e 1 Normal: 120*4kB (ME) 67*8kB (ME) 45*16kB (ME) 22*32kB (UM) 9*64kB (UM) 1*128kB (U) 1*256kB (M) 46*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 26952kB [ 2378.221592] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2378.251140] 39723 total pagecache pages [ 2378.252542] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2378.262435] 0 pages in swap cache [ 2378.289120] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2378.289875] Swap cache stats: add 0, delete 0, find 0/0 [ 2378.318655] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2378.320967] Free swap = 0kB [ 2378.327602] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2378.350653] Total swap = 0kB [ 2378.352534] 39723 total pagecache pages [ 2378.357660] 0 pages in swap cache [ 2378.361113] Swap cache stats: add 0, delete 0, find 0/0 [ 2378.369972] 2097051 pages RAM [ 2378.391907] 0 pages HighMem/MovableOnly [ 2378.410570] Free swap = 0kB [ 2378.413064] 363848 pages reserved [ 2378.414128] Total swap = 0kB [ 2378.417064] 0 pages cma reserved [ 2378.420040] 2097051 pages RAM [ 2378.440033] Out of memory (oom_kill_allocating_task): Kill process 11713 (syz-executor.0) score 0 or sacrifice child [ 2378.442555] 0 pages HighMem/MovableOnly [ 2378.467284] Killed process 14614 (syz-executor.0) total-vm:93252kB, anon-rss:148kB, file-rss:34816kB, shmem-rss:0kB [ 2378.472553] 363848 pages reserved [ 2378.481311] 0 pages cma reserved [ 2378.537935] oom_reaper: reaped process 14614 (syz-executor.0), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 2379.190800] syz-executor.2: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2379.223266] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 2379.228428] CPU: 0 PID: 14619 Comm: syz-executor.2 Not tainted 4.14.229-syzkaller #0 [ 2379.236307] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2379.245659] Call Trace: [ 2379.248253] dump_stack+0x1b2/0x281 [ 2379.251882] warn_alloc.cold+0x96/0x1cc [ 2379.255857] ? zone_watermark_ok_safe+0x220/0x220 [ 2379.260719] __alloc_pages_nodemask+0x2127/0x2720 [ 2379.265557] ? lock_acquire+0x170/0x3f0 [ 2379.269534] ? lock_acquire+0x170/0x3f0 [ 2379.273520] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2379.278368] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2379.283820] ? __mutex_unlock_slowpath+0x75/0x770 [ 2379.288665] alloc_pages_current+0x155/0x260 [ 2379.293087] ion_page_pool_alloc+0x118/0x1b0 [ 2379.297507] ion_system_heap_allocate+0x133/0x8c0 [ 2379.302362] ? _raw_spin_unlock+0x29/0x40 [ 2379.306510] ? _ion_heap_freelist_drain+0x6e/0x410 [ 2379.311482] ? ion_system_contig_heap_create+0x130/0x130 [ 2379.316933] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2379.321946] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2379.326789] ion_alloc+0x27a/0x810 [ 2379.330333] ? ion_dma_buf_release+0x40/0x40 [ 2379.334738] ? __might_fault+0x177/0x1b0 [ 2379.338911] ion_ioctl+0xea/0x1f0 [ 2379.342359] ? ion_query_heaps+0x360/0x360 [ 2379.346605] ? _raw_spin_unlock+0x29/0x40 [ 2379.350750] ? ion_query_heaps+0x360/0x360 [ 2379.354983] do_vfs_ioctl+0x75a/0xff0 [ 2379.358786] ? ioctl_preallocate+0x1a0/0x1a0 [ 2379.363190] ? lock_downgrade+0x740/0x740 [ 2379.367340] ? __fget+0x225/0x360 [ 2379.370791] ? do_vfs_ioctl+0xff0/0xff0 [ 2379.374770] ? security_file_ioctl+0x83/0xb0 [ 2379.379180] SyS_ioctl+0x7f/0xb0 [ 2379.382558] ? do_vfs_ioctl+0xff0/0xff0 [ 2379.386547] do_syscall_64+0x1d5/0x640 [ 2379.390526] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2379.395712] RIP: 0033:0x466459 [ 2379.398899] RSP: 002b:00007fa0b5855188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2379.406607] RAX: ffffffffffffffda RBX: 000000000056c0b0 RCX: 0000000000466459 [ 2379.413875] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2379.421139] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2379.428403] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c0b0 [ 2379.435665] R13: 00007ffcdcceba8f R14: 00007fa0b5855300 R15: 0000000000022000 [ 2379.461835] Mem-Info: [ 2379.464335] active_anon:14846 inactive_anon:38503 isolated_anon:0 [ 2379.464335] active_file:5 inactive_file:1 isolated_file:1 [ 2379.464335] unevictable:0 dirty:18 writeback:0 unstable:0 [ 2379.464335] slab_reclaimable:12476 slab_unreclaimable:116741 [ 2379.464335] mapped:52819 shmem:39698 pagetables:734 bounce:0 [ 2379.464335] free:13985 free_pcp:4 free_cma:0 [ 2379.497461] Node 0 active_anon:58156kB inactive_anon:93364kB active_file:48kB inactive_file:12kB unevictable:0kB isolated(anon):0kB isolated(file):4kB mapped:160224kB dirty:68kB writeback:0kB shmem:97796kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2379.525303] Node 1 active_anon:1228kB inactive_anon:60648kB active_file:0kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:51052kB dirty:4kB writeback:0kB shmem:60996kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2379.552719] Node 0 DMA free:10976kB min:204kB low:252kB high:300kB active_anon:8kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2379.580504] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2379.586173] Node 0 DMA32 free:17664kB min:36200kB low:45248kB high:54296kB active_anon:57948kB inactive_anon:93364kB active_file:284kB inactive_file:404kB unevictable:0kB writepending:68kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:7264kB pagetables:2460kB bounce:0kB free_pcp:120kB local_pcp:0kB free_cma:0kB [ 2379.615268] lowmem_reserve[]: 0 0 0 0 0 [ 2379.619286] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2379.648987] lowmem_reserve[]: 0 0 0 0 0 [ 2379.653060] Node 1 Normal free:26728kB min:53696kB low:67120kB high:80544kB active_anon:1228kB inactive_anon:60648kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:4kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:384kB pagetables:476kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2379.686779] lowmem_reserve[]: 0 0 0 0 0 [ 2379.690794] Node 0 DMA: 15*4kB (ME) 25*8kB (UME) 20*16kB (UME) 17*32kB (UME) 14*64kB (UME) 2*128kB (M) 2*256kB (UM) 2*512kB (ME) 3*1024kB (UME) 2*2048kB (UM) 0*4096kB = 10980kB [ 2379.714086] Node 0 DMA32: 265*4kB (ME) 57*8kB (ME) 10*16kB (UME) 503*32kB (UM) 8*64kB (U) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18284kB [ 2379.727940] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2379.738772] Node 1 Normal: 40*4kB (UME) 36*8kB (UME) 7*16kB (ME) 820*32kB (UM) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 26800kB [ 2379.752179] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2379.761103] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2379.769739] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2379.778677] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2379.787365] 39756 total pagecache pages [ 2379.791341] 0 pages in swap cache [ 2379.794856] Swap cache stats: add 0, delete 0, find 0/0 [ 2379.800234] Free swap = 0kB [ 2379.803309] Total swap = 0kB [ 2379.806330] 2097051 pages RAM [ 2379.809430] 0 pages HighMem/MovableOnly [ 2379.813433] 363848 pages reserved [ 2379.816879] 0 pages cma reserved [ 2379.924980] syz-fuzzer invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 2379.939929] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 2379.962434] CPU: 1 PID: 11494 Comm: syz-fuzzer Not tainted 4.14.229-syzkaller #0 [ 2379.969985] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2379.979329] Call Trace: [ 2379.981919] dump_stack+0x1b2/0x281 [ 2379.985549] dump_header+0x178/0x82f [ 2379.989271] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2379.994390] ? ___ratelimit+0x2cd/0x530 [ 2379.998378] oom_kill_process.cold+0x10/0xa40 [ 2380.002880] out_of_memory+0xe3e/0x1190 [ 2380.006864] ? oom_killer_disable+0x1c0/0x1c0 [ 2380.011364] ? mutex_trylock+0x152/0x1a0 [ 2380.015425] __alloc_pages_nodemask+0x23e1/0x2720 [ 2380.020264] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2380.025099] alloc_pages_current+0x155/0x260 [ 2380.029487] filemap_fault+0x11a1/0x1ad0 [ 2380.033535] ext4_filemap_fault+0x84/0xb0 [ 2380.037662] __do_fault+0xfa/0x380 [ 2380.041183] __handle_mm_fault+0x2497/0x4620 [ 2380.045597] ? vm_insert_page+0x7c0/0x7c0 [ 2380.049730] ? mark_held_locks+0xa6/0xf0 [ 2380.053789] handle_mm_fault+0x455/0x9c0 [ 2380.057831] __do_page_fault+0x549/0xad0 [ 2380.061881] ? spurious_fault+0x640/0x640 [ 2380.066009] ? do_page_fault+0x60/0x500 [ 2380.069960] ? page_fault+0x2f/0x50 [ 2380.073563] page_fault+0x45/0x50 [ 2380.076993] RIP: 6453500:0x236bfb7f717 [ 2380.080862] RSP: 03e7:000000c000315e40 EFLAGS: 00000003 [ 2380.117279] Mem-Info: [ 2380.127096] active_anon:14848 inactive_anon:38502 isolated_anon:0 [ 2380.127096] active_file:17 inactive_file:16 isolated_file:0 [ 2380.127096] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2380.127096] slab_reclaimable:12486 slab_unreclaimable:116305 [ 2380.127096] mapped:52790 shmem:39699 pagetables:723 bounce:0 [ 2380.127096] free:13937 free_pcp:0 free_cma:0 [ 2380.162666] Node 0 active_anon:58168kB inactive_anon:93360kB active_file:60kB inactive_file:60kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:160100kB dirty:0kB writeback:0kB shmem:97800kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2380.165884] syz-executor.0: [ 2380.190429] syz-executor.2: [ 2380.192689] Node 1 active_anon:1224kB inactive_anon:60648kB active_file:8kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:51060kB dirty:0kB writeback:0kB shmem:60996kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2380.198238] page allocation failure: order:0 [ 2380.226054] Node 0 [ 2380.227315] page allocation failure: order:0 [ 2380.230469] DMA free:10960kB min:204kB low:252kB high:300kB active_anon:8kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2380.242943] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 2380.266621] lowmem_reserve[]: [ 2380.269499] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 2380.273790] 0 [ 2380.276903] (null) [ 2380.287967] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 2380.291401] 2717 2718 2718 2718 [ 2380.293178] (null) [ 2380.296517] Node 0 [ 2380.298646] syz-executor.2 cpuset= [ 2380.298658] DMA32 free:17988kB min:36200kB low:45248kB high:54296kB active_anon:58160kB inactive_anon:93360kB active_file:60kB inactive_file:60kB unevictable:0kB writepending:0kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:7264kB pagetables:2416kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2380.298662] lowmem_reserve[]: [ 2380.300876] / [ 2380.312012] 0 [ 2380.334367] CPU: 0 PID: 14614 Comm: syz-executor.0 Not tainted 4.14.229-syzkaller #0 [ 2380.342956] 0 [ 2380.346915] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2380.346922] Call Trace: [ 2380.348706] 0 [ 2380.358052] dump_stack+0x1b2/0x281 [ 2380.358067] warn_alloc.cold+0x96/0x1cc [ 2380.358078] ? zone_watermark_ok_safe+0x220/0x220 [ 2380.358088] ? usleep_range+0x130/0x130 [ 2380.358096] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 2380.358109] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 2380.358120] ? run_timer_softirq+0x5a0/0x5a0 [ 2380.358135] __alloc_pages_nodemask+0x2127/0x2720 [ 2380.358149] ? lock_acquire+0x170/0x3f0 [ 2380.358164] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2380.368075] 0 [ 2380.370230] ? ion_page_pool_alloc+0x9e/0x1b0 [ 2380.375096] 0 [ 2380.379017] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2380.391591] mems_allowed=0-1 [ 2380.393540] alloc_pages_current+0x155/0x260 [ 2380.413422] ion_page_pool_alloc+0x118/0x1b0 [ 2380.413433] ion_system_heap_allocate+0x133/0x8c0 [ 2380.413442] ? ion_alloc+0x187/0x810 [ 2380.413454] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2380.413465] ? ion_system_contig_heap_create+0x130/0x130 [ 2380.415246] Node 0 [ 2380.420678] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2380.449722] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2380.451925] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2380.454170] lowmem_reserve[]: [ 2380.459138] ion_alloc+0x204/0x810 [ 2380.495586] ? ion_dma_buf_release+0x40/0x40 [ 2380.500006] ? __might_fault+0x177/0x1b0 [ 2380.504063] ion_ioctl+0xea/0x1f0 [ 2380.507513] ? ion_query_heaps+0x360/0x360 [ 2380.511745] ? ion_query_heaps+0x360/0x360 [ 2380.515968] do_vfs_ioctl+0x75a/0xff0 [ 2380.519752] ? ioctl_preallocate+0x1a0/0x1a0 [ 2380.524147] ? lock_downgrade+0x740/0x740 [ 2380.528293] ? __fget+0x225/0x360 [ 2380.531758] ? do_vfs_ioctl+0xff0/0xff0 [ 2380.535716] ? security_file_ioctl+0x83/0xb0 [ 2380.540104] SyS_ioctl+0x7f/0xb0 [ 2380.543457] ? do_vfs_ioctl+0xff0/0xff0 [ 2380.547433] do_syscall_64+0x1d5/0x640 [ 2380.549616] 0 0 0 [ 2380.551313] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2380.551322] RIP: 0033:0x466459 [ 2380.553500] 0 [ 2380.558634] RSP: 002b:00007fbc80168188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2380.561808] 0 [ 2380.563588] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 2380.563593] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2380.563598] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2380.563603] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2380.563608] R13: 00007ffc508a7f1f R14: 00007fbc80168300 R15: 0000000000022000 [ 2380.571457] Mem-Info: [ 2380.573202] CPU: 1 PID: 14619 Comm: syz-executor.2 Not tainted 4.14.229-syzkaller #0 [ 2380.580453] active_anon:14848 inactive_anon:38502 isolated_anon:0 [ 2380.580453] active_file:17 inactive_file:16 isolated_file:0 [ 2380.580453] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2380.580453] slab_reclaimable:12486 slab_unreclaimable:116305 [ 2380.580453] mapped:52790 shmem:39699 pagetables:723 bounce:0 [ 2380.580453] free:13937 free_pcp:0 free_cma:0 [ 2380.588126] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2380.588130] Call Trace: [ 2380.588149] dump_stack+0x1b2/0x281 [ 2380.588163] warn_alloc.cold+0x96/0x1cc [ 2380.595436] Node 0 active_anon:58168kB inactive_anon:93360kB active_file:60kB inactive_file:60kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:160100kB dirty:0kB writeback:0kB shmem:97800kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2380.602755] ? zone_watermark_ok_safe+0x220/0x220 [ 2380.602765] ? usleep_range+0x130/0x130 [ 2380.602776] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 2380.610033] Node 1 active_anon:1224kB inactive_anon:60648kB active_file:8kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:51060kB dirty:0kB writeback:0kB shmem:60996kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2380.612415] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 2380.612425] ? run_timer_softirq+0x5a0/0x5a0 [ 2380.612441] __alloc_pages_nodemask+0x2127/0x2720 [ 2380.620300] Node 0 [ 2380.653370] ? lock_acquire+0x170/0x3f0 [ 2380.653390] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2380.662791] DMA free:10960kB min:204kB low:252kB high:300kB active_anon:8kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2380.665319] ? ion_page_pool_alloc+0x9e/0x1b0 [ 2380.668912] lowmem_reserve[]: [ 2380.672873] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2380.672896] alloc_pages_current+0x155/0x260 [ 2380.700608] 0 [ 2380.705408] ion_page_pool_alloc+0x118/0x1b0 [ 2380.705420] ion_system_heap_allocate+0x133/0x8c0 [ 2380.709366] 2717 [ 2380.714453] ? _raw_spin_unlock+0x29/0x40 [ 2380.714462] ? _ion_heap_freelist_drain+0x6e/0x410 [ 2380.714473] ? ion_system_contig_heap_create+0x130/0x130 [ 2380.741447] 2718 [ 2380.746430] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2380.746441] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2380.746452] ion_alloc+0x27a/0x810 [ 2380.750835] 2718 [ 2380.755663] ? ion_dma_buf_release+0x40/0x40 [ 2380.755676] ? __might_fault+0x177/0x1b0 [ 2380.757886] 2718 [ 2380.761849] ion_ioctl+0xea/0x1f0 [ 2380.792268] ? ion_query_heaps+0x360/0x360 [ 2380.792283] ? _raw_spin_unlock+0x29/0x40 [ 2380.792292] ? ion_query_heaps+0x360/0x360 [ 2380.792302] do_vfs_ioctl+0x75a/0xff0 [ 2380.792314] ? ioctl_preallocate+0x1a0/0x1a0 [ 2380.796799] Node 0 [ 2380.799894] ? lock_downgrade+0x740/0x740 [ 2380.805387] DMA32 free:17988kB min:36200kB low:45248kB high:54296kB active_anon:58160kB inactive_anon:93360kB active_file:60kB inactive_file:60kB unevictable:0kB writepending:0kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:7264kB pagetables:2416kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2380.809739] ? __fget+0x225/0x360 [ 2380.811521] lowmem_reserve[]: [ 2380.815935] ? do_vfs_ioctl+0xff0/0xff0 [ 2380.815946] ? security_file_ioctl+0x83/0xb0 [ 2380.815959] SyS_ioctl+0x7f/0xb0 [ 2380.815968] ? do_vfs_ioctl+0xff0/0xff0 [ 2380.815982] do_syscall_64+0x1d5/0x640 [ 2380.820803] 0 [ 2380.822882] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2380.822890] RIP: 0033:0x466459 [ 2380.822897] RSP: 002b:00007fa0b5855188 EFLAGS: 00000246 [ 2380.827038] 0 [ 2380.831948] ORIG_RAX: 0000000000000010 [ 2380.837422] 0 [ 2380.839423] RAX: ffffffffffffffda RBX: 000000000056c0b0 RCX: 0000000000466459 [ 2380.844433] 0 [ 2380.849240] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2380.852772] 0 [ 2380.854797] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2380.863214] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c0b0 [ 2380.863220] R13: 00007ffcdcceba8f R14: 00007fa0b5855300 R15: 0000000000022000 [ 2380.869935] Node 0 [ 2380.872995] Node 1 Normal free:26800kB min:53696kB low:67120kB high:80544kB active_anon:1224kB inactive_anon:60648kB active_file:16kB inactive_file:0kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:384kB pagetables:476kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2380.873015] lowmem_reserve[]: 0 0 0 0 0 [ 2380.873035] Node 0 DMA: 16*4kB (UME) 24*8kB (ME) 19*16kB (UME) 17*32kB (UME) 14*64kB (UME) 2*128kB (M) 2*256kB (UM) 2*512kB (ME) 3*1024kB (UME) 2*2048kB (UM) 0*4096kB = 10960kB [ 2380.873104] Node 0 DMA32: 265*4kB (ME) 57*8kB (ME) 9*16kB (ME) 498*32kB (UM) 9*64kB (U) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18172kB [ 2380.873163] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2380.873208] Node 1 Normal: 40*4kB (UME) 36*8kB (UME) 7*16kB (ME) 820*32kB (UM) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 26800kB [ 2380.873263] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2380.873270] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2380.886372] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2380.889850] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2380.892066] lowmem_reserve[]: [ 2380.896234] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2380.896239] 39732 total pagecache pages [ 2380.896248] 0 pages in swap cache [ 2380.896252] Swap cache stats: add 0, delete 0, find 0/0 [ 2380.896256] Free swap = 0kB [ 2380.896259] Total swap = 0kB [ 2380.896266] 2097051 pages RAM [ 2380.896269] 0 pages HighMem/MovableOnly [ 2380.896272] 363848 pages reserved [ 2380.896275] 0 pages cma reserved [ 2380.896281] Out of memory (oom_kill_allocating_task): Kill process 11494 (syz-fuzzer) score 0 or sacrifice child [ 2380.896339] Killed process 14620 (syz-executor.3) total-vm:84924kB, anon-rss:64kB, file-rss:0kB, shmem-rss:0kB [ 2381.225000] 0 0 0 0 0 [ 2381.227528] Node 1 Normal free:26800kB min:53696kB low:67120kB high:80544kB active_anon:1224kB inactive_anon:60648kB active_file:8kB inactive_file:4kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:384kB pagetables:476kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2381.231304] oom_reaper: reaped process 14620 (syz-executor.3), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 2381.259809] lowmem_reserve[]: 0 0 0 0 0 [ 2381.269978] Node 0 DMA: 16*4kB (UME) 24*8kB (ME) 19*16kB (UME) 17*32kB (UME) 14*64kB (UME) 2*128kB (M) 2*256kB (UM) 2*512kB (ME) 3*1024kB (UME) 2*2048kB (UM) 0*4096kB = 10960kB [ 2381.289161] Node 0 DMA32: 265*4kB (ME) 57*8kB (ME) 9*16kB (ME) 499*32kB (UM) 9*64kB (U) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18204kB [ 2381.306420] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2381.317686] Node 1 Normal: 9*4kB (UME) 13*8kB (UE) 1*16kB (E) 817*32kB (U) 819*64kB (UM) 1*128kB (M) 0*256kB 0*512kB 89*1024kB (UM) 3*2048kB (U) 0*4096kB = 176124kB [ 2381.336549] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2381.346513] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2381.359005] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2381.368804] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2381.381654] 40916 total pagecache pages [ 2381.386231] 0 pages in swap cache [ 2381.402273] Swap cache stats: add 0, delete 0, find 0/0 [ 2381.407649] Free swap = 0kB [ 2381.410660] Total swap = 0kB [ 2381.435394] 2097051 pages RAM [ 2381.438528] 0 pages HighMem/MovableOnly [ 2381.442782] 363848 pages reserved [ 2381.446233] 0 pages cma reserved [ 2385.157557] IPVS: ftp: loaded support on port[0] = 21 [ 2385.301607] chnl_net:caif_netlink_parms(): no params data found [ 2385.447035] bridge0: port 1(bridge_slave_0) entered blocking state [ 2385.453861] bridge0: port 1(bridge_slave_0) entered disabled state [ 2385.460751] device bridge_slave_0 entered promiscuous mode [ 2385.468487] bridge0: port 2(bridge_slave_1) entered blocking state [ 2385.474934] bridge0: port 2(bridge_slave_1) entered disabled state [ 2385.481836] device bridge_slave_1 entered promiscuous mode [ 2385.500450] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 2385.509362] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 2385.528554] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 2385.535718] team0: Port device team_slave_0 added [ 2385.541222] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 2385.548621] team0: Port device team_slave_1 added [ 2385.565632] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2385.571932] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2385.597190] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2385.608118] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2385.614488] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2385.639866] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2385.650755] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 2385.658395] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 2385.679301] device hsr_slave_0 entered promiscuous mode [ 2385.684973] device hsr_slave_1 entered promiscuous mode [ 2385.690873] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 2385.698051] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 2385.768265] bridge0: port 2(bridge_slave_1) entered blocking state [ 2385.774658] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2385.781227] bridge0: port 1(bridge_slave_0) entered blocking state [ 2385.787786] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2385.817128] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 2385.823685] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2385.831671] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 2385.840858] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2385.848808] bridge0: port 1(bridge_slave_0) entered disabled state [ 2385.855647] bridge0: port 2(bridge_slave_1) entered disabled state [ 2385.866844] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 2385.873167] 8021q: adding VLAN 0 to HW filter on device team0 [ 2385.882507] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2385.890090] bridge0: port 1(bridge_slave_0) entered blocking state [ 2385.896498] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2385.912477] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2385.920165] bridge0: port 2(bridge_slave_1) entered blocking state [ 2385.926565] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2385.934249] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2385.942064] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2385.952337] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2385.966355] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 2385.976272] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2385.987850] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 2385.994416] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2386.002047] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2386.009688] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2386.021205] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 2386.029862] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2386.037043] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2386.047323] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2386.098975] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 2386.110002] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2386.140007] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 2386.147544] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 2386.154754] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 2386.164465] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2386.173357] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2386.180160] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2386.189193] device veth0_vlan entered promiscuous mode [ 2386.197997] device veth1_vlan entered promiscuous mode [ 2386.204245] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 2386.213173] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 2386.225176] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 2386.234335] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2386.241465] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 2386.249223] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2386.258821] device veth0_macvtap entered promiscuous mode [ 2386.265344] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 2386.273903] device veth1_macvtap entered promiscuous mode [ 2386.282320] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 2386.289519] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 2386.298929] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2386.308633] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 2386.317520] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2386.327308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2386.336867] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2386.346757] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2386.355934] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2386.365726] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2386.374891] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2386.384649] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2386.395154] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 2386.402346] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2386.409460] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2386.417612] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2386.427544] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2386.437503] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2386.446964] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2386.456996] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2386.466156] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2386.475910] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2386.485075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2386.494842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2386.505143] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 2386.512156] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2386.519079] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2386.527239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2387.222016] Bluetooth: hci6 command 0x0409 tx timeout [ 2389.301683] Bluetooth: hci6 command 0x041b tx timeout [ 2390.999929] IPVS: ftp: loaded support on port[0] = 21 [ 2391.115240] chnl_net:caif_netlink_parms(): no params data found [ 2391.169141] bridge0: port 1(bridge_slave_0) entered blocking state [ 2391.175564] bridge0: port 1(bridge_slave_0) entered disabled state [ 2391.183190] device bridge_slave_0 entered promiscuous mode [ 2391.189749] bridge0: port 2(bridge_slave_1) entered blocking state [ 2391.196487] bridge0: port 2(bridge_slave_1) entered disabled state [ 2391.204219] device bridge_slave_1 entered promiscuous mode [ 2391.222346] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 2391.231025] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 2391.251826] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 2391.259007] team0: Port device team_slave_0 added [ 2391.265141] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 2391.272558] team0: Port device team_slave_1 added [ 2391.289737] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2391.296305] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2391.321952] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2391.332850] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2391.339082] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2391.364309] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2391.374943] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 2391.381799] Bluetooth: hci6 command 0x040f tx timeout [ 2391.387562] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 2391.409380] device hsr_slave_0 entered promiscuous mode [ 2391.415238] device hsr_slave_1 entered promiscuous mode [ 2391.421143] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 2391.428851] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 2391.500571] bridge0: port 2(bridge_slave_1) entered blocking state [ 2391.506943] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2391.513589] bridge0: port 1(bridge_slave_0) entered blocking state [ 2391.519934] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2391.550476] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 2391.557582] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2391.566701] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 2391.576354] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2391.584185] bridge0: port 1(bridge_slave_0) entered disabled state [ 2391.590779] bridge0: port 2(bridge_slave_1) entered disabled state [ 2391.600760] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 2391.606932] 8021q: adding VLAN 0 to HW filter on device team0 [ 2391.615678] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2391.623744] bridge0: port 1(bridge_slave_0) entered blocking state [ 2391.630166] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2391.652602] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2391.660179] bridge0: port 2(bridge_slave_1) entered blocking state [ 2391.666628] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2391.675105] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2391.682910] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2391.690442] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2391.698493] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2391.706630] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2391.717165] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 2391.723597] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2391.736888] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 2391.745808] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2391.752860] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2391.764173] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2391.816932] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 2391.826718] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2391.859073] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 2391.866609] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 2391.874383] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 2391.885162] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2391.892679] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2391.899488] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2391.910385] device veth0_vlan entered promiscuous mode [ 2391.919737] device veth1_vlan entered promiscuous mode [ 2391.925914] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 2391.934790] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 2391.947788] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 2391.956982] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2391.964417] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 2391.971845] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2391.982285] device veth0_macvtap entered promiscuous mode [ 2391.988310] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 2391.997043] device veth1_macvtap entered promiscuous mode [ 2392.005975] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 2392.015433] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 2392.025914] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2392.036405] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2392.045996] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2392.056220] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2392.065883] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2392.076630] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2392.085835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2392.095781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2392.105215] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2392.114995] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2392.125523] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2392.134043] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 2392.140987] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2392.150862] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2392.160394] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2392.171063] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2392.180606] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2392.191518] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2392.200620] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2392.210352] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2392.219498] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2392.229225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2392.238372] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2392.248120] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2392.258200] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 2392.265257] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2392.272119] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2392.279799] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2393.062017] Bluetooth: hci2 command 0x0409 tx timeout [ 2393.461419] Bluetooth: hci6 command 0x0419 tx timeout 09:15:07 executing program 1: epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x2, 0x0) openat$ion(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ion\x00', 0x80040, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r2 = socket(0x1, 0xa, 0x2) r3 = accept(0xffffffffffffffff, &(0x7f0000000400)=@x25={0x9, @remote}, &(0x7f00000001c0)=0x80) getsockname$packet(r3, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000480)=0x14) accept(r2, 0x0, &(0x7f0000000240)) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000025bd7000fbdbdf25310000000c0099007f000000700000000800db00", @ANYRES32, @ANYBLOB='\b\x00R\x00', @ANYRES32, @ANYBLOB="0c009900719bc81c1100000008000300", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=r1, @ANYBLOB="f154e2d2a93e34d148a6c09ca59c65f025a5b98ef53825d7f34dfd1107fe8304b39fd35c7037ba30ed232ce2429dd243b9cfcb88137fdcd305ae1d4e874867d5ae0cb9e9bed12f8fe55102d51bd91db5370cf809f6739d1e1d1b253c05354093e4a6a31b8e89c2ef3c75ec6423a6b9b19a10bcd59586a66ba7142d00e9058f9088ba71d8cdd1d5b374149d34ec15d3ff594b3f589c329643aada581739f8c631caa1e859b1f56d898090378acaedba67d03bfa37337a6d710966b4c9632398cb1daebbead088783c6309feae2ad3ff3c639d73fac13b89ca95169f3bde273a20b668"], 0x4c}, 0x1, 0x0, 0x0, 0x4000051}, 0x4000) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x80000001, 0x13}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040)='l2tp\x00', 0xffffffffffffffff) 09:15:07 executing program 3: r0 = perf_event_open$cgroup(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1, 0x48, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1b02, 0x0, 0x7ae}, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x0) r1 = epoll_create(0x7) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000001c0)={0x20000005}) epoll_wait(r1, &(0x7f0000000100)=[{}], 0x1, 0x0) 09:15:07 executing program 0: openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000180)={0x80000001, 0x13, 0x1}) 09:15:08 executing program 5: epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x2, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000180)={0x80000001, 0x1b}) 09:15:08 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000180)={0x80000001, 0x13}) ioctl$NS_GET_USERNS(0xffffffffffffffff, 0xb701, 0x0) r1 = perf_event_open$cgroup(&(0x7f0000000040)={0x5, 0x70, 0x7e, 0x0, 0x1, 0x40, 0x0, 0x5, 0x208, 0x4, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_bp, 0x800, 0x0, 0x677, 0x8, 0x0, 0x8, 0x6}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x9) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f00000000c0)=0x3) 09:15:08 executing program 4: r0 = accept$packet(0xffffffffffffffff, 0x0, &(0x7f0000000080)) getsockname$packet(r0, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000100)=0x14) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x103002, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000040)={0x6}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'team0\x00', 0x0}) sendto$packet(r0, &(0x7f00000001c0)="0316768776f4de335fdfa0046ba92e0a290b9282c428f5ff739e3bcc6a3af8fa22f778c114d5fc55ecd2455fc64e8a9e16dc924a1beea1dd50186671ba2d007e94639f35c9ef12561b3e54d58dc2c970c3c97c3726f1e6ac207395814452399b6e4194caa4b239aa6869af39dc926ff96cf40f8c47584298f7c262eee144bcd9567d7ebc12a0a1d06e33ae0f88b8ea423a39f6c398cd77754778c5b47b2706f5cfc45df42b2917884889cb6b0efedac417c1e33044cedf89b40adef7d3f9195de75165c280fb38a1a6f8e45d452a972597e9ec96188aeaea1c002cef0d91694c8133e0a1fab4d20fb5d858", 0xeb, 0x20000001, &(0x7f0000000300)={0x11, 0x1c, r3, 0x1, 0x9, 0x6, @local}, 0x14) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0x80000001, 0x13}) 09:15:08 executing program 3: r0 = perf_event_open$cgroup(&(0x7f0000000000)={0x1, 0x70, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = epoll_create(0x7) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140)='nl80211\x00', 0xffffffffffffffff) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000580)='/dev/btrfs-control\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r3, 0x89fa, &(0x7f0000003dc0)={'ip6gre0\x00', 0x0}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000200)={0x4000}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000001c0)={0x20000005}) r4 = gettid() sched_rr_get_interval(r4, &(0x7f0000000080)) r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000580)='/dev/btrfs-control\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r5, 0x2, r5) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r6, 0x89fa, &(0x7f0000003dc0)={'ip6gre0\x00', 0x0}) kcmp$KCMP_EPOLL_TFD(r4, 0xffffffffffffffff, 0x7, r1, &(0x7f0000000180)={r5, r6, 0x5}) epoll_wait(r1, &(0x7f0000000100)=[{}], 0x1, 0x0) r7 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000580)='/dev/btrfs-control\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r7, 0x2, r7) perf_event_open$cgroup(&(0x7f0000000080)={0x5, 0x70, 0x9, 0x4, 0xeb, 0x7c, 0x0, 0x28, 0x4001, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0xffffffb7, 0x1, @perf_bp={&(0x7f0000000240), 0xb}, 0x40c0, 0x7, 0x1, 0x2, 0x0, 0x9, 0x8003}, r7, 0x1000000000000010, 0xffffffffffffffff, 0x3) 09:15:08 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x89fa, &(0x7f0000003dc0)={'ip6gre0\x00', 0x0}) syz_genetlink_get_family_id$gtp(&(0x7f0000000080)='gtp\x00', r0) r1 = perf_event_open$cgroup(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r2 = epoll_create(0x7) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000001c0)={0x20000005}) epoll_wait(r2, &(0x7f0000000100)=[{}], 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) 09:15:08 executing program 3: r0 = perf_event_open$cgroup(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffe, 0x0, 0x80000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x0, 0x1, 0x80, 0x80, 0x0, 0x0, 0x1010, 0x2, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, @perf_config_ext={0x3fffffffc0, 0xffff}, 0x8b, 0x9, 0x0, 0x9, 0x80000001, 0x101, 0x6}, 0x0, 0xc, 0xffffffffffffffff, 0x1) r1 = epoll_create(0x7) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000001c0)={0x20000005}) epoll_wait(r1, &(0x7f0000000100)=[{}], 0x1, 0x0) [ 2393.827796] syz-executor.0: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2393.827831] syz-executor.1: [ 2393.849987] syz-executor.2: [ 2393.850269] syz-executor.5: [ 2393.857192] syz-executor.4: [ 2393.867843] page allocation failure: order:4 [ 2393.870089] page allocation failure: order:4 [ 2393.870992] page allocation failure: order:4 [ 2393.884993] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 2393.885514] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 2393.890745] page allocation failure: order:4 [ 2393.897633] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 2393.911395] (null) [ 2393.913662] syz-executor.0 cpuset= [ 2393.920898] (null) [ 2393.927551] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 2393.930025] / [ 2393.935260] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2393.945164] (null) [ 2393.949608] CPU: 0 PID: 15129 Comm: syz-executor.2 Not tainted 4.14.229-syzkaller #0 [ 2393.950740] mems_allowed=0-1 [ 2393.957484] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2393.957488] Call Trace: [ 2393.957505] dump_stack+0x1b2/0x281 09:15:08 executing program 3: r0 = accept$packet(0xffffffffffffffff, 0x0, &(0x7f0000000080)) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f00000000c0)=@req3={0xfffffe00, 0x0, 0x5, 0x0, 0x3, 0x6, 0x8}, 0x1c) r1 = perf_event_open$cgroup(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r2 = epoll_create(0x7) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000001c0)={0x20000005}) epoll_wait(r2, &(0x7f0000000100)=[{}], 0x1, 0x0) [ 2393.957519] warn_alloc.cold+0x96/0x1cc [ 2393.957530] ? zone_watermark_ok_safe+0x220/0x220 [ 2393.957555] __alloc_pages_nodemask+0x2127/0x2720 [ 2393.957567] ? _raw_spin_unlock_irq+0x5a/0x80 [ 2393.957577] ? finish_task_switch+0x178/0x610 [ 2393.957583] ? finish_task_switch+0x14d/0x610 [ 2393.957595] ? lock_acquire+0x170/0x3f0 [ 2393.957610] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2393.957625] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2393.966874] syz-executor.4 cpuset= [ 2393.970091] ? __mutex_unlock_slowpath+0x75/0x770 [ 2393.970104] ? alloc_pages_current+0x84/0x260 [ 2393.970114] alloc_pages_current+0x155/0x260 [ 2393.970126] ion_page_pool_alloc+0x118/0x1b0 [ 2393.974711] syz-executor.5 cpuset= [ 2393.976310] ion_system_heap_allocate+0x133/0x8c0 [ 2393.976322] ? ion_alloc+0x187/0x810 [ 2393.976334] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2393.976345] ? ion_system_contig_heap_create+0x130/0x130 [ 2393.984766] / [ 2393.985136] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2393.994544] / [ 2393.998930] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2394.010219] mems_allowed=0-1 [ 2394.012214] ion_alloc+0x204/0x810 [ 2394.012229] ? ion_dma_buf_release+0x40/0x40 [ 2394.012247] ? __might_fault+0x177/0x1b0 [ 2394.012258] ion_ioctl+0xea/0x1f0 [ 2394.012267] ? ion_query_heaps+0x360/0x360 [ 2394.012281] ? ion_query_heaps+0x360/0x360 [ 2394.012292] do_vfs_ioctl+0x75a/0xff0 [ 2394.012302] ? ioctl_preallocate+0x1a0/0x1a0 [ 2394.012310] ? lock_downgrade+0x740/0x740 [ 2394.012323] ? __fget+0x225/0x360 [ 2394.012332] ? do_vfs_ioctl+0xff0/0xff0 [ 2394.012342] ? security_file_ioctl+0x83/0xb0 [ 2394.012351] SyS_ioctl+0x7f/0xb0 [ 2394.012358] ? do_vfs_ioctl+0xff0/0xff0 [ 2394.012368] do_syscall_64+0x1d5/0x640 [ 2394.012382] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2394.012390] RIP: 0033:0x466459 [ 2394.012395] RSP: 002b:00007fa0b5897188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2394.012405] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 2394.012411] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2394.012416] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2394.012422] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2394.012427] R13: 00007ffcdcceba8f R14: 00007fa0b5897300 R15: 0000000000022000 [ 2394.033169] syz-executor.1 cpuset= [ 2394.036503] CPU: 1 PID: 15132 Comm: syz-executor.0 Not tainted 4.14.229-syzkaller #0 [ 2394.048302] / [ 2394.051764] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2394.067236] mems_allowed=0-1 [ 2394.069350] Call Trace: [ 2394.069371] dump_stack+0x1b2/0x281 [ 2394.069385] warn_alloc.cold+0x96/0x1cc [ 2394.069398] ? zone_watermark_ok_safe+0x220/0x220 [ 2394.168134] warn_alloc_show_mem: 1 callbacks suppressed [ 2394.168138] Mem-Info: [ 2394.170077] __alloc_pages_nodemask+0x2127/0x2720 [ 2394.170089] ? io_schedule_timeout+0x140/0x140 [ 2394.170104] ? lock_acquire+0x170/0x3f0 [ 2394.198112] active_anon:15483 inactive_anon:38507 isolated_anon:0 [ 2394.198112] active_file:1599 inactive_file:5677 isolated_file:0 [ 2394.198112] unevictable:0 dirty:73 writeback:0 unstable:0 [ 2394.198112] slab_reclaimable:12632 slab_unreclaimable:114891 [ 2394.198112] mapped:57735 shmem:39703 pagetables:848 bounce:0 [ 2394.198112] free:389863 free_pcp:128 free_cma:0 [ 2394.203267] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2394.203286] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2394.203298] ? __mutex_unlock_slowpath+0x75/0x770 [ 2394.203315] alloc_pages_current+0x155/0x260 [ 2394.216083] Node 0 active_anon:60872kB inactive_anon:93380kB active_file:4552kB inactive_file:20476kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:189964kB dirty:280kB writeback:0kB shmem:97816kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 14336kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2394.217463] ion_page_pool_alloc+0x118/0x1b0 [ 2394.217474] ion_system_heap_allocate+0x133/0x8c0 [ 2394.217485] ? ion_alloc+0x187/0x810 [ 2394.217499] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2394.224666] Node 1 active_anon:1060kB inactive_anon:60648kB active_file:1844kB inactive_file:2232kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:40976kB dirty:12kB writeback:0kB shmem:60996kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2394.227626] ? ion_system_contig_heap_create+0x130/0x130 [ 2394.227638] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2394.227650] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2394.227661] ion_alloc+0x204/0x810 [ 2394.250321] Node 0 [ 2394.253600] ? ion_dma_buf_release+0x40/0x40 [ 2394.253614] ? __might_fault+0x177/0x1b0 [ 2394.253627] ion_ioctl+0xea/0x1f0 [ 2394.253637] ? ion_query_heaps+0x360/0x360 [ 2394.253661] ? ion_query_heaps+0x360/0x360 [ 2394.368033] DMA free:11144kB min:204kB low:252kB high:300kB active_anon:2056kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2394.381079] do_vfs_ioctl+0x75a/0xff0 [ 2394.381094] ? ioctl_preallocate+0x1a0/0x1a0 [ 2394.381103] ? lock_downgrade+0x740/0x740 [ 2394.381115] ? __fget+0x225/0x360 [ 2394.381124] ? do_vfs_ioctl+0xff0/0xff0 [ 2394.381138] ? security_file_ioctl+0x83/0xb0 [ 2394.416280] lowmem_reserve[]: [ 2394.418266] SyS_ioctl+0x7f/0xb0 09:15:08 executing program 3: getpeername$l2tp6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, &(0x7f00000000c0)=0x20) r0 = perf_event_open$cgroup(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = epoll_create(0x7) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000001c0)={0x20000005}) epoll_wait(r1, &(0x7f0000000100)=[{}], 0x1, 0x0) [ 2394.418278] ? do_vfs_ioctl+0xff0/0xff0 [ 2394.418290] do_syscall_64+0x1d5/0x640 [ 2394.418305] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2394.435934] 0 [ 2394.448358] RIP: 0033:0x466459 [ 2394.448363] RSP: 002b:00007fbc80168188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2394.448375] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 2394.448381] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2394.448386] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2394.448391] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2394.448396] R13: 00007ffc508a7f1f R14: 00007fbc80168300 R15: 0000000000022000 [ 2394.483793] mems_allowed=0-1 [ 2394.499909] CPU: 0 PID: 15134 Comm: syz-executor.1 Not tainted 4.14.229-syzkaller #0 [ 2394.553044] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2394.562376] Call Trace: [ 2394.564958] dump_stack+0x1b2/0x281 [ 2394.568568] warn_alloc.cold+0x96/0x1cc [ 2394.572524] ? zone_watermark_ok_safe+0x220/0x220 [ 2394.577354] __alloc_pages_nodemask+0x2127/0x2720 [ 2394.582179] ? _raw_spin_unlock_irq+0x24/0x80 [ 2394.591009] ? lock_acquire+0x170/0x3f0 [ 2394.595016] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2394.599850] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2394.605283] ? __mutex_unlock_slowpath+0x75/0x770 [ 2394.610108] alloc_pages_current+0x155/0x260 [ 2394.614501] ion_page_pool_alloc+0x118/0x1b0 [ 2394.618889] ion_system_heap_allocate+0x133/0x8c0 [ 2394.623711] ? ion_alloc+0x187/0x810 [ 2394.627405] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2394.632833] ? ion_system_contig_heap_create+0x130/0x130 [ 2394.638263] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2394.643260] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2394.648104] ion_alloc+0x204/0x810 [ 2394.651627] ? ion_dma_buf_release+0x40/0x40 [ 2394.656033] ? __might_fault+0x177/0x1b0 [ 2394.660080] ion_ioctl+0xea/0x1f0 [ 2394.663516] ? ion_query_heaps+0x360/0x360 [ 2394.667735] ? ion_query_heaps+0x360/0x360 [ 2394.671953] do_vfs_ioctl+0x75a/0xff0 [ 2394.675740] ? ioctl_preallocate+0x1a0/0x1a0 [ 2394.680137] ? lock_downgrade+0x740/0x740 [ 2394.684407] ? __fget+0x225/0x360 [ 2394.687842] ? do_vfs_ioctl+0xff0/0xff0 [ 2394.691890] ? security_file_ioctl+0x83/0xb0 [ 2394.696283] SyS_ioctl+0x7f/0xb0 [ 2394.699632] ? do_vfs_ioctl+0xff0/0xff0 [ 2394.703589] do_syscall_64+0x1d5/0x640 [ 2394.707462] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2394.712631] RIP: 0033:0x466459 [ 2394.715800] RSP: 002b:00007f10b67af188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2394.723487] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 2394.730996] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2394.738244] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2394.745494] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2394.752744] R13: 00007ffd58825dcf R14: 00007f10b67af300 R15: 0000000000022000 [ 2394.773259] CPU: 1 PID: 15124 Comm: syz-executor.5 Not tainted 4.14.229-syzkaller #0 [ 2394.781187] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2394.790542] Call Trace: [ 2394.793140] dump_stack+0x1b2/0x281 [ 2394.796773] warn_alloc.cold+0x96/0x1cc [ 2394.800877] ? zone_watermark_ok_safe+0x220/0x220 [ 2394.805763] __alloc_pages_nodemask+0x2127/0x2720 [ 2394.810749] ? lock_acquire+0x170/0x3f0 [ 2394.814748] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2394.819620] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2394.825090] ? __mutex_unlock_slowpath+0x75/0x770 [ 2394.829940] alloc_pages_current+0x155/0x260 [ 2394.834443] ion_page_pool_alloc+0x118/0x1b0 [ 2394.838872] ion_system_heap_allocate+0x133/0x8c0 [ 2394.843731] ? ion_alloc+0x187/0x810 [ 2394.847461] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2394.852934] ? ion_system_contig_heap_create+0x130/0x130 [ 2394.858395] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2394.863422] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2394.868280] ion_alloc+0x204/0x810 [ 2394.871846] ? ion_dma_buf_release+0x40/0x40 [ 2394.876277] ? __might_fault+0x177/0x1b0 [ 2394.880355] ion_ioctl+0xea/0x1f0 [ 2394.883928] ? ion_query_heaps+0x360/0x360 [ 2394.888172] ? ion_query_heaps+0x360/0x360 [ 2394.892426] do_vfs_ioctl+0x75a/0xff0 [ 2394.896244] ? ioctl_preallocate+0x1a0/0x1a0 [ 2394.900750] ? lock_downgrade+0x740/0x740 [ 2394.905028] ? __fget+0x225/0x360 [ 2394.908494] ? do_vfs_ioctl+0xff0/0xff0 [ 2394.912481] ? security_file_ioctl+0x83/0xb0 [ 2394.916893] SyS_ioctl+0x7f/0xb0 [ 2394.920255] ? do_vfs_ioctl+0xff0/0xff0 [ 2394.924228] do_syscall_64+0x1d5/0x640 [ 2394.928124] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2394.933326] RIP: 0033:0x466459 [ 2394.934374] 2717 [ 2394.936512] RSP: 002b:00007f4d0bcd5188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2394.936522] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 2394.936529] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2394.945085] 2718 [ 2394.946267] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2394.946273] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2394.946278] R13: 00007ffe1117a98f R14: 00007f4d0bcd5300 R15: 0000000000022000 [ 2394.954575] CPU: 1 PID: 15130 Comm: syz-executor.4 Not tainted 4.14.229-syzkaller #0 [ 2394.992868] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2395.002231] Call Trace: [ 2395.004852] dump_stack+0x1b2/0x281 [ 2395.008496] warn_alloc.cold+0x96/0x1cc [ 2395.012486] ? zone_watermark_ok_safe+0x220/0x220 [ 2395.014095] 2718 [ 2395.017343] __alloc_pages_nodemask+0x2127/0x2720 [ 2395.024342] ? lock_acquire+0x170/0x3f0 [ 2395.027089] 2718 [ 2395.028336] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2395.028353] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2395.035227] ? __mutex_unlock_slowpath+0x75/0x770 [ 2395.045503] alloc_pages_current+0x155/0x260 [ 2395.049939] ion_page_pool_alloc+0x118/0x1b0 [ 2395.054356] ion_system_heap_allocate+0x133/0x8c0 [ 2395.059203] ? ion_alloc+0x187/0x810 [ 2395.060127] Node 0 [ 2395.062916] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2395.062933] ? ion_system_contig_heap_create+0x130/0x130 [ 2395.062942] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2395.062955] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2395.072764] DMA32 free:1301136kB min:36200kB low:45248kB high:54296kB active_anon:58872kB inactive_anon:93380kB active_file:4560kB inactive_file:20516kB unevictable:0kB writepending:356kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:7712kB pagetables:3268kB bounce:0kB free_pcp:808kB local_pcp:280kB free_cma:0kB [ 2395.076059] ion_alloc+0x204/0x810 [ 2395.076073] ? ion_dma_buf_release+0x40/0x40 [ 2395.108259] lowmem_reserve[]: [ 2395.115113] ? __might_fault+0x177/0x1b0 [ 2395.115126] ion_ioctl+0xea/0x1f0 [ 2395.115137] ? ion_query_heaps+0x360/0x360 [ 2395.137938] ? SyS_getpeername+0x220/0x220 [ 2395.139194] 0 [ 2395.142177] ? ion_query_heaps+0x360/0x360 [ 2395.142187] do_vfs_ioctl+0x75a/0xff0 [ 2395.142203] ? ioctl_preallocate+0x1a0/0x1a0 [ 2395.154793] 0 [ 2395.156404] ? lock_downgrade+0x740/0x740 [ 2395.156419] ? __fget+0x225/0x360 [ 2395.161108] 0 [ 2395.162337] ? do_vfs_ioctl+0xff0/0xff0 [ 2395.162349] ? security_file_ioctl+0x83/0xb0 [ 2395.169060] 0 [ 2395.171525] SyS_ioctl+0x7f/0xb0 [ 2395.171532] ? do_vfs_ioctl+0xff0/0xff0 [ 2395.171543] do_syscall_64+0x1d5/0x640 [ 2395.171560] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2395.184716] 0 [ 2395.185668] RIP: 0033:0x466459 [ 2395.199686] RSP: 002b:00007f46becae188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2395.207397] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 2395.207402] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2395.207407] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2395.207419] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2395.236471] R13: 00007ffe96c50ebf R14: 00007f46becae300 R15: 0000000000022000 [ 2395.240649] Node 0 [ 2395.244665] Bluetooth: hci2 command 0x041b tx timeout [ 2395.259914] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2395.290942] Mem-Info: [ 2395.304077] active_anon:15489 inactive_anon:38507 isolated_anon:0 [ 2395.304077] active_file:1601 inactive_file:5687 isolated_file:0 [ 2395.304077] unevictable:0 dirty:92 writeback:0 unstable:0 [ 2395.304077] slab_reclaimable:12635 slab_unreclaimable:115881 [ 2395.304077] mapped:57751 shmem:39703 pagetables:874 bounce:0 09:15:09 executing program 3: r0 = perf_event_open$cgroup(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = epoll_create(0x7) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000001c0)={0x20000005}) epoll_wait(r1, &(0x7f0000000100)=[{}], 0x1, 0x0) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000580)='/dev/btrfs-control\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, r2) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r0, &(0x7f0000000080)={0x80002018}) openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/btrfs-control\x00', 0x288001, 0x0) [ 2395.304077] free:342263 free_pcp:217 free_cma:0 [ 2395.352125] Node 0 active_anon:60928kB inactive_anon:93380kB active_file:4560kB inactive_file:20516kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:189976kB dirty:356kB writeback:0kB shmem:97816kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 14336kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2395.380714] lowmem_reserve[]: 0 0 0 0 0 [ 2395.396560] Node 1 active_anon:1028kB inactive_anon:60648kB active_file:1844kB inactive_file:2232kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:41028kB dirty:12kB writeback:0kB shmem:60996kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2395.421014] Node 1 Normal free:239780kB min:53696kB low:67120kB high:80544kB active_anon:1028kB inactive_anon:60648kB active_file:1844kB inactive_file:2232kB unevictable:0kB writepending:12kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:288kB pagetables:228kB bounce:0kB free_pcp:32kB local_pcp:0kB free_cma:0kB [ 2395.428222] Node 0 DMA free:11784kB min:204kB low:252kB high:300kB active_anon:2056kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2395.511232] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2395.518730] lowmem_reserve[]: 0 0 0 0 0 [ 2395.529325] Node 0 DMA32 free:911736kB min:36200kB low:45248kB high:54296kB active_anon:58872kB inactive_anon:93380kB active_file:4560kB inactive_file:20516kB unevictable:0kB writepending:356kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:7584kB pagetables:3268kB bounce:0kB free_pcp:452kB local_pcp:172kB free_cma:0kB [ 2395.561517] Node 0 DMA: 20*4kB (UME) 45*8kB (UME) 39*16kB (UME) 31*32kB (UME) 15*64kB (UME) 13*128kB (UME) 3*256kB (UM) 3*512kB (UME) 2*1024kB (ME) 1*2048kB (U) 0*4096kB = 11080kB [ 2395.586075] syz-executor.1: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2395.597435] Node 0 DMA32: 33*4kB (UME) 21953*8kB (UME) 21523*16kB (UME) 11688*32kB (UE) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 894140kB [ 2395.618415] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 2395.628292] lowmem_reserve[]: 0 0 0 0 0 [ 2395.634908] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2395.645871] CPU: 0 PID: 15137 Comm: syz-executor.1 Not tainted 4.14.229-syzkaller #0 [ 2395.649245] Node 0 [ 2395.653763] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2395.653767] Call Trace: [ 2395.653786] dump_stack+0x1b2/0x281 [ 2395.653799] warn_alloc.cold+0x96/0x1cc [ 2395.653811] ? zone_watermark_ok_safe+0x220/0x220 [ 2395.653832] __alloc_pages_nodemask+0x2127/0x2720 [ 2395.653843] ? ___preempt_schedule+0x16/0x18 [ 2395.653857] ? lock_acquire+0x170/0x3f0 [ 2395.653871] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2395.653887] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2395.653899] ? __mutex_unlock_slowpath+0x75/0x770 [ 2395.653913] alloc_pages_current+0x155/0x260 [ 2395.653926] ion_page_pool_alloc+0x118/0x1b0 [ 2395.669428] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2395.671683] ion_system_heap_allocate+0x133/0x8c0 [ 2395.671699] ? ion_alloc+0x187/0x810 [ 2395.671709] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2395.671718] ? ion_system_contig_heap_create+0x130/0x130 [ 2395.671728] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2395.671738] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2395.671748] ion_alloc+0x204/0x810 [ 2395.683595] lowmem_reserve[]: [ 2395.685367] ? ion_dma_buf_release+0x40/0x40 [ 2395.685382] ? __might_fault+0x177/0x1b0 [ 2395.685393] ion_ioctl+0xea/0x1f0 [ 2395.685403] ? ion_query_heaps+0x360/0x360 [ 2395.694923] 0 [ 2395.698589] ? sockfd_lookup_light+0xb2/0x160 [ 2395.698603] ? ion_query_heaps+0x360/0x360 [ 2395.698616] do_vfs_ioctl+0x75a/0xff0 [ 2395.705369] Node 1 [ 2395.708884] ? ioctl_preallocate+0x1a0/0x1a0 [ 2395.708895] ? lock_downgrade+0x740/0x740 [ 2395.708908] ? __fget+0x225/0x360 [ 2395.708918] ? do_vfs_ioctl+0xff0/0xff0 [ 2395.736719] Normal: [ 2395.742613] ? security_file_ioctl+0x83/0xb0 [ 2395.742625] SyS_ioctl+0x7f/0xb0 [ 2395.742634] ? do_vfs_ioctl+0xff0/0xff0 [ 2395.742645] do_syscall_64+0x1d5/0x640 [ 2395.742659] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2395.742671] RIP: 0033:0x466459 [ 2395.747609] 0 [ 2395.751235] RSP: 002b:00007f10b678e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2395.751246] RAX: ffffffffffffffda RBX: 000000000056c008 RCX: 0000000000466459 [ 2395.751250] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2395.751255] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2395.751259] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c008 [ 2395.751265] R13: 00007ffd58825dcf R14: 00007f10b678e300 R15: 0000000000022000 [ 2395.853744] 3277*4kB (UME) 3222*8kB (UME) 3048*16kB (UE) 2713*32kB (U) 0*64kB 43*128kB (U) 133*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 214020kB [ 2396.104433] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2396.147720] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2396.148786] 0 0 0 [ 2396.189929] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2396.191437] Node 1 Normal free:241668kB min:53696kB low:67120kB high:80544kB active_anon:1028kB inactive_anon:60648kB active_file:1944kB inactive_file:2132kB unevictable:0kB writepending:4kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:288kB pagetables:228kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2396.234330] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2396.346853] lowmem_reserve[]: 0 0 0 0 0 [ 2396.367433] 46832 total pagecache pages [ 2396.381170] Node 0 DMA: 20*4kB (UME) 45*8kB (UME) 39*16kB (UME) 31*32kB (UME) 15*64kB (UME) 13*128kB (UME) 3*256kB (UM) 3*512kB (UME) 2*1024kB (ME) 1*2048kB (U) 0*4096kB = 11080kB [ 2396.385847] 0 pages in swap cache [ 2396.410997] syz-executor.2: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2396.430745] Node 0 DMA32: 46*4kB (ME) 43*8kB (UME) 32*16kB (UME) 10422*32kB (UME) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 334544kB [ 2396.445026] syz-executor.2 cpuset= [ 2396.458184] Swap cache stats: add 0, delete 0, find 0/0 [ 2396.487721] Free swap = 0kB [ 2396.491156] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2396.491961] / [ 2396.511910] Total swap = 0kB [ 2396.520040] Node 1 Normal: 3277*4kB (UME) 3222*8kB (UME) 3048*16kB (UE) 2713*32kB (U) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB [ 2396.520121] 2097051 pages RAM [ 2396.520126] 0 pages HighMem/MovableOnly [ 2396.540933] mems_allowed=0-1 [ 2396.544066] CPU: 1 PID: 15136 Comm: syz-executor.2 Not tainted 4.14.229-syzkaller #0 [ 2396.551944] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2396.561293] Call Trace: [ 2396.561730] 363848 pages reserved [ 2396.563879] dump_stack+0x1b2/0x281 [ 2396.563894] warn_alloc.cold+0x96/0x1cc [ 2396.563906] ? zone_watermark_ok_safe+0x220/0x220 [ 2396.563926] __alloc_pages_nodemask+0x2127/0x2720 [ 2396.569649] 0 pages cma reserved [ 2396.570979] ? _raw_spin_unlock_irq+0x24/0x80 [ 2396.570995] ? lock_acquire+0x170/0x3f0 [ 2396.571009] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2396.571024] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2396.571037] ? __mutex_unlock_slowpath+0x75/0x770 [ 2396.571053] alloc_pages_current+0x155/0x260 [ 2396.616530] ion_page_pool_alloc+0x118/0x1b0 [ 2396.620940] ion_system_heap_allocate+0x133/0x8c0 [ 2396.625783] ? ion_alloc+0x187/0x810 [ 2396.629496] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2396.634945] ? ion_system_contig_heap_create+0x130/0x130 [ 2396.640392] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2396.645404] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2396.650247] ion_alloc+0x204/0x810 [ 2396.653799] ? ion_dma_buf_release+0x40/0x40 [ 2396.658210] ? __might_fault+0x177/0x1b0 [ 2396.662279] ion_ioctl+0xea/0x1f0 [ 2396.666774] ? ion_query_heaps+0x360/0x360 [ 2396.671021] ? ion_query_heaps+0x360/0x360 [ 2396.675258] do_vfs_ioctl+0x75a/0xff0 [ 2396.679058] ? ioctl_preallocate+0x1a0/0x1a0 [ 2396.683465] ? lock_downgrade+0x740/0x740 [ 2396.687875] ? __fget+0x225/0x360 [ 2396.691326] ? do_vfs_ioctl+0xff0/0xff0 [ 2396.695305] ? security_file_ioctl+0x83/0xb0 [ 2396.699712] SyS_ioctl+0x7f/0xb0 [ 2396.703076] ? do_vfs_ioctl+0xff0/0xff0 [ 2396.707050] do_syscall_64+0x1d5/0x640 [ 2396.710941] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2396.716127] RIP: 0033:0x466459 [ 2396.719312] RSP: 002b:00007fa0b5876188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2396.727028] RAX: ffffffffffffffda RBX: 000000000056c008 RCX: 0000000000466459 [ 2396.734293] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2396.741557] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2396.748843] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c008 [ 2396.756108] R13: 00007ffcdcceba8f R14: 00007fa0b5876300 R15: 0000000000022000 [ 2396.780887] = 174468kB [ 2396.783418] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2396.821610] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2396.830237] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2396.860937] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2396.869544] 46585 total pagecache pages [ 2396.930513] 0 pages in swap cache [ 2396.941802] Swap cache stats: add 0, delete 0, find 0/0 [ 2396.947183] Free swap = 0kB [ 2396.950189] Total swap = 0kB [ 2397.005050] 2097051 pages RAM [ 2397.008182] 0 pages HighMem/MovableOnly [ 2397.025067] 363848 pages reserved [ 2397.028576] 0 pages cma reserved [ 2397.077355] warn_alloc_show_mem: 4 callbacks suppressed [ 2397.077358] Mem-Info: [ 2397.090164] active_anon:15456 inactive_anon:38506 isolated_anon:0 [ 2397.090164] active_file:52 inactive_file:47 isolated_file:6 [ 2397.090164] unevictable:0 dirty:12 writeback:0 unstable:0 [ 2397.090164] slab_reclaimable:12628 slab_unreclaimable:116879 [ 2397.090164] mapped:52906 shmem:39702 pagetables:825 bounce:0 [ 2397.090164] free:25041 free_pcp:179 free_cma:0 [ 2397.129256] Node 0 active_anon:60780kB inactive_anon:93376kB active_file:156kB inactive_file:60kB unevictable:0kB isolated(anon):0kB isolated(file):24kB mapped:174120kB dirty:44kB writeback:0kB shmem:97812kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 14336kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2397.161635] Node 1 active_anon:1044kB inactive_anon:60648kB active_file:52kB inactive_file:128kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:37504kB dirty:4kB writeback:0kB shmem:60996kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2397.204238] Node 0 DMA free:11024kB min:204kB low:252kB high:300kB active_anon:2056kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2397.242459] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2397.247525] Node 0 DMA32 free:35812kB min:36200kB low:45248kB high:54296kB active_anon:58424kB inactive_anon:93376kB active_file:412kB inactive_file:256kB unevictable:0kB writepending:44kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:7552kB pagetables:3072kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2397.279917] lowmem_reserve[]: 0 0 0 0 0 [ 2397.283994] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2397.309886] Bluetooth: hci2 command 0x040f tx timeout [ 2397.314062] lowmem_reserve[]: 0 0 0 0 0 [ 2397.319096] Node 1 Normal free:53328kB min:53696kB low:67120kB high:80544kB active_anon:1044kB inactive_anon:60648kB active_file:424kB inactive_file:196kB unevictable:0kB writepending:4kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:288kB pagetables:228kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2397.353881] lowmem_reserve[]: 0 0 0 0 0 [ 2397.357897] Node 0 DMA: 14*4kB (ME) 41*8kB (UME) 39*16kB (UME) 31*32kB (UME) 15*64kB (UME) 13*128kB (UME) 3*256kB (UM) 3*512kB (UME) 2*1024kB (ME) 1*2048kB (U) 0*4096kB = 11024kB [ 2397.379688] Node 0 DMA32: 427*4kB (ME) 154*8kB (ME) 87*16kB (ME) 714*32kB (UME) 61*64kB (UM) 21*128kB (UM) 4*256kB (M) 0*512kB 1*1024kB (M) 0*2048kB 0*4096kB = 35820kB [ 2397.399104] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2397.410058] Node 1 Normal: 59*4kB (UM) 11*8kB (UME) 7*16kB (ME) 1571*32kB (UM) 1*64kB (U) 0*128kB 0*256kB 0*512kB 1*1024kB (M) 1*2048kB (M) 0*4096kB = 53844kB [ 2397.428140] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2397.437114] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2397.449952] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2397.458920] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2397.473359] 39772 total pagecache pages [ 2397.477346] 0 pages in swap cache [ 2397.483770] Swap cache stats: add 0, delete 0, find 0/0 [ 2397.489140] Free swap = 0kB [ 2397.495159] Total swap = 0kB [ 2397.498176] 2097051 pages RAM [ 2397.503950] 0 pages HighMem/MovableOnly [ 2397.507917] 363848 pages reserved [ 2397.512532] 0 pages cma reserved [ 2397.589836] oom_reaper: reaped process 15134 (syz-executor.1), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 2397.728630] oom_reaper: reaped process 15130 (syz-executor.4), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 2397.770813] syz-executor.1: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2397.775566] syz-executor.4: [ 2397.782796] syz-executor.1: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2397.782818] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 2397.782839] CPU: 0 PID: 15134 Comm: syz-executor.1 Not tainted 4.14.229-syzkaller #0 [ 2397.782844] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2397.782848] Call Trace: [ 2397.782864] dump_stack+0x1b2/0x281 [ 2397.782876] warn_alloc.cold+0x96/0x1cc [ 2397.782887] ? zone_watermark_ok_safe+0x220/0x220 [ 2397.782898] ? usleep_range+0x130/0x130 [ 2397.782907] ? try_to_free_pages+0x23f/0x6e0 [ 2397.782916] ? _find_next_bit+0xdb/0x100 [ 2397.782925] ? run_timer_softirq+0x5a0/0x5a0 [ 2397.782940] __alloc_pages_nodemask+0x2127/0x2720 [ 2397.782956] ? lock_acquire+0x170/0x3f0 [ 2397.782972] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2397.782981] ? ion_page_pool_alloc+0x9e/0x1b0 [ 2397.782995] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2397.783007] ? retint_kernel+0x2d/0x2d [ 2397.797697] page allocation failure: order:0 [ 2397.797806] alloc_pages_current+0x155/0x260 [ 2397.806821] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 2397.810764] ion_page_pool_alloc+0x118/0x1b0 [ 2397.810774] ion_system_heap_allocate+0x133/0x8c0 [ 2397.810783] ? ion_alloc+0x187/0x810 [ 2397.810795] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2397.810804] ? ion_system_contig_heap_create+0x130/0x130 [ 2397.810815] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2397.810827] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2397.810836] ion_alloc+0x204/0x810 [ 2397.810849] ? ion_dma_buf_release+0x40/0x40 [ 2397.822707] in:imklog invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask= [ 2397.822776] ? __might_fault+0x177/0x1b0 [ 2397.826370] (null) [ 2397.830334] ion_ioctl+0xea/0x1f0 [ 2397.844140] (null) [ 2397.847557] ? ion_query_heaps+0x360/0x360 [ 2397.858415] syz-executor.4 cpuset= [ 2397.860837] ? ion_query_heaps+0x360/0x360 [ 2397.860848] do_vfs_ioctl+0x75a/0xff0 [ 2397.860860] ? ioctl_preallocate+0x1a0/0x1a0 [ 2397.860869] ? lock_downgrade+0x740/0x740 [ 2397.860882] ? __fget+0x225/0x360 [ 2397.860889] ? do_vfs_ioctl+0xff0/0xff0 [ 2397.860899] ? security_file_ioctl+0x83/0xb0 [ 2397.860908] SyS_ioctl+0x7f/0xb0 [ 2397.860915] ? do_vfs_ioctl+0xff0/0xff0 [ 2397.860927] do_syscall_64+0x1d5/0x640 [ 2397.860942] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2397.860948] RIP: 0033:0x466459 [ 2397.860954] RSP: 002b:00007f10b67af188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2397.860964] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 2397.860968] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2397.860973] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2397.860978] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2397.860984] R13: 00007ffd58825dcf R14: 00007f10b67af300 R15: 0000000000022000 [ 2397.882261] syz-executor.1 cpuset= [ 2397.895000] , order=0, oom_score_adj=0 [ 2397.901346] / [ 2397.910481] in:imklog cpuset= [ 2397.919321] mems_allowed=0-1 [ 2397.929459] / [ 2397.932982] CPU: 0 PID: 15137 Comm: syz-executor.1 Not tainted 4.14.229-syzkaller #0 [ 2397.938065] mems_allowed=0-1 [ 2397.946944] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2397.946949] Call Trace: [ 2397.946968] dump_stack+0x1b2/0x281 [ 2397.946982] warn_alloc.cold+0x96/0x1cc [ 2397.946995] ? zone_watermark_ok_safe+0x220/0x220 [ 2397.947005] ? usleep_range+0x130/0x130 [ 2397.947015] ? try_to_free_pages+0x23f/0x6e0 [ 2397.947031] ? _find_next_bit+0xdb/0x100 [ 2397.947041] ? run_timer_softirq+0x5a0/0x5a0 [ 2397.947059] __alloc_pages_nodemask+0x2127/0x2720 [ 2397.961601] / [ 2397.963033] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2397.966533] mems_allowed=0-1 [ 2397.970750] ? migrate_swap_stop+0x880/0x880 [ 2397.970759] ? lock_acquire+0x170/0x3f0 [ 2397.970783] alloc_pages_current+0x155/0x260 [ 2397.970798] ion_page_pool_alloc+0x118/0x1b0 [ 2397.970808] ion_system_heap_allocate+0x133/0x8c0 [ 2397.970818] ? ion_alloc+0x187/0x810 [ 2397.970827] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2397.970838] ? ion_system_contig_heap_create+0x130/0x130 [ 2398.179425] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2398.184436] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2398.189273] ion_alloc+0x204/0x810 [ 2398.192807] ? ion_dma_buf_release+0x40/0x40 [ 2398.197210] ? __might_fault+0x177/0x1b0 [ 2398.201262] ion_ioctl+0xea/0x1f0 [ 2398.204710] ? ion_query_heaps+0x360/0x360 [ 2398.208938] ? sockfd_lookup_light+0xb2/0x160 [ 2398.213417] ? ion_query_heaps+0x360/0x360 [ 2398.217647] do_vfs_ioctl+0x75a/0xff0 [ 2398.221438] ? ioctl_preallocate+0x1a0/0x1a0 [ 2398.225843] ? lock_downgrade+0x740/0x740 [ 2398.229984] ? __fget+0x225/0x360 [ 2398.233426] ? do_vfs_ioctl+0xff0/0xff0 [ 2398.237407] ? security_file_ioctl+0x83/0xb0 [ 2398.241806] SyS_ioctl+0x7f/0xb0 [ 2398.245165] ? do_vfs_ioctl+0xff0/0xff0 [ 2398.249129] do_syscall_64+0x1d5/0x640 [ 2398.253012] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2398.258204] RIP: 0033:0x466459 [ 2398.261388] RSP: 002b:00007f10b678e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2398.269084] RAX: ffffffffffffffda RBX: 000000000056c008 RCX: 0000000000466459 [ 2398.276335] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2398.283588] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2398.290848] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c008 [ 2398.298103] R13: 00007ffd58825dcf R14: 00007f10b678e300 R15: 0000000000022000 [ 2398.308007] CPU: 1 PID: 15130 Comm: syz-executor.4 Not tainted 4.14.229-syzkaller #0 [ 2398.312882] Mem-Info: [ 2398.315899] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2398.318297] active_anon:15440 inactive_anon:38506 isolated_anon:0 [ 2398.318297] active_file:9 inactive_file:10 isolated_file:0 [ 2398.318297] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2398.318297] slab_reclaimable:12611 slab_unreclaimable:116610 [ 2398.318297] mapped:52881 shmem:39702 pagetables:825 bounce:0 [ 2398.318297] free:13868 free_pcp:108 free_cma:0 [ 2398.327615] Call Trace: [ 2398.327632] dump_stack+0x1b2/0x281 [ 2398.327646] warn_alloc.cold+0x96/0x1cc [ 2398.327668] ? zone_watermark_ok_safe+0x220/0x220 [ 2398.360814] Node 0 active_anon:60656kB inactive_anon:93376kB active_file:32kB inactive_file:32kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:174088kB dirty:0kB writeback:0kB shmem:97812kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 14336kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2398.363349] ? usleep_range+0x130/0x130 [ 2398.366953] Node 1 active_anon:1104kB inactive_anon:60648kB active_file:4kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:37436kB dirty:0kB writeback:0kB shmem:60996kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2398.370897] ? try_to_free_pages+0x23f/0x6e0 [ 2398.370907] ? _find_next_bit+0xdb/0x100 [ 2398.370919] ? run_timer_softirq+0x5a0/0x5a0 [ 2398.375733] Node 0 [ 2398.403392] __alloc_pages_nodemask+0x2127/0x2720 [ 2398.403410] ? lock_acquire+0x170/0x3f0 [ 2398.407401] DMA free:10968kB min:204kB low:252kB high:300kB active_anon:2056kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2398.434347] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2398.434356] ? ion_page_pool_alloc+0x9e/0x1b0 [ 2398.434373] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2398.438750] lowmem_reserve[]: [ 2398.442801] alloc_pages_current+0x155/0x260 [ 2398.442813] ion_page_pool_alloc+0x118/0x1b0 [ 2398.447192] 0 [ 2398.449429] ion_system_heap_allocate+0x133/0x8c0 [ 2398.454273] 2717 [ 2398.458212] ? ion_alloc+0x187/0x810 [ 2398.484046] 2718 [ 2398.488859] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2398.493338] 2718 [ 2398.498756] ? ion_system_contig_heap_create+0x130/0x130 [ 2398.501850] 2718 [ 2398.506227] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2398.512414] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2398.512428] ion_alloc+0x204/0x810 [ 2398.517249] Node 0 [ 2398.520181] ? ion_dma_buf_release+0x40/0x40 [ 2398.523912] DMA32 free:17692kB min:36200kB low:45248kB high:54296kB active_anon:58600kB inactive_anon:93376kB active_file:32kB inactive_file:32kB unevictable:0kB writepending:0kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:7552kB pagetables:3072kB bounce:0kB free_pcp:228kB local_pcp:120kB free_cma:0kB [ 2398.525928] ? __might_fault+0x177/0x1b0 [ 2398.531363] lowmem_reserve[]: [ 2398.533401] ion_ioctl+0xea/0x1f0 [ 2398.538820] 0 [ 2398.540869] ? ion_query_heaps+0x360/0x360 [ 2398.540881] ? SyS_getpeername+0x220/0x220 [ 2398.540891] ? ion_query_heaps+0x360/0x360 [ 2398.545878] 0 [ 2398.550699] do_vfs_ioctl+0x75a/0xff0 [ 2398.550711] ? ioctl_preallocate+0x1a0/0x1a0 [ 2398.550722] ? lock_downgrade+0x740/0x740 [ 2398.554236] 0 [ 2398.556455] ? __fget+0x225/0x360 [ 2398.560862] 0 [ 2398.589228] ? do_vfs_ioctl+0xff0/0xff0 [ 2398.589240] ? security_file_ioctl+0x83/0xb0 [ 2398.589250] SyS_ioctl+0x7f/0xb0 [ 2398.593299] 0 [ 2398.596375] ? do_vfs_ioctl+0xff0/0xff0 [ 2398.601585] do_syscall_64+0x1d5/0x640 [ 2398.601600] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2398.601609] RIP: 0033:0x466459 [ 2398.605832] Node 0 [ 2398.610046] RSP: 002b:00007f46becae188 EFLAGS: 00000246 [ 2398.614306] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2398.616035] ORIG_RAX: 0000000000000010 [ 2398.619817] lowmem_reserve[]: [ 2398.624209] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 2398.624214] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2398.624219] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2398.624223] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2398.624228] R13: 00007ffe96c50ebf R14: 00007f46becae300 R15: 0000000000022000 [ 2398.636098] CPU: 1 PID: 13920 Comm: in:imklog Not tainted 4.14.229-syzkaller #0 [ 2398.647097] 0 [ 2398.648385] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2398.650170] 0 [ 2398.654117] Call Trace: [ 2398.654133] dump_stack+0x1b2/0x281 [ 2398.654144] dump_header+0x178/0x82f [ 2398.654154] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2398.654166] ? ___ratelimit+0x2cd/0x530 [ 2398.658026] 0 [ 2398.663215] oom_kill_process.cold+0x10/0xa40 [ 2398.663233] out_of_memory+0xe3e/0x1190 [ 2398.663245] ? oom_killer_disable+0x1c0/0x1c0 [ 2398.666412] 0 [ 2398.668632] ? mutex_trylock+0x152/0x1a0 [ 2398.680698] 0 [ 2398.698857] __alloc_pages_nodemask+0x23e1/0x2720 [ 2398.698876] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2398.727686] alloc_pages_current+0x155/0x260 [ 2398.750712] Node 1 [ 2398.751501] filemap_fault+0x11a1/0x1ad0 [ 2398.770726] Normal free:26812kB min:53696kB low:67120kB high:80544kB active_anon:1104kB inactive_anon:60648kB active_file:4kB inactive_file:8kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:288kB pagetables:228kB bounce:0kB free_pcp:204kB local_pcp:84kB free_cma:0kB [ 2398.772510] ext4_filemap_fault+0x84/0xb0 [ 2398.777580] lowmem_reserve[]: [ 2398.781539] __do_fault+0xfa/0x380 [ 2398.781548] __handle_mm_fault+0x2497/0x4620 [ 2398.781558] ? vm_insert_page+0x7c0/0x7c0 [ 2398.781569] ? lock_downgrade+0x740/0x740 [ 2398.800705] 0 [ 2398.802095] ? mark_held_locks+0xa6/0xf0 [ 2398.803872] 0 [ 2398.808710] handle_mm_fault+0x455/0x9c0 [ 2398.820705] 0 [ 2398.824219] __do_page_fault+0x549/0xad0 [ 2398.890706] 0 0 [ 2398.892917] ? spurious_fault+0x640/0x640 [ 2398.894870] Node 0 DMA: [ 2398.899000] ? do_page_fault+0x60/0x500 [ 2398.899010] ? page_fault+0x2f/0x50 [ 2398.909235] page_fault+0x45/0x50 [ 2398.910693] 14*4kB [ 2398.912686] RIP: 1fa0:0x1f9f [ 2398.912694] (ME) [ 2398.914905] RSP: 0000:0000561fd9bb59d0 EFLAGS: 7f95a67ffda0 [ 2398.919977] 34*8kB [ 2398.943185] Mem-Info: [ 2398.970920] active_anon:15440 inactive_anon:38506 isolated_anon:0 [ 2398.970920] active_file:9 inactive_file:210 isolated_file:0 [ 2398.970920] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2398.970920] slab_reclaimable:12611 slab_unreclaimable:116580 [ 2398.970920] mapped:52981 shmem:39702 pagetables:825 bounce:0 [ 2398.970920] free:27126 free_pcp:115 free_cma:0 [ 2398.984739] (UME) [ 2399.008049] syz-executor.1: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2399.020718] Node 0 active_anon:60656kB inactive_anon:93376kB active_file:32kB inactive_file:1132kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:174588kB dirty:0kB writeback:0kB shmem:97812kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 14336kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2399.037562] syz-executor.1 cpuset= [ 2399.070287] Node 1 active_anon:1104kB inactive_anon:60648kB active_file:4kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:37436kB dirty:0kB writeback:0kB shmem:60996kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2399.090473] 39*16kB [ 2399.129168] / [ 2399.130713] Node 0 DMA free:11032kB min:204kB low:252kB high:300kB active_anon:2056kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2399.140661] mems_allowed=0-1 [ 2399.159796] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2399.180677] Node 0 DMA32 free:36456kB min:36200kB low:45248kB high:54296kB active_anon:58600kB inactive_anon:93376kB active_file:32kB inactive_file:2132kB unevictable:0kB writepending:0kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:7552kB pagetables:3072kB bounce:0kB free_pcp:252kB local_pcp:120kB free_cma:0kB [ 2399.184589] (UME) [ 2399.209914] lowmem_reserve[]: 0 0 0 0 0 [ 2399.209936] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2399.209953] lowmem_reserve[]: 0 0 0 0 [ 2399.249268] CPU: 0 PID: 15137 Comm: syz-executor.1 Not tainted 4.14.229-syzkaller #0 [ 2399.260942] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2399.270286] Call Trace: [ 2399.272900] dump_stack+0x1b2/0x281 [ 2399.276524] warn_alloc.cold+0x96/0x1cc [ 2399.280499] ? zone_watermark_ok_safe+0x220/0x220 [ 2399.285352] __alloc_pages_nodemask+0x2127/0x2720 [ 2399.290197] ? lock_acquire+0x170/0x3f0 [ 2399.294176] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2399.299022] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2399.304478] ? __mutex_unlock_slowpath+0x75/0x770 [ 2399.309324] ? retint_kernel+0x2d/0x2d [ 2399.313221] alloc_pages_current+0x155/0x260 [ 2399.317629] ion_page_pool_alloc+0x118/0x1b0 [ 2399.322035] ion_system_heap_allocate+0x133/0x8c0 [ 2399.326875] ? _raw_spin_unlock+0x29/0x40 [ 2399.331020] ? _ion_heap_freelist_drain+0x6e/0x410 [ 2399.335949] ? ion_system_contig_heap_create+0x130/0x130 [ 2399.341395] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2399.346409] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2399.351248] ion_alloc+0x27a/0x810 [ 2399.354798] ? ion_dma_buf_release+0x40/0x40 [ 2399.359214] ? __might_fault+0x177/0x1b0 [ 2399.363282] ion_ioctl+0xea/0x1f0 [ 2399.366729] ? ion_query_heaps+0x360/0x360 [ 2399.370966] ? sockfd_lookup_light+0xb2/0x160 [ 2399.375459] ? ion_query_heaps+0x360/0x360 [ 2399.379698] do_vfs_ioctl+0x75a/0xff0 [ 2399.380691] Bluetooth: hci2 command 0x0419 tx timeout [ 2399.383493] ? ioctl_preallocate+0x1a0/0x1a0 [ 2399.390575] 0 [ 2399.393056] ? lock_downgrade+0x740/0x740 [ 2399.393070] ? __fget+0x225/0x360 [ 2399.393079] ? do_vfs_ioctl+0xff0/0xff0 [ 2399.393091] ? security_file_ioctl+0x83/0xb0 [ 2399.393106] SyS_ioctl+0x7f/0xb0 [ 2399.393115] ? do_vfs_ioctl+0xff0/0xff0 [ 2399.397513] syz-executor.4: [ 2399.399037] do_syscall_64+0x1d5/0x640 [ 2399.406422] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2399.417716] page allocation failure: order:4 [ 2399.418108] RIP: 0033:0x466459 [ 2399.423040] Node 1 [ 2399.424973] RSP: 002b:00007f10b678e188 EFLAGS: 00000246 [ 2399.430146] Normal free:26436kB min:53696kB low:67120kB high:80544kB active_anon:1104kB inactive_anon:60648kB active_file:4kB inactive_file:100kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:288kB pagetables:228kB bounce:0kB free_pcp:152kB local_pcp:120kB free_cma:0kB [ 2399.434518] ORIG_RAX: 0000000000000010 [ 2399.434524] RAX: ffffffffffffffda RBX: 000000000056c008 RCX: 0000000000466459 [ 2399.434529] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2399.434534] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2399.434539] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c008 [ 2399.434545] R13: 00007ffd58825dcf R14: 00007f10b678e300 R15: 0000000000022000 [ 2399.458756] 31*32kB [ 2399.502740] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 2399.515473] (UME) [ 2399.527276] (null) [ 2399.531109] 15*64kB (UME) 13*128kB (UME) 3*256kB (UM) 3*512kB (UME) 2*1024kB (ME) 1*2048kB (U) 0*4096kB = 10968kB [ 2399.535348] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 2399.549411] CPU: 1 PID: 15130 Comm: syz-executor.4 Not tainted 4.14.229-syzkaller #0 [ 2399.551423] Node 0 [ 2399.557279] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2399.557286] DMA32: [ 2399.559523] Call Trace: [ 2399.568893] 303*4kB [ 2399.571091] dump_stack+0x1b2/0x281 [ 2399.571106] warn_alloc.cold+0x96/0x1cc [ 2399.573661] (UME) [ 2399.575967] ? zone_watermark_ok_safe+0x220/0x220 [ 2399.579562] 42*8kB [ 2399.583543] __alloc_pages_nodemask+0x2127/0x2720 [ 2399.583556] ? lock_acquire+0x170/0x3f0 [ 2399.583569] ? lock_acquire+0x170/0x3f0 [ 2399.585702] (UME) [ 2399.590531] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2399.592763] 27*16kB [ 2399.597572] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2399.601535] (UME) [ 2399.605499] ? __mutex_unlock_slowpath+0x75/0x770 [ 2399.607621] 1063*32kB [ 2399.612449] alloc_pages_current+0x155/0x260 [ 2399.612462] ion_page_pool_alloc+0x118/0x1b0 [ 2399.612473] ion_system_heap_allocate+0x133/0x8c0 [ 2399.614780] (UME) [ 2399.620213] ? _raw_spin_unlock+0x29/0x40 [ 2399.622370] 0*64kB [ 2399.627166] ? _ion_heap_freelist_drain+0x6e/0x410 [ 2399.629634] 0*128kB [ 2399.634023] ? ion_system_contig_heap_create+0x130/0x130 [ 2399.634034] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2399.634045] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2399.638449] 0*256kB [ 2399.643270] ion_alloc+0x27a/0x810 [ 2399.643283] ? ion_dma_buf_release+0x40/0x40 [ 2399.643296] ? __might_fault+0x177/0x1b0 [ 2399.645420] 0*512kB [ 2399.649550] ion_ioctl+0xea/0x1f0 [ 2399.651807] 0*1024kB [ 2399.656697] ? ion_query_heaps+0x360/0x360 [ 2399.658993] 0*2048kB [ 2399.664427] ? SyS_getpeername+0x220/0x220 [ 2399.664436] ? ion_query_heaps+0x360/0x360 [ 2399.664446] do_vfs_ioctl+0x75a/0xff0 [ 2399.664459] ? ioctl_preallocate+0x1a0/0x1a0 [ 2399.669469] warn_alloc_show_mem: 2 callbacks suppressed [ 2399.669472] Mem-Info: [ 2399.674277] ? lock_downgrade+0x740/0x740 [ 2399.674291] ? __fget+0x225/0x360 [ 2399.674302] ? do_vfs_ioctl+0xff0/0xff0 [ 2399.676614] active_anon:15440 inactive_anon:38506 isolated_anon:0 [ 2399.676614] active_file:55 inactive_file:52 isolated_file:0 [ 2399.676614] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2399.676614] slab_reclaimable:12611 slab_unreclaimable:116580 [ 2399.676614] mapped:52931 shmem:39702 pagetables:825 bounce:0 [ 2399.676614] free:18335 free_pcp:242 free_cma:0 [ 2399.680129] ? security_file_ioctl+0x83/0xb0 [ 2399.684532] 0*4096kB [ 2399.688553] SyS_ioctl+0x7f/0xb0 [ 2399.690884] Node 0 active_anon:60656kB inactive_anon:93376kB active_file:116kB inactive_file:92kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:174188kB dirty:0kB writeback:0kB shmem:97812kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 14336kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2399.694285] ? do_vfs_ioctl+0xff0/0xff0 [ 2399.696680] Node 1 active_anon:1104kB inactive_anon:60648kB active_file:104kB inactive_file:116kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:37536kB dirty:0kB writeback:0kB shmem:60996kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2399.700885] do_syscall_64+0x1d5/0x640 [ 2399.700904] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2399.703292] = 35996kB [ 2399.707611] RIP: 0033:0x466459 [ 2399.711970] Node 0 [ 2399.715735] RSP: 002b:00007f46becae188 EFLAGS: 00000246 [ 2399.720120] Normal: [ 2399.725462] ORIG_RAX: 0000000000000010 [ 2399.725468] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 2399.725472] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2399.725477] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2399.725481] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2399.725487] R13: 00007ffe96c50ebf R14: 00007f46becae300 R15: 0000000000022000 [ 2399.732751] lowmem_reserve[]: 0 0 0 0 0 [ 2399.732776] Node 0 DMA: 14*4kB (ME) 34*8kB (UME) 39*16kB (UME) 31*32kB (UME) 16*64kB (UME) 13*128kB (UME) 3*256kB (UM) 3*512kB (UME) 2*1024kB (ME) 1*2048kB (U) 0*4096kB = 11032kB [ 2399.732854] Node 0 DMA32: 303*4kB (UME) 42*8kB (UME) 27*16kB (UME) 1063*32kB (UME) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 35996kB [ 2399.732912] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2399.732958] Node 1 Normal: 33*4kB (UM) 12*8kB (UME) 8*16kB (ME) 4*32kB (M) 2*64kB (M) 2*128kB (UM) 18*256kB (UM) 41*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 26468kB [ 2399.733027] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2399.733032] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2399.733038] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2399.733043] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2399.733047] 39785 total pagecache pages [ 2399.733056] 0 pages in swap cache [ 2399.733061] Swap cache stats: add 0, delete 0, find 0/0 [ 2399.733063] Free swap = 0kB [ 2399.733066] Total swap = 0kB [ 2399.733072] 2097051 pages RAM [ 2399.733075] 0 pages HighMem/MovableOnly [ 2399.733078] 363848 pages reserved [ 2399.733081] 0 pages cma reserved [ 2399.733090] Out of memory (oom_kill_allocating_task): Kill process 13920 (in:imklog) score 0 or sacrifice child [ 2399.748161] Node 0 [ 2399.963769] Killed process 13918 (rsyslogd) total-vm:254332kB, anon-rss:1004kB, file-rss:0kB, shmem-rss:0kB [ 2400.059105] 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2400.076827] Node 1 Normal: 32*4kB (UM) 10*8kB (ME) 7*16kB (ME) 3*32kB (M) 4*64kB (UM) 1*128kB (U) 17*256kB (U) 40*512kB (U) 1*1024kB (M) 0*2048kB 0*4096kB = 26656kB [ 2400.092962] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2400.101842] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2400.110416] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2400.121699] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2400.130278] 39733 total pagecache pages [ 2400.134301] 0 pages in swap cache [ 2400.137746] Swap cache stats: add 0, delete 0, find 0/0 [ 2400.139806] oom_reaper: reaped process 13918 (rsyslogd), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 2400.145713] Free swap = 0kB [ 2400.155691] Total swap = 0kB [ 2400.158700] 2097051 pages RAM [ 2400.164217] 0 pages HighMem/MovableOnly [ 2400.168248] 363848 pages reserved [ 2400.175952] 0 pages cma reserved [ 2400.180640] DMA free:11032kB min:204kB low:252kB high:300kB active_anon:2056kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2400.218712] oom_reaper: reaped process 15136 (syz-executor.2), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 2400.280582] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2400.288856] Node 0 DMA32 free:35596kB min:36200kB low:45248kB high:54296kB active_anon:57592kB inactive_anon:93376kB active_file:32kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:7488kB pagetables:3072kB bounce:0kB free_pcp:852kB local_pcp:732kB free_cma:0kB [ 2400.400680] lowmem_reserve[]: 0 0 0 0 0 [ 2400.403401] oom_reaper: reaped process 15124 (syz-executor.5), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 2400.404729] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2400.440721] lowmem_reserve[]: 0 0 0 0 0 [ 2400.444722] Node 1 Normal free:33756kB min:53696kB low:67120kB high:80544kB active_anon:1104kB inactive_anon:60648kB active_file:108kB inactive_file:540kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:320kB pagetables:228kB bounce:0kB free_pcp:88kB local_pcp:0kB free_cma:0kB [ 2400.464044] oom_reaper: reaped process 15132 (syz-executor.0), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 2400.495317] systemd invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 2400.510573] syz-executor.2: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2400.510663] systemd cpuset= [ 2400.522442] lowmem_reserve[]: [ 2400.522463] syz-executor.4: [ 2400.525368] 0 [ 2400.528448] page allocation failure: order:0 [ 2400.531474] / [ 2400.550560] 0 0 0 0 [ 2400.554609] Node 0 DMA: 16*4kB (UME) 23*8kB (UME) 15*16kB (UME) 13*32kB (ME) 11*64kB (ME) 7*128kB (UME) 3*256kB (UM) 3*512kB (UME) 2*1024kB (ME) 2*2048kB (UM) 0*4096kB = 10952kB [ 2400.570329] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2400.572570] mems_allowed=0-1 [ 2400.578310] syz-executor.4 cpuset= [ 2400.581511] syz-executor.5: [ 2400.583569] CPU: 0 PID: 1 Comm: systemd Not tainted 4.14.229-syzkaller #0 [ 2400.585044] page allocation failure: order:0 [ 2400.588044] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2400.608782] Call Trace: [ 2400.611372] dump_stack+0x1b2/0x281 [ 2400.614020] syz-executor.2 cpuset= [ 2400.614988] dump_header+0x178/0x82f [ 2400.614990] / mems_allowed=0-1 [ 2400.618513] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2400.622267] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 2400.625383] ? ___ratelimit+0x2cd/0x530 [ 2400.630453] (null) [ 2400.637530] oom_kill_process.cold+0x10/0xa40 [ 2400.637541] ? lock_downgrade+0x740/0x740 [ 2400.637556] out_of_memory+0x2dc/0x1190 [ 2400.637567] ? oom_killer_disable+0x1c0/0x1c0 [ 2400.637576] ? mutex_trylock+0x152/0x1a0 [ 2400.637587] __alloc_pages_nodemask+0x23e1/0x2720 [ 2400.637606] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2400.637630] alloc_pages_current+0x155/0x260 [ 2400.650543] / [ 2400.652295] filemap_fault+0x11a1/0x1ad0 [ 2400.656252] mems_allowed=0-1 [ 2400.660742] ext4_filemap_fault+0x84/0xb0 [ 2400.660752] __do_fault+0xfa/0x380 [ 2400.660761] __handle_mm_fault+0x2497/0x4620 [ 2400.660770] ? vm_insert_page+0x7c0/0x7c0 [ 2400.660778] ? lock_downgrade+0x740/0x740 [ 2400.660792] ? mark_held_locks+0xa6/0xf0 [ 2400.660802] handle_mm_fault+0x455/0x9c0 [ 2400.660815] __do_page_fault+0x549/0xad0 [ 2400.660827] ? spurious_fault+0x640/0x640 [ 2400.660835] ? do_page_fault+0x60/0x500 [ 2400.660842] ? page_fault+0x2f/0x50 [ 2400.660850] page_fault+0x45/0x50 [ 2400.660855] RIP: 63861ca4: (null) [ 2400.660859] RSP: 657429a0:00007ffc5b23eb10 EFLAGS: 55c465744540 [ 2400.661778] syz-executor.2: [ 2400.690541] CPU: 1 PID: 15136 Comm: syz-executor.2 Not tainted 4.14.229-syzkaller #0 [ 2400.700613] Node 0 [ 2400.704135] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2400.704138] Call Trace: [ 2400.704155] dump_stack+0x1b2/0x281 [ 2400.704168] warn_alloc.cold+0x96/0x1cc [ 2400.710462] DMA32: [ 2400.712430] ? zone_watermark_ok_safe+0x220/0x220 [ 2400.712440] ? usleep_range+0x130/0x130 [ 2400.712449] ? try_to_free_pages+0x23f/0x6e0 [ 2400.712459] ? _find_next_bit+0xdb/0x100 [ 2400.712470] ? run_timer_softirq+0x5a0/0x5a0 [ 2400.712486] __alloc_pages_nodemask+0x2127/0x2720 [ 2400.712509] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2400.712521] ? migrate_swap_stop+0x880/0x880 [ 2400.720520] 276*4kB [ 2400.720605] ? lock_acquire+0x170/0x3f0 [ 2400.724733] (UME) [ 2400.728695] ? retint_kernel+0x2d/0x2d [ 2400.750522] 58*8kB [ 2400.756877] alloc_pages_current+0x155/0x260 [ 2400.759088] (UME) [ 2400.768425] ion_page_pool_alloc+0x118/0x1b0 [ 2400.768435] ion_system_heap_allocate+0x133/0x8c0 [ 2400.768447] ? ion_alloc+0x187/0x810 [ 2400.780528] page allocation failure: order:0 [ 2400.780815] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2400.785608] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 2400.789562] ? ion_system_contig_heap_create+0x130/0x130 [ 2400.800512] (null) [ 2400.802373] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2400.807185] syz-executor.2 cpuset= [ 2400.812008] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2400.812021] ion_alloc+0x204/0x810 [ 2400.812036] ? ion_dma_buf_release+0x40/0x40 [ 2400.816437] 29*16kB [ 2400.818741] ? __might_fault+0x177/0x1b0 [ 2400.830520] (UME) [ 2400.830903] ion_ioctl+0xea/0x1f0 [ 2400.835283] 1428*32kB [ 2400.837415] ? ion_query_heaps+0x360/0x360 [ 2400.847322] / [ 2400.850322] ? ion_query_heaps+0x360/0x360 [ 2400.855176] (UME) [ 2400.860137] do_vfs_ioctl+0x75a/0xff0 [ 2400.867246] mems_allowed=0-1 [ 2400.872653] ? ioctl_preallocate+0x1a0/0x1a0 [ 2400.872663] ? lock_downgrade+0x740/0x740 [ 2400.872675] ? __fget+0x225/0x360 [ 2400.872686] ? do_vfs_ioctl+0xff0/0xff0 [ 2400.875307] 2*64kB [ 2400.879832] ? security_file_ioctl+0x83/0xb0 [ 2400.879843] SyS_ioctl+0x7f/0xb0 [ 2400.879850] ? do_vfs_ioctl+0xff0/0xff0 [ 2400.879861] do_syscall_64+0x1d5/0x640 [ 2400.879876] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2400.879884] RIP: 0033:0x466459 [ 2400.879888] RSP: 002b:00007fa0b5876188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2400.879897] RAX: ffffffffffffffda RBX: 000000000056c008 RCX: 0000000000466459 [ 2400.879905] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2400.887410] Mem-Info: [ 2400.888254] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2400.888260] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c008 [ 2400.888265] R13: 00007ffcdcceba8f R14: 00007fa0b5876300 R15: 0000000000022000 [ 2400.907932] CPU: 1 PID: 15130 Comm: syz-executor.4 Not tainted 4.14.229-syzkaller #0 [ 2400.930916] (U) [ 2400.934931] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2400.934935] Call Trace: [ 2400.934951] dump_stack+0x1b2/0x281 [ 2400.934965] warn_alloc.cold+0x96/0x1cc [ 2400.934977] ? zone_watermark_ok_safe+0x220/0x220 [ 2400.934987] ? usleep_range+0x130/0x130 [ 2400.934996] ? try_to_free_pages+0x23f/0x6e0 [ 2400.935007] ? _find_next_bit+0xdb/0x100 [ 2400.939388] 2*128kB [ 2400.942574] ? run_timer_softirq+0x5a0/0x5a0 [ 2400.942591] __alloc_pages_nodemask+0x2127/0x2720 [ 2400.942613] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2400.942626] ? migrate_swap_stop+0x880/0x880 [ 2400.942635] ? lock_acquire+0x170/0x3f0 [ 2400.942652] ? retint_kernel+0x2d/0x2d [ 2400.942666] alloc_pages_current+0x155/0x260 [ 2400.960507] syz-executor.5 cpuset= [ 2400.960621] ion_page_pool_alloc+0x118/0x1b0 [ 2400.964480] / [ 2400.969650] ion_system_heap_allocate+0x133/0x8c0 [ 2400.973342] (U) [ 2400.980509] ? _raw_spin_unlock+0x29/0x40 [ 2400.980518] ? _ion_heap_freelist_drain+0x6e/0x410 [ 2400.980526] ? ion_system_contig_heap_create+0x130/0x130 [ 2400.980536] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2400.980546] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2400.980556] ion_alloc+0x27a/0x810 [ 2400.980568] ? ion_dma_buf_release+0x40/0x40 [ 2400.980580] ? __might_fault+0x177/0x1b0 [ 2400.980592] ion_ioctl+0xea/0x1f0 [ 2400.980599] ? ion_query_heaps+0x360/0x360 [ 2400.980610] ? SyS_getpeername+0x220/0x220 [ 2400.980620] ? ion_query_heaps+0x360/0x360 [ 2401.000498] active_anon:14557 inactive_anon:38506 isolated_anon:0 [ 2401.000498] active_file:136 inactive_file:405 isolated_file:0 [ 2401.000498] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2401.000498] slab_reclaimable:12595 slab_unreclaimable:116416 [ 2401.000498] mapped:53217 shmem:39702 pagetables:794 bounce:0 [ 2401.000498] free:39089 free_pcp:528 free_cma:0 [ 2401.004757] do_vfs_ioctl+0x75a/0xff0 [ 2401.012032] 0*256kB [ 2401.019264] ? ioctl_preallocate+0x1a0/0x1a0 [ 2401.032310] mems_allowed=0-1 [ 2401.038517] ? lock_downgrade+0x740/0x740 [ 2401.038532] ? __fget+0x225/0x360 [ 2401.038541] ? do_vfs_ioctl+0xff0/0xff0 [ 2401.038553] ? security_file_ioctl+0x83/0xb0 [ 2401.038563] SyS_ioctl+0x7f/0xb0 [ 2401.038572] ? do_vfs_ioctl+0xff0/0xff0 [ 2401.060505] Node 0 active_anon:57196kB inactive_anon:93376kB active_file:604kB inactive_file:2384kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:176232kB dirty:0kB writeback:0kB shmem:97812kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2401.061869] do_syscall_64+0x1d5/0x640 [ 2401.065909] Node 1 active_anon:1032kB inactive_anon:60648kB active_file:40kB inactive_file:36kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:37436kB dirty:0kB writeback:0kB shmem:60996kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2401.068220] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2401.110491] 0*512kB [ 2401.113266] RIP: 0033:0x466459 [ 2401.115219] 0*1024kB [ 2401.119342] RSP: 002b:00007f46becae188 EFLAGS: 00000246 [ 2401.140474] Node 0 [ 2401.143101] ORIG_RAX: 0000000000000010 [ 2401.147500] DMA free:10952kB min:204kB low:252kB high:300kB active_anon:8kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2401.151525] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 2401.151530] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2401.151535] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2401.151539] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2401.151544] R13: 00007ffe96c50ebf R14: 00007f46becae300 R15: 0000000000022000 [ 2401.317035] warn_alloc_show_mem: 1 callbacks suppressed [ 2401.317039] Mem-Info: [ 2401.319662] CPU: 0 PID: 15124 Comm: syz-executor.5 Not tainted 4.14.229-syzkaller #0 [ 2401.322370] syz-executor.1: [ 2401.347964] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2401.347967] Call Trace: [ 2401.347988] dump_stack+0x1b2/0x281 [ 2401.348001] warn_alloc.cold+0x96/0x1cc [ 2401.348013] ? zone_watermark_ok_safe+0x220/0x220 [ 2401.348024] ? usleep_range+0x130/0x130 [ 2401.348033] ? try_to_free_pages+0x23f/0x6e0 [ 2401.348043] ? _find_next_bit+0xdb/0x100 [ 2401.348054] ? run_timer_softirq+0x5a0/0x5a0 [ 2401.348070] __alloc_pages_nodemask+0x2127/0x2720 [ 2401.348085] ? lock_acquire+0x170/0x3f0 [ 2401.358712] syz-executor.0: [ 2401.362592] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2401.362601] ? ion_page_pool_alloc+0x9e/0x1b0 [ 2401.362617] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2401.362636] alloc_pages_current+0x155/0x260 [ 2401.374049] page allocation failure: order:0 [ 2401.377142] ion_page_pool_alloc+0x118/0x1b0 [ 2401.385970] active_anon:14557 inactive_anon:38506 isolated_anon:0 [ 2401.385970] active_file:21 inactive_file:12 isolated_file:0 [ 2401.385970] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2401.385970] slab_reclaimable:12595 slab_unreclaimable:116287 [ 2401.385970] mapped:52892 shmem:39702 pagetables:794 bounce:0 [ 2401.385970] free:14098 free_pcp:162 free_cma:0 [ 2401.389730] ion_system_heap_allocate+0x133/0x8c0 [ 2401.395526] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 2401.399980] ? ion_alloc+0x187/0x810 [ 2401.405228] Node 0 active_anon:57196kB inactive_anon:93376kB active_file:44kB inactive_file:12kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:174132kB dirty:0kB writeback:0kB shmem:97812kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2401.412309] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2401.412321] ? ion_system_contig_heap_create+0x130/0x130 [ 2401.412331] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2401.412343] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2401.412354] ion_alloc+0x204/0x810 [ 2401.412366] ? ion_dma_buf_release+0x40/0x40 [ 2401.412380] ? __might_fault+0x177/0x1b0 [ 2401.418256] (null) [ 2401.418555] ion_ioctl+0xea/0x1f0 [ 2401.424406] Node 1 active_anon:1032kB inactive_anon:60648kB active_file:40kB inactive_file:36kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:37436kB dirty:0kB writeback:0kB shmem:60996kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2401.427321] ? ion_query_heaps+0x360/0x360 [ 2401.434623] syz-executor.0 cpuset= [ 2401.435654] ? ion_query_heaps+0x360/0x360 [ 2401.439683] / [ 2401.444071] do_vfs_ioctl+0x75a/0xff0 [ 2401.454175] Node 0 [ 2401.455843] ? ioctl_preallocate+0x1a0/0x1a0 [ 2401.460708] page allocation failure: order:4 [ 2401.465225] ? lock_downgrade+0x740/0x740 [ 2401.475866] DMA free:10952kB min:204kB low:252kB high:300kB active_anon:8kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2401.479512] ? __fget+0x225/0x360 [ 2401.483936] mems_allowed=0-1 [ 2401.519104] ? do_vfs_ioctl+0xff0/0xff0 [ 2401.519116] ? security_file_ioctl+0x83/0xb0 [ 2401.519126] SyS_ioctl+0x7f/0xb0 [ 2401.519134] ? do_vfs_ioctl+0xff0/0xff0 [ 2401.519145] do_syscall_64+0x1d5/0x640 [ 2401.519160] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2401.519168] RIP: 0033:0x466459 [ 2401.519173] RSP: 002b:00007f4d0bcd5188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2401.519182] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 2401.519188] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2401.519193] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2401.519197] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2401.519206] R13: 00007ffe1117a98f R14: 00007f4d0bcd5300 R15: 0000000000022000 [ 2401.529232] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 2401.531739] CPU: 0 PID: 15129 Comm: syz-executor.2 Not tainted 4.14.229-syzkaller #0 [ 2401.536083] lowmem_reserve[]: [ 2401.562591] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2401.562594] Call Trace: [ 2401.562612] dump_stack+0x1b2/0x281 [ 2401.562626] warn_alloc.cold+0x96/0x1cc [ 2401.562637] ? zone_watermark_ok_safe+0x220/0x220 [ 2401.562647] ? usleep_range+0x130/0x130 [ 2401.562655] ? try_to_free_pages+0x23f/0x6e0 [ 2401.562664] ? _find_next_bit+0xdb/0x100 [ 2401.562673] ? run_timer_softirq+0x5a0/0x5a0 [ 2401.562690] __alloc_pages_nodemask+0x2127/0x2720 [ 2401.562708] ? lock_acquire+0x170/0x3f0 [ 2401.562723] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2401.562731] ? ion_page_pool_alloc+0x9e/0x1b0 [ 2401.562747] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2401.562766] alloc_pages_current+0x155/0x260 [ 2401.562778] ion_page_pool_alloc+0x118/0x1b0 [ 2401.562789] ion_system_heap_allocate+0x133/0x8c0 [ 2401.562798] ? ion_alloc+0x187/0x810 [ 2401.562810] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2401.562820] ? ion_system_contig_heap_create+0x130/0x130 [ 2401.562829] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2401.562840] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2401.562850] ion_alloc+0x204/0x810 [ 2401.562863] ? ion_dma_buf_release+0x40/0x40 [ 2401.562875] ? __might_fault+0x177/0x1b0 [ 2401.562891] ion_ioctl+0xea/0x1f0 [ 2401.570297] (null) [ 2401.573746] ? ion_query_heaps+0x360/0x360 [ 2401.573757] ? ion_query_heaps+0x360/0x360 [ 2401.573768] do_vfs_ioctl+0x75a/0xff0 [ 2401.573781] ? ioctl_preallocate+0x1a0/0x1a0 [ 2401.586263] syz-executor.1 cpuset= [ 2401.587143] ? lock_downgrade+0x740/0x740 [ 2401.613798] / [ 2401.628294] ? __fget+0x225/0x360 [ 2401.653894] 0 [ 2401.656720] ? do_vfs_ioctl+0xff0/0xff0 [ 2401.673862] mems_allowed=0-1 [ 2401.686422] ? security_file_ioctl+0x83/0xb0 [ 2401.686434] SyS_ioctl+0x7f/0xb0 [ 2401.686442] ? do_vfs_ioctl+0xff0/0xff0 [ 2401.686453] do_syscall_64+0x1d5/0x640 [ 2401.686468] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2401.689914] 2717 [ 2401.693093] RIP: 0033:0x466459 [ 2401.693097] RSP: 002b:00007fa0b5897188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2401.693106] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 2401.693111] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2401.693117] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2401.693121] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2401.693126] R13: 00007ffcdcceba8f R14: 00007fa0b5897300 R15: 0000000000022000 [ 2401.693890] 0*2048kB [ 2401.701030] CPU: 1 PID: 15132 Comm: syz-executor.0 Not tainted 4.14.229-syzkaller #0 [ 2401.702029] 0*4096kB [ 2401.704869] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2401.704873] Call Trace: [ 2401.704889] dump_stack+0x1b2/0x281 [ 2401.704903] warn_alloc.cold+0x96/0x1cc [ 2401.704915] ? zone_watermark_ok_safe+0x220/0x220 [ 2401.704924] ? usleep_range+0x130/0x130 [ 2401.704936] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 2401.709267] = 48112kB [ 2401.712767] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 2401.712778] ? run_timer_softirq+0x5a0/0x5a0 [ 2401.712799] __alloc_pages_nodemask+0x2127/0x2720 [ 2401.712814] ? lock_acquire+0x170/0x3f0 [ 2401.712829] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2401.712838] ? ion_page_pool_alloc+0x9e/0x1b0 [ 2401.712855] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2401.712873] alloc_pages_current+0x155/0x260 [ 2401.712884] ion_page_pool_alloc+0x118/0x1b0 [ 2401.718336] Node 0 [ 2401.721241] ion_system_heap_allocate+0x133/0x8c0 [ 2401.721252] ? ion_alloc+0x187/0x810 [ 2401.721262] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2401.721271] ? ion_system_contig_heap_create+0x130/0x130 [ 2401.721281] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2401.721291] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2401.721301] ion_alloc+0x204/0x810 [ 2401.721315] ? ion_dma_buf_release+0x40/0x40 [ 2401.721329] ? __might_fault+0x177/0x1b0 [ 2401.729457] Normal: [ 2401.736272] ion_ioctl+0xea/0x1f0 [ 2401.736282] ? ion_query_heaps+0x360/0x360 [ 2401.736293] ? ion_query_heaps+0x360/0x360 [ 2401.736302] do_vfs_ioctl+0x75a/0xff0 [ 2401.736314] ? ioctl_preallocate+0x1a0/0x1a0 [ 2401.736322] ? lock_downgrade+0x740/0x740 [ 2401.736335] ? __fget+0x225/0x360 [ 2401.736344] ? do_vfs_ioctl+0xff0/0xff0 [ 2401.736356] ? security_file_ioctl+0x83/0xb0 [ 2401.736367] SyS_ioctl+0x7f/0xb0 [ 2401.736378] ? do_vfs_ioctl+0xff0/0xff0 [ 2401.743905] 0*4kB [ 2401.750903] do_syscall_64+0x1d5/0x640 [ 2401.750918] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2401.750926] RIP: 0033:0x466459 [ 2401.750931] RSP: 002b:00007fbc80168188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2401.750940] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 2401.750945] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2401.750950] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2401.750956] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2401.750962] R13: 00007ffc508a7f1f R14: 00007fbc80168300 R15: 0000000000022000 [ 2401.755034] 2718 [ 2401.758588] 0*8kB [ 2401.777960] 2718 [ 2401.781092] 0*16kB [ 2401.788096] CPU: 1 PID: 15134 Comm: syz-executor.1 Not tainted 4.14.229-syzkaller #0 [ 2401.793309] 0*32kB [ 2401.795760] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2401.799359] 0*64kB [ 2401.803302] Call Trace: [ 2401.803322] dump_stack+0x1b2/0x281 [ 2401.803338] warn_alloc.cold+0x96/0x1cc [ 2401.808150] 0*128kB [ 2401.812118] ? zone_watermark_ok_safe+0x220/0x220 [ 2401.812141] __alloc_pages_nodemask+0x2127/0x2720 [ 2401.812153] ? lock_acquire+0x170/0x3f0 [ 2401.816545] 0*256kB [ 2401.820598] ? lock_acquire+0x170/0x3f0 [ 2401.820614] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2401.820632] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2401.825014] 0*512kB [ 2401.829950] ? __mutex_unlock_slowpath+0x75/0x770 [ 2401.833915] 0*1024kB [ 2401.838719] alloc_pages_current+0x155/0x260 [ 2401.843229] 0*2048kB [ 2401.848730] ion_page_pool_alloc+0x118/0x1b0 [ 2401.855385] 0*4096kB [ 2401.859754] ion_system_heap_allocate+0x133/0x8c0 [ 2401.864584] = 0kB [ 2401.868267] ? _raw_spin_unlock+0x29/0x40 [ 2401.873705] Node 1 [ 2401.879113] ? _ion_heap_freelist_drain+0x6e/0x410 [ 2401.884129] lowmem_reserve[]: [ 2401.888936] ? ion_system_contig_heap_create+0x130/0x130 [ 2401.900414] Normal: [ 2401.900882] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2401.904305] 9*4kB [ 2401.906438] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2401.920429] 0 [ 2401.923151] ion_alloc+0x27a/0x810 [ 2401.926669] 2717 [ 2401.930808] ? ion_dma_buf_release+0x40/0x40 [ 2401.930821] ? __might_fault+0x177/0x1b0 [ 2401.930832] ion_ioctl+0xea/0x1f0 [ 2401.932526] (UM) [ 2401.935954] ? ion_query_heaps+0x360/0x360 [ 2401.937729] 12*8kB [ 2401.941687] ? ion_query_heaps+0x360/0x360 [ 2401.941696] do_vfs_ioctl+0x75a/0xff0 [ 2401.941707] ? ioctl_preallocate+0x1a0/0x1a0 [ 2401.941720] ? lock_downgrade+0x740/0x740 [ 2401.950410] 2718 [ 2401.952570] ? __fget+0x225/0x360 [ 2401.956513] 2718 [ 2401.960398] ? do_vfs_ioctl+0xff0/0xff0 [ 2401.960411] ? security_file_ioctl+0x83/0xb0 [ 2401.960420] SyS_ioctl+0x7f/0xb0 [ 2401.960430] ? do_vfs_ioctl+0xff0/0xff0 [ 2401.970420] (UME) [ 2401.970838] do_syscall_64+0x1d5/0x640 [ 2401.978521] 116*16kB [ 2401.985779] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2401.985787] RIP: 0033:0x466459 [ 2401.985794] RSP: 002b:00007f10b67af188 EFLAGS: 00000246 [ 2402.010407] 2718 [ 2402.014795] ORIG_RAX: 0000000000000010 [ 2402.025053] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 2402.025058] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2402.025063] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2402.025068] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2402.025073] R13: 00007ffd58825dcf R14: 00007f10b67af300 R15: 0000000000022000 [ 2402.030409] 2718 [ 2402.050400] (UME) [ 2402.080395] 789*32kB [ 2402.103806] Node 0 [ 2402.110391] Node 0 [ 2402.123811] DMA32 free:55348kB min:36200kB low:45248kB high:54296kB active_anon:57188kB inactive_anon:93376kB active_file:24kB inactive_file:196kB unevictable:0kB writepending:0kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:7424kB pagetables:2948kB bounce:0kB free_pcp:872kB local_pcp:740kB free_cma:0kB [ 2402.148012] DMA32 free:55348kB min:36200kB low:45248kB high:54296kB active_anon:57188kB inactive_anon:93376kB active_file:24kB inactive_file:196kB unevictable:0kB writepending:0kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:7424kB pagetables:2948kB bounce:0kB free_pcp:872kB local_pcp:132kB free_cma:0kB [ 2402.173749] lowmem_reserve[]: [ 2402.190410] (UM) [ 2402.234004] 0 [ 2402.290392] lowmem_reserve[]: [ 2402.298057] 0 [ 2402.340371] 0 [ 2402.413744] 0 [ 2402.460442] 669*64kB [ 2402.570365] warn_alloc_show_mem: 4 callbacks suppressed [ 2402.570368] Mem-Info: [ 2402.621101] 0 0 [ 2402.623098] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2402.660552] 0 0 0 0 [ 2402.680366] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2402.721665] lowmem_reserve[]: 0 0 0 0 0 [ 2402.725690] Node 1 Normal free:142860kB min:53696kB low:67120kB high:80544kB active_anon:1032kB inactive_anon:60648kB active_file:40kB inactive_file:780kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:288kB pagetables:228kB bounce:0kB free_pcp:1348kB local_pcp:716kB free_cma:0kB [ 2402.760664] active_anon:14557 inactive_anon:38506 isolated_anon:0 [ 2402.760664] active_file:16 inactive_file:419 isolated_file:0 [ 2402.760664] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2402.760664] slab_reclaimable:12594 slab_unreclaimable:116302 [ 2402.760664] mapped:53106 shmem:39702 pagetables:794 bounce:0 [ 2402.760664] free:159875 free_pcp:685 free_cma:0 [ 2402.760665] lowmem_reserve[]: 0 [ 2402.825433] lowmem_reserve[]: 0 0 0 0 0 [ 2402.840361] 0 0 0 0 [ 2402.842711] Node 1 Normal free:142884kB min:53696kB low:67120kB high:80544kB active_anon:1032kB inactive_anon:60648kB active_file:40kB inactive_file:796kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:288kB pagetables:228kB bounce:0kB free_pcp:1368kB local_pcp:648kB free_cma:0kB [ 2402.850389] Node 0 [ 2402.880378] Node 0 active_anon:57196kB inactive_anon:93376kB active_file:24kB inactive_file:908kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:174544kB dirty:0kB writeback:0kB shmem:97812kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2402.880440] (UM) [ 2402.882638] Node 1 active_anon:1032kB inactive_anon:60648kB active_file:40kB inactive_file:796kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:37968kB dirty:0kB writeback:0kB shmem:60996kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2402.910495] lowmem_reserve[]: [ 2402.960332] DMA: 20*4kB (UME) 38*8kB (UME) 39*16kB (UME) 31*32kB (UME) 16*64kB (UME) 13*128kB (UME) 3*256kB (UM) 3*512kB (UME) 2*1024kB (ME) 2*2048kB (UM) 0*4096kB = 13136kB [ 2402.980363] 47*128kB (U) 14*256kB (UM) 0*512kB 8*1024kB (UM) 1*2048kB (U) 0*4096kB = 89892kB [ 2402.989030] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2403.003459] Node 0 DMA free:13136kB min:204kB low:252kB high:300kB active_anon:8kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2403.030335] 0 0 0 0 0 [ 2403.032858] Node 0 DMA: 20*4kB (UME) 38*8kB (UME) 39*16kB (UME) 31*32kB (UME) 16*64kB (UME) 13*128kB (UME) 3*256kB (UM) 3*512kB (UME) 2*1024kB (ME) 2*2048kB (UM) 0*4096kB = 13136kB [ 2403.033608] Node 0 [ 2403.070337] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2403.100341] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2403.100344] DMA32: 6183*4kB [ 2403.109189] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2403.109195] (UME) [ 2403.112742] Node 0 DMA32: 6183*4kB (UME) 19149*8kB (UME) 18341*16kB (UM) 9093*32kB (UME) 0*64kB 0*128kB 0*256kB 0*512kB [ 2403.144084] lowmem_reserve[]: [ 2403.150309] 40151 total pagecache pages [ 2403.162323] 0*1024kB 0*2048kB 0*4096kB = 762356kB [ 2403.167169] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2403.173074] syz-executor.2: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2403.178880] syz-executor.0: [ 2403.193725] 0 2717 2718 2718 2718 [ 2403.200294] 0 pages in swap cache [ 2403.200300] Swap cache stats: add 0, delete 0, find 0/0 [ 2403.200303] Free swap = 0kB [ 2403.200306] Total swap = 0kB [ 2403.200312] 2097051 pages RAM [ 2403.200315] 0 pages HighMem/MovableOnly [ 2403.200321] 363848 pages reserved [ 2403.213649] 19149*8kB [ 2403.215159] page allocation failure: order:4 [ 2403.218238] (UME) [ 2403.222216] Node 1 Normal: 4702*4kB (UM) 3235*8kB (UME) 3053*16kB (UME) 2051*32kB (U) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 159168kB [ 2403.222282] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2403.222287] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2403.222292] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2403.222297] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2403.222301] 40151 total pagecache pages [ 2403.222310] 0 pages in swap cache [ 2403.222314] Swap cache stats: add 0, delete 0, find 0/0 [ 2403.222317] Free swap = 0kB [ 2403.222320] Total swap = 0kB [ 2403.222326] 2097051 pages RAM [ 2403.222329] 0 pages HighMem/MovableOnly [ 2403.222332] 363848 pages reserved [ 2403.222334] 0 pages cma reserved [ 2403.222340] Out of memory: Kill process 7972 (syz-fuzzer) score 6 or sacrifice child [ 2403.222400] Killed process 14630 (syz-executor.3) total-vm:84924kB, anon-rss:68kB, file-rss:0kB, shmem-rss:0kB [ 2403.225329] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 2403.240312] Node 0 [ 2403.249632] 0 pages cma reserved [ 2403.260351] 18341*16kB [ 2403.282686] oom_reaper: reaped process 14630 (syz-executor.3), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 2403.286897] syz-executor.2 cpuset= [ 2403.297159] (null) [ 2403.303790] / [ 2403.337665] syz-executor.0 cpuset= [ 2403.360319] DMA32 free:770148kB min:36200kB low:45248kB high:54296kB active_anon:57188kB inactive_anon:93376kB active_file:224kB inactive_file:5308kB unevictable:0kB writepending:0kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:7360kB pagetables:2800kB bounce:0kB free_pcp:188kB local_pcp:156kB free_cma:0kB [ 2403.400803] / mems_allowed=0-1 [ 2403.404117] CPU: 0 PID: 15132 Comm: syz-executor.0 Not tainted 4.14.229-syzkaller #0 [ 2403.411840] (UM) [ 2403.411994] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2403.412001] 9093*32kB [ 2403.414068] Call Trace: [ 2403.428462] dump_stack+0x1b2/0x281 [ 2403.432269] warn_alloc.cold+0x96/0x1cc [ 2403.436240] ? zone_watermark_ok_safe+0x220/0x220 [ 2403.441097] __alloc_pages_nodemask+0x2127/0x2720 [ 2403.443665] (UME) [ 2403.445935] ? lock_acquire+0x170/0x3f0 [ 2403.445951] ? lock_acquire+0x170/0x3f0 [ 2403.448111] 0*64kB [ 2403.452051] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2403.452069] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2403.452085] ? __mutex_unlock_slowpath+0x75/0x770 [ 2403.468294] 0*128kB [ 2403.468534] alloc_pages_current+0x155/0x260 [ 2403.478386] mems_allowed=0-1 [ 2403.480049] ion_page_pool_alloc+0x118/0x1b0 [ 2403.486530] 0*256kB 0*512kB [ 2403.487518] ion_system_heap_allocate+0x133/0x8c0 [ 2403.487531] ? _raw_spin_unlock+0x29/0x40 [ 2403.499479] ? _ion_heap_freelist_drain+0x6e/0x410 [ 2403.504402] ? ion_system_contig_heap_create+0x130/0x130 [ 2403.509842] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2403.510272] 0*1024kB [ 2403.515116] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2403.515129] ion_alloc+0x27a/0x810 [ 2403.517542] lowmem_reserve[]: [ 2403.522353] ? ion_dma_buf_release+0x40/0x40 [ 2403.522366] ? __might_fault+0x177/0x1b0 [ 2403.522377] ion_ioctl+0xea/0x1f0 [ 2403.522386] ? ion_query_heaps+0x360/0x360 [ 2403.522398] ? ion_query_heaps+0x360/0x360 [ 2403.522408] do_vfs_ioctl+0x75a/0xff0 [ 2403.522420] ? ioctl_preallocate+0x1a0/0x1a0 [ 2403.522428] ? lock_downgrade+0x740/0x740 [ 2403.522441] ? __fget+0x225/0x360 [ 2403.539396] 0*2048kB [ 2403.540888] ? do_vfs_ioctl+0xff0/0xff0 [ 2403.540899] ? security_file_ioctl+0x83/0xb0 [ 2403.540910] SyS_ioctl+0x7f/0xb0 [ 2403.540918] ? do_vfs_ioctl+0xff0/0xff0 [ 2403.540930] do_syscall_64+0x1d5/0x640 [ 2403.540946] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2403.540953] RIP: 0033:0x466459 [ 2403.540958] RSP: 002b:00007fbc80168188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2403.540967] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 2403.540974] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2403.548497] 0*4096kB [ 2403.549403] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2403.553524] 0 [ 2403.557565] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2403.570282] = 762356kB [ 2403.571470] R13: 00007ffc508a7f1f R14: 00007fbc80168300 R15: 0000000000022000 [ 2403.585976] 0 [ 2403.664815] CPU: 1 PID: 15129 Comm: syz-executor.2 Not tainted 4.14.229-syzkaller #0 [ 2403.674514] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2403.683864] Call Trace: [ 2403.686452] dump_stack+0x1b2/0x281 [ 2403.690078] warn_alloc.cold+0x96/0x1cc [ 2403.694059] ? zone_watermark_ok_safe+0x220/0x220 [ 2403.698915] __alloc_pages_nodemask+0x2127/0x2720 [ 2403.703758] ? switch_mm_irqs_off+0x601/0xeb0 [ 2403.708255] ? lock_acquire+0x170/0x3f0 [ 2403.712240] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2403.717091] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2403.722545] ? __mutex_unlock_slowpath+0x75/0x770 [ 2403.727383] ? __list_del_entry_valid+0xb3/0xf0 [ 2403.732053] alloc_pages_current+0x155/0x260 [ 2403.736463] ion_page_pool_alloc+0x118/0x1b0 [ 2403.740872] ion_system_heap_allocate+0x133/0x8c0 [ 2403.745713] ? _raw_spin_unlock+0x29/0x40 [ 2403.749860] ? _ion_heap_freelist_drain+0x6e/0x410 [ 2403.754792] ? ion_system_contig_heap_create+0x130/0x130 [ 2403.760242] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2403.765262] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2403.770109] ion_alloc+0x27a/0x810 [ 2403.773650] ? ion_dma_buf_release+0x40/0x40 [ 2403.778061] ? __might_fault+0x177/0x1b0 [ 2403.782122] ion_ioctl+0xea/0x1f0 [ 2403.785574] ? ion_query_heaps+0x360/0x360 [ 2403.789808] ? ion_query_heaps+0x360/0x360 [ 2403.794043] do_vfs_ioctl+0x75a/0xff0 [ 2403.797841] ? ioctl_preallocate+0x1a0/0x1a0 [ 2403.802255] ? lock_downgrade+0x740/0x740 [ 2403.806409] ? __fget+0x225/0x360 [ 2403.809861] ? do_vfs_ioctl+0xff0/0xff0 [ 2403.813839] ? security_file_ioctl+0x83/0xb0 [ 2403.818245] SyS_ioctl+0x7f/0xb0 [ 2403.821612] ? do_vfs_ioctl+0xff0/0xff0 [ 2403.825586] do_syscall_64+0x1d5/0x640 [ 2403.829477] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2403.834662] RIP: 0033:0x466459 [ 2403.837850] RSP: 002b:00007fa0b5897188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2403.845560] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 2403.852826] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2403.860091] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2403.867364] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2403.874630] R13: 00007ffcdcceba8f R14: 00007fa0b5897300 R15: 0000000000022000 [ 2403.883178] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2403.894503] Node 1 Normal: 4702*4kB (UM) 3235*8kB (UME) 3053*16kB (UME) 2051*32kB (U) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 159168kB [ 2403.909321] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2403.940359] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2403.952896] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2403.962196] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2403.971379] 0 0 0 [ 2403.973954] 42550 total pagecache pages [ 2403.978115] 0 pages in swap cache [ 2403.981994] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2404.013325] Swap cache stats: add 0, delete 0, find 0/0 [ 2404.018809] Free swap = 0kB [ 2404.024652] Total swap = 0kB [ 2404.027677] 2097051 pages RAM [ 2404.030869] 0 pages HighMem/MovableOnly [ 2404.035463] 363848 pages reserved [ 2404.039028] 0 pages cma reserved [ 2404.050281] lowmem_reserve[]: 0 0 0 0 0 [ 2404.054290] Node 1 Normal free:159168kB min:53696kB low:67120kB high:80544kB active_anon:1032kB inactive_anon:60648kB active_file:148kB inactive_file:624kB unevictable:0kB writepending:8kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:288kB pagetables:228kB bounce:0kB free_pcp:568kB local_pcp:496kB free_cma:0kB [ 2404.130862] lowmem_reserve[]: 0 0 0 0 0 [ 2404.134929] Node 0 DMA: 20*4kB (UME) 38*8kB (UME) 38*16kB (UME) 30*32kB (UME) 12*64kB (UME) 5*128kB (UME) 2*256kB (UM) 2*512kB (ME) 2*1024kB (ME) 2*2048kB (UM) 0*4096kB = 11040kB [ 2404.180256] Node 0 DMA32: 91*4kB (UE) 95*8kB (UE) 12632*16kB (U) 10594*32kB (UME) 67*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 546532kB [ 2404.204791] warn_alloc: 1 callbacks suppressed [ 2404.204795] syz-executor.2: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2404.221268] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2404.232032] Node 1 Normal: 4724*4kB (UM) 3245*8kB (UME) 3091*16kB (UME) 2054*32kB (U) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 160040kB [ 2404.234090] Mem-Info: [ 2404.246139] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 2404.246163] CPU: 1 PID: 15136 Comm: syz-executor.2 Not tainted 4.14.229-syzkaller #0 [ 2404.246170] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2404.246173] Call Trace: [ 2404.246189] dump_stack+0x1b2/0x281 [ 2404.246203] warn_alloc.cold+0x96/0x1cc [ 2404.246215] ? zone_watermark_ok_safe+0x220/0x220 [ 2404.246238] __alloc_pages_nodemask+0x2127/0x2720 [ 2404.246255] ? lock_acquire+0x170/0x3f0 [ 2404.246271] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2404.246290] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2404.246303] ? __mutex_unlock_slowpath+0x75/0x770 [ 2404.246318] alloc_pages_current+0x155/0x260 [ 2404.246331] ion_page_pool_alloc+0x118/0x1b0 [ 2404.246342] ion_system_heap_allocate+0x133/0x8c0 [ 2404.246354] ? _raw_spin_unlock+0x29/0x40 [ 2404.280226] active_anon:14681 inactive_anon:38506 isolated_anon:0 [ 2404.280226] active_file:1188 inactive_file:2021 isolated_file:0 [ 2404.280226] unevictable:0 dirty:9 writeback:0 unstable:0 [ 2404.280226] slab_reclaimable:12569 slab_unreclaimable:119063 [ 2404.280226] mapped:46544 shmem:39702 pagetables:766 bounce:0 [ 2404.280226] free:171260 free_pcp:56 free_cma:0 [ 2404.281191] ? _ion_heap_freelist_drain+0x6e/0x410 [ 2404.311169] Node 0 active_anon:57692kB inactive_anon:93376kB active_file:4736kB inactive_file:7948kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:148024kB dirty:28kB writeback:0kB shmem:97812kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2404.314270] ? ion_system_contig_heap_create+0x130/0x130 [ 2404.314281] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2404.314295] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2404.314307] ion_alloc+0x27a/0x810 [ 2404.314321] ? ion_dma_buf_release+0x40/0x40 [ 2404.314334] ? __might_fault+0x177/0x1b0 [ 2404.314347] ion_ioctl+0xea/0x1f0 [ 2404.314356] ? ion_query_heaps+0x360/0x360 [ 2404.314370] ? ion_query_heaps+0x360/0x360 [ 2404.314380] do_vfs_ioctl+0x75a/0xff0 [ 2404.314393] ? ioctl_preallocate+0x1a0/0x1a0 [ 2404.314402] ? lock_downgrade+0x740/0x740 [ 2404.314417] ? __fget+0x225/0x360 [ 2404.314427] ? do_vfs_ioctl+0xff0/0xff0 [ 2404.314438] ? security_file_ioctl+0x83/0xb0 [ 2404.314449] SyS_ioctl+0x7f/0xb0 [ 2404.314457] ? do_vfs_ioctl+0xff0/0xff0 [ 2404.314474] do_syscall_64+0x1d5/0x640 [ 2404.314489] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2404.314497] RIP: 0033:0x466459 [ 2404.314502] RSP: 002b:00007fa0b5876188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2404.314513] RAX: ffffffffffffffda RBX: 000000000056c008 RCX: 0000000000466459 [ 2404.314519] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2404.314524] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2404.314530] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c008 [ 2404.314536] R13: 00007ffcdcceba8f R14: 00007fa0b5876300 R15: 0000000000022000 [ 2404.319727] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2404.360205] Node 1 active_anon:1032kB inactive_anon:60648kB active_file:216kB inactive_file:236kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:38252kB dirty:8kB writeback:0kB shmem:60996kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2404.410196] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2404.569214] Node 0 DMA free:11032kB min:204kB low:252kB high:300kB active_anon:8kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2404.640238] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2404.649111] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2404.700202] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2404.705974] Node 0 DMA32 free:215020kB min:36200kB low:45248kB high:54296kB active_anon:57860kB inactive_anon:93376kB active_file:5052kB inactive_file:8388kB unevictable:0kB writepending:28kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:7456kB pagetables:2836kB bounce:0kB free_pcp:172kB local_pcp:52kB free_cma:0kB [ 2404.733550] 43202 total pagecache pages [ 2404.739714] 0 pages in swap cache [ 2404.748489] Swap cache stats: add 0, delete 0, find 0/0 [ 2404.800179] Free swap = 0kB [ 2404.803224] Total swap = 0kB [ 2404.806235] 2097051 pages RAM [ 2404.809329] 0 pages HighMem/MovableOnly [ 2404.830545] lowmem_reserve[]: 0 0 0 0 0 [ 2404.834580] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2404.875136] 363848 pages reserved [ 2404.878621] 0 pages cma reserved [ 2404.938632] lowmem_reserve[]: 0 0 0 0 0 [ 2404.947727] Node 1 Normal free:118252kB min:53696kB low:67120kB high:80544kB active_anon:1024kB inactive_anon:60648kB active_file:224kB inactive_file:244kB unevictable:0kB writepending:4kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:288kB pagetables:228kB bounce:0kB free_pcp:152kB local_pcp:120kB free_cma:0kB [ 2404.982687] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2404.989411] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2405.035619] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2405.070399] lowmem_reserve[]: 0 0 0 0 0 [ 2405.074423] Node 0 DMA: 14*4kB (ME) 28*8kB (UME) 39*16kB (UME) 30*32kB (UME) 12*64kB (UME) 5*128kB (UME) 2*256kB (UM) 2*512kB (ME) 2*1024kB (ME) 2*2048kB (UM) 0*4096kB = 10952kB [ 2405.094611] systemd-journal invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=0 [ 2405.114149] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2405.141807] systemd-journal cpuset=/ mems_allowed=0-1 [ 2405.147032] CPU: 0 PID: 14114 Comm: systemd-journal Not tainted 4.14.229-syzkaller #0 [ 2405.154984] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2405.164314] Call Trace: [ 2405.166888] dump_stack+0x1b2/0x281 [ 2405.170529] dump_header+0x178/0x82f [ 2405.174226] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2405.179331] ? ___ratelimit+0x2cd/0x530 [ 2405.183283] oom_kill_process.cold+0x10/0xa40 [ 2405.187764] out_of_memory+0xe3e/0x1190 [ 2405.191717] ? oom_killer_disable+0x1c0/0x1c0 [ 2405.196193] ? mutex_trylock+0x152/0x1a0 [ 2405.200247] __alloc_pages_nodemask+0x23e1/0x2720 [ 2405.205076] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2405.209905] ? cache_grow_begin+0x3f/0x700 [ 2405.214120] cache_grow_begin+0x91/0x700 [ 2405.218171] fallback_alloc+0x207/0x2c0 [ 2405.222125] kmem_cache_alloc+0x1e5/0x3c0 [ 2405.226252] getname_flags+0xc8/0x550 [ 2405.230030] do_sys_open+0x1ce/0x410 [ 2405.233722] ? filp_open+0x60/0x60 [ 2405.237246] ? do_syscall_64+0x4c/0x640 [ 2405.241195] ? do_sys_open+0x410/0x410 [ 2405.245058] do_syscall_64+0x1d5/0x640 [ 2405.248929] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2405.254703] RIP: 0033:0x7f7a4c20c840 [ 2405.258400] RSP: 002b:00007fff96276b08 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 2405.266085] RAX: ffffffffffffffda RBX: 00007fff96276e10 RCX: 00007f7a4c20c840 [ 2405.273329] RDX: 00000000000001a0 RSI: 0000000000080042 RDI: 000055e367576300 [ 2405.280576] RBP: 000000000000000d R08: 00000000000001c0 R09: 00000000ffffffff [ 2405.287821] R10: 0000000000000069 R11: 0000000000000246 R12: 00000000ffffffff [ 2405.295068] R13: 000055e367571040 R14: 00007fff96276dd0 R15: 000055e367576120 [ 2405.337284] Node 0 DMA32: 337*4kB (UME) 67*8kB (UME) 19*16kB (UM) 493*32kB (UME) 3*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18156kB [ 2405.356272] Mem-Info: [ 2405.358787] active_anon:14849 inactive_anon:38504 isolated_anon:0 [ 2405.358787] active_file:73 inactive_file:30 isolated_file:0 [ 2405.358787] unevictable:0 dirty:1 writeback:0 unstable:0 [ 2405.358787] slab_reclaimable:12531 slab_unreclaimable:120661 [ 2405.358787] mapped:44378 shmem:39698 pagetables:776 bounce:0 [ 2405.358787] free:13768 free_pcp:1 free_cma:0 [ 2405.394168] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2405.394219] Node 1 Normal: 22*4kB (M) 10*8kB (ME) 8*16kB (UME) 823*32kB (UM) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 26632kB [ 2405.394274] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2405.394280] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2405.394287] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2405.394294] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2405.394298] 39841 total pagecache pages [ 2405.394308] 0 pages in swap cache [ 2405.394314] Swap cache stats: add 0, delete 0, find 0/0 [ 2405.394317] Free swap = 0kB [ 2405.394321] Total swap = 0kB [ 2405.394327] 2097051 pages RAM [ 2405.394331] 0 pages HighMem/MovableOnly [ 2405.394334] 363848 pages reserved [ 2405.394338] 0 pages cma reserved [ 2405.546459] Node 0 active_anon:58372kB inactive_anon:93368kB active_file:140kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:139364kB dirty:0kB writeback:0kB shmem:97796kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2405.574171] syz-executor.5: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2405.586059] Node 1 active_anon:1024kB inactive_anon:60648kB active_file:8kB inactive_file:12kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:37948kB dirty:4kB writeback:0kB shmem:60996kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2405.613776] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 2405.618901] CPU: 1 PID: 15124 Comm: syz-executor.5 Not tainted 4.14.229-syzkaller #0 [ 2405.627121] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2405.636465] Call Trace: [ 2405.639057] dump_stack+0x1b2/0x281 [ 2405.642797] warn_alloc.cold+0x96/0x1cc [ 2405.646862] ? zone_watermark_ok_safe+0x220/0x220 [ 2405.651700] ? usleep_range+0x130/0x130 [ 2405.655679] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 2405.660786] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 2405.665795] ? run_timer_softirq+0x5a0/0x5a0 [ 2405.670207] __alloc_pages_nodemask+0x2127/0x2720 [ 2405.675050] ? lock_acquire+0x170/0x3f0 [ 2405.679026] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2405.683865] ? ion_page_pool_alloc+0x9e/0x1b0 [ 2405.688361] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2405.693810] ? alloc_pages_current+0x15d/0x260 [ 2405.698388] alloc_pages_current+0x155/0x260 [ 2405.702798] ion_page_pool_alloc+0x118/0x1b0 [ 2405.707203] ion_system_heap_allocate+0x133/0x8c0 [ 2405.712910] ? _raw_spin_unlock+0x29/0x40 [ 2405.717052] ? _ion_heap_freelist_drain+0x6e/0x410 [ 2405.721979] ? ion_system_contig_heap_create+0x130/0x130 [ 2405.727408] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2405.732435] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2405.737262] ion_alloc+0x27a/0x810 [ 2405.740787] ? ion_dma_buf_release+0x40/0x40 [ 2405.745174] ? __might_fault+0x177/0x1b0 [ 2405.749226] ion_ioctl+0xea/0x1f0 [ 2405.752659] ? ion_query_heaps+0x360/0x360 [ 2405.756873] ? ion_query_heaps+0x360/0x360 [ 2405.761087] do_vfs_ioctl+0x75a/0xff0 [ 2405.764868] ? ioctl_preallocate+0x1a0/0x1a0 [ 2405.769266] ? lock_downgrade+0x740/0x740 [ 2405.773396] ? __fget+0x225/0x360 [ 2405.776836] ? do_vfs_ioctl+0xff0/0xff0 [ 2405.780792] ? security_file_ioctl+0x83/0xb0 [ 2405.785182] SyS_ioctl+0x7f/0xb0 [ 2405.788527] ? do_vfs_ioctl+0xff0/0xff0 [ 2405.792483] do_syscall_64+0x1d5/0x640 [ 2405.796373] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2405.801555] RIP: 0033:0x466459 [ 2405.804730] RSP: 002b:00007f4d0bcd5188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2405.812437] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 2405.819701] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2405.826955] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2405.834205] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2405.841456] R13: 00007ffe1117a98f R14: 00007f4d0bcd5300 R15: 0000000000022000 [ 2405.848883] Node 0 DMA free:10952kB min:204kB low:252kB high:300kB active_anon:8kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2405.854263] syz-executor.0: [ 2405.875229] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2405.878283] syz-executor.2: [ 2405.883414] Node 0 DMA32 free:17920kB min:36200kB low:45248kB high:54296kB active_anon:58312kB inactive_anon:93368kB active_file:60kB inactive_file:40kB unevictable:0kB writepending:344kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:7488kB pagetables:2876kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2405.883434] lowmem_reserve[]: [ 2405.886465] syz-executor.1: [ 2405.915355] 0 [ 2405.918461] syz-executor.1: [ 2405.921459] 0 0 0 [ 2405.923260] syz-executor.2: [ 2405.926239] 0 [ 2405.928370] page allocation failure: order:0 [ 2405.931391] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2405.945896] page allocation failure: order:0 [ 2405.963139] lowmem_reserve[]: 0 0 0 0 0 [ 2405.963159] Node 1 Normal free:26632kB min:53696kB low:67120kB high:80544kB active_anon:1052kB inactive_anon:60652kB active_file:4kB inactive_file:8kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:288kB pagetables:228kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2405.963177] lowmem_reserve[]: 0 0 0 0 0 [ 2405.963194] Node 0 DMA: 14*4kB (ME) 28*8kB (UME) 39*16kB (UME) 30*32kB (UME) 12*64kB (UME) 5*128kB (UME) 2*256kB (UM) 2*512kB (ME) 2*1024kB (ME) 2*2048kB (UM) 0*4096kB = 10952kB [ 2405.963262] Node 0 DMA32: 369*4kB (UME) 73*8kB (UME) 10*16kB (M) 490*32kB (UME) 3*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18092kB [ 2405.963314] Node 0 Normal: 0*4kB 0*8kB [ 2405.972968] page allocation failure: order:0 [ 2406.007303] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 2406.026884] page allocation failure: order:0 [ 2406.042567] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 2406.048339] page allocation failure: order:0 [ 2406.053816] (null) [ 2406.054651] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 2406.065175] (null) [ 2406.071717] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 2406.077582] (null) [ 2406.078825] 0*16kB [ 2406.090442] (null) [ 2406.094348] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 2406.094819] syz-executor.0 cpuset= [ 2406.099901] CPU: 1 PID: 15134 Comm: syz-executor.1 Not tainted 4.14.229-syzkaller #0 [ 2406.099902] / mems_allowed=0-1 [ 2406.103418] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2406.103422] Call Trace: [ 2406.103440] dump_stack+0x1b2/0x281 [ 2406.103454] warn_alloc.cold+0x96/0x1cc [ 2406.111324] syz-executor.1 cpuset= [ 2406.114479] ? zone_watermark_ok_safe+0x220/0x220 [ 2406.130022] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 2406.130052] ? usleep_range+0x130/0x130 [ 2406.133994] (null) [ 2406.137513] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 2406.142346] / [ 2406.149407] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 2406.167245] ? run_timer_softirq+0x5a0/0x5a0 [ 2406.170015] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 2406.171642] __alloc_pages_nodemask+0x2127/0x2720 [ 2406.171658] ? lock_acquire+0x170/0x3f0 [ 2406.180017] mems_allowed=0-1 [ 2406.181549] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2406.193391] ? ion_page_pool_alloc+0x9e/0x1b0 [ 2406.197869] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2406.203306] alloc_pages_current+0x155/0x260 [ 2406.207702] ion_page_pool_alloc+0x118/0x1b0 [ 2406.212092] ion_system_heap_allocate+0x133/0x8c0 [ 2406.216914] ? _raw_spin_unlock+0x29/0x40 [ 2406.221040] ? _ion_heap_freelist_drain+0x6e/0x410 [ 2406.226037] ? ion_system_contig_heap_create+0x130/0x130 [ 2406.231464] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2406.236473] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2406.241296] ion_alloc+0x27a/0x810 [ 2406.244828] ? ion_dma_buf_release+0x40/0x40 [ 2406.249215] ? __might_fault+0x177/0x1b0 [ 2406.253259] ion_ioctl+0xea/0x1f0 [ 2406.256691] ? ion_query_heaps+0x360/0x360 [ 2406.260907] ? ion_query_heaps+0x360/0x360 [ 2406.265120] do_vfs_ioctl+0x75a/0xff0 [ 2406.268900] ? ioctl_preallocate+0x1a0/0x1a0 [ 2406.273298] ? lock_downgrade+0x740/0x740 [ 2406.277427] ? __fget+0x225/0x360 [ 2406.280859] ? do_vfs_ioctl+0xff0/0xff0 [ 2406.284813] ? security_file_ioctl+0x83/0xb0 [ 2406.289199] SyS_ioctl+0x7f/0xb0 [ 2406.292544] ? do_vfs_ioctl+0xff0/0xff0 [ 2406.296498] do_syscall_64+0x1d5/0x640 [ 2406.300367] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2406.305533] RIP: 0033:0x466459 [ 2406.308699] RSP: 002b:00007f10b67af188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2406.316383] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 2406.323629] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2406.330876] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2406.338212] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2406.345461] R13: 00007ffd58825dcf R14: 00007f10b67af300 R15: 0000000000022000 [ 2406.352723] CPU: 0 PID: 15136 Comm: syz-executor.2 Not tainted 4.14.229-syzkaller #0 [ 2406.360600] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2406.361155] 0*32kB [ 2406.370028] Call Trace: [ 2406.370048] dump_stack+0x1b2/0x281 [ 2406.370061] warn_alloc.cold+0x96/0x1cc [ 2406.370073] ? zone_watermark_ok_safe+0x220/0x220 [ 2406.370084] ? usleep_range+0x130/0x130 [ 2406.370094] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 2406.370107] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 2406.370118] ? run_timer_softirq+0x5a0/0x5a0 [ 2406.370133] __alloc_pages_nodemask+0x2127/0x2720 [ 2406.379209] syz-executor.2 cpuset= [ 2406.382504] ? lock_acquire+0x170/0x3f0 [ 2406.382521] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2406.382533] ? ion_page_pool_alloc+0x9e/0x1b0 [ 2406.387357] 0*64kB [ 2406.391309] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2406.391328] alloc_pages_current+0x155/0x260 [ 2406.391340] ion_page_pool_alloc+0x118/0x1b0 [ 2406.391349] ion_system_heap_allocate+0x133/0x8c0 [ 2406.391361] ? _raw_spin_unlock+0x29/0x40 [ 2406.391370] ? _ion_heap_freelist_drain+0x6e/0x410 [ 2406.391379] ? ion_system_contig_heap_create+0x130/0x130 [ 2406.391388] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2406.391400] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2406.403367] / [ 2406.405982] ion_alloc+0x27a/0x810 [ 2406.410871] 0*128kB [ 2406.414339] ? ion_dma_buf_release+0x40/0x40 [ 2406.418279] 0*256kB [ 2406.423123] ? __might_fault+0x177/0x1b0 [ 2406.423135] ion_ioctl+0xea/0x1f0 [ 2406.423145] ? ion_query_heaps+0x360/0x360 [ 2406.423157] ? ion_query_heaps+0x360/0x360 [ 2406.423167] do_vfs_ioctl+0x75a/0xff0 [ 2406.423178] ? ioctl_preallocate+0x1a0/0x1a0 [ 2406.423189] ? lock_downgrade+0x740/0x740 [ 2406.434476] mems_allowed=0-1 [ 2406.435306] ? __fget+0x225/0x360 [ 2406.456733] 0*512kB [ 2406.457947] ? do_vfs_ioctl+0xff0/0xff0 [ 2406.463400] 0*1024kB [ 2406.468371] ? security_file_ioctl+0x83/0xb0 [ 2406.496707] 0*2048kB [ 2406.499058] SyS_ioctl+0x7f/0xb0 [ 2406.520010] 0*4096kB [ 2406.522100] ? do_vfs_ioctl+0xff0/0xff0 [ 2406.524401] = 0kB [ 2406.528443] do_syscall_64+0x1d5/0x640 [ 2406.553198] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2406.556700] Node 1 Normal: [ 2406.558377] RIP: 0033:0x466459 [ 2406.558383] RSP: 002b:00007fa0b5876188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2406.572159] RAX: ffffffffffffffda RBX: 000000000056c008 RCX: 0000000000466459 [ 2406.576979] 22*4kB [ 2406.579413] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2406.579419] (M) [ 2406.581629] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2406.581634] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c008 [ 2406.581640] R13: 00007ffcdcceba8f R14: 00007fa0b5876300 R15: 0000000000022000 [ 2406.599492] CPU: 0 PID: 15137 Comm: syz-executor.1 Not tainted 4.14.229-syzkaller #0 [ 2406.621125] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2406.630463] Call Trace: [ 2406.633068] dump_stack+0x1b2/0x281 [ 2406.636679] warn_alloc.cold+0x96/0x1cc [ 2406.640640] ? zone_watermark_ok_safe+0x220/0x220 [ 2406.643409] 10*8kB [ 2406.645473] ? usleep_range+0x130/0x130 [ 2406.645475] (ME) 8*16kB [ 2406.647697] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 2406.659439] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 2406.664272] (UME) 823*32kB [ 2406.664466] ? run_timer_softirq+0x5a0/0x5a0 [ 2406.664489] __alloc_pages_nodemask+0x2127/0x2720 [ 2406.667396] (UM) [ 2406.671803] ? lock_acquire+0x170/0x3f0 [ 2406.671817] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2406.671825] ? ion_page_pool_alloc+0x9e/0x1b0 [ 2406.671841] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2406.671853] ? retint_kernel+0x2d/0x2d [ 2406.671865] alloc_pages_current+0x155/0x260 [ 2406.671877] ion_page_pool_alloc+0x118/0x1b0 [ 2406.689996] 0*64kB [ 2406.691992] ion_system_heap_allocate+0x133/0x8c0 [ 2406.697414] 0*128kB [ 2406.701284] ? _raw_spin_unlock+0x29/0x40 [ 2406.701293] ? _ion_heap_freelist_drain+0x6e/0x410 [ 2406.701301] ? ion_system_contig_heap_create+0x130/0x130 [ 2406.701312] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2406.701323] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2406.701333] ion_alloc+0x27a/0x810 [ 2406.723359] 0*256kB [ 2406.723542] ? ion_dma_buf_release+0x40/0x40 [ 2406.728462] 0*512kB [ 2406.733899] ? __might_fault+0x177/0x1b0 [ 2406.733912] ion_ioctl+0xea/0x1f0 [ 2406.733921] ? ion_query_heaps+0x360/0x360 [ 2406.733934] ? sockfd_lookup_light+0xb2/0x160 [ 2406.733943] ? ion_query_heaps+0x360/0x360 [ 2406.763596] 0*1024kB [ 2406.763748] do_vfs_ioctl+0x75a/0xff0 [ 2406.767962] 0*2048kB [ 2406.774090] ? ioctl_preallocate+0x1a0/0x1a0 [ 2406.774100] ? lock_downgrade+0x740/0x740 [ 2406.774112] ? __fget+0x225/0x360 [ 2406.774120] ? do_vfs_ioctl+0xff0/0xff0 [ 2406.774131] ? security_file_ioctl+0x83/0xb0 [ 2406.774143] SyS_ioctl+0x7f/0xb0 [ 2406.803381] 0*4096kB [ 2406.807277] ? do_vfs_ioctl+0xff0/0xff0 [ 2406.810656] = 26632kB [ 2406.813011] do_syscall_64+0x1d5/0x640 [ 2406.816953] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2406.819357] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2406.837210] RIP: 0033:0x466459 [ 2406.840389] RSP: 002b:00007f10b678e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2406.843408] warn_alloc_show_mem: 2 callbacks suppressed [ 2406.843411] Mem-Info: [ 2406.848092] RAX: ffffffffffffffda RBX: 000000000056c008 RCX: 0000000000466459 [ 2406.853493] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2406.855825] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2406.855833] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2406.883334] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2406.886135] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c008 [ 2406.895121] active_anon:14844 inactive_anon:38505 isolated_anon:0 [ 2406.895121] active_file:13 inactive_file:19 isolated_file:0 [ 2406.895121] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2406.895121] slab_reclaimable:12520 slab_unreclaimable:120685 [ 2406.895121] mapped:44298 shmem:39699 pagetables:776 bounce:0 [ 2406.895121] free:13919 free_pcp:6 free_cma:0 [ 2406.902314] R13: 00007ffd58825dcf R14: 00007f10b678e300 R15: 0000000000022000 [ 2406.912466] CPU: 0 PID: 15132 Comm: syz-executor.0 Not tainted 4.14.229-syzkaller #0 [ 2406.950784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2406.953416] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2406.960122] Call Trace: [ 2406.960143] dump_stack+0x1b2/0x281 [ 2406.960156] warn_alloc.cold+0x96/0x1cc [ 2406.960168] ? zone_watermark_ok_safe+0x220/0x220 [ 2406.960180] ? usleep_range+0x130/0x130 [ 2406.987607] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 2406.992701] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 2406.993342] 39731 total pagecache pages [ 2406.997705] ? run_timer_softirq+0x5a0/0x5a0 [ 2407.006069] __alloc_pages_nodemask+0x2127/0x2720 [ 2407.010910] ? lock_acquire+0x170/0x3f0 [ 2407.013455] 0 pages in swap cache [ 2407.014883] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2407.018311] Swap cache stats: add 0, delete 0, find 0/0 [ 2407.023142] ? ion_page_pool_alloc+0x9e/0x1b0 [ 2407.023158] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2407.023176] alloc_pages_current+0x155/0x260 [ 2407.023188] ion_page_pool_alloc+0x118/0x1b0 [ 2407.028562] Node 0 active_anon:58324kB inactive_anon:93368kB active_file:60kB inactive_file:56kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:139272kB dirty:0kB writeback:0kB shmem:97796kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2407.033015] ion_system_heap_allocate+0x133/0x8c0 [ 2407.033028] ? _raw_spin_unlock+0x29/0x40 [ 2407.033035] ? _ion_heap_freelist_drain+0x6e/0x410 [ 2407.033044] ? ion_system_contig_heap_create+0x130/0x130 [ 2407.033054] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2407.033064] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2407.033077] ion_alloc+0x27a/0x810 [ 2407.050679] Node 1 active_anon:1052kB inactive_anon:60652kB active_file:4kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:37920kB dirty:0kB writeback:0kB shmem:61000kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2407.074948] ? ion_dma_buf_release+0x40/0x40 [ 2407.074961] ? __might_fault+0x177/0x1b0 [ 2407.074971] ion_ioctl+0xea/0x1f0 [ 2407.074979] ? ion_query_heaps+0x360/0x360 [ 2407.074991] ? ion_query_heaps+0x360/0x360 [ 2407.075002] do_vfs_ioctl+0x75a/0xff0 [ 2407.075014] ? ioctl_preallocate+0x1a0/0x1a0 [ 2407.075023] ? lock_downgrade+0x740/0x740 [ 2407.075035] ? __fget+0x225/0x360 [ 2407.082877] Free swap = 0kB [ 2407.084005] ? do_vfs_ioctl+0xff0/0xff0 [ 2407.088902] Total swap = 0kB [ 2407.094354] ? security_file_ioctl+0x83/0xb0 [ 2407.094364] SyS_ioctl+0x7f/0xb0 [ 2407.094373] ? do_vfs_ioctl+0xff0/0xff0 [ 2407.094384] do_syscall_64+0x1d5/0x640 [ 2407.094398] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2407.094407] RIP: 0033:0x466459 [ 2407.123312] 2097051 pages RAM [ 2407.134669] RSP: 002b:00007fbc80168188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2407.134680] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 2407.134685] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2407.134690] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2407.134695] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2407.134700] R13: 00007ffc508a7f1f R14: 00007fbc80168300 R15: 0000000000022000 [ 2407.253185] CPU: 1 PID: 15129 Comm: syz-executor.2 Not tainted 4.14.229-syzkaller #0 [ 2407.261079] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2407.270428] Call Trace: [ 2407.273019] dump_stack+0x1b2/0x281 [ 2407.276653] warn_alloc.cold+0x96/0x1cc [ 2407.280633] ? zone_watermark_ok_safe+0x220/0x220 [ 2407.285478] ? usleep_range+0x130/0x130 [ 2407.289449] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 2407.294553] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 2407.299569] ? run_timer_softirq+0x5a0/0x5a0 [ 2407.303984] __alloc_pages_nodemask+0x2127/0x2720 [ 2407.308826] ? lock_acquire+0x170/0x3f0 [ 2407.312806] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2407.317648] ? ion_page_pool_alloc+0x9e/0x1b0 [ 2407.322150] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2407.327600] ? alloc_pages_current+0x84/0x260 [ 2407.332100] alloc_pages_current+0x155/0x260 [ 2407.336507] ion_page_pool_alloc+0x118/0x1b0 [ 2407.340925] ion_system_heap_allocate+0x133/0x8c0 [ 2407.345788] ? _raw_spin_unlock+0x29/0x40 [ 2407.349925] ? _ion_heap_freelist_drain+0x6e/0x410 [ 2407.354849] ? ion_system_contig_heap_create+0x130/0x130 [ 2407.360296] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2407.365310] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2407.370155] ion_alloc+0x27a/0x810 [ 2407.373698] ? ion_dma_buf_release+0x40/0x40 [ 2407.378108] ? __might_fault+0x177/0x1b0 [ 2407.382169] ion_ioctl+0xea/0x1f0 [ 2407.385613] ? ion_query_heaps+0x360/0x360 [ 2407.389840] ? ion_query_heaps+0x360/0x360 [ 2407.394070] do_vfs_ioctl+0x75a/0xff0 [ 2407.397967] ? ioctl_preallocate+0x1a0/0x1a0 [ 2407.402372] ? lock_downgrade+0x740/0x740 [ 2407.406514] ? __fget+0x225/0x360 [ 2407.409959] ? do_vfs_ioctl+0xff0/0xff0 [ 2407.413931] ? security_file_ioctl+0x83/0xb0 [ 2407.418342] SyS_ioctl+0x7f/0xb0 [ 2407.421714] ? do_vfs_ioctl+0xff0/0xff0 [ 2407.425683] do_syscall_64+0x1d5/0x640 [ 2407.429565] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2407.434750] RIP: 0033:0x466459 [ 2407.437931] RSP: 002b:00007fa0b5897188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2407.445635] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 2407.452901] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2407.460162] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2407.467429] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2407.474694] R13: 00007ffcdcceba8f R14: 00007fa0b5897300 R15: 0000000000022000 [ 2407.482992] Node 0 DMA free:10952kB min:204kB low:252kB high:300kB active_anon:8kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2407.509742] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2407.515185] Node 0 DMA32 free:445548kB min:36200kB low:45248kB high:54296kB active_anon:58316kB inactive_anon:93368kB active_file:60kB inactive_file:356kB unevictable:0kB writepending:0kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:7424kB pagetables:2876kB bounce:0kB free_pcp:288kB local_pcp:56kB free_cma:0kB [ 2407.544777] lowmem_reserve[]: 0 0 0 0 0 [ 2407.549001] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2407.575136] lowmem_reserve[]: 0 0 0 0 0 [ 2407.579366] Node 1 Normal free:608412kB min:53696kB low:67120kB high:80544kB active_anon:1052kB inactive_anon:60652kB active_file:4kB inactive_file:4308kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:288kB pagetables:228kB bounce:0kB free_pcp:136kB local_pcp:116kB free_cma:0kB [ 2407.611377] lowmem_reserve[]: 0 0 0 0 0 [ 2407.615387] Node 0 DMA: 14*4kB (ME) 28*8kB (UME) 39*16kB (UME) 30*32kB (UME) 21*64kB (UME) 6*128kB (UME) 2*256kB (UM) 2*512kB (ME) 2*1024kB (ME) 2*2048kB (UM) 0*4096kB = 11656kB [ 2407.631647] 0 pages HighMem/MovableOnly [ 2407.635621] 363848 pages reserved [ 2407.639064] 0 pages cma reserved [ 2407.642600] Out of memory (oom_kill_allocating_task): Kill process 14114 (systemd-journal) score 0 or sacrifice child [ 2407.653500] Node 0 DMA32: 121*4kB (UME) 171*8kB (UME) 12*16kB (UM) 492*32kB (UME) 3549*64kB (UM) 1094*128kB (UM) 275*256kB (U) 34*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 472764kB [ 2407.669754] Killed process 14114 (systemd-journal) total-vm:46096kB, anon-rss:480kB, file-rss:0kB, shmem-rss:3084kB [ 2407.680506] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2407.695422] Node 1 Normal: 1*4kB (M) 3*8kB (ME) 2*16kB (UE) 821*32kB (U) 892*64kB (UM) 1824*128kB (U) 906*256kB (UM) 1*512kB (M) 3*1024kB (UM) 2*2048kB (UM) 90*4096kB (U) = 925148kB [ 2407.712515] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2407.724580] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2407.733770] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2407.741486] systemd[1]: systemd-journald.service: Failed with result 'signal'. [ 2407.743738] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2407.768792] systemd[1]: systemd-journald.service: Service has no hold-off time, scheduling restart. [ 2407.768964] 42136 total pagecache pages [ 2407.792167] 0 pages in swap cache [ 2407.795905] Swap cache stats: add 0, delete 0, find 0/0 [ 2407.802202] systemd[1]: Stopped Journal Service. [ 2407.803141] Free swap = 0kB [ 2407.810898] Total swap = 0kB [ 2407.814409] 2097051 pages RAM [ 2407.818043] 0 pages HighMem/MovableOnly [ 2407.822820] 363848 pages reserved [ 2407.826663] 0 pages cma reserved [ 2407.828787] systemd[1]: Starting Journal Service... [ 2407.859973] warn_alloc_show_mem: 4 callbacks suppressed [ 2407.859976] Mem-Info: [ 2407.867769] active_anon:14815 inactive_anon:38504 isolated_anon:0 [ 2407.867769] active_file:189 inactive_file:2691 isolated_file:0 [ 2407.867769] unevictable:0 dirty:47 writeback:0 unstable:0 [ 2407.867769] slab_reclaimable:12502 slab_unreclaimable:120232 [ 2407.867769] mapped:45573 shmem:39699 pagetables:743 bounce:0 [ 2407.867769] free:401440 free_pcp:189 free_cma:0 [ 2407.960214] Node 0 active_anon:58652kB inactive_anon:93368kB active_file:832kB inactive_file:8332kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:144876kB dirty:160kB writeback:0kB shmem:97796kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2408.024937] systemd-journald[15179]: File /run/log/journal/04d8c135ee6b410280ba31a58c89679d/system.journal corrupted or uncleanly shut down, renaming and replacing. [ 2408.039947] Node 1 active_anon:908kB inactive_anon:60648kB active_file:324kB inactive_file:4132kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:38316kB dirty:28kB writeback:0kB shmem:61000kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2408.039952] Node 0 DMA free:11656kB min:204kB low:252kB high:300kB active_anon:8kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2408.039973] lowmem_reserve[]: 0 2717 2718 2718 2718 09:15:22 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) accept$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000040)=0x14) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000180)={0x80000001, 0x13}) 09:15:22 executing program 0: openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x2, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000180)={0x80000001, 0x13, 0x1}) [ 2408.039995] Node 0 DMA32 free:782864kB min:36200kB low:45248kB high:54296kB active_anon:58444kB inactive_anon:93368kB active_file:2732kB inactive_file:7132kB unevictable:0kB writepending:160kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:7328kB pagetables:2636kB bounce:0kB free_pcp:1052kB local_pcp:580kB free_cma:0kB [ 2408.040017] lowmem_reserve[]: 0 0 0 0 0 [ 2408.134609] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2408.160917] lowmem_reserve[]: 0 0 0 0 0 09:15:22 executing program 3: r0 = perf_event_open$cgroup(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = epoll_create(0x7) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000001c0)={0x20000005}) r2 = gettid() sched_rr_get_interval(r2, &(0x7f0000000080)) kcmp$KCMP_EPOLL_TFD(0x0, r2, 0x7, r0, &(0x7f0000000080)={r1, r0, 0x7ff}) epoll_wait(r1, &(0x7f0000000100)=[{}], 0x1, 0x0) 09:15:22 executing program 1: epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x2, 0x0) syz_open_dev$admmidi(&(0x7f00000000c0)='/dev/admmidi#\x00', 0x4, 0x200000) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000180)={0x80000001, 0x13}) accept(0xffffffffffffffff, &(0x7f0000000000)=@can, &(0x7f0000000080)=0x80) [ 2408.165984] Node 1 Normal free:1184028kB min:53696kB low:67120kB high:80544kB active_anon:908kB inactive_anon:60648kB active_file:324kB inactive_file:4132kB unevictable:0kB writepending:28kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:288kB pagetables:188kB bounce:0kB free_pcp:396kB local_pcp:328kB free_cma:0kB [ 2408.195574] lowmem_reserve[]: 0 0 0 0 0 [ 2408.199720] Node 0 DMA: 14*4kB (ME) 28*8kB (UME) 39*16kB (UME) 30*32kB (UME) 21*64kB (UME) 6*128kB (UME) 2*256kB (UM) 2*512kB (ME) 2*1024kB (ME) 2*2048kB (UM) 0*4096kB = 11656kB [ 2408.216935] Node 0 DMA32: 86*4kB (UE) 94*8kB (UME) 1*16kB (U) 461*32kB (UE) 7066*64kB (UM) 2354*128kB (UM) 491*256kB (UM) 24*512kB (U) 1*1024kB (U) 0*2048kB 0*4096kB = 908408kB [ 2408.233378] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2408.246909] Node 1 Normal: 1*4kB (M) 3*8kB (ME) 2*16kB (UE) 821*32kB (U) 2848*64kB (UM) 1879*128kB (U) 1425*256kB (UM) 178*512kB (UM) 9*1024kB (UM) 2*2048kB (UM) 90*4096kB (U) = 1287004kB [ 2408.266313] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2408.276514] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2408.287919] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2408.313014] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2408.331560] 46692 total pagecache pages [ 2408.340185] 0 pages in swap cache [ 2408.346986] Swap cache stats: add 0, delete 0, find 0/0 [ 2408.357945] Free swap = 0kB [ 2408.364393] Total swap = 0kB [ 2408.371859] 2097051 pages RAM [ 2408.378653] 0 pages HighMem/MovableOnly [ 2408.387296] 363848 pages reserved [ 2408.398640] 0 pages cma reserved 09:15:22 executing program 5: epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x2, 0x0) openat$ion(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ion\x00', 0x80040, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r2 = socket(0x1, 0xa, 0x2) r3 = accept(0xffffffffffffffff, &(0x7f0000000400)=@x25={0x9, @remote}, &(0x7f00000001c0)=0x80) getsockname$packet(r3, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000480)=0x14) accept(r2, 0x0, &(0x7f0000000240)) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000025bd7000fbdbdf25310000000c0099007f000000700000000800db00", @ANYRES32, @ANYBLOB='\b\x00R\x00', @ANYRES32, @ANYBLOB="0c009900719bc81c1100000008000300", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=r1, @ANYBLOB="f154e2d2a93e34d148a6c09ca59c65f025a5b98ef53825d7f34dfd1107fe8304b39fd35c7037ba30ed232ce2429dd243b9cfcb88137fdcd305ae1d4e874867d5ae0cb9e9bed12f8fe55102d51bd91db5370cf809f6739d1e1d1b253c05354093e4a6a31b8e89c2ef3c75ec6423a6b9b19a10bcd59586a66ba7142d00e9058f9088ba71d8cdd1d5b374149d34ec15d3ff594b3f589c329643aada581739f8c631caa1e859b1f56d898090378acaedba67d03bfa37337a6d710966b4c9632398cb1daebbead088783c6309feae2ad3ff3c639d73fac13b89ca95169f3bde273a20b668"], 0x4c}, 0x1, 0x0, 0x0, 0x4000051}, 0x4000) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x80000001, 0x13}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040)='l2tp\x00', 0xffffffffffffffff) 09:15:22 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0xc0000002}) 09:15:22 executing program 0: openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x2, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000180)={0x80000001, 0x13, 0x1}) 09:15:23 executing program 2: sched_rr_get_interval(0x0, &(0x7f0000000000)) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x89fa, &(0x7f0000003dc0)={'ip6gre0\x00', 0x0}) clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) recvmmsg(r0, &(0x7f00000002c0)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)=""/57, 0x39}, {&(0x7f0000000080)=""/81, 0x51}, {&(0x7f00000001c0)=""/163, 0xa3}], 0x3, &(0x7f0000000280)=""/35, 0x23}, 0x1}], 0x1, 0x2040, &(0x7f0000000340)={r1, r2+10000000}) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000180)={0x80000001, 0x13}) 09:15:23 executing program 0: openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x2, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000180)={0x80000001, 0x13, 0x1}) 09:15:23 executing program 0: openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x2, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0) 09:15:23 executing program 0: openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x2, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0) 09:15:23 executing program 0: openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x2, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0) [ 2409.441708] syz-executor.4: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2409.463099] syz-executor.1: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2409.477419] syz-executor.1: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2409.496164] syz-executor.5: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2409.505920] syz-executor.4 cpuset= [ 2409.512922] syz-executor.1 cpuset= [ 2409.516563] syz-executor.1 cpuset= [ 2409.523491] / [ 2409.528765] / [ 2409.532765] / [ 2409.541413] mems_allowed=0-1 [ 2409.547366] mems_allowed=0-1 [ 2409.550122] syz-executor.5 cpuset= [ 2409.551685] mems_allowed=0-1 [ 2409.553624] / [ 2409.556385] CPU: 1 PID: 15182 Comm: syz-executor.4 Not tainted 4.14.229-syzkaller #0 [ 2409.567882] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2409.577245] Call Trace: [ 2409.579839] dump_stack+0x1b2/0x281 [ 2409.580741] mems_allowed=0-1 [ 2409.583463] warn_alloc.cold+0x96/0x1cc [ 2409.583476] ? zone_watermark_ok_safe+0x220/0x220 [ 2409.583496] __alloc_pages_nodemask+0x2127/0x2720 [ 2409.600200] ? lock_acquire+0x170/0x3f0 [ 2409.604178] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2409.609028] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2409.614485] ? __mutex_unlock_slowpath+0x75/0x770 [ 2409.619334] alloc_pages_current+0x155/0x260 [ 2409.623747] ion_page_pool_alloc+0x118/0x1b0 [ 2409.628155] ion_system_heap_allocate+0x133/0x8c0 [ 2409.632993] ? ion_alloc+0x187/0x810 [ 2409.636708] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2409.642153] ? ion_system_contig_heap_create+0x130/0x130 [ 2409.647726] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2409.652746] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2409.657587] ion_alloc+0x204/0x810 [ 2409.661136] ? ion_dma_buf_release+0x40/0x40 [ 2409.665547] ? __might_fault+0x177/0x1b0 [ 2409.669605] ion_ioctl+0xea/0x1f0 [ 2409.673051] ? ion_query_heaps+0x360/0x360 [ 2409.677277] ? sockfd_lookup_light+0xb2/0x160 [ 2409.681844] ? ion_query_heaps+0x360/0x360 [ 2409.683388] systemd[1]: Started Journal Service. [ 2409.686066] do_vfs_ioctl+0x75a/0xff0 [ 2409.694596] ? ioctl_preallocate+0x1a0/0x1a0 [ 2409.699001] ? lock_downgrade+0x740/0x740 [ 2409.703147] ? __fget+0x225/0x360 [ 2409.706599] ? do_vfs_ioctl+0xff0/0xff0 [ 2409.710573] ? security_file_ioctl+0x83/0xb0 [ 2409.714981] SyS_ioctl+0x7f/0xb0 [ 2409.718345] ? do_vfs_ioctl+0xff0/0xff0 [ 2409.722321] do_syscall_64+0x1d5/0x640 [ 2409.726209] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2409.731505] RIP: 0033:0x466459 [ 2409.734690] RSP: 002b:00007f46becae188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2409.742402] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 2409.749666] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2409.756930] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2409.764195] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2409.771544] R13: 00007ffe96c50ebf R14: 00007f46becae300 R15: 0000000000022000 [ 2409.783100] CPU: 1 PID: 15185 Comm: syz-executor.1 Not tainted 4.14.229-syzkaller #0 [ 2409.790995] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2409.800337] Call Trace: [ 2409.802920] dump_stack+0x1b2/0x281 [ 2409.806533] warn_alloc.cold+0x96/0x1cc [ 2409.810487] ? zone_watermark_ok_safe+0x220/0x220 [ 2409.815317] __alloc_pages_nodemask+0x2127/0x2720 [ 2409.820140] ? __schedule+0x893/0x1de0 [ 2409.824012] ? lock_acquire+0x170/0x3f0 [ 2409.827970] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2409.832799] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2409.838237] ? __mutex_unlock_slowpath+0x75/0x770 [ 2409.843064] alloc_pages_current+0x155/0x260 [ 2409.847465] ion_page_pool_alloc+0x118/0x1b0 [ 2409.851852] ion_system_heap_allocate+0x133/0x8c0 [ 2409.856675] ? ion_alloc+0x187/0x810 [ 2409.860382] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2409.865811] ? ion_system_contig_heap_create+0x130/0x130 [ 2409.871245] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2409.876241] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2409.881063] ion_alloc+0x204/0x810 [ 2409.884583] ? ion_dma_buf_release+0x40/0x40 [ 2409.888971] ? __might_fault+0x177/0x1b0 [ 2409.893053] ion_ioctl+0xea/0x1f0 [ 2409.896492] ? ion_query_heaps+0x360/0x360 [ 2409.900709] ? ion_query_heaps+0x360/0x360 [ 2409.904922] do_vfs_ioctl+0x75a/0xff0 [ 2409.908702] ? ioctl_preallocate+0x1a0/0x1a0 [ 2409.913089] ? lock_downgrade+0x740/0x740 [ 2409.917215] ? __fget+0x225/0x360 [ 2409.920653] ? do_vfs_ioctl+0xff0/0xff0 [ 2409.924610] ? security_file_ioctl+0x83/0xb0 [ 2409.928996] SyS_ioctl+0x7f/0xb0 [ 2409.932342] ? do_vfs_ioctl+0xff0/0xff0 [ 2409.936307] do_syscall_64+0x1d5/0x640 [ 2409.940179] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2409.945345] RIP: 0033:0x466459 [ 2409.948527] RSP: 002b:00007f10b67af188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2409.956314] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 2409.963584] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2409.970922] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2409.978170] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2409.985417] R13: 00007ffd58825dcf R14: 00007f10b67af300 R15: 0000000000022000 [ 2409.993161] CPU: 1 PID: 15186 Comm: syz-executor.1 Not tainted 4.14.229-syzkaller #0 [ 2409.999136] syz-executor.2: [ 2410.001044] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2410.001048] Call Trace: [ 2410.001067] dump_stack+0x1b2/0x281 [ 2410.001082] warn_alloc.cold+0x96/0x1cc [ 2410.001094] ? zone_watermark_ok_safe+0x220/0x220 [ 2410.001117] __alloc_pages_nodemask+0x2127/0x2720 [ 2410.001133] ? lock_acquire+0x170/0x3f0 [ 2410.001148] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2410.001165] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2410.001177] ? __mutex_unlock_slowpath+0x75/0x770 [ 2410.001192] alloc_pages_current+0x155/0x260 [ 2410.001205] ion_page_pool_alloc+0x118/0x1b0 [ 2410.001215] ion_system_heap_allocate+0x133/0x8c0 [ 2410.001224] ? ion_alloc+0x187/0x810 [ 2410.001234] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2410.001242] ? ion_system_contig_heap_create+0x130/0x130 [ 2410.001251] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2410.001262] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2410.001273] ion_alloc+0x204/0x810 [ 2410.001286] ? ion_dma_buf_release+0x40/0x40 [ 2410.001299] ? __might_fault+0x177/0x1b0 [ 2410.001312] ion_ioctl+0xea/0x1f0 [ 2410.001321] ? ion_query_heaps+0x360/0x360 [ 2410.001333] ? ion_query_heaps+0x360/0x360 [ 2410.001343] do_vfs_ioctl+0x75a/0xff0 [ 2410.001353] ? ioctl_preallocate+0x1a0/0x1a0 [ 2410.012361] page allocation failure: order:4 [ 2410.013703] ? lock_downgrade+0x740/0x740 [ 2410.013724] ? __fget+0x225/0x360 [ 2410.024018] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 2410.028702] ? do_vfs_ioctl+0xff0/0xff0 [ 2410.028714] ? security_file_ioctl+0x83/0xb0 [ 2410.028724] SyS_ioctl+0x7f/0xb0 [ 2410.068914] (null) [ 2410.070007] ? do_vfs_ioctl+0xff0/0xff0 [ 2410.070021] do_syscall_64+0x1d5/0x640 [ 2410.070037] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2410.070046] RIP: 0033:0x466459 [ 2410.078812] syz-executor.2 cpuset= [ 2410.080912] RSP: 002b:00007f10b678e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2410.080922] RAX: ffffffffffffffda RBX: 000000000056c008 RCX: 0000000000466459 [ 2410.080927] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2410.080932] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2410.080937] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c008 [ 2410.080943] R13: 00007ffd58825dcf R14: 00007f10b678e300 R15: 0000000000022000 [ 2410.081934] Mem-Info: [ 2410.094583] CPU: 0 PID: 15192 Comm: syz-executor.5 Not tainted 4.14.229-syzkaller #0 [ 2410.099600] active_anon:15281 inactive_anon:40536 isolated_anon:0 [ 2410.099600] active_file:1868 inactive_file:5173 isolated_file:3 [ 2410.099600] unevictable:0 dirty:28 writeback:0 unstable:0 [ 2410.099600] slab_reclaimable:12526 slab_unreclaimable:121468 [ 2410.099600] mapped:57263 shmem:41746 pagetables:797 bounce:0 [ 2410.099600] free:189445 free_pcp:172 free_cma:0 [ 2410.102816] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2410.102819] Call Trace: [ 2410.102836] dump_stack+0x1b2/0x281 [ 2410.102850] warn_alloc.cold+0x96/0x1cc [ 2410.102862] ? zone_watermark_ok_safe+0x220/0x220 [ 2410.102883] __alloc_pages_nodemask+0x2127/0x2720 [ 2410.102900] ? lock_acquire+0x170/0x3f0 [ 2410.106408] Node 0 active_anon:60228kB inactive_anon:101560kB active_file:7012kB inactive_file:16624kB unevictable:0kB isolated(anon):0kB isolated(file):12kB mapped:190456kB dirty:104kB writeback:0kB shmem:105988kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 14336kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2410.110582] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2410.110599] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2410.110614] ? __mutex_unlock_slowpath+0x75/0x770 [ 2410.114852] Node 1 active_anon:896kB inactive_anon:60584kB active_file:460kB inactive_file:4068kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:38596kB dirty:8kB writeback:0kB shmem:60996kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2410.118600] ? retint_kernel+0x2d/0x2d [ 2410.118617] alloc_pages_current+0x155/0x260 [ 2410.126053] / [ 2410.127405] ion_page_pool_alloc+0x118/0x1b0 [ 2410.131856] Node 0 [ 2410.134969] ion_system_heap_allocate+0x133/0x8c0 [ 2410.134984] ? ion_alloc+0x187/0x810 [ 2410.142170] mems_allowed=0-1 [ 2410.146017] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2410.146026] ? ion_system_contig_heap_create+0x130/0x130 [ 2410.146038] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2410.150814] DMA free:11128kB min:204kB low:252kB high:300kB active_anon:2056kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2410.153771] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2410.153781] ion_alloc+0x204/0x810 [ 2410.153793] ? ion_dma_buf_release+0x40/0x40 [ 2410.158105] lowmem_reserve[]: [ 2410.159879] ? __might_fault+0x177/0x1b0 [ 2410.159890] ion_ioctl+0xea/0x1f0 [ 2410.159899] ? ion_query_heaps+0x360/0x360 [ 2410.159910] ? ion_query_heaps+0x360/0x360 [ 2410.159920] do_vfs_ioctl+0x75a/0xff0 [ 2410.159932] ? ioctl_preallocate+0x1a0/0x1a0 [ 2410.165974] 0 [ 2410.168965] ? lock_downgrade+0x740/0x740 [ 2410.168983] ? __fget+0x225/0x360 [ 2410.178889] 2717 [ 2410.183345] ? do_vfs_ioctl+0xff0/0xff0 [ 2410.183356] ? security_file_ioctl+0x83/0xb0 [ 2410.183366] SyS_ioctl+0x7f/0xb0 [ 2410.183375] ? do_vfs_ioctl+0xff0/0xff0 [ 2410.183385] do_syscall_64+0x1d5/0x640 [ 2410.183400] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2410.202690] 2718 [ 2410.205144] RIP: 0033:0x466459 [ 2410.205149] RSP: 002b:00007f4d0bcd5188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2410.223238] 2718 [ 2410.229899] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 2410.229905] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2410.229910] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2410.229915] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2410.229921] R13: 00007ffe1117a98f R14: 00007f4d0bcd5300 R15: 0000000000022000 [ 2410.380241] CPU: 0 PID: 15213 Comm: syz-executor.2 Not tainted 4.14.229-syzkaller #0 [ 2410.573249] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2410.582602] Call Trace: [ 2410.585198] dump_stack+0x1b2/0x281 [ 2410.588826] warn_alloc.cold+0x96/0x1cc [ 2410.591378] 2718 [ 2410.592795] ? zone_watermark_ok_safe+0x220/0x220 [ 2410.592816] __alloc_pages_nodemask+0x2127/0x2720 [ 2410.604550] ? lock_acquire+0x170/0x3f0 [ 2410.604576] device bridge_slave_1 left promiscuous mode [ 2410.608531] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2410.608548] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2410.618720] ? __mutex_unlock_slowpath+0x75/0x770 [ 2410.618735] alloc_pages_current+0x155/0x260 [ 2410.633820] ion_page_pool_alloc+0x118/0x1b0 [ 2410.638228] ion_system_heap_allocate+0x133/0x8c0 [ 2410.643067] ? ion_alloc+0x187/0x810 [ 2410.644827] Node 0 [ 2410.646772] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2410.646783] ? ion_system_contig_heap_create+0x130/0x130 [ 2410.652018] bridge0: port 2(bridge_slave_1) entered disabled state [ 2410.654443] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2410.654461] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2410.654473] ion_alloc+0x204/0x810 [ 2410.663676] DMA32 free:528676kB min:36200kB low:45248kB high:54296kB active_anon:58172kB inactive_anon:101560kB active_file:6612kB inactive_file:16628kB unevictable:0kB writepending:104kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:7616kB pagetables:3000kB bounce:0kB free_pcp:892kB local_pcp:348kB free_cma:0kB [ 2410.666221] ? ion_dma_buf_release+0x40/0x40 [ 2410.666234] ? __might_fault+0x177/0x1b0 [ 2410.689666] lowmem_reserve[]: [ 2410.708637] ion_ioctl+0xea/0x1f0 [ 2410.708648] ? ion_query_heaps+0x360/0x360 [ 2410.708661] ? _raw_spin_unlock+0x29/0x40 [ 2410.708668] ? ion_query_heaps+0x360/0x360 [ 2410.708678] do_vfs_ioctl+0x75a/0xff0 [ 2410.708691] ? ioctl_preallocate+0x1a0/0x1a0 [ 2410.745071] ? lock_downgrade+0x740/0x740 [ 2410.749218] ? __fget+0x225/0x360 [ 2410.752669] ? do_vfs_ioctl+0xff0/0xff0 [ 2410.756644] ? security_file_ioctl+0x83/0xb0 [ 2410.761173] SyS_ioctl+0x7f/0xb0 [ 2410.762994] 0 [ 2410.764555] ? do_vfs_ioctl+0xff0/0xff0 [ 2410.764570] do_syscall_64+0x1d5/0x640 [ 2410.773289] 0 [ 2410.774627] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2410.774636] RIP: 0033:0x466459 [ 2410.778603] 0 [ 2410.781586] RSP: 002b:00007fa0b57f2188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2410.781595] RAX: ffffffffffffffda RBX: 000000000056c2a8 RCX: 0000000000466459 [ 2410.781599] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000004 [ 2410.781604] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2410.781609] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c2a8 [ 2410.781614] R13: 00007ffcdcceba8f R14: 00007fa0b57f2300 R15: 0000000000022000 [ 2410.842422] device bridge_slave_0 left promiscuous mode [ 2410.847961] bridge0: port 1(bridge_slave_0) entered disabled state [ 2410.857541] syz-executor.4: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2410.895139] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 2410.915361] device veth1_macvtap left promiscuous mode [ 2410.922383] syz-executor.2: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2410.930799] device veth0_macvtap left promiscuous mode [ 2410.939650] CPU: 1 PID: 15207 Comm: syz-executor.4 Not tainted 4.14.229-syzkaller #0 [ 2410.944458] device veth1_vlan left promiscuous mode [ 2410.947527] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2410.947532] Call Trace: [ 2410.947550] dump_stack+0x1b2/0x281 [ 2410.947566] warn_alloc.cold+0x96/0x1cc [ 2410.954586] device veth0_vlan left promiscuous mode [ 2410.961921] ? zone_watermark_ok_safe+0x220/0x220 [ 2410.961947] __alloc_pages_nodemask+0x2127/0x2720 [ 2410.961964] ? lock_acquire+0x170/0x3f0 [ 2410.961980] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2410.966647] syz-executor.2 cpuset= [ 2410.968167] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2410.968181] ? __mutex_unlock_slowpath+0x75/0x770 [ 2410.968197] alloc_pages_current+0x155/0x260 [ 2410.974687] / [ 2410.977154] ion_page_pool_alloc+0x118/0x1b0 [ 2410.983928] mems_allowed=0-1 [ 2410.987778] ion_system_heap_allocate+0x133/0x8c0 [ 2410.987790] ? ion_alloc+0x187/0x810 [ 2410.987801] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2410.987812] ? ion_system_contig_heap_create+0x130/0x130 [ 2411.043231] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2411.048243] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2411.053087] ion_alloc+0x204/0x810 [ 2411.056616] ? ion_dma_buf_release+0x40/0x40 [ 2411.061006] ? __might_fault+0x177/0x1b0 [ 2411.065064] ion_ioctl+0xea/0x1f0 [ 2411.068506] ? ion_query_heaps+0x360/0x360 [ 2411.072741] ? _raw_spin_unlock+0x29/0x40 [ 2411.076873] ? ion_query_heaps+0x360/0x360 [ 2411.081095] do_vfs_ioctl+0x75a/0xff0 [ 2411.084880] ? ioctl_preallocate+0x1a0/0x1a0 [ 2411.089275] ? lock_downgrade+0x740/0x740 [ 2411.093409] ? __fget+0x225/0x360 [ 2411.096842] ? do_vfs_ioctl+0xff0/0xff0 [ 2411.100798] ? security_file_ioctl+0x83/0xb0 [ 2411.105187] SyS_ioctl+0x7f/0xb0 [ 2411.108533] ? do_vfs_ioctl+0xff0/0xff0 [ 2411.112488] do_syscall_64+0x1d5/0x640 [ 2411.116371] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2411.121543] RIP: 0033:0x466459 [ 2411.124712] RSP: 002b:00007f46bec6c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2411.132410] RAX: ffffffffffffffda RBX: 000000000056c0b0 RCX: 0000000000466459 [ 2411.139668] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2411.146916] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2411.154166] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c0b0 [ 2411.161415] R13: 00007ffe96c50ebf R14: 00007f46bec6c300 R15: 0000000000022000 [ 2411.168696] CPU: 0 PID: 15200 Comm: syz-executor.2 Not tainted 4.14.229-syzkaller #0 [ 2411.176586] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2411.185934] Call Trace: [ 2411.188525] dump_stack+0x1b2/0x281 [ 2411.192152] warn_alloc.cold+0x96/0x1cc [ 2411.196194] ? zone_watermark_ok_safe+0x220/0x220 [ 2411.201045] __alloc_pages_nodemask+0x2127/0x2720 [ 2411.205877] ? retint_kernel+0x2d/0x2d [ 2411.209586] 0 0 [ 2411.209756] ? lock_acquire+0x170/0x3f0 [ 2411.209771] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2411.211725] Node 0 [ 2411.215694] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2411.228193] ? __mutex_unlock_slowpath+0x75/0x770 [ 2411.229590] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2411.233029] alloc_pages_current+0x155/0x260 [ 2411.262318] ion_page_pool_alloc+0x118/0x1b0 [ 2411.266722] ion_system_heap_allocate+0x133/0x8c0 [ 2411.271558] ? ion_alloc+0x187/0x810 [ 2411.275268] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2411.280716] ? ion_system_contig_heap_create+0x130/0x130 [ 2411.286173] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2411.291184] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2411.296006] ion_alloc+0x204/0x810 [ 2411.299528] ? ion_dma_buf_release+0x40/0x40 [ 2411.303920] ? __might_fault+0x177/0x1b0 [ 2411.307962] ion_ioctl+0xea/0x1f0 [ 2411.311531] ? ion_query_heaps+0x360/0x360 [ 2411.315761] ? retint_kernel+0x2d/0x2d [ 2411.320086] ? ion_query_heaps+0x360/0x360 [ 2411.324301] do_vfs_ioctl+0x75a/0xff0 [ 2411.328080] ? ioctl_preallocate+0x1a0/0x1a0 [ 2411.332466] ? retint_kernel+0x2d/0x2d [ 2411.336336] ? do_vfs_ioctl+0x18/0xff0 [ 2411.340204] SyS_ioctl+0x7f/0xb0 [ 2411.343545] ? do_vfs_ioctl+0xff0/0xff0 [ 2411.347498] do_syscall_64+0x1d5/0x640 [ 2411.351385] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2411.356553] RIP: 0033:0x466459 [ 2411.359720] RSP: 002b:00007fa0b5876188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2411.367408] RAX: ffffffffffffffda RBX: 000000000056c008 RCX: 0000000000466459 [ 2411.374657] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000004 [ 2411.381907] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2411.389163] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c008 [ 2411.396411] R13: 00007ffcdcceba8f R14: 00007fa0b5876300 R15: 0000000000022000 [ 2411.408513] lowmem_reserve[]: 0 0 0 0 0 [ 2411.450233] warn_alloc_show_mem: 4 callbacks suppressed [ 2411.450236] Mem-Info: [ 2411.470236] active_anon:15281 inactive_anon:40536 isolated_anon:12 [ 2411.470236] active_file:1938 inactive_file:5033 isolated_file:15 [ 2411.470236] unevictable:0 dirty:36 writeback:0 unstable:0 [ 2411.470236] slab_reclaimable:12526 slab_unreclaimable:121358 [ 2411.470236] mapped:57405 shmem:41746 pagetables:797 bounce:0 [ 2411.470236] free:86339 free_pcp:132 free_cma:0 [ 2411.485427] Node 1 Normal free:122144kB min:53696kB low:67120kB high:80544kB active_anon:896kB inactive_anon:60584kB active_file:504kB inactive_file:4024kB unevictable:0kB writepending:8kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:288kB pagetables:188kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2411.634810] Node 0 active_anon:60328kB inactive_anon:101560kB active_file:7848kB inactive_file:15708kB unevictable:0kB isolated(anon):48kB isolated(file):60kB mapped:191124kB dirty:136kB writeback:0kB shmem:105988kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 14336kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2411.673493] Node 1 active_anon:896kB inactive_anon:60584kB active_file:504kB inactive_file:4024kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:38596kB dirty:8kB writeback:0kB shmem:60996kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2411.697664] lowmem_reserve[]: 0 0 0 0 0 [ 2411.724446] Node 0 DMA: 20*4kB (UME) 41*8kB (UME) 39*16kB (UME) 27*32kB (UME) 12*64kB (UME) 14*128kB (UME) 2*256kB (UM) 4*512kB (UME) 2*1024kB (ME) 1*2048kB (U) 0*4096kB = 11112kB [ 2411.779774] Node 0 DMA32: 1*4kB (M) 21*8kB (UM) 4*16kB (UM) 1335*32kB (UME) 35*64kB (U) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 45196kB [ 2411.821361] device hsr_slave_1 left promiscuous mode [ 2411.829362] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2411.840436] Node 0 DMA free:11064kB min:204kB low:252kB high:300kB active_anon:2056kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2411.870288] device hsr_slave_0 left promiscuous mode [ 2411.908584] Node 1 Normal: 36*4kB (UME) 16*8kB (UM) 13*16kB (UME) 1620*32kB (UM) 5*64kB (M) 1*128kB (M) 3*256kB (M) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 53536kB [ 2411.972183] lowmem_reserve[]: 0 [ 2411.972199] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2411.972206] 2717 [ 2411.975497] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2412.007786] team0 (unregistering): Port device team_slave_1 removed [ 2412.044708] team0 (unregistering): Port device team_slave_0 removed [ 2412.054516] 2718 2718 2718 [ 2412.057473] Node 0 DMA32 free:36352kB min:36200kB low:45248kB high:54296kB active_anon:58432kB inactive_anon:101572kB active_file:2496kB inactive_file:2068kB unevictable:0kB writepending:184kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:7648kB pagetables:3068kB bounce:0kB free_pcp:1300kB local_pcp:632kB free_cma:0kB [ 2412.108559] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2412.112827] lowmem_reserve[]: 0 0 0 0 0 [ 2412.128885] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 2412.136361] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2412.140352] Node 0 [ 2412.146309] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 2412.165044] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2412.165473] 41832 total pagecache pages [ 2412.288182] 0 pages in swap cache [ 2412.306590] Swap cache stats: add 0, delete 0, find 0/0 [ 2412.343318] Free swap = 0kB [ 2412.346360] Total swap = 0kB [ 2412.349372] 2097051 pages RAM [ 2412.349474] lowmem_reserve[]: 0 0 0 0 0 [ 2412.356453] Node 1 Normal free:53376kB min:53696kB low:67120kB high:80544kB active_anon:1160kB inactive_anon:60584kB active_file:40kB inactive_file:20kB unevictable:0kB writepending:8kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:288kB pagetables:208kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2412.397033] oom_reaper: reaped process 15213 (syz-executor.2), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 2412.399485] 0 pages HighMem/MovableOnly [ 2412.441211] 363848 pages reserved [ 2412.442606] bond0 (unregistering): Released all slaves [ 2412.444688] 0 pages cma reserved [ 2412.471553] in:imklog invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 2412.506231] in:imklog cpuset=/ mems_allowed=0-1 [ 2412.515664] CPU: 1 PID: 15176 Comm: in:imklog Not tainted 4.14.229-syzkaller #0 [ 2412.522910] lowmem_reserve[]: [ 2412.523113] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2412.523120] 0 [ 2412.526198] Call Trace: [ 2412.535565] 0 [ 2412.537331] dump_stack+0x1b2/0x281 [ 2412.539894] 0 [ 2412.541678] dump_header+0x178/0x82f [ 2412.545273] 0 [ 2412.547057] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2412.550751] 0 [ 2412.552522] ? ___ratelimit+0x2cd/0x530 [ 2412.559373] oom_kill_process.cold+0x10/0xa40 [ 2412.563347] Node 0 DMA: 14*4kB [ 2412.567814] out_of_memory+0xe3e/0x1190 [ 2412.567828] ? oom_killer_disable+0x1c0/0x1c0 [ 2412.571086] (ME) [ 2412.575028] ? mutex_trylock+0x152/0x1a0 [ 2412.579509] 22*8kB [ 2412.581537] __alloc_pages_nodemask+0x23e1/0x2720 [ 2412.585563] (UME) [ 2412.587788] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2412.592625] 38*16kB [ 2412.594756] alloc_pages_current+0x155/0x260 [ 2412.599570] (UME) [ 2412.601861] filemap_fault+0x11a1/0x1ad0 [ 2412.606240] 28*32kB [ 2412.608379] ext4_filemap_fault+0x84/0xb0 [ 2412.612428] (UME) [ 2412.614712] __do_fault+0xfa/0x380 [ 2412.618834] 12*64kB [ 2412.620963] __handle_mm_fault+0x2497/0x4620 [ 2412.620973] ? vm_insert_page+0x7c0/0x7c0 [ 2412.620985] ? lock_downgrade+0x740/0x740 [ 2412.624493] (UME) [ 2412.626800] ? mark_held_locks+0xa6/0xf0 [ 2412.631193] 14*128kB [ 2412.636181] handle_mm_fault+0x455/0x9c0 [ 2412.640335] (UME) [ 2412.642440] __do_page_fault+0x549/0xad0 [ 2412.646469] 2*256kB [ 2412.648860] ? spurious_fault+0x640/0x640 [ 2412.652913] (UM) [ 2412.655022] ? do_page_fault+0x60/0x500 [ 2412.659051] 4*512kB [ 2412.661356] ? page_fault+0x2f/0x50 [ 2412.661363] page_fault+0x45/0x50 [ 2412.661369] RIP: ffffffff: (null) [ 2412.661376] RSP: ffffffff:00007f010d02e0a0 EFLAGS: 00000050 [ 2412.665511] (UME) [ 2412.673170] Mem-Info: [ 2412.675779] syz-executor.1: [ 2412.677646] active_anon:15437 inactive_anon:40539 isolated_anon:0 [ 2412.677646] active_file:29 inactive_file:5 isolated_file:0 [ 2412.677646] unevictable:0 dirty:23 writeback:0 unstable:0 [ 2412.677646] slab_reclaimable:12524 slab_unreclaimable:119876 [ 2412.677646] mapped:52651 shmem:41751 pagetables:819 bounce:0 [ 2412.677646] free:13834 free_pcp:91 free_cma:0 [ 2412.681156] syz-executor.4: [ 2412.685340] Node 0 active_anon:60588kB inactive_anon:101572kB active_file:60kB inactive_file:88kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:175668kB dirty:84kB writeback:0kB shmem:106008kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 14336kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2412.691596] syz-executor.1: [ 2412.696780] Node 1 active_anon:1160kB inactive_anon:60584kB active_file:56kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:34936kB dirty:8kB writeback:0kB shmem:60996kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2412.698582] page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2412.698599] syz-executor.1 cpuset=/ [ 2412.737201] Node 0 [ 2412.800690] page allocation failure: order:0 [ 2412.807846] DMA free:10952kB min:204kB low:252kB high:300kB active_anon:2056kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2412.819454] 2*1024kB [ 2412.839854] page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2412.853317] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2412.869502] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 2412.874630] CPU: 0 PID: 15185 Comm: syz-executor.1 Not tainted 4.14.229-syzkaller #0 [ 2412.882504] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2412.891848] Call Trace: [ 2412.894435] dump_stack+0x1b2/0x281 [ 2412.898065] warn_alloc.cold+0x96/0x1cc [ 2412.902041] ? zone_watermark_ok_safe+0x220/0x220 [ 2412.906878] ? usleep_range+0x130/0x130 [ 2412.910850] ? try_to_free_pages+0x23f/0x6e0 [ 2412.915485] ? _find_next_bit+0xdb/0x100 [ 2412.919548] ? run_timer_softirq+0x5a0/0x5a0 [ 2412.922932] lowmem_reserve[]: 0 2717 [ 2412.923979] __alloc_pages_nodemask+0x2127/0x2720 [ 2412.923995] ? lock_acquire+0x170/0x3f0 [ 2412.927688] 2718 [ 2412.932520] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2412.932530] ? ion_page_pool_alloc+0x9e/0x1b0 [ 2412.932545] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2412.932557] ? retint_kernel+0x2d/0x2d [ 2412.932571] alloc_pages_current+0x155/0x260 [ 2412.936527] 2718 [ 2412.938575] ion_page_pool_alloc+0x118/0x1b0 [ 2412.946805] 2718 [ 2412.948823] ion_system_heap_allocate+0x133/0x8c0 [ 2412.969437] (ME) [ 2412.971006] ? ion_alloc+0x187/0x810 [ 2412.975822] 1*2048kB [ 2412.977867] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2412.989381] ? ion_system_contig_heap_create+0x130/0x130 [ 2412.989384] Node 0 [ 2412.994819] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2412.994836] DMA32 free:71796kB min:36200kB low:45248kB high:54296kB active_anon:58440kB inactive_anon:101572kB active_file:416kB inactive_file:516kB unevictable:0kB writepending:188kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:7616kB pagetables:3068kB bounce:0kB free_pcp:1204kB local_pcp:584kB free_cma:0kB [ 2412.997054] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2413.006240] (U) [ 2413.031058] ion_alloc+0x204/0x810 [ 2413.031072] ? ion_dma_buf_release+0x40/0x40 [ 2413.031084] ? __might_fault+0x177/0x1b0 [ 2413.031094] ion_ioctl+0xea/0x1f0 [ 2413.031102] ? ion_query_heaps+0x360/0x360 [ 2413.031113] ? ion_query_heaps+0x360/0x360 [ 2413.031123] do_vfs_ioctl+0x75a/0xff0 [ 2413.031134] ? ioctl_preallocate+0x1a0/0x1a0 [ 2413.031144] ? lock_downgrade+0x740/0x740 [ 2413.031155] ? __fget+0x225/0x360 [ 2413.031163] ? do_vfs_ioctl+0xff0/0xff0 [ 2413.031173] ? security_file_ioctl+0x83/0xb0 [ 2413.031184] SyS_ioctl+0x7f/0xb0 [ 2413.039372] lowmem_reserve[]: [ 2413.041492] ? do_vfs_ioctl+0xff0/0xff0 [ 2413.041504] do_syscall_64+0x1d5/0x640 [ 2413.041519] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2413.041528] RIP: 0033:0x466459 [ 2413.046005] 0 [ 2413.050039] RSP: 002b:00007f10b67af188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2413.050049] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 2413.050055] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2413.050060] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2413.050065] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2413.050069] R13: 00007ffd58825dcf R14: 00007f10b67af300 R15: 0000000000022000 [ 2413.054389] syz-executor.4 cpuset= [ 2413.127935] 0 [ 2413.134910] / mems_allowed=0-1 [ 2413.165272] CPU: 0 PID: 15182 Comm: syz-executor.4 Not tainted 4.14.229-syzkaller #0 [ 2413.173144] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2413.182492] Call Trace: [ 2413.183764] 0*4096kB = 10952kB [ 2413.185095] dump_stack+0x1b2/0x281 [ 2413.188261] Node 0 [ 2413.191869] warn_alloc.cold+0x96/0x1cc [ 2413.191880] ? zone_watermark_ok_safe+0x220/0x220 [ 2413.191890] ? usleep_range+0x130/0x130 [ 2413.191899] ? try_to_free_pages+0x23f/0x6e0 [ 2413.191909] ? _find_next_bit+0xdb/0x100 [ 2413.191919] ? run_timer_softirq+0x5a0/0x5a0 [ 2413.191935] __alloc_pages_nodemask+0x2127/0x2720 [ 2413.191951] ? lock_acquire+0x170/0x3f0 [ 2413.191966] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2413.231460] DMA32: [ 2413.233326] ? ion_page_pool_alloc+0x9e/0x1b0 [ 2413.233328] 313*4kB (ME) [ 2413.235555] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2413.243467] 0 [ 2413.248192] ? retint_kernel+0x2d/0x2d [ 2413.248203] 0 [ 2413.249989] alloc_pages_current+0x155/0x260 [ 2413.250003] ion_page_pool_alloc+0x118/0x1b0 [ 2413.250013] ion_system_heap_allocate+0x133/0x8c0 [ 2413.250023] ? ion_alloc+0x187/0x810 [ 2413.273492] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2413.278942] ? ion_system_contig_heap_create+0x130/0x130 [ 2413.284395] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2413.289408] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2413.294247] ion_alloc+0x204/0x810 [ 2413.295346] 0 [ 2413.297784] ? ion_dma_buf_release+0x40/0x40 [ 2413.303088] 80*8kB (UME) [ 2413.303963] ? __might_fault+0x177/0x1b0 [ 2413.303969] 13*16kB [ 2413.306712] ion_ioctl+0xea/0x1f0 [ 2413.316495] ? ion_query_heaps+0x360/0x360 [ 2413.319443] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2413.320732] ? sockfd_lookup_light+0xb2/0x160 [ 2413.320743] ? ion_query_heaps+0x360/0x360 [ 2413.354933] do_vfs_ioctl+0x75a/0xff0 [ 2413.358733] ? ioctl_preallocate+0x1a0/0x1a0 [ 2413.362373] (UM) [ 2413.363129] ? lock_downgrade+0x740/0x740 [ 2413.363136] 494*32kB [ 2413.367783] ? __fget+0x225/0x360 [ 2413.377743] ? do_vfs_ioctl+0xff0/0xff0 [ 2413.381719] ? security_file_ioctl+0x83/0xb0 [ 2413.386126] SyS_ioctl+0x7f/0xb0 [ 2413.389486] ? do_vfs_ioctl+0xff0/0xff0 [ 2413.393459] do_syscall_64+0x1d5/0x640 [ 2413.397355] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2413.402537] RIP: 0033:0x466459 [ 2413.405719] RSP: 002b:00007f46becae188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2413.413854] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 2413.421120] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2413.422961] mems_allowed=0-1 [ 2413.428375] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2413.428385] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2413.438716] (UME) [ 2413.438819] R13: 00007ffe96c50ebf R14: 00007f46becae300 R15: 0000000000022000 [ 2413.457931] warn_alloc_show_mem: 1 callbacks suppressed [ 2413.457935] Mem-Info: [ 2413.470796] active_anon:15415 inactive_anon:40539 isolated_anon:0 [ 2413.470796] active_file:25 inactive_file:21 isolated_file:0 [ 2413.470796] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2413.470796] slab_reclaimable:12524 slab_unreclaimable:119844 [ 2413.470796] mapped:52646 shmem:41751 pagetables:819 bounce:0 [ 2413.470796] free:17690 free_pcp:0 free_cma:0 [ 2413.473476] CPU: 1 PID: 15186 Comm: syz-executor.1 Not tainted 4.14.229-syzkaller #0 [ 2413.503951] Node 0 active_anon:60500kB inactive_anon:101572kB active_file:72kB inactive_file:60kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:175768kB dirty:0kB writeback:0kB shmem:106008kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 14336kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2413.511733] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2413.511737] Call Trace: [ 2413.511757] dump_stack+0x1b2/0x281 [ 2413.511769] warn_alloc.cold+0x96/0x1cc [ 2413.511781] ? zone_watermark_ok_safe+0x220/0x220 [ 2413.511790] ? usleep_range+0x130/0x130 [ 2413.511799] ? try_to_free_pages+0x23f/0x6e0 [ 2413.511809] ? _find_next_bit+0xdb/0x100 [ 2413.511819] ? run_timer_softirq+0x5a0/0x5a0 [ 2413.511834] __alloc_pages_nodemask+0x2127/0x2720 [ 2413.511850] ? lock_acquire+0x170/0x3f0 [ 2413.511864] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2413.511873] ? ion_page_pool_alloc+0x9e/0x1b0 [ 2413.511888] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2413.540863] Node 1 active_anon:1160kB inactive_anon:60584kB active_file:28kB inactive_file:24kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:34816kB dirty:0kB writeback:0kB shmem:60996kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2413.549097] alloc_pages_current+0x155/0x260 [ 2413.551687] Node 0 [ 2413.555262] ion_page_pool_alloc+0x118/0x1b0 [ 2413.559214] DMA free:11072kB min:204kB low:252kB high:300kB active_anon:2056kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2413.564025] ion_system_heap_allocate+0x133/0x8c0 [ 2413.564035] ? ion_alloc+0x187/0x810 [ 2413.564045] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2413.564056] ? ion_system_contig_heap_create+0x130/0x130 [ 2413.568001] lowmem_reserve[]: [ 2413.572385] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2413.572395] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2413.572406] ion_alloc+0x204/0x810 [ 2413.576437] 0 [ 2413.580826] ? ion_dma_buf_release+0x40/0x40 [ 2413.580838] ? __might_fault+0x177/0x1b0 [ 2413.580849] ion_ioctl+0xea/0x1f0 [ 2413.585663] 2717 [ 2413.589622] ? ion_query_heaps+0x360/0x360 [ 2413.589633] ? ion_query_heaps+0x360/0x360 [ 2413.589644] do_vfs_ioctl+0x75a/0xff0 [ 2413.594460] 2718 [ 2413.598935] ? ioctl_preallocate+0x1a0/0x1a0 [ 2413.604399] 2718 [ 2413.631515] ? lock_downgrade+0x740/0x740 [ 2413.631531] ? __fget+0x225/0x360 [ 2413.631542] ? do_vfs_ioctl+0xff0/0xff0 [ 2413.635928] 2718 [ 2413.638149] ? security_file_ioctl+0x83/0xb0 [ 2413.668357] SyS_ioctl+0x7f/0xb0 [ 2413.668365] ? do_vfs_ioctl+0xff0/0xff0 [ 2413.668380] do_syscall_64+0x1d5/0x640 [ 2413.673210] Node 0 [ 2413.676911] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2413.682360] DMA32 free:28868kB min:36200kB low:45248kB high:54296kB active_anon:58444kB inactive_anon:101572kB active_file:48kB inactive_file:44kB unevictable:0kB writepending:0kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:7552kB pagetables:3068kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2413.687759] RIP: 0033:0x466459 [ 2413.709385] lowmem_reserve[]: [ 2413.710347] RSP: 002b:00007f10b678e188 EFLAGS: 00000246 [ 2413.714385] 0 [ 2413.717811] ORIG_RAX: 0000000000000010 [ 2413.739362] 0 [ 2413.740549] RAX: ffffffffffffffda RBX: 000000000056c008 RCX: 0000000000466459 [ 2413.744675] 0 [ 2413.748102] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2413.748109] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2413.779347] 0 [ 2413.805055] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c008 [ 2413.805060] R13: 00007ffd58825dcf R14: 00007f10b678e300 R15: 0000000000022000 [ 2413.805830] Bluetooth: hci4 command 0x0409 tx timeout [ 2413.870307] 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 17908kB [ 2413.878275] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2413.889462] lowmem_reserve[]: 0 0 0 0 0 [ 2413.893738] Node 1 Normal free:204096kB min:53696kB low:67120kB high:80544kB active_anon:1160kB inactive_anon:60584kB active_file:60kB inactive_file:2332kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:288kB pagetables:208kB bounce:0kB free_pcp:336kB local_pcp:120kB free_cma:0kB [ 2413.923183] Node 1 Normal: 2*4kB (UE) 3*8kB (U) 1*16kB (E) 827*32kB (UM) 198*64kB (U) 31*128kB (U) 27*256kB (UM) 17*512kB (UM) 48*1024kB (UM) 27*2048kB (U) 10*4096kB (U) = 204176kB [ 2413.940823] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2413.949755] lowmem_reserve[]: 0 0 0 0 0 [ 2413.953744] Node 0 DMA: 14*4kB (ME) 37*8kB (UME) 38*16kB (UME) 28*32kB (UME) 12*64kB (UME) 14*128kB (UME) 2*256kB (UM) 4*512kB (UME) 2*1024kB (ME) 1*2048kB (U) 0*4096kB = 11072kB [ 2413.969983] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2413.978582] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2413.987941] Node 0 DMA32: 57*4kB (ME) 186*8kB (UME) 3*16kB (U) 332*32kB (UME) 2423*64kB (UM) 36*128kB (UM) 10*256kB (UM) 7*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 178212kB [ 2414.003489] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2414.012093] 42876 total pagecache pages [ 2414.016071] 0 pages in swap cache [ 2414.019579] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2414.030341] Swap cache stats: add 0, delete 0, find 0/0 [ 2414.030494] 0 [ 2414.035687] Free swap = 0kB [ 2414.037468] Total swap = 0kB [ 2414.043563] Node 1 Normal: 2*4kB (UE) 3*8kB (U) 1*16kB (E) 827*32kB (UM) 198*64kB (U) 31*128kB (U) 27*256kB (UM) 17*512kB (UM) 48*1024kB (UM) 27*2048kB (U) 10*4096kB (U) = 204176kB [ 2414.059980] 2097051 pages RAM [ 2414.063077] 0 pages HighMem/MovableOnly [ 2414.067040] 363848 pages reserved [ 2414.079381] 0 pages cma reserved [ 2414.089340] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2414.091477] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2414.098207] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2414.261453] lowmem_reserve[]: 0 0 0 0 0 [ 2414.269356] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2414.299321] Node 1 Normal free:140048kB min:53696kB low:67120kB high:80544kB active_anon:1160kB inactive_anon:60584kB active_file:72kB inactive_file:2348kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:288kB pagetables:208kB bounce:0kB free_pcp:336kB local_pcp:216kB free_cma:0kB [ 2414.299551] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2414.439560] lowmem_reserve[]: 0 0 0 0 0 [ 2414.439641] 43061 total pagecache pages [ 2414.443570] Node 0 DMA: [ 2414.447535] 0 pages in swap cache [ 2414.447537] 15*4kB (UME) [ 2414.465340] Swap cache stats: add 0, delete 0, find 0/0 [ 2414.499352] Free swap = 0kB [ 2414.502394] Total swap = 0kB [ 2414.505404] 2097051 pages RAM [ 2414.508510] 0 pages HighMem/MovableOnly [ 2414.529302] 21*8kB (ME) 37*16kB (UME) 28*32kB (UME) 15*64kB (UME) 14*128kB (UME) 2*256kB (UM) 4*512kB (UME) 2*1024kB (ME) 1*2048kB (U) 0*4096kB = 11124kB [ 2414.533896] 363848 pages reserved [ 2414.546837] warn_alloc: 7 callbacks suppressed [ 2414.546841] syz-executor.4: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2414.563580] 0 pages cma reserved [ 2414.566941] Out of memory (oom_kill_allocating_task): Kill process 15176 (in:imklog) score 0 or sacrifice child [ 2414.577234] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 2414.582688] Killed process 15167 (rsyslogd) total-vm:254332kB, anon-rss:700kB, file-rss:0kB, shmem-rss:0kB [ 2414.584754] Node 0 [ 2414.592764] CPU: 1 PID: 15182 Comm: syz-executor.4 Not tainted 4.14.229-syzkaller #0 [ 2414.602861] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2414.612202] Call Trace: [ 2414.614789] dump_stack+0x1b2/0x281 [ 2414.618421] warn_alloc.cold+0x96/0x1cc [ 2414.622395] ? zone_watermark_ok_safe+0x220/0x220 [ 2414.623271] DMA32: 323*4kB (UME) 59*8kB [ 2414.627247] __alloc_pages_nodemask+0x2127/0x2720 [ 2414.627268] ? lock_acquire+0x170/0x3f0 [ 2414.640096] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2414.644940] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2414.649273] (UME) 12*16kB [ 2414.650388] ? __mutex_unlock_slowpath+0x75/0x770 [ 2414.650400] ? alloc_pages_current+0x84/0x260 [ 2414.653220] (UM) [ 2414.658045] alloc_pages_current+0x155/0x260 [ 2414.669036] ion_page_pool_alloc+0x118/0x1b0 [ 2414.669266] 33*32kB (UME) [ 2414.673496] ion_system_heap_allocate+0x133/0x8c0 [ 2414.673509] ? _raw_spin_unlock+0x29/0x40 [ 2414.676324] 15*64kB [ 2414.681146] ? _ion_heap_freelist_drain+0x6e/0x410 [ 2414.681156] ? ion_system_contig_heap_create+0x130/0x130 [ 2414.681165] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2414.681176] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2414.707844] ion_alloc+0x27a/0x810 [ 2414.709265] (UM) 2*128kB [ 2414.711375] ? ion_dma_buf_release+0x40/0x40 [ 2414.711376] (M) 32*256kB [ 2414.714124] ? __might_fault+0x177/0x1b0 [ 2414.718505] (UM) [ 2414.721245] ion_ioctl+0xea/0x1f0 [ 2414.721254] ? ion_query_heaps+0x360/0x360 [ 2414.721268] ? sockfd_lookup_light+0xb2/0x160 [ 2414.739258] 11*512kB [ 2414.739461] ? ion_query_heaps+0x360/0x360 [ 2414.739462] (U) 0*1024kB [ 2414.741857] do_vfs_ioctl+0x75a/0xff0 [ 2414.746063] 0*2048kB [ 2414.748801] ? ioctl_preallocate+0x1a0/0x1a0 [ 2414.759352] ? lock_downgrade+0x740/0x740 [ 2414.763494] ? __fget+0x225/0x360 [ 2414.766936] ? do_vfs_ioctl+0xff0/0xff0 [ 2414.769252] 0*4096kB [ 2414.770920] ? security_file_ioctl+0x83/0xb0 [ 2414.770923] = 18052kB [ 2414.770929] Node 0 [ 2414.773323] SyS_ioctl+0x7f/0xb0 [ 2414.777707] Normal: [ 2414.780102] ? do_vfs_ioctl+0xff0/0xff0 [ 2414.780115] do_syscall_64+0x1d5/0x640 [ 2414.780128] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2414.780138] RIP: 0033:0x466459 [ 2414.799264] 0*4kB [ 2414.801029] RSP: 002b:00007f46becae188 EFLAGS: 00000246 [ 2414.804202] 0*8kB [ 2414.806324] ORIG_RAX: 0000000000000010 [ 2414.806332] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 2414.819262] 0*16kB [ 2414.825011] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2414.825018] 0*32kB [ 2414.827226] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2414.827234] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2414.849251] 0*64kB [ 2414.851202] R13: 00007ffe96c50ebf R14: 00007f46becae300 R15: 0000000000022000 [ 2414.851208] 0*128kB [ 2414.877773] oom_reaper: reaped process 15207 (syz-executor.4), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 2414.924086] oom_reaper: reaped process 15167 (rsyslogd), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 2414.926499] 0*256kB [ 2414.984549] oom_reaper: reaped process 15185 (syz-executor.1), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 2414.989244] 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2415.022534] in:imklog: page allocation failure: order:0, mode:0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null) [ 2415.031130] Node 1 Normal: 22*4kB (ME) 11*8kB (M) 5*16kB (ME) 2*32kB (M) 3*64kB (UM) 54*128kB (U) 18*256kB (U) 25*512kB (U) 0*1024kB 1*2048kB (M) 0*4096kB = 26880kB [ 2415.043417] in:imklog cpuset=/ mems_allowed=0-1 [ 2415.050532] syz-fuzzer invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 2415.079245] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 2415.079280] syz-executor.4: page allocation failure: order:0 [ 2415.084012] CPU: 0 PID: 7975 Comm: syz-fuzzer Not tainted 4.14.229-syzkaller #0 [ 2415.084019] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2415.106556] Call Trace: [ 2415.109130] dump_stack+0x1b2/0x281 [ 2415.112746] dump_header+0x178/0x82f [ 2415.116486] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2415.118207] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 2415.121574] ? ___ratelimit+0x2cd/0x530 [ 2415.121586] oom_kill_process.cold+0x10/0xa40 [ 2415.121603] out_of_memory+0xe3e/0x1190 [ 2415.121616] ? oom_killer_disable+0x1c0/0x1c0 [ 2415.121627] ? mutex_trylock+0x152/0x1a0 [ 2415.128706] (null) [ 2415.132678] __alloc_pages_nodemask+0x23e1/0x2720 [ 2415.132699] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2415.132723] alloc_pages_current+0x155/0x260 [ 2415.132734] filemap_fault+0x11a1/0x1ad0 [ 2415.132754] ext4_filemap_fault+0x84/0xb0 [ 2415.132764] __do_fault+0xfa/0x380 [ 2415.132773] __handle_mm_fault+0x2497/0x4620 [ 2415.132784] ? vm_insert_page+0x7c0/0x7c0 [ 2415.137260] syz-executor.2: [ 2415.141219] ? mark_held_locks+0xa6/0xf0 [ 2415.141229] handle_mm_fault+0x455/0x9c0 [ 2415.141242] __do_page_fault+0x549/0xad0 [ 2415.174537] page allocation failure: order:0 [ 2415.178039] ? spurious_fault+0x640/0x640 [ 2415.185245] syz-executor.4 cpuset= [ 2415.186558] ? do_page_fault+0x60/0x500 [ 2415.194952] warn_alloc_show_mem: 1 callbacks suppressed [ 2415.194955] Mem-Info: [ 2415.197644] ? page_fault+0x2f/0x50 [ 2415.214731] / [ 2415.217692] page_fault+0x45/0x50 [ 2415.225845] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 2415.229049] RIP: 0f00:0xc000281320 [ 2415.241984] active_anon:14634 inactive_anon:40539 isolated_anon:0 [ 2415.241984] active_file:35 inactive_file:0 isolated_file:0 [ 2415.241984] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2415.241984] slab_reclaimable:12524 slab_unreclaimable:120206 [ 2415.241984] mapped:52667 shmem:41751 pagetables:820 bounce:0 [ 2415.241984] free:13894 free_pcp:74 free_cma:0 [ 2415.244788] RSP: 0138:000000c000039e40 EFLAGS: 00000003 [ 2415.280106] CPU: 1 PID: 15176 Comm: in:imklog Not tainted 4.14.229-syzkaller #0 [ 2415.289215] (null) [ 2415.292890] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2415.295023] syz-executor.2 cpuset= [ 2415.304349] Call Trace: [ 2415.304368] dump_stack+0x1b2/0x281 [ 2415.304382] warn_alloc.cold+0x96/0x1cc [ 2415.318019] ? zone_watermark_ok_safe+0x220/0x220 [ 2415.319227] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2415.323455] ? usleep_range+0x130/0x130 [ 2415.336227] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 2415.339207] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2415.341340] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 2415.354882] ? run_timer_softirq+0x5a0/0x5a0 [ 2415.359207] / mems_allowed=0-1 [ 2415.359284] __alloc_pages_nodemask+0x2127/0x2720 [ 2415.359305] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2415.369205] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2415.372114] alloc_pages_current+0x155/0x260 [ 2415.385310] filemap_fault+0x11a1/0x1ad0 [ 2415.389360] ext4_filemap_fault+0x84/0xb0 [ 2415.393485] __do_fault+0xfa/0x380 [ 2415.397001] __handle_mm_fault+0x2497/0x4620 [ 2415.401406] ? vm_insert_page+0x7c0/0x7c0 [ 2415.405541] ? lock_downgrade+0x740/0x740 [ 2415.409677] ? mark_held_locks+0xa6/0xf0 [ 2415.413718] handle_mm_fault+0x455/0x9c0 [ 2415.417764] __do_page_fault+0x549/0xad0 [ 2415.419201] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2415.421808] ? spurious_fault+0x640/0x640 [ 2415.434497] ? do_page_fault+0x60/0x500 [ 2415.438461] ? page_fault+0x2f/0x50 [ 2415.442072] page_fault+0x45/0x50 [ 2415.445501] RIP: ffffffff: (null) [ 2415.449194] 41784 total pagecache pages [ 2415.449714] RSP: ffffffff:00007f010d02e0a0 EFLAGS: 00000050 [ 2415.453755] 0 pages in swap cache [ 2415.455888] mems_allowed=0-1 [ 2415.466022] CPU: 1 PID: 15207 Comm: syz-executor.4 Not tainted 4.14.229-syzkaller #0 [ 2415.473888] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2415.483226] Call Trace: [ 2415.485799] dump_stack+0x1b2/0x281 [ 2415.489193] Swap cache stats: add 0, delete 0, find 0/0 [ 2415.489409] warn_alloc.cold+0x96/0x1cc [ 2415.494747] Free swap = 0kB [ 2415.498704] ? zone_watermark_ok_safe+0x220/0x220 [ 2415.506599] ? usleep_range+0x130/0x130 [ 2415.510559] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 2415.515642] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 2415.519187] Total swap = 0kB [ 2415.520639] ? run_timer_softirq+0x5a0/0x5a0 [ 2415.523644] 2097051 pages RAM [ 2415.528058] __alloc_pages_nodemask+0x2127/0x2720 [ 2415.535968] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2415.540795] ? lock_release+0x41e/0x870 [ 2415.544752] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2415.550197] alloc_pages_current+0x155/0x260 [ 2415.554598] ion_page_pool_alloc+0x118/0x1b0 [ 2415.558995] ion_system_heap_allocate+0x133/0x8c0 [ 2415.559182] 0 pages HighMem/MovableOnly [ 2415.563824] ? _raw_spin_unlock+0x29/0x40 [ 2415.567772] 363848 pages reserved [ 2415.571983] ? _ion_heap_freelist_drain+0x6e/0x410 [ 2415.571993] ? ion_system_contig_heap_create+0x130/0x130 [ 2415.572001] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2415.572013] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2415.595683] ion_alloc+0x27a/0x810 [ 2415.599259] ? ion_dma_buf_release+0x40/0x40 [ 2415.599262] 0 pages cma reserved [ 2415.607025] ? __might_fault+0x177/0x1b0 [ 2415.611083] ion_ioctl+0xea/0x1f0 [ 2415.614518] ? ion_query_heaps+0x360/0x360 [ 2415.618779] ? _raw_spin_unlock+0x29/0x40 [ 2415.622916] ? ion_query_heaps+0x360/0x360 [ 2415.627160] do_vfs_ioctl+0x75a/0xff0 [ 2415.631058] ? ioctl_preallocate+0x1a0/0x1a0 [ 2415.635470] ? lock_downgrade+0x740/0x740 [ 2415.639617] ? __fget+0x225/0x360 [ 2415.643064] ? do_vfs_ioctl+0xff0/0xff0 [ 2415.647032] ? security_file_ioctl+0x83/0xb0 [ 2415.651431] SyS_ioctl+0x7f/0xb0 [ 2415.654788] ? do_vfs_ioctl+0xff0/0xff0 [ 2415.658753] do_syscall_64+0x1d5/0x640 [ 2415.662639] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2415.667821] RIP: 0033:0x466459 [ 2415.671085] RSP: 002b:00007f46bec6c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2415.678775] RAX: ffffffffffffffda RBX: 000000000056c0b0 RCX: 0000000000466459 [ 2415.686031] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2415.693293] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2415.700551] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c0b0 [ 2415.707803] R13: 00007ffe96c50ebf R14: 00007f46bec6c300 R15: 0000000000022000 [ 2415.729210] Node 0 active_anon:57376kB inactive_anon:101572kB active_file:140kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:175852kB dirty:0kB writeback:0kB shmem:106008kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 14336kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2415.739202] CPU: 0 PID: 15200 Comm: syz-executor.2 Not tainted 4.14.229-syzkaller #0 [ 2415.767382] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2415.776732] Call Trace: [ 2415.779328] dump_stack+0x1b2/0x281 [ 2415.782958] warn_alloc.cold+0x96/0x1cc [ 2415.786930] ? zone_watermark_ok_safe+0x220/0x220 [ 2415.789216] Node 1 active_anon:1160kB inactive_anon:60584kB active_file:0kB inactive_file:32kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:34816kB dirty:0kB writeback:0kB shmem:60996kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2415.791789] ? usleep_range+0x130/0x130 [ 2415.822820] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 2415.827925] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 2415.832941] ? run_timer_softirq+0x5a0/0x5a0 [ 2415.837353] __alloc_pages_nodemask+0x2127/0x2720 [ 2415.842317] ? lock_acquire+0x170/0x3f0 [ 2415.846292] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2415.849192] Node 0 [ 2415.851124] ? ion_page_pool_alloc+0x9e/0x1b0 [ 2415.851136] DMA free:10968kB min:204kB low:252kB high:300kB active_anon:8kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2415.851141] lowmem_reserve[]: [ 2415.853363] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2415.857833] 0 [ 2415.883404] alloc_pages_current+0x155/0x260 [ 2415.883418] ion_page_pool_alloc+0x118/0x1b0 [ 2415.883427] ion_system_heap_allocate+0x133/0x8c0 [ 2415.883437] ? ion_alloc+0x187/0x810 [ 2415.883447] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2415.883456] ? ion_system_contig_heap_create+0x130/0x130 [ 2415.883466] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2415.883476] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2415.883485] ion_alloc+0x204/0x810 [ 2415.883496] ? ion_dma_buf_release+0x40/0x40 [ 2415.883516] ? __might_fault+0x177/0x1b0 [ 2415.919181] 2717 [ 2415.921979] ion_ioctl+0xea/0x1f0 [ 2415.926965] 2718 [ 2415.931785] ? ion_query_heaps+0x360/0x360 [ 2415.931796] ? retint_kernel+0x2d/0x2d [ 2415.931804] ? ion_query_heaps+0x360/0x360 [ 2415.931816] do_vfs_ioctl+0x75a/0xff0 [ 2415.959195] 2718 [ 2415.959411] ? ioctl_preallocate+0x1a0/0x1a0 [ 2415.963616] 2718 [ 2415.967400] ? retint_kernel+0x2d/0x2d [ 2415.979754] Node 0 DMA32 free:165180kB min:36200kB low:45248kB high:54296kB active_anon:57344kB inactive_anon:101572kB active_file:48kB inactive_file:36kB unevictable:0kB writepending:0kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:7424kB pagetables:3068kB bounce:0kB free_pcp:264kB local_pcp:264kB free_cma:0kB [ 2415.979784] ? do_vfs_ioctl+0x18/0xff0 [ 2415.979795] SyS_ioctl+0x7f/0xb0 [ 2416.016086] ? do_vfs_ioctl+0xff0/0xff0 [ 2416.019223] Bluetooth: hci4 command 0x041b tx timeout [ 2416.020056] do_syscall_64+0x1d5/0x640 [ 2416.029139] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2416.034323] RIP: 0033:0x466459 [ 2416.037503] RSP: 002b:00007fa0b5876188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2416.039174] lowmem_reserve[]: [ 2416.045200] RAX: ffffffffffffffda RBX: 000000000056c008 RCX: 0000000000466459 [ 2416.045206] 0 [ 2416.048282] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000004 [ 2416.048289] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2416.071842] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c008 [ 2416.079121] R13: 00007ffcdcceba8f R14: 00007fa0b5876300 R15: 0000000000022000 [ 2416.079182] 0 0 0 0 [ 2416.088724] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2416.159165] lowmem_reserve[]: 0 0 0 0 0 [ 2416.179209] Node 1 Normal free:719044kB min:53696kB low:67120kB high:80544kB active_anon:1124kB inactive_anon:60584kB active_file:24kB inactive_file:24kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:288kB pagetables:208kB bounce:0kB free_pcp:152kB local_pcp:32kB free_cma:0kB [ 2416.212042] warn_alloc_show_mem: 2 callbacks suppressed [ 2416.212046] Mem-Info: [ 2416.259203] active_anon:14619 inactive_anon:40539 isolated_anon:0 [ 2416.259203] active_file:17 inactive_file:16 isolated_file:0 [ 2416.259203] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2416.259203] slab_reclaimable:12524 slab_unreclaimable:120197 [ 2416.259203] mapped:52667 shmem:41751 pagetables:819 bounce:0 [ 2416.259203] free:286533 free_pcp:379 free_cma:0 [ 2416.269120] Mem-Info: [ 2416.292611] lowmem_reserve[]: 0 0 0 0 0 [ 2416.292634] Node 0 DMA: 15*4kB (UME) 22*8kB (UME) 13*16kB (ME) 15*32kB (UME) 12*64kB (UME) 5*128kB (UME) 2*256kB (UM) 4*512kB (UME) 2*1024kB (ME) 2*2048kB (UM) 0*4096kB = 11036kB [ 2416.319180] Node 0 DMA32: 2562*4kB (UME) 2000*8kB (UME) 774*16kB (UM) 37*32kB (UME) 3254*64kB (UM) 654*128kB (UM) 139*256kB (UM) 11*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 373000kB [ 2416.335489] Node 0 active_anon:57352kB inactive_anon:101572kB active_file:44kB inactive_file:40kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:175852kB dirty:0kB writeback:0kB shmem:106008kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2416.339210] active_anon:14619 inactive_anon:40539 isolated_anon:0 [ 2416.339210] active_file:17 inactive_file:16 isolated_file:0 [ 2416.339210] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2416.339210] slab_reclaimable:12524 slab_unreclaimable:120197 [ 2416.339210] mapped:52667 shmem:41751 pagetables:819 bounce:0 [ 2416.339210] free:289058 free_pcp:378 free_cma:0 [ 2416.379146] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2416.439151] Node 1 active_anon:1124kB inactive_anon:60584kB active_file:24kB inactive_file:24kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:34816kB dirty:0kB writeback:0kB shmem:60996kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2416.479123] Node 1 Normal: 1306*4kB (UME) 733*8kB (UM) 7*16kB (UME) 3*32kB (UM) 2435*64kB (UM) 640*128kB (U) 447*256kB (U) 308*512kB (U) 37*1024kB (U) 36*2048kB (UM) 34*4096kB (U) = 772064kB [ 2416.548448] Node 0 active_anon:57352kB inactive_anon:101572kB active_file:144kB inactive_file:1300kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:176652kB dirty:0kB writeback:0kB shmem:106008kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2416.561908] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2416.619147] Node 0 DMA free:11036kB min:204kB low:252kB high:300kB active_anon:8kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2416.619772] Node 1 active_anon:1124kB inactive_anon:60584kB active_file:24kB inactive_file:24kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:34816kB dirty:0kB writeback:0kB shmem:60996kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2416.679127] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2416.684193] Node 0 DMA32 free:315092kB min:36200kB low:45248kB high:54296kB active_anon:57344kB inactive_anon:101572kB active_file:144kB inactive_file:2400kB unevictable:0kB writepending:0kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:7424kB pagetables:3068kB bounce:0kB free_pcp:776kB local_pcp:120kB free_cma:0kB [ 2416.739134] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2416.747736] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2416.809133] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2416.809481] Node 0 [ 2416.817736] 42647 total pagecache pages [ 2416.817745] 0 pages in swap cache [ 2416.817750] Swap cache stats: add 0, delete 0, find 0/0 [ 2416.817753] Free swap = 0kB [ 2416.817755] Total swap = 0kB [ 2416.817762] 2097051 pages RAM [ 2416.817765] 0 pages HighMem/MovableOnly [ 2416.817768] 363848 pages reserved [ 2416.817771] 0 pages cma reserved [ 2416.849101] lowmem_reserve[]: 0 0 0 0 0 [ 2416.856985] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2416.978917] IPVS: ftp: loaded support on port[0] = 21 [ 2417.012454] DMA free:11036kB min:204kB low:252kB high:300kB active_anon:8kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2417.019336] lowmem_reserve[]: 0 0 0 0 0 [ 2417.099692] Node 1 Normal free:213624kB min:53696kB low:67120kB high:80544kB active_anon:924kB inactive_anon:60584kB active_file:424kB inactive_file:1024kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:320kB pagetables:208kB bounce:0kB free_pcp:840kB local_pcp:156kB free_cma:0kB [ 2417.142504] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2417.147551] Node 0 DMA32 free:43480kB min:36200kB low:45248kB high:54296kB active_anon:57244kB inactive_anon:101572kB active_file:1844kB inactive_file:4200kB unevictable:0kB writepending:0kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:7392kB pagetables:3068kB bounce:0kB free_pcp:960kB local_pcp:656kB free_cma:0kB [ 2417.239127] lowmem_reserve[]: 0 0 0 0 0 [ 2417.243946] Node 0 DMA: 15*4kB (UME) 22*8kB (UME) 13*16kB (ME) 15*32kB (UME) 11*64kB (ME) 5*128kB (UME) 2*256kB (UM) 4*512kB (UME) 2*1024kB (ME) 2*2048kB (UM) 0*4096kB = 10972kB [ 2417.247539] syz-executor.1: [ 2417.263139] syz-executor.1: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2417.275298] page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2417.293861] lowmem_reserve[]: 0 0 0 0 0 [ 2417.296314] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 2417.303475] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2417.305233] Node 0 [ 2417.329084] syz-executor.4: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2417.337506] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 2417.345078] CPU: 1 PID: 15186 Comm: syz-executor.1 Not tainted 4.14.229-syzkaller #0 [ 2417.356151] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2417.359019] lowmem_reserve[]: [ 2417.365480] Call Trace: [ 2417.365486] 0 [ 2417.368579] dump_stack+0x1b2/0x281 [ 2417.376517] warn_alloc.cold+0x96/0x1cc [ 2417.379014] 0 0 [ 2417.380479] ? zone_watermark_ok_safe+0x220/0x220 [ 2417.380502] __alloc_pages_nodemask+0x2127/0x2720 [ 2417.382440] 0 [ 2417.387261] ? __schedule+0x893/0x1de0 [ 2417.392125] Mem-Info: [ 2417.393887] ? lock_acquire+0x170/0x3f0 [ 2417.397752] active_anon:14544 inactive_anon:40539 isolated_anon:0 [ 2417.397752] active_file:63 inactive_file:37 isolated_file:0 [ 2417.397752] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2417.397752] slab_reclaimable:12524 slab_unreclaimable:120803 [ 2417.397752] mapped:52717 shmem:41751 pagetables:819 bounce:0 [ 2417.397752] free:13846 free_pcp:30 free_cma:0 [ 2417.400136] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2417.400154] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2417.419012] 0 [ 2417.437230] ? __mutex_unlock_slowpath+0x75/0x770 [ 2417.437252] alloc_pages_current+0x155/0x260 [ 2417.442115] Node 0 active_anon:57252kB inactive_anon:101572kB active_file:152kB inactive_file:68kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:176052kB dirty:0kB writeback:0kB shmem:106008kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2417.447523] ion_page_pool_alloc+0x118/0x1b0 [ 2417.459023] Node 1 active_anon:924kB inactive_anon:60584kB active_file:100kB inactive_file:80kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:34816kB dirty:0kB writeback:0kB shmem:60996kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2417.486404] ion_system_heap_allocate+0x133/0x8c0 [ 2417.486416] ? _raw_spin_unlock+0x29/0x40 [ 2417.486426] ? _ion_heap_freelist_drain+0x6e/0x410 [ 2417.517962] ? ion_system_contig_heap_create+0x130/0x130 [ 2417.529001] Node 1 [ 2417.531818] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2417.537331] Normal free:26560kB min:53696kB low:67120kB high:80544kB active_anon:924kB inactive_anon:60584kB active_file:524kB inactive_file:388kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:288kB pagetables:208kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2417.539537] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2417.539547] ion_alloc+0x27a/0x810 [ 2417.539561] ? ion_dma_buf_release+0x40/0x40 [ 2417.549002] Node 0 [ 2417.572470] ? __might_fault+0x177/0x1b0 [ 2417.572483] ion_ioctl+0xea/0x1f0 [ 2417.588995] lowmem_reserve[]: [ 2417.591431] ? ion_query_heaps+0x360/0x360 [ 2417.594855] 0 [ 2417.597950] ? ion_query_heaps+0x360/0x360 [ 2417.608158] do_vfs_ioctl+0x75a/0xff0 [ 2417.611943] ? ioctl_preallocate+0x1a0/0x1a0 [ 2417.616328] ? lock_downgrade+0x740/0x740 [ 2417.618993] 0 0 [ 2417.620461] ? __fget+0x225/0x360 [ 2417.620462] 0 0 [ 2417.622423] ? do_vfs_ioctl+0xff0/0xff0 [ 2417.627809] ? security_file_ioctl+0x83/0xb0 [ 2417.631784] DMA free:10964kB min:204kB low:252kB high:300kB active_anon:8kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2417.636401] SyS_ioctl+0x7f/0xb0 [ 2417.665303] ? do_vfs_ioctl+0xff0/0xff0 [ 2417.668993] Node 0 DMA: [ 2417.669259] do_syscall_64+0x1d5/0x640 [ 2417.669273] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2417.672009] 15*4kB [ 2417.675873] RIP: 0033:0x466459 [ 2417.686414] RSP: 002b:00007f10b678e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2417.694110] RAX: ffffffffffffffda RBX: 000000000056c008 RCX: 0000000000466459 [ 2417.698985] (UME) [ 2417.701368] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2417.701375] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2417.703496] 22*8kB (UME) [ 2417.710747] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c008 [ 2417.710752] R13: 00007ffd58825dcf R14: 00007f10b678e300 R15: 0000000000022000 [ 2417.713103] syz-executor.4 cpuset= [ 2417.718039] CPU: 0 PID: 15185 Comm: syz-executor.1 Not tainted 4.14.229-syzkaller #0 [ 2417.720809] / [ 2417.728016] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2417.737316] DMA32: [ 2417.738778] Call Trace: [ 2417.746669] mems_allowed=0-1 [ 2417.748342] dump_stack+0x1b2/0x281 [ 2417.759626] 334*4kB [ 2417.759888] warn_alloc.cold+0x96/0x1cc [ 2417.762439] (ME) [ 2417.765524] ? zone_watermark_ok_safe+0x220/0x220 [ 2417.780913] 125*8kB (ME) 21*16kB (UM) 35*32kB [ 2417.782236] __alloc_pages_nodemask+0x2127/0x2720 [ 2417.782254] ? lock_acquire+0x170/0x3f0 [ 2417.786812] (ME) [ 2417.791658] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2417.791676] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2417.791687] ? __mutex_unlock_slowpath+0x75/0x770 [ 2417.791700] alloc_pages_current+0x155/0x260 [ 2417.791717] ion_page_pool_alloc+0x118/0x1b0 [ 2417.809003] 16*64kB [ 2417.812795] ion_system_heap_allocate+0x133/0x8c0 [ 2417.817173] (UM) [ 2417.821563] ? _raw_spin_unlock+0x29/0x40 [ 2417.821573] ? _ion_heap_freelist_drain+0x6e/0x410 [ 2417.821581] ? ion_system_contig_heap_create+0x130/0x130 [ 2417.821591] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2417.821605] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2417.840871] 5*128kB [ 2417.845200] ion_alloc+0x27a/0x810 [ 2417.860829] ? ion_dma_buf_release+0x40/0x40 [ 2417.860933] (UM) 31*256kB [ 2417.865227] ? __might_fault+0x177/0x1b0 [ 2417.865238] ion_ioctl+0xea/0x1f0 [ 2417.868059] (UM) [ 2417.872165] ? ion_query_heaps+0x360/0x360 [ 2417.872176] ? ion_query_heaps+0x360/0x360 [ 2417.872186] do_vfs_ioctl+0x75a/0xff0 [ 2417.872198] ? ioctl_preallocate+0x1a0/0x1a0 [ 2417.872210] ? lock_downgrade+0x740/0x740 [ 2417.888983] 9*512kB [ 2417.889861] ? __fget+0x225/0x360 [ 2417.894238] (U) [ 2417.898366] ? do_vfs_ioctl+0xff0/0xff0 [ 2417.909984] ? security_file_ioctl+0x83/0xb0 [ 2417.914372] SyS_ioctl+0x7f/0xb0 [ 2417.917717] ? do_vfs_ioctl+0xff0/0xff0 [ 2417.920876] 0*1024kB 0*2048kB [ 2417.921673] do_syscall_64+0x1d5/0x640 [ 2417.921688] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2417.924852] 0*4096kB [ 2417.928721] RIP: 0033:0x466459 [ 2417.939435] RSP: 002b:00007f10b67af188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2417.947130] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 2417.948984] = 18000kB [ 2417.954379] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2417.954386] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2417.956774] Node 0 [ 2417.964017] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2417.964022] R13: 00007ffd58825dcf R14: 00007f10b67af300 R15: 0000000000022000 [ 2417.978243] lowmem_reserve[]: [ 2417.982803] CPU: 1 PID: 15182 Comm: syz-executor.4 Not tainted 4.14.229-syzkaller #0 [ 2417.992913] 0 [ 2417.999140] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2417.999144] Call Trace: [ 2417.999162] dump_stack+0x1b2/0x281 [ 2417.999176] warn_alloc.cold+0x96/0x1cc [ 2418.001983] 2717 [ 2418.010290] ? zone_watermark_ok_safe+0x220/0x220 [ 2418.010301] ? usleep_range+0x130/0x130 [ 2418.010311] ? try_to_free_pages+0x23f/0x6e0 [ 2418.012874] 13*16kB [ 2418.016475] ? _find_next_bit+0xdb/0x100 [ 2418.020438] (ME) [ 2418.022472] ? run_timer_softirq+0x5a0/0x5a0 [ 2418.027282] 15*32kB [ 2418.031241] __alloc_pages_nodemask+0x2127/0x2720 [ 2418.031257] ? lock_acquire+0x170/0x3f0 [ 2418.035733] 2718 [ 2418.038039] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2418.042084] 2718 [ 2418.044111] ? ion_page_pool_alloc+0x9e/0x1b0 [ 2418.048623] (UME) [ 2418.050799] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2418.050819] alloc_pages_current+0x155/0x260 [ 2418.055626] 11*64kB [ 2418.059580] ion_page_pool_alloc+0x118/0x1b0 [ 2418.059590] ion_system_heap_allocate+0x133/0x8c0 [ 2418.059603] ? _raw_spin_unlock+0x29/0x40 [ 2418.061640] 2718 [ 2418.066459] ? _ion_heap_freelist_drain+0x6e/0x410 [ 2418.072964] ? ion_system_contig_heap_create+0x130/0x130 [ 2418.072974] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2418.072986] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2418.075113] (ME) [ 2418.080539] ion_alloc+0x27a/0x810 [ 2418.080552] ? ion_dma_buf_release+0x40/0x40 [ 2418.080564] ? __might_fault+0x177/0x1b0 [ 2418.084945] Node 0 [ 2418.087250] ion_ioctl+0xea/0x1f0 [ 2418.091656] DMA32 free:18000kB min:36200kB low:45248kB high:54296kB active_anon:57176kB inactive_anon:101572kB active_file:12kB inactive_file:12kB unevictable:0kB writepending:0kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:7392kB pagetables:3000kB bounce:0kB free_pcp:120kB local_pcp:0kB free_cma:0kB [ 2418.096447] ? ion_query_heaps+0x360/0x360 [ 2418.100599] 5*128kB [ 2418.102631] ? sockfd_lookup_light+0xb2/0x160 [ 2418.107526] (UME) [ 2418.112968] ? ion_query_heaps+0x360/0x360 [ 2418.112979] do_vfs_ioctl+0x75a/0xff0 [ 2418.112992] ? ioctl_preallocate+0x1a0/0x1a0 [ 2418.117985] lowmem_reserve[]: [ 2418.122804] ? lock_downgrade+0x740/0x740 [ 2418.122818] ? __fget+0x225/0x360 [ 2418.122828] ? do_vfs_ioctl+0xff0/0xff0 [ 2418.124862] 0 [ 2418.128380] ? security_file_ioctl+0x83/0xb0 [ 2418.132773] 2*256kB [ 2418.136806] SyS_ioctl+0x7f/0xb0 [ 2418.139031] 0 [ 2418.142448] ? do_vfs_ioctl+0xff0/0xff0 [ 2418.170724] (UM) [ 2418.174921] do_syscall_64+0x1d5/0x640 [ 2418.177216] 4*512kB [ 2418.181698] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2418.181708] RIP: 0033:0x466459 [ 2418.183834] (UME) [ 2418.188044] RSP: 002b:00007f46becae188 EFLAGS: 00000246 [ 2418.191835] 2*1024kB [ 2418.196198] ORIG_RAX: 0000000000000010 [ 2418.196206] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 2418.199300] (ME) [ 2418.203477] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2418.206922] 2*2048kB [ 2418.210875] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2418.210881] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2418.210886] R13: 00007ffe96c50ebf R14: 00007f46becae300 R15: 0000000000022000 [ 2418.213231] Bluetooth: hci4 command 0x040f tx timeout [ 2418.217110] 0 [ 2418.219569] Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2418.219616] Node 1 Normal: 48*4kB (UME) 28*8kB (UME) 40*16kB (UME) 15*32kB (UM) 4*64kB (UM) 1*128kB (U) 1*256kB (M) 47*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 26240kB [ 2418.219690] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2418.219696] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2418.219702] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2418.219709] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2418.219713] 41785 total pagecache pages [ 2418.219723] 0 pages in swap cache [ 2418.219728] Swap cache stats: add 0, delete 0, find 0/0 [ 2418.219731] Free swap = 0kB [ 2418.219734] Total swap = 0kB [ 2418.219740] 2097051 pages RAM [ 2418.219744] 0 pages HighMem/MovableOnly [ 2418.219747] 363848 pages reserved [ 2418.219751] 0 pages cma reserved [ 2418.375760] (UM) 0*4096kB = 10972kB [ 2418.375773] Node 0 DMA32: 5244*4kB (UME) 471*8kB (UME) 1696*16kB (UM) [ 2418.386596] Mem-Info: [ 2418.394927] 1629*32kB [ 2418.398752] active_anon:14509 inactive_anon:40539 isolated_anon:0 [ 2418.398752] active_file:17 inactive_file:392 isolated_file:0 [ 2418.398752] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2418.398752] slab_reclaimable:12520 slab_unreclaimable:120519 [ 2418.398752] mapped:52871 shmem:41751 pagetables:797 bounce:0 [ 2418.398752] free:57512 free_pcp:403 free_cma:0 [ 2418.409000] (UME) [ 2418.416123] Node 0 active_anon:57184kB inactive_anon:101572kB active_file:12kB inactive_file:2212kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:176968kB dirty:0kB writeback:0kB shmem:106008kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2418.429006] 545*64kB [ 2418.454881] 0 [ 2418.489057] Node 1 active_anon:852kB inactive_anon:60584kB active_file:56kB inactive_file:56kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:34816kB dirty:0kB writeback:0kB shmem:60996kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2418.524830] 0 [ 2418.527430] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2418.547144] (UM) 9*128kB (UM) 32*256kB (UM) 9*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 152840kB [ 2418.560406] lowmem_reserve[]: [ 2418.561776] Node 0 [ 2418.565880] 0 [ 2418.573089] DMA free:11160kB min:204kB low:252kB high:300kB active_anon:8kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2418.589465] Node 0 [ 2418.607974] 0 0 0 0 [ 2418.619335] Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2418.623822] Node 1 [ 2418.639149] Node 1 Normal: 3231*4kB (UME) 655*8kB (UME) 543*16kB (UME) 363*32kB (UM) 104*64kB (UM) 9*128kB (U) 25*256kB (UM) 53*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 79812kB [ 2418.646243] Normal free:79796kB min:53696kB low:67120kB high:80544kB active_anon:852kB inactive_anon:60584kB active_file:56kB inactive_file:56kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:288kB pagetables:188kB bounce:0kB free_pcp:736kB local_pcp:0kB free_cma:0kB [ 2418.678968] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2418.747528] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2418.752681] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2418.759716] chnl_net:caif_netlink_parms(): no params data found [ 2418.772597] Node 0 DMA32 free:156648kB min:36200kB low:45248kB high:54296kB active_anon:57176kB inactive_anon:101572kB active_file:612kB inactive_file:5948kB unevictable:0kB writepending:0kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:7424kB pagetables:3000kB bounce:0kB free_pcp:256kB local_pcp:112kB free_cma:0kB [ 2418.788975] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2418.848726] lowmem_reserve[]: 0 0 0 0 0 [ 2418.863326] Node 0 DMA: 28*4kB (UME) 25*8kB (UME) 13*16kB (ME) 15*32kB (UME) 13*64kB (UME) 5*128kB (UME) 2*256kB (UM) 4*512kB (UME) 2*1024kB (ME) 2*2048kB (UM) 0*4096kB = 11176kB [ 2418.869135] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2418.908901] lowmem_reserve[]: 0 0 0 0 0 [ 2418.913386] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2418.928902] 43573 total pagecache pages [ 2418.959002] 0 pages in swap cache [ 2418.962377] Node 0 DMA32: 58*4kB (ME) 4*8kB (ME) 2*16kB (UM) 1307*32kB (UME) 1275*64kB (UM) 42*128kB (UM) 29*256kB (UM) 6*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 139592kB [ 2418.963039] Swap cache stats: add 0, delete 0, find 0/0 [ 2418.983876] Free swap = 0kB [ 2418.986900] Total swap = 0kB [ 2418.989977] 2097051 pages RAM [ 2418.993070] 0 pages HighMem/MovableOnly [ 2419.003931] 363848 pages reserved [ 2419.007603] 0 pages cma reserved [ 2419.008910] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2419.026163] Out of memory (oom_kill_allocating_task): Kill process 7975 (syz-fuzzer) score 0 or sacrifice child [ 2419.029270] lowmem_reserve[]: 0 0 0 0 0 [ 2419.044879] Node 1 Normal: 3231*4kB (UME) 655*8kB (UME) 543*16kB (UME) 363*32kB (UM) 104*64kB (UM) 9*128kB (U) 25*256kB (UM) 53*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 79812kB [ 2419.068937] Node 1 Normal free:79812kB min:53696kB low:67120kB high:80544kB active_anon:852kB inactive_anon:60584kB active_file:56kB inactive_file:56kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:288kB pagetables:188kB bounce:0kB free_pcp:736kB local_pcp:0kB free_cma:0kB [ 2419.084580] Killed process 12393 (syz-executor.2) total-vm:84924kB, anon-rss:64kB, file-rss:0kB, shmem-rss:0kB [ 2419.126823] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2419.189617] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2419.198366] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2419.220144] lowmem_reserve[]: 0 0 0 0 0 09:15:33 executing program 0: openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x2, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000180)={0x0, 0x13, 0x1}) 09:15:33 executing program 4: openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x504c2, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x800, 0x0) read$midi(r0, &(0x7f0000000080)=""/98, 0x62) openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x109040, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0xbd1, 0x30}) [ 2419.224311] Node 0 DMA: 15*4kB (UME) 21*8kB (ME) 14*16kB (UME) 15*32kB (UME) 11*64kB (ME) 6*128kB (UME) 2*256kB (UM) 4*512kB (UME) 2*1024kB (ME) 2*2048kB (UM) 0*4096kB = 11108kB [ 2419.257368] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2419.270437] 45016 total pagecache pages [ 2419.274511] 0 pages in swap cache [ 2419.278020] Swap cache stats: add 0, delete 0, find 0/0 [ 2419.287406] Node 0 DMA32: 58*4kB (UE) 37*8kB (UE) 1*16kB (U) 5*32kB (E) 448*64kB (UM) 42*128kB (UM) 25*256kB (U) 5*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 43712kB [ 2419.306951] Free swap = 0kB [ 2419.310458] Total swap = 0kB [ 2419.313966] 2097051 pages RAM [ 2419.317125] 0 pages HighMem/MovableOnly [ 2419.323694] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2419.336371] 363848 pages reserved [ 2419.340945] Node 1 Normal: 1*4kB (E) 2*8kB (E) 2*16kB (ME) 1*32kB (U) 2*64kB (UM) 2*128kB (UM) 1*256kB (M) 16*512kB (UM) 51*1024kB (UM) 27*2048kB (UM) 8*4096kB (U) = 149204kB [ 2419.357746] 0 pages cma reserved [ 2419.394695] bridge0: port 1(bridge_slave_0) entered blocking state [ 2419.410985] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2419.426949] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2419.436509] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2419.444132] bridge0: port 1(bridge_slave_0) entered disabled state [ 2419.447059] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2419.479989] device bridge_slave_0 entered promiscuous mode [ 2419.510713] bridge0: port 2(bridge_slave_1) entered blocking state [ 2419.512466] 45830 total pagecache pages [ 2419.517120] bridge0: port 2(bridge_slave_1) entered disabled state [ 2419.517974] device bridge_slave_1 entered promiscuous mode [ 2419.548866] 0 pages in swap cache [ 2419.552346] Swap cache stats: add 0, delete 0, find 0/0 [ 2419.557707] Free swap = 0kB [ 2419.589307] Total swap = 0kB [ 2419.592362] 2097051 pages RAM [ 2419.595457] 0 pages HighMem/MovableOnly [ 2419.629445] 363848 pages reserved [ 2419.632926] 0 pages cma reserved [ 2419.644470] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 2419.661377] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 2419.767553] oom_reaper: reaped process 15192 (syz-executor.5), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 2419.798599] syz-executor.2: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2419.846808] rsyslogd invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=0 [ 2419.868856] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 2419.874028] rsyslogd cpuset=/ mems_allowed=0-1 [ 2419.878618] CPU: 0 PID: 15352 Comm: rsyslogd Not tainted 4.14.229-syzkaller #0 [ 2419.885969] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2419.895316] Call Trace: [ 2419.897918] dump_stack+0x1b2/0x281 [ 2419.901547] dump_header+0x178/0x82f [ 2419.905267] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2419.910364] ? ___ratelimit+0x2cd/0x530 [ 2419.914337] oom_kill_process.cold+0x10/0xa40 [ 2419.918835] out_of_memory+0xe3e/0x1190 [ 2419.922810] ? oom_killer_disable+0x1c0/0x1c0 [ 2419.927311] ? mutex_trylock+0x152/0x1a0 [ 2419.931375] __alloc_pages_nodemask+0x23e1/0x2720 [ 2419.936234] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2419.941082] ? mark_held_locks+0xa6/0xf0 [ 2419.945256] ? cache_grow_begin+0x3f/0x700 [ 2419.949492] cache_grow_begin+0x91/0x700 [ 2419.953555] fallback_alloc+0x207/0x2c0 [ 2419.957529] kmem_cache_alloc_trace+0x1f1/0x3d0 [ 2419.962193] ima_calc_file_hash+0x3c6/0x780 [ 2419.966511] ? ima_alloc_tfm+0x9a/0xc0 [ 2419.970391] ? ima_calc_file_hash+0x14a/0x780 [ 2419.974883] ima_collect_measurement+0x39d/0x430 [ 2419.979638] ? ima_get_action+0x70/0x70 [ 2419.983604] ? vfs_getxattr_alloc+0xc8/0x2d0 [ 2419.988007] ? ima_get_cache_status+0x170/0x170 [ 2419.992668] process_measurement+0x78b/0xb20 [ 2419.997070] ? ima_rdwr_violation_check+0x3a0/0x3a0 [ 2420.002168] ? generic_file_open+0x68/0x90 [ 2420.006392] ? ext4_release_file+0x2d0/0x2d0 [ 2420.010789] ? apparmor_file_alloc_security+0x800/0x800 [ 2420.016147] ? lock_downgrade+0x740/0x740 [ 2420.020294] ? file_ra_state_init+0xc4/0x1e0 [ 2420.024695] ? do_dentry_open+0x698/0xec0 [ 2420.028835] ? ext4_release_file+0x2d0/0x2d0 [ 2420.033233] ? __inode_permission+0xcd/0x2f0 [ 2420.037639] ? vfs_open+0x10d/0x220 [ 2420.041262] path_openat+0x10ad/0x2970 [ 2420.045160] ? path_lookupat+0x780/0x780 [ 2420.049216] ? trace_hardirqs_on+0x10/0x10 [ 2420.053437] ? trace_hardirqs_on+0x10/0x10 [ 2420.057659] do_filp_open+0x179/0x3c0 [ 2420.061448] ? may_open_dev+0xe0/0xe0 [ 2420.065250] ? lock_downgrade+0x740/0x740 [ 2420.069392] ? do_raw_spin_unlock+0x164/0x220 [ 2420.073881] ? _raw_spin_unlock+0x29/0x40 [ 2420.078016] ? __alloc_fd+0x1be/0x490 [ 2420.081804] ? _raw_spin_unlock_irq+0x24/0x80 [ 2420.086296] do_sys_open+0x296/0x410 [ 2420.090003] ? filp_open+0x60/0x60 [ 2420.093531] ? do_syscall_64+0x4c/0x640 [ 2420.097482] ? do_sys_open+0x410/0x410 [ 2420.101358] do_syscall_64+0x1d5/0x640 [ 2420.105243] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2420.110427] RIP: 0033:0x7f1437dba6f0 [ 2420.114127] RSP: 002b:00007ffc44ee10f8 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 2420.121818] RAX: ffffffffffffffda RBX: 000055d1e8cf4950 RCX: 00007f1437dba6f0 [ 2420.128828] syz-executor.5: [ 2420.129074] RDX: 00000000000001b6 RSI: 0000000000080000 RDI: 00007f1436e9a799 [ 2420.129081] page allocation failure: order:0 [ 2420.132073] RBP: 0000000000000008 R08: 0000000000000008 R09: 0000000000000001 [ 2420.150982] R10: 0000000000080000 R11: 0000000000000246 R12: 00007f1436e9a795 [ 2420.158228] R13: 0000000000000001 R14: 00007ffc44ee1220 R15: 000055d1e8cf3f00 [ 2420.167785] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2420.175572] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 2420.189219] CPU: 0 PID: 15192 Comm: syz-executor.5 Not tainted 4.14.229-syzkaller #0 [ 2420.197110] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2420.206451] Call Trace: [ 2420.209030] dump_stack+0x1b2/0x281 [ 2420.212655] warn_alloc.cold+0x96/0x1cc [ 2420.216636] ? zone_watermark_ok_safe+0x220/0x220 [ 2420.221474] ? usleep_range+0x130/0x130 [ 2420.225453] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 2420.230550] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 2420.235558] ? run_timer_softirq+0x5a0/0x5a0 [ 2420.239976] __alloc_pages_nodemask+0x2127/0x2720 [ 2420.244823] ? lock_acquire+0x170/0x3f0 [ 2420.248796] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2420.253631] ? ion_page_pool_alloc+0x9e/0x1b0 [ 2420.258135] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2420.258836] Bluetooth: hci4 command 0x0419 tx timeout [ 2420.263581] alloc_pages_current+0x155/0x260 [ 2420.273156] ion_page_pool_alloc+0x118/0x1b0 [ 2420.277555] ion_system_heap_allocate+0x133/0x8c0 [ 2420.282379] ? ion_alloc+0x187/0x810 [ 2420.286072] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2420.291512] ? ion_system_contig_heap_create+0x130/0x130 [ 2420.296955] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2420.301968] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2420.306799] ion_alloc+0x204/0x810 [ 2420.310335] ? ion_dma_buf_release+0x40/0x40 [ 2420.314741] ? __might_fault+0x177/0x1b0 [ 2420.318796] ion_ioctl+0xea/0x1f0 [ 2420.318798] syz-executor.1: page allocation failure: order:0 [ 2420.322237] ? ion_query_heaps+0x360/0x360 [ 2420.322242] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2420.328028] ? ion_query_heaps+0x360/0x360 [ 2420.344066] do_vfs_ioctl+0x75a/0xff0 [ 2420.347850] ? ioctl_preallocate+0x1a0/0x1a0 [ 2420.352248] ? lock_downgrade+0x740/0x740 [ 2420.356383] ? __fget+0x225/0x360 [ 2420.359824] ? do_vfs_ioctl+0xff0/0xff0 [ 2420.362137] syz-executor.1 cpuset= [ 2420.363785] ? security_file_ioctl+0x83/0xb0 [ 2420.363786] / mems_allowed=0-1 [ 2420.367312] SyS_ioctl+0x7f/0xb0 [ 2420.378220] ? do_vfs_ioctl+0xff0/0xff0 [ 2420.382184] do_syscall_64+0x1d5/0x640 [ 2420.386061] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2420.391319] RIP: 0033:0x466459 [ 2420.394492] RSP: 002b:00007f4d0bcd5188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2420.402189] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 2420.409441] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2420.416698] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2420.424039] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2420.431302] R13: 00007ffe1117a98f R14: 00007f4d0bcd5300 R15: 0000000000022000 [ 2420.438578] CPU: 1 PID: 15186 Comm: syz-executor.1 Not tainted 4.14.229-syzkaller #0 [ 2420.448094] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2420.457440] Call Trace: [ 2420.460032] dump_stack+0x1b2/0x281 [ 2420.463658] warn_alloc.cold+0x96/0x1cc [ 2420.467626] ? zone_watermark_ok_safe+0x220/0x220 [ 2420.471698] warn_alloc_show_mem: 2 callbacks suppressed [ 2420.471701] Mem-Info: [ 2420.472457] ? usleep_range+0x130/0x130 [ 2420.477814] active_anon:14575 inactive_anon:40538 isolated_anon:0 [ 2420.477814] active_file:30 inactive_file:22 isolated_file:0 [ 2420.477814] unevictable:0 dirty:15 writeback:0 unstable:0 [ 2420.477814] slab_reclaimable:12510 slab_unreclaimable:121304 [ 2420.477814] mapped:44054 shmem:41750 pagetables:721 bounce:0 [ 2420.477814] free:13952 free_pcp:0 free_cma:0 [ 2420.480191] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 2420.480204] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 2420.480213] ? run_timer_softirq+0x5a0/0x5a0 [ 2420.480231] __alloc_pages_nodemask+0x2127/0x2720 [ 2420.484189] Node 0 active_anon:56740kB inactive_anon:101568kB active_file:108kB inactive_file:64kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:141388kB dirty:60kB writeback:0kB shmem:106004kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2420.517300] ? lock_acquire+0x170/0x3f0 [ 2420.517318] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2420.522419] Mem-Info: [ 2420.527401] ? ion_page_pool_alloc+0x9e/0x1b0 [ 2420.531809] active_anon:14575 inactive_anon:40538 isolated_anon:0 [ 2420.531809] active_file:30 inactive_file:22 isolated_file:0 [ 2420.531809] unevictable:0 dirty:15 writeback:0 unstable:0 [ 2420.531809] slab_reclaimable:12510 slab_unreclaimable:121304 [ 2420.531809] mapped:44054 shmem:41750 pagetables:721 bounce:0 [ 2420.531809] free:13952 free_pcp:0 free_cma:0 [ 2420.536621] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2420.564644] Node 1 active_anon:1560kB inactive_anon:60584kB active_file:12kB inactive_file:24kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:34828kB dirty:0kB writeback:0kB shmem:60996kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2420.568571] alloc_pages_current+0x155/0x260 [ 2420.573392] Node 0 [ 2420.575772] ion_page_pool_alloc+0x118/0x1b0 [ 2420.580267] DMA free:10960kB min:204kB low:252kB high:300kB active_anon:8kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2420.613471] ion_system_heap_allocate+0x133/0x8c0 [ 2420.613484] ? _raw_spin_unlock+0x29/0x40 [ 2420.613494] ? _ion_heap_freelist_drain+0x6e/0x410 [ 2420.618971] Node 0 active_anon:56740kB inactive_anon:101568kB active_file:108kB inactive_file:64kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:141388kB dirty:60kB writeback:0kB shmem:106004kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2420.646168] ? ion_system_contig_heap_create+0x130/0x130 [ 2420.646179] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2420.646192] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2420.650630] Node 1 active_anon:1560kB inactive_anon:60584kB active_file:12kB inactive_file:24kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:34828kB dirty:0kB writeback:0kB shmem:60996kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2420.652816] ion_alloc+0x27a/0x810 [ 2420.657190] Node 0 [ 2420.682772] ? ion_dma_buf_release+0x40/0x40 [ 2420.682784] ? __might_fault+0x177/0x1b0 [ 2420.682795] ion_ioctl+0xea/0x1f0 [ 2420.682805] ? ion_query_heaps+0x360/0x360 [ 2420.687637] lowmem_reserve[]: [ 2420.691756] ? ion_query_heaps+0x360/0x360 [ 2420.691767] do_vfs_ioctl+0x75a/0xff0 [ 2420.691779] ? ioctl_preallocate+0x1a0/0x1a0 [ 2420.696676] 0 [ 2420.724700] ? lock_downgrade+0x740/0x740 [ 2420.724713] ? __fget+0x225/0x360 [ 2420.724723] ? do_vfs_ioctl+0xff0/0xff0 [ 2420.730180] DMA free:10960kB min:204kB low:252kB high:300kB active_anon:8kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2420.735262] ? security_file_ioctl+0x83/0xb0 [ 2420.740099] 2717 [ 2420.767209] SyS_ioctl+0x7f/0xb0 [ 2420.767218] ? do_vfs_ioctl+0xff0/0xff0 [ 2420.767236] do_syscall_64+0x1d5/0x640 [ 2420.770767] lowmem_reserve[]: [ 2420.772971] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2420.777345] 0 [ 2420.781383] RIP: 0033:0x466459 [ 2420.781388] RSP: 002b:00007f10b678e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2420.781397] RAX: ffffffffffffffda RBX: 000000000056c008 RCX: 0000000000466459 [ 2420.781404] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2420.784831] 2717 [ 2420.789037] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2420.789043] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c008 [ 2420.789049] R13: 00007ffd58825dcf R14: 00007f10b678e300 R15: 0000000000022000 [ 2420.801633] CPU: 1 PID: 15200 Comm: syz-executor.2 Not tainted 4.14.229-syzkaller #0 [ 2420.805369] syz-executor.1: [ 2420.807120] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2420.813829] page allocation failure: order:0 [ 2420.814698] Call Trace: [ 2420.818663] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 2420.844381] dump_stack+0x1b2/0x281 [ 2420.844395] warn_alloc.cold+0x96/0x1cc [ 2420.844406] ? zone_watermark_ok_safe+0x220/0x220 [ 2420.844427] __alloc_pages_nodemask+0x2127/0x2720 [ 2420.848837] 2718 [ 2420.850857] ? lock_acquire+0x170/0x3f0 [ 2420.854187] 2718 [ 2420.858144] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2420.862028] 2718 [ 2420.865092] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2420.870265] 2718 [ 2420.872032] ? check_preemption_disabled+0x35/0x240 [ 2420.875243] 2718 [ 2420.882933] ? __mutex_unlock_slowpath+0x75/0x770 [ 2420.882949] alloc_pages_current+0x155/0x260 [ 2420.890210] 2718 [ 2420.897450] ion_page_pool_alloc+0x118/0x1b0 [ 2420.906735] ion_system_heap_allocate+0x133/0x8c0 [ 2420.921264] ? _raw_spin_unlock+0x29/0x40 [ 2420.921272] ? _ion_heap_freelist_drain+0x6e/0x410 [ 2420.921282] ? ion_system_contig_heap_create+0x130/0x130 [ 2420.929155] (null) [ 2420.932136] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2420.941496] Node 0 [ 2420.945903] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2420.948470] DMA32 free:18016kB min:36200kB low:45248kB high:54296kB active_anon:56732kB inactive_anon:101568kB active_file:100kB inactive_file:32kB unevictable:0kB writepending:60kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:7264kB pagetables:2600kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2420.955534] ion_alloc+0x27a/0x810 [ 2420.955548] ? ion_dma_buf_release+0x40/0x40 [ 2420.955560] ? __might_fault+0x177/0x1b0 [ 2420.959189] syz-executor.1 cpuset= [ 2420.963126] ion_ioctl+0xea/0x1f0 [ 2420.967935] / [ 2420.972755] ? ion_query_heaps+0x360/0x360 [ 2420.974817] Node 0 [ 2420.978744] ? retint_kernel+0x2d/0x2d [ 2420.978753] ? ion_query_heaps+0x360/0x360 [ 2420.978763] do_vfs_ioctl+0x75a/0xff0 [ 2420.980808] DMA32 free:18016kB min:36200kB low:45248kB high:54296kB active_anon:56732kB inactive_anon:101568kB active_file:100kB inactive_file:32kB unevictable:0kB writepending:60kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:7264kB pagetables:2600kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2420.985646] ? ioctl_preallocate+0x1a0/0x1a0 [ 2420.987679] lowmem_reserve[]: [ 2420.993115] ? retint_kernel+0x2d/0x2d [ 2420.993131] ? do_vfs_ioctl+0x18/0xff0 [ 2420.993142] SyS_ioctl+0x7f/0xb0 [ 2420.993152] ? do_vfs_ioctl+0xff0/0xff0 [ 2420.995206] lowmem_reserve[]: [ 2421.000200] do_syscall_64+0x1d5/0x640 [ 2421.000214] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2421.000224] RIP: 0033:0x466459 [ 2421.002272] mems_allowed=0-1 [ 2421.007083] RSP: 002b:00007fa0b5876188 EFLAGS: 00000246 [ 2421.011504] 0 [ 2421.013504] ORIG_RAX: 0000000000000010 [ 2421.013512] RAX: ffffffffffffffda RBX: 000000000056c008 RCX: 0000000000466459 [ 2421.017895] 0 [ 2421.022709] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000004 [ 2421.022714] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2421.022719] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c008 [ 2421.022724] R13: 00007ffcdcceba8f R14: 00007fa0b5876300 R15: 0000000000022000 [ 2421.099068] 0 [ 2421.101700] syz-executor.2: [ 2421.107767] 0 [ 2421.117601] CPU: 0 PID: 15185 Comm: syz-executor.1 Not tainted 4.14.229-syzkaller #0 [ 2421.148714] 0 [ 2421.151745] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2421.154834] 0 [ 2421.158693] Call Trace: [ 2421.158714] dump_stack+0x1b2/0x281 [ 2421.158727] warn_alloc.cold+0x96/0x1cc [ 2421.158738] ? zone_watermark_ok_safe+0x220/0x220 [ 2421.158747] ? usleep_range+0x130/0x130 [ 2421.158755] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 2421.158767] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 2421.188710] 0 [ 2421.193672] ? run_timer_softirq+0x5a0/0x5a0 [ 2421.199413] __alloc_pages_nodemask+0x2127/0x2720 [ 2421.199430] ? lock_acquire+0x170/0x3f0 [ 2421.199443] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2421.199453] ? ion_page_pool_alloc+0x9e/0x1b0 [ 2421.199468] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2421.199487] alloc_pages_current+0x155/0x260 [ 2421.228724] Node 0 [ 2421.230288] ion_page_pool_alloc+0x118/0x1b0 [ 2421.237541] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2421.239316] ion_system_heap_allocate+0x133/0x8c0 [ 2421.239329] ? _raw_spin_unlock+0x29/0x40 [ 2421.239338] ? _ion_heap_freelist_drain+0x6e/0x410 [ 2421.239350] ? ion_system_contig_heap_create+0x130/0x130 [ 2421.268722] lowmem_reserve[]: [ 2421.271066] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2421.275006] 0 [ 2421.279848] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2421.279860] ion_alloc+0x27a/0x810 [ 2421.279876] ? ion_dma_buf_release+0x40/0x40 [ 2421.303171] 0 [ 2421.304895] ? __might_fault+0x177/0x1b0 [ 2421.318701] 0 [ 2421.323578] ion_ioctl+0xea/0x1f0 [ 2421.327956] 0 [ 2421.330187] ? ion_query_heaps+0x360/0x360 [ 2421.330199] ? ion_query_heaps+0x360/0x360 [ 2421.330210] do_vfs_ioctl+0x75a/0xff0 [ 2421.330220] ? ioctl_preallocate+0x1a0/0x1a0 [ 2421.330229] ? lock_downgrade+0x740/0x740 [ 2421.330242] ? __fget+0x225/0x360 [ 2421.348733] 0 [ 2421.359503] ? do_vfs_ioctl+0xff0/0xff0 [ 2421.359515] ? security_file_ioctl+0x83/0xb0 [ 2421.359524] SyS_ioctl+0x7f/0xb0 [ 2421.359534] ? do_vfs_ioctl+0xff0/0xff0 [ 2421.381961] do_syscall_64+0x1d5/0x640 [ 2421.386994] Node 1 [ 2421.388781] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2421.388789] RIP: 0033:0x466459 [ 2421.388794] RSP: 002b:00007f10b67af188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2421.388803] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 2421.388808] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2421.388813] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2421.388820] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2421.408736] Normal free:246216kB min:53696kB low:67120kB high:80544kB active_anon:1560kB inactive_anon:60584kB active_file:12kB inactive_file:8kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:288kB pagetables:284kB bounce:0kB free_pcp:656kB local_pcp:656kB free_cma:0kB [ 2421.409156] R13: 00007ffd58825dcf R14: 00007f10b67af300 R15: 0000000000022000 [ 2421.412617] lowmem_reserve[]: [ 2421.425979] 0 [ 2421.427064] page allocation failure: order:0 [ 2421.433076] 0 [ 2421.435696] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 2421.439544] 0 [ 2421.440680] (null) [ 2421.440686] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 2421.440710] CPU: 1 PID: 15200 Comm: syz-executor.2 Not tainted 4.14.229-syzkaller #0 [ 2421.440720] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2421.440726] Call Trace: [ 2421.449078] dump_stack+0x1b2/0x281 [ 2421.449092] warn_alloc.cold+0x96/0x1cc [ 2421.449104] ? zone_watermark_ok_safe+0x220/0x220 [ 2421.449114] ? usleep_range+0x130/0x130 [ 2421.449123] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 2421.449136] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 2421.449147] ? run_timer_softirq+0x5a0/0x5a0 [ 2421.449164] __alloc_pages_nodemask+0x2127/0x2720 [ 2421.449180] ? lock_acquire+0x170/0x3f0 [ 2421.449196] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2421.449204] ? ion_page_pool_alloc+0x9e/0x1b0 [ 2421.449220] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2421.449229] ? check_preemption_disabled+0x35/0x240 [ 2421.449247] alloc_pages_current+0x155/0x260 [ 2421.449257] ion_page_pool_alloc+0x118/0x1b0 [ 2421.449268] ion_system_heap_allocate+0x133/0x8c0 [ 2421.449279] ? _raw_spin_unlock+0x29/0x40 [ 2421.449288] ? _ion_heap_freelist_drain+0x6e/0x410 [ 2421.449298] ? ion_system_contig_heap_create+0x130/0x130 [ 2421.449310] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2421.455630] Node 0 [ 2421.456618] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2421.460827] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2421.462696] ion_alloc+0x27a/0x810 [ 2421.462710] ? ion_dma_buf_release+0x40/0x40 [ 2421.462723] ? __might_fault+0x177/0x1b0 [ 2421.462735] ion_ioctl+0xea/0x1f0 [ 2421.462744] ? ion_query_heaps+0x360/0x360 [ 2421.468215] lowmem_reserve[]: [ 2421.471082] ? retint_kernel+0x2d/0x2d [ 2421.471091] ? ion_query_heaps+0x360/0x360 [ 2421.471101] do_vfs_ioctl+0x75a/0xff0 [ 2421.471113] ? ioctl_preallocate+0x1a0/0x1a0 [ 2421.471120] ? retint_kernel+0x2d/0x2d [ 2421.471137] ? do_vfs_ioctl+0x18/0xff0 [ 2421.471148] SyS_ioctl+0x7f/0xb0 [ 2421.471157] ? do_vfs_ioctl+0xff0/0xff0 [ 2421.479199] 0 [ 2421.486095] do_syscall_64+0x1d5/0x640 [ 2421.486110] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2421.486118] RIP: 0033:0x466459 [ 2421.486123] RSP: 002b:00007fa0b5876188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2421.486133] RAX: ffffffffffffffda RBX: 000000000056c008 RCX: 0000000000466459 [ 2421.486138] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000004 [ 2421.486145] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2421.493765] 0 [ 2421.500644] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c008 [ 2421.500650] R13: 00007ffcdcceba8f R14: 00007fa0b5876300 R15: 0000000000022000 [ 2421.501040] 0 [ 2421.514587] 0 [ 2421.578676] 0 [ 2421.593310] 0 [ 2421.608680] 0 [ 2421.617573] 0 [ 2421.617880] 0 [ 2421.638727] warn_alloc_show_mem: 2 callbacks suppressed [ 2421.638731] Mem-Info: [ 2421.645336] Node 1 [ 2421.646123] active_anon:14575 inactive_anon:40538 isolated_anon:0 [ 2421.646123] active_file:41 inactive_file:865 isolated_file:0 [ 2421.646123] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2421.646123] slab_reclaimable:12510 slab_unreclaimable:121304 [ 2421.646123] mapped:44605 shmem:41750 pagetables:721 bounce:0 [ 2421.646123] free:126225 free_pcp:353 free_cma:0 [ 2421.658720] Normal free:288716kB min:53696kB low:67120kB high:80544kB active_anon:1560kB inactive_anon:60584kB active_file:12kB inactive_file:8kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:288kB pagetables:284kB bounce:0kB free_pcp:692kB local_pcp:0kB free_cma:0kB [ 2421.659983] 0 [ 2421.664760] lowmem_reserve[]: [ 2421.706304] 0 [ 2421.716502] Node 0 active_anon:56740kB inactive_anon:101568kB active_file:152kB inactive_file:3452kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:143704kB dirty:0kB writeback:0kB shmem:106004kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2421.738661] 0 [ 2421.768688] Node 1 active_anon:1560kB inactive_anon:60584kB active_file:12kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:34816kB dirty:0kB writeback:0kB shmem:60996kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2421.813307] 0 [ 2421.828669] Node 0 [ 2421.863369] 0 [ 2421.938661] DMA: [ 2421.977678] Node 0 DMA free:11092kB min:204kB low:252kB high:300kB active_anon:8kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2422.022254] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2422.027305] Node 0 DMA32 free:336136kB min:36200kB low:45248kB high:54296kB active_anon:56732kB inactive_anon:101568kB active_file:152kB inactive_file:3480kB unevictable:0kB writepending:0kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:7232kB pagetables:2600kB bounce:0kB free_pcp:940kB local_pcp:280kB free_cma:0kB [ 2422.028638] 19*4kB [ 2422.065475] lowmem_reserve[]: 0 0 0 0 0 [ 2422.068645] 0 [ 2422.073498] Node 0 DMA: 19*4kB (UME) 25*8kB (UME) 14*16kB (UME) 15*32kB (UME) 12*64kB (UME) 5*128kB (UME) 2*256kB (UM) 4*512kB (UME) 2*1024kB (ME) 2*2048kB (UM) 0*4096kB = 11092kB [ 2422.074244] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2422.108662] Node 0 [ 2422.120568] (UME) 25*8kB (UME) 14*16kB (UME) 15*32kB (UME) 12*64kB (UME) 5*128kB (UME) 2*256kB (UM) 4*512kB (UME) 2*1024kB (ME) 2*2048kB (UM) 0*4096kB = 11092kB [ 2422.138370] Node 0 DMA32: 12436*4kB (UME) 253*8kB (UME) 1695*16kB (U) 1764*32kB (UME) 2326*64kB (UM) 525*128kB (UM) 98*256kB (UM) 6*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 379560kB [ 2422.141960] DMA32: 12438*4kB (UME) 255*8kB (UME) 1695*16kB (U) 1767*32kB (UME) 2328*64kB (UM) 525*128kB (UM) 98*256kB (UM) 6*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 379808kB [ 2422.155540] lowmem_reserve[]: [ 2422.170530] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2422.185446] 0 0 0 0 0 [ 2422.187965] Node 1 Normal free:779572kB min:53696kB low:67120kB high:80544kB active_anon:1560kB inactive_anon:60584kB active_file:8kB inactive_file:12kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:288kB pagetables:284kB bounce:0kB free_pcp:744kB local_pcp:0kB free_cma:0kB [ 2422.191985] Node 0 [ 2422.217491] Node 1 Normal: 4971*4kB (UME) 458*8kB (UME) 927*16kB (UME) 958*32kB (UM) 2259*64kB (UM) 674*128kB (UM) 299*256kB (UM) 272*512kB (UM) 51*1024kB (UM) 36*2048kB (U) 34*4096kB (U) = 780908kB [ 2422.238669] lowmem_reserve[]: 0 0 0 0 0 [ 2422.242669] Node 0 DMA: 21*4kB (UME) 25*8kB (UME) 15*16kB (UME) 16*32kB (UME) 12*64kB (UME) 5*128kB (UME) 2*256kB (UM) 4*512kB (UME) 2*1024kB (ME) 2*2048kB (UM) 0*4096kB = 11148kB [ 2422.250305] Normal: [ 2422.260573] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2422.272675] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2422.280431] 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2422.282003] Node 0 [ 2422.290728] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2422.300325] Node 1 Normal: 5184*4kB (UME) 627*8kB (UME) 1105*16kB (UME) 1126*32kB (UM) 2445*64kB (UM) 748*128kB (UM) 324*256kB (UM) 279*512kB (UM) 51*1024kB (UM) 36*2048kB (U) 34*4096kB (U) = 822696kB [ 2422.303065] DMA32: [ 2422.320102] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2422.331704] 42673 total pagecache pages [ 2422.335679] 0 pages in swap cache [ 2422.340320] 12724*4kB (UME) 913*8kB (UME) 1862*16kB (U) 1911*32kB (UME) 2636*64kB (UM) 616*128kB (UM) 102*256kB (UM) 6*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 425880kB [ 2422.344760] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2422.356601] Swap cache stats: add 0, delete 0, find 0/0 [ 2422.370260] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2422.370283] Node 0 [ 2422.379672] Free swap = 0kB [ 2422.382618] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2422.384978] Total swap = 0kB [ 2422.394066] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2422.399081] Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2422.409613] 42697 total pagecache pages [ 2422.415790] 2097051 pages RAM [ 2422.422611] 0 pages HighMem/MovableOnly [ 2422.424036] 0 pages in swap cache [ 2422.426571] 363848 pages reserved [ 2422.433633] Node 1 Normal: 5185*4kB (UME) 633*8kB (UME) 1109*16kB (UME) 1135*32kB (UM) 2447*64kB (UM) 751*128kB (UM) 345*256kB (UM) 281*512kB (UM) 51*1024kB (UM) 36*2048kB (U) 34*4096kB (U) = 830012kB [ 2422.434407] Swap cache stats: add 0, delete 0, find 0/0 [ 2422.451784] 0 pages cma reserved [ 2422.451792] Out of memory (oom_kill_allocating_task): Kill process 15352 (rsyslogd) score 0 or sacrifice child [ 2422.451812] Killed process 15352 (rsyslogd) total-vm:40432kB, anon-rss:408kB, file-rss:4kB, shmem-rss:0kB [ 2422.462131] Free swap = 0kB [ 2422.471107] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2422.483125] Total swap = 0kB [ 2422.489034] audit: type=1800 audit(1618046136.898:459): pid=15352 uid=0 auid=4294967295 ses=4294967295 op="collect_data" cause="failed" comm="rsyslogd" name="group" dev="sda1" ino=13007 res=0 [ 2422.496278] oom_reaper: reaped process 15352 (rsyslogd), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 2422.522521] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2422.524776] 2097051 pages RAM [ 2422.534792] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2422.536574] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 2422.544220] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2422.556850] 0 pages HighMem/MovableOnly [ 2422.559920] 42956 total pagecache pages [ 2422.564467] 363848 pages reserved [ 2422.567725] 0 pages in swap cache [ 2422.574707] Swap cache stats: add 0, delete 0, find 0/0 [ 2422.577103] team0: Port device team_slave_0 added [ 2422.585484] 0 pages cma reserved [ 2422.590359] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 2422.597650] team0: Port device team_slave_1 added [ 2422.597954] Free swap = 0kB [ 2422.606115] Total swap = 0kB [ 2422.622639] 2097051 pages RAM [ 2422.626668] 0 pages HighMem/MovableOnly [ 2422.641915] 363848 pages reserved [ 2422.647453] 0 pages cma reserved [ 2422.688694] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2422.694959] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2422.772473] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2422.844038] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2422.861523] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2422.936346] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2422.963596] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 2422.977825] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 2423.044227] device hsr_slave_0 entered promiscuous mode [ 2423.055075] device hsr_slave_1 entered promiscuous mode [ 2423.068429] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 2423.089383] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 2423.258376] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 2423.315415] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2423.331984] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 2423.345953] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 2423.352808] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2423.365512] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2423.379877] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 2423.385958] 8021q: adding VLAN 0 to HW filter on device team0 [ 2423.395773] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 2423.402905] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2423.411091] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2423.419860] bridge0: port 1(bridge_slave_0) entered blocking state [ 2423.426231] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2423.435533] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 2423.443820] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2423.451343] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2423.459846] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2423.467605] bridge0: port 2(bridge_slave_1) entered blocking state [ 2423.474003] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2423.484907] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2423.493395] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2423.503296] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2423.514727] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2423.524688] device bridge_slave_1 left promiscuous mode [ 2423.532232] bridge0: port 2(bridge_slave_1) entered disabled state [ 2423.541559] device bridge_slave_0 left promiscuous mode [ 2423.547072] bridge0: port 1(bridge_slave_0) entered disabled state [ 2423.556601] device veth1_macvtap left promiscuous mode [ 2423.562141] device veth0_macvtap left promiscuous mode [ 2423.567460] device veth1_vlan left promiscuous mode [ 2423.572769] device veth0_vlan left promiscuous mode [ 2423.670758] device hsr_slave_1 left promiscuous mode [ 2423.679160] device hsr_slave_0 left promiscuous mode [ 2423.695872] team0 (unregistering): Port device team_slave_1 removed [ 2423.705971] team0 (unregistering): Port device team_slave_0 removed [ 2423.716190] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 2423.727651] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 2423.759482] bond0 (unregistering): Released all slaves [ 2423.776439] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 2423.784162] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2423.803827] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 2423.814704] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2423.827898] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 2423.840651] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2423.851143] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2423.864924] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 2423.873877] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2423.881270] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2423.889737] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2423.899261] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 2423.908279] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 2423.915630] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2423.923550] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2423.934041] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2423.942327] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2423.954560] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 2423.961210] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2423.991285] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 2424.010064] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 2424.016346] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2424.028853] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2424.040539] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2424.204495] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 2424.214916] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 2424.227036] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2424.235920] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2424.352982] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 2424.372961] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 2424.379883] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 2424.393720] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 2424.404673] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2424.416661] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2424.427824] device veth0_vlan entered promiscuous mode [ 2424.436952] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2424.444744] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2424.455038] device veth1_vlan entered promiscuous mode [ 2424.472752] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 2424.482282] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 2424.491344] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2424.500093] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2424.509713] device veth0_macvtap entered promiscuous mode [ 2424.515975] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 2424.530711] device veth1_macvtap entered promiscuous mode [ 2424.537065] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 2424.551677] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 2424.563189] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 2424.574999] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2424.587197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2424.601694] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2424.611477] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2424.624481] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2424.634479] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2424.647948] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2424.657998] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2424.673892] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 2424.681779] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2424.691301] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2424.700055] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2424.707305] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2424.717802] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2424.728806] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2424.742733] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2424.752310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2424.766984] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2424.776498] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2424.790043] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2424.800515] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2424.812594] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2424.824791] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 2424.833882] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2424.845027] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2424.855865] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 09:15:39 executing program 4: ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000180)={0x80000001, 0x13}) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wg2\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=@ipv6_deladdr={0x2c, 0x15, 0x100, 0x70bd2d, 0x25dfdbff, {0xa, 0x80, 0x94, 0xfe, r0}, [@IFA_CACHEINFO={0x14, 0x6, {0x8, 0x8, 0xec, 0x6}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004001}, 0x20000000) 09:15:39 executing program 3: r0 = perf_event_open$cgroup(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = epoll_create(0x7) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000001c0)={0x20000005}) epoll_wait(r1, &(0x7f0000000100)=[{}], 0x1, 0x0) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000580)='/dev/btrfs-control\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, r2) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000080)=@req3={0x0, 0xaed, 0x1, 0x3, 0x6, 0x2, 0x5}, 0x1c) 09:15:39 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x89fa, &(0x7f0000003dc0)={'ip6gre0\x00', 0x0}) r1 = epoll_create(0xb5a4) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000180)={0x80000001, 0x13}) 09:15:39 executing program 0: openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x2, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000180)={0x0, 0x13, 0x1}) 09:15:39 executing program 3: r0 = perf_event_open$cgroup(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = epoll_create(0x7) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000001c0)={0x20000005}) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) epoll_wait(r2, &(0x7f0000000100)=[{}], 0x1, 0x0) 09:15:39 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000180)={0x80000001, 0x13}) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000580)='/dev/btrfs-control\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r1) getrusage(0xffffffffffffffff, &(0x7f00000001c0)) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000580)='/dev/btrfs-control\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, r2) ioctl$ION_IOC_HEAP_QUERY(r2, 0xc0184908, &(0x7f0000000080)={0x34, 0x0, &(0x7f0000000040)}) accept4$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14, 0x80000) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000580)='/dev/btrfs-control\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r3, 0x2, r3) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000000)={0x8}) 09:15:39 executing program 5: sched_rr_get_interval(0x0, &(0x7f0000000000)) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x89fa, &(0x7f0000003dc0)={'ip6gre0\x00', 0x0}) clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) recvmmsg(r0, &(0x7f00000002c0)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)=""/57, 0x39}, {&(0x7f0000000080)=""/81, 0x51}, {&(0x7f00000001c0)=""/163, 0xa3}], 0x3, &(0x7f0000000280)=""/35, 0x23}, 0x1}], 0x1, 0x2040, &(0x7f0000000340)={r1, r2+10000000}) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000180)={0x80000001, 0x13}) 09:15:39 executing program 0: openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x2, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000180)={0x0, 0x13, 0x1}) 09:15:39 executing program 3: r0 = perf_event_open$cgroup(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = epoll_create(0x7) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000001c0)={0x20000005}) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000580)='/dev/btrfs-control\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, r2) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r0, &(0x7f0000000080)={0x80000000}) epoll_wait(r1, &(0x7f0000000100)=[{}], 0x1, 0x0) 09:15:39 executing program 4: openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000580)='/dev/btrfs-control\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000180)={0x7c1}) syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x7, 0x8000) syz_genetlink_get_family_id$team(&(0x7f0000000000)='team\x00', r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) socketpair(0x1d, 0x4, 0x80, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) accept$packet(r2, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000280)=0x14) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r1, 0x89fa, &(0x7f0000003dc0)={'ip6gre0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040)='l2tp\x00', 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r4, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_PEER_COOKIE={0xc}, @L2TP_ATTR_CONN_ID={0x8}]}, 0x28}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_GET(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r4, 0x8, 0x70bd26, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e22}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) 09:15:39 executing program 0: openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x2, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000180)={0x80000001, 0x0, 0x1}) 09:15:39 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) accept$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000040)=0x14) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000180)={0x80000001, 0x13}) 09:15:39 executing program 1: epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x2, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x10000, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00032abd7000fcdbdf25010000000c001000010000000000000014001f00ff01000000000000000007000000000108000b0002000006"], 0x3c}, 0x1, 0x0, 0x0, 0x4004}, 0x20000001) bind$l2tp6(0xffffffffffffffff, &(0x7f0000000300)={0xa, 0x0, 0xc6d, @loopback, 0x6, 0x2}, 0x20) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f0000000080)={0x50000010}) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r1, &(0x7f0000000040)={0x40000008}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000180)={0x80000001, 0x13}) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r2, 0x89fa, &(0x7f0000003dc0)={'ip6gre0\x00', 0x0}) getsockname(r2, &(0x7f00000000c0)=@pptp, &(0x7f00000001c0)=0x80) 09:15:39 executing program 0: openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x2, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000180)={0x80000001, 0x0, 0x1}) 09:15:39 executing program 3: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000580)='/dev/btrfs-control\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000240)={@my=0x0, 0x2}) r1 = perf_event_open$cgroup(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r2 = epoll_create(0x7) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000001c0)={0x20000005}) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='svcrdma_post_rw\x00'}, 0x10) ioctl$PERF_EVENT_IOC_QUERY_BPF(r3, 0xc008240a, &(0x7f0000000200)={0x5, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0]}) getsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, &(0x7f0000000080), &(0x7f00000000c0)=0x4) epoll_wait(r2, &(0x7f0000000100)=[{}], 0x1, 0x0) 09:15:39 executing program 4: clock_getres(0x3, &(0x7f0000000040)) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x89fa, &(0x7f0000003dc0)={'ip6gre0\x00', 0x0}) clock_gettime(0x0, &(0x7f0000001500)={0x0, 0x0}) recvmmsg(r0, &(0x7f00000014c0)=[{{&(0x7f0000000080)=@vsock={0x28, 0x0, 0x0, @my}, 0x80, &(0x7f0000001440)=[{&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f00000011c0)=""/102, 0x66}, {&(0x7f0000001240)=""/185, 0xb9}, {&(0x7f0000001300)=""/98, 0x62}, {&(0x7f0000001380)=""/137, 0x89}], 0x5, &(0x7f0000000100)=""/5, 0x5}, 0x5}], 0x1, 0x42, &(0x7f0000001540)={r1, r2+10000000}) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x101000, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000180)={0x80000001, 0x13}) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000000)={0x0, 0x20}) 09:15:39 executing program 0: openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x2, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000180)={0x80000001, 0x0, 0x1}) [ 2426.647458] syz-executor.1: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 2426.647487] syz-executor.4: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2426.683273] (null) [ 2426.700108] syz-executor.4: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2426.716673] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 2426.717793] syz-executor.4 cpuset= [ 2426.727506] CPU: 0 PID: 15513 Comm: syz-executor.1 Not tainted 4.14.229-syzkaller #0 [ 2426.729711] / [ 2426.731055] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2426.749961] Call Trace: [ 2426.752549] dump_stack+0x1b2/0x281 [ 2426.756179] warn_alloc.cold+0x96/0x1cc [ 2426.760155] ? zone_watermark_ok_safe+0x220/0x220 [ 2426.765013] __alloc_pages_nodemask+0x2127/0x2720 [ 2426.769859] ? lock_acquire+0x170/0x3f0 [ 2426.772180] mems_allowed=0-1 [ 2426.774527] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2426.774547] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2426.787923] ? __mutex_unlock_slowpath+0x75/0x770 [ 2426.792771] alloc_pages_current+0x155/0x260 [ 2426.797182] ion_page_pool_alloc+0x118/0x1b0 [ 2426.801724] ion_system_heap_allocate+0x133/0x8c0 [ 2426.806571] ? ion_alloc+0x187/0x810 [ 2426.810282] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2426.815727] ? ion_system_contig_heap_create+0x130/0x130 [ 2426.821175] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2426.826191] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2426.831026] ion_alloc+0x204/0x810 [ 2426.834565] ? ion_dma_buf_release+0x40/0x40 [ 2426.838972] ? __might_fault+0x177/0x1b0 [ 2426.843023] ion_ioctl+0xea/0x1f0 [ 2426.846463] ? ion_query_heaps+0x360/0x360 [ 2426.850695] ? SyS_epoll_ctl+0x1e0/0x2780 [ 2426.854836] ? ion_query_heaps+0x360/0x360 [ 2426.859063] do_vfs_ioctl+0x75a/0xff0 [ 2426.862859] ? ioctl_preallocate+0x1a0/0x1a0 [ 2426.867259] ? lock_downgrade+0x740/0x740 [ 2426.871395] ? __fget+0x225/0x360 [ 2426.874835] ? do_vfs_ioctl+0xff0/0xff0 [ 2426.878801] ? security_file_ioctl+0x83/0xb0 [ 2426.883204] SyS_ioctl+0x7f/0xb0 [ 2426.886561] ? do_vfs_ioctl+0xff0/0xff0 [ 2426.890542] do_syscall_64+0x1d5/0x640 [ 2426.894420] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2426.899593] RIP: 0033:0x466459 [ 2426.902773] RSP: 002b:00007f10b678e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2426.910477] RAX: ffffffffffffffda RBX: 000000000056c008 RCX: 0000000000466459 [ 2426.917744] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2426.925002] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2426.932272] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c008 [ 2426.939544] R13: 00007ffd58825dcf R14: 00007f10b678e300 R15: 0000000000022000 [ 2426.950260] CPU: 1 PID: 15517 Comm: syz-executor.4 Not tainted 4.14.229-syzkaller #0 [ 2426.958161] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2426.965551] syz-executor.4 cpuset= [ 2426.967503] Call Trace: [ 2426.967511] / [ 2426.971077] dump_stack+0x1b2/0x281 [ 2426.978958] warn_alloc.cold+0x96/0x1cc [ 2426.982931] ? zone_watermark_ok_safe+0x220/0x220 [ 2426.983725] mems_allowed=0-1 [ 2426.987775] __alloc_pages_nodemask+0x2127/0x2720 [ 2426.995691] ? lock_acquire+0x170/0x3f0 [ 2426.999655] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2427.004491] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2427.010111] ? __mutex_unlock_slowpath+0x75/0x770 [ 2427.014944] alloc_pages_current+0x155/0x260 [ 2427.019341] ion_page_pool_alloc+0x118/0x1b0 [ 2427.023728] ion_system_heap_allocate+0x133/0x8c0 [ 2427.028554] ? ion_alloc+0x187/0x810 [ 2427.032251] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2427.037692] ? ion_system_contig_heap_create+0x130/0x130 [ 2427.043119] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2427.048119] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2427.052957] ion_alloc+0x204/0x810 [ 2427.056498] ? ion_dma_buf_release+0x40/0x40 [ 2427.060888] ? __might_fault+0x177/0x1b0 [ 2427.064930] ion_ioctl+0xea/0x1f0 [ 2427.068362] ? ion_query_heaps+0x360/0x360 [ 2427.072575] ? ion_query_heaps+0x360/0x360 [ 2427.076801] do_vfs_ioctl+0x75a/0xff0 [ 2427.080581] ? ioctl_preallocate+0x1a0/0x1a0 [ 2427.087309] ? lock_downgrade+0x740/0x740 [ 2427.091455] ? __fget+0x225/0x360 [ 2427.094892] ? do_vfs_ioctl+0xff0/0xff0 [ 2427.098845] ? security_file_ioctl+0x83/0xb0 [ 2427.103230] SyS_ioctl+0x7f/0xb0 [ 2427.106579] ? do_vfs_ioctl+0xff0/0xff0 [ 2427.110532] do_syscall_64+0x1d5/0x640 [ 2427.114401] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2427.119567] RIP: 0033:0x466459 [ 2427.122732] RSP: 002b:00007f46becae188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2427.130418] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 2427.137664] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000004 [ 2427.144910] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2427.152156] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2427.159402] R13: 00007ffe96c50ebf R14: 00007f46becae300 R15: 0000000000022000 [ 2427.166664] CPU: 0 PID: 15519 Comm: syz-executor.4 Not tainted 4.14.229-syzkaller #0 [ 2427.174559] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2427.183916] Call Trace: [ 2427.186517] dump_stack+0x1b2/0x281 [ 2427.190165] warn_alloc.cold+0x96/0x1cc [ 2427.194140] ? zone_watermark_ok_safe+0x220/0x220 [ 2427.198997] __alloc_pages_nodemask+0x2127/0x2720 [ 2427.202334] syz-executor.1: [ 2427.203842] ? lock_acquire+0x170/0x3f0 [ 2427.203861] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2427.208473] page allocation failure: order:4 [ 2427.210825] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2427.210837] ? __mutex_unlock_slowpath+0x75/0x770 [ 2427.210852] alloc_pages_current+0x155/0x260 [ 2427.218408] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 2427.220180] ion_page_pool_alloc+0x118/0x1b0 [ 2427.220191] ion_system_heap_allocate+0x133/0x8c0 [ 2427.220202] ? ion_alloc+0x187/0x810 [ 2427.225767] (null) [ 2427.230451] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2427.230462] ? ion_system_contig_heap_create+0x130/0x130 [ 2427.230472] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2427.230483] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2427.230493] ion_alloc+0x204/0x810 [ 2427.230506] ? ion_dma_buf_release+0x40/0x40 [ 2427.230522] ? __might_fault+0x177/0x1b0 [ 2427.235272] syz-executor.1 cpuset= [ 2427.241984] ion_ioctl+0xea/0x1f0 [ 2427.241994] ? ion_query_heaps+0x360/0x360 [ 2427.242007] ? ion_query_heaps+0x360/0x360 [ 2427.242017] do_vfs_ioctl+0x75a/0xff0 [ 2427.242029] ? ioctl_preallocate+0x1a0/0x1a0 [ 2427.242038] ? lock_downgrade+0x740/0x740 [ 2427.242051] ? __fget+0x225/0x360 [ 2427.242059] ? do_vfs_ioctl+0xff0/0xff0 [ 2427.242073] ? security_file_ioctl+0x83/0xb0 [ 2427.246770] / [ 2427.251278] SyS_ioctl+0x7f/0xb0 [ 2427.255218] mems_allowed=0-1 [ 2427.257095] ? do_vfs_ioctl+0xff0/0xff0 [ 2427.257109] do_syscall_64+0x1d5/0x640 [ 2427.257126] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2427.322107] warn_alloc_show_mem: 1 callbacks suppressed [ 2427.322110] Mem-Info: [ 2427.325592] RIP: 0033:0x466459 [ 2427.325598] RSP: 002b:00007f46bec8d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2427.325608] RAX: ffffffffffffffda RBX: 000000000056c008 RCX: 0000000000466459 [ 2427.325615] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000004 [ 2427.337725] active_anon:15093 inactive_anon:40537 isolated_anon:0 [ 2427.337725] active_file:1982 inactive_file:5403 isolated_file:13 [ 2427.337725] unevictable:0 dirty:178 writeback:0 unstable:0 [ 2427.337725] slab_reclaimable:12527 slab_unreclaimable:120094 [ 2427.337725] mapped:57736 shmem:41747 pagetables:793 bounce:0 [ 2427.337725] free:263290 free_pcp:340 free_cma:0 [ 2427.338109] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2427.338115] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c008 [ 2427.338120] R13: 00007ffe96c50ebf R14: 00007f46bec8d300 R15: 0000000000022000 [ 2427.434794] CPU: 0 PID: 15507 Comm: syz-executor.1 Not tainted 4.14.229-syzkaller #0 [ 2427.445847] Node 0 active_anon:59460kB inactive_anon:101564kB active_file:8408kB inactive_file:20892kB unevictable:0kB isolated(anon):0kB isolated(file):52kB mapped:196128kB dirty:700kB writeback:0kB shmem:105992kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2427.448523] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2427.448527] Call Trace: [ 2427.448545] dump_stack+0x1b2/0x281 [ 2427.448558] warn_alloc.cold+0x96/0x1cc [ 2427.448570] ? zone_watermark_ok_safe+0x220/0x220 [ 2427.448591] __alloc_pages_nodemask+0x2127/0x2720 [ 2427.506342] ? __schedule+0x893/0x1de0 [ 2427.508174] Node 1 active_anon:912kB inactive_anon:60584kB active_file:20kB inactive_file:32kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:34816kB dirty:12kB writeback:0kB shmem:60996kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2427.510226] ? lock_acquire+0x170/0x3f0 [ 2427.541326] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2427.546172] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2427.551708] ? __mutex_unlock_slowpath+0x75/0x770 [ 2427.556723] alloc_pages_current+0x155/0x260 [ 2427.558474] syz-executor.5: page allocation failure: order:4 [ 2427.561126] ion_page_pool_alloc+0x118/0x1b0 [ 2427.561136] ion_system_heap_allocate+0x133/0x8c0 [ 2427.566913] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 2427.571297] ? ion_alloc+0x187/0x810 [ 2427.571309] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2427.571318] ? ion_system_contig_heap_create+0x130/0x130 [ 2427.571328] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2427.571339] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2427.571348] ion_alloc+0x204/0x810 [ 2427.571361] ? ion_dma_buf_release+0x40/0x40 [ 2427.571373] ? __might_fault+0x177/0x1b0 [ 2427.588142] Node 0 [ 2427.592427] ion_ioctl+0xea/0x1f0 [ 2427.597888] DMA free:11076kB min:204kB low:252kB high:300kB active_anon:8kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2427.602874] ? ion_query_heaps+0x360/0x360 [ 2427.602886] ? SyS_epoll_ctl+0x1e0/0x2780 [ 2427.602895] ? ion_query_heaps+0x360/0x360 [ 2427.602905] do_vfs_ioctl+0x75a/0xff0 [ 2427.602917] ? ioctl_preallocate+0x1a0/0x1a0 [ 2427.618372] (null) [ 2427.619700] ? lock_downgrade+0x740/0x740 [ 2427.621910] syz-executor.5 cpuset= [ 2427.625344] ? __fget+0x225/0x360 [ 2427.678143] lowmem_reserve[]: [ 2427.679478] ? do_vfs_ioctl+0xff0/0xff0 [ 2427.682988] 0 [ 2427.686426] ? security_file_ioctl+0x83/0xb0 [ 2427.699643] SyS_ioctl+0x7f/0xb0 [ 2427.703005] ? do_vfs_ioctl+0xff0/0xff0 [ 2427.706975] do_syscall_64+0x1d5/0x640 [ 2427.710865] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2427.716057] RIP: 0033:0x466459 [ 2427.718125] 2717 [ 2427.719235] RSP: 002b:00007f10b67af188 EFLAGS: 00000246 [ 2427.719241] 2718 [ 2427.721279] ORIG_RAX: 0000000000000010 [ 2427.726622] 2718 [ 2427.728659] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 2427.728665] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2427.728670] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2427.728674] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2427.728679] R13: 00007ffd58825dcf R14: 00007f10b67af300 R15: 0000000000022000 [ 2427.778138] / mems_allowed=0-1 [ 2427.781377] CPU: 1 PID: 15503 Comm: syz-executor.5 Not tainted 4.14.229-syzkaller #0 [ 2427.789248] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2427.798716] Call Trace: [ 2427.801309] dump_stack+0x1b2/0x281 [ 2427.804938] warn_alloc.cold+0x96/0x1cc [ 2427.808918] ? zone_watermark_ok_safe+0x220/0x220 [ 2427.813773] __alloc_pages_nodemask+0x2127/0x2720 [ 2427.818627] ? lock_acquire+0x170/0x3f0 [ 2427.822613] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2427.827461] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2427.832913] ? __mutex_unlock_slowpath+0x75/0x770 [ 2427.837760] alloc_pages_current+0x155/0x260 [ 2427.842169] ion_page_pool_alloc+0x118/0x1b0 [ 2427.846576] ion_system_heap_allocate+0x133/0x8c0 [ 2427.851415] ? ion_alloc+0x187/0x810 [ 2427.855125] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2427.860571] ? ion_system_contig_heap_create+0x130/0x130 [ 2427.866026] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2427.871041] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2427.875880] ion_alloc+0x204/0x810 [ 2427.879419] ? ion_dma_buf_release+0x40/0x40 [ 2427.883826] ? __might_fault+0x177/0x1b0 [ 2427.887887] ion_ioctl+0xea/0x1f0 [ 2427.891334] ? ion_query_heaps+0x360/0x360 [ 2427.895565] ? sockfd_lookup_light+0xb2/0x160 [ 2427.900052] ? ion_query_heaps+0x360/0x360 [ 2427.904280] do_vfs_ioctl+0x75a/0xff0 [ 2427.908076] ? ioctl_preallocate+0x1a0/0x1a0 [ 2427.912477] ? lock_downgrade+0x740/0x740 [ 2427.916623] ? __fget+0x225/0x360 [ 2427.920078] ? do_vfs_ioctl+0xff0/0xff0 [ 2427.924045] ? security_file_ioctl+0x83/0xb0 [ 2427.928453] SyS_ioctl+0x7f/0xb0 [ 2427.931830] ? do_vfs_ioctl+0xff0/0xff0 [ 2427.935799] do_syscall_64+0x1d5/0x640 [ 2427.939684] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2427.944865] RIP: 0033:0x466459 [ 2427.948044] RSP: 002b:00007f4d0bcd5188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2427.955743] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 2427.963006] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2427.970266] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2427.977622] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2427.984882] R13: 00007ffe1117a98f R14: 00007f4d0bcd5300 R15: 0000000000022000 [ 2428.083577] IPVS: ftp: loaded support on port[0] = 21 [ 2428.108480] 2718 [ 2428.110583] Node 0 DMA32 free:382728kB min:36200kB low:45248kB high:54296kB active_anon:59476kB inactive_anon:101564kB active_file:9552kB inactive_file:19992kB unevictable:0kB writepending:752kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:7488kB pagetables:3044kB bounce:0kB free_pcp:640kB local_pcp:404kB free_cma:0kB [ 2428.154906] lowmem_reserve[]: 0 0 0 0 0 [ 2428.178361] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2428.228204] lowmem_reserve[]: 0 0 0 0 0 [ 2428.232250] Node 1 Normal free:172800kB min:53696kB low:67120kB high:80544kB active_anon:912kB inactive_anon:60584kB active_file:20kB inactive_file:32kB unevictable:0kB writepending:12kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:256kB pagetables:188kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 2428.282315] lowmem_reserve[]: 0 0 0 0 0 [ 2428.288447] Node 0 DMA: 19*4kB (UME) 34*8kB (UME) 29*16kB (UME) 27*32kB (UME) 11*64kB (ME) 4*128kB (ME) 2*256kB (UM) 3*512kB (UME) 2*1024kB (ME) 2*2048kB (UM) 0*4096kB = 11084kB [ 2428.328095] Node 0 DMA32: 1*4kB (M) 5*8kB (UME) 7*16kB (UME) 6242*32kB (UME) 4*64kB (U) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 200156kB [ 2428.358069] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2428.378423] Node 1 Normal: 3262*4kB (UME) 3179*8kB (UME) 3035*16kB (UME) 2680*32kB (U) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 172800kB [ 2428.405659] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2428.428082] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2428.436680] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2428.447594] warn_alloc_show_mem: 3 callbacks suppressed [ 2428.447597] Mem-Info: [ 2428.465634] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2428.474536] active_anon:15124 inactive_anon:40537 isolated_anon:0 [ 2428.474536] active_file:2393 inactive_file:5006 isolated_file:0 [ 2428.474536] unevictable:0 dirty:191 writeback:0 unstable:0 [ 2428.474536] slab_reclaimable:12527 slab_unreclaimable:121055 [ 2428.474536] mapped:57754 shmem:41747 pagetables:808 bounce:0 [ 2428.474536] free:65230 free_pcp:102 free_cma:0 [ 2428.519889] 49044 total pagecache pages [ 2428.526560] 0 pages in swap cache [ 2428.537045] Swap cache stats: add 0, delete 0, find 0/0 [ 2428.549127] Free swap = 0kB [ 2428.558641] Total swap = 0kB [ 2428.561702] 2097051 pages RAM [ 2428.564795] 0 pages HighMem/MovableOnly [ 2428.578385] 363848 pages reserved [ 2428.582080] 0 pages cma reserved [ 2428.588847] Node 0 active_anon:59584kB inactive_anon:101564kB active_file:9552kB inactive_file:19992kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:196200kB dirty:752kB writeback:0kB shmem:105992kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2428.610567] chnl_net:caif_netlink_parms(): no params data found [ 2428.712405] Node 1 active_anon:912kB inactive_anon:60584kB active_file:20kB inactive_file:32kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:34816kB dirty:12kB writeback:0kB shmem:60996kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2428.865207] Node 0 DMA free:11056kB min:204kB low:252kB high:300kB active_anon:8kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2428.904509] systemd-journal invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=0 [ 2428.926262] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2428.931418] Node 0 DMA32 free:35716kB min:36200kB low:45248kB high:54296kB active_anon:59692kB inactive_anon:101572kB active_file:404kB inactive_file:124kB unevictable:0kB writepending:12kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:7520kB pagetables:2984kB bounce:0kB free_pcp:304kB local_pcp:52kB free_cma:0kB [ 2428.945200] systemd-journal cpuset= [ 2428.960923] lowmem_reserve[]: 0 0 0 0 0 [ 2428.968725] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2428.989519] / mems_allowed=0-1 [ 2428.997078] lowmem_reserve[]: 0 0 0 0 [ 2428.997474] CPU: 0 PID: 15179 Comm: systemd-journal Not tainted 4.14.229-syzkaller #0 [ 2428.997501] 0 [ 2429.001260] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2429.001263] Call Trace: [ 2429.001280] dump_stack+0x1b2/0x281 [ 2429.001292] dump_header+0x178/0x82f [ 2429.001304] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2429.020370] ? ___ratelimit+0x2cd/0x530 [ 2429.020386] oom_kill_process.cold+0x10/0xa40 [ 2429.020403] out_of_memory+0xe3e/0x1190 [ 2429.020415] ? oom_killer_disable+0x1c0/0x1c0 [ 2429.020425] ? mutex_trylock+0x152/0x1a0 [ 2429.022990] Node 1 [ 2429.026597] __alloc_pages_nodemask+0x23e1/0x2720 [ 2429.035197] Normal free:53600kB min:53696kB low:67120kB high:80544kB active_anon:908kB inactive_anon:60584kB active_file:32kB inactive_file:36kB unevictable:0kB writepending:4kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:256kB pagetables:188kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2429.035428] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2429.039692] lowmem_reserve[]: [ 2429.043844] ? __put_seccomp_filter+0x90/0x90 [ 2429.047788] 0 [ 2429.052397] ? __seccomp_filter+0xbd/0xd60 [ 2429.052407] ? cache_grow_begin+0x3f/0x700 [ 2429.052416] cache_grow_begin+0x91/0x700 [ 2429.052429] fallback_alloc+0x207/0x2c0 [ 2429.052441] kmem_cache_alloc+0x1e5/0x3c0 [ 2429.052453] getname_flags+0xc8/0x550 [ 2429.052473] SyS_mkdirat+0x83/0x270 [ 2429.069865] 0 [ 2429.091392] ? SyS_mknod+0x30/0x30 [ 2429.091402] ? do_syscall_64+0x4c/0x640 [ 2429.091409] ? SyS_mkdirat+0x270/0x270 [ 2429.091417] do_syscall_64+0x1d5/0x640 [ 2429.091429] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2429.091438] RIP: 0033:0x7f3a381a7687 [ 2429.091442] RSP: 002b:00007ffcbb0e2fb8 EFLAGS: 00000293 ORIG_RAX: 0000000000000053 [ 2429.091451] RAX: ffffffffffffffda RBX: 00007ffcbb0e6020 RCX: 00007f3a381a7687 [ 2429.091455] RDX: 0000000000000000 RSI: 00000000000001ed RDI: 00005578088b0860 [ 2429.091459] RBP: 00007ffcbb0e2ff0 R08: 000055780822b3e5 R09: 0000000000000018 [ 2429.091463] R10: 0000000000000069 R11: 0000000000000293 R12: 0000000000000000 [ 2429.091472] R13: 0000000000000001 R14: 00005578088b0860 R15: 00007ffcbb0e3630 [ 2429.102789] 0 0 0 [ 2429.210489] Node 0 DMA: 15*4kB (UME) 30*8kB (UME) 29*16kB (UME) 27*32kB (UME) 11*64kB (ME) 4*128kB (ME) 2*256kB (UM) 3*512kB (UME) 2*1024kB (ME) 2*2048kB (UM) 0*4096kB = 11036kB [ 2429.231298] Node 0 DMA32: 421*4kB (UMEH) 167*8kB (M) 64*16kB (UME) 872*32kB (UME) 25*64kB (UM) 7*128kB (UM) 6*256kB (M) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 35980kB [ 2429.246299] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2429.269715] Node 1 Normal: 12*4kB (UM) 15*8kB (UM) 9*16kB (UM) 1667*32kB (U) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 53656kB [ 2429.291776] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2429.304847] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2429.317722] Mem-Info: [ 2429.317783] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2429.335458] active_anon:15152 inactive_anon:40539 isolated_anon:0 [ 2429.335458] active_file:24 inactive_file:15 isolated_file:0 [ 2429.335458] unevictable:0 dirty:4 writeback:0 unstable:0 [ 2429.335458] slab_reclaimable:12527 slab_unreclaimable:120707 [ 2429.335458] mapped:52864 shmem:41751 pagetables:793 bounce:0 [ 2429.335458] free:25065 free_pcp:0 free_cma:0 [ 2429.337128] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2429.384677] 41802 total pagecache pages [ 2429.388704] 0 pages in swap cache [ 2429.392146] Swap cache stats: add 0, delete 0, find 0/0 [ 2429.395332] Node 0 active_anon:59700kB inactive_anon:101572kB active_file:64kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:176640kB dirty:12kB writeback:0kB shmem:106008kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2429.397491] Free swap = 0kB [ 2429.397497] Total swap = 0kB [ 2429.439739] 2097051 pages RAM [ 2429.442849] 0 pages HighMem/MovableOnly [ 2429.446807] 363848 pages reserved [ 2429.456610] 0 pages cma reserved [ 2429.466943] Node 1 active_anon:908kB inactive_anon:60584kB active_file:32kB inactive_file:36kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:34816kB dirty:4kB writeback:0kB shmem:60996kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2429.502603] Node 0 DMA free:11056kB min:204kB low:252kB high:300kB active_anon:8kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2429.537444] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2429.542897] Node 0 DMA32 free:35604kB min:36200kB low:45248kB high:54296kB active_anon:59692kB inactive_anon:101572kB active_file:108kB inactive_file:0kB unevictable:0kB writepending:12kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:7520kB pagetables:2984kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2429.580255] lowmem_reserve[]: 0 0 0 0 0 [ 2429.584264] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2429.617848] lowmem_reserve[]: 0 0 0 0 0 [ 2429.636961] Node 1 Normal free:53600kB min:53696kB low:67120kB high:80544kB active_anon:908kB inactive_anon:60584kB active_file:32kB inactive_file:36kB unevictable:0kB writepending:4kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:256kB pagetables:188kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2429.682508] lowmem_reserve[]: 0 0 0 0 0 [ 2429.686530] Node 0 DMA: 15*4kB (UME) 30*8kB (UME) 29*16kB (UME) 27*32kB (UME) 11*64kB (ME) 4*128kB (ME) 2*256kB (UM) 3*512kB (UME) 2*1024kB (ME) 2*2048kB (UM) 0*4096kB = 11036kB [ 2429.713671] Node 0 DMA32: 421*4kB (UMEH) 167*8kB (M) 64*16kB (UME) 872*32kB (UME) 25*64kB (UM) 7*128kB (UM) 6*256kB (M) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 35980kB [ 2429.738939] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2429.757801] Node 1 Normal: 12*4kB (UM) 15*8kB (UM) 9*16kB (UM) 1667*32kB (U) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 53656kB [ 2429.781945] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2429.797138] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2429.816928] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2429.825888] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2429.845111] 41802 total pagecache pages [ 2429.851316] 0 pages in swap cache [ 2429.854763] Swap cache stats: add 0, delete 0, find 0/0 [ 2429.870860] Free swap = 0kB [ 2429.873885] Total swap = 0kB [ 2429.876892] 2097051 pages RAM [ 2429.886065] 0 pages HighMem/MovableOnly [ 2429.894401] 363848 pages reserved [ 2429.897845] 0 pages cma reserved [ 2429.907608] Out of memory (oom_kill_allocating_task): Kill process 15179 (systemd-journal) score 0 or sacrifice child [ 2429.929251] Killed process 15179 (systemd-journal) total-vm:46096kB, anon-rss:472kB, file-rss:0kB, shmem-rss:2220kB [ 2429.951594] oom_reaper: reaped process 15179 (systemd-journal), now anon-rss:0kB, file-rss:0kB, shmem-rss:2220kB [ 2429.980181] kworker/u4:0 invoked oom-killer: gfp_mask=0x15080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null), order=3, oom_score_adj=0 [ 2429.997233] kworker/u4:0 cpuset=/ mems_allowed=0-1 [ 2430.002274] CPU: 0 PID: 19132 Comm: kworker/u4:0 Not tainted 4.14.229-syzkaller #0 [ 2430.009983] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2430.019340] Workqueue: events_unbound call_usermodehelper_exec_work [ 2430.025736] Call Trace: [ 2430.028323] dump_stack+0x1b2/0x281 [ 2430.031951] dump_header+0x178/0x82f [ 2430.035654] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2430.040752] ? ___ratelimit+0x2cd/0x530 [ 2430.044723] oom_kill_process.cold+0x10/0xa40 [ 2430.049216] ? lock_downgrade+0x740/0x740 [ 2430.053362] out_of_memory+0x2dc/0x1190 [ 2430.057337] ? oom_killer_disable+0x1c0/0x1c0 [ 2430.061822] ? mutex_trylock+0x152/0x1a0 [ 2430.065878] __alloc_pages_nodemask+0x23e1/0x2720 [ 2430.070718] ? mark_held_locks+0xa6/0xf0 [ 2430.074768] ? fprop_reflect_period_percpu.isra.0+0x1c/0x2b0 [ 2430.080569] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2430.085405] ? fs_reclaim_release+0xd0/0x110 [ 2430.089818] ? kmem_cache_alloc_node+0x38b/0x410 [ 2430.094570] copy_process.part.0+0x265/0x71c0 [ 2430.098134] Bluetooth: hci3 command 0x0409 tx timeout [ 2430.099054] ? __lock_acquire+0x5fc/0x3f20 [ 2430.108454] ? debug_object_activate+0x292/0x490 [ 2430.113201] ? trace_hardirqs_on+0x10/0x10 [ 2430.117424] ? static_obj+0x50/0x50 [ 2430.121044] ? call_usermodehelper_exec_work+0x2a0/0x2a0 [ 2430.126485] ? __cleanup_sighand+0x40/0x40 [ 2430.130713] ? call_usermodehelper_exec_work+0x2a0/0x2a0 [ 2430.136154] _do_fork+0x184/0xc80 [ 2430.139603] ? fork_idle+0x270/0x270 [ 2430.143317] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2430.148416] ? process_one_work+0x6c4/0x14a0 [ 2430.152813] ? call_usermodehelper_exec_work+0x2a0/0x2a0 [ 2430.158253] kernel_thread+0x2f/0x40 [ 2430.161963] call_usermodehelper_exec_work+0x1ac/0x2a0 [ 2430.167234] ? call_usermodehelper+0x80/0x80 [ 2430.171636] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2430.177077] process_one_work+0x793/0x14a0 [ 2430.181310] ? work_busy+0x320/0x320 [ 2430.185011] ? worker_thread+0x158/0xff0 [ 2430.189068] ? _raw_spin_unlock_irq+0x24/0x80 [ 2430.193556] worker_thread+0x5cc/0xff0 [ 2430.197440] ? rescuer_thread+0xc80/0xc80 [ 2430.201580] kthread+0x30d/0x420 [ 2430.204937] ? kthread_create_on_node+0xd0/0xd0 [ 2430.209597] ret_from_fork+0x24/0x30 [ 2430.220730] Mem-Info: [ 2430.223166] active_anon:15052 inactive_anon:40539 isolated_anon:0 [ 2430.223166] active_file:5 inactive_file:10 isolated_file:0 [ 2430.223166] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2430.223166] slab_reclaimable:12527 slab_unreclaimable:120702 [ 2430.223166] mapped:52227 shmem:41751 pagetables:793 bounce:0 [ 2430.223166] free:25168 free_pcp:149 free_cma:0 [ 2430.266873] Node 0 active_anon:59300kB inactive_anon:101572kB active_file:116kB inactive_file:32kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:174092kB dirty:0kB writeback:0kB shmem:106008kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2430.307187] Node 1 active_anon:908kB inactive_anon:60584kB active_file:4kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:34816kB dirty:0kB writeback:0kB shmem:60996kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2430.347414] Node 0 DMA free:11036kB min:204kB low:252kB high:300kB active_anon:8kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2430.386405] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2430.395535] Node 0 DMA32 free:35980kB min:36200kB low:45248kB high:54296kB active_anon:59292kB inactive_anon:101572kB active_file:116kB inactive_file:20kB unevictable:0kB writepending:0kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:7488kB pagetables:2984kB bounce:0kB free_pcp:596kB local_pcp:4kB free_cma:0kB [ 2430.441889] lowmem_reserve[]: 0 0 0 0 0 [ 2430.445910] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2430.484564] lowmem_reserve[]: 0 0 0 0 0 [ 2430.494600] Node 1 Normal free:53656kB min:53696kB low:67120kB high:80544kB active_anon:908kB inactive_anon:60584kB active_file:4kB inactive_file:8kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:256kB pagetables:188kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2430.535464] lowmem_reserve[]: 0 0 0 0 0 [ 2430.543766] Node 0 DMA: 15*4kB (UME) 30*8kB (UME) 29*16kB (UME) 27*32kB (UME) 11*64kB (ME) 4*128kB (ME) 2*256kB (UM) 3*512kB (UME) 2*1024kB (ME) 2*2048kB (UM) 0*4096kB = 11036kB [ 2430.574162] Node 0 DMA32: 421*4kB (UMEH) 168*8kB (UM) 63*16kB (ME) 873*32kB (UME) 25*64kB (UM) 7*128kB (UM) 6*256kB (M) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36004kB [ 2430.616443] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2430.641738] Node 1 Normal: 12*4kB (UM) 15*8kB (UM) 9*16kB (UM) 1667*32kB (U) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 53656kB [ 2430.672301] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2430.695357] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2430.720886] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2430.745460] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2430.770763] 41781 total pagecache pages [ 2430.774757] 0 pages in swap cache [ 2430.792628] Swap cache stats: add 0, delete 0, find 0/0 [ 2430.806951] Free swap = 0kB [ 2430.815340] Total swap = 0kB [ 2430.826621] 2097051 pages RAM [ 2430.833760] 0 pages HighMem/MovableOnly [ 2430.837732] 363848 pages reserved [ 2430.843780] 0 pages cma reserved [ 2430.847143] Out of memory: Kill process 15505 (syz-executor.1) score 1004 or sacrifice child [ 2430.856963] Killed process 15507 (syz-executor.1) total-vm:93648kB, anon-rss:164kB, file-rss:34820kB, shmem-rss:0kB [ 2430.896133] oom_reaper: reaped process 15507 (syz-executor.1), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 2430.948351] syz-executor.1 invoked oom-killer: gfp_mask=0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null), order=0, oom_score_adj=1000 [ 2431.013842] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 2431.019040] CPU: 1 PID: 15513 Comm: syz-executor.1 Not tainted 4.14.229-syzkaller #0 [ 2431.026910] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2431.036250] Call Trace: [ 2431.038840] dump_stack+0x1b2/0x281 [ 2431.042460] dump_header+0x178/0x82f [ 2431.046169] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2431.051351] ? ___ratelimit+0x2cd/0x530 [ 2431.055319] oom_kill_process.cold+0x10/0xa40 [ 2431.059821] out_of_memory+0xe3e/0x1190 [ 2431.063791] ? oom_killer_disable+0x1c0/0x1c0 [ 2431.068286] ? mutex_trylock+0x152/0x1a0 [ 2431.072342] __alloc_pages_nodemask+0x23e1/0x2720 [ 2431.077182] ? lock_acquire+0x170/0x3f0 [ 2431.081155] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2431.085987] ? ion_page_pool_alloc+0x9e/0x1b0 [ 2431.090480] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2431.095929] alloc_pages_current+0x155/0x260 [ 2431.100330] ion_page_pool_alloc+0x118/0x1b0 [ 2431.104732] ion_system_heap_allocate+0x133/0x8c0 [ 2431.109566] ? ion_alloc+0x187/0x810 [ 2431.113272] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2431.118715] ? ion_system_contig_heap_create+0x130/0x130 [ 2431.124156] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2431.129170] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2431.134005] ion_alloc+0x204/0x810 [ 2431.137540] ? ion_dma_buf_release+0x40/0x40 [ 2431.141948] ? __might_fault+0x177/0x1b0 [ 2431.146003] ion_ioctl+0xea/0x1f0 [ 2431.149445] ? ion_query_heaps+0x360/0x360 [ 2431.153672] ? SyS_epoll_ctl+0x1e0/0x2780 [ 2431.157814] ? ion_query_heaps+0x360/0x360 [ 2431.162038] do_vfs_ioctl+0x75a/0xff0 [ 2431.165832] ? ioctl_preallocate+0x1a0/0x1a0 [ 2431.170229] ? lock_downgrade+0x740/0x740 [ 2431.174371] ? __fget+0x225/0x360 [ 2431.177823] ? do_vfs_ioctl+0xff0/0xff0 [ 2431.181788] ? security_file_ioctl+0x83/0xb0 [ 2431.186192] SyS_ioctl+0x7f/0xb0 [ 2431.189551] ? do_vfs_ioctl+0xff0/0xff0 [ 2431.193517] do_syscall_64+0x1d5/0x640 [ 2431.197402] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2431.202603] RIP: 0033:0x466459 [ 2431.205779] RSP: 002b:00007f10b678e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2431.213480] RAX: ffffffffffffffda RBX: 000000000056c008 RCX: 0000000000466459 [ 2431.220738] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2431.227997] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2431.235254] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c008 [ 2431.242512] R13: 00007ffd58825dcf R14: 00007f10b678e300 R15: 0000000000022000 [ 2431.281022] Mem-Info: [ 2431.283473] active_anon:15010 inactive_anon:40538 isolated_anon:0 [ 2431.283473] active_file:29 inactive_file:6 isolated_file:20 [ 2431.283473] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2431.283473] slab_reclaimable:12527 slab_unreclaimable:120679 [ 2431.283473] mapped:52225 shmem:41751 pagetables:769 bounce:0 [ 2431.283473] free:19728 free_pcp:43 free_cma:0 [ 2431.321808] Node 0 active_anon:59132kB inactive_anon:101568kB active_file:108kB inactive_file:20kB unevictable:0kB isolated(anon):0kB isolated(file):80kB mapped:174084kB dirty:0kB writeback:0kB shmem:106008kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2431.353838] Node 1 active_anon:908kB inactive_anon:60584kB active_file:8kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:34816kB dirty:0kB writeback:0kB shmem:60996kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2431.385358] Node 0 DMA free:10952kB min:204kB low:252kB high:300kB active_anon:8kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2431.415854] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2431.420966] Node 0 DMA32 free:17628kB min:36200kB low:45248kB high:54296kB active_anon:59124kB inactive_anon:101568kB active_file:8kB inactive_file:20kB unevictable:0kB writepending:0kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:7488kB pagetables:2888kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2431.457030] lowmem_reserve[]: 0 0 0 0 0 [ 2431.461297] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2431.492436] lowmem_reserve[]: 0 0 0 0 0 [ 2431.496459] Node 1 Normal free:26848kB min:53696kB low:67120kB high:80544kB active_anon:908kB inactive_anon:60584kB active_file:8kB inactive_file:4kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:256kB pagetables:188kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2431.529332] lowmem_reserve[]: 0 0 0 0 0 [ 2431.533342] Node 0 DMA: 14*4kB (ME) 22*8kB (UME) 28*16kB (UME) 27*32kB (UME) 11*64kB (ME) 4*128kB (ME) 2*256kB (UM) 3*512kB (UME) 2*1024kB (ME) 2*2048kB (UM) 0*4096kB = 10952kB [ 2431.556452] Node 0 DMA32: 420*4kB (MEH) 312*8kB (UM) 63*16kB (UME) 294*32kB (UME) 28*64kB (UM) 7*128kB (UM) 6*256kB (M) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18816kB [ 2431.575748] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2431.586569] Node 1 Normal: 5*4kB (UM) 12*8kB (M) 8*16kB (M) 832*32kB (U) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 26868kB [ 2431.607135] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2431.616127] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2431.628273] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2431.637208] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2431.645878] 41781 total pagecache pages [ 2431.649966] 0 pages in swap cache [ 2431.653410] Swap cache stats: add 0, delete 0, find 0/0 [ 2431.658928] Free swap = 0kB [ 2431.661921] Total swap = 0kB [ 2431.664915] 2097051 pages RAM [ 2431.668790] 0 pages HighMem/MovableOnly [ 2431.672751] 363848 pages reserved [ 2431.676178] 0 pages cma reserved [ 2431.679554] Out of memory (oom_kill_allocating_task): Kill process 15513 (syz-executor.1) score 0 or sacrifice child [ 2431.690236] Killed process 15507 (syz-executor.1) total-vm:93648kB, anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 2431.757369] oom_reaper: reaped process 15503 (syz-executor.5), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 2431.767865] syz-executor.1: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2431.801660] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 2431.806870] CPU: 0 PID: 15507 Comm: syz-executor.1 Not tainted 4.14.229-syzkaller #0 [ 2431.814745] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2431.824093] Call Trace: [ 2431.826681] dump_stack+0x1b2/0x281 [ 2431.830309] warn_alloc.cold+0x96/0x1cc [ 2431.832675] oom_reaper: reaped process 15519 (syz-executor.4), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 2431.834276] ? zone_watermark_ok_safe+0x220/0x220 [ 2431.849059] ? usleep_range+0x130/0x130 [ 2431.853028] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 2431.858128] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 2431.863136] ? run_timer_softirq+0x5a0/0x5a0 [ 2431.867551] __alloc_pages_nodemask+0x2127/0x2720 [ 2431.872393] ? lock_acquire+0x170/0x3f0 [ 2431.876369] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2431.877764] syz-executor.5: [ 2431.881199] ? ion_page_pool_alloc+0x9e/0x1b0 [ 2431.881201] page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 2431.884209] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2431.888748] syz-executor.4: [ 2431.898548] ? alloc_pages_current+0x21c/0x260 [ 2431.898561] alloc_pages_current+0x155/0x260 [ 2431.898574] ion_page_pool_alloc+0x118/0x1b0 [ 2431.909468] (null) [ 2431.911572] ion_system_heap_allocate+0x133/0x8c0 [ 2431.915948] syz-executor.5 cpuset= [ 2431.920342] ? ion_alloc+0x187/0x810 [ 2431.920353] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2431.920362] ? ion_system_contig_heap_create+0x130/0x130 [ 2431.920372] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2431.920382] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2431.920395] ion_alloc+0x204/0x810 [ 2431.926638] page allocation failure: order:0 [ 2431.927344] ? ion_dma_buf_release+0x40/0x40 [ 2431.936300] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 2431.939980] ? __might_fault+0x177/0x1b0 [ 2431.939993] ion_ioctl+0xea/0x1f0 [ 2431.940005] ? ion_query_heaps+0x360/0x360 [ 2431.945423] (null) [ 2431.945429] syz-executor.4 cpuset= [ 2431.950430] ? SyS_epoll_ctl+0x1e0/0x2780 [ 2431.950440] ? ion_query_heaps+0x360/0x360 [ 2431.950450] do_vfs_ioctl+0x75a/0xff0 [ 2431.950462] ? ioctl_preallocate+0x1a0/0x1a0 [ 2431.959180] / [ 2431.963191] ? lock_downgrade+0x740/0x740 [ 2431.967569] mems_allowed=0-1 [ 2431.974668] ? __fget+0x225/0x360 [ 2431.974678] ? do_vfs_ioctl+0xff0/0xff0 [ 2431.974689] ? security_file_ioctl+0x83/0xb0 [ 2431.974699] SyS_ioctl+0x7f/0xb0 [ 2431.979601] syz-executor.1 invoked oom-killer: gfp_mask=0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 2431.982180] ? do_vfs_ioctl+0xff0/0xff0 [ 2431.986377] (null) [ 2431.988509] do_syscall_64+0x1d5/0x640 [ 2431.988525] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2431.988533] RIP: 0033:0x466459 [ 2431.988538] RSP: 002b:00007f10b67af188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2431.988547] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 2431.988554] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2431.992097] , order=0, oom_score_adj=1000 [ 2431.996215] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2431.996223] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2432.000478] / [ 2432.004207] R13: 00007ffd58825dcf R14: 00007f10b67af300 R15: 0000000000022000 [ 2432.017730] syz-executor.1 cpuset= [ 2432.057769] syz-executor.4: [ 2432.058197] mems_allowed=0-1 [ 2432.061304] page allocation failure: order:0 [ 2432.069032] CPU: 1 PID: 15503 Comm: syz-executor.5 Not tainted 4.14.229-syzkaller #0 [ 2432.069038] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2432.069042] Call Trace: [ 2432.069060] dump_stack+0x1b2/0x281 [ 2432.069074] warn_alloc.cold+0x96/0x1cc [ 2432.099692] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 2432.102293] ? zone_watermark_ok_safe+0x220/0x220 [ 2432.103979] (null) [ 2432.111229] ? usleep_range+0x130/0x130 [ 2432.111239] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 2432.111252] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 2432.137714] syz-executor.4 cpuset= [ 2432.142431] ? run_timer_softirq+0x5a0/0x5a0 [ 2432.144989] / [ 2432.148602] __alloc_pages_nodemask+0x2127/0x2720 [ 2432.167707] mems_allowed=0-1 [ 2432.170534] ? lock_acquire+0x170/0x3f0 [ 2432.202140] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2432.206974] ? ion_page_pool_alloc+0x9e/0x1b0 [ 2432.211460] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2432.216895] alloc_pages_current+0x155/0x260 [ 2432.221292] ion_page_pool_alloc+0x118/0x1b0 [ 2432.225688] ion_system_heap_allocate+0x133/0x8c0 [ 2432.230515] ? ion_alloc+0x187/0x810 [ 2432.234220] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2432.239669] ? ion_system_contig_heap_create+0x130/0x130 [ 2432.245114] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2432.250115] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2432.254960] ion_alloc+0x204/0x810 [ 2432.259183] ? ion_dma_buf_release+0x40/0x40 [ 2432.263571] ? __might_fault+0x177/0x1b0 [ 2432.267611] ion_ioctl+0xea/0x1f0 [ 2432.271051] ? ion_query_heaps+0x360/0x360 [ 2432.275280] ? sockfd_lookup_light+0xb2/0x160 [ 2432.279759] ? ion_query_heaps+0x360/0x360 [ 2432.283972] do_vfs_ioctl+0x75a/0xff0 [ 2432.287758] ? ioctl_preallocate+0x1a0/0x1a0 [ 2432.292155] ? lock_downgrade+0x740/0x740 [ 2432.296291] ? __fget+0x225/0x360 [ 2432.299735] ? do_vfs_ioctl+0xff0/0xff0 [ 2432.303700] ? security_file_ioctl+0x83/0xb0 [ 2432.308093] SyS_ioctl+0x7f/0xb0 [ 2432.311437] ? do_vfs_ioctl+0xff0/0xff0 [ 2432.315389] do_syscall_64+0x1d5/0x640 [ 2432.319266] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2432.324444] RIP: 0033:0x466459 [ 2432.327625] RSP: 002b:00007f4d0bcd5188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2432.335322] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 2432.342573] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2432.349827] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2432.357075] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2432.364328] R13: 00007ffe1117a98f R14: 00007f4d0bcd5300 R15: 0000000000022000 [ 2432.375758] CPU: 0 PID: 15517 Comm: syz-executor.4 Not tainted 4.14.229-syzkaller #0 [ 2432.377726] Bluetooth: hci3 command 0x041b tx timeout [ 2432.383648] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2432.398162] Call Trace: [ 2432.400740] dump_stack+0x1b2/0x281 [ 2432.404347] warn_alloc.cold+0x96/0x1cc [ 2432.408308] ? zone_watermark_ok_safe+0x220/0x220 [ 2432.413139] ? usleep_range+0x130/0x130 [ 2432.417091] ? try_to_free_pages+0x23f/0x6e0 [ 2432.421480] ? _find_next_bit+0xdb/0x100 [ 2432.425520] ? run_timer_softirq+0x5a0/0x5a0 [ 2432.429926] __alloc_pages_nodemask+0x2127/0x2720 [ 2432.434759] ? lock_acquire+0x170/0x3f0 [ 2432.438725] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2432.439430] / [ 2432.443552] ? ion_page_pool_alloc+0x9e/0x1b0 [ 2432.443556] mems_allowed=0-1 [ 2432.452820] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2432.458269] alloc_pages_current+0x155/0x260 [ 2432.462763] ion_page_pool_alloc+0x118/0x1b0 [ 2432.467150] ion_system_heap_allocate+0x133/0x8c0 [ 2432.471977] ? ion_alloc+0x187/0x810 [ 2432.475672] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2432.481106] ? ion_system_contig_heap_create+0x130/0x130 [ 2432.486539] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2432.491537] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2432.496361] ion_alloc+0x204/0x810 [ 2432.499886] ? ion_dma_buf_release+0x40/0x40 [ 2432.504275] ? __might_fault+0x177/0x1b0 [ 2432.508324] ion_ioctl+0xea/0x1f0 [ 2432.511762] ? ion_query_heaps+0x360/0x360 [ 2432.515979] ? ion_query_heaps+0x360/0x360 [ 2432.520195] do_vfs_ioctl+0x75a/0xff0 [ 2432.523976] ? ioctl_preallocate+0x1a0/0x1a0 [ 2432.528369] ? lock_downgrade+0x740/0x740 [ 2432.532504] ? __fget+0x225/0x360 [ 2432.535935] ? do_vfs_ioctl+0xff0/0xff0 [ 2432.539891] ? security_file_ioctl+0x83/0xb0 [ 2432.544284] SyS_ioctl+0x7f/0xb0 [ 2432.547628] ? do_vfs_ioctl+0xff0/0xff0 [ 2432.551586] do_syscall_64+0x1d5/0x640 [ 2432.555459] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2432.560628] RIP: 0033:0x466459 [ 2432.563795] RSP: 002b:00007f46becae188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2432.571481] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 2432.578736] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000004 [ 2432.585993] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2432.593243] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2432.600493] R13: 00007ffe96c50ebf R14: 00007f46becae300 R15: 0000000000022000 [ 2432.611551] CPU: 1 PID: 15513 Comm: syz-executor.1 Not tainted 4.14.229-syzkaller #0 [ 2432.619446] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2432.629746] Call Trace: [ 2432.632360] dump_stack+0x1b2/0x281 [ 2432.635986] dump_header+0x178/0x82f [ 2432.639694] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2432.644788] ? ___ratelimit+0x2cd/0x530 [ 2432.648777] oom_kill_process.cold+0x10/0xa40 [ 2432.653543] out_of_memory+0xe3e/0x1190 [ 2432.657523] ? oom_killer_disable+0x1c0/0x1c0 [ 2432.662012] ? mutex_trylock+0x152/0x1a0 [ 2432.666071] __alloc_pages_nodemask+0x23e1/0x2720 [ 2432.670915] ? lock_acquire+0x170/0x3f0 [ 2432.674888] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2432.679728] ? ion_page_pool_alloc+0x9e/0x1b0 [ 2432.684220] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2432.689672] alloc_pages_current+0x155/0x260 [ 2432.694078] ion_page_pool_alloc+0x118/0x1b0 [ 2432.695034] Mem-Info: [ 2432.698475] ion_system_heap_allocate+0x133/0x8c0 [ 2432.698485] ? ion_alloc+0x187/0x810 [ 2432.698498] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2432.701080] active_anon:14955 inactive_anon:40538 isolated_anon:0 [ 2432.701080] active_file:15 inactive_file:15 isolated_file:0 [ 2432.701080] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2432.701080] slab_reclaimable:12514 slab_unreclaimable:120338 [ 2432.701080] mapped:52225 shmem:41751 pagetables:769 bounce:0 [ 2432.701080] free:13867 free_pcp:67 free_cma:0 [ 2432.705893] ? ion_system_contig_heap_create+0x130/0x130 [ 2432.727672] Node 0 active_anon:58912kB inactive_anon:101568kB active_file:52kB inactive_file:56kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:174084kB dirty:0kB writeback:0kB shmem:106008kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2432.748137] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2432.748149] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2432.748161] ion_alloc+0x204/0x810 [ 2432.770799] Node 1 active_anon:908kB inactive_anon:60584kB active_file:8kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:34816kB dirty:0kB writeback:0kB shmem:60996kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2432.781431] ? ion_dma_buf_release+0x40/0x40 [ 2432.781444] ? __might_fault+0x177/0x1b0 [ 2432.807655] Node 0 [ 2432.821673] ion_ioctl+0xea/0x1f0 [ 2432.821684] ? ion_query_heaps+0x360/0x360 [ 2432.821695] ? SyS_epoll_ctl+0x1e0/0x2780 [ 2432.821706] ? ion_query_heaps+0x360/0x360 [ 2432.840010] DMA free:10952kB min:204kB low:252kB high:300kB active_anon:8kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2432.840015] lowmem_reserve[]: [ 2432.844146] do_vfs_ioctl+0x75a/0xff0 [ 2432.857676] 0 [ 2432.873941] ? ioctl_preallocate+0x1a0/0x1a0 [ 2432.873954] ? lock_downgrade+0x740/0x740 [ 2432.891134] ? __fget+0x225/0x360 [ 2432.894580] ? do_vfs_ioctl+0xff0/0xff0 [ 2432.897652] 2717 [ 2432.898548] ? security_file_ioctl+0x83/0xb0 [ 2432.898550] 2718 2718 [ 2432.900596] SyS_ioctl+0x7f/0xb0 [ 2432.904995] 2718 [ 2432.907481] ? do_vfs_ioctl+0xff0/0xff0 [ 2432.916826] do_syscall_64+0x1d5/0x640 [ 2432.920715] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2432.925893] RIP: 0033:0x466459 [ 2432.927642] Node 0 [ 2432.929068] RSP: 002b:00007f10b678e188 EFLAGS: 00000246 [ 2432.929088] DMA32 free:17772kB min:36200kB low:45248kB high:54296kB active_anon:58904kB inactive_anon:101568kB active_file:52kB inactive_file:56kB unevictable:0kB writepending:0kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:7488kB pagetables:2888kB bounce:0kB free_pcp:148kB local_pcp:28kB free_cma:0kB [ 2432.931290] ORIG_RAX: 0000000000000010 [ 2432.936628] lowmem_reserve[]: 0 [ 2432.964887] RAX: ffffffffffffffda RBX: 000000000056c008 RCX: 0000000000466459 [ 2432.964893] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2432.964897] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2432.964902] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c008 [ 2432.964907] R13: 00007ffd58825dcf R14: 00007f10b678e300 R15: 0000000000022000 [ 2432.971246] CPU: 1 PID: 15519 Comm: syz-executor.4 Not tainted 4.14.229-syzkaller #0 [ 2433.016536] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2433.021001] 0 [ 2433.025874] Call Trace: [ 2433.025885] 0 [ 2433.027676] dump_stack+0x1b2/0x281 [ 2433.027690] warn_alloc.cold+0x96/0x1cc [ 2433.039605] ? zone_watermark_ok_safe+0x220/0x220 [ 2433.043806] 0 [ 2433.044438] ? usleep_range+0x130/0x130 [ 2433.044440] 0 [ 2433.046228] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 2433.057050] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 2433.062113] ? run_timer_softirq+0x5a0/0x5a0 [ 2433.066538] __alloc_pages_nodemask+0x2127/0x2720 [ 2433.067648] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2433.071388] ? lock_acquire+0x170/0x3f0 [ 2433.071403] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2433.105666] ? ion_page_pool_alloc+0x9e/0x1b0 [ 2433.110165] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2433.115624] alloc_pages_current+0x155/0x260 [ 2433.120033] ion_page_pool_alloc+0x118/0x1b0 [ 2433.124434] ion_system_heap_allocate+0x133/0x8c0 [ 2433.129272] ? ion_alloc+0x187/0x810 [ 2433.132988] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2433.138437] ? ion_system_contig_heap_create+0x130/0x130 [ 2433.143880] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2433.148893] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2433.153733] ion_alloc+0x204/0x810 [ 2433.157276] ? ion_dma_buf_release+0x40/0x40 [ 2433.157638] lowmem_reserve[]: 0 [ 2433.161681] ? __might_fault+0x177/0x1b0 [ 2433.161687] 0 [ 2433.164946] ion_ioctl+0xea/0x1f0 [ 2433.174234] ? ion_query_heaps+0x360/0x360 [ 2433.178466] ? ion_query_heaps+0x360/0x360 [ 2433.182698] do_vfs_ioctl+0x75a/0xff0 [ 2433.186499] ? ioctl_preallocate+0x1a0/0x1a0 [ 2433.190909] ? lock_downgrade+0x740/0x740 [ 2433.195056] ? __fget+0x225/0x360 [ 2433.198509] ? do_vfs_ioctl+0xff0/0xff0 [ 2433.202479] ? security_file_ioctl+0x83/0xb0 [ 2433.206882] SyS_ioctl+0x7f/0xb0 [ 2433.207629] 0 0 [ 2433.210261] ? do_vfs_ioctl+0xff0/0xff0 [ 2433.210273] do_syscall_64+0x1d5/0x640 [ 2433.212232] 0 [ 2433.216190] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2433.227014] RIP: 0033:0x466459 [ 2433.230194] RSP: 002b:00007f46bec8d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2433.237889] RAX: ffffffffffffffda RBX: 000000000056c008 RCX: 0000000000466459 [ 2433.237895] Node 1 [ 2433.245140] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000004 [ 2433.245147] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2433.247380] Normal free:294392kB min:53696kB low:67120kB high:80544kB active_anon:908kB inactive_anon:60584kB active_file:8kB inactive_file:4kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:256kB pagetables:188kB bounce:0kB free_pcp:120kB local_pcp:120kB free_cma:0kB [ 2433.254611] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c008 [ 2433.254616] R13: 00007ffe96c50ebf R14: 00007f46bec8d300 R15: 0000000000022000 [ 2433.338004] Mem-Info: [ 2433.350609] active_anon:14955 inactive_anon:40538 isolated_anon:0 [ 2433.350609] active_file:40 inactive_file:440 isolated_file:0 [ 2433.350609] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2433.350609] slab_reclaimable:12514 slab_unreclaimable:120339 [ 2433.350609] mapped:52400 shmem:41751 pagetables:769 bounce:0 [ 2433.350609] free:23198 free_pcp:112 free_cma:0 [ 2433.350905] lowmem_reserve[]: [ 2433.427652] Node 0 active_anon:58912kB inactive_anon:101568kB active_file:52kB inactive_file:56kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:174084kB dirty:0kB writeback:0kB shmem:106008kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2433.440711] 0 [ 2433.487637] Node 1 active_anon:908kB inactive_anon:60584kB active_file:108kB inactive_file:5004kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:38216kB dirty:0kB writeback:0kB shmem:60996kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2433.560839] 0 0 0 0 [ 2433.563228] Node 0 DMA: 13*4kB (ME) 21*8kB (UME) 27*16kB (UME) 26*32kB (UME) 10*64kB (ME) 3*128kB (M) 3*256kB (UME) 3*512kB (UME) 2*1024kB (ME) 2*2048kB (UM) 0*4096kB = 10956kB [ 2433.617638] Node 0 DMA free:10952kB min:204kB low:252kB high:300kB active_anon:8kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2433.667694] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2433.670968] Node 0 [ 2433.672764] Node 0 [ 2433.672766] DMA32: 600*4kB [ 2433.674995] DMA32 free:126984kB min:36200kB low:45248kB high:54296kB active_anon:58904kB inactive_anon:101568kB active_file:52kB inactive_file:56kB unevictable:0kB writepending:0kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:7488kB pagetables:2888kB bounce:0kB free_pcp:1364kB local_pcp:656kB free_cma:0kB [ 2433.677202] (UME) 12161*8kB (UM) [ 2433.680166] lowmem_reserve[]: 0 0 0 0 0 [ 2433.747625] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2433.777738] lowmem_reserve[]: 0 0 0 0 0 [ 2433.807621] Node 1 Normal free:26856kB min:53696kB low:67120kB high:80544kB active_anon:908kB inactive_anon:60584kB active_file:108kB inactive_file:5204kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:256kB pagetables:188kB bounce:0kB free_pcp:152kB local_pcp:32kB free_cma:0kB [ 2433.847600] 1107*16kB (UME) 298*32kB (UME) 2*64kB (U) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 127064kB [ 2433.891526] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2433.917611] lowmem_reserve[]: 0 0 0 0 0 [ 2433.941699] Node 0 DMA: 13*4kB (ME) 21*8kB (UME) 27*16kB (UME) 26*32kB (UME) 10*64kB (ME) 3*128kB (M) 3*256kB (UME) 3*512kB (UME) 2*1024kB (ME) 2*2048kB (UM) 0*4096kB = 10956kB [ 2433.957605] Node 1 Normal: 1855*4kB (U) 1452*8kB (UM) 964*16kB (UM) 907*32kB (U) 1*64kB (U) 1*128kB (U) 1*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 63932kB [ 2434.007629] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2434.010916] Node 0 [ 2434.016495] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2434.016505] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2434.030907] DMA32: 13915*4kB (UME) 20793*8kB (UM) 14861*16kB (UME) 4544*32kB (UME) 20*64kB (U) 2*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB [ 2434.057631] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2434.081033] = 606724kB [ 2434.083540] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2434.127562] Node 1 Normal: 1855*4kB (U) 1452*8kB (UM) 964*16kB (UM) 907*32kB (U) 1*64kB (U) 1*128kB (U) 1*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 63932kB [ 2434.127686] 43134 total pagecache pages [ 2434.142242] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2434.149583] 0 pages in swap cache [ 2434.155039] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2434.167039] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2434.175926] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2434.184556] 43134 total pagecache pages [ 2434.207568] 0 pages in swap cache [ 2434.207588] Swap cache stats: add 0, delete 0, find 0/0 [ 2434.211029] Swap cache stats: add 0, delete 0, find 0/0 [ 2434.211034] Free swap = 0kB [ 2434.216380] Free swap = 0kB [ 2434.274087] Total swap = 0kB [ 2434.277137] 2097051 pages RAM [ 2434.289543] syz-executor.4: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2434.294406] syz-executor.5: [ 2434.306237] syz-executor.4: [ 2434.306318] 0 pages HighMem/MovableOnly [ 2434.312965] page allocation failure: order:4 [ 2434.316267] 363848 pages reserved [ 2434.316271] 0 pages cma reserved [ 2434.316279] Out of memory (oom_kill_allocating_task): Kill process 15513 (syz-executor.1) score 0 or sacrifice child [ 2434.316301] Killed process 15507 (syz-executor.1) total-vm:93648kB, anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 2434.316412] syz-executor.1: [ 2434.325222] Total swap = 0kB [ 2434.328097] page allocation failure: order:4 [ 2434.346425] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 2434.349382] page allocation failure: order:0 [ 2434.359870] (null) [ 2434.367160] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2434.379157] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 2434.381310] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2434.386106] CPU: 0 PID: 15517 Comm: syz-executor.4 Not tainted 4.14.229-syzkaller #0 [ 2434.393779] syz-executor.5 cpuset= [ 2434.401532] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2434.401536] Call Trace: [ 2434.401553] dump_stack+0x1b2/0x281 [ 2434.401567] warn_alloc.cold+0x96/0x1cc [ 2434.401582] ? zone_watermark_ok_safe+0x220/0x220 [ 2434.405100] syz-executor.4 cpuset= [ 2434.414449] __alloc_pages_nodemask+0x2127/0x2720 [ 2434.414458] ? __schedule+0x893/0x1de0 [ 2434.414475] ? lock_acquire+0x170/0x3f0 [ 2434.417072] syz-executor.1 cpuset= [ 2434.420664] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2434.420681] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2434.420694] ? __mutex_unlock_slowpath+0x75/0x770 [ 2434.420707] alloc_pages_current+0x155/0x260 [ 2434.420719] ion_page_pool_alloc+0x118/0x1b0 [ 2434.420729] ion_system_heap_allocate+0x133/0x8c0 [ 2434.420741] ? _raw_spin_unlock+0x29/0x40 [ 2434.420749] ? _ion_heap_freelist_drain+0x6e/0x410 [ 2434.420758] ? ion_system_contig_heap_create+0x130/0x130 [ 2434.420768] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2434.420777] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2434.420787] ion_alloc+0x27a/0x810 [ 2434.420801] ? ion_dma_buf_release+0x40/0x40 [ 2434.420813] ? __might_fault+0x177/0x1b0 [ 2434.420824] ion_ioctl+0xea/0x1f0 [ 2434.420832] ? ion_query_heaps+0x360/0x360 [ 2434.420843] ? ion_query_heaps+0x360/0x360 [ 2434.424806] Bluetooth: hci3 command 0x040f tx timeout [ 2434.429617] do_vfs_ioctl+0x75a/0xff0 [ 2434.429628] ? ioctl_preallocate+0x1a0/0x1a0 [ 2434.429636] ? lock_downgrade+0x740/0x740 [ 2434.429649] ? __fget+0x225/0x360 [ 2434.433213] / [ 2434.437985] ? do_vfs_ioctl+0xff0/0xff0 [ 2434.441912] / [ 2434.445822] ? security_file_ioctl+0x83/0xb0 [ 2434.449367] / [ 2434.454159] SyS_ioctl+0x7f/0xb0 [ 2434.459970] mems_allowed=0-1 [ 2434.464663] ? do_vfs_ioctl+0xff0/0xff0 [ 2434.469081] mems_allowed=0-1 [ 2434.473446] do_syscall_64+0x1d5/0x640 [ 2434.478290] mems_allowed=0-1 [ 2434.482397] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2434.586074] RIP: 0033:0x466459 [ 2434.589244] RSP: 002b:00007f46becae188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2434.596930] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 2434.604178] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000004 [ 2434.611436] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2434.618789] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2434.626140] R13: 00007ffe96c50ebf R14: 00007f46becae300 R15: 0000000000022000 [ 2434.633411] CPU: 1 PID: 15519 Comm: syz-executor.4 Not tainted 4.14.229-syzkaller #0 [ 2434.641295] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2434.643557] 2097051 pages RAM [ 2434.650666] Call Trace: [ 2434.650684] dump_stack+0x1b2/0x281 [ 2434.650697] warn_alloc.cold+0x96/0x1cc [ 2434.650709] ? zone_watermark_ok_safe+0x220/0x220 [ 2434.650731] __alloc_pages_nodemask+0x2127/0x2720 [ 2434.650742] ? lock_acquire+0x170/0x3f0 [ 2434.650755] ? lock_acquire+0x170/0x3f0 [ 2434.650768] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2434.650786] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2434.650798] ? __mutex_unlock_slowpath+0x75/0x770 [ 2434.650812] alloc_pages_current+0x155/0x260 [ 2434.657869] 0 pages HighMem/MovableOnly [ 2434.660102] ion_page_pool_alloc+0x118/0x1b0 [ 2434.664168] 363848 pages reserved [ 2434.668993] ion_system_heap_allocate+0x133/0x8c0 [ 2434.669006] ? _raw_spin_unlock+0x29/0x40 [ 2434.669014] ? _ion_heap_freelist_drain+0x6e/0x410 [ 2434.669022] ? ion_system_contig_heap_create+0x130/0x130 [ 2434.669036] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2434.677980] 0 pages cma reserved [ 2434.681771] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2434.681783] ion_alloc+0x27a/0x810 [ 2434.681795] ? ion_dma_buf_release+0x40/0x40 [ 2434.681807] ? __might_fault+0x177/0x1b0 [ 2434.681818] ion_ioctl+0xea/0x1f0 [ 2434.681827] ? ion_query_heaps+0x360/0x360 [ 2434.681838] ? ion_query_heaps+0x360/0x360 [ 2434.681849] do_vfs_ioctl+0x75a/0xff0 [ 2434.729705] systemd[1]: systemd-journald.service: Failed with result 'signal'. [ 2434.732438] ? ioctl_preallocate+0x1a0/0x1a0 [ 2434.757691] systemd[1]: systemd-journald.service: Service has no hold-off time, scheduling restart. [ 2434.758607] ? lock_downgrade+0x740/0x740 [ 2434.763862] systemd[1]: Stopped Journal Service. [ 2434.766354] ? __fget+0x225/0x360 [ 2434.766365] ? do_vfs_ioctl+0xff0/0xff0 [ 2434.766377] ? security_file_ioctl+0x83/0xb0 [ 2434.766390] SyS_ioctl+0x7f/0xb0 [ 2434.802107] systemd[1]: Starting Journal Service... [ 2434.804203] ? do_vfs_ioctl+0xff0/0xff0 [ 2434.828304] do_syscall_64+0x1d5/0x640 [ 2434.832192] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2434.837377] RIP: 0033:0x466459 [ 2434.840559] RSP: 002b:00007f46bec8d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2434.848264] RAX: ffffffffffffffda RBX: 000000000056c008 RCX: 0000000000466459 [ 2434.848348] warn_alloc_show_mem: 3 callbacks suppressed [ 2434.848351] Mem-Info: [ 2434.855522] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000004 [ 2434.855527] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2434.855531] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c008 [ 2434.855535] R13: 00007ffe96c50ebf R14: 00007f46bec8d300 R15: 0000000000022000 [ 2434.857285] CPU: 1 PID: 15503 Comm: syz-executor.5 Not tainted 4.14.229-syzkaller #0 [ 2434.900378] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2434.900437] active_anon:15008 inactive_anon:40538 isolated_anon:0 [ 2434.900437] active_file:615 inactive_file:1487 isolated_file:0 [ 2434.900437] unevictable:0 dirty:54 writeback:0 unstable:0 [ 2434.900437] slab_reclaimable:12509 slab_unreclaimable:120124 [ 2434.900437] mapped:53961 shmem:41751 pagetables:769 bounce:0 [ 2434.900437] free:258213 free_pcp:351 free_cma:0 [ 2434.909718] Call Trace: [ 2434.909736] dump_stack+0x1b2/0x281 [ 2434.909749] warn_alloc.cold+0x96/0x1cc [ 2434.909761] ? zone_watermark_ok_safe+0x220/0x220 [ 2434.909783] __alloc_pages_nodemask+0x2127/0x2720 [ 2434.909793] ? io_schedule_timeout+0x140/0x140 [ 2434.909809] ? lock_acquire+0x170/0x3f0 [ 2434.909825] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2434.909843] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2434.909856] ? __mutex_unlock_slowpath+0x75/0x770 [ 2434.909872] alloc_pages_current+0x155/0x260 [ 2434.909884] ion_page_pool_alloc+0x118/0x1b0 [ 2434.909894] ion_system_heap_allocate+0x133/0x8c0 [ 2434.909906] ? _raw_spin_unlock+0x29/0x40 [ 2434.909915] ? _ion_heap_freelist_drain+0x6e/0x410 [ 2434.909923] ? ion_system_contig_heap_create+0x130/0x130 [ 2434.909944] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2434.958730] Node 0 active_anon:59116kB inactive_anon:101568kB active_file:1292kB inactive_file:3272kB unevictable:0kB isolated(anon):48kB isolated(file):48kB mapped:177200kB dirty:204kB writeback:0kB shmem:106008kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2434.963398] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2434.963409] ion_alloc+0x27a/0x810 [ 2434.963423] ? ion_dma_buf_release+0x40/0x40 [ 2434.963434] ? __might_fault+0x177/0x1b0 [ 2434.963446] ion_ioctl+0xea/0x1f0 [ 2434.963454] ? ion_query_heaps+0x360/0x360 [ 2434.963468] ? sockfd_lookup_light+0xb2/0x160 [ 2434.963477] ? ion_query_heaps+0x360/0x360 [ 2434.969083] Node 1 active_anon:916kB inactive_anon:60584kB active_file:1968kB inactive_file:2076kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:38644kB dirty:12kB writeback:0kB shmem:60996kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2434.972003] do_vfs_ioctl+0x75a/0xff0 [ 2434.972016] ? ioctl_preallocate+0x1a0/0x1a0 [ 2434.972025] ? lock_downgrade+0x740/0x740 [ 2434.972039] ? __fget+0x225/0x360 [ 2434.972049] ? do_vfs_ioctl+0xff0/0xff0 [ 2434.979188] Node 0 [ 2434.982312] ? security_file_ioctl+0x83/0xb0 [ 2434.982325] SyS_ioctl+0x7f/0xb0 [ 2434.982333] ? do_vfs_ioctl+0xff0/0xff0 [ 2434.982346] do_syscall_64+0x1d5/0x640 [ 2434.982363] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2434.982371] RIP: 0033:0x466459 [ 2434.982377] RSP: 002b:00007f4d0bcd5188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2434.982388] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 2434.982394] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2434.982400] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2434.982406] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2434.982412] R13: 00007ffe1117a98f R14: 00007f4d0bcd5300 R15: 0000000000022000 [ 2434.983225] CPU: 1 PID: 15513 Comm: syz-executor.1 Not tainted 4.14.229-syzkaller #0 [ 2434.992158] syz-executor.1: [ 2434.996048] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2434.996051] Call Trace: [ 2434.996074] dump_stack+0x1b2/0x281 [ 2434.996088] warn_alloc.cold+0x96/0x1cc [ 2434.996100] ? zone_watermark_ok_safe+0x220/0x220 [ 2434.996117] ? wait_for_completion_io+0x10/0x10 [ 2434.996130] __alloc_pages_nodemask+0x2127/0x2720 [ 2435.004737] page allocation failure: order:4 [ 2435.005106] ? lock_acquire+0x170/0x3f0 [ 2435.010454] DMA free:11004kB min:204kB low:252kB high:300kB active_anon:8kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2435.015468] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2435.015479] ? ion_page_pool_alloc+0x9e/0x1b0 [ 2435.015495] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2435.015514] alloc_pages_current+0x155/0x260 [ 2435.021223] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 2435.048948] ion_page_pool_alloc+0x118/0x1b0 [ 2435.048958] ion_system_heap_allocate+0x133/0x8c0 [ 2435.048967] ? ion_alloc+0x187/0x810 [ 2435.048977] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2435.048985] ? ion_system_contig_heap_create+0x130/0x130 [ 2435.048994] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2435.049004] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2435.049014] ion_alloc+0x204/0x810 [ 2435.049026] ? ion_dma_buf_release+0x40/0x40 [ 2435.049038] ? __might_fault+0x177/0x1b0 [ 2435.049050] ion_ioctl+0xea/0x1f0 [ 2435.049057] ? ion_query_heaps+0x360/0x360 [ 2435.049073] ? SyS_epoll_ctl+0x1e0/0x2780 [ 2435.049084] ? ion_query_heaps+0x360/0x360 [ 2435.049094] do_vfs_ioctl+0x75a/0xff0 [ 2435.049104] ? ioctl_preallocate+0x1a0/0x1a0 [ 2435.049111] ? lock_downgrade+0x740/0x740 [ 2435.049122] ? __fget+0x225/0x360 [ 2435.049131] ? do_vfs_ioctl+0xff0/0xff0 [ 2435.049141] ? security_file_ioctl+0x83/0xb0 [ 2435.049153] SyS_ioctl+0x7f/0xb0 [ 2435.057161] lowmem_reserve[]: [ 2435.057502] ? do_vfs_ioctl+0xff0/0xff0 [ 2435.057515] do_syscall_64+0x1d5/0x640 [ 2435.057530] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2435.061910] 0 [ 2435.065949] RIP: 0033:0x466459 [ 2435.069624] 2717 [ 2435.073587] RSP: 002b:00007f10b678e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2435.423748] RAX: ffffffffffffffda RBX: 000000000056c008 RCX: 0000000000466459 [ 2435.431014] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2435.438278] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2435.445531] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c008 [ 2435.452796] R13: 00007ffd58825dcf R14: 00007f10b678e300 R15: 0000000000022000 [ 2435.461234] 2718 2718 2718 [ 2435.465627] (null) [ 2435.476133] Node 0 DMA32 free:854776kB min:36200kB low:45248kB high:54296kB active_anon:59212kB inactive_anon:101568kB active_file:1520kB inactive_file:3664kB unevictable:0kB writepending:232kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:7552kB pagetables:3044kB bounce:0kB free_pcp:340kB local_pcp:288kB free_cma:0kB [ 2435.512875] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 2435.526248] CPU: 0 PID: 15507 Comm: syz-executor.1 Not tainted 4.14.229-syzkaller #0 [ 2435.534172] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2435.543528] Call Trace: [ 2435.546122] dump_stack+0x1b2/0x281 [ 2435.549758] warn_alloc.cold+0x96/0x1cc [ 2435.554687] ? zone_watermark_ok_safe+0x220/0x220 [ 2435.559542] __alloc_pages_nodemask+0x2127/0x2720 [ 2435.564384] ? lock_acquire+0x170/0x3f0 [ 2435.568361] ? lock_acquire+0x170/0x3f0 [ 2435.572339] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2435.577187] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2435.582652] ? __mutex_unlock_slowpath+0x75/0x770 [ 2435.587507] alloc_pages_current+0x155/0x260 [ 2435.592008] ion_page_pool_alloc+0x118/0x1b0 [ 2435.596419] ion_system_heap_allocate+0x133/0x8c0 [ 2435.601261] ? _raw_spin_unlock+0x29/0x40 [ 2435.605407] ? _ion_heap_freelist_drain+0x6e/0x410 [ 2435.610337] ? ion_system_contig_heap_create+0x130/0x130 [ 2435.615795] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2435.620811] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2435.625653] ion_alloc+0x27a/0x810 [ 2435.629203] ? ion_dma_buf_release+0x40/0x40 [ 2435.633624] ? __might_fault+0x177/0x1b0 [ 2435.637712] ion_ioctl+0xea/0x1f0 [ 2435.641165] ? ion_query_heaps+0x360/0x360 [ 2435.645396] ? SyS_epoll_ctl+0x1e0/0x2780 [ 2435.649706] ? ion_query_heaps+0x360/0x360 [ 2435.653954] do_vfs_ioctl+0x75a/0xff0 [ 2435.657757] ? ioctl_preallocate+0x1a0/0x1a0 [ 2435.662509] ? lock_downgrade+0x740/0x740 [ 2435.666657] ? __fget+0x225/0x360 [ 2435.670105] ? do_vfs_ioctl+0xff0/0xff0 [ 2435.674078] ? security_file_ioctl+0x83/0xb0 [ 2435.678487] SyS_ioctl+0x7f/0xb0 [ 2435.681848] ? do_vfs_ioctl+0xff0/0xff0 [ 2435.685830] do_syscall_64+0x1d5/0x640 [ 2435.689724] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2435.694912] RIP: 0033:0x466459 [ 2435.698094] RSP: 002b:00007f10b67af188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2435.705800] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 2435.713066] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2435.720334] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2435.727594] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2435.734844] R13: 00007ffd58825dcf R14: 00007f10b67af300 R15: 0000000000022000 [ 2435.751238] lowmem_reserve[]: 0 0 0 0 0 [ 2435.755296] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2435.786404] lowmem_reserve[]: 0 0 0 0 0 [ 2435.793349] Node 1 Normal free:155844kB min:53696kB low:67120kB high:80544kB active_anon:916kB inactive_anon:60584kB active_file:1968kB inactive_file:2136kB unevictable:0kB writepending:12kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:256kB pagetables:188kB bounce:0kB free_pcp:160kB local_pcp:0kB free_cma:0kB [ 2435.827784] lowmem_reserve[]: 0 0 0 0 0 [ 2435.831813] Node 0 DMA: 19*4kB (UME) 30*8kB (UME) 28*16kB (UME) 26*32kB (UME) 11*64kB (UME) 4*128kB (UM) 2*256kB (ME) 3*512kB (UME) 2*1024kB (ME) 2*2048kB (UM) 0*4096kB = 11004kB [ 2435.852447] Node 0 DMA32: 2*4kB (UM) 0*8kB 11390*16kB (U) 10867*32kB (U) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 529992kB [ 2435.879353] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2435.896380] Node 1 Normal: 3374*4kB (UME) 3275*8kB (UME) 2892*16kB (UM) 2184*32kB (UM) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 155856kB [ 2435.914802] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2435.916434] warn_alloc_show_mem: 1 callbacks suppressed [ 2435.916437] Mem-Info: [ 2435.923785] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2435.923792] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2435.923799] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2435.923803] 44508 total pagecache pages [ 2435.923813] 0 pages in swap cache [ 2435.923818] Swap cache stats: add 0, delete 0, find 0/0 [ 2435.923822] Free swap = 0kB [ 2435.923825] Total swap = 0kB [ 2435.923832] 2097051 pages RAM [ 2435.923836] 0 pages HighMem/MovableOnly [ 2435.923839] 363848 pages reserved [ 2435.923843] 0 pages cma reserved [ 2436.081495] active_anon:14909 inactive_anon:40538 isolated_anon:0 [ 2436.081495] active_file:1161 inactive_file:1648 isolated_file:0 [ 2436.081495] unevictable:0 dirty:70 writeback:0 unstable:0 [ 2436.081495] slab_reclaimable:12509 slab_unreclaimable:120336 [ 2436.081495] mapped:54091 shmem:41751 pagetables:805 bounce:0 [ 2436.081495] free:120444 free_pcp:226 free_cma:0 [ 2436.116028] bridge0: port 1(bridge_slave_0) entered blocking state [ 2436.135412] bridge0: port 1(bridge_slave_0) entered disabled state [ 2436.173721] device bridge_slave_0 entered promiscuous mode [ 2436.211433] bridge0: port 2(bridge_slave_1) entered blocking state [ 2436.229528] bridge0: port 2(bridge_slave_1) entered disabled state [ 2436.249228] device bridge_slave_1 entered promiscuous mode [ 2436.257798] Node 0 active_anon:59020kB inactive_anon:101568kB active_file:3364kB inactive_file:4628kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:178656kB dirty:268kB writeback:0kB shmem:106008kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2436.290934] systemd-journald[15642]: File /run/log/journal/04d8c135ee6b410280ba31a58c89679d/system.journal corrupted or uncleanly shut down, renaming and replacing. [ 2436.329883] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 2436.361820] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 2436.369876] Node 1 active_anon:916kB inactive_anon:65484kB active_file:2068kB inactive_file:1624kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:38408kB dirty:12kB writeback:0kB shmem:65896kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2436.449265] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 2436.461404] Node 0 DMA free:11004kB min:204kB low:252kB high:300kB active_anon:8kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2436.461743] systemd-journald[15642]: /dev/kmsg buffer overrun, some messages lost. [ 2436.497662] Bluetooth: hci3 command 0x0419 tx timeout [ 2436.512186] team0: Port device team_slave_0 added [ 2436.532766] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 2436.552086] team0: Port device team_slave_1 added [ 2436.573805] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2436.583403] Node 0 DMA32 free:45028kB min:36200kB low:45248kB high:54296kB active_anon:59012kB inactive_anon:101568kB active_file:3364kB inactive_file:4628kB unevictable:0kB writepending:268kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:7552kB pagetables:3032kB bounce:0kB free_pcp:664kB local_pcp:304kB free_cma:0kB [ 2436.658218] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2436.664492] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2436.737619] lowmem_reserve[]: 0 0 0 0 0 [ 2436.743089] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2436.817387] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2436.837337] lowmem_reserve[]: 0 0 0 0 0 [ 2436.841373] Node 1 Normal free:211776kB min:53696kB low:67120kB high:80544kB active_anon:916kB inactive_anon:68684kB active_file:2100kB inactive_file:1592kB unevictable:0kB writepending:12kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:256kB pagetables:188kB bounce:0kB free_pcp:240kB local_pcp:120kB free_cma:0kB [ 2436.868864] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2436.894683] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2436.977359] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2437.017296] lowmem_reserve[]: 0 0 0 0 0 [ 2437.018362] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 2437.031270] Node 0 DMA: 19*4kB (UME) 31*8kB (UME) 28*16kB (UME) 26*32kB (UME) 11*64kB (UME) 4*128kB (UM) 2*256kB (ME) 3*512kB (UME) 2*1024kB (ME) 2*2048kB (UM) 0*4096kB = 11012kB [ 2437.068216] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 2437.097293] Node 0 DMA32: 3*4kB (UME) 2*8kB (M) 1*16kB (U) 1*32kB (E) 1*64kB (U) 26*128kB (U) 148*256kB (U) 6*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 44428kB [ 2437.157561] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2437.171437] device hsr_slave_0 entered promiscuous mode [ 2437.197345] Node 1 Normal: 1*4kB (U) 2*8kB (UM) 1*16kB (U) 1*32kB (U) 1*64kB (U) 1*128kB (U) 0*256kB 0*512kB 2*1024kB (UM) 0*2048kB 24*4096kB (U) = 100612kB [ 2437.207643] device hsr_slave_1 entered promiscuous mode [ 2437.247994] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 2437.255188] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 2437.275841] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2437.328305] systemd-journal invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=0 [ 2437.344670] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2437.358062] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2437.367130] systemd-journal cpuset=/ mems_allowed=0-1 [ 2437.372387] CPU: 0 PID: 15642 Comm: systemd-journal Not tainted 4.14.229-syzkaller #0 [ 2437.380347] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2437.389696] Call Trace: [ 2437.392290] dump_stack+0x1b2/0x281 [ 2437.395914] dump_header+0x178/0x82f [ 2437.399625] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2437.404726] ? ___ratelimit+0x2cd/0x530 [ 2437.408704] oom_kill_process.cold+0x10/0xa40 [ 2437.413211] out_of_memory+0xe3e/0x1190 [ 2437.417189] ? oom_killer_disable+0x1c0/0x1c0 [ 2437.421678] ? mutex_trylock+0x152/0x1a0 [ 2437.425733] __alloc_pages_nodemask+0x23e1/0x2720 [ 2437.430588] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2437.435427] ? entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2437.440710] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2437.440787] ? debug_check_no_obj_freed+0x2c0/0x680 [ 2437.454357] ? cache_grow_begin+0x3f/0x700 [ 2437.458594] cache_grow_begin+0x91/0x700 [ 2437.461346] 44894 total pagecache pages [ 2437.462654] fallback_alloc+0x207/0x2c0 [ 2437.466606] 0 pages in swap cache [ 2437.470653] kmem_cache_alloc+0x1e5/0x3c0 [ 2437.470663] getname_flags+0xc8/0x550 [ 2437.470674] user_path_at_empty+0x2a/0x50 [ 2437.470683] SyS_faccessat+0x21b/0x680 [ 2437.470692] ? SyS_fallocate+0x80/0x80 [ 2437.470702] ? do_syscall_64+0x4c/0x640 [ 2437.474130] Swap cache stats: add 0, delete 0, find 0/0 [ 2437.478251] ? SyS_faccessat+0x680/0x680 [ 2437.478260] do_syscall_64+0x1d5/0x640 [ 2437.478273] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2437.478281] RIP: 0033:0x7f330d6549c7 [ 2437.478285] RSP: 002b:00007ffed59088e8 EFLAGS: 00000246 ORIG_RAX: 0000000000000015 [ 2437.478293] RAX: ffffffffffffffda RBX: 00007ffed590b910 RCX: 00007f330d6549c7 [ 2437.478297] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000564ddeacd9a3 [ 2437.478302] RBP: 00007ffed5908a30 R08: 0000564ddeac33e5 R09: 0000000000000018 [ 2437.478306] R10: 0000000000000069 R11: 0000000000000246 R12: 0000000000000000 [ 2437.478310] R13: 0000000000000000 R14: 0000564de0a19860 R15: 00007ffed5908f20 [ 2437.730873] Free swap = 0kB [ 2437.733929] Total swap = 0kB [ 2437.736945] 2097051 pages RAM [ 2437.767520] Mem-Info: [ 2437.769978] active_anon:14980 inactive_anon:42567 isolated_anon:0 [ 2437.769978] active_file:692 inactive_file:813 isolated_file:0 [ 2437.769978] unevictable:0 dirty:24 writeback:0 unstable:0 [ 2437.769978] slab_reclaimable:12527 slab_unreclaimable:121148 [ 2437.769978] mapped:53511 shmem:43799 pagetables:771 bounce:0 [ 2437.769978] free:114824 free_pcp:212 free_cma:0 [ 2437.771137] 0 pages HighMem/MovableOnly [ 2437.806871] Node 0 active_anon:59004kB inactive_anon:101508kB active_file:2712kB inactive_file:3072kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:177840kB dirty:84kB writeback:0kB shmem:106008kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2437.808034] 363848 pages reserved [ 2437.840094] 0 pages cma reserved [ 2437.947606] Node 1 active_anon:932kB inactive_anon:68776kB active_file:48kB inactive_file:112kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:36228kB dirty:4kB writeback:0kB shmem:69188kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2437.989910] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 2438.060846] Node 0 DMA free:11108kB min:204kB low:252kB high:300kB active_anon:8kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2438.137840] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2438.142916] Node 0 DMA32 free:17564kB min:36200kB low:45248kB high:54296kB active_anon:59012kB inactive_anon:101504kB active_file:2540kB inactive_file:2912kB unevictable:0kB writepending:28kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:7552kB pagetables:2888kB bounce:0kB free_pcp:256kB local_pcp:56kB free_cma:0kB [ 2438.201231] lowmem_reserve[]: 0 0 0 0 0 [ 2438.205257] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2438.234742] lowmem_reserve[]: 0 0 0 0 0 [ 2438.238838] Node 1 Normal free:26508kB min:53696kB low:67120kB high:80544kB active_anon:932kB inactive_anon:68776kB active_file:48kB inactive_file:112kB unevictable:0kB writepending:4kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:256kB pagetables:196kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2438.272800] lowmem_reserve[]: 0 0 0 0 0 [ 2438.276811] Node 0 DMA: 13*4kB (ME) 21*8kB (UME) 12*16kB (ME) 21*32kB (UME) 18*64kB (UME) 4*128kB (UM) 2*256kB (ME) 3*512kB (UME) 2*1024kB (ME) 2*2048kB (UM) 0*4096kB = 10940kB [ 2438.296769] Node 0 DMA32: 340*4kB (UME) 81*8kB (UME) 33*16kB (UME) 17*32kB (UME) 2*64kB (UM) 1*128kB (U) 56*256kB (UM) 3*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 19208kB [ 2438.331921] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2438.343544] Node 1 Normal: 30*4kB (UM) 20*8kB (M) 25*16kB (UME) 14*32kB (UM) 10*64kB (UM) 1*128kB (M) 0*256kB 48*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 26472kB [ 2438.360603] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2438.369463] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2438.378108] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2438.386930] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2438.407187] 43831 total pagecache pages [ 2438.411187] 0 pages in swap cache [ 2438.414637] Swap cache stats: add 0, delete 0, find 0/0 [ 2438.437725] Free swap = 0kB [ 2438.440766] Total swap = 0kB [ 2438.443781] 2097051 pages RAM [ 2438.446875] 0 pages HighMem/MovableOnly [ 2438.477529] 363848 pages reserved [ 2438.481005] 0 pages cma reserved [ 2438.484365] Out of memory (oom_kill_allocating_task): Kill process 15642 (systemd-journal) score 0 or sacrifice child [ 2438.527248] Killed process 15642 (systemd-journal) total-vm:46096kB, anon-rss:464kB, file-rss:4kB, shmem-rss:1288kB [ 2438.549363] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2438.557788] oom_reaper: reaped process 15642 (systemd-journal), now anon-rss:0kB, file-rss:0kB, shmem-rss:1308kB [ 2438.621577] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 2438.646176] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 2438.652437] systemd[1]: systemd-journald.service: Main process exited, code=killed, status=9/KILL [ 2438.657575] systemd[1]: Failed to start Journal Service. [ 2438.699302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2438.707084] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2438.722901] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 2438.733154] 8021q: adding VLAN 0 to HW filter on device team0 [ 2438.752008] systemd[1]: systemd-journald.service: Unit entered failed state. [ 2438.785467] systemd[1]: systemd-journald.service: Failed with result 'signal'. [ 2438.799724] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 2438.806792] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2438.830256] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2438.839203] systemd[1]: systemd-journald.service: Service has no hold-off time, scheduling restart. [ 2438.878789] bridge0: port 1(bridge_slave_0) entered blocking state [ 2438.885311] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2438.904719] systemd[1]: Stopped Journal Service. [ 2438.947773] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2438.984577] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 2438.995643] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2439.010406] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2439.060306] bridge0: port 2(bridge_slave_1) entered blocking state [ 2439.066701] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2439.079566] in:imklog invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 2439.125137] in:imklog cpuset=/ mems_allowed=0-1 [ 2439.151593] CPU: 1 PID: 15391 Comm: in:imklog Not tainted 4.14.229-syzkaller #0 [ 2439.159066] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2439.168410] Call Trace: [ 2439.170995] dump_stack+0x1b2/0x281 [ 2439.174618] dump_header+0x178/0x82f [ 2439.178329] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2439.183427] ? ___ratelimit+0x2cd/0x530 [ 2439.187395] oom_kill_process.cold+0x10/0xa40 [ 2439.191892] out_of_memory+0xe3e/0x1190 [ 2439.195895] ? oom_killer_disable+0x1c0/0x1c0 [ 2439.200382] ? mutex_trylock+0x152/0x1a0 [ 2439.204437] __alloc_pages_nodemask+0x23e1/0x2720 [ 2439.209285] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2439.214135] alloc_pages_current+0x155/0x260 [ 2439.218538] filemap_fault+0x11a1/0x1ad0 [ 2439.222628] ext4_filemap_fault+0x84/0xb0 [ 2439.226764] __do_fault+0xfa/0x380 [ 2439.230317] __handle_mm_fault+0x2497/0x4620 [ 2439.234702] ? vm_insert_page+0x7c0/0x7c0 [ 2439.238827] ? lock_downgrade+0x740/0x740 [ 2439.242954] ? mark_held_locks+0xa6/0xf0 [ 2439.246991] handle_mm_fault+0x455/0x9c0 [ 2439.251030] __do_page_fault+0x549/0xad0 [ 2439.255070] ? spurious_fault+0x640/0x640 [ 2439.259212] ? do_page_fault+0x60/0x500 [ 2439.263162] ? page_fault+0x2f/0x50 [ 2439.266766] page_fault+0x45/0x50 [ 2439.270201] RIP: 1fa0:0x1f9f [ 2439.273199] RSP: 0000:000055f96a83a9d0 EFLAGS: 7fe0721b4da0 [ 2439.275757] Mem-Info: [ 2439.284100] syz-executor.1: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2439.295970] syz-executor.4: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2439.308042] syz-executor.5: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2439.321138] active_anon:14947 inactive_anon:42569 isolated_anon:0 [ 2439.321138] active_file:19 inactive_file:20 isolated_file:0 [ 2439.321138] unevictable:0 dirty:5 writeback:0 unstable:0 [ 2439.321138] slab_reclaimable:12554 slab_unreclaimable:120998 [ 2439.321138] mapped:52225 shmem:43799 pagetables:781 bounce:0 [ 2439.321138] free:13771 free_pcp:60 free_cma:0 [ 2439.327141] syz-executor.4: [ 2439.354385] syz-executor.5 cpuset= [ 2439.357499] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 2439.366160] CPU: 0 PID: 15519 Comm: syz-executor.4 Not tainted 4.14.229-syzkaller #0 [ 2439.373799] page allocation failure: order:0 [ 2439.374115] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2439.374125] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 2439.378503] Call Trace: [ 2439.378521] dump_stack+0x1b2/0x281 [ 2439.378534] warn_alloc.cold+0x96/0x1cc [ 2439.378544] ? zone_watermark_ok_safe+0x220/0x220 [ 2439.378553] ? usleep_range+0x130/0x130 [ 2439.378563] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 2439.378576] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 2439.378586] ? run_timer_softirq+0x5a0/0x5a0 [ 2439.378601] __alloc_pages_nodemask+0x2127/0x2720 [ 2439.378617] ? lock_acquire+0x170/0x3f0 [ 2439.378630] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2439.378640] ? ion_page_pool_alloc+0x9e/0x1b0 [ 2439.378654] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2439.378671] alloc_pages_current+0x155/0x260 [ 2439.378686] ion_page_pool_alloc+0x118/0x1b0 [ 2439.378696] ion_system_heap_allocate+0x133/0x8c0 [ 2439.378708] ? _raw_spin_unlock+0x29/0x40 [ 2439.378716] ? _ion_heap_freelist_drain+0x6e/0x410 [ 2439.378725] ? ion_system_contig_heap_create+0x130/0x130 [ 2439.378735] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2439.378746] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2439.378757] ion_alloc+0x27a/0x810 [ 2439.378770] ? ion_dma_buf_release+0x40/0x40 [ 2439.378782] ? __might_fault+0x177/0x1b0 [ 2439.378793] ion_ioctl+0xea/0x1f0 [ 2439.378804] ? ion_query_heaps+0x360/0x360 [ 2439.398660] (null) [ 2439.401529] ? ion_query_heaps+0x360/0x360 [ 2439.405475] syz-executor.4 cpuset= [ 2439.410323] do_vfs_ioctl+0x75a/0xff0 [ 2439.410337] ? ioctl_preallocate+0x1a0/0x1a0 [ 2439.410347] ? lock_downgrade+0x740/0x740 [ 2439.410359] ? __fget+0x225/0x360 [ 2439.410369] ? do_vfs_ioctl+0xff0/0xff0 [ 2439.410380] ? security_file_ioctl+0x83/0xb0 [ 2439.410390] SyS_ioctl+0x7f/0xb0 [ 2439.410398] ? do_vfs_ioctl+0xff0/0xff0 [ 2439.410409] do_syscall_64+0x1d5/0x640 [ 2439.410423] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2439.410430] RIP: 0033:0x466459 [ 2439.410437] RSP: 002b:00007f46bec8d188 EFLAGS: 00000246 [ 2439.424742] / [ 2439.428860] ORIG_RAX: 0000000000000010 [ 2439.435570] mems_allowed=0-1 [ 2439.437657] RAX: ffffffffffffffda RBX: 000000000056c008 RCX: 0000000000466459 [ 2439.437663] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000004 [ 2439.437668] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2439.437674] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c008 [ 2439.437685] R13: 00007ffe96c50ebf R14: 00007f46bec8d300 R15: 0000000000022000 [ 2439.437786] syz-executor.1 cpuset= [ 2439.452973] CPU: 1 PID: 15517 Comm: syz-executor.4 Not tainted 4.14.229-syzkaller #0 [ 2439.457075] / [ 2439.461311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2439.466129] mems_allowed=0-1 [ 2439.470249] Call Trace: [ 2439.470268] dump_stack+0x1b2/0x281 [ 2439.470283] warn_alloc.cold+0x96/0x1cc [ 2439.475557] / [ 2439.480635] ? zone_watermark_ok_safe+0x220/0x220 [ 2439.497062] mems_allowed=0-1 [ 2439.498427] ? usleep_range+0x130/0x130 [ 2439.507073] Node 0 active_anon:58576kB inactive_anon:101504kB active_file:36kB inactive_file:60kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:174084kB dirty:16kB writeback:0kB shmem:106008kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2439.510102] ? try_to_free_pages+0x23f/0x6e0 [ 2439.512240] Node 1 active_anon:1212kB inactive_anon:68772kB active_file:40kB inactive_file:20kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:34816kB dirty:4kB writeback:0kB shmem:69188kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2439.516448] ? _find_next_bit+0xdb/0x100 [ 2439.547054] Node 0 [ 2439.547365] ? run_timer_softirq+0x5a0/0x5a0 [ 2439.551339] DMA free:10976kB min:204kB low:252kB high:300kB active_anon:8kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2439.555228] __alloc_pages_nodemask+0x2127/0x2720 [ 2439.587072] lowmem_reserve[]: [ 2439.592124] ? lock_acquire+0x170/0x3f0 [ 2439.617048] 0 [ 2439.617403] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2439.625267] 2717 [ 2439.626972] ? ion_page_pool_alloc+0x9e/0x1b0 [ 2439.677047] warn_alloc_show_mem: 2 callbacks suppressed [ 2439.677050] Mem-Info: [ 2439.691366] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2439.691385] alloc_pages_current+0x155/0x260 [ 2439.695768] 2718 [ 2439.723003] ion_page_pool_alloc+0x118/0x1b0 [ 2439.723013] ion_system_heap_allocate+0x133/0x8c0 [ 2439.723026] ? _raw_spin_unlock+0x29/0x40 [ 2439.723034] ? _ion_heap_freelist_drain+0x6e/0x410 [ 2439.723046] ? ion_system_contig_heap_create+0x130/0x130 [ 2439.767054] active_anon:14947 inactive_anon:42569 isolated_anon:0 [ 2439.767054] active_file:19 inactive_file:20 isolated_file:0 [ 2439.767054] unevictable:0 dirty:5 writeback:0 unstable:0 [ 2439.767054] slab_reclaimable:12554 slab_unreclaimable:120998 [ 2439.767054] mapped:52225 shmem:43799 pagetables:781 bounce:0 [ 2439.767054] free:13771 free_pcp:60 free_cma:0 [ 2439.767260] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2439.771221] Node 0 active_anon:58576kB inactive_anon:101504kB active_file:36kB inactive_file:60kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:174084kB dirty:16kB writeback:0kB shmem:106008kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2439.772998] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2439.807044] Node 1 active_anon:1212kB inactive_anon:68772kB active_file:40kB inactive_file:20kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:34816kB dirty:4kB writeback:0kB shmem:69188kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2439.808249] ion_alloc+0x27a/0x810 [ 2439.813061] Node 0 [ 2439.817207] ? ion_dma_buf_release+0x40/0x40 [ 2439.817225] ? __might_fault+0x177/0x1b0 [ 2439.817237] ion_ioctl+0xea/0x1f0 [ 2439.822365] 2718 [ 2439.827796] ? ion_query_heaps+0x360/0x360 [ 2439.827808] ? ion_query_heaps+0x360/0x360 [ 2439.827818] do_vfs_ioctl+0x75a/0xff0 [ 2439.827836] ? ioctl_preallocate+0x1a0/0x1a0 [ 2439.887041] DMA free:10976kB min:204kB low:252kB high:300kB active_anon:8kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2439.893974] ? lock_downgrade+0x740/0x740 [ 2439.917018] lowmem_reserve[]: [ 2439.925925] ? __fget+0x225/0x360 [ 2439.957020] 0 [ 2439.957747] ? do_vfs_ioctl+0xff0/0xff0 [ 2439.962126] 2717 [ 2439.987694] ? security_file_ioctl+0x83/0xb0 [ 2439.987705] SyS_ioctl+0x7f/0xb0 [ 2439.987714] ? do_vfs_ioctl+0xff0/0xff0 [ 2440.007044] 2718 [ 2440.010536] do_syscall_64+0x1d5/0x640 [ 2440.017849] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2440.017858] RIP: 0033:0x466459 [ 2440.017866] RSP: 002b:00007f46becae188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2440.039801] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 2440.043381] Node 0 [ 2440.047053] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000004 [ 2440.047058] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2440.047063] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2440.047069] R13: 00007ffe96c50ebf R14: 00007f46becae300 R15: 0000000000022000 [ 2440.064754] CPU: 1 PID: 15503 Comm: syz-executor.5 Not tainted 4.14.229-syzkaller #0 [ 2440.086699] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2440.096035] Call Trace: [ 2440.097015] 2718 2718 [ 2440.098613] dump_stack+0x1b2/0x281 [ 2440.098626] warn_alloc.cold+0x96/0x1cc [ 2440.101103] 2718 [ 2440.104711] ? zone_watermark_ok_safe+0x220/0x220 [ 2440.115513] ? usleep_range+0x130/0x130 [ 2440.117020] DMA32 free:18260kB min:36200kB low:45248kB high:54296kB active_anon:58568kB inactive_anon:101504kB active_file:44kB inactive_file:52kB unevictable:0kB writepending:16kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:7520kB pagetables:2800kB bounce:0kB free_pcp:120kB local_pcp:0kB free_cma:0kB [ 2440.119487] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 2440.119501] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 2440.153209] ? run_timer_softirq+0x5a0/0x5a0 [ 2440.162614] __alloc_pages_nodemask+0x2127/0x2720 [ 2440.167001] Node 0 DMA32 free:18260kB min:36200kB low:45248kB high:54296kB active_anon:58568kB inactive_anon:101504kB active_file:44kB inactive_file:52kB unevictable:0kB writepending:16kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:7520kB pagetables:2800kB bounce:0kB free_pcp:120kB local_pcp:0kB free_cma:0kB [ 2440.167474] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2440.167487] ? migrate_swap_stop+0x880/0x880 [ 2440.205566] ? lock_acquire+0x170/0x3f0 [ 2440.209530] alloc_pages_current+0x155/0x260 [ 2440.213925] ion_page_pool_alloc+0x118/0x1b0 [ 2440.216996] lowmem_reserve[]: 0 [ 2440.218317] ion_system_heap_allocate+0x133/0x8c0 [ 2440.218329] ? _raw_spin_unlock+0x29/0x40 [ 2440.221589] 0 [ 2440.226418] ? _ion_heap_freelist_drain+0x6e/0x410 [ 2440.237229] ? ion_system_contig_heap_create+0x130/0x130 [ 2440.242657] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2440.246992] lowmem_reserve[]: 0 [ 2440.247678] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2440.247689] ion_alloc+0x27a/0x810 [ 2440.250941] 0 [ 2440.255769] ? ion_dma_buf_release+0x40/0x40 [ 2440.259301] 0 [ 2440.261065] ? __might_fault+0x177/0x1b0 [ 2440.265451] 0 [ 2440.267240] ion_ioctl+0xea/0x1f0 [ 2440.267250] ? ion_query_heaps+0x360/0x360 [ 2440.267265] ? sockfd_lookup_light+0xb2/0x160 [ 2440.276992] 0 [ 2440.280705] ? ion_query_heaps+0x360/0x360 [ 2440.285172] 0 [ 2440.286960] do_vfs_ioctl+0x75a/0xff0 [ 2440.296812] ? ioctl_preallocate+0x1a0/0x1a0 [ 2440.296988] 0 [ 2440.301200] ? lock_downgrade+0x740/0x740 [ 2440.301214] ? __fget+0x225/0x360 [ 2440.307115] ? do_vfs_ioctl+0xff0/0xff0 [ 2440.307126] ? security_file_ioctl+0x83/0xb0 [ 2440.307137] SyS_ioctl+0x7f/0xb0 [ 2440.316989] 0 [ 2440.318926] ? do_vfs_ioctl+0xff0/0xff0 [ 2440.322270] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2440.324085] do_syscall_64+0x1d5/0x640 [ 2440.336985] Node 0 [ 2440.353519] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2440.353529] RIP: 0033:0x466459 [ 2440.366982] lowmem_reserve[]: [ 2440.367935] RSP: 002b:00007f4d0bcd5188 EFLAGS: 00000246 [ 2440.367941] 0 [ 2440.371021] ORIG_RAX: 0000000000000010 [ 2440.376370] 0 [ 2440.378150] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 2440.378156] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2440.378162] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2440.378170] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2440.396993] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2440.398414] R13: 00007ffe1117a98f R14: 00007f4d0bcd5300 R15: 0000000000022000 [ 2440.405675] lowmem_reserve[]: [ 2440.448747] 0 0 0 [ 2440.469256] Node 1 Normal free:72028kB min:53696kB low:67120kB high:80544kB active_anon:1212kB inactive_anon:68772kB active_file:28kB inactive_file:1132kB unevictable:0kB writepending:4kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:320kB pagetables:324kB bounce:0kB free_pcp:40kB local_pcp:40kB free_cma:0kB [ 2440.505631] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 2440.517018] CPU: 0 PID: 15507 Comm: syz-executor.1 Not tainted 4.14.229-syzkaller #0 [ 2440.524920] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2440.534274] Call Trace: [ 2440.536873] dump_stack+0x1b2/0x281 [ 2440.540513] warn_alloc.cold+0x96/0x1cc [ 2440.544485] ? zone_watermark_ok_safe+0x220/0x220 [ 2440.549343] ? usleep_range+0x130/0x130 [ 2440.553315] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 2440.558428] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 2440.563441] ? run_timer_softirq+0x5a0/0x5a0 [ 2440.567871] __alloc_pages_nodemask+0x2127/0x2720 [ 2440.572716] ? lock_acquire+0x170/0x3f0 [ 2440.576689] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2440.581526] ? ion_page_pool_alloc+0x9e/0x1b0 [ 2440.586021] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2440.591479] alloc_pages_current+0x155/0x260 [ 2440.595892] ion_page_pool_alloc+0x118/0x1b0 [ 2440.600303] ion_system_heap_allocate+0x133/0x8c0 [ 2440.605143] ? _raw_spin_unlock+0x29/0x40 [ 2440.609284] ? _ion_heap_freelist_drain+0x6e/0x410 [ 2440.614211] ? ion_system_contig_heap_create+0x130/0x130 [ 2440.619667] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2440.624781] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2440.629656] ion_alloc+0x27a/0x810 [ 2440.633200] ? ion_dma_buf_release+0x40/0x40 [ 2440.633509] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 2440.637605] ? __might_fault+0x177/0x1b0 [ 2440.637616] ion_ioctl+0xea/0x1f0 [ 2440.637625] ? ion_query_heaps+0x360/0x360 [ 2440.637636] ? SyS_epoll_ctl+0x1e0/0x2780 [ 2440.637645] ? ion_query_heaps+0x360/0x360 [ 2440.637654] do_vfs_ioctl+0x75a/0xff0 [ 2440.637665] ? ioctl_preallocate+0x1a0/0x1a0 [ 2440.657730] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 2440.660255] ? lock_downgrade+0x740/0x740 [ 2440.686720] ? __fget+0x225/0x360 [ 2440.690170] ? do_vfs_ioctl+0xff0/0xff0 [ 2440.694154] ? security_file_ioctl+0x83/0xb0 [ 2440.698698] SyS_ioctl+0x7f/0xb0 [ 2440.698851] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 2440.702161] ? do_vfs_ioctl+0xff0/0xff0 [ 2440.713685] do_syscall_64+0x1d5/0x640 [ 2440.717680] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2440.722951] RIP: 0033:0x466459 [ 2440.726134] RSP: 002b:00007f10b67af188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2440.733835] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 2440.741247] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2440.748783] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2440.757348] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2440.759946] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 2440.764610] R13: 00007ffd58825dcf R14: 00007f10b67af300 R15: 0000000000022000 [ 2440.781157] lowmem_reserve[]: 0 0 0 0 0 [ 2440.785155] Node 0 DMA: 14*4kB (UME) 21*8kB (UME) 12*16kB (ME) 20*32kB (UME) 19*64kB (UME) 4*128kB (UM) 2*256kB (ME) 3*512kB (UME) 2*1024kB (ME) 2*2048kB (UM) 0*4096kB = 10976kB [ 2440.801472] 0 0 0 0 0 [ 2440.803987] Node 1 Normal free:178024kB min:53696kB low:67120kB high:80544kB active_anon:1212kB inactive_anon:68772kB active_file:28kB inactive_file:1732kB unevictable:0kB writepending:4kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:320kB pagetables:324kB bounce:0kB free_pcp:220kB local_pcp:16kB free_cma:0kB [ 2440.817370] warn_alloc_show_mem: 1 callbacks suppressed [ 2440.817374] Mem-Info: [ 2440.833208] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2440.849217] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2440.856587] Node 0 DMA32: 13786*4kB (UME) 770*8kB (UME) 31*16kB (UME) 19*32kB (UME) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 62408kB [ 2440.873931] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2440.881817] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2440.891861] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2440.891985] active_anon:14947 inactive_anon:42569 isolated_anon:0 [ 2440.891985] active_file:18 inactive_file:446 isolated_file:0 [ 2440.891985] unevictable:0 dirty:5 writeback:0 unstable:0 [ 2440.891985] slab_reclaimable:12554 slab_unreclaimable:120849 [ 2440.891985] mapped:52525 shmem:43799 pagetables:781 bounce:0 [ 2440.891985] free:50741 free_pcp:287 free_cma:0 [ 2440.902695] lowmem_reserve[]: [ 2440.940659] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2440.952151] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2440.963153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2440.967322] Node 1 Normal: 0*4kB 1*8kB (U) 2*16kB (UE) 2*32kB (UM) 2*64kB (UM) 1*128kB (U) 2*256kB (UM) 0*512kB 98*1024kB (U) 0*2048kB 0*4096kB = 101224kB [ 2440.971427] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2440.995237] 0 0 0 0 0 [ 2440.997013] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2440.997783] Node 0 [ 2441.006574] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2441.006581] DMA: [ 2441.030946] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2441.037617] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2441.057351] 14*4kB (UME) 21*8kB (UME) 12*16kB (ME) 20*32kB (UME) 19*64kB (UME) 4*128kB (UM) 2*256kB (ME) 3*512kB (UME) 2*1024kB (ME) 2*2048kB (UM) 0*4096kB = 10976kB [ 2441.060798] Node 0 active_anon:58576kB inactive_anon:101504kB active_file:44kB inactive_file:52kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:174084kB dirty:16kB writeback:0kB shmem:106008kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2441.086946] Node 0 [ 2441.103143] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 2441.104640] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2441.106745] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2441.112162] 44300 total pagecache pages [ 2441.112172] 0 pages in swap cache [ 2441.112177] Swap cache stats: add 0, delete 0, find 0/0 [ 2441.112180] Free swap = 0kB [ 2441.112184] Total swap = 0kB [ 2441.112191] 2097051 pages RAM [ 2441.112194] 0 pages HighMem/MovableOnly [ 2441.112198] 363848 pages reserved [ 2441.112201] 0 pages cma reserved [ 2441.112343] Node 1 active_anon:1212kB inactive_anon:68772kB active_file:28kB inactive_file:1824kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:36032kB dirty:4kB writeback:0kB shmem:69188kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2441.124945] DMA32: [ 2441.186951] Node 0 [ 2441.191838] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 2441.194164] DMA free:10976kB min:204kB low:252kB high:300kB active_anon:8kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2441.195486] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2441.226993] lowmem_reserve[]: [ 2441.228472] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2441.233496] 0 [ 2441.237521] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2441.256939] 2717 2718 2718 2718 [ 2441.258646] 13677*4kB (UME) 13854*8kB (UME) 41*16kB (UME) 20*32kB (UME) 57*64kB (U) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 170484kB [ 2441.260870] Node 0 [ 2441.285164] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 2441.301006] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 2441.307475] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2441.314175] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2441.316964] DMA32 free:201576kB min:36200kB low:45248kB high:54296kB active_anon:58568kB inactive_anon:101504kB active_file:44kB inactive_file:152kB unevictable:0kB writepending:0kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:7488kB pagetables:2800kB bounce:0kB free_pcp:1032kB local_pcp:644kB free_cma:0kB [ 2441.324782] Node 0 [ 2441.369070] lowmem_reserve[]: 0 0 0 0 0 [ 2441.375178] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2441.375454] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2441.396915] Normal: [ 2441.407971] lowmem_reserve[]: 0 0 0 0 0 [ 2441.414283] Node 1 Normal free:183656kB min:53696kB low:67120kB high:80544kB active_anon:1212kB inactive_anon:68772kB active_file:28kB inactive_file:1824kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:320kB pagetables:324kB bounce:0kB free_pcp:220kB local_pcp:204kB free_cma:0kB [ 2441.421064] 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2441.507763] lowmem_reserve[]: 0 0 0 0 0 [ 2441.511785] Node 0 DMA: 14*4kB (UME) 21*8kB (UME) 12*16kB (ME) 20*32kB (UME) 19*64kB (UME) 14*128kB (UM) 4*256kB (UME) 3*512kB (UME) 2*1024kB (ME) 2*2048kB (UM) 0*4096kB = 12768kB [ 2441.537283] Node 1 Normal: 0*4kB 1*8kB (U) 2*16kB (UE) 2*32kB (UM) 379*64kB (UM) 117*128kB (U) 26*256kB (UM) 12*512kB (U) 202*1024kB (U) 11*2048kB (U) 0*4096kB = 281512kB [ 2441.550787] Node 0 DMA32: 13387*4kB (UE) 20218*8kB (UME) 1927*16kB (UME) 25*32kB (UME) 552*64kB (U) 8*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 283276kB [ 2441.567037] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2441.576712] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2441.577858] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2441.585743] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2441.626939] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2441.634613] Node 1 Normal: 0*4kB 1*8kB (U) 2*16kB (UE) 2*32kB (UM) 379*64kB (UM) 117*128kB (U) 26*256kB (UM) 12*512kB (U) 202*1024kB (U) 11*2048kB (U) 0*4096kB = 281512kB [ 2441.646887] 44892 total pagecache pages [ 2441.654938] 0 pages in swap cache [ 2441.666914] Swap cache stats: add 0, delete 0, find 0/0 [ 2441.670674] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2441.672293] Free swap = 0kB [ 2441.681337] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2441.695821] Total swap = 0kB [ 2441.701588] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2441.706910] 2097051 pages RAM [ 2441.713521] 0 pages HighMem/MovableOnly [ 2441.714145] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2441.726162] 44892 total pagecache pages [ 2441.726924] 363848 pages reserved [ 2441.733561] 0 pages cma reserved [ 2441.740135] 0 pages in swap cache [ 2441.743693] Swap cache stats: add 0, delete 0, find 0/0 [ 2441.747050] Out of memory (oom_kill_allocating_task): Kill process 15391 (in:imklog) score 0 or sacrifice child [ 2441.756808] Free swap = 0kB [ 2441.762424] Total swap = 0kB [ 2441.765431] 2097051 pages RAM [ 2441.777113] Killed process 15383 (rsyslogd) total-vm:254332kB, anon-rss:1620kB, file-rss:0kB, shmem-rss:0kB [ 2441.793723] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 2441.803269] oom_reaper: reaped process 15383 (rsyslogd), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 2441.812711] 0 pages HighMem/MovableOnly [ 2441.817098] 363848 pages reserved [ 2441.820665] 0 pages cma reserved [ 2441.826257] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 2441.849682] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2441.861150] systemd[1]: rsyslog.service: Main process exited, code=killed, status=9/KILL [ 2441.880945] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2441.913694] systemd[1]: rsyslog.service: Unit entered failed state. [ 2441.932258] systemd[1]: rsyslog.service: Failed with result 'signal'. [ 2442.006582] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 2442.029618] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 2442.043786] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 2442.079334] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 2442.086009] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2442.095585] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2442.117816] device veth0_vlan entered promiscuous mode [ 2442.127491] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2442.135740] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2442.144615] device veth1_vlan entered promiscuous mode [ 2442.154789] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 2442.183520] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 2442.203266] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 2442.210296] systemd[1]: rsyslog.service: Service hold-off time over, scheduling restart. [ 2442.216753] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 2442.225749] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2442.233408] systemd[1]: Stopped System Logging Service. [ 2442.237355] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 2442.246026] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2442.255120] systemd[1]: Starting System Logging Service... [ 2442.261815] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2442.278576] device veth0_macvtap entered promiscuous mode [ 2442.284844] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 2442.299062] device veth1_macvtap entered promiscuous mode [ 2442.305472] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 2442.320388] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 2442.334333] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 2442.343555] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2442.357548] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2442.366773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2442.379824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2442.389711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2442.402716] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2442.412560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2442.425447] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2442.435336] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2442.449560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2442.461494] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 2442.471267] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2442.480070] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2442.490266] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2442.500756] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2442.513674] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2442.532200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2442.544948] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2442.558786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2442.571226] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2442.583943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2442.596672] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2442.606846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2442.616559] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2442.631327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2442.643979] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2442.660870] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 2442.670805] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2442.679665] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2442.692903] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2442.863519] systemd[1]: Started System Logging Service. [ 2443.899273] systemd-journald[15732]: File /run/log/journal/04d8c135ee6b410280ba31a58c89679d/system.journal corrupted or uncleanly shut down, renaming and replacing. [ 2444.878970] systemd[1]: Started Journal Service. 09:15:59 executing program 2: socket$inet_tcp(0x2, 0x1, 0x0) openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000580)='/dev/btrfs-control\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000580)='/dev/btrfs-control\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r1) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0x100000001, 0x13}) 09:15:59 executing program 3: r0 = perf_event_open$cgroup(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = epoll_create(0x7) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000001c0)={0x20000005}) epoll_wait(r1, &(0x7f0000000100)=[{}], 0x1, 0x0) r2 = gettid() kcmp$KCMP_EPOLL_TFD(r2, 0x0, 0x7, r0, &(0x7f0000000080)={r1, r0, 0x5}) kcmp$KCMP_EPOLL_TFD(r2, r2, 0x7, r1, &(0x7f00000000c0)={r1, r1, 0x3}) 09:15:59 executing program 5: epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x2, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x10000, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00032abd7000fcdbdf25010000000c001000010000000000000014001f00ff01000000000000000007000000000108000b0002000006"], 0x3c}, 0x1, 0x0, 0x0, 0x4004}, 0x20000001) bind$l2tp6(0xffffffffffffffff, &(0x7f0000000300)={0xa, 0x0, 0xc6d, @loopback, 0x6, 0x2}, 0x20) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f0000000080)={0x50000010}) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r1, &(0x7f0000000040)={0x40000008}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000180)={0x80000001, 0x13}) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r2, 0x89fa, &(0x7f0000003dc0)={'ip6gre0\x00', 0x0}) getsockname(r2, &(0x7f00000000c0)=@pptp, &(0x7f00000001c0)=0x80) 09:15:59 executing program 0: openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x2, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000180)={0x80000001, 0x13}) 09:15:59 executing program 1: epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x2, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000180)={0x80000001, 0x13}) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000040)) 09:15:59 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000580)='/dev/btrfs-control\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, r2) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f00000000c0)={0x34, 0x0, &(0x7f0000000080)}) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000040)={0xffffffc1, 0x1, 0x2, 0x9, 0x3}, 0x14) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000180)={0x80000001, 0x13}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000240)='nbd\x00', 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x2c, r4, 0x200, 0x70bd26, 0x25dfdbff, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x2}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x41}, 0x41) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$llc(0x1a, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r5, 0x89fa, &(0x7f0000003dc0)={'ip6gre0\x00', 0x0}) ioctl$sock_SIOCGSKNS(r5, 0x894c, &(0x7f00000001c0)=0x2) setsockopt$packet_drop_memb(r1, 0x107, 0x2, &(0x7f0000000100)={0x0, 0x1, 0x6, @multicast}, 0x10) 09:15:59 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x100000000, 0x13}) 09:15:59 executing program 3: r0 = perf_event_open$cgroup(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0xd}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x1) r1 = epoll_create(0x7) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000001c0)={0x20000005}) r2 = accept(0xffffffffffffffff, 0x0, &(0x7f0000000140)) syz_genetlink_get_family_id$wireguard(&(0x7f00000000c0)='wireguard\x00', r2) epoll_wait(r1, &(0x7f0000000100)=[{}], 0x1, 0x0) 09:15:59 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000180)={0x80000001, 0x13}) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000580)='/dev/btrfs-control\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r1) ioctl$EVIOCGPROP(r1, 0x80404509, &(0x7f0000000000)=""/28) 09:15:59 executing program 3: r0 = perf_event_open$cgroup(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000140)={0x3, 0x70, 0x0, 0x4, 0xe6, 0x7f, 0x0, 0xfffffffffffff114, 0x20, 0x8, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f0000000080)}, 0x4002, 0x400, 0x1, 0x4, 0x8, 0x800, 0x401}, r1, 0x10, r0, 0x2) r2 = epoll_create(0x7) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f00000001c0)={0x20000005}) epoll_wait(r2, &(0x7f0000000100)=[{}], 0x1, 0x0) 09:15:59 executing program 3: r0 = perf_event_open$cgroup(&(0x7f0000000000)={0x1, 0x70, 0x4, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x2000000000000, 0x1, 0x0, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = epoll_create(0x7) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000001c0)={0x20000005}) epoll_wait(r1, &(0x7f0000000100)=[{}], 0x1, 0x0) [ 2445.292065] syz-executor.0: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2445.292120] syz-executor.5: [ 2445.340175] syz-executor.1: [ 2445.346660] syz-executor.0 cpuset= [ 2445.354242] page allocation failure: order:4 [ 2445.359154] / [ 2445.370868] page allocation failure: order:4 [ 2445.372574] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 2445.380625] mems_allowed=0-1 [ 2445.384476] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 2445.394554] (null) [ 2445.408750] (null) [ 2445.412888] CPU: 0 PID: 15789 Comm: syz-executor.0 Not tainted 4.14.229-syzkaller #0 [ 2445.420479] syz-executor.5 cpuset= [ 2445.420768] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2445.420773] Call Trace: [ 2445.420792] dump_stack+0x1b2/0x281 [ 2445.439832] warn_alloc.cold+0x96/0x1cc [ 2445.443790] ? zone_watermark_ok_safe+0x220/0x220 [ 2445.448624] __alloc_pages_nodemask+0x2127/0x2720 [ 2445.453452] ? lock_acquire+0x170/0x3f0 [ 2445.457411] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2445.462241] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2445.467673] ? __mutex_unlock_slowpath+0x75/0x770 [ 2445.472584] alloc_pages_current+0x155/0x260 [ 2445.476974] ion_page_pool_alloc+0x118/0x1b0 [ 2445.481381] ion_system_heap_allocate+0x133/0x8c0 [ 2445.486214] ? ion_alloc+0x187/0x810 [ 2445.489920] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2445.495377] ? ion_system_contig_heap_create+0x130/0x130 [ 2445.500815] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2445.505816] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2445.510646] ion_alloc+0x204/0x810 [ 2445.514168] ? ion_dma_buf_release+0x40/0x40 [ 2445.518573] ? __might_fault+0x177/0x1b0 [ 2445.522617] ion_ioctl+0xea/0x1f0 [ 2445.526068] ? ion_query_heaps+0x360/0x360 [ 2445.530295] ? ion_query_heaps+0x360/0x360 [ 2445.534539] do_vfs_ioctl+0x75a/0xff0 [ 2445.538335] ? ioctl_preallocate+0x1a0/0x1a0 [ 2445.542728] ? lock_downgrade+0x740/0x740 [ 2445.546861] ? __fget+0x225/0x360 [ 2445.550294] ? do_vfs_ioctl+0xff0/0xff0 [ 2445.554258] ? security_file_ioctl+0x83/0xb0 [ 2445.558660] SyS_ioctl+0x7f/0xb0 [ 2445.562005] ? do_vfs_ioctl+0xff0/0xff0 [ 2445.566085] do_syscall_64+0x1d5/0x640 [ 2445.569966] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2445.575141] RIP: 0033:0x466459 [ 2445.578311] RSP: 002b:00007fbc80168188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2445.586005] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 2445.593259] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2445.600526] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2445.607776] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2445.615025] R13: 00007ffc508a7f1f R14: 00007fbc80168300 R15: 0000000000022000 [ 2445.628206] / mems_allowed=0-1 [ 2445.632999] CPU: 1 PID: 15783 Comm: syz-executor.5 Not tainted 4.14.229-syzkaller #0 [ 2445.640571] syz-executor.4: [ 2445.643930] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2445.643935] Call Trace: [ 2445.643961] dump_stack+0x1b2/0x281 [ 2445.643978] warn_alloc.cold+0x96/0x1cc [ 2445.643992] ? zone_watermark_ok_safe+0x220/0x220 [ 2445.644015] __alloc_pages_nodemask+0x2127/0x2720 [ 2445.644026] ? __schedule+0x893/0x1de0 [ 2445.659240] syz-executor.1 cpuset= [ 2445.662603] ? lock_acquire+0x170/0x3f0 [ 2445.662621] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2445.662641] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2445.662654] ? __mutex_unlock_slowpath+0x75/0x770 [ 2445.662670] alloc_pages_current+0x155/0x260 [ 2445.674355] page allocation failure: order:4 [ 2445.676328] ion_page_pool_alloc+0x118/0x1b0 [ 2445.676340] ion_system_heap_allocate+0x133/0x8c0 [ 2445.676350] ? ion_alloc+0x187/0x810 [ 2445.676362] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2445.676372] ? ion_system_contig_heap_create+0x130/0x130 [ 2445.676381] ? rcu_read_lock_sched_held+0x16c/0x1d0 09:16:00 executing program 3: r0 = perf_event_open$cgroup(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = epoll_create(0x7) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x34, 0x0, 0x300, 0x70bd2b, 0x25dfdbff, {}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x3}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @remote}, @L2TP_ATTR_PEER_CONN_ID={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x40080}, 0x10) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000001c0)={0x20000005}) epoll_wait(r1, &(0x7f0000000100)=[{}], 0x1, 0x0) [ 2445.676394] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2445.685769] / [ 2445.687745] ion_alloc+0x204/0x810 [ 2445.701444] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 2445.702838] ? ion_dma_buf_release+0x40/0x40 [ 2445.702853] ? __might_fault+0x177/0x1b0 [ 2445.702867] ion_ioctl+0xea/0x1f0 [ 2445.702876] ? ion_query_heaps+0x360/0x360 [ 2445.702886] ? SyS_epoll_ctl+0x1e0/0x2780 [ 2445.702896] ? ion_query_heaps+0x360/0x360 [ 2445.715013] mems_allowed=0-1 [ 2445.716080] do_vfs_ioctl+0x75a/0xff0 09:16:00 executing program 3: getsockopt$packet_int(0xffffffffffffffff, 0x107, 0xb, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r0 = perf_event_open$cgroup(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = epoll_create(0x7) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000001c0)={0x20000005}) epoll_wait(r1, &(0x7f0000000100)=[{}], 0x1, 0x0) [ 2445.716094] ? ioctl_preallocate+0x1a0/0x1a0 [ 2445.716105] ? lock_downgrade+0x740/0x740 [ 2445.716124] ? __fget+0x225/0x360 [ 2445.716133] ? do_vfs_ioctl+0xff0/0xff0 [ 2445.716146] ? security_file_ioctl+0x83/0xb0 [ 2445.726477] (null) [ 2445.730102] SyS_ioctl+0x7f/0xb0 [ 2445.730111] ? do_vfs_ioctl+0xff0/0xff0 [ 2445.730129] do_syscall_64+0x1d5/0x640 [ 2445.730146] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2445.730155] RIP: 0033:0x466459 [ 2445.730160] RSP: 002b:00007f4d0bcd5188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2445.730171] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 2445.730176] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2445.730183] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2445.744588] syz-executor.4 cpuset= [ 2445.745446] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2445.745453] R13: 00007ffe1117a98f R14: 00007f4d0bcd5300 R15: 0000000000022000 [ 2445.800464] syz-executor.2: [ 2445.810005] CPU: 0 PID: 15791 Comm: syz-executor.1 Not tainted 4.14.229-syzkaller #0 [ 2445.812621] page allocation failure: order:4 [ 2445.815651] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2445.815655] Call Trace: [ 2445.815674] dump_stack+0x1b2/0x281 [ 2445.815687] warn_alloc.cold+0x96/0x1cc [ 2445.815700] ? zone_watermark_ok_safe+0x220/0x220 [ 2445.819862] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 2445.823542] __alloc_pages_nodemask+0x2127/0x2720 [ 2445.823559] ? lock_acquire+0x170/0x3f0 [ 2445.823575] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2445.832637] (null) [ 2445.839735] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2445.839750] ? __mutex_unlock_slowpath+0x75/0x770 [ 2445.839760] ? alloc_pages_current+0xe3/0x260 [ 2445.839770] alloc_pages_current+0x155/0x260 [ 2445.839784] ion_page_pool_alloc+0x118/0x1b0 [ 2445.839793] ion_system_heap_allocate+0x133/0x8c0 [ 2445.839802] ? ion_alloc+0x187/0x810 [ 2445.839811] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2445.839822] ? ion_system_contig_heap_create+0x130/0x130 [ 2445.853139] syz-executor.2 cpuset= [ 2445.854345] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2445.854362] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2445.854374] ion_alloc+0x204/0x810 [ 2445.863719] / [ 2445.865167] ? ion_dma_buf_release+0x40/0x40 [ 2445.873468] mems_allowed=0-1 [ 2445.879678] ? __might_fault+0x177/0x1b0 [ 2445.879692] ion_ioctl+0xea/0x1f0 [ 2445.879701] ? ion_query_heaps+0x360/0x360 [ 2445.879713] ? ion_query_heaps+0x360/0x360 [ 2445.879723] do_vfs_ioctl+0x75a/0xff0 [ 2445.879735] ? ioctl_preallocate+0x1a0/0x1a0 [ 2445.915525] warn_alloc_show_mem: 1 callbacks suppressed [ 2445.915528] Mem-Info: [ 2445.919281] ? lock_downgrade+0x740/0x740 [ 2445.919297] ? __fget+0x225/0x360 [ 2445.919307] ? do_vfs_ioctl+0xff0/0xff0 [ 2445.919318] ? security_file_ioctl+0x83/0xb0 [ 2445.919329] SyS_ioctl+0x7f/0xb0 [ 2445.919337] ? do_vfs_ioctl+0xff0/0xff0 [ 2445.919348] do_syscall_64+0x1d5/0x640 [ 2445.919362] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2445.933458] active_anon:15507 inactive_anon:44602 isolated_anon:12 [ 2445.933458] active_file:1382 inactive_file:3336 isolated_file:14 [ 2445.933458] unevictable:0 dirty:50 writeback:23 unstable:0 [ 2445.933458] slab_reclaimable:12655 slab_unreclaimable:121709 [ 2445.933458] mapped:55929 shmem:45846 pagetables:731 bounce:0 [ 2445.933458] free:252908 free_pcp:141 free_cma:0 [ 2445.935308] RIP: 0033:0x466459 [ 2445.935314] RSP: 002b:00007f10b67af188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2445.935327] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 09:16:00 executing program 3: r0 = perf_event_open$cgroup(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = epoll_create(0x7) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000001c0)={0x20000005}) epoll_wait(r1, &(0x7f0000000100)=[{}], 0x1, 0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000080)={0x21}) [ 2445.950463] Node 0 active_anon:60984kB inactive_anon:109696kB active_file:4648kB inactive_file:13196kB unevictable:0kB isolated(anon):0kB isolated(file):48kB mapped:187840kB dirty:192kB writeback:92kB shmem:114196kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 14336kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2445.952559] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2445.952565] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2445.952570] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2445.952576] R13: 00007ffd58825dcf R14: 00007f10b67af300 R15: 0000000000022000 [ 2446.185603] / mems_allowed=0-1 [ 2446.187595] CPU: 1 PID: 15802 Comm: syz-executor.2 Not tainted 4.14.229-syzkaller #0 [ 2446.197513] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2446.206876] Call Trace: [ 2446.209485] dump_stack+0x1b2/0x281 [ 2446.213116] warn_alloc.cold+0x96/0x1cc [ 2446.217105] ? zone_watermark_ok_safe+0x220/0x220 [ 2446.221964] __alloc_pages_nodemask+0x2127/0x2720 [ 2446.226798] ? io_schedule_timeout+0x140/0x140 [ 2446.231389] ? lock_acquire+0x170/0x3f0 [ 2446.235374] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2446.240230] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2446.245689] ? __mutex_unlock_slowpath+0x75/0x770 [ 2446.250543] alloc_pages_current+0x155/0x260 [ 2446.254958] ion_page_pool_alloc+0x118/0x1b0 [ 2446.259362] ion_system_heap_allocate+0x133/0x8c0 [ 2446.264209] ? ion_alloc+0x187/0x810 [ 2446.267935] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2446.273395] ? ion_system_contig_heap_create+0x130/0x130 [ 2446.278847] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2446.283883] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2446.288740] ion_alloc+0x204/0x810 [ 2446.292313] ? ion_dma_buf_release+0x40/0x40 [ 2446.296728] ? __might_fault+0x177/0x1b0 [ 2446.300794] ion_ioctl+0xea/0x1f0 [ 2446.304269] ? ion_query_heaps+0x360/0x360 [ 2446.308502] ? ion_query_heaps+0x360/0x360 [ 2446.312751] do_vfs_ioctl+0x75a/0xff0 [ 2446.316562] ? ioctl_preallocate+0x1a0/0x1a0 [ 2446.320977] ? lock_downgrade+0x740/0x740 [ 2446.325133] ? __fget+0x225/0x360 [ 2446.328592] ? do_vfs_ioctl+0xff0/0xff0 [ 2446.332591] ? security_file_ioctl+0x83/0xb0 [ 2446.337003] SyS_ioctl+0x7f/0xb0 [ 2446.340359] ? do_vfs_ioctl+0xff0/0xff0 [ 2446.344346] do_syscall_64+0x1d5/0x640 [ 2446.348250] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2446.353467] RIP: 0033:0x466459 [ 2446.356644] RSP: 002b:00007f3bc6e95188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2446.364358] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 2446.371633] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2446.379007] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2446.386282] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2446.393541] R13: 00007ffe618eb5ff R14: 00007f3bc6e95300 R15: 0000000000022000 [ 2446.423275] CPU: 0 PID: 15796 Comm: syz-executor.4 Not tainted 4.14.229-syzkaller #0 [ 2446.431320] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2446.440905] Call Trace: [ 2446.444558] dump_stack+0x1b2/0x281 [ 2446.448206] warn_alloc.cold+0x96/0x1cc [ 2446.452199] ? zone_watermark_ok_safe+0x220/0x220 [ 2446.457077] __alloc_pages_nodemask+0x2127/0x2720 [ 2446.461935] ? __schedule+0x893/0x1de0 [ 2446.465842] ? lock_acquire+0x170/0x3f0 [ 2446.469837] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2446.474700] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2446.480168] ? __mutex_unlock_slowpath+0x75/0x770 [ 2446.485025] alloc_pages_current+0x155/0x260 [ 2446.490832] ion_page_pool_alloc+0x118/0x1b0 [ 2446.495254] ion_system_heap_allocate+0x133/0x8c0 [ 2446.500106] ? ion_alloc+0x187/0x810 [ 2446.503819] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2446.509275] ? ion_system_contig_heap_create+0x130/0x130 [ 2446.514275] Node 1 active_anon:1044kB inactive_anon:68712kB active_file:952kB inactive_file:112kB unevictable:0kB isolated(anon):0kB isolated(file):8kB mapped:35880kB dirty:4kB writeback:0kB shmem:69188kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2446.514721] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2446.545680] syz-executor.4: [ 2446.546946] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2446.546958] ion_alloc+0x204/0x810 [ 2446.546973] ? ion_dma_buf_release+0x40/0x40 [ 2446.546985] ? __might_fault+0x177/0x1b0 [ 2446.546999] ion_ioctl+0xea/0x1f0 [ 2446.550138] page allocation failure: order:4 [ 2446.554941] ? ion_query_heaps+0x360/0x360 [ 2446.554957] ? ion_query_heaps+0x360/0x360 [ 2446.558728] syz-executor.2: [ 2446.562871] do_vfs_ioctl+0x75a/0xff0 [ 2446.562886] ? ioctl_preallocate+0x1a0/0x1a0 [ 2446.585497] page allocation failure: order:4 [ 2446.586210] ? lock_downgrade+0x740/0x740 [ 2446.593338] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 2446.594401] ? __fget+0x225/0x360 [ 2446.594413] ? do_vfs_ioctl+0xff0/0xff0 [ 2446.605498] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 2446.610111] ? security_file_ioctl+0x83/0xb0 [ 2446.610122] SyS_ioctl+0x7f/0xb0 [ 2446.610131] ? do_vfs_ioctl+0xff0/0xff0 [ 2446.610141] do_syscall_64+0x1d5/0x640 [ 2446.610155] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2446.610162] RIP: 0033:0x466459 [ 2446.610166] RSP: 002b:00007f46becae188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2446.610175] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 2446.610180] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2446.610188] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2446.622409] (null) [ 2446.624669] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2446.624675] R13: 00007ffe96c50ebf R14: 00007f46becae300 R15: 0000000000022000 [ 2446.707732] (null) [ 2446.709913] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 2446.715032] CPU: 1 PID: 15806 Comm: syz-executor.2 Not tainted 4.14.229-syzkaller #0 [ 2446.722908] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2446.732263] Call Trace: [ 2446.734860] dump_stack+0x1b2/0x281 [ 2446.738493] warn_alloc.cold+0x96/0x1cc [ 2446.742476] ? zone_watermark_ok_safe+0x220/0x220 [ 2446.747336] __alloc_pages_nodemask+0x2127/0x2720 [ 2446.752191] ? lock_acquire+0x170/0x3f0 [ 2446.756184] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2446.761036] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2446.766493] ? __mutex_unlock_slowpath+0x75/0x770 [ 2446.771352] ? __sanitizer_cov_trace_pc+0x4a/0x50 [ 2446.776206] alloc_pages_current+0x155/0x260 [ 2446.780626] ion_page_pool_alloc+0x118/0x1b0 [ 2446.785043] ion_system_heap_allocate+0x133/0x8c0 [ 2446.789895] ? ion_alloc+0x187/0x810 [ 2446.793615] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2446.799071] ? ion_system_contig_heap_create+0x130/0x130 [ 2446.804524] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2446.809550] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2446.814399] ion_alloc+0x204/0x810 [ 2446.817948] ? ion_dma_buf_release+0x40/0x40 [ 2446.822363] ? __might_fault+0x177/0x1b0 [ 2446.826432] ion_ioctl+0xea/0x1f0 [ 2446.829887] ? ion_query_heaps+0x360/0x360 [ 2446.834124] ? ion_query_heaps+0x360/0x360 [ 2446.838357] do_vfs_ioctl+0x75a/0xff0 [ 2446.842188] ? ioctl_preallocate+0x1a0/0x1a0 [ 2446.846600] ? lock_downgrade+0x740/0x740 [ 2446.850752] ? __fget+0x225/0x360 [ 2446.854208] ? do_vfs_ioctl+0xff0/0xff0 [ 2446.858186] ? security_file_ioctl+0x83/0xb0 [ 2446.862623] SyS_ioctl+0x7f/0xb0 [ 2446.865988] ? do_vfs_ioctl+0xff0/0xff0 [ 2446.869964] do_syscall_64+0x1d5/0x640 [ 2446.873856] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2446.879041] RIP: 0033:0x466459 [ 2446.882230] RSP: 002b:00007f3bc6e74188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2446.889935] RAX: ffffffffffffffda RBX: 000000000056c008 RCX: 0000000000466459 [ 2446.897207] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2446.904485] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2446.911759] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c008 [ 2446.919034] R13: 00007ffe618eb5ff R14: 00007f3bc6e74300 R15: 0000000000022000 [ 2446.947056] Node 0 DMA free:11860kB min:204kB low:252kB high:300kB active_anon:2056kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2447.036431] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2447.041510] Node 0 DMA32 free:527428kB min:36200kB low:45248kB high:54296kB active_anon:58992kB inactive_anon:109696kB active_file:4748kB inactive_file:13400kB unevictable:0kB writepending:224kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:7616kB pagetables:3104kB bounce:0kB free_pcp:296kB local_pcp:224kB free_cma:0kB [ 2447.116437] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 2447.121597] CPU: 1 PID: 15816 Comm: syz-executor.4 Not tainted 4.14.229-syzkaller #0 [ 2447.129478] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2447.139091] Call Trace: [ 2447.141683] dump_stack+0x1b2/0x281 [ 2447.145317] warn_alloc.cold+0x96/0x1cc [ 2447.149299] ? zone_watermark_ok_safe+0x220/0x220 [ 2447.154160] __alloc_pages_nodemask+0x2127/0x2720 [ 2447.159013] ? lock_acquire+0x170/0x3f0 [ 2447.162994] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2447.167844] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2447.173295] ? __mutex_unlock_slowpath+0x75/0x770 [ 2447.178141] alloc_pages_current+0x155/0x260 [ 2447.182552] ion_page_pool_alloc+0x118/0x1b0 [ 2447.186960] ion_system_heap_allocate+0x133/0x8c0 [ 2447.191805] ? ion_alloc+0x187/0x810 [ 2447.195519] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2447.200966] ? ion_system_contig_heap_create+0x130/0x130 [ 2447.206413] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2447.211430] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2447.216273] ion_alloc+0x204/0x810 [ 2447.219816] ? ion_dma_buf_release+0x40/0x40 [ 2447.224227] ? __might_fault+0x177/0x1b0 [ 2447.228291] ion_ioctl+0xea/0x1f0 [ 2447.231744] ? ion_query_heaps+0x360/0x360 [ 2447.235981] ? ion_query_heaps+0x360/0x360 [ 2447.240220] do_vfs_ioctl+0x75a/0xff0 [ 2447.244021] ? ioctl_preallocate+0x1a0/0x1a0 [ 2447.248433] ? lock_downgrade+0x740/0x740 [ 2447.252588] ? __fget+0x225/0x360 [ 2447.256042] ? do_vfs_ioctl+0xff0/0xff0 [ 2447.260017] ? security_file_ioctl+0x83/0xb0 [ 2447.264426] SyS_ioctl+0x7f/0xb0 [ 2447.267790] ? do_vfs_ioctl+0xff0/0xff0 [ 2447.271768] do_syscall_64+0x1d5/0x640 [ 2447.275658] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2447.280845] RIP: 0033:0x466459 [ 2447.284027] RSP: 002b:00007f46bec6c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2447.291730] RAX: ffffffffffffffda RBX: 000000000056c0b0 RCX: 0000000000466459 [ 2447.298997] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000004 [ 2447.306265] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2447.313550] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c0b0 [ 2447.320820] R13: 00007ffe96c50ebf R14: 00007f46bec6c300 R15: 0000000000022000 [ 2447.356400] lowmem_reserve[]: 0 0 0 0 0 [ 2447.360423] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2447.363202] warn_alloc_show_mem: 3 callbacks suppressed [ 2447.363206] Mem-Info: [ 2447.456586] lowmem_reserve[]: 0 0 0 0 0 [ 2447.460617] Node 1 Normal free:582220kB min:53696kB low:67120kB high:80544kB active_anon:1044kB inactive_anon:68712kB active_file:960kB inactive_file:108kB unevictable:0kB writepending:4kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:320kB pagetables:188kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 2447.483253] active_anon:15523 inactive_anon:44602 isolated_anon:0 [ 2447.483253] active_file:1527 inactive_file:3232 isolated_file:0 [ 2447.483253] unevictable:0 dirty:57 writeback:0 unstable:0 [ 2447.483253] slab_reclaimable:12630 slab_unreclaimable:122189 [ 2447.483253] mapped:56001 shmem:45846 pagetables:823 bounce:0 [ 2447.483253] free:202336 free_pcp:89 free_cma:0 [ 2447.529785] Node 0 active_anon:61048kB inactive_anon:109696kB active_file:5148kB inactive_file:12820kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:188124kB dirty:224kB writeback:0kB shmem:114196kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 14336kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2447.546487] lowmem_reserve[]: 0 0 0 0 0 [ 2447.597012] Node 0 DMA: 17*4kB (UME) 34*8kB (UME) 26*16kB (UME) 27*32kB (UME) 15*64kB (UME) 13*128kB (UM) 5*256kB (UME) 3*512kB (UME) 2*1024kB (ME) 1*2048kB (U) 0*4096kB = 11156kB [ 2447.650800] Node 1 active_anon:1044kB inactive_anon:68712kB active_file:960kB inactive_file:108kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:35880kB dirty:4kB writeback:0kB shmem:69188kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2447.650933] Node 0 [ 2447.696092] Node 0 DMA free:11116kB min:204kB low:252kB high:300kB active_anon:2056kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2447.739163] DMA32: [ 2447.810293] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2447.821513] 2*4kB [ 2447.825414] Node 0 DMA32 free:45208kB min:36200kB low:45248kB high:54296kB active_anon:58992kB inactive_anon:109696kB active_file:4748kB inactive_file:12872kB unevictable:0kB writepending:224kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:7616kB pagetables:3104kB bounce:0kB free_pcp:428kB local_pcp:192kB free_cma:0kB [ 2447.825438] lowmem_reserve[]: 0 0 0 0 0 [ 2447.840904] (UM) [ 2447.871946] Node 0 [ 2447.884886] 2*8kB (ME) 18*16kB (E) 1400*32kB (UE) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 45112kB [ 2447.899107] syz-executor.1: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2447.916442] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2447.925079] Node 0 [ 2447.951360] lowmem_reserve[]: 0 0 0 0 0 [ 2447.957740] Node 1 Normal free:53548kB min:53696kB low:67120kB high:80544kB active_anon:1044kB inactive_anon:68712kB active_file:960kB inactive_file:108kB unevictable:0kB writepending:8kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:320kB pagetables:188kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2447.989104] lowmem_reserve[]: 0 0 0 0 0 [ 2447.993114] Node 0 DMA: 12*4kB (ME) 24*8kB (UME) 26*16kB (UME) 27*32kB (UME) 15*64kB (UME) 13*128kB (UM) 5*256kB (UME) 3*512kB (UME) 2*1024kB (ME) 1*2048kB (U) 0*4096kB = 11056kB [ 2447.994117] syz-executor.1 cpuset= [ 2448.009419] Node 0 DMA32: 163*4kB (UME) 69*8kB (UME) 50*16kB (UME) 1098*32kB (UME) 2*64kB (U) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 37268kB [ 2448.031718] Normal: 0*4kB [ 2448.031728] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2448.034698] 0*8kB [ 2448.045462] / mems_allowed=0-1 [ 2448.055203] CPU: 1 PID: 15826 Comm: syz-executor.1 Not tainted 4.14.229-syzkaller #0 [ 2448.063075] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2448.072430] Call Trace: [ 2448.075005] dump_stack+0x1b2/0x281 [ 2448.078615] warn_alloc.cold+0x96/0x1cc [ 2448.082574] ? zone_watermark_ok_safe+0x220/0x220 [ 2448.087418] __alloc_pages_nodemask+0x2127/0x2720 [ 2448.092283] ? lock_acquire+0x170/0x3f0 [ 2448.096263] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2448.101097] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2448.106534] ? __mutex_unlock_slowpath+0x75/0x770 [ 2448.111377] ? retint_kernel+0x2d/0x2d [ 2448.115270] alloc_pages_current+0x155/0x260 [ 2448.119671] ion_page_pool_alloc+0x118/0x1b0 [ 2448.124062] ion_system_heap_allocate+0x133/0x8c0 [ 2448.128887] ? ion_alloc+0x187/0x810 [ 2448.132582] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2448.138012] ? ion_system_contig_heap_create+0x130/0x130 [ 2448.143442] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2448.148454] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2448.153278] ion_alloc+0x204/0x810 [ 2448.156804] ? ion_dma_buf_release+0x40/0x40 [ 2448.161194] ? __might_fault+0x177/0x1b0 [ 2448.165236] ion_ioctl+0xea/0x1f0 [ 2448.168691] ? ion_query_heaps+0x360/0x360 [ 2448.172914] ? _raw_spin_unlock+0x29/0x40 [ 2448.177055] ? ion_query_heaps+0x360/0x360 [ 2448.181271] do_vfs_ioctl+0x75a/0xff0 [ 2448.185054] ? ioctl_preallocate+0x1a0/0x1a0 [ 2448.189442] ? lock_downgrade+0x740/0x740 [ 2448.193588] ? __fget+0x225/0x360 [ 2448.197022] ? do_vfs_ioctl+0xff0/0xff0 [ 2448.200976] ? security_file_ioctl+0x83/0xb0 [ 2448.205364] SyS_ioctl+0x7f/0xb0 [ 2448.208711] ? do_vfs_ioctl+0xff0/0xff0 [ 2448.212665] do_syscall_64+0x1d5/0x640 [ 2448.216548] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2448.221724] RIP: 0033:0x466459 [ 2448.224898] RSP: 002b:00007f10b674c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2448.232591] RAX: ffffffffffffffda RBX: 000000000056c158 RCX: 0000000000466459 [ 2448.239846] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2448.247096] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2448.254347] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c158 [ 2448.261597] R13: 00007ffd58825dcf R14: 00007f10b674c300 R15: 0000000000022000 [ 2448.269216] Node 1 Normal: 7*4kB (UM) 4*8kB (UM) 6*16kB (UME) 1675*32kB (U) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 53756kB [ 2448.290899] 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2448.300845] Node 1 Normal: 25*4kB (UM) 7*8kB (UM) 8*16kB (UME) 1676*32kB (UM) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 53916kB [ 2448.323442] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2448.335282] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2448.348466] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2448.356324] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2448.357728] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2448.365608] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2448.365615] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2448.365619] 47230 total pagecache pages [ 2448.365630] 0 pages in swap cache [ 2448.365636] Swap cache stats: add 0, delete 0, find 0/0 [ 2448.365639] Free swap = 0kB [ 2448.365643] Total swap = 0kB [ 2448.365651] 2097051 pages RAM [ 2448.378387] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2448.432832] 0 pages HighMem/MovableOnly [ 2448.435890] 46605 total pagecache pages [ 2448.439649] 363848 pages reserved [ 2448.440989] 0 pages in swap cache [ 2448.444305] 0 pages cma reserved [ 2448.451449] Swap cache stats: add 0, delete 0, find 0/0 [ 2448.460887] Free swap = 0kB [ 2448.464061] Total swap = 0kB [ 2448.467266] 2097051 pages RAM [ 2448.470497] 0 pages HighMem/MovableOnly [ 2448.474608] 363848 pages reserved [ 2448.482507] 0 pages cma reserved [ 2448.487254] warn_alloc_show_mem: 2 callbacks suppressed [ 2448.487257] Mem-Info: [ 2448.495157] active_anon:15523 inactive_anon:44602 isolated_anon:0 [ 2448.495157] active_file:125 inactive_file:127 isolated_file:24 [ 2448.495157] unevictable:0 dirty:16 writeback:0 unstable:0 [ 2448.495157] slab_reclaimable:12630 slab_unreclaimable:122097 [ 2448.495157] mapped:52934 shmem:45846 pagetables:823 bounce:0 [ 2448.495157] free:25280 free_pcp:185 free_cma:0 [ 2448.529186] Node 0 active_anon:61048kB inactive_anon:109696kB active_file:124kB inactive_file:124kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:176156kB dirty:56kB writeback:0kB shmem:114196kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 14336kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2448.647791] Node 1 active_anon:1044kB inactive_anon:68712kB active_file:80kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:34880kB dirty:8kB writeback:0kB shmem:69188kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2448.912924] Node 0 DMA free:11056kB min:204kB low:252kB high:300kB active_anon:2056kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2448.915904] syz-executor.0 invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 2449.207538] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2449.212614] Node 0 DMA32 free:36132kB min:36200kB low:45248kB high:54296kB active_anon:58992kB inactive_anon:109696kB active_file:56kB inactive_file:20kB unevictable:0kB writepending:0kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:7616kB pagetables:3104kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2449.275695] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 2449.325432] CPU: 0 PID: 11713 Comm: syz-executor.0 Not tainted 4.14.229-syzkaller #0 [ 2449.333457] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2449.342805] Call Trace: [ 2449.345398] dump_stack+0x1b2/0x281 [ 2449.349022] dump_header+0x178/0x82f [ 2449.352731] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2449.357832] ? ___ratelimit+0x2cd/0x530 [ 2449.361803] oom_kill_process.cold+0x10/0xa40 [ 2449.366310] out_of_memory+0xe3e/0x1190 [ 2449.370282] ? oom_killer_disable+0x1c0/0x1c0 [ 2449.374773] ? mutex_trylock+0x152/0x1a0 [ 2449.378830] __alloc_pages_nodemask+0x23e1/0x2720 [ 2449.383678] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2449.388535] alloc_pages_current+0x155/0x260 [ 2449.392941] filemap_fault+0x11a1/0x1ad0 [ 2449.397009] ext4_filemap_fault+0x84/0xb0 [ 2449.401151] __do_fault+0xfa/0x380 [ 2449.404683] __handle_mm_fault+0x2497/0x4620 [ 2449.409091] ? vm_insert_page+0x7c0/0x7c0 [ 2449.413318] ? hrtimer_nanosleep+0x1ff/0x4b0 [ 2449.417806] ? nanosleep_copyout+0x100/0x100 [ 2449.422216] ? mark_held_locks+0xa6/0xf0 [ 2449.426274] handle_mm_fault+0x455/0x9c0 [ 2449.430335] __do_page_fault+0x549/0xad0 [ 2449.434395] ? spurious_fault+0x640/0x640 [ 2449.438548] ? do_page_fault+0x60/0x500 [ 2449.442519] ? page_fault+0x2f/0x50 [ 2449.446155] page_fault+0x45/0x50 [ 2449.449597] RIP: 2552fc:0x3 [ 2449.452519] RSP: 0039:00007ffc508a81dc EFLAGS: 0000001c [ 2449.544247] lowmem_reserve[]: 0 0 0 0 0 [ 2449.641148] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2449.857033] Mem-Info: [ 2449.859498] active_anon:15523 inactive_anon:44602 isolated_anon:0 [ 2449.859498] active_file:13 inactive_file:0 isolated_file:12 [ 2449.859498] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2449.859498] slab_reclaimable:12622 slab_unreclaimable:122060 [ 2449.859498] mapped:52731 shmem:45846 pagetables:823 bounce:0 [ 2449.859498] free:25077 free_pcp:36 free_cma:0 [ 2449.860360] lowmem_reserve[]: 0 0 0 0 0 [ 2449.892828] Node 1 Normal free:53160kB min:53696kB low:67120kB high:80544kB active_anon:1044kB inactive_anon:68712kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:320kB pagetables:188kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2449.892848] lowmem_reserve[]: 0 0 0 0 0 [ 2449.892866] Node 0 DMA: 12*4kB (ME) 24*8kB [ 2449.896999] Node 0 active_anon:61048kB inactive_anon:109696kB active_file:48kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):48kB mapped:176108kB dirty:0kB writeback:0kB shmem:114196kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 14336kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2449.926379] (UME) [ 2449.932453] Node 1 active_anon:1044kB inactive_anon:68712kB active_file:4kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:34816kB dirty:0kB writeback:0kB shmem:69188kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2449.933376] 26*16kB [ 2449.964601] Node 0 DMA free:11056kB min:204kB low:252kB high:300kB active_anon:2056kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2450.002149] (UME) [ 2450.033735] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2450.040950] Node 0 DMA32 free:36192kB min:36200kB low:45248kB high:54296kB active_anon:58992kB inactive_anon:109696kB active_file:48kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:7616kB pagetables:3104kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2450.044424] 27*32kB [ 2450.073745] lowmem_reserve[]: [ 2450.076167] (UME) [ 2450.076694] 0 [ 2450.079320] 15*64kB (UME) 13*128kB (UM) 5*256kB (UME) 3*512kB (UME) 2*1024kB (ME) 1*2048kB (U) 0*4096kB = 11056kB [ 2450.079366] Node 0 DMA32: 352*4kB (UME) 433*8kB (UME) [ 2450.081854] 0 [ 2450.083298] 105*16kB (UME) 940*32kB (UME) 17*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 37720kB [ 2450.083343] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB [ 2450.097526] 0 [ 2450.099113] = 0kB [ 2450.101788] 0 [ 2450.126317] Node 1 Normal: 52*4kB (UM) 29*8kB (UM) 19*16kB (UME) 1636*32kB (UM) 1*64kB (M) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 53160kB [ 2450.132355] 0 [ 2450.143728] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2450.156156] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2450.175177] lowmem_reserve[]: 0 0 0 0 0 [ 2450.184187] Node 1 Normal free:53160kB min:53696kB low:67120kB high:80544kB active_anon:1044kB inactive_anon:68712kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:320kB pagetables:188kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2450.191143] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2450.217761] lowmem_reserve[]: 0 0 0 0 0 [ 2450.221828] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2450.225750] Node 0 [ 2450.234860] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2450.238008] DMA: 12*4kB (ME) 24*8kB (UME) 26*16kB (UME) [ 2450.245715] 45870 total pagecache pages [ 2450.245717] 27*32kB (UME) 15*64kB (UME) 13*128kB (UM) 5*256kB (UME) 3*512kB (UME) 2*1024kB (ME) 1*2048kB (U) 0*4096kB = 11056kB [ 2450.268403] 0 pages in swap cache [ 2450.272883] Node 0 DMA32: 389*4kB (ME) 231*8kB (ME) 91*16kB (ME) 923*32kB (UME) 17*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 35484kB [ 2450.287326] Swap cache stats: add 0, delete 0, find 0/0 [ 2450.302126] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2450.306299] Free swap = 0kB [ 2450.314582] Node 1 Normal: 52*4kB (UM) 29*8kB (UM) 19*16kB (UME) 1636*32kB (UM) 1*64kB (M) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 53160kB [ 2450.329475] Total swap = 0kB [ 2450.339826] 2097051 pages RAM [ 2450.341551] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2450.342916] 0 pages HighMem/MovableOnly [ 2450.351782] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2450.351790] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2450.355743] 363848 pages reserved [ 2450.368956] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2450.385332] 0 pages cma reserved [ 2450.386717] 45870 total pagecache pages [ 2450.392678] 0 pages in swap cache [ 2450.404817] Swap cache stats: add 0, delete 0, find 0/0 [ 2450.410221] Free swap = 0kB [ 2450.413358] Total swap = 0kB [ 2450.419793] 2097051 pages RAM [ 2450.422949] 0 pages HighMem/MovableOnly [ 2450.426948] 363848 pages reserved [ 2450.430391] 0 pages cma reserved [ 2450.433747] Out of memory (oom_kill_allocating_task): Kill process 11713 (syz-executor.0) score 0 or sacrifice child [ 2450.448393] Killed process 15789 (syz-executor.0) total-vm:93252kB, anon-rss:148kB, file-rss:34820kB, shmem-rss:0kB [ 2450.496365] oom_reaper: reaped process 15789 (syz-executor.0), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 2450.544322] oom_reaper: reaped process 15783 (syz-executor.5), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 2450.589262] oom_reaper: reaped process 15816 (syz-executor.4), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 2450.606226] syz-executor.4: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2450.622787] syz-executor.0 invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 2450.642829] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 2450.646170] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 2450.654406] CPU: 0 PID: 15816 Comm: syz-executor.4 Not tainted 4.14.229-syzkaller #0 [ 2450.662309] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2450.671652] Call Trace: [ 2450.674244] dump_stack+0x1b2/0x281 [ 2450.676147] syz-executor.5: page allocation failure: order:0 [ 2450.677863] warn_alloc.cold+0x96/0x1cc [ 2450.677875] ? zone_watermark_ok_safe+0x220/0x220 [ 2450.683652] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 2450.687604] ? usleep_range+0x130/0x130 [ 2450.687613] ? try_to_free_pages+0x23f/0x6e0 [ 2450.687622] ? _find_next_bit+0xdb/0x100 [ 2450.687638] ? run_timer_softirq+0x5a0/0x5a0 [ 2450.687655] __alloc_pages_nodemask+0x2127/0x2720 [ 2450.687672] ? lock_acquire+0x170/0x3f0 [ 2450.687685] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2450.687696] ? ion_page_pool_alloc+0x9e/0x1b0 [ 2450.729765] (null) [ 2450.730956] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2450.735421] syz-executor.5 cpuset= [ 2450.737563] alloc_pages_current+0x155/0x260 [ 2450.737578] ion_page_pool_alloc+0x118/0x1b0 [ 2450.737588] ion_system_heap_allocate+0x133/0x8c0 [ 2450.737599] ? ion_alloc+0x187/0x810 [ 2450.737611] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2450.769276] ? ion_system_contig_heap_create+0x130/0x130 [ 2450.771537] / [ 2450.774718] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2450.774727] mems_allowed=0-1 [ 2450.776422] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2450.776435] ion_alloc+0x204/0x810 [ 2450.776449] ? ion_dma_buf_release+0x40/0x40 [ 2450.776461] ? __might_fault+0x177/0x1b0 [ 2450.776475] ion_ioctl+0xea/0x1f0 [ 2450.804799] ? ion_query_heaps+0x360/0x360 [ 2450.809029] ? ion_query_heaps+0x360/0x360 [ 2450.813264] do_vfs_ioctl+0x75a/0xff0 [ 2450.817067] ? ioctl_preallocate+0x1a0/0x1a0 [ 2450.821476] ? lock_downgrade+0x740/0x740 [ 2450.825612] ? __fget+0x225/0x360 [ 2450.829053] ? do_vfs_ioctl+0xff0/0xff0 [ 2450.833025] ? security_file_ioctl+0x83/0xb0 [ 2450.837430] SyS_ioctl+0x7f/0xb0 [ 2450.840783] ? do_vfs_ioctl+0xff0/0xff0 [ 2450.844741] do_syscall_64+0x1d5/0x640 [ 2450.848629] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2450.853812] RIP: 0033:0x466459 [ 2450.856988] RSP: 002b:00007f46bec6c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2450.864686] RAX: ffffffffffffffda RBX: 000000000056c0b0 RCX: 0000000000466459 [ 2450.871950] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000004 [ 2450.879228] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2450.886484] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c0b0 [ 2450.893740] R13: 00007ffe96c50ebf R14: 00007f46bec6c300 R15: 0000000000022000 [ 2450.901009] CPU: 1 PID: 15783 Comm: syz-executor.5 Not tainted 4.14.229-syzkaller #0 [ 2450.908897] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2450.918248] Call Trace: [ 2450.920839] dump_stack+0x1b2/0x281 [ 2450.924474] warn_alloc.cold+0x96/0x1cc [ 2450.928446] ? zone_watermark_ok_safe+0x220/0x220 [ 2450.933285] ? usleep_range+0x130/0x130 [ 2450.937255] ? try_to_free_pages+0x23f/0x6e0 [ 2450.941660] ? _find_next_bit+0xdb/0x100 [ 2450.945717] ? run_timer_softirq+0x5a0/0x5a0 [ 2450.950126] __alloc_pages_nodemask+0x2127/0x2720 [ 2450.953811] Mem-Info: [ 2450.954965] ? lock_acquire+0x170/0x3f0 [ 2450.957383] active_anon:15443 inactive_anon:44602 isolated_anon:0 [ 2450.957383] active_file:12 inactive_file:13 isolated_file:0 [ 2450.957383] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2450.957383] slab_reclaimable:12622 slab_unreclaimable:121213 [ 2450.957383] mapped:52731 shmem:45846 pagetables:823 bounce:0 [ 2450.957383] free:13971 free_pcp:42 free_cma:0 [ 2450.961317] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2450.994461] Node 0 active_anon:60728kB inactive_anon:109696kB active_file:48kB inactive_file:48kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:176108kB dirty:0kB writeback:0kB shmem:114196kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 14336kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2450.999254] ? ion_page_pool_alloc+0x9e/0x1b0 [ 2450.999273] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2451.027129] Node 1 active_anon:1044kB inactive_anon:68712kB active_file:0kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:34816kB dirty:0kB writeback:0kB shmem:69188kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2451.031585] alloc_pages_current+0x155/0x260 [ 2451.037013] Node 0 [ 2451.064045] ion_page_pool_alloc+0x118/0x1b0 [ 2451.064055] ion_system_heap_allocate+0x133/0x8c0 [ 2451.064063] ? ion_alloc+0x187/0x810 [ 2451.064073] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2451.064080] ? ion_system_contig_heap_create+0x130/0x130 [ 2451.064089] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2451.064100] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2451.064109] ion_alloc+0x204/0x810 [ 2451.064122] ? ion_dma_buf_release+0x40/0x40 [ 2451.068628] DMA free:10972kB min:204kB low:252kB high:300kB active_anon:2056kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2451.070723] ? __might_fault+0x177/0x1b0 [ 2451.075099] lowmem_reserve[]: [ 2451.080271] ion_ioctl+0xea/0x1f0 [ 2451.080281] ? ion_query_heaps+0x360/0x360 [ 2451.080293] ? SyS_epoll_ctl+0x1e0/0x2780 [ 2451.083976] 0 [ 2451.089406] ? ion_query_heaps+0x360/0x360 [ 2451.089416] do_vfs_ioctl+0x75a/0xff0 [ 2451.089428] ? ioctl_preallocate+0x1a0/0x1a0 [ 2451.094846] 2717 [ 2451.099839] ? lock_downgrade+0x740/0x740 [ 2451.099853] ? __fget+0x225/0x360 [ 2451.099863] ? do_vfs_ioctl+0xff0/0xff0 [ 2451.104679] 2718 [ 2451.108199] ? security_file_ioctl+0x83/0xb0 [ 2451.108209] SyS_ioctl+0x7f/0xb0 [ 2451.108218] ? do_vfs_ioctl+0xff0/0xff0 [ 2451.112610] 2718 [ 2451.138454] do_syscall_64+0x1d5/0x640 [ 2451.138471] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2451.138478] RIP: 0033:0x466459 [ 2451.138486] RSP: 002b:00007f4d0bcd5188 EFLAGS: 00000246 [ 2451.142531] 2718 [ 2451.145614] ORIG_RAX: 0000000000000010 [ 2451.145622] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 2451.153268] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2451.157410] Node 0 [ 2451.159173] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2451.163390] DMA32 free:18096kB min:36200kB low:45248kB high:54296kB active_anon:58672kB inactive_anon:109696kB active_file:48kB inactive_file:48kB unevictable:0kB writepending:0kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:7616kB pagetables:3104kB bounce:0kB free_pcp:48kB local_pcp:0kB free_cma:0kB [ 2451.167158] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2451.167164] R13: 00007ffe1117a98f R14: 00007f4d0bcd5300 R15: 0000000000022000 [ 2451.179823] CPU: 1 PID: 11713 Comm: syz-executor.0 Not tainted 4.14.229-syzkaller #0 [ 2451.186113] syz-executor.4: [ 2451.187463] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2451.191845] page allocation failure: order:0 [ 2451.195183] Call Trace: [ 2451.231788] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 2451.231978] dump_stack+0x1b2/0x281 [ 2451.242982] lowmem_reserve[]: [ 2451.248704] dump_header+0x178/0x82f [ 2451.248718] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2451.280684] (null) [ 2451.284163] ? ___ratelimit+0x2cd/0x530 [ 2451.302648] syz-executor.4 cpuset= [ 2451.311619] oom_kill_process.cold+0x10/0xa40 [ 2451.311640] out_of_memory+0xe3e/0x1190 [ 2451.318668] / [ 2451.325679] ? oom_killer_disable+0x1c0/0x1c0 [ 2451.329303] 0 [ 2451.332358] ? mutex_trylock+0x152/0x1a0 [ 2451.336068] mems_allowed=0-1 [ 2451.341139] __alloc_pages_nodemask+0x23e1/0x2720 [ 2451.346021] 0 [ 2451.347247] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2451.350747] 0 [ 2451.355236] alloc_pages_current+0x155/0x260 [ 2451.366015] 0 [ 2451.367133] filemap_fault+0x11a1/0x1ad0 [ 2451.371161] 0 [ 2451.374253] ext4_filemap_fault+0x84/0xb0 [ 2451.397646] __do_fault+0xfa/0x380 [ 2451.399420] Node 0 [ 2451.403544] __handle_mm_fault+0x2497/0x4620 [ 2451.413655] ? vm_insert_page+0x7c0/0x7c0 [ 2451.416026] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2451.417783] ? hrtimer_nanosleep+0x1ff/0x4b0 [ 2451.447035] ? nanosleep_copyout+0x100/0x100 [ 2451.451429] ? mark_held_locks+0xa6/0xf0 [ 2451.455468] handle_mm_fault+0x455/0x9c0 [ 2451.459597] __do_page_fault+0x549/0xad0 [ 2451.463639] ? spurious_fault+0x640/0x640 [ 2451.466007] lowmem_reserve[]: 0 [ 2451.467765] ? do_page_fault+0x60/0x500 [ 2451.467774] ? page_fault+0x2f/0x50 [ 2451.471026] 0 [ 2451.474980] page_fault+0x45/0x50 [ 2451.483789] RIP: 2552fc:0x3 [ 2451.486700] RSP: 0039:00007ffc508a81dc EFLAGS: 0000001c [ 2451.486719] CPU: 0 PID: 15796 Comm: syz-executor.4 Not tainted 4.14.229-syzkaller #0 [ 2451.499944] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2451.503374] syz-executor.5: [ 2451.509286] Call Trace: [ 2451.509308] dump_stack+0x1b2/0x281 [ 2451.509321] warn_alloc.cold+0x96/0x1cc [ 2451.509333] ? zone_watermark_ok_safe+0x220/0x220 [ 2451.509343] ? usleep_range+0x130/0x130 [ 2451.509353] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 2451.509363] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 2451.509374] ? run_timer_softirq+0x5a0/0x5a0 [ 2451.517977] page allocation failure: order:4 [ 2451.518557] __alloc_pages_nodemask+0x2127/0x2720 [ 2451.522500] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 2451.527328] ? lock_acquire+0x170/0x3f0 [ 2451.527341] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2451.527349] ? ion_page_pool_alloc+0x9e/0x1b0 [ 2451.527362] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2451.527380] alloc_pages_current+0x155/0x260 [ 2451.527391] ion_page_pool_alloc+0x118/0x1b0 [ 2451.527400] ion_system_heap_allocate+0x133/0x8c0 [ 2451.527409] ? ion_alloc+0x187/0x810 [ 2451.527419] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2451.527427] ? ion_system_contig_heap_create+0x130/0x130 [ 2451.527435] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2451.527452] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2451.533391] (null) [ 2451.536479] ion_alloc+0x204/0x810 [ 2451.536493] ? ion_dma_buf_release+0x40/0x40 [ 2451.536504] ? __might_fault+0x177/0x1b0 [ 2451.536516] ion_ioctl+0xea/0x1f0 [ 2451.536529] ? ion_query_heaps+0x360/0x360 [ 2451.544514] syz-executor.5 cpuset= [ 2451.545939] ? ion_query_heaps+0x360/0x360 [ 2451.553077] / [ 2451.555147] do_vfs_ioctl+0x75a/0xff0 [ 2451.563965] Mem-Info: [ 2451.566282] ? ioctl_preallocate+0x1a0/0x1a0 [ 2451.566293] ? lock_downgrade+0x740/0x740 [ 2451.566307] ? __fget+0x225/0x360 [ 2451.566316] ? do_vfs_ioctl+0xff0/0xff0 [ 2451.566329] ? security_file_ioctl+0x83/0xb0 [ 2451.574319] active_anon:15443 inactive_anon:44602 isolated_anon:0 [ 2451.574319] active_file:12 inactive_file:13 isolated_file:0 [ 2451.574319] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2451.574319] slab_reclaimable:12622 slab_unreclaimable:121213 [ 2451.574319] mapped:52731 shmem:45846 pagetables:823 bounce:0 [ 2451.574319] free:15223 free_pcp:344 free_cma:0 [ 2451.575619] SyS_ioctl+0x7f/0xb0 [ 2451.583117] mems_allowed=0-1 [ 2451.585442] ? do_vfs_ioctl+0xff0/0xff0 [ 2451.592441] Node 0 active_anon:60728kB inactive_anon:109696kB active_file:48kB inactive_file:48kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:176108kB dirty:0kB writeback:0kB shmem:114196kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 14336kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2451.594658] do_syscall_64+0x1d5/0x640 [ 2451.609691] Node 1 active_anon:1044kB inactive_anon:68712kB active_file:0kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:34816kB dirty:0kB writeback:0kB shmem:69188kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2451.614193] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2451.637731] Node 0 [ 2451.640701] RIP: 0033:0x466459 [ 2451.644226] DMA free:10972kB min:204kB low:252kB high:300kB active_anon:2056kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2451.648434] RSP: 002b:00007f46becae188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2451.648449] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 2451.648454] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2451.648459] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2451.648464] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2451.648469] R13: 00007ffe96c50ebf R14: 00007f46becae300 R15: 0000000000022000 [ 2451.649810] syz-executor.0: [ 2451.654022] CPU: 1 PID: 15783 Comm: syz-executor.5 Not tainted 4.14.229-syzkaller #0 [ 2451.677885] page allocation failure: order:0 [ 2451.709895] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2451.709899] Call Trace: [ 2451.709918] dump_stack+0x1b2/0x281 [ 2451.709934] warn_alloc.cold+0x96/0x1cc [ 2451.713292] 0 [ 2451.716373] ? zone_watermark_ok_safe+0x220/0x220 [ 2451.716397] __alloc_pages_nodemask+0x2127/0x2720 [ 2451.720353] 0 [ 2451.750525] ? lock_acquire+0x170/0x3f0 [ 2451.750542] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2451.754410] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 2451.781507] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2451.781521] ? __mutex_unlock_slowpath+0x75/0x770 [ 2451.781539] alloc_pages_current+0x155/0x260 [ 2451.786738] 0 [ 2451.788930] ion_page_pool_alloc+0x118/0x1b0 [ 2451.792197] Node 1 [ 2451.818248] ion_system_heap_allocate+0x133/0x8c0 [ 2451.818262] ? _raw_spin_unlock+0x29/0x40 [ 2451.818269] ? _ion_heap_freelist_drain+0x6e/0x410 [ 2451.818277] ? ion_system_contig_heap_create+0x130/0x130 [ 2451.818286] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2451.818301] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2451.826048] (null) [ 2451.833264] ion_alloc+0x27a/0x810 [ 2451.840549] Normal free:30816kB min:53696kB low:67120kB high:80544kB active_anon:1044kB inactive_anon:68712kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:320kB pagetables:188kB bounce:0kB free_pcp:752kB local_pcp:120kB free_cma:0kB [ 2451.847761] ? ion_dma_buf_release+0x40/0x40 [ 2451.847778] ? __might_fault+0x177/0x1b0 [ 2451.855035] syz-executor.0 cpuset= [ 2451.862289] ion_ioctl+0xea/0x1f0 [ 2451.862298] ? ion_query_heaps+0x360/0x360 [ 2451.862312] ? SyS_epoll_ctl+0x1e0/0x2780 [ 2451.865306] / [ 2451.873176] ? ion_query_heaps+0x360/0x360 [ 2451.877580] lowmem_reserve[]: [ 2451.886891] do_vfs_ioctl+0x75a/0xff0 [ 2451.886903] ? ioctl_preallocate+0x1a0/0x1a0 [ 2451.886914] ? lock_downgrade+0x740/0x740 [ 2451.889492] mems_allowed=0-1 [ 2451.893109] ? __fget+0x225/0x360 [ 2451.897077] 0 [ 2451.898842] ? do_vfs_ioctl+0xff0/0xff0 [ 2451.903650] 0 [ 2451.908470] ? security_file_ioctl+0x83/0xb0 [ 2451.908479] SyS_ioctl+0x7f/0xb0 [ 2451.908488] ? do_vfs_ioctl+0xff0/0xff0 [ 2451.925968] 0 [ 2451.926964] do_syscall_64+0x1d5/0x640 [ 2451.932383] 0 [ 2451.937213] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2451.937222] RIP: 0033:0x466459 [ 2451.955964] 0 [ 2451.958917] RSP: 002b:00007f4d0bcd5188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2451.969247] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 2451.969253] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2451.969259] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2451.969264] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2451.969272] R13: 00007ffe1117a98f R14: 00007f4d0bcd5300 R15: 0000000000022000 [ 2451.995964] Node 0 [ 2452.018453] lowmem_reserve[]: [ 2452.047996] warn_alloc_show_mem: 1 callbacks suppressed [ 2452.047999] Mem-Info: [ 2452.055107] 0 [ 2452.085680] active_anon:15443 inactive_anon:44602 isolated_anon:0 [ 2452.085680] active_file:13 inactive_file:12 isolated_file:0 [ 2452.085680] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2452.085680] slab_reclaimable:12622 slab_unreclaimable:121192 [ 2452.085680] mapped:52731 shmem:45846 pagetables:823 bounce:0 [ 2452.085680] free:15331 free_pcp:350 free_cma:0 [ 2452.089574] CPU: 1 PID: 15789 Comm: syz-executor.0 Not tainted 4.14.229-syzkaller #0 [ 2452.107037] Node 0 active_anon:60728kB inactive_anon:109696kB active_file:48kB inactive_file:48kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:176108kB dirty:0kB writeback:0kB shmem:114196kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 14336kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2452.109601] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2452.116988] DMA: [ 2452.124213] Call Trace: [ 2452.131666] Node 1 active_anon:1044kB inactive_anon:68712kB active_file:4kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:34816kB dirty:0kB writeback:0kB shmem:69188kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2452.138892] dump_stack+0x1b2/0x281 [ 2452.138906] warn_alloc.cold+0x96/0x1cc [ 2452.146166] 13*4kB [ 2452.148377] ? zone_watermark_ok_safe+0x220/0x220 [ 2452.151449] (UME) [ 2452.156790] ? usleep_range+0x130/0x130 [ 2452.156800] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 2452.156814] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 2452.159198] Node 0 [ 2452.160991] ? run_timer_softirq+0x5a0/0x5a0 [ 2452.194209] 19*8kB [ 2452.202057] __alloc_pages_nodemask+0x2127/0x2720 [ 2452.202075] ? lock_acquire+0x170/0x3f0 [ 2452.229921] DMA free:10972kB min:204kB low:252kB high:300kB active_anon:2056kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2452.239753] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2452.239766] ? ion_page_pool_alloc+0x9e/0x1b0 [ 2452.241804] (ME) [ 2452.244369] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2452.271331] lowmem_reserve[]: [ 2452.274932] alloc_pages_current+0x155/0x260 [ 2452.278881] 0 [ 2452.281089] ion_page_pool_alloc+0x118/0x1b0 [ 2452.285896] 2717 2718 [ 2452.288034] ion_system_heap_allocate+0x133/0x8c0 [ 2452.288043] ? ion_alloc+0x187/0x810 [ 2452.288055] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2452.292000] 2718 [ 2452.297092] ? ion_system_contig_heap_create+0x130/0x130 [ 2452.297102] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2452.297115] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2452.302104] 23*16kB [ 2452.304315] ion_alloc+0x204/0x810 [ 2452.309246] 2718 [ 2452.311451] ? ion_dma_buf_release+0x40/0x40 [ 2452.316281] (UME) [ 2452.320221] ? __might_fault+0x177/0x1b0 [ 2452.350863] ion_ioctl+0xea/0x1f0 [ 2452.355324] Node 0 [ 2452.357366] ? ion_query_heaps+0x360/0x360 [ 2452.357378] ? ion_query_heaps+0x360/0x360 [ 2452.357389] do_vfs_ioctl+0x75a/0xff0 [ 2452.362824] DMA32 free:19444kB min:36200kB low:45248kB high:54296kB active_anon:58672kB inactive_anon:109696kB active_file:48kB inactive_file:48kB unevictable:0kB writepending:0kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:7616kB pagetables:3104kB bounce:0kB free_pcp:648kB local_pcp:24kB free_cma:0kB [ 2452.365897] ? ioctl_preallocate+0x1a0/0x1a0 [ 2452.370298] 27*32kB [ 2452.372069] ? lock_downgrade+0x740/0x740 [ 2452.376461] lowmem_reserve[]: [ 2452.378927] ? __fget+0x225/0x360 [ 2452.383733] 0 [ 2452.387425] ? do_vfs_ioctl+0xff0/0xff0 [ 2452.387437] ? security_file_ioctl+0x83/0xb0 [ 2452.387447] SyS_ioctl+0x7f/0xb0 [ 2452.392872] (UME) [ 2452.394912] ? do_vfs_ioctl+0xff0/0xff0 [ 2452.400348] 15*64kB [ 2452.405327] do_syscall_64+0x1d5/0x640 [ 2452.410153] 0 [ 2452.412449] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2452.415969] 0 [ 2452.418000] RIP: 0033:0x466459 [ 2452.422376] 0 [ 2452.424503] RSP: 002b:00007fbc80168188 EFLAGS: 00000246 [ 2452.428553] (UME) [ 2452.431969] ORIG_RAX: 0000000000000010 [ 2452.434180] 13*128kB [ 2452.438385] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 2452.438391] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2452.438396] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2452.438402] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2452.438409] R13: 00007ffc508a7f1f R14: 00007fbc80168300 R15: 0000000000022000 [ 2452.442618] 0 [ 2452.453085] 2717 [ 2452.514575] (UM) [ 2452.518178] 2718 2718 2718 [ 2452.518191] Node 0 DMA32 free:19444kB min:36200kB low:45248kB high:54296kB active_anon:58672kB inactive_anon:109696kB active_file:48kB inactive_file:48kB unevictable:0kB writepending:0kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:7616kB pagetables:3104kB bounce:0kB free_pcp:648kB local_pcp:624kB free_cma:0kB [ 2452.518210] lowmem_reserve[]: 0 0 0 0 0 [ 2452.518227] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2452.518243] lowmem_reserve[]: 0 0 0 0 0 [ 2452.551321] 5*256kB [ 2452.553144] Node 1 [ 2452.582965] (UME) [ 2452.587945] Normal free:30908kB min:53696kB low:67120kB high:80544kB active_anon:1044kB inactive_anon:68712kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:320kB pagetables:188kB bounce:0kB free_pcp:752kB local_pcp:632kB free_cma:0kB [ 2452.608106] 3*512kB [ 2452.623957] lowmem_reserve[]: [ 2452.647349] (UME) [ 2452.653880] 0 [ 2452.654330] 2*1024kB [ 2452.656681] 0 0 0 0 [ 2452.656697] Node 0 DMA: 13*4kB (UME) 19*8kB (ME) 23*16kB (UME) 27*32kB (UME) 15*64kB (UME) 13*128kB (UM) 5*256kB (UME) 3*512kB (UME) 2*1024kB (ME) 1*2048kB (U) 0*4096kB = 10972kB [ 2452.656772] Node 0 DMA32: 421*4kB (UME) 380*8kB (UME) 107*16kB (UME) 374*32kB (UME) 17*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 19492kB [ 2452.656829] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB [ 2452.692811] 0*64kB [ 2452.694572] Node 0 [ 2452.696738] 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2452.696762] Node 1 Normal: 61*4kB (UM) 35*8kB (UM) 29*16kB (UME) 933*32kB (UM) 1*64kB (M) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 30908kB [ 2452.696826] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2452.696831] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2452.696837] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2452.696842] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2452.696846] 45871 total pagecache pages [ 2452.696853] 0 pages in swap cache [ 2452.696858] Swap cache stats: add 0, delete 0, find 0/0 [ 2452.696861] Free swap = 0kB [ 2452.696864] Total swap = 0kB [ 2452.696869] 2097051 pages RAM [ 2452.696872] 0 pages HighMem/MovableOnly [ 2452.696875] 363848 pages reserved [ 2452.696878] 0 pages cma reserved [ 2452.696885] Out of memory (oom_kill_allocating_task): Kill process 11713 (syz-executor.0) score 0 or sacrifice child [ 2452.696913] Killed process 11713 (syz-executor.0) total-vm:93120kB, anon-rss:104kB, file-rss:34408kB, shmem-rss:0kB [ 2452.720979] (ME) [ 2452.749704] oom_reaper: reaped process 11713 (syz-executor.0), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 2452.801604] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2452.854649] syz-executor.5: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2452.854672] syz-executor.5 cpuset=/ [ 2452.860847] syz-executor.1: [ 2452.870544] syz-executor.2: [ 2452.896091] rs:main Q:Reg invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 2452.921931] syz-executor.1: [ 2452.932930] 1*2048kB [ 2452.934651] syz-executor.2: [ 2452.937693] (U) [ 2452.938420] page allocation failure: order:0 [ 2452.941416] 0*4096kB [ 2452.943370] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 2452.949512] rs:main Q:Reg cpuset= [ 2452.960182] page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2452.964568] page allocation failure: order:0 [ 2452.984154] mems_allowed=0-1 [ 2452.984158] = 10972kB [ 2452.984165] Node 0 [ 2452.988749] syz-executor.1 cpuset= [ 2452.991817] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 2452.994200] / [ 2452.996431] DMA32: [ 2453.008614] / mems_allowed=0-1 [ 2453.014241] CPU: 1 PID: 15765 Comm: rs:main Q:Reg Not tainted 4.14.229-syzkaller #0 [ 2453.017201] (null) [ 2453.022021] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2453.024153] syz-executor.1 cpuset= [ 2453.033480] Call Trace: [ 2453.033499] dump_stack+0x1b2/0x281 [ 2453.033512] dump_header+0x178/0x82f [ 2453.037047] 383*4kB [ 2453.039590] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2453.043348] lowmem_reserve[]: [ 2453.046893] ? ___ratelimit+0x2cd/0x530 [ 2453.046904] oom_kill_process.cold+0x10/0xa40 [ 2453.046923] out_of_memory+0xe3e/0x1190 [ 2453.049218] (UME) [ 2453.054312] ? oom_killer_disable+0x1c0/0x1c0 [ 2453.057425] 0 [ 2453.061360] ? mutex_trylock+0x152/0x1a0 [ 2453.065823] 0 [ 2453.070213] __alloc_pages_nodemask+0x23e1/0x2720 [ 2453.070234] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2453.072360] / [ 2453.076842] alloc_pages_current+0x155/0x260 [ 2453.078644] 235*8kB [ 2453.082649] filemap_fault+0x11a1/0x1ad0 [ 2453.084420] (UME) [ 2453.089249] ext4_filemap_fault+0x84/0xb0 [ 2453.089260] __do_fault+0xfa/0x380 [ 2453.094080] mems_allowed=0-1 [ 2453.095769] __handle_mm_fault+0x2497/0x4620 [ 2453.100170] 0 [ 2453.102454] ? vm_insert_page+0x7c0/0x7c0 [ 2453.115864] 0 [ 2453.116246] ? lock_downgrade+0x740/0x740 [ 2453.119324] 0 [ 2453.123726] ? vfs_write+0x35d/0x4d0 [ 2453.129626] ? mark_held_locks+0xa6/0xf0 [ 2453.129639] handle_mm_fault+0x455/0x9c0 [ 2453.131444] 93*16kB [ 2453.135570] __do_page_fault+0x549/0xad0 [ 2453.145860] (UME) [ 2453.149098] ? spurious_fault+0x640/0x640 [ 2453.151400] 368*32kB [ 2453.155438] ? do_page_fault+0x60/0x500 [ 2453.165859] Node 1 [ 2453.168013] ? page_fault+0x2f/0x50 [ 2453.168032] Normal free:26828kB min:53696kB low:67120kB high:80544kB active_anon:1040kB inactive_anon:68712kB active_file:8kB inactive_file:0kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:320kB pagetables:188kB bounce:0kB free_pcp:228kB local_pcp:0kB free_cma:0kB [ 2453.170233] page_fault+0x45/0x50 [ 2453.173831] lowmem_reserve[]: [ 2453.201568] RIP: 7d2105b0:0x562d954763a0 [ 2453.201572] RSP: 74002a60:0000000000000000 EFLAGS: 7efc740027a0 [ 2453.209226] CPU: 1 PID: 15783 Comm: syz-executor.5 Not tainted 4.14.229-syzkaller #0 [ 2453.223075] (UME) [ 2453.226389] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2453.226393] Call Trace: [ 2453.226411] dump_stack+0x1b2/0x281 [ 2453.226424] warn_alloc.cold+0x96/0x1cc [ 2453.235873] (null) [ 2453.237895] ? zone_watermark_ok_safe+0x220/0x220 [ 2453.240450] syz-executor.2 cpuset= [ 2453.244056] ? usleep_range+0x130/0x130 [ 2453.255856] 17*64kB [ 2453.258452] ? try_to_free_pages+0x23f/0x6e0 [ 2453.262393] (UM) [ 2453.264701] ? _find_next_bit+0xdb/0x100 [ 2453.275153] ? run_timer_softirq+0x5a0/0x5a0 [ 2453.275855] / mems_allowed=0-1 [ 2453.279549] __alloc_pages_nodemask+0x2127/0x2720 [ 2453.279566] ? lock_acquire+0x170/0x3f0 [ 2453.293093] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2453.295853] warn_alloc_show_mem: 1 callbacks suppressed [ 2453.295855] Mem-Info: [ 2453.297923] ? ion_page_pool_alloc+0x9e/0x1b0 [ 2453.303268] active_anon:15422 inactive_anon:44602 isolated_anon:0 [ 2453.303268] active_file:39 inactive_file:0 isolated_file:0 [ 2453.303268] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2453.303268] slab_reclaimable:12596 slab_unreclaimable:121093 [ 2453.303268] mapped:52731 shmem:45846 pagetables:823 bounce:0 [ 2453.303268] free:13885 free_pcp:102 free_cma:0 [ 2453.305651] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2453.310140] 0*128kB [ 2453.343460] alloc_pages_current+0x155/0x260 [ 2453.343472] ion_page_pool_alloc+0x118/0x1b0 [ 2453.359949] ion_system_heap_allocate+0x133/0x8c0 [ 2453.364773] ? _raw_spin_unlock+0x29/0x40 [ 2453.368901] ? _ion_heap_freelist_drain+0x6e/0x410 [ 2453.373844] ? ion_system_contig_heap_create+0x130/0x130 [ 2453.375857] Node 0 active_anon:60648kB inactive_anon:109696kB active_file:148kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:176108kB dirty:0kB writeback:0kB shmem:114196kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 14336kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2453.379277] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2453.412093] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2453.415843] 0 0 [ 2453.416920] ion_alloc+0x27a/0x810 [ 2453.416926] 0 [ 2453.418884] ? ion_dma_buf_release+0x40/0x40 [ 2453.422392] 0 [ 2453.424185] ? __might_fault+0x177/0x1b0 [ 2453.434398] ion_ioctl+0xea/0x1f0 [ 2453.437831] ? ion_query_heaps+0x360/0x360 [ 2453.442053] ? SyS_epoll_ctl+0x1e0/0x2780 [ 2453.446179] ? ion_query_heaps+0x360/0x360 [ 2453.450394] do_vfs_ioctl+0x75a/0xff0 [ 2453.454177] ? ioctl_preallocate+0x1a0/0x1a0 [ 2453.455837] 0 [ 2453.458585] ? lock_downgrade+0x740/0x740 [ 2453.460391] ? __fget+0x225/0x360 [ 2453.464524] Node 0 [ 2453.467943] ? do_vfs_ioctl+0xff0/0xff0 [ 2453.467955] ? security_file_ioctl+0x83/0xb0 [ 2453.467965] SyS_ioctl+0x7f/0xb0 [ 2453.475839] 0*256kB [ 2453.478513] ? do_vfs_ioctl+0xff0/0xff0 [ 2453.481849] 0*512kB [ 2453.484152] do_syscall_64+0x1d5/0x640 [ 2453.494276] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2453.499456] RIP: 0033:0x466459 [ 2453.502625] RSP: 002b:00007f4d0bcd5188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2453.505844] Node 1 active_anon:1040kB inactive_anon:68712kB active_file:8kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:34816kB dirty:0kB writeback:0kB shmem:69188kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2453.510317] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 2453.544532] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2453.545833] DMA: [ 2453.551795] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2453.551804] 13*4kB [ 2453.553887] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2453.561199] 0*1024kB [ 2453.563377] R13: 00007ffe1117a98f R14: 00007f4d0bcd5300 R15: 0000000000022000 [ 2453.580281] CPU: 0 PID: 15802 Comm: syz-executor.2 Not tainted 4.14.229-syzkaller #0 [ 2453.588134] mems_allowed=0-1 [ 2453.588151] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2453.600569] Call Trace: [ 2453.603143] dump_stack+0x1b2/0x281 [ 2453.606877] warn_alloc.cold+0x96/0x1cc [ 2453.609544] page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 2453.610854] ? zone_watermark_ok_safe+0x220/0x220 [ 2453.610866] ? usleep_range+0x130/0x130 [ 2453.629494] ? try_to_free_pages+0x23f/0x6e0 [ 2453.633986] ? _find_next_bit+0xdb/0x100 [ 2453.638036] ? run_timer_softirq+0x5a0/0x5a0 [ 2453.642438] __alloc_pages_nodemask+0x2127/0x2720 [ 2453.647282] ? lock_acquire+0x170/0x3f0 [ 2453.649279] (null) [ 2453.651253] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2453.653377] syz-executor.2 cpuset= [ 2453.658200] ? ion_page_pool_alloc+0x9e/0x1b0 [ 2453.658216] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2453.658229] ? ion_page_pool_alloc+0x28/0x1b0 [ 2453.658241] alloc_pages_current+0x155/0x260 [ 2453.658253] ion_page_pool_alloc+0x118/0x1b0 [ 2453.658272] ion_system_heap_allocate+0x133/0x8c0 [ 2453.689225] / mems_allowed=0-1 [ 2453.690187] ? ion_alloc+0x187/0x810 [ 2453.690200] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2453.702495] ? ion_system_contig_heap_create+0x130/0x130 [ 2453.707937] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2453.712943] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2453.717776] ion_alloc+0x204/0x810 [ 2453.721306] ? ion_dma_buf_release+0x40/0x40 [ 2453.725696] ? __might_fault+0x177/0x1b0 [ 2453.729740] ion_ioctl+0xea/0x1f0 [ 2453.733174] ? ion_query_heaps+0x360/0x360 [ 2453.737398] ? ion_query_heaps+0x360/0x360 [ 2453.741620] do_vfs_ioctl+0x75a/0xff0 [ 2453.745402] ? ioctl_preallocate+0x1a0/0x1a0 [ 2453.749901] ? lock_downgrade+0x740/0x740 [ 2453.754042] ? __fget+0x225/0x360 [ 2453.757487] ? do_vfs_ioctl+0xff0/0xff0 [ 2453.761456] ? security_file_ioctl+0x83/0xb0 [ 2453.765851] SyS_ioctl+0x7f/0xb0 [ 2453.769296] ? do_vfs_ioctl+0xff0/0xff0 [ 2453.773272] do_syscall_64+0x1d5/0x640 [ 2453.777157] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2453.782459] RIP: 0033:0x466459 [ 2453.785639] RSP: 002b:00007f3bc6e95188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2453.793336] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 2453.800591] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2453.807849] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2453.815120] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2453.822372] R13: 00007ffe618eb5ff R14: 00007f3bc6e95300 R15: 0000000000022000 [ 2453.829650] CPU: 1 PID: 15806 Comm: syz-executor.2 Not tainted 4.14.229-syzkaller #0 [ 2453.837536] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2453.844709] 0*2048kB [ 2453.846879] Call Trace: [ 2453.846901] dump_stack+0x1b2/0x281 [ 2453.846915] warn_alloc.cold+0x96/0x1cc [ 2453.849304] 0*4096kB [ 2453.851872] ? zone_watermark_ok_safe+0x220/0x220 [ 2453.855466] = 17764kB [ 2453.859425] ? wait_for_completion_io+0x10/0x10 [ 2453.859441] __alloc_pages_nodemask+0x2127/0x2720 [ 2453.861831] (UME) [ 2453.866659] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2453.866671] ? migrate_swap_stop+0x880/0x880 [ 2453.875800] 19*8kB [ 2453.878516] ? lock_acquire+0x170/0x3f0 [ 2453.880636] (ME) [ 2453.885468] alloc_pages_current+0x155/0x260 [ 2453.895798] Node 0 [ 2453.895999] ion_page_pool_alloc+0x118/0x1b0 [ 2453.898043] DMA free:10972kB min:204kB low:252kB high:300kB active_anon:2056kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2453.902420] ion_system_heap_allocate+0x133/0x8c0 [ 2453.904626] lowmem_reserve[]: [ 2453.909015] ? ion_alloc+0x187/0x810 [ 2453.909026] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2453.909034] ? ion_system_contig_heap_create+0x130/0x130 [ 2453.909046] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2453.934885] Node 0 [ 2453.939689] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2453.939699] ion_alloc+0x204/0x810 [ 2453.939713] ? ion_dma_buf_release+0x40/0x40 [ 2453.955791] 23*16kB [ 2453.957667] ? __might_fault+0x177/0x1b0 [ 2453.962650] (UME) [ 2453.964868] ion_ioctl+0xea/0x1f0 [ 2453.969697] Normal: [ 2453.973200] ? ion_query_heaps+0x360/0x360 [ 2453.985790] 0*4kB [ 2453.986058] ? ion_query_heaps+0x360/0x360 [ 2453.989479] 0*8kB [ 2453.991782] do_vfs_ioctl+0x75a/0xff0 [ 2453.996002] 27*32kB [ 2453.998116] ? ioctl_preallocate+0x1a0/0x1a0 [ 2454.002317] (UME) [ 2454.004446] ? lock_downgrade+0x740/0x740 [ 2454.015785] 0*16kB [ 2454.017118] ? __fget+0x225/0x360 [ 2454.021324] 0*32kB [ 2454.023541] ? do_vfs_ioctl+0xff0/0xff0 [ 2454.033125] ? security_file_ioctl+0x83/0xb0 [ 2454.035783] 15*64kB (UME) [ 2454.037514] SyS_ioctl+0x7f/0xb0 [ 2454.037523] ? do_vfs_ioctl+0xff0/0xff0 [ 2454.040429] 13*128kB [ 2454.043774] do_syscall_64+0x1d5/0x640 [ 2454.043787] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2454.043796] RIP: 0033:0x466459 [ 2454.043800] RSP: 002b:00007f3bc6e74188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2454.043809] RAX: ffffffffffffffda RBX: 000000000056c008 RCX: 0000000000466459 [ 2454.043813] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2454.043818] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2454.043822] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c008 [ 2454.043827] R13: 00007ffe618eb5ff R14: 00007f3bc6e74300 R15: 0000000000022000 [ 2454.052315] CPU: 1 PID: 15791 Comm: syz-executor.1 Not tainted 4.14.229-syzkaller #0 [ 2454.068296] 0*64kB [ 2454.070858] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2454.085787] 0 [ 2454.092610] Call Trace: [ 2454.099881] (UM) [ 2454.107128] dump_stack+0x1b2/0x281 [ 2454.107143] warn_alloc.cold+0x96/0x1cc [ 2454.125776] 0*128kB [ 2454.126541] ? zone_watermark_ok_safe+0x220/0x220 [ 2454.128314] 0*256kB [ 2454.130880] ? usleep_range+0x130/0x130 [ 2454.132910] 0*512kB [ 2454.136513] ? try_to_free_pages+0x23f/0x6e0 [ 2454.136524] ? _find_next_bit+0xdb/0x100 [ 2454.136534] ? run_timer_softirq+0x5a0/0x5a0 [ 2454.140492] 2717 [ 2454.142795] __alloc_pages_nodemask+0x2127/0x2720 [ 2454.155770] 2718 [ 2454.156156] ? lock_acquire+0x170/0x3f0 [ 2454.160528] 2718 [ 2454.164580] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2454.168977] 5*256kB [ 2454.171002] ? ion_page_pool_alloc+0x9e/0x1b0 [ 2454.175865] 0*1024kB [ 2454.177907] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2454.181843] 0*2048kB [ 2454.183986] alloc_pages_current+0x155/0x260 [ 2454.195770] (UME) [ 2454.197990] ion_page_pool_alloc+0x118/0x1b0 [ 2454.203407] 3*512kB [ 2454.205817] ion_system_heap_allocate+0x133/0x8c0 [ 2454.205826] ? ion_alloc+0x187/0x810 [ 2454.205838] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2454.215772] 2718 [ 2454.216721] ? ion_system_contig_heap_create+0x130/0x130 [ 2454.223837] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2454.227536] 0*4096kB [ 2454.232950] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2454.234990] = 0kB [ 2454.234996] Node 1 [ 2454.240424] ion_alloc+0x204/0x810 [ 2454.240441] ? ion_dma_buf_release+0x40/0x40 [ 2454.255763] (UME) [ 2454.256876] ? __might_fault+0x177/0x1b0 [ 2454.260385] 2*1024kB [ 2454.264773] ion_ioctl+0xea/0x1f0 [ 2454.266911] Node 0 [ 2454.270932] ? ion_query_heaps+0x360/0x360 [ 2454.273325] DMA32 free:17764kB min:36200kB low:45248kB high:54296kB active_anon:58592kB inactive_anon:109696kB active_file:48kB inactive_file:48kB unevictable:0kB writepending:0kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:7616kB pagetables:3100kB bounce:0kB free_pcp:200kB local_pcp:20kB free_cma:0kB [ 2454.276745] ? ion_query_heaps+0x360/0x360 [ 2454.276755] do_vfs_ioctl+0x75a/0xff0 [ 2454.276766] ? ioctl_preallocate+0x1a0/0x1a0 [ 2454.285764] Normal: [ 2454.311435] ? lock_downgrade+0x740/0x740 [ 2454.311451] ? __fget+0x225/0x360 [ 2454.315661] (ME) [ 2454.319435] ? do_vfs_ioctl+0xff0/0xff0 [ 2454.319446] ? security_file_ioctl+0x83/0xb0 [ 2454.319456] SyS_ioctl+0x7f/0xb0 [ 2454.335756] lowmem_reserve[]: [ 2454.339678] ? do_vfs_ioctl+0xff0/0xff0 [ 2454.344069] 0 [ 2454.347415] do_syscall_64+0x1d5/0x640 [ 2454.347432] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2454.350514] 1*2048kB [ 2454.354459] RIP: 0033:0x466459 [ 2454.365756] (U) [ 2454.367634] RSP: 002b:00007f10b67af188 EFLAGS: 00000246 [ 2454.370800] 0*4096kB [ 2454.372749] ORIG_RAX: 0000000000000010 [ 2454.378102] 0 [ 2454.380472] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 2454.384413] 0 [ 2454.386195] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2454.386200] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2454.386205] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2454.386211] R13: 00007ffd58825dcf R14: 00007f10b67af300 R15: 0000000000022000 [ 2454.393310] Mem-Info: [ 2454.394643] CPU: 0 PID: 15826 Comm: syz-executor.1 Not tainted 4.14.229-syzkaller #0 [ 2454.395263] active_anon:15422 inactive_anon:44602 isolated_anon:0 [ 2454.395263] active_file:12 inactive_file:13 isolated_file:0 [ 2454.395263] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2454.395263] slab_reclaimable:12594 slab_unreclaimable:121093 [ 2454.395263] mapped:52731 shmem:45846 pagetables:800 bounce:0 [ 2454.395263] free:13891 free_pcp:107 free_cma:0 [ 2454.402499] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2454.402503] Call Trace: [ 2454.402520] dump_stack+0x1b2/0x281 [ 2454.402534] warn_alloc.cold+0x96/0x1cc [ 2454.402545] ? zone_watermark_ok_safe+0x220/0x220 [ 2454.402562] ? wait_for_completion_io+0x10/0x10 [ 2454.402573] __alloc_pages_nodemask+0x2127/0x2720 [ 2454.402591] ? lock_acquire+0x170/0x3f0 [ 2454.402607] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2454.402617] ? ion_page_pool_alloc+0x9e/0x1b0 [ 2454.402634] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2454.402648] ? retint_kernel+0x2d/0x2d [ 2454.402661] alloc_pages_current+0x155/0x260 [ 2454.402673] ion_page_pool_alloc+0x118/0x1b0 [ 2454.402683] ion_system_heap_allocate+0x133/0x8c0 [ 2454.402694] ? ion_alloc+0x187/0x810 [ 2454.402705] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2454.402714] ? ion_system_contig_heap_create+0x130/0x130 [ 2454.402724] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2454.402737] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2454.416907] Node 0 active_anon:60648kB inactive_anon:109696kB active_file:48kB inactive_file:48kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:176108kB dirty:0kB writeback:0kB shmem:114196kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 14336kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2454.417242] ion_alloc+0x204/0x810 [ 2454.424492] Node 1 active_anon:1040kB inactive_anon:68712kB active_file:0kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:34816kB dirty:0kB writeback:0kB shmem:69188kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2454.426880] ? ion_dma_buf_release+0x40/0x40 [ 2454.426894] ? __might_fault+0x177/0x1b0 [ 2454.426905] ion_ioctl+0xea/0x1f0 [ 2454.426914] ? ion_query_heaps+0x360/0x360 [ 2454.426927] ? _raw_spin_unlock+0x29/0x40 [ 2454.426938] ? ion_query_heaps+0x360/0x360 [ 2454.440818] Node 0 [ 2454.468027] do_vfs_ioctl+0x75a/0xff0 [ 2454.468040] ? ioctl_preallocate+0x1a0/0x1a0 [ 2454.468049] ? lock_downgrade+0x740/0x740 [ 2454.468061] ? __fget+0x225/0x360 [ 2454.468071] ? do_vfs_ioctl+0xff0/0xff0 [ 2454.468083] ? security_file_ioctl+0x83/0xb0 [ 2454.468093] SyS_ioctl+0x7f/0xb0 [ 2454.468100] ? do_vfs_ioctl+0xff0/0xff0 [ 2454.468112] do_syscall_64+0x1d5/0x640 [ 2454.483415] DMA free:10972kB min:204kB low:252kB high:300kB active_anon:2056kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2454.483623] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2454.487610] lowmem_reserve[]: [ 2454.492389] RIP: 0033:0x466459 [ 2454.503847] 0 [ 2454.505803] RSP: 002b:00007f10b674c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2454.505813] RAX: ffffffffffffffda RBX: 000000000056c158 RCX: 0000000000466459 [ 2454.505819] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2454.505824] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2454.505828] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c158 [ 2454.505833] R13: 00007ffd58825dcf R14: 00007f10b674c300 R15: 0000000000022000 [ 2454.515778] = 10972kB [ 2454.527457] Mem-Info: [ 2454.536015] 0 [ 2454.543165] active_anon:15422 inactive_anon:44602 isolated_anon:0 [ 2454.543165] active_file:12 inactive_file:13 isolated_file:0 [ 2454.543165] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2454.543165] slab_reclaimable:12594 slab_unreclaimable:121093 [ 2454.543165] mapped:52731 shmem:45846 pagetables:800 bounce:0 [ 2454.543165] free:13891 free_pcp:107 free_cma:0 [ 2454.565768] 53*4kB [ 2454.597324] 2717 [ 2454.627922] 0 [ 2454.636412] 2718 [ 2454.647432] Node 0 [ 2454.652872] 2718 [ 2454.676098] Node 0 active_anon:60648kB inactive_anon:109696kB active_file:48kB inactive_file:48kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:176108kB dirty:0kB writeback:0kB shmem:114196kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 14336kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2454.686708] DMA32: [ 2454.717426] 2718 [ 2454.728983] Node 0 [ 2454.748578] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2454.759324] Node 1 active_anon:1040kB inactive_anon:68712kB active_file:0kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:34816kB dirty:0kB writeback:0kB shmem:69188kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2454.767107] lowmem_reserve[]: [ 2454.767627] Node 0 [ 2454.769975] 0 0 [ 2454.772389] DMA32 free:17764kB min:36200kB low:45248kB high:54296kB active_anon:58592kB inactive_anon:109696kB active_file:48kB inactive_file:48kB unevictable:0kB writepending:0kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:7616kB pagetables:3100kB bounce:0kB free_pcp:200kB local_pcp:180kB free_cma:0kB [ 2454.774169] 0 [ 2454.816208] Node 0 [ 2454.845744] 383*4kB [ 2454.865763] DMA free:10972kB min:204kB low:252kB high:300kB active_anon:2056kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2454.884017] (UM) [ 2454.907159] lowmem_reserve[]: [ 2454.967099] 29*8kB [ 2454.990966] (UME) 239*8kB (UME) 93*16kB (UME) 368*32kB (UME) 17*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 17796kB [ 2455.013347] (UM) 19*16kB (UME) 813*32kB (UM) 1*64kB (M) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 26828kB [ 2455.032106] 0 0 [ 2455.034527] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2455.047736] Node 1 Normal free:457948kB min:53696kB low:67120kB high:80544kB active_anon:1040kB inactive_anon:68712kB active_file:48kB inactive_file:6200kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:320kB pagetables:100kB bounce:0kB free_pcp:364kB local_pcp:56kB free_cma:0kB [ 2455.077456] lowmem_reserve[]: [ 2455.077466] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2455.077473] 0 [ 2455.081137] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2455.100468] Node 1 Normal: 1*4kB (U) 1*8kB (U) 2*16kB (UE) 808*32kB (U) 1607*64kB (U) 336*128kB (UM) 123*256kB (U) 7*512kB (U) 104*1024kB (U) 57*2048kB (UM) 19*4096kB (U) = 507884kB [ 2455.109136] 2717 2718 2718 2718 [ 2455.152018] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2455.152844] Node 0 [ 2455.162099] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2455.195765] lowmem_reserve[]: 0 0 0 0 0 [ 2455.199800] Node 0 DMA: 13*4kB (UME) 19*8kB (ME) 23*16kB (UME) 27*32kB (UME) 16*64kB (UME) 13*128kB (UM) 5*256kB (UME) 3*512kB (UME) 2*1024kB (ME) 1*2048kB (U) 0*4096kB = 11036kB [ 2455.205786] 0 [ 2455.216094] DMA32 free:154476kB min:36200kB low:45248kB high:54296kB active_anon:58592kB inactive_anon:109696kB active_file:48kB inactive_file:148kB unevictable:0kB writepending:0kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:7616kB pagetables:3100kB bounce:0kB free_pcp:220kB local_pcp:200kB free_cma:0kB [ 2455.219896] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2455.275731] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2455.275742] 0 [ 2455.284679] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2455.284680] 0 0 [ 2455.318392] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2455.339386] Node 0 DMA32: 321*4kB (UME) 312*8kB (UME) 115*16kB (UME) 320*32kB (UME) 2683*64kB (UM) 291*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 224820kB [ 2455.365701] 0 [ 2455.367521] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2455.375711] 47652 total pagecache pages [ 2455.400992] 47652 total pagecache pages [ 2455.404989] 0 pages in swap cache [ 2455.408520] lowmem_reserve[]: 0 0 0 0 0 [ 2455.412517] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2455.416090] Node 0 [ 2455.438056] Swap cache stats: add 0, delete 0, find 0/0 [ 2455.469439] Free swap = 0kB [ 2455.472485] Total swap = 0kB [ 2455.475497] 2097051 pages RAM [ 2455.496067] 0 pages in swap cache [ 2455.499565] Swap cache stats: add 0, delete 0, find 0/0 [ 2455.504937] Free swap = 0kB [ 2455.515991] 0 pages HighMem/MovableOnly [ 2455.519999] 363848 pages reserved [ 2455.523448] 0 pages cma reserved [ 2455.525696] lowmem_reserve[]: 0 0 0 0 0 [ 2455.530799] Node 1 Normal free:172568kB min:53696kB low:67120kB high:80544kB active_anon:1040kB inactive_anon:68712kB active_file:48kB inactive_file:6800kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:320kB pagetables:100kB bounce:0kB free_pcp:1388kB local_pcp:652kB free_cma:0kB [ 2455.555692] Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2455.575693] Total swap = 0kB [ 2455.575710] lowmem_reserve[]: 0 [ 2455.578718] 2097051 pages RAM [ 2455.578724] 0 pages HighMem/MovableOnly [ 2455.581985] 0 [ 2455.585064] 363848 pages reserved [ 2455.635706] Node 1 Normal: 35*4kB (U) 16*8kB (U) 17*16kB (UE) 905*32kB (U) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 29500kB [ 2455.655687] 0 0 0 [ 2455.657868] Node 1 Normal free:29564kB min:53696kB low:67120kB high:80544kB active_anon:1040kB inactive_anon:68712kB active_file:48kB inactive_file:6800kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:320kB pagetables:100kB bounce:0kB free_pcp:1388kB local_pcp:652kB free_cma:0kB [ 2455.665697] 0 pages cma reserved [ 2455.725686] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2455.734559] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2455.735710] lowmem_reserve[]: 0 0 0 0 0 [ 2455.775899] Node 0 DMA: 13*4kB (UME) 19*8kB (ME) 23*16kB (UME) 27*32kB (UME) 16*64kB (UME) 13*128kB (UM) 5*256kB (UME) 3*512kB (UME) 2*1024kB (ME) 1*2048kB (U) 0*4096kB = 11036kB [ 2455.792260] lowmem_reserve[]: 0 0 0 0 0 [ 2455.825673] Node 0 DMA: 19*4kB (UME) 21*8kB (UME) 23*16kB (UME) 27*32kB (UME) 15*64kB (UME) 13*128kB (UM) 5*256kB (UME) 3*512kB (UME) 2*1024kB (ME) 1*2048kB (U) 0*4096kB = 11012kB [ 2455.829447] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2455.842030] Node 0 DMA32: 10699*4kB (UME) 7100*8kB (UME) 8153*16kB (UME) 3552*32kB (UME) 1*64kB (U) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 343772kB [ 2455.875699] Node 0 DMA32: 13736*4kB (UME) 9243*8kB (UME) 8165*16kB (UME) 3556*32kB (UME) 2*64kB (U) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 373448kB [ 2455.925689] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2455.939351] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2455.945883] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2455.975710] Node 1 Normal: 517*4kB (U) 740*8kB (U) 692*16kB (UE) 1105*32kB (U) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 54420kB [ 2455.985835] 47662 total pagecache pages [ 2455.989156] Node 1 Normal: [ 2455.993037] 0 pages in swap cache [ 2455.993039] 517*4kB (U) 740*8kB (U) 692*16kB (UE) 1105*32kB (U) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 54420kB [ 2456.035654] Swap cache stats: add 0, delete 0, find 0/0 [ 2456.041036] Free swap = 0kB [ 2456.071402] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2456.083419] Total swap = 0kB [ 2456.088847] syz-executor.1: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2456.092507] syz-executor.4: [ 2456.103178] 2097051 pages RAM [ 2456.105089] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2456.116035] syz-executor.4: [ 2456.118345] 0 pages HighMem/MovableOnly [ 2456.118762] syz-executor.1: [ 2456.122507] page allocation failure: order:4 [ 2456.125311] page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2456.125328] syz-executor.1 cpuset=/ [ 2456.129503] page allocation failure: order:4 [ 2456.132778] syz-executor.2: [ 2456.148310] 363848 pages reserved [ 2456.151193] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2456.151203] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2456.157728] 0 pages cma reserved [ 2456.166289] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 2456.166311] CPU: 1 PID: 15791 Comm: syz-executor.1 Not tainted 4.14.229-syzkaller #0 [ 2456.166317] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2456.166321] Call Trace: [ 2456.166337] dump_stack+0x1b2/0x281 [ 2456.166350] warn_alloc.cold+0x96/0x1cc [ 2456.185611] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 2456.191553] ? zone_watermark_ok_safe+0x220/0x220 [ 2456.204198] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 2456.207068] __alloc_pages_nodemask+0x2127/0x2720 [ 2456.207085] ? lock_acquire+0x170/0x3f0 [ 2456.217550] (null) [ 2456.218125] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2456.230556] (null) [ 2456.234855] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2456.234867] ? __mutex_unlock_slowpath+0x75/0x770 [ 2456.242108] syz-executor.4 cpuset= [ 2456.245789] ? __list_del_entry_valid+0xb3/0xf0 [ 2456.245804] alloc_pages_current+0x155/0x260 [ 2456.245818] ion_page_pool_alloc+0x118/0x1b0 [ 2456.245831] ion_system_heap_allocate+0x133/0x8c0 [ 2456.265611] / [ 2456.266400] ? _raw_spin_unlock+0x29/0x40 [ 2456.270869] mems_allowed=0-1 [ 2456.275256] ? _ion_heap_freelist_drain+0x6e/0x410 [ 2456.280109] syz-executor.4 cpuset= [ 2456.281768] ? ion_system_contig_heap_create+0x130/0x130 [ 2456.302881] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2456.305614] / [ 2456.307900] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2456.307904] mems_allowed=0-1 [ 2456.317511] ion_alloc+0x27a/0x810 [ 2456.321054] ? ion_dma_buf_release+0x40/0x40 [ 2456.325458] ? __might_fault+0x177/0x1b0 [ 2456.329506] ion_ioctl+0xea/0x1f0 [ 2456.332937] ? ion_query_heaps+0x360/0x360 [ 2456.337166] ? ion_query_heaps+0x360/0x360 [ 2456.341434] do_vfs_ioctl+0x75a/0xff0 [ 2456.345234] ? ioctl_preallocate+0x1a0/0x1a0 [ 2456.349629] ? lock_downgrade+0x740/0x740 [ 2456.353761] ? __fget+0x225/0x360 [ 2456.357199] ? do_vfs_ioctl+0xff0/0xff0 [ 2456.361167] ? security_file_ioctl+0x83/0xb0 [ 2456.365567] SyS_ioctl+0x7f/0xb0 [ 2456.368916] ? do_vfs_ioctl+0xff0/0xff0 [ 2456.372870] do_syscall_64+0x1d5/0x640 [ 2456.376758] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2456.381938] RIP: 0033:0x466459 [ 2456.385118] RSP: 002b:00007f10b67af188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2456.392816] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 2456.400069] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2456.407327] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2456.414577] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2456.421834] R13: 00007ffd58825dcf R14: 00007f10b67af300 R15: 0000000000022000 [ 2456.429106] CPU: 0 PID: 15796 Comm: syz-executor.4 Not tainted 4.14.229-syzkaller #0 [ 2456.429366] mems_allowed=0-1 [ 2456.436981] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2456.436985] Call Trace: [ 2456.437003] dump_stack+0x1b2/0x281 [ 2456.437016] warn_alloc.cold+0x96/0x1cc [ 2456.437034] ? zone_watermark_ok_safe+0x220/0x220 [ 2456.440137] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2456.449459] __alloc_pages_nodemask+0x2127/0x2720 [ 2456.449471] ? lock_acquire+0x170/0x3f0 [ 2456.449483] ? lock_acquire+0x170/0x3f0 [ 2456.449498] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2456.452079] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2456.455681] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2456.455694] ? __mutex_unlock_slowpath+0x75/0x770 [ 2456.455709] alloc_pages_current+0x155/0x260 [ 2456.455722] ion_page_pool_alloc+0x118/0x1b0 [ 2456.459779] page allocation failure: order:4 [ 2456.464581] ion_system_heap_allocate+0x133/0x8c0 [ 2456.464591] ? _raw_spin_unlock+0x29/0x40 [ 2456.464601] ? _ion_heap_freelist_drain+0x6e/0x410 [ 2456.475591] 47412 total pagecache pages [ 2456.478059] ? ion_system_contig_heap_create+0x130/0x130 [ 2456.478069] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2456.478081] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2456.485614] 0 pages in swap cache [ 2456.485985] ion_alloc+0x27a/0x810 [ 2456.485999] ? ion_dma_buf_release+0x40/0x40 [ 2456.490813] Swap cache stats: add 0, delete 0, find 0/0 [ 2456.499380] ? __might_fault+0x177/0x1b0 [ 2456.499392] ion_ioctl+0xea/0x1f0 [ 2456.499400] ? ion_query_heaps+0x360/0x360 [ 2456.499411] ? ion_query_heaps+0x360/0x360 [ 2456.499422] do_vfs_ioctl+0x75a/0xff0 [ 2456.499433] ? ioctl_preallocate+0x1a0/0x1a0 [ 2456.499444] ? lock_downgrade+0x740/0x740 [ 2456.504960] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2456.509711] ? __fget+0x225/0x360 [ 2456.509721] ? do_vfs_ioctl+0xff0/0xff0 [ 2456.509732] ? security_file_ioctl+0x83/0xb0 [ 2456.509742] SyS_ioctl+0x7f/0xb0 [ 2456.509751] ? do_vfs_ioctl+0xff0/0xff0 [ 2456.525603] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2456.527715] do_syscall_64+0x1d5/0x640 [ 2456.527731] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2456.531865] 47412 total pagecache pages [ 2456.536763] RIP: 0033:0x466459 [ 2456.536768] RSP: 002b:00007f46becae188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2456.536778] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 2456.536784] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2456.536789] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2456.536796] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2456.540767] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 2456.546169] R13: 00007ffe96c50ebf R14: 00007f46becae300 R15: 0000000000022000 [ 2456.579046] CPU: 0 PID: 15816 Comm: syz-executor.4 Not tainted 4.14.229-syzkaller #0 [ 2456.581558] 0 pages in swap cache [ 2456.585423] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2456.595582] Free swap = 0kB [ 2456.597787] Call Trace: [ 2456.601909] Total swap = 0kB [ 2456.610730] dump_stack+0x1b2/0x281 [ 2456.610744] warn_alloc.cold+0x96/0x1cc [ 2456.610756] ? zone_watermark_ok_safe+0x220/0x220 [ 2456.610779] __alloc_pages_nodemask+0x2127/0x2720 [ 2456.625570] Swap cache stats: add 0, delete 0, find 0/0 [ 2456.625882] ? lock_acquire+0x170/0x3f0 [ 2456.629842] Free swap = 0kB [ 2456.638398] ? lock_acquire+0x170/0x3f0 [ 2456.638414] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2456.638431] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2456.638444] ? __mutex_unlock_slowpath+0x75/0x770 [ 2456.645575] 2097051 pages RAM [ 2456.647476] alloc_pages_current+0x155/0x260 [ 2456.651426] 0 pages HighMem/MovableOnly [ 2456.654792] ion_page_pool_alloc+0x118/0x1b0 [ 2456.675579] Total swap = 0kB [ 2456.676978] ion_system_heap_allocate+0x133/0x8c0 [ 2456.684220] 2097051 pages RAM [ 2456.691473] ? _raw_spin_unlock+0x29/0x40 [ 2456.691482] ? _ion_heap_freelist_drain+0x6e/0x410 [ 2456.691490] ? ion_system_contig_heap_create+0x130/0x130 [ 2456.691500] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2456.691511] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2456.691520] ion_alloc+0x27a/0x810 [ 2456.691533] ? ion_dma_buf_release+0x40/0x40 [ 2456.698768] (null) [ 2456.705871] ? __might_fault+0x177/0x1b0 [ 2456.705883] ion_ioctl+0xea/0x1f0 [ 2456.705892] ? ion_query_heaps+0x360/0x360 [ 2456.705906] ? ion_query_heaps+0x360/0x360 [ 2456.725578] 363848 pages reserved [ 2456.726534] do_vfs_ioctl+0x75a/0xff0 [ 2456.726551] ? ioctl_preallocate+0x1a0/0x1a0 [ 2456.729538] 0 pages cma reserved [ 2456.729547] Out of memory (oom_kill_allocating_task): Kill process 15765 (rs:main Q:Reg) score 0 or sacrifice child [ 2456.732141] ? lock_downgrade+0x740/0x740 [ 2456.735170] Killed process 15753 (rsyslogd) total-vm:254332kB, anon-rss:2716kB, file-rss:0kB, shmem-rss:0kB [ 2456.738739] ? __fget+0x225/0x360 [ 2456.738749] ? do_vfs_ioctl+0xff0/0xff0 [ 2456.738760] ? security_file_ioctl+0x83/0xb0 [ 2456.738769] SyS_ioctl+0x7f/0xb0 [ 2456.738777] ? do_vfs_ioctl+0xff0/0xff0 [ 2456.738788] do_syscall_64+0x1d5/0x640 [ 2456.738802] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2456.738810] RIP: 0033:0x466459 [ 2456.738815] RSP: 002b:00007f46bec6c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2456.738826] RAX: ffffffffffffffda RBX: 000000000056c0b0 RCX: 0000000000466459 [ 2456.738830] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000004 [ 2456.738834] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2456.738840] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c0b0 [ 2456.738846] R13: 00007ffe96c50ebf R14: 00007f46bec6c300 R15: 0000000000022000 [ 2456.977594] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 2456.982716] CPU: 1 PID: 15802 Comm: syz-executor.2 Not tainted 4.14.229-syzkaller #0 [ 2456.990589] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2456.999934] Call Trace: [ 2457.002522] dump_stack+0x1b2/0x281 [ 2457.006149] warn_alloc.cold+0x96/0x1cc [ 2457.010118] ? zone_watermark_ok_safe+0x220/0x220 [ 2457.014972] __alloc_pages_nodemask+0x2127/0x2720 [ 2457.019819] ? lock_acquire+0x170/0x3f0 [ 2457.023794] ? lock_acquire+0x170/0x3f0 [ 2457.027772] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2457.032622] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2457.038073] ? __mutex_unlock_slowpath+0x75/0x770 [ 2457.042917] alloc_pages_current+0x155/0x260 [ 2457.047327] ion_page_pool_alloc+0x118/0x1b0 [ 2457.051737] ion_system_heap_allocate+0x133/0x8c0 [ 2457.056578] ? _raw_spin_unlock+0x29/0x40 [ 2457.060807] ? _ion_heap_freelist_drain+0x6e/0x410 [ 2457.065730] ? ion_system_contig_heap_create+0x130/0x130 [ 2457.071177] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2457.076188] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2457.081028] ion_alloc+0x27a/0x810 [ 2457.084568] ? ion_dma_buf_release+0x40/0x40 [ 2457.088975] ? __might_fault+0x177/0x1b0 [ 2457.093047] ion_ioctl+0xea/0x1f0 [ 2457.096498] ? ion_query_heaps+0x360/0x360 [ 2457.100735] ? ion_query_heaps+0x360/0x360 [ 2457.104963] do_vfs_ioctl+0x75a/0xff0 [ 2457.108757] ? ioctl_preallocate+0x1a0/0x1a0 [ 2457.113161] ? lock_downgrade+0x740/0x740 [ 2457.117307] ? __fget+0x225/0x360 [ 2457.120755] ? do_vfs_ioctl+0xff0/0xff0 [ 2457.124724] ? security_file_ioctl+0x83/0xb0 [ 2457.129129] SyS_ioctl+0x7f/0xb0 [ 2457.132488] ? do_vfs_ioctl+0xff0/0xff0 [ 2457.136461] do_syscall_64+0x1d5/0x640 [ 2457.140350] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2457.145531] RIP: 0033:0x466459 [ 2457.148708] RSP: 002b:00007f3bc6e95188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2457.156410] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 2457.163674] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2457.170934] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2457.178198] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2457.185461] R13: 00007ffe618eb5ff R14: 00007f3bc6e95300 R15: 0000000000022000 [ 2457.192899] CPU: 1 PID: 15826 Comm: syz-executor.1 Not tainted 4.14.229-syzkaller #0 [ 2457.200776] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2457.210124] Call Trace: [ 2457.212708] dump_stack+0x1b2/0x281 [ 2457.216333] warn_alloc.cold+0x96/0x1cc [ 2457.220305] ? zone_watermark_ok_safe+0x220/0x220 [ 2457.225156] __alloc_pages_nodemask+0x2127/0x2720 [ 2457.229997] ? ___preempt_schedule+0x16/0x18 [ 2457.234423] ? lock_acquire+0x170/0x3f0 [ 2457.238400] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2457.243245] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2457.248694] ? __mutex_unlock_slowpath+0x75/0x770 [ 2457.253536] alloc_pages_current+0x155/0x260 [ 2457.257942] ion_page_pool_alloc+0x118/0x1b0 [ 2457.262347] ion_system_heap_allocate+0x133/0x8c0 [ 2457.267188] ? _raw_spin_unlock+0x29/0x40 [ 2457.271337] ? _ion_heap_freelist_drain+0x6e/0x410 [ 2457.276265] ? ion_system_contig_heap_create+0x130/0x130 [ 2457.281712] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2457.286726] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2457.291566] ion_alloc+0x27a/0x810 [ 2457.295107] ? ion_dma_buf_release+0x40/0x40 [ 2457.299518] ? __might_fault+0x177/0x1b0 [ 2457.303581] ion_ioctl+0xea/0x1f0 [ 2457.307029] ? ion_query_heaps+0x360/0x360 [ 2457.311270] ? _raw_spin_unlock+0x29/0x40 [ 2457.315422] ? ion_query_heaps+0x360/0x360 [ 2457.319657] do_vfs_ioctl+0x75a/0xff0 [ 2457.323458] ? ioctl_preallocate+0x1a0/0x1a0 [ 2457.325518] warn_alloc_show_mem: 4 callbacks suppressed [ 2457.325522] Mem-Info: [ 2457.327870] ? lock_downgrade+0x740/0x740 [ 2457.333224] active_anon:15426 inactive_anon:44602 isolated_anon:0 [ 2457.333224] active_file:739 inactive_file:758 isolated_file:0 [ 2457.333224] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2457.333224] slab_reclaimable:12506 slab_unreclaimable:123458 [ 2457.333224] mapped:54196 shmem:45846 pagetables:800 bounce:0 [ 2457.333224] free:238329 free_pcp:390 free_cma:0 [ 2457.335605] ? __fget+0x225/0x360 [ 2457.335614] ? do_vfs_ioctl+0xff0/0xff0 [ 2457.335625] ? security_file_ioctl+0x83/0xb0 [ 2457.335635] SyS_ioctl+0x7f/0xb0 [ 2457.355529] Node 0 active_anon:60648kB inactive_anon:109696kB active_file:96kB inactive_file:152kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:176588kB dirty:0kB writeback:0kB shmem:114196kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 14336kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2457.373248] ? do_vfs_ioctl+0xff0/0xff0 [ 2457.373262] do_syscall_64+0x1d5/0x640 [ 2457.373276] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2457.395532] Node 1 active_anon:1056kB inactive_anon:68712kB active_file:2708kB inactive_file:2560kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:40096kB dirty:0kB writeback:0kB shmem:69188kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2457.416534] RIP: 0033:0x466459 [ 2457.416539] RSP: 002b:00007f10b674c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2457.416549] RAX: ffffffffffffffda RBX: 000000000056c158 RCX: 0000000000466459 [ 2457.416554] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2457.416562] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2457.465505] Node 0 [ 2457.467844] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c158 [ 2457.475112] DMA free:11028kB min:204kB low:252kB high:300kB active_anon:2056kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2457.482349] R13: 00007ffd58825dcf R14: 00007f10b674c300 R15: 0000000000022000 [ 2457.483158] 0 pages HighMem/MovableOnly [ 2457.501016] syz-executor.0: [ 2457.525280] 363848 pages reserved [ 2457.543174] 0 pages cma reserved [ 2457.580711] syz-executor.2: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2457.605562] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 2457.610713] CPU: 1 PID: 15806 Comm: syz-executor.2 Not tainted 4.14.229-syzkaller #0 [ 2457.615620] lowmem_reserve[]: [ 2457.618582] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2457.618588] 0 [ 2457.621668] Call Trace: [ 2457.635371] dump_stack+0x1b2/0x281 [ 2457.639001] warn_alloc.cold+0x96/0x1cc [ 2457.642976] ? zone_watermark_ok_safe+0x220/0x220 [ 2457.645481] 2717 2718 2718 2718 [ 2457.647827] __alloc_pages_nodemask+0x2127/0x2720 [ 2457.651182] Node 0 [ 2457.656026] ? lock_acquire+0x170/0x3f0 [ 2457.656038] ? lock_acquire+0x170/0x3f0 [ 2457.656053] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2457.656070] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2457.656082] ? __mutex_unlock_slowpath+0x75/0x770 [ 2457.675521] DMA32 free:703284kB min:36200kB low:45248kB high:54296kB active_anon:58592kB inactive_anon:109696kB active_file:96kB inactive_file:152kB unevictable:0kB writepending:0kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:7552kB pagetables:3100kB bounce:0kB free_pcp:108kB local_pcp:76kB free_cma:0kB [ 2457.676558] ? __mutex_lock+0x2/0x1310 [ 2457.681375] lowmem_reserve[]: [ 2457.709952] alloc_pages_current+0x155/0x260 [ 2457.709967] ion_page_pool_alloc+0x118/0x1b0 [ 2457.709976] ion_system_heap_allocate+0x133/0x8c0 [ 2457.709988] ? _raw_spin_unlock+0x29/0x40 [ 2457.709996] ? _ion_heap_freelist_drain+0x6e/0x410 [ 2457.710009] ? ion_system_contig_heap_create+0x130/0x130 [ 2457.745089] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2457.745478] 0 0 [ 2457.750097] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2457.750110] ion_alloc+0x27a/0x810 [ 2457.752064] 0 [ 2457.756887] ? ion_dma_buf_release+0x40/0x40 [ 2457.756898] ? __might_fault+0x177/0x1b0 [ 2457.756910] ion_ioctl+0xea/0x1f0 [ 2457.756918] ? ion_query_heaps+0x360/0x360 [ 2457.756932] ? ion_query_heaps+0x360/0x360 [ 2457.775489] 0 [ 2457.778316] do_vfs_ioctl+0x75a/0xff0 [ 2457.782522] 0 [ 2457.784309] ? ioctl_preallocate+0x1a0/0x1a0 [ 2457.794258] ? lock_downgrade+0x740/0x740 [ 2457.798403] ? __fget+0x225/0x360 [ 2457.801856] ? do_vfs_ioctl+0xff0/0xff0 [ 2457.805816] ? security_file_ioctl+0x83/0xb0 [ 2457.805819] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2457.812383] SyS_ioctl+0x7f/0xb0 [ 2457.842026] ? do_vfs_ioctl+0xff0/0xff0 [ 2457.846003] do_syscall_64+0x1d5/0x640 [ 2457.849899] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2457.855086] RIP: 0033:0x466459 [ 2457.858268] RSP: 002b:00007f3bc6e74188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2457.865972] RAX: ffffffffffffffda RBX: 000000000056c008 RCX: 0000000000466459 [ 2457.873241] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2457.875467] lowmem_reserve[]: [ 2457.880586] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2457.880592] 0 [ 2457.883674] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c008 [ 2457.899969] R13: 00007ffe618eb5ff R14: 00007f3bc6e74300 R15: 0000000000022000 [ 2457.905462] 0 0 0 0 [ 2457.921504] Node 1 Normal free:148604kB min:53696kB low:67120kB high:80544kB active_anon:1056kB inactive_anon:68712kB active_file:2356kB inactive_file:2356kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:320kB pagetables:100kB bounce:0kB free_pcp:128kB local_pcp:128kB free_cma:0kB [ 2457.955138] page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2457.975512] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 2457.980647] CPU: 0 PID: 15789 Comm: syz-executor.0 Not tainted 4.14.229-syzkaller #0 [ 2457.981936] oom_reaper: reaped process 15806 (syz-executor.2), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 2457.988514] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2457.988518] Call Trace: [ 2457.988538] dump_stack+0x1b2/0x281 [ 2457.988551] warn_alloc.cold+0x96/0x1cc [ 2457.988562] ? zone_watermark_ok_safe+0x220/0x220 [ 2457.988582] __alloc_pages_nodemask+0x2127/0x2720 [ 2458.027650] ? lock_acquire+0x170/0x3f0 [ 2458.031632] ? lock_acquire+0x170/0x3f0 [ 2458.035608] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2458.038057] oom_reaper: reaped process 15826 (syz-executor.1), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 2458.040467] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2458.040481] ? __mutex_unlock_slowpath+0x75/0x770 [ 2458.060875] alloc_pages_current+0x155/0x260 [ 2458.065285] ion_page_pool_alloc+0x118/0x1b0 [ 2458.069689] ion_system_heap_allocate+0x133/0x8c0 [ 2458.075051] ? _raw_spin_unlock+0x29/0x40 [ 2458.079191] ? _ion_heap_freelist_drain+0x6e/0x410 [ 2458.084113] ? ion_system_contig_heap_create+0x130/0x130 [ 2458.089557] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2458.094569] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2458.099406] ion_alloc+0x27a/0x810 [ 2458.102947] ? ion_dma_buf_release+0x40/0x40 [ 2458.107355] ? __might_fault+0x177/0x1b0 [ 2458.111414] ion_ioctl+0xea/0x1f0 [ 2458.114863] ? ion_query_heaps+0x360/0x360 [ 2458.119093] ? ion_query_heaps+0x360/0x360 [ 2458.123323] do_vfs_ioctl+0x75a/0xff0 [ 2458.127119] ? ioctl_preallocate+0x1a0/0x1a0 [ 2458.131517] ? lock_downgrade+0x740/0x740 [ 2458.135664] ? __fget+0x225/0x360 [ 2458.139112] ? do_vfs_ioctl+0xff0/0xff0 [ 2458.143083] ? security_file_ioctl+0x83/0xb0 [ 2458.147485] SyS_ioctl+0x7f/0xb0 [ 2458.150929] ? do_vfs_ioctl+0xff0/0xff0 [ 2458.154903] do_syscall_64+0x1d5/0x640 [ 2458.158794] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2458.163975] RIP: 0033:0x466459 [ 2458.167156] RSP: 002b:00007fbc80168188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2458.174857] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 2458.182123] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2458.189386] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2458.196648] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2458.203911] R13: 00007ffc508a7f1f R14: 00007fbc80168300 R15: 0000000000022000 [ 2458.255453] lowmem_reserve[]: 0 0 0 0 0 [ 2458.260416] Node 0 DMA: 17*4kB (UME) 32*8kB (UME) 23*16kB (UME) 29*32kB (UME) 13*64kB (UME) 13*128kB (UM) 5*256kB (UME) 3*512kB (UME) 2*1024kB (ME) 2*2048kB (UM) 0*4096kB = 13076kB [ 2458.298153] Node 0 DMA32: 43*4kB (UME) 3*8kB (E) 44*16kB (ME) 8930*32kB (UME) 45*64kB (U) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 289540kB [ 2458.341717] warn_alloc_show_mem: 4 callbacks suppressed [ 2458.341720] Mem-Info: [ 2458.370234] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2458.401677] active_anon:14620 inactive_anon:44602 isolated_anon:0 [ 2458.401677] active_file:1088 inactive_file:1602 isolated_file:0 [ 2458.401677] unevictable:0 dirty:0 writeback:0 unstable:0 09:16:12 executing program 3: r0 = perf_event_open$cgroup(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = epoll_create(0x7) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000001c0)={0x20000005}) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000580)='/dev/btrfs-control\x00', 0x0, 0x0) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000580)='/dev/btrfs-control\x00', 0x4000, 0x0) epoll_ctl$EPOLL_CTL_DEL(r3, 0x2, r3) r4 = socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x3, 0x300) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r4, 0x89fa, &(0x7f0000003dc0)={'ip6gre0\x00', 0x0}) epoll_ctl$EPOLL_CTL_DEL(r3, 0x2, r4) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r2, 0x80045700, &(0x7f00000000c0)) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, r2) bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x9, 0x80, 0x8001, 0x3, 0x420, 0x1, 0x0, [], 0x0, r2, 0x0, 0x0, 0x3}, 0x40) epoll_wait(r1, &(0x7f0000000100)=[{}], 0x1, 0x0) [ 2458.401677] slab_reclaimable:12491 slab_unreclaimable:123224 [ 2458.401677] mapped:54866 shmem:45846 pagetables:763 bounce:0 [ 2458.401677] free:84668 free_pcp:79 free_cma:0 [ 2458.407219] Node 1 Normal: 4661*4kB (UM) 2323*8kB (UM) 2253*16kB (UME) 2354*32kB (UM) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 148604kB [ 2458.476569] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2458.486602] Node 0 active_anon:57424kB inactive_anon:109696kB active_file:2096kB inactive_file:4352kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:180740kB dirty:0kB writeback:0kB shmem:114196kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 14336kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2458.502641] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2458.554874] Node 1 active_anon:1056kB inactive_anon:68712kB active_file:2356kB inactive_file:2356kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:39224kB dirty:0kB writeback:0kB shmem:69188kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2458.576664] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2458.608852] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2458.645899] 49010 total pagecache pages [ 2458.649890] 0 pages in swap cache [ 2458.671552] Swap cache stats: add 0, delete 0, find 0/0 [ 2458.679067] Free swap = 0kB [ 2458.728803] Node 0 DMA free:11076kB min:204kB low:252kB high:300kB active_anon:8kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2458.745396] Total swap = 0kB [ 2458.766089] systemd-cgroups invoked oom-killer: gfp_mask=0x14280ca(GFP_HIGHUSER_MOVABLE|__GFP_ZERO), nodemask=(null), order=0, oom_score_adj=0 [ 2458.811570] 2097051 pages RAM [ 2458.814704] 0 pages HighMem/MovableOnly [ 2458.819068] systemd-cgroups cpuset=/ mems_allowed=0-1 [ 2458.824276] CPU: 0 PID: 15831 Comm: systemd-cgroups Not tainted 4.14.229-syzkaller #0 [ 2458.832232] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2458.841566] Call Trace: [ 2458.844142] dump_stack+0x1b2/0x281 [ 2458.847748] dump_header+0x178/0x82f [ 2458.851439] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2458.856520] ? ___ratelimit+0x2cd/0x530 [ 2458.860475] oom_kill_process.cold+0x10/0xa40 [ 2458.864956] out_of_memory+0xe3e/0x1190 [ 2458.868913] ? oom_killer_disable+0x1c0/0x1c0 [ 2458.873386] ? mutex_trylock+0x152/0x1a0 [ 2458.877425] __alloc_pages_nodemask+0x23e1/0x2720 [ 2458.882254] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2458.887074] ? vma_merge+0x3bf/0xc70 [ 2458.890767] ? __lock_acquire+0x5fc/0x3f20 [ 2458.894983] alloc_pages_vma+0xd2/0x6d0 [ 2458.898938] __handle_mm_fault+0x25fa/0x4620 [ 2458.903324] ? vm_insert_page+0x7c0/0x7c0 [ 2458.907449] ? vm_mmap_pgoff+0x168/0x1a0 [ 2458.911492] ? mark_held_locks+0xa6/0xf0 [ 2458.915532] handle_mm_fault+0x455/0x9c0 [ 2458.919577] __do_page_fault+0x549/0xad0 [ 2458.923618] ? spurious_fault+0x640/0x640 [ 2458.927743] ? do_page_fault+0x60/0x500 [ 2458.931708] ? page_fault+0x2f/0x50 [ 2458.935309] page_fault+0x45/0x50 [ 2458.938740] RIP: a5dcaed0:0x7fdfa5dc3000 [ 2458.942861] RSP: 000c:0000000000000000 EFLAGS: 7fdfa51aa5f7 [ 2458.958743] 363848 pages reserved [ 2458.959652] lowmem_reserve[]: [ 2458.964468] 0 pages cma reserved [ 2458.969639] 0 2717 2718 2718 2718 [ 2458.980310] Node 0 DMA32 free:18096kB min:36200kB low:45248kB high:54296kB active_anon:57524kB inactive_anon:109696kB active_file:748kB inactive_file:728kB unevictable:0kB writepending:0kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:7488kB pagetables:2924kB bounce:0kB free_pcp:252kB local_pcp:0kB free_cma:0kB [ 2459.015689] lowmem_reserve[]: 0 0 0 0 0 [ 2459.019721] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2459.051496] lowmem_reserve[]: 0 0 0 0 0 [ 2459.055573] Node 1 Normal free:26388kB min:53696kB low:67120kB high:80544kB active_anon:1176kB inactive_anon:68712kB active_file:204kB inactive_file:208kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:320kB pagetables:120kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 2459.070973] Mem-Info: [ 2459.086745] syz-executor.4: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2459.098621] syz-executor.0: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2459.135388] active_anon:14677 inactive_anon:44602 isolated_anon:0 [ 2459.135388] active_file:25 inactive_file:30 isolated_file:0 [ 2459.135388] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2459.135388] slab_reclaimable:12483 slab_unreclaimable:123484 [ 2459.135388] mapped:52943 shmem:45846 pagetables:761 bounce:0 [ 2459.135388] free:13926 free_pcp:30 free_cma:0 [ 2459.137646] lowmem_reserve[]: [ 2459.171229] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 2459.179496] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 2459.184604] CPU: 0 PID: 15789 Comm: syz-executor.0 Not tainted 4.14.229-syzkaller #0 [ 2459.192471] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2459.201817] Call Trace: [ 2459.204404] dump_stack+0x1b2/0x281 [ 2459.208028] warn_alloc.cold+0x96/0x1cc [ 2459.211998] ? zone_watermark_ok_safe+0x220/0x220 [ 2459.216834] ? usleep_range+0x130/0x130 [ 2459.220803] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 2459.225908] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 2459.230915] ? run_timer_softirq+0x5a0/0x5a0 [ 2459.235326] __alloc_pages_nodemask+0x2127/0x2720 [ 2459.235407] syz-executor.1: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 2459.240166] ? lock_acquire+0x170/0x3f0 [ 2459.240180] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2459.260233] ? ion_page_pool_alloc+0x9e/0x1b0 [ 2459.264730] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2459.270186] alloc_pages_current+0x155/0x260 [ 2459.274591] ion_page_pool_alloc+0x118/0x1b0 [ 2459.278991] ion_system_heap_allocate+0x133/0x8c0 [ 2459.283826] ? _raw_spin_unlock+0x29/0x40 [ 2459.287967] ? _ion_heap_freelist_drain+0x6e/0x410 [ 2459.292889] ? ion_system_contig_heap_create+0x130/0x130 [ 2459.298336] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2459.303352] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2459.308193] ion_alloc+0x27a/0x810 [ 2459.311764] ? ion_dma_buf_release+0x40/0x40 [ 2459.315352] (null) [ 2459.316176] ? __might_fault+0x177/0x1b0 [ 2459.318306] syz-executor.1 cpuset=/ [ 2459.322405] ion_ioctl+0xea/0x1f0 [ 2459.322414] ? ion_query_heaps+0x360/0x360 [ 2459.333680] ? ion_query_heaps+0x360/0x360 [ 2459.337912] do_vfs_ioctl+0x75a/0xff0 [ 2459.341711] ? ioctl_preallocate+0x1a0/0x1a0 [ 2459.346115] ? lock_downgrade+0x740/0x740 [ 2459.348718] 0 0 0 [ 2459.350254] ? __fget+0x225/0x360 [ 2459.350263] ? do_vfs_ioctl+0xff0/0xff0 [ 2459.352406] 0 [ 2459.355843] ? security_file_ioctl+0x83/0xb0 [ 2459.355853] SyS_ioctl+0x7f/0xb0 [ 2459.355861] ? do_vfs_ioctl+0xff0/0xff0 [ 2459.355872] do_syscall_64+0x1d5/0x640 [ 2459.355887] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2459.375355] mems_allowed=0-1 [ 2459.377178] RIP: 0033:0x466459 [ 2459.388619] RSP: 002b:00007fbc80168188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2459.396333] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 2459.403594] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2459.410853] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2459.415338] 0 [ 2459.418109] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2459.419890] R13: 00007ffc508a7f1f R14: 00007fbc80168300 R15: 0000000000022000 [ 2459.435649] CPU: 0 PID: 15796 Comm: syz-executor.4 Not tainted 4.14.229-syzkaller #0 [ 2459.443538] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2459.452881] Call Trace: [ 2459.455460] dump_stack+0x1b2/0x281 [ 2459.459086] warn_alloc.cold+0x96/0x1cc [ 2459.463056] ? zone_watermark_ok_safe+0x220/0x220 [ 2459.467895] ? usleep_range+0x130/0x130 [ 2459.471866] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 2459.476963] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 2459.481965] ? run_timer_softirq+0x5a0/0x5a0 [ 2459.486367] __alloc_pages_nodemask+0x2127/0x2720 [ 2459.491211] ? lock_acquire+0x170/0x3f0 [ 2459.495186] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2459.498157] Node 0 DMA: [ 2459.500018] ? ion_page_pool_alloc+0x9e/0x1b0 [ 2459.500033] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2459.502679] 12*4kB [ 2459.507161] alloc_pages_current+0x155/0x260 [ 2459.507174] ion_page_pool_alloc+0x118/0x1b0 [ 2459.507184] ion_system_heap_allocate+0x133/0x8c0 [ 2459.507194] ? _raw_spin_unlock+0x29/0x40 [ 2459.507203] ? _ion_heap_freelist_drain+0x6e/0x410 [ 2459.507217] ? ion_system_contig_heap_create+0x130/0x130 [ 2459.507226] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2459.507235] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2459.507245] ion_alloc+0x27a/0x810 [ 2459.557262] ? ion_dma_buf_release+0x40/0x40 [ 2459.558717] (ME) 19*8kB [ 2459.561661] ? __might_fault+0x177/0x1b0 [ 2459.561672] ion_ioctl+0xea/0x1f0 [ 2459.564326] (ME) [ 2459.568366] ? ion_query_heaps+0x360/0x360 [ 2459.568377] ? ion_query_heaps+0x360/0x360 [ 2459.568386] do_vfs_ioctl+0x75a/0xff0 [ 2459.568397] ? ioctl_preallocate+0x1a0/0x1a0 [ 2459.568411] ? lock_downgrade+0x740/0x740 [ 2459.568424] ? __fget+0x225/0x360 [ 2459.598159] ? do_vfs_ioctl+0xff0/0xff0 [ 2459.602326] ? security_file_ioctl+0x83/0xb0 [ 2459.605382] 12*16kB (UME) [ 2459.606721] SyS_ioctl+0x7f/0xb0 [ 2459.606730] ? do_vfs_ioctl+0xff0/0xff0 [ 2459.609555] 14*32kB [ 2459.612903] do_syscall_64+0x1d5/0x640 [ 2459.623033] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2459.628214] RIP: 0033:0x466459 [ 2459.631396] RSP: 002b:00007f46becae188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2459.639100] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 2459.646364] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2459.653625] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2459.660884] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2459.668143] R13: 00007ffe96c50ebf R14: 00007f46becae300 R15: 0000000000022000 [ 2459.681525] Node 0 active_anon:57532kB inactive_anon:109696kB active_file:520kB inactive_file:1028kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:177852kB dirty:0kB writeback:0kB shmem:114196kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2459.693869] (ME) [ 2459.710263] Node 1 active_anon:1176kB inactive_anon:68712kB active_file:80kB inactive_file:108kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:34920kB dirty:0kB writeback:0kB shmem:69188kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2459.713087] CPU: 1 PID: 15791 Comm: syz-executor.1 Not tainted 4.14.229-syzkaller #0 [ 2459.740402] Node 0 [ 2459.747529] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2459.747534] Call Trace: [ 2459.747553] dump_stack+0x1b2/0x281 [ 2459.747566] warn_alloc.cold+0x96/0x1cc [ 2459.747577] ? zone_watermark_ok_safe+0x220/0x220 [ 2459.747586] ? usleep_range+0x130/0x130 [ 2459.747594] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 2459.747605] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 2459.747615] ? run_timer_softirq+0x5a0/0x5a0 [ 2459.747631] __alloc_pages_nodemask+0x2127/0x2720 [ 2459.747645] ? lock_acquire+0x170/0x3f0 [ 2459.747661] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2459.747671] ? ion_page_pool_alloc+0x9e/0x1b0 [ 2459.747688] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2459.747703] ? alloc_pages_current+0x16/0x260 [ 2459.747717] alloc_pages_current+0x155/0x260 [ 2459.750634] DMA free:11288kB min:204kB low:252kB high:300kB active_anon:8kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2459.759286] ion_page_pool_alloc+0x118/0x1b0 [ 2459.759297] ion_system_heap_allocate+0x133/0x8c0 [ 2459.759308] ? _raw_spin_unlock+0x29/0x40 [ 2459.759316] ? _ion_heap_freelist_drain+0x6e/0x410 [ 2459.759325] ? ion_system_contig_heap_create+0x130/0x130 [ 2459.759335] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2459.759347] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2459.759358] ion_alloc+0x27a/0x810 [ 2459.759370] ? ion_dma_buf_release+0x40/0x40 [ 2459.759382] ? __might_fault+0x177/0x1b0 [ 2459.762302] lowmem_reserve[]: [ 2459.765556] ion_ioctl+0xea/0x1f0 [ 2459.765565] ? ion_query_heaps+0x360/0x360 [ 2459.765576] ? ion_query_heaps+0x360/0x360 [ 2459.765586] do_vfs_ioctl+0x75a/0xff0 [ 2459.765597] ? ioctl_preallocate+0x1a0/0x1a0 [ 2459.765605] ? lock_downgrade+0x740/0x740 [ 2459.765619] ? __fget+0x225/0x360 [ 2459.765627] ? do_vfs_ioctl+0xff0/0xff0 [ 2459.765640] ? security_file_ioctl+0x83/0xb0 [ 2459.769648] 0 [ 2459.774421] SyS_ioctl+0x7f/0xb0 [ 2459.779081] 2717 [ 2459.783458] ? do_vfs_ioctl+0xff0/0xff0 [ 2459.783470] do_syscall_64+0x1d5/0x640 [ 2459.783485] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2459.783493] RIP: 0033:0x466459 [ 2459.783498] RSP: 002b:00007f10b67af188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2459.783508] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 2459.783515] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2459.788870] 2718 [ 2459.792912] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2459.792917] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2459.792923] R13: 00007ffd58825dcf R14: 00007f10b67af300 R15: 0000000000022000 [ 2459.825336] 10*64kB [ 2459.837143] 2718 [ 2459.905306] (ME) [ 2459.913371] 2718 [ 2459.945312] 4*128kB [ 2459.956160] warn_alloc_show_mem: 1 callbacks suppressed [ 2459.956163] Mem-Info: [ 2459.975334] (UM) 5*256kB (UME) 3*512kB (UME) 2*1024kB (ME) 2*2048kB (UM) 0*4096kB = 10952kB [ 2459.975369] Node 0 DMA32: 42*4kB (ME) 5*8kB (ME) 18*16kB (E) 11*32kB (ME) 696*64kB (U) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 45392kB [ 2459.975437] Node 0 Normal: [ 2460.001077] active_anon:14702 inactive_anon:44602 isolated_anon:0 [ 2460.001077] active_file:134 inactive_file:1071 isolated_file:0 [ 2460.001077] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2460.001077] slab_reclaimable:12483 slab_unreclaimable:123152 [ 2460.001077] mapped:53897 shmem:45846 pagetables:782 bounce:0 [ 2460.001077] free:42932 free_pcp:409 free_cma:0 [ 2460.085327] 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2460.085375] Node 1 Normal: 19*4kB (UM) 82*8kB (M) 68*16kB (UME) 62*32kB (UM) 719*64kB (UM) 143*128kB (UM) 4*256kB (M) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 69148kB [ 2460.085457] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2460.085464] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2460.085470] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2460.085476] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2460.085479] 47096 total pagecache pages [ 2460.085488] 0 pages in swap cache [ 2460.085493] Swap cache stats: add 0, delete 0, find 0/0 [ 2460.217619] Node 0 DMA32 free:43680kB min:36200kB low:45248kB high:54296kB active_anon:57524kB inactive_anon:109696kB active_file:532kB inactive_file:4280kB unevictable:0kB writepending:0kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:7424kB pagetables:2924kB bounce:0kB free_pcp:1072kB local_pcp:472kB free_cma:0kB [ 2460.225314] Free swap = 0kB [ 2460.297559] Node 0 active_anon:57432kB inactive_anon:109696kB active_file:532kB inactive_file:4280kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:180872kB dirty:0kB writeback:0kB shmem:114196kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2460.355277] Total swap = 0kB [ 2460.358327] 2097051 pages RAM [ 2460.361424] 0 pages HighMem/MovableOnly [ 2460.375291] lowmem_reserve[]: 0 0 0 0 0 [ 2460.388144] 363848 pages reserved [ 2460.391607] 0 pages cma reserved [ 2460.394871] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2460.455289] Node 1 active_anon:1476kB inactive_anon:68712kB active_file:1204kB inactive_file:1304kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:35716kB dirty:0kB writeback:0kB shmem:69188kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2460.465271] lowmem_reserve[]: 0 0 0 0 0 [ 2460.511091] Node 1 Normal free:325952kB min:53696kB low:67120kB high:80544kB active_anon:1476kB inactive_anon:68712kB active_file:1304kB inactive_file:1304kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:320kB pagetables:120kB bounce:0kB free_pcp:240kB local_pcp:120kB free_cma:0kB [ 2460.569989] Node 0 DMA free:11116kB min:204kB low:252kB high:300kB active_anon:8kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:64kB pagetables:4kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2460.605525] lowmem_reserve[]: 0 0 0 0 0 [ 2460.629107] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2460.634189] Node 0 DMA32 free:45152kB min:36200kB low:45248kB high:54296kB active_anon:57524kB inactive_anon:109696kB active_file:532kB inactive_file:4280kB unevictable:0kB writepending:0kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:7424kB pagetables:2924kB bounce:0kB free_pcp:744kB local_pcp:188kB free_cma:0kB [ 2460.669708] Node 0 DMA: 7*4kB (UME) 20*8kB (UME) 19*16kB (UME) 14*32kB (ME) 11*64kB (UME) 4*128kB (UM) 5*256kB (UME) 3*512kB (UME) 2*1024kB (ME) 2*2048kB (UM) 0*4096kB = 11116kB [ 2460.708818] Node 0 DMA32: 41*4kB (E) 5*8kB (UE) 20*16kB (UME) 12*32kB (UME) 658*64kB (U) 13*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 44684kB [ 2460.735225] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2460.755728] lowmem_reserve[]: 0 0 0 0 0 [ 2460.759744] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2460.811392] Node 1 Normal: 1*4kB (M) 0*8kB 2*16kB (UE) 24*32kB (UM) 616*64kB (UM) 460*128kB (UM) 235*256kB (UM) 116*512kB (U) 94*1024kB (U) 50*2048kB (U) 23*4096kB (U) = 511524kB [ 2460.834608] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2460.849665] lowmem_reserve[]: 0 0 0 0 0 [ 2460.853676] Node 1 Normal free:536596kB min:53696kB low:67120kB high:80544kB active_anon:2304kB inactive_anon:68716kB active_file:1384kB inactive_file:1576kB unevictable:0kB writepending:104kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:416kB pagetables:140kB bounce:0kB free_pcp:160kB local_pcp:104kB free_cma:0kB [ 2460.900023] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2460.919280] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2460.939243] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2460.960134] 47950 total pagecache pages [ 2460.964113] 0 pages in swap cache [ 2460.968422] lowmem_reserve[]: 0 0 0 0 0 [ 2460.972424] Node 0 DMA: 7*4kB (UME) 20*8kB (UME) 19*16kB (UME) 14*32kB (ME) 11*64kB (UME) 4*128kB (UM) 5*256kB (UME) 3*512kB (UME) 2*1024kB (ME) 2*2048kB (UM) 0*4096kB = 11116kB [ 2461.005253] Swap cache stats: add 0, delete 0, find 0/0 [ 2461.010639] Free swap = 0kB [ 2461.013650] Total swap = 0kB [ 2461.038933] 2097051 pages RAM [ 2461.042250] 0 pages HighMem/MovableOnly [ 2461.047174] 363848 pages reserved [ 2461.050639] 0 pages cma reserved [ 2461.054003] Out of memory (oom_kill_allocating_task): Kill process 15831 (systemd-cgroups) score 0 or sacrifice child [ 2461.070408] Node 0 DMA32: 42*4kB (UE) 5*8kB (UE) 19*16kB (ME) 12*32kB (UME) 441*64kB (UM) 117*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 44096kB [ 2461.089436] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2461.100453] Killed process 15831 (systemd-cgroups) total-vm:28880kB, anon-rss:136kB, file-rss:0kB, shmem-rss:0kB [ 2461.115430] Node 1 Normal: 1*4kB (U) 1*8kB (U) 1*16kB (E) 0*32kB 20*64kB (M) 199*128kB (UM) 345*256kB (UM) 150*512kB (U) 147*1024kB (U) 79*2048kB (U) 24*4096kB (U) = 602524kB [ 2461.134724] oom_reaper: reaped process 15831 (systemd-cgroups), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 2461.145064] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2461.179038] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2461.206520] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2461.245113] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2461.269283] 47200 total pagecache pages [ 2461.273287] 0 pages in swap cache [ 2461.285267] Swap cache stats: add 0, delete 0, find 0/0 [ 2461.290654] Free swap = 0kB [ 2461.293663] Total swap = 0kB [ 2461.315172] 2097051 pages RAM [ 2461.318349] 0 pages HighMem/MovableOnly [ 2461.322311] 363848 pages reserved [ 2461.337572] 0 pages cma reserved 09:16:16 executing program 5: epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x2, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x10000, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00032abd7000fcdbdf25010000000c001000010000000000000014001f00ff01000000000000000007000000000108000b0002000006"], 0x3c}, 0x1, 0x0, 0x0, 0x4004}, 0x20000001) bind$l2tp6(0xffffffffffffffff, &(0x7f0000000300)={0xa, 0x0, 0xc6d, @loopback, 0x6, 0x2}, 0x20) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f0000000080)={0x50000010}) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r1, &(0x7f0000000040)={0x40000008}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000180)={0x80000001, 0x13}) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r2, 0x89fa, &(0x7f0000003dc0)={'ip6gre0\x00', 0x0}) getsockname(r2, &(0x7f00000000c0)=@pptp, &(0x7f00000001c0)=0x80) [ 2461.909675] warn_alloc: 1 callbacks suppressed [ 2461.909679] syz-executor.5: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2461.967292] systemd-journal invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=0 [ 2461.994633] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 2462.015951] CPU: 0 PID: 15851 Comm: syz-executor.5 Not tainted 4.14.229-syzkaller #0 [ 2462.023846] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2462.033195] Call Trace: [ 2462.035782] dump_stack+0x1b2/0x281 [ 2462.039497] warn_alloc.cold+0x96/0x1cc [ 2462.043470] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2462.048486] ? zone_watermark_ok_safe+0x220/0x220 [ 2462.053329] __alloc_pages_nodemask+0x2127/0x2720 [ 2462.058151] ? _raw_spin_unlock_irq+0x24/0x80 [ 2462.062632] ? lock_acquire+0x170/0x3f0 [ 2462.066590] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2462.071437] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2462.076869] ? __mutex_unlock_slowpath+0x75/0x770 [ 2462.081696] alloc_pages_current+0x155/0x260 [ 2462.086091] ion_page_pool_alloc+0x118/0x1b0 [ 2462.090495] ion_system_heap_allocate+0x133/0x8c0 [ 2462.095320] ? ion_alloc+0x187/0x810 [ 2462.099029] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2462.104459] ? ion_system_contig_heap_create+0x130/0x130 [ 2462.109889] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2462.114884] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2462.119722] ion_alloc+0x204/0x810 [ 2462.123242] ? ion_dma_buf_release+0x40/0x40 [ 2462.127629] ? __might_fault+0x177/0x1b0 [ 2462.131670] ion_ioctl+0xea/0x1f0 [ 2462.135102] ? ion_query_heaps+0x360/0x360 [ 2462.139319] ? SyS_epoll_ctl+0x1e0/0x2780 [ 2462.143445] ? ion_query_heaps+0x360/0x360 [ 2462.147658] do_vfs_ioctl+0x75a/0xff0 [ 2462.151437] ? ioctl_preallocate+0x1a0/0x1a0 [ 2462.155822] ? lock_downgrade+0x740/0x740 [ 2462.159954] ? __fget+0x225/0x360 [ 2462.163384] ? do_vfs_ioctl+0xff0/0xff0 [ 2462.167340] ? security_file_ioctl+0x83/0xb0 [ 2462.171726] SyS_ioctl+0x7f/0xb0 [ 2462.175075] ? do_vfs_ioctl+0xff0/0xff0 [ 2462.179035] do_syscall_64+0x1d5/0x640 [ 2462.182916] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2462.188083] RIP: 0033:0x466459 [ 2462.191250] RSP: 002b:00007f4d0bcd5188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2462.198947] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 2462.206200] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2462.213458] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2462.220711] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2462.227961] R13: 00007ffe1117a98f R14: 00007f4d0bcd5300 R15: 0000000000022000 [ 2462.241763] systemd-journal cpuset=/ mems_allowed=0-1 [ 2462.247756] CPU: 0 PID: 15732 Comm: systemd-journal Not tainted 4.14.229-syzkaller #0 [ 2462.255720] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2462.265061] Call Trace: [ 2462.267652] dump_stack+0x1b2/0x281 [ 2462.271271] dump_header+0x178/0x82f [ 2462.274976] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2462.280060] ? ___ratelimit+0x2cd/0x530 [ 2462.284017] oom_kill_process.cold+0x10/0xa40 [ 2462.288501] out_of_memory+0xe3e/0x1190 [ 2462.292457] ? oom_killer_disable+0x1c0/0x1c0 [ 2462.296930] ? mutex_trylock+0x152/0x1a0 [ 2462.300971] __alloc_pages_nodemask+0x23e1/0x2720 [ 2462.305798] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2462.310623] ? cache_grow_begin+0x3f/0x700 [ 2462.314836] cache_grow_begin+0x91/0x700 [ 2462.318882] fallback_alloc+0x207/0x2c0 [ 2462.322835] kmem_cache_alloc+0x1e5/0x3c0 [ 2462.326962] getname_flags+0xc8/0x550 [ 2462.330746] do_sys_open+0x1ce/0x410 [ 2462.334454] ? filp_open+0x60/0x60 [ 2462.337973] ? do_syscall_64+0x4c/0x640 [ 2462.341924] ? do_sys_open+0x410/0x410 [ 2462.345789] do_syscall_64+0x1d5/0x640 [ 2462.349656] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2462.354821] RIP: 0033:0x7f49cdd52840 [ 2462.358510] RSP: 002b:00007ffe9e008a58 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 2462.366196] RAX: ffffffffffffffda RBX: 00007ffe9e008d60 RCX: 00007f49cdd52840 [ 2462.373444] RDX: 00000000000001a0 RSI: 0000000000080042 RDI: 0000563b3ab67830 [ 2462.380692] RBP: 000000000000000d R08: 000000000000c0c1 R09: 00000000ffffffff [ 2462.387943] R10: 0000000000000069 R11: 0000000000000246 R12: 00000000ffffffff [ 2462.395191] R13: 0000563b3ab62040 R14: 00007ffe9e008d20 R15: 0000563b3ab67120 [ 2462.425171] Mem-Info: [ 2462.427656] active_anon:14987 inactive_anon:44601 isolated_anon:0 [ 2462.427656] active_file:68 inactive_file:78 isolated_file:0 [ 2462.427656] unevictable:0 dirty:115 writeback:0 unstable:0 [ 2462.427656] slab_reclaimable:12483 slab_unreclaimable:122667 [ 2462.427656] mapped:44267 shmem:45843 pagetables:776 bounce:0 [ 2462.427656] free:13867 free_pcp:256 free_cma:0 [ 2462.490003] warn_alloc_show_mem: 2 callbacks suppressed [ 2462.490007] Mem-Info: [ 2462.491329] Node 0 active_anon:57080kB inactive_anon:109684kB active_file:16kB inactive_file:16kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:176824kB dirty:0kB writeback:0kB shmem:114176kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2462.495468] active_anon:14987 inactive_anon:44601 isolated_anon:0 [ 2462.495468] active_file:49 inactive_file:72 isolated_file:0 [ 2462.495468] unevictable:0 dirty:115 writeback:0 unstable:0 [ 2462.495468] slab_reclaimable:12483 slab_unreclaimable:122277 [ 2462.495468] mapped:44242 shmem:45843 pagetables:776 bounce:0 [ 2462.495468] free:14541 free_pcp:0 free_cma:0 [ 2462.495484] Node 0 active_anon:57080kB inactive_anon:109684kB active_file:16kB inactive_file:16kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:176824kB dirty:0kB writeback:0kB shmem:114176kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2462.495500] Node 1 active_anon:2868kB inactive_anon:68720kB active_file:180kB inactive_file:272kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:144kB dirty:460kB writeback:0kB shmem:69196kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2462.495504] Node 0 DMA free:10972kB min:204kB low:252kB high:300kB active_anon:12kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:64kB pagetables:4kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2462.495524] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2462.495546] Node 0 DMA32 free:19552kB min:36200kB low:45248kB high:54296kB active_anon:57068kB inactive_anon:109684kB active_file:16kB inactive_file:16kB unevictable:0kB writepending:0kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:7360kB pagetables:2784kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2462.495566] lowmem_reserve[]: 0 [ 2462.498821] Node 1 active_anon:2868kB inactive_anon:68720kB active_file:180kB inactive_file:272kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:144kB dirty:460kB writeback:0kB shmem:69196kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2462.626571] 0 [ 2462.646053] Node 0 [ 2462.696255] 0 0 0 [ 2462.719059] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2462.744620] lowmem_reserve[]: 0 0 0 0 0 [ 2462.748653] Node 1 Normal free:26464kB min:53696kB low:67120kB high:80544kB active_anon:2868kB inactive_anon:68720kB active_file:300kB inactive_file:332kB unevictable:0kB writepending:460kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:448kB pagetables:316kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2462.777434] lowmem_reserve[]: 0 0 0 0 0 [ 2462.781442] Node 0 DMA: 11*4kB (ME) 20*8kB (UME) 11*16kB (ME) 15*32kB (UME) 10*64kB (ME) 4*128kB (UM) 5*256kB (UME) 3*512kB (UME) 2*1024kB (ME) 2*2048kB (UM) 0*4096kB = 10972kB [ 2462.790505] DMA free:10972kB min:204kB low:252kB high:300kB active_anon:12kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:64kB pagetables:4kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2462.800710] Node 0 [ 2462.827569] syz-executor.1: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2462.831890] DMA32: [ 2462.843997] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 2462.851406] CPU: 1 PID: 15826 Comm: syz-executor.1 Not tainted 4.14.229-syzkaller #0 [ 2462.859274] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2462.868627] 375*4kB [ 2462.868700] Call Trace: [ 2462.868702] (ME) 197*8kB [ 2462.871023] dump_stack+0x1b2/0x281 [ 2462.873578] (ME) [ 2462.876320] warn_alloc.cold+0x96/0x1cc [ 2462.876337] ? zone_watermark_ok_safe+0x220/0x220 [ 2462.876348] ? usleep_range+0x130/0x130 [ 2462.894769] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 2462.897926] 77*16kB (ME) [ 2462.899863] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 2462.899874] ? run_timer_softirq+0x5a0/0x5a0 [ 2462.902607] 49*32kB [ 2462.907608] __alloc_pages_nodemask+0x2127/0x2720 [ 2462.907626] ? lock_acquire+0x170/0x3f0 [ 2462.923104] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2462.927078] (UME) [ 2462.927934] ? ion_page_pool_alloc+0x9e/0x1b0 [ 2462.927936] 7*64kB (M) [ 2462.930084] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2462.934555] 92*128kB [ 2462.937129] alloc_pages_current+0x155/0x260 [ 2462.937142] ion_page_pool_alloc+0x118/0x1b0 [ 2462.945764] (U) [ 2462.949349] ion_system_heap_allocate+0x133/0x8c0 [ 2462.953735] 0*256kB [ 2462.955693] ? _raw_spin_unlock+0x29/0x40 [ 2462.955702] ? _ion_heap_freelist_drain+0x6e/0x410 [ 2462.955713] ? ion_system_contig_heap_create+0x130/0x130 [ 2462.960523] 0*512kB [ 2462.962829] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2462.966963] 0*1024kB [ 2462.971868] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2462.977354] 0*2048kB [ 2462.979613] ion_alloc+0x27a/0x810 [ 2462.984594] 0*4096kB [ 2462.986988] ? ion_dma_buf_release+0x40/0x40 [ 2462.987003] ? __might_fault+0x177/0x1b0 [ 2462.991816] = 18100kB [ 2462.994206] ion_ioctl+0xea/0x1f0 [ 2462.997779] Node 0 [ 2463.000143] ? ion_query_heaps+0x360/0x360 [ 2463.004520] Normal: [ 2463.008567] ? _raw_spin_unlock+0x29/0x40 [ 2463.008576] ? ion_query_heaps+0x360/0x360 [ 2463.008585] do_vfs_ioctl+0x75a/0xff0 [ 2463.008598] ? ioctl_preallocate+0x1a0/0x1a0 [ 2463.010984] 0*4kB [ 2463.014415] ? lock_downgrade+0x740/0x740 [ 2463.016647] 0*8kB [ 2463.020846] ? __fget+0x225/0x360 [ 2463.023155] 0*16kB [ 2463.027292] ? do_vfs_ioctl+0xff0/0xff0 [ 2463.027303] ? security_file_ioctl+0x83/0xb0 [ 2463.027313] SyS_ioctl+0x7f/0xb0 [ 2463.031521] 0*32kB [ 2463.035297] ? do_vfs_ioctl+0xff0/0xff0 [ 2463.035310] do_syscall_64+0x1d5/0x640 [ 2463.035324] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2463.039716] 0*64kB [ 2463.041841] RIP: 0033:0x466459 [ 2463.041845] RSP: 002b:00007f10b674c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2463.041853] RAX: ffffffffffffffda RBX: 000000000056c158 RCX: 0000000000466459 [ 2463.041857] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2463.041862] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2463.041866] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c158 [ 2463.041871] R13: 00007ffd58825dcf R14: 00007f10b674c300 R15: 0000000000022000 [ 2463.044513] lowmem_reserve[]: [ 2463.054819] syz-executor.4: [ 2463.062283] 0 [ 2463.079845] page allocation failure: order:0 [ 2463.089055] 2717 [ 2463.106345] 0*128kB [ 2463.116673] 2718 [ 2463.134215] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 2463.141614] 2718 [ 2463.153514] (null) [ 2463.167193] 2718 [ 2463.169031] 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB [ 2463.169280] Node 0 DMA32 free:18100kB min:36200kB low:45248kB high:54296kB active_anon:57068kB inactive_anon:109684kB active_file:16kB inactive_file:16kB unevictable:0kB writepending:0kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:7360kB pagetables:2784kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2463.174630] = 0kB [ 2463.209261] lowmem_reserve[]: 0 0 0 0 0 [ 2463.213271] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2463.216915] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 2463.246321] CPU: 0 PID: 15816 Comm: syz-executor.4 Not tainted 4.14.229-syzkaller #0 [ 2463.246531] lowmem_reserve[]: [ 2463.254213] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2463.254220] Call Trace: [ 2463.263039] 0 [ 2463.266656] dump_stack+0x1b2/0x281 [ 2463.266695] warn_alloc.cold+0x96/0x1cc [ 2463.266708] ? zone_watermark_ok_safe+0x220/0x220 [ 2463.270977] 0 [ 2463.271061] ? usleep_range+0x130/0x130 [ 2463.274654] 0 [ 2463.278606] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 2463.278618] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 2463.278628] ? run_timer_softirq+0x5a0/0x5a0 [ 2463.278645] __alloc_pages_nodemask+0x2127/0x2720 [ 2463.278660] ? lock_acquire+0x170/0x3f0 [ 2463.278676] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2463.278685] ? ion_page_pool_alloc+0x9e/0x1b0 [ 2463.278701] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2463.289518] 0 [ 2463.291048] alloc_pages_current+0x155/0x260 [ 2463.299367] 0 [ 2463.301116] ion_page_pool_alloc+0x118/0x1b0 [ 2463.314270] ion_system_heap_allocate+0x133/0x8c0 [ 2463.340226] Node 1 [ 2463.341469] ? _raw_spin_unlock+0x29/0x40 [ 2463.352633] ? _ion_heap_freelist_drain+0x6e/0x410 [ 2463.357561] ? ion_system_contig_heap_create+0x130/0x130 [ 2463.360808] Normal free:26332kB min:53696kB low:67120kB high:80544kB active_anon:2868kB inactive_anon:68720kB active_file:236kB inactive_file:172kB unevictable:0kB writepending:396kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:448kB pagetables:316kB bounce:0kB free_pcp:120kB local_pcp:0kB free_cma:0kB [ 2463.363003] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2463.396265] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2463.398890] syz-executor.2: page allocation failure: order:0 [ 2463.401100] ion_alloc+0x27a/0x810 [ 2463.401113] ? ion_dma_buf_release+0x40/0x40 [ 2463.412631] lowmem_reserve[]: 0 [ 2463.414793] ? __might_fault+0x177/0x1b0 [ 2463.414798] 0 [ 2463.418060] ion_ioctl+0xea/0x1f0 [ 2463.418073] ? ion_query_heaps+0x360/0x360 [ 2463.418085] ? ion_query_heaps+0x360/0x360 [ 2463.418096] do_vfs_ioctl+0x75a/0xff0 [ 2463.418107] ? ioctl_preallocate+0x1a0/0x1a0 [ 2463.418115] ? lock_downgrade+0x740/0x740 [ 2463.418128] ? __fget+0x225/0x360 [ 2463.433405] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 2463.435809] ? do_vfs_ioctl+0xff0/0xff0 [ 2463.435822] ? security_file_ioctl+0x83/0xb0 [ 2463.435831] SyS_ioctl+0x7f/0xb0 [ 2463.435842] ? do_vfs_ioctl+0xff0/0xff0 [ 2463.439618] (null) [ 2463.444008] do_syscall_64+0x1d5/0x640 [ 2463.463719] 0 [ 2463.466998] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2463.467007] RIP: 0033:0x466459 [ 2463.467012] RSP: 002b:00007f46bec6c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2463.467021] RAX: ffffffffffffffda RBX: 000000000056c0b0 RCX: 0000000000466459 [ 2463.467026] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000004 [ 2463.467031] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2463.467036] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c0b0 [ 2463.467042] R13: 00007ffe96c50ebf R14: 00007f46bec6c300 R15: 0000000000022000 [ 2463.472563] Node 1 [ 2463.474394] 0 [ 2463.476559] Normal: 155*4kB (UM) 132*8kB (M) 77*16kB (ME) 46*32kB (UM) 51*64kB (UM) 18*128kB [ 2463.505452] syz-executor.2 cpuset= [ 2463.546078] 0 [ 2463.547900] / mems_allowed=0-1 [ 2463.556577] CPU: 1 PID: 15806 Comm: syz-executor.2 Not tainted 4.14.229-syzkaller #0 [ 2463.564461] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2463.565326] Node 0 [ 2463.573802] Call Trace: [ 2463.573820] dump_stack+0x1b2/0x281 [ 2463.573834] warn_alloc.cold+0x96/0x1cc [ 2463.586199] ? zone_watermark_ok_safe+0x220/0x220 [ 2463.591038] ? usleep_range+0x130/0x130 [ 2463.595025] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 2463.598862] DMA: [ 2463.600124] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 2463.600135] ? run_timer_softirq+0x5a0/0x5a0 [ 2463.604401] 11*4kB [ 2463.607195] __alloc_pages_nodemask+0x2127/0x2720 [ 2463.607221] ? lock_acquire+0x170/0x3f0 [ 2463.607237] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2463.617264] (ME) [ 2463.618679] ? ion_page_pool_alloc+0x9e/0x1b0 [ 2463.618696] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2463.625926] 20*8kB [ 2463.627484] alloc_pages_current+0x155/0x260 [ 2463.627497] ion_page_pool_alloc+0x118/0x1b0 [ 2463.632814] (UME) [ 2463.634016] ion_system_heap_allocate+0x133/0x8c0 [ 2463.634030] ? _raw_spin_unlock+0x29/0x40 [ 2463.641810] (M) [ 2463.646061] ? _ion_heap_freelist_drain+0x6e/0x410 [ 2463.646071] ? ion_system_contig_heap_create+0x130/0x130 [ 2463.646082] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2463.646092] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2463.646103] ion_alloc+0x27a/0x810 [ 2463.659492] 16*256kB [ 2463.661733] ? ion_dma_buf_release+0x40/0x40 [ 2463.661746] ? __might_fault+0x177/0x1b0 [ 2463.666980] 11*16kB [ 2463.668622] ion_ioctl+0xea/0x1f0 [ 2463.668632] ? ion_query_heaps+0x360/0x360 [ 2463.675049] (UM) [ 2463.679063] ? ion_query_heaps+0x360/0x360 [ 2463.679076] do_vfs_ioctl+0x75a/0xff0 [ 2463.693944] (ME) [ 2463.694269] ? ioctl_preallocate+0x1a0/0x1a0 [ 2463.694281] ? lock_downgrade+0x740/0x740 [ 2463.705048] 4*512kB [ 2463.708276] ? __fget+0x225/0x360 [ 2463.710307] (UM) [ 2463.714522] ? do_vfs_ioctl+0xff0/0xff0 [ 2463.718356] 15*32kB [ 2463.720340] ? security_file_ioctl+0x83/0xb0 [ 2463.720351] SyS_ioctl+0x7f/0xb0 [ 2463.720360] ? do_vfs_ioctl+0xff0/0xff0 [ 2463.724761] (UME) [ 2463.728874] do_syscall_64+0x1d5/0x640 [ 2463.728889] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2463.728898] RIP: 0033:0x466459 [ 2463.728903] RSP: 002b:00007f3bc6e74188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2463.744994] 10*64kB [ 2463.747339] RAX: ffffffffffffffda RBX: 000000000056c008 RCX: 0000000000466459 [ 2463.747345] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2463.747350] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2463.747356] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c008 [ 2463.755134] (ME) [ 2463.756785] R13: 00007ffe618eb5ff R14: 00007f3bc6e74300 R15: 0000000000022000 [ 2463.757049] warn_alloc_show_mem: 1 callbacks suppressed [ 2463.757052] Mem-Info: [ 2463.770110] 4*128kB [ 2463.825820] 2*1024kB (UM) 0*2048kB 2*4096kB (U) = 26332kB [ 2463.828396] active_anon:14987 inactive_anon:44601 isolated_anon:0 [ 2463.828396] active_file:71 inactive_file:896 isolated_file:0 [ 2463.828396] unevictable:0 dirty:99 writeback:0 unstable:0 [ 2463.828396] slab_reclaimable:12482 slab_unreclaimable:122265 [ 2463.828396] mapped:44781 shmem:45843 pagetables:776 bounce:0 [ 2463.828396] free:81121 free_pcp:131 free_cma:0 [ 2463.833803] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2463.880915] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2463.893493] (UM) 5*256kB (UME) 3*512kB (UME) 2*1024kB (ME) 2*2048kB (UM) 0*4096kB = 10972kB [ 2463.902820] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2463.919748] Node 0 DMA32: 313*4kB (ME) 197*8kB (ME) 77*16kB (ME) 49*32kB (UME) 851*64kB (UM) 1175*128kB (UM) 168*256kB (U) 4*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 255548kB [ 2463.939561] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2463.944982] Node 0 active_anon:57080kB inactive_anon:109684kB active_file:16kB inactive_file:16kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:176824kB dirty:0kB writeback:0kB shmem:114176kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2463.948247] 46840 total pagecache pages [ 2463.984486] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2464.003486] Node 1 Normal: 1*4kB (U) 1*8kB (U) 2*16kB (UE) 21*32kB (UM) 620*64kB (UM) 33*128kB (UM) 16*256kB (UM) 5*512kB (UM) 47*1024kB (UM) 21*2048kB (U) 10*4096kB (U) = 183372kB [ 2464.023683] 0 pages in swap cache [ 2464.027802] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2464.040430] Swap cache stats: add 0, delete 0, find 0/0 [ 2464.044974] Node 1 active_anon:2924kB inactive_anon:68720kB active_file:312kB inactive_file:3636kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:2328kB dirty:428kB writeback:0kB shmem:69196kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2464.046845] Free swap = 0kB [ 2464.082545] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2464.089425] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2464.098304] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2464.104773] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2464.113973] Node 0 DMA free:11676kB min:204kB low:252kB high:300kB active_anon:12kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:64kB pagetables:4kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2464.114031] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2464.150709] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2464.158242] Total swap = 0kB [ 2464.161262] 2097051 pages RAM [ 2464.162981] lowmem_reserve[]: [ 2464.164350] 0 pages HighMem/MovableOnly [ 2464.164354] 363848 pages reserved [ 2464.164357] 0 pages cma reserved [ 2464.164970] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2464.167677] 0 [ 2464.176474] device bridge_slave_1 left promiscuous mode [ 2464.191889] 2717 2718 2718 2718 [ 2464.192110] bridge0: port 2(bridge_slave_1) entered disabled state [ 2464.199678] Node 0 DMA32 free:417532kB min:36200kB low:45248kB high:54296kB active_anon:57068kB inactive_anon:109684kB active_file:16kB inactive_file:16kB unevictable:0kB writepending:0kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:7360kB pagetables:2784kB bounce:0kB free_pcp:796kB local_pcp:620kB free_cma:0kB [ 2464.224913] 46840 total pagecache pages [ 2464.236640] device bridge_slave_0 left promiscuous mode [ 2464.242150] bridge0: port 1(bridge_slave_0) entered disabled state [ 2464.255181] 0 pages in swap cache [ 2464.258157] lowmem_reserve[]: [ 2464.258635] Swap cache stats: add 0, delete 0, find 0/0 [ 2464.258637] 0 0 [ 2464.261720] Free swap = 0kB [ 2464.261723] Total swap = 0kB [ 2464.261730] 2097051 pages RAM [ 2464.261733] 0 pages HighMem/MovableOnly [ 2464.261736] 363848 pages reserved [ 2464.261742] 0 pages cma reserved [ 2464.269600] 0 [ 2464.289249] device veth1_macvtap left promiscuous mode [ 2464.292591] 0 0 [ 2464.296914] Out of memory (oom_kill_allocating_task): Kill process 15732 (systemd-journal) score 0 or sacrifice child [ 2464.298406] Node 0 [ 2464.309256] device veth0_macvtap left promiscuous mode [ 2464.312694] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2464.317374] device veth1_vlan left promiscuous mode [ 2464.355097] Killed process 15732 (systemd-journal) total-vm:46096kB, anon-rss:468kB, file-rss:0kB, shmem-rss:2740kB [ 2464.375167] oom_reaper: reaped process 15732 (systemd-journal), now anon-rss:0kB, file-rss:0kB, shmem-rss:2740kB [ 2464.400957] device veth0_vlan left promiscuous mode 09:16:18 executing program 3: r0 = perf_event_open$cgroup(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = epoll_create(0x0) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000580)='/dev/btrfs-control\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, r2) ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(r2, 0x7af, &(0x7f0000000080)={@any, 0x80000000}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000001c0)={0x20000005}) epoll_create(0x0) r3 = add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f0000000200)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffff8) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000580)='/dev/btrfs-control\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r4, 0x2, r4) epoll_wait(r4, &(0x7f0000000240)=[{}, {}, {}], 0x3, 0x80) add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, r3) epoll_wait(r1, &(0x7f0000000100)=[{}], 0x1, 0x0) [ 2464.437718] lowmem_reserve[]: 0 0 0 0 0 [ 2464.453472] Node 1 Normal free:437964kB min:53696kB low:67120kB high:80544kB active_anon:2924kB inactive_anon:68720kB active_file:312kB inactive_file:3636kB unevictable:0kB writepending:428kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:352kB pagetables:316kB bounce:0kB free_pcp:716kB local_pcp:536kB free_cma:0kB [ 2464.502845] systemd[1]: systemd-journald.service: Failed with result 'signal'. [ 2464.524346] systemd[1]: systemd-journald.service: Service has no hold-off time, scheduling restart. [ 2464.552396] systemd[1]: Stopped Journal Service. [ 2464.620846] lowmem_reserve[]: 0 0 0 0 0 [ 2464.628877] systemd[1]: Starting Journal Service... [ 2464.637240] Node 0 DMA: 11*4kB (ME) 20*8kB (UME) 11*16kB (ME) 15*32kB (UME) 21*64kB (UME) 4*128kB (UM) 5*256kB (UME) 3*512kB (UME) 2*1024kB (ME) 2*2048kB (UM) 0*4096kB = 11676kB [ 2464.670885] Node 0 DMA32: 1665*4kB (UME) 50*8kB (UE) 1797*16kB (UME) 202*32kB (UME) 2197*64kB (UM) 1532*128kB (U) 194*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 428644kB [ 2464.687608] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2464.698460] Node 1 Normal: 1*4kB (U) 1*8kB (U) 2*16kB (UE) 22*32kB (UM) 2119*64kB (UM) 136*128kB (UM) 161*256kB (UM) 14*512kB (UM) 278*1024kB (UM) 43*2048kB (U) 11*4096kB (U) = 619948kB [ 2464.715500] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2464.738239] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2464.755302] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2464.769886] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2464.788788] device hsr_slave_1 left promiscuous mode [ 2464.807875] 49726 total pagecache pages [ 2464.814248] device hsr_slave_0 left promiscuous mode [ 2464.818572] 0 pages in swap cache [ 2464.830362] Swap cache stats: add 0, delete 0, find 0/0 [ 2464.848499] systemd-journald[15857]: File /run/log/journal/04d8c135ee6b410280ba31a58c89679d/system.journal corrupted or uncleanly shut down, renaming and replacing. [ 2464.865643] Free swap = 0kB [ 2464.871962] Total swap = 0kB [ 2464.875984] team0 (unregistering): Port device team_slave_1 removed [ 2464.878353] 2097051 pages RAM [ 2464.894421] 0 pages HighMem/MovableOnly [ 2464.901796] 363848 pages reserved [ 2464.902399] team0 (unregistering): Port device team_slave_0 removed [ 2464.909649] 0 pages cma reserved [ 2464.940294] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 2464.997109] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 2465.111224] bond0 (unregistering): Released all slaves 09:16:19 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x800, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000180)={0x80000001, 0x13}) 09:16:19 executing program 1: epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x2, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000180)={0x80000001, 0x13}) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000580)='/dev/btrfs-control\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r1) ioctl$NS_GET_OWNER_UID(r1, 0xb704, &(0x7f0000000000)) 09:16:19 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000180)={0x80000001, 0x13}) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000580)='/dev/btrfs-control\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r1) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000580)='/dev/btrfs-control\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, r2) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x3000, &(0x7f0000000000), 0x4, r2, 0x9}) 09:16:19 executing program 0: openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x2, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000180)={0x80000001, 0x13}) 09:16:19 executing program 3: r0 = perf_event_open$cgroup(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}}, 0xffffffffffffffff, 0xd, 0xffffffffffffffff, 0x0) r1 = epoll_create(0x7) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000001c0)={0x20000005}) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000500)='nl802154\x00', r2) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r2, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, 0x0, 0x8, 0x70bd29, 0x25dfdbfd, {}, [@NL802154_ATTR_PID={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x8090) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = perf_event_open(&(0x7f0000000200)={0x3, 0x70, 0x81, 0x5, 0x0, 0x40, 0x0, 0x7, 0x30009, 0x8, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x8, 0x2, @perf_bp={&(0x7f0000000140), 0x7}, 0x10, 0x80, 0x1, 0x4, 0x7, 0x3c8, 0x5}, 0xffffffffffffffff, 0x6, r0, 0x8) perf_event_open$cgroup(&(0x7f0000000080)={0x6, 0x70, 0x6, 0x4, 0x0, 0xff, 0x0, 0x1, 0x9101c, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x1, 0x10003}, 0x810, 0x10000000000008, 0x400, 0x4, 0x7, 0x51c7, 0x1}, 0xffffffffffffffff, 0xa, r4, 0x4) epoll_wait(r1, &(0x7f0000000100)=[{}], 0x1, 0x0) r5 = accept4(r3, &(0x7f0000000280)=@ipx, &(0x7f0000000180)=0x80, 0x0) bind$l2tp6(r5, &(0x7f0000000300)={0xa, 0x0, 0x8000, @empty, 0xfffff504, 0x3}, 0x20) 09:16:19 executing program 3: perf_event_open$cgroup(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = epoll_create(0x7) epoll_wait(r0, &(0x7f0000000100)=[{}], 0x1, 0x0) 09:16:20 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000200)={0x0, 0x1, 0x6, @local}, 0x10) r1 = perf_event_open$cgroup(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r2 = epoll_create(0x7) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000001c0)={0x20000005}) epoll_wait(r2, &(0x7f0000000100)=[{}], 0x1, 0x0) 09:16:20 executing program 3: r0 = perf_event_open$cgroup(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = epoll_create(0x7) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000001c0)={0x20000005}) epoll_wait(r1, &(0x7f0000000100)=[{}], 0x1, 0x0) r2 = perf_event_open$cgroup(&(0x7f0000000140)={0x2, 0x70, 0xac, 0x8, 0x1f, 0xff, 0x0, 0x6, 0x400, 0x9, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x109f017b, 0x101, 0x0, 0x5, 0x7fffffff, 0x2}, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_ID(r2, 0x80082407, &(0x7f00000000c0)) 09:16:20 executing program 3: r0 = perf_event_open$cgroup(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = epoll_create(0x7) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x8, 0x4, 0x20, 0x9, 0x0, 0x9, 0x18200, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x3, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x7, 0x4, @perf_bp={&(0x7f0000000280)}, 0x102, 0x2, 0x5, 0xcfe0df61b0fe1e55, 0x3, 0xfff, 0x1ff}, 0x0, 0xc, r0, 0x1) perf_event_open$cgroup(&(0x7f0000000200)={0x5, 0x70, 0x81, 0x4, 0x5, 0x3f, 0x0, 0x40, 0x30000, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xa06, 0x1, @perf_config_ext={0x6, 0x800}, 0x2000, 0x229, 0x9, 0x1, 0x100000000, 0x2, 0x6}, 0xffffffffffffffff, 0x2, r3, 0x2) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000500)='nl802154\x00', 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, r5, 0x1}, 0x14}}, 0x0) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x24, r5, 0x4, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40004}, 0x8081) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000001c0)={0x20000005}) epoll_wait(r1, &(0x7f0000000100)=[{}], 0x1, 0x0) 09:16:20 executing program 3: r0 = perf_event_open$cgroup(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = epoll_create(0x7) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)={0x20000005}) epoll_wait(r1, &(0x7f0000000100)=[{}], 0x1, 0x0) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000580)='/dev/btrfs-control\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, r2) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, &(0x7f0000000140)={0x3, 0x70, 0x3, 0x80, 0x5, 0x6, 0x0, 0x800, 0xa0e48, 0x8, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x9, 0x4, @perf_config_ext={0x4}, 0x102, 0x5, 0x4, 0x0, 0x0, 0x1, 0x400}) [ 2466.073849] systemd[1]: Started Journal Service. [ 2466.231343] syz-executor.4: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2466.231967] syz-executor.1: [ 2466.244679] syz-executor.2: [ 2466.260253] syz-executor.2: [ 2466.260658] page allocation failure: order:4 [ 2466.265700] page allocation failure: order:4 [ 2466.271196] syz-executor.1: [ 2466.275656] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2466.275665] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 2466.275686] CPU: 1 PID: 15862 Comm: syz-executor.2 Not tainted 4.14.229-syzkaller #0 [ 2466.275692] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2466.275695] Call Trace: [ 2466.275709] dump_stack+0x1b2/0x281 [ 2466.275722] warn_alloc.cold+0x96/0x1cc [ 2466.283313] page allocation failure: order:4 [ 2466.286330] ? zone_watermark_ok_safe+0x220/0x220 [ 2466.286356] __alloc_pages_nodemask+0x2127/0x2720 [ 2466.286378] ? lock_acquire+0x170/0x3f0 [ 2466.294761] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 2466.299327] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2466.299346] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2466.308812] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 2466.314547] ? __mutex_unlock_slowpath+0x75/0x770 [ 2466.314562] alloc_pages_current+0x155/0x260 [ 2466.318814] page allocation failure: order:4 [ 2466.322117] ion_page_pool_alloc+0x118/0x1b0 [ 2466.322128] ion_system_heap_allocate+0x133/0x8c0 [ 2466.334734] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 2466.336249] ? ion_alloc+0x187/0x810 [ 2466.336261] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2466.342388] (null) [ 2466.347296] ? ion_system_contig_heap_create+0x130/0x130 [ 2466.347307] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2466.347319] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2466.347330] ion_alloc+0x204/0x810 [ 2466.352274] (null) [ 2466.357581] ? ion_dma_buf_release+0x40/0x40 [ 2466.357594] ? __might_fault+0x177/0x1b0 [ 2466.357606] ion_ioctl+0xea/0x1f0 [ 2466.357616] ? ion_query_heaps+0x360/0x360 [ 2466.368908] (null) [ 2466.369519] ? ion_query_heaps+0x360/0x360 [ 2466.369530] do_vfs_ioctl+0x75a/0xff0 [ 2466.374263] syz-executor.1 cpuset= [ 2466.378306] ? ioctl_preallocate+0x1a0/0x1a0 [ 2466.378316] ? lock_downgrade+0x740/0x740 [ 2466.378330] ? __fget+0x225/0x360 [ 2466.378340] ? do_vfs_ioctl+0xff0/0xff0 [ 2466.383926] syz-executor.1 cpuset= [ 2466.387548] ? security_file_ioctl+0x83/0xb0 [ 2466.387559] SyS_ioctl+0x7f/0xb0 [ 2466.387568] ? do_vfs_ioctl+0xff0/0xff0 [ 2466.387581] do_syscall_64+0x1d5/0x640 [ 2466.397988] / [ 2466.398362] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2466.403832] / [ 2466.405933] RIP: 0033:0x466459 [ 2466.412484] syz-executor.2 cpuset= [ 2466.416460] RSP: 002b:00007f3bc6e95188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2466.416471] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 2466.416476] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2466.416481] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2466.416489] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2466.424570] / [ 2466.424829] R13: 00007ffe618eb5ff R14: 00007f3bc6e95300 R15: 0000000000022000 [ 2466.429225] mems_allowed=0-1 [ 2466.447869] syz-executor.4 cpuset= [ 2466.454661] mems_allowed=0-1 [ 2466.474754] / [ 2466.480790] mems_allowed=0-1 [ 2466.491107] mems_allowed=0-1 [ 2466.500236] CPU: 0 PID: 15868 Comm: syz-executor.1 Not tainted 4.14.229-syzkaller #0 [ 2466.579430] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2466.588767] Call Trace: [ 2466.591355] dump_stack+0x1b2/0x281 [ 2466.594983] warn_alloc.cold+0x96/0x1cc [ 2466.598948] ? zone_watermark_ok_safe+0x220/0x220 [ 2466.603797] __alloc_pages_nodemask+0x2127/0x2720 [ 2466.608633] ? lock_acquire+0x170/0x3f0 [ 2466.612596] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2466.617436] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2466.622980] ? __mutex_unlock_slowpath+0x75/0x770 [ 2466.627835] alloc_pages_current+0x155/0x260 [ 2466.632234] ion_page_pool_alloc+0x118/0x1b0 [ 2466.636632] ion_system_heap_allocate+0x133/0x8c0 [ 2466.641461] ? ion_alloc+0x187/0x810 [ 2466.645179] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2466.650624] ? ion_system_contig_heap_create+0x130/0x130 [ 2466.656065] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2466.661107] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2466.665940] ion_alloc+0x204/0x810 [ 2466.669485] ? ion_dma_buf_release+0x40/0x40 [ 2466.673885] ? __might_fault+0x177/0x1b0 [ 2466.677930] ion_ioctl+0xea/0x1f0 [ 2466.681365] ? ion_query_heaps+0x360/0x360 [ 2466.685589] ? ion_query_heaps+0x360/0x360 [ 2466.689810] do_vfs_ioctl+0x75a/0xff0 [ 2466.693597] ? ioctl_preallocate+0x1a0/0x1a0 [ 2466.697992] ? lock_downgrade+0x740/0x740 [ 2466.702320] ? __fget+0x225/0x360 [ 2466.705753] ? do_vfs_ioctl+0xff0/0xff0 [ 2466.709713] ? security_file_ioctl+0x83/0xb0 [ 2466.714111] SyS_ioctl+0x7f/0xb0 [ 2466.717456] ? do_vfs_ioctl+0xff0/0xff0 [ 2466.721411] do_syscall_64+0x1d5/0x640 [ 2466.725285] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2466.730540] RIP: 0033:0x466459 [ 2466.733709] RSP: 002b:00007f10b678e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2466.741408] RAX: ffffffffffffffda RBX: 000000000056c008 RCX: 0000000000466459 [ 2466.748667] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2466.755921] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2466.763170] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c008 [ 2466.770432] R13: 00007ffd58825dcf R14: 00007f10b678e300 R15: 0000000000022000 [ 2466.777703] CPU: 1 PID: 15861 Comm: syz-executor.4 Not tainted 4.14.229-syzkaller #0 [ 2466.785588] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2466.794935] Call Trace: [ 2466.797524] dump_stack+0x1b2/0x281 [ 2466.801163] warn_alloc.cold+0x96/0x1cc [ 2466.805144] ? zone_watermark_ok_safe+0x220/0x220 [ 2466.810016] __alloc_pages_nodemask+0x2127/0x2720 [ 2466.814856] ? _raw_spin_unlock_irq+0x24/0x80 [ 2466.819370] ? lock_acquire+0x170/0x3f0 [ 2466.823350] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2466.828199] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2466.833651] ? __mutex_unlock_slowpath+0x75/0x770 [ 2466.838501] alloc_pages_current+0x155/0x260 [ 2466.842907] ion_page_pool_alloc+0x118/0x1b0 [ 2466.847318] ion_system_heap_allocate+0x133/0x8c0 [ 2466.852156] ? ion_alloc+0x187/0x810 [ 2466.855862] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2466.861311] ? ion_system_contig_heap_create+0x130/0x130 [ 2466.866762] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2466.871777] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2466.876614] ion_alloc+0x204/0x810 [ 2466.880148] ? ion_dma_buf_release+0x40/0x40 [ 2466.884554] ? __might_fault+0x177/0x1b0 [ 2466.888613] ion_ioctl+0xea/0x1f0 [ 2466.892057] ? ion_query_heaps+0x360/0x360 [ 2466.896287] ? ion_query_heaps+0x360/0x360 [ 2466.900509] do_vfs_ioctl+0x75a/0xff0 [ 2466.904303] ? ioctl_preallocate+0x1a0/0x1a0 [ 2466.908706] ? lock_downgrade+0x740/0x740 [ 2466.912852] ? __fget+0x225/0x360 [ 2466.916297] ? do_vfs_ioctl+0xff0/0xff0 [ 2466.920258] ? security_file_ioctl+0x83/0xb0 [ 2466.924657] SyS_ioctl+0x7f/0xb0 [ 2466.928006] ? do_vfs_ioctl+0xff0/0xff0 [ 2466.931963] do_syscall_64+0x1d5/0x640 [ 2466.935837] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2466.941007] RIP: 0033:0x466459 [ 2466.944183] RSP: 002b:00007f46becae188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2466.951873] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 2466.959122] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2466.966371] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2466.973619] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2466.980869] R13: 00007ffe96c50ebf R14: 00007f46becae300 R15: 0000000000022000 [ 2466.988131] CPU: 0 PID: 15864 Comm: syz-executor.1 Not tainted 4.14.229-syzkaller #0 [ 2466.996014] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2467.005361] Call Trace: [ 2467.007949] dump_stack+0x1b2/0x281 [ 2467.011578] warn_alloc.cold+0x96/0x1cc [ 2467.015553] ? zone_watermark_ok_safe+0x220/0x220 [ 2467.020411] __alloc_pages_nodemask+0x2127/0x2720 [ 2467.025249] ? lock_acquire+0x170/0x3f0 [ 2467.029220] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2467.034071] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2467.039524] ? __mutex_unlock_slowpath+0x75/0x770 [ 2467.044365] ? __sanitizer_cov_trace_pc+0x23/0x50 [ 2467.049211] alloc_pages_current+0x155/0x260 [ 2467.053622] ion_page_pool_alloc+0x118/0x1b0 [ 2467.058031] ion_system_heap_allocate+0x133/0x8c0 [ 2467.062980] ? ion_alloc+0x187/0x810 [ 2467.066724] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2467.072179] ? ion_system_contig_heap_create+0x130/0x130 [ 2467.077626] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2467.082633] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2467.087472] ion_alloc+0x204/0x810 [ 2467.091015] ? ion_dma_buf_release+0x40/0x40 [ 2467.095421] ? __might_fault+0x177/0x1b0 [ 2467.095832] warn_alloc_show_mem: 1 callbacks suppressed [ 2467.095835] Mem-Info: [ 2467.099471] ion_ioctl+0xea/0x1f0 [ 2467.099481] ? ion_query_heaps+0x360/0x360 [ 2467.099496] ? ion_query_heaps+0x360/0x360 [ 2467.119099] do_vfs_ioctl+0x75a/0xff0 [ 2467.122896] ? ioctl_preallocate+0x1a0/0x1a0 [ 2467.127306] ? lock_downgrade+0x740/0x740 [ 2467.127810] active_anon:14882 inactive_anon:46632 isolated_anon:0 [ 2467.127810] active_file:2103 inactive_file:4973 isolated_file:36 [ 2467.127810] unevictable:0 dirty:39 writeback:0 unstable:0 [ 2467.127810] slab_reclaimable:12535 slab_unreclaimable:120960 [ 2467.127810] mapped:48617 shmem:47891 pagetables:736 bounce:0 [ 2467.127810] free:45621 free_pcp:367 free_cma:0 [ 2467.131888] ? __fget+0x225/0x360 [ 2467.131899] ? do_vfs_ioctl+0xff0/0xff0 [ 2467.131908] ? security_file_ioctl+0x83/0xb0 [ 2467.131928] SyS_ioctl+0x7f/0xb0 [ 2467.180762] ? do_vfs_ioctl+0xff0/0xff0 [ 2467.184731] do_syscall_64+0x1d5/0x640 [ 2467.188618] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2467.193795] RIP: 0033:0x466459 [ 2467.196968] RSP: 002b:00007f10b67af188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2467.204665] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 2467.211920] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2467.219199] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2467.226454] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 09:16:21 executing program 5: epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x2, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x10000, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00032abd7000fcdbdf25010000000c001000010000000000000014001f00ff01000000000000000007000000000108000b0002000006"], 0x3c}, 0x1, 0x0, 0x0, 0x4004}, 0x20000001) bind$l2tp6(0xffffffffffffffff, &(0x7f0000000300)={0xa, 0x0, 0xc6d, @loopback, 0x6, 0x2}, 0x20) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f0000000080)={0x50000010}) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r1, &(0x7f0000000040)={0x40000008}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000180)={0x80000001, 0x13}) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r2, 0x89fa, &(0x7f0000003dc0)={'ip6gre0\x00', 0x0}) getsockname(r2, &(0x7f00000000c0)=@pptp, &(0x7f00000001c0)=0x80) 09:16:21 executing program 3: r0 = perf_event_open$cgroup(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = epoll_create(0x7) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000001c0)={0x20000005}) getpeername(0xffffffffffffffff, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private1}}}, &(0x7f0000000140)=0xfffffffffffffe61) epoll_wait(r1, &(0x7f0000000100), 0x0, 0x0) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000580)='/dev/btrfs-control\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000180)='bic\x00', 0x4) epoll_ctl$EPOLL_CTL_DEL(r3, 0x2, r3) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000580)='/dev/btrfs-control\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r4, 0x2, r4) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r4, 0x4008240b, &(0x7f0000000240)={0x5, 0x70, 0x1f, 0x81, 0x2, 0x2, 0x0, 0x3, 0x60044, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0xeb2, 0x1, @perf_bp={&(0x7f0000000200), 0x6}, 0x5, 0x7fff, 0x5, 0x9, 0x6, 0x7f, 0x9}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, 0xffffffffffffffff, &(0x7f0000000100)={0x2000001e}) [ 2467.233714] R13: 00007ffd58825dcf R14: 00007f10b67af300 R15: 0000000000022000 [ 2467.256281] CPU: 1 PID: 15867 Comm: syz-executor.2 Not tainted 4.14.229-syzkaller #0 [ 2467.264185] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2467.276428] Call Trace: [ 2467.279023] dump_stack+0x1b2/0x281 [ 2467.282671] warn_alloc.cold+0x96/0x1cc [ 2467.286645] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2467.291663] ? zone_watermark_ok_safe+0x220/0x220 [ 2467.296516] __alloc_pages_nodemask+0x2127/0x2720 [ 2467.301365] ? lock_acquire+0x170/0x3f0 [ 2467.305348] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2467.310196] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2467.315650] ? __mutex_unlock_slowpath+0x75/0x770 [ 2467.320496] alloc_pages_current+0x155/0x260 [ 2467.324907] ion_page_pool_alloc+0x118/0x1b0 [ 2467.329315] ion_system_heap_allocate+0x133/0x8c0 [ 2467.334156] ? ion_alloc+0x187/0x810 [ 2467.337872] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2467.343323] ? ion_system_contig_heap_create+0x130/0x130 [ 2467.348771] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2467.353783] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2467.358623] ion_alloc+0x204/0x810 [ 2467.362163] ? ion_dma_buf_release+0x40/0x40 [ 2467.366572] ? __might_fault+0x177/0x1b0 [ 2467.370632] ion_ioctl+0xea/0x1f0 [ 2467.374080] ? ion_query_heaps+0x360/0x360 [ 2467.378314] ? ion_query_heaps+0x360/0x360 [ 2467.382545] do_vfs_ioctl+0x75a/0xff0 [ 2467.386342] ? ioctl_preallocate+0x1a0/0x1a0 [ 2467.390743] ? lock_downgrade+0x740/0x740 [ 2467.394891] ? __fget+0x225/0x360 [ 2467.398340] ? do_vfs_ioctl+0xff0/0xff0 [ 2467.402311] ? security_file_ioctl+0x83/0xb0 [ 2467.406722] SyS_ioctl+0x7f/0xb0 [ 2467.410082] ? do_vfs_ioctl+0xff0/0xff0 [ 2467.414052] do_syscall_64+0x1d5/0x640 [ 2467.417970] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2467.423160] RIP: 0033:0x466459 [ 2467.426340] RSP: 002b:00007f3bc6e74188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2467.434045] RAX: ffffffffffffffda RBX: 000000000056c008 RCX: 0000000000466459 [ 2467.441312] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2467.448580] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2467.455848] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c008 [ 2467.463120] R13: 00007ffe618eb5ff R14: 00007f3bc6e74300 R15: 0000000000022000 [ 2467.479941] Node 0 active_anon:57380kB inactive_anon:117812kB active_file:7272kB inactive_file:17160kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:207228kB dirty:88kB writeback:0kB shmem:122368kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2467.541610] Node 1 active_anon:2108kB inactive_anon:68716kB active_file:1328kB inactive_file:2808kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:22052kB dirty:12kB writeback:0kB shmem:69196kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2467.603486] Node 0 DMA free:11064kB min:204kB low:252kB high:300kB active_anon:12kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:64kB pagetables:4kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2467.681731] syz-executor.5: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2467.699189] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2467.710931] Node 0 DMA32 free:80508kB min:36200kB low:45248kB high:54296kB active_anon:57368kB inactive_anon:117812kB active_file:7776kB inactive_file:15068kB unevictable:0kB writepending:88kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:7520kB pagetables:2936kB bounce:0kB free_pcp:72kB local_pcp:0kB free_cma:0kB [ 2467.719896] syz-executor.5 cpuset= [ 2467.762105] lowmem_reserve[]: 0 0 0 0 0 [ 2467.770088] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2467.790015] / [ 2467.803375] lowmem_reserve[]: [ 2467.812280] mems_allowed=0-1 [ 2467.813486] 0 0 0 0 0 [ 2467.822148] CPU: 0 PID: 15897 Comm: syz-executor.5 Not tainted 4.14.229-syzkaller #0 [ 2467.827676] Node 1 [ 2467.832402] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2467.832406] Call Trace: [ 2467.832427] dump_stack+0x1b2/0x281 [ 2467.832442] warn_alloc.cold+0x96/0x1cc [ 2467.842446] Normal free:99440kB min:53696kB low:67120kB high:80544kB active_anon:2108kB inactive_anon:68716kB active_file:1328kB inactive_file:2808kB unevictable:0kB writepending:12kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:352kB pagetables:272kB bounce:0kB free_pcp:716kB local_pcp:0kB free_cma:0kB [ 2467.844011] ? zone_watermark_ok_safe+0x220/0x220 [ 2467.844023] ? kernel_to_ipc64_perm+0xd0/0x530 [ 2467.844043] __alloc_pages_nodemask+0x2127/0x2720 [ 2467.853962] lowmem_reserve[]: [ 2467.854193] ? lock_acquire+0x170/0x3f0 [ 2467.903870] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2467.908743] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2467.912967] 0 [ 2467.914229] ? __mutex_unlock_slowpath+0x75/0x770 [ 2467.914245] alloc_pages_current+0x155/0x260 [ 2467.914257] ion_page_pool_alloc+0x118/0x1b0 [ 2467.919402] 0 [ 2467.920936] ion_system_heap_allocate+0x133/0x8c0 [ 2467.920948] ? ion_alloc+0x187/0x810 [ 2467.920961] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2467.934631] 0 [ 2467.936387] ? ion_system_contig_heap_create+0x130/0x130 [ 2467.936399] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2467.936412] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2467.942339] 0 [ 2467.945552] ion_alloc+0x204/0x810 [ 2467.945566] ? ion_dma_buf_release+0x40/0x40 [ 2467.945578] ? __might_fault+0x177/0x1b0 [ 2467.945590] ion_ioctl+0xea/0x1f0 [ 2467.945598] ? ion_query_heaps+0x360/0x360 [ 2467.945608] ? SyS_epoll_ctl+0x1e0/0x2780 [ 2467.945618] ? ion_query_heaps+0x360/0x360 [ 2467.955086] 0 [ 2467.957860] do_vfs_ioctl+0x75a/0xff0 [ 2467.957873] ? ioctl_preallocate+0x1a0/0x1a0 [ 2467.957884] ? lock_downgrade+0x740/0x740 [ 2467.968042] ? __fget+0x225/0x360 [ 2467.977959] Node 0 [ 2467.979930] ? do_vfs_ioctl+0xff0/0xff0 [ 2467.979942] ? security_file_ioctl+0x83/0xb0 [ 2467.979952] SyS_ioctl+0x7f/0xb0 [ 2467.988440] DMA: [ 2467.992600] ? do_vfs_ioctl+0xff0/0xff0 [ 2467.992614] do_syscall_64+0x1d5/0x640 [ 2467.992628] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2468.009011] 13*4kB [ 2468.010270] RIP: 0033:0x466459 [ 2468.010275] RSP: 002b:00007f4d0bcd5188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2468.010292] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 2468.017140] (UME) [ 2468.020926] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2468.020932] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2468.020937] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2468.020943] R13: 00007ffe1117a98f R14: 00007f4d0bcd5300 R15: 0000000000022000 [ 2468.141502] warn_alloc_show_mem: 3 callbacks suppressed [ 2468.141506] Mem-Info: [ 2468.158402] active_anon:14902 inactive_anon:46632 isolated_anon:0 [ 2468.158402] active_file:2440 inactive_file:2857 isolated_file:0 [ 2468.158402] unevictable:0 dirty:43 writeback:0 unstable:0 [ 2468.158402] slab_reclaimable:12538 slab_unreclaimable:121827 [ 2468.158402] mapped:57047 shmem:47890 pagetables:813 bounce:0 [ 2468.158402] free:48407 free_pcp:408 free_cma:0 [ 2468.211398] Node 0 active_anon:57504kB inactive_anon:117812kB active_file:8432kB inactive_file:8620kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:206136kB dirty:148kB writeback:0kB shmem:122368kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2468.287266] 20*8kB (UME) 15*16kB (UME) 16*32kB (UME) 10*64kB (ME) 4*128kB (UM) 5*256kB (UME) 3*512kB (UME) 2*1024kB (ME) 2*2048kB (UM) 0*4096kB = 11076kB [ 2468.323482] Node 1 active_anon:2104kB inactive_anon:68716kB active_file:1328kB inactive_file:2808kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:22052kB dirty:24kB writeback:0kB shmem:69192kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2468.367816] Node 0 DMA32: 286*4kB (ME) 120*8kB (UME) 75*16kB (UME) 1145*32kB (UME) 26*64kB (UME) 10*128kB (UME) 6*256kB (ME) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 44424kB [ 2468.421706] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2468.451668] Node 0 DMA free:11104kB min:204kB low:252kB high:300kB active_anon:12kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:64kB pagetables:4kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2468.483399] Node 1 Normal: 1*4kB (U) 17*8kB (UM) 10*16kB (UME) 1617*32kB (U) 1361*64kB (U) 35*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 143628kB [ 2468.523821] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2468.544002] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2468.562631] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2468.568826] lowmem_reserve[]: [ 2468.580529] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2468.584985] 0 [ 2468.605002] 49431 total pagecache pages [ 2468.610805] 0 pages in swap cache [ 2468.614259] Swap cache stats: add 0, delete 0, find 0/0 [ 2468.624599] 2717 2718 2718 2718 [ 2468.628006] Node 0 DMA32 free:44312kB min:36200kB low:45248kB high:54296kB active_anon:57492kB inactive_anon:117812kB active_file:296kB inactive_file:0kB unevictable:0kB writepending:148kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:7520kB pagetables:2976kB bounce:0kB free_pcp:900kB local_pcp:824kB free_cma:0kB [ 2468.674563] Free swap = 0kB [ 2468.677628] Total swap = 0kB [ 2468.680650] 2097051 pages RAM [ 2468.683752] 0 pages HighMem/MovableOnly [ 2468.700686] 363848 pages reserved [ 2468.704167] 0 pages cma reserved [ 2468.709908] lowmem_reserve[]: 0 0 0 0 0 [ 2468.743100] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2468.818662] lowmem_reserve[]: 0 0 0 0 0 [ 2468.822706] Node 1 Normal free:76252kB min:53696kB low:67120kB high:80544kB active_anon:2124kB inactive_anon:68716kB active_file:396kB inactive_file:400kB unevictable:0kB writepending:60kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:352kB pagetables:272kB bounce:0kB free_pcp:1296kB local_pcp:728kB free_cma:0kB [ 2468.978512] lowmem_reserve[]: 0 0 0 0 0 [ 2468.982676] Node 0 DMA: 11*4kB (ME) 20*8kB (UME) 12*16kB (UME) 15*32kB (UME) 11*64kB (UME) 4*128kB (UM) 5*256kB (UME) 3*512kB (UME) 2*1024kB (ME) 2*2048kB (UM) 0*4096kB = 11052kB [ 2469.013383] oom_reaper: reaped process 15864 (syz-executor.1), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 2469.054909] syz-executor.5 invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 2469.074880] Node 0 DMA32: 438*4kB (UME) 5240*8kB (UME) 142*16kB (UME) 87*32kB (UME) 90*64kB (UME) 17*128kB (UME) 7*256kB (ME) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 58456kB [ 2469.097734] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 2469.107405] CPU: 1 PID: 12799 Comm: syz-executor.5 Not tainted 4.14.229-syzkaller #0 [ 2469.115308] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2469.124668] Call Trace: [ 2469.127268] dump_stack+0x1b2/0x281 [ 2469.130903] dump_header+0x178/0x82f [ 2469.134621] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2469.139728] ? ___ratelimit+0x2cd/0x530 [ 2469.143711] oom_kill_process.cold+0x10/0xa40 [ 2469.149001] out_of_memory+0xe3e/0x1190 [ 2469.152987] ? oom_killer_disable+0x1c0/0x1c0 [ 2469.157488] ? mutex_trylock+0x152/0x1a0 [ 2469.161557] __alloc_pages_nodemask+0x23e1/0x2720 [ 2469.166416] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2469.171274] alloc_pages_current+0x155/0x260 [ 2469.175684] filemap_fault+0x11a1/0x1ad0 [ 2469.179759] ext4_filemap_fault+0x84/0xb0 [ 2469.183907] __do_fault+0xfa/0x380 [ 2469.187448] __handle_mm_fault+0x2497/0x4620 [ 2469.191858] ? vm_insert_page+0x7c0/0x7c0 [ 2469.196004] ? hrtimer_nanosleep+0x1ff/0x4b0 [ 2469.200411] ? nanosleep_copyout+0x100/0x100 [ 2469.204829] ? mark_held_locks+0xa6/0xf0 [ 2469.208892] handle_mm_fault+0x455/0x9c0 [ 2469.212962] __do_page_fault+0x549/0xad0 [ 2469.217031] ? spurious_fault+0x640/0x640 [ 2469.221178] ? do_page_fault+0x60/0x500 [ 2469.225151] ? page_fault+0x2f/0x50 [ 2469.228886] page_fault+0x45/0x50 [ 2469.232337] RIP: 25ab10:0xb [ 2469.235266] RSP: 0021:00007ffe1117ac4c EFLAGS: 00000032 [ 2469.254499] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2469.307454] Node 1 Normal: 115*4kB (UM) 80*8kB (UM) 55*16kB (UME) 26*32kB (UM) 4*64kB (M) 153*128kB (UM) 44*256kB (U) 12*512kB (U) 9*1024kB (U) 0*2048kB 0*4096kB = 49276kB [ 2469.350550] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2469.374498] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2469.383638] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2469.416351] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2469.436345] 47966 total pagecache pages [ 2469.440351] 0 pages in swap cache [ 2469.443805] Swap cache stats: add 0, delete 0, find 0/0 [ 2469.465814] Free swap = 0kB [ 2469.468856] Total swap = 0kB [ 2469.471875] 2097051 pages RAM [ 2469.478244] 0 pages HighMem/MovableOnly [ 2469.496454] 363848 pages reserved [ 2469.499939] 0 pages cma reserved [ 2469.551846] Mem-Info: [ 2469.554301] active_anon:14946 inactive_anon:46632 isolated_anon:0 [ 2469.554301] active_file:16 inactive_file:11 isolated_file:0 [ 2469.554301] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2469.554301] slab_reclaimable:12534 slab_unreclaimable:122037 [ 2469.554301] mapped:52664 shmem:47890 pagetables:799 bounce:0 [ 2469.554301] free:24621 free_pcp:1 free_cma:0 [ 2469.660458] Node 0 active_anon:57628kB inactive_anon:117812kB active_file:28kB inactive_file:56kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:191676kB dirty:0kB writeback:0kB shmem:122368kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2469.698348] Node 1 active_anon:2156kB inactive_anon:68716kB active_file:12kB inactive_file:132kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:18980kB dirty:0kB writeback:0kB shmem:69192kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2469.797582] Node 0 DMA free:11052kB min:204kB low:252kB high:300kB active_anon:12kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:64kB pagetables:4kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2469.854512] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2469.859708] Node 0 DMA32 free:25136kB min:36200kB low:45248kB high:54296kB active_anon:57716kB inactive_anon:117812kB active_file:44kB inactive_file:0kB unevictable:0kB writepending:8kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:7456kB pagetables:2940kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2469.934456] lowmem_reserve[]: 0 0 0 0 0 [ 2469.939883] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2470.007419] lowmem_reserve[]: 0 0 0 0 0 [ 2470.011456] Node 1 Normal free:65100kB min:53696kB low:67120kB high:80544kB active_anon:2152kB inactive_anon:68716kB active_file:4kB inactive_file:104kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:352kB pagetables:252kB bounce:0kB free_pcp:44kB local_pcp:44kB free_cma:0kB [ 2470.101082] lowmem_reserve[]: 0 0 0 0 0 [ 2470.117815] Node 0 DMA: 12*4kB (UME) 20*8kB (UME) 12*16kB (UME) 15*32kB (UME) 11*64kB (UME) 4*128kB (UM) 5*256kB (UME) 3*512kB (UME) 2*1024kB (ME) 2*2048kB (UM) 0*4096kB = 11056kB [ 2470.152820] Node 0 DMA32: 449*4kB (ME) 588*8kB (UME) 203*16kB (UME) 135*32kB (UME) 251*64kB (UME) 16*128kB (UME) 9*256kB (ME) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 34484kB [ 2470.182566] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2470.196759] Node 1 Normal: 103*4kB (UM) 72*8kB (UM) 53*16kB (UME) 23*32kB (UM) 5*64kB (M) 159*128kB (UM) 60*256kB (U) 12*512kB (U) 9*1024kB (U) 0*2048kB 0*4096kB = 53964kB [ 2470.213361] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2470.226045] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2470.236536] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2470.257848] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2470.269315] 47935 total pagecache pages [ 2470.273307] 0 pages in swap cache [ 2470.278608] Swap cache stats: add 0, delete 0, find 0/0 [ 2470.283992] Free swap = 0kB [ 2470.302576] Total swap = 0kB [ 2470.316217] 2097051 pages RAM [ 2470.319349] 0 pages HighMem/MovableOnly [ 2470.323317] 363848 pages reserved [ 2470.336655] 0 pages cma reserved [ 2470.340043] Out of memory (oom_kill_allocating_task): Kill process 12799 (syz-executor.5) score 0 or sacrifice child [ 2470.366144] Killed process 15897 (syz-executor.5) total-vm:93384kB, anon-rss:156kB, file-rss:34820kB, shmem-rss:0kB [ 2470.409453] oom_reaper: reaped process 15897 (syz-executor.5), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 2470.451469] systemd-journal invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 2470.480022] systemd-journal cpuset=/ mems_allowed=0-1 [ 2470.494447] syz-executor.1: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2470.509817] CPU: 1 PID: 15857 Comm: systemd-journal Not tainted 4.14.229-syzkaller #0 [ 2470.517808] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2470.527168] Call Trace: [ 2470.529762] dump_stack+0x1b2/0x281 [ 2470.533396] dump_header+0x178/0x82f [ 2470.537110] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2470.542218] ? ___ratelimit+0x2cd/0x530 [ 2470.546197] oom_kill_process.cold+0x10/0xa40 [ 2470.550702] out_of_memory+0xe3e/0x1190 [ 2470.554685] ? oom_killer_disable+0x1c0/0x1c0 [ 2470.559181] ? mutex_trylock+0x152/0x1a0 [ 2470.563246] __alloc_pages_nodemask+0x23e1/0x2720 [ 2470.568105] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2470.572965] alloc_pages_current+0x155/0x260 [ 2470.577379] filemap_fault+0x11a1/0x1ad0 [ 2470.581453] ext4_filemap_fault+0x84/0xb0 [ 2470.585834] __do_fault+0xfa/0x380 [ 2470.589374] __handle_mm_fault+0x2497/0x4620 [ 2470.593801] ? vm_insert_page+0x7c0/0x7c0 [ 2470.598103] ? mark_held_locks+0xa6/0xf0 [ 2470.602174] handle_mm_fault+0x455/0x9c0 [ 2470.606244] __do_page_fault+0x549/0xad0 [ 2470.610315] ? spurious_fault+0x640/0x640 [ 2470.614471] ? do_page_fault+0x60/0x500 [ 2470.618678] ? page_fault+0x2f/0x50 [ 2470.622310] page_fault+0x45/0x50 [ 2470.625765] RIP: 0466:0x2b [ 2470.628608] RSP: bbc05e4e:0000000000000001 EFLAGS: 0000014d [ 2470.644390] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 2470.664411] CPU: 1 PID: 15864 Comm: syz-executor.1 Not tainted 4.14.229-syzkaller #0 [ 2470.672379] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2470.681742] Call Trace: [ 2470.684341] dump_stack+0x1b2/0x281 [ 2470.687979] warn_alloc.cold+0x96/0x1cc [ 2470.691962] ? zone_watermark_ok_safe+0x220/0x220 [ 2470.696814] ? usleep_range+0x130/0x130 [ 2470.700800] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 2470.705914] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 2470.710937] ? run_timer_softirq+0x5a0/0x5a0 [ 2470.715358] __alloc_pages_nodemask+0x2127/0x2720 [ 2470.720215] ? lock_acquire+0x170/0x3f0 [ 2470.724200] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2470.729048] ? ion_page_pool_alloc+0x9e/0x1b0 [ 2470.733554] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2470.739022] alloc_pages_current+0x155/0x260 [ 2470.743507] ion_page_pool_alloc+0x118/0x1b0 [ 2470.747920] ion_system_heap_allocate+0x133/0x8c0 [ 2470.752771] ? ion_alloc+0x187/0x810 [ 2470.756491] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2470.762037] ? ion_system_contig_heap_create+0x130/0x130 [ 2470.767497] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2470.772531] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2470.777380] ion_alloc+0x204/0x810 [ 2470.780925] ? ion_dma_buf_release+0x40/0x40 [ 2470.786623] ? __might_fault+0x177/0x1b0 [ 2470.790692] ion_ioctl+0xea/0x1f0 [ 2470.794147] ? ion_query_heaps+0x360/0x360 [ 2470.798395] ? ion_query_heaps+0x360/0x360 [ 2470.802746] do_vfs_ioctl+0x75a/0xff0 [ 2470.806562] ? ioctl_preallocate+0x1a0/0x1a0 [ 2470.810975] ? lock_downgrade+0x740/0x740 [ 2470.815134] ? __fget+0x225/0x360 [ 2470.818607] ? do_vfs_ioctl+0xff0/0xff0 [ 2470.822590] ? security_file_ioctl+0x83/0xb0 [ 2470.827148] SyS_ioctl+0x7f/0xb0 [ 2470.830637] ? do_vfs_ioctl+0xff0/0xff0 [ 2470.834624] do_syscall_64+0x1d5/0x640 [ 2470.838529] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2470.843806] RIP: 0033:0x466459 [ 2470.846992] RSP: 002b:00007f10b67af188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2470.854701] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 2470.862147] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2470.869418] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2470.876683] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2470.883954] R13: 00007ffd58825dcf R14: 00007f10b67af300 R15: 0000000000022000 [ 2470.894533] syz-executor.5: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2470.895670] Mem-Info: [ 2470.910797] active_anon:14944 inactive_anon:46632 isolated_anon:0 [ 2470.910797] active_file:31 inactive_file:7 isolated_file:10 [ 2470.910797] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2470.910797] slab_reclaimable:12534 slab_unreclaimable:121666 [ 2470.910797] mapped:52647 shmem:47890 pagetables:799 bounce:0 [ 2470.910797] free:13948 free_pcp:67 free_cma:0 [ 2470.934333] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 2470.946991] Node 0 active_anon:57540kB inactive_anon:117812kB active_file:40kB inactive_file:40kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:191588kB dirty:0kB writeback:0kB shmem:122368kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2470.953599] CPU: 0 PID: 15897 Comm: syz-executor.5 Not tainted 4.14.229-syzkaller #0 [ 2470.980496] Node 1 active_anon:2136kB inactive_anon:68716kB active_file:8kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):40kB mapped:18932kB dirty:0kB writeback:0kB shmem:69192kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2470.984793] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2470.984802] Call Trace: [ 2470.984820] dump_stack+0x1b2/0x281 [ 2470.984834] warn_alloc.cold+0x96/0x1cc [ 2470.984845] ? zone_watermark_ok_safe+0x220/0x220 [ 2470.984857] ? usleep_range+0x130/0x130 [ 2471.015111] Node 0 [ 2471.021568] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 2471.024138] DMA free:10972kB min:204kB low:252kB high:300kB active_anon:12kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:64kB pagetables:4kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2471.027747] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 2471.027757] ? run_timer_softirq+0x5a0/0x5a0 [ 2471.027775] __alloc_pages_nodemask+0x2127/0x2720 [ 2471.027796] ? lock_acquire+0x170/0x3f0 [ 2471.027811] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2471.027822] ? ion_page_pool_alloc+0x9e/0x1b0 [ 2471.033478] lowmem_reserve[]: [ 2471.036618] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2471.036639] alloc_pages_current+0x155/0x260 [ 2471.036651] ion_page_pool_alloc+0x118/0x1b0 [ 2471.036661] ion_system_heap_allocate+0x133/0x8c0 [ 2471.041729] warn_alloc_show_mem: 1 callbacks suppressed [ 2471.041732] Mem-Info: [ 2471.042844] ? ion_alloc+0x187/0x810 [ 2471.048006] 0 [ 2471.073604] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2471.073615] ? ion_system_contig_heap_create+0x130/0x130 [ 2471.073625] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2471.073637] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2471.073646] ion_alloc+0x204/0x810 [ 2471.073659] ? ion_dma_buf_release+0x40/0x40 [ 2471.073671] ? __might_fault+0x177/0x1b0 [ 2471.081486] active_anon:14919 inactive_anon:46632 isolated_anon:0 [ 2471.081486] active_file:12 inactive_file:12 isolated_file:10 [ 2471.081486] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2471.081486] slab_reclaimable:12525 slab_unreclaimable:121658 [ 2471.081486] mapped:52630 shmem:47890 pagetables:799 bounce:0 [ 2471.081486] free:13998 free_pcp:12 free_cma:0 [ 2471.083071] ion_ioctl+0xea/0x1f0 [ 2471.089539] Node 0 active_anon:57540kB inactive_anon:117812kB active_file:40kB inactive_file:40kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:191588kB dirty:0kB writeback:0kB shmem:122368kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2471.091965] ? ion_query_heaps+0x360/0x360 [ 2471.099816] Node 1 active_anon:2136kB inactive_anon:68716kB active_file:8kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):40kB mapped:18932kB dirty:0kB writeback:0kB shmem:69192kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2471.101311] ? SyS_epoll_ctl+0x1e0/0x2780 [ 2471.104429] Node 0 [ 2471.109828] ? ion_query_heaps+0x360/0x360 [ 2471.114226] DMA free:10972kB min:204kB low:252kB high:300kB active_anon:12kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:64kB pagetables:4kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2471.118788] do_vfs_ioctl+0x75a/0xff0 [ 2471.118802] ? ioctl_preallocate+0x1a0/0x1a0 [ 2471.118812] ? lock_downgrade+0x740/0x740 [ 2471.118826] ? __fget+0x225/0x360 [ 2471.118834] ? do_vfs_ioctl+0xff0/0xff0 [ 2471.118846] ? security_file_ioctl+0x83/0xb0 [ 2471.118856] SyS_ioctl+0x7f/0xb0 [ 2471.126551] 2717 [ 2471.129034] ? do_vfs_ioctl+0xff0/0xff0 [ 2471.131423] 2718 [ 2471.135245] do_syscall_64+0x1d5/0x640 [ 2471.135260] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2471.135267] RIP: 0033:0x466459 [ 2471.135272] RSP: 002b:00007f4d0bcd5188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2471.135281] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 2471.135285] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2471.135290] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2471.135295] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2471.135301] R13: 00007ffe1117a98f R14: 00007f4d0bcd5300 R15: 0000000000022000 [ 2471.224314] lowmem_reserve[]: [ 2471.235167] 2718 [ 2471.277702] 0 [ 2471.424520] 2718 [ 2471.428422] Node 0 DMA32 free:62816kB min:36200kB low:45248kB high:54296kB active_anon:57528kB inactive_anon:117812kB active_file:40kB inactive_file:40kB unevictable:0kB writepending:0kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:7456kB pagetables:2940kB bounce:0kB free_pcp:1344kB local_pcp:656kB free_cma:0kB [ 2471.464533] lowmem_reserve[]: 0 0 0 0 0 [ 2471.468640] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2471.534407] lowmem_reserve[]: 0 0 0 0 0 [ 2471.564803] Node 1 Normal free:90380kB min:53696kB low:67120kB high:80544kB active_anon:2136kB inactive_anon:68716kB active_file:8kB inactive_file:8kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:352kB pagetables:252kB bounce:0kB free_pcp:1300kB local_pcp:632kB free_cma:0kB [ 2471.664308] lowmem_reserve[]: 0 0 0 0 0 [ 2471.668373] Node 0 DMA: 11*4kB (ME) 20*8kB (UME) 11*16kB (ME) 15*32kB (UME) 10*64kB (ME) 4*128kB (UM) 5*256kB (UME) 3*512kB (UME) 2*1024kB (ME) 2*2048kB (UM) 0*4096kB = 10972kB [ 2471.676895] 2717 2718 2718 2718 [ 2471.704300] Node 0 DMA32 free:21208kB min:36200kB low:45248kB high:54296kB active_anon:57528kB inactive_anon:117812kB active_file:520kB inactive_file:212kB unevictable:0kB writepending:0kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:7456kB pagetables:2940kB bounce:0kB free_pcp:780kB local_pcp:144kB free_cma:0kB [ 2471.707087] Node 0 DMA32: 287*4kB (ME) 170*8kB (UME) 231*16kB (UM) 379*32kB (UM) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18332kB [ 2471.762795] lowmem_reserve[]: 0 0 0 0 0 [ 2471.767524] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2471.770486] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2471.796508] lowmem_reserve[]: [ 2471.811955] Node 1 Normal: 60*4kB (UM) 33*8kB (M) 592*16kB (UME) 537*32kB (UM) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 27160kB [ 2471.816776] 0 0 0 0 0 [ 2471.828877] Node 1 Normal free:26936kB min:53696kB low:67120kB high:80544kB active_anon:2136kB inactive_anon:68716kB active_file:8kB inactive_file:8kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:352kB pagetables:252kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2471.828898] lowmem_reserve[]: 0 0 0 0 0 [ 2471.828915] Node 0 DMA: 11*4kB (ME) 20*8kB (UME) 11*16kB (ME) 15*32kB (UME) 10*64kB (ME) 4*128kB (UM) 5*256kB (UME) 3*512kB (UME) 2*1024kB (ME) 2*2048kB (UM) [ 2471.837583] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2471.860068] 0*4096kB [ 2471.867224] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2471.878107] = 10972kB [ 2471.878112] Node 0 DMA32: 287*4kB (ME) 172*8kB (UME) 239*16kB (UM) 379*32kB (UM) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB [ 2471.889813] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2471.898051] 0*4096kB [ 2471.900440] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2471.912342] = 18476kB [ 2471.912346] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2471.912395] Node 1 [ 2471.935029] syz-executor.5: [ 2471.949492] Normal: 59*4kB (M) 33*8kB (M) 561*16kB (UME) 537*32kB (UM) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 26660kB [ 2471.959993] syz-executor.1: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2471.979034] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2471.988080] page allocation failure: order:4 [ 2472.003242] 47913 total pagecache pages [ 2472.010992] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2472.013742] 0 pages in swap cache [ 2472.024161] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2472.033945] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 2472.038214] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2472.039132] CPU: 0 PID: 15868 Comm: syz-executor.1 Not tainted 4.14.229-syzkaller #0 [ 2472.055770] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2472.061642] syz-executor.5 cpuset= [ 2472.065119] Call Trace: [ 2472.065140] dump_stack+0x1b2/0x281 [ 2472.065154] warn_alloc.cold+0x96/0x1cc [ 2472.065166] ? zone_watermark_ok_safe+0x220/0x220 [ 2472.065176] ? usleep_range+0x130/0x130 [ 2472.065185] ? try_to_free_pages+0x23f/0x6e0 [ 2472.065196] ? _find_next_bit+0xdb/0x100 [ 2472.082656] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2472.083936] ? run_timer_softirq+0x5a0/0x5a0 [ 2472.091840] / [ 2472.092353] __alloc_pages_nodemask+0x2127/0x2720 [ 2472.110086] 47913 total pagecache pages [ 2472.111058] ? lock_acquire+0x170/0x3f0 [ 2472.123555] mems_allowed=0-1 [ 2472.123815] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2472.131833] ? ion_page_pool_alloc+0x9e/0x1b0 [ 2472.136426] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2472.141978] alloc_pages_current+0x155/0x260 [ 2472.146386] ion_page_pool_alloc+0x118/0x1b0 [ 2472.150374] 0 pages in swap cache [ 2472.150808] ion_system_heap_allocate+0x133/0x8c0 [ 2472.159095] ? ion_alloc+0x187/0x810 [ 2472.162812] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2472.168262] ? ion_system_contig_heap_create+0x130/0x130 [ 2472.173717] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2472.178734] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2472.181688] Swap cache stats: add 0, delete 0, find 0/0 [ 2472.183584] ion_alloc+0x204/0x810 [ 2472.192567] ? ion_dma_buf_release+0x40/0x40 [ 2472.196986] ? __might_fault+0x177/0x1b0 [ 2472.201055] ion_ioctl+0xea/0x1f0 [ 2472.204513] ? ion_query_heaps+0x360/0x360 [ 2472.208746] ? ion_query_heaps+0x360/0x360 [ 2472.212971] do_vfs_ioctl+0x75a/0xff0 [ 2472.216773] ? ioctl_preallocate+0x1a0/0x1a0 [ 2472.221186] ? lock_downgrade+0x740/0x740 [ 2472.224122] Free swap = 0kB [ 2472.225336] ? __fget+0x225/0x360 [ 2472.225346] ? do_vfs_ioctl+0xff0/0xff0 [ 2472.225357] ? security_file_ioctl+0x83/0xb0 [ 2472.225367] SyS_ioctl+0x7f/0xb0 [ 2472.225375] ? do_vfs_ioctl+0xff0/0xff0 [ 2472.225386] do_syscall_64+0x1d5/0x640 [ 2472.225400] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2472.232251] Total swap = 0kB [ 2472.235946] RIP: 0033:0x466459 [ 2472.235951] RSP: 002b:00007f10b678e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2472.235960] RAX: ffffffffffffffda RBX: 000000000056c008 RCX: 0000000000466459 [ 2472.235965] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2472.235970] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2472.235975] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c008 [ 2472.235980] R13: 00007ffd58825dcf R14: 00007f10b678e300 R15: 0000000000022000 [ 2472.243729] Swap cache stats: add 0, delete 0, find 0/0 [ 2472.256954] CPU: 1 PID: 15897 Comm: syz-executor.5 Not tainted 4.14.229-syzkaller #0 [ 2472.256961] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2472.256965] Call Trace: [ 2472.256981] dump_stack+0x1b2/0x281 [ 2472.256995] warn_alloc.cold+0x96/0x1cc [ 2472.266887] Free swap = 0kB [ 2472.270893] ? zone_watermark_ok_safe+0x220/0x220 [ 2472.278169] Total swap = 0kB [ 2472.285428] __alloc_pages_nodemask+0x2127/0x2720 [ 2472.285440] ? lock_acquire+0x170/0x3f0 [ 2472.292718] 2097051 pages RAM [ 2472.299983] ? lock_acquire+0x170/0x3f0 [ 2472.300000] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2472.300017] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2472.307299] 0 pages HighMem/MovableOnly [ 2472.312639] ? __mutex_unlock_slowpath+0x75/0x770 [ 2472.320537] 363848 pages reserved [ 2472.329885] alloc_pages_current+0x155/0x260 [ 2472.329899] ion_page_pool_alloc+0x118/0x1b0 [ 2472.329909] ion_system_heap_allocate+0x133/0x8c0 [ 2472.332484] 0 pages cma reserved [ 2472.336131] ? _raw_spin_unlock+0x29/0x40 [ 2472.336141] ? _ion_heap_freelist_drain+0x6e/0x410 [ 2472.336151] ? ion_system_contig_heap_create+0x130/0x130 [ 2472.340111] Out of memory (oom_kill_allocating_task): Kill process 15857 (systemd-journal) score 0 or sacrifice child [ 2472.343119] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2472.347987] Killed process 15857 (systemd-journal) total-vm:46096kB, anon-rss:468kB, file-rss:0kB, shmem-rss:1588kB [ 2472.350953] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2472.356534] oom_reaper: reaped process 15857 (systemd-journal), now anon-rss:0kB, file-rss:0kB, shmem-rss:1588kB [ 2472.359746] ion_alloc+0x27a/0x810 [ 2472.393132] systemd-journal invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask= [ 2472.393703] ? ion_dma_buf_release+0x40/0x40 [ 2472.398105] (null) [ 2472.402926] ? __might_fault+0x177/0x1b0 [ 2472.406284] , order=0, oom_score_adj=0 [ 2472.410493] ion_ioctl+0xea/0x1f0 [ 2472.415420] systemd-journal cpuset= [ 2472.420843] ? ion_query_heaps+0x360/0x360 [ 2472.431594] / [ 2472.436626] ? SyS_epoll_ctl+0x1e0/0x2780 [ 2472.447203] mems_allowed=0-1 [ 2472.452009] ? ion_query_heaps+0x360/0x360 [ 2472.462332] warn_alloc_show_mem: 1 callbacks suppressed [ 2472.462335] Mem-Info: [ 2472.465839] do_vfs_ioctl+0x75a/0xff0 [ 2472.465852] ? ioctl_preallocate+0x1a0/0x1a0 [ 2472.465864] ? lock_downgrade+0x740/0x740 [ 2472.484199] active_anon:14829 inactive_anon:46632 isolated_anon:0 [ 2472.484199] active_file:12 inactive_file:11 isolated_file:0 [ 2472.484199] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2472.484199] slab_reclaimable:12525 slab_unreclaimable:121695 [ 2472.484199] mapped:52621 shmem:47890 pagetables:799 bounce:0 [ 2472.484199] free:13900 free_pcp:117 free_cma:0 [ 2472.486702] ? __fget+0x225/0x360 [ 2472.490670] Node 0 active_anon:57180kB inactive_anon:117812kB active_file:40kB inactive_file:36kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:191588kB dirty:0kB writeback:0kB shmem:122368kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2472.494101] ? do_vfs_ioctl+0xff0/0xff0 [ 2472.514190] Node 1 active_anon:2136kB inactive_anon:68716kB active_file:8kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:18896kB dirty:0kB writeback:0kB shmem:69192kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2472.515095] ? security_file_ioctl+0x83/0xb0 [ 2472.520437] Node 0 [ 2472.522906] SyS_ioctl+0x7f/0xb0 [ 2472.544190] DMA free:10972kB min:204kB low:252kB high:300kB active_anon:12kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:64kB pagetables:4kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2472.568553] ? do_vfs_ioctl+0xff0/0xff0 [ 2472.568566] do_syscall_64+0x1d5/0x640 [ 2472.568580] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2472.594174] lowmem_reserve[]: [ 2472.599849] RIP: 0033:0x466459 [ 2472.603804] 0 [ 2472.630763] RSP: 002b:00007f4d0bcd5188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2472.630773] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 2472.630777] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2472.630782] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2472.630787] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2472.630795] R13: 00007ffe1117a98f R14: 00007f4d0bcd5300 R15: 0000000000022000 [ 2472.674185] 2717 [ 2472.679491] 2097051 pages RAM [ 2472.679973] 2718 2718 2718 [ 2472.679987] Node 0 [ 2472.683083] 0 pages HighMem/MovableOnly [ 2472.706601] CPU: 0 PID: 15857 Comm: systemd-journal Not tainted 4.14.229-syzkaller #0 [ 2472.714711] 363848 pages reserved [ 2472.717820] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2472.726984] 0 pages cma reserved [ 2472.732375] Call Trace: [ 2472.773552] dump_stack+0x1b2/0x281 [ 2472.777196] dump_header+0x178/0x82f [ 2472.780922] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2472.786029] ? ___ratelimit+0x2cd/0x530 [ 2472.790010] oom_kill_process.cold+0x10/0xa40 [ 2472.794517] out_of_memory+0xe3e/0x1190 [ 2472.798497] ? oom_killer_disable+0x1c0/0x1c0 [ 2472.802993] ? mutex_trylock+0x152/0x1a0 [ 2472.807184] __alloc_pages_nodemask+0x23e1/0x2720 [ 2472.812047] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2472.817049] alloc_pages_current+0x155/0x260 [ 2472.821465] filemap_fault+0x11a1/0x1ad0 [ 2472.825539] ext4_filemap_fault+0x84/0xb0 [ 2472.829694] __do_fault+0xfa/0x380 [ 2472.833324] __handle_mm_fault+0x2497/0x4620 [ 2472.837741] ? vm_insert_page+0x7c0/0x7c0 [ 2472.841904] ? mark_held_locks+0xa6/0xf0 [ 2472.845971] handle_mm_fault+0x455/0x9c0 [ 2472.850039] __do_page_fault+0x549/0xad0 [ 2472.854103] ? spurious_fault+0x640/0x640 [ 2472.858248] ? do_page_fault+0x60/0x500 [ 2472.862224] ? page_fault+0x2f/0x50 [ 2472.865852] page_fault+0x45/0x50 [ 2472.869304] RIP: 0466:0x2b [ 2472.872186] RSP: bbc05e4e:0000000000000001 EFLAGS: 0000014d [ 2472.954235] DMA32 free:186760kB min:36200kB low:45248kB high:54296kB active_anon:57112kB inactive_anon:117812kB active_file:148kB inactive_file:6072kB unevictable:0kB writepending:0kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:7552kB pagetables:3088kB bounce:0kB free_pcp:468kB local_pcp:336kB free_cma:0kB [ 2473.074303] lowmem_reserve[]: 0 0 0 0 0 [ 2473.084434] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2473.146036] lowmem_reserve[]: 0 0 0 0 0 [ 2473.154723] Node 1 Normal free:281624kB min:53696kB low:67120kB high:80544kB active_anon:2036kB inactive_anon:68716kB active_file:8kB inactive_file:8kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:352kB pagetables:252kB bounce:0kB free_pcp:784kB local_pcp:620kB free_cma:0kB [ 2473.184538] lowmem_reserve[]: 0 0 0 0 0 [ 2473.189205] Node 0 DMA: 11*4kB (ME) 20*8kB (UME) 11*16kB (ME) 15*32kB (UME) 21*64kB (UME) 4*128kB (UM) 5*256kB (UME) 3*512kB (UME) 2*1024kB (ME) 2*2048kB (UM) 0*4096kB = 11676kB [ 2473.222567] Node 0 DMA32: 5349*4kB (UE) 1582*8kB (UME) 1448*16kB (U) 707*32kB (U) 1661*64kB (UM) 440*128kB (UM) 30*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 250148kB [ 2473.238737] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2473.250551] Node 1 Normal: 1507*4kB (UM) 60*8kB (UM) 354*16kB (UME) 538*32kB (UM) 1302*64kB (U) 89*128kB (U) 78*256kB (U) 24*512kB (U) 103*1024kB (U) 9*2048kB (U) 1*4096kB (U) = 284364kB [ 2473.294134] Mem-Info: [ 2473.296584] active_anon:14890 inactive_anon:46632 isolated_anon:0 [ 2473.296584] active_file:664 inactive_file:1502 isolated_file:0 [ 2473.296584] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2473.296584] slab_reclaimable:12525 slab_unreclaimable:122103 [ 2473.296584] mapped:54058 shmem:47890 pagetables:836 bounce:0 [ 2473.296584] free:131173 free_pcp:398 free_cma:0 [ 2473.331394] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2473.343379] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2473.373960] IPVS: ftp: loaded support on port[0] = 21 [ 2473.384978] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2473.427435] Node 0 active_anon:57824kB inactive_anon:117812kB active_file:3448kB inactive_file:6220kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:197936kB dirty:0kB writeback:0kB shmem:122368kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2473.429725] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2473.475032] Node 1 active_anon:2036kB inactive_anon:68716kB active_file:8kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:18896kB dirty:0kB writeback:0kB shmem:69192kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2473.514709] Node 0 DMA free:11676kB min:204kB low:252kB high:300kB active_anon:12kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:64kB pagetables:4kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2473.542150] 50435 total pagecache pages [ 2473.574115] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2473.579199] Node 0 DMA32 free:127220kB min:36200kB low:45248kB high:54296kB active_anon:57812kB inactive_anon:117812kB active_file:3448kB inactive_file:6420kB unevictable:0kB writepending:0kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:7488kB pagetables:3088kB bounce:0kB free_pcp:328kB local_pcp:276kB free_cma:0kB [ 2473.617369] 0 pages in swap cache [ 2473.620852] Swap cache stats: add 0, delete 0, find 0/0 [ 2473.644390] lowmem_reserve[]: 0 0 0 0 0 [ 2473.648437] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2473.664225] Free swap = 0kB [ 2473.734879] lowmem_reserve[]: 0 0 0 0 0 [ 2473.738908] Node 1 Normal free:110336kB min:53696kB low:67120kB high:80544kB active_anon:2036kB inactive_anon:68716kB active_file:8kB inactive_file:8kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:416kB pagetables:252kB bounce:0kB free_pcp:84kB local_pcp:80kB free_cma:0kB [ 2473.749308] Total swap = 0kB [ 2473.864454] lowmem_reserve[]: 0 0 0 0 0 [ 2473.867602] 2097051 pages RAM [ 2473.868668] Node 0 DMA: 12*4kB (UME) 19*8kB (ME) 12*16kB (UME) 14*32kB (ME) 10*64kB (ME) 4*128kB (UM) 5*256kB (UME) 3*512kB (UME) 2*1024kB (ME) 2*2048kB (UM) 0*4096kB = 10952kB [ 2473.884078] 0 pages HighMem/MovableOnly [ 2473.898443] 363848 pages reserved [ 2473.917470] 0 pages cma reserved [ 2473.919640] Node 0 DMA32: 288*4kB (UME) 168*8kB (ME) 42*16kB (UM) 55*32kB (UM) 1*64kB (U) 44*128kB (UM) 27*256kB (UM) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 17536kB [ 2474.002584] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2474.024156] Node 1 Normal: 6099*4kB (UM) 635*8kB (UM) 343*16kB (UME) 10*32kB (UM) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 35284kB [ 2474.053122] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2474.068214] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2474.078611] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2474.090920] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2474.101996] 47955 total pagecache pages [ 2474.109321] 0 pages in swap cache [ 2474.112793] Swap cache stats: add 0, delete 0, find 0/0 [ 2474.120185] Free swap = 0kB [ 2474.123238] Total swap = 0kB [ 2474.140618] 2097051 pages RAM [ 2474.143750] 0 pages HighMem/MovableOnly [ 2474.159392] 363848 pages reserved [ 2474.162954] 0 pages cma reserved [ 2474.169690] Out of memory (oom_kill_allocating_task): Kill process 15857 (systemd-journal) score 0 or sacrifice child [ 2474.182477] Killed process 15857 (systemd-journal) total-vm:46096kB, anon-rss:0kB, file-rss:0kB, shmem-rss:1588kB [ 2474.198767] systemd-journal: page allocation failure: order:0, mode:0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null) [ 2474.212251] systemd-journal cpuset=/ mems_allowed=0-1 [ 2474.220670] oom_reaper: reaped process 15861 (syz-executor.4), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 2474.222530] CPU: 1 PID: 15857 Comm: systemd-journal Not tainted 4.14.229-syzkaller #0 [ 2474.238609] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2474.247952] Call Trace: [ 2474.250548] dump_stack+0x1b2/0x281 [ 2474.254178] warn_alloc.cold+0x96/0x1cc [ 2474.258173] ? zone_watermark_ok_safe+0x220/0x220 [ 2474.263015] ? wait_for_completion_io+0x10/0x10 [ 2474.267665] __alloc_pages_nodemask+0x2127/0x2720 [ 2474.272492] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2474.277325] alloc_pages_current+0x155/0x260 [ 2474.281734] filemap_fault+0x11a1/0x1ad0 [ 2474.285778] ext4_filemap_fault+0x84/0xb0 [ 2474.289904] __do_fault+0xfa/0x380 [ 2474.293425] __handle_mm_fault+0x2497/0x4620 [ 2474.297812] ? vm_insert_page+0x7c0/0x7c0 [ 2474.301944] ? mark_held_locks+0xa6/0xf0 [ 2474.306001] handle_mm_fault+0x455/0x9c0 [ 2474.310042] __do_page_fault+0x549/0xad0 [ 2474.314089] ? spurious_fault+0x640/0x640 [ 2474.318216] ? do_page_fault+0x60/0x500 [ 2474.322181] ? page_fault+0x2f/0x50 [ 2474.325791] page_fault+0x45/0x50 [ 2474.329221] RIP: 0466:0x2b [ 2474.332040] RSP: bbc05e4e:0000000000000001 EFLAGS: 0000014d [ 2474.336473] syz-executor.5 invoked oom-killer: gfp_mask=0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null), order=0, oom_score_adj=1000 [ 2474.344177] warn_alloc_show_mem: 1 callbacks suppressed [ 2474.344179] Mem-Info: [ 2474.365639] syz-executor.1: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2474.366904] active_anon:14932 inactive_anon:46634 isolated_anon:0 [ 2474.366904] active_file:22 inactive_file:25 isolated_file:9 [ 2474.366904] unevictable:0 dirty:22 writeback:0 unstable:0 [ 2474.366904] slab_reclaimable:12523 slab_unreclaimable:122216 [ 2474.366904] mapped:52626 shmem:47894 pagetables:822 bounce:0 [ 2474.366904] free:13812 free_pcp:0 free_cma:0 [ 2474.386428] syz-executor.1 cpuset= [ 2474.410747] syz-executor.4: [ 2474.413609] Node 0 active_anon:57820kB inactive_anon:117820kB active_file:176kB inactive_file:96kB unevictable:0kB isolated(anon):0kB isolated(file):36kB mapped:191608kB dirty:84kB writeback:0kB shmem:122384kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2474.417275] page allocation failure: order:0 [ 2474.417350] Node 1 active_anon:1908kB inactive_anon:68716kB active_file:12kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:18896kB dirty:4kB writeback:0kB shmem:69192kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2474.453920] syz-executor.5 cpuset= [ 2474.477081] / [ 2474.483568] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2474.492963] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 2474.494582] mems_allowed=0-1 [ 2474.501197] CPU: 0 PID: 15868 Comm: syz-executor.1 Not tainted 4.14.229-syzkaller #0 [ 2474.509064] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2474.518499] Call Trace: [ 2474.521091] dump_stack+0x1b2/0x281 [ 2474.524701] warn_alloc.cold+0x96/0x1cc [ 2474.528658] ? zone_watermark_ok_safe+0x220/0x220 [ 2474.533489] __alloc_pages_nodemask+0x2127/0x2720 [ 2474.536799] Node 0 DMA free:10952kB min:204kB low:252kB high:300kB active_anon:12kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:64kB pagetables:4kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2474.538324] ? check_preemption_disabled+0x35/0x240 [ 2474.538338] ? lock_acquire+0x170/0x3f0 [ 2474.573557] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2474.578405] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2474.583864] ? __mutex_unlock_slowpath+0x75/0x770 [ 2474.588715] alloc_pages_current+0x155/0x260 [ 2474.593197] ion_page_pool_alloc+0x118/0x1b0 [ 2474.597590] ion_system_heap_allocate+0x133/0x8c0 [ 2474.602415] ? _raw_spin_unlock+0x29/0x40 [ 2474.606572] ? _ion_heap_freelist_drain+0x6e/0x410 [ 2474.606788] lowmem_reserve[]: [ 2474.611503] ? ion_system_contig_heap_create+0x130/0x130 [ 2474.611509] 0 [ 2474.614592] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2474.614604] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2474.614615] ion_alloc+0x27a/0x810 [ 2474.614629] ? ion_dma_buf_release+0x40/0x40 [ 2474.614641] ? __might_fault+0x177/0x1b0 [ 2474.614652] ion_ioctl+0xea/0x1f0 [ 2474.614661] ? ion_query_heaps+0x360/0x360 [ 2474.620128] syz-executor.2: [ 2474.621885] ? ion_query_heaps+0x360/0x360 [ 2474.646814] page allocation failure: order:0 [ 2474.647190] do_vfs_ioctl+0x75a/0xff0 [ 2474.651497] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 2474.654499] ? ioctl_preallocate+0x1a0/0x1a0 [ 2474.654508] ? lock_downgrade+0x740/0x740 [ 2474.654521] ? __fget+0x225/0x360 [ 2474.654531] ? do_vfs_ioctl+0xff0/0xff0 [ 2474.658860] 2717 [ 2474.663242] ? security_file_ioctl+0x83/0xb0 [ 2474.677073] 2718 [ 2474.678497] SyS_ioctl+0x7f/0xb0 [ 2474.682614] 2718 [ 2474.686052] ? do_vfs_ioctl+0xff0/0xff0 [ 2474.686069] do_syscall_64+0x1d5/0x640 [ 2474.686084] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2474.686092] RIP: 0033:0x466459 [ 2474.686097] RSP: 002b:00007f10b678e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2474.686106] RAX: ffffffffffffffda RBX: 000000000056c008 RCX: 0000000000466459 [ 2474.686111] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2474.686115] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2474.686121] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c008 [ 2474.686126] R13: 00007ffd58825dcf R14: 00007f10b678e300 R15: 0000000000022000 [ 2474.691277] / [ 2474.692158] (null) [ 2474.702148] mems_allowed=0-1 [ 2474.704073] CPU: 1 PID: 15861 Comm: syz-executor.4 Not tainted 4.14.229-syzkaller #0 [ 2474.704079] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2474.704084] Call Trace: [ 2474.790801] dump_stack+0x1b2/0x281 [ 2474.794419] warn_alloc.cold+0x96/0x1cc [ 2474.798377] ? zone_watermark_ok_safe+0x220/0x220 [ 2474.803201] ? usleep_range+0x130/0x130 [ 2474.807153] ? try_to_free_pages+0x23f/0x6e0 [ 2474.811555] ? _find_next_bit+0xdb/0x100 [ 2474.815634] ? run_timer_softirq+0x5a0/0x5a0 [ 2474.820031] __alloc_pages_nodemask+0x2127/0x2720 [ 2474.824859] ? lock_acquire+0x170/0x3f0 [ 2474.828820] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2474.833647] ? ion_page_pool_alloc+0x9e/0x1b0 [ 2474.838129] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2474.843575] alloc_pages_current+0x155/0x260 [ 2474.847979] ion_page_pool_alloc+0x118/0x1b0 [ 2474.852368] ion_system_heap_allocate+0x133/0x8c0 [ 2474.857191] ? ion_alloc+0x187/0x810 [ 2474.860889] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2474.866319] ? ion_system_contig_heap_create+0x130/0x130 [ 2474.871748] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2474.876770] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2474.881603] ion_alloc+0x204/0x810 [ 2474.885135] ? ion_dma_buf_release+0x40/0x40 [ 2474.889527] ? __might_fault+0x177/0x1b0 [ 2474.893569] ion_ioctl+0xea/0x1f0 [ 2474.896999] ? ion_query_heaps+0x360/0x360 [ 2474.901211] ? ion_query_heaps+0x360/0x360 [ 2474.905440] do_vfs_ioctl+0x75a/0xff0 [ 2474.909231] ? ioctl_preallocate+0x1a0/0x1a0 [ 2474.913621] ? lock_downgrade+0x740/0x740 [ 2474.917749] ? __fget+0x225/0x360 [ 2474.921182] ? do_vfs_ioctl+0xff0/0xff0 [ 2474.925134] ? security_file_ioctl+0x83/0xb0 [ 2474.929521] SyS_ioctl+0x7f/0xb0 [ 2474.932865] ? do_vfs_ioctl+0xff0/0xff0 [ 2474.936818] do_syscall_64+0x1d5/0x640 [ 2474.940689] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2474.945855] RIP: 0033:0x466459 [ 2474.949022] RSP: 002b:00007f46becae188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2474.956707] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 2474.963958] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2474.971207] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2474.978453] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2474.985701] R13: 00007ffe96c50ebf R14: 00007f46becae300 R15: 0000000000022000 [ 2474.992964] CPU: 0 PID: 15897 Comm: syz-executor.5 Not tainted 4.14.229-syzkaller #0 [ 2474.995401] Bluetooth: hci0 command 0x0409 tx timeout [ 2475.000863] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2475.006132] 2718 [ 2475.015362] Call Trace: [ 2475.015378] dump_stack+0x1b2/0x281 [ 2475.015391] dump_header+0x178/0x82f [ 2475.015404] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2475.015415] ? ___ratelimit+0x2cd/0x530 [ 2475.020024] oom_kill_process.cold+0x10/0xa40 [ 2475.023618] Node 0 [ 2475.027318] out_of_memory+0xe3e/0x1190 [ 2475.027333] ? oom_killer_disable+0x1c0/0x1c0 [ 2475.027343] ? mutex_trylock+0x152/0x1a0 [ 2475.027355] __alloc_pages_nodemask+0x23e1/0x2720 [ 2475.027372] ? lock_acquire+0x170/0x3f0 [ 2475.032449] syz-executor.2 cpuset= [ 2475.036399] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2475.036409] ? ion_page_pool_alloc+0x9e/0x1b0 [ 2475.036424] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2475.040903] / [ 2475.043129] alloc_pages_current+0x155/0x260 [ 2475.047115] DMA32 free:17688kB min:36200kB low:45248kB high:54296kB active_anon:57808kB inactive_anon:117820kB active_file:380kB inactive_file:280kB unevictable:0kB writepending:84kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:7488kB pagetables:3032kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2475.051542] ion_page_pool_alloc+0x118/0x1b0 [ 2475.055611] mems_allowed=0-1 [ 2475.060399] ion_system_heap_allocate+0x133/0x8c0 [ 2475.064372] lowmem_reserve[]: [ 2475.067865] ? _raw_spin_unlock+0x29/0x40 [ 2475.072679] 0 [ 2475.077154] ? _ion_heap_freelist_drain+0x6e/0x410 [ 2475.077163] ? ion_system_contig_heap_create+0x130/0x130 [ 2475.077174] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2475.077184] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2475.077194] ion_alloc+0x27a/0x810 [ 2475.103960] 0 [ 2475.116956] ? ion_dma_buf_release+0x40/0x40 [ 2475.116967] ? __might_fault+0x177/0x1b0 [ 2475.116978] ion_ioctl+0xea/0x1f0 [ 2475.116986] ? ion_query_heaps+0x360/0x360 [ 2475.116995] ? SyS_epoll_ctl+0x1e0/0x2780 [ 2475.117005] ? ion_query_heaps+0x360/0x360 [ 2475.134901] 0 [ 2475.136479] do_vfs_ioctl+0x75a/0xff0 [ 2475.138255] 0 [ 2475.143168] ? ioctl_preallocate+0x1a0/0x1a0 [ 2475.163966] 0 [ 2475.164041] ? lock_downgrade+0x740/0x740 [ 2475.172462] ? __fget+0x225/0x360 [ 2475.195802] Node 0 [ 2475.200155] ? do_vfs_ioctl+0xff0/0xff0 [ 2475.201936] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2475.206054] ? security_file_ioctl+0x83/0xb0 [ 2475.206065] SyS_ioctl+0x7f/0xb0 [ 2475.206074] ? do_vfs_ioctl+0xff0/0xff0 [ 2475.206088] do_syscall_64+0x1d5/0x640 [ 2475.206104] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2475.223956] lowmem_reserve[]: [ 2475.240571] RIP: 0033:0x466459 [ 2475.240576] RSP: 002b:00007f4d0bcd5188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2475.240586] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 2475.240591] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2475.240596] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2475.240601] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2475.240606] R13: 00007ffe1117a98f R14: 00007f4d0bcd5300 R15: 0000000000022000 [ 2475.246838] syz-executor.1: [ 2475.248433] CPU: 1 PID: 15867 Comm: syz-executor.2 Not tainted 4.14.229-syzkaller #0 [ 2475.252376] page allocation failure: order:4 [ 2475.256322] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2475.256325] Call Trace: [ 2475.256342] dump_stack+0x1b2/0x281 [ 2475.256357] warn_alloc.cold+0x96/0x1cc [ 2475.314823] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 2475.315602] ? zone_watermark_ok_safe+0x220/0x220 [ 2475.323542] (null) [ 2475.327931] ? usleep_range+0x130/0x130 [ 2475.327943] ? _find_next_bit+0xdb/0x100 [ 2475.327953] ? run_timer_softirq+0x5a0/0x5a0 [ 2475.327970] __alloc_pages_nodemask+0x2127/0x2720 [ 2475.378665] ? lock_acquire+0x170/0x3f0 [ 2475.382642] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2475.385166] syz-executor.1 cpuset= [ 2475.387470] ? ion_page_pool_alloc+0x9e/0x1b0 [ 2475.387476] / [ 2475.390998] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2475.395521] mems_allowed=0-1 [ 2475.397205] alloc_pages_current+0x155/0x260 [ 2475.410076] ion_page_pool_alloc+0x118/0x1b0 [ 2475.414462] ion_system_heap_allocate+0x133/0x8c0 [ 2475.419283] ? ion_alloc+0x187/0x810 [ 2475.422980] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2475.428408] ? ion_system_contig_heap_create+0x130/0x130 [ 2475.433835] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2475.438841] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2475.443683] ion_alloc+0x204/0x810 [ 2475.447211] ? ion_dma_buf_release+0x40/0x40 [ 2475.451601] ? __might_fault+0x177/0x1b0 [ 2475.455640] ion_ioctl+0xea/0x1f0 [ 2475.459074] ? ion_query_heaps+0x360/0x360 [ 2475.463291] ? ion_query_heaps+0x360/0x360 [ 2475.467504] do_vfs_ioctl+0x75a/0xff0 [ 2475.471283] ? ioctl_preallocate+0x1a0/0x1a0 [ 2475.475672] ? lock_downgrade+0x740/0x740 [ 2475.479800] ? __fget+0x225/0x360 [ 2475.483232] ? do_vfs_ioctl+0xff0/0xff0 [ 2475.487246] ? security_file_ioctl+0x83/0xb0 [ 2475.491639] SyS_ioctl+0x7f/0xb0 [ 2475.494983] ? do_vfs_ioctl+0xff0/0xff0 [ 2475.498939] do_syscall_64+0x1d5/0x640 [ 2475.502809] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2475.507975] RIP: 0033:0x466459 [ 2475.511141] RSP: 002b:00007f3bc6e74188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2475.518828] RAX: ffffffffffffffda RBX: 000000000056c008 RCX: 0000000000466459 [ 2475.526075] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2475.533321] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2475.540568] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c008 [ 2475.547814] R13: 00007ffe618eb5ff R14: 00007f3bc6e74300 R15: 0000000000022000 [ 2475.555078] CPU: 0 PID: 15864 Comm: syz-executor.1 Not tainted 4.14.229-syzkaller #0 [ 2475.555535] 0 [ 2475.562966] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2475.562972] 0 [ 2475.564747] Call Trace: [ 2475.564763] dump_stack+0x1b2/0x281 [ 2475.564778] warn_alloc.cold+0x96/0x1cc [ 2475.564791] ? zone_watermark_ok_safe+0x220/0x220 [ 2475.574180] 0 [ 2475.575920] __alloc_pages_nodemask+0x2127/0x2720 [ 2475.578462] 0 [ 2475.582076] ? lock_acquire+0x170/0x3f0 [ 2475.586040] 0 [ 2475.590840] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2475.597447] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2475.597460] ? __mutex_unlock_slowpath+0x75/0x770 [ 2475.597474] alloc_pages_current+0x155/0x260 [ 2475.597488] ion_page_pool_alloc+0x118/0x1b0 [ 2475.599282] Node 1 [ 2475.603216] ion_system_heap_allocate+0x133/0x8c0 [ 2475.605032] Normal free:26828kB min:53696kB low:67120kB high:80544kB active_anon:1904kB inactive_anon:68716kB active_file:4kB inactive_file:4kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:384kB pagetables:252kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2475.609814] ? _raw_spin_unlock+0x29/0x40 [ 2475.615283] lowmem_reserve[]: [ 2475.620491] ? _ion_heap_freelist_drain+0x6e/0x410 [ 2475.624897] 0 [ 2475.629261] ? ion_system_contig_heap_create+0x130/0x130 [ 2475.631466] 0 [ 2475.636375] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2475.636386] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2475.636397] ion_alloc+0x27a/0x810 [ 2475.636410] ? ion_dma_buf_release+0x40/0x40 [ 2475.636421] ? __might_fault+0x177/0x1b0 [ 2475.636433] ion_ioctl+0xea/0x1f0 [ 2475.664051] 0 [ 2475.668121] ? ion_query_heaps+0x360/0x360 [ 2475.671194] 0 [ 2475.676112] ? ion_query_heaps+0x360/0x360 [ 2475.676123] do_vfs_ioctl+0x75a/0xff0 [ 2475.676136] ? ioctl_preallocate+0x1a0/0x1a0 [ 2475.677922] 0 [ 2475.683351] ? lock_downgrade+0x740/0x740 [ 2475.690132] ? __fget+0x225/0x360 [ 2475.694983] Node 0 [ 2475.698475] ? do_vfs_ioctl+0xff0/0xff0 [ 2475.702850] DMA: [ 2475.706901] ? security_file_ioctl+0x83/0xb0 [ 2475.706912] SyS_ioctl+0x7f/0xb0 [ 2475.706920] ? do_vfs_ioctl+0xff0/0xff0 [ 2475.706931] do_syscall_64+0x1d5/0x640 [ 2475.706947] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2475.710386] 11*4kB [ 2475.712150] RIP: 0033:0x466459 [ 2475.716385] (ME) [ 2475.718135] RSP: 002b:00007f10b67af188 EFLAGS: 00000246 [ 2475.722340] 20*8kB [ 2475.726111] ORIG_RAX: 0000000000000010 [ 2475.726118] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 2475.726123] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2475.726129] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2475.726134] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2475.726139] R13: 00007ffd58825dcf R14: 00007f10b67af300 R15: 0000000000022000 [ 2475.733925] syz-executor.1: [ 2475.736523] warn_alloc_show_mem: 1 callbacks suppressed [ 2475.736525] Mem-Info: [ 2475.739895] page allocation failure: order:0 [ 2475.742118] active_anon:14907 inactive_anon:46634 isolated_anon:0 [ 2475.742118] active_file:26 inactive_file:20 isolated_file:0 [ 2475.742118] unevictable:0 dirty:18 writeback:0 unstable:0 [ 2475.742118] slab_reclaimable:12523 slab_unreclaimable:122208 [ 2475.742118] mapped:52621 shmem:47894 pagetables:822 bounce:0 [ 2475.742118] free:13923 free_pcp:0 free_cma:0 [ 2475.746083] syz-executor.2: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2475.748154] Node 0 active_anon:57724kB inactive_anon:117820kB active_file:100kB inactive_file:76kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:191588kB dirty:72kB writeback:0kB shmem:122384kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2475.752547] syz-executor.2 cpuset= [ 2475.755944] (UME) [ 2475.772405] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 2475.774786] Node 1 active_anon:1904kB inactive_anon:68716kB active_file:4kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:18896kB dirty:0kB writeback:0kB shmem:69192kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2475.784158] / [ 2475.784352] Node 0 [ 2475.788280] mems_allowed=0-1 [ 2475.795602] 12*16kB (UME) 14*32kB (ME) 10*64kB (ME) 4*128kB (UM) 5*256kB (UME) 3*512kB (UME) 2*1024kB (ME) 2*2048kB [ 2475.814400] (null) [ 2475.817717] DMA free:10956kB min:204kB low:252kB high:300kB active_anon:12kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:64kB pagetables:4kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2475.835117] syz-executor.1 cpuset= [ 2475.836605] (UM) [ 2475.840012] / [ 2475.875110] lowmem_reserve[]: [ 2475.895709] Mem-Info: [ 2475.914998] 0*4096kB [ 2475.927490] CPU: 0 PID: 15862 Comm: syz-executor.2 Not tainted 4.14.229-syzkaller #0 [ 2475.954945] 0 [ 2475.956900] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2475.959978] 2717 [ 2475.970607] Call Trace: [ 2475.970626] dump_stack+0x1b2/0x281 [ 2475.970640] warn_alloc.cold+0x96/0x1cc [ 2475.970652] ? zone_watermark_ok_safe+0x220/0x220 [ 2475.970666] ? usleep_range+0x130/0x130 [ 2475.972812] mems_allowed=0-1 [ 2475.998441] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 2475.998453] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 2475.998463] ? run_timer_softirq+0x5a0/0x5a0 [ 2475.998483] __alloc_pages_nodemask+0x2127/0x2720 [ 2475.998500] ? lock_acquire+0x170/0x3f0 [ 2475.998517] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2476.003956] 2718 [ 2476.004088] ? ion_page_pool_alloc+0x9e/0x1b0 [ 2476.005772] 2718 [ 2476.008873] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2476.011239] 2718 [ 2476.013644] alloc_pages_current+0x155/0x260 [ 2476.034667] ion_page_pool_alloc+0x118/0x1b0 [ 2476.037219] Node 0 [ 2476.040827] ion_system_heap_allocate+0x133/0x8c0 [ 2476.046742] = 10956kB [ 2476.049629] ? ion_alloc+0x187/0x810 [ 2476.053577] Node 0 [ 2476.056676] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2476.056685] ? ion_system_contig_heap_create+0x130/0x130 [ 2476.056693] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2476.056704] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2476.056713] ion_alloc+0x204/0x810 [ 2476.056726] ? ion_dma_buf_release+0x40/0x40 [ 2476.056740] ? __might_fault+0x177/0x1b0 [ 2476.093951] DMA32 free:17908kB min:36200kB low:45248kB high:54296kB active_anon:57712kB inactive_anon:117820kB active_file:76kB inactive_file:76kB unevictable:0kB writepending:72kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:7488kB pagetables:3032kB bounce:0kB free_pcp:4kB local_pcp:292kB free_cma:0kB [ 2476.098859] ion_ioctl+0xea/0x1f0 [ 2476.100889] lowmem_reserve[]: [ 2476.105275] ? ion_query_heaps+0x360/0x360 [ 2476.105286] ? ion_query_heaps+0x360/0x360 [ 2476.105298] do_vfs_ioctl+0x75a/0xff0 [ 2476.105310] ? ioctl_preallocate+0x1a0/0x1a0 [ 2476.109695] DMA32: [ 2476.111909] ? lock_downgrade+0x740/0x740 [ 2476.143892] 299*4kB [ 2476.145695] ? __fget+0x225/0x360 [ 2476.149208] (UME) [ 2476.153598] ? do_vfs_ioctl+0xff0/0xff0 [ 2476.163889] 0 [ 2476.186000] ? security_file_ioctl+0x83/0xb0 [ 2476.186011] SyS_ioctl+0x7f/0xb0 [ 2476.186020] ? do_vfs_ioctl+0xff0/0xff0 [ 2476.186033] do_syscall_64+0x1d5/0x640 [ 2476.186048] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2476.186057] RIP: 0033:0x466459 [ 2476.186061] RSP: 002b:00007f3bc6e95188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2476.186070] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 2476.186075] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2476.186083] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2476.223912] 165*8kB [ 2476.227319] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2476.229104] (UME) [ 2476.233486] R13: 00007ffe618eb5ff R14: 00007f3bc6e95300 R15: 0000000000022000 [ 2476.238324] active_anon:14907 inactive_anon:46634 isolated_anon:0 [ 2476.238324] active_file:20 inactive_file:20 isolated_file:0 [ 2476.238324] unevictable:0 dirty:18 writeback:0 unstable:0 [ 2476.238324] slab_reclaimable:12523 slab_unreclaimable:122208 [ 2476.238324] mapped:52621 shmem:47894 pagetables:822 bounce:0 [ 2476.238324] free:24417 free_pcp:274 free_cma:0 [ 2476.253911] CPU: 1 PID: 15868 Comm: syz-executor.1 Not tainted 4.14.229-syzkaller #0 [ 2476.342467] Node 0 active_anon:57724kB inactive_anon:117820kB active_file:76kB inactive_file:76kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:191588kB dirty:72kB writeback:0kB shmem:122384kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2476.342868] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2476.373982] chnl_net:caif_netlink_parms(): no params data found [ 2476.380119] Call Trace: [ 2476.380136] dump_stack+0x1b2/0x281 [ 2476.380150] warn_alloc.cold+0x96/0x1cc [ 2476.380162] ? zone_watermark_ok_safe+0x220/0x220 [ 2476.380173] ? usleep_range+0x130/0x130 [ 2476.380181] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 2476.380194] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 2476.415229] ? run_timer_softirq+0x5a0/0x5a0 [ 2476.419644] __alloc_pages_nodemask+0x2127/0x2720 [ 2476.424488] ? lock_acquire+0x170/0x3f0 [ 2476.428464] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2476.428905] Node 1 active_anon:1904kB inactive_anon:68716kB active_file:4kB inactive_file:3704kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:21696kB dirty:0kB writeback:0kB shmem:69192kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2476.433300] ? ion_page_pool_alloc+0x9e/0x1b0 [ 2476.465018] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2476.470476] alloc_pages_current+0x155/0x260 [ 2476.474883] ion_page_pool_alloc+0x118/0x1b0 [ 2476.479461] ion_system_heap_allocate+0x133/0x8c0 [ 2476.484301] ? _raw_spin_unlock+0x29/0x40 [ 2476.488442] ? _ion_heap_freelist_drain+0x6e/0x410 [ 2476.493365] ? ion_system_contig_heap_create+0x130/0x130 [ 2476.498814] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2476.503136] Node 0 [ 2476.503837] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2476.503850] ion_alloc+0x27a/0x810 [ 2476.503864] ? ion_dma_buf_release+0x40/0x40 [ 2476.503876] ? __might_fault+0x177/0x1b0 [ 2476.503887] ion_ioctl+0xea/0x1f0 [ 2476.503895] ? ion_query_heaps+0x360/0x360 [ 2476.503909] ? ion_query_heaps+0x360/0x360 [ 2476.506757] DMA free:11216kB min:204kB low:252kB high:300kB active_anon:12kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:64kB pagetables:4kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2476.510954] do_vfs_ioctl+0x75a/0xff0 [ 2476.510966] ? ioctl_preallocate+0x1a0/0x1a0 [ 2476.510976] ? lock_downgrade+0x740/0x740 [ 2476.510989] ? __fget+0x225/0x360 [ 2476.510999] ? do_vfs_ioctl+0xff0/0xff0 [ 2476.533846] lowmem_reserve[]: [ 2476.534819] ? security_file_ioctl+0x83/0xb0 [ 2476.534836] SyS_ioctl+0x7f/0xb0 [ 2476.591885] ? do_vfs_ioctl+0xff0/0xff0 [ 2476.595886] do_syscall_64+0x1d5/0x640 [ 2476.599779] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2476.604963] RIP: 0033:0x466459 [ 2476.608146] RSP: 002b:00007f10b678e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2476.613386] 0 [ 2476.615843] RAX: ffffffffffffffda RBX: 000000000056c008 RCX: 0000000000466459 [ 2476.615848] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2476.615853] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2476.615858] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c008 [ 2476.615863] R13: 00007ffd58825dcf R14: 00007f10b678e300 R15: 0000000000022000 [ 2476.617159] 0 [ 2476.618067] 2717 [ 2476.625472] 405*16kB [ 2476.647157] 2718 [ 2476.663884] 0 0 0 [ 2476.668248] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2476.674497] 2718 [ 2476.714762] syz-executor.2: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2476.737124] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 2476.742269] CPU: 1 PID: 15867 Comm: syz-executor.2 Not tainted 4.14.229-syzkaller #0 [ 2476.750153] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2476.759597] Call Trace: [ 2476.761791] 2718 [ 2476.762178] dump_stack+0x1b2/0x281 [ 2476.762192] warn_alloc.cold+0x96/0x1cc [ 2476.764320] Node 0 [ 2476.767856] ? zone_watermark_ok_safe+0x220/0x220 [ 2476.771828] DMA32 free:45536kB min:36200kB low:45248kB high:54296kB active_anon:57812kB inactive_anon:117820kB active_file:372kB inactive_file:592kB unevictable:0kB writepending:220kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:7616kB pagetables:3032kB bounce:0kB free_pcp:924kB local_pcp:688kB free_cma:0kB [ 2476.774046] __alloc_pages_nodemask+0x2127/0x2720 [ 2476.774057] ? lock_acquire+0x170/0x3f0 [ 2476.774071] ? lock_acquire+0x170/0x3f0 [ 2476.803829] lowmem_reserve[]: [ 2476.807594] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2476.812408] 0 [ 2476.816490] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2476.816504] ? __mutex_unlock_slowpath+0x75/0x770 [ 2476.816519] alloc_pages_current+0x155/0x260 [ 2476.844839] ion_page_pool_alloc+0x118/0x1b0 [ 2476.849249] ion_system_heap_allocate+0x133/0x8c0 [ 2476.854097] ? _raw_spin_unlock+0x29/0x40 [ 2476.858237] ? _ion_heap_freelist_drain+0x6e/0x410 [ 2476.862983] 0 [ 2476.863154] ? ion_system_contig_heap_create+0x130/0x130 [ 2476.863155] 0 0 [ 2476.864941] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2476.864953] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2476.864966] ion_alloc+0x27a/0x810 [ 2476.870400] 0 [ 2476.872360] ? ion_dma_buf_release+0x40/0x40 [ 2476.891882] ? __might_fault+0x177/0x1b0 [ 2476.895940] ion_ioctl+0xea/0x1f0 [ 2476.899390] ? ion_query_heaps+0x360/0x360 [ 2476.903620] ? ion_query_heaps+0x360/0x360 [ 2476.907845] do_vfs_ioctl+0x75a/0xff0 [ 2476.907847] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2476.911633] ? ioctl_preallocate+0x1a0/0x1a0 [ 2476.941540] ? lock_downgrade+0x740/0x740 [ 2476.945693] ? __fget+0x225/0x360 [ 2476.949140] ? do_vfs_ioctl+0xff0/0xff0 [ 2476.953116] ? security_file_ioctl+0x83/0xb0 [ 2476.957533] SyS_ioctl+0x7f/0xb0 [ 2476.960893] ? do_vfs_ioctl+0xff0/0xff0 [ 2476.964868] do_syscall_64+0x1d5/0x640 [ 2476.968755] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2476.973816] lowmem_reserve[]: 0 [ 2476.973935] RIP: 0033:0x466459 [ 2476.973941] RSP: 002b:00007f3bc6e74188 EFLAGS: 00000246 [ 2476.977210] 0 [ 2476.980376] ORIG_RAX: 0000000000000010 [ 2476.980384] RAX: ffffffffffffffda RBX: 000000000056c008 RCX: 0000000000466459 [ 2476.998715] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2477.000560] 0 [ 2477.005971] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2477.005976] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c008 [ 2477.005982] R13: 00007ffe618eb5ff R14: 00007f3bc6e74300 R15: 0000000000022000 [ 2477.017235] (UM) [ 2477.033017] lowmem_reserve[]: 0 0 0 0 0 [ 2477.042230] Node 1 Normal free:29660kB min:53696kB low:67120kB high:80544kB active_anon:1912kB inactive_anon:68716kB active_file:128kB inactive_file:252kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:384kB pagetables:252kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2477.070949] 0 0 [ 2477.070961] Node 1 Normal free:26616kB min:53696kB low:67120kB high:80544kB active_anon:1912kB inactive_anon:68716kB active_file:128kB inactive_file:252kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:384kB pagetables:252kB bounce:0kB free_pcp:120kB local_pcp:120kB free_cma:0kB [ 2477.070980] lowmem_reserve[]: 0 0 0 0 0 [ 2477.070999] Node 0 DMA: 62*4kB (UME) 20*8kB (UME) 12*16kB (UME) 14*32kB (ME) 11*64kB (UME) 4*128kB (UM) 4*256kB (UME) 3*512kB (UME) 2*1024kB (ME) 2*2048kB (UM) 0*4096kB = 10968kB [ 2477.071111] Node 0 DMA32: 350*4kB (UME) 177*8kB (UME) 33*16kB (ME) 457*32kB (UM) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 17968kB [ 2477.071205] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2477.071263] Node 1 Normal: 67*4kB (UM) 35*8kB (UM) 564*16kB (UME) 515*32kB (UM) 9*64kB (U) 2*128kB [ 2477.075144] Bluetooth: hci0 command 0x041b tx timeout [ 2477.139943] warn_alloc_show_mem: 2 callbacks suppressed [ 2477.139946] Mem-Info: [ 2477.150379] 279*32kB [ 2477.161878] syz-executor.1: [ 2477.170133] (UM) [ 2477.171298] (U) [ 2477.174329] 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 17924kB [ 2477.174354] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2477.174396] Node 1 Normal: 67*4kB (UM) 35*8kB (UM) 564*16kB (UME) 515*32kB (UM) 9*64kB (U) 2*128kB (U) 0*256kB [ 2477.181571] 0*256kB [ 2477.189573] lowmem_reserve[]: [ 2477.201746] page allocation failure: order:0 [ 2477.210425] 0*512kB [ 2477.212245] active_anon:14922 inactive_anon:46634 isolated_anon:0 [ 2477.212245] active_file:48 inactive_file:26 isolated_file:0 [ 2477.212245] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2477.212245] slab_reclaimable:12525 slab_unreclaimable:122192 [ 2477.212245] mapped:52650 shmem:47894 pagetables:822 bounce:0 [ 2477.212245] free:13872 free_pcp:30 free_cma:0 [ 2477.216636] 0*1024kB 0*2048kB 0*4096kB = 26884kB [ 2477.216652] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2477.216657] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2477.216663] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2477.216668] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2477.216672] 47958 total pagecache pages [ 2477.216680] 0 pages in swap cache [ 2477.216685] Swap cache stats: add 0, delete 0, find 0/0 [ 2477.216688] Free swap = 0kB [ 2477.216691] Total swap = 0kB [ 2477.216756] 2097051 pages RAM [ 2477.224164] Node 0 active_anon:57776kB inactive_anon:117820kB active_file:64kB inactive_file:64kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:191588kB dirty:0kB writeback:0kB shmem:122384kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2477.255881] 0 [ 2477.269603] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 2477.278074] 0 [ 2477.286847] 0*512kB [ 2477.292027] 0 pages HighMem/MovableOnly [ 2477.306544] (null) [ 2477.311316] 0 [ 2477.321408] syz-executor.1 cpuset= [ 2477.345394] 363848 pages reserved [ 2477.359427] 0*1024kB [ 2477.362049] 0 pages cma reserved [ 2477.362657] 0*2048kB 0*4096kB [ 2477.373784] 0 0 [ 2477.380553] Node 0 DMA: 62*4kB (UME) 20*8kB (UME) 12*16kB (UME) 14*32kB (ME) 11*64kB (UME) 4*128kB (UM) 4*256kB (UME) 3*512kB (UME) 2*1024kB (ME) 2*2048kB (UM) 0*4096kB = 10968kB [ 2477.384186] = 26884kB [ 2477.400604] Node 0 DMA32: 350*4kB (UME) 177*8kB (UME) 33*16kB (ME) 457*32kB (UM) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 17968kB [ 2477.408217] Node 1 active_anon:1912kB inactive_anon:68716kB active_file:128kB inactive_file:40kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:19012kB dirty:0kB writeback:0kB shmem:69192kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2477.417791] Node 0 [ 2477.445725] / mems_allowed=0-1 [ 2477.451159] CPU: 1 PID: 15864 Comm: syz-executor.1 Not tainted 4.14.229-syzkaller #0 [ 2477.451282] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2477.459021] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2477.459026] Call Trace: [ 2477.459045] dump_stack+0x1b2/0x281 [ 2477.459058] warn_alloc.cold+0x96/0x1cc [ 2477.467889] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2477.477226] ? zone_watermark_ok_safe+0x220/0x220 [ 2477.477236] ? usleep_range+0x130/0x130 [ 2477.477247] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 2477.479814] Node 0 [ 2477.483417] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 2477.487382] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2477.495914] ? run_timer_softirq+0x5a0/0x5a0 [ 2477.495930] __alloc_pages_nodemask+0x2127/0x2720 [ 2477.495946] ? lock_acquire+0x170/0x3f0 [ 2477.500770] DMA free:10968kB min:204kB low:252kB high:300kB active_anon:12kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:64kB pagetables:4kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2477.504712] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2477.504726] ? ion_page_pool_alloc+0x9e/0x1b0 [ 2477.509797] lowmem_reserve[]: [ 2477.512019] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2477.517036] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2477.525830] ? retint_kernel+0x2d/0x2d [ 2477.525844] alloc_pages_current+0x155/0x260 [ 2477.530225] 0 [ 2477.535045] ion_page_pool_alloc+0x118/0x1b0 [ 2477.535055] ion_system_heap_allocate+0x133/0x8c0 [ 2477.535066] ? _raw_spin_unlock+0x29/0x40 [ 2477.539013] 47958 total pagecache pages [ 2477.564922] ? _ion_heap_freelist_drain+0x6e/0x410 [ 2477.564931] ? ion_system_contig_heap_create+0x130/0x130 [ 2477.564941] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2477.564952] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2477.569772] 2717 [ 2477.574244] ion_alloc+0x27a/0x810 [ 2477.574260] ? ion_dma_buf_release+0x40/0x40 [ 2477.577337] 2718 [ 2477.582766] ? __might_fault+0x177/0x1b0 [ 2477.591349] 2718 [ 2477.595201] ion_ioctl+0xea/0x1f0 [ 2477.595211] ? ion_query_heaps+0x360/0x360 [ 2477.599613] 0 pages in swap cache [ 2477.601479] ? ion_query_heaps+0x360/0x360 [ 2477.605890] 2718 [ 2477.610690] do_vfs_ioctl+0x75a/0xff0 [ 2477.614834] Swap cache stats: add 0, delete 0, find 0/0 [ 2477.618763] ? ioctl_preallocate+0x1a0/0x1a0 [ 2477.623673] Free swap = 0kB [ 2477.629098] ? lock_downgrade+0x740/0x740 [ 2477.629111] ? __fget+0x225/0x360 [ 2477.629123] ? do_vfs_ioctl+0xff0/0xff0 [ 2477.638951] ? security_file_ioctl+0x83/0xb0 [ 2477.640986] Node 0 [ 2477.644515] SyS_ioctl+0x7f/0xb0 [ 2477.644525] ? do_vfs_ioctl+0xff0/0xff0 [ 2477.644536] do_syscall_64+0x1d5/0x640 [ 2477.644553] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2477.648954] DMA32 free:17904kB min:36200kB low:45248kB high:54296kB active_anon:57764kB inactive_anon:117820kB active_file:64kB inactive_file:64kB unevictable:0kB writepending:0kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:7520kB pagetables:3032kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2477.650980] RIP: 0033:0x466459 [ 2477.655045] Total swap = 0kB [ 2477.657052] RSP: 002b:00007f10b67af188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2477.660486] 2097051 pages RAM [ 2477.664694] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 2477.664700] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2477.664706] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2477.664711] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2477.664719] R13: 00007ffd58825dcf R14: 00007f10b67af300 R15: 0000000000022000 [ 2477.668151] lowmem_reserve[]: [ 2477.676466] Normal: [ 2477.688084] 0 [ 2477.688177] 0*4kB [ 2477.691169] 0 [ 2477.699044] 0*8kB [ 2477.708040] 0 pages HighMem/MovableOnly [ 2477.709851] 0*16kB [ 2477.713180] 363848 pages reserved [ 2477.720901] 0*32kB [ 2477.730966] 0 [ 2477.758150] 0*64kB [ 2477.769018] 0 pages cma reserved [ 2477.771490] 0*128kB [ 2477.791145] Out of memory (oom_kill_allocating_task): Kill process 15897 (syz-executor.5) score 0 or sacrifice child [ 2477.806691] 0*256kB [ 2477.817527] 0 [ 2477.831445] 0*512kB [ 2477.839069] Killed process 15897 (syz-executor.5) total-vm:93384kB, anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 2477.848603] 0*1024kB [ 2477.861346] 0 [ 2477.877205] 0*2048kB 0*4096kB = 0kB [ 2477.882621] Node 1 [ 2477.882624] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2477.886695] Normal: [ 2477.910464] syz-executor.2: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2477.928715] 66*4kB (M) 34*8kB (M) 557*16kB (UME) 515*32kB (UM) 9*64kB (U) 2*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 26760kB [ 2477.933354] oom_reaper: reaped process 15867 (syz-executor.2), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 2477.941466] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 2477.941486] CPU: 1 PID: 15867 Comm: syz-executor.2 Not tainted 4.14.229-syzkaller #0 [ 2477.941492] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2477.941495] Call Trace: [ 2477.941511] dump_stack+0x1b2/0x281 [ 2477.941524] warn_alloc.cold+0x96/0x1cc [ 2477.983899] ? zone_watermark_ok_safe+0x220/0x220 [ 2477.988738] ? usleep_range+0x130/0x130 [ 2477.992707] ? try_to_free_pages+0x23f/0x6e0 [ 2477.993719] lowmem_reserve[]: [ 2477.997101] ? _find_next_bit+0xdb/0x100 [ 2477.997103] 0 0 [ 2478.000193] ? run_timer_softirq+0x5a0/0x5a0 [ 2478.010610] __alloc_pages_nodemask+0x2127/0x2720 [ 2478.015437] ? lock_acquire+0x170/0x3f0 [ 2478.019396] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2478.024222] ? ion_page_pool_alloc+0x9e/0x1b0 [ 2478.028702] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2478.034137] alloc_pages_current+0x155/0x260 [ 2478.038527] ion_page_pool_alloc+0x118/0x1b0 [ 2478.042917] ion_system_heap_allocate+0x133/0x8c0 [ 2478.047741] ? _raw_spin_unlock+0x29/0x40 [ 2478.051884] ? _ion_heap_freelist_drain+0x6e/0x410 [ 2478.056793] ? ion_system_contig_heap_create+0x130/0x130 [ 2478.062234] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2478.067231] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2478.072052] ion_alloc+0x27a/0x810 [ 2478.075574] ? ion_dma_buf_release+0x40/0x40 [ 2478.079965] ? __might_fault+0x177/0x1b0 [ 2478.084019] ion_ioctl+0xea/0x1f0 [ 2478.087449] ? ion_query_heaps+0x360/0x360 [ 2478.091668] ? ion_query_heaps+0x360/0x360 [ 2478.095911] do_vfs_ioctl+0x75a/0xff0 [ 2478.099706] ? ioctl_preallocate+0x1a0/0x1a0 [ 2478.104095] ? lock_downgrade+0x740/0x740 [ 2478.108224] ? __fget+0x225/0x360 [ 2478.111655] ? do_vfs_ioctl+0xff0/0xff0 [ 2478.115626] ? security_file_ioctl+0x83/0xb0 [ 2478.120015] SyS_ioctl+0x7f/0xb0 [ 2478.123357] ? do_vfs_ioctl+0xff0/0xff0 [ 2478.127313] do_syscall_64+0x1d5/0x640 [ 2478.131183] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2478.136369] RIP: 0033:0x466459 [ 2478.139537] RSP: 002b:00007f3bc6e74188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2478.147227] RAX: ffffffffffffffda RBX: 000000000056c008 RCX: 0000000000466459 [ 2478.154475] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2478.161724] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2478.169067] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c008 [ 2478.176316] R13: 00007ffe618eb5ff R14: 00007f3bc6e74300 R15: 0000000000022000 [ 2478.195640] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2478.199563] 0 [ 2478.233962] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2478.237160] 0 0 [ 2478.246438] Node 1 Normal free:178200kB min:53696kB low:67120kB high:80544kB active_anon:1912kB inactive_anon:68716kB active_file:308kB inactive_file:4504kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:384kB pagetables:252kB bounce:0kB free_pcp:336kB local_pcp:136kB free_cma:0kB [ 2478.253875] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2478.279381] warn_alloc_show_mem: 1 callbacks suppressed [ 2478.279384] Mem-Info: [ 2478.297585] active_anon:14897 inactive_anon:46634 isolated_anon:0 [ 2478.297585] active_file:118 inactive_file:1166 isolated_file:0 [ 2478.297585] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2478.297585] slab_reclaimable:12525 slab_unreclaimable:122078 [ 2478.297585] mapped:53146 shmem:47894 pagetables:785 bounce:0 [ 2478.297585] free:65076 free_pcp:140 free_cma:0 [ 2478.353017] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2478.373756] 49445 total pagecache pages [ 2478.373835] lowmem_reserve[]: 0 0 0 0 0 [ 2478.377787] 0 pages in swap cache [ 2478.381761] Node 0 [ 2478.398740] Swap cache stats: add 0, delete 0, find 0/0 [ 2478.403712] DMA: 62*4kB (UME) 20*8kB (UME) 12*16kB (UME) 14*32kB (ME) 12*64kB (UME) 4*128kB (UM) 4*256kB (UME) 3*512kB (UME) 2*1024kB (ME) 2*2048kB (UM) 0*4096kB = 11032kB [ 2478.413973] Free swap = 0kB [ 2478.430344] Node 0 active_anon:57776kB inactive_anon:117820kB active_file:64kB inactive_file:60kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:190088kB dirty:0kB writeback:0kB shmem:122384kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2478.443766] Total swap = 0kB [ 2478.473532] 2097051 pages RAM [ 2478.476833] 0 pages HighMem/MovableOnly [ 2478.480802] 363848 pages reserved [ 2478.483823] Node 0 DMA32: 3297*4kB (UME) 935*8kB (UME) 597*16kB (UME) 868*32kB (UM) 237*64kB (UM) 270*128kB (UM) 8*256kB (U) 1*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 110284kB [ 2478.493975] 0 pages cma reserved [ 2478.504071] bridge0: port 1(bridge_slave_0) entered blocking state [ 2478.510433] bridge0: port 1(bridge_slave_0) entered disabled state [ 2478.519125] device bridge_slave_0 entered promiscuous mode [ 2478.525651] Node 1 active_anon:2012kB inactive_anon:68716kB active_file:2008kB inactive_file:4004kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:22896kB dirty:0kB writeback:0kB shmem:69192kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2478.556241] bridge0: port 2(bridge_slave_1) entered blocking state [ 2478.562593] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2478.573987] bridge0: port 2(bridge_slave_1) entered disabled state [ 2478.581960] device bridge_slave_1 entered promiscuous mode [ 2478.590169] Node 1 Normal: 2681*4kB (UM) 987*8kB (UM) 835*16kB (UME) 673*32kB (UM) 887*64kB (U) 150*128kB (UM) 45*256kB (U) 9*512kB (U) 267*1024kB (UM) 53*2048kB (UM) 12*4096kB (U) = 576716kB [ 2478.620213] Node 0 DMA free:11072kB min:204kB low:252kB high:300kB active_anon:12kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:64kB pagetables:4kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2478.651534] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2478.664053] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 2478.673387] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 2478.681370] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2478.690030] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2478.701947] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2478.711430] Node 0 DMA32 free:309932kB min:36200kB low:45248kB high:54296kB active_anon:57364kB inactive_anon:117820kB active_file:64kB inactive_file:1560kB unevictable:0kB writepending:0kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:7424kB pagetables:2884kB bounce:0kB free_pcp:1448kB local_pcp:676kB free_cma:0kB [ 2478.744775] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2478.753358] 49815 total pagecache pages [ 2478.770406] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 2478.778513] 0 pages in swap cache [ 2478.781975] Swap cache stats: add 0, delete 0, find 0/0 [ 2478.788136] team0: Port device team_slave_0 added [ 2478.795303] Free swap = 0kB [ 2478.804955] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 2478.812239] Total swap = 0kB [ 2478.816270] 2097051 pages RAM [ 2478.819771] lowmem_reserve[]: 0 0 0 0 0 [ 2478.825272] team0: Port device team_slave_1 added [ 2478.830894] 0 pages HighMem/MovableOnly [ 2478.835571] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2478.861959] 363848 pages reserved [ 2478.873117] 0 pages cma reserved [ 2478.910673] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2478.917381] lowmem_reserve[]: 0 0 0 0 0 [ 2478.921379] Node 1 Normal free:842972kB min:53696kB low:67120kB high:80544kB active_anon:1916kB inactive_anon:68716kB active_file:2100kB inactive_file:4000kB unevictable:0kB writepending:96kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:384kB pagetables:252kB bounce:0kB free_pcp:1352kB local_pcp:660kB free_cma:0kB [ 2478.951211] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2478.993651] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2479.013689] lowmem_reserve[]: 0 0 0 0 0 [ 2479.017703] Node 0 DMA: 84*4kB (UME) 21*8kB (UME) 12*16kB (UME) 15*32kB (UME) 12*64kB (UME) 4*128kB (UM) 4*256kB (UME) 3*512kB (UME) 2*1024kB (ME) 2*2048kB (UM) 0*4096kB = 11160kB [ 2479.036542] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2479.053689] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2479.093668] Node 0 DMA32: 8887*4kB (UM) 1236*8kB (UE) 1549*16kB (UE) 1226*32kB (UME) 3571*64kB (UME) 1272*128kB (UME) 153*256kB (UE) 1*512kB (E) 0*1024kB 0*2048kB 0*4096kB = 540492kB [ 2479.123635] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2479.133748] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2479.154726] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 2479.162402] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 2479.169894] Node 1 Normal: 9421*4kB (UM) 1947*8kB (UM) 1039*16kB (UME) 1003*32kB (UM) 3620*64kB (UM) 586*128kB (UM) 263*256kB (UM) 86*512kB (UM) 145*1024kB (UM) 74*2048kB (UM) 21*4096kB (U) = 906076kB [ 2479.203933] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2479.212802] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2479.249866] device hsr_slave_0 entered promiscuous mode [ 2479.255825] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2479.274179] device hsr_slave_1 entered promiscuous mode [ 2479.279792] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2479.289278] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 2479.313610] 50413 total pagecache pages [ 2479.317643] 0 pages in swap cache [ 2479.321095] Swap cache stats: add 0, delete 0, find 0/0 [ 2479.327300] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 2479.340357] Free swap = 0kB [ 2479.343516] Total swap = 0kB [ 2479.347387] Bluetooth: hci0 command 0x040f tx timeout [ 2479.348724] 2097051 pages RAM [ 2479.356117] 0 pages HighMem/MovableOnly [ 2479.360105] 363848 pages reserved [ 2479.363563] 0 pages cma reserved [ 2479.616254] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 2479.708687] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2479.730795] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 2479.776547] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 2479.795809] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 2479.801896] 8021q: adding VLAN 0 to HW filter on device team0 [ 2479.826418] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 2479.864011] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 2479.884004] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 2479.906282] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 2479.939504] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 2479.979737] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 2480.004318] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 2480.033559] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 2480.041838] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 2480.063567] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2480.075163] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 2480.081417] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2480.094689] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2480.104374] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2480.112315] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2480.164039] bridge0: port 1(bridge_slave_0) entered blocking state [ 2480.170428] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2480.203911] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2480.211942] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2480.233935] bridge0: port 2(bridge_slave_1) entered blocking state [ 2480.240302] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2480.263915] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2480.271801] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2480.295411] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2480.327426] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2480.347334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2480.367639] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2480.375541] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2480.393988] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2480.427918] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2480.447930] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2480.479954] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 2480.505325] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 2480.555833] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2480.627083] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2480.634797] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2480.664491] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2480.693091] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2480.703917] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2480.978181] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 2480.989803] warn_alloc: 1 callbacks suppressed [ 2480.989807] syz-executor.2: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2480.998818] syz-executor.4: [ 2481.013916] syz-executor.2 cpuset= [ 2481.014792] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 2481.016965] / [ 2481.020995] page allocation failure: order:4 [ 2481.030073] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2481.042154] mems_allowed=0-1 [ 2481.042361] systemd[1]: systemd-journald.service: Failed with result 'signal'. [ 2481.047002] CPU: 1 PID: 15862 Comm: syz-executor.2 Not tainted 4.14.229-syzkaller #0 [ 2481.053404] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2481.060548] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2481.060553] Call Trace: [ 2481.060570] dump_stack+0x1b2/0x281 [ 2481.060592] warn_alloc.cold+0x96/0x1cc [ 2481.060605] ? zone_watermark_ok_safe+0x220/0x220 [ 2481.060630] __alloc_pages_nodemask+0x2127/0x2720 [ 2481.060647] ? lock_acquire+0x170/0x3f0 [ 2481.060661] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2481.060679] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2481.060692] ? __mutex_unlock_slowpath+0x75/0x770 [ 2481.060706] alloc_pages_current+0x155/0x260 [ 2481.068646] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 2481.077389] ion_page_pool_alloc+0x118/0x1b0 [ 2481.077399] ion_system_heap_allocate+0x133/0x8c0 [ 2481.077412] ? _raw_spin_unlock+0x29/0x40 [ 2481.077420] ? _ion_heap_freelist_drain+0x6e/0x410 [ 2481.077432] ? ion_system_contig_heap_create+0x130/0x130 [ 2481.086677] (null) [ 2481.087570] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2481.087587] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2481.087598] ion_alloc+0x27a/0x810 [ 2481.087611] ? ion_dma_buf_release+0x40/0x40 [ 2481.087623] ? __might_fault+0x177/0x1b0 [ 2481.087633] ion_ioctl+0xea/0x1f0 [ 2481.087645] ? ion_query_heaps+0x360/0x360 [ 2481.092466] syz-executor.4 cpuset= [ 2481.097290] ? ion_query_heaps+0x360/0x360 [ 2481.097300] do_vfs_ioctl+0x75a/0xff0 [ 2481.097311] ? ioctl_preallocate+0x1a0/0x1a0 [ 2481.097319] ? lock_downgrade+0x740/0x740 [ 2481.097332] ? __fget+0x225/0x360 [ 2481.101941] systemd[1]: systemd-journald.service: Service has no hold-off time, scheduling restart. [ 2481.106109] ? do_vfs_ioctl+0xff0/0xff0 [ 2481.106121] ? security_file_ioctl+0x83/0xb0 [ 2481.106131] SyS_ioctl+0x7f/0xb0 [ 2481.112908] / [ 2481.116395] ? do_vfs_ioctl+0xff0/0xff0 [ 2481.121681] systemd[1]: Stopped Journal Service. [ 2481.127862] do_syscall_64+0x1d5/0x640 [ 2481.127877] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2481.127884] RIP: 0033:0x466459 [ 2481.127889] RSP: 002b:00007f3bc6e95188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2481.127898] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 2481.127904] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2481.127909] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2481.127914] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2481.127920] R13: 00007ffe618eb5ff R14: 00007f3bc6e95300 R15: 0000000000022000 [ 2481.134707] warn_alloc_show_mem: 2 callbacks suppressed [ 2481.134710] Mem-Info: [ 2481.138561] mems_allowed=0-1 [ 2481.141929] active_anon:14808 inactive_anon:46633 isolated_anon:0 [ 2481.141929] active_file:607 inactive_file:2259 isolated_file:0 [ 2481.141929] unevictable:0 dirty:46 writeback:0 unstable:0 [ 2481.141929] slab_reclaimable:12538 slab_unreclaimable:122300 [ 2481.141929] mapped:54131 shmem:47894 pagetables:713 bounce:0 [ 2481.141929] free:256822 free_pcp:101 free_cma:0 [ 2481.146503] CPU: 0 PID: 15861 Comm: syz-executor.4 Not tainted 4.14.229-syzkaller #0 [ 2481.159722] Node 0 active_anon:57316kB inactive_anon:117816kB active_file:388kB inactive_file:5148kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:193056kB dirty:88kB writeback:0kB shmem:122384kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2481.163784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2481.163788] Call Trace: [ 2481.163805] dump_stack+0x1b2/0x281 [ 2481.163819] warn_alloc.cold+0x96/0x1cc [ 2481.163831] ? zone_watermark_ok_safe+0x220/0x220 [ 2481.163852] __alloc_pages_nodemask+0x2127/0x2720 [ 2481.163864] ? _raw_spin_unlock_irq+0x24/0x80 [ 2481.163881] ? lock_acquire+0x170/0x3f0 [ 2481.163896] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2481.163913] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2481.163926] ? __mutex_unlock_slowpath+0x75/0x770 [ 2481.163942] alloc_pages_current+0x155/0x260 [ 2481.163953] ion_page_pool_alloc+0x118/0x1b0 [ 2481.163962] ion_system_heap_allocate+0x133/0x8c0 [ 2481.163973] ? _raw_spin_unlock+0x29/0x40 [ 2481.163983] ? _ion_heap_freelist_drain+0x6e/0x410 [ 2481.163992] ? ion_system_contig_heap_create+0x130/0x130 [ 2481.164003] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2481.164014] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2481.164024] ion_alloc+0x27a/0x810 [ 2481.164038] ? ion_dma_buf_release+0x40/0x40 [ 2481.164051] ? __might_fault+0x177/0x1b0 [ 2481.164063] ion_ioctl+0xea/0x1f0 [ 2481.164072] ? ion_query_heaps+0x360/0x360 [ 2481.164090] ? ion_query_heaps+0x360/0x360 [ 2481.164101] do_vfs_ioctl+0x75a/0xff0 [ 2481.164112] ? ioctl_preallocate+0x1a0/0x1a0 [ 2481.164121] ? lock_downgrade+0x740/0x740 [ 2481.164135] ? __fget+0x225/0x360 [ 2481.164145] ? do_vfs_ioctl+0xff0/0xff0 [ 2481.164156] ? security_file_ioctl+0x83/0xb0 [ 2481.164167] SyS_ioctl+0x7f/0xb0 [ 2481.164175] ? do_vfs_ioctl+0xff0/0xff0 [ 2481.164187] do_syscall_64+0x1d5/0x640 [ 2481.164202] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2481.164209] RIP: 0033:0x466459 [ 2481.164214] RSP: 002b:00007f46becae188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2481.164224] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 2481.164230] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2481.164235] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2481.164240] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2481.164245] R13: 00007ffe96c50ebf R14: 00007f46becae300 R15: 0000000000022000 [ 2481.175392] systemd[1]: Starting Journal Service... [ 2481.181680] Node 1 active_anon:1916kB inactive_anon:68716kB active_file:2040kB inactive_file:3888kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:23468kB dirty:96kB writeback:0kB shmem:69192kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2481.604295] systemd-journald[16113]: File /run/log/journal/04d8c135ee6b410280ba31a58c89679d/system.journal corrupted or uncleanly shut down, renaming and replacing. [ 2481.614050] Bluetooth: hci0 command 0x0419 tx timeout [ 2481.633897] Node 0 DMA free:11020kB min:204kB low:252kB high:300kB active_anon:12kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:64kB pagetables:4kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2481.642283] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 2481.660291] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2481.660317] Node 0 DMA32 free:644988kB min:36200kB low:45248kB high:54296kB active_anon:57804kB inactive_anon:117816kB active_file:1988kB inactive_file:6204kB unevictable:0kB writepending:88kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:7360kB pagetables:2744kB bounce:0kB free_pcp:460kB local_pcp:200kB free_cma:0kB [ 2481.660336] lowmem_reserve[]: 0 0 0 0 0 [ 2481.660352] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2481.660370] lowmem_reserve[]: 0 0 0 0 0 [ 2481.660390] Node 1 Normal free:219552kB min:53696kB low:67120kB high:80544kB active_anon:1916kB inactive_anon:68716kB active_file:2740kB inactive_file:3188kB unevictable:0kB writepending:96kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:384kB pagetables:252kB bounce:0kB free_pcp:12kB local_pcp:0kB free_cma:0kB [ 2481.660414] lowmem_reserve[]: 0 0 0 0 0 [ 2481.660434] Node 0 DMA: 15*4kB (UME) 24*8kB (UME) 21*16kB (UME) 28*32kB (UME) 17*64kB (UME) 4*128kB (UM) 3*256kB (UME) 2*512kB (ME) 2*1024kB (ME) 2*2048kB (UM) 0*4096kB = 11020kB [ 2481.660504] Node 0 DMA32: [ 2481.714736] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 2481.732579] 21*4kB [ 2481.796077] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 2481.808480] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 2481.815148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2481.822590] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2481.830061] (UE) 18*8kB (UME) 17633*16kB (UME) 10213*32kB (UME) 13*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 610004kB [ 2481.845684] device veth0_vlan entered promiscuous mode [ 2481.863758] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2481.870773] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2481.883616] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2481.897781] device veth1_vlan entered promiscuous mode [ 2481.930323] Node 1 Normal: 7975*4kB (U) 6081*8kB (U) 3507*16kB (UE) 2589*32kB (U) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 219508kB [ 2481.949864] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 2481.973414] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2481.980806] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 2481.982280] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2481.993484] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2482.023409] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2482.027390] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2482.032275] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2482.050913] device veth0_macvtap entered promiscuous mode [ 2482.062443] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 2482.068829] 53518 total pagecache pages [ 2482.072813] 0 pages in swap cache [ 2482.083413] Swap cache stats: add 0, delete 0, find 0/0 [ 2482.088318] device veth1_macvtap entered promiscuous mode [ 2482.088788] Free swap = 0kB [ 2482.108948] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 2482.113413] Total swap = 0kB [ 2482.118262] 2097051 pages RAM [ 2482.121356] 0 pages HighMem/MovableOnly [ 2482.127611] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 2482.134874] 363848 pages reserved [ 2482.138328] 0 pages cma reserved [ 2482.157955] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 2482.180709] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2482.203387] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2482.212547] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2482.246319] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2482.266703] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 09:16:36 executing program 3: r0 = perf_event_open$cgroup(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = epoll_create(0x7) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000001c0)={0x20000005}) epoll_wait(r1, &(0x7f0000000100), 0x0, 0x0) 09:16:36 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vmci\x00', 0x2, 0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000580)='/dev/btrfs-control\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r1) ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(r1, 0x7af, &(0x7f0000000040)={@my=0x1, 0x3}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000180)={0x80000001, 0x1d, 0x1}) [ 2482.293926] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2482.313959] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2482.335716] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2482.363959] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2482.383442] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2482.398436] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 2482.416696] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2482.434422] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2482.441690] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2482.464316] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2482.483954] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2482.493436] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2482.503152] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2482.553346] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2482.563076] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2482.596877] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2482.613584] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2482.622722] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2482.659187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2482.683338] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2482.703323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2482.742839] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 2482.749852] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2482.777266] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2482.797961] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2483.267460] systemd[1]: Started Journal Service. [ 2484.034105] syz-executor.0: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2484.064274] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 2484.083011] CPU: 0 PID: 16146 Comm: syz-executor.0 Not tainted 4.14.229-syzkaller #0 [ 2484.090916] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2484.100267] Call Trace: [ 2484.102860] dump_stack+0x1b2/0x281 [ 2484.106488] warn_alloc.cold+0x96/0x1cc [ 2484.110462] ? zone_watermark_ok_safe+0x220/0x220 [ 2484.115320] __alloc_pages_nodemask+0x2127/0x2720 [ 2484.120159] ? io_schedule_timeout+0x140/0x140 [ 2484.124742] ? lock_acquire+0x170/0x3f0 [ 2484.128716] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2484.133569] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2484.139128] ? __mutex_unlock_slowpath+0x75/0x770 [ 2484.143973] ? retint_kernel+0x2d/0x2d [ 2484.147863] alloc_pages_current+0x155/0x260 [ 2484.152270] ion_page_pool_alloc+0x118/0x1b0 [ 2484.156682] ion_system_heap_allocate+0x133/0x8c0 [ 2484.161522] ? ion_alloc+0x187/0x810 [ 2484.165234] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2484.170687] ? ion_system_contig_heap_create+0x130/0x130 [ 2484.176135] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2484.181148] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2484.186140] ion_alloc+0x204/0x810 [ 2484.189687] ? ion_dma_buf_release+0x40/0x40 [ 2484.194099] ? __might_fault+0x177/0x1b0 [ 2484.198159] ion_ioctl+0xea/0x1f0 [ 2484.201605] ? ion_query_heaps+0x360/0x360 [ 2484.205836] ? ion_query_heaps+0x360/0x360 [ 2484.210065] do_vfs_ioctl+0x75a/0xff0 [ 2484.213864] ? ioctl_preallocate+0x1a0/0x1a0 [ 2484.218263] ? lock_downgrade+0x740/0x740 [ 2484.222526] ? __fget+0x225/0x360 [ 2484.225978] ? do_vfs_ioctl+0xff0/0xff0 [ 2484.229951] ? security_file_ioctl+0x83/0xb0 [ 2484.234358] SyS_ioctl+0x7f/0xb0 [ 2484.237720] ? do_vfs_ioctl+0xff0/0xff0 [ 2484.241802] do_syscall_64+0x1d5/0x640 [ 2484.245692] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2484.250878] RIP: 0033:0x466459 [ 2484.254059] RSP: 002b:00007f182e6ab188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2484.261873] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 2484.269135] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2484.276396] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2484.283659] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2484.290921] R13: 00007ffc5be62dbf R14: 00007f182e6ab300 R15: 0000000000022000 [ 2484.319014] warn_alloc_show_mem: 1 callbacks suppressed [ 2484.319017] Mem-Info: [ 2484.327245] active_anon:15011 inactive_anon:48666 isolated_anon:12 [ 2484.327245] active_file:1083 inactive_file:2138 isolated_file:12 [ 2484.327245] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2484.327245] slab_reclaimable:12380 slab_unreclaimable:127236 [ 2484.327245] mapped:55057 shmem:49942 pagetables:746 bounce:0 [ 2484.327245] free:77200 free_pcp:389 free_cma:0 09:16:38 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x301040, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) getpeername(r1, &(0x7f00000000c0)=@x25={0x9, @remote}, &(0x7f0000000140)=0x80) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000180)={0x80000001, 0x13}) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$IOCTL_VMCI_DATAGRAM_RECEIVE(r2, 0x7ac, &(0x7f0000000840)={&(0x7f0000000400)={{@my=0x1, 0x8}, {@any, 0x35dde56e}, 0x400, "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"}, 0x418, 0x5}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x3, &(0x7f00000001c0)=@raw=[@exit, @map={0x18, 0xb}], &(0x7f0000000200)='GPL\x00', 0x2, 0x53, &(0x7f0000000240)=""/83, 0x40f00, 0x8, [], 0x0, 0x0, r2, 0x8, &(0x7f0000000300)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000340)={0x0, 0x6, 0xd97, 0x5}, 0x10}, 0x78) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x90800, 0x0) [ 2484.362897] Node 0 active_anon:58088kB inactive_anon:125948kB active_file:4320kB inactive_file:8536kB unevictable:0kB isolated(anon):48kB isolated(file):48kB mapped:201340kB dirty:0kB writeback:0kB shmem:130576kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2484.392775] Node 1 active_anon:1956kB inactive_anon:68716kB active_file:112kB inactive_file:116kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:18988kB dirty:0kB writeback:0kB shmem:69192kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2484.423497] Node 0 DMA free:11328kB min:204kB low:252kB high:300kB active_anon:12kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:64kB pagetables:4kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2484.454413] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2484.459581] Node 0 DMA32 free:424908kB min:36200kB low:45248kB high:54296kB active_anon:58076kB inactive_anon:125948kB active_file:4228kB inactive_file:8572kB unevictable:0kB writepending:0kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:7328kB pagetables:2640kB bounce:0kB free_pcp:1468kB local_pcp:812kB free_cma:0kB [ 2484.490431] lowmem_reserve[]: 0 0 0 0 0 [ 2484.495529] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2484.522260] lowmem_reserve[]: 0 0 0 0 0 [ 2484.527191] Node 1 Normal free:462252kB min:53696kB low:67120kB high:80544kB active_anon:1956kB inactive_anon:68716kB active_file:232kB inactive_file:268kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:416kB pagetables:340kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2484.556965] lowmem_reserve[]: 0 0 0 0 0 [ 2484.561386] Node 0 DMA: 12*4kB (UME) 18*8kB (ME) 12*16kB (ME) 14*32kB (ME) 18*64kB (UME) 11*128kB (UM) 4*256kB (UME) 3*512kB (UME) 2*1024kB (ME) 2*2048kB (UM) 0*4096kB = 12096kB [ 2484.578804] Node 0 DMA32: 11*4kB (U) 7208*8kB (U) 13006*16kB (UME) 91*32kB (UE) 1386*64kB (UM) 693*128kB (U) 150*256kB (UM) 1*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 485036kB [ 2484.603765] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2484.614662] Node 1 Normal: 110*4kB (UM) 79*8kB (UM) 47*16kB (UME) 32*32kB (UM) 5380*64kB (UM) 1150*128kB (UM) 462*256kB (UM) 151*512kB (UM) 9*1024kB (U) 1*2048kB (U) 0*4096kB = 701216kB [ 2484.632780] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2484.642569] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2484.651975] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2484.661569] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2484.670884] 53375 total pagecache pages [ 2484.675587] 0 pages in swap cache [ 2484.679096] Swap cache stats: add 0, delete 0, find 0/0 [ 2484.685725] Free swap = 0kB [ 2484.688797] Total swap = 0kB [ 2484.691854] 2097051 pages RAM [ 2484.696335] 0 pages HighMem/MovableOnly [ 2484.700359] 363848 pages reserved [ 2484.704797] 0 pages cma reserved 09:16:40 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x800, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000180)={0x80000001, 0x13}) 09:16:40 executing program 5: epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x2, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x10000, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00032abd7000fcdbdf25010000000c001000010000000000000014001f00ff01000000000000000007000000000108000b0002000006"], 0x3c}, 0x1, 0x0, 0x0, 0x4004}, 0x20000001) bind$l2tp6(0xffffffffffffffff, &(0x7f0000000300)={0xa, 0x0, 0xc6d, @loopback, 0x6, 0x2}, 0x20) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f0000000080)={0x50000010}) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r1, &(0x7f0000000040)={0x40000008}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000180)={0x80000001, 0x13}) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r2, 0x89fa, &(0x7f0000003dc0)={'ip6gre0\x00', 0x0}) 09:16:40 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x80401, 0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000580)='/dev/btrfs-control\x00', 0x0, 0x0) eventfd2(0x6d, 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r2, 0x89fa, &(0x7f0000003dc0)={'ip6gre0\x00', 0x0}) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r2) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x80, 0x26}) 09:16:40 executing program 1: epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000580)='/dev/btrfs-control\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000580)='/dev/btrfs-control\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r1) epoll_wait(r1, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}], 0x7, 0xe6b) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x2, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000180)={0x80000001, 0x13}) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x280000, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f00000000c0)={0x8, 0x4}) 09:16:40 executing program 2: setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000000000)={0x0, 0x1, 0x6, @random="177885c48342"}, 0x10) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000180)={0x80000001, 0x13}) socket$packet(0x11, 0x3, 0x300) 09:16:40 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000180)={0x80000001, 0x13, 0x0, 0xffffffffffffffff}) r2 = getpgid(0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r3, 0x89fa, &(0x7f0000003dc0)={'ip6gre0\x00', 0x0}) kcmp$KCMP_EPOLL_TFD(r2, 0xffffffffffffffff, 0x7, r3, &(0x7f0000000000)={0xffffffffffffffff, r1, 0x80000001}) 09:16:40 executing program 3: r0 = perf_event_open$cgroup(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = epoll_create(0x6) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000001c0)={0x20000005}) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r2, 0x89fa, &(0x7f0000003dc0)={'ip6gre0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000580)='/dev/btrfs-control\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r4, 0x2, r4) r5 = socket$nl_rdma(0x10, 0x3, 0x14) epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r5, &(0x7f00000002c0)) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040)='l2tp\x00', 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r6, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_PEER_COOKIE={0xc}, @L2TP_ATTR_CONN_ID={0x8}]}, 0x28}}, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r2, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)={0x48, r6, 0x200, 0x70bd2a, 0x25dfdbff, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x20}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x80}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'batadv_slave_1\x00'}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @remote}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x4000) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0xd, r7, 0x1, 0x80, 0x6, @local}, 0x14) epoll_wait(r1, &(0x7f0000000100)=[{}], 0x1, 0x0) 09:16:40 executing program 3: r0 = perf_event_open$cgroup(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = gettid() r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000580)='/dev/btrfs-control\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, r2) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={r1, r2, 0x0, 0x3, &(0x7f0000000080)='/\'\x00'}, 0x30) r3 = epoll_create(0x7) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f00000001c0)={0x20000005}) syz_open_dev$midi(&(0x7f0000000140)='/dev/midi#\x00', 0x37, 0x20680) epoll_wait(r3, &(0x7f0000000100)=[{}], 0x1, 0x0) 09:16:40 executing program 3: r0 = perf_event_open$cgroup(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000080)=0x4) r1 = epoll_create(0x7) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000001c0)={0x20000005}) epoll_wait(r1, &(0x7f0000000100)=[{}], 0x1, 0x0) 09:16:40 executing program 3: r0 = perf_event_open$cgroup(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = epoll_create(0x7) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000001c0)={0x20000005}) epoll_wait(r1, &(0x7f0000000100)=[{}], 0x1, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x50, 0x0, 0x400, 0x70bd29, 0x25dfdbff, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'ipvlan1\x00'}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x3}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_RECV_SEQ={0x5}, @L2TP_ATTR_MTU={0x6, 0x1c, 0xcb}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x24004881) 09:16:40 executing program 3: r0 = perf_event_open$cgroup(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000, 0x4518a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = epoll_create(0x7) setsockopt(0xffffffffffffffff, 0xff, 0x9, &(0x7f0000000200)="0ef7a5d5afac74237b2dfd98c92d8645bb0250696cd5b5654be631e85a0276c4f1666f6d01ee425802d7ca387b39a706eda85977a98b8f0fc53d260f449834dbde578a9f5141fcd1a854f5e95329122a98fe2f6df4647f02c3c5fff7415bb803729adba1c93c55df63bf308c724c26ce59c9a534fcd2bdeb597f01c6ec0da3b229bb2baf", 0x84) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000001c0)={0x20000005}) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000580)='/dev/btrfs-control\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, r2) epoll_wait(r2, &(0x7f0000000080)=[{}, {}, {}, {}, {}], 0x5, 0x3) epoll_pwait(r2, &(0x7f0000000140)=[{}, {}, {}], 0x3, 0x60000000, &(0x7f0000000180), 0x8) r3 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$llc(r3, &(0x7f0000002980)={0x1a, 0x321}, 0x10) recvfrom$llc(r3, &(0x7f00000002c0)=""/255, 0xff, 0x40010120, &(0x7f00000000c0)={0x1a, 0xfffb, 0x9, 0x2, 0x0, 0xa0}, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000004c0)={'team0\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000500)={r4, 0x1, 0x6, @broadcast}, 0x10) epoll_wait(r1, &(0x7f0000000100)=[{}], 0x1, 0x0) [ 2486.119095] syz-executor.2: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2486.119248] syz-executor.1: [ 2486.131245] syz-executor.4: [ 2486.131338] syz-executor.5: [ 2486.136082] syz-executor.0: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2486.145863] page allocation failure: order:4 [ 2486.153677] page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2486.170345] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 2486.176275] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 2486.176665] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 2486.184080] CPU: 0 PID: 16160 Comm: syz-executor.2 Not tainted 4.14.229-syzkaller #0 [ 2486.187039] page allocation failure: order:4 [ 2486.191193] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2486.191205] Call Trace: [ 2486.191241] dump_stack+0x1b2/0x281 [ 2486.207340] (null) [ 2486.212868] warn_alloc.cold+0x96/0x1cc [ 2486.212882] ? zone_watermark_ok_safe+0x220/0x220 [ 2486.212906] __alloc_pages_nodemask+0x2127/0x2720 [ 2486.230042] syz-executor.5 cpuset= [ 2486.234831] ? _raw_spin_unlock_irq+0x5a/0x80 [ 2486.234843] ? finish_task_switch+0x178/0x610 [ 2486.234852] ? finish_task_switch+0x14d/0x610 [ 2486.234866] ? lock_acquire+0x170/0x3f0 [ 2486.234882] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2486.234900] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2486.234914] ? __mutex_unlock_slowpath+0x75/0x770 [ 2486.242643] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 2486.242923] alloc_pages_current+0x155/0x260 [ 2486.255453] syz-executor.4 cpuset= [ 2486.255833] ion_page_pool_alloc+0x118/0x1b0 [ 2486.265152] / [ 2486.266084] ion_system_heap_allocate+0x133/0x8c0 [ 2486.274811] (null) [ 2486.277983] ? ion_alloc+0x187/0x810 [ 2486.277996] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2486.278011] ? ion_system_contig_heap_create+0x130/0x130 [ 2486.278021] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2486.278034] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2486.290078] / [ 2486.290341] ion_alloc+0x204/0x810 [ 2486.296592] mems_allowed=0-1 [ 2486.296872] ? ion_dma_buf_release+0x40/0x40 [ 2486.299111] syz-executor.1 cpuset= [ 2486.302700] ? __might_fault+0x177/0x1b0 [ 2486.302714] ion_ioctl+0xea/0x1f0 [ 2486.302724] ? ion_query_heaps+0x360/0x360 [ 2486.302737] ? ion_query_heaps+0x360/0x360 [ 2486.302747] do_vfs_ioctl+0x75a/0xff0 [ 2486.315401] mems_allowed=0-1 [ 2486.318734] ? ioctl_preallocate+0x1a0/0x1a0 [ 2486.318745] ? lock_downgrade+0x740/0x740 [ 2486.318760] ? __fget+0x225/0x360 [ 2486.318768] ? do_vfs_ioctl+0xff0/0xff0 [ 2486.318781] ? security_file_ioctl+0x83/0xb0 [ 2486.350618] / [ 2486.351521] SyS_ioctl+0x7f/0xb0 [ 2486.378948] mems_allowed=0-1 [ 2486.382913] ? do_vfs_ioctl+0xff0/0xff0 [ 2486.382929] do_syscall_64+0x1d5/0x640 [ 2486.382945] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2486.382954] RIP: 0033:0x466459 [ 2486.407277] RSP: 002b:00007f3bc6e95188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2486.414979] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 2486.422247] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2486.429500] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2486.436760] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2486.444146] R13: 00007ffe618eb5ff R14: 00007f3bc6e95300 R15: 0000000000022000 [ 2486.451421] CPU: 1 PID: 16163 Comm: syz-executor.5 Not tainted 4.14.229-syzkaller #0 [ 2486.459302] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2486.468636] Call Trace: [ 2486.471215] dump_stack+0x1b2/0x281 [ 2486.474830] warn_alloc.cold+0x96/0x1cc [ 2486.478790] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2486.483787] ? zone_watermark_ok_safe+0x220/0x220 [ 2486.488724] __alloc_pages_nodemask+0x2127/0x2720 [ 2486.493561] ? lock_acquire+0x170/0x3f0 [ 2486.497522] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2486.502819] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2486.508259] ? __mutex_unlock_slowpath+0x75/0x770 [ 2486.513090] alloc_pages_current+0x155/0x260 [ 2486.517516] ion_page_pool_alloc+0x118/0x1b0 [ 2486.521907] ion_system_heap_allocate+0x133/0x8c0 [ 2486.526733] ? ion_alloc+0x187/0x810 [ 2486.530428] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2486.535884] ? ion_system_contig_heap_create+0x130/0x130 [ 2486.541316] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2486.546319] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2486.551151] ion_alloc+0x204/0x810 [ 2486.554674] ? ion_dma_buf_release+0x40/0x40 [ 2486.559069] ? __might_fault+0x177/0x1b0 [ 2486.563123] ion_ioctl+0xea/0x1f0 [ 2486.566563] ? ion_query_heaps+0x360/0x360 [ 2486.570784] ? SyS_epoll_ctl+0x1e0/0x2780 [ 2486.574922] ? ion_query_heaps+0x360/0x360 [ 2486.579147] do_vfs_ioctl+0x75a/0xff0 [ 2486.582933] ? ioctl_preallocate+0x1a0/0x1a0 [ 2486.587326] ? lock_downgrade+0x740/0x740 [ 2486.591465] ? __fget+0x225/0x360 [ 2486.594901] ? do_vfs_ioctl+0xff0/0xff0 [ 2486.598860] ? security_file_ioctl+0x83/0xb0 [ 2486.603280] SyS_ioctl+0x7f/0xb0 [ 2486.606634] ? do_vfs_ioctl+0xff0/0xff0 [ 2486.610596] do_syscall_64+0x1d5/0x640 [ 2486.614591] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2486.619772] RIP: 0033:0x466459 [ 2486.622954] RSP: 002b:00007f4d0bcd5188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2486.630667] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 2486.637956] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2486.645258] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2486.652516] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2486.659781] R13: 00007ffe1117a98f R14: 00007f4d0bcd5300 R15: 0000000000022000 [ 2486.667457] CPU: 0 PID: 16153 Comm: syz-executor.0 Not tainted 4.14.229-syzkaller #0 [ 2486.675351] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2486.684699] Call Trace: [ 2486.687303] dump_stack+0x1b2/0x281 [ 2486.690948] warn_alloc.cold+0x96/0x1cc [ 2486.694951] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2486.699973] ? zone_watermark_ok_safe+0x220/0x220 [ 2486.704876] __alloc_pages_nodemask+0x2127/0x2720 [ 2486.709731] ? lock_acquire+0x170/0x3f0 [ 2486.713710] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2486.718562] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2486.724014] ? __mutex_unlock_slowpath+0x75/0x770 [ 2486.728860] alloc_pages_current+0x155/0x260 [ 2486.733280] ion_page_pool_alloc+0x118/0x1b0 [ 2486.737690] ion_system_heap_allocate+0x133/0x8c0 [ 2486.742530] ? ion_alloc+0x187/0x810 [ 2486.746244] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2486.751698] ? ion_system_contig_heap_create+0x130/0x130 [ 2486.757151] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2486.762157] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2486.767002] ion_alloc+0x204/0x810 [ 2486.770553] ? ion_dma_buf_release+0x40/0x40 [ 2486.774960] ? __might_fault+0x177/0x1b0 [ 2486.779014] ion_ioctl+0xea/0x1f0 [ 2486.782469] ? ion_query_heaps+0x360/0x360 [ 2486.786703] ? ion_query_heaps+0x360/0x360 [ 2486.790941] do_vfs_ioctl+0x75a/0xff0 [ 2486.794752] ? ioctl_preallocate+0x1a0/0x1a0 [ 2486.799156] ? lock_downgrade+0x740/0x740 [ 2486.803406] ? __fget+0x225/0x360 [ 2486.806851] ? do_vfs_ioctl+0xff0/0xff0 [ 2486.810811] ? security_file_ioctl+0x83/0xb0 [ 2486.815215] SyS_ioctl+0x7f/0xb0 [ 2486.818577] ? do_vfs_ioctl+0xff0/0xff0 [ 2486.822568] do_syscall_64+0x1d5/0x640 [ 2486.826466] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2486.831637] RIP: 0033:0x466459 [ 2486.834819] RSP: 002b:00007f182e6ab188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2486.849738] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 2486.857034] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2486.864308] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2486.871572] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2486.878851] R13: 00007ffc5be62dbf R14: 00007f182e6ab300 R15: 0000000000022000 [ 2486.886124] CPU: 1 PID: 16161 Comm: syz-executor.4 Not tainted 4.14.229-syzkaller #0 [ 2486.894011] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2486.903386] Call Trace: [ 2486.905995] dump_stack+0x1b2/0x281 [ 2486.909645] warn_alloc.cold+0x96/0x1cc [ 2486.913634] ? zone_watermark_ok_safe+0x220/0x220 [ 2486.918498] __alloc_pages_nodemask+0x2127/0x2720 [ 2486.923351] ? __schedule+0x893/0x1de0 [ 2486.924796] Mem-Info: [ 2486.927245] ? lock_acquire+0x170/0x3f0 [ 2486.927263] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2486.927282] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2486.929776] active_anon:15149 inactive_anon:48666 isolated_anon:12 [ 2486.929776] active_file:1359 inactive_file:2161 isolated_file:0 [ 2486.929776] unevictable:0 dirty:58 writeback:0 unstable:0 [ 2486.929776] slab_reclaimable:12380 slab_unreclaimable:126363 [ 2486.929776] mapped:55447 shmem:49942 pagetables:824 bounce:0 [ 2486.929776] free:67824 free_pcp:72 free_cma:0 [ 2486.933638] ? __mutex_unlock_slowpath+0x75/0x770 [ 2486.933654] alloc_pages_current+0x155/0x260 [ 2486.933668] ion_page_pool_alloc+0x118/0x1b0 [ 2486.933677] ion_system_heap_allocate+0x133/0x8c0 [ 2486.933686] ? ion_alloc+0x187/0x810 [ 2486.933698] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2486.938600] Node 0 active_anon:58504kB inactive_anon:125948kB active_file:5364kB inactive_file:8636kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:202840kB dirty:220kB writeback:0kB shmem:130576kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2486.943975] ? ion_system_contig_heap_create+0x130/0x130 [ 2486.943986] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2486.943998] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2486.944009] ion_alloc+0x204/0x810 [ 2486.944026] ? ion_dma_buf_release+0x40/0x40 [ 2486.944047] ? __might_fault+0x177/0x1b0 [ 2486.977791] Node 1 active_anon:2092kB inactive_anon:68716kB active_file:72kB inactive_file:8kB unevictable:0kB isolated(anon):48kB isolated(file):0kB mapped:18948kB dirty:12kB writeback:0kB shmem:69192kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2486.982615] ion_ioctl+0xea/0x1f0 [ 2486.982626] ? ion_query_heaps+0x360/0x360 [ 2486.982638] ? lock_downgrade+0x740/0x740 [ 2486.982649] ? _raw_spin_unlock_irq+0x24/0x80 [ 2486.982658] ? ion_query_heaps+0x360/0x360 [ 2486.987129] Node 0 [ 2486.991431] do_vfs_ioctl+0x75a/0xff0 [ 2486.991444] ? ioctl_preallocate+0x1a0/0x1a0 [ 2486.991453] ? lock_downgrade+0x740/0x740 [ 2486.991469] ? __fget+0x225/0x360 [ 2486.996464] DMA free:11060kB min:204kB low:252kB high:300kB active_anon:12kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:64kB pagetables:4kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2487.000000] ? do_vfs_ioctl+0xff0/0xff0 [ 2487.000014] ? security_file_ioctl+0x83/0xb0 [ 2487.000025] SyS_ioctl+0x7f/0xb0 [ 2487.000034] ? do_vfs_ioctl+0xff0/0xff0 [ 2487.000046] do_syscall_64+0x1d5/0x640 [ 2487.005656] lowmem_reserve[]: [ 2487.033864] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2487.033874] RIP: 0033:0x466459 [ 2487.033879] RSP: 002b:00007f46becae188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2487.033889] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 2487.033895] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2487.033900] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2487.033904] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2487.033909] R13: 00007ffe96c50ebf R14: 00007f46becae300 R15: 0000000000022000 [ 2487.042460] syz-executor.4: [ 2487.044857] syz-executor.1: [ 2487.063972] CPU: 1 PID: 16159 Comm: syz-executor.1 Not tainted 4.14.229-syzkaller #0 [ 2487.108162] 0 [ 2487.111418] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2487.111423] Call Trace: [ 2487.111442] dump_stack+0x1b2/0x281 [ 2487.111456] warn_alloc.cold+0x96/0x1cc [ 2487.111468] ? zone_watermark_ok_safe+0x220/0x220 [ 2487.117149] 2717 [ 2487.117487] __alloc_pages_nodemask+0x2127/0x2720 [ 2487.121978] 2718 [ 2487.125996] ? lock_acquire+0x170/0x3f0 [ 2487.126012] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2487.126032] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2487.126045] ? __mutex_unlock_slowpath+0x75/0x770 [ 2487.126052] ? retint_kernel+0x2d/0x2d [ 2487.126065] alloc_pages_current+0x155/0x260 [ 2487.131796] 2718 [ 2487.155171] ion_page_pool_alloc+0x118/0x1b0 [ 2487.155183] ion_system_heap_allocate+0x133/0x8c0 [ 2487.155193] ? ion_alloc+0x187/0x810 09:16:41 executing program 3: r0 = perf_event_open$cgroup(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = epoll_create(0x7) ioctl$IOCTL_VMCI_NOTIFICATIONS_RECEIVE(0xffffffffffffffff, 0x7a6, &(0x7f0000000080)={0x4, 0x6ea, 0x3, 0x9, 0x1, 0x3}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000001c0)={0x20000005}) epoll_wait(r1, &(0x7f0000000100)=[{}], 0x1, 0x0) [ 2487.155204] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2487.155212] ? ion_system_contig_heap_create+0x130/0x130 [ 2487.155222] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2487.155233] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2487.155243] ion_alloc+0x204/0x810 [ 2487.186590] page allocation failure: order:4 [ 2487.193917] ? ion_dma_buf_release+0x40/0x40 [ 2487.193932] ? __might_fault+0x177/0x1b0 [ 2487.193944] ion_ioctl+0xea/0x1f0 [ 2487.193952] ? ion_query_heaps+0x360/0x360 [ 2487.193964] ? ion_query_heaps+0x360/0x360 [ 2487.209015] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 2487.215752] do_vfs_ioctl+0x75a/0xff0 [ 2487.215766] ? ioctl_preallocate+0x1a0/0x1a0 [ 2487.215776] ? lock_downgrade+0x740/0x740 [ 2487.215789] ? __fget+0x225/0x360 [ 2487.215797] ? do_vfs_ioctl+0xff0/0xff0 [ 2487.215809] ? security_file_ioctl+0x83/0xb0 [ 2487.227578] 2718 [ 2487.230441] SyS_ioctl+0x7f/0xb0 [ 2487.230450] ? do_vfs_ioctl+0xff0/0xff0 [ 2487.230462] do_syscall_64+0x1d5/0x640 [ 2487.230479] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2487.230487] RIP: 0033:0x466459 [ 2487.230495] RSP: 002b:00007f10b67af188 EFLAGS: 00000246 [ 2487.244362] ORIG_RAX: 0000000000000010 [ 2487.244368] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 2487.244373] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000005 [ 2487.244378] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2487.244384] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2487.244390] R13: 00007ffd58825dcf R14: 00007f10b67af300 R15: 0000000000022000 [ 2487.347413] (null) [ 2487.357279] page allocation failure: order:4 [ 2487.400870] syz-executor.1 cpuset= [ 2487.415410] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 2487.465139] / [ 2487.476358] (null) [ 2487.494410] Node 0 DMA32 free:45112kB min:36200kB low:45248kB high:54296kB active_anon:58492kB inactive_anon:125948kB active_file:5384kB inactive_file:8652kB unevictable:0kB writepending:268kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:7552kB pagetables:3040kB bounce:0kB free_pcp:452kB local_pcp:236kB free_cma:0kB [ 2487.524097] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 2487.529342] CPU: 0 PID: 16167 Comm: syz-executor.4 Not tainted 4.14.229-syzkaller #0 [ 2487.531566] mems_allowed=0-1 [ 2487.537213] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2487.537218] Call Trace: [ 2487.537237] dump_stack+0x1b2/0x281 [ 2487.537251] warn_alloc.cold+0x96/0x1cc [ 2487.537261] ? zone_watermark_ok_safe+0x220/0x220 [ 2487.537286] __alloc_pages_nodemask+0x2127/0x2720 [ 2487.537302] ? lock_acquire+0x170/0x3f0 [ 2487.537316] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2487.578359] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2487.583822] ? __mutex_unlock_slowpath+0x75/0x770 [ 2487.588671] alloc_pages_current+0x155/0x260 [ 2487.593087] ion_page_pool_alloc+0x118/0x1b0 [ 2487.597590] ion_system_heap_allocate+0x133/0x8c0 [ 2487.602447] ? ion_alloc+0x187/0x810 [ 2487.606155] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2487.611608] ? ion_system_contig_heap_create+0x130/0x130 [ 2487.617058] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2487.622080] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2487.626922] ion_alloc+0x204/0x810 [ 2487.630472] ? ion_dma_buf_release+0x40/0x40 [ 2487.634895] ? __might_fault+0x177/0x1b0 [ 2487.638948] ion_ioctl+0xea/0x1f0 [ 2487.642395] ? ion_query_heaps+0x360/0x360 [ 2487.646630] ? ion_query_heaps+0x360/0x360 [ 2487.650896] do_vfs_ioctl+0x75a/0xff0 [ 2487.654703] ? ioctl_preallocate+0x1a0/0x1a0 [ 2487.659105] ? lock_downgrade+0x740/0x740 [ 2487.663256] ? __fget+0x225/0x360 [ 2487.666713] ? do_vfs_ioctl+0xff0/0xff0 [ 2487.670686] ? security_file_ioctl+0x83/0xb0 [ 2487.675086] SyS_ioctl+0x7f/0xb0 [ 2487.678446] ? do_vfs_ioctl+0xff0/0xff0 [ 2487.682420] do_syscall_64+0x1d5/0x640 [ 2487.686319] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2487.691509] RIP: 0033:0x466459 [ 2487.694692] RSP: 002b:00007f46bec8d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2487.702399] RAX: ffffffffffffffda RBX: 000000000056c008 RCX: 0000000000466459 [ 2487.709669] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2487.716936] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2487.724200] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c008 [ 2487.731460] R13: 00007ffe96c50ebf R14: 00007f46bec8d300 R15: 0000000000022000 [ 2487.748658] CPU: 0 PID: 16169 Comm: syz-executor.1 Not tainted 4.14.229-syzkaller #0 [ 2487.756564] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2487.765929] Call Trace: [ 2487.768532] dump_stack+0x1b2/0x281 [ 2487.772165] warn_alloc.cold+0x96/0x1cc [ 2487.776147] ? zone_watermark_ok_safe+0x220/0x220 [ 2487.781097] __alloc_pages_nodemask+0x2127/0x2720 [ 2487.785952] ? lock_acquire+0x170/0x3f0 [ 2487.789943] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2487.794810] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2487.800295] ? __mutex_unlock_slowpath+0x75/0x770 [ 2487.805142] alloc_pages_current+0x155/0x260 [ 2487.809578] ion_page_pool_alloc+0x118/0x1b0 [ 2487.813991] ion_system_heap_allocate+0x133/0x8c0 [ 2487.818845] ? ion_alloc+0x187/0x810 [ 2487.822564] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2487.828018] ? ion_system_contig_heap_create+0x130/0x130 [ 2487.833475] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2487.838515] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2487.843359] ion_alloc+0x204/0x810 [ 2487.846901] ? ion_dma_buf_release+0x40/0x40 [ 2487.851316] ? __might_fault+0x177/0x1b0 [ 2487.855387] ion_ioctl+0xea/0x1f0 [ 2487.858844] ? ion_query_heaps+0x360/0x360 [ 2487.863079] ? SyS_epoll_ctl+0x1e0/0x2780 [ 2487.867226] ? ion_query_heaps+0x360/0x360 [ 2487.871461] do_vfs_ioctl+0x75a/0xff0 [ 2487.875271] ? ioctl_preallocate+0x1a0/0x1a0 [ 2487.879678] ? lock_downgrade+0x740/0x740 [ 2487.883830] ? __fget+0x225/0x360 [ 2487.887284] ? do_vfs_ioctl+0xff0/0xff0 [ 2487.891265] ? security_file_ioctl+0x83/0xb0 [ 2487.895681] SyS_ioctl+0x7f/0xb0 [ 2487.899061] ? do_vfs_ioctl+0xff0/0xff0 [ 2487.903043] do_syscall_64+0x1d5/0x640 [ 2487.906935] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2487.912123] RIP: 0033:0x466459 [ 2487.915349] RSP: 002b:00007f10b678e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2487.923087] RAX: ffffffffffffffda RBX: 000000000056c008 RCX: 0000000000466459 [ 2487.930360] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000005 [ 2487.937629] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2487.944904] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c008 [ 2487.952173] R13: 00007ffd58825dcf R14: 00007f10b678e300 R15: 0000000000022000 [ 2487.956526] warn_alloc_show_mem: 1 callbacks suppressed [ 2487.956529] Mem-Info: [ 2487.976413] lowmem_reserve[]: 0 0 0 0 0 [ 2487.984942] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2488.004443] active_anon:15147 inactive_anon:48666 isolated_anon:0 [ 2488.004443] active_file:1364 inactive_file:2171 isolated_file:0 [ 2488.004443] unevictable:0 dirty:79 writeback:0 unstable:0 [ 2488.004443] slab_reclaimable:12371 slab_unreclaimable:126186 [ 2488.004443] mapped:55472 shmem:49942 pagetables:813 bounce:0 [ 2488.004443] free:40467 free_pcp:345 free_cma:0 [ 2488.044540] lowmem_reserve[]: 0 0 0 0 0 [ 2488.044586] Node 1 Normal free:88516kB min:53696kB low:67120kB high:80544kB active_anon:2084kB inactive_anon:68716kB active_file:72kB inactive_file:20kB unevictable:0kB writepending:36kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:416kB pagetables:208kB bounce:0kB free_pcp:328kB local_pcp:196kB free_cma:0kB [ 2488.044617] lowmem_reserve[]: 0 0 0 0 0 [ 2488.044635] Node 0 DMA: 15*4kB (UME) 19*8kB (UME) 18*16kB (UME) 28*32kB (UME) 18*64kB (UME) 13*128kB (UM) 5*256kB (UME) 3*512kB (UME) 2*1024kB (ME) 1*2048kB (M) 0*4096kB = 11124kB [ 2488.122719] Node 0 DMA32: 79*4kB (UME) 1292*8kB (UM) 113*16kB (UME) 20*32kB (UME) 2*64kB (UM) 1*128kB (M) 91*256kB (UM) 1*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 37164kB [ 2488.151166] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2488.190639] Node 1 Normal: 31*4kB (UM) 7*8kB (UM) 9*16kB (UME) 961*32kB (UM) 2*64kB (UM) 3*128kB (U) 79*256kB (U) 4*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 53860kB [ 2488.212761] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2488.244988] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2488.261310] Node 0 active_anon:58504kB inactive_anon:125948kB active_file:3616kB inactive_file:3584kB unevictable:0kB isolated(anon):0kB isolated(file):4kB mapped:199240kB dirty:80kB writeback:0kB shmem:130576kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2488.289785] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2488.289792] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2488.289797] 51758 total pagecache pages [ 2488.289806] 0 pages in swap cache [ 2488.289815] Swap cache stats: add 0, delete 0, find 0/0 [ 2488.320896] Free swap = 0kB [ 2488.328417] Total swap = 0kB [ 2488.334207] 2097051 pages RAM [ 2488.347464] 0 pages HighMem/MovableOnly [ 2488.351558] 363848 pages reserved [ 2488.358075] 0 pages cma reserved [ 2488.455969] Node 1 active_anon:2084kB inactive_anon:68716kB active_file:72kB inactive_file:20kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:18948kB dirty:36kB writeback:0kB shmem:69192kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2488.495886] Node 0 DMA free:11068kB min:204kB low:252kB high:300kB active_anon:12kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:64kB pagetables:4kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2488.522839] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2488.528139] Node 0 DMA32 free:56640kB min:36200kB low:45248kB high:54296kB active_anon:58492kB inactive_anon:125948kB active_file:1600kB inactive_file:1044kB unevictable:0kB writepending:280kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:7488kB pagetables:3040kB bounce:0kB free_pcp:1184kB local_pcp:504kB free_cma:0kB [ 2488.565266] lowmem_reserve[]: 0 0 0 0 0 [ 2488.573460] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2488.633419] syz-executor.2: [ 2488.633425] lowmem_reserve[]: [ 2488.633435] page allocation failure: order:4 [ 2488.636502] 0 [ 2488.639659] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 2488.644092] 0 0 0 0 [ 2488.644109] Node 1 Normal free:53692kB min:53696kB low:67120kB high:80544kB active_anon:2084kB inactive_anon:68716kB active_file:72kB inactive_file:20kB unevictable:0kB writepending:36kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:416kB pagetables:208kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2488.644130] lowmem_reserve[]: [ 2488.661680] (null) [ 2488.715712] 0 0 0 0 0 [ 2488.718310] Node 0 DMA: 11*4kB (ME) 18*8kB (ME) 16*16kB (UME) 28*32kB (UME) 18*64kB (UME) 13*128kB (UM) 5*256kB (UME) 3*512kB (UME) 2*1024kB (ME) 1*2048kB (M) 0*4096kB = 11068kB [ 2488.741368] Node 0 DMA32: 41*4kB (UME) 132*8kB (UME) 5422*16kB (UME) 381*32kB (UME) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 100164kB [ 2488.798033] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2488.821011] Node 1 Normal: 32*4kB (UM) 6*8kB (UM) 7*16kB (UME) 961*32kB (UM) 3*64kB (UM) 3*128kB (U) 79*256kB (U) 4*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 53888kB [ 2488.844182] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 2488.856396] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2488.865003] CPU: 1 PID: 16190 Comm: syz-executor.2 Not tainted 4.14.229-syzkaller #0 [ 2488.865353] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2488.873119] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2488.873123] Call Trace: [ 2488.873140] dump_stack+0x1b2/0x281 [ 2488.873154] warn_alloc.cold+0x96/0x1cc [ 2488.873166] ? zone_watermark_ok_safe+0x220/0x220 [ 2488.873189] __alloc_pages_nodemask+0x2127/0x2720 [ 2488.881757] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2488.891074] ? io_schedule_timeout+0x140/0x140 [ 2488.891090] ? lock_acquire+0x170/0x3f0 [ 2488.891106] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2488.893705] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2488.897282] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2488.897296] ? __mutex_unlock_slowpath+0x75/0x770 [ 2488.901260] 50439 total pagecache pages [ 2488.906068] alloc_pages_current+0x155/0x260 [ 2488.906081] ion_page_pool_alloc+0x118/0x1b0 [ 2488.906092] ion_system_heap_allocate+0x133/0x8c0 [ 2488.910933] 0 pages in swap cache [ 2488.919743] ? ion_alloc+0x187/0x810 [ 2488.919754] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2488.919763] ? ion_system_contig_heap_create+0x130/0x130 [ 2488.919775] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2488.924418] Swap cache stats: add 0, delete 0, find 0/0 [ 2488.928309] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2488.928324] ion_alloc+0x204/0x810 [ 2488.933203] Free swap = 0kB [ 2488.941713] ? ion_dma_buf_release+0x40/0x40 [ 2488.941725] ? __might_fault+0x177/0x1b0 [ 2488.941736] ion_ioctl+0xea/0x1f0 [ 2488.947229] Total swap = 0kB [ 2488.951991] ? ion_query_heaps+0x360/0x360 [ 2488.952005] ? _raw_spin_unlock+0x29/0x40 [ 2488.952014] ? ion_query_heaps+0x360/0x360 [ 2488.956008] 2097051 pages RAM [ 2488.960354] do_vfs_ioctl+0x75a/0xff0 [ 2488.960368] ? ioctl_preallocate+0x1a0/0x1a0 [ 2488.964787] 0 pages HighMem/MovableOnly [ 2488.969575] ? lock_downgrade+0x740/0x740 [ 2488.969591] ? __fget+0x225/0x360 [ 2488.973057] 363848 pages reserved [ 2488.976714] ? do_vfs_ioctl+0xff0/0xff0 [ 2488.976724] ? security_file_ioctl+0x83/0xb0 [ 2488.976734] SyS_ioctl+0x7f/0xb0 [ 2488.982176] 0 pages cma reserved [ 2488.987589] ? do_vfs_ioctl+0xff0/0xff0 [ 2488.987601] do_syscall_64+0x1d5/0x640 [ 2488.987615] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2488.987624] RIP: 0033:0x466459 [ 2489.093922] RSP: 002b:00007f3bc6e53188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2489.101609] RAX: ffffffffffffffda RBX: 000000000056c0b0 RCX: 0000000000466459 [ 2489.108857] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2489.116107] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2489.123357] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c0b0 [ 2489.130605] R13: 00007ffe618eb5ff R14: 00007f3bc6e53300 R15: 0000000000022000 [ 2489.569665] oom_reaper: reaped process 16169 (syz-executor.1), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 2489.595432] warn_alloc_show_mem: 4 callbacks suppressed [ 2489.595436] Mem-Info: [ 2489.613560] syz-fuzzer invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 2489.622835] active_anon:15148 inactive_anon:48666 isolated_anon:0 [ 2489.622835] active_file:4 inactive_file:19 isolated_file:0 [ 2489.622835] unevictable:0 dirty:7 writeback:0 unstable:0 [ 2489.622835] slab_reclaimable:12371 slab_unreclaimable:125759 [ 2489.622835] mapped:52774 shmem:49942 pagetables:824 bounce:0 [ 2489.622835] free:19621 free_pcp:115 free_cma:0 [ 2489.663935] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 2489.672781] CPU: 1 PID: 7975 Comm: syz-fuzzer Not tainted 4.14.229-syzkaller #0 [ 2489.680282] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2489.689632] Call Trace: [ 2489.692251] dump_stack+0x1b2/0x281 [ 2489.695879] dump_header+0x178/0x82f [ 2489.699589] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2489.702529] Node 0 active_anon:58520kB inactive_anon:125948kB active_file:0kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:192188kB dirty:24kB writeback:0kB shmem:130576kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2489.704713] ? ___ratelimit+0x2cd/0x530 [ 2489.704724] oom_kill_process.cold+0x10/0xa40 [ 2489.704741] out_of_memory+0xe3e/0x1190 [ 2489.744803] ? oom_killer_disable+0x1c0/0x1c0 [ 2489.749290] ? mutex_trylock+0x152/0x1a0 [ 2489.751376] Node 1 active_anon:2072kB inactive_anon:68716kB active_file:16kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:18908kB dirty:4kB writeback:0kB shmem:69192kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2489.753342] __alloc_pages_nodemask+0x23e1/0x2720 [ 2489.753363] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2489.780456] Node 0 [ 2489.785281] alloc_pages_current+0x155/0x260 [ 2489.785295] filemap_fault+0x11a1/0x1ad0 [ 2489.785313] ext4_filemap_fault+0x84/0xb0 [ 2489.790162] DMA free:10956kB min:204kB low:252kB high:300kB active_anon:12kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:64kB pagetables:4kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2489.792372] __do_fault+0xfa/0x380 [ 2489.796790] lowmem_reserve[]: [ 2489.800799] __handle_mm_fault+0x2497/0x4620 [ 2489.804934] 0 [ 2489.830578] ? vm_insert_page+0x7c0/0x7c0 [ 2489.830587] ? __might_fault+0x177/0x1b0 [ 2489.830602] ? mark_held_locks+0xa6/0xf0 [ 2489.834127] 2717 [ 2489.837202] handle_mm_fault+0x455/0x9c0 [ 2489.841578] 2718 [ 2489.843363] __do_page_fault+0x549/0xad0 [ 2489.843375] ? spurious_fault+0x640/0x640 [ 2489.843384] ? do_page_fault+0x60/0x500 [ 2489.847504] 2718 [ 2489.851544] ? page_fault+0x2f/0x50 [ 2489.855595] 2718 [ 2489.857619] page_fault+0x45/0x50 [ 2489.863703] RIP: 000d:0xc [ 2489.863708] RSP: 74d900:000000c0008ed6e0 EFLAGS: ffffffffffffffff [ 2489.904733] syz-executor.2: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2489.932772] syz-executor.1: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2489.962721] Node 0 DMA32 free:61760kB min:36200kB low:45248kB high:54296kB active_anon:58516kB inactive_anon:125948kB active_file:352kB inactive_file:388kB unevictable:0kB writepending:24kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:7488kB pagetables:3040kB bounce:0kB free_pcp:764kB local_pcp:144kB free_cma:0kB [ 2489.982702] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 2490.012692] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 2490.017838] CPU: 0 PID: 16160 Comm: syz-executor.2 Not tainted 4.14.229-syzkaller #0 [ 2490.025717] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2490.035074] Call Trace: [ 2490.037686] dump_stack+0x1b2/0x281 [ 2490.041331] warn_alloc.cold+0x96/0x1cc [ 2490.045317] ? zone_watermark_ok_safe+0x220/0x220 [ 2490.050158] ? usleep_range+0x130/0x130 [ 2490.054128] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 2490.059227] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 2490.064247] ? run_timer_softirq+0x5a0/0x5a0 [ 2490.068669] __alloc_pages_nodemask+0x2127/0x2720 [ 2490.073519] ? lock_acquire+0x170/0x3f0 [ 2490.077915] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2490.082746] ? ion_page_pool_alloc+0x9e/0x1b0 [ 2490.087259] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2490.092716] alloc_pages_current+0x155/0x260 [ 2490.097124] ion_page_pool_alloc+0x118/0x1b0 [ 2490.101532] ion_system_heap_allocate+0x133/0x8c0 [ 2490.106371] ? ion_alloc+0x187/0x810 [ 2490.110080] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2490.115527] ? ion_system_contig_heap_create+0x130/0x130 [ 2490.120975] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2490.125982] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2490.130807] ion_alloc+0x204/0x810 [ 2490.134347] ? ion_dma_buf_release+0x40/0x40 [ 2490.138760] ? __might_fault+0x177/0x1b0 [ 2490.142944] ion_ioctl+0xea/0x1f0 [ 2490.146399] ? ion_query_heaps+0x360/0x360 [ 2490.150638] ? ion_query_heaps+0x360/0x360 [ 2490.154895] do_vfs_ioctl+0x75a/0xff0 [ 2490.158705] ? ioctl_preallocate+0x1a0/0x1a0 [ 2490.163111] ? lock_downgrade+0x740/0x740 [ 2490.167263] ? __fget+0x225/0x360 [ 2490.170713] ? do_vfs_ioctl+0xff0/0xff0 [ 2490.174684] ? security_file_ioctl+0x83/0xb0 [ 2490.179162] SyS_ioctl+0x7f/0xb0 [ 2490.182509] ? do_vfs_ioctl+0xff0/0xff0 [ 2490.186477] do_syscall_64+0x1d5/0x640 [ 2490.190366] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2490.195556] RIP: 0033:0x466459 [ 2490.198751] RSP: 002b:00007f3bc6e95188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2490.206460] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 2490.213725] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2490.220986] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2490.228252] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2490.235515] R13: 00007ffe618eb5ff R14: 00007f3bc6e95300 R15: 0000000000022000 [ 2490.243485] CPU: 1 PID: 16169 Comm: syz-executor.1 Not tainted 4.14.229-syzkaller #0 [ 2490.251376] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2490.260726] Call Trace: [ 2490.263319] dump_stack+0x1b2/0x281 [ 2490.266950] warn_alloc.cold+0x96/0x1cc [ 2490.269721] lowmem_reserve[]: 0 [ 2490.270918] ? zone_watermark_ok_safe+0x220/0x220 [ 2490.270929] ? usleep_range+0x130/0x130 [ 2490.274936] 0 [ 2490.279014] ? try_to_free_pages+0x23f/0x6e0 [ 2490.282983] 0 [ 2490.284840] ? _find_next_bit+0xdb/0x100 [ 2490.289215] 0 [ 2490.290999] ? run_timer_softirq+0x5a0/0x5a0 [ 2490.295048] 0 [ 2490.296828] __alloc_pages_nodemask+0x2127/0x2720 [ 2490.302990] ? lock_acquire+0x170/0x3f0 [ 2490.303006] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2490.308167] Node 0 [ 2490.312134] ? ion_page_pool_alloc+0x9e/0x1b0 [ 2490.317006] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2490.319183] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2490.323667] lowmem_reserve[]: [ 2490.348553] ? alloc_pages_current+0xe3/0x260 [ 2490.348564] alloc_pages_current+0x155/0x260 [ 2490.348578] ion_page_pool_alloc+0x118/0x1b0 [ 2490.354022] 0 [ 2490.357097] ion_system_heap_allocate+0x133/0x8c0 [ 2490.361560] 0 [ 2490.365950] ? ion_alloc+0x187/0x810 [ 2490.365960] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2490.365969] ? ion_system_contig_heap_create+0x130/0x130 [ 2490.365980] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2490.370361] 0 [ 2490.372148] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2490.372159] ion_alloc+0x204/0x810 [ 2490.377001] 0 [ 2490.378768] ? ion_dma_buf_release+0x40/0x40 [ 2490.382447] 0 [ 2490.387880] ? __might_fault+0x177/0x1b0 [ 2490.387892] ion_ioctl+0xea/0x1f0 [ 2490.387902] ? ion_query_heaps+0x360/0x360 [ 2490.398321] ? SyS_epoll_ctl+0x1e0/0x2780 [ 2490.400094] Node 1 [ 2490.404914] ? ion_query_heaps+0x360/0x360 [ 2490.404925] do_vfs_ioctl+0x75a/0xff0 [ 2490.404937] ? ioctl_preallocate+0x1a0/0x1a0 [ 2490.408460] Normal free:26788kB min:53696kB low:67120kB high:80544kB active_anon:2072kB inactive_anon:68716kB active_file:8kB inactive_file:0kB unevictable:0kB writepending:4kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:416kB pagetables:252kB bounce:0kB free_pcp:148kB local_pcp:120kB free_cma:0kB [ 2490.410232] ? lock_downgrade+0x740/0x740 [ 2490.414628] lowmem_reserve[]: [ 2490.416400] ? __fget+0x225/0x360 [ 2490.420530] 0 [ 2490.423962] ? do_vfs_ioctl+0xff0/0xff0 [ 2490.423973] ? security_file_ioctl+0x83/0xb0 [ 2490.423983] SyS_ioctl+0x7f/0xb0 [ 2490.428202] Mem-Info: [ 2490.432317] ? do_vfs_ioctl+0xff0/0xff0 [ 2490.434552] 0 [ 2490.438748] do_syscall_64+0x1d5/0x640 [ 2490.442517] 0 [ 2490.446911] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2490.446918] RIP: 0033:0x466459 [ 2490.446926] RSP: 002b:00007f10b678e188 EFLAGS: 00000246 [ 2490.474884] active_anon:15150 inactive_anon:48666 isolated_anon:0 [ 2490.474884] active_file:13 inactive_file:0 isolated_file:0 [ 2490.474884] unevictable:0 dirty:4 writeback:3 unstable:0 [ 2490.474884] slab_reclaimable:12369 slab_unreclaimable:125725 [ 2490.474884] mapped:52769 shmem:49942 pagetables:824 bounce:0 [ 2490.474884] free:13813 free_pcp:100 free_cma:0 [ 2490.478967] ORIG_RAX: 0000000000000010 [ 2490.478975] RAX: ffffffffffffffda RBX: 000000000056c008 RCX: 0000000000466459 [ 2490.482063] Node 0 active_anon:58528kB inactive_anon:125948kB active_file:44kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:192180kB dirty:20kB writeback:4kB shmem:130576kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2490.485483] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000005 [ 2490.485488] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2490.485494] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c008 [ 2490.485499] R13: 00007ffd58825dcf R14: 00007f10b678e300 R15: 0000000000022000 [ 2490.732667] 0 0 [ 2490.732685] Mem-Info: [ 2490.734791] Node 0 DMA: [ 2490.737227] active_anon:15150 inactive_anon:48666 isolated_anon:0 [ 2490.737227] active_file:13 inactive_file:0 isolated_file:0 [ 2490.737227] unevictable:0 dirty:4 writeback:3 unstable:0 [ 2490.737227] slab_reclaimable:12369 slab_unreclaimable:125725 [ 2490.737227] mapped:52769 shmem:49942 pagetables:824 bounce:0 [ 2490.737227] free:41015 free_pcp:65 free_cma:0 [ 2490.737244] Node 0 active_anon:58528kB inactive_anon:125948kB active_file:44kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:192180kB dirty:20kB writeback:4kB shmem:130576kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2490.739897] 11*4kB [ 2490.773037] Node 1 active_anon:2072kB inactive_anon:68716kB active_file:8kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:18896kB dirty:0kB writeback:8kB shmem:69192kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2490.773042] Node 0 DMA free:10956kB min:204kB low:252kB high:300kB active_anon:12kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:64kB pagetables:4kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2490.773061] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2490.773081] Node 0 DMA32 free:44912kB min:36200kB low:45248kB high:54296kB active_anon:58516kB inactive_anon:125948kB active_file:352kB inactive_file:388kB unevictable:0kB writepending:24kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:7488kB pagetables:3040kB bounce:0kB free_pcp:132kB local_pcp:0kB free_cma:0kB [ 2490.897107] (ME) 18*8kB (ME) 13*16kB (UME) 26*32kB (UME) 18*64kB (UME) 13*128kB (UM) 5*256kB (UME) 3*512kB (UME) 2*1024kB (ME) 1*2048kB (M) 0*4096kB = 10956kB [ 2490.916027] Node 0 DMA32: 332*4kB (UME) 136*8kB (UME) 51*16kB (UME) 28*32kB (UME) 211*64kB (U) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 17632kB [ 2490.931199] lowmem_reserve[]: 0 0 0 0 0 [ 2490.953892] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2490.982682] lowmem_reserve[]: 0 0 0 0 0 [ 2491.002666] Node 1 Normal free:186580kB min:53696kB low:67120kB high:80544kB active_anon:2064kB inactive_anon:68716kB active_file:4kB inactive_file:804kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:416kB pagetables:252kB bounce:0kB free_pcp:252kB local_pcp:68kB free_cma:0kB [ 2491.047130] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2491.082617] lowmem_reserve[]: 0 0 0 0 0 [ 2491.112790] Node 1 Normal: 1*4kB (U) 1*8kB (M) 2*16kB (UE) 1*32kB (M) 1024*64kB (UM) 1*128kB (M) 2*256kB (U) 3*512kB (UM) 193*1024kB (UM) 48*2048kB (U) 15*4096kB (U) = 425164kB [ 2491.122623] Node 0 DMA: 11*4kB (ME) 18*8kB (ME) 13*16kB (UME) 26*32kB (UME) 18*64kB (UME) 13*128kB (UM) 5*256kB (UME) 3*512kB (UME) 2*1024kB (ME) 1*2048kB (M) 0*4096kB = 10956kB [ 2491.157329] Node 1 active_anon:2064kB inactive_anon:68716kB active_file:104kB inactive_file:2472kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:20796kB dirty:0kB writeback:0kB shmem:69192kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2491.232597] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2491.241465] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2491.282617] Node 0 DMA32: 301*4kB (UME) 229*8kB (UME) 62*16kB (UME) 30*32kB (UME) 1732*64kB (U) 227*128kB (U) 17*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 149244kB [ 2491.291869] Node 0 [ 2491.301219] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2491.316551] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2491.325271] DMA free:10956kB min:204kB low:252kB high:300kB active_anon:12kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:64kB pagetables:4kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2491.332588] Node 0 [ 2491.396472] 50628 total pagecache pages [ 2491.403644] 0 pages in swap cache [ 2491.407164] Swap cache stats: add 0, delete 0, find 0/0 [ 2491.412618] Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2491.415971] Free swap = 0kB [ 2491.442994] Node 1 Normal: 1*4kB (U) 1*8kB (M) 2*16kB (UE) 1*32kB (M) 3112*64kB (UM) 409*128kB (UM) 148*256kB (U) 46*512kB (UM) 2*1024kB (UM) 1*2048kB (U) 15*4096kB (U) = 378572kB [ 2491.475273] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2491.480357] Node 0 DMA32 free:183952kB min:36200kB low:45248kB high:54296kB active_anon:58432kB inactive_anon:125948kB active_file:36kB inactive_file:836kB unevictable:0kB writepending:0kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:7424kB pagetables:3040kB bounce:0kB free_pcp:1288kB local_pcp:672kB free_cma:0kB [ 2491.482607] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2491.513790] Total swap = 0kB [ 2491.521533] 2097051 pages RAM [ 2491.562699] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2491.571305] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2491.592598] 0 pages HighMem/MovableOnly [ 2491.596606] 363848 pages reserved [ 2491.600061] 0 pages cma reserved [ 2491.612642] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2491.621253] 50898 total pagecache pages [ 2491.652611] 0 pages in swap cache [ 2491.656122] Swap cache stats: add 0, delete 0, find 0/0 [ 2491.661486] Free swap = 0kB [ 2491.672620] lowmem_reserve[]: 0 0 0 0 0 [ 2491.676648] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2491.703582] Total swap = 0kB [ 2491.706617] 2097051 pages RAM [ 2491.709711] 0 pages HighMem/MovableOnly [ 2491.740750] 363848 pages reserved [ 2491.759191] 0 pages cma reserved [ 2491.787986] lowmem_reserve[]: 0 0 0 0 0 [ 2491.792323] Node 1 Normal free:53692kB min:53696kB low:67120kB high:80544kB active_anon:2064kB inactive_anon:68716kB active_file:144kB inactive_file:1524kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:416kB pagetables:252kB bounce:0kB free_pcp:196kB local_pcp:76kB free_cma:0kB [ 2491.812177] warn_alloc: 7 callbacks suppressed [ 2491.812182] syz-executor.4: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2491.873246] syz-executor.1: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2491.912644] lowmem_reserve[]: 0 0 0 0 0 [ 2491.916671] Node 0 DMA: 25*4kB (UME) 18*8kB (ME) 13*16kB (UME) 26*32kB (UME) 18*64kB (UME) 13*128kB (UM) 5*256kB (UME) 3*512kB (UME) 2*1024kB (ME) 1*2048kB (M) 0*4096kB = 11012kB [ 2491.932820] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 2491.932843] CPU: 0 PID: 16161 Comm: syz-executor.4 Not tainted 4.14.229-syzkaller #0 [ 2491.932849] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2491.932852] Call Trace: [ 2491.932871] dump_stack+0x1b2/0x281 [ 2491.932884] warn_alloc.cold+0x96/0x1cc [ 2491.932895] ? zone_watermark_ok_safe+0x220/0x220 [ 2491.932918] __alloc_pages_nodemask+0x2127/0x2720 [ 2491.932936] ? lock_acquire+0x170/0x3f0 [ 2491.932949] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2491.932967] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2491.932981] ? __mutex_unlock_slowpath+0x75/0x770 [ 2491.932990] ? __list_del_entry_valid+0xb3/0xf0 [ 2491.933003] alloc_pages_current+0x155/0x260 [ 2491.933017] ion_page_pool_alloc+0x118/0x1b0 [ 2491.933027] ion_system_heap_allocate+0x133/0x8c0 [ 2491.933039] ? _raw_spin_unlock+0x29/0x40 [ 2491.933048] ? _ion_heap_freelist_drain+0x6e/0x410 [ 2491.933057] ? ion_system_contig_heap_create+0x130/0x130 [ 2491.933068] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2491.933080] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2491.933090] ion_alloc+0x27a/0x810 [ 2491.933102] ? ion_dma_buf_release+0x40/0x40 [ 2491.933114] ? __might_fault+0x177/0x1b0 [ 2491.933124] ion_ioctl+0xea/0x1f0 [ 2491.933132] ? ion_query_heaps+0x360/0x360 [ 2491.933143] ? lock_downgrade+0x740/0x740 [ 2491.933153] ? _raw_spin_unlock_irq+0x24/0x80 [ 2491.933161] ? ion_query_heaps+0x360/0x360 [ 2491.933171] do_vfs_ioctl+0x75a/0xff0 [ 2491.933183] ? ioctl_preallocate+0x1a0/0x1a0 [ 2491.933192] ? lock_downgrade+0x740/0x740 [ 2491.933205] ? __fget+0x225/0x360 [ 2491.933214] ? do_vfs_ioctl+0xff0/0xff0 [ 2491.938291] Node 0 [ 2491.946252] ? security_file_ioctl+0x83/0xb0 [ 2491.946261] SyS_ioctl+0x7f/0xb0 [ 2491.946269] ? do_vfs_ioctl+0xff0/0xff0 [ 2491.946279] do_syscall_64+0x1d5/0x640 [ 2491.946294] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2491.955646] DMA32: [ 2491.958190] RIP: 0033:0x466459 [ 2491.958195] RSP: 002b:00007f46becae188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2491.961805] 364*4kB [ 2491.965753] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 2491.965758] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2491.965763] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2491.965768] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2491.965774] R13: 00007ffe96c50ebf R14: 00007f46becae300 R15: 0000000000022000 [ 2491.982522] syz-executor.1 cpuset= [ 2492.002533] (UME) [ 2492.054198] / [ 2492.069320] 62*8kB [ 2492.094774] warn_alloc_show_mem: 1 callbacks suppressed [ 2492.094778] Mem-Info: [ 2492.099893] (UME) [ 2492.119495] mems_allowed=0-1 [ 2492.141948] 62*16kB [ 2492.153100] active_anon:15130 inactive_anon:48666 isolated_anon:0 [ 2492.153100] active_file:23 inactive_file:18 isolated_file:0 [ 2492.153100] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2492.153100] slab_reclaimable:12358 slab_unreclaimable:125681 [ 2492.153100] mapped:52784 shmem:49942 pagetables:824 bounce:0 [ 2492.153100] free:13921 free_pcp:0 free_cma:0 [ 2492.159285] syz-executor.2: [ 2492.201731] Node 0 active_anon:58444kB inactive_anon:125948kB active_file:92kB inactive_file:60kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:192236kB dirty:0kB writeback:0kB shmem:130576kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2492.229848] (UME) 1127*32kB (UME) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 39008kB [ 2492.264816] CPU: 0 PID: 16169 Comm: syz-executor.1 Not tainted 4.14.229-syzkaller #0 [ 2492.271516] Node 0 [ 2492.279322] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2492.279326] Call Trace: [ 2492.279346] dump_stack+0x1b2/0x281 [ 2492.279360] warn_alloc.cold+0x96/0x1cc [ 2492.279372] ? zone_watermark_ok_safe+0x220/0x220 [ 2492.279395] __alloc_pages_nodemask+0x2127/0x2720 [ 2492.279405] ? lock_acquire+0x170/0x3f0 [ 2492.279418] ? lock_acquire+0x170/0x3f0 [ 2492.279434] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2492.279452] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2492.279465] ? __mutex_unlock_slowpath+0x75/0x770 [ 2492.279481] alloc_pages_current+0x155/0x260 [ 2492.279494] ion_page_pool_alloc+0x118/0x1b0 [ 2492.279503] ion_system_heap_allocate+0x133/0x8c0 [ 2492.279514] ? _raw_spin_unlock+0x29/0x40 [ 2492.288697] Normal: [ 2492.291069] ? _ion_heap_freelist_drain+0x6e/0x410 [ 2492.293868] page allocation failure: order:4 [ 2492.297237] ? ion_system_contig_heap_create+0x130/0x130 [ 2492.301182] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 2492.306022] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2492.306035] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2492.306046] ion_alloc+0x27a/0x810 [ 2492.306060] ? ion_dma_buf_release+0x40/0x40 [ 2492.306073] ? __might_fault+0x177/0x1b0 [ 2492.306084] ion_ioctl+0xea/0x1f0 [ 2492.306092] ? ion_query_heaps+0x360/0x360 [ 2492.306104] ? SyS_epoll_ctl+0x1e0/0x2780 [ 2492.321541] 0*4kB [ 2492.323662] ? ion_query_heaps+0x360/0x360 [ 2492.323673] do_vfs_ioctl+0x75a/0xff0 [ 2492.323685] ? ioctl_preallocate+0x1a0/0x1a0 [ 2492.323696] ? lock_downgrade+0x740/0x740 [ 2492.345573] 0*8kB [ 2492.347574] ? __fget+0x225/0x360 [ 2492.351692] 0*16kB [ 2492.353996] ? do_vfs_ioctl+0xff0/0xff0 [ 2492.354007] ? security_file_ioctl+0x83/0xb0 [ 2492.354018] SyS_ioctl+0x7f/0xb0 [ 2492.354027] ? do_vfs_ioctl+0xff0/0xff0 [ 2492.354038] do_syscall_64+0x1d5/0x640 [ 2492.354054] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2492.354061] RIP: 0033:0x466459 [ 2492.354068] RSP: 002b:00007f10b678e188 EFLAGS: 00000246 [ 2492.366964] syz-executor.2: [ 2492.368791] ORIG_RAX: 0000000000000010 [ 2492.377798] (null) [ 2492.380868] RAX: ffffffffffffffda RBX: 000000000056c008 RCX: 0000000000466459 [ 2492.391580] page allocation failure: order:0 [ 2492.393590] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000005 [ 2492.393596] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2492.393605] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c008 [ 2492.393611] R13: 00007ffd58825dcf R14: 00007f10b678e300 R15: 0000000000022000 [ 2492.401955] Node 1 active_anon:2076kB inactive_anon:68716kB active_file:0kB inactive_file:12kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:18900kB dirty:0kB writeback:0kB shmem:69192kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2492.414178] 0*32kB [ 2492.422994] syz-executor.2 cpuset= [ 2492.430871] 0*64kB [ 2492.440642] / [ 2492.452891] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 2492.462409] Node 0 [ 2492.470742] 0*128kB [ 2492.472306] DMA free:10956kB min:204kB low:252kB high:300kB active_anon:12kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:64kB pagetables:4kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2492.477978] (null) [ 2492.485226] lowmem_reserve[]: [ 2492.494254] 0*256kB [ 2492.504186] mems_allowed=0-1 [ 2492.509598] syz-executor.2 cpuset= [ 2492.511882] CPU: 0 PID: 16160 Comm: syz-executor.2 Not tainted 4.14.229-syzkaller #0 [ 2492.527717] 0*512kB [ 2492.546177] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2492.546181] Call Trace: [ 2492.546198] dump_stack+0x1b2/0x281 [ 2492.546212] warn_alloc.cold+0x96/0x1cc [ 2492.546224] ? zone_watermark_ok_safe+0x220/0x220 [ 2492.546249] __alloc_pages_nodemask+0x2127/0x2720 [ 2492.546260] ? lock_acquire+0x170/0x3f0 [ 2492.546272] ? lock_acquire+0x170/0x3f0 [ 2492.546286] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2492.557035] / [ 2492.563022] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2492.566957] mems_allowed=0-1 [ 2492.567537] ? __mutex_unlock_slowpath+0x75/0x770 [ 2492.602155] 0*1024kB [ 2492.603959] alloc_pages_current+0x155/0x260 [ 2492.603974] ion_page_pool_alloc+0x118/0x1b0 [ 2492.603983] ion_system_heap_allocate+0x133/0x8c0 [ 2492.603995] ? _raw_spin_unlock+0x29/0x40 [ 2492.604003] ? _ion_heap_freelist_drain+0x6e/0x410 [ 2492.604014] ? ion_system_contig_heap_create+0x130/0x130 [ 2492.607621] 0*2048kB [ 2492.615975] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2492.615987] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2492.615997] ion_alloc+0x27a/0x810 [ 2492.616010] ? ion_dma_buf_release+0x40/0x40 [ 2492.616020] ? __might_fault+0x177/0x1b0 [ 2492.616031] ion_ioctl+0xea/0x1f0 [ 2492.616040] ? ion_query_heaps+0x360/0x360 [ 2492.616053] ? ion_query_heaps+0x360/0x360 [ 2492.616063] do_vfs_ioctl+0x75a/0xff0 [ 2492.616075] ? ioctl_preallocate+0x1a0/0x1a0 [ 2492.616083] ? lock_downgrade+0x740/0x740 [ 2492.616095] ? __fget+0x225/0x360 [ 2492.627025] 0*4096kB [ 2492.627740] ? do_vfs_ioctl+0xff0/0xff0 [ 2492.630297] = 0kB [ 2492.633905] ? security_file_ioctl+0x83/0xb0 [ 2492.633916] SyS_ioctl+0x7f/0xb0 [ 2492.633924] ? do_vfs_ioctl+0xff0/0xff0 [ 2492.633935] do_syscall_64+0x1d5/0x640 [ 2492.633951] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2492.633958] RIP: 0033:0x466459 [ 2492.633963] RSP: 002b:00007f3bc6e95188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2492.633974] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 2492.654273] Node 1 [ 2492.655480] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2492.660312] Normal: [ 2492.662006] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2492.697567] 9*4kB [ 2492.700455] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2492.700463] R13: 00007ffe618eb5ff R14: 00007f3bc6e95300 R15: 0000000000022000 [ 2492.725901] (M) [ 2492.735042] 0 [ 2492.746392] CPU: 1 PID: 16190 Comm: syz-executor.2 Not tainted 4.14.229-syzkaller #0 [ 2492.754307] 2717 [ 2492.754564] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2492.757992] 2718 [ 2492.760375] Call Trace: [ 2492.773052] 2718 [ 2492.774117] dump_stack+0x1b2/0x281 [ 2492.778058] 2718 [ 2492.781928] warn_alloc.cold+0x96/0x1cc [ 2492.790742] ? zone_watermark_ok_safe+0x220/0x220 [ 2492.798441] Node 0 [ 2492.805780] ? usleep_range+0x130/0x130 [ 2492.805790] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 2492.805803] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 2492.805815] ? run_timer_softirq+0x5a0/0x5a0 [ 2492.808050] DMA32 free:17884kB min:36200kB low:45248kB high:54296kB active_anon:58432kB inactive_anon:125948kB active_file:128kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:7424kB pagetables:3040kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2492.815294] __alloc_pages_nodemask+0x2127/0x2720 [ 2492.815313] ? lock_acquire+0x170/0x3f0 [ 2492.828140] lowmem_reserve[]: [ 2492.834348] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2492.834357] ? ion_page_pool_alloc+0x9e/0x1b0 [ 2492.834374] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2492.854536] 0 [ 2492.855280] alloc_pages_current+0x155/0x260 [ 2492.873160] 0 [ 2492.875300] ion_page_pool_alloc+0x118/0x1b0 [ 2492.877333] 0 [ 2492.881287] ion_system_heap_allocate+0x133/0x8c0 [ 2492.886118] 0 [ 2492.888320] ? ion_alloc+0x187/0x810 [ 2492.892266] 0 [ 2492.897376] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2492.897386] ? ion_system_contig_heap_create+0x130/0x130 [ 2492.897397] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2492.906770] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2492.906781] ion_alloc+0x204/0x810 [ 2492.906795] ? ion_dma_buf_release+0x40/0x40 [ 2492.934804] Node 0 [ 2492.939612] ? __might_fault+0x177/0x1b0 [ 2492.943591] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2492.946654] ion_ioctl+0xea/0x1f0 [ 2492.951552] lowmem_reserve[]: [ 2492.956028] ? ion_query_heaps+0x360/0x360 [ 2492.956041] ? _raw_spin_unlock+0x29/0x40 [ 2492.956051] ? ion_query_heaps+0x360/0x360 [ 2492.961477] 0 [ 2492.963259] do_vfs_ioctl+0x75a/0xff0 [ 2492.963270] ? ioctl_preallocate+0x1a0/0x1a0 [ 2492.963281] ? lock_downgrade+0x740/0x740 [ 2492.967659] 0 [ 2492.969470] ? __fget+0x225/0x360 [ 2492.973864] 0 [ 2492.975634] ? do_vfs_ioctl+0xff0/0xff0 [ 2492.980450] 0 [ 2492.982239] ? security_file_ioctl+0x83/0xb0 [ 2492.985934] 0 [ 2492.987706] SyS_ioctl+0x7f/0xb0 [ 2492.998557] ? do_vfs_ioctl+0xff0/0xff0 [ 2493.006688] Node 1 [ 2493.008373] do_syscall_64+0x1d5/0x640 [ 2493.011897] Normal free:26844kB min:53696kB low:67120kB high:80544kB active_anon:2076kB inactive_anon:68716kB active_file:0kB inactive_file:12kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:416kB pagetables:252kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2493.016277] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2493.016284] RIP: 0033:0x466459 [ 2493.016291] RSP: 002b:00007f3bc6e53188 EFLAGS: 00000246 [ 2493.031389] lowmem_reserve[]: [ 2493.047433] ORIG_RAX: 0000000000000010 [ 2493.047439] RAX: ffffffffffffffda RBX: 000000000056c0b0 RCX: 0000000000466459 [ 2493.047444] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2493.047449] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2493.047454] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c0b0 [ 2493.047460] R13: 00007ffe618eb5ff R14: 00007f3bc6e53300 R15: 0000000000022000 [ 2493.056796] 2*8kB [ 2493.061368] syz-executor.1: [ 2493.066588] (UM) [ 2493.075175] page allocation failure: order:0 [ 2493.086065] 3*16kB [ 2493.099761] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 2493.109327] (UME) [ 2493.120854] (null) [ 2493.150513] 47*32kB [ 2493.176055] 0 [ 2493.186058] (UM) [ 2493.207500] 0 [ 2493.219689] 5*64kB [ 2493.225856] 0 [ 2493.227214] (UM) [ 2493.229000] 0 [ 2493.231039] 1*128kB [ 2493.232909] syz-executor.2: [ 2493.243767] (U) 1*256kB (U) 0*512kB 22*1024kB (U) 1*2048kB (M) 0*4096kB = 26884kB [ 2493.249811] page allocation failure: order:0 [ 2493.254493] 0 [ 2493.259474] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2493.260685] Node 0 [ 2493.278109] syz-executor.1 cpuset= [ 2493.279367] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2493.280341] / [ 2493.285565] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2493.299261] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2493.310790] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 2493.311648] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2493.323232] DMA: 11*4kB (ME) 18*8kB (ME) 13*16kB (UME) 26*32kB (UME) 18*64kB (UME) 13*128kB (UM) 5*256kB (UME) 3*512kB (UME) 2*1024kB (ME) 1*2048kB (M) 0*4096kB = 10956kB [ 2493.333015] 49961 total pagecache pages [ 2493.347296] mems_allowed=0-1 [ 2493.350437] CPU: 0 PID: 16169 Comm: syz-executor.1 Not tainted 4.14.229-syzkaller #0 [ 2493.351248] 0 pages in swap cache [ 2493.358301] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2493.358305] Call Trace: [ 2493.358325] dump_stack+0x1b2/0x281 [ 2493.358338] warn_alloc.cold+0x96/0x1cc [ 2493.358350] ? zone_watermark_ok_safe+0x220/0x220 [ 2493.358358] ? usleep_range+0x130/0x130 [ 2493.358369] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 2493.370338] Swap cache stats: add 0, delete 0, find 0/0 [ 2493.371141] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 2493.373732] Free swap = 0kB [ 2493.377307] ? run_timer_softirq+0x5a0/0x5a0 [ 2493.381252] Total swap = 0kB [ 2493.381259] 2097051 pages RAM [ 2493.386087] __alloc_pages_nodemask+0x2127/0x2720 [ 2493.386104] ? lock_acquire+0x170/0x3f0 [ 2493.386120] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2493.386130] ? ion_page_pool_alloc+0x9e/0x1b0 [ 2493.386147] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2493.386166] alloc_pages_current+0x155/0x260 [ 2493.398703] 0 pages HighMem/MovableOnly [ 2493.400561] ion_page_pool_alloc+0x118/0x1b0 [ 2493.405577] 363848 pages reserved [ 2493.408548] ion_system_heap_allocate+0x133/0x8c0 [ 2493.421364] 0 pages cma reserved [ 2493.423957] ? _raw_spin_unlock+0x29/0x40 [ 2493.423967] ? _ion_heap_freelist_drain+0x6e/0x410 [ 2493.423976] ? ion_system_contig_heap_create+0x130/0x130 [ 2493.423986] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2493.423998] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2493.427949] Out of memory (oom_kill_allocating_task): Kill process 7975 (syz-fuzzer) score 0 or sacrifice child [ 2493.432771] ion_alloc+0x27a/0x810 [ 2493.432785] ? ion_dma_buf_release+0x40/0x40 [ 2493.432797] ? __might_fault+0x177/0x1b0 [ 2493.432809] ion_ioctl+0xea/0x1f0 [ 2493.432818] ? ion_query_heaps+0x360/0x360 [ 2493.432830] ? SyS_epoll_ctl+0x1e0/0x2780 [ 2493.432840] ? ion_query_heaps+0x360/0x360 [ 2493.432849] do_vfs_ioctl+0x75a/0xff0 [ 2493.432860] ? ioctl_preallocate+0x1a0/0x1a0 [ 2493.432870] ? lock_downgrade+0x740/0x740 [ 2493.445934] Killed process 15523 (syz-executor.2) total-vm:84924kB, anon-rss:68kB, file-rss:0kB, shmem-rss:0kB [ 2493.447166] ? __fget+0x225/0x360 [ 2493.464102] syz-fuzzer invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask= [ 2493.467106] ? do_vfs_ioctl+0xff0/0xff0 [ 2493.471234] (null) [ 2493.476145] ? security_file_ioctl+0x83/0xb0 [ 2493.476155] SyS_ioctl+0x7f/0xb0 [ 2493.476164] ? do_vfs_ioctl+0xff0/0xff0 [ 2493.476178] do_syscall_64+0x1d5/0x640 [ 2493.496842] , order=0, oom_score_adj=0 [ 2493.501648] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2493.520913] syz-fuzzer cpuset= [ 2493.521347] RIP: 0033:0x466459 [ 2493.536558] / [ 2493.537849] RSP: 002b:00007f10b678e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2493.541983] mems_allowed=0-1 [ 2493.552094] RAX: ffffffffffffffda RBX: 000000000056c008 RCX: 0000000000466459 [ 2493.552099] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000005 [ 2493.552104] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2493.552108] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c008 [ 2493.552113] R13: 00007ffd58825dcf R14: 00007f10b678e300 R15: 0000000000022000 [ 2493.570472] CPU: 0 PID: 16160 Comm: syz-executor.2 Not tainted 4.14.229-syzkaller #0 [ 2493.577380] syz-executor.5: [ 2493.579217] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2493.583224] page allocation failure: order:0 [ 2493.587032] Call Trace: [ 2493.591000] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 2493.596177] dump_stack+0x1b2/0x281 [ 2493.596191] warn_alloc.cold+0x96/0x1cc [ 2493.596202] ? zone_watermark_ok_safe+0x220/0x220 [ 2493.596213] ? usleep_range+0x130/0x130 [ 2493.596221] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 2493.596234] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 2493.605497] (null) [ 2493.612417] ? run_timer_softirq+0x5a0/0x5a0 [ 2493.612439] __alloc_pages_nodemask+0x2127/0x2720 [ 2493.612456] ? lock_acquire+0x170/0x3f0 [ 2493.612470] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2493.612482] ? ion_page_pool_alloc+0x9e/0x1b0 [ 2493.612498] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2493.634050] syz-executor.5 cpuset= [ 2493.637362] alloc_pages_current+0x155/0x260 [ 2493.667424] warn_alloc_show_mem: 2 callbacks suppressed [ 2493.667428] Mem-Info: [ 2493.673022] ion_page_pool_alloc+0x118/0x1b0 [ 2493.673032] ion_system_heap_allocate+0x133/0x8c0 [ 2493.673045] ? _raw_spin_unlock+0x29/0x40 [ 2493.673053] ? _ion_heap_freelist_drain+0x6e/0x410 [ 2493.673062] ? ion_system_contig_heap_create+0x130/0x130 [ 2493.673071] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2493.673084] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2493.679242] / [ 2493.680048] ion_alloc+0x27a/0x810 [ 2493.692241] active_anon:15130 inactive_anon:48666 isolated_anon:0 [ 2493.692241] active_file:10 inactive_file:9 isolated_file:0 [ 2493.692241] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2493.692241] slab_reclaimable:12358 slab_unreclaimable:125674 [ 2493.692241] mapped:52780 shmem:49942 pagetables:824 bounce:0 [ 2493.692241] free:13941 free_pcp:60 free_cma:0 [ 2493.694692] ? ion_dma_buf_release+0x40/0x40 [ 2493.694705] ? __might_fault+0x177/0x1b0 [ 2493.694715] ion_ioctl+0xea/0x1f0 [ 2493.694722] ? ion_query_heaps+0x360/0x360 [ 2493.694733] ? ion_query_heaps+0x360/0x360 [ 2493.694742] do_vfs_ioctl+0x75a/0xff0 [ 2493.694754] ? ioctl_preallocate+0x1a0/0x1a0 [ 2493.694764] ? lock_downgrade+0x740/0x740 [ 2493.694778] ? __fget+0x225/0x360 [ 2493.694786] ? do_vfs_ioctl+0xff0/0xff0 [ 2493.694798] ? security_file_ioctl+0x83/0xb0 [ 2493.694807] SyS_ioctl+0x7f/0xb0 [ 2493.694814] ? do_vfs_ioctl+0xff0/0xff0 [ 2493.694825] do_syscall_64+0x1d5/0x640 [ 2493.694838] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2493.694845] RIP: 0033:0x466459 [ 2493.694849] RSP: 002b:00007f3bc6e95188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2493.694858] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 2493.694863] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2493.694868] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2493.694872] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2493.694883] R13: 00007ffe618eb5ff R14: 00007f3bc6e95300 R15: 0000000000022000 [ 2493.703372] Node 0 [ 2493.711378] CPU: 1 PID: 10385 Comm: syz-fuzzer Not tainted 4.14.229-syzkaller #0 [ 2493.732352] DMA32: [ 2493.734547] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2493.739143] 334*4kB [ 2493.744582] Call Trace: [ 2493.744603] dump_stack+0x1b2/0x281 [ 2493.744614] dump_header+0x178/0x82f [ 2493.744624] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2493.744634] ? ___ratelimit+0x2cd/0x530 [ 2493.762361] (ME) [ 2493.764645] oom_kill_process.cold+0x10/0xa40 [ 2493.769474] 135*8kB [ 2493.773610] out_of_memory+0xe3e/0x1190 [ 2493.773625] ? oom_killer_disable+0x1c0/0x1c0 [ 2493.792376] (UME) [ 2493.793776] ? mutex_trylock+0x152/0x1a0 [ 2493.795471] 51*16kB [ 2493.799012] __alloc_pages_nodemask+0x23e1/0x2720 [ 2493.872342] (UME) [ 2493.876423] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2493.879748] 463*32kB [ 2493.883717] alloc_pages_current+0x155/0x260 [ 2493.883731] filemap_fault+0x11a1/0x1ad0 [ 2493.902334] (UME) [ 2493.903666] ext4_filemap_fault+0x84/0xb0 [ 2493.910900] 0*64kB [ 2493.918160] __do_fault+0xfa/0x380 [ 2493.918169] __handle_mm_fault+0x2497/0x4620 [ 2493.918181] ? vm_insert_page+0x7c0/0x7c0 [ 2493.952353] 0*128kB [ 2493.961219] ? mark_held_locks+0xa6/0xf0 [ 2493.972328] 0*256kB [ 2493.973372] handle_mm_fault+0x455/0x9c0 [ 2493.978449] 0*512kB [ 2493.982407] __do_page_fault+0x549/0xad0 [ 2493.982421] ? spurious_fault+0x640/0x640 [ 2494.002326] 0*1024kB [ 2494.005826] ? do_page_fault+0x60/0x500 [ 2494.008126] 0*2048kB [ 2494.013602] ? page_fault+0x2f/0x50 [ 2494.013609] page_fault+0x45/0x50 [ 2494.013616] RIP: 6452a80:0x24e74fb1966 [ 2494.013623] RSP: 0221:000000c0066cfe40 EFLAGS: 00000003 [ 2494.022328] 0*4096kB [ 2494.030845] mems_allowed=0-1 [ 2494.031389] = 18048kB [ 2494.033608] CPU: 1 PID: 16163 Comm: syz-executor.5 Not tainted 4.14.229-syzkaller #0 [ 2494.033614] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2494.033618] Call Trace: [ 2494.033634] dump_stack+0x1b2/0x281 [ 2494.033648] warn_alloc.cold+0x96/0x1cc [ 2494.033659] ? zone_watermark_ok_safe+0x220/0x220 [ 2494.033669] ? usleep_range+0x130/0x130 [ 2494.033678] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 2494.033690] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 2494.033701] ? run_timer_softirq+0x5a0/0x5a0 [ 2494.033718] __alloc_pages_nodemask+0x2127/0x2720 [ 2494.033733] ? lock_acquire+0x170/0x3f0 [ 2494.033748] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2494.033757] ? ion_page_pool_alloc+0x9e/0x1b0 [ 2494.033774] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2494.033789] ? alloc_pages_current+0x21c/0x260 [ 2494.033801] alloc_pages_current+0x155/0x260 [ 2494.033811] ion_page_pool_alloc+0x118/0x1b0 [ 2494.033820] ion_system_heap_allocate+0x133/0x8c0 [ 2494.033829] ? ion_alloc+0x187/0x810 [ 2494.033839] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2494.033849] ? ion_system_contig_heap_create+0x130/0x130 [ 2494.033859] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2494.033870] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2494.033879] ion_alloc+0x204/0x810 [ 2494.033892] ? ion_dma_buf_release+0x40/0x40 [ 2494.033904] ? __might_fault+0x177/0x1b0 [ 2494.033915] ion_ioctl+0xea/0x1f0 [ 2494.033924] ? ion_query_heaps+0x360/0x360 [ 2494.033934] ? SyS_epoll_ctl+0x1e0/0x2780 [ 2494.033944] ? ion_query_heaps+0x360/0x360 [ 2494.033954] do_vfs_ioctl+0x75a/0xff0 [ 2494.033965] ? ioctl_preallocate+0x1a0/0x1a0 [ 2494.033972] ? lock_downgrade+0x740/0x740 [ 2494.033985] ? __fget+0x225/0x360 [ 2494.034010] ? do_vfs_ioctl+0xff0/0xff0 [ 2494.054980] Node 0 [ 2494.058836] ? security_file_ioctl+0x83/0xb0 [ 2494.061133] Normal: [ 2494.065176] SyS_ioctl+0x7f/0xb0 [ 2494.065184] ? do_vfs_ioctl+0xff0/0xff0 [ 2494.065195] do_syscall_64+0x1d5/0x640 [ 2494.065210] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2494.067507] 0*4kB [ 2494.071546] RIP: 0033:0x466459 [ 2494.075686] 0*8kB [ 2494.078056] RSP: 002b:00007f4d0bcd5188 EFLAGS: 00000246 [ 2494.082004] 0*16kB [ 2494.084388] ORIG_RAX: 0000000000000010 [ 2494.084394] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 2494.084400] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2494.084405] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2494.084412] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2494.091394] 0*32kB [ 2494.091454] R13: 00007ffe1117a98f R14: 00007f4d0bcd5300 R15: 0000000000022000 [ 2494.095338] 0*64kB [ 2494.112803] Node 0 active_anon:58444kB inactive_anon:125948kB active_file:52kB inactive_file:16kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:192224kB dirty:0kB writeback:0kB shmem:130576kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2494.149838] 0*128kB [ 2494.182392] Node 1 active_anon:2076kB inactive_anon:68716kB active_file:4kB inactive_file:2704kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:20696kB dirty:0kB writeback:0kB shmem:69192kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2494.281721] 0*256kB [ 2494.368545] Node 0 DMA free:10956kB min:204kB low:252kB high:300kB active_anon:12kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:64kB pagetables:4kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2494.451097] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2494.456750] Node 0 DMA32 free:175704kB min:36200kB low:45248kB high:54296kB active_anon:58332kB inactive_anon:125948kB active_file:52kB inactive_file:516kB unevictable:0kB writepending:0kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:7392kB pagetables:3040kB bounce:0kB free_pcp:700kB local_pcp:460kB free_cma:0kB [ 2494.522500] lowmem_reserve[]: 0 0 0 0 0 [ 2494.526534] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2494.582310] lowmem_reserve[]: 0 0 0 0 0 [ 2494.586338] Node 1 Normal free:487036kB min:53696kB low:67120kB high:80544kB active_anon:2076kB inactive_anon:68716kB active_file:1604kB inactive_file:2112kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:416kB pagetables:252kB bounce:0kB free_pcp:720kB local_pcp:348kB free_cma:0kB [ 2494.652413] Mem-Info: [ 2494.654867] active_anon:15105 inactive_anon:48666 isolated_anon:0 [ 2494.654867] active_file:414 inactive_file:1107 isolated_file:0 [ 2494.654867] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2494.654867] slab_reclaimable:12333 slab_unreclaimable:125854 [ 2494.654867] mapped:54005 shmem:49942 pagetables:824 bounce:0 [ 2494.654867] free:160039 free_pcp:334 free_cma:0 [ 2494.672316] 0*512kB [ 2494.690042] lowmem_reserve[]: 0 0 0 0 0 [ 2494.696613] Node 0 DMA: 11*4kB (ME) 18*8kB (ME) 13*16kB (UME) 26*32kB (UME) 18*64kB (UME) 13*128kB (UM) 5*256kB (UME) 3*512kB (UME) 2*1024kB (ME) 1*2048kB (M) 0*4096kB = 10956kB [ 2494.732316] Node 0 DMA32: 37*4kB (E) 46*8kB (UME) 45*16kB (UME) 28*32kB (UME) 2170*64kB (U) 80*128kB (U) 17*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 155604kB [ 2494.732487] 0*1024kB [ 2494.748025] Node 0 active_anon:58344kB inactive_anon:125948kB active_file:52kB inactive_file:2316kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:194024kB dirty:0kB writeback:0kB shmem:130576kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2494.772284] 0*2048kB 0*4096kB = 0kB [ 2494.780481] Node 0 [ 2494.781973] Node 1 [ 2494.781981] Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2494.798610] Node 1 Normal: 1*4kB (U) 1*8kB (M) 1*16kB (E) 2*32kB (U) 1420*64kB (UM) 125*128kB (UM) 55*256kB (U) 1*512kB (U) 1*1024kB (U) 39*2048kB (U) 15*4096kB (U) = 263900kB [ 2494.815690] Node 1 active_anon:2000kB inactive_anon:68716kB active_file:1652kB inactive_file:2112kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:22164kB dirty:8kB writeback:0kB shmem:69192kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2494.825644] Normal: [ 2494.844153] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2494.865855] 1*4kB (U) 1*8kB (M) 1*16kB (E) 2*32kB (U) 1420*64kB (UM) 125*128kB (UM) 55*256kB (U) 1*512kB (U) 0*1024kB 0*2048kB 3*4096kB (U) = 133852kB [ 2494.872328] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2494.896032] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2494.902335] Node 0 DMA free:10956kB min:204kB low:252kB high:300kB active_anon:12kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:64kB pagetables:4kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2494.913041] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2494.931575] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2494.972519] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2494.981388] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2494.990044] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2494.995227] Node 0 DMA32 free:19572kB min:36200kB low:45248kB high:54296kB active_anon:58316kB inactive_anon:125948kB active_file:572kB inactive_file:760kB unevictable:0kB writepending:24kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:7392kB pagetables:3040kB bounce:0kB free_pcp:868kB local_pcp:148kB free_cma:0kB [ 2495.032279] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2495.040912] 50536 total pagecache pages [ 2495.051893] 0 pages in swap cache [ 2495.054657] 50111 total pagecache pages [ 2495.059321] 0 pages in swap cache [ 2495.062547] Swap cache stats: add 0, delete 0, find 0/0 [ 2495.068321] Free swap = 0kB [ 2495.071336] Total swap = 0kB [ 2495.073477] Swap cache stats: add 0, delete 0, find 0/0 [ 2495.079833] Free swap = 0kB [ 2495.080886] 2097051 pages RAM [ 2495.086515] 0 pages HighMem/MovableOnly [ 2495.087732] lowmem_reserve[]: [ 2495.090493] 363848 pages reserved [ 2495.090499] 0 [ 2495.094734] 0 pages cma reserved [ 2495.097252] Total swap = 0kB [ 2495.109293] 2097051 pages RAM [ 2495.112436] 0 pages HighMem/MovableOnly [ 2495.116400] 363848 pages reserved [ 2495.119843] 0 pages cma reserved [ 2495.126972] 0 0 0 0 [ 2495.129311] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2495.190655] lowmem_reserve[]: 0 0 0 0 0 [ 2495.225664] Node 1 Normal free:26460kB min:53696kB low:67120kB high:80544kB active_anon:2020kB inactive_anon:68716kB active_file:108kB inactive_file:556kB unevictable:0kB writepending:4kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:416kB pagetables:252kB bounce:0kB free_pcp:988kB local_pcp:348kB free_cma:0kB [ 2495.261060] lowmem_reserve[]: 0 0 0 0 0 [ 2495.265143] Node 0 DMA: 11*4kB (ME) 19*8kB (UME) 13*16kB (UME) 24*32kB (UME) 19*64kB (UME) 13*128kB (UM) 5*256kB (UME) 3*512kB (UME) 2*1024kB (ME) 1*2048kB (M) 0*4096kB = 10964kB [ 2495.282560] Node 0 DMA32: 367*4kB (ME) 135*8kB (UME) 53*16kB (ME) 28*32kB (UME) 0*64kB 67*128kB (U) 17*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 17220kB [ 2495.300508] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2495.311329] Node 1 Normal: 51*4kB (UM) 32*8kB (M) 21*16kB (UME) 24*32kB (UM) 17*64kB (M) 66*128kB (UM) 57*256kB (UM) 1*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 26204kB [ 2495.327427] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2495.336366] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2495.362251] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2495.371139] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2495.379995] 49986 total pagecache pages [ 2495.384016] 0 pages in swap cache [ 2495.387462] Swap cache stats: add 0, delete 0, find 0/0 [ 2495.392875] Free swap = 0kB [ 2495.395883] Total swap = 0kB [ 2495.398906] 2097051 pages RAM [ 2495.402000] 0 pages HighMem/MovableOnly [ 2495.412257] 363848 pages reserved [ 2495.415721] 0 pages cma reserved [ 2495.419080] Out of memory (oom_kill_allocating_task): Kill process 10385 (syz-fuzzer) score 0 or sacrifice child [ 2495.492290] Killed process 15891 (syz-executor.0) total-vm:84924kB, anon-rss:64kB, file-rss:0kB, shmem-rss:0kB [ 2495.539273] oom_reaper: reaped process 16160 (syz-executor.2), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 2495.646872] oom_reaper: reaped process 15891 (syz-executor.0), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 2495.698162] oom_reaper: reaped process 16163 (syz-executor.5), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 2495.802305] oom_reaper: reaped process 16161 (syz-executor.4), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 2496.494390] syz-executor.5: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2496.497400] syz-executor.2: [ 2496.507934] oom_reaper: reaped process 16153 (syz-executor.0), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 2496.510111] syz-executor.5 cpuset= [ 2496.515810] in:imklog invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask= [ 2496.532440] / [ 2496.538749] page allocation failure: order:4 [ 2496.542062] mems_allowed=0-1 [ 2496.550138] (null), order=0, oom_score_adj=0 [ 2496.559767] CPU: 1 PID: 16163 Comm: syz-executor.5 Not tainted 4.14.229-syzkaller #0 [ 2496.561639] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 2496.567644] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2496.567648] Call Trace: [ 2496.567667] dump_stack+0x1b2/0x281 [ 2496.567680] warn_alloc.cold+0x96/0x1cc [ 2496.576670] in:imklog cpuset= [ 2496.584190] ? zone_watermark_ok_safe+0x220/0x220 [ 2496.584213] __alloc_pages_nodemask+0x2127/0x2720 [ 2496.597081] / [ 2496.597422] ? lock_acquire+0x170/0x3f0 [ 2496.602281] mems_allowed=0-1 [ 2496.607089] ? lock_acquire+0x170/0x3f0 [ 2496.612214] (null) [ 2496.612751] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2496.615827] syz-executor.2 cpuset= [ 2496.619802] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2496.621918] / [ 2496.626763] ? __mutex_unlock_slowpath+0x75/0x770 [ 2496.642104] mems_allowed=0-1 [ 2496.642238] alloc_pages_current+0x155/0x260 [ 2496.649714] ion_page_pool_alloc+0x118/0x1b0 [ 2496.654122] ion_system_heap_allocate+0x133/0x8c0 [ 2496.658948] ? _raw_spin_unlock+0x29/0x40 [ 2496.663078] ? _ion_heap_freelist_drain+0x6e/0x410 [ 2496.667992] ? ion_system_contig_heap_create+0x130/0x130 [ 2496.673426] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2496.678425] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2496.683250] ion_alloc+0x27a/0x810 [ 2496.686773] ? ion_dma_buf_release+0x40/0x40 [ 2496.691170] ? __might_fault+0x177/0x1b0 [ 2496.695228] ion_ioctl+0xea/0x1f0 [ 2496.698669] ? ion_query_heaps+0x360/0x360 [ 2496.702886] ? SyS_epoll_ctl+0x1e0/0x2780 [ 2496.707029] ? ion_query_heaps+0x360/0x360 [ 2496.711246] do_vfs_ioctl+0x75a/0xff0 [ 2496.715030] ? ioctl_preallocate+0x1a0/0x1a0 [ 2496.719432] ? lock_downgrade+0x740/0x740 [ 2496.723576] ? __fget+0x225/0x360 [ 2496.727008] ? do_vfs_ioctl+0xff0/0xff0 [ 2496.730963] ? security_file_ioctl+0x83/0xb0 [ 2496.735349] SyS_ioctl+0x7f/0xb0 [ 2496.738700] ? do_vfs_ioctl+0xff0/0xff0 [ 2496.742656] do_syscall_64+0x1d5/0x640 [ 2496.746527] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2496.751694] RIP: 0033:0x466459 [ 2496.754862] RSP: 002b:00007f4d0bcd5188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2496.762549] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 2496.769798] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2496.777047] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2496.784295] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2496.791631] R13: 00007ffe1117a98f R14: 00007f4d0bcd5300 R15: 0000000000022000 [ 2496.800903] CPU: 0 PID: 15838 Comm: in:imklog Not tainted 4.14.229-syzkaller #0 [ 2496.801084] syz-executor.4: [ 2496.808348] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2496.808352] Call Trace: [ 2496.808368] dump_stack+0x1b2/0x281 [ 2496.808380] dump_header+0x178/0x82f [ 2496.812177] warn_alloc_show_mem: 3 callbacks suppressed [ 2496.812179] Mem-Info: [ 2496.820736] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2496.832107] page allocation failure: order:0 [ 2496.835941] ? ___ratelimit+0x2cd/0x530 [ 2496.838326] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 2496.843415] oom_kill_process.cold+0x10/0xa40 [ 2496.843434] out_of_memory+0xe3e/0x1190 [ 2496.843447] ? oom_killer_disable+0x1c0/0x1c0 [ 2496.852130] active_anon:14919 inactive_anon:48666 isolated_anon:0 [ 2496.852130] active_file:17 inactive_file:16 isolated_file:0 [ 2496.852130] unevictable:0 dirty:0 writeback:15 unstable:0 [ 2496.852130] slab_reclaimable:12323 slab_unreclaimable:125781 [ 2496.852130] mapped:35475 shmem:49942 pagetables:708 bounce:0 [ 2496.852130] free:14096 free_pcp:38 free_cma:0 [ 2496.858876] ? mutex_trylock+0x152/0x1a0 [ 2496.872107] (null) [ 2496.904975] __alloc_pages_nodemask+0x23e1/0x2720 [ 2496.904998] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2496.905018] alloc_pages_current+0x155/0x260 [ 2496.905029] filemap_fault+0x11a1/0x1ad0 [ 2496.905049] ext4_filemap_fault+0x84/0xb0 [ 2496.905060] __do_fault+0xfa/0x380 [ 2496.905068] __handle_mm_fault+0x2497/0x4620 [ 2496.905079] ? vm_insert_page+0x7c0/0x7c0 [ 2496.905088] ? lock_downgrade+0x740/0x740 [ 2496.905101] ? mark_held_locks+0xa6/0xf0 [ 2496.905112] handle_mm_fault+0x455/0x9c0 [ 2496.905123] __do_page_fault+0x549/0xad0 [ 2496.905133] ? spurious_fault+0x640/0x640 [ 2496.905140] ? do_page_fault+0x60/0x500 [ 2496.905147] ? page_fault+0x2f/0x50 [ 2496.905153] page_fault+0x45/0x50 [ 2496.905159] RIP: 1fa0:0x1f9f [ 2496.905163] RSP: 0000:000055985bfc09d0 EFLAGS: 7fcf7ba7fda0 [ 2496.915525] syz-executor.0: [ 2496.916514] Node 0 active_anon:57688kB inactive_anon:125948kB active_file:64kB inactive_file:60kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:141804kB dirty:0kB writeback:52kB shmem:130576kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2496.921254] page allocation failure: order:0 [ 2496.925697] Node 1 active_anon:1988kB inactive_anon:68716kB active_file:4kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:96kB dirty:8kB writeback:8kB shmem:69192kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2496.940917] CPU: 0 PID: 16190 Comm: syz-executor.2 Not tainted 4.14.229-syzkaller #0 [ 2496.941833] Node 0 [ 2496.945946] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2496.945950] Call Trace: [ 2496.945969] dump_stack+0x1b2/0x281 [ 2496.945983] warn_alloc.cold+0x96/0x1cc [ 2496.945994] ? zone_watermark_ok_safe+0x220/0x220 [ 2496.946015] __alloc_pages_nodemask+0x2127/0x2720 [ 2496.946032] ? lock_acquire+0x170/0x3f0 [ 2496.946047] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2496.950177] DMA free:10960kB min:204kB low:252kB high:300kB active_anon:12kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:64kB pagetables:4kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2496.954219] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2496.954233] ? __mutex_unlock_slowpath+0x75/0x770 [ 2496.954246] alloc_pages_current+0x155/0x260 [ 2496.954259] ion_page_pool_alloc+0x118/0x1b0 [ 2496.958314] lowmem_reserve[]: [ 2496.962347] ion_system_heap_allocate+0x133/0x8c0 [ 2496.962358] ? _raw_spin_unlock+0x29/0x40 [ 2496.962366] ? _ion_heap_freelist_drain+0x6e/0x410 [ 2496.962374] ? ion_system_contig_heap_create+0x130/0x130 [ 2496.962388] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2496.966505] 0 [ 2496.970464] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2496.974143] syz-executor.4 cpuset= [ 2496.977501] ion_alloc+0x27a/0x810 [ 2496.980490] / [ 2496.986188] ? ion_dma_buf_release+0x40/0x40 [ 2496.989225] 2717 [ 2497.017098] ? __might_fault+0x177/0x1b0 [ 2497.017115] ion_ioctl+0xea/0x1f0 [ 2497.017123] ? ion_query_heaps+0x360/0x360 [ 2497.017136] ? _raw_spin_unlock+0x29/0x40 [ 2497.017143] ? ion_query_heaps+0x360/0x360 [ 2497.017152] do_vfs_ioctl+0x75a/0xff0 [ 2497.017163] ? ioctl_preallocate+0x1a0/0x1a0 [ 2497.017171] ? lock_downgrade+0x740/0x740 [ 2497.017184] ? __fget+0x225/0x360 [ 2497.021595] mems_allowed=0-1 [ 2497.048273] ? do_vfs_ioctl+0xff0/0xff0 [ 2497.048285] ? security_file_ioctl+0x83/0xb0 [ 2497.048294] SyS_ioctl+0x7f/0xb0 [ 2497.048302] ? do_vfs_ioctl+0xff0/0xff0 [ 2497.048313] do_syscall_64+0x1d5/0x640 [ 2497.048331] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2497.056242] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 2497.058425] RIP: 0033:0x466459 [ 2497.067801] 2718 [ 2497.070322] RSP: 002b:00007f3bc6e53188 EFLAGS: 00000246 [ 2497.073974] (null) [ 2497.077873] ORIG_RAX: 0000000000000010 [ 2497.082733] 2718 [ 2497.087511] RAX: ffffffffffffffda RBX: 000000000056c0b0 RCX: 0000000000466459 [ 2497.091457] 2718 [ 2497.096273] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2497.096279] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2497.096283] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c0b0 [ 2497.096289] R13: 00007ffe618eb5ff R14: 00007f3bc6e53300 R15: 0000000000022000 [ 2497.105866] Mem-Info: [ 2497.122043] CPU: 1 PID: 16161 Comm: syz-executor.4 Not tainted 4.14.229-syzkaller #0 [ 2497.122050] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2497.122054] Call Trace: [ 2497.122074] dump_stack+0x1b2/0x281 [ 2497.122089] warn_alloc.cold+0x96/0x1cc [ 2497.122100] ? zone_watermark_ok_safe+0x220/0x220 [ 2497.122109] ? usleep_range+0x130/0x130 [ 2497.122118] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 2497.122129] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 2497.122138] ? run_timer_softirq+0x5a0/0x5a0 [ 2497.122153] __alloc_pages_nodemask+0x2127/0x2720 [ 2497.122167] ? lock_acquire+0x170/0x3f0 [ 2497.122183] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2497.122198] ? ion_page_pool_alloc+0x9e/0x1b0 [ 2497.122216] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2497.122236] alloc_pages_current+0x155/0x260 [ 2497.122248] ion_page_pool_alloc+0x118/0x1b0 [ 2497.122259] ion_system_heap_allocate+0x133/0x8c0 [ 2497.122271] ? _raw_spin_unlock+0x29/0x40 [ 2497.136727] syz-executor.0 cpuset= [ 2497.136924] ? _ion_heap_freelist_drain+0x6e/0x410 [ 2497.141304] / [ 2497.144393] ? ion_system_contig_heap_create+0x130/0x130 [ 2497.149241] mems_allowed=0-1 [ 2497.153348] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2497.153359] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2497.153370] ion_alloc+0x27a/0x810 [ 2497.158290] active_anon:14906 inactive_anon:48666 isolated_anon:0 [ 2497.158290] active_file:13 inactive_file:14 isolated_file:0 [ 2497.158290] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2497.158290] slab_reclaimable:12323 slab_unreclaimable:125797 [ 2497.158290] mapped:35429 shmem:49942 pagetables:708 bounce:0 [ 2497.158290] free:14096 free_pcp:38 free_cma:0 [ 2497.163707] ? ion_dma_buf_release+0x40/0x40 [ 2497.163718] ? __might_fault+0x177/0x1b0 [ 2497.163730] ion_ioctl+0xea/0x1f0 [ 2497.182063] Node 0 active_anon:57668kB inactive_anon:125948kB active_file:48kB inactive_file:52kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:141716kB dirty:0kB writeback:0kB shmem:130576kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2497.182345] ? ion_query_heaps+0x360/0x360 [ 2497.184040] Node 1 active_anon:1956kB inactive_anon:68716kB active_file:4kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:69192kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2497.188420] ? lock_downgrade+0x740/0x740 [ 2497.190453] Node 0 [ 2497.194496] ? _raw_spin_unlock_irq+0x24/0x80 [ 2497.194504] ? ion_query_heaps+0x360/0x360 [ 2497.194514] do_vfs_ioctl+0x75a/0xff0 [ 2497.212060] DMA free:10960kB min:204kB low:252kB high:300kB active_anon:12kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:64kB pagetables:4kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2497.214252] ? ioctl_preallocate+0x1a0/0x1a0 [ 2497.218630] lowmem_reserve[]: [ 2497.222757] ? lock_downgrade+0x740/0x740 [ 2497.222771] ? __fget+0x225/0x360 [ 2497.222780] ? do_vfs_ioctl+0xff0/0xff0 [ 2497.242047] 0 [ 2497.244903] ? security_file_ioctl+0x83/0xb0 [ 2497.248757] 2717 [ 2497.253928] SyS_ioctl+0x7f/0xb0 [ 2497.253936] ? do_vfs_ioctl+0xff0/0xff0 [ 2497.253948] do_syscall_64+0x1d5/0x640 [ 2497.282044] 2718 [ 2497.286949] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2497.288979] 2718 [ 2497.296231] RIP: 0033:0x466459 [ 2497.296237] RSP: 002b:00007f46becae188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2497.296246] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 2497.296253] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2497.322040] 2718 [ 2497.328263] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2497.352511] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2497.356459] Node 0 [ 2497.361538] R13: 00007ffe96c50ebf R14: 00007f46becae300 R15: 0000000000022000 [ 2497.381706] CPU: 0 PID: 16153 Comm: syz-executor.0 Not tainted 4.14.229-syzkaller #0 [ 2497.389984] Node 0 [ 2497.394753] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2497.394757] Call Trace: [ 2497.394775] dump_stack+0x1b2/0x281 [ 2497.394788] warn_alloc.cold+0x96/0x1cc [ 2497.394801] ? zone_watermark_ok_safe+0x220/0x220 [ 2497.399196] DMA32 free:18520kB min:36200kB low:45248kB high:54296kB active_anon:57656kB inactive_anon:125948kB active_file:48kB inactive_file:52kB unevictable:0kB writepending:0kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:7296kB pagetables:2704kB bounce:0kB free_pcp:120kB local_pcp:0kB free_cma:0kB [ 2497.403571] ? usleep_range+0x130/0x130 [ 2497.403580] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 2497.403592] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 2497.403603] ? run_timer_softirq+0x5a0/0x5a0 [ 2497.403620] __alloc_pages_nodemask+0x2127/0x2720 [ 2497.403635] ? lock_acquire+0x170/0x3f0 [ 2497.403651] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2497.411768] lowmem_reserve[]: [ 2497.412596] ? ion_page_pool_alloc+0x9e/0x1b0 [ 2497.412613] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2497.412632] alloc_pages_current+0x155/0x260 [ 2497.416137] 0 [ 2497.421047] ion_page_pool_alloc+0x118/0x1b0 [ 2497.426089] 0 [ 2497.428166] ion_system_heap_allocate+0x133/0x8c0 [ 2497.431240] 0 [ 2497.436238] ? ion_alloc+0x187/0x810 [ 2497.436249] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2497.436259] ? ion_system_contig_heap_create+0x130/0x130 [ 2497.436271] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2497.441084] 0 [ 2497.444603] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2497.444615] ion_alloc+0x204/0x810 [ 2497.444627] ? ion_dma_buf_release+0x40/0x40 [ 2497.444640] ? __might_fault+0x177/0x1b0 [ 2497.444652] ion_ioctl+0xea/0x1f0 [ 2497.444672] ? ion_query_heaps+0x360/0x360 [ 2497.509136] 0 [ 2497.517510] ? ion_query_heaps+0x360/0x360 [ 2497.517521] do_vfs_ioctl+0x75a/0xff0 [ 2497.517534] ? ioctl_preallocate+0x1a0/0x1a0 [ 2497.517543] ? lock_downgrade+0x740/0x740 [ 2497.517555] ? __fget+0x225/0x360 [ 2497.517564] ? do_vfs_ioctl+0xff0/0xff0 [ 2497.517576] ? security_file_ioctl+0x83/0xb0 [ 2497.517586] SyS_ioctl+0x7f/0xb0 [ 2497.517593] ? do_vfs_ioctl+0xff0/0xff0 [ 2497.517608] do_syscall_64+0x1d5/0x640 [ 2497.548466] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2497.548474] RIP: 0033:0x466459 [ 2497.548479] RSP: 002b:00007f182e6ab188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2497.548488] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 2497.548492] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2497.548497] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2497.548502] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2497.548508] R13: 00007ffc5be62dbf R14: 00007f182e6ab300 R15: 0000000000022000 [ 2497.559002] DMA32 free:18024kB min:36200kB low:45248kB high:54296kB active_anon:57656kB inactive_anon:125948kB active_file:48kB inactive_file:52kB unevictable:0kB writepending:0kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:7296kB pagetables:2704kB bounce:0kB free_pcp:120kB local_pcp:120kB free_cma:0kB [ 2497.560086] Node 0 [ 2497.563794] lowmem_reserve[]: [ 2497.570284] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2497.598487] 0 [ 2497.600809] syz-executor.2: [ 2497.604967] 0 0 0 0 [ 2497.612047] lowmem_reserve[]: [ 2497.618543] 0 [ 2497.620588] Node 0 [ 2497.627304] page allocation failure: order:0 [ 2497.627976] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2497.631813] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 2497.639517] lowmem_reserve[]: [ 2497.641138] 0 [ 2497.644356] 0 0 0 0 0 [ 2497.644373] Node 1 Normal free:26780kB min:53696kB low:67120kB high:80544kB active_anon:1956kB inactive_anon:68716kB active_file:4kB inactive_file:4kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:416kB pagetables:124kB bounce:0kB free_pcp:152kB local_pcp:32kB free_cma:0kB [ 2497.644394] lowmem_reserve[]: [ 2497.655438] (null) [ 2497.662975] 0 [ 2497.666757] 0 [ 2497.668758] 0 [ 2497.676104] 0 [ 2497.692480] syz-executor.2 cpuset= [ 2497.692878] 0 [ 2497.700708] / [ 2497.720819] 0 [ 2497.742036] Node 1 [ 2497.772316] mems_allowed=0-1 [ 2497.815691] Normal free:85920kB min:53696kB low:67120kB high:80544kB active_anon:1956kB inactive_anon:68716kB active_file:4kB inactive_file:4kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:416kB pagetables:124kB bounce:0kB free_pcp:152kB local_pcp:120kB free_cma:0kB [ 2497.895395] 0 [ 2497.965380] warn_alloc_show_mem: 2 callbacks suppressed [ 2497.965384] Mem-Info: [ 2498.002023] CPU: 0 PID: 16190 Comm: syz-executor.2 Not tainted 4.14.229-syzkaller #0 [ 2498.083162] lowmem_reserve[]: [ 2498.105611] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2498.105615] Call Trace: [ 2498.105635] dump_stack+0x1b2/0x281 [ 2498.105649] warn_alloc.cold+0x96/0x1cc [ 2498.105661] ? zone_watermark_ok_safe+0x220/0x220 [ 2498.105671] ? usleep_range+0x130/0x130 [ 2498.105680] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 2498.105693] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 2498.105704] ? run_timer_softirq+0x5a0/0x5a0 [ 2498.152048] 0 [ 2498.160184] __alloc_pages_nodemask+0x2127/0x2720 [ 2498.192098] 0 [ 2498.192594] ? lock_acquire+0x170/0x3f0 [ 2498.196188] 0 [ 2498.200160] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2498.212040] active_anon:14906 inactive_anon:48666 isolated_anon:0 [ 2498.212040] active_file:14 inactive_file:643 isolated_file:0 [ 2498.212040] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2498.212040] slab_reclaimable:12298 slab_unreclaimable:126336 [ 2498.212040] mapped:35921 shmem:49942 pagetables:708 bounce:0 [ 2498.212040] free:135409 free_pcp:675 free_cma:0 [ 2498.214022] ? ion_page_pool_alloc+0x9e/0x1b0 [ 2498.219025] Node 0 active_anon:57668kB inactive_anon:125948kB active_file:52kB inactive_file:140kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:141820kB dirty:0kB writeback:0kB shmem:130576kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2498.223498] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2498.223518] alloc_pages_current+0x155/0x260 [ 2498.223529] ion_page_pool_alloc+0x118/0x1b0 [ 2498.223539] ion_system_heap_allocate+0x133/0x8c0 [ 2498.223551] ? _raw_spin_unlock+0x29/0x40 [ 2498.223559] ? _ion_heap_freelist_drain+0x6e/0x410 [ 2498.223567] ? ion_system_contig_heap_create+0x130/0x130 [ 2498.223580] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2498.252036] 0 [ 2498.275947] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2498.275959] ion_alloc+0x27a/0x810 [ 2498.275973] ? ion_dma_buf_release+0x40/0x40 [ 2498.275984] ? __might_fault+0x177/0x1b0 [ 2498.275996] ion_ioctl+0xea/0x1f0 [ 2498.276005] ? ion_query_heaps+0x360/0x360 [ 2498.276018] ? _raw_spin_unlock+0x29/0x40 [ 2498.276025] ? ion_query_heaps+0x360/0x360 [ 2498.276037] do_vfs_ioctl+0x75a/0xff0 [ 2498.302056] Node 1 active_anon:1956kB inactive_anon:68716kB active_file:4kB inactive_file:2432kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:1864kB dirty:0kB writeback:0kB shmem:69192kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2498.308557] ? ioctl_preallocate+0x1a0/0x1a0 [ 2498.342020] Node 0 [ 2498.342658] ? lock_downgrade+0x740/0x740 [ 2498.347659] DMA free:11684kB min:204kB low:252kB high:300kB active_anon:12kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:64kB pagetables:4kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2498.349437] ? __fget+0x225/0x360 [ 2498.375426] 0 [ 2498.377986] ? do_vfs_ioctl+0xff0/0xff0 [ 2498.382263] lowmem_reserve[]: [ 2498.386080] ? security_file_ioctl+0x83/0xb0 [ 2498.450365] SyS_ioctl+0x7f/0xb0 [ 2498.450375] ? do_vfs_ioctl+0xff0/0xff0 [ 2498.450387] do_syscall_64+0x1d5/0x640 [ 2498.450401] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2498.450408] RIP: 0033:0x466459 [ 2498.450413] RSP: 002b:00007f3bc6e53188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2498.450422] RAX: ffffffffffffffda RBX: 000000000056c0b0 RCX: 0000000000466459 [ 2498.450431] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2498.495437] Node 0 [ 2498.501618] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2498.508934] 0 [ 2498.511095] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c0b0 [ 2498.527387] R13: 00007ffe618eb5ff R14: 00007f3bc6e53300 R15: 0000000000022000 [ 2498.540576] DMA: 27*4kB (UME) 17*8kB (ME) 16*16kB (UME) 22*32kB (UME) 18*64kB (UME) 11*128kB (UM) 7*256kB (UME) 2*512kB (ME) 3*1024kB (UME) 1*2048kB (M) 0*4096kB = 11700kB [ 2498.559983] 2717 2718 2718 2718 [ 2498.567407] Node 0 DMA32 free:183276kB min:36200kB low:45248kB high:54296kB active_anon:57656kB inactive_anon:125948kB active_file:52kB inactive_file:140kB unevictable:0kB writepending:0kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:7296kB pagetables:2704kB bounce:0kB free_pcp:1292kB local_pcp:640kB free_cma:0kB [ 2498.611956] 0 [ 2498.613790] Node 0 DMA: 27*4kB (UME) 17*8kB (ME) 15*16kB (UME) 24*32kB (UME) 18*64kB (UME) 11*128kB (UM) 7*256kB (UME) 2*512kB (ME) 3*1024kB (UME) 1*2048kB (M) 0*4096kB = 11748kB [ 2498.615291] Node 0 [ 2498.642163] Node 0 DMA32: 664*4kB (UME) 249*8kB (UME) 255*16kB (UME) 761*32kB (UME) 1567*64kB (UM) 301*128kB (UM) 58*256kB (UM) 2*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 187768kB [ 2498.645839] DMA32: [ 2498.662946] Node 0 [ 2498.665050] lowmem_reserve[]: [ 2498.665565] Normal: [ 2498.667409] 0 0 0 0 0 [ 2498.667427] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2498.667447] lowmem_reserve[]: 0 0 0 0 0 [ 2498.667467] Node 1 Normal free:577004kB min:53696kB low:67120kB high:80544kB active_anon:1956kB inactive_anon:68716kB active_file:928kB inactive_file:1200kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:416kB pagetables:124kB bounce:0kB free_pcp:1380kB local_pcp:648kB free_cma:0kB [ 2498.667489] lowmem_reserve[]: 0 0 0 0 0 [ 2498.667507] Node 0 DMA: 25*4kB [ 2498.670905] 0*4kB [ 2498.674041] (UME) [ 2498.680332] 0*8kB [ 2498.704628] 447*4kB [ 2498.706469] 0*16kB [ 2498.737857] 17*8kB [ 2498.739926] 0*32kB [ 2498.741766] (ME) 14*16kB (UME) 26*32kB (UME) 18*64kB (UME) [ 2498.745294] 0*64kB [ 2498.746143] (UME) [ 2498.748708] 0*128kB [ 2498.750570] 379*8kB (UME) 257*16kB (UME) 761*32kB (UME) 1567*64kB (UM) 301*128kB (UM) 58*256kB (UM) 2*512kB (M) 0*1024kB 0*2048kB 0*4096kB [ 2498.755181] 0*256kB [ 2498.758654] 11*128kB [ 2498.764181] 0*512kB [ 2498.765624] (UM) [ 2498.767738] 0*1024kB [ 2498.770043] 7*256kB [ 2498.784145] 0*2048kB [ 2498.788424] = 187972kB [ 2498.789802] 0*4096kB [ 2498.791849] Node 0 [ 2498.796107] = 0kB [ 2498.796624] Normal: [ 2498.799023] Node 1 [ 2498.801500] 0*4kB [ 2498.805293] Normal: [ 2498.809503] 0*8kB [ 2498.810558] 738*4kB [ 2498.813506] (UME) [ 2498.818166] (UM) [ 2498.820041] 2*512kB [ 2498.823136] 710*8kB [ 2498.827887] 0*16kB [ 2498.828921] (UM) [ 2498.831221] 0*32kB [ 2498.834882] 706*16kB [ 2498.835607] 0*64kB [ 2498.837801] (UME) [ 2498.840187] 0*128kB [ 2498.843811] 974*32kB (U) 4269*64kB (UM) 681*128kB (U) 189*256kB (UM) 75*512kB (U) 47*1024kB (UM) 5*2048kB (UM) 5*4096kB (U) = 577112kB [ 2498.847938] (ME) [ 2498.859253] 0*256kB [ 2498.860288] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2498.861306] 0*512kB [ 2498.864302] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2498.876109] 3*1024kB (UME) 1*2048kB (M) 0*4096kB = 11788kB [ 2498.884516] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2498.889087] Node 0 [ 2498.898407] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2498.901378] 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2498.910271] 50908 total pagecache pages [ 2498.917015] Node 1 Normal: 738*4kB (UM) 710*8kB (UM) 706*16kB (UME) 974*32kB (U) 4269*64kB (UM) 681*128kB (U) 189*256kB (UM) 75*512kB (U) 47*1024kB (UM) 5*2048kB (UM) 5*4096kB (U) = 577112kB [ 2498.918332] 0 pages in swap cache [ 2498.938223] DMA32: 389*4kB (UME) 236*8kB (UME) 257*16kB (UME) 761*32kB (UME) 1567*64kB (UM) 301*128kB (UM) 58*256kB (UM) 2*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 186596kB [ 2498.939609] Swap cache stats: add 0, delete 0, find 0/0 [ 2498.957308] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2498.960015] Free swap = 0kB [ 2498.970094] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2498.970101] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2498.970108] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2498.970120] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2498.970124] 50908 total pagecache pages [ 2498.970134] 0 pages in swap cache [ 2498.970140] Swap cache stats: add 0, delete 0, find 0/0 [ 2498.970144] Free swap = 0kB [ 2498.970147] Total swap = 0kB [ 2498.970154] 2097051 pages RAM [ 2498.970160] 0 pages HighMem/MovableOnly [ 2498.977880] Total swap = 0kB [ 2498.985477] 363848 pages reserved [ 2498.991325] 2097051 pages RAM [ 2498.999582] Node 1 Normal: 738*4kB (UM) 710*8kB (UM) 706*16kB (UME) 974*32kB (U) 4269*64kB (UM) 681*128kB (U) 189*256kB (UM) 75*512kB (U) 47*1024kB (UM) 5*2048kB (UM) 5*4096kB [ 2499.008671] 0 pages HighMem/MovableOnly [ 2499.015589] (U) [ 2499.016390] 363848 pages reserved [ 2499.021069] = 577112kB [ 2499.025135] 0 pages cma reserved [ 2499.027116] 0 pages cma reserved [ 2499.030191] Out of memory (oom_kill_allocating_task): Kill process 15838 (in:imklog) score 0 or sacrifice child [ 2499.042235] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2499.045421] Killed process 15836 (rsyslogd) total-vm:254332kB, anon-rss:904kB, file-rss:0kB, shmem-rss:0kB [ 2499.109157] Mem-Info: [ 2499.112921] oom_reaper: reaped process 15836 (rsyslogd), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 2499.123762] active_anon:14681 inactive_anon:48666 isolated_anon:0 [ 2499.123762] active_file:245 inactive_file:732 isolated_file:0 [ 2499.123762] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2499.123762] slab_reclaimable:12278 slab_unreclaimable:126482 [ 2499.123762] mapped:36199 shmem:49942 pagetables:672 bounce:0 [ 2499.123762] free:190499 free_pcp:540 free_cma:0 [ 2499.145246] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2499.158628] Node 0 active_anon:57668kB inactive_anon:125948kB active_file:76kB inactive_file:1876kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:142932kB dirty:0kB writeback:0kB shmem:130576kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2499.187801] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2499.195556] Node 1 active_anon:1056kB inactive_anon:68716kB active_file:904kB inactive_file:1152kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:1864kB dirty:0kB writeback:0kB shmem:69192kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2499.225305] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2499.232359] Node 0 DMA free:11820kB min:204kB low:252kB high:300kB active_anon:12kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:4kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2499.265269] 51093 total pagecache pages [ 2499.269749] 0 pages in swap cache [ 2499.274019] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2499.280146] Node 0 DMA32 free:95224kB min:36200kB low:45248kB high:54296kB active_anon:57656kB inactive_anon:125948kB active_file:176kB inactive_file:2976kB unevictable:0kB writepending:0kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:7296kB pagetables:2560kB bounce:0kB free_pcp:588kB local_pcp:568kB free_cma:0kB [ 2499.285255] Swap cache stats: add 0, delete 0, find 0/0 [ 2499.314490] lowmem_reserve[]: 0 0 0 0 0 [ 2499.321152] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2499.348085] Free swap = 0kB [ 2499.353272] Total swap = 0kB [ 2499.357197] 2097051 pages RAM [ 2499.361229] 0 pages HighMem/MovableOnly [ 2499.367016] 363848 pages reserved [ 2499.371557] 0 pages cma reserved [ 2499.391188] lowmem_reserve[]: 0 0 0 0 0 [ 2499.400403] Node 1 Normal free:570512kB min:53696kB low:67120kB high:80544kB active_anon:1056kB inactive_anon:68716kB active_file:1004kB inactive_file:1452kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:320kB pagetables:0kB bounce:0kB free_pcp:704kB local_pcp:132kB free_cma:0kB [ 2499.436006] lowmem_reserve[]: 0 0 0 0 0 [ 2499.461938] Node 0 DMA: 14*4kB (UME) 17*8kB (ME) 14*16kB (UME) 14*32kB (ME) 14*64kB (UME) 11*128kB (UM) 7*256kB (UME) 2*512kB (ME) 3*1024kB (UME) 1*2048kB (M) 0*4096kB = 11104kB [ 2499.485716] Node 0 DMA32: 69*4kB (E) 7*8kB (UME) 18*16kB (ME) 11*32kB (UE) 14*64kB (M) 212*128kB (UM) 58*256kB (UM) 2*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 44876kB [ 2499.512095] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2499.537157] Node 1 Normal: 1*4kB (M) 166*8kB (U) 707*16kB (UME) 976*32kB (UM) 4270*64kB (U) 683*128kB (UM) 188*256kB (U) 75*512kB (U) 47*1024kB (UM) 4*2048kB (U) 5*4096kB (U) = 567908kB [ 2499.565577] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2499.591889] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2499.600597] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2499.610360] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2499.619456] 52728 total pagecache pages [ 2499.623947] 0 pages in swap cache [ 2499.627396] Swap cache stats: add 0, delete 0, find 0/0 [ 2499.641917] Free swap = 0kB [ 2499.644952] Total swap = 0kB [ 2499.647966] 2097051 pages RAM [ 2499.651063] 0 pages HighMem/MovableOnly [ 2499.670384] 363848 pages reserved [ 2499.673893] 0 pages cma reserved 09:16:54 executing program 0: setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000000000)={0x0, 0x1, 0x6, @random="177885c48342"}, 0x10) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000180)={0x80000001, 0x13}) socket$packet(0x11, 0x3, 0x300) 09:16:54 executing program 1: epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x2, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r1, 0x89fa, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000000)={'ip6gre0\x00', 0x0, 0x29, 0x8, 0x92, 0x6, 0x10, @private2, @mcast2, 0x1, 0x10, 0x0, 0x9}}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000100)='l2tp\x00', 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r2, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, r3, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'veth0_to_bond\x00'}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000180)={0x80000001, 0x13}) 09:16:54 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x89fa, &(0x7f0000003dc0)={'ip6gre0\x00', 0x0}) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000080)='gtp\x00', 0xffffffffffffffff) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="240727bd70007fdbdf1d1600000800000100", @ANYRES32=0x0, @ANYBLOB="08000400ac14141b080002000000000008000500e000000208000500ac14143c08000100", @ANYRES32=0x0, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000580)='/dev/btrfs-control\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, r2) epoll_pwait(r2, &(0x7f0000000200)=[{}, {}, {}, {}, {}, {}], 0x6, 0x70, &(0x7f0000000280)={[0x81]}, 0x8) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000000)={0x80000001, 0x17}) 09:16:54 executing program 3: r0 = perf_event_open$cgroup(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = epoll_create(0x7) ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, &(0x7f00000000c0)) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000001c0)={0x20000005}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, 0xffffffffffffffff, &(0x7f0000000080)={0xc0002008}) epoll_wait(r1, &(0x7f0000000100)=[{}], 0x1, 0x0) 09:16:54 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x2a4500, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000180)={0x80000001, 0x13}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000000)={'wg0\x00'}) 09:16:54 executing program 5: epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x2, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x10000, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00032abd7000fcdbdf25010000000c001000010000000000000014001f00ff01000000000000000007000000000108000b0002000006"], 0x3c}, 0x1, 0x0, 0x0, 0x4004}, 0x20000001) bind$l2tp6(0xffffffffffffffff, &(0x7f0000000300)={0xa, 0x0, 0xc6d, @loopback, 0x6, 0x2}, 0x20) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f0000000080)={0x50000010}) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r1, &(0x7f0000000040)={0x40000008}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000180)={0x80000001, 0x13}) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r2, 0x89fa, &(0x7f0000003dc0)={'ip6gre0\x00', 0x0}) [ 2500.364595] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2500.371365] batman_adv: batadv0: Removing interface: batadv_slave_0 09:16:54 executing program 3: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000580)='/dev/btrfs-control\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000580)='/dev/btrfs-control\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r1) r2 = perf_event_open$cgroup(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x7, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x3}, 0x0, 0x2}, r1, 0x0, 0xffffffffffffffff, 0x0) r3 = epoll_create(0x7) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f00000001c0)={0x20000005}) epoll_wait(r3, &(0x7f0000000100)=[{}], 0x1, 0x0) [ 2500.434053] batman_adv: batadv0: Interface deactivated: batadv_slave_1 09:16:54 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, &(0x7f0000000000)={0x1}) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000580)='/dev/btrfs-control\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r1) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000500)='/dev/vmci\x00', 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000540)=0x10000) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000004c0)=0x14) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000180)={0x80000001, 0x13}) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f00000001c0)={0x2c4, 0x0, 0x4, 0x70bd2a, 0x25dfdbfc, {}, [@WGDEVICE_A_PEERS={0x114, 0x8, 0x0, 0x1, [{0x2c, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x6}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0x8, @dev={0xfe, 0x80, [], 0x40}, 0x1ff}}]}, {0xb4, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x7f, @dev={0xfe, 0x80, [], 0x24}, 0x554439c8}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x6}, @WGPEER_A_FLAGS={0x8}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x6}}, @WGPEER_A_FLAGS={0x8}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "323194b13e1231089d9fdc6a2dd926a875d806e4e9f8da9ee17751b502ac0f18"}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg='\xdb\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff'}]}, {0x30, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g='\xd1s(\x99\xf6\x11\xcd\x89\x94\x03M\x7fA=\xc9Wc\x0eT\x93\xc2\x85\xac\xa4\x00e\xcbc\x11\xbeik'}, @WGPEER_A_FLAGS={0x8, 0x3, 0x2}]}]}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_PEERS={0x174, 0x8, 0x0, 0x1, [{0x30, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xdf}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g='\xd1s(\x99\xf6\x11\xcd\x89\x94\x03M\x7fA=\xc9Wc\x0eT\x93\xc2\x85\xac\xa4\x00e\xcbc\x11\xbeik'}]}, {0x24, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x5}}]}, {0x3c, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0x7, @private1={0xfc, 0x1, [], 0x1}, 0x1ff}}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_FLAGS={0x8, 0x3, 0x4}, @WGPEER_A_FLAGS={0x8, 0x3, 0x1}]}, {0x70, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x3a}, @WGPEER_A_FLAGS={0x8, 0x3, 0x4}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x8}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x100}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g='\xd1s(\x99\xf6\x11\xcd\x89\x94\x03M\x7fA=\xc9Wc\x0eT\x93\xc2\x85\xac\xa4\x00e\xcbc\x11\xbeik'}, @WGPEER_A_FLAGS={0x8}, @WGPEER_A_FLAGS={0x8, 0x3, 0x4}]}, {0x70, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "ce73ae08932e6af322c4c8291bda32c9dd1c4b59e8ae79cfb69a7b7ff93b4d6e"}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @rand_addr=0x64010100}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0xfffffc00, @local, 0x5}}]}]}]}, 0x2c4}, 0x1, 0x0, 0x0, 0x4}, 0x890) openat$vmci(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/vmci\x00', 0x2, 0x0) [ 2500.494707] batman_adv: batadv0: Removing interface: batadv_slave_1 09:16:55 executing program 3: r0 = perf_event_open$cgroup(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = epoll_create(0x7) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000001c0)={0x20000005}) epoll_wait(r1, &(0x7f0000000100)=[{}], 0x1, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r0, 0x810c5701, &(0x7f0000000200)) [ 2500.540872] device bridge_slave_1 left promiscuous mode [ 2500.561104] bridge0: port 2(bridge_slave_1) entered disabled state [ 2500.584743] device bridge_slave_0 left promiscuous mode [ 2500.609563] bridge0: port 1(bridge_slave_0) entered disabled state [ 2500.642990] device veth1_macvtap left promiscuous mode 09:16:55 executing program 3: r0 = perf_event_open$cgroup(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = epoll_create(0x7) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000001c0)={0x20000005}) epoll_wait(r1, &(0x7f0000000100)=[{}], 0x1, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) write$6lowpan_enable(r2, &(0x7f00000000c0)='1', 0x1) [ 2500.665372] device veth0_macvtap left promiscuous mode [ 2500.690795] device veth1_vlan left promiscuous mode [ 2500.704671] device veth0_vlan left promiscuous mode 09:16:55 executing program 3: r0 = perf_event_open$cgroup(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = epoll_create(0x7) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000001c0)={0x20000005}) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000080)={0xdf44, 0xfff, 0x6, 0xed, 0x6}, 0x14) epoll_wait(r1, &(0x7f0000000100)=[{}], 0x1, 0x0) 09:16:55 executing program 3: r0 = epoll_create(0x7) socket$l2tp(0x2, 0x2, 0x73) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f00000001c0)={0x20000005}) epoll_wait(r0, &(0x7f0000000100)=[{}], 0x1, 0x0) [ 2501.060411] device hsr_slave_1 left promiscuous mode [ 2501.097173] device hsr_slave_0 left promiscuous mode [ 2501.121176] syz-executor.1: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2501.124011] syz-executor.4: [ 2501.160251] team0 (unregistering): Port device team_slave_1 removed [ 2501.160986] page allocation failure: order:4 [ 2501.165791] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 2501.184535] team0 (unregistering): Port device team_slave_0 removed [ 2501.186599] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 2501.191080] CPU: 0 PID: 16227 Comm: syz-executor.1 Not tainted 4.14.229-syzkaller #0 [ 2501.199617] (null) [ 2501.206053] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2501.206057] Call Trace: [ 2501.206075] dump_stack+0x1b2/0x281 [ 2501.206088] warn_alloc.cold+0x96/0x1cc [ 2501.206101] ? zone_watermark_ok_safe+0x220/0x220 [ 2501.206122] __alloc_pages_nodemask+0x2127/0x2720 [ 2501.224548] syz-executor.4 cpuset= [ 2501.227883] ? lock_acquire+0x170/0x3f0 [ 2501.227900] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2501.249903] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2501.250413] / [ 2501.255356] ? __mutex_unlock_slowpath+0x75/0x770 [ 2501.261915] alloc_pages_current+0x155/0x260 [ 2501.265132] mems_allowed=0-1 [ 2501.266325] ion_page_pool_alloc+0x118/0x1b0 [ 2501.266335] ion_system_heap_allocate+0x133/0x8c0 [ 2501.278649] ? ion_alloc+0x187/0x810 [ 2501.282361] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2501.287820] ? ion_system_contig_heap_create+0x130/0x130 [ 2501.293278] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2501.298294] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2501.303141] ion_alloc+0x204/0x810 [ 2501.306672] ? ion_dma_buf_release+0x40/0x40 [ 2501.311079] ? __might_fault+0x177/0x1b0 [ 2501.315145] ion_ioctl+0xea/0x1f0 [ 2501.318595] ? ion_query_heaps+0x360/0x360 [ 2501.322834] ? ion_query_heaps+0x360/0x360 [ 2501.327068] do_vfs_ioctl+0x75a/0xff0 [ 2501.330863] ? ioctl_preallocate+0x1a0/0x1a0 [ 2501.335269] ? lock_downgrade+0x740/0x740 [ 2501.339427] ? __fget+0x225/0x360 [ 2501.342874] ? do_vfs_ioctl+0xff0/0xff0 [ 2501.346847] ? security_file_ioctl+0x83/0xb0 [ 2501.351249] SyS_ioctl+0x7f/0xb0 [ 2501.354618] ? do_vfs_ioctl+0xff0/0xff0 [ 2501.358604] do_syscall_64+0x1d5/0x640 [ 2501.362497] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2501.367677] RIP: 0033:0x466459 [ 2501.370865] RSP: 002b:00007f10b678e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2501.378570] RAX: ffffffffffffffda RBX: 000000000056c008 RCX: 0000000000466459 [ 2501.385834] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2501.393094] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2501.400407] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c008 [ 2501.407681] R13: 00007ffd58825dcf R14: 00007f10b678e300 R15: 0000000000022000 [ 2501.414956] CPU: 1 PID: 16239 Comm: syz-executor.4 Not tainted 4.14.229-syzkaller #0 [ 2501.422843] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2501.432193] Call Trace: [ 2501.434792] dump_stack+0x1b2/0x281 [ 2501.438459] warn_alloc.cold+0x96/0x1cc [ 2501.442437] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2501.447454] ? zone_watermark_ok_safe+0x220/0x220 [ 2501.452318] __alloc_pages_nodemask+0x2127/0x2720 [ 2501.457176] ? lock_acquire+0x170/0x3f0 [ 2501.461156] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2501.466005] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2501.471459] ? __mutex_unlock_slowpath+0x75/0x770 [ 2501.476300] ? ion_page_pool_alloc+0x28/0x1b0 [ 2501.480797] alloc_pages_current+0x155/0x260 [ 2501.485206] ion_page_pool_alloc+0x118/0x1b0 [ 2501.489741] ion_system_heap_allocate+0x133/0x8c0 [ 2501.494581] ? ion_alloc+0x187/0x810 [ 2501.498296] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2501.503744] ? ion_system_contig_heap_create+0x130/0x130 [ 2501.509204] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2501.514219] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2501.519062] ion_alloc+0x204/0x810 [ 2501.522606] ? ion_dma_buf_release+0x40/0x40 [ 2501.527065] ? __might_fault+0x177/0x1b0 [ 2501.529996] Mem-Info: [ 2501.531123] ion_ioctl+0xea/0x1f0 [ 2501.531134] ? ion_query_heaps+0x360/0x360 [ 2501.531145] ? __fdget+0x196/0x1f0 [ 2501.531156] ? fput+0xb/0x140 [ 2501.533702] active_anon:14896 inactive_anon:48663 isolated_anon:12 [ 2501.533702] active_file:1587 inactive_file:5875 isolated_file:36 [ 2501.533702] unevictable:0 dirty:95 writeback:0 unstable:0 [ 2501.533702] slab_reclaimable:12278 slab_unreclaimable:123100 [ 2501.533702] mapped:40363 shmem:49935 pagetables:707 bounce:0 [ 2501.533702] free:135264 free_pcp:482 free_cma:0 [ 2501.536979] ? ion_query_heaps+0x360/0x360 [ 2501.536990] do_vfs_ioctl+0x75a/0xff0 [ 2501.537002] ? ioctl_preallocate+0x1a0/0x1a0 [ 2501.537012] ? lock_downgrade+0x740/0x740 [ 2501.537024] ? __fget+0x225/0x360 [ 2501.541306] Node 0 active_anon:58212kB inactive_anon:125940kB active_file:3476kB inactive_file:18600kB unevictable:0kB isolated(anon):0kB isolated(file):96kB mapped:155840kB dirty:352kB writeback:0kB shmem:130552kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2501.544762] ? do_vfs_ioctl+0xff0/0xff0 [ 2501.544773] ? security_file_ioctl+0x83/0xb0 [ 2501.544783] SyS_ioctl+0x7f/0xb0 [ 2501.544791] ? do_vfs_ioctl+0xff0/0xff0 [ 2501.544803] do_syscall_64+0x1d5/0x640 [ 2501.544817] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2501.544824] RIP: 0033:0x466459 [ 2501.544828] RSP: 002b:00007f46becae188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2501.544836] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 2501.544840] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2501.544845] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2501.544850] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2501.544855] R13: 00007ffe96c50ebf R14: 00007f46becae300 R15: 0000000000022000 [ 2501.549073] syz-executor.5: [ 2501.601706] syz-executor.4: [ 2501.671802] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 2501.692929] Node 1 active_anon:1372kB inactive_anon:68712kB active_file:2872kB inactive_file:4900kB unevictable:0kB isolated(anon):48kB isolated(file):48kB mapped:5612kB dirty:28kB writeback:0kB shmem:69188kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2501.751940] page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2501.752104] page allocation failure: order:4 [ 2501.765893] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 2501.778499] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2501.797430] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 2501.798005] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 2501.807827] CPU: 0 PID: 16240 Comm: syz-executor.4 Not tainted 4.14.229-syzkaller #0 [ 2501.815704] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2501.825044] Call Trace: [ 2501.827627] dump_stack+0x1b2/0x281 [ 2501.831276] warn_alloc.cold+0x96/0x1cc [ 2501.835247] ? zone_watermark_ok_safe+0x220/0x220 [ 2501.840100] __alloc_pages_nodemask+0x2127/0x2720 [ 2501.844948] ? lock_acquire+0x170/0x3f0 [ 2501.848931] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2501.853773] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2501.859219] ? __mutex_unlock_slowpath+0x75/0x770 [ 2501.864065] alloc_pages_current+0x155/0x260 [ 2501.868463] ion_page_pool_alloc+0x118/0x1b0 [ 2501.872865] ion_system_heap_allocate+0x133/0x8c0 [ 2501.877701] ? ion_alloc+0x187/0x810 [ 2501.881400] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2501.886844] ? ion_system_contig_heap_create+0x130/0x130 [ 2501.892296] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2501.897303] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2501.902141] ion_alloc+0x204/0x810 [ 2501.905676] ? ion_dma_buf_release+0x40/0x40 [ 2501.910079] ? __might_fault+0x177/0x1b0 [ 2501.914131] ion_ioctl+0xea/0x1f0 [ 2501.917575] ? ion_query_heaps+0x360/0x360 [ 2501.921798] ? SyS_epoll_ctl+0x1e0/0x2780 [ 2501.925939] ? vmci_host_do_alloc_queuepair.constprop.0+0x350/0x350 [ 2501.932332] ? ion_query_heaps+0x360/0x360 [ 2501.936562] do_vfs_ioctl+0x75a/0xff0 [ 2501.940375] ? ioctl_preallocate+0x1a0/0x1a0 [ 2501.944785] ? lock_downgrade+0x740/0x740 [ 2501.948936] ? __fget+0x225/0x360 [ 2501.952382] ? do_vfs_ioctl+0xff0/0xff0 [ 2501.956346] ? security_file_ioctl+0x83/0xb0 [ 2501.960749] SyS_ioctl+0x7f/0xb0 [ 2501.964111] ? do_vfs_ioctl+0xff0/0xff0 [ 2501.968082] do_syscall_64+0x1d5/0x640 [ 2501.971965] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2501.977139] RIP: 0033:0x466459 [ 2501.980322] RSP: 002b:00007f46bec8d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2501.988024] RAX: ffffffffffffffda RBX: 000000000056c008 RCX: 0000000000466459 [ 2501.995381] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2502.002646] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2502.009910] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c008 [ 2502.017173] R13: 00007ffe96c50ebf R14: 00007f46bec8d300 R15: 0000000000022000 [ 2502.033968] CPU: 1 PID: 16223 Comm: syz-executor.5 Not tainted 4.14.229-syzkaller #0 [ 2502.037763] Node 0 [ 2502.041865] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2502.041869] Call Trace: [ 2502.041885] dump_stack+0x1b2/0x281 [ 2502.041897] warn_alloc.cold+0x96/0x1cc [ 2502.041907] ? zone_watermark_ok_safe+0x220/0x220 [ 2502.041928] __alloc_pages_nodemask+0x2127/0x2720 [ 2502.041935] ? retint_kernel+0x2d/0x2d [ 2502.041951] ? lock_acquire+0x170/0x3f0 [ 2502.041966] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2502.041984] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2502.041998] ? __mutex_unlock_slowpath+0x75/0x770 [ 2502.042013] alloc_pages_current+0x155/0x260 [ 2502.042033] ion_page_pool_alloc+0x118/0x1b0 [ 2502.042044] ion_system_heap_allocate+0x133/0x8c0 [ 2502.051808] DMA free:12040kB min:204kB low:252kB high:300kB active_anon:4kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2502.053607] ? ion_alloc+0x187/0x810 [ 2502.056165] lowmem_reserve[]: [ 2502.059793] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2502.071406] 0 [ 2502.073384] ? ion_system_contig_heap_create+0x130/0x130 [ 2502.073395] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2502.073407] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2502.077271] 2717 [ 2502.081228] ion_alloc+0x204/0x810 [ 2502.087990] 2718 [ 2502.091479] ? ion_dma_buf_release+0x40/0x40 [ 2502.096309] 2718 [ 2502.100683] ? __might_fault+0x177/0x1b0 [ 2502.105078] 2718 [ 2502.109889] ion_ioctl+0xea/0x1f0 [ 2502.139240] ? ion_query_heaps+0x360/0x360 [ 2502.142332] Node 0 [ 2502.147750] ? SyS_epoll_ctl+0x1e0/0x2780 [ 2502.149535] DMA32 free:484308kB min:36200kB low:45248kB high:54296kB active_anon:58288kB inactive_anon:125940kB active_file:3572kB inactive_file:18888kB unevictable:0kB writepending:392kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:7616kB pagetables:3108kB bounce:0kB free_pcp:156kB local_pcp:4kB free_cma:0kB [ 2502.154963] ? ion_query_heaps+0x360/0x360 [ 2502.154972] do_vfs_ioctl+0x75a/0xff0 [ 2502.154984] ? ioctl_preallocate+0x1a0/0x1a0 [ 2502.165770] lowmem_reserve[]: [ 2502.166853] ? lock_downgrade+0x740/0x740 [ 2502.170381] 0 [ 2502.172430] ? __fget+0x225/0x360 [ 2502.172440] ? do_vfs_ioctl+0xff0/0xff0 [ 2502.172450] ? security_file_ioctl+0x83/0xb0 [ 2502.172460] SyS_ioctl+0x7f/0xb0 [ 2502.176841] 0 [ 2502.178882] ? do_vfs_ioctl+0xff0/0xff0 [ 2502.185840] 0 [ 2502.188414] do_syscall_64+0x1d5/0x640 [ 2502.192645] 0 [ 2502.194845] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2502.198960] 0 [ 2502.227828] RIP: 0033:0x466459 [ 2502.227833] RSP: 002b:00007f4d0bcd5188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2502.227842] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 2502.227846] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2502.227851] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2502.227859] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2502.235851] R13: 00007ffe1117a98f R14: 00007f4d0bcd5300 R15: 0000000000022000 [ 2502.240230] Node 0 [ 2502.296398] bond0 (unregistering): Released all slaves [ 2502.313428] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2502.371758] lowmem_reserve[]: 0 0 0 0 0 [ 2502.376310] Node 1 Normal free:751628kB min:53696kB low:67120kB high:80544kB active_anon:1372kB inactive_anon:68712kB active_file:2944kB inactive_file:4824kB unevictable:0kB writepending:28kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:288kB pagetables:64kB bounce:0kB free_pcp:672kB local_pcp:672kB free_cma:0kB [ 2502.423538] lowmem_reserve[]: 0 0 0 0 0 [ 2502.427837] Node 0 DMA: 28*4kB (UME) 19*8kB (UME) 16*16kB (UME) 14*32kB (ME) 26*64kB (UME) 4*128kB (UM) 3*256kB (UME) 2*512kB (ME) 3*1024kB (UME) 2*2048kB (UM) 0*4096kB = 12104kB [ 2502.450531] Node 0 DMA32: 9503*4kB (UME) 11584*8kB (UME) 8477*16kB (UME) 3111*32kB (UME) 1171*64kB (UM) 608*128kB (UM) 50*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 531436kB [ 2502.483865] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2502.504607] Node 1 Normal: 5651*4kB (UM) 172*8kB (U) 586*16kB (UE) 1748*32kB (U) 8224*64kB (U) 887*128kB (U) 414*256kB (U) 77*512kB (U) 29*1024kB (U) 16*2048kB (U) 1*4096kB (U) = 941132kB [ 2502.521714] warn_alloc_show_mem: 2 callbacks suppressed [ 2502.521717] Mem-Info: [ 2502.546164] active_anon:14916 inactive_anon:48663 isolated_anon:0 [ 2502.546164] active_file:1629 inactive_file:5928 isolated_file:0 [ 2502.546164] unevictable:0 dirty:105 writeback:0 unstable:0 [ 2502.546164] slab_reclaimable:12278 slab_unreclaimable:122638 [ 2502.546164] mapped:57833 shmem:49935 pagetables:793 bounce:0 [ 2502.546164] free:370031 free_pcp:294 free_cma:0 [ 2502.575597] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2502.626067] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2502.633652] Node 0 active_anon:58292kB inactive_anon:125940kB active_file:3572kB inactive_file:18888kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:225700kB dirty:392kB writeback:0kB shmem:130552kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2502.655039] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2502.686016] Node 1 active_anon:1372kB inactive_anon:68712kB active_file:2944kB inactive_file:4824kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:5632kB dirty:28kB writeback:0kB shmem:69188kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2502.709818] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2502.731672] 57250 total pagecache pages [ 2502.742832] 0 pages in swap cache [ 2502.749616] Swap cache stats: add 0, delete 0, find 0/0 [ 2502.761633] Free swap = 0kB [ 2502.764721] Total swap = 0kB [ 2502.773243] 2097051 pages RAM [ 2502.778028] 0 pages HighMem/MovableOnly [ 2502.788627] 363848 pages reserved [ 2502.789838] Node 0 [ 2502.796659] 0 pages cma reserved [ 2502.797760] DMA free:12104kB min:204kB low:252kB high:300kB active_anon:4kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2502.905685] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2502.920595] Node 0 DMA32 free:226884kB min:36200kB low:45248kB high:54296kB active_anon:58360kB inactive_anon:125940kB active_file:3580kB inactive_file:18920kB unevictable:0kB writepending:440kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:7520kB pagetables:3108kB bounce:0kB free_pcp:380kB local_pcp:164kB free_cma:0kB [ 2502.996161] lowmem_reserve[]: 0 0 0 0 0 [ 2503.021258] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2503.051200] lowmem_reserve[]: 0 0 0 0 0 [ 2503.071646] Node 1 Normal free:941452kB min:53696kB low:67120kB high:80544kB active_anon:1372kB inactive_anon:68712kB active_file:2944kB inactive_file:4824kB unevictable:0kB writepending:28kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:288kB pagetables:64kB bounce:0kB free_pcp:1060kB local_pcp:672kB free_cma:0kB [ 2503.107928] lowmem_reserve[]: 0 0 0 0 0 [ 2503.122403] Node 0 DMA: 28*4kB (UME) 19*8kB (UME) 16*16kB (UME) 14*32kB (ME) 26*64kB (UME) 4*128kB (UM) 3*256kB (UME) 2*512kB (ME) 3*1024kB (UME) 2*2048kB (UM) 0*4096kB = 12104kB [ 2503.156209] Node 0 DMA32: 2*4kB (ME) 7*8kB (UME) 17*16kB (ME) 12*32kB (UME) 2*64kB (M) 236*128kB (UM) 55*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 45136kB [ 2503.186171] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2503.218908] Node 1 Normal: 3*4kB (UM) 0*8kB 1*16kB (E) 790*32kB (U) 8225*64kB (U) 889*128kB (U) 414*256kB (U) 77*512kB (U) 29*1024kB (U) 16*2048kB (U) 1*4096kB (U) = 877468kB [ 2503.268763] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2503.281448] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2503.303241] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2503.321806] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2503.340473] 57262 total pagecache pages [ 2503.349098] 0 pages in swap cache [ 2503.355956] Swap cache stats: add 0, delete 0, find 0/0 [ 2503.366997] Free swap = 0kB [ 2503.374477] Total swap = 0kB [ 2503.380840] 2097051 pages RAM [ 2503.387446] 0 pages HighMem/MovableOnly [ 2503.399007] 363848 pages reserved [ 2503.406560] 0 pages cma reserved [ 2504.461026] oom_reaper: reaped process 16227 (syz-executor.1), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 2504.530385] oom_reaper: reaped process 16240 (syz-executor.4), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 2504.553522] systemd-journal invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 2504.579775] systemd-journal cpuset=/ mems_allowed=0-1 [ 2504.597388] CPU: 1 PID: 16113 Comm: systemd-journal Not tainted 4.14.229-syzkaller #0 [ 2504.605366] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2504.614713] Call Trace: [ 2504.617301] dump_stack+0x1b2/0x281 [ 2504.620926] dump_header+0x178/0x82f [ 2504.624648] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2504.629749] ? ___ratelimit+0x2cd/0x530 [ 2504.633722] oom_kill_process.cold+0x10/0xa40 [ 2504.638309] out_of_memory+0xe3e/0x1190 [ 2504.642295] ? oom_killer_disable+0x1c0/0x1c0 [ 2504.646787] ? mutex_trylock+0x152/0x1a0 [ 2504.650847] __alloc_pages_nodemask+0x23e1/0x2720 [ 2504.655698] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2504.660549] alloc_pages_current+0x155/0x260 [ 2504.664955] filemap_fault+0x11a1/0x1ad0 [ 2504.669007] ext4_filemap_fault+0x84/0xb0 [ 2504.673136] __do_fault+0xfa/0x380 [ 2504.676657] __handle_mm_fault+0x2497/0x4620 [ 2504.681048] ? vm_insert_page+0x7c0/0x7c0 [ 2504.685183] ? mark_held_locks+0xa6/0xf0 [ 2504.689226] handle_mm_fault+0x455/0x9c0 [ 2504.693268] __do_page_fault+0x549/0xad0 [ 2504.697327] ? spurious_fault+0x640/0x640 [ 2504.701456] ? do_page_fault+0x60/0x500 [ 2504.705423] ? page_fault+0x2f/0x50 [ 2504.709026] page_fault+0x45/0x50 [ 2504.712459] RIP: 0001:0xffffffffffffffff [ 2504.716494] RSP: abc711e0:00007ffc597e91f0 EFLAGS: 7ffc597e9000 [ 2504.721548] syz-executor.4: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2504.739640] syz-executor.4: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2504.768528] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 2504.770802] Mem-Info: [ 2504.776165] active_anon:14964 inactive_anon:48669 isolated_anon:0 [ 2504.776165] active_file:37 inactive_file:9 isolated_file:0 [ 2504.776165] unevictable:0 dirty:44 writeback:0 unstable:0 [ 2504.776165] slab_reclaimable:12278 slab_unreclaimable:121249 [ 2504.776165] mapped:52927 shmem:49943 pagetables:793 bounce:0 [ 2504.776165] free:13963 free_pcp:138 free_cma:0 [ 2504.780085] CPU: 0 PID: 16239 Comm: syz-executor.4 Not tainted 4.14.229-syzkaller #0 [ 2504.813282] syz-executor.1: [ 2504.820968] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2504.820978] page allocation failure: order:0 [ 2504.823967] Call Trace: [ 2504.823987] dump_stack+0x1b2/0x281 [ 2504.823999] warn_alloc.cold+0x96/0x1cc [ 2504.824010] ? zone_watermark_ok_safe+0x220/0x220 [ 2504.824019] ? usleep_range+0x130/0x130 [ 2504.824027] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 2504.824037] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 2504.824049] ? run_timer_softirq+0x5a0/0x5a0 [ 2504.837120] syz-executor.4 cpuset= [ 2504.837879] __alloc_pages_nodemask+0x2127/0x2720 [ 2504.840437] / [ 2504.844056] ? lock_acquire+0x170/0x3f0 [ 2504.848085] Node 0 active_anon:58328kB inactive_anon:125940kB active_file:56kB inactive_file:48kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:211728kB dirty:72kB writeback:60kB shmem:130552kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2504.852850] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2504.852861] ? ion_page_pool_alloc+0x9e/0x1b0 [ 2504.852876] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2504.852896] alloc_pages_current+0x155/0x260 [ 2504.852910] ion_page_pool_alloc+0x118/0x1b0 [ 2504.860452] Node 1 active_anon:1592kB inactive_anon:68736kB active_file:48kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:44kB dirty:12kB writeback:32kB shmem:69220kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2504.861957] ion_system_heap_allocate+0x133/0x8c0 [ 2504.861968] ? ion_alloc+0x187/0x810 [ 2504.861978] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2504.861988] ? ion_system_contig_heap_create+0x130/0x130 [ 2504.866982] Node 0 [ 2504.871376] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2504.878467] mems_allowed=0-1 [ 2504.879717] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2504.894972] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 2504.913365] ion_alloc+0x204/0x810 [ 2504.913380] ? ion_dma_buf_release+0x40/0x40 [ 2504.913393] ? __might_fault+0x177/0x1b0 [ 2504.913405] ion_ioctl+0xea/0x1f0 [ 2504.913414] ? ion_query_heaps+0x360/0x360 [ 2504.913424] ? __fdget+0x196/0x1f0 [ 2504.913435] ? fput+0xb/0x140 [ 2504.921838] DMA free:10976kB min:204kB low:252kB high:300kB active_anon:4kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2504.922763] ? ion_query_heaps+0x360/0x360 [ 2504.928272] lowmem_reserve[]: [ 2504.932663] do_vfs_ioctl+0x75a/0xff0 [ 2504.932675] ? ioctl_preallocate+0x1a0/0x1a0 [ 2504.932685] ? lock_downgrade+0x740/0x740 [ 2504.932698] ? __fget+0x225/0x360 [ 2504.932707] ? do_vfs_ioctl+0xff0/0xff0 [ 2504.932718] ? security_file_ioctl+0x83/0xb0 [ 2504.932729] SyS_ioctl+0x7f/0xb0 [ 2504.953182] 0 [ 2504.964082] ? do_vfs_ioctl+0xff0/0xff0 [ 2504.964096] do_syscall_64+0x1d5/0x640 [ 2504.964110] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2504.964118] RIP: 0033:0x466459 [ 2504.964125] RSP: 002b:00007f46becae188 EFLAGS: 00000246 [ 2504.973729] (null) [ 2504.978078] ORIG_RAX: 0000000000000010 [ 2505.001404] 2717 [ 2505.005678] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 2505.009193] 2718 [ 2505.013577] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2505.013582] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2505.013587] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2505.013593] R13: 00007ffe96c50ebf R14: 00007f46becae300 R15: 0000000000022000 [ 2505.030151] Mem-Info: [ 2505.032744] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 2505.032765] CPU: 1 PID: 16227 Comm: syz-executor.1 Not tainted 4.14.229-syzkaller #0 [ 2505.032773] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2505.063202] active_anon:14972 inactive_anon:48669 isolated_anon:0 [ 2505.063202] active_file:17 inactive_file:17 isolated_file:0 [ 2505.063202] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2505.063202] slab_reclaimable:12279 slab_unreclaimable:121229 [ 2505.063202] mapped:52927 shmem:49943 pagetables:793 bounce:0 [ 2505.063202] free:13983 free_pcp:138 free_cma:0 [ 2505.065753] Call Trace: [ 2505.069540] Node 0 active_anon:58300kB inactive_anon:125940kB active_file:56kB inactive_file:56kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:211708kB dirty:0kB writeback:0kB shmem:130552kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2505.073926] dump_stack+0x1b2/0x281 [ 2505.073940] warn_alloc.cold+0x96/0x1cc [ 2505.073950] ? trace_event_raw_event_rdev_get_mpp+0x230/0x310 [ 2505.073962] ? zone_watermark_ok_safe+0x220/0x220 [ 2505.078090] Node 1 active_anon:1588kB inactive_anon:68736kB active_file:12kB inactive_file:12kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:69220kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2505.081514] ? usleep_range+0x130/0x130 [ 2505.081524] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 2505.081536] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 2505.085483] Node 0 [ 2505.089871] ? run_timer_softirq+0x5a0/0x5a0 [ 2505.093245] DMA free:10976kB min:204kB low:252kB high:300kB active_anon:4kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2505.095006] __alloc_pages_nodemask+0x2127/0x2720 [ 2505.098942] lowmem_reserve[]: [ 2505.102816] ? lock_acquire+0x170/0x3f0 [ 2505.102832] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2505.107991] 0 [ 2505.111165] ? ion_page_pool_alloc+0x9e/0x1b0 [ 2505.116513] 2717 [ 2505.118637] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2505.122591] 2718 [ 2505.124625] ? check_preemption_disabled+0x35/0x240 [ 2505.131879] 2718 [ 2505.133919] alloc_pages_current+0x155/0x260 [ 2505.141175] 2718 [ 2505.148444] ion_page_pool_alloc+0x118/0x1b0 [ 2505.148456] ion_system_heap_allocate+0x133/0x8c0 [ 2505.148468] ? ion_alloc+0x187/0x810 [ 2505.162980] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2505.162990] ? ion_system_contig_heap_create+0x130/0x130 [ 2505.163003] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2505.165387] Node 0 [ 2505.170479] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2505.178371] DMA32 free:18176kB min:36200kB low:45248kB high:54296kB active_anon:58296kB inactive_anon:125940kB active_file:56kB inactive_file:56kB unevictable:0kB writepending:0kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:7520kB pagetables:3108kB bounce:0kB free_pcp:340kB local_pcp:220kB free_cma:0kB [ 2505.187692] ion_alloc+0x204/0x810 [ 2505.187720] ? ion_dma_buf_release+0x40/0x40 [ 2505.221027] lowmem_reserve[]: [ 2505.223583] ? __might_fault+0x177/0x1b0 [ 2505.223596] ion_ioctl+0xea/0x1f0 [ 2505.251456] 0 [ 2505.255043] ? ion_query_heaps+0x360/0x360 [ 2505.258983] 0 [ 2505.264852] ? ion_query_heaps+0x360/0x360 [ 2505.264862] do_vfs_ioctl+0x75a/0xff0 [ 2505.264874] ? ioctl_preallocate+0x1a0/0x1a0 [ 2505.264887] ? lock_downgrade+0x740/0x740 [ 2505.269705] 0 [ 2505.296596] ? __fget+0x225/0x360 [ 2505.296605] ? do_vfs_ioctl+0xff0/0xff0 [ 2505.296615] ? security_file_ioctl+0x83/0xb0 [ 2505.296625] SyS_ioctl+0x7f/0xb0 [ 2505.300574] 0 [ 2505.305654] ? do_vfs_ioctl+0xff0/0xff0 [ 2505.305665] do_syscall_64+0x1d5/0x640 [ 2505.305680] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2505.310683] 0 [ 2505.312901] RIP: 0033:0x466459 [ 2505.312906] RSP: 002b:00007f10b678e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2505.312916] RAX: ffffffffffffffda RBX: 000000000056c008 RCX: 0000000000466459 [ 2505.312923] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2505.342868] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2505.342873] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c008 [ 2505.342878] R13: 00007ffd58825dcf R14: 00007f10b678e300 R15: 0000000000022000 [ 2505.346743] CPU: 1 PID: 16240 Comm: syz-executor.4 Not tainted 4.14.229-syzkaller #0 [ 2505.349177] Node 0 [ 2505.350830] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2505.367257] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2505.367905] Call Trace: [ 2505.373357] lowmem_reserve[]: [ 2505.375394] dump_stack+0x1b2/0x281 [ 2505.380373] 0 [ 2505.382423] warn_alloc.cold+0x96/0x1cc [ 2505.382434] ? zone_watermark_ok_safe+0x220/0x220 [ 2505.382445] ? usleep_range+0x130/0x130 [ 2505.386826] 0 [ 2505.388875] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 2505.393270] 0 [ 2505.398080] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 2505.401775] 0 [ 2505.407200] ? run_timer_softirq+0x5a0/0x5a0 [ 2505.412744] 0 [ 2505.417735] __alloc_pages_nodemask+0x2127/0x2720 [ 2505.424800] ? lock_acquire+0x170/0x3f0 [ 2505.424818] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2505.453173] Node 1 [ 2505.456680] ? ion_page_pool_alloc+0x9e/0x1b0 [ 2505.461069] Normal free:26780kB min:53696kB low:67120kB high:80544kB active_anon:1588kB inactive_anon:68736kB active_file:12kB inactive_file:12kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:288kB pagetables:64kB bounce:0kB free_pcp:212kB local_pcp:120kB free_cma:0kB [ 2505.464149] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2505.464164] ? __sanitizer_cov_trace_pc+0x9/0x50 [ 2505.468195] lowmem_reserve[]: [ 2505.471633] alloc_pages_current+0x155/0x260 [ 2505.471646] ion_page_pool_alloc+0x118/0x1b0 [ 2505.473421] 0 [ 2505.477637] ion_system_heap_allocate+0x133/0x8c0 [ 2505.479410] 0 [ 2505.483625] ? ion_alloc+0x187/0x810 [ 2505.483636] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2505.483646] ? ion_system_contig_heap_create+0x130/0x130 [ 2505.487418] 0 [ 2505.491806] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2505.491816] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2505.491827] ion_alloc+0x204/0x810 [ 2505.495946] 0 [ 2505.497733] ? ion_dma_buf_release+0x40/0x40 [ 2505.501154] 0 [ 2505.505116] ? __might_fault+0x177/0x1b0 [ 2505.505126] ion_ioctl+0xea/0x1f0 [ 2505.505136] ? ion_query_heaps+0x360/0x360 [ 2505.512868] ? SyS_epoll_ctl+0x1e0/0x2780 [ 2505.512881] ? vmci_host_do_alloc_queuepair.constprop.0+0x350/0x350 [ 2505.512890] ? ion_query_heaps+0x360/0x360 [ 2505.514666] Node 0 [ 2505.518619] do_vfs_ioctl+0x75a/0xff0 [ 2505.522494] DMA: [ 2505.527652] ? ioctl_preallocate+0x1a0/0x1a0 [ 2505.529426] 14*4kB [ 2505.532596] ? lock_downgrade+0x740/0x740 [ 2505.532609] ? __fget+0x225/0x360 [ 2505.532619] ? do_vfs_ioctl+0xff0/0xff0 [ 2505.540297] (UME) [ 2505.547549] ? security_file_ioctl+0x83/0xb0 [ 2505.547560] SyS_ioctl+0x7f/0xb0 [ 2505.547569] ? do_vfs_ioctl+0xff0/0xff0 [ 2505.554831] 17*8kB [ 2505.562081] do_syscall_64+0x1d5/0x640 [ 2505.562098] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2505.569342] (ME) [ 2505.576704] RIP: 0033:0x466459 [ 2505.576709] RSP: 002b:00007f46bec8d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2505.576718] RAX: ffffffffffffffda RBX: 000000000056c008 RCX: 0000000000466459 [ 2505.576725] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2505.584596] 14*16kB [ 2505.586799] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2505.596186] (UME) [ 2505.621027] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c008 [ 2505.621033] R13: 00007ffe96c50ebf R14: 00007f46bec8d300 R15: 0000000000022000 [ 2505.623156] 2718 [ 2505.636376] 14*32kB [ 2505.641394] 2718 [ 2505.651776] (ME) [ 2505.658713] 10*64kB [ 2505.660499] Node 0 [ 2505.676517] (ME) [ 2505.681355] DMA32 free:18176kB min:36200kB low:45248kB high:54296kB active_anon:58296kB inactive_anon:125940kB active_file:56kB inactive_file:56kB unevictable:0kB writepending:0kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:7520kB pagetables:3108kB bounce:0kB free_pcp:340kB local_pcp:120kB free_cma:0kB [ 2505.689076] 4*128kB [ 2505.715166] Bluetooth: hci0 command 0x0409 tx timeout [ 2505.716148] lowmem_reserve[]: [ 2505.751780] IPVS: ftp: loaded support on port[0] = 21 [ 2505.755345] 0 [ 2505.810694] (UM) [ 2505.812926] Bluetooth: hci3 command 0x0409 tx timeout [ 2505.839415] 3*256kB [ 2505.848298] 0 [ 2505.924106] (UME) [ 2505.926040] 0 [ 2505.980248] 2*512kB [ 2505.983325] 0 [ 2505.989906] (ME) [ 2505.992153] 0 [ 2506.001315] 3*1024kB [ 2506.003323] (UME) [ 2506.005694] Node 0 [ 2506.007132] 2*2048kB [ 2506.009803] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2506.043433] lowmem_reserve[]: 0 0 0 0 0 [ 2506.047939] Node 1 Normal free:199376kB min:53696kB low:67120kB high:80544kB active_anon:1600kB inactive_anon:68736kB active_file:16kB inactive_file:2796kB unevictable:0kB writepending:88kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:288kB pagetables:64kB bounce:0kB free_pcp:272kB local_pcp:120kB free_cma:0kB [ 2506.061325] (UM) [ 2506.081232] IPVS: ftp: loaded support on port[0] = 21 [ 2506.138603] 0*4096kB = 10976kB [ 2506.140561] warn_alloc_show_mem: 1 callbacks suppressed [ 2506.140565] Mem-Info: [ 2506.151488] Node 0 DMA32: 64*4kB (E) 20*8kB (UME) 135*16kB (UME) 44*32kB (UME) 428*64kB (UM) 106*128kB (UM) 35*256kB (UM) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 53904kB [ 2506.153836] active_anon:14975 inactive_anon:48669 isolated_anon:0 [ 2506.153836] active_file:18 inactive_file:1388 isolated_file:0 [ 2506.153836] unevictable:0 dirty:22 writeback:0 unstable:0 [ 2506.153836] slab_reclaimable:12279 slab_unreclaimable:121281 [ 2506.153836] mapped:53987 shmem:49943 pagetables:793 bounce:0 [ 2506.153836] free:80382 free_pcp:130 free_cma:0 [ 2506.211319] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2506.217411] lowmem_reserve[]: 0 0 0 0 0 [ 2506.248521] Node 0 DMA: 14*4kB (UME) 17*8kB (ME) 14*16kB (UME) 14*32kB (ME) 11*64kB (UME) 4*128kB (UM) 3*256kB (UME) 2*512kB (ME) 3*1024kB (UME) 2*2048kB (UM) 0*4096kB = 11040kB [ 2506.248786] Node 1 [ 2506.290501] Node 0 [ 2506.302201] Normal: 10*4kB (M) 0*8kB 3*16kB (UME) 7*32kB (UM) 1079*64kB (UM) 149*128kB (UM) 79*256kB (UM) 7*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 112248kB [ 2506.309504] DMA32: 65*4kB (UE) 19*8kB (ME) 81*16kB (UME) 52*32kB (UME) 293*64kB (UM) 106*128kB (UM) 35*256kB (UM) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 44652kB [ 2506.363966] Node 0 active_anon:58300kB inactive_anon:125940kB active_file:524kB inactive_file:636kB unevictable:0kB isolated(anon):0kB isolated(file):128kB mapped:212708kB dirty:0kB writeback:0kB shmem:130552kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2506.391300] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2506.420068] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2506.437132] Node 1 Normal: 79*4kB (UM) 38*8kB (UM) 45*16kB (UME) 25*32kB (UM) 18*64kB (M) 55*128kB (UM) 79*256kB (UM) 7*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 34140kB [ 2506.440595] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2506.455194] Node 1 active_anon:1600kB inactive_anon:68736kB active_file:56kB inactive_file:68kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:40kB dirty:88kB writeback:0kB shmem:69220kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2506.482097] syz-executor.1: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2506.495404] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2506.504877] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2506.515458] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2506.519063] syz-executor.1 cpuset= [ 2506.528692] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2506.529680] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2506.532647] / [ 2506.554410] 49992 total pagecache pages [ 2506.558715] Node 0 DMA free:10976kB min:204kB low:252kB high:300kB active_anon:4kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2506.560092] 0 pages in swap cache [ 2506.560100] Swap cache stats: add 0, delete 0, find 0/0 [ 2506.595175] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2506.600001] mems_allowed=0-1 [ 2506.607935] CPU: 0 PID: 16227 Comm: syz-executor.1 Not tainted 4.14.229-syzkaller #0 [ 2506.615813] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2506.616502] 49992 total pagecache pages [ 2506.625159] Call Trace: [ 2506.625180] dump_stack+0x1b2/0x281 [ 2506.625192] warn_alloc.cold+0x96/0x1cc [ 2506.625204] ? zone_watermark_ok_safe+0x220/0x220 [ 2506.625226] __alloc_pages_nodemask+0x2127/0x2720 [ 2506.625237] ? lock_acquire+0x170/0x3f0 [ 2506.625249] ? lock_acquire+0x170/0x3f0 [ 2506.639051] 0 pages in swap cache [ 2506.639342] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2506.644453] Swap cache stats: add 0, delete 0, find 0/0 [ 2506.648991] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2506.662926] lowmem_reserve[]: [ 2506.665149] ? __mutex_unlock_slowpath+0x75/0x770 [ 2506.670481] 0 [ 2506.675934] alloc_pages_current+0x155/0x260 [ 2506.675948] ion_page_pool_alloc+0x118/0x1b0 [ 2506.675958] ion_system_heap_allocate+0x133/0x8c0 [ 2506.675969] ? _raw_spin_unlock+0x29/0x40 [ 2506.675978] ? _ion_heap_freelist_drain+0x6e/0x410 [ 2506.675986] ? ion_system_contig_heap_create+0x130/0x130 [ 2506.675996] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2506.676006] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2506.676017] ion_alloc+0x27a/0x810 [ 2506.676030] ? ion_dma_buf_release+0x40/0x40 [ 2506.676041] ? __might_fault+0x177/0x1b0 [ 2506.688833] Free swap = 0kB [ 2506.690121] ion_ioctl+0xea/0x1f0 [ 2506.694549] Total swap = 0kB [ 2506.699329] ? ion_query_heaps+0x360/0x360 [ 2506.713194] 2717 [ 2506.713814] ? ion_query_heaps+0x360/0x360 [ 2506.718797] 2718 [ 2506.723621] do_vfs_ioctl+0x75a/0xff0 [ 2506.723633] ? ioctl_preallocate+0x1a0/0x1a0 [ 2506.723643] ? lock_downgrade+0x740/0x740 [ 2506.723655] ? __fget+0x225/0x360 [ 2506.723663] ? do_vfs_ioctl+0xff0/0xff0 [ 2506.723675] ? security_file_ioctl+0x83/0xb0 [ 2506.723685] SyS_ioctl+0x7f/0xb0 [ 2506.723694] ? do_vfs_ioctl+0xff0/0xff0 [ 2506.723704] do_syscall_64+0x1d5/0x640 [ 2506.723718] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2506.723726] RIP: 0033:0x466459 [ 2506.723730] RSP: 002b:00007f10b678e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2506.723742] RAX: ffffffffffffffda RBX: 000000000056c008 RCX: 0000000000466459 [ 2506.737357] 2097051 pages RAM [ 2506.738718] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2506.744538] 2718 [ 2506.745154] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2506.749368] 2718 [ 2506.751410] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c008 [ 2506.751415] R13: 00007ffd58825dcf R14: 00007f10b678e300 R15: 0000000000022000 [ 2506.771388] Free swap = 0kB [ 2506.778105] 0 pages HighMem/MovableOnly [ 2506.796063] Total swap = 0kB [ 2506.803003] 363848 pages reserved [ 2506.817410] 2097051 pages RAM [ 2506.837123] 0 pages HighMem/MovableOnly [ 2506.847917] 0 pages cma reserved [ 2506.865617] 363848 pages reserved [ 2506.873297] Node 0 DMA32 free:18116kB min:36200kB low:45248kB high:54296kB active_anon:58296kB inactive_anon:125940kB active_file:52kB inactive_file:48kB unevictable:0kB writepending:24kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:7552kB pagetables:3108kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2506.882851] 0 pages cma reserved [ 2506.918575] Out of memory (oom_kill_allocating_task): Kill process 16113 (systemd-journal) score 0 or sacrifice child [ 2506.930065] Killed process 16113 (systemd-journal) total-vm:46096kB, anon-rss:476kB, file-rss:0kB, shmem-rss:2656kB [ 2506.968223] lowmem_reserve[]: 0 0 0 0 0 [ 2506.981304] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2507.029097] chnl_net:caif_netlink_parms(): no params data found [ 2507.029416] lowmem_reserve[]: [ 2507.041306] systemd[1]: systemd-journald.service: Failed with result 'signal'. [ 2507.062135] 0 0 0 0 0 [ 2507.064680] Node 1 Normal free:137052kB min:53696kB low:67120kB high:80544kB active_anon:1604kB inactive_anon:68736kB active_file:104kB inactive_file:5224kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:320kB pagetables:64kB bounce:0kB free_pcp:1352kB local_pcp:632kB free_cma:0kB [ 2507.102130] systemd[1]: systemd-journald.service: Service has no hold-off time, scheduling restart. [ 2507.149161] Mem-Info: [ 2507.151972] active_anon:14901 inactive_anon:48669 isolated_anon:0 [ 2507.151972] active_file:141 inactive_file:1666 isolated_file:0 [ 2507.151972] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2507.151972] slab_reclaimable:12273 slab_unreclaimable:121268 [ 2507.151972] mapped:53452 shmem:49943 pagetables:756 bounce:0 [ 2507.151972] free:56919 free_pcp:713 free_cma:0 [ 2507.192984] systemd[1]: Stopped Journal Service. [ 2507.232564] lowmem_reserve[]: 0 0 0 0 0 [ 2507.241815] Node 0 DMA: 21*4kB (UME) 21*8kB (UME) 14*16kB (UME) 14*32kB (ME) 12*64kB (UME) 4*128kB (UM) 3*256kB (UME) 2*512kB (ME) 3*1024kB (UME) 2*2048kB (UM) 0*4096kB = 11164kB [ 2507.259171] Node 0 active_anon:57900kB inactive_anon:125940kB active_file:1060kB inactive_file:4240kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:209908kB dirty:0kB writeback:0kB shmem:130552kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2507.266470] systemd[1]: Starting Journal Service... [ 2507.321535] Node 0 DMA32: 10236*4kB (UEH) 1625*8kB (UMEH) 359*16kB (UME) 136*32kB (UMEH) 432*64kB (UM) 14*128kB (UM) 33*256kB (UM) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 101928kB [ 2507.351643] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2507.377349] Node 1 active_anon:1604kB inactive_anon:68736kB active_file:1304kB inactive_file:4124kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:4500kB dirty:0kB writeback:0kB shmem:69220kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2507.407042] Node 1 Normal: 3006*4kB (UM) 271*8kB (UM) 257*16kB (UME) 407*32kB (U) 1781*64kB (U) 135*128kB (UM) 79*256kB (UM) 15*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 190496kB [ 2507.429091] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2507.446587] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2507.455886] Node 0 DMA free:11244kB min:204kB low:252kB high:300kB active_anon:4kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2507.487056] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2507.511351] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2507.520071] 53046 total pagecache pages [ 2507.536433] chnl_net:caif_netlink_parms(): no params data found [ 2507.555577] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2507.560757] Node 0 DMA32 free:129392kB min:36200kB low:45248kB high:54296kB active_anon:58296kB inactive_anon:125940kB active_file:1360kB inactive_file:5540kB unevictable:0kB writepending:0kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:7648kB pagetables:2960kB bounce:0kB free_pcp:1248kB local_pcp:592kB free_cma:0kB [ 2507.591908] systemd-journald[16419]: File /run/log/journal/04d8c135ee6b410280ba31a58c89679d/system.journal corrupted or uncleanly shut down, renaming and replacing. [ 2507.608317] 0 pages in swap cache [ 2507.620969] Swap cache stats: add 0, delete 0, find 0/0 [ 2507.645762] bridge0: port 1(bridge_slave_0) entered blocking state [ 2507.656420] Free swap = 0kB [ 2507.659450] Total swap = 0kB [ 2507.664195] bridge0: port 1(bridge_slave_0) entered disabled state [ 2507.675024] 2097051 pages RAM [ 2507.678142] 0 pages HighMem/MovableOnly [ 2507.683934] device bridge_slave_0 entered promiscuous mode [ 2507.690036] 363848 pages reserved [ 2507.697627] 0 pages cma reserved [ 2507.707212] bridge0: port 2(bridge_slave_1) entered blocking state [ 2507.722110] lowmem_reserve[]: 0 0 0 0 0 [ 2507.726145] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2507.751960] bridge0: port 2(bridge_slave_1) entered disabled state [ 2507.759274] device bridge_slave_1 entered promiscuous mode [ 2507.771434] Bluetooth: hci0 command 0x041b tx timeout [ 2507.826583] lowmem_reserve[]: 0 0 0 0 0 [ 2507.830655] Node 1 Normal free:268716kB min:53696kB low:67120kB high:80544kB active_anon:1604kB inactive_anon:68736kB active_file:2204kB inactive_file:3184kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:288kB pagetables:64kB bounce:0kB free_pcp:1256kB local_pcp:620kB free_cma:0kB [ 2507.860213] Bluetooth: hci3 command 0x041b tx timeout [ 2507.890414] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 2507.926858] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 2507.941446] lowmem_reserve[]: 0 0 0 0 0 [ 2507.945492] Node 0 DMA: 21*4kB (UME) 29*8kB (UME) 16*16kB (UME) 14*32kB (ME) 12*64kB (UME) 4*128kB (UM) 3*256kB (UME) 2*512kB (ME) 3*1024kB (UME) 2*2048kB (UM) 0*4096kB = 11260kB [ 2508.005057] Node 0 DMA32: 10781*4kB (UMEH) 4783*8kB (UMEH) 1073*16kB (UME) 924*32kB (UMEH) 839*64kB (UH) 29*128kB (U) 26*256kB (UM) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 192188kB [ 2508.051859] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 2508.071604] team0: Port device team_slave_0 added [ 2508.096602] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2508.124934] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2508.136100] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2508.148507] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2508.165931] Node 1 Normal: 5735*4kB (UM) 457*8kB (UM) 432*16kB (UME) 586*32kB (U) 1802*64kB (U) 1080*128kB (UM) 111*256kB (UM) 16*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 342436kB [ 2508.187943] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2508.207084] device bridge_slave_1 left promiscuous mode [ 2508.225738] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2508.234849] bridge0: port 2(bridge_slave_1) entered disabled state [ 2508.252060] device bridge_slave_0 left promiscuous mode [ 2508.257582] bridge0: port 1(bridge_slave_0) entered disabled state [ 2508.267554] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2508.291215] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2508.300079] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2508.325614] device veth1_macvtap left promiscuous mode [ 2508.331049] device veth0_macvtap left promiscuous mode [ 2508.353383] device veth1_vlan left promiscuous mode [ 2508.358471] device veth0_vlan left promiscuous mode [ 2508.365095] 55329 total pagecache pages [ 2508.369093] 0 pages in swap cache [ 2508.382992] Swap cache stats: add 0, delete 0, find 0/0 [ 2508.388375] Free swap = 0kB [ 2508.410212] Total swap = 0kB [ 2508.428051] 2097051 pages RAM [ 2508.446706] 0 pages HighMem/MovableOnly [ 2508.450768] 363848 pages reserved [ 2508.475918] 0 pages cma reserved [ 2508.810193] systemd[1]: Started Journal Service. [ 2508.845632] device hsr_slave_1 left promiscuous mode [ 2508.871120] device hsr_slave_0 left promiscuous mode [ 2508.931635] team0 (unregistering): Port device team_slave_1 removed [ 2508.965960] team0 (unregistering): Port device team_slave_0 removed [ 2509.006117] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 2509.039050] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 2509.052147] syz-executor.4: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2509.055988] syz-executor.4: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2509.101118] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 2509.106302] CPU: 1 PID: 16239 Comm: syz-executor.4 Not tainted 4.14.229-syzkaller #0 [ 2509.114176] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2509.123521] Call Trace: [ 2509.126111] dump_stack+0x1b2/0x281 [ 2509.127699] bond0 (unregistering): Released all slaves [ 2509.129751] warn_alloc.cold+0x96/0x1cc [ 2509.138991] ? zone_watermark_ok_safe+0x220/0x220 [ 2509.143846] __alloc_pages_nodemask+0x2127/0x2720 [ 2509.148688] ? check_preemption_disabled+0x35/0x240 [ 2509.153706] ? lock_acquire+0x170/0x3f0 [ 2509.157684] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2509.162624] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2509.168072] ? __mutex_unlock_slowpath+0x75/0x770 [ 2509.172911] ? alloc_pages_current+0x16/0x260 [ 2509.177403] alloc_pages_current+0x155/0x260 [ 2509.181813] ion_page_pool_alloc+0x118/0x1b0 [ 2509.186218] ion_system_heap_allocate+0x133/0x8c0 [ 2509.191059] ? _raw_spin_unlock+0x29/0x40 [ 2509.195199] ? _ion_heap_freelist_drain+0x6e/0x410 [ 2509.200122] ? ion_system_contig_heap_create+0x130/0x130 [ 2509.205567] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2509.210581] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2509.215422] ion_alloc+0x27a/0x810 [ 2509.218959] ? ion_dma_buf_release+0x40/0x40 [ 2509.223363] ? __might_fault+0x177/0x1b0 [ 2509.227419] ion_ioctl+0xea/0x1f0 [ 2509.230864] ? ion_query_heaps+0x360/0x360 [ 2509.235098] ? __fdget+0x196/0x1f0 [ 2509.238638] ? fput+0xb/0x140 [ 2509.241732] ? ion_query_heaps+0x360/0x360 [ 2509.245968] do_vfs_ioctl+0x75a/0xff0 [ 2509.249769] ? ioctl_preallocate+0x1a0/0x1a0 [ 2509.254169] ? lock_downgrade+0x740/0x740 [ 2509.258315] ? __fget+0x225/0x360 [ 2509.261764] ? do_vfs_ioctl+0xff0/0xff0 [ 2509.265737] ? security_file_ioctl+0x83/0xb0 [ 2509.270142] SyS_ioctl+0x7f/0xb0 [ 2509.273500] ? do_vfs_ioctl+0xff0/0xff0 [ 2509.277469] do_syscall_64+0x1d5/0x640 [ 2509.281383] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2509.286563] RIP: 0033:0x466459 [ 2509.289744] RSP: 002b:00007f46becae188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2509.297478] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 2509.304740] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2509.311999] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2509.319262] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2509.326522] R13: 00007ffe96c50ebf R14: 00007f46becae300 R15: 0000000000022000 [ 2509.337508] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 2509.365407] CPU: 1 PID: 16240 Comm: syz-executor.4 Not tainted 4.14.229-syzkaller #0 [ 2509.373303] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2509.382649] Call Trace: [ 2509.385236] dump_stack+0x1b2/0x281 [ 2509.388864] warn_alloc.cold+0x96/0x1cc [ 2509.392838] ? zone_watermark_ok_safe+0x220/0x220 [ 2509.397694] __alloc_pages_nodemask+0x2127/0x2720 [ 2509.402595] ? lock_acquire+0x170/0x3f0 [ 2509.406568] ? lock_acquire+0x170/0x3f0 [ 2509.410547] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2509.415395] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2509.420848] ? __mutex_unlock_slowpath+0x75/0x770 [ 2509.425687] ? retint_kernel+0x2d/0x2d [ 2509.429587] alloc_pages_current+0x155/0x260 [ 2509.433999] ion_page_pool_alloc+0x118/0x1b0 [ 2509.438405] ion_system_heap_allocate+0x133/0x8c0 [ 2509.443242] ? _raw_spin_unlock+0x29/0x40 [ 2509.447382] ? _ion_heap_freelist_drain+0x6e/0x410 [ 2509.452306] ? ion_system_contig_heap_create+0x130/0x130 [ 2509.457754] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2509.462796] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2509.467638] ion_alloc+0x27a/0x810 [ 2509.471176] ? ion_dma_buf_release+0x40/0x40 [ 2509.475580] ? __might_fault+0x177/0x1b0 [ 2509.479645] ion_ioctl+0xea/0x1f0 [ 2509.483094] ? ion_query_heaps+0x360/0x360 [ 2509.487325] ? SyS_epoll_ctl+0x1e0/0x2780 [ 2509.491470] ? vmci_host_do_alloc_queuepair.constprop.0+0x350/0x350 [ 2509.497866] ? ion_query_heaps+0x360/0x360 [ 2509.502095] do_vfs_ioctl+0x75a/0xff0 [ 2509.505893] ? ioctl_preallocate+0x1a0/0x1a0 [ 2509.510294] ? lock_downgrade+0x740/0x740 [ 2509.514442] ? __fget+0x225/0x360 [ 2509.517888] ? do_vfs_ioctl+0xff0/0xff0 [ 2509.521862] ? security_file_ioctl+0x83/0xb0 [ 2509.526263] SyS_ioctl+0x7f/0xb0 [ 2509.529623] ? do_vfs_ioctl+0xff0/0xff0 [ 2509.533597] do_syscall_64+0x1d5/0x640 [ 2509.537487] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2509.542668] RIP: 0033:0x466459 [ 2509.545935] RSP: 002b:00007f46bec8d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2509.553638] RAX: ffffffffffffffda RBX: 000000000056c008 RCX: 0000000000466459 [ 2509.560899] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2509.568163] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2509.575424] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c008 [ 2509.581029] Mem-Info: [ 2509.582685] R13: 00007ffe96c50ebf R14: 00007f46bec8d300 R15: 0000000000022000 [ 2509.585100] active_anon:14857 inactive_anon:50700 isolated_anon:0 [ 2509.585100] active_file:1371 inactive_file:2038 isolated_file:0 [ 2509.585100] unevictable:0 dirty:25 writeback:0 unstable:0 [ 2509.585100] slab_reclaimable:12256 slab_unreclaimable:121953 [ 2509.585100] mapped:54743 shmem:51991 pagetables:743 bounce:0 [ 2509.585100] free:273944 free_pcp:498 free_cma:0 [ 2509.592584] bridge0: port 1(bridge_slave_0) entered blocking state [ 2509.671459] bridge0: port 1(bridge_slave_0) entered disabled state [ 2509.678765] device bridge_slave_0 entered promiscuous mode [ 2509.702323] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 2509.709470] team0: Port device team_slave_1 added [ 2509.715191] Node 0 active_anon:58188kB inactive_anon:134064kB active_file:2760kB inactive_file:5508kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:214236kB dirty:56kB writeback:0kB shmem:138744kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2509.781268] Node 1 active_anon:1240kB inactive_anon:68736kB active_file:2724kB inactive_file:2644kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:4736kB dirty:44kB writeback:0kB shmem:69220kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2509.795418] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2509.835359] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2509.841141] Node 0 [ 2509.865479] Bluetooth: hci0 command 0x040f tx timeout [ 2509.886666] DMA free:12068kB min:204kB low:252kB high:300kB active_anon:4kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2509.937667] Bluetooth: hci3 command 0x040f tx timeout [ 2509.951540] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2509.955168] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2509.978917] Node 0 DMA32 free:476788kB min:36200kB low:45248kB high:54296kB active_anon:58180kB inactive_anon:134064kB active_file:2832kB inactive_file:5428kB unevictable:0kB writepending:96kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:7520kB pagetables:2948kB bounce:0kB free_pcp:804kB local_pcp:708kB free_cma:0kB [ 2510.008775] bridge0: port 2(bridge_slave_1) entered blocking state [ 2510.025407] bridge0: port 2(bridge_slave_1) entered disabled state [ 2510.037626] device bridge_slave_1 entered promiscuous mode [ 2510.045818] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2510.052174] lowmem_reserve[]: 0 0 0 0 0 [ 2510.056248] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2510.056846] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2510.087534] lowmem_reserve[]: 0 0 0 0 0 [ 2510.115881] Node 1 Normal free:656472kB min:53696kB low:67120kB high:80544kB active_anon:1240kB inactive_anon:68736kB active_file:2680kB inactive_file:2724kB unevictable:0kB writepending:44kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:288kB pagetables:24kB bounce:0kB free_pcp:1292kB local_pcp:736kB free_cma:0kB [ 2510.151918] lowmem_reserve[]: 0 0 0 0 0 [ 2510.156723] Node 0 DMA: 35*4kB (UME) 31*8kB (UME) 18*16kB (UME) 14*32kB (ME) 25*64kB (UME) 3*128kB (M) 3*256kB (UME) 2*512kB (ME) 3*1024kB (UME) 2*2048kB (UM) 0*4096kB = 12068kB [ 2510.178456] Node 0 DMA32: 69*4kB (UEH) 23*8kB (MEH) 4075*16kB (UMEH) 3984*32kB (UMEH) 1381*64kB (UH) 380*128kB (UH) 10*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 332732kB [ 2510.201905] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2510.239963] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 2510.249427] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2510.292618] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 2510.312952] Node 1 Normal: 15630*4kB (UM) 2320*8kB (UM) 2031*16kB (UME) 3021*32kB (UM) 4227*64kB (U) 879*128kB (U) 87*256kB (U) 8*512kB (U) 14*1024kB (U) 11*2048kB (U) 0*4096kB = 656520kB [ 2510.362287] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 2510.381841] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 2510.426937] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2510.483107] device hsr_slave_0 entered promiscuous mode [ 2510.495433] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2510.521274] device hsr_slave_1 entered promiscuous mode [ 2510.526901] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2510.552946] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 2510.560256] team0: Port device team_slave_0 added [ 2510.571043] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2510.579635] 55638 total pagecache pages [ 2510.595399] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 2510.602426] 0 pages in swap cache [ 2510.605890] Swap cache stats: add 0, delete 0, find 0/0 [ 2510.621071] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 2510.628080] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 2510.636084] Free swap = 0kB [ 2510.639119] Total swap = 0kB [ 2510.655149] 2097051 pages RAM [ 2510.658279] 0 pages HighMem/MovableOnly [ 2510.661615] team0: Port device team_slave_1 added [ 2510.679727] 363848 pages reserved [ 2510.690581] 0 pages cma reserved [ 2510.718757] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2510.761103] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2510.840921] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2510.896005] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2510.902629] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2510.978087] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2511.013140] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 2511.031022] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 2511.152372] device hsr_slave_0 entered promiscuous mode [ 2511.211295] device hsr_slave_1 entered promiscuous mode [ 2511.322785] syz-executor.0 invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=0, oom_score_adj=0 [ 2511.360886] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 2511.366269] CPU: 1 PID: 16262 Comm: syz-executor.0 Not tainted 4.14.229-syzkaller #0 [ 2511.374143] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2511.383495] Call Trace: [ 2511.386085] dump_stack+0x1b2/0x281 [ 2511.389708] dump_header+0x178/0x82f [ 2511.393415] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2511.398509] ? ___ratelimit+0x2cd/0x530 [ 2511.402476] oom_kill_process.cold+0x10/0xa40 [ 2511.406972] out_of_memory+0xe3e/0x1190 [ 2511.410949] ? oom_killer_disable+0x1c0/0x1c0 [ 2511.415445] ? mutex_trylock+0x152/0x1a0 [ 2511.419504] __alloc_pages_nodemask+0x23e1/0x2720 [ 2511.424367] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2511.429213] ? sock_alloc+0x3c/0x270 [ 2511.432943] ? cache_grow_begin+0x3f/0x700 [ 2511.437187] cache_grow_begin+0x91/0x700 [ 2511.441247] fallback_alloc+0x207/0x2c0 [ 2511.445227] kmem_cache_alloc+0x1e5/0x3c0 [ 2511.449387] sk_prot_alloc+0x5f/0x290 [ 2511.453186] sk_alloc+0x36/0xcd0 [ 2511.456535] unix_create1+0x78/0x4f0 [ 2511.460239] unix_create+0xdd/0x1c0 [ 2511.463846] __sock_create+0x303/0x620 [ 2511.467712] SyS_socket+0xd1/0x1b0 [ 2511.471233] ? move_addr_to_kernel+0x60/0x60 [ 2511.475621] ? do_syscall_64+0x4c/0x640 [ 2511.480526] ? move_addr_to_kernel+0x60/0x60 [ 2511.484929] do_syscall_64+0x1d5/0x640 [ 2511.488798] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2511.493967] RIP: 0033:0x467ac7 [ 2511.497134] RSP: 002b:00007ffe12ea1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 2511.504832] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000467ac7 [ 2511.512081] RDX: 0000000000000000 RSI: 0000000000080002 RDI: 0000000000000001 [ 2511.519331] RBP: 00000000004bf64b R08: 0000000000000004 R09: 00305f6576616c73 [ 2511.526579] R10: 0000000000000016 R11: 0000000000000246 R12: 00007ffe12ea10a0 [ 2511.533826] R13: 00000000004bf64b R14: 0000000000000003 R15: 0000000000000000 [ 2511.559333] syz-executor.1: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2511.604115] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 2511.609275] CPU: 0 PID: 16227 Comm: syz-executor.1 Not tainted 4.14.229-syzkaller #0 [ 2511.617152] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2511.626505] Call Trace: [ 2511.629103] dump_stack+0x1b2/0x281 [ 2511.632735] warn_alloc.cold+0x96/0x1cc [ 2511.636846] ? trace_event_raw_event_rdev_get_mpp+0x230/0x310 [ 2511.642731] ? zone_watermark_ok_safe+0x220/0x220 [ 2511.647567] ? usleep_range+0x130/0x130 [ 2511.650865] syz-executor.4: [ 2511.651530] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 2511.651538] page allocation failure: order:0 [ 2511.654561] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 2511.659644] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 2511.664052] ? run_timer_softirq+0x5a0/0x5a0 [ 2511.664069] __alloc_pages_nodemask+0x2127/0x2720 [ 2511.664084] ? lock_acquire+0x170/0x3f0 [ 2511.664100] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2511.664109] ? ion_page_pool_alloc+0x9e/0x1b0 [ 2511.664126] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2511.669146] syz-executor.4: [ 2511.676227] alloc_pages_current+0x155/0x260 [ 2511.676239] ion_page_pool_alloc+0x118/0x1b0 [ 2511.676248] ion_system_heap_allocate+0x133/0x8c0 [ 2511.676258] ? _raw_spin_unlock+0x29/0x40 [ 2511.676266] ? _ion_heap_freelist_drain+0x6e/0x410 [ 2511.676274] ? ion_system_contig_heap_create+0x130/0x130 [ 2511.676287] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2511.689783] page allocation failure: order:0 [ 2511.694270] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2511.694282] ion_alloc+0x27a/0x810 [ 2511.694295] ? ion_dma_buf_release+0x40/0x40 [ 2511.694310] ? __might_fault+0x177/0x1b0 [ 2511.698806] (null) [ 2511.704217] ion_ioctl+0xea/0x1f0 [ 2511.704227] ? ion_query_heaps+0x360/0x360 [ 2511.704238] ? ion_query_heaps+0x360/0x360 [ 2511.704248] do_vfs_ioctl+0x75a/0xff0 [ 2511.704260] ? ioctl_preallocate+0x1a0/0x1a0 [ 2511.710852] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 2511.711646] ? lock_downgrade+0x740/0x740 [ 2511.716023] (null) [ 2511.720849] ? __fget+0x225/0x360 [ 2511.720859] ? do_vfs_ioctl+0xff0/0xff0 [ 2511.720871] ? security_file_ioctl+0x83/0xb0 [ 2511.720887] SyS_ioctl+0x7f/0xb0 [ 2511.730862] syz-executor.4 cpuset= [ 2511.735348] ? do_vfs_ioctl+0xff0/0xff0 [ 2511.740336] / [ 2511.744728] do_syscall_64+0x1d5/0x640 [ 2511.760822] syz-executor.4 cpuset= [ 2511.761516] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2511.763641] / [ 2511.767075] RIP: 0033:0x466459 [ 2511.780826] mems_allowed=0-1 [ 2511.783700] RSP: 002b:00007f10b678e188 EFLAGS: 00000246 [ 2511.790883] mems_allowed=0-1 [ 2511.794932] ORIG_RAX: 0000000000000010 [ 2511.794940] RAX: ffffffffffffffda RBX: 000000000056c008 RCX: 0000000000466459 [ 2511.861614] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2511.868881] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2511.876138] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c008 [ 2511.883387] R13: 00007ffd58825dcf R14: 00007f10b678e300 R15: 0000000000022000 [ 2511.890651] CPU: 1 PID: 16239 Comm: syz-executor.4 Not tainted 4.14.229-syzkaller #0 [ 2511.898545] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2511.907889] Call Trace: [ 2511.909561] Mem-Info: [ 2511.910471] dump_stack+0x1b2/0x281 [ 2511.912887] active_anon:14857 inactive_anon:50700 isolated_anon:0 [ 2511.912887] active_file:15 inactive_file:13 isolated_file:0 [ 2511.912887] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2511.912887] slab_reclaimable:12251 slab_unreclaimable:120858 [ 2511.912887] mapped:52610 shmem:51990 pagetables:743 bounce:0 [ 2511.912887] free:13980 free_pcp:31 free_cma:0 [ 2511.916476] warn_alloc.cold+0x96/0x1cc [ 2511.949619] Node 0 active_anon:58188kB inactive_anon:134064kB active_file:44kB inactive_file:40kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:210440kB dirty:0kB writeback:0kB shmem:138740kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2511.953560] ? zone_watermark_ok_safe+0x220/0x220 [ 2511.953569] ? usleep_range+0x130/0x130 [ 2511.953582] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 2511.981441] Node 1 active_anon:1240kB inactive_anon:68736kB active_file:16kB inactive_file:12kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:69220kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2511.986259] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 2511.990201] Node 0 [ 2511.995282] ? run_timer_softirq+0x5a0/0x5a0 [ 2511.995299] __alloc_pages_nodemask+0x2127/0x2720 [ 2511.995315] ? lock_acquire+0x170/0x3f0 [ 2512.022115] DMA free:10956kB min:204kB low:252kB high:300kB active_anon:4kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2512.027095] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2512.029297] lowmem_reserve[]: [ 2512.033686] ? ion_page_pool_alloc+0x9e/0x1b0 [ 2512.033702] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2512.033714] ? retint_kernel+0x2d/0x2d [ 2512.038531] 0 [ 2512.042488] alloc_pages_current+0x155/0x260 [ 2512.042500] ion_page_pool_alloc+0x118/0x1b0 [ 2512.042509] ion_system_heap_allocate+0x133/0x8c0 [ 2512.042523] ? _raw_spin_unlock+0x29/0x40 [ 2512.042531] ? _ion_heap_freelist_drain+0x6e/0x410 [ 2512.042539] ? ion_system_contig_heap_create+0x130/0x130 [ 2512.042548] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2512.042561] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2512.068261] 2717 [ 2512.072950] ion_alloc+0x27a/0x810 [ 2512.072965] ? ion_dma_buf_release+0x40/0x40 [ 2512.072977] ? __might_fault+0x177/0x1b0 [ 2512.072990] ion_ioctl+0xea/0x1f0 [ 2512.072998] ? ion_query_heaps+0x360/0x360 [ 2512.073009] ? __fdget+0x196/0x1f0 [ 2512.076106] 2718 [ 2512.080583] ? fput+0xb/0x140 [ 2512.086028] 2718 [ 2512.089874] ? ion_query_heaps+0x360/0x360 [ 2512.091664] 2718 [ 2512.096042] do_vfs_ioctl+0x75a/0xff0 [ 2512.105283] ? ioctl_preallocate+0x1a0/0x1a0 [ 2512.105292] ? lock_downgrade+0x740/0x740 [ 2512.105304] ? __fget+0x225/0x360 [ 2512.109436] warn_alloc_show_mem: 1 callbacks suppressed [ 2512.109438] Mem-Info: [ 2512.114333] ? do_vfs_ioctl+0xff0/0xff0 [ 2512.114344] ? security_file_ioctl+0x83/0xb0 [ 2512.114354] SyS_ioctl+0x7f/0xb0 [ 2512.119805] active_anon:14857 inactive_anon:50700 isolated_anon:0 [ 2512.119805] active_file:15 inactive_file:13 isolated_file:0 [ 2512.119805] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2512.119805] slab_reclaimable:12251 slab_unreclaimable:120858 [ 2512.119805] mapped:52610 shmem:51990 pagetables:743 bounce:0 [ 2512.119805] free:13980 free_pcp:31 free_cma:0 [ 2512.124794] ? do_vfs_ioctl+0xff0/0xff0 [ 2512.124806] do_syscall_64+0x1d5/0x640 [ 2512.124821] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2512.129637] Node 0 [ 2512.131672] RIP: 0033:0x466459 [ 2512.131677] RSP: 002b:00007f46becae188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2512.131690] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 2512.135217] DMA32 free:17916kB min:36200kB low:45248kB high:54296kB active_anon:58184kB inactive_anon:134064kB active_file:44kB inactive_file:40kB unevictable:0kB writepending:0kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:7520kB pagetables:2948kB bounce:0kB free_pcp:124kB local_pcp:120kB free_cma:0kB [ 2512.139593] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2512.143659] Node 0 active_anon:58188kB inactive_anon:134064kB active_file:44kB inactive_file:40kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:210440kB dirty:0kB writeback:0kB shmem:138740kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2512.147055] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2512.147062] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2512.151292] lowmem_reserve[]: [ 2512.154792] R13: 00007ffe96c50ebf R14: 00007f46becae300 R15: 0000000000022000 [ 2512.158475] Bluetooth: hci0 command 0x0419 tx timeout [ 2512.159931] 0 [ 2512.162169] Bluetooth: hci3 command 0x0419 tx timeout [ 2512.172707] CPU: 1 PID: 16240 Comm: syz-executor.4 Not tainted 4.14.229-syzkaller #0 [ 2512.192727] Node 1 active_anon:1240kB inactive_anon:68736kB active_file:16kB inactive_file:12kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:69220kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2512.196096] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2512.200486] Node 0 [ 2512.203827] Call Trace: [ 2512.203845] dump_stack+0x1b2/0x281 [ 2512.203857] warn_alloc.cold+0x96/0x1cc [ 2512.203880] ? zone_watermark_ok_safe+0x220/0x220 [ 2512.240639] 0 [ 2512.241229] ? usleep_range+0x130/0x130 [ 2512.241240] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 2512.241252] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 2512.245113] 0 [ 2512.250288] ? run_timer_softirq+0x5a0/0x5a0 [ 2512.252518] 0 [ 2512.255684] __alloc_pages_nodemask+0x2127/0x2720 [ 2512.263372] 0 [ 2512.270618] ? lock_acquire+0x170/0x3f0 [ 2512.299012] DMA free:10956kB min:204kB low:252kB high:300kB active_anon:4kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2512.306229] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2512.306241] ? ion_page_pool_alloc+0x9e/0x1b0 [ 2512.341327] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2512.341346] alloc_pages_current+0x155/0x260 [ 2512.348587] lowmem_reserve[]: [ 2512.351672] ion_page_pool_alloc+0x118/0x1b0 [ 2512.351681] ion_system_heap_allocate+0x133/0x8c0 [ 2512.351694] ? _raw_spin_unlock+0x29/0x40 [ 2512.358949] 0 [ 2512.364118] ? _ion_heap_freelist_drain+0x6e/0x410 [ 2512.364128] ? ion_system_contig_heap_create+0x130/0x130 [ 2512.364140] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2512.365922] Node 0 [ 2512.371087] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2512.371098] ion_alloc+0x27a/0x810 [ 2512.371112] ? ion_dma_buf_release+0x40/0x40 [ 2512.378964] 2717 [ 2512.405747] ? __might_fault+0x177/0x1b0 [ 2512.405758] ion_ioctl+0xea/0x1f0 [ 2512.405768] ? ion_query_heaps+0x360/0x360 [ 2512.415126] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2512.417337] ? SyS_epoll_ctl+0x1e0/0x2780 [ 2512.419893] lowmem_reserve[]: [ 2512.423506] ? vmci_host_do_alloc_queuepair.constprop.0+0x350/0x350 [ 2512.423514] ? ion_query_heaps+0x360/0x360 [ 2512.423524] do_vfs_ioctl+0x75a/0xff0 [ 2512.427468] 0 [ 2512.432304] ? ioctl_preallocate+0x1a0/0x1a0 [ 2512.432312] ? lock_downgrade+0x740/0x740 [ 2512.432325] ? __fget+0x225/0x360 [ 2512.434098] 0 [ 2512.438052] ? do_vfs_ioctl+0xff0/0xff0 [ 2512.443143] 0 [ 2512.448128] ? security_file_ioctl+0x83/0xb0 [ 2512.449900] 0 [ 2512.454289] SyS_ioctl+0x7f/0xb0 [ 2512.454297] ? do_vfs_ioctl+0xff0/0xff0 [ 2512.454308] do_syscall_64+0x1d5/0x640 [ 2512.456089] 2718 [ 2512.460912] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2512.460923] RIP: 0033:0x466459 [ 2512.462701] 2718 [ 2512.466650] RSP: 002b:00007f46bec8d188 EFLAGS: 00000246 [ 2512.492235] 0 [ 2512.497050] ORIG_RAX: 0000000000000010 [ 2512.506973] RAX: ffffffffffffffda RBX: 000000000056c008 RCX: 0000000000466459 [ 2512.511377] Node 1 [ 2512.514444] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2512.518834] Normal free:27048kB min:53696kB low:67120kB high:80544kB active_anon:1240kB inactive_anon:68736kB active_file:16kB inactive_file:12kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:256kB pagetables:24kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2512.523639] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2512.523645] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c008 [ 2512.523650] R13: 00007ffe96c50ebf R14: 00007f46bec8d300 R15: 0000000000022000 [ 2512.607411] 2718 [ 2512.616655] lowmem_reserve[]: [ 2512.648475] 0 [ 2512.653646] Node 0 [ 2512.659156] 0 [ 2512.675804] DMA32 free:17916kB min:36200kB low:45248kB high:54296kB active_anon:58184kB inactive_anon:134064kB active_file:44kB inactive_file:40kB unevictable:0kB writepending:0kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:7520kB pagetables:2948kB bounce:0kB free_pcp:116kB local_pcp:0kB free_cma:0kB [ 2512.677795] 0 [ 2512.679574] lowmem_reserve[]: [ 2512.683788] 0 [ 2512.700330] 0 [ 2512.700738] 0 [ 2512.737034] 0 [ 2512.757582] 0 [ 2512.759168] Node 0 [ 2512.760989] 0 0 [ 2512.760997] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2512.821183] DMA: [ 2512.833430] lowmem_reserve[]: 0 0 0 0 0 [ 2512.840533] Node 1 Normal free:27048kB min:53696kB low:67120kB high:80544kB active_anon:1240kB inactive_anon:68736kB active_file:12kB inactive_file:16kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:256kB pagetables:24kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2512.864400] 13*4kB [ 2512.869470] lowmem_reserve[]: 0 0 0 0 0 [ 2512.876521] Node 0 DMA: 13*4kB (ME) 17*8kB (ME) 13*16kB (ME) 14*32kB (ME) 12*64kB (UME) 3*128kB (M) 3*256kB (UME) 2*512kB (ME) 3*1024kB (UME) 2*2048kB (UM) 0*4096kB = 10956kB [ 2512.882881] (ME) [ 2512.893091] Node 0 DMA32: 77*4kB (UME) 18*8kB (UME) 112*16kB (UME) 65*32kB (UME) 1052*64kB (UM) 82*128kB (UM) 46*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 93924kB [ 2512.910486] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2512.916386] 17*8kB [ 2512.921298] Node 1 Normal: 66*4kB (UM) 22*8kB (M) 31*16kB (UME) 18*32kB (UM) 635*64kB (UM) 9*128kB (M) 4*256kB (M) 2*512kB (UM) 1*1024kB (U) 10*2048kB (U) 0*4096kB = 66856kB [ 2512.939266] (ME) 13*16kB (ME) 14*32kB (ME) 12*64kB (UME) 3*128kB (M) 3*256kB (UME) 2*512kB (ME) 3*1024kB (UME) 2*2048kB [ 2512.939324] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2512.939330] (UM) [ 2512.950361] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2512.950367] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2512.950372] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2512.950376] 52956 total pagecache pages [ 2512.950385] 0 pages in swap cache [ 2512.950389] Swap cache stats: add 0, delete 0, find 0/0 [ 2512.950392] Free swap = 0kB [ 2512.950395] Total swap = 0kB [ 2512.950402] 2097051 pages RAM [ 2512.950405] 0 pages HighMem/MovableOnly [ 2512.950409] 363848 pages reserved [ 2512.950412] 0 pages cma reserved [ 2513.010742] warn_alloc_show_mem: 1 callbacks suppressed [ 2513.010746] Mem-Info: [ 2513.040790] active_anon:14857 inactive_anon:50700 isolated_anon:0 [ 2513.040790] active_file:14 inactive_file:974 isolated_file:0 [ 2513.040790] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2513.040790] slab_reclaimable:12251 slab_unreclaimable:120755 [ 2513.040790] mapped:53329 shmem:51990 pagetables:743 bounce:0 [ 2513.040790] free:59246 free_pcp:77 free_cma:0 [ 2513.130746] Node 0 active_anon:58188kB inactive_anon:134064kB active_file:44kB inactive_file:3880kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:213316kB dirty:0kB writeback:0kB shmem:138740kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2513.150713] 0*4096kB = 10956kB [ 2513.184876] Node 1 active_anon:1240kB inactive_anon:68736kB active_file:12kB inactive_file:16kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:69220kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2513.190716] Node 0 DMA32: 77*4kB (UME) 9*8kB (UME) 40*16kB (ME) 51*32kB (UME) 1177*64kB (UM) 85*128kB (UM) 46*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 100636kB [ 2513.250353] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2513.254372] Node 0 [ 2513.265871] Node 1 Normal: 66*4kB (UM) 22*8kB (M) 31*16kB (UME) 18*32kB (UM) 3837*64kB (UM) 577*128kB (UM) 5*256kB (UM) 2*512kB (UM) 72*1024kB (U) 21*2048kB (U) 1*4096kB (U) = 444072kB [ 2513.280716] DMA free:13068kB min:204kB low:252kB high:300kB active_anon:4kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2513.290098] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2513.325421] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2513.334324] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2513.349158] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2513.360734] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2513.365810] Node 0 DMA32 free:100876kB min:36200kB low:45248kB high:54296kB active_anon:58184kB inactive_anon:134064kB active_file:44kB inactive_file:4680kB unevictable:0kB writepending:148kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:7488kB pagetables:2948kB bounce:0kB free_pcp:300kB local_pcp:100kB free_cma:0kB [ 2513.370693] 53215 total pagecache pages [ 2513.406588] lowmem_reserve[]: 0 0 0 0 0 [ 2513.410600] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2513.430696] 0 pages in swap cache [ 2513.439727] Swap cache stats: add 0, delete 0, find 0/0 [ 2513.449112] Free swap = 0kB [ 2513.452863] Total swap = 0kB [ 2513.455887] 2097051 pages RAM [ 2513.458983] 0 pages HighMem/MovableOnly [ 2513.466878] lowmem_reserve[]: 0 0 0 0 0 [ 2513.470955] Node 1 Normal free:722984kB min:53696kB low:67120kB high:80544kB active_anon:1240kB inactive_anon:68736kB active_file:12kB inactive_file:16kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:256kB pagetables:24kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2513.503322] 363848 pages reserved [ 2513.506796] 0 pages cma reserved [ 2513.510161] Out of memory (oom_kill_allocating_task): Kill process 16262 (syz-executor.0) score 0 or sacrifice child [ 2513.524646] Killed process 16262 (syz-executor.0) total-vm:93120kB, anon-rss:76kB, file-rss:33400kB, shmem-rss:0kB [ 2513.544550] lowmem_reserve[]: 0 0 0 0 0 [ 2513.548563] Node 0 DMA: 13*4kB (ME) 17*8kB (ME) 13*16kB (ME) 14*32kB (ME) 24*64kB (UME) 14*128kB (UM) 4*256kB (UME) 2*512kB (ME) 3*1024kB (UME) 2*2048kB (UM) 0*4096kB = 13388kB [ 2513.569591] Node 0 DMA32: 75*4kB (E) 7*8kB (ME) 18*16kB (UME) 34*32kB (UME) 3085*64kB (UM) 363*128kB (UM) 64*256kB (UM) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 262020kB [ 2513.589531] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2513.600671] Node 1 Normal: 200*4kB (UM) 151*8kB (UM) 162*16kB (UME) 549*32kB (UM) 8457*64kB (UM) 1798*128kB (UM) 298*256kB (UM) 40*512kB (UM) 89*1024kB (U) 22*2048kB (U) 1*4096kB (U) = 1030616kB [ 2513.626989] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2513.635924] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2513.648411] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2513.657508] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2513.670883] 53659 total pagecache pages [ 2513.674994] 0 pages in swap cache [ 2513.678503] Swap cache stats: add 0, delete 0, find 0/0 [ 2513.687563] Free swap = 0kB [ 2513.690770] Bluetooth: hci2 command 0x0406 tx timeout [ 2513.693652] Total swap = 0kB 09:17:08 executing program 3: r0 = perf_event_open$cgroup(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = epoll_create(0x7) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000001c0)={0x20000005}) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r2, 0x89fa, &(0x7f0000003dc0)={'ip6gre0\x00', 0x0}) syz_genetlink_get_family_id$gtp(&(0x7f0000000080)='gtp\x00', r2) epoll_wait(r1, &(0x7f0000000100)=[{}], 0x1, 0x0) [ 2513.699225] 2097051 pages RAM [ 2513.702608] 0 pages HighMem/MovableOnly [ 2513.706586] 363848 pages reserved [ 2513.710122] 0 pages cma reserved [ 2515.900212] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready 09:17:10 executing program 0: setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000000000)={0x0, 0x1, 0x6, @random="177885c48342"}, 0x10) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000180)={0x80000001, 0x13}) socket$packet(0x11, 0x3, 0x300) [ 2515.962671] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2515.971325] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 2515.979728] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 2515.985974] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2515.993498] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2516.004195] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 2516.010361] 8021q: adding VLAN 0 to HW filter on device team0 [ 2516.019642] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 2516.026883] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2516.035638] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2516.046601] bridge0: port 1(bridge_slave_0) entered blocking state [ 2516.053117] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2516.062873] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 2516.070629] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2516.077815] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2516.086509] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2516.094758] bridge0: port 2(bridge_slave_1) entered blocking state [ 2516.101145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2516.110210] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 2516.117229] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2516.131533] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 2516.138523] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2516.155352] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 2516.163062] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2516.172429] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2516.182095] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 2516.194483] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 2516.201915] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2516.208997] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2516.222253] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2516.229847] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2516.237641] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2516.249613] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 2516.256425] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2516.265705] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2516.274798] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 2516.281129] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2516.295146] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 2516.303131] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 2516.309309] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2516.317827] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2516.327842] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2516.381871] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 2516.391425] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 2516.398546] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2516.407498] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2516.436155] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 2516.443579] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 2516.450072] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 2516.460348] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 2516.467075] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2516.474903] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2516.482423] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2516.489259] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2516.499362] device veth0_vlan entered promiscuous mode [ 2516.509366] device veth1_vlan entered promiscuous mode [ 2516.516414] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 2516.525659] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 2516.536904] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 2516.544797] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2516.552593] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2516.560013] device bridge_slave_1 left promiscuous mode [ 2516.565832] bridge0: port 2(bridge_slave_1) entered disabled state [ 2516.572966] device bridge_slave_0 left promiscuous mode [ 2516.578398] bridge0: port 1(bridge_slave_0) entered disabled state [ 2516.590301] device hsr_slave_1 left promiscuous mode [ 2516.597353] device hsr_slave_0 left promiscuous mode [ 2516.609282] team0 (unregistering): Port device team_slave_1 removed [ 2516.618322] team0 (unregistering): Port device team_slave_0 removed [ 2516.628173] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 2516.637567] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 2516.657665] bond0 (unregistering): Released all slaves [ 2516.668311] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 2516.675813] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2516.683115] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 2516.690618] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2516.698133] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2516.708521] device veth0_macvtap entered promiscuous mode [ 2516.716108] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 2516.727405] device veth1_macvtap entered promiscuous mode [ 2516.735282] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 2516.744228] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 2516.754456] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 2516.762972] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2516.773291] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2516.782443] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2516.792218] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2516.801497] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2516.811250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2516.820358] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2516.831058] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2516.841957] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 2516.848876] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2516.858102] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2516.865553] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2516.872757] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2516.880337] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2516.889018] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2516.899085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2516.908524] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2516.919274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2516.928448] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2516.938210] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2516.947588] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2516.957357] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2516.967336] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 2516.974683] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2516.982427] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2516.990151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 09:17:11 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000580)='/dev/btrfs-control\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r1) ioctl$KVM_HYPERV_EVENTFD(0xffffffffffffffff, 0x4018aebd, &(0x7f0000000000)={0x3, r1}) r2 = gettid() sched_rr_get_interval(r2, &(0x7f0000000080)) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r3, 0x89fa, &(0x7f0000003dc0)={'ip6gre0\x00', 0x0}) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000580)='/dev/btrfs-control\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r4, 0x2, r4) r5 = accept4$packet(r1, &(0x7f0000000040), &(0x7f0000000080)=0x14, 0x80000) kcmp$KCMP_EPOLL_TFD(r2, 0x0, 0x7, r3, &(0x7f00000000c0)={r4, r5}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000180)={0x80000001, 0x13}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x8, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x87}, @call={0x85, 0x0, 0x0, 0x80}, @exit, @btf_id={0x18, 0x8, 0x3, 0x0, 0x4}]}, &(0x7f00000001c0)='syzkaller\x00', 0x6, 0x0, 0x0, 0x41000, 0x4, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0xa, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x3, 0x9, 0x5, 0x2}, 0x10}, 0x78) 09:17:11 executing program 1: epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/btrfs-control\x00', 0x400103, 0x0) r1 = accept(0xffffffffffffffff, &(0x7f0000000280)=@phonet, &(0x7f0000000300)=0x80) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000580)='/dev/btrfs-control\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, r2) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000580)='/dev/btrfs-control\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r3, 0x2, r3) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x70, 0x0, 0x100, 0x70bd26, 0x25dfdbff, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x21}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xe8d}, @NBD_ATTR_SOCKETS={0x2c, 0x7, 0x0, 0x1, [{0x8, 0x1, r0}, {0x8, 0x1, r1}, {0x8, 0x1, r2}, {0x8}, {0x8, 0x1, r3}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x3ff}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000180)={0x80000001, 0x13}) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r4, 0x89fa, &(0x7f0000003dc0)={'ip6gre0\x00', 0x0}) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000000), 0x4) 09:17:11 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x8102, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000180)={0x80000001}) 09:17:11 executing program 3: r0 = perf_event_open$cgroup(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = epoll_create(0x7) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000001c0)={0x20000005}) r2 = gettid() sched_rr_get_interval(r2, &(0x7f0000000080)) r3 = gettid() sched_rr_get_interval(r3, &(0x7f0000000080)) r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vmci\x00', 0x2, 0x0) r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000580)='/dev/btrfs-control\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r5, 0x2, r5) kcmp$KCMP_EPOLL_TFD(r2, r3, 0x7, r4, &(0x7f00000000c0)={r5, r0, 0xffff}) epoll_wait(r1, &(0x7f0000000100)=[{}], 0x1, 0x0) 09:17:11 executing program 5: epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x2, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x10000, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00032abd7000fcdbdf25010000000c001000010000000000000014001f00ff01000000000000000007000000000108000b0002000006"], 0x3c}, 0x1, 0x0, 0x0, 0x4004}, 0x20000001) bind$l2tp6(0xffffffffffffffff, &(0x7f0000000300)={0xa, 0x0, 0xc6d, @loopback, 0x6, 0x2}, 0x20) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f0000000080)={0x50000010}) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r1, &(0x7f0000000040)={0x40000008}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000180)={0x80000001, 0x13}) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r2, 0x89fa, &(0x7f0000003dc0)={'ip6gre0\x00', 0x0}) 09:17:11 executing program 1: epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0xc482, 0x0) r1 = accept(0xffffffffffffffff, 0x0, &(0x7f0000000000)) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000040)=@req={0x9, 0x33e, 0x1, 0x1}, 0x10) r2 = perf_event_open$cgroup(&(0x7f0000000080)={0x3, 0x70, 0xc8, 0x80, 0x9, 0x1f, 0x0, 0x100000001, 0xc010, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x80000001, 0x0, @perf_config_ext={0x8, 0x75215b67}, 0x48c20, 0x10000, 0x34bb, 0x0, 0x7ff, 0x800, 0x2}, 0xffffffffffffffff, 0xf, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_ID(r2, 0x80082407, &(0x7f0000000100)) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000180)={0x80000001, 0x12}) 09:17:11 executing program 3: r0 = perf_event_open$cgroup(&(0x7f0000000000)={0x4, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = epoll_create(0x7) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000001c0)={0x20000005}) epoll_wait(r1, &(0x7f0000000100)=[{}], 0x1, 0x0) 09:17:11 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000180)={0x80000001, 0x13}) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000580)='/dev/btrfs-control\x00', 0x0, 0x0) r2 = socket(0x10, 0x1, 0x42) sendmsg$nl_route(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@dellink={0x50, 0x11, 0x0, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x9000, 0x85}, [@IFLA_ADDRESS={0xa, 0x1, @remote}, @IFLA_TXQLEN={0x8, 0xd, 0x5}, @IFLA_PHYS_PORT_ID={0xe, 0x22, "5cec3d11cc57d991696d"}, @IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x50}, 0x1, 0x0, 0x0, 0x32040011}, 0x20040010) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r1) setns(r1, 0x10000000) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000001800)={'wg2\x00', 0x0}) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000580)='/dev/btrfs-control\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r4, 0x2, r4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000018c0)={0x11, 0x4, &(0x7f00000001c0)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7575}, @ldst={0x2, 0x0, 0x1, 0x9, 0x7, 0xc, 0xffffffffffffffff}, @generic={0x4, 0xc, 0xd, 0x1, 0x81}], &(0x7f0000000200)='GPL\x00', 0xe7e, 0x1000, &(0x7f00000005c0)=""/4096, 0x41100, 0x3, [], r3, 0x0, r4, 0x8, &(0x7f0000001840)={0x1, 0x2}, 0x8, 0x10, &(0x7f0000001880)={0x2, 0x5, 0xffffffff, 0x2}, 0x10}, 0x78) 09:17:11 executing program 1: epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x408422, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000180)={0x80000001, 0x4, 0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_DETACH(0xffffffffffffffff, 0x7aa, &(0x7f0000000000)={{@hyper, 0x86f3}, 0x3ff, 0xfffffffd}) 09:17:11 executing program 3: r0 = perf_event_open$cgroup(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/btrfs-control\x00', 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000000c0)='siox_get_data\x00', r1}, 0x10) r2 = epoll_create(0x7) epoll_pwait(r1, &(0x7f0000000180)=[{}, {}], 0x2, 0x0, &(0x7f0000000200)={[0x7]}, 0x8) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f00000001c0)={0x20000005}) epoll_wait(r2, &(0x7f0000000100)=[{}], 0x1, 0x0) 09:17:11 executing program 3: r0 = perf_event_open$cgroup(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x80404509, &(0x7f0000000080)) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f00000001c0)={0x20000005}) epoll_create(0x1ff) epoll_wait(0xffffffffffffffff, &(0x7f00000000c0)=[{}, {}], 0x2, 0x40) read$midi(0xffffffffffffffff, &(0x7f0000000080)=""/16, 0x10) [ 2518.466125] syz-executor.4: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2518.471839] syz-executor.2: [ 2518.482318] syz-executor.5: [ 2518.485902] syz-executor.2: [ 2518.489359] page allocation failure: order:4 [ 2518.492997] page allocation failure: order:4 [ 2518.495089] syz-executor.4: [ 2518.497673] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 2518.507009] page allocation failure: order:4 [ 2518.507819] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 2518.515125] page allocation failure: order:4 [ 2518.519791] (null) [ 2518.527001] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 2518.531997] syz-executor.4 cpuset= [ 2518.533141] (null) [ 2518.539423] / mems_allowed=0-1 [ 2518.539442] CPU: 0 PID: 16706 Comm: syz-executor.4 Not tainted 4.14.229-syzkaller #0 [ 2518.539448] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2518.539454] Call Trace: [ 2518.543182] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 2518.545222] dump_stack+0x1b2/0x281 [ 2518.545236] warn_alloc.cold+0x96/0x1cc [ 2518.545248] ? zone_watermark_ok_safe+0x220/0x220 [ 2518.548456] (null) [ 2518.556290] __alloc_pages_nodemask+0x2127/0x2720 [ 2518.556315] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2518.556328] ? migrate_swap_stop+0x880/0x880 [ 2518.556336] ? lock_acquire+0x170/0x3f0 [ 2518.556347] ? wake_up_q+0x82/0xd0 [ 2518.556359] ? __mutex_unlock_slowpath+0x261/0x770 [ 2518.556374] alloc_pages_current+0x155/0x260 [ 2518.556387] ion_page_pool_alloc+0x118/0x1b0 [ 2518.556397] ion_system_heap_allocate+0x133/0x8c0 [ 2518.556405] ? ion_alloc+0x187/0x810 [ 2518.556415] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2518.556424] ? ion_system_contig_heap_create+0x130/0x130 [ 2518.556433] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2518.556444] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2518.556453] ion_alloc+0x204/0x810 [ 2518.556464] ? ion_dma_buf_release+0x40/0x40 [ 2518.556475] ? __might_fault+0x177/0x1b0 [ 2518.556484] ion_ioctl+0xea/0x1f0 [ 2518.556492] ? ion_query_heaps+0x360/0x360 [ 2518.556503] ? ion_query_heaps+0x360/0x360 [ 2518.556514] do_vfs_ioctl+0x75a/0xff0 [ 2518.556525] ? ioctl_preallocate+0x1a0/0x1a0 [ 2518.577707] syz-executor.2 cpuset= [ 2518.579138] ? lock_downgrade+0x740/0x740 [ 2518.579153] ? __fget+0x225/0x360 [ 2518.579164] ? do_vfs_ioctl+0xff0/0xff0 [ 2518.589789] / [ 2518.590081] ? security_file_ioctl+0x83/0xb0 [ 2518.609432] syz-executor.4 cpuset= [ 2518.611599] SyS_ioctl+0x7f/0xb0 [ 2518.611608] ? do_vfs_ioctl+0xff0/0xff0 [ 2518.611620] do_syscall_64+0x1d5/0x640 [ 2518.611636] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2518.611643] RIP: 0033:0x466459 [ 2518.611647] RSP: 002b:00007f46becae188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2518.611657] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 2518.611661] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2518.611669] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2518.616660] mems_allowed=0-1 [ 2518.620991] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2518.620997] R13: 00007ffe96c50ebf R14: 00007f46becae300 R15: 0000000000022000 [ 2518.628856] (null) [ 2518.654441] IPVS: ftp: loaded support on port[0] = 21 [ 2518.655011] syz-executor.5 cpuset= [ 2518.663511] / [ 2518.789119] / [ 2518.792009] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 2518.798989] CPU: 0 PID: 16690 Comm: syz-executor.2 Not tainted 4.14.229-syzkaller #0 [ 2518.806878] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2518.816230] Call Trace: [ 2518.818823] dump_stack+0x1b2/0x281 [ 2518.822461] warn_alloc.cold+0x96/0x1cc [ 2518.826439] ? zone_watermark_ok_safe+0x220/0x220 [ 2518.831301] __alloc_pages_nodemask+0x2127/0x2720 [ 2518.836185] ? lock_acquire+0x170/0x3f0 [ 2518.840152] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2518.844985] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2518.850428] ? __mutex_unlock_slowpath+0x75/0x770 [ 2518.855266] alloc_pages_current+0x155/0x260 [ 2518.859660] ion_page_pool_alloc+0x118/0x1b0 [ 2518.864052] ion_system_heap_allocate+0x133/0x8c0 [ 2518.868879] ? ion_alloc+0x187/0x810 [ 2518.872579] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2518.878012] ? ion_system_contig_heap_create+0x130/0x130 [ 2518.883469] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2518.888476] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2518.893312] ion_alloc+0x204/0x810 [ 2518.896834] ? ion_dma_buf_release+0x40/0x40 [ 2518.901235] ? __might_fault+0x177/0x1b0 [ 2518.905283] ion_ioctl+0xea/0x1f0 [ 2518.908717] ? ion_query_heaps+0x360/0x360 [ 2518.912934] ? fput+0xb/0x140 [ 2518.916024] ? sockfd_lookup_light+0xb2/0x160 [ 2518.920503] ? ion_query_heaps+0x360/0x360 [ 2518.924732] do_vfs_ioctl+0x75a/0xff0 [ 2518.928534] ? ioctl_preallocate+0x1a0/0x1a0 [ 2518.932939] ? lock_downgrade+0x740/0x740 [ 2518.937087] ? __fget+0x225/0x360 [ 2518.940548] ? do_vfs_ioctl+0xff0/0xff0 [ 2518.944514] ? security_file_ioctl+0x83/0xb0 [ 2518.948909] SyS_ioctl+0x7f/0xb0 [ 2518.952266] ? do_vfs_ioctl+0xff0/0xff0 [ 2518.956237] do_syscall_64+0x1d5/0x640 [ 2518.960117] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2518.965295] RIP: 0033:0x466459 [ 2518.968469] RSP: 002b:00007fa1e4cf5188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2518.976167] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 2518.983416] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2518.989584] mems_allowed=0-1 [ 2518.990666] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2518.990671] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2518.990677] R13: 00007ffdaec4926f R14: 00007fa1e4cf5300 R15: 0000000000022000 [ 2518.993087] Mem-Info: [ 2518.998958] CPU: 1 PID: 16720 Comm: syz-executor.2 Not tainted 4.14.229-syzkaller #0 [ 2519.001253] active_anon:15500 inactive_anon:50700 isolated_anon:0 [ 2519.001253] active_file:1896 inactive_file:5174 isolated_file:0 [ 2519.001253] unevictable:0 dirty:7 writeback:0 unstable:0 [ 2519.001253] slab_reclaimable:12225 slab_unreclaimable:120691 [ 2519.001253] mapped:57385 shmem:51989 pagetables:785 bounce:0 [ 2519.001253] free:235122 free_pcp:143 free_cma:0 [ 2519.008386] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2519.015972] Node 0 active_anon:60988kB inactive_anon:134076kB active_file:7564kB inactive_file:20628kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:229540kB dirty:24kB writeback:0kB shmem:138752kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 14336kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2519.018022] Call Trace: [ 2519.026067] Node 1 active_anon:1012kB inactive_anon:68724kB active_file:20kB inactive_file:68kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:69204kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2519.059543] dump_stack+0x1b2/0x281 [ 2519.059557] warn_alloc.cold+0x96/0x1cc [ 2519.059567] ? zone_watermark_ok_safe+0x220/0x220 [ 2519.059586] __alloc_pages_nodemask+0x2127/0x2720 [ 2519.059595] ? __schedule+0x893/0x1de0 [ 2519.059609] ? lock_acquire+0x170/0x3f0 [ 2519.059625] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2519.069393] mems_allowed=0-1 [ 2519.097250] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2519.097262] ? __mutex_unlock_slowpath+0x75/0x770 [ 2519.097277] alloc_pages_current+0x155/0x260 [ 2519.097291] ion_page_pool_alloc+0x118/0x1b0 [ 2519.110201] Node 0 [ 2519.126681] ion_system_heap_allocate+0x133/0x8c0 [ 2519.126692] ? ion_alloc+0x187/0x810 [ 2519.150211] DMA free:11072kB min:204kB low:252kB high:300kB active_anon:2052kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2519.151699] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2519.156507] lowmem_reserve[]: [ 2519.159596] ? ion_system_contig_heap_create+0x130/0x130 [ 2519.180182] 0 [ 2519.180815] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2519.185626] 2717 [ 2519.189325] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2519.242877] ion_alloc+0x204/0x810 [ 2519.246418] ? ion_dma_buf_release+0x40/0x40 [ 2519.250820] ? __might_fault+0x177/0x1b0 [ 2519.254862] ion_ioctl+0xea/0x1f0 [ 2519.258297] ? ion_query_heaps+0x360/0x360 [ 2519.260177] 2718 2718 [ 2519.262514] ? fput+0xb/0x140 [ 2519.262526] ? sockfd_lookup_light+0xb2/0x160 [ 2519.265001] 2718 [ 2519.268085] ? ion_query_heaps+0x360/0x360 [ 2519.278851] do_vfs_ioctl+0x75a/0xff0 [ 2519.282644] ? ioctl_preallocate+0x1a0/0x1a0 [ 2519.287045] ? lock_downgrade+0x740/0x740 [ 2519.291186] ? __fget+0x225/0x360 [ 2519.294637] ? do_vfs_ioctl+0xff0/0xff0 [ 2519.298610] ? security_file_ioctl+0x83/0xb0 [ 2519.303020] Node 0 [ 2519.303027] SyS_ioctl+0x7f/0xb0 [ 2519.303036] ? do_vfs_ioctl+0xff0/0xff0 [ 2519.305286] DMA32 free:764024kB min:36200kB low:45248kB high:54296kB active_anon:58936kB inactive_anon:134076kB active_file:7564kB inactive_file:20628kB unevictable:0kB writepending:24kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:7584kB pagetables:3116kB bounce:0kB free_pcp:616kB local_pcp:96kB free_cma:0kB [ 2519.308621] do_syscall_64+0x1d5/0x640 [ 2519.330184] lowmem_reserve[]: [ 2519.341446] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2519.341456] RIP: 0033:0x466459 [ 2519.356738] RSP: 002b:00007fa1e4cb3188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2519.364432] RAX: ffffffffffffffda RBX: 000000000056c0b0 RCX: 0000000000466459 [ 2519.371695] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2519.378945] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2519.380165] 0 [ 2519.386197] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c0b0 [ 2519.386203] 0 [ 2519.387981] R13: 00007ffdaec4926f R14: 00007fa1e4cb3300 R15: 0000000000022000 [ 2519.422152] CPU: 0 PID: 16707 Comm: syz-executor.5 Not tainted 4.14.229-syzkaller #0 [ 2519.430063] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2519.439411] Call Trace: [ 2519.441991] dump_stack+0x1b2/0x281 [ 2519.445613] warn_alloc.cold+0x96/0x1cc [ 2519.449582] ? zone_watermark_ok_safe+0x220/0x220 [ 2519.454424] __alloc_pages_nodemask+0x2127/0x2720 [ 2519.459260] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2519.464090] ? migrate_swap_stop+0x880/0x880 [ 2519.468481] ? lock_acquire+0x170/0x3f0 [ 2519.472441] ? wake_up_q+0x82/0xd0 [ 2519.475981] ? __mutex_unlock_slowpath+0x261/0x770 [ 2519.481013] ? retint_kernel+0x2d/0x2d [ 2519.484886] alloc_pages_current+0x155/0x260 [ 2519.489282] ion_page_pool_alloc+0x118/0x1b0 [ 2519.493674] ion_system_heap_allocate+0x133/0x8c0 [ 2519.498502] ? ion_alloc+0x187/0x810 [ 2519.502205] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2519.507636] ? ion_system_contig_heap_create+0x130/0x130 [ 2519.513070] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2519.518171] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2519.523002] ion_alloc+0x204/0x810 [ 2519.526525] ? ion_dma_buf_release+0x40/0x40 [ 2519.530916] ? __might_fault+0x177/0x1b0 [ 2519.534968] ion_ioctl+0xea/0x1f0 [ 2519.538417] ? ion_query_heaps+0x360/0x360 [ 2519.542643] ? SyS_epoll_ctl+0x1e0/0x2780 [ 2519.546777] ? ion_query_heaps+0x360/0x360 [ 2519.550999] do_vfs_ioctl+0x75a/0xff0 [ 2519.554792] ? ioctl_preallocate+0x1a0/0x1a0 [ 2519.559198] ? lock_downgrade+0x740/0x740 [ 2519.563350] ? __fget+0x225/0x360 [ 2519.567407] ? do_vfs_ioctl+0xff0/0xff0 [ 2519.571377] ? security_file_ioctl+0x83/0xb0 [ 2519.575772] SyS_ioctl+0x7f/0xb0 [ 2519.579128] ? do_vfs_ioctl+0xff0/0xff0 [ 2519.583102] do_syscall_64+0x1d5/0x640 [ 2519.587109] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2519.592477] RIP: 0033:0x466459 [ 2519.595648] RSP: 002b:00007f4d0bcd5188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2519.603366] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 2519.610624] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2519.617883] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2519.625143] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2519.632394] R13: 00007ffe1117a98f R14: 00007f4d0bcd5300 R15: 0000000000022000 [ 2519.639659] CPU: 1 PID: 16712 Comm: syz-executor.4 Not tainted 4.14.229-syzkaller #0 [ 2519.647543] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2519.650694] 0 [ 2519.656887] Call Trace: [ 2519.656893] 0 [ 2519.658685] dump_stack+0x1b2/0x281 [ 2519.666672] warn_alloc.cold+0x96/0x1cc [ 2519.670149] 0 [ 2519.670670] ? zone_watermark_ok_safe+0x220/0x220 [ 2519.670693] __alloc_pages_nodemask+0x2127/0x2720 [ 2519.672468] Node 0 [ 2519.677297] ? lock_acquire+0x170/0x3f0 [ 2519.688293] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2519.690174] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2519.693135] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2519.723463] ? __mutex_unlock_slowpath+0x75/0x770 [ 2519.728303] ? retint_kernel+0x2d/0x2d [ 2519.732197] alloc_pages_current+0x155/0x260 [ 2519.736604] ion_page_pool_alloc+0x118/0x1b0 [ 2519.741009] ion_system_heap_allocate+0x133/0x8c0 [ 2519.745848] ? ion_alloc+0x187/0x810 [ 2519.749559] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2519.750144] lowmem_reserve[]: [ 2519.754999] ? ion_system_contig_heap_create+0x130/0x130 [ 2519.755001] 0 0 [ 2519.758090] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2519.770485] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2519.775327] ion_alloc+0x204/0x810 [ 2519.778865] ? ion_dma_buf_release+0x40/0x40 [ 2519.780138] 0 0 [ 2519.783266] ? __might_fault+0x177/0x1b0 [ 2519.783267] 0 [ 2519.785240] ion_ioctl+0xea/0x1f0 [ 2519.789277] Node 1 [ 2519.791058] ? ion_query_heaps+0x360/0x360 [ 2519.791070] ? ion_query_heaps+0x360/0x360 [ 2519.791080] do_vfs_ioctl+0x75a/0xff0 [ 2519.791091] ? ioctl_preallocate+0x1a0/0x1a0 [ 2519.791100] ? lock_downgrade+0x740/0x740 [ 2519.791113] ? __fget+0x225/0x360 [ 2519.800188] Normal free:134268kB min:53696kB low:67120kB high:80544kB active_anon:1012kB inactive_anon:68724kB active_file:20kB inactive_file:68kB unevictable:0kB writepending:4kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:256kB pagetables:24kB bounce:0kB free_pcp:4kB local_pcp:0kB free_cma:0kB [ 2519.800975] ? do_vfs_ioctl+0xff0/0xff0 [ 2519.805187] lowmem_reserve[]: [ 2519.808988] ? security_file_ioctl+0x83/0xb0 [ 2519.830146] 0 [ 2519.848697] SyS_ioctl+0x7f/0xb0 [ 2519.848705] ? do_vfs_ioctl+0xff0/0xff0 [ 2519.848718] do_syscall_64+0x1d5/0x640 [ 2519.873140] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2519.878329] RIP: 0033:0x466459 [ 2519.880142] 0 [ 2519.881531] RSP: 002b:00007f46bec8d188 EFLAGS: 00000246 [ 2519.881537] 0 [ 2519.883314] ORIG_RAX: 0000000000000010 [ 2519.888662] 0 [ 2519.890440] RAX: ffffffffffffffda RBX: 000000000056c008 RCX: 0000000000466459 [ 2519.890445] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2519.890450] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2519.890454] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c008 [ 2519.890459] R13: 00007ffe96c50ebf R14: 00007f46bec8d300 R15: 0000000000022000 [ 2520.007437] 0 [ 2520.013253] Node 0 DMA: 18*4kB (UME) 37*8kB (UME) 31*16kB (UME) 25*32kB (UME) 23*64kB (UME) 12*128kB (UM) 7*256kB (UME) 3*512kB (UME) 3*1024kB (UME) 0*2048kB 0*4096kB = 11072kB [ 2520.055026] Node 0 DMA32: 83*4kB (UE) 8*8kB (UME) 10470*16kB (UME) 8733*32kB (UME) 50*64kB (UM) 2*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 450828kB [ 2520.087552] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2520.125803] Node 1 Normal: 3231*4kB (UM) 2552*8kB (UM) 2453*16kB (UME) 1899*32kB (U) 17*64kB (U) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 134444kB [ 2520.154504] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2520.180476] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2520.191045] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2520.199984] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2520.227916] 59080 total pagecache pages [ 2520.237694] 0 pages in swap cache [ 2520.244753] Swap cache stats: add 0, delete 0, find 0/0 [ 2520.249364] warn_alloc_show_mem: 3 callbacks suppressed [ 2520.249368] Mem-Info: [ 2520.261659] Free swap = 0kB [ 2520.266940] Total swap = 0kB [ 2520.274705] 2097051 pages RAM [ 2520.282269] 0 pages HighMem/MovableOnly [ 2520.282457] active_anon:15502 inactive_anon:50701 isolated_anon:0 [ 2520.282457] active_file:1925 inactive_file:5283 isolated_file:0 [ 2520.282457] unevictable:0 dirty:22 writeback:0 unstable:0 [ 2520.282457] slab_reclaimable:12217 slab_unreclaimable:119598 [ 2520.282457] mapped:57527 shmem:51991 pagetables:793 bounce:0 [ 2520.282457] free:100100 free_pcp:38 free_cma:0 [ 2520.291668] 363848 pages reserved [ 2520.337771] chnl_net:caif_netlink_parms(): no params data found [ 2520.355932] 0 pages cma reserved [ 2520.365547] syz-executor.0: page allocation failure: order:5, mode:0x1084020(GFP_ATOMIC|__GFP_COMP), nodemask=(null) [ 2520.376268] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 2520.381607] CPU: 1 PID: 16716 Comm: syz-executor.0 Not tainted 4.14.229-syzkaller #0 [ 2520.389484] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2520.398837] Call Trace: [ 2520.401426] dump_stack+0x1b2/0x281 [ 2520.405059] warn_alloc.cold+0x96/0x1cc [ 2520.409033] ? zone_watermark_ok_safe+0x220/0x220 [ 2520.413960] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2520.419414] ? wake_all_kswapds+0x175/0x360 [ 2520.423737] __alloc_pages_nodemask+0x2127/0x2720 [ 2520.428575] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2520.433592] ? __alloc_pages_nodemask+0x1a6e/0x2720 [ 2520.438615] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2520.443460] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2520.448301] ? entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2520.453674] ? calc_wheel_index+0xb1/0x1c0 [ 2520.457931] ? cache_alloc_refill+0x2fa/0x350 [ 2520.462421] ? ____cache_alloc_node+0x156/0x1d0 [ 2520.467085] cache_grow_begin+0x91/0x700 [ 2520.471156] fallback_alloc+0x207/0x2c0 [ 2520.475220] __kmalloc+0x213/0x400 [ 2520.478757] ? batadv_hash_new+0xaa/0x270 [ 2520.482905] batadv_hash_new+0xaa/0x270 [ 2520.486878] ? batadv_bla_status_update+0x2b0/0x2b0 [ 2520.491895] batadv_dat_init+0x61/0x170 [ 2520.495866] batadv_mesh_init+0x4a8/0x630 [ 2520.500009] batadv_softif_init_late+0xa26/0xc90 [ 2520.504761] ? batadv_get_strings+0x40/0x40 [ 2520.509079] ? dev_valid_name+0x1a0/0x1a0 [ 2520.513251] ? batadv_get_strings+0x40/0x40 [ 2520.517570] register_netdevice+0x291/0xe40 [ 2520.521889] ? netdev_change_features+0xa0/0xa0 [ 2520.526551] ? rtnl_create_link+0x129/0x890 [ 2520.530870] rtnl_newlink+0x14ff/0x1860 [ 2520.534839] ? rtnl_newlink+0x43d/0x1860 [ 2520.538896] ? __lock_acquire+0x5fc/0x3f20 [ 2520.543137] ? trace_hardirqs_on+0x10/0x10 [ 2520.547365] ? rtnl_dellink+0x6a0/0x6a0 [ 2520.551331] ? trace_hardirqs_on+0x10/0x10 [ 2520.555563] ? __read_once_size_nocheck.constprop.0+0x10/0x10 [ 2520.561445] ? deref_stack_reg+0x124/0x1a0 [ 2520.565707] ? lock_acquire+0x170/0x3f0 [ 2520.569677] ? lock_downgrade+0x740/0x740 [ 2520.573823] ? rtnl_dellink+0x6a0/0x6a0 [ 2520.577788] rtnetlink_rcv_msg+0x3be/0xb10 [ 2520.582018] ? rtnl_calcit.isra.0+0x3a0/0x3a0 [ 2520.586505] ? __netlink_lookup+0x345/0x5d0 [ 2520.590828] netlink_rcv_skb+0x125/0x390 [ 2520.594886] ? rtnl_calcit.isra.0+0x3a0/0x3a0 [ 2520.599375] ? netlink_ack+0x9a0/0x9a0 [ 2520.603278] netlink_unicast+0x437/0x610 [ 2520.607340] ? netlink_sendskb+0xd0/0xd0 [ 2520.611403] ? __check_object_size+0x179/0x230 [ 2520.615996] netlink_sendmsg+0x62e/0xb80 [ 2520.620056] ? nlmsg_notify+0x170/0x170 [ 2520.624040] ? security_socket_sendmsg+0x83/0xb0 [ 2520.628794] ? nlmsg_notify+0x170/0x170 [ 2520.632875] sock_sendmsg+0xb5/0x100 [ 2520.636595] SyS_sendto+0x1c7/0x2c0 [ 2520.640223] ? SyS_getpeername+0x220/0x220 [ 2520.644587] ? sock_poll+0x220/0x220 [ 2520.648310] ? SyS_socket+0x12f/0x1b0 [ 2520.652108] ? move_addr_to_kernel+0x60/0x60 [ 2520.656513] ? do_syscall_64+0x4c/0x640 [ 2520.660480] ? SyS_getpeername+0x220/0x220 [ 2520.664712] do_syscall_64+0x1d5/0x640 [ 2520.668606] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2520.673786] RIP: 0033:0x4193ec [ 2520.676966] RSP: 002b:00007ffc8c1718d0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 2520.684670] RAX: ffffffffffffffda RBX: 00000000014a4320 RCX: 00000000004193ec [ 2520.691932] RDX: 000000000000003c RSI: 00000000014a4370 RDI: 0000000000000003 [ 2520.699285] RBP: 0000000000000000 R08: 00007ffc8c171924 R09: 000000000000000c [ 2520.706545] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 2520.713798] R13: 00000000014a4370 R14: 0000000000000003 R15: 0000000000000000 [ 2520.730295] Bluetooth: hci3 command 0x0409 tx timeout [ 2520.744953] Node 0 active_anon:61000kB inactive_anon:134080kB active_file:10112kB inactive_file:8828kB unevictable:0kB isolated(anon):0kB isolated(file):236kB mapped:227908kB dirty:84kB writeback:0kB shmem:138760kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 14336kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2520.780231] Node 1 active_anon:1008kB inactive_anon:68724kB active_file:20kB inactive_file:68kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:69204kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2520.840339] Node 0 DMA free:11072kB min:204kB low:252kB high:300kB active_anon:2052kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2520.906145] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2520.911281] Node 0 DMA32 free:36184kB min:36200kB low:45248kB high:54296kB active_anon:59100kB inactive_anon:134076kB active_file:1360kB inactive_file:624kB unevictable:0kB writepending:28kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:7616kB pagetables:3148kB bounce:0kB free_pcp:524kB local_pcp:120kB free_cma:0kB [ 2520.940838] lowmem_reserve[]: 0 0 0 0 0 [ 2520.944832] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2520.970487] lowmem_reserve[]: 0 0 0 0 0 [ 2520.974497] Node 1 Normal free:53604kB min:53696kB low:67120kB high:80544kB active_anon:1048kB inactive_anon:68724kB active_file:4kB inactive_file:4kB unevictable:0kB writepending:4kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:256kB pagetables:24kB bounce:0kB free_pcp:120kB local_pcp:120kB free_cma:0kB [ 2521.004298] lowmem_reserve[]: 0 0 0 0 0 [ 2521.008299] Node 0 DMA: 18*4kB (UME) 37*8kB (UME) 31*16kB (UME) 25*32kB (UME) 23*64kB (UME) 12*128kB (UM) 7*256kB (UME) 3*512kB (UME) 3*1024kB (UME) 0*2048kB 0*4096kB = 11072kB [ 2521.016832] ODEBUG: assert_init not available (active state 0) object type: timer_list hint: (null) [ 2521.031100] Node 0 DMA32: 697*4kB (UME) 333*8kB (UME) 196*16kB (ME) 403*32kB (UME) 125*64kB (UM) 29*128kB (UM) 5*256kB (M) 4*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 36524kB [ 2521.034538] ------------[ cut here ]------------ [ 2521.054691] WARNING: CPU: 0 PID: 16716 at lib/debugobjects.c:287 debug_print_object.cold+0xa7/0xdb [ 2521.063775] Kernel panic - not syncing: panic_on_warn set ... [ 2521.063775] [ 2521.069811] Node 0 [ 2521.071126] CPU: 0 PID: 16716 Comm: syz-executor.0 Not tainted 4.14.229-syzkaller #0 [ 2521.071131] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2521.071134] Call Trace: [ 2521.071151] dump_stack+0x1b2/0x281 [ 2521.071160] panic+0x1f9/0x42d [ 2521.071169] ? add_taint.cold+0x16/0x16 [ 2521.073390] Normal: [ 2521.081340] ? debug_print_object.cold+0xa7/0xdb [ 2521.081349] ? debug_print_object.cold+0xa7/0xdb [ 2521.081356] __warn.cold+0x20/0x44 [ 2521.081365] ? ist_end_non_atomic+0x10/0x10 [ 2521.081373] ? debug_print_object.cold+0xa7/0xdb [ 2521.081381] report_bug+0x208/0x250 [ 2521.081391] do_error_trap+0x195/0x2d0 [ 2521.120042] 0*4kB [ 2521.123639] ? math_error+0x2d0/0x2d0 [ 2521.128366] 0*8kB [ 2521.131978] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2521.131991] invalid_op+0x1b/0x40 [ 2521.132001] RIP: 0010:debug_print_object.cold+0xa7/0xdb [ 2521.132004] RSP: 0018:ffff888099207248 EFLAGS: 00010086 [ 2521.132011] RAX: 0000000000000061 RBX: 0000000000000005 RCX: 0000000000000000 [ 2521.132018] RDX: 0000000000000000 RSI: ffffffff878bbbc0 RDI: ffffed1013240e3f [ 2521.150084] 0*16kB [ 2521.152186] RBP: ffffffff878b6e80 R08: 0000000000000061 R09: 0000000000000001 [ 2521.157640] 0*32kB [ 2521.162976] R10: 0000000000000000 R11: ffff888065606580 R12: 0000000000000000 [ 2521.162980] R13: 0000000000000000 R14: ffff88807c71a370 R15: 1ffff11013240e52 [ 2521.163005] ? debug_print_object.cold+0xa7/0xdb [ 2521.163016] debug_object_assert_init+0x1d3/0x2d0 [ 2521.163025] ? debug_object_active_state+0x330/0x330 [ 2521.188904] 0*64kB [ 2521.189228] ? rtnl_newlink+0x14ff/0x1860 [ 2521.196536] 0*128kB [ 2521.203726] ? rtnetlink_rcv_msg+0x3be/0xb10 [ 2521.203736] ? netlink_rcv_skb+0x125/0x390 [ 2521.203748] ? entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2521.203759] del_timer+0x5d/0xe0 [ 2521.203766] ? process_timeout+0x20/0x20 [ 2521.203777] try_to_grab_pending+0x243/0x610 [ 2521.203787] __cancel_work_timer+0x90/0x460 [ 2521.215887] oom_reaper: reaped process 16720 (syz-executor.2), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 2521.218436] ? work_on_cpu_safe+0x70/0x70 [ 2521.225289] 0*256kB [ 2521.227115] ? batadv_tvlv_handler_get+0x1db/0x2b0 [ 2521.231557] 0*512kB [ 2521.235803] batadv_nc_mesh_free+0x41/0x120 [ 2521.241196] syz-executor.2: [ 2521.244484] batadv_mesh_free+0x70/0x150 [ 2521.248517] page allocation failure: order:0 [ 2521.252902] batadv_mesh_init+0x561/0x630 [ 2521.252911] batadv_softif_init_late+0xa26/0xc90 [ 2521.252920] ? batadv_get_strings+0x40/0x40 [ 2521.252927] ? dev_valid_name+0x1a0/0x1a0 [ 2521.252936] ? batadv_get_strings+0x40/0x40 [ 2521.252946] register_netdevice+0x291/0xe40 [ 2521.257275] 0*1024kB [ 2521.267205] ? netdev_change_features+0xa0/0xa0 [ 2521.267213] ? rtnl_create_link+0x129/0x890 [ 2521.267229] rtnl_newlink+0x14ff/0x1860 [ 2521.267235] ? rtnl_newlink+0x43d/0x1860 [ 2521.267245] ? __lock_acquire+0x5fc/0x3f20 [ 2521.271439] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 2521.273684] ? trace_hardirqs_on+0x10/0x10 [ 2521.278581] (null) [ 2521.280884] ? rtnl_dellink+0x6a0/0x6a0 [ 2521.280891] ? trace_hardirqs_on+0x10/0x10 [ 2521.280901] ? __read_once_size_nocheck.constprop.0+0x10/0x10 [ 2521.280910] ? deref_stack_reg+0x124/0x1a0 [ 2521.280946] ? lock_acquire+0x170/0x3f0 [ 2521.285226] 0*2048kB [ 2521.288224] ? lock_downgrade+0x740/0x740 [ 2521.292309] syz-executor.2 cpuset= [ 2521.296733] ? rtnl_dellink+0x6a0/0x6a0 [ 2521.300914] 0*4096kB [ 2521.305605] rtnetlink_rcv_msg+0x3be/0xb10 [ 2521.309897] = 0kB [ 2521.314040] ? rtnl_calcit.isra.0+0x3a0/0x3a0 [ 2521.314050] ? __netlink_lookup+0x345/0x5d0 [ 2521.314064] netlink_rcv_skb+0x125/0x390 [ 2521.314072] ? rtnl_calcit.isra.0+0x3a0/0x3a0 [ 2521.314081] ? netlink_ack+0x9a0/0x9a0 [ 2521.314097] netlink_unicast+0x437/0x610 [ 2521.318445] / [ 2521.322725] ? netlink_sendskb+0xd0/0xd0 [ 2521.325160] Node 1 [ 2521.329758] ? __check_object_size+0x179/0x230 [ 2521.334125] mems_allowed=0-1 [ 2521.338008] netlink_sendmsg+0x62e/0xb80 [ 2521.350041] Normal: [ 2521.353443] ? nlmsg_notify+0x170/0x170 [ 2521.357670] 39*4kB [ 2521.359803] ? security_socket_sendmsg+0x83/0xb0 [ 2521.380004] (UM) [ 2521.381961] ? nlmsg_notify+0x170/0x170 [ 2521.384347] 7*8kB [ 2521.388473] sock_sendmsg+0xb5/0x100 [ 2521.400003] (UM) [ 2521.402540] SyS_sendto+0x1c7/0x2c0 [ 2521.404575] 12*16kB [ 2521.409050] ? SyS_getpeername+0x220/0x220 [ 2521.430011] (ME) [ 2521.431425] ? sock_poll+0x220/0x220 [ 2521.435451] 792*32kB [ 2521.437669] ? SyS_socket+0x12f/0x1b0 [ 2521.450198] (U) [ 2521.451640] ? move_addr_to_kernel+0x60/0x60 [ 2521.455611] 17*64kB [ 2521.457832] ? do_syscall_64+0x4c/0x640 [ 2521.479994] (U) [ 2521.480095] ? SyS_getpeername+0x220/0x220 [ 2521.482393] 0*128kB [ 2521.486605] do_syscall_64+0x1d5/0x640 [ 2521.488642] 0*256kB [ 2521.492355] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2521.492363] RIP: 0033:0x4193ec [ 2521.492367] RSP: 002b:00007ffc8c1718d0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 2521.492375] RAX: ffffffffffffffda RBX: 00000000014a4320 RCX: 00000000004193ec [ 2521.492379] RDX: 000000000000003c RSI: 00000000014a4370 RDI: 0000000000000003 [ 2521.492383] RBP: 0000000000000000 R08: 00007ffc8c171924 R09: 000000000000000c [ 2521.492390] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 2521.510015] 0*512kB [ 2521.511119] R13: 00000000014a4370 R14: 0000000000000003 R15: 0000000000000000 [ 2521.513071] 0*1024kB [ 2521.520325] Kernel Offset: disabled [ 2521.587898] Rebooting in 86400 seconds..