.713798] ? _raw_spin_unlock+0x29/0x40 [ 467.717945] ? _ion_heap_freelist_drain+0x6e/0x410 [ 467.722872] ? ion_system_contig_heap_create+0x130/0x130 [ 467.728584] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 467.733603] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 467.738454] ion_alloc+0x27a/0x810 [ 467.741999] ? ion_dma_buf_release+0x40/0x40 [ 467.746412] ? __might_fault+0x177/0x1b0 [ 467.750493] ion_ioctl+0xea/0x1f0 [ 467.753953] ? ion_query_heaps+0x360/0x360 [ 467.758796] ? ion_query_heaps+0x360/0x360 [ 467.763029] do_vfs_ioctl+0x75a/0xff0 [ 467.766831] ? ioctl_preallocate+0x1a0/0x1a0 [ 467.771237] ? lock_downgrade+0x740/0x740 [ 467.775384] ? __fget+0x225/0x360 [ 467.778936] ? do_vfs_ioctl+0xff0/0xff0 [ 467.782905] ? security_file_ioctl+0x83/0xb0 [ 467.787833] SyS_ioctl+0x7f/0xb0 [ 467.791230] ? do_vfs_ioctl+0xff0/0xff0 [ 467.795201] do_syscall_64+0x1d5/0x640 [ 467.799179] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 467.804384] RIP: 0033:0x4665f9 [ 467.807573] RSP: 002b:00007ff3638e3188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 467.815506] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 467.822962] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000005 [ 467.830239] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 467.837597] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 467.843821] warn_alloc_show_mem: 1 callbacks suppressed [ 467.843825] Mem-Info: [ 467.844869] R13: 00007ffe909c1c6f R14: 00007ff3638e3300 R15: 0000000000022000 [ 467.850697] active_anon:11981 inactive_anon:18915 isolated_anon:0 [ 467.850697] active_file:1380 inactive_file:2408 isolated_file:0 [ 467.850697] unevictable:0 dirty:12 writeback:0 unstable:0 [ 467.850697] slab_reclaimable:13081 slab_unreclaimable:112228 [ 467.850697] mapped:46441 shmem:19213 pagetables:700 bounce:0 [ 467.850697] free:262871 free_pcp:359 free_cma:0 [ 467.946650] Node 0 active_anon:46172kB inactive_anon:59088kB active_file:5316kB inactive_file:5080kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:182400kB dirty:128kB writeback:0kB shmem:60152kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 467.991234] Node 1 active_anon:1752kB inactive_anon:16572kB active_file:204kB inactive_file:4552kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:3364kB dirty:20kB writeback:0kB shmem:16700kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 468.022259] Node 0 DMA free:11248kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 468.051564] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 468.056641] Node 0 DMA32 free:765748kB min:36200kB low:45248kB high:54296kB active_anon:46116kB inactive_anon:59104kB active_file:5324kB inactive_file:4988kB unevictable:0kB writepending:144kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7648kB pagetables:2540kB bounce:0kB free_pcp:820kB local_pcp:128kB free_cma:0kB [ 468.089134] lowmem_reserve[]: 0 0 0 0 0 [ 468.093136] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 468.121819] lowmem_reserve[]: 0 0 0 0 0 [ 468.125860] Node 1 Normal free:497692kB min:53696kB low:67120kB high:80544kB active_anon:1752kB inactive_anon:16568kB active_file:204kB inactive_file:4552kB unevictable:0kB writepending:20kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:224kB pagetables:296kB bounce:0kB free_pcp:712kB local_pcp:24kB free_cma:0kB [ 468.178348] lowmem_reserve[]: 0 0 0 0 0 [ 468.182388] Node 0 DMA: 384*4kB (UE) 34*8kB (U) 8*16kB (UE) 1*32kB (E) 1*64kB (E) 2*128kB (UE) 1*256kB (E) 1*512kB (E) 2*1024kB (UE) 3*2048kB (UME) 0*4096kB = 11248kB [ 468.220335] Node 0 DMA32: 45601*4kB (UME) 23849*8kB (UME) 11521*16kB (UME) 5381*32kB (UME) 878*64kB (U) 21*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 788604kB [ 468.257711] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 468.277739] Node 1 Normal: 20546*4kB (UE) 6343*8kB (UM) 5045*16kB (U) 3609*32kB (UM) 1234*64kB (U) 167*128kB (U) 130*256kB (U) 97*512kB (U) 74*1024kB (U) 3*2048kB (U) 0*4096kB = 594352kB [ 468.307789] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 468.316686] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 468.325463] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 468.357676] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 468.366442] 22992 total pagecache pages [ 468.370519] 0 pages in swap cache [ 468.374006] Swap cache stats: add 0, delete 0, find 0/0 [ 468.379493] Free swap = 0kB [ 468.382518] Total swap = 0kB [ 468.385531] 2097051 pages RAM [ 468.388683] 0 pages HighMem/MovableOnly [ 468.392658] 363849 pages reserved [ 468.396192] 0 pages cma reserved [ 468.750204] IPVS: ftp: loaded support on port[0] = 21 [ 468.945462] chnl_net:caif_netlink_parms(): no params data found [ 469.198137] bridge0: port 1(bridge_slave_0) entered blocking state [ 469.204623] bridge0: port 1(bridge_slave_0) entered disabled state [ 469.231890] device bridge_slave_0 entered promiscuous mode [ 469.252494] bridge0: port 2(bridge_slave_1) entered blocking state [ 469.271720] bridge0: port 2(bridge_slave_1) entered disabled state [ 469.279277] device bridge_slave_1 entered promiscuous mode [ 469.307702] Bluetooth: hci2 command 0x0409 tx timeout [ 469.339393] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 469.359319] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 469.394864] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 469.408877] team0: Port device team_slave_0 added [ 469.419024] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 469.426416] team0: Port device team_slave_1 added [ 469.483740] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 469.498241] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 469.554376] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 469.579544] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 469.585856] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 469.647825] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 469.678778] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 469.686481] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 469.762859] device hsr_slave_0 entered promiscuous mode [ 469.781882] device hsr_slave_1 entered promiscuous mode [ 469.800895] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 469.808813] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 469.963807] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 470.035237] 8021q: adding VLAN 0 to HW filter on device bond0 [ 470.045434] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 470.059729] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 470.065967] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 470.078010] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 470.092134] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 470.098853] 8021q: adding VLAN 0 to HW filter on device team0 [ 470.112289] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 470.119632] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 470.132734] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 470.140692] bridge0: port 1(bridge_slave_0) entered blocking state [ 470.147063] bridge0: port 1(bridge_slave_0) entered forwarding state [ 470.161734] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 470.171610] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 470.181575] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 470.192963] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 470.202943] bridge0: port 2(bridge_slave_1) entered blocking state [ 470.209645] bridge0: port 2(bridge_slave_1) entered forwarding state [ 470.223885] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 470.241725] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 470.253682] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 470.287824] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 470.297792] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 470.307195] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 470.337918] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 470.345754] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 470.358290] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 470.381527] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 470.402903] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 470.424721] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 470.435782] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 470.449594] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 470.487247] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 470.509449] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 470.521185] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 470.543455] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 470.552656] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 470.594240] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 470.621566] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 470.638213] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 470.644970] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 470.672396] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 471.005348] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 471.029638] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 471.036680] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 471.060801] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 471.185421] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 471.201575] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 471.221295] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 471.237658] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 471.244365] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 471.252885] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 471.264917] device veth0_vlan entered promiscuous mode [ 471.288360] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 471.295365] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 471.304665] device veth1_vlan entered promiscuous mode [ 471.312561] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 471.326860] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 471.344222] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 471.363035] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 471.375301] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 471.386809] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 471.402336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 471.412025] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 471.425792] device veth0_macvtap entered promiscuous mode [ 471.432971] Bluetooth: hci2 command 0x041b tx timeout [ 471.442988] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 471.454665] device veth1_macvtap entered promiscuous mode [ 471.464597] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 471.485874] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 471.497076] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 471.511179] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 471.523086] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 471.535366] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 471.549553] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 471.560202] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 471.573300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 471.584798] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 471.600905] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 471.611383] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 471.623299] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 471.632390] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 471.644514] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 471.652649] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 471.664817] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 471.676147] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 471.690835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 471.701185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 471.715024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 471.731459] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 471.741343] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 471.757108] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 471.771494] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 471.781966] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 471.794819] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 471.804415] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 471.817261] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 11:47:08 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0) 11:47:08 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x10001, 0x400) r1 = syz_open_dev$vcsn(&(0x7f0000000140), 0x7, 0x24c042) ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r0, 0x7a9, &(0x7f0000000040)={{@my=0x0, 0x7f}, 0x40, 0x3, 0x0, 0x6, 0xf1, 0x5, 0x39, 0x3}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(0xffffffffffffffff, 0x7a8, &(0x7f0000000080)={{@host, 0x20000}, @hyper, 0x4, 0x9, 0x0, 0x5, 0x6, 0xd350}) ioctl$SNAPSHOT_ATOMIC_RESTORE(r1, 0x3304) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x44, 0x0, 0x400, 0x70bd25, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3023d3782c859c3d}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}]}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0), 0x20000, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000100)={0x80000001, 0x27}) 11:47:08 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x10001, 0x400) ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r0, 0x7a9, &(0x7f0000000040)={{@my=0x0, 0x7f}, 0x40, 0x3, 0x0, 0x6, 0xf1, 0x5, 0x39, 0x3}) r1 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0), 0x20000, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000100)={0x80000001, 0x27}) 11:47:08 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x10001, 0x400) r1 = syz_open_dev$vcsn(&(0x7f0000000140), 0x7, 0x24c042) ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r0, 0x7a9, &(0x7f0000000040)={{@my=0x0, 0x7f}, 0x40, 0x3, 0x0, 0x6, 0xf1, 0x5, 0x39, 0x3}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(0xffffffffffffffff, 0x7a8, &(0x7f0000000080)={{@host, 0x20000}, @hyper, 0x4, 0x9, 0x0, 0x5, 0x6, 0xd350}) ioctl$SNAPSHOT_ATOMIC_RESTORE(r1, 0x3304) r2 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0), 0x20000, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000100)={0x80000001, 0x27}) 11:47:08 executing program 0: r0 = openat$ion(0xffffffffffffff9c, 0x0, 0x20000, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000100)={0x80000001, 0x27}) 11:47:08 executing program 2: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x10001, 0x400) syz_open_dev$vcsn(&(0x7f0000000140), 0x7, 0x24c042) ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r0, 0x7a9, &(0x7f0000000040)={{@my=0x0, 0x7f}, 0x40, 0x3, 0x0, 0x6, 0xf1, 0x5, 0x39, 0x3}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(0xffffffffffffffff, 0x7a8, &(0x7f0000000080)={{@host, 0x20000}, @hyper, 0x4, 0x9, 0x0, 0x5, 0x6, 0xd350}) socketpair(0x6, 0x80000, 0x10001, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x44, 0x0, 0x400, 0x70bd25, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3023d3782c859c3d}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}]}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r2 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0), 0x20000, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000100)={0x80000001, 0x27}) 11:47:08 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000100)={0x80000001, 0x27}) 11:47:08 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000100)={0x0, 0x27}) 11:47:08 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000100)={0x0, 0x27}) [ 473.467818] Bluetooth: hci2 command 0x040f tx timeout 11:47:08 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000100)={0x0, 0x27}) 11:47:08 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000100)={0x80000001}) 11:47:08 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000100)={0x80000001}) [ 473.621315] syz-executor.4: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 473.636242] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 473.667893] CPU: 1 PID: 17550 Comm: syz-executor.4 Not tainted 4.14.232-syzkaller #0 [ 473.675845] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 473.685216] Call Trace: [ 473.687900] dump_stack+0x1b2/0x281 [ 473.691626] warn_alloc.cold+0x96/0x1cc [ 473.695619] ? zone_watermark_ok_safe+0x220/0x220 [ 473.700608] __alloc_pages_nodemask+0x2127/0x2720 [ 473.705596] ? lock_acquire+0x170/0x3f0 [ 473.709604] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 473.714478] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 473.719955] ? __mutex_unlock_slowpath+0x75/0x770 [ 473.724819] ? retint_kernel+0x2d/0x2d [ 473.728737] alloc_pages_current+0x155/0x260 [ 473.733176] ion_page_pool_alloc+0x118/0x1b0 [ 473.737604] ion_system_heap_allocate+0x133/0x8c0 [ 473.742506] ? ion_alloc+0x187/0x810 [ 473.746254] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 473.751733] ? ion_system_contig_heap_create+0x130/0x130 [ 473.757213] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 473.762345] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 473.767214] ion_alloc+0x204/0x810 [ 473.770771] ? ion_dma_buf_release+0x40/0x40 [ 473.775230] ? __might_fault+0x177/0x1b0 [ 473.779312] ion_ioctl+0xea/0x1f0 [ 473.782771] ? ion_query_heaps+0x360/0x360 [ 473.787039] ? ion_query_heaps+0x360/0x360 [ 473.791280] do_vfs_ioctl+0x75a/0xff0 [ 473.795104] ? ioctl_preallocate+0x1a0/0x1a0 [ 473.800332] ? lock_downgrade+0x740/0x740 [ 473.804488] ? __fget+0x225/0x360 [ 473.807941] ? do_vfs_ioctl+0xff0/0xff0 [ 473.811956] ? security_file_ioctl+0x83/0xb0 [ 473.816376] SyS_ioctl+0x7f/0xb0 [ 473.819776] ? do_vfs_ioctl+0xff0/0xff0 [ 473.823765] do_syscall_64+0x1d5/0x640 [ 473.827680] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 473.832879] RIP: 0033:0x4665f9 [ 473.836087] RSP: 002b:00007f9108899188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 473.843803] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 473.851089] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000006 [ 473.858383] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 473.865664] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 473.873001] R13: 00007fffb2c94dcf R14: 00007f9108899300 R15: 0000000000022000 [ 473.943773] warn_alloc_show_mem: 1 callbacks suppressed [ 473.943777] Mem-Info: [ 473.962392] active_anon:12047 inactive_anon:18917 isolated_anon:24 [ 473.962392] active_file:1446 inactive_file:5527 isolated_file:0 [ 473.962392] unevictable:0 dirty:25 writeback:0 unstable:0 [ 473.962392] slab_reclaimable:13105 slab_unreclaimable:112265 [ 473.962392] mapped:48486 shmem:19216 pagetables:748 bounce:0 [ 473.962392] free:262100 free_pcp:329 free_cma:0 [ 474.037129] Node 0 active_anon:46648kB inactive_anon:59108kB active_file:2492kB inactive_file:16140kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:186936kB dirty:156kB writeback:0kB shmem:60176kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 474.099178] Node 1 active_anon:1248kB inactive_anon:16488kB active_file:3412kB inactive_file:6024kB unevictable:0kB isolated(anon):64kB isolated(file):0kB mapped:6928kB dirty:60kB writeback:0kB shmem:16688kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 474.140099] Node 0 DMA free:11136kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 474.184198] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 474.202116] Node 0 DMA32 free:848716kB min:36200kB low:45248kB high:54296kB active_anon:46648kB inactive_anon:59108kB active_file:2492kB inactive_file:16140kB unevictable:0kB writepending:156kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7744kB pagetables:2752kB bounce:0kB free_pcp:1408kB local_pcp:740kB free_cma:0kB [ 474.242514] lowmem_reserve[]: 0 0 0 0 0 [ 474.253618] syz-executor.5: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 474.257519] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 474.312116] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 474.317257] CPU: 0 PID: 17544 Comm: syz-executor.5 Not tainted 4.14.232-syzkaller #0 [ 474.318218] lowmem_reserve[]: [ 474.325156] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 474.325160] Call Trace: [ 474.325182] dump_stack+0x1b2/0x281 [ 474.325196] warn_alloc.cold+0x96/0x1cc [ 474.325210] ? zone_watermark_ok_safe+0x220/0x220 [ 474.329579] 0 [ 474.337870] __alloc_pages_nodemask+0x2127/0x2720 [ 474.337883] ? io_schedule_timeout+0x140/0x140 [ 474.337897] ? lock_acquire+0x170/0x3f0 [ 474.337912] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 474.337928] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 474.337940] ? __mutex_unlock_slowpath+0x75/0x770 [ 474.337954] alloc_pages_current+0x155/0x260 [ 474.337966] ion_page_pool_alloc+0x118/0x1b0 [ 474.337976] ion_system_heap_allocate+0x133/0x8c0 [ 474.337985] ? ion_alloc+0x187/0x810 [ 474.337994] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 474.338003] ? ion_system_contig_heap_create+0x130/0x130 [ 474.338013] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 474.338026] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 474.348178] 0 [ 474.353018] ion_alloc+0x204/0x810 [ 474.353035] ? ion_dma_buf_release+0x40/0x40 [ 474.353049] ? __might_fault+0x177/0x1b0 [ 474.353061] ion_ioctl+0xea/0x1f0 [ 474.360541] 0 [ 474.364267] ? ion_query_heaps+0x360/0x360 [ 474.364281] ? ion_query_heaps+0x360/0x360 [ 474.364293] do_vfs_ioctl+0x75a/0xff0 [ 474.364304] ? ioctl_preallocate+0x1a0/0x1a0 [ 474.370992] 0 [ 474.373127] ? lock_downgrade+0x740/0x740 [ 474.373143] ? __fget+0x225/0x360 [ 474.373154] ? do_vfs_ioctl+0xff0/0xff0 [ 474.373169] ? security_file_ioctl+0x83/0xb0 [ 474.381254] 0 [ 474.383501] SyS_ioctl+0x7f/0xb0 [ 474.383512] ? do_vfs_ioctl+0xff0/0xff0 [ 474.383524] do_syscall_64+0x1d5/0x640 [ 474.383540] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 474.392357] RIP: 0033:0x4665f9 [ 474.392363] RSP: 002b:00007f4323f8e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 474.392374] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 474.392380] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000004 [ 474.392385] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 474.392390] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 474.392396] R13: 00007ffec8acf2af R14: 00007f4323f8e300 R15: 0000000000022000 [ 474.546020] Node 1 Normal free:743000kB min:53696kB low:67120kB high:80544kB active_anon:1248kB inactive_anon:16488kB active_file:3412kB inactive_file:6024kB unevictable:0kB writepending:60kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:192kB pagetables:208kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 474.575473] lowmem_reserve[]: 0 0 0 0 0 [ 474.581845] Node 0 DMA: 12*4kB (UE) 18*8kB (U) 20*16kB (UE) 20*32kB (UE) 2*64kB (UE) 1*128kB (E) 2*256kB (UE) 2*512kB (UE) 2*1024kB (UE) 3*2048kB (UME) 0*4096kB = 11136kB [ 474.598069] Node 0 DMA32: 41869*4kB (UEH) 29320*8kB (UEH) 15204*16kB (UEH) 7208*32kB (UEH) 2*64kB (H) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 876084kB [ 474.615223] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 474.642875] Node 1 Normal: 5690*4kB (UM) 4806*8kB (UM) 4588*16kB (U) 4036*32kB (U) 4131*64kB (U) 1529*128kB (U) 211*256kB (U) 14*512kB (U) 1*1024kB (U) 0*2048kB 0*4096kB = 786072kB [ 474.677510] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 474.697113] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 474.717049] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 474.735589] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 474.744416] 26275 total pagecache pages [ 474.749825] 0 pages in swap cache [ 474.753397] Swap cache stats: add 0, delete 0, find 0/0 [ 474.760165] Free swap = 0kB [ 474.763283] Total swap = 0kB [ 474.766437] 2097051 pages RAM [ 474.771423] 0 pages HighMem/MovableOnly [ 474.775647] 363849 pages reserved [ 474.780523] 0 pages cma reserved [ 475.094705] syz-executor.2: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 475.112821] syz-executor.0: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 475.125654] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 475.132510] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 475.138584] CPU: 1 PID: 17555 Comm: syz-executor.0 Not tainted 4.14.232-syzkaller #0 [ 475.146467] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 475.155910] Call Trace: [ 475.158515] dump_stack+0x1b2/0x281 [ 475.162231] warn_alloc.cold+0x96/0x1cc [ 475.166202] ? zone_watermark_ok_safe+0x220/0x220 [ 475.171075] __alloc_pages_nodemask+0x2127/0x2720 [ 475.175917] ? _raw_spin_unlock_irq+0x5a/0x80 [ 475.180423] ? finish_task_switch+0x178/0x610 [ 475.184958] ? finish_task_switch+0x14d/0x610 [ 475.189493] ? lock_acquire+0x170/0x3f0 [ 475.193501] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 475.198366] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 475.203863] ? __mutex_unlock_slowpath+0x75/0x770 [ 475.209071] ? alloc_pages_current+0x135/0x260 [ 475.213670] alloc_pages_current+0x155/0x260 [ 475.218114] ion_page_pool_alloc+0x118/0x1b0 [ 475.222535] ion_system_heap_allocate+0x133/0x8c0 [ 475.227393] ? ion_alloc+0x187/0x810 [ 475.231116] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 475.236586] ? ion_system_contig_heap_create+0x130/0x130 [ 475.242261] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 475.247297] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 475.252159] ion_alloc+0x204/0x810 [ 475.255725] ? ion_dma_buf_release+0x40/0x40 [ 475.260166] ? __might_fault+0x177/0x1b0 [ 475.264242] ion_ioctl+0xea/0x1f0 [ 475.267717] ? ion_query_heaps+0x360/0x360 [ 475.271975] ? ion_query_heaps+0x360/0x360 [ 475.276208] do_vfs_ioctl+0x75a/0xff0 [ 475.280016] ? ioctl_preallocate+0x1a0/0x1a0 [ 475.284426] ? lock_downgrade+0x740/0x740 [ 475.288603] ? __fget+0x225/0x360 [ 475.292065] ? do_vfs_ioctl+0xff0/0xff0 [ 475.296041] ? security_file_ioctl+0x83/0xb0 [ 475.300460] SyS_ioctl+0x7f/0xb0 [ 475.303823] ? do_vfs_ioctl+0xff0/0xff0 [ 475.307792] do_syscall_64+0x1d5/0x640 [ 475.311687] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 475.316894] RIP: 0033:0x4665f9 [ 475.320095] RSP: 002b:00007f78e5f89188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 475.327805] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 475.335074] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000003 [ 475.342364] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 475.349631] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 475.356900] R13: 00007ffd4957c29f R14: 00007f78e5f89300 R15: 0000000000022000 [ 475.364183] CPU: 0 PID: 17549 Comm: syz-executor.2 Not tainted 4.14.232-syzkaller #0 [ 475.372072] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 475.379493] warn_alloc_show_mem: 1 callbacks suppressed [ 475.379497] Mem-Info: [ 475.381420] Call Trace: [ 475.381440] dump_stack+0x1b2/0x281 [ 475.381454] warn_alloc.cold+0x96/0x1cc [ 475.381468] ? zone_watermark_ok_safe+0x220/0x220 [ 475.390226] active_anon:12022 inactive_anon:18917 isolated_anon:12 [ 475.390226] active_file:1652 inactive_file:5404 isolated_file:0 [ 475.390226] unevictable:0 dirty:37 writeback:0 unstable:0 [ 475.390226] slab_reclaimable:13112 slab_unreclaimable:112452 [ 475.390226] mapped:57253 shmem:19216 pagetables:784 bounce:0 [ 475.390226] free:202675 free_pcp:48 free_cma:0 [ 475.391835] __alloc_pages_nodemask+0x2127/0x2720 [ 475.391848] ? __schedule+0x893/0x1de0 [ 475.396657] Node 0 active_anon:46840kB inactive_anon:59108kB active_file:2492kB inactive_file:16512kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:222068kB dirty:88kB writeback:0kB shmem:60176kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 475.399432] ? lock_acquire+0x170/0x3f0 [ 475.399448] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 475.399467] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 475.399481] ? __mutex_unlock_slowpath+0x75/0x770 [ 475.399489] ? __sanitizer_cov_trace_pc+0x23/0x50 [ 475.399502] alloc_pages_current+0x155/0x260 [ 475.399516] ion_page_pool_alloc+0x118/0x1b0 [ 475.399526] ion_system_heap_allocate+0x133/0x8c0 [ 475.412421] Node 1 active_anon:1248kB inactive_anon:16560kB active_file:4116kB inactive_file:5104kB unevictable:0kB isolated(anon):48kB isolated(file):0kB mapped:6944kB dirty:60kB writeback:0kB shmem:16688kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 475.438314] ? ion_alloc+0x187/0x810 [ 475.438326] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 475.438336] ? ion_system_contig_heap_create+0x130/0x130 [ 475.438346] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 475.438357] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 475.438367] ion_alloc+0x204/0x810 [ 475.438379] ? ion_dma_buf_release+0x40/0x40 [ 475.438390] ? __might_fault+0x177/0x1b0 [ 475.438400] ion_ioctl+0xea/0x1f0 [ 475.438409] ? ion_query_heaps+0x360/0x360 [ 475.438420] ? ion_query_heaps+0x360/0x360 [ 475.438429] do_vfs_ioctl+0x75a/0xff0 [ 475.438441] ? ioctl_preallocate+0x1a0/0x1a0 [ 475.438449] ? lock_downgrade+0x740/0x740 [ 475.438463] ? __fget+0x225/0x360 [ 475.491251] Node 0 [ 475.495540] ? do_vfs_ioctl+0xff0/0xff0 [ 475.495554] ? security_file_ioctl+0x83/0xb0 [ 475.495564] SyS_ioctl+0x7f/0xb0 [ 475.512795] DMA free:11136kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 475.514054] ? do_vfs_ioctl+0xff0/0xff0 [ 475.514069] do_syscall_64+0x1d5/0x640 [ 475.514084] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 475.549381] Bluetooth: hci2 command 0x0419 tx timeout [ 475.550785] RIP: 0033:0x4665f9 [ 475.582130] lowmem_reserve[]: [ 475.585684] RSP: 002b:00007ff3638e3188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 475.585694] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 475.585700] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000005 [ 475.585705] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 475.585710] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 475.585715] R13: 00007ffe909c1c6f R14: 00007ff3638e3300 R15: 0000000000022000 [ 475.720688] 0 2717 2718 2718 2718 [ 475.737507] Node 0 DMA32 free:357940kB min:36200kB low:45248kB high:54296kB active_anon:46840kB inactive_anon:59108kB active_file:2492kB inactive_file:16512kB unevictable:0kB writepending:40kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7808kB pagetables:2928kB bounce:0kB free_pcp:384kB local_pcp:312kB free_cma:0kB [ 475.768459] lowmem_reserve[]: 0 0 0 0 0 [ 475.772525] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 475.799643] lowmem_reserve[]: 0 0 0 0 0 [ 475.808238] Node 1 Normal free:263700kB min:53696kB low:67120kB high:80544kB active_anon:1248kB inactive_anon:16560kB active_file:3920kB inactive_file:5504kB unevictable:0kB writepending:60kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:192kB pagetables:208kB bounce:0kB free_pcp:4kB local_pcp:0kB free_cma:0kB [ 475.861463] lowmem_reserve[]: 0 0 0 0 0 [ 475.878043] Node 0 DMA: 12*4kB (UE) 18*8kB (U) 20*16kB (UE) 20*32kB (UE) 2*64kB (UE) 1*128kB (E) 2*256kB (UE) 2*512kB (UE) 2*1024kB (UE) 3*2048kB (UME) 0*4096kB = 11136kB [ 475.903955] Node 0 DMA32: 62*4kB (MH) 445*8kB (EH) 157*16kB (EH) 6002*32kB (UMEH) 2*64kB (H) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 198512kB [ 475.958994] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 475.984375] Node 1 Normal: 5686*4kB (UM) 4806*8kB (U) 4588*16kB (U) 4037*32kB (UM) 0*64kB 1*128kB (M) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 263912kB [ 476.022309] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 476.091094] IPVS: ftp: loaded support on port[0] = 21 [ 476.099890] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 476.146957] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 476.183443] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 476.213950] 26377 total pagecache pages [ 476.234288] 0 pages in swap cache [ 476.245424] Swap cache stats: add 0, delete 0, find 0/0 [ 476.253298] Free swap = 0kB [ 476.269592] Total swap = 0kB [ 476.275935] 2097051 pages RAM [ 476.288439] 0 pages HighMem/MovableOnly [ 476.296922] 363849 pages reserved [ 476.305495] 0 pages cma reserved [ 476.836265] chnl_net:caif_netlink_parms(): no params data found [ 477.327186] oom_reaper: reaped process 17550 (syz-executor.4), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 477.481698] in:imklog invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 477.501851] in:imklog cpuset=/ mems_allowed=0-1 [ 477.501877] CPU: 1 PID: 17294 Comm: in:imklog Not tainted 4.14.232-syzkaller #0 [ 477.501885] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 477.523367] Call Trace: [ 477.525966] dump_stack+0x1b2/0x281 [ 477.529610] dump_header+0x178/0x82f [ 477.533325] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 477.538430] ? ___ratelimit+0x2cd/0x530 [ 477.541977] syz-executor.4: page allocation failure: order:0 [ 477.542401] oom_kill_process.cold+0x10/0xa40 [ 477.542420] out_of_memory+0xe3e/0x1190 [ 477.548234] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 477.552782] ? oom_killer_disable+0x1c0/0x1c0 [ 477.556728] (null) [ 477.563828] ? mutex_trylock+0x152/0x1a0 [ 477.563841] __alloc_pages_nodemask+0x23e1/0x2720 [ 477.563861] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 477.563885] alloc_pages_current+0x155/0x260 [ 477.568387] syz-executor.4 cpuset= [ 477.570513] filemap_fault+0x11a1/0x1ad0 [ 477.574554] / [ 477.579496] ext4_filemap_fault+0x84/0xb0 [ 477.584356] mems_allowed=0-1 [ 477.588703] __do_fault+0xfa/0x380 [ 477.588718] __handle_mm_fault+0x2497/0x4620 [ 477.613144] ? vm_insert_page+0x7c0/0x7c0 [ 477.617292] ? lock_downgrade+0x740/0x740 [ 477.621451] ? mark_held_locks+0xa6/0xf0 [ 477.625621] handle_mm_fault+0x455/0x9c0 [ 477.629693] __do_page_fault+0x549/0xad0 [ 477.633760] ? spurious_fault+0x640/0x640 [ 477.637909] ? do_page_fault+0x60/0x500 [ 477.641877] ? page_fault+0x2f/0x50 [ 477.645508] page_fault+0x45/0x50 [ 477.648954] RIP: 1fa0:0x1f9f [ 477.651967] RSP: 0000:000055aecb7149d0 EFLAGS: 7f9a96471da0 [ 477.651992] CPU: 0 PID: 17550 Comm: syz-executor.4 Not tainted 4.14.232-syzkaller #0 [ 477.661255] Mem-Info: [ 477.665605] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 477.672379] active_anon:12152 inactive_anon:18920 isolated_anon:0 [ 477.672379] active_file:24 inactive_file:7 isolated_file:0 [ 477.672379] unevictable:0 dirty:0 writeback:0 unstable:0 [ 477.672379] slab_reclaimable:13052 slab_unreclaimable:113994 [ 477.672379] mapped:52747 shmem:19221 pagetables:807 bounce:0 [ 477.672379] free:13793 free_pcp:61 free_cma:0 [ 477.677362] Call Trace: [ 477.713383] dump_stack+0x1b2/0x281 [ 477.717023] warn_alloc.cold+0x96/0x1cc [ 477.719626] Node 0 active_anon:46992kB inactive_anon:59108kB active_file:60kB inactive_file:28kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:210984kB dirty:0kB writeback:0kB shmem:60180kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 477.720999] ? zone_watermark_ok_safe+0x220/0x220 [ 477.753518] ? usleep_range+0x130/0x130 [ 477.757475] Node 1 active_anon:1616kB inactive_anon:16572kB active_file:36kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:4kB dirty:0kB writeback:0kB shmem:16704kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 477.757483] Node 0 [ 477.784370] ? try_to_free_pages+0x23f/0x6e0 [ 477.784381] ? _find_next_bit+0xdb/0x100 [ 477.784391] ? run_timer_softirq+0x5a0/0x5a0 [ 477.784407] __alloc_pages_nodemask+0x2127/0x2720 [ 477.784424] ? lock_acquire+0x170/0x3f0 [ 477.784438] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 477.784448] ? ion_page_pool_alloc+0x9e/0x1b0 [ 477.784464] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 477.784483] alloc_pages_current+0x155/0x260 [ 477.784493] ion_page_pool_alloc+0x118/0x1b0 [ 477.784502] ion_system_heap_allocate+0x133/0x8c0 [ 477.784513] ? ion_alloc+0x187/0x810 [ 477.795597] DMA free:10968kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 477.799951] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 477.799963] ? ion_system_contig_heap_create+0x130/0x130 [ 477.799972] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 477.799984] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 477.799994] ion_alloc+0x204/0x810 [ 477.800007] ? ion_dma_buf_release+0x40/0x40 [ 477.800019] ? __might_fault+0x177/0x1b0 [ 477.800031] ion_ioctl+0xea/0x1f0 [ 477.800041] ? ion_query_heaps+0x360/0x360 [ 477.804874] lowmem_reserve[]: [ 477.808843] ? ion_query_heaps+0x360/0x360 [ 477.808853] do_vfs_ioctl+0x75a/0xff0 [ 477.808864] ? ioctl_preallocate+0x1a0/0x1a0 [ 477.808873] ? lock_downgrade+0x740/0x740 [ 477.808885] ? __fget+0x225/0x360 [ 477.808893] ? do_vfs_ioctl+0xff0/0xff0 [ 477.808904] ? security_file_ioctl+0x83/0xb0 [ 477.808914] SyS_ioctl+0x7f/0xb0 [ 477.808922] ? do_vfs_ioctl+0xff0/0xff0 [ 477.808933] do_syscall_64+0x1d5/0x640 [ 477.808949] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 477.808958] RIP: 0033:0x4665f9 [ 477.821792] 0 [ 477.823719] RSP: 002b:00007f9108899188 EFLAGS: 00000246 [ 477.829157] 2717 [ 477.832694] ORIG_RAX: 0000000000000010 [ 477.844276] 2718 [ 477.869061] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 477.869067] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000006 [ 477.869072] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 477.869076] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 477.869081] R13: 00007fffb2c94dcf R14: 00007f9108899300 R15: 0000000000022000 [ 477.891595] warn_alloc_show_mem: 1 callbacks suppressed [ 477.891599] Mem-Info: [ 477.905122] 2718 [ 477.911738] active_anon:12152 inactive_anon:18920 isolated_anon:0 [ 477.911738] active_file:24 inactive_file:7 isolated_file:0 [ 477.911738] unevictable:0 dirty:0 writeback:0 unstable:0 [ 477.911738] slab_reclaimable:13052 slab_unreclaimable:113994 [ 477.911738] mapped:52747 shmem:19221 pagetables:807 bounce:0 [ 477.911738] free:13793 free_pcp:61 free_cma:0 [ 477.928237] 2718 [ 477.935413] Node 0 active_anon:46992kB inactive_anon:59108kB active_file:60kB inactive_file:28kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:210984kB dirty:0kB writeback:0kB shmem:60180kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 477.949551] Node 1 active_anon:1616kB inactive_anon:16572kB active_file:36kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:4kB dirty:0kB writeback:0kB shmem:16704kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 477.955653] Node 0 [ 477.969742] Node 0 [ 477.979916] DMA32 free:17832kB min:36200kB low:45248kB high:54296kB active_anon:46992kB inactive_anon:59108kB active_file:44kB inactive_file:36kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7872kB pagetables:2928kB bounce:0kB free_pcp:120kB local_pcp:0kB free_cma:0kB [ 477.994845] DMA free:10968kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 478.007661] lowmem_reserve[]: [ 478.027158] lowmem_reserve[]: [ 478.066340] 0 [ 478.104907] 0 [ 478.125911] 0 [ 478.154346] Bluetooth: hci5 command 0x0409 tx timeout [ 478.184426] 0 0 0 [ 478.194772] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 478.198807] 2717 [ 478.229978] lowmem_reserve[]: 0 0 0 0 0 [ 478.233875] 2718 [ 478.236058] Node 1 [ 478.236061] 2718 2718 [ 478.244966] Normal free:26464kB min:53696kB low:67120kB high:80544kB active_anon:1612kB inactive_anon:16572kB active_file:20kB inactive_file:16kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:192kB pagetables:300kB bounce:0kB free_pcp:124kB local_pcp:4kB free_cma:0kB [ 478.245268] Node 0 [ 478.282775] lowmem_reserve[]: 0 0 0 0 0 [ 478.286711] DMA32 free:17488kB min:36200kB low:45248kB high:54296kB active_anon:46896kB inactive_anon:59108kB active_file:40kB inactive_file:40kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7872kB pagetables:2928kB bounce:0kB free_pcp:120kB local_pcp:120kB free_cma:0kB [ 478.291251] Node 0 [ 478.325008] lowmem_reserve[]: 0 0 0 0 0 [ 478.331301] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 478.332963] DMA: [ 478.368703] lowmem_reserve[]: [ 478.368846] 2*4kB [ 478.370811] 0 [ 478.373910] (UE) 2*8kB [ 478.376051] 0 [ 478.386837] (U) [ 478.389206] 0 [ 478.390857] 20*16kB [ 478.391193] 0 [ 478.392982] (UE) [ 478.395286] 0 [ 478.397070] 20*32kB [ 478.412209] (UE) [ 478.413037] Node 1 [ 478.413040] 2*64kB (UE) [ 478.415103] Normal free:26464kB min:53696kB low:67120kB high:80544kB active_anon:1612kB inactive_anon:16572kB active_file:20kB inactive_file:16kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:192kB pagetables:300kB bounce:0kB free_pcp:124kB local_pcp:120kB free_cma:0kB [ 478.417319] 1*128kB [ 478.426182] lowmem_reserve[]: [ 478.453179] (E) 2*256kB (UE) 2*512kB (UE) 2*1024kB (UE) 3*2048kB (UME) 0*4096kB = 10968kB [ 478.466003] 0 0 0 0 0 [ 478.471950] Node 0 DMA32: 1506*4kB (ME) 705*8kB (UME) 222*16kB (UME) 53*32kB (UME) 7*64kB (UM) 1*128kB (M) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 17488kB [ 478.479552] Node 0 DMA: 2*4kB (UE) 2*8kB (U) 20*16kB (UE) 20*32kB (UE) 2*64kB (UE) 1*128kB (E) 2*256kB (UE) 2*512kB (UE) 2*1024kB (UE) 3*2048kB (UME) 0*4096kB = 10968kB [ 478.495217] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 478.514440] Node 0 DMA32: 1506*4kB (ME) 705*8kB (UME) 222*16kB (UME) 53*32kB (UME) 7*64kB (UM) 1*128kB (M) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 17488kB [ 478.521898] Node 1 Normal: 158*4kB (ME) 67*8kB (UM) 47*16kB (M) 293*32kB (UM) 197*64kB (UM) 14*128kB (UM) 3*256kB (M) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 26464kB [ 478.538016] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 478.563883] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 478.576260] Node 1 Normal: 158*4kB (ME) 67*8kB (UM) 47*16kB (M) 293*32kB (UM) 197*64kB (UM) 14*128kB (UM) 3*256kB (M) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 26464kB [ 478.593815] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 478.609851] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 478.609860] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 478.609867] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 478.609873] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 478.609877] 19250 total pagecache pages [ 478.609887] 0 pages in swap cache [ 478.609893] Swap cache stats: add 0, delete 0, find 0/0 [ 478.609895] Free swap = 0kB [ 478.609898] Total swap = 0kB [ 478.609905] 2097051 pages RAM [ 478.609908] 0 pages HighMem/MovableOnly [ 478.609911] 363849 pages reserved [ 478.609915] 0 pages cma reserved [ 478.682759] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 478.692225] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 478.701931] 19731 total pagecache pages [ 478.706840] 0 pages in swap cache [ 478.711448] Swap cache stats: add 0, delete 0, find 0/0 [ 478.717614] Free swap = 0kB [ 478.720932] Total swap = 0kB [ 478.724054] 2097051 pages RAM [ 478.727237] 0 pages HighMem/MovableOnly [ 478.732038] bridge0: port 1(bridge_slave_0) entered blocking state [ 478.739527] 363849 pages reserved [ 478.743286] 0 pages cma reserved [ 478.746751] Out of memory (oom_kill_allocating_task): Kill process 17294 (in:imklog) score 0 or sacrifice child [ 478.757430] bridge0: port 1(bridge_slave_0) entered disabled state [ 478.768212] device bridge_slave_0 entered promiscuous mode [ 478.784040] Killed process 17292 (rsyslogd) total-vm:254332kB, anon-rss:580kB, file-rss:0kB, shmem-rss:0kB [ 478.819164] bridge0: port 2(bridge_slave_1) entered blocking state [ 478.826362] bridge0: port 2(bridge_slave_1) entered disabled state [ 478.833869] device bridge_slave_1 entered promiscuous mode [ 478.858663] oom_reaper: reaped process 17292 (rsyslogd), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 478.951150] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 478.966200] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 478.993232] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 479.011555] team0: Port device team_slave_0 added [ 479.017311] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 479.059699] team0: Port device team_slave_1 added 11:47:14 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000100)={0x80000001}) 11:47:14 executing program 5: ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(0xffffffffffffffff, 0x7a9, &(0x7f0000000040)={{@my=0x0, 0x7f}, 0x40, 0x3, 0x0, 0x6, 0xf1, 0x5, 0x39, 0x3}) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0), 0x20000, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000100)={0x80000001, 0x27}) [ 479.204596] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 479.244418] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 479.378173] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 479.463965] oom_reaper: reaped process 17555 (syz-executor.0), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 479.541510] oom_reaper: reaped process 17549 (syz-executor.2), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 479.579958] kworker/u4:3 invoked oom-killer: gfp_mask=0x15080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null), order=3, oom_score_adj=0 [ 479.597406] kworker/u4:3 cpuset=/ mems_allowed=0-1 [ 479.602602] CPU: 1 PID: 176 Comm: kworker/u4:3 Not tainted 4.14.232-syzkaller #0 [ 479.610144] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 479.619532] Workqueue: events_unbound call_usermodehelper_exec_work [ 479.625945] Call Trace: [ 479.628538] dump_stack+0x1b2/0x281 [ 479.632169] dump_header+0x178/0x82f [ 479.636234] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 479.641342] ? ___ratelimit+0x2cd/0x530 [ 479.645345] oom_kill_process.cold+0x10/0xa40 [ 479.649849] ? lock_downgrade+0x740/0x740 [ 479.654016] out_of_memory+0x2dc/0x1190 [ 479.658003] ? oom_killer_disable+0x1c0/0x1c0 [ 479.662490] ? mutex_trylock+0x152/0x1a0 [ 479.666565] __alloc_pages_nodemask+0x23e1/0x2720 [ 479.671428] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 479.676281] ? kmem_cache_alloc_node+0x38b/0x410 [ 479.681038] copy_process.part.0+0x265/0x71c0 [ 479.685535] ? __lock_acquire+0x5fc/0x3f20 [ 479.689770] ? debug_object_activate+0x292/0x490 [ 479.694538] ? trace_hardirqs_on+0x10/0x10 [ 479.698785] ? static_obj+0x50/0x50 [ 479.702974] ? call_usermodehelper_exec_work+0x2a0/0x2a0 [ 479.708444] ? __cleanup_sighand+0x40/0x40 [ 479.712705] ? call_usermodehelper_exec_work+0x2a0/0x2a0 [ 479.718160] _do_fork+0x184/0xc80 [ 479.721639] ? fork_idle+0x270/0x270 [ 479.725372] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 479.730481] ? process_one_work+0x6c4/0x14a0 [ 479.734888] ? call_usermodehelper_exec_work+0x2a0/0x2a0 [ 479.740348] kernel_thread+0x2f/0x40 [ 479.744060] call_usermodehelper_exec_work+0x1ac/0x2a0 [ 479.749377] ? call_usermodehelper+0x80/0x80 [ 479.753782] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 479.759231] process_one_work+0x793/0x14a0 [ 479.763472] ? work_busy+0x320/0x320 [ 479.767189] ? worker_thread+0x158/0xff0 [ 479.771267] ? _raw_spin_unlock_irq+0x24/0x80 [ 479.775762] worker_thread+0x5cc/0xff0 [ 479.779654] ? rescuer_thread+0xc80/0xc80 [ 479.783797] kthread+0x30d/0x420 [ 479.787157] ? kthread_create_on_node+0xd0/0xd0 [ 479.791824] ret_from_fork+0x24/0x30 [ 479.797284] syz-executor.5: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 479.797567] syz-executor.2: [ 479.809416] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 479.817600] CPU: 1 PID: 17736 Comm: syz-executor.5 Not tainted 4.14.232-syzkaller #0 [ 479.825514] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 479.827653] syz-executor.4: [ 479.834870] Call Trace: [ 479.834882] page allocation failure: order:4 [ 479.837893] dump_stack+0x1b2/0x281 [ 479.837906] warn_alloc.cold+0x96/0x1cc [ 479.837918] ? zone_watermark_ok_safe+0x220/0x220 [ 479.837939] __alloc_pages_nodemask+0x2127/0x2720 [ 479.854239] page allocation failure: order:0 [ 479.857337] ? ___preempt_schedule+0x16/0x18 [ 479.857354] ? lock_acquire+0x170/0x3f0 [ 479.857371] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 479.866545] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 479.866607] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 479.882491] (null) [ 479.886995] ? __mutex_unlock_slowpath+0x75/0x770 [ 479.894768] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 479.899416] alloc_pages_current+0x155/0x260 [ 479.899431] ion_page_pool_alloc+0x118/0x1b0 [ 479.899441] ion_system_heap_allocate+0x133/0x8c0 [ 479.899451] ? ion_alloc+0x187/0x810 [ 479.913672] syz-executor.4 cpuset= [ 479.915340] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 479.924364] (null) [ 479.927506] ? ion_system_contig_heap_create+0x130/0x130 [ 479.927517] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 479.927530] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 479.927540] ion_alloc+0x204/0x810 [ 479.935910] / [ 479.940581] ? ion_dma_buf_release+0x40/0x40 [ 479.948248] syz-executor.2 cpuset= [ 479.950413] ? __might_fault+0x177/0x1b0 [ 479.953930] / [ 479.955639] ion_ioctl+0xea/0x1f0 [ 479.960091] mems_allowed=0-1 [ 479.963578] ? ion_query_heaps+0x360/0x360 [ 479.977369] mems_allowed=0-1 [ 479.980074] ? ion_query_heaps+0x360/0x360 [ 479.987407] do_vfs_ioctl+0x75a/0xff0 [ 479.991228] ? ioctl_preallocate+0x1a0/0x1a0 [ 479.995648] ? lock_downgrade+0x740/0x740 [ 479.999795] ? __fget+0x225/0x360 [ 480.003247] ? do_vfs_ioctl+0xff0/0xff0 [ 480.007220] ? security_file_ioctl+0x83/0xb0 [ 480.011645] SyS_ioctl+0x7f/0xb0 [ 480.015281] ? do_vfs_ioctl+0xff0/0xff0 [ 480.019262] do_syscall_64+0x1d5/0x640 [ 480.023167] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 480.028348] RIP: 0033:0x4665f9 [ 480.031523] RSP: 002b:00007f4323f8e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 480.039226] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 480.046493] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000003 [ 480.053758] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 480.061046] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 480.068309] R13: 00007ffec8acf2af R14: 00007f4323f8e300 R15: 0000000000022000 [ 480.075591] CPU: 0 PID: 17549 Comm: syz-executor.2 Not tainted 4.14.232-syzkaller #0 [ 480.083506] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 480.086592] Mem-Info: [ 480.092857] Call Trace: [ 480.092879] dump_stack+0x1b2/0x281 [ 480.092892] warn_alloc.cold+0x96/0x1cc [ 480.092904] ? zone_watermark_ok_safe+0x220/0x220 [ 480.092914] ? usleep_range+0x130/0x130 [ 480.092922] ? try_to_free_pages+0x23f/0x6e0 [ 480.092931] ? _find_next_bit+0xdb/0x100 [ 480.092942] ? run_timer_softirq+0x5a0/0x5a0 [ 480.092958] __alloc_pages_nodemask+0x2127/0x2720 [ 480.095407] active_anon:11889 inactive_anon:18919 isolated_anon:0 [ 480.095407] active_file:23 inactive_file:3 isolated_file:0 [ 480.095407] unevictable:0 dirty:0 writeback:0 unstable:0 [ 480.095407] slab_reclaimable:13052 slab_unreclaimable:114930 [ 480.095407] mapped:52790 shmem:19221 pagetables:804 bounce:0 [ 480.095407] free:13914 free_pcp:11 free_cma:0 [ 480.097962] ? lock_acquire+0x170/0x3f0 [ 480.097985] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 480.097995] ? ion_page_pool_alloc+0x9e/0x1b0 [ 480.098013] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 480.098032] alloc_pages_current+0x155/0x260 [ 480.108141] Node 0 active_anon:45464kB inactive_anon:59104kB active_file:20kB inactive_file:16kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:211096kB dirty:0kB writeback:0kB shmem:60180kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 480.110433] ion_page_pool_alloc+0x118/0x1b0 [ 480.114409] Node 1 active_anon:2092kB inactive_anon:16572kB active_file:72kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:64kB dirty:0kB writeback:0kB shmem:16704kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 480.118804] ion_system_heap_allocate+0x133/0x8c0 [ 480.118815] ? ion_alloc+0x187/0x810 [ 480.118824] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 480.118833] ? ion_system_contig_heap_create+0x130/0x130 [ 480.118842] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 480.118853] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 480.118863] ion_alloc+0x204/0x810 [ 480.118875] ? ion_dma_buf_release+0x40/0x40 [ 480.118887] ? __might_fault+0x177/0x1b0 [ 480.118900] ion_ioctl+0xea/0x1f0 [ 480.127196] Node 0 [ 480.127347] ? ion_query_heaps+0x360/0x360 [ 480.127359] ? ion_query_heaps+0x360/0x360 [ 480.127369] do_vfs_ioctl+0x75a/0xff0 [ 480.127380] ? ioctl_preallocate+0x1a0/0x1a0 [ 480.127390] ? lock_downgrade+0x740/0x740 [ 480.127403] ? __fget+0x225/0x360 [ 480.127412] ? do_vfs_ioctl+0xff0/0xff0 [ 480.127425] ? security_file_ioctl+0x83/0xb0 [ 480.134457] DMA free:10968kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 480.165322] SyS_ioctl+0x7f/0xb0 [ 480.165332] ? do_vfs_ioctl+0xff0/0xff0 [ 480.165343] do_syscall_64+0x1d5/0x640 [ 480.165357] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 480.165365] RIP: 0033:0x4665f9 [ 480.165369] RSP: 002b:00007ff3638e3188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 480.165378] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 480.165383] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000005 [ 480.165388] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 480.165393] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 480.165398] R13: 00007ffe909c1c6f R14: 00007ff3638e3300 R15: 0000000000022000 [ 480.175473] syz-executor.0: [ 480.185233] lowmem_reserve[]: [ 480.198117] CPU: 0 PID: 17550 Comm: syz-executor.4 Not tainted 4.14.232-syzkaller #0 [ 480.223207] 0 [ 480.248914] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 480.248920] Call Trace: [ 480.248943] dump_stack+0x1b2/0x281 [ 480.248955] warn_alloc.cold+0x96/0x1cc [ 480.248967] ? zone_watermark_ok_safe+0x220/0x220 [ 480.248994] __alloc_pages_nodemask+0x2127/0x2720 [ 480.249003] ? __schedule+0x893/0x1de0 [ 480.249019] ? lock_acquire+0x170/0x3f0 [ 480.249035] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 480.249056] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 480.260108] 2717 [ 480.263084] ? __mutex_unlock_slowpath+0x75/0x770 [ 480.270754] 2718 [ 480.273530] alloc_pages_current+0x155/0x260 [ 480.282640] 2718 [ 480.286386] ion_page_pool_alloc+0x118/0x1b0 [ 480.301383] 2718 [ 480.304569] ion_system_heap_allocate+0x133/0x8c0 [ 480.313964] Mem-Info: [ 480.316904] ? _raw_spin_unlock+0x29/0x40 [ 480.328697] ? _ion_heap_freelist_drain+0x6e/0x410 [ 480.328706] ? ion_system_contig_heap_create+0x130/0x130 [ 480.328717] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 480.328728] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 480.328738] ion_alloc+0x27a/0x810 [ 480.328752] ? ion_dma_buf_release+0x40/0x40 [ 480.328764] ? __might_fault+0x177/0x1b0 [ 480.328776] ion_ioctl+0xea/0x1f0 [ 480.328785] ? ion_query_heaps+0x360/0x360 [ 480.328798] ? ion_query_heaps+0x360/0x360 [ 480.328808] do_vfs_ioctl+0x75a/0xff0 [ 480.328819] ? ioctl_preallocate+0x1a0/0x1a0 [ 480.328828] ? lock_downgrade+0x740/0x740 [ 480.328841] ? __fget+0x225/0x360 [ 480.364504] active_anon:11862 inactive_anon:18920 isolated_anon:0 [ 480.364504] active_file:15 inactive_file:15 isolated_file:0 [ 480.364504] unevictable:0 dirty:0 writeback:0 unstable:0 [ 480.364504] slab_reclaimable:13052 slab_unreclaimable:114898 [ 480.364504] mapped:52773 shmem:19221 pagetables:777 bounce:0 [ 480.364504] free:14005 free_pcp:12 free_cma:0 [ 480.365738] ? do_vfs_ioctl+0xff0/0xff0 [ 480.373214] Node 0 active_anon:45416kB inactive_anon:59100kB active_file:40kB inactive_file:40kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:211088kB dirty:0kB writeback:0kB shmem:60172kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 480.374103] ? security_file_ioctl+0x83/0xb0 [ 480.392213] Node 1 active_anon:2032kB inactive_anon:16580kB active_file:20kB inactive_file:20kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:4kB dirty:0kB writeback:0kB shmem:16712kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 480.396337] SyS_ioctl+0x7f/0xb0 [ 480.413834] Node 0 [ 480.418413] ? do_vfs_ioctl+0xff0/0xff0 [ 480.418427] do_syscall_64+0x1d5/0x640 [ 480.418442] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 480.418450] RIP: 0033:0x4665f9 [ 480.418454] RSP: 002b:00007f9108899188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 480.418463] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 480.418468] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000006 [ 480.418472] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 480.418477] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 480.418482] R13: 00007fffb2c94dcf R14: 00007f9108899300 R15: 0000000000022000 [ 480.426898] Bluetooth: hci5 command 0x041b tx timeout [ 480.443470] Node 0 [ 480.452834] page allocation failure: order:0 [ 480.465039] DMA free:10968kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 480.478863] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 480.492143] DMA32 free:18248kB min:36200kB low:45248kB high:54296kB active_anon:45416kB inactive_anon:59100kB active_file:40kB inactive_file:40kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7712kB pagetables:2704kB bounce:0kB free_pcp:44kB local_pcp:44kB free_cma:0kB [ 480.503150] (null) [ 480.513331] lowmem_reserve[]: [ 480.516662] syz-executor.0 cpuset= [ 480.520891] lowmem_reserve[]: 0 2717 [ 480.531376] / mems_allowed=0-1 [ 480.531398] CPU: 0 PID: 17555 Comm: syz-executor.0 Not tainted 4.14.232-syzkaller #0 [ 480.531403] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 480.531407] Call Trace: [ 480.531428] dump_stack+0x1b2/0x281 [ 480.531442] warn_alloc.cold+0x96/0x1cc [ 480.531455] ? zone_watermark_ok_safe+0x220/0x220 [ 480.531465] ? usleep_range+0x130/0x130 [ 480.531474] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 480.531487] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 480.531496] ? run_timer_softirq+0x5a0/0x5a0 [ 480.531520] __alloc_pages_nodemask+0x2127/0x2720 [ 480.545231] 0 [ 480.548329] ? lock_acquire+0x170/0x3f0 [ 480.548347] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 480.548356] ? ion_page_pool_alloc+0x9e/0x1b0 [ 480.548373] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 480.548385] ? retint_kernel+0x2d/0x2d [ 480.551830] 0 [ 480.556066] alloc_pages_current+0x155/0x260 [ 480.570481] 2718 [ 480.572895] ion_page_pool_alloc+0x118/0x1b0 [ 480.576351] 2718 [ 480.609530] ion_system_heap_allocate+0x133/0x8c0 [ 480.609540] ? ion_alloc+0x187/0x810 [ 480.609550] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 480.609559] ? ion_system_contig_heap_create+0x130/0x130 [ 480.609568] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 480.609579] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 480.609588] ion_alloc+0x204/0x810 [ 480.609600] ? ion_dma_buf_release+0x40/0x40 [ 480.609613] ? __might_fault+0x177/0x1b0 [ 480.609624] ion_ioctl+0xea/0x1f0 [ 480.609633] ? ion_query_heaps+0x360/0x360 [ 480.609645] ? ion_query_heaps+0x360/0x360 [ 480.609655] do_vfs_ioctl+0x75a/0xff0 [ 480.609666] ? ioctl_preallocate+0x1a0/0x1a0 [ 480.609675] ? lock_downgrade+0x740/0x740 [ 480.609688] ? __fget+0x225/0x360 [ 480.609698] ? do_vfs_ioctl+0xff0/0xff0 [ 480.609709] ? security_file_ioctl+0x83/0xb0 [ 480.609719] SyS_ioctl+0x7f/0xb0 [ 480.609726] ? do_vfs_ioctl+0xff0/0xff0 [ 480.609737] do_syscall_64+0x1d5/0x640 [ 480.609755] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 480.623508] 0 [ 480.641493] RIP: 0033:0x4665f9 [ 480.641499] RSP: 002b:00007f78e5f89188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 480.641508] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 480.641512] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000003 [ 480.641517] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 480.641522] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 480.641527] R13: 00007ffd4957c29f R14: 00007f78e5f89300 R15: 0000000000022000 [ 480.789639] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 480.816196] 2718 [ 481.084730] 0 0 [ 481.094599] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 481.102430] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 481.174092] lowmem_reserve[]: 0 0 0 0 0 [ 481.197585] Node 1 Normal free:498204kB min:53696kB low:67120kB high:80544kB active_anon:2032kB inactive_anon:16580kB active_file:20kB inactive_file:3692kB unevictable:0kB writepending:8kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:224kB pagetables:404kB bounce:0kB free_pcp:48kB local_pcp:0kB free_cma:0kB [ 481.248293] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 481.284408] lowmem_reserve[]: 0 0 0 0 0 [ 481.296150] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 481.320489] Node 0 DMA: 3*4kB (UME) 2*8kB (U) 21*16kB (UME) 20*32kB (UE) 10*64kB (UE) 13*128kB (UME) 3*256kB (UE) 2*512kB (UE) 2*1024kB (UE) 2*2048kB (UE) 0*4096kB = 11244kB [ 481.328630] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 481.387936] Node 0 DMA32: 1864*4kB (UME) 556*8kB (UME) 210*16kB (UME) 96*32kB (UME) 359*64kB (UME) 125*128kB (UM) 5*256kB (U) 1*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 59104kB [ 481.430771] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 481.446243] Node 0 DMA32 free:46704kB min:36200kB low:45248kB high:54296kB active_anon:45524kB inactive_anon:59100kB active_file:340kB inactive_file:4308kB unevictable:0kB writepending:4kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7744kB pagetables:2852kB bounce:0kB free_pcp:1344kB local_pcp:732kB free_cma:0kB [ 481.448681] device hsr_slave_0 entered promiscuous mode [ 481.500482] Node 1 Normal: 1500*4kB (UM) 124*8kB (UM) 72*16kB (UME) 119*32kB (U) 2903*64kB (UME) 768*128kB (UM) 364*256kB (U) 100*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 440432kB [ 481.557370] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 481.566345] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 481.575747] lowmem_reserve[]: 0 0 0 0 0 [ 481.580339] device hsr_slave_1 entered promiscuous mode [ 481.586056] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 481.628157] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 481.636077] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 481.647341] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 481.656315] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 481.689823] lowmem_reserve[]: 0 0 0 0 0 [ 481.705182] 22325 total pagecache pages [ 481.716881] Node 1 Normal free:157996kB min:53696kB low:67120kB high:80544kB active_anon:1532kB inactive_anon:16580kB active_file:1120kB inactive_file:3292kB unevictable:0kB writepending:8kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:224kB pagetables:404kB bounce:0kB free_pcp:1268kB local_pcp:648kB free_cma:0kB [ 481.747017] 0 pages in swap cache [ 481.754198] Swap cache stats: add 0, delete 0, find 0/0 [ 481.793839] Free swap = 0kB [ 481.797513] Total swap = 0kB [ 481.809233] 2097051 pages RAM [ 481.822245] 0 pages HighMem/MovableOnly [ 481.826338] 363849 pages reserved [ 481.837426] lowmem_reserve[]: 0 0 0 0 0 [ 481.843206] Node 0 DMA: 3*4kB (UME) 2*8kB (U) 18*16kB (UE) 20*32kB (UE) 7*64kB (UE) 13*128kB (UME) 3*256kB (UE) 2*512kB (UE) 2*1024kB (UE) 2*2048kB (UE) 0*4096kB = 11004kB [ 481.865251] 0 pages cma reserved [ 481.879850] Out of memory: Kill process 17733 (syz-executor.5) score 1004 or sacrifice child [ 481.902907] Node 0 DMA32: 14146*4kB (UME) 2060*8kB (UE) 2459*16kB (UME) 485*32kB (UE) 14*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 128824kB [ 481.909844] Killed process 17736 (syz-executor.5) total-vm:93252kB, anon-rss:152kB, file-rss:35064kB, shmem-rss:0kB [ 481.947410] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 481.985355] Node 1 Normal: 10585*4kB (UM) 1815*8kB (U) 1578*16kB (UE) 591*32kB (UM) 2*64kB (U) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 101148kB [ 482.029262] oom_reaper: reaped process 17736 (syz-executor.5), now anon-rss:0kB, file-rss:8kB, shmem-rss:0kB [ 482.048527] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 482.063831] syz-executor.2: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 482.078857] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 482.090315] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 482.096059] syz-executor.2 cpuset= [ 482.112279] syz-executor.0: [ 482.112355] / [ 482.115870] page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 482.132287] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 482.132390] mems_allowed=0-1 [ 482.145421] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 482.155701] 22654 total pagecache pages [ 482.160047] CPU: 0 PID: 17555 Comm: syz-executor.0 Not tainted 4.14.232-syzkaller #0 [ 482.167939] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 482.172004] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 482.177296] Call Trace: [ 482.177320] dump_stack+0x1b2/0x281 [ 482.177333] warn_alloc.cold+0x96/0x1cc [ 482.177345] ? zone_watermark_ok_safe+0x220/0x220 [ 482.177367] __alloc_pages_nodemask+0x2127/0x2720 [ 482.177376] ? __schedule+0x893/0x1de0 [ 482.177392] ? lock_acquire+0x170/0x3f0 [ 482.177406] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 482.177421] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 482.177433] ? __mutex_unlock_slowpath+0x75/0x770 [ 482.191363] 0 pages in swap cache [ 482.193941] ? retint_kernel+0x2d/0x2d [ 482.211194] Swap cache stats: add 0, delete 0, find 0/0 [ 482.211447] alloc_pages_current+0x155/0x260 [ 482.231787] Free swap = 0kB [ 482.233889] ion_page_pool_alloc+0x118/0x1b0 [ 482.233903] ion_system_heap_allocate+0x133/0x8c0 [ 482.255957] ? _raw_spin_unlock+0x29/0x40 [ 482.260114] ? _ion_heap_freelist_drain+0x6e/0x410 [ 482.261027] Total swap = 0kB [ 482.265046] ? ion_system_contig_heap_create+0x130/0x130 [ 482.265058] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 482.265072] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 482.283428] ion_alloc+0x27a/0x810 [ 482.287067] ? ion_dma_buf_release+0x40/0x40 [ 482.291488] ? __might_fault+0x177/0x1b0 [ 482.295559] ion_ioctl+0xea/0x1f0 [ 482.297443] 2097051 pages RAM [ 482.299019] ? ion_query_heaps+0x360/0x360 [ 482.299033] ? ion_query_heaps+0x360/0x360 [ 482.306022] 0 pages HighMem/MovableOnly [ 482.306461] do_vfs_ioctl+0x75a/0xff0 [ 482.318563] ? ioctl_preallocate+0x1a0/0x1a0 [ 482.322975] ? lock_downgrade+0x740/0x740 [ 482.325297] 363849 pages reserved [ 482.327169] ? __fget+0x225/0x360 [ 482.327182] ? do_vfs_ioctl+0xff0/0xff0 [ 482.337456] 8021q: adding VLAN 0 to HW filter on device bond0 [ 482.338033] ? security_file_ioctl+0x83/0xb0 [ 482.348321] SyS_ioctl+0x7f/0xb0 [ 482.351696] ? do_vfs_ioctl+0xff0/0xff0 [ 482.352712] 0 pages cma reserved [ 482.355665] do_syscall_64+0x1d5/0x640 [ 482.355681] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 482.368111] RIP: 0033:0x4665f9 [ 482.371303] RSP: 002b:00007f78e5f89188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 482.372319] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 482.379012] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 482.379018] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000003 [ 482.379023] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 482.379027] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 482.379032] R13: 00007ffd4957c29f R14: 00007f78e5f89300 R15: 0000000000022000 [ 482.403702] warn_alloc_show_mem: 3 callbacks suppressed [ 482.403706] Mem-Info: [ 482.422930] CPU: 1 PID: 17549 Comm: syz-executor.2 Not tainted 4.14.232-syzkaller #0 [ 482.438065] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 482.447425] Call Trace: [ 482.450026] dump_stack+0x1b2/0x281 [ 482.453659] warn_alloc.cold+0x96/0x1cc [ 482.457334] active_anon:12011 inactive_anon:18920 isolated_anon:0 [ 482.457334] active_file:1223 inactive_file:2172 isolated_file:0 [ 482.457334] unevictable:0 dirty:3 writeback:0 unstable:0 [ 482.457334] slab_reclaimable:13065 slab_unreclaimable:114228 [ 482.457334] mapped:54838 shmem:19221 pagetables:784 bounce:0 [ 482.457334] free:87146 free_pcp:429 free_cma:0 [ 482.457683] ? zone_watermark_ok_safe+0x220/0x220 [ 482.496215] __alloc_pages_nodemask+0x2127/0x2720 [ 482.501096] ? _raw_spin_unlock_irq+0x24/0x80 [ 482.505605] ? lock_acquire+0x170/0x3f0 [ 482.510206] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 482.515076] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 482.520548] ? __mutex_unlock_slowpath+0x75/0x770 [ 482.525401] alloc_pages_current+0x155/0x260 [ 482.527329] Node 0 active_anon:46544kB inactive_anon:59100kB active_file:3312kB inactive_file:5820kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:215856kB dirty:4kB writeback:0kB shmem:60172kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 482.529821] ion_page_pool_alloc+0x118/0x1b0 [ 482.562175] ion_system_heap_allocate+0x133/0x8c0 [ 482.567042] ? _raw_spin_unlock+0x29/0x40 [ 482.571206] ? _ion_heap_freelist_drain+0x6e/0x410 [ 482.576179] ? ion_system_contig_heap_create+0x130/0x130 [ 482.581749] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 482.586775] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 482.587342] Node 1 active_anon:1500kB inactive_anon:16580kB active_file:1580kB inactive_file:2868kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:3496kB dirty:8kB writeback:0kB shmem:16712kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 482.591621] ion_alloc+0x27a/0x810 [ 482.622502] ? ion_dma_buf_release+0x40/0x40 [ 482.626918] ? __might_fault+0x177/0x1b0 [ 482.630996] ion_ioctl+0xea/0x1f0 [ 482.634759] ? ion_query_heaps+0x360/0x360 [ 482.639130] ? ion_query_heaps+0x360/0x360 [ 482.643471] do_vfs_ioctl+0x75a/0xff0 [ 482.647315] ? ioctl_preallocate+0x1a0/0x1a0 [ 482.651764] ? lock_downgrade+0x740/0x740 [ 482.655927] ? __fget+0x225/0x360 [ 482.657318] Node 0 DMA free:11120kB min:204kB low:252kB high:300kB active_anon:4kB inactive_anon:0kB active_file:0kB inactive_file:1808kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 482.659399] ? do_vfs_ioctl+0xff0/0xff0 [ 482.659413] ? security_file_ioctl+0x83/0xb0 [ 482.694716] SyS_ioctl+0x7f/0xb0 [ 482.707431] ? do_vfs_ioctl+0xff0/0xff0 [ 482.711427] do_syscall_64+0x1d5/0x640 [ 482.715343] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 482.717311] lowmem_reserve[]: [ 482.720724] RIP: 0033:0x4665f9 [ 482.720727] 0 2717 [ 482.723817] RSP: 002b:00007ff3638e3188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 482.727019] 2718 [ 482.729277] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 482.729283] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000005 [ 482.729287] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 482.729292] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 482.729297] R13: 00007ffe909c1c6f R14: 00007ff3638e3300 R15: 0000000000022000 [ 482.776456] Bluetooth: hci5 command 0x040f tx timeout [ 482.801563] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 482.812936] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 482.823938] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 482.844415] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 482.860790] 8021q: adding VLAN 0 to HW filter on device team0 [ 482.867797] 2718 2718 [ 482.870325] Node 0 DMA32 free:70788kB min:36200kB low:45248kB high:54296kB active_anon:46340kB inactive_anon:59100kB active_file:3312kB inactive_file:4152kB unevictable:0kB writepending:152kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7808kB pagetables:2808kB bounce:0kB free_pcp:492kB local_pcp:172kB free_cma:0kB [ 482.883962] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 482.937473] lowmem_reserve[]: 0 0 0 0 0 [ 482.937644] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 482.941578] Node 0 [ 482.954237] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 482.957341] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 482.977995] bridge0: port 1(bridge_slave_0) entered blocking state [ 482.995100] bridge0: port 1(bridge_slave_0) entered forwarding state [ 483.037903] lowmem_reserve[]: 0 0 0 0 0 [ 483.041943] Node 1 Normal free:64636kB min:53696kB low:67120kB high:80544kB active_anon:1500kB inactive_anon:16580kB active_file:2588kB inactive_file:1340kB unevictable:0kB writepending:8kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:224kB pagetables:328kB bounce:0kB free_pcp:616kB local_pcp:480kB free_cma:0kB [ 483.044042] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 483.127526] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 483.135227] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 483.167898] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 483.171369] lowmem_reserve[]: 0 0 0 0 0 [ 483.197363] Node 0 DMA: 5*4kB (ME) 5*8kB (UM) 2*16kB (UE) 4*32kB (UME) 4*64kB (UME) 8*128kB (UME) 3*256kB (UE) 3*512kB (UME) 3*1024kB (UME) 2*2048kB (UE) 0*4096kB = 10972kB [ 483.208105] bridge0: port 2(bridge_slave_1) entered blocking state [ 483.219570] bridge0: port 2(bridge_slave_1) entered forwarding state [ 483.231398] in:imklog invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 483.247395] Node 0 DMA32: 1303*4kB (UME) 564*8kB (UME) 164*16kB (ME) 173*32kB (UME) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 17884kB [ 483.271526] in:imklog cpuset=/ mems_allowed=0-1 [ 483.274512] Node 0 Normal: [ 483.276243] CPU: 1 PID: 17761 Comm: in:imklog Not tainted 4.14.232-syzkaller #0 [ 483.276251] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 483.279221] 0*4kB [ 483.286619] Call Trace: [ 483.296036] 0*8kB [ 483.298135] dump_stack+0x1b2/0x281 [ 483.298148] dump_header+0x178/0x82f [ 483.300714] 0*16kB [ 483.302864] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 483.306468] 0*32kB [ 483.310310] ? ___ratelimit+0x2cd/0x530 [ 483.310321] oom_kill_process.cold+0x10/0xa40 [ 483.310339] out_of_memory+0xe3e/0x1190 [ 483.310354] ? oom_killer_disable+0x1c0/0x1c0 [ 483.312581] 0*64kB [ 483.317681] ? mutex_trylock+0x152/0x1a0 [ 483.317692] __alloc_pages_nodemask+0x23e1/0x2720 [ 483.317716] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 483.319939] 0*128kB [ 483.324017] alloc_pages_current+0x155/0x260 [ 483.328518] 0*256kB [ 483.332444] filemap_fault+0x11a1/0x1ad0 [ 483.336913] 0*512kB [ 483.339145] ext4_filemap_fault+0x84/0xb0 [ 483.339155] __do_fault+0xfa/0x380 [ 483.339163] __handle_mm_fault+0x2497/0x4620 [ 483.339175] ? vm_insert_page+0x7c0/0x7c0 [ 483.343236] 0*1024kB [ 483.348069] ? lock_downgrade+0x740/0x740 [ 483.348083] ? mark_held_locks+0xa6/0xf0 [ 483.348094] handle_mm_fault+0x455/0x9c0 [ 483.348109] __do_page_fault+0x549/0xad0 [ 483.352937] 0*2048kB [ 483.355250] ? spurious_fault+0x640/0x640 [ 483.359672] 0*4096kB [ 483.361942] ? do_page_fault+0x60/0x500 [ 483.365980] = 0kB [ 483.368282] ? page_fault+0x2f/0x50 [ 483.368288] page_fault+0x45/0x50 [ 483.368296] RIP: 1fa0:0x1f9f [ 483.368300] RSP: 0000:0000557dac1ec9d0 EFLAGS: 7f080a07fda0 [ 483.383852] Mem-Info: [ 483.436518] Node 1 [ 483.440831] Mem-Info: [ 483.445522] active_anon:11955 inactive_anon:18919 isolated_anon:0 [ 483.445522] active_file:51 inactive_file:47 isolated_file:0 [ 483.445522] unevictable:0 dirty:8 writeback:0 unstable:0 [ 483.445522] slab_reclaimable:13086 slab_unreclaimable:114796 [ 483.445522] mapped:52889 shmem:19220 pagetables:784 bounce:0 [ 483.445522] free:13762 free_pcp:246 free_cma:0 [ 483.446156] Normal: [ 483.482348] active_anon:11955 inactive_anon:18919 isolated_anon:0 [ 483.482348] active_file:51 inactive_file:47 isolated_file:0 [ 483.482348] unevictable:0 dirty:8 writeback:0 unstable:0 [ 483.482348] slab_reclaimable:13086 slab_unreclaimable:114796 [ 483.482348] mapped:52889 shmem:19220 pagetables:784 bounce:0 [ 483.482348] free:13762 free_pcp:246 free_cma:0 [ 483.518148] 178*4kB (UME) 83*8kB (M) 59*16kB (UME) 439*32kB (UM) 117*64kB (UM) 22*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 26672kB [ 483.522959] Node 0 active_anon:46324kB inactive_anon:59100kB active_file:124kB inactive_file:20kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:211440kB dirty:20kB writeback:0kB shmem:60172kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 483.533741] syz-executor.5: [ 483.561579] syz-executor.4: [ 483.564138] Node 0 active_anon:46324kB inactive_anon:59100kB active_file:124kB inactive_file:20kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:211440kB dirty:20kB writeback:0kB shmem:60172kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 483.564643] page allocation failure: order:0 [ 483.567749] Node 1 active_anon:1496kB inactive_anon:16576kB active_file:80kB inactive_file:168kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:116kB dirty:12kB writeback:0kB shmem:16708kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 483.602582] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 483.631113] Node 1 active_anon:1496kB inactive_anon:16576kB active_file:80kB inactive_file:168kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:116kB dirty:12kB writeback:0kB shmem:16708kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 483.639549] page allocation failure: order:0 [ 483.665510] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 483.673104] Node 0 [ 483.677713] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 483.677720] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 483.677725] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 483.677729] 19294 total pagecache pages [ 483.677738] 0 pages in swap cache [ 483.677742] Swap cache stats: add 0, delete 0, find 0/0 [ 483.677745] Free swap = 0kB [ 483.677748] Total swap = 0kB [ 483.677755] 2097051 pages RAM [ 483.677759] 0 pages HighMem/MovableOnly [ 483.677763] 363849 pages reserved [ 483.677766] 0 pages cma reserved [ 483.679392] syz-executor.4 cpuset= [ 483.680298] DMA free:10968kB min:204kB low:252kB high:300kB active_anon:4kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 483.697814] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 483.697824] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 483.697846] CPU: 0 PID: 17736 Comm: syz-executor.5 Not tainted 4.14.232-syzkaller #0 [ 483.697852] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 483.697855] Call Trace: [ 483.697871] dump_stack+0x1b2/0x281 [ 483.697885] warn_alloc.cold+0x96/0x1cc [ 483.697897] ? zone_watermark_ok_safe+0x220/0x220 [ 483.697908] ? usleep_range+0x130/0x130 [ 483.697918] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 483.697931] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 483.697942] ? run_timer_softirq+0x5a0/0x5a0 [ 483.697958] __alloc_pages_nodemask+0x2127/0x2720 [ 483.697975] ? lock_acquire+0x170/0x3f0 [ 483.697991] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 483.698002] ? ion_page_pool_alloc+0x9e/0x1b0 [ 483.698018] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 483.698033] ? alloc_pages_current+0x84/0x260 [ 483.698045] alloc_pages_current+0x155/0x260 [ 483.711415] Node 0 [ 483.714142] ion_page_pool_alloc+0x118/0x1b0 [ 483.723052] lowmem_reserve[]: [ 483.725618] ion_system_heap_allocate+0x133/0x8c0 [ 483.733071] DMA free:10968kB min:204kB low:252kB high:300kB active_anon:4kB inactive_anon:0kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 483.736255] ? ion_alloc+0x187/0x810 [ 483.743782] 0 [ 483.768647] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 483.768659] ? ion_system_contig_heap_create+0x130/0x130 [ 483.768668] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 483.768679] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 483.768689] ion_alloc+0x204/0x810 [ 483.768702] ? ion_dma_buf_release+0x40/0x40 [ 483.768713] ? __might_fault+0x177/0x1b0 [ 483.768725] ion_ioctl+0xea/0x1f0 [ 483.768733] ? ion_query_heaps+0x360/0x360 [ 483.768744] ? ion_query_heaps+0x360/0x360 [ 483.768754] do_vfs_ioctl+0x75a/0xff0 [ 483.768766] ? ioctl_preallocate+0x1a0/0x1a0 [ 483.768775] ? lock_downgrade+0x740/0x740 [ 483.768788] ? __fget+0x225/0x360 [ 483.768797] ? do_vfs_ioctl+0xff0/0xff0 [ 483.768809] ? security_file_ioctl+0x83/0xb0 [ 483.768820] SyS_ioctl+0x7f/0xb0 [ 483.783196] lowmem_reserve[]: [ 483.790214] ? do_vfs_ioctl+0xff0/0xff0 [ 483.790228] do_syscall_64+0x1d5/0x640 [ 483.790242] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 483.790251] RIP: 0033:0x4665f9 [ 483.790255] RSP: 002b:00007f4323f8e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 483.790264] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 483.790268] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000003 [ 483.790273] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 483.790278] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 483.790283] R13: 00007ffec8acf2af R14: 00007f4323f8e300 R15: 0000000000022000 [ 483.793342] / [ 483.809305] 0 [ 483.825922] mems_allowed=0-1 [ 483.837199] 2717 [ 483.850118] CPU: 0 PID: 17550 Comm: syz-executor.4 Not tainted 4.14.232-syzkaller #0 [ 483.860400] 2718 [ 483.862096] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 483.866494] 2718 [ 483.868738] Call Trace: [ 483.868759] dump_stack+0x1b2/0x281 [ 483.868773] warn_alloc.cold+0x96/0x1cc [ 483.868785] ? zone_watermark_ok_safe+0x220/0x220 [ 483.868795] ? usleep_range+0x130/0x130 [ 483.868803] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 483.868814] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 483.868825] ? run_timer_softirq+0x5a0/0x5a0 [ 483.868842] __alloc_pages_nodemask+0x2127/0x2720 [ 483.868857] ? lock_acquire+0x170/0x3f0 [ 483.868871] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 483.868881] ? ion_page_pool_alloc+0x9e/0x1b0 [ 483.868896] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 483.868916] alloc_pages_current+0x155/0x260 [ 483.868926] ion_page_pool_alloc+0x118/0x1b0 [ 483.868935] ion_system_heap_allocate+0x133/0x8c0 [ 483.868945] ? _raw_spin_unlock+0x29/0x40 [ 483.868952] ? _ion_heap_freelist_drain+0x6e/0x410 [ 483.868961] ? ion_system_contig_heap_create+0x130/0x130 [ 483.868972] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 483.868983] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 483.868994] ion_alloc+0x27a/0x810 [ 483.869008] ? ion_dma_buf_release+0x40/0x40 [ 483.869020] ? __might_fault+0x177/0x1b0 [ 483.869033] ion_ioctl+0xea/0x1f0 [ 483.869042] ? ion_query_heaps+0x360/0x360 [ 483.869062] ? ion_query_heaps+0x360/0x360 [ 483.869072] do_vfs_ioctl+0x75a/0xff0 [ 483.869083] ? ioctl_preallocate+0x1a0/0x1a0 [ 483.869092] ? lock_downgrade+0x740/0x740 [ 483.869104] ? __fget+0x225/0x360 [ 483.869113] ? do_vfs_ioctl+0xff0/0xff0 [ 483.869125] ? security_file_ioctl+0x83/0xb0 [ 483.869134] SyS_ioctl+0x7f/0xb0 [ 483.869142] ? do_vfs_ioctl+0xff0/0xff0 [ 483.869154] do_syscall_64+0x1d5/0x640 [ 483.869167] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 483.869175] RIP: 0033:0x4665f9 [ 483.869179] RSP: 002b:00007f9108899188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 483.869189] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 483.869198] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000006 [ 483.882878] 2717 [ 483.907020] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 483.907026] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 483.907030] R13: 00007fffb2c94dcf R14: 00007f9108899300 R15: 0000000000022000 [ 483.915388] syz-executor.0: [ 483.924882] 2718 [ 483.936140] page allocation failure: order:0 [ 483.945848] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 483.946073] Node 0 [ 483.955774] (null) [ 483.960584] 2718 [ 483.965793] syz-executor.0 cpuset= [ 483.966394] 2718 [ 483.976796] / [ 483.980535] DMA32 free:17920kB min:36200kB low:45248kB high:54296kB active_anon:46320kB inactive_anon:59100kB active_file:56kB inactive_file:32kB unevictable:0kB writepending:220kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7808kB pagetables:2808kB bounce:0kB free_pcp:840kB local_pcp:0kB free_cma:0kB [ 483.986385] mems_allowed=0-1 [ 483.988983] lowmem_reserve[]: [ 483.999362] CPU: 0 PID: 17555 Comm: syz-executor.0 Not tainted 4.14.232-syzkaller #0 [ 484.004238] 2718 [ 484.005299] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 484.013124] 0 [ 484.020269] Call Trace: [ 484.020292] dump_stack+0x1b2/0x281 [ 484.020306] warn_alloc.cold+0x96/0x1cc [ 484.020317] ? zone_watermark_ok_safe+0x220/0x220 [ 484.020326] ? usleep_range+0x130/0x130 [ 484.020335] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 484.020347] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 484.020357] ? run_timer_softirq+0x5a0/0x5a0 [ 484.020372] __alloc_pages_nodemask+0x2127/0x2720 [ 484.020387] ? lock_acquire+0x170/0x3f0 [ 484.034950] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 484.042311] 0 [ 484.049512] ? ion_page_pool_alloc+0x9e/0x1b0 [ 484.049529] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 484.049541] ? retint_kernel+0x2d/0x2d [ 484.049554] alloc_pages_current+0x155/0x260 [ 484.049566] ion_page_pool_alloc+0x118/0x1b0 [ 484.049576] ion_system_heap_allocate+0x133/0x8c0 [ 484.049588] ? _raw_spin_unlock+0x29/0x40 [ 484.049599] ? _ion_heap_freelist_drain+0x6e/0x410 [ 484.053474] Node 0 [ 484.056215] ? ion_system_contig_heap_create+0x130/0x130 [ 484.058481] DMA32 free:17912kB min:36200kB low:45248kB high:54296kB active_anon:46320kB inactive_anon:59100kB active_file:48kB inactive_file:60kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7808kB pagetables:2808kB bounce:0kB free_pcp:844kB local_pcp:4kB free_cma:0kB [ 484.066246] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 484.077324] 0 [ 484.077642] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 484.079684] 0 [ 484.085651] ion_alloc+0x27a/0x810 [ 484.117319] lowmem_reserve[]: [ 484.121443] ? ion_dma_buf_release+0x40/0x40 [ 484.125401] 0 [ 484.130240] ? __might_fault+0x177/0x1b0 [ 484.130253] ion_ioctl+0xea/0x1f0 [ 484.130262] ? ion_query_heaps+0x360/0x360 [ 484.130273] ? ion_query_heaps+0x360/0x360 [ 484.130283] do_vfs_ioctl+0x75a/0xff0 [ 484.130294] ? ioctl_preallocate+0x1a0/0x1a0 [ 484.130302] ? lock_downgrade+0x740/0x740 [ 484.130314] ? __fget+0x225/0x360 [ 484.130323] ? do_vfs_ioctl+0xff0/0xff0 [ 484.130334] ? security_file_ioctl+0x83/0xb0 [ 484.130345] SyS_ioctl+0x7f/0xb0 [ 484.135027] 0 [ 484.140274] ? do_vfs_ioctl+0xff0/0xff0 [ 484.140287] do_syscall_64+0x1d5/0x640 [ 484.140301] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 484.140309] RIP: 0033:0x4665f9 [ 484.140313] RSP: 002b:00007f78e5f89188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 484.140322] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 484.140327] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000003 [ 484.140332] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 484.140337] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 484.140342] R13: 00007ffd4957c29f R14: 00007f78e5f89300 R15: 0000000000022000 [ 484.194681] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 484.227317] 0 [ 484.322258] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 484.477290] warn_alloc_show_mem: 2 callbacks suppressed [ 484.477295] Mem-Info: [ 484.561186] 0 [ 484.657288] active_anon:11955 inactive_anon:18919 isolated_anon:0 [ 484.657288] active_file:17 inactive_file:440 isolated_file:0 [ 484.657288] unevictable:0 dirty:0 writeback:0 unstable:0 [ 484.657288] slab_reclaimable:13086 slab_unreclaimable:114624 [ 484.657288] mapped:53120 shmem:19220 pagetables:784 bounce:0 [ 484.657288] free:41106 free_pcp:242 free_cma:0 [ 484.698876] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 484.706317] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 484.706922] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 484.771778] lowmem_reserve[]: 0 0 0 0 0 [ 484.775842] Node 1 Normal free:26788kB min:53696kB low:67120kB high:80544kB active_anon:1496kB inactive_anon:16576kB active_file:8kB inactive_file:1704kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:224kB pagetables:328kB bounce:0kB free_pcp:236kB local_pcp:0kB free_cma:0kB [ 484.811577] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 484.818471] Node 0 active_anon:46324kB inactive_anon:59100kB active_file:60kB inactive_file:56kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:211276kB dirty:0kB writeback:0kB shmem:60172kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 484.847677] Bluetooth: hci5 command 0x0419 tx timeout [ 484.853292] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 484.861744] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 484.873543] lowmem_reserve[]: 0 0 0 0 0 [ 484.881531] Node 0 DMA: 32*4kB (UME) 7*8kB (UM) 4*16kB (UME) 5*32kB (UME) 8*64kB (UME) 8*128kB (UME) 3*256kB (UE) 3*512kB (UME) 3*1024kB (UME) 2*2048kB (UE) 0*4096kB = 11416kB [ 484.890326] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 484.910603] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 484.920838] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 484.941099] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 484.947328] Node 0 DMA32: 8621*4kB (UMEH) 2810*8kB (UMEH) 5399*16kB (UMEH) 2690*32kB (UMEH) 15*64kB (U) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 230388kB [ 484.949640] Node 1 active_anon:1496kB inactive_anon:16576kB active_file:8kB inactive_file:1704kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:1204kB dirty:0kB writeback:0kB shmem:16708kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 484.967519] 0 [ 485.007596] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 485.014160] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 485.051507] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 485.067610] 0 [ 485.069447] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 485.071595] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 485.095475] Node 1 Normal: 11792*4kB (UME) 5634*8kB (UM) 2703*16kB (UME) 1450*32kB (UM) 75*64kB (UM) 5*128kB (U) 0*256kB 22*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 198592kB [ 485.117269] Node 0 DMA free:11408kB min:204kB low:252kB high:300kB active_anon:4kB inactive_anon:0kB active_file:8kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 485.118018] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 485.150958] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 485.157310] lowmem_reserve[]: 0 0 0 0 0 [ 485.163891] Node 1 Normal free:213372kB min:53696kB low:67120kB high:80544kB active_anon:1496kB inactive_anon:16576kB active_file:8kB inactive_file:1704kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:224kB pagetables:328kB bounce:0kB free_pcp:1420kB local_pcp:736kB free_cma:0kB [ 485.179150] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 485.206815] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 485.212108] Node 0 DMA32 free:277716kB min:36200kB low:45248kB high:54296kB active_anon:46320kB inactive_anon:59100kB active_file:52kB inactive_file:56kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7808kB pagetables:2808kB bounce:0kB free_pcp:1412kB local_pcp:708kB free_cma:0kB [ 485.237318] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 485.250891] lowmem_reserve[]: 0 0 0 0 0 [ 485.254983] Node 0 DMA: 32*4kB (UME) 7*8kB (UM) 4*16kB (UME) 5*32kB (UME) 8*64kB (UME) 8*128kB (UME) 3*256kB (UE) 3*512kB (UME) 3*1024kB (UME) 2*2048kB (UE) 0*4096kB = 11416kB [ 485.268159] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 485.277195] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 485.277261] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 485.302798] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 485.307317] Node 0 DMA32: 16643*4kB (UMEH) 5275*8kB (UMEH) 5767*16kB (UMEH) 3232*32kB (UMEH) 71*64kB (U) 76*128kB (U) 6*256kB (U) 0*512kB 2*1024kB (U) 0*2048kB 0*4096kB = 322324kB [ 485.310214] lowmem_reserve[]: [ 485.326287] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 485.326293] 19694 total pagecache pages [ 485.326303] 0 pages in swap cache [ 485.326307] Swap cache stats: add 0, delete 0, find 0/0 [ 485.326311] Free swap = 0kB [ 485.326314] Total swap = 0kB [ 485.326321] 2097051 pages RAM [ 485.326323] 0 pages HighMem/MovableOnly [ 485.326326] 363849 pages reserved [ 485.326329] 0 pages cma reserved [ 485.367335] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 485.373244] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 485.407289] Node 1 Normal: 15237*4kB (UME) 7249*8kB (UM) 3345*16kB (UME) 2284*32kB (UM) 567*64kB (UM) 107*128kB (U) 6*256kB (U) 22*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 308332kB [ 485.418105] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 485.455451] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 485.467314] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 485.471329] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 485.476212] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 485.485195] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 485.524288] 0 0 0 0 0 [ 485.527269] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 485.530216] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 485.536917] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 485.547171] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 485.574186] 19694 total pagecache pages [ 485.607523] lowmem_reserve[]: 0 0 0 0 0 [ 485.611554] Node 1 Normal free:351720kB min:53696kB low:67120kB high:80544kB active_anon:1496kB inactive_anon:16576kB active_file:8kB inactive_file:1740kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:224kB pagetables:328kB bounce:0kB free_pcp:1332kB local_pcp:712kB free_cma:0kB [ 485.617311] 0 pages in swap cache [ 485.617318] Swap cache stats: add 0, delete 0, find 0/0 [ 485.617321] Free swap = 0kB [ 485.617325] Total swap = 0kB [ 485.617332] 2097051 pages RAM [ 485.617335] 0 pages HighMem/MovableOnly [ 485.617338] 363849 pages reserved [ 485.617342] 0 pages cma reserved [ 485.617350] Out of memory (oom_kill_allocating_task): Kill process 17761 (in:imklog) score 0 or sacrifice child [ 485.617403] Killed process 17744 (rsyslogd) total-vm:254332kB, anon-rss:592kB, file-rss:0kB, shmem-rss:0kB [ 485.707312] lowmem_reserve[]: 0 0 0 0 0 [ 485.711449] Node 0 DMA: 38*4kB (UME) 7*8kB (UM) 4*16kB (UME) 5*32kB (UME) 8*64kB (UME) 8*128kB (UME) 3*256kB (UE) 3*512kB (UME) 3*1024kB (UME) 2*2048kB (UE) 0*4096kB = 11440kB [ 485.727997] Node 0 DMA32: 29886*4kB (UMEH) 7398*8kB (UMEH) 8298*16kB (UMEH) 3806*32kB (UMEH) 390*64kB (UH) 82*128kB (U) 6*256kB (U) 0*512kB 2*1024kB (U) 0*2048kB 0*4096kB = 472328kB [ 485.758157] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 485.777641] Node 1 Normal: 18243*4kB (UME) 7580*8kB (UM) 4112*16kB (UME) 2955*32kB (UM) 1133*64kB (UM) 149*128kB (U) 7*256kB (U) 22*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 398604kB [ 485.811542] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 485.821109] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 485.833156] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 485.842893] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 485.852186] oom_reaper: reaped process 17744 (rsyslogd), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 485.854033] 20397 total pagecache pages [ 485.873385] 0 pages in swap cache [ 485.879249] Swap cache stats: add 0, delete 0, find 0/0 [ 485.891634] Free swap = 0kB 11:47:21 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x10001, 0x400) ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r0, 0x7a9, &(0x7f0000000040)={{@my=0x0, 0x7f}, 0x40, 0x3, 0x0, 0x6, 0xf1, 0x5, 0x39, 0x3}) r1 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0), 0x20000, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000100)={0x80000001, 0x27}) [ 485.921177] Total swap = 0kB [ 485.924234] 2097051 pages RAM [ 485.941870] 0 pages HighMem/MovableOnly [ 485.946276] 363849 pages reserved [ 485.950082] 0 pages cma reserved [ 486.253107] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 486.304167] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 486.334308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 486.349084] syz-executor.5: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 486.350684] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 486.387806] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 486.411873] CPU: 1 PID: 17736 Comm: syz-executor.5 Not tainted 4.14.232-syzkaller #0 [ 486.419815] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 486.429264] Call Trace: [ 486.431981] dump_stack+0x1b2/0x281 [ 486.435717] warn_alloc.cold+0x96/0x1cc [ 486.439730] ? zone_watermark_ok_safe+0x220/0x220 [ 486.444609] __alloc_pages_nodemask+0x2127/0x2720 [ 486.449473] ? lock_acquire+0x170/0x3f0 [ 486.453583] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 486.458795] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 486.464275] ? __mutex_unlock_slowpath+0x75/0x770 [ 486.469159] ? retint_kernel+0x2d/0x2d [ 486.473056] alloc_pages_current+0x155/0x260 [ 486.477497] ion_page_pool_alloc+0x118/0x1b0 [ 486.481940] ion_system_heap_allocate+0x133/0x8c0 [ 486.486794] ? _raw_spin_unlock+0x29/0x40 [ 486.488767] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 486.490954] ? _ion_heap_freelist_drain+0x6e/0x410 [ 486.490965] ? ion_system_contig_heap_create+0x130/0x130 [ 486.490976] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 486.490991] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 486.505339] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 486.508050] ion_alloc+0x27a/0x810 [ 486.508065] ? ion_dma_buf_release+0x40/0x40 [ 486.508077] ? __might_fault+0x177/0x1b0 [ 486.508089] ion_ioctl+0xea/0x1f0 [ 486.508100] ? ion_query_heaps+0x360/0x360 [ 486.518743] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 486.524189] ? ion_query_heaps+0x360/0x360 [ 486.524201] do_vfs_ioctl+0x75a/0xff0 [ 486.524214] ? ioctl_preallocate+0x1a0/0x1a0 [ 486.524224] ? lock_downgrade+0x740/0x740 [ 486.524238] ? __fget+0x225/0x360 [ 486.544367] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 486.547505] ? do_vfs_ioctl+0xff0/0xff0 [ 486.547518] ? security_file_ioctl+0x83/0xb0 [ 486.547528] SyS_ioctl+0x7f/0xb0 [ 486.547536] ? do_vfs_ioctl+0xff0/0xff0 [ 486.547554] do_syscall_64+0x1d5/0x640 [ 486.547569] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 486.558216] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 486.563992] RIP: 0033:0x4665f9 [ 486.563998] RSP: 002b:00007f4323f8e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 486.564007] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 486.564013] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000003 [ 486.564018] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 486.564022] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 486.564028] R13: 00007ffec8acf2af R14: 00007f4323f8e300 R15: 0000000000022000 [ 486.682906] Mem-Info: [ 486.685810] active_anon:11869 inactive_anon:18919 isolated_anon:12 [ 486.685810] active_file:1218 inactive_file:2639 isolated_file:0 [ 486.685810] unevictable:0 dirty:24 writeback:0 unstable:0 [ 486.685810] slab_reclaimable:13117 slab_unreclaimable:116568 [ 486.685810] mapped:55164 shmem:19220 pagetables:738 bounce:0 [ 486.685810] free:186166 free_pcp:193 free_cma:0 [ 486.720502] Node 0 active_anon:46296kB inactive_anon:59104kB active_file:4720kB inactive_file:10420kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:220340kB dirty:96kB writeback:0kB shmem:60176kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 486.751482] Node 1 active_anon:1180kB inactive_anon:16572kB active_file:252kB inactive_file:136kB unevictable:0kB isolated(anon):48kB isolated(file):0kB mapped:316kB dirty:0kB writeback:0kB shmem:16704kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 486.786932] Node 0 DMA free:12076kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:8kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 486.815145] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 486.832222] Node 0 DMA32 free:489920kB min:36200kB low:45248kB high:54296kB active_anon:47004kB inactive_anon:59104kB active_file:4324kB inactive_file:10528kB unevictable:0kB writepending:96kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7744kB pagetables:2640kB bounce:0kB free_pcp:724kB local_pcp:12kB free_cma:0kB [ 486.857896] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 486.874639] lowmem_reserve[]: 0 0 0 0 0 [ 486.879297] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 486.889951] device veth0_vlan entered promiscuous mode [ 486.906017] lowmem_reserve[]: 0 0 0 0 0 [ 486.915080] Node 1 Normal free:690892kB min:53696kB low:67120kB high:80544kB active_anon:1280kB inactive_anon:16572kB active_file:332kB inactive_file:356kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:224kB pagetables:312kB bounce:0kB free_pcp:128kB local_pcp:128kB free_cma:0kB [ 486.938128] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 486.971508] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 486.980146] lowmem_reserve[]: 0 0 0 0 0 [ 486.989858] Node 0 DMA: 11*4kB (UME) 12*8kB (UM) 22*16kB (UME) 22*32kB (UME) 4*64kB (UME) 4*128kB (UME) 2*256kB (UE) 3*512kB (UME) 3*1024kB (UME) 2*2048kB (UE) 0*4096kB = 11180kB [ 486.996224] device veth1_vlan entered promiscuous mode [ 487.026658] Node 0 DMA32: 27480*4kB (UMH) 4765*8kB (UMEH) 8547*16kB (UMEH) 4481*32kB (UMEH) 4*64kB (H) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 428440kB [ 487.057527] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 487.060173] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 487.084744] Node 1 Normal: 18207*4kB (UM) 7542*8kB (UM) 4142*16kB (U) 3154*32kB (U) 3648*64kB (U) 1305*128kB (U) 180*256kB (U) 51*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 773068kB [ 487.101116] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 487.120741] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 487.123011] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 487.129059] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 487.152741] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 487.171866] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 487.174994] device veth0_macvtap entered promiscuous mode [ 487.197737] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 487.197743] 23400 total pagecache pages [ 487.197752] 0 pages in swap cache [ 487.197757] Swap cache stats: add 0, delete 0, find 0/0 [ 487.197759] Free swap = 0kB [ 487.197762] Total swap = 0kB [ 487.197767] 2097051 pages RAM [ 487.197770] 0 pages HighMem/MovableOnly [ 487.197773] 363849 pages reserved [ 487.197776] 0 pages cma reserved [ 487.218125] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 487.229963] device veth1_macvtap entered promiscuous mode [ 487.230739] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 487.233716] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 487.257374] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 487.259438] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 487.259443] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 487.259449] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 487.259452] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 487.259458] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 487.259461] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 487.259468] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 487.259471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 487.259490] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 487.259493] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 487.260950] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 487.261069] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 487.263238] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 487.263242] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 487.263249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 487.263252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 487.263258] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 487.263262] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 487.263268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 487.263271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 487.263278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 487.263281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 487.264442] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 487.264468] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 487.913720] syz-executor.1: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 487.913745] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 487.913770] CPU: 0 PID: 17846 Comm: syz-executor.1 Not tainted 4.14.232-syzkaller #0 [ 487.913776] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 487.913780] Call Trace: [ 487.913799] dump_stack+0x1b2/0x281 [ 487.913815] warn_alloc.cold+0x96/0x1cc [ 487.913827] ? zone_watermark_ok_safe+0x220/0x220 [ 487.913852] __alloc_pages_nodemask+0x2127/0x2720 [ 487.913864] ? _raw_spin_unlock_irq+0x24/0x80 [ 487.913878] ? lock_acquire+0x170/0x3f0 [ 487.913893] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 487.913912] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 487.913925] ? __mutex_unlock_slowpath+0x75/0x770 [ 487.913941] alloc_pages_current+0x155/0x260 [ 487.913966] ion_page_pool_alloc+0x118/0x1b0 [ 487.913977] ion_system_heap_allocate+0x133/0x8c0 [ 487.913987] ? ion_alloc+0x187/0x810 [ 487.913998] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 487.914007] ? ion_system_contig_heap_create+0x130/0x130 [ 487.914018] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 487.914030] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 487.914047] ion_alloc+0x204/0x810 [ 487.914062] ? ion_dma_buf_release+0x40/0x40 [ 487.914075] ? __might_fault+0x177/0x1b0 [ 487.914087] ion_ioctl+0xea/0x1f0 [ 487.914096] ? ion_query_heaps+0x360/0x360 [ 487.914109] ? ion_query_heaps+0x360/0x360 [ 487.914120] do_vfs_ioctl+0x75a/0xff0 [ 487.914132] ? ioctl_preallocate+0x1a0/0x1a0 [ 487.914141] ? lock_downgrade+0x740/0x740 [ 487.914156] ? __fget+0x225/0x360 [ 487.914166] ? do_vfs_ioctl+0xff0/0xff0 [ 487.914179] ? security_file_ioctl+0x83/0xb0 [ 487.914190] SyS_ioctl+0x7f/0xb0 [ 487.914198] ? do_vfs_ioctl+0xff0/0xff0 [ 487.914209] do_syscall_64+0x1d5/0x640 [ 487.914223] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 487.914232] RIP: 0033:0x4665f9 [ 487.914237] RSP: 002b:00007faffec44188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 487.914248] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 487.914254] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000005 [ 487.914259] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 487.914265] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 487.914271] R13: 00007ffc312071cf R14: 00007faffec44300 R15: 0000000000022000 [ 487.914342] Mem-Info: [ 487.914365] active_anon:12045 inactive_anon:18919 isolated_anon:12 [ 487.914365] active_file:1487 inactive_file:2716 isolated_file:0 [ 487.914365] unevictable:0 dirty:64 writeback:0 unstable:0 [ 487.914365] slab_reclaimable:13141 slab_unreclaimable:116724 [ 487.914365] mapped:55457 shmem:19220 pagetables:733 bounce:0 [ 487.914365] free:149619 free_pcp:86 free_cma:0 [ 487.914384] Node 0 active_anon:46988kB inactive_anon:59104kB active_file:5776kB inactive_file:10728kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:221520kB dirty:256kB writeback:0kB shmem:60176kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 487.914401] Node 1 active_anon:1192kB inactive_anon:16572kB active_file:172kB inactive_file:136kB unevictable:0kB isolated(anon):48kB isolated(file):0kB mapped:308kB dirty:0kB writeback:0kB shmem:16704kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 487.914405] Node 0 DMA free:11076kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:8kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 487.914426] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 487.914448] Node 0 DMA32 free:331904kB min:36200kB low:45248kB high:54296kB active_anon:46888kB inactive_anon:59104kB active_file:5372kB inactive_file:10944kB unevictable:0kB writepending:256kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7744kB pagetables:2620kB bounce:0kB free_pcp:276kB local_pcp:0kB free_cma:0kB [ 487.914468] lowmem_reserve[]: 0 0 0 0 0 [ 487.914488] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 487.914507] lowmem_reserve[]: 0 0 0 0 0 [ 487.914526] Node 1 Normal free:255496kB min:53696kB low:67120kB high:80544kB active_anon:1192kB inactive_anon:16572kB active_file:172kB inactive_file:136kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:224kB pagetables:312kB bounce:0kB free_pcp:72kB local_pcp:0kB free_cma:0kB [ 487.914548] lowmem_reserve[]: 0 0 0 0 0 [ 487.914568] Node 0 DMA: 12*4kB (UME) 18*8kB (UM) 21*16kB (UME) 20*32kB (UME) 3*64kB (ME) 4*128kB (UME) 2*256kB (UE) 3*512kB (UME) 3*1024kB (UME) 2*2048kB (UE) 0*4096kB = 11088kB [ 487.914650] Node 0 DMA32: 66*4kB (UMEH) 692*8kB (UEH) 10519*16kB (UEH) 4909*32kB (UEH) 6*64kB (H) 1*128kB (H) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 331704kB [ 487.914720] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 487.914772] Node 1 Normal: 10158*4kB (UM) 5303*8kB (UME) 3940*16kB (U) 3427*32kB (UE) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 255760kB [ 487.914842] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 487.914849] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 487.914856] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 487.914863] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 487.914867] 23423 total pagecache pages [ 487.914877] 0 pages in swap cache [ 487.914883] Swap cache stats: add 0, delete 0, find 0/0 [ 487.914887] Free swap = 0kB [ 487.914890] Total swap = 0kB [ 487.914896] 2097051 pages RAM [ 487.914900] 0 pages HighMem/MovableOnly [ 487.914903] 363849 pages reserved [ 487.914907] 0 pages cma reserved [ 488.514065] syz-executor.1 invoked oom-killer: gfp_mask=0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 488.579627] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 488.767067] (null) [ 488.844839] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 488.887965] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 488.896828] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 488.912619] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 488.921893] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 488.938075] syz-executor.3: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 488.939408] , order=0, oom_score_adj=1000 [ 488.957095] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 488.960592] syz-executor.3 cpuset= [ 488.968962] CPU: 1 PID: 17846 Comm: syz-executor.1 Not tainted 4.14.232-syzkaller #0 [ 488.971721] / [ 488.972893] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 488.982602] mems_allowed=0-1 [ 488.984508] Call Trace: [ 489.000601] dump_stack+0x1b2/0x281 [ 489.004258] dump_header+0x178/0x82f [ 489.008418] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 489.014000] ? ___ratelimit+0x2cd/0x530 [ 489.018642] oom_kill_process.cold+0x10/0xa40 [ 489.023722] out_of_memory+0xe3e/0x1190 [ 489.030033] ? oom_killer_disable+0x1c0/0x1c0 [ 489.035590] ? mutex_trylock+0x152/0x1a0 [ 489.040471] __alloc_pages_nodemask+0x23e1/0x2720 [ 489.047582] ? lock_acquire+0x170/0x3f0 [ 489.052508] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 489.057869] ? ion_page_pool_alloc+0x9e/0x1b0 [ 489.067386] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 489.076484] alloc_pages_current+0x155/0x260 [ 489.081603] ion_page_pool_alloc+0x118/0x1b0 [ 489.086359] ion_system_heap_allocate+0x133/0x8c0 [ 489.091558] ? ion_alloc+0x187/0x810 [ 489.095386] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 489.101013] ? ion_system_contig_heap_create+0x130/0x130 [ 489.106965] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 489.112678] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 489.118222] ion_alloc+0x204/0x810 [ 489.122328] ? ion_dma_buf_release+0x40/0x40 [ 489.127214] ? __might_fault+0x177/0x1b0 [ 489.131770] ion_ioctl+0xea/0x1f0 [ 489.135568] ? ion_query_heaps+0x360/0x360 [ 489.140619] ? ion_query_heaps+0x360/0x360 [ 489.145218] do_vfs_ioctl+0x75a/0xff0 [ 489.149123] ? ioctl_preallocate+0x1a0/0x1a0 [ 489.153819] ? lock_downgrade+0x740/0x740 [ 489.161038] ? __fget+0x225/0x360 [ 489.164870] ? do_vfs_ioctl+0xff0/0xff0 [ 489.169940] ? security_file_ioctl+0x83/0xb0 [ 489.174524] SyS_ioctl+0x7f/0xb0 [ 489.177897] ? do_vfs_ioctl+0xff0/0xff0 [ 489.182240] do_syscall_64+0x1d5/0x640 [ 489.186563] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 489.193538] RIP: 0033:0x4665f9 [ 489.196975] RSP: 002b:00007faffec44188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 489.205739] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 489.213912] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000005 [ 489.227518] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 489.234804] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 489.242527] R13: 00007ffc312071cf R14: 00007faffec44300 R15: 0000000000022000 [ 489.250402] CPU: 0 PID: 17802 Comm: syz-executor.3 Not tainted 4.14.232-syzkaller #0 [ 489.258506] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 489.269440] Call Trace: [ 489.272057] dump_stack+0x1b2/0x281 [ 489.277212] syz-executor.5: page allocation failure: order:0 [ 489.277420] warn_alloc.cold+0x96/0x1cc [ 489.277432] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 489.283334] ? zone_watermark_ok_safe+0x220/0x220 [ 489.300969] __alloc_pages_nodemask+0x2127/0x2720 [ 489.306386] ? lock_acquire+0x170/0x3f0 [ 489.310623] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 489.311673] (null) [ 489.316286] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 489.324684] ? __mutex_unlock_slowpath+0x75/0x770 [ 489.327018] syz-executor.5 cpuset= [ 489.331382] ? retint_kernel+0x2d/0x2d [ 489.331397] alloc_pages_current+0x155/0x260 [ 489.331411] ion_page_pool_alloc+0x118/0x1b0 [ 489.331420] ion_system_heap_allocate+0x133/0x8c0 [ 489.331429] ? ion_alloc+0x187/0x810 [ 489.331439] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 489.331447] ? ion_system_contig_heap_create+0x130/0x130 [ 489.331457] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 489.331467] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 489.331476] ion_alloc+0x204/0x810 [ 489.331496] ? ion_dma_buf_release+0x40/0x40 [ 489.331508] ? __might_fault+0x177/0x1b0 [ 489.350645] / [ 489.354461] ion_ioctl+0xea/0x1f0 [ 489.373676] mems_allowed=0-1 [ 489.375878] ? ion_query_heaps+0x360/0x360 [ 489.408564] ? ion_query_heaps+0x360/0x360 [ 489.412824] do_vfs_ioctl+0x75a/0xff0 [ 489.416645] ? ioctl_preallocate+0x1a0/0x1a0 [ 489.421438] ? lock_downgrade+0x740/0x740 [ 489.425783] ? __fget+0x225/0x360 [ 489.429386] ? do_vfs_ioctl+0xff0/0xff0 [ 489.435523] ? security_file_ioctl+0x83/0xb0 [ 489.440635] SyS_ioctl+0x7f/0xb0 [ 489.444825] ? do_vfs_ioctl+0xff0/0xff0 [ 489.449434] do_syscall_64+0x1d5/0x640 [ 489.453611] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 489.460967] RIP: 0033:0x4665f9 [ 489.464791] RSP: 002b:00007f19ab3d9188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 489.472889] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 489.480353] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000004 [ 489.487835] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 489.495127] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 489.502612] R13: 00007ffe6b89cc0f R14: 00007f19ab3d9300 R15: 0000000000022000 [ 489.516258] CPU: 1 PID: 17736 Comm: syz-executor.5 Not tainted 4.14.232-syzkaller #0 [ 489.524363] Mem-Info: [ 489.525103] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 489.527914] active_anon:12049 inactive_anon:18919 isolated_anon:0 [ 489.527914] active_file:17 inactive_file:10 isolated_file:0 [ 489.527914] unevictable:0 dirty:36 writeback:0 unstable:0 [ 489.527914] slab_reclaimable:13147 slab_unreclaimable:116540 [ 489.527914] mapped:52862 shmem:19220 pagetables:760 bounce:0 [ 489.527914] free:13724 free_pcp:264 free_cma:0 [ 489.540328] Call Trace: [ 489.540354] dump_stack+0x1b2/0x281 [ 489.540367] warn_alloc.cold+0x96/0x1cc [ 489.540379] ? zone_watermark_ok_safe+0x220/0x220 [ 489.540410] ? usleep_range+0x130/0x130 [ 489.577167] Node 0 active_anon:47004kB inactive_anon:59108kB active_file:68kB inactive_file:36kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:211444kB dirty:144kB writeback:0kB shmem:60180kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 489.579944] ? try_to_free_pages+0x23f/0x6e0 [ 489.583879] Node 1 active_anon:1192kB inactive_anon:16568kB active_file:0kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:4kB dirty:0kB writeback:0kB shmem:16700kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 489.588160] ? _find_next_bit+0xdb/0x100 [ 489.588172] ? run_timer_softirq+0x5a0/0x5a0 [ 489.588189] __alloc_pages_nodemask+0x2127/0x2720 [ 489.588208] ? lock_acquire+0x170/0x3f0 [ 489.593516] Node 0 [ 489.597918] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 489.597928] ? ion_page_pool_alloc+0x9e/0x1b0 [ 489.597945] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 489.597959] ? check_preemption_disabled+0x35/0x240 [ 489.627254] DMA free:10956kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 489.632887] alloc_pages_current+0x155/0x260 [ 489.661774] lowmem_reserve[]: [ 489.665820] ion_page_pool_alloc+0x118/0x1b0 [ 489.670492] 0 [ 489.675725] ion_system_heap_allocate+0x133/0x8c0 [ 489.680241] 2717 [ 489.682792] ? _raw_spin_unlock+0x29/0x40 [ 489.688308] 2718 [ 489.692884] ? _ion_heap_freelist_drain+0x6e/0x410 [ 489.699262] 2718 [ 489.706241] ? ion_system_contig_heap_create+0x130/0x130 [ 489.733434] 2718 [ 489.738751] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 489.738767] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 489.738779] ion_alloc+0x27a/0x810 [ 489.738793] ? ion_dma_buf_release+0x40/0x40 [ 489.750313] ? __might_fault+0x177/0x1b0 [ 489.750328] ion_ioctl+0xea/0x1f0 [ 489.750339] ? ion_query_heaps+0x360/0x360 [ 489.750350] ? ion_query_heaps+0x360/0x360 [ 489.750364] do_vfs_ioctl+0x75a/0xff0 [ 489.752812] Node 0 [ 489.758648] ? ioctl_preallocate+0x1a0/0x1a0 [ 489.758659] ? lock_downgrade+0x740/0x740 [ 489.758671] ? __fget+0x225/0x360 [ 489.758685] ? do_vfs_ioctl+0xff0/0xff0 [ 489.760942] DMA32 free:17492kB min:36200kB low:45248kB high:54296kB active_anon:47004kB inactive_anon:59108kB active_file:68kB inactive_file:36kB unevictable:0kB writepending:144kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7808kB pagetables:2728kB bounce:0kB free_pcp:728kB local_pcp:8kB free_cma:0kB [ 489.765616] ? security_file_ioctl+0x83/0xb0 [ 489.767830] lowmem_reserve[]: [ 489.773004] SyS_ioctl+0x7f/0xb0 [ 489.775161] 0 [ 489.781522] ? do_vfs_ioctl+0xff0/0xff0 [ 489.781536] do_syscall_64+0x1d5/0x640 [ 489.781550] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 489.781558] RIP: 0033:0x4665f9 [ 489.781569] RSP: 002b:00007f4323f8e188 EFLAGS: 00000246 [ 489.783924] 0 [ 489.789095] ORIG_RAX: 0000000000000010 [ 489.789102] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 489.789106] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000003 [ 489.789110] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 489.789115] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 489.789120] R13: 00007ffec8acf2af R14: 00007f4323f8e300 R15: 0000000000022000 [ 489.802744] Mem-Info: [ 489.822535] 0 [ 489.836171] active_anon:12049 inactive_anon:18919 isolated_anon:0 [ 489.836171] active_file:17 inactive_file:10 isolated_file:0 [ 489.836171] unevictable:0 dirty:36 writeback:0 unstable:0 [ 489.836171] slab_reclaimable:13147 slab_unreclaimable:116540 [ 489.836171] mapped:52862 shmem:19220 pagetables:760 bounce:0 [ 489.836171] free:13724 free_pcp:264 free_cma:0 [ 489.837231] 0 [ 489.843597] Node 0 active_anon:47004kB inactive_anon:59108kB active_file:68kB inactive_file:36kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:211444kB dirty:144kB writeback:0kB shmem:60180kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 489.847049] 0 [ 489.862335] Node 1 active_anon:1192kB inactive_anon:16568kB active_file:0kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:4kB dirty:0kB writeback:0kB shmem:16700kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 489.916028] Node 0 [ 489.922455] Node 0 [ 489.926516] DMA free:10956kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 489.934808] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 489.947996] lowmem_reserve[]: [ 489.962114] lowmem_reserve[]: [ 489.979810] 0 [ 490.019941] 0 [ 490.179937] 2717 2718 2718 2718 [ 490.193242] 0 0 0 0 [ 490.201736] Node 1 Normal free:338544kB min:53696kB low:67120kB high:80544kB active_anon:1192kB inactive_anon:16568kB active_file:16kB inactive_file:2688kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:224kB pagetables:312kB bounce:0kB free_pcp:236kB local_pcp:112kB free_cma:0kB [ 490.205585] Node 0 [ 490.242952] lowmem_reserve[]: 0 0 0 0 0 [ 490.286702] Node 0 DMA: 1*4kB (E) 3*8kB (U) 19*16kB (UE) 18*32kB (UE) 10*64kB (UE) 11*128kB (UE) 2*256kB (UE) 2*512kB (UE) 2*1024kB (UE) 3*2048kB (UME) 0*4096kB = 12684kB [ 490.320500] DMA32 free:96656kB min:36200kB low:45248kB high:54296kB active_anon:47004kB inactive_anon:59108kB active_file:64kB inactive_file:100kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7776kB pagetables:2728kB bounce:0kB free_pcp:848kB local_pcp:132kB free_cma:0kB [ 490.371747] Node 0 DMA32: 1370*4kB (UMEH) 721*8kB (UMEH) 228*16kB (UMEH) 51*32kB (UMEH) 577*64kB (UMEH) 387*128kB (UMH) 22*256kB (UM) 2*512kB (U) 2*1024kB (U) 0*2048kB 0*4096kB = 111696kB [ 490.442658] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 490.453998] lowmem_reserve[]: 0 0 0 0 0 [ 490.467180] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 490.505334] Node 1 Normal: 2*4kB (UM) 3*8kB (UME) 3*16kB (UM) 825*32kB (UME) [ 490.505381] lowmem_reserve[]: 0 0 0 0 0 [ 490.525579] 7764*64kB (UME) 1543*128kB (UM) 552*256kB (U) 145*512kB (U) 40*1024kB (UM) 1*2048kB (U) 0*4096kB = 979440kB [ 490.557190] Node 1 Normal free:979312kB min:53696kB low:67120kB high:80544kB active_anon:1192kB inactive_anon:16568kB active_file:16kB inactive_file:2688kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:224kB pagetables:312kB bounce:0kB free_pcp:236kB local_pcp:124kB free_cma:0kB [ 490.561481] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 490.637220] lowmem_reserve[]: 0 0 0 0 0 [ 490.661427] Node 0 DMA: 1*4kB (E) 3*8kB (U) 19*16kB (UE) 18*32kB (UE) 11*64kB (UE) 11*128kB (UE) 3*256kB (UE) 2*512kB (UE) 2*1024kB (UE) 3*2048kB (UME) 0*4096kB = 13004kB [ 490.678326] Node 0 DMA32: 28805*4kB (UMEH) 10041*8kB (UMEH) 3371*16kB (UMEH) 1021*32kB (UMEH) 798*64kB (UMEH) 393*128kB (UMH) 23*256kB (UM) 2*512kB (U) 2*1024kB (U) 0*2048kB 0*4096kB = 392492kB [ 490.697172] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 490.737211] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 490.748432] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 490.751521] Node 1 Normal: 2*4kB (UM) 3*8kB (UME) 3*16kB (UM) 825*32kB (UME) 7764*64kB (UME) 1543*128kB (UM) 552*256kB (U) 145*512kB (U) 40*1024kB (UM) 1*2048kB (U) 0*4096kB = 979440kB [ 490.792258] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 490.801016] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 490.802101] 20056 total pagecache pages [ 490.816412] 0 pages in swap cache [ 490.847208] Swap cache stats: add 0, delete 0, find 0/0 [ 490.857186] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 490.876676] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 490.876680] Free swap = 0kB [ 490.876688] Total swap = 0kB [ 490.891333] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 490.901592] 2097051 pages RAM [ 490.921831] 20056 total pagecache pages [ 490.926264] 0 pages in swap cache [ 490.931972] 0 pages HighMem/MovableOnly [ 490.931985] 363849 pages reserved [ 490.931988] 0 pages cma reserved [ 490.966811] Swap cache stats: add 0, delete 0, find 0/0 [ 490.978201] Free swap = 0kB [ 490.982137] Total swap = 0kB [ 490.986624] 2097051 pages RAM [ 490.993194] 0 pages HighMem/MovableOnly [ 490.999265] 363849 pages reserved [ 491.006038] 0 pages cma reserved [ 491.012139] Out of memory (oom_kill_allocating_task): Kill process 17846 (syz-executor.1) score 0 or sacrifice child [ 491.024578] Killed process 17846 (syz-executor.1) total-vm:93252kB, anon-rss:140kB, file-rss:35068kB, shmem-rss:0kB [ 491.047033] oom_reaper: reaped process 17846 (syz-executor.1), now anon-rss:0kB, file-rss:8kB, shmem-rss:0kB 11:47:28 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x10001, 0x400) r1 = syz_open_dev$vcsn(&(0x7f0000000140), 0x7, 0x24c042) ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r0, 0x7a9, &(0x7f0000000040)={{@my=0x0, 0x7f}, 0x40, 0x3, 0x0, 0x6, 0xf1, 0x5, 0x39, 0x3}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(0xffffffffffffffff, 0x7a8, &(0x7f0000000080)={{@host, 0x20000}, @hyper, 0x4, 0x9, 0x0, 0x5, 0x6, 0xd350}) ioctl$SNAPSHOT_ATOMIC_RESTORE(r1, 0x3304) r2 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0), 0x20000, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000100)={0x80000001, 0x27}) 11:47:28 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x10001, 0x400) r1 = syz_open_dev$vcsn(&(0x7f0000000140), 0x7, 0x24c042) ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r0, 0x7a9, &(0x7f0000000040)={{@my=0x0, 0x7f}, 0x40, 0x3, 0x0, 0x6, 0xf1, 0x5, 0x39, 0x3}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(0xffffffffffffffff, 0x7a8, &(0x7f0000000080)={{@host, 0x20000}, @hyper, 0x4, 0x9, 0x0, 0x5, 0x6, 0xd350}) ioctl$SNAPSHOT_ATOMIC_RESTORE(r1, 0x3304) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x44, 0x0, 0x400, 0x70bd25, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3023d3782c859c3d}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}]}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0), 0x20000, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000100)={0x80000001, 0x27}) 11:47:28 executing program 2: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x10001, 0x400) syz_open_dev$vcsn(&(0x7f0000000140), 0x7, 0x24c042) ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r0, 0x7a9, &(0x7f0000000040)={{@my=0x0, 0x7f}, 0x40, 0x3, 0x0, 0x6, 0xf1, 0x5, 0x39, 0x3}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(0xffffffffffffffff, 0x7a8, &(0x7f0000000080)={{@host, 0x20000}, @hyper, 0x4, 0x9, 0x0, 0x5, 0x6, 0xd350}) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x44, 0x0, 0x400, 0x70bd25, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3023d3782c859c3d}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}]}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0), 0x20000, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000100)={0x80000001, 0x27}) 11:47:28 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x10001, 0x400) ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r0, 0x7a9, &(0x7f0000000040)={{@my=0x0, 0x7f}, 0x40, 0x3, 0x0, 0x6, 0xf1, 0x5, 0x39, 0x3}) r1 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0), 0x20000, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000100)={0x80000001, 0x27}) 11:47:28 executing program 0: openat$ion(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000100)={0x80000001, 0x27}) 11:47:28 executing program 5: ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(0xffffffffffffffff, 0x7a9, &(0x7f0000000040)={{@my=0x0, 0x7f}, 0x40, 0x3, 0x0, 0x6, 0xf1, 0x5, 0x39, 0x3}) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0), 0x20000, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000100)={0x80000001, 0x27}) 11:47:28 executing program 0: openat$ion(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000100)={0x80000001, 0x27}) 11:47:29 executing program 0: openat$ion(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000100)={0x80000001, 0x27}) 11:47:29 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0) 11:47:29 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0) 11:47:29 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0) 11:47:29 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000100)={0x0, 0x27}) [ 494.066781] syz-executor.2: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 494.069519] syz-executor.4: [ 494.106052] syz-executor.1: [ 494.131089] syz-executor.5: [ 494.135184] syz-executor.3: [ 494.136895] page allocation failure: order:4 [ 494.143789] page allocation failure: order:4 [ 494.146380] syz-executor.2 cpuset= [ 494.149768] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 494.155120] page allocation failure: order:4 [ 494.159920] page allocation failure: order:4 [ 494.171019] (null) [ 494.171519] / [ 494.176797] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 494.192587] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 494.194841] mems_allowed=0-1 [ 494.200862] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 494.202406] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 494.211879] CPU: 1 PID: 17858 Comm: syz-executor.1 Not tainted 4.14.232-syzkaller #0 [ 494.227037] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 494.236493] Call Trace: [ 494.239087] dump_stack+0x1b2/0x281 [ 494.242799] warn_alloc.cold+0x96/0x1cc [ 494.246778] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 494.251793] ? zone_watermark_ok_safe+0x220/0x220 [ 494.256647] __alloc_pages_nodemask+0x2127/0x2720 [ 494.261496] ? lock_acquire+0x170/0x3f0 [ 494.265483] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 494.270347] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 494.275800] ? __mutex_unlock_slowpath+0x75/0x770 [ 494.280668] alloc_pages_current+0x155/0x260 [ 494.285093] ion_page_pool_alloc+0x118/0x1b0 [ 494.289502] ion_system_heap_allocate+0x133/0x8c0 [ 494.294372] ? ion_alloc+0x187/0x810 [ 494.298086] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 494.303536] ? ion_system_contig_heap_create+0x130/0x130 [ 494.308987] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 494.314019] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 494.318861] ion_alloc+0x204/0x810 [ 494.322938] ? ion_dma_buf_release+0x40/0x40 [ 494.327349] ? __might_fault+0x177/0x1b0 [ 494.331433] ion_ioctl+0xea/0x1f0 [ 494.334885] ? ion_query_heaps+0x360/0x360 [ 494.339124] ? ion_query_heaps+0x360/0x360 [ 494.343535] do_vfs_ioctl+0x75a/0xff0 [ 494.347354] ? ioctl_preallocate+0x1a0/0x1a0 [ 494.351763] ? lock_downgrade+0x740/0x740 [ 494.355916] ? __fget+0x225/0x360 [ 494.359362] ? do_vfs_ioctl+0xff0/0xff0 [ 494.363351] ? security_file_ioctl+0x83/0xb0 [ 494.367773] SyS_ioctl+0x7f/0xb0 [ 494.371153] ? do_vfs_ioctl+0xff0/0xff0 [ 494.375128] do_syscall_64+0x1d5/0x640 [ 494.379019] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 494.384210] RIP: 0033:0x4665f9 [ 494.387399] RSP: 002b:00007faffec44188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 494.395107] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 494.402394] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000005 [ 494.409665] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 494.416958] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 494.424233] R13: 00007ffc312071cf R14: 00007faffec44300 R15: 0000000000022000 [ 494.444070] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 494.450402] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 494.451902] CPU: 0 PID: 17860 Comm: syz-executor.2 Not tainted 4.14.232-syzkaller #0 [ 494.455796] (null) [ 494.463474] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 494.463479] Call Trace: [ 494.463502] dump_stack+0x1b2/0x281 [ 494.463516] warn_alloc.cold+0x96/0x1cc [ 494.463528] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 494.463538] ? zone_watermark_ok_safe+0x220/0x220 [ 494.463559] __alloc_pages_nodemask+0x2127/0x2720 [ 494.463574] ? lock_acquire+0x170/0x3f0 [ 494.463588] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 494.463605] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 494.463618] ? __mutex_unlock_slowpath+0x75/0x770 [ 494.463632] alloc_pages_current+0x155/0x260 [ 494.463643] ion_page_pool_alloc+0x118/0x1b0 [ 494.463652] ion_system_heap_allocate+0x133/0x8c0 [ 494.463661] ? ion_alloc+0x187/0x810 [ 494.463671] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 494.463681] ? ion_system_contig_heap_create+0x130/0x130 [ 494.463690] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 494.463700] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 494.463711] ion_alloc+0x204/0x810 [ 494.482739] syz-executor.3 cpuset= [ 494.485575] ? ion_dma_buf_release+0x40/0x40 [ 494.485596] ? __might_fault+0x177/0x1b0 [ 494.485607] ion_ioctl+0xea/0x1f0 [ 494.517221] / [ 494.519402] ? ion_query_heaps+0x360/0x360 [ 494.543281] mems_allowed=0-1 [ 494.545235] ? ion_query_heaps+0x360/0x360 [ 494.545248] do_vfs_ioctl+0x75a/0xff0 [ 494.545263] ? ioctl_preallocate+0x1a0/0x1a0 [ 494.601524] ? lock_downgrade+0x740/0x740 [ 494.605704] ? __fget+0x225/0x360 [ 494.609159] ? do_vfs_ioctl+0xff0/0xff0 [ 494.613133] ? security_file_ioctl+0x83/0xb0 [ 494.617539] SyS_ioctl+0x7f/0xb0 [ 494.620912] ? do_vfs_ioctl+0xff0/0xff0 [ 494.624892] do_syscall_64+0x1d5/0x640 [ 494.628788] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 494.633975] RIP: 0033:0x4665f9 [ 494.637154] RSP: 002b:00007ff3638e3188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 494.644857] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 494.652121] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000005 [ 494.660211] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 494.667499] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 494.674770] R13: 00007ffe909c1c6f R14: 00007ff3638e3300 R15: 0000000000022000 [ 494.682062] CPU: 1 PID: 17859 Comm: syz-executor.4 Not tainted 4.14.232-syzkaller #0 [ 494.689982] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 494.699357] Call Trace: [ 494.701957] dump_stack+0x1b2/0x281 [ 494.705597] warn_alloc.cold+0x96/0x1cc [ 494.709587] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 494.714615] ? zone_watermark_ok_safe+0x220/0x220 [ 494.719479] __alloc_pages_nodemask+0x2127/0x2720 [ 494.724327] ? _raw_spin_unlock_irq+0x5a/0x80 [ 494.728834] ? finish_task_switch+0x178/0x610 [ 494.733358] ? finish_task_switch+0x14d/0x610 [ 494.737865] ? lock_acquire+0x170/0x3f0 [ 494.741860] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 494.746716] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 494.752176] ? __mutex_unlock_slowpath+0x75/0x770 [ 494.757030] alloc_pages_current+0x155/0x260 [ 494.761599] ion_page_pool_alloc+0x118/0x1b0 [ 494.766014] ion_system_heap_allocate+0x133/0x8c0 [ 494.770869] ? ion_alloc+0x187/0x810 [ 494.774802] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 494.780252] ? ion_system_contig_heap_create+0x130/0x130 [ 494.785710] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 494.790729] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 494.795592] ion_alloc+0x204/0x810 [ 494.799134] ? ion_dma_buf_release+0x40/0x40 [ 494.803543] ? __might_fault+0x177/0x1b0 [ 494.807619] ion_ioctl+0xea/0x1f0 [ 494.811173] ? ion_query_heaps+0x360/0x360 [ 494.815407] ? ion_query_heaps+0x360/0x360 [ 494.819641] do_vfs_ioctl+0x75a/0xff0 [ 494.823527] ? ioctl_preallocate+0x1a0/0x1a0 [ 494.828027] ? lock_downgrade+0x740/0x740 [ 494.832188] ? __fget+0x225/0x360 [ 494.835660] ? do_vfs_ioctl+0xff0/0xff0 [ 494.839632] ? security_file_ioctl+0x83/0xb0 [ 494.844037] SyS_ioctl+0x7f/0xb0 [ 494.847406] ? do_vfs_ioctl+0xff0/0xff0 [ 494.851380] do_syscall_64+0x1d5/0x640 [ 494.855269] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 494.860456] RIP: 0033:0x4665f9 [ 494.863642] RSP: 002b:00007f9108899188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 494.871353] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 494.878646] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000006 [ 494.885920] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 494.893208] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 494.900499] R13: 00007fffb2c94dcf R14: 00007f9108899300 R15: 0000000000022000 [ 494.916140] CPU: 1 PID: 17862 Comm: syz-executor.5 Not tainted 4.14.232-syzkaller #0 [ 494.924923] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 494.934280] Call Trace: [ 494.936915] dump_stack+0x1b2/0x281 [ 494.940816] warn_alloc.cold+0x96/0x1cc [ 494.944832] ? zone_watermark_ok_safe+0x220/0x220 [ 494.949721] __alloc_pages_nodemask+0x2127/0x2720 [ 494.954576] ? _raw_spin_unlock_irq+0x5a/0x80 [ 494.959084] ? finish_task_switch+0x178/0x610 [ 494.963589] ? finish_task_switch+0x14d/0x610 [ 494.968095] ? lock_acquire+0x170/0x3f0 [ 494.972082] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 494.976962] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 494.982422] ? __mutex_unlock_slowpath+0x75/0x770 [ 494.987265] ? alloc_pages_current+0x16/0x260 [ 494.991765] alloc_pages_current+0x155/0x260 [ 494.996178] ion_page_pool_alloc+0x118/0x1b0 [ 495.000594] ion_system_heap_allocate+0x133/0x8c0 [ 495.005442] ? ion_alloc+0x187/0x810 [ 495.009156] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 495.014610] ? ion_system_contig_heap_create+0x130/0x130 [ 495.020100] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 495.025123] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 495.029968] ion_alloc+0x204/0x810 [ 495.033509] ? ion_dma_buf_release+0x40/0x40 [ 495.037917] ? __might_fault+0x177/0x1b0 [ 495.041977] ion_ioctl+0xea/0x1f0 [ 495.045420] ? ion_query_heaps+0x360/0x360 [ 495.049655] ? ion_query_heaps+0x360/0x360 [ 495.053883] do_vfs_ioctl+0x75a/0xff0 [ 495.057680] ? ioctl_preallocate+0x1a0/0x1a0 [ 495.062082] ? lock_downgrade+0x740/0x740 [ 495.066225] ? __fget+0x225/0x360 [ 495.069674] ? do_vfs_ioctl+0xff0/0xff0 [ 495.073667] ? security_file_ioctl+0x83/0xb0 [ 495.078076] SyS_ioctl+0x7f/0xb0 [ 495.081443] ? do_vfs_ioctl+0xff0/0xff0 [ 495.085417] do_syscall_64+0x1d5/0x640 [ 495.089428] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 495.094637] RIP: 0033:0x4665f9 [ 495.097819] RSP: 002b:00007f4323f8e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 495.105527] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 495.113230] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000003 [ 495.120497] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 495.127763] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 495.135032] R13: 00007ffec8acf2af R14: 00007f4323f8e300 R15: 0000000000022000 [ 495.150782] CPU: 1 PID: 17854 Comm: syz-executor.3 Not tainted 4.14.232-syzkaller #0 [ 495.158702] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 495.168088] Call Trace: [ 495.170687] dump_stack+0x1b2/0x281 [ 495.174326] warn_alloc.cold+0x96/0x1cc [ 495.178326] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 495.183352] ? zone_watermark_ok_safe+0x220/0x220 [ 495.185701] warn_alloc_show_mem: 1 callbacks suppressed [ 495.185705] Mem-Info: [ 495.188204] __alloc_pages_nodemask+0x2127/0x2720 [ 495.188217] ? _raw_spin_unlock_irq+0x24/0x80 [ 495.188234] ? lock_acquire+0x170/0x3f0 [ 495.199763] active_anon:12139 inactive_anon:18919 isolated_anon:0 [ 495.199763] active_file:1112 inactive_file:2278 isolated_file:16 [ 495.199763] unevictable:0 dirty:32 writeback:0 unstable:0 [ 495.199763] slab_reclaimable:13204 slab_unreclaimable:117019 [ 495.199763] mapped:55224 shmem:19220 pagetables:811 bounce:0 [ 495.199763] free:193942 free_pcp:379 free_cma:0 [ 495.204235] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 495.204254] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 495.217734] Node 0 active_anon:47368kB inactive_anon:59112kB active_file:3988kB inactive_file:8848kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:220172kB dirty:108kB writeback:0kB shmem:60184kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 495.246654] ? __mutex_unlock_slowpath+0x75/0x770 [ 495.246669] alloc_pages_current+0x155/0x260 [ 495.246682] ion_page_pool_alloc+0x118/0x1b0 [ 495.246692] ion_system_heap_allocate+0x133/0x8c0 [ 495.246706] ? ion_alloc+0x187/0x810 [ 495.286599] Node 1 active_anon:1188kB inactive_anon:16564kB active_file:460kB inactive_file:264kB unevictable:0kB isolated(anon):0kB isolated(file):64kB mapped:724kB dirty:20kB writeback:0kB shmem:16696kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 495.290078] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 495.290090] ? ion_system_contig_heap_create+0x130/0x130 [ 495.290100] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 495.290116] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 495.297859] Node 0 [ 495.298928] ion_alloc+0x204/0x810 [ 495.298942] ? ion_dma_buf_release+0x40/0x40 [ 495.307098] DMA free:11752kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 495.307483] ? __might_fault+0x177/0x1b0 [ 495.361019] lowmem_reserve[]: [ 495.361211] ion_ioctl+0xea/0x1f0 [ 495.371113] 0 [ 495.391127] ? ion_query_heaps+0x360/0x360 [ 495.391139] ? ion_query_heaps+0x360/0x360 [ 495.391149] do_vfs_ioctl+0x75a/0xff0 [ 495.391159] ? ioctl_preallocate+0x1a0/0x1a0 [ 495.391168] ? lock_downgrade+0x740/0x740 [ 495.391181] ? __fget+0x225/0x360 [ 495.416096] 2717 [ 495.416824] ? do_vfs_ioctl+0xff0/0xff0 [ 495.426771] 2718 [ 495.429885] ? security_file_ioctl+0x83/0xb0 [ 495.429898] SyS_ioctl+0x7f/0xb0 [ 495.429907] ? do_vfs_ioctl+0xff0/0xff0 [ 495.429919] do_syscall_64+0x1d5/0x640 [ 495.435277] 2718 [ 495.435943] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 495.440281] 2718 [ 495.442416] RIP: 0033:0x4665f9 [ 495.442425] RSP: 002b:00007f19ab3d9188 EFLAGS: 00000246 [ 495.449904] ORIG_RAX: 0000000000000010 [ 495.449911] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 495.449917] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000004 [ 495.449922] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 495.449931] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 495.467127] Node 0 [ 495.472113] R13: 00007ffe6b89cc0f R14: 00007f19ab3d9300 R15: 0000000000022000 [ 495.581135] DMA32 free:574240kB min:36200kB low:45248kB high:54296kB active_anon:47368kB inactive_anon:59112kB active_file:3988kB inactive_file:8848kB unevictable:0kB writepending:108kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7872kB pagetables:3036kB bounce:0kB free_pcp:736kB local_pcp:736kB free_cma:0kB [ 495.641965] lowmem_reserve[]: 0 0 0 0 0 [ 495.652597] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 495.707894] lowmem_reserve[]: 0 0 0 0 0 [ 495.716582] Node 1 Normal free:510744kB min:53696kB low:67120kB high:80544kB active_anon:1188kB inactive_anon:16564kB active_file:460kB inactive_file:264kB unevictable:0kB writepending:20kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:192kB pagetables:208kB bounce:0kB free_pcp:620kB local_pcp:620kB free_cma:0kB [ 495.777999] lowmem_reserve[]: 0 0 0 0 0 [ 495.786608] Node 0 DMA: 11*4kB (UE) 16*8kB (U) 18*16kB (UE) 17*32kB (UE) 4*64kB (UE) 4*128kB (UE) 3*256kB (UE) 2*512kB (UE) 2*1024kB (UE) 3*2048kB (UME) 0*4096kB = 11756kB [ 495.821277] Node 0 DMA32: 549*4kB (UMEH) 413*8kB (UEH) 10387*16kB (UMEH) 5790*32kB (UMEH) 579*64kB (UMH) 84*128kB (UH) 1*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 405036kB [ 495.855469] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 495.878915] Node 1 Normal: 10214*4kB (UME) 5355*8kB (UME) 3962*16kB (UME) 3447*32kB (UME) 5471*64kB (UME) 5*128kB (UM) 1*256kB (U) 46*512kB (U) 7*1024kB (U) 0*2048kB 0*4096kB = 639152kB [ 495.914828] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 495.934665] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 495.954653] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 495.973681] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 495.993645] 22656 total pagecache pages [ 496.002312] 0 pages in swap cache [ 496.010641] Swap cache stats: add 0, delete 0, find 0/0 [ 496.023545] Free swap = 0kB [ 496.031255] Total swap = 0kB [ 496.039157] 2097051 pages RAM [ 496.045775] 0 pages HighMem/MovableOnly [ 496.055773] 363849 pages reserved [ 496.064053] 0 pages cma reserved [ 499.011687] oom_reaper: reaped process 17858 (syz-executor.1), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 499.071301] syz-fuzzer invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 499.087137] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 499.107046] CPU: 0 PID: 7997 Comm: syz-fuzzer Not tainted 4.14.232-syzkaller #0 [ 499.114615] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 499.123974] Call Trace: [ 499.126588] dump_stack+0x1b2/0x281 [ 499.130230] dump_header+0x178/0x82f [ 499.134299] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 499.139404] ? ___ratelimit+0x2cd/0x530 [ 499.143384] oom_kill_process.cold+0x10/0xa40 [ 499.147898] out_of_memory+0xe3e/0x1190 [ 499.151932] ? oom_killer_disable+0x1c0/0x1c0 [ 499.156463] ? mutex_trylock+0x152/0x1a0 [ 499.160557] __alloc_pages_nodemask+0x23e1/0x2720 [ 499.165446] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 499.170332] alloc_pages_current+0x155/0x260 [ 499.174748] filemap_fault+0x11a1/0x1ad0 [ 499.178828] ext4_filemap_fault+0x84/0xb0 [ 499.182996] __do_fault+0xfa/0x380 [ 499.186565] __handle_mm_fault+0x2497/0x4620 [ 499.190998] ? vm_insert_page+0x7c0/0x7c0 [ 499.195164] ? lock_downgrade+0x740/0x740 [ 499.199334] ? mark_held_locks+0xa6/0xf0 [ 499.203560] handle_mm_fault+0x455/0x9c0 [ 499.207769] __do_page_fault+0x549/0xad0 [ 499.211869] ? spurious_fault+0x640/0x640 [ 499.216047] ? do_page_fault+0x60/0x500 [ 499.220053] ? page_fault+0x2f/0x50 [ 499.223731] page_fault+0x45/0x50 [ 499.227219] RIP: 0000:0x947a14 [ 499.230414] RSP: 2e000:000000c00003dec8 EFLAGS: 0043b6a0 [ 499.427297] Mem-Info: [ 499.437692] active_anon:12123 inactive_anon:18919 isolated_anon:0 [ 499.437692] active_file:24 inactive_file:0 isolated_file:0 [ 499.437692] unevictable:0 dirty:0 writeback:0 unstable:0 [ 499.437692] slab_reclaimable:13172 slab_unreclaimable:116867 [ 499.437692] mapped:52957 shmem:19220 pagetables:811 bounce:0 [ 499.437692] free:17803 free_pcp:50 free_cma:0 [ 499.477712] Node 0 active_anon:47288kB inactive_anon:59112kB active_file:80kB inactive_file:64kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:211824kB dirty:0kB writeback:0kB shmem:60184kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 499.512279] Node 1 active_anon:1204kB inactive_anon:16564kB active_file:16kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:4kB dirty:0kB writeback:0kB shmem:16696kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 499.545684] Node 0 DMA free:10968kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 499.577086] syz-executor.1: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 499.590240] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 499.595302] Node 0 DMA32 free:38220kB min:36200kB low:45248kB high:54296kB active_anon:47288kB inactive_anon:59112kB active_file:0kB inactive_file:80kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7872kB pagetables:3036kB bounce:0kB free_pcp:1072kB local_pcp:832kB free_cma:0kB [ 499.652628] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 499.667266] lowmem_reserve[]: 0 0 0 0 0 [ 499.677076] CPU: 0 PID: 17858 Comm: syz-executor.1 Not tainted 4.14.232-syzkaller #0 [ 499.684991] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 499.687084] Node 0 [ 499.694350] Call Trace: [ 499.694371] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 499.696598] dump_stack+0x1b2/0x281 [ 499.717556] lowmem_reserve[]: [ 499.724084] warn_alloc.cold+0x96/0x1cc [ 499.724098] ? zone_watermark_ok_safe+0x220/0x220 [ 499.724107] ? usleep_range+0x130/0x130 [ 499.724116] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 499.724129] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 499.724138] ? run_timer_softirq+0x5a0/0x5a0 [ 499.724153] __alloc_pages_nodemask+0x2127/0x2720 [ 499.724167] ? lock_acquire+0x170/0x3f0 [ 499.724180] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 499.724190] ? ion_page_pool_alloc+0x9e/0x1b0 [ 499.724207] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 499.724227] alloc_pages_current+0x155/0x260 [ 499.748683] 0 [ 499.748910] ion_page_pool_alloc+0x118/0x1b0 [ 499.754384] 0 [ 499.758320] ion_system_heap_allocate+0x133/0x8c0 [ 499.758331] ? ion_alloc+0x187/0x810 [ 499.758341] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 499.758349] ? ion_system_contig_heap_create+0x130/0x130 [ 499.758358] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 499.758370] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 499.758380] ion_alloc+0x204/0x810 [ 499.758392] ? ion_dma_buf_release+0x40/0x40 [ 499.758404] ? __might_fault+0x177/0x1b0 [ 499.758415] ion_ioctl+0xea/0x1f0 [ 499.758424] ? ion_query_heaps+0x360/0x360 [ 499.758435] ? ion_query_heaps+0x360/0x360 [ 499.758445] do_vfs_ioctl+0x75a/0xff0 [ 499.758455] ? ioctl_preallocate+0x1a0/0x1a0 [ 499.758465] ? lock_downgrade+0x740/0x740 [ 499.758478] ? __fget+0x225/0x360 [ 499.785090] 0 [ 499.786584] ? do_vfs_ioctl+0xff0/0xff0 [ 499.788425] 0 [ 499.792777] ? security_file_ioctl+0x83/0xb0 [ 499.794555] 0 [ 499.799395] SyS_ioctl+0x7f/0xb0 [ 499.799404] ? do_vfs_ioctl+0xff0/0xff0 [ 499.799415] do_syscall_64+0x1d5/0x640 [ 499.799429] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 499.799437] RIP: 0033:0x4665f9 [ 499.799441] RSP: 002b:00007faffec44188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 499.799451] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 499.799456] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000005 [ 499.799461] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 499.799469] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 499.843726] R13: 00007ffc312071cf R14: 00007faffec44300 R15: 0000000000022000 [ 499.876654] Node 1 [ 499.912143] warn_alloc_show_mem: 4 callbacks suppressed [ 499.912147] Mem-Info: [ 499.920984] Normal free:26904kB min:53696kB low:67120kB high:80544kB active_anon:1204kB inactive_anon:16564kB active_file:16kB inactive_file:0kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:192kB pagetables:208kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 499.931669] active_anon:12123 inactive_anon:18919 isolated_anon:0 [ 499.931669] active_file:40 inactive_file:33 isolated_file:0 [ 499.931669] unevictable:0 dirty:0 writeback:0 unstable:0 [ 499.931669] slab_reclaimable:13172 slab_unreclaimable:116867 [ 499.931669] mapped:52957 shmem:19220 pagetables:811 bounce:0 [ 499.931669] free:18467 free_pcp:191 free_cma:0 [ 499.931965] lowmem_reserve[]: [ 499.948250] Node 0 active_anon:47288kB inactive_anon:59112kB active_file:144kB inactive_file:132kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:211824kB dirty:0kB writeback:0kB shmem:60184kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 499.957057] 0 [ 499.998857] Node 1 active_anon:1204kB inactive_anon:16564kB active_file:16kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:4kB dirty:0kB writeback:0kB shmem:16696kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 500.026387] 0 [ 500.060146] Node 0 [ 500.087466] 0 0 0 [ 500.091897] Node 0 DMA: 2*4kB (UE) 0*8kB 1*16kB (E) 2*32kB (UE) 2*64kB (UE) 6*128kB (UE) 3*256kB (UE) 2*512kB (UE) 2*1024kB (UE) 3*2048kB (UME) 0*4096kB = 10968kB [ 500.113368] DMA free:10968kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 500.153219] Node 0 DMA32: 1178*4kB (UME) 698*8kB (UME) 1352*16kB (UME) 51*32kB (UME) 35*64kB (UME) 3*128kB (UM) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36184kB [ 500.209245] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 500.214329] Node 0 DMA32 free:36120kB min:36200kB low:45248kB high:54296kB active_anon:47280kB inactive_anon:59112kB active_file:28kB inactive_file:32kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7872kB pagetables:3036kB bounce:0kB free_pcp:780kB local_pcp:120kB free_cma:0kB [ 500.222064] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 500.327029] Node 1 Normal: 28*4kB (ME) 16*8kB (ME) 17*16kB (UME) 10*32kB (UME) 22*64kB (UME) 11*128kB (UME) 3*256kB (UM) 0*512kB 0*1024kB 11*2048kB (U) 0*4096kB = 26944kB [ 500.388638] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 500.405755] lowmem_reserve[]: 0 0 0 0 0 [ 500.424470] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 500.430010] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 500.450465] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 500.553877] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 500.573489] lowmem_reserve[]: 0 0 0 0 0 [ 500.585589] 19239 total pagecache pages [ 500.592378] Node 1 Normal free:26944kB min:53696kB low:67120kB high:80544kB active_anon:1204kB inactive_anon:16564kB active_file:8kB inactive_file:8kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:192kB pagetables:208kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 500.612324] 0 pages in swap cache [ 500.638181] Swap cache stats: add 0, delete 0, find 0/0 [ 500.643572] Free swap = 0kB [ 500.646606] Total swap = 0kB [ 500.678714] 2097051 pages RAM [ 500.681869] 0 pages HighMem/MovableOnly [ 500.685862] 363849 pages reserved [ 500.725663] 0 pages cma reserved [ 500.729310] lowmem_reserve[]: 0 0 0 0 0 [ 500.733614] Node 0 DMA: 2*4kB (UE) 0*8kB 1*16kB (E) 2*32kB (UE) 2*64kB (UE) 6*128kB (UE) 3*256kB (UE) 2*512kB (UE) 2*1024kB (UE) 3*2048kB (UME) 0*4096kB = 10968kB [ 500.744861] Out of memory (oom_kill_allocating_task): Kill process 7997 (syz-fuzzer) score 0 or sacrifice child [ 500.825679] Node 0 DMA32: 1178*4kB (UME) 698*8kB (UME) 1352*16kB (UME) 51*32kB (UME) 35*64kB (UME) 3*128kB (UM) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36184kB [ 500.842698] Killed process 17576 (syz-executor.1) total-vm:84924kB, anon-rss:60kB, file-rss:0kB, shmem-rss:0kB [ 500.891965] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 500.928684] oom_reaper: reaped process 17576 (syz-executor.1), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 500.948929] Node 1 Normal: 28*4kB (ME) 16*8kB (ME) 17*16kB (UME) 10*32kB (UME) 22*64kB (UME) 11*128kB (UME) 3*256kB (UM) 0*512kB 0*1024kB 11*2048kB (U) 0*4096kB = 26944kB [ 500.980683] in:imklog invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 500.999140] in:imklog cpuset=/ mems_allowed=0-1 [ 501.003893] CPU: 0 PID: 17821 Comm: in:imklog Not tainted 4.14.232-syzkaller #0 [ 501.011351] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 501.021185] Call Trace: [ 501.023787] dump_stack+0x1b2/0x281 [ 501.027729] dump_header+0x178/0x82f [ 501.031460] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 501.036590] ? ___ratelimit+0x2cd/0x530 [ 501.040580] oom_kill_process.cold+0x10/0xa40 [ 501.045098] out_of_memory+0xe3e/0x1190 [ 501.049108] ? oom_killer_disable+0x1c0/0x1c0 [ 501.053658] ? mutex_trylock+0x152/0x1a0 [ 501.057732] __alloc_pages_nodemask+0x23e1/0x2720 [ 501.062597] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 501.067466] alloc_pages_current+0x155/0x260 [ 501.071890] filemap_fault+0x11a1/0x1ad0 [ 501.075968] ext4_filemap_fault+0x84/0xb0 [ 501.080136] __do_fault+0xfa/0x380 [ 501.083695] __handle_mm_fault+0x2497/0x4620 [ 501.088252] ? vm_insert_page+0x7c0/0x7c0 [ 501.092443] ? lock_downgrade+0x740/0x740 [ 501.096611] ? mark_held_locks+0xa6/0xf0 [ 501.100713] handle_mm_fault+0x455/0x9c0 [ 501.104890] __do_page_fault+0x549/0xad0 [ 501.108973] ? spurious_fault+0x640/0x640 [ 501.113137] ? do_page_fault+0x60/0x500 [ 501.117303] ? page_fault+0x2f/0x50 [ 501.120937] page_fault+0x45/0x50 [ 501.124394] RIP: 1fa0:0x1f9f [ 501.127417] RSP: 0000:00005578122f69d0 EFLAGS: 7fdc9e1bada0 [ 501.143312] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 501.167216] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 501.175817] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 501.189943] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 501.198798] 19250 total pagecache pages [ 501.202889] 0 pages in swap cache [ 501.206339] Swap cache stats: add 0, delete 0, find 0/0 [ 501.214004] Free swap = 0kB [ 501.226975] Total swap = 0kB [ 501.230062] 2097051 pages RAM [ 501.237762] 0 pages HighMem/MovableOnly [ 501.241760] 363849 pages reserved [ 501.245208] 0 pages cma reserved [ 501.320595] Mem-Info: [ 501.323053] active_anon:12083 inactive_anon:18919 isolated_anon:0 [ 501.323053] active_file:8 inactive_file:0 isolated_file:0 [ 501.323053] unevictable:0 dirty:0 writeback:0 unstable:0 [ 501.323053] slab_reclaimable:13169 slab_unreclaimable:116753 [ 501.323053] mapped:44227 shmem:19220 pagetables:766 bounce:0 [ 501.323053] free:88712 free_pcp:0 free_cma:0 [ 501.422221] Node 0 active_anon:47132kB inactive_anon:59112kB active_file:224kB inactive_file:680kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:177604kB dirty:0kB writeback:0kB shmem:60184kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 501.452975] Node 1 active_anon:1200kB inactive_anon:16564kB active_file:8kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:4kB dirty:0kB writeback:0kB shmem:16696kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 501.496980] Node 0 DMA free:11160kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 501.525306] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 501.550662] Node 0 DMA32 free:121416kB min:36200kB low:45248kB high:54296kB active_anon:47132kB inactive_anon:59112kB active_file:80kB inactive_file:2420kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7840kB pagetables:2856kB bounce:0kB free_pcp:236kB local_pcp:140kB free_cma:0kB [ 501.591378] lowmem_reserve[]: 0 0 0 0 0 [ 501.676983] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 501.727188] lowmem_reserve[]: 0 0 0 0 0 [ 501.731280] Node 1 Normal free:256580kB min:53696kB low:67120kB high:80544kB active_anon:1200kB inactive_anon:16564kB active_file:16kB inactive_file:0kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:192kB pagetables:208kB bounce:0kB free_pcp:128kB local_pcp:108kB free_cma:0kB [ 501.760761] lowmem_reserve[]: 0 0 0 0 0 [ 501.764770] Node 0 DMA: 1*4kB (E) 1*8kB (U) 2*16kB (UE) 2*32kB (UE) 2*64kB (UE) 7*128kB (UE) 3*256kB (UE) 2*512kB (UE) 2*1024kB (UE) 3*2048kB (UME) 0*4096kB = 11116kB [ 501.779987] Node 0 DMA32: 782*4kB (ME) 419*8kB (UME) 555*16kB (UE) 352*32kB (UE) 161*64kB (UME) 50*128kB (UM) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 43328kB [ 501.795587] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 501.806865] Node 1 Normal: 28*4kB (UME) 16*8kB (UME) 16*16kB (UME) 9*32kB (UME) 1464*64kB (UME) 295*128kB (UME) 111*256kB (UM) 26*512kB (U) 35*1024kB (U) 12*2048kB (U) 0*4096kB = 234384kB [ 501.824104] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 501.833101] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 501.841755] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 501.850789] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 501.859504] 20894 total pagecache pages [ 501.863596] 0 pages in swap cache [ 501.867153] Swap cache stats: add 0, delete 0, find 0/0 [ 501.872522] Free swap = 0kB [ 501.875534] Total swap = 0kB [ 501.878627] 2097051 pages RAM [ 501.906980] 0 pages HighMem/MovableOnly [ 501.910985] 363849 pages reserved [ 501.914431] 0 pages cma reserved [ 501.967030] Out of memory (oom_kill_allocating_task): Kill process 17821 (in:imklog) score 0 or sacrifice child [ 501.997033] Killed process 17808 (rsyslogd) total-vm:254332kB, anon-rss:672kB, file-rss:0kB, shmem-rss:0kB [ 502.018934] oom_reaper: reaped process 17808 (rsyslogd), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 502.865863] syz-executor.1: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 502.882717] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 502.900936] CPU: 1 PID: 17858 Comm: syz-executor.1 Not tainted 4.14.232-syzkaller #0 [ 502.908864] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 502.918238] Call Trace: [ 502.920931] dump_stack+0x1b2/0x281 [ 502.924617] warn_alloc.cold+0x96/0x1cc [ 502.928614] ? zone_watermark_ok_safe+0x220/0x220 [ 502.933486] __alloc_pages_nodemask+0x2127/0x2720 [ 502.938695] ? check_preemption_disabled+0x35/0x240 [ 502.943728] ? lock_acquire+0x170/0x3f0 [ 502.947723] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 502.952596] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 502.958073] ? __mutex_unlock_slowpath+0x75/0x770 [ 502.962934] alloc_pages_current+0x155/0x260 [ 502.967379] ion_page_pool_alloc+0x118/0x1b0 [ 502.971801] ion_system_heap_allocate+0x133/0x8c0 [ 502.976663] ? _raw_spin_unlock+0x29/0x40 [ 502.980819] ? _ion_heap_freelist_drain+0x6e/0x410 [ 502.985845] ? ion_system_contig_heap_create+0x130/0x130 [ 502.991300] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 502.996311] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 503.001163] ion_alloc+0x27a/0x810 [ 503.004719] ? ion_dma_buf_release+0x40/0x40 [ 503.009121] ? __might_fault+0x177/0x1b0 [ 503.013168] ion_ioctl+0xea/0x1f0 [ 503.016630] ? ion_query_heaps+0x360/0x360 [ 503.020867] ? ion_query_heaps+0x360/0x360 [ 503.025089] do_vfs_ioctl+0x75a/0xff0 [ 503.028953] ? ioctl_preallocate+0x1a0/0x1a0 [ 503.033353] ? lock_downgrade+0x740/0x740 [ 503.037491] ? __fget+0x225/0x360 [ 503.041036] ? do_vfs_ioctl+0xff0/0xff0 [ 503.045013] ? security_file_ioctl+0x83/0xb0 [ 503.049425] SyS_ioctl+0x7f/0xb0 [ 503.052785] ? do_vfs_ioctl+0xff0/0xff0 [ 503.056891] do_syscall_64+0x1d5/0x640 [ 503.060803] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 503.065977] RIP: 0033:0x4665f9 [ 503.069252] RSP: 002b:00007faffec44188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 503.076995] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 503.084272] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000005 [ 503.091533] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 503.098812] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 503.106129] R13: 00007ffc312071cf R14: 00007faffec44300 R15: 0000000000022000 [ 503.114499] Mem-Info: [ 503.116980] active_anon:11965 inactive_anon:18919 isolated_anon:0 [ 503.116980] active_file:16 inactive_file:17 isolated_file:0 [ 503.116980] unevictable:0 dirty:0 writeback:0 unstable:0 [ 503.116980] slab_reclaimable:13122 slab_unreclaimable:116999 [ 503.116980] mapped:44252 shmem:19220 pagetables:790 bounce:0 [ 503.116980] free:25071 free_pcp:238 free_cma:0 [ 503.150499] (rsyslogd) invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=0 [ 503.157021] Node 0 active_anon:46184kB inactive_anon:59112kB active_file:32kB inactive_file:32kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:177004kB dirty:0kB writeback:0kB shmem:60184kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 503.186935] (rsyslogd) cpuset=/ mems_allowed=0-1 [ 503.190412] Node 1 active_anon:1676kB inactive_anon:16564kB active_file:36kB inactive_file:32kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:4kB dirty:0kB writeback:0kB shmem:16696kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 503.194706] CPU: 0 PID: 17886 Comm: (rsyslogd) Not tainted 4.14.232-syzkaller #0 [ 503.221514] Node 0 [ 503.229236] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 503.229241] Call Trace: [ 503.229261] dump_stack+0x1b2/0x281 [ 503.229274] dump_header+0x178/0x82f [ 503.229284] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 503.229292] ? ___ratelimit+0x2cd/0x530 [ 503.229301] oom_kill_process.cold+0x10/0xa40 [ 503.229319] out_of_memory+0xe3e/0x1190 [ 503.229333] ? oom_killer_disable+0x1c0/0x1c0 [ 503.229340] ? mutex_trylock+0x152/0x1a0 [ 503.229350] __alloc_pages_nodemask+0x23e1/0x2720 [ 503.229369] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 503.236021] DMA free:10952kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 503.241007] ? cache_grow_begin+0x3f/0x700 [ 503.241018] cache_grow_begin+0x91/0x700 [ 503.241030] fallback_alloc+0x207/0x2c0 [ 503.241042] kmem_cache_alloc+0x1e5/0x3c0 [ 503.241061] getname_flags+0xc8/0x550 [ 503.241071] do_sys_open+0x1ce/0x410 [ 503.241078] ? filp_open+0x60/0x60 [ 503.241089] ? __do_page_fault+0x159/0xad0 [ 503.241097] ? do_syscall_64+0x4c/0x640 [ 503.241103] ? do_sys_open+0x410/0x410 [ 503.241116] do_syscall_64+0x1d5/0x640 [ 503.243700] lowmem_reserve[]: [ 503.247343] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 503.247351] RIP: 0033:0x7f8901a0170d [ 503.247355] RSP: 002b:00007fff94cbe4a0 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 503.247363] RAX: ffffffffffffffda RBX: 00000000ffffffff RCX: 00007f8901a0170d [ 503.247367] RDX: 000055c134a410ea RSI: 0000000000000100 RDI: 000055c134acd4f8 [ 503.247371] RBP: 0000000000000000 R08: 000055c13619ecad R09: 0000000000000000 [ 503.247375] R10: 0000000000000000 R11: 0000000000000293 R12: 000055c1360a4278 [ 503.247379] R13: 0000000000000000 R14: 000055c1360a3e50 R15: 00007fff94cbe710 [ 503.263909] Mem-Info: [ 503.303432] 0 [ 503.318912] active_anon:11965 inactive_anon:18919 isolated_anon:0 [ 503.318912] active_file:17 inactive_file:16 isolated_file:0 [ 503.318912] unevictable:0 dirty:0 writeback:0 unstable:0 [ 503.318912] slab_reclaimable:13122 slab_unreclaimable:116999 [ 503.318912] mapped:44252 shmem:19220 pagetables:790 bounce:0 [ 503.318912] free:13897 free_pcp:30 free_cma:0 [ 503.345537] 2717 [ 503.376716] Node 0 active_anon:46184kB inactive_anon:59112kB active_file:32kB inactive_file:32kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:177004kB dirty:0kB writeback:0kB shmem:60184kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 503.415585] 2718 [ 503.439141] Node 1 active_anon:1676kB inactive_anon:16564kB active_file:36kB inactive_file:32kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:4kB dirty:0kB writeback:0kB shmem:16696kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 503.453192] syz-executor.5: [ 503.486403] syz-executor.4: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 503.524660] 2718 [ 503.531706] Node 0 DMA free:10952kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 503.531732] lowmem_reserve[]: [ 503.536134] 2718 [ 503.563441] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 503.571681] CPU: 0 PID: 17859 Comm: syz-executor.4 Not tainted 4.14.232-syzkaller #0 [ 503.575293] page allocation failure: order:0 [ 503.579572] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 503.579578] Call Trace: [ 503.579605] dump_stack+0x1b2/0x281 [ 503.579618] warn_alloc.cold+0x96/0x1cc [ 503.579631] ? zone_watermark_ok_safe+0x220/0x220 [ 503.579641] ? usleep_range+0x130/0x130 [ 503.579649] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 503.579661] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 503.579670] ? run_timer_softirq+0x5a0/0x5a0 [ 503.579685] __alloc_pages_nodemask+0x2127/0x2720 [ 503.579699] ? lock_acquire+0x170/0x3f0 [ 503.579713] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 503.584809] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 503.593586] ? ion_page_pool_alloc+0x9e/0x1b0 [ 503.593604] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 503.593622] alloc_pages_current+0x155/0x260 [ 503.593634] ion_page_pool_alloc+0x118/0x1b0 [ 503.593644] ion_system_heap_allocate+0x133/0x8c0 [ 503.593653] ? ion_alloc+0x187/0x810 [ 503.593664] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 503.593674] ? ion_system_contig_heap_create+0x130/0x130 [ 503.593684] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 503.593695] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 503.593705] ion_alloc+0x204/0x810 [ 503.593719] ? ion_dma_buf_release+0x40/0x40 [ 503.593732] ? __might_fault+0x177/0x1b0 [ 503.593743] ion_ioctl+0xea/0x1f0 [ 503.608931] ? ion_query_heaps+0x360/0x360 [ 503.612907] Node 0 [ 503.618017] ? ion_query_heaps+0x360/0x360 [ 503.618028] do_vfs_ioctl+0x75a/0xff0 [ 503.618040] ? ioctl_preallocate+0x1a0/0x1a0 [ 503.618055] ? lock_downgrade+0x740/0x740 [ 503.618067] ? __fget+0x225/0x360 [ 503.618075] ? do_vfs_ioctl+0xff0/0xff0 [ 503.618086] ? security_file_ioctl+0x83/0xb0 [ 503.618096] SyS_ioctl+0x7f/0xb0 [ 503.618104] ? do_vfs_ioctl+0xff0/0xff0 [ 503.618115] do_syscall_64+0x1d5/0x640 [ 503.618130] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 503.618140] RIP: 0033:0x4665f9 [ 503.618144] RSP: 002b:00007f9108899188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 503.618153] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 503.618159] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000006 [ 503.618164] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 503.618168] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 503.618177] R13: 00007fffb2c94dcf R14: 00007f9108899300 R15: 0000000000022000 [ 503.634510] (null) [ 503.638759] 0 [ 503.642659] syz-executor.5 cpuset= [ 503.645232] 2717 [ 503.660856] DMA32 free:17860kB min:36200kB low:45248kB high:54296kB active_anon:46184kB inactive_anon:59112kB active_file:32kB inactive_file:32kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7744kB pagetables:2772kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 503.667039] 2718 [ 503.675684] lowmem_reserve[]: [ 503.676359] 2718 [ 503.684224] / [ 503.686914] 2718 [ 503.695290] 0 [ 503.696063] Node 0 [ 503.705384] mems_allowed=0-1 [ 503.726949] DMA32 free:17860kB min:36200kB low:45248kB high:54296kB active_anon:46184kB inactive_anon:59112kB active_file:32kB inactive_file:32kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7744kB pagetables:2772kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 503.743225] 0 [ 503.756662] lowmem_reserve[]: [ 503.765246] 0 [ 503.803398] 0 [ 503.811085] CPU: 1 PID: 17862 Comm: syz-executor.5 Not tainted 4.14.232-syzkaller #0 [ 503.876924] 0 [ 503.903540] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 503.903545] Call Trace: [ 503.903568] dump_stack+0x1b2/0x281 [ 503.903582] warn_alloc.cold+0x96/0x1cc [ 503.903594] ? zone_watermark_ok_safe+0x220/0x220 [ 503.903607] ? usleep_range+0x130/0x130 [ 503.950718] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 503.955833] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 503.960883] ? run_timer_softirq+0x5a0/0x5a0 [ 503.965319] __alloc_pages_nodemask+0x2127/0x2720 [ 503.970184] ? lock_acquire+0x170/0x3f0 [ 503.974180] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 503.979042] ? ion_page_pool_alloc+0x9e/0x1b0 [ 503.983554] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 503.989026] ? alloc_pages_current+0x84/0x260 [ 503.993535] alloc_pages_current+0x155/0x260 [ 503.996922] 0 0 0 [ 503.997981] ion_page_pool_alloc+0x118/0x1b0 [ 503.997993] ion_system_heap_allocate+0x133/0x8c0 [ 504.004546] ? ion_alloc+0x187/0x810 [ 504.013110] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 504.018600] ? ion_system_contig_heap_create+0x130/0x130 [ 504.024059] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 504.026958] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 504.029095] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 504.029107] ion_alloc+0x204/0x810 [ 504.062998] ? ion_dma_buf_release+0x40/0x40 [ 504.067414] ? __might_fault+0x177/0x1b0 [ 504.071487] ion_ioctl+0xea/0x1f0 [ 504.074940] ? ion_query_heaps+0x360/0x360 [ 504.079176] ? ion_query_heaps+0x360/0x360 [ 504.083417] do_vfs_ioctl+0x75a/0xff0 [ 504.087221] ? ioctl_preallocate+0x1a0/0x1a0 [ 504.091664] ? lock_downgrade+0x740/0x740 [ 504.095823] ? __fget+0x225/0x360 [ 504.099274] ? do_vfs_ioctl+0xff0/0xff0 [ 504.103246] ? security_file_ioctl+0x83/0xb0 [ 504.107668] SyS_ioctl+0x7f/0xb0 [ 504.111049] ? do_vfs_ioctl+0xff0/0xff0 [ 504.115037] do_syscall_64+0x1d5/0x640 [ 504.118939] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 504.124230] RIP: 0033:0x4665f9 [ 504.127446] RSP: 002b:00007f4323f8e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 504.135166] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 504.142454] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000003 [ 504.149732] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 504.156924] lowmem_reserve[]: [ 504.157004] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 504.157013] 0 [ 504.160104] R13: 00007ffec8acf2af R14: 00007f4323f8e300 R15: 0000000000022000 [ 504.162050] 0 [ 504.179682] 0 0 0 0 [ 504.193551] 0 [ 504.203017] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 504.216935] Node 1 Normal free:326980kB min:53696kB low:67120kB high:80544kB active_anon:1676kB inactive_anon:16564kB active_file:64kB inactive_file:2124kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:224kB pagetables:388kB bounce:0kB free_pcp:256kB local_pcp:124kB free_cma:0kB [ 504.291472] lowmem_reserve[]: 0 0 0 0 0 [ 504.296172] Node 0 DMA: 2*4kB (UE) 1*8kB (U) 2*16kB (UE) 2*32kB (UE) 4*64kB (UE) 6*128kB (UE) 3*256kB (UE) 2*512kB (UE) 2*1024kB (UE) 3*2048kB (UME) 0*4096kB = 11120kB [ 504.311041] lowmem_reserve[]: 0 0 0 0 0 [ 504.315747] Node 1 Normal free:342068kB min:53696kB low:67120kB high:80544kB active_anon:1676kB inactive_anon:16564kB active_file:264kB inactive_file:3624kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:224kB pagetables:388kB bounce:0kB free_pcp:732kB local_pcp:52kB free_cma:0kB [ 504.347859] lowmem_reserve[]: 0 0 0 0 0 [ 504.357408] Node 0 DMA: 2*4kB (UE) 1*8kB (U) 2*16kB (UE) 2*32kB (UE) 4*64kB (UE) 6*128kB (UE) 3*256kB (UE) 2*512kB (UE) 2*1024kB (UE) 3*2048kB (UME) 0*4096kB = 11120kB [ 504.367364] Node 0 DMA32: 762*4kB (UE) 894*8kB (UE) 384*16kB (UME) 267*32kB (UME) 222*64kB (U) 30*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 42936kB [ 504.397255] Node 0 DMA32: 762*4kB (UE) 894*8kB (UE) 384*16kB (UME) 267*32kB (UME) 222*64kB (U) 30*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 42936kB [ 504.427261] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 504.456960] Node 1 Normal: 433*4kB (UM) 1307*8kB (UM) 938*16kB (UM) 1217*32kB (U) 3014*64kB (U) 460*128kB (UM) 113*256kB (UM) 14*512kB (U) 31*1024kB (U) 0*2048kB 0*4096kB = 385756kB [ 504.457138] Node 0 [ 504.496966] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 504.523065] Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 504.537031] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 504.545835] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 504.560912] Node 1 Normal: 433*4kB (UM) 1307*8kB (UM) 938*16kB (UM) 1217*32kB (U) 3014*64kB (U) 460*128kB (UM) 113*256kB (UM) 14*512kB (U) 31*1024kB (U) 0*2048kB 0*4096kB = 385756kB [ 504.597000] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 504.606255] 21043 total pagecache pages [ 504.612498] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 504.636943] 0 pages in swap cache [ 504.640468] Swap cache stats: add 0, delete 0, find 0/0 [ 504.645836] Free swap = 0kB [ 504.651923] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 504.657014] Total swap = 0kB [ 504.663668] 2097051 pages RAM [ 504.666769] 0 pages HighMem/MovableOnly [ 504.681552] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 504.696967] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 504.701988] 363849 pages reserved [ 504.705913] 21080 total pagecache pages [ 504.720912] 0 pages cma reserved [ 504.726928] 0 pages in swap cache [ 504.730426] Swap cache stats: add 0, delete 0, find 0/0 [ 504.735796] Free swap = 0kB [ 504.739618] Total swap = 0kB [ 504.742642] 2097051 pages RAM [ 504.745838] 0 pages HighMem/MovableOnly [ 504.751110] 363849 pages reserved [ 504.754580] 0 pages cma reserved [ 504.758985] Out of memory (oom_kill_allocating_task): Kill process 17886 ((rsyslogd)) score 0 or sacrifice child [ 504.770576] Killed process 17886 ((rsyslogd)) total-vm:204968kB, anon-rss:2036kB, file-rss:0kB, shmem-rss:0kB [ 504.787861] oom_reaper: reaped process 17859 (syz-executor.4), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 504.803203] oom_reaper: reaped process 17886 ((rsyslogd)), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 504.828437] warn_alloc_show_mem: 1 callbacks suppressed [ 504.828441] Mem-Info: [ 504.855588] active_anon:11790 inactive_anon:18919 isolated_anon:0 [ 504.855588] active_file:199 inactive_file:2352 isolated_file:0 [ 504.855588] unevictable:0 dirty:0 writeback:0 unstable:0 [ 504.855588] slab_reclaimable:13071 slab_unreclaimable:118050 [ 504.855588] mapped:45623 shmem:19220 pagetables:716 bounce:0 [ 504.855588] free:137362 free_pcp:552 free_cma:0 [ 504.897813] Node 0 active_anon:45784kB inactive_anon:59112kB active_file:532kB inactive_file:6584kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:181264kB dirty:0kB writeback:0kB shmem:60184kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 504.941256] Node 1 active_anon:1376kB inactive_anon:16564kB active_file:264kB inactive_file:3624kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:1928kB dirty:0kB writeback:0kB shmem:16696kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 505.002843] oom_reaper: reaped process 17862 (syz-executor.5), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 505.033699] Node 0 DMA free:11168kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 505.145531] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 505.161767] Node 0 DMA32 free:65596kB min:36200kB low:45248kB high:54296kB active_anon:45872kB inactive_anon:59112kB active_file:2232kB inactive_file:6604kB unevictable:0kB writepending:40kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7744kB pagetables:2688kB bounce:0kB free_pcp:676kB local_pcp:588kB free_cma:0kB [ 505.199902] lowmem_reserve[]: 0 0 0 0 0 [ 505.223372] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 505.280648] syz-executor.4: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 505.316326] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 505.346958] CPU: 1 PID: 17859 Comm: syz-executor.4 Not tainted 4.14.232-syzkaller #0 [ 505.350799] lowmem_reserve[]: [ 505.354902] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 505.354913] 0 [ 505.358002] Call Trace: [ 505.358024] dump_stack+0x1b2/0x281 [ 505.358037] warn_alloc.cold+0x96/0x1cc [ 505.358048] ? zone_watermark_ok_safe+0x220/0x220 [ 505.358075] __alloc_pages_nodemask+0x2127/0x2720 [ 505.358087] ? _raw_spin_unlock_irq+0x24/0x80 [ 505.358103] ? lock_acquire+0x170/0x3f0 [ 505.358119] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 505.358137] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 505.358151] ? __mutex_unlock_slowpath+0x75/0x770 [ 505.358165] alloc_pages_current+0x155/0x260 [ 505.358177] ion_page_pool_alloc+0x118/0x1b0 [ 505.358188] ion_system_heap_allocate+0x133/0x8c0 [ 505.401003] 0 [ 505.404188] ? _raw_spin_unlock+0x29/0x40 [ 505.409979] 0 [ 505.414478] ? _ion_heap_freelist_drain+0x6e/0x410 [ 505.418958] 0 [ 505.423314] ? ion_system_contig_heap_create+0x130/0x130 [ 505.428191] 0 [ 505.429945] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 505.436008] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 505.440958] Node 1 [ 505.442709] ion_alloc+0x27a/0x810 [ 505.448224] Normal free:53448kB min:53696kB low:67120kB high:80544kB active_anon:1368kB inactive_anon:16564kB active_file:512kB inactive_file:420kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:192kB pagetables:208kB bounce:0kB free_pcp:656kB local_pcp:516kB free_cma:0kB [ 505.450001] ? ion_dma_buf_release+0x40/0x40 [ 505.454991] lowmem_reserve[]: [ 505.459839] ? __might_fault+0x177/0x1b0 [ 505.459852] ion_ioctl+0xea/0x1f0 [ 505.459862] ? ion_query_heaps+0x360/0x360 [ 505.459874] ? ion_query_heaps+0x360/0x360 [ 505.459886] do_vfs_ioctl+0x75a/0xff0 [ 505.462211] 0 [ 505.465840] ? ioctl_preallocate+0x1a0/0x1a0 [ 505.494410] 0 [ 505.498780] ? lock_downgrade+0x740/0x740 [ 505.498795] ? __fget+0x225/0x360 [ 505.498805] ? do_vfs_ioctl+0xff0/0xff0 [ 505.498818] ? security_file_ioctl+0x83/0xb0 [ 505.501905] 0 [ 505.505973] SyS_ioctl+0x7f/0xb0 [ 505.509452] 0 [ 505.513813] ? do_vfs_ioctl+0xff0/0xff0 [ 505.518076] 0 [ 505.521836] do_syscall_64+0x1d5/0x640 [ 505.528019] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 505.528028] RIP: 0033:0x4665f9 [ 505.528032] RSP: 002b:00007f9108899188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 505.528042] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 505.528051] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000006 [ 505.529840] Node 0 [ 505.533983] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 505.533991] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 505.537517] DMA: [ 505.541450] R13: 00007fffb2c94dcf R14: 00007f9108899300 R15: 0000000000022000 [ 505.652186] syz-executor.1 invoked oom-killer: gfp_mask=0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null), order=0, oom_score_adj=1000 [ 505.664841] 2*4kB (UE) 0*8kB 2*16kB (UE) 1*32kB (E) 2*64kB (UE) 6*128kB (UE) 3*256kB (UE) 2*512kB (UE) 2*1024kB (UE) 3*2048kB (UME) 0*4096kB = 10952kB [ 505.670065] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 505.684642] CPU: 1 PID: 17858 Comm: syz-executor.1 Not tainted 4.14.232-syzkaller #0 [ 505.688475] Node 0 [ 505.692531] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 505.692540] DMA32: [ 505.694764] Call Trace: [ 505.704363] 1016*4kB [ 505.706598] dump_stack+0x1b2/0x281 [ 505.709238] (ME) [ 505.711560] dump_header+0x178/0x82f [ 505.715164] 520*8kB [ 505.717486] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 505.717497] ? ___ratelimit+0x2cd/0x530 [ 505.717509] oom_kill_process.cold+0x10/0xa40 [ 505.717530] out_of_memory+0xe3e/0x1190 [ 505.721223] (ME) [ 505.723549] ? oom_killer_disable+0x1c0/0x1c0 [ 505.728671] 172*16kB [ 505.732605] ? mutex_trylock+0x152/0x1a0 [ 505.737120] (UME) [ 505.741071] __alloc_pages_nodemask+0x23e1/0x2720 [ 505.743130] 217*32kB [ 505.747728] ? lock_acquire+0x170/0x3f0 [ 505.747746] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 505.747760] ? ion_page_pool_alloc+0x9e/0x1b0 [ 505.750165] (UME) [ 505.754347] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 505.756489] 2*64kB [ 505.761429] alloc_pages_current+0x155/0x260 [ 505.761445] ion_page_pool_alloc+0x118/0x1b0 [ 505.761454] ion_system_heap_allocate+0x133/0x8c0 [ 505.761468] ? _raw_spin_unlock+0x29/0x40 [ 505.761480] ? _ion_heap_freelist_drain+0x6e/0x410 [ 505.763896] (U) [ 505.767960] ? ion_system_contig_heap_create+0x130/0x130 [ 505.767972] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 505.767990] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 505.768001] ion_alloc+0x27a/0x810 [ 505.772840] 1*128kB [ 505.777371] ? ion_dma_buf_release+0x40/0x40 [ 505.777385] ? __might_fault+0x177/0x1b0 [ 505.777395] ion_ioctl+0xea/0x1f0 [ 505.777407] ? ion_query_heaps+0x360/0x360 [ 505.779554] (U) [ 505.785101] ? ion_query_heaps+0x360/0x360 [ 505.787369] 0*256kB [ 505.791732] do_vfs_ioctl+0x75a/0xff0 [ 505.796124] 0*512kB [ 505.801231] ? ioctl_preallocate+0x1a0/0x1a0 [ 505.801242] ? lock_downgrade+0x740/0x740 [ 505.801254] ? __fget+0x225/0x360 [ 505.801265] ? do_vfs_ioctl+0xff0/0xff0 [ 505.805407] 0*1024kB [ 505.810340] ? security_file_ioctl+0x83/0xb0 [ 505.810352] SyS_ioctl+0x7f/0xb0 [ 505.810360] ? do_vfs_ioctl+0xff0/0xff0 [ 505.810371] do_syscall_64+0x1d5/0x640 [ 505.810385] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 505.812345] 0*2048kB [ 505.817809] RIP: 0033:0x4665f9 [ 505.817815] RSP: 002b:00007faffec44188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 505.817823] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 505.817828] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000005 [ 505.817832] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 505.817837] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 505.817842] R13: 00007ffc312071cf R14: 00007faffec44300 R15: 0000000000022000 [ 505.879134] syz-executor.4: [ 505.889652] 0*4096kB [ 505.904575] page allocation failure: order:0 [ 505.905511] = 18176kB [ 505.912229] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 505.925059] Node 0 [ 505.932989] (null) [ 505.933685] Normal: [ 505.954831] syz-executor.4 cpuset= [ 505.960785] 0*4kB [ 505.964015] / [ 505.967021] 0*8kB [ 505.978704] mems_allowed=0-1 [ 505.978717] CPU: 1 PID: 17859 Comm: syz-executor.4 Not tainted 4.14.232-syzkaller #0 [ 505.978723] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 505.978726] Call Trace: [ 505.978747] dump_stack+0x1b2/0x281 [ 505.978762] warn_alloc.cold+0x96/0x1cc [ 505.978774] ? zone_watermark_ok_safe+0x220/0x220 [ 505.978785] ? usleep_range+0x130/0x130 [ 505.978793] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 505.978804] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 505.978815] ? run_timer_softirq+0x5a0/0x5a0 [ 505.978830] __alloc_pages_nodemask+0x2127/0x2720 [ 505.984708] 0*16kB [ 505.986823] ? lock_acquire+0x170/0x3f0 [ 505.988984] 0*32kB [ 505.990681] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 505.992802] 0*64kB [ 505.996255] ? ion_page_pool_alloc+0x9e/0x1b0 [ 506.004160] 0*128kB [ 506.013485] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 506.013505] alloc_pages_current+0x155/0x260 [ 506.013522] ion_page_pool_alloc+0x118/0x1b0 [ 506.016117] Mem-Info: [ 506.019726] ion_system_heap_allocate+0x133/0x8c0 [ 506.019739] ? _raw_spin_unlock+0x29/0x40 [ 506.019748] ? _ion_heap_freelist_drain+0x6e/0x410 [ 506.019759] ? ion_system_contig_heap_create+0x130/0x130 [ 506.023735] active_anon:11785 inactive_anon:18919 isolated_anon:0 [ 506.023735] active_file:53 inactive_file:8 isolated_file:0 [ 506.023735] unevictable:0 dirty:10 writeback:0 unstable:0 [ 506.023735] slab_reclaimable:13064 slab_unreclaimable:118238 [ 506.023735] mapped:44315 shmem:19220 pagetables:724 bounce:0 [ 506.023735] free:13872 free_pcp:459 free_cma:0 [ 506.028562] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 506.028576] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 506.028586] ion_alloc+0x27a/0x810 [ 506.028600] ? ion_dma_buf_release+0x40/0x40 [ 506.028612] ? __might_fault+0x177/0x1b0 [ 506.032590] 0*256kB [ 506.037681] ion_ioctl+0xea/0x1f0 [ 506.037691] ? ion_query_heaps+0x360/0x360 [ 506.037702] ? ion_query_heaps+0x360/0x360 [ 506.037713] do_vfs_ioctl+0x75a/0xff0 [ 506.037724] ? ioctl_preallocate+0x1a0/0x1a0 [ 506.042732] 0*512kB [ 506.047135] ? lock_downgrade+0x740/0x740 [ 506.047148] ? __fget+0x225/0x360 [ 506.047157] ? do_vfs_ioctl+0xff0/0xff0 [ 506.047169] ? security_file_ioctl+0x83/0xb0 [ 506.047179] SyS_ioctl+0x7f/0xb0 [ 506.052039] Node 0 active_anon:45872kB inactive_anon:59112kB active_file:84kB inactive_file:40kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:177216kB dirty:40kB writeback:0kB shmem:60184kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 506.054239] ? do_vfs_ioctl+0xff0/0xff0 [ 506.058343] Node 1 active_anon:1268kB inactive_anon:16564kB active_file:128kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:44kB dirty:0kB writeback:0kB shmem:16696kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 506.060516] do_syscall_64+0x1d5/0x640 [ 506.065336] Node 0 [ 506.067578] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 506.067587] RIP: 0033:0x4665f9 [ 506.067591] RSP: 002b:00007f9108899188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 506.067601] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 506.067611] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000006 [ 506.072114] 0*1024kB [ 506.074404] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 506.074413] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 506.079903] 0*2048kB [ 506.084251] R13: 00007fffb2c94dcf R14: 00007f9108899300 R15: 0000000000022000 [ 506.095408] warn_alloc_show_mem: 1 callbacks suppressed [ 506.095412] Mem-Info: [ 506.097463] DMA free:10952kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 506.102566] active_anon:11776 inactive_anon:18919 isolated_anon:0 [ 506.102566] active_file:17 inactive_file:17 isolated_file:0 [ 506.102566] unevictable:0 dirty:0 writeback:0 unstable:0 [ 506.102566] slab_reclaimable:13061 slab_unreclaimable:118172 [ 506.102566] mapped:44288 shmem:19220 pagetables:723 bounce:0 [ 506.102566] free:14083 free_pcp:476 free_cma:0 [ 506.113569] 0*4096kB [ 506.124212] Node 0 active_anon:45880kB inactive_anon:59116kB active_file:28kB inactive_file:24kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:177148kB dirty:0kB writeback:0kB shmem:60188kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 506.152081] lowmem_reserve[]: [ 506.159777] Node 1 active_anon:1224kB inactive_anon:16560kB active_file:40kB inactive_file:44kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:4kB dirty:0kB writeback:0kB shmem:16692kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 506.163418] 0 [ 506.166203] Node 0 [ 506.176030] 2717 [ 506.181084] DMA free:10952kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 506.185241] 2718 [ 506.190827] lowmem_reserve[]: [ 506.202094] 2718 [ 506.210167] 0 [ 506.218399] = 0kB [ 506.249709] 2717 [ 506.279326] Node 1 [ 506.295408] 2718 [ 506.301388] Normal: [ 506.311744] 69*4kB [ 506.314106] Node 0 [ 506.325725] (UM) [ 506.333060] 2718 [ 506.342865] 52*8kB [ 506.354503] 2718 [ 506.380487] (M) [ 506.411950] DMA32 free:18288kB min:36200kB low:45248kB high:54296kB active_anon:45880kB inactive_anon:59116kB active_file:28kB inactive_file:24kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7712kB pagetables:2676kB bounce:0kB free_pcp:1264kB local_pcp:592kB free_cma:0kB [ 506.450920] 30*16kB [ 506.466939] 2718 [ 506.466948] Node 0 DMA32 free:18288kB min:36200kB low:45248kB high:54296kB active_anon:45880kB inactive_anon:59116kB active_file:28kB inactive_file:24kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7712kB pagetables:2676kB bounce:0kB free_pcp:1264kB local_pcp:592kB free_cma:0kB [ 506.466972] lowmem_reserve[]: 0 0 0 0 [ 506.483324] (M) [ 506.498802] lowmem_reserve[]: 0 0 0 0 0 [ 506.498828] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 506.498850] lowmem_reserve[]: 0 0 [ 506.515284] 776*32kB [ 506.516968] 0 0 0 [ 506.516981] Node 1 Normal free:27092kB min:53696kB low:67120kB high:80544kB active_anon:1224kB inactive_anon:16560kB active_file:40kB inactive_file:44kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:192kB pagetables:216kB bounce:0kB free_pcp:640kB local_pcp:124kB free_cma:0kB [ 506.517005] lowmem_reserve[]: 0 0 0 0 0 [ 506.517025] Node 0 DMA: 2*4kB (UE) 0*8kB 2*16kB (UE) 1*32kB (E) 2*64kB (UE) 6*128kB (UE) 3*256kB (UE) 2*512kB (UE) [ 506.524142] (UM) [ 506.524405] 2*1024kB [ 506.526460] 13*64kB [ 506.528573] 0 [ 506.528580] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 506.528602] lowmem_reserve[]: 0 0 0 0 0 [ 506.528622] Node 1 Normal free:27092kB min:53696kB low:67120kB high:80544kB active_anon:1224kB inactive_anon:16560kB active_file:40kB inactive_file:44kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:192kB pagetables:216kB bounce:0kB free_pcp:640kB local_pcp:124kB free_cma:0kB [ 506.528643] lowmem_reserve[]: 0 0 0 [ 506.541104] (M) [ 506.568823] (UE) 3*2048kB (UME) 0*4096kB = 10952kB [ 506.568845] Node 0 DMA32: 1016*4kB (ME) 523*8kB (UME) 180*16kB (UME) 217*32kB (UME) [ 506.586768] 2*128kB [ 506.602571] 0 0 [ 506.602587] Node 0 DMA: 2*4kB (UE) 0*8kB 2*16kB (UE) 1*32kB (E) 2*64kB (UE) 6*128kB (UE) 3*256kB (UE) 2*512kB (UE) [ 506.620994] (M) [ 506.638124] 2*64kB (U) 1*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18328kB [ 506.638164] Node 0 Normal: [ 506.655987] 0*256kB [ 506.675417] 2*1024kB [ 506.694890] 0*512kB [ 506.696726] 0*4kB [ 506.709652] 0*1024kB [ 506.724192] (UE) 3*2048kB [ 506.742630] 0*2048kB [ 506.757454] 0*8kB 0*16kB 0*32kB 0*64kB [ 506.770219] 0*4096kB [ 506.781023] 0*128kB [ 506.795386] = 27092kB [ 506.801397] (UME) [ 506.813355] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 506.813553] 0*4096kB [ 506.815959] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 506.818874] 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 506.818899] Node 1 Normal: 69*4kB (UM) [ 506.830660] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 506.832501] = 10952kB [ 506.834650] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 506.843598] 52*8kB (M) 30*16kB (M) 776*32kB (UM) 13*64kB (M) 2*128kB (M) 0*256kB [ 506.856337] 19254 total pagecache pages [ 506.860633] Node 0 DMA32: 1016*4kB (ME) 523*8kB (UME) 180*16kB (UME) 217*32kB (UME) 2*64kB (U) 1*128kB [ 506.879293] 0 pages in swap cache [ 506.884710] 0*512kB [ 506.906651] Swap cache stats: add 0, delete 0, find 0/0 [ 506.909562] (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18328kB [ 506.924173] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 506.924826] Free swap = 0kB [ 506.934971] 0*1024kB 0*2048kB 0*4096kB = 27092kB [ 506.943629] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 506.948630] Total swap = 0kB [ 506.952594] Node 1 Normal: 69*4kB (UM) 52*8kB (M) 30*16kB (M) 776*32kB (UM) 13*64kB (M) 2*128kB (M) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 27092kB [ 506.956795] 2097051 pages RAM [ 506.973879] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 506.982563] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 506.982923] 0 pages HighMem/MovableOnly [ 506.995831] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 507.004784] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 507.004977] 363849 pages reserved [ 507.017910] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 507.026507] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 507.027123] 0 pages cma reserved [ 507.040871] 19254 total pagecache pages [ 507.044875] 0 pages in swap cache [ 507.048426] Swap cache stats: add 0, delete 0, find 0/0 [ 507.053803] Free swap = 0kB [ 507.067013] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 507.076223] Total swap = 0kB [ 507.080404] 2097051 pages RAM [ 507.096882] 0 pages HighMem/MovableOnly [ 507.100906] 363849 pages reserved [ 507.104378] 0 pages cma reserved [ 507.107836] 19589 total pagecache pages [ 507.111980] 0 pages in swap cache [ 507.115555] Swap cache stats: add 0, delete 0, find 0/0 [ 507.126895] Out of memory (oom_kill_allocating_task): Kill process 17858 (syz-executor.1) score 0 or sacrifice child [ 507.140645] Free swap = 0kB [ 507.144059] Total swap = 0kB [ 507.147243] 2097051 pages RAM [ 507.150418] 0 pages HighMem/MovableOnly [ 507.154518] 363849 pages reserved [ 507.158197] Killed process 17858 (syz-executor.1) total-vm:93252kB, anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 507.176878] 0 pages cma reserved [ 507.184765] syz-executor.1: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 507.198572] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 507.204247] CPU: 1 PID: 17858 Comm: syz-executor.1 Not tainted 4.14.232-syzkaller #0 [ 507.212144] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 507.221502] Call Trace: [ 507.224094] dump_stack+0x1b2/0x281 [ 507.227742] warn_alloc.cold+0x96/0x1cc [ 507.231726] ? lock_downgrade+0x740/0x740 [ 507.235884] ? zone_watermark_ok_safe+0x220/0x220 [ 507.242042] ? wake_up_q+0x82/0xd0 [ 507.245593] ? wait_for_completion_io+0x10/0x10 [ 507.250300] __alloc_pages_nodemask+0x2127/0x2720 [ 507.255174] ? lock_acquire+0x170/0x3f0 [ 507.259161] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 507.264023] ? ion_page_pool_alloc+0x9e/0x1b0 [ 507.268527] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 507.273996] alloc_pages_current+0x155/0x260 [ 507.278414] ion_page_pool_alloc+0x118/0x1b0 [ 507.282829] ion_system_heap_allocate+0x133/0x8c0 [ 507.287678] ? _raw_spin_unlock+0x29/0x40 [ 507.291857] ? _ion_heap_freelist_drain+0x6e/0x410 [ 507.296786] ? ion_system_contig_heap_create+0x130/0x130 [ 507.302240] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 507.307258] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 507.312102] ion_alloc+0x27a/0x810 [ 507.315652] ? ion_dma_buf_release+0x40/0x40 [ 507.320091] ? __might_fault+0x177/0x1b0 [ 507.324161] ion_ioctl+0xea/0x1f0 [ 507.327643] ? ion_query_heaps+0x360/0x360 [ 507.331969] ? ion_query_heaps+0x360/0x360 [ 507.336226] do_vfs_ioctl+0x75a/0xff0 [ 507.340033] ? ioctl_preallocate+0x1a0/0x1a0 [ 507.344447] ? lock_downgrade+0x740/0x740 [ 507.348626] ? __fget+0x225/0x360 [ 507.352086] ? do_vfs_ioctl+0xff0/0xff0 [ 507.356067] ? security_file_ioctl+0x83/0xb0 [ 507.360481] SyS_ioctl+0x7f/0xb0 [ 507.363844] ? do_vfs_ioctl+0xff0/0xff0 [ 507.367820] do_syscall_64+0x1d5/0x640 [ 507.371736] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 507.378148] RIP: 0033:0x4665f9 [ 507.381368] RSP: 002b:00007faffec44188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 507.389173] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 507.396471] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000005 [ 507.403749] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 507.411022] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 507.418316] R13: 00007ffc312071cf R14: 00007faffec44300 R15: 0000000000022000 [ 507.440219] Mem-Info: [ 507.443368] active_anon:11801 inactive_anon:18919 isolated_anon:0 [ 507.443368] active_file:42 inactive_file:992 isolated_file:0 [ 507.443368] unevictable:0 dirty:0 writeback:0 unstable:0 [ 507.443368] slab_reclaimable:13057 slab_unreclaimable:118098 [ 507.443368] mapped:44963 shmem:19220 pagetables:686 bounce:0 [ 507.443368] free:182211 free_pcp:421 free_cma:0 [ 507.478750] Node 0 active_anon:45980kB inactive_anon:59116kB active_file:128kB inactive_file:1924kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:178248kB dirty:0kB writeback:0kB shmem:60188kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 507.508472] Node 1 active_anon:1224kB inactive_anon:16560kB active_file:40kB inactive_file:2344kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:1704kB dirty:0kB writeback:0kB shmem:16692kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 507.537008] Node 0 DMA free:11236kB min:204kB low:252kB high:300kB active_anon:20kB inactive_anon:0kB active_file:120kB inactive_file:240kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 507.566004] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 507.573747] Node 0 DMA32 free:188064kB min:36200kB low:45248kB high:54296kB active_anon:45880kB inactive_anon:59116kB active_file:128kB inactive_file:2624kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7680kB pagetables:2528kB bounce:0kB free_pcp:1496kB local_pcp:772kB free_cma:0kB [ 507.612636] lowmem_reserve[]: 0 0 0 0 0 [ 507.627608] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 507.720269] lowmem_reserve[]: 0 0 0 0 0 [ 507.736961] Node 1 Normal free:709344kB min:53696kB low:67120kB high:80544kB active_anon:1224kB inactive_anon:16560kB active_file:40kB inactive_file:2344kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:192kB pagetables:216kB bounce:0kB free_pcp:1240kB local_pcp:628kB free_cma:0kB [ 507.794657] lowmem_reserve[]: 0 0 0 0 0 [ 507.816002] Node 0 DMA: 1*4kB (E) 2*8kB (UM) 3*16kB (UME) 1*32kB (E) 6*64kB (UME) 8*128kB (UME) 4*256kB (UE) 3*512kB (UME) 3*1024kB (UME) 2*2048kB (UE) 0*4096kB = 11236kB [ 507.870452] Node 0 DMA32: 4436*4kB (UE) 4343*8kB (UE) 4640*16kB (UE) 1324*32kB (UE) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 169096kB [ 507.890071] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 507.910225] Node 1 Normal: 4372*4kB (UM) 2196*8kB (UM) 1999*16kB (UM) 2322*32kB (UM) 4610*64kB (UM) 1189*128kB (UM) 347*256kB (UM) 69*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 712736kB [ 507.966919] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 507.975803] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 508.009008] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 508.019800] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 508.041923] 22175 total pagecache pages [ 508.068725] 0 pages in swap cache [ 508.072233] Swap cache stats: add 0, delete 0, find 0/0 [ 508.100216] Free swap = 0kB [ 508.103292] Total swap = 0kB [ 508.106343] 2097051 pages RAM [ 508.109756] 0 pages HighMem/MovableOnly [ 508.113749] 363849 pages reserved [ 508.130201] 0 pages cma reserved [ 508.462126] syz-executor.5: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 508.499130] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 508.504326] CPU: 0 PID: 17862 Comm: syz-executor.5 Not tainted 4.14.232-syzkaller #0 [ 508.512254] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 508.521618] Call Trace: [ 508.524222] dump_stack+0x1b2/0x281 [ 508.527926] warn_alloc.cold+0x96/0x1cc [ 508.531902] ? zone_watermark_ok_safe+0x220/0x220 [ 508.536764] __alloc_pages_nodemask+0x2127/0x2720 [ 508.541618] ? io_schedule_timeout+0x140/0x140 [ 508.546304] ? lock_acquire+0x170/0x3f0 [ 508.550295] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 508.555156] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 508.560670] ? __mutex_unlock_slowpath+0x75/0x770 [ 508.565536] alloc_pages_current+0x155/0x260 [ 508.569993] ion_page_pool_alloc+0x118/0x1b0 [ 508.574451] ion_system_heap_allocate+0x133/0x8c0 [ 508.579314] ? _raw_spin_unlock+0x29/0x40 [ 508.583481] ? _ion_heap_freelist_drain+0x6e/0x410 [ 508.588429] ? ion_system_contig_heap_create+0x130/0x130 [ 508.593897] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 508.598934] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 508.603791] ion_alloc+0x27a/0x810 [ 508.607342] ? ion_dma_buf_release+0x40/0x40 [ 508.611756] ? __might_fault+0x177/0x1b0 [ 508.615823] ion_ioctl+0xea/0x1f0 [ 508.619303] ? ion_query_heaps+0x360/0x360 [ 508.623551] ? ion_query_heaps+0x360/0x360 [ 508.627799] do_vfs_ioctl+0x75a/0xff0 [ 508.631609] ? ioctl_preallocate+0x1a0/0x1a0 [ 508.636029] ? lock_downgrade+0x740/0x740 [ 508.640200] ? __fget+0x225/0x360 [ 508.643660] ? do_vfs_ioctl+0xff0/0xff0 [ 508.647672] ? security_file_ioctl+0x83/0xb0 [ 508.652087] SyS_ioctl+0x7f/0xb0 [ 508.655457] ? do_vfs_ioctl+0xff0/0xff0 [ 508.659437] do_syscall_64+0x1d5/0x640 [ 508.663339] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 508.668539] RIP: 0033:0x4665f9 [ 508.671729] RSP: 002b:00007f4323f8e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 508.679442] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 508.686723] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000003 [ 508.694008] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 508.701286] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 508.708593] R13: 00007ffec8acf2af R14: 00007f4323f8e300 R15: 0000000000022000 [ 508.742618] Mem-Info: [ 508.745089] active_anon:12007 inactive_anon:18919 isolated_anon:0 [ 508.745089] active_file:782 inactive_file:2249 isolated_file:0 [ 508.745089] unevictable:0 dirty:83 writeback:0 unstable:0 [ 508.745089] slab_reclaimable:13057 slab_unreclaimable:118900 [ 508.745089] mapped:46369 shmem:19220 pagetables:678 bounce:0 [ 508.745089] free:179880 free_pcp:713 free_cma:0 [ 508.885207] Node 0 active_anon:47096kB inactive_anon:59116kB active_file:3276kB inactive_file:7052kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:183908kB dirty:332kB writeback:0kB shmem:60188kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 508.926091] Node 1 active_anon:1232kB inactive_anon:16560kB active_file:952kB inactive_file:1444kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:1968kB dirty:0kB writeback:0kB shmem:16692kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no 11:47:44 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000100)={0x0, 0x27}) 11:47:44 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x10001, 0x400) r1 = syz_open_dev$vcsn(&(0x7f0000000140), 0x7, 0x24c042) ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r0, 0x7a9, &(0x7f0000000040)={{@my=0x0, 0x7f}, 0x40, 0x3, 0x0, 0x6, 0xf1, 0x5, 0x39, 0x3}) socketpair(0x6, 0x80000, 0x10001, &(0x7f0000000180)) ioctl$SNAPSHOT_ATOMIC_RESTORE(r1, 0x3304) r2 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0), 0x20000, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000100)={0x80000001, 0x27}) [ 508.960742] Node 0 DMA free:11096kB min:204kB low:252kB high:300kB active_anon:36kB inactive_anon:0kB active_file:284kB inactive_file:8kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:4kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 508.999929] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 509.005708] Node 0 DMA32 free:339168kB min:36200kB low:45248kB high:54296kB active_anon:47452kB inactive_anon:59120kB active_file:3524kB inactive_file:12020kB unevictable:0kB writepending:372kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7776kB pagetables:2660kB bounce:0kB free_pcp:1136kB local_pcp:816kB free_cma:0kB [ 509.042157] lowmem_reserve[]: 0 0 0 0 0 [ 509.046655] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 509.092959] lowmem_reserve[]: 0 0 0 0 0 [ 509.106612] Node 1 Normal free:356104kB min:53696kB low:67120kB high:80544kB active_anon:1156kB inactive_anon:16552kB active_file:1088kB inactive_file:1312kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:192kB pagetables:224kB bounce:0kB free_pcp:1356kB local_pcp:684kB free_cma:0kB [ 509.155949] lowmem_reserve[]: 0 0 0 0 0 [ 509.167840] Node 0 DMA: 183*4kB (UME) 6*8kB (UM) 6*16kB (UME) 2*32kB (UE) 3*64kB (ME) 2*128kB (ME) 4*256kB (UE) 3*512kB (UME) 3*1024kB (UME) 2*2048kB (UE) 0*4096kB = 11116kB [ 509.192406] Node 0 DMA32: 362*4kB (UME) 3183*8kB (UME) 7541*16kB (UE) 2327*32kB (UE) 121*64kB (U) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 229776kB [ 509.210826] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 509.221821] Node 1 Normal: 10984*4kB (UME) 5758*8kB (UE) 5402*16kB (U) 5177*32kB (U) 219*64kB (U) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 356112kB [ 509.241147] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 509.254196] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 509.267306] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 509.276181] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 509.300880] 26156 total pagecache pages 11:47:44 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000100)={0x0, 0x27}) 11:47:44 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x10001, 0x400) r1 = syz_open_dev$vcsn(&(0x7f0000000140), 0x7, 0x24c042) ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r0, 0x7a9, &(0x7f0000000040)={{@my=0x0, 0x7f}, 0x40, 0x3, 0x0, 0x6, 0xf1, 0x5, 0x39, 0x3}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(0xffffffffffffffff, 0x7a8, &(0x7f0000000080)={{@host, 0x20000}, @hyper, 0x4, 0x9, 0x0, 0x5, 0x6, 0xd350}) ioctl$SNAPSHOT_ATOMIC_RESTORE(r1, 0x3304) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x44, 0x0, 0x400, 0x70bd25, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3023d3782c859c3d}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}]}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0), 0x20000, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000100)={0x80000001, 0x27}) 11:47:44 executing program 2: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x10001, 0x400) syz_open_dev$vcsn(&(0x7f0000000140), 0x7, 0x24c042) ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r0, 0x7a9, &(0x7f0000000040)={{@my=0x0, 0x7f}, 0x40, 0x3, 0x0, 0x6, 0xf1, 0x5, 0x39, 0x3}) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x44, 0x0, 0x400, 0x70bd25, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3023d3782c859c3d}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}]}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0), 0x20000, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000100)={0x80000001, 0x27}) [ 509.305085] 0 pages in swap cache [ 509.311203] Swap cache stats: add 0, delete 0, find 0/0 [ 509.316607] Free swap = 0kB [ 509.329648] Total swap = 0kB [ 509.332739] 2097051 pages RAM [ 509.335889] 0 pages HighMem/MovableOnly [ 509.346300] 363849 pages reserved [ 509.355457] 0 pages cma reserved [ 509.532201] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 509.550748] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 509.611337] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 509.631598] syz-executor.4: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 509.647229] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 509.671781] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 509.692934] CPU: 1 PID: 17918 Comm: syz-executor.4 Not tainted 4.14.232-syzkaller #0 [ 509.694659] device bridge_slave_1 left promiscuous mode [ 509.700896] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 509.700901] Call Trace: [ 509.700922] dump_stack+0x1b2/0x281 [ 509.700935] warn_alloc.cold+0x96/0x1cc [ 509.700950] ? zone_watermark_ok_safe+0x220/0x220 [ 509.726743] bridge0: port 2(bridge_slave_1) entered disabled state [ 509.730683] __alloc_pages_nodemask+0x2127/0x2720 [ 509.730702] ? lock_acquire+0x170/0x3f0 [ 509.730718] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 509.750739] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 509.756209] ? __mutex_unlock_slowpath+0x75/0x770 [ 509.761078] alloc_pages_current+0x155/0x260 [ 509.765501] ion_page_pool_alloc+0x118/0x1b0 [ 509.769919] ion_system_heap_allocate+0x133/0x8c0 [ 509.774767] ? ion_alloc+0x187/0x810 [ 509.778480] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 509.784019] ? ion_system_contig_heap_create+0x130/0x130 [ 509.789471] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 509.794487] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 509.799330] ion_alloc+0x204/0x810 [ 509.802890] ? ion_dma_buf_release+0x40/0x40 [ 509.807297] ? __might_fault+0x177/0x1b0 [ 509.811355] ion_ioctl+0xea/0x1f0 [ 509.814803] ? ion_query_heaps+0x360/0x360 [ 509.819053] ? ion_query_heaps+0x360/0x360 [ 509.823294] do_vfs_ioctl+0x75a/0xff0 [ 509.827090] ? ioctl_preallocate+0x1a0/0x1a0 [ 509.831491] ? lock_downgrade+0x740/0x740 [ 509.835650] ? __fget+0x225/0x360 [ 509.839128] ? do_vfs_ioctl+0xff0/0xff0 [ 509.843093] ? security_file_ioctl+0x83/0xb0 [ 509.847496] SyS_ioctl+0x7f/0xb0 [ 509.850867] ? do_vfs_ioctl+0xff0/0xff0 [ 509.854842] do_syscall_64+0x1d5/0x640 [ 509.858728] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 509.863908] RIP: 0033:0x4665f9 [ 509.867082] RSP: 002b:00007f9108899188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 509.874885] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 509.882154] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000006 [ 509.889419] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 509.896696] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 509.903971] R13: 00007fffb2c94dcf R14: 00007f9108899300 R15: 0000000000022000 [ 509.927885] device bridge_slave_0 left promiscuous mode [ 509.942738] bridge0: port 1(bridge_slave_0) entered disabled state [ 509.998592] device veth1_macvtap left promiscuous mode [ 510.020016] device veth0_macvtap left promiscuous mode [ 510.034464] device veth1_vlan left promiscuous mode [ 510.054932] device veth0_vlan left promiscuous mode [ 510.386858] Mem-Info: [ 510.389342] active_anon:12086 inactive_anon:18918 isolated_anon:0 [ 510.389342] active_file:1229 inactive_file:5545 isolated_file:0 [ 510.389342] unevictable:0 dirty:120 writeback:0 unstable:0 [ 510.389342] slab_reclaimable:13074 slab_unreclaimable:118993 [ 510.389342] mapped:53572 shmem:19217 pagetables:737 bounce:0 [ 510.389342] free:91529 free_pcp:163 free_cma:0 [ 510.425547] syz-executor.2: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 510.442915] device hsr_slave_1 left promiscuous mode [ 510.469145] device hsr_slave_0 left promiscuous mode [ 510.474880] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 510.488229] CPU: 0 PID: 17915 Comm: syz-executor.2 Not tainted 4.14.232-syzkaller #0 [ 510.496158] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 510.496900] Node 0 active_anon:47196kB inactive_anon:59120kB active_file:4872kB inactive_file:22812kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:201996kB dirty:480kB writeback:0kB shmem:60188kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 510.505524] Call Trace: [ 510.536664] dump_stack+0x1b2/0x281 [ 510.540301] warn_alloc.cold+0x96/0x1cc [ 510.544282] ? zone_watermark_ok_safe+0x220/0x220 [ 510.549153] __alloc_pages_nodemask+0x2127/0x2720 [ 510.554004] ? io_schedule_timeout+0x140/0x140 [ 510.558598] ? lock_acquire+0x170/0x3f0 [ 510.562587] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 510.567455] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 510.572964] ? __mutex_unlock_slowpath+0x75/0x770 [ 510.577905] ? alloc_pages_current+0xe3/0x260 [ 510.582419] alloc_pages_current+0x155/0x260 [ 510.586854] ion_page_pool_alloc+0x118/0x1b0 [ 510.591297] ion_system_heap_allocate+0x133/0x8c0 [ 510.596151] ? ion_alloc+0x187/0x810 [ 510.599874] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 510.605343] ? ion_system_contig_heap_create+0x130/0x130 [ 510.606881] Node 1 active_anon:1148kB inactive_anon:16552kB active_file:44kB inactive_file:68kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:28292kB dirty:0kB writeback:0kB shmem:16680kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 510.611240] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 510.643456] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 510.648961] ion_alloc+0x204/0x810 [ 510.652518] ? ion_dma_buf_release+0x40/0x40 [ 510.656937] ? __might_fault+0x177/0x1b0 [ 510.661010] ion_ioctl+0xea/0x1f0 [ 510.664479] ? ion_query_heaps+0x360/0x360 [ 510.668823] ? ion_query_heaps+0x360/0x360 [ 510.673167] do_vfs_ioctl+0x75a/0xff0 [ 510.676990] ? ioctl_preallocate+0x1a0/0x1a0 [ 510.681403] ? lock_downgrade+0x740/0x740 [ 510.685555] ? __fget+0x225/0x360 [ 510.689016] ? do_vfs_ioctl+0xff0/0xff0 [ 510.693604] ? security_file_ioctl+0x83/0xb0 [ 510.698109] SyS_ioctl+0x7f/0xb0 [ 510.701485] ? do_vfs_ioctl+0xff0/0xff0 [ 510.705472] do_syscall_64+0x1d5/0x640 [ 510.706844] Node 0 DMA free:11096kB min:204kB low:252kB high:300kB active_anon:36kB inactive_anon:0kB active_file:300kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:4kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 510.709386] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 510.709396] RIP: 0033:0x4665f9 [ 510.744244] RSP: 002b:00007ff3638e3188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 510.752247] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 510.759530] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000005 [ 510.766807] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 510.774222] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 510.781504] R13: 00007ffe909c1c6f R14: 00007ff3638e3300 R15: 0000000000022000 [ 510.796828] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 510.801917] Node 0 DMA32 free:82344kB min:36200kB low:45248kB high:54296kB active_anon:47160kB inactive_anon:59120kB active_file:4572kB inactive_file:22616kB unevictable:0kB writepending:480kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7840kB pagetables:2720kB bounce:0kB free_pcp:676kB local_pcp:620kB free_cma:0kB [ 510.832440] team0 (unregistering): Port device team_slave_1 removed [ 510.855541] team0 (unregistering): Port device team_slave_0 removed [ 510.876854] lowmem_reserve[]: 0 0 0 0 0 [ 510.883339] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 510.886845] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 510.923741] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 510.946840] lowmem_reserve[]: 0 0 0 0 0 [ 510.950884] Node 1 Normal free:413904kB min:53696kB low:67120kB high:80544kB active_anon:1148kB inactive_anon:16552kB active_file:172kB inactive_file:144kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:192kB pagetables:224kB bounce:0kB free_pcp:736kB local_pcp:620kB free_cma:0kB [ 511.016829] lowmem_reserve[]: 0 0 0 0 0 [ 511.020865] Node 0 DMA: 199*4kB (UME) 12*8kB (UM) 8*16kB (UME) 10*32kB (UE) 3*64kB (ME) 3*128kB (UME) 2*256kB (UE) 3*512kB (UME) 3*1024kB (UME) 2*2048kB (UE) 0*4096kB = 11132kB [ 511.053034] bond0 (unregistering): Released all slaves [ 511.071251] Node 0 DMA32: 85*4kB (E) 404*8kB (UE) 151*16kB (UME) 932*32kB (UE) 91*64kB (U) 8*128kB (UM) 8*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 44708kB [ 511.110670] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 511.131285] Node 1 Normal: 1*4kB (M) 6*8kB (UME) 3487*16kB (UM) 7636*32kB (UM) 2632*64kB (U) 90*128kB (U) 54*256kB (U) 3*512kB (U) 11*1024kB (U) 0*2048kB 0*4096kB = 506788kB [ 511.176820] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 511.185831] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 511.220409] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 511.240634] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 511.286859] 26171 total pagecache pages [ 511.290895] 0 pages in swap cache [ 511.294654] Swap cache stats: add 0, delete 0, find 0/0 [ 511.327839] Free swap = 0kB [ 511.341009] Total swap = 0kB [ 511.350747] 2097051 pages RAM [ 511.361771] 0 pages HighMem/MovableOnly [ 511.373789] 363849 pages reserved [ 511.385197] 0 pages cma reserved 11:47:48 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000100)={0x80000001}) 11:47:48 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x10001, 0x400) ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r0, 0x7a9, &(0x7f0000000040)={{@my=0x0, 0x7f}, 0x40, 0x3, 0x0, 0x6, 0xf1, 0x5, 0x39, 0x3}) r1 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0), 0x20000, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000100)={0x80000001, 0x27}) 11:47:48 executing program 5: ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(0xffffffffffffffff, 0x7a9, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0), 0x20000, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000100)={0x80000001, 0x27}) 11:47:48 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000100)={0x80000001}) 11:47:48 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000100)={0x80000001}) 11:47:48 executing program 0: ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(0xffffffffffffffff, 0x7a9, &(0x7f0000000040)={{@my=0x0, 0x7f}, 0x40, 0x3, 0x0, 0x6, 0xf1, 0x5, 0x39, 0x3}) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0), 0x20000, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000100)={0x80000001, 0x27}) [ 513.763946] syz-executor.5: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 513.764156] syz-executor.0: [ 513.807321] syz-executor.5 cpuset= [ 513.827214] page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 513.848453] / mems_allowed=0-1 [ 513.849964] syz-executor.3: [ 513.861118] CPU: 1 PID: 17926 Comm: syz-executor.5 Not tainted 4.14.232-syzkaller #0 [ 513.865066] page allocation failure: order:4 [ 513.872041] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 513.872047] Call Trace: [ 513.872067] dump_stack+0x1b2/0x281 [ 513.872081] warn_alloc.cold+0x96/0x1cc [ 513.872092] ? zone_watermark_ok_safe+0x220/0x220 [ 513.872114] __alloc_pages_nodemask+0x2127/0x2720 [ 513.872125] ? lock_acquire+0x170/0x3f0 [ 513.872137] ? lock_acquire+0x170/0x3f0 [ 513.872152] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 513.872170] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 513.872182] ? __mutex_unlock_slowpath+0x75/0x770 [ 513.872195] ? alloc_pages_current+0x37/0x260 [ 513.892021] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 513.896358] alloc_pages_current+0x155/0x260 [ 513.896374] ion_page_pool_alloc+0x118/0x1b0 [ 513.909259] (null) [ 513.912261] ion_system_heap_allocate+0x133/0x8c0 [ 513.912272] ? ion_alloc+0x187/0x810 [ 513.919559] syz-executor.3 cpuset= [ 513.920211] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 513.938972] / [ 513.939792] ? ion_system_contig_heap_create+0x130/0x130 [ 513.962227] mems_allowed=0-1 [ 513.962657] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 513.990566] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 513.995416] ion_alloc+0x204/0x810 [ 513.998968] ? ion_dma_buf_release+0x40/0x40 [ 514.003385] ? __might_fault+0x177/0x1b0 [ 514.007450] ion_ioctl+0xea/0x1f0 [ 514.010897] ? ion_query_heaps+0x360/0x360 [ 514.015129] ? ion_query_heaps+0x360/0x360 [ 514.019380] do_vfs_ioctl+0x75a/0xff0 [ 514.023188] ? ioctl_preallocate+0x1a0/0x1a0 [ 514.027594] ? lock_downgrade+0x740/0x740 [ 514.031813] ? __fget+0x225/0x360 [ 514.035265] ? do_vfs_ioctl+0xff0/0xff0 [ 514.039239] ? security_file_ioctl+0x83/0xb0 [ 514.043647] SyS_ioctl+0x7f/0xb0 [ 514.047050] ? do_vfs_ioctl+0xff0/0xff0 [ 514.051029] do_syscall_64+0x1d5/0x640 [ 514.054920] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 514.060106] RIP: 0033:0x4665f9 [ 514.063287] RSP: 002b:00007f4323f8e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 514.070991] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 514.078272] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000003 [ 514.085545] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 514.092816] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 514.100091] R13: 00007ffec8acf2af R14: 00007f4323f8e300 R15: 0000000000022000 [ 514.107377] CPU: 0 PID: 17929 Comm: syz-executor.3 Not tainted 4.14.232-syzkaller #0 [ 514.115314] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 514.124671] Call Trace: [ 514.127266] dump_stack+0x1b2/0x281 [ 514.130896] warn_alloc.cold+0x96/0x1cc [ 514.134872] ? zone_watermark_ok_safe+0x220/0x220 [ 514.139733] __alloc_pages_nodemask+0x2127/0x2720 [ 514.142159] syz-executor.0 cpuset= [ 514.144579] ? lock_acquire+0x170/0x3f0 [ 514.144593] ? lock_acquire+0x170/0x3f0 [ 514.156066] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 514.160921] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 514.162482] / [ 514.166385] ? __mutex_unlock_slowpath+0x75/0x770 [ 514.172930] alloc_pages_current+0x155/0x260 [ 514.177346] ion_page_pool_alloc+0x118/0x1b0 [ 514.178755] mems_allowed=0-1 [ 514.181854] ion_system_heap_allocate+0x133/0x8c0 [ 514.181865] ? ion_alloc+0x187/0x810 [ 514.181879] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 514.199077] ? ion_system_contig_heap_create+0x130/0x130 [ 514.204632] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 514.209663] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 514.214608] ion_alloc+0x204/0x810 [ 514.218161] ? ion_dma_buf_release+0x40/0x40 [ 514.222600] ? __might_fault+0x177/0x1b0 [ 514.226679] ion_ioctl+0xea/0x1f0 [ 514.230143] ? ion_query_heaps+0x360/0x360 [ 514.234427] ? ion_query_heaps+0x360/0x360 [ 514.238669] do_vfs_ioctl+0x75a/0xff0 [ 514.242479] ? ioctl_preallocate+0x1a0/0x1a0 [ 514.246926] ? lock_downgrade+0x740/0x740 [ 514.251085] ? __fget+0x225/0x360 [ 514.254641] ? do_vfs_ioctl+0xff0/0xff0 [ 514.258633] ? security_file_ioctl+0x83/0xb0 [ 514.263251] SyS_ioctl+0x7f/0xb0 [ 514.266712] ? do_vfs_ioctl+0xff0/0xff0 [ 514.270690] do_syscall_64+0x1d5/0x640 [ 514.274586] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 514.279774] RIP: 0033:0x4665f9 [ 514.282957] RSP: 002b:00007f19ab3d9188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 514.290664] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 514.298282] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000004 [ 514.305557] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 514.312830] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 514.320135] R13: 00007ffe6b89cc0f R14: 00007f19ab3d9300 R15: 0000000000022000 [ 514.336774] CPU: 1 PID: 17937 Comm: syz-executor.0 Not tainted 4.14.232-syzkaller #0 [ 514.345058] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 514.354678] Call Trace: [ 514.357292] dump_stack+0x1b2/0x281 [ 514.360947] warn_alloc.cold+0x96/0x1cc [ 514.364943] ? zone_watermark_ok_safe+0x220/0x220 [ 514.369930] __alloc_pages_nodemask+0x2127/0x2720 [ 514.374990] ? lock_acquire+0x170/0x3f0 [ 514.378992] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 514.383887] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 514.389351] ? __mutex_unlock_slowpath+0x75/0x770 [ 514.394437] alloc_pages_current+0x155/0x260 [ 514.399164] ion_page_pool_alloc+0x118/0x1b0 [ 514.403603] ion_system_heap_allocate+0x133/0x8c0 [ 514.408461] ? ion_alloc+0x187/0x810 [ 514.412186] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 514.417653] ? ion_system_contig_heap_create+0x130/0x130 [ 514.423116] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 514.426734] warn_alloc_show_mem: 1 callbacks suppressed [ 514.426737] Mem-Info: [ 514.428221] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 514.428235] ion_alloc+0x204/0x810 [ 514.428252] ? ion_dma_buf_release+0x40/0x40 [ 514.433794] active_anon:12371 inactive_anon:18920 isolated_anon:0 [ 514.433794] active_file:267 inactive_file:271 isolated_file:0 [ 514.433794] unevictable:0 dirty:11 writeback:0 unstable:0 [ 514.433794] slab_reclaimable:13088 slab_unreclaimable:117198 [ 514.433794] mapped:53277 shmem:19220 pagetables:912 bounce:0 [ 514.433794] free:25329 free_pcp:203 free_cma:0 [ 514.436086] ? __might_fault+0x177/0x1b0 [ 514.436101] ion_ioctl+0xea/0x1f0 [ 514.436111] ? ion_query_heaps+0x360/0x360 [ 514.436126] ? ion_query_heaps+0x360/0x360 [ 514.441113] Node 0 active_anon:48060kB inactive_anon:59124kB active_file:1068kB inactive_file:1032kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:184748kB dirty:44kB writeback:0kB shmem:60196kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 514.444514] do_vfs_ioctl+0x75a/0xff0 [ 514.444530] ? ioctl_preallocate+0x1a0/0x1a0 [ 514.444540] ? lock_downgrade+0x740/0x740 [ 514.444553] ? __fget+0x225/0x360 [ 514.449083] Node 1 active_anon:1424kB inactive_anon:16556kB active_file:0kB inactive_file:52kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:28360kB dirty:0kB writeback:0kB shmem:16684kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 514.482461] ? do_vfs_ioctl+0xff0/0xff0 [ 514.482473] ? security_file_ioctl+0x83/0xb0 [ 514.482483] SyS_ioctl+0x7f/0xb0 [ 514.482493] ? do_vfs_ioctl+0xff0/0xff0 [ 514.482504] do_syscall_64+0x1d5/0x640 [ 514.482518] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 514.482527] RIP: 0033:0x4665f9 [ 514.482531] RSP: 002b:00007f78e5f89188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 514.482541] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 514.482551] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000003 [ 514.486774] Node 0 [ 514.490191] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 514.490196] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 514.490202] R13: 00007ffd4957c29f R14: 00007f78e5f89300 R15: 0000000000022000 [ 514.829867] DMA free:11064kB min:204kB low:252kB high:300kB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:4kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 514.860477] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 514.865629] Node 0 DMA32 free:38808kB min:36200kB low:45248kB high:54296kB active_anon:48020kB inactive_anon:59124kB active_file:300kB inactive_file:212kB unevictable:0kB writepending:44kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7776kB pagetables:3124kB bounce:0kB free_pcp:768kB local_pcp:652kB free_cma:0kB [ 514.941671] lowmem_reserve[]: 0 0 0 0 0 [ 514.958443] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 515.054232] lowmem_reserve[]: 0 0 0 0 0 [ 515.065204] Node 1 Normal free:53780kB min:53696kB low:67120kB high:80544kB active_anon:1440kB inactive_anon:16552kB active_file:3332kB inactive_file:2356kB unevictable:0kB writepending:28kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:288kB pagetables:520kB bounce:0kB free_pcp:1060kB local_pcp:316kB free_cma:0kB [ 515.123695] lowmem_reserve[]: 0 0 0 0 0 [ 515.143929] Node 0 DMA: 2*4kB (ME) 3*8kB (M) 5*16kB (ME) 4*32kB (UME) 7*64kB (UME) 7*128kB (UME) 3*256kB (UE) 3*512kB (UME) 3*1024kB (UME) 2*2048kB (UE) 0*4096kB = 11056kB [ 515.188211] Node 0 DMA32: 839*4kB (ME) 462*8kB (ME) 153*16kB (ME) 624*32kB (UME) 76*64kB (UM) 8*128kB (U) 2*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 35868kB [ 515.226774] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 515.267646] Node 1 Normal: 144*4kB (UME) 101*8kB (UME) 124*16kB (UME) 149*32kB (UM) 20*64kB (UME) 20*128kB (UME) 7*256kB (UM) 57*512kB (UM) 15*1024kB (U) 1*2048kB (U) 0*4096kB = 60360kB [ 515.291491] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 515.300777] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 515.311854] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 515.325385] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 515.335043] 19649 total pagecache pages [ 515.343738] 0 pages in swap cache [ 515.349046] Swap cache stats: add 0, delete 0, find 0/0 [ 515.354611] Free swap = 0kB [ 515.362554] Total swap = 0kB [ 515.365712] 2097051 pages RAM [ 515.370426] 0 pages HighMem/MovableOnly [ 515.374537] 363849 pages reserved [ 515.382733] 0 pages cma reserved [ 515.557048] syz-executor.5 invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 515.594800] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 515.599994] CPU: 0 PID: 17291 Comm: syz-executor.5 Not tainted 4.14.232-syzkaller #0 [ 515.607869] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 515.617310] Call Trace: [ 515.619897] dump_stack+0x1b2/0x281 [ 515.623520] dump_header+0x178/0x82f [ 515.627229] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 515.632344] ? ___ratelimit+0x2cd/0x530 [ 515.636319] oom_kill_process.cold+0x10/0xa40 [ 515.640828] out_of_memory+0xe3e/0x1190 [ 515.644857] ? oom_killer_disable+0x1c0/0x1c0 [ 515.649371] ? mutex_trylock+0x152/0x1a0 [ 515.653455] __alloc_pages_nodemask+0x23e1/0x2720 [ 515.658316] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 515.663170] alloc_pages_current+0x155/0x260 [ 515.667574] filemap_fault+0x11a1/0x1ad0 [ 515.671645] ext4_filemap_fault+0x84/0xb0 [ 515.675809] __do_fault+0xfa/0x380 [ 515.679358] __handle_mm_fault+0x2497/0x4620 [ 515.683771] ? vm_insert_page+0x7c0/0x7c0 [ 515.687927] ? hrtimer_nanosleep+0x1ff/0x4b0 [ 515.692414] ? nanosleep_copyout+0x100/0x100 [ 515.696818] ? mark_held_locks+0xa6/0xf0 [ 515.701060] handle_mm_fault+0x455/0x9c0 [ 515.705113] __do_page_fault+0x549/0xad0 [ 515.709177] ? spurious_fault+0x640/0x640 [ 515.713327] ? do_page_fault+0x60/0x500 [ 515.717445] ? page_fault+0x2f/0x50 [ 515.721065] page_fault+0x45/0x50 [ 515.724602] RIP: 7d955:0x3 [ 515.727430] RSP: 000b:00007ffec8acf56c EFLAGS: 00000032 [ 515.728078] Bluetooth: hci5 command 0x0409 tx timeout [ 515.736396] Mem-Info: [ 515.741147] active_anon:12250 inactive_anon:18919 isolated_anon:0 [ 515.741147] active_file:2 inactive_file:8 isolated_file:31 [ 515.741147] unevictable:0 dirty:0 writeback:27 unstable:0 [ 515.741147] slab_reclaimable:13088 slab_unreclaimable:117783 [ 515.741147] mapped:53055 shmem:19220 pagetables:912 bounce:0 [ 515.741147] free:25188 free_pcp:205 free_cma:0 [ 515.778521] Node 0 active_anon:47660kB inactive_anon:59124kB active_file:36kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:183924kB dirty:0kB writeback:72kB shmem:60196kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 515.809573] Node 1 active_anon:1340kB inactive_anon:16552kB active_file:0kB inactive_file:52kB unevictable:0kB isolated(anon):0kB isolated(file):124kB mapped:28296kB dirty:0kB writeback:36kB shmem:16684kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 515.842183] Node 0 DMA free:11064kB min:204kB low:252kB high:300kB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:4kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 515.872552] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 515.879584] Node 0 DMA32 free:36116kB min:36200kB low:45248kB high:54296kB active_anon:48020kB inactive_anon:59124kB active_file:56kB inactive_file:0kB unevictable:0kB writepending:32kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7776kB pagetables:3124kB bounce:0kB free_pcp:164kB local_pcp:120kB free_cma:0kB [ 515.911172] lowmem_reserve[]: 0 0 0 0 0 [ 515.915286] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 515.941484] lowmem_reserve[]: 0 0 0 0 0 [ 515.945539] Node 1 Normal free:53580kB min:53696kB low:67120kB high:80544kB active_anon:1440kB inactive_anon:16552kB active_file:708kB inactive_file:188kB unevictable:0kB writepending:28kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:288kB pagetables:520kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 515.975653] lowmem_reserve[]: 0 0 0 0 0 [ 515.979783] Node 0 DMA: 2*4kB (ME) 3*8kB (M) 5*16kB (ME) 4*32kB (UME) 7*64kB (UME) 7*128kB (UME) 3*256kB (UE) 3*512kB (UME) 3*1024kB (UME) 2*2048kB (UE) 0*4096kB = 11056kB [ 516.001577] Node 0 DMA32: 843*4kB (UME) 465*8kB (UME) 169*16kB (UME) 585*32kB (UME) 82*64kB (UM) 11*128kB (U) 4*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36196kB [ 516.016855] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 516.028467] Node 1 Normal: 56*4kB (ME) 26*8kB (ME) 31*16kB (UME) 9*32kB (ME) 27*64kB (UME) 8*128kB (UME) 4*256kB (M) 56*512kB (UM) 18*1024kB (UM) 1*2048kB (U) 0*4096kB = 54144kB [ 516.049501] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 516.146870] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 516.155482] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 516.265671] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 516.322012] 19307 total pagecache pages [ 516.326017] 0 pages in swap cache [ 516.343148] Swap cache stats: add 0, delete 0, find 0/0 [ 516.396771] Free swap = 0kB [ 516.399809] Total swap = 0kB [ 516.402836] 2097051 pages RAM [ 516.405927] 0 pages HighMem/MovableOnly [ 516.460738] 363849 pages reserved [ 516.464227] 0 pages cma reserved [ 516.508307] Out of memory (oom_kill_allocating_task): Kill process 17291 (syz-executor.5) score 0 or sacrifice child [ 516.571172] Killed process 17926 (syz-executor.5) total-vm:93252kB, anon-rss:152kB, file-rss:34820kB, shmem-rss:0kB [ 516.695590] oom_reaper: reaped process 17926 (syz-executor.5), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 516.727638] systemd-journal invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 516.767837] systemd-journal cpuset=/ mems_allowed=0-1 [ 516.773093] CPU: 0 PID: 17000 Comm: systemd-journal Not tainted 4.14.232-syzkaller #0 [ 516.781067] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 516.790432] Call Trace: [ 516.793045] dump_stack+0x1b2/0x281 [ 516.797283] dump_header+0x178/0x82f [ 516.801084] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 516.806211] ? ___ratelimit+0x2cd/0x530 [ 516.810189] oom_kill_process.cold+0x10/0xa40 [ 516.814699] out_of_memory+0xe3e/0x1190 [ 516.818687] ? oom_killer_disable+0x1c0/0x1c0 [ 516.823202] ? mutex_trylock+0x152/0x1a0 [ 516.827265] __alloc_pages_nodemask+0x23e1/0x2720 [ 516.832119] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 516.836979] alloc_pages_current+0x155/0x260 [ 516.841602] filemap_fault+0x11a1/0x1ad0 [ 516.845663] ext4_filemap_fault+0x84/0xb0 [ 516.849808] __do_fault+0xfa/0x380 [ 516.853340] __handle_mm_fault+0x2497/0x4620 [ 516.857743] ? vm_insert_page+0x7c0/0x7c0 [ 516.861881] ? lock_downgrade+0x740/0x740 [ 516.866023] ? mark_held_locks+0xa6/0xf0 [ 516.870106] handle_mm_fault+0x455/0x9c0 [ 516.875208] __do_page_fault+0x549/0xad0 [ 516.879262] ? spurious_fault+0x640/0x640 [ 516.883416] ? do_page_fault+0x60/0x500 [ 516.887386] ? page_fault+0x2f/0x50 [ 516.891015] page_fault+0x45/0x50 [ 516.894478] RIP: 283dee98:0x556146247958 [ 516.898542] RSP: 283deda0:00007ffc283ded98 EFLAGS: 5561466c2780 [ 516.999281] Mem-Info: [ 517.014948] active_anon:12216 inactive_anon:18921 isolated_anon:0 [ 517.014948] active_file:13 inactive_file:0 isolated_file:0 [ 517.014948] unevictable:0 dirty:0 writeback:0 unstable:0 [ 517.014948] slab_reclaimable:13094 slab_unreclaimable:117516 [ 517.014948] mapped:53101 shmem:19221 pagetables:833 bounce:0 [ 517.014948] free:13924 free_pcp:83 free_cma:0 [ 517.048244] syz-executor.5: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 517.070077] Node 0 active_anon:47556kB inactive_anon:59124kB active_file:0kB inactive_file:92kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:184008kB dirty:0kB writeback:0kB shmem:60196kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 517.106842] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 517.111978] CPU: 0 PID: 17926 Comm: syz-executor.5 Not tainted 4.14.232-syzkaller #0 [ 517.119859] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 517.129216] Call Trace: [ 517.131811] dump_stack+0x1b2/0x281 [ 517.135449] warn_alloc.cold+0x96/0x1cc [ 517.139426] ? zone_watermark_ok_safe+0x220/0x220 [ 517.144288] ? usleep_range+0x130/0x130 [ 517.148286] ? try_to_free_pages+0x23f/0x6e0 [ 517.152695] ? _find_next_bit+0xdb/0x100 [ 517.156753] ? run_timer_softirq+0x5a0/0x5a0 [ 517.161169] __alloc_pages_nodemask+0x2127/0x2720 [ 517.166025] ? lock_acquire+0x170/0x3f0 [ 517.170048] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 517.174915] ? ion_page_pool_alloc+0x9e/0x1b0 [ 517.179436] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 517.184918] ? retint_kernel+0x2d/0x2d [ 517.185360] Node 1 active_anon:1308kB inactive_anon:16560kB active_file:68kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:28280kB dirty:0kB writeback:0kB shmem:16688kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 517.188824] alloc_pages_current+0x155/0x260 [ 517.188839] ion_page_pool_alloc+0x118/0x1b0 [ 517.188848] ion_system_heap_allocate+0x133/0x8c0 [ 517.188858] ? ion_alloc+0x187/0x810 [ 517.188868] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 517.188876] ? ion_system_contig_heap_create+0x130/0x130 [ 517.188886] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 517.188895] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 517.188906] ion_alloc+0x204/0x810 [ 517.188919] ? ion_dma_buf_release+0x40/0x40 [ 517.188930] ? __might_fault+0x177/0x1b0 [ 517.188942] ion_ioctl+0xea/0x1f0 [ 517.188951] ? ion_query_heaps+0x360/0x360 [ 517.188962] ? ion_query_heaps+0x360/0x360 [ 517.188972] do_vfs_ioctl+0x75a/0xff0 [ 517.188986] ? ioctl_preallocate+0x1a0/0x1a0 [ 517.246415] Node 0 [ 517.249468] ? lock_downgrade+0x740/0x740 [ 517.249484] ? __fget+0x225/0x360 [ 517.249493] ? do_vfs_ioctl+0xff0/0xff0 [ 517.249504] ? security_file_ioctl+0x83/0xb0 [ 517.249514] SyS_ioctl+0x7f/0xb0 [ 517.249522] ? do_vfs_ioctl+0xff0/0xff0 [ 517.249534] do_syscall_64+0x1d5/0x640 [ 517.249556] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 517.249564] RIP: 0033:0x4665f9 [ 517.249569] RSP: 002b:00007f4323f8e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 517.249578] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 517.249583] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000003 [ 517.249588] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 517.249597] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 517.272050] DMA free:10976kB min:204kB low:252kB high:300kB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:4kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 517.274105] R13: 00007ffec8acf2af R14: 00007f4323f8e300 R15: 0000000000022000 [ 517.295803] lowmem_reserve[]: [ 517.305622] warn_alloc_show_mem: 2 callbacks suppressed [ 517.305626] Mem-Info: [ 517.333778] 0 [ 517.348095] active_anon:12216 inactive_anon:18921 isolated_anon:0 [ 517.348095] active_file:10 inactive_file:21 isolated_file:0 [ 517.348095] unevictable:0 dirty:0 writeback:0 unstable:0 [ 517.348095] slab_reclaimable:13094 slab_unreclaimable:117516 [ 517.348095] mapped:53072 shmem:19221 pagetables:833 bounce:0 [ 517.348095] free:13924 free_pcp:90 free_cma:0 [ 517.364987] 2717 [ 517.397316] Node 0 active_anon:47556kB inactive_anon:59124kB active_file:0kB inactive_file:92kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:184008kB dirty:0kB writeback:0kB shmem:60196kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 517.414653] 2718 [ 517.451627] Node 1 active_anon:1308kB inactive_anon:16560kB active_file:68kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:28280kB dirty:0kB writeback:0kB shmem:16688kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 517.492923] 2718 [ 517.512947] Node 0 DMA free:10976kB min:204kB low:252kB high:300kB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:4kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 517.522815] 2718 [ 517.551851] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 517.562962] Node 0 DMA32 free:17984kB min:36200kB low:45248kB high:54296kB active_anon:47520kB inactive_anon:59124kB active_file:0kB inactive_file:92kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7776kB pagetables:2848kB bounce:0kB free_pcp:240kB local_pcp:92kB free_cma:0kB [ 517.563560] Node 0 DMA32 free:17984kB min:36200kB low:45248kB high:54296kB active_anon:47520kB inactive_anon:59124kB active_file:0kB inactive_file:92kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7776kB pagetables:2848kB bounce:0kB free_pcp:240kB local_pcp:148kB free_cma:0kB [ 517.614059] lowmem_reserve[]: [ 517.644076] lowmem_reserve[]: 0 0 0 0 0 [ 517.653429] 0 [ 517.653494] Node 0 [ 517.653497] 0 0 [ 517.655300] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 517.665991] 0 [ 517.689265] lowmem_reserve[]: 0 0 0 0 0 [ 517.695085] Node 1 Normal free:26736kB min:53696kB low:67120kB high:80544kB active_anon:1308kB inactive_anon:16560kB active_file:68kB inactive_file:0kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:288kB pagetables:480kB bounce:0kB free_pcp:120kB local_pcp:120kB free_cma:0kB [ 517.728225] lowmem_reserve[]: 0 0 0 0 0 [ 517.732235] Node 0 DMA: 2*4kB (ME) 3*8kB (M) 6*16kB (UME) 3*32kB (ME) 6*64kB (UME) 7*128kB (UME) 3*256kB (UE) 3*512kB (UME) 3*1024kB (UME) 2*2048kB (UE) 0*4096kB = 10976kB [ 517.733366] 0 [ 517.751423] Node 0 DMA32: 842*4kB (ME) 470*8kB (UME) 155*16kB (UME) 24*32kB (ME) 82*64kB (UM) 11*128kB (U) 4*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18056kB [ 517.771813] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 517.782838] Node 1 Normal: 56*4kB (ME) 26*8kB (ME) 30*16kB (ME) 9*32kB (ME) 11*64kB (ME) 8*128kB (UME) 5*256kB (UM) 4*512kB (UM) 18*1024kB (UM) 1*2048kB (U) 0*4096kB = 26736kB [ 517.786881] Bluetooth: hci5 command 0x041b tx timeout [ 517.809722] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 517.824318] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 517.825259] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 517.847587] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 517.884721] lowmem_reserve[]: 0 0 0 0 0 [ 517.893244] Node 1 Normal free:26736kB min:53696kB low:67120kB high:80544kB active_anon:1308kB inactive_anon:16560kB active_file:0kB inactive_file:84kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:288kB pagetables:480kB bounce:0kB free_pcp:120kB local_pcp:0kB free_cma:0kB [ 517.895541] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 517.945080] lowmem_reserve[]: 0 0 0 0 0 [ 517.953498] Node 0 DMA: 2*4kB (ME) 3*8kB (M) 6*16kB (UME) 3*32kB (ME) 6*64kB (UME) 7*128kB (UME) 3*256kB (UE) 3*512kB (UME) 3*1024kB (UME) 2*2048kB (UE) 0*4096kB = 10976kB [ 517.955230] 19252 total pagecache pages [ 517.982240] Node 0 DMA32: 842*4kB (ME) 470*8kB (UME) 155*16kB (UME) 24*32kB (ME) 82*64kB (UM) 11*128kB (U) 4*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18056kB [ 517.988028] 0 pages in swap cache [ 518.009719] Swap cache stats: add 0, delete 0, find 0/0 [ 518.015085] Free swap = 0kB [ 518.015547] Node 0 [ 518.023226] Total swap = 0kB [ 518.031528] 2097051 pages RAM [ 518.034640] 0 pages HighMem/MovableOnly [ 518.035929] Normal: [ 518.043280] 363849 pages reserved [ 518.045301] 0*4kB [ 518.045605] 0 pages cma reserved [ 518.093021] 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 518.146880] Node 1 Normal: 2*4kB (ME) 2*8kB (UE) 3*16kB (E) 2*32kB (UE) 3443*64kB (UE) 222*128kB (UE) 3*256kB (U) 4*512kB (UM) 49*1024kB (UM) 1*2048kB (U) 0*4096kB = 303944kB [ 518.216722] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 518.225818] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 518.237362] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 518.247070] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 518.266877] 20212 total pagecache pages [ 518.270970] 0 pages in swap cache [ 518.274417] Swap cache stats: add 0, delete 0, find 0/0 [ 518.285709] Free swap = 0kB [ 518.306725] Total swap = 0kB [ 518.309773] 2097051 pages RAM [ 518.311315] IPVS: ftp: loaded support on port[0] = 21 [ 518.312863] 0 pages HighMem/MovableOnly [ 518.312868] 363849 pages reserved [ 518.312871] 0 pages cma reserved [ 518.312878] Out of memory (oom_kill_allocating_task): Kill process 17000 (systemd-journal) score 0 or sacrifice child [ 518.312907] Killed process 17000 (systemd-journal) total-vm:46096kB, anon-rss:484kB, file-rss:0kB, shmem-rss:3320kB [ 518.351669] oom_reaper: reaped process 17000 (systemd-journal), now anon-rss:0kB, file-rss:0kB, shmem-rss:3320kB [ 518.473042] systemd[1]: systemd-journald.service: Failed with result 'signal'. [ 518.484047] systemd[1]: systemd-journald.service: Service has no hold-off time, scheduling restart. [ 518.562021] systemd[1]: Stopped Flush Journal to Persistent Storage. [ 518.627366] systemd[1]: Stopping Flush Journal to Persistent Storage... [ 518.634321] systemd[1]: Stopped Journal Service. [ 518.784568] oom_reaper: reaped process 17937 (syz-executor.0), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 518.786312] syz-executor.5: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 518.841745] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 518.866711] CPU: 1 PID: 17926 Comm: syz-executor.5 Not tainted 4.14.232-syzkaller #0 [ 518.874616] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 518.883970] Call Trace: [ 518.886669] dump_stack+0x1b2/0x281 [ 518.890311] warn_alloc.cold+0x96/0x1cc [ 518.894285] ? zone_watermark_ok_safe+0x220/0x220 [ 518.899139] __alloc_pages_nodemask+0x2127/0x2720 [ 518.903988] ? lock_acquire+0x170/0x3f0 [ 518.907964] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 518.912813] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 518.918265] ? __mutex_unlock_slowpath+0x75/0x770 [ 518.923198] alloc_pages_current+0x155/0x260 [ 518.927610] ion_page_pool_alloc+0x118/0x1b0 [ 518.932033] ion_system_heap_allocate+0x133/0x8c0 [ 518.936889] ? _raw_spin_unlock+0x29/0x40 [ 518.941050] ? _ion_heap_freelist_drain+0x6e/0x410 [ 518.945974] ? ion_system_contig_heap_create+0x130/0x130 [ 518.951417] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 518.956460] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 518.961301] ion_alloc+0x27a/0x810 [ 518.964843] ? ion_dma_buf_release+0x40/0x40 [ 518.969256] ? __might_fault+0x177/0x1b0 [ 518.973315] ion_ioctl+0xea/0x1f0 [ 518.976764] ? ion_query_heaps+0x360/0x360 [ 518.980997] ? ion_query_heaps+0x360/0x360 [ 518.985229] do_vfs_ioctl+0x75a/0xff0 [ 518.989045] ? ioctl_preallocate+0x1a0/0x1a0 [ 518.993450] ? lock_downgrade+0x740/0x740 [ 518.997614] ? __fget+0x225/0x360 [ 519.001065] ? do_vfs_ioctl+0xff0/0xff0 [ 519.005038] ? security_file_ioctl+0x83/0xb0 [ 519.009450] SyS_ioctl+0x7f/0xb0 [ 519.012814] ? do_vfs_ioctl+0xff0/0xff0 [ 519.016790] do_syscall_64+0x1d5/0x640 [ 519.020677] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 519.025859] RIP: 0033:0x4665f9 [ 519.029039] RSP: 002b:00007f4323f8e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 519.036743] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 519.044005] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000003 [ 519.051276] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 519.058541] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 519.065808] R13: 00007ffec8acf2af R14: 00007f4323f8e300 R15: 0000000000022000 [ 519.077318] Mem-Info: [ 519.079749] active_anon:12158 inactive_anon:18920 isolated_anon:0 [ 519.079749] active_file:3 inactive_file:0 isolated_file:1 [ 519.079749] unevictable:0 dirty:0 writeback:0 unstable:0 [ 519.079749] slab_reclaimable:13094 slab_unreclaimable:117665 [ 519.079749] mapped:52216 shmem:19221 pagetables:828 bounce:0 [ 519.079749] free:14047 free_pcp:0 free_cma:0 [ 519.090273] syz-fuzzer invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask= [ 519.112823] Node 0 active_anon:47432kB inactive_anon:59124kB active_file:24kB inactive_file:24kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:180624kB dirty:0kB writeback:0kB shmem:60196kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 519.112842] Node 1 active_anon:1292kB inactive_anon:16556kB active_file:44kB inactive_file:44kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:28276kB dirty:0kB writeback:0kB shmem:16688kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 519.177701] Node 0 DMA free:10964kB min:204kB low:252kB high:300kB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:4kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 519.196178] (null) [ 519.215159] lowmem_reserve[]: [ 519.217450] syz-executor.4: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 519.226695] syz-executor.2: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 519.238818] syz-executor.0: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 519.253894] , order=0, oom_score_adj=0 [ 519.263960] 0 2717 2718 2718 2718 [ 519.269811] Node 0 DMA32 free:18008kB min:36200kB low:45248kB high:54296kB active_anon:47396kB inactive_anon:59124kB active_file:24kB inactive_file:24kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7744kB pagetables:2844kB bounce:0kB free_pcp:120kB local_pcp:120kB free_cma:0kB [ 519.276667] syz-fuzzer cpuset= [ 519.303361] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 519.308831] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 519.316662] CPU: 0 PID: 17915 Comm: syz-executor.2 Not tainted 4.14.232-syzkaller #0 [ 519.322266] syz-executor.0 cpuset= [ 519.324764] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 519.324771] / [ 519.328288] Call Trace: [ 519.341912] dump_stack+0x1b2/0x281 [ 519.345580] warn_alloc.cold+0x96/0x1cc [ 519.349560] ? zone_watermark_ok_safe+0x220/0x220 [ 519.354390] ? usleep_range+0x130/0x130 [ 519.358355] ? try_to_free_pages+0x23f/0x6e0 [ 519.362763] ? _find_next_bit+0xdb/0x100 [ 519.366820] ? run_timer_softirq+0x5a0/0x5a0 [ 519.368826] mems_allowed=0-1 [ 519.371230] __alloc_pages_nodemask+0x2127/0x2720 [ 519.379176] ? lock_acquire+0x170/0x3f0 [ 519.383179] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 519.388016] ? ion_page_pool_alloc+0x9e/0x1b0 [ 519.392522] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 519.398357] ? __sanitizer_cov_trace_pc+0xe/0x50 [ 519.403122] alloc_pages_current+0x155/0x260 [ 519.404000] lowmem_reserve[]: [ 519.407534] ion_page_pool_alloc+0x118/0x1b0 [ 519.407544] ion_system_heap_allocate+0x133/0x8c0 [ 519.407553] ? ion_alloc+0x187/0x810 [ 519.407563] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 519.407572] ? ion_system_contig_heap_create+0x130/0x130 [ 519.407581] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 519.407592] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 519.407603] ion_alloc+0x204/0x810 [ 519.407615] ? ion_dma_buf_release+0x40/0x40 [ 519.424003] 0 [ 519.429065] ? __might_fault+0x177/0x1b0 [ 519.429078] ion_ioctl+0xea/0x1f0 [ 519.429097] ? ion_query_heaps+0x360/0x360 [ 519.429109] ? ion_query_heaps+0x360/0x360 [ 519.429120] do_vfs_ioctl+0x75a/0xff0 [ 519.473971] ? ioctl_preallocate+0x1a0/0x1a0 [ 519.478376] ? lock_downgrade+0x740/0x740 [ 519.482532] ? __fget+0x225/0x360 [ 519.484663] 0 0 [ 519.485981] ? do_vfs_ioctl+0xff0/0xff0 [ 519.485994] ? security_file_ioctl+0x83/0xb0 [ 519.488537] 0 [ 519.491922] SyS_ioctl+0x7f/0xb0 [ 519.496304] 0 [ 519.498089] ? do_vfs_ioctl+0xff0/0xff0 [ 519.498101] do_syscall_64+0x1d5/0x640 [ 519.498116] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 519.498123] RIP: 0033:0x4665f9 [ 519.498128] RSP: 002b:00007ff3638e3188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 519.498137] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 519.498142] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000005 [ 519.498147] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 519.498153] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 519.498158] R13: 00007ffe909c1c6f R14: 00007ff3638e3300 R15: 0000000000022000 [ 519.534160] / [ 519.536268] CPU: 1 PID: 17937 Comm: syz-executor.0 Not tainted 4.14.232-syzkaller #0 [ 519.556670] mems_allowed=0-1 [ 519.563922] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 519.586160] Call Trace: [ 519.588758] dump_stack+0x1b2/0x281 [ 519.592389] warn_alloc.cold+0x96/0x1cc [ 519.596362] ? zone_watermark_ok_safe+0x220/0x220 [ 519.601202] ? usleep_range+0x130/0x130 [ 519.605164] ? try_to_free_pages+0x23f/0x6e0 [ 519.609565] ? _find_next_bit+0xdb/0x100 [ 519.613627] ? run_timer_softirq+0x5a0/0x5a0 [ 519.618056] __alloc_pages_nodemask+0x2127/0x2720 [ 519.622896] ? lock_acquire+0x170/0x3f0 [ 519.626887] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 519.631739] ? ion_page_pool_alloc+0x9e/0x1b0 [ 519.636232] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 519.641688] alloc_pages_current+0x155/0x260 [ 519.646098] ion_page_pool_alloc+0x118/0x1b0 [ 519.650505] ion_system_heap_allocate+0x133/0x8c0 [ 519.655339] ? ion_alloc+0x187/0x810 [ 519.659047] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 519.664493] ? ion_system_contig_heap_create+0x130/0x130 [ 519.669952] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 519.674962] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 519.679801] ion_alloc+0x204/0x810 [ 519.683340] ? ion_dma_buf_release+0x40/0x40 [ 519.687761] ? __might_fault+0x177/0x1b0 [ 519.691824] ion_ioctl+0xea/0x1f0 [ 519.695264] ? ion_query_heaps+0x360/0x360 [ 519.699511] ? ion_query_heaps+0x360/0x360 [ 519.703747] do_vfs_ioctl+0x75a/0xff0 [ 519.707545] ? ioctl_preallocate+0x1a0/0x1a0 [ 519.711947] ? lock_downgrade+0x740/0x740 [ 519.716097] ? __fget+0x225/0x360 [ 519.719547] ? do_vfs_ioctl+0xff0/0xff0 [ 519.723525] ? security_file_ioctl+0x83/0xb0 [ 519.727928] SyS_ioctl+0x7f/0xb0 [ 519.731283] ? do_vfs_ioctl+0xff0/0xff0 [ 519.735247] do_syscall_64+0x1d5/0x640 [ 519.739136] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 519.744322] RIP: 0033:0x4665f9 [ 519.747511] RSP: 002b:00007f78e5f89188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 519.755216] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 519.762481] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000003 [ 519.769744] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 519.777138] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 519.784401] R13: 00007ffd4957c29f R14: 00007f78e5f89300 R15: 0000000000022000 [ 519.791683] CPU: 0 PID: 7996 Comm: syz-fuzzer Not tainted 4.14.232-syzkaller #0 [ 519.799132] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 519.808485] Call Trace: [ 519.811068] dump_stack+0x1b2/0x281 [ 519.814690] dump_header+0x178/0x82f [ 519.818395] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 519.823506] ? ___ratelimit+0x2cd/0x530 [ 519.827479] Node 0 [ 519.827487] oom_kill_process.cold+0x10/0xa40 [ 519.827505] out_of_memory+0xe3e/0x1190 [ 519.829755] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 519.834226] ? oom_killer_disable+0x1c0/0x1c0 [ 519.858909] lowmem_reserve[]: [ 519.863146] ? mutex_trylock+0x152/0x1a0 [ 519.867834] Bluetooth: hci5 command 0x040f tx timeout [ 519.870710] __alloc_pages_nodemask+0x23e1/0x2720 [ 519.884792] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 519.886670] 0 0 0 0 0 [ 519.889639] alloc_pages_current+0x155/0x260 [ 519.892144] filemap_fault+0x11a1/0x1ad0 [ 519.896532] Node 1 [ 519.900583] ext4_filemap_fault+0x84/0xb0 [ 519.900593] __do_fault+0xfa/0x380 [ 519.900603] __handle_mm_fault+0x2497/0x4620 [ 519.900612] ? vm_insert_page+0x7c0/0x7c0 [ 519.900629] ? mark_held_locks+0xa6/0xf0 [ 519.900640] handle_mm_fault+0x455/0x9c0 [ 519.900654] __do_page_fault+0x549/0xad0 [ 519.918881] Normal free:26408kB min:53696kB low:67120kB high:80544kB active_anon:1292kB inactive_anon:16556kB active_file:44kB inactive_file:44kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:352kB pagetables:536kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 519.919022] ? spurious_fault+0x640/0x640 [ 519.923055] lowmem_reserve[]: [ 519.927105] ? do_page_fault+0x60/0x500 [ 519.927113] ? page_fault+0x2f/0x50 [ 519.927120] page_fault+0x45/0x50 [ 519.927129] RIP: 184f420:0x823ecb9df2 [ 519.927133] RSP: 0215:00007ffe61253b50 EFLAGS: 00000003 [ 519.984080] CPU: 1 PID: 17918 Comm: syz-executor.4 Not tainted 4.14.232-syzkaller #0 [ 519.997309] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 520.007985] Call Trace: [ 520.010623] dump_stack+0x1b2/0x281 [ 520.014363] warn_alloc.cold+0x96/0x1cc [ 520.018948] ? zone_watermark_ok_safe+0x220/0x220 [ 520.023790] ? usleep_range+0x130/0x130 [ 520.027850] ? try_to_free_pages+0x23f/0x6e0 [ 520.032255] ? _find_next_bit+0xdb/0x100 [ 520.036314] ? run_timer_softirq+0x5a0/0x5a0 [ 520.040743] __alloc_pages_nodemask+0x2127/0x2720 [ 520.045599] ? lock_acquire+0x170/0x3f0 [ 520.049685] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 520.054610] ? ion_page_pool_alloc+0x9e/0x1b0 [ 520.059108] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 520.064560] ? check_preemption_disabled+0x35/0x240 [ 520.069615] alloc_pages_current+0x155/0x260 [ 520.074025] ion_page_pool_alloc+0x118/0x1b0 [ 520.078433] ion_system_heap_allocate+0x133/0x8c0 [ 520.083380] ? ion_alloc+0x187/0x810 [ 520.087092] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 520.092539] ? ion_system_contig_heap_create+0x130/0x130 [ 520.097985] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 520.103020] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 520.107861] ion_alloc+0x204/0x810 [ 520.111400] ? ion_dma_buf_release+0x40/0x40 [ 520.115806] ? __might_fault+0x177/0x1b0 [ 520.119865] ion_ioctl+0xea/0x1f0 [ 520.123315] ? ion_query_heaps+0x360/0x360 [ 520.127547] ? ion_query_heaps+0x360/0x360 [ 520.132143] do_vfs_ioctl+0x75a/0xff0 [ 520.135940] ? ioctl_preallocate+0x1a0/0x1a0 [ 520.140346] ? lock_downgrade+0x740/0x740 [ 520.144495] ? __fget+0x225/0x360 [ 520.147948] ? do_vfs_ioctl+0xff0/0xff0 [ 520.151922] ? security_file_ioctl+0x83/0xb0 [ 520.156326] SyS_ioctl+0x7f/0xb0 [ 520.159684] ? do_vfs_ioctl+0xff0/0xff0 [ 520.163656] do_syscall_64+0x1d5/0x640 [ 520.167544] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 520.172737] RIP: 0033:0x4665f9 [ 520.175914] RSP: 002b:00007f9108899188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 520.183713] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 520.190989] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000006 [ 520.196683] Mem-Info: [ 520.198276] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 520.200692] active_anon:12181 inactive_anon:18920 isolated_anon:0 [ 520.200692] active_file:17 inactive_file:17 isolated_file:0 [ 520.200692] unevictable:0 dirty:0 writeback:0 unstable:0 [ 520.200692] slab_reclaimable:13109 slab_unreclaimable:117699 [ 520.200692] mapped:52225 shmem:19221 pagetables:846 bounce:0 [ 520.200692] free:109464 free_pcp:30 free_cma:0 [ 520.207942] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 520.207948] R13: 00007fffb2c94dcf R14: 00007f9108899300 R15: 0000000000022000 [ 520.270964] 0 0 0 0 0 [ 520.275172] Node 0 DMA: 3*4kB (UME) 3*8kB (M) 5*16kB (ME) 3*32kB (ME) 6*64kB (UME) 6*128kB (UME) 5*256kB (UE) 3*512kB (UME) 3*1024kB (UME) 2*2048kB (UE) 0*4096kB = 11348kB [ 520.302296] Node 0 DMA32: 7163*4kB (UME) 1416*8kB (UE) 982*16kB (UME) 194*32kB (UME) 783*64kB (UE) 161*128kB (UM) 9*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 134924kB [ 520.338278] systemd[1]: Starting Journal Service... [ 520.345050] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 520.370641] Node 0 active_anon:47632kB inactive_anon:59124kB active_file:124kB inactive_file:6604kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:185828kB dirty:0kB writeback:0kB shmem:60196kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 520.386716] Node 1 Normal: 2074*4kB (UM) 1012*8kB (UME) 2600*16kB (UME) 131*32kB (UME) 4340*64kB (UME) 637*128kB (UME) 142*256kB (UM) 35*512kB (UM) 10*1024kB (U) 1*2048kB (U) 0*4096kB = 488040kB [ 520.451480] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 520.461222] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 520.478399] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 520.501168] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 520.510600] Node 1 active_anon:992kB inactive_anon:16556kB active_file:44kB inactive_file:44kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:28276kB dirty:0kB writeback:0kB shmem:16688kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 520.536750] 21261 total pagecache pages [ 520.547188] 0 pages in swap cache [ 520.550668] Swap cache stats: add 0, delete 0, find 0/0 [ 520.556016] Free swap = 0kB [ 520.586816] Total swap = 0kB [ 520.587870] Node 0 [ 520.589861] 2097051 pages RAM [ 520.589866] 0 pages HighMem/MovableOnly [ 520.589869] 363849 pages reserved [ 520.589872] 0 pages cma reserved [ 520.646692] DMA free:11428kB min:204kB low:252kB high:300kB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:4kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 520.646710] warn_alloc_show_mem: 1 callbacks suppressed [ 520.646713] Mem-Info: [ 520.682304] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 520.693960] Node 0 DMA32 free:231288kB min:36200kB low:45248kB high:54296kB active_anon:47296kB inactive_anon:59124kB active_file:3624kB inactive_file:5104kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7712kB pagetables:2912kB bounce:0kB free_pcp:1432kB local_pcp:800kB free_cma:0kB [ 520.736694] active_anon:12081 inactive_anon:18920 isolated_anon:0 [ 520.736694] active_file:917 inactive_file:1287 isolated_file:0 [ 520.736694] unevictable:0 dirty:0 writeback:0 unstable:0 [ 520.736694] slab_reclaimable:13110 slab_unreclaimable:117630 [ 520.736694] mapped:53526 shmem:19221 pagetables:863 bounce:0 [ 520.736694] free:241802 free_pcp:718 free_cma:0 [ 520.796765] Node 0 active_anon:47332kB inactive_anon:59124kB active_file:3624kB inactive_file:5104kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:186028kB dirty:0kB writeback:0kB shmem:60196kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 520.806708] lowmem_reserve[]: [ 520.824838] Node 1 active_anon:992kB inactive_anon:16556kB active_file:44kB inactive_file:44kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:28276kB dirty:0kB writeback:0kB shmem:16688kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 520.828094] 0 0 0 0 0 [ 520.863650] systemd-journald[17975]: File /run/log/journal/04d8c135ee6b410280ba31a58c89679d/system.journal corrupted or uncleanly shut down, renaming and replacing. [ 520.900300] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 520.956830] Node 0 DMA free:11580kB min:204kB low:252kB high:300kB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:4kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 520.976671] lowmem_reserve[]: 0 0 0 0 0 [ 521.006646] Node 1 Normal free:799184kB min:53696kB low:67120kB high:80544kB active_anon:992kB inactive_anon:16556kB active_file:44kB inactive_file:44kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:320kB pagetables:536kB bounce:0kB free_pcp:1252kB local_pcp:628kB free_cma:0kB [ 521.096675] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 521.096700] Node 0 DMA32 free:234288kB min:36200kB low:45248kB high:54296kB active_anon:47396kB inactive_anon:67224kB active_file:3624kB inactive_file:5104kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7712kB pagetables:2912kB bounce:0kB free_pcp:1344kB local_pcp:668kB free_cma:0kB [ 521.096724] lowmem_reserve[]: 0 0 0 0 0 [ 521.096744] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 521.096763] lowmem_reserve[]: 0 0 0 0 0 [ 521.101804] lowmem_reserve[]: [ 521.186691] Node 1 Normal free:775820kB min:53696kB low:67120kB high:80544kB active_anon:992kB inactive_anon:16556kB active_file:44kB inactive_file:44kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:320kB pagetables:536kB bounce:0kB free_pcp:1352kB local_pcp:620kB free_cma:0kB [ 521.316645] lowmem_reserve[]: 0 0 0 0 0 [ 521.320669] Node 0 DMA: 31*4kB (UME) 3*8kB (M) 7*16kB (UME) 6*32kB (UME) 5*64kB (UME) 3*128kB (UME) 5*256kB (UE) 3*512kB (UME) 3*1024kB (UME) 2*2048kB (UE) 0*4096kB = 11140kB [ 521.359334] 0 0 0 0 0 [ 521.361888] Node 0 DMA: 31*4kB (UME) 3*8kB (M) 7*16kB (UME) 6*32kB (UME) 5*64kB (UME) 3*128kB (UME) 5*256kB (UE) 3*512kB (UME) 3*1024kB (UME) 2*2048kB (UE) 0*4096kB = 11140kB [ 521.366675] Node 0 DMA32: 21350*4kB (UME) 6536*8kB (UE) 4256*16kB (UE) 1726*32kB (UE) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 261016kB [ 521.436659] Node 0 DMA32: 22033*4kB (UME) 6573*8kB (UE) 4246*16kB (UE) 1710*32kB (UE) 5*64kB (U) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 263692kB [ 521.459785] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 521.477210] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 521.513314] Node 1 Normal: 15195*4kB (UM) 3673*8kB (UME) 5542*16kB (UME) 3122*32kB (UME) 23*64kB (UME) 181*128kB (UME) 195*256kB (UM) 52*512kB (UM) 1*1024kB (U) 0*2048kB 0*4096kB = 380948kB [ 521.526660] Node 1 Normal: 15195*4kB (UM) 3673*8kB (UME) 5542*16kB (UME) 3122*32kB (UME) 11*64kB (ME) 5*128kB (ME) 154*256kB (UM) 52*512kB (UM) 1*1024kB (U) 0*2048kB 0*4096kB = 347156kB [ 521.609758] syz-executor.0: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 521.612431] syz-executor.2: [ 521.628578] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 521.628584] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 521.628592] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 521.631619] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 521.669806] page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 521.681791] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 521.687061] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 521.696542] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 521.700697] CPU: 1 PID: 17937 Comm: syz-executor.0 Not tainted 4.14.232-syzkaller #0 [ 521.713102] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 521.723105] Call Trace: [ 521.725708] dump_stack+0x1b2/0x281 [ 521.727060] syz-executor.2 cpuset=/ [ 521.729338] warn_alloc.cold+0x96/0x1cc [ 521.729351] ? zone_watermark_ok_safe+0x220/0x220 [ 521.732977] mems_allowed=0-1 [ 521.736949] __alloc_pages_nodemask+0x2127/0x2720 [ 521.736960] ? _raw_spin_unlock_irq+0x24/0x80 [ 521.736976] ? lock_acquire+0x170/0x3f0 [ 521.742072] 23432 total pagecache pages [ 521.745197] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 521.766660] 0 pages in swap cache [ 521.767285] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 521.770730] Swap cache stats: add 0, delete 0, find 0/0 [ 521.776193] ? __mutex_unlock_slowpath+0x75/0x770 [ 521.786369] alloc_pages_current+0x155/0x260 [ 521.790798] ion_page_pool_alloc+0x118/0x1b0 [ 521.795211] ion_system_heap_allocate+0x133/0x8c0 [ 521.800060] ? _raw_spin_unlock+0x29/0x40 [ 521.804211] ? _ion_heap_freelist_drain+0x6e/0x410 [ 521.809195] ? ion_system_contig_heap_create+0x130/0x130 [ 521.814639] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 521.820609] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 521.825480] ion_alloc+0x27a/0x810 [ 521.826026] Free swap = 0kB [ 521.829022] ? ion_dma_buf_release+0x40/0x40 [ 521.829034] ? __might_fault+0x177/0x1b0 [ 521.829046] ion_ioctl+0xea/0x1f0 [ 521.829055] ? ion_query_heaps+0x360/0x360 [ 521.834276] Total swap = 0kB [ 521.836477] ? ion_query_heaps+0x360/0x360 [ 521.836489] do_vfs_ioctl+0x75a/0xff0 [ 521.859217] ? ioctl_preallocate+0x1a0/0x1a0 [ 521.863626] ? lock_downgrade+0x740/0x740 [ 521.867774] ? __fget+0x225/0x360 [ 521.871214] ? do_vfs_ioctl+0xff0/0xff0 [ 521.874206] 2097051 pages RAM [ 521.875182] ? security_file_ioctl+0x83/0xb0 [ 521.882696] SyS_ioctl+0x7f/0xb0 [ 521.884307] 0 pages HighMem/MovableOnly [ 521.886064] ? do_vfs_ioctl+0xff0/0xff0 [ 521.893990] do_syscall_64+0x1d5/0x640 [ 521.897888] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 521.903073] RIP: 0033:0x4665f9 [ 521.906252] RSP: 002b:00007f78e5f89188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 521.913958] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 521.914657] 363849 pages reserved [ 521.921217] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000003 [ 521.921223] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 521.921228] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 521.921233] R13: 00007ffd4957c29f R14: 00007f78e5f89300 R15: 0000000000022000 [ 521.946787] Bluetooth: hci5 command 0x0419 tx timeout [ 521.978502] CPU: 0 PID: 17915 Comm: syz-executor.2 Not tainted 4.14.232-syzkaller #0 [ 521.986413] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 521.992825] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 521.995768] Call Trace: [ 522.007201] dump_stack+0x1b2/0x281 [ 522.010839] warn_alloc.cold+0x96/0x1cc [ 522.014959] ? zone_watermark_ok_safe+0x220/0x220 [ 522.019818] __alloc_pages_nodemask+0x2127/0x2720 [ 522.025037] ? lock_acquire+0x170/0x3f0 [ 522.029018] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 522.033869] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 522.038921] chnl_net:caif_netlink_parms(): no params data found [ 522.039319] ? __mutex_unlock_slowpath+0x75/0x770 [ 522.050206] alloc_pages_current+0x155/0x260 [ 522.054622] ion_page_pool_alloc+0x118/0x1b0 [ 522.059034] ion_system_heap_allocate+0x133/0x8c0 [ 522.063877] ? _raw_spin_unlock+0x29/0x40 [ 522.068023] ? _ion_heap_freelist_drain+0x6e/0x410 [ 522.068699] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 522.072973] ? ion_system_contig_heap_create+0x130/0x130 [ 522.086475] syz-executor.1: [ 522.087012] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 522.087015] page allocation failure: order:5, mode:0x1084020(GFP_ATOMIC|__GFP_COMP), nodemask= [ 522.090032] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 522.095025] (null) [ 522.103765] ion_alloc+0x27a/0x810 [ 522.108580] syz-executor.1 cpuset= [ 522.110745] ? ion_dma_buf_release+0x40/0x40 [ 522.114440] / [ 522.117782] ? __might_fault+0x177/0x1b0 [ 522.117798] ion_ioctl+0xea/0x1f0 [ 522.117809] ? ion_query_heaps+0x360/0x360 [ 522.122299] mems_allowed=0-1 [ 522.124016] ? ion_query_heaps+0x360/0x360 [ 522.143039] do_vfs_ioctl+0x75a/0xff0 [ 522.146835] ? ioctl_preallocate+0x1a0/0x1a0 [ 522.151237] ? lock_downgrade+0x740/0x740 [ 522.155376] ? __fget+0x225/0x360 [ 522.158830] ? do_vfs_ioctl+0xff0/0xff0 [ 522.162887] ? security_file_ioctl+0x83/0xb0 [ 522.167290] SyS_ioctl+0x7f/0xb0 [ 522.170650] ? do_vfs_ioctl+0xff0/0xff0 [ 522.174620] do_syscall_64+0x1d5/0x640 [ 522.178509] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 522.183697] RIP: 0033:0x4665f9 [ 522.186963] RSP: 002b:00007ff3638e3188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 522.194665] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 522.202023] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000005 [ 522.209302] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 522.216568] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 522.223831] R13: 00007ffe909c1c6f R14: 00007ff3638e3300 R15: 0000000000022000 [ 522.231130] CPU: 1 PID: 17921 Comm: syz-executor.1 Not tainted 4.14.232-syzkaller #0 [ 522.239195] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 522.248554] Call Trace: [ 522.251187] dump_stack+0x1b2/0x281 [ 522.254816] warn_alloc.cold+0x96/0x1cc [ 522.258818] ? zone_watermark_ok_safe+0x220/0x220 [ 522.263667] ? wake_all_kswapds+0x175/0x360 [ 522.266636] 0 pages cma reserved [ 522.267989] __alloc_pages_nodemask+0x2127/0x2720 [ 522.271349] Out of memory (oom_kill_allocating_task): Kill process 7996 (syz-fuzzer) score 0 or sacrifice child [ 522.276180] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 522.291501] ? __alloc_pages_nodemask+0x1a6e/0x2720 [ 522.296546] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 522.301410] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 522.306271] ? entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 522.306698] Killed process 17920 (syz-executor.1) total-vm:84924kB, anon-rss:64kB, file-rss:0kB, shmem-rss:0kB [ 522.311637] ? calc_wheel_index+0xb1/0x1c0 [ 522.326089] ? cache_alloc_refill+0x2fa/0x350 [ 522.330582] ? ____cache_alloc_node+0x156/0x1d0 [ 522.335441] cache_grow_begin+0x91/0x700 [ 522.339514] fallback_alloc+0x207/0x2c0 [ 522.343172] oom_reaper: reaped process 17915 (syz-executor.2), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 522.343660] __kmalloc+0x213/0x400 [ 522.357353] ? batadv_hash_new+0xaa/0x270 [ 522.361511] batadv_hash_new+0xaa/0x270 [ 522.365494] ? batadv_bla_status_update+0x2b0/0x2b0 [ 522.370549] batadv_dat_init+0x61/0x170 [ 522.374627] batadv_mesh_init+0x4a8/0x630 [ 522.378774] batadv_softif_init_late+0xa26/0xc90 [ 522.381933] oom_reaper: reaped process 17918 (syz-executor.4), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 522.383527] ? batadv_get_strings+0x40/0x40 [ 522.397838] ? dev_valid_name+0x1a0/0x1a0 [ 522.401990] ? batadv_get_strings+0x40/0x40 [ 522.406318] register_netdevice+0x291/0xe40 [ 522.410651] ? netdev_change_features+0xa0/0xa0 [ 522.415323] ? rtnl_create_link+0x129/0x890 [ 522.419716] rtnl_newlink+0x14ff/0x1860 [ 522.423694] ? rtnl_newlink+0x43d/0x1860 [ 522.427768] ? __lock_acquire+0x5fc/0x3f20 [ 522.432013] ? trace_hardirqs_on+0x10/0x10 [ 522.436251] ? rtnl_dellink+0x6a0/0x6a0 [ 522.440232] ? trace_hardirqs_on+0x10/0x10 [ 522.444465] ? __read_once_size_nocheck.constprop.0+0x10/0x10 [ 522.450359] ? deref_stack_reg+0x124/0x1a0 [ 522.454644] ? lock_acquire+0x170/0x3f0 [ 522.458626] ? lock_downgrade+0x740/0x740 [ 522.462816] ? rtnl_dellink+0x6a0/0x6a0 [ 522.466816] rtnetlink_rcv_msg+0x3be/0xb10 [ 522.471059] ? rtnl_calcit.isra.0+0x3a0/0x3a0 [ 522.475566] ? __netlink_lookup+0x345/0x5d0 [ 522.479912] netlink_rcv_skb+0x125/0x390 [ 522.484062] ? rtnl_calcit.isra.0+0x3a0/0x3a0 [ 522.488563] ? netlink_ack+0x9a0/0x9a0 [ 522.492482] netlink_unicast+0x437/0x610 [ 522.496562] ? netlink_sendskb+0xd0/0xd0 [ 522.500661] ? __check_object_size+0x179/0x230 [ 522.505244] netlink_sendmsg+0x62e/0xb80 [ 522.509306] ? nlmsg_notify+0x170/0x170 [ 522.513285] ? security_socket_sendmsg+0x83/0xb0 [ 522.516317] warn_alloc_show_mem: 1 callbacks suppressed [ 522.516321] Mem-Info: [ 522.518064] ? nlmsg_notify+0x170/0x170 [ 522.518072] sock_sendmsg+0xb5/0x100 [ 522.518081] SyS_sendto+0x1c7/0x2c0 [ 522.518089] ? SyS_getpeername+0x220/0x220 [ 522.518100] ? vm_insert_page+0x7c0/0x7c0 [ 522.523516] active_anon:12079 inactive_anon:20952 isolated_anon:0 [ 522.523516] active_file:1275 inactive_file:919 isolated_file:0 [ 522.523516] unevictable:0 dirty:32 writeback:0 unstable:0 [ 522.523516] slab_reclaimable:13050 slab_unreclaimable:119981 [ 522.523516] mapped:54072 shmem:21269 pagetables:809 bounce:0 [ 522.523516] free:90534 free_pcp:203 free_cma:0 [ 522.525962] ? up_read+0x17/0x30 [ 522.530297] Node 0 active_anon:47404kB inactive_anon:67252kB active_file:5092kB inactive_file:3668kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:188012kB dirty:128kB writeback:0kB shmem:68388kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 522.533595] ? __do_page_fault+0x159/0xad0 [ 522.537311] Node 1 active_anon:912kB inactive_anon:16556kB active_file:8kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:28276kB dirty:0kB writeback:0kB shmem:16688kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 522.541422] ? do_syscall_64+0x4c/0x640 [ 522.545563] Node 0 [ 522.579665] ? SyS_getpeername+0x220/0x220 [ 522.579678] do_syscall_64+0x1d5/0x640 [ 522.579692] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 522.579699] RIP: 0033:0x41958c [ 522.579703] RSP: 002b:00007ffc5564d420 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 522.579711] RAX: ffffffffffffffda RBX: 00000000014a4320 RCX: 000000000041958c [ 522.579715] RDX: 000000000000003c RSI: 00000000014a4370 RDI: 0000000000000003 [ 522.579719] RBP: 0000000000000000 R08: 00007ffc5564d474 R09: 000000000000000c [ 522.579723] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 522.579733] R13: 00000000014a4370 R14: 0000000000000003 R15: 0000000000000000 [ 522.583304] DMA free:11040kB min:204kB low:252kB high:300kB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:4kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 522.616794] systemd[1]: Started Journal Service. [ 522.726646] lowmem_reserve[]: [ 522.755632] 22918 total pagecache pages [ 522.772447] 0 pages in swap cache [ 522.776683] Swap cache stats: add 0, delete 0, find 0/0 [ 522.782071] Free swap = 0kB [ 522.785103] Total swap = 0kB [ 522.804967] 2097051 pages RAM [ 522.807156] 0 2717 2718 2718 2718 [ 522.811678] Node 0 DMA32 free:46380kB min:36200kB low:45248kB high:54296kB active_anon:47368kB inactive_anon:67252kB active_file:1208kB inactive_file:1508kB unevictable:0kB writepending:128kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7744kB pagetables:2844kB bounce:0kB free_pcp:940kB local_pcp:200kB free_cma:0kB [ 522.813010] 0 pages HighMem/MovableOnly [ 522.894773] 363849 pages reserved [ 522.904780] 0 pages cma reserved [ 522.928580] lowmem_reserve[]: 0 0 0 0 0 [ 522.933225] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 523.016636] lowmem_reserve[]: 0 0 0 0 0 [ 523.020678] Node 1 Normal free:309788kB min:53696kB low:67120kB high:80544kB active_anon:912kB inactive_anon:16556kB active_file:836kB inactive_file:3468kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:320kB pagetables:388kB bounce:0kB free_pcp:344kB local_pcp:212kB free_cma:0kB [ 523.082839] ODEBUG: assert_init not available (active state 0) object type: timer_list hint: (null) [ 523.093098] ------------[ cut here ]------------ [ 523.097879] WARNING: CPU: 1 PID: 17921 at lib/debugobjects.c:287 debug_print_object.cold+0xa7/0xdb [ 523.106630] lowmem_reserve[]: [ 523.106979] Kernel panic - not syncing: panic_on_warn set ... [ 523.106979] [ 523.106982] 0 0 [ 523.110085] CPU: 1 PID: 17921 Comm: syz-executor.1 Not tainted 4.14.232-syzkaller #0 [ 523.126625] 0 [ 523.127607] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 523.127613] 0 [ 523.129395] Call Trace: [ 523.143208] dump_stack+0x1b2/0x281 [ 523.146622] 0 [ 523.146830] panic+0x1f9/0x42d [ 523.146839] ? add_taint.cold+0x16/0x16 [ 523.148715] Node 0 [ 523.151893] ? debug_print_object.cold+0xa7/0xdb [ 523.155926] DMA: [ 523.158148] ? debug_print_object.cold+0xa7/0xdb [ 523.158155] __warn.cold+0x20/0x44 [ 523.158165] ? ist_end_non_atomic+0x10/0x10 [ 523.158171] ? debug_print_object.cold+0xa7/0xdb [ 523.158178] report_bug+0x208/0x250 [ 523.158189] do_error_trap+0x195/0x2d0 [ 523.158197] ? math_error+0x2d0/0x2d0 [ 523.158212] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 523.186644] 3*4kB [ 523.190039] invalid_op+0x1b/0x40 [ 523.193848] (UME) [ 523.198693] RIP: 0010:debug_print_object.cold+0xa7/0xdb [ 523.198699] RSP: 0018:ffff8881dbde7248 EFLAGS: 00010086 [ 523.198705] RAX: 0000000000000061 RBX: 0000000000000005 RCX: 0000000000000000 [ 523.198709] RDX: 0000000000000000 RSI: ffffffff878bbbc0 RDI: ffffed103b7bce3f [ 523.198712] RBP: ffffffff878b6e80 R08: 0000000000000061 R09: 0000000000000001 [ 523.198716] R10: 0000000000000000 R11: ffff88808d898400 R12: 0000000000000000 [ 523.198720] R13: 0000000000000000 R14: ffff888059916ef0 R15: 1ffff1103b7bce52 [ 523.198737] ? debug_print_object.cold+0xa7/0xdb [ 523.216664] 4*8kB [ 523.217169] debug_object_assert_init+0x1d3/0x2d0 [ 523.224444] (UM) [ 523.231748] ? debug_object_active_state+0x330/0x330 [ 523.231757] ? rtnl_newlink+0x14ff/0x1860 [ 523.231763] ? rtnetlink_rcv_msg+0x3be/0xb10 [ 523.231771] ? netlink_rcv_skb+0x125/0x390 [ 523.231782] ? entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 523.231796] del_timer+0x5d/0xe0 [ 523.266639] 5*16kB [ 523.267569] ? process_timeout+0x20/0x20 [ 523.272659] (ME) [ 523.276806] try_to_grab_pending+0x243/0x610 [ 523.276818] __cancel_work_timer+0x90/0x460 [ 523.276826] ? work_on_cpu_safe+0x70/0x70 [ 523.276839] ? batadv_tvlv_handler_get+0x1db/0x2b0 [ 523.276851] batadv_nc_mesh_free+0x41/0x120 [ 523.296625] 5*32kB [ 523.300430] batadv_mesh_free+0x70/0x150 [ 523.302474] (UME) [ 523.306873] batadv_mesh_init+0x561/0x630 [ 523.306882] batadv_softif_init_late+0xa26/0xc90 [ 523.306890] ? batadv_get_strings+0x40/0x40 [ 523.306896] ? dev_valid_name+0x1a0/0x1a0 [ 523.306905] ? batadv_get_strings+0x40/0x40 [ 523.306916] register_netdevice+0x291/0xe40 [ 523.326630] 7*64kB [ 523.326967] ? netdev_change_features+0xa0/0xa0 [ 523.331006] (UME) [ 523.333147] ? rtnl_create_link+0x129/0x890 [ 523.346627] 3*128kB [ 523.350472] rtnl_newlink+0x14ff/0x1860 [ 523.354769] (UME) [ 523.359078] ? rtnl_newlink+0x43d/0x1860 [ 523.359087] ? __lock_acquire+0x5fc/0x3f20 [ 523.359100] ? trace_hardirqs_on+0x10/0x10 [ 523.359107] ? rtnl_dellink+0x6a0/0x6a0 [ 523.359117] ? trace_hardirqs_on+0x10/0x10 [ 523.376625] 5*256kB [ 523.378752] ? __read_once_size_nocheck.constprop.0+0x10/0x10 [ 523.381424] (UE) [ 523.385473] ? deref_stack_reg+0x124/0x1a0 [ 523.396645] 3*512kB [ 523.397981] ? lock_acquire+0x170/0x3f0 [ 523.402168] (UME) [ 523.404484] ? lock_downgrade+0x740/0x740 [ 523.426623] 3*1024kB (UME) [ 523.429389] ? rtnl_dellink+0x6a0/0x6a0 [ 523.429398] rtnetlink_rcv_msg+0x3be/0xb10 [ 523.432318] 2*2048kB [ 523.436285] ? rtnl_calcit.isra.0+0x3a0/0x3a0 [ 523.448364] ? __netlink_lookup+0x345/0x5d0 [ 523.452789] netlink_rcv_skb+0x125/0x390 [ 523.456638] (UE) 0*4096kB [ 523.457122] ? rtnl_calcit.isra.0+0x3a0/0x3a0 [ 523.457133] ? netlink_ack+0x9a0/0x9a0 [ 523.459966] = 11100kB [ 523.464454] netlink_unicast+0x437/0x610 [ 523.475960] ? netlink_sendskb+0xd0/0xd0 [ 523.476731] Node 0 [ 523.480016] ? __check_object_size+0x179/0x230 [ 523.480018] DMA32: 886*4kB [ 523.482247] netlink_sendmsg+0x62e/0xb80 [ 523.493785] ? nlmsg_notify+0x170/0x170 [ 523.496616] (ME) 484*8kB [ 523.497801] ? security_socket_sendmsg+0x83/0xb0 [ 523.497811] ? nlmsg_notify+0x170/0x170 [ 523.500553] (ME) [ 523.505304] sock_sendmsg+0xb5/0x100 [ 523.515010] SyS_sendto+0x1c7/0x2c0 [ 523.518631] ? SyS_getpeername+0x220/0x220 [ 523.522876] ? vm_insert_page+0x7c0/0x7c0 [ 523.526627] 158*16kB (ME) 942*32kB (UME) 54*64kB [ 523.527038] ? up_read+0x17/0x30 [ 523.527044] (UM) [ 523.531878] ? __do_page_fault+0x159/0xad0 [ 523.535227] 7*128kB [ 523.537273] ? do_syscall_64+0x4c/0x640 [ 523.537281] ? SyS_getpeername+0x220/0x220 [ 523.537289] do_syscall_64+0x1d5/0x640 [ 523.537307] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 523.556623] (U) 0*256kB [ 523.561086] RIP: 0033:0x41958c [ 523.561093] RSP: 002b:00007ffc5564d420 EFLAGS: 00000293 [ 523.563773] 0*512kB [ 523.566961] ORIG_RAX: 000000000000002c [ 523.566966] RAX: ffffffffffffffda RBX: 00000000014a4320 RCX: 000000000041958c [ 523.566970] RDX: 000000000000003c RSI: 00000000014a4370 RDI: 0000000000000003 [ 523.566974] RBP: 0000000000000000 R08: 00007ffc5564d474 R09: 000000000000000c [ 523.566978] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 523.566981] R13: 00000000014a4370 R14: 0000000000000003 R15: 0000000000000000 [ 523.572856] Kernel Offset: disabled [ 523.619030] Rebooting in 86400 seconds..